[continued from previous message]

- swiotlb: fix debugfs reporting of reserved memory pools
- RDMA/mlx5: Check pcie_relaxed_ordering_enabled() in UMR
- RDMA/mlx5: Fix flow counter query via DEVX
- SUNRPC: remove the maximum number of retries in call_bind_status
- RDMA/mlx5: Use correct device num_ports when modify DC
- timekeeping: Fix references to nonexistent ktime_get_fast_ns()
- SMB3: Add missing locks to protect deferred close file list
- SMB3: Close deferred file handles in case of handle lease break
- ext4: fix i_disksize exceeding i_size problem in paritally written case
- ext4: fix use-after-free read in ext4_find_extent for bigalloc + inline
- [arm64] dmaengine: mv_xor_v2: Fix an error code.
- [armhf] leds: tca6507: Fix error handling of using
fwnode_property_read_string
- soundwire: cadence: rename sdw_cdns_dai_dma_data as sdw_cdns_dai_runtime
- [x86] soundwire: intel: don't save hw_params for use in prepare
- [arm64,armhf] phy: tegra: xusb: Add missing tegra_xusb_port_unregister for
usb2_port and ulpi_port
- [arm64,armhf] pinctrl-bcm2835.c: fix race condition when setting gpio dir
- [x86] ACPI: PM: Do not turn of unused power resources on the Toshiba Click
Mini
- PM: hibernate: Turn snapshot_test into global variable
- PM: hibernate: Do not get block device exclusively in test_resume mode
- afs: Fix updating of i_size with dv jump from server
- afs: Fix getattr to report server i_size on dirs, not local size
- afs: Avoid endless loop if file is larger than expected
- ALSA: usb-audio: Add quirk for Pioneer DDJ-800
- [x86] ALSA: hda/realtek: Add quirk for ThinkPad P1 Gen 6
- [x86] ALSA: hda/realtek: Add quirk for ASUS UM3402YAR using CS35L41
- [x86] ALSA: hda/realtek: support HP Pavilion Aero 13-be0xxx Mute LED
- [x86] ALSA: hda/realtek: Fix mute and micmute LEDs for an HP laptop
- nilfs2: do not write dirty data after degenerating to read-only
- nilfs2: fix infinite loop in nilfs_mdt_get_block()
- mm: do not reclaim private data from pinned page
- drbd: correctly submit flush bio on barrier
- md/raid10: fix null-ptr-deref in raid10_sync_request
- md/raid5: Improve performance for sequential IO
- mtd: core: provide unique name for nvmem device, take two
- mtd: core: fix nvmem error reporting
- mtd: core: fix error path for nvmem provider
- mtd: spi-nor: core: Update flash's current address mode when changing
address mode
- [arm64] mailbox: zynqmp: Fix IPI isr handling
- [arm64] mailbox: zynqmp: Fix typo in IPI documentation
- wifi: rtl8xxxu: RTL8192EU always needs full init
- wifi: rtw89: fix potential race condition between napi_init and
napi_enable
- [arm64] clk: rockchip: rk3399: allow clk_cifout to force clk_cifout_src to
reparent
- btrfs: scrub: reject unsupported scrub flags
- [s390x] dasd: fix hanging blockdevice after request requeue
- mm/mempolicy: correctly update prev when policy is equal on mbind
- dm verity: fix error handling for check_at_most_once on FEC
- dm integrity: call kmem_cache_destroy() in dm_integrity_init() error path
- dm flakey: fix a crash with invalid table line
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
(CVE-2023-2269)
- dm: don't lock fs when the map is NULL in process of resume
- blk-iocost: avoid 64-bit division in ioc_timer_fn
- cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname
- cifs: protect session status check in smb2_reconnect()
- [x86] thunderbolt: Use correct type in tb_port_is_clx_enabled() prototype
- wifi: ath11k: synchronize ath11k_mac_he_gi_to_nl80211_he_gi()'s return
