[continued from previous message]

- drm/amd/display: Clean up errors & warnings in amdgpu_dm.c
- drm/amd/display: Add polling method to handle MST reply packet
- Revert "drm/amd/display: edp do not add non-edid timings"
https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.4.8
- [x86] platform/x86/amd/pmf: Notify OS power slider update
- [x86] platform/x86/amd/pmf: reduce verbosity of apmf_get_system_params
- drm/amd: Move helper for dynamic speed switch check out of smu13
- drm/amd: Align SMU11 SMU_MSG_OverridePcieParameters implementation with
SMU13
- r8169: revert 2ab19de62d67 ("r8169: remove ASPM restrictions now that ASPM
is disabled during NAPI poll")
- jbd2: Fix wrongly judgement for buffer head removing while doing
checkpoint
- [arm64] KVM: arm64: Handle kvm_arm_init failure correctly in finalize_pkvm
- blk-mq: Fix stall due to recursive flush plug
- [powerpc*] pseries/vas: Hold mmap_mutex after mmap lock during window
close
- [s390x] KVM: s390: pv: simplify shutdown and fix race
- [s390x] KVM: s390: pv: fix index value of replaced ASCE
- [s390x] mm: fix per vma lock fault handling
- io_uring: don't audit the capability check in io_uring_create()
- gpio: tps68470: Make tps68470_gpio_output() always set the initial value
- gpio: mvebu: Make use of devm_pwmchip_add
- gpio: mvebu: fix irq domain leak
- regmap: Disable locking for RBTREE and MAPLE unit tests
- btrfs: factor out a btrfs_verify_page helper
- btrfs: fix fsverify read error handling in end_page_read
- btrfs: fix race between quota disable and relocation
- i2c: Delete error messages for failed memory allocations
- i2c: Improve size determinations
- i2c: nomadik: Remove unnecessary goto label
- i2c: nomadik: Use devm_clk_get_enabled()
- i2c: nomadik: Remove a useless call in the remove function
- PCI/ASPM: Return 0 or -ETIMEDOUT from pcie_retrain_link()
- PCI/ASPM: Factor out pcie_wait_for_retrain()
- PCI/ASPM: Avoid link retraining race
- PCI: rockchip: Remove writes to unused registers
- PCI: rockchip: Fix window mapping and address translation for endpoint
- PCI: rockchip: Don't advertise MSI-X in PCIe capabilities
- drm/amd/display: Convert Delaying Aux-I Disable To Monitor Patch
- drm/amd/display: Keep disable aux-i delay as 0
- drm/amd/display: add pixel rate based CRB allocation support
- drm/amd/display: fix dcn315 single stream crb allocation
- drm/amd/display: Update correct DCN314 register header
- drm/amd/display: Set minimum requirement for using PSR-SU on Rembrandt
- drm/amd/display: Set minimum requirement for using PSR-SU on Phoenix
- drm/ttm: never consider pinned BOs for eviction&swap
- maple_tree: add __init and __exit to test module
- maple_tree: fix 32 bit mas_next testing
- drm/amd/display: Add FAMS validation before trying to use it
- drm/amd/display: update extended blank for dcn314 onwards
- drm/amd/display: Fix possible underflow for displays with large vblank
- drm/amd/display: Prevent vtotal from being set to 0
- ext4: add EXT4_MB_HINT_GOAL_ONLY test in ext4_mb_use_preallocated
- ext4: mballoc: Remove useless setting of ac_criteria
- ext4: fix rbtree traversal bug in ext4_mb_use_preallocated
- phy: phy-mtk-dp: Fix an error code in probe()
- phy: mediatek: hdmi: mt8195: fix prediv bad upper limit test
- phy: qcom-snps-femto-v2: keep cfg_ahb_clk enabled during runtime suspend
- phy: qcom-snps-femto-v2: properly enable ref clock
- soundwire: qcom: update status correctly with mask
- soundwire: amd: Fix a check for errors in probe()
- media: tc358746: Address compiler warnings
- media: staging: atomisp: select V4L2_FWNODE
- media: amphion: Fix firmware path to match linux-firmware
