# changelog

author: Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.323.3.el8uek]
changelog:
  - LTS tag: v5.4.251 (Sherry Yang)   
  - tracing/histograms: Return an error if we fail to add histogram to hist_vars list (Mohamed Khalfella)   
  - tcp: annotate data-races around fastopenq.max_qlen (Eric Dumazet)   
  - tcp: annotate data-races around tp->notsent_lowat (Eric Dumazet)   
  - tcp: annotate data-races around rskq_defer_accept (Eric Dumazet)   
  - tcp: annotate data-races around tp->linger2 (Eric Dumazet)   
  - net: Replace the limit of TCP_LINGER2 with TCP_FIN_TIMEOUT_MAX (Cambda Zhu)   
  - tcp: annotate data-races around tp->tcp_tx_delay (Eric Dumazet)   
  - netfilter: nf_tables: can't schedule in nft_chain_validate (Florian Westphal)   
  - netfilter: nf_tables: fix spurious set element insertion failure (Florian Westphal)   
  - llc: Don't drop packet from non-root netns. (Kuniyuki Iwashima)   
  - fbdev: au1200fb: Fix missing IRQ check in au1200fb_drv_probe (Zhang Shurong)   
  - Revert "tcp: avoid the lookup process failing to get sk in ehash table" (Kuniyuki Iwashima)   
  - net:ipv6: check return value of pskb_trim() (Yuanjun Gong)   
  - iavf: Fix use-after-free in free_netdev (Ding Hui)   
  - net: ethernet: ti: cpsw_ale: Fix cpsw_ale_get_field()/cpsw_ale_set_field() (Tanmay Patil)   
  - pinctrl: amd: Use amd_pinconf_set() for all config options (Mario Limonciello)   
  - fbdev: imxfb: warn about invalid left/right margin (Martin Kaiser)   
  - spi: bcm63xx: fix max prepend length (Jonas Gorski)   
  - igb: Fix igb_down hung on surprise removal (Ying Hsu)   
  - wifi: iwlwifi: mvm: avoid baid size integer overflow (Johannes Berg)   
  - wifi: wext-core: Fix -Wstringop-overflow warning in ioctl_standard_iw_point() (Gustavo A. R. Silva)   
  - devlink: report devlink_port_type_warn source device (Petr Oros)   
  - bpf: Address KCSAN report on bpf_lru_list (Martin KaFai Lau)   
  - sched/fair: Don't balance task to its current running CPU (Yicong Yang)   
  - arm64: mm: fix VA-range sanity check (Mark Rutland)   
  - posix-timers: Ensure timer ID search-loop limit is valid (Thomas Gleixner)   
  - md/raid10: prevent soft lockup while flush writes (Yu Kuai)   
  - md: fix data corruption for raid456 when reshape restart while grow up (Yu Kuai)   
  - nbd: Add the maximum limit of allocated index in nbd_dev_add (Zhong Jinghua)   
  - debugobjects: Recheck debug_objects_enabled before reporting (Tetsuo Handa)   
  - ext4: correct inline offset when handling xattrs in inode body (Eric Whitney)   
  - drm/client: Fix memory leak in drm_client_modeset_probe (Jocelyn Falempe)   
  - drm/client: Fix memory leak in drm_client_target_cloned (Jocelyn Falempe)   
  - can: bcm: Fix UAF in bcm_proc_show() (YueHaibing)   
  - selftests: tc: set timeout to 15 minutes (Matthieu Baerts)   
  - fuse: revalidate: don't invalidate if interrupted (Miklos Szeredi)   
  - btrfs: fix warning when putting transaction with qgroups enabled after abort (Filipe Manana)   
  - perf probe: Add test for regression introduced by switch to die_get_decl_file() (Georg Müller)   
  - drm/atomic: Fix potential use-after-free in nonblocking commits (Daniel Vetter)   
  - scsi: qla2xxx: Remove unused nvme_ls_waitq wait queue (Manish Rangankar)   
  - scsi: qla2xxx: Pointer may be dereferenced (Shreyas Deodhar)   
  - scsi: qla2xxx: Correct the index of array (Bikash Hazarika)   
  - scsi: qla2xxx: Check valid rport returned by fc_bsg_to_rport() (Nilesh Javali)   
  - scsi: qla2xxx: Fix potential NULL pointer dereference (Bikash Hazarika)   
  - scsi: qla2xxx: Wait for io return on terminate rport (Quinn Tran)   
  - tracing/probes: Fix not to count error code to total length (Masami Hiramatsu (Google))   
  - tracing: Fix null pointer dereference in tracing_err_log_open() (Mateusz Stachyra)   
  - xtensa: ISS: fix call to split_if_spec (Max Filippov)   
  - ring-buffer: Fix deadloop issue on reading trace_pipe (Zheng Yejian)   
  - tracing/histograms: Add histograms to hist_vars if they have referenced variables (Mohamed Khalfella)   
  - tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() when iterating clk (Christophe JAILLET)   
  - tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() in case of error (Christophe JAILLET)   
  - Revert "8250: add support for ASIX devices with a FIFO bug" (Jiaqing Zhao)   
  - meson saradc: fix clock divider mask length (George Stark)   
  - ceph: don't let check_caps skip sending responses for revoke msgs (Xiubo Li)   
  - hwrng: imx-rngc - fix the timeout for init and self check (Martin Kaiser)   
  - firmware: stratix10-svc: Fix a potential resource leak in svc_create_memory_pool() (Christophe JAILLET)   
  - serial: atmel: don't enable IRQs prematurely (Dan Carpenter)   
  - drm/rockchip: vop: Leave vblank enabled in self-refresh (Brian Norris)   
  - drm/atomic: Allow vblank-enabled + self-refresh "disable" (Brian Norris)   
  - fs: dlm: return positive pid value for F_GETLK (Alexander Aring)   
  - md/raid0: add discard support for the 'original' layout (Jason Baron)   
  - misc: pci_endpoint_test: Re-init completion for every test (Damien Le Moal)   
  - misc: pci_endpoint_test: Free IRQs before removing the device (Damien Le Moal)   
  - PCI: rockchip: Set address alignment for endpoint mode (Damien Le Moal)   
  - PCI: rockchip: Use u32 variable to access 32-bit registers (Rick Wertenbroek)   
  - PCI: rockchip: Fix legacy IRQ generation for RK3399 PCIe endpoint core (Rick Wertenbroek)   
  - PCI: rockchip: Add poll and timeout to wait for PHY PLLs to be locked (Rick Wertenbroek)   
  - PCI: rockchip: Write PCI Device ID to correct register (Rick Wertenbroek)   
  - PCI: rockchip: Assert PCI Configuration Enable bit after probe (Rick Wertenbroek)   
  - PCI: qcom: Disable write access to read only registers for IP v2.3.3 (Manivannan Sadhasivam)   
  - PCI: Add function 1 DMA alias quirk for Marvell 88SE9235 (Robin Murphy)   
  - PCI/PM: Avoid putting EloPOS E2/S2/H2 PCIe Ports in D3cold (Ondrej Zary)   
  - jfs: jfs_dmap: Validate db_l2nbperpage while mounting (Siddh Raman Pant)   
  - ext4: only update i_reserved_data_blocks on successful block allocation (Baokun Li)   
  - ext4: fix wrong unit use in ext4_mb_clear_bb (Kemeng Shi)   
  - erofs: fix compact 4B support for 16k block size (Gao Xiang)   
  - SUNRPC: Fix UAF in svc_tcp_listen_data_ready() (Ding Hui)   
  - misc: fastrpc: Create fastrpc scalar with correct buffer count (Ekansh Gupta)   
  - powerpc: Fail build if using recordmcount with binutils v2.37 (Naveen N Rao)   
  - net: bcmgenet: Ensure MDIO unregistration has clocks enabled (Florian Fainelli)   
  - mtd: rawnand: meson: fix unaligned DMA buffers handling (Arseniy Krasnov)   
  - tpm: tpm_vtpm_proxy: fix a race condition in /dev/vtpmx creation (Jarkko Sakkinen)   
  - pinctrl: amd: Only use special debounce behavior for GPIO 0 (Mario Limonciello)   
  - pinctrl: amd: Detect internal GPIO0 debounce handling (Mario Limonciello)   
  - pinctrl: amd: Fix mistake in handling clearing pins at startup (Mario Limonciello)   
  - net/sched: make psched_mtu() RTNL-less safe (Pedro Tammela)   
  - net/sched: flower: Ensure both minimum and maximum ports are specified (Ido Schimmel)   
  - cls_flower: Add extack support for src and dst port range options (Guillaume Nault)   
  - wifi: airo: avoid uninitialized warning in airo_get_rate() (Randy Dunlap)   
  - erofs: avoid infinite loop in z_erofs_do_read_page() when reading beyond EOF (Chunhai Guo)   
  - platform/x86: wmi: Break possible infinite loop when parsing GUID (Andy Shevchenko)   
  - platform/x86: wmi: move variables (Barnabás Pőcze)   
  - platform/x86: wmi: use guid_t and guid_equal() (Barnabás Pőcze)   
  - platform/x86: wmi: remove unnecessary argument (Barnabás Pőcze)   
  - platform/x86: wmi: Fix indentation in some cases (Andy Shevchenko)   
  - platform/x86: wmi: Replace UUID redefinitions by their originals (Andy Shevchenko)   
  - ipv6/addrconf: fix a potential refcount underflow for idev (Ziyang Xuan)   
  - NTB: ntb_tool: Add check for devm_kcalloc (Jiasheng Jiang)   
  - NTB: ntb_transport: fix possible memory leak while device_register() fails (Yang Yingliang)   
  - ntb: intel: Fix error handling in intel_ntb_pci_driver_init() (Yuan Can)   
  - NTB: amd: Fix error handling in amd_ntb_pci_driver_init() (Yuan Can)   
  - ntb: idt: Fix error handling in idt_pci_driver_init() (Yuan Can)   
  - udp6: fix udp6_ehashfn() typo (Eric Dumazet)   
  - icmp6: Fix null-ptr-deref of ip6_null_entry->rt6i_idev in icmp6_dev(). (Kuniyuki Iwashima)   
  - ionic: remove WARN_ON to prevent panic_on_warn (Nitya Sunkad)   
  - net/sched: cls_fw: Fix improper refcount update leads to use-after-free (M A Ramdhan)   
  - net: mvneta: fix txq_map in case of txq_number==1 (Klaus Kudielka)   
  - scsi: qla2xxx: Fix error code in qla2x00_start_sp() (Dan Carpenter)   
  - igc: set TP bit in 'supported' and 'advertising' fields of ethtool_link_ksettings (Prasad Koya)   
  - igc: Remove delay during TX ring configuration (Muhammad Husaini Zulkifli)   
  - drm/panel: simple: Add connector_type for innolux_at043tn24 (Fabio Estevam)   
  - drm/panel: Add and fill drm_panel type field (Laurent Pinchart)   
  - drm/panel: Initialise panel dev and funcs through drm_panel_init() (Laurent Pinchart)   
  - workqueue: clean up WORK_* constant types, clarify masking (Linus Torvalds)   
  - net: lan743x: Don't sleep in atomic context (Moritz Fischer)   
  - block/partition: fix signedness issue for Amiga partitions (Michael Schmitz)   
  - tty: serial: fsl_lpuart: add earlycon for imx8ulp platform (Sherry Sun)   
  - netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Thadeu Lima de Souza Cascardo)   
  - netfilter: conntrack: Avoid nf_ct_helper_hash uses after free (Florent Revest)   
  - netfilter: nf_tables: fix scheduling-while-atomic splat (Florian Westphal)   
  - netfilter: nf_tables: unbind non-anonymous set if rule construction fails (Pablo Neira Ayuso)   
  - netfilter: nf_tables: reject unbound anonymous set before commit phase (Pablo Neira Ayuso)   
  - netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain (Pablo Neira Ayuso)   
  - netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE (Pablo Neira Ayuso)   
  - netfilter: nf_tables: add rescheduling points during loop detection walks (Florian Westphal)   
  - netfilter: nf_tables: use net_generic infra for transaction data (Florian Westphal)   
  - netfilter: add helper function to set up the nfnetlink header and use it (Pablo Neira Ayuso)   
  - netfilter: nftables: add helper function to set the base sequence number (Pablo Neira Ayuso)   
  - netfilter: nf_tables: fix nat hook table deletion (Florian Westphal)   
  - block: add overflow checks for Amiga partition support (Michael Schmitz)   
  - fanotify: disallow mount/sb marks on kernel internal pseudo fs (Amir Goldstein)   
  - fs: no need to check source (Jan Kara)   
  - ARM: orion5x: fix d2net gpio initialization (Arnd Bergmann)   
  - btrfs: fix race when deleting quota root from the dirty cow roots list (Filipe Manana)   
  - fs: Lock moved directories (Jan Kara)   
  - fs: Establish locking order for unrelated directories (Jan Kara)   
  - Revert "f2fs: fix potential corruption when moving a directory" (Jan Kara)   
  - ext4: Remove ext4 locking of moved directory (Jan Kara)   
  - fs: avoid empty option when generating legacy mount string (Thomas Weißschuh)   
  - jffs2: reduce stack usage in jffs2_build_xattr_subsystem() (Fabian Frederick)   
  - integrity: Fix possible multiple allocation in integrity_inode_get() (Tianjia Zhang)   
  - bcache: Remove unnecessary NULL point check in node allocations (Zheng Wang)   
  - mmc: sdhci: fix DMA configure compatibility issue when 64bit DMA mode is used. (Chevron Li)   
  - mmc: core: disable TRIM on Micron MTFC4GACAJCN-1M (Robert Marko)   
  - mmc: core: disable TRIM on Kingston EMMC04G-M627 (Robert Marko)   
  - NFSD: add encoding of op_recall flag for write delegation (Dai Ngo)   
  - ALSA: jack: Fix mutex call in snd_jack_report() (Takashi Iwai)   
  - i2c: xiic: Don't try to handle more interrupt events after error (Robert Hancock)   
  - i2c: xiic: Defer xiic_wakeup() and __xiic_start_xfer() in xiic_process() (Marek Vasut)   
  - sh: dma: Fix DMA channel offset calculation (Artur Rojek)   
  - net: dsa: tag_sja1105: fix MAC DA patching from meta frames (Vladimir Oltean)   
  - net/sched: act_pedit: Add size check for TCA_PEDIT_PARMS_EX (Lin Ma)   
  - xsk: Honor SO_BINDTODEVICE on bind (Ilya Maximets)   
  - xsk: Improve documentation for AF_XDP (Magnus Karlsson)   
  - tcp: annotate data races in __tcp_oow_rate_limited() (Eric Dumazet)   
  - net: bridge: keep ports without IFF_UNICAST_FLT in BR_PROMISC mode (Vladimir Oltean)   
  - powerpc: allow PPC_EARLY_DEBUG_CPM only when SERIAL_CPM=y (Randy Dunlap)   
  - f2fs: fix error path handling in truncate_dnode() (Chao Yu)   
  - mailbox: ti-msgmgr: Fill non-message tx data fields with 0x0 (Nishanth Menon)   
  - spi: bcm-qspi: return error if neither hif_mspi nor mspi is available (Jonas Gorski)   
  - Add MODULE_FIRMWARE() for FIRMWARE_TG357766. (Tobias Heider)   
  - sctp: fix potential deadlock on &net->sctp.addr_wq_lock (Chengfeng Ye)   
  - rtc: st-lpc: Release some resources in st_rtc_probe() in case of error (Christophe JAILLET)   
  - pwm: sysfs: Do not apply state to already disabled PWMs (Marek Vasut)   
  - pwm: imx-tpm: force 'real_period' to be zero in suspend (Fancy Fang)   
  - mfd: stmpe: Only disable the regulators if they are enabled (Christophe JAILLET)   
  - KVM: s390: vsie: fix the length of APCB bitmap (Pierre Morel)   
  - mfd: stmfx: Fix error path in stmfx_chip_init (Amelie Delaunay)   
  - serial: 8250_omap: Use force_suspend and resume for system suspend (Tony Lindgren)   
  - mfd: intel-lpss: Add missing check for platform_get_resource (Jiasheng Jiang)   
  - usb: dwc3: qcom: Release the correct resources in dwc3_qcom_remove() (Christophe JAILLET)   
  - KVM: s390: fix KVM_S390_GET_CMMA_BITS for GFNs in memslot holes (Nico Boehr)   
  - mfd: rt5033: Drop rt5033-battery sub-device (Stephan Gerhold)   
  - usb: hide unused usbfs_notify_suspend/resume functions (Arnd Bergmann)   
  - usb: phy: phy-tahvo: fix memory leak in tahvo_usb_probe() (Li Yang)   
  - extcon: Fix kernel doc of property capability fields to avoid warnings (Andy Shevchenko)   
  - extcon: Fix kernel doc of property fields to avoid warnings (Andy Shevchenko)   
  - usb: dwc3: qcom: Fix potential memory leak (Vladislav Efanov)   
  - media: usb: siano: Fix warning due to null work_func_t function pointer (Duoming Zhou)   
  - media: videodev2.h: Fix struct v4l2_input tuner index comment (Marek Vasut)   
  - media: usb: Check az6007_read() return value (Daniil Dulov)   
  - sh: j2: Use ioremap() to translate device tree address into kernel memory (John Paul Adrian Glaubitz)   
  - w1: fix loop in w1_fini() (Dan Carpenter)   
  - block: change all __u32 annotations to __be32 in affs_hardblocks.h (Michael Schmitz)   
  - block: fix signed int overflow in Amiga partition support (Michael Schmitz)   
  - usb: dwc3: gadget: Propagate core init errors to UDC during pullup (Krishna Kurapati)   
  - USB: serial: option: add LARA-R6 01B PIDs (Davide Tronchin)   
  - hwrng: st - keep clock enabled while hwrng is registered (Martin Kaiser)   
  - hwrng: st - Fix W=1 unused variable warning (Herbert Xu)   
  - NFSv4.1: freeze the session table upon receiving NFS4ERR_BADSESSION (Olga Kornievskaia)   
  - ARC: define ASM_NL and __ALIGN(_STR) outside #ifdef __ASSEMBLY__ guard (Masahiro Yamada)   
  - modpost: fix off by one in is_executable_section() (Dan Carpenter)   
  - crypto: marvell/cesa - Fix type mismatch warning (Arnd Bergmann)   
  - modpost: fix section mismatch message for R_ARM_{PC24,CALL,JUMP24} (Masahiro Yamada)   
  - modpost: fix section mismatch message for R_ARM_ABS32 (Masahiro Yamada)   
  - crypto: nx - fix build warnings when DEBUG_FS is not enabled (Randy Dunlap)   
  - hwrng: virtio - Fix race on data_avail and actual data (Herbert Xu)   
  - hwrng: virtio - always add a pending request (Laurent Vivier)   
  - hwrng: virtio - don't waste entropy (Laurent Vivier)   
  - hwrng: virtio - don't wait on cleanup (Laurent Vivier)   
  - hwrng: virtio - add an internal buffer (Laurent Vivier)   
  - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Aneesh Kumar K.V)   
  - pinctrl: at91-pio4: check return value of devm_kasprintf() (Claudiu Beznea)   
  - perf dwarf-aux: Fix off-by-one in die_get_varname() (Namhyung Kim)   
  - pinctrl: cherryview: Return correct value if pin in push-pull mode (Andy Shevchenko)   
  - PCI: Add pci_clear_master() stub for non-CONFIG_PCI (Sui Jingfeng)   
  - PCI: ftpci100: Release the clock resources (Junyan Ye)   
  - PCI: pciehp: Cancel bringup sequence if card is not present (Rongguang Wei)   
  - scsi: 3w-xxxx: Add error handling for initialization failure in tw_probe() (Yuchen Yang)   
  - PCI/ASPM: Disable ASPM on MFD function removal to avoid use-after-free (Ding Hui)   
  - scsi: qedf: Fix NULL dereference in error handling (Jinhong Zhu)   
  - ASoC: imx-audmix: check return value of devm_kasprintf() (Claudiu Beznea)   
  - clk: keystone: sci-clk: check return value of kasprintf() (Claudiu Beznea)   
  - clk: cdce925: check return value of kasprintf() (Claudiu Beznea)   
  - ALSA: ac97: Fix possible NULL dereference in snd_ac97_mixer (Su Hui)   
  - clk: tegra: tegra124-emc: Fix potential memory leak (Yuan Can)   
  - drm/radeon: fix possible division-by-zero errors (Nikita Zhandarovich)   
  - drm/amdkfd: Fix potential deallocation of previously deallocated memory. (Daniil Dulov)   
  - fbdev: omapfb: lcd_mipid: Fix an error handling path in mipid_spi_probe() (Christophe JAILLET)   
  - arm64: dts: renesas: ulcb-kf: Remove flow control for SCIF1 (Wolfram Sang)   
  - IB/hfi1: Fix sdma.h tx->num_descs off-by-one errors (Patrick Kelsey)   
  - soc/fsl/qe: fix usb.c build errors (Randy Dunlap)   
  - ASoC: es8316: Do not set rate constraints for unsupported MCLKs (Cristian Ciocaltea)   
  - ASoC: es8316: Increment max value for ALC Capture Target Volume control (Cristian Ciocaltea)   
  - memory: brcmstb_dpfe: fix testing array offset after use (Krzysztof Kozlowski)   
  - ARM: ep93xx: fix missing-prototype warnings (Arnd Bergmann)   
  - drm/panel: simple: fix active size for Ampire AM-480272H3TMQW-T01H (Dario Binacchi)   
  - arm64: dts: qcom: msm8916: correct camss unit address (Krzysztof Kozlowski)   
  - ARM: dts: gta04: Move model property out of pinctrl node (Tony Lindgren)   
  - RDMA/bnxt_re: Fix to remove an unnecessary log (Kalesh AP)   
  - drm: sun4i_tcon: use devm_clk_get_enabled in `sun4i_tcon_init_clocks` (XuDong Liu)   
  - Input: adxl34x - do not hardcode interrupt trigger type (Marek Vasut)   
  - ARM: dts: BCM5301X: Drop "clock-names" from the SPI node (Rafał Miłecki)   
  - Input: drv260x - sleep between polling GO bit (Luca Weiss)   
  - radeon: avoid double free in ci_dpm_init() (Nikita Zhandarovich)   
  - netlink: Add __sock_i_ino() for __netlink_diag_dump(). (Kuniyuki Iwashima)   
  - ipvlan: Fix return value of ipvlan_queue_xmit() (Cambda Zhu)   
  - netfilter: nf_conntrack_sip: fix the ct_sip_parse_numerical_param() return value. (Ilia.Gavrilov)   
  - netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one (Florian Westphal)   
  - lib/ts_bm: reset initial match offset for every block of text (Jeremy Sowden)   
  - net: nfc: Fix use-after-free caused by nfc_llcp_find_local (Lin Ma)   
  - nfc: llcp: simplify llcp_sock_connect() error paths (Krzysztof Kozlowski)   
  - gtp: Fix use-after-free in __gtp_encap_destroy(). (Kuniyuki Iwashima)   
  - selftests: rtnetlink: remove netdevsim device after ipsec offload test (Sabrina Dubroca)   
  - netlink: do not hard code device address lenth in fdb dumps (Eric Dumazet)   
  - netlink: fix potential deadlock in netlink_set_err() (Eric Dumazet)   
  - wifi: ath9k: convert msecs to jiffies where needed (Dmitry Antipov)   
  - wifi: cfg80211: rewrite merging of inherited elements (Benjamin Berg)   
  - wifi: iwlwifi: pull from TXQs with softirqs disabled (Johannes Berg)   
  - rtnetlink: extend RTEXT_FILTER_SKIP_STATS to IFLA_VF_INFO (Edwin Peer)   
  - wifi: ath9k: Fix possible stall on ath9k_txq_list_has_key() (Remi Pommarel)   
  - memstick r592: make memstick_debug_get_tpc_name() static (Arnd Bergmann)   
  - kexec: fix a memory leak in crash_shrink_memory() (Zhen Lei)   
  - watchdog/perf: more properly prevent false positives with turbo modes (Douglas Anderson)   
  - watchdog/perf: define dummy watchdog_update_hrtimer_threshold() on correct config (Douglas Anderson)   
  - wifi: rsi: Do not set MMC_PM_KEEP_POWER in shutdown (Marek Vasut)   
  - wifi: ath9k: don't allow to overwrite ENDPOINT0 attributes (Fedor Pchelkin)   
  - wifi: ray_cs: Fix an error handling path in ray_probe() (Christophe JAILLET)   
  - wifi: ray_cs: Drop useless status variable in parse_addr() (Andy Shevchenko)   
  - wifi: ray_cs: Utilize strnlen() in parse_addr() (Andy Shevchenko)   
  - wifi: wl3501_cs: Fix an error handling path in wl3501_probe() (Christophe JAILLET)   
  - wl3501_cs: use eth_hw_addr_set() (Jakub Kicinski)   
  - net: create netdev->dev_addr assignment helpers (Jakub Kicinski)   
  - wl3501_cs: Fix misspelling and provide missing documentation (Lee Jones)   
  - wl3501_cs: Remove unnecessary NULL check (Alex Dewar)   
  - wl3501_cs: Fix a bunch of formatting issues related to function docs (Lee Jones)   
  - wifi: atmel: Fix an error handling path in atmel_probe() (Christophe JAILLET)   
  - wifi: orinoco: Fix an error handling path in orinoco_cs_probe() (Christophe JAILLET)   
  - wifi: orinoco: Fix an error handling path in spectrum_cs_probe() (Christophe JAILLET)   
  - regulator: core: Streamline debugfs operations (Geert Uytterhoeven)   
  - regulator: core: Fix more error checking for debugfs_create_dir() (Geert Uytterhoeven)   
  - nfc: llcp: fix possible use of uninitialized variable in nfc_llcp_send_connect() (Krzysztof Kozlowski)   
  - nfc: constify several pointers to u8, char and sk_buff (Krzysztof Kozlowski)   
  - wifi: mwifiex: Fix the size of a memory allocation in mwifiex_ret_802_11_scan() (Christophe JAILLET)   
  - spi: spi-geni-qcom: Correct CS_TOGGLE bit in SPI_TRANS_CFG (Vijaya Krishna Nivarthi)   
  - samples/bpf: Fix buffer overflow in tcp_basertt (Pengcheng Yang)   
  - wifi: ath9k: avoid referencing uninit memory in ath9k_wmi_ctrl_rx (Fedor Pchelkin)   
  - wifi: ath9k: fix AR9003 mac hardware hang check register offset calculation (Peter Seiderer)   
  - ima: Fix build warnings (Roberto Sassu)   
  - pstore/ram: Add check for kstrdup (Jiasheng Jiang)   
  - evm: Complete description of evm_inode_setattr() (Roberto Sassu)   
  - ARM: 9303/1: kprobes: avoid missing-declaration warnings (Arnd Bergmann)   
  - powercap: RAPL: Fix CONFIG_IOSF_MBI dependency (Zhang Rui)   
  - PM: domains: fix integer overflow issues in genpd_parse_state() (Nikita Zhandarovich)   
  - clocksource/drivers/cadence-ttc: Fix memory leak in ttc_timer_probe (Feng Mingxi)   
  - clocksource/drivers/cadence-ttc: Use ttc driver as platform driver (Rajan Vaja)   
  - tracing/timer: Add missing hrtimer modes to decode_hrtimer_mode(). (Sebastian Andrzej Siewior)   
  - irqchip/jcore-aic: Fix missing allocation of IRQ descriptors (John Paul Adrian Glaubitz)   
  - irqchip/jcore-aic: Kill use of irq_create_strict_mappings() (Marc Zyngier)   
  - md/raid10: fix io loss while replacement replace rdev (Li Nan)   
  - md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request (Li Nan)   
  - md/raid10: fix wrong setting of max_corr_read_errors (Li Nan)   
  - md/raid10: fix overflow of md/safe_mode_delay (Li Nan)   
  - md/raid10: check slab-out-of-bounds in md_bitmap_get_counter (Li Nan)   
  - x86/resctrl: Only show tasks' pid in current pid namespace (Shawn Wang)   
  - x86/resctrl: Use is_closid_match() in more places (James Morse)   
  - bgmac: fix *initial* chip reset to support BCM5358 (Rafał Miłecki)   
  - drm/amdgpu: Validate VM ioctl flags. (Bas Nieuwenhuizen)   
  - scripts/tags.sh: Resolve gtags empty index generation (Ahmed S. Darwish)   
  - drm/i915: Initialise outparam for error return from wait_for_register (Chris Wilson)   
  - HID: wacom: Use ktime_t rather than int when dealing with timestamps (Jason Gerecke)   
  - fbdev: imsttfb: Fix use after free bug in imsttfb_probe (Zheng Wang)   
  - video: imsttfb: check for ioremap() failures (Greg Kroah-Hartman)   
  - x86/smp: Use dedicated cache-line for mwait_play_dead() (Thomas Gleixner)   
  - gfs2: Don't deref jdesc in evict (Bob Peterson)   
  - LTS tag: v5.4.250 (Sherry Yang)


author: Brian Maly <brian.maly@oracle.com> [5.4.17-2136.323.4.el8uek]
changelog:
  - uek-rpm: Disable cls_tcindex in file tcindex-disable.conf (Sherry Yang)  [Orabug: 35676248]  
  - uek-rpm: Update kernel's linux-firmware dependency. (Somasundaram Krishnasamy)  [Orabug: 35678692]  
  - Revert "sched/fair: sanitize vruntime of entity being placed" (Saeed Mirzamohammadi)  [Orabug: 35683806]  
  - Revert "sched/fair: Sanitize vruntime of entity being migrated" (Saeed Mirzamohammadi)  [Orabug: 35683806]


author: Brian Maly <brian.maly@oracle.com> [5.4.17-2136.323.5.el8uek]
changelog:
  - io_uring/net: save msghdr->msg_control for retries (Jens Axboe)  [Orabug: 35495339]  
  - io_uring/net: clear msg_controllen on partial sendmsg retry (Jens Axboe)  [Orabug: 35495339]  
  - io_uring/net: disable partial retries for recvmsg with cmsg (Jens Axboe)  [Orabug: 35495339]  
  - io_uring: hold uring mutex around poll removal (Jens Axboe)  [Orabug: 35495339]  
  - io_uring: avoid null-ptr-deref in io_arm_poll_handler (Fedor Pchelkin)  [Orabug: 35495339]  
  - io_uring/poll: allow some retries for poll triggering spuriously (Jens Axboe)  [Orabug: 35495339]  
  - io_uring: remove MSG_NOSIGNAL from recvmsg (David Lamparter)  [Orabug: 35495339]  
  - io_uring/rsrc: disallow multi-source reg buffers (Pavel Begunkov)  [Orabug: 35495339]  
  - io_uring: add a conditional reschedule to the IOPOLL cancelation loop (Jens Axboe)  [Orabug: 35495339]  
  - io_uring: mark task TASK_RUNNING before handling resume/task work (Jens Axboe)  [Orabug: 35495339]  
  - io_uring: handle TIF_NOTIFY_RESUME when checking for task_work (Jens Axboe)  [Orabug: 35495339]  
  - io_uring: ensure that io_init_req() passes in the right issue_flags (Jens Axboe)  [Orabug: 35495339]  
  - io_uring: add missing lock in io_get_file_fixed (Bing-Jhong Billy Jheng)  [Orabug: 35495339]  
  - io_uring/rw: remove leftover debug statement (Jens Axboe)  [Orabug: 35495339]  
  - io_uring/rw: ensure kiocb_end_write() is always called (Jens Axboe)  [Orabug: 35495339]  
  - io_uring: fix double poll leak on repolling (Pavel Begunkov)  [Orabug: 35495339]  
  - io_uring: Clean up a false-positive warning from GCC 9.3.0 (Alviro Iskandar Setiawan)  [Orabug: 35495339]  
  - io_uring/net: fix fast_iov assignment in io_setup_async_msg() (Stefan Metzmacher)  [Orabug: 35495339]  
  - io_uring: io_kiocb_update_pos() should not touch file for non -1 offset (Jens Axboe)  [Orabug: 35495339]  
  - io_uring/rw: defer fsnotify calls to task context (Jens Axboe)  [Orabug: 35495339]  
  - io_uring: do not recalculate ppos unnecessarily (Dylan Yudaken)  [Orabug: 35495339]  
  - io_uring: update kiocb->ki_pos at execution time (Dylan Yudaken)  [Orabug: 35495339]  
  - io_uring: remove duplicated calls to io_kiocb_ppos (Dylan Yudaken)  [Orabug: 35495339]  
  - io_uring: ensure that cached task references are always put on exit (Jens Axboe)  [Orabug: 35495339]  
  - io_uring: fix CQ waiting timeout handling (Pavel Begunkov)  [Orabug: 35495339]  
  - io_uring: lock overflowing for IOPOLL (Pavel Begunkov)  [Orabug: 35495339]  
  - io_uring: check for valid register opcode earlier (Jens Axboe)  [Orabug: 35495339]  
  - io_uring: fix async accept on O_NONBLOCK sockets (Dylan Yudaken)  [Orabug: 35495339]  
  - io_uring: allow re-poll if we made progress (Jens Axboe)  [Orabug: 35495339]  
  - io_uring: support MSG_WAITALL for IORING_OP_SEND(MSG) (Jens Axboe)  [Orabug: 35495339]  
  - io_uring: add flag for disabling provided buffer recycling (Jens Axboe)  [Orabug: 35495339]  
  - io_uring: ensure recv and recvmsg handle MSG_WAITALL correctly (Jens Axboe)  [Orabug: 35495339]  
  - io_uring: improve send/recv error handling (Pavel Begunkov)  [Orabug: 35495339]  
  - io_uring: don't gate task_work run on TIF_NOTIFY_SIGNAL (Jens Axboe)  [Orabug: 35495339]  
  - io_uring/io-wq: only free worker if it was allocated for creation (Jens Axboe)  [Orabug: 35495339]  
  - io_uring/io-wq: free worker if task_work creation is canceled (Jens Axboe)  [Orabug: 35495339]  
  - io_uring: Fix unsigned 'res' comparison with zero in io_fixup_rw_res() (Harshit Mogalapalli)  [Orabug: 35495339]  
  - io_uring: pass in EPOLL_URING_WAKE for eventfd signaling and wakeups (Jens Axboe)  [Orabug: 35495339]  
  - eventpoll: add EPOLL_URING_WAKE poll wakeup flag (Jens Axboe)  [Orabug: 35495339]  
  - epoll: simplify ep_poll_safewake() for CONFIG_DEBUG_LOCK_ALLOC (Jason Baron)  [Orabug: 35495339]  
  - eventfd: provide a eventfd_signal_mask() helper (Jens Axboe)  [Orabug: 35495339]  
  - signal: kill JOBCTL_TASK_WORK (Jens Axboe)  [Orabug: 35495339]  
  - net: remove cmsg restriction from io_uring based send/recvmsg calls (Jens Axboe)  [Orabug: 35495339]  
  - io_uring: import 5.15-stable io_uring (Jens Axboe)  [Orabug: 35495339]  
  - fs: provide locked helper variant of close_fd_get_file() (Jens Axboe)  [Orabug: 35495339]  
  - file: Rename __close_fd_get_file close_fd_get_file (Eric W. Biederman)  [Orabug: 35495339]  
  - fs: push the getname from do_rmdir into the callers (Christoph Hellwig)  [Orabug: 35495339]  
  - task_work: unconditionally run task_work from get_signal() (Jens Axboe)  [Orabug: 35495339]  
  - Revert "proc: don't allow async path resolution of /proc/self components" (Jens Axboe)  [Orabug: 35495339]  
  - tools headers UAPI: Sync openat2.h with the kernel sources (Arnaldo Carvalho de Melo)  [Orabug: 35495339]  
  - fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED (Jens Axboe)  [Orabug: 35495339]  
  - fix handling of nd->depth on LOOKUP_CACHED failures in try_to_unlazy* (Al Viro)  [Orabug: 35495339]  
  - fs: add support for LOOKUP_CACHED (Jens Axboe)  [Orabug: 35495339]  
  - x86/process: setup io_threads more like normal user space threads (Stefan Metzmacher)  [Orabug: 35495339]  
  - arch: setup PF_IO_WORKER threads like PF_KTHREAD (Jens Axboe)  [Orabug: 35495339]  
  - task_work: remove legacy TWA_SIGNAL path (Jens Axboe)  [Orabug: 35495339]  
  - Make sure nd->path.mnt and nd->path.dentry are always valid pointers (Al Viro)  [Orabug: 35495339]  
  - fs: make do_renameat2() take struct filename (Jens Axboe)  [Orabug: 35495339]  
  - kernel: allow fork with TIF_NOTIFY_SIGNAL pending (Jens Axboe)  [Orabug: 35495339]  
  - coredump: Limit what can interrupt coredumps (Eric W. Biederman)  [Orabug: 35495339]  
  - arm64: add support for TIF_NOTIFY_SIGNAL (Jens Axboe)  [Orabug: 35495339]  
  - arm: add support for TIF_NOTIFY_SIGNAL (Jens Axboe)  [Orabug: 35495339]  
  - task_work: Use TIF_NOTIFY_SIGNAL if available (Jens Axboe)  [Orabug: 35495339]  
  - entry: Add support for TIF_NOTIFY_SIGNAL (Jens Axboe)  [Orabug: 35495339]  
  - x86: Wire up TIF_NOTIFY_SIGNAL (Jens Axboe)  [Orabug: 35495339]  
  - signal: Add task_sigpending() helper (Jens Axboe)  [Orabug: 35495339]  
  - net: add accept helper not installing fd (Pavel Begunkov)  [Orabug: 35495339]  
  - net: provide __sys_shutdown_sock() that takes a socket (Jens Axboe)  [Orabug: 35495339]  
  - task_work: add helper for more targeted task_work canceling (Jens Axboe)  [Orabug: 35495339]  
  - kernel: don't call do_exit() for PF_IO_WORKER threads (Jens Axboe)  [Orabug: 35495339]  
  - kernel: stop masking signals in create_io_thread() (Jens Axboe)  [Orabug: 35495339]  
  - iov_iter: add helper to save iov_iter state (Jens Axboe)  [Orabug: 35495339]  
  - kernel: provide create_io_thread() helper (Jens Axboe)  [Orabug: 35495339]  
  - io_uring: add missing item types for splice request (Bing-Jhong Billy Jheng)  [Orabug: 35495339]  
  - io_uring: don't hold uring_lock when calling io_run_task_work* (Hao Xu)  [Orabug: 35495339]  
  - io_uring: kill goto error handling in io_sqpoll_wait_sq() (Jens Axboe)  [Orabug: 35495339]  
  - io_uring: correct pinned_vm accounting (Pavel Begunkov)  [Orabug: 35495339]  
  - io_uring: Use original task for req identity in io_identity_cow() (Lee Jones)  [Orabug: 35495339]  
  - io_uring: ensure that send/sendmsg and recv/recvmsg check sqe->ioprio (Jens Axboe)  [Orabug: 35495339]  
  - io_uring: use separate list entry for iopoll requests (Jens Axboe)  [Orabug: 35495339]  
  - io_uring: add missing item types for various requests (Jens Axboe)  [Orabug: 35495339]  
  - io_uring: fix using under-expanded iters (Pavel Begunkov)  [Orabug: 35495339]  
  - io_uring: don't re-import iovecs from callbacks (Pavel Begunkov)  [Orabug: 35495339]  
  - arm64: Remove TIF_NOHZ (Frederic Weisbecker)  [Orabug: 35495339]  
  - arm: Remove TIF_NOHZ (Frederic Weisbecker)  [Orabug: 35495339]  
  - x86: Remove TIF_NOHZ (Frederic Weisbecker)  [Orabug: 35495339]  
  - context-tracking: Introduce CONFIG_HAVE_TIF_NOHZ (Frederic Weisbecker)  [Orabug: 35495339]  
  - x86/entry: Remove _TIF_NOHZ from _TIF_WORK_SYSCALL_ENTRY (Thomas Gleixner)  [Orabug: 35495339]  
  - mm: allow a controlled amount of unfairness in the page lock (Linus Torvalds)  [Orabug: 35565406]


author: Brian Maly <brian.maly@oracle.com> [5.4.17-2136.323.6.el8uek]
changelog:
  - ek-rpm: Update kernel's linux-firmware dependency. (Brian Maly)  [Orabug: 35742717]  
  - nbd: make sure request completion won't concurrent (Yu Kuai)  [Orabug: 35339589]  
  - nbd: don't handle response without a corresponding request message (Yu Kuai)  [Orabug: 35339589]  
  - nvme: handle effects after freeing the request (Alan Adamson)  [Orabug: 35411534]  
  - x86/pkeys: Revert a5eff7259790 ("x86/pkeys: Add PKRU value to init_fpstate") (Thomas Gleixner)  [Orabug: 35714800]  {CVE-2022-40982} 
  - Documentation/x86: Fix backwards on/off logic about YMM support (Dave Hansen)  [Orabug: 35714800]  {CVE-2022-40982} 
  - x86/xen: Fix secondary processors' FPU initialization (Juergen Gross)  [Orabug: 35714800]  {CVE-2022-40982} 
  - KVM: Add GDS_NO support to KVM (Daniel Sneddon)  [Orabug: 35714800]  {CVE-2022-40982} 
  - x86/speculation: Add Kconfig option for GDS (Daniel Sneddon)  [Orabug: 35714800]  {CVE-2022-40982} 
  - x86/speculation: Add force option to GDS mitigation (Daniel Sneddon)  [Orabug: 35714800]  {CVE-2022-40982} 
  - x86/speculation: Add Gather Data Sampling mitigation (Daniel Sneddon)  [Orabug: 35714800]  {CVE-2022-40982} 
  - x86/fpu: Move FPU initialization into arch_cpu_finalize_init() (Thomas Gleixner)  [Orabug: 35714800]  {CVE-2022-40982} 
  - x86/fpu: Mark init functions __init (Thomas Gleixner)  [Orabug: 35714800]  {CVE-2022-40982} 
  - x86/fpu: Remove cpuinfo argument from init functions (Thomas Gleixner)  [Orabug: 35714800]  {CVE-2022-40982} 
  - init, x86: Move mem_encrypt_init() into arch_cpu_finalize_init() (Thomas Gleixner)  [Orabug: 35714800]  {CVE-2022-40982} 
  - init: Invoke arch_cpu_finalize_init() earlier (Thomas Gleixner)  [Orabug: 35714800]  {CVE-2022-40982} 
  - init: Remove check_bugs() leftovers (Thomas Gleixner)  [Orabug: 35714800]  {CVE-2022-40982} 
  - um/cpu: Switch to arch_cpu_finalize_init() (Thomas Gleixner)  [Orabug: 35714800]  {CVE-2022-40982} 
  - sparc/cpu: Switch to arch_cpu_finalize_init() (Thomas Gleixner)  [Orabug: 35714800]  {CVE-2022-40982} 
  - sh/cpu: Switch to arch_cpu_finalize_init() (Thomas Gleixner)  [Orabug: 35714800]  {CVE-2022-40982} 
  - mips/cpu: Switch to arch_cpu_finalize_init() (Thomas Gleixner)  [Orabug: 35714800]  {CVE-2022-40982} 
  - m68k/cpu: Switch to arch_cpu_finalize_init() (Thomas Gleixner)  [Orabug: 35714800]  {CVE-2022-40982} 
  - ia64/cpu: Switch to arch_cpu_finalize_init() (Thomas Gleixner)  [Orabug: 35714800]  {CVE-2022-40982} 
  - ARM: cpu: Switch to arch_cpu_finalize_init() (Thomas Gleixner)  [Orabug: 35714800]  {CVE-2022-40982} 
  - x86/cpu: Switch to arch_cpu_finalize_init() (Thomas Gleixner)  [Orabug: 35714800]  {CVE-2022-40982} 
  - init: Provide arch_cpu_finalize_init() (Thomas Gleixner)  [Orabug: 35714800]  {CVE-2022-40982} 
  - scsi: lpfc: Fix null pointer dereference due to prematurely released ndlp (Ketan Mukadam)  [Orabug: 35729915]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2136.323.7.el8uek]
changelog:
  - x86: change default to spec_store_bypass_disable=prctl spectre_v2_user=prctl (Andrea Arcangeli)  [Orabug: 35725160]  
  - KVM: SVM: Add support for Virtual SPEC_CTRL (Babu Moger)  [Orabug: 35725160]  
  - x86/cpufeatures: Add the Virtual SPEC_CTRL feature (Babu Moger)  [Orabug: 35725160]  
  - x86/mm: Initialize text poking earlier (Peter Zijlstra)  [Orabug: 35744495]  
  - mm: Move mm_cachep initialization to mm_init() (Peter Zijlstra)  [Orabug: 35744495]  
  - x86/mm: Use mm_alloc() in poking_init() (Peter Zijlstra)  [Orabug: 35744495]  
  - mips: add support for TIF_NOTIFY_SIGNAL (Jens Axboe)  [Orabug: 35749111]


author: Brian Maly <brian.maly@oracle.com> [5.4.17-2136.323.8.el8uek]
changelog:
  - vhost-scsi: Fix alignment handling with windows (Mike Christie)  [Orabug: 35769318]  
  - Revert "vhost/scsi: support non zerocopy iovecs" (Rajan Shanmugavelu)  [Orabug: 35769318]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [5.4.17-2136.323.8.1.el8uek]
changelog:
  - rds: Fix lack of reentrancy for connection reset with dst addr zero (Håkon Bugge)  [Orabug: 35713696]  {CVE-2023-22024}


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2136.323.8.2.el8uek]
changelog:
  - netfilter: nfnetlink_osf: avoid OOB read (Wander Lairson Costa)  [Orabug: 35824307]  
  - netfilter: xt_sctp: validate the flag_info count (Wander Lairson Costa)  [Orabug: 35824307]  
  - netfilter: xt_u32: validate user space input (Wander Lairson Costa)  [Orabug: 35824307]  
  - netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Kyle Zeng)  [Orabug: 35824307]  {CVE-2023-42753}


author: Brian Maly <brian.maly@oracle.com> [5.4.17-2136.324.1.el8uek]
changelog:
  - io_uring: add support for registering ring file descriptors (Jens Axboe)  [Orabug: 35485491]  
  - mm,shmem,thp: limit shmem THP allocations to requested zones (Rik van Riel)  [Orabug: 35655117]  
  - mm,thp,shm: limit gfp mask to no more than specified (Rik van Riel)  [Orabug: 35655117]  
  - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rik van Riel)  [Orabug: 35655117]  
  - uek-rpm: Removing pre scriptlet to not allow firmware downgrade (Samasth Norway Ananda)  [Orabug: 35741866]  
  - rds: Remove gratuitous include of time.h from rds.h (Mark Haywood)  [Orabug: 35742761]  
  - RDMA/mlx5: Fix mlx5_ib_get_hw_stats when used for device (Shay Drory)  [Orabug: 35750824]  
  - smp: Reduce NMI traffic from CSD waiters to CSD destination (Imran Khan)  [Orabug: 35752501]  
  - smp: Reduce logging due to dump_stack of CSD waiters (Imran Khan)  [Orabug: 35752501]


