1. 12 Jan, 2023 2 commits
    • Lorenzo "Palinuro" Faletra's avatar
      Import Debian changes 6.0.12-1parrot1 · e295c805
      Lorenzo "Palinuro" Faletra authored
      linux (6.0.12-1parrot1) parrot-updates; urgency=medium
      .
        * Import new Debian release.
        * Update wifi patches.
      .
      linux (6.0.12-1~bpo11+1) bullseye-backports; urgency=medium
      .
        * Rebuild for bullseye-backports:
          - Change ABI number to 0.deb11.6
      .
      linux (6.0.12-1) unstable; urgency=medium
      .
        * New upstream stable update:
          https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.0.11
          - [arm*] binder: validate alloc->mm in ->mmap() handler
          - ceph: Use kcalloc for allocating multiple elements
          - ceph: fix NULL pointer dereference for req->r_session
          - wifi: mac80211: fix memory free error when registering wiphy fail
          - wifi: cfg80211: Fix bitrates overflow issue
          - wifi: mac80211_hwsim: fix debugfs attribute ps with rc table support
          - [riscv64] dts: sifive unleashed: Add PWM controlled LEDs
          - audit: fix undefined behavior in bit shift for AUDIT_BIT
          - wifi: airo: do not assign -1 to unsigned char
          - wifi: mac80211: Fix ack frame idr leak when mesh has no route
          - wifi: ath11k: Fix QCN9074 firmware boot on x86
          - [s390x] zcrypt: fix warning about field-spanning write
          - [armhf] spi: stm32: fix stm32_spi_prepare_mbr() that halves spi clk for
            every run
          - Revert "net: macsec: report real_dev features when HW offloading is
            enabled"
          - [x86] ACPI: video: Add backlight=native DMI quirk for Dell G15 5515
          - [x86] platform/x86: ideapad-laptop: Disable touchpad_switch
          - [x86] platform/x86: touchscreen_dmi: Add info for the RCA Cambio W101 v2
            2-in-1
          - [x86] platform/x86/intel/pmt: Sapphire Rapids PMT errata fix
          - [x86] platform/x86/intel/hid: Add some ACPI device IDs
          - [powerpc*] scsi: ibmvfc: Avoid path failures during live migration
          - scsi: scsi_debug: Make the READ CAPACITY response compliant with ZBC
          - drm: panel-orientation-quirks: Add quirk for Nanote UMPC-01
          - drm: panel-orientation-quirks: Add quirk for Acer Switch V 10 (SW5-017)
          - block, bfq: fix null pointer dereference in bfq_bio_bfqg()
          - [s390x] always build relocatable kernel
          - [arm64] syscall: Include asm/ptrace.h in syscall_wrapper header.
          - nvme: quiet user passthrough command errors
          - nvmet: fix memory leak in nvmet_subsys_attr_model_store_locked
          - net: wwan: iosm: fix kernel test robot reported errors
          - drm/amd/display: Zeromem mypipe heap struct before using it
          - drm/amd/display: Fix FCLK deviation and tool compile issues
          - drm/amd/display: Fix gpio port mapping issue
          - Revert "drm/amdgpu: Revert "drm/amdgpu: getting fan speed pwm for vega10
            properly""
          - drm/amdgpu: Drop eviction lock when allocating PT BO
          - drm/amd/display: only fill dirty rectangles when PSR is enabled
          - ALSA: usb-audio: add quirk to fix Hamedal C20 disconnect issue
          - [riscv64] vdso: Do not add missing symbols to version section in linker
            script
          - [mips*] pic32: treat port as signed integer
          - io_uring/poll: lockdep annote io_poll_req_insert_locked
          - xfrm: fix "disable_policy" on ipv4 early demux
          - [arm64] dts: rockchip: fix quartz64-a bluetooth configuration
          - xfrm: replay: Fix ESN wrap around for GSO
          - af_key: Fix send_acquire race with pfkey_register
          - [arm64,armhf] ASoC: sgtl5000: Reset the CHIP_CLK_CTRL reg on remove
          - ASoC: soc-pcm: Don't zero TDM masks in __soc_pcm_open()
          - [x86] hyperv: Restore VP assist page after cpu offlining/onlining
          - scsi: storvsc: Fix handling of srb_status and capacity change events
          - [amd64,arm64] PCI: hv: Only reuse existing IRTE allocation for Multi-MSI
          - [arm64] dts: rockchip: Fix Pine64 Quartz4-B PMIC interrupt
          - [x86] ASoC: max98373: Add checks for devm_kcalloc
          - regulator: core: fix kobject release warning and memory leak in
            regulator_register()
          - regulator: core: fix UAF in destroy_regulator()
          - [arm64,armhf] bus: sunxi-rsb: Remove the shutdown callback
          - [arm64,armhf] bus: sunxi-rsb: Support atomic transfers
          - [arm64] tee: optee: fix possible memory leak in optee_register_device()
          - net: liquidio: simplify if expression
          - ipvlan: hold lower dev to avoid possible use-after-free
          - rxrpc: Fix race between conn bundle lookup and bundle removal
            [ZDI-CAN-15975]
          - nfc/nci: fix race with opening and closing
          - [i386] net: pch_gbe: fix potential memleak in pch_gbe_tx_queue()
          - 9p/fd: fix issue of list_del corruption in p9_fd_cancel()
          - netfilter: conntrack: Fix data-races around ct mark
          - netfilter: nf_tables: do not set up extensions for end interval
          - iavf: Fix a crash during reset task
          - iavf: Do not restart Tx queues after reset task failure
          - iavf: remove INITIAL_MAC_SET to allow gARP to work properly
          - iavf: Fix race condition between iavf_shutdown and iavf_remove
          - [armhf] dts: imx6q-prti6q: Fix ref/tcxo-clock-frequency properties
          - net/mlx4: Check retval of mlx4_bitmap_init
          - [arm64,armhf] net: mvpp2: fix possible invalid pointer dereference
          - net/qla3xxx: fix potential memleak in ql3xxx_send()
          - [i386] net: pch_gbe: fix pci device refcount leak while module exiting
          - nfp: fill splittable of devlink_port_attrs correctly
          - nfp: add port from netdev validation for EEPROM access
          - bonding: fix ICMPv6 header handling when receiving IPv6 messages
          - macsec: Fix invalid error code set
          - [x86] drm/i915: Fix warn in intel_display_power_*_domain() functions
          - Drivers: hv: vmbus: fix double free in the error path of
            vmbus_add_channel_work()
          - Drivers: hv: vmbus: fix possible memory leak in vmbus_device_register()
          - netfilter: ipset: regression in ip_set_hash_ip.c
          - net/mlx5: Do not query pci info while pci disabled
          - net/mlx5: Fix FW tracer timestamp calculation
          - net/mlx5: SF: Fix probing active SFs during driver probe phase
          - net/mlx5: cmdif, Print info on any firmware cmd failure to tracepoint
          - net/mlx5: Fix handling of entry refcount when command is not issued to FW
          - net/mlx5: E-Switch, Set correctly vport destination
          - net/mlx5: Fix sync reset event handler error flow
          - net/mlx5e: Offload rule only when all encaps are valid
          - net: phy: at803x: fix error return code in at803x_probe()
          - tipc: set con sock in tipc_conn_alloc
          - tipc: add an extra conn_get in tipc_conn_alloc
          - tipc: check skb_linearize() return value in tipc_disc_rcv()
          - zonefs: Fix race between modprobe and mount
          - xfrm: Fix oops in __xfrm_state_delete()
          - xfrm: Fix ignored return value in xfrm6_init()
          - net: wwan: iosm: use ACPI_FREE() but not kfree() in
            ipc_pcie_read_bios_cfg()
          - sfc: fix potential memleak in __ef100_hard_start_xmit()
          - net: sched: allow act_ct to be built without NF_NAT
          - NFC: nci: fix memory leak in nci_rx_data_packet()
          - [armhf] regulator: twl6030: re-add TWL6032_SUBCLASS
          - bnx2x: fix pci device refcount leak in bnx2x_vf_is_pcie_pending()
          - [x86] cpufreq: amd-pstate: change amd-pstate driver to be built-in type
          - netfilter: ipset: restore allowing 64 clashing elements in hash:net,iface
          - netfilter: flowtable_offload: add missing locking
          - fs: do not update freeing inode i_io_list
          - blk-mq: fix queue reference leak on blk_mq_alloc_disk_for_queue failure
          - dccp/tcp: Reset saddr on failure after inet6?_hash_connect().
          - ipv4: Fix error return code in fib_table_insert()
          - [x86] arcnet: fix potential memory leak in com20020_probe()
          - [s390x] ap: fix memory leak in ap_init_qci_info()
          - [s390x] dasd: fix no record found for raw_track_access
          - fscache: fix OOB Read in __fscache_acquire_volume
          - [arm64] net: enetc: cache accesses to &priv->si->hw
          - [arm64] net: enetc: preserve TX ring priority across reconfiguration
          - virtio_net: Fix probe failed when modprobe virtio_net
          - [arm64] net: thunderx: Fix the ACPI memory leak
          - io_uring/filetable: fix file reference underflow
          - io_uring/poll: fix poll_refs race with cancelation
          - lib/vdso: use "grep -E" instead of "egrep"
          - can: gs_usb: remove dma allocations
          - [armhf] usb: dwc3: exynos: Fix remove() function
          - cifs: fix missing unlock in cifs_file_copychunk_range()
          - cifs: Use after free in debug code
          - ext4: fix use-after-free in ext4_ext_shift_extents
          - [arm64] dts: rockchip: lower rk3399-puma-haikou SD controller clock
            frequency
          - [armhf] iio: adc: aspeed: Remove the trim valid dts property.
          - iio: light: apds9960: fix wrong register for gesture gain
          - iio: core: Fix entry not deleted when iio_register_sw_trigger_type() fails
          - iio: accel: bma400: Fix memory leak in bma400_get_steps_reg()
          - [amd64] virt/sev-guest: Prevent IV reuse in the SNP guest driver
          - [x86] cpufreq: amd-pstate: cpufreq: amd-pstate: reset MSR_AMD_PERF_CTL
            register at init
          - zonefs: Fix active zone accounting
          - [arm64,armhf] spi: spi-imx: Fix spi_bus_clk if requested clock is higher
            than input clock
          - [arm64,armhf] spi: spi-imx: spi_imx_transfer_one(): check for DMA transfer
            first
          - NFSD: Fix reads with a non-zero offset that don't end on a page boundary
          - drm/amdgpu: Enable SA software trap.
          - drm/amd/display: Added debug option for forcing subvp num ways
          - drm/amd/display: Add debug option for allocating extra way for cursor
          - drm/amd/display: Update MALL SS NumWays calculation
          - drm/amd/display: Fix calculation for cursor CAB allocation
          - [arm64,armhf] usb: dwc3: gadget: conditionally remove requests
          - [arm64,armhf] usb: dwc3: gadget: Return -ESHUTDOWN on ep disable
          - [arm64,armhf] usb: dwc3: gadget: Clear ep descriptor last
          - io_uring: cmpxchg for poll arm refs release
          - io_uring: make poll refs more robust
          - io_uring: clear TIF_NOTIFY_SIGNAL if set and task_work not available
          - nilfs2: fix nilfs_sufile_mark_dirty() not set segment usage as dirty
          - mm/cgroup/reclaim: fix dirty pages throttling on cgroup v1
          - mm: vmscan: fix extreme overreclaim and swap floods
          - [x86] KVM: x86/mmu: Fix race condition in direct_page_fault
            (CVE-2022-45869)
          - [x86] KVM: x86/xen: Only do in-kernel acceleration of hypercalls for guest
            CPL0
          - [x86] KVM: x86/xen: Validate port number in SCHEDOP_poll
          - [x86] drm/i915/gvt: Get reference to KVM iff attachment to VM is
            successful
          - [x86] KVM: x86: nSVM: leave nested mode on vCPU free
          - [x86] KVM: x86: forcibly leave nested mode on vCPU reset (CVE-2022-3344)
          - [x86] KVM: x86: nSVM: harden svm_free_nested against freeing vmcb02 while
            still in use (CVE-2022-3344)
          - [x86] KVM: x86: add kvm_leave_nested
          - [x86] KVM: x86: remove exit_int_info warning in svm_handle_exit
          - [x86] KVM: Update gfn_to_pfn_cache khva when it moves within the same page
          - [x86] tsx: Add a feature bit for TSX control MSR support
          - [x86] pm: Add enumeration check before spec MSRs save/restore setup
          - [x86] ioremap: Fix page aligned size calculation in __ioremap_caller()
          - mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
          - mm: correctly charge compressed memory to its memcg
          - Input: synaptics - switch touchpad on HP Laptop 15-da3001TU to RMI mode
          - [x86] ASoC: amd: yc: Add Alienware m17 R5 AMD into DMI table
          - [x86] ASoC: Intel: bytcht_es8316: Add quirk for the Nanote UMPC-01
          - [x86] ASoC: Intel: soc-acpi: add ES83x6 support to IceLake
          - ASoC: hda: intel-dsp-config: add ES83x6 quirk for IceLake
          - [x86] ASoC: SOF: ipc3-topology: use old pipeline teardown flow with SOF2.1
            and older
          - Revert "tty: n_gsm: avoid call of sleeping functions from atomic context"
          - Revert "tty: n_gsm: replace kicktimer with delayed_work"
          - Input: goodix - try resetting the controller when no config is set
          - bpf: Convert BPF_DISPATCHER to use static_call() (not ftrace)
          - [x86] Input: soc_button_array - add use_low_level_irq module parameter
          - [x86] Input: soc_button_array - add Acer Switch V 10 to
            dmi_use_low_level_irq[]
          - Input: i8042 - apply probe defer to more ASUS ZenBook models
          - xen-pciback: Allow setting PCI_MSIX_FLAGS_MASKALL too
          - [x86] xen/platform-pci: add missing free_irq() in error path
          - [x86] platform/x86: thinkpad_acpi: Enable s2idle quirk for 21A1 machine
            type
          - [x86] platform/x86: asus-wmi: add missing pci_dev_put() in
            asus_wmi_set_xusb2pr()
          - [x86] platform/x86: acer-wmi: Enable SW_TABLET_MODE on Switch V 10
            (SW5-017)
          - [x86] platform/surface: aggregator_registry: Add support for Surface Pro 9
          - drm/amd/display: use uclk pstate latency for fw assisted mclk validation
            dcn32
          - drm/amdgpu: disable BACO support on more cards
          - zonefs: fix zone report size in __zonefs_io_error()
          - [x86] platform/surface: aggregator_registry: Add support for Surface
            Laptop 5
          - [x86] platform/x86: hp-wmi: Ignore Smart Experience App event
          - [x86] platform/x86: ideapad-laptop: Fix interrupt storm on fn-lock toggle
            on some Yoga laptops
          - [x86] platform/x86: ideapad-laptop: Add module parameters to match DMI
            quirk tables
          - tcp: configurable source port perturb table size
          - block: make blk_set_default_limits() private
          - dm-integrity: set dma_alignment limit in io_hints
          - dm-log-writes: set dma_alignment limit in io_hints
          - net: usb: qmi_wwan: add Telit 0x103a composition
          - scsi: iscsi: Fix possible memory leak when device_register() failed
          - [arm64,armhf] gpu: host1x: Avoid trying to use GART on Tegra20
          - dm integrity: flush the journal on suspend
          - dm integrity: clear the journal on suspend
          - fuse: lock inode unconditionally in fuse_fallocate()
          - btrfs: free btrfs_path before copying root refs to userspace
          - btrfs: free btrfs_path before copying inodes to userspace
          - btrfs: free btrfs_path before copying fspath to userspace
          - btrfs: free btrfs_path before copying subvol info to userspace
          - btrfs: zoned: fix missing endianness conversion in sb_write_pointer
          - btrfs: use kvcalloc in btrfs_get_dev_zone_info
          - btrfs: sysfs: normalize the error handling branch in btrfs_init_sysfs()
          - btrfs: do not modify log tree while holding a leaf from fs tree locked
          - [x86] drm/i915/ttm: never purge busy objects
          - drm/display/dp_mst: Fix drm_dp_mst_add_affected_dsc_crtcs() return code
          - drm/amd/display: No display after resume from WB/CB
          - drm/amdgpu/psp: don't free PSP buffers on suspend
          - drm/amdgpu: Enable Aldebaran devices to report CU Occupancy
          - drm/amd/amdgpu: reserve vm invalidation engine for firmware
          - drm/amd/display: Update soc bounding box for dcn32/dcn321
          - drm/amdgpu: always register an MMU notifier for userptr
          - drm/amdgpu: Partially revert "drm/amdgpu: update drm_display_info
            correctly when the edid is read"
          - bpf: Add explicit cast to 'void *' for __BPF_DISPATCHER_UPDATE()
          https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.0.12
          - btrfs: qgroup: fix sleep from invalid context bug in
            btrfs_qgroup_inherit()
          - drm/amdgpu: move setting the job resources
          - drm/amdgpu: cleanup error handling in amdgpu_cs_parser_bos
          - drm/amdgpu: fix userptr HMM range handling v2
          - drm/amd/pm: add smu_v13_0_10 driver if version
          - drm/amd/pm: update driver-if header for smu_v13_0_10
          - drm/amd/pm: update driver if header for smu_13_0_7
          - [arm64] clk: qcom: gdsc: add missing error handling
          - [arm64] clk: qcom: gdsc: Remove direct runtime PM calls
          - bpf, perf: Use subprog name when reporting subprog ksymbol
          - scripts/faddr2line: Fix regression in name resolution on ppc64le
          - [x86] hwmon: (i5500_temp) fix missing pci_disable_device()
          - hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails
          - [arm64,armhf] clocksource/drivers/arm_arch_timer: Fix XGene-1 TVAL
            register math error
          - bpf: Do not copy spin lock field from user in bpf_selem_alloc
          - of: property: decrement node refcount in of_fwnode_get_reference_args()
          - ixgbevf: Fix resource leak in ixgbevf_init_module()
          - i40e: Fix error handling in i40e_init_module()
          - iavf: Fix error handling in iavf_init_module()
          - e100: Fix possible use after free in e100_xmit_prepare
          - net/mlx5: DR, Fix uninitialized var warning
          - net/mlx5: E-switch, Destroy legacy fdb table when needed
          - net/mlx5: E-switch, Fix duplicate lag creation
          - net/mlx5: Fix uninitialized variable bug in outlen_write()
          - net/mlx5e: Fix use-after-free when reverting termination table
          - can: sja1000_isa: sja1000_isa_probe(): add missing free_sja1000dev()
          - [i386] can: cc770: cc770_isa_probe(): add missing free_cc770dev()
          - vfs: fix copy_file_range() averts filesystem freeze protection
          - qlcnic: fix sleep-in-atomic-context bugs caused by msleep
          - aquantia: Do not purge addresses when setting the number of rings
          - wifi: cfg80211: fix buffer overflow in elem comparison
          - wifi: cfg80211: don't allow multi-BSSID in S1G
          - wifi: mac8021: fix possible oob access in ieee80211_get_rate_duration
          - net: phy: fix null-ptr-deref while probe() failed
          - net: net_netdev: Fix error handling in ntb_netdev_init_module()
          - net/9p: Fix a potential socket leak in p9_socket_open
          - net: wwan: iosm: fix kernel test robot reported error
          - net: wwan: iosm: fix dma_alloc_coherent incompatible pointer type
          - net: wwan: iosm: fix crash in peek throughput test
          - net: wwan: iosm: fix incorrect skb length
          - mptcp: don't orphan ssk in mptcp_close()
          - mptcp: fix sleep in atomic at close time
          - tipc: re-fetch skb cb after tipc_msg_validate
          - net: mdiobus: fix unbalanced node reference count
          - afs: Fix fileserver probe RTT handling
          - net: tun: Fix use-after-free in tun_detach()
          - net/mlx5: Lag, Fix for loop when checking lag
          - packet: do not set TP_STATUS_CSUM_VALID on CHECKSUM_COMPLETE
          - sctp: fix memory leak in sctp_stream_outq_migrate()
          - afs: Fix server->active leak in afs_put_server
          - [x86] hwmon: (coretemp) Check for null before removing sysfs attrs
          - [x86] hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new()
          - [x86] hwmon: (asus-ec-sensors) Add checks for devm_kcalloc
          - [riscv64] vdso: fix section overlapping under some conditions
          - [riscv64] mm: Proper page permissions after initmem free
          - ALSA: dice: fix regression for Lexicon I-ONIX FW810S
          - nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry()
          - [x86] bugs: Make sure MSR_SPEC_CTRL is updated properly upon resume from
            S3
          - [x86] pinctrl: intel: Save and restore pins in "direct IRQ" mode
          - v4l2: don't fall back to follow_pfn() if pin_user_pages_fast() fails
          - mm: migrate: fix THP's mapcount on isolation
          - net: stmmac: Set MAC's flow control register to reflect current settings
          - mmc: core: Fix ambiguous TRIM and DISCARD arg
          - [amd64,armhf] mmc: sdhci-esdhc-imx: correct CQHCI exit halt state check
          - mmc: sdhci: Fix voltage switch delay
          - drm/amdgpu: temporarily disable broken Clang builds due to blown
            stack-frame
          - drm/amdgpu: enable Vangogh VCN indirect sram mode
          - [x86] drm/i915: Fix negative value passed as remaining time
          - [x86] drm/i915: Never return 0 if not all requests retired
          - tracing/osnoise: Fix duration type
          - tracing: Fix race where histograms can be called before the event
          - tracing: Free buffers when a used dynamic event is removed
          - ASoC: ops: Fix bounds check for _sx controls
          - [arm64,armhf] pinctrl: single: Fix potential division by zero
          - [riscv64] Sync efi page table's kernel mappings before switching
          - [riscv64] fix race when vmap stack overflow
          - [riscv64] kexec: Fixup irq controller broken in kexec crash path
          - nvme: fix SRCU protection of nvme_ns_head list
          - [amd64] iommu/vt-d: Fix PCI device refcount leak in has_external_pci()
          - [amd64] iommu/vt-d: Fix PCI device refcount leak in dmar_dev_scope_init()
          - ipv4: Handle attempt to delete multipath route when fib_info contains an
            nh reference (CVE-2022-3435)
          - ipv4: Fix route deletion when nexthop info is not specified
          - i2c: Restore initial power state if probe fails
          - [arm64] i2c: qcom-geni: fix error return code in geni_i2c_gpi_xfer
          - [arm64,armhf] i2c: imx: Only DMA messages with I2C_M_DMA_SAFE flag set
          - [amd64,arm64] ACPI: HMAT: remove unnecessary variable initialization
          - [amd64,arm64] ACPI: HMAT: Fix initiator registration for single-initiator
            systems
          - char: tpm: Protect tpm_pm_suspend with locks
          - ipc/sem: Fix dangling sem_array access in semtimedop race
          - proc: avoid integer type confusion in get_proc_long
          - proc: proc_skip_spaces() shouldn't think it is working on C strings
      .
        [ Salvatore Bonaccorso ]
        * [rt] Refresh "serial: 8250: implement write_atomic"
        * Bump ABI to 6
        * [s390x] debian/config: Drop explicit enable of RELOCATABLE.
        * [x86] drivers/cpufreq: Change X86_AMD_PSTATE from module to built-in
        * xen/netback: Ensure protocol headers don't fall in the non-linear area
          (XSA-423, CVE-2022-3643)
        * xen/netback: don't call kfree_skb() with interrupts disabled (XSA-424,
          CVE-2022-42328, CVE-2022-42329)
      .
      linux (6.0.10-2) unstable; urgency=medium
      .
        * [x86] drm/i915: fix TLB invalidation for Gen12 video and compute engines
          (CVE-2022-4139)
      .
      linux (6.0.10-1) unstable; urgency=medium
      .
        * New upstream stable update:
          https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.0.9
          - [x86] thunderbolt: Add DP OUT resource when DP tunnel is discovered
          - [x86] drm/i915/gvt: Add missing vfio_unregister_group_dev() call
          - KVM: debugfs: Return retval of simple_attr_open() if it fails
          - [x86] drm/i915: Allow more varied alternate fixed modes for panels
          - [x86] drm/i915: Simplify intel_panel_add_edid_alt_fixed_modes()
          - [x86] drm/i915/sdvo: Grab mode_config.mutex during LVDS init to avoid
            WARNs
          - drm/amd/display: Acquire FCLK DPM levels on DCN32
          - drm/amd/display: Limit dcn32 to 1950Mhz display clock
          - drm/amd/display: Set memclk levels to be at least 1 for dcn32
          - HID: wacom: Fix logic used for 3rd barrel switch emulation
          - [armhf] phy: stm32: fix an error code in probe
          - wifi: cfg80211: silence a sparse RCU warning
          - wifi: cfg80211: fix memory leak in query_regdb_file()
          - soundwire: qcom: reinit broadcast completion
          - soundwire: qcom: check for outanding writes before doing a read
          - bpf, verifier: Fix memory leak in array reallocation for stack state
          - bpf, sockmap: Fix the sk->sk_forward_alloc warning of
            sk_stream_kill_queues
          - wifi: mac80211: fix general-protection-fault in
            ieee80211_subif_start_xmit()
          - wifi: mac80211: Set TWT Information Frame Disabled bit as 1
          - bpftool: Fix NULL pointer dereference when pin {PROG, MAP, LINK} without
            FILE
          - [x86,arm64] HID: hyperv: fix possible memory leak in mousevsc_probe()
          - [arm*] drm/vc4: hdmi: Fix HSM clock too low on Pi4
          - bpf, sock_map: Move cancel_work_sync() out of sock lock
          - [amd64,arm64] PCI: hv: Fix the definition of vector in
            hv_compose_msi_msg()
          - bpf: Add helper macro bpf_for_each_reg_in_vstate
          - bpf: Fix wrong reg type conversion in release_reference()
          - net: gso: fix panic on frag_list with mixed head alloc types
          - macsec: delete new rxsc when offload fails
          - macsec: fix secy->n_rx_sc accounting
          - macsec: fix detection of RXSCs when toggling offloading
          - macsec: clear encryption keys from the stack after setting up offload
          - net: tun: Fix memory leaks of napi_get_frags
          - bnxt_en: Fix possible crash in bnxt_hwrm_set_coal()
          - bnxt_en: fix potentially incorrect return value for ndo_rx_flow_steer
          - capabilities: fix undefined behavior in bit shift for CAP_TO_MASK
          - [s390x] KVM: s390: pv: don't allow userspace to set the clock under PV
          - [s390x] KVM: s390: pci: Fix allocation size of aift kzdev elements
          - hamradio: fix issue of dev reference count leakage in bpq_device_event()
          - [amd64] net: wwan: iosm: fix memory leak in ipc_wwan_dellink
          - net: wwan: mhi: fix memory leak in mhi_mbim_dellink
          - [arm*] drm/vc4: Fix missing platform_unregister_drivers() call in
            vc4_drm_register()
          - tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
          - [x86] platform/x86: p2sb: Don't fail if unknown CPU is found
          - ipv6: addrlabel: fix infoleak when sending struct ifaddrlblmsg to network
          - can: af_can: fix NULL pointer dereference in can_rx_register()
          - [x86] drm/i915/psr: Send update also on invalidate
          - [x86] drm/i915: Do not set cache_dirty for DGFX
          - [arm64,armhf] net: stmmac: dwmac-meson8b: fix
            meson8b_devm_clk_prepare_enable()
          - tipc: fix the msg->req tlv len check in
            tipc_nl_compat_name_table_dump_header
          - [amd64] dmanegine: idxd: reformat opcap output to match bitmap_parse()
            input
          - [amd64] dmaengine: idxd: Fix max batch size for Intel IAA
          - [amd64] dmaengine: idxd: fix RO device state error after been
            disabled/reset
          - [arm64] dmaengine: mv_xor_v2: Fix a resource leak in mv_xor_v2_remove()
          - [armhf] dmaengine: stm32-dma: fix potential race between pause and resume
          - [arm64] drivers: net: xgene: disable napi when register irq failed in
            xgene_enet_open()
          - netfilter: nfnetlink: fix potential dead lock in nfnetlink_rcv_msg()
          - netfilter: Cleanup nft_net->module_list from nf_tables_exit_net()
          - net: tun: call napi_schedule_prep() to ensure we own a napi
          - [amd64] net: wwan: iosm: fix memory leak in ipc_pcie_read_bios_cfg
          - [amd64] net: wwan: iosm: fix invalid mux header type
          - net/mlx5: Bridge, verify LAG state when adding bond to bridge
          - net/mlx5: Allow async trigger completion execution on single CPU systems
          - net/mlx5: E-switch, Set to legacy mode if failed to change switchdev mode
          - net/mlx5: fw_reset: Don't try to load device in case PCI isn't working
          - net/mlx5e: Add missing sanity checks for max TX WQE size
          - net/mlx5e: Fix tc acts array not to be dependent on enum order
          - net/mlx5e: TC, Fix wrong rejection of packet-per-second policing
          - net/mlx5e: E-Switch, Fix comparing termination table instance
          - ice: Fix spurious interrupt during removal of trusted VF
          - iavf: Fix VF driver counting VLAN 0 filters
          - [armhf] net: cpsw: disable napi in cpsw_ndo_open()
          - net: cxgb3_main: disable napi when bind qsets failed in cxgb_up()
          - [x86] stmmac: intel: Update PCH PTP clock rate from 200MHz to 204.8MHz
          - mctp: Fix an error handling path in mctp_init()
          - cxgb4vf: shut down the adapter when t4vf_update_port_info() failed in
            cxgb4vf_open()
          - net: phy: mscc: macsec: clear encryption keys when freeing a flow
          - net: atlantic: macsec: clear encryption keys from the stack
          - ethernet: s2io: disable napi when start nic failed in s2io_card_up()
          - [armel,armhf] net: mv643xx_eth: disable napi when init rxq or txq failed
            in mv643xx_eth_open()
          - ALSA: memalloc: Don't fall back for SG-buffer with IOMMU
          - net: macvlan: fix memory leaks of macvlan_common_newlink
          - [riscv64] process: fix kernel info leakage
          - [riscv64] vdso: fix build with llvm
          - [riscv64] fix reserved memory setup
          - [arm64] efi: Fix handling of misaligned runtime regions and drop warning
          - [mips*] jump_label: Fix compat branch range check
          - drm/amdgpu: Fix the lpfn checking condition in drm buddy
          - [arm64] mmc: sdhci-of-arasan: Fix SDHCI_RESET_ALL for CQHCI
          - [arm64,armhf] mmc: sdhci-tegra: Fix SDHCI_RESET_ALL for CQHCI
          - [arm64,armhf] mmc: sdhci-esdhc-imx: use the correct host caps for
            MMC_CAP_8_BIT_DATA
          - ALSA: hda/hdmi - enable runtime pm for more AMD display audio
          - ALSA: hda/ca0132: add quirk for EVGA Z390 DARK
          - ALSA: hda: fix potential memleak in 'add_widget_node'
          - ALSA: hda/realtek: Add quirk for ASUS Zenbook using CS35L41
          - ALSA: hda/realtek: Add Positivo C6300 model quirk
          - ALSA: usb-audio: Yet more regression for for the delayed card registration
          - ALSA: usb-audio: Add quirk entry for M-Audio Micro
          - ALSA: usb-audio: Add DSD support for Accuphase DAC-60
          - vmlinux.lds.h: Fix placement of '.data..decrypted' section
          - ata: libata-scsi: fix SYNCHRONIZE CACHE (16) command failure
          - nilfs2: fix deadlock in nilfs_count_free_blocks()
          - nilfs2: fix use-after-free bug of ns_writer on remount
          - [x86] drm/i915/dmabuf: fix sg_table handling in map_dma_buf
          - drm/amd/display: Fix reg timeout in enc314_enable_fifo
          - drm/amd/pm: update SMU IP v13.0.4 msg interface header
          - drm/amd/display: Update SR watermarks for DCN314
          - drm/amdgpu: workaround for TLB seq race
          - drm/amdgpu: disable BACO on special BEIGE_GOBY card
          - [x86] platform/x86: hp_wmi: Fix rfkill causing soft blocked wifi
          - btrfs: fix match incorrectly in dev_args_match_device
          - btrfs: zoned: clone zoned device info when cloning a device
          - btrfs: zoned: initialize device's zone info for seeding
          - io_uring: check for rollover of buffer ID when providing buffers
          - [arm64] phy: qcom-qmp-combo: fix NULL-deref on runtime resume
          - [arm64,armhf] mms: sdhci-esdhc-imx: Fix SDHCI_RESET_ALL for CQHCI
          - udf: Fix a slab-out-of-bounds write bug in udf_find_entry()
          - [x86] arch/x86/mm/hugetlbpage.c: pud_huge() returns 0 when using 2-level
            paging (Closes: #1023025)
          - [amd64,arm64] mm: hugetlb_vmemmap: include missing linux/moduleparam.h
          - dmaengine: idxd: Do not enable user type Work Queue without Shared Virtual
            Addressing
          - [amd64] mm/memremap.c: map FS_DAX device memory as decrypted
          - mm/shmem: use page_mapping() to detect page cache for uffd continue
          - can: j1939: j1939_send_one(): fix missing CAN header initialization
          - can: isotp: fix tx state handling for echo tx processing
          - [x86] KVM: x86/mmu: Block all page faults during kvm_zap_gfn_range()
          - [x86] KVM: x86/pmu: Do not speculatively query Intel GP PMCs that don't
            exist yet
          - [x86] KVM: x86: use a separate asm-offsets.c file
          - [x86] KVM: SVM: replace regs argument of __svm_vcpu_run() with vcpu_svm
          - [x86] KVM: SVM: adjust register allocation for __svm_vcpu_run()
          - [x86] KVM: SVM: Only dump VMSA to klog at KERN_DEBUG level
          - [x86] KVM: SVM: retrieve VMCB from assembly
          - [x86] KVM: SVM: move guest vmsave/vmload back to assembly
          - can: dev: fix skb drop check
          - ALSA: memalloc: Try dma_alloc_noncontiguous() at first
          - [x86] cpu: Restore AMD's DE_CFG MSR after resume
          https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.0.10
          - [arm64] drm/msm/gpu: Fix crash during system suspend after unbind
          - [x86] ASoC: rt5682s: Fix the TDM Tx settings
          - [x86] ASoC: Intel: sof_sdw: add quirk variant for LAPBC710 NUC15
          - [x86] ASoC: Intel: sof_rt5682: Add quirk for Rex board
          - [x86] ASoC: amd: yc: Adding Lenovo ThinkBook 14 Gen 4+ ARA and Lenovo
            ThinkBook 16 Gen 4+ ARA to the Quirks List
          - [x86] ASoC: amd: yc: Add Lenovo Thinkbook 14+ 2022 21D0 to quirks table
          - drm/amdgpu: Adjust MES polling timeout for sriov
          - [x86] platform/x86: thinkpad_acpi: Fix reporting a non present second fan
            on some models
          - [x86] platform/x86/intel: pmc/core: Add Raptor Lake support to pmc core
            driver
          - drm/amd/display: Remove wrong pipe control lock
          - drm/amd/display: Don't return false if no stream
          - drm/scheduler: fix fence ref counting
          - ACPI: scan: Add LATT2021 to acpi_ignore_dep_ids[]
          - btrfs: raid56: properly handle the error when unable to find the missing
            stripe
          - NFSv4: Retry LOCK on OLD_STATEID during delegation return
          - SUNRPC: Fix crasher in gss_unwrap_resp_integ()
          - [x86] ACPI: x86: Add another system to quirk list for forcing
            StorageD3Enable
          - block: blk_add_rq_to_plug(): clear stale 'last' after flush
          - [arm64,armhf] i2c: tegra: Allocate DMA memory for DMA engine
          - [x86] i2c: i801: add lis3lv02d's I2C address for Vostro 5568
          - btrfs: remove pointless and double ulist frees in error paths of qgroup
            tests
          - drm/amd/display: Ignore Cable ID Feature
          - drm/amd/display: Enable timing sync on DCN32
          - drm/amdgpu: set fb_modifiers_not_supported in vkms
          - drm/amd: Fail the suspend if resources can't be evicted
          - drm/amd/display: Fix DCN32 DSC delay calculation
          - drm/amd/display: Use forced DSC bpp in DML
          - drm/amd/display: Round up DST_after_scaler to nearest int
          - drm/amd/display: Investigate tool reported FCLK P-state deviations
          - Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm
          - [x86] cpu: Add several Intel server CPU model numbers
          - cifs: always iterate smb sessions using primary channel
          - [arm64] mm: fold check for KFENCE into can_set_direct_map()
          - [arm64] fix rodata=full again
          - hugetlb: rename remove_huge_page to hugetlb_delete_from_page_cache
          - hugetlbfs: don't delete error page from pagecache
          - [x86] KVM: SVM: remove dead field from struct svm_cpu_data
          - [x86] KVM: SVM: do not allocate struct svm_cpu_data dynamically
          - [x86] KVM: SVM: restore host save area from assembly
          - [x86] KVM: SVM: move MSR_IA32_SPEC_CTRL save/restore to assembly
          - [arm64] dts: qcom: sa8155p-adp: Specify which LDO modes are allowed
          - [arm64] dts: qcom: sa8295p-adp: Specify which LDO modes are allowed
          - [arm64] dts: qcom: sc8280xp-crd: Specify which LDO modes are allowed
          - [arm64] dts: qcom: sm8350-hdk: Specify which LDO modes are allowed
          - [armhf] spi: stm32: Print summary 'callbacks suppressed' message
          - ASoC: core: Fix use-after-free in snd_soc_exit()
          - [arm64] ASoC: fsl_asrc fsl_esai fsl_sai: allow CONFIG_PM=N
          - [arm64] tty: serial: fsl_lpuart: don't break the on-going transfer when
            global reset
          - [arm64,armhf] serial: imx: Add missing .thaw_noirq hook
          - tty: n_gsm: fix sleep-in-atomic-context bug in gsm_control_send
          - ASoC: rt5514: fix legacy dai naming
          - ASoC: rt5677: fix legacy dai naming
          - bpf, test_run: Fix alignment problem in bpf_prog_test_run_skb()
          - bnxt_en: refactor bnxt_cancel_reservations()
          - bnxt_en: fix the handling of PCIE-AER
          - ASoC: soc-utils: Remove __exit for snd_soc_util_exit()
          - [arm64,armhf] pinctrl: rockchip: list all pins in a possible mux route for
            PX30
          - scsi: scsi_transport_sas: Fix error handling in sas_phy_add()
          - sctp: remove the unnecessary sinfo_stream check in
            sctp_prsctp_prune_unsent
          - sctp: clear out_curr if all frag chunks of current msg are pruned
          - erofs: clean up .read_folio() and .readahead() in fscache mode
          - erofs: get correct count for unmapped range in fscache mode
          - block: sed-opal: kmalloc the cmd/resp buffers
          - nfsd: put the export reference in nfsd4_verify_deleg_dentry
          - bpf: Fix memory leaks in __check_func_call
          - io_uring: calculate CQEs from the user visible value
          - nvmet: fix a memory leak
          - parport_pc: Avoid FIFO port location truncation
          - pinctrl: devicetree: fix null pointer dereferencing in pinctrl_dt_to_map
          - [arm*] drm/vc4: kms: Fix IS_ERR() vs NULL check for vc4_kms
          - [arm64,armhf] drm/panel: simple: set bpc field for logic technologies
            displays
          - drm/drv: Fix potential memory leak in drm_dev_init()
          - [arm64] dts: imx8mm-tqma8mqml-mba8mx: Fix USB DR
          - erofs: put metabuf in error path in fscache mode
          - ata: libata-transport: fix double ata_host_put() in ata_tport_add()
          - ata: libata-transport: fix error handling in ata_tport_add()
          - ata: libata-transport: fix error handling in ata_tlink_add()
          - ata: libata-transport: fix error handling in ata_tdev_add()
          - nfp: change eeprom length to max length enumerators
          - [mips*] fix duplicate definitions for exported symbols
          - io_uring/poll: fix double poll req->flags races
          - cifs: Fix connections leak when tlink setup failed
          - bpf: Initialize same number of free nodes for each pcpu_freelist
          - ata: libata-core: do not issue non-internal commands once EH is pending
          - mISDN: fix possible memory leak in mISDN_dsp_element_register()
          - net: hinic: Fix error handling in hinic_module_init()
          - net: phy: dp83867: Fix SGMII FIFO depth for non OF devices
          - net: stmmac: ensure tx function is not running in stmmac_xdp_release()
          - [arm64] soc: imx8m: Enable OCOTP clock before reading the register
          - net: liquidio: release resources when liquidio driver open failed
          - mISDN: fix misuse of put_device() in mISDN_register_device()
          - net: macvlan: Use built-in RCU list checking
          - bnxt_en: Remove debugfs when pci_register_driver failed
          - [arm64,armhf] drm/lima: Fix opp clkname setting in case of missing
            regulator
          - net: mhi: Fix memory leak in mhi_net_dellink()
          - [arm64,armhf] net: dsa: make dsa_master_ioctl() see through
            port_hwtstamp_get() shims
          - xen/pcpu: fix possible memory leak in register_pcpu()
          - erofs: fix missing xas_retry() in fscache mode
          - mlxsw: Avoid warnings when not offloaded FDB entry with IPv6 is removed
          - net: ena: Fix error handling in ena_init()
          - [arm64] net: hns3: fix incorrect hw rss hash type of rx packet
          - [arm64] net: hns3: fix return value check bug of rx copybreak
          - [arm64] net: hns3: fix setting incorrect phy link ksettings for firmware
            in resetting process
          - bridge: switchdev: Fix memory leaks when changing VLAN protocol
          - drbd: use after free in drbd_create_device()
          - [x86] platform/x86/intel: pmc: Don't unconditionally attach Intel PMC when
            virtualized
          - [x86] platform/surface: aggregator: Do not check for repeated unsequenced
            packets
          - netfs: Fix missing xas_retry() calls in xarray iteration
          - netfs: Fix dodgy maths
          - cifs: add check for returning value of SMB2_close_init
          - [arm64,armhf] net: dsa: don't leak tagger-owned storage on switch driver
            unbind
          - cifs: Fix wrong return value checking when GETFLAGS
          - [x86] net: thunderbolt: Fix error handling in tbnet_init()
          - cifs: add check for returning value of SMB2_set_info_init
          - block: make dma_alignment a stacking queue_limit
          - dm-crypt: provide dma_alignment limit in io_hints
          - ftrace: Fix the possible incorrect kernel message
          - ftrace: Optimize the allocation for mcount entries
          - ftrace: Fix null pointer dereference in ftrace_add_mod()
          - ring_buffer: Do not deactivate non-existant pages
          - tracing: Fix memory leak in tracing_read_pipe()
          - tracing/ring-buffer: Have polling block on watermark
          - tracing: Fix memory leak in test_gen_synth_cmd() and
            test_empty_synth_event()
          - tracing: Fix wild-memory-access in register_synth_event()
          - tracing: Fix race where eprobes can be called before the event
          - tracing: kprobe: Fix potential null-ptr-deref on trace_event_file in
            kprobe_event_gen_test_exit()
          - tracing: kprobe: Fix potential null-ptr-deref on trace_array in
            kprobe_event_gen_test_exit()
          - [x86] rethook: fix a potential memleak in rethook_alloc()
          - [amd64] platform/x86/amd: pmc: Remove more CONFIG_DEBUG_FS checks
          - [amd64] platform/x86/amd: pmc: Add new ACPI ID AMDI0009
          - drm/amd/pm: enable runpm support over BACO for SMU13.0.7
          - drm/amd/pm: enable runpm support over BACO for SMU13.0.0
          - drm/amd/pm: fix SMU13 runpm hang due to unintentional workaround
          - drm/display: Don't assume dual mode adaptors support i2c sub-addressing
          - drm/amd/display: Fix invalid DPIA AUX reply causing system hang
          - drm/amd/display: Add HUBP surface flip interrupt handler
          - drm/amd/display: Fix access timeout to DPIA AUX at boot time
          - drm/amd/display: Support parsing VRAM info v3.0 from VBIOS
          - drm/amd/display: Fix optc2_configure warning on dcn314
          - drm/amd/display: don't enable DRM CRTC degamma property for DCE
          - drm/amd/display: Fix prefetch calculations for dcn32
          - ALSA: usb-audio: Drop snd_BUG_ON() from snd_usbmidi_output_open()
          - ALSA: hda/realtek: fix speakers for Samsung Galaxy Book Pro
          - ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy Book Pro 360
          - [arm64,armhf] Revert "usb: dwc3: disable USB core PHY management"
          - [arm64,armhf] usb: dwc3: Do not get extcon device when usb-role-switch is
            used
          - io_uring: update res mask in io_poll_check_events
          - nvme-pci: add NVME_QUIRK_BOGUS_NID for Micron Nitro
          - nvme-pci: add NVME_QUIRK_BOGUS_NID for Netac NV7000
          - slimbus: stream: correct presence rate frequencies
          - speakup: fix a segfault caused by switching consoles
          - USB: serial: option: add Sierra Wireless EM9191
          - USB: serial: option: remove old LARA-R6 PID
          - USB: serial: option: add u-blox LARA-R6 00B modem
          - USB: serial: option: add u-blox LARA-L6 modem
          - USB: serial: option: add Fibocom FM160 0x0111 composition
          - usb: add NO_LPM quirk for Realforce 87U Keyboard
          - [x86] usb: typec: tipd: Prevent uninitialized event{1,2} in IRQ handler
          - iio: accel: bma400: Ensure VDDIO is enable defore reading the chip ID.
          - iio: pressure: ms5611: fixed value compensation bug
          - iio: pressure: ms5611: changed hardcoded SPI speed to value limited
          - dm bufio: Fix missing decrement of no_sleep_enabled if
            dm_bufio_client_create failed
          - dm ioctl: fix misbehavior if list_versions races with module loading
          - serial: 8250: Fall back to non-DMA Rx if IIR_RDI occurs
          - serial: 8250: Flush DMA Rx on RLSI
          - [x86] serial: 8250_lpss: Configure DMA also w/o DMA filter
          - [x86] serial: 8250_lpss: Use 16B DMA burst with Elkhart Lake
          - io_uring: fix tw losing poll events
          - io_uring: fix multishot accept request leaks
          - io_uring: fix multishot recv request leaks
          - io_uring: disallow self-propelled ring polling
          - ceph: avoid putting the realm twice when decoding snaps fails
          - Input: iforce - invert valid length check when fetching device IDs
          - maccess: Fix writing offset in case of fault in
            strncpy_from_kernel_nofault()
          - net: phy: marvell: add sleep time after enabling the loopback bit
          - [s390x] scsi: zfcp: Fix double free of FSF request when qdio send fails
          - [amd64] iommu/vt-d: Preset Access bit for IOVA in FL non-leaf paging
            entries
          - [amd64] iommu/vt-d: Set SRE bit only when hardware has SRS cap
          - firmware: coreboot: Register bus in module init
          - mmc: core: properly select voltage range without power cycle
          - mmc: sdhci-pci-o2micro: fix card detect fail issue caused by CD# debounce
            timeout
          - mmc: sdhci-pci: Fix possible memory leak caused by missing pci_dev_put()
          - docs: update mediator contact information in CoC doc
          - [s390x] dcssblk: fix deadlock when adding a DCSS
          - [x86] misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram()
          - blk-cgroup: properly pin the parent in blkcg_css_online
          - [amd64] x86/sgx: Add overflow check in sgx_validate_offset_length()
          - [x86] fpu: Drop fpregs lock before inheriting FPU permissions
          - [x86] perf/x86/amd/uncore: Fix memory leak for events array
          - [x86] perf/x86/intel/pt: Fix sampling using single range output
          - nvme: restrict management ioctls to admin
          - nvme: ensure subsystem reset is single threaded (CVE-2022-3169)
          - [x86] ASoC: SOF: topology: No need to assign core ID if token parsing
            failed
          - perf: Improve missing SIGTRAP checking
          - vfio: Rename vfio_ioctl_check_extension()
          - vfio: Split the register_device ops call into functions
          - [x86] perf/x86/amd: Fix crash due to race between amd_pmu_enable_all, perf
            NMI and throttling
          - ring-buffer: Include dropped pages in counting dirty patches
          - tracing: Fix warning on variable 'struct trace_array'
          - net: usb: smsc95xx: fix external PHY reset
          - net: use struct_group to copy ip/ipv6 header addresses
          - scsi: target: tcm_loop: Fix possible name leak in tcm_loop_setup_hba_bus()
          - scsi: scsi_debug: Fix possible UAF in sdebug_add_host_helper()
          - kprobes: Skip clearing aggrprobe's post_handler in kprobe-on-ftrace case
          - tracing: Fix potential null-pointer-access of entry in list 'tr->err_log'
          - [arm64] mm: fix incorrect file_map_count for non-leaf pmd/pud
          - Input: i8042 - fix leaking of platform device on module removal
          - macvlan: enforce a consistent minimal mtu
          - tcp: cdg: allow tcp_cdg_release() to be called multiple times
          - kcm: avoid potential race in kcm_tx_work (CVE-2022-3521)
          - [x86] KVM: x86/xen: Fix eventfd error handling in kvm_xen_eventfd_assign()
          - 9p: trans_fd/p9_conn_cancel: drop client lock earlier
          - gfs2: Check sb_bsize_shift after reading superblock
          - gfs2: Switch from strlcpy to strscpy
          - 9p/trans_fd: always use O_NONBLOCK read/write
          - netlink: Bounds-check struct nlmsgerr creation
          - wifi: wext: use flex array destination for memcpy()
          - rseq: Use pr_warn_once() when deprecated/unknown ABI flags are encountered
          - mm: fs: initialize fsdata passed to write_begin/write_end interface
          - net/9p: use a dedicated spinlock for trans_fd
          - bpf: Prevent bpf program recursion for raw tracepoint probes
          - ntfs: fix use-after-free in ntfs_attr_find()
          - ntfs: fix out-of-bounds read in ntfs_attr_find()
          - ntfs: check overflow when iterating ATTR_RECORDs
      .
        [ Santiago Ruano Rincón ]
        * net/cdc_ncm: Fix multicast RX support for CDC NCM devices with ZLP
          (Closes: #1024328)
      .
        [ Salvatore Bonaccorso ]
        * Bump ABI to 5
        * net: neigh: decrement the family specific qlen (Closes: #1024070)
      .
      linux (6.0.8-1) unstable; urgency=medium
      .
        * New upstream stable update:
          https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.0.8
          - [arm64,armhf] usb: dwc3: gadget: Force sending delayed status during soft
            disconnect
          - [arm64,armhf] usb: dwc3: gadget: Don't delay End Transfer on
            delayed_status
          - RDMA/cma: Use output interface for net_dev check
          - [amd64] IB/hfi1: Correctly move list in sc_disable()
          - [arm64] RDMA/hns: Disable local invalidate operation
          - [arm64] RDMA/hns: Fix NULL pointer problem in free_mr_init()
          - RDMA/rxe: Fix mr leak in RESPST_ERR_RNR
          - NFSv4: Fix a potential state reclaim deadlock
          - NFSv4.1: Handle RECLAIM_COMPLETE trunking errors
          - NFSv4.1: We must always send RECLAIM_COMPLETE after a reboot
          - SUNRPC: Fix null-ptr-deref when xps sysfs alloc failed
          - NFSv4.2: Fixup CLONE dest file size for zero-length count
          - nfs4: Fix kmemleak when allocate slot failed
          - RDMA/core: Fix null-ptr-deref in ib_core_cleanup()
          - RDMA/qedr: clean up work queue on failure in qedr_alloc_resources()
          - [arm64,armhf] net: dsa: fall back to default tagger if we can't load the
            one from DT
          - nfc: nxp-nci: Fix potential memory leak in nxp_nci_send()
          - [arm64,armhf] net: fec: fix improper use of NETDEV_TX_BUSY
          - [amd64,i386] ata: pata_legacy: fix pdc20230_set_piomode()
          - net: sched: Fix use after free in red_enqueue()
          - net: tun: fix bugs for oversize packet when napi frags enabled
          - netfilter: nf_tables: netlink notifier might race to release objects
          - netfilter: nf_tables: release flow rule object from commit path
          - sfc: Fix an error handling path in efx_pci_probe()
          - nfsd: fix nfsd_file_unhash_and_dispose
          - nfsd: fix net-namespace logic in __nfsd_file_cache_purge
          - ipvs: use explicitly signed chars
          - ipvs: fix WARNING in __ip_vs_cleanup_batch()
          - ipvs: fix WARNING in ip_vs_app_net_cleanup()
          - rose: Fix NULL pointer dereference in rose_send_frame()
          - mISDN: fix possible memory leak in mISDN_register_device()
          - btrfs: fix inode list leak during backref walking at
            resolve_indirect_refs()
          - btrfs: fix inode list leak during backref walking at find_parent_nodes()
          - btrfs: fix ulist leaks in error paths of qgroup self tests
          - netfilter: ipset: enforce documented limit to prevent allocating huge
            memory
          - Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu
          - Bluetooth: hci_conn: Fix CIS connection dst_type handling
          - Bluetooth: virtio_bt: Use skb_put to set length
          - Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
          - Bluetooth: L2CAP: Fix memory leak in vhci_write
          - Bluetooth: hci_conn: Fix not restoring ISO buffer count on disconnect
          - net: mdio: fix undefined behavior in bit shift for __mdiobus_register
          - net/smc: Fix possible leaked pernet namespace in smc_init()
          - net, neigh: Fix null-ptr-deref in neigh_table_clear()
          - bridge: Fix flushing of dynamic FDB entries
          - ipv6: fix WARNING in ip6_route_net_exit_late()
          - vsock: fix possible infinite sleep in vsock_connectible_wait_data()
          - [arm64] media: rkisp1: Fix source pad format configuration
          - [arm64] media: rkisp1: Don't pass the quantization to rkisp1_csm_config()
          - [arm64] media: rkisp1: Initialize color space on resizer sink and source
            pads
          - [arm64] media: rkisp1: Use correct macro for gradient registers
          - [arm64] media: rkisp1: Zero v4l2_subdev_format fields in when validating
            links
          - media: dvb-frontends/drxk: initialize err to 0
          - [arm64] media: meson: vdec: fix possible refcount leak in vdec_probe()
          - [arm64,armhf] media: hantro: Store HEVC bit depth in context
          - [arm64,armhf] media: hantro: HEVC: Fix auxilary buffer size calculation
          - [arm64,armhf] media: hantro: HEVC: Fix chroma offset computation
          - [arm*] drm/vc4: hdmi: Check the HSM rate at runtime_resume
          - ACPI: APEI: Fix integer overflow in ghes_estatus_pool_init()
          - [arm*] hwrng: bcm2835 - use hwrng_msleep() instead of cpu_relax()
          - io_uring: don't iopoll from io_ring_ctx_wait_and_kill()
          - scsi: core: Restrict legal sdev_state transitions via sysfs
          - HID: saitek: add madcatz variant of MMO7 mouse device ID
          - drm/amdgpu: set vm_update_mode=0 as default for Sienna Cichlid in SRIOV
            case
          - drm/amd/pm: skip loading pptable from driver on secure board for
            smu_v13_0_10
          - drm/amdgpu: Program GC registers through RLCG interface in gfx_v11/gmc_v11
          - drm/amdgpu: dequeue mes scheduler during fini
          - nvme-pci: disable write zeroes on various Kingston SSD
          - bio: safeguard REQ_ALLOC_CACHE bio put
          - [arm64] dts: imx8mm: Enable CPLD_Dn pull down resistor on MX8Menlo
          - efi/tpm: Pass correct address to memblock_reserve
          - [arm64,armhf] drm/rockchip: dw_hdmi: filter regulator -EPROBE_DEFER error
            messages
          - [arm64,armhf] drm/rockchip: fix fbdev on non-IOMMU devices
          - [x86] drm/i915: stop abusing swiotlb_max_segment
          - block: Fix possible memory leak for rq_wb on add_disk failure
          - blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
          - i2c: piix4: Fix adapter not be removed in piix4_remove()
          - fscrypt: stop using keyrings subsystem for fscrypt_master_key
          - fscrypt: fix keyring memory leak on mount failure
          - btrfs: fix lost file sync on direct IO write with nowait and dsync iocb
          - btrfs: fix tree mod log mishandling of reallocated nodes
          - btrfs: fix type of parameter generation in btrfs_get_dentry
          - btrfs: don't use btrfs_chunk::sub_stripes from disk
          - btrfs: fix a memory allocation failure test in btrfs_submit_direct
          - [amd64,arm64] ACPI: NUMA: Add CXL CFMWS 'nodes' to the possible nodes set
          - ftrace: Fix use-after-free for dynamic ftrace_ops
          - tracing/fprobe: Fix to check whether fprobe is registered correctly
          - fprobe: Check rethook_alloc() return in rethook initialization
          - tracing: kprobe: Fix memory leak in test_gen_kprobe/kretprobe_cmd()
          - kprobe: reverse kp->flags when arm_kprobe failed
          - ring-buffer: Check for NULL cpu_buffer in ring_buffer_wake_waiters()
            (Closes: #1023726)
          - tracing/histogram: Update document for KEYS_MAX size
          - capabilities: fix potential memleak on error path from
            vfs_getxattr_alloc()
          - fuse: add file_modified() to fallocate
          - fuse: fix readdir cache race
          - efi: random: reduce seed size to 32 bytes
          - efi: random: Use 'ACPI reclaim' memory for random seed
          - efi: efivars: Fix variable writes with unsupported query_variable_store()
            (Closes: #1022900)
          - net/ulp: remove SOCK_SUPPORT_ZC from tls sockets
          - [arm64] entry: avoid kprobe recursion
          - [armhf] dts: imx6dl-yapp4: Do not allow PM to switch PU regulator off on
            Q/QP
          - [x86] perf/x86/intel: Fix pebs event constraints for ICL
          - [x86] perf/x86/intel: Add Cooper Lake stepping to isolation_ucodes[]
          - [x86] perf/x86/intel: Fix pebs event constraints for SPR
          - net: remove SOCK_SUPPORT_ZC from sockmap
          - net: also flag accepted sockets supporting msghdr originated zerocopy
          - ext4: fix warning in 'ext4_da_release_space'
          - ext4: fix BUG_ON() when directory entry has invalid rec_len
          - ext4: update the backup superblock's at the end of the online resize
            (Closes: #1023450)
          - [x86] syscall: Include asm/ptrace.h in syscall_wrapper header
          - [x86] KVM: x86: Mask off reserved bits in CPUID.80000006H
          - [x86] KVM: x86: Mask off reserved bits in CPUID.8000001AH
          - [x86] KVM: x86: Mask off reserved bits in CPUID.80000008H
          - [x86] KVM: x86: Mask off reserved bits in CPUID.80000001H
          - [x86] KVM: x86: Mask off reserved bits in CPUID.8000001FH
          - [x86] KVM: VMX: Advertise PMU LBRs if and only if perf supports LBRs
          - [x86] KVM: VMX: Fold vmx_supported_debugctl() into
            vcpu_supported_debugctl()
          - [x86] KVM: VMX: Ignore guest CPUID for host userspace writes to DEBUGCTL
          - [x86] KVM: VMX: fully disable SGX if SECONDARY_EXEC_ENCLS_EXITING
            unavailable
          - [x86] KVM: Initialize gfn_to_pfn_cache locks in dedicated helper
          - [x86] KVM: Reject attempts to consume or refresh inactive gfn_to_pfn_cache
          - [arm64] KVM: arm64: Fix SMPRI_EL1/TPIDR2_EL0 trapping on VHE
          - [x86] KVM: x86: smm: number of GPRs in the SMRAM image depends on the
            image format
          - [x86] KVM: x86: emulator: em_sysexit should update ctxt->mode
          - [x86] KVM: x86: emulator: introduce emulator_recalc_and_set_mode
          - [x86] KVM: x86: emulator: update the emulation mode after rsm
          - [x86] KVM: x86: emulator: update the emulation mode after CR0 write
          - ext4,f2fs: fix readahead of verity data
          - cifs: fix regression in very old smb1 mounts
          - [arm64,armhf] drm/rockchip: dsi: Clean up 'usage_mode' when failing to
            attach
          - [arm64,armhf] drm/rockchip: dsi: Force synchronous probe
          - drm/amdgpu: disable GFXOFF during compute for GFX11
          - drm/amd/display: Update latencies on DCN321
          - drm/amd/display: Update DSC capabilitie for DCN314
          - [x86] drm/i915/sdvo: Filter out invalid outputs more sensibly
          - [x86] drm/i915/sdvo: Setup DDC fully before output init
          - wifi: brcmfmac: Fix potential buffer overflow in brcmf_fweh_event_worker()
            (CVE-2022-3628)
      .
        [ Vincent Blut ]
        * [x86] drivers/platform/x86: Enable GIGABYTE_WMI as module
          (Closes: #1023613)
      .
        [ Salvatore Bonaccorso ]
        * Bump ABI to 4
      .
      linux (6.0.7-1) unstable; urgency=medium
      .
        * New upstream stable update:
          https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.0.7
          - can: j1939: transport: j1939_session_skb_drop_old():
            spin_unlock_irqrestore() before kfree_skb()
          - can: kvaser_usb: Fix possible completions during init_completion
          - ALSA: Use del_timer_sync() before freeing timer
          - ALSA: hda/realtek: Add quirk for ASUS Zenbook using CS35L41
          - ALSA: usb-audio: Add quirks for M-Audio Fast Track C400/600
          - ALSA: hda/realtek: Add another HP ZBook G9 model quirks
          - ALSA: control: add snd_ctl_rename()
          - ALSA: hda/realtek: Use snd_ctl_rename() to rename a control
          - ALSA: emu10k1: Use snd_ctl_rename() to rename a control
          - ALSA: ac97: Use snd_ctl_rename() to rename a control
          - ALSA: usb-audio: Use snd_ctl_rename() to rename a control
          - ALSA: ca0106: Use snd_ctl_rename() to rename a control
          - ALSA: au88x0: use explicitly signed char
          - ALSA: rme9652: use explicitly signed char
          - USB: add RESET_RESUME quirk for NVIDIA Jetson devices in RCM
          - usb: gadget: uvc: limit isoc_sg to super speed gadgets
          - Revert "usb: gadget: uvc: limit isoc_sg to super speed gadgets"
          - usb: gadget: uvc: fix dropped frame after missed isoc
          - usb: gadget: uvc: fix sg handling in error case
          - usb: gadget: uvc: fix sg handling during video encode
          - [armhf] usb: gadget: aspeed: Fix probe regression
          - [arm64,armhf] usb: dwc3: gadget: Stop processing more requests on IMI
          - [arm64,armhf] usb: dwc3: gadget: Don't set IMI for no_interrupt
          - [arm64,armhf] usb: dwc3: gadget: Force sending delayed status during soft
            disconnect
          - [arm64,armhf] usb: dwc3: gadget: Don't delay End Transfer on
            delayed_status
          - usb: typec: ucsi: Check the connection on resume
          - usb: typec: ucsi: acpi: Implement resume callback
          - [arm64,armhf] usb: dwc3: st: Rely on child's compatible instead of name
          - [arm64,armhf] usb: dwc3: Don't switch OTG -> peripheral if extcon is
            present
          - usb: xhci: add XHCI_SPURIOUS_SUCCESS to ASM1042 despite being a V0.96
            controller
          - squashfs: fix read regression introduced in readahead code
            (Closes: #1023167)
          - squashfs: fix extending readahead beyond end of file
          - squashfs: fix buffer release race condition in readahead code
          - xhci: Add quirk to reset host back to default state at shutdown
          - xhci-pci: Set runtime PM as default policy on all xHC 1.2 or later devices
          - xhci: Remove device endpoints from bandwidth list when freeing the device
          - iio: light: tsl2583: Fix module unloading
          - iio: temperature: ltc2983: allocate iio channels once
          - iio: adxl372: Fix unsafe buffer attributes
          - fbdev: smscufx: Fix several use-after-free bugs
          - [x86] cpufreq: intel_pstate: Read all MSRs on the target CPU
          - [x86] cpufreq: intel_pstate: hybrid: Use known scaling factor for P-cores
          - fs/binfmt_elf: Fix memory leak in load_elf_binary()
          - exec: Copy oldsighand->action under spin-lock
          - mac802154: Fix LQI recording
          - scsi: qla2xxx: Use transport-defined speed mask for supported_speeds
          - drm/amdgpu: Fix VRAM BO swap issue
          - drm/amdgpu: Fix for BO move issue
          - [x86] drm/i915: Extend Wa_1607297627 to Alderlake-P
          - drm/amdgpu: Remove ATC L2 access for MMHUB 2.1.x
          - drm/amdgpu: disallow gfxoff until GC IP blocks complete s2idle resume
          - drm/amdgpu: fix pstate setting issue
          - drm/amd/display: Revert logic for plane modifiers
          - [arm64] drm/msm: fix use-after-free on probe deferral
          - [arm64] drm/msm/dsi: fix memory corruption with too many bridges
          - [arm64] drm/msm/hdmi: fix memory corruption with too many bridges
          - [arm64] drm/msm/hdmi: fix IRQ lifetime
          - [arm64] drm/msm/dp: fix memory corruption with too many bridges
          - [arm64] drm/msm/dp: fix aux-bus EP lifetime
          - [arm64] drm/msm/dp: fix IRQ lifetime
          - [arm64] drm/msm/dp: fix bridge lifetime
          - random: use arch_get_random*_early() in random_init()
          - mmc: block: Remove error check of hw_reset on reset
          - mmc: queue: Cancel recovery work on cleanup
          - mmc: core: Fix kernel panic when remove non-standard SDIO card
          - mmc: core: Fix WRITE_ZEROES CQE handling
          - mmc: sdhci-pci-core: Disable ES for ASUS BIOS on Jasper Lake
          - [arm64,armhf] mmc: sdhci-esdhc-imx: Propagate ESDHC_FLAG_HS400* only on
            8bit bus
          - mm: migrate: fix return value if all subpages of THPs are migrated
            successfully
          - mm,madvise,hugetlb: fix unexpected data loss with MADV_DONTNEED on
            hugetlbfs
          - mm/huge_memory: do not clobber swp_entry_t during THP split
          - mm: prep_compound_tail() clear page->private
          - kernfs: fix use-after-free in __kernfs_remove
          - Revert "dt-bindings: pinctrl-zynqmp: Add output-enable configuration"
          - pinctrl: Ingenic: JZ4755 bug fixes
          - [s390x] boot: add secure boot trailer
          - [s390x] cio: fix out-of-bounds access on cio_ignore free
          - [s390x] uaccess: add missing EX_TABLE entries to __clear_user()
          - [s390x] futex: add missing EX_TABLE entry to __futex_atomic_op()
          - [s390x] pci: add missing EX_TABLE entries to
            __pcistg_mio_inuser()/__pcilg_mio_inuser()
          - ethtool: eeprom: fix null-deref on genl_info in dump
          - fbdev/core: Avoid uninitialized read in
            aperture_remove_conflicting_pci_device()
          - [amd64,arm64] ACPI: PCC: Fix unintentional integer overflow
          - net: ieee802154: fix error return code in dgram_bind()
          - media: v4l2: Fix v4l2_i2c_subdev_set_name function documentation
          - [arm64] drm/msm/a6xx: Replace kcalloc() with kvzalloc()
          - [arm64] drm/msm/dp: add atomic_check to bridge ops
          - [arm64] drm/msm: Fix return type of mdp4_lvds_connector_mode_valid
          - [arm64] drm/msm/dp: cleared DP_DOWNSPREAD_CTRL register before start link
            training
          - [arm64] ASoC: qcom: lpass-cpu: mark HDMI TX registers as volatile
          - [arm64] drm/msm/a6xx: Fix kvzalloc vs state_kcalloc usage
          - erofs: fix illegal unmapped accesses in z_erofs_fill_inode_lazy()
          - erofs: fix up inplace decompression success rate
          - [arm64] pinctrl: qcom: Avoid glitching lines when we first mux to output
          - [arm64] spi: qup: support using GPIO as chip select line
          - [x86] fpu: Configure init_fpstate attributes orderly
          - [x86] fpu: Fix the init_fpstate size check with the actual size
          - [x86] fpu: Exclude dynamic states from init_fpstate
          - sched/core: Fix comparison in sched_group_cookie_match()
          - bpf: prevent decl_tag from being referenced in func_proto
          - mtd: core: add missing of_node_get() in dynamic partitions code
          - [x86] ASoC: SOF: Intel: pci-mtl: fix firmware name
          - [armhf] spi: aspeed: Fix window offset of CE1
          - [arm64] ASoC: qcom: lpass-cpu: Mark HDMI TX parity register as volatile
          - [x86] ASoC: Intel: common: add ACPI matching tables for Raptor Lake
          - [x86] ASoC: SOF: Intel: pci-tgl: use RPL specific firmware definitions
          - [x86] ASoC: SOF: Intel: pci-tgl: fix ADL-N descriptor
          - ALSA: ac97: fix possible memory leak in snd_ac97_dev_register()
          - [x86] perf/x86/intel/lbr: Use setup_clear_cpu_cap() instead of
            clear_cpu_cap()
          - rcu: Keep synchronize_rcu() from enabling irqs in early boot
          - tipc: fix a null-ptr-deref in tipc_topsrv_accept
          - [arm64] net: netsec: fix error handling in netsec_register_mdio()
          - net: hinic: fix incorrect assignment issue in hinic_set_interrupt_cfg()
          - net: hinic: fix memory leak when reading function table
          - net: hinic: fix the issue of CMDQ memory leaks
          - net: hinic: fix the issue of double release MBOX callback of VF
          - [arm64] net: macb: Specify PHY PM management done by MAC
          - [x86] unwind/orc: Fix unreliable stack dump with gcov
          - [x86] fpu: Fix copy_xstate_to_uabi() to copy init states correctly
          - [amd64,arm64] amd-xgbe: Yellow carp devices do not need rrc
          - [amd64,arm64] amd-xgbe: fix the SFP compliance codes check for DAC cables
          - [amd64,arm64] amd-xgbe: add the bit rate quirk for Molex cables
          - [x86] drm/i915/dgfx: Keep PCI autosuspend control 'on' by default on all
            dGPU
          - [x86] drm/i915/dp: Reset frl trained flag before restarting FRL training
          - atlantic: fix deadlock at aq_nic_stop
          - net: fix UAF issue in nfqnl_nf_hook_drop() when ops_init() failed
          - tcp: fix a signed-integer-overflow bug in tcp_add_backlog()
          - tcp: fix indefinite deferral of RTO with SACK reneging
          - mptcp: set msk local address earlier
          - can: mcp251x: mcp251x_can_probe(): add missing unregister_candev() in
            error path
          - PM: hibernate: Allow hybrid sleep to work with s2idle
          - media: vivid: s_fbuf: add more sanity checks
          - media: vivid: dev->bitmap_cap wasn't freed in all cases
          - media: v4l2-dv-timings: add sanity checks for blanking values
          - media: videodev2.h: V4L2_DV_BT_BLANKING_HEIGHT should check 'interlaced'
          - media: vivid: set num_in/outputs to 0 if not supported
          - ipv6: ensure sane device mtu in tunnels
          - i40e: Fix ethtool rx-flow-hash setting for X722
          - i40e: Fix VF hang when reset is triggered on another VF
          - i40e: Fix flow-type by setting GL_HASH_INSET registers
          - net: ksz884x: fix missing pci_disable_device() on error in pcidev_init()
          - PM: domains: Fix handling of unavailable/disabled idle states
          - [arm64,armhf] net: fec: limit register access on i.MX6UL
          - openvswitch: switch from WARN to pr_warn
          - nh: fix scope used to find saddr when adding non gw nh
          - net/mlx5e: Do not increment ESN when updating IPsec ESN state
          - net/mlx5: Wait for firmware to enable CRS before pci_restore_state
          - net/mlx5: DR, Fix matcher disconnect error flow
          - net/mlx5e: Extend SKB room check to include PTP-SQ
          - net/mlx5e: Update restore chain id for slow path packets
          - net/mlx5: ASO, Create the ASO SQ with the correct timestamp format
          - net/mlx5: Fix possible use-after-free in async command interface
          - net/mlx5e: TC, Reject forwarding from internal port to internal port
          - net/mlx5: Update fw fatal reporter state on PCI handlers successful
            recover
          - net/mlx5: Fix crash during sync firmware reset
          - net: do not sense pfmemalloc status in skb_append_pagefrags()
          - [arm64] net: enetc: survive memory pressure without crashing
          - [arm64] Add AMPERE1 to the Spectre-BHB affected list
          - tcp/udp: Fix memory leak in ipv6_renew_options(). (CVE-2022-3524)
      .
        [ Salvatore Bonaccorso ]
        * wifi: ath11k: avoid deadlock during regulatory update in
          ath11k_regd_update() (Closes: #1023329)
        * Bump ABI to 3 (Fixes FTBFS on arm64 and armhf) (Closes: #1023298)
        * Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM
          (CVE-2022-42896)
        * Bluetooth: L2CAP: Fix attempting to access uninitialized memory
          (CVE-2022-42895)
      .
      linux (6.0.6-2) unstable; urgency=medium
      .
        * Ignore ABI changes for ahci_fill_cmd_slot, phylink_create and
          phylink_generic_validate
      .
      linux (6.0.6-1) unstable; urgency=medium
      .
        * New upstream stable update:
          https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.0.6
          - video/aperture: Call sysfb_disable() before removing PCI devices
          - ocfs2: clear dinode links count in case of error
          - ocfs2: fix BUG when iput after ocfs2_mknod fails
          - smb3: interface count displayed incorrectly
          - selinux: enable use of both GFP_KERNEL and GFP_ATOMIC in convert_context()
          - [x86] microcode/AMD: Apply the patch early on every logical thread
          - [x86] hwmon/coretemp: Handle large core ID value
          - [armhf] ata: ahci-imx: Fix MODULE_ALIAS
          - [x86] resctrl: Fix min_cbm_bits for AMD
          - drm/amdgpu: fix sdma doorbell init ordering on APUs
          - mm,hugetlb: take hugetlb_lock before decrementing h->resv_huge_pages
          - kvm: Add support for arch compat vm ioctls
          - [x86] KVM: x86: Copy filter arg outside kvm_vm_ioctl_set_msr_filter()
          - x[86] KVM: x86: Add compat handler for KVM_X86_SET_MSR_FILTER
          - [arm64] KVM: arm64: vgic: Fix exit condition in scan_its_table()
          - media: mceusb: set timeout to at least timeout provided
          - [x86] topology: Fix multiple packages shown on a single-package system
          - [x86] topology: Fix duplicated core ID within a package
          - [amd64] platform/x86/amd: pmc: Read SMU version during suspend on Cezanne
            systems
          - dm bufio: use the acquire memory barrier when testing for B_READING
          - btrfs: fix processing of delayed data refs during backref walking
          - btrfs: fix processing of delayed tree block refs during backref walking
          - [arm*] drm/vc4: Add module dependency on hdmi-codec
          - [arm*] drm/vc4: hdmi: Enforce the minimum rate at runtime_resume
          - ACPI: extlog: Handle multiple records
          - tipc: Fix recognition of trial period
          - tipc: fix an information leak in tipc_topsrv_kern_subscr
          - i40e: Fix DMA mappings leak
          - tls: strp: make sure the TCP skbs do not have overlapping data
          - HID: magicmouse: Do not set BTN_MOUSE on double report
          - sfc: Change VF mac via PF as first preference if available.
          - net/atm: fix proc_mpc_write incorrect return value
          - net: phy: dp83867: Extend RX strap quirk for SGMII mode
          - net/smc: Fix an error code in smc_lgr_create()
          - net: phylink: add mac_managed_pm in phylink_config structure
          - net: stmmac: Enable mac_managed_pm phylink config
          - skmsg: pass gfp argument to alloc_sk_msg()
          - erofs: shouldn't churn the mapping page for duplicated copies
          - blk-mq: fix null pointer dereference in blk_mq_clear_rq_mapping()
          - io_uring/rw: remove leftover debug statement
          - scsi: lpfc: Fix memory leak in lpfc_create_port()
          - udp: Update reuse->has_conns under reuseport_lock.
          - ip6mr: fix UAF issue in ip6mr_sk_done() when addrconf_init_net() failed
          - cifs: Fix xid leak in cifs_create()
          - cifs: Fix xid leak in cifs_copy_file_range()
          - cifs: Fix xid leak in cifs_flock()
          - cifs: Fix xid leak in cifs_ses_add_channel()
          - cifs: Fix memory leak when build ntlmssp negotiate blob failed
          - dm: remove unnecessary assignment statement in alloc_dev()
          - drm/amd/display: Increase frame size limit for display_mode_vba_util_32.o
          - bnxt_en: fix memory leak in bnxt_nvm_test()
          - netfilter: rpfilter/fib: Populate flowic_l3mdev field
          - netfilter: rpfilter/fib: Set ->flowic_uid correctly for user namespaces.
          - netfilter: nf_tables: relax NFTA_SET_ELEM_KEY_END set flags requirements
          - nvme-hwmon: consistently ignore errors from nvme_hwmon_init
          - nvme-hwmon: kmalloc the NVME SMART log buffer
          - nvmet: fix workqueue MEM_RECLAIM flushing dependency
          - net: sched: cake: fix null pointer access issue when cake_init() fails
          - net: sched: delete duplicate cleanup of backlog and qlen
          - net: sched: sfb: fix null pointer access issue when sfb_init() fails
          - net: Fix return value of qdisc ingress handling on success
          - io_uring/msg_ring: Fix NULL pointer dereference in io_msg_send_fd()
          - sfc: include vport_id in filter spec hash and equal()
          - [arm64] net: hns: fix possible memory leak in hnae_ae_register()
          - net: sched: fix race condition in qdisc_graft()
          - net: phy: dp83822: disable MDI crossover status change interrupt
          - drbd: only clone bio if we have a backing device
          - [amd64] iommu/vt-d: Allow NVS regions in arch_rmrr_sanity_check()
          - [amd64] iommu/vt-d: Clean up si_domain in the init_dmars() error path
          - wifi: mt76: mt7921e: fix random fw download fail
          - io_uring: don't gate task_work run on TIF_NOTIFY_SIGNAL
          - ext4: introduce EXT4_FC_TAG_BASE_LEN helper
          - ext4: factor out ext4_fc_get_tl()
          - ext4: fix potential out of bound read in ext4_fc_replay_scan()
          - ACPI: video: Force backlight native for more TongFang devices
          - mm: /proc/pid/smaps_rollup: fix no vma's null-deref
      .
      linux (6.0.5-1) unstable; urgency=medium
      .
        * New upstream stable update:
          https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.0.4
          - [x86] drm/i915/bios: Validate fp_timing terminator presence
          - [x86] drm/i915/bios: Use hardcoded fp_timing size for generating LFP data
            pointers
          - pinctrl: amd: change dev_warn to dev_dbg for additional feature support
          - [x86] thermal: intel_powerclamp: Use first online CPU as control_cpu
          - io_uring/net: fail zc send when unsupported by socket
          - HID: playstation: stop DualSense output work on remove.
          - HID: playstation: add initial DualSense Edge controller support
          - net: flag sockets supporting msghdr originated zerocopy
          - drm/amd/pm: fulfill SMU13.0.7 cstate control interface
          - drm/amd/pm: add SMU IP v13.0.4 IF version define to V7
          - drm/amd/pm: disable cstate feature for gpu reset scenario
          - drm/amd/pm: fulfill SMU13.0.0 cstate control interface
          - drm/amd/pm: update SMU IP v13.0.4 driver interface version
          - dm clone: Fix typo in block_device format specifier
          - efi: efivars: Fix variable writes without query_variable_store()
          - efi: ssdt: Don't free memory if ACPI table was loaded successfully
          - gcov: support GCC 12.1 and newer compilers
          - io-wq: Fix memory leak in worker creation
          - fbdev/core: Remove remove_conflicting_pci_framebuffers()
          - Revert "ALSA: hda: Fix page fault in snd_hda_codec_shutdown()"
            (Closes: #1022544)
          https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.0.5
          - [arm64,armhf] clk: tegra: Fix Tegra PWM parent clock
          - Revert "btrfs: call __btrfs_remove_free_space_cache_locked on cache load
            failure" (Closes: #1022848)
      .
        [ Salvatore Bonaccorso ]
        * [rt] Update to 6.0.5-rt14
        * Ignore ABI changes doe to removed check_var_size, check_var_size_nonblocking
          and remove_conflicting_pci_framebuffers
      .
      linux (6.0.3-1~bpo11+1) bullseye-backports; urgency=medium
      .
        * Rebuild for bullseye-backports:
          - Change ABI number to 0.deb11.2
      .
      linux (6.0.3-1) unstable; urgency=medium
      .
        * New upstream stable update:
          https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.0.3
          - ALSA: oss: Fix potential deadlock at unregistration
          - ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
          - ALSA: usb-audio: Fix potential memory leaks
          - ALSA: usb-audio: Fix NULL dererence at error path
          - ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
          - ALSA: hda/realtek: Correct pin configs for ASUS G533Z
          - ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
          - ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
          - io_uring: add custom opcode hooks on fail
          - io_uring/rw: don't lose partial IO result on fail
          - io_uring/net: don't lose partial send/recv on fail
          - io_uring/rw: fix unexpected link breakage
          - io_uring/rw: don't lose short results on io_setup_async_rw()
          - io_uring/net: fix fast_iov assignment in io_setup_async_msg()
          - io_uring/net: don't update msg_name if not provided
          - io_uring: limit registration w/ SINGLE_ISSUER
          - io_uring/net: handle -EINPROGRESS correct for IORING_OP_CONNECT
          - io_uring/af_unix: defer registered files gc to io_uring release
            (CVE-2022-2602)
          - io_uring: correct pinned_vm accounting
          - [x86] hv_netvsc: Fix race between VF offering and VF association message
            from host
          - cifs: destage dirty pages before re-reading them for cache=none
          - cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
          - iio: dac: ad5593r: Fix i2c read protocol requirements
          - iio: ltc2497: Fix reading conversion results
          - iio: adc: ad7923: fix channel readings for some variants
          - iio: pressure: dps310: Refactor startup procedure
          - iio: pressure: dps310: Reset chip after timeout
          - xhci: dbc: Fix memory leak in xhci_alloc_dbc()
          - usb: gadget: uvc: Fix argument to sizeof() in uvc_register_video()
          - usb: add quirks for Lenovo OneLink+ Dock
          - mmc: core: Add SD card quirk for broken discard
          - can: kvaser_usb: Fix use of uninitialized completion
          - can: kvaser_usb_leaf: Fix overread with an invalid command
          - can: kvaser_usb_leaf: Fix TX queue out of sync after restart
          - can: kvaser_usb_leaf: Fix CAN state after restart
          - mmc: renesas_sdhi: Fix rounding errors
          - mmc: sdhci-tegra: Use actual clock rate for SW tuning correction
          - mmc: sdhci-sprd: Fix minimum clock limit
          - i2c: designware: Fix handling of real but unexpected device interrupts
          - fs: dlm: fix race between test_bit() and queue_work()
          - fs: dlm: handle -EBUSY first in lock arg validation
          - fs: dlm: fix invalid derefence of sb_lvbptr
          - btf: Export bpf_dynptr definition
          - mbcache: Avoid nesting of cache->c_list_lock under bit locks
          - HID: multitouch: Add memory barriers
          - quota: Check next/prev free block number after reading from quota file
          - platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure
          - [arm64] dts: qcom: sdm845-mtp: correct ADC settle time
          - ASoC: wcd9335: fix order of Slimbus unprepare/disable
          - ASoC: wcd934x: fix order of Slimbus unprepare/disable
          - hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API
          - net: thunderbolt: Enable DMA paths only after rings are enabled
          - regulator: qcom_rpm: Fix circular deferral regression
          - [arm64] topology: move store_cpu_topology() to shared code
          - [riscv64] topology: fix default topology reporting
          - [riscv64] Re-enable counter access from userspace
          - [riscv64] Make port I/O string accessors actually work
          - [riscv64] vdso: fix NULL deference in vdso_join_timens() when vfork
          - [riscv64] Allow PROT_WRITE-only mmap()
          - [riscv64] Make VM_WRITE imply VM_READ
          - [riscv64] always honor the CONFIG_CMDLINE_FORCE when parsing dtb
          - [riscv64] Pass -mno-relax only on lld < 15.0.0
          - nvmem: core: Fix memleak in nvmem_register()
          - nvme-multipath: fix possible hang in live ns resize with ANA access
          - Revert "drm/amdgpu: use dirty framebuffer helper"
          - dm: verity-loadpin: Only trust verity targets with enforcement
          - dmaengine: mxs: use platform_driver_register
          - dmaengine: qcom-adm: fix wrong sizeof config in slave_config
          - dmaengine: qcom-adm: fix wrong calling convention for prep_slave_sg
          - drm/virtio: Check whether transferred 2D BO is shmem
          - drm/virtio: Unlock reservations on virtio_gpu_object_shmem_init() error
          - drm/virtio: Unlock reservations on dma_resv_reserve_fences() error
          - drm/virtio: Use appropriate atomic state in virtio_gpu_plane_cleanup_fb()
          - drm/udl: Restore display mode on resume
          - [arm64] mte: move register initialization to C
          - [arm64] mte: Avoid setting PG_mte_tagged if no tags cleared or restored
          - [arm64] errata: Add Cortex-A55 to the repeat tlbi list
          - clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value
          - mm/hugetlb: fix races when looking up a CONT-PTE/PMD size hugetlb page
          - mm/damon: validate if the pmd entry is present before accessing
          - mm/uffd: fix warning without PTE_MARKER_UFFD_WP compiled in
          - mm/mmap: undo ->mmap() when arch_validate_flags() fails
          - xen/gntdev: Prevent leaking grants
          - xen/gntdev: Accommodate VMA splitting
          - PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
          - serial: cpm_uart: Don't request IRQ too early for console port
          - serial: stm32: Deassert Transmit Enable on ->rs485_config()
          - serial: Deassert Transmit Enable on probe in driver-specific way
          - serial: ar933x: Deassert Transmit Enable on ->rs485_config()
          - serial: 8250: Let drivers request full 16550A feature probing
          - serial: 8250: Request full 16550A feature probing for OxSemi PCIe devices
          - NFSD: Protect against send buffer overflow in NFSv3 READDIR
          - NFSD: Protect against send buffer overflow in NFSv2 READ
          - NFSD: Protect against send buffer overflow in NFSv3 READ
          - cpufreq: qcom-cpufreq-hw: Fix uninitialized throttled_freq warning
          - LoadPin: Fix Kconfig doc about format of file with verity digests
          - powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain
          - slimbus: qcom-ngd: use correct error in message of pdr_add_lookup()
            failure
          - slimbus: qcom-ngd: cleanup in probe error path
          - scsi: lpfc: Rework MIB Rx Monitor debug info logic
          - scsi: qedf: Populate sysfs attributes for vport
          - gpio: rockchip: request GPIO mux to pinctrl when setting direction
          - pinctrl: rockchip: add pinmux_ops.gpio_set_direction callback
          - fbdev: smscufx: Fix use-after-free in ufx_ops_open()
          - hwrng: core - let sleep be interrupted when unregistering hwrng
          - smb3: do not log confusing message when server returns no network
            interfaces
          - ksmbd: fix incorrect handling of iterate_dir
          - ksmbd: fix endless loop when encryption for response fails
          - ksmbd: Fix wrong return value and message length check in smb2_ioctl()
          - ksmbd: Fix user namespace mapping
          - fs: record I_DIRTY_TIME even if inode already has I_DIRTY_INODE
          - btrfs: fix alignment of VMA for memory mapped files on THP
          - btrfs: enhance unsupported compat RO flags handling
          - btrfs: fix race between quota enable and quota rescan ioctl
          - btrfs: fix missed extent on fsync after dropping extent maps
          - btrfs: set generation before calling btrfs_clean_tree_block in
            btrfs_init_new_buffer
          - f2fs: fix wrong continue condition in GC
          - f2fs: complete checkpoints during remount
          - f2fs: flush pending checkpoints when freezing super
          - f2fs: increase the limit for reserve_root
          - f2fs: fix to do sanity check on destination blkaddr during recovery
          - f2fs: fix to do sanity check on summary info
          - f2fs: allow direct read for zoned device
          - jbd2: wake up journal waiters in FIFO order, not LIFO
          - jbd2: fix potential buffer head reference count leak
          - jbd2: fix potential use-after-free in jbd2_fc_wait_bufs
          - jbd2: add miss release buffer head in fc_do_one_pass()
          - ext2: Add sanity checks for group and filesystem size
          - ext4: avoid crash when inline data creation follows DIO write
          - ext4: fix null-ptr-deref in ext4_write_info
          - ext4: make ext4_lazyinit_thread freezable
          - ext4: fix check for block being out of directory size (CVE-2022-1184)
          - ext4: don't increase iversion counter for ea_inodes
          - ext4: unconditionally enable the i_version counter
          - ext4: ext4_read_bh_lock() should submit IO if the buffer isn't uptodate
          - ext4: place buffer head allocation before handle start
          - ext4: fix i_version handling in ext4
          - ext4: fix dir corruption when ext4_dx_add_entry() fails
          - ext4: fix miss release buffer head in ext4_fc_write_inode
          - ext4: fix potential memory leak in ext4_fc_record_modified_inode()
          - ext4: fix potential memory leak in ext4_fc_record_regions()
          - ext4: update 'state->fc_regions_size' after successful memory allocation
          - ftrace: Properly unset FTRACE_HASH_FL_MOD
          - ftrace: Still disable enabled records marked as disabled
          - ring-buffer: Allow splice to read previous partially read pages
          - ring-buffer: Have the shortest_full queue be the shortest not longest
          - ring-buffer: Check pending waiters when doing wake ups as well
          - ring-buffer: Add ring_buffer_wake_waiters()
          - ring-buffer: Fix race between reset page and reading page
          - tracing/eprobe: Fix alloc event dir failed when event name no set
          - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
          - tracing: Wake up ring buffer waiters on closing of the file
          - tracing: Wake up waiters when tracing is disabled
          - tracing: Add ioctl() to force ring buffer waiters to wake up
          - tracing: Do not free snapshot if tracer is on cmdline
          - tracing: Move duplicate code of trace_kprobe/eprobe.c into header
          - tracing: Add "(fault)" name injection to kernel probes
          - tracing: Fix reading strings from synthetic events
          - rpmsg: char: Avoid double destroy of default endpoint
          - thunderbolt: Explicitly enable lane adapter hotplug events at startup
          - efi: libstub: drop pointless get_memory_map() call
          - media: cedrus: Fix watchdog race condition
          - media: cedrus: Set the platform driver data earlier
          - media: cedrus: Fix endless loop in cedrus_h265_skip_bits()
          - blk-throttle: fix that io throttle can only work for single bio
          - blk-wbt: call rq_qos_add() after wb_normal is initialized
          - [x86] KVM: x86/emulator: Fix handing of POP SS to correctly set
            interruptibility
          - [x86] KVM: nVMX: Unconditionally purge queued/injected events on nested
            "exit"
          - [x86] KVM: nVMX: Don't propagate vmcs12's PERF_GLOBAL_CTRL settings to
            vmcs02
          - [x86] KVM: x86: Treat #DBs from the emulator as fault-like (code and
            DR7.GD=1)
          - [x86] KVM: VMX: Drop bits 31:16 when shoving exception error code into
            VMCS
          - staging: greybus: audio_helper: remove unused and wrong debugfs usage
          - drm/nouveau/kms/nv140-: Disable interlacing
          - drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
          - [x86] drm/i915/gt: Use i915_vm_put on ppgtt_create error paths
          - [x86] drm/i915/guc: Fix revocation of non-persistent contexts
          - [x86] drm/i915: Fix watermark calculations for gen12+ RC CCS modifier
          - [x86] drm/i915: Fix watermark calculations for gen12+ MC CCS modifier
          - [x86] drm/i915: Fix watermark calculations for gen12+ CCS+CC modifier
          - [x86] drm/i915: Fix watermark calculations for DG2 CCS modifiers
          - [x86] drm/i915: Fix watermark calculations for DG2 CCS+CC modifier
          - [x86] drm/i915: Fix display problems after resume
          - drm/amd/display: Fix watermark calculation
          - drm/amd/display: Update PMFW z-state interface for DCN314
          - drm/amd/display: zeromem mypipe heap struct before using it
          - drm/amd/display: Validate DSC After Enable All New CRTCs
          - drm/amd/display: Enable dpia support for dcn314
          - drm/amd/display: Enable 2 to 1 ODM policy if supported
          - drm/amd/display: Fix vblank refcount in vrr transition
          - drm/amd/display: Add HUBP surface flip interrupt handler
          - drm/amd/display: explicitly disable psr_feature_enable appropriately
          - drm/amdgpu: Enable VCN PG on GC11_0_1
          - drm/amdgpu: Enable F32_WPTR_POLL_ENABLE in mqd
          - smb3: must initialize two ACL struct fields to zero
          - selinux: use "grep -E" instead of "egrep"
          - ima: fix blocking of security.ima xattrs of unsupported algorithms
          - userfaultfd: open userfaultfds with O_RDONLY
          - acl: return EOPNOTSUPP in posix_acl_fix_xattr_common()
          - thermal: cpufreq_cooling: Check the policy first in
            cpufreq_cooling_register()
          - cpufreq: amd-pstate: Fix initial highest_perf value
          - erofs: fix order >= MAX_ORDER warning due to crafted negative i_size
          - erofs: use kill_anon_super() to kill super in fscache mode
          - ACPI: PCC: Release resources on address space setup failure path
          - ACPI: PCC: replace wait_for_completion()
          - ACPI: PCC: Fix Tx acknowledge in the PCC address space handler
          - objtool: Preserve special st_shndx indexes in elf_update_symbol
          - nfsd: Fix a memory leak in an error handling path
          - SUNRPC: Fix svcxdr_init_decode's end-of-buffer calculation
          - SUNRPC: Fix svcxdr_init_encode's buflen calculation
          - NFSD: Protect against send buffer overflow in NFSv2 READDIR
          - NFSD: Fix handling of oversized NFSv4 COMPOUND requests
          - [x86] paravirt: add extra clobbers with ZERO_CALL_USED_REGS enabled
          - wifi: rtlwifi: 8192de: correct checking of IQK reload
          - wifi: ath10k: Set tx credit to one for WCN3990 snoc based devices
          - wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
          - bpf: Cleanup check_refcount_ok
          - bpf: Fix ref_obj_id for dynptr data slices in verifier
          - leds: lm3601x: Don't use mutex after it was destroyed
          - tsnep: Fix TSNEP_INFO_TX_TIME register define
          - net: prestera: cache port state for non-phylink ports too
          - bpf: Fix reference state management for synchronous callbacks
          - wifi: mac80211: properly set old_links when removing a link
          - wifi: cfg80211: get correct AP link chandef
          - wifi: mac80211: fix use-after-free
          - wifi: mac80211: mlme: don't add empty EML capabilities
          - wifi: mac80211_hwsim: fix link change handling
          - wifi: mac80211: allow bw change during channel switch in mesh
          - bpftool: Fix a wrong type cast in btf_dumper_int
          - ice: set tx_tstamps when creating new Tx rings via ethtool
          - audit: explicitly check audit_context->context enum value
          - audit: free audit_proctitle only on task exit
          - esp: choose the correct inner protocol for GSO on inter address family
            tunnels
          - spi: mt7621: Fix an error message in mt7621_spi_probe()
          - [x86] resctrl: Fix to restore to original value when re-enabling hardware
            prefetch register
          - xsk: Fix backpressure mechanism on Tx
          - bpf: Disable preemption when increasing per-cpu map_locked
          - bpf: Propagate error from htab_lock_bucket() to userspace
          - wifi: ath11k: Fix incorrect QMI message ID mappings
          - bpf: Use this_cpu_{inc|dec|inc_return} for bpf_task_storage_busy
          - bpf: Use this_cpu_{inc_return|dec} for prog->active
          - Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend
          - bpf: Only add BTF IDs for socket security hooks when
            CONFIG_SECURITY_NETWORK is on
          - wifi: rtw89: pci: fix interrupt stuck after leaving low power mode
          - wifi: rtw89: pci: correct TX resource checking in low power mode
          - wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
          - wifi: wfx: prevent underflow in wfx_send_pds()
          - wifi: rtw88: add missing destroy_workqueue() on error path in
            rtw_core_init()
          - wifi: mac80211: mlme: assign link address correctly
          - spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
          - spi: qup: add missing clk_disable_unprepare on error in
            spi_qup_pm_resume_runtime()
          - wifi: rtl8xxxu: Fix skb misuse in TX queue selection
          - spi: meson-spicc: do not rely on busy flag in pow2 clk ops
          - bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
          - wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
          - wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask
          - Bluetooth: avoid hci_dev_test_and_set_flag() in mgmt_init_hdev()
          - wifi: mt76: mt7921e: fix race issue between reset and suspend/resume
          - wifi: mt76: mt7921s: fix race issue between reset and suspend/resume
          - wifi: mt76: mt7921u: fix race issue between reset and suspend/resume
          - wifi: mt76: sdio: fix the deadlock caused by sdio->stat_work
          - wifi: mt76: sdio: poll sta stat when device transmits data
          - wifi: mt76: mt7915: fix an uninitialized variable bug
          - wifi: mt76: mt7921: fix use after free in mt7921_acpi_read()
          - wifi: mt76: sdio: fix transmitting packet hangs
          - wifi: mt76: mt7615: add mt7615_mutex_acquire/release in
            mt7615_sta_set_decap_offload
          - wifi: mt76: mt7915: fix possible unaligned access in
            mt7915_mac_add_twt_setup
          - wifi: mt76: connac: fix possible unaligned access in
            mt76_connac_mcu_add_nested_tlv
          - wifi: mt76: mt7921: add mt7921_mutex_acquire at mt7921_[start, stop]_ap
          - wifi: mt76: mt7921: add mt7921_mutex_acquire at
            mt7921_sta_set_decap_offload
          - wifi: mt76: mt7921: fix the firmware version report
          - wifi: mt76: mt7915: fix mcs value in ht mode
          - wifi: mt76: fix uninitialized pointer in mt7921_mac_fill_rx
          - wifi: mt76: mt7915: do not check state before configuring implicit
            beamform
          - wifi: mt76: mt7921e: fix rmmod crash in driver reload test
          - Bluetooth: RFCOMM: Fix possible deadlock on socket shutdown/release
          - net: fs_enet: Fix wrong check in do_pd_setup
          - bpf: Ensure correct locking around vulnerable function find_vpid()
          - libbpf: Fix crash if SEC("freplace") programs don't have attach_prog_fd
            set
          - wifi: ath11k: Include STA_KEEPALIVE_ARP_RESPONSE TLV header by default
          - Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure
          - netfilter: conntrack: fix the gc rescheduling delay
          - netfilter: conntrack: revisit the gc initial rescheduling bias
          - bpf, cgroup: Reject prog_attach_flags array when effective query
          - bpftool: Fix wrong cgroup attach flags being assigned to effective progs
          - flow_dissector: Do not count vlan tags inside tunnel payload
          - mwifiex: fix sleep in atomic context bugs caused by dev_coredumpv
          - wifi: ath11k: fix failed to find the peer with peer_id 0 when disconnected
          - wifi: ath11k: fix number of VHT beamformee spatial streams
          - mips: dts: ralink: mt7621: fix external phy on GB-PC2
          - [x86] microcode/AMD: Track patch allocation size explicitly
          - wifi: ath11k: fix peer addition/deletion error on sta band migration
          - [x86] cpu: Include the header of init_ia32_feat_ctl()'s prototype
          - spi: cadence-quadspi: Fix PM disable depth imbalance in cqspi_probe
          - spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe
          - spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
          - skmsg: Schedule psock work if the cached skb exists on the psock
          - cw1200: fix incorrect check to determine if no element is found in list
          - i2c: mlxbf: support lock mechanism
          - Bluetooth: hci_core: Fix not handling link timeouts propertly
          - xfrm: Reinject transport-mode packets through workqueue
          - netfilter: nft_fib: Fix for rpath check with VRF devices
          - spi: s3c64xx: Fix large transfers with DMA
          - Bluetooth: Prevent double register of suspend
          - wifi: rtl8xxxu: gen2: Enable 40 MHz channel width
          - wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM
          - vhost/vsock: Use kvmalloc/kvfree for larger packets.
          - eth: alx: take rtnl_lock on resume
          - mISDN: fix use-after-free bugs in l1oip timer handlers (CVE-2022-3565)
          - sctp: handle the error returned from sctp_auth_asoc_init_active_key
          - tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
          - spi: Ensure that sg_table won't be used after being freed
          - Bluetooth: hci_sync: Fix not indicating power state
          - hwmon: (pmbus/mp2888) Fix sensors readouts for MPS Multi-phase mp2888
            controller
          - net: rds: don't hold sock lock when cancelling work from
            rds_tcp_reset_callbacks()
          - af_unix: Fix memory leaks of the whole sk due to OOB skb. (CVE-2022-3543)
          - net: prestera: acl: Add check for kmemdup
          - eth: lan743x: reject extts for non-pci11x1x devices
          - bnx2x: fix potential memory leak in bnx2x_tpa_stop() (CVE-2022-3542)
          - eth: sp7021: fix use after free bug in spl2sw_nvmem_get_mac_address
            (CVE-2022-3541)
          - net: wwan: iosm: Call mutex_init before locking it
          - net/ieee802154: reject zero-sized raw_sendmsg()
          - once: add DO_ONCE_SLOW() for sleepable contexts
          - net: mvpp2: fix mvpp2 debugfs leak (CVE-2022-3535)
          - drm: bridge: adv7511: fix CEC power down control register offset
          - drm: bridge: adv7511: unregister cec i2c device after cec adapter
          - drm/bridge: Avoid uninitialized variable warning
          - drm/mipi-dsi: Detach devices when removing the host
          - drm/vc4: drv: Call component_unbind_all()
          - drm/bridge: it6505: Power on downstream device in .atomic_enable
          - video/aperture: Disable and unregister sysfb devices via aperture helpers
          - drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
          - drm/bridge: anx7625: Fix refcount bug in anx7625_parse_dt()
          - drm/bridge: tc358767: Add of_node_put() when breaking out of loop
          - drm/bridge: parade-ps8640: Fix regulator supply order
          - drm/format-helper: Fix test on big endian architectures
          - drm/dp_mst: fix drm_dp_dpcd_read return value checks
          - drm:pl111: Add of_node_put() when breaking out of
            for_each_available_child_of_node()
          - ASoC: mt6359: fix tests for platform_get_irq() failure
          - ASoC: amd: acp: add missing platform_device_unregister() in
            acp_pci_probe()
          - drm/msm: Make .remove and .shutdown HW shutdown consistent
          - platform/chrome: fix double-free in chromeos_laptop_prepare()
          - platform/chrome: fix memory corruption in ioctl
          - [x86] drm/i915/dg2: Bump up CDCLK for DG2
          - drm/virtio: Fix same-context optimization
          - ASoC: soc-pcm.c: call __soc_pcm_close() in soc_pcm_close()
          - ASoC: tas2764: Allow mono streams
          - ASoC: tas2764: Drop conflicting set_bias_level power setting
          - ASoC: tas2764: Fix mute/unmute
          - platform/x86: msi-laptop: Fix old-ec check for backlight registering
          - platform/x86: msi-laptop: Fix resource cleanup
          - drm/panel: use 'select' for Ili9341 panel driver helpers
          - drm: fix drm_mipi_dbi build errors
          - platform/chrome: cros_ec_typec: Add bit offset for DP VDO
          - platform/chrome: cros_ec_typec: Correct alt mode index
          - drm/amdgpu: add missing pci_disable_device() in
            amdgpu_pmops_runtime_resume()
          - drm/bridge: megachips: Fix a null pointer dereference bug
          - drm/bridge: it6505: Fix the order of DP_SET_POWER commands
          - ASoC: rsnd: Add check for rsnd_mod_power_on
          - ASoC: wm_adsp: Handle optional legacy support
          - ALSA: hda: beep: Simplify keep-power-at-enable behavior
          - drm/virtio: set fb_modifiers_not_supported
          - drm/bochs: fix blanking
          - ASoC: mediatek: mt8195-mt6359: Properly register sound card for SOF
          - ASoC: SOF: mediatek: mt8195: Import namespace SND_SOC_SOF_MTK_COMMON
          - drm/omap: dss: Fix refcount leak bugs
          - drm/amdgpu: Fix memory leak in hpd_rx_irq_create_workqueue()
          - ASoC: rockchip: i2s: use regmap_read_poll_timeout to poll I2S_CLR
          - mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
          - ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
          - drm/msm: lookup the ICC paths in both mdp5/dpu and mdss devices
          - drm/msm/dpu: index dpu_kms->hw_vbif using vbif_idx
          - drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa()
          - ALSA: hda/hdmi: change type for the 'assigned' variable
          - ALSA: hda/hdmi: Fix the converter allocation for the silent stream
          - ALSA: usb-audio: Properly refcounting clock rate
          - ASoC: SOF: ipc4-topology: Free the ida when IPC fails in
            sof_ipc4_widget_setup()
          - drm/vmwgfx: Fix memory leak in vmw_mksstat_add_ioctl()
          - virtio-gpu: fix shift wrapping bug in virtio_gpu_fence_event_create()
          - ASoC: codecs: tx-macro: fix kcontrol put
          - ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()
          - ALSA: dmaengine: increment buffer pointer atomically
          - mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
          - ASoC: stm32: dfsdm: Fix PM disable depth imbalance in stm32_adfsdm_probe
          - ASoC: stm32: spdifrx: Fix PM disable depth imbalance in
            stm32_spdifrx_probe
          - ASoC: stm: Fix PM disable depth imbalance in stm32_i2s_probe
          - ASoC: wcd-mbhc-v2: Revert "ASoC: wcd-mbhc-v2: use
            pm_runtime_resume_and_get()"
          - ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
          - ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
          - ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
          - ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe
          - ASoC: rockchip: i2s: use regmap_read_poll_timeout_atomic to poll I2S_CLR
          - ALSA: hda/hdmi: Don't skip notification handling during PM operation
          - memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
          - memory: of: Fix refcount leak bug in of_get_ddr_timings()
          - memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings()
          - locks: fix TOCTOU race when granting write lease
          - soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
          - soc: qcom: smem_state: Add refcounting for the 'state->of_node'
          - ARM: dts: imx6qdl-kontron-samx6i: hook up DDC i2c bus
          - [arm64] dts: renesas: r9a07g044: Fix SCI{Rx,Tx} interrupt types
          - [arm64] dts: renesas: r9a07g054: Fix SCI{Rx,Tx} interrupt types
          - [arm64] dts: renesas: r9a07g043: Fix SCI{Rx,Tx} interrupt types
          - dt-bindings: clock: exynosautov9: correct clock numbering of peric0/c1
          - [arm64] dts: qcom: sdm845-xiaomi-polaris: Fix sde_dsi_active pinctrl
          - [arm64] dts: qcom: sc7280: Cleanup the lpasscc node
          - [arm64] dts: qcom: sc7280: Update lpasscore node
          - [arm64] dts: qcom: sc8280xp-crd: disallow regulator mode switches
          - [arm64] dts: qcom: sc8280xp-lenovo-thinkpad-x13s: disallow regulator mode
            switches
          - [arm64] dts: qcom: sa8295p-adp: disallow regulator mode switches
          - [arm64] dts: qcom: pm8350c: Drop PWM reg declaration
          - [arm64] dts: qcom: sc7180-trogdor: Keep pm6150_adc enabled for TZ
          - [arm64] dts: marvell: 98dx25xx: use correct property for i2c gpios
          - [arm64] dts: qcom: sm8350-sagami: correct TS pin property
          - soc/tegra: fuse: Add missing of_node_put() in tegra_init_fuse()
          - soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA
          - [arm64] dts: qcom: ipq8074: fix PCIe PHY serdes size
          - [arm64] dts: qcom: sm8450: fix UFS PHY serdes size
          - [arm64] dts: ti: k3-j7200: fix main pinmux range
          - ext4: continue to expand file system when the target size doesn't reach
          - ext4: don't run ext4lazyinit for read-only filesystems
          - [arm64] ftrace: fix module PLTs with mcount
          - [arm64] dts: exynos: fix polarity of "enable" line of NFC chip in TM2
          - ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
          - iomap: iomap: fix memory corruption when recording errors during writeback
          - iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
          - iio: adc: at91-sama5d2_adc: check return status for pressure and touch
          - iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
          - iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume
          - iio: inkern: only release the device node when done with it
          - iio: inkern: fix return value in devm_of_iio_channel_get_by_name()
          - iio: ABI: Fix wrong format of differential capacitance channel ABI.
