[continued from previous message]

- rcu-tasks: Make rude RCU-Tasks work well with CPU hotplug
- rcu-tasks: Handle queue-shrink/callback-enqueue race condition
- wifi: ath11k: debugfs: fix to work with multiple PCI devices
- [x86] thermal: intel: Fix unsigned comparison with less than zero
- timers: Prevent union confusion from unexpected restart_syscall()
- [x86] bugs: Reset speculation control settings on init
- wifi: brcmfmac: ensure CLM version is null-terminated to prevent
stack-out-of-bounds
- wifi: mt7601u: fix an integer underflow
- inet: fix fast path in __inet_hash_connect()
- ice: restrict PTP HW clock freq adjustments to 100, 000, 000 PPB
- ice: add missing checks for PF vsi type
- ACPI: Don't build ACPICA with '-Os'
- bpf, docs: Fix modulo zero, division by zero, overflow, and underflow
- [x86] thermal: intel: intel_pch: Add support for Wellsburg PCH
- clocksource: Suspend the watchdog temporarily when high read latency
detected
- net: bcmgenet: Add a check for oversized packets
- [s390x] mm,ptdump: avoid Kasan vs Memcpy Real markers swapping
- netfilter: nf_tables: NULL pointer dereference in nf_tables_updobj()
- can: isotp: check CAN address family in isotp_bind()
- wifi: mt76: dma: free rx_head in mt76_dma_rx_cleanup
- ACPI: video: Fix Lenovo Ideapad Z570 DMI match
- net/mlx5: fw_tracer: Fix debug print
- coda: Avoid partial allocation of sig_inputArgs
- uaccess: Add minimum bounds check on kernel buffer size
- [s390x] idle: mark arch_cpu_idle() noinstr
- time/debug: Fix memory leak with using debugfs_lookup()
- PM: domains: fix memory leak with using debugfs_lookup()
- PM: EM: fix memory leak with using debugfs_lookup()
- Bluetooth: Fix issue with Actions Semi ATS2851 based devices
- Bluetooth: btusb: Add new PID/VID 0489:e0f2 for MT7921
- Bluetooth: btusb: Add VID:PID 13d3:3529 for Realtek RTL8821CE
- wifi: rtw89: debug: avoid invalid access on RTW89_DBG_SEL_MAC_30
- hv_netvsc: Check status in SEND_RNDIS_PKT completion message
- [s390x] kfence: fix page fault reporting
- devlink: Fix TP_STRUCT_entry in trace of devlink health report
- scm: add user copy checks to put_cmsg()
- drm: panel-orientation-quirks: Add quirk for Lenovo Yoga Tab 3 X90F
- drm: panel-orientation-quirks: Add quirk for DynaBook K50
- drm/amd/display: Reduce expected sdp bandwidth for dcn321
- drm/amd/display: Revert Reduce delay when sink device not able to ACK
00340h write
- drm/amd/display: Fix potential null-deref in dm_resume
- [armhf] drm/omap: dsi: Fix excessive stack usage
- HID: Add Mapping for System Microphone Mute
- drm/amd/display: Defer DIG FIFO disable after VID stream enable
- drm/radeon: free iio for atombios when driver shutdown
- drm/amd: Avoid BUG() for case of SRIOV missing IP version
- scsi: lpfc: Fix use-after-free KFENCE violation during sysfs firmware
write
- Revert "fbcon: don't lose the console font across generic->chip driver
switch"
- drm/amd: Avoid ASSERT for some message failures
- drm: amd: display: Fix memory leakage
- drm/amd/display: fix mapping to non-allocated address
- HID: uclogic: Add frame type quirk
- HID: uclogic: Add battery quirk
- HID: uclogic: Add support for XP-PEN Deco Pro SW
- HID: uclogic: Add support for XP-PEN Deco Pro MW
- [arm64] drm/msm/dsi: Add missing check for alloc_ordered_workqueue
- drm/amd/display: Set hvm_enabled flag for S/G mode
- [arm64] drm/msm/dpu: Add DSC hardware blocks to register snapshot
- [x86] ASoC: soc-compress: Reposition and add pcm_mutex
- [armel,armhf] ASoC: kirkwood: Iterate over array indexes instead of using
pointer math
- [armhf] regulator: s5m8767: Bounds check id indexing into arrays