author: Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.324.2.el8uek]
changelog:
  - LTS tag: v5.4.256 (Sherry Yang)   
  - Revert "MIPS: Alchemy: fix dbdma2" (Greg Kroah-Hartman)   
  - powerpc/pmac/smp: Drop unnecessary volatile qualifier (YueHaibing)   
  - powerpc/pmac/smp: Avoid unused-variable warnings (Ilie Halip)   
  - LTS tag: v5.4.255 (Sherry Yang)   
  - dma-buf/sw_sync: Avoid recursive lock during fence signal (Rob Clark)   
  - pinctrl: renesas: rza2: Add lock around pinctrl_generic{{add,remove}_group,{add,remove}_function} (Biju Das)   
  - clk: Fix undefined reference to `clk_rate_exclusive_{get,put}' (Biju Das)   
  - scsi: core: raid_class: Remove raid_component_add() (Zhu Wang)   
  - scsi: snic: Fix double free in snic_tgt_create() (Zhu Wang)   
  - irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable (Jiaxun Yang)   
  - Documentation/sysctl: document page_lock_unfairness (Joel Savitz)   
  - ALSA: pcm: Check for null pointer of pointer substream before dereferencing it (Colin Ian King)   
  - interconnect: Do not skip aggregation for disabled paths (Georgi Djakov)   
  - Revert "ALSA: pcm: Use SG-buffer only when direct DMA is available" (Takashi Iwai)   
  - ALSA: pcm: Fix build error on m68k and others (Takashi Iwai)   
  - rtnetlink: Reject negative ifindexes in RTM_NEWLINK (Ido Schimmel)   
  - x86/fpu: Set X86_FEATURE_OSXSAVE feature after enabling OSXSAVE in CR4 (Feng Tang)   
  - drm/display/dp: Fix the DP DSC Receiver cap size (Ankit Nautiyal)   
  - PCI: acpiphp: Use pci_assign_unassigned_bridge_resources() only for non-root bus (Igor Mammedov)   
  - media: vcodec: Fix potential array out-of-bounds in encoder queue_setup (Wei Chen)   
  - radix tree: remove unused variable (Arnd Bergmann)   
  - lib/clz_ctz.c: Fix __clzdi2() and __ctzdi2() for 32-bit kernels (Helge Deller)   
  - batman-adv: Hold rtnl lock during MTU update via netlink (Sven Eckelmann)   
  - batman-adv: Fix batadv_v_ogm_aggr_send memory leak (Remi Pommarel)   
  - batman-adv: Fix TT global entry leak when client roamed back (Remi Pommarel)   
  - batman-adv: Do not get eth header before batadv_check_management_packet (Remi Pommarel)   
  - batman-adv: Don't increase MTU when set by user (Sven Eckelmann)   
  - batman-adv: Trigger events for auto adjusted MTU (Sven Eckelmann)   
  - nfsd: Fix race to FREE_STATEID and cl_revoked (Benjamin Coddington)   
  - clk: Fix slab-out-of-bounds error in devm_clk_release() (Andrey Skvortsov)   
  - NFSv4: Fix dropped lock for racing OPEN and delegation return (Benjamin Coddington)   
  - ibmveth: Use dcbf rather than dcbfl (Michael Ellerman)   
  - bonding: fix macvlan over alb bond support (Hangbin Liu)   
  - net: remove bond_slave_has_mac_rcu() (Jakub Kicinski)   
  - net/sched: fix a qdisc modification with ambiguous command request (Jamal Hadi Salim)   
  - igb: Avoid starting unnecessary workqueues (Alessio Igor Bogani)   
  - net: validate veth and vxcan peer ifindexes (Jakub Kicinski)   
  - net: bcmgenet: Fix return value check for fixed_phy_register() (Ruan Jinjie)   
  - net: bgmac: Fix return value check for fixed_phy_register() (Ruan Jinjie)   
  - ipvlan: Fix a reference count leak warning in ipvlan_ns_exit() (Lu Wei)   
  - dccp: annotate data-races in dccp_poll() (Eric Dumazet)   
  - sock: annotate data-races around prot->memory_pressure (Eric Dumazet)   
  - octeontx2-af: SDP: fix receive link config (Hariprasad Kelam)   
  - tracing: Fix memleak due to race between current_tracer and trace (Zheng Yejian)   
  - drm/amd/display: check TG is non-null before checking if enabled (Taimur Hassan)   
  - drm/amd/display: do not wait for mpc idle if tg is disabled (Josip Pavic)   
  - ASoC: fsl_sai: Disable bit clock with transmitter (Matus Gajdos)   
  - ASoC: fsl_sai: Add new added registers and new bit definition (Shengjiu Wang)   
  - ASoC: fsl_sai: Refine enable/disable TE/RE sequence in trigger() (Shengjiu Wang)   
  - regmap: Account for register length in SMBus I/O limits (Mark Brown)   
  - ALSA: pcm: Fix potential data race at PCM memory allocation helpers (Takashi Iwai)   
  - ALSA: pcm: Use SG-buffer only when direct DMA is available (Takashi Iwai)   
  - ALSA: pcm: Set per-card upper limit of PCM buffer allocations (Takashi Iwai)   
  - dm integrity: reduce vmalloc space footprint on 32-bit architectures (Mikulas Patocka)   
  - dm integrity: increase RECALC_SECTORS to improve recalculate speed (Mikulas Patocka)   
  - fbdev: fix potential OOB read in fast_imageblit() (Zhang Shurong)   
  - fbdev: Fix sys_imageblit() for arbitrary image widths (Thomas Zimmermann)   
  - fbdev: Improve performance of sys_imageblit() (Thomas Zimmermann)   
  - MIPS: cpu-features: Use boot_cpu_type for CPU type based features (Jiaxun Yang)   
  - MIPS: cpu-features: Enable octeon_cache by cpu_type (Jiaxun Yang)   
  - fs: dlm: fix mismatch of plock results from userspace (Alexander Aring)   
  - fs: dlm: use dlm_plock_info for do_unlock_close (Alexander Aring)   
  - fs: dlm: change plock interrupted message to debug again (Alexander Aring)   
  - fs: dlm: add pid to debug log (Alexander Aring)   
  - dlm: replace usage of found with dedicated list iterator variable (Jakob Koschel)   
  - dlm: improve plock logging if interrupted (Alexander Aring)   
  - PCI: acpiphp: Reassign resources on bridge if necessary (Igor Mammedov)   
  - net: phy: broadcom: stub c45 read/write for 54810 (Justin Chen)   
  - mmc: f-sdh30: fix order of function calls in sdhci_f_sdh30_remove (Yangtao Li)   
  - net: xfrm: Amend XFRMA_SEC_CTX nla_policy structure (Lin Ma)   
  - net: fix the RTO timer retransmitting skb every 1ms if linear option is enabled (Jason Xing)   
  - virtio-net: set queues after driver_ok (Jason Wang)   
  - af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Kuniyuki Iwashima)   
  - netfilter: set default timeout to 3 secs for sctp shutdown send and recv state (Xin Long)   
  - mmc: block: Fix in_flight[issue_type] value error (Yibin Ding)   
  - mmc: wbsd: fix double mmc_free_host() in wbsd_init() (Yang Yingliang)   
  - cifs: Release folio lock on fscache read hit. (Russell Harmon via samba-technical)   
  - ALSA: usb-audio: Add support for Mythware XA001AU capture and playback interfaces. (dengxiang)   
  - serial: 8250: Fix oops for port->pm on uart_change_pm() (Tony Lindgren)   
  - ASoC: meson: axg-tdm-formatter: fix channel slot allocation (Jerome Brunet)   
  - ASoC: rt5665: add missed regulator_bulk_disable (Zhang Shurong)   
  - ARM: dts: imx: Set default tuning step for imx6sx usdhc (Xiaolei Wang)   
  - ARM: dts: imx: Set default tuning step for imx7d usdhc (Xiaolei Wang)   
  - ARM: dts: imx: Adjust dma-apbh node name (Stefan Wahren)   
  - ARM: dts: imx7s: Drop dma-apb interrupt-names (Marek Vasut)   
  - bus: ti-sysc: Flush posted write on enable before reset (Tony Lindgren)   
  - bus: ti-sysc: Improve reset to work with modules with no sysconfig (Tony Lindgren)   
  - net: do not allow gso_size to be set to GSO_BY_FRAGS (Eric Dumazet)   
  - sock: Fix misuse of sk_under_memory_pressure() (Abel Wu)   
  - net: dsa: mv88e6xxx: Wait for EEPROM done before HW reset (Alfred Lee)   
  - i40e: fix misleading debug logs (Andrii Staikov)   
  - team: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves (Ziyang Xuan)   
  - netfilter: nft_dynset: disallow object maps (Pablo Neira Ayuso)   
  - ipvs: fix racy memcpy in proc_do_sync_threshold (Sishuai Gong)   
  - selftests: mirror_gre_changes: Tighten up the TTL test match (Petr Machata)   
  - xfrm: add NULL check in xfrm_update_ae_params (Lin Ma)   
  - ip_vti: fix potential slab-use-after-free in decode_session6 (Zhengchao Shao)   
  - ip6_vti: fix slab-use-after-free in decode_session6 (Zhengchao Shao)   
  - xfrm: fix slab-use-after-free in decode_session6 (Zhengchao Shao)   
  - xfrm: interface: rename xfrm_interface.c to xfrm_interface_core.c (Eyal Birger)   
  - net: af_key: fix sadb_x_filter validation (Lin Ma)   
  - net: xfrm: Fix xfrm_address_filter OOB read (Lin Ma)   
  - btrfs: fix BUG_ON condition in btrfs_cancel_balance (xiaoshoukui)   
  - tty: serial: fsl_lpuart: Clear the error flags by writing 1 for lpuart32 platforms (Sherry Sun)   
  - powerpc/rtas_flash: allow user copy to flash block cache objects (Nathan Lynch)   
  - fbdev: mmp: fix value check in mmphw_probe() (Yuanjun Gong)   
  - i2c: bcm-iproc: Fix bcm_iproc_i2c_isr deadlock issue (Chengfeng Ye)   
  - virtio-mmio: don't break lifecycle of vm_dev (Wolfram Sang)   
  - virtio-mmio: Use to_virtio_mmio_device() to simply code (Tang Bin)   
  - virtio-mmio: convert to devm_platform_ioremap_resource (Yangtao Li)   
  - nfsd: Remove incorrect check in nfsd4_validate_stateid (Trond Myklebust)   
  - nfsd4: kill warnings on testing stateids with mismatched clientids (J. Bruce Fields)   
  - net/ncsi: Fix gma flag setting after response (Vijay Khemka)   
  - tracing/probes: Fix to update dynamic data counter if fetcharg uses it (Masami Hiramatsu (Google))   
  - tracing/probes: Have process_fetch_insn() take a void * instead of pt_regs (Steven Rostedt (VMware))   
  - leds: trigger: netdev: Recheck NETDEV_LED_MODE_LINKUP on dev rename (Christian Marangi)   
  - mmc: sunxi: fix deferred probing (Sergey Shtylyov)   
  - mmc: bcm2835: fix deferred probing (Sergey Shtylyov)   
  - USB: dwc3: qcom: fix NULL-deref on suspend (Johan Hovold)   
  - usb: dwc3: qcom: Add helper functions to enable,disable wake irqs (Sandeep Maheswaram)   
  - interconnect: Add helpers for enabling/disabling a path (Georgi Djakov)   
  - interconnect: Move internal structs into a separate file (Georgi Djakov)   
  - irqchip/mips-gic: Use raw spinlock for gic_lock (Jiaxun Yang)   
  - irqchip/mips-gic: Get rid of the reliance on irq_cpu_online() (Marc Zyngier)   
  - ALSA: hda: Fix unhandled register update during auto-suspend period (Takashi Iwai)   
  - PM: runtime: Add pm_runtime_get_if_active() (Sakari Ailus)   
  - PM-runtime: add tracepoints for usage_count changes (Michał Mirosław)   
  - iio: addac: stx104: Fix race condition when converting analog-to-digital (William Breathitt Gray)   
  - iio: addac: stx104: Fix race condition for stx104_write_raw() (William Breathitt Gray)   
  - iio: stx104: Move to addac subdirectory (William Breathitt Gray)   
  - iio: adc: stx104: Implement and utilize register structures (William Breathitt Gray)   
  - iio: adc: stx104: Utilize iomap interface (William Breathitt Gray)   
  - iio: add addac subdirectory (Cosmin Tanislav)   
  - IMA: allow/fix UML builds (Randy Dunlap)   
  - powerpc/kasan: Disable KCOV in KASAN code (Benjamin Gray)   
  - ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync() (Tuo Li)   
  - ALSA: hda/realtek: Add quirks for Unis H3C Desktop B760 & Q760 (dengxiang)   
  - drm/amdgpu: Fix potential fence use-after-free v2 (shanzhulig)   
  - Bluetooth: L2CAP: Fix use-after-free (Zhengping Jiang)   
  - pcmcia: rsrc_nonstatic: Fix memory leak in nonstatic_release_resource_db() (Armin Wolf)   
  - gfs2: Fix possible data races in gfs2_show_options() (Tuo Li)   
  - usb: chipidea: imx: don't request QoS for imx8ulp (Xu Yang)   
  - media: platform: mediatek: vpu: fix NULL ptr dereference (Hans Verkuil)   
  - media: v4l2-mem2mem: add lock to protect parameter num_rdy (Yunfei Dong)   
  - FS: JFS: Check for read-only mounted filesystem in txBegin (Immad Mir)   
  - FS: JFS: Fix null-ptr-deref Read in txBegin (Immad Mir)   
  - MIPS: dec: prom: Address -Warray-bounds warning (Gustavo A. R. Silva)   
  - fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev (Yogesh)   
  - udf: Fix uninitialized array access for some pathnames (Jan Kara)   
  - ovl: check type and offset of struct vfsmount in ovl_entry (Christian Brauner)   
  - HID: add quirk for 03f0:464a HP Elite Presenter Mouse (Marco Morandini)   
  - quota: fix warning in dqgrab() (Ye Bin)   
  - quota: Properly disable quotas when add_dquot_ref() fails (Jan Kara)   
  - ALSA: emu10k1: roll up loops in DSP setup code for Audigy (Oswald Buddenhagen)   
  - drm/radeon: Fix integer overflow in radeon_cs_parser_init (hackyzh002)   
  - macsec: use DEV_STATS_INC() (Eric Dumazet)   
  - macsec: Fix traffic counters/statistics (Clayton Yager)   
  - selftests: forwarding: tc_flower: Relax success criterion (Ido Schimmel)   
  - mmc: sdhci-f-sdh30: Replace with sdhci_pltfm (Kunihiko Hayashi)   
  - mmc: sdhci_f_sdh30: convert to devm_platform_ioremap_resource (Yangtao Li)   
  - LTS tag: v5.4.254 (Sherry Yang)   
  - sch_netem: fix issues in netem_change() vs get_dist_table() (Eric Dumazet)   
  - alpha: remove __init annotation from exported page_is_ram() (Masahiro Yamada)   
  - scsi: core: Fix possible memory leak if device_add() fails (Zhu Wang)   
  - scsi: snic: Fix possible memory leak if device_add() fails (Zhu Wang)   
  - scsi: 53c700: Check that command slot is not NULL (Alexandra Diupina)   
  - scsi: storvsc: Fix handling of virtual Fibre Channel timeouts (Michael Kelley)   
  - scsi: core: Fix legacy /proc parsing buffer overflow (Tony Battersby)   
  - netfilter: nf_tables: report use refcount overflow (Pablo Neira Ayuso)   
  - nvme-rdma: fix potential unbalanced freeze & unfreeze (Ming Lei)   
  - nvme-tcp: fix potential unbalanced freeze & unfreeze (Ming Lei)   
  - btrfs: set cache_block_group_error if we find an error (Josef Bacik)   
  - btrfs: don't stop integrity writeback too early (Christoph Hellwig)   
  - ibmvnic: Handle DMA unmapping of login buffs in release functions (Nick Child)   
  - net/mlx5: Allow 0 for total host VFs (Daniel Jurgens)   
  - dmaengine: mcf-edma: Fix a potential un-allocated memory access (Christophe JAILLET)   
  - wifi: cfg80211: fix sband iftype data lookup for AP_VLAN (Felix Fietkau)   
  - IB/hfi1: Fix possible panic during hotplug remove (Douglas Miller)   
  - drivers: net: prevent tun_build_skb() to exceed the packet size limit (Andrew Kanner)   
  - dccp: fix data-race around dp->dccps_mss_cache (Eric Dumazet)   
  - bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves (Ziyang Xuan)   
  - net/packet: annotate data-races around tp->status (Eric Dumazet)   
  - mISDN: Update parameter type of dsp_cmx_send() (Nathan Chancellor)   
  - selftests/rseq: Fix build with undefined __weak (Mark Brown)   
  - drm/nouveau/disp: Revert a NULL check inside nouveau_connector_get_modes (Karol Herbst)   
  - x86: Move gds_ucode_mitigated() declaration to header (Arnd Bergmann)   
  - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Kirill A. Shutemov)   
  - x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405 (Cristian Ciocaltea)   
  - usb: common: usb-conn-gpio: Prevent bailing out if initial role is none (Prashanth K)   
  - usb: dwc3: Properly handle processing of pending events (Elson Roy Serrao)   
  - usb-storage: alauda: Fix uninit-value in alauda_check_media() (Alan Stern)   
  - binder: fix memory leak in binder_init() (Qi Zheng)   
  - iio: cros_ec: Fix the allocation size for cros_ec_command (Yiyuan Guo)   
  - nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput (Ryusuke Konishi)   
  - radix tree test suite: fix incorrect allocation size for pthreads (Colin Ian King)   
  - drm/nouveau/gr: enable memory loads on helper invocation on all channels (Karol Herbst)   
  - dmaengine: pl330: Return DMA_PAUSED when transaction is paused (Ilpo Järvinen)   
  - ipv6: adjust ndisc_is_useropt() to also return true for PIO (Maciej Żenczykowski)   
  - mmc: moxart: read scr register without changing byte order (Sergei Antonov)   
  - LTS tag: v5.4.253 (Sherry Yang)   
  - Revert "driver core: Annotate dev_err_probe() with __must_check" (Greg Kroah-Hartman)   
  - drivers: core: fix kernel-doc markup for dev_err_probe() (Mauro Carvalho Chehab)   
  - driver code: print symbolic error code (Michał Mirosław)   
  - driver core: Annotate dev_err_probe() with __must_check (Andy Shevchenko)   
  - ARM: dts: nxp/imx6sll: fix wrong property name in usbphy node (Xu Yang)   
  - ARM: dts: imx6sll: fixup of operating points (Andreas Kemnade)   
  - ARM: dts: imx: add usb alias (Peng Fan)   
  - ARM: dts: imx: Align L2 cache-controller nodename with dtschema (Krzysztof Kozlowski)   
  - ARM: dts: imx6sll: Make ssi node name same as other platforms (Shengjiu Wang)   
  - arm64: dts: stratix10: fix incorrect I2C property for SCL signal (Dinh Nguyen)   
  - ceph: defer stopping mdsc delayed_work (Xiubo Li)   
  - ceph: use kill_anon_super helper (Jeff Layton)   
  - ceph: show tasks waiting on caps in debugfs caps file (Jeff Layton)   
  - PM: sleep: wakeirq: fix wake irq arming (Johan Hovold)   
  - PM / wakeirq: support enabling wake-up irq after runtime_suspend called (Chunfeng Yun)   
  - selftests/rseq: Play nice with binaries statically linked against glibc 2.35+ (Sean Christopherson)   
  - selftests/rseq: check if libc rseq support is registered (Michael Jeanson)   
  - powerpc/mm/altmap: Fix altmap boundary check (Aneesh Kumar K.V)   
  - mtd: rawnand: omap_elm: Fix incorrect type in assignment (Roger Quadros)   
  - test_firmware: return ENOMEM instead of ENOSPC on failed memory allocation (Mirsad Goran Todorovac)   
  - test_firmware: prevent race conditions by a correct implementation of locking (Mirsad Goran Todorovac)   
  - ext2: Drop fragment support (Jan Kara)   
  - fs: Protect reconfiguration of sb read-write from racing writes (Jan Kara)   
  - net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb (Alan Stern)   
  - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb (Sungwoo Kim)   
  - fs/sysv: Null check to prevent null-ptr-deref bug (Prince Kumar Maurya)   
  - net: tap_open(): set sk_uid from current_fsuid() (Laszlo Ersek)   
  - net: tun_chr_open(): set sk_uid from current_fsuid() (Laszlo Ersek)   
  - mtd: rawnand: meson: fix OOB available bytes for ECC (Arseniy Krasnov)   
  - mtd: spinand: toshiba: Fix ecc_get_status (Olivier Maignial)   
  - USB: zaurus: Add ID for A-300/B-500/C-700 (Ross Maynard)   
  - libceph: fix potential hang in ceph_osdc_notify() (Ilya Dryomov)   
  - scsi: zfcp: Defer fc_rport blocking until after ADISC response (Steffen Maier)   
  - tcp_metrics: fix data-race in tcpm_suck_dst() vs fastopen (Eric Dumazet)   
  - tcp_metrics: annotate data-races around tm->tcpm_net (Eric Dumazet)   
  - tcp_metrics: annotate data-races around tm->tcpm_vals[] (Eric Dumazet)   
  - tcp_metrics: annotate data-races around tm->tcpm_lock (Eric Dumazet)   
  - tcp_metrics: annotate data-races around tm->tcpm_stamp (Eric Dumazet)   
  - tcp_metrics: fix addr_same() helper (Eric Dumazet)   
  - ip6mr: Fix skb_under_panic in ip6mr_cache_report() (Yue Haibing)   
  - net: dcb: choose correct policy to parse DCB_ATTR_BCN (Lin Ma)   
  - net: ll_temac: fix error checking of irq_of_parse_and_map() (Dan Carpenter)   
  - net: ll_temac: Switch to use dev_err_probe() helper (Yang Yingliang)   
  - driver core: add device probe log helper (Andrzej Hajda)   
  - bpf: sockmap: Remove preempt_disable in sock_map_sk_acquire (Tomas Glozar)   
  - net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (valis)   
  - net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (valis)   
  - net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (valis)   
  - net: add missing data-race annotation for sk_ll_usec (Eric Dumazet)   
  - net: add missing data-race annotations around sk->sk_peek_off (Eric Dumazet)   
  - net: add missing READ_ONCE(sk->sk_rcvbuf) annotation (Eric Dumazet)   
  - net: add missing READ_ONCE(sk->sk_sndbuf) annotation (Eric Dumazet)   
  - net: add missing READ_ONCE(sk->sk_rcvlowat) annotation (Eric Dumazet)   
  - net: annotate data-races around sk->sk_max_pacing_rate (Eric Dumazet)   
  - mISDN: hfcpci: Fix potential deadlock on &hc->lock (Chengfeng Ye)   
  - net: sched: cls_u32: Fix match key mis-addressing (Jamal Hadi Salim)   
  - perf test uprobe_from_different_cu: Skip if there is no gcc (Georg Müller)   
  - rtnetlink: let rtnl_bridge_setlink checks IFLA_BRIDGE_MODE length (Lin Ma)   
  - net/mlx5e: fix return value check in mlx5e_ipsec_remove_trailer() (Yuanjun Gong)   
  - net/mlx5: DR, fix memory leak in mlx5dr_cmd_create_reformat_ctx (Zhengchao Shao)   
  - KVM: s390: fix sthyi error handling (Heiko Carstens)   
  - word-at-a-time: use the same return type for has_zero regardless of endianness (ndesaulniers@google.com)   
  - loop: Select I/O scheduler 'none' from inside add_disk() (Bart Van Assche)   
  - perf: Fix function pointer case (Peter Zijlstra)   
  - arm64: Fix bit-shifting UB in the MIDR_CPU_MODEL() macro (D Scott Phillips)   
  - ASoC: cs42l51: fix driver to properly autoload with automatic module loading (Thomas Petazzoni)   
  - net/sched: sch_qfq: account for stab overhead in qfq_enqueue (Pedro Tammela)   
  - btrfs: fix race between quota disable and quota assign ioctls (Filipe Manana)   
  - btrfs: qgroup: return ENOTCONN instead of EINVAL when quotas are not enabled (Marcos Paulo de Souza)   
  - btrfs: qgroup: remove one-time use variables for quota_root checks (Marcos Paulo de Souza)   
  - cpufreq: intel_pstate: Drop ACPI _PSS states table patching (Rafael J. Wysocki)   
  - ACPI: processor: perflib: Avoid updating frequency QoS unnecessarily (Rafael J. Wysocki)   
  - ACPI: processor: perflib: Use the "no limit" frequency QoS (Rafael J. Wysocki)   
  - dm cache policy smq: ensure IO doesn't prevent cleaner policy progress (Joe Thornber)   
  - ASoC: wm8904: Fill the cache for WM8904_ADC_TEST_0 register (Mark Brown)   
  - s390/dasd: fix hanging device after quiesce/resume (Stefan Haberland)   
  - virtio-net: fix race between set queues and probe (Jason Wang)   
  - btrfs: check if the transaction was aborted at btrfs_wait_for_commit() (Filipe Manana)   
  - irq-bcm6345-l1: Do not assume a fixed block to cpu mapping (Jonas Gorski)   
  - tpm_tis: Explicitly check for error code (Alexander Steffen)   
  - btrfs: check for commit error at btrfs_attach_transaction_barrier() (Filipe Manana)   
  - hwmon: (nct7802) Fix for temp6 (PECI1) processed even if PECI1 disabled (Gilles Buloz)   
  - staging: ks7010: potential buffer overflow in ks_wlan_set_encode_ext() (Zhang Shurong)   
  - Documentation: security-bugs.rst: clarify CVE handling (Greg Kroah-Hartman)   
  - Documentation: security-bugs.rst: update preferences when dealing with the linux-distros group (Greg Kroah-Hartman)   
  - Revert "usb: xhci: tegra: Fix error check" (Dan Carpenter)   
  - usb: xhci-mtk: set the dma max_seg_size (Ricardo Ribalda)   
  - USB: quirks: add quirk for Focusrite Scarlett (Łukasz Bartosik)   
  - usb: ohci-at91: Fix the unhandle interrupt when resume (Guiting Shen)   
  - usb: dwc3: don't reset device side if dwc3 was configured as host-only (Jisheng Zhang)   
  - usb: dwc3: pci: skip BYT GPIO lookup table for hardwired phy (Gratian Crisan)   
  - Revert "usb: dwc3: core: Enable AutoRetry feature in the controller" (Jakub Vanek)   
  - can: gs_usb: gs_can_close(): add missing set of CAN state to CAN_STATE_STOPPED (Marc Kleine-Budde)   
  - USB: serial: simple: sort driver entries (Johan Hovold)   
  - USB: serial: simple: add Kaufmann RKS+CAN VCP (Oliver Neukum)   
  - USB: serial: option: add Quectel EC200A module support (Mohsen Tahmasebi)   
  - USB: serial: option: support Quectel EM060K_128 (Jerry Meng)   
  - serial: sifive: Fix sifive_serial_console_setup() section (Samuel Holland)   
  - serial: 8250_dw: Preserve original value of DLF register (Ruihong Luo)   
  - tracing: Fix warning in trace_buffered_event_disable() (Zheng Yejian)   
  - ring-buffer: Fix wrong stat of cpu_buffer->read (Zheng Yejian)   
  - ata: pata_ns87415: mark ns87560_tf_read static (Arnd Bergmann)   
  - dm raid: fix missing reconfig_mutex unlock in raid_ctr() error paths (Yu Kuai)   
  - block: Fix a source code comment in include/uapi/linux/blkzoned.h (Bart Van Assche)   
  - ASoC: fsl_spdif: Silence output on stop (Matus Gajdos)   
  - drm/msm: Fix IS_ERR_OR_NULL() vs NULL check in a5xx_submit_in_rb() (Gaosheng Cui)   
  - drm/msm/adreno: Fix snapshot BINDLESS_DATA size (Rob Clark)   
  - drm/msm/dpu: drop enum dpu_core_perf_data_bus_id (Dmitry Baryshkov)   
  - RDMA/mlx4: Make check for invalid flags stricter (Dan Carpenter)   
  - benet: fix return value check in be_lancer_xmit_workarounds() (Yuanjun Gong)   
  - net/sched: mqprio: Add length check for TCA_MQPRIO_{MAX/MIN}_RATE64 (Lin Ma)   
  - net/sched: mqprio: add extack to mqprio_parse_nlattr() (Vladimir Oltean)   
  - net/sched: mqprio: refactor nlattr parsing to a separate function (Vladimir Oltean)   
  - platform/x86: msi-laptop: Fix rfkill out-of-sync on MSI Wind U100 (Maxim Mikityanskiy)   
  - team: reset team's flags when down link is P2P device (Hangbin Liu)   
  - bonding: reset bond's flags when down link is P2P device (Hangbin Liu)   
  - tcp: Reduce chance of collisions in inet6_hashfn(). (Stewart Smith)   
  - ipv6 addrconf: fix bug where deleting a mngtmpaddr can create a new temporary address (Maciej Żenczykowski)   
  - ethernet: atheros: fix return value check in atl1e_tso_csum() (Yuanjun Gong)   
  - phy: hisilicon: Fix an out of bounds check in hisi_inno_phy_probe() (Harshit Mogalapalli)   
  - vxlan: calculate correct header length for GPE (Jiri Benc)   
  - i40e: Fix an NULL vs IS_ERR() bug for debugfs_create_dir() (Wang Ming)   
  - ext4: fix to check return value of freeze_bdev() in ext4_shutdown() (Chao Yu)   
  - keys: Fix linking a duplicate key to a keyring's assoc_array (Petr Pavlu)   
  - uapi: General notification queue definitions (David Howells)   
  - scsi: qla2xxx: Array index may go out of bound (Nilesh Javali)   
  - pwm: meson: fix handling of period/duty if greater than UINT_MAX (Heiner Kallweit)   
  - pwm: meson: Simplify duplicated per-channel tracking (Uwe Kleine-König)   
  - pwm: meson: Remove redundant assignment to variable fin_freq (Colin Ian King)   
  - ftrace: Fix possible warning on checking all pages used in ftrace_process_locs() (Zheng Yejian)   
  - ftrace: Store the order of pages allocated in ftrace_page (Linus Torvalds)   
  - ftrace: Check if pages were allocated before calling free_pages() (Steven Rostedt (VMware))   
  - ftrace: Add information on number of page groups allocated (Steven Rostedt (VMware))   
  - fs: dlm: interrupt posix locks only when process is killed (Alexander Aring)   
  - dlm: rearrange async condition return (Alexander Aring)   
  - dlm: cleanup plock_op vs plock_xop (Alexander Aring)   
  - PCI/ASPM: Avoid link retraining race (Ilpo Järvinen)   
  - PCI/ASPM: Factor out pcie_wait_for_retrain() (Ilpo Järvinen)   
  - PCI/ASPM: Return 0 or -ETIMEDOUT from pcie_retrain_link() (Bjorn Helgaas)   
  - ext4: Fix reusing stale buffer heads from last failed mounting (Zhihao Cheng)   
  - ext4: rename journal_dev to s_journal_dev inside ext4_sb_info (Chunguang Xu)   
  - btrfs: fix extent buffer leak after tree mod log failure at split_node() (Filipe Manana)   
  - btrfs: fix race between quota disable and relocation (Filipe Manana)   
  - btrfs: qgroup: catch reserved space leaks at unmount time (Qu Wenruo)   
  - bcache: Fix __bch_btree_node_alloc to make the failure behavior consistent (Zheng Wang)   
  - bcache: remove 'int n' from parameter list of bch_bucket_alloc_set() (Coly Li)   
  - gpio: tps68470: Make tps68470_gpio_output() always set the initial value (Hans de Goede)   
  - jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint (Zhihao Cheng)   
  - jbd2: recheck chechpointing non-dirty buffer (Zhang Yi)   
  - jbd2: remove redundant buffer io error checks (Zhang Yi)   
  - jbd2: fix kernel-doc markups (Mauro Carvalho Chehab)   
  - jbd2: fix incorrect code style (Xianting Tian)   
  - LTS tag: v5.4.252 (Sherry Yang)   
  - x86: fix backwards merge of GDS/SRSO bit (Greg Kroah-Hartman)   
  - xen/netback: Fix buffer overrun triggered by unusual packet (Ross Lagerwall)   
  - x86/cpu, kvm: Add support for CPUID_80000021_EAX (Kim Phillips)   
  - tools headers cpufeatures: Sync with the kernel sources (Arnaldo Carvalho de Melo)   
  - x86/cpufeatures: Assign dedicated feature word for CPUID_0x8000001F[EAX] (Sean Christopherson)   
  - x86/cpu: Add VM page flush MSR availablility as a CPUID feature (Tom Lendacky)   
  - x86/cpufeatures: Add SEV-ES CPU feature (Tom Lendacky)   
  - x86/mm: fix poking_init() for Xen PV guests (Juergen Gross)


author: Brian Maly <brian.maly@oracle.com> [5.4.17-2136.324.3.el8uek]
changelog:
  - uek-rpm: aarch64: enable ACPI_AGDI (Mihai Carabas)  [Orabug: 34833165]  
  - arm64: sdei: abort running SDEI handlers during crash (D Scott Phillips)  [Orabug: 34833165]  
  - ACPI: AGDI: Fix missing prototype warning for acpi_agdi_init() (Ilkka Koskinen)  [Orabug: 34833165]  
  - ACPI: AGDI: Add driver for Arm Generic Diagnostic Dump and Reset device (Ilkka Koskinen)  [Orabug: 34833165]  
  - ACPI: tables: Add AGDI to the list of known table signatures (Ilkka Koskinen)  [Orabug: 34833165]  
  - ACPICA: iASL: Add suppport for AGDI table (Ilkka Koskinen)  [Orabug: 34833165]  
  - ACPI: APEI: explicit init of HEST and GHES in apci_init() (Shuai Xue)  [Orabug: 34833165]  
  - x86/CPU/AMD: Fix the DIV(0) initial fix attempt (Borislav Petkov (AMD))  [Orabug: 35776936]  {CVE-2023-20588} 
  - x86/CPU/AMD: Do not leak quotient data after a division by 0 (Borislav Petkov (AMD))  [Orabug: 35776936]  {CVE-2023-20588} 
  - uek-rpm: Pensando: enable PENSANDO_SOC_BSM_ENABLE in the config (Dave Kleikamp)  [Orabug: 35787554]


author: Brian Maly <brian.maly@oracle.com> [5.4.17-2136.324.4.el8uek]
changelog:
  - kernfs: fix missing kernfs_iattr_rwsem locking (Ian Kent)  [Orabug: 35796771]  
  - x86/microcode: Stop reprobing mitigations after late microcode load (Boris Ostrovsky)  [Orabug: 35818857]  {CVE-2023-20569} 
  - objtool/x86: Fix SRSO mess (Peter Zijlstra)  [Orabug: 35818857]  {CVE-2023-20569} 
  - x86/srso: Correct the mitigation status when SMT is disabled (Borislav Petkov (AMD))  [Orabug: 35818857]  {CVE-2023-20569} 
  - objtool/x86: Fixup frame-pointer vs rethunk (Peter Zijlstra)  [Orabug: 35818857]  {CVE-2023-20569} 
  - x86/srso: Disable the mitigation on unaffected configurations (Borislav Petkov (AMD))  [Orabug: 35818857]  {CVE-2023-20569} 
  - x86/retpoline: Don't clobber RFLAGS during srso_safe_ret() (Sean Christopherson)  [Orabug: 35818857]  {CVE-2023-20569} 
  - x86/srso: Explain the untraining sequences a bit more (Borislav Petkov (AMD))  [Orabug: 35818857]  {CVE-2023-20569} 
  - x86/cpu: Cleanup the untrain mess (Peter Zijlstra)  [Orabug: 35818857]  {CVE-2023-20569} 
  - x86/cpu: Rename srso_(.*)_alias to srso_alias_\1 (Peter Zijlstra)  [Orabug: 35818857]  {CVE-2023-20569} 
  - x86/cpu: Rename original retbleed methods (Peter Zijlstra)  [Orabug: 35818857]  {CVE-2023-20569} 
  - x86/cpu: Clean up SRSO return thunk mess (Peter Zijlstra)  [Orabug: 35818857]  {CVE-2023-20569} 
  - x86/alternative: Make custom return thunk unconditional (Peter Zijlstra)  [Orabug: 35818857]  {CVE-2023-20569} 
  - x86/cpu: Fix up srso_safe_ret() and __x86_return_thunk() (Peter Zijlstra)  [Orabug: 35818857]  {CVE-2023-20569} 
  - x86/cpu: Fix __x86_return_thunk symbol type (Peter Zijlstra)  [Orabug: 35818857]  {CVE-2023-20569} 
  - x86/srso: Fix build breakage with the LLVM linker (Nick Desaulniers)  [Orabug: 35818857]  {CVE-2023-20569} 
  - x86/srso: Tie SBPB bit setting to microcode patch detection (Borislav Petkov (AMD))  [Orabug: 35818857]  {CVE-2023-20569} 
  - x86/srso: Fix return thunks in generated code (Josh Poimboeuf)  [Orabug: 35818857]  {CVE-2023-20569} 
  - x86/srso: Add IBPB on VMEXIT (Borislav Petkov (AMD))  [Orabug: 35818857]  {CVE-2023-20569} 
  - x86/srso: Add IBPB (Borislav Petkov (AMD))  [Orabug: 35818857]  {CVE-2023-20569} 
  - x86/srso: Add SRSO_NO support (Borislav Petkov (AMD))  [Orabug: 35818857]  {CVE-2023-20569} 
  - x86/srso: Add IBPB_BRTYPE support (Borislav Petkov (AMD))  [Orabug: 35818857]  {CVE-2023-20569} 
  - x86/srso: Add a Speculative RAS Overflow mitigation (Borislav Petkov (AMD))  [Orabug: 35818857]  {CVE-2023-20569} 
  - scsi: megaraid_sas: Fix deadlock on firmware crashdump (Junxiao Bi)  [Orabug: 35819593]  
  - rds: Fix lack of reentrancy for connection reset with dst addr zero (Håkon Bugge)  [Orabug: 35819522]  {CVE-2023-22024}


author: Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.324.5.el8uek]
changelog:
  - netfilter: nfnetlink_osf: avoid OOB read (Wander Lairson Costa)   
  - dlm: fix plock lookup when using multiple lockspaces (Alexander Aring)   
  - x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (Dave Hansen)   
  - Revert "IB/isert: Fix incorrect release of isert connection" (Leon Romanovsky)   
  - ALSA: ac97: Fix possible error value of *rac97 (Su Hui)   
  - pinctrl: amd: Don't show `Invalid config param` errors (Mario Limonciello)   
  - netfilter: xt_sctp: validate the flag_info count (Wander Lairson Costa)   
  - netfilter: xt_u32: validate user space input (Wander Lairson Costa)   
  - netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Kyle Zeng)  [Orabug: 35824287]  {CVE-2023-42753}


author: Brian Maly <brian.maly@oracle.com> [5.4.17-2136.324.5.1.el8uek]
changelog:
  - x86: KVM: SVM: always update the x2avic msr interception (Maxim Levitsky)  [Orabug: 35857366]  {CVE-2023-5090}


author: Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.324.5.3.el8uek]
changelog:
  - Revert "jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint" (Sherry Yang)  [Orabug: 35896102]


author: Brian Maly <brian.maly@oracle.com> [5.4.17-2136.325.1.el8uek]
changelog:
  - uek-rpm: aarch64: embedded: Enable CONFIG_STACKTRACE and CONFIG_FTRACE (Thomas Tai)  [Orabug: 35818484]  
  - io_uring: add a sysctl to disable io_uring system-wide (Matteo Rizzo)  [Orabug: 35819375]  
  - KVM: SVM: Set target pCPU during IRTE update if target vCPU is running (Sean Christopherson)  [Orabug: 35827614]  
  - KVM: SVM: Take and hold ir_list_lock when updating vCPU's Physical ID entry (Sean Christopherson)  [Orabug: 35827614]  
  - Pensando: kpcimgr: Zero out mod pointer unconditionally (Rob Gardner)  [Orabug: 35842963]  
  - pensando: kpcimgr: Flush i-cache before calling any pciesvc code (Rob Gardner)  [Orabug: 35842972]


author: Brian Maly <brian.maly@oracle.com> [5.4.17-2136.325.2.el8uek]
changelog:
  - Pensando: kpcimgr: Decouple kstate addr from shmem addr (Rob Gardner)  [Orabug: 35842998]  
  - bnxt_en: fix NULL dereference in bnxt_flash_package_from_file() (Samasth Norway Ananda)  [Orabug: 35844212]  
  - uek-rpm: aarch64: embedded: Fix a typo when enabling CONFIG_STACKTRACE (Thomas Tai)  [Orabug: 35858089]  
  - ocfs2: ocfs2 crash due to invalid h_next_leaf_blk value in extent block (Gautham Ananthakrishna)  [Orabug: 35859331]


author: Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.325.3.el8uek]
changelog:
  - LTS tag: v5.4.257 (Sherry Yang)   
  - drm/amdgpu: fix amdgpu_cs_p1_user_fence (Christian König)   
  - mtd: rawnand: brcmnand: Fix ECC level field setting for v7.2 controller (William Zhang)   
  - ext4: fix rec_len verify error (Shida Zhang)   
  - i2c: aspeed: Reset the i2c controller when timeout occurs (Tommy Huang)   
  - tracefs: Add missing lockdown check to tracefs_create_dir() (Steven Rostedt (Google))   
  - nfsd: fix change_info in NFSv4 RENAME replies (Jeff Layton)   
  - tracing: Have option files inc the trace array ref count (Steven Rostedt (Google))   
  - tracing: Have current_trace inc the trace array ref count (Steven Rostedt (Google))   
  - btrfs: fix lockdep splat and potential deadlock after failure running delayed items (Filipe Manana)   
  - attr: block mode changes of symlinks (Christian Brauner)   
  - md/raid1: fix error: ISO C90 forbids mixed declarations (Nigel Croxon)   
  - selftests: tracing: Fix to unmount tracefs for recovering environment (Masami Hiramatsu (Google))   
  - btrfs: compare the correct fsid/metadata_uuid in btrfs_validate_super (Anand Jain)   
  - btrfs: add a helper to read the superblock metadata_uuid (Anand Jain)   
  - btrfs: move btrfs_pinned_by_swapfile prototype into volumes.h (Josef Bacik)   
  - perf tools: Add an option to build without libbfd (Ian Rogers)   
  - perf jevents: Make build dependency on test JSONs (John Garry)   
  - tools features: Add feature test to check if libbfd has buildid support (Arnaldo Carvalho de Melo)   
  - kobject: Add sanity check for kset->kobj.ktype in kset_register() (Zhen Lei)   
  - media: pci: ipu3-cio2: Initialise timing struct to avoid a compiler warning (Sakari Ailus)   
  - serial: cpm_uart: Avoid suspicious locking (Christophe Leroy)   
  - scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() (Konstantin Shelekhin)   
  - usb: gadget: fsl_qe_udc: validate endpoint index for ch9 udc (Ma Ke)   
  - media: pci: cx23885: replace BUG with error return (Hans Verkuil)   
  - media: tuners: qt1010: replace BUG_ON with a regular error (Hans Verkuil)   
  - media: az6007: Fix null-ptr-deref in az6007_i2c_xfer() (Zhang Shurong)   
  - media: anysee: fix null-ptr-deref in anysee_master_xfer (Zhang Shurong)   
  - media: af9005: Fix null-ptr-deref in af9005_i2c_xfer (Zhang Shurong)   
  - media: dw2102: Fix null-ptr-deref in dw2102_i2c_transfer() (Zhang Shurong)   
  - media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer (Zhang Shurong)   
  - powerpc/pseries: fix possible memory leak in ibmebus_bus_init() (ruanjinjie)   
  - jfs: fix invalid free of JFS_IP(ipimap)->i_imap in diUnmount (Liu Shixin via Jfs-discussion)   
  - fs/jfs: prevent double-free in dbUnmount() after failed jfs_remount() (Andrew Kanner)   
  - ext2: fix datatype of block number in ext2_xattr_set2() (Georg Ottinger)   
  - md: raid1: fix potential OOB in raid1_remove_disk() (Zhang Shurong)   
  - bus: ti-sysc: Configure uart quirks for k3 SoC (Tony Lindgren)   
  - drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable() (Tuo Li)   
  - wifi: mac80211_hwsim: drop short frames (Johannes Berg)   
  - alx: fix OOB-read compiler warning (GONG, Ruiqi)   
  - mmc: sdhci-esdhc-imx: improve ESDHC_FLAG_ERR010450 (Giulio Benetti)   
  - tpm_tis: Resend command to recover from data transfer errors (Alexander Steffen)   
  - crypto: lib/mpi - avoid null pointer deref in mpi_cmp_ui() (Mark O'Donovan)   
  - wifi: mwifiex: fix fortify warning (Dmitry Antipov)   
  - wifi: ath9k: fix printk specifier (Dongliang Mu)   
  - devlink: remove reload failed checks in params get/set callbacks (Jiri Pirko)   
  - hw_breakpoint: fix single-stepping when using bpf_overflow_handler (Tomislav Novak)   
  - perf/smmuv3: Enable HiSilicon Erratum 162001900 quirk for HIP08/09 (Yicong Yang)   
  - ACPI: video: Add backlight=native DMI quirk for Lenovo Ideapad Z470 (Jiri Slaby (SUSE))   
  - kernel/fork: beware of __put_task_struct() calling context (Wander Lairson Costa)   
  - ACPICA: Add AML_NO_OPERAND_RESOLVE flag to Timer (Abhishek Mainkar)   
  - locks: fix KASAN: use-after-free in trace_event_raw_event_filelock_lock (Will Shiu)   
  - btrfs: output extra debug info if we failed to find an inline backref (Qu Wenruo)   
  - autofs: fix memory leak of waitqueues in autofs_catatonic_mode (Fedor Pchelkin)   
  - parisc: Drop loops_per_jiffy from per_cpu struct (Helge Deller)   
  - drm/amd/display: Fix a bug when searching for insert_above_mpcc (Wesley Chalmers)   
  - kcm: Fix error handling for SOCK_DGRAM in kcm_sendmsg(). (Kuniyuki Iwashima)   
  - ixgbe: fix timestamp configuration code (Vadim Fedorenko)   
  - net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict() (Liu Jian)   
  - platform/mellanox: mlxbf-tmfifo: Drop jumbo frames (Liming Sun)   
  - platform/mellanox: mlxbf-tmfifo: Drop the Rx packet if no more descriptors (Liming Sun)   
  - kcm: Fix memory leak in error path of kcm_sendmsg() (Shigeru Yoshida)   
  - r8152: check budget for r8152_poll() (Hayes Wang)   
  - net: ethernet: mtk_eth_soc: fix possible NULL pointer dereference in mtk_hwlro_get_fdir_all() (Hangyu Hua)   
  - net: ethernet: mvpp2_main: fix possible OOB write in mvpp2_ethtool_get_rxnfc() (Hangyu Hua)   
  - net: ipv4: fix one memleak in __inet_del_ifa() (Liu Jian)   
  - clk: imx8mm: Move 1443X/1416X PLL clock structure to common place (Anson Huang)   
  - ARM: dts: BCM5301X: Extend RAM to full 256MB for Linksys EA6500 V2 (Aleksey Nasibulin)   
  - usb: typec: bus: verify partner exists in typec_altmode_attention (RD Babiera)   
  - usb: typec: tcpm: Refactor tcpm_handle_vdm_request (Hans de Goede)   
  - usb: typec: tcpm: Refactor tcpm_handle_vdm_request payload handling (Hans de Goede)   
  - perf tools: Handle old data in PERF_RECORD_ATTR (Namhyung Kim)   
  - perf hists browser: Fix hierarchy mode header (Namhyung Kim)   
  - mtd: rawnand: brcmnand: Fix potential false time out warning (William Zhang)   
  - mtd: rawnand: brcmnand: Fix potential out-of-bounds access in oob write (William Zhang)   
  - mtd: rawnand: brcmnand: Fix crash during the panic_write (William Zhang)   
  - btrfs: use the correct superblock to compare fsid in btrfs_validate_super (Anand Jain)   
  - btrfs: don't start transaction when joining with TRANS_JOIN_NOSTART (Filipe Manana)   
  - fuse: nlookup missing decrement in fuse_direntplus_link (ruanmeisi)   
  - ata: pata_ftide010: Add missing MODULE_DESCRIPTION (Damien Le Moal)   
  - ata: sata_gemini: Add missing MODULE_DESCRIPTION (Damien Le Moal)   
  - sh: boards: Fix CEU buffer size passed to dma_declare_coherent_memory() (Petr Tesarik)   
  - net: hns3: fix the port information display when sfp is absent (Yisen Zhuang)   
  - ip_tunnels: use DEV_STATS_INC() (Eric Dumazet)   
  - idr: fix param name in idr_alloc_cyclic() doc (Ariel Marcovitch)   
  - s390/zcrypt: don't leak memory if dev_set_name() fails (Andy Shevchenko)   
  - igb: Change IGB_MIN to allow set rx/tx value between 64 and 80 (Olga Zaborska)   
  - igbvf: Change IGBVF_MIN to allow set rx/tx value between 64 and 80 (Olga Zaborska)   
  - igc: Change IGC_MIN to allow set rx/tx value between 64 and 80 (Olga Zaborska)   
  - kcm: Destroy mutex in kcm_exit_net() (Shigeru Yoshida)   
  - net: sched: sch_qfq: Fix UAF in qfq_dequeue() (valis)   
  - af_unix: Fix data race around sk->sk_err. (Kuniyuki Iwashima)   
  - af_unix: Fix data-races around sk->sk_shutdown. (Kuniyuki Iwashima)   
  - af_unix: Fix data-race around unix_tot_inflight. (Kuniyuki Iwashima)   
  - af_unix: Fix data-races around user->unix_inflight. (Kuniyuki Iwashima)   
  - net: ipv6/addrconf: avoid integer underflow in ipv6_create_tempaddr (Alex Henrie)   
  - veth: Fixing transmit return status for dropped packets (Liang Chen)   
  - igb: disable virtualization features on 82580 (Corinna Vinschen)   
  - net: read sk->sk_family once in sk_mc_loop() (Eric Dumazet)   
  - ipv4: annotate data-races around fi->fib_dead (Eric Dumazet)   
  - sctp: annotate data-races around sk->sk_wmem_queued (Eric Dumazet)   
  - pwm: lpc32xx: Remove handling of PWM channels (Vladimir Zapolskiy)   
  - watchdog: intel-mid_wdt: add MODULE_ALIAS() to allow auto-load (Raag Jadav)   
  - perf top: Don't pass an ERR_PTR() directly to perf_session__delete() (Arnaldo Carvalho de Melo)   
  - x86/virt: Drop unnecessary check on extended CPUID level in cpu_has_svm() (Sean Christopherson)   
  - perf annotate bpf: Don't enclose non-debug code with an assert() (Arnaldo Carvalho de Melo)   
  - kconfig: fix possible buffer overflow (Konstantin Meskhidze)   
  - NFSv4/pnfs: minor fix for cleanup path in nfs4_get_device_info (Fedor Pchelkin)   
  - soc: qcom: qmi_encdec: Restrict string length in decode (Chris Lew)   
  - clk: qcom: gcc-mdm9615: use proper parent for pll0_vote clock (Dmitry Baryshkov)   
  - parisc: led: Reduce CPU overhead for disk & lan LED computation (Helge Deller)   
  - parisc: led: Fix LAN receive and transmit LEDs (Helge Deller)   
  - lib/test_meminit: allocate pages up to order MAX_ORDER (Andrew Donnellan)   
  - drm/ast: Fix DRAM init on AST2200 (Thomas Zimmermann)   
  - fbdev/ep93xx-fb: Do not assign to struct fb_info.dev (Thomas Zimmermann)   
  - scsi: qla2xxx: Remove unsupported ql2xenabledif option (Manish Rangankar)   
  - scsi: qla2xxx: Turn off noisy message log (Quinn Tran)   
  - scsi: qla2xxx: Fix erroneous link up failure (Quinn Tran)   
  - scsi: qla2xxx: fix inconsistent TMF timeout (Quinn Tran)   
  - net/ipv6: SKB symmetric hash should incorporate transport ports (Quan Tian)   
  - drm: fix double free for gbo in drm_gem_vram_init and drm_gem_vram_create (Jia Yang)   
  - udf: initialize newblock to 0 (Tom Rix)   
  - usb: typec: tcpci: clear the fault status bit (Marco Felsch)   
  - serial: sc16is7xx: fix broken port 0 uart init (Hugo Villeneuve)   
  - sc16is7xx: Set iobase to device index (Daniel Mack)   
  - cpufreq: brcmstb-avs-cpufreq: Fix -Warray-bounds bug (Gustavo A. R. Silva)   
  - crypto: stm32 - fix loop iterating through scatterlist for DMA (Thomas Bourgoin)   
  - s390/ipl: add missing secure/has_secure file to ipl type 'unknown' (Sven Schnelle)   
  - pstore/ram: Check start of empty przs during init (Enlin Mu)   
  - fsverity: skip PKCS#7 parser when keyring is empty (Eric Biggers)   
  - net: handle ARPHRD_PPP in dev_is_mac_header_xmit() (Nicolas Dichtel)   
  - X.509: if signature is unsupported skip validation (Thore Sommer)   
  - dccp: Fix out of bounds access in DCCP error handler (Jann Horn)   
  - parisc: Fix /proc/cpuinfo output for lscpu (Helge Deller)   
  - procfs: block chmod on /proc/thread-self/comm (Aleksa Sarai)   
  - Revert "PCI: Mark NVIDIA T4 GPUs to avoid bus reset" (Bjorn Helgaas)   
  - ntb: Fix calculation ntb_transport_tx_free_entry() (Dave Jiang)   
  - ntb: Clean up tx tail index on link down (Dave Jiang)   
  - ntb: Drop packets when qp link is down (Dave Jiang)   
  - media: dvb: symbol fixup for dvb_attach() (Greg Kroah-Hartman)   
  - xtensa: PMU: fix base address for the newer hardware (Max Filippov)   
  - backlight/lv5207lp: Compare against struct fb_info.device (Thomas Zimmermann)   
  - backlight/bd6107: Compare against struct fb_info.device (Thomas Zimmermann)   
  - backlight/gpio_backlight: Compare against struct fb_info.device (Thomas Zimmermann)   
  - ARM: OMAP2+: Fix -Warray-bounds warning in _pwrdm_state_switch() (Gustavo A. R. Silva)   
  - ipmi_si: fix a memleak in try_smi_init() (Yi Yang)   
  - ALSA: pcm: Fix missing fixup call in compat hw_refine ioctl (Takashi Iwai)   
  - PM / devfreq: Fix leak in devfreq_dev_release() (Boris Brezillon)   
  - igb: set max size RX buffer when store bad packet is enabled (Radoslaw Tyl)   
  - skbuff: skb_segment, Call zero copy functions before using skbuff frags (Mohamed Khalfella)   
  - igmp: limit igmpv3_newpack() packet size to IP_MAX_MTU (Eric Dumazet)   
  - virtio_ring: fix avail_wrap_counter in virtqueue_add_packed (Yuan Yao)   
  - cpufreq: Fix the race condition while updating the transition_task of policy (Liao Chang)   
  - dmaengine: ste_dma40: Add missing IRQ check in d40_probe (ruanjinjie)   
  - um: Fix hostaudio build errors (Randy Dunlap)   
  - mtd: rawnand: fsmc: handle clk prepare error in fsmc_nand_resume() (Yi Yang)   
  - rpmsg: glink: Add check for kstrdup (Jiasheng Jiang)   
  - phy/rockchip: inno-hdmi: do not power on rk3328 post pll on reg write (Jonas Karlman)   
  - phy/rockchip: inno-hdmi: round fractal pixclock in rk3328 recalc_rate (Zheng Yang)   
  - phy/rockchip: inno-hdmi: use correct vco_div_5 macro on rk3328 (Jonas Karlman)   
  - tracing: Fix race issue between cpu buffer write and swap (Zheng Yejian)   
  - HID: multitouch: Correct devm device reference for hidinput input_dev name (Rahul Rameshbabu)   
  - HID: logitech-dj: Fix error handling in logi_dj_recv_switch_to_dj_mode() (Nikita Zhandarovich)   
  - RDMA/siw: Correct wrong debug message (Guoqing Jiang)   
  - RDMA/siw: Balance the reference of cep->kref in the error path (Guoqing Jiang)   
  - amba: bus: fix refcount leak (Peng Fan)   
  - serial: tegra: handle clk prepare error in tegra_uart_hw_init() (Yi Yang)   
  - scsi: fcoe: Fix potential deadlock on &fip->ctlr_lock (Chengfeng Ye)   
  - scsi: core: Use 32-bit hostnum in scsi_host_lookup() (Tony Battersby)   
  - media: ov2680: Fix regulators being left enabled on ov2680_power_on() errors (Hans de Goede)   
  - media: ov2680: Fix vflip / hflip set functions (Hans de Goede)   
  - media: ov2680: Fix ov2680_bayer_order() (Hans de Goede)   
  - media: ov2680: Remove auto-gain and auto-exposure controls (Hans de Goede)   
  - media: i2c: ov2680: Set V4L2_CTRL_FLAG_MODIFY_LAYOUT on flips (Dave Stevenson)   
  - media: ov5640: Enable MIPI interface in ov5640_set_power_mipi() (Marek Vasut)   
  - media: i2c: ov5640: Configure HVP lines in s_power callback (Lad Prabhakar)   
  - USB: gadget: f_mass_storage: Fix unused variable warning (Alan Stern)   
  - media: go7007: Remove redundant if statement (Colin Ian King)   
  - iommu/vt-d: Fix to flush cache of PASID directory table (Yanfei Xu)   
  - IB/uverbs: Fix an potential error pointer dereference (Xiang Yang)   
  - driver core: test_async: fix an error code (Dan Carpenter)   
  - dma-buf/sync_file: Fix docs syntax (Rob Clark)   
  - coresight: tmc: Explicit type conversions to prevent integer overflow (Ruidong Tian)   
  - scsi: qedf: Do not touch __user pointer in qedf_dbg_fp_int_cmd_read() directly (Oleksandr Natalenko)   
  - scsi: qedf: Do not touch __user pointer in qedf_dbg_debug_cmd_read() directly (Oleksandr Natalenko)   
  - scsi: qedf: Do not touch __user pointer in qedf_dbg_stop_io_on_error_cmd_read() directly (Oleksandr Natalenko)   
  - x86/APM: drop the duplicate APM_MINOR_DEV macro (Randy Dunlap)   
  - serial: sprd: Fix DMA buffer leak issue (Chunyan Zhang)   
  - serial: sprd: Assign sprd_port after initialized to avoid wrong access (Chunyan Zhang)   
  - serial: sprd: remove redundant sprd_port cleanup (Chunyan Zhang)   
  - serial: sprd: getting port index via serial aliases only (Chunyan Zhang)   
  - scsi: qla4xxx: Add length check when parsing nlattrs (Lin Ma)   
  - scsi: be2iscsi: Add length check when parsing nlattrs (Lin Ma)   
  - scsi: iscsi: Add strlen() check in iscsi_if_set{_host}_param() (Lin Ma)   
  - usb: phy: mxs: fix getting wrong state with mxs_phy_is_otg_host() (Xu Yang)   
  - media: mediatek: vcodec: Return NULL if no vdec_fb is found (Irui Wang)   
  - media: cx24120: Add retval check for cx24120_message_send() (Daniil Dulov)   
  - media: dvb-usb: m920x: Fix a potential memory leak in m920x_i2c_xfer() (Christophe JAILLET)   
  - media: dib7000p: Fix potential division by zero (Daniil Dulov)   
  - drivers: usb: smsusb: fix error handling code in smsusb_init_device (Dongliang Mu)   
  - media: v4l2-core: Fix a potential resource leak in v4l2_fwnode_parse_link() (Christophe JAILLET)   
  - media: v4l2-fwnode: simplify v4l2_fwnode_parse_link (Marco Felsch)   
  - media: v4l2-fwnode: fix v4l2_fwnode_parse_link handling (Marco Felsch)   
  - NFS: Guard against READDIR loop when entry names exceed MAXNAMELEN (Benjamin Coddington)   
  - NFSD: da_addr_body field missing in some GETDEVICEINFO replies (Chuck Lever)   
  - fs: lockd: avoid possible wrong NULL parameter (Su Hui)   
  - jfs: validate max amount of blocks before allocation. (Alexei Filippov)   
  - powerpc/iommu: Fix notifiers being shared by PCI and VIO buses (Russell Currey)   
  - nfs/blocklayout: Use the passed in gfp flags (Dan Carpenter)   
  - wifi: ath10k: Use RMW accessors for changing LNKCTL (Ilpo Järvinen)   
  - drm/radeon: Use RMW accessors for changing LNKCTL (Ilpo Järvinen)   
  - drm/radeon: Prefer pcie_capability_read_word() (Frederick Lawler)   
  - drm/radeon: Replace numbers with PCI_EXP_LNKCTL2 definitions (Bjorn Helgaas)   
  - drm/radeon: Correct Transmit Margin masks (Bjorn Helgaas)   
  - drm/amdgpu: Use RMW accessors for changing LNKCTL (Ilpo Järvinen)   
  - drm/amdgpu: Prefer pcie_capability_read_word() (Frederick Lawler)   
  - drm/amdgpu: Replace numbers with PCI_EXP_LNKCTL2 definitions (Bjorn Helgaas)   
  - drm/amdgpu: Correct Transmit Margin masks (Bjorn Helgaas)   
  - PCI: Add #defines for Enter Compliance, Transmit Margin (Bjorn Helgaas)   
  - powerpc/fadump: reset dump area size if fadump memory reserve fails (Sourabh Jain)   
  - clk: imx: composite-8m: fix clock pauses when set_rate would be a no-op (Ahmad Fatoum)   
  - PCI/ASPM: Use RMW accessors for changing LNKCTL (Ilpo Järvinen)   
  - PCI: pciehp: Use RMW accessors for changing LNKCTL (Ilpo Järvinen)   
  - PCI: Mark NVIDIA T4 GPUs to avoid bus reset (Wu Zongyong)   
  - clk: sunxi-ng: Modify mismatched function name (Zhang Jianhua)   
  - drivers: clk: keystone: Fix parameter judgment in _of_pll_clk_init() (Minjie Du)   
  - ipmi:ssif: Fix a memory leak when scanning for an adapter (Corey Minyard)   
  - ipmi:ssif: Add check for kstrdup (Jiasheng Jiang)   
  - of: unittest: Fix overlay type in apply/revert check (Geert Uytterhoeven)   
  - drm/mediatek: Fix potential memory leak if vmap() fail (Sui Jingfeng)   
  - audit: fix possible soft lockup in __audit_inode_child() (Gaosheng Cui)   
  - smackfs: Prevent underflow in smk_set_cipso() (Dan Carpenter)   
  - drm/msm/mdp5: Don't leak some plane state (Daniel Vetter)   
  - ima: Remove deprecated IMA_TRUSTED_KEYRING Kconfig (Nayna Jain)   
  - drm/panel: simple: Add missing connector type and pixel format for AUO T215HVN01 (Marek Vasut)   
  - drm/armada: Fix off-by-one error in armada_overlay_get_property() (Geert Uytterhoeven)   
  - of: unittest: fix null pointer dereferencing in of_unittest_find_node_by_name() (Ruan Jinjie)   
  - drm/tegra: dpaux: Fix incorrect return value of platform_get_irq (Yangtao Li)   
  - drm/tegra: Remove superfluous error messages around platform_get_irq() (Tan Zhongjun)   
  - md/md-bitmap: hold 'reconfig_mutex' in backlog_store() (Yu Kuai)   
  - md/bitmap: don't set max_write_behind if there is no write mostly device (Guoqing Jiang)   
  - drm/amdgpu: Update min() to min_t() in 'amdgpu_info_ioctl' (Srinivasan Shanmugam)   
  - arm64: dts: qcom: sdm845: Add missing RPMh power domain to GCC (Manivannan Sadhasivam)   
  - ARM: dts: BCM53573: Fix Ethernet info for Luxul devices (Rafał Miłecki)   
  - drm: adv7511: Fix low refresh rate register for ADV7533/5 (Bogdan Togorean)   
  - ARM: dts: samsung: s5pv210-smdkv210: correct ethernet reg addresses (split) (Krzysztof Kozlowski)   
  - ARM: dts: s5pv210: add dummy 5V regulator for backlight on SMDKv210 (Krzysztof Kozlowski)   
  - ARM: dts: s5pv210: correct ethernet unit address in SMDKV210 (Krzysztof Kozlowski)   
  - ARM: dts: s5pv210: use defines for IRQ flags in SMDKV210 (Krzysztof Kozlowski)   
  - ARM: dts: s5pv210: add RTC 32 KHz clock in SMDKV210 (Krzysztof Kozlowski)   
  - ARM: dts: samsung: s3c6410-mini6410: correct ethernet reg addresses (split) (Krzysztof Kozlowski)   
  - ARM: dts: s3c64xx: align pinctrl with dtschema (Krzysztof Kozlowski)   
  - ARM: dts: s3c6410: align node SROM bus node name with dtschema in Mini6410 (Krzysztof Kozlowski)   
  - ARM: dts: s3c6410: move fixed clocks under root node in Mini6410 (Krzysztof Kozlowski)   
  - drm/etnaviv: fix dumping of active MMU context (Lucas Stach)   
  - ARM: dts: BCM53573: Use updated "spi-gpio" binding properties (Rafał Miłecki)   
  - ARM: dts: BCM53573: Add cells sizes to PCIe node (Rafał Miłecki)   
  - ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger (Rafał Miłecki)   
  - drm/amdgpu: avoid integer overflow warning in amdgpu_device_resize_fb_bar() (Arnd Bergmann)   
  - quota: fix dqput() to follow the guarantees dquot_srcu should provide (Baokun Li)   
  - quota: add new helper dquot_active() (Baokun Li)   
  - quota: rename dquot_active() to inode_quota_active() (Baokun Li)   
  - quota: factor out dquot_write_dquot() (Baokun Li)   
  - quota: avoid increasing DQST_LOOKUPS when iterating over dirty/inuse list (Chengguang Xu)   
  - drm/bridge: tc358764: Fix debug print parameter order (Marek Vasut)   
  - netrom: Deny concurrent connect(). (Kuniyuki Iwashima)   
  - net/sched: sch_hfsc: Ensure inner classes have fsc curve (Budimir Markovic)   
  - mlxsw: i2c: Limit single transaction buffer size (Vadim Pasternak)   
  - mlxsw: i2c: Fix chunk size setting in output mailbox buffer (Vadim Pasternak)   
  - net: arcnet: Do not call kfree_skb() under local_irq_disable() (Jinjie Ruan)   
  - wifi: ath9k: use IS_ERR() with debugfs_create_dir() (Wang Ming)   
  - wifi: mwifiex: avoid possible NULL skb pointer dereference (Dmitry Antipov)   
  - wifi: ath9k: protect WMI command response buffer replacement with a lock (Fedor Pchelkin)   
  - wifi: ath9k: fix races between ath9k_wmi_cmd and ath9k_wmi_ctrl_rx (Fedor Pchelkin)   
  - wifi: mwifiex: Fix missed return in oob checks failed path (Polaris Pi)   
  - wifi: mwifiex: fix memory leak in mwifiex_histogram_read() (Dmitry Antipov)   
  - fs: ocfs2: namei: check return value of ocfs2_add_entry() (Artem Chernyshev)   
  - lwt: Check LWTUNNEL_XMIT_CONTINUE strictly (Yan Zhai)   
  - lwt: Fix return values of BPF xmit ops (Yan Zhai)   
  - hwrng: iproc-rng200 - Implement suspend and resume calls (Florian Fainelli)   
  - hwrng: iproc-rng200 - use semicolons rather than commas to separate statements (Julia Lawall)   
  - crypto: caam - fix unchecked return value error (Gaurav Jain)   
  - Bluetooth: nokia: fix value check in nokia_bluetooth_serdev_probe() (Yuanjun Gong)   
  - crypto: stm32 - Properly handle pm_runtime_get failing (Uwe Kleine-König)   
  - wifi: mwifiex: fix error recovery in PCIE buffer descriptor management (Dmitry Antipov)   
  - mwifiex: switch from 'pci_' to 'dma_' API (Christophe JAILLET)   
  - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Polaris Pi)   
  - can: gs_usb: gs_usb_receive_bulk_callback(): count RX overflow errors also in case of OOM (Marc Kleine-Budde)   
  - spi: tegra20-sflash: fix to check return value of platform_get_irq() in tegra_sflash_probe() (Zhang Shurong)   
  - regmap: rbtree: Use alloc_flags for memory allocations (Dan Carpenter)   
  - tcp: tcp_enter_quickack_mode() should be static (Eric Dumazet)   
  - bpf: Clear the probe_addr for uprobe (Yafang Shao)   
  - cpufreq: powernow-k8: Use related_cpus instead of cpus in driver.exit() (Liao Chang)   
  - perf/imx_ddr: don't enable counter0 if none of 4 counters are used (Xu Yang)   
  - x86/decompressor: Don't rely on upper 32 bits of GPRs being preserved (Ard Biesheuvel)   
  - x86/boot: Annotate local functions (Jiri Slaby)   
  - x86/asm: Make more symbols local (Jiri Slaby)   
  - OPP: Fix passing 0 to PTR_ERR in _opp_attach_genpd() (Manivannan Sadhasivam)   
  - tmpfs: verify {g,u}id mount options correctly (Christian Brauner)   
  - fs: Fix error checking for d_hash_and_lookup() (Wang Ming)   
  - new helper: lookup_positive_unlocked() (Al Viro)   
  - eventfd: prevent underflow for eventfd semaphores (Wen Yang)   
  - eventfd: Export eventfd_ctx_do_read() (David Woodhouse)   
  - reiserfs: Check the return value from __getblk() (Matthew Wilcox)   
  - Revert "net: macsec: preserve ingress frame ordering" (Sabrina Dubroca)   
  - Revert "net: macsec: Severe performance regression in "...preserve ordering"" (Sherry Yang)   
  - udf: Handle error when adding extent to a file (Jan Kara)   
  - udf: Check consistency of Space Bitmap Descriptor (Vladislav Efanov)   
  - powerpc/32s: Fix assembler warning about r0 (Christophe Leroy)   
  - net: Avoid address overwrite in kernel_connect (Jordan Rife)   
  - platform/mellanox: Fix mlxbf-tmfifo not handling all virtio CONSOLE notifications (Shih-Yi Chen)   
  - ALSA: seq: oss: Fix racy open/close of MIDI devices (Takashi Iwai)   
  - scsi: storvsc: Always set no_report_opcodes (Michael Kelley)   
  - cifs: add a warning when the in-flight count goes negative (Shyam Prasad N)   
  - sctp: handle invalid error codes without calling BUG() (Dan Carpenter)   
  - bnx2x: fix page fault following EEH recovery (David Christensen)   
  - netlabel: fix shift wrapping bug in netlbl_catmap_setlong() (Dmitry Mastykin)   
  - scsi: qedi: Fix potential deadlock on &qedi_percpu->p_work_lock (Chengfeng Ye)   
  - idmaengine: make FSL_EDMA and INTEL_IDMA64 depends on HAS_IOMEM (Baoquan He)   
  - net: usb: qmi_wwan: add Quectel EM05GV2 (Martin Kohn)   
  - clk: fixed-mmio: make COMMON_CLK_FIXED_MMIO depend on HAS_IOMEM (Baoquan He)   
  - security: keys: perform capable check only on privileged operations (Christian Göttsche)   
  - platform/x86: huawei-wmi: Silence ambient light sensor (Konstantin Shelekhin)   
  - platform/x86: intel: hid: Always call BTNL ACPI method (Hans de Goede)   
  - ASoC: atmel: Fix the 8K sample parameter in I2SC master (Guiting Shen)   
  - ASoc: codecs: ES8316: Fix DMIC config (Edgar)   
  - fs/nls: make load_nls() take a const parameter (Winston Wen)   
  - s390/dasd: fix hanging device after request requeue (Stefan Haberland)   
  - s390/dasd: use correct number of retries for ERP requests (Stefan Haberland)   
  - m68k: Fix invalid .section syntax (Ben Hutchings)   
  - vxlan: generalize vxlan_parse_gpe_hdr and remove unused args (Jiri Benc)   
  - ethernet: atheros: fix return value check in atl1c_tso_csum() (Yuanjun Gong)   
  - ASoC: da7219: Check for failure reading AAD IRQ events (Dmytro Maluka)   
  - ASoC: da7219: Flush pending AAD IRQ when suspending (Dmytro Maluka)   
  - 9p: virtio: make sure 'offs' is initialized in zc_request (Dominique Martinet)   
  - nilfs2: fix WARNING in mark_buffer_dirty due to discarded buffer reuse (Ryusuke Konishi)   
  - nilfs2: fix general protection fault in nilfs_lookup_dirty_data_buffers() (Ryusuke Konishi)   
  - fsi: master-ast-cf: Add MODULE_FIRMWARE macro (Juerg Haefliger)   
  - firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe (Wang Ming)   
  - serial: sc16is7xx: fix bug when first setting GPIO direction (Hugo Villeneuve)   
  - Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition (Zheng Wang)   
  - staging: rtl8712: fix race condition (Nam Cao)   
  - HID: wacom: remove the battery when the EKR is off (Aaron Armstrong Skomra)   
  - USB: serial: option: add FOXCONN T99W368/T99W373 product (Slark Xiao)   
  - USB: serial: option: add Quectel EM05G variant (0x030e) (Martin Kohn)   
  - modules: only allow symbol_get of EXPORT_SYMBOL_GPL modules (Christoph Hellwig)   
  - rtc: ds1685: use EXPORT_SYMBOL_GPL for ds1685_rtc_poweroff (Christoph Hellwig)   
  - net: enetc: use EXPORT_SYMBOL_GPL for enetc_phc_index (Christoph Hellwig)   
  - mmc: au1xmmc: force non-modular build and remove symbol_get usage (Christoph Hellwig)   
  - ARM: pxa: remove use of symbol_get() (Arnd Bergmann)   
  - erofs: ensure that the post-EOF tails are all zeroed (Gao Xiang)


