[continued from previous message]

- brcmfmac: return error when getting invalid max_flowrings from dongle
- wifi: ath9k: verify the expected usb_endpoints are present
- wifi: ar5523: Fix use-after-free on ar5523_cmd() timed out
- ipmi: fix memleak when unload ipmi driver
- drm/amd/display: prevent memory leak
- qed (gcc13): use u16 for fid to be big enough
- bpf: make sure skb->len != 0 when redirecting to a tunneling device
- hamradio: baycom_epp: Fix return type of baycom_send_packet()
- wifi: brcmfmac: Fix potential shift-out-of-bounds in
brcmf_fw_alloc_request()
- igb: Do not free q_vector unless new one was allocated
- drm/amdgpu: Fix type of second parameter in trans_msg() callback
- drm/amdgpu: Fix type of second parameter in odn_edit_dpm_table() callback
- [s390x] ctcm: Fix return type of ctc{mp,}m_tx()
- [s390x] netiucv: Fix return type of netiucv_tx()
- [s390x] lcs: Fix return type of lcs_start_xmit()
- [arm64] drm/msm: Use drm_mode_copy()
- [arm64] drm/rockchip: Use drm_mode_copy()
- drivers/md/md-bitmap: check the return value of md_bitmap_get_counter()
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- drm/amd/display: fix array index out of bound error in bios parser
- net: add atomic_long_t to net_device_stats fields
- mrp: introduce active flags to prevent UAF when applicant uninit
- ppp: associate skb with a device at tx
- bpf: Prevent decl_tag from being referenced in func_proto arg
- ethtool: avoiding integer overflow in ethtool_phys_id()
- media: dvb-frontends: fix leak of memory fw
- media: dvbdev: adopts refcnt to avoid UAF
- media: dvb-usb: fix memory leak in dvb_usb_adapter_init()
- blk-mq: fix possible memleak when register 'hctx' failed
- regulator: core: fix use_count leakage when handling boot-on
- [arm64] mmc: f-sdh30: Add quirks for broken timeout clock capability
- media: si470x: Fix use-after-free in si470x_int_in_callback()
- hugetlbfs: fix null-ptr-deref in hugetlbfs_parse_param()
- orangefs: Fix kmemleak in orangefs_prepare_debugfs_help_string()
- orangefs: Fix kmemleak in orangefs_{kernel,client}_debug_init()
- hwmon: (jc42) Fix missing unlock on error in jc42_write()
- ALSA/ASoC: hda: move/rename snd_hdac_ext_stop_streams to hdac_stream.c
- ALSA: hda: add snd_hdac_stop_streams() helper
- [x86] ASoC: Intel: Skylake: Fix driver hang during shutdown
- ASoC: audio-graph-card: fix refcount leak of cpu_ep in
__graph_for_each_link()
- [x86] ASoC: rt5670: Remove unbalanced pm_runtime_put()
- pstore: Switch pmsg_lock to an rt_mutex to avoid priority inversion
- perf debug: Set debug_peo_args and redirect_to_stderr variable to correct
values in perf_quiet_option()
- afs: Fix lost servers_outstanding count
- pstore: Make sure CONFIG_PSTORE_PMSG selects CONFIG_RT_MUTEXES
- ima: Simplify ima_lsm_copy_rule
- ALSA: usb-audio: add the quirk for KT0206 device
- ALSA: hda/realtek: Add quirk for Lenovo TianYi510Pro-14IOB
- ALSA: hda/hdmi: Add HP Device 0x8711 to force connect list
- [arm64,armhf] usb: dwc3: Fix race between dwc3_set_mode and
__dwc3_set_mode
- [arm64,armhf] usb: dwc3: core: defer probe on ulpi_read_id timeout
- HID: wacom: Ensure bootloader PID is usable in hidraw mode
- reiserfs: Add missing calls to reiserfs_security_free()
- iio: adc: ad_sigma_delta: do not use internal iio_dev lock
- iio: adc128s052: add proper .data members in adc128_of_match table
- regulator: core: fix deadlock on regulator enable
- ovl: fix use inode directly in rcu-walk mode
- media: dvbdev: fix build warning due to comments
- media: dvbdev: fix refcnt bug
- [armhf] pwm: tegra: Fix 32 bit build
- [arm64,armhf] usb: dwc3: qcom: Fix memory leak in
dwc3_qcom_interconnect_init
- cifs: fix oops during encryption
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- nvme-pci: fix page size checks
- ata: ahci: Fix PCS quirk application for suspend