- Revert "drm/amdgpu: TA unload messages are not actually sent to psp when
amdgpu is uninstalled"
- drm/amd/display: fix FCLK pstate change underflow
- gfs2: Improve gfs2_make_fs_rw error handling
- [x86] hwmon: (coretemp) Simplify platform device handling
- hwmon: (nct6775) Directly call ASUS ACPI WMI method
- hwmon: (nct6775) B650/B660/X670 ASUS boards support
- drm/amd/display: Do not commit pipe when updating DRR
- scsi: ufs: core: Fix device management cmd timeout flow
- HID: logitech-hidpp: Don't restart communication if not necessary
- drm/amd/display: Enable P-state validation checks for DCN314
- drm: panel-orientation-quirks: Add quirk for Lenovo IdeaPad Duet 3 10IGL5
- drm/amd/display: Disable HUBP/DPP PG on DCN314 for now
- dm thin: add cond_resched() to various workqueue loops
- dm cache: add cond_resched() to various workqueue loops
- nfsd: zero out pointers after putting nfsd_files on COPY setup error
- nfsd: don't hand out delegation on setuid files being opened for write
- cifs: prevent data race in smb2_reconnect()
- drm/shmem-helper: Revert accidental non-GPL export
- driver core: fw_devlink: Avoid spurious error message
- wifi: rtl8xxxu: fixing transmisison failure for rtl8192eu
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
(Closes: #1022126)
- firmware: coreboot: framebuffer: Ignore reserved pixel color bits
- block: don't allow multiple bios for IOCB_NOWAIT issue
- block: clear bio->bi_bdev when putting a bio back in the cache
- block: be a bit more careful in checking for NULL bdev while polling
- [arm64] rtc: pm8xxx: fix set-alarm race
- ipmi:ssif: resend_msg() cannot fail
- ipmi_ssif: Rename idle state and check
- io_uring: Replace 0-length array with flexible array
- io_uring: use user visible tail in io_uring_poll()
- io_uring: handle TIF_NOTIFY_RESUME when checking for task_work
- io_uring: add a conditional reschedule to the IOPOLL cancelation loop
- io_uring: add reschedule point to handle_tw_list()
- io_uring/rsrc: disallow multi-source reg buffers
- io_uring: remove MSG_NOSIGNAL from recvmsg
- io_uring: fix fget leak when fs don't support nowait buffered read
- [s390x] extmem: return correct segment type in __segment_load()
- [s390x] discard .interp section
- [s390x] kprobes: fix irq mask clobbering on kprobe reenter from
post_handler
- [s390x] kprobes: fix current_kprobe never cleared after kprobes reenter
- [s390x] KVM: s390: disable migration mode when dirty tracking is disabled
- cifs: Fix uninitialized memory read in smb3_qfs_tcon()
- cifs: Fix uninitialized memory reads for oparms.mode
- cifs: fix mount on old smb servers
- cifs: introduce cifs_io_parms in smb2_async_writev()
- cifs: split out smb3_use_rdma_offload() helper
- cifs: don't try to use rdma offload on encrypted connections
- cifs: Check the lease context if we actually got a lease
- cifs: return a single-use cfid if we did not get a lease
- scsi: mpi3mr: Remove unnecessary memcpy() to alltgt_info->dmi
- btrfs: hold block group refcount during async discard
- locking/rwsem: Prevent non-first waiter from spinning in down_write()
slowpath
- ksmbd: fix wrong data area length for smb2 lock request
- ksmbd: do not allow the actual frame length to be smaller than the rfc1002
length
- ksmbd: fix possible memory leak in smb2_lock()
- io_uring: mark task TASK_RUNNING before handling resume/task work
- hfs: fix missing hfs_bnode_get() in __hfs_bnode_create
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- exfat: fix reporting fs error when reading dir beyond EOF
- exfat: fix unexpected EOF while reading dir
- exfat: redefine DIR_DELETED as the bad cluster number
- exfat: fix inode->i_blocks for non-512 byte sector size device
