# changelog

author: Brian Maly <brian.maly@oracle.com> [5.15.0-300.161.12.el9uek]
changelog:
  - scsi: mpt3sas: Avoid possible run-time warning with long manufacturer strings (Kees Cook)  [Orabug: 36892249]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-303.168.2.el9uek]
changelog:
  - Revert "rds: ib: Make sure receives are posted before connection is up" (Gerd Rausch)  [Orabug: 37244182]
  - uek-rpm/ol9/config-mips64: Align MIPS64 Crypto configs with x86_64 (Vijay Kumar)  [Orabug: 37218693]
  - rds: ib: Avoid reuse of IB MRs when cleaning is in progress (Håkon Bugge)  [Orabug: 37206836]
  - spec: Set CONFIG_CRYPTO_FIPS_NAME for standard & embedded kernels (Jonah Palmer)  [Orabug: 37137136]
  - spec: Set CONFIG_CRYPTO_FIPS_NAME for container kernels (Jonah Palmer)  [Orabug: 37137136]
  - spec: Add UEK release macros for UEK7 (Jonah Palmer)  [Orabug: 37137136]
  - uek-rpm: Set CONFIG_CRYPTO_FIPS_NAME for ol9 Pensando embedded kernels (Jonah Palmer)  [Orabug: 37137136]
  - uek-rpm: Set CONFIG_CRYPTO_FIPS_NAME for ol9 T93 embedded kernels (Jonah Palmer)  [Orabug: 37137136]
  - uek-rpm: Set CONFIG_CRYPTO_FIPS_NAME for ol9 MIPS64 embedded kernels (Jonah Palmer)  [Orabug: 37137136]
  - uek-rpm: Set CONFIG_CRYPTO_FIPS_NAME for ol8 Bluefield 3 smartnic embedded kernels (Jonah Palmer)  [Orabug: 37137136]
  - uek-rpm: Set CONFIG_CRYPTO_FIPS_NAME for ol8/ol9 standard kernels (Jonah Palmer)  [Orabug: 37137136]
  - uek-rpm: Set CONFIG_CRYPTO_FIPS_NAME for ol8/ol9 container kernels (Jonah Palmer)  [Orabug: 37137136]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-303.168.3.el9uek]
changelog:
  - ACPI: CPPC: Make rmw_lock a raw_spin_lock (Pierre Gondois) [Orabug: 37268714] {CVE-2024-50249}
  - net: usb: usbnet: fix name regression (Oliver Neukum)
  - mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow (Matthieu Baerts (NGI0))
  - parport: Proper fix for array out-of-bounds access (Takashi Iwai) [Orabug: 37227435] {CVE-2024-50074}
  - netfilter: xtables: fix typo causing some targets not to load on IPv6 (Pablo Neira Ayuso)
  - block, bfq: fix procress reference leakage for bfqq in merge chain (Yu Kuai)
  - ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_init_flow() (Ido Schimmel) [Orabug: 37304697] {CVE-2024-53042}
  - usb: dwc3: core: Fix system suspend on TI AM62 platforms (Roger Quadros)
  - Revert "driver core: Fix uevent_show() vs driver detach race" (Greg Kroah-Hartman)
  - jfs: Fix sanity check in dbMount (Dave Kleikamp)
  - octeontx2-af: Fix potential integer overflows on integer shifts (Colin Ian King)
  - gtp: allow -1 to be specified as file description from userspace (Pablo Neira Ayuso)
  - scsi: lpfc: Revise lpfc_prep_embed_io routine with proper endian macro usages (Justin Tee)  [Orabug: 37070103]  {CVE-2024-43816}
  - blk-cgroup: Properly propagate the iostat update up the hierarchy (Waiman Long)  [Orabug: 37264361]
  - blk-cgroup: fix list corruption from reorder of WRITE ->lqueued (Ming Lei)  [Orabug: 37264361] {CVE-2024-38384}
  - blk-cgroup: fix list corruption from resetting io stat (Ming Lei)  [Orabug: 37264361] {CVE-2024-38663}
  - blk-cgroup: Flush stats before releasing blkcg_gq (Ming Lei)  [Orabug: 37264361]
  - blk-cgroup: Reinit blkg_iostat_set after clearing in blkcg_reset_stats() (Waiman Long)  [Orabug: 37264361]
  - blk-cgroup: don't update io stat for root cgroup (Ming Lei)  [Orabug: 37264361]
  - blk-cgroup: Optimize blkcg_rstat_flush() (Waiman Long)  [Orabug: 37264361]
  - blk-cgroup: Return -ENOMEM directly in blkcg_css_alloc() error path (Waiman Long)  [Orabug: 37264361]
  - vfio/iommu_type1: replace kfree with kvfree (Jiacheng Shi)  [Orabug: 37263362]
  - i2c: i801: Add support for Intel Birch Stream SoC (Jarkko Nikula)  [Orabug: 37249533]
  - nvme: fix deadlock between reset and scan (Bitao Hu)  [Orabug: 37244604]
  - virt: sevguest: Add TSM_REPORTS support for SNP_GET_EXT_REPORT (Dan Williams)  [Orabug: 37070016]
  - virt: sevguest: Prep for kernel internal get_ext_report() (Dan Williams)  [Orabug: 37070016]
  - configfs-tsm: Introduce a shared ABI for attestation reports (Dan Williams)  [Orabug: 37070016]
  - virt: coco: Add a coco/Makefile and coco/Kconfig (Dan Williams)  [Orabug: 37070016]
  - virt: sevguest: Fix passing a stack buffer as a scatterlist target (Dan Williams)  [Orabug: 37070016]
  - x86/sev: Change snp_guest_issue_request()'s fw_err argument (Dionna Glaze)  [Orabug: 37070016]
  - crypto: ccp - Name -1 return value as SEV_RET_NO_FW_CALL (Peter Gonda)  [Orabug: 37070016]
  - virt/coco/sev-guest: Double-buffer messages (Dionna Glaze)  [Orabug: 37070016]
  - virt/coco/sev-guest: Add throttling awareness (Dionna Glaze)  [Orabug: 37070016]
  - virt/coco/sev-guest: Convert the sw_exit_info_2 checking to a switch-case (Borislav Petkov (AMD))  [Orabug: 37070016]
  - virt/coco/sev-guest: Do some code style cleanups (Borislav Petkov (AMD))  [Orabug: 37070016]
  - virt/coco/sev-guest: Carve out the request issuing logic into a helper (Borislav Petkov (AMD))  [Orabug: 37070016]
  - virt/coco/sev-guest: Remove the disable_vmpck label in handle_guest_request() (Borislav Petkov (AMD))  [Orabug: 37070016]
  - virt/coco/sev-guest: Simplify extended guest request handling (Borislav Petkov (AMD))  [Orabug: 37070016]
  - virt/coco/sev-guest: Check SEV_SNP attribute at probe time (Borislav Petkov (AMD))  [Orabug: 37070016]
  - x86/sev: Mark snp_abort() noreturn (Borislav Petkov)  [Orabug: 37070016]
  - kbuild: Drop -Wdeclaration-after-statement (Peter Zijlstra)  [Orabug: 37070016]
  - apparmor: Free up __cleanup() name (Peter Zijlstra)  [Orabug: 37070016]
  - fwctl: Expand adaption of code for UEK7 (Liam Merwick)  [Orabug: 37070016]
  - mm/slab: Add __free() support for kvfree (Dan Williams)  [Orabug: 37070016]
  - mm: move kvmalloc-related functions to slab.h (Matthew Wilcox (Oracle))  [Orabug: 37070016]
  - x86/head/64: Switch to KERNEL_CS as soon as new GDT is installed (Tom Lendacky)  [Orabug: 37070016]
  - iommu/amd: Do not identity map v2 capable device when snp is enabled (Vasant Hegde)  [Orabug: 37070016]
  - virt: sevguest: Add CONFIG_CRYPTO dependency (Arnd Bergmann)  [Orabug: 37070016]
  - virt/sev-guest: Remove unnecessary free in init_crypto() (Rafael Mendonca)  [Orabug: 37070016]
  - virt/sev-guest: Add a MODULE_ALIAS (Cole Robinson)  [Orabug: 37070016]
  - virt/sev-guest: Return -EIO if certificate buffer is not large enough (Tom Lendacky)  [Orabug: 37070016]
  - virt/sev-guest: Prevent IV reuse in the SNP guest driver (Peter Gonda)  [Orabug: 37070016]
  - x86/compressed/64: Add identity mappings for setup_data entries (Michael Roth)  [Orabug: 37070016]
  - x86/sev: Do not try to parse for the CC blob on non-AMD hardware (Borislav Petkov (AMD))  [Orabug: 37070016]
  - x86/sev: Use the GHCB protocol when available for SNP CPUID requests (Tom Lendacky)  [Orabug: 37070016]
  - x86/boot: Fix the setup data types max limit (Borislav Petkov)  [Orabug: 37070016]
  - x86/sev: Don't use cc_platform_has() for early SEV-SNP calls (Tom Lendacky)  [Orabug: 37070016]
  - x86/sev: Fix calculation of end address based on number of pages (Tom Lendacky)  [Orabug: 37070016]
  - x86/sev: Fix kernel crash due to late update to read-only ghcb_version (Ashwin Dayanand Kamat)  [Orabug: 37070016]
  - x86/sev: Add SEV-SNP guest feature negotiation support (Nikunj A Dadhania)  [Orabug: 37070016]
  - Revert "x86/sev: Expose sev_es_ghcb_hv_call() for use by HyperV" (Borislav Petkov)  [Orabug: 37070016]
  - x86/boot: Don't propagate uninitialized boot_params->cc_blob_address (Michael Roth)  [Orabug: 37070016]
  - KVM: SVM: Only dump VMSA to klog at KERN_DEBUG level (Peter Gonda)  [Orabug: 37070016]
  - KVM: SVM: Dump Virtual Machine Save Area (VMSA) to klog (Jarkko Sakkinen)  [Orabug: 37070016]
  - KVM: SVM: Exit to userspace on ENOMEM/EFAULT GHCB errors (Sean Christopherson)  [Orabug: 37070016]
  - iommu/amd: Add support for AVIC when SNP is enabled (Suravee Suthikulpanit)  [Orabug: 37070016]
  - iommu/amd: Do not support IOMMUv2 APIs when SNP is enabled (Suravee Suthikulpanit)  [Orabug: 37070016]
  - iommu/amd: Do not support IOMMU_DOMAIN_IDENTITY after SNP is enabled (Suravee Suthikulpanit)  [Orabug: 37070016]
  - iommu/amd: Set translation valid bit only when IO page tables are in use (Suravee Suthikulpanit)  [Orabug: 37070016]
  - iommu/amd: Introduce function to check and enable SNP (Brijesh Singh)  [Orabug: 37070016]
  - iommu/amd: Globally detect SNP support (Suravee Suthikulpanit)  [Orabug: 37070016]
  - iommu/amd: Process all IVHDs before enabling IOMMU features (Suravee Suthikulpanit)  [Orabug: 37070016]
  - iommu/amd: Introduce global variable for storing common EFR and EFR2 (Suravee Suthikulpanit)  [Orabug: 37070016]
  - iommu/amd: Introduce Support for Extended Feature 2 Register (Suravee Suthikulpanit)  [Orabug: 37070016]
  - x86/sev: Remove duplicated assignment to variable info (Colin Ian King)  [Orabug: 37070016]
  - x86/sev: Fix address space sparse warning (Borislav Petkov)  [Orabug: 37070016]
  - x86/sev: Get the AP jump table address from secrets page (Brijesh Singh)  [Orabug: 37070016]
  - x86/sev: Add missing __init annotations to SEV init routines (Michael Roth)  [Orabug: 37070016]
  - crypto: ccp - Log when resetting PSP SEV state (Peter Gonda)  [Orabug: 37070016]
  - virt: sev-guest: Pass the appropriate argument type to iounmap() (Tom Lendacky)  [Orabug: 37070016]
  - virt: sevguest: Rename the sevguest dir and files to sev-guest (Tom Lendacky)  [Orabug: 37070016]
  - virt: sevguest: Change driver name to reflect generic SEV support (Tom Lendacky)  [Orabug: 37070016]
  - x86/boot: Put globals that are accessed early into the .data section (Michael Roth)  [Orabug: 37070016]
  - virt: sevguest: Fix bool function returning negative value (Haowen Bai)  [Orabug: 37070016]
  - virt: sevguest: Fix return value check in alloc_shared_pages() (Yang Yingliang)  [Orabug: 37070016]
  - x86/sev-es: Replace open-coded hlt-loop with sev_es_terminate() (Peter Gonda)  [Orabug: 37070016]
  - virt: sevguest: Add documentation for SEV-SNP CPUID Enforcement (Michael Roth)  [Orabug: 37070016]
  - virt: sevguest: Add support to get extended report (Brijesh Singh)  [Orabug: 37070016]
  - virt: sevguest: Add support to derive key (Brijesh Singh)  [Orabug: 37070016]
  - virt: Add SEV-SNP guest driver (Brijesh Singh)  [Orabug: 37070016]
  - x86/sev: Register SEV-SNP guest request platform device (Brijesh Singh)  [Orabug: 37070016]
  - x86/sev: Provide support for SNP guest request NAEs (Brijesh Singh)  [Orabug: 37070016]
  - x86/sev: Add a sev= cmdline option (Michael Roth)  [Orabug: 37070016]
  - x86/sev: Use firmware-validated CPUID for SEV-SNP guests (Michael Roth)  [Orabug: 37070016]
  - x86/sev: Add SEV-SNP feature detection/setup (Michael Roth)  [Orabug: 37070016]
  - x86/compressed/64: Add identity mapping for Confidential Computing blob (Michael Roth)  [Orabug: 37070016]