- media: mtk-jpeg: move data/code inside CONFIG_OF blocks
- media: mtk_jpeg_core: avoid unused-variable warning
- i40e: Fix an NULL vs IS_ERR() bug for debugfs_create_dir()
- iavf: fix potential deadlock on allocation failure
- iavf: check for removal state before IAVF_FLAG_PF_COMMS_FAILED
- net: phy: marvell10g: fix 88x3310 power up
- [arm64] net: hns3: fix the imp capability bit cannot exceed 32 bits issue
- [arm64] net: hns3: fix wrong tc bandwidth weight data issue
- [arm64] net: hns3: fix wrong bw weight of disabled tc issue
- vxlan: calculate correct header length for GPE
- vxlan: generalize vxlan_parse_gpe_hdr and remove unused args
- vxlan: fix GRO with VXLAN-GPE
- phy: hisilicon: Fix an out of bounds check in hisi_inno_phy_probe()
- atheros: fix return value check in atl1_tso()
- ethernet: atheros: fix return value check in atl1e_tso_csum()
- ipv6 addrconf: fix bug where deleting a mngtmpaddr can create a new
temporary address
- net: fec: avoid tx queue timeout when XDP is enabled
- tcp: Reduce chance of collisions in inet6_hashfn(). (CVE-2023-1206)
- ice: Fix memory management in ice_ethtool_fdir.c
- bonding: reset bond's flags when down link is P2P device
- team: reset team's flags when down link is P2P device
- octeontx2-af: Fix hash extraction enable configuration
- net: stmmac: Apply redundant write work around on 4.xx too
- [x86] platform/x86: msi-laptop: Fix rfkill out-of-sync on MSI Wind U100
- [x86] traps: Fix load_unaligned_zeropad() handling for shared TDX memory
- macvlan: add forgotten nla_policy for IFLA_MACVLAN_BC_CUTOFF
- igc: Fix Kernel Panic during ndo_tx_timeout callback
- netfilter: nft_set_rbtree: fix overlap expiration walk
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: disallow rule addition to bound chain via
NFTA_RULE_CHAIN_ID (CVE-2023-4147)
- mm: suppress mm fault logging if fatal signal already pending
- tools: ynl-gen: fix enum index in _decode_enum(..)
- net: fec: tx processing does not call XDP APIs if budget is 0
- net/sched: mqprio: Add length check for TCA_MQPRIO_{MAX/MIN}_RATE64
- benet: fix return value check in be_lancer_xmit_workarounds()
- tipc: check return value of pskb_trim()
- tipc: stop tipc crypto on failure in tipc_node_create
- fs/9p: Fix a datatype used with V9FS_DIRECT_IO
- RDMA/mlx4: Make check for invalid flags stricter
- [arm64] drm/msm/mdss: correct UBWC programming for SM8550
- [arm64] drm/msm/dpu: add missing flush and fetch bits for DMA4/DMA5 planes
- [arm64] drm/msm/dpu: drop enum dpu_core_perf_data_bus_id
- [arm64] drm/msm/dsi: Drop unused regulators from QCM2290 14nm DSI PHY
config
- [arm64] drm/msm/adreno: Fix snapshot BINDLESS_DATA size
- RDMA/irdma: Add missing read barriers
- RDMA/irdma: Fix data race on CQP completion stats
- RDMA/irdma: Fix data race on CQP request done
- RDMA/core: Update CMA destination address on rdma_resolve_addr
- RDMA/mthca: Fix crash when polling CQ for shared QPs
- RDMA/bnxt_re: Prevent handling any completions after qp destroy
- RDMA/bnxt_re: Enhance the existing functions that wait for FW responses
- RDMA/bnxt_re: Avoid the command wait if firmware is inactive
- RDMA/bnxt_re: use shadow qd while posting non blocking rcfw command
- RDMA/bnxt_re: Simplify the function that sends the FW commands
- RDMA/bnxt_re: add helper function __poll_for_resp
- RDMA/bnxt_re: Fix hang during driver unload
- [arm64] drm/msm: Fix IS_ERR_OR_NULL() vs NULL check in a5xx_submit_in_rb()
- [arm64] drm/msm: Fix hw_fence error path cleanup
- cxl/acpi: Fix a use-after-free in cxl_parse_cfmws()
- cxl/acpi: Return 'rc' instead of '0' in cxl_parse_cfmws()
- [arm64] ASoC: fsl_spdif: Silence output on stop
- block: Fix a source code comment in include/uapi/linux/blkzoned.h
