[continued from previous message]

- r8169: fix the KCSAN reported data-race in rtl_tx while reading
TxDescArray[entry].opts1
- r8169: fix the KCSAN reported data race in rtl_rx while reading
desc->opts1
- treewide: Spelling fix in comment
- igb: Fix potential memory leak in igb_add_ethtool_nfc_entry
- neighbour: fix various data-races
- igc: Fix ambiguity in the ethtool advertising
- net: ieee802154: adf7242: Fix some potential buffer overflow in
adf7242_stats_show()
- net: usb: smsc95xx: Fix uninit-value access in smsc95xx_read_reg
- r8152: Increase USB control msg timeout to 5000ms as per spec
- r8152: Run the unload routine if we have errors during probe
- r8152: Cancel hw_phy_work if we have an error in probe
- r8152: Release firmware if we have an error in probe
- tcp: fix wrong RTO timeout when received SACK reneging
- gtp: uapi: fix GTPA_MAX
- gtp: fix fragmentation needed check with gso
- i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR
- [armhf] i2c: muxes: i2c-mux-pinctrl: Use of_get_i2c_adapter_by_node()
- [armhf] i2c: stm32f7: Fix PEC handling in case of SMBUS transfers
- [armhf] i2c: aspeed: Fix i2c bus hang in slave read
- tracing/kprobes: Fix the description of variable length arguments
- [arm64,armhf] nvmem: imx: correct nregs for i.MX6ULL
- [arm64,armhf] nvmem: imx: correct nregs for i.MX6SLL
- [arm64,armhf] nvmem: imx: correct nregs for i.MX6UL
- perf/core: Fix potential NULL deref
- clk: Sanitize possible_parent_show to Handle Return Value of
of_clk_get_parent_name
- [x86] i8259: Skip probing when ACPI/MADT advertises PCAT compatibility
- kobject: Fix slab-out-of-bounds in fill_kobj_path() (CVE-2023-45863)
- f2fs: fix to do sanity check on inode type during garbage collection
(CVE-2021-44879)
- [x86] mm: Simplify RESERVE_BRK()
- [x86] mm: Fix RESERVE_BRK() for older binutils
- ext4: add two helper functions extent_logical_end() and pa_logical_end()
- ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow
- ext4: avoid overlapping preallocations due to overflow
- [x86] objtool/x86: add missing embedded_insn check
- driver: platform: Add helper for safer setting of driver_override
- [arm64] rpmsg: Constify local variable in field store macro
- rpmsg: Fix kfree() of static memory on setting driver_override
- rpmsg: Fix calling device_lock() on non-initialized device
- [arm64] rpmsg: glink: Release driver_override
- [arm64] rpmsg: Fix possible refcount leak in
rpmsg_register_device_override()
- [x86] Fix .brk attribute in linker script
- net: sched: cls_u32: Fix allocation size in u32_init()
- [armhf] irqchip/stm32-exti: add missing DT IRQ flag translation
- Input: synaptics-rmi4 - handle reset delay when using SMBus trsnsport
- fbdev: atyfb: only use ioremap_uc() on i386 and ia64
- netfilter: nfnetlink_log: silence bogus compiler warning
- ASoC: rt5650: fix the wrong result of key button
- [x86] fbdev: uvesafb: Call cn_del_callback() at the end of uvesafb_exit()
- scsi: mpt3sas: Fix in error path
- net: chelsio: cxgb4: add an error code check in t4_load_phy_fw
- [powerpc*] mm: Fix boot crash with FLATMEM
- can: isotp: change error format from decimal to symbolic error names
- can: isotp: add symbolic error message to isotp_module_init()
- can: isotp: Add error message if txqueuelen is too small
- can: isotp: set max PDU size to 64 kByte
- can: isotp: isotp_bind(): return -EINVAL on incorrect CAN ID formatting
- can: isotp: check CAN address family in isotp_bind()