  - x86/compressed: Use firmware-validated CPUID leaves for SEV-SNP guests (Michael Roth)  [Orabug: 37070016]
  - x86/compressed: Add SEV-SNP feature detection/setup (Michael Roth)  [Orabug: 37070016]
  - x86/boot: Add a pointer to Confidential Computing blob in bootparams (Michael Roth)  [Orabug: 37070016]
  - x86/compressed/64: Add support for SEV-SNP CPUID table in #VC handlers (Michael Roth)  [Orabug: 37070016]
  - x86/sev: Move MSR-based VMGEXITs for CPUID to helper (Michael Roth)  [Orabug: 37070016]
  - KVM: x86: Move lookup of indexed CPUID leafs to helper (Michael Roth)  [Orabug: 37070016]
  - x86/boot: Add Confidential Computing type to setup_data (Brijesh Singh)  [Orabug: 37070016]
  - x86/compressed/acpi: Move EFI kexec handling into common code (Michael Roth)  [Orabug: 37070016]
  - x86/compressed/acpi: Move EFI vendor table lookup to helper (Michael Roth)  [Orabug: 37070016]
  - x86/compressed/acpi: Move EFI config table lookup to helper (Michael Roth)  [Orabug: 37070016]
  - x86/compressed/acpi: Move EFI system table lookup to helper (Michael Roth)  [Orabug: 37070016]
  - x86/head/64: Re-enable stack protection (Michael Roth)  [Orabug: 37070016]
  - x86/sev: Use SEV-SNP AP creation to start secondary CPUs (Tom Lendacky)  [Orabug: 37070016]
  - x86/sev: Remove do_early_exception() forward declarations (Borislav Petkov)  [Orabug: 37070016]
  - x86/mm: Validate memory when changing the C-bit (Brijesh Singh)  [Orabug: 37070016]
  - x86/mm/cpa: Generalize __set_memory_enc_pgtable() (Brijesh Singh)  [Orabug: 37070016]
  - x86/kernel: Validate ROM memory before accessing when SEV-SNP is active (Brijesh Singh)  [Orabug: 37070016]
  - x86/kernel: Mark the .bss..decrypted section as shared in the RMP table (Brijesh Singh)  [Orabug: 37070016]
  - x86/head64: Add missing __head annotation to sme_postprocess_startup() (Marco Bonelli)  [Orabug: 37070016]
  - x86/head64: Carve out the guest encryption postprocessing into a helper (Borislav Petkov)  [Orabug: 37070016]
  - x86/sev: Add helper for validating pages in early enc attribute changes (Brijesh Singh)  [Orabug: 37070016]
  - x86/sev: Register GHCB memory when SEV-SNP is active (Brijesh Singh)  [Orabug: 37070016]
  - x86/compressed: Register GHCB memory when SEV-SNP is active (Brijesh Singh)  [Orabug: 37070016]
  - x86/compressed: Add helper for validating pages in the decompression stage (Brijesh Singh)  [Orabug: 37070016]
  - x86/sev: Check the VMPL level (Brijesh Singh)  [Orabug: 37070016]
  - x86/sev: Add a helper for the PVALIDATE instruction (Brijesh Singh)  [Orabug: 37070016]
  - x86/sev: Check SEV-SNP features support (Brijesh Singh)  [Orabug: 37070016]
  - x86/sev: Save the negotiated GHCB version (Brijesh Singh)  [Orabug: 37070016]
  - x86/sev: Define the Linux-specific guest termination reasons (Brijesh Singh)  [Orabug: 37070016]
  - x86/mm: Extend cc_attr to include AMD SEV-SNP (Brijesh Singh)  [Orabug: 37070016]
  - x86/sev: Detect/setup SEV/SME features earlier in boot (Michael Roth)  [Orabug: 37070016]
  - x86/compressed/64: Detect/setup SEV/SME features earlier during boot (Michael Roth)  [Orabug: 37070016]
  - KVM: SVM: Update the SEV-ES save area mapping (Tom Lendacky)  [Orabug: 37070016]
  - KVM: SVM: Create a separate mapping for the GHCB save area (Tom Lendacky)  [Orabug: 37070016] [Orabug: 37070016]
  - KVM: SVM: Create a separate mapping for the SEV-ES save area (Tom Lendacky)  [Orabug: 37070016]
  - KVM: SVM: Define sev_features and VMPL field in the VMSA (Brijesh Singh)  [Orabug: 37070016]
  - x86/sev: Move common memory encryption code to mem_encrypt.c (Kirill A. Shutemov)  [Orabug: 37070016]
  - x86/sev: Rename mem_encrypt.c to mem_encrypt_amd.c (Kuppuswamy Sathyanarayanan)  [Orabug: 37070016]
  - x86/sev: Get rid of excessive use of defines (Borislav Petkov)  [Orabug: 37070016]
  - x86/sev: Shorten GHCB terminate macro names (Brijesh Singh)  [Orabug: 37070016]
  - x86/coco: Add API to handle encryption mask (Kirill A. Shutemov)  [Orabug: 37070016]
  - x86/coco: Explicitly declare type of confidential computing platform (Kirill A. Shutemov)  [Orabug: 37070016]
  - x86/hyperv: Initialize GHCB page in Isolation VM (Tianyu Lan)  [Orabug: 37070016]
  - x86/cc: Move arch/x86/{kernel/cc_platform.c => coco/core.c} (Kirill A. Shutemov)  [Orabug: 37070016]
  - x86/hyper-v: Add hyperv Isolation VM check in the cc_platform_has() (Tianyu Lan)  [Orabug: 37070016]
  - crypto: ccp - Add SEV_INIT_EX support (David Rientjes)  [Orabug: 37070016]
  - crypto: ccp - Add psp_init_on_probe module parameter (Peter Gonda)  [Orabug: 37070016]
  - crypto: ccp - Add SEV_INIT rc error logging on init (Peter Gonda)  [Orabug: 37070016]
  - KVM: SVM: Hide SEV migration lockdep goo behind CONFIG_PROVE_LOCKING (Sean Christopherson)  [Orabug: 37070016]
  - KVM: SVM: Skip VMSA init in sev_es_init_vmcb() if pointer is NULL (Sean Christopherson)  [Orabug: 37070016]
  - KVM: SEV: Init target VMCBs in sev_migrate_from (Peter Gonda)  [Orabug: 37070016]
  - KVM, SEV: Add KVM_EXIT_SHUTDOWN metadata for SEV-ES (Peter Gonda)  [Orabug: 37070016]
  - KVM: SEV: Mark nested locking of vcpu->lock (Peter Gonda)  [Orabug: 37070016]
  - KVM: SVM: Simplify and harden helper to flush SEV guest page(s) (Sean Christopherson)  [Orabug: 37070016]
  - KVM: SEV: Add cond_resched() to loop in sev_clflush_pages() (Peter Gonda)  [Orabug: 37070016]
  - KVM: SEV: Allow SEV intra-host migration of VM with mirrors (Peter Gonda)  [Orabug: 37070016]
  - KVM: SVM: improve split between svm_prepare_guest_switch and sev_es_prepare_guest_switch (Paolo Bonzini)  [Orabug: 37070016]
  - selftests: KVM: sev_migrate_tests: Add mirror command tests (Peter Gonda)  [Orabug: 37070016]
  - selftests: KVM: sev_migrate_tests: Fix sev_ioctl() (Peter Gonda)  [Orabug: 37070016]
  - selftests: KVM: sev_migrate_tests: Fix test_sev_mirror() (Peter Gonda)  [Orabug: 37070016]
  - KVM: SEV: Mark nested locking of kvm->lock (Wanpeng Li)  [Orabug: 37070016]
  - KVM: SVM: Do not terminate SEV-ES guests on GHCB validation failure (Tom Lendacky)  [Orabug: 37070016]
  - KVM: SEV: Fall back to vmalloc for SEV-ES scratch area if necessary (Sean Christopherson)  [Orabug: 37070016]
  - KVM: SEV: accept signals in sev_lock_two_vms (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: SEV: do not take kvm->lock when destroying (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: SEV: Prohibit migration of a VM that has mirrors (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: SEV: Do COPY_ENC_CONTEXT_FROM with both VMs locked (Paolo Bonzini)  [Orabug: 37070016]
  - selftests: sev_migrate_tests: add tests for KVM_CAP_VM_COPY_ENC_CONTEXT_FROM (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: SEV: move mirror status to destination of KVM_CAP_VM_MOVE_ENC_CONTEXT_FROM (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: SEV: cleanup locking for KVM_CAP_VM_MOVE_ENC_CONTEXT_FROM (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: SEV: do not use list_replace_init on an empty list (Paolo Bonzini)  [Orabug: 37070016]
  - selftests: sev_migrate_tests: free all VMs (Paolo Bonzini)  [Orabug: 37070016]
  - selftests: fix check for circular KVM_CAP_VM_MOVE_ENC_CONTEXT_FROM (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: SEV: Fix typo in and tweak name of cmd_allowed_from_miror() (Sean Christopherson)  [Orabug: 37070016]
  - KVM: SEV: Drop a redundant setting of sev->asid during initialization (Sean Christopherson)  [Orabug: 37070016]
  - KVM: SEV: Set sev_info.active after initial checks in sev_guest_init() (Sean Christopherson)  [Orabug: 37070016]
  - KVM: SEV: unify cgroup cleanup code for svm_vm_migrate_from (Paolo Bonzini)  [Orabug: 37070016]
  - selftest: KVM: Add intra host migration tests (Peter Gonda)  [Orabug: 37070016]
  - KVM: selftests: Use pattern matching in .gitignore (Sean Christopherson)  [Orabug: 37070016]
  - selftest: KVM: Add open sev dev helper (Peter Gonda)  [Orabug: 37070016]
  - x86/kvm: Add guest support for detecting and enabling SEV Live Migration feature. (Ashish Kalra)  [Orabug: 37070016]
  - EFI: Introduce the new AMD Memory Encryption GUID. (Ashish Kalra)  [Orabug: 37070016]
  - mm: x86: Invoke hypercall when page encryption status is changed (Brijesh Singh)  [Orabug: 37070016]
  - x86/kvm: Add AMD SEV specific Hypercall3 (Brijesh Singh)  [Orabug: 37070016]
  - KVM: SEV: Add support for SEV-ES intra host migration (Peter Gonda)  [Orabug: 37070016]
  - KVM: SEV: Add support for SEV intra host migration (Peter Gonda)  [Orabug: 37070016]
  - KVM: SEV: provide helpers to charge/uncharge misc_cg (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: SEV: Refactor out sev_es_state struct (Peter Gonda)  [Orabug: 37070016]
  - x86/sev: Expose sev_es_ghcb_hv_call() for use by HyperV (Tianyu Lan)  [Orabug: 37070016]
  - x86/sev: Allow #VC exceptions on the VC2 stack (Joerg Roedel)  [Orabug: 37070016]
  - KVM: generalize "bugged" VM to "dead" VM (Paolo Bonzini)  [Orabug: 37070016]
  - x86/sev: Carve out HV call's return value verification (Borislav Petkov)  [Orabug: 37070016]
  - KVM: Free new dirty bitmap if creating a new memslot fails (Sean Christopherson)  [Orabug: 37070016]
  - KVM: Fix comments that refer to the non-existent install_new_memslots() (Jun Miao)  [Orabug: 37070016]
  - KVM: x86: Retry page fault if MMU reload is pending and root has no sp (Sean Christopherson)  [Orabug: 37070016]
  - KVM: x86/mmu: Fix an sign-extension bug with mmu_seq that hangs vCPUs (Sean Christopherson)  [Orabug: 37070016]
  - KVM: Dynamically allocate "new" memslots from the get-go (Sean Christopherson)  [Orabug: 37070016]
  - KVM: Wait 'til the bitter end to initialize the "new" memslot (Sean Christopherson)  [Orabug: 37070016]
  - KVM: Optimize overlapping memslots check (Maciej S. Szmigiero)  [Orabug: 37070016]
  - KVM: Optimize gfn lookup in kvm_zap_gfn_range() (Maciej S. Szmigiero)  [Orabug: 37070016]
  - KVM: Call kvm_arch_flush_shadow_memslot() on the old slot in kvm_invalidate_memslot() (Maciej S. Szmigiero)  [Orabug: 37070016]
  - KVM: Keep memslots in tree-based structures instead of array-based ones (Maciej S. Szmigiero)  [Orabug: 37070016]
  - KVM: s390: Introduce kvm_s390_get_gfn_end() (Maciej S. Szmigiero)  [Orabug: 37070016]
  - KVM: s390: Add a routine for setting userspace CPU state (Eric Farman)  [Orabug: 37070016]
  - KVM: Use interval tree to do fast hva lookup in memslots (Maciej S. Szmigiero)  [Orabug: 37070016]
  - KVM: Resolve memslot ID via a hash table instead of via a static array (Maciej S. Szmigiero)  [Orabug: 37070016]
  - Revert "kvm: fix possible spectre gadgets in include/linux/kvm_host.h" (Liam Merwick)  [Orabug: 37070016]
  - KVM: Move WARN on invalid memslot index to update_memslots() (Maciej S. Szmigiero)  [Orabug: 37070016]