- smb3: do not set NTLMSSP_VERSION flag for negotiate not auth request
- [x86] drm/i915: Fix an error handling path in igt_write_huge()
- xenbus: check xen_domain in xenbus_probe_initcall
- dm raid: fix missing reconfig_mutex unlock in raid_ctr() error paths
- dm raid: clean up four equivalent goto tags in raid_ctr()
- dm raid: protect md_stop() with 'reconfig_mutex'
- drm/amd: Fix an error handling mistake in psp_sw_init()
- drm/amd/display: Unlock on error path in
dm_handle_mst_sideband_msg_ready_event()
- RDMA/irdma: Fix op_type reporting in CQEs
- RDMA/irdma: Report correct WC error
- [arm64] drm/msm: Disallow submit with fence id 0
- ublk: fail to start device if queue setup is interrupted
- ublk: fail to recover device if queue setup is interrupted
- ublk: return -EINTR if breaking from waiting for existed users in DEL_DEV
- iommufd: IOMMUFD_DESTROY should not increase the refcount
- tmpfs: fix Documentation of noswap and huge mount options
- ata: pata_ns87415: mark ns87560_tf_read static
- ring-buffer: Fix wrong stat of cpu_buffer->read
- tracing: Fix warning in trace_buffered_event_disable()
- Revert "usb: gadget: tegra-xudc: Fix error check in
tegra_xudc_powerdomain_init()"
- usb: gadget: call usb_gadget_check_config() to verify UDC capability
- USB: gadget: Fix the memory leak in raw_gadget driver
- usb: gadget: core: remove unbalanced mutex_unlock in usb_gadget_activate
- KVM: Grab a reference to KVM for VM and vCPU stats file descriptors
- [x86] KVM: VMX: Don't fudge CR0 and CR4 for restricted L2 guest
- [x86] KVM: x86: Disallow KVM_SET_SREGS{2} if incoming CR0 is invalid
- serial: qcom-geni: drop bogus runtime pm state update
- tty: serial: sh-sci: Fix sleeping in atomic context
- serial: 8250_dw: Preserve original value of DLF register
- USB: serial: option: support Quectel EM060K_128
- USB: serial: option: add Quectel EC200A module support
- USB: serial: simple: add Kaufmann RKS+CAN VCP
- USB: serial: simple: sort driver entries
- can: gs_usb: gs_can_close(): add missing set of CAN state to
CAN_STATE_STOPPED
- TIOCSTI: always enable for CAP_SYS_ADMIN (Closes: #1039092)
- usb: typec: Set port->pd before adding device for typec_port
- usb: typec: Iterate pds array when showing the pd list
- usb: typec: Use sysfs_emit_at when concatenating the string
- Revert "usb: dwc3: core: Enable AutoRetry feature in the controller"
- usb: dwc3: pci: skip BYT GPIO lookup table for hardwired phy
- usb: dwc3: don't reset device side if dwc3 was configured as host-only
- usb: misc: ehset: fix wrong if condition
- usb: ohci-at91: Fix the unhandle interrupt when resume
- USB: quirks: add quirk for Focusrite Scarlett
- usb: cdns3: fix incorrect calculation of ep_buf_size when more than one
config
- usb: xhci-mtk: set the dma max_seg_size
- Revert "usb: xhci: tegra: Fix error check"
- Documentation: security-bugs.rst: update preferences when dealing with the
linux-distros group
- Documentation: security-bugs.rst: clarify CVE handling
- staging: r8712: Fix memory leak in _r8712_init_xmit_priv()
- staging: ks7010: potential buffer overflow in ks_wlan_set_encode_ext()
- tty: n_gsm: fix UAF in gsm_cleanup_mux
- Revert "xhci: add quirk for host controllers that don't update endpoint
DCS"
- ALSA: hda/realtek: Support ASUS G713PV laptop
- ALSA: hda/relatek: Enable Mute LED on HP 250 G8
- hwmon: (k10temp) Enable AMD3255 Proc to show negative temperature
- hwmon: (nct7802) Fix for temp6 (PECI1) processed even if PECI1 disabled
- hwmon: (aquacomputer_d5next) Fix incorrect PWM value readout
- hwmon: (pmbus_core) Fix pmbus_is_enabled()
- hwmon: (pmbus_core) Fix NULL pointer dereference