- can: isotp: handle wait_event_interruptible() return values
- can: isotp: add local echo tx processing and tx without FC
- can: isotp: isotp_bind(): do not validate unused address information
- can: isotp: isotp_sendmsg(): fix TX state detection and wait behavior
- PCI: Prevent xHCI driver from claiming AMD VanGogh USB3 DRD device
- usb: storage: set 1.50 as the lower bcdDevice for older "Super Top"
compatibility
- usb: raw-gadget: properly handle interrupted requests
- tty: 8250: Remove UC-257 and UC-431
- tty: 8250: Add support for additional Brainboxes UC cards
- tty: 8250: Add support for Brainboxes UP cards
- tty: 8250: Add support for Intashield IS-100
- ALSA: hda: intel-dsp-config: Fix JSL Chromebook quirk detection
https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.201
- [x86] iov_iter, x86: Be consistent about the __user tag on
copy_mc_to_user()
- sched/uclamp: Ignore (util == 0) optimization in feec() when p_util_max =
0
- vfs: fix readahead(2) on block devices
- [x86] srso: Fix SBPB enablement for (possible) future fixed HW
- futex: Don't include process MM in futex key on no-MMU
- [x86] boot: Fix incorrect startup_gdt_descr.size
- pstore/platform: Add check for kstrdup
- genirq/matrix: Exclude managed interrupts in irq_matrix_allocated()
- i40e: fix potential memory leaks in i40e_remove()
- udp: add missing WRITE_ONCE() around up->encap_rcv
- tcp: call tcp_try_undo_recovery when an RTOd TFO SYNACK is ACKed
- overflow: Implement size_t saturating arithmetic helpers
- gve: Use size_add() in call to struct_size()
- tipc: Use size_add() in calls to struct_size()
- wifi: rtw88: debug: Fix the NULL vs IS_ERR() bug for debugfs_create_file()
- tcp_metrics: add missing barriers on delete
- tcp_metrics: properly set tp->snd_ssthresh in tcp_init_metrics()
- tcp_metrics: do not create an entry from tcp_init_metrics()
- wifi: rtlwifi: fix EDCA limit set by BT coexistence
- can: dev: can_restart(): don't crash kernel if carrier is OK
- can: dev: can_restart(): fix race condition between controller restart and
netif_carrier_on()
- PM / devfreq: rockchip-dfi: Make pmu regmap mandatory
- thermal: core: prevent potential string overflow
- r8169: use tp_to_dev instead of open code
- r8169: fix rare issue with broken rx after link-down on RTL8125
- tcp: fix cookie_init_timestamp() overflows
- ACPI: sysfs: Fix create_pnp_modalias() and create_of_modalias()
- ipv6: avoid atomic fragment on GSO packets
- net: add DEV_STATS_READ() helper
- ipvlan: properly track tx_errors
- regmap: debugfs: Fix a erroneous check after snprintf()
- [arm64] clk: qcom: clk-rcg2: Fix clock rate overflow for high parent
frequencies
- [arm64] clk: qcom: mmcc-msm8998: Add hardware clockgating registers to
some clks
- [arm64] clk: qcom: mmcc-msm8998: Don't check halt bit on some branch clks
- [arm64] clk: qcom: mmcc-msm8998: Set bimc_smmu_gdsc always on
- [arm64] clk: qcom: mmcc-msm8998: Fix the SMMU GDSC
- [arm64] clk: qcom: gcc-sm8150: use ARRAY_SIZE instead of specifying
num_parents
- [arm64] clk: qcom: gcc-sm8150: Fix gcc_sdcc2_apps_clk_src
- [arm64] clk: imx: imx8mq: correct error handling path
- clk: asm9260: use parent index to link the reference clock
- clk: linux/clk-provider.h: fix kernel-doc warnings and typos
- [arm64] spi: nxp-fspi: use the correct ioremap function
- [armhf] clk: ti: Add ti_dt_clk_name() helper to use clock-output-names
- [armhf] clk: ti: Update pll and clockdomain clocks to use ti_dt_clk_name()