- nvme: fix the NVME_CMD_EFFECTS_CSE_MASK definition
- [powerpc*] rtas: avoid device tree lookups in rtas_os_term()
- [powerpc*] rtas: avoid scheduling in rtas_os_term()
- HID: multitouch: fix Asus ExpertBook P2 P2451FA trackpoint
- HID: plantronics: Additional PIDs for double volume key presses quirk
- pstore/zone: Use GFP_ATOMIC to allocate zone buffer
- hfsplus: fix bug causing custom uid and gid being unable to be assigned
with mount
- binfmt: Fix error return code in load_elf_fdpic_binary()
- ovl: Use ovl mounter's fsuid and fsgid in ovl_link()
- ALSA: line6: correct midi status byte when receiving data from podxt
- ALSA: line6: fix stack overflow in line6_midi_transmit
- pnode: terminate at peers of source
- md: fix a crash in mempool_free
- mm, compaction: fix fast_isolate_around() to stay within boundaries
- f2fs: should put a page when checking the summary info
- mmc: vub300: fix warning - do not call blocking ops when !TASK_RUNNING
- tpm: acpi: Call acpi_put_table() to fix memory leak
- tpm: tpm_crb: Add the missed acpi_put_table() to fix memory leak
- tpm: tpm_tis: Add the missed acpi_put_table() to fix memory leak
- SUNRPC: Don't leak netobj memory when gss_read_proxy_verf() fails
- net/mlx5e: Fix nullptr in mlx5e_tc_add_fdb_flow()
- wifi: rtlwifi: remove always-true condition pointed out by GCC 12
- wifi: rtlwifi: 8192de: correct checking of IQK reload
- rcu: Prevent lockdep-RCU splats on lock acquisition/release
- net/af_packet: add VLAN support for AF_PACKET SOCK_RAW GSO
- net/af_packet: make sure to pull mac header
- media: stv0288: use explicitly signed char
- jbd2: use the correct print format
- [arm64] dts: qcom: sdm845-db845c: correct SPI2 pins drive strength
- btrfs: fix resolving backrefs for inline extent followed by prealloc
- [arm64] dts: qcom: sdm850-lenovo-yoga-c630: correct I2C12 pins drive
strength
- PM/devfreq: governor: Add a private governor_data for governor
- cpufreq: Init completion before kobject_init_and_add()
- ALSA: patch_realtek: Fix Dell Inspiron Plus 16
- ALSA: hda/realtek: Apply dual codec fixup for Dell Latitude laptops
- dm cache: Fix ABBA deadlock between shrink_slab and
dm_cache_metadata_abort
- dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata
- dm thin: Use last transaction's pmd->root when commit failed
- dm thin: resume even if in FAIL mode
- dm thin: Fix UAF in run_timer_softirq()
- dm integrity: Fix UAF in dm_integrity_dtr()
- dm cache: Fix UAF in destroy()
- dm cache: set needs_check flag after aborting metadata
- tracing/hist: Fix out-of-bound write on 'action_data.var_ref_idx'
- perf/core: Call LSM hook after copying perf_event_attr
- [x86] KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check
fails
- [x86] microcode/intel: Do not retry microcode reloading on the APs
- [x86] ftrace/x86: Add back ftrace_expected for ftrace bug reports
- [x86] kprobes: Fix kprobes instruction boudary check with CONFIG_RETHUNK
- tracing/hist: Fix wrong return value in parse_action_params()
- tracing: Fix infinite loop in tracing_read_pipe on overflowed
print_trace_line
- media: dvb-core: Fix double free in dvb_register_device()
- cifs: fix confusing debug message
- cifs: fix missing display of three mount options
- md/bitmap: Fix bitmap chunk size overflow issues
- efi: Add iMac Pro 2017 to uefi skip cert quirk
- wifi: wilc1000: sdio: fix module autoloading
- ipmi: fix long wait in unload when IPMI disconnect
- mtd: spi-nor: Check for zero erase size in spi_nor_find_best_erase_type()
- ima: Fix a potential NULL pointer access in ima_restore_measurement_list
- ipmi: fix use after free in _ipmi_destroy_user()
- PCI: Fix pci_device_is_present() for VFs by checking PF
- PCI/sysfs: Fix double free in error path
- driver core: Fix bus_type.match() error handling in __driver_attach()