type
- [x86] perf auxtrace: Fix address filter entire kernel size
- [x86] perf intel-pt: Fix CYC timestamps after standalone CBR
- i40e: Remove unused i40e status codes
- i40e: Remove string printing for i40e_status
- i40e: use int for i40e_status
- scsi: libsas: Grab the ATA port lock in sas_ata_device_link_abort()
https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.29
- [arm64,armhf] USB: dwc3: gadget: drop dead hibernation code
- [arm64,armhf] usb: dwc3: gadget: Execute gadget stop after halting the
controller
- drm/vmwgfx: Remove explicit and broken vblank handling
- drm/vmwgfx: Fix Legacy Display Unit atomic drm support
- [amd64] crypto: ccp - Clear PSP interrupt status register before calling
handler
- [x86] perf/x86/core: Zero @lbr instead of returning -1 in
x86_perf_get_lbr() stub
- [x86] KVM: x86: Track supported PERF_CAPABILITIES in kvm_caps
- [x86] KVM: x86/pmu: Disallow legacy LBRs if architectural LBRs are
available
- mtd: spi-nor: spansion: Remove NO_SFDP_FLAGS from s28hs512t info
- mtd: spi-nor: add SFDP fixups for Quad Page Program
- mtd: spi-nor: Add a RWW flag
- mtd: spi-nor: spansion: Enable JFFS2 write buffer for Infineon s28hx
SEMPER flash
- [arm64] mailbox: zynq: Switch to flexible array to simplify code
- [arm64] mailbox: zynqmp: Fix counts of child nodes
- mtd: spi-nor: spansion: Enable JFFS2 write buffer for Infineon s25hx
SEMPER flash
- drm/amd/display: Ext displays with dock can't recognized after resume
- [x86] KVM: x86/mmu: Avoid indirect call for get_cr3
- [x86] KVM: x86: Do not unload MMU roots when only toggling CR0.WP with TDP
enabled
- [x86] KVM: x86: Make use of kvm_read_cr*_bits() when testing bits
- [x86] KVM: VMX: Make CR0.WP a guest owned bit
- [x86] KVM: x86/mmu: Refresh CR0.WP prior to checking for emulated
permission faults
- [x86] ASoC: Intel: soc-acpi-byt: Fix "WM510205" match no longer working
- scsi: qedi: Fix use after free bug in qedi_remove()
- drm/amd/display: Remove FPU guards from the DML folder
- drm/amd/display: Add missing WA and MCLK validation
- drm/amd/display: Return error code on DSC atomic check failure
- drm/amd/display: Fixes for dcn32_clk_mgr implementation
- drm/amd/display: Reset OUTBOX0 r/w pointer on DMUB reset
- drm/amd/display: Do not clear GPINT register when releasing DMUB from
reset
- drm/amd/display: Update bounding box values for DCN321
- ixgbe: Fix panic during XDP_TX with > 64 CPUs
- [armhf] net/ncsi: clear Tx enable mode when handling a Config required AEN
- tcp: fix skb_copy_ubufs() vs BIG TCP
- net/sched: cls_api: remove block_cb from driver_list before freeing
- sit: update dev->needed_headroom in ipip6_tunnel_bind_dev()
- net: ipv6: fix skb hash for some RST packets
- [arm64,armhf] net: dsa: mv88e6xxx: add mv88e6321 rsvd2cpu
- writeback: fix call of incorrect macro
- block: Skip destroyed blkg when restart in blkg_destroy_all()
- [arm64,armhf] watchdog: dw_wdt: Fix the error handling path of
dw_wdt_drv_probe()
- [arm64,armhf] i2c: tegra: Fix PEC support for SMBUS block read
- net/sched: act_mirred: Add carrier check
- r8152: fix flow control issue of RTL8156A
- r8152: fix the poor throughput for 2.5G devices
- r8152: move setting r8153b_rx_agg_chg_indicate()
- sfc: Fix module EEPROM reporting for QSFP modules
- rxrpc: Fix hard call timeout units
- [x86] drm/i915/mtl: Add the missing CPU transcoder mask in
intel_device_info
- ethtool: Fix uninitialized number of lanes
- af_packet: Don't send zero-byte data in packet_sendmsg_spkt().