          - iio: magnetometer: yas530: Change data type of hard_offsets to signed
          - RDMA/mlx5: Don't compare mkey tags in DEVX indirect mkey
          - usb: common: usb-conn-gpio: Simplify some error message
          - usb: common: debug: Check non-standard control requests
          - clk: meson: Hold reference returned by of_get_parent()
          - clk: st: Hold reference returned by of_get_parent()
          - clk: oxnas: Hold reference returned by of_get_parent()
          - clk: qoriq: Hold reference returned by of_get_parent()
          - clk: berlin: Add of_node_put() for of_get_parent()
          - clk: sprd: Hold reference returned by of_get_parent()
          - coresight: docs: Fix a broken reference
          - clk: tegra: Fix refcount leak in tegra210_clock_init
          - clk: tegra: Fix refcount leak in tegra114_clock_init
          - clk: tegra20: Fix refcount leak in tegra20_clock_init
          - clk: samsung: exynosautov9: correct register offsets of peric0/c1
          - HID: uclogic: Add missing suffix for digitalizers
          - HID: uclogic: Fix warning in uclogic_rdesc_template_apply
          - HSI: omap_ssi: Fix refcount leak in ssi_probe
          - HSI: omap_ssi_port: Fix dma_map_sg error check
          - clk: qcom: gcc-sdm660: Use floor ops for SDCC1 clock
          - media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
          - media: airspy: fix memory leak in airspy probe
          - tty: xilinx_uartps: Check clk_enable return value
          - tty: xilinx_uartps: Fix the ignore_status
          - media: mediatek: vcodec: Skip non CBR bitrate mode
          - media: amphion: insert picture startcode after seek for vc1g format
          - media: amphion: adjust the encoder's value range of gop size
          - media: amphion: don't change the colorspace reported by decoder.
          - media: amphion: fix a bug that vpu core may not resume after suspend
          - media: meson: vdec: add missing clk_disable_unprepare on error in
            vdec_hevc_start()
          - media: uvcvideo: Fix memory leak in uvc_gpio_parse
          - media: uvcvideo: Use entity get_cur in uvc_ctrl_set
          - media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
          - RDMA/rxe: Fix "kernel NULL pointer dereference" error
          - RDMA/rxe: Fix the error caused by qp->sk
          - clk: mediatek: clk-mt8195-vdo0: Set rate on vdo0_dp_intf0_dp_intf's parent
          - clk: mediatek: clk-mt8195-vdo1: Reparent and set rate on vdo1_dpintf's
            parent
          - clk: mediatek: mt8195-infra_ao: Set pwrmcu clocks as critical
          - misc: ocxl: fix possible refcount leak in afu_ioctl()
          - fpga: dfl-pci: Add IDs for Intel N6000, N6001 and C6100 cards
          - fpga: prevent integer overflow in dfl_feature_ioctl_set_irq()
          - phy: rockchip-inno-usb2: Return zero after otg sync
          - dmaengine: idxd: avoid deadlock in process_misc_interrupts()
          - dmaengine: hisilicon: Disable channels when unregister hisi_dma
          - dmaengine: hisilicon: Fix CQ head update
          - dmaengine: hisilicon: Add multi-thread support for a DMA channel
          - iio: Use per-device lockdep class for mlock
          - usb: gadget: f_fs: stricter integer overflow checks
          - dyndbg: fix static_branch manipulation
          - dyndbg: fix module.dyndbg handling
          - dyndbg: let query-modname override actual module name
          - dyndbg: drop EXPORTed dynamic_debug_exec_queries
          - clk: qcom: sm6115: Select QCOM_GDSC
          - scsi: lpfc: Fix various issues reported by tools
          - mtd: devices: docg3: check the return value of devm_ioremap() in the probe
          - remoteproc: Harden rproc_handle_vdev() against integer overflow
          - phy: qcom-qmp-usb: disable runtime PM on unbind
          - phy: amlogic: phy-meson-axg-mipi-pcie-analog: Hold reference returned by
            of_get_parent()
          - phy: phy-mtk-tphy: fix the phy type setting issue
          - mtd: rawnand: intel: Read the chip-select line from the correct OF node
          - mtd: rawnand: intel: Remove undocumented compatible string
          - mtd: rawnand: fsl_elbc: Fix none ECC mode
          - RDMA/irdma: Align AE id codes to correct flush code and event
          - RDMA/irdma: Validate udata inlen and outlen
          - RDMA/srp: Fix srp_abort()
          - RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
          - RDMA/siw: Fix QP destroy to wait for all references dropped.
          - ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
          - ata: fix ata_id_has_devslp()
          - ata: fix ata_id_has_ncq_autosense()
          - ata: fix ata_id_has_dipm()
          - mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
          - block: Fix the enum blk_eh_timer_return documentation
          - eventfd: guard wake_up in eventfd fs calls as well
          - io_uring/fdinfo: fix sqe dumping for IORING_SETUP_SQE128
          - md: Replace snprintf with scnprintf
          - md/raid5: Ensure stripe_fill happens on non-read IO with journal
          - md/raid5: Remove unnecessary bio_put() in raid5_read_one_chunk()
          - md: Remove extra mddev_get() in md_seq_start()
          - RDMA/cm: Use SLID in the work completion as the DLID in responder side
          - IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers
          - xhci: Don't show warning for reinit on known broken suspend
          - usb: gadget: function: fix dangling pnp_string in f_printer.c
          - usb: typec: anx7411: Use of_get_child_by_name() instead of
            of_find_node_by_name()
          - usb: dwc3: core: fix some leaks in probe
          - drivers: serial: jsm: fix some leaks in probe
          - serial: 8250: Toggle IER bits on only after irq has been set up
          - tty: serial: fsl_lpuart: disable dma rx/tx use flags in
            lpuart_dma_shutdown
          - phy: qualcomm: call clk_disable_unprepare in the error handling
          - staging: vt6655: fix some erroneous memory clean-up loops
          - slimbus: qcom-ngd: Add error handling in of_qcom_slim_ngd_register
          - firmware: google: Test spinlock on panic path to avoid lockups
          - serial: 8250: Fix restoring termios speed after suspend
          - scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
          - scsi: pm8001: Fix running_req for internal abort commands
          - scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername()
          - clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical
          - clk: qcom: gcc-sm6115: Override default Alpha PLL regs
          - nvmet-auth: don't try to cancel a non-initialized work_struct
          - RDMA/rxe: Set pd early in mr alloc routines
          - RDMA/rxe: Fix resize_finish() in rxe_queue.c
          - fsi: core: Check error number after calling ida_simple_get
          - mfd: intel_soc_pmic: Fix an error handling path in
            intel_soc_pmic_i2c_probe()
          - mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
          - mfd: lp8788: Fix an error handling path in lp8788_probe()
          - mfd: lp8788: Fix an error handling path in lp8788_irq_init() and
            lp8788_irq_init()
          - mfd: fsl-imx25: Fix check for platform_get_irq() errors
          - mfd: sm501: Add check for platform_driver_register()
          - mfd: da9061: Fix Failed to set Two-Wire Bus Mode.
          - clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
          - clk: mediatek: clk-mt8195-mfg: Reparent mfg_bg3d and propagate rate
            changes
          - clk: mediatek: fix unregister function in mtk_clk_register_dividers
            cleanup
          - clk: mediatek: Migrate remaining clk_unregister_*() to
            clk_hw_unregister_*()
          - io_uring/rw: defer fsnotify calls to task context
          - dmaengine: ioat: stop mod_timer from resurrecting deleted timer in
            __cleanup()
          - HID: amd_sfh: Handle condition of "no sensors" for SFH1.1
          - usb: mtu3: fix failed runtime suspend in host only mode
          - spmi: pmic-arb: correct duplicate APID to PPID mapping logic
          - clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD
          - clk: baikal-t1: Fix invalid xGMAC PTP clock divider
          - clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent
          - clk: baikal-t1: Add SATA internal ref clock buffer
          - clk: bcm2835: Make peripheral PLLC critical
          - clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
          - clk: imx8mp: tune the order of enet_qos_root_clk
          - clk: imx: scu: fix memleak on platform_device_add() fails
          - clk: ti: Balance of_node_get() calls for of_find_node_by_name()
          - clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
          - clk: ast2600: BCLK comes from EPLL
          - ipc: mqueue: fix possible memory leak in init_mqueue_fs()
          - powerpc/configs: Properly enable PAPR_SCM in pseries_defconfig
          - powerpc/math_emu/efp: Include module.h
          - powerpc/sysdev/fsl_msi: Add missing of_node_put()
          - powerpc/pci_dn: Add missing of_node_put()
          - powerpc/powernv: add missing of_node_put() in opal_export_attrs()
          - cpuidle: riscv-sbi: Fix CPU_PM_CPU_IDLE_ENTER_xyz() macro usage
          - powerpc: dts: turris1x.dts: Fix NOR partitions labels
          - powerpc: dts: turris1x.dts: Fix labels in DSA cpu port nodes
          - powerpc: Fix fallocate and fadvise64_64 compat parameter combination
          - x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
          - powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
          - powerpc/64/interrupt: Fix false warning in context tracking due to idle
            state
          - powerpc/64: mark irqs hard disabled in boot paca
          - powerpc/64/interrupt: Fix return to masked context after hard-mask irq
            becomes pending
          - powerpc: Fix SPE Power ISA properties for e500v1 platforms
          - powerpc/kprobes: Fix null pointer reference in arch_prepare_kprobe()
          - powerpc/pseries/vas: Pass hw_cpu_id to node associativity HCALL
          - crypto: sahara - don't sleep when in softirq
          - crypto: hisilicon/zip - fix mismatch in get/set sgl_sge_nr
          - hwrng: arm-smccc-trng - fix NO_ENTROPY handling
          - crypto: ccp - Fail the PSP initialization when writing psp data file
            failed
          - cgroup: Honor caller's cgroup NS when resolving path
          - hwrng: imx-rngc - use devm_clk_get_enabled
          - hwrng: imx-rngc - Moving IRQ handler registering after
            imx_rngc_irq_mask_clear()
          - crypto: qat - fix default value of WDT timer
          - crypto: hisilicon/qm - fix missing put dfx access
          - cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
          - iommu/omap: Fix buffer overflow in debugfs
          - crypto: akcipher - default implementation for setting a private key
          - crypto: ccp - Release dma channels before dmaengine unrgister
          - crypto: inside-secure - Change swab to swab32
          - crypto: qat - fix DMA transfer direction
          - clocksource/drivers/arm_arch_timer: Fix handling of ARM erratum 858921
          - clocksource/drivers/timer-gxp: Add missing error handling in
            gxp_timer_probe
          - cifs: return correct error in ->calc_signature()
          - iommu/iova: Fix module config properly
          - tracing: kprobe: Fix kprobe event gen test module on exit
          - tracing: kprobe: Make gen test module work in arm and riscv
          - tracing/osnoise: Fix possible recursive locking in stop_per_cpu_kthreads
          - ftrace: Fix recursive locking direct_mutex in ftrace_modify_direct_caller
          - kbuild: remove the target in signal traps when interrupted
          - linux/export: use inline assembler to populate symbol CRCs
          - kbuild: rpm-pkg: fix breakage when V=1 is used
          - crypto: marvell/octeontx - prevent integer overflows
          - crypto: cavium - prevent integer overflow loading firmware
          - random: schedule jitter credit for next jiffy, not in two jiffies
          - thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id
          - ACPI: APEI: do not add task_work to kernel thread to avoid memory leak
          - f2fs: fix race condition on setting FI_NO_EXTENT flag
          - f2fs: fix to account FS_CP_DATA_IO correctly
          - tools/power turbostat: Use standard Energy Unit for SPR Dram RAPL domain
          - selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle
          - ARM/dma-mapping: don't override ->dma_coherent when set from a bus
            notifier
          - module: tracking: Keep a record of tainted unloaded modules only
          - fs: dlm: fix race in lowcomms
          - rcu: Avoid triggering strict-GP irq-work when RCU is idle
          - rcu: Back off upon fill_page_cache_func() allocation failure
          - rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE()
          - rcu-tasks: Ensure RCU Tasks Trace loops have quiescent states
          - cpufreq: amd_pstate: fix wrong lowest perf fetch
          - ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
          - fortify: Fix __compiletime_strlen() under UBSAN_BOUNDS_LOCAL
          - ACPI: tables: FPDT: Don't call acpi_os_map_memory() on invalid phys
            address
          - cpufreq: intel_pstate: Add Tigerlake support in no-HWP mode
          - MIPS: BCM47XX: Cast memcmp() of function to (void *)
          - powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
          - thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to
            avoid crash
          - ARM: decompressor: Include .data.rel.ro.local
          - ACPI: x86: Add a quirk for Dell Inspiron 14 2-in-1 for StorageD3Enable
          - NFSD: Return nfserr_serverfault if splice_ok but buf->pages have data
          - NFSD: fix use-after-free on source server when doing inter-server copy
          - wifi: brcmfmac: fix invalid address access when enabling SCAN log level
          - bpftool: Clear errno after libcap's checks
          - net: ethernet: ti: davinci_mdio: Add workaround for errata i2329
          - openvswitch: Fix double reporting of drops in dropwatch
          - openvswitch: Fix overreporting of drops in dropwatch
          - tcp: annotate data-race around tcp_md5sig_pool_populated
          - micrel: ksz8851: fixes struct pointer issue
          - wifi: mac80211: accept STA changes without link changes
          - [x86] mce: Retrieve poison range from hardware
          - wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
          - thunderbolt: Add back Intel Falcon Ridge end-to-end flow control
            workaround
          - [x86] apic: Don't disable x2APIC if locked
          - net: axienet: Switch to 64-bit RX/TX statistics
          - net-next: Fix IP_UNICAST_IF option behavior for connected sockets
          - xfrm: Update ipcomp_scratches with NULL when freed
          - wifi: ath11k: Register shutdown handler for WCN6750
          - rtw89: ser: leave lps with mutex
          - net: ftmac100: fix endianness-related issues from 'sparse'
          - iavf: Fix race between iavf_close and iavf_reset_task
          - wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
          - Bluetooth: btintel: Mark Intel controller to support LE_STATES quirk
          - regulator: core: Prevent integer underflow
          - wifi: ath11k: mhi: fix potential memory leak in ath11k_mhi_register()
          - wifi: mt76: mt7921: reset msta->airtime_ac while clearing up hw value
          - wifi: rtw89: free unused skb to prevent memory leak
          - wifi: rtw89: fix rx filter after scan
          - Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
          - Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
          - Bluetooth: hci_event: Make sure ISO events don't affect non-ISO
            connections
          - bnxt_en: replace reset with config timestamps
          - selftests/bpf: Free the allocated resources after test case succeeds
          - can: bcm: check the result of can_send() in bcm_can_tx()
          - wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
          - wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
          - wifi: rt2x00: set VGC gain for both chains of MT7620
          - wifi: rt2x00: set SoC wmac clock register
          - wifi: rt2x00: correctly set BBP register 86 for MT7620
          - hwmon: (sht4x) do not overflow clamping operation on 32-bit platforms
          - net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
          - bpf: Adjust kprobe_multi entry_ip for CONFIG_X86_KERNEL_IBT
          - bpf: use bpf_prog_pack for bpf_dispatcher
          - Bluetooth: L2CAP: Fix user-after-free
          - net: sched: cls_u32: Avoid memcpy() false-positive warning
          - libbpf: Fix overrun in netlink attribute iteration
          - i2c: designware-pci: Group AMD NAVI quirk parts together
          - r8152: Rate limit overflow messages (CVE-2022-3594)
          - drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
          - drm: Use size_t type for len variable in drm_copy_field()
          - drm: Prevent drm_copy_field() to attempt copying a NULL pointer
          - drm/komeda: Fix handling of atomic commits in the atomic_commit_tail hook
          - gpu: lontium-lt9611: Fix NULL pointer dereference in
            lt9611_connector_init()
          - drm/amd/display: fix overflow on MIN_I64 definition
          - ALSA: hda: Fix page fault in snd_hda_codec_shutdown()
          - ALSA: usb-audio: Add quirk to enable Avid Mbox 3 support
          - udmabuf: Set ubuf->sg = NULL if the creation of sg table fails
          - platform/x86: pmc_atom: Improve quirk message to be less cryptic
          - drm/amd: fix potential memory leak
          - drm: bridge: dw_hdmi: only trigger hotplug event on link change
          - drm/amd/display: Fix variable dereferenced before check
          - drm/amdgpu: Skip the program of MMMC_VM_AGP_* in SRIOV on MMHUB v3_0_0
          - drm/admgpu: Skip CG/PG on SOC21 under SRIOV VF
          - ALSA: usb-audio: Register card at the last interface
          - drm/vc4: vec: Fix timings for VEC modes
          - drm: panel-orientation-quirks: Add quirk for Anbernic Win600
          - drm: panel-orientation-quirks: Add quirk for Aya Neo Air
          - platform/chrome: cros_ec: Notify the PM of wake events during resume
          - platform/x86: hp-wmi: Setting thermal profile fails with 0x06
          - platform/x86: msi-laptop: Change DMI match / alias strings to fix module
            autoloading
          - ALSA: intel-dspconfig: add ES8336 support for AlderLake-PS
          - ASoC: SOF: pci: Change DMI match info to support all Chrome platforms
          - ASoC: sunxi: sun4i-codec: set debugfs_prefix for CPU DAI component
          - ASoC: SOF: add quirk to override topology mclk_id
          - drm/amdgpu: SDMA update use unlocked iterator
          - drm/amd/display: Fix urgent latency override for DCN32/DCN321
          - drm/amd/display: correct hostvm flag
          - drm/amdgpu: fix initial connector audio value
          - ASoC: amd: yc: Add ASUS UM5302TA into DMI table
          - ASoC: amd: yc: Add Lenovo Yoga Slim 7 Pro X to quirks table
          - drm/meson: reorder driver deinit sequence to fix use-after-free bug
          - drm/meson: explicitly remove aggregate driver at module unload time
          - drm/meson: remove drm bridges at aggregate driver unbind time
          - mmc: sdhci-msm: add compatible string check for sdm670
          - drm/dp: Don't rewrite link config when setting phy test pattern
          - drm/amd/display: Remove interface for periodic interrupt 1
          - drm/amd/display: polling vid stream status in hpo dp blank
          - drm/amdkfd: Fix UBSAN shift-out-of-bounds warning
          - ARM: dts: imx6: delete interrupts property if interrupts-extended is set
          - ARM: dts: imx7d-sdb: config the max pressure for tsc2046
          - [arm64] dts: qcom: sc7280-idp: correct ADC channel node name and unit
            address
          - ARM: dts: imx6q: add missing properties for sram
          - ARM: dts: imx6dl: add missing properties for sram
          - ARM: dts: imx6qp: add missing properties for sram
          - ARM: dts: imx6sl: add missing properties for sram
          - ARM: dts: imx6sll: add missing properties for sram
          - ARM: dts: imx6sx: add missing properties for sram
          - ARM: dts: imx6sl: use tabs for code indent
          - ARM: dts: imx6sx-udoo-neo: don't use multiple blank lines
          - [arm64] dts: imx8mm-kontron: Use the VSELECT signal to switch SD card IO
            voltage
          - [arm64] dts: imx8mq-librem5: Add bq25895 as max17055's power supply
          - ARM: orion: fix include path
          - btrfs: dump extra info if one free space cache has more bitmaps than it
            should
          - btrfs: scrub: properly report super block errors in system log
          - btrfs: scrub: try to fix super block errors
          - btrfs: don't print information about space cache or tree every remount
          - btrfs: call __btrfs_remove_free_space_cache_locked on cache load failure
          - ARM: 9233/1: stacktrace: Skip frame pointer boundary check for
            call_with_stack()
          - ARM: 9234/1: stacktrace: Avoid duplicate saving of exception PC value
          - ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n
          - clk: zynqmp: Fix stack-out-of-bounds in strncpy`
          - media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
          - media: platform: fix some double free in meson-ge2d and mtk-jpeg and
            s5p-mfc
          - clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
          - RDMA/rxe: Delete error messages triggered by incoming Read requests
          - usb: host: xhci-plat: suspend and resume clocks
          - usb: host: xhci-plat: suspend/resume clks for brcm
          - scsi: lpfc: Fix null ndlp ptr dereference in abnormal exit path for GFT_ID
          - dmaengine: ti: k3-udma: Reset UDMA_CHAN_RT byte counters to prevent
            overflow
          - scsi: 3w-9xxx: Avoid disabling device if failing to enable it
          - nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
          - iommu/arm-smmu-v3: Make default domain type of HiSilicon PTT device to
            identity
          - usb: gadget: uvc: increase worker prio to WQ_HIGHPRI
          - power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
          - staging: vt6655: fix potential memory leak
          - blk-throttle: prevent overflow while calculating wait time
          - ata: libahci_platform: Sanity check the DT child nodes number
          - bcache: fix set_at_max_writeback_rate() for multiple attached devices
          - soundwire: cadence: Don't overwrite msg->buf during write commands
          - soundwire: intel: fix error handling on dai registration issues
          - hid: topre: Add driver fixing report descriptor
          - HID: roccat: Fix use-after-free in roccat_read()
          - HSI: ssi_protocol: fix potential resource leak in ssip_pn_open()
          - HID: nintendo: check analog user calibration for plausibility
          - md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
          - usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
          - usb: musb: Fix musb_gadget.c rxstate overflow bug
          - usb: dwc3: core: add gfladj_refclk_lpm_sel quirk
          - [arm64] dts: imx8mp: Add snps,gfladj-refclk-lpm-sel quirk to USB nodes
          - usb: dwc3: core: Enable GUCTL1 bit 10 for fixing termination error after
            resume bug
          - Revert "usb: storage: Add quirk for Samsung Fit flash"
          - io_uring: fix CQE reordering
          - staging: rtl8723bs: fix potential memory leak in rtw_init_drv_sw()
          - staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
          - scsi: tracing: Fix compile error in trace_array calls when TRACING is
            disabled
          - ext2: Use kvmalloc() for group descriptor array
          - nvme: handle effects after freeing the request
          - nvme: copy firmware_rev on each init
          - nvmet-tcp: add bounds check on Transfer Tag
          - usb: idmouse: fix an uninit-value in idmouse_open
          - blk-mq: use quiesced elevator switch when reinitializing queues
          - hwmon (occ): Retry for checksum failure
          - fsi: occ: Prevent use after free
          - fsi: master-ast-cf: Fix missing of_node_put in fsi_master_acf_probe
          - dmaengine: dw-edma: Remove runtime PM support
          - usb: typec: ucsi: Don't warn on probe deferral
          - clk: bcm2835: Round UART input clock up
          - perf: Skip and warn on unknown format 'configN' attrs
          - perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
          - perf intel-pt: Fix system_wide dummy event for hybrid
          - io_uring/net: refactor io_sr_msg types
          - io_uring/net: use io_sr_msg for sendzc
          - io_uring/net: don't lose partial send_zc on fail
          - io_uring/net: rename io_sendzc()
          - io_uring/net: don't skip notifs for failed requests
          - io_uring/net: fix notif cqe reordering
          - mm: hugetlb: fix UAF in hugetlb_handle_userfault
          - net: ieee802154: return -EINVAL for unknown addr type
          - ALSA: usb-audio: Fix last interface check for registration
          - blk-wbt: fix that 'rwb->wc' is always set to 1 in wbt_init()
          - net: ethernet: ti: davinci_mdio: fix build for mdio bitbang uses
          - Revert "drm/amd/display: correct hostvm flag"
          - Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
          - net/ieee802154: don't warn zero-sized raw_sendmsg()
          - powerpc/64s/interrupt: Fix lost interrupts when returning to soft-masked
            context
          - drm/amd/display: Fix build breakage with CONFIG_DEBUG_FS=n
          - io_uring: fix fdinfo sqe offsets calculation
          - io_uring/rw: ensure kiocb_end_write() is always called
          - [arm64] dts: qcom: sc8280xp-pmics: Remove reg entry & use correct node
            name for pmc8280c_lpg node
      .
        [ Zhang Ning ]
        * [arm64] disable CONFIG_ARM_CPUIDLE, it's arm only
      .
        [ Salvatore Bonaccorso ]
        * Bump ABI to 2
        * [rt] Refresh "serial: 8250: implement write_atomic"
      e295c805
    • Lorenzo "Palinuro" Faletra's avatar
      2b19f5f8
  2. 18 Oct, 2022 2 commits
    • Lorenzo "Palinuro" Faletra's avatar
      Import Debian changes 6.0.2-1parrot1 · 99b7abb3
      Lorenzo "Palinuro" Faletra authored
      linux (6.0.2-1parrot1) parrot-updates; urgency=medium
      .
        * Import new Debian unstable version.
        * Use gcc-11 instead of gcc-12.
        * perf: Disable use of libopencsd, as bullseye's version is too old
        * Bump Parrot ABI number to 14parrot1.
        * Increase timer frequency to 300Hz.
        * Disable generation of signed kernel images.
        * Import Parrot Wifi patches.
      .
      linux (6.0.2-1) unstable; urgency=high
      .
        * New upstream stable update:
          https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.0.1
          - xsk: Inherit need_wakeup flag for shared sockets
          - fs: fix UAF/GPF bug in nilfs_mdt_destroy
          - fix coredump breakage
          - sparc: Unbreak the build
          - Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
          - hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
          - docs: update mediator information in CoC docs
          - hwmon: (aquacomputer_d5next) Fix Quadro fan speed offsets
          - usb: mon: make mmapped memory read only
          - USB: serial: ftdi_sio: fix 300 bps rate for SIO
          - gpiolib: acpi: Add support to ignore programming an interrupt
          - gpiolib: acpi: Add a quirk for Asus UM325UAZ
          - RISC-V: Print SSTC in canonical order
          - bpf: Gate dynptr API behind CAP_BPF
          - net: ethernet: mtk_eth_soc: fix state in __mtk_foe_entry_clear
          - bpf: Fix resetting logic for unreferenced kptrs
          - Bluetooth: use hdev->workqueue when queuing hdev->{cmd,ncmd}_timer works
          https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.0.2
          - nilfs2: fix NULL pointer dereference at nilfs_bmap_lookup_at_level()
          - nilfs2: fix use-after-free bug of struct nilfs_root
          - nilfs2: fix leak of nilfs_root in case of writer thread creation failure
          - nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
          - nvme-pci: set min_align_mask before calculating max_hw_sectors
          - random: restore O_NONBLOCK support
          - random: clamp credited irq bits to maximum mixed
          - ALSA: hda: Fix position reporting on Poulsbo
          - ALSA: hda/realtek: Add quirk for HP Zbook Firefly 14 G9 model
          - efi: Correct Macmini DMI match in uefi cert quirk
          - scsi: qla2xxx: Revert "scsi: qla2xxx: Fix response queue handler reading stale packets"
          - scsi: qla2xxx: Fix response queue handler reading stale packets
          - scsi: stex: Properly zero out the passthrough command structure
          - USB: serial: qcserial: add new usb-id for Dell branded EM7455
          - Revert "USB: fixup for merge issue with "usb: dwc3: Don't switch OTG -> peripheral if extcon is present""
          - Revert "usb: dwc3: Don't switch OTG -> peripheral if extcon is present"
          - Revert "powerpc/rtas: Implement reentrant rtas call"
          - Revert "crypto: qat - reduce size of mapped region"
          - random: avoid reading two cache lines on irq randomness
          - random: use expired timer rather than wq for mixing fast pool
          - wifi: cfg80211: fix u8 overflow in cfg80211_update_notlisted_nontrans()
            CVE-2022-41674
          - wifi: cfg80211/mac80211: reject bad MBSSID elements
          - wifi: mac80211: fix MBSSID parsing use-after-free
            CVE-2022-42719
          - wifi: cfg80211: ensure length byte is present before access
          - wifi: cfg80211: fix BSS refcounting bugs
            CVE-2022-42720
          - wifi: cfg80211: avoid nontransmitted BSS list corruption
            CVE-2022-42721
          - wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
          - wifi: mac80211: fix crash in beacon protection for P2P-device
            CVE-2022-42722
          - wifi: cfg80211: update hidden BSSes to avoid WARN_ON
          - mctp: prevent double key removal and unref
          - Input: xpad - add supported devices as contributed on github
          - Input: xpad - fix wireless 360 controller breaking after suspend
          - misc: pci_endpoint_test: Aggregate params checking for xfer
          - misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic
      .
        [ Bastian Blank]
        * [cloud] Enable INTEGRITY.
      .
      linux (6.0-1~exp1) experimental; urgency=medium
      .
        * New upstream release: https://kernelnewbies.org/Linux_6.0
      .
        [ Salvatore Bonaccorso ]
        * drivers/hwmon: Enable SENSORS_SHT3x and SENSORS_SHT4x as module
          (Closes: #1016092)
        * [rt] Update to 6.0-rt11
      .
        [ Diederik de Haas ]
        * [amd64] drivers/dma: Enable INTEL_IDXD as module and INTEL_IDXD_SVM as
          builtin (Closes: #1021337)
      .
        [ Ben Hutchings ]
        * d/salsa-ci.yml: Use !reference to include scripts from common pipeline
        * d/salsa-ci.yml: Remove obsolete lintian error suppressions
      .
        [ Christopher Obbard ]
        * [arm64] drivers/regulator: Enable MP8859 as module
      .
        [ Mateusz Łukasik ]
        * Compile with gcc-12 on all architectures
        * d/salsa-ci.yml: Add linux-compiler-* packages to build-signed job artifacts
      .
      linux (6.0~rc7-1~exp1) experimental; urgency=medium
      .
        * New upstream release candidate
      .
        [ Ben Hutchings ]
        * Rewrite "tools/perf: pmu-events: Fix reproducibility" for new Python
          generator
        * Build-depend on python3-setuptools for linux-perf
        * udeb: Move ledtrig-audio from sound-modules to kernel-image
        * d/bin/gencontrol_signed.py: Fix source package name in Built-Using field
        * [rt] Update to 6.0-rc5-rt7
      .
        [ Didier Raboud ]
        * d/lib/python/debian_linux: Add two more known fields to
          {Source,Binary}Package
      .
        [ Diederik de Haas ]
        * [arm64] drivers/gpu/drm/v3d: Enable DRM_V3D as module (Closes: #977441)
        * drivers/nfc/nxp-nci: Enable NFC_NXP_NCI and NFC_NXP_NCI_I2C and reenable
          NFC_NCI as module (Closes: #1020276)
      .
        [ Frieder Schrempf ]
        * [arm64] Add nvmem-imx-ocotp driver to kernel-image udeb
        * [arm64] Add imx2_wdt driver to kernel-image udeb
        * udeb: Also add drivers in subdirectories of drivers/net/phy
        * [arm64] Add i2c-imx to i2c-modules udeb
      .
        [ Bastian Blank ]
        * Make cross build of signed packages self contained.
      .
        [ Zhang Ning ]
        * [armhf] enable multiple configs for rk3288
        * [config] enable CONFIG_RTL8723BS for all arch
      .
        [ Zhang Boyang ]
        * [riscv64] Enable AMDGPU
      99b7abb3
    • Lorenzo "Palinuro" Faletra's avatar
      Import Upstream version 6.0.2 · a0cac0b6
      Lorenzo "Palinuro" Faletra authored
      a0cac0b6
  3. 13 Oct, 2022 2 commits
    • Lorenzo "Palinuro" Faletra's avatar
      Import Debian changes 5.19.11-11parrot1 · f5e8af08
      Lorenzo "Palinuro" Faletra authored
      linux (5.19.11-11parrot1) parrot-updates; urgency=medium
      .
        * Import new Debian backports version.
        * Bump Parrot ABI number to 14parrot1.
        * Increase timer frequency to 300Hz.
        * Disable generation of signed kernel images.
        * Import Parrot Wifi patches.
      .
      linux (5.19.11-1~bpo11+1) bullseye-backports; urgency=medium
      .
        * Rebuild for bullseye-backports:
          - Change ABI number to 0.deb11.2
          - Disable building rtla, since bullseye's libtraceevent and libtracefs
            are too old
      .
      linux (5.19.11-1) unstable; urgency=medium
      .
        * New upstream stable update:
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.19.7
          - [arm*] drm/vc4: hdmi: Rework power up
          - [arm*] drm/vc4: hdmi: Depends on CONFIG_PM
          - crypto: lib - remove unneeded selection of XOR_BLOCKS
          - docs: kerneldoc-preamble: Test xeCJK.sty before loading
          - [arm64] errata: Add Cortex-A510 to the repeat tlbi list
          - Bluetooth: L2CAP: Fix build errors in some archs
          - Revert "PCI/portdrv: Don't disable AER reporting in
            get_port_device_capability()"
          - HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
          - media: pvrusb2: fix memory leak in pvr_probe
          - USB: gadget: Fix use-after-free Read in usb_udc_uevent()
          - HID: hidraw: fix memory leak in hidraw_release()
          - net: fix refcount bug in sk_psock_get (2)
          - fbdev: fb_pm2fb: Avoid potential divide by zero error
          - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace
            is dead
          - bpf: Don't redirect packets with invalid pkt_len
          - mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse
          - ALSA: usb-audio: Add quirk for LH Labs Geek Out HD Audio 1V5
          - HID: input: fix uclogic tablets
          - HID: add Lenovo Yoga C630 battery quirk
          - [amd64] HID: AMD_SFH: Add a DMI quirk entry for Chromebooks
          - HID: Add Apple Touchbar on T2 Macs in hid_have_special_driver list
          - HID: asus: ROG NKey: Ignore portion of 0x5a report
          - HID: nintendo: fix rumble worker null pointer deref
          - HID: thrustmaster: Add sparco wheel and fix array length
          - [amd64] HID: intel-ish-hid: ipc: Add Meteor Lake PCI device ID
          - ASoC: rt5640: Fix the JD voltage dropping issue
          - rtla: Fix tracer name
          - drm/amd/display: Add a missing register field for HPO DP stream encoder
          - drm/amd/display: Device flash garbage before get in OS
          - drm/amd/display: Avoid MPC infinite loop
          - drm/amd/display: Fix HDMI VSIF V3 incorrect issue
          - drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
          - drm/amd/display: clear optc underflow before turn off odm clock
          - drm/amd/display: Fix TDR eDP and USB4 display light up issue
          - drm/amd/pm: skip pptable override for smu_v13_0_7
          - drm/amd/pm: Fix a potential gpu_metrics_table memory leak
          - ksmbd: return STATUS_BAD_NETWORK_NAME error status if share is not
            configured
          - neigh: fix possible DoS due to net iface start/stop loop
          - ALSA: hda/realtek: Add quirks for ASUS Zenbooks using CS35L41
          - [s390x] hypfs: avoid error message under KVM
          - ksmbd: don't remove dos attribute xattr on O_TRUNC open
          - drm/amdgpu: disable 3DCGCG/CGLS temporarily due to stability issue
          - drm/amd/pm: add missing ->fini_microcode interface for Sienna Cichlid
          - drm/amd/pm: add missing ->fini_xxxx interfaces for some SMU13 asics
          - drm/amd/display: Fix pixel clock programming
          - drm/amdgpu: Increase tlb flush timeout for sriov
          - drm/amd/display: Fix plug/unplug external monitor will hang while playback
            MPO video
          - drm/amd/display: avoid doing vm_init multiple time
          - drm/amdgpu: Add decode_iv_ts helper for ih_v6 block
          - drm/amdgpu: Add secure display TA load for Renoir
          - drm/amdgpu: Fix interrupt handling on ih_soft ring
          - netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
          - [x86] platform/x86: serial-multi-instantiate: Add CLSA0101 Laptop
          - ALSA: hda/cs8409: Support new Dolphin Variants
          - btrfs: move lockdep class helpers to locking.c
          - btrfs: fix lockdep splat with reloc root extent buffers
          - btrfs: tree-checker: check for overlapping extent items
          - [arm*] android: binder: fix lockdep check on clearing vma
          - net/af_packet: check len when min_header_len equals to 0
          - net: neigh: don't call kfree_skb() under spin_lock_irqsave()
          - [arm64] cacheinfo: Fix incorrect assignment of signed error value to
            unsigned fw_level
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.19.8
          - [arm64] drm/msm/dp: make eDP panel as the first connected connector
          - [arm64] drm/msm/dsi: fix the inconsistent indenting
          - [arm64] drm/msm/dpu: populate wb or intf before reset_intf_cfg
          - [arm64] drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
          - [arm64] drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
          - [arm64] drm/msm/dsi: Fix number of regulators for SDM660
          - [x86] platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
          - [x86] platform/x86: x86-android-tablets: Fix broken touchscreen on Chuwi
            Hi8 with Windows BIOS
          - xsk: Fix corrupted packets for XDP_SHARED_UMEM
          - [arm64] drm/msm/gpu: Drop qos request if devm_devfreq_add_device() fails
          - iio: adc: mcp3911: make use of the sign bit
          - skmsg: Fix wrong last sg check in sk_msg_recvmsg()
          - bpf: Restrict bpf_sys_bpf to CAP_PERFMON
          - ip_tunnel: Respect tunnel key's "flow_flags" in IP tunnels
          - bpf, cgroup: Fix kernel BUG in purge_effective_progs
          - [x86] drm/i915/gvt: Fix Comet Lake
          - ieee802154/adf7242: defer destroy_workqueue call
          - bpf: Fix a data-race around bpf_jit_limit.
          - [x86] drm/i915/ttm: fix CCS handling
          - [x86] drm/i915/display: avoid warnings when registering dual panel
            backlight
          - ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
          - wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
          - xhci: Fix null pointer dereference in remove if xHC has only one roothub
          - Revert "xhci: turn off port power in shutdown"
          - bpf: Allow helpers to accept pointers with a fixed size
          - bpf: Tidy up verifier check_func_arg()
          - bpf: Do mark_chain_precision for ARG_CONST_ALLOC_SIZE_OR_ZERO
          - Bluetooth: hci_event: Fix vendor (unknown) opcode status handling
          - Bluetooth: hci_sync: Fix suspend performance regression
          - Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt
          - Bluetooth: hci_sync: hold hdev->lock when cleanup hci_conn
          - [arm64,armhf] net: smsc911x: Stop and start PHY during suspend and resume
          - openvswitch: fix memory leak at failed datapath creation
          - nfp: flower: fix ingress police using matchall filter
          - [x86] drm/i915: fix null pointer dereference
          - net: sched: tbf: don't call qdisc_put() while holding tree lock
          - net/sched: fix netdevice reference leaks in attach_default_qdiscs()
          - net: phy: micrel: Make the GPIO to be non-exclusive
          - sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
          - tcp: annotate data-race around challenge_timestamp
          - Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
          - net/smc: Remove redundant refcount increase
          - soundwire: qcom: fix device status array range
          - mm/slab_common: Deleting kobject in kmem_cache_destroy() without holding
            slab_mutex/cpu_hotplug_lock
          - [arm64] serial: fsl_lpuart: RS485 RTS polariy is inverse
          - staging: rtl8712: fix use after free bugs
          - staging: r8188eu: Add Rosewill USB-N150 Nano to device tables
          - staging: r8188eu: add firmware dependency
          - [powerpc*] rtas: Fix RTAS MSR[HV] handling for Cell
          - vt: Clear selection before changing the font
          - [arm64] tty: serial: lpuart: disable flow control while waiting for the
            transmit engine to complete
          - Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
          - iio: ad7292: Prevent regulator double disable
          - iio: adc: mcp3911: correct "microchip,device-addr" property
          - iio: adc: mcp3911: use correct formula for AD conversion
          - firmware_loader: Fix use-after-free during unregister
          - firmware_loader: Fix memory leak in firmware upload
          - USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
          - landlock: Fix file reparenting without explicit LANDLOCK_ACCESS_FS_REFER
          - mmc: core: Fix UHS-I SD 1.8V workaround branch
          - mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch
            failure
          - [arm*] binder: fix UAF of ref->proc caused by race condition
          - [arm*] binder: fix alloc->vma_vm_mm null-ptr dereference
          - cifs: fix small mempool leak in SMB2_negotiate()
          - [x86] KVM: VMX: Heed the 'msr' argument in msr_write_intercepted()
          - [armhf] clk: ti: Fix missing of_node_get() ti_find_clock_provider()
          - [x86] drm/i915/reg: Fix spelling mistake "Unsupport" -> "Unsupported"
          - clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
          - Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
          - clk: core: Fix runtime PM sequence in clk_core_unprepare()
          - [arm64,armhf] Input: rk805-pwrkey - fix module autoloading
          - [arm*] clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
          - [arm*] clk: bcm: rpi: Prevent out-of-bounds access
          - [arm*] clk: bcm: rpi: Add missing newline
          - [arm*] hwmon: (gpio-fan) Fix array out of bounds access
          - [arm64,armhf] gpio: pca953x: Add mutex_lock for regcache sync in PM
          - [x86] KVM: x86: Mask off unsupported and unknown bits of
            IA32_ARCH_CAPABILITIES
          - xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
          - mm: pagewalk: Fix race between unmap and page walker
          - xen-blkback: Advertise feature-persistent as user requested
          - xen-blkfront: Advertise feature-persistent as user requested
          - xen-blkfront: Cache feature_persistent value before advertisement
          - [x86] thunderbolt: Use the actual buffer in tb_async_error()
          - [x86] thunderbolt: Check router generation before connecting xHCI
          - [arm64] usb: dwc3: pci: Add support for Intel Raptor Lake
          - media: mceusb: Use new usb_control_msg_*() routines
          - xhci: Add grace period after xHC start to prevent premature runtime
            suspend.
          - [arm64,armhf] usb: dwc3: disable USB core PHY management
          - [arm64,armhf] usb: dwc3: gadget: Avoid duplicate requests to enable
            Run/Stop
          - [arm64,armhf] usb: dwc3: fix PHY disable sequence
          - USB: serial: ch341: fix lost character on LCR updates
          - USB: serial: ch341: fix disabled rx timer on older devices
          - USB: serial: cp210x: add Decagon UCA device id
          - USB: serial: option: add support for OPPO R11 diag port
          - USB: serial: option: add Quectel EM060K modem
          - USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
          - Revert "usb: typec: ucsi: add a common function
            ucsi_unregister_connectors()"
          - usb: typec: altmodes/displayport: correct pin assignment for UFP
            receptacles
          - usb: typec: tcpm: Return ENOTSUPP for power supply prop writes
          - [arm*] usb: dwc2: fix wrong order of phy_power_on and phy_init
          - USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
          - usb-storage: Add ignore-residue quirk for NXP PN7462AU
          - [s390x] hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
          - [s390x] fix nospec table alignments
          - USB: core: Prevent nested device-reset calls
          - usb: gadget: f_uac2: fix superspeed transfer
          - usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
          - USB: gadget: Fix obscure lockdep violation for udc_mutex
          - dma-buf/dma-resv: check if the new fence is really later
          - driver core: Don't probe devices after bus_type.match() probe deferral
          - wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
          - wifi: mac80211: Fix UAF in ieee80211_scan_rx()
          - ip: fix triggering of 'icmp redirect'
          - net: Use u64_stats_fetch_begin_irq() for stats fetch.
          - net: mac802154: Fix a condition in the receive path
          - ALSA: memalloc: Revive x86-specific WC page allocations again
          - ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
          - ALSA: seq: oss: Fix data-race for max_midi_devs access
          - ALSA: seq: Fix data-race at module auto-loading
          - [x86] drm/i915/backlight: Disable pps power hook for aux based backlight
          - [x86] drm/i915/guc: clear stalled request after a reset
          - [x86] drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
          - [x86] drm/i915: Skip wm/ddb readout for disabled pipes
          - tty: n_gsm: add sanity check for gsm->receive in gsm_receive_buf()
          - tty: n_gsm: initialize more members at gsm_alloc_mux()
          - tty: n_gsm: replace kicktimer with delayed_work
          - tty: n_gsm: avoid call of sleeping functions from atomic context
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.19.9
          - efi: libstub: Disable struct randomization
          - efi: capsule-loader: Fix use-after-free in efi_capsule_write
            (CVE-2022-40307)
          - wifi: mt76: mt7921e: fix crash in chip reset fail
          - wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in
            il4965_rs_fill_link_cmd()
          - fs: only do a memory barrier for the first set_buffer_uptodate()
          - scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
          - scsi: core: Allow the ALUA transitioning state enough time
          - scsi: megaraid_sas: Fix double kfree()
          - drm/gem: Fix GEM handle release errors
          - drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to
            psp_hw_fini
          - drm/amdgpu: fix hive reference leak when adding xgmi device
          - drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
          - drm/amdgpu: Remove the additional kfd pre reset call for sriov
          - drm/radeon: add a force flush to delay work when radeon
          - scsi: ufs: core: Reduce the power mode change timeout
          - [hppa/parisc64] Revert "parisc: Show error if wrong 32/64-bit compiler is
            being used"
          - [hppa/parisc64] parisc: ccio-dma: Handle kmalloc failure in
            ccio_init_resources()
          - [hppa/parisc64] parisc: Add runtime check to prevent PA2.0 kernels on
            PA1.x machines
          - [arm64] errata: add detection for AMEVCNTR01 incrementing incorrectly
          - netfilter: conntrack: work around exceeded receive window
          - [amd64] thermal/int340x_thermal: handle data_vault when the value is
            ZERO_SIZE_PTR
          - cpufreq: check only freq_table in __resolve_freq()
          - net/core/skbuff: Check the return value of skb_copy_bits()
          - md: Flush workqueue md_rdev_misc_wq in md_alloc()
          - fbdev: fbcon: Destroy mutex on freeing struct fb_info
          - drm/amdgpu: add sdma instance check for gfx11 CGCG
          - drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
          - ALSA: pcm: oss: Fix race at SNDCTL_DSP_SYNC
          - ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
          - ALSA: hda: Once again fix regression of page allocations with IOMMU
          - ALSA: aloop: Fix random zeros in capture data when using jiffies timer
          - ALSA: usb-audio: Split endpoint setups for hw_params and prepare
          - ALSA: usb-audio: Clear fixed clock rate at closing EP
          - ALSA: usb-audio: Fix an out-of-bounds bug in
            __snd_usb_parse_audio_interface()
          - tracefs: Only clobber mode/uid/gid on remount if asked
          - tracing: hold caller_addr to hardirq_{enable,disable}_ip
          - tracing: Fix to check event_mutex is held while accessing trigger list
          - btrfs: zoned: set pseudo max append zone limit in zone emulation mode
          - btrfs: zoned: fix API misuse of zone finish waiting
          - vfio/type1: Unpin zero pages
          - kprobes: Prohibit probes in gate area
          - debugfs: add debugfs_lookup_and_remove()
          - drm/amd/display: fix memory leak when using debugfs_lookup()
          - driver core: fix driver_set_override() issue with empty strings
          - nvmet: fix a use-after-free
          - [x86] drm/i915/bios: Copy the whole MIPI sequence block
          - [x86] drm/i915/slpc: Let's fix the PCODE min freq table setup for SLPC
          - [x86] drm/i915: Implement WaEdpLinkRateDataReload
          - scsi: mpt3sas: Fix use-after-free warning
          - scsi: lpfc: Add missing destroy_workqueue() in error path
          - cgroup: Elide write-locking threadgroup_rwsem when updating csses on an
            empty subtree
          - cgroup: Fix threadgroup_rwsem <-> cpus_read_lock() deadlock
          - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
          - smb3: missing inode locks in zero range
          - [arm64] Revert "soc: imx: imx8m-blk-ctrl: set power device name"
          - regmap: spi: Reserve space for register address/padding
          - [arm64] dts: imx8mp-venice-gw74xx: fix sai2 pin settings
          - [arm64] dts: ls1028a-qds-65bb: don't use in-band autoneg for 2500base-x
          - [arm64] soc: imx: gpcv2: Assert reset before ungating clock
          - [arm64] dts: imx8mm-venice-gw7901: fix port/phy validation
          - regulator: core: Clean up on enable failure
          - [arm64] tee: fix compiler warning in tee_shm_register()
          - RDMA/irdma: Fix drain SQ hang with no completion
          - RDMA/cma: Fix arguments order in net device validation
          - [arm64] RDMA/hns: Fix supported page size
          - [arm64] RDMA/hns: Fix wrong fixed value of qp->rq.wqe_shift
          - [arm64] RDMA/hns: Remove the num_qpc_timer variable
          - netfilter: br_netfilter: Drop dst references before setting.
          - netfilter: nf_tables: clean up hook list when offload flags check fails
          - netfilter: nf_conntrack_irc: Fix forged IP logic (CVE-2022-2663)
          - RDMA/srp: Set scmnd->result only when scmnd is not NULL
          - ALSA: usb-audio: Inform the delayed registration more properly
          - ALSA: usb-audio: Register card again for iface over delayed_register
            option
          - rxrpc: Fix ICMP/ICMP6 error handling
          - rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
          - afs: Use the operation issue time instead of the reply time for callbacks
          - [arm64] Revert "net: phy: meson-gxl: improve link-up behavior"
          - sch_sfb: Don't assume the skb is still around after enqueueing to child
          - tipc: fix shift wrapping bug in map_get()
          - net: introduce __skb_fill_page_desc_noacc
          - tcp: TX zerocopy should not sense pfmemalloc status
          - ice: Fix DMA mappings leak
          - ice: use bitmap_free instead of devm_kfree
          - i40e: Fix kernel crash during module removal
          - iavf: Detach device during reset task
          - xen-netback: only remove 'hotplug-status' when the vif is actually
            destroyed
          - block: don't add partitions if GD_SUPPRESS_PART_SCAN is set
          - bonding: use unspecified address if no available link local address
          - bonding: add all node mcast address when slave up
          - ipv6: sr: fix out-of-bounds read when setting HMAC data.
          - IB/core: Fix a nested dead lock as part of ODP flow
          - RDMA/mlx5: Set local port to one when accessing counters
          - btrfs: zoned: fix mounting with conventional zones
          - erofs: fix error return code in erofs_fscache_{meta_,}read_folio
          - erofs: fix pcluster use-after-free on UP platforms
          - nvme-tcp: fix UAF when detecting digest errors
          - nvme-tcp: fix regression that causes sporadic requests to time out
          - tcp: fix early ETIMEDOUT after spurious non-SACK RTO
          - btrfs: fix the max chunk size and stripe length calculation
          - nvmet: fix mar and mor off-by-one errors
          - RDMA/irdma: Report the correct max cqes from query device
          - RDMA/irdma: Return error on MR deregister CQP failure
          - RDMA/irdma: Return correct WC error for bind operation failure
          - RDMA/irdma: Report RNR NAK generation in device caps
          - [arm64] net: dsa: felix: disable cut-through forwarding for frames
            oversized for tc-taprio
          - [arm64] net: dsa: felix: access QSYS_TAG_CONFIG under tas_lock in
            vsc9959_sched_speed_set
          - net/smc: Fix possible access to freed memory in link clear
          - io_uring: recycle kbuf recycle on tw requeue
          - net: phy: lan87xx: change interrupt src of link_up to comm_ready
          - sch_sfb: Also store skb len before calling child enqueue
          - lsm,io_uring: add LSM hooks for the new uring_cmd file op
          - selinux: implement the security_uring_cmd() LSM hook
          - i40e: Refactor tc mqprio checks
          - i40e: Fix ADQ rate limiting for PF
          - net: bonding: replace dev_trans_start() with the jiffies of the last
            ARP/NS
          - bonding: accept unsolicited NA message
          - swiotlb: avoid potential left shift overflow
          - [amd64] iommu/amd: use full 64-bit value in build_completion_wait()
          - [s390x] boot: fix absolute zero lowcore corruption on boot
          - time64.h: consolidate uses of PSEC_PER_NSEC
          - [arm64] net: dsa: felix: tc-taprio intervals smaller than MTU should send
            at least one packet
          - [amd64] iommu/vt-d: Fix possible recursive locking in intel_iommu_init()
          - [arm64] Revert "arm64: kasan: Revert "arm64: mte: reset the page tag in
            page->flags""
          - [x86] hwmon: (asus-ec-sensors) add support for Strix Z690-a D4
          - [x86] hwmon: (asus-ec-sensors) add support for Maximus XI Hero
          - [x86] hwmon: (asus-ec-sensors) add missing sensors for X570-I GAMING
          - [x86] hwmon: (asus-ec-sensors) add definitions for ROG ZENITH II EXTREME
          - [x86] hwmon: (asus-ec-sensors) autoload module via DMI data
          - [arm64] bti: Disable in kernel BTI when cross section thunks are broken
          - [amd64] iommu/vt-d: Correctly calculate sagaw value of IOMMU
          - iommu: Fix false ownership failure on AMD systems with PASID activated
          - drm/amd/display: Add SMU logging code
          - drm/amd/display: Removing assert statements for Linux
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.19.10
          - [amd64] iommu/vt-d: Fix kdump kernels boot failure with scalable mode
          - net/mlx5: Introduce ifc bits for using software vhca id
          - net/mlx5: Use software VHCA id when it's supported
          - RDMA/mlx5: Rely on RoCE fw cap instead of devlink when setting profile
          - RDMA/mlx5: Add a umr recovery flow
          - RDMA/mlx5: Fix UMR cleanup on error flow of driver init
          - [amd64] ACPI: resource: skip IRQ override on AMD Zen platforms
          - Input: goodix - add support for GT1158
          - [x86] platform/surface: aggregator_registry: Add support for Surface
            Laptop Go 2
          - [arm64] drm/msm/rd: Fix FIFO-full deadlock
          - peci: cpu: Fix use-after-free in adev_release()
          - [x86] kvm: x86: mmu: Always flush TLBs when enabling dirty logging
          - [amd64] hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered
            message
          - Bluetooth: MGMT: Fix Get Device Flags
          - tg3: Disable tg3 device on system reboot to avoid triggering AER
          - r8152: add PID for the Lenovo OneLink+ Dock
          - ieee802154: cc2520: add rc code in cc2520_tx()
          - Input: iforce - add support for Boeder Force Feedback Wheel
          - drm/amdgpu: disable FRU access on special SIENNA CICHLID card
          - drm/amd/pm: use vbios carried pptable for all SMU13.0.7 SKUs
          - nvme-pci: add NVME_QUIRK_BOGUS_NID for Lexar NM610
          - nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
          - drm/amd/amdgpu: skip ucode loading if ucode_size == 0
          - [x86] platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot
            keymap fixes
          - [x86] platform/x86: asus-wmi: Increase FAN_CURVE_BUF_LEN to 32
          - RDMA/irdma: Use s/g array in post send only when its valid
          - Input: goodix - add compatible string for GT1158
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.19.11
          - of: fdt: fix off-by-one error in unflatten_dt_nodes()
          - [arm64,armhf] pinctrl: rockchip: Enhance support for IRQ_TYPE_EDGE_BOTH
          - [arm64] pinctrl: sunxi: Fix name for A100 R_PIO
          - SUNRPC: Fix call completion races with call_decode()
          - NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
          - [arm64] gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in
            mpc85xx
          - NFSv4.2: Update mode bits after ALLOCATE and DEALLOCATE
          - Revert "SUNRPC: Remove unreachable error condition"
          - [arm64,armhf] drm/panel-edp: Fix delays for Innolux N116BCA-EA1
          - [arm64] drm/meson: Correct OSD1 global alpha value
          - [arm64] drm/meson: Fix OSD1 RGB to YCbCr coefficient
          - [x86] drm/i915/vdsc: Set VDSC PIC_HEIGHT before using for DP DSC
          - [x86] drm/i915/guc: Don't update engine busyness stats too frequently
          - [x86] drm/i915/guc: Cancel GuC engine busyness worker synchronously
          - block: blk_queue_enter() / __bio_queue_enter() must return -EAGAIN for
            nowait
          - [hppa/parisc] ccio-dma: Add missing iounmap in error path in ccio_probe()
          - of/device: Fix up of_dma_configure_id() stub
          - io_uring/msg_ring: check file type before putting
          - cifs: revalidate mapping when doing direct writes
          - cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
          - cifs: always initialize struct msghdr smb_msg completely
          - blk-lib: fix blkdev_issue_secure_erase
          - [hppa] parisc: Allow CONFIG_64BIT with ARCH=parisc
          - tools/include/uapi: Fix <asm/errno.h> for parisc and xtensa
          - [x86] drm/i915/gt: Fix perf limit reasons bit positions
          - [x86] drm/i915: Set correct domains values at _i915_vma_move_to_active
          - drm/amdgpu: make sure to init common IP before gmc
          - drm/amdgpu: Don't enable LTR if not supported
          - drm/amdgpu: move nbio ih_doorbell_range() into ih code for vega
          - drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
          - net: Find dst with sk's xfrm policy not ctl_sk
          - dt-bindings: apple,aic: Fix required item "apple,fiq-index" in affinity
            description
          - cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
          - ALSA: hda/sigmatel: Keep power up while beep is enabled
          - ALSA: hda/sigmatel: Fix unused variable warning for beep power change
          - [amd64] Revert "iommu/vt-d: Fix possible recursive locking in
            intel_iommu_init()"
      .
        [ Vincent Blut ]
        * [armhf] sound/soc/rockchip: Enable SND_SOC_RK3288_HDMI_ANALOG as module
          (Closes: #1019143)
      .
        [ Salvatore Bonaccorso ]
        * [x86] drivers/edac: Enable EDAC_I10NM as module (Closes: #1019248)
        * d/b/check-patches.sh: Use grep -(E|F) instead of deprecated (e|f)grep
        * d/templates/image.bug/include-model: Use grep -E instead of deprecated egrep
        * Bump ABI to 2
        * Refresh "Export symbols needed by Android drivers"
        * Revert "[hppa/parisc64] Drop explicit setting of 64BIT"
      .
        [ Ben Hutchings ]
        * debian/bin/genpatch-rt: Change argument parsing to use argparse
        * debian/bin/genpatch-rt: Add option to disable signature verification
        * linux-headers: Skip exact compiler version comparison (Closes: #1019749)
      .
        [ Aurelien Jarno ]
        * [arm64] Add support for misalignment fixups for multiword loads from next
          branch. Enable COMPAT_ALIGNMENT_FIXUPS.
      .
      linux (5.19.6-1) unstable; urgency=medium
      .
        * New upstream stable update:
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.19.1
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.19.2
          - Revert "net: usb: ax88179_178a needs FLAG_SEND_ZLP" (Closes: #1017894)
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.19.3
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.19.4
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.19.5
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.19.6
          - mm/gup: fix FOLL_FORCE COW security issue and remove FOLL_COW
            (CVE-2022-2590)
          - af_key: Do not call xfrm_probe_algs in parallel (CVE-2022-3028)
          - [x86] nospec: Unwreck the RSB stuffing
          - [x86] nospec: Fix i386 RSB stuffing (Closes: #1017425)
          - bpf: Don't use tnum_range on array range checking for poke descriptors
            (CVE-2022-2905)
      .
        [ Ben Hutchings ]
        * d/tests/kbuild: Fix default-flavour lookup for arches with no featuresets
        * d/tests/kbuild: Make flavour lookup verbose
        * d/lib/python/debian_linux, d/templates: Use variable for binary package
          name
        * lintian: Update overrides in linux-image-*-dbg for lintian 2.115
        * d/{signing_templates/,}rules.real: Run dh_lintian for all packages
        * [hppa,mips,mipsel,powerpc] lintian: Override error for 64-bit kernels
        * [mips64el,mipsel,ppc64el] lintian: Override error for unstripped vmlinux
        * [arm64] lintian: Override errors for vdso32.so in linux-image-*-dbg
        * android: Remove CONFIG_ANDROID:
          - Drop "wireguard: Clear keys after suspend despite CONFIG_ANDROID=y"
          - pm/sleep: Add PM_USERSPACE_AUTOSLEEP Kconfig
          - remove CONFIG_ANDROID
          - Enable/disable ANDROID_BINDER_IPC to match previous configuration
      .
        [ Vincent Blut ]
        * [x86] drivers/hwmon: Enable SENSORS_ASUS_WMI and SENSORS_ASUS_EC as
          modules
        * [x86] drivers/platform/x86: Enable NVIDIA_WMI_EC_BACKLIGHT as module
          (Closes: #1017972)
        * [arm64] drivers/spi: Enable SPI_GPIO and SPI_SUN6I as modules
          (Closes: #1016807)
      .
        [ Diederik de Haas ]
        * [arm64] drivers/gpu/drm/rockchip: Explicitly enable ROCKCHIP_VOP
      .
        [ Helge Deller ]
        * [hppa] Drop CONFIG_PATA_LEGACY for hppa architecture
      .
        [ Salvatore Bonaccorso ]
        * [rt] Refresh "rcutorture: Also force sched priority to timersd on boosting
          test."
        * Drop setting of CRYPTO_BLAKE2S
          crypto: blake2s shash module was removed upstream.
        * [arm] arch/arm/crypto: Enable CRYPTO_BLAKE2S_ARM
        * certs: Rotate to use the "Debian Secure Boot Signer 2022 - linux"
          certificate (Closes: #1018752)
        * Set ABI to 1
        * [hppa/parisc64] Drop explicit setting of 64BIT
      .
      linux (5.19-1~exp1) experimental; urgency=medium
      .
        * New upstream release: https://kernelnewbies.org/Linux_5.19
          - [i386] x86/asm/32: Fix ANNOTATE_UNRET_SAFE use on 32-bit (fixes FTBFS)
      .
        [ Ben Hutchings ]
        * [riscv64] Disable COMPAT (fixes FTBFS)
        * linux-kbuild: Add check-local-export script (Closes: #1014633)
        * [x86,arm64,armhf] Add rtla package for Real-Time Linux Analysis tools
      .
        [ Uwe Kleine-König ]
        * Enable IOSM modem driver as a module.
      .
        [ Diederik de Haas ]
        * [arm64] drivers/crypto: Enable CRYPTO_DEV_ROCKCHIP as module
      .
        [ Salvatore Bonaccorso ]
        * [rt] Update to 5.19-rc8-rt9
      .
        [ Vincent Blut ]
        * [amd64] crypto: Enable CRYPTO_NHPOLY1305_SSE2 and CRYPTO_NHPOLY1305_AVX2
          as modules (Closes: #1013870)
      .
      linux (5.19~rc6-1~exp1) experimental; urgency=medium
      .
        * New upstream release candidate
      .
        [ Ben Hutchings ]
        * [mips64el/mips64r2el] Fix package description
        * [x86] Add mitigations for RETbleed on AMD/Hygon (CVE-2022-29900) and
          Intel (CVE-2022-29901) processors:
          - x86/kvm/vmx: Make noinstr clean
          - x86/cpufeatures: Move RETPOLINE flags to word 11
          - x86/retpoline: Cleanup some #ifdefery
          - x86/retpoline: Swizzle retpoline thunk
          - x86/retpoline: Use -mfunction-return
          - x86: Undo return-thunk damage
          - x86,objtool: Create .return_sites
          - x86,static_call: Use alternative RET encoding
          - x86/ftrace: Use alternative RET encoding
          - x86/bpf: Use alternative RET encoding
          - x86/kvm: Fix SETcc emulation for return thunks
          - x86/vsyscall_emu/64: Don't use RET in vsyscall emulation
          - x86/sev: Avoid using __x86_return_thunk
          - x86: Use return-thunk in asm code
          - x86/entry: Avoid very early RET
          - objtool: Treat .text.__x86.* as noinstr
          - x86: Add magic AMD return-thunk
          - x86/bugs: Report AMD retbleed vulnerability
          - x86/bugs: Add AMD retbleed= boot parameter
          - x86/bugs: Enable STIBP for JMP2RET
          - x86/bugs: Keep a per-CPU IA32_SPEC_CTRL value
          - x86/entry: Add kernel IBRS implementation
          - x86/bugs: Optimize SPEC_CTRL MSR writes
          - x86/speculation: Add spectre_v2=ibrs option to support Kernel IBRS
          - x86/bugs: Split spectre_v2_select_mitigation() and
            spectre_v2_user_select_mitigation()
          - x86/bugs: Report Intel retbleed vulnerability
          - intel_idle: Disable IBRS during long idle
          - objtool: Update Retpoline validation
          - x86/xen: Rename SYS* entry points
          - x86/xen: Add UNTRAIN_RET
          - x86/bugs: Add retbleed=ibpb
          - x86/bugs: Do IBPB fallback check only once
          - objtool: Add entry UNRET validation
          - x86/cpu/amd: Add Spectral Chicken
          - x86/speculation: Fix RSB filling with CONFIG_RETPOLINE=n
          - x86/speculation: Fix firmware entry SPEC_CTRL handling
          - x86/speculation: Fix SPEC_CTRL write on SMT state change
          - x86/speculation: Use cached host SPEC_CTRL value for guest entry/exit
          - x86/speculation: Remove x86_spec_ctrl_mask
          - objtool: Re-add UNWIND_HINT_{SAVE_RESTORE}
          - KVM: VMX: Flatten __vmx_vcpu_run()
          - KVM: VMX: Convert launched argument to flags
          - KVM: VMX: Prevent guest RSB poisoning attacks with eIBRS
          - KVM: VMX: Fix IBRS handling after vmexit
          - x86/speculation: Fill RSB on vmexit for IBRS
          - KVM: VMX: Prevent RSB underflow before vmenter
          - x86/common: Stamp out the stepping madness
          - x86/cpu/amd: Enumerate BTC_NO
          - x86/retbleed: Add fine grained Kconfig knobs
          - x86/bugs: Add Cannon lake to RETBleed affected CPU list
          - x86/entry: Move PUSH_AND_CLEAR_REGS() back into error_entry
          - x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported
          - x86/kexec: Disable RET on kexec
          - x86/speculation: Disable RRSBA behavior
          - x86/static_call: Serialize __static_call_fixup() properly
        * [amd64] Enable SLS mitigation
      .
      linux (5.19~rc4-1~exp1) experimental; urgency=medium
      .
        * New upstream release candidate
      .
        [ Johannes Schauer Marin Rodrigues ]
        * [arm64] Add pwm-imx27, nwl-dsi, ti-sn65dsi86, imx-dcss, mxsfb, mux-mmio
          and imx8mq-interconnect to fb-modules udeb for the MNT Reform 2.
      .
        [ Julien Massot ]
        * [arm64] Enable Qualcomm SDA845 SoC:
          - Enable QCOM_CLK_RPMH, SDM_GCC_845, QCOM_HFPLL, INTERCONNECT_QCOM,
            INTERCONNECT_QCOM_SDM845, QCOM_PDC, PINCTRL_MSM, PINCTRL_SDM845,
            RESET_QCOM_AOSS, QCOM_AOSS_QMP, QCOM_COMMAND_DB, QCOM_GENI_SE,
            QCOM_RPMH, QCOM_RPMHPD, QCOM_RPMPD, SERIAL_QCOM_GENI,
            SERIAL_QCOM_GENI_CONSOLE as built-in
          - Enable SDM_CAMCC_845, SDM_GPUCC_845, SDM_VIDEOCC_845, SDM_DISPCC_845,
            ARM_QCOM_CPUFREQ_HW, REGULATOR_QCOM_RPMH, SCSI_UFSHCD_PLATFORM,
            SCSI_UFS_QCOM as modules
      .
        [ Diederik de Haas ]
        * [armel/rpi] drivers/char/hw_random: Enable HW_RANDOM_BCM2835 as module
        * [armel/rpi] drivers/rtc: Enable RTC_DRV_DS1307 as module (Closes: #958904)
      .
        [ Zhang Ning ]
        * [arm64] enable gpio polled keyboard which is needed for Khadas SBCs
        * [arm64] media: enable Amlogic CEC, GE2D, vdec, and Rockchip RGA, ISP1
        * [arm64] phy: enable Rk3399 Mipi phy which is needed by RK3399 ISP1
        * [arm64] enable GPIO ir receirer which is needed by Khadas edge SBC
        * [arm64] enable HYM8563 RTC driver which is needed by Khadas SBCs
      .
        [ Ben Hutchings ]
        * Refresh our patches for 5.19
        * [rt] Update to 5.19-rc3-rt5
        * Update config for 5.19
        * virtio: disable notification hardening by default (regression in 5.19-rc1)
        * [rt] printk: Reinstate deferred printing with kthreads
        * d/bin: Use subprocess text mode support instead of decoding separately
        * d/bin, d/lib/python: Use open() with encoding instead of codecs.open()
        * d/lib/python/debian_linux: Introduce {Source,Binary}Package classes
        * d/lib/python/debian_linux: Add all used fields to {Source,Binary}Package
        * d/lib/python/debian_linux: Warn about unknown fields in control files
        * firmware_loader: Enable FW_LOADER_COMPRESS, FW_LOADER_COMPRESS_XZ
      .
      linux (5.18.16-1~bpo11+1) bullseye-backports; urgency=medium
      .
        * Rebuild for bullseye-backports:
          - Change ABI number to 0.deb11.4
      .
      linux (5.18.16-1) unstable; urgency=medium
      .
        * New upstream stable update:
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.18.15
          - [arm64] pinctrl: armada-37xx: use raw spinlocks for regmap to avoid
            invalid wait context
          - [armhf] pinctrl: stm32: fix optional IRQ support to gpios
          - [riscv64] add as-options for modules with assembly compontents
          - lockdown: Fix kexec lockdown bypass with ima policy (CVE-2022-21505)
          - [armhf] mmc: sdhci-omap: Fix a lockdep warning for PM runtime init
          - [armhf] mtd: rawnand: gpmi: Set WAIT_FOR_READY timeout based on
            program/erase times
          - drm/ttm: fix locking in vmap/vunmap TTM GEM helpers
          - drm/amd/display: Fix new dmub notification enabling in DM
          - drm/scheduler: Don't kill jobs in interrupt context
          - net: usb: ax88179_178a needs FLAG_SEND_ZLP
          - PCI: hv: Fix multi-MSI to allow more than one MSI vector
          - PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI
          - PCI: hv: Reuse existing IRTE allocation in compose_msi_msg()
          - PCI: hv: Fix interrupt mapping for multi-MSI
          - r8152: fix a WOL issue
          - ip: Fix data-races around sysctl_ip_default_ttl.
          - xfrm: xfrm_policy: fix a possible double xfrm_pols_put() in
            xfrm_bundle_lookup() (CVE-2022-36879)
          - RDMA/irdma: Do not advertise 1GB page size for x722
          - RDMA/irdma: Fix sleep from invalid context BUG
          - perf/core: Fix data race between perf_event_set_output() and
            perf_mmap_close()
          - e1000e: Enable GPT clock before sending message to CSME
          - Revert "e1000e: Fix possible HW unit hang after an s0ix exit"
          - igc: Reinstate IGC_REMOVED logic and implement it properly
          - ip: Fix data-races around sysctl_ip_no_pmtu_disc.
          - ip: Fix data-races around sysctl_ip_fwd_use_pmtu.
          - ip: Fix data-races around sysctl_ip_fwd_update_priority.
          - ip: Fix data-races around sysctl_ip_nonlocal_bind.
          - ip: Fix a data-race around sysctl_ip_autobind_reuse.
          - ip: Fix a data-race around sysctl_fwmark_reflect.
          - tcp/dccp: Fix a data-race around sysctl_tcp_fwmark_accept.
          - tcp: sk->sk_bound_dev_if once in inet_request_bound_dev_if()
          - tcp: Fix data-races around sysctl_tcp_l3mdev_accept.
          - tcp: Fix data-races around sysctl_tcp_mtu_probing.
          - tcp: Fix data-races around sysctl_tcp_base_mss.
          - tcp: Fix data-races around sysctl_tcp_min_snd_mss.
          - tcp: Fix a data-race around sysctl_tcp_mtu_probe_floor.
          - tcp: Fix a data-race around sysctl_tcp_probe_threshold.
          - tcp: Fix a data-race around sysctl_tcp_probe_interval.
          - net: stmmac: fix pm runtime issue in stmmac_dvr_remove()
          - net: stmmac: fix unbalanced ptp clock issue in suspend/resume flow
          - tcp/udp: Make early_demux back namespacified.
          - net: stmmac: fix dma queue left shift overflow issue
          - net/tls: Fix race in TLS device down flow
          - igmp: Fix data-races around sysctl_igmp_llm_reports.
          - igmp: Fix a data-race around sysctl_igmp_max_memberships.
          - igmp: Fix data-races around sysctl_igmp_max_msf.
          - igmp: Fix data-races around sysctl_igmp_qrv.
          - tcp: Fix data-races around keepalive sysctl knobs.
          - tcp: Fix data-races around sysctl_tcp_syn(ack)?_retries.
          - tcp: Fix data-races around sysctl_tcp_syncookies.
          - tcp: Fix data-races around sysctl_tcp_migrate_req.
          - tcp: Fix data-races around sysctl_tcp_reordering.
          - tcp: Fix data-races around some timeout sysctl knobs.
          - tcp: Fix a data-race around sysctl_tcp_notsent_lowat.
          - tcp: Fix a data-race around sysctl_tcp_tw_reuse.
          - tcp: Fix data-races around sysctl_max_syn_backlog.
          - tcp: Fix data-races around sysctl_tcp_fastopen.
          - tcp: Fix data-races around sysctl_tcp_fastopen_blackhole_timeout.
          - iavf: Fix VLAN_V2 addition/rejection
          - iavf: Disallow changing rx/tx-frames and rx/tx-frames-irq
          - iavf: Fix handling of dummy receive descriptors
          - iavf: Fix missing state logs
          - ACPI: CPPC: Don't require flexible address space if X86_FEATURE_CPPC is
            supported
          - [arm64] pinctrl: armada-37xx: Reuse GPIO fwnode in
            armada_37xx_irqchip_register()
          - [arm64] pinctrl: armada-37xx: make irq_lock a raw spinlock to avoid
            invalid wait context
          - i40e: Fix erroneous adapter reinitialization during recovery process
          - ixgbe: Add locking to prevent panic when setting sriov_numvfs to zero
          - [arm64,armhf] net: dsa: fix dsa_port_vlan_filtering when global
          - [arm64,armhf] net: dsa: move reset of VLAN filtering to
            dsa_port_switchdev_unsync_attrs
          - [arm64,armhf] net: dsa: fix NULL pointer dereference in
            dsa_port_reset_vlan_filtering
          - net: stmmac: remove redunctant disable xPCS EEE call
          - [arm64,armhf] gpio: pca953x: only use single read/write for No AI mode
          - [arm64,armhf] gpio: pca953x: use the correct range when do regmap sync
          - [arm64,armhf] gpio: pca953x: use the correct register address when
            regcache sync during init
          - be2net: Fix buffer overflow in be_get_module_eeprom
          - [arm64,armhf] drm/panel-edp: Fix variable typo when saving hpd absent
            delay from DT
          - [arm64] drm/imx/dcss: Add missing of_node_put() in fail path
          - ipv4: Fix a data-race around sysctl_fib_multipath_use_neigh.
          - ipv4: Fix data-races around sysctl_fib_multipath_hash_policy.
          - ipv4: Fix data-races around sysctl_fib_multipath_hash_fields.
          - ip: Fix data-races around sysctl_ip_prot_sock.
          - udp: Fix a data-race around sysctl_udp_l3mdev_accept.
          - tcp: Fix data-races around sysctl knobs related to SYN option.
          - tcp: Fix a data-race around sysctl_tcp_early_retrans.
          - tcp: Fix data-races around sysctl_tcp_recovery.
          - tcp: Fix a data-race around sysctl_tcp_thin_linear_timeouts.
          - tcp: Fix data-races around sysctl_tcp_slow_start_after_idle.
          - tcp: Fix a data-race around sysctl_tcp_retrans_collapse.
          - tcp: Fix a data-race around sysctl_tcp_stdurg.
          - tcp: Fix a data-race around sysctl_tcp_rfc1337.
          - tcp: Fix a data-race around sysctl_tcp_abort_on_overflow.
          - tcp: Fix data-races around sysctl_tcp_max_reordering.
          - net/sched: cls_api: Fix flow action initialization
          - [arm*] spi: bcm2835: bcm2835_spi_handle_err(): fix NULL pointer deref for
            non DMA transfers
          - KVM: Don't null dereference ops->destroy
          - mm/mempolicy: fix uninit-value in mpol_rebind_policy()
          - bpf: Make sure mac_header was set before using it
          - sched/deadline: Fix BUG_ON condition for deboosted tasks
          - [x86] perf/x86/intel/lbr: Fix unchecked MSR access error on HSW
          - [x86] x86/bugs: Warn when "ibrs" mitigation is selected on Enhanced IBRS
            parts
          - dlm: fix pending remove if msg allocation fails
          - [x86] crypto: qat - set to zero DH parameters before free
          - [x86] crypto: qat - use pre-allocated buffers in datapath
          - [x86] crypto: qat - refactor submission logic
          - [x86] crypto: qat - add backlog mechanism
          - [x86] crypto: qat - fix memory leak in RSA
          - [x86] crypto: qat - remove dma_free_coherent() for RSA
          - [x86] crypto: qat - remove dma_free_coherent() for DH
          - [x86] crypto: qat - add param check for RSA
          - [x86] crypto: qat - add param check for DH
          - [x86] crypto: qat - re-enable registration of algorithms
          - exfat: fix referencing wrong parent directory information after renaming
          - exfat: use updated exfat_chain directly during renaming
          - [x86] amd: Use IBPB for firmware calls
          - [x86] alternative: Report missing return thunk details
          - watchqueue: make sure to serialize 'wqueue->defunct' properly
          - [x86] ASoC: SOF: pm: add explicit behavior for ACPI S1 and S2
          - [x86] ASoC: SOF: pm: add definitions for S4 and S5 states
          - [x86] ASoC: SOF: Intel: disable IMR boot when resuming from ACPI S4 and S5
            states
          - watch-queue: remove spurious double semicolon
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.18.16
          - Bluetooth: Always set event mask on suspend
          - Bluetooth: L2CAP: Fix use-after-free caused by l2cap_chan_put
          - Revert "ocfs2: mount shared volume without ha stack"
          - userfaultfd: provide properly masked address for huge-pages
          - fs: sendfile handles O_NONBLOCK of out_fd
          - secretmem: fix unhandled fault in truncate
          - mm: fix page leak with multiple threads mapping the same page
          - mm: fix missing wake-up event for FSDAX pages
          - hugetlb: fix memoryleak in hugetlb_mcopy_atomic_pte
          - [s390x] archrandom: prevent CPACF trng invocations in interrupt context
          - [x86] intel_idle: Fix false positive RCU splats due to incorrect hardirqs
            state
          - watch_queue: Fix missing rcu annotation
          - watch_queue: Fix missing locking in add_watch_to_object()
          - tcp: Fix data-races around sysctl_tcp_dsack.
          - tcp: Fix a data-race around sysctl_tcp_app_win.
          - tcp: Fix a data-race around sysctl_tcp_adv_win_scale.
          - tcp: Fix a data-race around sysctl_tcp_frto.
          - tcp: Fix a data-race around sysctl_tcp_nometrics_save.
          - tcp: Fix data-races around sysctl_tcp_no_ssthresh_metrics_save.
          - bridge: Do not send empty IFLA_AF_SPEC attribute
          - ice: Fix max VLANs available for VF
          - ice: check (DD | EOF) bits on Rx descriptor rather than (EOP | RS)
          - ice: do not setup vlan for loopback VSI
          - ice: Fix VSIs unable to share unicast MAC
          - Revert "tcp: change pingpong threshold to 3"
          - tcp: md5: fix IPv4-mapped support
          - tcp: Fix data-races around sysctl_tcp_moderate_rcvbuf.
          - tcp: Fix a data-race around sysctl_tcp_limit_output_bytes.
          - tcp: Fix a data-race around sysctl_tcp_challenge_ack_limit.
          - scsi: core: Fix warning in scsi_alloc_sgtables()
          - scsi: mpt3sas: Stop fw fault watchdog work item during system shutdown
          - net: ping6: Fix memleak in ipv6_renew_options().
          - ipv6/addrconf: fix a null-ptr-deref bug for ip6_ptr
          - net/tls: Remove the context from the list in tls_device_down
          - net: pcs: xpcs: propagate xpcs_read error to xpcs_get_state_c37_sgmii
          - net: sungem_phy: Add of_node_put() for reference returned by
            of_get_parent()
          - tcp: Fix a data-race around sysctl_tcp_min_tso_segs.
          - tcp: Fix a data-race around sysctl_tcp_tso_rtt_log.
          - tcp: Fix a data-race around sysctl_tcp_min_rtt_wlen.
          - tcp: Fix a data-race around sysctl_tcp_autocorking.
          - tcp: Fix a data-race around sysctl_tcp_invalid_ratelimit.
          - Documentation: fix sctp_wmem in ip-sysctl.rst
          - macsec: fix NULL deref in macsec_add_rxsa
          - macsec: fix error message in macsec_add_rxsa and _txsa
          - macsec: limit replay window size with XPN
          - macsec: always read MACSEC_SA_ATTR_PN as a u64
          - net: macsec: fix potential resource leak in macsec_add_rxsa() and
            macsec_add_txsa()
          - net: mld: fix reference count leak in mld_{query | report}_work()
          - tcp: Fix data-races around sk_pacing_rate.
          - net: Fix data-races around sysctl_[rw]mem(_offset)?.
          - tcp: Fix a data-race around sysctl_tcp_comp_sack_delay_ns.
          - tcp: Fix a data-race around sysctl_tcp_comp_sack_slack_ns.
          - tcp: Fix a data-race around sysctl_tcp_comp_sack_nr.
          - tcp: Fix data-races around sysctl_tcp_reflect_tos.
          - ipv4: Fix data-races around sysctl_fib_notify_on_flag_change.
          - i40e: Fix interface init with MSI interrupts (no MSI-X)
          - [arm64,armhf] net: dsa: fix reference counting for LAG FDBs
          - sctp: fix sleep in atomic context bug in timer handlers
          - netfilter: nf_queue: do not allow packet truncation below transport header
            offset (CVE-2022-36946)
          - scsi: ufs: Support clearing multiple commands at once
          - scsi: ufs: core: Fix a race condition related to device management
          - virtio-net: fix the race between refill work and close
          - perf symbol: Correct address for bss symbols
          - sfc: disable softirqs for ptp TX
          - sctp: leave the err path free in sctp_stream_init to sctp_stream_free
          - mm/hmm: fault non-owner device private entries
          - page_alloc: fix invalid watermark check on a negative value
          - tcp: Fix data-races around sysctl_tcp_workaround_signed_windows.
          - [armel,armhf] 9216/1: Fix MAX_DMA_ADDRESS overflow
          - docs/kernel-parameters: Update descriptions for "mitigations=" param with
            retbleed
          - locking/rwsem: Allow slowpath writer to ignore handoff bit if not set by
            first waiter
          - [x86] bugs: Do not enable IBPB at firmware entry when IBPB is not
            available
      .
        [ Ben Hutchings ]
        * d/tests: kbuild test case depends on python3
        * d/tests: Run kbuild test with default flavour if quick flavour not defined
        * d/lib/python/debian_linux/debian.py: Add Architecture field to TestsControl
        * d/tests: Restrict kbuild tests to architectures with default or quick
          flavour
        * security: Add landlock and bpf to enabled LSM list (Closes: #999551)
      .
        [ Salvatore Bonaccorso ]
        * Bump ABI to 4
        * Add mitigations for Post-Barrier Return Stack Buffer Predictions (PBRSB)
          issue (CVE-2022-26373):
          - x86/speculation: Add RSB VM Exit protections
          - x86/speculation: Add LFENCE to RSB fill sequence
        * posix-cpu-timers: Cleanup CPU timers before freeing them during exec
          (CVE-2022-2585)
        * netfilter: nf_tables: do not allow SET_ID to refer to another table
          (CVE-2022-2586)
        * netfilter: nf_tables: do not allow CHAIN_ID to refer to another table
        * netfilter: nf_tables: do not allow RULE_ID to refer to another chain
        * net_sched: cls_route: remove from list when handle is 0 (CVE-2022-2588)
        * Revert "mm/shmem: unconditionally set pte dirty in mfill_atomic_install_pte"
          (CVE-2022-2590)
      .
      linux (5.18.14-1parrot1) parrot-updates; urgency=medium
      .
        * Import new Debian backports version.
        * Bump Parrot ABI number to 14parrot1.
        * Increase timer frequency to 300Hz.
        * Disable generation of signed kernel images.
        * Import Parrot Wifi patches.
      .
      linux (5.18.14-1~bpo11+1) bullseye-backports; urgency=medium
      .
        * Rebuild for bullseye-backports:
          - Change ABI number to 0.deb11.3
      .
      linux (5.18.14-1) unstable; urgency=medium
      .
        * New upstream stable update:
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.18.6
          - Revert "drm/amd/display: Fix DCN3 B0 DP Alt Mapping" (regression in 5.16)
          - [arm64] dts: imx8mm-beacon: Enable RTS-CTS on UART3
          - [arm64] dts: imx8mn-beacon: Enable RTS-CTS on UART3
          - io_uring: reinstate the inflight tracking (CVE-2022-1976)
          - [arm64] ASoC: qcom: lpass-platform: Update VMA access permissions in mmap
            callback
          - drm/amd/display: Read Golden Settings Table from VBIOS
          - drm/amdgpu: Resolve RAS GFX error count issue after cold boot on Arcturus
          - [amd64] drm/amdkfd: Use mmget_not_zero in MMU notifier
          - [x86] ASoC: Intel: cirrus-common: fix incorrect channel mapping
          - [armel,armhf] ASoC: cs42l51: Correct minimum value for SX volume control
          - [amd64] drm/amdkfd: add pinned BOs to kfd_bo_list
          - ata: libata-core: fix NULL pointer deref in ata_host_alloc_pinfo()
          - quota: Prevent memory allocation recursion while holding dq_lock
          - [armhf] ASoC: es8328: Fix event generation for deemphasis control
          - [x86] ASoC: wm_adsp: Fix event generation for wm_adsp_fw_put()
          - [x86] ALSA: hda: MTL: add HD Audio PCI ID and HDMI codec vendor ID
          - [x86] Input: soc_button_array - also add Lenovo Yoga Tablet2 1051F to
            dmi_use_low_level_irq
          - [x86] scsi: vmw_pvscsi: Expand vcpuHint to 16 bits
          - scsi: lpfc: Resolve NULL ptr dereference after an ELS LOGO is aborted
          - scsi: lpfc: Fix port stuck in bypassed state after LIP in PT2PT topology
          - scsi: lpfc: Allow reduced polling rate for nvme_admin_async_event cmd
            completion
          - scsi: mpt3sas: Fix out-of-bounds compiler warning
          - scsi: ipr: Fix missing/incorrect resource cleanup in error case
          - scsi: pmcraid: Fix missing resource cleanup in error case
          - ALSA: hda/realtek - Add HW8326 support
          - virtio-mmio: fix missing put_device() when vm_cmdline_parent registration
            failed
          - ipv6: Fix signed integer overflow in __ip6_append_data
          - ipv6: Fix signed integer overflow in l2tp_ip6_sendmsg
          - random: credit cpu and bootloader seeds by default
          - [x86] platform/x86/intel: pmc: Support Intel Raptorlake P
          - [x86] platform/x86/intel: hid: Add Surface Go to VGBS allow list
          - staging: r8188eu: fix rtw_alloc_hwxmits error detection for now
            (regression in 5.18.4) (Closes: #1013895)
          - staging: r8188eu: Fix warning of array overflow in ioctl_linux.c
            (regression in 5.15)
          - pNFS: Don't keep retrying if the server replied NFS4ERR_LAYOUTUNAVAILABLE
          - pNFS: Avoid a live lock condition in pnfs_update_layout() (regression in
            5.14)
          - sunrpc: set cl_max_connect when cloning an rpc_clnt (regression in 5.15)
          - i40e: Fix adding ADQ filter to TC0
          - i40e: Fix calculating the number of queue pairs
          - i40e: Fix call trace in setup_tx_descriptors
          - iavf: Fix issue with MAC address of VF shown as zero (regression in 5.18)
          - [x86,arm64] Drivers: hv: vmbus: Release cpu lock in error case
          - [riscv64] dts: microchip: re-add pdma to mpfs device tree (regression in
            5.18)
          - io_uring: fix races with file table unregister
          - io_uring: fix races with buffer table unregister
          - [x86] drm/i915/reset: Fix error_state_read ptr + offset use
          - [arm64] net: hns3: set port base vlan tbl_sta to false before removing
            old vlan (regression in 5.18)
          - [arm64] net: hns3: don't push link state to VF if unalive
          - [arm64] net: hns3: restore tm priority/qset to default settings when tc
            disabled
          - [arm64] net: hns3: fix PF rss size initialization bug (regression in
            5.17)
          - [arm64] net: hns3: fix tm port shapping of fibre port is incorrect after
            driver initialization
          - ice: Fix PTP TX timestamp offset calculation
          - ice: Sync VLAN filtering features for DVM
          - ice: Fix queue config fail handling
          - ice: Fix memory corruption in VF driver
          - net: ax25: Fix deadlock caused by skb_recv_datagram in ax25_recvmsg
          - [arm64] ftrace: fix branch range checks
          - [arm64] ftrace: consistently handle PLTs.
          - init: Initialize noop_backing_dev_info early (regression in 5.18.4)
          - block: Fix handling of offline queues in blk_mq_alloc_request_hctx()
          - [x86] ftrace: Remove OBJECT_FILES_NON_STANDARD usage
          - [arm64,armhf] irqchip/gic-v3: Fix error handling in
            gic_populate_ppi_partitions
          - sched: Fix balance_push() vs __sched_setscheduler()
          - i2c: designware: Use standard optional ref clock implementation
          - [x86] mei: hbm: drop capability response on early shutdown
          - [x86] mei: me: add raptor lake point S DID
          - [x86] comedi: vmk80xx: fix expression for tx buffer size
          - USB: serial: option: add support for Cinterion MV31 with new baseline
          - USB: serial: io_ti: add Agilent E5805A support
          - [arm64] mm: Don't invalidate FROM_DEVICE buffers at start of DMA transfer
          - [arm64,armhf] usb: dwc2: Fix memory leak in dwc2_hcd_init
          - [arm64,armhf] usb: dwc3: gadget: Fix IN endpoint max packet size
            allocation
          - [arm64,armhf] usb: dwc3: pci: Restore line lost in merge conflict
            resolution (regression in 5.18)
          - usb: gadget: u_ether: fix regression in setting fixed MAC address
            (regression in 5.16)
          - usb: gadget: f_fs: change ep->status safe in ffs_epfile_io()
          - usb: gadget: f_fs: change ep->ep safe in ffs_epfile_io()
          - tty: n_gsm: Debug output allocation must use GFP_ATOMIC (regression in
            5.18.3)
          - serial: 8250: Store to lsr_save_flags after lsr read
          - [arm64] bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()
          - md/raid5-ppl: Fix argument order in bio_alloc_bioset() (regression in
            5.18)
          - dm: fix race in dm_start_io_acct (regression in 5.18)
          - dm mirror log: round up region bitmap size to BITS_PER_LONG
          - drm/amdgpu: Fix GTT size reporting in amdgpu_ioctl (regression in 5.18)
          - drm/amd/display: Cap OLED brightness per max frame-average luminance
          - audit: free module name (regression in 5.16)
          - fs: account for group membership
          - selinux: free contexts previously transferred in selinux_add_opt()
            (regression in 5.18)
          - ext4: fix super block checksum incorrect after mount
          - ext4: fix bug_on ext4_mb_use_inode_pa
          - ext4: make variable "count" signed
          - ext4: add reserved GDT blocks check
          - [arm64] KVM: arm64: Always start with clearing SVE flag on load
            (regression in 5.17)
          - [arm64] KVM: arm64: Don't read a HW interrupt pending state in user
            context (regression in 5.17)
          - netfs: Fix gcc-12 warning by embedding vfs inode in netfs_i_context
          - [x86] drm/i915/uc: remove accidental static from a local variable
            (regression in 5.17)
          - bpf: Use safer kvmalloc_array() where possible
          - dm: fix bio_set allocation
          - [arm64] clk: imx8mp: fix usb_root_clk parent
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.18.7
          - [s390x] mm: use non-quiescing sske for KVM switch to keyed guest
          - zonefs: fix zonefs_iomap_begin() for reads
          - [x86] boot: Wrap literal addresses in absolute_pointer()
          - fsnotify: consistent behavior for parent not watching children
          - bpf: Fix calling global functions from BPF_PROG_TYPE_EXT programs
            (regression in 5.17)
          - io_uring: use original request task for inflight tracking
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.18.8
          - random: schedule mix_interrupt_randomness() less often
          - random: quiet urandom warning ratelimit suppression message
          - [x86] ALSA: memalloc: Drop x86-specific hack for WC allocations
          - ALSA: hda/via: Fix missing beep setup
          - [x86] ALSA: hda: Fix discovery of i915 graphics PCI device (regression in
            5.18)
          - ALSA: hda/conexant: Fix missing beep setup
          - [x86] ALSA: hda/realtek: Add mute LED quirk for HP Omen laptop
          - ALSA: hda/realtek - ALC897 headset MIC no sound
          - [x86] ALSA: hda/realtek: Apply fixup for Lenovo Yoga Duet 7 properly
          - [x86] ALSA: hda/realtek: Add quirk for Clevo PD70PNT
          - [x86] ALSA: hda/realtek: Add quirk for Clevo NS50PU
          - net: openvswitch: fix parsing of nw_proto for IPv6 fragments
          - ipv4: ping: fix bind address validity check (regression in 5.17)
          - 9p: Fix refcounting during full path walks for fid lookups
          - 9p: fix fid refcount leak in v9fs_vfs_atomic_open_dotl
          - 9p: fix fid refcount leak in v9fs_vfs_get_link
          - 9p: fix EBADF errors in cached mode (regression in 5.16)
          - btrfs: fix hang during unmount when block group reclaim task is running
            (regression in 5.13)
          - btrfs: prevent remounting to v1 space cache for subpage mount
          - btrfs: add error messages to all unrecognized mount options
          - [powerpc*] scsi: ibmvfc: Store vhost pointer during subcrq allocation
          - [powerpc*] scsi: ibmvfc: Allocate/free queue resource only during probe/
            remove
          - mmc: sdhci-pci-o2micro: Fix card detect by dealing with debouncing
          - xen/gntdev: Avoid blocking in unmap_grant_pages()
          - dm era: commit metadata in postsuspend after worker stops
          - dm: do not return early from dm_io_complete if BLK_STS_AGAIN without
            polling (regression in 5.18)
          - dm mirror log: clear log bits up to BITS_PER_LONG boundary
          - tracing/kprobes: Check whether get_kretprobe() returns NULL in
            kretprobe_dispatcher()
          - filemap: Handle sibling entries in filemap_get_read_batch()
          - mm/slub: add missing TID updates on slab deactivation
          - [x86] drm/i915: Implement w/a 22010492432 for adl-s
          - amd/display/dc: Fix COLOR_ENCODING and COLOR_RANGE doing nothing for
            DCN20+
          - drm/amd/display: Fix typo in override_lane_settings
          - USB: serial: pl2303: add support for more HXN (G) types
          - USB: serial: option: add Telit LE910Cx 0x1250 composition
          - USB: serial: option: add Quectel EM05-G modem
          - USB: serial: option: add Quectel RM500K module support
          - [arm64] drm/msm: Ensure mmap offset is initialized
          - [arm64] drm/msm: Fix double pm_runtime_disable() call
          - netfilter: use get_random_u32 instead of prandom
          - scsi: scsi_debug: Fix zone transition to full condition
          - [arm64] drm/msm: Switch ordering of runpm put vs devfreq_idle (regression
            in 5.15)
          - scsi: iscsi: Exclude zero from the endpoint ID range (regression in 5.18)
          - xsk: Fix generic transmit when completion queue reservation fails
          - [arm64] drm/msm: use for_each_sgtable_sg to iterate over scatterlist
          - bpf: Fix request_sock leak in sk lookup helpers
          - [arm64,armhf] drm/sun4i: Fix crash during suspend after component bind
            failure
          - [amd64] bpf, x86: Fix tail call count offset calculation on bpf2bpf call
          - [x86,arm64] scsi: storvsc: Correct reporting of Hyper-V I/O size limits
          - phy: aquantia: Fix AN when higher speeds than 1G are not advertised
          - net: fix data-race in dev_isalive()
          - veth: Add updating of trans_start
          - tipc: fix use-after-free Read in tipc_named_reinit
          - block: disable the elevator int del_gendisk
          - rethook: Reject getting a rethook if RCU is not watching
          - igb: fix a use-after-free issue in igb_clean_tx_ring
          - bonding: ARP monitor spams NETDEV_NOTIFY_PEERS notifiers
          - ethtool: Fix get module eeprom fallback
          - net/sched: sch_netem: Fix arithmetic in netem_dump() for 32-bit platforms
          - [arm64] drm/msm/dp: check core_initialized before disable interrupts at
            dp_display_unbind() (regression in 5.18.3)
          - [arm64] drm/msm/dp: force link training for display resolution change
          - net: phy: at803x: fix NULL pointer dereference on AR9331 PHY (regression
            in 5.18)
          - perf arm-spe: Don't set data source if it's not a memory operation
          - erspan: do not assume transport header is always set
          - net/tls: fix tls_sk_proto_close executed repeatedly
          - netfilter: nf_dup_netdev: do not push mac header a second time
          - netfilter: nf_dup_netdev: add and use recursion counter
          - xen-blkfront: Handle NULL gendisk (regression in 5.14)
          - afs: Fix dynamic root getattr (regression in 5.18)
          - block: pop cached rq before potentially blocking rq_qos_throttle()
            (regression in 5.17)
          - ice: ignore protocol field in GTP offload
          - ice: Fix switchdev rules book keeping
          - ice: ethtool: advertise 1000M speeds properly
          - ice: ethtool: Prohibit improper channel config for DCB
          - io_uring: fail links when poll fails (regression in 5.17)
          - regmap-irq: Fix a bug in regmap_irq_enable() for type_in_mask chips
          - regmap-irq: Fix offset/index mismatch in read_sub_irq_data()
          - drm/amd: Revert "drm/amd/display: keep eDP Vdd on when eDP stream is
            already enabled" (regression in 5.18)
          - igb: Make DMA faster when CPU is active on the PCIe link
          - virtio_net: fix xdp_rxq_info bug after suspend/resume
          - Revert "net/tls: fix tls_sk_proto_close executed repeatedly"
          - sock: redo the psock vs ULP protection check
          - nvme: move the Samsung X5 quirk entry to the core quirks
          - gpio: winbond: Fix error code in winbond_gpio_get()
          - [s390x] cpumf: Handle events cycles and instructions identical
          - filemap: Fix serialization adding transparent huge pages to page cache
            (regression in 5.18)
          - [x86] KVM: SEV: Init target VMCBs in sev_migrate_from
          - iio: mma8452: fix probe fail when device tree compatible is used.