author: Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.325.4.el8uek]
changelog:
  - net: nfc: llcp: Add lock when modifying device list (Jeremy Cline)   
  - net: dsa: mv88e6xxx: Avoid EEPROM timeout when EEPROM is absent (Fabio Estevam)   
  - ima: Finish deprecation of IMA_TRUSTED_KEYRING Kconfig (Oleksandr Tymoshenko)   
  - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Pin-yen Lin)   
  - Revert "PCI: qcom: Disable write access to read only registers for IP v2.3.3" (Greg Kroah-Hartman)   
  - rbd: take header_rwsem in rbd_dev_refresh() only when updating (Ilya Dryomov)   
  - rbd: decouple parent info read-in from updating rbd_dev (Ilya Dryomov)   
  - rbd: decouple header read-in from updating rbd_dev->header (Ilya Dryomov)   
  - rbd: move rbd_dev_refresh() definition (Ilya Dryomov)   
  - MIPS: Alchemy: only build mmc support helpers if au1xmmc is enabled (Christoph Hellwig)   
  - netfilter: ipset: Fix race between IPSET_CMD_CREATE and IPSET_CMD_SWAP (Jozsef Kadlecsik)   
  - dccp: fix dccp_v4_err()/dccp_v6_err() again (Eric Dumazet)   
  - fix breakage in do_rmdir() (Al Viro)  [Orabug: 35722671]  
  - scsi: target: core: Fix deadlock due to recursive locking (Junxiao Bi)  [Orabug: 35761341]  
  - rds: Add proper refcnt when an RDS MR references an RDS Socket (Håkon Bugge)  [Orabug: 35836949]  
  - rds: Check for UAF in rds_destroy_mr (Håkon Bugge)  [Orabug: 35836949]  
  - i2c: designware: Fix corrupted memory seen in the ISR (Jan Bottorff)  [Orabug: 35857601]  
  - xfs: reserve less log space when recovering log intent items (Darrick J. Wong)  [Orabug: 35871840]  
  - octeontx_edac: Fix mcc_edac failure at boot (Thomas Tai)  [Orabug: 35895526]  
  - bpf: bpf_check() must fail when btf_linux is null (Dave Kleikamp)  [Orabug: 35899889]


author: Brian Maly <brian.maly@oracle.com> [5.4.17-2136.325.5.el8uek]
changelog:
  - perf symbols: Symbol lookup with kcore can fail if multiple segments match stext (Krister Johansen)  [Orabug: 35905508]  
  - char: misc: Increase the maximum number of dynamic misc devices to 1048448 (D Scott Phillips)  [Orabug: 35905508]  
  - perf/arm-cmn: Fix invalid pointer when access dtc object sharing the same IRQ number (Tuan Phan)  [Orabug: 35905508]  
  - char: misc: increase DYNAMIC_MINORS value (Sangmoon Kim)  [Orabug: 35905508]


author: Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.325.5.1.el8uek]
changelog:
  - Revert "PCI: acpiphp: Reassign resources on bridge if necessary" (Sherry Yang)  [Orabug: 36038708]  
  - Revert "PCI: acpiphp: Use pci_assign_unassigned_bridge_resources() only for non-root bus" (Sherry Yang)  [Orabug: 36038708]


author: Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.325.3.el8uek]
changelog:
  - LTS tag: v5.4.257 (Sherry Yang)   
  - drm/amdgpu: fix amdgpu_cs_p1_user_fence (Christian König)   
  - mtd: rawnand: brcmnand: Fix ECC level field setting for v7.2 controller (William Zhang)   
  - ext4: fix rec_len verify error (Shida Zhang)   
  - i2c: aspeed: Reset the i2c controller when timeout occurs (Tommy Huang)   
  - tracefs: Add missing lockdown check to tracefs_create_dir() (Steven Rostedt (Google))   
  - nfsd: fix change_info in NFSv4 RENAME replies (Jeff Layton)   
  - tracing: Have option files inc the trace array ref count (Steven Rostedt (Google))   
  - tracing: Have current_trace inc the trace array ref count (Steven Rostedt (Google))   
  - btrfs: fix lockdep splat and potential deadlock after failure running delayed items (Filipe Manana)   
  - attr: block mode changes of symlinks (Christian Brauner)   
  - md/raid1: fix error: ISO C90 forbids mixed declarations (Nigel Croxon)   
  - selftests: tracing: Fix to unmount tracefs for recovering environment (Masami Hiramatsu (Google))   
  - btrfs: compare the correct fsid/metadata_uuid in btrfs_validate_super (Anand Jain)   
  - btrfs: add a helper to read the superblock metadata_uuid (Anand Jain)   
  - btrfs: move btrfs_pinned_by_swapfile prototype into volumes.h (Josef Bacik)   
  - perf tools: Add an option to build without libbfd (Ian Rogers)   
  - perf jevents: Make build dependency on test JSONs (John Garry)   
  - tools features: Add feature test to check if libbfd has buildid support (Arnaldo Carvalho de Melo)   
  - kobject: Add sanity check for kset->kobj.ktype in kset_register() (Zhen Lei)   
  - media: pci: ipu3-cio2: Initialise timing struct to avoid a compiler warning (Sakari Ailus)   
  - serial: cpm_uart: Avoid suspicious locking (Christophe Leroy)   
  - scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() (Konstantin Shelekhin)   
  - usb: gadget: fsl_qe_udc: validate endpoint index for ch9 udc (Ma Ke)   
  - media: pci: cx23885: replace BUG with error return (Hans Verkuil)   
  - media: tuners: qt1010: replace BUG_ON with a regular error (Hans Verkuil)   
  - media: az6007: Fix null-ptr-deref in az6007_i2c_xfer() (Zhang Shurong)   
  - media: anysee: fix null-ptr-deref in anysee_master_xfer (Zhang Shurong)   
  - media: af9005: Fix null-ptr-deref in af9005_i2c_xfer (Zhang Shurong)   
  - media: dw2102: Fix null-ptr-deref in dw2102_i2c_transfer() (Zhang Shurong)   
  - media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer (Zhang Shurong)   
  - powerpc/pseries: fix possible memory leak in ibmebus_bus_init() (ruanjinjie)   
  - jfs: fix invalid free of JFS_IP(ipimap)->i_imap in diUnmount (Liu Shixin via Jfs-discussion)   
  - fs/jfs: prevent double-free in dbUnmount() after failed jfs_remount() (Andrew Kanner)   
  - ext2: fix datatype of block number in ext2_xattr_set2() (Georg Ottinger)   
  - md: raid1: fix potential OOB in raid1_remove_disk() (Zhang Shurong)   
  - bus: ti-sysc: Configure uart quirks for k3 SoC (Tony Lindgren)   
  - drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable() (Tuo Li)   
  - wifi: mac80211_hwsim: drop short frames (Johannes Berg)   
  - alx: fix OOB-read compiler warning (GONG, Ruiqi)   
  - mmc: sdhci-esdhc-imx: improve ESDHC_FLAG_ERR010450 (Giulio Benetti)   
  - tpm_tis: Resend command to recover from data transfer errors (Alexander Steffen)   
  - crypto: lib/mpi - avoid null pointer deref in mpi_cmp_ui() (Mark O'Donovan)   
  - wifi: mwifiex: fix fortify warning (Dmitry Antipov)   
  - wifi: ath9k: fix printk specifier (Dongliang Mu)   
  - devlink: remove reload failed checks in params get/set callbacks (Jiri Pirko)   
  - hw_breakpoint: fix single-stepping when using bpf_overflow_handler (Tomislav Novak)   
  - perf/smmuv3: Enable HiSilicon Erratum 162001900 quirk for HIP08/09 (Yicong Yang)   
  - ACPI: video: Add backlight=native DMI quirk for Lenovo Ideapad Z470 (Jiri Slaby (SUSE))   
  - kernel/fork: beware of __put_task_struct() calling context (Wander Lairson Costa)   
  - ACPICA: Add AML_NO_OPERAND_RESOLVE flag to Timer (Abhishek Mainkar)   
  - locks: fix KASAN: use-after-free in trace_event_raw_event_filelock_lock (Will Shiu)   
  - btrfs: output extra debug info if we failed to find an inline backref (Qu Wenruo)   
  - autofs: fix memory leak of waitqueues in autofs_catatonic_mode (Fedor Pchelkin)   
  - parisc: Drop loops_per_jiffy from per_cpu struct (Helge Deller)   
  - drm/amd/display: Fix a bug when searching for insert_above_mpcc (Wesley Chalmers)   
  - kcm: Fix error handling for SOCK_DGRAM in kcm_sendmsg(). (Kuniyuki Iwashima)   
  - ixgbe: fix timestamp configuration code (Vadim Fedorenko)   
  - net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict() (Liu Jian)   
  - platform/mellanox: mlxbf-tmfifo: Drop jumbo frames (Liming Sun)   
  - platform/mellanox: mlxbf-tmfifo: Drop the Rx packet if no more descriptors (Liming Sun)   
  - kcm: Fix memory leak in error path of kcm_sendmsg() (Shigeru Yoshida)   
  - r8152: check budget for r8152_poll() (Hayes Wang)   
  - net: ethernet: mtk_eth_soc: fix possible NULL pointer dereference in mtk_hwlro_get_fdir_all() (Hangyu Hua)   
  - net: ethernet: mvpp2_main: fix possible OOB write in mvpp2_ethtool_get_rxnfc() (Hangyu Hua)   
  - net: ipv4: fix one memleak in __inet_del_ifa() (Liu Jian)   
  - clk: imx8mm: Move 1443X/1416X PLL clock structure to common place (Anson Huang)   
  - ARM: dts: BCM5301X: Extend RAM to full 256MB for Linksys EA6500 V2 (Aleksey Nasibulin)   
  - usb: typec: bus: verify partner exists in typec_altmode_attention (RD Babiera)   
  - usb: typec: tcpm: Refactor tcpm_handle_vdm_request (Hans de Goede)   
  - usb: typec: tcpm: Refactor tcpm_handle_vdm_request payload handling (Hans de Goede)   
  - perf tools: Handle old data in PERF_RECORD_ATTR (Namhyung Kim)   
  - perf hists browser: Fix hierarchy mode header (Namhyung Kim)   
  - mtd: rawnand: brcmnand: Fix potential false time out warning (William Zhang)   
  - mtd: rawnand: brcmnand: Fix potential out-of-bounds access in oob write (William Zhang)   
  - mtd: rawnand: brcmnand: Fix crash during the panic_write (William Zhang)   
  - btrfs: use the correct superblock to compare fsid in btrfs_validate_super (Anand Jain)   
  - btrfs: don't start transaction when joining with TRANS_JOIN_NOSTART (Filipe Manana)   
  - fuse: nlookup missing decrement in fuse_direntplus_link (ruanmeisi)   
  - ata: pata_ftide010: Add missing MODULE_DESCRIPTION (Damien Le Moal)   
  - ata: sata_gemini: Add missing MODULE_DESCRIPTION (Damien Le Moal)   
  - sh: boards: Fix CEU buffer size passed to dma_declare_coherent_memory() (Petr Tesarik)   
  - net: hns3: fix the port information display when sfp is absent (Yisen Zhuang)   
  - ip_tunnels: use DEV_STATS_INC() (Eric Dumazet)   
  - idr: fix param name in idr_alloc_cyclic() doc (Ariel Marcovitch)   
  - s390/zcrypt: don't leak memory if dev_set_name() fails (Andy Shevchenko)   
  - igb: Change IGB_MIN to allow set rx/tx value between 64 and 80 (Olga Zaborska)   
  - igbvf: Change IGBVF_MIN to allow set rx/tx value between 64 and 80 (Olga Zaborska)   
  - igc: Change IGC_MIN to allow set rx/tx value between 64 and 80 (Olga Zaborska)   
  - kcm: Destroy mutex in kcm_exit_net() (Shigeru Yoshida)   
  - net: sched: sch_qfq: Fix UAF in qfq_dequeue() (valis) [Orabug: 35814454] {CVE-2023-4921}
  - af_unix: Fix data race around sk->sk_err. (Kuniyuki Iwashima)   
  - af_unix: Fix data-races around sk->sk_shutdown. (Kuniyuki Iwashima)   
  - af_unix: Fix data-race around unix_tot_inflight. (Kuniyuki Iwashima)   
  - af_unix: Fix data-races around user->unix_inflight. (Kuniyuki Iwashima)   
  - net: ipv6/addrconf: avoid integer underflow in ipv6_create_tempaddr (Alex Henrie)   
  - veth: Fixing transmit return status for dropped packets (Liang Chen)   
  - igb: disable virtualization features on 82580 (Corinna Vinschen)   
  - net: read sk->sk_family once in sk_mc_loop() (Eric Dumazet)   
  - ipv4: annotate data-races around fi->fib_dead (Eric Dumazet)   
  - sctp: annotate data-races around sk->sk_wmem_queued (Eric Dumazet)   
  - pwm: lpc32xx: Remove handling of PWM channels (Vladimir Zapolskiy)   
  - watchdog: intel-mid_wdt: add MODULE_ALIAS() to allow auto-load (Raag Jadav)   
  - perf top: Don't pass an ERR_PTR() directly to perf_session__delete() (Arnaldo Carvalho de Melo)   
  - x86/virt: Drop unnecessary check on extended CPUID level in cpu_has_svm() (Sean Christopherson)   
  - perf annotate bpf: Don't enclose non-debug code with an assert() (Arnaldo Carvalho de Melo)   
  - kconfig: fix possible buffer overflow (Konstantin Meskhidze)   
  - NFSv4/pnfs: minor fix for cleanup path in nfs4_get_device_info (Fedor Pchelkin)   
  - soc: qcom: qmi_encdec: Restrict string length in decode (Chris Lew)   
  - clk: qcom: gcc-mdm9615: use proper parent for pll0_vote clock (Dmitry Baryshkov)   
  - parisc: led: Reduce CPU overhead for disk & lan LED computation (Helge Deller)   
  - parisc: led: Fix LAN receive and transmit LEDs (Helge Deller)   
  - lib/test_meminit: allocate pages up to order MAX_ORDER (Andrew Donnellan)   
  - drm/ast: Fix DRAM init on AST2200 (Thomas Zimmermann)   
  - fbdev/ep93xx-fb: Do not assign to struct fb_info.dev (Thomas Zimmermann)   
  - scsi: qla2xxx: Remove unsupported ql2xenabledif option (Manish Rangankar)   
  - scsi: qla2xxx: Turn off noisy message log (Quinn Tran)   
  - scsi: qla2xxx: Fix erroneous link up failure (Quinn Tran)   
  - scsi: qla2xxx: fix inconsistent TMF timeout (Quinn Tran)   
  - net/ipv6: SKB symmetric hash should incorporate transport ports (Quan Tian)   
  - drm: fix double free for gbo in drm_gem_vram_init and drm_gem_vram_create (Jia Yang)   
  - udf: initialize newblock to 0 (Tom Rix)   
  - usb: typec: tcpci: clear the fault status bit (Marco Felsch)   
  - serial: sc16is7xx: fix broken port 0 uart init (Hugo Villeneuve)   
  - sc16is7xx: Set iobase to device index (Daniel Mack)   
  - cpufreq: brcmstb-avs-cpufreq: Fix -Warray-bounds bug (Gustavo A. R. Silva)   
  - crypto: stm32 - fix loop iterating through scatterlist for DMA (Thomas Bourgoin)   
  - s390/ipl: add missing secure/has_secure file to ipl type 'unknown' (Sven Schnelle)   
  - pstore/ram: Check start of empty przs during init (Enlin Mu)   
  - fsverity: skip PKCS#7 parser when keyring is empty (Eric Biggers)   
  - net: handle ARPHRD_PPP in dev_is_mac_header_xmit() (Nicolas Dichtel)   
  - X.509: if signature is unsupported skip validation (Thore Sommer)   
  - dccp: Fix out of bounds access in DCCP error handler (Jann Horn)   
  - parisc: Fix /proc/cpuinfo output for lscpu (Helge Deller)   
  - procfs: block chmod on /proc/thread-self/comm (Aleksa Sarai)   
  - Revert "PCI: Mark NVIDIA T4 GPUs to avoid bus reset" (Bjorn Helgaas)   
  - ntb: Fix calculation ntb_transport_tx_free_entry() (Dave Jiang)   
  - ntb: Clean up tx tail index on link down (Dave Jiang)   
  - ntb: Drop packets when qp link is down (Dave Jiang)   
  - media: dvb: symbol fixup for dvb_attach() (Greg Kroah-Hartman)   
  - xtensa: PMU: fix base address for the newer hardware (Max Filippov)   
  - backlight/lv5207lp: Compare against struct fb_info.device (Thomas Zimmermann)   
  - backlight/bd6107: Compare against struct fb_info.device (Thomas Zimmermann)   
  - backlight/gpio_backlight: Compare against struct fb_info.device (Thomas Zimmermann)   
  - ARM: OMAP2+: Fix -Warray-bounds warning in _pwrdm_state_switch() (Gustavo A. R. Silva)   
  - ipmi_si: fix a memleak in try_smi_init() (Yi Yang)   
  - ALSA: pcm: Fix missing fixup call in compat hw_refine ioctl (Takashi Iwai)   
  - PM / devfreq: Fix leak in devfreq_dev_release() (Boris Brezillon)   
  - igb: set max size RX buffer when store bad packet is enabled (Radoslaw Tyl) [Orabug: 35924096] {CVE-2023-45871}
  - skbuff: skb_segment, Call zero copy functions before using skbuff frags (Mohamed Khalfella)   
  - igmp: limit igmpv3_newpack() packet size to IP_MAX_MTU (Eric Dumazet) [Orabug: 35923999] {CVE-2023-42752}
  - virtio_ring: fix avail_wrap_counter in virtqueue_add_packed (Yuan Yao)   
  - cpufreq: Fix the race condition while updating the transition_task of policy (Liao Chang)   
  - dmaengine: ste_dma40: Add missing IRQ check in d40_probe (ruanjinjie)   
  - um: Fix hostaudio build errors (Randy Dunlap)   
  - mtd: rawnand: fsmc: handle clk prepare error in fsmc_nand_resume() (Yi Yang)   
  - rpmsg: glink: Add check for kstrdup (Jiasheng Jiang)   
  - phy/rockchip: inno-hdmi: do not power on rk3328 post pll on reg write (Jonas Karlman)   
  - phy/rockchip: inno-hdmi: round fractal pixclock in rk3328 recalc_rate (Zheng Yang)   
  - phy/rockchip: inno-hdmi: use correct vco_div_5 macro on rk3328 (Jonas Karlman)   
  - tracing: Fix race issue between cpu buffer write and swap (Zheng Yejian)   
  - HID: multitouch: Correct devm device reference for hidinput input_dev name (Rahul Rameshbabu)   
  - HID: logitech-dj: Fix error handling in logi_dj_recv_switch_to_dj_mode() (Nikita Zhandarovich)   
  - RDMA/siw: Correct wrong debug message (Guoqing Jiang)   
  - RDMA/siw: Balance the reference of cep->kref in the error path (Guoqing Jiang)   
  - amba: bus: fix refcount leak (Peng Fan)   
  - serial: tegra: handle clk prepare error in tegra_uart_hw_init() (Yi Yang)   
  - scsi: fcoe: Fix potential deadlock on &fip->ctlr_lock (Chengfeng Ye)   
  - scsi: core: Use 32-bit hostnum in scsi_host_lookup() (Tony Battersby)   
  - media: ov2680: Fix regulators being left enabled on ov2680_power_on() errors (Hans de Goede)   
  - media: ov2680: Fix vflip / hflip set functions (Hans de Goede)   
  - media: ov2680: Fix ov2680_bayer_order() (Hans de Goede)   
  - media: ov2680: Remove auto-gain and auto-exposure controls (Hans de Goede)   
  - media: i2c: ov2680: Set V4L2_CTRL_FLAG_MODIFY_LAYOUT on flips (Dave Stevenson)   
  - media: ov5640: Enable MIPI interface in ov5640_set_power_mipi() (Marek Vasut)   
  - media: i2c: ov5640: Configure HVP lines in s_power callback (Lad Prabhakar)   
  - USB: gadget: f_mass_storage: Fix unused variable warning (Alan Stern)   
  - media: go7007: Remove redundant if statement (Colin Ian King)   
  - iommu/vt-d: Fix to flush cache of PASID directory table (Yanfei Xu)   
  - IB/uverbs: Fix an potential error pointer dereference (Xiang Yang)   
  - driver core: test_async: fix an error code (Dan Carpenter)   
  - dma-buf/sync_file: Fix docs syntax (Rob Clark)   
  - coresight: tmc: Explicit type conversions to prevent integer overflow (Ruidong Tian)   
  - scsi: qedf: Do not touch __user pointer in qedf_dbg_fp_int_cmd_read() directly (Oleksandr Natalenko)   
  - scsi: qedf: Do not touch __user pointer in qedf_dbg_debug_cmd_read() directly (Oleksandr Natalenko)   
  - scsi: qedf: Do not touch __user pointer in qedf_dbg_stop_io_on_error_cmd_read() directly (Oleksandr Natalenko)   
  - x86/APM: drop the duplicate APM_MINOR_DEV macro (Randy Dunlap)   
  - serial: sprd: Fix DMA buffer leak issue (Chunyan Zhang)   
  - serial: sprd: Assign sprd_port after initialized to avoid wrong access (Chunyan Zhang)   
  - serial: sprd: remove redundant sprd_port cleanup (Chunyan Zhang)   
  - serial: sprd: getting port index via serial aliases only (Chunyan Zhang)   
  - scsi: qla4xxx: Add length check when parsing nlattrs (Lin Ma)   
  - scsi: be2iscsi: Add length check when parsing nlattrs (Lin Ma)   
  - scsi: iscsi: Add strlen() check in iscsi_if_set{_host}_param() (Lin Ma)   
  - usb: phy: mxs: fix getting wrong state with mxs_phy_is_otg_host() (Xu Yang)   
  - media: mediatek: vcodec: Return NULL if no vdec_fb is found (Irui Wang)   
  - media: cx24120: Add retval check for cx24120_message_send() (Daniil Dulov)   
  - media: dvb-usb: m920x: Fix a potential memory leak in m920x_i2c_xfer() (Christophe JAILLET)   
  - media: dib7000p: Fix potential division by zero (Daniil Dulov)   
  - drivers: usb: smsusb: fix error handling code in smsusb_init_device (Dongliang Mu)   
  - media: v4l2-core: Fix a potential resource leak in v4l2_fwnode_parse_link() (Christophe JAILLET)   
  - media: v4l2-fwnode: simplify v4l2_fwnode_parse_link (Marco Felsch)   
  - media: v4l2-fwnode: fix v4l2_fwnode_parse_link handling (Marco Felsch)   
  - NFS: Guard against READDIR loop when entry names exceed MAXNAMELEN (Benjamin Coddington)   
  - NFSD: da_addr_body field missing in some GETDEVICEINFO replies (Chuck Lever)   
  - fs: lockd: avoid possible wrong NULL parameter (Su Hui)   
  - jfs: validate max amount of blocks before allocation. (Alexei Filippov)   
  - powerpc/iommu: Fix notifiers being shared by PCI and VIO buses (Russell Currey)   
  - nfs/blocklayout: Use the passed in gfp flags (Dan Carpenter)   
  - wifi: ath10k: Use RMW accessors for changing LNKCTL (Ilpo Järvinen)   
  - drm/radeon: Use RMW accessors for changing LNKCTL (Ilpo Järvinen)   
  - drm/radeon: Prefer pcie_capability_read_word() (Frederick Lawler)   
  - drm/radeon: Replace numbers with PCI_EXP_LNKCTL2 definitions (Bjorn Helgaas)   
  - drm/radeon: Correct Transmit Margin masks (Bjorn Helgaas)   
  - drm/amdgpu: Use RMW accessors for changing LNKCTL (Ilpo Järvinen)   
  - drm/amdgpu: Prefer pcie_capability_read_word() (Frederick Lawler)   
  - drm/amdgpu: Replace numbers with PCI_EXP_LNKCTL2 definitions (Bjorn Helgaas)   
  - drm/amdgpu: Correct Transmit Margin masks (Bjorn Helgaas)   
  - PCI: Add #defines for Enter Compliance, Transmit Margin (Bjorn Helgaas)   
  - powerpc/fadump: reset dump area size if fadump memory reserve fails (Sourabh Jain)   
  - clk: imx: composite-8m: fix clock pauses when set_rate would be a no-op (Ahmad Fatoum)   
  - PCI/ASPM: Use RMW accessors for changing LNKCTL (Ilpo Järvinen)   
  - PCI: pciehp: Use RMW accessors for changing LNKCTL (Ilpo Järvinen)   
  - PCI: Mark NVIDIA T4 GPUs to avoid bus reset (Wu Zongyong)   
  - clk: sunxi-ng: Modify mismatched function name (Zhang Jianhua)   
  - drivers: clk: keystone: Fix parameter judgment in _of_pll_clk_init() (Minjie Du)   
  - ipmi:ssif: Fix a memory leak when scanning for an adapter (Corey Minyard)   
  - ipmi:ssif: Add check for kstrdup (Jiasheng Jiang)   
  - of: unittest: Fix overlay type in apply/revert check (Geert Uytterhoeven)   
  - drm/mediatek: Fix potential memory leak if vmap() fail (Sui Jingfeng)   
  - audit: fix possible soft lockup in __audit_inode_child() (Gaosheng Cui)   
  - smackfs: Prevent underflow in smk_set_cipso() (Dan Carpenter)   
  - drm/msm/mdp5: Don't leak some plane state (Daniel Vetter)   
  - ima: Remove deprecated IMA_TRUSTED_KEYRING Kconfig (Nayna Jain)   
  - drm/panel: simple: Add missing connector type and pixel format for AUO T215HVN01 (Marek Vasut)   
  - drm/armada: Fix off-by-one error in armada_overlay_get_property() (Geert Uytterhoeven)   
  - of: unittest: fix null pointer dereferencing in of_unittest_find_node_by_name() (Ruan Jinjie)   
  - drm/tegra: dpaux: Fix incorrect return value of platform_get_irq (Yangtao Li)   
  - drm/tegra: Remove superfluous error messages around platform_get_irq() (Tan Zhongjun)   
  - md/md-bitmap: hold 'reconfig_mutex' in backlog_store() (Yu Kuai)   
  - md/bitmap: don't set max_write_behind if there is no write mostly device (Guoqing Jiang)   
  - drm/amdgpu: Update min() to min_t() in 'amdgpu_info_ioctl' (Srinivasan Shanmugam)   
  - arm64: dts: qcom: sdm845: Add missing RPMh power domain to GCC (Manivannan Sadhasivam)   
  - ARM: dts: BCM53573: Fix Ethernet info for Luxul devices (Rafał Miłecki)   
  - drm: adv7511: Fix low refresh rate register for ADV7533/5 (Bogdan Togorean)   
  - ARM: dts: samsung: s5pv210-smdkv210: correct ethernet reg addresses (split) (Krzysztof Kozlowski)   
  - ARM: dts: s5pv210: add dummy 5V regulator for backlight on SMDKv210 (Krzysztof Kozlowski)   
  - ARM: dts: s5pv210: correct ethernet unit address in SMDKV210 (Krzysztof Kozlowski)   
  - ARM: dts: s5pv210: use defines for IRQ flags in SMDKV210 (Krzysztof Kozlowski)   
  - ARM: dts: s5pv210: add RTC 32 KHz clock in SMDKV210 (Krzysztof Kozlowski)   
  - ARM: dts: samsung: s3c6410-mini6410: correct ethernet reg addresses (split) (Krzysztof Kozlowski)   
  - ARM: dts: s3c64xx: align pinctrl with dtschema (Krzysztof Kozlowski)   
  - ARM: dts: s3c6410: align node SROM bus node name with dtschema in Mini6410 (Krzysztof Kozlowski)   
  - ARM: dts: s3c6410: move fixed clocks under root node in Mini6410 (Krzysztof Kozlowski)   
  - drm/etnaviv: fix dumping of active MMU context (Lucas Stach)   
  - ARM: dts: BCM53573: Use updated "spi-gpio" binding properties (Rafał Miłecki)   
  - ARM: dts: BCM53573: Add cells sizes to PCIe node (Rafał Miłecki)   
  - ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger (Rafał Miłecki)   
  - drm/amdgpu: avoid integer overflow warning in amdgpu_device_resize_fb_bar() (Arnd Bergmann)   
  - quota: fix dqput() to follow the guarantees dquot_srcu should provide (Baokun Li)   
  - quota: add new helper dquot_active() (Baokun Li)   
  - quota: rename dquot_active() to inode_quota_active() (Baokun Li)   
  - quota: factor out dquot_write_dquot() (Baokun Li)   
  - quota: avoid increasing DQST_LOOKUPS when iterating over dirty/inuse list (Chengguang Xu)   
  - drm/bridge: tc358764: Fix debug print parameter order (Marek Vasut)   
  - netrom: Deny concurrent connect(). (Kuniyuki Iwashima)   
  - net/sched: sch_hfsc: Ensure inner classes have fsc curve (Budimir Markovic) [Orabug: 35810542] {CVE-2023-4623}
  - mlxsw: i2c: Limit single transaction buffer size (Vadim Pasternak)   
  - mlxsw: i2c: Fix chunk size setting in output mailbox buffer (Vadim Pasternak)   
  - net: arcnet: Do not call kfree_skb() under local_irq_disable() (Jinjie Ruan)   
  - wifi: ath9k: use IS_ERR() with debugfs_create_dir() (Wang Ming)   
  - wifi: mwifiex: avoid possible NULL skb pointer dereference (Dmitry Antipov)   
  - wifi: ath9k: protect WMI command response buffer replacement with a lock (Fedor Pchelkin)   
  - wifi: ath9k: fix races between ath9k_wmi_cmd and ath9k_wmi_ctrl_rx (Fedor Pchelkin)   
  - wifi: mwifiex: Fix missed return in oob checks failed path (Polaris Pi)   
  - wifi: mwifiex: fix memory leak in mwifiex_histogram_read() (Dmitry Antipov)   
  - fs: ocfs2: namei: check return value of ocfs2_add_entry() (Artem Chernyshev)   
  - lwt: Check LWTUNNEL_XMIT_CONTINUE strictly (Yan Zhai)   
  - lwt: Fix return values of BPF xmit ops (Yan Zhai)   
  - hwrng: iproc-rng200 - Implement suspend and resume calls (Florian Fainelli)   
  - hwrng: iproc-rng200 - use semicolons rather than commas to separate statements (Julia Lawall)   
  - crypto: caam - fix unchecked return value error (Gaurav Jain)   
  - Bluetooth: nokia: fix value check in nokia_bluetooth_serdev_probe() (Yuanjun Gong)   
  - crypto: stm32 - Properly handle pm_runtime_get failing (Uwe Kleine-König)   
  - wifi: mwifiex: fix error recovery in PCIE buffer descriptor management (Dmitry Antipov)   
  - mwifiex: switch from 'pci_' to 'dma_' API (Christophe JAILLET)   
  - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Polaris Pi)   
  - can: gs_usb: gs_usb_receive_bulk_callback(): count RX overflow errors also in case of OOM (Marc Kleine-Budde)   
  - spi: tegra20-sflash: fix to check return value of platform_get_irq() in tegra_sflash_probe() (Zhang Shurong)   
  - regmap: rbtree: Use alloc_flags for memory allocations (Dan Carpenter)   
  - tcp: tcp_enter_quickack_mode() should be static (Eric Dumazet)   
  - bpf: Clear the probe_addr for uprobe (Yafang Shao)   
  - cpufreq: powernow-k8: Use related_cpus instead of cpus in driver.exit() (Liao Chang)   
  - perf/imx_ddr: don't enable counter0 if none of 4 counters are used (Xu Yang)   
  - x86/decompressor: Don't rely on upper 32 bits of GPRs being preserved (Ard Biesheuvel)   
  - x86/boot: Annotate local functions (Jiri Slaby)   
  - x86/asm: Make more symbols local (Jiri Slaby)   
  - OPP: Fix passing 0 to PTR_ERR in _opp_attach_genpd() (Manivannan Sadhasivam)   
  - tmpfs: verify {g,u}id mount options correctly (Christian Brauner)   
  - fs: Fix error checking for d_hash_and_lookup() (Wang Ming)   
  - new helper: lookup_positive_unlocked() (Al Viro)   
  - eventfd: prevent underflow for eventfd semaphores (Wen Yang)   
  - eventfd: Export eventfd_ctx_do_read() (David Woodhouse)   
  - reiserfs: Check the return value from __getblk() (Matthew Wilcox)   
  - Revert "net: macsec: preserve ingress frame ordering" (Sabrina Dubroca)   
  - Revert "net: macsec: Severe performance regression in "...preserve ordering"" (Sherry Yang)   
  - udf: Handle error when adding extent to a file (Jan Kara)   
  - udf: Check consistency of Space Bitmap Descriptor (Vladislav Efanov)   
  - powerpc/32s: Fix assembler warning about r0 (Christophe Leroy)   
  - net: Avoid address overwrite in kernel_connect (Jordan Rife)   
  - platform/mellanox: Fix mlxbf-tmfifo not handling all virtio CONSOLE notifications (Shih-Yi Chen)   
  - ALSA: seq: oss: Fix racy open/close of MIDI devices (Takashi Iwai)   
  - scsi: storvsc: Always set no_report_opcodes (Michael Kelley)   
  - cifs: add a warning when the in-flight count goes negative (Shyam Prasad N)   
  - sctp: handle invalid error codes without calling BUG() (Dan Carpenter)   
  - bnx2x: fix page fault following EEH recovery (David Christensen)   
  - netlabel: fix shift wrapping bug in netlbl_catmap_setlong() (Dmitry Mastykin)   
  - scsi: qedi: Fix potential deadlock on &qedi_percpu->p_work_lock (Chengfeng Ye)   
  - idmaengine: make FSL_EDMA and INTEL_IDMA64 depends on HAS_IOMEM (Baoquan He)   
  - net: usb: qmi_wwan: add Quectel EM05GV2 (Martin Kohn)   
  - clk: fixed-mmio: make COMMON_CLK_FIXED_MMIO depend on HAS_IOMEM (Baoquan He)   
  - security: keys: perform capable check only on privileged operations (Christian Göttsche)   
  - platform/x86: huawei-wmi: Silence ambient light sensor (Konstantin Shelekhin)   
  - platform/x86: intel: hid: Always call BTNL ACPI method (Hans de Goede)   
  - ASoC: atmel: Fix the 8K sample parameter in I2SC master (Guiting Shen)   
  - ASoc: codecs: ES8316: Fix DMIC config (Edgar)   
  - fs/nls: make load_nls() take a const parameter (Winston Wen)   
  - s390/dasd: fix hanging device after request requeue (Stefan Haberland)   
  - s390/dasd: use correct number of retries for ERP requests (Stefan Haberland)   
  - m68k: Fix invalid .section syntax (Ben Hutchings)   
  - vxlan: generalize vxlan_parse_gpe_hdr and remove unused args (Jiri Benc)   
  - ethernet: atheros: fix return value check in atl1c_tso_csum() (Yuanjun Gong)   
  - ASoC: da7219: Check for failure reading AAD IRQ events (Dmytro Maluka)   
  - ASoC: da7219: Flush pending AAD IRQ when suspending (Dmytro Maluka)   
  - 9p: virtio: make sure 'offs' is initialized in zc_request (Dominique Martinet)   
  - nilfs2: fix WARNING in mark_buffer_dirty due to discarded buffer reuse (Ryusuke Konishi)   
  - nilfs2: fix general protection fault in nilfs_lookup_dirty_data_buffers() (Ryusuke Konishi)   
  - fsi: master-ast-cf: Add MODULE_FIRMWARE macro (Juerg Haefliger)   
  - firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe (Wang Ming)   
  - serial: sc16is7xx: fix bug when first setting GPIO direction (Hugo Villeneuve)   
  - Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition (Zheng Wang) [Orabug: 35282807] {CVE-2023-1989}
  - staging: rtl8712: fix race condition (Nam Cao)   
  - HID: wacom: remove the battery when the EKR is off (Aaron Armstrong Skomra)   
  - USB: serial: option: add FOXCONN T99W368/T99W373 product (Slark Xiao)   
  - USB: serial: option: add Quectel EM05G variant (0x030e) (Martin Kohn)   
  - modules: only allow symbol_get of EXPORT_SYMBOL_GPL modules (Christoph Hellwig)   
  - rtc: ds1685: use EXPORT_SYMBOL_GPL for ds1685_rtc_poweroff (Christoph Hellwig)   
  - net: enetc: use EXPORT_SYMBOL_GPL for enetc_phc_index (Christoph Hellwig)   
  - mmc: au1xmmc: force non-modular build and remove symbol_get usage (Christoph Hellwig)   
  - ARM: pxa: remove use of symbol_get() (Arnd Bergmann)   
  - erofs: ensure that the post-EOF tails are all zeroed (Gao Xiang)


author: Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.325.4.el8uek]
changelog:
  - net: nfc: llcp: Add lock when modifying device list (Jeremy Cline)   
  - net: dsa: mv88e6xxx: Avoid EEPROM timeout when EEPROM is absent (Fabio Estevam)   
  - ima: Finish deprecation of IMA_TRUSTED_KEYRING Kconfig (Oleksandr Tymoshenko)   
  - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Pin-yen Lin)   
  - Revert "PCI: qcom: Disable write access to read only registers for IP v2.3.3" (Greg Kroah-Hartman)   
  - rbd: take header_rwsem in rbd_dev_refresh() only when updating (Ilya Dryomov)   
  - rbd: decouple parent info read-in from updating rbd_dev (Ilya Dryomov)   
  - rbd: decouple header read-in from updating rbd_dev->header (Ilya Dryomov)   
  - rbd: move rbd_dev_refresh() definition (Ilya Dryomov)   
  - MIPS: Alchemy: only build mmc support helpers if au1xmmc is enabled (Christoph Hellwig)   
  - netfilter: ipset: Fix race between IPSET_CMD_CREATE and IPSET_CMD_SWAP (Jozsef Kadlecsik) [Orabug: 35865152] {CVE-2023-42756}
  - dccp: fix dccp_v4_err()/dccp_v6_err() again (Eric Dumazet)   
  - fix breakage in do_rmdir() (Al Viro)  [Orabug: 35722671]  
  - scsi: target: core: Fix deadlock due to recursive locking (Junxiao Bi)  [Orabug: 35761341]  
  - rds: Add proper refcnt when an RDS MR references an RDS Socket (Håkon Bugge)  [Orabug: 35836949]  
  - rds: Check for UAF in rds_destroy_mr (Håkon Bugge)  [Orabug: 35836949]  
  - i2c: designware: Fix corrupted memory seen in the ISR (Jan Bottorff)  [Orabug: 35857601]  
  - xfs: reserve less log space when recovering log intent items (Darrick J. Wong)  [Orabug: 35871840]  
  - octeontx_edac: Fix mcc_edac failure at boot (Thomas Tai)  [Orabug: 35895526]  
  - bpf: bpf_check() must fail when btf_linux is null (Dave Kleikamp)  [Orabug: 35899889]


author: Brian Maly <brian.maly@oracle.com> [5.4.17-2136.326.1.el8uek]
changelog:
  - mm: fix munmap() of reserved va ranges (Anthony Yznaga)  [Orabug: 35843809]  
  - mm: fix mmap() of reserved va ranges (Anthony Yznaga)  [Orabug: 35843809]  
  - mm: reinstall placeholder mappings before downgrading mmap lock (Anthony Yznaga)  [Orabug: 35843809]  
  - mm: mapping over a reserved va range may unmap twice (Anthony Yznaga)  [Orabug: 35843809]  
  - mm: fix update of total_vm for reserved va placeholders (Anthony Yznaga)  [Orabug: 35843809]  
  - mm: enable merging of reserved va placeholders (Anthony Yznaga)  [Orabug: 35843809]  
  - rds: Provision to allow all trace points at module load time (Arumugam Kolappan)  [Orabug: 35916078]  
  - rds/ib: Preserve dest qp num in the connect request (Arumugam Kolappan)  [Orabug: 35926165]


author: Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.326.3.el8uek]
changelog:
  - LTS tag: v5.4.259 (Sherry Yang)   
  - xfrm6: fix inet6_dev refcount underflow problem (Zhang Changzhong)   
  - Bluetooth: hci_sock: Correctly bounds check and pad HCI_MON_NEW_INDEX name (Kees Cook)   
  - Bluetooth: hci_sock: fix slab oob read in create_monitor_event (Edward AD)   
  - phy: mapphone-mdm6600: Fix pinctrl_pm handling for sleep pins (Tony Lindgren)   
  - phy: mapphone-mdm6600: Fix runtime PM for remove (Tony Lindgren)   
  - phy: mapphone-mdm6600: Fix runtime disable on probe (Tony Lindgren)   
  - ASoC: pxa: fix a memory leak in probe() (Dan Carpenter)   
  - gpio: vf610: set value before the direction to avoid a glitch (Haibo Chen)   
  - s390/pci: fix iommu bitmap allocation (Niklas Schnelle)   
  - perf: Disallow mis-matched inherited group reads (Peter Zijlstra)   
  - USB: serial: option: add Fibocom to DELL custom modem FM101R-GL (Puliang Lu)   
  - USB: serial: option: add entry for Sierra EM9191 with new firmware (Benoît Monin)   
  - USB: serial: option: add Telit LE910C4-WWX 0x1035 composition (Fabio Porcedda)   
  - ACPI: irq: Fix incorrect return value in acpi_register_gsi() (Sunil V L)   
  - Revert "pinctrl: avoid unsafe code pattern in find_pinctrl()" (Andy Shevchenko)   
  - mmc: core: Capture correct oemid-bits for eMMC cards (Avri Altman)   
  - mmc: core: sdio: hold retuning if sdio in 1-bit mode (Haibo Chen)   
  - mtd: physmap-core: Restore map_rom fallback (Geert Uytterhoeven)   
  - mtd: spinand: micron: correct bitmask for ecc status (Martin Kurbanov)   
  - mtd: rawnand: qcom: Unmap the right resource upon probe failure (Bibek Kumar Patro)   
  - Bluetooth: hci_event: Fix using memcmp when comparing keys (Luiz Augusto von Dentz)   
  - HID: multitouch: Add required quirk for Synaptics 0xcd7e device (Rahul Rameshbabu)   
  - btrfs: fix some -Wmaybe-uninitialized warnings in ioctl.c (Josef Bacik)   
  - drm: panel-orientation-quirks: Add quirk for One Mix 2S (Kai Uwe Broulik)   
  - sky2: Make sure there is at least one frag_addr available (Kees Cook)   
  - regulator/core: Revert "fix kobject release warning and memory leak in regulator_register()" (Michał Mirosław)   
  - wifi: cfg80211: avoid leaking stack data into trace (Benjamin Berg)   
  - wifi: mac80211: allow transmitting EAPOL frames with tainted key (Wen Gong)   
  - Bluetooth: hci_core: Fix build warnings (Luiz Augusto von Dentz)   
  - Bluetooth: Avoid redundant authentication (Ying Hsu)   
  - HID: holtek: fix slab-out-of-bounds Write in holtek_kbd_input_event (Ma Ke)   
  - tracing: relax trace_event_eval_update() execution with cond_resched() (Clément Léger)   
  - ata: libata-eh: Fix compilation warning in ata_eh_link_report() (Damien Le Moal)   
  - gpio: timberdale: Fix potential deadlock on &tgpio->lock (Chengfeng Ye)   
  - overlayfs: set ctime when setting mtime and atime (Jeff Layton)   
  - i2c: mux: Avoid potential false error message in i2c_mux_add_adapter (Heiner Kallweit)   
  - btrfs: initialize start_slot in btrfs_log_prealloc_extents (Josef Bacik)   
  - btrfs: return -EUCLEAN for delayed tree ref with a ref count not equals to 1 (Filipe Manana)   
  - ARM: dts: ti: omap: Fix noisy serial with overrun-throttle-ms for mapphone (Tony Lindgren)   
  - ACPI: resource: Skip IRQ override on ASUS ExpertBook B1402CBA (Hans de Goede)   
  - ACPI: resource: Skip IRQ override on ASUS ExpertBook B1502CBA (Paul Menzel)   
  - ACPI: resource: Skip IRQ override on Asus Expertbook B2402CBA (Tamim Khan)   
  - ACPI: resource: Add Asus ExpertBook B2502 to Asus quirks (Hans de Goede)   
  - ACPI: resource: Skip IRQ override on Asus Vivobook S5602ZA (Tamim Khan)   
  - ACPI: resource: Add ASUS model S5402ZA to quirks (Kellen Renshaw)   
  - ACPI: resource: Skip IRQ override on Asus Vivobook K3402ZA/K3502ZA (Tamim Khan)   
  - ACPI: resources: Add DMI-based legacy IRQ override quirk (Hui Wang)   
  - ACPI: Drop acpi_dev_irqresource_disabled() (John Garry)   
  - resource: Add irqresource_disabled() (John Garry)   
  - net: pktgen: Fix interface flags printing (Gavrilov Ilia)   
  - netfilter: nft_set_rbtree: .deactivate fails if element has expired (Pablo Neira Ayuso)   
  - neighbor: tracing: Move pin6 inside CONFIG_IPV6=y section (Geert Uytterhoeven)   
  - net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve (Pedro Tammela)   
  - i40e: prevent crash on probe if hw registers have invalid values (Michal Schmidt)   
  - net: usb: smsc95xx: Fix an error code in smsc95xx_reset() (Dan Carpenter)   
  - ipv4: fib: annotate races around nh->nh_saddr_genid and nh->nh_saddr (Eric Dumazet)   
  - tun: prevent negative ifindex (Eric Dumazet)   
  - tcp: tsq: relax tcp_small_queue_check() when rtx queue contains a single skb (Eric Dumazet)   
  - tcp: fix excessive TLP and RACK timeouts from HZ rounding (Neal Cardwell)   
  - net: rfkill: gpio: prevent value glitch during probe (Josua Mayer)   
  - net: ipv6: fix return value check in esp_remove_trailer (Ma Ke)   
  - net: ipv4: fix return value check in esp_remove_trailer (Ma Ke)   
  - xfrm: interface: use DEV_STATS_INC() (Eric Dumazet)   
  - xfrm: fix a data-race in xfrm_gen_index() (Eric Dumazet)   
  - qed: fix LL2 RX buffer allocation (Manish Chopra)   
  - netfilter: nft_payload: fix wrong mac header matching (Florian Westphal)   
  - KVM: x86: Mask LVTPC when handling a PMI (Jim Mattson)   
  - regmap: fix NULL deref on lookup (Johan Hovold)   
  - nfc: nci: fix possible NULL pointer dereference in send_acknowledge() (Krzysztof Kozlowski)   
  - ice: fix over-shifted variable (Jesse Brandeburg)   
  - Bluetooth: avoid memcmp() out of bounds warning (Arnd Bergmann)   
  - Bluetooth: hci_event: Fix coding style (Luiz Augusto von Dentz)   
  - Bluetooth: vhci: Fix race when opening vhci device (Arkadiusz Bokowy)   
  - Bluetooth: Fix a refcnt underflow problem for hci_conn (Ziyang Xuan)   
  - Bluetooth: Reject connection with the device which has same BD_ADDR (Lee, Chun-Yi)   
  - Bluetooth: hci_event: Ignore NULL link key (Lee, Chun-Yi)   
  - usb: hub: Guard against accesses to uninitialized BOS descriptors (Ricardo Cañuelo)   
  - Documentation: sysctl: align cells in second content column (Bagas Sanjaya)   
  - dev_forward_skb: do not scrub skb mark within the same name space (Nicolas Dichtel)   
  - ravb: Fix use-after-free issue in ravb_tx_timeout_work() (Yoshihiro Shimoda)   
  - powerpc/64e: Fix wrong test in __ptep_test_and_clear_young() (Christophe Leroy)   
  - powerpc/8xx: Fix pte_access_permitted() for PAGE_NONE (Christophe Leroy)   
  - dmaengine: mediatek: Fix deadlock caused by synchronize_irq() (Duoming Zhou)   
  - x86/cpu: Fix AMD erratum #1485 on Zen4-based CPUs (Borislav Petkov (AMD))   
  - usb: gadget: ncm: Handle decoding of multiple NTB's in unwrap call (Krishna Kurapati)   
  - usb: gadget: udc-xilinx: replace memcpy with memcpy_toio (Piyush Mehta)   
  - pinctrl: avoid unsafe code pattern in find_pinctrl() (Dmitry Torokhov)   
  - cgroup: Remove duplicates in cgroup v1 tasks file (Michal Koutný)   
  - Input: xpad - add PXN V900 support (Matthias Berndt)   
  - Input: psmouse - fix fast_reconnect function for PS/2 mode (Jeffery Miller)   
  - Input: powermate - fix use-after-free in powermate_config_complete (Javier Carrasco)   
  - ceph: fix incorrect revoked caps assert in ceph_fill_file_size() (Xiubo Li)   
  - libceph: use kernel_connect() (Jordan Rife)   
  - mcb: remove is_added flag from mcb_device struct (Jorge Sanjuan Garcia)   
  - iio: pressure: ms5611: ms5611_prom_is_valid false negative bug (Alexander Zangerl)   
  - iio: pressure: dps310: Adjust Timeout Settings (Lakshmi Yadlapati)   
  - iio: pressure: bmp280: Fix NULL pointer exception (Phil Elwell)   
  - usb: musb: Modify the "HWVers" register address (Xingxing Luo)   
  - usb: musb: Get the musb_qh poniter after musb_giveback (Xingxing Luo)   
  - usb: dwc3: Soft reset phy on probe for host (Thinh Nguyen)   
  - net: usb: dm9601: fix uninitialized variable use in dm9601_mdio_read (Javier Carrasco)   
  - usb: xhci: xhci-ring: Use sysdev for mapping bounce buffer (Wesley Cheng)   
  - dmaengine: stm32-mdma: abort resume if no ongoing transfer (Amelie Delaunay)   
  - workqueue: Override implicit ordered attribute in workqueue_apply_unbound_cpumask() (Waiman Long)   
  - nfc: nci: assert requested protocol is valid (Jeremy Cline)   
  - net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() (Eric Dumazet)   
  - ixgbe: fix crash with empty VF macvlan list (Dan Carpenter)   
  - drm/vmwgfx: fix typo of sizeof argument (Konstantin Meskhidze)   
  - xen-netback: use default TX queue size for vifs (Roger Pau Monne)   
  - mlxsw: fix mlxsw_sp2_nve_vxlan_learning_set() return type (Dan Carpenter)   
  - ieee802154: ca8210: Fix a potential UAF in ca8210_probe (Dinghao Liu)   
  - ravb: Fix up dma_free_coherent() call in ravb_remove() (Yoshihiro Shimoda)   
  - drm/msm/dsi: skip the wait for video mode done if not applicable (Abhinav Kumar)   
  - drm: etvnaviv: fix bad backport leading to warning (Martin Fuzzey)   
  - quota: Fix slow quotaoff (Jan Kara)   
  - HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect (Hans de Goede)   
  - pwm: hibvt: Explicitly set .polarity in .get_state() (Uwe Kleine-König)   
  - lib/test_meminit: fix off-by-one error in test_pages() (Greg Kroah-Hartman)   
  - RDMA/cxgb4: Check skb value for failure to allocate (Artem Chernyshev)   
  - LTS tag: v5.4.258 (Sherry Yang)   
  - xen/events: replace evtchn_rwlock with RCU (Juergen Gross)   
  - ima: rework CONFIG_IMA dependency block (Arnd Bergmann)   
  - NFS: Fix a race in __nfs_list_for_each_server() (Trond Myklebust)   
  - parisc: Restore __ldcw_align for PA-RISC 2.0 processors (John David Anglin)   
  - RDMA/mlx5: Fix NULL string error (Shay Drory)   
  - RDMA/siw: Fix connection failure handling (Bernard Metzler)   
  - RDMA/uverbs: Fix typo of sizeof argument (Konstantin Meskhidze)   
  - RDMA/cma: Fix truncation compilation warning in make_cma_ports (Leon Romanovsky)   
  - gpio: pxa: disable pinctrl calls for MMP_GPIO (Duje Mihanović)   
  - gpio: aspeed: fix the GPIO number passed to pinctrl_gpio_set_config() (Bartosz Golaszewski)   
  - IB/mlx4: Fix the size of a buffer in add_port_entries() (Christophe JAILLET)   
  - RDMA/core: Require admin capabilities to set system parameters (Leon Romanovsky)   
  - cpupower: add Makefile dependencies for install targets (Ivan Babrou)   
  - sctp: update hb timer immediately after users change hb_interval (Xin Long)   
  - sctp: update transport state when processing a dupcook packet (Xin Long)   
  - tcp: fix delayed ACKs for MSS boundary condition (Neal Cardwell)   
  - tcp: fix quick-ack counting to count actual ACKs of new data (Neal Cardwell)   
  - net: stmmac: dwmac-stm32: fix resume on STM32 MCU (Ben Wolsieffer)   
  - netfilter: handle the connecting collision properly in nf_conntrack_proto_sctp (Xin Long)   
  - net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg (Shigeru Yoshida)   
  - ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data() (David Howells)   
  - net: fix possible store tearing in neigh_periodic_work() (Eric Dumazet)   
  - modpost: add missing else to the "of" check (Mauricio Faria de Oliveira)   
  - NFSv4: Fix a nfs4_state_manager() race (Trond Myklebust)   
  - NFS: Add a helper nfs_client_for_each_server() (Trond Myklebust)   
  - NFS4: Trace state recovery operation (Chuck Lever)   
  - regmap: rbtree: Fix wrong register marked as in-cache when creating new node (Richard Fitzgerald)   
  - wifi: mt76: mt76x02: fix MT76x0 external LNA gain handling (Felix Fietkau)   
  - drivers/net: process the result of hdlc_open() and add call of hdlc_close() in uhdlc_close() (Alexandra Diupina)   
  - wifi: iwlwifi: dbg_ini: fix structure packing (Arnd Bergmann)   
  - ubi: Refuse attaching if mtd's erasesize is 0 (Zhihao Cheng)   
  - net: prevent rewrite of msg_name in sock_sendmsg() (Jordan Rife)   
  - wifi: mwifiex: Fix tlv_buf_left calculation (Gustavo A. R. Silva)   
  - qed/red_ll2: Fix undefined behavior bug in struct qed_ll2_info (Gustavo A. R. Silva)   
  - scsi: zfcp: Fix a double put in zfcp_port_enqueue() (Dinghao Liu)   
  - fs: binfmt_elf_efpic: fix personality for ELF-FDPIC (Greg Ungerer)   
  - ata: libata-sata: increase PMP SRST timeout to 10s (Matthias Schiffer)   
  - ata: libata-core: Do not register PM operations for SAS ports (Damien Le Moal)   
  - ata: libata-core: Fix port and device removal (Damien Le Moal)   
  - ata: libata-core: Fix ata_port_request_pm() locking (Damien Le Moal)   
  - net: thunderbolt: Fix TCPv6 GSO checksum calculation (Mika Westerberg)   
  - btrfs: properly report 0 avail for very full file systems (Josef Bacik)   
  - i2c: i801: unregister tco_pdev in i801_probe() error path (Heiner Kallweit)   
  - ata: libata-scsi: ignore reserved bits for REPORT SUPPORTED OPERATION CODES (Niklas Cassel)   
  - ALSA: hda: Disable power save for solving pop issue on Lenovo ThinkCentre M70q (Kailang Yang)   
  - nilfs2: fix potential use after free in nilfs_gccache_submit_read_data() (Pan Bian)   
  - serial: 8250_port: Check IRQ data before use (Andy Shevchenko)   
  - Smack:- Use overlay inode label in smack_inode_copy_up() (Vishal Goel)   
  - smack: Retrieve transmuting information in smack_inode_getsecurity() (Roberto Sassu)   
  - smack: Record transmuting in smk_transmuted (Roberto Sassu)   
  - i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann)   
  - i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann)   
  - i40e: improve locking of mac_filter_hash (Stefan Assmann)   
  - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Mika Westerberg)   
  - watchdog: iTCO_wdt: No need to stop the timer in probe (Mika Westerberg)   
  - nvme-pci: do not set the NUMA node of device if it has none (Pratyush Yadav)   
  - fbdev/sh7760fb: Depend on FB=y (Thomas Zimmermann)   
  - ncsi: Propagate carrier gain/loss events to the NCSI controller (Johnathan Mantey)   
  - powerpc/watchpoints: Annotate atomic context in more places (Benjamin Gray)   
  - bpf: Clarify error expectations from bpf_clone_redirect (Stanislav Fomichev)   
  - spi: nxp-fspi: reset the FLSHxCR1 registers (Han Xu)   
  - ata: libata-eh: do not clear ATA_PFLAG_EH_PENDING in ata_eh_reset() (Niklas Cassel)   
  - ring-buffer: Avoid softlockup in ring_buffer_resize() (Zheng Yejian)   
  - selftests/ftrace: Correctly enable event in instance-event.tc (Zheng Yejian)   
  - parisc: irq: Make irq_stack_union static to avoid sparse warning (Helge Deller)   
  - parisc: drivers: Fix sparse warning (Helge Deller)   
  - parisc: iosapic.c: Fix sparse warnings (Helge Deller)   
  - parisc: sba: Fix compile warning wrt list of SBA devices (Helge Deller)   
  - gpio: pmic-eic-sprd: Add can_sleep flag for PMIC EIC chip (Wenhua Lin)   
  - xtensa: boot/lib: fix function prototypes (Max Filippov)   
  - xtensa: boot: don't add include-dirs (Randy Dunlap)   
  - xtensa: iss/network: make functions static (Randy Dunlap)   
  - xtensa: add default definition for XCHAL_HAVE_DIV32 (Max Filippov)   
  - bus: ti-sysc: Fix SYSC_QUIRK_SWSUP_SIDLE_ACT handling for uart wake-up (Tony Lindgren)   
  - ARM: dts: ti: omap: motorola-mapphone: Fix abe_clkctrl warning on boot (Tony Lindgren)   
  - clk: tegra: fix error return case for recalc_rate (Timo Alho)   
  - ata: libata: disallow dev-initiated LPM transitions to unsupported states (Niklas Cassel)   
  - drm/amd/display: prevent potential division by zero errors (Hamza Mahfooz)   
  - drm/amd/display: Fix LFC multiplier changing erratically (Anthony Koo)   
  - drm/amd/display: Reinstate LFC optimization (Amanda Liu)   
  - scsi: qla2xxx: Fix deletion race condition (Quinn Tran)   
  - Input: i8042 - add quirk for TUXEDO Gemini 17 Gen1/Clevo PD70PN (Werner Sembach)   
  - i2c: mux: demux-pinctrl: check the return value of devm_kstrdup() (Xiaoke Wang)   
  - gpio: tb10x: Fix an error handling path in tb10x_gpio_probe() (Christophe JAILLET)   
  - team: fix null-ptr-deref when team device type is changed (Ziyang Xuan)   
  - net: bridge: use DEV_STATS_INC() (Eric Dumazet)   
  - net: hns3: add 5ms delay before clear firmware reset irq source (Jie Wang)   
  - powerpc/perf/hv-24x7: Update domain value check (Kajol Jain)   
  - ipv4: fix null-deref in ipv4_link_failure (Kyle Zeng)   
  - i40e: Fix VF VLAN offloading when port VLAN is configured (Ivan Vecera)   
  - i40e: Fix warning message and call stack during rmmod i40e driver (Karen Sornek)   
  - ASoC: imx-audmix: Fix return error with devm_clk_get() (Shengjiu Wang)   
  - selftests: tls: swap the TX and RX sockets in some tests (Sabrina Dubroca)   
  - selftests/tls: Add {} to avoid static checker warning (Kees Cook)   
  - bpf: Avoid deadlock when using queue and stack maps from NMI (Toke Høiland-Jørgensen)   
  - netfilter: nf_tables: disallow element removal on anonymous sets (Pablo Neira Ayuso)   
  - ASoC: meson: spdifin: start hw on dai probe (Jerome Brunet)   
  - ext4: do not let fstrim block system suspend (Jan Kara)   
  - ext4: move setting of trimmed bit into ext4_try_to_trim_range() (Jan Kara)   
  - ext4: replace the traditional ternary conditional operator with with max()/min() (Kemeng Shi)   
  - ext4: mark group as trimmed only if it was fully scanned (Dmitry Monakhov)   
  - ext4: change s_last_trim_minblks type to unsigned long (Lukas Czerner)   
  - ext4: scope ret locally in ext4_try_to_trim_range() (Lukas Bulwahn)   
  - ext4: add new helper interface ext4_try_to_trim_range() (Wang Jianchao)   
  - ext4: remove the 'group' parameter of ext4_trim_extent (Wang Jianchao)   
  - ata: libahci: clear pending interrupt status (Szuying Chen)   
  - tracing: Increase trace array ref count on enable and filter files (Steven Rostedt (Google))   
  - SUNRPC: Mark the cred for revalidation if the server rejects it (Trond Myklebust)   
  - NFS/pNFS: Report EINVAL errors from connect() to the server (Trond Myklebust)