- drm/amdgpu: add a missing lock for AMDGPU_SCHED
- ALSA: caiaq: input: Add error handling for unsupported input methods in
`snd_usb_caiaq_input_init`
- [s390x] KVM: s390: fix race in gmap_make_secure()
- ice: block LAN in case of VF to VF offload
- virtio_net: suppress cpu stall when free_unused_bufs
- [arm64] net: enetc: check the index of the SFI rather than the handle
- perf record: Fix "read LOST count failed" msg with sample read
- perf scripts intel-pt-events.py: Fix IPC output for Python 2
- perf vendor events s390: Remove UTF-8 characters from JSON file
- perf tests record_offcpu.sh: Fix redirection of stderr to stdin
- perf ftrace: Make system wide the default target for latency subcommand
- perf vendor events power9: Remove UTF-8 characters from JSON files
- perf pmu: zfree() expects a pointer to a pointer to zero it after freeing
its contents
- perf map: Delete two variable initialisations before null pointer checks
in sort__sym_from_cmp()
- perf cs-etm: Fix timeless decode mode detection
- crypto: api - Add scaffolding to change completion function signature
- crypto: engine - Use crypto_request_complete
- crypto: engine - fix crypto_queue backlog handling
- perf symbols: Fix return incorrect build_id size in elf_read_build_id()
- perf tracepoint: Fix memory leak in is_valid_tracepoint()
- perf stat: Separate bperf from bpf_profiler
- [x86] retbleed: Fix return thunk alignment
- btrfs: fix btrfs_prev_leaf() to not return the same key twice
- btrfs: zoned: fix wrong use of bitops API in btrfs_ensure_empty_zones
- btrfs: properly reject clear_cache and v1 cache for block-group-tree
- btrfs: fix assertion of exclop condition when starting balance
- btrfs: fix encoded write i_size corruption with no-holes
- btrfs: don't free qgroup space unless specified
- btrfs: zero the buffer before marking it dirty in btrfs_redirty_list_add
- btrfs: make clear_cache mount option to rebuild FST without disabling it
- btrfs: print-tree: parent bytenr must be aligned to sector size
- btrfs: fix space cache inconsistency after error loading it from disk
- btrfs: zoned: zone finish data relocation BG with last IO
- btrfs: zoned: fix full zone super block reading on ZNS
- cifs: fix pcchunk length type in smb2_copychunk_range
- cifs: release leases for deferred close handles when freezing
- [amd64] platform/x86/intel-uncore-freq: Return error on write frequency
- [x86] platform/x86: touchscreen_dmi: Add upside-down quirk for GDIX1002 ts
on the Juno Tablet
- [x86] platform/x86: thinkpad_acpi: Fix platform profiles on T490
- [x86] platform/x86: touchscreen_dmi: Add info for the Dexp Ursus KX210i
- [x86] platform/x86: thinkpad_acpi: Add profile force ability
- inotify: Avoid reporting event with invalid wd
- smb3: fix problem remounting a share after shutdown
- SMB3: force unmount was failing to close deferred close files
- [armhf] remoteproc: stm32: Call of_node_put() on iteration error
- sysctl: clarify register_sysctl_init() base directory order
- [armhf] ARM: dts: aspeed: asrock: Correct firmware flash SPI clocks
- [armhf] ARM: dts: exynos: fix WM8960 clock name in Itop Elite
- [armhf] ARM: dts: aspeed: romed8hm3: Fix GPIO polarity of system-fault LED
- [arm64] drm/msm/adreno: fix runtime PM imbalance at gpu load
- [x86] drm/i915/color: Fix typo for Plane CSC indexes
- [arm64] drm/msm: fix NULL-deref on snapshot tear down
- [arm64] drm/msm: fix NULL-deref on irq uninstall
- [arm64] drm/msm: fix drm device leak on bind errors
- [arm64] drm/msm: fix vram leak on bind errors
- [arm64] drm/msm: fix workqueue leak on bind errors
- [x86] drm/i915/dsi: Use unconditional msleep() instead of
intel_dsi_msleep()
- f2fs: fix null pointer panic in tracepoint in __replace_atomic_write_block
- f2fs: fix potential corruption when moving a directory
- [armhf] drm/panel: otm8009a: Set backlight parent to panel device
- drm/amd/display: Add NULL plane_state check for cursor disable logic
- drm/amd/display: Fix 4to1 MPC black screen with DPP RCO
- drm/amd/display: filter out invalid bits in pipe_fuses
- drm/amd/display: fix flickering caused by S/G mode
- drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v10_0_hw_fini
- drm/amdgpu: fix an amdgpu_irq_put() issue in gmc_v9_0_hw_fini()
- drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v11_0_hw_fini