- hwmon: (pmbus_core) Fix Deadlock in pmbus_regulator_get_status
- btrfs: zoned: do not enable async discard
- btrfs: account block group tree when calculating global reserve size
- btrfs: check if the transaction was aborted at btrfs_wait_for_commit()
- btrfs: check for commit error at btrfs_attach_transaction_barrier()
- [x86] MCE/AMD: Decrement threshold_bank refcount when removing threshold
blocks
- [x86] cpu: Enable STIBP on AMD if Automatic IBRS is enabled
- file: always lock position for FMODE_ATOMIC_POS
- nfsd: Remove incorrect check in nfsd4_validate_stateid
- ksmbd: check if a mount point is crossed during path lookup
- ACPI/IORT: Remove erroneous id_count check in iort_node_get_rmr_info()
- tpm_tis: Explicitly check for error code
- irq-bcm6345-l1: Do not assume a fixed block to cpu mapping
- irqchip/gic-v4.1: Properly lock VPEs when doing a directLPI invalidation
- locking/rtmutex: Fix task->pi_waiters integrity
- proc/vmcore: fix signedness bug in read_from_oldmem()
- xen: speed up grant-table reclaim
- virtio-net: fix race between set queues and probe
- net: ipa: only reset hashed tables when supported
- net: dsa: qca8k: enable use_single_write for qca8xxx
- net: dsa: qca8k: fix search_and_insert wrong handling of new rule
- net: dsa: qca8k: fix broken search_and_del
- net: dsa: qca8k: fix mdb add/del case with 0 VID
- iommufd: Set end correctly when doing batch carry
- soundwire: fix enumeration completion
- Revert "um: Use swap() to make code cleaner"
- 9p: fix ignored return value in v9fs_dir_release
- fs/9p: remove unnecessary and overrestrictive check
- fs/9p: fix typo in comparison logic for cache mode
- fs/9p: fix type mismatch in file cache mode helper
- fs/9p: remove unnecessary invalidate_inode_pages2
- [s390x] dasd: fix hanging device after quiesce/resume
- [s390x] dasd: print copy pair message only for the correct error
- mptcp: more accurate NL event generation
- ASoC: wm8904: Fill the cache for WM8904_ADC_TEST_0 register
- [arm64] sme: Set new vector length before reallocating
- PM: sleep: wakeirq: fix wake irq arming
- thermal: of: fix double-free on unregistration
- ceph: never send metrics if disable_send_metrics is set
- [x86] drm/i915/dpt: Use shmem for dpt objects
- dm cache policy smq: ensure IO doesn't prevent cleaner policy progress
- rbd: make get_lock_owner_info() return a single locker or NULL
- rbd: harden get_lock_owner_info() a bit
- rbd: retrieve and check lock owner twice before blocklisting
- mm: lock VMA in dup_anon_vma() before setting ->anon_vma
- mm: fix memory ordering for mm_lock_seq and vm_lock_seq
- mm/memory-failure: fix hardware poison check in unpoison_memory()
- mm/mempolicy: Take VMA lock before replacing policy
- dma-buf: keep the signaling time of merged fences v3
- dma-buf: fix an error pointer vs NULL bug
https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.4.9
- xen/netback: Fix buffer overrun triggered by unusual packet
(CVE-2023-34319)
- [x86] fix backwards merge of GDS/SRSO bit
https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.4.10
- mm: lock_vma_under_rcu() must check vma->anon_vma under vma lock
- [arm64] iommu/arm-smmu-v3: Work around MMU-600 erratum 1076982
- [arm64] iommu/arm-smmu-v3: Document MMU-700 erratum 2812531
- [arm64] iommu/arm-smmu-v3: Add explicit feature for nesting
- [arm64] iommu/arm-smmu-v3: Document nesting-related errata
- [arm64] dts: imx8mm-venice-gw7903: disable disp_blk_ctrl
- [arm64] dts: imx8mm-venice-gw7904: disable disp_blk_ctrl
- [arm64] dts: phycore-imx8mm: Label typo-fix of VPU
- [arm64] dts: phycore-imx8mm: Correction in gpio-line-names
- [arm64] dts: imx8mn-var-som: add missing pull-up for onboard PHY reset