- fs: dlm: don't set stop rx flag after node reset
- fs: dlm: move sending fin message into state change handling
- fs: dlm: send FIN ack back in right cases
- f2fs: fix information leak in f2fs_move_inline_dirents()
- f2fs: retry to update the inode page given data corruption
- f2fs: fix cgroup writeback accounting with fs-layer encryption
- f2fs: fix kernel crash due to null io->bio
- ocfs2: fix defrag path triggering jbd2 ASSERT
- ocfs2: fix non-auto defrag path not working issue
- udf: Truncate added extents on failed expansion
- udf: Do not bother merging very long extents
- udf: Do not update file length for failed writes to inline files
- udf: Preserve link count of system files
- udf: Detect system inodes linked into directory hierarchy
- udf: Fix file corruption when appending just after end of preallocated
extent
- md: don't update recovery_cp when curr_resync is ACTIVE
- KVM: Destroy target device if coalesced MMIO unregistration fails
- [x86] KVM: VMX: Fix crash due to uninitialized current_vmcs
- KVM: Register /dev/kvm as the _very_ last thing during initialization
- [x86] KVM: x86: Purge "highest ISR" cache when updating APICv state
- [x86] KVM: x86: Blindly get current x2APIC reg value on "nodecode write"
traps
- [x86] KVM: x86: Don't inhibit APICv/AVIC on xAPIC ID "change" if APIC is
disabled
- [x86] KVM: x86: Don't inhibit APICv/AVIC if xAPIC ID mismatch is due to
32-bit ID
- [x86] KVM: SVM: Flush the "current" TLB when activating AVIC
- [x86] KVM: SVM: Process ICR on AVIC IPI delivery failure due to invalid
target
- [x86] KVM: SVM: Don't put/load AVIC when setting virtual APIC mode
- [x86] KVM: x86: Inject #GP if WRMSR sets reserved bits in APIC Self-IPI
- [x86] KVM: x86: Inject #GP on x2APIC WRMSR that sets reserved bits 63:32
- [x86] KVM: SVM: Fix potential overflow in SEV's send|receive_update_data()
- [x86] KVM: SVM: hyper-v: placate modpost section mismatch error
- [x86] virt: Force GIF=1 prior to disabling SVM (for reboot flows)
- [x86] crash: Disable virt in core NMI crash handler to avoid double
shootdown
- [x86] reboot: Disable virtualization in an emergency if SVM is supported
- [x86] reboot: Disable SVM, not just VMX, when stopping CPUs
- [x86] kprobes: Fix __recover_optprobed_insn check optimizing logic
- [x86] kprobes: Fix arch_check_optimized_kprobe check within
optimized_kprobe range
- [x86] microcode/amd: Remove load_microcode_amd()'s bsp parameter
- [x86] microcode/AMD: Add a @cpu parameter to the reloading functions
- [x86] microcode/AMD: Fix mixed steppings support
- [x86] speculation: Allow enabling STIBP with legacy IBRS
- Documentation/hw-vuln: Document the interaction between IBRS and STIBP
- [amd64] virt/sev-guest: Return -EIO if certificate buffer is not large
enough
- brd: mark as nowait compatible
- brd: return 0/-error from brd_insert_page()
- brd: check for REQ_NOWAIT and set correct page allocation mask
- ima: fix error handling logic when file measurement failed
- ima: Align ima_file_mmap() parameters with mmap_file LSM hook
- irqdomain: Fix association race
- irqdomain: Fix disassociation race
- irqdomain: Look for existing mapping only once
- irqdomain: Drop bogus fwspec-mapping error handling
- irqdomain: Refactor __irq_domain_alloc_irqs()
- irqdomain: Fix mapping-creation race
- irqdomain: Fix domain registration race
- [x86] crypto: qat - fix out-of-bounds read
- ALSA: ice1712: Do not left ice->gpio_mutex locked in aureon_add_controls()
- ALSA: hda/realtek: Add quirk for HP EliteDesk 800 G6 Tower PC
- jbd2: fix data missing when reusing bh which is ready to be checkpointed
- ext4: optimize ea_inode block expansion