author: Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.326.4.el8uek]
changelog:
  - Revert "mmc: core: Capture correct oemid-bits for eMMC cards" (Dominique Martinet)   
  - media: dvb-usb-v2: af9035: fix missing unlock (Hans Verkuil)   
  - perf/core: Fix potential NULL deref (Peter Zijlstra)   
  - i2c: aspeed: Fix i2c bus hang in slave read (Jian Zhang)   
  - virtio-mmio: fix memory leak of vm_dev (Maximilian Heyne)   
  - net/rds: Use proper peer port number even when not connected (Greg Jumper)  [Orabug: 35065319]  
  - Use inflight IO in io acct of high latency devices (Gulam Mohamed)  [Orabug: 35475691]  
  - nvmet-tcp: Fix a possible UAF in queue intialization setup (Sagi Grimberg)  [Orabug: 36028026]  {CVE-2023-5178}


author: Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.326.5.el8uek]
changelog:
  - Revert "tracing: Increase trace array ref count on enable and filter files" (Sherry Yang)  [Orabug: 36059945]  
  - xen/blkback: Force flush and secure discard support flags (Boris Ostrovsky)  [Orabug: 36050498]  
  - Revert "PCI: acpiphp: Reassign resources on bridge if necessary" (Dongli Zhang)  [Orabug: 36049644]  
  - Revert "PCI: acpiphp: Use pci_assign_unassigned_bridge_resources() only for non-root bus" (Dongli Zhang)  [Orabug: 36049644]


author: Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.326.6.el8uek]
changelog:
  - Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d" (Junxiao Bi)  [Orabug: 35914789]  
  - md: bypass block throttle for superblock update (Junxiao Bi)  [Orabug: 35914789]


author: Brian Maly <brian.maly@oracle.com> [5.4.17-2136.326.6.1.el8uek]
changelog:
  - KVM: x86: Don't unnecessarily force masterclock update on vCPU hotplug (Sean Christopherson)  [Orabug: 36152738]  
  - octeontx_edac: Fix a potential null pointer dereference (Thomas Tai)  [Orabug: 36152733]  
  - rds: bcopy payload checksums may be calculated incorrectly leading to erroneous diagnostic results (William Kucharski)  [Orabug: 36152730]  
  - io_uring: break iopolling on signal (Pavel Begunkov)  [Orabug: 36152721]  
  - io_uring: break out of iowq iopoll on teardown (Pavel Begunkov)  [Orabug: 36152721]  
  - io_uring: always lock in io_apoll_task_func (Dylan Yudaken)  [Orabug: 36152721]  
  - io_uring: correct check for O_TMPFILE (Aleksa Sarai)  [Orabug: 36152721]  
  - io_uring: gate iowait schedule on having pending requests (Jens Axboe)  [Orabug: 36152721]  
  - io_uring: treat -EAGAIN for REQ_F_NOWAIT as final for io-wq (Jens Axboe)  [Orabug: 36152721]  
  - io_uring: don't audit the capability check in io_uring_create() (Ondrej Mosnacek)  [Orabug: 36152721]  
  - io_uring: add reschedule point to handle_tw_list() (Jens Axboe)  [Orabug: 36152721]  
  - io_uring: Use io_schedule* in cqring wait (Andres Freund)  [Orabug: 36152721]  
  - io_uring: wait interruptibly for request completions on exit (Jens Axboe)  [Orabug: 36152721]  
  - io_uring: ensure IOPOLL locks around deferred work (Jens Axboe)  [Orabug: 36152721]


author: Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.327.1.el8uek]
changelog:
  - hugetlb: disable HVO in Xen (Jane Chu)  [Orabug: 35904478] [Orabug: 35575618]  
  - hugetlb: batch TLB flushes when restoring vmemmap (Mike Kravetz)  [Orabug: 35575618]  
  - hugetlb: batch TLB flushes when freeing vmemmap (Joao Martins)  [Orabug: 35575618]  
  - hugetlb: batch PMD split for bulk vmemmap dedup (Joao Martins)  [Orabug: 35575618]  
  - hugetlb: batch freeing of vmemmap pages (Mike Kravetz)  [Orabug: 35575618]  
  - hugetlb: perform vmemmap restoration on a list of pages (Mike Kravetz)  [Orabug: 35575618]  
  - hugetlb: perform vmemmap optimization on a list of pages (Mike Kravetz)  [Orabug: 35575618]  
  - hugetlb: restructure pool allocations (Mike Kravetz)  [Orabug: 35575618]  
  - hugetlb: optimize update_and_free_pages_bulk to avoid lock cycles (Mike Kravetz)  [Orabug: 35575618]  
  - mm: hugetlb_vmemmap: allow alloc vmemmap pages fallback to other nodes (Yuan Can)  [Orabug: 35575618]  
  - mm/hugetlb: fix nodes huge page allocation when there are surplus pages (Xueshi Hu)  [Orabug: 35575618]  
  - mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes (Yuan Can)  [Orabug: 35575618]  
  - hugetlb: check for hugetlb folio before vmemmap_restore (Mike Kravetz)  [Orabug: 35575618]  
  - hugetlb: set hugetlb page flag before optimizing vmemmap (Mike Kravetz)  [Orabug: 35575618]  
  - mm: hugetlb_vmemmap: fix a race between vmemmap pmd split (Muchun Song)  [Orabug: 35575618]  
  - hugetlb: do not clear hugetlb dtor until allocating vmemmap (Mike Kravetz)  [Orabug: 35575618]  
  - mm: hugetlb_vmemmap: provide stronger vmemmap allocation guarantees (Pasha Tatashin)  [Orabug: 35575618]  
  - mm: hugetlb_vmemmap: simplify hugetlb_vmemmap_init() a bit (Muchun Song)  [Orabug: 35575618]  
  - sysctl: fix proc_dobool() usability (Ondrej Mosnacek)  [Orabug: 35575618]  
  - mm/hugetlb_vmemmap: remap head page to newly allocated page (Joao Martins)  [Orabug: 35575618]  
  - hugetlb: fix __prep_compound_gigantic_page page flag setting (Mike Kravetz)  [Orabug: 35575618]  
  - hugetlb: freeze allocated pages before creating hugetlb pages (Mike Kravetz)  [Orabug: 35575618]  
  - mm/hugetlb: correct demote page offset logic (Doug Berger)  [Orabug: 35575618]  
  - mm: use nth_page instead of mem_map_offset mem_map_next (Cheng Li)  [Orabug: 35575618]  
  - mm: hugetlb_vmemmap: remove redundant list_del() (Muchun Song)  [Orabug: 35575618]  
  - mm: hugetlb_vmemmap: simplify reset_struct_pages() (Muchun Song)  [Orabug: 35575618]  
  - mm: hugetlb_vmemmap: add missing smp_wmb() before set_pte_at() (Miaohe Lin)  [Orabug: 35575618]  
  - mm: hugetlb_vmemmap: use PTRS_PER_PTE instead of PMD_SIZE / PAGE_SIZE (Muchun Song)  [Orabug: 35575618]  
  - mm: hugetlb_vmemmap: move code comments to vmemmap_dedup.rst (Muchun Song)  [Orabug: 35575618]  
  - mm: hugetlb_vmemmap: improve hugetlb_vmemmap code readability (Muchun Song)  [Orabug: 35575618]  
  - mm: hugetlb_vmemmap: replace early_param() with core_param() (Muchun Song)  [Orabug: 35575618]  
  - mm: hugetlb_vmemmap: move vmemmap code related to HugeTLB to hugetlb_vmemmap.c (Muchun Song)  [Orabug: 35575618]  
  - mm: hugetlb_vmemmap: introduce the name HVO (Muchun Song)  [Orabug: 35575618]  
  - mm: hugetlb_vmemmap: optimize vmemmap_optimize_mode handling (Muchun Song)  [Orabug: 35575618]  
  - sysctl: introduce new proc handler proc_dobool (Jia He)  [Orabug: 35575618]  
  - mm: hugetlb_vmemmap: delete hugetlb_optimize_vmemmap_enabled() (Muchun Song)  [Orabug: 35575618]  
  - mm: memory_hotplug: make hugetlb_optimize_vmemmap compatible with memmap_on_memory (Muchun Song)  [Orabug: 35575618]  
  - mm: hugetlb_vmemmap: fix CONFIG_HUGETLB_PAGE_FREE_VMEMMAP_DEFAULT_ON (Muchun Song)  [Orabug: 35575618]  
  - mm: hugetlb_vmemmap: add hugetlb_optimize_vmemmap sysctl (Muchun Song)  [Orabug: 35575618]  
  - mm: hugetlb_vmemmap: use kstrtobool for hugetlb_vmemmap param parsing (Muchun Song)  [Orabug: 35575618]  
  - mm: hugetlb_vmemmap: disable hugetlb_optimize_vmemmap when struct page crosses page boundaries (Muchun Song)  [Orabug: 35575618]  
  - mm/hugetlb_vmemmap: move comment block to Documentation/vm (Joao Martins)  [Orabug: 35575618]  
  - mm: hugetlb_vmemmap: cleanup CONFIG_HUGETLB_PAGE_FREE_VMEMMAP* (Muchun Song)  [Orabug: 35575618]  
  - mm: hugetlb_vmemmap: cleanup hugetlb_free_vmemmap_enabled* (Muchun Song)  [Orabug: 35575618]  
  - mm: hugetlb_vmemmap: cleanup hugetlb_vmemmap related functions (Muchun Song)  [Orabug: 35575618]  
  - mm: sparsemem: move vmemmap related to HugeTLB to CONFIG_HUGETLB_PAGE_FREE_VMEMMAP (Muchun Song)  [Orabug: 34549952] [Orabug: 35575618]  
  - selftests: vm: add a hugetlb test case (Muchun Song)  [Orabug: 34549952] [Orabug: 35575618]  
  - mm: sparsemem: fix missing higher order allocation splitting (Muchun Song)  [Orabug: 34549952] [Orabug: 35575618]  
  - mm: sparsemem: use page table lock to protect kernel pmd operations (Muchun Song)  [Orabug: 34549952] [Orabug: 35575618]  
  - mm: hugetlb: replace hugetlb_free_vmemmap_enabled with a static_key (Muchun Song)  [Orabug: 34549952] [Orabug: 35575618]  
  - jump_label: Provide CONFIG-driven build state defaults (Kees Cook)  [Orabug: 35575618]  
  - mm: hugetlb: free the 2nd vmemmap page associated with each HugeTLB page (Muchun Song)  [Orabug: 34549952] [Orabug: 35575618]  
  - uek: kabi: update a kABI symbol for ACFS (Saeed Mirzamohammadi)  [Orabug: 36083492]  
  - io_uring: break iopolling on signal (Pavel Begunkov)  [Orabug: 36029307]  
  - io_uring: break out of iowq iopoll on teardown (Pavel Begunkov)  [Orabug: 36029307]  
  - io_uring: always lock in io_apoll_task_func (Dylan Yudaken)  [Orabug: 36029307]  
  - io_uring: correct check for O_TMPFILE (Aleksa Sarai)  [Orabug: 36029307]  
  - io_uring: gate iowait schedule on having pending requests (Jens Axboe)  [Orabug: 36029307]  
  - io_uring: treat -EAGAIN for REQ_F_NOWAIT as final for io-wq (Jens Axboe)  [Orabug: 36029307]  
  - io_uring: don't audit the capability check in io_uring_create() (Ondrej Mosnacek)  [Orabug: 36029307]  
  - io_uring: add reschedule point to handle_tw_list() (Jens Axboe)  [Orabug: 36029307]  
  - io_uring: Use io_schedule* in cqring wait (Andres Freund)  [Orabug: 36029307]  
  - io_uring: wait interruptibly for request completions on exit (Jens Axboe)  [Orabug: 36029307]  
  - io_uring: ensure IOPOLL locks around deferred work (Jens Axboe)  [Orabug: 36029307]  
  - rds: bcopy payload checksums may be calculated incorrectly leading to erroneous diagnostic results (William Kucharski)  [Orabug: 36060779]  
  - octeontx_edac: Fix a potential null pointer dereference (Thomas Tai)  [Orabug: 36087361]


author: Brian Maly <brian.maly@oracle.com> [5.4.17-2136.327.2.el8uek]
changelog:
  - KVM: x86: Don't unnecessarily force masterclock update on vCPU hotplug (Sean Christopherson)  [Orabug: 36131274]


author: Alok Tiwari <alok.a.tiwari@oracle.com> [5.4.17-2136.328.1.el8uek]
changelog:
  - net/mlx5e: Check for NOT_READY flag state after locking (Vlad Buslov)  [Orabug: 36014945]  
  - net/mlx5e: fix memory leak in mlx5e_ptp_open (Zhengchao Shao)  [Orabug: 36014945]  
  - net/mlx5e: Fix error handling in mlx5e_refresh_tirs (Saeed Mahameed)  [Orabug: 36014945]  
  - net/mlx5e: Don't attach netdev profile while handling internal error (Dmytro Linkin)  [Orabug: 36014945]  
  - net/mlx5e: Do not update SBCM when prio2buffer command is invalid (Maher Sanalla)  [Orabug: 36014945]  
  - mlxsw: pci: Fix possible crash during initialization (Ido Schimmel)  [Orabug: 36014945]  
  - net/mlx5: E-Switch, Fix an Oops in error handling code (Dan Carpenter)  [Orabug: 36014945]  
  - net/mlx5: E-switch, Fix missing set of split_count when forward to ovs internal port (Maor Dickman)  [Orabug: 36014945]  
  - net/mlx5: fw_tracer, Zero consumer index when reloading the tracer (Shay Drory)  [Orabug: 36014945]  
  - net/mlx5: fw_tracer, Clear load bit when freeing string DBs buffers (Shay Drory)  [Orabug: 36014945]  
  - net/mlx5: SF: Fix probing active SFs during driver probe phase (Shay Drory)  [Orabug: 36014945]  
  - net/mlx5e: Remove WARN_ON when trying to offload an unsupported TLS cipher/version (Gal Pressman)  [Orabug: 36014945]  
  - net/mlx5: Fix mlx5_get_next_dev() peer device matching (Saeed Mahameed)  [Orabug: 36014945]  
  - net/mlx5: Drain fw_reset when removing device (Shay Drory)  [Orabug: 36014945]  
  - net/mlx5: Lag, filter non compatible devices (Mark Bloch)  [Orabug: 36014945]  
  - net/mlx5: Disable SRIOV before PF removal (Yishai Hadas)  [Orabug: 36014945]  
  - net/mlx5: Lag, Make mlx5_lag_is_multipath() be static inline (Maor Dickman)  [Orabug: 36014945]  
  - net/mlx5: Lag, change multipath and bonding to be mutually exclusive (Maor Dickman)  [Orabug: 36014945]  
  - net/mlx5e: Destroy page pool after XDP SQ to fix use-after-free (Maxim Mikityanskiy)  [Orabug: 36014945]  
  - net/mlx5: Lag, move lag destruction to a workqueue (Mark Bloch)  [Orabug: 36014945]  
  - net/mlx5: Unload device upon firmware fatal error (Aya Levin)  [Orabug: 36014945]  
  - net/mlx5: Remove unnecessary spin lock protection (Eli Cohen)  [Orabug: 36014945]  
  - net/mlx5e: When changing XDP program without reset, take refs for XSK RQs (Maxim Mikityanskiy)  [Orabug: 36014945]  
  - net/mlx5e: Check tunnel offload is required before setting SWP (Moshe Shemesh)  [Orabug: 36014945]  
  - net/mlx5e: Remove unused mlx5e_xsk_first_unused_channel (Maxim Mikityanskiy)  [Orabug: 36014945]  
  - net/mlx5e: Fix stats update for matchall classifier (Roi Dayan)  [Orabug: 36014945]  
  - net/mlx5e: Set of completion request bit should not clear other adjacent bits (Tariq Toukan)  [Orabug: 36014945]  
  - mlxsw: pci: Wait longer before accessing the device after reset (Amit Cohen)  [Orabug: 36014945]  
  - mlxsw: pci: Remove unused values (Ido Schimmel)  [Orabug: 36014945]  
  - mlxsw: core: Add validation of hardware device types for MGPIR register (Vadim Pasternak)  [Orabug: 36014945]  
  - netdevsim: fix using uninitialized resources (Taehee Yoo)  [Orabug: 36014945]  
  - net/mlx5: Read num_vfs before disabling SR-IOV (Parav Pandit)  [Orabug: 36014945]  
  - net/mlx5: DR, Replace CRC32 implementation to use kernel lib (Hamdan Igbaria)  [Orabug: 36014945]  
  - mlxsw: pci: Increase PCI reset timeout for SN3800 systems (Ido Schimmel)  [Orabug: 36014945]  
  - mlxsw: hwmon: Provide optimization for QSFP modules number detection (Vadim Pasternak)  [Orabug: 36014945]  
  - mlxsw: reg: Extend MGPIR register with new field exposing the number of QSFP modules (Vadim Pasternak)  [Orabug: 36014945]  
  - vhost-scsi: add parentheses to macro of VHOST_SCSI_MAX_VQ (Dongli Zhang)  [Orabug: 36119643]  
  - iommu/amd: Do not flush IRTE when only updating isRun and destination fields (Suravee Suthikulpanit)  [Orabug: 36101189]  
  - xfs: try to avoid allocation blocking on busy extents (Mark Tinguely)  [Orabug: 36096908]  
  - EDAC/amd64: Add support for AMD family 1Ah models 00h-1Fh and 40h-4Fh (Avadhut Naik)  [Orabug: 36092305]  
  - EDAC/amd64: Add get_err_info() to pvt->ops (Muralidhara M K)  [Orabug: 36092305]  
  - EDAC/amd64: Split dump_misc_regs() into dct/umc functions (Muralidhara M K)  [Orabug: 36092305]  
  - EDAC/amd64: Split init_csrows() into dct/umc functions (Muralidhara M K)  [Orabug: 36092305]  
  - EDAC/amd64: Split determine_edac_cap() into dct/umc functions (Muralidhara M K)  [Orabug: 36092305]  
  - EDAC/amd64: Rename f17h_determine_edac_ctl_cap() (Yazen Ghannam)  [Orabug: 36092305]  
  - EDAC/amd64: Split setup_mci_misc_attrs() into dct/umc functions (Muralidhara M K)  [Orabug: 36092305]  
  - EDAC/amd64: Split ecc_enabled() into dct/umc functions (Muralidhara M K)  [Orabug: 36092305]  
  - EDAC/amd64: Split read_mc_regs() into dct/umc functions (Muralidhara M K)  [Orabug: 36092305]  
  - EDAC/amd64: Split determine_memory_type() into dct/umc functions (Muralidhara M K)  [Orabug: 36092305]  
  - EDAC/amd64: Split read_base_mask() into dct/umc functions (Muralidhara M K)  [Orabug: 36092305]  
  - EDAC/amd64: Split prep_chip_selects() into dct/umc functions (Muralidhara M K)  [Orabug: 36092305]  
  - EDAC/amd64: Rework hw_info_{get,put} (Yazen Ghannam)  [Orabug: 36092305]  
  - EDAC/amd64: Merge struct amd64_family_type into struct amd64_pvt (Muralidhara M K)  [Orabug: 36092305]  
  - EDAC/amd64: Do not discover ECC symbol size for Family 17h and later (Yazen Ghannam)  [Orabug: 36092305]  
  - EDAC/amd64: Drop dbam_to_cs() for Family 17h and later (Yazen Ghannam)  [Orabug: 36092305]  
  - EDAC/amd64: Split get_csrow_nr_pages() into dct/umc functions (Yazen Ghannam)  [Orabug: 36092305]  
  - EDAC/amd64: Rename debug_display_dimm_sizes() (Yazen Ghannam)  [Orabug: 36092305]  
  - EDAC/amd64: Shut up an -Werror,-Wsometimes-uninitialized clang false positive (Yazen Ghannam)  [Orabug: 36092305]  
  - EDAC/amd64: Remove early_channel_count() (Yazen Ghannam)  [Orabug: 36092305]  
  - EDAC/amd64: Remove PCI Function 0 (Yazen Ghannam)  [Orabug: 36092305]  
  - EDAC/amd64: Remove PCI Function 6 (Yazen Ghannam)  [Orabug: 36092305]  
  - EDAC/amd64: Remove scrub rate control for Family 17h and later (Yazen Ghannam)  [Orabug: 36092305]  
  - EDAC/amd64: Don't set up EDAC PCI control on Family 17h+ (Yazen Ghannam)  [Orabug: 36092305]  
  - x86/amd_nb: Unexport amd_cache_northbridges() (Muralidhara M K)  [Orabug: 36092305]  
  - EDAC/amd64: Add new register offset support and related changes (Yazen Ghannam)  [Orabug: 36092305]  
  - EDAC/amd64: Set memory type per DIMM (Yazen Ghannam)  [Orabug: 36092305]  
  - EDAC/amd64: Add support for family 19h, models 50h-5fh (Marc Bevand)  [Orabug: 36092305]  
  - EDAC/amd64: Add context struct (Yazen Ghannam)  [Orabug: 36092305]  
  - EDAC/amd64: Allow for DF Indirect Broadcast reads (Yazen Ghannam)  [Orabug: 36092305]  
  - x86/amd_nb, EDAC/amd64: Move DF Indirect Read to AMD64 EDAC (Yazen Ghannam)  [Orabug: 36092305]  
  - EDAC/amd64: Issue probing messages only on properly detected hardware (Borislav Petkov)  [Orabug: 36092305]  
  - EDAC/amd64: Tone down messages about missing PCI IDs (Yazen Ghannam)  [Orabug: 36092305]  
  - EDAC/amd64: Do not load on family 0x15, model 0x13 (Borislav Petkov)  [Orabug: 36092305]  
  - EDAC/amd64: Remove redundant assignment to variable ret in hw_info_get() (Colin Ian King)  [Orabug: 36092305]  
  - crypto: ccp - Add support for PCI device 0x156E (John Allen)  [Orabug: 36092305]  
  - crypto: ccp - Add support for PCI device 0x17E0 (Mario Limonciello)  [Orabug: 36092305]  
  - crypto: ccp - Provide MMIO register naming for documenation (Tom Lendacky)  [Orabug: 36092305]  
  - crypto: ccp - Add support for TEE for PCI ID 0x14CA (Mario Limonciello)  [Orabug: 36092305]  
  - crypto: ccp - Add support for new CCP/PSP device ID (Mario Limonciello)  [Orabug: 36092305]  
  - x86/amd_nb: Add PCI IDs for AMD Family 1Ah-based models (Avadhut Naik)  [Orabug: 36092305]  
  - x86/amd_nb: Re-sort and re-indent PCI defines (Borislav Petkov (AMD))  [Orabug: 36092305]  
  - x86/amd_nb: Add MI200 PCI IDs (Yazen Ghannam)  [Orabug: 36092305]  
  - x86/amd_nb: Add PCI ID for family 19h model 78h (Mario Limonciello)  [Orabug: 36092305]  
  - x86/amd_nb: Add AMD PCI IDs for SMN communication (Mario Limonciello)  [Orabug: 36092305]  
  - hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models (Avadhut Naik)  [Orabug: 36092305]  
  - hwmon: (k10temp) Add PCI ID for family 19, model 78h (Mario Limonciello)  [Orabug: 36092305]  
  - hwmon: (k10temp): Add support for new family 17h and 19h models (Mario Limonciello)  [Orabug: 36092305]  
  - uek-rpm: Update the x86 kABI files for new symbol (Yifei Liu)  [Orabug: 36090182]  
  - audit: Apply special optimizations (Håkon Bugge)  [Orabug: 36089817]  
  - audit: Vary struct audit_entry alignment (Håkon Bugge)  [Orabug: 36089817]  
  - eth: bnxt: handle invalid Tx completions more gracefully (Jakub Kicinski)  [Orabug: 36075755]  
  - tcp: Tunables for TCP delayed ack (min and max) timers (Venkat Venkatsubra)  [Orabug: 35875891]  
  - tcp: fix ambiguity for SACKed TLP retransmits with RTT < min_rtt (Neal Cardwell)  [Orabug: 35875891]  
  - Add basic Emerald Rapids support to UEK6 (Henry Willard)  [Orabug: 35063919]


author: Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.328.2.el8uek]
changelog:
  - LTS tag: v5.4.266 (Sherry Yang)   
  - block: Don't invalidate pagecache for invalid falloc modes (Sarthak Kukreti)   
  - smb: client: fix OOB in smbCalcSize() (Paulo Alcantara)   
  - usb: fotg210-hcd: delete an incorrect bounds test (Dan Carpenter)   
  - x86/alternatives: Sync core before enabling interrupts (Thomas Gleixner)   
  - net: rfkill: gpio: set GPIO direction (Rouven Czerwinski)   
  - net: 9p: avoid freeing uninit memory in p9pdu_vreadf (Fedor Pchelkin)   
  - Bluetooth: hci_event: Fix not checking if HCI_OP_INQUIRY has been sent (Luiz Augusto von Dentz)   
  - USB: serial: option: add Quectel RM500Q R13 firmware support (Reinhard Speyerer)   
  - USB: serial: option: add Foxconn T99W265 with new baseline (Slark Xiao)   
  - USB: serial: option: add Quectel EG912Y module support (Alper Ak)   
  - USB: serial: ftdi_sio: update Actisense PIDs constant names (Mark Glover)   
  - wifi: cfg80211: fix certs build to not depend on file order (Johannes Berg)   
  - wifi: cfg80211: Add my certificate (Chen-Yu Tsai)   
  - iio: adc: ti_am335x_adc: Fix return value check of tiadc_request_dma() (Wadim Egorov)   
  - iio: common: ms_sensors: ms_sensors_i2c: fix humidity conversion time table (Javier Carrasco)   
  - scsi: bnx2fc: Fix skb double free in bnx2fc_rcv() (Wei Yongjun)   
  - Input: ipaq-micro-keys - add error handling for devm_kmemdup (Haoran Liu)   
  - iio: imu: inv_mpu6050: fix an error code problem in inv_mpu6050_read_raw (Su Hui)   
  - interconnect: Treat xlate() returning NULL node as an error (Mike Tipton)   
  - btrfs: do not allow non subvolume root targets for snapshot (Josef Bacik)   
  - smb: client: fix NULL deref in asn1_ber_decoder() (Paulo Alcantara)   
  - ALSA: hda/hdmi: add force-connect quirk for NUC5CPYB (Kai Vehmanen)   
  - ALSA: hda/hdmi: Add quirk to force pin connectivity on NUC10 (Kai Vehmanen)   
  - pinctrl: at91-pio4: use dedicated lock class for IRQ (Alexis Lothoré)   
  - i2c: aspeed: Handle the coalesced stop conditions with the start conditions. (Quan Nguyen)   
  - afs: Fix overwriting of result of DNS query (David Howells)   
  - net: check dev->gso_max_size in gso_features_check() (Eric Dumazet)   
  - net: warn if gso_type isn't set for a GSO SKB (Heiner Kallweit)   
  - afs: Fix dynamic root lookup DNS check (David Howells)   
  - afs: Fix the dynamic root's d_delete to always delete unused dentries (David Howells)   
  - net: check vlan filter feature in vlan_vids_add_by_dev() and vlan_vids_del_by_dev() (Liu Jian)   
  - net/rose: fix races in rose_kill_by_device() (Eric Dumazet)   
  - ethernet: atheros: fix a memleak in atl1e_setup_ring_resources (Zhipeng Lu)   
  - net: sched: ife: fix potential use-after-free (Eric Dumazet)   
  - net/mlx5e: Correct snprintf truncation handling for fw_version buffer used by representors (Rahul Rameshbabu)   
  - net/mlx5: Fix fw tracer first block check (Moshe Shemesh)   
  - net/mlx5: improve some comments (Hu Haowen)   
  - Revert "net/mlx5e: fix double free of encap_header" (Vlad Buslov)   
  - wifi: mac80211: mesh_plink: fix matches_local logic (Johannes Berg)   
  - s390/vx: fix save/restore of fpu kernel context (Heiko Carstens)   
  - reset: Fix crash when freeing non-existent optional resets (Geert Uytterhoeven)   
  - ARM: OMAP2+: Fix null pointer dereference and memory leak in omap_soc_device_init (Kunwu Chan)   
  - ksmbd: fix wrong name of SMB2_CREATE_ALLOCATION_SIZE (Namjae Jeon)   
  - ALSA: hda/realtek: Enable headset on Lenovo M90 Gen5 (Bin Li)   
  - LTS tag: v5.4.265 (Sherry Yang)   
  - powerpc/ftrace: Fix stack teardown in ftrace_no_trace (Naveen N Rao)   
  - powerpc/ftrace: Create a dummy stackframe to fix stack unwind (Naveen N Rao)   
  - mmc: block: Be sure to wait while busy in CQE error recovery (Adrian Hunter)   
  - ring-buffer: Fix memory leak of free page (Steven Rostedt (Google))   
  - team: Fix use-after-free when an option instance allocation fails (Florent Revest)   
  - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (James Houghton)   
  - ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS (Baokun Li)   
  - soundwire: stream: fix NULL pointer dereference for multi_link (Krzysztof Kozlowski)   
  - HID: hid-asus: add const to read-only outgoing usb buffer (Denis Benato)   
  - net: usb: qmi_wwan: claim interface 4 for ZTE MF290 (Lech Perczak)   
  - asm-generic: qspinlock: fix queued_spin_value_unlocked() implementation (Linus Torvalds)   
  - HID: multitouch: Add quirk for HONOR GLO-GXXX touchpad (Aoba K)   
  - HID: hid-asus: reset the backlight brightness level on resume (Denis Benato)   
  - HID: add ALWAYS_POLL quirk for Apple kb (Oliver Neukum)   
  - platform/x86: intel_telemetry: Fix kernel doc descriptions (Andy Shevchenko)   
  - bcache: avoid NULL checking to c->root in run_cache_set() (Coly Li)   
  - bcache: add code comments for bch_btree_node_get() and __bch_btree_node_alloc() (Coly Li)   
  - bcache: avoid oversize memory allocation by small stripe_size (Coly Li)   
  - blk-throttle: fix lockdep warning of "cgroup_mutex or RCU read lock required!" (Ming Lei)   
  - usb: aqc111: check packet for fixup for true limit (Oliver Neukum)   
  - ALSA: hda/hdmi: add force-connect quirks for ASUSTeK Z170 variants (Kai Vehmanen)   
  - appletalk: Fix Use-After-Free in atalk_ioctl (Hyunwoo Kim)   
  - net: stmmac: Handle disabled MDIO busses from devicetree (Andrew Halaney)   
  - net: stmmac: use dev_err_probe() for reporting mdio bus registration failure (Rasmus Villemoes)   
  - vsock/virtio: Fix unsigned integer wrap around in virtio_transport_has_space() (Nikolay Kuratov)   
  - sign-file: Fix incorrect return values check (Yusong Gao)   
  - net: Remove acked SYN flag from packet in the transmit queue correctly (Dong Chenchen)   
  - qed: Fix a potential use-after-free in qed_cxt_tables_alloc (Dinghao Liu)   
  - net/rose: Fix Use-After-Free in rose_ioctl (Hyunwoo Kim)   
  - atm: Fix Use-After-Free in do_vcc_ioctl (Hyunwoo Kim)   
  - atm: solos-pci: Fix potential deadlock on &tx_queue_lock (Chengfeng Ye)   
  - atm: solos-pci: Fix potential deadlock on &cli_queue_lock (Chengfeng Ye)   
  - qca_spi: Fix reset behavior (Stefan Wahren)   
  - qca_debug: Fix ethtool -G iface tx behavior (Stefan Wahren)   
  - qca_debug: Prevent crash on TX ring changes (Stefan Wahren)   
  - net: ipv6: support reporting otherwise unknown prefix flags in RTM_NEWPREFIX (Maciej Żenczykowski)   
  - afs: Fix refcount underflow from error handling race (David Howells)   
  - LTS tag: v5.4.264 (Sherry Yang)   
  - devcoredump: Send uevent once devcd is ready (Mukesh Ojha)   
  - devcoredump : Serialize devcd_del work (Mukesh Ojha)   
  - smb: client: fix potential NULL deref in parse_dfs_referrals() (Paulo Alcantara)   
  - cifs: Fix non-availability of dedup breaking generic/304 (David Howells)   
  - Revert "btrfs: add dmesg output for first mount and last unmount of a filesystem" (Greg Kroah-Hartman)   
  - drop_monitor: Require 'CAP_SYS_ADMIN' when joining "events" group (Ido Schimmel)   
  - psample: Require 'CAP_NET_ADMIN' when joining "packets" group (Ido Schimmel)   
  - genetlink: add CAP_NET_ADMIN test for multicast bind (Ido Schimmel)   
  - netlink: don't call ->netlink_bind with table lock held (Ido Schimmel)   
  - io_uring/af_unix: disable sending io_uring over sockets (Pavel Begunkov)   
  - nilfs2: fix missing error check for sb_set_blocksize call (Ryusuke Konishi)   
  - KVM: s390/mm: Properly reset no-dat (Claudio Imbrenda)   
  - x86/CPU/AMD: Check vendor in the AMD microcode callback (Borislav Petkov (AMD))   
  - serial: 8250_omap: Add earlycon support for the AM654 UART controller (Ronald Wahl)   
  - serial: sc16is7xx: address RX timeout interrupt errata (Daniel Mack)   
  - ARM: PL011: Fix DMA support (Arnd Bergmann)   
  - usb: typec: class: fix typec_altmode_put_partner to put plugs (RD Babiera)   
  - parport: Add support for Brainboxes IX/UC/PX parallel cards (Cameron Williams)   
  - usb: gadget: f_hid: fix report descriptor allocation (Konstantin Aladyshev)   
  - mmc: sdhci-sprd: Fix vqmmc not shutting down after the card was pulled (Wenchao Chen)   
  - mmc: core: add helpers mmc_regulator_enable/disable_vqmmc (Heiner Kallweit)   
  - gpiolib: sysfs: Fix error handling on failed export (Boerge Struempfel)   
  - arm64: dts: mediatek: mt8173-evb: Fix regulator-fixed node names (AngeloGioacchino Del Regno)   
  - arm64: dts: mediatek: mt7622: fix memory node warning check (Eugen Hristev)   
  - packet: Move reference count in packet_sock to atomic_long_t (Daniel Borkmann)   
  - tracing: Fix a possible race when disabling buffered events (Petr Pavlu)   
  - tracing: Fix incomplete locking when disabling buffered events (Petr Pavlu)   
  - tracing: Always update snapshot buffer size (Steven Rostedt (Google))   
  - nilfs2: prevent WARNING in nilfs_sufile_set_segment_usage() (Ryusuke Konishi)   
  - ALSA: pcm: fix out-of-bounds in snd_pcm_state_names (Jason Zhang)   
  - ARM: dts: imx7: Declare timers compatible with fsl,imx6dl-gpt (Philipp Zabel)   
  - ARM: dts: imx: make gpt node name generic (Anson Huang)   
  - ARM: imx: Check return value of devm_kasprintf in imx_mmdc_perf_init (Kunwu Chan)   
  - scsi: be2iscsi: Fix a memleak in beiscsi_init_wrb_handle() (Dinghao Liu)   
  - tracing: Fix a warning when allocating buffered events fails (Petr Pavlu)   
  - ASoC: wm_adsp: fix memleak in wm_adsp_buffer_populate (Dinghao Liu)   
  - hwmon: (acpi_power_meter) Fix 4.29 MW bug (Armin Wolf)   
  - RDMA/bnxt_re: Correct module description string (Kalesh AP)   
  - bpf: sockmap, updating the sg structure should also update curr (John Fastabend)   
  - tcp: do not accept ACK of bytes we never sent (Eric Dumazet)   
  - netfilter: xt_owner: Fix for unsafe access of sk->sk_socket (Phil Sutter)   
  - net: hns: fix fake link up on xge port (Yonglong Liu)   
  - ipv4: ip_gre: Avoid skb_pull() failure in ipgre_xmit() (Shigeru Yoshida)   
  - arcnet: restoring support for multiple Sohard Arcnet cards (Thomas Reichinger)   
  - net: arcnet: com20020 fix error handling (Tong Zhang)   
  - net: arcnet: Fix RESET flag handling (Ahmed S. Darwish)   
  - hv_netvsc: rndis_filter needs to select NLS (Randy Dunlap)   
  - ipv6: fix potential NULL deref in fib6_add() (Eric Dumazet)   
  - of: dynamic: Fix of_reconfig_get_state_change() return value documentation (Luca Ceresoli)   
  - of: Add missing 'Return' section in kerneldoc comments (Rob Herring)   
  - of: Fix kerneldoc output formatting (Rob Herring)   
  - of: base: Fix some formatting issues and provide missing descriptions (Lee Jones)   
  - of/irq: Make of_msi_map_rid() PCI bus agnostic (Lorenzo Pieralisi)   
  - of/irq: make of_msi_map_get_device_domain() bus agnostic (Diana Craciun)   
  - of/iommu: Make of_map_rid() PCI agnostic (Lorenzo Pieralisi)   
  - ACPI/IORT: Make iort_msi_map_rid() PCI agnostic (Lorenzo Pieralisi)   
  - ACPI/IORT: Make iort_get_device_domain IRQ domain agnostic (Lorenzo Pieralisi)   
  - of: base: Add of_get_cpu_state_node() to get idle states for a CPU node (Ulf Hansson)   
  - drm/amdgpu: correct chunk_ptr to a pointer to chunk. (YuanShang)   
  - kconfig: fix memory leak from range properties (Masahiro Yamada)   
  - tg3: Increment tx_dropped in tg3_tso_bug() (Alex Pakhunov)   
  - tg3: Move the [rt]x_dropped counters to tg3_napi (Alex Pakhunov)   
  - netfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test (Jozsef Kadlecsik)   
  - LTS tag: v5.4.263 (Sherry Yang)   
  - mmc: block: Retry commands in CQE error recovery (Adrian Hunter)   
  - mmc: core: convert comma to semicolon (Zheng Yongjun)   
  - mmc: cqhci: Fix task clearing in CQE error recovery (Adrian Hunter)   
  - mmc: cqhci: Warn of halt or task clear failure (Adrian Hunter)   
  - mmc: cqhci: Increase recovery halt timeout (Adrian Hunter)   
  - cpufreq: imx6q: Don't disable 792 Mhz OPP unnecessarily (Christoph Niedermaier)   
  - cpufreq: imx6q: don't warn for disabling a non-existing frequency (Christoph Niedermaier)   
  - scsi: qla2xxx: Fix system crash due to bad pointer access (Quinn Tran)   
  - scsi: qla2xxx: Use scsi_cmd_to_rq() instead of scsi_cmnd.request (Bart Van Assche)   
  - scsi: core: Introduce the scsi_cmd_to_rq() function (Bart Van Assche)   
  - ima: detect changes to the backing overlay file (Mimi Zohar)   
  - ovl: skip overlayfs superblocks at global sync (Konstantin Khlebnikov)   
  - ima: annotate iint mutex to avoid lockdep false positive warnings (Amir Goldstein)   
  - fbdev: stifb: Make the STI next font pointer a 32-bit signed offset (Helge Deller)   
  - mtd: cfi_cmdset_0001: Byte swap OTP info (Linus Walleij)   
  - mtd: cfi_cmdset_0001: Support the absence of protection registers (Jean-Philippe Brucker)   
  - s390/cmma: fix detection of DAT pages (Heiko Carstens)   
  - s390/mm: fix phys vs virt confusion in mark_kernel_pXd() functions family (Alexander Gordeev)   
  - smb3: fix touch -h of symlink (Steve French)   
  - net: ravb: Start TX queues after HW initialization succeeded (Claudiu Beznea)   
  - net: ravb: Use pm_runtime_resume_and_get() (Claudiu Beznea)   
  - ravb: Fix races between ravb_tx_timeout_work() and net related ops (Yoshihiro Shimoda)   
  - net: stmmac: xgmac: Disable FPE MMC interrupts (Furong Xu)   
  - ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet (Zhengchao Shao)   
  - Input: xpad - add HyperX Clutch Gladiate Support (Max Nguyen)   
  - btrfs: make error messages more clear when getting a chunk map (Filipe Manana)   
  - btrfs: send: ensure send_fd is writable (Jann Horn)   
  - btrfs: fix off-by-one when checking chunk map includes logical address (Filipe Manana)   
  - btrfs: add dmesg output for first mount and last unmount of a filesystem (Qu Wenruo)   
  - powerpc: Don't clobber f0/vs0 during fp|altivec register save (Timothy Pearson)   
  - bcache: revert replacing IS_ERR_OR_NULL with IS_ERR (Markus Weippert)   
  - dm verity: don't perform FEC for failed readahead IO (Wu Bo)   
  - dm-verity: align struct dm_verity_fec_io properly (Mikulas Patocka)   
  - ALSA: hda/realtek: Add supported ALC257 for ChromeOS (Kailang Yang)   
  - ALSA: hda/realtek: Headset Mic VREF to 100% (Kailang Yang)   
  - ALSA: hda: Disable power-save on KONTRON SinglePC (Takashi Iwai)   
  - mmc: block: Do not lose cache flush during CQE error recovery (Adrian Hunter)   
  - firewire: core: fix possible memory leak in create_units() (Yang Yingliang)   
  - pinctrl: avoid reload of p state in list iteration (Maria Yu)   
  - io_uring: fix off-by one bvec index (Keith Busch)   
  - USB: dwc3: qcom: fix wakeup after probe deferral (Johan Hovold)   
  - USB: dwc3: qcom: fix resource leaks on probe deferral (Johan Hovold)   
  - usb: dwc3: set the dma max_seg_size (Ricardo Ribalda)   
  - USB: dwc2: write HCINT with INTMASK applied (Oliver Neukum)   
  - USB: serial: option: don't claim interface 4 for ZTE MF290 (Lech Perczak)   
  - USB: serial: option: fix FM101R-GL defines (Puliang Lu)   
  - USB: serial: option: add Fibocom L7xx modules (Victor Fragoso)   
  - bcache: prevent potential division by zero error (Rand Deeb)   
  - bcache: check return value from btree_node_alloc_replacement() (Coly Li)   
  - dm-delay: fix a race between delay_presuspend and delay_bio (Mikulas Patocka)   
  - hv_netvsc: Mark VF as slave before exposing it to user-mode (Long Li)   
  - hv_netvsc: Fix race of register_netdevice_notifier and VF register (Haiyang Zhang)   
  - USB: serial: option: add Luat Air72*U series products (Asuna Yang)   
  - s390/dasd: protect device queue against concurrent access (Jan Höppner)   
  - bcache: replace a mistaken IS_ERR() by IS_ERR_OR_NULL() in btree_gc_coalesce() (Coly Li)   
  - ACPI: resource: Skip IRQ override on ASUS ExpertBook B1402CVA (Hans de Goede)   
  - ext4: make sure allocate pending entry not fail (Zhang Yi)   
  - ext4: fix slab-use-after-free in ext4_es_insert_extent() (Baokun Li)   
  - ext4: using nofail preallocation in ext4_es_insert_extent() (Baokun Li)   
  - ext4: using nofail preallocation in ext4_es_insert_delayed_block() (Baokun Li)   
  - ext4: using nofail preallocation in ext4_es_remove_extent() (Baokun Li)   
  - ext4: use pre-allocated es in __es_remove_extent() (Baokun Li)   
  - ext4: use pre-allocated es in __es_insert_extent() (Baokun Li)   
  - ext4: factor out __es_alloc_extent() and __es_free_extent() (Baokun Li)   
  - ext4: add a new helper to check if es must be kept (Baokun Li)   
  - MIPS: KVM: Fix a build warning about variable set but not used (Huacai Chen)   
  - nvmet: nul-terminate the NQNs passed in the connect command (Christoph Hellwig)   
  - nvmet: remove unnecessary ctrl parameter (Chaitanya Kulkarni)   
  - afs: Fix file locking on R/O volumes to operate in local mode (David Howells)   
  - afs: Return ENOENT if no cell DNS record can be found (David Howells)   
  - net: axienet: Fix check for partial TX checksum (Samuel Holland)   
  - amd-xgbe: propagate the correct speed and duplex status (Raju Rangoju)   
  - amd-xgbe: handle the corner-case during tx completion (Raju Rangoju)   
  - amd-xgbe: handle corner-case during sfp hotplug (Raju Rangoju)   
  - arm/xen: fix xen_vcpu_info allocation alignment (Stefano Stabellini)   
  - net: usb: ax88179_178a: fix failed operations during ax88179_reset (Jose Ignacio Tornos Martinez)   
  - ipv4: Correct/silence an endian warning in __ip_do_redirect (Kunwu Chan)   
  - HID: fix HID device resource race between HID core and debugging support (Charles Yi)   
  - HID: core: store the unique system identifier in hid_device (Benjamin Tissoires)   
  - drm/rockchip: vop: Fix color for RGB888/BGR888 format on VOP full (Jonas Karlman)   
  - ata: pata_isapnp: Add missing error check for devm_ioport_map() (Chen Ni)   
  - drm/panel: simple: Fix Innolux G101ICE-L01 timings (Marek Vasut)   
  - drm/panel: simple: Fix Innolux G101ICE-L01 bus flags (Marek Vasut)   
  - afs: Make error on cell lookup failure consistent with OpenAFS (David Howells)   
  - PCI: keystone: Drop __init from ks_pcie_add_pcie_{ep,port}() (Nathan Chancellor)   
  - RDMA/irdma: Prevent zero-length STAG registration (Christopher Bednarz)   
  - driver core: Release all resources during unbind before updating device links (Saravana Kannan)   
  - LTS tag: v5.4.262 (Sherry Yang)   
  - netfilter: nf_tables: bogus EBUSY when deleting flowtable after flush (for 5.4) (Pablo Neira Ayuso)   
  - netfilter: nf_tables: disable toggling dormant table state more than once (Pablo Neira Ayuso)   
  - netfilter: nf_tables: fix table flag updates (Pablo Neira Ayuso)   
  - netfilter: nftables: update table flags from the commit phase (Pablo Neira Ayuso)   
  - netfilter: nf_tables: double hook unregistration in netns path (Pablo Neira Ayuso)   
  - netfilter: nf_tables: unregister flowtable hooks on netns exit (Pablo Neira Ayuso)   
  - netfilter: nf_tables: fix memleak when more than 255 elements expired (Pablo Neira Ayuso)   
  - netfilter: nft_set_hash: try later when GC hits EAGAIN on iteration (Pablo Neira Ayuso)   
  - netfilter: nft_set_rbtree: use read spinlock to avoid datapath contention (Pablo Neira Ayuso)   
  - netfilter: nft_set_rbtree: skip sync GC for new elements in this transaction (Pablo Neira Ayuso)   
  - netfilter: nf_tables: defer gc run if previous batch is still pending (Florian Westphal)   
  - netfilter: nf_tables: use correct lock to protect gc_list (Pablo Neira Ayuso)   
  - netfilter: nf_tables: GC transaction race with abort path (Pablo Neira Ayuso)   
  - netfilter: nf_tables: GC transaction race with netns dismantle (Pablo Neira Ayuso)   
  - netfilter: nf_tables: fix GC transaction races with netns and netlink event exit path (Pablo Neira Ayuso)   
  - netfilter: nf_tables: remove busy mark and gc batch API (Pablo Neira Ayuso)   
  - netfilter: nft_set_hash: mark set element as dead when deleting from packet path (Pablo Neira Ayuso)   
  - netfilter: nf_tables: adapt set backend to use GC transaction API (Pablo Neira Ayuso)   
  - netfilter: nf_tables: GC transaction API to avoid race with control plane (Pablo Neira Ayuso)   
  - netfilter: nf_tables: don't skip expired elements during walk (Florian Westphal)   
  - netfilter: nft_set_rbtree: fix overlap expiration walk (Florian Westphal)   
  - netfilter: nft_set_rbtree: fix null deref on element insertion (Florian Westphal)   
  - netfilter: nft_set_rbtree: Switch to node list walk for overlap detection (Pablo Neira Ayuso)   
  - netfilter: nf_tables: drop map element references from preparation phase (Pablo Neira Ayuso)   
  - netfilter: nftables: rename set element data activation/deactivation functions (Pablo Neira Ayuso)   
  - netfilter: nf_tables: pass context to nft_set_destroy() (Pablo Neira Ayuso)   
  - drm/amdgpu: fix error handling in amdgpu_bo_list_get() (Christian König)   
  - ext4: remove gdb backup copy for meta bg in setup_new_flex_group_blocks (Kemeng Shi)   
  - ext4: correct the start block of counting reserved clusters (Zhang Yi)   
  - ext4: correct return value of ext4_convert_meta_bg (Kemeng Shi)   
  - ext4: correct offset of gdb backup in non meta_bg group to update_backups (Kemeng Shi)   
  - ext4: apply umask if ACL support is disabled (Max Kellermann)   
  - Revert "net: r8169: Disable multicast filter for RTL8168H and RTL8107E" (Heiner Kallweit)   
  - nfsd: fix file memleak on client_opens_release (Mahmoud Adam)   
  - media: venus: hfi: add checks to handle capabilities from firmware (Vikash Garodia)   
  - media: venus: hfi: fix the check to handle session buffer requirement (Vikash Garodia)   
  - media: venus: hfi_parser: Add check to keep the number of codecs within range (Vikash Garodia)   
  - media: sharp: fix sharp encoding (Sean Young)   
  - media: lirc: drop trailing space from scancode transmit (Sean Young)   
  - i2c: i801: fix potential race in i801_block_transaction_byte_by_byte (Heiner Kallweit)   
  - net: dsa: lan9303: consequently nested-lock physical MDIO (Alexander Sverdlin)   
  - Revert ncsi: Propagate carrier gain/loss events to the NCSI controller (Johnathan Mantey)   
  - Bluetooth: btusb: Add 0bda:b85b for Fn-Link RTL8852BE (Guan Wentao)   
  - Bluetooth: btusb: Add RTW8852BE device 13d3:3570 to device tables (Masum Reza)   
  - bluetooth: Add device 13d3:3571 to device tables (Larry Finger)   
  - bluetooth: Add device 0bda:887b to device tables (Larry Finger)   
  - Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0cb8:0xc559 (Artem Lukyanov)   
  - Bluetooth: btusb: add Realtek 8822CE to usb_device_id table (Joseph Hwang)   
  - Bluetooth: btusb: Add flag to define wideband speech capability (Alain Michaud)   
  - tty: serial: meson: fix hard LOCKUP on crtscts mode (Pavel Krasavin)   
  - serial: meson: Use platform_get_irq() to get the interrupt (Lad Prabhakar)   
  - tty: serial: meson: retrieve port FIFO size from DT (Neil Armstrong)   
  - serial: meson: remove redundant initialization of variable id (Colin Ian King)   
  - ALSA: hda/realtek - Enable internal speaker of ASUS K6500ZC (Chandradeep Dey)   
  - ALSA: info: Fix potential deadlock at disconnection (Takashi Iwai)   
  - parisc/pgtable: Do not drop upper 5 address bits of physical address (Helge Deller)   
  - parisc: Prevent booting 64-bit kernels on PA1.x machines (Helge Deller)   
  - i3c: master: cdns: Fix reading status register (Joshua Yeong)   
  - mm/cma: use nth_page() in place of direct struct page manipulation (Zi Yan)   
  - dmaengine: stm32-mdma: correct desc prep when channel running (Alain Volmat)   
  - mcb: fix error handling for different scenarios when parsing (Sanjuán García, Jorge)   
  - i2c: core: Run atomic i2c xfer when !preemptible (Benjamin Bara)   
  - kernel/reboot: emergency_restart: Set correct system_state (Benjamin Bara)   
  - quota: explicitly forbid quota files from being encrypted (Eric Biggers)   
  - jbd2: fix potential data lost in recovering journal raced with synchronizing fs bdev (Zhihao Cheng)   
  - btrfs: don't arbitrarily slow down delalloc if we're committing (Josef Bacik)   
  - PM: hibernate: Clean up sync_read handling in snapshot_write_next() (Brian Geffon)   
  - PM: hibernate: Use __get_safe_page() rather than touching the list (Brian Geffon)   
  - mmc: vub300: fix an error code (Dan Carpenter)   
  - clk: qcom: ipq8074: drop the CLK_SET_RATE_PARENT flag from PLL clocks (Kathiravan Thirumoorthy)   
  - parisc/pdc: Add width field to struct pdc_model (Helge Deller)   
  - PCI: keystone: Don't discard .probe() callback (Uwe Kleine-König)   
  - PCI: keystone: Don't discard .remove() callback (Uwe Kleine-König)   
  - genirq/generic_chip: Make irq_remove_generic_chip() irqdomain aware (Herve Codina)   
  - mmc: meson-gx: Remove setting of CMD_CFG_ERROR (Rong Chen)   
  - ACPI: resource: Do IRQ override on TongFang GMxXGxx (Werner Sembach)   
  - PCI/sysfs: Protect driver's D3cold preference from user space (Lukas Wunner)   
  - hvc/xen: fix error path in xen_hvc_init() to always register frontend driver (David Woodhouse)   
  - audit: don't WARN_ON_ONCE(!current->mm) in audit_exe_compare() (Paul Moore)   
  - audit: don't take task_lock() in audit_exe_compare() code path (Paul Moore)   
  - KVM: x86: Ignore MSR_AMD64_TW_CFG access (Maciej S. Szmigiero)   
  - KVM: x86: hyper-v: Don't auto-enable stimer on write from user-space (Nicolas Saenz Julienne)   
  - x86/cpu/hygon: Fix the CPU topology evaluation for real (Pu Wen)   
  - scsi: megaraid_sas: Increase register read retry rount from 3 to 30 for selected registers (Chandrakanth patil)   
  - bpf: Fix precision tracking for BPF_ALU | BPF_TO_BE | BPF_END (Shung-Hsi Yu)   
  - randstruct: Fix gcc-plugin performance mode to stay in group (Kees Cook)   
  - media: venus: hfi: add checks to perform sanity on queue pointers (Vikash Garodia)   
  - cifs: spnego: add ';' in HOST_KEY_LEN (Anastasia Belova)   
  - tools/power/turbostat: Fix a knl bug (Zhang Rui)   
  - macvlan: Don't propagate promisc change to lower dev in passthru (Vlad Buslov)   
  - net/mlx5e: Check return value of snprintf writing to fw_version buffer for representors (Rahul Rameshbabu)   
  - net/mlx5e: fix double free of encap_header (Dust Li)   
  - net: stmmac: fix rx budget limit check (Baruch Siach)   
  - net: stmmac: Rework stmmac_rx() (Jose Abreu)   
  - netfilter: nf_conntrack_bridge: initialize err to 0 (Linkui Xiao)   
  - net: ethernet: cortina: Fix MTU max setting (Linus Walleij)   
  - net: ethernet: cortina: Handle large frames (Linus Walleij)   
  - net: ethernet: cortina: Fix max RX frame define (Linus Walleij)   
  - bonding: stop the device in bond_setup_by_slave() (Eric Dumazet)   
  - ptp: annotate data-race around q->head and q->tail (Eric Dumazet)   
  - xen/events: fix delayed eoi list handling (Juergen Gross)   
  - ppp: limit MRU to 64K (Willem de Bruijn)   
  - tipc: Fix kernel-infoleak due to uninitialized TLV value (Shigeru Yoshida)   
  - net: hns3: fix variable may not initialized problem in hns3_init_mac_addr() (Yonglong Liu)   
  - tty: Fix uninit-value access in ppp_sync_receive() (Shigeru Yoshida)   
  - ipvlan: add ipvlan_route_v6_outbound() helper (Eric Dumazet)   
  - NFSv4.1: fix SP4_MACH_CRED protection for pnfs IO (Olga Kornievskaia)   
  - wifi: iwlwifi: Use FW rate for non-data frames (Miri Korenblit)   
  - pwm: Fix double shift bug (Dan Carpenter)   
  - ASoC: ti: omap-mcbsp: Fix runtime PM underflow warnings (Tony Lindgren)   
  - kgdb: Flush console before entering kgdb on panic (Douglas Anderson)   
  - drm/amd/display: Avoid NULL dereference of timing generator (Wayne Lin)   
  - media: cobalt: Use FIELD_GET() to extract Link Width (Ilpo Järvinen)   
  - gfs2: ignore negated quota changes (Bob Peterson)   
  - media: vivid: avoid integer overflow (Hans Verkuil)   
  - media: gspca: cpia1: shift-out-of-bounds in set_flicker (Rajeshwar R Shinde)   
  - i2c: sun6i-p2wi: Prevent potential division by zero (Axel Lin)   
  - usb: gadget: f_ncm: Always set current gadget in ncm_bind() (Hardik Gajjar)   
  - tty: vcc: Add check for kstrdup() in vcc_probe() (Yi Yang)   
  - HID: Add quirk for Dell Pro Wireless Keyboard and Mouse KM5221W (Jiri Kosina)   
  - scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() (Wenchao Hao)   
  - atm: iphase: Do PCI error checks on own line (Ilpo Järvinen)   
  - PCI: tegra194: Use FIELD_GET()/FIELD_PREP() with Link Width fields (Ilpo Järvinen)   
  - ALSA: hda: Fix possible null-ptr-deref when assigning a stream (Cezary Rojewski)   
  - ARM: 9320/1: fix stack depot IRQ stack filter (Vincent Whitchurch)   
  - jfs: fix array-index-out-of-bounds in diAlloc (Manas Ghandat)   
  - jfs: fix array-index-out-of-bounds in dbFindLeaf (Manas Ghandat)   
  - fs/jfs: Add validity check for db_maxag and db_agpref (Juntong Deng)   
  - fs/jfs: Add check for negative db_l2nbperpage (Juntong Deng)   
  - RDMA/hfi1: Use FIELD_GET() to extract Link Width (Ilpo Järvinen)   
  - crypto: pcrypt - Fix hungtask for PADATA_RESET (Lu Jialin)   
  - selftests/efivarfs: create-read: fix a resource leak (zhujun2)   
  - drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL (Qu Huang)   
  - drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga (Mario Limonciello)   
  - drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7 (Mario Limonciello)   
  - drm/komeda: drop all currently held locks if deadlock happens (baozhu.liu)   
  - platform/x86: thinkpad_acpi: Add battery quirk for Thinkpad X120e (Olli Asikainen)   
  - Bluetooth: Fix double free in hci_conn_cleanup (ZhengHan Wang)   
  - wifi: ath10k: Don't touch the CE interrupt registers after power up (Douglas Anderson)   
  - net: annotate data-races around sk->sk_dst_pending_confirm (Eric Dumazet)   
  - net: annotate data-races around sk->sk_tx_queue_mapping (Eric Dumazet)   
  - wifi: ath10k: fix clang-specific fortify warning (Dmitry Antipov)   
  - wifi: ath9k: fix clang-specific fortify warnings (Dmitry Antipov)   
  - wifi: mac80211: don't return unset power in ieee80211_get_tx_power() (Ping-Ke Shih)   
  - wifi: mac80211_hwsim: fix clang-specific fortify warning (Dmitry Antipov)   
  - x86/mm: Drop the 4 MB restriction on minimal NUMA node memory size (Mike Rapoport (IBM))   
  - clocksource/drivers/timer-atmel-tcb: Fix initialization on SAM9 hardware (Ronald Wahl)   
  - clocksource/drivers/timer-imx-gpt: Fix potential memory leak (Jacky Bai)   
  - perf/core: Bail out early if the request AUX area is out of bound (Shuai Xue)   
  - locking/ww_mutex/test: Fix potential workqueue corruption (John Stultz)   
  - LTS tag: v5.4.261 (Sherry Yang)   
  - btrfs: use u64 for buffer sizes in the tree search ioctls (Filipe Manana)   
  - fbdev: fsl-diu-fb: mark wr_reg_wa() static (Arnd Bergmann)   
  - fbdev: imsttfb: fix a resource leak in probe (Dan Carpenter)   
  - fbdev: imsttfb: Fix error path of imsttfb_probe() (Helge Deller)   
  - spi: spi-zynq-qspi: add spi-mem to driver kconfig dependencies (Amit Kumar Mahapatra)   
  - drm/syncobj: fix DRM_SYNCOBJ_WAIT_FLAGS_WAIT_AVAILABLE (Erik Kurzinger)   
  - netfilter: nat: fix ipv6 nat redirect with mapped and scoped addresses (Florian Westphal)   
  - netfilter: nft_redir: use `struct nf_nat_range2` throughout and deduplicate eval call-backs (Jeremy Sowden)   
  - netfilter: xt_recent: fix (increase) ipv6 literal buffer length (Maciej Żenczykowski)   
  - r8169: respect userspace disabling IFF_MULTICAST (Heiner Kallweit)   
  - tg3: power down device only on SYSTEM_POWER_OFF (George Shuklin)   
  - net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT (D. Wythe)   
  - net: stmmac: xgmac: Enable support for multiple Flexible PPS outputs (Furong Xu)   
  - Fix termination state for idr_for_each_entry_ul() (NeilBrown)   
  - net: r8169: Disable multicast filter for RTL8168H and RTL8107E (Patrick Thompson)   
  - dccp/tcp: Call security_inet_conn_request() after setting IPv6 addresses. (Kuniyuki Iwashima)   
  - dccp: Call security_inet_conn_request() after setting IPv4 addresses. (Kuniyuki Iwashima)   
  - tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (Shigeru Yoshida)   
  - llc: verify mac len before reading mac header (Willem de Bruijn)   
  - Input: synaptics-rmi4 - fix use after free in rmi_unregister_function() (Dan Carpenter)   
  - pwm: brcmstb: Utilize appropriate clock APIs in suspend/resume (Florian Fainelli)   
  - pwm: sti: Reduce number of allocations and drop usage of chip_data (Uwe Kleine-König)   
  - pwm: sti: Avoid conditional gotos (Thierry Reding)   
  - regmap: prevent noinc writes from clobbering cache (Ben Wolsieffer)   
  - media: s3c-camif: Avoid inappropriate kfree() (Katya Orlova)   
  - media: bttv: fix use after free error due to btv->timeout timer (Zheng Wang)   
  - pcmcia: ds: fix possible name leak in error path in pcmcia_device_add() (Yang Yingliang)   
  - pcmcia: ds: fix refcount leak in pcmcia_device_add() (Yang Yingliang)   
  - pcmcia: cs: fix possible hung task and memory leak pccardd() (Yang Yingliang)   
  - rtc: pcf85363: fix wrong mask/val parameters in regmap_update_bits call (Javier Carrasco)   
  - i3c: Fix potential refcount leak in i3c_master_register_new_i3c_devs (Dinghao Liu)   
  - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Wang Yufen)   
  - powerpc/imc-pmu: Use the correct spinlock initializer. (Sebastian Andrzej Siewior)   
  - powerpc/xive: Fix endian conversion size (Benjamin Gray)   
  - modpost: fix tee MODULE_DEVICE_TABLE built on big-endian host (Masahiro Yamada)   
  - f2fs: fix to initialize map.m_pblk in f2fs_precache_extents() (Chao Yu)   
  - dmaengine: pxa_dma: Remove an erroneous BUG_ON() in pxad_free_desc() (Christophe JAILLET)   
  - USB: usbip: fix stub_dev hub disconnect (Jonas Blixt)   
  - tools: iio: iio_generic_buffer ensure alignment (Matti Vaittinen)   
  - tools: iio: iio_generic_buffer: Fix some integer type and calculation (Chenyuan Mi)   
  - tools: iio: privatize globals and functions in iio_generic_buffer.c file (Alexandru Ardelean)   
  - misc: st_core: Do not call kfree_skb() under spin_lock_irqsave() (Jinjie Ruan)   
  - dmaengine: ti: edma: handle irq_of_parse_and_map() errors (Dan Carpenter)   
  - usb: dwc2: fix possible NULL pointer dereference caused by driver concurrency (Jia-Ju Bai)   
  - tty: tty_jobctrl: fix pid memleak in disassociate_ctty() (Yi Yang)   
  - leds: trigger: ledtrig-cpu:: Fix 'output may be truncated' issue for 'cpu' (Christophe JAILLET)   
  - ledtrig-cpu: Limit to 8 CPUs (Pavel Machek)   
  - leds: pwm: Don't disable the PWM when the LED should be off (Uwe Kleine-König)   
  - leds: pwm: convert to atomic PWM API (Uwe Kleine-König)   
  - leds: pwm: simplify if condition (Uwe Kleine-König)   
  - mfd: dln2: Fix double put in dln2_probe (Dinghao Liu)   
  - ASoC: ams-delta.c: use component after check (Kuninori Morimoto)   
  - ASoC: Intel: Skylake: Fix mem leak when parsing UUIDs fails (Cezary Rojewski)   
  - sh: bios: Revive earlyprintk support (Geert Uytterhoeven)   
  - RDMA/hfi1: Workaround truncation compilation error (Leon Romanovsky)   
  - scsi: ufs: core: Leave space for '- ext4: move 'ix' sanity check to corrent position (Gou Hao)   
  - ARM: 9321/1: memset: cast the constant byte to unsigned char (Kursad Oney)   
  - hid: cp2112: Fix duplicate workqueue initialization (Danny Kaehn)   
  - HID: cp2112: Use irqchip template (Linus Walleij)   
  - crypto: caam/jr - fix Chacha20 + Poly1305 self test failure (Gaurav Jain)   
  - crypto: caam/qi2 - fix Chacha20 + Poly1305 self test failure (Gaurav Jain)   
  - nd_btt: Make BTT lanes preemptible (Tomas Glozar)   
  - sched/rt: Provide migrate_disable/enable() inlines (Thomas Gleixner)   
  - libnvdimm/of_pmem: Use devm_kstrdup instead of kstrdup and check its return value (Chen Ni)   
  - hwrng: geode - fix accessing registers (Jonas Gorski)   
  - clk: scmi: Free scmi_clk allocated when the clocks with invalid info are skipped (Sudeep Holla)   
  - firmware: ti_sci: Mark driver as non removable (Dhruva Gole)   
  - firmware: ti_sci: Replace HTTP links with HTTPS ones (Alexander A. Klimov)   
  - soc: qcom: llcc: Handle a second device without data corruption (Uwe Kleine-König)   
  - soc: qcom: Rename llcc-slice to llcc-qcom (Vivek Gautam)   
  - soc: qcom: llcc cleanup to get rid of sdm845 specific driver file (Vivek Gautam)   
  - ARM: dts: qcom: mdm9615: populate vsdcc fixed regulator (Krzysztof Kozlowski)   
  - arm64: dts: qcom: sdm845-mtp: fix WiFi configuration (Dmitry Baryshkov)   
  - drm/rockchip: cdn-dp: Fix some error handling paths in cdn_dp_probe() (Christophe JAILLET)   
  - drm/radeon: possible buffer overflow (Konstantin Meskhidze)   
  - drm/rockchip: vop: Fix call to crtc reset helper (Jonas Karlman)   
  - drm/rockchip: vop: Fix reset of state in duplicate state crtc funcs (Jonas Karlman)   
  - hwmon: (coretemp) Fix potentially truncated sysfs attribute name (Zhang Rui)   
  - platform/x86: wmi: Fix opening of char device (Armin Wolf)   
  - platform/x86: wmi: remove unnecessary initializations (Barnabás Pőcze)   
  - platform/x86: wmi: Fix probe failure when failing to register WMI devices (Armin Wolf)   
  - clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data (Jiasheng Jiang)   
  - clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data (Jiasheng Jiang)   
  - clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data (Jiasheng Jiang)   
  - clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data (Jiasheng Jiang)   
  - clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data (Jiasheng Jiang)   
  - clk: npcm7xx: Fix incorrect kfree (Jonathan Neuschäfer)   
  - clk: keystone: pll: fix a couple NULL vs IS_ERR() checks (Dan Carpenter)   
  - clk: imx: Select MXC_CLK for CLK_IMX8QXP (Abel Vesa)   
  - clk: qcom: gcc-sm8150: Fix gcc_sdcc2_apps_clk_src (Danila Tikhonov)   
  - clk: qcom: gcc-sm8150: use ARRAY_SIZE instead of specifying num_parents (Dmitry Baryshkov)   
  - clk: qcom: clk-rcg2: Fix clock rate overflow for high parent frequencies (Devi Priya)   
  - regmap: debugfs: Fix a erroneous check after snprintf() (Christophe JAILLET)   
  - ipvlan: properly track tx_errors (Eric Dumazet)   
  - net: add DEV_STATS_READ() helper (Eric Dumazet)   
  - ipv6: avoid atomic fragment on GSO packets (Yan Zhai)   
  - ACPI: sysfs: Fix create_pnp_modalias() and create_of_modalias() (Christophe JAILLET)   
  - tcp: fix cookie_init_timestamp() overflows (Eric Dumazet)   
  - tcp: Remove one extra ktime_get_ns() from cookie_init_timestamp (Eric Dumazet)   
  - chtls: fix tp->rcv_tstamp initialization (Eric Dumazet)   
  - r8169: fix rare issue with broken rx after link-down on RTL8125 (Heiner Kallweit)   
  - r8169: use tp_to_dev instead of open code (Juhee Kang)   
  - thermal: core: prevent potential string overflow (Dan Carpenter)   
  - can: dev: can_restart(): fix race condition between controller restart and netif_carrier_on() (Marc Kleine-Budde)   
  - can: dev: can_restart(): don't crash kernel if carrier is OK (Marc Kleine-Budde)   
  - wifi: rtlwifi: fix EDCA limit set by BT coexistence (Dmitry Antipov)   
  - tcp_metrics: do not create an entry from tcp_init_metrics() (Eric Dumazet)   
  - tcp_metrics: properly set tp->snd_ssthresh in tcp_init_metrics() (Eric Dumazet)   
  - tcp_metrics: add missing barriers on delete (Eric Dumazet)   
  - wifi: mt76: mt7603: rework/fix rx pse hang check (Felix Fietkau)   
  - wifi: rtw88: debug: Fix the NULL vs IS_ERR() bug for debugfs_create_file() (Jinjie Ruan)   
  - tcp: call tcp_try_undo_recovery when an RTOd TFO SYNACK is ACKed (Aananth V)   
  - i40e: fix potential memory leaks in i40e_remove() (Andrii Staikov)   
  - genirq/matrix: Exclude managed interrupts in irq_matrix_allocated() (Chen Yu)   
  - vfs: fix readahead(2) on block devices (Reuben Hawkins)   
  - LTS tag: v5.4.260 (Sherry Yang)   
  - tty: 8250: Add support for Intashield IS-100 (Cameron Williams)   
  - tty: 8250: Add support for Brainboxes UP cards (Cameron Williams)   
  - tty: 8250: Add support for additional Brainboxes UC cards (Cameron Williams)   
  - tty: 8250: Remove UC-257 and UC-431 (Cameron Williams)   
  - usb: storage: set 1.50 as the lower bcdDevice for older "Super Top" compatibility (LihaSika)   
  - PCI: Prevent xHCI driver from claiming AMD VanGogh USB3 DRD device (Vicki Pfau)   
  - Revert "ARM: dts: Move am33xx and am43xx mmc nodes to sdhci-omap driver" (Matthias Schiffer)   
  - remove the sx8 block driver (Christoph Hellwig)   
  - ata: ahci: fix enum constants for gcc-13 (Arnd Bergmann)   
  - net: chelsio: cxgb4: add an error code check in t4_load_phy_fw (Su Hui)   
  - platform/mellanox: mlxbf-tmfifo: Fix a warning message (Liming Sun)   
  - platform/x86: asus-wmi: Change ASUS_WMI_BRN_DOWN code from 0x20 to 0x2e (Hans de Goede)   
  - scsi: mpt3sas: Fix in error path (Tomas Henzl)   
  - fbdev: uvesafb: Call cn_del_callback() at the end of uvesafb_exit() (Jorge Maidana)   
  - ASoC: rt5650: fix the wrong result of key button (Shuming Fan)   
  - netfilter: nfnetlink_log: silence bogus compiler warning (Florian Westphal)   
  - spi: npcm-fiu: Fix UMA reads when dummy.nbytes == 0 (William A. Kennington III)   
  - fbdev: atyfb: only use ioremap_uc() on i386 and ia64 (Arnd Bergmann)   
  - Input: synaptics-rmi4 - handle reset delay when using SMBus trsnsport (Dmitry Torokhov)   
  - dmaengine: ste_dma40: Fix PM disable depth imbalance in d40_probe (Zhang Shurong)   
  - irqchip/stm32-exti: add missing DT IRQ flag translation (Ben Wolsieffer)   
  - Input: i8042 - add Fujitsu Lifebook E5411 to i8042 quirk table (Szilard Fabian)   
  - x86: Fix .brk attribute in linker script (Juergen Gross)   
  - rpmsg: Fix possible refcount leak in rpmsg_register_device_override() (Hangyu Hua)   
  - rpmsg: glink: Release driver_override (Bjorn Andersson)   
  - rpmsg: Fix calling device_lock() on non-initialized device (Krzysztof Kozlowski)   
  - rpmsg: Fix kfree() of static memory on setting driver_override (Krzysztof Kozlowski)   
  - rpmsg: Constify local variable in field store macro (Krzysztof Kozlowski)   
  - driver: platform: Add helper for safer setting of driver_override (Krzysztof Kozlowski)   
  - ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow (Baokun Li)   
  - ext4: avoid overlapping preallocations due to overflow (Baokun Li)   
  - ext4: add two helper functions extent_logical_end() and pa_logical_end() (Baokun Li)   
  - x86/mm: Fix RESERVE_BRK() for older binutils (Josh Poimboeuf)   
  - x86/mm: Simplify RESERVE_BRK() (Josh Poimboeuf)   
  - nfsd: lock_rename() needs both directories to live on the same fs (Al Viro)   
  - f2fs: fix to do sanity check on inode type during garbage collection (Chao Yu)   
  - smbdirect: missing rc checks while waiting for rdma events (Steve French)   
  - kobject: Fix slab-out-of-bounds in fill_kobj_path() (Wang Hai)   
  - arm64: fix a concurrency issue in emulation_proc_handler() (Jinjie Ruan)   
  - drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper() (Lukasz Majczak)   
  - x86/i8259: Skip probing when ACPI/MADT advertises PCAT compatibility (Thomas Gleixner)   
  - i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR (Ivan Vecera)   
  - clk: Sanitize possible_parent_show to Handle Return Value of of_clk_get_parent_name (Alessandro Carminati)   
  - nvmem: imx: correct nregs for i.MX6UL (Peng Fan)   
  - nvmem: imx: correct nregs for i.MX6SLL (Peng Fan)   
  - nvmem: imx: correct nregs for i.MX6ULL (Peng Fan)   
  - i2c: stm32f7: Fix PEC handling in case of SMBUS transfers (Alain Volmat)   
  - i2c: muxes: i2c-demux-pinctrl: Use of_get_i2c_adapter_by_node() (Herve Codina)   
  - i2c: muxes: i2c-mux-gpmux: Use of_get_i2c_adapter_by_node() (Herve Codina)   
  - i2c: muxes: i2c-mux-pinctrl: Use of_get_i2c_adapter_by_node() (Herve Codina)   
  - iio: exynos-adc: request second interupt only when touchscreen mode is used (Marek Szyprowski)   
  - gtp: fix fragmentation needed check with gso (Pablo Neira Ayuso)   
  - gtp: uapi: fix GTPA_MAX (Pablo Neira Ayuso)   
  - tcp: fix wrong RTO timeout when received SACK reneging (Fred Chen)   
  - r8152: Cancel hw_phy_work if we have an error in probe (Douglas Anderson)   
  - r8152: Run the unload routine if we have errors during probe (Douglas Anderson)   
  - r8152: Increase USB control msg timeout to 5000ms as per spec (Douglas Anderson)   
  - net: ieee802154: adf7242: Fix some potential buffer overflow in adf7242_stats_show() (Christophe JAILLET)   
  - igc: Fix ambiguity in the ethtool advertising (Sasha Neftin)   
  - neighbour: fix various data-races (Eric Dumazet)   
  - igb: Fix potential memory leak in igb_add_ethtool_nfc_entry (Mateusz Palczewski)   
  - treewide: Spelling fix in comment (Kunwu Chan)   
  - r8169: fix the KCSAN reported data race in rtl_rx while reading desc->opts1 (Mirsad Goran Todorovac)   
  - r8169: fix the KCSAN reported data-race in rtl_tx while reading TxDescArray[entry].opts1 (Mirsad Goran Todorovac)   
  - virtio_balloon: Fix endless deflation and inflation on arm64 (Gavin Shan)   
  - mcb-lpc: Reallocate memory region to avoid memory overlapping (Rodríguez Barbarin, José Javier)   
  - mcb: Return actual parsed size when reading chameleon table (Rodríguez Barbarin, José Javier)   
  - selftests/ftrace: Add new test case which checks non unique symbol (Francis Laniel)   
  - mtd: rawnand: marvell: Ensure program page operations are successful (Miquel Raynal)