- [amd64] iommu/amd: Fix ivrs_acpihid cmdline parsing code
- [armhf] remoteproc: core: Do pm_relax when in RPROC_OFFLINE state
- device_cgroup: Roll back to original exceptions after copy failure
- drm/connector: send hotplug uevent on connector cleanup
- [x86] drm/i915/dsi: fix VBT send packet port selection for dual link DSI
- ext4: silence the warning when evicting inode with dioread_nolock
- ext4: add inode table check in __ext4_get_inode_loc to aovid possible
infinite loop
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix undefined behavior in bit shift for ext4_check_flag_values
- ext4: add EXT4_IGET_BAD flag to prevent unexpected bad inode
- ext4: add helper to check quota inums
- ext4: fix bug_on in __es_tree_search caused by bad quota inode
- ext4: fix reserved cluster accounting in __es_remove_extent()
- ext4: check and assert if marking an no_delete evicting inode dirty
- ext4: fix bug_on in __es_tree_search caused by bad boot loader inode
- ext4: init quota for 'old.inode' in 'ext4_rename'
- ext4: fix delayed allocation bug in ext4_clu_mapped for bigalloc + inline
- ext4: fix corruption when online resizing a 1K bigalloc fs
- ext4: fix error code return to user-space in ext4_get_branch()
- ext4: avoid BUG_ON when creating xattrs
- ext4: fix inode leak in ext4_xattr_inode_create() on an error path
- ext4: initialize quota before expanding inode in setproject ioctl
- ext4: avoid unaccounted block allocation when expanding inode
- ext4: allocate extended attribute value in vmalloc area
- drm/amdgpu: handle polaris10/11 overlap asics (v2)
- drm/amdgpu: make display pinning more flexible (v2)
- [armel,armhf] renumber bits related to _TIF_WORK_MASK
- [x86] perf/x86/intel/uncore: Generalize I/O stacks to PMON mapping
procedure
- [x86] perf/x86/intel/uncore: Clear attr_update properly
- btrfs: replace strncpy() with strscpy()
- [x86] mce: Get rid of msr_ops
- [x86] MCE/AMD: Clear DFR errors found in THR handler
- perf probe: Use dwarf_attr_integrate as generic DWARF attr accessor
- perf probe: Fix to get the DW_AT_decl_file and DW_AT_call_file as unsinged
data
- [x86] kprobes: Convert to insn_decode()
- [x86] kprobes: Fix optprobe optimization check with CONFIG_RETHUNK
- ext4: goto right label 'failed_mount3a'
- ext4: correct inconsistent error msg in nojournal mode
- mm/highmem: Lift memcpy_[to|from]_page to core
- ext4: use memcpy_to_page() in pagecache_write()
- fs: ext4: initialize fsdata in pagecache_write()
- ext4: move functions in super.c
- ext4: simplify ext4 error translation
- ext4: fix various seppling typos
- ext4: fix leaking uninitialized memory in fast-commit journal
- ext4: use kmemdup() to replace kmalloc + memcpy
- mbcache: don't reclaim used entries
- mbcache: add functions to delete entry if unused
- ext4: remove EA inode entry from mbcache on inode eviction
- ext4: unindent codeblock in ext4_xattr_block_set()
- ext4: fix race when reusing xattr blocks
- mbcache: automatically delete entries from cache on freeing
- ext4: fix deadlock due to mbcache entry corruption
- SUNRPC: ensure the matching upcall is in-flight upon downcall
- bpf: pull before calling skb_postpull_rcsum()
- [arm64,armhf] drm/panfrost: Fix GEM handle creation ref-counting
- [x86] vmxnet3: correctly report csum_level for encapsulated packet
- veth: Fix race with AF_XDP exposing old or uninitialized descriptors
- nfsd: shut down the NFSv4 state objects before the filecache
- [arm64] net: hns3: add interrupts re-initialization while doing VF FLR
- net: sched: fix memory leak in tcindex_set_parms
- qlcnic: prevent ->dcb use-after-free on qlcnic_dcb_enable() failure
- nfc: Fix potential resource leaks
- vhost/vsock: Fix error handling in vhost_vsock_init()
- vhost: fix range used in translate_desc()
- net/mlx5: Add forgotten cleanup calls into mlx5_init_once() error path