pinmux
- [arm64] dts: freescale: Fix VPU G2 clock
- [arm64] firmware: smccc: Fix use of uninitialised results structure
- lib/bitmap: workaround const_eval test build failure
- [arm64] soc: imx: imx8mp-blk-ctrl: register HSIO PLL clock as
bus_power_dev child
- [arm64] firmware: arm_scmi: Fix chan_free cleanup on SMC
- word-at-a-time: use the same return type for has_zero regardless of
endianness
- [s390x] vmem: split pages when debug pagealloc is enabled
- [s390x] KVM: s390: fix sthyi error handling
- erofs: fix wrong primary bvec selection on deduplicated extents
- [arm64] perf pmu arm64: Fix reading the PMU cpu slots in sysfs
- wifi: cfg80211: Fix return value in scan logic
- net/mlx5e: fix double free in macsec_fs_tx_create_crypto_table_groups
- net/mlx5: DR, fix memory leak in mlx5dr_cmd_create_reformat_ctx
- net/mlx5: fix potential memory leak in mlx5e_init_rep_rx
- net/mlx5e: fix return value check in mlx5e_ipsec_remove_trailer()
- net/mlx5: Honor user input for migratable port fn attr
- net/mlx5e: Don't hold encap tbl lock if there is no encap action
- net/mlx5e: Fix crash moving to switchdev mode when ntuple offload is set
- net/mlx5e: Move representor neigh cleanup to profile cleanup_tx
- net/mlx5e: xsk: Fix invalid buffer access for legacy rq
- net/mlx5e: xsk: Fix crash on regular rq reactivation
- net/mlx5e: kTLS, Fix protection domain in use syndrome when devlink reload
- net/mlx5: fs_chains: Fix ft prio if ignore_flow_level is not supported
- net/mlx5: Unregister devlink params in case interface is down
- bpf: Add length check for SK_DIAG_BPF_STORAGE_REQ_MAP_FD parsing
- rtnetlink: let rtnl_bridge_setlink checks IFLA_BRIDGE_MODE length
- net: sched: cls_u32: Fix match key mis-addressing
- mISDN: hfcpci: Fix potential deadlock on &hc->lock
- net: stmmac: tegra: Properly allocate clock bulk data
- qed: Fix scheduling in a tasklet while getting stats
- net: move gso declarations and functions to their own files
- net: gro: fix misuse of CB in udp socket lookup
- net: annotate data-races around sk->sk_reserved_mem
- net: annotate data-race around sk->sk_txrehash
- net: annotate data-races around sk->sk_max_pacing_rate
- net: add missing READ_ONCE(sk->sk_rcvlowat) annotation
- net: add missing READ_ONCE(sk->sk_sndbuf) annotation
- net: add missing READ_ONCE(sk->sk_rcvbuf) annotation
- net: annotate data-races around sk->sk_mark
- net: add missing data-race annotations around sk->sk_peek_off
- net: add missing data-race annotation for sk_ll_usec
- net: annotate data-races around sk->sk_priority
- net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
- net: usb: lan78xx: reorder cleanup operations to avoid UAF bugs
- ice: Fix RDMA VSI removal during queue rebuild
- bnxt: don't handle XDP in netpoll
- octeon_ep: initialize mbox mutexes
- bpf: Move unprivileged checks into map_create() and bpf_prog_load()
- bpf: Inline map creation logic in map_create() function
- bpf: Centralize permissions checks for all BPF map types
- bpf, cpumap: Make sure kthread is running before map update returns
- bpf, cpumap: Handle skb as well when clean up ptr_ring
- net/sched: cls_u32: No longer copy tcf_result on update to avoid
use-after-free (CVE-2023-4128)
- net/sched: cls_fw: No longer copy tcf_result on update to avoid
use-after-free (CVE-2023-4128)
- net/sched: cls_route: No longer copy tcf_result on update to avoid
use-after-free (CVE-2023-4128)
- bpf: sockmap: Remove preempt_disable in sock_map_sk_acquire
- net: ll_temac: fix error checking of irq_of_parse_and_map()
- net: korina: handle clk prepare error in korina_probe()
- net: netsec: Ignore 'phy-mode' on SynQuacer in DT mode