  - KVM: Integrate gfn_to_memslot_approx() into search_memslots() (Maciej S. Szmigiero)  [Orabug: 37070016]
  - KVM: x86: Use nr_memslot_pages to avoid traversing the memslots array (Maciej S. Szmigiero)  [Orabug: 37070016]
  - KVM: x86: Don't call kvm_mmu_change_mmu_pages() if the count hasn't changed (Maciej S. Szmigiero)  [Orabug: 37070016]
  - KVM: Don't make a full copy of the old memslot in __kvm_set_memory_region() (Sean Christopherson)  [Orabug: 37070016]
  - KVM: s390: Skip gfn/size sanity checks on memslot DELETE or FLAGS_ONLY (Sean Christopherson)  [Orabug: 37070016]
  - KVM: x86: Don't assume old/new memslots are non-NULL at memslot commit (Sean Christopherson)  [Orabug: 37070016]
  - KVM: Use prepare/commit hooks to handle generic memslot metadata updates (Sean Christopherson)  [Orabug: 37070016]
  - KVM: Stop passing kvm_userspace_memory_region to arch memslot hooks (Sean Christopherson)  [Orabug: 37070016]
  - KVM: x86: Use "new" memslot instead of userspace memory region (Sean Christopherson)  [Orabug: 37070016]
  - KVM: s390: Use "new" memslot instead of userspace memory region (Sean Christopherson)  [Orabug: 37070016]
  - KVM: PPC: Avoid referencing userspace memory region in memslot updates (Sean Christopherson)  [Orabug: 37070016]
  - KVM: MIPS: Drop pr_debug from memslot commit to avoid using "mem" (Sean Christopherson)  [Orabug: 37070016]
  - KVM: arm64: Use "new" memslot instead of userspace memory region (Sean Christopherson)  [Orabug: 37070016]
  - KVM: Let/force architectures to deal with arch specific memslot data (Sean Christopherson)  [Orabug: 37070016]
  - KVM: Use "new" memslot's address space ID instead of dedicated param (Sean Christopherson)  [Orabug: 37070016]
  - KVM: Resync only arch fields when slots_arch_lock gets reacquired (Maciej S. Szmigiero)  [Orabug: 37070016]
  - KVM: Open code kvm_delete_memslot() into its only caller (Sean Christopherson)  [Orabug: 37070016]
  - KVM: Require total number of memslot pages to fit in an unsigned long (Sean Christopherson)  [Orabug: 37070016]
  - KVM: x86/mmu: Extract zapping of rmaps for gfn range to separate helper (Sean Christopherson)  [Orabug: 37070016]
  - KVM: x86/mmu: Drop a redundant remote TLB flush in kvm_zap_gfn_range() (Sean Christopherson)  [Orabug: 37070016]
  - KVM: x86/mmu: Retry page fault if root is invalidated by memslot update (Sean Christopherson)  [Orabug: 37070016]
  - KVM: x86/mmu: Properly dereference rcu-protected TDP MMU sptep iterator (Sean Christopherson)  [Orabug: 37070016]
  - KVM: x86/mmu: Don't rebuild page when the page is synced and no tlb flushing is required (Hou Wenlong)  [Orabug: 37070016]
  - KVM: x86/mmu: Avoid memslot lookup in rmap_add (David Matlack)  [Orabug: 37070016]
  - KVM: MMU: pass struct kvm_page_fault to mmu_set_spte (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: MMU: pass kvm_mmu_page struct to make_spte (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: MMU: set ad_disabled in TDP MMU role (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: MMU: remove unnecessary argument to mmu_set_spte (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: MMU: clean up make_spte return value (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: MMU: inline set_spte in FNAME(sync_page) (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: MMU: inline set_spte in mmu_set_spte (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: x86/mmu: Avoid memslot lookup in page_fault_handle_page_track (David Matlack)  [Orabug: 37070016]
  - KVM: x86/mmu: Pass the memslot around via struct kvm_page_fault (David Matlack)  [Orabug: 37070016] [Orabug: 37070016]
  - KVM: MMU: unify tdp_mmu_map_set_spte_atomic and tdp_mmu_set_spte_atomic_no_dirty_log (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: MMU: mark page dirty in make_spte (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: x86/mmu: Verify shadow walk doesn't terminate early in page faults (Sean Christopherson)  [Orabug: 37070016]
  - KVM: MMU: change tracepoints arguments to kvm_page_fault (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: MMU: change disallowed_hugepage_adjust() arguments to kvm_page_fault (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: MMU: change kvm_mmu_hugepage_adjust() arguments to kvm_page_fault (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: MMU: change fast_page_fault() arguments to kvm_page_fault (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: MMU: change tdp_mmu_map_handle_target_level() arguments to kvm_page_fault (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: MMU: change kvm_tdp_mmu_map() arguments to kvm_page_fault (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: MMU: change FNAME(fetch)() arguments to kvm_page_fault (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: MMU: change __direct_map() arguments to kvm_page_fault (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: MMU: change handle_abnormal_pfn() arguments to kvm_page_fault (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: MMU: change kvm_faultin_pfn() arguments to kvm_page_fault (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: MMU: change page_fault_handle_page_track() arguments to kvm_page_fault (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: MMU: change direct_page_fault() arguments to kvm_page_fault (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: MMU: change mmu->page_fault() arguments to kvm_page_fault (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: MMU: Introduce struct kvm_page_fault (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: MMU: pass unadulterated gpa to direct_page_fault (Paolo Bonzini)  [Orabug: 37070016]
  - KVM: X86: Don't unsync pagetables when speculative (Lai Jiangshan)  [Orabug: 37070016]
  - KVM: X86: Change kvm_sync_page() to return true when remote flush is needed (Lai Jiangshan)  [Orabug: 37070016]
  - KVM: X86: Remove kvm_mmu_flush_or_zap() (Lai Jiangshan)  [Orabug: 37070016]
  - KVM: X86: Don't flush current tlb on shadow page modification (Lai Jiangshan)  [Orabug: 37070016]
  - net: mana: Fix RX buf alloc_size alignment and atomic op panic (Haiyang Zhang)  [Orabug: 37029115]  {CVE-2024-45001}
  - net/mlx5: pretend 'fast unload' succeeded on Exadata systems (Gerd Rausch)  [Orabug: 37224000]
  - rds: Do not invoke the transport's recv_path() while in atomic context (Håkon Bugge)  [Orabug: 36368605]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-303.171.4.el9uek]
changelog:
  - rds: recv_payload_bad_checksum was not 0 after running rds-stress on UEK6 (William Kucharski)  [Orabug: 37265126]
  - rds: If RDS Checksums are enabled for RDMA RDS operations, the extension headers will overflow causing incorrect operation (William Kucharski)  [Orabug: 37265124]
  - rds: rds_message_alloc() needlessly zeroes m_used_sgs (William Kucharski)  [Orabug: 37265122]
  - rds: tracepoint in rds_receive_csum_err() prints pointless information (William Kucharski)  [Orabug: 37265120]
  - rds: rds_inc_init() should initialize the inc->i_conn_path field (William Kucharski)  [Orabug: 37265116]
  - rds: Race condition in adding RDS payload checksum extension header may result in RDS header corruption (William Kucharski)  [Orabug: 37265114]
  - Revert "net/mlx5: disable the 'fast unload' feature on Exadata systems" (Qing Huang)  [Orabug: 37285222]
  - Revert "net/mlx5: pretend 'fast unload' succeeded on Exadata systems" (Qing Huang)  [Orabug: 37285222]
  - RDMA/mlx5: Fix Shared PD prefetch of ODP memory region (Mark Haywood)  [Orabug: 31688618] [Orabug: 37279176]
  - blk-mq: fix missing blk_account_io_done() in error path (Yu Kuai)  [Orabug: 37228086]
  - rds: Add rds stuck shutdown timeout (Rohit Nair)  [Orabug: 37214078]
  - KVM: x86: Stop compiling vmenter.S with OBJECT_FILES_NON_STANDARD (Sean Christopherson)  [Orabug: 37273739]
  - KVM: SVM: Create a stack frame in __svm_sev_es_vcpu_run() (Sean Christopherson)  [Orabug: 37273739]
  - KVM: SVM: Create a stack frame in __svm_vcpu_run() for unwinding (Sean Christopherson)  [Orabug: 37273739]
  - mm/memory-failure: pass the folio and the page to collect_procs() (Matthew Wilcox (Oracle))  [Orabug: 37270260]
  - LTS version: v5.15.171 (Vijayendra Suman)
  - mac80211: always have ieee80211_sta_restart() (Johannes Berg)
  - vt: prevent kernel-infoleak in con_font_get() (Jeongjun Park)
  - drm/i915: Fix potential context UAFs (Rob Clark)
  - Revert "drm/mipi-dsi: Set the fwnode for mipi_dsi_device" (Jason-JH.Lin)
  - mm: shmem: fix data-race in shmem_getattr() (Jeongjun Park) [Orabug: 37268580] {CVE-2024-50228}
  - wifi: iwlwifi: mvm: fix 6 GHz scan construction (Johannes Berg) [Orabug: 37304734] {CVE-2024-53055}
  - nilfs2: fix kernel bug due to missing clearing of checked flag (Ryusuke Konishi) [Orabug: 37268588] {CVE-2024-50230}
  - x86/bugs: Use code segment selector for VERW operand (Pawan Gupta) [Orabug: 37227383] {CVE-2024-50072}
  - ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow (Edward Adam Davis) [Orabug: 37268563] {CVE-2024-50218}
  - mm/page_alloc: let GFP_ATOMIC order-0 allocs access highatomic reserves (Matt Fleming) [Orabug: 37268568] {CVE-2024-50219}
  - mm/page_alloc: explicitly define how __GFP_HIGH non-blocking allocations accesses reserves (Mel Gorman)
  - mm/page_alloc: explicitly define what alloc flags deplete min reserves (Mel Gorman)
  - mm/page_alloc: explicitly record high-order atomic allocations in alloc_flags (Mel Gorman)
  - mm/page_alloc: treat RT tasks similar to __GFP_HIGH (Mel Gorman)
  - mm/page_alloc: rename ALLOC_HIGH to ALLOC_MIN_RESERVE (Mel Gorman)
  - mm/page_alloc: split out buddy removal code from rmqueue into separate helper (Mel Gorman)
  - mm/page_alloc: fix tracepoint mm_page_alloc_zone_locked() (Wonhyuk Yang)
  - mm/page_alloc: call check_new_pages() while zone spinlock is not held (Eric Dumazet)
  - riscv: Remove duplicated GET_RM (Chunyan Zhang)
  - riscv: Remove unused GENERATING_ASM_OFFSETS (Chunyan Zhang)
  - riscv: Use '%u' to format the output of 'cpu' (WangYuli)
  - riscv: efi: Set NX compat flag in PE/COFF header (Heinrich Schuchardt)
  - riscv: vdso: Prevent the compiler from inserting calls to memset() (Alexandre Ghiti)
  - nilfs2: fix potential deadlock with newly created symlinks (Ryusuke Konishi) [Orabug: 37268584] {CVE-2024-50229}
  - iio: light: veml6030: fix microlux value calculation (Javier Carrasco)
  - iio: adc: ad7124: fix division by zero in ad7124_set_channel_odr() (Zicheng Qu) [Orabug: 37268595] {CVE-2024-50232}
  - staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg() (Zicheng Qu) [Orabug: 37268597] {CVE-2024-50233}
  - wifi: iwlegacy: Clear stale interrupts before resuming device (Ville Syrjälä) [Orabug: 37268602] {CVE-2024-50234}
  - wifi: ath10k: Fix memory leak in management tx (Manikanta Pubbisetty) [Orabug: 37268610] {CVE-2024-50236}
  - wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower (Felix Fietkau) [Orabug: 37268613] {CVE-2024-50237}
  - xhci: Use pm_runtime_get to prevent RPM on unsupported systems (Basavaraj Natikar)
  - xhci: Fix Link TRB DMA in command ring stopped completion event (Faisal Hassan)
  - usb: typec: fix unreleased fwnode_handle in typec_port_register_altmodes() (Javier Carrasco)
  - usb: phy: Fix API devm_usb_put_phy() can not release the phy (Zijun Hu)
  - usbip: tools: Fix detach_port() invalid port error path (Zongmin Zhou)
  - misc: sgi-gru: Don't disable preemption in GRU driver (Dimitri Sivanich)
  - net: amd: mvme147: Fix probe banner message (Daniel Palmer)
  - scsi: scsi_transport_fc: Allow setting rport state to current state (Benjamin Marzinski)
  - fs/ntfs3: Additional check in ni_clear() (Konstantin Komarov) [Orabug: 37268638] {CVE-2024-50244}
  - fs/ntfs3: Fix possible deadlock in mi_read (Konstantin Komarov) [Orabug: 37268644] {CVE-2024-50245}
  - fs/ntfs3: Fix warning possible deadlock in ntfs_set_state (Konstantin Komarov)
  - fs/ntfs3: Check if more than chunk-size bytes are written (Andrew Ballance) [Orabug: 37268655] {CVE-2024-50247}
  - firmware: arm_sdei: Fix the input parameter of cpuhp_remove_state() (Xiongfeng Wang)
  - netfilter: nft_payload: sanitize offset and length before calling skb_checksum() (Pablo Neira Ayuso) [Orabug: 37268670] {CVE-2024-50251}
  - net: skip offload for NETIF_F_IPV6_CSUM if ipv6 header contains extension (Benoît Monin)
  - netfilter: Fix use-after-free in get_info() (Dong Chenchen) [Orabug: 37268689] {CVE-2024-50257}
  - bpf: Fix out-of-bounds write in trie_get_next_key() (Byeonguk Jeong) [Orabug: 37268702] {CVE-2024-50262}
  - netdevsim: Add trailing zero to terminate the string in nsim_nexthop_bucket_activity_write() (Zichen Xie) [Orabug: 37268697] {CVE-2024-50259}
  - net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (Pedro Tammela) [Orabug: 37304740] {CVE-2024-53057}
  - net: stmmac: TSO: Fix unbalanced DMA map/unmap for non-paged SKB data (Furong Xu) [Orabug: 37304745] {CVE-2024-53058}
  - ASoC: cs42l51: Fix some error handling paths in cs42l51_probe() (Christophe JAILLET)
  - wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd() (Daniel Gabay) [Orabug: 37304749] {CVE-2024-53059}
  - wifi: iwlwifi: mvm: disconnect station vifs if recovery failed (Emmanuel Grumbach)
  - mac80211: Add support to trigger sta disconnect on hardware restart (Youghandhar Chintala)
  - mac80211: do drv_reconfig_complete() before restarting all (Johannes Berg)
  - RDMA/bnxt_re: synchronize the qp-handle table array (Selvin Xavier)
  - RDMA/mlx5: Round max_rd_atomic/max_dest_rd_atomic up instead of down (Patrisious Haddad)
  - RDMA/cxgb4: Dump vendor specific QP details (Leon Romanovsky)
  - wifi: brcm80211: BRCM_TRACING should depend on TRACING (Geert Uytterhoeven)
  - wifi: mac80211: skip non-uploaded keys in ieee80211_iter_keys (Felix Fietkau)
  - mac80211: MAC80211_MESSAGE_TRACING should depend on TRACING (Geert Uytterhoeven)
  - cgroup: Fix potential overflow issue when checking max_depth (Xiu Jianfeng)
  - ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context (Koba Ko) [Orabug: 37264072] {CVE-2024-50141}
  - ACPI: PRM: Change handler_addr type to void pointer (Sudeep Holla)
  - ACPI: PRM: Remove unnecessary blank lines (Aubrey Li)
  - ksmbd: fix user-after-free from session log off (Namjae Jeon) [Orabug: 37227413] {CVE-2024-50086}
  - selftests/mm: fix incorrect buffer->mirror size in hmm2 double_map test (Donet Tom)
  - LTS version: v5.15.170 (Vijayendra Suman)
  - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [Orabug: 37264074] {CVE-2024-50142}
  - ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe() (Zichen Xie) [Orabug: 37252324] {CVE-2024-50103}
  - net: phy: dp83822: Fix reset pin definitions (Michel Alex)
  - serial: protect uart_port_dtr_rts() in uart_shutdown() too (Jiri Slaby (SUSE))
  - selinux: improve error checking in sel_write_load() (Paul Moore)
  - hv_netvsc: Fix VF namespace also in synthetic NIC NETDEV_REGISTER event (Haiyang Zhang)
  - xfrm: fix one more kernel-infoleak in algo dumping (Petr Vaganov) [Orabug: 37252349] {CVE-2024-50110}
  - ALSA: hda/realtek: Add subwoofer quirk for Acer Predator G9-593 (José Relvas)
  - KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory (Sean Christopherson) [Orabug: 37252372] {CVE-2024-50115}
  - openat2: explicitly return -E2BIG for (usize > PAGE_SIZE) (Aleksa Sarai)
  - nilfs2: fix kernel bug due to missing clearing of buffer delay flag (Ryusuke Konishi) [Orabug: 37252377] {CVE-2024-50116}
  - ACPI: button: Add DMI quirk for Samsung Galaxy Book2 to fix initial lid detection issue (Shubham Panwar)
  - ACPI: resource: Add LG 16T90SP to irq1_level_low_skip_override[] (Christian Heusel)
  - drm/amd: Guard against bad data for ATIF ACPI method (Mario Limonciello) [Orabug: 37252383] {CVE-2024-50117}
  - btrfs: zoned: fix zone unusable accounting for freed reserved extent (Naohiro Aota)
  - ALSA: hda/realtek: Update default depop procedure (Kailang Yang)
  - ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size() (Andrey Shumilin) [Orabug: 37264274] {CVE-2024-50205}
  - bpf,perf: Fix perf_event_detach_bpf_prog error handling (Jiri Olsa)
  - posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime() (Jinjie Ruan) [Orabug: 37320233] {CVE-2024-50210}
  - r8169: avoid unsolicited interrupts (Heiner Kallweit)
  - net: sched: fix use-after-free in taprio_change() (Dmitry Antipov) [Orabug: 37252407] {CVE-2024-50127}
  - net: wwan: fix global oob in wwan_rtnl_policy (Lin Ma) [Orabug: 37252410] {CVE-2024-50128}
  - net: dsa: mv88e6xxx: Fix error when setting port policy on mv88e6393x (Peter Rashleigh)
  - net: plip: fix break; causing plip to never transmit (Jakub Boehm)
  - be2net: fix potential memory leak in be_xmit() (Wang Hai) [Orabug: 37264143] {CVE-2024-50167}
  - net/sun3_82586: fix potential memory leak in sun3_82586_send_packet() (Wang Hai) [Orabug: 37264149] {CVE-2024-50168}
  - xfrm: respect ip protocols rules criteria when performing dst lookups (Eyal Birger)
  - xfrm: extract dst lookup parameters into a struct (Eyal Birger)
  - tracing: Consider the NULL character when validating the event length (Leo Yan) [Orabug: 37252415] {CVE-2024-50131}
  - platform/x86: dell-sysman: add support for alienware products (Crag Wang)
  - ASoC: qcom: sm8250: add qrb4210-rb2-sndcard compatible string (Alexey Klimov)
  - arm64/uprobes: change the uprobe_opcode_t typedef to fix the sparse warning (junhua huang)
  - platform/x86: dell-wmi: Ignore suspend notifications (Armin Wolf)
  - udf: fix uninit-value use in udf_get_fileshortad (Gianfranco Trad) [Orabug: 37264080] {CVE-2024-50143}
  - arm64: Force position-independent veneers (Mark Rutland)
  - ASoC: fsl_sai: Enable 'FIFO continue on error' FCONT bit (Shengjiu Wang)
  - ASoC: codecs: lpass-rx-macro: add missing CDC_RX_BCL_VBAT_RF_PROC2 to default regs values (Alexey Klimov)
  - drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA (Hans de Goede) [Orabug: 37252420] {CVE-2024-50134}
  - exec: don't WARN for racy path_noexec check (Mateusz Guzik) [Orabug: 37206344] {CVE-2024-50010}
  - XHCI: Separate PORT and CAPs macros into dedicated file (Frank Li)
  - usb: gadget: Add function wakeup support (Elson Roy Serrao)
  - KVM: s390: gaccess: Check if guest address is in memslot (Nico Boehr)
  - KVM: s390: gaccess: Cleanup access to guest pages (Janis Schoetterl-Glausch)
  - KVM: s390: gaccess: Refactor access address range check (Janis Schoetterl-Glausch)
  - KVM: s390: gaccess: Refactor gpa and length calculation (Janis Schoetterl-Glausch)
  - arm64: probes: Fix uprobes for big-endian kernels (Mark Rutland) [Orabug: 37264236] {CVE-2024-50194}
  - arm64:uprobe fix the uprobe SWBP_INSN in big-endian (junhua huang)
  - Bluetooth: bnep: fix wild-memory-access in proto_unregister (Ye Bin) [Orabug: 37264096] {CVE-2024-50148}
  - s390: Initialize psw mask in perf_arch_fetch_caller_regs() (Heiko Carstens)
  - usb: typec: altmode should keep reference to parent (Thadeu Lima de Souza Cascardo) [Orabug: 37264102] {CVE-2024-50150}
  - smb: client: fix OOBs when building SMB2_IOCTL request (Paulo Alcantara) [Orabug: 37264107] {CVE-2024-50151}
  - scsi: target: core: Fix null-ptr-deref in target_alloc_device() (Wang Hai) [Orabug: 37264112] {CVE-2024-50153}
  - genetlink: hold RCU in genlmsg_mcast() (Eric Dumazet)
  - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Kuniyuki Iwashima) [Orabug: 37264114] {CVE-2024-50154}
  - net: systemport: fix potential memory leak in bcm_sysport_xmit() (Wang Hai) [Orabug: 37264156] {CVE-2024-50171}
  - net: xilinx: axienet: fix potential memory leak in axienet_start_xmit() (Wang Hai)
  - net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid (Li RongQing)
  - net: ethernet: aeroflex: fix potential memory leak in greth_start_xmit_gbit() (Wang Hai)
  - macsec: don't increment counters for an unrelated SA (Sabrina Dubroca)
  - net: usb: usbnet: fix race in probe failure (Oliver Neukum)
  - drm/msm: Allocate memory for disp snapshot with kvzalloc() (Douglas Anderson)
  - drm/msm: Avoid NULL dereference in msm_disp_state_print_regs() (Douglas Anderson) [Orabug: 37264122] {CVE-2024-50156}
  - drm/msm/dsi: fix 32-bit signed integer extension in pclk_rate calculation (Jonathan Marek)
  - RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages (Bhargava Chenna Marreddy) [Orabug: 37264280] {CVE-2024-50208}
  - RDMA/bnxt_re: Return more meaningful error (Kalesh AP)
  - ipv4: give an IPv4 dev to blackhole_netdev (Xin Long)
  - RDMA/irdma: Fix misspelling of "accept*" (Alexander Zubkov)
  - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Anumula Murali Mohan Reddy)
  - ALSA: hda/cs8409: Fix possible NULL dereference (Murad Masimov) [Orabug: 37264129] {CVE-2024-50160}
  - ARM: dts: bcm2837-rpi-cm3-io3: Fix HDMI hpd-gpio pin (Florian Klink)
  - x86/resctrl: Avoid overflow in MB settings in bw_validate() (Martin Kletzander)
  - RDMA/bnxt_re: Add a check for memory allocation (Kalesh AP) [Orabug: 37264285] {CVE-2024-50209}
  - RDMA/bnxt_re: Fix incorrect AVID type in WQE structure (Saravanan Vajravel)
  - bpf: devmap: provide rxq after redirect (Florian Kauer) [Orabug: 37264132] {CVE-2024-50162}
  - bpf: Make sure internal and UAPI bpf_redirect flags don't overlap (Toke Høiland-Jørgensen) [Orabug: 37264134] {CVE-2024-50163}
  - LTS version: v5.15.169 (Vijayendra Suman)
  - ALSA: hda/conexant - Use cached pin control for Node 0x1d on HP EliteOne 1000 G2 (Vasiliy Kovalev)
  - powerpc/mm: Always update max/min_low_pfn in mem_topology_setup() (Aneesh Kumar K.V)
  - nilfs2: propagate directory read errors from nilfs_find_entry() (Ryusuke Konishi) [Orabug: 37264266] {CVE-2024-50202}
  - mptcp: prevent MPC handshake on port-based signal endpoints (Paolo Abeni)
  - mptcp: fallback when MPTCP opts are dropped after 1st data (Matthieu Baerts (NGI0))