          - io_uring: fix req->apoll_events (regression in 5.18)
          - io_uring: fix wrong arm_poll error handling (regression in 5.17)
          - vmcore: convert copy_oldmem_page() to take an iov_iter
          - [s390x] crash: add missing iterator advance in copy_oldmem_page()
          - [s390x] crash: make copy_oldmem_page() return number of bytes copied
          - xhci: turn off port power in shutdown
          - xhci-pci: Allow host runtime PM as default for Intel Raptor Lake xHCI
          - xhci-pci: Allow host runtime PM as default for Intel Meteor Lake xHCI
          - usb: gadget: uvc: fix list double add in uvcg_video_pump (regression in
            5.16)
          - usb: gadget: Fix non-unique driver names in raw-gadget driver
          - USB: gadget: Fix double-free bug in raw_gadget driver
          - [arm64,armhf] usb: chipidea: udc: check request status before setting
            device address
          - btrfs: fix race between reflinking and ordered extent completion
          - btrfs: fix deadlock with fsync+fiemap+transaction commit
          - f2fs: attach inline_data after setting compression (regression in 5.18.3)
          - f2fs: fix iostat related lock protection (regression in 5.17)
          - f2fs: do not count ENOENT for error case (regression in 5.18.4)
          - iio:accel:kxcjk-1013: rearrange iio trigger get and register
          - iio:accel:bma180: rearrange iio trigger get and register
          - iio:accel:mxc4005: rearrange iio trigger get and register
          - iio: accel: mma8452: ignore the return value of reset operation
          - iio: gyro: mpu3050: Fix the error handling in mpu3050_power_up()
          - iio: trigger: sysfs: fix use-after-free on remove
          - iio: imu: inv_icm42600: Fix broken icm42600 (chip id 0 value)
          - iio: adc: axp288: Override TS pin bias current for some models
          - [hppa] Fix flush_anon_page on PA8800/PA8900 (regression in 5.18)
          - [hppa] Enable ARCH_HAS_STRICT_MODULE_RWX
          - [powerpc*] Enable execve syscall exit tracepoint
          - [powerpc*] rtas: Allow ibm,platform-dump RTAS call with null buffer
            address
          - [powerpc*] powernv: wire up rng during setup_arch
          - mm/memory-failure: disable unpoison once hw error happens
          - mm: lru_cache_disable: use synchronize_rcu_expedited (regression in 5.18)
          - [armhf] dts: imx6qdl: correct PU regulator ramp delay
          - modpost: fix section mismatch check for exported init/exit sections
          - [arm64] dts: bcm2711-rpi-400: Fix GPIO line names
          - smb3: fix empty netname context on secondary channels (regression in
            5.18.4)
          - perf build-id: Fix caching files with a wrong build ID
          - smb3: use netname when available on secondary channels
          - dma-direct: use the correct size for dma_set_encrypted() (regression in
            5.17)
          - [powerpc*] pseries: wire up rng during setup_arch()
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.18.9
          - bcache: memset on stack variables in bch_btree_check() and
            bch_sectors_dirty_init()
          - hinic: Replace memcpy() with direct assignment
          - [powerpc*] ftrace: Remove ftrace init tramp once kernel init is complete
          - io_uring: fix not locked access to fixed buf table
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.18.10
          - drm/amdgpu: fix adev variable used in amdgpu_device_gpu_recover()
            (regression in 5.17)
          - Revert "drm/amdgpu/display: set vblank_disable_immediate for DC"
            (regression in 5.17)
          - drm/amdgpu: To flush tlb for MMHUB of RAVEN series
          - ksmbd: set the range of bytes to zero without extending file size in
            FSCTL_ZERO_DATA
          - ksmbd: check invalid FileOffset and BeyondFinalZero in FSCTL_ZERO_DATA
          - ksmbd: use vfs_llseek instead of dereferencing NULL
          - ipv6: take care of disable_policy when restoring routes
          - net: phy: Don't trigger state machine while in suspend
          - [s390x] archrandom: simplify back to earlier design and initialize
            earlier
          - nvme-pci: add NVME_QUIRK_BOGUS_NID for ADATA XPG SX6000LNP (AKA SPECTRIX
            S40G)
          - nvme-pci: add NVME_QUIRK_BOGUS_NID for ADATA IM2P33F8ABR1
          - nvdimm: Fix badblocks clear off-by-one error
          - ceph: wait on async create before checking caps for syncfs
            (regression in 5.18)
          - [hppa] Fix vDSO signal breakage on 32-bit kernel (regression in 5.18)
          - [hppa] unaligned: Fix emulate_ldw() breakage (regression in 5.18)
          - [powerpc*] prom_init: Fix kernel config grep
          - [powerpc*] bpf: Fix use of user_pt_regs in uapi
          - [x86] cpufreq: amd-pstate: Add resume and suspend callbacks
          - dm raid: fix accesses beyond end of raid member array
          - dm raid: fix KASAN warning in raid5_add_disks
          - SUNRPC: Fix READ_PLUS crasher
          - net: rose: fix UAF bugs caused by timer handler (CVE-2022-2318)
          - net: usb: ax88179_178a: Fix packet receiving (regression in 5.17)
          - virtio-net: fix race between ndo_open() and virtio_device_ready()
          - [armhf] net: dsa: bcm_sf2: force pause link settings
          - net: tun: unlink NAPI from device on destruction
          - net: tun: stop NAPI when detaching queues
          - net: fix IFF_TX_SKB_NO_LINEAR definition
          - net: dp83822: disable false carrier interrupt
          - net: dp83822: disable rx error interrupt
          - RDMA/qedr: Fix reporting QP timeout attribute
          - RDMA/cm: Fix memory leak in ib_cm_insert_listen
          - linux/dim: Fix divide by 0 in RDMA DIM
          - net: usb: asix: do not force pause frames support
          - usbnet: fix memory allocation in helpers
          - mptcp: fix race on unaccepted mptcp sockets (regression in 5.17)
          - mptcp: fix conflict with <netinet/in.h> (regression in 5.16)
          - [armhf] hwmon: (occ) Prevent power cap command overwriting poll response
          - NFS: restore module put when manager exits. (regression in 5.18)
          - NFSD: restore EINVAL error translation in nfsd_commit() (regression in
            5.17)
          - NFSv4: Add an fattr allocation to _nfs4_discover_trunking()
            (regression in 5.18.3)
          - vfs: fix copy_file_range() regression in cross-fs copies
          - caif_virtio: fix race between virtio_device_ready() and ndo_open()
          - io_uring: ensure that send/sendmsg and recv/recvmsg check sqe->ioprio
          - PM / devfreq: exynos-ppmu: Fix refcount leak in of_get_devfreq_events
          - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch()
          - vdpa/mlx5: Update Control VQ callback information
          - netfilter: nft_dynset: restore set element counter when failing to update
          - net/sched: act_api: Notify user space if any actions were flushed before
            error
          - net: asix: fix "can't send until first packet is send" issue
          - net: bonding: fix possible NULL deref in rlb code
          - net: phy: ax88772a: fix lost pause advertisement configuration
          - net: bonding: fix use-after-free after 802.3ad slave unbind
          - [arm64] net: dsa: felix: fix race between reading PSFP stats and port
            stats
          - [powerpc] memhotplug: Add add_pages override for PPC (regression in 5.18)
          - [x86] platform/x86: thinkpad_acpi: Fix a memory leak of EFCH MMIO
            resource (regression in 5.18)
          - [x86] platform/x86: ideapad-laptop: Add Ideapad 5 15ITL05 to
            ideapad_dytc_v4_allow_table[]
          - tipc: move bc link creation back to tipc_node_create
          - epic100: fix use after free on rmmod
          - tcp: add a missing nf_reset_ct() in 3WHS handling
          - nvmet-tcp: fix regression in data_digest calculation (regression in 5.12)
          - ACPI: video: Change how we determine if brightness key-presses are handled
          - tunnels: do not assume mac header is set in skb_tunnel_check_pmtu()
          - fanotify: refine the validation checks on non-dir inode mask (regression
            in 5.18)
          - nvmet: add a clear_ids attribute for passthru targets
          - ipv6/sit: fix ipip6_tunnel_get_prl return value
          - ipv6: fix lockdep splat in in6_dump_addrs() (regression in 5.13)
          - net: tun: avoid disabling NAPI twice
          - [arm64] drm/msm/dpu: Increment vsync_cnt before waking up userspace
            (regression in 5.16)
          - [x86] platform/x86: ideapad-laptop: Add allow_v4_dytc module parameter
          - [x86] drm/i915/gem: add missing else
          - [x86] drm/i915/dgfx: Disable d3cold at gfx root port
          - [arm64] drm/msm/gem: Fix error return on fence id alloc fail (regression
            in 5.15)
          - [x86] platform/x86: panasonic-laptop: revert "Resolve hotkey double
            trigger bug"
          - [x86] platform/x86: panasonic-laptop: don't report duplicate brightness
            key-presses
          - [x86] platform/x86: panasonic-laptop: filter out duplicate volume up/down
            /mute keypresses
          - drm/fourcc: fix integer type usage in uapi header
          - hwmon: (ibmaem) don't call platform_device_del() if platform_device_add()
            fails
          - xen/blkfront: fix leaking data in shared pages (CVE-2022-26365)
          - xen/netfront: fix leaking data in shared pages (CVE-2022-33740)
          - xen/netfront: force data bouncing when backend is untrusted
            (CVE-2022-33741)
          - xen/blkfront: force data bouncing when backend is untrusted
            (CVE-2022-33742)
          - xen-netfront: restore __skb_queue_tail() positioning in
            xennet_get_responses() (CVE-2022-33743)
          - [arm64,armhf] xen/arm: Fix race in RB-tree based P2M accounting
            (CVE-2022-33744)
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.18.11
          - io_uring: fix provided buffer import (regression in 5.18)
          - ALSA: usb-audio: Workarounds for Behringer UMC 204/404 HD
          - [x86] ALSA: hda/realtek: Add quirk for Clevo L140PU
          - can: bcm: use call_rcu() instead of costly synchronize_rcu()
          - can: gs_usb: gs_usb_open/close(): fix memory leak
          - can: kvaser_usb: replace run-time checks with struct
            kvaser_usb_driver_info
          - can: kvaser_usb: kvaser_usb_leaf: fix CAN clock frequency regression
            (regression in 5.16)
          - can: kvaser_usb: kvaser_usb_leaf: fix bittiming limits
          - bpf: Fix incorrect verifier simulation around jmp32's jeq/jne
          - bpf: Fix insufficient bounds propagation from adjust_scalar_min_max_vals
          - usbnet: fix memory leak in error case
          - net: rose: fix UAF bug caused by rose_t0timer_expiry
          - netfilter: nft_set_pipapo: release elements in clone from abort path
          - netfilter: nf_tables: stricter validation of element data
            (CVE-2022-34918)
          - [x86] iommu/vt-d: Fix PCI bus rescan device hot add
          - [x86] iommu/vt-d: Fix RID2PASID setup/teardown failure
          - fbdev: Fix potential buffer overflow with silly screen sizes
            (CVE-2021-33655):
            + fbmem: Check virtual screen sizes in fb_set_var()
            + fbcon: Disallow setting font bigger than screen size
            + fbcon: Prevent that screen size is smaller than font size
          - PM: runtime: Redefine pm_runtime_release_supplier()
          - PM: runtime: Fix supplier device management during consumer probe
          - memregion: Fix memregion_free() fallback definition
          - fscache: Fix invalidation/lookup race (regression in 5.17)
          - fscache: Fix if condition in fscache_wait_on_volume_collision()
          - [powerpc*] powernv: delay rng platform device creation until later in
            boot
          - [armhf] pinctrl: sunxi: a83t: Fix NAND function name for some pins
          - srcu: Tighten cleanup_srcu_struct() GP checks
          - ASoC: rt711: Add endianness flag in snd_soc_component_driver
          - ASoC: rt711-sdca: Add endianness flag in snd_soc_component_driver
          - ASoC: codecs: rt700/rt711/rt711-sdca: resume bus/codec in .set_jack_detect
          - ASoC: SOF: ipc3-topology: Move and correct size checks in
            sof_ipc3_control_load_bytes()
          - [x86] ASoC: SOF: Intel: hda: Fix compressed stream position tracking
          - [arm64] dts: qcom: sm8450: fix interconnects property of UFS node
          - [arm64] dts: qcom: msm8994: Fix CPU6/7 reg values
          - [arm64] dts: qcom: sdm845: use dispcc AHB clock for mdss node
          - [arm64] dts: imx8mp-evk: correct mmc pad settings
          - [arm64] dts: imx8mp-evk: correct the uart2 pinctl value
          - [arm64] dts: imx8mp-evk: correct gpio-led pad settings
          - [arm64] dts: imx8mp-evk: correct vbus pad settings
          - [arm64] dts: imx8mp-evk: correct eqos pad settings
          - [arm64] dts: imx8mp-evk: correct I2C5 pad settings
          - [arm64] dts: imx8mp-evk: correct I2C1 pad settings
          - [arm64] dts: imx8mp-evk: correct I2C3 pad settings
          - [arm64] dts: imx8mp-phyboard-pollux-rdk: correct uart pad settings
          - [arm64] dts: imx8mp-phyboard-pollux-rdk: correct eqos pad settings
          - [arm64] dts: imx8mp-phyboard-pollux-rdk: correct i2c2 & mmc settings
          - [arm64,armhf] pinctrl: sunxi: sunxi_pconf_set: use correct offset
          - [arm64] dts: qcom: msm8992-*: Fix vdd_lvs1_2-supply typo
          - xsk: Clear page contiguity bit when unmapping pool
          - i2c: piix4: Fix a memory leak in the EFCH MMIO support
          - i40e: Fix dropped jumbo frames statistics
          - i40e: Fix VF's MAC Address change on VM
          - [armhf] dts: stm32: add missing usbh clock and fix clk order on stm32mp15
          - ACPI: CPPC: Check _OSC for flexible address space
          - ACPI: bus: Set CPPC _OSC bits for all and when CPPC_LIB is supported
          - ACPI: CPPC: Only probe for _CPC if CPPC v2 is acked (regressions in
            5.13, 5.18)
          - [x86] ACPI: CPPC: Don't require _OSC if X86_FEATURE_CPPC is supported
          - net/mlx5e: Fix matchall police parameters validation
          - mptcp: Avoid acquiring PM lock for subflow priority changes
          - mptcp: Acquire the subflow socket lock before modifying MP_PRIO flags
          - mptcp: fix local endpoint accounting
          - r8169: fix accessing unset transport header
          - net/sched: act_api: Add extack to offload_act_setup() callback
          - net/sched: act_police: Add extack messages for offload failure
          - net/sched: act_police: allow 'continue' action offload
          - [arm64] dmaengine: imx-sdma: Allow imx8m for imx7 FW revs
          - [arm64,armhf] dmaengine: imx-sdma: only restart cyclic channel when
            enabled (regression in 5.18)
          - misc: rtsx_usb: fix use of dma mapped buffer for usb bulk transfer
            (Closes: #1015240, regression in 5.18)
          - misc: rtsx_usb: use separate command and response buffers
          - misc: rtsx_usb: set return value in rsp_buf alloc err path
          - ida: don't use BUG_ON() for debugging
          - [arm64,armhf] dmaengine: pl330: Fix lockdep warning about non-static key
          - [armhf] dmaengine: ti: Fix refcount leak in ti_dra7_xbar_route_allocate
          - [arm64] dmaengine: qcom: bam_dma: fix runtime PM underflow
          - [armhf] dmaengine: ti: Add missing put_device in
            ti_dra7_xbar_route_allocate
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.18.12
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.18.13
          - USB: serial: ftdi_sio: add Belimo device ids
          - usb: typec: add missing uevent when partner support PD
          - [arm64,armhf] usb: dwc3: gadget: Fix event pending check
          - gpio: sim: fix the chip_name configfs item
          - [armhf] tty: serial: samsung_tty: set dma burst_size to 1
          - [x86] xen: Use clear_bss() for Xen PV guests
          - [x86] ALSA: hda - Add fixup for Dell Latitidue E5430
          - [x86] ALSA: hda/conexant: Apply quirk for another HP ProDesk 600 G3 model
          - [x86] ALSA: hda/realtek: Fix headset mic for Acer SF313-51
          - [x86] ALSA: hda/realtek - Fix headset mic problem for a HP machine with
            alc671
          - [x86] ALSA: hda/realtek: fix mute/micmute LEDs for HP machines
          - [x86] ALSA: hda/realtek - Fix headset mic problem for a HP machine with
            alc221
          - [x86] ALSA: hda/realtek - Enable the headset-mic on a Xiaomi's laptop
          - xen/netback: avoid entering xenvif_rx_next_skb() with an empty rx queue
          - fix race between exit_itimers() and /proc/pid/timers
          - mm: userfaultfd: fix UFFDIO_CONTINUE on fallocated shmem pages
          - mm: sparsemem: fix missing higher order allocation splitting (regression
            in 5.18)
          - mm: split huge PUD on wp_huge_pud fallback
          - tracing/histograms: Fix memory leak problem
          - net: sock: tracing: Fix sock_exceed_buf_limit not to dereference stale
            pointer
          - ip: fix dflt addr selection for connected nexthop
          - [armhf] 9213/1: Print message about disabled Spectre workarounds only
            once
          - [armel,armhf] 9214/1: alignment: advance IT state after emulating Thumb
            instruction
          - wifi: mac80211: fix queue selection for mesh/OCB interfaces
          - cgroup: Use separate src/dst nodes when preloading css_sets for migration
          - btrfs: return -EAGAIN for NOWAIT dio reads/writes on compressed and
            inline extents
          - btrfs: zoned: fix a leaked bioc in read_zone_info
          - [arm64,armhf] drm/panfrost: Put mapping instead of shmem obj on
            panfrost_mmu_map_fault_addr() error
          - [arm64,armhf] drm/panfrost: Fix shrinker list corruption by madvise IOCTL
          - fs/remap: constrain dedupe of EOF blocks
          - nilfs2: fix incorrect masking of permission flags for symlinks
          - Revert "evm: Fix memleak in init_desc"
          - reset: Fix devm bulk optional exclusive control getter
          - [arm64] dts: ls1028a: Update SFP node to include clock
          - [armhf] dts: imx6qdl-ts7970: Fix ngpio typo and count
          - [riscv64] dts: microchip: hook up the mpfs' l2cache
          - [armhf] 9209/1: Spectre-BHB: avoid pr_info() every time a CPU comes out
            of idle
          - [armel,armhf] 9210/1: Mark the FDT_FIXED sections as shareable
          - net/mlx5e: Fix enabling sriov while tc nic rules are offloaded
            (regression in 5.14)
          - net/mlx5e: CT: Use own workqueue instead of mlx5e priv (regression in
            5.18)
          - net/mlx5e: Fix capability check for updating vnic env counters
          - net/mlx5e: Ring the TX doorbell on DMA errors
          - drm/amdgpu: keep fbdev buffers pinned during suspend (regression in 5.17)
          - drm/amdgpu/display: disable prefer_shadow for generic fb helpers
            (regression in 5.17)
          - [x86] drm/i915: fix a possible refcount leak in
            intel_dp_add_mst_connector()
          - [x86] drm/i915/guc: ADL-N should use the same GuC FW as ADL-S
          - ima: Fix a potential integer overflow in ima_appraise_measurement
          - [arm64,armhf] ASoC: sgtl5000: Fix noise on shutdown/remove
          - [x86] ASoC: Intel: Skylake: Correct the ssp rate discovery in
            skl_get_ssp_clks()
          - [x86] ASoC: Intel: Skylake: Correct the handling of fmt_config flexible
            array
          - netfilter: ecache: move to separate structure
          - netfilter: conntrack: split inner loop of list dumping to own function
          - netfilter: ecache: use dedicated list for event redelivery
          - netfilter: conntrack: include ecache dying list in dumps
          - netfilter: conntrack: remove the percpu dying list
          - netfilter: conntrack: fix crash due to confirmed bit load reordering
            (regression in 5.17)
          - sysctl: Fix data races in proc_dointvec().
          - sysctl: Fix data races in proc_douintvec().
          - sysctl: Fix data races in proc_dointvec_minmax().
          - sysctl: Fix data races in proc_douintvec_minmax().
          - sysctl: Fix data races in proc_doulongvec_minmax().
          - sysctl: Fix data races in proc_dointvec_jiffies().
          - tcp: Fix a data-race around sysctl_tcp_max_orphans.
          - inetpeer: Fix data-races around sysctl.
          - net: Fix data-races around sysctl_mem.
          - cipso: Fix data-races around sysctl.
          - icmp: Fix data-races around sysctl.
          - ipv4: Fix a data-race around sysctl_fib_sync_mem.
          - [armhf] dts: sunxi: Fix SPI NOR campatible on Orange Pi Zero
          - netfilter: nf_log: incorrect offset to network header
          - nfp: fix issue of skb segments exceeds descriptor limitation
          - vlan: fix memory leak in vlan_newlink() (regression in 5.17)
          - netfilter: nf_tables: replace BUG_ON by element length check
          - [riscv64] KVM: Fix SRCU deadlock caused by
            kvm_riscv_check_vcpu_requests()
          - [x86] drm/i915/gvt: IS_ERR() vs NULL bug in
            intel_gvt_update_reg_whitelist()
          - xen/gntdev: Ignore failure to unmap INVALID_GRANT_HANDLE
          - mptcp: fix subflow traversal at disconnect time (regression in 5.17)
          - NFSD: Decode NFSv4 birth time attribute (regression in 5.18)
          - lockd: set fl_owner when unlocking files
          - lockd: fix nlm_close_files (regression in 5.15)
          - ice: handle E822 generic device ID in PLDM header
          - ice: change devlink code to read NVM in blocks
          - [x86] drm/i915/ttm: fix sg_table construction (regression in 5.15)
          - [x86] drm/i915/gt: Serialize GRDOM access between multiple engine resets
          - [x86] drm/i915/gt: Serialize TLB invalidates with GT resets
          - bnxt_en: reclaim max resources if sriov enable fails
          - bnxt_en: Fix bnxt_reinit_after_abort() code path
          - bnxt_en: fix livepatch query
          - bnxt_en: Fix bnxt_refclk_read()
          - sysctl: Fix data-races in proc_dou8vec_minmax().
          - sysctl: Fix data-races in proc_dointvec_ms_jiffies().
          - tcp: Fix a data-race around sysctl_max_tw_buckets.
          - icmp: Fix a data-race around sysctl_icmp_echo_ignore_all.
          - icmp: Fix data-races around sysctl_icmp_echo_enable_probe.
          - icmp: Fix a data-race around sysctl_icmp_echo_ignore_broadcasts.
          - icmp: Fix a data-race around sysctl_icmp_ignore_bogus_error_responses.
          - icmp: Fix a data-race around sysctl_icmp_errors_use_inbound_ifaddr.
          - icmp: Fix a data-race around sysctl_icmp_ratelimit.
          - icmp: Fix a data-race around sysctl_icmp_ratemask.
          - raw: Fix a data-race around sysctl_raw_l3mdev_accept.
          - tcp: Fix data-races around sysctl_tcp_ecn.
          - tcp: Fix a data-race around sysctl_tcp_ecn_fallback.
          - ipv4: Fix data-races around sysctl_ip_dynaddr.
          - nexthop: Fix data-races around nexthop_compat_mode.
          - [amd64] ima: force signature verification when CONFIG_KEXEC_SIG is
            configured
          - drm/amd/display: Ignore First MST Sideband Message Return Error
          - [amd64] drm/amdkfd: correct the MEC atomic support firmware checking for
            GC 10.3.7
          - drm/amd/display: Only use depth 36 bpp linebuffers on DCN display
            engines. (regression in 5.14)
          - drm/amd/pm: Prevent divide by zero
          - drm/amd/display: Ensure valid event timestamp for cursor-only commits
          - smb3: workaround negprot bug in some Samba servers
          - sfc: fix use after free when disabling sriov
          - netfs: do not unlock and put the folio twice
          - seg6: fix skb checksum evaluation in SRH encapsulation/insertion
          - seg6: fix skb checksum in SRv6 End.B6 and End.B6.Encaps behaviors
          - seg6: bpf: fix skb checksum in bpf_push_seg6_encap()
          - sfc: fix kernel panic when creating VF
          - net: atlantic: remove deep parameter on suspend/resume functions
          - net: atlantic: remove aq_nic_deinit() when resume (regression in 5.18)
          - [x86] KVM: x86: Fully initialize 'struct kvm_lapic_irq' in
            kvm_pv_kick_cpu_op()
          - net/tls: Check for errors in tls_device_init
          - mm: sysctl: fix missing numa_stat when !CONFIG_HUGETLB_PAGE
          - [arm64] tee: tee_get_drvdata(): fix description of return value
          - tty: extract tty_flip_buffer_commit() from tty_flip_buffer_push()
          - tty: use new tty_insert_flip_string_and_push_buffer() in pty_write()
          - scsi: megaraid: Clear READ queue map's nr_queues (regression in 5.13)
          - scsi: ufs: core: Drop loglevel of WriteBoost message (regression in 5.13)
          - nvme: fix block device naming collision (regression in 5.18)
          - ksmbd: use SOCK_NONBLOCK type for kernel_accept()
          - [x86] platform/x86: intel/pmc: Add Alder Lake N support to PMC core
            driver
          - virtio_mmio: Add missing PM calls to freeze/restore
          - virtio_mmio: Restore guest page size on resume
          - netfilter: nf_tables: avoid skb access on nf_stolen
          - netfilter: br_netfilter: do not skip all hooks with 0 priority
          - [arm64] scsi: hisi_sas: Limit max hw sectors for v3 HW
          - [powerpc*] cpufreq: pmac32-cpufreq: Fix refcount leak bug
          - [x86] platform/x86: thinkpad-acpi: profile capabilities as integer
          - [x86] platform/x86: thinkpad_acpi: do not use PSC mode on Intel platforms
          - [x86] platform/x86: hp-wmi: Ignore Sanitization Mode event
          - firmware: sysfb: Make sysfb_create_simplefb() return a pdev pointer
          - firmware: sysfb: Add sysfb_disable() helper function
          - fbdev: Disable sysfb device registration when removing conflicting FBs
          - net: tipc: fix possible refcount leak in tipc_sk_create()
          - nvme-tcp: always fail a request when sending it failed
          - nvme: fix regression when disconnect a recovering ctrl
          - net: sfp: fix memory leak in sfp_probe()
          - ASoC: ops: Fix off by one in range control validation
          - [armhf] pinctrl: aspeed: Fix potential NULL dereference in
            aspeed_pinmux_set_mux()
          - ASoC: Realtek/Maxim SoundWire codecs: disable pm_runtime on remove
          - ASoC: rt711-sdca-sdw: fix calibrate mutex initialization
          - [x86] ASoC: Intel: sof_sdw: handle errors on card registration
          - ASoC: rt711: fix calibrate mutex initialization
          - ASoC: rt7*-sdw: harden jack_detect_handler
          - ASoC: codecs: rt700/rt711/rt711-sdca: initialize workqueues in probe
          - [x86] ASoC: SOF: Intel: hda-dsp: Expose hda_dsp_core_power_up()
          - [x86] ASoC: SOF: Intel: hda-loader: Make sure that the fw load sequence
            is followed
          - [x86] ASoC: SOF: Intel: hda-loader: Clarify the cl_dsp_init() flow
          - [x86] ASoC: Intel: bytcr_wm5102: Fix GPIO related probe-ordering problem
          - ASoC: wm_adsp: Fix event for preloader
          - ASoC: cs35l41: Correct some control names
          - ASoC: rt711-sdca: fix kernel NULL pointer dereference when IO error
          - ASoC: dapm: Initialise kcontrol data for mux/demux controls
          - ASoC: cs35l41: Add ASP TX3/4 source to register patch
          - [amd64] Clear .brk area at early boot
          - [armhf] dts: stm32: use the correct clock source for CEC on stm32mp151
          - Revert "can: xilinx_can: Limit CANFD brp to 2"
          - ALSA: usb-audio: Add quirks for MacroSilicon MS2100/MS2106 devices
          - ALSA: usb-audio: Add quirk for Fiero SC-01
          - ALSA: usb-audio: Add quirk for Fiero SC-01 (fw v1.0.0)
          - nvme-pci: phison e16 has bogus namespace ids
          - nvme: use struct group for generic command dwords
          - signal handling: don't use BUG_ON() for debugging
          - ACPI: video: Fix acpi_video_handles_brightness_key_presses()
          - vt: fix memory overlapping when deleting chars in the buffer
          - [s390x] ap: fix error handling in __verify_queue_reservations()
          - [x86] ACPI: CPPC: Fix enabling CPPC on AMD systems with shared memory
          - serial: 8250: fix return error code in serial8250_request_std_resource()
          - power: supply: core: Fix boundary conditions in interpolation
            (regression in 5.17)
          - [armhf] serial: stm32: Clear prev values before setting RTS delays
          - [arm*] serial: pl011: UPSTAT_AUTORTS requires .throttle/unthrottle
          - serial: 8250: Fix PM usage_count for console handover
          - [arm64] serial: mvebu-uart: correctly report configured baudrate value
          - [x86] pat: Fix x86_has_pat_wp()
          - [i386] drm/i915/ttm: fix 32b build
          - drm/aperture: Run fbdev removal before internal helpers
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.18.14
          - [amd64] Preparation for mitigating RETbleed:
            + x86/traps: Use pt_regs directly in fixup_bad_iret()
            + x86/entry: Switch the stack after error_entry() returns
            + x86/entry: Move PUSH_AND_CLEAR_REGS out of error_entry()
            + x86/entry: Don't call error_entry() for XENPV
            + x86/entry: Remove skip_r11rcx
          - [amd64] Add mitigations for RETbleed on AMD/Hygon (CVE-2022-29900) and
            Intel (CVE-2022-29901) processors:
            + x86/kvm/vmx: Make noinstr clean
            + x86/cpufeatures: Move RETPOLINE flags to word 11
            + x86/retpoline: Cleanup some #ifdefery
            + x86/retpoline: Swizzle retpoline thunk
            + x86/retpoline: Use -mfunction-return
            + x86: Undo return-thunk damage
            + x86,objtool: Create .return_sites
            + objtool: skip non-text sections when adding return-thunk sites
            + x86,static_call: Use alternative RET encoding
            + x86/ftrace: Use alternative RET encoding
            + x86/bpf: Use alternative RET encoding
            + x86/kvm: Fix SETcc emulation for return thunks
            + x86/vsyscall_emu/64: Don't use RET in vsyscall emulation
            + x86/sev: Avoid using __x86_return_thunk
            + x86: Use return-thunk in asm code
            + x86/entry: Avoid very early RET
            + objtool: Treat .text.__x86.* as noinstr
            + x86: Add magic AMD return-thunk
            + x86/bugs: Report AMD retbleed vulnerability
            + x86/bugs: Add AMD retbleed= boot parameter
            + x86/bugs: Enable STIBP for JMP2RET
            + x86/bugs: Keep a per-CPU IA32_SPEC_CTRL value
            + x86/entry: Add kernel IBRS implementation
            + x86/bugs: Optimize SPEC_CTRL MSR writes
            + x86/speculation: Add spectre_v2=ibrs option to support Kernel IBRS
            + x86/bugs: Split spectre_v2_select_mitigation() and
              spectre_v2_user_select_mitigation()
            + x86/bugs: Report Intel retbleed vulnerability
            + intel_idle: Disable IBRS during long idle
            + objtool: Update Retpoline validation
            + x86/xen: Rename SYS* entry points
            + x86/xen: Add UNTRAIN_RET
            + x86/bugs: Add retbleed=ibpb
            + x86/bugs: Do IBPB fallback check only once
            + objtool: Add entry UNRET validation
            + x86/cpu/amd: Add Spectral Chicken
            + x86/speculation: Fix RSB filling with CONFIG_RETPOLINE=n
            + x86/speculation: Fix firmware entry SPEC_CTRL handling
            + x86/speculation: Fix SPEC_CTRL write on SMT state change
            + x86/speculation: Use cached host SPEC_CTRL value for guest entry/exit
            + x86/speculation: Remove x86_spec_ctrl_mask
            + objtool: Re-add UNWIND_HINT_{SAVE_RESTORE}
            + KVM: VMX: Flatten __vmx_vcpu_run()
            + KVM: VMX: Convert launched argument to flags
            + KVM: VMX: Prevent guest RSB poisoning attacks with eIBRS
            + KVM: VMX: Fix IBRS handling after vmexit
            + x86/speculation: Fill RSB on vmexit for IBRS
            + KVM: VMX: Prevent RSB underflow before vmenter
            + x86/common: Stamp out the stepping madness
            + x86/cpu/amd: Enumerate BTC_NO
            + x86/retbleed: Add fine grained Kconfig knobs
            + x86/bugs: Add Cannon lake to RETBleed affected CPU list
            + x86/entry: Move PUSH_AND_CLEAR_REGS() back into error_entry
            + x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported
            + x86/kexec: Disable RET on kexec
            + x86/speculation: Disable RRSBA behavior
            + x86/static_call: Serialize __static_call_fixup() properly
            + x86/asm/32: Fix ANNOTATE_UNRET_SAFE use on 32-bit
            + x86/speculation: Use DECLARE_PER_CPU for x86_spec_ctrl_current
            + efi/x86: use naked RET on mixed mode call wrapper
            + x86/kvm: fix FASTOP_SIZE when return thunks are enabled
            + KVM: emulate: do not adjust size of fastop and setcc subroutines
            + tools arch x86: Sync the msr-index.h copy with the kernel sources
            + tools headers cpufeatures: Sync with the kernel sources
            + x86/bugs: Remove apostrophe typo
            + um: Add missing apply_returns()
      .
        [ John Paul Adrian Glaubitz ]
        * [ia64] Disable CONFIG_HARDENED_USERCOPY which is currently broken
      .
        [ Ben Hutchings ]
        * [arm64] pinctrl: Re-enable PINCTRL_MSM (regression in 5.14)
        * lintian: Update overrides for lintian 2.115
        * [rt] Update to 5.18-rt11:
          - Revert "softirq: Check preemption after reenabling interrupts"
        * Bump ABI to 3
        * Disable SECURITY_LOCKDOWN_LSM and MODULE_SIG where we don't sign code
          (Closes: #825141)
        * tools/bpf, tools/perf: Update for init_disassemble_info() API change in
          binutils 2.38.50
        * tools/perf: Fix "unused parameter" warning introduced by "tools/perf:
          pmu-events: Fix reproducibility"
        * [amd64,arm64,armhf] wireguard: Clear keys after suspend despite
          CONFIG_ANDROID=y
        * d/salsa-ci.yml: Sync build-script with upstream
        * d/salsa-ci.yml: Handle APT sources in debian.sources as well as
          sources.list
        * d/tests: Remove obsolete dependencies of python test
        * d/tests: Add kbuild test that builds a trivial OOT module
        * linux-kbuild: Add missing pahole-version.sh script
        * [amd64] ata: Enable PATA_LEGACY (Closes: #910010)
        * udeb: Add essiv to crypto-modules (Closes: #973378)
        * udeb: Add SCSI device handlers to multipath-modules (Closes: #989079)
        * linux-source: Update Recommends to include all dependencies for deb-pkg
          target
        * [x86] speculation: Make all RETbleed mitigations depend on X86_64
      .
        [ Vincent Blut ]
        * [armhf] drivers/crypto/caam: Enable CRYPTO_DEV_FSL_CAAM as module
          (Closes: #1013255)
        * drivers/net/wireless/mediatek/mt76/mt7921: Enable MT7921U as module
          (Closes: #1015808)
      .
      linux (5.18.5-1) unstable; urgency=medium
      .
        * New upstream stable update:
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.18.3
          - binfmt_flat: do not stop relocating GOT entries prematurely on riscv
          - parisc: fix a crash with multicore scheduler
          - parisc/stifb: Implement fb_is_primary_device()
          - parisc/stifb: Keep track of hardware path of graphics card
          - RISC-V: Mark IORESOURCE_EXCLUSIVE for reserved mem instead of
            IORESOURCE_BUSY
          - riscv: Initialize thread pointer before calling C functions
          - riscv: Fix irq_work when SMP is disabled
          - riscv: Wire up memfd_secret in UAPI header
          - riscv: Move alternative length validation into subsection
          - ALSA: hda/realtek - Add new type for ALC245
          - ALSA: hda/realtek: Enable 4-speaker output for Dell XPS 15 9520 laptop
          - ALSA: hda/realtek - Fix microphone noise on ASUS TUF B550M-PLUS
          - ALSA: usb-audio: Cancel pending work at closing a MIDI substream
          - USB: serial: pl2303: fix type detection for odd device
          - USB: serial: option: add Quectel BG95 modem
          - USB: new quirk for Dell Gen 2 devices
          - usb: isp1760: Fix out-of-bounds array access
          - usb: dwc3: gadget: Move null pinter check to proper place
          - usb: core: hcd: Add support for deferring roothub registration
          - fs/ntfs3: provide block_invalidate_folio to fix memory leak
          - fs/ntfs3: Update valid size if -EIOCBQUEUED
          - fs/ntfs3: Fix fiemap + fix shrink file size (to remove preallocated space)
          - fs/ntfs3: Keep preallocated only if option prealloc enabled
          - fs/ntfs3: Check new size for limits
          - fs/ntfs3: In function ntfs_set_acl_ex do not change inode->i_mode if
            called from function ntfs_init_acl
          - fs/ntfs3: Fix some memory leaks in an error handling path of
            'log_replay()'
          - fs/ntfs3: Update i_ctime when xattr is added
          - fs/ntfs3: Restore ntfs_xattr_get_acl and ntfs_xattr_set_acl functions
          - cifs: don't call cifs_dfs_query_info_nonascii_quirk() if nodfs was set
          - cifs: fix ntlmssp on old servers
          - cifs: fix potential double free during failed mount
          - cifs: when extending a file with falloc we should make files not-sparse
          - xhci: Set HCD flag to defer primary roothub registration
          - xhci: Allow host runtime PM as default for Intel Alder Lake N xHCI
          - platform/x86: intel-hid: fix _DSM function index handling
          - x86/MCE/AMD: Fix memory leak when threshold_create_bank() fails
          - perf/x86/intel: Fix event constraints for ICL
          - x86/kexec: fix memory leak of elf header buffer
          - x86/sgx: Set active memcg prior to shmem allocation
          - kthread: Don't allocate kthread_struct for init and umh
          - ptrace/um: Replace PT_DTRACE with TIF_SINGLESTEP
          - ptrace/xtensa: Replace PT_SINGLESTEP with TIF_SINGLESTEP
          - ptrace: Reimplement PTRACE_KILL by always sending SIGKILL
          - btrfs: add "0x" prefix for unsupported optional features
          - btrfs: return correct error number for __extent_writepage_io()
          - btrfs: repair super block num_devices automatically
          - btrfs: fix the error handling for submit_extent_page() for
            btrfs_do_readpage()
          - btrfs: fix deadlock between concurrent dio writes when low on free data
            space
          - btrfs: zoned: properly finish block group on metadata write
          - btrfs: zoned: zone finish unused block group
          - btrfs: zoned: finish block group when there are no more allocatable bytes
            left
          - btrfs: zoned: fix comparison of alloc_offset vs meta_write_pointer
          - iommu/vt-d: Add RPLS to quirk list to skip TE disabling
          - drm/selftests: fix a shift-out-of-bounds bug
          - drm/vmwgfx: validate the screen formats
          - ath11k: fix the warning of dev_wake in mhi_pm_disable_transition()
          - drm/virtio: fix NULL pointer dereference in virtio_gpu_conn_get_modes
          - selftests/bpf: Fix vfs_link kprobe definition
          - selftests/bpf: Fix parsing of prog types in UAPI hdr for bpftool sync
          - ath11k: Change max no of active probe SSID and BSSID to fw capability
          - selftests/bpf: Fix file descriptor leak in load_kallsyms()
          - rtw89: ser: fix CAM leaks occurring in L2 reset
          - rtw89: fix misconfiguration on hw_scan channel time
          - mwifiex: add mutex lock for call in mwifiex_dfs_chan_sw_work_queue
          - b43legacy: Fix assigning negative value to unsigned variable
          - b43: Fix assigning negative value to unsigned variable
          - ipw2x00: Fix potential NULL dereference in libipw_xmit()
          - ipv6: fix locking issues with loops over idev->addr_list
          - fbcon: Consistently protect deferred_takeover with console_lock()
          - x86/platform/uv: Update TSC sync state for UV5
          - ACPICA: Avoid cache flush inside virtual machines
          - libbpf: Fix a bug with checking bpf_probe_read_kernel() support in old
            kernels
          - mac80211: minstrel_ht: fix where rate stats are stored (fixes debugfs
            output)
          - drm/komeda: return early if drm_universal_plane_init() fails.
          - drm/amd/display: Disabling Z10 on DCN31
          - rcu-tasks: Fix race in schedule and flush work
          - rcu-tasks: Handle sparse cpu_possible_mask in rcu_tasks_invoke_cbs()
          - rcu: Make TASKS_RUDE_RCU select IRQ_WORK
          - sfc: ef10: Fix assigning negative value to unsigned variable
          - ALSA: jack: Access input_dev under mutex
          - rtw88: fix incorrect frequency reported
          - rtw88: 8821c: fix debugfs rssi value
          - spi: spi-rspi: Remove setting {src,dst}_{addr,addr_width} based on DMA
            direction
          - tools/power turbostat: fix ICX DRAM power numbers
          - tcp: consume incoming skb leading to a reset
          - loop: implement ->free_disk
          - scsi: lpfc: Move cfg_log_verbose check before calling lpfc_dmp_dbg()
          - scsi: lpfc: Fix SCSI I/O completion and abort handler deadlock
          - scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and
            PLOGI
          - scsi: lpfc: Protect memory leak for NPIV ports sending PLOGI_RJT
          - scsi: lpfc: Fix call trace observed during I/O with CMF enabled
          - cpuidle: PSCI: Improve support for suspend-to-RAM for PSCI OSI mode
          - drm/amdgpu/pm: fix the null pointer while the smu is disabled
          - drm/amd/pm: fix double free in si_parse_power_table()
          - ASoC: rsnd: care default case on rsnd_ssiu_busif_err_status_clear()
          - ASoC: rsnd: care return value from rsnd_node_fixed_index()
          - net: macb: In ZynqMP initialization make SGMII phy configuration optional
          - ath9k: fix QCA9561 PA bias level
          - media: Revert "media: dw9768: activate runtime PM and turn off device"
          - media: i2c: dw9714: Disable the regulator when the driver fails to probe
          - media: venus: hfi: avoid null dereference in deinit
          - media: venus: do not queue internal buffers from previous sequence
          - media: pci: cx23885: Fix the error handling in cx23885_initdev()
          - media: cx25821: Fix the warning when removing the module
          - md/bitmap: don't set sb values if can't pass sanity check
          - mmc: jz4740: Apply DMA engine limits to maximum segment size
          - drivers: mmc: sdhci_am654: Add the quirk to set TESTCD bit
          - scsi: megaraid: Fix error check return value of register_chrdev()
          - drm/amdgpu/sdma: Fix incorrect calculations of the wptr of the doorbells
          - scsi: ufs: Use pm_runtime_resume_and_get() instead of
            pm_runtime_get_sync()
          - scsi: lpfc: Fix resource leak in lpfc_sli4_send_seq_to_ulp()
          - ath11k: disable spectral scan during spectral deinit
          - ASoC: Intel: bytcr_rt5640: Add quirk for the HP Pro Tablet 408
          - drm/plane: Move range check for format_count earlier
          - drm/amdkfd: Fix circular lock dependency warning
          - drm/amd/pm: fix the compile warning
          - ath10k: skip ath10k_halt during suspend for driver state RESTARTING
          - arm64: compat: Do not treat syscall number as ESR_ELx for a bad syscall
          - drm: msm: fix error check return value of irq_of_parse_and_map()
          - drm/msm/dpu: Clean up CRC debug logs
          - xtensa: move trace_hardirqs_off call back to entry.S
          - ath11k: fix warning of not found station for bssid in message
          - scsi: target: tcmu: Fix possible data corruption
          - ipv6: Don't send rs packets to the interface of ARPHRD_TUNNEL
          - net/mlx5: use kvfree() for kvzalloc() in mlx5_ct_fs_smfs_matcher_create
          - net/mlx5: fs, delete the FTE when there are no rules attached to it
          - ASoC: dapm: Don't fold register value changes into notifications
          - ASoC: SOF: ipc3-topology: Correct get_control_data for non bytes payload
          - mlxsw: spectrum_dcb: Do not warn about priority changes
          - mlxsw: Treat LLDP packets as control
          - drm/amdgpu/psp: move PSP memory alloc from hw_init to sw_init
          - drm/amdgpu/ucode: Remove firmware load type check in amdgpu_ucode_free_bo
          - regulator: mt6315: Enforce regulator-compatible, not name
          - ice: always check VF VSI pointer values
          - HID: bigben: fix slab-out-of-bounds Write in bigben_probe
          - drm/tegra: gem: Do not try to dereference ERR_PTR()
          - of: Support more than one crash kernel regions for kexec -s
          - ASoC: tscs454: Add endianness flag in snd_soc_component_driver
          - net/mlx5: Increase FW pre-init timeout for health recovery
          - ASoC: Intel: sof_ssp_amp: fix no DMIC BE Link on Chromebooks
          - scsi: hisi_sas: Undo RPM resume for failed notify phy event for v3 HW
          - scsi: lpfc: Inhibit aborts if external loopback plug is inserted
          - scsi: lpfc: Alter FPIN stat accounting logic
          - net: remove two BUG() from skb_checksum_help()
          - s390/preempt: disable __preempt_count_add() optimization for
            PROFILE_ALL_BRANCHES
          - perf/amd/ibs: Cascade pmu init functions' return value
          - sched/core: Avoid obvious double update_rq_clock warning
          - spi: stm32-qspi: Fix wait_cmd timeout in APM mode
          - dma-debug: change allocation mode from GFP_NOWAIT to GFP_ATIOMIC
          - fs: hold writers when changing mount's idmapping
          - ASoC: SOF: amd: add missing platform_device_unregister in acp_pci_rn_probe
          - ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default
          - ipmi:ssif: Check for NULL msg when handling events and messages
          - ipmi: Add an intializer for ipmi_smi_msg struct
          - ipmi: Fix pr_fmt to avoid compilation issues
          - kunit: bail out of test filtering logic quicker if OOM
          - rtlwifi: Use pr_warn instead of WARN_ONCE
          - mt76: mt7915: accept rx frames with non-standard VHT MCS10-11
          - mt76: mt7921: accept rx frames with non-standard VHT MCS10-11
          - mt76: fix encap offload ethernet type check
          - media: rga: fix possible memory leak in rga_probe
          - media: coda: limit frame interval enumeration to supported encoder frame
            sizes
          - media: hantro: HEVC: unconditionnaly set pps_{cb/cr}_qp_offset values
          - media: ccs-core.c: fix failure to call clk_disable_unprepare
          - media: imon: reorganize serialization
          - media: cec-adap.c: fix is_configuring state
          - usbnet: Run unregister_netdev() before unbind() again
          - Bluetooth: HCI: Add HCI_QUIRK_BROKEN_ENHANCED_SETUP_SYNC_CONN quirk
          - Bluetooth: btusb: Set HCI_QUIRK_BROKEN_ENHANCED_SETUP_SYNC_CONN for QCA
          - Bluetooth: btusb: Set HCI_QUIRK_BROKEN_ERR_DATA_REPORTING for QCA
          - bnxt_en: Configure ptp filters during bnxt open
          - media: mediatek: vcodec: prevent kernel crash when rmmod mtk-vcodec-dec.ko
          - openrisc: start CPU timer early in boot
          - nvme-pci: fix a NULL pointer dereference in nvme_alloc_admin_tags
          - ASoC: rt5645: Fix errorenous cleanup order
          - nbd: Fix hung on disconnect request if socket is closed before
          - drm/amd/pm: update smartshift powerboost calc for smu12
          - drm/amd/pm: update smartshift powerboost calc for smu13
          - drm/amdgpu: Move mutex_init(&smu->message_lock) to smu_early_init()
          - btrfs: fix anon_dev leak in create_subvol()
          - kunit: tool: make parser stop overwriting status of suites w/ no_tests
          - net: phy: micrel: Allow probing without .driver_data
          - media: exynos4-is: Fix compile warning
          - media: hantro: Stop using H.264 parameter pic_num
          - rtw89: cfo: check mac_id to avoid out-of-bounds
          - of/fdt: Ignore disabled memory nodes
          - blk-throttle: Set BIO_THROTTLED when bio has been throttled
          - ASoC: max98357a: remove dependency on GPIOLIB
          - ASoC: rt1015p: remove dependency on GPIOLIB
          - ACPI: CPPC: Assume no transition latency if no PCCT
          - nvme: set non-mdts limits in nvme_scan_work
          - can: mcp251xfd: silence clang's -Wunaligned-access warning
          - x86/microcode: Add explicit CPU vendor dependency
          - net: ipa: ignore endianness if there is no header
          - selftests/bpf: Add missing trampoline program type to trampoline_count
            test
          - m68k: atari: Make Atari ROM port I/O write macros return void
          - hwmon: (pmbus) Add get_voltage/set_voltage ops
          - rxrpc: Return an error to sendmsg if call failed
          - rxrpc, afs: Fix selection of abort codes
          - afs: Adjust ACK interpretation to try and cope with NAT
          - eth: tg3: silence the GCC 12 array-bounds warning
          - char: tpm: cr50_i2c: Suppress duplicated error message in .remove()
          - selftests/bpf: fix btf_dump/btf_dump due to recent clang change
          - gfs2: use i_lock spin_lock for inode qadata
          - linux/types.h: reinstate "__bitwise__" macro for user space use
          - scsi: target: tcmu: Avoid holding XArray lock when calling lock_page
          - kunit: fix executor OOM error handling logic on non-UML
          - IB/rdmavt: add missing locks in rvt_ruc_loopback
          - PCI/ASPM: Make Intel DG2 L1 acceptable latency unlimited
          - ARM: dts: ox820: align interrupt controller node name with dtschema
          - ARM: dts: socfpga: align interrupt controller node name with dtschema
          - ARM: dts: s5pv210: align DMA channels with dtschema
          - ASoC: amd: Add driver data to acp6x machine driver
          - arm64: dts: qcom: msm8994: Fix the cont_splash_mem address
          - arm64: dts: qcom: msm8994: Fix BLSP[12]_DMA channels count
          - PM / devfreq: rk3399_dmc: Disable edev on remove()
          - crypto: ccree - use fine grained DMA mapping dir
          - crypto: qat - fix off-by-one error in PFVF debug print
          - soc: ti: ti_sci_pm_domains: Check for null return of devm_kcalloc
          - fs: jfs: fix possible NULL pointer dereference in dbFree()
          - arm64: dts: qcom: sdm845-xiaomi-beryllium: fix typo in panel's
            vddio-supply property
          - ALSA: usb-audio: Add quirk bits for enabling/disabling generic implicit fb
          - ALSA: usb-audio: Move generic implicit fb quirk entries into quirks.c
          - ARM: OMAP1: clock: Fix UART rate reporting algorithm
          - powerpc/fadump: Fix fadump to work with a different endian capture kernel
          - fat: add ratelimit to fat*_ent_bread()
          - pinctrl: renesas: rzn1: Fix possible null-ptr-deref in
            sh_pfc_map_resources()
          - ARM: versatile: Add missing of_node_put in dcscb_init
          - ARM: dts: exynos: add atmel,24c128 fallback to Samsung EEPROM
          - arm64: dts: qcom: sc7280-idp: Configure CTS pin to bias-bus-hold for
            bluetooth
          - arm64: dts: qcom: sc7280-qcard: Configure CTS pin to bias-bus-hold for
            bluetooth
          - ARM: hisi: Add missing of_node_put after of_find_compatible_node
          - cpufreq: Avoid unnecessary frequency updates due to mismatch
          - PCI: microchip: Add missing chained_irq_enter()/exit() calls
          - powerpc/rtas: Keep MSR[RI] set when calling RTAS
          - PCI: Avoid pci_dev_lock() AB/BA deadlock with sriov_numvfs_store()
          - PCI: cadence: Clear FLR in device capabilities register
          - KVM: PPC: Book3S HV Nested: L2 LPCR should inherit L1 LPES setting
          - alpha: fix alloc_zeroed_user_highpage_movable()
          - tracing: incorrect isolate_mote_t cast in mm_vmscan_lru_isolate
          - cifs: return ENOENT for DFS lookup_cache_entry()
          - powerpc/powernv/vas: Assign real address to rx_fifo in vas_rx_win_attr
          - powerpc/xics: fix refcount leak in icp_opal_init()
          - powerpc/powernv: fix missing of_node_put in uv_init()
          - macintosh/via-pmu: Fix build failure when CONFIG_INPUT is disabled
          - powerpc/iommu: Add missing of_node_put in iommu_init_early_dart
          - fanotify: fix incorrect fmode_t casts
          - smb3: check for null tcon
          - RDMA/hfi1: Prevent panic when SDMA is disabled
          - cifs: do not use tcpStatus after negotiate completes
          - Input: gpio-keys - cancel delayed work only in case of GPIO
          - drm: fix EDID struct for old ARM OABI format
          - drm/bridge_connector: enable HPD by default if supported
          - drm/selftests: missing error code in igt_buddy_alloc_smoke()
          - drm/omap: fix NULL but dereferenced coccicheck error
          - dt-bindings: display: sitronix, st7735r: Fix backlight in example
          - drm/bridge: anx7625: check the return on anx7625_aux_trans
          - drm: ssd130x: Fix COM scan direction register mask
          - drm: ssd130x: Always apply segment remap setting
          - drm/solomon: Make DRM_SSD130X depends on MMU
          - drm/format-helper: Rename drm_fb_xrgb8888_to_mono_reversed()
          - drm/format-helper: Fix XRGB888 to monochrome conversion
          - drm/ssd130x: Fix rectangle updates
          - drm/ssd130x: Reduce temporary buffer sizes
          - fbdev: defio: fix the pagelist corruption
          - drm/vmwgfx: Fix an invalid read
          - ath11k: acquire ab->base_lock in unassign when finding the peer by addr
          - drm: bridge: it66121: Fix the register page length
          - drm/bridge: it6505: Fix build error
          - ath9k: fix ar9003_get_eepmisc
          - drm/edid: fix invalid EDID extension block filtering
          - drm/bridge: anx7625: add missing destroy_workqueue() in
            anx7625_i2c_probe()
          - drm/bridge: adv7511: clean up CEC adapter when probe fails
          - drm: bridge: icn6211: Fix register layout
          - drm: bridge: icn6211: Fix HFP_HSW_HBP_HI and HFP_MIN handling
          - mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
          - spi: qcom-qspi: Add minItems to interconnect-names
          - ASoC: codecs: Fix error handling in power domain init and exit handlers
          - ASoC: cs35l41: Fix an out-of-bounds access in otp_packed_element_t
          - ASoC: SOF: ipc3-topology: Set scontrol->priv to NULL after freeing it
          - ASoC: mediatek: Fix error handling in mt8173_max98090_dev_probe
          - ASoC: mediatek: Fix missing of_node_put in mt2701_wm8960_machine_probe
          - docs: driver-api/thermal/intel_dptf: Use copyright symbol
          - x86/delay: Fix the wrong asm constraint in delay_loop()
          - drm/mediatek: Add vblank register/unregister callback functions
          - drm/mediatek: Fix DPI component detection for MT8192
          - drm/vc4: kms: Take old state core clock rate into account
          - drm/vc4: hvs: Fix frame count register readout
          - drm/mediatek: Fix mtk_cec_mask()
          - drm/amd/amdgpu: Only reserve vram for firmware with vega9 MS_HYPERV host.
          - drm/vc4: hvs: Reset muxes at probe time
          - drm/vc4: txp: Don't set TXP_VSTART_AT_EOF
          - drm/vc4: txp: Force alpha to be 0xff if it's disabled
          - libbpf: Don't error out on CO-RE relos for overriden weak subprogs
          - x86/PCI: Fix ALi M1487 (IBC) PIRQ router link value interpretation
          - mptcp: optimize release_cb for the common case
          - mptcp: reset the packet scheduler on incoming MP_PRIO
          - mptcp: reset the packet scheduler on PRIO change
          - nl80211: show SSID for P2P_GO interfaces
          - drm/komeda: Fix an undefined behavior bug in komeda_plane_add()
          - drm: mali-dp: potential dereference of null pointer
          - drm/amd/amdgpu: Fix asm/hypervisor.h build error.
          - spi: spi-ti-qspi: Fix return value handling of wait_for_completion_timeout
          - scftorture: Fix distribution of short handler delays
          - net: ethernet: ti: am65-cpsw: Fix build error without PHYLINK
          - net: dsa: mt7530: 1G can also support 1000BASE-X link mode
          - ixp4xx_eth: fix error check return value of platform_get_irq()
          - NFC: NULL out the dev->rfkill to prevent UAF
          - cpufreq: governor: Use kobject release() method to free dbs_data
          - efi: Allow to enable EFI runtime services by default on RT
          - efi: Add missing prototype for efi_capsule_setup_info
          - device property: Allow error pointer to be passed to fwnode APIs
          - drm/amd/amdgpu: Remove static from variable in RLCG Reg RW
          - net: dsa: qca8k: correctly handle mdio read error
          - target: remove an incorrect unmap zeroes data deduction
          - drbd: remove assign_p_sizes_qlim
          - drbd: use bdev based limit helpers in drbd_send_sizes
          - drbd: use bdev_alignment_offset instead of queue_alignment_offset
          - drbd: fix duplicate array initializer
          - EDAC/dmc520: Don't print an error for each unconfigured interrupt line
          - bpf: Move rcu lock management out of BPF_PROG_RUN routines
          - drm/bridge: anx7625: Use uint8 for lane-swing arrays
          - mtd: rawnand: denali: Use managed device resources
          - HID: hid-led: fix maximum brightness for Dream Cheeky
          - HID: elan: Fix potential double free in elan_input_configured
          - drm/bridge: Fix error handling in analogix_dp_probe
          - regulator: da9121: Fix uninit-value in da9121_assign_chip_model()
          - drm/mediatek: dpi: Use mt8183 output formats for mt8192
          - signal: Deliver SIGTRAP on perf event asynchronously if blocked
          - sched/fair: Fix cfs_rq_clock_pelt() for throttled cfs_rq
          - sched/psi: report zeroes for CPU full at the system level
          - spi: img-spfi: Fix pm_runtime_get_sync() error checking
          - drm/bridge: Fix it6505 Kconfig DRM_DP_AUX_BUS dependency
          - cpufreq: Fix possible race in cpufreq online error path
          - printk: add missing memory barrier to wake_up_klogd()
          - printk: wake waiters for safe and NMI contexts
          - ath9k_htc: fix potential out of bounds access with invalid
            rxstatus->rs_keyix
          - media: i2c: max9286: fix kernel oops when removing module
          - media: amphion: fix decoder's interlaced field
          - media: hantro: Implement support for encoder commands
          - media: hantro: Empty encoder capture buffers by default
          - media: imx: imx-mipi-csis: Rename csi_state to mipi_csis_device
          - media: imx: imx-mipi-csis: Fix active format initialization on source pad
          - drm/panel: simple: Add missing bus flags for Innolux G070Y2-L01
          - ALSA: pcm: Check for null pointer of pointer substream before
            dereferencing it
          - mtdblock: warn if opened on NAND
          - inotify: show inotify mask flags in proc fdinfo
          - fsnotify: fix wrong lockdep annotations
          - spi: rockchip: fix missing error on unsupported SPI_CS_HIGH
          - of: overlay: do not break notify on NOTIFY_{OK|STOP}
          - selftests/damon: add damon to selftests root Makefile
          - drm/msm: properly add and remove internal bridges
          - drm/msm/dpu: adjust display_v_end for eDP and DP
          - scsi: iscsi: Fix harmless double shift bug
          - scsi: ufs: qcom: Fix ufs_qcom_resume()
          - scsi: ufs: core: Exclude UECxx from SFR dump list
          - drm/v3d: Fix null pointer dereference of pointer perfmon
          - selftests/resctrl: Fix null pointer dereference on open failed
          - libbpf: Fix logic for finding matching program for CO-RE relocation
          - mtd: spi-nor: core: Check written SR value in
            spi_nor_write_16bit_sr_and_check()
          - x86/pm: Fix false positive kmemleak report in msr_build_context()
          - mtd: rawnand: cadence: fix possible null-ptr-deref in
            cadence_nand_dt_probe()
          - mtd: rawnand: intel: fix possible null-ptr-deref in ebu_nand_probe()
          - x86/speculation: Add missing prototype for unpriv_ebpf_notify()
          - ASoC: rk3328: fix disabling mclk on pclk probe failure
          - perf tools: Add missing headers needed by util/data.h
          - drm/msm/disp/dpu1: set vbif hw config to NULL to avoid use after memory
            free during pm runtime resume
          - drm/msm/dp: stop event kernel thread when DP unbind
          - drm/msm/dp: fix error check return value of irq_of_parse_and_map()
          - drm/msm/dp: reset DP controller before transmit phy test pattern
          - drm/msm/dp: do not stop transmitting phy test pattern during DP phy
            compliance test
          - drm/msm/dsi: fix error checks and return values for DSI xmit functions
          - drm/msm/hdmi: check return value after calling
            platform_get_resource_byname()
          - drm/msm/hdmi: fix error check return value of irq_of_parse_and_map()
          - drm/msm: add missing include to msm_drv.c
          - drm/panel: panel-simple: Fix proper bpc for AM-1280800N3TZQW-T00H
          - drm/bridge: it6505: Send DPCD SET_POWER to downstream
          - drm/msm: Fix null pointer dereferences without iommu
          - kunit: fix debugfs code to use enum kunit_status, not bool
          - drm/rockchip: vop: fix possible null-ptr-deref in vop_bind()
          - spi: cadence-quadspi: fix Direct Access Mode disable for SoCFPGA
          - perf tools: Use Python devtools for version autodetection rather than
            runtime
          - virtio_blk: fix the discard_granularity and discard_alignment queue limits
          - nl80211: don't hold RTNL in color change request
          - x86: Fix return value of __setup handlers
          - irqchip/exiu: Fix acknowledgment of edge triggered interrupts
          - irqchip/aspeed-i2c-ic: Fix irq_of_parse_and_map() return value
          - irqchip/aspeed-scu-ic: Fix irq_of_parse_and_map() return value
          - x86/mm: Cleanup the control_va_addr_alignment() __setup handler
          - arm64: fix types in copy_highpage()
          - regulator: core: Fix enable_count imbalance with EXCLUSIVE_GET
          - wl1251: dynamically allocate memory used for DMA
          - linkage: Fix issue with missing symbol size
          - ACPI: AGDI: Fix missing prototype warning for acpi_agdi_init()
          - drm/msm/disp/dpu1: avoid clearing hw interrupts if hw_intr is null during
            drm uninit
          - drm/msm/dsi: fix address for second DSI PHY on SDM660
          - drm/msm/dp: fix event thread stuck in wait_event after kthread_stop()
          - drm/msm/mdp5: Return error code in mdp5_pipe_release when deadlock is
            detected
          - drm/msm/mdp5: Return error code in mdp5_mixer_release when deadlock is
            detected
          - drm/msm: return an error pointer in msm_gem_prime_get_sg_table()
          - media: uvcvideo: Fix missing check to determine if element is found in
            list
          - arm64: stackleak: fix current_top_of_stack()
          - iomap: iomap_write_failed fix
          - spi: spi-fsl-qspi: check return value after calling
            platform_get_resource_byname()
          - selftests/bpf: Prevent skeleton generation race
          - Revert "cpufreq: Fix possible race in cpufreq online error path"
          - regulator: qcom_smd: Fix up PM8950 regulator configuration
          - samples: bpf: Don't fail for a missing VMLINUX_BTF when VMLINUX_H is
            provided
          - perf/amd/ibs: Use interrupt regs ip for stack unwinding
          - ath11k: Don't check arvif->is_started before sending management frames
          - scsi: lpfc: Fix element offset in __lpfc_sli_release_iocbq_s4()
          - scsi: lpfc: Fix dmabuf ptr assignment in lpfc_ct_reject_event()
          - wilc1000: fix crash observed in AP mode with cfg80211_register_netdevice()
          - HID: amd_sfh: Modify the bus name
          - HID: amd_sfh: Modify the hid name
          - ASoC: fsl: Fix refcount leak in imx_sgtl5000_probe
          - ASoC: imx-hdmi: Fix refcount leak in imx_hdmi_probe
          - ASoC: mxs-saif: Fix refcount leak in mxs_saif_probe
          - regulator: pfuze100: Fix refcount leak in pfuze_parse_regulators_dt
          - PM: EM: Decrement policy counter
          - dma-direct: don't fail on highmem CMA pages in dma_direct_alloc_pages
          - ASoC: samsung: Fix refcount leak in aries_audio_probe
          - block: Fix the bio.bi_opf comment
          - kselftest/cgroup: fix test_stress.sh to use OUTPUT dir
          - scripts/faddr2line: Fix overlapping text section failures
          - media: aspeed: Fix an error handling path in aspeed_video_probe()
          - media: exynos4-is: Fix PM disable depth imbalance in fimc_is_probe
          - mt76: mt7915: fix DBDC default band selection on MT7915D
          - mt76: mt7921: honor pm user configuration in mt7921_sniffer_interface_iter
          - mt76: mt7915: fix unbounded shift in mt7915_mcu_beacon_mbss
          - mt76: mt7921: Fix the error handling path of mt7921_pci_probe()
          - mt76: mt7915: fix possible uninitialized pointer dereference in
            mt7986_wmac_gpio_setup
          - mt76: mt7915: fix possible NULL pointer dereference in
            mt7915_mac_fill_rx_vector
          - mt76: mt7915: do not pass data pointer to mt7915_mcu_muru_debug_set
          - mt76: mt7915: report rx mode value in mt7915_mac_fill_rx_rate
          - mt76: fix antenna config missing in 6G cap
          - mt76: mt7921: fix kernel crash at mt7921_pci_remove
          - mt76: do not attempt to reorder received 802.3 packets without agg session
          - mt76: fix tx status related use-after-free race on station removal
          - mt76: mt7915: fix twt table_mask to u16 in mt7915_dev
          - media: st-delta: Fix PM disable depth imbalance in delta_probe
          - media: atmel: atmel-isc: Fix PM disable depth imbalance in atmel_isc_probe
          - media: i2c: rdacm2x: properly set subdev entity function
          - media: exynos4-is: Change clk_disable to clk_disable_unprepare
          - media: pvrusb2: fix array-index-out-of-bounds in pvr2_i2c_core_init
          - media: make RADIO_ADAPTERS tristate
          - media: vsp1: Fix offset calculation for plane cropping
          - media: atmel: atmel-sama5d2-isc: fix wrong mask in YUYV format check
          - media: hantro: HEVC: Fix tile info buffer value computation
          - Bluetooth: mt7921s: Fix the incorrect pointer check
          - Bluetooth: fix dangling sco_conn and use-after-free in sco_sock_timeout
          - Bluetooth: use hdev lock in activate_scan for hci_is_adv_monitoring
          - Bluetooth: use hdev lock for accept_list and reject_list in conn req
          - Bluetooth: protect le accept and resolv lists with hdev->lock
          - Bluetooth: btmtksdio: fix use-after-free at btmtksdio_recv_event
          - Bluetooth: btmtksdio: fix possible FW initialization failure
          - Bluetooth: btmtksdio: fix the reset takes too long
          - media: mediatek: vcodec: Fix v4l2 compliance decoder cmd test fail
          - io_uring: avoid io-wq -EAGAIN looping for !IOPOLL
          - io_uring: only wake when the correct events are set
          - irqchip/gic-v3: Ensure pseudo-NMIs have an ISB between ack and handling
          - irqchip/gic-v3: Refactor ISB + EOIR at ack time
          - irqchip/gic-v3: Fix priority mask handling
          - nvme: set dma alignment to dword
          - m68k: math-emu: Fix dependencies of math emulation support
          - net: annotate races around sk->sk_bound_dev_if
          - sctp: read sk->sk_bound_dev_if once in sctp_rcv()
          - net: hinic: add missing destroy_workqueue in hinic_pf_to_mgmt_init
          - ASoC: ti: j721e-evm: Fix refcount leak in j721e_soc_probe_*
          - kselftest/arm64: bti: force static linking
          - media: ov7670: remove ov7670_power_off from ov7670_remove
          - media: i2c: ov2640: Depend on V4L2_ASYNC
          - media: i2c: ov5648: fix wrong pointer passed to IS_ERR() and PTR_ERR()
          - media: rkvdec: h264: Fix dpb_valid implementation
          - media: rkvdec: h264: Fix bit depth wrap in pps packet
          - regulator: scmi: Fix refcount leak in scmi_regulator_probe
          - blk-cgroup: always terminate io.stat lines
          - erofs: fix buffer copy overflow of ztailpacking feature
          - net/mlx5e: Correct the calculation of max channels for rep
          - ext4: reject the 'commit' option on ext2 filesystems
          - drm/msm/dsi: don't powerup at modeset time for parade-ps8640
          - drm/msm/a6xx: Fix refcount leak in a6xx_gpu_init
          - drm: msm: fix possible memory leak in mdp5_crtc_cursor_set()
          - x86/sev: Annotate stack change in the #VC handler
          - drm/msm: don't free the IRQ if it was not requested
          - selftests/bpf: Add missed ima_setup.sh in Makefile
          - drm/msm/dpu: handle pm_runtime_get_sync() errors in bind path
          - drm/i915: Fix CFI violation with show_dynamic_id()
          - thermal/drivers/bcm2711: Don't clamp temperature at zero
          - thermal/drivers/broadcom: Fix potential NULL dereference in
            sr_thermal_probe
          - thermal/core: Fix memory leak in __thermal_cooling_device_register()
          - thermal/drivers/imx_sc_thermal: Fix refcount leak in imx_sc_thermal_probe
          - bfq: Relax waker detection for shared queues
          - bfq: Allow current waker to defend against a tentative one
          - ASoC: codecs: lpass: Fix passing zero to 'PTR_ERR'
          - ASoC: wm2000: fix missing clk_disable_unprepare() on error in
            wm2000_anc_transition()
          - cpuidle: psci: Fix regression leading to no genpd governor
          - cpuidle: riscv-sbi: Fix code to allow a genpd governor to be used
          - platform/x86: intel_cht_int33fe: Set driver data
          - PM: domains: Fix initialization of genpd's next_wakeup
          - net: macb: Fix PTP one step sync support
          - scsi: hisi_sas: Fix rescan after deleting a disk
          - scsi: hisi_sas: Fix memory ordering in hisi_sas_task_deliver()
          - NFC: hci: fix sleep in atomic context bugs in nfc_hci_hcp_message_tx
          - bonding: fix missed rcu protection
          - ASoC: max98090: Move check for invalid values before casting in
            max98090_put_enab_tlv()
          - perf parse-events: Support different format of the topdown event name
          - net: stmmac: fix out-of-bounds access in a selftest
          - amt: fix gateway mode stuck
          - amt: fix memory leak for advertisement message
          - hv_netvsc: Fix potential dereference of NULL pointer
          - hwmon: (dimmtemp) Fix bitmap handling
          - hwmon: (pmbus) Check PEC support before reading other registers
          - rxrpc: Fix locking issue
          - rxrpc: Fix listen() setting the bar too high for the prealloc rings
          - rxrpc: Don't try to resend the request if we're receiving the reply
          - rxrpc: Fix overlapping ACK accounting
          - rxrpc: Don't let ack.previousPacket regress
          - rxrpc: Fix decision on when to generate an IDLE ACK
          - hinic: Avoid some over memory allocation
          - dpaa2-eth: retrieve the virtual address before dma_unmap
          - dpaa2-eth: use the correct software annotation field
          - dpaa2-eth: unmap the SGT buffer before accessing its contents
          - net: dsa: restrict SMSC_LAN9303_I2C kconfig
          - net/smc: postpone sk_refcnt increment in connect()
          - net/smc: fix listen processing for SMC-Rv2
          - dma-direct: don't over-decrypt memory
          - Bluetooth: hci_conn: Fix hci_connect_le_sync
          - Revert "net/smc: fix listen processing for SMC-Rv2"
          - media: lirc: revert removal of unused feature flags
          - arm64: dts: rockchip: Move drive-impedance-ohm to emmc phy on rk3399
          - arm64: dts: mt8192: Fix nor_flash status disable typo
          - PCI/ACPI: Allow D3 only if Root Port can signal and wake from D3
          - memory: samsung: exynos5422-dmc: Avoid some over memory allocation
          - ARM: dts: BCM5301X: Update pin controller node name
          - ARM: dts: suniv: F1C100: fix watchdog compatible
          - soc: qcom: smp2p: Fix missing of_node_put() in smp2p_parse_ipc
          - soc: qcom: smsm: Fix missing of_node_put() in smsm_parse_ipc
          - arm64: defconfig: reenable SM_DISPCC_8250
          - PCI: cadence: Fix find_first_zero_bit() limit
          - PCI: rockchip: Fix find_first_zero_bit() limit
          - PCI: mediatek: Fix refcount leak in mtk_pcie_subsys_powerup()
          - PCI: dwc: Fix setting error return on MSI DMA mapping failure
          - ARM: dts: ci4x10: Adapt to changes in imx6qdl.dtsi regarding fec clocks
          - arm64: dts: qcom: sc7280: Fix sar1_irq_odl node name
          - arm64: dts: qcom: sc7280-herobrine: Drop outputs on fpmcu pins
          - soc: qcom: llcc: Add MODULE_DEVICE_TABLE()
          - cxl/pci: Add debug for DVSEC range init failures
          - cxl/pci: Make cxl_dvsec_ranges() failure not fatal to cxl_pci
          - KVM: nVMX: Leave most VM-Exit info fields unmodified on failed VM-Entry
          - KVM: nVMX: Clear IDT vectoring on nested VM-Exit for double/triple fault
          - arm64: dts: juno: Fix SCMI power domain IDs for ETF and CS funnel
          - crypto: qat - set CIPHER capability for DH895XCC
          - crypto: qat - set COMPRESSION capability for DH895XCC
          - platform/chrome: cros_ec: fix error handling in cros_ec_register()
          - ARM: dts: imx6dl-colibri: Fix I2C pinmuxing
          - platform/chrome: Re-introduce cros_ec_cmd_xfer and use it for ioctls
          - can: xilinx_can: mark bit timing constants as const
          - ARM: dts: stm32: Fix PHY post-reset delay on Avenger96
          - dt-bindings: soc: qcom: smd-rpm: Fix missing MSM8936 compatible
          - ARM: dts: qcom: sdx55: remove wrong unit address from RPMH RSC clocks
          - arm64: dts: qcom: sm8450: Fix missing iommus for qup
          - arm64: dts: qcom: sm8450: Fix missing iommus for qup1
          - ARM: dts: bcm2835-rpi-zero-w: Fix GPIO line name for Wifi/BT
          - ARM: dts: bcm2837-rpi-cm3-io3: Fix GPIO line names for SMPS I2C
          - ARM: dts: bcm2837-rpi-3-b-plus: Fix GPIO line name of power LED
          - ARM: dts: bcm2835-rpi-b: Fix GPIO line names
          - misc: ocxl: fix possible double free in ocxl_file_register_afu
          - hwrng: cn10k - Optimize cn10k_rng_read()
          - hwrng: cn10k - Make check_rng_health() return an error code
          - crypto: marvell/cesa - ECB does not IV
          - gpiolib: of: Introduce hook for missing gpio-ranges
          - pinctrl: bcm2835: implement hook for missing gpio-ranges
          - drm/msm: simplify gpu_busy callback
          - drm/msm: return the average load over the polling period
          - arm: mediatek: select arch timer for mt7629
          - pinctrl/rockchip: support deferring other gpio params
          - pinctrl: mediatek: mt8195: enable driver on mtk platforms
          - arm64: dts: qcom: qrb5165-rb5: Fix can-clock node name
          - Drivers: hv: vmbus: Fix handling of messages with transaction ID of zero
          - powerpc/fadump: fix PT_LOAD segment for boot memory area
          - mfd: ipaq-micro: Fix error check return value of platform_get_irq()
          - scsi: fcoe: Fix Wstringop-overflow warnings in fcoe_wwn_from_mac()
          - soc: bcm: Check for NULL return of devm_kzalloc()
          - arm64: dts: ti: k3-am64-mcu: remove incorrect UART base clock rates
          - ASoC: sh: rz-ssi: Propagate error codes returned from
            platform_get_irq_byname()
          - ASoC: sh: rz-ssi: Release the DMA channels in rz_ssi_probe() error path
          - firmware: arm_scmi: Fix list protocols enumeration in the base protocol
          - nvdimm: Fix firmware activation deadlock scenarios
          - nvdimm: Allow overwrite in the presence of disabled dimms
          - pinctrl: mvebu: Fix irq_of_parse_and_map() return value
          - crypto: ccp - Fix the INIT_EX data file open failure
          - drivers/base/node.c: fix compaction sysfs file leak
          - dax: fix cache flush on PMD-mapped pages
          - drivers/base/memory: fix an unlikely reference counting issue in
            __add_memory_block()
          - firmware: arm_ffa: Fix uuid parameter to ffa_partition_probe
          - firmware: arm_ffa: Remove incorrect assignment of driver_data
          - ocfs2: fix mounting crash if journal is not alloced
          - list: fix a data-race around ep->rdllist
          - drm/msm/dpu: fix error check return value of irq_of_parse_and_map()
          - powerpc/8xx: export 'cpm_setbrg' for modules
          - pinctrl: renesas: r8a779a0: Fix GPIO function on I2C-capable pins
          - pinctrl: renesas: r8a779f0: Fix GPIO function on I2C-capable pins
          - pinctrl: renesas: core: Fix possible null-ptr-deref in
            sh_pfc_map_resources()
          - powerpc/idle: Fix return value of __setup() handler
          - powerpc/4xx/cpm: Fix return value of __setup() handler
          - RDMA/hns: Add the detection for CMDQ status in the device initialization
            process
          - arm64: dts: marvell: espressobin-ultra: fix SPI-NOR config
          - arm64: dts: marvell: espressobin-ultra: enable front USB3 port
          - ASoC: atmel-pdmic: Remove endianness flag on pdmic component
          - ASoC: atmel-classd: Remove endianness flag on class d component
          - proc: fix dentry/inode overinstantiating under /proc/${pid}/net
          - ipc/mqueue: use get_tree_nodev() in mqueue_get_tree()
          - PCI: imx6: Fix PERST# start-up sequence
          - PCI: mediatek-gen3: Assert resets to ensure expected init state
          - module.h: simplify MODULE_IMPORT_NS
          - module: fix [e_shstrndx].sh_size=0 OOB access
          - tty: fix deadlock caused by calling printk() under tty_port->lock
          - crypto: sun8i-ss - rework handling of IV
          - crypto: sun8i-ss - handle zero sized sg
          - crypto: cryptd - Protect per-CPU resource by disabling BH.
          - ARM: dts: at91: sama7g5: remove interrupt-parent from gic node
          - ARM: dts: lan966x: swap dma channels for crypto node
          - hugetlbfs: fix hugetlbfs_statfs() locking
          - x86/mce: relocate set{clear}_mce_nospec() functions
          - mce: fix set_mce_nospec to always unmap the whole page
          - Input: sparcspkr - fix refcount leak in bbc_beep_probe
          - PCI/AER: Clear MULTI_ERR_COR/UNCOR_RCV bits
          - KVM: PPC: Book3S HV: Fix vcore_blocked tracepoint
          - PCI: microchip: Fix potential race in interrupt handling
          - cxl/mem: Drop mem_enabled check from wait_for_media()
          - hwrng: omap3-rom - fix using wrong clk_disable() in
            omap_rom_rng_runtime_resume()
          - perf evlist: Keep topdown counters in weak group
          - perf stat: Always keep perf metrics topdown events in a group
          - mailbox: pcc: Fix an invalid-load caught by the address sanitizer
          - powerpc/64: Only WARN if __pa()/__va() called with bad addresses
          - powerpc/powernv: Get L1D flush requirements from device-tree
          - powerpc/powernv: Get STF barrier requirements from device-tree
          - powerpc/perf: Fix the threshold compare group constraint for power10
          - powerpc/perf: Fix the threshold compare group constraint for power9
          - macintosh: via-pmu and via-cuda need RTC_LIB
          - powerpc/xive: Fix refcount leak in xive_spapr_init
          - powerpc/fsl_rio: Fix refcount leak in fsl_rio_setup
          - powerpc/papr_scm: Fix leaking nvdimm_events_map elements
          - powerpc/fsl_book3e: Don't set rodata RO too early
          - gpio: sim: Use correct order for the parameters of devm_kcalloc()
          - mfd: davinci_voicecodec: Fix possible null-ptr-deref davinci_vc_probe()
          - nfsd: destroy percpu stats counters after reply cache shutdown
          - mailbox: forward the hrtimer if not queued and under a lock
          - RDMA/rxe: Fix an error handling path in rxe_get_mcg()
          - RDMA/hfi1: Prevent use of lock before it is initialized
          - pinctrl: apple: Use a raw spinlock for the regmap
          - KVM: LAPIC: Drop pending LAPIC timer injection when canceling the timer
          - Input: stmfts - do not leave device disabled in stmfts_input_open
          - OPP: call of_node_put() on error path in _bandwidth_supported()
          - dmaengine: ti: k3-psil-am62: Update PSIL thread for saul.
          - f2fs: fix to do sanity check on inline_dots inode
          - f2fs: fix dereference of stale list iterator after loop body
          - riscv: Fixup difference with defconfig
          - iommu/amd: Enable swiotlb in all cases
          - iommu/amd: Do not call sleep while holding spinlock
          - iommu/mediatek: Fix 2 HW sharing pgtable issue
          - iommu/mediatek: Add list_del in mtk_iommu_remove
          - iommu/mediatek: Remove clk_disable in mtk_iommu_remove
          - iommu/mediatek: Add mutex for m4u_group and m4u_dom in data
          - i2c: at91: use dma safe buffers
          - cpufreq: mediatek: Use module_init and add module_exit
          - cpufreq: mediatek: Unregister platform device on exit
          - iommu/arm-smmu-v3-sva: Fix mm use-after-free
          - MIPS: Loongson: Use hwmon_device_register_with_groups() to register hwmon
          - iommu/mediatek: Fix NULL pointer dereference when printing dev_name
          - i2c: at91: Initialize dma_buf in at91_twi_xfer()
          - dmaengine: idxd: Fix the error handling path in idxd_cdev_register()
          - NFS: Do not report EINTR/ERESTARTSYS as mapping errors
          - NFS: fsync() should report filesystem errors over EINTR/ERESTARTSYS
          - NFS: Don't report ENOSPC write errors twice
          - NFS: Do not report flush errors in nfs_write_end()
          - NFS: Don't report errors from nfs_pageio_complete() more than once
          - NFSv4/pNFS: Do not fail I/O when we fail to allocate the pNFS layout
          - NFS: Further fixes to the writeback error handling
          - NFS: Pass i_size to fscache_unuse_cookie() when a file is released
          - video: fbdev: clcdfb: Fix refcount leak in clcdfb_of_vram_setup
          - dmaengine: stm32-mdma: remove GISR1 register
          - dmaengine: stm32-mdma: fix chan initialization in stm32_mdma_irq_handler()
          - iommu/amd: Increase timeout waiting for GA log enablement
          - i2c: npcm: Fix timeout calculation
          - i2c: npcm: Correct register access width
          - i2c: npcm: Handle spurious interrupts
          - i2c: rcar: fix PM ref counts in probe error paths
          - tracing: Reset the function filter after completing trampoline/graph
            selftest
          - RISC-V: Split out the XIP fixups into their own file
          - RISC-V: Fix the XIP build
          - MIPS: RALINK: Define pci_remap_iospace under CONFIG_PCI_DRIVERS_GENERIC
          - perf build: Fix btf__load_from_kernel_by_id() feature check
          - perf c2c: Use stdio interface if slang is not supported
          - rtla: Avoid record NULL pointer dereference
          - rtla: Don't overwrite existing directory mode
          - rtla: Minor grammar fix for rtla README
          - rtla: Fix __set_sched_attr error message
          - rtla: Remove procps-ng dependency
          - tracing/timerlat: Notify IRQ new max latency only if stop tracing is set
          - perf jevents: Fix event syntax error caused by ExtSel
          - video: fbdev: vesafb: Fix a use-after-free due early fb_info cleanup
          - NFSv4: Fix free of uninitialized nfs4_label on referral lookup.
          - NFSv4.1 mark qualified async operations as MOVEABLE tasks
          - f2fs: fix to avoid f2fs_bug_on() in dec_valid_node_count()
          - f2fs: fix to do sanity check on block address in f2fs_do_zero_range()
          - f2fs: fix to clear dirty inode in f2fs_evict_inode()
          - f2fs: fix deadloop in foreground GC
          - f2fs: don't need inode lock for system hidden quota
          - f2fs: fix to do sanity check on total_data_blocks
          - f2fs: don't use casefolded comparison for "." and ".."
          - f2fs: fix fallocate to use file_modified to update permissions
            consistently
          - f2fs: fix to do sanity check for inline inode
          - objtool: Fix objtool regression on x32 systems
          - objtool: Fix symbol creation
          - wifi: mac80211: fix use-after-free in chanctx code
          - iwlwifi: fw: init SAR GEO table only if data is present
          - iwlwifi: mvm: fix assert 1F04 upon reconfig
          - iwlwifi: mei: clear the sap data header before sending
          - iwlwifi: mei: fix potential NULL-ptr deref
          - ipmi:ipmb: Fix refcount leak in ipmi_ipmb_probe
          - fs-writeback: writeback_sb_inodes:Recalculate 'wrote' according skipped
            pages
          - efi: Do not import certificates from UEFI Secure Boot for T2 Macs
          - bfq: Avoid false marking of bic as stably merged
          - bfq: Avoid merging queues with different parents
          - bfq: Split shared queues on move between cgroups
          - bfq: Update cgroup information before merging bio
          - bfq: Drop pointless unlock-lock pair
          - bfq: Remove pointless bfq_init_rq() calls
          - bfq: Track whether bfq_group is still online
          - bfq: Get rid of __bio_blkcg() usage
          - bfq: Make sure bfqg for which we are queueing requests is online
          - ext4: mark group as trimmed only if it was fully scanned
          - ext4: fix use-after-free in ext4_rename_dir_prepare
          - ext4: fix journal_ioprio mount option handling
          - ext4: fix race condition between ext4_write and ext4_convert_inline_data
          - ext4: fix warning in ext4_handle_inode_extension
          - ext4: fix memory leak in parse_apply_sb_mount_options()
          - ext4: fix bug_on in ext4_writepages
          - ext4: filter out EXT4_FC_REPLAY from on-disk superblock field s_state
          - ext4: fix bug_on in __es_tree_search
          - ext4: verify dir block before splitting it
          - ext4: avoid cycles in directory h-tree
          - ACPI: property: Release subnode properties with data nodes
          - tty: goldfish: Introduce gf_ioread32()/gf_iowrite32()
          - tracing: Have event format check not flag %p* on __get_dynamic_array()
          - tracing: Fix potential double free in create_var_ref()
          - tracing: Fix return value of trace_pid_write()
          - tracing: Initialize integer variable to prevent garbage return value
          - drm/amdgpu: add beige goby PCI ID
          - PCI/PM: Fix bridge_d3_blacklist[] Elo i2 overwrite of Gigabyte X299
          - PCI: qcom: Fix pipe clock imbalance
          - PCI: qcom: Fix runtime PM imbalance on probe errors
          - PCI: qcom: Fix unbalanced PHY init on probe errors
          - staging: r8188eu: prevent ->Ssid overflow in rtw_wx_set_scan()
          - block: Fix potential deadlock in blk_ia_range_sysfs_show()
          - mm, compaction: fast_find_migrateblock() should return pfn in the target
            zone
          - s390/perf: obtain sie_block from the right address
          - s390/stp: clock_delta should be signed
          - dlm: fix plock invalid read
          - dlm: uninitialized variable on error in dlm_listen_for_all()
          - dlm: fix wake_up() calls for pending remove
          - dlm: fix missing lkb refcount handling
          - ocfs2: dlmfs: fix error handling of user_dlm_destroy_lock
          - scsi: dc395x: Fix a missing check on list iterator
          - scsi: ufs: qcom: Add a readl() to make sure ref_clk gets enabled
          - landlock: Add clang-format exceptions
          - landlock: Format with clang-format
          - selftests/landlock: Add clang-format exceptions
          - selftests/landlock: Normalize array assignment
          - selftests/landlock: Format with clang-format
          - samples/landlock: Add clang-format exceptions
          - samples/landlock: Format with clang-format
          - landlock: Fix landlock_add_rule(2) documentation
          - selftests/landlock: Make tests build with old libc
          - selftests/landlock: Extend tests for minimal valid attribute size
          - selftests/landlock: Add tests for unknown access rights
          - selftests/landlock: Extend access right tests to directories
          - selftests/landlock: Fully test file rename with "remove" access
          - selftests/landlock: Add tests for O_PATH
          - landlock: Change landlock_add_rule(2) argument check ordering
          - landlock: Change landlock_restrict_self(2) check ordering
          - selftests/landlock: Test landlock_create_ruleset(2) argument check
            ordering
          - landlock: Define access_mask_t to enforce a consistent access mask size
          - landlock: Reduce the maximum number of layers to 16
          - landlock: Create find_rule() from unmask_layers()
          - landlock: Fix same-layer rule unions
          - drm/amdgpu/cs: make commands with 0 chunks illegal behaviour.
          - drm/nouveau/subdev/bus: Ratelimit logging for fault errors
          - drm/etnaviv: check for reaped mapping in etnaviv_iommu_unmap_gem
          - drm/nouveau/clk: Fix an incorrect NULL check on list iterator
          - drm/nouveau/kms/nv50-: atom: fix an incorrect NULL check on list iterator
          - drm/bridge: analogix_dp: Grab runtime PM reference for DP-AUX
          - drm/i915/dsi: fix VBT send packet port selection for ICL+
          - md: fix an incorrect NULL check in does_sb_need_changing
          - md: fix an incorrect NULL check in md_reload_sb
          - mtd: cfi_cmdset_0002: Move and rename
            chip_check/chip_ready/chip_good_for_write
          - mtd: cfi_cmdset_0002: Use chip_ready() for write on S29GL064N
          - media: coda: Fix reported H264 profile
          - media: coda: Add more H264 levels for CODA960
          - ima: remove the IMA_TEMPLATE Kconfig option
          - Kconfig: Add option for asm goto w/ tied outputs to workaround clang-13
            bug
          - lib/string_helpers: fix not adding strarray to device's resource list
          - RDMA/hfi1: Fix potential integer multiplication overflow errors
          - mmc: core: Allows to override the timeout value for ioctl() path
          - csky: patch_text: Fixup last cpu should be master
          - irqchip/armada-370-xp: Do not touch Performance Counter Overflow on A375,
            A38x, A39x
          - irqchip: irq-xtensa-mx: fix initial IRQ affinity
          - thermal: devfreq_cooling: use local ops instead of global ops
          - mt76: fix use-after-free by removing a non-RCU wcid pointer
          - cfg80211: declare MODULE_FIRMWARE for regulatory.db
          - mac80211: upgrade passive scan to active scan on DFS channels after beacon
            rx
          - um: virtio_uml: Fix broken device handling in time-travel
          - um: Use asm-generic/dma-mapping.h
          - um: chan_user: Fix winch_tramp() return value
          - um: Fix out-of-bounds read in LDT setup
          - MIPS: IP27: Remove incorrect `cpu_has_fpu' override
          - MIPS: IP30: Remove incorrect `cpu_has_fpu' override
          - kexec_file: drop weak attribute from arch_kexec_apply_relocations[_add]
          - ftrace: Clean up hash direct_functions on register failures
          - ksmbd: fix outstanding credits related bugs
          - iommu/msm: Fix an incorrect NULL check on list iterator
          - iommu/dma: Fix iova map result check bug
          - kprobes: Fix build errors with CONFIG_KRETPROBES=n
          - Revert "mm/cma.c: remove redundant cma_mutex lock"
          - mm/page_owner: use strscpy() instead of strlcpy()
          - mm/page_alloc: always attempt to allocate at least one page during bulk
            allocation
          - nodemask.h: fix compilation error with GCC12
          - hugetlb: fix huge_pmd_unshare address update
          - mm/memremap: fix missing call to untrack_pfn() in pagemap_range()
          - xtensa/simdisk: fix proc_read_simdisk()
          - rtl818x: Prevent using not initialized queues
          - ASoC: rt5514: Fix event generation for "DSP Voice Wake Up" control
          - carl9170: tx: fix an incorrect use of list iterator
          - stm: ltdc: fix two incorrect NULL checks on list iterator
          - bcache: improve multithreaded bch_btree_check()
          - bcache: improve multithreaded bch_sectors_dirty_init()
          - bcache: remove incremental dirty sector counting for
            bch_sectors_dirty_init()
          - bcache: avoid journal no-space deadlock by reserving 1 journal bucket
          - serial: pch: don't overwrite xmit->buf[0] by x_char
          - tilcdc: tilcdc_external: fix an incorrect NULL check on list iterator
          - gma500: fix an incorrect NULL check on list iterator
          - arm64: dts: qcom: ipq8074: fix the sleep clock frequency
          - arm64: tegra: Add missing DFLL reset on Tegra210
          - clk: tegra: Add missing reset deassertion
          - phy: qcom-qmp: fix struct clk leak on probe errors
          - ARM: dts: s5pv210: Remove spi-cs-high on panel in Aries
          - ARM: pxa: maybe fix gpio lookup tables
          - ceph: fix decoding of client session messages flags
          - misc: fastrpc: fix list iterator in fastrpc_req_mem_unmap_impl
          - SMB3: EBADF/EIO errors in rename/open caused by race condition in
            smb2_compound_op
          - docs/conf.py: Cope with removal of language=None in Sphinx 5.0.0
          - dt-bindings: gpio: altera: correct interrupt-cells
          - vdpasim: allow to enable a vq repeatedly
          - blk-iolatency: Fix inflight count imbalances and IO hangs on offline
          - coresight: core: Fix coresight device probe failure issue
          - phy: qcom-qmp: fix reset-controller leak on probe errors
          - net: ipa: fix page free in ipa_endpoint_trans_release()
          - net: ipa: fix page free in ipa_endpoint_replenish_one()
          - media: lirc: add missing exceptions for lirc uapi header file
          - kseltest/cgroup: Make test_stress.sh work if run interactively
          - perf evlist: Extend arch_evsel__must_be_in_group to support hybrid systems
          - Revert "random: use static branch for crng_ready()"
          - staging: r8188eu: delete rtw_wx_read/write32()
          - binder: fix sender_euid type in uapi header
          - RDMA/hns: Remove the num_cqc_timer variable
          - RDMA/rxe: Generate a completion for unsupported/invalid opcode
          - ext4: only allow test_dummy_encryption when supported
          - fs: add two trivial lookup helpers
          - exportfs: support idmapped mounts
          - fs/ntfs3: Fix invalid free in log_replay (CVE-2022-1973)
          - md: Don't set mddev private to NULL in raid0 pers->free
          - md: fix double free of io_acct_set bioset
          - md: bcache: check the return value of kzalloc() in
            detached_dev_do_request()
          - macsec: fix UAF bug for real_dev
          - tty: n_gsm: Fix packet data hex dump output
          - pinctrl/rockchip: support setting input-enable param
          - block: fix bio_clone_blkg_association() to associate with proper blkcg_gq
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.18.4
          - pcmcia: db1xxx_ss: restrict to MIPS_DB1XXX boards
          - staging: greybus: codecs: fix type confusion of list iterator variable
          - iio: adc: ad7124: Remove shift from scan_type
          - soundwire: qcom: fix an error message in swrm_wait_for_frame_gen_enabled()
          - remoteproc: mediatek: Fix side effect of mt8195 sram power on
          - remoteproc: mtk_scp: Fix a potential double free
          - lkdtm/bugs: Check for the NULL pointer after calling kmalloc
          - lkdtm/bugs: Don't expect thread termination without CONFIG_UBSAN_TRAP
          - tty: goldfish: Use tty_port_destroy() to destroy port
          - tty: serial: owl: Fix missing clk_disable_unprepare() in owl_uart_probe
          - tty: n_tty: Restore EOF push handling behavior
          - serial: 8250_aspeed_vuart: Fix potential NULL dereference in
            aspeed_vuart_probe
          - tty: serial: fsl_lpuart: fix potential bug when using both of_alias_get_id
            and ida_simple_get
          - remoteproc: imx_rproc: Ignore create mem entry for resource table
          - phy: rockchip-inno-usb2: Fix muxed interrupt support
          - staging: r8188eu: fix struct rt_firmware_hdr
          - usb: usbip: fix a refcount leak in stub_probe()
          - usb: usbip: add missing device lock on tweak configuration cmd
          - USB: storage: karma: fix rio_karma_init return
          - usb: musb: Fix missing of_node_put() in omap2430_probe
          - staging: fieldbus: Fix the error handling path in
            anybuss_host_common_probe()
          - pwm: lp3943: Fix duty calculation in case period was clamped
          - pwm: raspberrypi-poe: Fix endianness in firmware struct
          - rpmsg: qcom_smd: Fix irq_of_parse_and_map() return value
          - usb: dwc3: gadget: Replace list_for_each_entry_safe() if using giveback
          - usb: dwc3: pci: Fix pm_runtime_get_sync() error checking
          - scripts/get_abi: Fix wrong script file name in the help message
          - misc: fastrpc: fix an incorrect NULL check on list iterator
          - firmware: stratix10-svc: fix a missing check on list iterator
          - usb: typec: mux: Check dev_set_name() return value
          - rpmsg: virtio: Fix possible double free in rpmsg_probe()
          - rpmsg: virtio: Fix possible double free in rpmsg_virtio_add_ctrl_dev()
          - rpmsg: virtio: Fix the unregistration of the device rpmsg_ctrl
          - iio: adc: stmpe-adc: Fix wait_for_completion_timeout return value check
          - iio: proximity: vl53l0x: Fix return value check of
            wait_for_completion_timeout
          - iio: adc: sc27xx: fix read big scale voltage not right
          - iio: adc: sc27xx: Fine tune the scale calibration values
          - rpmsg: qcom_smd: Fix returning 0 if irq_of_parse_and_map() fails
          - misc/pvpanic: Convert regular spinlock into trylock on panic path
          - phy: qcom-qmp: fix pipe-clock imbalance on power-on failure
          - power: supply: core: Initialize struct to zero
          - power: supply: axp288_fuel_gauge: Fix battery reporting on the One Mix 1
          - power: supply: axp288_fuel_gauge: Drop BIOS version check from "T3 MRD"
            DMI quirk
          - power: supply: ab8500_fg: Allocate wq in probe
          - serial: sifive: Report actual baud base rather than fixed 115200
          - export: fix string handling of namespace in EXPORT_SYMBOL_NS
          - watchdog: rzg2l_wdt: Fix 32bit overflow issue
          - watchdog: rzg2l_wdt: Fix Runtime PM usage
          - watchdog: rzg2l_wdt: Fix 'BUG: Invalid wait context'
          - watchdog: rzg2l_wdt: Fix reset control imbalance
          - soundwire: intel: prevent pm_runtime resume prior to system suspend
          - soundwire: qcom: return error when pm_runtime_get_sync fails
          - coresight: cpu-debug: Replace mutex with mutex_trylock on panic notifier
          - ksmbd: fix reference count leak in smb_check_perm_dacl()
          - extcon: ptn5150: Add queue work sync before driver release
          - dt-bindings: remoteproc: mediatek: Make l1tcm reg exclusive to mt819x
          - soc: rockchip: Fix refcount leak in rockchip_grf_init
          - clocksource/drivers/riscv: Events are stopped during CPU suspend
          - ARM: dts: aspeed: ast2600-evb: Enable RX delay for MAC0/MAC1
          - rtc: mt6397: check return value after calling platform_get_resource()
          - rtc: ftrtc010: Fix error handling in ftrtc010_rtc_probe
          - staging: r8188eu: add check for kzalloc
          - serial: meson: acquire port->lock in startup()
          - Revert "serial: 8250_mtk: Make sure to select the right FEATURE_SEL"
          - serial: 8250_fintek: Check SER_RS485_RTS_* only with RS485
          - serial: cpm_uart: Fix build error without CONFIG_SERIAL_CPM_CONSOLE
          - serial: uartlite: Fix BRKINT clearing
          - serial: digicolor-usart: Don't allow CS5-6
          - serial: rda-uart: Don't allow CS5-6
          - serial: txx9: Don't allow CS5-6
          - serial: sh-sci: Don't allow CS5-6
          - serial: sifive: Sanitize CSIZE and c_iflag
          - serial: st-asc: Sanitize CSIZE and correct PARENB for CS7
          - serial: stm32-usart: Correct CSIZE, bits, and parity
          - firmware: dmi-sysfs: Fix memory leak in dmi_sysfs_register_handle
          - bus: ti-sysc: Fix warnings for unbind for serial
          - driver: base: fix UAF when driver_attach failed
          - driver core: fix deadlock in __device_attach
          - watchdog: rti-wdt: Fix pm_runtime_get_sync() error checking
          - watchdog: ts4800_wdt: Fix refcount leak in ts4800_wdt_probe
          - blk-mq: don't touch ->tagset in blk_mq_get_sq_hctx
          - ASoC: fsl_sai: Fix FSL_SAI_xDR/xFR definition
          - scsi: sd: Don't call blk_cleanup_disk() in sd_probe()
          - clocksource/drivers/oxnas-rps: Fix irq_of_parse_and_map() return value
          - s390/crypto: fix scatterwalk_unmap() callers in AES-GCM
          - amt: fix return value of amt_update_handler()
          - amt: fix possible memory leak in amt_rcv()
          - net: ethernet: ti: am65-cpsw: Fix fwnode passed to phylink_create()
          - net/smc: set ini->smcrv2.ib_dev_v2 to NULL if SMC-Rv2 is unavailable
          - spi: fsi: Fix spurious timeout
          - drm/amdgpu: Off by one in dm_dmub_outbox1_low_irq()
          - net: lan966x: check devm_of_phy_get() for -EDEFER_PROBE
          - net: sched: fixed barrier to prevent skbuff sticking in qdisc backlog
          - net: ethernet: mtk_eth_soc: out of bounds read in
            mtk_hwlro_get_fdir_entry()
          - net: ethernet: ti: am65-cpsw-nuss: Fix some refcount leaks
          - net: dsa: mv88e6xxx: Fix refcount leak in mv88e6xxx_mdios_register
          - modpost: fix removing numeric suffixes
          - ep93xx: clock: Do not return the address of the freed memory
          - jffs2: fix memory leak in jffs2_do_fill_super
          - ubi: fastmap: Fix high cpu usage of ubi_bgt by making sure wl_pool not
            empty
          - ubi: ubi_create_volume: Fix use-after-free when volume creation failed
          - selftests/bpf: fix stacktrace_build_id with missing kprobe/urandom_read
          - bpf: Fix probe read error in ___bpf_prog_run()
          - block: take destination bvec offsets into account in bio_copy_data_iter
          - nbd: don't clear 'NBD_CMD_INFLIGHT' flag if request is not completed
          - nbd: fix possible overflow on 'first_minor' in nbd_dev_add()
          - riscv: read-only pages should not be writable
          - net/smc: fixes for converting from "struct smc_cdc_tx_pend **" to "struct
            smc_wr_tx_pend_priv *"
          - tcp: add accessors to read/set tp->snd_cwnd
          - nfp: only report pause frame configuration for physical device
          - block: use bio_queue_enter instead of blk_queue_enter in bio_poll
          - bonding: NS target should accept link local address
          - sfc: fix considering that all channels have TX queues
          - sfc: fix wrong tx channel offset with efx_separate_tx_channels
          - block: make bioset_exit() fully resilient against being called twice
          - sched/autogroup: Fix sysctl move
          - blk-mq: do not update io_ticks with passthrough requests
          - net: phy: at803x: disable WOL at probe
          - bonding: show NS IPv6 targets in proc master info
          - erofs: fix 'backmost' member of z_erofs_decompress_frontend
          - vdpa: Fix error logic in vdpa_nl_cmd_dev_get_doit
          - virtio: pci: Fix an error handling path in vp_modern_probe()
          - net/mlx5: Don't use already freed action pointer
          - net/mlx5e: TC NIC mode, fix tc chains miss table
          - net/mlx5: CT: Fix header-rewrite re-use for tupels
          - net/mlx5e: Disable softirq in mlx5e_activate_rq to avoid race condition
          - net/mlx5: correct ECE offset in query qp output
          - net/mlx5e: Update netdev features after changing XDP state
          - net: sched: add barrier to fix packet stuck problem for lockless qdisc
          - tcp: tcp_rtx_synack() can be called from process context
          - vdpa: ifcvf: set pci driver data in probe
          - bonding: guard ns_targets by CONFIG_IPV6
          - octeontx2-af: fix error code in is_valid_offset()
          - s390/mcck: isolate SIE instruction when setting CIF_MCCK_GUEST flag
          - regulator: mt6315-regulator: fix invalid allowed mode
          - net: ping6: Fix ping -6 with interface name
          - net/sched: act_api: fix error code in tcf_ct_flow_table_fill_tuple_ipv6()
          - gpio: pca953x: use the correct register address to do regcache sync
          - afs: Fix infinite loop found by xfstest generic/676
          - drm/msm/dp: Always clear mask bits to disable interrupts at
            dp_ctrl_reset_irq_ctrl()
          - scsi: sd: Fix potential NULL pointer dereference
          - ax25: Fix ax25 session cleanup problems
          - nfp: remove padding in nfp_nfdk_tx_desc
          - tipc: check attribute length for bearer name
          - driver core: Fix wait_for_device_probe() & deferred_probe_timeout
            interaction
          - perf evsel: Fixes topdown events in a weak group for the hybrid platform
          - perf parse-events: Move slots event for the hybrid platform too
          - perf record: Support sample-read topdown metric group for hybrid platforms
          - perf c2c: Fix sorting in percent_rmt_hitm_cmp()
          - Bluetooth: MGMT: Add conditions for setting HCI_CONN_FLAG_REMOTE_WAKEUP
            (Closes: #1012054)
          - Bluetooth: hci_sync: Fix attempting to suspend with unfiltered passive
            scan (Closes: #1012054)
          - bluetooth: don't use bitmaps for random flag accesses
          - dmaengine: idxd: set DMA_INTERRUPT cap bit
          - mips: cpc: Fix refcount leak in mips_cpc_default_phys_base
          - bootconfig: Make the bootconfig.o as a normal object file
          - tracing: Make tp_printk work on syscall tracepoints
          - tracing: Fix sleeping function called from invalid context on RT kernel
          - tracing: Avoid adding tracer option before update_tracer_options
          - i2c: mediatek: Optimize master_xfer() and avoid circular locking
          - iommu/arm-smmu: fix possible null-ptr-deref in arm_smmu_device_probe()
          - iommu/arm-smmu-v3: check return value after calling
            platform_get_resource()
          - f2fs: remove WARN_ON in f2fs_is_valid_blkaddr
          - f2fs: avoid infinite loop to flush node pages
          - i2c: cadence: Increase timeout per message if necessary
          - m68knommu: set ZERO_PAGE() to the allocated zeroed page
          - m68knommu: fix undefined reference to `_init_sp'
          - dmaengine: zynqmp_dma: In struct zynqmp_dma_chan fix desc_size data type
          - NFSv4: Don't hold the layoutget locks across multiple RPC calls
          - video: fbdev: hyperv_fb: Allow resolutions with size > 64 MB for Gen1
          - video: fbdev: pxa3xx-gcu: release the resources correctly in
            pxa3xx_gcu_probe/remove()
          - RISC-V: use memcpy for kexec_file mode
          - m68knommu: fix undefined reference to `mach_get_rtc_pll'
          - rtla/Makefile: Properly handle dependencies
          - f2fs: fix to tag gcing flag on page during file defragment
          - xprtrdma: treat all calls not a bcall when bc_serv is NULL
          - drm/bridge: ti-sn65dsi83: Handle dsi_lanes == 0 as invalid
          - drm/panfrost: Job should reference MMU not file_priv
          - powerpc/papr_scm: don't requests stats with '0' sized stats buffer
          - netfilter: nat: really support inet nat without l3 address
          - netfilter: nf_tables: use kfree_rcu(ptr, rcu) to release hooks in
            clean_net path
          - netfilter: nf_tables: delete flowtable hooks via transaction list
          - powerpc/kasan: Force thread size increase with KASAN
          - NFSD: Fix potential use-after-free in nfsd_file_put()
          - SUNRPC: Trap RDMA segment overflows
          - netfilter: nf_tables: always initialize flowtable hook list in transaction
          - ata: pata_octeon_cf: Fix refcount leak in octeon_cf_probe
          - netfilter: nf_tables: release new hooks on unsupported flowtable flags
          - netfilter: nf_tables: memleak flow rule from commit path
          - netfilter: nf_tables: bail out early if hardware offload is not supported
          - amt: fix wrong usage of pskb_may_pull()
          - amt: fix possible null-ptr-deref in amt_rcv()
          - amt: fix wrong type string definition
          - net: ethernet: bgmac: Fix refcount leak in bcma_mdio_mii_register
          - xen: unexport __init-annotated xen_xlate_map_ballooned_pages()
          - stmmac: intel: Fix an error handling path in intel_eth_pci_probe()
          - af_unix: Fix a data-race in unix_dgram_peer_wake_me().
          - selftests net: fix bpf build error
          - x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
          - bpf, arm64: Clear prog->jited_len along prog->jited
          - net: dsa: lantiq_gswip: Fix refcount leak in gswip_gphy_fw_list
          - net/mlx4_en: Fix wrong return value on ioctl EEPROM query failure
          - xsk: Fix handling of invalid descriptors in XSK TX batching API
          - drm/amdgpu: fix limiting AV1 to the first instance on VCN3
          - SUNRPC: Fix the calculation of xdr->end in xdr_get_next_encode_buffer()
          - net: mdio: unexport __init-annotated mdio_bus_init()
          - net: xfrm: unexport __init-annotated xfrm4_protocol_init()
          - net: ipv6: unexport __init-annotated seg6_hmac_init()
          - net/mlx5e: CT: Fix cleanup of CT before cleanup of TC ct rules
          - net/mlx5: Lag, filter non compatible devices
          - net/mlx5: Fix mlx5_get_next_dev() peer device matching
          - net/mlx5: Rearm the FW tracer after each tracer event
          - net/mlx5: fs, fail conflicting actions
          - ip_gre: test csum_start instead of transport header
          - net: altera: Fix refcount leak in altera_tse_mdio_create
          - net: dsa: mv88e6xxx: use BMSR_ANEGCOMPLETE bit for filling an_complete
          - net: dsa: realtek: rtl8365mb: fix GMII caps for ports with internal PHY
          - tcp: use alloc_large_system_hash() to allocate table_perturb
          - drm: imx: fix compiler warning with gcc-12
          - nfp: flower: restructure flow-key for gre+vlan combination
          - net: seg6: fix seg6_lookup_any_nexthop() to handle VRFs using flowi_l3mdev
          - iov_iter: Fix iter_xarray_get_pages{,_alloc}()
          - iio: dummy: iio_simple_dummy: check the return value of kstrdup()
          - staging: rtl8712: fix a potential memory leak in r871xu_drv_init()
          - iio: st_sensors: Add a local lock for protecting odr
          - lkdtm/usercopy: Expand size of "out of frame" object
          - drivers: staging: rtl8723bs: Fix deadlock in
            rtw_surveydone_event_callback()
          - drivers: staging: rtl8192bs: Fix deadlock in rtw_joinbss_event_prehandle()
          - drivers: staging: rtl8192eu: Fix deadlock in rtw_joinbss_event_prehandle
          - tty: synclink_gt: Fix null-pointer-dereference in slgt_clean()
          - tty: Fix a possible resource leak in icom_probe
          - thunderbolt: Use different lane for second DisplayPort tunnel
          - drivers: staging: rtl8192u: Fix deadlock in ieee80211_beacons_stop()
          - drivers: staging: rtl8192e: Fix deadlock in rtllib_beacons_stop()
          - USB: host: isp116x: check return value after calling
            platform_get_resource()
          - drivers: tty: serial: Fix deadlock in sa1100_set_termios()
          - drivers: usb: host: Fix deadlock in oxu_bus_suspend()
          - USB: hcd-pci: Fully suspend across freeze/thaw cycle
          - char: xillybus: fix a refcount leak in cleanup_dev()
          - sysrq: do not omit current cpu when showing backtrace of all active CPUs
          - usb: dwc2: gadget: don't reset gadget's driver->bus
          - usb: dwc3: host: Stop setting the ACPI companion
          - usb: dwc3: gadget: Only End Transfer for ep0 data phase
          - soundwire: qcom: adjust autoenumeration timeout
          - misc: rtsx: set NULL intfdata when probe fails
          - extcon: Fix extcon_get_extcon_dev() error handling
          - extcon: Modify extcon device to be created after driver data is set
          - clocksource/drivers/sp804: Avoid error on multiple instances
          - staging: rtl8712: fix uninit-value in usb_read8() and friends
          - staging: rtl8712: fix uninit-value in r871xu_drv_init()
          - serial: msm_serial: disable interrupts in __msm_console_write()
          - kernfs: Separate kernfs_pr_cont_buf and rename_lock.