- ext4: refuse to create ea block when umounted
- [amd64,arm64] cxl/pmem: Fix nvdimm registration races
- mtd: spi-nor: sfdp: Fix index value for SCCR dwords
- mtd: spi-nor: spansion: Consider reserved bits in CFR5 register
- mtd: spi-nor: Fix shift-out-of-bounds in spi_nor_set_erase_type
- dm: send just one event on resize, not two
- dm: add cond_resched() to dm_wq_work()
- dm: add cond_resched() to dm_wq_requeue_work()
- wifi: rtw88: use RTW_FLAG_POWERON flag to prevent to power on/off twice
- wifi: rtl8xxxu: Use a longer retry limit of 48
- wifi: ath11k: allow system suspend to survive ath11k
- wifi: cfg80211: Fix use after free for wext
- wifi: cfg80211: Set SSID if it is not already set
- cpuidle: add ARCH_SUSPEND_POSSIBLE dependencies
- qede: fix interrupt coalescing configuration
- [x86] thermal: intel: powerclamp: Fix cur_state for multi package system
- dm flakey: fix logic when corrupting a bio
- dm cache: free background tracker's queued work in btracker_destroy
- dm flakey: don't corrupt the zero page
- dm flakey: fix a bug with 32-bit highmem systems
- hwmon: (nct6775) Fix incorrect parenthesization in nct6775_write_fan_div()
- [arm64] mm: hugetlb: Disable HUGETLB_PAGE_OPTIMIZE_VMEMMAP
- fuse: add inode/permission checks to fileattr_get/fileattr_set
- rbd: avoid use-after-free in do_rbd_add() when rbd_dev_create() fails
- ceph: update the time stamps and try to drop the suid/sgid
- regulator: core: Use ktime_get_boottime() to determine how long a
regulator was off
- panic: fix the panic_print NMI backtrace setting
- mm/hwpoison: convert TTU_IGNORE_HWPOISON to TTU_HWPOISON
- dax/kmem: Fix leak of memory-hotplug resources
- mm: memcontrol: deprecate charge moving
- mm/thp: check and bail out if page in deferred queue already
- kprobes: Fix to handle forcibly unoptimized kprobes on freeing_list
- memory tier: release the new_memtier in find_create_memory_tier()
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- tracing/eprobe: Fix to add filter on eprobe description in README file
- [amd64] iommu/amd: Add a length limitation for the ivrs_acpihid
command-line parameter
- [amd64] iommu/amd: Improve page fault error reporting
- scsi: aacraid: Allocate cmd_priv with scsicmd
- scsi: qla2xxx: Fix link failure in NPIV environment
- scsi: qla2xxx: Check if port is online before sending ELS
- scsi: qla2xxx: Fix DMA-API call trace on NVMe LS requests
- scsi: qla2xxx: Remove unintended flag clearing
- scsi: qla2xxx: Fix erroneous link down
- scsi: qla2xxx: Remove increment of interface err cnt
- scsi: ses: Don't attach if enclosure has no components
- scsi: ses: Fix slab-out-of-bounds in ses_enclosure_data_process()
- scsi: ses: Fix possible addl_desc_ptr out-of-bounds accesses
- scsi: ses: Fix possible desc_ptr out-of-bounds accesses
- scsi: ses: Fix slab-out-of-bounds in ses_intf_remove()
- [riscv64] RISC-V: add a spin_shadow_stack declaration
- [riscv64] Avoid enabling interrupts in die()
- [riscv64] mm: fix regression due to update_mmu_cache change
- [riscv64] jump_label: Fixup unaligned arch_static_branch function
- [riscv64] mm: Perform BPF exhandler fixup on page fault
- [riscv64] ftrace: Remove wasted nops for !RISCV_ISA_C
- [riscv64] ftrace: Reduce the detour code size to half
- PCI/PM: Observe reset delay irrespective of bridge_d3
- PCI: Unify delay handling for reset and resume
- PCI: hotplug: Allow marking devices as disconnected during bind/unbind
- PCI: Avoid FLR for AMD FCH AHCI adapters
- PCI/DPC: Await readiness of secondary bus after reset
- [amd64] iommu/vt-d: Avoid superfluous IOTLB tracking in lazy mode
- [amd64] iommu/vt-d: Fix PASID directory pointer coherency