author: Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.328.3.el8uek]
changelog:
  - IB/cm: Cancel mad on the DREQ event when the state is MRA_REP_RCVD (Mark Zhang)  [Orabug: 36143228]  
  - KSPLICE: make sure the stack is zeroed. (Gregory Herrero)  [Orabug: 36154654]  
  - sched/fair: Fix tg->load when offlining a CPU (Vincent Guittot)  [Orabug: 36185207]  
  - i2c: core: Fix atomic xfer check for non-preempt config (Benjamin Bara)   
  - net: Save and restore msg_namelen in sock_sendmsg (Marc Dionne)


author: Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.327.1.el8uek]
changelog:
  - hugetlb: disable HVO in Xen (Jane Chu)  [Orabug: 35904478] [Orabug: 35575618]  
  - hugetlb: batch TLB flushes when restoring vmemmap (Mike Kravetz)  [Orabug: 35575618]  
  - hugetlb: batch TLB flushes when freeing vmemmap (Joao Martins)  [Orabug: 35575618]  
  - hugetlb: batch PMD split for bulk vmemmap dedup (Joao Martins)  [Orabug: 35575618]  
  - hugetlb: batch freeing of vmemmap pages (Mike Kravetz)  [Orabug: 35575618]  
  - hugetlb: perform vmemmap restoration on a list of pages (Mike Kravetz)  [Orabug: 35575618]  
  - hugetlb: perform vmemmap optimization on a list of pages (Mike Kravetz)  [Orabug: 35575618]  
  - hugetlb: restructure pool allocations (Mike Kravetz)  [Orabug: 35575618]  
  - hugetlb: optimize update_and_free_pages_bulk to avoid lock cycles (Mike Kravetz)  [Orabug: 35575618]  
  - mm: hugetlb_vmemmap: allow alloc vmemmap pages fallback to other nodes (Yuan Can)  [Orabug: 35575618]  
  - mm/hugetlb: fix nodes huge page allocation when there are surplus pages (Xueshi Hu)  [Orabug: 35575618]  
  - mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes (Yuan Can)  [Orabug: 35575618]  
  - hugetlb: check for hugetlb folio before vmemmap_restore (Mike Kravetz)  [Orabug: 35575618]  
  - hugetlb: set hugetlb page flag before optimizing vmemmap (Mike Kravetz)  [Orabug: 35575618]  
  - mm: hugetlb_vmemmap: fix a race between vmemmap pmd split (Muchun Song)  [Orabug: 35575618]  
  - hugetlb: do not clear hugetlb dtor until allocating vmemmap (Mike Kravetz)  [Orabug: 35575618]  
  - mm: hugetlb_vmemmap: provide stronger vmemmap allocation guarantees (Pasha Tatashin)  [Orabug: 35575618]  
  - mm: hugetlb_vmemmap: simplify hugetlb_vmemmap_init() a bit (Muchun Song)  [Orabug: 35575618]  
  - sysctl: fix proc_dobool() usability (Ondrej Mosnacek)  [Orabug: 35575618]  
  - mm/hugetlb_vmemmap: remap head page to newly allocated page (Joao Martins)  [Orabug: 35575618]  
  - hugetlb: fix __prep_compound_gigantic_page page flag setting (Mike Kravetz)  [Orabug: 35575618]  
  - hugetlb: freeze allocated pages before creating hugetlb pages (Mike Kravetz)  [Orabug: 35575618]  
  - mm/hugetlb: correct demote page offset logic (Doug Berger)  [Orabug: 35575618]  
  - mm: use nth_page instead of mem_map_offset mem_map_next (Cheng Li)  [Orabug: 35575618]  
  - mm: hugetlb_vmemmap: remove redundant list_del() (Muchun Song)  [Orabug: 35575618]  
  - mm: hugetlb_vmemmap: simplify reset_struct_pages() (Muchun Song)  [Orabug: 35575618]  
  - mm: hugetlb_vmemmap: add missing smp_wmb() before set_pte_at() (Miaohe Lin)  [Orabug: 35575618]  
  - mm: hugetlb_vmemmap: use PTRS_PER_PTE instead of PMD_SIZE / PAGE_SIZE (Muchun Song)  [Orabug: 35575618]  
  - mm: hugetlb_vmemmap: move code comments to vmemmap_dedup.rst (Muchun Song)  [Orabug: 35575618]  
  - mm: hugetlb_vmemmap: improve hugetlb_vmemmap code readability (Muchun Song)  [Orabug: 35575618]  
  - mm: hugetlb_vmemmap: replace early_param() with core_param() (Muchun Song)  [Orabug: 35575618]  
  - mm: hugetlb_vmemmap: move vmemmap code related to HugeTLB to hugetlb_vmemmap.c (Muchun Song)  [Orabug: 35575618]  
  - mm: hugetlb_vmemmap: introduce the name HVO (Muchun Song)  [Orabug: 35575618]  
  - mm: hugetlb_vmemmap: optimize vmemmap_optimize_mode handling (Muchun Song)  [Orabug: 35575618]  
  - sysctl: introduce new proc handler proc_dobool (Jia He)  [Orabug: 35575618]  
  - mm: hugetlb_vmemmap: delete hugetlb_optimize_vmemmap_enabled() (Muchun Song)  [Orabug: 35575618]  
  - mm: memory_hotplug: make hugetlb_optimize_vmemmap compatible with memmap_on_memory (Muchun Song)  [Orabug: 35575618]  
  - mm: hugetlb_vmemmap: fix CONFIG_HUGETLB_PAGE_FREE_VMEMMAP_DEFAULT_ON (Muchun Song)  [Orabug: 35575618]  
  - mm: hugetlb_vmemmap: add hugetlb_optimize_vmemmap sysctl (Muchun Song)  [Orabug: 35575618]  
  - mm: hugetlb_vmemmap: use kstrtobool for hugetlb_vmemmap param parsing (Muchun Song)  [Orabug: 35575618]  
  - mm: hugetlb_vmemmap: disable hugetlb_optimize_vmemmap when struct page crosses page boundaries (Muchun Song)  [Orabug: 35575618]  
  - mm/hugetlb_vmemmap: move comment block to Documentation/vm (Joao Martins)  [Orabug: 35575618]  
  - mm: hugetlb_vmemmap: cleanup CONFIG_HUGETLB_PAGE_FREE_VMEMMAP* (Muchun Song)  [Orabug: 35575618]  
  - mm: hugetlb_vmemmap: cleanup hugetlb_free_vmemmap_enabled* (Muchun Song)  [Orabug: 35575618]  
  - mm: hugetlb_vmemmap: cleanup hugetlb_vmemmap related functions (Muchun Song)  [Orabug: 35575618]  
  - mm: sparsemem: move vmemmap related to HugeTLB to CONFIG_HUGETLB_PAGE_FREE_VMEMMAP (Muchun Song)  [Orabug: 34549952] [Orabug: 35575618]  
  - selftests: vm: add a hugetlb test case (Muchun Song)  [Orabug: 34549952] [Orabug: 35575618]  
  - mm: sparsemem: fix missing higher order allocation splitting (Muchun Song)  [Orabug: 34549952] [Orabug: 35575618]  
  - mm: sparsemem: use page table lock to protect kernel pmd operations (Muchun Song)  [Orabug: 34549952] [Orabug: 35575618]  
  - mm: hugetlb: replace hugetlb_free_vmemmap_enabled with a static_key (Muchun Song)  [Orabug: 34549952] [Orabug: 35575618]  
  - jump_label: Provide CONFIG-driven build state defaults (Kees Cook)  [Orabug: 35575618]  
  - mm: hugetlb: free the 2nd vmemmap page associated with each HugeTLB page (Muchun Song)  [Orabug: 34549952] [Orabug: 35575618]  
  - uek: kabi: update a kABI symbol for ACFS (Saeed Mirzamohammadi)  [Orabug: 36083492]  
  - io_uring: break iopolling on signal (Pavel Begunkov)  [Orabug: 36029307]  
  - io_uring: break out of iowq iopoll on teardown (Pavel Begunkov)  [Orabug: 36029307]  
  - io_uring: always lock in io_apoll_task_func (Dylan Yudaken)  [Orabug: 36029307]  
  - io_uring: correct check for O_TMPFILE (Aleksa Sarai)  [Orabug: 36029307]  
  - io_uring: gate iowait schedule on having pending requests (Jens Axboe)  [Orabug: 36029307]  
  - io_uring: treat -EAGAIN for REQ_F_NOWAIT as final for io-wq (Jens Axboe)  [Orabug: 36029307]  
  - io_uring: don't audit the capability check in io_uring_create() (Ondrej Mosnacek)  [Orabug: 36029307]  
  - io_uring: add reschedule point to handle_tw_list() (Jens Axboe)  [Orabug: 36029307]  
  - io_uring: Use io_schedule* in cqring wait (Andres Freund)  [Orabug: 36029307]  
  - io_uring: wait interruptibly for request completions on exit (Jens Axboe)  [Orabug: 36029307]  
  - io_uring: ensure IOPOLL locks around deferred work (Jens Axboe)  [Orabug: 36029307] {CVE-2023-21400}
  - rds: bcopy payload checksums may be calculated incorrectly leading to erroneous diagnostic results (William Kucharski)  [Orabug: 36060779]  
  - octeontx_edac: Fix a potential null pointer dereference (Thomas Tai)  [Orabug: 36087361]


author: Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.328.2.el8uek]
changelog:
  - LTS tag: v5.4.266 (Sherry Yang)   
  - block: Don't invalidate pagecache for invalid falloc modes (Sarthak Kukreti)   
  - smb: client: fix OOB in smbCalcSize() (Paulo Alcantara)   
  - usb: fotg210-hcd: delete an incorrect bounds test (Dan Carpenter)   
  - x86/alternatives: Sync core before enabling interrupts (Thomas Gleixner)   
  - net: rfkill: gpio: set GPIO direction (Rouven Czerwinski)   
  - net: 9p: avoid freeing uninit memory in p9pdu_vreadf (Fedor Pchelkin)   
  - Bluetooth: hci_event: Fix not checking if HCI_OP_INQUIRY has been sent (Luiz Augusto von Dentz)   
  - USB: serial: option: add Quectel RM500Q R13 firmware support (Reinhard Speyerer)   
  - USB: serial: option: add Foxconn T99W265 with new baseline (Slark Xiao)   
  - USB: serial: option: add Quectel EG912Y module support (Alper Ak)   
  - USB: serial: ftdi_sio: update Actisense PIDs constant names (Mark Glover)   
  - wifi: cfg80211: fix certs build to not depend on file order (Johannes Berg)   
  - wifi: cfg80211: Add my certificate (Chen-Yu Tsai)   
  - iio: adc: ti_am335x_adc: Fix return value check of tiadc_request_dma() (Wadim Egorov)   
  - iio: common: ms_sensors: ms_sensors_i2c: fix humidity conversion time table (Javier Carrasco)   
  - scsi: bnx2fc: Fix skb double free in bnx2fc_rcv() (Wei Yongjun)   
  - Input: ipaq-micro-keys - add error handling for devm_kmemdup (Haoran Liu)   
  - iio: imu: inv_mpu6050: fix an error code problem in inv_mpu6050_read_raw (Su Hui)   
  - interconnect: Treat xlate() returning NULL node as an error (Mike Tipton)   
  - btrfs: do not allow non subvolume root targets for snapshot (Josef Bacik)   
  - smb: client: fix NULL deref in asn1_ber_decoder() (Paulo Alcantara)   
  - ALSA: hda/hdmi: add force-connect quirk for NUC5CPYB (Kai Vehmanen)   
  - ALSA: hda/hdmi: Add quirk to force pin connectivity on NUC10 (Kai Vehmanen)   
  - pinctrl: at91-pio4: use dedicated lock class for IRQ (Alexis Lothoré)   
  - i2c: aspeed: Handle the coalesced stop conditions with the start conditions. (Quan Nguyen)   
  - afs: Fix overwriting of result of DNS query (David Howells)   
  - net: check dev->gso_max_size in gso_features_check() (Eric Dumazet)   
  - net: warn if gso_type isn't set for a GSO SKB (Heiner Kallweit)   
  - afs: Fix dynamic root lookup DNS check (David Howells)   
  - afs: Fix the dynamic root's d_delete to always delete unused dentries (David Howells)   
  - net: check vlan filter feature in vlan_vids_add_by_dev() and vlan_vids_del_by_dev() (Liu Jian)   
  - net/rose: fix races in rose_kill_by_device() (Eric Dumazet)   
  - ethernet: atheros: fix a memleak in atl1e_setup_ring_resources (Zhipeng Lu)   
  - net: sched: ife: fix potential use-after-free (Eric Dumazet)   
  - net/mlx5e: Correct snprintf truncation handling for fw_version buffer used by representors (Rahul Rameshbabu)   
  - net/mlx5: Fix fw tracer first block check (Moshe Shemesh)   
  - net/mlx5: improve some comments (Hu Haowen)   
  - Revert "net/mlx5e: fix double free of encap_header" (Vlad Buslov)   
  - wifi: mac80211: mesh_plink: fix matches_local logic (Johannes Berg)   
  - s390/vx: fix save/restore of fpu kernel context (Heiko Carstens)   
  - reset: Fix crash when freeing non-existent optional resets (Geert Uytterhoeven)   
  - ARM: OMAP2+: Fix null pointer dereference and memory leak in omap_soc_device_init (Kunwu Chan)   
  - ksmbd: fix wrong name of SMB2_CREATE_ALLOCATION_SIZE (Namjae Jeon)   
  - ALSA: hda/realtek: Enable headset on Lenovo M90 Gen5 (Bin Li)   
  - LTS tag: v5.4.265 (Sherry Yang)   
  - powerpc/ftrace: Fix stack teardown in ftrace_no_trace (Naveen N Rao)   
  - powerpc/ftrace: Create a dummy stackframe to fix stack unwind (Naveen N Rao)   
  - mmc: block: Be sure to wait while busy in CQE error recovery (Adrian Hunter)   
  - ring-buffer: Fix memory leak of free page (Steven Rostedt (Google))   
  - team: Fix use-after-free when an option instance allocation fails (Florent Revest)   
  - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (James Houghton)   
  - ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS (Baokun Li)   
  - soundwire: stream: fix NULL pointer dereference for multi_link (Krzysztof Kozlowski)   
  - HID: hid-asus: add const to read-only outgoing usb buffer (Denis Benato)   
  - net: usb: qmi_wwan: claim interface 4 for ZTE MF290 (Lech Perczak)   
  - asm-generic: qspinlock: fix queued_spin_value_unlocked() implementation (Linus Torvalds)   
  - HID: multitouch: Add quirk for HONOR GLO-GXXX touchpad (Aoba K)   
  - HID: hid-asus: reset the backlight brightness level on resume (Denis Benato)   
  - HID: add ALWAYS_POLL quirk for Apple kb (Oliver Neukum)   
  - platform/x86: intel_telemetry: Fix kernel doc descriptions (Andy Shevchenko)   
  - bcache: avoid NULL checking to c->root in run_cache_set() (Coly Li)   
  - bcache: add code comments for bch_btree_node_get() and __bch_btree_node_alloc() (Coly Li)   
  - bcache: avoid oversize memory allocation by small stripe_size (Coly Li)   
  - blk-throttle: fix lockdep warning of "cgroup_mutex or RCU read lock required!" (Ming Lei)   
  - usb: aqc111: check packet for fixup for true limit (Oliver Neukum)   
  - ALSA: hda/hdmi: add force-connect quirks for ASUSTeK Z170 variants (Kai Vehmanen)   
  - appletalk: Fix Use-After-Free in atalk_ioctl (Hyunwoo Kim)   
  - net: stmmac: Handle disabled MDIO busses from devicetree (Andrew Halaney)   
  - net: stmmac: use dev_err_probe() for reporting mdio bus registration failure (Rasmus Villemoes)   
  - vsock/virtio: Fix unsigned integer wrap around in virtio_transport_has_space() (Nikolay Kuratov)   
  - sign-file: Fix incorrect return values check (Yusong Gao)   
  - net: Remove acked SYN flag from packet in the transmit queue correctly (Dong Chenchen)   
  - qed: Fix a potential use-after-free in qed_cxt_tables_alloc (Dinghao Liu)   
  - net/rose: Fix Use-After-Free in rose_ioctl (Hyunwoo Kim)   
  - atm: Fix Use-After-Free in do_vcc_ioctl (Hyunwoo Kim)   
  - atm: solos-pci: Fix potential deadlock on &tx_queue_lock (Chengfeng Ye)   
  - atm: solos-pci: Fix potential deadlock on &cli_queue_lock (Chengfeng Ye)   
  - qca_spi: Fix reset behavior (Stefan Wahren)   
  - qca_debug: Fix ethtool -G iface tx behavior (Stefan Wahren)   
  - qca_debug: Prevent crash on TX ring changes (Stefan Wahren)   
  - net: ipv6: support reporting otherwise unknown prefix flags in RTM_NEWPREFIX (Maciej Żenczykowski)   
  - afs: Fix refcount underflow from error handling race (David Howells)   
  - LTS tag: v5.4.264 (Sherry Yang)   
  - devcoredump: Send uevent once devcd is ready (Mukesh Ojha)   
  - devcoredump : Serialize devcd_del work (Mukesh Ojha)   
  - smb: client: fix potential NULL deref in parse_dfs_referrals() (Paulo Alcantara)   
  - cifs: Fix non-availability of dedup breaking generic/304 (David Howells)   
  - Revert "btrfs: add dmesg output for first mount and last unmount of a filesystem" (Greg Kroah-Hartman)   
  - drop_monitor: Require 'CAP_SYS_ADMIN' when joining "events" group (Ido Schimmel)   
  - psample: Require 'CAP_NET_ADMIN' when joining "packets" group (Ido Schimmel)   
  - genetlink: add CAP_NET_ADMIN test for multicast bind (Ido Schimmel)   
  - netlink: don't call ->netlink_bind with table lock held (Ido Schimmel)   
  - io_uring/af_unix: disable sending io_uring over sockets (Pavel Begunkov)   
  - nilfs2: fix missing error check for sb_set_blocksize call (Ryusuke Konishi)   
  - KVM: s390/mm: Properly reset no-dat (Claudio Imbrenda)   
  - x86/CPU/AMD: Check vendor in the AMD microcode callback (Borislav Petkov (AMD))   
  - serial: 8250_omap: Add earlycon support for the AM654 UART controller (Ronald Wahl)   
  - serial: sc16is7xx: address RX timeout interrupt errata (Daniel Mack)   
  - ARM: PL011: Fix DMA support (Arnd Bergmann)   
  - usb: typec: class: fix typec_altmode_put_partner to put plugs (RD Babiera)   
  - parport: Add support for Brainboxes IX/UC/PX parallel cards (Cameron Williams)   
  - usb: gadget: f_hid: fix report descriptor allocation (Konstantin Aladyshev)   
  - mmc: sdhci-sprd: Fix vqmmc not shutting down after the card was pulled (Wenchao Chen)   
  - mmc: core: add helpers mmc_regulator_enable/disable_vqmmc (Heiner Kallweit)   
  - gpiolib: sysfs: Fix error handling on failed export (Boerge Struempfel)   
  - arm64: dts: mediatek: mt8173-evb: Fix regulator-fixed node names (AngeloGioacchino Del Regno)   
  - arm64: dts: mediatek: mt7622: fix memory node warning check (Eugen Hristev)   
  - packet: Move reference count in packet_sock to atomic_long_t (Daniel Borkmann)   
  - tracing: Fix a possible race when disabling buffered events (Petr Pavlu)   
  - tracing: Fix incomplete locking when disabling buffered events (Petr Pavlu)   
  - tracing: Always update snapshot buffer size (Steven Rostedt (Google))   
  - nilfs2: prevent WARNING in nilfs_sufile_set_segment_usage() (Ryusuke Konishi)   
  - ALSA: pcm: fix out-of-bounds in snd_pcm_state_names (Jason Zhang)   
  - ARM: dts: imx7: Declare timers compatible with fsl,imx6dl-gpt (Philipp Zabel)   
  - ARM: dts: imx: make gpt node name generic (Anson Huang)   
  - ARM: imx: Check return value of devm_kasprintf in imx_mmdc_perf_init (Kunwu Chan)   
  - scsi: be2iscsi: Fix a memleak in beiscsi_init_wrb_handle() (Dinghao Liu)   
  - tracing: Fix a warning when allocating buffered events fails (Petr Pavlu)   
  - ASoC: wm_adsp: fix memleak in wm_adsp_buffer_populate (Dinghao Liu)   
  - hwmon: (acpi_power_meter) Fix 4.29 MW bug (Armin Wolf)   
  - RDMA/bnxt_re: Correct module description string (Kalesh AP)   
  - bpf: sockmap, updating the sg structure should also update curr (John Fastabend)   
  - tcp: do not accept ACK of bytes we never sent (Eric Dumazet)   
  - netfilter: xt_owner: Fix for unsafe access of sk->sk_socket (Phil Sutter)   
  - net: hns: fix fake link up on xge port (Yonglong Liu)   
  - ipv4: ip_gre: Avoid skb_pull() failure in ipgre_xmit() (Shigeru Yoshida)   
  - arcnet: restoring support for multiple Sohard Arcnet cards (Thomas Reichinger)   
  - net: arcnet: com20020 fix error handling (Tong Zhang)   
  - net: arcnet: Fix RESET flag handling (Ahmed S. Darwish)   
  - hv_netvsc: rndis_filter needs to select NLS (Randy Dunlap)   
  - ipv6: fix potential NULL deref in fib6_add() (Eric Dumazet)   
  - of: dynamic: Fix of_reconfig_get_state_change() return value documentation (Luca Ceresoli)   
  - of: Add missing 'Return' section in kerneldoc comments (Rob Herring)   
  - of: Fix kerneldoc output formatting (Rob Herring)   
  - of: base: Fix some formatting issues and provide missing descriptions (Lee Jones)   
  - of/irq: Make of_msi_map_rid() PCI bus agnostic (Lorenzo Pieralisi)   
  - of/irq: make of_msi_map_get_device_domain() bus agnostic (Diana Craciun)   
  - of/iommu: Make of_map_rid() PCI agnostic (Lorenzo Pieralisi)   
  - ACPI/IORT: Make iort_msi_map_rid() PCI agnostic (Lorenzo Pieralisi)   
  - ACPI/IORT: Make iort_get_device_domain IRQ domain agnostic (Lorenzo Pieralisi)   
  - of: base: Add of_get_cpu_state_node() to get idle states for a CPU node (Ulf Hansson)   
  - drm/amdgpu: correct chunk_ptr to a pointer to chunk. (YuanShang)   
  - kconfig: fix memory leak from range properties (Masahiro Yamada)   
  - tg3: Increment tx_dropped in tg3_tso_bug() (Alex Pakhunov)   
  - tg3: Move the [rt]x_dropped counters to tg3_napi (Alex Pakhunov)   
  - netfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test (Jozsef Kadlecsik)   
  - LTS tag: v5.4.263 (Sherry Yang)   
  - mmc: block: Retry commands in CQE error recovery (Adrian Hunter)   
  - mmc: core: convert comma to semicolon (Zheng Yongjun)   
  - mmc: cqhci: Fix task clearing in CQE error recovery (Adrian Hunter)   
  - mmc: cqhci: Warn of halt or task clear failure (Adrian Hunter)   
  - mmc: cqhci: Increase recovery halt timeout (Adrian Hunter)   
  - cpufreq: imx6q: Don't disable 792 Mhz OPP unnecessarily (Christoph Niedermaier)   
  - cpufreq: imx6q: don't warn for disabling a non-existing frequency (Christoph Niedermaier)   
  - scsi: qla2xxx: Fix system crash due to bad pointer access (Quinn Tran)   
  - scsi: qla2xxx: Use scsi_cmd_to_rq() instead of scsi_cmnd.request (Bart Van Assche)   
  - scsi: core: Introduce the scsi_cmd_to_rq() function (Bart Van Assche)   
  - ima: detect changes to the backing overlay file (Mimi Zohar)   
  - ovl: skip overlayfs superblocks at global sync (Konstantin Khlebnikov)   
  - ima: annotate iint mutex to avoid lockdep false positive warnings (Amir Goldstein)   
  - fbdev: stifb: Make the STI next font pointer a 32-bit signed offset (Helge Deller)   
  - mtd: cfi_cmdset_0001: Byte swap OTP info (Linus Walleij)   
  - mtd: cfi_cmdset_0001: Support the absence of protection registers (Jean-Philippe Brucker)   
  - s390/cmma: fix detection of DAT pages (Heiko Carstens)   
  - s390/mm: fix phys vs virt confusion in mark_kernel_pXd() functions family (Alexander Gordeev)   
  - smb3: fix touch -h of symlink (Steve French)   
  - net: ravb: Start TX queues after HW initialization succeeded (Claudiu Beznea)   
  - net: ravb: Use pm_runtime_resume_and_get() (Claudiu Beznea)   
  - ravb: Fix races between ravb_tx_timeout_work() and net related ops (Yoshihiro Shimoda)   
  - net: stmmac: xgmac: Disable FPE MMC interrupts (Furong Xu)   
  - ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet (Zhengchao Shao)   
  - Input: xpad - add HyperX Clutch Gladiate Support (Max Nguyen)   
  - btrfs: make error messages more clear when getting a chunk map (Filipe Manana)   
  - btrfs: send: ensure send_fd is writable (Jann Horn)   
  - btrfs: fix off-by-one when checking chunk map includes logical address (Filipe Manana)   
  - btrfs: add dmesg output for first mount and last unmount of a filesystem (Qu Wenruo)   
  - powerpc: Don't clobber f0/vs0 during fp|altivec register save (Timothy Pearson)   
  - bcache: revert replacing IS_ERR_OR_NULL with IS_ERR (Markus Weippert)   
  - dm verity: don't perform FEC for failed readahead IO (Wu Bo)   
  - dm-verity: align struct dm_verity_fec_io properly (Mikulas Patocka)   
  - ALSA: hda/realtek: Add supported ALC257 for ChromeOS (Kailang Yang)   
  - ALSA: hda/realtek: Headset Mic VREF to 100% (Kailang Yang)   
  - ALSA: hda: Disable power-save on KONTRON SinglePC (Takashi Iwai)   
  - mmc: block: Do not lose cache flush during CQE error recovery (Adrian Hunter)   
  - firewire: core: fix possible memory leak in create_units() (Yang Yingliang)   
  - pinctrl: avoid reload of p state in list iteration (Maria Yu)   
  - io_uring: fix off-by one bvec index (Keith Busch)   
  - USB: dwc3: qcom: fix wakeup after probe deferral (Johan Hovold)   
  - USB: dwc3: qcom: fix resource leaks on probe deferral (Johan Hovold)   
  - usb: dwc3: set the dma max_seg_size (Ricardo Ribalda)   
  - USB: dwc2: write HCINT with INTMASK applied (Oliver Neukum)   
  - USB: serial: option: don't claim interface 4 for ZTE MF290 (Lech Perczak)   
  - USB: serial: option: fix FM101R-GL defines (Puliang Lu)   
  - USB: serial: option: add Fibocom L7xx modules (Victor Fragoso)   
  - bcache: prevent potential division by zero error (Rand Deeb)   
  - bcache: check return value from btree_node_alloc_replacement() (Coly Li)   
  - dm-delay: fix a race between delay_presuspend and delay_bio (Mikulas Patocka)   
  - hv_netvsc: Mark VF as slave before exposing it to user-mode (Long Li)   
  - hv_netvsc: Fix race of register_netdevice_notifier and VF register (Haiyang Zhang)   
  - USB: serial: option: add Luat Air72*U series products (Asuna Yang)   
  - s390/dasd: protect device queue against concurrent access (Jan Höppner)   
  - bcache: replace a mistaken IS_ERR() by IS_ERR_OR_NULL() in btree_gc_coalesce() (Coly Li)   
  - ACPI: resource: Skip IRQ override on ASUS ExpertBook B1402CVA (Hans de Goede)   
  - ext4: make sure allocate pending entry not fail (Zhang Yi)   
  - ext4: fix slab-use-after-free in ext4_es_insert_extent() (Baokun Li)   
  - ext4: using nofail preallocation in ext4_es_insert_extent() (Baokun Li)   
  - ext4: using nofail preallocation in ext4_es_insert_delayed_block() (Baokun Li)   
  - ext4: using nofail preallocation in ext4_es_remove_extent() (Baokun Li)   
  - ext4: use pre-allocated es in __es_remove_extent() (Baokun Li)   
  - ext4: use pre-allocated es in __es_insert_extent() (Baokun Li)   
  - ext4: factor out __es_alloc_extent() and __es_free_extent() (Baokun Li)   
  - ext4: add a new helper to check if es must be kept (Baokun Li)   
  - MIPS: KVM: Fix a build warning about variable set but not used (Huacai Chen)   
  - nvmet: nul-terminate the NQNs passed in the connect command (Christoph Hellwig)   
  - nvmet: remove unnecessary ctrl parameter (Chaitanya Kulkarni)   
  - afs: Fix file locking on R/O volumes to operate in local mode (David Howells)   
  - afs: Return ENOENT if no cell DNS record can be found (David Howells)   
  - net: axienet: Fix check for partial TX checksum (Samuel Holland)   
  - amd-xgbe: propagate the correct speed and duplex status (Raju Rangoju)   
  - amd-xgbe: handle the corner-case during tx completion (Raju Rangoju)   
  - amd-xgbe: handle corner-case during sfp hotplug (Raju Rangoju)   
  - arm/xen: fix xen_vcpu_info allocation alignment (Stefano Stabellini)   
  - net: usb: ax88179_178a: fix failed operations during ax88179_reset (Jose Ignacio Tornos Martinez)   
  - ipv4: Correct/silence an endian warning in __ip_do_redirect (Kunwu Chan)   
  - HID: fix HID device resource race between HID core and debugging support (Charles Yi)   
  - HID: core: store the unique system identifier in hid_device (Benjamin Tissoires)   
  - drm/rockchip: vop: Fix color for RGB888/BGR888 format on VOP full (Jonas Karlman)   
  - ata: pata_isapnp: Add missing error check for devm_ioport_map() (Chen Ni)   
  - drm/panel: simple: Fix Innolux G101ICE-L01 timings (Marek Vasut)   
  - drm/panel: simple: Fix Innolux G101ICE-L01 bus flags (Marek Vasut)   
  - afs: Make error on cell lookup failure consistent with OpenAFS (David Howells)   
  - PCI: keystone: Drop __init from ks_pcie_add_pcie_{ep,port}() (Nathan Chancellor)   
  - RDMA/irdma: Prevent zero-length STAG registration (Christopher Bednarz) [Orabug: 36155613] {CVE-2023-25775}
  - driver core: Release all resources during unbind before updating device links (Saravana Kannan)   
  - LTS tag: v5.4.262 (Sherry Yang)   
  - netfilter: nf_tables: bogus EBUSY when deleting flowtable after flush (for 5.4) (Pablo Neira Ayuso)   
  - netfilter: nf_tables: disable toggling dormant table state more than once (Pablo Neira Ayuso)   
  - netfilter: nf_tables: fix table flag updates (Pablo Neira Ayuso)   
  - netfilter: nftables: update table flags from the commit phase (Pablo Neira Ayuso)   
  - netfilter: nf_tables: double hook unregistration in netns path (Pablo Neira Ayuso)   
  - netfilter: nf_tables: unregister flowtable hooks on netns exit (Pablo Neira Ayuso)   
  - netfilter: nf_tables: fix memleak when more than 255 elements expired (Pablo Neira Ayuso)   
  - netfilter: nft_set_hash: try later when GC hits EAGAIN on iteration (Pablo Neira Ayuso)   
  - netfilter: nft_set_rbtree: use read spinlock to avoid datapath contention (Pablo Neira Ayuso)   
  - netfilter: nft_set_rbtree: skip sync GC for new elements in this transaction (Pablo Neira Ayuso) [Orabug: 35814390] {CVE-2023-4244}
  - netfilter: nf_tables: defer gc run if previous batch is still pending (Florian Westphal)   
  - netfilter: nf_tables: use correct lock to protect gc_list (Pablo Neira Ayuso)   
  - netfilter: nf_tables: GC transaction race with abort path (Pablo Neira Ayuso)   
  - netfilter: nf_tables: GC transaction race with netns dismantle (Pablo Neira Ayuso)   
  - netfilter: nf_tables: fix GC transaction races with netns and netlink event exit path (Pablo Neira Ayuso)   
  - netfilter: nf_tables: remove busy mark and gc batch API (Pablo Neira Ayuso)   
  - netfilter: nft_set_hash: mark set element as dead when deleting from packet path (Pablo Neira Ayuso)   
  - netfilter: nf_tables: adapt set backend to use GC transaction API (Pablo Neira Ayuso) [Orabug: 35814390] {CVE-2023-4244}
  - netfilter: nf_tables: GC transaction API to avoid race with control plane (Pablo Neira Ayuso)   
  - netfilter: nf_tables: don't skip expired elements during walk (Florian Westphal)   
  - netfilter: nft_set_rbtree: fix overlap expiration walk (Florian Westphal)   
  - netfilter: nft_set_rbtree: fix null deref on element insertion (Florian Westphal)   
  - netfilter: nft_set_rbtree: Switch to node list walk for overlap detection (Pablo Neira Ayuso)   
  - netfilter: nf_tables: drop map element references from preparation phase (Pablo Neira Ayuso)   
  - netfilter: nftables: rename set element data activation/deactivation functions (Pablo Neira Ayuso)   
  - netfilter: nf_tables: pass context to nft_set_destroy() (Pablo Neira Ayuso)   
  - drm/amdgpu: fix error handling in amdgpu_bo_list_get() (Christian König)   
  - ext4: remove gdb backup copy for meta bg in setup_new_flex_group_blocks (Kemeng Shi)   
  - ext4: correct the start block of counting reserved clusters (Zhang Yi)   
  - ext4: correct return value of ext4_convert_meta_bg (Kemeng Shi)   
  - ext4: correct offset of gdb backup in non meta_bg group to update_backups (Kemeng Shi)   
  - ext4: apply umask if ACL support is disabled (Max Kellermann)   
  - Revert "net: r8169: Disable multicast filter for RTL8168H and RTL8107E" (Heiner Kallweit)   
  - nfsd: fix file memleak on client_opens_release (Mahmoud Adam)   
  - media: venus: hfi: add checks to handle capabilities from firmware (Vikash Garodia)   
  - media: venus: hfi: fix the check to handle session buffer requirement (Vikash Garodia)   
  - media: venus: hfi_parser: Add check to keep the number of codecs within range (Vikash Garodia)   
  - media: sharp: fix sharp encoding (Sean Young)   
  - media: lirc: drop trailing space from scancode transmit (Sean Young)   
  - i2c: i801: fix potential race in i801_block_transaction_byte_by_byte (Heiner Kallweit)   
  - net: dsa: lan9303: consequently nested-lock physical MDIO (Alexander Sverdlin)   
  - Revert ncsi: Propagate carrier gain/loss events to the NCSI controller (Johnathan Mantey)   
  - Bluetooth: btusb: Add 0bda:b85b for Fn-Link RTL8852BE (Guan Wentao)   
  - Bluetooth: btusb: Add RTW8852BE device 13d3:3570 to device tables (Masum Reza)   
  - bluetooth: Add device 13d3:3571 to device tables (Larry Finger)   
  - bluetooth: Add device 0bda:887b to device tables (Larry Finger)   
  - Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0cb8:0xc559 (Artem Lukyanov)   
  - Bluetooth: btusb: add Realtek 8822CE to usb_device_id table (Joseph Hwang)   
  - Bluetooth: btusb: Add flag to define wideband speech capability (Alain Michaud)   
  - tty: serial: meson: fix hard LOCKUP on crtscts mode (Pavel Krasavin)   
  - serial: meson: Use platform_get_irq() to get the interrupt (Lad Prabhakar)   
  - tty: serial: meson: retrieve port FIFO size from DT (Neil Armstrong)   
  - serial: meson: remove redundant initialization of variable id (Colin Ian King)   
  - ALSA: hda/realtek - Enable internal speaker of ASUS K6500ZC (Chandradeep Dey)   
  - ALSA: info: Fix potential deadlock at disconnection (Takashi Iwai)   
  - parisc/pgtable: Do not drop upper 5 address bits of physical address (Helge Deller)   
  - parisc: Prevent booting 64-bit kernels on PA1.x machines (Helge Deller)   
  - i3c: master: cdns: Fix reading status register (Joshua Yeong)   
  - mm/cma: use nth_page() in place of direct struct page manipulation (Zi Yan)   
  - dmaengine: stm32-mdma: correct desc prep when channel running (Alain Volmat)   
  - mcb: fix error handling for different scenarios when parsing (Sanjuán García, Jorge)   
  - i2c: core: Run atomic i2c xfer when !preemptible (Benjamin Bara)   
  - kernel/reboot: emergency_restart: Set correct system_state (Benjamin Bara)   
  - quota: explicitly forbid quota files from being encrypted (Eric Biggers)   
  - jbd2: fix potential data lost in recovering journal raced with synchronizing fs bdev (Zhihao Cheng)   
  - btrfs: don't arbitrarily slow down delalloc if we're committing (Josef Bacik)   
  - PM: hibernate: Clean up sync_read handling in snapshot_write_next() (Brian Geffon)   
  - PM: hibernate: Use __get_safe_page() rather than touching the list (Brian Geffon)   
  - mmc: vub300: fix an error code (Dan Carpenter)   
  - clk: qcom: ipq8074: drop the CLK_SET_RATE_PARENT flag from PLL clocks (Kathiravan Thirumoorthy)   
  - parisc/pdc: Add width field to struct pdc_model (Helge Deller)   
  - PCI: keystone: Don't discard .probe() callback (Uwe Kleine-König)   
  - PCI: keystone: Don't discard .remove() callback (Uwe Kleine-König)   
  - genirq/generic_chip: Make irq_remove_generic_chip() irqdomain aware (Herve Codina)   
  - mmc: meson-gx: Remove setting of CMD_CFG_ERROR (Rong Chen)   
  - ACPI: resource: Do IRQ override on TongFang GMxXGxx (Werner Sembach)   
  - PCI/sysfs: Protect driver's D3cold preference from user space (Lukas Wunner)   
  - hvc/xen: fix error path in xen_hvc_init() to always register frontend driver (David Woodhouse)   
  - audit: don't WARN_ON_ONCE(!current->mm) in audit_exe_compare() (Paul Moore)   
  - audit: don't take task_lock() in audit_exe_compare() code path (Paul Moore)   
  - KVM: x86: Ignore MSR_AMD64_TW_CFG access (Maciej S. Szmigiero)   
  - KVM: x86: hyper-v: Don't auto-enable stimer on write from user-space (Nicolas Saenz Julienne)   
  - x86/cpu/hygon: Fix the CPU topology evaluation for real (Pu Wen)   
  - scsi: megaraid_sas: Increase register read retry rount from 3 to 30 for selected registers (Chandrakanth patil)   
  - bpf: Fix precision tracking for BPF_ALU | BPF_TO_BE | BPF_END (Shung-Hsi Yu)   
  - randstruct: Fix gcc-plugin performance mode to stay in group (Kees Cook)   
  - media: venus: hfi: add checks to perform sanity on queue pointers (Vikash Garodia)   
  - cifs: spnego: add ';' in HOST_KEY_LEN (Anastasia Belova)   
  - tools/power/turbostat: Fix a knl bug (Zhang Rui)   
  - macvlan: Don't propagate promisc change to lower dev in passthru (Vlad Buslov)   
  - net/mlx5e: Check return value of snprintf writing to fw_version buffer for representors (Rahul Rameshbabu)   
  - net/mlx5e: fix double free of encap_header (Dust Li)   
  - net: stmmac: fix rx budget limit check (Baruch Siach)   
  - net: stmmac: Rework stmmac_rx() (Jose Abreu)   
  - netfilter: nf_conntrack_bridge: initialize err to 0 (Linkui Xiao)   
  - net: ethernet: cortina: Fix MTU max setting (Linus Walleij)   
  - net: ethernet: cortina: Handle large frames (Linus Walleij)   
  - net: ethernet: cortina: Fix max RX frame define (Linus Walleij)   
  - bonding: stop the device in bond_setup_by_slave() (Eric Dumazet)   
  - ptp: annotate data-race around q->head and q->tail (Eric Dumazet)   
  - xen/events: fix delayed eoi list handling (Juergen Gross)   
  - ppp: limit MRU to 64K (Willem de Bruijn)   
  - tipc: Fix kernel-infoleak due to uninitialized TLV value (Shigeru Yoshida)   
  - net: hns3: fix variable may not initialized problem in hns3_init_mac_addr() (Yonglong Liu)   
  - tty: Fix uninit-value access in ppp_sync_receive() (Shigeru Yoshida)   
  - ipvlan: add ipvlan_route_v6_outbound() helper (Eric Dumazet)   
  - NFSv4.1: fix SP4_MACH_CRED protection for pnfs IO (Olga Kornievskaia)   
  - wifi: iwlwifi: Use FW rate for non-data frames (Miri Korenblit)   
  - pwm: Fix double shift bug (Dan Carpenter)   
  - ASoC: ti: omap-mcbsp: Fix runtime PM underflow warnings (Tony Lindgren)   
  - kgdb: Flush console before entering kgdb on panic (Douglas Anderson)   
  - drm/amd/display: Avoid NULL dereference of timing generator (Wayne Lin)   
  - media: cobalt: Use FIELD_GET() to extract Link Width (Ilpo Järvinen)   
  - gfs2: ignore negated quota changes (Bob Peterson)   
  - media: vivid: avoid integer overflow (Hans Verkuil)   
  - media: gspca: cpia1: shift-out-of-bounds in set_flicker (Rajeshwar R Shinde)   
  - i2c: sun6i-p2wi: Prevent potential division by zero (Axel Lin)   
  - usb: gadget: f_ncm: Always set current gadget in ncm_bind() (Hardik Gajjar)   
  - tty: vcc: Add check for kstrdup() in vcc_probe() (Yi Yang)   
  - HID: Add quirk for Dell Pro Wireless Keyboard and Mouse KM5221W (Jiri Kosina)   
  - scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() (Wenchao Hao)   
  - atm: iphase: Do PCI error checks on own line (Ilpo Järvinen)   
  - PCI: tegra194: Use FIELD_GET()/FIELD_PREP() with Link Width fields (Ilpo Järvinen)   
  - ALSA: hda: Fix possible null-ptr-deref when assigning a stream (Cezary Rojewski)   
  - ARM: 9320/1: fix stack depot IRQ stack filter (Vincent Whitchurch)   
  - jfs: fix array-index-out-of-bounds in diAlloc (Manas Ghandat)   
  - jfs: fix array-index-out-of-bounds in dbFindLeaf (Manas Ghandat)   
  - fs/jfs: Add validity check for db_maxag and db_agpref (Juntong Deng)   
  - fs/jfs: Add check for negative db_l2nbperpage (Juntong Deng)   
  - RDMA/hfi1: Use FIELD_GET() to extract Link Width (Ilpo Järvinen)   
  - crypto: pcrypt - Fix hungtask for PADATA_RESET (Lu Jialin)   
  - selftests/efivarfs: create-read: fix a resource leak (zhujun2)   
  - drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL (Qu Huang)   
  - drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga (Mario Limonciello)   
  - drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7 (Mario Limonciello)   
  - drm/komeda: drop all currently held locks if deadlock happens (baozhu.liu)   
  - platform/x86: thinkpad_acpi: Add battery quirk for Thinkpad X120e (Olli Asikainen)   
  - Bluetooth: Fix double free in hci_conn_cleanup (ZhengHan Wang)   
  - wifi: ath10k: Don't touch the CE interrupt registers after power up (Douglas Anderson)   
  - net: annotate data-races around sk->sk_dst_pending_confirm (Eric Dumazet)   
  - net: annotate data-races around sk->sk_tx_queue_mapping (Eric Dumazet)   
  - wifi: ath10k: fix clang-specific fortify warning (Dmitry Antipov)   
  - wifi: ath9k: fix clang-specific fortify warnings (Dmitry Antipov)   
  - wifi: mac80211: don't return unset power in ieee80211_get_tx_power() (Ping-Ke Shih)   
  - wifi: mac80211_hwsim: fix clang-specific fortify warning (Dmitry Antipov)   
  - x86/mm: Drop the 4 MB restriction on minimal NUMA node memory size (Mike Rapoport (IBM))   
  - clocksource/drivers/timer-atmel-tcb: Fix initialization on SAM9 hardware (Ronald Wahl)   
  - clocksource/drivers/timer-imx-gpt: Fix potential memory leak (Jacky Bai)   
  - perf/core: Bail out early if the request AUX area is out of bound (Shuai Xue)   
  - locking/ww_mutex/test: Fix potential workqueue corruption (John Stultz)   
  - LTS tag: v5.4.261 (Sherry Yang)   
  - btrfs: use u64 for buffer sizes in the tree search ioctls (Filipe Manana)   
  - fbdev: fsl-diu-fb: mark wr_reg_wa() static (Arnd Bergmann)   
  - fbdev: imsttfb: fix a resource leak in probe (Dan Carpenter)   
  - fbdev: imsttfb: Fix error path of imsttfb_probe() (Helge Deller)   
  - spi: spi-zynq-qspi: add spi-mem to driver kconfig dependencies (Amit Kumar Mahapatra)   
  - drm/syncobj: fix DRM_SYNCOBJ_WAIT_FLAGS_WAIT_AVAILABLE (Erik Kurzinger)   
  - netfilter: nat: fix ipv6 nat redirect with mapped and scoped addresses (Florian Westphal)   
  - netfilter: nft_redir: use `struct nf_nat_range2` throughout and deduplicate eval call-backs (Jeremy Sowden)   
  - netfilter: xt_recent: fix (increase) ipv6 literal buffer length (Maciej Żenczykowski)   
  - r8169: respect userspace disabling IFF_MULTICAST (Heiner Kallweit)   
  - tg3: power down device only on SYSTEM_POWER_OFF (George Shuklin)   
  - net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT (D. Wythe)   
  - net: stmmac: xgmac: Enable support for multiple Flexible PPS outputs (Furong Xu)   
  - Fix termination state for idr_for_each_entry_ul() (NeilBrown)   
  - net: r8169: Disable multicast filter for RTL8168H and RTL8107E (Patrick Thompson)   
  - dccp/tcp: Call security_inet_conn_request() after setting IPv6 addresses. (Kuniyuki Iwashima)   
  - dccp: Call security_inet_conn_request() after setting IPv4 addresses. (Kuniyuki Iwashima)   
  - tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (Shigeru Yoshida)   
  - llc: verify mac len before reading mac header (Willem de Bruijn)   
  - Input: synaptics-rmi4 - fix use after free in rmi_unregister_function() (Dan Carpenter)   
  - pwm: brcmstb: Utilize appropriate clock APIs in suspend/resume (Florian Fainelli)   
  - pwm: sti: Reduce number of allocations and drop usage of chip_data (Uwe Kleine-König)   
  - pwm: sti: Avoid conditional gotos (Thierry Reding)   
  - regmap: prevent noinc writes from clobbering cache (Ben Wolsieffer)   
  - media: s3c-camif: Avoid inappropriate kfree() (Katya Orlova)   
  - media: bttv: fix use after free error due to btv->timeout timer (Zheng Wang)   
  - pcmcia: ds: fix possible name leak in error path in pcmcia_device_add() (Yang Yingliang)   
  - pcmcia: ds: fix refcount leak in pcmcia_device_add() (Yang Yingliang)   
  - pcmcia: cs: fix possible hung task and memory leak pccardd() (Yang Yingliang)   
  - rtc: pcf85363: fix wrong mask/val parameters in regmap_update_bits call (Javier Carrasco)   
  - i3c: Fix potential refcount leak in i3c_master_register_new_i3c_devs (Dinghao Liu)   
  - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Wang Yufen)   
  - powerpc/imc-pmu: Use the correct spinlock initializer. (Sebastian Andrzej Siewior)   
  - powerpc/xive: Fix endian conversion size (Benjamin Gray)   
  - modpost: fix tee MODULE_DEVICE_TABLE built on big-endian host (Masahiro Yamada)   
  - f2fs: fix to initialize map.m_pblk in f2fs_precache_extents() (Chao Yu)   
  - dmaengine: pxa_dma: Remove an erroneous BUG_ON() in pxad_free_desc() (Christophe JAILLET)   
  - USB: usbip: fix stub_dev hub disconnect (Jonas Blixt)   
  - tools: iio: iio_generic_buffer ensure alignment (Matti Vaittinen)   
  - tools: iio: iio_generic_buffer: Fix some integer type and calculation (Chenyuan Mi)   
  - tools: iio: privatize globals and functions in iio_generic_buffer.c file (Alexandru Ardelean)   
  - misc: st_core: Do not call kfree_skb() under spin_lock_irqsave() (Jinjie Ruan)   
  - dmaengine: ti: edma: handle irq_of_parse_and_map() errors (Dan Carpenter)   
  - usb: dwc2: fix possible NULL pointer dereference caused by driver concurrency (Jia-Ju Bai)   
  - tty: tty_jobctrl: fix pid memleak in disassociate_ctty() (Yi Yang)   
  - leds: trigger: ledtrig-cpu:: Fix 'output may be truncated' issue for 'cpu' (Christophe JAILLET)   
  - ledtrig-cpu: Limit to 8 CPUs (Pavel Machek)   
  - leds: pwm: Don't disable the PWM when the LED should be off (Uwe Kleine-König)   
  - leds: pwm: convert to atomic PWM API (Uwe Kleine-König)   
  - leds: pwm: simplify if condition (Uwe Kleine-König)   
  - mfd: dln2: Fix double put in dln2_probe (Dinghao Liu)   
  - ASoC: ams-delta.c: use component after check (Kuninori Morimoto)   
  - ASoC: Intel: Skylake: Fix mem leak when parsing UUIDs fails (Cezary Rojewski)   
  - sh: bios: Revive earlyprintk support (Geert Uytterhoeven)   
  - RDMA/hfi1: Workaround truncation compilation error (Leon Romanovsky)   
  - scsi: ufs: core: Leave space for '- ext4: move 'ix' sanity check to corrent position (Gou Hao)   
  - ARM: 9321/1: memset: cast the constant byte to unsigned char (Kursad Oney)   
  - hid: cp2112: Fix duplicate workqueue initialization (Danny Kaehn)   
  - HID: cp2112: Use irqchip template (Linus Walleij)   
  - crypto: caam/jr - fix Chacha20 + Poly1305 self test failure (Gaurav Jain)   
  - crypto: caam/qi2 - fix Chacha20 + Poly1305 self test failure (Gaurav Jain)   
  - nd_btt: Make BTT lanes preemptible (Tomas Glozar)   
  - sched/rt: Provide migrate_disable/enable() inlines (Thomas Gleixner)   
  - libnvdimm/of_pmem: Use devm_kstrdup instead of kstrdup and check its return value (Chen Ni)   
  - hwrng: geode - fix accessing registers (Jonas Gorski)   
  - clk: scmi: Free scmi_clk allocated when the clocks with invalid info are skipped (Sudeep Holla)   
  - firmware: ti_sci: Mark driver as non removable (Dhruva Gole)   
  - firmware: ti_sci: Replace HTTP links with HTTPS ones (Alexander A. Klimov)   
  - soc: qcom: llcc: Handle a second device without data corruption (Uwe Kleine-König)   
  - soc: qcom: Rename llcc-slice to llcc-qcom (Vivek Gautam)   
  - soc: qcom: llcc cleanup to get rid of sdm845 specific driver file (Vivek Gautam)   
  - ARM: dts: qcom: mdm9615: populate vsdcc fixed regulator (Krzysztof Kozlowski)   
  - arm64: dts: qcom: sdm845-mtp: fix WiFi configuration (Dmitry Baryshkov)   
  - drm/rockchip: cdn-dp: Fix some error handling paths in cdn_dp_probe() (Christophe JAILLET)   
  - drm/radeon: possible buffer overflow (Konstantin Meskhidze)   
  - drm/rockchip: vop: Fix call to crtc reset helper (Jonas Karlman)   
  - drm/rockchip: vop: Fix reset of state in duplicate state crtc funcs (Jonas Karlman)   
  - hwmon: (coretemp) Fix potentially truncated sysfs attribute name (Zhang Rui)   
  - platform/x86: wmi: Fix opening of char device (Armin Wolf)   
  - platform/x86: wmi: remove unnecessary initializations (Barnabás Pőcze)   
  - platform/x86: wmi: Fix probe failure when failing to register WMI devices (Armin Wolf)   
  - clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data (Jiasheng Jiang)   
  - clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data (Jiasheng Jiang)   
  - clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data (Jiasheng Jiang)   
  - clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data (Jiasheng Jiang)   
  - clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data (Jiasheng Jiang)   
  - clk: npcm7xx: Fix incorrect kfree (Jonathan Neuschäfer)   
  - clk: keystone: pll: fix a couple NULL vs IS_ERR() checks (Dan Carpenter)   
  - clk: imx: Select MXC_CLK for CLK_IMX8QXP (Abel Vesa)   
  - clk: qcom: gcc-sm8150: Fix gcc_sdcc2_apps_clk_src (Danila Tikhonov)   
  - clk: qcom: gcc-sm8150: use ARRAY_SIZE instead of specifying num_parents (Dmitry Baryshkov)   
  - clk: qcom: clk-rcg2: Fix clock rate overflow for high parent frequencies (Devi Priya)   
  - regmap: debugfs: Fix a erroneous check after snprintf() (Christophe JAILLET)   
  - ipvlan: properly track tx_errors (Eric Dumazet)   
  - net: add DEV_STATS_READ() helper (Eric Dumazet)   
  - ipv6: avoid atomic fragment on GSO packets (Yan Zhai)   
  - ACPI: sysfs: Fix create_pnp_modalias() and create_of_modalias() (Christophe JAILLET)   
  - tcp: fix cookie_init_timestamp() overflows (Eric Dumazet)   
  - tcp: Remove one extra ktime_get_ns() from cookie_init_timestamp (Eric Dumazet)   
  - chtls: fix tp->rcv_tstamp initialization (Eric Dumazet)   
  - r8169: fix rare issue with broken rx after link-down on RTL8125 (Heiner Kallweit)   
  - r8169: use tp_to_dev instead of open code (Juhee Kang)   
  - thermal: core: prevent potential string overflow (Dan Carpenter)   
  - can: dev: can_restart(): fix race condition between controller restart and netif_carrier_on() (Marc Kleine-Budde)   
  - can: dev: can_restart(): don't crash kernel if carrier is OK (Marc Kleine-Budde)   
  - wifi: rtlwifi: fix EDCA limit set by BT coexistence (Dmitry Antipov)   
  - tcp_metrics: do not create an entry from tcp_init_metrics() (Eric Dumazet)   
  - tcp_metrics: properly set tp->snd_ssthresh in tcp_init_metrics() (Eric Dumazet)   
  - tcp_metrics: add missing barriers on delete (Eric Dumazet)   
  - wifi: mt76: mt7603: rework/fix rx pse hang check (Felix Fietkau)   
  - wifi: rtw88: debug: Fix the NULL vs IS_ERR() bug for debugfs_create_file() (Jinjie Ruan)   
  - tcp: call tcp_try_undo_recovery when an RTOd TFO SYNACK is ACKed (Aananth V)   
  - i40e: fix potential memory leaks in i40e_remove() (Andrii Staikov)   
  - genirq/matrix: Exclude managed interrupts in irq_matrix_allocated() (Chen Yu)   
  - vfs: fix readahead(2) on block devices (Reuben Hawkins)   
  - LTS tag: v5.4.260 (Sherry Yang)   
  - tty: 8250: Add support for Intashield IS-100 (Cameron Williams)   
  - tty: 8250: Add support for Brainboxes UP cards (Cameron Williams)   
  - tty: 8250: Add support for additional Brainboxes UC cards (Cameron Williams)   
  - tty: 8250: Remove UC-257 and UC-431 (Cameron Williams)   
  - usb: storage: set 1.50 as the lower bcdDevice for older "Super Top" compatibility (LihaSika)   
  - PCI: Prevent xHCI driver from claiming AMD VanGogh USB3 DRD device (Vicki Pfau)   
  - Revert "ARM: dts: Move am33xx and am43xx mmc nodes to sdhci-omap driver" (Matthias Schiffer)   
  - remove the sx8 block driver (Christoph Hellwig)   
  - ata: ahci: fix enum constants for gcc-13 (Arnd Bergmann)   
  - net: chelsio: cxgb4: add an error code check in t4_load_phy_fw (Su Hui)   
  - platform/mellanox: mlxbf-tmfifo: Fix a warning message (Liming Sun)   
  - platform/x86: asus-wmi: Change ASUS_WMI_BRN_DOWN code from 0x20 to 0x2e (Hans de Goede)   
  - scsi: mpt3sas: Fix in error path (Tomas Henzl)   
  - fbdev: uvesafb: Call cn_del_callback() at the end of uvesafb_exit() (Jorge Maidana)   
  - ASoC: rt5650: fix the wrong result of key button (Shuming Fan)   
  - netfilter: nfnetlink_log: silence bogus compiler warning (Florian Westphal)   
  - spi: npcm-fiu: Fix UMA reads when dummy.nbytes == 0 (William A. Kennington III)   
  - fbdev: atyfb: only use ioremap_uc() on i386 and ia64 (Arnd Bergmann)   
  - Input: synaptics-rmi4 - handle reset delay when using SMBus trsnsport (Dmitry Torokhov)   
  - dmaengine: ste_dma40: Fix PM disable depth imbalance in d40_probe (Zhang Shurong)   
  - irqchip/stm32-exti: add missing DT IRQ flag translation (Ben Wolsieffer)   
  - Input: i8042 - add Fujitsu Lifebook E5411 to i8042 quirk table (Szilard Fabian)   
  - x86: Fix .brk attribute in linker script (Juergen Gross)   
  - rpmsg: Fix possible refcount leak in rpmsg_register_device_override() (Hangyu Hua)   
  - rpmsg: glink: Release driver_override (Bjorn Andersson)   
  - rpmsg: Fix calling device_lock() on non-initialized device (Krzysztof Kozlowski)   
  - rpmsg: Fix kfree() of static memory on setting driver_override (Krzysztof Kozlowski)   
  - rpmsg: Constify local variable in field store macro (Krzysztof Kozlowski)   
  - driver: platform: Add helper for safer setting of driver_override (Krzysztof Kozlowski)   
  - ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow (Baokun Li)   
  - ext4: avoid overlapping preallocations due to overflow (Baokun Li)   
  - ext4: add two helper functions extent_logical_end() and pa_logical_end() (Baokun Li)   
  - x86/mm: Fix RESERVE_BRK() for older binutils (Josh Poimboeuf)   
  - x86/mm: Simplify RESERVE_BRK() (Josh Poimboeuf) [Orabug: 34335625] {CVE-2022-23816} {CVE-2022-29901}
  - nfsd: lock_rename() needs both directories to live on the same fs (Al Viro)   
  - f2fs: fix to do sanity check on inode type during garbage collection (Chao Yu)   
  - smbdirect: missing rc checks while waiting for rdma events (Steve French)   
  - kobject: Fix slab-out-of-bounds in fill_kobj_path() (Wang Hai) [Orabug: 35924074] {CVE-2023-45863}
  - arm64: fix a concurrency issue in emulation_proc_handler() (Jinjie Ruan)   
  - drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper() (Lukasz Majczak)   
  - x86/i8259: Skip probing when ACPI/MADT advertises PCAT compatibility (Thomas Gleixner)   
  - i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR (Ivan Vecera)   
  - clk: Sanitize possible_parent_show to Handle Return Value of of_clk_get_parent_name (Alessandro Carminati)   
  - nvmem: imx: correct nregs for i.MX6UL (Peng Fan)   
  - nvmem: imx: correct nregs for i.MX6SLL (Peng Fan)   
  - nvmem: imx: correct nregs for i.MX6ULL (Peng Fan)   
  - i2c: stm32f7: Fix PEC handling in case of SMBUS transfers (Alain Volmat)   
  - i2c: muxes: i2c-demux-pinctrl: Use of_get_i2c_adapter_by_node() (Herve Codina)   
  - i2c: muxes: i2c-mux-gpmux: Use of_get_i2c_adapter_by_node() (Herve Codina)   
  - i2c: muxes: i2c-mux-pinctrl: Use of_get_i2c_adapter_by_node() (Herve Codina)   
  - iio: exynos-adc: request second interupt only when touchscreen mode is used (Marek Szyprowski)   
  - gtp: fix fragmentation needed check with gso (Pablo Neira Ayuso)   
  - gtp: uapi: fix GTPA_MAX (Pablo Neira Ayuso)   
  - tcp: fix wrong RTO timeout when received SACK reneging (Fred Chen)   
  - r8152: Cancel hw_phy_work if we have an error in probe (Douglas Anderson)   
  - r8152: Run the unload routine if we have errors during probe (Douglas Anderson)   
  - r8152: Increase USB control msg timeout to 5000ms as per spec (Douglas Anderson)   
  - net: ieee802154: adf7242: Fix some potential buffer overflow in adf7242_stats_show() (Christophe JAILLET)   
  - igc: Fix ambiguity in the ethtool advertising (Sasha Neftin)   
  - neighbour: fix various data-races (Eric Dumazet)   
  - igb: Fix potential memory leak in igb_add_ethtool_nfc_entry (Mateusz Palczewski)   
  - treewide: Spelling fix in comment (Kunwu Chan)   
  - r8169: fix the KCSAN reported data race in rtl_rx while reading desc->opts1 (Mirsad Goran Todorovac)   
  - r8169: fix the KCSAN reported data-race in rtl_tx while reading TxDescArray[entry].opts1 (Mirsad Goran Todorovac)   
  - virtio_balloon: Fix endless deflation and inflation on arm64 (Gavin Shan)   
  - mcb-lpc: Reallocate memory region to avoid memory overlapping (Rodríguez Barbarin, José Javier)   
  - mcb: Return actual parsed size when reading chameleon table (Rodríguez Barbarin, José Javier)   
  - selftests/ftrace: Add new test case which checks non unique symbol (Francis Laniel)   
  - mtd: rawnand: marvell: Ensure program page operations are successful (Miquel Raynal)