          - watchdog: wdat_wdt: Stop watchdog when rebooting the system
          - ksmbd: smbd: fix connection dropped issue
          - md: protect md_unregister_thread from reentrancy
          - ASoC: SOF: amd: Fixed Build error
          - scsi: myrb: Fix up null pointer access on myrb_cleanup()
          - ASoC: rt5640: Do not manipulate pin "Platform Clock" if the "Platform
            Clock" is not in the DAPM
          - Revert "net: af_key: add check for pfkey_broadcast in function
            pfkey_process"
          - ceph: allow ceph.dir.rctime xattr to be updatable
          - ceph: flush the mdlog for filesystem sync
          - ceph: fix possible deadlock when holding Fwb to get inline_data
          - net, neigh: Set lower cap for neigh_managed_work rearming
          - drm/amd/display: Check if modulo is 0 before dividing.
          - drm/amd/display: Check zero planes for OTG disable W/A on clock change
          - drm/radeon: fix a possible null pointer dereference
          - drm/amd/pm: fix a potential gpu_metrics_table memory leak
          - drm/amd/pm: Fix missing thermal throttler status
          - drm/amd/pm: correct the metrics version for SMU 11.0.11/12/13
          - um: line: Use separate IRQs per line
          - modpost: fix undefined behavior of is_arm_mapping_symbol()
          - objtool: Mark __ubsan_handle_builtin_unreachable() as noreturn
          - x86/cpu: Elide KCSAN for cpu_has() and friends
          - jump_label,noinstr: Avoid instrumentation for JUMP_LABEL=n builds
          - nbd: call genl_unregister_family() first in nbd_cleanup()
          - nbd: fix race between nbd_alloc_config() and module removal
          - nbd: fix io hung while disconnecting device
          - Revert "PCI: brcmstb: Do not turn off WOL regulators on suspend"
          - Revert "PCI: brcmstb: Add control of subdevice voltage regulators"
          - Revert "PCI: brcmstb: Add mechanism to turn on subdev regulators"
          - Revert "PCI: brcmstb: Split brcm_pcie_setup() into two funcs"
          - cifs: fix potential deadlock in direct reclaim
          - s390/gmap: voluntarily schedule during key setting
          - cifs: version operations for smb20 unneeded when legacy support disabled
          - drm/amd/pm: use bitmap_{from,to}_arr32 where appropriate
          - nodemask: Fix return values to be unsigned
          - scsi: lpfc: Correct BDE type for XMIT_SEQ64_WQE in lpfc_ct_reject_event()
          - vringh: Fix loop descriptors check in the indirect cases
          - platform/x86: barco-p50-gpio: Add check for platform_driver_register
          - scripts/gdb: change kernel config dumping method
          - platform/x86: hp-wmi: Resolve WMI query failures on some devices
          - platform/x86: hp-wmi: Use zero insize parameter only when supported
          - ALSA: usb-audio: Skip generic sync EP parse for secondary EP
          - ALSA: usb-audio: Set up (implicit) sync for Saffire 6
          - ALSA: hda/conexant - Fix loopback issue with CX20632
          - ALSA: hda/realtek: Fix for quirk to enable speaker output on the Lenovo
            Yoga DuetITL 2021
          - ALSA: hda/realtek: Add quirk for HP Dev One
          - cifs: return errors during session setup during reconnects
          - cifs: fix reconnect on smb3 mount types
          - cifs: populate empty hostnames for extra channels
          - scsi: sd: Fix interpretation of VPD B9h length
          - scsi: lpfc: Resolve some cleanup issues following abort path refactoring
          - scsi: lpfc: Resolve some cleanup issues following SLI path refactoring
          - scsi: lpfc: Address NULL pointer dereference after starget_to_rport()
          - KVM: x86/mmu: Check every prev_roots in __kvm_mmu_free_obsolete_roots()
          - KVM: SVM: fix tsc scaling cache logic
          - filemap: Cache the value of vm_flags
          - KEYS: trusted: tpm2: Fix migratable logic
          - libata: fix reading concurrent positioning ranges log
          - libata: fix translation of concurrent positioning ranges
          - ata: libata-transport: fix {dma|pio|xfer}_mode sysfs files
          - mmc: sdhci-pci-gli: Fix GL9763E runtime PM when the system resumes from
            suspend
          - mmc: block: Fix CQE recovery reset success
          - net: phy: dp83867: retrigger SGMII AN when link change
          - net: openvswitch: fix misuse of the cached connection on tuple changes
          - writeback: Fix inode->i_io_list not be protected by inode->i_lock error
          - nfc: st21nfca: fix incorrect validating logic in EVT_TRANSACTION
          - nfc: st21nfca: fix memory leaks in EVT_TRANSACTION handling
          - nfc: st21nfca: fix incorrect sizing calculations in EVT_TRANSACTION
          - ixgbe: fix bcast packets Rx on VF after promisc removal
          - ixgbe: fix unexpected VLAN Rx in promisc mode on VF
          - Input: bcm5974 - set missing URB_NO_TRANSFER_DMA_MAP urb flag
            (Closes: #1012655)
          - vduse: Fix NULL pointer dereference on sysfs access
          - cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE
          - mm/huge_memory: Fix xarray node memory leak
          - powerpc: Don't select HAVE_IRQ_EXIT_ON_IRQ_STACK
          - drm/amdkfd:Fix fw version for 10.3.6
          - drm/bridge: analogix_dp: Support PSR-exit to disable transition
          - drm/atomic: Force bridge self-refresh-exit on CRTC switch
          - drm/amdgpu/jpeg2: Add jpeg vmid update under IB submit
          - drm/amd/display: remove stale config guards
          - drm/amdgpu: update VCN codec support for Yellow Carp
          - virtio-rng: make device ready before making request
          - powerpc/32: Fix overread/overwrite of thread_struct via ptrace
            (CVE-2022-32981)
          - random: avoid checking crng_ready() twice in random_init()
          - random: mark bootloader randomness code as __init
          - random: account for arch randomness in bits
          - md/raid0: Ignore RAID0 layout if the second zone has only one device
          - zonefs: fix handling of explicit_open option on mount
          - iov_iter: fix build issue due to possible type mis-match
          - dmaengine: idxd: add missing callback function to support DMA_INTERRUPT
          - tcp: fix tcp_mtup_probe_success vs wrong snd_cwnd
          - net/mlx5: E-Switch, pair only capable devices
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.18.5
          - Documentation: Add documentation for Processor MMIO Stale Data
          - x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug
          - x86/speculation: Add a common function for MD_CLEAR mitigation update
          - x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data
          - x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations
          - x86/speculation/mmio: Enable CPU Fill buffer clearing on idle
          - x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data
          - x86/speculation/srbds: Update SRBDS mitigation selection
          - x86/speculation/mmio: Reuse SRBDS mitigation for SBDS
          - KVM: x86/speculation: Disable Fill buffer clear within guests
          - x86/speculation/mmio: Print SMT warning
      .
        [ Ben Hutchings ]
        * d/rules: Fix maintainerclean rule to not remove linux-perf files
        * d/watch: Fix typo in gitmode option
      .
        [ Vincent Blut ]
        * [arm64] drivers/gpu/drm/sun4i: Enable DRM_SUN6I_DSI as module
          (Closes: #1012288)
        * sound/pci/hda: Enable SND_HDA_SCODEC_CS35L41_I2C and
          SND_HDA_SCODEC_CS35L41_SPI as modules (Closes: #1012794)
        * [armhf] drivers/crypto: Enable CRYPTO_DEV_OMAP as module (Closes: #1012880)
      .
        [ Salvatore Bonaccorso ]
        * Bump ABI to 2
        * Drop "sign-file: Convert API usage to support OpenSSL v3"
        * io_uring: reinstate the inflight tracking (CVE-2022-1976)
      f5e8af08
    • Lorenzo "Palinuro" Faletra's avatar
      c0138743
  4. 23 Jun, 2022 1 commit
  5. 21 Jun, 2022 2 commits
    • Ben Hutchings's avatar
      Import Debian changes 5.18.2-1~bpo11+1 · 062d5aad
      Ben Hutchings authored and Lorenzo "Palinuro" Faletra's avatar Lorenzo "Palinuro" Faletra committed
      linux (5.18.2-1~bpo11+1) bullseye-backports; urgency=medium
      .
        * Rebuild for bullseye-backports:
          - Change ABI number to 0.bpo.1
      .
      linux (5.18.2-1) unstable; urgency=medium
      .
        * New upstream stable update:
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.18.1
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.18.2
          - netfilter: nf_tables: disallow non-stateful expression in sets earlier
            (CVE-2022-1966)
          - pipe: Fix missing lock in pipe_resize_ring() (ZDI-CAN-17291)
          - netfilter: nf_tables: sanitize nft_set_desc_concat_parse() (CVE-2022-1972)
          - [x86] fpu: KVM: Set the base guest FPU uABI size to sizeof(struct
            kvm_xsave) (Closes: #1011168)
          - KVM: x86: avoid calling x86 emulator without a decoded instruction
            (CVE-2022-1852)
      .
        [ Diederik de Haas ]
        * [arm64,armel.marvell] Remove duplicate MTD_SPI_NOR config option
        * [arm64] Remove duplicate CAN_MCP251X config option
        * drivers/net/can/spi: Enable CAN_HI311X as module (Closes: #927252)
      .
        [ Henning Schild ]
        * [x86] drivers/platform/x86: Enable SIEMENS_SIMATIC_IPC as module
        * [x86] drivers/leds: Enable LEDS_SIEMENS_SIMATIC_IPC as module
        * [x86] drivers/wdt: Enable SIEMENS_SIMATIC_IPC_WDT as module
      .
        [ Lubomir Rintel ]
        * [x86] Enable X86_ANDROID_TABLETS as a module
      .
        [ Michal Simek ]
        * [arm64] Enable Xilinx PHY driver and SI5341 clock driver
      .
        [ Zhang Ning ]
        * [arm64] Enable COMMON_CLK_PWM which is needed for some Amlogic SBCs
        * [arm64] Enable Khadas MCU and fan
        * [arm64] cpufreq: Enable SCPI cpufreq driver
        * [arm64] cpuidle: Enable CONFIG_ARM_PSCI_CPUIDLE
      .
        [ Ben Hutchings ]
        * drivers/firmware: Build ISCSI_IBFT as module on all architectures with
          ACPI. Thanks to Eric Mackay. (Closes: #1008933).
        * intel-iommu: Correct matching of the "intgpu_off" option value.
          Thanks to Markus Kolb.
        * random: Enable RANDOM_TRUST_BOOTLOADER. This can be reverted using the
          kernel parameter: random.trust_bootloader=off
      .
        [ Bastian Blank ]
        * [amd64] Enable X86_SGX.
      .
        [ Salvatore Bonaccorso ]
        * block, loop: support partitions without scanning (Closes: #1012298)
        * Set ABI to 1
      .
      linux (5.18-1~exp1) experimental; urgency=medium
      .
        * New upstream release: https://kernelnewbies.org/Linux_5.18
      .
        [ Diederik de Haas ]
        * Rebase patches:
          - Update patches
            - debian/dfsg/vs6624-disable.patch (9958d30f38)
            - debian/version.patch (b8321ed4a4, 03248addad)
        * Change patches:
          - debian/android-enable-building-ashmem-and-binder-as-modules.patch
            Upstream removed ashmem support in 721412ed3d saying
            "The mainline replacement for ashmem is memfd, so remove the legacy code
            from drivers/staging/"
            This seems to partially revert #901492, but there is no anbox-modules in
            the archive, even though the ITP bug was closed.
      .
        [ Ben Hutchings ]
        * Rewrite "module: Avoid ABI changes when debug info is disabled" for 5.18
        * In "firmware: Remove redundant log messages from drivers", adjust some
          filenames
        * In "x86: Make x32 syscall support conditional on a kernel parameter",
          update dependency from X86_X32 to X86_X32_ABI
        * Drop "bpftool: Fix version string in recursive builds" as redundant
        * bpftool: Prepend program version to the package version
        * [s390x] Enable MARCH_Z10 instead of MARCH_Z900, since support for z9 has
          been removed upstream
        * d/config: Update with the help of kconfigeditor2
        * udeb: Move crc64 to crc-modules and make scsi-core-modules depend on that
        * libcpupower1: Update symbols file for 5.18
        * d/copyright: Update filename of extract-cert.c
        * lintian: Add lintian-override to linux-perf for non-issue
        * d/bin/gencontrol.py, d/templates: Stop using templates for linux-perf
        * [rt] Update to 5.18-rt10
      .
      linux (5.17.11-1) unstable; urgency=medium
      .
        * New upstream stable update:
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.17.7
          - [arm64] pci_irq_vector() can't be used in atomic context any longer. This
            conflicts with the usage of this function in nic_mbx_intr_handler(). age
            of this function in nic_mbx_intr_handler().
          - ipmi: When handling send message responses, don't process the message
          - ipmi:ipmi_ipmb: Fix null-ptr-deref in ipmi_unregister_smi()
          - [mips*] Fix CP0 counter erratum detection for R4k CPUs
          - ALSA: hda/realtek: Add quirk for Yoga Duet 7 13ITL6 speakers
          - ALSA: fireworks: fix wrong return count shorter than expected by 4 bytes
          - [arm64] mmc: sdhci-msm: Reset GCC_SDCC_BCR register for SDHC
          - [arm64,armhf] mmc: sunxi-mmc: Fix DMA descriptors allocated above 32 bits
          - mmc: core: Set HS clock speed before sending HS CMD13
          - gpiolib: of: fix bounds check for 'gpio-reserved-ranges'
          - [x86] fpu: Prevent FPU state corruption
          - [x86] KVM: x86/svm: Account for family 17h event renumberings in
            amd_pmc_perf_hw_id
          - [amd64] iommu/vt-d: Calculate mask for non-aligned flushes
          - drm/amdgpu: do not use passthrough mode in Xen dom0
          - Revert "SUNRPC: attempt AF_LOCAL connect on setup"
          - timekeeping: Mark NMI safe time accessors as notrace
          - firewire: fix potential uaf in outbound_phy_packet_callback()
          - firewire: remove check of list iterator against head past the loop body
          - firewire: core: extend card->lock in fw_core_handle_bus_reset
          - net: stmmac: disable Split Header (SPH) for Intel platforms
          - btrfs: sysfs: export the balance paused state of exclusive operation
          - btrfs: force v2 space cache usage for subpage mount
          - btrfs: do not BUG_ON() on failure to update inode when setting xattr
          - btrfs: export a helper for compression hard check
          - btrfs: do not allow compression on nodatacow files
          - btrfs: skip compression property for anything other than files and dirs
          - genirq: Synchronize interrupt thread startup
          - ASoC: da7219: Fix change notifications for tone generator frequency
          - [arm64] ASoC: wm8958: Fix change notifications for DSP controls
          - [arm64,armhf] ASoC: meson: Fix event generation for AUI ACODEC mux
          - [arm64,armhf] ASoC: meson: Fix event generation for G12A tohdmi mux
          - [arm64,armhf] ASoC: meson: Fix event generation for AUI CODEC mux
          - [s390x] dasd: fix data corruption for ESE devices
          - [s390x] dasd: prevent double format of tracks for ESE devices
          - [s390x] dasd: Fix read for ESE with blksize < 4k
          - [s390x] dasd: Fix read inconsistency for ESE DASD devices
          - can: isotp: remove re-binding of bound socket
          - nfc: replace improper check device_is_registered() in netlink related
            functions
          - NFC: netlink: fix sleep in atomic bug when firmware download timeout
          - [arm64,armhf] gpio: pca953x: fix irq_stat not updated when irq is disabled
            (irq_mask not set)
          - hwmon: (adt7470) Fix warning on module removal
          - [armhf] hwmon: (pmbus) disable PEC if not enabled
          - [arm*] ASoC: dmaengine: Restore NULL prepare_slave_config() callback
          - [arm64] ASoC: meson: axg-tdm-interface: Fix formatters in trigger"
          - [arm64] ASoC: meson: axg-card: Fix nonatomic links
          - ASoC: soc-ops: fix error handling
          - [amd64] iommu/vt-d: Drop stop marker messages
          - net/mlx5e: Fix trust state reset in reload
          - net/mlx5: Fix slab-out-of-bounds while reading resource dump menu
          - net/mlx5e: Fix wrong source vport matching on tunnel rule
          - net/mlx5e: Don't match double-vlan packets if cvlan is not set
          - net/mlx5e: CT: Fix queued up restore put() executing after relevant ft
            release
          - net/mlx5e: Fix the calling of update_buffer_lossy() API
          - net/mlx5: Fix matching on inner TTC
          - net/mlx5: Avoid double clear or set of sync reset requested
          - net/mlx5: Fix deadlock in sync reset flow
          - net/mlx5e: Lag, Fix use-after-free in fib event handler
          - net/mlx5e: Lag, Fix fib_info pointer assignment
          - net/mlx5e: Lag, Don't skip fib events on current dst
          - net/mlx5e: TC, fix decap fallback to uplink when int port not supported
          - ALSA: hda/realtek: Fix mute led issue on thinkpad with cs35l41 s-codec
          - SUNRPC release the transport of a relocated task with an assigned
            transport
          - RDMA/irdma: Flush iWARP QP if modified to ERR from RTR state
          - RDMA/irdma: Reduce iWARP QP destroy time
          - RDMA/irdma: Fix possible crash due to NULL netdev in notifier
          - NFSv4: Don't invalidate inode attributes on delegation return
          - [arm64,armhf] net: stmmac: dwmac-sun8i: add missing of_node_put() in
            sun8i_dwmac_register_mdio_mux()
          - [armhf] net: cpsw: add missing of_node_put() in cpsw_probe_dt()
          - net: igmp: respect RCU rules in ip_mc_source() and ip_mc_msfilter()
          - [arm64] drm/msm/dp: remove fail safe mode related code
          - hinic: fix bug of wq out of bound access
          - SUNRPC: Don't leak sockets in xs_local_connect()
          - mld: respect RCU rules in ip6_mc_source() and ip6_mc_msfilter()
          - rxrpc: Enable IPv6 checksums on transport socket
          - dt-bindings: pci: apple,pcie: Drop max-link-speed from example
          - bnxt_en: Fix possible bnxt_open() failure caused by wrong RFS flag
          - bnxt_en: Fix unnecessary dropping of RX packets
          - [arm64,armhf] smsc911x: allow using IRQ0
          - btrfs: always log symlinks in full mode
          - [arm*] gpio: mvebu: drop pwm base assignment
          - net: rds: acquire refcount on TCP sockets
          - [x86] kvm: x86/cpuid: Only provide CPUID leaf 0xA if host has
            architectural PMU
          - fbdev: Make fb_release() return -ENODEV if fbdev was unregistered
          - [x86] KVM: SEV: Mark nested locking of vcpu->lock
          - [x86] KVM: VMX: Exit to userspace if vCPU has injected exception and
            invalid state
          - [x86] kvm: Preserve BSP MSR_KVM_POLL_CONTROL across suspend/resume
          - [x86] KVM: x86: Do not change ICR on write to APIC_SELF_IPI
          - [x86] KVM: x86/mmu: avoid NULL-pointer dereference on page freeing bugs
          - [x86] KVM: LAPIC: Enable timer posted-interrupt only when mwait/hlt is
            advertised
          - mmc: rtsx: add 74 Clocks in power on flow
          - [arm64] PCI: aardvark: Replace custom PCIE_CORE_INT_* macros with
            PCI_INTERRUPT_*
          - [arm64] PCI: aardvark: Rewrite IRQ code to chained IRQ handler
          - [arm64] PCI: aardvark: Check return value of generic_handle_domain_irq()
            when processing INTx IRQ
          - [arm64] PCI: aardvark: Make MSI irq_chip structures static driver
            structures
          - [arm64] PCI: aardvark: Make msi_domain_info structure a static driver
            structure
          - [arm64] PCI: aardvark: Use dev_fwnode() instead of
            of_node_to_fwnode(dev->of_node)
          - [arm64] PCI: aardvark: Refactor unmasking summary MSI interrupt
          - [arm64] PCI: aardvark: Add support for masking MSI interrupts
          - [arm64] PCI: aardvark: Fix setting MSI address
          - [arm64] PCI: aardvark: Enable MSI-X support
          - [arm64] PCI: aardvark: Add support for ERR interrupt on emulated bridge
          - [arm64] PCI: aardvark: Optimize writing PCI_EXP_RTCTL_PMEIE and
            PCI_EXP_RTSTA_PME on emulated bridge
          - [arm64] PCI: aardvark: Add support for PME interrupts
          - [arm64] PCI: aardvark: Fix support for PME requester on emulated bridge
          - [arm64] PCI: aardvark: Use separate INTA interrupt for emulated root
            bridge
          - [arm64] PCI: aardvark: Remove irq_mask_ack() callback for INTx interrupts
          - [arm64] PCI: aardvark: Don't mask irq when mapping
          - [arm64] PCI: aardvark: Drop __maybe_unused from advk_pcie_disable_phy()
          - [arm64] PCI: aardvark: Update comment about link going down after link-up
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.17.8
          - Bluetooth: Fix the creation of hdev->name
          - rfkill: uapi: fix RFKILL_IOCTL_MAX_SIZE ioctl request definition
          - udf: Avoid using stale lengthOfImpUse
          - mm: fix missing cache flush for all tail pages of compound page
          - mm: hugetlb: fix missing cache flush in copy_huge_page_from_user()
          - mm: hugetlb: fix missing cache flush in hugetlb_mcopy_atomic_pte()
          - mm: shmem: fix missing cache flush in shmem_mfill_atomic_pte()
          - mm: userfaultfd: fix missing cache flush in mcopy_atomic_pte() and
            __mcopy_atomic()
          - mm/hwpoison: fix error page recovered but reported "not recovered"
          - mm/mlock: fix potential imbalanced rlimit ucounts adjustment
          - mm,migrate: fix establishing demotion target
          - mm: fix invalid page pointer returned with FOLL_PIN gups
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.17.9
          - batman-adv: Don't skb_split skbuffs with frag_list
          - iwlwifi: iwl-dbg: Use del_timer_sync() before freeing
          - hwmon: (tmp401) Add OF device ID table
          - mac80211: Reset MBSSID parameters upon connection
          - net: rds: use maybe_get_net() when acquiring refcount on TCP sockets
          - net: Fix features skip in for_each_netdev_feature()
          - [arm64] net: mscc: ocelot: fix last VCAP IS1/IS2 filter persisting in
            hardware when deleted
          - [arm64] net: mscc: ocelot: fix VCAP IS2 filters matching on both lookups
          - [arm64] net: mscc: ocelot: restrict tc-trap actions to VCAP IS2 lookup 0
          - [arm64] net: mscc: ocelot: avoid corrupting hardware counters when moving
            VCAP filters
          - [arm*] fbdev: simplefb: Cleanup fb_info in .fb_destroy rather than .remove
          - fbdev: efifb: Cleanup fb_info in .fb_destroy rather than .remove
          - [x86] fbdev: vesafb: Cleanup fb_info in .fb_destroy rather than .remove
          - [x86] platform/surface: aggregator: Fix initialization order when
            compiling as builtin module
          - ice: Fix race during aux device (un)plugging
          - ice: clear stale Tx queue settings before configuring
          - ice: fix PTP stale Tx timestamps cleanup
          - ipv4: drop dst in multicast routing path
          - drm/nouveau: Fix a potential theorical leak in
            nouveau_get_backlight_name()
          - netlink: do not reset transport header in netlink_recvmsg()
          - net: chelsio: cxgb4: Avoid potential negative array offset
          - fbdev: efifb: Fix a use-after-free due early fb_info cleanup
          - net: sfc: fix memory leak due to ptp channel
          - fanotify: do not allow setting dirent events in mask of non-dir
          - mac80211_hwsim: call ieee80211_tx_prepare_skb under RCU protection
          - nfs: fix broken handling of the softreval mount option
          - dim: initialize all struct fields
          - procfs: prevent unprivileged processes accessing fdinfo dir
          - [arm64,armhf] net: dsa: flush switchdev workqueue on bridge join error
            path
          - [arm64] vdso: fix makefile dependency on vdso.so
          - virtio: fix virtio transitional ids
          - [s390x] ctcm: fix variable dereferenced before check
          - [s390x] ctcm: fix potential memory leak
          - [s390x] lcs: fix variable dereferenced before check
          - net/sched: act_pedit: really ensure the skb is writable
          - [arm64] net: bcmgenet: Check for Wake-on-LAN interrupt probe deferral
          - [arm*] drm/vc4: hdmi: Fix build error for implicit function declaration
          - [armhf] net: dsa: bcm_sf2: Fix Wake-on-LAN with mac_link_down()
          - net/smc: non blocking recvmsg() return -EAGAIN when no data and
            signal_pending
          - net: sfc: ef10: fix memory leak in efx_ef10_mtd_probe()
          - tls: Fix context leak on tls_device_down
          - drm/vmwgfx: Fix fencing on SVGAv3
          - gfs2: Fix filesystem block deallocation for short writes
          - hwmon: (f71882fg) Fix negative temperature
          - RDMA/irdma: Fix deadlock in irdma_cleanup_cm_core()
          - [arm64,armhf] iommu: arm-smmu: disable large page mappings for Nvidia
            arm-smmu
          - ASoC: max98090: Reject invalid values in custom control put()
          - ASoC: max98090: Generate notifications on changes for custom control
          - ASoC: ops: Validate input values in snd_soc_put_volsw_range()
          - [s390x] disable -Warray-bounds
          - [x86] ASoC: SOF: Fix NULL pointer exception in sof_pci_probe callback
          - io_uring: assign non-fixed early for async work
          - net: sfp: Add tx-fault workaround for Huawei MA5671A SFP ONT
          - secure_seq: use the 64 bits of the siphash for port offset calculation
            (CVE-2022-1012)
          - tcp: use different parts of the port_offset for index and offset
            (CVE-2022-1012)
          - tcp: resalt the secret every 10 seconds (CVE-2022-1012)
          - tcp: add small random increments to the source port (CVE-2022-1012)
          - tcp: dynamically allocate the perturb table used by source ports
            (CVE-2022-1012)
          - tcp: increase source port perturb table to 2^16 (CVE-2022-1012)
          - tcp: drop the hash_32() part from the index calculation (CVE-2022-1012)
          - block: Do not call folio_next() on an unreferenced folio
          - [arm64,armhf] interconnect: Restore sync state by ignoring ipa-virt in
            provider count
          - firmware_loader: use kernel credentials when reading firmware
          - [x86] mm: Fix marking of unused sub-pmd ranges
          - tty: n_gsm: fix buffer over-read in gsm_dlci_data()
          - tty: n_gsm: fix mux activation issues in gsm_config()
          - tty: n_gsm: fix invalid gsmtty_write_room() result
          - usb: gadget: uvc: allow for application to cleanly shutdown
          - usb: cdc-wdm: fix reading stuck on device close
          - [arm64] usb: typec: tcpci: Don't skip cleanup in .remove() on error
          - USB: serial: pl2303: add device id for HP LM930 Display
          - USB: serial: qcserial: add support for Sierra Wireless EM7590
          - USB: serial: option: add Fibocom L610 modem
          - USB: serial: option: add Fibocom MA510 modem
          - [arm64] fsl_lpuart: Don't enable interrupts too early
          - genirq: Remove WARN_ON_ONCE() in generic_handle_domain_irq()
          - ceph: fix setting of xattrs on async created inodes
          - Revert "mm/memory-failure.c: skip huge_zero_page in memory_failure()"
          - mm/huge_memory: do not overkill when splitting huge_zero_page
          - mm: mremap: fix sign for EFAULT error return value
          - drm/vmwgfx: Disable command buffers on svga3 without gbobjects
          - drm/nouveau/tegra: Stop using iommu_present()
          - i40e: i40e_main: fix a missing check on list iterator
          - net: atlantic: always deep reset on pm op, fixing up my null deref
            regression
          - net: phy: Fix race condition on link status change
          - writeback: Avoid skipping inode writeback
          - cgroup/cpuset: Remove cpus_allowed/mems_allowed setup in cpuset_init_smp()
          - ping: fix address binding wrt vrf
          - ath11k: reduce the wait time of 11d scan and hw scan while add interface
          - [arm*] arm[64]/memremap: don't abuse pfn_valid() to ensure presence of
            linear map
          - net: phy: micrel: Do not use kszphy_suspend/resume for KSZ8061
          - net: phy: micrel: Pass .probe for KS8737
          - SUNRPC: Ensure that the gssproxy client can start in a connected state
          - drm/vmwgfx: Initialize drm_mode_fb_cmd2
          - Revert "drm/amd/pm: keep the BACO feature enabled for suspend"
          - dma-buf: call dma_buf_stats_setup after dmabuf is in valid list
          - mm/hwpoison: use pr_err() instead of dump_page() in get_any_page()
          - net: phy: micrel: Fix incorrect variable type in micrel
          - mm/kfence: reset PG_slab and memcg_data before freeing __kfence_pool
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.17.10
          - floppy: use a statically allocated error counter
          - kernel/resource: Introduce request_mem_region_muxed()
          - i2c: piix4: Replace hardcoded memory map size with a #define
          - i2c: piix4: Move port I/O region request/release code into functions
          - i2c: piix4: Move SMBus controller base address detect into function
          - i2c: piix4: Move SMBus port selection into function
          - i2c: piix4: Add EFCH MMIO support to region request and release
          - i2c: piix4: Add EFCH MMIO support to SMBus base address detect
          - i2c: piix4: Add EFCH MMIO support for SMBus port select
          - i2c: piix4: Enable EFCH MMIO for Family 17h+
          - [x86] Watchdog: sp5100_tco: Move timer initialization into function
          - [x86] Watchdog: sp5100_tco: Refactor MMIO base address initialization
          - [x86] Watchdog: sp5100_tco: Add initialization using EFCH MMIO
          - [x86] Watchdog: sp5100_tco: Enable Family 17h+ CPUs
          - [x86] Revert "drm/i915/opregion: check port number bounds for SWSCI
            display power state"
          - gfs2: cancel timed-out glock requests
          - gfs2: Switch lock order of inode and iopen glock
          - rtc: fix use-after-free on device removal
          - [arm64] rtc: pcf2127: fix bug when reading alarm registers
          - Input: add bounds checking to input_set_capability()
          - nvme-pci: add quirks for Samsung X5 SSDs
          - gfs2: Disable page faults during lockless buffered reads
          - [arm64,armhf] rtc: sun6i: Fix time overflow handling
          - [armhf] crypto: stm32 - fix reference leak in stm32_crc_remove
          - [amd64] crypto: x86/chacha20 - Avoid spurious jumps to other functions
          - ALSA: hda/realtek: Enable headset mic on Lenovo P360
          - [s390x] traps: improve panic message for translation-specification
            exception
          - [s390x] pci: improve zpci_dev reference counting
          - smb3: cleanup and clarify status of tree connections
          - nvmet: use a private workqueue instead of the system workqueue
          - nvme-multipath: fix hang when disk goes live over reconnect
          - rtc: mc146818-lib: Fix the AltCentury for AMD platforms
          - fs: fix an infinite loop in iomap_fiemap
          - drbd: remove usage of list iterator variable after loop
          - platform/chrome: cros_ec_debugfs: detach log reader wq from devm
          - [armel,armhf] arm/stacktrace, kasan: Silence KASAN warnings in
            unwind_frame()
          - nilfs2: fix lockdep warnings in page operations for btree nodes
          - nilfs2: fix lockdep warnings during disk space reclamation
          - ALSA: usb-audio: Restore Rane SL-1 quirk
          - [i386] ALSA: wavefront: Proper check of get_user() error
          - ALSA: hda/realtek: Add quirk for TongFang devices with pop noise
          - perf: Fix sys_perf_event_open() race against self (CVE-2022-1729)
          - selinux: fix bad cleanup on error in hashtab_duplicate()
          - audit,io_uring,io-wq: call __audit_uring_exit for dummy contexts
          - Fix double fget() in vhost_net_set_backend()
          - PCI/PM: Avoid putting Elo i2 PCIe Ports in D3cold
          - [arm64] KVM: arm64: vgic-v3: Consistently populate ID_AA64PFR0_EL1.GIC
          - [x86] KVM: x86/mmu: Update number of zapped pages even if page list is
            stable
          - KVM: Free new dirty bitmap if creating a new memslot fails
          - [arm64] paravirt: Use RCU read locks to guard stolen_time
          - [arm64] mte: Ensure the cleared tags are visible before setting the PTE
          - [arm64] crypto: qcom-rng - fix infinite loop on requests not multiple of
            WORD_SZ
          - mmc: core: Fix busy polling for MMC_SEND_OP_COND again
          - libceph: fix potential use-after-free on linger ping and resends
          - drm/amd: Don't reset dGPUs if the system is going to s2idle
          - [x86] drm/i915/dmc: Add MMIO range restrictions
          - drm/dp/mst: fix a possible memory leak in fetch_monitor_name()
          - dma-buf: fix use of DMA_BUF_SET_NAME_{A,B} in userspace
          - dma-buf: ensure unique directory name for dmabuf stats
          - [arm64] dts: qcom: sm8250: don't enable rx/tx macro by default
          - [armhf] pinctrl: pinctrl-aspeed-g6: remove FWQSPID group in pinctrl
          - ALSA: hda - fix unused Realtek function when PM is not enabled
          - block/mq-deadline: Set the fifo_time member also if inserting at head
          - mptcp: fix subflow accounting on close
          - [arm64] net: macb: Increment rx bd head after allocating skb and buffer
          - [x86] i915/guc/reset: Make __guc_reset_context aware of guilty engines
          - xfrm: rework default policy structure
          - xfrm: fix "disable_policy" flag use when arriving from different devices
          - net/sched: act_pedit: sanitize shift argument before usage
          - netfilter: flowtable: fix excessive hw offload attempts after failure
          - netfilter: nft_flow_offload: skip dst neigh lookup for ppp devices
          - net: fix dev_fill_forward_path with pppoe + bridge
          - netfilter: nft_flow_offload: fix offload with pppoe + vlan
          - ptp: ocp: have adjtime handle negative delta_ns correctly
          - [arm64] Revert "PCI: aardvark: Rewrite IRQ code to chained IRQ handler"
          - net: vmxnet3: fix possible use-after-free bugs in
            vmxnet3_rq_alloc_rx_buf()
          - net: vmxnet3: fix possible NULL pointer dereference in
            vmxnet3_rq_cleanup()
          - [arm64] kexec: load from kimage prior to clobbering
          - ice: fix crash when writing timestamp on RX rings
          - ice: fix possible under reporting of ethtool Tx and Rx statistics
          - ice: Fix interrupt moderation settings getting cleared
          - net/qla3xxx: Fix a test in ql_reset_work()
          - net/mlx5: DR, Fix missing flow_source when creating multi-destination FW
            table
          - net/mlx5: Initialize flow steering during driver probe
          - net/mlx5: DR, Ignore modify TTL on RX if device doesn't support it
          - net/mlx5e: Block rx-gro-hw feature in switchdev mode
          - net/mlx5e: Properly block LRO when XDP is enabled
          - net/mlx5e: Properly block HW GRO when XDP is enabled
          - net/mlx5e: Remove HW-GRO from reported features
          - net/mlx5: Drain fw_reset when removing device
          - net: af_key: add check for pfkey_broadcast in function pfkey_process
          - [armhf] 9196/1: spectre-bhb: enable for Cortex-A15
          - [armel,armhf] 9197/1: spectre-bhb: fix loop8 sequence for Thumb2
          - lockdown: also lock down previous kgdb use (CVE-2022-21499)
          - mptcp: fix checksum byte order
          - igb: skip phy status check where unavailable
          - netfilter: flowtable: fix TCP flow teardown
          - netfilter: flowtable: pass flowtable to nf_flow_table_iterate()
          - netfilter: flowtable: move dst_check to packet path
          - net: bridge: Clear offload_fwd_mark when passing frame up bridge
            interface.
          - [x86] kvm: x86/pmu: Fix the compare function used by the pmu event filter
          - [arm*] gpio: mvebu/pwm: Refuse requests with inverted polarity
          - scsi: scsi_dh_alua: Properly handle the ALUA transitioning state
          - scsi: qla2xxx: Fix missed DMA unmap for aborted commands
          - mac80211: fix rx reordering with non explicit / psmp ack policy
          - nl80211: validate S1G channel width
          - cfg80211: retrieve S1G operating channel number
          - Revert "fbdev: Make fb_release() return -ENODEV if fbdev was unregistered"
          - fbdev: Prevent possible use-after-free in fb_release()
          - [x86] platform/x86: thinkpad_acpi: Convert btusb DMI list to quirks
          - [x86] platform/x86: thinkpad_acpi: Correct dual fan probe
          - [x86] platform/surface: gpe: Add support for Surface Pro 8
          - net: fix wrong network header length
          - nl80211: fix locking in nl80211_set_tx_bitrate_mask()
          - ethernet: tulip: fix missing pci_disable_device() on error in
            tulip_init_one()
          - net: atlantic: fix "frag[0] not initialized"
          - net: atlantic: reduce scope of is_rsc_complete
          - net: atlantic: add check for MAX_SKB_FRAGS
          - net: atlantic: verify hw_head_ lies within TX buffer ring
          - [arm64] Enable repeat tlbi workaround on KRYO4XX gold CPUs
          - dt-bindings: pinctrl: aspeed-g6: remove FWQSPID group
          - afs: Fix afs_getattr() to refetch file status if callback break occurred
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.17.11
          - mptcp: Do TCP fallback on early DSS checksum failure
      .
        [ Vincent Blut ]
        * [x86] sound/soc/amd: Enable SND_SOC_AMD_ACP5x, SND_SOC_AMD_VANGOGH_MACH,
          SND_SOC_AMD_ACP6x and SND_SOC_AMD_YC_MACH as modules (Closes: #1010580)
        * [ppc64*] crypto: Enable CRYPTO_CRC32C_VPMSUM as module (Closes: #1010293)
      .
        [ Alejandro R. Sedeño ]
        * drivers/net/wwan: Enable MHI_WWAN_MBIM as module (Closes: #1011395)
      .
        [ Salvatore Bonaccorso ]
        * Bump ABI to 3
        * sign-file: Convert API usage to support OpenSSL v3
        * [x86] KVM: x86/mmu: fix NULL pointer dereference on guest INVPCID
          (CVE-2022-1789)
      .
      linux (5.17.6-1) unstable; urgency=medium
      .
        * New upstream stable update:
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.17.4
          - [arm64] cpuidle: PSCI: Move the `has_lpi` check to the beginning of the
            function
          - ACPI: processor idle: Check for architectural support for LPI
          - btrfs: remove no longer used counter when reading data page
          - btrfs: remove unused variable in btrfs_{start,write}_dirty_block_groups()
          - media: si2157: unknown chip version Si2147-A30 ROM 0x50
          - drm/amdgpu: Ensure HDA function is suspended before ASIC reset
          - btrfs: release correct delalloc amount in direct IO write path
          - btrfs: fix btrfs_submit_compressed_write cgroup attribution
          - btrfs: return allocated block group from do_chunk_alloc()
          - ALSA: core: Add snd_card_free_on_error() helper
          - [i386] ALSA: sis7019: Fix the missing error handling
          - ALSA: ali5451: Fix the missing snd_card_free() call at probe error
          - ALSA: als300: Fix the missing snd_card_free() call at probe error
          - ALSA: als4000: Fix the missing snd_card_free() call at probe error
          - ALSA: atiixp: Fix the missing snd_card_free() call at probe error
          - ALSA: azt3328: Fix the missing snd_card_free() call at probe error
          - ALSA: bt87x: Fix the missing snd_card_free() call at probe error
          - ALSA: ca0106: Fix the missing snd_card_free() call at probe error
          - ALSA: cmipci: Fix the missing snd_card_free() call at probe error
          - ALSA: cs4281: Fix the missing snd_card_free() call at probe error
          - [i386] ALSA: cs5535audio: Fix the missing snd_card_free() call at probe
            error
          - ALSA: emu10k1x: Fix the missing snd_card_free() call at probe error
          - ALSA: ens137x: Fix the missing snd_card_free() call at probe error
          - ALSA: es1938: Fix the missing snd_card_free() call at probe error
          - ALSA: es1968: Fix the missing snd_card_free() call at probe error
          - ALSA: fm801: Fix the missing snd_card_free() call at probe error
          - ALSA: hdsp: Fix the missing snd_card_free() call at probe error
          - ALSA: hdspm: Fix the missing snd_card_free() call at probe error
          - ALSA: ice1724: Fix the missing snd_card_free() call at probe error
          - ALSA: intel8x0: Fix the missing snd_card_free() call at probe error
          - [x86] ALSA: intel_hdmi: Fix the missing snd_card_free() call at probe
            error
          - ALSA: korg1212: Fix the missing snd_card_free() call at probe error
          - ALSA: lola: Fix the missing snd_card_free() call at probe error
          - ALSA: lx6464es: Fix the missing snd_card_free() call at probe error
          - ALSA: maestro3: Fix the missing snd_card_free() call at probe error
          - ALSA: oxygen: Fix the missing snd_card_free() call at probe error
          - ALSA: riptide: Fix the missing snd_card_free() call at probe error
          - ALSA: rme32: Fix the missing snd_card_free() call at probe error
          - ALSA: rme9652: Fix the missing snd_card_free() call at probe error
          - ALSA: rme96: Fix the missing snd_card_free() call at probe error
          - [i386] ALSA: sc6000: Fix the missing snd_card_free() call at probe error
          - ALSA: sonicvibes: Fix the missing snd_card_free() call at probe error
          - ALSA: via82xx: Fix the missing snd_card_free() call at probe error
          - ALSA: usb-audio: Cap upper limits of buffer/period bytes for implicit fb
          - [x86] ALSA: memalloc: Add fallback SG-buffer allocations for x86
          - ALSA: nm256: Don't call card private_free at probe error path
          - [arm64] drm/msm: Add missing put_task_struct() in debugfs path
          - nfsd: Fix a write performance regression
          - Revert "ath11k: mesh: add support for 256 bitmap in blockack frames in
            11ax"
          - [arm64] KVM: arm64: Generalise VM features into a set of flags
          - [arm64] KVM: arm64: mixed-width check should be skipped for uninitialized
            vCPUs
          - SUNRPC: Fix the svc_deferred_event trace class
          - net/sched: flower: fix parsing of ethertype following VLAN header
          - veth: Ensure eth header is in skb's linear part
          - gpiolib: acpi: use correct format characters
          - cifs: release cached dentries only if mount is complete
          - ice: arfs: fix use-after-free when freeing @rx_cpu_rmap
          - Revert "iavf: Fix deadlock occurrence during resetting VF interface"
          - net: mdio: don't defer probe forever if PHY IRQ provider is missing
          - sctp: use the correct skb for security_sctp_assoc_request
          - net/sched: fix initialization order when updating chain 0 head
          - cachefiles: unmark inode in use in error path
          - cachefiles: Fix KASAN slab-out-of-bounds in cachefiles_set_volume_xattr
          - [arm64] net: dsa: felix: suppress -EPROBE_DEFER errors
          - io_uring: flag the fact that linked file assignment is sane
          - [armhf] net: ethernet: stmmac: fix altr_tse_pcs function when using a
            fixed-link
          - net/sched: taprio: Check if socket flags are valid
          - cfg80211: hold bss_lock while updating nontrans_list
          - netfilter: nft_socket: make cgroup match work in input too
          - [arm64] drm/msm: Fix range size vs end confusion
          - [arm64] drm/msm/dsi: Use connector directly in
            msm_dsi_manager_connector_init()
          - [arm64] drm/msm/dp: add fail safe mode outside of event_mutex context
          - io_uring: stop using io_wq_work as an fd placeholder
          - net/smc: use memcpy instead of snprintf to avoid out of bounds read
          - net/smc: Fix NULL pointer dereference in smc_pnet_find_ib()
          - scsi: pm80xx: Mask and unmask upper interrupt vectors 32-63
          - scsi: pm80xx: Enable upper inbound, outbound queues
          - scsi: iscsi: Move iscsi_ep_disconnect()
          - scsi: iscsi: Fix offload conn cleanup when iscsid restarts
          - scsi: iscsi: Fix endpoint reuse regression
          - scsi: iscsi: Fix conn cleanup and stop race during iscsid restart
          - scsi: iscsi: Fix unbound endpoint error handling
          - sctp: Initialize daddr on peeled off socket
          - netfilter: nf_tables: nft_parse_register can return a negative value
          - io_uring: fix assign file locking issue
          - ALSA: ad1889: Fix the missing snd_card_free() call at probe error
          - ALSA: mtpav: Don't call card private_free at probe error path
          - io_uring: move io_uring_rsrc_update2 validation
          - io_uring: verify that resv2 is 0 in io_uring_rsrc_update2
          - io_uring: verify pad field is 0 in io_get_ext_arg
          - ALSA: usb-audio: Increase max buffer size
          - ALSA: usb-audio: Limit max buffer and period sizes per time
          - macvlan: Fix leaking skb in source mode with nodst option
          - [armhf] net: ftgmac100: access hardware register after clock ready
          - cifs: potential buffer overflow in handling symlinks
          - vfio/pci: Fix vf_token mechanism when device-specific VF drivers are used
          - tun: annotate access to queue->trans_start
          - [arm64] net: dsa: felix: fix tagging protocol changes with multiple CPU
            ports
          - [arm64] net: bcmgenet: Revert "Use stronger register read/writes to assure
            ordering"
          - block: fix offset/size check in bio_trim()
          - block: null_blk: end timed out poll request
          - io_uring: abort file assignment prior to assigning creds
          - [powerpc*] KVM: PPC: Book3S HV P9: Fix "lost kick" race
          - drm/amd: Add USBC connector ID
          - btrfs: fix fallocate to use file_modified to update permissions
            consistently
          - btrfs: do not warn for free space inode in cow_file_range
          - drm/amdgpu: conduct a proper cleanup of PDB bo
          - drm/amdgpu/gmc: use PCI BARs for APUs in passthrough
          - drm/amd/display: FEC check in timing validation
          - drm/amdkfd: Fix Incorrect VMIDs passed to HWS
          - drm/amdgpu/vcn: improve vcn dpg stop procedure
          - [arm64,x86] Drivers: hv: vmbus: Deactivate sysctl_record_panic_msg by
            default in isolated guests
          - [arm64,x86] Drivers: hv: vmbus: Propagate VMbus coherence to each VMbus
            device
          - [amd64,arm64] PCI: hv: Propagate coherence from VMbus device to PCI device
          - [arm64,x86] Drivers: hv: vmbus: Prevent load re-ordering when reading ring
            buffer
          - scsi: target: tcmu: Fix possible page UAF
          - scsi: lpfc: Improve PCI EEH Error and Recovery Handling
          - scsi: lpfc: Fix unload hang after back to back PCI EEH faults
          - scsi: lpfc: Fix queue failures when recovering from PCI parity error
          - [powerpc*] scsi: ibmvscsis: Increase INITIAL_SRP_LIMIT to 1024
          - ata: libata-core: Disable READ LOG DMA EXT for Samsung 840 EVOs
          - [armhf] gpu: ipu-v3: Fix dev_dbg frequency output
          - [powerpc*] static_call: Properly initialise DEFINE_STATIC_CALL_RET0()
          - [arm64] alternatives: mark patch_alternative() as `noinstr`
          - tlb: hugetlb: Add more sizes to tlb_remove_huge_tlb_entry
          - [arm64,x86] Drivers: hv: balloon: Disable balloon and hot-add accordingly
          - net: usb: aqc111: Fix out-of-bounds accesses in RX fixup
          - myri10ge: fix an incorrect free for skb in myri10ge_sw_tso
          - drm/amd/display: Fix allocate_mst_payload assert on resume
          - drbd: set QUEUE_FLAG_STABLE_WRITES
          - scsi: mpt3sas: Fail reset operation if config request timed out
          - scsi: mvsas: Add PCI ID of RocketRaid 2640
          - scsi: megaraid_sas: Target with invalid LUN ID is deleted during scan
          - drivers: net: slip: fix NPD bug in sl_tx_timeout()
          - io_uring: zero tag on rsrc removal
          - io_uring: use nospec annotation for more indexes
          - [arm64] perf/imx_ddr: Fix undefined behavior due to shift overflowing the
            constant
          - mm/secretmem: fix panic when growing a memfd_secret
          - mm, page_alloc: fix build_zonerefs_node()
          - mm: fix unexpected zeroed page mapping with zram swap
          - hugetlb: do not demote poisoned hugetlb pages
          - revert "fs/binfmt_elf: fix PT_LOAD p_align values for loaders"
          - revert "fs/binfmt_elf: use PT_LOAD p_align values for static PIE"
          - [x86] KVM: x86/mmu: Resolve nx_huge_pages when kvm.ko is loaded
          - SUNRPC: Fix NFSD's request deferral on RDMA transports
          - cifs: verify that tcon is valid before dereference in cifs_kill_sb
          - ath9k: Properly clear TX status area before reporting to mac80211
          - ath9k: Fix usage of driver-private space in tx_info
          - btrfs: zoned: activate block group only for extent allocation
          - btrfs: fix root ref counts in error handling in btrfs_get_root_ref
          - btrfs: mark resumed async balance as writing
          - ALSA: hda/realtek: Add quirk for Clevo PD50PNT
          - ALSA: hda/realtek: add quirk for Lenovo Thinkpad X12 speakers
          - ALSA: pcm: Test for "silence" field in struct "pcm_format_data"
          - nl80211: correctly check NL80211_ATTR_REG_ALPHA2 size
          - ipv6: fix panic when forwarding a pkt with no in6 dev
          - drm/amdgpu: Enable gfxoff quirk on MacBook Pro
          - [x86] tsx: Use MSR_TSX_CTRL to clear CPUID bits
          - [x86] tsx: Disable TSX development mode at boot
          - genirq/affinity: Consider that CPUs on nodes can be unbalanced
          - tick/nohz: Use WARN_ON_ONCE() to prevent console saturation
          - dm integrity: fix memory corruption when tag_size is less than digest size
          - i2c: dev: check return value when calling dev_set_name()
          - [arm64,armhf] Revert "net: dsa: setup master before ports"
          - smp: Fix offline cpu check in flush_smp_call_function_queue()
          - dt-bindings: memory: snps,ddrc-3.80a compatible also need interrupts
          - timers: Fix warning condition in __run_timers()
          - mm, kfence: support kmem_dump_obj() for KFENCE objects
          - [x86] drm/i915: Sunset igpu legacy mmap support based on GRAPHICS_VER_FULL
          - cpu/hotplug: Remove the 'cpu' member of cpuhp_cpu_state
          - ax25: Fix UAF bugs in ax25 timers (CVE-2022-1205)
          - io_uring: use right issue_flags for splice/tee
          - io_uring: fix poll file assign deadlock
          - io_uring: fix poll error reporting
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.17.5
          - etherdevice: Adjust ether_addr* prototypes to silence -Wstringop-overead
          - perf tools: Fix segfault accessing sample_id xyarray
          - drm/amd/display: Only set PSR version when valid
          - block/compat_ioctl: fix range check in BLKGETSIZE
          - gfs2: assign rgrp glock before compute_bitstructs
          - scsi: ufs: core: scsi_get_lba() error fix
          - net/sched: cls_u32: fix netns refcount changes in u32_change()
          - ALSA: usb-audio: Clear MIDI port active flag after draining
          - ALSA: usb-audio: add mapping for MSI MAG X570S Torpedo MAX.
          - ALSA: hda/realtek: Add quirk for Clevo NP70PNP
          - ASoC: atmel: Remove system clock tree configuration for at91sam9g20ek
          - ASoC: topology: Correct error handling in soc_tplg_dapm_widget_create()
          - ASoC: rk817: Use devm_clk_get() in rk817_platform_probe
          - ASoC: msm8916-wcd-digital: Check failure for devm_snd_soc_register_component
          - ASoC: codecs: wcd934x: do not switch off SIDO Buck when codec is in use
          - dmaengine: idxd: fix device cleanup on disable
          - dmaengine: imx-sdma: Fix error checking in sdma_event_remap
          - dmaengine: mediatek:Fix PM usage reference leak of mtk_uart_apdma_alloc_chan_resources
          - dmaengine: dw-edma: Fix unaligned 64bit access
          - spi: spi-mtk-nor: initialize spi controller after resume
          - firmware: cs_dsp: Fix overrun of unterminated control name string
          - esp: limit skb_page_frag_refill use to a single page
          - spi: cadence-quadspi: fix incorrect supports_op() return value
          - igc: Fix infinite loop in release_swfw_sync
          - igc: Fix BUG: scheduling while atomic
          - igc: Fix suspending when PTM is active
          - ice: allow creating VFs for !CONFIG_NET_SWITCHDEV
          - ice: fix crash in switchdev mode
          - ice: Fix memory leak in ice_get_orom_civd_data()
          - ALSA: hda/hdmi: fix warning about PCM count when used with SOF
          - rxrpc: Restore removed timer deletion
          - net/smc: Fix sock leak when release after smc_shutdown()
          - net/packet: fix packet_sock xmit return value checking
          - ip6_gre: Avoid updating tunnel->tun_hlen in __gre6_xmit()
          - ip6_gre: Fix skb_under_panic in __gre6_xmit()
          - net: restore alpha order to Ethernet devices in config
          - net/sched: cls_u32: fix possible leak in u32_init_knode()
          - l3mdev: l3mdev_master_upper_ifindex_by_index_rcu should be using netdev_master_upper_dev_get_rcu
          - ipv6: make ip6_rt_gc_expire an atomic_t
          - can: isotp: stop timeout monitoring when no first frame was sent
          - net: dsa: hellcreek: Calculate checksums in tagger
          - net: mscc: ocelot: fix broken IP multicast flooding
          - netlink: reset network and mac headers in netlink_dump()
          - drm/i915/display/psr: Unset enable_psr2_sel_fetch if other checks in intel_psr2_config_valid() fails
          - RISC-V: KVM: Remove 's' & 'u' as valid ISA extension
          - RISC-V: KVM: Restrict the extensions that can be disabled
          - net: stmmac: Use readl_poll_timeout_atomic() in atomic state
          - dmaengine: idxd: match type for retries var in idxd_enqcmds()
          - dmaengine: idxd: fix retry value to be constant for duration of function call
          - dmaengine: idxd: add RO check for wq max_batch_size write
          - dmaengine: idxd: add RO check for wq max_transfer_size write
          - dmaengine: idxd: skip clearing device context when device is read-only
          - selftests: mlxsw: vxlan_flooding: Prevent flooding of unwanted packets
          - selftests: mlxsw: vxlan_flooding_ipv6: Prevent flooding of unwanted packets
          - userfaultfd: mark uffd_wp regardless of VM_WRITE flag
          - arm64: mm: fix p?d_leaf()
          - XArray: Disallow sibling entries of nodes
          - drm/msm/gpu: Rename runtime suspend/resume functions
          - drm/msm/gpu: Remove mutex from wait_event condition
          - ARM: vexpress/spc: Avoid negative array index when !SMP
          - reset: renesas: Check return value of reset_control_deassert()
          - reset: tegra-bpmp: Restore Handle errors in BPMP response
          - platform/x86: samsung-laptop: Fix an unsigned comparison which can never be negative
          - ALSA: usb-audio: Fix undefined behavior due to shift overflowing the constant
          - drm/msm/disp: check the return value of kzalloc()
          - selftests: KVM: Free the GIC FD when cleaning up in arch_timer
          - ALSA: hda: intel-dsp-config: update AlderLake PCI IDs
          - arm64: dts: imx: Fix imx8*-var-som touchscreen property sizes
          - vxlan: fix error return code in vxlan_fdb_append
          - cifs: Check the IOCB_DIRECT flag, not O_DIRECT
          - net: atlantic: Avoid out-of-bounds indexing
          - mt76: Fix undefined behavior due to shift overflowing the constant
          - brcmfmac: sdio: Fix undefined behavior due to shift overflowing the constant
          - dpaa_eth: Fix missing of_node_put in dpaa_get_ts_info()
          - drm/msm/mdp5: check the return of kzalloc()
          - KVM: x86: hyper-v: Avoid writing to TSC page without an active vCPU
          - net: macb: Restart tx only if queue pointer is lagging
          - scsi: iscsi: Release endpoint ID when its freed
          - scsi: iscsi: Merge suspend fields
          - scsi: iscsi: Fix NOP handling during conn recovery
          - scsi: qedi: Fix failed disconnect handling
          - stat: fix inconsistency between struct stat and struct compat_stat
          - VFS: filename_create(): fix incorrect intent.
          - nvme: add a quirk to disable namespace identifiers
          - nvme-pci: disable namespace identifiers for the MAXIO MAP1002/1202
          - nvme-pci: disable namespace identifiers for Qemu controllers
          - irq_work: use kasan_record_aux_stack_noalloc() record callstack
          - EDAC/synopsys: Read the error count from the correct register
          - mm/memory-failure.c: skip huge_zero_page in memory_failure()
          - memcg: sync flush only if periodic flush is delayed
          - mm, hugetlb: allow for "high" userspace addresses
          - oom_kill.c: futex: delay the OOM reaper to allow time for proper futex cleanup
          - mm/mmu_notifier.c: fix race in mmu_interval_notifier_remove()
          - ata: pata_marvell: Check the 'bmdma_addr' beforing reading
          - dma: at_xdmac: fix a missing check on list iterator
          - dmaengine: imx-sdma: fix init of uart scripts
          - net: atlantic: invert deep par in pm functions, preventing null derefs
          - drm/radeon: fix logic inversion in radeon_sync_resv
          - io_uring: free iovec if file assignment fails
          - Input: omap4-keypad - fix pm_runtime_get_sync() error checking
          - scsi: sr: Do not leak information in ioctl
          - sched/pelt: Fix attach_entity_load_avg() corner case
          - perf/core: Fix perf_mmap fail when CONFIG_PERF_USE_VMALLOC enabled
          - drm/panel/raspberrypi-touchscreen: Avoid NULL deref if not initialised
          - drm/panel/raspberrypi-touchscreen: Initialise the bridge in prepare
          - powerpc/time: Always set decrementer in timer_interrupt()
          - KVM: PPC: Fix TCE handling for VFIO
          - drm/vc4: Use pm_runtime_resume_and_get to fix pm_runtime_get_sync() usage
          - powerpc/perf: Fix power9 event alternatives
          - powerpc/perf: Fix power10 event alternatives
          - arm/xen: Fix some refcount leaks
          - perf script: Always allow field 'data_src' for auxtrace
          - perf report: Set PERF_SAMPLE_DATA_SRC bit for Arm SPE event
          - fs: fix acl translation
          - cifs: fix NULL ptr dereference in refresh_mounts()
          - cifs: use correct lock type in cifs_reconnect()
          - xtensa: patch_text: Fixup last cpu should be master
          - xtensa: fix a7 clobbering in coprocessor context load/store
          - openvswitch: fix OOB access in reserve_sfa_size()
          - gpio: Request interrupts after IRQ is initialized
          - ASoC: rt5682: fix an incorrect NULL check on list iterator
          - ASoC: soc-dapm: fix two incorrect uses of list iterator
          - e1000e: Fix possible overflow in LTR decoding
          - codecs: rt5682s: fix an incorrect NULL check on list iterator
          - ARC: entry: fix syscall_trace_exit argument
          - drm/vmwgfx: Fix gem refcounting and memory evictions
          - arm_pmu: Validate single/group leader events
          - KVM: x86/pmu: Update AMD PMC sample period to fix guest NMI-watchdog
          - KVM: x86: Don't re-acquire SRCU lock in complete_emulated_io()
          - KVM: x86: Pend KVM_REQ_APICV_UPDATE during vCPU creation to fix a race
          - KVM: nVMX: Defer APICv updates while L2 is active until L1 is active
          - KVM: SVM: Simplify and harden helper to flush SEV guest page(s)
          - KVM: SVM: Flush when freeing encrypted pages even on SME_COHERENT CPUs
          - ext4: fix fallocate to use file_modified to update permissions consistently
          - ext4: fix symlink file size not match to file content
          - ext4: fix use-after-free in ext4_search_dir
          - ext4: limit length to bitmap_maxbytes - blocksize in punch_hole
          - ext4, doc: fix incorrect h_reserved size
          - ext4: fix overhead calculation to account for the reserved gdt blocks
          - ext4: force overhead calculation if the s_overhead_cluster makes no sense
          - ext4: update the cached overhead value in the superblock
          - jbd2: fix a potential race while discarding reserved buffers after an abort
          - spi: atmel-quadspi: Fix the buswidth adjustment between spi-mem and controller
          - ASoC: SOF: topology: cleanup dailinks on widget unload
          - io_uring: fix leaks on IOPOLL and CQE_SKIP
          - arm64: dts: qcom: add IPA qcom,qmp property
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.17.6
          - usb: mtu3: fix USB 3.0 dual-role-switch from device to host
          - floppy: disable FDRAWCMD by default
          - USB: quirks: add a Realtek card reader
          - USB: quirks: add STRING quirk for VCOM device
          - USB: serial: whiteheat: fix heap overflow in WHITEHEAT_GET_DTR_RTS
          - USB: serial: cp210x: add PIDs for Kamstrup USB Meter Reader
          - USB: serial: option: add support for Cinterion MV32-WA/MV32-WB
          - USB: serial: option: add Telit 0x1057, 0x1058, 0x1075 compositions
          - usb: xhci: tegra:Fix PM usage reference leak of tegra_xusb_unpowergate_partitions
          - xhci: Enable runtime PM on second Alderlake controller
          - xhci: stop polling roothubs after shutdown
          - xhci: increase usb U3 -> U0 link resume timeout from 100ms to 500ms
          - iio: dac: ad5592r: Fix the missing return value.
          - iio: scd4x: check return of scd4x_write_and_fetch
          - iio: dac: ad5446: Fix read_raw not returning set value
          - iio: magnetometer: ak8975: Fix the error handling in ak8975_power_on()
          - iio: imu: inv_icm42600: Fix I2C init possible nack
          - usb: misc: fix improper handling of refcount in uss720_probe()
          - usb: core: Don't hold the device lock while sleeping in do_proc_control()
          - usb: typec: ucsi: Fix reuse of completion structure
          - usb: typec: ucsi: Fix role swapping
          - usb: gadget: uvc: Fix crash when encoding data for usb request
          - usb: gadget: configfs: clear deactivation flag in configfs_composite_unbind()
          - usb: dwc3: Try usb-role-switch first in dwc3_drd_init
          - usb: dwc3: core: Fix tx/rx threshold settings
          - usb: dwc3: core: Only handle soft-reset in DCTL
          - usb: dwc3: gadget: Return proper request status
          - usb: dwc3: pci: add support for the Intel Meteor Lake-P
          - usb: cdns3: Fix issue for clear halt endpoint
          - usb: phy: generic: Get the vbus supply
          - kernfs: fix NULL dereferencing in kernfs_remove
          - binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0
          - binder: Address corner cases in deferred copy and fixup
          - serial: imx: fix overrun interrupts in DMA mode
          - serial: amba-pl011: do not time out prematurely when draining tx fifo
          - serial: 8250: Also set sticky MCR bits in console restoration
          - serial: 8250: Correct the clock for EndRun PTP/1588 PCIe device
          - eeprom: at25: Use DMA safe buffers
          - arch_topology: Do not set llc_sibling if llc_id is invalid
          - topology: make core_mask include at least cluster_siblings
          - ceph: fix possible NULL pointer dereference for req->r_session
          - bus: mhi: host: pci_generic: Add missing poweroff() PM callback
          - bus: mhi: host: pci_generic: Flush recovery worker during freeze
          - arm64: dts: imx8mm-venice: fix spi2 pin configuration
          - pinctrl: samsung: fix missing GPIOLIB on ARM64 Exynos config
          - f2fs: should not truncate blocks during roll-forward recovery
          - hex2bin: make the function hex_to_bin constant-time
          - hex2bin: fix access beyond string end
          - bus: fsl-mc-msi: Fix MSI descriptor mutex lock for msi_first_desc()
          - riscv: patch_text: Fixup last cpu should be master
          - x86/cpu: Load microcode during restore_processor_state()
          - x86/pci/xen: Disable PCI/MSI[-X] masking for XEN_HVM guests
          - iocost: don't reset the inuse weight of under-weighted debtors
          - virtio_net: fix wrong buf address calculation when using xdp
          - cpufreq: qcom-hw: drop affinity hint before freeing the IRQ
          - cpufreq: qcom-hw: fix the race between LMH worker and cpuhp
          - cpufreq: qcom-hw: fix the opp entries refcounting
          - cpufreq: qcom-cpufreq-hw: Fix throttle frequency value on EPSS platforms
          - video: fbdev: udlfb: properly check endpoint type
          - arm64: dts: meson: remove CPU opps below 1GHz for G12B boards
          - arm64: dts: meson: remove CPU opps below 1GHz for SM1 boards
          - iio: dac: ad3552r: fix signedness bug in ad3552r_reset()
          - iio:imu:bmi160: disable regulator in error path
          - iio:filter:admv8818: select REGMAP_SPI for ADMV8818
          - mtd: rawnand: fix ecc parameters for mt7622
          - tee: optee: add missing mutext_destroy in optee_ffa_probe
          - xsk: Fix l2fwd for copy mode + busy poll combo
          - arm64: dts: imx8qm: Correct SCU clock controller's compatible property
          - USB: Fix xhci event ring dequeue pointer ERDP update issue
          - soc: imx: imx8m-blk-ctrl: Fix IMX8MN_DISPBLK_PD_ISI hang
          - ARM: dts: imx6qdl-apalis: Fix sgtl5000 detection issue
          - iio:dac:ad3552r: Fix an IS_ERR() vs NULL check
          - arm64: dts: imx8mq-tqma8mq: change the spi-nor tx
          - arm64: dts: imx8mn: Fix SAI nodes
          - arm64: dts: meson-sm1-bananapi-m5: fix wrong GPIO pin labeling for CON1
          - phy: samsung: Fix missing of_node_put() in exynos_sata_phy_probe
          - phy: samsung: exynos5250-sata: fix missing device put in probe error paths
          - ARM: OMAP2+: Fix refcount leak in omap_gic_of_init
          - bus: ti-sysc: Make omap3 gpt12 quirk handling SoC specific
          - ARM: dts: dra7: Fix suspend warning for vpe powerdomain
          - phy: ti: omap-usb2: Fix error handling in omap_usb2_enable_clocks
          - ARM: dts: at91: Map MCLK for wm8731 on at91sam9g20ek
          - ARM: dts: at91: sama5d4_xplained: fix pinctrl phandle name
          - ARM: dts: at91: fix pinctrl phandles
          - phy: mapphone-mdm6600: Fix PM error handling in phy_mdm6600_probe
          - phy: ti: Add missing pm_runtime_disable() in serdes_am654_probe
          - interconnect: qcom: sc7180: Drop IP0 interconnects
          - interconnect: qcom: sdx55: Drop IP0 interconnects
          - ARM: dts: Fix mmc order for omap3-gta04
          - ARM: dts: am33xx-l4: Add missing touchscreen clock properties
          - ARM: dts: am3517-evm: Fix misc pinmuxing
          - ARM: dts: logicpd-som-lv: Fix wrong pinmuxing on OMAP35
          - pinctrl: qcom: sm6350: fix order of UFS & SDC pins
          - ipvs: correctly print the memory size of ip_vs_conn_tab
          - phy: amlogic: fix error path in phy_g12a_usb3_pcie_probe()
          - pinctrl: mediatek: moore: Fix build error
          - mtd: rawnand: Fix return value check of wait_for_completion_timeout
          - mtd: fix 'part' field data corruption in mtd_info
          - pinctrl: stm32: Do not call stm32_gpio_get() for edge triggered IRQs in EOI
          - memory: renesas-rpc-if: Fix HF/OSPI data transfer in Manual Mode
          - net: dsa: Add missing of_node_put() in dsa_port_link_register_of
          - netfilter: nft_set_rbtree: overlap detection with element re-addition after deletion
          - bpf, lwt: Fix crash when using bpf_skb_set_tunnel_key() from bpf_xmit lwt hook
          - pinctrl: rockchip: fix RK3308 pinmux bits
          - tcp: md5: incorrect tcp_header_len for incoming connections
          - pinctrl: stm32: Keep pinctrl block clock enabled when LEVEL IRQ requested
          - tcp: ensure to use the most recently sent skb when filling the rate sample
          - wireguard: device: check for metadata_dst with skb_valid_dst()
          - sctp: check asoc strreset_chunk in sctp_generate_reconf_event
          - ARM: dts: imx6ull-colibri: fix vqmmc regulator
          - arm64: dts: imx8mn-ddr4-evk: Describe the 32.768 kHz PMIC clock
          - pinctrl: pistachio: fix use of irq_of_parse_and_map()
          - cpufreq: fix memory leak in sun50i_cpufreq_nvmem_probe
          - net: hns3: clear inited state and stop client after failed to register netdev
          - net: hns3: fix error log of tx/rx tqps stats
          - net: hns3: modify the return code of hclge_get_ring_chain_from_mbx
          - net: hns3: add validity check for message data length
          - net: hns3: add return value for mailbox handling in PF
          - net/smc: sync err code when tcp connection was refused
          - net: lan966x: fix a couple off by one bugs
          - ip_gre: Make o_seqno start from 0 in native mode
          - ip6_gre: Make o_seqno start from 0 in native mode
          - ip_gre, ip6_gre: Fix race condition on o_seqno in collect_md mode
          - tcp: fix potential xmit stalls caused by TCP_NOTSENT_LOWAT
          - tcp: make sure treq->af_specific is initialized
          - bus: sunxi-rsb: Fix the return value of sunxi_rsb_device_create()
          - clk: sunxi: sun9i-mmc: check return value after calling platform_get_resource()
          - cpufreq: qcom-cpufreq-hw: Clear dcvs interrupts
          - mctp: defer the kfree of object mdev->addrs
          - net: bcmgenet: hide status block before TX timestamping
          - net: phy: marvell10g: fix return value on error
          - net: dsa: mv88e6xxx: Fix port_hidden_wait to account for port_base_addr
          - drm/sun4i: Remove obsolete references to PHYS_OFFSET
          - ice: wait 5 s for EMP reset after firmware flash
          - Bluetooth: hci_event: Fix checking for invalid handle on error status
          - net: dsa: lantiq_gswip: Don't set GSWIP_MII_CFG_RMII_CLK
          - io_uring: check reserved fields for send/sendmsg
          - io_uring: check reserved fields for recv/recvmsg
          - netfilter: nf_conntrack_tcp: re-init for syn packets only
          - netfilter: conntrack: fix udp offload timeout sysctl
          - platform/x86: asus-wmi: Potential buffer overflow in asus_wmi_evaluate_method_buf()
          - platform/x86: asus-wmi: Fix driver not binding when fan curve control probe fails
          - drm/amdkfd: Fix GWS queue count
          - drm/amd/display: Fix memory leak in dcn21_clock_source_create
          - tls: Skip tls_append_frag on zero copy size
          - bnx2x: fix napi API usage sequence
          - net: fec: add missing of_node_put() in fec_enet_init_stop_mode()
          - gfs2: Minor retry logic cleanup
          - gfs2: Make sure not to return short direct writes
          - gfs2: No short reads or writes upon glock contention
          - perf arm-spe: Fix addresses of synthesized SPE events
          - ixgbe: ensure IPsec VF<->PF compatibility
          - net: enetc: allow tc-etf offload even with NETIF_F_CSUM_MASK
          - Revert "ibmvnic: Add ethtool private flag for driver-defined queue limits"
          - tcp: fix F-RTO may not work correctly when receiving DSACK
          - io_uring: fix uninitialized field in rw io_kiocb
          - ASoC: soc-pcm: use GFP_KERNEL when the code is sleepable
          - ASoC: cs35l41: Fix a shift-out-of-bounds warning found by UBSAN
          - ASoC: rt711/5682: check if bus is active before deferred jack detection
          - ASoC: Intel: soc-acpi: correct device endpoints for max98373
          - ASoC: wm8731: Disable the regulator when probing fails
          - Input: cypress-sf - register a callback to disable the regulators
          - ext4: fix bug_on in start_this_handle during umount filesystem
          - arch: xtensa: platforms: Fix deadlock in rs_close()
          - ksmbd: increment reference count of parent fp
          - ksmbd: set fixed sector size to FS_SECTOR_SIZE_INFORMATION
          - erofs: fix use-after-free of on-stack io[]
          - bonding: do not discard lowest hash bit for non layer3+4 hashing
          - x86: __memcpy_flushcache: fix wrong alignment if size > 2^32
          - cifs: destage any unwritten data to the server before calling copychunk_write
          - drivers: net: hippi: Fix deadlock in rr_close()
          - powerpc/perf: Fix 32bit compile
          - ALSA: hda: intel-dsp-config: Add RaptorLake PCI IDs
          - selftest/vm: verify mmap addr in mremap_test
          - selftest/vm: verify remap destination address in mremap_test
          - bfq: Fix warning in bfqq_request_over_limit()
          - Revert "ACPI: processor: idle: fix lockup regression on 32-bit ThinkPad T40"
          - Revert "block: inherit request start time from bio for BLK_CGROUP"
          - zonefs: Fix management of open zones
          - zonefs: Clear inode information flags on inode creation
          - kasan: prevent cpu_quarantine corruption when CPU offline and cache shrink occur at same time
          - mtd: rawnand: qcom: fix memory corruption that causes panic
          - netfilter: Update ip6_route_me_harder to consider L3 domain
          - drm/amdgpu: don't runtime suspend if there are displays attached (v3)
          - drm/i915: Check EDID for HDR static metadata when choosing blc
          - drm/i915: Fix SEL_FETCH_PLANE_*(PIPE_B+) register addresses
          - net: ethernet: stmmac: fix write to sgmii_adapter_base
          - ACPI: processor: idle: Avoid falling back to C3 type C-states
          - thermal: int340x: Fix attr.show callback prototype
          - btrfs: fix direct I/O read repair for split bios
          - btrfs: fix direct I/O writes for split bios on zoned devices
          - btrfs: fix leaked plug after failure syncing log on zoned filesystems
          - btrfs: zoned: use dedicated lock for data relocation
          - btrfs: fix assertion failure during scrub due to block group reallocation
          - ARM: dts: at91: sama7g5ek: enable pull-up on flexcom3 console lines
          - ARM: dts: imx8mm-venice-gw{71xx,72xx,73xx}: fix OTG controller OC mode
          - perf symbol: Pass is_kallsyms to symbols__fixup_end()
          - perf symbol: Update symbols__fixup_end()
          - perf symbol: Remove arch__symbols__fixup_end()
          - tty: n_gsm: fix missing mux reset on config change at responder
          - tty: n_gsm: fix restart handling via CLD command
          - tty: n_gsm: fix decoupled mux resource
          - tty: n_gsm: fix mux cleanup after unregister tty device
          - tty: n_gsm: fix wrong signal octet encoding in convergence layer type 2
          - tty: n_gsm: fix frame reception handling
          - tty: n_gsm: fix malformed counter for out of frame data
          - netfilter: nft_socket: only do sk lookups when indev is available
          - tty: n_gsm: fix insufficient txframe size
          - tty: n_gsm: fix wrong DLCI release order
          - tty: n_gsm: fix missing explicit ldisc flush
          - tty: n_gsm: fix wrong command retry handling
          - tty: n_gsm: fix wrong command frame length field encoding
          - tty: n_gsm: fix wrong signal octets encoding in MSC
          - tty: n_gsm: fix missing tty wakeup in convergence layer type 2
          - tty: n_gsm: fix reset fifo race condition
          - tty: n_gsm: fix incorrect UA handling
          - tty: n_gsm: fix missing update of modem controls after DLCI open
          - tty: n_gsm: fix broken virtual tty handling
          - tty: n_gsm: fix invalid use of MSC in advanced option
          - tty: n_gsm: fix software flow control handling
          - tty: n_gsm: fix sometimes uninitialized warning in gsm_dlci_modem_output()
          - objtool: Fix code relocs vs weak symbols
          - objtool: Fix type of reloc::addend
          - powerpc/64: Add UADDR64 relocation support
      .
        [ Diederik de Haas ]
        * [armhf] drivers/net/ethernet/freescale: Enable FEC as module
          (Closes: #991461)
        * [x86] drivers/extcon: Enable EXTCON_AXP288 as module
        * [x86] drivers/power/supply: Enable AXP288_CHARGER as module
          (Closes: #940672)
      .
        [ Vagrant Cascadian ]
        * [arm64] Enable modules for MNT Reform: DRM_LVDS_CODEC,
          DRM_SIMPLE_BRIDGE, DRM_TI_SN65DSI86, DRM_CDNS_MHDP8546, DRM_IMX_DCSS,
          DRM_PANEL_LVDS, I2C_IMX_LPI2C, I2C_MUX_REG, INTERCONNECT_IMX,
          INTERCONNECT_IMX8MQ, MFD_WM8994, MUX_GPIO, MUX_MMIO, RTC_DRV_PCF8523,
          USB_EHCI_FSL, BACKLIGHT_GPIO, BACKLIGHT_LED, SND_SOC_WM8960,
          SND_SOC_FSL_MICFIL, SND_IMX_SOC, SND_SOC_FSL_ASOC_CARD,
          SND_SOC_IMX_AUDMIX and SND_SOC_IMX_HDMI. Thanks to Johannes Schauer
          Marin Rodrigues. (Closes: #1009858)
      .
        [ Salvatore Bonaccorso ]
        * Bump ABI to 2
      .
      linux (5.17.3-1) unstable; urgency=medium
      .
        * New upstream stable update:
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.17.2
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.17.3
      .
        [ Salvatore Bonaccorso ]
        * linux-kbuild: Include scripts/pahole-flags.sh (Closes: #1008501)
        * [x86] drivers/cpufreq: Enable X86_AMD_PSTATE as module (Closes: #1009302)
        * [rt] Update to 5.17.1-rt17
        * Set ABI to 1
      .
        [ Adriaan Schmidt ]
        * tools: install perf python bindings (Closes: #860957)
      .
        [ Ben Hutchings ]
        * d/bin/gencontrol_signed.py: Add support for pkg.linux.quick profile
        * lintian: Add lintian-overrides to linux-signed-* for non-issues
        * d/salsa-ci.yml: Don't disable signed code
        * d/certs: Add certificate and key to enable test signing in CI
        * d/salsa-ci.yml: Add jobs to build and test the signed packages
      .
        [ Vagrant Cascadian ]
        * [arm64] Add nvmem-rockchip-efuse and phy-rockchip-inno-hdmi to fb-modules
          udeb.
      .
      linux (5.17.1-1~exp1) experimental; urgency=medium
      .
        * New upstream release: https://kernelnewbies.org/Linux_5.17
        * New upstream stable update:
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.17.1
      .
        [ Bastian Blank ]
        * [arm64] Enable HyperV support.  (closes: #1007023)
        * Replace FB_HYPERV with DRM_HYPERV.
        * Allow disabling debug info by build profile.
        * [arm64] Make sure hyperv-daemons are actually build.
      .
        [ Salvatore Bonaccorso ]
        * [rt] Update to 5.17-rt15
      .
        [ Diederik de Haas ]
        * [armhf] Enable SUN8I_THERMAL as module (Closes: #1007799)
      .
      linux (5.17~rc8-1~exp1) experimental; urgency=medium
      .
        * New upstream release candidate
      .
        [ Salvatore Bonaccorso ]
        * [rt] Update to 5.17-rc7-rt13
      .
      linux (5.17~rc7-1~exp1) experimental; urgency=medium
      .
        * New upstream release candidate
      .
        [ Salvatore Bonaccorso ]
        * [rt] Update to 5.17-rc7-rt12
      .
      linux (5.17~rc6-1~exp1) experimental; urgency=medium
      .
        * New upstream release candidate
      .
        [ Salvatore Bonaccorso ]
        * [rt] Update to 5.17-rc6-rt10
      .
      linux (5.17~rc5-1~exp1) experimental; urgency=medium
      .
        * New upstream release candidate
      .
        [ Salvatore Bonaccorso ]
        * [rt] Update to 5.17-rc5-rt8
      .
      linux (5.17~rc4-1~exp1) experimental; urgency=medium
      .
        * New upstream release candidate
      .
        [ Bastian Blank ]
        * Add pkg.linux.nokerneldbg build profile that excludes kernel debug
          packages.
      .
        [ Salvatore Bonaccorso ]
        * [rt] Update to 5.17-rc4-rt7
      .
      linux (5.17~rc3-1~exp1) experimental; urgency=medium
      .
        * New upstream release candidate
      .
        [ Ben Hutchings ]
        * Rebase patches:
          - Drop "x86-32: Disable 3D-Now in generic config"
          - Drop "RISC-V: Use SBI SRST extension when available"
          - Drop "objtool: check: give big enough buffer for pv_ops"
          - Drop part of "sh: Do not use hyphen in exported variable names"
          - Update "add sysctl to disallow unprivileged CLONE_NEWUSER by default"
          - Update "Disable uImage generation for mips generic"
          - Update "MODSIGN: do not load mok when secure boot disabled"
        * [rt] Update to 5.17-rc2-rt4
        * linux-kbuild: Build extract-cert in certs/ instead of scripts/
        * d/rules.real: Pass C compiler options to user-space build in HOSTCFLAGS too
      .
        [ Aurelien Jarno ]
        * [riscv64] Add basic support for StarFive JH7100 RISC-V SoC: enable
          I2C_DESIGNWARE_PLATFORM, MFD_TPS65086, REGULATOR_TPS65086, SERIAL_8250_DW,
          SOC_STARFIVE
      .
      linux (5.16.18-1) unstable; urgency=medium
      .
        * New upstream stable update:
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.15
          - HID: elo: Revert USB reference counting
          - HID: hid-thrustmaster: fix OOB read in thrustmaster_interrupts
          - [arm64] clk: qcom: gdsc: Add support to update GDSC transition delay
          - HID: vivaldi: fix sysfs attributes leak
          - HID: nintendo: check the return value of alloc_workqueue()
          - [arm64] dts: armada-3720-turris-mox: Add missing ethernet0 alias
          - tipc: fix kernel panic when enabling bearer
          - [arm64] net: phy: meson-gxl: fix interrupt handling in forced mode
          - mISDN: Fix memory leak in dsp_pipeline_build()
          - vhost: fix hung thread due to erroneous iotlb entries
          - virtio-blk: Don't use MAX_DISCARD_SEGMENTS if max_discard_seg is zero
          - virtio-blk: Remove BUG_ON() in virtio_queue_rq()
          - isdn: hfcpci: check the return value of dma_set_mask() in setup_hw()
          - net: qlogic: check the return value of dma_alloc_coherent() in
            qed_vf_hw_prepare()
          - esp: Fix possible buffer overflow in ESP transformation (CVE-2022-27666)
          - esp: Fix BEET mode inter address family tunneling on GSO
          - net: gro: move skb_gro_receive_list to udp_offload.c
          - qed: return status of qed_iov_get_link
          - smsc95xx: Ignore -ENODEV errors when device is unplugged
          - gpiolib: acpi: Convert ACPI value of debounce to microseconds
          - [x86] drm/i915/psr: Set "SF Partial Frame Enable" also on full update
          - drm/sun4i: mixer: Fix P010 and P210 format numbers
          - iavf: Fix handling of vlan strip virtual channel messages
          - i40e: stop disabling VFs due to PF error responses
          - ice: stop disabling VFs due to PF error responses
          - ice: Fix error with handling of bonding MTU
          - ice: Don't use GFP_KERNEL in atomic context
          - ice: Fix curr_link_speed advertised speed
          - ethernet: Fix error handling in xemaclite_of_probe
          - tipc: fix incorrect order of state message data sanity check
          - [armhf] net: ethernet: ti: cpts: Handle error for clk_enable
          - ax25: Fix NULL pointer dereference in ax25_kill_by_device
          - net/mlx5: Fix size field in bufferx_reg struct
          - net/mlx5: Fix a race on command flush flow
          - net/mlx5e: Lag, Only handle events from highest priority multipath entry
          - net/mlx5e: SHAMPO, reduce TIR indication
          - NFC: port100: fix use-after-free in port100_send_complete
          - mm: gup: make fault_in_safe_writeable() use fixup_user_fault()
          - net: phy: DP83822: clear MISR2 register to disable interrupts
          - sctp: fix kernel-infoleak for SCTP sockets
          - [arm64] net: bcmgenet: Don't claim WOL when its not available
          - [arm64] net: phy: meson-gxl: improve link-up behavior
          - swiotlb: fix info leak with DMA_FROM_DEVICE (CVE-2022-0854)
          - [arm64] usb: dwc3: pci: add support for the Intel Raptor Lake-S
          - [x86] pinctrl: tigerlake: Revert "Add Alder Lake-M ACPI ID"
          - KVM: Fix lockdep false negative during host resume
          - [x86] kvm: x86: Disable KVM_HC_CLOCK_PAIRING if tsc is in always catchup
            mode
          - [arm64,armhf] spi: rockchip: Fix error in getting num-cs property
          - [arm64,armhf] spi: rockchip: terminate dma transmission when slave abort
          - [arm*] drm/vc4: hdmi: Unregister codec device on unbind
          - of/fdt: move elfcorehdr reservation early for crash dump kernel
          - [x86] kvm: Don't use pv tlb/ipi/sched_yield if on 1 vCPU
          - drivers: hamradio: 6pack: fix UAF bug caused by mod_timer()
          - net-sysfs: add check for netdevice being present to speed_show
          - [armhf] hwmon: (pmbus) Clear pmbus fault/warning bits after read
          - nvme-tcp: send H2CData PDUs based on MAXH2CDATA
          - PCI: Mark all AMD Navi10 and Navi14 GPU ATS as broken
          - gpio: Return EPROBE_DEFER if gc->to_irq is NULL
          - drm/amdgpu: bypass tiling flag check in virtual display case (v2)
          - Revert "xen-netback: remove 'hotplug-status' once it has served its
            purpose"
          - Revert "xen-netback: Check for hotplug-status existence before watching"
          - ipv6: prevent a possible race condition with lifetimes
          - tracing: Ensure trace buffer is at least 4096 bytes large
          - tracing/osnoise: Make osnoise_main to sleep for microseconds
          - [armel,armhf] Spectre-BHB: provide empty stub for non-config
          - fuse: fix fileattr op failure
          - fuse: fix pipe buffer lifetime for direct_io (CVE-2022-1011)
          - [arm64,x86] staging: rtl8723bs: Fix access-point mode deadlock
          - [arm64] net: macb: Fix lost RX packet wakeup race in NAPI receive
          - [arm64] mmc: meson: Fix usage of meson_mmc_post_req()
          - tracing/osnoise: Force quiescent states while tracing
          - tracing/osnoise: Do not unregister events twice
          - [arm64] dts: marvell: armada-37xx: Remap IO space to bus address 0x0
          - [arm64] Ensure execute-only permissions are not allowed without EPAN
          - swiotlb: rework "fix info leak with DMA_FROM_DEVICE" (CVE-2022-0854)
          - virtio: unexport virtio_finalize_features
          - virtio: acknowledge all features before access
          - net/mlx5: Fix offloading with ESWITCH_IPV4_TTL_MODIFY_ENABLE
          - [armel,armhf] fix Thumb2 regression with Spectre BHB
          - watch_queue: Fix filter limit check (CVE-2022-0995)
          - watch_queue, pipe: Free watchqueue state after clearing pipe ring
            (CVE-2022-0995)
          - watch_queue: Fix to release page in ->release() (CVE-2022-0995)
          - watch_queue: Fix to always request a pow-of-2 pipe ring size
            (CVE-2022-0995)
          - watch_queue: Fix the alloc bitmap size to reflect notes allocated
            (CVE-2022-0995)
          - watch_queue: Free the alloc bitmap when the watch_queue is torn down
            (CVE-2022-0995)
          - watch_queue: Fix lack of barrier/sync/lock between post and read
            (CVE-2022-0995)
          - watch_queue: Make comment about setting ->defunct more accurate
            (CVE-2022-0995)
          - [x86] boot: Fix memremap of setup_indirect structures
          - [x86] boot: Add setup_indirect support in early_memremap_is_setup_data()
          - [x86] module: Fix the paravirt vs alternative order
          - [x86] traps: Mark do_int3() NOKPROBE_SYMBOL
          - perf parse: Fix event parser error for hybrid systems
          - btrfs: make send work with concurrent block group relocation
          - vhost: allow batching hint without size
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.16
          - Revert "xfrm: state and policy should fail if XFRMA_IF_ID 0"
          - [arm64] dts: rockchip: fix rk3399-puma-haikou USB OTG mode
          - xfrm: Check if_id in xfrm_migrate
          - xfrm: Fix xfrm migrate issues when address family changes
          - mac80211: refuse aggregations sessions before authorized
          - [mips64el,mipsel] smp: fill in sibling and core maps earlier
          - Bluetooth: hci_core: Fix leaking sent_cmd skb
          - [x86] atm: firestream: check the return value of ioremap() in fs_init()
          - netfilter: egress: silence egress hook lockdep splats
          - Input: goodix - use the new soc_intel_is_byt() helper
          - Input: goodix - workaround Cherry Trail devices with a bogus ACPI
            Interrupt() resource
          - iwlwifi: don't advertise TWT support
          - drm/vrr: Set VRR capable prop only if it is attached to connector
          - nl80211: Update bss channel on channel switch for P2P_CLIENT
          - tcp: make tcp_read_sock() more robust
          - sfc: extend the locking on mcdi->seqno
          - bnx2: Fix an error message
          - ice: Fix race condition during interface enslave
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.17
          - crypto: qcom-rng - ensure buffer for generate is completely filled
          - ocfs2: fix crash when initialize filecheck kobj fails
          - mm: swap: get rid of livelock in swapin readahead
          - block: release rq qos structures for queue without disk
          - [x86] drm/mgag200: Fix PLL setup for g200wb and g200ew
          - efi: fix return value of __setup handlers
          - alx: acquire mutex for alx_reinit in alx_change_mtu
          - vsock: each transport cycles only on its own sockets
          - esp6: fix check on ipv6_skip_exthdr's return value
          - net: phy: marvell: Fix invalid comparison in the resume and suspend
            functions
          - net/packet: fix slab-out-of-bounds access in packet_recvmsg()
          - nvmet: revert "nvmet: make discovery NQN configurable"
          - atm: eni: Add check for dma_map_single
          - ice: fix NULL pointer dereference in ice_update_vsi_tx_ring_stats()
          - iavf: Fix double free in iavf_reset_task
          - hv_netvsc: Add check for kvmalloc_array
          - [armhf] drm/imx: parallel-display: Remove bus flags check in
            imx_pd_bridge_atomic_check()
          - [arm64,armhf] drm/panel: simple: Fix Innolux G070Y2-L01 BPP settings
          - net: handle ARPHRD_PIMREG in dev_is_mac_header_xmit()
          - [arm64,armhf] net: dsa: Add missing of_node_put() in dsa_port_parse_of
          - net: phy: mscc: Add MODULE_FIRMWARE macros
          - bnx2x: fix built-in kernel driver load failure
          - [arm64] net: bcmgenet: skip invalid partial checksums
          - [arm64] net: mscc: ocelot: fix backwards compatibility with single-chain
            tc-flower offload
          - iavf: Fix hang during reboot/shutdown
          - usb: gadget: rndis: prevent integer overflow in rndis_set_response()
          - usb: gadget: Fix use-after-free bug by not setting udc->dev.driver
          - usb: usbtmc: Fix bug in pipe direction for control transfers
          - scsi: mpt3sas: Page fault in reply q processing
          - Input: aiptek - properly check endpoint type
          - [arm64] errata: avoid duplicate field initializer
          - perf symbols: Fix symbol size calculation condition
          - Revert "ath10k: drop beacon and probe response which leak from other
            channel"
          - btrfs: skip reserved bytes warning on unmount after log cleanup failure
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.18
          - Bluetooth: btusb: Add another Realtek 8761BU
          - llc: fix netdevice reference leaks in llc_ui_bind()
          - ALSA: oss: Fix PCM OSS buffer allocation overflow
          - ALSA: hda/realtek: Add quirk for Clevo NP70PNJ
          - ALSA: hda/realtek: Add quirk for Clevo NP50PNJ
          - ALSA: hda/realtek - Fix headset mic problem for a HP machine with alc671
          - ALSA: hda/realtek: Add quirk for ASUS GA402
          - ALSA: pcm: Fix races among concurrent hw_params and hw_free calls
            (CVE-2022-1048)
          - ALSA: pcm: Fix races among concurrent read/write and buffer changes
            (CVE-2022-1048)
          - nfc: st21nfca: Fix potential buffer overflows in EVT_TRANSACTION
            (CVE-2022-26490)
          - net: ipv6: fix skb_over_panic in __ip6_append_data
          - tpm: Fix error handling in async work
          - ALSA: pcm: Fix races among concurrent prepare and hw_params/hw_free calls
            (CVE-2022-1048)
          - ALSA: pcm: Fix races among concurrent prealloc proc writes (CVE-2022-1048)
          - ALSA: pcm: Add stream lock during PCM reset ioctl operations
          - ALSA: usb-audio: Add mute TLV for playback volumes on RODE NT-USB
          - ALSA: cmipci: Restore aux vol on suspend/resume
          - ALSA: pci: fix reading of swapped values from pcmreg in AC97 codec
          - [arm64] drivers: net: xgene: Fix regression in CRC stripping
          - netfilter: nf_tables: initialize registers in nft_do_chain()
            (CVE-2022-1016)
          - netfilter: nf_tables: validate registers coming from userspace.
            (CVE-2022-1015)
          - [x86] ACPI / x86: Work around broken XSDT on Advantech DAC-BJ01 board
          - ACPI: battery: Add device HID and quirk for Microsoft Surface Go 3
          - [x86] ACPI: video: Force backlight native for Clevo NL5xRU and NL5xNU
          - [x86] crypto: qat - disable registration of algorithms
          - Bluetooth: btusb: Add one more Bluetooth part for the Realtek RTL8852AE
          - Revert "ath: add support for special 0x0 regulatory domain"
          - drm/virtio: Ensure that objs is not NULL in virtio_gpu_array_put_free()
          - rcu: Don't deboost before reporting expedited quiescent state
          - uaccess: fix integer overflow on access_ok()
          - mac80211: fix potential double free on mesh join
          - tpm: use try_get_ops() in tpm-space.c
          - [arm64] wcn36xx: Differentiate wcn3660 from wcn3620
          - llc: only change llc->dev when bind() succeeds
      .
        [ Salvatore Bonaccorso ]
        * Bump ABI to 6
      .
        [ Vincent Blut ]
        * sound/pci/hda: Enable SND_HDA_CODEC_CS8409 as module (Closes: #1008122)
      .
      linux (5.16.14-1) unstable; urgency=medium
      .
        * New upstream stable update:
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.13
          - mac80211_hwsim: report NOACK frames in tx_status
          - mac80211_hwsim: initialize ieee80211_tx_info at hw_scan_work
          - [arm*] i2c: bcm2835: Avoid clock stretching timeouts
          - [x86] ASoC: rt5682s: do not block workqueue if card is unbound
          - ASoC: rt5682: do not block workqueue if card is unbound
          - regulator: core: fix false positive in regulator_late_cleanup()
          - Input: clear BTN_RIGHT/MIDDLE on buttonpads
          - btrfs: get rid of warning on transaction commit when using flushoncommit
          - [arm64] KVM: arm64: vgic: Read HW interrupt pending state from the HW
          - block: loop:use kstatfs.f_bsize of backing file to set discard granularity
          - tipc: fix a bit overflow in tipc_crypto_key_rcv()
          - cifs: do not use uninitialized data in the owner/group sid
          - cifs: fix double free race when mount fails in cifs_get_root()
          - [amd64] HID: amd_sfh: Handle amd_sfh work buffer in PM ops
          - [amd64] HID: amd_sfh: Add functionality to clear interrupts
          - [amd64] HID: amd_sfh: Add interrupt handler to process interrupts
          - cifs: modefromsids must add an ACE for authenticated users
          - drm/amd/pm: correct UMD pstate clocks for Dimgrey Cavefish and Beige Goby
          - net: usb: cdc_mbim: avoid altsetting toggling for Telit FN990
          - block-map: add __GFP_ZERO flag for alloc_page in function bio_copy_kern
          - usb: gadget: don't release an existing dev->buf (CVE-2022-24958)
          - usb: gadget: clear related members when goto fail (CVE-2022-24958)
          - exfat: reuse exfat_inode_info variable instead of calling EXFAT_I()
          - exfat: fix i_blocks for files truncated over 4 GiB
          - tracing: Add test for user space strings when filtering on string pointers
          - [arm64] Mark start_backtrace() notrace and NOKPROBE_SYMBOL
          - [armhf] serial: stm32: prevent TDR register overwrite when sending x_char
          - [arm64] KVM: arm64: Workaround Cortex-A510's single-step and PAC trap
            errata
          - ext4: drop ineligible txn start stop APIs
          - ext4: simplify updating of fast commit stats
          - ext4: fast commit may not fallback for ineligible commit
          - ext4: fast commit may miss file actions
          - sched/fair: Fix fault in reweight_entity
          - [x86] KVM: x86: Add KVM_CAP_ENABLE_CAP to x86
          - ata: pata_hpt37x: fix PCI clock detection
          - drm/amdgpu: check vm ready by amdgpu_vm->evicting flag
          - tracing: Add ustring operation to filtering string pointers
          - ipv6: fix skb drops in igmp6_event_query() and igmp6_event_report()
            (CVE-2022-0742)
          - btrfs: defrag: bring back the old file extent search behavior
          - btrfs: defrag: don't use merged extent map for their generation check
          - [x86] ALSA: intel_hdmi: Fix reference to PCM buffer address
          - ucounts: Fix systemd LimitNPROC with private users regression
          - binfmt_elf: Avoid total_mapping_size for ET_EXEC
          - ASoC: ops: Shift tested values in snd_soc_put_volsw() by +min
          - [amd64] iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
          - [amd64] iommu/amd: Recover from event log overflow
          - [x86] drm/i915: s/JSP2/ICP2/ PCH
          - drm/amd/display: Reduce dmesg error to a debug print
          - xen/netfront: destroy queues before real_num_tx_queues is zeroed
          - mac80211: fix EAPoL rekey fail in 802.3 rx path
          - blktrace: fix use after free for struct blk_trace
          - mm: Consider __GFP_NOWARN flag for oversized kvmalloc() calls
          - xfrm: fix MTU regression
          - netfilter: fix use-after-free in __nf_register_net_hook()
          - bpf, sockmap: Do not ignore orig_len parameter
          - xfrm: fix the if_id check in changelink
          - xfrm: enforce validity of offload input flags
          - e1000e: Correct NVM checksum verification flow
          - net: fix up skbs delta_truesize in UDP GRO frag_list
          - netfilter: nf_queue: don't assume sk is full socket
          - netfilter: nf_queue: fix possible use-after-free
          - netfilter: nf_queue: handle socket prefetch
          - batman-adv: Request iflink once in batadv-on-batadv check
          - batman-adv: Request iflink once in batadv_get_real_netdevice
          - batman-adv: Don't expect inter-netns unique iflink indices
          - net: ipv6: ensure we call ipv6_mc_down() at most once
          - net: dcb: flush lingering app table entries for unregistered devices
          - net/smc: fix connection leak
          - net/smc: fix unexpected SMC_CLC_DECL_ERR_REGRMB error generated by client
          - net/smc: fix unexpected SMC_CLC_DECL_ERR_REGRMB error cause by server
          - btrfs: fix ENOSPC failure when attempting direct IO write into NOCOW range
          - [amd64] platform/x86: amd-pmc: Set QOS during suspend on CZN w/ timer
            wakeup
          - mac80211: fix forwarded mesh frames AC & queue selection
          - net: stmmac: fix return value of __setup handler
          - mac80211: treat some SAE auth steps as final
          - iavf: Fix missing check for running netdev
          - net: arcnet: com20020: Fix null-ptr-deref in com20020pci_probe()
          - ixgbe: xsk: change !netif_carrier_ok() handling in ixgbe_xmit_zc()
          - iavf: Fix deadlock in iavf_reset_task
          - efivars: Respect "block" flag in efivar_entry_set_safe()
          - [armhf] firmware: arm_scmi: Remove space in MODULE_ALIAS name
          - can: gs_usb: change active_channels's type from atomic_t to u8
          - [arm64,armhf] iommu/tegra-smmu: Fix missing put_device() call in
            tegra_smmu_find
          - igc: igc_read_phy_reg_gpy: drop premature return
          - [mips*] setup: fix setnocoherentio() boolean setting
          - [armel,armhf] 9182/1: mmu: fix returns from early_param() and __setup()
            functions
          - mptcp: Correctly set DATA_FIN timeout when number of retransmits is large
          - [arm64,armhf] pinctrl: sunxi: Use unique lockdep classes for IRQs
          - igc: igc_write_phy_reg_gpy: drop premature return
          - memfd: fix F_SEAL_WRITE after shmem huge page allocated
          - [s390x] setup: preserve memory at OLDMEM_BASE and OLDMEM_SIZE
          - [s390x] extable: fix exception table sorting
          - sched: Fix yet more sched_fork() races
          - [arm64] dts: rockchip: fix Quartz64-A ddr regulator voltage
          - [amd64] iommu/amd: Fix I/O page table memory leak
          - [armhf] dts: switch timer config to common devkit8000 devicetree
          - [armhf] dts: Use 32KiHz oscillator on devkit8000
          - [arm64] soc: fsl: guts: Revert commit 3c0d64e867ed
          - [arm64] soc: fsl: guts: Add a missing memory allocation failure check
          - [arm64] soc: imx: gpcv2: Fix clock disabling imbalance in error path
          - netfilter: nf_tables: prefer kfree_rcu(ptr, rcu) variant
          - [armhf] tegra: Move panels to AUX bus
          - Bluetooth: Fix bt_skb_sendmmsg not allocating partial chunks
          - net: stmmac: enhance XDP ZC driver level switching performance
          - net: stmmac: only enable DMA interrupts when ready
          - net: chelsio: cxgb3: check the return value of pci_find_capability()
          - iavf: Add trace while removing device
          - iavf: Rework mutexes for better synchronisation
          - iavf: Add waiting so the port is initialized in remove
          - iavf: Fix init state closure on remove
          - iavf: Fix locking for VIRTCHNL_OP_GET_OFFLOAD_VLAN_V2_CAPS
          - iavf: Fix race in init state
          - iavf: Fix __IAVF_RESETTING state usage
          - [x86] drm/i915/guc/slpc: Correct the param count for unset param
          - e1000e: Fix possible HW unit hang after an s0ix exit
          - nl80211: Handle nla_memdup failures in handle_nan_filter
          - ptp: ocp: Add ptp_ocp_adjtime_coarse for large adjustments
          - drm/amdgpu: fix suspend/resume hang regression
          - net: dcb: disable softirqs in dcbnl_flush_dev()
          - net: stmmac: perserve TX and RX coalesce value during XDP setup
          - Input: elan_i2c - move regulator_[en|dis]able() out of
            elan_[en|dis]able_power()
          - Input: elan_i2c - fix regulator enable count imbalance after
            suspend/resume
          - HID: add mapping for KEY_DICTATE
          - HID: add mapping for KEY_ALL_APPLICATIONS
          - tracing/histogram: Fix sorting on old "cpu" value
          - tracing: Fix return value of __setup handlers
          - btrfs: fix lost prealloc extents beyond eof after full fsync
          - btrfs: fix relocation crash due to premature return from
            btrfs_commit_transaction()
          - btrfs: subpage: fix a wrong check on subpage->writers
          - btrfs: do not WARN_ON() if we have PageError set
          - btrfs: qgroup: fix deadlock between rescan worker and remove qgroup
          - btrfs: add missing run of delayed items after unlink during log replay
          - btrfs: fallback to blocking mode when doing async dio over multiple
            extents
          - btrfs: do not start relocation until in progress drops are done
          - Revert "xfrm: xfrm_state_mtu should return at least 1280 for ipv6"
          - proc: fix documentation and description of pagemap
          - [x86] kvmclock: Fix Hyper-V Isolated VM's boot issue when vCPUs > 64
          - [s390x] ftrace: fix arch_ftrace_get_regs implementation
          - [s390x] ftrace: fix ftrace_caller/ftrace_regs_caller generation
          - [x86] KVM: x86/mmu: Passing up the error state of mmu_alloc_shadow_roots()
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.14
          - [armhf] report Spectre v2 status through sysfs
          - [armel,armhf] early traps initialisation
          - [armel,armhf] use LOADADDR() to get load address of sections
          - [armel,armhf] Spectre-BHB workaround
          - [armhf] include unprivileged BPF status in Spectre V2 reporting
          - [arm64] add ID_AA64ISAR2_EL1 sys register
          - [arm64] cpufeature: add HWCAP for FEAT_AFP
          - [arm64] cpufeature: add HWCAP for FEAT_RPRES
          - [arm64] entry.S: Add ventry overflow sanity checks
          - [arm64] spectre: Rename spectre_v4_patch_fw_mitigation_conduit
          - [arm64] KVM: arm64: Allow indirect vectors to be used without SPECTRE_V3A
          - [arm64] entry: Make the trampoline cleanup optional
          - [arm64] entry: Free up another register on kpti's tramp_exit path
          - [arm64] entry: Move the trampoline data page before the text page
          - [arm64] entry: Allow tramp_alias to access symbols after the 4K boundary
          - [arm64] entry: Don't assume tramp_vectors is the start of the vectors
          - [arm64] entry: Move trampoline macros out of ifdef'd section
          - [arm64] entry: Make the kpti trampoline's kpti sequence optional
          - [arm64] entry: Allow the trampoline text to occupy multiple pages
          - [arm64] entry: Add non-kpti __bp_harden_el1_vectors for mitigations
          - [arm64] entry: Add vectors that have the bhb mitigation sequences
          - [arm64] entry: Add macro for reading symbol addresses from the trampoline
          - [arm64] Add percpu vectors for EL1
          - [arm64] proton-pack: Report Spectre-BHB vulnerabilities as part of
            Spectre-v2
          - [arm64] Mitigate spectre style branch history side channels
          - [arm64] KVM: arm64: Allow SMCCC_ARCH_WORKAROUND_3 to be discovered and
            migrated
          - [arm64] Use the clearbhb instruction in mitigations
          - [arm64] proton-pack: Include unprivileged eBPF status in Spectre v2
            mitigation reporting
          - [armel,armhf] fix co-processor register typo
          - [armel,armhf] Do not use NOCROSSREFS directive with ld.lld
          - [arm64] Do not include __READ_ONCE() block in assembly files
          - [armhf] fix build warning in proc-v7-bugs.c
          - xen/xenbus: don't let xenbus_grant_ring() remove grants in error case
            (CVE-2022-23040, XSA-396)
          - xen/grant-table: add gnttab_try_end_foreign_access() (CVE-2022-23036,
            CVE-2022-23038, XSA-396)
          - xen/blkfront: don't use gnttab_query_foreign_access() for mapped status
            (CVE-2022-23036, XSA-396)
          - xen/netfront: don't use gnttab_query_foreign_access() for mapped status
            (CVE-2022-23037, XSA-396)
          - xen/scsifront: don't use gnttab_query_foreign_access() for mapped status
            (CVE-2022-23038, XSA-396)
          - xen/gntalloc: don't use gnttab_query_foreign_access() (CVE-2022-23039,
            XSA-396)
          - xen: remove gnttab_query_foreign_access()
          - xen/9p: use alloc/free_pages_exact() (CVE-2022-23041, XSA-396)
          - xen/pvcalls: use alloc/free_pages_exact() (CVE-2022-23041, XSA-396)
          - xen/gnttab: fix gnttab_end_foreign_access() without page specified
            (CVE-2022-23041, XSA-396)
          - xen/netfront: react properly to failing gnttab_end_foreign_access_ref()
            (CVE-2022-23042, XSA-396)
          - Revert "ACPI: PM: s2idle: Cancel wakeup before dispatching EC GPE"
      .