- [armhf] clk: ti: Update component clocks to use ti_dt_clk_name()
- [armhf] clk: ti: change ti_clk_register[_omap_hw]() API
- [armhf] clk: ti: fix double free in of_ti_divider_clk_setup()
- [x86] platform/x86: wmi: Fix probe failure when failing to register WMI
devices
- [x86] platform/x86: wmi: remove unnecessary initializations
- [x86] platform/x86: wmi: Fix opening of char device
- hwmon: (coretemp) Fix potentially truncated sysfs attribute name
- [arm64,armhf] drm/rockchip: vop: Fix reset of state in duplicate state
crtc funcs
- [arm64,armhf] drm/rockchip: vop: Fix call to crtc reset helper
- drm/radeon: possible buffer overflow
- [arm64] drm/rockchip: cdn-dp: Fix some error handling paths in
cdn_dp_probe()
- [arm64,armhf] drm/rockchip: Fix type promotion bug in
rockchip_gem_iommu_map()
- xen-pciback: Consider INTx disabled when MSI/MSI-X is enabled
- [arm64] dts: qcom: msm8916: Fix iommu local address range
- [arm64] dts: qcom: sdm845-mtp: fix WiFi configuration
- [i386] hwrng: geode - fix accessing registers
- libnvdimm/of_pmem: Use devm_kstrdup instead of kstrdup and check its
return value
- nd_btt: Make BTT lanes preemptible
- [arm64] crypto: caam/qi2 - fix Chacha20 + Poly1305 self test failure
- [arm64] crypto: caam/jr - fix Chacha20 + Poly1305 self test failure
- [x86] crypto: qat - mask device capabilities with soft straps
- [x86] crypto: qat - increase size of buffers
- hid: cp2112: Fix duplicate workqueue initialization
- [armel,armhf] 9321/1: memset: cast the constant byte to unsigned char
- ext4: move 'ix' sanity check to corrent position
- IB/mlx5: Fix rdma counter binding for RAW QP
- [arm64] RDMA/hns: Fix uninitialized ucmd in hns_roce_create_qp_common()
- [arm64] RDMA/hns: Fix signed-unsigned mixed comparisons
- scsi: ufs: core: Leave space for '\0' in utf8 desc string
- [amd64] RDMA/hfi1: Workaround truncation compilation error
- hid: cp2112: Fix IRQ shutdown stopping polling for all IRQs on chip
- Revert "HID: logitech-hidpp: add a module parameter to keep firmware
gestures"
- HID: logitech-hidpp: Remove HIDPP_QUIRK_NO_HIDINPUT quirk
- HID: logitech-hidpp: Don't restart IO, instead defer hid_connect() only
- HID: logitech-hidpp: Revert "Don't restart communication if not necessary"
- HID: logitech-hidpp: Move get_wireless_feature_index() check to
hidpp_connect_event()
- [x86] ASoC: Intel: Skylake: Fix mem leak when parsing UUIDs fails
- padata: Convert from atomic_t to refcount_t on parallel_data->refcnt
- padata: Fix refcnt handling in padata_free_shell()
- mfd: core: Un-constify mfd_cell.of_reg
- mfd: core: Ensure disabled devices are skipped without aborting
- mfd: dln2: Fix double put in dln2_probe
- leds: pwm: Don't disable the PWM when the LED should be off
- leds: trigger: ledtrig-cpu:: Fix 'output may be truncated' issue for 'cpu'
- tty: tty_jobctrl: fix pid memleak in disassociate_ctty()
- usb: dwc2: fix possible NULL pointer dereference caused by driver
concurrency
- dmaengine: ti: edma: handle irq_of_parse_and_map() errors
- misc: st_core: Do not call kfree_skb() under spin_lock_irqsave()
- USB: usbip: fix stub_dev hub disconnect
- dmaengine: pxa_dma: Remove an erroneous BUG_ON() in pxad_free_desc()
- f2fs: fix to initialize map.m_pblk in f2fs_precache_extents()
- modpost: fix tee MODULE_DEVICE_TABLE built on big-endian host
- [powerpc*] 40x: Remove stale PTE_ATOMIC_UPDATES macro
- [powerpc*] xive: Fix endian conversion size
- [powerpc*] imc-pmu: Use the correct spinlock initializer.