  - tcp: fix mptcp DSS corruption due to large pmtu xmit (Paolo Abeni) [Orabug: 37227408] {CVE-2024-50083}
  - mptcp: handle consistently DSS corruption (Paolo Abeni) [Orabug: 37264210] {CVE-2024-50185}
  - mptcp: track and update contiguous data status (Geliang Tang)
  - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Marc Zyngier) [Orabug: 37264231] {CVE-2024-50192}
  - pinctrl: ocelot: fix system hang on level based interrupts (Sergey Matsievskiy) [Orabug: 37264246] {CVE-2024-50196}
  - x86/entry_32: Clear CPU buffers after register restore in NMI return (Pawan Gupta) [Orabug: 37264234] {CVE-2024-50193}
  - x86/entry_32: Do not clobber user EFLAGS.ZF (Pawan Gupta)
  - x86/apic: Always explicitly disarm TSC-deadline timer (Zhang Rui)
  - x86/resctrl: Annotate get_mem_config() functions as __init (Nathan Chancellor)
  - USB: serial: option: add Telit FN920C04 MBIM compositions (Daniele Palmas)
  - USB: serial: option: add support for Quectel EG916Q-GL (Benjamin B. Frost)
  - xhci: Mitigate failed set dequeue pointer commands (Mathias Nyman)
  - xhci: Fix incorrect stream context type macro (Mathias Nyman)
  - Bluetooth: btusb: Fix regression with fake CSR controllers 0a12:0001 (Luiz Augusto von Dentz)
  - Bluetooth: Remove debugfs directory on module init failure (Aaron Thompson)
  - iio: adc: ti-ads124s08: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig (Javier Carrasco)
  - iio: proximity: mb1232: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig (Javier Carrasco)
  - iio: light: opt3001: add missing full-scale range value (Emil Gedenryd)
  - iio: light: veml6030: fix IIO device retrieval from embedded device (Javier Carrasco) [Orabug: 37264254] {CVE-2024-50198}
  - iio: light: veml6030: fix ALS sensor resolution (Javier Carrasco)
  - iio: hid-sensors: Fix an error handling path in _hid_sensor_set_report_latency() (Christophe JAILLET)
  - iio: adc: ti-ads8688: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig (Javier Carrasco)
  - iio: dac: stm32-dac-core: add missing select REGMAP_MMIO in Kconfig (Javier Carrasco)
  - iio: dac: ltc1660: add missing select REGMAP_SPI in Kconfig (Javier Carrasco)
  - iio: dac: ad5770r: add missing select REGMAP_SPI in Kconfig (Javier Carrasco)
  - drm/vmwgfx: Handle surface check failure correctly (Nikolay Kuratov)
  - drm/radeon: Fix encoder->possible_clones (Ville Syrjälä) [Orabug: 37264263] {CVE-2024-50201}
  - io_uring/sqpoll: close race on waiting for sqring entries (Jens Axboe)
  - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Omar Sandoval) [Orabug: 37227403] {CVE-2024-50082}
  - x86/bugs: Do not use UNTRAIN_RET with IBPB on entry (Johannes Wikner)
  - x86/bugs: Skip RSB fill at VMEXIT (Johannes Wikner)
  - x86/entry: Have entry_ibpb() invalidate return predictions (Johannes Wikner)
  - x86/cpufeatures: Add a IBPB_NO_RET BUG flag (Johannes Wikner)
  - x86/cpufeatures: Define X86_FEATURE_AMD_IBPB_RET (Jim Mattson)
  - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Michael Mueller)
  - s390/sclp_vt220: Convert newlines to CRLF instead of LFCR (Thomas Weißschuh)
  - iommu/vt-d: Fix incorrect pci_for_each_dma_alias() for non-PCI devices (Lu Baolu) [Orabug: 37252321] {CVE-2024-50101}
  - io_uring/sqpoll: do not put cpumask on stack (Felix Moessbauer)
  - io_uring/sqpoll: retain test for whether the CPU is valid (Jens Axboe)
  - io_uring/sqpoll: do not allow pinning outside of cpuset (Felix Moessbauer)
  - drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE) (Wachowski, Karol)
  - KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin() (Breno Leitao) [Orabug: 36835836] {CVE-2024-40953}
  - dm-crypt, dm-verity: disable tasklets (Mikulas Patocka)
  - wifi: mac80211: fix potential key use-after-free (Johannes Berg)
  - secretmem: disable memfd_secret() if arch cannot set direct map (Patrick Roy) [Orabug: 37264195] {CVE-2024-50182}
  - mm/swapfile: skip HugeTLB pages for unuse_vma (Liu Shixin) [Orabug: 37264256] {CVE-2024-50199}
  - fat: fix uninitialized variable (OGAWA Hirofumi)
  - irqchip/gic-v3-its: Fix VSYNC referencing an unmapped VPE on GIC v4.1 (Nianyao Tang)
  - net: macb: Avoid 20s boot delay by skipping MDIO bus registration for fixed-link PHY (Oleksij Rempel)
  - arm64: probes: Fix simulate_ldr*_literal() (Mark Rutland)
  - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Rutland) [Orabug: 37252316] {CVE-2024-50099}
  - posix-clock: Fix missing timespec64 check in pc_clock_settime() (Jinjie Ruan) [Orabug: 37264241] {CVE-2024-50195}
  - net: enetc: add missing static descriptor and inline keyword (Wei Fang)
  - net: enetc: remove xdp_drops statistic from enetc_xdp_drop() (Wei Fang)
  - udf: Fix bogus checksum computation in udf_rename() (Jan Kara) [Orabug: 37320204] {CVE-2024-43845}
  - udf: Don't return bh from udf_expand_dir_adinicb() (Jan Kara)
  - udf: Handle error when expanding directory (Jan Kara)
  - udf: Remove old directory iteration code (Jan Kara)
  - udf: Convert udf_link() to new directory iteration code (Jan Kara)
  - udf: Convert udf_mkdir() to new directory iteration code (Jan Kara)
  - udf: Convert udf_add_nondir() to new directory iteration (Jan Kara)
  - udf: Implement adding of dir entries using new iteration code (Jan Kara)
  - udf: Convert udf_unlink() to new directory iteration code (Jan Kara)
  - udf: Convert udf_rmdir() to new directory iteration code (Jan Kara)
  - udf: Convert empty_dir() to new directory iteration code (Jan Kara)
  - udf: Convert udf_get_parent() to new directory iteration code (Jan Kara)
  - udf: Convert udf_lookup() to use new directory iteration code (Jan Kara)
  - udf: Convert udf_readdir() to new directory iteration (Jan Kara)
  - udf: Convert udf_rename() to new directory iteration code (Jan Kara)
  - udf: Provide function to mark entry as deleted using new directory iteration code (Jan Kara)
  - udf: Implement searching for directory entry using new iteration code (Jan Kara)
  - udf: Move udf_expand_dir_adinicb() to its callsite (Jan Kara)
  - udf: Convert udf_expand_dir_adinicb() to new directory iteration (Jan Kara)
  - udf: New directory iteration code (Jan Kara)
  - ALSA: hda/conexant - Fix audio routing for HP EliteOne 1000 G2 (Vasiliy Kovalev)


author: Brian Maly <brian.maly@oracle.com> [5.15.0-303.171.5.el9uek]
changelog:
  - intel_idle: fix ACPI _CST matching for newer Xeon platforms (Artem Bityutskiy)  [Orabug: 37249457]
  - x86: Fix CPUIDLE_FLAG_IRQ_ENABLE leaking timer reprogram (Peter Zijlstra)  [Orabug: 37249457]
  - perf/tests: Add AMX instructions to x86 instruction decoder test (Adrian Hunter)  [Orabug: 37249457]
  - x86/insn: Add AMX instructions to the x86 instruction decoder (Adrian Hunter)  [Orabug: 37249457]
  - intel_idle: add Granite Rapids Xeon support (Artem Bityutskiy)  [Orabug: 37249457]
  - cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again* (Peter Zijlstra)  [Orabug: 37249457]
  - intel_idle: Fix false positive RCU splats due to incorrect hardirqs state (Waiman Long)  [Orabug: 37249457]
  - cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE (Peter Zijlstra)  [Orabug: 37249457]
  - intel_idle: Add a new flag to initialize the AMX state (Chang S. Bae)  [Orabug: 37249457]
  - x86/fpu: Add a helper to prepare AMX state for low-power CPU idle (Chang S. Bae)  [Orabug: 37249457]
  - intel_idle: enable interrupts before C1 on Xeons (Artem Bityutskiy)  [Orabug: 37249457]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-304.171.1.el9uek]
changelog:
  - kpcimgr: assign CPU to handle PCIE transactions during kexec (Joe Dobosenski)  [Orabug: 37295980]
  - kexec: update start address for LPI table data (Joe Dobosenski)  [Orabug: 37295980]
  - kpcimgr: fix flush_icache_range arguments (Joe Dobosenski)  [Orabug: 37295980]
  - embedded2: Enable CONFIG_SQUASHFS_ZSTD to support zstd compression (Joe Dobosenski)  [Orabug: 37295980]
  - embedded2: Support booting an encrypted root filesystem (Joe Dobosenski)  [Orabug: 37295980]
  - Update embedded2 config for UEK7 (Joe Dobosenski)  [Orabug: 37295980]
  - Pensando: kernel config changes for kdump (Rob Gardner)  [Orabug: 34091165] [Orabug: 37295980]
  - arm64: Reserve elfcorehdr before scanning reserved memory from device tree (Joe Dobosenski)  [Orabug: 37295980]
  - arm64: kexec: add support for kexec with spin-table (Henry Willard)  [Orabug: 32549965] [Orabug: 37295980]
  - drivers/soc/pensando/cap_mem.c: Support DM region mapping. (David Clear)  [Orabug: 37295980]
  - drivers/edac: elba: Support multiple DDR bypass ranges. (David Clear)  [Orabug: 37295980]
  - mmc: sdhci-cadence: Enable host driver defined bounce buffer (Brad Larson)  [Orabug: 37295980]
  - Fix NULL pointer dereference in cn_filter() (Anjali Kulkarni)  [Orabug: 37280567]
  - selftests: connector: Fix input argument error paths to skip (Shuah Khan)  [Orabug: 37280567]
  - connector/cn_proc: Selftest for proc connector (Anjali Kulkarni)  [Orabug: 37280567]
  - connector/cn_proc: Allow non-root users access (Anjali Kulkarni)  [Orabug: 37280567]
  - connector/cn_proc: Performance improvements (Anjali Kulkarni)  [Orabug: 37280567]
  - connector/cn_proc: Add filtering to fix some bugs (Anjali Kulkarni)  [Orabug: 37280567]
  - netlink: Add new netlink_release function (Anjali Kulkarni)  [Orabug: 37280567]
  - ice: Add netif_device_attach/detach into PF reset flow (Dawid Osuchowski)  [Orabug: 37214589] {CVE-2024-46770}


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-304.171.2.el9uek]
changelog:
  - uek-rpm: Add mstflint_access module to the core list (Thomas Tai)  [Orabug: 37345530]
  - uek-rpm/ol8/config-aarch64-emb3: Enable CONFIG_ARM_SDE_INTERFACE (Thomas Tai)  [Orabug: 37345530]
  - sunrpc: fix a NULL deref in svc_process() when ->sv_stats doesn't exist (Calum Mackay)  [Orabug: 37329531]
  - Partial revert "rds: Add inc/frag cache statistics" (Hans Westgaard Ry)  [Orabug: 37232315]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-304.171.3.el9uek]
changelog:
  - build: populate modules_thick.builtin for dirs containing only modules (Nick Alcock)  [Orabug: 37381702]
  - mtd: fix use-after-free in mtd release (Alexander Usyskin)  [Orabug: 37371929]
  - mtd: Clean refcounting with MTD_PARTITIONED_MASTER (Miquel Raynal)  [Orabug: 37371929]
  - mtd: call external _get and _put in right order (Alexander Usyskin)  [Orabug: 37371929]
  - nvmem: core: Check input parameter for NULL in nvmem_unregister() (Andy Shevchenko)  [Orabug: 37371929]
  - Revert "ocfs2: fix the la space leak when unmounting an ocfs2 volume" (Sherry Yang)  [Orabug: 37364544]
  - x86/pkeys: Ensure updated PKRU value is XRSTOR'd (Aruna Ramakrishna)  [Orabug: 37361290]
  - x86/pkeys: Change caller of update_pkru_in_sigframe() (Aruna Ramakrishna)  [Orabug: 37361290]
  - cgroup: cgroup-v1: do not exclude cgrp_dfl_root (Vishal Verma)  [Orabug: 37347419]