        [ Bastian Blank ]
        * [arm64] Enable hyperv-daemons package.
      .
        [ Salvatore Bonaccorso ]
        * Bump ABI to 5
      062d5aad
    • Lorenzo "Palinuro" Faletra's avatar
      64175be2
  6. 11 Mar, 2022 2 commits
    • Lorenzo "Palinuro" Faletra's avatar
      Import Debian changes 5.16.12-2parrot1 · e070cd5a
      Lorenzo "Palinuro" Faletra authored
      linux (5.16.12-2parrot1) parrot-updates; urgency=medium
      .
        * Import new Debian release.
        * Apply parrot patches for wifi drivers.
        * Disable secure boot on debian build configs.
        * Switch timer frequency from 250hz to 300hz.
      .
      linux (5.16.12-1) unstable; urgency=high
      .
        * New upstream stable update:
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.12
          - mm/filemap: Fix handling of THPs in generic_file_buffered_read()
          - cgroup/cpuset: Fix a race between cpuset_attach() and cpu hotplug
          - btrfs: tree-checker: check item_size for inode_item
          - btrfs: tree-checker: check item_size for dev_item
          - slab: remove __alloc_size attribute from __kmalloc_track_caller
          - io_uring: don't convert to jiffies for waiting on timeouts
          - io_uring: disallow modification of rsrc_data during quiesce
          - selinux: fix misuse of mutex_is_locked()
          - vhost/vsock: don't check owner in vhost_vsock_stop() while releasing
          - [x86] KVM: x86/mmu: make apf token non-zero to fix bug
          - [x86] KVM: x86: nSVM: disallow userspace setting of MSR_AMD64_TSC_RATIO to
            non default value when tsc scaling disabled
          - drm/amd: Check if ASPM is enabled from PCIe subsystem
          - drm/amdgpu: disable MMHUB PG for Picasso
          - drm/amdgpu: do not enable asic reset for raven2
          - [x86] drm/i915: Widen the QGV point mask
          - [x86] drm/i915: Disconnect PHYs left connected by BIOS on disabled ports
          - [x86] drm/i915: Correctly populate use_sagv_wm for all pipes
          - [x86] drm/i915: Fix bw atomic check when switching between SAGV vs. no
            SAGV
          - sr9700: sanity check for packet length
          - USB: zaurus: support another broken Zaurus
          - CDC-NCM: avoid overflow in sanity checking
          - ping: remove pr_err from ping_lookup
          - Revert "i40e: Fix reset bw limit when DCB enabled with 1 TC"
          - [arm64,armhf] gpu: host1x: Always return syncpoint value when waiting
          - perf data: Fix double free in perf_session__delete()
          - mptcp: fix race in incoming ADD_ADDR option processing
          - mptcp: add mibs counter for ignored incoming options
          - bnx2x: fix driver load from initrd
          - bnxt_en: Fix devlink fw_activate
          - bnxt_en: Fix active FEC reporting to ethtool
          - bnxt_en: Fix offline ethtool selftest with RDMA enabled
          - bnxt_en: Fix occasional ethtool -t loopback test failures
          - bnxt_en: Fix incorrect multicast rx mask setting when not requested
          - bnxt_en: Restore the resets_reliable flag in bnxt_open()
          - hwmon: Handle failure to register sensor with thermal zone correctly
          - net/mlx5: Fix tc max supported prio for nic mode
          - ice: fix setting l4 port flag when adding filter
          - ice: fix concurrent reset and removal of VFs
          - ice: check the return of ice_ptp_gettimex64
          - ice: initialize local variable 'tlv'
          - net/mlx5: Update the list of the PCI supported devices
          - bpf: Fix crash due to incorrect copy_map_value
          - bpf: Do not try bpf_msg_push_data with len 0
          - bpf: Fix a bpf_timer initialization issue
          - bpf: Add schedule points in batch ops
          - io_uring: add a schedule point in io_add_buffers()
          - net: __pskb_pull_tail() & pskb_carve_frag_list() drop_monitor friends
          - nvme: also mark passthrough-only namespaces ready in nvme_update_ns_info
          - tipc: Fix end of loop tests for list_for_each_entry()
          - gso: do not skip outer ip header in case of ipip and net_failover
          - [armel,armhf] net: mv643xx_eth: process retval from of_get_mac_address
          - openvswitch: Fix setting ipv6 fields causing hw csum failure
          - drm/edid: Always set RGB444
          - net/mlx5e: Fix wrong return value on ioctl EEPROM query failure
          - net/mlx5e: TC, Reject rules with forward and drop actions
          - net/mlx5e: TC, Reject rules with drop and modify hdr action
          - block: clear iocb->private in blkdev_bio_end_io_async()
          - [arm*] drm/vc4: crtc: Fix runtime_pm reference counting
          - [x86] drm/i915/dg2: Print PHY name properly on calibration error
          - drm/amd/display: For vblank_disable_immediate, check PSR is really used
          - net/sched: act_ct: Fix flow table lookup after ct clear or switching zones
          - net: Force inlining of checksum functions in net/checksum.h
          - netfilter: nf_tables: unregister flowtable hooks on netns exit
          - [arm64,armhf] net: dsa: avoid call to __dev_set_promiscuity() while
            rtnl_mutex isn't held
          - nfp: flower: Fix a potential leak in nfp_tunnel_add_shared_mac()
          - netfilter: nf_tables: fix memory leak during stateful obj update
          - net/smc: Use a mutex for locking "struct smc_pnettable"
          - [x86] surface: surface3_power: Fix battery readings on batteries without a
            serial number
          - udp_tunnel: Fix end of loop test in udp_tunnel_nic_unregister()
          - net/mlx5: DR, Cache STE shadow memory
          - net/mlx5: DR, Don't allow match on IP w/o matching on full
            ethertype/ip_version
          - net/mlx5: Fix possible deadlock on rule deletion
          - net/mlx5: Fix wrong limitation of metadata match on ecpf
          - net/mlx5: DR, Fix the threshold that defines when pool sync is initiated
          - net/mlx5e: MPLSoUDP decap, fix check for unsupported matches
          - net/mlx5e: kTLS, Use CHECKSUM_UNNECESSARY for device-offloaded packets
          - net/mlx5: DR, Fix slab-out-of-bounds in mlx5_cmd_dr_create_fte
          - net/mlx5: Update log_max_qp value to be 17 at most
          - net/mlx5e: Add missing increment of count
          - [armel,armhf] PCI: mvebu: Fix device enumeration regression
          - [arm64,armhf] gpio: rockchip: Reset int_bothedge when changing trigger
          - regmap-irq: Update interrupt clear register for proper reset
          - net: use sk_is_tcp() in more places
          - net-timestamp: convert sk->sk_tskey to atomic_t
          - bnxt_en: Increase firmware message response DMA wait time
          - configfs: fix a race in configfs_{,un}register_subsystem()
          - RDMA/ib_srp: Fix a deadlock
          - bpf: Extend kfunc with PTR_TO_CTX, PTR_TO_MEM argument support
          - bpf: Fix crash due to out of bounds access into reg2btf_ids.
          - tracing: Dump stacktrace trigger to the corresponding instance
          - tracing: Have traceon and traceoff trigger honor the instance
          - iio:imu:adis16480: fix buffering for devices with no burst mode
          - iio: adc: ad7124: fix mask used for setting AIN_BUFP & AIN_BUFM bits
          - iio: imu: st_lsm6dsx: wait for settling time in st_lsm6dsx_read_oneshot
          - iio: Fix error handling for PM
          - ata: pata_hpt37x: disable primary channel on HPT371
          - Revert "USB: serial: ch341: add new Product ID for CH341A"
          - usb: gadget: rndis: add spinlock for rndis response list
          - tracefs: Set the group ownership in apply_options() not parse_options()
          - USB: serial: option: add support for DW5829e
          - USB: serial: option: add Telit LE910R1 compositions
          - [arm*] usb: dwc2: drd: fix soft connect when gadget is unconfigured
          - [arm64] usb: dwc3: pci: Add "snps,dis_u2_susphy_quirk" for Intel Bay Trail
          - [arm64] usb: dwc3: pci: Fix Bay Trail phy GPIO mappings
          - [arm64,armhf] usb: dwc3: gadget: Let the interrupt handler disable bottom
            halves.
          - xhci: re-initialize the HC during resume if HCE was set
          - xhci: Prevent futile URB re-submissions due to incorrect return value.
          - nvmem: core: Fix a conflict between MTD and NVMEM on wp-gpios property
          - mtd: core: Fix a conflict between MTD and NVMEM on wp-gpios property
          - driver core: Free DMA range map when device is released
          - btrfs: defrag: don't try to merge regular extents with preallocated
            extents
          - btrfs: defrag: don't defrag extents which are already at max capacity
          - btrfs: defrag: remove an ambiguous condition for rejection
          - btrfs: prevent copying too big compressed lzo segment
          - btrfs: defrag: allow defrag_one_cluster() to skip large extent which is
            not a target
          - btrfs: autodefrag: only scan one inode once
          - btrfs: reduce extent threshold for autodefrag
          - RDMA/cma: Do not change route.addr.src_addr outside state checks
          - [amd64] thermal: int340x: fix memory leak in int3400_notify()
          - [x86] tps6598x: clear int mask on probe failure
          - [amd64] IB/qib: Fix duplicate sysfs directory name
          - mm/hugetlb: fix kernel crash with hugetlb mremap
          - hugetlbfs: fix a truncation issue in hugepages parameter
          - tty: n_gsm: fix encoding of control signal octet bit DV
          - tty: n_gsm: fix encoding of command/response bit
          - tty: n_gsm: fix proper link termination after failed open
          - tty: n_gsm: fix NULL pointer access due to DLCI release
          - tty: n_gsm: fix wrong tty control line for flow control
          - tty: n_gsm: fix wrong modem processing in convergence layer type 2
          - tty: n_gsm: fix deadlock in gsmtty_open()
          - memblock: use kfree() to release kmalloced memblock regions
      .
        [ Vincent Blut ]
        * drivers/leds: Enable LEDS_CLASS_MULTICOLOR as module (Closes: #1006490)
      .
        [ Salvatore Bonaccorso ]
        * Bump ABI to 4
        * Mitigate Spectre v2-type Branch History Buffer attacks (CVE-2022-0001,
          CVE-2022-0002)
          - [x86] speculation: Rename RETPOLINE_AMD to RETPOLINE_LFENCE
          - [x86] speculation: Add eIBRS + Retpoline options
          - Documentation/hw-vuln: Update spectre doc
          - [x86] speculation: Include unprivileged eBPF status in Spectre v2
            mitigation reporting
          - [x86] speculation: Use generic retpoline by default on AMD
          - [x86] speculation: Update link to AMD speculation whitepaper
          - [x86] speculation: Warn about Spectre v2 LFENCE mitigation
          - [x86] speculation: Warn about eIBRS + LFENCE + Unprivileged eBPF + SMT
      .
        [ Ben Hutchings [
        * module: Avoid ABI changes when debug info is disabled
      .
      linux (5.16.11-1) unstable; urgency=medium
      .
        * New upstream stable update:
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.11
          - drm/nouveau/pmu/gm200-: use alternate falcon reset sequence
          - HID:Add support for UGTABLET WP5540
          - [x86] Revert "svm: Add warning message for AVIC IPI invalid target"
          - mmc: block: fix read single on recovery logic
          - mm: don't try to NUMA-migrate COW pages that have other uses
          - [amd64] HID: amd_sfh: Add illuminance mask to limit ALS max value
          - [amd64] HID: amd_sfh: Increase sensor command timeout
          - [amd64] HID: amd_sfh: Correct the structure field name
          - [amd64] PCI: hv: Fix NUMA node assignment when kernel boots with custom
            NUMA topology
          - HID: apple: Set the tilde quirk flag on the Wellspring 5 and later
          - btrfs: don't hold CPU for too long when defragging a file
          - btrfs: send: in case of IO error log it
          - btrfs: defrag: don't try to defrag extents which are under writeback
          - [amd64] platform/x86: amd-pmc: Correct usage of SMU version
          - net: ieee802154: at86rf230: Stop leaking skb's
          - ax25: improve the incomplete fix to avoid UAF and NPD bugs
          - cifs: unlock chan_lock before calling cifs_put_tcp_session
          - vfs: make freeze_super abort when sync_filesystem returns error
          - vfs: make sync_filesystem return errors from ->sync_fs
          - quota: make dquot_quota_sync return errors from ->sync_fs
          - scsi: pm80xx: Fix double completion for SATA devices
          - scsi: core: Reallocate device's budget map on queue depth change
          - scsi: pm8001: Fix use-after-free for aborted TMF sas_task
          - scsi: pm8001: Fix use-after-free for aborted SSP/STP sas_task
          - drm/amd: Warn users about potential s0ix problems
          - nvme: fix a possible use-after-free in controller reset during load
          - nvme-tcp: fix possible use-after-free in transport error_recovery work
          - nvme-rdma: fix possible use-after-free in transport error_recovery work
          - drm/amd: add support to check whether the system is set to s3
          - drm/amd: Only run s3 or s0ix if system is configured properly
          - drm/amdgpu: fix logic inversion in check
          - [amd64] x86/Xen: streamline (and fix) PV CPU enumeration
          - Revert "module, async: async_synchronize_full() on module init iff async
            is used"
          - random: wake up /dev/random writers after zap
          - [x86] KVM: x86/xen: Fix runstate updates to be atomic when preempting vCPU
          - [x86] KVM: x86: nSVM/nVMX: set nested_run_pending on VM entry which is a
            result of RSM
          - [x86] KVM: x86: SVM: don't passthrough SMAP/SMEP/PKE bits in !NPT &&
            !gCR0.PG case
          - [x86] KVM: x86: nSVM: fix potential NULL derefernce on nested migration
          - [x86] KVM: x86: nSVM: mark vmcb01 as dirty when restoring SMM saved state
          - iwlwifi: remove deprecated broadcast filtering feature
          - iwlwifi: fix use-after-free (Closes: #1005884)
          - drm/radeon: Fix backlight control on iMac 12,1
          - drm/atomic: Don't pollute crtc_state->mode_blob with error pointers
          - drm/amdgpu: skipping SDMA hw_init and hw_fini for S0ix.
          - [x86] drm/i915/opregion: check port number bounds for SWSCI display power
            state
          - [x86] drm/i915: Fix dbuf slice config lookup
          - [x86] drm/i915: Fix mbus join config lookup
          - vsock: remove vsock from connected table when connect is interrupted by a
            signal
          - [arm64] tee: export teedev_open() and teedev_close_context()
          - [arm64] optee: use driver internal tee_context for some rpc
          - [arm*] drm/cma-helper: Set VM_DONTEXPAND for mmap
          - [x86] drm/i915/gvt: Make DRM_I915_GVT depend on X86
          - [x86] drm/i915/ttm: tweak priority hint selection
          - iwlwifi: pcie: fix locking when "HW not ready"
          - iwlwifi: pcie: gen2: fix locking when "HW not ready"
          - iwlwifi: mvm: fix condition which checks the version of rate_n_flags
          - iwlwifi: fix iwl_legacy_rate_to_fw_idx
          - iwlwifi: mvm: don't send SAR GEO command for 3160 devices
          - netfilter: nft_synproxy: unregister hooks on init error path
          - ipv4: fix data races in fib_alias_hw_flags_set
          - ipv6: fix data-race in fib6_info_hw_flags_set / fib6_purge_rt
          - ipv6: mcast: use rcu-safe version of ipv6_get_lladdr()
          - ipv6: per-netns exclusive flowlabel checks
          - Revert "net: ethernet: bgmac: Use devm_platform_ioremap_resource_byname"
          - mac80211: mlme: check for null after calling kmemdup
          - brcmfmac: firmware: Fix crash in brcm_alt_fw_path
          - cfg80211: fix race in netlink owner interface destruction
          - [arm64,armhf] net: dsa: mv88e6xxx: flush switchdev FDB workqueue before
            removing VLAN
          - ping: fix the dif and sdif check in ping_lookup
          - bonding: force carrier update when releasing slave
          - mctp: fix use after free
          - drop_monitor: fix data-race in dropmon_net_event / trace_napi_poll_hit
          - net_sched: add __rcu annotation to netdev->qdisc
          - crypto: af_alg - get rid of alg_memory_allocated
          - bonding: fix data-races around agg_select_timer
          - net/smc: Avoid overwriting the copies of clcsock callback functions
          - atl1c: fix tx timeout after link flap on Mikrotik 10/25G NIC
          - tipc: fix wrong publisher node address in link publications
          - [arm64] dpaa2-eth: Initialize mutex used in one step timestamping path
          - [arm64] net: mscc: ocelot: fix use-after-free in ocelot_vlan_del()
          - net: bridge: multicast: notify switchdev driver whenever MC processing
            gets disabled
          - [arm64] Correct wrong label in macro __init_el2_gicv3
          - ALSA: usb-audio: Don't abort resume upon errors
          - ALSA: usb-audio: revert to IMPLICIT_FB_FIXED_DEV for M-Audio FastTrack
            Ultra
          - ALSA: memalloc: Fix dma_need_sync() checks
          - ALSA: memalloc: invalidate SG pages before sync
          - ALSA: hda/realtek: Add quirk for Legion Y9000X 2019
          - ALSA: hda/realtek: Fix deadlock by COEF mutex
          - ALSA: hda: Fix regression on forced probe mask option
          - ALSA: hda: Fix missing codec probe on Shenker Dock 15
          - ASoC: ops: Fix stereo change notifications in snd_soc_put_volsw()
          - ASoC: ops: Fix stereo change notifications in snd_soc_put_volsw_range()
          - ASoC: ops: Fix stereo change notifications in snd_soc_put_volsw_sx()
          - ASoC: ops: Fix stereo change notifications in snd_soc_put_xr_sx()
          - cifs: fix set of group SID via NTSD xattrs
          - cifs: fix confusing unneeded warning message on smb2.1 and earlier
          - ACPI: processor: idle: fix lockup regression on 32-bit ThinkPad T40
          - [armhf] mtd: rawnand: gpmi: don't leak PM reference in error path
          - smb3: fix snapshot mount option
          - tipc: fix wrong notification node addresses
          - scsi: ufs: Remove dead code
          - scsi: ufs: Fix a deadlock in the error handler
          - [arm64] ASoC: qcom: Actually clear DMA interrupt register for HDMI
          - block/wbt: fix negative inflight counter when remove scsi device
          - NFS: Remove an incorrect revalidation in nfs4_update_changeattr_locked()
          - NFS: LOOKUP_DIRECTORY is also ok with symlinks
          - NFS: Do not report writeback errors in nfs_getattr()
          - tty: n_tty: do not look ahead for EOL character past the end of the buffer
          - block: fix surprise removal for drivers calling blk_set_queue_dying
          - mtd: phram: Prevent divide by zero bug in phram_setup()
          - scsi: lpfc: Fix pt2pt NVMe PRLI reject LOGO loop
          - EDAC: Fix calculation of returned address and next offset in
            edac_align_ptr()
          - [x86] ptrace: Fix xfpregs_set()'s incorrect xmm clearing
          - ucounts: Base set_cred_ucounts changes on the real user
          - ucounts: Handle wrapping in is_ucounts_overlimit
          - ucounts: Enforce RLIMIT_NPROC not RLIMIT_NPROC+1
          - rlimit: Fix RLIMIT_NPROC enforcement failure caused by capability calls in
            set_user
          - ucounts: Move RLIMIT_NPROC handling after set_user
          - net: sched: limit TC_ACT_REPEAT loops
          - [armhf] dmaengine: stm32-dmamux: Fix PM disable depth imbalance in
            stm32_dmamux_probe
          - copy_process(): Move fd_install() out of sighand->siglock critical section
          - scsi: qedi: Fix ABBA deadlock in qedi_process_tmf_resp() and
            qedi_process_cmd_cleanup_resp()
          - ice: enable parsing IPSEC SPI headers for RSS
          - [arm*] i2c: brcmstb: fix support for DSL and CM variants
          - HID: elo: fix memory leak in elo_probe
          - [x86,arm64] Drivers: hv: vmbus: Fix memory leak in vmbus_add_channel_kobj
          - [x86] KVM: x86/pmu: Refactoring find_arch_event() to pmc_perf_hw_id()
          - [x86] KVM: x86/pmu: Don't truncate the PerfEvtSeln MSR when creating a
            perf event
          - [x86] KVM: x86/pmu: Use AMD64_RAW_EVENT_MASK for PERF_TYPE_RAW
          - [armhf] OMAP2+: hwmod: Add of_node_put() before break
          - [armhf] OMAP2+: adjust the location of put_device() call in
            omapdss_init_of
          - [arm*] staging: vc04_services: Fix RCU dereference check
          - [riscv64] irqchip/sifive-plic: Add missing thead,c900-plic match string
          - [x86] bug: Merge annotate_reachable() into _BUG_FLAGS() asm
          - netfilter: conntrack: don't refresh sctp entries in closed state
          - ksmbd: fix same UniqueId for dot and dotdot entries
          - ksmbd: don't align last entry offset in smb2 query directory
          - lib/iov_iter: initialize "flags" in new pipe_buffer
          - mm: io_uring: allow oom-killer from io_uring_setup
          - [x86] ACPI: PM: Revert "Only mark EC GPE for wakeup on Intel systems"
          - kconfig: let 'shell' return enough output for deep path names
          - ata: libata-core: Disable TRIM on M88V29
          - [armhf] soc: aspeed: lpc-ctrl: Block error printing on probe defer cases
          - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create
          - [arm64,armhf] drm/rockchip: dw_hdmi: Do not leave clock enabled in error
            case
          - tracing: Fix tp_printk option related with tp_printk_stop_on_boot
          - drm/amdgpu: add utcl2_harvest to gc 10.3.1
          - net: usb: qmi_wwan: Add support for Dell DW5829e
          - [arm64,riscv64] net: macb: Align the dma and coherent dma masks
          - kconfig: fix failing to generate auto.conf
      .
        [ Salvatore Bonaccorso ]
        * Bump ABI to 3
        * cgroup-v1: Correct privileges check in release_agent writes
        * netfilter: xt_socket: fix a typo in socket_mt_destroy()
        * netfilter: xt_socket: missing ifdef CONFIG_IP6_NF_IPTABLES dependency
        * netfilter: nf_tables_offload: incorrect flow offload action array size
          (CVE-2022-25636)
      .
        [ Vincent Blut ]
        * drivers/hid: Enable HID_NINTENDO as module and NINTENDO_FF as built-in
          (Closes: #1006275)
      .
      linux (5.16.10-1) unstable; urgency=medium
      .
        * New upstream stable update:
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.8
          - [x86] drm/i915: Disable DSB usage for now
          - selinux: fix double free of cond_list on error paths
          - audit: improve audit queue handling when "audit=1" on cmdline
          - ipc/sem: do not sleep with a spin lock held
          - [armhf] spi: stm32-qspi: Update spi registering
          - ASoC: hdmi-codec: Fix OOB memory accesses
          - ASoC: ops: Reject out of bounds values in snd_soc_put_volsw()
          - ASoC: ops: Reject out of bounds values in snd_soc_put_volsw_sx()
          - ASoC: ops: Reject out of bounds values in snd_soc_put_xr_sx()
          - ALSA: usb-audio: Correct quirk for VF0770
          - ALSA: hda: Fix UAF of leds class devs at unbinding
          - ALSA: hda: realtek: Fix race at concurrent COEF updates
          - ALSA: hda/realtek: Add quirk for ASUS GU603
          - ALSA: hda/realtek: Add missing fixup-model entry for Gigabyte X570 ALC1220
            quirks
          - ALSA: hda/realtek: Fix silent output on Gigabyte X570S Aorus Master (newer
            chipset)
          - ALSA: hda/realtek: Fix silent output on Gigabyte X570 Aorus Xtreme after
            reboot from Windows
          - ata: libata-core: Introduce ATA_HORKAGE_NO_LOG_DIR horkage
          - btrfs: don't start transaction for scrub if the fs is mounted read-only
          - btrfs: fix deadlock between quota disable and qgroup rescan worker
          - btrfs: fix use-after-free after failure to create a snapshot
          - Revert "fs/9p: search open fids first"
          - drm/nouveau: fix off by one in BIOS boundary checking
          - [x86] drm/i915/adlp: Fix TypeC PHY-ready status readout
          - drm/amdgpu: fix a potential GPU hang on cyan skillfish
          - drm/amd/display: Update watermark values for DCN301
          - drm/amd/display: watermark latencies is not enough on DCN31
          - drm/amd/display: Force link_rate as LINK_RATE_RBR2 for 2018 15" Apple
            Retina panels
          - mm/pgtable: define pte_index so that preprocessor could recognize it
          - mm/kmemleak: avoid scanning potential huge holes
          - block: bio-integrity: Advance seed correctly for larger interval sizes
          - cifs: fix workstation_name for multiuser mounts
          - dma-buf: heaps: Fix potential spectre v1 gadget
          - [amd64] IB/hfi1: Fix panic with larger ipoib send_queue_size
          - [amd64] IB/hfi1: Fix alloc failure with larger txqueuelen
          - [amd64] IB/hfi1: Fix AIP early init panic
          - Revert "fbdev: Garbage collect fbdev scrolling acceleration, part 1 (from
            TODO list)"
          - Revert "fbcon: Disable accelerated scrolling"
          - fbcon: Add option to enable legacy hardware acceleration
          - mptcp: fix msk traversal in mptcp_nl_cmd_set_flags()
          - [riscv64] KVM: make CY, TM, and IR counters accessible in VU mode
          - [arm64] KVM: arm64: Avoid consuming a stale esr value when SError occur
          - [arm64] KVM: arm64: Stop handle_exit() from handling HVC twice when an
            SError occurs
          - [arm64] Add Cortex-A510 CPU part definition
          - RDMA/cma: Use correct address when leaving multicast group
          - RDMA/ucma: Protect mc during concurrent multicast leaves
          - [amd64] IB/rdmavt: Validate remote_addr during loopback atomic tests
          - RDMA/mlx4: Don't continue event handler after memory allocation failure
          - ALSA: usb-audio: initialize variables that could ignore errors
          - ALSA: hda: Fix signedness of sscanf() arguments
          - ALSA: hda: Skip codec shutdown in case the codec is not registered
          - [amd64] iommu/vt-d: Fix potential memory leak in
            intel_setup_irq_remapping()
          - [amd64] iommu/amd: Fix loop timeout issue in iommu_ga_log_enable()
          - [arm64,armhf] spi: meson-spicc: add IRQ check in meson_spicc_probe
          - [amd64] IB/hfi1: Fix tstats alloc and dealloc
          - IB/cm: Release previously acquired reference counter in the cm_id_priv
          - net: ieee802154: hwsim: Ensure proper channel selection at probe time
          - netfilter: nft_reject_bridge: Fix for missing reply from prerouting
          - net: ieee802154: Return meaningful error codes from the netlink helpers
          - net/smc: Forward wakeup to smc socket waitqueue after fallback
          - net: stmmac: properly handle with runtime pm in stmmac_dvr_remove()
          - net: macsec: Fix offload support for NETDEV_UNREGISTER event
          - net: macsec: Verify that send_sci is on when setting Tx sci explicitly
          - net: stmmac: dump gmac4 DMA registers correctly
          - net, neigh: Do not trigger immediate probes on NUD_FAILED from
            neigh_managed_work
          - net: stmmac: ensure PTP time register reads are consistent
          - [arm64] drm: mxsfb: Fix NULL pointer dereference
          - [x86] drm/i915/overlay: Prevent divide by zero bugs in scaling
          - [x86] drm/i915: Lock timeline mutex directly in error path of
            eb_pin_timeline
          - drm/amd: avoid suspend on dGPUs w/ s2idle support when runtime PM enabled
          - ASoC: rt5682: Fix deadlock on resume
          - [arm*] ASoC: simple-card: fix probe failure on platform component
          - [arm64] pinctrl: sunxi: Fix H616 I2S3 pin data
          - [x86] pinctrl: intel: Fix a glitch when updating IRQ flags on a
            preconfigured line
          - [x86] pinctrl: intel: fix unexpected interrupt
          - [arm*] pinctrl: bcm2835: Fix a few error paths
          - btrfs: fix use of uninitialized variable at rm device ioctl
          - scsi: bnx2fc: Make bnx2fc_recv_frame() mp safe
          - nfsd: nfsd4_setclientid_confirm mistakenly expires confirmed client.
          - [amd64,arm64] gve: fix the wrong AdminQ buffer queue index check
          - bpf: Use VM_MAP instead of VM_ALLOC for ringbuf
          - tools/resolve_btfids: Do not print any commands when building silently
          - e1000e: Separate ADP board type from TGP
          - rtc: cmos: Evaluate century appropriate
          - kvm: add guest_state_{enter,exit}_irqoff()
          - [arm64] kvm/arm64: rework guest entry logic
          - perf: Copy perf_event_attr::sig_data on modification
          - [x86] perf/x86/intel/pt: Fix crash with stop filters in single-range mode
          - [x86] perf: Default set FREEZE_ON_SMI for all
          - [arm64] EDAC/xgene: Fix deferred probing
          - ext4: prevent used blocks from being allocated during fast commit replay
          - ext4: modify the logic of ext4_mb_new_blocks_simple
          - ext4: fix error handling in ext4_restore_inline_data()
          - ext4: fix error handling in ext4_fc_record_modified_inode()
          - ext4: fix incorrect type issue during replay_del_range
          - cgroup/cpuset: Fix "suspicious RCU usage" lockdep warning
          - [arm64] gpio: mpc8xxx: Fix an ignored error return from platform_get_irq()
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.9
          - ata: libata-core: Fix ata_dev_config_cpr()
          - moxart: fix potential use-after-free on remove path (CVE-2022-0487)
          - [s390x] KVM: s390: Return error on SIDA memop on normal guest
            (CVE-2022-0516)
          - ksmbd: fix SMB 3.11 posix extension mount failure
          - crypto: api - Move cryptomgr soft dependency into algapi
          - tipc: improve size validations for received domain records CVE-2022-0435)
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.10
          - integrity: check the return value of audit_log_start()
          - audit: don't deref the syscall args when checking the openat2
            open_how::flags
          - ima: fix reference leak in asymmetric_verify()
          - ima: Remove ima_policy file before directory
          - ima: Allow template selection with ima_template[_fmt]= after ima_hash=
          - ima: Do not print policy rule with inactive LSM labels
          - [arm64] mmc: sdhci-of-esdhc: Check for error num after setting mask
          - mmc: core: Wait for command setting 'Power Off Notification' bit to
            complete
          - can: isotp: fix potential CAN frame reception race in isotp_rcv()
          - can: isotp: fix error path in isotp_sendmsg() to unlock wait queue
          - net: phy: marvell: Fix RGMII Tx/Rx delays setting in 88e1121-compatible
            PHYs
          - net: phy: marvell: Fix MDI-x polarity setting in 88e1118-compatible PHYs
          - NFS: Fix initialisation of nfs_client cl_flags field
          - NFSD: Fix NFSv3 SETATTR/CREATE's handling of large file sizes
          - NFSD: Fix ia_size underflow
          - NFSD: Clamp WRITE offsets
          - NFSD: Fix offset type in I/O trace points
          - NFSD: Fix the behavior of READ near OFFSET_MAX
          - NFS: change nfs_access_get_cached to only report the mask
          - NFSv4 only print the label when its queried
          - nfs: nfs4clinet: check the return value of kstrdup()
          - NFSv4.1: Fix uninitialised variable in devicenotify
          - NFSv4 remove zero number of fs_locations entries error check
          - NFSv4 store server support for fs_location attribute
          - NFSv4.1 query for fs_location attr on a new file system
          - NFSv4 expose nfs_parse_server_name function
          - NFSv4 handle port presence in fs_location server string
          - SUNRPC allow for unspecified transport time in rpc_clnt_add_xprt
          - net/sunrpc: fix reference count leaks in rpc_sysfs_xprt_state_change
          - sunrpc: Fix potential race conditions in rpc_sysfs_xprt_state_change()
          - [amd64] perf/x86/rapl: fix AMD event handling
          - [x86] perf: Avoid warning for Arch LBR without XSAVE
          - sched: Avoid double preemption in __cond_resched_*lock*()
          - [arm*] drm/vc4: Fix deadlock on DSI device attach error
          - drm: panel-orientation-quirks: Add quirk for the 1Netbook OneXPlayer
          - net: sched: Clarify error message when qdisc kind is unknown
          - [powerpc*] fixmap: Fix VM debug warning on unmap
          - [arm64] Add Cortex-X2 CPU part definition
          - [arm64] errata: Update ARM64_ERRATUM_[2119858|2224489] with Cortex-X2
            ranges
          - scsi: target: iscsi: Make sure the np under each tpg is unique
          - scsi: qedf: Add stag_work to all the vports
          - scsi: qedf: Fix refcount issue when LOGO is received during TMF
          - scsi: qedf: Change context reset messages to ratelimited
          - scsi: pm8001: Fix bogus FW crash for maxcpus=1
          - scsi: ufs: Use generic error code in ufshcd_set_dev_pwr_mode()
          - scsi: ufs: Treat link loss as fatal error
          - scsi: myrs: Fix crash in error case
          - net: stmmac: reduce unnecessary wakeups from eee sw timer
          - PM: hibernate: Remove register_nosave_region_late()
          - [arm*] usb: dwc2: gadget: don't try to disable ep0 in dwc2_hsotg_suspend
          - perf: Always wake the parent event
          - nvme-pci: add the IGNORE_DEV_SUBNQN quirk for Intel P4500/P4600 SSDs
          - [mips*] Fix build error due to PTR used in more places
          - [arm64,armhf] net: stmmac: dwmac-sun8i: use return val of
            readl_poll_timeout()
          - [arm64] errata: Add detection for TRBE ignored system register writes
          - [arm64] errata: Add detection for TRBE invalid prohibited states
          - [arm64] errata: Add detection for TRBE trace data corruption
          - [arm64] cpufeature: List early Cortex-A510 parts as having broken dbm
          - KVM: eventfd: Fix false positive RCU usage warning
          - [x86] KVM: nVMX: eVMCS: Filter out VM_EXIT_SAVE_VMX_PREEMPTION_TIMER
          - [x86] KVM: nVMX: Also filter MSR_IA32_VMX_TRUE_PINBASED_CTLS when eVMCS
          - [x86] KVM: SVM: Don't kill SEV guest if SMAP erratum triggers in usermode
          - [x86] KVM: VMX: Set vmcs.PENDING_DBG.BS on #DB in STI/MOVSS blocking
            shadow
          - [x86] KVM: x86: Report deprecated x87 features in supported CPUID
          - [riscv64] Fix XIP_FIXUP_FLASH_OFFSET
          - [riscv64] cpu-hotplug: clear cpu from numa map when teardown
          - [riscv64] mm: Add XIP_FIXUP for phys_ram_base
          - [riscv64] eliminate unreliable __builtin_frame_address(1)
          - gfs2: Fix gfs2_release for non-writers regression
          - Revert "gfs2: check context in gfs2_glock_put"
          - Revert "PCI/portdrv: Do not setup up IRQs if there are no users"
          - nvme-tcp: fix bogus request completion when failing to send AER
          - [arm64] ACPI/IORT: Check node revision for PMCG resources
          - PM: s2idle: ACPI: Fix wakeup interrupts handling
          - [arm64,armhf] drm/rockchip: vop: Correct RK3399 VOP register fields
          - [x86] drm/i915: Disable DRRS on IVB/HSW port != A
          - [x86] drm/i915: Allow !join_mbus cases for adlp+ dbuf configuration
          - [x86] drm/i915: Populate pipe dbuf slices more accurately during readout
          - [x86] drm/i915: Workaround broken BIOS DBUF configuration on TGL/RKL
          - [armhf] dts: Fix timer regression for beagleboard revision c
          - [arm64] tee: optee: do not check memref size on return from Secure World
          - [arm64] optee: add error checks in optee_ffa_do_call_with_arg()
          - [armhf] phy: stm32: fix a refcount leak in stm32_usbphyc_pll_enable()
          - usb: f_fs: Fix use-after-free for epfile
          - [arm64] Enable Cortex-A510 erratum 2051678 by default
          - [arm64,armhf] phy: dphy: Correct clk_pre parameter
          - NFS: Don't overfill uncached readdir pages
          - NFS: Don't skip directory entries when doing uncached readdir
          - NFS: Avoid duplicate uncached readdir calls on eof
          - [arm*] drm/vc4: hdmi: Allow DBLCLK modes even if horz timing is odd.
          - netfilter: nft_payload: don't allow th access for fragments
          - netfilter: ctnetlink: disable helper autoassign
          - [arm64] dts: meson-sm1-bananapi-m5: fix wrong GPIO domain for GPIOE_2
          - ixgbevf: Require large buffers for build_skb on 82599VF
          - tcp: take care of mixed splice()/sendmsg(MSG_ZEROCOPY) case
          - [arm64] net: mscc: ocelot: fix all IP traffic getting trapped to CPU with
            PTP over IP
          - [arm64,armhf] drm/panel: simple: Assign data from panel_dpi_probe()
            correctly
          - ACPI: PM: s2idle: Cancel wakeup before dispatching EC GPE
          - gpiolib: Never return internal error codes to user space
          - [riscv64] gpio: sifive: use the correct register to read output values
          - fbcon: Avoid 'cap' set but not used warning
          - SUNRPC: lock against ->sock changing during sysfs read
          - [arm64,arm64] gve: Recording rx queue before sending to napi
          - bonding: pair enable_port with slave_arr_updates
          - [arm64,armhf] net: dsa: mv88e6xxx: don't use devres for mdiobus
          - [armhf] net: dsa: bcm_sf2: don't use devres for mdiobus
          - [arm64] net: dsa: felix: don't use devres for mdiobus
          - ipmr,ip6mr: acquire RTNL before calling ip[6]mr_free_table() on failure
            path
          - nfp: flower: fix ida_idx not being released
          - net: do not keep the dst cache when uncloning an skb dst and its metadata
          - net: fix a memleak when uncloning an skb dst and its metadata
          - veth: fix races around rq->rx_notify_masked
          - [armhf] net: mdio: aspeed: Add missing MODULE_DEVICE_TABLE
          - tipc: rate limit warning for received illegal binding update
          - [amd64,armhf] net: amd-xgbe: disable interrupts during pci removal
          - [amd64,armhf] net: dsa: fix panic when DSA master device unbinds on
            shutdown
          - mptcp: netlink: process IPv6 addrs in creating listening sockets
          - [arm64] dpaa2-eth: unregister the netdev before disconnecting from the PHY
          - ice: fix an error code in ice_cfg_phy_fec()
          - ice: fix IPIP and SIT TSO offload
          - ice: Avoid RTNL lock when re-creating auxiliary device
          - [arm64] net: mscc: ocelot: fix mutex lock error during ethtool stats read
          - [arm64,armhf] net: dsa: mv88e6xxx: fix use-after-free in
            mv88e6xxx_mdios_unregister
          - vt_ioctl: fix array_index_nospec in vt_setactivate
          - vt_ioctl: add array_index_nospec to VT_ACTIVATE
          - n_tty: wake up poll(POLLRDNORM) on receiving data
          - eeprom: ee1004: limit i2c reads to I2C_SMBUS_BLOCK_MAX
          - [arm*] usb: dwc2: drd: fix soft connect when gadget is unconfigured
          - [arm*] Revert "usb: dwc2: drd: fix soft connect when gadget is
            unconfigured"
          - net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup
          - [arm64,armhf] usb: ulpi: Move of_node_put to ulpi_dev_release
          - [arm64,armhf] usb: ulpi: Call of_node_put correctly
          - [arm64,armhf] usb: dwc3: gadget: Prevent core from processing stale TRBs
          - USB: gadget: validate interface OS descriptor requests (CVE-2022-25258)
          - usb: gadget: rndis: check size of RNDIS_MSG_SET command
          - usb: gadget: f_uac2: Define specific wTerminalType
          - USB: serial: ftdi_sio: add support for Brainboxes US-159/235/320
          - USB: serial: option: add ZTE MF286D modem
          - USB: serial: ch341: add support for GW Instek USB2.0-Serial devices
          - USB: serial: cp210x: add NCR Retail IO box id
          - USB: serial: cp210x: add CPI Bulk Coin Recycler id
          - speakup-dectlk: Restore pitch setting
          - iio: buffer: Fix file related error handling in IIO_BUFFER_GET_FD_IOCTL
          - fs/proc: task_mmu.c: don't read mapcount for migration entry
          - mm: vmscan: remove deadlock due to throttling failing to make progress
          - mm: memcg: synchronize objcg lists with a dedicated spinlock
          - seccomp: Invalidate seccomp mode to catch death failures
          - signal: HANDLER_EXIT should clear SIGNAL_UNKILLABLE
          - [s390x] cio: verify the driver availability for path_event call
          - bus: mhi: pci_generic: Add mru_default for Foxconn SDX55
          - bus: mhi: pci_generic: Add mru_default for Cinterion MV31-W
          - scsi: lpfc: Remove NVMe support if kernel has NVME_FC disabled
          - scsi: lpfc: Reduce log messages seen after firmware download
          - [mips64el,mipsel] octeon: Fix missed PTR->PTR_WD conversion
          - perf: Fix list corruption in perf_cgroup_switch()
          - iommu: Fix potential use-after-free during probe
      .
        [ Salvatore Bonaccorso ]
        * Bump ABI to 2
        * [rt] Refresh "mm/memcg: Add a local_lock_t for IRQ and TASK object."
        * bpf: Introduce composable reg, ret and arg types.
        * bpf: Replace ARG_XXX_OR_NULL with ARG_XXX | PTR_MAYBE_NULL
        * bpf: Replace RET_XXX_OR_NULL with RET_XXX | PTR_MAYBE_NULL
        * bpf: Replace PTR_TO_XXX_OR_NULL with PTR_TO_XXX | PTR_MAYBE_NULL
        * bpf: Introduce MEM_RDONLY flag
        * bpf: Convert PTR_TO_MEM_OR_NULL to composable types.
        * bpf: Make per_cpu_ptr return rdonly PTR_TO_MEM.
        * bpf: Add MEM_RDONLY for helper args that are pointers to rdonly mem.
        * bpf/selftests: Test PTR_TO_RDONLY_MEM
      .
        [ Luca Boccassi ]
        * drivers/watchdog: enable CONFIG_WATCHDOG_HRTIMER_PRETIMEOUT
      .
      linux (5.16.7-2) unstable; urgency=medium
      .
        * linux-perf: Protect invocation of dpkg-divert to run only on relevant
          actions in maintscripts. Thanks to Guillem Jover (Closes: #1005141)
      .
      linux (5.16.7-1) unstable; urgency=medium
      .
        * New upstream stable update:
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.5
          - Bluetooth: refactor malicious adv data check
          - btrfs: fix too long loop when defragging a 1 byte file
          - btrfs: allow defrag to be interruptible
          - btrfs: defrag: fix wrong number of defragged sectors
          - btrfs: defrag: properly update range->start for autodefrag
          - btrfs: fix deadlock when reserving space during defrag
          - btrfs: add back missing dirty page rate limiting to defrag
          - btrfs: update writeback index when starting defrag
          - net: sfp: ignore disabled SFP node
          - net: stmmac: configure PTP clock source prior to PTP initialization
          - net: stmmac: skip only stmmac_ptp_register when resume from suspend
          - [armel,armhf] 9179/1: uaccess: avoid alignment faults in
            copy_[from|to]_kernel_nofault
          - [armel,armhf] 9180/1: Thumb2: align ALT_UP() sections in modules
            sufficiently
          - [arm64] KVM: arm64: vgic-v3: Restrict SEIS workaround to known broken
            systems
          - [s390x] module: fix loading modules with a lot of relocations
          - [s390x] hypfs: include z/VM guests with access control group set
          - [s390x] nmi: handle guarded storage validity failures for KVM guests
          - [s390x] nmi: handle vector validity failures for KVM guests
          - bpf: Guard against accessing NULL pt_regs in bpf_get_task_stack()
          - [s390x] scsi: zfcp: Fix failed recovery on gone remote port with non-NPIV
            FCP devices
          - udf: Restore i_lenAlloc when inode expansion fails
          - udf: Fix NULL ptr deref when converting from inline format
          - [x86] efi: runtime: avoid EFIv2 runtime services on Apple x86 machines
          - tracing: Don't inc err_log entry count if entry allocation fails
          - ceph: properly put ceph_string reference after async create attempt
          - ceph: set pool_ns in new inode layout for async creates
          - fsnotify: invalidate dcache before IN_DELETE event
          - fsnotify: fix fsnotify hooks in pseudo filesystems
          - Revert "KVM: SVM: avoid infinite loop on NPF from bad address"
          - psi: Fix uaf issue when psi trigger is destroyed while being polled
          - [x86] perf/x86/intel/uncore: Fix CAS_COUNT_WRITE issue for ICX
          - [x86] perf/x86/intel: Add a quirk for the calculation of the number of
            counters on Alder Lake
          - [arm64,armhf] drm/etnaviv: relax submit size limits
          - drm/atomic: Add the crtc to affected crtc only if uapi.enable = true
          - drm/amdgpu: filter out radeon secondary ids as well
          - [x86] KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
          - [x86] KVM: SVM: Never reject emulation due to SMAP errata for !SEV guests
          - [x86] KVM: SVM: Don't intercept #GP for SEV guests
          - [x86] KVM: x86: nSVM: skip eax alignment check for non-SVM instructions
          - [x86] KVM: x86: Move CPUID.(EAX=0x12,ECX=1) mangling to
            __kvm_update_cpuid_runtime()
          - [x86] KVM: x86: Free kvm_cpuid_entry2 array on post-KVM_RUN
            KVM_SET_CPUID{,2}
          - [x86] KVM: x86: Forcibly leave nested virt when SMM state is toggled
          - [x86] KVM: x86: Check .flags in kvm_cpuid_check_equal() too
          - [x86] KVM: x86: Keep MSR_IA32_XSS unchanged for INIT
          - [x86] KVM: x86: Update vCPU's runtime CPUID on write to MSR_IA32_XSS
          - [x86] KVM: x86: Sync the states size with the XCR0/IA32_XSS at, any time
          - [powerpc*] KVM: PPC: Book3S HV Nested: Fix nested HFSCR being clobbered
            with multiple vCPUs
          - security, lsm: dentry_init_security() Handle multi LSM registration
          - [arm64] extable: fix load_unaligned_zeropad() reg indices
          - dm: revert partial fix for redundant bio-based IO accounting
          - block: add bio_start_io_acct_time() to control start_time
          - dm: properly fix redundant bio-based IO accounting
          - [arm*] serial: pl011: Fix incorrect rs485 RTS polarity on set_mctrl
          - serial: 8250: of: Fix mapped region size when using reg-offset property
          - [armhf] serial: stm32: fix software flow control transfer
          - tty: n_gsm: fix SW flow control encoding/handling
          - tty: Add support for Brainboxes UC cards.
          - usb-storage: Add unusual-devs entry for VL817 USB-SATA bridge
          - usb: xhci-plat: fix crash when suspend if remote wake enable
          - [arm64,armhf] usb: common: ulpi: Fix crash in ulpi_match()
          - usb: gadget: f_sourcesink: Fix isoc transfer for USB_SPEED_SUPER_PLUS
          - [arm64] usb: dwc3: xilinx: Skip resets and USB3 register settings for
            USB2.0 mode
          - [arm64] usb: dwc3: xilinx: Fix error handling when getting USB3 PHY
          - USB: core: Fix hang in usb_kill_urb by adding memory barriers
          - [arm64] usb: typec: tcpci: don't touch CC line if it's Vconn source
          - usb: typec: tcpm: Do not disconnect while receiving VBUS off
          - usb: typec: tcpm: Do not disconnect when receiving VSAFE0V
          - mt76: connac: introduce MCU_CE_CMD macro
          - jbd2: export jbd2_journal_[grab|put]_journal_head
          - ocfs2: fix a deadlock when commit trans
          - sched/membarrier: Fix membarrier-rseq fence command missing from query
            bitmask
          - PCI/sysfs: Find shadow ROM before static attribute initialization
          - [x86] MCE/AMD: Allow thresholding interface updates after init
          - [x86] cpu: Add Xeon Icelake-D to list of CPUs that support PPIN
          - i40e: Increase delay to 1 s after global EMP reset
          - i40e: Fix issue when maximum queues is exceeded
          - i40e: Fix queues reservation for XDP
          - i40e: Fix for failed to init adminq while VF reset
          - i40e: fix unsigned stat widths
          - scsi: bnx2fc: Flush destroy_work queue before calling
            bnx2fc_interface_put()
          - ipv6_tunnel: Rate limit warning messages
          - [armel,armhf] 9170/1: fix panic when kasan and kprobe are enabled
          - net: fix information leakage in /proc/net/ptype
          - hwmon: (lm90) Mark alert as broken for MAX6646/6647/6649
          - hwmon: (lm90) Mark alert as broken for MAX6680
          - ping: fix the sk_bound_dev_if match in ping_lookup
          - ipv4: avoid using shared IP generator for connected sockets
          - hwmon: (lm90) Reduce maximum conversion rate for G781
          - NFSv4: Handle case where the lookup of a directory fails
          - NFSv4: nfs_atomic_open() can race when looking up a non-regular file
          - net-procfs: show net devices bound packet types
          - [arm64] drm/msm: Fix wrong size calculation
          - [arm64] drm/msm/dsi: Fix missing put_device() call in dsi_get_phy
          - [arm64] drm/msm/dsi: invalid parameter check in msm_dsi_phy_enable
          - ipv6: annotate accesses to fn->fn_sernum
          - NFS: Ensure the server has an up to date ctime before hardlinking
          - NFS: Ensure the server has an up to date ctime before renaming
          - [arm64] KVM: arm64: pkvm: Use the mm_ops indirection for cache maintenance
          - SUNRPC: Don't dereference xprt->snd_task if it's a cookie
          - netfilter: conntrack: don't increment invalid counter on NF_REPEAT
          - [powerpc*] 64s: Mask SRR0 before checking against the masked NIP
          - perf: Fix perf_event_read_local() time
          - sched/pelt: Relax the sync of util_sum with util_avg
          - net: phy: broadcom: hook up soft_reset for BCM54616S
          - ethtool: Fix link extended state for big endian
          - phylib: fix potential use-after-free
          - rxrpc: Adjust retransmission backoff
          - [arm64] efi/libstub: arm64: Fix image check alignment at entry
          - io_uring: fix bug in slow unregistering of nodes
          - block: fix memory leak in disk_register_independent_access_ranges
          - [x86] Drivers: hv: balloon: account for vmbus packet header in
            max_pkt_size
          - hwmon: (lm90) Re-enable interrupts after alert clears
          - hwmon: (lm90) Mark alert as broken for MAX6654
          - hwmon: (lm90) Fix sysfs and udev notifications
          - hwmon: (adt7470) Prevent divide by zero in adt7470_fan_write()
          - ipv4: fix ip option filtering for locally generated fragments
          - net/smc: Transitional solution for clcsock race issue
          - video: hyperv_fb: Fix validation of screen resolution
          - hwmon: (nct6775) Fix crash in clear_caseopen
          - [arm64] drm/msm/hdmi: Fix missing put_device() call in msm_hdmi_get_phy
          - [arm64] drm/msm/dpu: invalid parameter check in dpu_setup_dspp_pcc
          - [arm64] drm/msm/a6xx: Add missing suspend_count increment
          - yam: fix a memory leak in yam_siocdevprivate()
          - [armhf] net: cpsw: Properly initialise struct page_pool_params
          - [arm64] net: hns3: handle empty unknown interrupt for VF
          - sch_htb: Fail on unsupported parameters when offload is requested
          - ceph: put the requests/sessions when it fails to alloc memory
          - gve: Fix GFP flags when allocing pages
          - Revert "ipv6: Honor all IPv6 PIO Valid Lifetime values"
          - net: bridge: vlan: fix single net device option dumping
          - ipv4: raw: lock the socket in raw_bind()
          - ipv4: tcp: send zero IPID in SYNACK messages
          - ipv4: remove sparse error in ip_neigh_gw4()
          - net: bridge: vlan: fix memory leak in __allowed_ingress
          - dt-bindings: can: tcan4x5x: fix mram-cfg RX FIFO config
          - perf/core: Fix cgroup event list management
          - [arm64] usb: dwc3: xilinx: fix uninitialized return value
          - [x86] KVM: nVMX: Rename vmcs_to_field_offset{,_table}
          - [x86] KVM: nVMX: Implement evmcs_field_offset() suitable for
            handle_vmread()
          - [x86] KVM: nVMX: Allow VMREAD when Enlightened VMCS is in use
          - block: Fix wrong offset in bio_truncate()
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.6
          - PCI: pciehp: Fix infinite loop in IRQ handler upon power fault
          - [arm*] drm/vc4: hdmi: Make sure the device is powered with CEC
          - cgroup-v1: Require capabilities to set release_agent (CVE-2022-0492)
          - Revert "mm/gup: small refactoring: simplify try_grab_page()"
          - net: phy: Fix qca8081 with speeds lower than 2.5Gb/s
          - ovl: don't fail copy up if no fileattr support on upper
          - lockd: fix server crash on reboot of client holding lock
          - lockd: fix failure to cleanup client locks
          - net/mlx5e: TC, Reject rules with drop and modify hdr action
          - net/mlx5: Bridge, take rtnl lock in init error handler
          - net/mlx5e: Fix handling of wrong devices during bond netevent
          - net/mlx5: Use del_timer_sync in fw reset flow of halting poll
          - net/mlx5e: Fix module EEPROM query
          - net/mlx5e: TC, Reject rules with forward and drop actions
          - net/mlx5: Fix offloading with ESWITCH_IPV4_TTL_MODIFY_ENABLE
          - net/mlx5e: Don't treat small ceil values as unlimited in HTB offload
          - net/mlx5: Bridge, Fix devlink deadlock on net namespace deletion
          - net/mlx5e: Avoid field-overflowing memcpy()
          - net/mlx5e: Fix wrong calculation of header index in HW_GRO
          - net/mlx5e: Fix broken SKB allocation in HW-GRO
          - net/mlx5: E-Switch, Fix uninitialized variable modact
          - net/mlx5e: Avoid implicit modify hdr for decap drop rule
          - ipheth: fix EOVERFLOW in ipheth_rcvbulk_callback
          - i40e: Fix reset bw limit when DCB enabled with 1 TC
          - i40e: Fix reset path while removing the driver
          - [amd64,arm64] net: amd-xgbe: ensure to reset the tx_timer_active flag
          - [amd64,arm64] net: amd-xgbe: Fix skb data length underflow
          - fanotify: Fix stale file descriptor in copy_event_to_user()
          - net: sched: fix use-after-free in tc_new_tfilter()
          - rtnetlink: make sure to refresh master_dev/m_ops in __rtnl_newlink()
          - bpf: Fix possible race in inc_misses_counter
          - cpuset: Fix the bug that subpart_cpus updated wrongly in update_cpumask()
          - e1000e: Handshake with CSME starts from ADL platforms
          - af_packet: fix data-race in packet_setsockopt / packet_setsockopt
          - tcp: fix mem under-charging with zerocopy sendmsg()
          - tcp: add missing tcp_skb_can_collapse() test in tcp_shift_skb_data()
          - ovl: fix NULL pointer dereference in copy up warning
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.7
          - [arm*] Revert "drm/vc4: hdmi: Make sure the device is powered with CEC"
          - [arm*] Revert "drm/vc4: hdmi: Make sure the device is powered with CEC"
            again
      .
        [ Salvatore Bonaccorso ]
        * Set ABI to 1
      .
      linux (5.16.4-1~exp1) experimental; urgency=medium
      .
        * New upstream stable update:
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.4
          - io_uring: fix not released cached task refs
          - bnx2x: Utilize firmware 7.13.21.0
          - bnx2x: Invalidate fastpath HSI version for VFs
          - memcg: better bounds on the memcg stats updates
          - rcu: Tighten rcu_advance_cbs_nowake() checks
          - select: Fix indefinitely sleeping task in poll_schedule_timeout()
          - [arm64] bpf: Remove 128MB limit for BPF JIT programs
      .
        * objtool: check: give big enough buffer for pv_ops (Closes: #1004495)
        * Refresh "firmware: Remove redundant log messages from drivers"
        * [rt] Refresh "mm/memcg: Protect per-CPU counter by disabling preemption on
          PREEMPT_RT where needed."
      .
      linux (5.16.3-1~exp1) experimental; urgency=medium
      .
        * New upstream release: https://kernelnewbies.org/Linux_5.16
        * New upstream stable update:
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.1
          - bpf: Fix out of bounds access from invalid *_or_null type verification
            (CVE-2022-23222)
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.2
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.3
          - netfilter: nft_payload: do not update layer 4 checksum when mangling
            fragments (Closes: #1002706)
      .
        [ Helmut Grohne ]
        * Multiarchify python build-depends. (Closes: #983757)
      .
        [ Ben Hutchings ]
        * linux-perf: Fix detection of libperl and libpython in cross-build
        * debian/README.source: Tag signatures are automatically verified
        * [rt] trace: Enable OSNOISE_TRACER, TIMERLAT_TRACER, HIST_TRIGGERS
        * d/bin/git-tag-gpg-wrapper, debian/upstream: Use ASCII-armored keyring
        * d/watch: Rewrite to find all upstream versions through Git
        * d/bin/genorig.py, d/README.source: Only support Git as upstream
        * d/bin/genorig.py, d/README.source: Add support for remote upstream repos
        * lintian: Refresh lintian-overrides
        * d/copyright: Fix license name with spaces in it
        * d/copyright: Update for removed and renamed source files
        * d/tests/selftests: Use $AUTOPKGTEST_TMP instead of $ADTTMP
        * Fix missing user-space hardening:
          - d/rules.real: Define KBUILD_HOST{C,LD}FLAGS for sub-make
          - linux-kbuild: Build modpost with standard CPPFLAGS
          - cpupower: Build with standard CPPFLAGS
          - usbip: Build with standard CPPFLAGS
          - objtool: Build with standard CFLAGS and CPPFLAGS
          - tools/perf: Define DEBUG=0 for sub-make so libapi doesn't use wrong flags
          - libapi: Define _FORTIFY_SOURCE as 2, not empty
          - tools/perf: Fix missing LDFLAGS for some programs
        * d/rules: Tell blhc to ignore missing flags for perf-read-vdso* helpers
        * d/rules: Tell blhc to ignore kernel compilation
        * d/rules: Filter out -s option so that Kbuild is not silent
        * d/bin/gencontrol.py, d/lib/python: Use classes for build restriction
          formulae
        * d/bin/gencontrol.py, d/rules.real: Replace DEBUG variable with if_package
        * Introduce pkg.linux.quick build profile for quicker CI builds
        * d/salsa-ci.yml: Add CI config using some of the common pipeline
        * d/salsa-ci.yml, d/tests/python: Only run static checks in CI
        * d/salsa-ci.yml: Run kconfigeditor2 as kconfig static check
        * d/rules, d/salsa-ci.yml: Enable blhc, ignoring terse output
        * bpftool, objtool, usbip: Always build with V=1 so blhc can check them
        * d/salsa-ci.yml: Use per-release cache of orig tarballs
        * linux-perf: Build a single unversioned package of perf, as it is no
          longer necessary to match the kernel version
      .
        [ Vincent Blut ]
        * drivers/net/wireless/realtek/rtw89: Enable RTW89 and RTW89_8852AE as
          modules (Closes: #1004095)
      .
        [ Aurelien Jarno ]
        * [riscv64] Add support for SBI SRST extension
      .
        [ YunQiang Su ]
        * [mips*/generic] Change zload address for QEMU compatibility.
      .
        [ Salvatore Bonaccorso ]
        * [rt] Update to 5.16.2-rt18
        * [rt] Update to 5.16.2-rt19
        * [x86] drm/i915: Flush TLBs before releasing backing store (CVE-2022-0330)
        * drm/vmwgfx: Fix stale file descriptors on failed usercopy (CVE-2022-22942)
      .
        [ Bastian Blank ]
        * Build-depend on pahole after rename from dwarves.
        * Remove remaining aufs patches for good.
      .
      linux (5.16~rc8-1~exp1) experimental; urgency=medium
      .
        * New upstream release candidate
      .
        [ YunQiang Su ]
        * [mips*] unify installer flavors
        * [mips*] add generic platform and remove 5kc-malta from 32bit ports
      .
        [ Alper Nebi Yasak ]
        * [armhf,arm64] drivers/gpu/drm/panel: Enable DRM_PANEL_EDP as module
        * [arm64] Include panel-edp in fb-modules udeb
      .
        [ Noah Meyerhans ]
        * net: Use fq_codel as the default network qdisc (Closes: #890343)
      .
        [ Salvatore Bonaccorso ]
        * [rt] Update to 5.16-rc8-rt13
      .
      linux (5.16~rc7-1~exp1) experimental; urgency=medium
      .
        * New upstream release candidate
      .
        [ Uwe Kleine-König ]
        * [arm64] enable DRM_VMWGFX_FBCON to get a tty to login in the absence of a
          graphical login manager.
      .
        [ Vincent Blut ]
        * [x86] drivers/platform/surface/aggregator: Enable SURFACE_AGGREGATOR as
          module (Closes: #1002460)
        * [x86] drivers/platform/surface: Enable SURFACE_3_POWER_OPREGION,
          SURFACE_ACPI_NOTIFY, SURFACE_AGGREGATOR_REGISTRY, SURFACE_DTX,
          SURFACE_GPE, SURFACE_HOTPLUG and SURFACE_PLATFORM_PROFILE as modules
        * [x86] drivers/hid/surface-hid: Enable SURFACE_HID and SURFACE_KBD as
          modules
        * [x86] drivers/power/supply: Enable BATTERY_SURFACE and CHARGER_SURFACE as
          modules
      .
        [ Salvatore Bonaccorso ]
        * [rt] Update to 5.16-rc6-rt12
        * [x86] drivers/firmware/google: Re-enable GOOGLE_FIRMWARE (Closes: #947179)
      .
      linux (5.16~rc6-1~exp1) experimental; urgency=medium
      .
        * New upstream release candidate
      .
        [ Aurelien Jarno ]
        * [riscv64] Improve HiFive Unmatched support: enable INPUT_DA9063_ONKEY,
          MFD_DA9063, REGULATOR_DA9063, RTC_DRV_DA9063, DA9063_WATCHDOG.
      .
        [ Salvatore Bonaccorso ]
        * xen/blkfront: harden blkfront against event channel storms (CVE-2021-28711)
        * xen/netfront: harden netfront against event channel storms (CVE-2021-28712)
        * xen/console: harden hvc_xen against event channel storms (CVE-2021-28713)
        * xen/netback: fix rx queue stall detection (CVE-2021-28714)
        * xen/netback: don't queue unlimited number of packages (CVE-2021-28715)
      .
      linux (5.16~rc5-1~exp1) experimental; urgency=medium
      .
        * New upstream release candidate
          - nfsd: fix use-after-free due to delegation race (Closes: #988044)
      .
        [ Salvatore Bonaccorso ]
        * [rt] Update to 5.16-rc5-rt10
        * Refresh "Export symbols needed by Android drivers"
        * net/tls: Enable TLS_DEVICE (Closes: #1001731)
      .
      linux (5.16~rc4-1~exp1) experimental; urgency=medium
      .
        * New upstream release candidate
      .
        [ Salvatore Bonaccorso ]
        * [rt] Update to 5.16-rc4-rt8
        * Makefile: Do not quote value for CONFIG_CC_IMPLICIT_FALLTHROUGH
          (Closes: #1001083)
        * [arm64] drivers/iio/adc: Enable QCOM_SPMI_IADC, QCOM_SPMI_VADC and
          ROCKCHIP_SARADC as modules (Closes: #1001080)
        * [armhf] drivers/iio/adc: Enable ASPEED_ADC, EXYNOS_ADC, ROCKCHIP_SARADC,
          TI_AM335X_ADC and TWL4030_MADC as modules (Closes: #1001080)
      .
      linux (5.16~rc3-1~exp1) experimental; urgency=medium
      .
        * New upstream release candidate
      .
        [ Salvatore Bonaccorso ]
        * [rt] Update to 5.16-rc2-rt4
        * [arm64] drivers/firmware/efi: Enable
          EFI_GENERIC_STUB_INITRD_CMDLINE_LOADER (Closes: #997907)
        * liblockdep: Remove code to build liblockdep packages
        * [rt] Update to 5.16-rc3-rt5
      .
        [ Uwe Kleine-König ]
        * [arm*] Enable support for Raspberry Pi POE hat (PWM_RASPBERRYPI_POE)
        * [arm*] Enable suport for pinctrl-based I2C multiplexer (I2C_MUX_PINCTRL).
          These are used (among others) on the Raspberry Pi CM4 IO Board.
      .
      linux (5.16~rc1-1~exp1) experimental; urgency=medium
      .
        * New upstream release candidate
      .
        [ Salvatore Bonaccorso ]
        * [rt] Update to 5.16-rc1-rt2
        * fs/ksmbd: Enable SMB_SERVER as module (Closes: #998835)
      .
        [ Aurelien Jarno ]
        * [riscv64] Enable VIRTUALIZATION and KVM.
      e070cd5a
    • Lorenzo "Palinuro" Faletra's avatar
      1f8a8d29
  7. 15 Feb, 2022 1 commit
  8. 03 Feb, 2022 2 commits
    • Lorenzo "Palinuro" Faletra's avatar
      Import Debian changes 5.15.15-15parrot1 · 14e4d2b5
      Lorenzo "Palinuro" Faletra authored
      linux (5.15.15-15parrot1) parrot-updates; urgency=medium
      .
        * Import new Debian release.
        * Import Parrot patches and customizations.
      .
      linux (5.15.15-2) unstable; urgency=high
      .
        [ Bastian Blank ]
        * Build-depend on pahole after rename from dwarves.
      .
        [ Salvatore Bonaccorso ]
        * [x86] mwifiex: Fix skb_over_panic in mwifiex_usb_recv() (CVE-2021-43976)
        * [x86] drm/i915: Flush TLBs before releasing backing store (CVE-2022-0330)
        * drm/vmwgfx: Fix stale file descriptors on failed usercopy (CVE-2022-22942)
        * ucount:  Make get_ucount a safe get_user replacement (CVE-2022-24122)
      .
      linux (5.15.15-1) unstable; urgency=high
      .
        * New upstream stable update:
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.6
          - scsi: sd: Fix sd_do_mode_sense() buffer length handling
            (Closes: #1001559)
          - ACPI: Get acpi_device's parent from the parent field
          - ACPI: CPPC: Add NULL pointer check to cppc_get_perf()
          - USB: serial: pl2303: fix GC type detection
          - USB: serial: option: add Telit LE910S1 0x9200 composition
          - USB: serial: option: add Fibocom FM101-GL variants
          - [arm*] usb: dwc2: gadget: Fix ISOC flow for elapsed frames
          - [arm*] usb: dwc2: hcd_queue: Fix use of floating point literal
          - [arm64,armhf] usb: dwc3: leave default DMA for PCI devices
          - [arm64,armhf] usb: dwc3: core: Revise GHWPARAMS9 offset
          - [arm64,armhf] usb: dwc3: gadget: Ignore NoStream after End Transfer
          - [arm64,armhf] usb: dwc3: gadget: Check for L1/L2/U3 for Start Transfer
          - [arm64,armhf] usb: dwc3: gadget: Fix null pointer exception
          - net: usb: Correct PHY handling of smsc95xx
          - net: nexthop: fix null pointer dereference when IPv6 is not enabled
          - [arm64,armhf] usb: chipidea: ci_hdrc_imx: fix potential error pointer
            dereference in probe
          - [x86,arm64] usb: typec: fusb302: Fix masking of comparator and bc_lvl
            interrupts
          - [arm64,armhf] usb: xhci: tegra: Check padctrl interrupt presence in
            device tree
          - usb: hub: Fix usb enumeration issue due to address0 race
          - usb: hub: Fix locking issues with address0_mutex
          - binder: fix test regression due to sender_euid change
          - ALSA: ctxfi: Fix out-of-range access
          - [x86] ALSA: hda/realtek: Add quirk for ASRock NUC Box 1100
          - [x86] ALSA: hda/realtek: Fix LED on HP ProBook 435 G7
          - media: cec: copy sequence field for the reply
          - [hppa] Revert "parisc: Fix backtrace to always include init funtion
            names" (regression in 5.15.3)
          - HID: wacom: Use "Confidence" flag to prevent reporting invalid contacts
          - staging: rtl8192e: Fix use after free in _rtl92e_pci_disconnect()
          - staging: r8188eu: Use kzalloc() with GFP_ATOMIC in atomic context
          - staging: r8188eu: Fix breakage introduced when 5G code was removed
          - staging: r8188eu: use GFP_ATOMIC under spinlock
          - staging: r8188eu: fix a memory leak in rtw_wx_read32()
          - xen: don't continue xenstore initialization in case of errors
          - xen: detect uninitialized xenbus in xenbus_init
          - io_uring: correct link-list traversal locking
          - io_uring: fail cancellation for EXITING tasks
          - io_uring: fix link traversal locking
          - drm/amdgpu: IH process reset count when restart
          - drm/amdgpu/pm: fix powerplay OD interface (regression in 5.15)
          - drm/nouveau: recognise GA106
          - [powerpc*] KVM: PPC: Book3S HV: Prevent POWER7/8 TLB flush flushing SLB
          - tracing/uprobe: Fix uprobe_perf_open probes iteration
          - tracing: Fix pid filtering when triggers are attached
          - [arm64,armhf] mmc: sdhci-esdhc-imx: disable CMDQ support
          - mmc: sdhci: Fix ADMA for PAGE_SIZE >= 64KiB
          - [armhf] mdio: aspeed: Fix "Link is Down" issue
          - [arm64] mm: Fix VM_BUG_ON(mm != &init_mm) for trans_pgd
          - [x86] cpufreq: intel_pstate: Fix active mode offline/online EPP handling
          - [powerpc] Fix hardlockup on vmap stack overflow
          - iomap: Fix inline extent handling in iomap_readpage
          - NFSv42: Fix pagecache invalidation after COPY/CLONE
          - [arm64] PCI: aardvark: Deduplicate code in advk_pcie_rd_conf()
          - [arm64] PCI: aardvark: Implement re-issuing config requests on CRS
            response
          - [arm64] PCI: aardvark: Simplify initialization of rootcap on virtual
            bridge
          - [arm64] PCI: aardvark: Fix link training
          - drm/amd/display: Fix OLED brightness control on eDP
          - proc/vmcore: fix clearing user buffer by properly using clear_user()
          - [x86] ASoC: SOF: Intel: hda: fix hotplug when only codec is suspended
          - netfilter: ctnetlink: fix filtering with CTA_TUPLE_REPLY
          - netfilter: ctnetlink: do not erase error code with EINVAL
          - netfilter: ipvs: Fix reuse connection if RS weight is 0
          - netfilter: flowtable: fix IPv6 tunnel addr match
          - media: v4l2-core: fix VIDIOC_DQEVENT handling on non-x86
          - [armhf] firmware: arm_scmi: Fix null de-reference on error path
          - ASoC: topology: Add missing rwsem around snd_ctl_remove() calls
          - net: ieee802154: handle iftypes as u32
          - [armhf] firmware: arm_scmi: Fix base agent discover response
          - [armhf] firmware: arm_scmi: pm: Propagate return value to caller
          - [armhf] ASoC: stm32: i2s: fix 32 bits channel length without mclk
          - NFSv42: Don't fail clone() unless the OP_CLONE operation failed
          - [armhf] socfpga: Fix crash with CONFIG_FORTIRY_SOURCE
          - drm/nouveau/acr: fix a couple NULL vs IS_ERR() checks
          - scsi: qla2xxx: edif: Fix off by one bug in qla_edif_app_getfcinfo()
          - scsi: mpt3sas: Fix kernel panic during drive powercycle test
          - scsi: mpt3sas: Fix system going into read-only mode
          - scsi: mpt3sas: Fix incorrect system timestamp
          - [arm*] drm/vc4: fix error code in vc4_create_object()
          - [armhf] drm/aspeed: Fix vga_pw sysfs output
          - HID: input: Fix parsing of HID_CP_CONSUMER_CONTROL fields
          - HID: input: set usage type to key on keycode remap
          - HID: magicmouse: prevent division by 0 on scroll
          - iavf: Prevent changing static ITR values if adaptive moderation is on
          - iavf: Fix refreshing iavf adapter stats on ethtool request
          - iavf: Fix VLAN feature flags after VFR
          - [x86] ALSA: intel-dsp-config: add quirk for JSL devices based on ES8336
            codec
          - mptcp: fix delack timer
          - mptcp: use delegate action to schedule 3rd ack retrans
          - af_unix: fix regression in read after shutdown
          - [arm64,armhf] firmware: smccc: Fix check for ARCH_SOC_ID not implemented
          - ipv6: fix typos in __ip6_finish_output()
          - nfp: checking parameter process for rx-usecs/tx-usecs is invalid
          - net: stmmac: retain PTP clock time during SIOCSHWTSTAMP ioctls
          - net: ipv6: add fib6_nh_release_dsts stub
          - net: nexthop: release IPv6 per-cpu dsts when replacing a nexthop group
          - ice: fix vsi->txq_map sizing
          - ice: avoid bpf_prog refcount underflow
          - scsi: core: sysfs: Fix setting device state to SDEV_RUNNING
          - scsi: scsi_debug: Zero clear zones at reset write pointer
          - erofs: fix deadlock when shrink erofs slab
          - i2c: virtio: disable timeout handling
          - net/smc: Ensure the active closing peer first closes clcsock
          - [arm64,armhf] net: marvell: mvpp2: increase MTU limit when XDP enabled
          - [x86] cpufreq: intel_pstate: Add Ice Lake server to out-of-band IDs
          - nvmet-tcp: fix incomplete data digest send
          - [x86] drm/hyperv: Fix device removal on Gen1 VMs
          - [arm64] uaccess: avoid blocking within critical sections
          - [armhf] net/ncsi : Add payload to be 32-bit aligned to fix dropped
            packets
          - PM: hibernate: use correct mode for swsusp_close()
          - drm/amd/display: Fix DPIA outbox timeout after GPU reset
          - drm/amd/display: Set plane update flags for all planes in reset
          - tcp_cubic: fix spurious Hystart ACK train detections for not-cwnd-limited
            flows
          - lan743x: fix deadlock in lan743x_phy_link_status_change()
          - net: phylink: Force link down and retrigger resolve on interface change
          - net: phylink: Force retrigger in case of latched link-fail indicator
          - net/smc: Fix NULL pointer dereferencing in smc_vlan_by_tcpsk()
          - net/smc: Fix loop in smc_listen
          - nvmet: use IOCB_NOWAIT only if the filesystem supports it
          - igb: fix netpoll exit with traffic
          - [mips*el/loongson-3] fix FTLB configuration
          - tls: splice_read: fix record type check
          - tls: splice_read: fix accessing pre-processed records
          - tls: fix replacing proto_ops
          - net: stmmac: Disable Tx queues when reconfiguring the interface
          - net/sched: sch_ets: don't peek at classes beyond 'nbands'
          - ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce()
          - net: vlan: fix underflow for the real_dev refcnt
          - net/smc: Don't call clcsock shutdown twice when smc shutdown
          - [arm64] net: hns3: fix VF RSS failed problem after PF enable multi-TCs
          - [arm64] net: hns3: fix incorrect components info of ethtool --reset
            command
          - locking/rwsem: Make handoff bit handling more consistent
          - perf: Ignore sigtrap for tracepoints destined for other tasks
          - sched/scs: Reset task stack state in bringup_cpu()
          - [arm64] iommu/rockchip: Fix PAGE_DESC_HI_MASKs for RK3568
          - [x86] iommu/vt-d: Fix unmap_pages support
          - f2fs: quota: fix potential deadlock
          - f2fs: set SBI_NEED_FSCK flag when inconsistent node block found
          - [riscv64] dts: microchip: fix board compatible
          - [riscv64] dts: microchip: drop duplicated MMC/SDHC node
          - cifs: nosharesock should not share socket with future sessions
          - ceph: properly handle statfs on multifs setups
          - [amd64] iommu/amd: Clarify AMD IOMMUv2 initialization messages
          - vhost/vsock: fix incorrect used length reported to the guest
          - tracing: Check pid filtering when creating events
          - cifs: nosharesock should be set on new server
          - io_uring: fix soft lockup when call __io_remove_buffers
          - [armhf] firmware: arm_scmi: Fix type error assignment in voltage protocol
          - [armhf] firmware: arm_scmi: Fix type error in sensor protocol
          - blk-mq: cancel blk-mq dispatch work in both blk_cleanup_queue and
            disk_release()
          - block: avoid to quiesce queue in elevator_init_mq
          - drm/amdgpu/gfx10: add wraparound gpu counter check for APUs as well
          - drm/amdgpu/gfx9: switch to golden tsc registers for renoir+
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.7
          - ALSA: usb-audio: Restrict rates for the shared clocks
          - ALSA: usb-audio: Rename early_playback_start flag with lowlatency_playback
          - ALSA: usb-audio: Disable low-latency playback for free-wheel mode
          - ALSA: usb-audio: Disable low-latency mode for implicit feedback sync
          - ALSA: usb-audio: Check available frames for the next packet size
          - ALSA: usb-audio: Add spinlock to stop_urbs()
          - ALSA: usb-audio: Improved lowlatency playback support
          - ALSA: usb-audio: Avoid killing in-flight URBs during draining
          - ALSA: usb-audio: Fix packet size calculation regression
          - ALSA: usb-audio: Less restriction for low-latency playback mode
          - ALSA: usb-audio: Switch back to non-latency mode at a later point
          - ALSA: usb-audio: Don't start stream for capture at prepare
          - gfs2: release iopen glock early in evict
          - gfs2: Fix length of holes reported at end-of-file
          - [powerpc*] pseries/ddw: Revert "Extend upper limit for huge DMA window
            for persistent memory"
          - [powerpc*] pseries/ddw: Do not try direct mapping with persistent memory
            and one window
          - mac80211: do not access the IV when it was stripped
          - mac80211: fix throughput LED trigger
          - [x86] hyperv: Move required MSRs check to initial platform probing
          - net/smc: Transfer remaining wait queue entries during fallback
          - net: return correct error code
          - [x86] platform/x86: dell-wmi-descriptor: disable by default
          - [x86] platform/x86: thinkpad_acpi: Add support for dual fan control
          - [x86] platform/x86: thinkpad_acpi: Fix WWAN device disabled issue after
            S3 deep
          - btrfs: silence lockdep when reading chunk tree during mount
          - btrfs: check-integrity: fix a warning on write caching disabled disk
          - thermal: core: Reset previous low and high trip during thermal zone init
          - scsi: iscsi: Unblock session then wake up error handler
          - net: usb: r8152: Add MAC passthrough support for more Lenovo Docks
          - drm/amd/pm: Remove artificial freq level on Navi1x
          - drm/amd/amdkfd: Fix kernel panic when reset failed and been triggered
            again
          - drm/amd/amdgpu: fix potential memleak
          - [x86] ata: ahci: Add Green Sardine vendor ID as board_ahci_mobile
          - ata: libahci: Adjust behavior when StorageD3Enable _DSD is set
          - [arm64] ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array
            overflow in hns_dsaf_ge_srst_by_port()
          - ipv6: check return value of ipv6_skip_exthdr
          - [alpha] net: tulip: de4x5: fix the problem that the array 'lp->phy[8]'
            may be out of bound
          - [alpha] net: ethernet: dec: tulip: de4x5: fix possible array overflows in
            type3_infoblock()
          - perf sort: Fix the 'weight' sort key behavior
          - perf sort: Fix the 'ins_lat' sort key behavior
          - perf sort: Fix the 'p_stage_cyc' sort key behavior
          - [arm*] perf inject: Fix ARM SPE handling
          - perf hist: Fix memory leak of a perf_hpp_fmt
          - perf report: Fix memory leaks around perf_tip()
          - tracing: Don't use out-of-sync va_list in event printing
          - net/smc: Avoid warning of possible recursive locking
          - ACPI: Add stubs for wakeup handler functions
          - net/tls: Fix authentication failure in CCM mode
          - vrf: Reset IPCB/IP6CB when processing outbound pkts in vrf dev xmit
          - kprobes: Limit max data_size of the kretprobe instances
          - rt2x00: do not mark device gone on EPROTO errors during start
          - ipmi: Move remove_work to dedicated workqueue
          - cpufreq: Fix get_cpu_device() failure in add_cpu_dev_symlink()
          - iwlwifi: mvm: retry init flow if failed
          - [s390x] pci: move pseudo-MMIO to prevent MIO overlap
          - scsi: lpfc: Fix non-recovery of remote ports following an unsolicited LOGO
          - scsi: ufs: ufs-pci: Add support for Intel ADL
          - ipv6: fix memory leak in fib6_rule_suppress
          - drm/amd/display: Allow DSC on supported MST branch devices
          - [x86] drm/i915/dp: Perform 30ms delay after source OUI write
          - [x86] KVM: fix avic_set_running for preemptable kernels
          - KVM: Disallow user memslot with size that exceeds "unsigned long"
          - [x86] KVM: x86/mmu: Fix TLB flush range when handling disconnected pt
          - KVM: Ensure local memslot copies operate on up-to-date arch-specific data
          - [x86] KVM: x86: ignore APICv if LAPIC is not enabled
          - [x86] KVM: nVMX: Emulate guest TLB flush on nested VM-Enter with new
            vpid12
          - [x86] KVM: nVMX: Flush current VPID (L1 vs. L2) for
            KVM_REQ_TLB_FLUSH_GUEST
          - [x86] KVM: nVMX: Abide to KVM_REQ_TLB_FLUSH_GUEST request on nested
            vmentry/vmexit
          - [x86] KVM: VMX: prepare sync_pir_to_irr for running with APICv disabled
          - [x86] KVM: x86: Use a stable condition around all VT-d PI paths
          - [x86] KVM: MMU: shadow nested paging does not have PKU
          - [arm64] KVM: arm64: Avoid setting the upper 32 bits of TCR_EL2 and
            CPTR_EL2 to 1
          - [x86] KVM: X86: Use vcpu->arch.walk_mmu for kvm_mmu_invlpg()
          - [x86] KVM: x86: check PIR even for vCPUs with disabled APICv
          - tracing/histograms: String compares should not care about signed values
          - [arm64,armhf] net: dsa: mv88e6xxx: Fix application of erratum 4.8 for
            88E6393X
          - [arm64,armhf] net: dsa: mv88e6xxx: Drop unnecessary check in
            mv88e6393x_serdes_erratum_4_6()
          - [arm64,armhf] net: dsa: mv88e6xxx: Save power by disabling SerDes
            trasmitter and receiver
          - [arm64,armhf] net: dsa: mv88e6xxx: Add fix for erratum 5.2 of 88E6393X
            family
          - [arm64,armhf] net: dsa: mv88e6xxx: Fix inband AN for 2500base-x on
            88E6393X family
          - [arm64,armhf] net: dsa: mv88e6xxx: Link in pcs_get_state() if AN is
            bypassed
          - wireguard: allowedips: add missing __rcu annotation to satisfy sparse
          - wireguard: device: reset peer src endpoint when netns exits
          - wireguard: receive: use ring buffer for incoming handshakes
          - wireguard: receive: drop handshakes if queue lock is contended
          - wireguard: ratelimiter: use kvcalloc() instead of kvzalloc()
          - [armhf] i2c: stm32f7: flush TX FIFO upon transfer errors
          - [armhf] i2c: stm32f7: recover the bus on access timeout
          - [armhf] i2c: stm32f7: stop dma transfer in case of NACK
          - tcp: fix page frag corruption on page fault
          - net: qlogic: qlcnic: Fix a NULL pointer dereference in
            qlcnic_83xx_add_rings()
          - net: mpls: Fix notifications when deleting a device
          - siphash: use _unaligned version by default
          - [arm64] ftrace: add missing BTIs
          - iwlwifi: fix warnings produced by kernel debug options
          - net/mlx5e: IPsec: Fix Software parser inner l3 type setting in case of
            encapsulation
          - net/mlx4_en: Fix an use-after-free bug in mlx4_en_try_alloc_resources()
          - [armhf] net: dsa: b53: Add SPI ID table (regression in 5.15)
          - mt76: mt7915: fix NULL pointer dereference in mt7915_get_phy_mode
          - [arm64,armhf] ASoC: tegra: Fix wrong value type in ADMAIF
          - [arm64,armhf] ASoC: tegra: Fix wrong value type in I2S
          - [arm64,armhf] ASoC: tegra: Fix wrong value type in DMIC
          - [arm64,armhf] ASoC: tegra: Fix wrong value type in DSPK
          - [arm64,armhf] ASoC: tegra: Fix kcontrol put callback in ADMAIF
          - [arm64,armhf] ASoC: tegra: Fix kcontrol put callback in I2S
          - [arm64,armhf] ASoC: tegra: Fix kcontrol put callback in DMIC
          - [arm64,armhf] ASoC: tegra: Fix kcontrol put callback in DSPK
          - [arm64,armhf] ASoC: tegra: Fix kcontrol put callback in AHUB
          - rxrpc: Fix rxrpc_peer leak in rxrpc_look_up_bundle()
          - rxrpc: Fix rxrpc_local leak in rxrpc_lookup_peer()
          - [x86] ALSA: intel-dsp-config: add quirk for CML devices based on ES8336
            codec
          - net: stmmac: Avoid DMA_CHAN_CONTROL write if no Split Header support
          - net: usb: lan78xx: lan78xx_phy_init(): use PHY_POLL instead of "0" if no
            IRQ is available
          - [arm64,armhf] net: marvell: mvpp2: Fix the computation of shared CPUs
          - [arm64] dpaa2-eth: destroy workqueue at the end of remove function
          - net: annotate data-races on txq->xmit_lock_owner
          - ipv4: convert fib_num_tclassid_users to atomic_t
          - net/smc: fix wrong list_del in smc_lgr_cleanup_early
          - net/rds: correct socket tunable error in rds_tcp_tune()
          - net/smc: Keep smc_close_final rc during active close
          - [arm64] drm/msm/a6xx: Allocate enough space for GMU registers
          - [arm64] drm/msm: Do hw_init() before capturing GPU state
          - [arm*] drm/vc4: kms: Wait for the commit before increasing our clock rate
          - [arm*] drm/vc4: kms: Fix return code check
          - [arm*] drm/vc4: kms: Add missing drm_crtc_commit_put
          - [arm*] drm/vc4: kms: Clear the HVS FIFO commit pointer once done
          - [arm*] drm/vc4: kms: Don't duplicate pending commit
          - [arm*] drm/vc4: kms: Fix previous HVS commit wait
          - atlantic: Increase delay for fw transactions
          - atlatnic: enable Nbase-t speeds with base-t
          - atlantic: Fix to display FW bundle version instead of FW mac version.
          - atlantic: Add missing DIDs and fix 115c.
          - atlantic: Remove Half duplex mode speed capabilities.
          - atlantic: Fix statistics logic for production hardware
          - atlantic: Remove warn trace message.
          - [x86] KVM: x86/mmu: Skip tlb flush if it has been done in zap_gfn_range()
          - [x86] KVM: x86/mmu: Pass parameter flush as false in
            kvm_tdp_mmu_zap_collapsible_sptes()
          - [arm64] drm/msm/devfreq: Fix OPP refcnt leak
          - [arm64] drm/msm: Fix mmap to include VM_IO and VM_DONTDUMP
          - [arm64] drm/msm: Fix wait_fence submitqueue leak
          - [arm64] drm/msm: Restore error return on invalid fence
          - iwlwifi: Fix memory leaks in error handling path
          - [x86] KVM: X86: Fix when shadow_root_level=5 && guest root_level<4
          - [x86] KVM: SEV: initialize regions_list of a mirror VM
          - net/mlx5e: Fix missing IPsec statistics on uplink representor
          - net/mlx5: Move MODIFY_RQT command to ignore list in internal error state
          - net/mlx5: E-switch, Respect BW share of the new group
          - net/mlx5: E-Switch, fix single FDB creation on BlueField
          - net/mlx5: E-Switch, Check group pointer before reading bw_share value
          - [x86] KVM: x86/pmu: Fix reserved bits for AMD PerfEvtSeln register
          - [x86] KVM: VMX: Set failure code in prepare_vmcs02()
          - io-wq: don't retry task_work creation failure on fatal conditions
          - [x86] sev: Fix SEV-ES INS/OUTS instructions for word, dword, and qword
          - [x86] entry: Add a fence for kernel entry SWAPGS in paranoid_entry()
          - [x86] entry: Use the correct fence macro after swapgs in kernel CR3
          - [x86] xen: Add xenpv_restore_regs_and_return_to_usermode()
          - preempt/dynamic: Fix setup_preempt_mode() return value
          - sched/uclamp: Fix rq->uclamp_max not set on first enqueue
          - [x86] KVM: SEV: Return appropriate error codes if SEV-ES scratch setup
            fails
          - [x86] KVM: x86/mmu: Rename slot_handle_leaf to slot_handle_level_4k
          - [x86] KVM: x86/mmu: Remove spurious TLB flushes in TDP MMU zap
            collapsible path
          - net/mlx5e: Rename lro_timeout to packet_merge_timeout
          - net/mlx5e: Rename TIR lro functions to TIR packet merge functions
          - net/mlx5e: Sync TIR params updates against concurrent create/modify
          - [hppa] Fix KBUILD_IMAGE for self-extracting kernel
          - [hppa] Fix "make install" on newer debian releases
          - [hppa] Mark cr16 CPU clocksource unstable on all SMP machines
          - vgacon: Propagate console boot parameters before calling `vc_resize'
          - xhci: Fix commad ring abort, write all 64 bits to CRCR register.
          - USB: NO_LPM quirk Lenovo Powered USB-C Travel Hub
          - [x86,arm64] usb: typec: tcpm: Wait in SNK_DEBOUNCED until disconnect
          - [x86] tsc: Add a timer to make sure TSC_adjust is always checked
          - [x86] tsc: Disable clocksource watchdog for TSC on qualified platorms
          - [amd64] mm: Map all kernel memory into trampoline_pgd
          - [arm64] tty: serial: msm_serial: Deactivate RX DMA for polling support
          - [arm*] serial: pl011: Add ACPI SBSA UART match id
          - [arm64,armhf] serial: tegra: Change lower tolerance baud rate limit for
            tegra20 and tegra30
          - serial: core: fix transmit-buffer reset and memleak
          - serial: 8250_pci: Fix ACCES entries in pci_serial_quirks array
          - serial: 8250_pci: rewrite pericom_do_set_divisor()
          - serial: 8250: Fix RTS modem control while in rs485 mode
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.8
          - usb: gadget: uvc: fix multiple opens
          - [x86] HID: quirks: Add quirk for the Microsoft Surface 3 type-cover
          - HID: google: add eel USB id
          - [x86] HID: intel-ish-hid: ipc: only enable IRQ wakeup when requested
          - HID: bigbenff: prevent null pointer dereference
          - HID: wacom: fix problems when device is not a valid USB device
          - HID: check for valid USB device for many HID drivers
          - mtd: dataflash: Add device-tree SPI IDs (regression in 5.15)
          - mmc: spi: Add device-tree SPI IDs
          - HID: sony: fix error path in probe
          - [x86] HID: Ignore battery for Elan touchscreen on Asus UX550VE
          - [x86] platform/x86/intel: hid: add quirk to support Surface Go 3
          - [x86] nft_set_pipapo: Fix bucket load in AVX2 lookup routine for six
            8-bit groups
          - IB/hfi1: Insure use of smp_processor_id() is preempt disabled
          - IB/hfi1: Fix early init panic
          - IB/hfi1: Fix leak of rcvhdrtail_dummy_kvaddr
          - can: kvaser_usb: get CAN clock frequency from device
          - can: kvaser_pciefd: kvaser_pciefd_rx_error_frame(): increase correct
            stats->{rx,tx}_errors counter
          - can: sja1000: fix use after free in ems_pcmcia_add_card()
          - [i386] can: pch_can: pch_can_rx_normal: fix use after free
          - [arm64,armhf] net: dsa: mv88e6xxx: fix "don't use PHY_DETECT on internal
            PHY's"
          - [arm64,armhf] net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
          - [x86] sme: Explicitly map new EFI memmap table as encrypted
          - [x86] platform/x86: amd-pmc: Fix s2idle failures on certain AMD laptops
          - nfc: fix potential NULL pointer deref in nfc_genl_dump_ses_done
          - vrf: don't run conntrack on vrf with !dflt qdisc
          - bpf, sockmap: Attach map progs to psock early for feature probes
          - bpf: Make sure bpf_disable_instrumentation() is safe vs preemption.
          - bpf: Fix the off-by-two error in range markings
          - ice: ignore dropped packets during init
          - ethtool: do not perform operations on net devices being unregistered
          - bonding: make tx_rebalance_counter an atomic
          - nfp: Fix memory leak in nfp_cpp_area_cache_add()
          - seg6: fix the iif in the IPv6 socket control block
          - udp: using datalen to cap max gso segments
          - netfilter: nft_exthdr: break evaluation if setting TCP option fails
          - netfilter: conntrack: annotate data-races around ct->timeout
          - iavf: restore MSI state on reset
          - iavf: Fix reporting when setting descriptor count
          - IB/hfi1: Correct guard on eager buffer deallocation
          - devlink: fix netns refcount leak in devlink_nl_cmd_reload()
          - [arm64,armhf] net: dsa: mv88e6xxx: error handling for serdes_power
            functions
          - [arm64] net: dsa: felix: Fix memory leak in felix_setup_mmio_filtering
          - net/sched: fq_pie: prevent dismantle issue
          - [arm64,armhf] net: mvpp2: fix XDP rx queues registering
          - [x86] KVM: x86: Don't WARN if userspace mucks with RCX during string I/O
            exit
          - [x86] KVM: x86: Ignore sparse banks size for an "all CPUs", non-sparse
            IPI req
          - [x86] KVM: x86: Wait for IPIs to be delivered when handling Hyper-V TLB
            flush hypercall
          - timers: implement usleep_idle_range()
          - mm/slub: fix endianness bug for alloc/free_traces attributes
          - mm: bdi: initialize bdi_min_ratio when bdi is unregistered
          - ALSA: ctl: Fix copy of updated id with element read/write
          - [x86] ALSA: hda/realtek - Add headset Mic support for Lenovo ALC897
            platform
          - [x86] ALSA: hda/realtek: Fix quirk for TongFang PHxTxX1
          - ALSA: pcm: oss: Fix negative period/buffer sizes
          - ALSA: pcm: oss: Limit the period size to 16MB
          - ALSA: pcm: oss: Handle missing errors in snd_pcm_oss_change_params*()
          - cifs: Fix crash on unload of cifs_arc4.ko
          - scsi: qla2xxx: Format log strings only if needed
          - btrfs: clear extent buffer uptodate when we fail to write it
          - btrfs: fix re-dirty process of tree-log nodes
          - btrfs: replace the BUG_ON in btrfs_del_root_ref with proper error
            handling
          - btrfs: free exchange changeset on failures
          - [x86] perf intel-pt: Fix some PGE (packet generation enable/control flow
            packets) usage
          - [x86] perf intel-pt: Fix sync state when a PSB (synchronization) packet
            is found
          - [x86] perf intel-pt: Fix intel_pt_fup_event() assumptions about setting
            state type
          - [x86] perf intel-pt: Fix state setting when receiving overflow (OVF)
            packet
          - [x86] perf intel-pt: Fix next 'err' value, walking trace
          - [x86] perf intel-pt: Fix missing 'instruction' events with 'q' option
          - [x86] perf intel-pt: Fix error timestamp setting on the decoder error
            path
          - md: fix update super 1.0 on rdev size change
          - nfsd: Fix nsfd startup race (again)
          - tracefs: Have new files inherit the ownership of their parent
          - hwmon: (pwm-fan) Ensure the fan going on in .probe()
          - [arm64] clk: qcom: regmap-mux: fix parent clock lookup
          - [x86] thermal: int340x: Fix VCoRefLow MMIO bit offset for TGL
          - drm/syncobj: Deal with signalled fences in drm_syncobj_find_fence.
          - libata: add horkage for ASMedia 1092
          - io_uring: ensure task_work gets run as part of cancelations
          - wait: add wake_up_pollfree()
          - binder: use wake_up_pollfree()
          - signalfd: use wake_up_pollfree()
          - aio: keep poll requests on waitqueue until completed
          - aio: fix use-after-free due to missing POLLFREE handling
          - tracefs: Set all files to the same group ownership as the mount option
          - [powerpc*] i2c: mpc: Use atomic read and fix break condition
          - block: fix ioprio_get(IOPRIO_WHO_PGRP) vs setuid(2)
          - scsi: pm80xx: Do not call scsi_remove_host() in pm8001_alloc()
          - scsi: scsi_debug: Fix buffer size of REPORT ZONES command
          - ALSA: usb-audio: Reorder snd_djm_devices[] entries
          - qede: validate non LSO skb length
          - PM: runtime: Fix pm_runtime_active() kerneldoc comment
          - ASoC: rt5682: Fix crash due to out of scope stack vars
          - [arm64] RDMA/hns: Do not halt commands during reset until later
          - [arm64] RDMA/hns: Do not destroy QP resources in the hw resetting phase
          - [x86] hwmon: (dell-smm) Fix warning on /proc/i8k creation error
          - [arm64] clk: qcom: clk-alpha-pll: Don't reconfigure running Trion
          - i40e: Fix failed opcode appearing if handling messages from VF
          - i40e: Fix pre-set max number of queues for VF
          - bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
          - i40e: Fix NULL pointer dereference in i40e_dbg_dump_desc
          - [arm64] Revert "PCI: aardvark: Fix support for PCI_ROM_ADDRESS1 on
            emulated bridge" (regression in 5.15.3)
          - drm/amd/display: Fix DPIA outbox timeout after S3/S4/reset
          - perf tools: Fix SMT detection fast read path
          - net: cdc_ncm: Allow for dwNtbOutMaxSize to be unset or zero
          - [arm64] net: fec: only clear interrupt of handling queue in
            fec_enet_rx_queue()
          - net, neigh: clear whole pneigh_entry at alloc time
          - net/qla3xxx: fix an error code in ql_adapter_up()
          - [arm64] Revert "usb: dwc3: dwc3-qcom: Enable tx-fifo-resize property by
            default" (regression in 5.15)
          - usb: core: config: fix validation of wMaxPacketValue entries
          - xhci: Remove CONFIG_USB_DEFAULT_PERSIST to prevent xHCI from runtime
            suspending
          - xhci: avoid race between disable slot command and host runtime suspend
          - iio: gyro: adxrs290: fix data signedness
          - iio: trigger: Fix reference counting
          - iio: stk3310: Don't return error code in interrupt handler
          - iio: mma8452: Fix trigger reference couting
          - iio: ltr501: Don't return error code in trigger handler
          - iio: kxsd9: Don't return error code in trigger handler
          - iio: itg3200: Call iio_trigger_notify_done() on error
          - iio: adc: axp20x_adc: fix charging current reporting on AXP22x
          - iio: ad7768-1: Call iio_trigger_notify_done() on error
          - iio: accel: kxcjk-1013: Fix possible memory leak in probe and remove
          - misc: rtsx: Avoid mangling IRQ during runtime PM
          - nvmem: eeprom: at25: fix FRAM byte_len
          - bus: mhi: pci_generic: Fix device recovery failed issue
          - bus: mhi: core: Add support for forced PM resume
          - [armhf] irqchip/aspeed-scu: Replace update_bits with write_bits.
          - [armhf] irqchip/armada-370-xp: Fix return value of
            armada_370_xp_msi_alloc()
          - [armhf] irqchip/armada-370-xp: Fix support for Multi-MSI interrupts
          - aio: Fix incorrect usage of eventfd_signal_allowed()
          - [arm64,armhf] irqchip/irq-gic-v3-its.c: Force synchronisation when
            issuing INVALL
          - [armhf] clocksource/drivers/dw_apb_timer_of: Fix probe failure
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.9
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.10
          - nfc: fix segfault in nfc_genl_dump_devices_done
          - [x86] hwmon: (corsair-psu) fix plain integer used as NULL pointer
          - RDMA: Fix use-after-free in rxe_queue_cleanup
          - RDMA/mlx5: Fix releasing unallocated memory in dereg MR flow
          - mtd: rawnand: Fix nand_erase_op delay
          - mtd: rawnand: Fix nand_choose_best_timings() on unsupported interface
          - netfs: Fix lockdep warning from taking sb_writers whilst holding
            mmap_lock
          - ice: fix FDIR init missing when reset VF
          - [x86] vmxnet3: fix minimum vectors alloc issue
          - [arm64] drm/msm: Fix null ptr access msm_ioctl_gem_submit()
          - [arm64] drm/msm/a6xx: Fix uinitialized use of gpu_scid
          - [arm64] drm/msm/dsi: set default num_data_lanes
          - [arm64] drm/msm/dp: Avoid unpowered AUX xfers that caused crashes
          - [arm64] KVM: arm64: Save PSTATE early on exit
          - [arm64] Revert "tty: serial: fsl_lpuart: drop earlycon entry for
            i.MX8QXP"
          - net/mlx4_en: Update reported link modes for 1/10G
          - loop: Use pr_warn_once() for loop_control_remove() warning
          - ALSA: hda: Add Intel DG2 PCI ID and HDMI codec vid
          - [x86] ALSA: hda/hdmi: fix HDA codec entry table order for ADL-P
          - [arm64,armhf] i2c: rk3x: Handle a spurious start completion interrupt
            flag
          - net: netlink: af_netlink: Prevent empty skb by adding a check on len.
          - drm/amdgpu: cancel the correct hrtimer on exit
          - drm/amdgpu: check atomic flag to differeniate with legacy path
          - drm/amd/display: Fix for the no Audio bug with Tiled Displays
          - drm/amdkfd: fix double free mem structure
          - drm/amd/display: add connector type check for CRC source set
          - drm/amdkfd: process_info lock not needed for svm
          - tracing: Fix a kmemleak false positive in tracing_map
          - fuse: make sure reclaim doesn't write the inode
          - perf inject: Fix itrace space allowed for new attributes
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.11
          - [x86] KVM: VMX: clear vmx_x86_ops.sync_pir_to_irr if APICv is disabled
          - KVM: downgrade two BUG_ONs to WARN_ON_ONCE
          - [x86] kvm: remove unused ack_notifier callbacks
          - [x86] KVM: X86: Fix tlb flush for tdp in kvm_invalidate_pcid()
          - mac80211: fix rate control for retransmitted frames
          - mac80211: fix regression in SSN handling of addba tx
          - mac80211: mark TX-during-stop for TX in in_reconfig
          - mac80211: send ADDBA requests using the tid/queue of the aggregation
            session
          - mac80211: validate extended element ID is present
          - [arm64] firmware: arm_scpi: Fix string overflow in SCPI genpd driver
          - virtio_ring: Fix querying of maximum DMA mapping size for virtio device
          - [s390x] entry: fix duplicate tracking of irq nesting level
          - [s390x] recordmcount.pl: look for jgnop instruction as well as bcrl on
            s390
          - [arm64] dts: ten64: remove redundant interrupt declaration for gpio-keys
          - ceph: fix up non-directory creation in SGID directories
          - dm btree remove: fix use after free in rebalance_children()
          - audit: improve robustness of the audit queue handling
          - btrfs: convert latest_bdev type to btrfs_device and rename
          - btrfs: use latest_dev in btrfs_show_devname
          - btrfs: update latest_dev when we create a sprout device
          - btrfs: remove stale comment about the btrfs_show_devname
          - scsi: ufs: core: Retry START_STOP on UNIT_ATTENTION
          - [x86] drm/i915/hdmi: convert intel_hdmi_to_dev to intel_hdmi_to_i915
          - [x86] drm/i915/hdmi: Turn DP++ TMDS output buffers back on in encoder->
            shutdown()
          - [x86] pinctrl: amd: Fix wakeups when IRQ is shared with SCI
          - [arm64] dts: rockchip: remove mmc-hs400-enhanced-strobe from
            rk3399-khadas-edge
          - [arm64] dts: rockchip: fix rk3308-roc-cc vcc-sd supply
          - [arm64] dts: rockchip: fix rk3399-leez-p710 vcc3v3-lan supply
          - [arm64] dts: rockchip: fix audio-supply for Rock Pi 4
          - [arm64] dts: rockchip: fix poweroff on helios64
          - mac80211: track only QoS data frames for admission control
          - ceph: fix duplicate increment of opened_inodes metric
          - ceph: initialize pathlen variable in reconnect_caps_cb
          - [armhf] socfpga: dts: fix qspi node compatible
          - [arm64] dts: imx8mq: remove interconnect property from lcdif
          - clk: Don't parent clks until the parent is fully registered
          - [armhf] soc: imx: Register SoC device only on i.MX boards
          - iwlwifi: mvm: don't crash on invalid rate w/o STA
          - virtio/vsock: fix the transport to work with VMADDR_CID_ANY
          - Revert "drm/fb-helper: improve DRM fbdev emulation device names"
          - sch_cake: do not call cake_destroy() from cake_init()
          - inet_diag: fix kernel-infoleak for UDP sockets
          - netdevsim: don't overwrite read only ethtool parms
          - [arm64] net: hns3: fix use-after-free bug in hclgevf_send_mbx_msg
          - [arm64] net: hns3: fix race condition in debugfs
          - net/sched: sch_ets: don't remove idle classes from the round-robin list
          - [arm64,armhf] net: dsa: mv88e6xxx: Unforce speed & duplex in
            mac_link_down()
          - mptcp: never allow the PM to close a listener subflow
          - drm/ast: potential dereference of null pointer
          - [x86] drm/i915/display: Fix an unsigned subtraction which can never be
            negative.