- vfio/type1: exclude mdevs from VFIO_UPDATE_VADDR
- vfio/type1: prevent underflow of locked_vm via exec()
- vfio/type1: track locked_vm per dma
- vfio/type1: restore locked_vm
- drm/amd: Fix initialization for nbio 7.5.1
- [x86] drm/i915/quirks: Add inverted backlight quirk for HP 14-r206nv
- drm/radeon: Fix eDP for single-display iMac11,2
- [x86] drm/i915: Don't use stolen memory for ring buffers with LLC
- [x86] drm/i915: Don't use BAR mappings for ring buffers with LLC
- drm/edid: fix AVI infoframe aspect ratio handling
- drm/edid: fix parsing of 3D modes from HDMI VSDB
- qede: avoid uninitialized entries in coal_entry array
- brd: use radix_tree_maybe_preload instead of radix_tree_preload
- sbitmap: Advance the queue index before waking up a queue
- wait: Return number of exclusive waiters awaken
- sbitmap: Try each queue to wake up at least one waiter
- net: avoid double iput when sock_alloc_file fails (CVE-2023-1032)
https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.17
- Revert "blk-cgroup: synchronize pd_free_fn() from blkg_free_workfn() and
blkcg_deactivate_policy()"
- Revert "blk-cgroup: dropping parent refcount after pd_free_fn() is done"
https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.18
- net/sched: Retire tcindex classifier
- fs/jfs: fix shift exponent db_agl2size negative
- [arm64] driver: soc: xilinx: fix memory leak in
xlnx_add_cb_for_notify_event()
- f2fs: don't rely on F2FS_MAP_* in f2fs_iomap_begin
- f2fs: fix to avoid potential deadlock
- objtool: Fix memory leak in create_static_call_sections()
- [armhf] pwm: stm32-lp: fix the check on arr and cmp registers update
- f2fs: introduce trace_f2fs_replace_atomic_write_block
- f2fs: correct i_size change for atomic writes
- f2fs: clear atomic_write_task in f2fs_abort_atomic_write()
- fs: f2fs: initialize fsdata in pagecache_write()
- f2fs: allow set compression option of files without blocks
- f2fs: fix to abort atomic write only during do_exist()
- ubi: ensure that VID header offset + VID header size <= alloc, size
- ubifs: Fix memory leak in ubifs_sysfs_init()
- ubifs: Rectify space budget for ubifs_symlink() if symlink is encrypted
- ubifs: Rectify space budget for ubifs_xrename()
- ubifs: Fix wrong dirty space budget for dirty inode
- ubifs: do_rename: Fix wrong space budget when target inode's nlink > 1
- ubifs: Reserve one leb for each journal head while doing budget
- ubi: Fix use-after-free when volume resizing failed
- ubi: Fix unreferenced object reported by kmemleak in ubi_resize_volume()
- ubifs: Fix memory leak in alloc_wbufs()
- ubi: Fix possible null-ptr-deref in ubi_free_volume()
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- ubifs: ubifs_writepage: Mark page dirty after writing inode failed
- ubifs: ubifs_releasepage: Remove ubifs_assert(0) to valid this process
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: ubi_wl_put_peb: Fix infinite loop when wear-leveling work failed
- f2fs: fix to avoid potential memory corruption in
__update_iostat_latency()
- ext4: use ext4_fc_tl_mem in fast-commit replay path
- ext4: don't show commit interval if it is zero
- netfilter: nf_tables: allow to fetch set elements when table has an owner
- [x86] um: vdso: Add '%rcx' and '%r11' to the syscall clobber list
- f2fs: synchronize atomic write aborts
- watchdog: Fix kmemleak in watchdog_cdev_register
- watchdog: pcwd_usb: Fix attempting to access uninitialized memory
- [arm64] watchdog: sbsa_wdog: Make sure the timeout programming is within
the limits
- netfilter: ctnetlink: fix possible refcount leak in
ctnetlink_create_conntrack()
- netfilter: conntrack: fix rmmod double-free race