- net/mlx5: Avoid recovery in probe flows
- net/mlx5e: IPoIB, Don't allow CQE compression to be turned on by default
- net/mlx5e: Fix hw mtu initializing at XDP SQ allocation
- [amd64,arm64] net: amd-xgbe: add missed tasklet_kill
- RDMA/mlx5: Fix validation of max_rd_atomic caps for DC
- [arm64] drm/meson: Reduce the FIFO lines held when AFBC is not used
- filelock: new helper: vfs_inode_has_locks
- ceph: switch to vfs_inode_has_locks() to fix file lock bug
- netfilter: ipset: fix hash:net,port,net hang with /0 subnet
- netfilter: ipset: Rework long task execution when adding/deleting entries
- perf tools: Fix resources leak in perf_data__open_dir()
- drivers/net/bonding/bond_3ad: return when there's no aggregator
- usb: rndis_host: Secure rndis_query check against int overflow
- [x86] drm/i915: unpin on error in intel_vgpu_shadow_mm_pin()
- udf: Fix extension of the last extent in the file
- [x86] ASoC: Intel: bytcr_rt5640: Add quirk for the Advantech MICA-071
tablet
- nvme: fix multipath crash caused by flush request when blktrace is enabled
- [x86] bugs: Flush IBP in ib_prctl_set() (CVE-2023-0045)
- nfsd: fix handling of readdir in v4root vs. mount upcall timeout
- fbdev: matroxfb: G200eW: Increase max memory from 1 MB to 16 MB
- [x86] drm/i915/gvt: fix gvt debugfs destroy
- [x86] drm/i915/gvt: fix vgpu debugfs clean in remove
- ext4: don't allow journal inode to have encrypt flag
- hfs/hfsplus: use WARN_ON for sanity check
- hfs/hfsplus: avoid WARN_ON() for sanity check, use proper error handling
- mbcache: Avoid nesting of cache->c_list_lock under bit locks
- efi: random: combine bootloader provided RNG seed with RNG protocol output
- io_uring: Fix unsigned 'res' comparison with zero in io_fixup_rw_res()
- ext4: disable fast-commit of encrypted dir operations
- ext4: don't set up encryption key during jbd2 transaction
- [arm64] fsl_lpuart: Don't enable interrupts too early
- serial: fixup backport of "serial: Deassert Transmit Enable on probe in
driver-specific way"
- net/ulp: prevent ULP without clone op from entering the LISTEN status
(CVE-2023-0461)
- ALSA: hda/hdmi: Add a HP device 0x8715 to force connect list
- ALSA: hda - Enable headset mic on another Dell laptop with ALC3254
https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.164
- ALSA: hda/realtek: Enable mute/micmute LEDs on HP Spectre x360 13-aw0xxx
- [arm64] KVM: arm64: Fix S1PTW handling on RO memslots
- efi: tpm: Avoid READ_ONCE() for accessing the event log
- docs: Fix the docs build with Sphinx 6.0
- perf auxtrace: Fix address filter duplicate symbol selection
- [arm64] ASoC: qcom: lpass-cpu: Fix fallback SD line index handling
- [s390x] cpum_sf: add READ_ONCE() semantics to compare and swap loops
- [s390x] percpu: add READ_ONCE() to arch_this_cpu_to_op_simple()
- cifs: Fix uninitialized memory read for smb311 posix symlink create
- [arm64] drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for
aux transfer
- [x86] platform/x86: sony-laptop: Don't turn off 0x153 keyboard backlight
during probe
- ixgbe: fix pci device refcount leak
- bus: mhi: host: Fix race between channel preparation and M0 event
- [amd64] iommu/amd: Add PCI segment support for ivrs_[ioapic/hpet/acpihid]
commands
- [amd64] iommu/amd: Fix ill-formed ivrs_ioapic, ivrs_hpet and ivrs_acpihid
options
- [arm64] clk: imx8mp: Add DISP2 pixel clock
- [arm64] clk: imx8mp: add clkout1/2 support
- dt-bindings: clocks: imx8mp: Add ID for usb suspend clock
- [arm64] clk: imx: imx8mp: add shared clk gate for usb suspend clk
- xhci: Avoid parsing transfer events several times
- xhci: get isochronous ring directly from endpoint structure
- xhci: adjust parameters passed to cleanup_halted_endpoint()
- xhci: Add xhci_reset_halted_ep() helper function
- xhci: move xhci_td_cleanup so it can be called by more functions