          - mac80211: agg-tx: don't schedule_and_wake_txq() under sta->lock
          - cfg80211: Acquire wiphy mutex on regulatory work
          - mac80211: fix lookup when adding AddBA extension element
          - net: stmmac: fix tc flower deletion for VLAN priority Rx steering
          - flow_offload: return EOPNOTSUPP for the unsupported mpls action type
          - rds: memory leak in __rds_conn_create() (CVE-2021-45480)
          - ice: Use div64_u64 instead of div_u64 in adjfine
          - ice: Don't put stale timestamps in the skb
          - drm/amd/display: Set exit_optimized_pwr_state for DCN31
          - drm/amd/pm: fix a potential gpu_metrics_table memory leak
          - mptcp: remove tcp ulp setsockopt support
          - mptcp: clear 'kern' flag from fallback sockets
          - mptcp: fix deadlock in __mptcp_push_pending()
          - [arm64,armhf] soc/tegra: fuse: Fix bitwise vs. logical OR warning
          - igb: Fix removal of unicast MAC filters of VFs
          - igbvf: fix double free in `igbvf_probe`
          - igc: Fix typo in i225 LTR functions
          - ixgbe: Document how to enable NBASE-T support
          - ixgbe: set X550 MDIO speed before talking to PHY
          - netdevsim: Zero-initialize memory for new map's value in function
            nsim_bpf_map_alloc (CVE-2021-4135)
          - net/packet: rx_owner_map depends on pg_vec
          - [arm64,armhf] net: stmmac: dwmac-rk: fix oob read in rk_gmac_setup
          - sfc_ef100: potential dereference of null pointer
          - [arm64,armhf] dsa: mv88e6xxx: fix debug print for SPEED_UNFORCED
          - net: Fix double 0x prefix print in SKB dump
          - net/smc: Prevent smc_release() from long blocking
          - sit: do not call ipip6_dev_free() from sit_init_net()
          - afs: Fix mmap
          - [arm64] kexec: Fix missing error code 'ret' warning in
            load_other_segments()
          - bpf: Fix extable fixup offset.
          - USB: gadget: bRequestType is a bitfield, not a enum
          - Revert "usb: early: convert to readl_poll_timeout_atomic()"
          - [x86] KVM: x86: Drop guest CPUID check for host initiated writes to
            MSR_IA32_PERF_CAPABILITIES
          - tty: n_hdlc: make n_hdlc_tty_wakeup() asynchronous
          - USB: NO_LPM quirk Lenovo USB-C to Ethernet Adapher(RTL8153-04)
          - [arm*] usb: dwc2: fix STM ID/VBUS detection startup delay in
            dwc2_driver_probe
          - PCI/MSI: Clear PCI_MSIX_FLAGS_MASKALL on error
          - PCI/MSI: Mask MSI-X vectors only on success
          - [x86] usb: xhci: Extend support for runtime power management for AMD's
            Yellow carp.
          - [x86,arm64] usb: typec: tcpm: fix tcpm unregister port but leave a
            pending timer
          - usb: gadget: u_ether: fix race in setting MAC address in setup phase
          - USB: serial: cp210x: fix CP2105 GPIO registration
          - USB: serial: option: add Telit FN990 compositions
          - selinux: fix sleeping function called from invalid context
          - btrfs: fix memory leak in __add_inode_ref()
          - btrfs: fix double free of anon_dev after failure to create subvolume
          - btrfs: check WRITE_ERR when trying to read an extent buffer
          - btrfs: fix missing blkdev_put() call in btrfs_scan_one_device()
          - zonefs: add MODULE_ALIAS_FS
          - iocost: Fix divide-by-zero on donation from low hweight cgroup
          - [x86] serial: 8250_fintek: Fix garbled text for console
          - timekeeping: Really make sure wall_to_monotonic isn't positive
          - cifs: sanitize multiple delimiters in prepath
          - locking/rtmutex: Fix incorrect condition in rtmutex_spin_on_owner()
          - [riscv64] dts: unleashed: Add gpio card detect to mmc-spi-slot
          - [riscv64] dts: unmatched: Add gpio card detect to mmc-spi-slot
          - perf inject: Fix segfault due to close without open
          - perf inject: Fix segfault due to perf_data__fd() without open
          - libata: if T_LENGTH is zero, dma direction should be DMA_NONE
          - [powerpc*] powerpc/module_64: Fix livepatching for RO modules
          - drm/amdgpu: correct register access for RLC_JUMP_TABLE_RESTORE
          - drm/amdgpu: don't override default ECO_BITs setting
          - drm/amd/pm: fix reading SMU FW version from amdgpu_firmware_info on YC
          - [armhf] dts: imx6ull-pinfunc: Fix CSI_DATA07__ESAI_TX0 pad name
          - mptcp: add missing documented NL params
          - [amd64] bpf, x64: Factor out emission of REX byte in more cases
          - bpf: Fix extable address check.
          - USB: core: Make do_proc_control() and do_proc_bulk() killable
          - media: mxl111sf: change mutex_init() location
          - ovl: fix warning in ovl_create_real()
          - scsi: scsi_debug: Don't call kcalloc() if size arg is zero
          - scsi: scsi_debug: Fix type in min_t to avoid stack OOB
          - scsi: scsi_debug: Sanity check block descriptor length in
            resp_mode_select()
          - io-wq: remove spurious bit clear on task_work addition
          - io-wq: check for wq exit after adding new worker task_work
          - rcu: Mark accesses to rcu_state.n_force_qs
          - io-wq: drop wqe lock before creating new worker
          - [armhf] bus: ti-sysc: Fix variable set but not used warning for
            reinit_modules
          - xen/blkfront: harden blkfront against event channel storms
            (CVE-2021-28711)
          - xen/netfront: harden netfront against event channel storms
            (CVE-2021-28712)
          - xen/console: harden hvc_xen against event channel storms
            (CVE-2021-28713)
          - xen/netback: fix rx queue stall detection (CVE-2021-28714)
          - xen/netback: don't queue unlimited number of packages (CVE-2021-28715)
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.12
          - net: usb: lan78xx: add Allied Telesis AT29M2-AF
          - ext4: prevent partial update of the extent blocks
          - ext4: check for out-of-order index extents in ext4_valid_extent_entries()
          - ext4: check for inconsistent extents between index and leaf block
          - HID: holtek: fix mouse probing
          - HID: potential dereference of null pointer
          - NFSD: Fix READDIR buffer overflow
          - PM: sleep: Fix error handling in dpm_prepare()
          - [arm64] dts: allwinner: orangepi-zero-plus: fix PHY mode
          - [arm64,armhf] bus: sunxi-rsb: Fix shutdown
          - spi: change clk_disable_unprepare to clk_unprepare
          - ucounts: Fix rlimit max values check
          - [arm64,armhf] ASoC: meson: aiu: fifo: Add missing
            dma_coerce_mask_and_coherent()
          - [arm64] RDMA/hns: Fix RNR retransmission issue for HIP08
          - IB/qib: Fix memory leak in qib_user_sdma_queue_pkts()
          - [arm64] RDMA/hns: Replace kfree() with kvfree()
          - netfilter: nf_tables: fix use-after-free in nft_set_catchall_destroy()
          - netfilter: fix regression in looped (broad|multi)cast's MAC handling
          - [armhf] dts: imx6qdl-wandboard: Fix Ethernet support
          - ice: Use xdp_buf instead of rx_buf for xsk zero-copy
          - ice: xsk: return xsk buffers back to pool when cleaning the ring
          - qlcnic: potential dereference null pointer of rx_queue->page_ring
          - tcp: move inet->rx_dst_ifindex to sk->sk_rx_dst_ifindex
          - ipv6: move inet6_sk(sk)->rx_dst_cookie to sk->sk_rx_dst_cookie
          - inet: fully convert sk->sk_rx_dst to RCU rules
          - net: accept UFOv6 packages in virtio_net_hdr_to_skb
          - net: skip virtio_net_hdr_set_proto if protocol already set
          - igb: fix deadlock caused by taking RTNL in RPM resume path
          - ipmi: Fix UAF when uninstall ipmi_si and ipmi_msghandler module
          - bonding: fix ad_actor_system option setting to default
          - [amd64] fjes: Check for error irq
          - [armhf] drivers: net: smc911x: Check for error irq
          - asix: fix uninit-value in asix_mdio_read()
          - asix: fix wrong return value in asix_check_host_enable()
          - io_uring: zero iocb->ki_pos for stream file types
          - veth: ensure skb entering GRO are not cloned.
          - net: stmmac: ptp: fix potentially overflowing expression
          - net: bridge: Use array_size() helper in copy_to_user()
          - net: bridge: fix ioctl old_deviceless bridge argument
          - r8152: fix the force speed doesn't work for RTL8156
          - Input: elantech - fix stack out of bound access in
            elantech_change_report_id()
          - [arm*] pinctrl: bcm2835: Change init order for gpio hogs
          - hwmon: (lm90) Fix usage of CONFIG2 register in detect function
          - hwmon: (lm90) Prevent integer overflow/underflow in hysteresis
            calculations
          - hwmon: (lm90) Introduce flag indicating extended temperature support
          - hwmon: (lm90) Add basic support for TI TMP461
          - hwmon: (lm90) Drop critical attribute support for MAX6654
          - kernel/crash_core: suppress unknown crashkernel parameter warning
          - [x86] Revert "x86/boot: Pull up cmdline preparation and early param
            parsing"
          - [x86] boot: Move EFI range reservation after cmdline parsing
          - ALSA: jack: Check the return value of kstrdup()
          - ALSA: drivers: opl3: Fix incorrect use of vp->state
          - ALSA: rawmidi - fix the uninitalized user_pversion
          - [x86] ALSA: hda/hdmi: Disable silent stream on GLK
          - [x86] ALSA: hda/realtek: Amp init fixup for HP ZBook 15 G6
          - [x86] ALSA: hda/realtek: Add new alc285-hp-amp-init model
          - [x86] ALSA: hda/realtek: fix mute/micmute LEDs for a HP ProBook
          - [x86] ALSA: hda/realtek: Fix quirk for Clevo NJ51CU
          - [arm64,armhf] ASoC: meson: aiu: Move AIU_I2S_MISC hold setting to
            aiu-fifo-i2s
          - [arm64,armhf] ASoC: tegra: Add DAPM switches for headphones and mic jack
          - [armhf] ASoC: tegra: Restore headphones jack name on Nyan Big
          - Input: atmel_mxt_ts - fix double free in mxt_read_info_block
          - ipmi: bail out if init_srcu_struct fails
          - ipmi: ssif: initialize ssif_info->client early
          - ipmi: fix initialization when workqueue allocation fails
          - [hppa] Correct completer in lws start
          - [hppa] Fix mask used to select futex spinlock
          - tee: handle lookup of shm with reference count 0
          - [x86] pkey: Fix undefined behaviour with PKRU_WD_BIT
          - [amd64] platform/x86: amd-pmc: only use callbacks for suspend
          - [x86] platform/x86: intel_pmc_core: fix memleak on registration failure
          - [x86] KVM: x86: Always set kvm_run->if_flag
          - [x86] KVM: x86/mmu: Don't advance iterator after restart due to yielding
          - [x86] KVM: nVMX: Synthesize TRIPLE_FAULT for L2 if emulation is required
          - [x86] KVM: VMX: Always clear vmx->fail on emulation_required
          - [x86] KVM: VMX: Wake vCPU when delivering posted IRQ even if vCPU == this
            vCPU
          - [armhf] pinctrl: stm32: consider the GPIO offset to expose all the GPIO
            lines
          - [arm64,armhf] mmc: sdhci-tegra: Fix switch to HS400ES mode
          - [armhf] mmc: meson-mx-sdhc: Set MANUAL_STOP for multi-block SDIO commands
          - mmc: core: Disable card detect during shutdown
          - [armhf] mmc: mmci: stm32: clear DLYB_CR after sending tuning command
          - mac80211: fix locking in ieee80211_start_ap error path
          - mm: mempolicy: fix THP allocations escaping mempolicy restrictions
          - mm, hwpoison: fix condition in free hugetlb page path
          - mm/hwpoison: clear MF_COUNT_INCREASED before retrying get_any_page()
          - [arm64] tee: optee: Fix incorrect page free bug
          - f2fs: fix to do sanity check on last xattr entry in __f2fs_setxattr()
            (CVE-2021-45469)
          - netfs: fix parameter of cleanup()
          - [x86] KVM: VMX: Fix stale docs for kvm-intel.emulate_invalid_guest_state
          - [arm64] dts: lx2160a: fix scl-gpios property name
          - [arm64] Input: elants_i2c - do not check Remark ID on eKTH3900/eKTH5312
          - Input: goodix - add id->model mapping for the "9111" model
          - [x86] ASoC: SOF: Intel: pci-tgl: add new ADL-P variant
          - [x86] ASoC: SOF: Intel: pci-tgl: add ADL-N support
          - ASoC: rt5682: fix the wrong jack type detected
          - hwmom: (lm90) Fix citical alarm status for MAX6680/MAX6681
          - hwmon: (lm90) Do not report 'busy' status bit as alarm
          - r8152: sync ocp base
          - ax25: NPD bug when detaching AX25 device
          - hamradio: defer ax25 kfree after unregister_netdev
          - hamradio: improve the incomplete fix to avoid NPD
          - tun: avoid double free in tun_free_netdev
          - phonet/pep: refuse to enable an unbound pipe
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.13
          - Input: i8042 - add deferred probe support
          - Input: i8042 - enable deferred probe quirk for ASUS UM325UA
          - tomoyo: Check exceeded quota early in tomoyo_domain_quota_is_ok().
          - tomoyo: use hwight16() in tomoyo_domain_quota_is_ok()
          - net/sched: Extend qdisc control block with tc control block
          - [x86] platform/x86: apple-gmux: use resource_size() with res
          - memblock: fix memblock_phys_alloc() section mismatch error
          - ALSA: hda: intel-sdw-acpi: harden detection of controller
          - ALSA: hda: intel-sdw-acpi: go through HDAS ACPI at max depth of 2
          - efi: Move efifb_setup_from_dmi() prototype from arch headers
          - selinux: initialize proto variable in selinux_ip_postroute_compat()
          - scsi: lpfc: Terminate string in lpfc_debugfs_nvmeio_trc_write()
          - net/mlx5: DR, Fix NULL vs IS_ERR checking in dr_domain_init_resources
          - net/mlx5: Fix error print in case of IRQ request failed
          - net/mlx5: Fix SF health recovery flow
          - net/mlx5: Fix tc max supported prio for nic mode
          - net/mlx5e: Wrap the tx reporter dump callback to extract the sq
          - net/mlx5e: Fix interoperability between XSK and ICOSQ recovery flow
          - net/mlx5e: Fix ICOSQ recovery flow for XSK
          - net/mlx5e: Use tc sample stubs instead of ifdefs in source file
          - net/mlx5e: Delete forward rule for ct or sample action
          - udp: using datalen to cap ipv6 udp max gso segments
          - sctp: use call_rcu to free endpoint
          - net/smc: fix using of uninitialized completions
          - net: usb: pegasus: Do not drop long Ethernet frames
          - net/smc: don't send CDC/LLC message if link not ready
          - net/smc: fix kernel panic caused by race of smc_sock
          - igc: Do not enable crosstimestamping for i225-V models
          - igc: Fix TX timestamp support for non-MSI-X platforms
          - drm/amd/display: Send s0i2_rdy in stream_count == 0 optimization
          - drm/amd/display: Set optimize_pwr_state for DCN31
          - net/mlx5e: Fix wrong features assignment in case of error
          - net: bridge: mcast: add and enforce query interval minimum
          - net: bridge: mcast: add and enforce startup query interval minimum
          - net: bridge: mcast: fix br_multicast_ctx_vlan_global_disabled helper
          - [armhf] net/ncsi: check for error return from call to nla_put_u32
          - i2c: validate user data in compat ioctl
          - nfc: uapi: use kernel size_t to fix user-space builds
          - uapi: fix linux/nfc.h userspace compilation errors
          - drm/nouveau: wait for the exclusive fence after the shared ones v2
            (Closes: #1000681)
          - drm/amdgpu: When the VCN(1.0) block is suspended, powergating is
            explicitly enabled
          - drm/amdgpu: add support for IP discovery gc_info table v2
          - drm/amd/display: Changed pipe split policy to allow for multi-display pipe
            split
          - xhci: Fresco FL1100 controller should not have BROKEN_MSI quirk set.
          - usb: gadget: f_fs: Clear ffs_eventfd in ffs_data_clear.
          - [arm*] binder: fix async_free_space accounting for empty parcels
          - [x86] scsi: vmw_pvscsi: Set residual data length conditionally
          - Input: appletouch - initialize work before device registration
          - Input: spaceball - fix parsing of movement data packets
          - net: fix use-after-free in tw_timer_handler
          - fs/mount_setattr: always cleanup mount_kattr
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.14
          - fscache_cookie_enabled: check cookie is valid before accessing it
          - tracing: Fix check for trace_percpu_buffer validity in get_trace_buf()
          - tracing: Tag trace_percpu_buffer as a percpu pointer
          - Revert "RDMA/mlx5: Fix releasing unallocated memory in dereg MR flow"
          - ieee802154: atusb: fix uninit value in atusb_set_extended_addr
          - i40e: Fix to not show opcode msg on unsuccessful VF MAC change
          - iavf: Fix limit of total number of queues to active queues of VF
          - RDMA/core: Don't infoleak GRH fields
          - Revert "net: usb: r8152: Add MAC passthrough support for more Lenovo
            Docks"
          - netrom: fix copying in user data in nr_setsockopt
          - RDMA/uverbs: Check for null return of kmalloc_array
          - mac80211: initialize variable have_higher_than_11mbit
          - mac80211: mesh: embedd mesh_paths and mpp_paths into ieee80211_if_mesh
          - sfc: The RX page_ring is optional
          - i40e: fix use-after-free in i40e_sync_filters_subtask()
          - i40e: Fix for displaying message regarding NVM version
          - i40e: Fix incorrect netdev's real number of RX/TX queues
          - ipv4: Check attribute length for RTA_GATEWAY in multipath route
          - ipv4: Check attribute length for RTA_FLOW in multipath route
          - ipv6: Check attribute length for RTA_GATEWAY in multipath route
          - ipv6: Check attribute length for RTA_GATEWAY when deleting multipath route
          - lwtunnel: Validate RTA_ENCAP_TYPE attribute length
          - sctp: hold endpoint before calling cb in sctp_transport_lookup_process
          - batman-adv: mcast: don't send link-local multicast to mcast routers
          - sch_qfq: prevent shift-out-of-bounds in qfq_init_qdisc
          - net: ena: Fix undefined state when tx request id is out of bounds
          - net: ena: Fix wrong rx request id by resetting device
          - net: ena: Fix error handling when calculating max IO queues number
          - md/raid1: fix missing bitmap update w/o WriteMostly devices
          - [x86] KVM: x86: Check for rmaps allocation
          - cgroup: Use open-time credentials for process migraton perm checks
            (CVE-2021-4197)
          - cgroup: Allocate cgroup_file_ctx for kernfs_open_file->priv
            (CVE-2021-4197)
          - cgroup: Use open-time cgroup namespace for process migration perm checks
            (CVE-2021-4197)
          - Revert "i2c: core: support bus regulator controlling in adapter"
          - xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate
            (CVE-2021-4155)
          - power: supply: core: Break capacity loop
          - rndis_host: support Hytera digital radios
          - net ticp:fix a kernel-infoleak in __tipc_sendmsg()
          - phonet: refcount leak in pep_sock_accep (CVE-2021-45095)
          - fbdev: fbmem: add a helper to determine if an aperture is used by a fw fb
          - drm/amdgpu: disable runpm if we are the primary adapter
          - [arm64] power: bq25890: Enable continuous conversion for ADC at charging
          - ipv6: Continue processing multipath route even if gateway attribute is
            invalid
          - ipv6: Do cleanup if attribute validation fails in multipath route
          - drm/amdgpu: fix dropped backing store handling in
            amdgpu_dma_buf_move_notify
          - scsi: libiscsi: Fix UAF in iscsi_conn_get_param()/iscsi_conn_teardown()
          - ip6_vti: initialize __ip6_tnl_parm struct in vti6_siocdevprivate
          - net: udp: fix alignment problem in udp4_seq_show()
          - atlantic: Fix buff_ring OOB in aq_ring_rx_clean
          - drm/amd/pm: skip setting gfx cgpg in the s0ix suspend-resume
          - drm/amdgpu: always reset the asic in suspend (v2)
          - drm/amdgpu: put SMU into proper state on runpm suspending for BOCO capable
            platform
          - mISDN: change function names to avoid conflicts
          - drm/amd/display: fix B0 TMDS deepcolor no dislay issue
          - drm/amd/display: Added power down for DCN10
          - ipv6: raw: check passed optlen before reading
          - Revert "drm/amdgpu: stop scheduler when calling hw_fini (v2)"
          - drm/amd/pm: keep the BACO feature enabled for suspend
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.15
          - workqueue: Fix unbind_workers() VS wq_worker_running() race
          - staging: r8188eu: switch the led off during deinit
          - bpf: Fix out of bounds access from invalid *_or_null type verification
            (CVE-2022-23222)
          - Bluetooth: btusb: Add protocol for MediaTek bluetooth devices(MT7922)
          - Bluetooth: btusb: Add the new support ID for Realtek RTL8852A
          - Bluetooth: btusb: Add support for IMC Networks Mediatek Chip(MT7921)
          - Bbluetooth: btusb: Add another Bluetooth part for Realtek 8852AE
          - Bluetooth: btusb: fix memory leak in btusb_mtk_submit_wmt_recv_urb()
          - Bluetooth: btusb: enable Mediatek to support AOSP extension
          - Bluetooth: btusb: Add one more Bluetooth part for the Realtek RTL8852AE
          - Bluetooth: btusb: Add the new support IDs for WCN6855
          - fget: clarify and improve __fget_files() implementation
          - Bluetooth: btusb: Add one more Bluetooth part for WCN6855
          - Bluetooth: btusb: Add two more Bluetooth parts for WCN6855
          - Bluetooth: btusb: Add support for Foxconn MT7922A
          - Bluetooth: btintel: Fix broken LED quirk for legacy ROM devices
          - Bluetooth: btusb: Add support for Foxconn QCA 0xe0d0
          - Bluetooth: bfusb: fix division by zero in send path
          - [armhf] dts: exynos: Fix BCM4330 Bluetooth reset polarity in I9100
          - USB: core: Fix bug in resuming hub's handling of wakeup requests
          - USB: Fix "slab-out-of-bounds Write" bug in usb_hcd_poll_rh_status
          - ath11k: Fix buffer overflow when scanning with extraie
          - mmc: sdhci-pci: Add PCI ID for Intel ADL
          - Bluetooth: add quirk disabling LE Read Transmit Power
          - Bluetooth: btbcm: disable read tx power for some Macs with the T2 Security
            chip
          - Bluetooth: btbcm: disable read tx power for MacBook Air 8,1 and 8,2
          - veth: Do not record rx queue hint in veth_xmit
          - [x86] mfd: intel-lpss: Fix too early PM enablement in the ACPI ->probe()
          - can: gs_usb: fix use of uninitialized variable, detach device on reception
            of invalid USB data
          - can: isotp: convert struct tpcon::{idx,len} to unsigned int
          - can: gs_usb: gs_can_start_xmit(): zero-initialize hf->{flags,reserved}
          - random: fix data race on crng_node_pool
          - random: fix data race on crng init time
          - random: fix crash on multiple early calls to add_bootloader_randomness()
          - [x86] platform/x86/intel: hid: add quirk to support Surface Go 3
          - media: Revert "media: uvcvideo: Set unique vdev name based in type"
          - [x86] drm/i915: Avoid bitwise vs logical OR warning in
            snb_wm_latency_quirk()
      .
        [ Ben Hutchings ]
        * Bump ABI to 3
        * wait: Export new function __wake_up_pollfree() needed by binder
        * [rt] Add new signing key for Clark Williams
        * [rt] Update to 5.15.10-rt24
        * debian/control: Add version to libopencsd-dev build-dependency
        * [armhf] media: Set MEDIA_SUPPORT=m so drivers are no longer built-in
      .
        [ Andrew Balmos ]
        * net/can: Enable CONFIG_CAN_MCP251X as module
      .
        [ Salvatore Bonaccorso ]
        * drivers/infiniband/hw/irdma: Enable INFINIBAND_IRDMA as module
          (Closes: #1003082)
        * vfs: fs_context: fix up param length parsing in legacy_parse_param
          (CVE-2022-0185)
      14e4d2b5
    • Lorenzo "Palinuro" Faletra's avatar
      fea3d8d7
  9. 06 Jan, 2022 2 commits
    • Lorenzo "Palinuro" Faletra's avatar
      Import Debian changes 5.15.5-2parrot1 · da53be7b
      Lorenzo "Palinuro" Faletra authored
      linux (5.15.5-2parrot1) lts-updates; urgency=medium
      .
        * Import new Debian release.
        * Re-include Wireless patches.
        * Disable kernel signing.
      .
      linux (5.15.5-2~bpo11+1) bullseye-backports; urgency=medium
      .
        * Rebuild for bullseye-backports:
          - Change ABI number to 0.bpo.2
          - Revert "Compile with gcc-11 on all architectures"
          - perf: Disable use of libopencsd, as bullseye's version is too old
      .
      linux (5.15.5-2) unstable; urgency=medium
      .
        * atlantic: Fix OOB read and write in hw_atl_utils_fw_rpc_wait
          (CVE-2021-43975)
        * fget: check that the fd still exists after getting a ref to it
          (CVE-2021-4083)
        * USB: gadget: detect too-big endpoint 0 requests (CVE-2021-39685)
        * USB: gadget: zero allocate endpoint 0 buffers (CVE-2021-39685)
        * [x86] Revert "drm/i915: Implement Wa_1508744258" (Closes: #1001128)
        * nfsd: fix use-after-free due to delegation race (Closes: #988044)
        * bpf: Fix kernel address leakage in atomic fetch
        * bpf: Fix signed bounds propagation after mov32
        * bpf: Make 32->64 bounds propagation slightly more robust
        * bpf: Fix kernel address leakage in atomic cmpxchg's r0 aux reg
      .
      linux (5.15.5-1) unstable; urgency=medium
      .
        * New upstream stable update:
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.4
          - string: uninline memcpy_and_pad
          - [x86] KVM: Fix steal time asm constraints
          - btrfs: introduce btrfs_is_data_reloc_root
          - btrfs: zoned: add a dedicated data relocation block group
          - btrfs: zoned: only allow one process to add pages to a relocation inode
          - btrfs: zoned: use regular writes for relocation
          - btrfs: check for relocation inodes on zoned btrfs in should_nocow
          - btrfs: zoned: allow preallocation for relocation inodes
          - block: Add a helper to validate the block size
          - loop: Use blk_validate_block_size() to validate block size
          - Bluetooth: btusb: Add support for TP-Link UB500 Adapter
          - PCI/MSI: Deal with devices lying about their MSI mask capability
          - PCI: Add MSI masking quirk for Nvidia ION AHCI
          - perf/core: Avoid put_page() when GUP fails
          - thermal: Fix NULL pointer dereferences in of_thermal_ functions
          - Revert "ACPI: scan: Release PM resources blocked by unused objects"
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.5
          - [arm64] zynqmp: Do not duplicate flash partition label property
          - [arm64] zynqmp: Fix serial compatible string
          - [arm64,armhf] clk: sunxi-ng: Unregister clocks/resets when unbinding
          - scsi: pm80xx: Fix memory leak during rmmod
          - scsi: lpfc: Fix list_add() corruption in lpfc_drain_txq()
          - [armhf] bus: ti-sysc: Add quirk handling for reinit on context lost
          - [armhf] bus: ti-sysc: Use context lost quirk for otg
          - [armhf] usb: musb: tusb6010: check return value after calling
            platform_get_resource()
          - [x86] usb: typec: tipd: Remove WARN_ON in tps6598x_block_read
          - staging: rtl8723bs: remove possible deadlock when disconnect (v2)
          - staging: rtl8723bs: remove a second possible deadlock
          - staging: rtl8723bs: remove a third possible deadlock
          - [arm64] dts: ls1012a: Add serial alias for ls1012a-rdb
          - RDMA/rxe: Separate HW and SW l/rkeys
          - [x86] ASoC: SOF: Intel: hda-dai: fix potential locking issue
          - scsi: core: Fix scsi_mode_sense() buffer length handling
          - ALSA: usb-audio: disable implicit feedback sync for Behringer UFX1204 and
            UFX1604
          - [armhf] clk: imx: imx6ul: Move csi_sel mux to correct base register
          - ASoC: es8316: Use IRQF_NO_AUTOEN when requesting the IRQ
          - [x86] ASoC: rt5651: Use IRQF_NO_AUTOEN when requesting the IRQ
          - [x86] ASoC: nau8824: Add DMI quirk mechanism for active-high jack-detect
          - scsi: advansys: Fix kernel pointer leak
          - scsi: smartpqi: Add controller handshake during kdump
          - [arm64] dts: imx8mm-kontron: Fix reset delays for ethernet PHY
          - ALSA: intel-dsp-config: add quirk for APL/GLK/TGL devices based on ES8336
            codec
          - [x86] ASoC: Intel: soc-acpi: add missing quirk for TGL SDCA single amp
          - [x86] ASoC: Intel: sof_sdw: add missing quirk for Dell SKU 0A45
          - firmware_loader: fix pre-allocated buf built-in firmware use
          - HID: multitouch: disable sticky fingers for UPERFECT Y
          - ALSA: usb-audio: Add support for the Pioneer DJM 750MK2 Mixer/Soundcard
          - ASoC: rt5682: fix a little pop while playback
          - [amd64] iommu/vt-d: Do not falsely log intel_iommu is unsupported kernel
            option
          - tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc
          - scsi: scsi_debug: Fix out-of-bound read in resp_readcap16()
          - scsi: scsi_debug: Fix out-of-bound read in resp_report_tgtpgs()
          - scsi: target: Fix ordered tag handling
          - scsi: target: Fix alua_tg_pt_gps_count tracking
          - iio: imu: st_lsm6dsx: Avoid potential array overflow in
            st_lsm6dsx_set_odr()
          - RDMA/core: Use kvzalloc when allocating the struct ib_port
          - scsi: lpfc: Fix use-after-free in lpfc_unreg_rpi() routine
          - scsi: lpfc: Fix link down processing to address NULL pointer dereference
          - scsi: lpfc: Allow fabric node recovery if recovery is in progress before
            devloss
          - [i386] ALSA: gus: fix null pointer dereference on pointer block
          - ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
          - f2fs: fix up f2fs_lookup tracepoints
          - f2fs: fix to use WHINT_MODE
          - f2fs: fix wrong condition to trigger background checkpoint correctly
          - f2fs: compress: disallow disabling compress on non-empty compressed file
          - f2fs: fix incorrect return value in f2fs_sanity_check_ckpt()
          - [armhf] clk/ast2600: Fix soc revision for AHB
          - [arm64] clk: qcom: gcc-msm8996: Drop (again) gcc_aggre1_pnoc_ahb_clk
          - [arm64] KVM: arm64: Fix host stage-2 finalization
          - sched/core: Mitigate race cpus_share_cache()/update_top_cache_domain()
          - sched/fair: Prevent dead task groups from regaining cfs_rq's
          - [x86] perf/x86/vlbr: Add c->flags to vlbr event constraints
          - blkcg: Remove extra blkcg_bio_issue_init
          - drm/nouveau: hdmigv100.c: fix corrupted HDMI Vendor InfoFrame
          - bpf: Fix inner map state pruning regression.
          - tcp: Fix uninitialized access in skb frags array for Rx 0cp.
          - tracing: Add length protection to histogram string copies
          - nl80211: fix radio statistics in survey dump
          - mac80211: fix monitor_sdata RCU/locking assertions
          - net: bnx2x: fix variable dereferenced before check
          - bnxt_en: reject indirect blk offload when hw-tc-offload is off
          - tipc: only accept encrypted MSG_CRYPTO msgs
          - sock: fix /proc/net/sockstat underflow in sk_clone_lock()
          - net/smc: Make sure the link_id is unique
          - NFSD: Fix exposure in nfsd4_decode_bitmap()
          - iavf: Fix return of set the new channel count
          - iavf: check for null in iavf_fix_features
          - iavf: free q_vectors before queues in iavf_disable_vf
          - iavf: don't clear a lock we don't hold
          - iavf: Fix failure to exit out from last all-multicast mode
          - iavf: prevent accidental free of filter structure
          - iavf: validate pointers
          - iavf: Fix for the false positive ASQ/ARQ errors while issuing VF reset
          - iavf: Fix for setting queues to 0
          - iavf: Restore VLAN filters after link down
          - bpf: Fix toctou on read-only map's constant scalar tracking
            (CVE-2021-4001)
          - [x86] platform/x86: hp_accel: Fix an error handling path in
            'lis3lv02d_probe()'
          - udp: Validate checksum in udp_read_sock()
          - btrfs: make 1-bit bit-fields of scrub_page unsigned int
          - RDMA/core: Set send and receive CQ before forwarding to the driver
          - net/mlx5e: Wait for concurrent flow deletion during neigh/fib events
          - net/mlx5: E-Switch, Fix resetting of encap mode when entering switchdev
          - net/mlx5e: nullify cq->dbg pointer in mlx5_debug_cq_remove()
          - net/mlx5: Update error handler for UCTX and UMEM
          - net/mlx5: E-Switch, rebuild lag only when needed
          - net/mlx5e: CT, Fix multiple allocations and memleak of mod acts
          - net/mlx5: Lag, update tracker when state change event received
          - net/mlx5: E-Switch, return error if encap isn't supported
          - scsi: ufs: core: Improve SCSI abort handling
          - scsi: core: sysfs: Fix hang when device state is set via sysfs
          - scsi: ufs: core: Fix task management completion timeout race
          - scsi: ufs: core: Fix another task management completion race
          - [arm*] net: mvmdio: fix compilation warning
          - net: sched: act_mirred: drop dst for the direction from egress to ingress
          - [arm64] net: dpaa2-eth: fix use-after-free in dpaa2_eth_remove
          - net: virtio_net_hdr_to_skb: count transport header in UFO
          - i40e: Fix correct max_pkt_size on VF RX queue
          - i40e: Fix NULL ptr dereference on VSI filter sync
          - i40e: Fix changing previously set num_queue_pairs for PFs
          - i40e: Fix ping is lost after configuring ADq on VF
          - RDMA/mlx4: Do not fail the registration on port stats
          - i40e: Fix warning message and call stack during rmmod i40e driver
          - i40e: Fix creation of first queue by omitting it if is not power of two
          - i40e: Fix display error code in dmesg
          - e100: fix device suspend/resume (Closes: #995927)
          - [powerpc*] KVM: PPC: Book3S HV: Use GLOBAL_TOC for
            kvmppc_h_set_dabr/xdabr()
          - [powerpc*] pseries: rename numa_dist_table to form2_distances
          - [powerpc*] pseries: Fix numa FORM2 parsing fallback code
          - [x86] perf/x86/intel/uncore: Fix filter_tid mask for CHA events on Skylake
            Server
          - [x86] perf/x86/intel/uncore: Fix IIO event constraints for Skylake Server
          - [x86] perf/x86/intel/uncore: Fix IIO event constraints for Snowridge
          - [s390x] kexec: fix return code handling
          - blk-cgroup: fix missing put device in error path from blkg_conf_pref()
          - tun: fix bonding active backup with arp monitoring
          - tipc: check for null after calling kmemdup
          - ipc: WARN if trying to remove ipc object which is absent
          - shm: extend forced shm destroy to support objects from several IPC nses
          - hugetlb, userfaultfd: fix reservation restore on userfaultfd error
          - [x86] boot: Pull up cmdline preparation and early param parsing
          - [x86] hyperv: Fix NULL deref in set_hv_tscchange_cb() if Hyper-V setup
            fails
          - [x86] KVM: x86: Assume a 64-bit hypercall for guests with protected state
          - [x86] KVM: x86: Fix uninitialized eoi_exit_bitmap usage in
            vcpu_load_eoi_exitmap()
          - [x86] KVM: x86/mmu: include EFER.LMA in extended mmu role
          - [x86] KVM: x86/xen: Fix get_attr of KVM_XEN_ATTR_TYPE_SHARED_INFO
          - [powerpc*] xive: Change IRQ domain to a tree domain
          - [x86] Revert "drm/i915/tgl/dsi: Gate the ddi clocks after pll mapping"
          - ata: libata: improve ata_read_log_page() error message
          - ata: libata: add missing ata_identify_page_supported() calls
          - scsi: qla2xxx: Fix mailbox direction flags in qla2xxx_get_adapter_id()
          - [s390x] setup: avoid reserving memory above identity mapping
          - [s390x] boot: simplify and fix kernel memory layout setup
          - [s390x] vdso: filter out -mstack-guard and -mstack-size
          - [s390x] dump: fix copying to user-space of swapped kdump oldmem
          - block: Check ADMIN before NICE for IOPRIO_CLASS_RT
          - fbdev: Prevent probing generic drivers if a FB is already registered
          - [x86] KVM: SEV: Disallow COPY_ENC_CONTEXT_FROM if target has created vCPUs
          - [x86] KVM: nVMX: don't use vcpu->arch.efer when checking host state on
            nested state load
          - drm/cma-helper: Release non-coherent memory with dma_free_noncoherent()
          - printk: restore flushing of NMI buffers on remote CPUs after NMI
            backtraces
          - udf: Fix crash after seekdir
          - spi: fix use-after-free of the add_lock mutex
          - [armhf] net: stmmac: socfpga: add runtime suspend/resume callback for
            stratix10 platform
          - [x86] Drivers: hv: balloon: Use VMBUS_RING_SIZE() wrapper for dm_ring_size
          - btrfs: fix memory ordering between normal and ordered work functions
          - fs: handle circular mappings correctly
          - net: stmmac: Fix signed/unsigned wreckage
          - cfg80211: call cfg80211_stop_ap when switch from P2P_GO type
          - mac80211: drop check for DONT_REORDER in __ieee80211_select_queue
          - drm/amd/display: Update swizzle mode enums
          - drm/amd/display: Limit max DSC target bpp for specific monitors
          - [x86] drm/i915/guc: Fix outstanding G2H accounting
          - [x86] drm/i915/guc: Don't enable scheduling on a banned context, guc_id
            invalid, not registered
          - [x86] drm/i915/guc: Workaround reset G2H is received after schedule done
            G2H
          - [x86] drm/i915/guc: Don't drop ce->guc_active.lock when unwinding context
          - [x86] drm/i915/guc: Unwind context requests in reverse order
          - drm/udl: fix control-message timeout
          - drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
          - drm/nouveau: Add a dedicated mutex for the clients list (CVE-2020-27820)
          - drm/nouveau: use drm_dev_unplug() during device removal (CVE-2020-27820)
          - drm/nouveau: clean up all clients on device removal (CVE-2020-27820)
          - [x86] drm/i915/dp: Ensure sink rate values are always valid
          - [x86] drm/i915/dp: Ensure max link params are always valid
          - [x86] drm/i915: Fix type1 DVI DP dual mode adapter heuristic for modern
            platforms
          - drm/amdgpu: fix set scaling mode Full/Full aspect/Center not works on vga
            and dvi connectors
          - drm/amd/pm: avoid duplicate powergate/ungate setting
          - signal: Implement force_fatal_sig
          - exit/syscall_user_dispatch: Send ordinary signals on failure
          - [powerpc*] signal/powerpc: On swapcontext failure force SIGSEGV
          - [s390x] signal/s390: Use force_sigsegv in default_trap_handler
          - [x86] signal/x86: In emulate_vsyscall force a signal instead of calling
            do_exit
          - signal: Replace force_sigsegv(SIGSEGV) with force_fatal_sig(SIGSEGV)
          - signal: Don't always set SA_IMMUTABLE for forced signals
          - signal: Replace force_fatal_sig with force_exit_sig when in doubt
          - hugetlbfs: flush TLBs correctly after huge_pmd_unshare (CVE-2021-4002)
          - RDMA/netlink: Add __maybe_unused to static inline in C file
          - bpf: Forbid bpf_ktime_get_coarse_ns and bpf_timer_* in tracing progs
          - selinux: fix NULL-pointer dereference when hashtab allocation fails
          - ASoC: DAPM: Cover regression by kctl change notification fix
          - ice: Fix VF true promiscuous mode
          - ice: Delete always true check of PF pointer
          - fs: export an inode_update_time helper
          - btrfs: update device path inode time instead of bd_inode
          - net: add and use skb_unclone_keeptruesize() helper
          - [x86] ALSA: hda: hdac_ext_stream: fix potential locking issues
          - ALSA: hda: hdac_stream: fix potential locking issue in
            snd_hdac_stream_assign()
      .
        [ Salvatore Bonaccorso ]
        * [rt] Update to 5.15.3-rt21
        * Drop "arm64: dts: rockchip: disable USB type-c DisplayPort"
        * [rt] Refresh "printk: move console printing to kthreads"
        * [rt] Refresh "printk: remove deferred printing"
        * Bump ABI to 2
        * fuse: release pipe buf after last use (Closes: #1000504)
      .
      linux (5.15.3-1) unstable; urgency=medium
      .
        * New upstream stable update:
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.3
          - Bluetooth: sco: Fix lock_sock() blockage by memcpy_from_msg()
            (CVE-2021-3640)
      .
        [ Vincent Blut ]
        * [arm64] sound/soc/meson: Enable SND_MESON_AXG_SOUND_CARD as module
          (Closes: #999638)
        * [arm64,armhf] sound/soc/meson: Enable SND_MESON_GX_SOUND_CARD as module
        * drivers/bluetooth: Enable BT_HCIBTUSB_MTK (Closes: #999748)
      .
        [ Salvatore Bonaccorso ]
        * mac80211: fix radiotap header generation
        * [rt] Update to 5.15.2-rt20
        * [rt] Refresh "printk: introduce kernel sync mode"
        * [rt] Refresh "printk: move console printing to kthreads"
        * [rt] Drop "rcutorture: Avoid problematic critical section nesting on
          PREEMPT_RT"
        * [rt] Drop "lockdep: Let lock_is_held_type() detect recursive read as read"
        * [rt] Refresh "x86/softirq: Disable softirq stacks on PREEMPT_RT"
        * [rt] Refresh "POWERPC: Allow to enable RT"
        * Set ABI to 1
      .
      linux (5.15.2-1~exp1) experimental; urgency=medium
      .
        * New upstream stable update:
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.2
      .
        [ Salvatore Bonaccorso ]
        * [rt] Update to 5.15-rt17 and reenable (Closes: #995466)
        * perf srcline: Use long-running addr2line per DSO (Closes: #911815)
        * Refresh "Export symbols needed by Android drivers"
        * [rt] Update to 5.15.2-rt19
        * Input: elantench - fix misreporting trackpoint coordinates (Closes: #989285)
        * kernel/time: Enable NO_HZ_FULL (Closes: #804857)
        * io-wq: serialize hash clear with wakeup (Closes: #996951)
      .
        [ Vincent Blut ]
        * [x86] drivers/ptp: Enable PTP_1588_CLOCK_VMW as module
        * drivers/ptp: Enable PTP_1588_CLOCK_DTE, PTP_1588_CLOCK_IDT82P33,
          PTP_1588_CLOCK_IDTCM, PTP_1588_CLOCK_OCP as modules
        * drivers/ptp, net: Enable DP83640_PHY, PTP_1588_CLOCK_INES,
          NET_PTP_CLASSIFY, NETWORK_PHY_TIMESTAMPING
      .
      linux (5.15.1-1~exp1) experimental; urgency=medium
      .
        * New upstream stable update:
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.1
      .
        [ Salvatore Bonaccorso ]
        * [arm*] drop cc-option fallbacks for architecture selection
        * net/tls: Enable TLS as module (Closes: #919807)
      .
        [ Diederik de Haas ]
        * [x86] drivers/hwmon: Enable SENSORS_CORSAIR_PSU as module
        * [arm64] drivers/hwmon: Enable SENSORS_GPIO_FAN as module
      .
      linux (5.15-1~exp1) experimental; urgency=medium
      .
        * New upstream release candidate
      .
        [ Diederik de Haas ]
        * [arm*] drivers/led/trigger: Make LEDS_TRIGGER_HEARTBEAT builtin
          (Closes: #992184)
        * [arm64] sound/soc/codecs: Enable SND_SOC_SPDIF as module
        * [armel/rpi] Enable RPi's clock framework and CPU Freq scaling
        * [armel/rpi] Change default governor to 'ondemand' for RPi 0/0w/1
          (Closes: #991921)
        * [arm64] sound/soc/rockchip: Enable SND_SOC_ROCKCHIP_PDM as module
        * [armel] Make explicit that -rpi kernel variant is for RPi 0/0w/1, not the
          others
      .
        [ Nathan Schulte ]
        * [arm64] drivers/staging/media/hantro: Enable VIDEO_HANTRO as module
        * [arm64] drivers/staging/media/rkvdec: Enable VIDEO_ROCKCHIP_VDEC as module
          (Closes: #993902)
      .
        [ Vincent Blut ]
        * [arm] arch/arm/crypto: Enable CRYPTO_BLAKE2S_ARM, CRYPTO_SHA256_ARM and
          CRYPTO_SHA512_ARM as modules
        * [armhf] arch/arm/crypto: Enable most NEON based implementation of
          cryptographic algorithms as modules
        * [arm] Move CRYPTO_NHPOLY1305_NEON in armhf config file
        * [arm64] drivers/gpu/drm/vmwgfx: Enable DRM_VMWGFX as module
          (Closes: #995276)
        * [armhf] sound/soc/sunxi: Enable SND_SUN4I_I2S as module (Closes: #971892)
        * [armhf] drivers/gpu/drm/bridge/synopsys: Enable DRM_DW_HDMI_I2S_AUDIO as
          module
        * drivers/usb/serial: Enable USB_SERIAL_XR as module (Closes: #996962)
        * drivers/bus/mhi: Enable MHI_BUS, MHI_BUS_PCI_GENERIC as modules
          (Closes: #995407)
        * drivers/net: Enable MHI_NET as module
        * drivers/net/wwan: Enable WWAN, MHI_WWAN_CTRL as modules
      .
        [ YunQiang Su ]
        * [mipsel,mips64el/loongson-3] linux-image: Recommend pmon-update
      .
        [ Salvatore Bonaccorso ]
        * Compile with gcc-11 on all architectures
        * [arm64] drivers/net: Enable VMXNET3 as module
      .
        [ Uwe Kleine-König ]
        * [arm64] Enable various symbols for the librem5 devkit and iMX8MN Variscite
          Symphony (Patches by Guido Günther and Ariel D'Alessandro)
        * [armhf,arm64] Cherrypick fix for snvs_pwrkey to prevent a machine hang.
      .
        [ Heiko Thiery ]
        * [arm64] drivers/mtd/spi-nor: enable MTD_SPI_NOR as module
        * [arm64] drivers/net/can/spi: enable CAN_MCP251X as module
        * [arm64] drivers/net/phy: enable MICROSEMI_PHY as module
        * [arm64] drivers/net/usb: enable USB_NET_SMSC95XX as module
      .
        [ Ryutaroh Matsumoto ]
        * [arm64] Enable TOUCHSCREEN_RASPBERRYPI_FW and
          REGULATOR_RASPBERRYPI_TOUCHSCREEN_ATTINY (Closes: #977575)
      .
        [ Ariel D'Alessandro ]
        * [arm64] drivers/regulator: Enable REGULATOR_BD718XX as module
      .
        [ Lubomir Rintel ]
        * [armhf] Add support for Marvell MMP3
        * [armhf] Enable SND_MMP_SOC_SSPA, COMMON_CLK_MMP2_AUDIO, PHY_MMP3_USB,
          MFD_ENE_KB3930 and LEDS_ARIEL as modules.
      .
        [ Sean McAvoy ]
        * [armel] marvell: Enable CONFIG_SENSORS_LM63 as a module.
      .
        [ Dan Stefura ]
        * [arm64] enable i6300esb watchdog kernel module
      .
        [ Thore Sommer ]
        * drivers/md: Enable DM_VERITY_FEC
      .
        [ Aurelien Jarno ]
        * [riscv64] Enable NUMA (Closes: #993453)
      .
      linux (5.14.16-1) unstable; urgency=medium
      .
        * New upstream stable update:
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.13
          - ext4: check and update i_disksize properly
          - ext4: correct the error path of ext4_write_inline_data_end()
          - [x86] ASoC: Intel: sof_sdw: tag SoundWire BEs as non-atomic
          - ALSA: oxfw: fix transmission method for Loud models based on OXFW971
          - ALSA: usb-audio: Unify mixer resume and reset_resume procedure
          - HID: apple: Fix logical maximum and usage maximum of Magic Keyboard JIS
          - netfilter: ip6_tables: zero-initialize fragment offset
          - HID: wacom: Add new Intuos BT (CTL-4100WL/CTL-6100WL) device IDs
          - [x86] ASoC: SOF: loader: release_firmware() on load failure to avoid
            batching
          - netfilter: nf_nat_masquerade: make async masq_inet6_event handling generic
          - netfilter: nf_nat_masquerade: defer conntrack walk to work queue
          - mac80211: Drop frames from invalid MAC address in ad-hoc mode
          - [m68k] Handle arrivals of multiple signals correctly
          - net: prevent user from passing illegal stab size
          - mac80211: check return value of rhashtable_init
          - [x86] vboxfs: fix broken legacy mount signature checking
          - drm/amdgpu: fix gart.bo pin_count leak
          - scsi: ses: Fix unsigned comparison with less than zero
          - scsi: virtio_scsi: Fix spelling mistake "Unsupport" -> "Unsupported"
          - scsi: qla2xxx: Fix excessive messages during device logout
          - perf/core: fix userpage->time_enabled of inactive events
          - sched: Always inline is_percpu_thread()
          - io_uring: kill fasync
          - [armhf] hwmon: (pmbus/ibm-cffps) max_power_out swap changes
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.14
          - ALSA: usb-audio: Add quirk for VF0770
          - ALSA: pcm: Workaround for a wrong offset in SYNC_PTR compat ioctl
          - ALSA: usb-audio: Fix a missing error check in scarlett gen2 mixer
          - ALSA: seq: Fix a potential UAF by wrong private_free call order
          - ALSA: hda/realtek: Enable 4-speaker output for Dell Precision 5560 laptop
          - ALSA: hda - Enable headphone mic on Dell Latitude laptops with ALC3254
          - ALSA: hda/realtek: Complete partial device name to avoid ambiguity
          - ALSA: hda/realtek: Add quirk for Clevo X170KM-G
          - ALSA: hda/realtek - ALC236 headset MIC recording issue
          - ALSA: hda/realtek: Add quirk for TongFang PHxTxX1
          - ALSA: hda/realtek: Fix for quirk to enable speaker output on the Lenovo
            13s Gen2
          - ALSA: hda/realtek: Fix the mic type detection issue for ASUS G551JW
          - [amd64] platform/x86: amd-pmc: Add alternative acpi id for PMC controller
          - dm: fix mempool NULL pointer race when completing IO
          - [x86] ACPI: PM: Include alternate AMDI0005 id in special behaviour
          - dm rq: don't queue request to blk-mq during DM suspend
          - [s390x] fix strrchr() implementation
          - drm/fbdev: Clamp fbdev surface size if too large
          - [arm64] hugetlb: fix CMA gigantic page order for non-4K PAGE_SIZE
          - drm/nouveau/fifo: Reinstate the correct engine bit programming
          - [arm64] drm/msm: Do not run snapshot on non-DPU devices
          - [arm64] drm/msm: Avoid potential overflow in timeout_to_jiffies()
          - btrfs: unlock newly allocated extent buffer after error
          - btrfs: deal with errors when replaying dir entry during log replay
          - btrfs: deal with errors when adding inode reference during log replay
          - btrfs: check for error when looking up inode during dir entry replay
          - btrfs: update refs for any root except tree log roots
          - btrfs: fix abort logic in btrfs_replace_file_extents
          - [x86] resctrl: Free the ctrlval arrays when domain_setup_mon_state() fails
          - [x86] mei: me: add Ice Lake-N device id.
          - [x86] mei: hbm: drop hbm responses on early shutdown
          - xhci: guard accesses to ep_state in xhci_endpoint_reset()
          - xhci: add quirk for host controllers that don't update endpoint DCS
          - xhci: Fix command ring pointer corruption while aborting a command
          - xhci: Enable trust tx length quirk for Fresco FL11 USB controller
          - cb710: avoid NULL pointer subtraction
          - [arm64,x86] efi/cper: use stack buffer for error record decoding
          - efi: Change down_interruptible() in virt_efi_reset_system() to
            down_trylock()
          - [armhf] usb: musb: dsps: Fix the probe error path
          - Input: xpad - add support for another USB ID of Nacon GC-100
          - USB: serial: qcserial: add EM9191 QDL support
          - USB: serial: option: add Quectel EC200S-CN module support
          - USB: serial: option: add Telit LE910Cx composition 0x1204
          - USB: serial: option: add prod. id for Quectel EG91
          - virtio: write back F_VERSION_1 before validate
          - nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells
          - virtio-blk: remove unneeded "likely" statements
          - Revert "virtio-blk: Add validation for block size in config space"
          - [x86] fpu: Mask out the invalid MXCSR bits properly
          - [x86] Kconfig: Do not enable AMD_MEM_ENCRYPT_ACTIVE_BY_DEFAULT
            automatically
          - [powerpc*] xive: Discard disabled interrupts in get_irqchip_state()
          - [armhf] drivers: bus: simple-pm-bus: Add support for probing simple bus
            only devices
          - driver core: Reject pointless SYNC_STATE_ONLY device links
          - iio: adc: ad7192: Add IRQ flag
          - iio: adc: ad7780: Fix IRQ flag
          - iio: adc: ad7793: Fix IRQ flag
          - iio: adis16480: fix devices that do not support sleep mode
          - iio: adc128s052: Fix the error handling path of 'adc128_probe()'
          - iio: adc: max1027: Fix wrong shift with 12-bit devices
          - iio: adis16475: fix deadlock on frequency set
          - iio: light: opt3001: Fixed timeout error when 0 lux
          - iio: adc: max1027: Fix the number of max1X31 channels
          - eeprom: at25: Add SPI ID table
          - iio: dac: ti-dac5571: fix an error code in probe()
          - [arm64] tee: optee: Fix missing devices unregister during optee_remove
          - [armel,armhf] dts: bcm2711-rpi-4-b: Fix usb's unit address
          - [armel,armhf] dts: bcm2711-rpi-4-b: fix sd_io_1v8_reg regulator states
          - [armel,armhf] dts: bcm2711-rpi-4-b: Fix pcie0's unit address formatting
          - nvme-pci: Fix abort command id
          - sctp: account stream padding length for reconf chunk
          - [arm64,armhf] gpio: pca953x: Improve bias setting
          - net/smc: improved fix wait on already cleared link
          - net/mlx5e: Fix memory leak in mlx5_core_destroy_cq() error path
          - net/mlx5e: Mutually exclude RX-FCS and RX-port-timestamp
          - net/mlx5e: Switchdev representors are not vlan challenged
          - net: stmmac: fix get_hw_feature() on old hardware
          - net: phy: Do not shutdown PHYs in READY state
          - [arm64,armhf] net: dsa: mv88e6xxx: don't use PHY_DETECT on internal PHY's
          - [arm64,armhf] net: dsa: fix spurious error message when unoffloaded port
            leaves bridge
          - ethernet: s2io: fix setting mac address during resume
          - nfc: fix error handling of nfc_proto_register()
          - NFC: digital: fix possible memory leak in digital_tg_listen_mdaa()
          - NFC: digital: fix possible memory leak in digital_in_send_sdd_req()
          - pata_legacy: fix a couple uninitialized variable bugs
          - ata: ahci_platform: fix null-ptr-deref in
            ahci_platform_enable_regulators()
          - spi: spidev: Add SPI ID table
          - drm/edid: In connector_bad_edid() cap num_of_ext by num_blocks read
          - [arm64] drm/msm: Fix null pointer dereference on pointer edp
          - [arm64] drm/msm/mdp5: fix cursor-related warnings
          - [arm64] drm/msm/submit: fix overflow check on 64-bit architectures
          - [arm64] drm/msm/a6xx: Track current ctx by seqno
          - [arm64] drm/msm/a4xx: fix error handling in a4xx_gpu_init()
          - [arm64] drm/msm/a3xx: fix error handling in a3xx_gpu_init()
          - [arm64] drm/msm/dsi: dsi_phy_14nm: Take ready-bit into account in
            poll_for_ready
          - [arm64] drm/msm/dsi: Fix an error code in msm_dsi_modeset_init()
          - [arm64] drm/msm/dsi: fix off by one in dsi_bus_clk_enable error handling
          - [arm64] acpi/arm64: fix next_platform_timer() section mismatch error
          - [x86] platform/x86: intel_scu_ipc: Fix busy loop expiry time
          - mqprio: Correct stats in mqprio_dump_class_stats().
          - mptcp: fix possible stall on recvmsg()
          - qed: Fix missing error code in qed_slowpath_start()
          - ice: fix locking for Tx timestamp tracking flush
          - nfp: flow_offload: move flow_indr_dev_register from app init to app start
          - [arm64] net: mscc: ocelot: make use of all 63 PTP timestamp identifiers
          - [arm64] net: mscc: ocelot: avoid overflowing the PTP timestamp FIFO
          - [arm64] net: mscc: ocelot: warn when a PTP IRQ is raised for an unknown
            skb
          - [arm64] net: mscc: ocelot: deny TX timestamping of non-PTP packets
          - [arm64] net: mscc: ocelot: cross-check the sequence id from the timestamp
            FIFO with the skb PTP header
          - [arm64] net: dsa: felix: break at first CPU port during init and teardown
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.15
          - [armhf] dts: vexpress-v2p-ca9: Fix the SMB unit-address
          - block: decode QUEUE_FLAG_HCTX_ACTIVE in debugfs output
          - [x86] xen/x86: prevent PVH type from getting clobbered
          - r8152: avoid to resubmit rx immediately
          - drm/amdgpu: init iommu after amdkfd device init
          - NFSD: Keep existing listeners on portlist error
          - [powerpc*] powerpc/lib: Add helper to check if offset is within
            conditional branch range
          - [powerpc*] powerpc/bpf: Validate branch ranges
          - [powerpc*] powerpc/security: Add a helper to query stf_barrier type
          - [powerpc*] powerpc/bpf: Emit stf barrier instruction sequences for
            BPF_NOSPEC
          - [arm64] KVM: arm64: Fix host stage-2 PGD refcount
          - [arm64] KVM: arm64: Release mmap_lock when using VM_SHARED with MTE
          - netfilter: xt_IDLETIMER: fix panic that occurs when timer_type has garbage
            value
          - netfilter: nf_tables: skip netdev events generated on netns removal
          - ice: Fix failure to re-add LAN/RDMA Tx queues
          - ice: Avoid crash from unnecessary IDA free
          - ice: fix getting UDP tunnel entry
          - ice: Print the api_patch as part of the fw.mgmt.api
          - netfilter: ip6t_rt: fix rt0_hdr parsing in rt_mt6
          - netfilter: ipvs: make global sysctl readonly in non-init netns
          - sctp: fix transport encap_port update in sctp_vtag_verify
          - tcp: md5: Fix overlap between vrf and non-vrf keys
          - ipv6: When forwarding count rx stats on the orig netdev
          - hamradio: baycom_epp: fix build for UML
          - net/sched: act_ct: Fix byte count on fragmented packets
          - [arm64,armhf] net: dsa: Fix an error handling path in
            'dsa_switch_parse_ports_of()'
          - [powerpc*] smp: do not decrement idle task preempt count in CPU offline
          - [arm64] net: hns3: Add configuration of TM QCN error event
          - [arm64] net: hns3: reset DWRR of unused tc to zero
          - [arm64] net: hns3: add limit ets dwrr bandwidth cannot be 0
          - [arm64] net: hns3: schedule the polling again when allocation fails
          - [arm64] net: hns3: fix vf reset workqueue cannot exit
          - [arm64] net: hns3: disable sriov before unload hclge layer
          - net: stmmac: Fix E2E delay mechanism
          - ptp: Fix possible memory leak in ptp_clock_register()
          - e1000e: Fix packet loss on Tiger Lake and later
          - igc: Update I226_K device ID
          - ice: Add missing E810 device ids
          - net/mlx5e: IPsec: Fix a misuse of the software parser's fields
          - net/mlx5e: IPsec: Fix work queue entry ethernet segment checksum flags
          - [arm64] net: enetc: fix ethtool counter name for PM0_TERR
          - [arm64] net: enetc: make sure all traffic classes can send large frames
          - can: peak_usb: pcan_usb_fd_decode_status(): fix back to ERROR_ACTIVE state
            notification
          - can: peak_pci: peak_pci_remove(): fix UAF
          - can: isotp: isotp_sendmsg(): fix return error on FC timeout on TX path
          - can: isotp: isotp_sendmsg(): add result check for
            wait_event_interruptible()
          - can: isotp: isotp_sendmsg(): fix TX buffer concurrent access in
            isotp_sendmsg()
          - can: j1939: j1939_tp_rxtimer(): fix errant alert in j1939_tp_rxtimer
          - can: j1939: j1939_netdev_start(): fix UAF for rx_kref of j1939_priv
          - can: j1939: j1939_xtp_rx_dat_one(): cancel session if receive TP.DT with
            error length
          - can: j1939: j1939_xtp_rx_rts_session_new(): abort TP less than 9 bytes
          - ceph: skip existing superblocks that are blocklisted or shut down when
            mounting
          - ceph: fix handling of "meta" errors
          - tracing: Have all levels of checks prevent recursion
          - ocfs2: fix data corruption after conversion from inline format
          - ocfs2: mount fails with buffer overflow in strlen
          - userfaultfd: fix a race between writeprotect and exit_mmap()
          - mm/mempolicy: do not allow illegal MPOL_F_NUMA_BALANCING | MPOL_LOCAL in
            mbind()
          - vfs: check fd has read access in kernel_read_file_from_fd()
          - ALSA: usb-audio: Provide quirk for Sennheiser GSP670 Headset
          - ALSA: hda/realtek: Add quirk for Clevo PC50HS
          - ASoC: DAPM: Fix missing kctl change notifications
          - [x86] ASoC: nau8824: Fix headphone vs headset, button-press detection no
            longer working
          - blk-cgroup: blk_cgroup_bio_start() should use irq-safe operations on
            blkg->iostat_cpu
          - audit: fix possible null-pointer dereference in audit_filter_rules
          - ucounts: Move get_ucounts from cred_alloc_blank to
            key_change_session_keyring
          - ucounts: Pair inc_rlimit_ucounts with dec_rlimit_ucoutns in commit_creds
          - ucounts: Proper error handling in set_cred_ucounts
          - ucounts: Fix signal ucount refcounting
          - [powerpc*] KVM: PPC: Book3S HV: Fix stack handling in
            idle_kvm_start_guest()
          - [powerpc*] KVM: PPC: Book3S HV: Make idle_kvm_start_guest() return 0 if it
            went to guest (CVE-2021-43056)
          - [powerpc*] idle: Don't corrupt back chain when going idle
          - mm, slub: fix mismatch between reconstructed freelist depth and cnt
          - mm, slub: fix potential memoryleak in kmem_cache_open()
          - mm, slub: fix potential use-after-free in slab_debugfs_fops
          - mm, slub: fix incorrect memcg slab count for bulk free
          - [x86] KVM: nVMX: promptly process interrupts delivered while in guest mode
          - [x86] KVM: SEV: Flush cache on non-coherent systems before
            RECEIVE_UPDATE_DATA
          - [x86] KVM: SEV-ES: rename guest_ins_data to sev_pio_data
          - [x86] KVM: SEV-ES: clean up kvm_sev_es_ins/outs
          - [x86] KVM: SEV-ES: keep INS functions together
          - [x86] KVM: SEV-ES: fix length of string I/O
          - [x86] KVM: SEV-ES: go over the sev_pio_data buffer in multiple passes if
            needed
          - [x86] KVM: SEV-ES: reduce ghcb_sa_len to 32 bits
          - [x86] KVM: x86: leave vcpu->arch.pio.count alone in emulator_pio_in_out
          - [x86] KVM: x86: check for interrupts before deciding whether to exit the
            fast path
          - [x86] KVM: x86: split the two parts of emulator_pio_in
          - [x86] KVM: x86: remove unnecessary arguments from complete_emulator_pio_in
          - nfc: nci: fix the UAF of rf_conn_info object (CVE-2021-3760)
          - isdn: cpai: check ctr->cnr to avoid array index out of bound
            (CVE-2021-3896)
          - [sh4] net: bridge: mcast: use multicast_membership_interval for IGMPv3
          - [x86] KVM: SEV-ES: Set guest_state_protected after VMSA update
          - [arm64] net: hns3: fix the max tx size according to user manual
          - [x86] KVM: MMU: Reset mmu->pkru_mask to avoid stale data
          - [arm64] drm/msm/a6xx: Serialize GMU communication
          - ALSA: hda: intel: Allow repeatedly probing on codec configuration errors
          - btrfs: deal with errors when checking if a dir entry exists during log
            replay
          - net: stmmac: add support for dwmac 3.40a
          - [x86] platform/x86: intel_scu_ipc: Increase virtual timeout to 10s
          - [x86] platform/x86: intel_scu_ipc: Update timeout value in comment
          - ALSA: hda: avoid write to STATESTS if controller is in reset
          - spi: Fix deadlock when adding SPI controllers on SPI buses
          - spi-mux: Fix false-positive lockdep splats
          - [x86] perf/x86/msr: Add Sapphire Rapids CPU support
          - scsi: iscsi: Fix set_param() handling
          - [x86] scsi: storvsc: Fix validation for unsolicited incoming packets
          - scsi: qla2xxx: Fix a memory leak in an error path of qla2x00_process_els()
          - mm/thp: decrease nr_thps in file's mapping on THP split
          - sched/scs: Reset the shadow stack when idle_task_exit
          - [arm64] net: hns3: fix for miscalculation of rx unused desc
          - net/mlx5: Lag, move lag destruction to a workqueue
          - net/mlx5: Lag, change multipath and bonding to be mutually exclusive
          - autofs: fix wait name hash calculation in autofs_wait()
          - scsi: core: Fix shost->cmd_per_lun calculation in scsi_add_host_with_dma()
          - [s390x] pci: cleanup resources only if necessary
          - [s390x] pci: fix zpci_zdev_put() on reserve
          - net: mdiobus: Fix memory leak in __mdiobus_register
          - e1000e: Separate TGP board type from SPT
          - [armhf] pinctrl: stm32: use valid pin identifier in stm32_pinctrl_resume()
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.16
          - [armel,armhf] 9134/1: remove duplicate memcpy() definition
          - [armel,armhf] 9139/1: kprobes: fix arch_init_kprobes() prototype
          - [armel,armhf] 9148/1: handle CONFIG_CPU_ENDIAN_BE32 in
            arch/arm/kernel/head.S
          - usbnet: sanity check for maxpacket
          - usbnet: fix error return code in usbnet_probe()
          - pinctrl: amd: disable and mask interrupts on probe
          - ata: sata_mv: Fix the error handling of mv_chip_id()
          - tipc: fix size validations for the MSG_CRYPTO type (CVE-2021-43267)
          - nfc: port100: fix using -ERRNO as command type mask
          - Revert "net: mdiobus: Fix memory leak in __mdiobus_register"
          - mmc: vub300: fix control-message timeouts
          - mmc: cqhci: clear HALT state after CQE enable
          - [armhf] mmc: dw_mmc: exynos: fix the finding clock sample value
          - mmc: sdhci: Map more voltage level to SDHCI_POWER_330
          - mmc: sdhci-pci: Read card detect from ACPI for Intel Merrifield
          - [arm64,armhf] mmc: sdhci-esdhc-imx: clear the buffer_read_ready to reset
            standard tuning circuit
          - block: Fix partition check for host-aware zoned block devices
          - ocfs2: fix race between searching chunks and release journal_head from
            buffer_head
          - nvme-tcp: fix H2CData PDU send accounting (again)
          - cfg80211: scan: fix RCU in cfg80211_add_nontrans_list()
          - cfg80211: fix management registrations locking
          - net: lan78xx: fix division by zero in send path
          - mm: hwpoison: remove the unnecessary THP check
          - mm: filemap: check if THP has hwpoisoned subpage for PMD page fault
          - mm, thp: bail out early in collapse_file for writeback page
          - mm: khugepaged: skip huge page collapse for special files
          - [arm64] dts: imx8mm-kontron: Fix polarity of reg_rst_eth2
          - [arm64] dts: imx8mm-kontron: Fix CAN SPI clock frequency
          - [arm64] dts: imx8mm-kontron: Fix connection type for VSC8531 RGMII PHY
          - [arm64] dts: imx8mm-kontron: Set lower limit of VDD_SNVS to 800 mV
          - [arm64] dts: imx8mm-kontron: Make sure SOC and DRAM supply voltages are
            correct
          - mac80211: mesh: fix HE operation element length check
          - drm/ttm: fix memleak in ttm_transfered_destroy
          - [x86] drm/i915: Convert unconditional clflush to drm_clflush_virt_range()
          - [x86] drm/i915: Catch yet another unconditioal clflush
          - [x86] drm/i915/dp: Skip the HW readout of DPCD on disabled encoders
          - drm/amdgpu: Fix even more out of bound writes from debugfs
          - drm/amdgpu: fix out of bounds write (CVE-2021-42327)
          - drm/amdgpu: support B0&B1 external revision id for yellow carp
          - drm/amd/display: Limit display scaling to up to true 4k for DCN 3.1
          - drm/amd/display: Fix prefetch bandwidth calculation for DCN3.1
          - drm/amd/display: increase Z9 latency to workaround underflow in Z9
          - drm/amd/display: Increase watermark latencies for DCN3.1
          - drm/amd/display: Moved dccg init to after bios golden init
          - drm/amd/display: Fallback to clocks which meet requested voltage on DCN31
          - drm/amd/display: Fix deadlock when falling back to v2 from v3
          - Revert "watchdog: iTCO_wdt: Account for rebooting on second timeout"
          - cgroup: Fix memory leak caused by missing cgroup_bpf_offline
          - [riscv64] riscv, bpf: Fix potential NULL dereference
          - tcp_bpf: Fix one concurrency problem in the tcp_bpf_send_verdict function
          - bpf: Fix potential race in tail call compatibility check
          - bpf: Fix error usage of map_fd and fdget() in generic_map_update_batch()
          - [amd64] IB/qib: Protect from buffer overflow in struct qib_user_sdma_pkt
            fields
          - [amd64] IB/hfi1: Fix abba locking issue with sc_disable()
          - nvmet-tcp: fix data digest pointer calculation
          - nvme-tcp: fix data digest pointer calculation
          - nvme-tcp: fix possible req->offset corruption
          - ice: Respond to a NETDEV_UNREGISTER event for LAG
          - RDMA/mlx5: Set user priority for DCT
          - ice: check whether PTP is initialized in ice_ptp_release()
          - [arm64] dts: allwinner: h5: NanoPI Neo 2: Fix ethernet node
          - regmap: Fix possible double-free in regcache_rbtree_exit()
          - net: batman-adv: fix error handling
          - net-sysfs: initialize uid and gid before calling net_ns_get_ownership
          - cfg80211: correct bridge/4addr mode check
          - net: Prevent infinite while loop in skb_tx_hash()
          - RDMA/mlx5: Initialize the ODP xarray when creating an ODP MR
          - RDMA/sa_query: Use strscpy_pad instead of memcpy to copy a string
          - net: ethernet: microchip: lan743x: Fix driver crash when lan743x_pm_resume
            fails
          - net: ethernet: microchip: lan743x: Fix dma allocation failure by using
            dma_set_mask_and_coherent
          - [arm64] net: hns3: fix pause config problem after autoneg disabled
          - [arm64] net: hns3: fix data endian problem of some functions of debugfs
          - net: ethernet: microchip: lan743x: Fix skb allocation failure
          - phy: phy_ethtool_ksettings_get: Lock the phy for consistency
          - phy: phy_ethtool_ksettings_set: Move after phy_start_aneg
          - phy: phy_start_aneg: Add an unlocked version
          - phy: phy_ethtool_ksettings_set: Lock the PHY while changing settings
          - sctp: use init_tag from inithdr for ABORT chunk (CVE-2021-3772)
          - sctp: fix the processing for INIT chunk (CVE-2021-3772)
          - sctp: fix the processing for INIT_ACK chunk (CVE-2021-3772)
          - sctp: fix the processing for COOKIE_ECHO chunk (CVE-2021-3772)
          - sctp: add vtag check in sctp_sf_violation (CVE-2021-3772)
          - sctp: add vtag check in sctp_sf_do_8_5_1_E_sa (CVE-2021-3772)
          - sctp: add vtag check in sctp_sf_ootb (CVE-2021-3772)
          - bpf: Use kvmalloc for map values in syscall
          - [arm64] watchdog: sbsa: only use 32-bit accessors
          - bpf: Move BPF_MAP_TYPE for INODE_STORAGE and TASK_STORAGE outside of
            CONFIG_NET
          - [arm64] net: hns3: add more string spaces for dumping packets number of
            queue info in debugfs
          - [arm64] net: hns3: expand buffer len for some debugfs command
          - virtio-ring: fix DMA metadata flags
          - [s390x] KVM: s390: clear kicked_mask before sleeping again
          - [s390x] KVM: s390: preserve deliverable_mask in __airqs_kick_single_vcpu
          - [powerpc*] scsi: ibmvfc: Fix up duplicate response detection
          - [riscv64] fix misalgned trap vector base address
          - [x86] KVM: switch pvclock_gtod_sync_lock to a raw spinlock
          - [x86] KVM: SEV-ES: fix another issue with string I/O VMGEXITs
          - [x86] KVM: Take srcu lock in post_kvm_run_save()
      .
        [ Salvatore Bonaccorso ]
        * Revert "[amd64] Unset AMD_MEM_ENCRYPT_ACTIVE_BY_DEFAULT"
        * Bump ABI to 4
        * media: ir-kbd-i2c: improve responsiveness of hauppauge zilog receivers
          (Closes: #994050)
        * [x86] media: ite-cir: IR receiver stop working after receive overflow
          (Closes: #996672)
        * scsi: core: Put LLD module refcnt after SCSI device is released
        * sfc: Fix reading non-legacy supported link modes
        * vrf: Revert "Reset skb conntrack connection..."
        * media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt()
          (CVE-2021-42739)
      .
      linux (5.14.12-1) unstable; urgency=medium
      .
        * New upstream stable update:
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.10
          - [arm64,armhf] media: cedrus: Fix SUNXI tile size calculation
          - [arm64] ASoC: fsl_sai: register platform component before registering cpu
            dai
          - [armhf] ASoC: fsl_spdif: register platform component before registering
            cpu dai
          - [x86] ASoC: SOF: Fix DSP oops stack dump output contents
          - [arm64] pinctrl: qcom: spmi-gpio: correct parent irqspec translation
          - net/mlx4_en: Resolve bad operstate value
          - [s390x] qeth: Fix deadlock in remove_discipline
          - [s390x] qeth: fix deadlock during failing recovery
          - [x86] crypto: ccp - fix resource leaks in ccp_run_aes_gcm_cmd()
            (CVE-2021-3744, CVE-2021-3764)
          - [m68k] Update ->thread.esp0 before calling syscall_trace() in
            ret_from_signal
          - [amd64] HID: amd_sfh: Fix potential NULL pointer dereference
          - tty: Fix out-of-bound vmalloc access in imageblit
          - cpufreq: schedutil: Use kobject release() method to free sugov_tunables
          - scsi: qla2xxx: Changes to support kdump kernel for NVMe BFS
          - drm/amdgpu: adjust fence driver enable sequence
          - drm/amdgpu: avoid over-handle of fence driver fini in s3 test (v2)
          - drm/amdgpu: stop scheduler when calling hw_fini (v2)
          - cpufreq: schedutil: Destroy mutex before kobject_put() frees the memory
          - scsi: ufs: ufs-pci: Fix Intel LKF link stability
          - ALSA: rawmidi: introduce SNDRV_RAWMIDI_IOCTL_USER_PVERSION
          - ALSA: firewire-motu: fix truncated bytes in message tracepoints
          - ALSA: hda/realtek: Quirks to enable speaker output for Lenovo Legion 7i
            15IMHG05, Yoga 7i 14ITL5/15ITL5, and 13s Gen2 laptops.
          - [amd64,arm64] ACPI: NFIT: Use fallback node id when numa info in NFIT
            table is incorrect
          - fs-verity: fix signed integer overflow with i_size near S64_MAX
          - hwmon: (tmp421) handle I2C errors
          - hwmon: (w83793) Fix NULL pointer dereference by removing unnecessary
            structure field
          - hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary
            structure field
          - hwmon: (w83791d) Fix NULL pointer dereference by removing unnecessary
            structure field
          - [arm64,armhf] gpio: pca953x: do not ignore i2c errors
          - scsi: ufs: Fix illegal offset in UPIU event trace
          - mac80211: fix use-after-free in CCMP/GCMP RX
          - [x86] platform/x86/intel: hid: Add DMI switches allow list
          - [x86] kvmclock: Move this_cpu_pvti into kvmclock.h
          - [x86] ptp: Fix ptp_kvm_getcrosststamp issue for x86 ptp_kvm
          - [x86] KVM: x86: Fix stack-out-of-bounds memory access from
            ioapic_write_indirect()
          - [x86] KVM: x86: nSVM: don't copy virt_ext from vmcb12
          - [x86] KVM: x86: Clear KVM's cached guest CR3 at RESET/INIT
          - [x86] KVM: x86: Swap order of CPUID entry "index" vs. "significant flag"
            checks
          - [x86] KVM: nVMX: Filter out all unsupported controls when eVMCS was
            activated
          - [x86] KVM: SEV: Update svm_vm_copy_asid_from for SEV-ES
          - [x86] KVM: SEV: Pin guest memory for write for RECEIVE_UPDATE_DATA
          - [x86] KVM: SEV: Acquire vcpu mutex when updating VMSA
          - [x86] KVM: SEV: Allow some commands for mirror VM
          - [x86] KVM: SVM: fix missing sev_decommission in sev_receive_start
          - [x86] KVM: nVMX: Fix nested bus lock VM exit
          - [x86] KVM: VMX: Fix a TSX_CTRL_CPUID_CLEAR field mask issue
          - RDMA/cma: Do not change route.addr.src_addr.ss_family
          - RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
          - nbd: use shifts rather than multiplies
          - drm/amd/display: initialize backlight_ramping_override to false
          - drm/amd/display: Pass PCI deviceid into DC
          - drm/amd/display: Fix Display Flicker on embedded panels
          - drm/amdgpu: force exit gfxoff on sdma resume for rmb s0ix
          - drm/amdgpu: check tiling flags when creating FB on GFX8-
          - drm/amdgpu: correct initial cp_hqd_quantum for gfx9
          - [amd64] drm/i915/gvt: fix the usage of ww lock in gvt scheduler.
          - ipvs: check that ip_vs_conn_tab_bits is between 8 and 20
          - bpf: Handle return value of BPF_PROG_TYPE_STRUCT_OPS prog
          - IB/cma: Do not send IGMP leaves for sendonly Multicast groups
          - RDMA/cma: Fix listener leak in rdma_cma_listen_on_all() failure
          - netfilter: nf_tables: unlink table before deleting it
          - netfilter: log: work around missing softdep backend module
          - Revert "mac80211: do not use low data rates for data frames with no ack
            flag"
          - mac80211: Fix ieee80211_amsdu_aggregate frag_tail bug
          - mac80211: limit injected vht mcs/nss in ieee80211_parse_tx_radiotap
          - mac80211: mesh: fix potentially unaligned access
          - mac80211-hwsim: fix late beacon hrtimer handling
          - driver core: fw_devlink: Add support for
            FWNODE_FLAG_NEEDS_CHILD_BOUND_ON_ADD
          - net: mdiobus: Set FWNODE_FLAG_NEEDS_CHILD_BOUND_ON_ADD for mdiobus parents
          - sctp: break out if skb_header_pointer returns NULL in sctp_rcv_ootb
          - mptcp: don't return sockets in foreign netns
          - mptcp: allow changing the 'backup' bit when no sockets are open
          - [arm64] RDMA/hns: Work around broken constant propagation in gcc 8
          - hwmon: (tmp421) report /PVLD condition as fault
          - hwmon: (tmp421) fix rounding for negative values
          - [arm64] net: enetc: fix the incorrect clearing of IF_MODE bits
          - net: ipv4: Fix rtnexthop len when RTA_FLOW is present
          - smsc95xx: fix stalled rx after link change
          - [x86] drm/i915/request: fix early tracepoints
          - [x86] drm/i915: Remove warning from the rps worker
          - [arm64,armhf] dsa: mv88e6xxx: 6161: Use chip wide MAX MTU
          - [arm64,armhf] dsa: mv88e6xxx: Fix MTU definition
          - [arm64,armhf] dsa: mv88e6xxx: Include tagger overhead when setting MTU for
            DSA and CPU ports
          - e100: fix length calculation in e100_get_regs_len
          - e100: fix buffer overrun in e100_get_regs
          - [amd64] RDMA/hfi1: Fix kernel pointer leak
          - [arm64] RDMA/hns: Fix the size setting error when copying CQE in
            clean_cq()
          - [arm64] RDMA/hns: Add the check of the CQE size of the user space
          - bpf: Exempt CAP_BPF from checks against bpf_jit_limit
          - [amd64] bpf, x86: Fix bpf mapping of atomic fetch implementation
          - Revert "block, bfq: honor already-setup queue merges"
          - scsi: csiostor: Add module softdep on cxgb4
          - ixgbe: Fix NULL pointer dereference in ixgbe_xdp_setup
          - [arm64] net: hns3: do not allow call hns3_nic_net_open repeatedly
          - [arm64] net: hns3: remove tc enable checking
          - [arm64] net: hns3: don't rollback when destroy mqprio fail
          - [arm64] net: hns3: fix mixed flag HCLGE_FLAG_MQPRIO_ENABLE and
            HCLGE_FLAG_DCB_ENABLE
          - [arm64] net: hns3: fix show wrong state when add existing uc mac address
          - [arm64] net: hns3: reconstruct function hns3_self_test
          - [arm64] net: hns3: fix always enable rx vlan filter problem after selftest
          - [arm64] net: hns3: disable firmware compatible features when uninstall PF
          - [arm64,armhf] net: phy: bcm7xxx: Fixed indirect MMD operations
          - net: sched: flower: protect fl_walk() with rcu
          - net: stmmac: fix EEE init issue when paired with EEE capable PHYs
          - af_unix: fix races in sk_peer_pid and sk_peer_cred accesses
          - [x86] perf/x86/intel: Update event constraints for ICX
          - sched/fair: Add ancestors of unthrottled undecayed cfs_rq
          - sched/fair: Null terminate buffer when updating tunable_scaling
          - [armhf] hwmon: (occ) Fix P10 VRM temp sensors
          - [x86] kvm: fix objtool relocation warning
          - nvme: add command id quirk for apple controllers
          - elf: don't use MAP_FIXED_NOREPLACE for elf interpreter mappings
          - driver core: fw_devlink: Improve handling of cyclic dependencies
          - debugfs: debugfs_create_file_size(): use IS_ERR to check for error
          - ext4: fix loff_t overflow in ext4_max_bitmap_size()
          - ext4: fix reserved space counter leakage
          - ext4: add error checking to ext4_ext_replay_set_iblocks()
          - ext4: fix potential infinite loop in ext4_dx_readdir()
          - ext4: flush s_error_work before journal destroy in ext4_fill_super
          - HID: u2fzero: ignore incomplete packets without data (Closes: #994535)
          - net: udp: annotate data race around udp_sk(sk)->corkflag
          - usb: hso: remove the bailout parameter
          - HID: betop: fix slab-out-of-bounds Write in betop_probe
          - netfilter: ipset: Fix oversized kvmalloc() calls
          - mm: don't allow oversized kvmalloc() calls
          - HID: usbhid: free raw_report buffers in usbhid_stop
          - [x86] crypto: aesni - xts_crypt() return if walk.nbytes is 0
          - [x86] KVM: x86: Handle SRCU initialization failure during page track init
          - netfilter: conntrack: serialize hash resizes and cleanups
          - netfilter: nf_tables: Fix oversized kvmalloc() calls
          - [amd64] HID: amd_sfh: Fix potential NULL pointer dereference - take 2
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.11
          - [arm64,armhf] spi: rockchip: handle zero length transfers without timing
            out
          - afs: Add missing vnode validation checks
          - nfsd: back channel stuck in SEQ4_STATUS_CB_PATH_DOWN
          - btrfs: replace BUG_ON() in btrfs_csum_one_bio() with proper error handling
          - btrfs: fix mount failure due to past and transient device flush error
          - net: mdio: introduce a shutdown method to mdio device drivers
          - xen-netback: correct success/error reporting for the SKB-with-fraglist
            case
          - [sparc64] fix pci_iounmap() when CONFIG_PCI is not set
          - scsi: sd: Free scsi_disk device via put_device()
          - [arm*] usb: dwc2: check return value after calling platform_get_resource()
          - Xen/gntdev: don't ignore kernel unmapping error
          - swiotlb-xen: ensure to issue well-formed XENMEM_exchange requests
          - nvme-fc: update hardware queues before using them
          - nvme-fc: avoid race between time out and tear down
          - [arm64] thermal/drivers/tsens: Fix wrong check for tzd in irq handlers
          - scsi: ses: Retry failed Send/Receive Diagnostic commands
          - [arm64,armhf] irqchip/gic: Work around broken Renesas integration
          - smb3: correct smb3 ACL security descriptor
          - [x86] insn, tools/x86: Fix undefined behavior due to potential unaligned
            accesses
          - io_uring: allow conditional reschedule for intensive iterators
          - block: don't call rq_qos_ops->done_bio if the bio isn't tracked
          - KVM: do not shrink halt_poll_ns below grow_start
          - [x86] KVM: x86: reset pdptrs_from_userspace when exiting smm
          - [x86] kvm: x86: Add AMD PMU MSRs to msrs_to_save_all[]
          - [x86] KVM: x86: nSVM: restore int_vector in svm_clear_vintr
          - [x86] perf/x86: Reset destroy callback on event init failure
          - libata: Add ATA_HORKAGE_NO_NCQ_ON_ATI for Samsung 860 and 870 SSD.
          - Revert "brcmfmac: use ISO3166 country code and 0 rev as fallback"
          - [armhf] Revert "ARM: imx6q: drop of_platform_default_populate() from
            init_machine"
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.12
          - usb: cdc-wdm: Fix check for WWAN
          - [arm64,armhf] usb: chipidea: ci_hdrc_imx: Also search for 'phys' phandle
          - usb: gadget: f_uac2: fixed EP-IN wMaxPacketSize
          - USB: cdc-acm: fix racy tty buffer accesses
          - USB: cdc-acm: fix break reporting
          - usb: typec: tcpm: handle SRC_STARTUP state if cc changes
          - [x86] usb: typec: tipd: Remove dependency on "connector" child fwnode
          - drm/amdgpu: During s0ix don't wait to signal GFXOFF
          - drm/nouveau/kms/tu102-: delay enabling cursor until after assign_windows
          - drm/nouveau/ga102-: support ttm buffer moves via copy engine
          - [x86] drm/i915: Fix runtime pm handling in i915_gem_shrink
          - [x86] drm/i915: Extend the async flip VT-d w/a to skl/bxt
          - xen/privcmd: fix error handling in mmap-resource processing
          - [arm64] mmc: meson-gx: do not use memcpy_to/fromio for dram-access-quirk
          - ovl: fix missing negative dentry check in ovl_rename()
          - ovl: fix IOCB_DIRECT if underlying fs doesn't support direct IO
          - nfsd: fix error handling of register_pernet_subsys() in init_nfsd()
          - nfsd4: Handle the NFSv4 READDIR 'dircount' hint being zero
          - SUNRPC: fix sign error causing rpcsec_gss drops
          - xen/balloon: fix cancelled balloon action
          - [armhf] dts: omap3430-sdp: Fix NAND device node
          - scsi: ufs: core: Fix task management completion
          - [riscv64] Flush current cpu icache before other cpus
          - [armhf] bus: ti-sysc: Add break in switch statement in sysc_init_soc()
          - iwlwifi: mvm: Fix possible NULL dereference
          - [arm64] soc: qcom: mdt_loader: Drop PT_LOAD check on hash segment
          - [armhf] dts: imx: Add missing pinctrl-names for panel on M53Menlo
          - [armhf] dts: imx: Fix USB host power regulator polarity on M53Menlo
          - [amd64] PCI: hv: Fix sleep while in non-sleep context when removing child
            devices from the bus
          - iwlwifi: pcie: add configuration of a Wi-Fi adapter on Dell XPS 15
          - netfilter: conntrack: fix boot failure with nf_conntrack.enable_hooks=1
          - netfilter: nf_tables: add position handle in event notification
          - netfilter: nf_tables: reverse order in rule replacement expansion
          - [armel,armhf] bpf, arm: Fix register clobbering in div/mod implementation
          - [armhf] soc: ti: omap-prm: Fix external abort for am335x pruss
          - bpf: Fix integer overflow in prealloc_elems_and_freelist()
            (CVE-2021-41864)
          - net/mlx5e: IPSEC RX, enable checksum complete
          - net/mlx5e: Keep the value for maximum number of channels in-sync
          - net/mlx5: E-Switch, Fix double allocation of acl flow counter
          - net/mlx5: Force round second at 1PPS out start time
          - net/mlx5: Avoid generating event after PPS out in Real time mode
          - net/mlx5: Fix length of irq_index in chars
          - net/mlx5: Fix setting number of EQs of SFs
          - net/mlx5e: Fix the presented RQ index in PTP stats
          - phy: mdio: fix memory leak
          - net_sched: fix NULL deref in fifo_set_limit()
          - [arm64] net: mscc: ocelot: fix VCAP filters remaining active after being
            deleted
          - [arm64,armhf] net: stmmac: dwmac-rk: Fix ethernet on rk3399 based devices
          - [mips*] Revert "add support for buggy MT7621S core detection"
          - netfilter: nf_tables: honor NLM_F_CREATE and NLM_F_EXCL in event
            notification
          - [i386] ptp_pch: Load module automatically if ID matches
          - [armhf] dts: imx: change the spi-nor tx
          - [arm64] dts: imx8: change the spi-nor tx
          - [armhf] imx6: disable the GIC CPU interface before calling stby-poweroff
            sequence
          - [x86] drm/i915/audio: Use BIOS provided value for RKL HDA link
          - [x86] drm/i915/jsl: Add W/A 1409054076 for JSL
          - [x86] drm/i915/tc: Fix TypeC port init/resume time sanitization
          - [x86] drm/i915/bdb: Fix version check
          - netfs: Fix READ/WRITE confusion when calling iov_iter_xarray()
          - afs: Fix afs_launder_page() to set correct start file position
          - net: bridge: use nla_total_size_64bit() in br_get_linkxstats_size()
          - net: bridge: fix under estimation in br_get_linkxstats_size()
          - net/sched: sch_taprio: properly cancel timer from taprio_destroy()
          - net: sfp: Fix typo in state machine debug string
          - net: pcs: xpcs: fix incorrect CL37 AN sequence
          - netlink: annotate data races around nlk->bound
          - drm/amdgpu: handle the case of pci_channel_io_frozen only in
            amdgpu_pci_resume
          - [armhf] bus: ti-sysc: Use CLKDM_NOAUTO for dra7 dcan1 for errata i893
          - [arm64,armhf] drm/sun4i: dw-hdmi: Fix HDMI PHY clock setup
          - drm/nouveau: avoid a use-after-free when BO init fails
          - drm/nouveau/kms/nv50-: fix file release memory leak
          - drm/nouveau/debugfs: fix file release memory leak
          - net: pcs: xpcs: fix incorrect steps on disable EEE
          - net: stmmac: trigger PCS EEE to turn off on link down
          - [amd64,arm64] gve: Correct available tx qpl check
          - [amd64,arm64] gve: Avoid freeing NULL pointer
          - [amd64,arm64] gve: Properly handle errors in gve_assign_qpl
          - rtnetlink: fix if_nlmsg_stats_size() under estimation
          - [amd64,arm64] gve: fix gve_get_stats()
          - [amd64,arm64] gve: report 64bit tx_bytes counter from
            gve_handle_report_stats()
          - i40e: fix endless loop under rtnl
          - i40e: Fix freeing of uninitialized misc IRQ vector
          - iavf: fix double unlock of crit_lock
          - net: prefer socket bound to interface when not in VRF
          - [powerpc*] iommu: Report the correct most efficient DMA mask for PCI
            devices
          - i2c: acpi: fix resource leak in reconfiguration device addition
          - [riscv64] explicitly use symbol offsets for VDSO
          - [riscv64] vdso: Refactor asm/vdso.h
          - [riscv64] vdso: Move vdso data page up front
          - [riscv64] vdso: make arch_setup_additional_pages wait for mmap_sem for
            write killable
          - [s390x] bpf, s390: Fix potential memory leak about jit_data
          - [riscv64] Include clone3() on rv32
          - scsi: iscsi: Fix iscsi_task use after free
          - [powerpc*] bpf: Fix BPF_MOD when imm == 1
          - [powerpc*] bpf: Fix BPF_SUB when imm == 0x80000000
          - [powerpc*] 64s: fix program check interrupt emergency stack path
          - [powerpc*] traps: do not enable irqs in _exception
          - [powerpc*] 64s: Fix unrecoverable MCE calling async handler from NMI
          - [powerpc*] pseries/eeh: Fix the kdump kernel crash during eeh_pseries_init
          - [i386] x86/platform/olpc: Correct ifdef symbol to intended
            CONFIG_OLPC_XO15_SCI
          - [x86] fpu: Restore the masking out of reserved MXCSR bits
          - [x86] entry: Correct reference to intended CONFIG_64_BIT
          - [x86] hpet: Use another crystalball to evaluate HPET usability
          - [arm64,armhf] dsa: tag_dsa: Fix mask for trunked packets
      .
        [ Ben Hutchings ]
        * debian/.gitignore: Ignore debian/tests/control again
        * integrity: Drop "MODSIGN: load blacklist from MOKx" as redundant after 5.13
        * tools/perf: Fix warning introduced by "tools/perf: pmu-events: Fix
          reproducibility"
        * debian/rules.real: Stop invoking obsolete headers_check target
        * libcpupower: Update symbols file for changes in 5.13.9-1~exp1
      .
        [ John Paul Adrian Glaubitz ]
        * [alpha] Re-enable CONFIG_EISA which was disabled upstream by accident
      .
        [ Salvatore Bonaccorso ]
        * Bump ABI to 3
        * mm/secretmem: Fix NULL page->mapping dereference in page_is_secretmem()
          (Closes: #996175)
      .
        [ Aurelien Jarno ]
        * [riscv64] Improve HiFive Unmatched support: enable SENSORS_LM90.
      da53be7b
    • Lorenzo "Palinuro" Faletra's avatar
      9172ee40
  10. 26 Oct, 2021 2 commits
    • Lorenzo "Palinuro" Faletra's avatar
      Import Debian changes 5.14.9-9parrot1 · 6572c3ca
      Lorenzo "Palinuro" Faletra authored
      linux (5.14.9-9parrot1) lts-updates; urgency=medium
      .
        * Import new Debian release.
        * Add Parrot wireless patches.
        * Disable kernel signing.
      .
      linux (5.14.9-2) unstable; urgency=medium
      .
        * [amd64] Unset AMD_MEM_ENCRYPT_ACTIVE_BY_DEFAULT.
          Do not activate AMD Secure Memory Encryption (SME) by default, until
          AMDGPU related incompatibilities are fixed. (Closes: #994453)
      .
      linux (5.14.9-1) unstable; urgency=medium
      .
        * New upstream stable update:
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.7
          - [amd64] net: stmmac: fix MAC not working when system resume back with WoL
            active
          - [amd64,arm64] swiotlb-xen: avoid double free
          - swiotlb-xen: fix late init retry
          - [amd64] xen: reset legacy rtc flag for PV domU
          - [amd64] xen: fix usage of pmd_populate in mremap for pv guests
          - [arm64] sve: Use correct size when reinitialising SVE state
          - PCI: Add AMD GPU multi-function power dependencies
          - drm/amd/display: dsc mst 2 4K displays go dark with 2 lane HBR3
          - drm/amd/display: Fix white screen page fault for gpuvm
          - drm/amd/amdgpu: Increase HWIP_MAX_INSTANCE to 10
          - drm/amdgpu: use IS_ERR for debugfs APIs
          - drm/amdgpu: fix use after free during BO move
          - drm/amdgpu: add amdgpu_amdkfd_resume_iommu
          - drm/amdgpu: move iommu_resume before ip init/resume
          - drm/radeon: pass drm dev radeon_agp_head_init directly
          - io_uring: allow retry for O_NONBLOCK if async is supported
          - [x86] drm/i915/dp: Use max params for panels < eDP 1.4
          - [armhf] drm/etnaviv: return context from etnaviv_iommu_context_get
          - [armhf] drm/etnaviv: put submit prev MMU context when it exists
          - [armhf] drm/etnaviv: stop abusing mmu_context as FE running marker
          - [armhf] drm/etnaviv: keep MMU context across runtime suspend/resume
          - [armhf] drm/etnaviv: exec and MMU state is lost when resetting the GPU
          - [armhf] drm/etnaviv: fix MMU context leak on GPU reset
          - [armhf] drm/etnaviv: reference MMU context when setting up hardware state
          - [armhf] drm/etnaviv: add missing MMU context put when reaping MMU mapping
          - [s390x] sclp: fix Secure-IPL facility detection
          - net: qrtr: revert check in qrtr_endpoint_post() (Closes: #995491)
          - [x86] pat: Pass valid address to sanitize_phys()
          - [x86] mm: Fix kern_addr_valid() to cope with existing but not present
            entries
          - x86/mce: Avoid infinite loop for copy from user recovery
          - tipc: fix an use-after-free issue in tipc_recvmsg
          - net: remove the unnecessary check in cipso_v4_doi_free
          - net/{mlx5|nfp|bnxt}: Remove unnecessary RTNL lock assert
          - net/l2tp: Fix reference count leak in l2tp_udp_recv_core
          - r6040: Restore MDIO clock frequency after MAC reset
          - tipc: increase timeout in tipc_sk_enqueue()
          - [arm64] drm/rockchip: cdn-dp-core: Make cdn_dp_core_resume __maybe_unused
          - rtc: cmos: Disable irq around direct invocation of cmos_interrupt()
          - [x86] drm/i915/dp: return proper DPRX link training result
          - net/mlx5: FWTrace, cancel work on alloc pd error flow
          - net/mlx5: Fix potential sleeping in atomic context
          - net: stmmac: fix system hang caused by eee_ctrl_timer during
            suspend/resume
          - igc: fix tunnel offloading
          - nvme-tcp: fix io_work priority inversion
          - [powerpc*] 64s: system call scv tabort fix for corrupt irq soft-mask state
          - events: Reuse value read using READ_ONCE instead of re-reading it
          - vhost_net: fix OoB on sendmsg() failure.