- netfilter: ip6t_rpfilter: Fix regression with VRF interfaces
- netfilter: ebtables: fix table blob use-after-free
- netfilter: xt_length: use skb len to match in length_mt6
- netfilter: ctnetlink: make event listener tracking global
- netfilter: x_tables: fix percpu counter block leak on error path when
creating new netns
- ptp: vclock: use mutex to fix "sleep on atomic" bug
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- net: sunhme: Fix region request
- sctp: add a refcnt in sctp_stream_priorities to avoid a nested loop
- net: fix __dev_kfree_skb_any() vs drop monitor
- 9p/xen: fix version parsing
- 9p/xen: fix connection sequence
- 9p/rdma: unmap receive dma buffer in rdma_request()/post_recv()
- mlx5: fix skb leak while fifo resync and push
- mlx5: fix possible ptp queue fifo use-after-free
- net/mlx5: ECPF, wait for VF pages only after disabling host PFs
- net/mlx5e: Verify flow_source cap before using it
- net/mlx5: Geneve, Fix handling of Geneve object id as error code
- ext4: fix incorrect options show of original mount_opt and extend
mount_opt2
- nfc: fix memory leak of se_io context in nfc_genl_se_io
- net/sched: transition act_pedit to rcu and percpu stats
- net/sched: act_pedit: fix action bind logic
- net/sched: act_mpls: fix action bind logic
- net/sched: act_sample: fix action bind logic
- [arm64] net: dsa: felix: fix internal MDIO controller resource length
- tcp: tcp_check_req() can be called from process context
- vc_screen: modify vcs_size() handling in vcs_read()
- [arm64,armhf] rtc: sun6i: Always export the internal oscillator
- genirq/ipi: Fix NULL pointer deref in irq_data_get_affinity_mask()
- scsi: ipr: Work around fortify-string warning
- rtc: allow rtc_read_alarm without read_alarm callback
- io_uring: fix size calculation when registering buf ring
- loop: loop_set_status_from_info() check before assignment
- nvme: bring back auto-removal of deleted namespaces during sequential scan
- nvme-tcp: don't access released socket during error recovery
- tracing: Add NULL checks for buffer in ring_buffer_free_read_page()
- kernel/printk/index.c: fix memory leak with using debugfs_lookup()
- [x86] firmware/efi sysfb_efi: Add quirk for Lenovo IdeaPad Duet 3
- bootconfig: Increase max nodes of bootconfig from 1024 to 8192 for DCC
support
- [amd64] IB/hfi1: Update RMT size calculation
- [amd64] iommu/amd: Fix error handling for pdev_pri_ats_enable()
- PCI/ACPI: Account for _S0W of the target bridge in acpi_pci_bridge_d3()
- media: uvcvideo: Remove format descriptions
- media: uvcvideo: Handle cameras with invalid descriptors
- media: uvcvideo: Handle errors from calls to usb_string
- media: uvcvideo: Quirk for autosuspend in Logitech B910 and C910
- media: uvcvideo: Silence memcpy() run-time false positive warnings
- USB: fix memory leak with using debugfs_lookup()
- cacheinfo: Fix shared_cpu_map to handle shared caches at different levels
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- [arm64] tty: serial: fsl_lpuart: disable the CTS when send break signal
- [x86] mei: bus-fixup:upon error print return values of send and receive
- iio: accel: mma9551_core: Prevent uninitialized variable in
mma9551_read_status_word()
- iio: accel: mma9551_core: Prevent uninitialized variable in
mma9551_read_config_word()
- media: uvcvideo: Add GUID for BGRA/X 8:8:8:8
- soundwire: bus_type: Avoid lockdep assert in sdw_drv_probe()
- [arm64,armhf] USB: dwc3: fix memory leak with using debugfs_lookup()
- [arm64,armhf] USB: chipidea: fix memory leak with using debugfs_lookup()
- [arm64,armhf] USB: ULPI: fix memory leak with using debugfs_lookup()