- drm/amdgpu/gfx: disable gfx9 cp_ecc_error_irq only when enabling legacy
gfx ras
- drm/amdgpu/jpeg: Remove harvest checking for JPEG3
- drm/amdgpu: change gfx 11.0.4 external_id range
- drm/amdgpu: Fix vram recover doesn't work after whole GPU reset (v2)
- drm/amd/display: Enforce 60us prefetch for 200Mhz DCFCLK modes
- drm/amd/pm: parse pp_handle under appropriate conditions
- drm/amdgpu: disable sdma ecc irq only when sdma RAS is enabled in suspend
- drm/amd/pm: avoid potential UBSAN issue on legacy asics
- drm/amdgpu: remove deprecated MES version vars
- drm/amd: Load MES microcode during early_init
- drm/amd: Add a new helper for loading/validating microcode
- drm/amd: Use `amdgpu_ucode_*` helpers for MES
- HID: wacom: Set a default resolution for older tablets
- HID: wacom: insert timestamp to packed Bluetooth (BT) events
- [arm64] drm/msm/adreno: adreno_gpu: Use suspend() instead of idle() on
load error
- f2fs: specify extent cache for read explicitly
- f2fs: move internal functions into extent_cache.c
- f2fs: remove unnecessary __init_extent_tree
- f2fs: refactor extent_cache to support for read and more
- f2fs: allocate the extent_cache by default
- f2fs: factor out victim_entry usage from general rb_tree use
- [arm64] drm/msm/adreno: Simplify read64/write64 helpers
- [arm64] drm/msm: Hangcheck progress detection
- [arm64] drm/msm: fix missing wq allocation error handling
- wifi: rtw88: rtw8821c: Fix rfe_option field width
- [x86] drm/i915/mtl: update scaler source and destination limits for MTL
- [x86] drm/i915: Check pipe source size when using skl+ scalers
- drm/amd/display: Refactor eDP PSR codes
- drm/amd/display: Add Z8 allow states to z-state support list
- drm/amd/display: Add debug option to skip PSR CRTC disable
- drm/amd/display: Fix Z8 support configurations
- drm/amd/display: Add minimum Z8 residency debug option
- drm/amd/display: Update minimum stutter residency for DCN314 Z8
- drm/amd/display: Lowering min Z8 residency time
- [x86] ASoC: codecs: constify static sdw_slave_ops struct
- drm/amd/display: Update Z8 watermarks for DCN314
- drm/amd/display: Update Z8 SR exit/enter latencies
- drm/amd/display: Change default Z8 watermark values
- ksmbd: Implements sess->ksmbd_chann_list as xarray
- ksmbd: fix racy issue from session setup and logoff (CVE-2023-32250)
- ksmbd: destroy expired sessions
- ksmbd: block asynchronous requests when making a delay on session setup
- ksmbd: fix racy issue from smb2 close and logoff with multichannel
- drm: Add missing DP DSC extended capability definitions.
- drm/dsc: fix drm_edp_dsc_sink_output_bpp() DPCD high byte usage
- locking/rwsem: Add __always_inline annotation to __down_read_common() and
inlined callers
- ext4: fix WARNING in mb_find_extent
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
(CVE-2023-34256)
- ext4: fix data races when using cached status extents
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- ext4: improve error recovery code paths in __ext4_remount()
- ext4: improve error handling from ext4_dirhash()
- ext4: fix deadlock when converting an inline directory in nojournal mode
- ext4: add bounds checking in get_max_inline_xattr_value_size()
- ext4: bail out of ext4_xattr_ibody_get() fails for any reason
- ext4: fix lockdep warning when enabling MMP
- ext4: remove a BUG_ON in ext4_mb_release_group_pa()
- ext4: fix invalid free tracking in ext4_xattr_move_to_block()
- drm/dsc: fix DP_DSC_MAX_BPP_DELTA_* macro values
- f2fs: fix to do sanity check on extent cache correctly
- f2fs: inode: fix to do sanity check on extent cache correctly
- [x86] amd_nb: Add PCI ID for family 19h model 78h
- [x86] fix clear_user_rep_good() exception handling annotation
- drm/amd/display: Fix hang when skipping modeset
https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.30
- drm/fbdev-generic: prohibit potential out-of-bounds access
- drm/mipi-dsi: Set the fwnode for mipi_dsi_device
- net: skb_partial_csum_set() fix against transport header magic value
- scsi: ufs: core: Fix I/O hang that occurs when BKOPS fails in W-LUN
suspend
- tick/broadcast: Make broadcast device replacement work correctly
- linux/dim: Do nothing if no time delta between samples
- net: stmmac: Initialize MAC_ONEUS_TIC_COUNTER register
- net: Fix load-tearing on sk->sk_stamp in sock_recv_cmsgs().