          - net/af_unix: fix a data-race in unix_dgram_poll
          - [arm64,armhf] net: dsa: destroy the phylink instance on any error in
            dsa_slave_phy_setup
          - tcp: fix tp->undo_retrans accounting in tcp_sacktag_one()
          - qed: Handle management FW error
          - udp_tunnel: Fix udp_tunnel_nic work-queue type
          - dt-bindings: arm: Fix Toradex compatible typo
          - [powerpc*] KVM: PPC: Book3S HV: Tolerate treclaim. in fake-suspend mode
            changing registers
          - [powerpc*] 64s: system call rfscv workaround for TM bugs
          - [powerpc*] mce: Fix access error in mce handler
          - [s390x] pci_mmio: fully validate the VMA before calling follow_pte()
          - bnxt_en: make bnxt_free_skbs() safe to call after bnxt_free_mem()
          - [arm64] net: hns3: pad the short tunnel frame before sending to hardware
          - [arm64] net: hns3: change affinity_mask to numa node range
          - [arm64] net: hns3: disable mac in flr process
          - [arm64] net: hns3: fix the timing issue of VF clearing interrupt sources
          - net: stmmac: platform: fix build warning when with !CONFIG_PM_SLEEP
          - [x86] Drivers: hv: vmbus: Fix kernel crash upon unbinding a device from
            uio_hv_generic driver
          - net/mlx5e: Fix mutual exclusion between CQE compression and HW TS
          - ice: Correctly deal with PFs that do not support RDMA
          - [arm64] net: hns3: fix the exception when query imp info
          - nvme: avoid race in shutdown namespace removal
          - blkcg: fix memory leak in blk_iolatency_init
          - [arm64,armhf] net: dsa: flush switchdev workqueue before tearing down
            CPU/DSA ports
          - dt-bindings: mtd: gpmc: Fix the ECC bytes vs. OOB bytes equation
          - PCI: Add ACS quirks for NXP LX2xx0 and LX2xx2 platforms
          - fuse: fix use after free in fuse_read_interrupt()
          - [arm64,armhf] PCI: tegra: Fix OF node reference leak
          - [armhf] mfd: Don't use irq_create_mapping() to resolve a mapping
          - [riscv64] fix the global name pfn_base confliction error
          - [arm64] KVM: Make hyp_panic() more robust when protected mode is enabled
          - tracing/probes: Reject events which have the same name of existing one
          - PCI: Add ACS quirks for Cavium multi-function devices
          - watchdog: Start watchdog in watchdog_set_last_hw_keepalive only if
            appropriate
          - Set fc_nlinfo in nh_create_ipv4, nh_create_ipv6
          - flow: fix object-size-mismatch warning in flowi{4,6}_to_flowi_common()
          - net: usb: cdc_mbim: avoid altsetting toggling for Telit LN920
          - block, bfq: honor already-setup queue merges
          - [i386] PCI: ibmphp: Fix double unmap of io_mem
          - loop: reduce the loop_ctl_mutex scope
          - ethtool: Fix an error code in cxgb2.c
          - net: phylink: add suspend/resume support
          - mfd: axp20x: Update AXP288 volatile ranges
          - PCI: of: Don't fail devm_pci_alloc_host_bridge() on missing 'ranges'
          - netfilter: nft_ct: protect nft_ct_pcpu_template_refcnt with mutex
          - [arm64] KVM: Restrict IPA size to maximum 48 bits on 4K and 16K page size
          - PCI: Fix pci_dev_str_match_path() alloc while atomic bug
          - mtd: mtdconcat: Judge callback existence based on the master
          - mtd: mtdconcat: Check _read, _write callbacks existence before assignment
          - [arm64] KVM: Fix read-side race on updates to vcpu reset state
          - [arm64] KVM: Handle PSCI resets before userspace touches vCPU state
          - PCI/PTM: Remove error message at boot
          - watchdog: Fix NULL pointer dereference when releasing cdev
          - mtd: rawnand: cafe: Fix a resource leak in the error handling path of
            'cafe_nand_probe()'
          - [arm64] gpio: mpc8xxx: Fix a resources leak in the error handling path of
            'mpc8xxx_probe()'
          - [arm64] gpio: mpc8xxx: Fix a potential double iounmap call in
            'mpc8xxx_probe()'
          - [arm64] gpio: mpc8xxx: Use 'devm_gpiochip_add_data()' to simplify the code
            and avoid a leak
          - io_uring: retry in case of short read on block device
          - mptcp: fix possible divide by zero
          - net: hso: add failure handler for add_net_device
          - [armhf] net: dsa: b53: Fix calculating number of switch ports
          - [armhf] net: dsa: b53: Set correct number of ports in the DSA struct
          - mptcp: Only send extra TCP acks in eligible socket states
          - netfilter: socket: icmp6: fix use-after-scope
          - fq_codel: reject silly quantum parameters
          - qlcnic: Remove redundant unlock in qlcnic_pinit_from_rom
          - iwlwifi: move get pnvm file name to a separate function
          - iwlwifi: pnvm: Fix a memory leak in 'iwl_pnvm_get_from_fs()'
          - ip_gre: validate csum_start only on pull
          - [armhf] net: dsa: b53: Fix IMP port setup on BCM5301x
          - bnxt_en: fix stored FW_PSID version masks
          - bnxt_en: Fix asic.rev in devlink dev info command
          - bnxt_en: Fix possible unintended driver initiated error recovery
          - ip6_gre: Revert "ip6_gre: add validation for csum_start"
          - mfd: lpc_sch: Rename GPIOBASE to prevent build error
          - cxgb3: fix oops on module removal
          - bnxt_en: Fix error recovery regression
          - [armhf] net: dsa: bcm_sf2: Fix array overrun in bcm_sf2_num_active_ports()
          - [s390x] bpf: Fix optimizing out zero-extensions
          - [s390x] bpf: Fix 64-bit subtraction of the -0x80000000 constant
          - [s390x] bpf: Fix branch shortening during codegen pass
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.8
          - PCI: pci-bridge-emul: Add PCIe Root Capabilities Register
          - [arm64] PCI: aardvark: Fix reporting CRS value
          - console: consume APC, DM, DCS
          - [x86] staging: rtl8192u: Fix bitwise vs logical operator in
            TranslateRxSignalStuff819xUsb()
          - coredump: fix memleak in dump_vma_snapshot()
          - [arm64] RDMA/hns: Enable stash feature of HIP09
          - RDMA/mlx5: Fix xlt_chunk_align calculation
          - dmaengine: acpi: Avoid comparison GSI with Linux vIRQ
          - staging: rtl8723bs: fix wpa_set_auth_algs() function
          - [armhf] thermal/drivers/exynos: Fix an error code in exynos_tmu_probe()
          - 9p/trans_virtio: Remove sysfs file on probe failure
          - prctl: allow to setup brk for et_dyn executables
          - nilfs2: use refcount_dec_and_lock() to fix potential UAF
          - profiling: fix shift-out-of-bounds bugs
          - PM: sleep: core: Avoid setting power.must_resume to false
          - ceph: cancel delayed work instead of flushing on mdsc teardown
          - platform/chrome: sensorhub: Add trace events for sample
          - platform/chrome: cros_ec_trace: Fix format warnings
          - [s390x] entry: make oklabel within CHKSTG macro local
          - SUNRPC: don't pause on incomplete allocation
          - init: move usermodehelper_enable() to populate_rootfs()
          - thermal/core: Fix thermal_cooling_device_register() prototype
          - drivers: base: cacheinfo: Get rid of DEFINE_SMP_CALL_CACHE_FUNCTION()
          - [amd64] iommu/amd: Relocate GAMSup check to early_enable_iommus
          - [amd64] iommu/vt-d: Fix PASID leak in intel_svm_unbind_mm()
          - [amd64] iommu/vt-d: Fix a deadlock in intel_svm_drain_prq()
          - [arm64] mm: limit linear region to 51 bits for KVM in nVHE mode
          - drm/ttm: Fix a deadlock if the target BO is not idle during swap
          - of: property: Disable fw_devlink DT support for X86
          - [riscv64] dts: microchip: mpfs-icicle: Fix serial console
          - [arm64,armhf] ASoC: audio-graph: respawn Platform Support
          - [x86] ACPI: PM: s2idle: Run both AMD and Microsoft methods if both are
            supported
          - ceph: fix memory leak on decode error in ceph_handle_caps
          - ceph: request Fw caps before updating the mtime in ceph_write_iter
          - ceph: remove the capsnaps when removing caps
          - ceph: lockdep annotations for try_nonblocking_invalidate
          - [s390x] unwind: use current_frame_address() to unwind current task
          - btrfs: update the bdev time directly when closing
          - btrfs: delay blkdev_put until after the device remove
          - btrfs: fix lockdep warning while mounting sprout fs
          - nilfs2: fix memory leak in nilfs_sysfs_create_device_group
          - nilfs2: fix NULL pointer in nilfs_##name##_attr_release
          - nilfs2: fix memory leak in nilfs_sysfs_create_##name##_group
          - nilfs2: fix memory leak in nilfs_sysfs_delete_##name##_group
          - nilfs2: fix memory leak in nilfs_sysfs_create_snapshot_group
          - nilfs2: fix memory leak in nilfs_sysfs_delete_snapshot_group
          - drm/amdgpu: Fixes to returning VBIOS RAS EEPROM address
          - drm/amdgpu: fix fdinfo race with process exit
          - [arm64,armhf] pwm: rockchip: Don't modify HW state in .remove() callback
          - [armhf] pwm: stm32-lp: Don't modify HW state in .remove() callback
          - nvmet: fixup buffer overrun in nvmet_subsys_attr_serial()
          - block: genhd: don't call blkdev_show() with major_names_lock held
          - blk-throttle: fix UAF by deleteing timer in blk_throtl_exit()
          - blk-mq: allow 4x BLK_MAX_REQUEST_COUNT at blk_plug for multiple_queues
          - sched/idle: Make the idle timer expire in hard interrupt context
          - cifs: properly invalidate cached root handle when closing it
          - io_uring: fix off-by-one in BUILD_BUG_ON check of __REQ_F_LAST_BIT
          - selinux,smack: fix subjective/objective credential use mixups
          - drm/nouveau/nvkm: Replace -ENOSYS with -ENODEV
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.9
          - mm, hwpoison: add is_free_buddy_page() in HWPoisonHandlable()
          - ocfs2: drop acl cache for directories too
          - mm/debug: sync up MR_CONTIG_RANGE and MR_LONGTERM_PIN
          - mm: fix uninitialized use in overcommit_policy_handler
          - usb: gadget: u_audio: EP-OUT bInterval in fback frequency
          - [arm*] usb: dwc2: gadget: Fix ISOC flow for BDMA and Slave
          - [arm*] usb: dwc2: gadget: Fix ISOC transfer complete handling for DDMA
          - [armhf] usb: musb: tusb6010: uninitialized data in
            tusb_fifo_write_unaligned()
          - cifs: Not to defer close on file when lock is set
          - cifs: Fix soft lockup during fsstress
          - cifs: fix incorrect check for null pointer in header_assemble
          - [xen] x86: fix PV trap handling on secondary processors
          - usb-storage: Add quirk for ScanLogic SL11R-IDE older than 2.6c
          - USB: serial: cp210x: add ID for GW Instek GDM-834x Digital Multimeter
          - USB: cdc-acm: fix minor-number release
          - [arm*] binder: make sure fd closes complete
          - [arm*] binder: fix freeze race
          - [arm64] usb: isp1760: do not sleep in field register poll
          - Re-enable UAS for LaCie Rugged USB3-FW with fk quirk
          - [arm64,armhf] usb: dwc3: core: balance phy init and exit
          - usb: core: hcd: Add support for deferring roothub registration
          - USB: serial: mos7840: remove duplicated 0xac24 device ID
          - USB: serial: option: add Telit LN920 compositions
          - USB: serial: option: remove duplicate USB device ID
          - USB: serial: option: add device id for Foxconn T99W265
          - [powerpc*] misc: genwqe: Fixes DMA mask setting
          - KVM: rseq: Update rseq when processing NOTIFY_RESUME on xfer to KVM guest
          - erofs: fix up erofs_lookup tracepoint
          - nexthop: Fix division by zero while replacing a resilient group
          - btrfs: prevent __btrfs_dump_space_info() to underflow its free space
          - xhci: Set HCD flag to defer primary roothub registration
          - [arm64] serial: mvebu-uart: fix driver's tx_empty callback
          - scsi: sd_zbc: Ensure buffer size is aligned to SECTOR_SIZE
          - net: hso: fix muxed tty registration
          - [amd64] platform/x86: amd-pmc: Increase the response register timeout
          - [arm64] Restore forced disabling of KPTI on ThunderX
          - [arm64] Mitigate MTE issues with str{n}cmp()
          - [x86] comedi: Fix memory leak in compat_insnlist()
          - afs: Fix page leak
          - afs: Fix incorrect triggering of sillyrename on 3rd-party invalidation
          - afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server
          - afs: Fix updating of i_blocks on file/dir extension
          - virtio-net: fix pages leaking when building skb in big mode
          - [arm64] enetc: Fix illegal access when reading affinity_hint
          - [arm64] enetc: Fix uninitialized struct dim_sample field usage
          - [arm64,armhf] net: dsa: tear down devlink port regions when tearing down
            the devlink port on error
          - napi: fix race inside napi_enable
          - bnxt_en: Fix TX timeout when TX ring size is set to the smallest
          - [arm64] net: hns3: fix change RSS 'hfunc' ineffective issue
          - [arm64] net: hns3: fix inconsistent vf id print
          - [arm64] net: hns3: fix misuse vf id and vport id in some logs
          - [arm64] net: hns3: check queue id range before using
          - [arm64] net: hns3: check vlan id before using it
          - [arm64] net: hns3: fix a return value error in hclge_get_reset_status()
          - net/smc: add missing error check in smc_clc_prfx_set()
          - net/smc: fix 'workqueue leaked lock' in smc_conn_abort_work
          - [arm64,armhf] net: dsa: fix dsa_tree_setup error path
          - [arm64,armhf] net: dsa: don't allocate the slave_mii_bus using devres
          - spi: Revert modalias changes
          - [s390x] qeth: fix NULL deref in qeth_clear_working_pool_list()
          - gpiolib: acpi: Make set-debounce-timeout failures non fatal
          - qed: rdma - don't wait for resources under hw error recovery flow
          - mptcp: ensure tx skbs always have the MPTCP ext
          - nexthop: Fix memory leaks in nexthop notification chain listeners
          - [arm64] net: mscc: ocelot: fix forwarding from BLOCKING ports remaining
            enabled
          - net/mlx4_en: Don't allow aRFS for encapsulated packets
          - atlantic: Fix issue in the pm resume flow.
          - scsi: iscsi: Adjust iface sysfs attr detection
          - scsi: target: Fix the pgr/alua_support_store functions
          - [x86] tty: synclink_gt: rename a conflicting function name
          - [x86] fault: Fix wrong signal when vsyscall fails with pkey
          - nvme-tcp: fix incorrect h2cdata pdu offset accounting
          - nvme: keep ctrl->namespaces ordered
          - thermal/core: Potential buffer overflow in
            thermal_build_list_of_policies()
          - cifs: fix a sign extension bug
          - scsi: sd_zbc: Support disks with more than 2**32 logical blocks
          - scsi: ufs: Revert "Utilize Transfer Request List Completion Notification
            Register"
          - scsi: ufs: Retry aborted SCSI commands instead of completing these
            successfully
          - scsi: ufs: core: Unbreak the reset handler
          - scsi: qla2xxx: Restore initiator in dual mode
          - scsi: lpfc: Use correct scnprintf() limit
          - [arm64,armhf] irqchip/gic-v3-its: Fix potential VPE leak on error
          - md: fix a lock order reversal in md_alloc
          - [x86] asm: Fix SETZ size enqcmds() build failure
          - io_uring: fix race between poll completion and cancel_hash insertion
          - io_uring: fix missing set of EPOLLONESHOT for CQ ring overflow
          - io_uring: put provided buffer meta data under memcg accounting
          - io_uring: don't punt files update to io-wq unconditionally
          - blktrace: Fix uaf in blk_trace access after removing by sysfs
          - net: phylink: Update SFP selected interface on advertising changes
          - net: stmmac: allow CSR clock of 300MHz
          - blk-mq: avoid to iterate over stale request
          - ipv6: delay fib6_sernum increase in fib6_add
          - [x86] cpufreq: intel_pstate: Override parameters if HWP forced by BIOS
          - bpf: Add oversize check before call kvcalloc()
          - xen/balloon: use a kernel thread instead a workqueue
          - nvme-multipath: fix ANA state updates when a namespace is not present
          - nvme-rdma: destroy cm id before destroy qp to avoid use after free
          - amd/display: downgrade validation failure log level
          - drm/ttm: fix type mismatch error on sparc64
          - block: check if a profile is actually registered in
            blk_integrity_unregister
          - block: flush the integrity workqueue in blk_integrity_unregister
          - blk-cgroup: fix UAF by grabbing blkcg lock before destroying blkg pd
          - compiler.h: Introduce absolute_pointer macro
          - qnx4: avoid stringop-overread errors
          - drm/amd/display: Fix unstable HPCP compliance on Chrome Barcelo
          - drm/amd/display: Link training retry fix for abort case
          - amd/display: enable panel orientation quirks
          - [arm64] Mark __stack_chk_guard as __ro_after_init
          - net: 6pack: Fix tx timeout and slot time
          - [arm64] spi: Fix tegra20 build with CONFIG_PM=n
          - [arm*] Revert drm/vc4 hdmi runtime PM changes
          - [x86] setup: Call early_reserve_memory() earlier
          - [x86] thermal/drivers/int340x: Do not set a wrong tcc offset on resume
          - [armhf] irqchip/armada-370-xp: Fix ack/eoi breakage
          - [arm64] add MTE supported check to thread switching and syscall entry/exit
          - USB: serial: cp210x: fix dropped characters with CP2102
          - software node: balance refcount for managed software nodes
          - xen/balloon: fix balloon kthread freezing
          - qnx4: work around gcc false positive warning bug
          - nvmet: fix a width vs precision bug in nvmet_subsys_attr_serial_show()
          - usb: gadget: f_uac2: Add missing companion descriptor for feedback EP
          - usb: gadget: f_uac2: Populate SS descriptors' wBytesPerInterval
      .
        [ Salvatore Bonaccorso ]
        * Bump ABI to 2
        * ext4: limit the number of blocks in one ADD_RANGE TLV (Closes: #995425)
      6572c3ca
    • Lorenzo "Palinuro" Faletra's avatar
      f4157cb5
  11. 25 Sep, 2021 2 commits
    • Lorenzo "Palinuro" Faletra's avatar
      Import Debian changes 5.14.6-2parrot1 · 28411d67
      Lorenzo "Palinuro" Faletra authored
      linux (5.14.6-2parrot1) lts-updates; urgency=medium
      .
        * Import new Debian release.
      .
      linux (5.14.6-2) unstable; urgency=medium
      .
        * io_uring: ensure symmetry in handling iter types in loop_rw_iter()
          (CVE-2021-41073)
      .
      linux (5.14.6-1) unstable; urgency=medium
      .
        * New upstream stable update:
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.4
          - locking/mutex: Fix HANDOFF condition
          - regmap: fix the offset of register error log
          - sched/deadline: Fix reset_on_fork reporting of DL tasks
          - power: supply: axp288_fuel_gauge: Report register-address on readb /
            writeb errors
          - sched/deadline: Fix missing clock update in migrate_task_rq_dl()
          - rcu/tree: Handle VM stoppage in stall detection
          - [x86] EDAC/mce_amd: Do not load edac_mce_amd module on guests
          - posix-cpu-timers: Force next expiration recalc after itimer reset
          - hrtimer: Avoid double reprogramming in __hrtimer_start_range_ns()
          - hrtimer: Ensure timerfd notification for HIGHRES=n
          - udf: Check LVID earlier
          - udf: Fix iocharset=utf8 mount option
          - isofs: joliet: Fix iocharset=utf8 mount option
          - bcache: add proper error unwinding in bcache_device_init
          - nbd: add the check to prevent overflow in __nbd_ioctl()
          - blk-throtl: optimize IOPS throttle for large IO scenarios
          - nvme-tcp: don't update queue count when failing to set io queues
          - nvme-rdma: don't update queue count when failing to set io queues
          - nvmet: pass back cntlid on successful completion
          - [s390x] cio: add dev_busid sysfs entry for each subchannel
          - [s390x] zcrypt: fix wrong offset index for APKA master key valid state
          - libata: fix ata_host_start()
          - sched/topology: Skip updating masks for non-online nodes
          - [x86] crypto: qat - do not ignore errors from enable_vf2pf_comms()
          - [x86] crypto: qat - handle both source of interrupt in VF ISR
          - [x86] crypto: qat - fix reuse of completion variable
          - [x86] crypto: qat - fix naming for init/shutdown VF to PF notifications
          - [x86] crypto: qat - do not export adf_iov_putmsg()
          - crypto: tcrypt - Fix missing return value check
          - fcntl: fix potential deadlocks for &fown_struct.lock
          - fcntl: fix potential deadlock for &fasync_struct.fa_lock
          - udf_get_extendedattr() had no boundary checks.
          - io-wq: remove GFP_ATOMIC allocation off schedule out path
          - [s390x] pci: fix misleading rc in clp_set_pci_fn()
          - [s390x] debug: keep debug data on resize
          - [s390x] debug: fix debug area life cycle
          - [s390x] ap: fix state machine hang after failure to enable irq
          - [s390x] smp: enable DAT before CPU restart callback is called
          - sched/debug: Don't update sched_domain debug directories before
            sched_debug_init()
          - [arm64] power: supply: cw2015: use dev_err_probe to allow deferred probe
          - [x86] crypto: x86/aes-ni - add missing error checks in XTS code
          - sched/numa: Fix is_core_idle()
          - sched: Fix UCLAMP_FLAG_IDLE setting
          - rcu: Fix to include first blocked task in stall warning
          - rcu: Fix stall-warning deadlock due to non-release of rcu_node ->lock
          - block: return ELEVATOR_DISCARD_MERGE if possible
          - [arm64] spi: spi-fsl-dspi: Fix issue with uninitialized dma_slave_config
          - [mips64el,mipsel] irqchip/loongson-pch-pic: Improve edge triggered
            interrupt support
          - lib/mpi: use kcalloc in mpi_resize
          - nbd: do del_gendisk() asynchronously for NBD_DESTROY_ON_DISCONNECT
          - block: nbd: add sanity check for first_minor
          - [arm64,armhf] irqchip/gic-v3: Fix priority comparison when non-secure
            priorities are used
          - [x86] crypto: qat - use proper type for vf_mask
          - [powerpc*] tpm: ibmvtpm: Avoid error message when process gets signal
            while waiting
          - [x86] mce: Defer processing of early errors
          - blk-crypto: fix check for too-large dun_bytes
          - [arm64] regulator: vctrl: Use locked regulator_get_voltage in probe path
          - [arm64] regulator: vctrl: Avoid lockdep warning in enable/disable ops
          - [arm64,armhf] drm/panfrost: Fix missing clk_disable_unprepare() on error
            in panfrost_clk_init()
          - [x86] drm/gma500: Fix end of loop tests for list_for_each_entry
          - drm/of: free the right object
          - bpf: Fix a typo of reuseport map in bpf.h.
          - bpf: Fix potential memleak and UAF in the verifier.
          - drm/of: free the iterator object on failure
          - [amd64,arm64] gve: fix the wrong AdminQ buffer overflow check
          - [armhf] dts: everest: Add phase corrections for eMMC
          - i40e: improve locking of mac_filter_hash
          - gfs2: Fix memory leak of object lsi on error return path
          - firmware: fix theoretical UAF race with firmware cache and resume
          - driver core: Fix error return code in really_probe()
          - media: dvb-usb: fix uninit-value in dvb_usb_adapter_dvb_init
          - media: dvb-usb: fix uninit-value in vp702x_read_mac_addr
          - media: dvb-usb: Fix error handling in dvb_usb_i2c_init
          - net: usb: asix: ax88772: add missing stop
          - media: go7007: fix memory leak in go7007_usb_probe
          - media: go7007: remove redundant initialization
          - [armhf] media: coda: fix frame_mem_ctrl for YUV420 and YVU420 formats
          - Bluetooth: sco: prevent information leak in sco_conn_defer_accept()
          - Bluetooth: btusb: Fix a unspported condition to set available debug
            features
          - [x86] drm/amdgpu/acp: Make PM domain really work
          - tcp: seq_file: Avoid skipping sk during tcp_seek_last_pos
          - [armhf] dts: meson8b: odroidc1: Fix the pwm regulator supply properties
          - [armhf] dts: meson8b: mxq: Fix the pwm regulator supply properties
          - [armhf] dts: meson8b: ec100: Fix the pwm regulator supply properties
          - net/mlx5e: Prohibit inner indir TIRs in IPoIB
          - net/mlx5e: Block LRO if firmware asks for tunneled LRO
          - cgroup/cpuset: Fix a partition bug with hotplug
          - net: cipso: fix warnings in netlbl_cipsov4_add_std
          - Bluetooth: mgmt: Fix wrong opcode in the response for add_adv cmd
          - drm/amd/pm: Fix a bug in semaphore double-lock
          - net/mlx5: Fix missing return value in
            mlx5_devlink_eswitch_inline_mode_set()
          - leds: lt3593: Put fwnode in any case during ->probe()
          - leds: trigger: audio: Add an activate callback to ensure the initial
            brightness is set
          - media: em28xx-input: fix refcount bug in em28xx_usb_disconnect
          - [armhf] media: omap3isp: Fix missing unlock in
            isp_subdev_notifier_complete()
          - PCI: PM: Avoid forcing PCI_D0 for wakeup reasons inconsistently
          - PCI: PM: Enable PME if it can be signaled from D3cold
          - [arm64] net: dsa: build tag_8021q.c as part of DSA core
          - debugfs: Return error during {full/open}_proxy_open() on rmmod
          - Bluetooth: increase BTNAMSIZ to 21 chars to fix potential buffer overflow
          - [arm64,armhf] net: dsa: stop syncing the bridge mcast_router attribute at
            join time
          - [arm64,armhf] net: dsa: don't disable multicast flooding to the CPU even
            without an IGMP querier
          - PM: EM: Increase energy calculation precision
          - [arm64] drm/msm: Fix error return code in msm_drm_init()
          - [arm64] drm/msm/mdp4: refactor HW revision detection into
            read_mdp_hw_revision
          - [arm64] drm/msm/mdp4: move HW revision detection to earlier phase
          - [arm64] drm/msm/dp: update is_connected status base on sink count at
            dp_pm_resume()
          - [arm64] drm/msm/dpu: make dpu_hw_ctl_clear_all_blendstages clear necessary
            LMs
          - cgroup/cpuset: Miscellaneous code cleanup
          - cgroup/cpuset: Fix violation of cpuset locking rule
          - [x86] ASoC: Intel: Fix platform ID matching
          - Bluetooth: fix repeated calls to sco_sock_kill
          - [arm64] drm/msm/dsi: Fix some reference counted resource leaks
          - [arm64] drm/msm/dp: replug event is converted into an unplug followed by
            an plug events
          - net/mlx5: Fix unpublish devlink parameters
          - [x86] ASoC: rt5682: Properly turn off regulators if wrong device ID
          - [arm64,armhf] usb: dwc3: meson-g12a: add IRQ check
          - [arm64,armhf] usb: dwc3: qcom: add IRQ check
          - mac80211: remove unnecessary NULL check in ieee80211_register_hw()
          - [armhf] usb: phy: twl6030: add IRQ checks
          - devlink: Clear whole devlink_flash_notify struct
          - net: stmmac: fix INTR TBU status affecting irq count statistic
          - Bluetooth: Move shutdown callback before flushing tx and rx queue
          - PM: cpu: Make notifier chain use a raw_spinlock_t
          - mac80211: Fix insufficient headroom issue for AMSDU
          - locking/local_lock: Add missing owner initialization
          - lockd: Fix invalid lockowner cast after vfs_test_lock
          - SUNRPC: Fix a NULL pointer deref in trace_svc_stats_latency()
          - nfsd4: Fix forced-expiry locking
          - [arm64] dts: marvell: armada-37xx: Extend PCIe MEM space
          - [arm*] firmware: raspberrypi: Fix a leak in 'rpi_firmware_get()'
          - mm/swap: consider max pages in iomap_swapfile_add_extent
          - Bluetooth: add timeout sanity check to hci_inquiry
          - [armhf] i2c: s3c2410: fix IRQ check
          - gfs2: init system threads before freeze lock
          - rsi: fix error code in rsi_load_9116_firmware()
          - rsi: fix an error code in rsi_probe()
          - [x86] ASoC: Intel: Skylake: Leave data as is when invoking TLV IPCs
          - [x86] ASoC: Intel: Skylake: Fix module resource and format selection
          - mmc: sdhci: Fix issue with uninitialized dma_slave_config
          - [arm64,armhf] mmc: dw_mmc: Fix issue with uninitialized dma_slave_config
          - bpf: Fix possible out of bound write in narrow load handling
          - [x86] hv_utils: Set the maximum packet size for VSS driver to the length
            of the receive buffer
          - CIFS: Fix a potencially linear read overflow
          - [arm64] i2c: xlp9xx: fix main IRQ check
          - [arm*] usb: ehci-orion: Handle errors of clk_prepare_enable() in probe
          - [arm64] tty: serial: fsl_lpuart: fix the wrong mapbase value
          - iwlwifi: skip first element in the WTAS ACPI table
          - net/mlx5: Lag, fix multipath lag activation
          - net/mlx5: Remove all auxiliary devices at the unregister event
          - net/mlx5e: Fix possible use-after-free deleting fdb rule
          - net/mlx5: E-Switch, Set vhca id valid flag when creating indir fwd group
          - net/mlx5e: Use correct eswitch for stack devices with lag
          - [x86] misc/pvpanic: fix set driver data
          - ice: fix Tx queue iteration for Tx timestamp enablement
          - ice: add lock around Tx timestamp tracker flush
          - ice: restart periodic outputs around time changes
          - ice: Only lock to update netdev dev_addr
          - net: phy: marvell10g: fix broken PHY interrupts for anyone after us in the
            driver probe list
          - ath6kl: wmi: fix an error code in ath6kl_wmi_sync_point()
          - ALSA: usb-audio: Add lowlatency module option
          - atlantic: Fix driver resume flow.
          - bcma: Fix memory leak for internally-handled cores
          - brcmfmac: pcie: fix oops on failure to resume and reprobe
          - ipv6: make exception cache less predictible
          - ipv4: make exception cache less predictible
          - net: qrtr: make checks in qrtr_endpoint_post() stricter
          - sch_htb: Fix inconsistency when leaf qdisc creation fails
          - net: sched: Fix qdisc_rate_table refcount leak when get tcf_block failed
          - ipv4: fix endianness issue in inet_rtm_getroute_build_skb()
          - [x86] ASoC: rt5682: Remove unused variable in rt5682_i2c_remove()
          - iwlwifi Add support for ax201 in Samsung Galaxy Book Flex2 Alpha
          - f2fs: guarantee to write dirty data when enabling checkpoint back
          - time: Handle negative seconds correctly in timespec64_to_ns()
          - io_uring: limit fixed table size by RLIMIT_NOFILE
          - io_uring: IORING_OP_WRITE needs hash_reg_file set
          - io_uring: io_uring_complete() trace should take an integer
          - io_uring: fail links of cancelled timeouts
          - bio: fix page leak bio_add_hw_page failure
          - raid1: ensure write behind bio has less than BIO_MAX_VECS sectors
          - cifs: Do not leak EDEADLK to dgetents64 for STATUS_USER_SESSION_DELETED
          - smb3: fix posix extensions mount option
          - tty: Fix data race between tiocsti() and flush_to_ldisc()
          - [x86] perf/x86/intel/uncore: Fix IIO cleanup mapping procedure for SNR/ICX
          - [x86] Revert "KVM: x86: mmu: Add guest physical address check in
            translate_gpa()"
          - [s390x] KVM: index kvm->arch.idle_mask by vcpu_idx
          - [x86] KVM: x86: Update vCPU's hv_clock before back to guest when
            tsc_offset is adjusted
          - [x86] KVM: x86: clamp host mapping level to max_level in
            kvm_mmu_max_mapping_level
          - [x86] KVM: x86/mmu: Avoid collision with !PRESENT SPTEs in TDP MMU lpage
            stats
          - [x86] KVM: VMX: avoid running vmx_handle_exit_irqoff in case of emulation
          - [x86] KVM: nVMX: Unconditionally clear nested.pi_pending on nested
            VM-Enter
          - [arm64] KVM: arm64: Unregister HYP sections from kmemleak in protected
            mode
          - [arm64] KVM: arm64: vgic: Resample HW pending state on deactivation
          - io-wq: check max_worker limits if a worker transitions bound state
          - md/raid10: Remove unnecessary rcu_dereference in raid10_handle_discard
          - fuse: truncate pagecache on atomic_o_trunc
          - fuse: flush extending writes
          - fuse: wait for writepages in syncfs
          - fbmem: don't allow too huge resolutions
          - [amd64] ACPI: PRM: Find PRMT table before parsing it
          - RDMA/mlx5: Fix number of allocated XLT entries
          - backlight: pwm_bl: Improve bootloader/kernel device handover
          - [armel] clk: kirkwood: Fix a clocking boot regression
          - devlink: Break parameter notification sequence to be before/after
            unload/load driver
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.5
          - Revert "posix-cpu-timers: Force next expiration recalc after itimer reset"
          - Revert "time: Handle negative seconds correctly in timespec64_to_ns()"
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.6
          - io_uring: place fixed tables under memcg limits
          - io_uring: add ->splice_fd_in checks
          - io_uring: fix io_try_cancel_userdata race for iowq
          - io-wq: fix wakeup race when adding new work
          - io-wq: fix race between adding work and activating a free worker
          - btrfs: use delalloc_bytes to determine flush amount for shrink_delalloc
          - btrfs: wake up async_delalloc_pages waiters after submit
          - btrfs: wait on async extents when flushing delalloc
          - btrfs: reduce the preemptive flushing threshold to 90%
          - btrfs: do not do preemptive flushing if the majority is global rsv
          - btrfs: zoned: fix block group alloc_offset calculation
          - btrfs: zoned: suppress reclaim error message on EAGAIN
          - btrfs: fix upper limit for max_inline for page size 64K
          - btrfs: reset replace target device to allocation state on close
          - btrfs: zoned: fix double counting of split ordered extent
          - blk-zoned: allow zone management send operations without CAP_SYS_ADMIN
          - blk-zoned: allow BLKREPORTZONE without CAP_SYS_ADMIN
          - [powerpc*] perf/hv-gpci: Fix counter value parsing
          - xen: fix setting of max_pfn in shared_info
          - 9p/xen: Fix end of loop tests for list_for_each_entry
          - ceph: fix dereference of null pointer cf
          - Input: elan_i2c - reduce the resume time for controller in Whitebox
          - [armhf] soc: aspeed: lpc-ctrl: Fix boundary check for mmap
          - [armhf] soc: aspeed: p2a-ctrl: Fix boundary check for mmap
          - [arm64] Move .hyp.rodata outside of the _sdata.._edata range
          - [arm64] mm: Fix TLBI vs ASID rollover
          - [arm64] head: avoid over-mapping in map_memory
          - [arm64] Do not trap PMSNEVFR_EL1
          - iio: ltc2983: fix device probe
          - [arm64] wcn36xx: Ensure finish scan is not requested before start scan
          - block: bfq: fix bfq_set_next_ioprio_data()
          - [x86] power: supply: max17042: handle fails of reading status register
          - dm crypt: Avoid percpu_counter spinlock contention in crypt_page_alloc()
          - [x86] crypto: ccp - shutdown SEV firmware on kexec
          - [x86] VMCI: fix NULL pointer dereference when unmapping queue pair
          - media: uvc: don't do DMA on stack
          - media: rc-loopback: return number of emitters rather than error
          - nvmem: core: fix error handling while validating keepout regions
          - [s390x] qdio: fix roll-back after timeout on ESTABLISH ccw
          - [s390x] qdio: cancel the ESTABLISH ccw after timeout
          - [armhf] Revert "dmaengine: imx-sdma: refine to load context only once"
          - [armhf] dmaengine: imx-sdma: remove duplicated sdma_load_context
          - [x86] watchdog: iTCO_wdt: Fix detection of SMI-off case
          - libata: add ATA_HORKAGE_NO_NCQ_TRIM for Samsung 860 and 870 SSDs
          - sched: Prevent balance_push() on remote runqueues
          - f2fs: let's keep writing IOs on SBI_NEED_FSCK
          - f2fs: fix to do sanity check for sb/cp fields correctly
          - PCI/portdrv: Enable Bandwidth Notification only if port supports it
          - PCI: Restrict ASMedia ASM1062 SATA Max Payload Size Supported
          - PCI: Return ~0 data on pciconfig_read() CAP_SYS_ADMIN failure
          - [arm64] PCI: xilinx-nwl: Enable the clock through CCF
          - [arm64] PCI: aardvark: Configure PCIe resources from 'ranges' DT property
          - [arm64] PCI: aardvark: Fix checking for PIO status
          - [arm64] PCI: aardvark: Increase polling delay to 1.5s while waiting for
            PIO response
          - [arm64] PCI: aardvark: Fix masking and unmasking legacy INTx interrupts
          - HID: input: do not report stylus battery state as "full"
          - f2fs: quota: fix potential deadlock
          - [arm64] pinctrl: armada-37xx: Correct PWM pins definitions
          - scsi: bsg: Remove support for SCSI_IOCTL_SEND_COMMAND
          - [arm64,armhf] clk: rockchip: drop GRF dependency for rk3328/rk3036 pll
            types
          - [amd64] IB/hfi1: Adjust pkey entry in index 0
          - RDMA/iwcm: Release resources if iw_cm module initialization fails
          - docs: Fix infiniband uverbs minor number
          - scsi: BusLogic: Use %X for u32 sized integer rather than %lX
          - [armhf] pinctrl: samsung: Fix pinctrl bank pin count
          - f2fs: do not submit NEW_ADDR to read node block
          - f2fs: turn back remapped address in compressed page endio
          - f2fs: fix wrong checkpoint_changed value in f2fs_remount()
          - scsi: ufs: Fix memory corruption by ufshcd_read_desc_param()
          - scsi: ufs: Use DECLARE_COMPLETION_ONSTACK() where appropriate
          - scsi: ufs: Fix the SCSI abort handler
          - [powerpc*] cpuidle: pseries: Fixup CEDE0 latency only for POWER10 onwards
          - [powerpc*] stacktrace: Include linux/delay.h
          - [arm64] RDMA/hns: Don't overwrite supplied QP attributes
          - RDMA/mlx5: Delete not-available udata check
          - [powerpc*] cpuidle: pseries: Mark pseries_idle_proble() as __init
          - f2fs: reduce the scope of setting fsck tag when de->name_len is zero
          - xprtrdma: Put rpcrdma_reps before waking the tear-down completion
          - NFSv4/pNFS: Fix a layoutget livelock loop
          - NFSv4/pNFS: Always allow update of a zero valued layout barrier
          - NFSv4/pnfs: The layout barrier indicate a minimal value for the seqid
          - SUNRPC: Fix potential memory corruption
          - SUNRPC/xprtrdma: Fix reconnection locking
          - sunrpc: Fix return value of get_srcport()
          - scsi: ufs: Fix unsigned int compared with less than zero
          - scsi: ufshcd: Fix device links when BOOT WLUN fails to probe
          - [arm64,armhf] pinctrl: single: Fix error return code in
            pcs_parse_bits_in_pinctrl_entry()
          - [powerpc*] numa: Consider the max NUMA node for migratable LPAR
          - scsi: smartpqi: Fix an error code in pqi_get_raid_map()
          - scsi: qedi: Fix error codes in qedi_alloc_global_queues()
          - scsi: qedf: Fix error codes in qedf_alloc_global_queues()
          - f2fs: fix to keep compatibility of fault injection interface
          - iommu/vt-d: Update the virtual command related registers
          - [arm64] RDMA/hns: Fix return in hns_roce_rereg_user_mr()
          - [amd64] HID: amd_sfh: Fix period data field to enable sensor
          - HID: i2c-hid: Fix Elan touchpad regression
          - HID: thrustmaster: clean up Makefile and adapt quirks
          - [arm64] RDMA/hns: Ownerbit mode add control field
          - [arm64] clk: imx8mm: use correct mux type for clkout path
          - [arm64,armhf] clk: imx8m: fix clock tree update of TF-A managed clocks
          - [powerpc*] KVM: PPC: Book3S HV: Fix copy_tofrom_guest routines
          - [powerpc*] KVM: PPC: Book3S HV Nested: Reflect guest PMU in-use to L0 when
            guest SPRs are live
          - [powerpc*] powerpc/perf: Fix the check for SIAR value
          - [arm64] RDMA/hns: Fix incorrect lsn field
          - [arm64] RDMA/hns: Bugfix for data type of dip_idx
          - [arm64] RDMA/hns: Bugfix for the missing assignment for dip_idx
          - [arm64] RDMA/hns: Bugfix for incorrect association between dip_idx and
            dgid
          - [x86] platform/x86: dell-smbios-wmi: Add missing kfree in error-exit from
            run_smbios_call
          - [powerpc*] smp: Fix a crash while booting kvm guest with nr_cpus=2
          - [powerpc*] smp: Update cpu_core_map on all PowerPc systems
          - [arm64] RDMA/hns: Fix query destination qpn
          - [arm64] RDMA/hns: Fix QP's resp incomplete assignment
          - fscache: Fix cookie key hashing
          - [powerpc*] KVM: PPC: Fix clearing never mapped TCEs in realmode
          - f2fs: fix to account missing .skipped_gc_rwsem
          - f2fs: fix unexpected ENOENT comes from f2fs_map_blocks()
          - f2fs: fix to unmap pages from userspace process in punch_hole()
          - f2fs: deallocate compressed pages when error happens
          - f2fs: should put a page beyond EOF when preparing a write
          - [mips64el,mipsel] Malta: fix alignment of the devicetree buffer
          - userfaultfd: prevent concurrent API initialization
          - [x86] drm/vmwgfx: Fix subresource updates with new contexts
          - [x86] drm/vmwgfx: Fix some static checker warnings
          - [arm*] drm/vc4: hdmi: Set HD_CTL_WHOLSMP and HD_CTL_CHALIGN_SET
          - drm/ttm: Fix multihop assert on eviction.
          - [armhf] drm/omap: Follow implicit fencing in prepare_fb
          - drm/amdgpu: Fix amdgpu_ras_eeprom_init()
          - drm/amdgpu: Fix koops when accessing RAS EEPROM
          - [arm*] drm: vc4: Fix pixel-wrap issue with DVP teardown
          - dma-buf: fix dma_resv_test_signaled test_all handling v2
          - drm/panel: Fix up DT bindings for Samsung lms397kf04
          - [armhf] ASoC: ti: davinci-mcasp: Fix DIT mode support
          - media: dib8000: rewrite the init prbs logic
          - [x86] hyperv: fix for unwanted manipulation of sched_clock when TSC marked
            unstable
          - PCI: Use pci_update_current_state() in pci_enable_device_flags()
          - tipc: keep the skb in rcv queue until the whole data is read
          - net: phy: Fix data type in DP83822 dp8382x_disable_wol()
          - iio: dac: ad5624r: Fix incorrect handling of an optional regulator.
          - iavf: do not override the adapter state in the watchdog task
          - iavf: fix locking of critical sections
          - video: fbdev: kyro: fix a DoS bug by restricting user input
          - drm/ast: Disable fast reset after DRAM initial
          - netlink: Deal with ESRCH error in nlmsg_notify()
          - [arm64] dts: qcom: Fix usb entries for SA8155p adp board
          - drm: avoid blocking in drm_clients_info's rcu section
          - drm: serialize drm_file.master with a new spinlock
          - drm: protect drm_master pointers in drm_lease.c
          - rcu: Fix macro name CONFIG_TASKS_RCU_TRACE
          - igc: Check if num of q_vectors is smaller than max before array access
          - usb: gadget: u_ether: fix a potential null pointer dereference
          - [armhf] USB: EHCI: ehci-mv: improve error handling in mv_ehci_enable()
          - usb: gadget: composite: Allow bMaxPower=0 if self-powered
          - tty: serial: jsm: hold port lock when reporting modem line changes
          - [arm64] bus: fsl-mc: fix arg in call to dprc_scan_objects()
          - [arm64] bus: fsl-mc: fix mmio base address for child DPRCs
          - [x86] misc/pvpanic-pci: Allow automatic loading
          - nfp: fix return statement in nfp_net_parse_meta()
          - ethtool: improve compat ioctl handling
          - drm/amdgpu: Fix a printing message
          - [arm64] dts: allwinner: h6: tanix-tx6: Fix regulator node names
          - video: fbdev: kyro: Error out if 'pixclock' equals zero
          - ipv4: ip_output.c: Fix out-of-bounds warning in ip_copy_addrs()
          - flow_dissector: Fix out-of-bounds warnings
          - [s390x] jump_label: print real address in a case of a jump label bug
          - [s390x] make PCI mio support a machine flag
          - serial: 8250: Define RX trigger levels for OxSemi 950 devices
          - serial: 8250_pci: make setup_port() parameters explicitly unsigned
          - vt: keyboard.c: make console an unsigned int
          - Bluetooth: skip invalid hci_sync_conn_complete_evt
          - workqueue: Fix possible memory leaks in wq_numa_init()
          - [arm64] drm/msm/a6xx: Fix llcc configuration for a660 gpu
          - netfilter: nft_compat: use nfnetlink_unicast()
          - bonding: 3ad: fix the concurrency between __bond_release_one() and
            bond_3ad_state_machine_handler()
          - [x86] ASoC: Intel: bytcr_rt5640: Move "Platform Clock" routes to the maps
            for the matching in-/output
          - Bluetooth: Fix not generating RPA when required
          - [armhf] media: imx: imx7-media-csi: Fix buffer return upon stream start
            failure
          - media: v4l2-dv-timings.c: fix wrong condition in two for-loops
          - gfs2: Fix glock recursion in freeze_go_xmote_bh
          - [arm*] misc: sram: Only map reserved areas in Tegra SYSRAM
          - [armhf] dts: imx53-ppd: Fix ACHC entry
          - [arm64] dts: qcom: sdm660: use reg value for memory node
          - [arm64] nvmem: qfprom: Fix up qfprom_disable_fuse_blowing() ordering
          - [arm64] net: ethernet: stmmac: Do not use unreachable() in
            ipq806x_gmac_probe()
          - [arm64] drm/msm: mdp4: drop vblank get/put from prepare/complete_commit
          - [arm64] drm/msm/dsi: Fix DSI and DSI PHY regulator config from SDM660
          - [x86] thunderbolt: Fix port linking by checking all adapters
          - [x86] drm/vmwgfx: fix potential UAF in vmwgfx_surface.c
          - staging: rtl8723bs: fix right side of condition
          - Bluetooth: schedule SCO timeouts with delayed_work
          - Bluetooth: avoid circular locks in sco_sock_connect
          - [arm64] drm/msm/dp: reduce link rate if failed at link training 1
          - [arm64] drm/msm/dp: reset aux controller after dp_aux_cmd_fifo_tx()
            failed.
          - [arm64] drm/msm/dp: return correct edid checksum after corrupted edid
            checksum read
          - [arm64] drm/msm/dp: do not end dp link training until video is ready
          - net/mlx5: Fix variable type to match 64bit
          - gpu: drm: amd: amdgpu: amdgpu_i2c: fix possible uninitialized-variable
            access in amdgpu_i2c_router_select_ddc_port()
          - mac80211: Fix monitor MTU limit so that A-MSDUs get through
          - nvme-tcp: don't check blk_mq_tag_to_rq when receiving pdu data
          - nvme: code command_id with a genctr for use-after-free validation
          - Bluetooth: Fix handling of LE Enhanced Connection Complete
          - Bluetooth: Fix race condition in handling NOP command
          - opp: Don't print an error if required-opps is missing
          - [sh4] serial: sh-sci: fix break handling for sysrq
          - iomap: pass writeback errors to the mapping
          - tcp: enable data-less, empty-cookie SYN with TFO_SERVER_COOKIE_NOT_REQD
          - locking/rtmutex: Set proper wait context for lockdep
          - rpc: fix gss_svc_init cleanup on failure
          - iavf: use mutexes for locking of critical sections
          - [armhf] hwmon: (pmbus/ibm-cffps) Fix write bits for LED control
          - [x86] staging: rts5208: Fix get_ms_information() heap buffer size
          - net: Fix offloading indirect devices dependency on qdisc order creation
          - gfs2: Don't call dlm after protocol is unmounted
          - [arm64,armhf] usb: chipidea: host: fix port index underflow and UBSAN
            complains
          - lockd: lockd server-side shouldn't set fl_ops
          - [armhf] drm/exynos: Always initialize mapping in exynos_drm_register_dma()
          - rtl8xxxu: Fix the handling of TX A-MPDU aggregation
          - rtw88: use read_poll_timeout instead of fixed sleep
          - rtw88: wow: build wow function only if CONFIG_PM is on
          - rtw88: wow: fix size access error of probe request
          - btrfs: remove racy and unnecessary inode transaction update when using
            no-holes
          - btrfs: tree-log: check btrfs_lookup_data_extent return value
          - soundwire: intel: fix potential race condition during power down
          - [x86] ASoC: Intel: Skylake: Fix module configuration for KPB and MIXER
          - [x86] ASoC: Intel: Skylake: Fix passing loadable flag for module
          - of: Don't allow __of_attached_node_sysfs() without CONFIG_SYSFS
          - [arm64] mmc: sdhci-of-arasan: Modified SD default speed to 19MHz for
            ZynqMP
          - [arm64] mmc: sdhci-of-arasan: Check return value of non-void funtions
          - mmc: core: Avoid hogging the CPU while polling for busy in the I/O err
            path
          - mmc: core: Avoid hogging the CPU while polling for busy for mmc ioctls
          - mmc: core: Avoid hogging the CPU while polling for busy after I/O writes
          - mmc: rtsx_pci: Fix long reads when clock is prescaled
          - mmc: core: Return correct emmc response in case of ioctl error
          - cifs: fix wrong release in sess_alloc_buffer() failed path
          - Revert "USB: xhci: fix U1/U2 handling for hardware with XHCI_INTEL_HOST
            quirk set"
          - [arm64] usb: dwc3: imx8mp: request irq after initializing dwc3
          - [armhf] usb: musb: musb_dsps: request_irq() after initializing musb
          - usbip: give back URBs for unsent unlink requests during cleanup
          - usbip:vhci_hcd USB port can get stuck in the disabled state
          - [arm64,armhf] ASoC: rockchip: i2s: Fix regmap_ops hang
          - [arm64,armhf] ASoC: rockchip: i2s: Fixup config for DAIFMT_DSP_A/B
          - ASoC: soc-pcm: protect BE dailink state changes in trigger
          - nfs: don't atempt blocking locks on nfs reexports
          - nfsd: fix crash on LOCKT on reexported NFSv3
          - iwlwifi: pcie: free RBs during configure
          - iwlwifi: mvm: Do not use full SSIDs in 6GHz scan
          - iwlwifi: mvm: fix a memory leak in iwl_mvm_mac_ctxt_beacon_changed
          - iwlwifi: mvm: avoid static queue number aliasing
          - iwlwifi: mvm: Fix umac scan request probe parameters
          - iwlwifi: mvm: fix access to BSS elements
          - iwlwifi: fw: correctly limit to monitor dump
          - iwlwifi: mvm: don't schedule the roc_done_wk if it is already running
          - iwlwifi: mvm: Fix scan channel flags settings
          - net/mlx5: DR, fix a potential use-after-free bug
          - net/mlx5: DR, Enable QP retransmission
          - [arm64] usb: isp1760: fix memory pool initialization
          - [arm64] usb: isp1760: fix qtd fill length
          - [arm64] usb: isp1760: write to status and address register
          - [arm64] usb: isp1760: use the right irq status bit
          - [arm64] usb: isp1760: otg control register access
          - parport: remove non-zero check on count
          - [arm64] wcn36xx: Fix missing frame timestamp for beacon/probe-resp
          - ath9k: fix OOB read ar9300_eeprom_restore_internal
          - ath9k: fix sleeping in atomic context
          - net: fix NULL pointer reference in cipso_v4_doi_free
          - fix array-index-out-of-bounds in taprio_change
          - [arm64] net: hns3: clean up a type mismatch warning
          - printk/console: Check consistent sequence number when handling race in
            console_unlock()
          - ovl: fix BUG_ON() in may_delete() when called from ovl_cleanup()
          - scsi: BusLogic: Fix missing pr_cont() use
          - scsi: qla2xxx: Changes to support kdump kernel
          - scsi: qla2xxx: Sync queue idx with queue_pair_map idx
          - [powerpc*] cpufreq: powernv: Fix init_chip_info initialization in numa=off
          - [s390x] pv: fix the forcing of the swiotlb
          - [s390x] topology: fix topology information when calling cpu hotplug
            notifiers
          - mm: fix panic caused by __page_handle_poison()
          - hugetlb: fix hugetlb cgroup refcounting during vma split
          - mm/memory_hotplug: use "unsigned long" for PFN in zone_for_pfn_range()
          - mm/hmm: bypass devmap pte when all pfn requested flags are fulfilled
          - mm/hugetlb: initialize hugetlb_usage in mm_init
          - mm,vmscan: fix divide by zero in get_scan_count
          - mm/page_alloc.c: avoid accessing uninitialized pcp page migratetype
          - mm/mempolicy: fix a race between offset_il_node and mpol_rebind_task
          - memcg: enable accounting for pids in nested pid namespaces
          - libnvdimm/pmem: Fix crash triggered when I/O in-flight during unbind
          - platform/chrome: cros_ec_proto: Send command again when timeout occurs
          - net: stmmac: Fix overall budget calculation for rxtx_napi
          - [x86] drm/mgag200: Select clock in PLL update functions
          - [arm64] drm/msi/mdp4: populate priv->kms in mdp4_kms_init
          - drm/dp_mst: Fix return code on sideband message failure
          - [arm64,armhf] drm/panfrost: Make sure MMU context lifetime is not bound to
            panfrost_priv
          - drm/amdgpu: Fix BUG_ON assert
          - drm/amdgpu: Enable S/G for Yellow Carp
          - drm/amdgpu: Fix a deadlock if previous GEM object allocation fails
          - [arm64] drm/msm/disp/dpu1: add safe lut config in dpu driver
          - drm/ttm: Fix ttm_bo_move_memcpy() for subclassed struct ttm_resource
          - [arm64,armhf] drm/panfrost: Simplify lock_region calculation
          - [arm64,armhf] drm/panfrost: Use u64 for size in lock_region
          - [arm64,armhf] drm/panfrost: Clamp lock region to Bifrost minimum
      .
        [ Vincent Blut ]
        * [arm64] drivers/bus/fsl-mc: Enable FSL_MC_UAPI_SUPPORT (Closes: #992988)
        * [arm64] drivers/vfio/fsl-mc: Enable VFIO_FSL_MC as module (Closes: #993000)
        * [arm64] drivers/firmware: Enable ARM_SCPI_PROTOCOL as module
          (Closes: #929528)
        * [arm64] drivers/hwmon: Enable SENSORS_ARM_SCPI as module
        * [arm64] drivers/mailbox: Enable ARM_MHU, PLATFORM_MHU as modules
        * [armhf] drivers/input/misc: Enable INPUT_TPS65218_PWRBUTTON as module
          (Closes: #944518)
      .
        [ Heiko Thiery ]
        * [arm64] drivers/regulator: Enable REGULATOR_PCA9450 as module
        * [arm64] drivers/regulator: Enable REGULATOR_PFUZE100 as module
        * [arm64] drivers/pci/controller: Enable PCI_IMX6
      .
        [ Salvatore Bonaccorso ]
        * dccp: don't duplicate ccid when cloning dccp sock (CVE-2020-16119)
        * bnx2x: Fix enabling network interfaces without VFs (Closes: #993948)
        * Refresh "kbuild: Make the toolchain variables easily overwritable"
        * Drop "Partially revert "net: socket: implement 64-bit timestamps""
        * Set ABI to 1
        * [mipsel] bpf, mips: Validate conditional branch offsets (CVE-2021-38300)
      .
      linux (5.14.3-1~exp1) experimental; urgency=medium
      .
        * New upstream stable update:
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.3
          - firmware: dmi: Move product_sku info to the end of the modalias
          - igmp: Add ip_mc_list lock in ip_check_mc_rcu
          - Revert "r8169: avoid link-up interrupt issue on RTL8106e if user enables
            ASPM"
          - ALSA: usb-audio: Add registration quirk for JBL Quantum 800
          - Bluetooth: Add additional Bluetooth part for Realtek 8852AE
          - Bluetooth: btusb: Make the CSR clone chip force-suspend workaround more
            generic
          - xhci: fix even more unsafe memory usage in xhci tracing
          - xhci: fix unsafe memory usage in xhci tracing
          - xhci: Fix failure to give back some cached cancelled URBs.
          - [x86] reboot: Limit Dell Optiplex 990 quirk to early BIOS versions
          - PCI: Call Max Payload Size-related fixup quirks early
      .
      linux (5.14.2-1~exp1) experimental; urgency=medium
      .
        * New upstream stable update:
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.2
          - ext4: fix race writing to an inline_data file while its xattrs are
            changing
          - ext4: fix e2fsprogs checksum failure for mounted filesystem
          - USB: serial: pl2303: fix GL type detection
          - USB: serial: cp210x: fix control-characters error handling
          - USB: serial: cp210x: fix flow-control error handling
          - HID: usbhid: Fix flood of "control queue full" messages
          - HID: usbhid: Fix warning caused by 0-length input reports
          - ALSA: hda/realtek: Quirk for HP Spectre x360 14 amp setup
          - ALSA: usb-audio: Fix regression on Sony WALKMAN NW-A45 DAC
          - ALSA: hda/realtek: Workaround for conflicting SSID on ASUS ROG Strix G17
          - ALSA: pcm: fix divide error in snd_pcm_lib_ioctl
          - ALSA: usb-audio: Work around for XRUN with low latency playback
          - media: stkwebcam: fix memory leak in stk_camera_probe
      .
        [ Vincent Blut ]
        * drivers/media/cec: Enable MEDIA_CEC_RC (Closes: #872650)
        * drivers/hid: Enable various HID drivers as modules (Closes: #988277)
        * [x86] drivers/platform/chrome: Enable CROS_EC as module and set
          CROS_EC_PROTO explicitly
        * [arm64] sound/soc/generic: Enable SND_AUDIO_GRAPH_CARD as module
          (Closes: #987576)
        * drivers/net/wireless/mediatek/mt76/mt7915: Enable MT7915E as module
          (Closes: #993865)
        * drivers/net/wireless/mediatek/mt76/mt7921: Enable MT7921E as module
        * drivers/net/wireless/mediatek/mt76/mt7615: Enable MT7615E, MT7663U as
          modules
      .
        [ Salvatore Bonaccorso ]
        * HID: apple: Add missing scan code event for keys handled by hid-apple
          (Closes: #757356)
      .
      linux (5.14.1-1~exp1) experimental; urgency=medium
      .
        * New upstream stable update:
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.1
          - vt_kdsetmode: extend console locking (CVE-2021-3753)
          - Bluetooth: btusb: check conditions before enabling USB ALT 3 for WBS
          - btrfs: fix NULL pointer dereference when deleting device by invalid id
            (CVE-2021-3739)
          - Revert "floppy: reintroduce O_NDELAY fix"
          - fscrypt: add fscrypt_symlink_getattr() for computing st_size
          - ext4: report correct st_size for encrypted symlinks
          - f2fs: report correct st_size for encrypted symlinks
          - ubifs: report correct st_size for encrypted symlinks
          - net: don't unconditionally copy_from_user a struct ifreq for socket ioctls
          - audit: move put_tree() to avoid trim_trees refcount underflow and UAF
      .
      linux (5.14-1~exp2) experimental; urgency=medium
      .
        [ Bastian Blank ]
        * Fix perf build.
        * Enable EVM, ENCRYPTED_KEYS. (closes: #993535)
        * Enable IMA_SIG_TEMPLATE.
        * Enable AMD_SFH_HID, AMD_PMC. (closes: #992832)
        * Enable TMPFS_INODE64. (closes: #993641)
        * Move more into nic-shared-modules.
      .
        [ Diederik de Haas ]
        * [arm64] sound/soc/codecs: Enable SND_SOC_RK3328 as module
        * [arm64,armhf] drivers/input/misc: Enable INPUT_RK805_PWRKEY as module
        * [arm64,armhf] drivers/pinctrl: Enable PINCTRL_RK805 (Closes: #990536)
        * [arm64] drivers/mfd: Make MFD_RK808 builtin
      .
      linux (5.14-1~exp1) experimental; urgency=medium
      .
        * New upstream release: https://kernelnewbies.org/Linux_5.14
      .
        [ Aurelien Jarno ]
        * [riscv64] Enable KEXEC.
        * [riscv64] Add initial Microchip Polarfire support: enable
          SOC_MICROCHIP_POLARFIRE, MMC_SDHCI_PLTFM, MMC_SDHCI_CADENCE and
          PCIE_MICROCHIP_HOST.
        * [riscv64] Improve HiFive Unmatched support: enable PCIE_DW_PLAT_HOST and
          PCIE_FU740.
      .
        [ Vincent Blut ]
        * [armhf] drivers/leds: Enable LEDS_PCA963X as module (Closes: #908196)
      .
        [ Salvatore Bonaccorso ]
        * net/batman-adv: Enable BATMAN_ADV_BATMAN_V
      .
        [ Bastian Blank ]
        * [powerpc*] Disable support for debugging VDSO.
      .
      linux (5.13.12-1~exp1) experimental; urgency=medium
      .
        * New upstream stable update:
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.13.10
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.13.11
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.13.12
      .
        [ Salvatore Bonaccorso ]
        * net: Enable MPTCP (Closes: #987815)
      .
        [ Bastian Blank ]
        * [mips*] Increase RELOCATION_TABLE_SIZE to 0x1c0000.
        * Enable SECURITY_LANDLOCK, SECURITY_PATH.
        * Fix external modules build. (closes: #992219)
        * Force more compressions modules into main installer package.
          (closes: #992221)
        * Drop redundant patch for overlay in user namespace.
      .
        [ Uwe Kleine-König ]
        * [x86] Enable X86_PLATFORM_DRIVERS_DELL which is needed to keep some Dell
          specific drivers. (Closes: #992251)
      .
      linux (5.13.9-1~exp2) experimental; urgency=medium
      .
        * Fix linux-cpupower installation.
      .
      linux (5.13.9-1~exp1) experimental; urgency=medium
      .
        * New upstream release: https://kernelnewbies.org/Linux_5.11
        * New upstream release: https://kernelnewbies.org/Linux_5.12
        * New upstream release: https://kernelnewbies.org/Linux_5.13
      .
        [ Bastian Blank ]
        * Always build-depend on native libelf-dev.
        * Specify trusted certs file in package config.
        * Enable PROC_VMCORE.
        * Enable SECURITYFS.
        * Re-enable IMA. (closes: #972459)
        * [x86] Enable AMD_MEM_ENCRYPT. (closes: #983586, #989040)
        * Enable UNICODE. (closes: #985689)
        * Enable CGROUP_MISC.
        * [x86] Enable PINCTRL_ALDERLAKE, PINCTRL_ELKHARTLAKE, PINCTRL_EMMITSBURG,
          PINCTRL_JASPERLAKE, PINCTRL_LAKEFIELD.
        * [amd64] Enable MICROSOFT_MANA.
        * [arm64] Enable GVE. (closes: #991835)
      28411d67
    • Lorenzo "Palinuro" Faletra's avatar
      49e4b437
  12. 21 Jul, 2021 2 commits
    • Lorenzo "Palinuro" Faletra's avatar
      Import Debian changes 5.10.46-8parrot1 · 74f89201
      Lorenzo "Palinuro" Faletra authored
      linux (5.10.46-8parrot1) rolling; urgency=medium
      .
        * Import new Debian release.
      .
      linux (5.10.46-2) unstable; urgency=medium
      .
        * swiotlb: manipulate orig_addr when tlb_addr has offset (Closes: #989778)
        * KVM: do not allow mapping valid but non-reference-counted pages
          (CVE-2021-22543)
        * [x86] platform/x86: toshiba_haps: Fix missing newline in pr_debug call in
          toshiba_haps_notify (Closes: #799193)
        * seq_file: Disallow extremely large seq buffer allocations (CVE-2021-33909)
      .
      linux (5.10.46-1) unstable; urgency=medium
      .
        * New upstream stable update:
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.41
          - context_tracking: Move guest exit context tracking to separate helpers
          - context_tracking: Move guest exit vtime accounting to separate helpers
          - [x86] KVM: Defer vtime accounting 'til after IRQ handling
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.42
          - ALSA: hda/realtek: the bass speaker can't output sound on Yoga 9i
          - ALSA: hda/realtek: Headphone volume is controlled by Front mixer
          - ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation P340
          - ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8
          - ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP Zbook G8
          - ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP Zbook Fury 15
            G8
          - ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP Zbook Fury 17
            G8
          - ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
          - ALSA: usb-audio: scarlett2: Improve driver startup messages
          - cifs: set server->cipher_type to AES-128-CCM for SMB3.0
          - NFSv4: Fix a NULL pointer dereference in pnfs_mark_matching_lsegs_return()
          - iommu/vt-d: Fix sysfs leak in alloc_iommu()
          - proc: Check /proc/$pid/attr/ writes against file opener
          - net: hso: fix control-request directions
          - net/sched: fq_pie: re-factor fix for fq_pie endless loop
          - net/sched: fq_pie: fix OOB access in the traffic path
          - netfilter: nft_set_pipapo_avx2: Add irq_fpu_usable() check, fallback to
            non-AVX2 version
          - mac80211: assure all fragments are encrypted (CVE-2020-26147)
          - mac80211: prevent mixed key and fragment cache attacks (CVE-2020-24586,
            CVE-2020-24587)
          - mac80211: properly handle A-MSDUs that start with an RFC 1042 header
          - cfg80211: mitigate A-MSDU aggregation attacks (CVE-2020-24588)
          - mac80211: drop A-MSDUs on old ciphers (CVE-2020-24588)
          - mac80211: add fragment cache to sta_info
          - mac80211: check defrag PN against current frame
          - mac80211: prevent attacks on TKIP/WEP as well
          - mac80211: do not accept/forward invalid EAPOL frames (CVE-2020-26139)
          - mac80211: extend protection against mixed key and fragment cache attacks
            (CVE-2020-24586, CVE-2020-24587)
          - ath10k: add CCMP PN replay protection for fragmented frames for PCIe
          - ath10k: drop fragments with multicast DA for PCIe (CVE-2020-26145)
          - ath10k: drop fragments with multicast DA for SDIO (CVE-2020-26145)
          - ath10k: drop MPDU which has discard flag set by firmware for SDIO
            (CVE-2020-24588)
          - ath10k: Fix TKIP Michael MIC verification for PCIe (CVE-2020-26141)
          - ath10k: Validate first subframe of A-MSDU before processing the list
          - ath11k: Clear the fragment cache during key install (CVE-2020-24587)
          - dm snapshot: properly fix a crash when an origin has no snapshots
          - drm/amdgpu/vcn1: add cancel_delayed_work_sync before power gate
          - [amd64] drm/amdkfd: correct sienna_cichlid SDMA RLC register offset error
          - drm/amdgpu/vcn2.0: add cancel_delayed_work_sync before power gate
          - drm/amdgpu/vcn2.5: add cancel_delayed_work_sync before power gate
          - drm/amdgpu/jpeg2.0: add cancel_delayed_work_sync before power gate
          - Documentation: seccomp: Fix user notification documentation
          - seccomp: Refactor notification handler to prepare for new semantics
          - serial: core: fix suspicious security_locked_down() call
          - misc/uss720: fix memory leak in uss720_probe
          - [x86] thunderbolt: usb4: Fix NVM read buffer bounds and offset issue
          - [x86] thunderbolt: dma_port: Fix NVM read buffer bounds and offset issue
          - [x86] KVM: Fix vCPU preempted state from guest's point of view
          - [arm64] KVM: Prevent mixed-width VM creation
          - [x86] mei: request autosuspend after sending rx flow control
          - iio: gyro: fxas21002c: balance runtime power in error path
          - iio: dac: ad5770r: Put fwnode in error case during ->probe()
          - iio: adc: ad7768-1: Fix too small buffer passed to
            iio_push_to_buffers_with_timestamp()
          - iio: adc: ad7124: Fix missbalanced regulator enable / disable on error.
          - iio: adc: ad7124: Fix potential overflow due to non sequential channel
            numbers
          - iio: adc: ad7923: Fix undersized rx buffer.
          - iio: adc: ad7793: Add missing error code in ad7793_setup()
          - iio: adc: ad7192: Avoid disabling a clock that was never enabled.
          - iio: adc: ad7192: handle regulator voltage error first
          - serial: 8250: Add UART_BUG_TXRACE workaround for Aspeed VUART
          - serial: 8250_dw: Add device HID for new AMD UART controller
          - serial: 8250_pci: Add support for new HPE serial device
          - serial: 8250_pci: handle FL_NOIRQ board flag
          - USB: trancevibrator: fix control-request direction
          - Revert "irqbypass: do not start cons/prod when failed connect"
          - USB: usbfs: Don't WARN about excessively large memory allocations
          - drivers: base: Fix device link removal
          - [arm64,armhf] serial: tegra: Fix a mask operation that is always true
          - serial: rp2: use 'request_firmware' instead of 'request_firmware_nowait'
          - USB: serial: ti_usb_3410_5052: add startech.com device id
          - USB: serial: option: add Telit LE910-S1 compositions 0x7010, 0x7011
          - USB: serial: ftdi_sio: add IDs for IDS GmbH Products
          - USB: serial: pl2303: add device id for ADLINK ND-6530 GC
          - [x86] thermal/drivers/intel: Initialize RW trip to THERMAL_TEMP_INVALID
          - [arm64,armhf] usb: dwc3: gadget: Properly track pending and queued SG
          - [arm64,x86] usb: typec: mux: Fix matching with typec_altmode_desc
          - net: usb: fix memory leak in smsc75xx_bind
          - Bluetooth: cmtp: fix file refcount when cmtp_attach_device fails
          - fs/nfs: Use fatal_signal_pending instead of signal_pending
          - NFS: fix an incorrect limit in filelayout_decode_layout()
          - NFS: Fix an Oopsable condition in __nfs_pageio_add_request()
          - NFS: Don't corrupt the value of pg_bytes_written in nfs_do_recoalesce()
          - NFSv4: Fix v4.0/v4.1 SEEK_DATA return -ENOTSUPP when set NFS_V4_2 config
          - [arm64] drm/meson: fix shutdown crash when component not probed
          - net/mlx5e: reset XPS on error flow if netdev isn't registered yet
          - net/mlx5e: Fix multipath lag activation
          - net/mlx5e: Fix error path of updating netdev queues
          - {net,vdpa}/mlx5: Configure interface MAC into mpfs L2 table
          - net/mlx5e: Fix nullptr in add_vlan_push_action()
          - net/mlx5: Set reformat action when needed for termination rules
          - net/mlx5e: Fix null deref accessing lag dev
          - net/mlx4: Fix EEPROM dump support
          - net/mlx5: Set term table as an unmanaged flow table
          - SUNRPC in case of backlog, hand free slots directly to waiting task
          - Revert "net:tipc: Fix a double free in tipc_sk_mcast_rcv"
          - tipc: wait and exit until all work queues are done
          - tipc: skb_linearize the head skb when reassembling msgs
          - [arm64] spi: spi-fsl-dspi: Fix a resource leak in an error handling path
          - netfilter: flowtable: Remove redundant hw refresh bit
          - [arm64,armhf] net: dsa: fix a crash if ->get_sset_count() fails
          - [armhf] i2c: s3c2410: fix possible NULL pointer deref on read message
            after write
          - [x86] i2c: i801: Don't generate an interrupt on bus reset
          - afs: Fix the nlink handling of dir-over-dir rename
          - nvmet-tcp: fix inline data size comparison in nvmet_tcp_queue_response
          - [x86] platform/x86: hp_accel: Avoid invoking _INI to speed up resume
          - [arm64] Revert "crypto: cavium/nitrox - add an error message to explain
            the failure of pci_request_mem_regions"
          - Revert "media: usb: gspca: add a missed check for goto_low_power"
          - [i386] Revert "ALSA: sb: fix a missing check of snd_ctl_add"
          - Revert "net: fujitsu: fix a potential NULL pointer dereference"
          - net: fujitsu: fix potential null-ptr-deref
          - Revert "net/smc: fix a NULL pointer dereference"
          - net/smc: properly handle workqueue allocation failure
          - [x86] Revert "char: hpet: fix a missing check of ioremap"
          - [x86] char: hpet: add checks after calling ioremap
          - [i386] Revert "ALSA: gus: add a check of the status of snd_ctl_add"
          - Revert "isdn: mISDNinfineon: fix potential NULL pointer dereference"
          - isdn: mISDNinfineon: check/cleanup ioremap failure correctly in setup_io
          - Revert "ath6kl: return error code in ath6kl_wmi_set_roam_lrssi_cmd()"
          - ath6kl: return error code in ath6kl_wmi_set_roam_lrssi_cmd()
          - Revert "isdn: mISDN: Fix potential NULL pointer dereference of kzalloc"
          - isdn: mISDN: correctly handle ph_info allocation failure in
            hfcsusb_ph_info
          - [arm64] Revert "dmaengine: qcom_hidma: Check for driver register failure"
          - [arm64] dmaengine: qcom_hidma: comment platform_driver_register call
          - Revert "libertas: add checks for the return value of sysfs_create_group"
          - libertas: register sysfs groups properly
          - Revert "media: dvb: Add check on sp8870_readreg"
          - media: dvb: Add check on sp8870_readreg return
          - Revert "media: gspca: mt9m111: Check write_bridge for timeout"
          - media: gspca: mt9m111: Check write_bridge for timeout
          - Revert "media: gspca: Check the return value of write_bridge for timeout"
          - media: gspca: properly check for errors in po1030_probe()
          - Revert "net: liquidio: fix a NULL pointer dereference"
          - net: liquidio: Add missing null pointer checks
          - Revert "brcmfmac: add a check for the status of usb_register"
          - brcmfmac: properly check for bus register errors
          - btrfs: return whole extents in fiemap
          - [powerpc,x86] scsi: BusLogic: Fix 64-bit system enumeration error for
            Buslogic
          - scsi: pm80xx: Fix drives missing during rmmod/insmod loop
          - btrfs: release path before starting transaction when cloning inline extent
          - btrfs: do not BUG_ON in link_to_fixup_dir
          - [x86] platform/x86: hp-wireless: add AMD's hardware id to the supported
            list
          - SMB3: incorrect file id in requests compounded with open
          - drm/amd/amdgpu: fix refcount leak
          - drm/amdgpu: Fix a use-after-free
          - drm/amd/amdgpu: fix a potential deadlock in gpu reset
          - drm/amdgpu: stop touching sched.ready in the backend
          - block: fix a race between del_gendisk and BLKRRPART
          - linux/bits.h: fix compilation error with GENMASK
          - [arm64,armhf] net: dsa: fix error code getting shifted with 4 in
            dsa_slave_get_sset_count
          - net: stmmac: Fix MAC WoL not working if PHY does not support WoL
          - spi: Assume GPIO CS active high in ACPI case
          - net: really orphan skbs tied to closing sk
          - net: packetmmap: fix only tx timestamp on request
          - [arm64,armhf] net: fec: fix the potential memory leak in fec_enet_init()
          - [arm64] net: mdio: thunder: Fix a double free issue in the .remove
            function
          - [mips64el,mipsel] net: mdio: octeon: Fix some double free issues
          - cxgb4/ch_ktls: Clear resources when pf4 device is removed
          - openvswitch: meter: fix race when getting now_ms.
          - net: sched: fix packet stuck problem for lockless qdisc
          - net: sched: fix tx action rescheduling issue during deactivation
          - net: sched: fix tx action reschedule issue with stopped queue
          - net: hso: check for allocation failure in hso_create_bulk_serial_device()
          - net: bnx2: Fix error return code in bnx2_init_board()
          - bnxt_en: Include new P5 HV definition in VF check.
          - bnxt_en: Fix context memory setup for 64K page size.
          - mld: fix panic in mld_newpack()
          - net/smc: remove device from smcd_dev_list after failed device_add()
          - [amd64] gve: Check TX QPL was actually assigned
          - [amd64] gve: Update mgmt_msix_idx if num_ntfy changes
          - [amd64] gve: Add NULL pointer checks when freeing irqs.
          - [amd64] gve: Upgrade memory barrier in poll routine
          - [amd64] gve: Correct SKB queue index validation.
          - [arm64] net: hns3: fix incorrect resp_msg issue
          - [arm64] net: hns3: put off calling register_netdev() until client
            initialize complete
          - [amd64] iommu/vt-d: Use user privilege for RID2PASID translation
          - cxgb4: avoid accessing registers when clearing filters
          - bpf, offload: Reorder offload callback 'prepare' in verifier
          - bpf: Set mac_len in bpf_skb_change_head
          - ixgbe: fix large MTU request from VF
          - [arm64] ASoC: qcom: lpass-cpu: Use optional clk APIs
          - scsi: libsas: Use _safe() loop in sas_resume_port()
          - ipv6: record frag_max_size in atomic fragments in input path
          - ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create() can be
            static
          - sch_dsmark: fix a NULL deref in qdisc_reset()
          - net: zero-initialize tc skb extension on allocation
          - [arm64,armhf] net: mvpp2: add buffer header handling in RX
          - [x86] i915: fix build warning in intel_dp_get_link_status()
          - [arm64] net: hns3: check the return of skb_checksum_help()
          - bpftool: Add sock_release help info for cgroup attach/prog load command
          - SUNRPC: More fixes for backlog congestion
          - net: hso: bail out on interrupt URB allocation failure
          - neighbour: Prevent Race condition in neighbour subsytem
          - usb: core: reduce power-on-good delay time of root hub
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.43
          - btrfs: tree-checker: do not error out if extent ref hash doesn't match
          - net: usb: cdc_ncm: don't spew notifications (Closes: #989451)
          - [x86] hwmon: (dell-smm-hwmon) Fix index values
          - netfilter: conntrack: unregister ipv4 sockopts on error unwind
          - efi/fdt: fix panic when no valid fdt found
          - efi: Allow EFI_MEMORY_XP and EFI_MEMORY_RO both to be cleared
          - efi/libstub: prevent read overflow in find_file_option()
          - [arm64,x86] efi: cper: fix snprintf() use in cper_dimm_err_location()
          - vfio/pci: Fix error return code in vfio_ecap_init()
          - ipvs: ignore IP_VS_SVC_F_HASHED flag when adding service
          - HID: logitech-hidpp: initialize level variable
          - HID: pidff: fix error return code in hid_pidff_init()
          - [arm64,x86] HID: i2c-hid: fix format string mismatch
          - devlink: Correct VIRTUAL port to not have phys_port attributes
          - net/sched: act_ct: Offload connections with commit action
          - net/sched: act_ct: Fix ct template allocation for zone 0
          - nvme-rdma: fix in-casule data send for chained sgls
          - ACPICA: Clean up context mutex during object deletion
          - perf probe: Fix NULL pointer dereference in convert_variable_location()
          - net: sock: fix in-kernel mark setting
          - net/mlx5e: Fix incompatible casting
          - net/mlx5: Check firmware sync reset requested is set before trying to
            abort it
          - net/mlx5e: Check for needed capability for cvlan matching
          - net/mlx5: DR, Create multi-destination flow table with level less than 64
          - nvmet: fix freeing unallocated p2pmem
          - netfilter: nft_ct: skip expectations for confirmed conntrack
          - netfilter: nfnetlink_cthelper: hit EBUSY on updates if size mismatches
          - bpf: Simplify cases in bpf_base_func_proto
          - bpf, lockdown, audit: Fix buggy SELinux lockdown permission checks
          - ieee802154: fix error return code in ieee802154_add_iface()
          - ieee802154: fix error return code in ieee802154_llsec_getparams()
          - igb: add correct exception tracing for XDP
          - ixgbevf: add correct exception tracing for XDP
          - cxgb4: fix regression with HASH tc prio value update
          - ipv6: Fix KASAN: slab-out-of-bounds Read in fib6_nh_flush_exceptions
          - ice: Fix allowing VF to request more/less queues via virtchnl
          - ice: Fix VFR issues for AVF drivers that expect ATQLEN cleared
          - ice: handle the VF VSI rebuild failure
          - ice: report supported and advertised autoneg using PHY capabilities
          - ice: Allow all LLDP packets from PF to Tx
          - cxgb4: avoid link re-train during TC-MQPRIO configuration
          - i40e: optimize for XDP_REDIRECT in xsk path
          - i40e: add correct exception tracing for XDP
          - ice: simplify ice_run_xdp
          - ice: optimize for XDP_REDIRECT in xsk path
          - ice: add correct exception tracing for XDP
          - ixgbe: optimize for XDP_REDIRECT in xsk path
          - ixgbe: add correct exception tracing for XDP
          - [arm64] optee: use export_uuid() to copy client UUID
          - [armhf] bus: ti-sysc: Fix am335x resume hang for usb otg module
          - [arm64] dts: freescale: sl28: var4: fix RGMII clock and voltage
          - [armhf] bus: ti-sysc: Fix flakey idling of uarts and stop using
            swsup_sidle_act
          - tipc: add extack messages for bearer/media failure
          - tipc: fix unique bearer names sanity check
          - [armhf] serial: stm32: fix threaded interrupt handling
          - io_uring: fix link timeout refs
          - io_uring: use better types for cflags
          - drm/amdgpu/vcn3: add cancel_delayed_work_sync before power gate
          - drm/amdgpu/jpeg2.5: add cancel_delayed_work_sync before power gate
          - drm/amdgpu/jpeg3: add cancel_delayed_work_sync before power gate
          - Bluetooth: fix the erroneous flush_work() order (CVE-2021-3564)
          - Bluetooth: use correct lock to prevent UAF of hdev object (CVE-2021-3573)
          - wireguard: do not use -O3
          - wireguard: peer: allocate in kmem_cache
          - wireguard: use synchronize_net rather than synchronize_rcu
          - wireguard: allowedips: initialize list head in selftest
          - wireguard: allowedips: remove nodes in O(1)
          - wireguard: allowedips: allocate nodes in kmem_cache
          - wireguard: allowedips: free empty intermediate nodes when removing single
            node
          - [arm64,x86] HID: i2c-hid: Skip ELAN power-on command after reset
          - HID: magicmouse: fix NULL-deref on disconnect
          - HID: multitouch: require Finger field to mark Win8 reports as MT
          - gfs2: fix scheduling while atomic bug in glocks
          - ALSA: timer: Fix master timer notification
          - ALSA: hda: Fix for mute key LED for HP Pavilion 15-CK0xx
          - ALSA: hda: update the power_state during the direct-complete
          - ext4: fix memory leak in ext4_fill_super
          - ext4: fix bug on in ext4_es_cache_extent as ext4_split_extent_at failed
          - ext4: fix fast commit alignment issues
          - ext4: fix memory leak in ext4_mb_init_backend on error path.
          - ext4: fix accessing uninit percpu counter variable with fast_commit
          - [arm*] usb: dwc2: Fix build in periphal-only mode
          - pid: take a reference when initializing `cad_pid`
          - ocfs2: fix data corruption by fallocate
          - mm/page_alloc: fix counting of free pages after take off from buddy
          - [x86] cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
            update_pasid()
          - nfc: fix NULL ptr dereference in llcp_sock_getname() after failed connect
            (CVE-2021-3587)
          - drm/amdgpu: Don't query CE and UE errors
          - drm/amdgpu: make sure we unpin the UVD BO
          - [x86] apic: Mark _all_ legacy interrupts when IO/APIC is missing
          - [powerpc] kprobes: Fix validation of prefixed instructions across page
            boundary
          - btrfs: mark ordered extent and inode with error if we fail to finish
          - btrfs: fix error handling in btrfs_del_csums
          - btrfs: return errors from btrfs_del_csums in cleanup_ref_head
          - btrfs: fixup error handling in fixup_inode_link_counts
          - btrfs: abort in rename_exchange if we fail to insert the second ref
          - btrfs: fix deadlock when cloning inline extents and low on available space
          - mm, hugetlb: fix simple resv_huge_pages underflow on UFFDIO_COPY
          - [arm64] drm/msm/dpu: always use mdp device to scale bandwidth
          - btrfs: fix unmountable seed device after fstrim
          - [x86] KVM: SVM: Truncate GPR value for DR and CR accesses in !64-bit mode
          - [arm64] KVM: Fix debug register indexing
          - [x86] kvm: Teardown PV features on boot CPU as well
          - [x86] kvm: Disable kvmclock on all CPUs on shutdown
          - [x86] kvm: Disable all PV features on crash
          - lib/lz4: explicitly support in-place decompression
          - netfilter: nf_tables: missing error reporting for not selected expressions
          - xen-netback: take a reference to the RX task thread (CVE-2021-28691)
          - neighbour: allow NUD_NOARP entries to be forced GCed
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.44
          - proc: Track /proc/$pid/attr/ opener mm_struct
          - [amd64] ASoC: amd: fix for pcm_read() error
          - spi: Fix spi device unregister flow
          - bpf: Forbid trampoline attach for functions with variable arguments
          - net/nfc/rawsock.c: fix a permission check bug
          - [x86] ASoC: Intel: bytcr_rt5640: Add quirk for the Glavey TM800A550L
            tablet
          - [x86] ASoC: Intel: bytcr_rt5640: Add quirk for the Lenovo Miix 3-830
            tablet
          - [arm64,armhf] usb: chipidea: udc: assign interrupt number to USB gadget
            structure
          - bonding: init notify_work earlier to avoid uninitialized use
          - netlink: disable IRQs for netlink_lock_table()
          - net: mdiobus: get rid of a BUG_ON()
          - cgroup: disable controllers at parse time
          - wq: handle VM suspension in stall detection
          - net/qla3xxx: fix schedule while atomic in ql_sem_spinlock
          - RDS tcp loopback connection can hang
          - net:sfc: fix non-freed irq in legacy irq mode
          - scsi: bnx2fc: Return failure if io_req is already in ABTS processing
          - [x86] scsi: vmw_pvscsi: Set correct residual data length
          - [arm64] scsi: hisi_sas: Drop free_irq() of devm_request_irq() allocated
            irq
          - scsi: target: qla2xxx: Wait for stop_phase1 at WWN removal
          - net: macb: ensure the device is available before accessing GEMGXL control
            registers
          - nvme-fabrics: decode host pathing error for connect
          - dm verity: fix require_signatures module_param permissions
          - bnx2x: Fix missing error code in bnx2x_iov_init_one()
          - nvmet: fix false keep-alive timeout when a controller is torn down
          - spi: Don't have controller clean up spi device before driver unbind
          - spi: Cleanup on failure of initial setup
          - [powerpc] i2c: mpc: Make use of i2c_recover_bus()
          - [powerpc] i2c: mpc: implement erratum A-004447 workaround
          - ALSA: seq: Fix race of snd_seq_timer_open()
          - ALSA: firewire-lib: fix the context to call snd_pcm_stop_xrun()
          - ALSA: hda/realtek: headphone and mic don't work on an Acer laptop
          - ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP Elite
            Dragonfly G2
          - ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP EliteBook x360
            1040 G8
          - ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840 Aero G8
          - ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
          - [arm*] spi: bcm2835: Fix out-of-bounds access with more than 4 slaves
          - Revert "ACPI: sleep: Put the FACS table after using it"
          - drm: Fix use-after-free read in drm_getunique()
          - drm: Lock pointer access in drm_master_release()
          - [x86] perf/x86/intel/uncore: Fix M2M event umask for Ice Lake server
          - [x86] KVM: X86: MMU: Use the correct inherited permissions to get shadow
            page
          - kvm: avoid speculation-based attacks from out-of-range memslot accesses
          - [arm64,x86] staging: rtl8723bs: Fix uninitialized variables
          - async_xor: check src_offs is not NULL before updating it
          - btrfs: return value from btrfs_mark_extent_written() in case of error
          - btrfs: promote debugging asserts to full-fledged checks in validate_super
          - cgroup1: don't allow '\n' in renaming
          - ftrace: Do not blindly read the ip address in ftrace_bug()
          - USB: f_ncm: ncm_bitrate (speed) is unsigned
          - usb: f_ncm: only first packet of aggregate needs to start timer
          - usb: pd: Set PD_T_SINK_WAIT_CAP to 310ms
          - [arm64,armhf] usb: dwc3-meson-g12a: fix usb2 PHY glue init when phy0 is
            disabled
          - [arm64,armhf] usb: dwc3: meson-g12a: Disable the regulator in the error
            handling path of the probe
          - [arm64,armhf] usb: dwc3: gadget: Bail from dwc3_gadget_exit() if
            dwc->gadget is NULL
          - [arm64,armhf] usb: dwc3: ep0: fix NULL pointer exception
          - [arm64,armhf] usb: musb: fix MUSB_QUIRK_B_DISCONNECT_99 handling
          - usb: typec: ucsi: Clear PPM capability data in ucsi_init() error path
          - usb: gadget: f_fs: Ensure io_completion_wq is idle during unbind
          - USB: serial: ftdi_sio: add NovaTech OrionMX product ID
          - USB: serial: omninet: add device id for Zyxel Omni 56K Plus
          - USB: serial: quatech2: fix control-request directions
          - USB: serial: cp210x: fix alternate function for CP2102N QFN20
          - usb: gadget: eem: fix wrong eem header operation
          - usb: fix various gadgets null ptr deref on 10gbps cabling.
          - usb: fix various gadget panics on 10gbps cabling
          - usb: typec: tcpm: cancel vdm and state machine hrtimer when unregister
            tcpm port
          - usb: typec: tcpm: cancel frs hrtimer when unregister tcpm port
          - regulator: core: resolve supply for boot-on/always-on regulators
          - [arm64] regulator: max77620: Use device_set_of_node_from_dev()
          - regulator: bd71828: Fix .n_voltages settings
          - [arm64,armhf] usb: dwc3: gadget: Disable gadget IRQ during pullup disable
          - usb: typec: mux: Fix copy-paste mistake in typec_mux_match
          - [arm64] drm/msm/a6xx: fix incorrectly set uavflagprd_inv field for A650
          - [arm64] drm/msm/a6xx: update/fix CP_PROTECT initialization
          - [arm64] drm/msm/a6xx: avoid shadow NULL reference in failure path
          - RDMA/ipoib: Fix warning caused by destroying non-initial netns
          - RDMA/mlx4: Do not map the core_clock page to user space unless enabled
          - ASoC: core: Fix Null-point-dereference in fmt_single_name()
          - perf: Fix data race between pin_count increment/decrement
          - sched/fair: Keep load_avg and load_sum synced
          - sched/fair: Make sure to update tg contrib for blocked load
          - sched/fair: Fix util_est UTIL_AVG_UNCHANGED handling
          - [x86] nmi_watchdog: Fix old-style NMI watchdog regression on old Intel
            CPUs
          - [x86] KVM: x86: Ensure liveliness of nested VM-Enter fail tracepoint
            message
          - IB/mlx5: Fix initializing CQ fragments buffer
          - NFS: Fix a potential NULL dereference in nfs_get_client()
          - NFSv4: Fix deadlock between nfs4_evict_inode() and
            nfs4_opendata_get_inode()
          - kvm: fix previous commit for 32-bit builds
          - NFS: Fix use-after-free in nfs4_init_client()
          - NFSv4: Fix second deadlock in nfs4_evict_inode()
          - NFSv4: nfs4_proc_set_acl needs to restore NFS_CAP_UIDGID_NOMAP on error.
          - scsi: core: Fix error handling of scsi_host_alloc()
          - scsi: core: Fix failure handling of scsi_add_host_with_dma()
          - scsi: core: Put .shost_dev in failure path if host state changes to
            RUNNING
          - scsi: core: Only put parent device if host state differs from
            SHOST_CREATED
          - tracing: Correct the length check which causes memory corruption
          - proc: only require mm_struct for writing
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.45
          - net: ieee802154: fix null deref in parse dev addr
          - HID: quirks: Set INCREMENT_USAGE_ON_DUPLICATE for Saitek X65
          - HID: a4tech: use A4_2WHEEL_MOUSE_HACK_B8 for A4TECH NB-95
          - HID: hid-input: add mapping for emoji picker key
          - HID: hid-sensor-hub: Return error for hid_set_field() failure
          - HID: quirks: Add quirk for Lenovo optical mouse
          - HID: multitouch: set Stylus suffix for Stylus-application devices, too
          - HID: Add BUS_VIRTUAL to hid_connect logging
          - HID: usbhid: fix info leak in hid_submit_ctrl
          - [arm64,armhf] drm/tegra: sor: Do not leak runtime PM reference
          - [arm64,armhf] gpu: host1x: Split up client initalization and registration
          - [arm64,armhf] drm/tegra: sor: Fully initialize SOR before registration
          - gfs2: Prevent direct-I/O write fallback errors from getting lost
          - gfs2: fix a deadlock on withdraw-during-mount
          - HID: gt683r: add missing MODULE_DEVICE_TABLE
          - gfs2: Fix use-after-free in gfs2_glock_shrink_scan
          - scsi: target: core: Fix warning on realtime kernels
          - ethernet: myri10ge: Fix missing error code in myri10ge_probe()
          - scsi: qedf: Do not put host in qedf_vport_create() unconditionally
          - Bluetooth: Add a new USB ID for RTL8822CE
          - scsi: scsi_devinfo: Add blacklist entry for HPE OPEN-V
          - net: ipconfig: Don't override command-line hostnames or domains
          - drm/amd/display: Allow bandwidth validation for 0 streams.
          - drm/amdgpu: refine amdgpu_fru_get_product_info
          - drm/amd/display: Fix potential memory leak in DMUB hw_init
          - drm/amd/amdgpu:save psp ring wptr to avoid attack
          - rtnetlink: Fix missing error code in rtnl_bridge_notify()
          - net: Return the correct errno code
          - fib: Return the correct errno code
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.46
          - afs: Fix an IS_ERR() vs NULL check
          - mm/memory-failure: make sure wait for page writeback in memory_failure
          - [x86] kvm: LAPIC: Restore guard to prevent illegal APIC register access
          - fanotify: fix copy_event_to_user() fid error clean up
          - batman-adv: Avoid WARN_ON timing related checks
          - mac80211: fix skb length check in ieee80211_scan_rx()
          - net: ipv4: fix memory leak in netlbl_cipsov4_add_std
          - vrf: fix maximum MTU
          - net: rds: fix memory leak in rds_recvmsg
          - [arm64] net: dsa: felix: re-enable TX flow control in ocelot_port_flush()
          - netfilter: nft_fib_ipv6: skip ipv6 packets from any to link-local
          - ice: add ndo_bpf callback for safe mode netdev ops
          - ice: parameterize functions responsible for Tx ring management
          - udp: fix race between close() and udp_abort()
          - rtnetlink: Fix regression in bridge VLAN configuration
          - net/sched: act_ct: handle DNAT tuple collision
          - net/mlx5e: Fix page reclaim for dead peer hairpin
          - net/mlx5: Consider RoCE cap before init RDMA resources
          - net/mlx5: DR, Allow SW steering for sw_owner_v2 devices
          - net/mlx5: DR, Don't use SW steering when RoCE is not supported
          - net/mlx5e: Block offload of outer header csum for UDP tunnels
          - netfilter: synproxy: Fix out of bounds when parsing TCP options
          - sch_cake: Fix out of bounds when parsing TCP options and header
          - alx: Fix an error handling path in 'alx_probe()'
          - cxgb4: fix endianness when flashing boot image
          - cxgb4: fix sleep in atomic when flashing PHY firmware
          - cxgb4: halt chip before flashing PHY firmware image
          - net: make get_net_ns return error if NET_NS is disabled
          - ethtool: strset: fix message length calculation
          - qlcnic: Fix an error handling path in 'qlcnic_probe()'
          - netxen_nic: Fix an error handling path in 'netxen_nic_probe()'
          - cxgb4: fix wrong ethtool n-tuple rule lookup
          - ipv4: Fix device used for dst_alloc with local routes
          - net: qrtr: fix OOB Read in qrtr_endpoint_post
          - bpf: Fix leakage under speculation on mispredicted branches
            (CVE-2021-33624)
          - ptp: improve max_adj check against unreasonable values
          - net: cdc_ncm: switch to eth%d interface naming
          - net: usb: fix possible use-after-free in smsc75xx_bind
          - [arm64,armhf] net: fec_ptp: fix issue caused by refactor the fec_devtype
          - net: ipv4: fix memory leak in ip_mc_add1_src
          - net/af_unix: fix a data-race in unix_dgram_sendmsg / unix_release_sock
          - net/mlx5: E-Switch, Read PF mac address
          - net/mlx5: E-Switch, Allow setting GUID for host PF vport
          - net/mlx5: Reset mkey index on creation
          - be2net: Fix an error handling path in 'be_probe()'
          - net: hamradio: fix memory leak in mkiss_close
          - net: cdc_eem: fix tx fixup skb leak
          - cxgb4: fix wrong shift.
          - bnxt_en: Rediscover PHY capabilities after firmware reset
          - bnxt_en: Fix TQM fastpath ring backing store computation
          - bnxt_en: Call bnxt_ethtool_free() in bnxt_init_one() error path
          - icmp: don't send out ICMP messages with a source address of 0.0.0.0
          - [x86] platform/x86: thinkpad_acpi: Add X1 Carbon Gen 9 second fan support
          - sched/pelt: Ensure that *_sum is always synced with *_avg
          - [armhf] spi: stm32-qspi: Always wait BUSY bit to be cleared in
            stm32_qspi_wait_cmd()
          - ASoC: rt5682: Fix the fast discharge for headset unplugging in soundwire
            mode
          - [arm64,armhf] drm/sun4i: dw-hdmi: Make HDMI PHY into a platform device
          - [arm64] ASoC: qcom: lpass-cpu: Fix pop noise during audio capture begin
          - radeon: use memcpy_to/fromio for UVD fw upload
          - mm: relocate 'write_protect_seq' in struct mm_struct
          - [arm64,armhf] irqchip/gic-v3: Workaround inconsistent PMR setting on NMI
            entry
          - bpf: Inherit expanded/patched seen count from old aux data
            (CVE-2021-33624)
          - bpf: Do not mark insn as seen under speculative path verification
            (CVE-2021-33624)
          - can: bcm: fix infoleak in struct bcm_msg_head (CVE-2021-34693)
          - can: bcm/raw/isotp: use per module netdevice notifier
          - can: j1939: fix Use-after-Free, hold skb ref while in use
          - can: mcba_usb: fix memory leak in mcba_usb
          - usb: core: hub: Disable autosuspend for Cypress CY7C65632
          - [arm64,armhf] usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
          - tracing: Do not stop recording cmdlines when tracing is off
          - tracing: Do not stop recording comms if the trace file is being read
          - tracing: Do no increment trace_clock_global() by one
          - PCI: Mark TI C667X to avoid bus reset
          - PCI: Mark some NVIDIA GPUs to avoid bus reset
          - [arm64] PCI: aardvark: Fix kernel panic during PIO transfer
          - PCI: Add ACS quirk for Broadcom BCM57414 NIC
          - PCI: Work around Huawei Intelligent NIC VF FLR erratum
          - [x86] KVM: x86: Immediately reset the MMU context when the SMM flag is
            cleared
          - [x86] KVM: x86/mmu: Calculate and check "full" mmu_role for nested MMU
          - [x86] KVM: X86: Fix x86_emulator slab cache leak
          - [s390x] mcck: fix calculation of SIE critical section size
          - [s390x] ap: Fix hanging ioctl caused by wrong msg counter
          - [amd64] x86/mm: Avoid truncating memblocks for SGX memory
          - [x86] process: Check PF_KTHREAD and not current->mm for kernel threads
          - [x86] ioremap: Map EFI-reserved memory as encrypted for SEV
          - [x86] pkru: Write hardware init value to PKRU when xstate is init
          - [x86] fpu: Prevent state corruption in __fpu__restore_sig()
          - [x86] fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
          - [x86] fpu: Reset state for all signal restore failures
          - crash_core, vmcoreinfo: append 'SECTION_SIZE_BITS' to vmcoreinfo
          - [arm64,armhf] dmaengine: pl330: fix wrong usage of spinlock flags in
            dma_cyclc
          - mac80211: Fix NULL ptr deref for injected rate info
          - cfg80211: avoid double free of PMSR request
          - drm/amdgpu/gfx10: enlarge CP_MEC_DOORBELL_RANGE_UPPER to cover full
            doorbell.
          - drm/amdgpu/gfx9: fix the doorbell missing when in CGPG issue.
          - net: ll_temac: Fix TX BD buffer overwrite
          - net: bridge: fix vlan tunnel dst null pointer dereference
          - net: bridge: fix vlan tunnel dst refcnt when egressing
          - mm/swap: fix pte_same_as_swp() not removing uffd-wp bit when compare
          - mm/slub: clarify verification reporting
          - mm/slub: fix redzoning for small allocations
          - mm/slub: actually fix freelist pointer vs redzoning
          - mm/slub.c: include swab.h
          - net: stmmac: disable clocks in stmmac_remove_config_dt()
          - [arm64,armhf] net: fec_ptp: add clock rate zero check
          - [arm64,armhf] usb: dwc3: debugfs: Add and remove endpoint dirs dynamically
          - [arm64,armhf] usb: dwc3: core: fix kernel panic when do reboot
      .
        [ Josua Mayer ]
        * [armhf] drivers/bluetooth: Enable BT_HCIUART as a module, with support
          for all features already enabled in the generic config. (Closes: #987361)
        * [armhf] enable i.MX6 MIPI-CSI video capture device. (Closes: #987365)
          - drivers/mux: Enable MUX_MMIO as a module.
          - drivers/media/platform: Enable VIDEO_MUX as a module.
          - drivers/staging/media/imx: Enable VIDEO_IMX_MEDIA and VIDEO_IMX_CSI as
            modules.
      .
        [ Uwe Kleine-König ]
        * [arm64] Update device tree for Kobol's helios64 from next
      .
        [ Salvatore Bonaccorso ]
        * [rt] Refresh "net/Qdisc: use a seqlock instead seqcount"
        * Ignore some ABI changes that should not affect OOT modules
        * Bump ABI to 8
        * [rt] Refresh "tracing: Merge irqflags + preempt counter"
        * can: bcm: delay release of struct bcm_op after synchronize_rcu()
          (CVE-2021-3609)
        * Revert "PCI: PM: Do not read power state in pci_enable_device_flags()"
          (Closes: #990008)
      .
        [ Vagrant Cascadian ]
        * [arm64] Add pwm-rockchip to fb-modules udeb.
        * [arm64] Add fusb302, tcpm and typec to usb-modules udeb.
        * [armhf] Add gpio-mxc to kernel-image udeb. Thanks to Rick Thomas.
          (Closes: #982270)
      .
      linux (5.10.40-1) unstable; urgency=medium
      .
        * New upstream stable update:
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.39
          - [x86] msr: Fix wr/rdmsr_safe_regs_on_cpu() prototypes
          - [x86] drm/i915/display: fix compiler warning about array overrun
          - airo: work around stack usage warning
          - usb: sl811-hcd: improve misleading indentation
          - cxgb4: Fix the -Wmisleading-indentation warning
          - isdn: capi: fix mismatched prototypes
          - virtio_net: Do not pull payload in skb->head
          - [armel,armhf] 9066/1: ftrace: pause/unpause function graph tracer in
            cpu_suspend()
          - [arm64,x86] ACPI / hotplug / PCI: Fix reference count leak in
            enable_slot()
          - [arm64] Input: elants_i2c - do not bind to i2c-hid compatible ACPI
            instantiated devices
          - NFS: NFS_INO_REVAL_PAGECACHE should mark the change attribute invalid
          - [armel,armhf] 9075/1: kernel: Fix interrupted SMC calls
          - [arm64] platform/chrome: cros_ec_typec: Add DP mode check
          - scsi: lpfc: Fix illegal memory access on Abort IOCBs
          - ceph: fix fscache invalidation
          - ceph: don't clobber i_snap_caps on non-I_NEW inode
          - ceph: don't allow access to MDS-private inodes
          - scsi: target: tcmu: Return from tcmu_handle_completions() if cmd_id not
            found
          - bridge: Fix possible races between assigning rx_handler_data and setting
            IFF_BRIDGE_PORT bit
          - nvmet: remove unsupported command noise
          - drm/amd/display: Fix two cursor duplication when using overlay
          - [arm64,x86] gpiolib: acpi: Add quirk to ignore EC wakeups on Dell Venue 10
            Pro 5055
          - net:CXGB4: fix leak if sk_buff is not used
          - ALSA: hda: generic: change the DAC ctl name for LO+SPK or LO+HP
          - block: reexpand iov_iter after read/write
          - net: stmmac: Do not enable RX FIFO overflow interrupts
          - ip6_gre: proper dev_{hold|put} in ndo_[un]init methods
          - sit: proper dev_{hold|put} in ndo_[un]init methods
          - ip6_tunnel: sit: proper dev_{hold|put} in ndo_[un]init methods
          - ipv6: remove extra dev_hold() for fallback tunnels
          - tweewide: Fix most Shebang lines
          - scripts: switch explicitly to Python 3
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.40
          - RDMA/core: Prevent divide-by-zero error triggered by the user
          - RDMA/rxe: Clear all QP fields if creation failed
          - scsi: ufs: core: Increase the usable queue depth
          - scsi: qedf: Add pointer checks in qedf_update_link_speed()
          - scsi: qla2xxx: Fix error return code in qla82xx_write_flash_dword()
          - RDMA/mlx5: Recover from fatal event in dual port mode
          - RDMA/core: Don't access cm_id after its destruction
          - nvmet: remove unused ctrl->cqs
          - nvmet: fix memory leak in nvmet_alloc_ctrl()
          - nvme-tcp: rerun io_work if req_list is not empty
          - nvme-fc: clear q_live at beginning of association teardown
          - [x86] platform/x86: intel_int0002_vgpio: Only call enable_irq_wake() when
            using s2idle
          - [x86] platform/x86: dell-smbios-wmi: Fix oops on rmmod dell_smbios
          - RDMA/mlx5: Fix query DCT via DEVX
          - RDMA/uverbs: Fix a NULL vs IS_ERR() bug
          - [powerpc*] pseries: Fix hcall tracing recursion in pv queued spinlocks
          - ptrace: make ptrace() fail if the tracee changed its pid unexpectedly
          - nvmet: seset ns->file when open fails
          - [x86] perf/x86: Avoid touching LBR_TOS MSR for Arch LBR
          - locking/lockdep: Correct calling tracepoints
          - locking/mutex: clear MUTEX_FLAGS if wait_list is empty due to signal
          - [powerpc*] Fix early setup to make early_ioremap() work
          - btrfs: avoid RCU stalls while running delayed iputs
          - cifs: fix memory leak in smb2_copychunk_range
          - misc: eeprom: at24: check suspend status before disable regulator
          - ALSA: dice: fix stream format for TC Electronic Konnekt Live at high
            sampling transfer frequency
          - ALSA: intel8x0: Don't update period unless prepared
          - ALSA: firewire-lib: fix amdtp_packet tracepoints event for packet_index
            field
          - ALSA: line6: Fix racy initialization of LINE6 MIDI
          - ALSA: dice: fix stream format at middle sampling rate for Alesis iO 26
          - ALSA: firewire-lib: fix calculation for size of IR context payload
          - ALSA: usb-audio: Validate MS endpoint descriptors
          - ALSA: bebob/oxfw: fix Kconfig entry for Mackie d.2 Pro
          - ALSA: hda: fixup headset for ASUS GU502 laptop
          - Revert "ALSA: sb8: add a check for request_region"
          - ALSA: firewire-lib: fix check for the size of isochronous packet payload
          - ALSA: hda/realtek: reset eapd coeff to default value for alc287
          - ALSA: hda/realtek: Add some CLOVE SSIDs of ALC293
          - ALSA: hda/realtek: Fix silent headphone output on ASUS UX430UA
          - ALSA: hda/realtek: Add fixup for HP OMEN laptop
          - ALSA: hda/realtek: Add fixup for HP Spectre x360 15-df0xxx
          - [x86] uio_hv_generic: Fix a memory leak in error handling paths
          - [arm64] Revert "serial: mvebu-uart: Fix to avoid a potential NULL pointer
            dereference"
          - nvme-tcp: fix possible use-after-completion
          - drm/amdgpu: Fix GPU TLB update error when PAGE_SIZE > AMDGPU_PAGE_SIZE
          - drm/amdgpu: disable 3DCGCG on picasso/raven1 to avoid compute hang
          - drm/amdgpu: update gc golden setting for Navi12
          - drm/amdgpu: update sdma golden setting for Navi12
          - [powerpc*] 64s/syscall: Use pt_regs.trap to distinguish syscall ABI
            difference between sc and scv syscalls
          - [powerpc*] 64s/syscall: Fix ptrace syscall info with scv syscalls
          - mmc: sdhci-pci-gli: increase 1.8V regulator wait
          - [x86] xen-pciback: redo VF placement in the virtual topology
          - [x86] xen-pciback: reconfigure also from backend watch handler
          - ipc/mqueue, msg, sem: avoid relying on a stack reference past its expiry
          - dm snapshot: fix crash with transient storage and zero chunk size
          - Revert "video: hgafb: fix potential NULL pointer dereference"
          - [arm64,armhf] Revert "net: stmicro: fix a missing check of clk_prepare"
          - Revert "hwmon: (lm80) fix a missing check of bus read in lm80 probe"
          - Revert "ecryptfs: replace BUG_ON with error handling code"
          - Revert "rtlwifi: fix a potential NULL pointer dereference"
          - Revert "qlcnic: Avoid potential NULL pointer dereference"
          - Revert "niu: fix missing checks of niu_pci_eeprom_read"
          - ethernet: sun: niu: fix missing checks of niu_pci_eeprom_read()
          - [arm64,armhf] net: stmicro: handle clk_prepare() failure during init
          - net: rtlwifi: properly check for alloc_workqueue() failure
          - ics932s401: fix broken handling of errors when word reading fails
          - qlcnic: Add null check after calling netdev_alloc_skb
          - [x86] video: hgafb: fix potential NULL pointer dereference
          - vgacon: Record video mode changes with VT_RESIZEX
          - vt_ioctl: Revert VT_RESIZEX parameter handling removal
          - vt: Fix character height handling with VT_RESIZEX
          - tty: vt: always invoke vc->vc_sw->con_resize callback
          - [x86] drm/i915/gt: Disable HiZ Raw Stall Optimization on broken gen7
          - [amd64] x86/Xen: swap NX determination and GDT setup on BSP
          - nvme-multipath: fix double initialization of ANA state
          - [arm64] rtc: pcf85063: fallback to parent of_node
          - nvmet: use new ana_log_size instead the old one
          - [x86] video: hgafb: correctly handle card detect failure during probe
          - Bluetooth: SMP: Fail if remote and local public keys are identical
      .
        [ Salvatore Bonaccorso ]
        * bpf: Wrap aux data inside bpf_sanitize_info container (CVE-2021-33200)
        * bpf: Fix mask direction swap upon off reg sign change (CVE-2021-33200)
        * bpf: No need to simulate speculative domain for immediates (CVE-2021-33200)
        * [armhf] dts: sun8i: h3: orangepi-plus: Fix ethernet phy-mode
          (Closes: #988574)
        * [rt] Refresh "ptrace: fix ptrace vs tasklist_lock race"
        * Deal with vc_data ABI changes in 5.10.40
      .
      linux (5.10.38-1) unstable; urgency=medium
      .