- bnxt_en: Fix page pool logic for page size >= 64K
- bnxt_en: Fix max_mtu setting for multi-buf XDP
- net: dcb: choose correct policy to parse DCB_ATTR_BCN
- [s390x] qeth: Don't call dev_close/dev_open (DOWN/UP)
- ip6mr: Fix skb_under_panic in ip6mr_cache_report()
- vxlan: Fix nexthop hash size
- net/mlx5: fs_core: Make find_closest_ft more generic
- net/mlx5: fs_core: Skip the FTs in the same FS_TYPE_PRIO_CHAINS fs_prio
- net/mlx5e: Set proper IPsec source port in L4 selector
- prestera: fix fallback to previous version on same major version
- tcp_metrics: fix addr_same() helper
- tcp_metrics: annotate data-races around tm->tcpm_stamp
- tcp_metrics: annotate data-races around tm->tcpm_lock
- tcp_metrics: annotate data-races around tm->tcpm_vals[]
- tcp_metrics: annotate data-races around tm->tcpm_net
- tcp_metrics: fix data-race in tcpm_suck_dst() vs fastopen
- scsi: zfcp: Defer fc_rport blocking until after ADISC response
- scsi: storvsc: Limit max_sectors for virtual Fibre Channel devices
- Documentation: kdump: Add va_kernel_pa_offset for RISCV64
- libceph: fix potential hang in ceph_osdc_notify()
- USB: zaurus: Add ID for A-300/B-500/C-700
- ceph: defer stopping mdsc delayed_work
- [arm64] firmware: arm_scmi: Drop OF node reference in the transport
channel setup
- exfat: use kvmalloc_array/kvfree instead of kmalloc_array/kfree
- exfat: check if filename entries exceeds max filename length
(CVE-2023-4273)
- exfat: release s_lock before calling dir_emit()
- mtd: spinand: toshiba: Fix ecc_get_status
- mtd: spinand: winbond: Fix ecc_get_status
- mtd: rawnand: meson: fix OOB available bytes for ECC
- bpf: Disable preemption in bpf_perf_event_output
- [arm64] dts: stratix10: fix incorrect I2C property for SCL signal
- net: tun_chr_open(): set sk_uid from current_fsuid() (CVE-2023-4194)
- net: tap_open(): set sk_uid from current_fsuid() (CVE-2023-4194)
- wifi: mt76: mt7615: do not advertise 5 GHz on first phy of MT7615D (DBDC)
- [x86] hyperv: Disable IBT when hypercall page lacks ENDBR instruction
- rbd: prevent busy loop when requesting exclusive lock
- bpf: Disable preemption in bpf_event_output
- smb: client: fix dfs link mount against w2k8
- [powerpc*] ftrace: Create a dummy stackframe to fix stack unwind
- [arm64] fpsimd: Sync and zero pad FPSIMD state for streaming SVE
- [arm64] fpsimd: Clear SME state in the target task when setting the VL
- [arm64] fpsimd: Sync FPSIMD state with SVE for SME only systems
- [arm64] ptrace: Flush FP state when setting ZT0
- [arm64] ptrace: Don't enable SVE when setting streaming SVE
- open: make RESOLVE_CACHED correctly test for O_TMPFILE
- drm/ttm: check null pointer before accessing when swapping
- [x86] drm/i915: Fix premature release of request's reusable memory
- [x86] drm/i915/gt: Cleanup aux invalidation registers
- Revert "page cache: fix page_cache_next/prev_miss off by one"
- sunvnet: fix sparc64 build error after gso code split
- clk: imx93: Propagate correct error in imx93_clocks_probe()
- file: reinstate f_pos locking optimization for regular files
- mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required()
- fs/sysv: Null check to prevent null-ptr-deref bug
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
(CVE-2023-40283)
- debugobjects: Recheck debug_objects_enabled before reporting
- net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb
- fs: Protect reconfiguration of sb read-write from racing writes
- mm/gup: do not return 0 from pin_user_pages_fast() for bad args
- btrfs: remove BUG_ON()'s in add_new_free_space()
- f2fs: fix to do sanity check on direct node in truncate_dnode()
- io_uring: annotate offset timeout races