  - mm/memcontrol: Fix memcg stat calculation (Aruna Ramakrishna)  [Orabug: 37306542]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-304.171.4.el9uek]
changelog:
  - Revert "unicode: Don't special case ignorable code points" (Linus Torvalds)
  - Revert "mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K" (Aurelien Jarno)
  - tcp: Fix use-after-free of nreq in reqsk_timer_handler(). (Kuniyuki Iwashima) [Orabug: 37434606] {CVE-2024-53206}
  - lib/buildid: Fix build ID parsing logic (Jiri Olsa)
  - powerpc/vdso: Flag VDSO64 entry points as functions (Christophe Leroy)
  - mm: krealloc: Fix MTE false alarm in __do_krealloc (Qun-Wei Lin) [Orabug: 37331938] {CVE-2024-53097}
  - Revert "ALSA: hda/conexant: Mute speakers at suspend / shutdown" (Jarosław Janik)
  - usb: dwc3: fix fault at system suspend if device was already runtime suspended (Roger Quadros) [Orabug: 37304834] {CVE-2024-53070}
  - ACPI: PRM: Clean up guid type in struct prm_handler_info (Dan Carpenter)
  - RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg() (Junxian Huang) [Orabug: 37434622] {CVE-2024-53226}
  - mm: revert "mm: shmem: fix data-race in shmem_getattr()" (Andrew Morton)
  - ACPI: CPPC: Fix _CPC register setting issue (Lifeng Zheng)
  - scsi: qla2xxx: Fix abort in bsg timeout (Quinn Tran)
  - drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported (Antonio Quartulli) [Orabug: 37304753] {CVE-2024-53060}
  - RDMA/bnxt_re: Check cqe flags to know imm_data vs inv_irkey (Kashyap Desai)
  - vhost_scsi: log write descriptors (Dongli Zhang)  [Orabug: 37393531]
  - vhost-scsi: protect vq->log_base with vq->mutex (Dongli Zhang)  [Orabug: 37393531]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-305.171.1.el9uek]
changelog:
  - octeontx2-af: Fix CPT AF register offset calculation (Bharat Bhushan)  [Orabug: 37445471]
  - perf/arm-cmn: Remove for loop intial declarations (Dave Kleikamp)  [Orabug: 37409090]
  - perf/arm-cmn: Ensure port and device id bits are set properly (Namhyung Kim)  [Orabug: 37409090]
  - perf/arm-cmn: Improve format attr printing (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Clean up unnecessary NUMA_NO_NODE check (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Support CMN S3 (Robin Murphy)  [Orabug: 37409090]
  - dt-bindings: perf: arm-cmn: Add CMN S3 (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Refactor DTC PMU register access (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Make cycle counts less surprising (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Improve build-time assertion (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Ensure dtm_idx is big enough (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Fix CCLA register offset (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Refactor node ID handling. Again. (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Enable support for tertiary match group (Ilkka Koskinen)  [Orabug: 37409090]
  - perf/arm-cmn: Decouple wp_config registers from filter group number (Ilkka Koskinen)  [Orabug: 37409090]
  - perf/arm-cmn: Workaround AmpereOneX errata AC04_MESH_1 (incorrect child count) (Ilkka Koskinen)  [Orabug: 37409090]
  - perf/arm-cmn: Improve debugfs pretty-printing for large configs (Robin Murphy)  [Orabug: 37409090]
  - perf: arm-cmn: Convert to platform remove callback returning void (Uwe Kleine-König)  [Orabug: 37409090]
  - perf/arm-cmn: Fail DTC counter allocation correctly (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Fix HN-F class_occup_id events (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Enable per-DTC counter allocation (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Rework DTC counters (again) (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Fix DTC domain detection (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Add CMN-700 r3 support (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Refactor HN-F event selector macros (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Remove spurious event aliases (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Add sysfs identifier (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Revamp model detection (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Fix port detection for CMN-700 (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Validate cycles events fully (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Move overlapping wp_combine field (Ilkka Koskinen)  [Orabug: 37409090]
  - Partially revert "perf/arm-cmn: Optimise DTC counter accesses" (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Reset DTM_PMU_CONFIG at probe (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Decode CAL devices properly in debugfs (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Fix filter_sel lookup (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Add CMN-700 support (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Refactor occupancy filter selector (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Add CMN-650 support (Robin Murphy)  [Orabug: 37409090]
  - dt-bindings: perf: arm-cmn: Add CMN-650 and CMN-700 (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Update watchpoint format (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Hide XP PUB events for CMN-600 (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Make arm_cmn_debugfs static (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Add debugfs topology info (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Add CI-700 Support (Robin Murphy)  [Orabug: 37409090]
  - dt-bindings: perf: arm-cmn: Add CI-700 (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Support new IP features (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Demarcate CMN-600 specifics (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Move group validation data off-stack (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Optimise DTC counter accesses (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Optimise DTM counter reads (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Refactor DTM handling (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Streamline node iteration (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Refactor node ID handling (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Drop compile-test restriction (Robin Murphy)  [Orabug: 37409090]
  - perf/arm-cmn: Account for NUMA affinity (Robin Murphy)  [Orabug: 37409090]
  - Acquire mem_cgroup_per_node.lruvec locks for online nodes only. (Imran Khan)  [Orabug: 37405595]
  - Fix issues seen with mail thread patches. (Imran Khan)  [Orabug: 37405595]
  - mm: lru: use lruvec lock to serialize memcg changes (Muchun Song)  [Orabug: 37405595]
  - mm: lru: add VM_BUG_ON_PAGE to lru maintenance function (Muchun Song)  [Orabug: 37405595]
  - mm: memcontrol: rename {un}lock_page_memcg() to {un}lock_page_objcg() (Muchun Song)  [Orabug: 37405595]
  - mm: memcontrol: use obj_cgroup APIs to charge the LRU pages (Muchun Song)  [Orabug: 37405595]
  - mm: memcontrol: introduce memcg_reparent_ops (Muchun Song)  [Orabug: 37405595]
  - mm: memcontrol: make all the callers of page_memcg() safe (Muchun Song)  [Orabug: 37405595]
  - mm: thp: make split queue lock safe when LRU pages reparented (Muchun Song)  [Orabug: 37405595]
  - mm: thp: introduce split_queue_lock/unlock{_irqsave}() (Muchun Song)  [Orabug: 37405595]
  - mm: vmscan: rework move_pages_to_lru() (Muchun Song)  [Orabug: 37405595]
  - mm: memcontrol: make lruvec lock safe when the LRU pages reparented (Muchun Song)  [Orabug: 37405595]
  - mm: memcontrol: introduce compact_lock_page_irqsave (Muchun Song)  [Orabug: 37405595]
  - mm: memcontrol: prepare objcg API for non-kmem usage (Muchun Song)  [Orabug: 37405595]
  - mm: move mem_cgroup_kmem_disabled() to memcontrol.h (Muchun Song)  [Orabug: 37405595]
  - Uek-rpm/ol9: Enable CONFIG_FIPS_SIGNATURE_SELFTEST for mips64 (Vijay Kumar)  [Orabug: 37390881]
  - sfc: Fix an error handling path in efx_pci_probe() (Christophe JAILLET)  [Orabug: 37384497]
  - sfc: Separate netdev probe/remove from PCI probe/remove (Jonathan Cooper)  [Orabug: 37384497]
  - sfc: replace function name in string with __func__ (Jonathan Cooper)  [Orabug: 37384497]
  - sfc: Unsplit literal string. (Jonathan Cooper)  [Orabug: 37384497]
  - sfc: Move EF100 efx_nic_type structs to the end of the file (Jonathan Cooper)  [Orabug: 37384497]
  - sfc: Separate efx_nic memory from net_device memory (Jonathan Cooper)  [Orabug: 37384497]
  - sfc: Encapsulate access to netdev_priv() (Jonathan Cooper)  [Orabug: 37384497]
  - sfc: Add a PROBED state for EF100 VDPA use. (Jonathan Cooper)  [Orabug: 37384497]
  - ACPICA: Allow PCC Data Type in MCTP resource. (Adam Young)  [Orabug: 37311726]
  - ACPICA: Avoid undefined behavior: member access within misaligned address (Tamir Duberstein)  [Orabug: 37311726]
  - arm64: errata: Enable the AC03_CPU_38 workaround for ampere1a (D Scott Phillips)  [Orabug: 37311726]
  - arm64: Expose the end of the linear map in PHYSMEM_END (D Scott Phillips)  [Orabug: 37311726]
  - seqcount: replace smp_rmb() in read_seqcount() with load acquire (Christoph Lameter (Ampere))  [Orabug: 37311726]
  - uek-rpm: Enable new config options for Ampere (Dave Kleikamp)  [Orabug: 37311726]
  - vmalloc: modify the alloc_vmap_area() error message for better diagnostics (Shubhang Kaushik OS)  [Orabug: 37311726]
  - NUMA: early use of cpu_to_node() returns 0 instead of the correct node id (Huang Shijie)  [Orabug: 37311726]
  - mm: mmap: no need to call khugepaged_enter_vma() for stack (Yang Shi)  [Orabug: 37311726]
  - crash_core: export vmemmap when CONFIG_SPARSEMEM_VMEMMAP is enabled (Huang Shijie)  [Orabug: 37311726]
  - PCI: acpiphp: Allow built-in drivers for Attention Indicators (D Scott Phillips)  [Orabug: 37311726]
  - PCI: acpiphp: Add missing MODULE_DESCRIPTION() macro (Jeff Johnson)  [Orabug: 37311726]
  - PCI: hotplug: Add Ampere Altra Attention Indicator extension driver (D Scott Phillips)  [Orabug: 37311726]
  - mm: mempolicy: keep VMA walk if both MPOL_MF_STRICT and MPOL_MF_MOVE are specified (Yang Shi)  [Orabug: 37311726]
  - arm64: compat: Work around uninitialized variable warning (Ard Biesheuvel)  [Orabug: 37311726]
  - arm64: compat: Implement misalignment fixups for multiword loads (Ard Biesheuvel)  [Orabug: 37311726]
  - RDMA/mlx5: Expose vhca id for all ports in multiport mode (Mark Bloch)  [Orabug: 37234285]
  - rds/ib: avoid scq/rcq polling during rds connection shutdown (Arumugam Kolappan)  [Orabug: 37055939]
  - RDMA/mlx5: Send UAR page index as ioctl attribute (Akiva Goldberger)  [Orabug: 37029766]
  - RDMA: Pass entire uverbs attr bundle to create cq function (Akiva Goldberger)  [Orabug: 37029766]
  - net/mlx5e: Fix CT entry update leaks of modify header context (Chris Mi)  [Orabug: 36948578] {CVE-2024-43864}