- [powerpc*] pseries: fix potential memory leak in init_cpu_associativity()
- xhci: Loosen RPM as default policy to cover for AMD xHC 1.1
- usb: host: xhci-plat: fix possible kernel oops while resuming
- perf machine: Avoid out of bounds LBR memory read
- perf hist: Add missing puts to hist__account_cycles
- i3c: Fix potential refcount leak in i3c_master_register_new_i3c_devs
- rtc: pcf85363: fix wrong mask/val parameters in regmap_update_bits call
- pcmcia: cs: fix possible hung task and memory leak pccardd()
- pcmcia: ds: fix refcount leak in pcmcia_device_add()
- pcmcia: ds: fix possible name leak in error path in pcmcia_device_add()
- media: i2c: max9286: Fix some redundant of_node_put() calls
- media: bttv: fix use after free error due to btv->timeout timer
- media: s3c-camif: Avoid inappropriate kfree()
- media: vidtv: psi: Add check for kstrdup
- media: vidtv: mux: Add check and kfree for kstrdup
- media: cedrus: Fix clock/reset sequence
- media: dvb-usb-v2: af9035: fix missing unlock
- regmap: prevent noinc writes from clobbering cache
- pwm: sti: Avoid conditional gotos
- pwm: sti: Reduce number of allocations and drop usage of chip_data
- pwm: brcmstb: Utilize appropriate clock APIs in suspend/resume
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
- llc: verify mac len before reading mac header
- hsr: Prevent use after free in prp_create_tagged_frame()
- tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
- inet: shrink struct flowi_common
- dccp: Call security_inet_conn_request() after setting IPv4 addresses.
- dccp/tcp: Call security_inet_conn_request() after setting IPv6 addresses.
- net: r8169: Disable multicast filter for RTL8168H and RTL8107E
- Fix termination state for idr_for_each_entry_ul()
- net: stmmac: xgmac: Enable support for multiple Flexible PPS outputs
- net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT
- net/smc: allow cdc msg send rather than drop it with NULL sndbuf_desc
- net/smc: put sk reference if close work was canceled
- tg3: power down device only on SYSTEM_POWER_OFF
- r8169: respect userspace disabling IFF_MULTICAST
- netfilter: xt_recent: fix (increase) ipv6 literal buffer length
- netfilter: nft_redir: use `struct nf_nat_range2` throughout and
deduplicate eval call-backs
- netfilter: nat: fix ipv6 nat redirect with mapped and scoped addresses
- [x86] Share definition of __is_canonical_address()
- [x86] sev-es: Allow copy_from_kernel_nofault() in earlier boot
- drm/syncobj: fix DRM_SYNCOBJ_WAIT_FLAGS_WAIT_AVAILABLE
- fbdev: imsttfb: Fix error path of imsttfb_probe()
- fbdev: imsttfb: fix a resource leak in probe
- fbdev: fsl-diu-fb: mark wr_reg_wa() static
- tracing/kprobes: Fix the order of argument descriptions
- Revert "mmc: core: Capture correct oemid-bits for eMMC cards"
- btrfs: use u64 for buffer sizes in the tree search ioctls
https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.202
- perf/core: Bail out early if the request AUX area is out of bound
- [armhf] clocksource/drivers/timer-imx-gpt: Fix potential memory leak
- [x86] mm: Drop the 4 MB restriction on minimal NUMA node memory size
- wifi: mac80211_hwsim: fix clang-specific fortify warning
- wifi: mac80211: don't return unset power in ieee80211_get_tx_power()
- bpf: Detect IP == ksym.end as part of BPF program
- wifi: ath9k: fix clang-specific fortify warnings
- wifi: ath10k: fix clang-specific fortify warning
- net: annotate data-races around sk->sk_tx_queue_mapping
- net: annotate data-races around sk->sk_dst_pending_confirm
- wifi: ath10k: Don't touch the CE interrupt registers after power up
- Bluetooth: btusb: Add date->evt_skb is NULL check
- Bluetooth: Fix double free in hci_conn_cleanup
- [x86] platform/x86: thinkpad_acpi: Add battery quirk for Thinkpad X120e
- [arm64] drm/msm/dp: skip validity check for DP CTS EDID checksum
- drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
- drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga
- drm/amdgpu: Fix potential null pointer derefernce
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL
- ASoC: soc-card: Add storage for PCI SSID
- crypto: pcrypt - Fix hungtask for PADATA_RESET
- [amd64] RDMA/hfi1: Use FIELD_GET() to extract Link Width
- fs/jfs: Add check for negative db_l2nbperpage
- fs/jfs: Add validity check for db_maxag and db_agpref
- jfs: fix array-index-out-of-bounds in dbFindLeaf
- jfs: fix array-index-out-of-bounds in diAlloc
- HID: lenovo: Detect quirk-free fw on cptkbd and stop applying workaround
- [armel,armhf] 9320/1: fix stack depot IRQ stack filter
- ALSA: hda: Fix possible null-ptr-deref when assigning a stream
- atm: iphase: Do PCI error checks on own line
- scsi: libfc: Fix potential NULL pointer dereference in
fc_lport_ptp_setup()
- HID: Add quirk for Dell Pro Wireless Keyboard and Mouse KM5221W
- exfat: support handle zero-size directory
- usb: gadget: f_ncm: Always set current gadget in ncm_bind()
- 9p/trans_fd: Annotate data-racy writes to file::f_flags
- [armhf] i2c: sun6i-p2wi: Prevent potential division by zero
- media: gspca: cpia1: shift-out-of-bounds in set_flicker
- media: vivid: avoid integer overflow
- gfs2: ignore negated quota changes
- gfs2: fix an oops in gfs2_permission
- media: imon: fix access to invalid resource for the second interface
- drm/amd/display: Avoid NULL dereference of timing generator
- [armhf] ASoC: ti: omap-mcbsp: Fix runtime PM underflow warnings
- drm/amdgpu: fix software pci_unplug on some chips
- pwm: Fix double shift bug
- wifi: iwlwifi: Use FW rate for non-data frames
- xhci: turn cancelled td cleanup to its own function
- SUNRPC: ECONNRESET might require a rebind
- SUNRPC: Add an IS_ERR() check back to where it was
- NFSv4.1: fix SP4_MACH_CRED protection for pnfs IO
- SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- gfs2: Silence "suspicious RCU usage in gfs2_permission" warning
- ipvlan: add ipvlan_route_v6_outbound() helper
- tty: Fix uninit-value access in ppp_sync_receive()
- [arm64] net: hns3: fix variable may not initialized problem in
hns3_init_mac_addr()
- [arm64] net: hns3: fix VF reset fail issue
- tipc: Fix kernel-infoleak due to uninitialized TLV value
- ppp: limit MRU to 64K
- xen/events: fix delayed eoi list handling
- ptp: annotate data-race around q->head and q->tail
- bonding: stop the device in bond_setup_by_slave()
- netfilter: nf_conntrack_bridge: initialize err to 0
- net: stmmac: fix rx budget limit check
- net/mlx5e: fix double free of encap_header
- net/mlx5_core: Clean driver version and name
- net/mlx5e: Check return value of snprintf writing to fw_version buffer for
representors
- macvlan: Don't propagate promisc change to lower dev in passthru
- cifs: spnego: add ';' in HOST_KEY_LEN
- cifs: fix check of rc in function generate_smb3signingkey
- [arm64] media: venus: hfi: add checks to perform sanity on queue pointers
- [powerpc*] perf: Fix disabling BHRB and instruction sampling
- bpf: Fix check_stack_write_fixed_off() to correctly spill imm
- bpf: Fix precision tracking for BPF_ALU | BPF_TO_BE | BPF_END
- scsi: mpt3sas: Fix loop logic
- scsi: megaraid_sas: Increase register read retry rount from 3 to 30 for
selected registers
- [x86] cpu/hygon: Fix the CPU topology evaluation for real
- [x86] KVM: x86: hyper-v: Don't auto-enable stimer on write from user-space
- [x86] KVM: x86: Ignore MSR_AMD64_TW_CFG access
- audit: don't take task_lock() in audit_exe_compare() code path
- audit: don't WARN_ON_ONCE(!current->mm) in audit_exe_compare()
- tty/sysrq: replace smp_processor_id() with get_cpu()
- hvc/xen: fix console unplug
- hvc/xen: fix error path in xen_hvc_init() to always register frontend
driver