author: Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.329.1.el8uek]
changelog:
  - mm: avoid heavy swap lock contention when unmapping with padata (Anthony Yznaga)  [Orabug: 36201620]  
  - mm: use less threads when unmapping some large VMAs (Anthony Yznaga)  [Orabug: 36201620]  
  - uek-rpm: Update the x86 kABI files for new symbol (Yifei Liu)  [Orabug: 36178802]


author: Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.329.2.el8uek]
changelog:
  - LTS tag: v5.4.268 (Sherry Yang)   
  - arm64: dts: armada-3720-turris-mox: set irq type for RTC (Sjoerd Simons)   
  - perf top: Skip side-band event setup if HAVE_LIBBPF_SUPPORT is not set (Tiezhu Yang)   
  - i2c: s3c24xx: fix transferring more than one message in polling mode (Marek Szyprowski)   
  - i2c: s3c24xx: fix read transfers in polling mode (Marek Szyprowski)   
  - mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure (Amit Cohen)   
  - kdb: Fix a potential buffer overflow in kdb_local() (Christophe JAILLET)   
  - kdb: Censor attempts to set PROMPT without ENABLE_MEM_READ (Daniel Thompson)   
  - ipvs: avoid stat macros calls from preemptible context (Fedor Pchelkin)   
  - netfilter: nf_tables: skip dead set elements in netlink dump (Pablo Neira Ayuso)   
  - net: dsa: vsc73xx: Add null pointer check to vsc73xx_gpio_probe (Kunwu Chan)   
  - net: ravb: Fix dma_addr_t truncation in error case (Nikita Yushchenko)   
  - net: phy: micrel: populate .soft_reset for KSZ9131 (Claudiu Beznea)   
  - net: qualcomm: rmnet: fix global oob in rmnet_policy (Lin Ma)   
  - s390/pci: fix max size calculation in zpci_memcpy_toio() (Niklas Schnelle)   
  - PCI: keystone: Fix race condition when initializing PHYs (Siddharth Vadapalli)   
  - nvmet-tcp: Fix the H2C expected PDU len calculation (Maurizio Lombardi)   
  - serial: imx: Correct clock error message in function probe() (Christoph Niedermaier)   
  - apparmor: avoid crash when parsed profile name is empty (Fedor Pchelkin)   
  - perf env: Avoid recursively taking env->bpf_progs.lock (Ian Rogers)   
  - perf bpf: Decouple creating the evlist from adding the SB event (Arnaldo Carvalho de Melo)   
  - perf top: Move sb_evlist to 'struct perf_top' (Arnaldo Carvalho de Melo)   
  - perf record: Move sb_evlist to 'struct record' (Arnaldo Carvalho de Melo)   
  - perf env: Add perf_env__numa_node() (Jiri Olsa)   
  - nvmet-tcp: fix a crash in nvmet_req_complete() (Maurizio Lombardi)   
  - nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length (Maurizio Lombardi)   
  - perf genelf: Set ELF program header addresses properly (Namhyung Kim)   
  - software node: Let args be NULL in software_node_get_reference_args (Sakari Ailus)   
  - acpi: property: Let args be NULL in __acpi_node_get_property_reference (Sakari Ailus)   
  - serial: 8250: omap: Don't skip resource freeing if pm_runtime_resume_and_get() failed (Uwe Kleine-König)   
  - MIPS: Alchemy: Fix an out-of-bound access in db1550_dev_setup() (Christophe JAILLET)   
  - MIPS: Alchemy: Fix an out-of-bound access in db1200_dev_setup() (Christophe JAILLET)   
  - mips: Fix incorrect max_low_pfn adjustment (Serge Semin)   
  - HID: wacom: Correct behavior when processing some confidence == false touches (Jason Gerecke)   
  - x86/kvm: Do not try to disable kvmclock if it was not enabled (Kirill A. Shutemov)   
  - wifi: mwifiex: configure BSSID consistently when starting AP (David Lin)   
  - wifi: rtlwifi: Convert LNKCTL change to PCIe cap RMW accessors (Ilpo Järvinen)   
  - wifi: rtlwifi: Remove bogus and dangerous ASPM disable/enable code (Ilpo Järvinen)   
  - rootfs: Fix support for rootfstype= when root= is given (Stefan Berger)   
  - fbdev: flush deferred work in fb_deferred_io_fsync() (Nam Cao)   
  - ALSA: oxygen: Fix right channel of capture volume mixer (Takashi Iwai)   
  - usb: mon: Fix atomicity violation in mon_bin_vma_fault (Gui-Dong Han)   
  - usb: typec: class: fix typec_altmode_put_partner to put plugs (RD Babiera)   
  - Revert "usb: typec: class: fix typec_altmode_put_partner to put plugs" (Heikki Krogerus)   
  - usb: chipidea: wait controller resume finished for wakeup irq (Xu Yang)   
  - Revert "usb: dwc3: don't reset device side if dwc3 was configured as host-only" (Thinh Nguyen)   
  - Revert "usb: dwc3: Soft reset phy on probe for host" (Thinh Nguyen)   
  - usb: dwc: ep0: Update request status in dwc3_ep0_stall_restart (Uttkarsh Aggarwal)   
  - usb: phy: mxs: remove CONFIG_USB_OTG condition for mxs_phy_is_otg_host() (Xu Yang)   
  - tick-sched: Fix idle and iowait sleeptime accounting vs CPU hotplug (Heiko Carstens)   
  - binder: fix unused alloc->free_async_space (Carlos Llamas)   
  - binder: fix race between mmput() and do_exit() (Carlos Llamas)   
  - xen-netback: don't produce zero-size SKB frags (Jan Beulich)   
  - Revert "ASoC: atmel: Remove system clock tree configuration for at91sam9g20ek" (Greg Kroah-Hartman)   
  - Input: atkbd - use ab83 as id when skipping the getid command (Hans de Goede)   
  - binder: fix use-after-free in shinker's callback (Carlos Llamas)   
  - binder: fix async space check for 0-sized buffers (Carlos Llamas)   
  - of: unittest: Fix of_count_phandle_with_args() expected value message (Geert Uytterhoeven)   
  - of: Fix double free in of_parse_phandle_with_args_map (Christian A. Ehrhardt)   
  - mmc: sdhci_omap: Fix TI SoC dependencies (Peter Robinson)   
  - clk: si5341: fix an error code problem in si5341_output_clk_set_rate (Su Hui)   
  - watchdog: bcm2835_wdt: Fix WDIOC_SETTIMEOUT handling (Stefan Wahren)   
  - watchdog/hpwdt: Only claim UNKNOWN NMI if from iLO (Jerry Hoemann)   
  - watchdog: set cdev owner before adding (Curtis Klein)   
  - drivers: clk: zynqmp: calculate closest mux rate (Jay Buddhabhatti)   
  - gpu/drm/radeon: fix two memleaks in radeon_vm_init (Zhipeng Lu)   
  - drivers/amd/pm: fix a use-after-free in kv_parse_power_table (Zhipeng Lu)   
  - drm/amd/pm: fix a double-free in si_dpm_init (Zhipeng Lu)   
  - drm/amdgpu/debugfs: fix error code when smc register accessors are NULL (Alex Deucher)   
  - media: dvbdev: drop refcount on error path in dvb_device_open() (Dan Carpenter)   
  - media: cx231xx: fix a memleak in cx231xx_init_isoc (Zhipeng Lu)   
  - drm/bridge: tc358767: Fix return value on error case (Tomi Valkeinen)   
  - drm/radeon/trinity_dpm: fix a memleak in trinity_parse_power_table (Zhipeng Lu)   
  - drm/radeon/dpm: fix a memleak in sumo_parse_power_table (Zhipeng Lu)   
  - drm/radeon: check the alloc_workqueue return value in radeon_crtc_init() (Yang Yingliang)   
  - drm/drv: propagate errors from drm_modeset_register_all() (Dmitry Baryshkov)   
  - drm/msm/dsi: Use pm_runtime_resume_and_get to prevent refcnt leaks (Konrad Dybcio)   
  - drm/msm/mdp4: flush vblank event on disable (Dmitry Baryshkov)   
  - ASoC: cs35l34: Fix GPIO name and drop legacy include (Linus Walleij)   
  - ASoC: cs35l33: Fix GPIO name and drop legacy include (Linus Walleij)   
  - drm/radeon: check return value of radeon_ring_lock() (Nikita Zhandarovich)   
  - drm/radeon/r100: Fix integer overflow issues in r100_cs_track_check() (Nikita Zhandarovich)   
  - drm/radeon/r600_cs: Fix possible int overflows in r600_cs_check_reg() (Nikita Zhandarovich)   
  - f2fs: fix to avoid dirent corruption (Chao Yu)   
  - drm/bridge: Fix typo in post_disable() description (Dario Binacchi)   
  - media: pvrusb2: fix use after free on context disconnection (Ricardo B. Marliere)   
  - RDMA/usnic: Silence uninitialized symbol smatch warnings (Leon Romanovsky)   
  - ARM: davinci: always select CONFIG_CPU_ARM926T (Arnd Bergmann)   
  - ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim() (Eric Dumazet)   
  - Bluetooth: btmtkuart: fix recv_buf() return value (Francesco Dolcini)   
  - Bluetooth: Fix bogus check for re-auth no supported with non-ssp (Luiz Augusto von Dentz)   
  - netfilter: nf_tables: mark newset as dead on transaction abort (Florian Westphal)   
  - wifi: rtlwifi: rtl8192se: using calculate_bit_shift() (Su Hui)   
  - wifi: rtlwifi: rtl8192ee: using calculate_bit_shift() (Su Hui)   
  - wifi: rtlwifi: rtl8192de: using calculate_bit_shift() (Su Hui)   
  - rtlwifi: rtl8192de: make arrays static const, makes object smaller (Colin Ian King)   
  - wifi: rtlwifi: rtl8192ce: using calculate_bit_shift() (Su Hui)   
  - wifi: rtlwifi: rtl8192cu: using calculate_bit_shift() (Su Hui)   
  - wifi: rtlwifi: rtl8192c: using calculate_bit_shift() (Su Hui)   
  - wifi: rtlwifi: rtl8188ee: phy: using calculate_bit_shift() (Su Hui)   
  - wifi: rtlwifi: add calculate_bit_shift() (Su Hui)   
  - dma-mapping: clear dev->dma_mem to NULL after freeing it (Joakim Zhang)   
  - virtio/vsock: fix logic which reduces credit update messages (Arseniy Krasnov)   
  - selftests/net: fix grep checking for fib_nexthop_multiprefix (Hangbin Liu)   
  - scsi: hisi_sas: Replace with standard error code return value (Yihang Li)   
  - arm64: dts: qcom: sdm845-db845c: correct LED panic indicator (Krzysztof Kozlowski)   
  - scsi: fnic: Return error if vmalloc() failed (Artem Chernyshev)   
  - wifi: rtlwifi: rtl8821ae: phy: fix an undefined bitwise shift behavior (Su Hui)   
  - rtlwifi: Use ffs in <foo>_phy_calculate_bit_shift (Joe Perches)   
  - firmware: ti_sci: Fix an off-by-one in ti_sci_debugfs_create() (Christophe JAILLET)   
  - net/ncsi: Fix netlink major/minor version numbers (Peter Delevoryas)   
  - ncsi: internal.h: Fix a spello (Bhaskar Chowdhury)   
  - ARM: dts: qcom: apq8064: correct XOADC register address (Dmitry Baryshkov)   
  - wifi: libertas: stop selecting wext (Arnd Bergmann)   
  - bpf, lpm: Fix check prefixlen before walking trie (Florian Lehner)   
  - wifi: rtw88: fix RX filter in FIF_ALLMULTI flag (Chih-Kang Chang)   
  - NFSv4.1/pnfs: Ensure we handle the error NFS4ERR_RETURNCONFLICT (Trond Myklebust)   
  - blocklayoutdriver: Fix reference leak of pnfs_device_node (Benjamin Coddington)   
  - crypto: scomp - fix req->dst buffer overflow (Chengming Zhou)   
  - crypto: sahara - do not resize req->src when doing hash operations (Ovidiu Panait)   
  - crypto: sahara - fix processing hash requests with req->nbytes < sg->length (Ovidiu Panait)   
  - crypto: sahara - improve error handling in sahara_sha_process() (Ovidiu Panait)   
  - crypto: sahara - fix wait_for_completion_timeout() error handling (Ovidiu Panait)   
  - crypto: sahara - fix ahash reqsize (Ovidiu Panait)   
  - crypto: virtio - Wait for tasklet to complete on device remove (wangyangxin)   
  - gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump (Osama Muhammad)   
  - pstore: ram_core: fix possible overflow in persistent_ram_init_ecc() (Sergey Shtylyov)   
  - crypto: sahara - fix error handling in sahara_hw_descriptor_create() (Ovidiu Panait)   
  - crypto: sahara - fix processing requests with cryptlen < sg->length (Ovidiu Panait)   
  - crypto: sahara - fix ahash selftest failure (Ovidiu Panait)   
  - crypto: sahara - remove FLAGS_NEW_KEY logic (Ovidiu Panait)   
  - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu)   
  - crypto: ccp - fix memleak in ccp_init_dm_workarea (Dinghao Liu)   
  - virtio_crypto: Introduce VIRTIO_CRYPTO_NOSPC (zhenwei pi)   
  - crypto: virtio - don't use 'default m' (Ram Muthiah)   
  - crypto: virtio - Handle dataq logic with tasklet (Gonglei (Arei))   
  - selinux: Fix error priority for bind with AF_UNSPEC on PF_INET6 socket (Mickaël Salaün)   
  - mtd: Fix gluebi NULL pointer dereference caused by ftl notifier (ZhaoLong Wang)   
  - spi: sh-msiof: Enforce fixed DTDL for R-Car H3 (Wolfram Sang)   
  - calipso: fix memory leak in netlbl_calipso_add_pass() (Gavrilov Ilia)   
  - netlabel: remove unused parameter in netlbl_netlink_auditinfo() (Zheng Yejian)   
  - net: netlabel: Fix kerneldoc warnings (Andrew Lunn)   
  - ACPI: LPIT: Avoid u32 multiplication overflow (Nikita Kiryushin)   
  - ACPI: video: check for error while searching for backlight device parent (Nikita Kiryushin)   
  - mtd: rawnand: Increment IFC_TIMEOUT_MSECS for nand controller response (Ronald Monthero)   
  - powerpc/imc-pmu: Add a null pointer check in update_events_in_group() (Kunwu Chan)   
  - powerpc/powernv: Add a null pointer check in opal_powercap_init() (Kunwu Chan)   
  - powerpc/powernv: Add a null pointer check in opal_event_init() (Kunwu Chan)   
  - powerpc/powernv: Add a null pointer check to scom_debug_init_one() (Kunwu Chan)   
  - selftests/powerpc: Fix error handling in FPU/VMX preemption tests (Michael Ellerman)   
  - powerpc/pseries/memhp: Fix access beyond end of drmem array (Nathan Lynch)   
  - powerpc/pseries/memhotplug: Quieten some DLPAR operations (Laurent Dufour)   
  - powerpc/44x: select I2C for CURRITUCK (Randy Dunlap)   
  - powerpc: add crtsavres.o to always-y instead of extra-y (Masahiro Yamada)   
  - EDAC/thunderx: Fix possible out-of-bounds string access (Arnd Bergmann)   
  - x86/lib: Fix overflow when counting digits (Colin Ian King)   
  - coresight: etm4x: Fix width of CCITMIN field (James Clark)   
  - parport: parport_serial: Add Brainboxes device IDs and geometry (Cameron Williams)   
  - parport: parport_serial: Add Brainboxes BAR details (Cameron Williams)   
  - uio: Fix use-after-free in uio_open (Guanghui Feng)   
  - binder: fix comment on binder_alloc_new_buf() return value (Carlos Llamas)   
  - binder: fix trivial typo of binder_free_buf_locked() (Carlos Llamas)   
  - binder: use EPOLLERR from eventpoll.h (Carlos Llamas)   
  - ACPI: resource: Add another DMI match for the TongFang GMxXGxx (Hans de Goede)   
  - drm/crtc: fix uninitialized variable use (Jani Nikula)   
  - ARM: sun9i: smp: fix return code check of of_property_match_string (Stefan Wahren)   
  - ida: Fix crash in ida_free when the bitmap is empty (Matthew Wilcox (Oracle))   
  - Input: xpad - add Razer Wolverine V2 support (Luca Weiss)   
  - ARC: fix spare error (Vineet Gupta)   
  - s390/scm: fix virtual vs physical address confusion (Vineeth Vijayan)   
  - Input: i8042 - add nomux quirk for Acer P459-G2-M (Esther Shimanovich)   
  - Input: atkbd - skip ATKBD_CMD_GETID in translated mode (Hans de Goede)   
  - reset: hisilicon: hi6220: fix Wvoid-pointer-to-enum-cast warning (Krzysztof Kozlowski)   
  - ring-buffer: Do not record in NMI if the arch does not support cmpxchg in NMI (Steven Rostedt (Google))   
  - tracing: Add size check when printing trace_marker output (Steven Rostedt (Google))   
  - tracing: Have large events show up as '[LINE TOO BIG]' instead of nothing (Steven Rostedt (Google))   
  - neighbour: Don't let neigh_forced_gc() disable preemption for long (Judy Hsiao)   
  - drm/crtc: Fix uninit-value bug in drm_mode_setcrtc (Ziqi Zhao)   
  - jbd2: correct the printing of write_flags in jbd2_write_superblock() (Zhang Yi)   
  - clk: rockchip: rk3128: Fix HCLK_OTG gate register (Weihao Li)   
  - drm/exynos: fix a wrong error checking (Inki Dae)   
  - drm/exynos: fix a potential error pointer dereference (Xiang Yang)   
  - nvme: introduce helper function to get ctrl state (Keith Busch)   
  - ASoC: da7219: Support low DC impedance headset (David Rau)   
  - net/tg3: fix race condition in tg3_reset_task() (Thinh Tran)   
  - nouveau/tu102: flush all pdbs on vmm flush (Dave Airlie)   
  - ASoC: rt5650: add mutex to avoid the jack detection failure (Shuming Fan)   
  - ASoC: cs43130: Fix incorrect frame delay configuration (Maciej Strozek)   
  - ASoC: cs43130: Fix the position of const qualifier (Maciej Strozek)   
  - ASoC: Intel: Skylake: mem leak in skl register function (Kamil Duljas)   
  - ASoC: nau8822: Fix incorrect type in assignment and cast to restricted __be16 (David Lin)   
  - ASoC: Intel: Skylake: Fix mem leak in few functions (Kamil Duljas)   
  - ALSA: hda - Fix speaker and headset mic pin config for CHUWI CoreBook XPro (Vasiliy Kovalev)   
  - pinctrl: lochnagar: Don't build on MIPS (Charles Keepax)   
  - f2fs: explicitly null-terminate the xattr list (Eric Biggers)   
  - LTS tag: v5.4.267 (Sherry Yang)   
  - ASoC: meson: codec-glue: fix pcm format cast warning (Jerome Brunet)   
  - ipv6: remove max_size check inline with ipv4 (Jon Maxwell)   
  - ipv6: make ip6_rt_gc_expire an atomic_t (Eric Dumazet)   
  - net/dst: use a smaller percpu_counter batch for dst entries accounting (Eric Dumazet)   
  - PCI: Disable ATS for specific Intel IPU E2000 devices (Bartosz Pawlowski)   
  - PCI: Extract ATS disabling to a helper function (Bartosz Pawlowski)   
  - netfilter: nf_tables: Reject tables of unsupported family (Phil Sutter)   
  - net: tls, update curr on splice as well (John Fastabend)   
  - ath10k: Get rid of "per_ce_irq" hw param (Douglas Anderson)   
  - ath10k: Keep track of which interrupts fired, don't poll them (Douglas Anderson)   
  - ath10k: Add interrupt summary based CE processing (Rakesh Pillai)   
  - ath10k: Wait until copy complete is actually done before completing (Douglas Anderson)   
  - mmc: sdhci-sprd: Fix eMMC init failure after hw reset (Wenchao Chen)   
  - mmc: core: Cancel delayed work before releasing host (Geert Uytterhoeven)   
  - mmc: rpmb: fixes pause retune on all RPMB partitions. (Jorge Ramirez-Ortiz)   
  - mm: fix unmap_mapping_range high bits shift bug (Jiajun Xie)   
  - firewire: ohci: suppress unexpected system reboot in AMD Ryzen machines and ASM108x/VT630x PCIe cards (Takashi Sakamoto)   
  - mm/memory-failure: check the mapcount of the precise page (Matthew Wilcox (Oracle))   
  - net: Implement missing SO_TIMESTAMPING_NEW cmsg support (Thomas Lange)   
  - bnxt_en: Remove mis-applied code from bnxt_cfg_ntp_filters() (Michael Chan)   
  - asix: Add check for usbnet_get_endpoints (Chen Ni)   
  - net/qla3xxx: fix potential memleak in ql_alloc_buffer_queues (Dinghao Liu)   
  - net/qla3xxx: switch from 'pci_' to 'dma_' API (Christophe JAILLET)   
  - i40e: Restore VF MSI-X state during PCI reset (Andrii Staikov)   
  - ASoC: meson: g12a-tohdmitx: Fix event generation for S/PDIF mux (Mark Brown)   
  - ASoC: meson: g12a-tohdmitx: Validate written enum values (Mark Brown)   
  - ASoC: meson: g12a: extract codec-to-codec utils (Jerome Brunet)   
  - i40e: fix use-after-free in i40e_aqc_add_filters() (Ke Xiao)   
  - net: bcmgenet: Fix FCS generation for fragmented skbuffs (Adrian Cinal)   
  - ARM: sun9i: smp: Fix array-index-out-of-bounds read in sunxi_mc_smp_init (Stefan Wahren)   
  - net-timestamp: extend SOF_TIMESTAMPING_OPT_ID to HW timestamps (Vadim Fedorenko)   
  - can: raw: add support for SO_MARK (Marc Kleine-Budde)   
  - can: raw: add support for SO_TXTIME/SCM_TXTIME (Marc Kleine-Budde)   
  - net: sched: em_text: fix possible memory leak in em_text_destroy() (Hangyu Hua)   
  - i40e: Fix filter input checks to prevent config with invalid values (Sudheer Mogilappagari)   
  - nfc: llcp_core: Hold a ref to llcp_local->dev when holding a ref to llcp_local (Siddh Raman Pant)


author: Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.329.3.el8uek]
changelog:
  - drivers/edac: elba: Support multiple DDR bypass ranges. (David Clear)  [Orabug: 36269109]  
  - drivers/soc/pensando/cap_mem.c: Support DM region mapping. (David Clear)  [Orabug: 36269109]  
  - mmc: sdhci-cadence: Use elba specific adma write descriptor (Brad Larson)  [Orabug: 36269109]  
  - elba.dtsi: add virtio memory region to kpcimgr regs (Brad Smith)  [Orabug: 36269109]  
  - pensando: mmc: sdhci-cadence: Enable host driver defined bounce buffer (Brad Larson)  [Orabug: 36238209]  
  - crypto: octeontx2: fix registering of rsa algorithm (Srujana Challa)  [Orabug: 36249211]


author: Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.329.3.1.el8uek]
changelog:
  - netfilter: nf_tables: set dormant flag on hook register failure (Florian Westphal)   
  - netfilter: ipset: Missing gc cancellations fixed (Jozsef Kadlecsik)   
  - netfilter: ipset: fix performance regression in swap operation (Jozsef Kadlecsik)   
  - netfilter: nft_set_rbtree: skip end interval element from gc (Pablo Neira Ayuso)


author: Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.329.3.2.el8uek]
changelog:
  - netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal)  [Orabug: 36465920]  {CVE-2024-1086}