- xhci: store TD status in the td struct instead of passing it along
- xhci: move and rename xhci_cleanup_halted_endpoint()
- xhci: Prevent infinite loop in transaction errors recovery for streams
- [arm64,armhf] usb: ulpi: defer ulpi_register on ulpi_read_id timeout
- ext4: fix uninititialized value in 'ext4_evict_inode'
- xfrm: fix rcu lock in xfrm_notify_userpolicy()
- netfilter: ipset: Fix overflow before widen in the bitmap_ip_create()
function.
- [powerpc*] imc-pmu: Fix use of mutex in IRQs disabled section
- [x86] boot: Avoid using Intel mnemonics in AT&T syntax asm
- EDAC/device: Fix period calculation in edac_device_reset_delay_period()
- [arm64] ASoC: wm8904: fix wrong outputs volume after power reactivation
- tipc: fix unexpected link reset due to discovery messages
- hvc/xen: lock console list traversal
- nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- net/sched: act_mpls: Fix warning during failed attribute validation
- net/mlx5: Fix ptp max frequency adjustment range
- net/mlx5e: Don't support encap rules with gbp option
- mm: Always release pages to the buddy allocator in memblock_free_late().
- Documentation: KVM: add API issues section
- [x86] KVM: x86: Do not return host topology information from
KVM_GET_SUPPORTED_CPUID
- [x86] resctrl: Use task_curr() instead of task_struct->on_cpu to prevent
unnecessary IPI
- [x86] resctrl: Fix task CLOSID/RMID update race
- [arm64] atomics: remove LL/SC trampolines
- [arm64] cmpxchg_double*: hazard against entire exchange variable
- efi: fix NULL-deref in init error path
- drm/virtio: Fix GEM handle creation UAF
- io_uring/io-wq: free worker if task_work creation is canceled
- io_uring/io-wq: only free worker if it was allocated for creation
- Revert "usb: ulpi: defer ulpi_register on ulpi_read_id timeout"
https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.165
- btrfs: fix trace event name typo for FLUSH_DELAYED_REFS
- pNFS/filelayout: Fix coalescing test for single DS
- net/ethtool/ioctl: return -EOPNOTSUPP if we have no phy stats
- btrfs: always report error in run_one_delayed_ref()
- [x86] asm: Fix an assembler warning with current binutils
- f2fs: let's avoid panic if extent_tree is not created
- wifi: brcmfmac: fix regression for Broadcom PCIe wifi devices
- wifi: mac80211: sdata can be NULL during AMPDU start
- zonefs: Detect append writes at invalid locations
- nilfs2: fix general protection fault in nilfs_btree_insert()
- efi: fix userspace infinite retry read efivars after EFI runtime services
page fault
- ALSA: hda/realtek - Turn on power early
- [x86] drm/i915/gt: Reset twice
- Bluetooth: hci_qca: Wait for timeout during suspend
- Bluetooth: hci_qca: Fix driver shutdown on closed serdev
- io_uring: don't gate task_work run on TIF_NOTIFY_SIGNAL
- io_uring: improve send/recv error handling
- io_uring: ensure recv and recvmsg handle MSG_WAITALL correctly
- io_uring: add flag for disabling provided buffer recycling
- io_uring: support MSG_WAITALL for IORING_OP_SEND(MSG)
- io_uring: allow re-poll if we made progress
- io_uring: fix async accept on O_NONBLOCK sockets
- io_uring: check for valid register opcode earlier
- io_uring: lock overflowing for IOPOLL
- io_uring: fix CQ waiting timeout handling
- io_uring: ensure that cached task references are always put on exit
- io_uring: remove duplicated calls to io_kiocb_ppos
- io_uring: update kiocb->ki_pos at execution time
- io_uring: do not recalculate ppos unnecessarily
- io_uring/rw: defer fsnotify calls to task context
- xhci-pci: set the dma max_seg_size
- usb: xhci: Check endpoint is valid before dereferencing it
- xhci: Fix null pointer dereference when host dies
- xhci: Add update_hub_device override for PCI xHCI hosts
- xhci: Add a flag to disable USB3 lpm on a xhci root port level.