- PCI/sysfs: Protect driver's D3cold preference from user space
- watchdog: move softlockup_panic back to early_param
- ACPI: resource: Do IRQ override on TongFang GMxXGxx
- [arm64] Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer
- mmc: vub300: fix an error code
- mmc: sdhci_am654: fix start loop index for TAP value parsing
- PCI/ASPM: Fix L1 substate handling in aspm_attr_store_common()
- [arm64] dts: qcom: ipq6018: Fix hwlock index for SMEM
- PM: hibernate: Use __get_safe_page() rather than touching the list
- PM: hibernate: Clean up sync_read handling in snapshot_write_next()
- rcu: kmemleak: Ignore kmemleak false positives when RCU-freeing objects
- btrfs: don't arbitrarily slow down delalloc if we're committing
- [arm64] firmware: qcom_scm: use 64-bit calling convention only when client
is 64-bit
- ima: detect changes to the backing overlay file
- wifi: ath11k: fix temperature event locking
- wifi: ath11k: fix dfs radar event locking
- wifi: ath11k: fix htt pktlog locking
- mmc: meson-gx: Remove setting of CMD_CFG_ERROR
- genirq/generic_chip: Make irq_remove_generic_chip() irqdomain aware
- jbd2: fix potential data lost in recovering journal raced with
synchronizing fs bdev
- quota: explicitly forbid quota files from being encrypted
- kernel/reboot: emergency_restart: Set correct system_state
- i2c: core: Run atomic i2c xfer when !preemptible
- mcb: fix error handling for different scenarios when parsing
- [armhf] dmaengine: stm32-mdma: correct desc prep when channel running
- mm/cma: use nth_page() in place of direct struct page manipulation
- mm/memory_hotplug: use pfn math in place of direct struct page
manipulation
- mtd: cfi_cmdset_0001: Byte swap OTP info
- xhci: Enable RPM on controllers that support low-power states
- ALSA: info: Fix potential deadlock at disconnection
- ALSA: hda/realtek - Add Dell ALC295 to pin fall back table
- ALSA: hda/realtek - Enable internal speaker of ASUS K6500ZC
- serial: meson: remove redundant initialization of variable id
- tty: serial: meson: retrieve port FIFO size from DT
- serial: meson: Use platform_get_irq() to get the interrupt
- tty: serial: meson: fix hard LOCKUP on crtscts mode
- cpufreq: stats: Fix buffer overflow detection in trans_stats()
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0cb8:0xc559
- bluetooth: Add device 0bda:887b to device tables
- bluetooth: Add device 13d3:3571 to device tables
- Bluetooth: btusb: Add RTW8852BE device 13d3:3570 to device tables
- Bluetooth: btusb: Add 0bda:b85b for Fn-Link RTL8852BE
- Revert ncsi: Propagate carrier gain/loss events to the NCSI controller
- lsm: fix default return value for vm_enough_memory
- lsm: fix default return value for inode_getsecctx
- i2c: designware: Disable TX_EMPTY irq while waiting for block length byte
- net: phylink: initialize carrier state at creation
- i2c: i801: fix potential race in i801_block_transaction_byte_by_byte
- f2fs: avoid format-overflow warning
- media: lirc: drop trailing space from scancode transmit
- media: sharp: fix sharp encoding
- [arm64] media: venus: hfi_parser: Add check to keep the number of codecs
within range
- [arm64] media: venus: hfi: fix the check to handle session buffer
requirement
- [arm64] media: venus: hfi: add checks to handle capabilities from firmware
- nfsd: fix file memleak on client_opens_release
- mm: kmem: drop __GFP_NOFAIL when allocating objcg vectors
- Revert "net: r8169: Disable multicast filter for RTL8168H and RTL8107E"
- ext4: apply umask if ACL support is disabled
- ext4: correct offset of gdb backup in non meta_bg group to update_backups
- ext4: correct return value of ext4_convert_meta_bg
- ext4: correct the start block of counting reserved clusters
- ext4: remove gdb backup copy for meta bg in setup_new_flex_group_blocks
- drm/amd/pm: Handle non-terminated overdrive commands.