author: Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.329.2.el8uek]
changelog:
  - LTS tag: v5.4.268 (Sherry Yang)   
  - arm64: dts: armada-3720-turris-mox: set irq type for RTC (Sjoerd Simons)   
  - perf top: Skip side-band event setup if HAVE_LIBBPF_SUPPORT is not set (Tiezhu Yang)   
  - i2c: s3c24xx: fix transferring more than one message in polling mode (Marek Szyprowski)   
  - i2c: s3c24xx: fix read transfers in polling mode (Marek Szyprowski)   
  - mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure (Amit Cohen)   
  - kdb: Fix a potential buffer overflow in kdb_local() (Christophe JAILLET)   
  - kdb: Censor attempts to set PROMPT without ENABLE_MEM_READ (Daniel Thompson)   
  - ipvs: avoid stat macros calls from preemptible context (Fedor Pchelkin)   
  - netfilter: nf_tables: skip dead set elements in netlink dump (Pablo Neira Ayuso)   
  - net: dsa: vsc73xx: Add null pointer check to vsc73xx_gpio_probe (Kunwu Chan)   
  - net: ravb: Fix dma_addr_t truncation in error case (Nikita Yushchenko)   
  - net: phy: micrel: populate .soft_reset for KSZ9131 (Claudiu Beznea)   
  - net: qualcomm: rmnet: fix global oob in rmnet_policy (Lin Ma)   
  - s390/pci: fix max size calculation in zpci_memcpy_toio() (Niklas Schnelle)   
  - PCI: keystone: Fix race condition when initializing PHYs (Siddharth Vadapalli)   
  - nvmet-tcp: Fix the H2C expected PDU len calculation (Maurizio Lombardi)   
  - serial: imx: Correct clock error message in function probe() (Christoph Niedermaier)   
  - apparmor: avoid crash when parsed profile name is empty (Fedor Pchelkin)   
  - perf env: Avoid recursively taking env->bpf_progs.lock (Ian Rogers)   
  - perf bpf: Decouple creating the evlist from adding the SB event (Arnaldo Carvalho de Melo)   
  - perf top: Move sb_evlist to 'struct perf_top' (Arnaldo Carvalho de Melo)   
  - perf record: Move sb_evlist to 'struct record' (Arnaldo Carvalho de Melo)   
  - perf env: Add perf_env__numa_node() (Jiri Olsa)   
  - nvmet-tcp: fix a crash in nvmet_req_complete() (Maurizio Lombardi) [Orabug: 36298343] {CVE-2023-6356} {CVE-2023-6535} {CVE-2023-6536}
  - nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length (Maurizio Lombardi) [Orabug: 36298343] {CVE-2023-6356} {CVE-2023-6535} {CVE-2023-6536}
  - perf genelf: Set ELF program header addresses properly (Namhyung Kim)   
  - software node: Let args be NULL in software_node_get_reference_args (Sakari Ailus)   
  - acpi: property: Let args be NULL in __acpi_node_get_property_reference (Sakari Ailus)   
  - serial: 8250: omap: Don't skip resource freeing if pm_runtime_resume_and_get() failed (Uwe Kleine-König)   
  - MIPS: Alchemy: Fix an out-of-bound access in db1550_dev_setup() (Christophe JAILLET)   
  - MIPS: Alchemy: Fix an out-of-bound access in db1200_dev_setup() (Christophe JAILLET)   
  - mips: Fix incorrect max_low_pfn adjustment (Serge Semin)   
  - HID: wacom: Correct behavior when processing some confidence == false touches (Jason Gerecke)   
  - x86/kvm: Do not try to disable kvmclock if it was not enabled (Kirill A. Shutemov)   
  - wifi: mwifiex: configure BSSID consistently when starting AP (David Lin)   
  - wifi: rtlwifi: Convert LNKCTL change to PCIe cap RMW accessors (Ilpo Järvinen)   
  - wifi: rtlwifi: Remove bogus and dangerous ASPM disable/enable code (Ilpo Järvinen)   
  - rootfs: Fix support for rootfstype= when root= is given (Stefan Berger)   
  - fbdev: flush deferred work in fb_deferred_io_fsync() (Nam Cao)   
  - ALSA: oxygen: Fix right channel of capture volume mixer (Takashi Iwai)   
  - usb: mon: Fix atomicity violation in mon_bin_vma_fault (Gui-Dong Han)   
  - usb: typec: class: fix typec_altmode_put_partner to put plugs (RD Babiera)   
  - Revert "usb: typec: class: fix typec_altmode_put_partner to put plugs" (Heikki Krogerus)   
  - usb: chipidea: wait controller resume finished for wakeup irq (Xu Yang)   
  - Revert "usb: dwc3: don't reset device side if dwc3 was configured as host-only" (Thinh Nguyen)   
  - Revert "usb: dwc3: Soft reset phy on probe for host" (Thinh Nguyen)   
  - usb: dwc: ep0: Update request status in dwc3_ep0_stall_restart (Uttkarsh Aggarwal)   
  - usb: phy: mxs: remove CONFIG_USB_OTG condition for mxs_phy_is_otg_host() (Xu Yang)   
  - tick-sched: Fix idle and iowait sleeptime accounting vs CPU hotplug (Heiko Carstens)   
  - binder: fix unused alloc->free_async_space (Carlos Llamas)   
  - binder: fix race between mmput() and do_exit() (Carlos Llamas)   
  - xen-netback: don't produce zero-size SKB frags (Jan Beulich) [Orabug: 36255850] {CVE-2023-46838}
  - Revert "ASoC: atmel: Remove system clock tree configuration for at91sam9g20ek" (Greg Kroah-Hartman)   
  - Input: atkbd - use ab83 as id when skipping the getid command (Hans de Goede)   
  - binder: fix use-after-free in shinker's callback (Carlos Llamas)   
  - binder: fix async space check for 0-sized buffers (Carlos Llamas)   
  - of: unittest: Fix of_count_phandle_with_args() expected value message (Geert Uytterhoeven)   
  - of: Fix double free in of_parse_phandle_with_args_map (Christian A. Ehrhardt)   
  - mmc: sdhci_omap: Fix TI SoC dependencies (Peter Robinson)   
  - clk: si5341: fix an error code problem in si5341_output_clk_set_rate (Su Hui)   
  - watchdog: bcm2835_wdt: Fix WDIOC_SETTIMEOUT handling (Stefan Wahren)   
  - watchdog/hpwdt: Only claim UNKNOWN NMI if from iLO (Jerry Hoemann)   
  - watchdog: set cdev owner before adding (Curtis Klein)   
  - drivers: clk: zynqmp: calculate closest mux rate (Jay Buddhabhatti)   
  - gpu/drm/radeon: fix two memleaks in radeon_vm_init (Zhipeng Lu)   
  - drivers/amd/pm: fix a use-after-free in kv_parse_power_table (Zhipeng Lu)   
  - drm/amd/pm: fix a double-free in si_dpm_init (Zhipeng Lu)   
  - drm/amdgpu/debugfs: fix error code when smc register accessors are NULL (Alex Deucher)   
  - media: dvbdev: drop refcount on error path in dvb_device_open() (Dan Carpenter)   
  - media: cx231xx: fix a memleak in cx231xx_init_isoc (Zhipeng Lu)   
  - drm/bridge: tc358767: Fix return value on error case (Tomi Valkeinen)   
  - drm/radeon/trinity_dpm: fix a memleak in trinity_parse_power_table (Zhipeng Lu)   
  - drm/radeon/dpm: fix a memleak in sumo_parse_power_table (Zhipeng Lu)   
  - drm/radeon: check the alloc_workqueue return value in radeon_crtc_init() (Yang Yingliang)   
  - drm/drv: propagate errors from drm_modeset_register_all() (Dmitry Baryshkov)   
  - drm/msm/dsi: Use pm_runtime_resume_and_get to prevent refcnt leaks (Konrad Dybcio)   
  - drm/msm/mdp4: flush vblank event on disable (Dmitry Baryshkov)   
  - ASoC: cs35l34: Fix GPIO name and drop legacy include (Linus Walleij)   
  - ASoC: cs35l33: Fix GPIO name and drop legacy include (Linus Walleij)   
  - drm/radeon: check return value of radeon_ring_lock() (Nikita Zhandarovich)   
  - drm/radeon/r100: Fix integer overflow issues in r100_cs_track_check() (Nikita Zhandarovich)   
  - drm/radeon/r600_cs: Fix possible int overflows in r600_cs_check_reg() (Nikita Zhandarovich)   
  - f2fs: fix to avoid dirent corruption (Chao Yu)   
  - drm/bridge: Fix typo in post_disable() description (Dario Binacchi)   
  - media: pvrusb2: fix use after free on context disconnection (Ricardo B. Marliere)   
  - RDMA/usnic: Silence uninitialized symbol smatch warnings (Leon Romanovsky)   
  - ARM: davinci: always select CONFIG_CPU_ARM926T (Arnd Bergmann)   
  - ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim() (Eric Dumazet)   
  - Bluetooth: btmtkuart: fix recv_buf() return value (Francesco Dolcini)   
  - Bluetooth: Fix bogus check for re-auth no supported with non-ssp (Luiz Augusto von Dentz)   
  - netfilter: nf_tables: mark newset as dead on transaction abort (Florian Westphal)   
  - wifi: rtlwifi: rtl8192se: using calculate_bit_shift() (Su Hui)   
  - wifi: rtlwifi: rtl8192ee: using calculate_bit_shift() (Su Hui)   
  - wifi: rtlwifi: rtl8192de: using calculate_bit_shift() (Su Hui)   
  - rtlwifi: rtl8192de: make arrays static const, makes object smaller (Colin Ian King)   
  - wifi: rtlwifi: rtl8192ce: using calculate_bit_shift() (Su Hui)   
  - wifi: rtlwifi: rtl8192cu: using calculate_bit_shift() (Su Hui)   
  - wifi: rtlwifi: rtl8192c: using calculate_bit_shift() (Su Hui)   
  - wifi: rtlwifi: rtl8188ee: phy: using calculate_bit_shift() (Su Hui)   
  - wifi: rtlwifi: add calculate_bit_shift() (Su Hui)   
  - dma-mapping: clear dev->dma_mem to NULL after freeing it (Joakim Zhang)   
  - virtio/vsock: fix logic which reduces credit update messages (Arseniy Krasnov)   
  - selftests/net: fix grep checking for fib_nexthop_multiprefix (Hangbin Liu)   
  - scsi: hisi_sas: Replace with standard error code return value (Yihang Li)   
  - arm64: dts: qcom: sdm845-db845c: correct LED panic indicator (Krzysztof Kozlowski)   
  - scsi: fnic: Return error if vmalloc() failed (Artem Chernyshev)   
  - wifi: rtlwifi: rtl8821ae: phy: fix an undefined bitwise shift behavior (Su Hui)   
  - rtlwifi: Use ffs in <foo>_phy_calculate_bit_shift (Joe Perches)   
  - firmware: ti_sci: Fix an off-by-one in ti_sci_debugfs_create() (Christophe JAILLET)   
  - net/ncsi: Fix netlink major/minor version numbers (Peter Delevoryas)   
  - ncsi: internal.h: Fix a spello (Bhaskar Chowdhury)   
  - ARM: dts: qcom: apq8064: correct XOADC register address (Dmitry Baryshkov)   
  - wifi: libertas: stop selecting wext (Arnd Bergmann)   
  - bpf, lpm: Fix check prefixlen before walking trie (Florian Lehner)   
  - wifi: rtw88: fix RX filter in FIF_ALLMULTI flag (Chih-Kang Chang)   
  - NFSv4.1/pnfs: Ensure we handle the error NFS4ERR_RETURNCONFLICT (Trond Myklebust)   
  - blocklayoutdriver: Fix reference leak of pnfs_device_node (Benjamin Coddington)   
  - crypto: scomp - fix req->dst buffer overflow (Chengming Zhou)   
  - crypto: sahara - do not resize req->src when doing hash operations (Ovidiu Panait)   
  - crypto: sahara - fix processing hash requests with req->nbytes < sg->length (Ovidiu Panait)   
  - crypto: sahara - improve error handling in sahara_sha_process() (Ovidiu Panait)   
  - crypto: sahara - fix wait_for_completion_timeout() error handling (Ovidiu Panait)   
  - crypto: sahara - fix ahash reqsize (Ovidiu Panait)   
  - crypto: virtio - Wait for tasklet to complete on device remove (wangyangxin)   
  - gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump (Osama Muhammad)   
  - pstore: ram_core: fix possible overflow in persistent_ram_init_ecc() (Sergey Shtylyov)   
  - crypto: sahara - fix error handling in sahara_hw_descriptor_create() (Ovidiu Panait)   
  - crypto: sahara - fix processing requests with cryptlen < sg->length (Ovidiu Panait)   
  - crypto: sahara - fix ahash selftest failure (Ovidiu Panait)   
  - crypto: sahara - remove FLAGS_NEW_KEY logic (Ovidiu Panait)   
  - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu)   
  - crypto: ccp - fix memleak in ccp_init_dm_workarea (Dinghao Liu)   
  - virtio_crypto: Introduce VIRTIO_CRYPTO_NOSPC (zhenwei pi)   
  - crypto: virtio - don't use 'default m' (Ram Muthiah)   
  - crypto: virtio - Handle dataq logic with tasklet (Gonglei (Arei))   
  - selinux: Fix error priority for bind with AF_UNSPEC on PF_INET6 socket (Mickaël Salaün)   
  - mtd: Fix gluebi NULL pointer dereference caused by ftl notifier (ZhaoLong Wang)   
  - spi: sh-msiof: Enforce fixed DTDL for R-Car H3 (Wolfram Sang)   
  - calipso: fix memory leak in netlbl_calipso_add_pass() (Gavrilov Ilia)   
  - netlabel: remove unused parameter in netlbl_netlink_auditinfo() (Zheng Yejian)   
  - net: netlabel: Fix kerneldoc warnings (Andrew Lunn)   
  - ACPI: LPIT: Avoid u32 multiplication overflow (Nikita Kiryushin)   
  - ACPI: video: check for error while searching for backlight device parent (Nikita Kiryushin)   
  - mtd: rawnand: Increment IFC_TIMEOUT_MSECS for nand controller response (Ronald Monthero)   
  - powerpc/imc-pmu: Add a null pointer check in update_events_in_group() (Kunwu Chan)   
  - powerpc/powernv: Add a null pointer check in opal_powercap_init() (Kunwu Chan)   
  - powerpc/powernv: Add a null pointer check in opal_event_init() (Kunwu Chan)   
  - powerpc/powernv: Add a null pointer check to scom_debug_init_one() (Kunwu Chan)   
  - selftests/powerpc: Fix error handling in FPU/VMX preemption tests (Michael Ellerman)   
  - powerpc/pseries/memhp: Fix access beyond end of drmem array (Nathan Lynch)   
  - powerpc/pseries/memhotplug: Quieten some DLPAR operations (Laurent Dufour)   
  - powerpc/44x: select I2C for CURRITUCK (Randy Dunlap)   
  - powerpc: add crtsavres.o to always-y instead of extra-y (Masahiro Yamada)   
  - EDAC/thunderx: Fix possible out-of-bounds string access (Arnd Bergmann)   
  - x86/lib: Fix overflow when counting digits (Colin Ian King)   
  - coresight: etm4x: Fix width of CCITMIN field (James Clark)   
  - parport: parport_serial: Add Brainboxes device IDs and geometry (Cameron Williams)   
  - parport: parport_serial: Add Brainboxes BAR details (Cameron Williams)   
  - uio: Fix use-after-free in uio_open (Guanghui Feng)   
  - binder: fix comment on binder_alloc_new_buf() return value (Carlos Llamas)   
  - binder: fix trivial typo of binder_free_buf_locked() (Carlos Llamas)   
  - binder: use EPOLLERR from eventpoll.h (Carlos Llamas)   
  - ACPI: resource: Add another DMI match for the TongFang GMxXGxx (Hans de Goede)   
  - drm/crtc: fix uninitialized variable use (Jani Nikula)   
  - ARM: sun9i: smp: fix return code check of of_property_match_string (Stefan Wahren)   
  - ida: Fix crash in ida_free when the bitmap is empty (Matthew Wilcox (Oracle))   
  - Input: xpad - add Razer Wolverine V2 support (Luca Weiss)   
  - ARC: fix spare error (Vineet Gupta)   
  - s390/scm: fix virtual vs physical address confusion (Vineeth Vijayan)   
  - Input: i8042 - add nomux quirk for Acer P459-G2-M (Esther Shimanovich)   
  - Input: atkbd - skip ATKBD_CMD_GETID in translated mode (Hans de Goede)   
  - reset: hisilicon: hi6220: fix Wvoid-pointer-to-enum-cast warning (Krzysztof Kozlowski)   
  - ring-buffer: Do not record in NMI if the arch does not support cmpxchg in NMI (Steven Rostedt (Google))   
  - tracing: Add size check when printing trace_marker output (Steven Rostedt (Google))   
  - tracing: Have large events show up as '[LINE TOO BIG]' instead of nothing (Steven Rostedt (Google))   
  - neighbour: Don't let neigh_forced_gc() disable preemption for long (Judy Hsiao)   
  - drm/crtc: Fix uninit-value bug in drm_mode_setcrtc (Ziqi Zhao)   
  - jbd2: correct the printing of write_flags in jbd2_write_superblock() (Zhang Yi)   
  - clk: rockchip: rk3128: Fix HCLK_OTG gate register (Weihao Li)   
  - drm/exynos: fix a wrong error checking (Inki Dae)   
  - drm/exynos: fix a potential error pointer dereference (Xiang Yang)   
  - nvme: introduce helper function to get ctrl state (Keith Busch)   
  - ASoC: da7219: Support low DC impedance headset (David Rau)   
  - net/tg3: fix race condition in tg3_reset_task() (Thinh Tran)   
  - nouveau/tu102: flush all pdbs on vmm flush (Dave Airlie)   
  - ASoC: rt5650: add mutex to avoid the jack detection failure (Shuming Fan)   
  - ASoC: cs43130: Fix incorrect frame delay configuration (Maciej Strozek)   
  - ASoC: cs43130: Fix the position of const qualifier (Maciej Strozek)   
  - ASoC: Intel: Skylake: mem leak in skl register function (Kamil Duljas)   
  - ASoC: nau8822: Fix incorrect type in assignment and cast to restricted __be16 (David Lin)   
  - ASoC: Intel: Skylake: Fix mem leak in few functions (Kamil Duljas)   
  - ALSA: hda - Fix speaker and headset mic pin config for CHUWI CoreBook XPro (Vasiliy Kovalev)   
  - pinctrl: lochnagar: Don't build on MIPS (Charles Keepax)   
  - f2fs: explicitly null-terminate the xattr list (Eric Biggers)   
  - LTS tag: v5.4.267 (Sherry Yang)   
  - ASoC: meson: codec-glue: fix pcm format cast warning (Jerome Brunet)   
  - ipv6: remove max_size check inline with ipv4 (Jon Maxwell)   
  - ipv6: make ip6_rt_gc_expire an atomic_t (Eric Dumazet)   
  - net/dst: use a smaller percpu_counter batch for dst entries accounting (Eric Dumazet)   
  - PCI: Disable ATS for specific Intel IPU E2000 devices (Bartosz Pawlowski)   
  - PCI: Extract ATS disabling to a helper function (Bartosz Pawlowski)   
  - netfilter: nf_tables: Reject tables of unsupported family (Phil Sutter) [Orabug: 36192152] {CVE-2023-6040}
  - net: tls, update curr on splice as well (John Fastabend)   
  - ath10k: Get rid of "per_ce_irq" hw param (Douglas Anderson)   
  - ath10k: Keep track of which interrupts fired, don't poll them (Douglas Anderson)   
  - ath10k: Add interrupt summary based CE processing (Rakesh Pillai)   
  - ath10k: Wait until copy complete is actually done before completing (Douglas Anderson)   
  - mmc: sdhci-sprd: Fix eMMC init failure after hw reset (Wenchao Chen)   
  - mmc: core: Cancel delayed work before releasing host (Geert Uytterhoeven)   
  - mmc: rpmb: fixes pause retune on all RPMB partitions. (Jorge Ramirez-Ortiz)   
  - mm: fix unmap_mapping_range high bits shift bug (Jiajun Xie)   
  - firewire: ohci: suppress unexpected system reboot in AMD Ryzen machines and ASM108x/VT630x PCIe cards (Takashi Sakamoto)   
  - mm/memory-failure: check the mapcount of the precise page (Matthew Wilcox (Oracle))   
  - net: Implement missing SO_TIMESTAMPING_NEW cmsg support (Thomas Lange)   
  - bnxt_en: Remove mis-applied code from bnxt_cfg_ntp_filters() (Michael Chan)   
  - asix: Add check for usbnet_get_endpoints (Chen Ni)   
  - net/qla3xxx: fix potential memleak in ql_alloc_buffer_queues (Dinghao Liu)   
  - net/qla3xxx: switch from 'pci_' to 'dma_' API (Christophe JAILLET)   
  - i40e: Restore VF MSI-X state during PCI reset (Andrii Staikov)   
  - ASoC: meson: g12a-tohdmitx: Fix event generation for S/PDIF mux (Mark Brown)   
  - ASoC: meson: g12a-tohdmitx: Validate written enum values (Mark Brown)   
  - ASoC: meson: g12a: extract codec-to-codec utils (Jerome Brunet)   
  - i40e: fix use-after-free in i40e_aqc_add_filters() (Ke Xiao)   
  - net: bcmgenet: Fix FCS generation for fragmented skbuffs (Adrian Cinal)   
  - ARM: sun9i: smp: Fix array-index-out-of-bounds read in sunxi_mc_smp_init (Stefan Wahren)   
  - net-timestamp: extend SOF_TIMESTAMPING_OPT_ID to HW timestamps (Vadim Fedorenko)   
  - can: raw: add support for SO_MARK (Marc Kleine-Budde)   
  - can: raw: add support for SO_TXTIME/SCM_TXTIME (Marc Kleine-Budde)   
  - net: sched: em_text: fix possible memory leak in em_text_destroy() (Hangyu Hua)   
  - i40e: Fix filter input checks to prevent config with invalid values (Sudheer Mogilappagari)   
  - nfc: llcp_core: Hold a ref to llcp_local->dev when holding a ref to llcp_local (Siddh Raman Pant)


author: Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.330.1.el8uek]
changelog:
  - mm: hwpoison: handle non-anonymous THP correctly (Yang Shi)  [Orabug: 36223690]  
  - mm,hwpoison: unify THP handling for hard and soft offline (Oscar Salvador)  [Orabug: 36223690]  
  - mm: hwpoison: remove the unnecessary THP check (Yang Shi)  [Orabug: 36223690]


author: Alok Tiwari <alok.a.tiwari@oracle.com> [5.4.17-2136.330.2.el8uek]
changelog:
  - LTS tag: v5.4.269 (Alok Tiwari)   
  - bpf: Add map and need_defer parameters to .map_fd_put_ptr() (Hou Tao)   
  - of: gpio unittest kfree() wrong object (Frank Rowand)   
  - of: unittest: fix EXPECT text for gpio hog errors (Frank Rowand)   
  - net: bcmgenet: Fix EEE implementation (Florian Fainelli)   
  - Revert "Revert "mtd: rawnand: gpmi: Fix setting busy timeout setting"" (Max Krummenacher)   
  - netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval() (Dan Carpenter) [Orabug: 36229438] {CVE-2024-0607}
  - lsm: new security_file_ioctl_compat() hook (Alfred Piccioni)   
  - drm/msm/dsi: Enable runtime PM (Konrad Dybcio)   
  - PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend() (Douglas Anderson)   
  - PM: runtime: add devm_pm_runtime_enable helper (Dmitry Baryshkov)   
  - nilfs2: fix potential bug in end_buffer_async_write (Ryusuke Konishi)   
  - sched/membarrier: reduce the ability to hammer on sys_membarrier (Linus Torvalds)   
  - net: prevent mss overflow in skb_segment() (Eric Dumazet)   
  - netfilter: ipset: Missing gc cancellations fixed (Jozsef Kadlecsik)   
  - netfilter: ipset: fix performance regression in swap operation (Jozsef Kadlecsik)   
  - KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache (Oliver Upton)   
  - mips: Fix max_mapnr being uninitialized on early stages (Serge Semin)   
  - arch, mm: remove stale mentions of DISCONIGMEM (Mike Rapoport)   
  - bus: moxtet: Add spi device table (Sjoerd Simons)   
  - tracing: Inform kmemleak of saved_cmdlines allocation (Steven Rostedt (Google))   
  - pmdomain: core: Move the unused cleanup to a _sync initcall (Konrad Dybcio)   
  - can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER) (Oleksij Rempel)   
  - irqchip/irq-brcmstb-l2: Add write memory barrier before exit (Doug Berger)   
  - nfp: flower: prevent re-adding mac index for bonded port (Daniel de Villiers)   
  - nfp: use correct macro for LengthSelect in BAR config (Daniel Basilio)   
  - nilfs2: fix hang in nilfs_lookup_dirty_data_buffers() (Ryusuke Konishi)   
  - nilfs2: fix data corruption in dsync block recovery for small block sizes (Ryusuke Konishi)   
  - ALSA: hda/conexant: Add quirk for SWS JS201D (bo liu)   
  - mmc: slot-gpio: Allow non-sleeping GPIO ro (Alexander Stein)   
  - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Steve Wahl)   
  - x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6 (Aleksander Mazur)   
  - serial: max310x: improve crystal stable clock detection (Hugo Villeneuve)   
  - serial: max310x: set default value when reading clock ready bit (Hugo Villeneuve)   
  - ring-buffer: Clean ring_buffer_poll_wait() error return (Vincent Donnefort)   
  - iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC (zhili.liu)   
  - staging: iio: ad5933: fix type mismatch regression (David Schiller)   
  - tracing: Fix wasted memory in saved_cmdlines logic (Steven Rostedt (Google))   
  - ext4: fix double-free of blocks due to wrong extents moved_len (Baokun Li)   
  - misc: fastrpc: Mark all sessions as invalid in cb_remove (Ekansh Gupta)   
  - binder: signal epoll threads of self-work (Carlos Llamas)   
  - ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL (Edson Juliano Drosdeck)   
  - xen-netback: properly sync TX responses (Jan Beulich)   
  - nfc: nci: free rx_data_reassembly skb on NCI device cleanup (Fedor Pchelkin)   
  - kbuild: Fix changing ELF file type for output of gen_btf for big endian (Nathan Chancellor)   
  - firewire: core: correct documentation of fw_csr_string() kernel API (Takashi Sakamoto)   
  - scsi: Revert "scsi: fcoe: Fix potential deadlock on &fip->ctlr_lock" (Lee Duncan)   
  - i2c: i801: Fix block process call transactions (Jean Delvare)   
  - i2c: i801: Remove i801_set_block_buffer_mode (Heiner Kallweit)   
  - usb: f_mass_storage: forbid async queue when shutdown happen (yuan linyu)   
  - USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT (Oliver Neukum)   
  - HID: wacom: Do not register input devices until after hid_hw_start (Jason Gerecke)   
  - HID: wacom: generic: Avoid reporting a serial of '0' to userspace (Tatsunosuke Tobita)   
  - mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again (Zach O'Keefe)   
  - tracing/trigger: Fix to return error if failed to alloc snapshot (Masami Hiramatsu (Google))   
  - i40e: Fix waiting for queues of all VSIs to be disabled (Ivan Vecera)   
  - MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler (Guenter Roeck)   
  - ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work() (Alexey Khoroshilov)   
  - spi: ppc4xx: Drop write-only variable (Uwe Kleine-König)   
  - of: unittest: Fix compile in the non-dynamic case (Christian A. Ehrhardt)   
  - of: unittest: add overlay gpio test to catch gpio hog problem (Frank Rowand)   
  - btrfs: send: return EOPNOTSUPP on unknown flags (David Sterba)   
  - btrfs: forbid deleting live subvol qgroup (Boris Burkov)   
  - btrfs: forbid creating subvol qgroups (Boris Burkov)   
  - netfilter: nft_set_rbtree: skip end interval element from gc (Pablo Neira Ayuso)   
  - net: stmmac: xgmac: fix a typo of register name in DPP safety handling (Furong Xu)   
  - net: stmmac: xgmac: use #define for string constants (Simon Horman)   
  - vhost: use kzalloc() instead of kmalloc() followed by memset() (Prathu Baronia) [Orabug: 36192400] {CVE-2024-0340}
  - Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID (Hans de Goede)   
  - USB: serial: cp210x: add ID for IMST iM871A-USB (Leonard Dallmayr)   
  - USB: serial: option: add Fibocom FM101-GL variant (Puliang Lu)   
  - USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e (JackBB Wu)   
  - net/af_iucv: clean up a try_then_request_module() (Julian Wiedmann)   
  - netfilter: nft_ct: reject direction for ct id (Pablo Neira Ayuso)   
  - netfilter: nft_compat: restrict match/target protocol to u16 (Pablo Neira Ayuso)   
  - netfilter: nft_compat: reject unused compat flag (Pablo Neira Ayuso)   
  - ppp_async: limit MRU to 64K (Eric Dumazet)   
  - tipc: Check the bearer type before calling tipc_udp_nl_bearer_add() (Shigeru Yoshida)   
  - rxrpc: Fix response to PING RESPONSE ACKs to a dead call (David Howells)   
  - inet: read sk->sk_family once in inet_recv_error() (Eric Dumazet)   
  - hwmon: (coretemp) Fix bogus core_id to attr name mapping (Zhang Rui)   
  - hwmon: (coretemp) Fix out-of-bounds memory access (Zhang Rui)   
  - hwmon: (aspeed-pwm-tacho) mutex for tach reading (Loic Prylli)   
  - atm: idt77252: fix a memleak in open_card_ubr0 (Zhipeng Lu)   
  - selftests: net: avoid just another constant wait (Paolo Abeni)   
  - net: stmmac: xgmac: fix handling of DPP safety error for DMA channels (Furong Xu)   
  - phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP (Tony Lindgren)   
  - dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV (Frank Li)   
  - phy: renesas: rcar-gen3-usb2: Fix returning wrong error code (Yoshihiro Shimoda)   
  - dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA (Christophe JAILLET)   
  - dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA (Christophe JAILLET)   
  - bonding: remove print in bond_verify_device_path (Zhengchao Shao)   
  - HID: apple: Add 2021 magic keyboard FN key mapping (Benjamin Berg)   
  - HID: apple: Swap the Fn and Left Control keys on Apple keyboards (free5lot)   
  - HID: apple: Add support for the 2021 Magic Keyboard (Alex Henrie)   
  - net: sysfs: Fix /sys/class/net/<iface> path (Breno Leitao)   
  - af_unix: fix lockdep positive in sk_diag_dump_icons() (Eric Dumazet)   
  - net: ipv4: fix a memleak in ip_setup_cork (Zhipeng Lu)   
  - netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations (Pablo Neira Ayuso)   
  - netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger (Pablo Neira Ayuso)   
  - llc: call sock_orphan() at release time (Eric Dumazet)   
  - ipv6: Ensure natural alignment of const ipv6 loopback and router addresses (Helge Deller)   
  - ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550() (Christophe JAILLET)   
  - ixgbe: Refactor overtemp event handling (Jedrzej Jagielski)   
  - ixgbe: Refactor returning internal error codes (Jedrzej Jagielski)   
  - ixgbe: Remove non-inclusive language (Piotr Skajewski)   
  - net: remove unneeded break (Tom Rix)   
  - scsi: isci: Fix an error code problem in isci_io_request_build() (Su Hui)   
  - wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update (Edward Adam Davis)   
  - perf: Fix the nr_addr_filters fix (Peter Zijlstra)   
  - drm/amdgpu: Release 'adev->pm.fw' before return in 'amdgpu_device_need_post()' (Srinivasan Shanmugam)   
  - ceph: fix deadlock or deadcode of misusing dget() (Xiubo Li)   
  - blk-mq: fix IO hang from sbitmap wakeup race (Ming Lei)   
  - virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings (Zhu Yanjun)   
  - libsubcmd: Fix memory leak in uniq() (Ian Rogers)   
  - PCI/AER: Decode Requester ID when no error info found (Bjorn Helgaas)   
  - fs/kernfs/dir: obey S_ISGID (Max Kellermann)   
  - usb: hub: Replace hardcoded quirk value with BIT() macro (Hardik Gajjar)   
  - PCI: switchtec: Fix stdev_release() crash after surprise hot remove (Daniel Stodden)   
  - PCI: Only override AMD USB controller if required (Guilherme G. Piccoli)   
  - mfd: ti_am335x_tscadc: Fix TI SoC dependencies (Peter Robinson)   
  - i3c: master: cdns: Update maximum prescaler value for i2c clock (Harshit Shah)   
  - um: net: Fix return type of uml_net_start_xmit() (Nathan Chancellor)   
  - um: Don't use vfprintf() for os_info() (Benjamin Berg)   
  - um: Fix naming clash between UML and scheduler (Anton Ivanov)   
  - leds: trigger: panic: Don't register panic notifier if creating the trigger failed (Heiner Kallweit)   
  - drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()' (Srinivasan Shanmugam)   
  - drm/amdgpu: Let KFD sync with VM fences (Felix Kuehling)   
  - clk: mmp: pxa168: Fix memory leak in pxa168_clk_init() (Kuan-Wei Chiu)   
  - clk: hi3620: Fix memory leak in hi3620_mmc_clk_init() (Kuan-Wei Chiu)   
  - drm/msm/dpu: Ratelimit framedone timeout msgs (Rob Clark)   
  - media: ddbridge: fix an error code problem in ddb_probe (Su Hui)   
  - IB/ipoib: Fix mcast list locking (Daniel Vacek)   
  - drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time (Douglas Anderson)   
  - ALSA: hda: Intel: add HDA_ARL PCI ID support (Pierre-Louis Bossart)   
  - PCI: add INTEL_HDA_ARL to pci_ids.h (Pierre-Louis Bossart)   
  - media: rockchip: rga: fix swizzling for RGB formats (Michael Tretter)   
  - media: stk1160: Fixed high volume of stk1160_dbg messages (Ghanshyam Agrawal)   
  - drm/mipi-dsi: Fix detach call without attach (Tomi Valkeinen)   
  - drm/framebuffer: Fix use of uninitialized variable (Tomi Valkeinen)   
  - drm/drm_file: fix use of uninitialized variable (Tomi Valkeinen)   
  - RDMA/IPoIB: Fix error code return in ipoib_mcast_join (Jack Wang)   
  - fast_dput(): handle underflows gracefully (Al Viro)   
  - ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument (Cristian Ciocaltea)   
  - f2fs: fix to check return value of f2fs_reserve_new_block() (Chao Yu)   
  - wifi: cfg80211: free beacon_ies when overridden from hidden BSS (Benjamin Berg)   
  - wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift() (Su Hui)   
  - wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices (Zenm Chen)   
  - arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property (Mao Jinlong)   
  - arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property (Mao Jinlong)   
  - md: Whenassemble the array, consult the superblock of the freshest device (Alex Lyakas)   
  - block: prevent an integer overflow in bvec_try_merge_hw_page (Christoph Hellwig)   
  - ARM: dts: imx23/28: Fix the DMA controller node name (Fabio Estevam)   
  - ARM: dts: imx23-sansa: Use preferred i2c-gpios properties (Fabio Estevam)   
  - ARM: dts: imx27-apf27dev: Fix LED name (Fabio Estevam)   
  - ARM: dts: imx25/27: Pass timing0 (Fabio Estevam)   
  - ARM: dts: imx1: Fix sram node (Fabio Estevam)   
  - ARM: dts: imx27: Fix sram node (Fabio Estevam)   
  - ARM: dts: imx: Use flash@0,0 pattern (Fabio Estevam)   
  - ARM: dts: imx25/27-eukrea: Fix RTC node name (Fabio Estevam)   
  - ARM: dts: rockchip: fix rk3036 hdmi ports node (Johan Jonker)   
  - scsi: libfc: Fix up timeout error in fc_fcp_rec_error() (Hannes Reinecke)   
  - scsi: libfc: Don't schedule abort twice (Hannes Reinecke)   
  - wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() (Minsuk Kang)   
  - ARM: dts: imx7s: Fix nand-controller #size-cells (Alexander Stein)   
  - ARM: dts: imx7s: Fix lcdif compatible (Alexander Stein)   
  - ARM: dts: imx7d: Fix coresight funnel ports (Alexander Stein)   
  - bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk (Zhengchao Shao)   
  - PCI: Add no PM reset quirk for NVIDIA Spectrum devices (Ido Schimmel)   
  - scsi: lpfc: Fix possible file string name overflow when updating firmware (Justin Tee)   
  - selftests/bpf: Fix pyperf180 compilation failure with clang18 (Yonghong Song)   
  - selftests/bpf: satisfy compiler by having explicit return in btf test (Andrii Nakryiko)   
  - wifi: rt2x00: restart beacon queue when hardware reset (Shiji Yang)   
  - ext4: avoid online resizing failures due to oversized flex bg (Baokun Li)   
  - ext4: remove unnecessary check from alloc_flex_gd() (Baokun Li)   
  - ext4: unify the type of flexbg_size to unsigned int (Baokun Li)   
  - ext4: fix inconsistent between segment fstrim and full fstrim (Ye Bin)   
  - ecryptfs: Reject casefold directory inodes (Gabriel Krisman Bertazi)   
  - SUNRPC: Fix a suspicious RCU usage warning (Anna Schumaker)   
  - KVM: s390: fix setting of fpc register (Heiko Carstens)   
  - s390/ptrace: handle setting of fpc register correctly (Heiko Carstens)   
  - jfs: fix array-index-out-of-bounds in diNewExt (Edward Adam Davis)   
  - rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock() (Oleg Nesterov)   
  - afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*() (Oleg Nesterov)   
  - crypto: stm32/crc32 - fix parsing list of devices (Thomas Bourgoin)   
  - pstore/ram: Fix crash when setting number of cpus to an odd number (Weichen Chen)   
  - jfs: fix uaf in jfs_evict_inode (Edward Adam Davis)   
  - jfs: fix array-index-out-of-bounds in dbAdjTree (Manas Ghandat)   
  - jfs: fix slab-out-of-bounds Read in dtSearch (Manas Ghandat)   
  - UBSAN: array-index-out-of-bounds in dtSplitRoot (Osama Muhammad)   
  - FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree (Osama Muhammad)   
  - ACPI: extlog: fix NULL pointer dereference check (Prarit Bhargava)   
  - PNP: ACPI: fix fortify warning (Dmitry Antipov)   
  - ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop (Yuluo Qiu)   
  - audit: Send netlink ACK before setting connection in auditd_set (Chris Riches)   
  - regulator: core: Only increment use_count when enable_count changes (Rui Zhang)   
  - perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file (Greg KH)   
  - x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel (Zhiquan Li)   
  - powerpc/lib: Validate size for vector operations (Naveen N Rao)   
  - powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE (Stephen Rothwell)   
  - powerpc/mm: Fix build failures due to arch_reserved_kernel_pages() (Michael Ellerman)   
  - powerpc: Fix build error due to is_valid_bugaddr() (Michael Ellerman)   
  - powerpc/mm: Fix null-pointer dereference in pgtable_cache_add (Kunwu Chan)   
  - x86/entry/ia32: Ensure s32 is sign extended to s64 (Richard Palethorpe)   
  - tick/sched: Preserve number of idle sleeps across CPU hotplug events (Tim Chen)   
  - mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan (Xi Ruoyao)   
  - spi: bcm-qspi: fix SFDP BFPT read by usig mspi read (Kamal Dasu)   
  - gpio: eic-sprd: Clear interrupt after set the interrupt type (Wenhua Lin)   
  - drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume (Fedor Pchelkin)   
  - drm/exynos: fix accidental on-stack copy of exynos_drm_plane (Arnd Bergmann)   
  - drm/bridge: nxp-ptn3460: simplify some error checking (Dan Carpenter)   
  - drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking (Dan Carpenter)   
  - drm: Don't unref the same fb many times by mistake due to deadlock handling (Ville Syrjälä)   
  - gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04 (Mario Limonciello)   
  - netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal) [Orabug: 36251144] {CVE-2024-1086}
  - rbd: don't move requests to the running list on errors (Ilya Dryomov)   
  - btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args (Qu Wenruo)   
  - btrfs: don't warn if discard range is not aligned to sector (David Sterba)   
  - btrfs: tree-checker: fix inline ref size in error messages (Chung-Chiang Cheng)   
  - btrfs: ref-verify: free ref cache before clearing mount opt (Fedor Pchelkin)   
  - net: fec: fix the unhandled context fault from smmu (Shenwei Wang)   
  - fjes: fix memleaks in fjes_hw_setup (Zhipeng Lu)   
  - netfilter: nf_tables: validate NFPROTO_* family (Pablo Neira Ayuso)   
  - netfilter: nf_tables: restrict anonymous set and map names to 16 bytes (Florian Westphal)   
  - net/mlx5e: fix a double-free in arfs_create_groups (Zhipeng Lu)   
  - net/mlx5: Use kfree(ft->g) in arfs_create_groups() (Denis Efremov)   
  - net/mlx5: DR, Use the right GVMI number for drop action (Yevgeny Kliteynik)   
  - netlink: fix potential sleeping issue in mqueue_flush_file (Zhengchao Shao)   
  - tcp: Add memory barrier to tcp_push() (Salvatore Dipietro)   
  - afs: Hide silly-rename files from userspace (David Howells)   
  - tracing: Ensure visibility when inserting an element into tracing_map (Petr Pavlu)   
  - net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv (Sharath Srinivasan)   
  - llc: Drop support for ETH_P_TR_802_2. (Kuniyuki Iwashima)   
  - llc: make llc_ui_sendmsg() more robust against bonding changes (Eric Dumazet)   
  - vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING (Lin Ma)   
  - net/smc: fix illegal rmb_desc access in SMC-D connection dump (Wen Gu)   
  - x86/CPU/AMD: Fix disabling XSAVES on AMD family 0x17 due to erratum (Maciej S. Szmigiero)   
  - powerpc: Use always instead of always-y in for crtsavres.o (Nathan Chancellor)   
  - fs: move S_ISGID stripping into the vfs_*() helpers (Yang Xu)   
  - fs: add mode_strip_sgid() helper (Yang Xu)   
  - mtd: spinand: macronix: Fix MX35LFxGE4AD page size (JaimeLiao)   
  - block: Remove special-casing of compound pages (Matthew Wilcox (Oracle))   
  - rename(): fix the locking of subdirectories (Al Viro)   
  - ubifs: ubifs_symlink: Fix memleak of inode->i_link in error path (Zhihao Cheng)   
  - nouveau/vmm: don't set addr on the fail path to avoid warning (Dave Airlie)   
  - mmc: core: Use mrq.sbc in close-ended ffu (Avri Altman)   
  - arm64: dts: qcom: sdm845: fix USB wakeup interrupt types (Johan Hovold)   
  - parisc/firmware: Fix F-extend for PDC addresses (Helge Deller)   
  - rpmsg: virtio: Free driver_override when rpmsg_remove() (Xiaolei Wang)   
  - hwrng: core - Fix page fault dead lock on mmap-ed hwrng (Herbert Xu)   
  - PM: hibernate: Enforce ordering during image compression/decompression (Hongchen Zhang)   
  - crypto: api - Disallow identical driver names (Herbert Xu)   
  - ext4: allow for the last group to be marked as trimmed (Suraj Jitindar Singh)   
  - serial: sc16is7xx: add check for unsupported SPI modes during probe (Hugo Villeneuve)   
  - spi: introduce SPI_MODE_X_MASK macro (Oleksij Rempel)   
  - serial: sc16is7xx: set safe default SPI clock frequency (Hugo Villeneuve)   
  - units: add the HZ macros (Daniel Lezcano)   
  - units: change from 'L' to 'UL' (Daniel Lezcano)   
  - units: Add Watt units (Daniel Lezcano)   
  - PCI: mediatek: Clear interrupt status before dispatching handler (qizhong cheng)


author: Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.330.3.el8uek]
changelog:
  - uek: kabi: Add two new exported kABI symbols for ACFS and EDV (Saeed Mirzamohammadi)  [Orabug: 36251861]  
  - mm: avoid conflict between MADV_DOEXEC and upstream advice values (Anthony Yznaga)  [Orabug: 36334309]


author: Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.330.4.el8uek]
changelog:
  - Revert "crypto: api - Disallow identical driver names" (Saeed Mirzamohammadi)  [Orabug: 36361379]  
  - Fix null ptr in rds_tcp_recv_path (Allison Henderson)  [Orabug: 35587415]  
  - net/rds: print PPID/COMM of process doing user reset on RDS connection (Juan Garcia)  [Orabug: 36248461]


author: Alok Tiwari <alok.a.tiwari@oracle.com> [5.4.17-2136.330.5.el8uek]
changelog:
  - afs: Fix endless loop in directory parsing (David Howells)   
  - netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate() (Ignat Korchagin)   
  - netfilter: nf_tables: set dormant flag on hook register failure (Florian Westphal)   
  - scsi: megaraid_sas: Correct value passed to scsi_device_lookup() (Guixin Liu)  [Orabug: 36345168]


author: Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.330.6.el8uek]
changelog:
  - eVM: x86: Drop kvm SRCU lock in kvm_vcpu_update_apicv (Alejandro Jimenez)  [Orabug: 36329600]  
  - KVM: x86: Handle APICv updates for APIC "mode" changes via request (Sean Christopherson)  [Orabug: 36329600]  
  - blk-mq: fix system hang while doing cpu offline on domU (Shminderjit Singh)  [Orabug: 36366420]


author: Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.330.7.el8uek]
changelog:
  - Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped." (Sherry Yang)  [Orabug: 36409910]  
  - arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts (Johan Hovold)   
  - arm64: dts: qcom: add PDC interrupt controller for SDM845 (Lina Iyer)   
  - hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed (Shradha Gupta)   
  - hv_netvsc: use netif_is_bond_master() instead of open code (Juhee Kang)   
  - netfilter: nft_ct: fix l3num expectations with inet pseudo family (Florian Westphal)


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2136.330.7.1.el8uek]
changelog:
  - KVM: x86: Add BHI_NO (Daniel Sneddon)  [Orabug: 36384803]  {CVE-2024-2201} 
  - x86/bhi: Mitigate KVM by default (Pawan Gupta)  [Orabug: 36384803]  {CVE-2024-2201} 
  - x86/bhi: Add BHI mitigation knob (Pawan Gupta)  [Orabug: 36384803]  {CVE-2024-2201} 
  - x86/bhi: Enumerate Branch History Injection (BHI) bug (Pawan Gupta)  [Orabug: 36384803]  {CVE-2024-2201} 
  - x86/bhi: Define SPEC_CTRL_BHI_DIS_S (Daniel Sneddon)  [Orabug: 36384803]  {CVE-2024-2201} 
  - x86/bhi: Add support for clearing branch history at syscall entry (Pawan Gupta)  [Orabug: 36384803]  {CVE-2024-2201} 
  - x86/cpufeature: Add missing leaf enumeration (Daniel Sneddon)  [Orabug: 36384803]  {CVE-2024-2201} 
  - KVM: x86: Use a switch statement and macros in __feature_translate() (Jim Mattson)  [Orabug: 36384803]  {CVE-2024-2201} 
  - KVM: x86: Advertise CPUID.(EAX=7,ECX=2):EDX[5:0] to userspace (Jim Mattson)  [Orabug: 36384803]  {CVE-2024-2201} 
  - KVM: x86: Update KVM-only leaf handling to allow for 100% KVM-only leafs (Sean Christopherson)  [Orabug: 36384803]  {CVE-2024-2201} 
  - x86/bugs: Use sysfs_emit() (Borislav Petkov)  [Orabug: 36384803]  {CVE-2024-2201} 
  - Documentation/hw-vuln: Update spectre doc (Lin Yujun)  [Orabug: 36384803]  {CVE-2024-2201} 
  - x86/speculation: Reorder SRSO and GDS functions (Alexandre Chartre)  [Orabug: 36384803]  {CVE-2024-2201} 
  - KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES (Jim Mattson)  [Orabug: 36384803]  {CVE-2024-2201} 
  - KVM: x86: Move reverse CPUID helpers to separate header file (Ricardo Koller)  [Orabug: 36384803]  {CVE-2024-2201} 
  - KVM: x86: Fix implicit enum conversion goof in scattered reverse CPUID code (Sean Christopherson)  [Orabug: 36384803]  {CVE-2024-2201} 
  - KVM: x86: Add support for reverse CPUID lookup of scattered features (Sean Christopherson)  [Orabug: 36384803]  {CVE-2024-2201} 
  - x86/msr: Define new bits in TSX_FORCE_ABORT MSR (Pawan Gupta)  [Orabug: 36384803]  {CVE-2024-2201} 
  - objtool: Add asm version of STACK_FRAME_NON_STANDARD (Josh Poimboeuf)  [Orabug: 36384803]  {CVE-2024-2201} 
  - objtool: Only include valid definitions depending on source file type (Julien Thierry)  [Orabug: 36384803]  {CVE-2024-2201}


author: Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.330.7.2.el8uek]
changelog:
  - net/mlx5: Brute force GFP_NOIO (Håkon Bugge)  [Orabug: 36496480]  
  - RDMA/mlx5: Brute force GFP_NOIO (Håkon Bugge)  [Orabug: 36496480]  
  - RDMA/cm: Brute force GFP_NOIO (Håkon Bugge)  [Orabug: 36496480]  
  - RDMA/cma: Brute force GFP_NOIO (Håkon Bugge)  [Orabug: 36496480]  
  - rds: Brute force GFP_NOIO (Håkon Bugge)  [Orabug: 36496480]  
  - workqueue: Inherit NOIO and NOFS alloc flags (Håkon Bugge)  [Orabug: 36496480]


author: Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.330.7.3.el8uek]
changelog:
  - RDMA/cm: add timeout to cm_destroy_id wait (Manjunath Patil)  [Orabug: 36505155]  
  - rds: Add count for ready receive cache (Hans Westgaard Ry)  [Orabug: 36505157]  
  - uek-rpm: ol7, ol8: add vmlinux-nano.ctfa building (Nick Alcock)  [Orabug: 36505152]  
  - ctf: add ctf-nano, ctf containing only some modules' CTF (Nick Alcock)  [Orabug: 36505152]  
  - mm/hwpoison: fix error page recovered but reported "not recovered" (Naoya Horiguchi)  [Orabug: 36505149]  
  - mm,hwpoison: check mm when killing accessing process (Shuai Xue)  [Orabug: 36505149]  
  - mm,hwpoison: send SIGBUS with error virutal address (Naoya Horiguchi)  [Orabug: 36505149]  
  - mm,hwpoison: return -EHWPOISON to denote that the page has already been poisoned (Aili Yao)  [Orabug: 36505149]  
  - mm/memory-failure: use a mutex to avoid memory_failure() races (Tony Luck)  [Orabug: 36505149]


author: Alok Tiwari <alok.a.tiwari@oracle.com> [5.4.17-2136.330.7.4.el8uek]
changelog:
  - Revert "net/mlx5: Enable SW-defined RoCEv2 UDP source port" (Arumugam Kolappan)  [Orabug: 36584784]


author: Alok Tiwari <alok.a.tiwari@oracle.com> [5.4.17-2136.330.7.5.el8uek]
changelog:
  - mm/memory-failure: fix an incorrect use of tail pages (Liu Shixin)  [Orabug: 36664186]  
  - net/rds: mod reconnect delay on sendmsg() (Sharath Srinivasan)  [Orabug: 36664174]  
  - net/rds: Extend exponential backoff for rds reconnects (Sharath Srinivasan)  [Orabug: 36664174]


author: Alok Tiwari <alok.a.tiwari@oracle.com> [5.4.17-2136.331.1.el8uek]
changelog:
  - Revert "mmc: core: Use mrq.sbc in close-ended ffu" (Thomas Tai)  [Orabug: 36446450]  
  - ext4: fix corruption during on-line resize (Maximilian Heyne)  [Orabug: 36342902]


author: Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.331.2.el8uek]
changelog:
  - uek-rpm: ol7, ol8: add vmlinux-nano.ctfa building (Nick Alcock)  [Orabug: 35266053]  
  - ctf: add ctf-nano, ctf containing only some modules' CTF (Nick Alcock)  [Orabug: 35266053]  
  - RDMA/cm: add timeout to cm_destroy_id wait (Manjunath Patil)  [Orabug: 36280586]  
  - rds: Add count for ready receive cache (Hans Westgaard Ry)  [Orabug: 36360482]  
  - mm/hwpoison: fix error page recovered but reported "not recovered" (Naoya Horiguchi)  [Orabug: 36436639]  
  - mm,hwpoison: check mm when killing accessing process (Shuai Xue)  [Orabug: 36436639]  
  - mm,hwpoison: send SIGBUS with error virutal address (Naoya Horiguchi)  [Orabug: 36436639]  
  - mm,hwpoison: return -EHWPOISON to denote that the page has already been poisoned (Aili Yao)  [Orabug: 36436639]  
  - mm/memory-failure: use a mutex to avoid memory_failure() races (Tony Luck)  [Orabug: 36436639]


author: Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.331.3.el8uek]
changelog:
  - LTS tag: v5.4.273 (Sherry Yang)   
  - regmap: Add missing map->bus check (Marek Vasut)   
  - spi: spi-mt65xx: Fix NULL pointer access in interrupt handler (Fei Shao)   
  - bpf: report RCU QS in cpumap kthread (Yan Zhai)   
  - rcu: add a helper to report consolidated flavor QS (Yan Zhai)   
  - netfilter: nf_tables: do not compare internal table flags on updates (Pablo Neira Ayuso)   
  - ARM: dts: sun8i-h2-plus-bananapi-m2-zero: add regulator nodes vcc-dram and vcc1v2 (Michael Klein)   
  - octeontx2-af: Use separate handlers for interrupts (Subbaraya Sundeep)   
  - net/bnx2x: Prevent access to a freed page in page_pool (Thinh Tran)   
  - hsr: Handle failures in module init (Felix Maurer)   
  - packet: annotate data-races around ignore_outgoing (Eric Dumazet)   
  - hsr: Fix uninit-value access in hsr_get_node() (Shigeru Yoshida)   
  - s390/vtime: fix average steal time calculation (Mete Durlu)   
  - usb: gadget: net2272: Use irqflags in the call to net2272_probe_fin (Colin Ian King)   
  - staging: greybus: fix get_channel_from_mode() failure path (Dan Carpenter)   
  - serial: 8250_exar: Don't remove GPIO device on suspend (Andy Shevchenko)   
  - rtc: mt6397: select IRQ_DOMAIN instead of depending on it (Randy Dunlap)   
  - kconfig: fix infinite loop when expanding a macro at the end of file (Masahiro Yamada)   
  - tty: serial: samsung: fix tx_empty() to return TIOCSER_TEMT (Tudor Ambarus)   
  - serial: max310x: fix syntax error in IRQ error message (Hugo Villeneuve)   
  - tty: vt: fix 20 vs 0x20 typo in EScsiignore (Jiri Slaby (SUSE))   
  - afs: Revert "afs: Hide silly-rename files from userspace" (David Howells)   
  - NFS: Fix an off by one in root_nfs_cat() (Christophe JAILLET)   
  - watchdog: stm32_iwdg: initialize default timeout (Ben Wolsieffer)   
  - net: sunrpc: Fix an off by one in rpc_sockaddr2uaddr() (Christophe JAILLET)   
  - scsi: bfa: Fix function pointer type mismatch for hcb_qe->cbfn (Arnd Bergmann)   
  - RDMA/device: Fix a race between mad_client and cm_client init (Shifeng Li)   
  - scsi: csiostor: Avoid function pointer casts (Arnd Bergmann)   
  - ALSA: usb-audio: Stop parsing channels bits when all channels are found. (Johan Carlsson)   
  - clk: Fix clk_core_get NULL dereference (Bryan O'Donoghue)   
  - sparc32: Fix section mismatch in leon_pci_grpci (Sam Ravnborg)   
  - backlight: lp8788: Fully initialize backlight_properties during probe (Daniel Thompson)   
  - backlight: lm3639: Fully initialize backlight_properties during probe (Daniel Thompson)   
  - backlight: da9052: Fully initialize backlight_properties during probe (Daniel Thompson)   
  - backlight: lm3630a: Don't set bl->props.brightness in get_brightness (Luca Weiss)   
  - backlight: lm3630a: Initialize backlight_properties on init (Luca Weiss)   
  - powerpc/embedded6xx: Fix no previous prototype for avr_uart_send() etc. (Michael Ellerman)   
  - drm/msm/dpu: add division of drm_display_mode's hskew parameter (Paloma Arellano)   
  - powerpc/hv-gpci: Fix the H_GET_PERF_COUNTER_INFO hcall return value checks (Kajol Jain)   
  - drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip (Hsin-Yi Wang)   
  - media: ttpci: fix two memleaks in budget_av_attach (Zhipeng Lu)   
  - media: media/pci: rename VFL_TYPE_GRABBER to _VIDEO (Hans Verkuil)   
  - media: go7007: fix a memleak in go7007_load_encoder (Zhipeng Lu)   
  - media: dvb-frontends: avoid stack overflow warnings with clang (Arnd Bergmann)   
  - media: pvrusb2: fix uaf in pvr2_context_set_notify (Edward Adam Davis)   
  - drm/amdgpu: Fix missing break in ATOM_ARG_IMM Case of atom_get_src_int() (Srinivasan Shanmugam)   
  - ASoC: meson: axg-tdm-interface: fix mclk setup without mclk-fs (Jerome Brunet)   
  - mtd: rawnand: lpc32xx_mlc: fix irq handler prototype (Arnd Bergmann)   
  - mtd: maps: physmap-core: fix flash size larger than 32-bit (Baruch Siach)   
  - crypto: arm/sha - fix function cast warnings (Arnd Bergmann)   
  - mfd: altera-sysmgr: Call of_node_put() only when of_parse_phandle() takes a ref (Peter Griffin)   
  - mfd: syscon: Call of_node_put() only when of_parse_phandle() takes a ref (Peter Griffin)   
  - drm/tegra: put drm_gem_object ref on error in tegra_fb_create (Fedor Pchelkin)   
  - clk: hisilicon: hi3519: Release the correct number of gates in hi3519_clk_unregister() (Christophe JAILLET)   
  - PCI: Mark 3ware-9650SE Root Port Extended Tags as broken (Jörg Wedekind)   
  - drm/mediatek: dsi: Fix DSI RGB666 formats and definitions (AngeloGioacchino Del Regno)   
  - clk: qcom: dispcc-sdm845: Adjust internal GDSC wait times (Konrad Dybcio)   
  - media: pvrusb2: fix pvr2_stream_callback casts (Arnd Bergmann)   
  - media: pvrusb2: remove redundant NULL check (Daniil Dulov)   
  - media: go7007: add check of return value of go7007_read_addr() (Daniil Dulov)   
  - media: imx: csc/scaler: fix v4l2_ctrl_handler memory leak (Lucas Stach)   
  - perf stat: Avoid metric-only segv (Ian Rogers)   
  - ALSA: seq: fix function cast warnings (Takashi Iwai)   
  - drm/radeon/ni: Fix wrong firmware size logging in ni_init_microcode() (Nikita Zhandarovich)   
  - perf thread_map: Free strlist on normal path in thread_map__new_by_tid_str() (Yang Jihong)   
  - PCI: switchtec: Fix an error handling path in switchtec_pci_probe() (Christophe JAILLET)   
  - quota: Fix rcu annotations of inode dquot pointers (Jan Kara)   
  - quota: Fix potential NULL pointer dereference (Wang Jianjian)   
  - quota: simplify drop_dquot_ref() (Baokun Li)   
  - clk: qcom: reset: Ensure write completion on reset de/assertion (Konrad Dybcio)   
  - clk: qcom: reset: Commonize the de/assert functions (Konrad Dybcio)   
  - clk: qcom: reset: support resetting multiple bits (Robert Marko)   
  - clk: qcom: reset: Allow specifying custom reset delay (Stephan Gerhold)   
  - media: edia: dvbdev: fix a use-after-free (Zhipeng Lu)   
  - media: v4l2-mem2mem: fix a memleak in v4l2_m2m_register_entity (Zhipeng Lu)   
  - media: v4l2-tpg: fix some memleaks in tpg_alloc (Zhipeng Lu)   
  - media: em28xx: annotate unchecked call to media_device_register() (Nikita Zhandarovich)   
  - perf evsel: Fix duplicate initialization of data->id in evsel__parse_sample() (Yang Jihong)   
  - drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()' (Srinivasan Shanmugam)   
  - perf record: Fix possible incorrect free in record__switch_output() (Yang Jihong)   
  - PCI/DPC: Print all TLP Prefixes, not just the first (Ilpo Järvinen)   
  - media: tc358743: register v4l2 async device only after successful setup (Alexander Stein)   
  - dmaengine: tegra210-adma: Update dependency to ARCH_TEGRA (Peter Robinson)   
  - drm/rockchip: lvds: do not overwrite error code (Quentin Schulz)   
  - drm: Don't treat 0 as -1 in drm_fixp2int_ceil (Harry Wentland)   
  - drm/rockchip: inno_hdmi: Fix video timing (Alex Bee)   
  - drm/tegra: output: Fix missing i2c_put_adapter() in the error handling paths of tegra_output_probe() (Christophe JAILLET)   
  - drm/tegra: dsi: Fix missing pm_runtime_disable() in the error handling path of tegra_dsi_probe() (Christophe JAILLET)   
  - drm/tegra: dsi: Fix some error handling paths in tegra_dsi_probe() (Christophe JAILLET)   
  - drm/tegra: dsi: Make use of the helper function dev_err_probe() (Cai Huoqing)   
  - gpu: host1x: mipi: Update tegra_mipi_request() to be node based (Sowjanya Komatineni)   
  - drm/tegra: dsi: Add missing check for of_find_device_by_node (Chen Ni)   
  - dm: call the resume method on internal suspend (Mikulas Patocka)   
  - dm raid: fix false positive for requeue needed during reshape (Ming Lei)   
  - nfp: flower: handle acti_netdevs allocation failure (Duoming Zhou)   
  - net/x25: fix incorrect parameter validation in the x25_getsockopt() function (Gavrilov Ilia)   
  - net: kcm: fix incorrect parameter validation in the kcm_getsockopt) function (Gavrilov Ilia)   
  - udp: fix incorrect parameter validation in the udp_lib_getsockopt() function (Gavrilov Ilia)   
  - l2tp: fix incorrect parameter validation in the pppol2tp_getsockopt() function (Gavrilov Ilia)   
  - tcp: fix incorrect parameter validation in the do_tcp_getsockopt() function (Gavrilov Ilia)   
  - net: hns3: fix port duplex configure error in IMP reset (Jie Wang)   
  - net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv() (Eric Dumazet)   
  - ipv6: fib6_rules: flush route cache when rule is changed (Shiming Cheng)   
  - bpf: Fix stackmap overflow check on 32-bit arches (Toke Høiland-Jørgensen)   
  - bpf: Fix hashtab overflow check on 32-bit arches (Toke Høiland-Jørgensen)   
  - sr9800: Add check for usbnet_get_endpoints (Chen Ni)   
  - Bluetooth: hci_core: Fix possible buffer overflow (Luiz Augusto von Dentz)   
  - Bluetooth: Remove superfluous call to hci_conn_check_pending() (Jonas Dreßler)   
  - igb: Fix missing time sync events (Vinicius Costa Gomes)   
  - igb: move PEROUT and EXTTS isr logic to separate functions (Ruud Bos)   
  - mmc: wmt-sdmmc: remove an incorrect release_mem_region() call in the .remove function (Christophe JAILLET)   
  - SUNRPC: fix some memleaks in gssx_dec_option_array (Zhipeng Lu)   
  - x86, relocs: Ignore relocations in .notes section (Kees Cook)   
  - ACPI: scan: Fix device check notification handling (Rafael J. Wysocki)   
  - ARM: dts: imx6dl-yapp4: Move the internal switch PHYs under the switch node (Michal Vokáč)   
  - ARM: dts: imx6dl-yapp4: Fix typo in the QCA switch register address (Michal Vokáč)   
  - ARM: dts: imx6dl-yapp4: Move phy reset into switch node (Michal Vokáč)   
  - ARM: dts: arm: realview: Fix development chip ROM compatible value (Geert Uytterhoeven)   
  - net: ena: Remove ena_select_queue (Kamal Heib)   
  - net: ena: cosmetic: fix line break issues (Arthur Kiyanovski)   
  - wifi: brcmsmac: avoid function pointer casts (Arnd Bergmann)   
  - iommu/amd: Mark interrupt as managed (Mario Limonciello)   
  - bus: tegra-aconnect: Update dependency to ARCH_TEGRA (Peter Robinson)   
  - ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit() (Armin Wolf)   
  - arm64: dts: qcom: msm8996: Pad addresses (Bjorn Andersson)   
  - arm64: dts: qcom: msm8996: Move regulator consumers to db820c (Bjorn Andersson)   
  - arm64: dts: qcom: msm8996: Use node references in db820c (Bjorn Andersson)   
  - arm64: dts: qcom: db820c: Move non-soc entries out of /soc (Bjorn Andersson)   
  - bpf: Mark bpf_spin_{lock,unlock}() helpers with notrace correctly (Yonghong Song)   
  - bpf: Factor out bpf_spin_lock into helpers. (Alexei Starovoitov)   
  - arm64: dts: mediatek: mt7622: add missing "device_type" to memory nodes (Rafał Miłecki)   
  - wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer() (Zhipeng Lu)   
  - net: blackhole_dev: fix build warning for ethh set but not used (Breno Leitao)   
  - af_unix: Annotate data-race of gc_in_progress in wait_for_unix_gc(). (Kuniyuki Iwashima)   
  - sock_diag: annotate data-races around sock_diag_handlers[family] (Eric Dumazet)   
  - wifi: mwifiex: debugfs: Drop unnecessary error check for debugfs_create_dir() (Jinjie Ruan)   
  - wifi: wilc1000: fix RCU usage in connect path (Alexis Lothoré)   
  - wifi: wilc1000: fix declarations ordering (Alexis Lothoré)   
  - wifi: b43: Disable QoS for bcm4331 (Rahul Rameshbabu)   
  - wifi: b43: Stop correct queue in DMA worker when QoS is disabled (Rahul Rameshbabu)   
  - b43: main: Fix use true/false for bool type (Saurav Girepunje)   
  - wifi: b43: Stop/wake correct queue in PIO Tx path when QoS is disabled (Rahul Rameshbabu)   
  - wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled (Rahul Rameshbabu)   
  - b43: dma: Fix use true/false for bool type variable (Saurav Girepunje)   
  - wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev() (Xingyuan Mo)   
  - timekeeping: Fix cross-timestamp interpolation for non-x86 (Peter Hilber)   
  - timekeeping: Fix cross-timestamp interpolation corner case decision (Peter Hilber)   
  - timekeeping: Fix cross-timestamp interpolation on counter wrap (Peter Hilber)   
  - aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts (Chun-Yi Lee)   
  - fs/select: rework stack allocation hack for clang (Arnd Bergmann)   
  - do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak (Nikita Zhandarovich)   
  - ASoC: wm8962: Fix up incorrect error message in wm8962_set_fll (Stuart Henderson)   
  - ASoC: wm8962: Enable both SPKOUTR_ENA and SPKOUTL_ENA in mono mode (Stuart Henderson)   
  - ASoC: wm8962: Enable oscillator if selecting WM8962_FLL_OSC (Stuart Henderson)   
  - Input: gpio_keys_polled - suppress deferred probe error for gpio (Uwe Kleine-König)   
  - ASoC: Intel: bytcr_rt5640: Add an extra entry for the Chuwi Vi8 tablet (Alban Boyé)   
  - firewire: core: use long bus reset on gap count error (Takashi Sakamoto)   
  - Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security (Yuxuan Hu)   
  - scsi: mpt3sas: Prevent sending diag_reset when the controller is ready (Ranjan Kumar)   
  - btrfs: fix data race at btrfs_use_block_rsv() when accessing block reserve (Filipe Manana)   
  - dm-verity, dm-crypt: align "struct bvec_iter" correctly (Mikulas Patocka)   
  - block: sed-opal: handle empty atoms when parsing response (Greg Joyce)   
  - parisc/ftrace: add missing CONFIG_DYNAMIC_FTRACE check (Max Kellermann)   
  - net/iucv: fix the allocation size of iucv_path_table array (Alexander Gordeev)   
  - RDMA/mlx5: Relax DEVX access upon modify commands (Yishai Hadas)   
  - HID: multitouch: Add required quirk for Synaptics 0xcddc device (Manuel Fombuena)   
  - MIPS: Clear Cause.BD in instruction_pointer_set (Jiaxun Yang)   
  - x86/xen: Add some null pointer checking to smp.c (Kunwu Chan)   
  - ASoC: rt5645: Make LattePanda board DMI match more precise (Hans de Goede)   
  - selftests: tls: use exact comparison in recv_partial (Jakub Kicinski)   
  - LTS tag: v5.4.272 (Sherry Yang)   
  - serial: max310x: fix IO data corruption in batched operations (Jan Kundrát)   
  - serial: max310x: implement I2C support (Cosmin Tanislav)   
  - serial: max310x: make accessing revision id interface-agnostic (Cosmin Tanislav)   
  - regmap: Add bulk read/write callbacks into regmap_config (Marek Vasut)   
  - regmap: allow to define reg_update_bits for no bus configuration (Ansuel Smith)   
  - serial: max310x: Unprepare and disable clock in error path (Andy Shevchenko)   
  - getrusage: use sig->stats_lock rather than lock_task_sighand() (Oleg Nesterov)   
  - getrusage: use __for_each_thread() (Oleg Nesterov)   
  - getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand() (Oleg Nesterov)   
  - getrusage: add the "signal_struct *sig" local variable (Oleg Nesterov)   
  - y2038: rusage: use __kernel_old_timeval (Arnd Bergmann)   
  - Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU (Werner Sembach)   
  - serial: max310x: prevent infinite while() loop in port startup (Hugo Villeneuve)   
  - serial: max310x: use a separate regmap for each port (Cosmin Tanislav)   
  - serial: max310x: use regmap methods for SPI batch operations (Cosmin Tanislav)   
  - serial: max310x: Make use of device properties (Andy Shevchenko)   
  - serial: max310x: fail probe if clock crystal is unstable (Hugo Villeneuve)   
  - serial: max310x: Try to get crystal clock rate from property (Andy Shevchenko)   
  - serial: max310x: Use devm_clk_get_optional() to get the input clock (Andy Shevchenko)   
  - um: allow not setting extra rpaths in the linux binary (Johannes Berg)   
  - selftests: mm: fix map_hugetlb failure on 64K page size systems (Nico Pache)   
  - netrom: Fix data-races around sysctl_net_busy_read (Jason Xing)   
  - netrom: Fix a data-race around sysctl_netrom_link_fails_count (Jason Xing)   
  - netrom: Fix a data-race around sysctl_netrom_routing_control (Jason Xing)   
  - netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout (Jason Xing)   
  - netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size (Jason Xing)   
  - netrom: Fix a data-race around sysctl_netrom_transport_busy_delay (Jason Xing)   
  - netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay (Jason Xing)   
  - netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries (Jason Xing)   
  - netrom: Fix a data-race around sysctl_netrom_transport_timeout (Jason Xing)   
  - netrom: Fix data-races around sysctl_netrom_network_ttl_initialiser (Jason Xing)   
  - netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser (Jason Xing)   
  - netrom: Fix a data-race around sysctl_netrom_default_path_quality (Jason Xing)   
  - netfilter: nf_conntrack_h323: Add protection for bmp length out of range (Lena Wang)   
  - net/ipv6: avoid possible UAF in ip6_route_mpath_notify() (Eric Dumazet)   
  - net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() (Rand Deeb)   
  - geneve: make sure to pull inner header in geneve_rx() (Eric Dumazet)   
  - ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able (Maciej Fijalkowski)   
  - net: lan78xx: fix runtime PM count underflow on link stop (Oleksij Rempel)   
  - lan78xx: Fix race conditions in suspend/resume handling (John Efstathiades)   
  - lan78xx: Fix partial packet errors on suspend/resume (John Efstathiades)   
  - lan78xx: Add missing return code checks (John Efstathiades)   
  - lan78xx: Fix white space and style issues (John Efstathiades)   
  - LTS tag: v5.4.271 (Sherry Yang)   
  - gpio: 74x164: Enable output pins after registers are reset (Arturas Moskvinas)   
  - fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super (Oscar Salvador)   
  - cachefiles: fix memory leak in cachefiles_add_cache() (Baokun Li)   
  - x86/cpu/intel: Detect TME keyid bits before setting MTRR mask registers (Paolo Bonzini)   
  - mmc: core: Fix eMMC initialization with 1-bit bus connection (Ivan Semenov)   
  - dmaengine: fsl-qdma: init irq after reg initialization (Curtis Klein)   
  - dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read (Peng Ma)   
  - btrfs: dev-replace: properly validate device names (David Sterba)   
  - wifi: nl80211: reject iftype change with mesh ID change (Johannes Berg)   
  - gtp: fix use-after-free and null-ptr-deref in gtp_newlink() (Alexander Ofitserov)   
  - ALSA: Drop leftover snd-rtctimer stuff from Makefile (Takashi Iwai)   
  - power: supply: bq27xxx-i2c: Do not free non existing IRQ (Hans de Goede)   
  - efi/capsule-loader: fix incorrect allocation size (Arnd Bergmann)   
  - rtnetlink: fix error logic of IFLA_BRIDGE_FLAGS writing back (Lin Ma)   
  - Bluetooth: Enforce validation on max value of connection interval (Kai-Heng Feng)   
  - Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST (Luiz Augusto von Dentz)   
  - Bluetooth: Avoid potential use-after-free in hci_error_reset (Ying Hsu)   
  - net: usb: dm9601: fix wrong return value in dm9601_mdio_read (Javier Carrasco)   
  - lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected (Oleksij Rempel)   
  - ipv6: fix potential "struct net" leak in inet6_rtm_getaddr() (Eric Dumazet)   
  - tun: Fix xdp_rxq_info's queue_index when detaching (Yunjian Wang)   
  - net: ip_tunnel: prevent perpetual headroom growth (Florian Westphal)   
  - netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter (Ryosuke Yasuoka)   
  - LTS tag: v5.4.270 (Sherry Yang)   
  - fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio (Bart Van Assche)   
  - drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set (Erik Kurzinger)   
  - drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3 (Christian König)   
  - tls: stop recv() if initial process_rx_list gave us non-DATA (Sabrina Dubroca)   
  - tls: rx: drop pointless else after goto (Jakub Kicinski)   
  - tls: rx: jump to a more appropriate label (Jakub Kicinski)   
  - s390: use the correct count for __iowrite64_copy() (Jason Gunthorpe)   
  - packet: move from strlcpy with unused retval to strscpy (Wolfram Sang)   
  - ipv6: sr: fix possible use-after-free and null-ptr-deref (Vasiliy Kovalev)   
  - afs: Increase buffer size in afs_update_volume_status() (Daniil Dulov)   
  - ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid (Eric Dumazet)   
  - ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid (Eric Dumazet)   
  - nouveau: fix function cast warnings (Arnd Bergmann)   
  - scsi: jazz_esp: Only build if SCSI core is builtin (Randy Dunlap)   
  - bpf, scripts: Correct GPL license name (Gianmarco Lusvardi)   
  - scripts/bpf: teach bpf_helpers_doc.py to dump BPF helper definitions (Andrii Nakryiko)   
  - RDMA/srpt: fix function pointer cast warnings (Arnd Bergmann)   
  - RDMA/srpt: Make debug output more detailed (Bart Van Assche)   
  - RDMA/bnxt_re: Return error for SRQ resize (Kalesh AP)   
  - IB/hfi1: Fix a memleak in init_credit_return (Zhipeng Lu)   
  - usb: roles: don't get/set_role() when usb_role_switch is unregistered (Xu Yang)   
  - usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs (Krishna Kurapati)   
  - usb: cdns3: fix memory double free when handle zero packet (Frank Li)   
  - usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable() (Frank Li)   
  - ARM: ep93xx: Add terminator to gpiod_lookup_table (Nikita Shubin)   
  - l2tp: pass correct message length to ip6_append_data (Tom Parkin)   
  - PCI/MSI: Prevent MSI hardware interrupt number truncation (Vidya Sagar)   
  - gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp() (Vasiliy Kovalev)   
  - dm-crypt: don't modify the data when using authenticated encryption (Mikulas Patocka)   
  - IB/hfi1: Fix sdma.h tx->num_descs off-by-one error (Daniel Vacek)   
  - PCI: tegra: Fix OF node reference leak (Christophe JAILLET)   
  - PCI: tegra: Fix reporting GPIO error value (Pali Rohár)   
  - arm64: dts: qcom: msm8916: Fix typo in pronto remoteproc node (Sireesh Kodali)   
  - drm/amdgpu: Fix type of second parameter in trans_msg() callback (Nathan Chancellor)   
  - iomap: Set all uptodate bits for an Uptodate page (Matthew Wilcox (Oracle))   
  - dm-integrity: don't modify bio's immutable bio_vec in integrity_metadata() (Mikulas Patocka)   
  - x86/alternatives: Disable KASAN in apply_alternatives() (Kirill A. Shutemov)   
  - drm/amdgpu: Check for valid number of registers to read (Trek)   
  - Revert "drm/sun4i: dsi: Change the start delay calculation" (Icenowy Zheng)   
  - ALSA: hda/realtek - Enable micmute LED on and HP system (Kai-Heng Feng)   
  - selftests/bpf: Avoid running unprivileged tests with alignment requirements (Björn Töpel)   
  - net: bridge: clear bridge's private skb space on xmit (Nikolay Aleksandrov)   
  - spi: mt7621: Fix an error message in mt7621_spi_probe() (Christophe JAILLET)   
  - pinctrl: rockchip: Fix refcount leak in rockchip_pinctrl_parse_groups (Miaoqian Lin)   
  - pinctrl: pinctrl-rockchip: Fix a bunch of kerneldoc misdemeanours (Lee Jones)   
  - tcp: add annotations around sk->sk_shutdown accesses (Eric Dumazet)   
  - tcp: return EPOLLOUT from tcp_poll only when notsent_bytes is half the limit (Soheil Hassas Yeganeh)   
  - tcp: factor out __tcp_close() helper (Paolo Abeni)   
  - pmdomain: renesas: r8a77980-sysc: CR7 must be always on (Geert Uytterhoeven)   
  - s390/qeth: Fix potential loss of L3-IP@ in case of network issues (Alexandra Winter)   
  - virtio-blk: Ensure no requests in virtqueues before deleting vqs. (Yi Sun)   
  - firewire: core: send bus reset promptly on gap count error (Takashi Sakamoto)   
  - scsi: lpfc: Use unsigned type for num_sge (Hannes Reinecke)   
  - hwmon: (coretemp) Enlarge per package core count limit (Zhang Rui)   
  - nvmet-fc: abort command when there is no binding (Daniel Wagner)   
  - netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new (Xin Long)   
  - ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616 (Chen-Yu Tsai)   
  - nvmet-tcp: fix nvme tcp ida memory leak (Guixin Liu)   
  - regulator: pwm-regulator: Add validity checks in continuous .get_voltage (Martin Blumenstingl)   
  - ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() (Baokun Li)   
  - ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found() (Baokun Li)   
  - ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers (Lennert Buytenhek)   
  - ahci: asm1166: correct count of reported ports (Conrad Kostecki)   
  - fbdev: sis: Error out if pixclock equals zero (Fullway Wang)   
  - fbdev: savage: Error out if pixclock equals zero (Fullway Wang)   
  - wifi: mac80211: fix race condition on enabling fast-xmit (Felix Fietkau)   
  - wifi: cfg80211: fix missing interfaces when dumping (Michal Kazior)   
  - dmaengine: fsl-qdma: increase size of 'irq_name' (Vinod Koul)   
  - dmaengine: shdma: increase size of 'dev_id' (Vinod Koul)   
  - scsi: target: core: Add TMF to tmr_list handling (Dmitry Bogdanov)   
  - sched/rt: Disallow writing invalid values to sched_rt_period_us (Cyril Hrubis)   
  - sched/rt: Fix sysctl_sched_rr_timeslice intial value (Cyril Hrubis)   
  - userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb (Lokesh Gidra)   
  - nilfs2: replace WARN_ONs for invalid DAT metadata block requests (Ryusuke Konishi)   
  - sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset (Cyril Hrubis)   
  - KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler (Oliver Upton)   
  - KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table() (Oliver Upton)