  - net/mlx5e: Require mlx5 tc classifier action support for IPsec prio capability (Rahul Rameshbabu)  [Orabug: 36948578]
  - net/mlx5: Fix missing lock on sync reset reload (Moshe Shemesh)  [Orabug: 36948578] {CVE-2024-42268}
  - net/mlx5: Lag, don't use the hardcoded value of the first port (Mark Bloch)  [Orabug: 36948578]
  - mlxsw: core_linecards: Fix double memory deallocation in case of invalid INI file (Aleksandr Mishin)  [Orabug: 36948578] {CVE-2024-42138}
  - net/mlx5e: Add mqprio_rl cleanup and free in mlx5e_priv_cleanup() (Jianbo Liu)  [Orabug: 36948578]
  - net/mlx5: E-switch, Create ingress ACL when needed (Chris Mi)  [Orabug: 36948578]
  - mlxsw: spectrum_buffers: Fix memory corruptions on Spectrum-4 systems (Ido Schimmel)  [Orabug: 36948578] {CVE-2024-42073}
  - RDMA/mlx5: Fix unwind flow as part of mlx5_ib_stage_init_init (Yishai Hadas)  [Orabug: 36948578]
  - RDMA/mlx5: Ensure created mkeys always have a populated rb_key (Jason Gunthorpe)  [Orabug: 36948578]
  - RDMA/mlx5: Follow rb_key.ats when creating new mkeys (Jason Gunthorpe)  [Orabug: 36948578]
  - RDMA/mlx5: Remove extra unlock on error path (Jason Gunthorpe)  [Orabug: 36948578]
  - net: wwan: iosm: Fix tainted pointer delete is case of region creation fail (Aleksandr Mishin)  [Orabug: 36948578] {CVE-2024-40939}
  - net/mlx5: Always stop health timer during driver removal (Shay Drory)  [Orabug: 36948578] {CVE-2024-40906}
  - net/mlx5: Fix MTMP register capability offset in MCAM register (Gal Pressman)  [Orabug: 36948578]
  - net/mlx5e: Advertise mlx5 ethernet driver updates sk_buff md_dst for MACsec (Rahul Rameshbabu)  [Orabug: 36948578]
  - mlxsw: core_env: Fix driver initialization with old firmware (Ido Schimmel)  [Orabug: 36948578]
  - net/mlx5: Lag, restore buckets number to default after hash LAG deactivation (Shay Drory)  [Orabug: 36948578]
  - net/mlx5e: Do not produce metadata freelist entries in Tx port ts WQE xmit (Rahul Rameshbabu)  [Orabug: 36948578]
  - RDMA/mlx5: Change check for cacheable mkeys (Or Har-Toov)  [Orabug: 36948578]
  - RDMA/mlx5: Uncacheable mkey has neither rb_key or cache_ent (Or Har-Toov)  [Orabug: 36948578]
  - mlx5: avoid truncating error message (Arnd Bergmann)  [Orabug: 36948578]
  - net/mlx5: Check capability for fw_reset (Moshe Shemesh)  [Orabug: 36948578]
  - net/mlx5: SF, Stop waiting for FW as teardown was called (Moshe Shemesh)  [Orabug: 36948578]
  - netlink: Correct offload_xstats size (Christoph Paasch)  [Orabug: 36948578]
  - net: fix net_dev_start_xmit trace event vs skb_transport_offset() (Eric Dumazet)  [Orabug: 36948578]
  - lib/bitmap: drop optimization of bitmap_{from,to}_arr64 (Yury Norov)  [Orabug: 36948578]
  - net: macsec: fix double free of percpu stats (Fedor Pchelkin)  [Orabug: 36948578]
  - tcp: gso: really support BIG TCP (Eric Dumazet)  [Orabug: 36948578]
  - RDMA/mlx5: Use rdma_umem_for_each_dma_block() (Jason Gunthorpe)  [Orabug: 36948578]
  - nfp: flower: fix ingress police using matchall filter (Tianyu Yuan)  [Orabug: 36948578]
  - lib/bitmap: fix off-by-one in bitmap_to_arr64() (Alexander Lobakin)  [Orabug: 36948578]
  - RDMA/mlx5: Fix flow steering egress flow (Leon Romanovsky)  [Orabug: 36948578]
  - rtnetlink: Fix handling of disabled L3 stats in RTM_GETSTATS replies (Petr Machata)  [Orabug: 36948578]
  - tun: annotate access to queue->trans_start (Antoine Tenart)  [Orabug: 36948578]
  - xsk: Do not write NULL in SW ring at allocation failure (Magnus Karlsson)  [Orabug: 36948578]
  - net/sched: fix incorrect vlan_push_eth dest field (Louis Peens)  [Orabug: 36948578]
  - RDMA/nldev: Prevent underflow in nldev_stat_set_counter_dynamic_doit() (Dan Carpenter)  [Orabug: 36948578]
  - net_tstamp: define new flag HWTSTAMP_FLAG_BONDED_PHC_INDEX (Hangbin Liu)  [Orabug: 36948578]
  - net: add missing include in include/net/gro.h (Eric Dumazet)  [Orabug: 36948578]
  - IB/hfi1: Properly allocate rdma counter desc memory (Dennis Dalessandro)  [Orabug: 36948578]
  - xsk: Initialise xskb free_list_node (Ciara Loftus)  [Orabug: 36948578]
  - xsk: Fix crash on double free in buffer pool (Magnus Karlsson)  [Orabug: 36948578]
  - KVM: x86: WARN only once if KVM leaves a dangling userspace I/O request (Sean Christopherson)  [Orabug: 36815282]
  - KVM: x86: Suppress pending MMIO write exits if emulator detects exception (Sean Christopherson)  [Orabug: 36815282]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-305.171.2.el9uek]
changelog:
  - rds: ib: Avoid UAF on RDS Socket's rs_trans_lock (Håkon Bugge)  [Orabug: 37475726]  
  - rds: ib: Fix blocked processes related to race in rds_rdma_free_dev_rs_worker() (Håkon Bugge)  [Orabug: 37475726]  
  - rds: ib: Fix deterministic UAF in rds_rdma_free_dev_rs_worker() (Håkon Bugge)  [Orabug: 37475726]  
  - uek-misc: Define a prefix for uek module messages (Alejandro Jimenez)  [Orabug: 37459411]  
  - uek-misc: Clear the AVIC capability on platforms with known errata (Alejandro Jimenez)  [Orabug: 37459411]  
  - uek-misc: Add identification for OCI platform (Alejandro Jimenez)  [Orabug: 37459411]  
  - Revert "MIPS: do not call flush_tlb_all when setting pmd entry" (Vijay Kumar)  [Orabug: 37454162]  
  - cpufreq: intel_pstate: Support highest performance change interrupt (Srinivas Pandruvada)  [Orabug: 37426908]  
  - x86/cpufeatures: Add HWP highest perf change feature flag (Srinivas Pandruvada)  [Orabug: 37426908]  
  - cpufreq: intel_pstate: Get rid of unnecessary READ_ONCE() annotations (Rafael J. Wysocki)  [Orabug: 37426908]  
  - cpufreq: intel_pstate: Wait for canceled delayed work to complete (Rafael J. Wysocki)  [Orabug: 37426908]  
  - cpufreq: intel_pstate: Simplify spinlock locking (Rafael J. Wysocki)  [Orabug: 37426908]  
  - cpufreq: intel_pstate: Update cpuinfo.max_freq on HWP_CAP changes (Rafael J. Wysocki)  [Orabug: 37426908]  
  - uek-rpm: Enable CONFIG_FIPS_SIGNATURE_SELFTEST for all archs (Saeed Mirzamohammadi)  [Orabug: 37400483]  
  - uek-rpm: set DEFAULTKERNEL to other installed uek if possible (Sherry Yang)  [Orabug: 37399094]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-305.171.2.el9uek]
changelog:
  - rds: ib: Avoid UAF on RDS Socket's rs_trans_lock (Håkon Bugge)  [Orabug: 37475726]
  - rds: ib: Fix blocked processes related to race in rds_rdma_free_dev_rs_worker() (Håkon Bugge)  [Orabug: 37475726]
  - rds: ib: Fix deterministic UAF in rds_rdma_free_dev_rs_worker() (Håkon Bugge)  [Orabug: 37475726]
  - uek-misc: Define a prefix for uek module messages (Alejandro Jimenez)  [Orabug: 37459411]
  - uek-misc: Clear the AVIC capability on platforms with known errata (Alejandro Jimenez)  [Orabug: 37459411]
  - uek-misc: Add identification for OCI platform (Alejandro Jimenez)  [Orabug: 37459411]
  - Revert "MIPS: do not call flush_tlb_all when setting pmd entry" (Vijay Kumar)  [Orabug: 37454162]
  - cpufreq: intel_pstate: Support highest performance change interrupt (Srinivas Pandruvada)  [Orabug: 37426908]
  - x86/cpufeatures: Add HWP highest perf change feature flag (Srinivas Pandruvada)  [Orabug: 37426908]
  - cpufreq: intel_pstate: Get rid of unnecessary READ_ONCE() annotations (Rafael J. Wysocki)  [Orabug: 37426908]
  - cpufreq: intel_pstate: Wait for canceled delayed work to complete (Rafael J. Wysocki)  [Orabug: 37426908]
  - cpufreq: intel_pstate: Simplify spinlock locking (Rafael J. Wysocki)  [Orabug: 37426908]
  - cpufreq: intel_pstate: Update cpuinfo.max_freq on HWP_CAP changes (Rafael J. Wysocki)  [Orabug: 37426908]
  - uek-rpm: Enable CONFIG_FIPS_SIGNATURE_SELFTEST for all archs (Saeed Mirzamohammadi)  [Orabug: 37400483]
  - uek-rpm: set DEFAULTKERNEL to other installed uek if possible (Sherry Yang)  [Orabug: 37399094]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-305.176.3.el9uek]
changelog:
  - LTS version: v5.15.176 (Vijayendra Suman)   
  - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa)   
  - dt-bindings: display: adi,adv7533: Drop single lane support (Biju Das)   
  - drm: adv7511: Drop dsi single lane support (Biju Das)   
  - net/sctp: Prevent autoclose integer overflow in sctp_association_init() (Nikolay Kuratov)   
  - sky2: Add device ID 11ab:4373 for Marvell 88E8075 (Pascal Hambourg)   
  - pinctrl: mcp23s08: Fix sleeping in atomic context due to regmap locking (Evgenii Shatokhin)   
  - RDMA/uverbs: Prevent integer overflow issue (Dan Carpenter)   
  - kcov: mark in_softirq_really() as __always_inline (Arnd Bergmann)   
  - modpost: fix the missed iteration for the max bit in do_input() (Masahiro Yamada)   
  - modpost: fix input MODULE_DEVICE_TABLE() built for 64-bit on 32-bit host (Masahiro Yamada)   
  - usb: xhci: Avoid queuing redundant Stop Endpoint commands (Michal Pecio)   
  - ARC: build: Try to guess GCC variant of cross compiler (Leon Romanovsky)   
  - irqchip/gic: Correct declaration of *percpu_base pointer in union gic_base (Uros Bizjak)   
  - net: usb: qmi_wwan: add Telit FE910C04 compositions (Daniele Palmas)   
  - bpf: fix potential error return (Anton Protopopov)   
  - sound: usb: format: don't warn that raw DSD is unsupported (Adrian Ratiu)   
  - sound: usb: enable DSD output for ddHiFi TC44C (Adrian Ratiu)   
  - btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount (Filipe Manana)   
  - drm/amdkfd: Correct the migration DMA map direction (Prike Liang)   
  - wifi: mac80211: wake the queues in case of failure in resume (Emmanuel Grumbach)   
  - btrfs: sysfs: fix direct super block member reads (Qu Wenruo)   
  - btrfs: sysfs: convert scnprintf and snprintf to sysfs_emit (Anand Jain)   
  - btrfs: fix use-after-free when COWing tree bock and tracing is enabled (Filipe Manana)   
  - btrfs: rename and export __btrfs_cow_block() (Filipe Manana)   
  - ila: serialize calls to nf_register_net_hooks() (Eric Dumazet)   
  - af_packet: fix vlan_get_protocol_dgram() vs MSG_PEEK (Eric Dumazet)   
  - af_packet: fix vlan_get_tci() vs MSG_PEEK (Eric Dumazet)   
  - net: wwan: iosm: Properly check for valid exec stage in ipc_mmio_init() (Maciej S. Szmigiero)   
  - net: restrict SO_REUSEPORT to inet sockets (Eric Dumazet)   
  - RDMA/rtrs: Ensure 'ib_sge list' is accessible (Li Zhijian)   
  - net: mv643xx_eth: fix an OF node reference leak (Joe Hattori)   
  - eth: bcmsysport: fix call balance of priv->clk handling routines (Vitalii Mordan)   
  - ALSA: usb-audio: US16x08: Initialize array before use (Tanya Agarwal)   
  - net: llc: reset skb->transport_header (Antonio Pastor)   
  - netfilter: nft_set_hash: unaligned atomic read on struct nft_set_ext (Pablo Neira Ayuso)   
  - drm/i915/dg1: Fix power gate sequence. (Rodrigo Vivi)   
  - netrom: check buffer length before accessing it (Ilya Shchipletsov)   
  - net: fix memory leak in tcp_conn_request() (Wang Liang)   
  - net: stmmac: restructure the error path of stmmac_probe_config_dt() (Joe Hattori)   
  - net: stmmac: don't create a MDIO bus if unnecessary (Andrew Halaney)   