- [arm64,armhf] net: phy: bcm7xx: Correct read from expansion register
- netfilter: nf_tables: always release netdev hooks from notifier
- netfilter: conntrack: fix possible bug_on with enable_hooks=1
- bonding: fix send_peer_notif overflow
- netlink: annotate accesses to nlk->cb_running
- net: annotate sk->sk_err write from do_recvmmsg()
- net: deal with most data-races in sk_wait_event()
- net: add vlan_get_protocol_and_depth() helper
- tcp: add annotations around sk->sk_shutdown accesses
- [amd64,arm64] gve: Remove the code of clearing PBA bit
- ipvlan:Fix out-of-bounds caused by unclear skb->cb (CVE-2023-3090)
- [arm64] net: mscc: ocelot: fix stat counter register values
- net: datagram: fix data-races in datagram_poll()
- af_unix: Fix a data race of sk->sk_receive_queue->qlen.
- af_unix: Fix data races around sk->sk_shutdown.
- [x86] drm/i915/guc: Don't capture Gen8 regs on Xe devices
- [x86] drm/i915: Fix NULL ptr deref by checking new_crtc_state
- [x86] drm/i915/dp: prevent potential div-by-zero
- [x86] drm/i915: Expand force_probe to block probe of devices as well.
- [x86] drm/i915: taint kernel when force probing unsupported devices
- [x86] fbdev: arcfb: Fix error handling in arcfb_probe()
- ext4: reflect error codes from ext4_multi_mount_protect() to its callers
- ext4: allow to find by goal if EXT4_MB_HINT_GOAL_ONLY is set
- ext4: allow ext4_get_group_info() to fail
- rcu: Protect rcu_print_task_exp_stall() ->exp_tasks access
- open: return EINVAL for O_DIRECTORY | O_CREAT
- fs: hfsplus: remove WARN_ON() from hfsplus_cat_{read,write}_inode()
- drm/displayid: add displayid_get_header() and check bounds better
- drm/amd/display: populate subvp cmd info only for the top pipe
- drm/amd/display: Correct DML calculation to align HW formula
- [x86] platform/x86: x86-android-tablets: Add Acer Iconia One 7 B1-750 data
- drm/amd/display: Enable HostVM based on rIOMMU active
- drm/amd/display: Use DC_LOG_DC in the trasform pixel function
- regmap: cache: Return error in cache sync operations for REGCACHE_NONE
- [arm64] dts: qcom: msm8996: Add missing DWC3 quirks
- media: cx23885: Fix a null-ptr-deref bug in buffer_prepare() and
buffer_finish()
- media: pci: tw68: Fix null-ptr-deref bug in buf prepare and finish
- ACPI: processor: Check for null return of devm_kzalloc() in
fch_misc_setup()
- [arm64,armhf] drm/rockchip: dw_hdmi: cleanup drm encoder during unbind
- memstick: r592: Fix UAF bug in r592_remove due to race condition
(CVE-2023-3141)
- ACPI: EC: Fix oops when removing custom query handlers
- drm/amd/display: fixed dcn30+ underflow issue
- [armhf] remoteproc: stm32_rproc: Add mutex protection for workqueue
- [arm64,armhf] drm/tegra: Avoid potential 32-bit integer overflow
- [arm64] drm/msm/dp: Clean up handling of DP AUX interrupts
- ACPICA: Avoid undefined behavior: applying zero offset to null pointer
- ACPICA: ACPICA: check null return of ACPI_ALLOCATE_ZEROED in
acpi_db_display_objects
- [arm64] dts: qcom: sdm845-polaris: Drop inexistent properties
- [arm64,armhf] irqchip/gicv3: Workaround for NVIDIA erratum T241-FABRIC-4
- ACPI: video: Remove desktops without backlight DMI quirks
- drm/amd/display: Correct DML calculation to follow HW SPEC
- drm/amd: Fix an out of bounds error in BIOS parser
- drm/amdgpu: Fix sdma v4 sw fini error
- [armhf] media: Prefer designated initializers over memset for subdev pad
ops
- wifi: ath: Silence memcpy run-time false positive warning
- bpf: Annotate data races in bpf_local_storage
- wifi: brcmfmac: pcie: Provide a buffer of random bytes to the device