- mtd: rawnand: omap_elm: Fix incorrect type in assignment
- mtd: rawnand: rockchip: fix oobfree offset and description
- mtd: rawnand: rockchip: Align hwecc vs. raw page helper layouts
- clk: mediatek: mt8183: Add back SSPM related clocks
- mtd: spi-nor: avoid holes in struct spi_mem_op
- mtd: rawnand: fsl_upm: Fix an off-by one test in fun_exec_op()
- [powerpc*] mm/altmap: Fix altmap boundary check
- drm/imx/ipuv3: Fix front porch adjustment upon hactive aligning
- drm/amdgpu: Use apt name for FW reserved region
- [x86] drm/i915: Add the gen12_needs_ccs_aux_inv helper
- [x86] drm/i915/gt: Ensure memory quiesced before invalidation
- [x86] drm/i915/gt: Add workaround 14016712196
- [x86] drm/i915/gt: Rename flags with bit_group_X according to the
datasheet
- [x86] drm/i915/gt: Poll aux invalidation register bit on invalidation
- [x86] drm/i915/gt: Support aux invalidation on all engines
- [x86] drm/i915/gt: Enable the CCS_FLUSH bit in the pipe control and in the
CS
- [x86] CPU/AMD: Do not leak quotient data after a division by 0
(CVE-2023-20588)
https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.4.11
- tpm/tpm_tis: Disable interrupts for TUXEDO InfinityBook S 15/17 Gen7
- tpm: Disable RNG for all AMD fTPMs
- tpm/tpm_tis: Disable interrupts for Lenovo P620 devices
- tpm: Add a helper for checking hwrng enabled
- ksmbd: validate command request size
- ksmbd: fix wrong next length validation of ea buffer in smb2_set_ea()
- [x86] KVM: SEV: snapshot the GHCB before accessing it
- [x86] KVM: SEV: only access GHCB fields once (CVE-2023-4155)
- wifi: nl80211: fix integer overflow in nl80211_parse_mbssid_elems()
- wifi: rtw89: fix 8852AE disconnection caused by RX full flags
- wireguard: allowedips: expand maximum node depth
- mmc: sdhci-f-sdh30: Replace with sdhci_pltfm
- ipv6: adjust ndisc_is_useropt() to also return true for PIO
- mptcp: avoid bogus reset on fallback close
- mptcp: fix disconnect vs accept race
- dmaengine: pl330: Return DMA_PAUSED when transaction is paused
- dmaengine: xilinx: xdma: Fix interrupt vector setting
- net: mana: Fix MANA VF unload when hardware is unresponsive
- ACPI: resource: revert "Remove "Zen" specific match and quirks"
- ACPI: resource: Always use MADT override IRQ settings for all legacy non
i8042 IRQs
- ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen
- ACPI: resource: Add IRQ override quirk for PCSpecialist Elimina Pro 16 M
- zram: take device and not only bvec offset into account
- [riscv64] Start of DRAM should at least be aligned on PMD size for the
direct mapping
- [riscv64] kexec: load initrd high in available memory
- [riscv64] mmio: Fix readX()-to-delay() ordering
- [riscv64] kexec: handle R_RISCV_CALL_PLT relocation type
- riscv: mm: fix 2 instances of -Wmissing-variable-declarations
- nvme: fix possible hang when removing a controller during error recovery
- nvme-tcp: fix potential unbalanced freeze & unfreeze
- nvme-rdma: fix potential unbalanced freeze & unfreeze
- nvme-pci: add NVME_QUIRK_BOGUS_NID for Samsung PM9B1 256G and 512G
- drm/nouveau/gr: enable memory loads on helper invocation on all channels
- drm/nouveau/nvkm/dp: Add workaround to fix DP 1.3+ DPCD issues
- drm/shmem-helper: Reset vma->vm_ops before calling dma_buf_mmap()
- drm/amdgpu: fix possible UAF in amdgpu_cs_pass1()
- drm/amd/pm: correct the pcie width for smu 13.0.0
- drm/amd/display: Fix a regression on Polaris cards
- drm/amd/display: check attr flag before set cursor degamma on DCN3+
- drm/amd: Disable S/G for APUs when 64GB or more host memory
- tpm: tpm_tis: Fix UPX-i11 DMI_MATCH condition
- tpm_tis: Opt-in interrupts
- cpuidle: dt_idle_genpd: Add helper function to remove genpd topology