- usb: acpi: add helper to check port lpm capability using acpi _DSM
- xhci: Detect lpm incapable xHC USB3 roothub ports from ACPI tables
- prlimit: do_prlimit needs to have a speculation check (CVE-2023-0458)
- USB: serial: option: add Quectel EM05-G (GR) modem
- USB: serial: option: add Quectel EM05-G (CS) modem
- USB: serial: option: add Quectel EM05-G (RS) modem
- USB: serial: option: add Quectel EC200U modem
- USB: serial: option: add Quectel EM05CN (SG) modem
- USB: serial: option: add Quectel EM05CN modem
- USB: misc: iowarrior: fix up header size for
USB_DEVICE_ID_CODEMERCS_IOW100
- usb: core: hub: disable autosuspend for TI TUSB8041
- [x86] comedi: adv_pci1760: Fix PWM instruction handling
- [arm64,armhf] mmc: sunxi-mmc: Fix clock refcount imbalance during unbind
- [arm64,armhf] mmc: sdhci-esdhc-imx: correct the tuning start tap and step
setting
- btrfs: fix race between quota rescan and disable leading to NULL pointer
deref
- cifs: do not include page data when checking signature
- [x86] thunderbolt: Use correct function to calculate maximum USB3 link
rate
- USB: gadgetfs: Fix race between mounting and unmounting
- USB: serial: cp210x: add SCALANCE LPE-9000 device id
- usb: typec: altmodes/displayport: Add pin assignment helper
- usb: typec: altmodes/displayport: Fix pin assignment calculation
- usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- usb-storage: apply IGNORE_UAS only for HIKSEMI MD202 on RTL9210
- [i386] serial: pch_uart: Pass correct sg to dma_unmap_sg()
- [arm64] dmaengine: tegra210-adma: fix global intr clear
- [x86] mei: me: add meteor lake point M DID
- [x86] drm/i915: re-disable RC6p on Sandy Bridge
- drm/amd/display: Fix set scaling doesn's work
- drm/amd/display: Calculate output_color_space after pixel encoding
adjustment
- drm/amd/display: Fix COLOR_SPACE_YCBCR2020_TYPE matrix
- [arm64] efi: Execute runtime services from a dedicated stack
- [arm64] efi: rt-wrapper: Add missing include
- Revert "drm/amdgpu: make display pinning more flexible (v2)"
- [x86] fpu: Use _Alignof to avoid undefined behavior in TYPE_ALIGN
- tracing: Use alignof__(struct {type b;}) instead of offsetof()
- io_uring: io_kiocb_update_pos() should not touch file for non -1 offset
- io_uring/net: fix fast_iov assignment in io_setup_async_msg()
- net/ulp: use consistent error code when blocking ULP
- net/mlx5: fix missing mutex_unlock in mlx5_fw_fatal_reporter_err_work()
- Revert "wifi: mac80211: fix memory leak in ieee80211_if_add()"
- Bluetooth: hci_qca: Wait for SSR completion during suspend
- Bluetooth: hci_qca: check for SSR triggered flag while suspend
- Bluetooth: hci_qca: Fixed issue during suspend
- mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma
- io_uring: Clean up a false-positive warning from GCC 9.3.0
- io_uring: fix double poll leak on repolling
- io_uring/rw: ensure kiocb_end_write() is always called
- io_uring/rw: remove leftover debug statement
https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.166
- clk: generalize devm_clk_get() a bit
- clk: Provide new devm_clk helpers for prepared and enabled clocks
- [armel,armhf] memory: mvebu-devbus: Fix missing clk_disable_unprepare in
mvebu_devbus_probe()
- [armhf] dts: imx6ul-pico-dwarf: Use 'clock-frequency'
- [armhf] imx: add missing of_node_put()
- [amd64] HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- tomoyo: fix broken dependency on *.conf.default