        * New upstream stable update:
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.29
          - [armhf] bus: ti-sysc: Fix warning on unbind if reset is not deasserted
          - [x86] platform/x86: intel-hid: Support Lenovo ThinkPad X1 Tablet Gen 2
          - [amd64] bpf, x86: Use kvmalloc_array instead kmalloc_array in bpf_jit_comp
          - net/mlx5e: Enforce minimum value check for ICOSQ size
          - mISDN: fix crash in fritzpci
          - mac80211: Check crypto_aead_encrypt for errors
          - mac80211: choose first enabled channel for monitor
          - [arm64] drm/msm/dsi_pll_7nm: Fix variable usage for pll_lockdet_rate
          - [arm64] drm/msm/adreno: a5xx_power: Don't apply A540 lm_setup to other
            GPUs
          - [arm64] drm/msm: Ratelimit invalid-fence message
          - netfilter: conntrack: Fix gre tunneling over ipv6
          - netfilter: nftables: skip hook overlap logic if flowtable is stale
          - [x86] platform/x86: thinkpad_acpi: Allow the FnLock LED to change state
          - [arm64] drm/msm/disp/dpu1: icc path needs to be set before dpu runtime
            resume
          - block: clear GD_NEED_PART_SCAN later in bdev_disk_changed
          - [x86] platform/x86: intel_pmc_core: Ignore GBE LTR on Tiger Lake platforms
          - [arm64] ptp_qoriq: fix overflow in ptp_qoriq_adjfine() u64 calcalation
          - scsi: target: pscsi: Clean up after failure in pscsi_map_sg()
          - [ia64] mca: allocate early mca with GFP_ATOMIC
          - [ia64] fix format strings for err_inject
          - cifs: revalidate mapping when we open files for SMB1 POSIX
          - cifs: Silently ignore unknown oplock break handle
          - io_uring: fix timeout cancel return code
          - math: Export mul_u64_u64_div_u64
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.30
          - ALSA: aloop: Fix initialization of controls
          - ALSA: hda/realtek: Fix speaker amp setup on Acer Aspire E1
          - ALSA: hda/conexant: Apply quirk for another HP ZBook G5 model
          - [x86] ASoC: intel: atom: Stop advertising non working S24LE support
          - nfc: fix refcount leak in llcp_sock_bind() (CVE-2020-25670)
          - nfc: fix refcount leak in llcp_sock_connect() (CVE-2020-25671)
          - nfc: fix memory leak in llcp_sock_connect() (CVE-2020-25672)
          - nfc: Avoid endless loops caused by repeated llcp_sock_connect()
          - selinux: make nslot handling in avtab more robust
          - selinux: fix cond_list corruption when changing booleans
          - selinux: fix race between old and new sidtab
          - xen/evtchn: Change irq_info lock to raw_spinlock_t
          - net: ipv6: check for validity before dereferencing cfg->fc_nlinfo.nlh
          - [x86] drm/i915: Fix invalid access to ACPI _DSM objects
          - [amd64] IB/hfi1: Fix probe time panic when AIP is enabled with a buggy
            BIOS
          - LOOKUP_MOUNTPOINT: we are cleaning "jumped" flag too late
          - [ia64] fix user_stack_pointer() for ptrace()
          - ocfs2: fix deadlock between setattr and dio_end_io_write
          - fs: direct-io: fix missing sdio->boundary
          - ethtool: fix incorrect datatype in set_eee ops
          - of: property: fw_devlink: do not link ".*,nr-gpios"
          - [armhf] dts: turris-omnia: configure LED[2]/INTn pin as interrupt pin
          - batman-adv: initialize "struct batadv_tvlv_tt_vlan_data"->reserved field
          - ice: Continue probe on link/PHY errors
          - ice: Increase control queue timeout
          - ice: prevent ice_open and ice_stop during reset
          - ice: fix memory allocation call
          - ice: remove DCBNL_DEVRESET bit from PF state
          - ice: Fix for dereference of NULL pointer
          - ice: Use port number instead of PF ID for WoL
          - ice: Cleanup fltr list in case of allocation issues
          - iwlwifi: pcie: properly set LTR workarounds on 22000 devices
          - ice: fix memory leak of aRFS after resuming from suspend
          - net: hso: fix null-ptr-deref during tty device unregistration
          - bpf: Enforce that struct_ops programs be GPL-only
          - bpf: link: Refuse non-O_RDWR flags in BPF_OBJ_GET
          - ethernet/netronome/nfp: Fix a use after free in nfp_bpf_ctrl_msg_rx
          - bpf: Refcount task stack in bpf_get_task_stack
          - bpf, sockmap: Fix sk->prot unhash op reset
          - bpf, sockmap: Fix incorrect fwd_alloc accounting
          - net: ensure mac header is set in virtio_net_hdr_to_skb()
          - i40e: Fix sparse warning: missing error code 'err'
          - i40e: Fix sparse error: 'vsi->netdev' could be null
          - i40e: Fix sparse error: uninitialized symbol 'ring'
          - i40e: Fix sparse errors in i40e_txrx.c
          - net: sched: sch_teql: fix null-pointer dereference
          - net: sched: fix action overwrite reference counting
          - nl80211: fix beacon head validation
          - nl80211: fix potential leak of ACL params
          - cfg80211: check S1G beacon compat element length
          - mac80211: fix time-is-after bug in mlme
          - mac80211: fix TXQ AC confusion
          - net-ipv6: bugfix - raw & sctp - switch to ipv6_can_nonlocal_bind()
          - net: let skb_orphan_partial wake-up waiters.
          - [x86] thunderbolt: Fix a leak in tb_retimer_add()
          - [x86] thunderbolt: Fix off by one in tb_port_find_retimer()
          - usbip: add sysfs_lock to synchronize sysfs code paths
          - usbip: stub-dev synchronize sysfs code paths
          - usbip: vudc synchronize sysfs code paths
          - usbip: synchronize event handler with sysfs code paths
          - driver core: Fix locking bug in deferred_probe_timeout_work_func()
          - scsi: pm80xx: Fix chip initialization failure
          - scsi: target: iscsi: Fix zero tag inside a trace event
          - percpu: make pcpu_nr_empty_pop_pages per chunk type
          - i2c: turn recovery error on init to debug
          - [x86] KVM: x86/mmu: change TDP MMU yield function returns to match
            cond_resched
          - [x86] KVM: x86/mmu: Merge flush and non-flush tdp_mmu_iter_cond_resched
          - [x86] KVM: x86/mmu: Rename goal_gfn to next_last_level_gfn
          - [x86] KVM: x86/mmu: Ensure forward progress when yielding in TDP MMU iter
          - [x86] KVM: x86/mmu: Yield in TDU MMU iter even if no SPTES changed
          - [x86] KVM: x86/mmu: Ensure TLBs are flushed when yielding during GFN range
            zap
          - [x86] KVM: x86/mmu: Ensure TLBs are flushed for TDP MMU during NX zapping
          - [x86] KVM: x86/mmu: Don't allow TDP MMU to yield when recovering NX pages
          - [x86] KVM: x86/mmu: preserve pending TLB flush across calls to
            kvm_tdp_mmu_zap_sp
          - net: sched: fix err handler in tcf_action_init()
          - ice: Refactor DCB related variables out of the ice_port_info struct
          - ice: Recognize 860 as iSCSI port in CEE mode
          - xfrm: interface: fix ipv4 pmtu check to honor ip header df
          - xfrm: Use actual socket sk instead of skb socket for xfrm_output_resume
          - [armhf] OMAP4: PM: update ROM return address for OSWR and OFF
          - net: xfrm: Localize sequence counter per network namespace
          - esp: delete NETIF_F_SCTP_CRC bit from features for esp offload
          - [x86] ASoC: SOF: Intel: HDA: fix core status verification
          - xfrm: Fix NULL pointer dereference on policy lookup
          - virtchnl: Fix layout of RSS structures
          - i40e: Added Asym_Pause to supported link modes
          - i40e: Fix kernel oops when i40e driver removes VF's
          - vxlan: do not modify the shared tunnel info when PMTU triggers an ICMP
            reply
          - geneve: do not modify the shared tunnel info when PMTU triggers an ICMP
            reply
          - sch_red: fix off-by-one checks in red_check_params()
          - drivers/net/wan/hdlc_fr: Fix a double free in pvc_xmit
          - xfrm: Provide private skb extensions for segmented and hw offloaded ESP
            packets
          - can: bcm/raw: fix msg_namelen values depending on CAN_REQUIRED_SIZE
          - can: isotp: fix msg_namelen values depending on CAN_REQUIRED_SIZE
          - ethernet: myri10ge: Fix a use after free in myri10ge_sw_tso
          - gianfar: Handle error code at MAC address change
          - [arm64,armhf] net: dsa: Fix type was not set for devlink port
          - cxgb4: avoid collecting SGE_QBASE regs during traffic
          - net:tipc: Fix a double free in tipc_sk_mcast_rcv
          - [armhf] net/ncsi: Avoid channel_monitor hrtimer deadlock
          - net: qrtr: Fix memory leak on qrtr_tx_wait failure
          - nfp: flower: ignore duplicate merge hints from FW
          - net: phy: broadcom: Only advertise EEE for supported modes
          - [armhf] ASoC: sunxi: sun4i-codec: fill ASoC card owner (Closes: #980539)
          - net/mlx5e: Fix mapping of ct_label zero
          - net/mlx5e: Fix ethtool indication of connector type
          - net/mlx5: Don't request more than supported EQs
          - net/rds: Fix a use after free in rds_message_map_pages
          - xdp: fix xdp_return_frame() kernel BUG throw for page_pool memory model
          - i40e: Fix display statistics for veb_tc
          - [arm64] drm/msm: Set drvdata to NULL when msm_drm_init() fails
          - net: udp: Add support for getsockopt(..., ..., UDP_GRO, ..., ...);
          - scsi: ufs: core: Fix task management request completion timeout
          - scsi: ufs: core: Fix wrong Task Tag used in task management request UPIUs
          - net: cls_api: Fix uninitialised struct field bo->unlocked_driver_cb
          - [arm64,riscv64] net: macb: restore cmp registers on resume path
          - clk: fix invalid usage of list cursor in register
          - clk: fix invalid usage of list cursor in unregister
          - workqueue: Move the position of debug_work_activate() in __queue_work()
          - [s390x] cpcmd: fix inline assembly register clobbering
          - net: openvswitch: conntrack: simplify the return expression of
            ovs_ct_limit_get_default_limit()
          - openvswitch: fix send of uninitialized stack memory in ct limit reply
          - i2c: designware: Adjust bus_freq_hz when refuse high speed mode set
          - iwlwifi: fix 11ax disabled bit in the regulatory capability flags
          - tipc: increment the tmp aead refcnt before attaching it
          - [arm64] net: hns3: clear VF down state bit before request link status
          - net/mlx5: Fix placement of log_max_flow_counter
          - net/mlx5: Fix PPLM register mapping
          - net/mlx5: Fix PBMC register mapping
          - RDMA/cxgb4: check for ipv6 address properly while destroying listener
          - RDMA/qedr: Fix kernel panic when trying to access recv_cq
          - [arm*] drm/vc4: crtc: Reduce PV fifo threshold on hvs4
          - i40e: Fix parameters in aq_get_phy_register()
          - RDMA/addr: Be strict with gid size
          - [armhf] clk: socfpga: fix iomem pointer cast on 64-bit
          - dt-bindings: net: ethernet-controller: fix typo in NVMEM
          - net: sched: bump refcount for new action in ACT replace mode
          - gpiolib: Read "gpio-line-names" from a firmware node
          - cfg80211: remove WARN_ON() in cfg80211_sme_connect
          - net: tun: set tun->dev->addr_len during TUNSETLINK processing
          - drivers: net: fix memory leak in atusb_probe
          - drivers: net: fix memory leak in peak_usb_create_dev
          - net: mac802154: Fix general protection fault (CVE-2021-33033)
          - net: ieee802154: nl-mac: fix check on panid
          - net: ieee802154: fix nl802154 del llsec key
          - net: ieee802154: fix nl802154 del llsec dev
          - net: ieee802154: fix nl802154 add llsec key
          - net: ieee802154: fix nl802154 del llsec devkey
          - net: ieee802154: forbid monitor for set llsec params
          - net: ieee802154: forbid monitor for del llsec seclevel
          - net: ieee802154: stop dump llsec params for monitors
          - Revert "net: sched: bump refcount for new action in ACT replace mode"
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.31
          - gfs2: Flag a withdraw if init_threads() fails
          - [arm64] KVM: Hide system instruction access to Trace registers
          - [arm64] KVM: Disable guest access to trace filter controls
          - [armhf] drm/imx: imx-ldb: fix out of bounds array access warning
          - gfs2: report "already frozen/thawed" errors
          - ftrace: Check if pages were allocated before calling free_pages()
          - [arm64,armhf] drm/tegra: dc: Don't set PLL clock to 0Hz
          - [arm64,armhf] gpu: host1x: Use different lock classes for each client
          - XArray: Fix splitting to non-zero orders
          - block: only update parent bi_status when bio fail
          - null_blk: fix command timeout completion handling
          - io_uring: don't mark S_ISBLK async work as unbounded
          - [riscv64] entry: fix misaligned base for excp_vect_table
          - block: don't ignore REQ_NOWAIT for direct IO
          - netfilter: x_tables: fix compat match/target pad out-of-bound write
          - net: sfp: relax bitrate-derived mode check
          - net: sfp: cope with SFPs that set both LOS normal and LOS inverted
          - xen/events: fix setting irq affinity
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.32
          - net/sctp: fix race condition in sctp_destroy_sock
          - gpio: sysfs: Obey valid_mask
          - dmaengine: Fix a double free in dma_async_device_register
          - [x86] ACPI: x86: Call acpi_boot_table_init() after acpi_table_upgrade()
          - iwlwifi: Fix softirq/hardirq disabling in iwl_pcie_enqueue_hcmd()
          - xfrm: BEET mode doesn't support fragments for inner packets
          - ASoC: max98373: Changed amp shutdown register as volatile
          - ASoC: max98373: Added 30ms turn on/off time delay
          - [x86] gpu/xen: Fix a use after free in xen_drm_drv_init
          - neighbour: Disregard DEAD dst in neigh_update
          - [arm64] drm/msm: Fix a5xx/a6xx timestamps
          - scsi: scsi_transport_srp: Don't block target in SRP_PORT_LOST state
          - iwlwifi: add support for Qu with AX201 device
          - net: ieee802154: stop dump llsec keys for monitors
          - net: ieee802154: forbid monitor for add llsec key
          - net: ieee802154: forbid monitor for del llsec key
          - net: ieee802154: stop dump llsec devs for monitors
          - net: ieee802154: forbid monitor for add llsec dev
          - net: ieee802154: forbid monitor for del llsec dev
          - net: ieee802154: stop dump llsec devkeys for monitors
          - net: ieee802154: forbid monitor for add llsec devkey
          - net: ieee802154: forbid monitor for del llsec devkey
          - net: ieee802154: stop dump llsec seclevels for monitors
          - net: ieee802154: forbid monitor for add llsec seclevel
          - pcnet32: Use pci_resource_len to validate PCI resource
          - mac80211: clear sta->fast_rx when STA removed from 4-addr VLAN
          - Input: i8042 - fix Pegatron C15B ID entry
          - HID: wacom: set EV_KEY and EV_ABS only for non-HID_GENERIC type of devices
          - readdir: make sure to verify directory entry for legacy interfaces too
          - [arm64] fix inline asm in load_unaligned_zeropad()
          - [arm64] alternatives: Move length validation in alternative_{insn, endif}
          - vfio/pci: Add missing range check in vfio_pci_mmap
          - scsi: libsas: Reset num_scatter if libata marks qc as NODATA
          - ixgbe: fix unbalanced device enable/disable in suspend/resume
          - netfilter: flowtable: fix NAT IPv6 offload mangling
          - netfilter: conntrack: do not print icmpv6 as unknown via /proc
          - ice: Fix potential infinite loop when using u8 loop counter
          - libnvdimm/region: Fix nvdimm_has_flush() to handle ND_REGION_ASYNC
          - netfilter: bridge: add pre_exit hooks for ebtable unregistration
          - netfilter: arp_tables: add pre_exit hook for table unregister
          - [arm64,riscv64] net: macb: fix the restore of cmp registers
          - net/mlx5e: fix ingress_ifindex check in mlx5e_flower_parse_meta
          - netfilter: nft_limit: avoid possible divide error in nft_limit_init
          - net/mlx5e: Fix setting of RS FEC mode
          - net: sit: Unregister catch-all devices
          - net: ip6_tunnel: Unregister catch-all devices
          - mm: ptdump: fix build failure
          - net: Make tcp_allowed_congestion_control readonly in non-init netns
          - i40e: fix the panic when running bpf in xdpdrv mode
          - ethtool: pause: make sure we init driver stats
          - [ia64] tools: remove inclusion of ia64-specific version of errno.h header
          - gro: ensure frag0 meets IP header alignment
          - [armhf] OMAP2+: Fix warning for omap_init_time_of()
          - [armhf] OMAP2+: Fix uninitialized sr_inst
          - [arm64] dts: allwinner: Fix SD card CD GPIO for SOPine systems
          - [arm64] dts: allwinner: h6: beelink-gs1: Remove ext. 32 kHz osc reference
          - bpf: Use correct permission flag for mixed signed bounds arithmetic
            (CVE-2021-29155)
          - [x86] KVM: VMX: Convert vcpu_vmx.exit_reason to a union
          - [x86] KVM: VMX: Don't use vcpu->run->internal.ndata as an array index
            (CVE-2021-3501)
          - r8169: tweak max read request size for newer chips also in jumbo mtu mode
          - r8169: don't advertise pause in jumbo mode
          - bpf: Ensure off_reg has no mixed signed bounds for all types
            (CVE-2021-29155)
          - bpf: Move off_reg into sanitize_ptr_alu (CVE-2021-29155)
          - [armel,armhf] 9071/1: uprobes: Don't hook on thumb instructions
          - [arm64] mte: Ensure TIF_MTE_ASYNC_FAULT is set atomically
          - bpf: Rework ptr_limit into alu_limit and add common error path
            (CVE-2021-29155)
          - bpf: Improve verifier error messages for users (CVE-2021-29155)
          - bpf: Move sanitize_val_alu out of op switch
          - net: phy: marvell: fix detection of PHY on Topaz switches
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.33
          - [armhf] gpio: omap: Save and restore sysconfig
          - [x86] pinctrl: lewisburg: Update number of pins in community
          - block: return -EBUSY when there are open partitions in blkdev_reread_part
          - pinctrl: core: Show pin numbers for the controllers with base = 0
          - [arm64] dts: allwinner: Revert SD card CD GPIO for Pine64-LTS
          - bpf: Permits pointers on stack for helper calls
          - bpf: Allow variable-offset stack access
          - bpf: Refactor and streamline bounds check into helper (CVE-2021-29155)
          - bpf: Tighten speculative pointer arithmetic mask
          - locking/qrwlock: Fix ordering in queued_write_lock_slowpath()
          - [x86] perf/x86/intel/uncore: Remove uncore extra PCI dev HSWEP_PCI_PCU_3
          - [x86] perf/x86/kvm: Fix Broadwell Xeon stepping in isolation_ucodes[]
          - HID: alps: fix error return code in alps_input_configured()
          - HID cp2112: fix support for multiple gpiochips
          - HID: wacom: Assign boolean values to a bool variable
          - net: geneve: check skb is large enough for IPv4/IPv6 header
          - [arm64,armhf] dmaengine: tegra20: Fix runtime PM imbalance on error
          - [s390x] entry: save the caller of psw_idle
          - [arm64] kprobes: Restore local irqflag if kprobes is cancelled
          - xen-netback: Check for hotplug-status existence before watching
          - [x86] crash: Fix crash_setup_memmap_entries() out-of-bounds access
          - net: hso: fix NULL-deref on disconnect regression
          - USB: CDC-ACM: fix poison/unpoison imbalance (Closes: #986995)
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.34
          - iwlwifi: Fix softirq/hardirq disabling in iwl_pcie_gen2_enqueue_hcmd()
          - [x86] mei: me: add Alder Lake P device id.
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.35
          - [mips*] Do not include hi and lo in clobber list for R6
          - netfilter: conntrack: Make global sysctls readonly in non-init netns
          - net: usb: ax88179_178a: initialize local variables before use
          - igb: Enable RSS for Intel I211 Ethernet Controller
          - bpf: Fix masking negation logic upon negative dst register
            (CVE-2021-31829)
          - bpf: Fix leakage of uninitialized bpf stack under speculation
            (CVE-2021-31829)
          - net: qrtr: Avoid potential use after free in MHI send
          - perf data: Fix error return code in perf_data__create_dir()
          - capabilities: require CAP_SETFCAP to map uid 0
          - perf ftrace: Fix access to pid in array when setting a pid filter
          - driver core: add a min_align_mask field to struct device_dma_parameters
          - swiotlb: add a IO_TLB_SIZE define
          - swiotlb: factor out an io_tlb_offset helper
          - swiotlb: factor out a nr_slots helper
          - swiotlb: clean up swiotlb_tbl_unmap_single
          - swiotlb: refactor swiotlb_tbl_map_single
          - swiotlb: don't modify orig_addr in swiotlb_tbl_sync_single
          - swiotlb: respect min_align_mask
          - nvme-pci: set min_align_mask
          - ovl: fix leaked dentry
          - ovl: allow upperdir inside lowerdir
          - ALSA: usb-audio: Add MIDI quirk for Vox ToneLab EX
          - USB: Add LPM quirk for Lenovo ThinkPad USB-C Dock Gen2 Ethernet
          - USB: Add reset-resume quirk for WD19's Realtek Hub
          - [x86] platform/x86: thinkpad_acpi: Correct thermal sensor allocation
          - perf/core: Fix unconditional security_locked_down() call
          - vfio: Depend on MMU
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.36
          - bus: mhi: core: Fix check for syserr at power_up
          - bus: mhi: core: Clear configuration from channel context during reset
          - bus: mhi: core: Sanity check values from remote device before use
          - dyndbg: fix parsing file query without a line-range suffix
          - [s390x] disassembler: increase ebpf disasm buffer size
          - [s390x] zcrypt: fix zcard and zqueue hot-unplug memleak
          - [arm64,x86] tpm: acpi: Check eventlog signature before using it
          - ftrace: Handle commands when closing set_ftrace_filter file
          - ecryptfs: fix kernel panic with null dev_name
          - fs/epoll: restore waking from ep_done_scan()
          - mtd: spi-nor: core: Fix an issue of releasing resources during read/write
          - Revert "mtd: spi-nor: macronix: Add support for mx25l51245g"
          - erofs: add unsupported inode i_format check
          - [armhf] spi: stm32-qspi: fix pm_runtime usage_count counter
          - [armhf] spi: spi-ti-qspi: Free DMA resources
          - scsi: qla2xxx: Fix crash in qla2xxx_mqueuecommand()
          - scsi: mpt3sas: Block PCI config access from userspace during reset
          - mmc: sdhci: Check for reset prior to DMA address unmap
          - mmc: sdhci-pci: Fix initialization of some SD cards for Intel BYT-based
            controllers
          - [arm64,armhf] mmc: sdhci-tegra: Add required callbacks to set/clear CQE_EN
            bit
          - mmc: block: Update ext_csd.cache_ctrl if it was written
          - mmc: block: Issue a cache flush only when it's enabled
          - mmc: core: Do a power cycle when the CMD11 fails
          - mmc: core: Set read only for SD cards with permanent write protect bit
          - mmc: core: Fix hanging on I/O during system suspend for removable cards
          - [arm64,armhf] irqchip/gic-v3: Do not enable irqs when handling spurious
            interrups
          - cifs: Return correct error code from smb2_get_enc_key
          - cifs: fix out-of-bound memory access when calling smb3_notify() at mount
            point
          - cifs: detect dead connections only when echoes are enabled.
          - smb2: fix use-after-free in smb2_ioctl_query_info()
          - btrfs: handle remount to no compress during compression
          - btrfs: fix metadata extent leak after failure to create subvolume
          - [x86] intel_th: pci: Add Rocket Lake CPU support
          - btrfs: fix race between transaction aborts and fsyncs leading to
            use-after-free
          - posix-timers: Preserve return value in clock_adjtime32()
          - fbdev: zero-fill colormap in fbcmap.c
          - [armhf] bus: ti-sysc: Probe for l4_wkup and l4_cfg interconnect devices
            first
          - staging: wimax/i2400m: fix byte-order issue
          - bus: mhi: core: Destroy SBL devices when moving to mission mode
          - crypto: api - check for ERR pointers in crypto_destroy_tfm()
          - [x86] crypto: qat - fix unmap invalid dma address
          - usb: gadget: uvc: add bInterval checking for HS mode
          - usb: webcam: Invalid size of Processing Unit Descriptor
          - [x86] genirq/matrix: Prevent allocation counter corruption
          - usb: gadget: f_uac2: validate input parameters
          - usb: gadget: f_uac1: validate input parameters
          - [arm64,armhf] usb: dwc3: gadget: Ignore EP queue requests during bus reset
          - usb: xhci: Fix port minor revision
          - PCI: PM: Do not read power state in pci_enable_device_flags()
          - [arm64,armhf] soc/tegra: pmc: Fix completion of power-gate toggling
          - [arm64] dts: imx8mq-librem5-r3: Mark buck3 as always on
          - [arm64] tee: optee: do not check memref size on return from Secure World
          - [arm64,x86] soundwire: cadence: only prepare attached devices on clock
            stop
          - [arm*] perf/arm_pmu_platform: Use dev_err_probe() for IRQ errors
          - [arm*] perf/arm_pmu_platform: Fix error handling
          - random: initialize ChaCha20 constants with correct endianness
          - xhci: check port array allocation was successful before dereferencing it
          - xhci: check control context is valid before dereferencing it.
          - xhci: fix potential array out of bounds with several interrupters
          - bus: mhi: core: Clear context for stopped channels from remove()
          - [arm64] spi: qup: fix PM reference leak in spi_qup_remove()
          - [arm64,armhf] usb: musb: fix PM reference leak in musb_irq_work()
          - usb: core: hub: Fix PM reference leak in usb_port_resume()
          - [arm64,armhf] usb: dwc3: gadget: Check for disabled LPM quirk
          - tty: n_gsm: check error while registering tty devices
          - [x86] intel_th: Consistency and off-by-one fix
          - [armhf] phy: phy-twl4030-usb: Fix possible use-after-free in
            twl4030_usb_remove()
          - [arm64] crypto: sun8i-ce - Fix PM reference leak in sun8i_ce_probe()
          - [armhf] crypto: stm32/hash - Fix PM reference leak on stm32-hash.c
          - [armhf] crypto: stm32/cryp - Fix PM reference leak on stm32-cryp.c
          - [x86] platform/x86: intel_pmc_core: Don't use global pmcdev in quirks
          - spi: sync up initial chipselect state
          - btrfs: do proper error handling in create_reloc_root
          - btrfs: do proper error handling in btrfs_update_reloc_root
          - btrfs: convert logic BUG_ON()'s in replace_path to ASSERT()'s
          - drm: Added orientation quirk for OneGX1 Pro
          - drm/qxl: do not run release if qxl failed to init
          - drm/qxl: release shadow on shutdown
          - drm/ast: Fix invalid usage of AST_MAX_HWC_WIDTH in cursor atomic_check
          - drm/ast: fix memory leak when unload the driver
          - drm/amd/display: Check for DSC support instead of ASIC revision
          - drm/amdgpu/display: buffer INTERRUPT_LOW_IRQ_CONTEXT interrupt work
          - scsi: lpfc: Fix incorrect dbde assignment when building target abts wqe
          - scsi: lpfc: Fix pt2pt connection does not recover after LOGO
          - drm/amdgpu: Fix some unload driver issues
          - sched/pelt: Fix task util_est update filtering
          - kvfree_rcu: Use same set of GFP flags as does single-argument
          - scsi: target: pscsi: Fix warning in pscsi_complete_cmd()
          - [x86] media: ite-cir: check for receive overflow
          - power: supply: bq27xxx: fix power_avg for newer ICs
          - media: media/saa7164: fix saa7164_encoder_register() memory leak bugs
          - media: gspca/sq905.c: fix uninitialized variable
          - drm/amdgpu: mask the xgmi number of hops reported from psp to kfd
          - drm/amdgpu : Fix asic reset regression issue introduce by 8f211fe8ac7c4f
          - drm/amd/display: Fix UBSAN warning for not a valid value for type '_Bool'
          - scsi: qla2xxx: Always check the return value of qla24xx_get_isp_stats()
          - scsi: qla2xxx: Fix use after free in bsg
          - [arm64,armhf] mmc: sdhci-esdhc-imx: validate pinctrl before use it
          - mmc: sdhci-pci: Add PCI IDs for Intel LKF
          - ata: ahci: Disable SXS for Hisilicon Kunpeng920
          - nvmet: return proper error code from discovery ctrl
          - scsi: smartpqi: Use host-wide tag space
          - scsi: smartpqi: Correct request leakage during reset operations
          - scsi: smartpqi: Add new PCI IDs
          - scsi: scsi_dh_alua: Remove check for ASC 24h in alua_rtpg()
          - media: em28xx: fix memory leak
          - media: vivid: update EDID
          - [arm64] drm/msm/dp: Fix incorrect NULL check kbot warnings in DP driver
          - [armhf] clk: socfpga: arria10: Fix memory leak of socfpga_clk on error
            return
          - media: dvb-usb: fix memory leak in dvb_usb_adapter_init
          - media: gscpa/stv06xx: fix memory leak
          - sched/fair: Ignore percpu threads for imbalance pulls
          - [arm64] drm/msm/mdp5: Configure PP_SYNC_HEIGHT to double the vtotal
          - [arm64] drm/msm/mdp5: Do not multiply vclk line count by 100
          - drm/amdgpu/ttm: Fix memory leak userptr pages
          - drm/radeon/ttm: Fix memory leak userptr pages
          - drm/amd/display: Try YCbCr420 color when YCbCr444 fails
          - drm/amdgpu: fix NULL pointer dereference
          - scsi: lpfc: Fix crash when a REG_RPI mailbox fails triggering a LOGO
            response
          - scsi: lpfc: Fix error handling for mailboxes completed in MBX_POLL mode
          - scsi: lpfc: Remove unsupported mbox PORT_CAPABILITIES logic
          - mfd: intel-m10-bmc: Fix the register access range
          - mfd: da9063: Support SMBus and I2C mode
          - scsi: libfc: Fix a format specifier
          - perf: Rework perf_event_exit_event()
          - sched,fair: Alternative sched_slice()
          - [s390x] archrandom: add parameter check for s390_arch_random_generate
          - sched,psi: Handle potential task count underflow bugs more gracefully
          - [i386] ALSA: emu8000: Fix a use after free in snd_emu8000_create_mixer
          - ALSA: hda/conexant: Re-order CX5066 quirk table entries
          - [i386] ALSA: sb: Fix two use after free in snd_sb_qsound_build
          - ALSA: usb-audio: Explicitly set up the clock selector
          - ALSA: usb-audio: Add dB range mapping for Sennheiser Communications
            Headset PC 8
          - ALSA: hda/realtek: fix mute/micmute LEDs for HP ProBook 445 G7
          - ALSA: hda/realtek: GA503 use same quirks as GA401
          - ALSA: hda/realtek: fix mic boost on Intel NUC 8
          - ALSA: hda/realtek - Headset Mic issue on HP platform
          - ALSA: hda/realtek: fix static noise on ALC285 Lenovo laptops
          - ALSA: hda/realtek: Add quirk for Intel Clevo PCx0Dx
          - [x86] tools/power/turbostat: Fix turbostat for AMD Zen CPUs
            (Closes: #985681)
          - btrfs: fix race when picking most recent mod log operation for an old root
          - [arm64] vdso: Discard .note.gnu.property sections in vDSO
          - Makefile: Move -Wno-unused-but-set-variable out of GCC only block
          - fs: fix reporting supported extra file attributes for statx()
          - virtiofs: fix memory leak in virtio_fs_probe()
          - ubifs: Only check replay with inode type to judge if inode linked
          - f2fs: fix error handling in f2fs_end_enable_verity()
          - f2fs: fix to avoid out-of-bounds memory access (CVE-2021-3506)
          - openvswitch: fix stack OOB read while fragmenting IPv4 packets
          - [arm64] ACPI: GTDT: Don't corrupt interrupt mappings on watchdow probe
            failure
          - NFS: fs_context: validate UDP retrans to prevent shift out-of-bounds
          - NFS: Don't discard pNFS layout segments that are marked for return
          - NFSv4: Don't discard segments marked for return in _pnfs_return_layout()
          - jffs2: Fix kasan slab-out-of-bounds problem
          - jffs2: Hook up splice_write callback
          - [powerpc*] powernv: Enable HAIL (HV AIL) for ISA v3.1 processors
          - [powerpc*] eeh: Fix EEH handling for hugepages in ioremap space.
          - [x86] intel_th: pci: Add Alder Lake-M support
          - [arm64,x86] tpm: efi: Use local variable for calculating final log size
          - [arm64,x86] tpm: vtpm_proxy: Avoid reading host log when using a virtual
            device
          - [armhf] crypto: arm/curve25519 - Move '.fpu' after '.arch'
          - md/raid1: properly indicate failure when ending a failed write request
          - dm raid: fix inconclusive reshape layout on fast raid4/5/6 table reload
            sequences
          - fuse: fix write deadlock
          - exfat: fix erroneous discard when clear cluster bit
          - sfc: farch: fix TX queue lookup in TX flush done handling
          - sfc: farch: fix TX queue lookup in TX event handling
          - security: commoncap: fix -Wstringop-overread warning
          - Fix misc new gcc warnings
          - jffs2: check the validity of dstlen in jffs2_zlib_compress()
          - smb3: when mounting with multichannel include it in requested capabilities
          - smb3: do not attempt multichannel to server which does not support it
          - Revert 337f13046ff0 ("futex: Allow FUTEX_CLOCK_REALTIME with FUTEX_WAIT
            op")
          - futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI
          - [x86] cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is supported
          - ext4: annotate data race in start_this_handle()
          - ext4: annotate data race in jbd2_journal_dirty_metadata()
          - ext4: fix check to prevent false positive report of incorrect used inodes
          - ext4: do not set SB_ACTIVE in ext4_orphan_cleanup()
          - ext4: fix error code in ext4_commit_super
          - ext4: fix ext4_error_err save negative errno into superblock
          - ext4: fix error return code in ext4_fc_perform_commit()
          - ext4: allow the dax flag to be set and cleared on inline directories
          - ext4: Fix occasional generic/418 failure
          - media: dvbdev: Fix memory leak in dvb_media_device_free()
          - media: dvb-usb: Fix use-after-free access
          - media: dvb-usb: Fix memory leak at error in dvb_usb_device_init()
          - media: v4l2-ctrls: fix reference to freed memory
          - [arm64] media: venus: hfi_parser: Don't initialize parser on v1
          - usb: gadget: dummy_hcd: fix gpf in gadget_setup
          - usb: gadget: Fix double free of device descriptor pointers
          - usb: gadget/function/f_fs string table fix for multiple languages
          - [arm64,armhf] usb: dwc3: gadget: Remove FS bInterval_m1 limitation
          - [arm64,armhf] usb: dwc3: gadget: Fix START_TRANSFER link state check
          - [arm64,armhf] usb: dwc3: core: Do core softreset when switch mode
          - [arm*] usb: dwc2: Fix session request interrupt handler
          - tty: fix memory leak in vc_deallocate
          - [x86] tools/power turbostat: Fix offset overflow issue in index converting
          - tracing: Map all PIDs to command lines
          - tracing: Restructure trace_clock_global() to never block
          - dm space map common: fix division bug in sm_ll_find_free_block()
          - dm integrity: fix missing goto in bitmap_flush_interval error handling
          - dm rq: fix double free of blk_mq_tag_set in dev remove after table load
            fails
          - lib/vsprintf.c: remove leftover 'f' and 'F' cases from bstr_printf()
          - [arm*] thermal/drivers/cpufreq_cooling: Fix slab OOB issue
          - thermal/core/fair share: Lock the thermal zone while looping over
            instances
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.37
          - Bluetooth: verify AMP hci_chan before amp_destroy (CVE-2021-33034)
          - bluetooth: eliminate the potential race condition when removing the HCI
            controller (CVE-2021-32399)
          - net/nfc: fix use-after-free llcp_sock_bind/connect (CVE-2021-23134)
          - io_uring: truncate lengths larger than MAX_RW_COUNT on provide buffers
            (CVE-2021-3491)
          - Revert "USB: cdc-acm: fix rounding error in TIOCSSERIAL"
          - usb: roles: Call try_module_get() from usb_role_switch_find_by_fwnode()
          - [amd64] tty: moxa: fix TIOCSSERIAL jiffies conversions
          - USB: serial: usb_wwan: fix TIOCSSERIAL jiffies conversions
          - USB: serial: ti_usb_3410_5052: fix TIOCSSERIAL permission check
          - [amd64] tty: moxa: fix TIOCSSERIAL permission check
          - [x86] usb: typec: tcpm: Address incorrect values of tcpm psy for fixed
            supply
          - [x86] usb: typec: tcpm: Address incorrect values of tcpm psy for pps
            supply
          - [x86] usb: typec: tcpm: update power supply once partner accepts
          - FDDI: defxx: Bail out gracefully with unassigned PCI resource for CSR
          - PCI: Allow VPD access for QLogic ISP2722
          - [x86] KVM: Defer the MMU unload to the normal path on an global INVPCID
          - [arm64] PCI: xgene: Fix cfg resource mapping
          - PM / devfreq: Unlock mutex and free devfreq struct in error path
          - iio: inv_mpu6050: Fully validate gyro and accel scale writes
          - iio:accel:adis16201: Fix wrong axis assignment that prevents loading
          - iio:adc:ad7476: Fix remove handling
          - misc: lis3lv02d: Fix false-positive WARN on various HP models
          - [x86] misc: vmw_vmci: explicitly initialize vmci_notify_bm_set_msg struct
          - [x86] misc: vmw_vmci: explicitly initialize vmci_datagram payload
          - selinux: add proper NULL termination to the secclass_map permissions
          - [x86] sched: Treat Intel SNC topology as default, COD as exception
          - async_xor: increase src_offs when dropping destination page
          - md/bitmap: wait for external bitmap writes to complete during tear down
          - md-cluster: fix use-after-free issue when removing rdev
          - md: split mddev_find
          - md: factor out a mddev_find_locked helper from mddev_find
          - md: md_open returns -EBUSY when entering racing area
          - md: Fix missing unused status line of /proc/mdstat
          - ipw2x00: potential buffer overflow in libipw_wx_set_encodeext()
          - cfg80211: scan: drop entry from hidden_list on overflow
          - rtw88: Fix array overrun in rtw_get_tx_power_params()
          - mt76: fix potential DMA mapping leak
          - [amd64] drm/i915/gvt: Fix virtual display setup for BXT/APL
          - [amd64] drm/i915/gvt: Fix vfio_edid issue for BXT/APL
          - drm/qxl: use ttm bo priorities
          - [arm64,armhf] drm/panfrost: Clear MMU irqs before handling the fault
          - [arm64,armhf] drm/panfrost: Don't try to map pages that are already mapped
          - drm/radeon: fix copy of uninitialized variable back to userspace
          - drm/dp_mst: Revise broadcast msg lct & lcr
          - drm/dp_mst: Set CLEAR_PAYLOAD_ID_TABLE as broadcast
          - drm: bridge/panel: Cleanup connector on bridge detach
          - drm/amd/display: Reject non-zero src_y and src_x for video planes
          - drm/amdgpu: fix concurrent VM flushes on Vega/Navi v2
          - ALSA: hda/realtek: Re-order ALC882 Acer quirk table entries
          - ALSA: hda/realtek: Re-order ALC882 Sony quirk table entries
          - ALSA: hda/realtek: Re-order ALC882 Clevo quirk table entries
          - ALSA: hda/realtek: Re-order ALC269 HP quirk table entries
          - ALSA: hda/realtek: Re-order ALC269 Acer quirk table entries
          - ALSA: hda/realtek: Re-order ALC269 Dell quirk table entries
          - ALSA: hda/realtek: Re-order ALC269 ASUS quirk table entries
          - ALSA: hda/realtek: Re-order ALC269 Sony quirk table entries
          - ALSA: hda/realtek: Re-order ALC269 Lenovo quirk table entries
          - ALSA: hda/realtek: Re-order remaining ALC269 quirk table entries
          - ALSA: hda/realtek: Re-order ALC662 quirk table entries
          - ALSA: hda/realtek: Remove redundant entry for ALC861 Haier/Uniwill devices
          - ALSA: hda/realtek: ALC285 Thinkpad jack pin quirk is unreachable
          - ALSA: hda/realtek: Fix speaker amp on HP Envy AiO 32
          - [s390x] KVM: VSIE: correctly handle MVPG when in VSIE
          - [s390x] KVM: split kvm_s390_logical_to_effective
          - [s390x] KVM: fix guarded storage control register handling
          - [s390x] fix detection of vector enhancements facility 1 vs. vector packed
            decimal facility
          - [s390x] KVM: VSIE: fix MVPG handling for prefixing and MSO
          - [s390x] KVM: split kvm_s390_real_to_abs
          - [s390x] KVM: extend kvm_s390_shadow_fault to return entry pointer
          - [x86] KVM: x86/mmu: Alloc page for PDPTEs when shadowing 32-bit NPT with
            64-bit
          - [x86] KVM: x86: Remove emulator's broken checks on CR0/CR3/CR4 loads
          - [x86] KVM: nSVM: Set the shadow root level to the TDP level for nested NPT
          - [x86] KVM: SVM: Don't strip the C-bit from CR2 on #PF interception
          - [x86] KVM: SVM: Do not allow SEV/SEV-ES initialization after vCPUs are
            created
          - [x86] KVM: SVM: Inject #GP on guest MSR_TSC_AUX accesses if RDTSCP
            unsupported
          - [x86] KVM: nVMX: Defer the MMU reload to the normal path on an EPTP switch
          - [x86] KVM: nVMX: Truncate bits 63:32 of VMCS field on nested check in
            !64-bit
          - [x86] KVM: nVMX: Truncate base/index GPR value on address calc in !64-bit
          - [arm64] KVM: arm/arm64: Fix KVM_VGIC_V3_ADDR_TYPE_REDIST read
          - KVM: Destroy I/O bus devices on unregister failure _after_ sync'ing SRCU
          - KVM: Stop looking for coalesced MMIO zones if the bus is destroyed
          - [arm64] KVM: Fully zero the vcpu state on reset
          - [arm64] KVM: arm64: Fix KVM_VGIC_V3_ADDR_TYPE_REDIST_REGION read
          - Revert "drivers/net/wan/hdlc_fr: Fix a double free in pvc_xmit"
          - Revert "i3c master: fix missing destroy_workqueue() on error in
            i3c_master_register"
          - ovl: fix missing revert_creds() on error path
          - Revert "drm/qxl: do not run release if qxl failed to init"
          - [x86] usb: gadget: pch_udc: Revert d3cb25a12138 completely
          - Revert "tools/power turbostat: adjust for temperature offset"
          - [arm64] firmware: xilinx: Fix dereferencing freed memory
          - [armhf] memory: gpmc: fix out of bounds read and dereference on gpmc_cs[]
          - [armhf] ARM: dts: exynos: correct fuel gauge interrupt trigger level on
            GT-I9100
          - [armhf] ARM: dts: exynos: correct PMIC interrupt trigger level on SMDK5250
          - [armhf] serial: stm32: fix code cleaning warnings and checks
          - [armhf] serial: stm32: add "_usart" prefix in functions name
          - [armhf] serial: stm32: fix probe and remove order for dma
          - [armhf] serial: stm32: Use of_device_get_match_data()
          - [armhf] serial: stm32: fix startup by enabling usart for reception
          - [armhf] serial: stm32: fix incorrect characters on console
          - [armhf] serial: stm32: fix TX and RX FIFO thresholds
          - [armhf] serial: stm32: fix a deadlock condition with wakeup event
          - [armhf] serial: stm32: fix wake-up flag handling
          - [armhf] serial: stm32: fix a deadlock in set_termios
          - [armhf] serial: stm32: fix tx dma completion, release channel
          - [armhf] serial: stm32: call stm32_transmit_chars locked
          - [armhf] serial: stm32: fix FIFO flush in startup and set_termios
          - [armhf] serial: stm32: add FIFO flush when port is closed
          - [armhf] serial: stm32: fix tx_empty condition
          - [x86] usb: typec: tps6598x: Fix return value check in tps6598x_probe()
          - regmap: set debugfs_name to NULL after it is freed
          - [arm64,armhf] spi: rockchip: avoid objtool warning
          - mtd: Handle possible -EPROBE_DEFER from parse_mtd_partitions()
          - mtd: don't lock when recursively deleting partitions
          - mtd: maps: fix error return code of physmap_flash_remove()
          - [arm64] dts: qcom: db845c: fix correct powerdown pin for WSA881x
          - [armhf] spi: stm32: drop devres version of spi_register_master
          - [armhf] spi: stm32: Fix use-after-free on unbind
          - [x86] microcode: Check for offline CPUs before requesting new microcode
          - devtmpfs: fix placement of complete() call
          - [x86] usb: gadget: pch_udc: Replace cpu_to_le32() by lower_32_bits()
          - [x86] usb: gadget: pch_udc: Check if driver is present before calling
            ->setup()
          - [x86] usb: gadget: pch_udc: Check for DMA mapping error
          - [x86] usb: gadget: pch_udc: Initialize device pointer before use
          - [x86] usb: gadget: pch_udc: Provide a GPIO line used on Intel Minnowboard
            (v1)
          - [amd64] crypto: ccp - fix command queuing to TEE ring buffer
          - [x86] crypto: qat - don't release uninitialized resources
          - [x86] crypto: qat - ADF_STATUS_PF_RUNNING should be set after adf_dev_init
          - dt-bindings: serial: stm32: Use 'type: object' instead of false for
            'additionalProperties'
          - mtd: require write permissions for locking and badblock ioctls
          - [arm64] bus: qcom: Put child node before return
          - soundwire: bus: Fix device found flag correctly
          - NFSD: Fix sparse warning in nfs4proc.c
          - NFSv4.2: fix copy stateid copying for the async copy
          - crypto: poly1305 - fix poly1305_core_setkey() declaration
          - [x86] crypto: qat - fix error path in adf_isr_resource_alloc()
          - [armhf] usb: gadget: aspeed: fix dma map failure
          - [arm64] drivers: nvmem: Fix voltage settings for QTI qfprom-efuse
          - driver core: platform: Declare early_platform_cleanup() prototype
          - [armel,armhf] memory: pl353: fix mask of ECC page_size config register
          - soundwire: stream: fix memory leak in stream config error path
          - [arm64] firmware: qcom_scm: Make __qcom_scm_is_call_available() return
            bool
          - [arm64] firmware: qcom_scm: Reduce locking section for __get_convention()
          - [arm64] firmware: qcom_scm: Workaround lack of "is available" call on
            SC7180
          - [arm64,armhf] irqchip/gic-v3: Fix OF_BAD_ADDR error handling
          - [x86] staging: rtl8192u: Fix potential infinite loop
          - PM / devfreq: Use more accurate returned new_freq as resume_freq
          - [armhf] clocksource/drivers/timer-ti-dm: Fix posted mode status check
            order
          - [armhf] clocksource/drivers/timer-ti-dm: Add missing
            set_state_oneshot_stopped
          - spi: Fix use-after-free with devm_spi_alloc_*
          - [arm64] soc: qcom: mdt_loader: Validate that p_filesz < p_memsz
          - [arm64] soc: qcom: mdt_loader: Detect truncated read of segments
          - PM: runtime: Replace inline function pm_runtime_callbacks_present()
          - [amd64,arm64] ACPI: CPPC: Replace cppc_attr with kobj_attribute
          - [x86] crypto: qat - Fix a double free in adf_create_ring
          - [arm64] cpufreq: armada-37xx: Fix setting TBG parent for load levels
          - [arm64] clk: mvebu: armada-37xx-periph: remove .set_parent method for CPU
            PM clock
          - [arm64] cpufreq: armada-37xx: Fix the AVS value for load L1
          - [arm64] clk: mvebu: armada-37xx-periph: Fix switching CPU freq from 250
            Mhz to 1 GHz
          - [arm64] clk: mvebu: armada-37xx-periph: Fix workaround for switching from
            L1 to L0
          - [arm64] cpufreq: armada-37xx: Fix driver cleanup when registration failed
          - [arm64] cpufreq: armada-37xx: Fix determining base CPU frequency
          - USB: cdc-acm: fix unprivileged TIOCCSERIAL
          - USB: cdc-acm: fix TIOCGSERIAL implementation
          - tty: actually undefine superseded ASYNC flags
          - tty: fix return value for unsupported ioctls
          - tty: fix return value for unsupported termiox ioctls
          - serial: core: return early on unsupported ioctls
          - node: fix device cleanups in error handling code
          - crypto: chelsio - Read rxchannel-id from firmware
          - usbip: vudc: fix missing unlock on error in usbip_sockfd_store()
          - security: keys: trusted: fix TPM2 authorizations
          - [x86] platform/x86: pmc_atom: Match all Beckhoff Automation baytrail
            boards with critclk_systems DMI table
          - [armhf] dts: aspeed: Rainier: Fix humidity sensor bus address
          - [x86] Drivers: hv: vmbus: Use after free in __vmbus_open()
          - [x86] Drivers: hv: vmbus: Increase wait time for VMbus unload
          - [x86] PM: hibernate: x86: Use crc32 instead of md5 for hibernation e820
            integrity check
          - [arm*] usb: dwc2: Fix host mode hibernation exit with remote wakeup flow.
          - [arm*] usb: dwc2: Fix hibernation between host and device modes.
          - ttyprintk: Add TTY hangup callback.
          - [armhf] serial: omap: don't disable rs485 if rts gpio is missing
          - [armhf] serial: omap: fix rs485 half-duplex filtering
          - xen-blkback: fix compatibility bug with single page rings
          - [armhf] soc: aspeed: fix a ternary sign expansion bug
          - [armhf] drm/tilcdc: send vblank event when disabling crtc
          - [armhf] drm/stm: Fix bus_flags handling
          - drm/amd/display: Fix off by one in hdmi_14_process_transaction()
          - sched/fair: Fix shift-out-of-bounds in load_balance()
          - afs: Fix updating of i_mode due to 3rd party change
          - rcu: Remove spurious instrumentation_end() in rcu_nmi_enter()
          - media: vivid: fix assignment of dev->fbuf_out_flags
          - media: saa7134: use sg_dma_len when building pgtable
          - media: saa7146: use sg_dma_len when building pgtable
          - [armhf] media: aspeed: fix clock handling logic
          - drm/probe-helper: Check epoch counter in output_poll_execute()
          - [arm64] media: venus: core: Fix some resource leaks in the error path of
            'venus_probe()'
          - media: m88ds3103: fix return value check in m88ds3103_probe()
          - media: m88rs6000t: avoid potential out-of-bounds reads on arrays
          - [x86] kprobes: Fix to check non boostable prefixes correctly
          - sata_mv: add IRQ checks
          - ata: libahci_platform: fix IRQ check
          - seccomp: Fix CONFIG tests for Seccomp_filters
          - nvme-tcp: block BH in sk state_change sk callback
          - nvmet-tcp: fix incorrect locking in state_change sk callback
          - [armhf] clk: imx: Fix reparenting of UARTs not associated with stdout
          - nvme: retrigger ANA log update if group descriptor isn't found
          - media: v4l2-ctrls.c: fix race condition in hdl->requests list
          - vfio/pci: Move VGA and VF initialization to functions
          - vfio/pci: Re-order vfio_pci_probe()
          - [amd64] vfio/mdev: Do not allow a mdev_type to have a NULL parent pointer
          - drm/amd/display: use GFP_ATOMIC in dcn20_resource_construct
          - drm/radeon: Fix a missing check bug in radeon_dp_mst_detect()
          - scsi: pm80xx: Increase timeout for pm80xx mpi_uninit_check()
          - scsi: pm80xx: Fix potential infinite loop
          - scsi: ufs: ufshcd-pltfrm: Fix deferred probing
          - [amd64] scsi: hisi_sas: Fix IRQ checks
          - [powerpc*] scsi: ibmvfc: Fix invalid state machine BUG_ON()
          - nvmet-tcp: fix a segmentation fault during io parsing error
          - nvme-pci: don't simple map sgl when sgls are disabled
          - [armhf] HSI: core: fix resource leaks in hsi_add_client_from_dt()
          - [amd64] x86/events/amd/iommu: Fix sysfs type mismatch
          - [x86] perf/amd/uncore: Fix sysfs type mismatch
          - io_uring: fix overflows checks in provide buffers
          - sched/debug: Fix cgroup_path[] serialization
          - drivers/block/null_blk/main: Fix a double free in null_init.
          - xsk: Respect device's headroom and tailroom on generic xmit path
          - HID: plantronics: Workaround for double volume key presses
          - RDMA/mlx5: Fix mlx5 rates to IB rates map
          - [x86] KVM: x86/mmu: Retry page faults that hit an invalid memslot
          - Bluetooth: avoid deadlock between hci_dev->lock and socket lock
          - bpftool: Fix maybe-uninitialized warnings
          - iommu: Check dev->iommu in iommu_dev_xxx functions
          - [amd64] iommu/vt-d: Reject unsupported page request modes
          - [powerpc*] prom: Mark identical_pvr_fixup as __init
          - inet: use bigger hash table for IP ID generation
          - [arm64,armhf] pinctrl: pinctrl-single: remove unused parameter
          - [arm64,armhf] pinctrl: pinctrl-single: fix pcs_pin_dbg_show() when
            bits_per_mux is not zero
          - [mips64el,mipsel] loongson64: fix bug when PAGE_SIZE > 16KB
          - RDMA/mlx5: Fix drop packet rule in egress table
          - IB/isert: Fix a use after free in isert_connect_request
          - gpio: guard gpiochip_irqchip_add_domain() with GPIOLIB_IRQCHIP
          - ALSA: core: remove redundant spin_lock pair in snd_card_disconnect
          - net: phy: lan87xx: fix access to wrong register of LAN87xx
          - udp: never accept GSO_FRAGLIST packets
          - [powerpc*] pseries: Only register vio drivers if vio bus exists
          - net/tipc: fix missing destroy_workqueue() on error in tipc_crypto_start()
          - bug: Remove redundant condition check in report_bug
          - RDMA/core: Fix corrupted SL on passive side
          - nfc: pn533: prevent potential memory corruption
          - [arm64] net: hns3: Limiting the scope of vector_ring_chain variable
          - [amd64] iommu/vt-d: Don't set then clear private data in
            prq_event_thread()
          - iommu: Fix a boundary issue to avoid performance drop
          - [amd64] iommu/vt-d: Report right snoop capability when using FL for IOVA
          - [amd64] iommu/vt-d: Report the right page fault address
          - [amd64] iommu/vt-d: Preset Access/Dirty bits for IOVA over FL
          - [amd64] iommu/vt-d: Remove WO permissions on second-level paging entries
          - [amd64] iommu/vt-d: Invalidate PASID cache when root/context entry changed
          - ALSA: usb-audio: Add error checks for usb_driver_claim_interface() calls
          - HID: lenovo: Use brightness_set_blocking callback for setting LEDs
            brightness
          - HID: lenovo: Fix lenovo_led_set_tp10ubkbd() error handling
          - HID: lenovo: Check hid_get_drvdata() returns non NULL in lenovo_event()
          - HID: lenovo: Map mic-mute button to KEY_F20 instead of KEY_MICMUTE
          - [arm64] KVM: Initialize VCPU mdcr_el2 before loading it
          - [arm*] ASoC: simple-card: fix possible uninitialized single_cpu local
            variable
          - [amd64] IB/hfi1: Use kzalloc() for mmu_rb_handler allocation
          - [powerpc*] 64s: Fix pte update for kernel memory on radix
          - [powerpc*] perf: Fix PMU constraint check for EBB events
          - mac80211: bail out if cipher schemes are invalid
          - perf vendor events amd: Fix broken L2 Cache Hits from L2 HWPF metric
          - xfs: fix return of uninitialized value in variable error
          - rtw88: Fix an error code in rtw_debugfs_set_rsvd_page()
          - mt7601u: fix always true expression
          - [powerpc*] KVM: PPC: Book3S HV P9: Restore host CTRL SPR after guest exit
          - ovl: invalidate readdir cache on changes to dir with origin
          - RDMA/qedr: Fix error return code in qedr_iw_connect()
          - [amd64] IB/hfi1: Fix error return code in parse_platform_config()
          - cxgb4: Fix unintentional sign extension issues
          - [arm64] net: thunderx: Fix unintentional sign extension issue
          - RDMA/srpt: Fix error return code in srpt_cm_req_recv()
          - [arm64,armhf] i2c: imx: fix reference leak when pm_runtime_get_sync fails
          - [armhf] i2c: omap: fix reference leak when pm_runtime_get_sync fails
          - [armhf] i2c: stm32f7: fix reference leak when pm_runtime_get_sync fails
          - [powerpc*] xive: Drop check on irq_data in xive_core_debug_show()
          - [powerpc*] xive: Fix xmon command "dxi"
          - net/packet: make packet_fanout.arr size configurable up to 64K
          - net/packet: remove data races in fanout operations
          - [amd64] drm/i915/gvt: Fix error code in intel_gvt_init_device()
          - [amd64] iommu/amd: Put newline after closing bracket in warning
          - [mips64el,mipsel] pci-legacy: stop using of_pci_range_to_resource
          - [powerpc*] pseries: extract host bridge from pci_bus prior to bus removal
          - [powerpc*] smp: Reintroduce cpu_core_mask
          - [x86] KVM: dump_vmcs should not assume GUEST_IA32_EFER is valid
          - rtlwifi: 8821ae: upgrade PHY and RF parameters
          - [arm64,armhf] wlcore: fix overlapping snprintf arguments in debugfs
          - mwl8k: Fix a double Free in mwl8k_probe_hw
          - netfilter: nft_payload: fix C-VLAN offload support
          - netfilter: nftables_offload: VLAN id needs host byteorder in flow
            dissector
          - netfilter: nftables_offload: special ethertype handling for VLAN
          - [x86] vsock/vmci: log once the failed queue pair allocation
          - gro: fix napi_gro_frags() Fast GRO breakage due to IP alignment check
          - RDMA/cxgb4: add missing qpid increment
          - RDMA/i40iw: Fix error unwinding when i40iw_hmc_sd_one fails
          - ALSA: usb: midi: don't return -ENOMEM when usb_urb_ep_type_check fails
          - sfc: ef10: fix TX queue lookup in TX event handling
          - vsock/virtio: free queued packets when closing socket
          - [armhf] net: davinci_emac: Fix incorrect masking of tx and rx error
            channel
          - [amd64] crypto: ccp: Detect and reject "invalid" addresses destined for
            PSP
          - nfp: devlink: initialize the devlink port attribute "lanes"
          - net: stmmac: fix TSO and TBS feature enabling during driver open
          - RDMA/rxe: Fix a bug in rxe_fill_ip_info()
          - RDMA/core: Add CM to restrack after successful attachment to a device
          - [powerpc*] 64: Fix the definition of the fixmap area
          - ath9k: Fix error check in ath9k_hw_read_revisions() for PCI devices
          - ath10k: Fix a use after free in ath10k_htc_send_bundle
          - ath10k: Fix ath10k_wmi_tlv_op_pull_peer_stats_info() unlock without lock
          - wlcore: Fix buffer overrun by snprintf due to incorrect buffer size
          - [powerpc*] perf: Fix the threshold event selection for memory events in
            power10
          - net: phy: marvell: fix m88e1011_set_downshift
          - net: phy: marvell: fix m88e1111_set_downshift
          - bnxt_en: fix ternary sign extension bug in bnxt_show_temp()
          - net: geneve: modify IP header check in geneve6_xmit_skb and
            geneve_xmit_skb
          - bnxt_en: Fix RX consumer index logic in the error path.
          - [x86] KVM: VMX: Intercept FS/GS_BASE MSR accesses for 32-bit KVM
          - [arm64] net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send
          - bpf: Fix propagation of 32 bit unsigned bounds from 64 bit bounds
          - net: bridge: mcast: fix broken length + header check for MRDv6 Adv.
          - net:nfc:digital: Fix a double free in digital_tg_recv_dep_req
          - perf tools: Change fields type in perf_record_time_conv
          - perf jit: Let convert_timestamp() to be backwards-compatible
          - perf session: Add swap operation for event TIME_CONV
          - mm/sl?b.c: remove ctor argument from kmem_cache_flags
          - mm: memcontrol: slab: fix obtain a reference to a freeing memcg
          - mm/sparse: add the missing sparse_buffer_fini() in error branch
          - mm/memory-failure: unnecessary amount of unmapping
          - afs: Fix speculative status fetches
          - bpf: Fix alu32 const subreg bound tracking on bitwise operations
            (CVE-2021-3490)
          - bpf, ringbuf: Deny reserve of buffers larger than ringbuf (CVE-2021-3489)
          - bpf: Prevent writable memory-mapping of read-only ringbuf pages
          - [arm64] Remove arm64_dma32_phys_limit and its uses
          - net: Only allow init netns to set default tcp cong to a restricted algo
          - smp: Fix smp_call_function_single_async prototype
          - Revert "net/sctp: fix race condition in sctp_destroy_sock"
          - sctp: delay auto_asconf init until binding the first addr (CVE-2021-23133)
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.38
          - [arm64,x86] tpm: fix error return code in tpm2_get_cc_attrs_tbl()
          - [arm64,x86] tpm, tpm_tis: Extend locality handling to TPM2 in
            tpm_tis_gen_interrupt()
          - [arm64,x86] tpm, tpm_tis: Reserve locality in tpm_tis_resume()
          - [x86] KVM: x86/mmu: Remove the defunct update_pte() paging hook
          - [x86] KVM/VMX: Invoke NMI non-IST entry instead of IST entry
          - ACPI: PM: Add ACPI ID of Alder Lake Fan
          - PM: runtime: Fix unpaired parent child_count for force_resume
          - [x86] cpufreq: intel_pstate: Use HWP if enabled by platform firmware
          - kvm: Cap halt polling at kvm->max_halt_poll_ns
          - ath11k: fix thermal temperature read
          - fs: dlm: fix debugfs dump
          - fs: dlm: add errno handling to check callback
          - fs: dlm: check on minimum msglen size
          - fs: dlm: flush swork on shutdown
          - tipc: convert dest node's address to network order
          - [x86] ASoC: Intel: bytcr_rt5640: Enable jack-detect support on Asus
            T100TAF
          - net/mlx5e: Use net_prefetchw instead of prefetchw in MPWQE TX datapath
          - [arm64] net: stmmac: Set FIFO sizes for ipq806x
          - Bluetooth: Fix incorrect status handling in LE PHY UPDATE event
          - i2c: bail out early when RDWR parameters are wrong
          - ALSA: hdsp: don't disable if not enabled
          - ALSA: hdspm: don't disable if not enabled
          - ALSA: rme9652: don't disable if not enabled
          - ALSA: bebob: enable to deliver MIDI messages for multiple ports
          - Bluetooth: Set CONF_NOT_COMPLETE as l2cap_chan default
          - Bluetooth: initialize skb_queue_head at l2cap_chan_create()
          - net/sched: cls_flower: use ntohs for struct flow_dissector_key_ports
          - net: bridge: when suppression is enabled exclude RARP packets
          - Bluetooth: check for zapped sk before connecting
          - [powerpc] 32: Statically initialise first emergency context
          - [arm64] net: hns3: remediate a potential overflow risk of bd_num_list
          - [arm64] net: hns3: add handling for xmit skb with recursive fraglist
          - ip6_vti: proper dev_{hold|put} in ndo_[un]init methods
          - [x86] ASoC: Intel: bytcr_rt5640: Add quirk for the Chuwi Hi8 tablet
          - ice: handle increasing Tx or Rx ring sizes
          - Bluetooth: btusb: Enable quirk boolean flag for Mediatek Chip.
          - [x86] ASoC: rt5670: Add a quirk for the Dell Venue 10 Pro 5055
          - i2c: Add I2C_AQ_NO_REP_START adapter quirk
          - [mips64el,mipsel] MIPS: Loongson64: Use _CACHE_UNCACHED instead of
            _CACHE_UNCACHED_ACCELERATED
          - [amd64] IB/hfi1: Correct oversized ring allocation
          - mac80211: clear the beacon's CRC after channel switch
          - [armhf] pinctrl: samsung: use 'int' for register masks in Exynos
          - rtw88: 8822c: add LC calibration for RTL8822C
          - mt76: mt76x0: disable GTK offloading
          - fuse: invalidate attrs when page writeback completes
          - virtiofs: fix userns
          - cuse: prevent clone
          - iwlwifi: pcie: make cfg vs. trans_cfg more robust
          - [powerpc*] mm: Add cond_resched() while removing hpte mappings
          - Revert "iommu/amd: Fix performance counter initialization"
          - [amd64] iommu/amd: Remove performance counter pre-initialization test
          - ALSA: hda/realtek: Add quirk for Lenovo Ideapad S740
          - [x86] ASoC: Intel: sof_sdw: add quirk for new ADL-P Rvp
          - ALSA: hda/hdmi: fix race in handling acomp ELD notification at resume
          - sctp: Fix out-of-bounds warning in sctp_process_asconf_param()
          - flow_dissector: Fix out-of-bounds warning in __skb_flow_bpf_to_target()
          - [powerpc*] smp: Set numa node before updating mask
          - [x86] ASoC: rt286: Generalize support for ALC3263 codec
          - ethtool: ioctl: Fix out-of-bounds warning in
            store_link_ksettings_for_user()
          - net: sched: tapr: prevent cycle_time == 0 in parse_taprio_schedule
          - [powerpc*] pseries: Stop calling printk in rtas_stop_self()
          - wl3501_cs: Fix out-of-bounds warnings in wl3501_send_pkt
          - wl3501_cs: Fix out-of-bounds warnings in wl3501_mgmt_join
          - [powerpc*] iommu: Annotate nested lock for lockdep
          - iavf: remove duplicate free resources calls
          - kbuild: generate Module.symvers only when vmlinux exists
          - bnxt_en: Add PCI IDs for Hyper-V VF devices.
          - [ia64] module: fix symbolizer crash on fdescr
          - watchdog: rename __touch_watchdog() to a better descriptive name
          - watchdog: explicitly update timestamp when reporting softlockup
          - watchdog/softlockup: remove logic that tried to prevent repeated reports
          - watchdog: fix barriers when printing backtraces from all CPUs
          - [x86] ASoC: rt286: Make RT286_SET_GPIO_* readable and writable
          - thermal: thermal_of: Fix error return code of
            thermal_of_populate_bind_params()
          - f2fs: move ioctl interface definitions to separated file
          - f2fs: fix compat F2FS_IOC_{MOVE,GARBAGE_COLLECT}_RANGE
          - f2fs: fix to allow migrating fully valid segment
          - f2fs: fix panic during f2fs_resize_fs()
          - f2fs: fix a redundant call to f2fs_balance_fs if an error occurs
          - PCI: Release OF node in pci_scan_device()'s error path
          - [armel,armhf] 9064/1: hw_breakpoint: Do not directly check the event's
            overflow_handler hook
          - f2fs: fix to align to section for fallocate() on pinned file
          - f2fs: fix to update last i_size if fallocate partially succeeds
          - f2fs: fix to avoid touching checkpointed data in get_victim()
          - f2fs: fix to cover __allocate_new_section() with curseg_lock
          - f2fs: Fix a hungtask problem in atomic write
          - f2fs: fix to avoid accessing invalid fio in f2fs_allocate_data_block()
          - [arm64] rpmsg: qcom_glink_native: fix error return code of
            qcom_glink_rx_data()
          - NFS: nfs4_bitmask_adjust() must not change the server global bitmasks
          - NFS: Fix attribute bitmask in _nfs42_proc_fallocate()
          - NFSv4.2: Always flush out writes in nfs42_proc_fallocate()
          - NFS: Deal correctly with attribute generation counter overflow
          - pNFS/flexfiles: fix incorrect size check in decode_nfs_fh()
          - NFSv4.2 fix handling of sr_eof in SEEK's reply
          - SUNRPC: Move fault injection call sites
          - SUNRPC: Remove trace_xprt_transmit_queued
          - SUNRPC: Handle major timeout in xprt_adjust_timeout()
          - [arm64] thermal/drivers/tsens: Fix missing put_device error
          - NFSv4.x: Don't return NFS4ERR_NOMATCHING_LAYOUT if we're unmounting
          - nfsd: ensure new clients break delegations
          - SUNRPC: fix ternary sign expansion bug in tracing
          - xprtrdma: Avoid Receive Queue wrapping
          - xprtrdma: Fix cwnd update ordering
          - xprtrdma: rpcrdma_mr_pop() already does list_del_init()
          - swiotlb: Fix the type of index
          - ceph: fix inode leak on getattr error in __fh_to_dentry
          - scsi: qla2xxx: Prevent PRLI in target mode
          - scsi: ufs: core: Do not put UFS power into LPM if link is broken
          - scsi: ufs: core: Cancel rpm_dev_flush_recheck_work during system suspend
          - scsi: ufs: core: Narrow down fast path in system suspend path
          - rtc: ds1307: Fix wday settings for rx8130
          - [arm64] net: hns3: fix incorrect configuration for igu_egu_hw_err
          - [arm64] net: hns3: initialize the message content in hclge_get_link_mode()
          - [arm64] net: hns3: add check for HNS3_NIC_STATE_INITED in
            hns3_reset_notify_up_enet()
          - [arm64] net: hns3: fix for vxlan gpe tx checksum bug
          - [arm64] net: hns3: use netif_tx_disable to stop the transmit queue
          - [arm64] net: hns3: disable phy loopback setting in hclge_mac_start_phy
          - sctp: do asoc update earlier in sctp_sf_do_dupcook_a
          - [riscv64] Fix error code returned by riscv_hartid_to_cpuid()
          - sunrpc: Fix misplaced barrier in call_decode
          - ethernet:enic: Fix a use after free bug in enic_hard_start_xmit
          - sctp: fix a SCTP_MIB_CURRESTAB leak in sctp_sf_do_dupcook_b
          - netfilter: xt_SECMARK: add new revision to fix structure layout
          - net: stmmac: Clear receive all(RA) bit when promiscuous mode is off
          - drm/radeon: Fix off-by-one power_state index heap overwrite
          - drm/radeon: Avoid power table parsing memory leaks
          - [arm64] entry: factor irq triage logic into macros
          - [arm64] entry: always set GIC_PRIO_PSR_I_SET during entry
          - khugepaged: fix wrong result value for
            trace_mm_collapse_huge_page_isolate()
          - mm/hugeltb: handle the error case in hugetlb_fix_reserve_counts()
          - mm/migrate.c: fix potential indeterminate pte entry in
            migrate_vma_insert_page()
          - ksm: fix potential missing rmap_item for stable_node
          - mm/gup: check every subpage of a compound page during isolation
          - mm/gup: return an error on migration failure
          - mm/gup: check for isolation errors
          - ethtool: fix missing NLM_F_MULTI flag when dumping
          - net: fix nla_strcmp to handle more then one trailing null character
          - smc: disallow TCP_ULP in smc_setsockopt()
          - netfilter: nfnetlink_osf: Fix a missing skb_header_pointer() NULL check
          - netfilter: nftables: Fix a memleak from userdata error path in new objects
          - sched: Fix out-of-bound access in uclamp
          - sched/fair: Fix unfairness caused by missing load decay
          - fs/proc/generic.c: fix incorrect pde_is_permanent check
          - kernel: kexec_file: fix error return code of
            kexec_calculate_store_digests()
          - kernel/resource: make walk_system_ram_res() find all busy
            IORESOURCE_SYSTEM_RAM resources
          - kernel/resource: make walk_mem_res() find all busy IORESOURCE_MEM
            resources
          - netfilter: nftables: avoid overflows in nft_hash_buckets()
          - i40e: fix broken XDP support
          - i40e: Fix use-after-free in i40e_client_subtask()
          - i40e: fix the restart auto-negotiation after FEC modified
          - i40e: Fix PHY type identifiers for 2.5G and 5G adapters
          - f2fs: avoid unneeded data copy in f2fs_ioc_move_range()
          - [powerpc*] 64s: Fix crashes when toggling stf barrier
          - [powerpc*] 64s: Fix crashes when toggling entry flush barrier
          - hfsplus: prevent corruption in shrinking truncate
          - squashfs: fix divide error in calculate_skip()
          - userfaultfd: release page in error path to avoid BUG_ON
          - mm/hugetlb: fix F_SEAL_FUTURE_WRITE
          - blk-iocost: fix weight updates of inner active iocgs
          - [arm64] mte: initialize RGSR_EL1.SEED in __cpu_setup
          - [arm64] Fix race condition on PG_dcache_clean in __sync_icache_dcache()
          - btrfs: fix race leading to unpersisted data and metadata on fsync
          - drm/radeon/dpm: Disable sclk switching on Oland when two 4K 60Hz monitors
            are connected
          - [x86] drm/i915: Avoid div-by-zero on gen2
          - kvm: exit halt polling on need_resched() as well
          - [x86] KVM: LAPIC: Accurately guarantee busy wait for timer to expire when
            using hv_timer
          - [arm64] drm/msm/dp: initialize audio_comp when audio starts
          - [x86] KVM: x86: Cancel pvclock_gtod_work on module removal
          - [x86] KVM: x86: Prevent deadlock against tk_core.seq
          - dax: Add an enum for specifying dax wakup mode
          - dax: Add a wakeup mode parameter to put_unlocked_entry()
          - dax: Wake up all waiters after invalidating dax entry
          - [amd64] xen/unpopulated-alloc: consolidate pgmap manipulation
          - [amd64] xen/unpopulated-alloc: fix error return code in fill_list()
          - [arm64,armhf] usb: dwc3: gadget: Free gadget structure only after freeing
            endpoints
          - iio: light: gp2ap002: Fix rumtime PM imbalance on error
          - iio: proximity: pulsedlight: Fix rumtime PM imbalance on error
          - [armhf] hwmon: (occ) Fix poll rate limiting
          - ACPI: scan: Fix a memory leak in an error handling path
          - kyber: fix out of bounds access when preempted
          - nvmet: add lba to sect conversion helpers
          - nvmet: fix inline bio check for bdev-ns
          - nvmet-rdma: Fix NULL deref when SEND is completed with error
          - f2fs: compress: fix to free compress page correctly
          - f2fs: compress: fix race condition of overwrite vs truncate
          - f2fs: compress: fix to assign cc.cluster_idx correctly
          - nbd: Fix NULL pointer in flush_workqueue
          - blk-mq: plug request for shared sbitmap
          - blk-mq: Swap two calls in blk_mq_exit_queue()
          - [armhf] usb: dwc3: omap: improve extcon initialization
          - [arm64] usb: dwc3: pci: Enable usb2-gadget-lpm-disable for Intel
            Merrifield
          - usb: xhci: Increase timeout for HC halt
          - [arm*] usb: dwc2: Fix gadget DMA unmap direction
          - usb: core: hub: fix race condition about TRSMRCY of resume
          - [arm64,armhf] usb: dwc3: gadget: Enable suspend events
          - [arm64,armhf] usb: dwc3: gadget: Return success always for kick transfer
            in ep queue
          - [x86] usb: typec: ucsi: Retrieve all the PDOs instead of just the first 4
          - [x86] usb: typec: ucsi: Put fwnode in any case during ->probe()
          - xhci-pci: Allow host runtime PM as default for Intel Alder Lake xHCI
          - xhci: Do not use GFP_KERNEL in (potentially) atomic context
          - xhci: Add reset resume quirk for AMD xhci controller.
          - iio: gyro: mpu3050: Fix reported temperature value
          - iio: tsl2583: Fix division by a zero lux_val
          - cdc-wdm: untangle a circular dependency between callback and softint
          - xen/gntdev: fix gntdev_mmap() error exit path
          - [x86] KVM: Emulate RDPID only if RDTSCP is supported
          - [x86] KVM: Move RDPID emulation intercept to its own enum
          - [x86] KVM: nVMX: Always make an attempt to map eVMCS after migration
          - [x86] KVM: VMX: Do not advertise RDPID if ENABLE_RDTSCP control is
            unsupported
          - [x86] KVM: VMX: Disable preemption when probing user return MSRs
          - Revert "iommu/vt-d: Remove WO permissions on second-level paging entries"
          - Revert "iommu/vt-d: Preset Access/Dirty bits for IOVA over FL"
          - iommu/vt-d: Preset Access/Dirty bits for IOVA over FL
          - iommu/vt-d: Remove WO permissions on second-level paging entries
          - mm: fix struct page layout on 32-bit systems
          - [mips*] Reinstate platform `__div64_32' handler
          - [mips*] Avoid DIVU in `__div64_32' is result would be zero
          - [mips*] Avoid handcoded DIVU in `__div64_32' altogether
          - [armhf] clocksource/drivers/timer-ti-dm: Prepare to handle dra7 timer wrap
            issue
          - [armhf] clocksource/drivers/timer-ti-dm: Handle dra7 timer wrap errata
            i940
          - [armel,armhf] 9011/1: centralize phys-to-virt conversion of DT/ATAGS
            address
          - [armel,armhf] 9012/1: move device tree mapping out of linear region
          - [armel,armhf] 9020/1: mm: use correct section size macro to describe the
            FDT virtual address
          - [armel,armhf] 9027/1: head.S: explicitly map DT even if it lives in the
            first physical section
          - [x86] usb: typec: tcpm: Fix error while calculating PPS out values
          - kobject_uevent: remove warning in init_uevent_argv()
          - [x86] drm/i915/gt: Fix a double free in gen8_preallocate_top_level_pdp
          - [x86] drm/i915: Read C0DRB3/C1DRB3 as 16 bits again
          - [x86] drm/i915/overlay: Fix active retire callback alignment
          - [x86] drm/i915: Fix crash in auto_retire
          - debugfs: Make debugfs_allow RO after init
          - ext4: fix debug format string warning
          - nvme: do not try to reconfigure APST when the controller is not live
      .
        [ Vincent Blut ]
        * [x86] sound/soc/intel: Enable SND_SOC_INTEL_CATPT as module
          (Closes: #986822)
        * [x86] sound/soc/intel/boards: Enable SND_SOC_INTEL_BDW_RT5650_MACH as
          module
        * drivers/input/rmi4: Enable RMI4_F3A (Closes: #986848)
        * [armhf] drivers/gpio: Enable GPIO_MXC as module (Closes: #987019)
        * [x86] drivers/misc/mei: Enable INTEL_MEI_TXE, INTEL_MEI_HDCP as modules
          (Closes: #987281)
      .
        [ Uwe Kleine-König ]
        * [arm64] Enable more options for NXP's i.MX8 (Closes: #985862)
      .
        [ Salvatore Bonaccorso ]
        * vfs: move cap_convert_nscap() call into vfs_setxattr() (CVE-2021-3493)
        * Refresh "Makefile: Do not check for libelf when building OOT module"
        * Bump ABI to 7
        * Refresh "tools/include/uapi: Fix <asm/errno.h>"
        * [rt] Update to 5.10.35-rt39
        * [rt] Refresh "powerpc/mm/highmem: Switch to generic kmap atomic"
        * [arm64] udeb: Include mdio module for RPi4 ethernet in installer
          (Closes: #985956)
      .
        [ Vagrant Cascadian ]
        * [arm64] Disable USB type-C DisplayPort in pinebook pro device-tree.
        * [arm64] Enable TYPEC_FUSB302, SND_SOC_ES8316, TYPEC and TYPEC_TCPM as
          modules. (Closes: #987638)
      .
        [ Michal Simek ]
        * [arm64] Enable clock driver for Xilinx ZynqMP SoC
      .
        [ Valentin Vidic ]
        * [s390x] udeb: Include standard scsi-modules containing the virtio_blk
          module (Closes: #988005)
      .
        [ Ben Hutchings ]
        * kbuild: Abort build if SUBDIRS used (Closes: #987575)
      74f89201
    • Lorenzo "Palinuro" Faletra's avatar
      b9143f39
  13. 12 Apr, 2021 2 commits
    • Lorenzo "Palinuro" Faletra's avatar
      Import Debian changes 5.10.28-6parrot1 · 7dcfec3c
      Lorenzo "Palinuro" Faletra authored
      linux (5.10.28-6parrot1) rolling; urgency=medium
      .
        * Import new Debian release.
      .
      linux (5.10.28-1) unstable; urgency=medium
      .
        * New upstream stable update:
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.27
          - mm/memcg: rename mem_cgroup_split_huge_fixup to split_page_memcg and add
            nr_pages argument
          - mm/memcg: set memcg when splitting page
          - mt76: fix tx skb error handling in mt76_dma_tx_queue_skb
          - net: stmmac: fix dma physical address of descriptor when display ring
          - [arm64,armhf] net: fec: ptp: avoid register access when ipg clock is
            disabled
          - [powerpc*] 4xx: Fix build errors from mfdcr()
          - atm: eni: dont release is never initialized
          - atm: lanai: dont run lanai_dev_close if not open
          - Revert "r8152: adjust the settings about MAC clock speed down for RTL8153"
          - [x86] ALSA: hda: ignore invalid NHLT table
          - ixgbe: Fix memleak in ixgbe_configure_clsu32
          - blk-cgroup: Fix the recursive blkg rwstat
          - net: tehuti: fix error return code in bdx_probe()
          - net: intel: iavf: fix error return code of iavf_init_get_resources()
          - sun/niu: fix wrong RXMAC_BC_FRM_CNT_COUNT count
          - gianfar: fix jumbo packets+napi+rx overrun crash (CVE-2021-29264)
          - cifs: ask for more credit on async read/write code paths
          - gfs2: fix use-after-free in trans_drain
          - [arm64,armhf] cpufreq: blacklist Arm Vexpress platforms in
            cpufreq-dt-platdev
          - gpiolib: acpi: Add missing IRQF_ONESHOT
          - nfs: fix PNFS_FLEXFILE_LAYOUT Kconfig default
          - NFS: Correct size calculation for create reply length
          - [arm64] net: hisilicon: hns: fix error return code of
            hns_nic_clear_all_rx_fetch()
          - [arm64] net: enetc: set MAC RX FIFO to recommended value
          - atm: uPD98402: fix incorrect allocation
          - atm: idt77252: fix null-ptr-dereference
          - cifs: change noisy error message to FYI
          - kbuild: add image_name to no-sync-config-targets
          - umem: fix error return code in mm_pci_probe()
          - [sparc64] Fix opcode filtering in handling of no fault loads
          - u64_stats,lockdep: Fix u64_stats_init() vs lockdep
          - block: Fix REQ_OP_ZONE_RESET_ALL handling
          - drm/amdgpu: fb BO should be ttm_bo_type_device
          - drm/radeon: fix AGP dependency
          - nvme: simplify error logic in nvme_validate_ns()
          - nvme: add NVME_REQ_CANCELLED flag in nvme_cancel_request()
          - nvme-fc: set NVME_REQ_CANCELLED in nvme_fc_terminate_exchange()
          - nvme-fc: return NVME_SC_HOST_ABORTED_CMD when a command has been aborted
          - nvme-core: check ctrl css before setting up zns
          - nvme-rdma: Fix a use after free in nvmet_rdma_write_data_done
          - nvme-pci: add the DISABLE_WRITE_ZEROES quirk for a Samsung PM1725a
          - nfs: we don't support removing system.nfs4_acl
          - block: Suppress uevent for hidden device when removed
          - mm/fork: clear PASID for new mm
          - [ia64] fix ia64_syscall_get_set_arguments() for break-based syscalls
          - [ia64] fix ptrace(PTRACE_SYSCALL_INFO_EXIT) sign
          - static_call: Pull some static_call declarations to the type headers
          - [x86] static_call: Allow module use without exposing static_call_key
          - [x86] static_call: Fix the module key fixup
          - [x86] static_call: Fix static_call_set_init()
          - [x86] KVM: Protect userspace MSR filter with SRCU, and set atomically-ish
          - btrfs: fix sleep while in non-sleep context during qgroup removal
          - selinux: don't log MAC_POLICY_LOAD record on failed policy load
          - selinux: fix variable scope issue in live sidtab conversion
          - [arm64] netsec: restore phy power state after controller reset
          - [x86] platform/x86: intel-vbtn: Stop reporting SW_DOCK events
          - psample: Fix user API breakage
          - z3fold: prevent reclaim/free race for headless pages
          - squashfs: fix inode lookup sanity checks
          - squashfs: fix xattr id and id lookup sanity checks
          - hugetlb_cgroup: fix imbalanced css_get and css_put pair for shared
            mappings
          - [x86] ACPI: video: Add missing callback back for Sony VPCEH3U1E
          - ACPICA: Always create namespace nodes using acpi_ns_create_node()
          - [arm64] stacktrace: don't trace arch_stack_walk()
          - integrity: double check iint_cache was initialized
          - [armhf] drm/etnaviv: Use FOLL_FORCE for userptr
          - drm/amdgpu: Add additional Sienna Cichlid PCI ID
          - [x86] drm/i915: Fix the GT fence revocation runtime PM logic
          - dm verity: fix DM_VERITY_OPTS_MAX value
          - dm ioctl: fix out of bounds array access when no devices
          - [armhf] bus: omap_l3_noc: mark l3 irqs as IRQF_NO_THREAD
          - [armhf] OMAP2+: Fix smartreflex init regression after dropping legacy data
          - [armhf] soc: ti: omap-prm: Fix occasional abort on reset deassert for dra7
            iva
          - veth: Store queue_mapping independently of XDP prog presence
          - bpf: Change inode_storage's lookup_elem return value from NULL to -EBADF
          - net/mlx5e: RX, Mind the MPWQE gaps when calculating offsets
          - net/mlx5e: When changing XDP program without reset, take refs for XSK RQs
          - net/mlx5e: Don't match on Geneve options in case option masks are all zero
          - ipv6: fix suspecious RCU usage warning
          - drop_monitor: Perform cleanup upon probe registration failure
          - macvlan: macvlan_count_rx() needs to be aware of preemption
          - net: sched: validate stab values
          - [armhf] net: dsa: bcm_sf2: Qualify phydev->dev_flags based on port
          - igc: reinit_locked() should be called with rtnl_lock
          - igc: Fix Pause Frame Advertising
          - igc: Fix Supported Pause Frame Link Setting
          - igc: Fix igc_ptp_rx_pktstamp()
          - e1000e: add rtnl_lock() to e1000_reset_task
          - e1000e: Fix error handling in e1000_set_d0_lplu_state_82571
          - net/qlcnic: Fix a use after free in qlcnic_83xx_get_minidump_template
          - net: phy: broadcom: Add power down exit reset state delay
          - [armhf] ftgmac100: Restart MAC HW once
          - net: qrtr: fix a kernel-infoleak in qrtr_recvmsg() (CVE-2021-29647)
          - flow_dissector: fix byteorder of dissected ICMP ID
          - netfilter: ctnetlink: fix dump of the expect mask attribute
          - net: phylink: Fix phylink_err() function name error in
            phylink_major_config
          - tipc: better validate user input in tipc_nl_retrieve_key()
            (CVE-2021-29646)
          - tcp: relookup sock for RST+ACK packets handled by obsolete req sock
          - can: isotp: isotp_setsockopt(): only allow to set low level TX flags for
            CAN-FD
          - can: isotp: TX-path: ensure that CAN frame flags are initialized
          - can: peak_usb: add forgotten supported devices
          - [arm64,armhf] can: flexcan: flexcan_chip_freeze(): fix chip freeze for
            missing bitrate
          - can: c_can_pci: c_can_pci_remove(): fix use-after-free
          - [armhf] can: c_can: move runtime PM enable/disable to c_can_platform
          - mac80211: fix rate mask reset
          - mac80211: Allow HE operation to be longer than expected.
          - nfp: flower: fix unsupported pre_tunnel flows
          - nfp: flower: add ipv6 bit to pre_tunnel control message
          - nfp: flower: fix pre_tun mask id allocation
          - ftrace: Fix modify_ftrace_direct.
          - [arm64] drm/msm/dsi: fix check-before-set in the 7nm dsi_pll code
          - net/sched: cls_flower: fix only mask bit check in the validate_ct_state
          - netfilter: nftables: report EOPNOTSUPP on unsupported flowtable flags
          - netfilter: nftables: allow to update flowtable flags
          - netfilter: flowtable: Make sure GC works periodically in idle system
          - [armhf] dts: imx6ull: fix ubi filesystem mount failed
          - ipv6: weaken the v4mapped source check
          - net: check all name nodes in __dev_alloc_name
          - net: cdc-phonet: fix data-interface release on probe failure
          - igb: check timestamp validity
          - r8152: limit the RX buffer size of RTL8153A for USB 2.0
          - [arm64,armhf] net: stmmac: dwmac-sun8i: Provide TX and RX fifo sizes
          - selinux: vsock: Set SID for socket returned by accept()
          - bpf: Fix umd memory leak in copy_process() (CVE-2021-29649)
          - can: isotp: tx-path: zero initialize outgoing CAN frames
          - [arm64] drm/msm: fix shutdown hook in case GPU components failed to bind
          - [arm64] drm/msm: Fix suspend/resume on i.MX5
          - [arm64] kdump: update ppos when reading elfcorehdr
          - PM: runtime: Defer suspending suppliers
          - net/mlx5: Add back multicast stats for uplink representor
          - net/mlx5e: Allow to match on MPLS parameters only for MPLS over UDP
          - net/mlx5e: Offload tuple rewrite for non-CT flows
          - net/mlx5e: Fix error path for ethtool set-priv-flag
          - PM: EM: postpone creating the debugfs dir till fs_initcall
          - net: bridge: don't notify switchdev for local FDB addresses
          - [amd64] xen/x86: make XEN_BALLOON_MEMORY_HOTPLUG_LIMIT depend on
            MEMORY_HOTPLUG
          - RDMA/cxgb4: Fix adapter LE hash errors while destroying ipv6 listening
            server
          - bpf: Don't do bpf_cgroup_storage_set() for kuprobe/tp programs
          - net: Consolidate common blackhole dst ops
          - net, bpf: Fix ip6ip6 crash with collect_md populated skbs
          - igb: avoid premature Rx buffer reuse
          - net: phy: introduce phydev->port
          - net: phy: broadcom: Avoid forward for bcm54xx_config_clock_delay()
          - net: phy: broadcom: Set proper 1000BaseX/SGMII interface mode for
            BCM54616S
          - net: phy: broadcom: Fix RGMII delays for BCM50160 and BCM50610M
          - Revert "netfilter: x_tables: Switch synchronization to RCU"
          - netfilter: x_tables: Use correct memory barriers. (CVE-2021-29650)
          - dm table: Fix zoned model check and zone sectors check
          - mm/mmu_notifiers: ensure range_end() is paired with range_start()
          - Revert "netfilter: x_tables: Update remaining dereference to RCU"
          - ACPI: scan: Rearrange memory allocation in acpi_device_add()
          - ACPI: scan: Use unique number for instance_no
          - io_uring: fix provide_buffers sign extension
          - block: recalculate segment count for multi-segment discards correctly
          - scsi: Revert "qla2xxx: Make sure that aborted commands are freed"
          - scsi: qedi: Fix error return code of qedi_alloc_global_queues()
          - scsi: mpt3sas: Fix error return code of mpt3sas_base_attach()
          - smb3: fix cached file size problems in duplicate extents (reflink)
          - cifs: Adjust key sizes and key generation routines for AES256 encryption
          - locking/mutex: Fix non debug version of mutex_lock_io_nested()
          - mm/memcg: fix 5.10 backport of splitting page memcg
          - fs/cachefiles: Remove wait_bit_key layout dependency
          - can: dev: Move device back to init netns on owning netns delete
          - r8169: fix DMA being used after buffer free if WoL is enabled
          - [armhf] net: dsa: b53: VLAN filtering is global to all users
          - mac80211: fix double free in ibss_leave
          - ext4: add reclaim checks to xattr code
          - fs/ext4: fix integer overflow in s_log_groups_per_flex
          - [amd64] Revert "xen: fix p2m size in dom0 for disabled memory hotplug
            case"
          - Revert "net: bonding: fix error return code of bond_neigh_init()"
          - nvme: fix the nsid value to print in nvme_validate_or_alloc_ns
          - can: peak_usb: Revert "can: peak_usb: add forgotten supported devices"
          - xen-blkback: don't leak persistent grants from xen_blkbk_map()
            (CVE-2021-28688)
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.28
          - [arm64] mm: correct the inside linear map range during hotplug check
          - bpf: Fix fexit trampoline.
          - virtiofs: Fail dax mount if device does not support it
          - ext4: shrink race window in ext4_should_retry_alloc()
          - ext4: fix bh ref count on error paths
          - rpc: fix NULL dereference on kmalloc failure
          - iomap: Fix negative assignment to unsigned sis->pages in
            iomap_swapfile_activate
          - [x86] ASoC: rt1015: fix i2c communication error
          - ASoC: rt5640: Fix dac- and adc- vol-tlv values being off by a factor of 10
          - [x86] ASoC: rt5651: Fix dac- and adc- vol-tlv values being off by a factor
            of 10
          - [armhf] ASoC: sgtl5000: set DAP_AVC_CTRL register to correct default value
            on probe
          - [x86] ASoC: es8316: Simplify adc_pga_gain_tlv table
          - ASoC: soc-core: Prevent warning if no DMI table is present
          - NFSD: fix error handling in NFSv4.0 callbacks
          - kernel: freezer should treat PF_IO_WORKER like PF_KTHREAD for freezing
          - vhost: Fix vhost_vq_reset()
          - io_uring: fix ->flags races by linked timeouts
          - scsi: st: Fix a use after free in st_open()
          - scsi: qla2xxx: Fix broken #endif placement
          - [x86] staging: comedi: cb_pcidas: fix request_irq() warn
          - [x86] staging: comedi: cb_pcidas64: fix request_irq() warn
          - ASoC: rt711: add snd_soc_component remove callback
          - thermal/core: Add NULL pointer check before using cooling device stats
          - locking/ww_mutex: Simplify use_ww_ctx & ww_ctx handling
          - locking/ww_mutex: Fix acquire/release imbalance in
            ww_acquire_init()/ww_acquire_fini()
          - nvmet-tcp: fix kmap leak when data digest in use
          - io_uring: imply MSG_NOSIGNAL for send[msg]()/recv[msg]() calls
          - [x86] static_call: Align static_call_is_init() patching condition
          - ext4: do not iput inode under running transaction in ext4_rename()
          - io_uring: call req_set_fail_links() on short send[msg]()/recv[msg]() with
            MSG_WAITALL
          - [arm64,armhf] net: mvpp2: fix interrupt mask/unmask skip condition
          - flow_dissector: fix TTL and TOS dissection on IPv4 fragments
          - net: introduce CAN specific pointer in the struct net_device
          - brcmfmac: clear EAP/association status bits on linkdown events
          - ath11k: add ieee80211_unregister_hw to avoid kernel crash caused by NULL
            pointer
          - rtw88: coex: 8821c: correct antenna switch function
          - iwlwifi: pcie: don't disable interrupts for reg_lock
          - ath10k: hold RCU lock when calling ieee80211_find_sta_by_ifaddr()
          - [amd64,arm64] net: ethernet: aquantia: Handle error cleanup of start on
            open
          - appletalk: Fix skb allocation size in loopback case
          - net: wan/lmc: unregister device when no matching device is found
          - net: 9p: advance iov on empty read
          - bpf: Remove MTU check in __bpf_skb_max_len
          - ACPI: tables: x86: Reserve memory occupied by ACPI tables
          - ACPI: processor: Fix CPU0 wakeup in acpi_idle_play_dead()
          - ALSA: usb-audio: Apply sample rate quirk to Logitech Connect
          - ALSA: hda: Re-add dropped snd_poewr_change_state() calls
          - ALSA: hda: Add missing sanity checks in PM prepare/complete callbacks
          - ALSA: hda/realtek: fix a determine_headset_type issue for a Dell AIO
          - ALSA: hda/realtek: call alc_update_headset_mode() in hp_automute_hook
          - ALSA: hda/realtek: fix mute/micmute LEDs for HP 640 G8
          - [x86] KVM: SVM: load control fields from VMCB12 before checking them
            (CVE-2021-29657)
          - [x86] KVM: SVM: ensure that EFER.SVME is set when running nested guest or
            on nested vmexit
          - PM: runtime: Fix race getting/putting suppliers at probe
          - PM: runtime: Fix ordering in pm_runtime_get_suppliers()
          - tracing: Fix stack trace event size
          - [s390x] vdso: copy tod_steering_delta value to vdso_data page
          - [s390x] vdso: fix tod_steering_delta type
          - mm: fix race by making init_zero_pfn() early_initcall
          - drm/amdgpu: fix offset calculation in amdgpu_vm_bo_clear_mappings()
          - drm/amdgpu: check alignment on CPU page for bo map
          - reiserfs: update reiserfs_xattrs_initialized() condition
          - [armhf] drm/imx: fix memory leak when fails to init
          - [arm64,armhf] drm/tegra: dc: Restore coupling of display controllers
          - [arm64,armhf] drm/tegra: sor: Grab runtime PM reference across reset
          - [arm64,armhf] pinctrl: rockchip: fix restore error in resume
          - extcon: Add stubs for extcon_register_notifier_all() functions
          - extcon: Fix error handling in extcon_dev_register
          - firmware: stratix10-svc: reset COMMAND_RECONFIG_FLAG_PARTIAL to 0
          - [arm64] usb: dwc3: pci: Enable dis_uX_susphy_quirk for Intel Merrifield
          - [x86] video: hyperv_fb: Fix a double free in hvfb_probe
          - firewire: nosy: Fix a use-after-free bug in nosy_ioctl() (CVE-2021-3483)
          - usbip: vhci_hcd fix shift out-of-bounds in vhci_hub_control()
          - USB: quirks: ignore remote wake-up on Fibocom L850-GL LTE modem
          - [arm64,armhf] usb: musb: Fix suspend with devices connected for a64
          - cdc-acm: fix BREAK rx code path adding necessary calls
          - USB: cdc-acm: untangle a circular dependency between callback and softint
          - USB: cdc-acm: downgrade message to debug
          - USB: cdc-acm: fix double free on probe failure
          - USB: cdc-acm: fix use-after-free after probe failure
          - [i386] usb: gadget: udc: amd5536udc_pci fix null-ptr-dereference
          - [arm*] usb: dwc2: Fix HPRT0.PrtSusp bit setting for HiKey 960 board.
          - [arm*] usb: dwc2: Prevent core suspend when port connection flag is 0
          - [arm64] usb: dwc3: qcom: skip interconnect init for ACPI probe
          - [arm64,armhf] usb: dwc3: gadget: Clear DEP flags after stop transfers in
            ep disable
          - soc: qcom-geni-se: Cleanup the code to remove proxy votes
          - [x86] staging: rtl8192e: Fix incorrect source in memcpy()
          - [x86] staging: rtl8192e: Change state information from u16 to u8
          - driver core: clear deferred probe reason on probe retry
          - drivers: video: fbcon: fix NULL dereference in fbcon_cursor()
          - [riscv64] evaluate put_user() arg before enabling user access
          - Revert "kernel: freezer should treat PF_IO_WORKER like PF_KTHREAD for
            freezing"
          - [amd64] bpf: Use NOP_ATOMIC5 instead of emit_nops(&prog, 5) for
            BPF_TRAMP_F_CALL_ORIG
      .
        [ Salvatore Bonaccorso ]
        * [rt] Refresh "u64_stats: Disable preemption on 32bit-UP/SMP with RT
          during updates"
        * Bump ABI to 6
        * [rt] Refresh "tracing: Merge irqflags + preempt counter."
        * bpf, x86: Validate computation of branch displacements for x86-64
          (CVE-2021-29154)
        * bpf, x86: Validate computation of branch displacements for x86-32
          (CVE-2021-29154)
      .
      linux (5.10.26-1) unstable; urgency=medium
      .
        * New upstream stable update:
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.25
          https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.26
          - ALSA: dice: fix null pointer dereference when node is disconnected
          - ALSA: hda/realtek: apply pin quirk for XiaomiNotebook Pro
          - ALSA: hda: generic: Fix the micmute led init state
          - ALSA: hda/realtek: Apply headset-mic quirks for Xiaomi Redmibook Air
          - ALSA: hda/realtek: fix mute/micmute LEDs for HP 840 G8
          - ALSA: hda/realtek: fix mute/micmute LEDs for HP 440 G8
          - ALSA: hda/realtek: fix mute/micmute LEDs for HP 850 G8
          - Revert "PM: runtime: Update device status before letting suppliers
            suspend"
          - [s390x] vtime: fix increased steal time accounting
          - [s390x] pci: refactor zpci_create_device()
          - [s390x] pci: remove superfluous zdev->zbus check
          - [s390x] pci: fix leak of PCI device structure
          - zonefs: Fix O_APPEND async write handling
          - zonefs: prevent use of seq files as swap file
          - zonefs: fix to update .i_wr_refcnt correctly in zonefs_open_zone()
          - btrfs: fix race when cloning extent buffer during rewind of an old root
            (CVE-2021-28964)
          - btrfs: fix slab cache flags for free space tree bitmap
          - vhost-vdpa: fix use-after-free of v->config_ctx (CVE-2021-29266)
          - [armhf] ASoC: fsl_ssi: Fix TDM slot setup for I2S mode
          - [x86] ASoC: Intel: bytcr_rt5640: Fix HP Pavilion x2 10-p0XX OVCD current
            threshold
          - [x86] ASoC: SOF: Intel: unregister DMIC device on probe error
          - [x86] ASoC: SOF: intel: fix wrong poll bits in dsp power down
          - ASoC: qcom: sdm845: Fix array out of bounds access (CVE-2021-28952)
          - ASoC: qcom: sdm845: Fix array out of range on rx slim channels
          - [arm64] ASoC: qcom: lpass-cpu: Fix lpass dai ids parse
          - [arm*] ASoC: simple-card-utils: Do not handle device clock
          - afs: Fix accessing YFS xattrs on a non-YFS server
          - afs: Stop listxattr() from listing "afs.*" attributes
          - ALSA: usb-audio: Fix unintentional sign extension issue
          - nvme: fix Write Zeroes limitations
          - nvme-tcp: fix misuse of __smp_processor_id with preemption enabled
          - nvme-tcp: fix possible hang when failing to set io queues
          - nvme-tcp: fix a NULL deref when receiving a 0-length r2t PDU
          - nvmet: don't check iosqes,iocqes for discovery controllers
          - nfsd: Don't keep looking up unhashed files in the nfsd file cache
          - nfsd: don't abort copies early
          - NFSD: Repair misuse of sv_lock in 5.10.16-rt30.
          - NFSD: fix dest to src mount in inter-server COPY
          - svcrdma: disable timeouts on rdma backchannel
          - sunrpc: fix refcount leak for rpc auth modules
          - [x86] i915/perf: Start hrtimer only if sampling the OA buffer
          - pstore: Fix warning in pstore_kill_sb()
          - io_uring: ensure that SQPOLL thread is started for exit (CVE-2021-28951)
          - net/qrtr: fix __netdev_alloc_skb call
          - cifs: fix allocation size on newly created files
          - scsi: lpfc: Fix some error codes in debugfs
          - scsi: myrs: Fix a double free in myrs_cleanup()
          - [riscv64] correct enum sbi_ext_rfence_fid
          - gpiolib: Assign fwnode to parent's if no primary one provided
          - nvme-rdma: fix possible hang when failing to set io queues
          - [armhf] tty: serial: stm32-usart: Remove set but unused 'cookie' variables
          - [armhf] serial: stm32: fix DMA initialization error handling
          - bpf: Declare __bpf_free_used_maps() unconditionally
          - module: merge repetitive strings in module_sig_check()
          - module: avoid *goto*s in module_sig_check()
          - module: harden ELF info handling
          - scsi: pm80xx: Make mpi_build_cmd locking consistent
          - scsi: pm80xx: Make running_req atomic
          - scsi: pm80xx: Fix pm8001_mpi_get_nvmd_resp() race condition
          - scsi: pm8001: Neaten debug logging macros and uses
          - scsi: libsas: Remove notifier indirection
          - scsi: libsas: Introduce a _gfp() variant of event notifiers
          - scsi: mvsas: Pass gfp_t flags to libsas event notifiers
          - [x86] scsi: isci: Pass gfp_t flags in isci_port_link_down()
          - [x86] scsi: isci: Pass gfp_t flags in isci_port_link_up()
          - [x86] scsi: isci: Pass gfp_t flags in isci_port_bc_change_received()
          - RDMA/mlx5: Allow creating all QPs even when non RDMA profile is used
          - [powerpc*] sstep: Fix load-store and update emulation
          - [powerpc*] sstep: Fix darn emulation
          - i40e: Fix endianness conversions
          - net: phy: micrel: set soft_reset callback to genphy_soft_reset for KSZ8081
          - drm/amd/display: turn DPMS off on connector unplug
          - iwlwifi: Add a new card for MA family
          - io_uring: fix inconsistent lock state
          - [arm64,armhf] media: cedrus: h264: Support profile controls
          - [s390x] qeth: schedule TX NAPI on QAOB completion
          - io_uring: don't attempt IO reissue from the ring exit path
          - io_uring: clear IOCB_WAITQ for non -EIOCBQUEUED return
          - net: bonding: fix error return code of bond_neigh_init()
          - gfs2: Add common helper for holding and releasing the freeze glock
          - gfs2: move freeze glock outside the make_fs_rw and _ro functions
          - gfs2: bypass signal_our_withdraw if no journal
          - [powerpc*] Force inlining of cpu_has_feature() to avoid build failure
          - usb-storage: Add quirk to defeat Kindle's automatic unload
          - usbip: Fix incorrect double assignment to udc->ud.tcp_rx
          - usb: gadget: configfs: Fix KASAN use-after-free
          - [x86] usb: typec: Remove vdo[3] part of tps6598x_rx_identity_reg struct
          - [x86] usb: typec: tcpm: Invoke power_supply_changed for tcpm-source-psy-
          - [arm64,armhf] usb: dwc3: gadget: Allow runtime suspend if UDC unbinded
          - [arm64,armhf] usb: dwc3: gadget: Prevent EP queuing while stopping
            transfers
          - [x86] thunderbolt: Initialize HopID IDAs in tb_switch_alloc()
          - [x86] thunderbolt: Increase runtime PM reference count on DP tunnel
            discovery
          - iio: gyro: mpu3050: Fix error handling in mpu3050_trigger_handler
          - iio: adc: ad7949: fix wrong ADC result due to incorrect bit mask
          - iio: hid-sensor-prox: Fix scale not correct issue
          - iio: hid-sensor-temperature: Fix issues of timestamp channel
          - [powerpc*] PCI: rpadlpar: Fix potential drc_name corruption in store
            functions (CVE-2021-28972)
          - [x86] perf/x86/intel: Fix a crash caused by zero PEBS status
            (CVE-2021-28971)
          - [x86] perf/x86/intel: Fix unchecked MSR access error caused by VLBR_EVENT
          - [x86] ioapic: Ignore IRQ2 again
          - kernel, fs: Introduce and use set_restart_fn() and arch_set_restart_data()
          - [x86] Move TS_COMPAT back to asm/thread_info.h
          - [x86] Introduce TS_COMPAT_RESTART to fix get_nr_restart_syscall()
          - efivars: respect EFI_UNSUPPORTED return from firmware
          - ext4: fix error handling in ext4_end_enable_verity()
          - ext4: find old entry again if failed to rename whiteout
          - ext4: stop inode update before return
          - ext4: do not try to set xattr into ea_inode if value is empty
          - ext4: fix potential error in ext4_do_update_inode
          - ext4: fix rename whiteout with fast commit
          - static_call: Fix static_call_update() sanity check
          - efi: use 32-bit alignment for efi_guid_t literals
          - firmware/efi: Fix a use after bug in efi_mem_reserve_persistent
          - genirq: Disable interrupts for force threaded handlers
          - [x86] apic/of: Fix CPU devicetree-node lookups
          - cifs: Fix preauth hash corruption
      .
        [ Salvatore Bonaccorso ]
        * linux-image: Add Breaks: relation with old fwupdate versions
          (Closes: #985801)
        * [rt] Update to 5.10.25-rt35
        * Refresh "Include package version along with kernel release in stack
          traces"
        * Refresh "firmware: Remove redundant log messages from drivers"
        * Refresh "MODSIGN: checking the blacklisted hash before loading a kernel
          module"
        * libsas: Avoid ABI change for removal of notifier indirection
      .
        [ Uwe Kleine-König ]
        * [arm64] Enable various configurations for i.MX8 (Closes: #985862)
      7dcfec3c
    • Lorenzo "Palinuro" Faletra's avatar
      9941e245
  14. 20 Mar, 2021 2 commits