- wifi: brcmfmac: cfg80211: Pass the PMK in binary instead of hex
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- scsi: lpfc: Correct used_rpi count when devloss tmo fires with no recovery
- bnxt: avoid overflow in bnxt_get_nvram_directory()
- net: Catch invalid index in XPS mapping
- netdev: Enforce index cap in netdev_get_tx_queue
- scsi: target: iscsit: Free cmds before session free
- lib: cpu_rmap: Avoid use after free on rmap->obj array entries
- scsi: message: mptlan: Fix use after free bug in mptlan_remove() due to
race condition
- gfs2: Fix inode height consistency check
- [x86] scsi: ufs: ufs-pci: Add support for Intel Lunar Lake
- ext4: set goal start correctly in ext4_mb_normalize_request
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()
- crypto: jitter - permanent and intermittent health errors
- f2fs: Fix system crash due to lack of free space in LFS
- f2fs: fix to drop all dirty pages during umount() if cp_error is set
- f2fs: fix to check readonly condition correctly
- bpf: Add preempt_count_{sub,add} into btf id deny list
- md: fix soft lockup in status_resync
- wifi: iwlwifi: pcie: fix possible NULL pointer dereference
- wifi: iwlwifi: add a new PCI device ID for BZ device
- wifi: iwlwifi: pcie: Fix integer overflow in iwl_write_to_user_buf
- wifi: iwlwifi: mvm: fix ptk_pn memory leak
- block, bfq: Fix division by zero error on zero wsum
- wifi: ath11k: Ignore frags from uninitialized peer in dp.
- wifi: iwlwifi: fix iwl_mvm_max_amsdu_size() for MLO
- null_blk: Always check queue mode setting from configfs
- wifi: iwlwifi: dvm: Fix memcpy: detected field-spanning write backtrace
- wifi: ath11k: Fix SKB corruption in REO destination ring
- nbd: fix incomplete validation of ioctl arg
- ipvs: Update width of source for ip_vs_sync_conn_options
- Bluetooth: btusb: Add new PID/VID 04ca:3801 for MT7663
- Bluetooth: Add new quirk for broken local ext features page 2
- Bluetooth: btrtl: add support for the RTL8723CS
- Bluetooth: Improve support for Actions Semi ATS2851 based devices
- Bluetooth: btrtl: check for NULL in btrtl_set_quirks()
- Bluetooth: btintel: Add LE States quirk support
- Bluetooth: hci_bcm: Fall back to getting bdaddr from EFI if not set
- Bluetooth: Add new quirk for broken set random RPA timeout for ATS2851
- Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp
- Bluetooth: btrtl: Add the support for RTL8851B
- HID: apple: Set the tilde quirk flag on the Geyser 4 and later
- [x86] ASoC: amd: yc: Add DMI entries to support HP OMEN 16-n0xxx (8A42)
- HID: logitech-hidpp: Don't use the USB serial for USB devices
- HID: logitech-hidpp: Reconcile USB and Unifying serials
- [arm64,armhf] spi: spi-imx: fix MX51_ECSPI_* macros when cs > 3
- [x86] usb: typec: ucsi: acpi: add quirk for ASUS Zenbook UM325
- ALSA: hda: LNL: add HD Audio PCI ID
- [x86] ASoC: amd: Add Dell G15 5525 to quirks list
- [x86] ASoC: amd: yc: Add ThinkBook 14 G5+ ARP to quirks list for acp6x
- [x86] HID: apple: Set the tilde quirk flag on the Geyser 3
- [x86] HID: Ignore battery for ELAN touchscreen on ROG Flow X13 GV301RA
- HID: wacom: generic: Set battery quirk only when we see battery data
- usb: typec: tcpm: fix multiple times discover svids error
- serial: 8250: Reinit port->pm on port specific driver unbind
- [x86] soundwire: dmi-quirks: add remapping for Intel 'Rooks County' NUC
M15
- soundwire: qcom: gracefully handle too many ports in DT
- soundwire: bus: Fix unbalanced pm_runtime_put() causing usage count
underflow
- [x86] mfd: intel_soc_pmic_chtwc: Add Lenovo Yoga Book X90F to
intel_cht_wc_models