- USB: uhci: fix memory leak with using debugfs_lookup()
- USB: sl811: fix memory leak with using debugfs_lookup()
- [mips64el,mipsel] USB: isp116x: fix memory leak with using
debugfs_lookup()
- [arm64,armhf] usb: host: xhci: mvebu: Iterate over array indexes instead
of using pointer math
- USB: ene_usb6250: Allocate enough memory for full object
- usb: uvc: Enumerate valid values for color matching
- usb: gadget: uvc: Make bSourceID read/write
- PCI: Align extra resources for hotplug bridges properly
- PCI: Take other bus devices into account when distributing resources
- PCI: Distribute available resources for root buses, too
- [i386] tty: pcn_uart: fix memory leak with using debugfs_lookup()
- [x86] misc: vmw_balloon: fix memory leak with using debugfs_lookup()
- drivers: base: component: fix memory leak with using debugfs_lookup()
- drivers: base: dd: fix memory leak with using debugfs_lookup()
- PCI: Add ACS quirk for Wangxun NICs
- PCI: pciehp: Add Qualcomm quirk for Command Completed erratum
- [arm64] phy: rockchip-typec: Fix unsigned comparison with less than zero
- RDMA/cma: Distinguish between sockaddr_in and sockaddr_in6 by size
- iommu: Attach device group to old domain in error path
- soundwire: cadence: Remove wasted space in response_buf
- soundwire: cadence: Drain the RX FIFO after an IO timeout
- net: tls: avoid hanging tasks on the tx_lock
- [x86] resctl: fix scheduler confusion with 'current'
- drm/display/dp_mst: Add drm_atomic_get_old_mst_topology_state()
- drm/display/dp_mst: Fix down/up message handling after sink disconnect
- drm/display/dp_mst: Fix down message handling after a packet reception
error
- drm/display/dp_mst: Fix payload addition on a disconnected sink
- [x86] drm/i915/dp_mst: Add the MST topology state for modesetted CRTCs
- [x86] drm/i915: Fix system suspend without fbdev being initialized
- media: uvcvideo: Fix race condition with usb_kill_urb
- io_uring: fix two assignments in if conditions
- io_uring/poll: allow some retries for poll triggering spuriously
- [arm64] efi: Make efi_rt_lock a raw_spinlock
- [arm64] mte: Fix/clarify the PG_mte_tagged semantics
- usb: gadget: uvc: fix missing mutex_unlock() if kstrtou8() fails
https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.19
- tpm: disable hwrng for fTPM on some AMD designs
- wifi: cfg80211: Partial revert "wifi: cfg80211: Fix use after free for
wext"
- [x86] staging: rtl8192e: Remove function ..dm_check_ac_dc_power calling a
script
- [x86] staging: rtl8192e: Remove call_usermodehelper starting RadioPower.sh
https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.20
- fs: prevent out-of-bounds array speculation when closing a file descriptor
- btrfs: fix unnecessary increment of read error stat on write error
- btrfs: fix percent calculation for bg reclaim message
- io_uring/uring_cmd: ensure that device supports IOPOLL
- erofs: fix wrong kunmap when using LZMA on HIGHMEM platforms
- fork: allow CLONE_NEWTIME in clone3 flags
- [x86] CPU/AMD: Disable XSAVES on AMD family 0x17
- drm/amdgpu: fix error checking in amdgpu_read_mm_registers for soc15
- drm/amdgpu: fix error checking in amdgpu_read_mm_registers for soc21
- drm/amdgpu: fix error checking in amdgpu_read_mm_registers for nv
- drm/display: Don't block HDR_OUTPUT_METADATA on unknown EOTF
- drm/connector: print max_requested_bpc in state debugfs
- staging: rtl8723bs: Fix key-store index handling
- staging: rtl8723bs: Pass correct parameters to cfg80211_get_bss()
- ext4: fix cgroup writeback accounting with fs-layer encryption
- ext4: fix RENAME_WHITEOUT handling for inline directories
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- ext4: move where set the MAY_INLINE_DATA flag is set