- RDMA/core: Fix ib block iterator counter overflow
- [amd64] IB/hfi1: Reject a zero-length user expected buffer
- [amd64] IB/hfi1: Reserve user expected TIDs
- [amd64] IB/hfi1: Fix expected receive setup error exit issues
- [amd64] IB/hfi1: Immediately remove invalid memory from hardware
- [amd64] IB/hfi1: Remove user expected buffer invalidate race
- affs: initialize fsdata in affs_truncate()
- [amd64,arm64] amd-xgbe: TX Flow Ctrl Registers are h/w ver dependent
- [amd64,arm64] amd-xgbe: Delay AN timeout during KR training
- bpf: Fix pointer-leak due to insufficient speculative store bypass
mitigation
- [arm64] phy: rockchip-inno-usb2: Fix missing clk_disable_unprepare() in
rockchip_usb2phy_power_on()
- net: nfc: Fix use-after-free in local_cleanup()
- [arm64,armhf] gpio: mxc: Always set GPIOs used as interrupt source to
INPUT mode
- wifi: rndis_wlan: Prevent buffer overflow in rndis_query_oid
(CVE-2023-23559)
- net/sched: sch_taprio: fix possible use-after-free
- l2tp: Serialize access to sk_user_data with sk_callback_lock
(CVE-2022-4129)
- l2tp: Don't sleep and disable BH under writer-side sk_callback_lock
(CVE-2022-4129)
- l2tp: convert l2tp_tunnel_list to idr
- l2tp: close all race conditions in l2tp_tunnel_register()
- net: usb: sr9700: Handle negative len
- net: mdio: validate parameter addr in mdiobus_get_phy()
- HID: check empty report_list in hid_validate_values() (CVE-2023-1073)
- HID: check empty report_list in bigben_probe()
- net: stmmac: fix invalid call to mdiobus_get_phy()
- HID: revert CHERRY_MOUSE_000C quirk
- usb: gadget: f_fs: Prevent race during ffs_ep0_queue_wait
- usb: gadget: f_fs: Ensure ep0req is dequeued before free_request
- net: mlx5: eliminate anonymous module_init & module_exit
- dmaengine: Fix double increment of client_count in dma_chan_get()
- [arm64] net: macb: fix PTP TX timestamp failure due to packet padding
- l2tp: prevent lockdep issue in l2tp_tunnel_register()
- HID: betop: check shape of output reports
- nvme-pci: fix timeout request state check
- tcp: avoid the lookup process failing to get sk in ehash table
- w1: fix deadloop in __w1_remove_master_device()
- w1: fix WARNING after calling w1_process()
- driver core: Fix test_async_probe_init saves device in wrong array
- tcp: fix rate_app_limited to default to 1
- scsi: iscsi: Fix multiple iSCSI session unbind events sent to userspace
- [arm64,armhf] cpufreq: Add Tegra234 to cpufreq-dt-platdev blocklist
- drm: Add orientation quirk for Lenovo ideapad D330-10IGL
- [arm64] cpufreq: armada-37xx: stop using 0 as NULL pointer
- [armhf] ASoC: fsl_ssi: Rename AC'97 streams to avoid collisions with AC'97
CODEC
- spi: spidev: remove debug messages that access spidev->spi without locking
- [s390x] KVM: s390: interrupt: use READ_ONCE() before cmpxchg()
- [arm64] scsi: hisi_sas: Set a port invalid only if there are no devices
attached when refreshing port id
- [x86] platform/x86: touchscreen_dmi: Add info for the CSL Panther Tab HD
- [x86] platform/x86: asus-nb-wmi: Add alternate mapping for KEY_SCREENLOCK
- lockref: stop doing cpu_relax in the cmpxchg loop
- netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state
- [x86] ACPI: cstate: Optimize C3 entry on AMD CPUs
- fs: reiserfs: remove useless new_opts in reiserfs_remount
- sysctl: add a new register_sysctl_init() interface
- kernel/panic: move panic sysctls to its own file
- panic: unset panic_on_warn inside panic()
- exit: Add and use make_task_dead.