- [x86] mfd: intel-lpss: Add Intel Meteor Lake PCH-S LPSS PCI IDs
- [x86] platform/x86: Move existing HP drivers to a new hp subdir
- [x86] hp-wmi: add micmute to hp_wmi_keymap struct
- drm/amdgpu: drop gfx_v11_0_cp_ecc_error_irq_funcs
- xfrm: don't check the default policy if the policy allows the packet
- Revert "Fix XFRM-I support for nested ESP tunnels"
- [arm64] drm/msm/dp: unregister audio driver during unbind
- [arm64] drm/msm/dpu: Assign missing writeback log_mask
- [arm64] drm/msm/dpu: Move non-MDP_TOP INTF_INTR offsets out of hwio header
- [arm64] drm/msm/dpu: Remove duplicate register defines from INTF
- platform: Provide a remove callback that returns no value
- [arm64] ASoC: fsl_micfil: Fix error handler with pm_runtime_enable
- cpupower: Make TSC read per CPU for Mperf monitor
- xfrm: Reject optional tunnel/BEET mode templates in outbound policies
- af_key: Reject optional tunnel/BEET mode templates in outbound policies
- [arm64] drm/msm: Fix submit error-path leaks
- [arm64,armhf] net: fec: Better handle pm_runtime_get() failing in
.remove()
- net: phy: dp83867: add w/a for packet errors seen with short cables
- ALSA: firewire-digi00x: prevent potential use after free
- wifi: mt76: connac: fix stats->tx_bytes calculation
- [x86] ALSA: hda/realtek: Apply HP B&O top speaker profile to Pavilion 15
- sfc: disable RXFCS and RXALL features by default
- vsock: avoid to close connected socket after the timeout
- tcp: fix possible sk_priority leak in tcp_v4_send_reset()
- [armhf] serial: arc_uart: fix of_iomap leak in `arc_serial_probe`
- erspan: get the proto with the md version for collect_md
- [arm64] net: hns3: fix output information incomplete for dumping tx queue
info with debugfs
- [arm64] net: hns3: fix sending pfc frames after reset issue
- [arm64] net: hns3: fix reset delay time to avoid configuration timeout
- [arm64] net: hns3: fix reset timeout when enable full VF
- media: netup_unidvb: fix use-after-free at del_timer()
- SUNRPC: double free xprt_ctxt while still in use
- SUNRPC: always free ctxt when freeing deferred request
- SUNRPC: Fix trace_svc_register() call site
- [x86] ASoC: SOF: topology: Fix logic for copying tuples
- net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
- virtio-net: Maintain reverse cleanup order
- virtio_net: Fix error unwinding of XDP initialization
- tipc: add tipc_bearer_min_mtu to calculate min mtu
- tipc: do not update mtu if msg_max is too small in mtu negotiation
- tipc: check the bearer min mtu properly when setting it by netlink
- [s390x] cio: include subchannels without devices also for evaluation
- can: dev: fix missing CAN XL support in can_put_echo_skb()
- [arm64] net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- [arm64] net: bcmgenet: Restore phy_stop() depending upon suspend/close
- ice: introduce clear_reset_state operation
- ice: Fix ice VF reset during iavf initialization
- wifi: cfg80211: Drop entries with invalid BSSIDs in RNR
- wifi: mac80211: fortify the spinlock against deadlock by interrupt
- wifi: mac80211: fix min center freq offset tracing
- wifi: mac80211: Abort running color change when stopping the AP
- wifi: iwlwifi: mvm: fix cancel_delayed_work_sync() deadlock
- wifi: iwlwifi: fw: fix DBGI dump
- wifi: iwlwifi: fix OEM's name in the ppag approved list
- wifi: iwlwifi: mvm: fix OEM's name in the tas approved list
- wifi: iwlwifi: mvm: don't trust firmware n_channels
- scsi: storvsc: Don't pass unused PFNs to Hyper-V host
- net: tun: rebuild error handling in tun_get_user
- tun: Fix memory leak for detached NAPI queue.