- ext4: fix WARNING in ext4_update_inline_data
- ext4: zero i_disksize when initializing the bootloader inode
- HID: core: Provide new max_buffer_size attribute to over-ride the default
- HID: uhid: Over-ride the default maximum data buffer value with our own
- nfc: change order inside nfc_se_io error path
- [x86] KVM: VMX: Reset eVMCS controls in VP assist page during hardware
disabling
- [x86] KVM: VMX: Don't bother disabling eVMCS static key on module exit
- [x86] KVM: x86: Move guts of kvm_arch_init() to standalone helper
- [x86] KVM: VMX: Do _all_ initialization before exposing /dev/kvm to
userspace
- fs: dlm: fix log of lowcomms vs midcomms
- fs: dlm: add midcomms init/start functions
- fs: dlm: start midcomms before scand
- fs: dlm: remove send repeat remove handling
- fs: dlm: use packet in dlm_mhandle
- fd: dlm: trace send/recv of dlm message and rcom
- fs: dlm: fix use after free in midcomms commit
- fs: dlm: use WARN_ON_ONCE() instead of WARN_ON()
- fs: dlm: be sure to call dlm_send_queue_flush()
- fs: dlm: fix race setting stop tx flag
- udf: Fix off-by-one error when discarding preallocation
- bus: mhi: ep: Change state_lock to mutex
- ipmi:ssif: Remove rtc_us_timer
- ipmi:ssif: Increase the message retry time
- ipmi:ssif: Add a timer between request retries
- [x86] drm/i915: Introduce intel_panel_init_alloc()
- [x86] drm/i915: Do panel VBT init early if the VBT declares an explicit
panel type
- [x86] drm/i915: Populate encoder->devdata for DSI on icl+
- block: Revert "block: Do not reread partition table on exclusively open
device"
- block: fix scan partition for exclusively open device again
- scsi: core: Remove the /proc/scsi/${proc_name} directory earlier
- ext4: Fix possible corruption when moving a directory
- cifs: improve checking of DFS links over STATUS_OBJECT_NAME_INVALID
- drm/nouveau/kms/nv50: fix nv50_wndw_new_ prototype
- [arm64] drm/msm: Fix potential invalid ptr free
- [arm64] drm/msm/a5xx: fix setting of the CP_PREEMPT_ENABLE_LOCAL register
- [arm64] drm/msm/a5xx: fix highest bank bit for a530
- [arm64] drm/msm/a5xx: fix the emptyness check in the preempt code
- [arm64] drm/msm/a5xx: fix context faults during ring switch
- tls: rx: fix return value for async crypto
- [arm64] drm/msm/dpu: disable features unsupported by QCM2290
- ila: do not generate empty messages in ila_xlat_nl_cmd_get_mapping()
- netfilter: nft_last: copy content when cloning expression
- netfilter: nft_quota: copy content when cloning expression
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and
do_tls_setsockopt_conf() (CVE-2023-28466)
- net: use indirect calls helpers for sk_exit_memory_pressure()
- net: lan78xx: fix accessing the LAN7800's internal phy specific registers
from the MAC driver
- ice: copy last block omitted in ice_get_module_eeprom()
- bpf, sockmap: Fix an infinite loop error when len is 0 in
tcp_bpf_recvmsg_parser()
- [arm64] drm/msm/dpu: fix len of sc7180 ctl blocks
- [arm64] drm/msm/dpu: drop DPU_DIM_LAYER from MIXER_MSM8998_MASK
- [arm64] drm/msm/dpu: fix clocks settings for msm8998 SSPP blocks
- [arm64] drm/msm/dpu: clear DSPP reservations in rm release
- net: stmmac: add to set device wake up flag when stmmac init phy
- net: phylib: get rid of unnecessary locking
- bnxt_en: Avoid order-5 memory allocation for TPA data
- netfilter: ctnetlink: revert to dumping mark regardless of event type
- netfilter: tproxy: fix deadlock due to missing BH disable
- btrfs: fix extent map logging bit not cleared for split maps after
dropping range

[continued in next message]

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)