- drm/amdgpu: fix error handling in amdgpu_bo_list_get()
- drm/amd/display: Change the DMCUB mailbox memory location from FB to inbox
- io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
(CVE-2023-46862)
- tracing: Have trace_event_file have ref counters
- netfilter: nftables: update table flags from the commit phase
- netfilter: nf_tables: fix table flag updates
- netfilter: nf_tables: disable toggling dormant table state more than once
https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.203
- RDMA/irdma: Prevent zero-length STAG registration (CVE-2023-25775)
- afs: Fix afs_server_list to be cleaned up with RCU
- afs: Make error on cell lookup failure consistent with OpenAFS
- [arm64,armhf] drm/panel: simple: Fix Innolux G101ICE-L01 bus flags
- [arm64,armhf] drm/panel: simple: Fix Innolux G101ICE-L01 timings
- wireguard: use DEV_STATS_INC()
- ata: pata_isapnp: Add missing error check for devm_ioport_map()
- [arm64,armhf] drm/rockchip: vop: Fix color for RGB888/BGR888 format on VOP
full
- HID: core: store the unique system identifier in hid_device
- HID: fix HID device resource race between HID core and debugging support
- ipv4: Correct/silence an endian warning in __ip_do_redirect
- net: usb: ax88179_178a: fix failed operations during ax88179_reset
- net/smc: avoid data corruption caused by decline
- [armhf] xen: fix xen_vcpu_info allocation alignment
- [amd64,arm64] amd-xgbe: handle corner-case during sfp hotplug
- [amd64,arm64] amd-xgbe: handle the corner-case during tx completion
- [amd64,arm64] amd-xgbe: propagate the correct speed and duplex status
- afs: Return ENOENT if no cell DNS record can be found
- afs: Fix file locking on R/O volumes to operate in local mode
- nvmet: remove unnecessary ctrl parameter
- nvmet: nul-terminate the NQNs passed in the connect command
(CVE-2023-6121)
- [arm64] USB: dwc3: qcom: fix resource leaks on probe deferral
- [arm64] USB: dwc3: qcom: fix ACPI platform device leak
- lockdep: Fix block chain corruption
- ext4: add a new helper to check if es must be kept
- ext4: factor out __es_alloc_extent() and __es_free_extent()
- ext4: use pre-allocated es in __es_insert_extent()
- ext4: use pre-allocated es in __es_remove_extent()
- ext4: using nofail preallocation in ext4_es_remove_extent()
- ext4: using nofail preallocation in ext4_es_insert_delayed_block()
- ext4: using nofail preallocation in ext4_es_insert_extent()
- ext4: fix slab-use-after-free in ext4_es_insert_extent()
- ext4: make sure allocate pending entry not fail
- nfsd: lock_rename() needs both directories to live on the same fs
- [arm*] ASoC: simple-card: fixup asoc_simple_probe() error handling
- ACPI: resource: Skip IRQ override on ASUS ExpertBook B1402CVA
- swiotlb-xen: provide the "max_mapping_size" method
- bcache: replace a mistaken IS_ERR() by IS_ERR_OR_NULL() in
btree_gc_coalesce()
- bcache: fixup multi-threaded bch_sectors_dirty_init() wake-up race
- [s390x] dasd: protect device queue against concurrent access
- USB: serial: option: add Luat Air72*U series products
- [x86] hv_netvsc: Fix race of register_netdevice_notifier and VF register
- [x86] hv_netvsc: Mark VF as slave before exposing it to user-mode
- dm-delay: fix a race between delay_presuspend and delay_bio
- bcache: check return value from btree_node_alloc_replacement()
- bcache: prevent potential division by zero error
- bcache: fixup init dirty data errors
- bcache: fixup lock c->root error
- USB: serial: option: add Fibocom L7xx modules
- USB: serial: option: fix FM101R-GL defines
- USB: serial: option: don't claim interface 4 for ZTE MF290
- [arm*] USB: dwc2: write HCINT with INTMASK applied
- [arm64,armhf] usb: dwc3: Fix default mode initialization