- cassini: Fix a memory leak in the error handling path of cas_init_one()
- [arm64,armhf] net: dsa: mv88e6xxx: Fix mv88e6393x EPC write command offset
- igb: fix bit_shift to be in [1..8] range
- vlan: fix a potential uninit-value in vlan_dev_hard_start_xmit()
- net: wwan: iosm: fix NULL pointer dereference when removing device
- net: pcs: xpcs: fix C73 AN not getting enabled
- netfilter: nf_tables: fix nft_trans type confusion
- netfilter: nft_set_rbtree: fix null deref on element insertion
- ALSA: usb-audio: Add a sample rate workaround for Line6 Pod Go
- USB: usbtmc: Fix direction for 0-length ioctl control messages
- usb-storage: fix deadlock when a scsi command timeouts more than once
- USB: UHCI: adjust zhaoxin UHCI controllers OverCurrent bit value
- [arm64,armhf] usb: dwc3: gadget: Improve dwc3_gadget_suspend() and
dwc3_gadget_resume()
- [arm64,armhf] usb: dwc3: debugfs: Resume dwc3 before accessing registers
- usb: gadget: u_ether: Fix host MAC address case
- usb: typec: altmodes/displayport: fix pin_assignment_show
- xhci-pci: Only run d3cold avoidance quirk for s2idle
- xhci: Fix incorrect tracking of free space on transfer rings
- ALSA: hda: Fix Oops by 9.1 surround channel names
- ALSA: hda: Add NVIDIA codec IDs a3 through a7 to patch table
- [x86] ALSA: hda/realtek: Add quirk for Clevo L140AU
- [x86] ALSA: hda/realtek: Add a quirk for HP EliteDesk 805
- [x86] ALSA: hda/realtek: Add quirk for 2nd ASUS GU603
- [x86] ALSA: hda/realtek: Add quirk for HP EliteBook G10 laptops
- ALSA: hda/realtek: Fix mute and micmute LEDs for yet another HP laptop
- can: j1939: recvmsg(): allow MSG_CMSG_COMPAT flag
- can: isotp: recvmsg(): allow MSG_CMSG_COMPAT flag
- wifi: rtw88: use work to update rate to avoid RCU warning
- SMB3: Close all deferred handles of inode in case of handle lease break
- SMB3: drop reference to cfile before sending oplock break
- ksmbd: smb2: Allow messages padded to 8byte boundary
- ksmbd: allocate one more byte for implied bcc[0]
- ksmbd: fix wrong UserName check in session_user
- ksmbd: fix global-out-of-bounds in smb2_find_context_vals
- KVM: Fix vcpu_array[0] races
- statfs: enforce statfs[64] structure initialization
- maple_tree: make maple state reusable after mas_empty_area()
(Closes: #1036755)
- mm: fix zswap writeback race condition
- serial: Add support for Advantech PCI-1611U card
- serial: 8250_exar: Add support for USR298x PCI Modems
- [arm64] serial: qcom-geni: fix enabling deactivated interrupt
- [x86] thunderbolt: Clear registers properly when auto clear isn't in use
- vc_screen: reload load of struct vc_data pointer in vcs_write() to avoid
UAF
- ceph: force updating the msg pointer in non-split case
- drm/amd/pm: fix possible power mode mismatch between driver and PMFW
- drm/amdgpu/gmc11: implement get_vbios_fb_size()
- drm/amdgpu/gfx10: Disable gfxoff before disabling powergating.

[continued in next message]

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)