- objtool: Add a missing comma to avoid string concatenation
- panic: Separate sysctl logic from CONFIG_SMP
- exit: Put an upper limit on how often we can oops
- exit: Expose "oops_count" to sysfs
- exit: Allow oops_limit to be disabled
- panic: Consolidate open-coded panic_on_warn checks
- panic: Introduce warn_limit
- panic: Expose "warn_count" to sysfs
- docs: Fix path paste-o for /sys/kernel/warn_count
- exit: Use READ_ONCE() for all oops/warn limit reads
- Bluetooth: hci_sync: cancel cmd_timer if hci_open failed
- xhci: Set HCD flag to defer primary roothub registration
- scsi: hpsa: Fix allocation size for scsi_host_alloc()
- module: Don't wait for GOING modules
- tracing: Make sure trace_printk() can output as soon as it can be used
- trace_events_hist: add check for return value of 'create_hist_field'
- ftrace/scripts: Update the instructions for ftrace-bisect.sh
- cifs: Fix oops due to uncleared server->smbd_conn in reconnect
- [x86] KVM: x86/vmx: Do not skip segment attributes if unusable bit is set
- [x86] thermal: intel: int340x: Protect trip temperature from concurrent
updates
- EDAC/device: Respect any driver-supplied workqueue polling value
- units: Add Watt units
- units: Add SI metric prefix definitions
- i2c: designware: Use DIV_ROUND_CLOSEST() macro
- i2c: designware: use casting of u64 in clock multiplication to avoid
overflow
- netlink: prevent potential spectre v1 gadgets
- net: fix UaF in netns ops registration error path
- netfilter: nft_set_rbtree: Switch to node list walk for overlap detection
- netfilter: nft_set_rbtree: skip elements in transaction from garbage
collection
- netlink: annotate data races around nlk->portid
- netlink: annotate data races around dst_portid and dst_group
- netlink: annotate data races around sk_state
- ipv4: prevent potential spectre v1 gadget in ip_metrics_convert()
- ipv4: prevent potential spectre v1 gadget in fib_metrics_match()
- netfilter: conntrack: fix vtag checks for ABORT/SHUTDOWN_COMPLETE
- netrom: Fix use-after-free of a listening socket.
- net/sched: sch_taprio: do not schedule in taprio_reset()
- sctp: fail if no bound addresses can be used for a given scope
(CVE-2023-1074)
- [x86] thermal: intel: int340x: Add locking to
int340x_thermal_get_trip_type()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- [arm64,armhf] net: mdio-mux-meson-g12a: force internal PHY off on mux
switch
- Revert "Input: synaptics - switch touchpad on HP Laptop 15-da3001TU to RMI
mode"
- nouveau: explicitly wait on the fence in nouveau_bo_move_m2mf
(Closes: #989705)
- nfsd: Ensure knfsd shuts down when the "nfsd" pseudofs is unmounted
- block: fix and cleanup bio_check_ro
- [x86] i8259: Mark legacy PIC interrupts with IRQ_LEVEL
- netfilter: conntrack: unify established states for SCTP paths
- [x86] perf/x86/amd: fix potential integer overflow on shift of a int
- clk: Fix pointer casting to prevent oops in devm_clk_release()
https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.167
- [armhf] dts: imx: Fix pca9547 i2c-mux node name
- [arm64] dts: imx8mq-thor96: fix no-mmc property for SDHCI
- bpf: Skip task with pid=1 in send_signal_common()
- blk-cgroup: fix missing pd_online_fn() while activating policy

[continued in next message]

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)