- [arm64,armhf] usb: dwc3: set the dma max_seg_size
- [arm64,armhf] USB: dwc3: qcom: fix wakeup after probe deferral
- io_uring: fix off-by one bvec index
- pinctrl: avoid reload of p state in list iteration
- firewire: core: fix possible memory leak in create_units()
- mmc: block: Do not lose cache flush during CQE error recovery
- ALSA: hda: Disable power-save on KONTRON SinglePC
- ALSA: hda/realtek: Headset Mic VREF to 100%
- ALSA: hda/realtek: Add supported ALC257 for ChromeOS
- dm-verity: align struct dm_verity_fec_io properly
- dm verity: don't perform FEC for failed readahead IO
- bcache: revert replacing IS_ERR_OR_NULL with IS_ERR
- [amd64] iommu/vt-d: Add MTL to quirk list to skip TE disabling
- [powerpc*] Don't clobber f0/vs0 during fp|altivec register save
(Closes: #1032104)
- btrfs: add dmesg output for first mount and last unmount of a filesystem
- btrfs: ref-verify: fix memory leaks in btrfs_ref_tree_mod()
- btrfs: fix off-by-one when checking chunk map includes logical address
- btrfs: send: ensure send_fd is writable
- btrfs: make error messages more clear when getting a chunk map
- Input: xpad - add HyperX Clutch Gladiate Support
- [x86] hv_netvsc: fix race of netvsc and VF register_netdevice
- USB: core: Change configuration warnings to notices
- usb: config: fix iteration issue in 'usb_get_bos_descriptor()'
- ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
(CVE-2023-6932)
- [arm64] dpaa2-eth: increase the needed headroom to account for alignment
- net: stmmac: xgmac: Disable FPE MMC interrupts
- Revert "workqueue: remove unused cancel_work()"
- r8169: prevent potential deadlock in rtl8169_close
- smb3: fix touch -h of symlink
- [x86] ASoC: Intel: Move soc_intel_is_foo() helpers to a generic header
- [x86] ASoC: SOF: sof-pci-dev: use community key on all Up boards
- [x86] ASoC: SOF: sof-pci-dev: add parameter to override topology filename
- [x86] ASoC: SOF: sof-pci-dev: don't use the community key on APL
Chromebooks
- [x86] ASoC: SOF: sof-pci-dev: Fix community key quirk detection
- [s390x] mm: fix phys vs virt confusion in mark_kernel_pXd() functions
family
- [s390x] cmma: fix detection of DAT pages
- ima: annotate iint mutex to avoid lockdep false positive warnings
- driver core: Move the "removable" attribute from USB to core
- drm/amdgpu: don't use ATRM for external devices
- fs: add ctime accessors infrastructure
- smb3: fix caching of ctime on setxattr
- scsi: core: Introduce the scsi_cmd_to_rq() function
- scsi: qla2xxx: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
- scsi: qla2xxx: Fix system crash due to bad pointer access
- [armhf] cpufreq: imx6q: don't warn for disabling a non-existing frequency
- [armhf] cpufreq: imx6q: Don't disable 792 Mhz OPP unnecessarily
- mmc: cqhci: Increase recovery halt timeout
- mmc: cqhci: Warn of halt or task clear failure
- mmc: cqhci: Fix task clearing in CQE error recovery
- mmc: core: convert comma to semicolon
- mmc: block: Retry commands in CQE error recovery
- mmc: core: add helpers mmc_regulator_enable/disable_vqmmc
- r8169: disable ASPM in case of tx timeout
- r8169: fix deadlock on RTL8125 in jumbo mtu mode
- driver core: Release all resources during unbind before updating device
links
https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.204
- hrtimers: Push pending hrtimers away from outgoing CPU earlier
- i2c: designware: Fix corrupted memory seen in the ISR
- netfilter: ipset: fix race condition between swap/destroy and kernel side
add/del/test
- tg3: Move the [rt]x_dropped counters to tg3_napi
- tg3: Increment tx_dropped in tg3_tso_bug()
- kconfig: fix memory leak from range properties

[continued in next message]

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)