author: Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.331.4.el8uek]
changelog:
  - net/mlx5: Brute force GFP_NOIO (Håkon Bugge)  [Orabug: 35436312]  
  - RDMA/mlx5: Brute force GFP_NOIO (Håkon Bugge)  [Orabug: 35436312]  
  - RDMA/cm: Brute force GFP_NOIO (Håkon Bugge)  [Orabug: 35436312]  
  - RDMA/cma: Brute force GFP_NOIO (Håkon Bugge)  [Orabug: 35436312]  
  - rds: Brute force GFP_NOIO (Håkon Bugge)  [Orabug: 35436312]  
  - workqueue: Inherit NOIO and NOFS alloc flags (Håkon Bugge)  [Orabug: 35436312]  
  - KVM: x86: Add BHI_NO (Daniel Sneddon)  [Orabug: 36496846]  {CVE-2024-2201} 
  - x86/bhi: Mitigate KVM by default (Pawan Gupta)  [Orabug: 36496846]  {CVE-2024-2201} 
  - x86/bhi: Add BHI mitigation knob (Pawan Gupta)  [Orabug: 36496846]  {CVE-2024-2201} 
  - x86/bhi: Enumerate Branch History Injection (BHI) bug (Pawan Gupta)  [Orabug: 36496846]  {CVE-2024-2201} 
  - x86/bhi: Define SPEC_CTRL_BHI_DIS_S (Daniel Sneddon)  [Orabug: 36496846]  {CVE-2024-2201} 
  - x86/bhi: Add support for clearing branch history at syscall entry (Pawan Gupta)  [Orabug: 36496846]  {CVE-2024-2201} 
  - x86/cpufeature: Add missing leaf enumeration (Daniel Sneddon)  [Orabug: 36496846]  {CVE-2024-2201} 
  - KVM: x86: Use a switch statement and macros in __feature_translate() (Jim Mattson)  [Orabug: 36496846]  {CVE-2024-2201} 
  - KVM: x86: Advertise CPUID.(EAX=7,ECX=2):EDX[5:0] to userspace (Jim Mattson)  [Orabug: 36496846]  {CVE-2024-2201} 
  - KVM: x86: Update KVM-only leaf handling to allow for 100% KVM-only leafs (Sean Christopherson)  [Orabug: 36496846]  {CVE-2024-2201} 
  - x86/bugs: Use sysfs_emit() (Borislav Petkov)  [Orabug: 36496846]  {CVE-2024-2201} 
  - Documentation/hw-vuln: Update spectre doc (Lin Yujun)  [Orabug: 36496846]  {CVE-2024-2201} 
  - x86/speculation: Reorder SRSO and GDS functions (Alexandre Chartre)  [Orabug: 36496846]  {CVE-2024-2201} 
  - KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES (Jim Mattson)  [Orabug: 36496846]  {CVE-2024-2201} 
  - KVM: x86: Move reverse CPUID helpers to separate header file (Ricardo Koller)  [Orabug: 36496846]  {CVE-2024-2201} 
  - KVM: x86: Fix implicit enum conversion goof in scattered reverse CPUID code (Sean Christopherson)  [Orabug: 36496846]  {CVE-2024-2201} 
  - KVM: x86: Add support for reverse CPUID lookup of scattered features (Sean Christopherson)  [Orabug: 36496846]  {CVE-2024-2201} 
  - x86/msr: Define new bits in TSX_FORCE_ABORT MSR (Pawan Gupta)  [Orabug: 36496846]  {CVE-2024-2201} 
  - objtool: Add asm version of STACK_FRAME_NON_STANDARD (Josh Poimboeuf)  [Orabug: 36496846]  {CVE-2024-2201} 
  - objtool: Only include valid definitions depending on source file type (Julien Thierry)  [Orabug: 36496846]  {CVE-2024-2201}


author: Alok Tiwari <alok.a.tiwari@oracle.com> [5.4.17-2136.331.5.el8uek]
changelog:
  - hwmon: (opbmc) E6/AST2600 platform enabled (Jan Zdarek)  [Orabug: 36485646]  
  - rds/ib: Disable WARN_ON() when system is going down (Hans Westgaard Ry)  [Orabug: 36394488]  
  - rds/rdma: print connection up/down time while dropping/connecting (Juan Garcia)  [Orabug: 36264675]  
  - rds: ib: Use fastreg QP if conn is down and handle FRWR CQE timeout (Håkon Bugge)  [Orabug: 36236541]  
  - rds: ib: Tear down QP when FRWR WRs fails (Håkon Bugge)  [Orabug: 36236541]  
  - rds: ib: Poll fastreg CQ before destroying (Håkon Bugge)  [Orabug: 36236541]


author: Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.331.6.el8uek]
changelog:
  - mm/memory-failure: fix an incorrect use of tail pages (Liu Shixin)   
  - fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion (Bart Van Assche)   
  - ahci: asm1064: asm1166: don't limit reported ports (Conrad Kostecki)   
  - ahci: asm1064: correct count of reported ports (Andrey Jr. Melnikov)   
  - mmc: core: Fix switch on gp3 partition (Dominique Martinet)   
  - Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"" (Song Liu)   
  - serial: max310x: fix NULL pointer dereference in I2C instantiation (Hugo Villeneuve)   
  - bonding: rate-limit bonding driver inspect messages (Praveen Kumar Kannoju)  [Orabug: 36250568]  
  - rds/rdma: Fix congestion value for userspace consumption (Juan Garcia)  [Orabug: 36264652]  
  - rds: Include transport protocol name in rds-info -k output (Juan Garcia)  [Orabug: 36264652]


author: Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.331.7.el8uek]
changelog:
  - Revert "tracing/trigger: Fix to return error if failed to alloc snapshot" (Siddh Raman Pant)   
  - Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems" (Harshit Mogalapalli)  [Orabug: 36584568]  
  - Revert "net/mlx5: Enable SW-defined RoCEv2 UDP source port" (Arumugam Kolappan)  [Orabug: 36530159]  
  - PCI: boot time optimization (Harman Kalra)  [Orabug: 36553666]


author: Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.332.1.el8uek]
changelog:
  - uek-rpm: ol7: Prevent vmlinux build ID mismatch (Stephen Brennan)  [Orabug: 35094286]  
  - uek-rpm: ol7: Remove fancy_debuginfo (Stephen Brennan)  [Orabug: 35094286]  
  - uek-rpm: ol8: Remove fancy_debuginfo (Stephen Brennan)  [Orabug: 35094286]  
  - Revert "Revert "uek-rpm: Don't recompute build-ids for kernel-uek-debuginfo"" (Stephen Brennan)  [Orabug: 35094286]  
  - genirq/cpuhotplug: Retry with cpu_online_mask when migration fails (Dongli Zhang)  [Orabug: 36378870]  
  - rds: Optimize rds_percpu_caches garbage-collection (Hans Westgaard Ry)  [Orabug: 36383439]  
  - rds: Add lfstack_pop_all (Hans Westgaard Ry)  [Orabug: 36383439]  
  - dmapool: create/destroy cleanup (Keith Busch)  [Orabug: 36483085]  
  - dmapool: link blocks across pages (Keith Busch)  [Orabug: 36483085]  
  - dmapool: don't memset on free twice (Keith Busch)  [Orabug: 36483085]  
  - dmapool: simplify freeing (Keith Busch)  [Orabug: 36483085]  
  - dmapool: consolidate page initialization (Keith Busch)  [Orabug: 36483085]  
  - dmapool: rearrange page alloc failure handling (Keith Busch)  [Orabug: 36483085]  
  - dmapool: move debug code to own functions (Keith Busch)  [Orabug: 36483085]  
  - dmapool: speedup DMAPOOL_DEBUG with init_on_alloc (Tony Battersby)  [Orabug: 36483085]  
  - dmapool: cleanup integer types (Tony Battersby)  [Orabug: 36483085]  
  - dmapool: use sysfs_emit() instead of scnprintf() (Tony Battersby)  [Orabug: 36483085]  
  - dmapool: remove checks for dev == NULL (Tony Battersby)  [Orabug: 36483085]  
  - mm/dmapool.c: revert "make dma pool to use kmalloc_node" (Christian König)  [Orabug: 36483085]  
  - mm/dmapool: use DEVICE_ATTR_RO macro (YueHaibing)  [Orabug: 36483085]  
  - mm/dmapool: switch from strlcpy to strscpy (Zhiyuan Dai)  [Orabug: 36483085]  
  - mm/dmapool: use might_alloc() (Daniel Vetter)  [Orabug: 36483085]  
  - mm/dmapool.c: replace hard coded function name with __func__ (Andy Shevchenko)  [Orabug: 36483085]  
  - mm/dmapool.c: replace open-coded list_for_each_entry_safe() (Andy Shevchenko)  [Orabug: 36483085]  
  - mm/dmapool.c: micro-optimisation remove unnecessary branch (Mateusz Nosek)  [Orabug: 36483085]  
  - mm: extract might_alloc() debug check (Daniel Vetter)  [Orabug: 36483085]  
  - exec, elf: ignore malformed note segments (Anthony Yznaga)  [Orabug: 36524977]  
  - io_uring: ensure '0' is returned on file registration success (Jens Axboe)  [Orabug: 36544122]  
  - io_uring: don't save/restore iowait state (Jens Axboe)  [Orabug: 36544122]  
  - io_uring: drop any code related to SCM_RIGHTS (Jens Axboe)  [Orabug: 36544122]  
  - io_uring/unix: drop usage of io_uring socket (Jens Axboe)  [Orabug: 36544122]  
  - io_uring/rw: ensure io->bytes_done is always initialized (Jens Axboe)  [Orabug: 36544122]  
  - io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid (Jens Axboe)  [Orabug: 36544122]  
  - RDMA/cm: Print the old state when cm_destroy_id gets timeout (Mark Zhang)  [Orabug: 36546712]  
  - igb: free up irq resources in device shutdown path. (Imran Khan)  [Orabug: 36547250]  
  - hwmon: (k10temp) Check range scale when CUR_TEMP register is read-write (Babu Moger)  [Orabug: 36550305]


author: Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.332.2.el8uek]
changelog:
  - net-sysfs: initialize uid and gid before calling net_ns_get_ownership (Xin Long)  [Orabug: 33937964]  
  - sysfs: fix static inline declaration of sysfs_groups_change_owner() (Christian Brauner)  [Orabug: 33937964]  
  - net: fix sysfs permssions when device changes network namespace (Christian Brauner)  [Orabug: 33937964]  
  - net-sysfs: add queue_change_owner() (Christian Brauner)  [Orabug: 33937964]  
  - net-sysfs: add netdev_change_owner() (Christian Brauner)  [Orabug: 33937964]  
  - drivers/base/power: add dpm_sysfs_change_owner() (Christian Brauner)  [Orabug: 33937964]  
  - device: add device_change_owner() (Christian Brauner)  [Orabug: 33937964]  
  - sysfs: add sysfs_change_owner() (Christian Brauner)  [Orabug: 33937964]  
  - sysfs: add sysfs_group{s}_change_owner() (Christian Brauner)  [Orabug: 33937964]  
  - sysfs: add sysfs_link_change_owner() (Christian Brauner)  [Orabug: 33937964]  
  - sysfs: add sysfs_file_change_owner() (Christian Brauner)  [Orabug: 33937964]  
  - kallsyms: add kallsyms_seqs_of_names to list of special symbols (Arnd Bergmann)  [Orabug: 36475636]  
  - kallsyms: Reduce the memory occupied by kallsyms_seqs_of_names[] (Zhen Lei)  [Orabug: 36475636]  
  - kallsyms: Improve the performance of kallsyms_lookup_name() (Saeed Mirzamohammadi)  [Orabug: 36475636]  
  - kallsyms: strip ThinLTO hashes from static functions (Sami Tolvanen)  [Orabug: 36475636]  
  - kallsyms: Skip the name search for empty string (Jiri Olsa)  [Orabug: 36475636]  
  - RDMA/mlx5: Fix port number for counter query in multi-port configuration (Michael Guralnik)  [Orabug: 36545979]  
  - x86/bugs: Replace CONFIG_SPECTRE_BHI_{ON,OFF} with CONFIG_MITIGATION_SPECTRE_BHI (Josh Poimboeuf)  [Orabug: 36584737]  
  - x86/bugs: Remove CONFIG_BHI_MITIGATION_AUTO and spectre_bhi=auto (Josh Poimboeuf)  [Orabug: 36584737]  
  - x86/bugs: Clarify that syscall hardening isn't a BHI mitigation (Josh Poimboeuf)  [Orabug: 36584737]  
  - x86/bugs: Fix BHI handling of RRSBA (Josh Poimboeuf)  [Orabug: 36584737]  
  - x86/bugs: Rename various 'ia32_cap' variables to 'x86_arch_cap_msr' (Ingo Molnar)  [Orabug: 36584737]  
  - x86/bugs: Cache the value of MSR_IA32_ARCH_CAPABILITIES (Josh Poimboeuf)  [Orabug: 36584737]  
  - x86/bugs: Fix BHI documentation (Josh Poimboeuf)  [Orabug: 36584737]  
  - x86/bugs: Fix return type of spectre_bhi_state() (Daniel Sneddon)  [Orabug: 36584737]  
  - x86/bhi: Update BHI mitigation (Alexandre Chartre)  [Orabug: 36584737]  
  - x86/syscall: Don't force use of indirect calls for system calls (Linus Torvalds)  [Orabug: 36584737]  
  - x86/bugs: Change commas to semicolons in 'spectre_v2' sysfs file (Josh Poimboeuf)  [Orabug: 36584737]  
  - uek-rpm: ol7: fix prod build with editbuildid (Stephen Brennan)  [Orabug: 36607867]


author: Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.332.3.el8uek]
changelog:
  - uek: kabi: Enable the size checks and fix broken APIs (Saeed Mirzamohammadi)  [Orabug: 36545483]  
  - uek: kabi: Introduce new APIs to check for size (Saeed Mirzamohammadi)  [Orabug: 36545483]  
  - RDS/IB: Remove incorrect clearing of RDS_IB_CQ_ERR in rds_ib_conn_path_shutdown_final() (Hans Westgaard Ry)  [Orabug: 36606170]  
  - igb: fix __free_irq warnings seen during module unload. (Imran Khan)  [Orabug: 36618478]


author: Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.332.4.el8uek]
changelog:
  - bounds: Use the right number of bits for power-of-two CONFIG_NR_CPUS (Matthew Wilcox (Oracle))   
  - usb: dwc2: host: Fix dereference issue in DDMA completion flow. (Minas Harutyunyan)   
  - Revert "usb: cdc-wdm: close race between read and workqueue" (Greg Kroah-Hartman)   
  - LTS tag: v5.4.274 (Sherry Yang)   
  - x86/cpu: Enable STIBP on AMD if Automatic IBRS is enabled (Kim Phillips)   
  - x86/cpu: Support AMD Automatic IBRS (Kim Phillips)   
  - firmware: meson_sm: fix to avoid potential NULL pointer dereference (Zhang Shurong)   
  - ip_gre: do not report erspan version on GRE interface (Hangbin Liu)   
  - erspan: Check IFLA_GRE_ERSPAN_VER is set. (William Tu)   
  - VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler() (Vasiliy Kovalev)   
  - Bluetooth: btintel: Fixe build regression (Luiz Augusto von Dentz)   
  - x86/alternative: Don't call text_poke() in lazy TLB mode (Juergen Gross)   
  - drm/i915/gt: Reset queue_priority_hint on parking (Chris Wilson)   
  - x86/mm/pat: fix VM_PAT handling in COW mappings (David Hildenbrand)   
  - virtio: reenable config if freezing device failed (David Hildenbrand)   
  - drm/vkms: call drm_atomic_helper_shutdown before drm_dev_put() (Guo Mengqi)   
  - tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc (Thadeu Lima de Souza Cascardo)   
  - netfilter: nf_tables: discard table flag update with pending basechain deletion (Pablo Neira Ayuso)   
  - netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path (Pablo Neira Ayuso)   
  - netfilter: nf_tables: release batch on table validation from abort path (Pablo Neira Ayuso)   
  - netfilter: nf_tables: reject new basechain after table flag update (Pablo Neira Ayuso)   
  - fbmon: prevent division by zero in fb_videomode_from_videomode() (Roman Smirnov)   
  - fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2 (Aleksandr Burakov)   
  - usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined (Colin Ian King)   
  - usb: typec: tcpci: add generic tcpci fallback compatible (Marco Felsch)   
  - tools: iio: replace seekdir() in iio_generic_buffer (Petre Rodan)   
  - ktest: force $buildonly = 1 for 'make_warnings_file' test type (Ricardo B. Marliere)   
  - Input: allocate keycode for Display refresh rate toggle (Gergo Koteles)   
  - block: prevent division by zero in blk_rq_stat_sum() (Roman Smirnov)   
  - Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default" (Daniel Drake)   
  - SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int (Dai Ngo)   
  - drm/amd/display: Fix nanosec stat overflow (Aric Cyr)   
  - media: sta2x11: fix irq handler cast (Arnd Bergmann)   
  - isofs: handle CDs with bad root inode but good Joliet root directory (Alex Henrie)   
  - scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc() (Justin Tee)   
  - sysv: don't call sb_bread() with pointers_lock held (Tetsuo Handa)   
  - Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails (Kunwu Chan)   
  - Bluetooth: btintel: Fix null ptr deref in btintel_read_version (Edward Adam Davis)   
  - btrfs: send: handle path ref underflow in header iterate_inode_ref() (David Sterba)   
  - btrfs: export: handle invalid inode or root reference in btrfs_get_parent() (David Sterba)   
  - btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks() (David Sterba)   
  - tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num() (Samasth Norway Ananda)   
  - ionic: set adminq irq affinity (Shannon Nelson)   
  - arm64: dts: rockchip: fix rk3399 hdmi ports node (Johan Jonker)   
  - arm64: dts: rockchip: fix rk3328 hdmi ports node (Johan Jonker)   
  - panic: Flush kernel log buffer at the end (John Ogness)   
  - VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host() (Harshit Mogalapalli)   
  - wifi: ath9k: fix LNA selection in ath_ant_try_scan() (Dmitry Antipov)   
  - s390/entry: align system call table on 8 bytes (Sumanth Korikkar)   
  - x86/mce: Make sure to grab mce_sysfs_mutex in set_bank() (Borislav Petkov (AMD))   
  - ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone (I Gede Agastya Darma Laksana)   
  - ata: sata_mv: Fix PCI device ID table declaration compilation warning (Arnd Bergmann)   
  - scsi: mylex: Fix sysfs buffer lengths (Arnd Bergmann)   
  - ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit (Arnd Bergmann)   
  - ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw (Stephen Lee)   
  - net: ravb: Always process TX descriptor ring (Paul Barker)   
  - erspan: make sure erspan_base_hdr is present in skb->head (Eric Dumazet)   
  - erspan: Add type I version 0 support. (William Tu)   
  - init: open /initrd.image with O_LARGEFILE (John Sperbeck)   
  - initramfs: switch initramfs unpacking to struct file based APIs (Christoph Hellwig)   
  - fs: add a vfs_fchmod helper (Christoph Hellwig)   
  - fs: add a vfs_fchown helper (Christoph Hellwig)   
  - staging: vc04_services: fix information leak in create_component() (Dan Carpenter)   
  - staging: vc04_services: changen strncpy() to strscpy_pad() (Arnd Bergmann)   
  - i40e: fix vf may be used uninitialized in this function warning (Aleksandr Loktionov)   
  - ipv6: Fix infinite recursion in fib6_dump_done(). (Kuniyuki Iwashima)   
  - selftests: reuseaddr_conflict: add missing new line at the end of the output (Jakub Kicinski)   
  - net: stmmac: fix rx queue priority assignment (Piotr Wejman)   
  - net/sched: act_skbmod: prevent kernel-infoleak (Eric Dumazet)   
  - bpf, sockmap: Prevent lock inversion deadlock in map delete elem (Jakub Sitnicki)   
  - netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() (Ziyang Xuan)   
  - netfilter: nf_tables: flush pending destroy work before exit_net release (Pablo Neira Ayuso)   
  - mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations (Vlastimil Babka)   
  - vfio/platform: Create persistent IRQ handlers (Alex Williamson)   
  - vfio/pci: Create persistent INTx handler (Alex Williamson)   
  - vfio: Introduce interface to flush virqfd inject workqueue (Alex Williamson)   
  - vfio/pci: Lock external INTx masking ops (Alex Williamson)   
  - vfio/pci: Disable auto-enable of exclusive INTx IRQ (Alex Williamson)   
  - netfilter: nf_tables: disallow timeout for anonymous sets (Pablo Neira Ayuso)   
  - Bluetooth: Fix TOCTOU in HCI debugfs implementation (Bastien Nocera)   
  - Bluetooth: hci_event: set the conn encrypted before conn establishes (Hui Wang)   
  - r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d (Heiner Kallweit)   
  - dm integrity: fix out-of-range warning (Arnd Bergmann)   
  - tcp: properly terminate timers for kernel sockets (Eric Dumazet)   
  - ixgbe: avoid sleeping allocation in ixgbe_ipsec_vf_add_sa() (Przemek Kitszel)   
  - nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet (Ryosuke Yasuoka)   
  - USB: core: Fix deadlock in usb_deauthorize_interface() (Alan Stern)   
  - scsi: lpfc: Correct size for wqe for memset() (Muhammad Usama Anjum)   
  - scsi: qla2xxx: Fix command flush on cable pull (Quinn Tran)   
  - usb: udc: remove warning when queue disabled ep (yuan linyu)   
  - usb: dwc2: gadget: LPM flow fix (Minas Harutyunyan)   
  - usb: dwc2: host: Fix ISOC flow in DDMA mode (Minas Harutyunyan)   
  - usb: dwc2: host: Fix hibernation flow (Minas Harutyunyan)   
  - usb: dwc2: host: Fix remote wakeup from hibernation (Minas Harutyunyan)   
  - scsi: core: Fix unremoved procfs host directory regression (Guilherme G. Piccoli)   
  - ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs (Duoming Zhou)   
  - usb: cdc-wdm: close race between read and workqueue (Oliver Neukum)   
  - exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack() (Max Filippov)   
  - wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes (Felix Fietkau)   
  - mm/migrate: set swap entry values of THP tail pages properly. (Zi Yan)   
  - vt: fix memory overlapping when deleting chars in the buffer (Yangxi Xiang)   
  - bounds: support non-power-of-two CONFIG_NR_CPUS (Matthew Wilcox (Oracle))   
  - powerpc: xor_vmx: Add '-mhard-float' to CFLAGS (Nathan Chancellor)   
  - efivarfs: Request at most 512 bytes for variable names (Tim Schumacher)   
  - perf/core: Fix reentry problem in perf_output_read_group() (Yang Jihong)   
  - loop: loop_set_status_from_info() check before assignment (Zhong Jinghua)   
  - loop: Check for overflow while configuring loop (Siddh Raman Pant)   
  - loop: Factor out configuring loop from status (Martijn Coenen)   
  - loop: Refactor loop_set_status() size calculation (Martijn Coenen)   
  - loop: Factor out setting loop device size (Martijn Coenen)   
  - loop: Remove sector_t truncation checks (Martijn Coenen)   
  - loop: Call loop_config_discard() only after new config is applied (Martijn Coenen)   
  - Revert "loop: Check for overflow while configuring loop" (Genjian Zhang)   
  - btrfs: allocate btrfs_ioctl_defrag_range_args on stack (Goldwyn Rodrigues)   
  - printk: Update @console_may_schedule in console_trylock_spinning() (John Ogness)   
  - xen/events: close evtchn after mapping cleanup (Maximilian Heyne)   
  - vt: fix unicode buffer corruption when deleting characters (Nicolas Pitre)   
  - tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled (Sherry Sun)   
  - usb: port: Don't try to peer unused USB ports based on location (Mathias Nyman)   
  - usb: gadget: ncm: Fix handling of zero block length packets (Krishna Kurapati)   
  - USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command (Alan Stern)   
  - ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform (Kailang Yang)   
  - xfrm: Avoid clang fortify warning in copy_to_user_tmpl() (Nathan Chancellor)   
  - netfilter: nf_tables: reject constant set with timeout (Pablo Neira Ayuso)   
  - netfilter: nf_tables: disallow anonymous set with timeout flag (Pablo Neira Ayuso)   
  - netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout (Pablo Neira Ayuso)   
  - comedi: comedi_test: Prevent timers rescheduling during deletion (Ian Abbott)   
  - dm snapshot: fix lockup in dm_exception_table_exit (Mikulas Patocka)   
  - x86/CPU/AMD: Update the Zenbleed microcode revisions (Borislav Petkov (AMD))   
  - nilfs2: prevent kernel bug at submit_bh_wbc() (Ryusuke Konishi)   
  - nilfs2: use a more common logging style (Joe Perches)   
  - nilfs2: fix failure to detect DAT corruption in btree and direct mappings (Ryusuke Konishi)   
  - memtest: use {READ,WRITE}_ONCE in memory scanning (Qiang Zhang)   
  - drm/vc4: hdmi: do not return negative values from .get_modes() (Jani Nikula)   
  - drm/imx/ipuv3: do not return negative values from .get_modes() (Jani Nikula)   
  - drm/exynos: do not return negative values from .get_modes() (Jani Nikula)   
  - s390/zcrypt: fix reference counting on zcrypt card objects (Harald Freudenberger)   
  - soc: fsl: qbman: Use raw spinlock for cgr_lock (Sean Anderson)   
  - soc: fsl: qbman: Add CGR update function (Sean Anderson)   
  - soc: fsl: qbman: Add helper for sanity checking cgr ops (Sean Anderson)   
  - soc: fsl: qbman: Always disable interrupts when taking cgr_lock (Sean Anderson)   
  - vfio/platform: Disable virqfds on cleanup (Alex Williamson)   
  - kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1 (Nathan Chancellor)   
  - speakup: Fix 8bit characters from direct synth (Samuel Thibault)   
  - slimbus: core: Remove usage of the deprecated ida_simple_xx() API (Christophe JAILLET)   
  - nvmem: meson-efuse: fix function pointer type mismatch (Jerome Brunet)   
  - firmware: meson_sm: Rework driver as a proper platform driver (Carlo Caione)   
  - hwmon: (amc6821) add of_match table (Josua Mayer)   
  - dm-raid: fix lockdep waring in "pers->hot_add_disk" (Yu Kuai)   
  - PCI/PM: Drain runtime-idle callbacks before driver removal (Rafael J. Wysocki)   
  - PCI: Drop pci_device_remove() test of pci_dev->driver (Uwe Kleine-König)   
  - btrfs: fix off-by-one chunk length calculation at contains_pending_extent() (Filipe Manana)   
  - fuse: don't unhash root (Miklos Szeredi)   
  - mmc: tmio: avoid concurrent runs of mmc_request_done() (Wolfram Sang)   
  - PM: sleep: wakeirq: fix wake irq warning in system suspend (Qingliang Li)   
  - USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M (Toru Katagiri)   
  - USB: serial: option: add MeiG Smart SLM320 product (Aurélien Jacobs)   
  - USB: serial: cp210x: add ID for MGP Instruments PDS100 (Christian Häggström)   
  - USB: serial: add device ID for VeriFone adapter (Cameron Williams)   
  - USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB (Daniel Vogelbacher)   
  - powerpc/fsl: Fix mfpmr build errors with newer binutils (Michael Ellerman)   
  - clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays (Gabor Juhos)   
  - clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays (Gabor Juhos)   
  - clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays (Gabor Juhos)   
  - PM: suspend: Set mem_sleep_current during kernel command line setup (Maulik Shah)   
  - parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds (Guenter Roeck)   
  - parisc: Fix csum_ipv6_magic on 64-bit systems (Guenter Roeck)   
  - parisc: Fix csum_ipv6_magic on 32-bit systems (Guenter Roeck)   
  - parisc: Fix ip_fast_csum (Guenter Roeck)   
  - parisc: Do not hardcode registers in checksum functions (Helge Deller)   
  - mtd: rawnand: meson: fix scrambling mode value in command macro (Arseniy Krasnov)   
  - ubi: correct the calculation of fastmap size (Zhang Yi)   
  - ubi: Check for too small LEB size in VTBL code (Richard Weinberger)   
  - ubifs: Set page uptodate in the correct place (Matthew Wilcox (Oracle))   
  - fat: fix uninitialized field in nostale filehandles (Jan Kara)   
  - ext4: correct best extent lstart adjustment logic (Baokun Li)   
  - selftests/mqueue: Set timeout to 180 seconds (SeongJae Park)   
  - crypto: qat - resolve race condition during AER recovery (Damian Muszynski)   
  - crypto: qat - fix double free during reset (Svyatoslav Pankratov)   
  - sparc: vDSO: fix return value of __setup handler (Randy Dunlap)   
  - sparc64: NMI watchdog: fix return value of __setup handler (Randy Dunlap)   
  - KVM: Always flush async #PF workqueue when vCPU is being destroyed (Sean Christopherson)   
  - media: xc4000: Fix atomicity violation in xc4000_get_frequency (Gui-Dong Han)   
  - arm: dts: marvell: Fix maxium->maxim typo in brownstone dts (Duje Mihanović)   
  - ARM: dts: mmp2-brownstone: Don't redeclare phandle references (Lubomir Rintel)   
  - smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity() (Roberto Sassu)   
  - smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr() (Roberto Sassu)   
  - clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd (Amit Pundir)   
  - media: staging: ipu3-imgu: Set fields before media_entity_pads_init() (Hidenori Kobayashi)   
  - wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach (Zheng Wang)   
  - timers: Use del_timer_sync() even on UP (Thomas Gleixner)   
  - timers: Update kernel-doc for various functions (Thomas Gleixner)   
  - amdkfd: use calloc instead of kzalloc to avoid integer overflow (Dave Airlie)


author: Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.332.5.1.el8uek]
changelog:
  - net/rds: mod reconnect delay on sendmsg() (Sharath Srinivasan)  [Orabug: 36685235]  
  - net/rds: Extend exponential backoff for rds reconnects (Sharath Srinivasan)  [Orabug: 36685235]


author: Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.333.1.el8uek]
changelog:
  - net/rds: Get RDS statistics for each possible CPU (Anand Khoje)  [Orabug: 35830449]  
  - net/rds: mod reconnect delay on sendmsg() (Sharath Srinivasan)  [Orabug: 36307093]  
  - net/rds: Extend exponential backoff for rds reconnects (Sharath Srinivasan)  [Orabug: 36307093]  
  - RDMA/cm: Use RCU synchronization mechanism to protect cm_id_private xa_load() (Danit Goldberg)  [Orabug: 36375215]  
  - uek-rpm: Enable FUNCTION_GRAPH_RETVAL in UEK6 (Jianfeng Wang)  [Orabug: 36460675]  
  - fgraph: Add declaration of "struct fgraph_ret_regs" (Steven Rostedt (Google))  [Orabug: 36460675]  
  - x86/ftrace: Enable HAVE_FUNCTION_GRAPH_RETVAL (Donglin Peng)  [Orabug: 36460675]  
  - arm64: ftrace: Enable HAVE_FUNCTION_GRAPH_RETVAL (Donglin Peng)  [Orabug: 36460675]  
  - tracing: Add documentation for funcgraph-retval and funcgraph-retval-hex (Donglin Peng)  [Orabug: 36460675]  
  - function_graph: Support recording and printing the return value of function (Donglin Peng)  [Orabug: 36460675]  
  - fgraph: Make overruns 4 bytes in graph stack structure (Steven Rostedt (VMware))  [Orabug: 36460675]  
  - block: fix io util% for exadata disk with 1 hw queue (Gulam Mohamed)  [Orabug: 36511453]  
  - Revert "Use inflight IO in io acct of high latency devices" (Gulam Mohamed)  [Orabug: 36511453]  
  - kprobe/ftrace: bail out if ftrace was killed (Stephen Brennan)  [Orabug: 36572635]  
  - genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline (Dongli Zhang)  [Orabug: 36592398]  
  - x86/returnthunk: Allow different return thunks (Peter Zijlstra)  [Orabug: 36628382]  
  - tcp: Fix data-races around sysctl_tcp_fastopen_blackhole_timeout. (Kuniyuki Iwashima)  [Orabug: 36637454]  
  - tcp: disable TFO blackhole logic by default (Wei Wang)  [Orabug: 36637454]


author: Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.333.2.el8uek]
changelog:
  - slub: use count_partial_free_approx() in slab_out_of_memory() (Jianfeng Wang)  [Orabug: 36655469]  
  - slub: introduce count_partial_free_approx() (Jianfeng Wang)  [Orabug: 36655469]


author: Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.333.3.el8uek]
changelog:
  - LTS tag: v5.4.277 (Sherry Yang)   
  - docs: kernel_include.py: Cope with docutils 0.21 (Akira Yokosawa)   
  - serial: kgdboc: Fix NMI-safety problems from keyboard reset code (Daniel Thompson)   
  - usb: typec: ucsi: displayport: Fix potential deadlock (Heikki Krogerus)   
  - drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper() (Srinivasan Shanmugam)   
  - arm64: dts: qcom: Fix 'interrupt-map' parent address cells (Rob Herring)   
  - firmware: arm_scmi: Harden accesses to the reset domains (Cristian Marussi)   
  - smb: client: fix potential OOBs in smb2_parse_contexts() (Paulo Alcantara)   
  - net: bcmgenet: synchronize UMAC_CMD access (Doug Berger)   
  - net: bcmgenet: synchronize use of bcmgenet_set_rx_mode() (Doug Berger)   
  - net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access (Doug Berger)   
  - net: bcmgenet: keep MAC in reset until PHY is up (Doug Berger)   
  - Revert "net: bcmgenet: use RGMII loopback for MAC reset" (Doug Berger)   
  - ext4: fix bug_on in __es_tree_search (Baokun Li)   
  - pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin() (Sergey Shtylyov)   
  - LTS tag: v5.4.276 (Sherry Yang)   
  - pinctrl: mediatek: paris: Fix PIN_CONFIG_INPUT_SCHMITT_ENABLE readback (Chen-Yu Tsai)   
  - pinctrl: mediatek: remove set but not used variable 'e' (YueHaibing)   
  - pinctrl: mediatek: Fix some off by one bugs (Dan Carpenter)   
  - pinctrl: mediatek: Fix fallback behavior for bias_set_combo (Hsin-Yi Wang)   
  - regulator: core: fix debugfs creation regression (Johan Hovold)   
  - net: fix out-of-bounds access in ops_init (Thadeu Lima de Souza Cascardo)   
  - drm/vmwgfx: Fix invalid reads in fence signaled events (Zack Rusin)   
  - dyndbg: fix old BUG_ON in >control parser (Jim Cromie)   
  - tipc: fix UAF in error path (Paolo Abeni)   
  - usb: gadget: f_fs: Fix a race condition when processing setup packets. (Chris Wulff)   
  - usb: gadget: composite: fix OS descriptors w_value logic (Peter Korsgaard)   
  - firewire: nosy: ensure user_length is taken into account when fetching packet contents (Thanassis Avgerinos)   
  - net: qede: use return from qede_parse_flow_attr() for flower (Asbjørn Sloth Tønnesen)   
  - net: qede: sanitize 'rc' in qede_add_tc_flower_fltr() (Asbjørn Sloth Tønnesen)   
  - ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() (Eric Dumazet)   
  - net: bridge: fix corrupted ethernet header on multicast-to-unicast (Felix Fietkau)   
  - phonet: fix rtm_phonet_notify() skb allocation (Eric Dumazet)   
  - rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation (Roded Zats)   
  - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (Duoming Zhou)   
  - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (Duoming Zhou)   
  - tcp: Use refcount_inc_not_zero() in tcp_twsk_unique(). (Kuniyuki Iwashima)   
  - tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets (Eric Dumazet)   
  - xfrm: Preserve vlan tags for transport mode software GRO (Paul Davey)   
  - pinctrl: mediatek: Fix fallback call path (Hsin-Yi Wang)   
  - net:usb:qmi_wwan: support Rolling modules (Vanillan Wang)   
  - fs/9p: drop inodes immediately on non-.L too (Joakim Sindholt)   
  - clk: Don't hold prepare_lock when calling kref_put() (Stephen Boyd)   
  - gpio: crystalcove: Use -ENOTSUPP consistently (Andy Shevchenko)   
  - gpio: wcove: Use -ENOTSUPP consistently (Andy Shevchenko)   
  - 9p: explicitly deny setlease attempts (Jeff Layton)   
  - fs/9p: translate O_TRUNC into OTRUNC (Joakim Sindholt)   
  - fs/9p: only translate RWX permissions for plain 9P2000 (Joakim Sindholt)   
  - selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior (John Stultz)   
  - MIPS: scall: Save thread_info.syscall unconditionally on entry (Jiaxun Yang)   
  - gpu: host1x: Do not setup DMA for virtual devices (Thierry Reding)   
  - scsi: target: Fix SELinux error when systemd-modules loads the target module (Maurizio Lombardi)   
  - btrfs: always clear PERTRANS metadata during commit (Boris Burkov)   
  - btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve (Boris Burkov)   
  - tools/power turbostat: Fix Bzy_MHz documentation typo (Peng Liu)   
  - tools/power turbostat: Fix added raw MSR output (Doug Smythies)   
  - firewire: ohci: mask bus reset interrupts between ISR and bottom half (Adam Goldman)   
  - ata: sata_gemini: Check clk_enable() result (Chen Ni)   
  - net: bcmgenet: Reset RBUF on first open (Phil Elwell)   
  - ALSA: line6: Zero-initialize message buffers (Takashi Iwai)   
  - scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload (Saurav Kashyap)   
  - net: mark racy access on sk->sk_rcvbuf (linke li)   
  - wifi: cfg80211: fix rdev_dump_mpp() arguments order (Igor Artemiev)   
  - wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc (Jeff Johnson)   
  - gfs2: Fix invalid metadata access in punch_hole (Andrew Price)   
  - scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic (Justin Tee)   
  - clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change (Jernej Skrabec)   
  - tipc: fix a possible memleak in tipc_buf_append (Xin Long)   
  - net: bridge: fix multicast-to-unicast with fraglist GSO (Felix Fietkau)   
  - net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341 (Marek Behún)   
  - net: dsa: mv88e6xxx: Add number of MACs in the ATU (Andrew Lunn)   
  - net: qede: use return from qede_parse_flow_attr() for flow_spec (Asbjørn Sloth Tønnesen)   
  - net l2tp: drop flow hash on forward (David Bauer)   
  - nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment(). (Kuniyuki Iwashima)   
  - bna: ensure the copied buf is NUL terminated (Bui Quang Minh)   
  - s390/mm: Fix clearing storage keys for huge pages (Claudio Imbrenda)   
  - s390/mm: Fix storage key clearing for guest huge pages (Claudio Imbrenda)   
  - pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map() (Zeng Heng)   
  - power: rt9455: hide unused rt9455_boost_voltage_values (Arnd Bergmann)   
  - nfs: Handle error of rpc_proc_register() in nfs_net_init(). (Kuniyuki Iwashima)   
  - nfs: make the rpc_stat per net namespace (Josef Bacik)   
  - nfs: expose /proc/net/sunrpc/nfs in net namespaces (Josef Bacik)   
  - sunrpc: add a struct rpc_stats arg to rpc_create_args (Josef Bacik)   
  - pinctrl: mediatek: paris: Rework support for PIN_CONFIG_{INPUT,OUTPUT}_ENABLE (Chen-Yu Tsai)   
  - pinctrl: mediatek: paris: Rework mtk_pinconf_{get,set} switch/case logic (Chen-Yu Tsai)   
  - pinctrl: mediatek: paris: Fix PIN_CONFIG_BIAS_* readback (Chen-Yu Tsai)   
  - pinctrl: mediatek: remove shadow variable declaration (Light Hsieh)   
  - pinctrl: mediatek: Backward compatible to previous Mediatek's bias-pull usage (Light Hsieh)   
  - pinctrl: mediatek: Refine mtk_pinconf_get() (Light Hsieh)   
  - pinctrl: mediatek: Refine mtk_pinconf_get() and mtk_pinconf_set() (Light Hsieh)   
  - pinctrl: mediatek: Supporting driving setting without mapping current to register value (Light Hsieh)   
  - pinctrl: mediatek: Check gpio pin number and use binary search in mtk_hw_pin_field_lookup() (Light Hsieh)   
  - pinctrl: core: delete incorrect free in pinctrl_enable() (Dan Carpenter)   
  - wifi: nl80211: don't free NULL coalescing rule (Johannes Berg)   
  - dmaengine: Revert "dmaengine: pl330: issue_pending waits until WFP state" (Vinod Koul)   
  - dmaengine: pl330: issue_pending waits until WFP state (Bumyong Lee)   
  - LTS tag: v5.4.275 (Sherry Yang)   
  - serial: core: fix kernel-doc for uart_port_unlock_irqrestore() (Randy Dunlap)   
  - udp: preserve the connected status if only UDP cmsg (Yick Xie)   
  - dm: limit the number of targets and parameter size area (Mikulas Patocka)   
  - HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up (Nam Cao)   
  - i2c: smbus: fix NULL function pointer dereference (Wolfram Sang)   
  - idma64: Don't try to serve interrupts when device is powered off (Andy Shevchenko)   
  - dmaengine: owl: fix register access functions (Arnd Bergmann)   
  - tcp: Fix NEW_SYN_RECV handling in inet_twsk_purge() (Eric Dumazet)   
  - tcp: Clean up kernel listener's reqsk in inet_twsk_purge() (Kuniyuki Iwashima)   
  - mtd: diskonchip: work around ubsan link failure (Arnd Bergmann)   
  - stackdepot: respect __GFP_NOLOCKDEP allocation flag (Andrey Ryabinin)   
  - net: b44: set pause params only when interface is up (Peter Münster)   
  - ethernet: Add helper for assigning packet type when dest address does not match device address (Rahul Rameshbabu)   
  - irqchip/gic-v3-its: Prevent double free on error (Guanrui Huang)   
  - drm/amdgpu: Fix leak when GPU memory allocation fails (Mukul Joshi)   
  - arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma (Iskander Amara)   
  - btrfs: fix information leak in btrfs_ioctl_logical_to_ino() (Johannes Thumshirn)   
  - Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853 (WangYuli)   
  - Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old() (Nathan Chancellor)   
  - tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together (Robin H. Johnson)   
  - tracing: Show size of requested perf buffer (Robin H. Johnson)   
  - drm/amdgpu: validate the parameters of bo mapping operations more clearly (xinhui pan)   
  - amdgpu: validate offset_in_bo of drm_amdgpu_gem_va (Chia-I Wu)   
  - drm/amdgpu: restrict bo mapping within gpu address limits (Rajneesh Bhardwaj)   
  - serial: mxs-auart: add spinlock around changing cts state (Emil Kronborg)   
  - serial: core: Provide port lock wrappers (Thomas Gleixner)   
  - af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc(). (Kuniyuki Iwashima)   
  - iavf: Fix TC config comparison with existing adapter TC config (Sudheer Mogilappagari)   
  - i40e: Do not use WQ_MEM_RECLAIM flag for workqueue (Sindhu Devale)   
  - mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work (Ido Schimmel)   
  - mlxsw: spectrum_acl_tcam: Fix incorrect list API usage (Ido Schimmel)   
  - mlxsw: spectrum_acl_tcam: Fix warning during rehash (Ido Schimmel)   
  - mlxsw: spectrum_acl_tcam: Fix memory leak during rehash (Ido Schimmel)   
  - mlxsw: spectrum_acl_tcam: Rate limit error message (Ido Schimmel)   
  - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash (Ido Schimmel)   
  - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update (Ido Schimmel)   
  - mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work (Ido Schimmel)   
  - net: openvswitch: Fix Use-After-Free in ovs_ct_exit (Hyunwoo Kim)   
  - ipvs: Fix checksumming on GSO of SCTP packets (Ismael Luceno)   
  - net: gtp: Fix Use-After-Free in gtp_dellink (Hyunwoo Kim)   
  - net: usb: ax88179_178a: stop lying about skb->truesize (Eric Dumazet)   
  - NFC: trf7970a: disable all regulators on removal (Paul Geurts)   
  - mlxsw: core: Unregister EMAD trap using FORWARD action (Ido Schimmel)   
  - vxlan: drop packets from invalid src-address (David Bauer)   
  - ARC: [plat-hsdk]: Remove misplaced interrupt-cells property (Alexey Brodkin)   
  - arm64: dts: mediatek: mt2712: fix validation errors (Rafał Miłecki)   
  - arm64: dts: mt2712: add ethernet device node (Biao Huang)   
  - arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block (Rafał Miłecki)   
  - arm64: dts: mediatek: mt7622: fix ethernet controller "compatible" (Rafał Miłecki)   
  - arm64: dts: mediatek: mt7622: fix IR nodename (Rafał Miłecki)   
  - arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma (Quentin Schulz)   
  - arm64: dts: rockchip: fix alphabetical ordering RK3399 puma (Iskander Amara)   
  - KVM: async_pf: Cleanup kvm_setup_async_pf() (Vitaly Kuznetsov)   
  - nilfs2: fix OOB in nilfs_set_de_type (Jeongjun Park)   
  - nouveau: fix instmem race condition around ptr stores (Dave Airlie)   
  - fs: sysfs: Fix reference leak in sysfs_break_active_protection() (Alan Stern)   
  - speakup: Avoid crash on very long word (Samuel Thibault)   
  - usb: Disable USB3 LPM at shutdown (Kai-Heng Feng)   
  - USB: serial: option: add Telit FN920C04 rmnet compositions (Daniele Palmas)   
  - USB: serial: option: add Rolling RW101-GL and RW135-GL support (Vanillan Wang)   
  - USB: serial: option: support Quectel EM060K sub-models (Jerry Meng)   
  - USB: serial: option: add Lonsung U8300/U9300 product (Coia Prant)   
  - USB: serial: option: add support for Fibocom FM650/FG650 (Chuanhong Guo)   
  - USB: serial: option: add Fibocom FM135-GL variants (bolan wang)   
  - serial/pmac_zilog: Remove flawed mitigation for rx irq flood (Finn Thain)   
  - comedi: vmk80xx: fix incomplete endpoint checking (Nikita Zhandarovich)   
  - binder: check offset alignment in binder_get_object() (Carlos Llamas)   
  - x86/cpufeatures: Fix dependencies for GFNI, VAES, and VPCLMULQDQ (Eric Biggers)   
  - clk: Get runtime PM before walking tree during disable_unused (Stephen Boyd)   
  - clk: Initialize struct clk_core kref earlier (Stephen Boyd)   
  - clk: Print an info line before disabling unused clocks (Konrad Dybcio)   
  - clk: remove extra empty line (Claudiu Beznea)   
  - clk: Mark 'all_lists' as const (Stephen Boyd)   
  - clk: Remove prepare_lock hold assertion in __clk_release() (Stephen Boyd)   
  - drm: nv04: Fix out of bounds access (Mikhail Kobuk)   
  - RDMA/rxe: Fix the problem "mutex_destroy missing" (Yanjun.Zhu)   
  - tun: limit printing rate when illegal packet received by tun dev (Lei Chen)   
  - netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (Ziyang Xuan)   
  - kprobes: Fix possible use-after-free issue on kprobe registration (Zheng Yejian)   
  - selftests/ftrace: Limit length in subsystem-enable tests (Yuanhe Shu)   
  - btrfs: record delayed inode root in transaction (Boris Burkov)   
  - x86/apic: Force native_apic_mem_read() to use the MOV instruction (Adam Dunlap)   
  - selftests: timers: Fix abs() warning in posix_timers test (John Stultz)   
  - vhost: Add smp_rmb() in vhost_vq_avail_empty() (Gavin Shan)   
  - drm/client: Fully protect modes[] with dev->mode_config.mutex (Ville Syrjälä)   
  - btrfs: qgroup: correctly model root qgroup rsv in convert (Boris Burkov)   
  - net: ena: Fix potential sign extension issue (David Arinzon)   
  - af_unix: Fix garbage collector racing against connect() (Michal Luczaj)   
  - af_unix: Do not use atomic ops for unix_sk(sk)->inflight. (Kuniyuki Iwashima)   
  - net/mlx5: Properly link new fs rules into the tree (Cosmin Ratiu)   
  - ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr (Jiri Benc)   
  - ipv4/route: avoid unused-but-set-variable warning (Arnd Bergmann)   
  - ipv6: fib: hide unused 'pn' variable (Arnd Bergmann)   
  - geneve: fix header validation in geneve[6]_xmit_skb (Eric Dumazet)   
  - u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file (Petr Tesarik)   
  - net: openvswitch: fix unwanted error log on timeout policy probing (Ilya Maximets)   
  - nouveau: fix function cast warning (Arnd Bergmann)   
  - Bluetooth: Fix memory leak in hci_req_sync_complete() (Dmitry Antipov)   
  - batman-adv: Avoid infinite loop trying to resize local TT (Sven Eckelmann)