- cpuidle: psci: Move enabling OSI mode after power domains creation
- io_uring: correct check for O_TMPFILE
- zsmalloc: fix races between modifications of fullness and isolated
- hwmon: (pmbus/bel-pfe) Enable PMBUS_SKIP_STATUS_CHECK for pfe1100
- cpufreq: amd-pstate: fix global sysfs attribute type
- fs/proc/kcore: reinstate bounce buffer for KCORE_TEXT regions
- nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput
- accel/ivpu: Add set_pages_array_wc/uc for internal buffers
- hugetlb: do not clear hugetlb dtor until allocating vmemmap
- mm: memory-failure: fix potential unexpected return value from
unpoison_memory()
- mm: memory-failure: avoid false hwpoison page mapped error info
- drm/amd/pm: expose swctf threshold setting for legacy powerplay
- drm/amd/pm: avoid unintentional shutdown due to temperature momentary
fluctuation
- iio: cros_ec: Fix the allocation size for cros_ec_command
- iio: frequency: admv1013: propagate errors from regulator_get_voltage()
- iio: adc: ad7192: Fix ac excitation feature
- iio: adc: meson: fix core clock enable/disable moment
- iio: adc: ina2xx: avoid NULL pointer dereference on OF device match
- [arm*] binder: fix memory leak in binder_init()
- misc: rtsx: judge ASPM Mode to set PETXCFG Reg
- [x86] thunderbolt: Fix memory leak in tb_handle_dp_bandwidth_request()
- usb-storage: alauda: Fix uninit-value in alauda_check_media()
- usb: dwc3: Properly handle processing of pending events
- USB: Gadget: core: Help prevent panic during UVC unconfigure
- usb: common: usb-conn-gpio: Prevent bailing out if initial role is none
- usb: typec: tcpm: Fix response to vsafe0V event
- usb: typec: altmodes/displayport: Signal hpd when configuring pin
assignment
- [x86] srso: Fix build breakage with the LLVM linker
- [x86] vdso: Choose the right GDT_ENTRY_CPUNODE for 32-bit getcpu() on
64-bit kernel
- [x86] cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- [x86] mm: Fix VDSO and VVAR placement on 5-level paging machines
- [x86] sev: Do not try to parse for the CC blob on non-AMD hardware
- [x86] linkage: Fix typo of BUILD_VDSO in asm/linkage.h
- [x86] speculation: Add cpu_show_gds() prototype
- [x86] Move gds_ucode_mitigated() declaration to header
- drm/nouveau/disp: Revert a NULL check inside nouveau_connector_get_modes
- netfilter: nf_tables: don't skip expired elements during walk
- netfilter: nf_tables: GC transaction API to avoid race with control plane
- netfilter: nf_tables: adapt set backend to use GC transaction API
- netfilter: nft_set_hash: mark set element as dead when deleting from
packet path
- iio: imu: lsm6dsx: Fix mount matrix retrieval
- iio: core: Prevent invalid memory access when there is no parent
- iio: light: bu27034: Fix scale format
- interconnect: qcom: Add support for mask-based BCMs
- interconnect: qcom: sa8775p: add enable_mask for bcm nodes
- interconnect: qcom: sm8450: add enable_mask for bcm nodes
- interconnect: qcom: sm8550: add enable_mask for bcm nodes
- [arm64] KVM: arm64: Fix hardware enable/disable flows for pKVM
- net: core: remove unnecessary frame_sz check in bpf_xdp_adjust_tail()
- bpf, sockmap: Fix map type error in sock_map_del_link
- bpf, sockmap: Fix bug that strp_done cannot be called
- hwmon: (aquacomputer_d5next) Add selective 200ms delay after sending ctrl
report
- mISDN: Update parameter type of dsp_cmx_send()
- macsec: use DEV_STATS_INC()
- mptcp: fix the incorrect judgment for msk->cb_flags
- igc: Add lock to safeguard global Qbv variables
- ionic: Add missing err handling for queue reconfig
- net/packet: annotate data-races around tp->status

[continued in next message]

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)