  - net: stmmac: platform: provide devm_stmmac_probe_config_dt() (Bartosz Golaszewski)   
  - RDMA/hns: Fix missing flush CQE for DWQE (Chengchang Tang)   
  - RDMA/hns: Fix warning storm caused by invalid input in IO path (Chengchang Tang)   
  - RDMA/hns: Fix mapping error of zero-hop WQE buffer (wenglianfa)   
  - RDMA/hns: Remove redundant 'bt_level' for hem_list_alloc_item() (Yunsheng Lin)   
  - RDMA/hns: Remove redundant 'attr_mask' in modify_qp_init_to_init() (Yixing Liu)   
  - drm/bridge: adv7511_audio: Update Audio InfoFrame properly (Stefan Ekenberg)   
  - RDMA/bnxt_re: Fix the locking while accessing the QP table (Selvin Xavier)   
  - RDMA/bnxt_re: Fix max_qp_wrs reported (Selvin Xavier)   
  - RDMA/bnxt_re: Fix reporting hw_ver in query_device (Kalesh AP)   
  - RDMA/bnxt_re: Add check for path mtu in modify_qp (Saravanan Vajravel)   
  - RDMA/mlx5: Enforce same type port association for multiport RoCE (Patrisious Haddad)   
  - xhci: Turn NEC specific quirk for handling Stop Endpoint errors generic (Mathias Nyman)   
  - usb: xhci: Limit Stop Endpoint retries (Michal Pecio)   
  - xhci: retry Stop Endpoint on buggy NEC controllers (Michal Pecio)   
  - thunderbolt: Add support for Intel Panther Lake-M/P (Mika Westerberg)   
  - thunderbolt: Add support for Intel Lunar Lake (Mika Westerberg)   
  - thunderbolt: Add Intel Barlow Ridge PCI ID (Mika Westerberg)   
  - thunderbolt: Add support for Intel Meteor Lake (Mika Westerberg)   
  - thunderbolt: Add support for Intel Raptor Lake (George D Sworo)   
  - tracing: Have process_string() also allow arrays (Steven Rostedt)   
  - selinux: ignore unknown extended permissions (Thiébaud Weksteen)   
  - x86/hyperv: Fix hv tsc page based sched_clock for hibernation (Naman Jain)   
  - net: dsa: improve shutdown sequence (Vladimir Oltean)   
  - nfsd: cancel nfsd_shrinker_work using sync mode in nfs4_state_shutdown_net (Yang Erkun)   
  - btrfs: avoid monopolizing a core when activating a swap file (Filipe Manana)   
  - power: supply: gpio-charger: Fix set charge current limits (Dimitri Fedrau)   
  - tracing: Prevent bad count for tracing_cpumask_write (Lizhi Xu)   
  - tracing: Constify string literal data member in struct trace_event_call (Christian Göttsche)   
  - ksmbd: fix racy issue from session lookup and expire (Namjae Jeon)   
  - lib: stackinit: hide never-taken branch from compiler (Kees Cook)   
  - drm/dp_mst: Verify request type in the corresponding down message reply (Imre Deak)   
  - arm64: Ensure bits ASID[15:8] are masked out when the kernel uses 8-bit ASIDs (Catalin Marinas)   
  - arm64: mm: Rename asid2idx() to ctxid2asid() (Yunfeng Ye)   
  - ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write (Jordy Zomer)   
  - ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read (Jordy Zomer)   
  - drm/dp_mst: Fix MST sideband message body length check (Imre Deak)   
  - bpf: Check validity of link->type in bpf_link_show_fdinfo() (Hou Tao)   
  - MIPS: Probe toolchain support of -msym32 (Jiaxun Yang)   
  - vmalloc: fix accounting with i915 (Matthew Wilcox (Oracle))   
  - virtio-blk: don't keep queue frozen during system suspend (Ming Lei)   
  - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (Cathy Avery)   
  - scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load time (Ranjan Kumar)   
  - platform/x86: asus-nb-wmi: Ignore unknown event 0xCF (Armin Wolf)   
  - regmap: Use correct format specifier for logging range errors (Mark Brown)   
  - ALSA: hda/conexant: fix Z60MR100 startup pop issue (bo liu)   
  - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl)   
  - scsi: qla1280: Fix hw revision numbering for ISP1020/1040 (Magnus Lindholm)   
  - watchdog: it87_wdt: add PWRGD enable quirk for Qotom QCML04 (James Hilliard)   
  - tracing/kprobe: Make trace_kprobe's module callback called after jump_label update (Masami Hiramatsu (Google))   
  - mtd: rawnand: fix double free in atmel_pmecc_create_user() (Dan Carpenter)   
  - dmaengine: at_xdmac: avoid null_prt_deref in at_xdmac_prep_dma_memset (Chen Ridong)   
  - dmaengine: dw: Select only supported masters for ACPI devices (Andy Shevchenko)   
  - dmaengine: mv_xor: fix child node refcount handling in early exit (Javier Carrasco)   
  - phy: core: Fix that API devm_phy_destroy() fails to destroy the phy (Zijun Hu)   
  - phy: core: Fix that API devm_of_phy_provider_unregister() fails to unregister the phy provider (Zijun Hu)   
  - phy: core: Fix that API devm_phy_put() fails to release the phy (Zijun Hu)   
  - phy: core: Fix an OF node refcount leakage in of_phy_provider_lookup() (Zijun Hu)   
  - phy: core: Fix an OF node refcount leakage in _of_phy_get() (Zijun Hu)   
  - mtd: rawnand: arasan: Fix missing de-registration of NAND (Maciej Andrzejewski)   
  - mtd: rawnand: arasan: Fix double assertion of chip-select (Maciej Andrzejewski)   
  - mtd: diskonchip: Cast an operand to prevent potential overflow (Zichen Xie)   
  - nfsd: restore callback functionality for NFSv4.0 (NeilBrown)   
  - bpf: Check negative offsets in __bpf_skb_min_len() (Cong Wang)   
  - tcp_bpf: Add sk_rmem_alloc related logic for tcp_bpf ingress redirection (Zijian Zhang)   
  - tcp_bpf: Charge receive socket buffer in bpf_tcp_ingress() (Cong Wang)   
  - mm/vmstat: fix a W=1 clang compiler warning (Bart Van Assche)   
  - media: dvb-frontends: dib3000mb: fix uninit-value in dib3000_write_reg (Nikita Zhandarovich)   
  - drm/amdgpu: Handle NULL bo->tbo.resource (again) in amdgpu_vm_bo_update (Michel Dänzer)   
  - epoll: Add synchronous wakeup support for ep_poll_callback (Xuewen Yan)   
  - ceph: validate snapdirname option length when mounting (Ilya Dryomov)   
  - of: Fix refcount leakage for OF node returned by __of_get_dma_parent() (Zijun Hu)   
  - of: Fix error path in of_parse_phandle_with_args_map() (Herve Codina)   
  - udmabuf: also check for F_SEAL_FUTURE_WRITE (Jann Horn)   
  - nilfs2: prevent use of deleted inode (Edward Adam Davis)   
  - of/irq: Fix using uninitialized variable @addr_len in API of_irq_parse_one() (Zijun Hu)   
  - NFS/pnfs: Fix a live lock between recalled layouts and layoutget (Trond Myklebust)   
  - tracing: Add "%s" check in test_event_printk() (Steven Rostedt)   
  - tracing: Add missing helper functions in event pointer dereference check (Steven Rostedt)   
  - tracing: Fix test_event_printk() to process entire print argument (Steven Rostedt)   
  - KVM: x86: Play nice with protected guests in complete_hypercall_exit() (Sean Christopherson)   
  - Drivers: hv: util: Avoid accessing a ringbuffer not initialized yet (Michael Kelley)   
  - btrfs: tree-checker: reject inline extent items with 0 ref count (Qu Wenruo)   
  - zram: refuse to use zero sized block device as backing device (Kairui Song)   
  - sh: clk: Fix clk_enable() to return 0 on NULL clk (Geert Uytterhoeven)   
  - hwmon: (tmp513) Fix interpretation of values of Temperature Result and Limit Registers (Murad Masimov)   
  - hwmon: (tmp513) Fix Current Register value interpretation (Murad Masimov)   
  - hwmon: (tmp513) Fix interpretation of values of Shunt Voltage and Limit Registers (Murad Masimov)   
  - hwmon: (tmp513) Use SI constants from units.h (Andy Shevchenko)   
  - hwmon: (tmp513) Simplify with dev_err_probe() (Andy Shevchenko)   
  - hwmon: (tmp513) Don't use "proxy" headers (Andy Shevchenko)   
  - drm/modes: Avoid divide by zero harder in drm_mode_vrefresh() (Ville Syrjälä)   
  - USB: serial: option: add Telit FE910C04 rmnet compositions (Daniele Palmas)   
  - USB: serial: option: add MediaTek T7XX compositions (Jack Wu)   
  - USB: serial: option: add Netprisma LCUK54 modules for WWAN Ready (Mank Wang)   
  - USB: serial: option: add MeiG Smart SLM770A (Michal Hrusecky)   
  - USB: serial: option: add TCL IK512 MBIM & ECM (Daniel Swanemar)   
  - efivarfs: Fix error on non-existent file (James Bottomley)   
  - i2c: riic: Always round-up when calculating bus period (Geert Uytterhoeven)   
  - chelsio/chtls: prevent potential integer overflow on 32bit (Dan Carpenter)   
  - mmc: sdhci-tegra: Remove SDHCI_QUIRK_BROKEN_ADMA_ZEROLEN_DESC quirk (Prathamesh Shete)   
  - net: mdiobus: fix an OF node reference leak (Joe Hattori)   
  - netfilter: ipset: Fix for recursive locking warning (Phil Sutter)   
  - net: ethernet: bgmac-platform: fix an OF node reference leak (Joe Hattori)   
  - net: hinic: Fix cleanup in create_rxqs/txqs() (Dan Carpenter)   
  - ionic: use ee->offset when returning sprom data (Shannon Nelson)   
  - ionic: Fix netdev notifier unregister on failure (Brett Creeley)   
  - netdevsim: prevent bad user input in nsim_dev_health_break_write() (Eric Dumazet)   
  - net/smc: check return value of sock_recvmsg when draining clc data (Guangguan Wang)   
  - net/smc: check smcd_v2_ext_offset when receiving proposal msg (Guangguan Wang)   
  - net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg (Guangguan Wang)   
  - net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll (Guangguan Wang)   
  - erofs: fix incorrect symlink detection in fast symlink (Gao Xiang)   
  - i2c: pnx: Fix timeout in wait functions (Vladimir Riabchun)   
  - usb: dwc2: gadget: Don't write invalid mapped sg entries into dma_desc with iommu enabled (Peng Hongchi)   
  - MIPS: Loongson64: DTS: Fix msi node for ls7a (Jiaxun Yang)   
  - PCI: Add ACS quirk for Broadcom BCM5760X NIC (Ajit Khaparde)   
  - PCI: vmd: Create domain symlink before pci_bus_add_devices() (Jiwei Sun)   
  - ASoC: Intel: sof_sdw: fix jack detection on ADL-N variant RVP (Pierre-Louis Bossart)   
  - usb: cdns3: Add quirk flag to enable suspend residency (Roger Quadros)   
  - ALSA: usb: Fix UBSAN warning in parse_audio_unit() (Takashi Iwai)   
  - PCI/AER: Disable AER service on suspend (Kai-Heng Feng)   
  - PCI: Use preserve_config in place of pci_flags (Vidya Sagar)   
  - net: sched: fix ordering of qlen adjustment (Lion Ackermann)   
  - LTS version: v5.15.175 (Vijayendra Suman)   
  - x86/static-call: fix 32-bit build (Juergen Gross)   
  - ALSA: usb-audio: Fix a DMA to stack memory bug (Dan Carpenter)   
  - x86/xen: remove hypercall page (Juergen Gross)   
  - x86/xen: use new hypercall functions instead of hypercall page (Juergen Gross)   
  - x86/xen: add central hypercall functions (Juergen Gross)   
  - x86/xen: don't do PV iret hypercall through hypercall page (Juergen Gross)   
  - x86/static-call: provide a way to do very early static-call updates (Juergen Gross)   
  - objtool/x86: allow syscall instruction (Juergen Gross)   
  - x86: make get_cpu_vendor() accessible from Xen code (Juergen Gross)   
  - xen/netfront: fix crash when removing device (Juergen Gross)   
  - Revert "parisc: fix a possible DMA corruption" (Greg Kroah-Hartman)   
  - tracing/kprobes: Skip symbol counting logic for module symbols in create_local_trace_kprobe() (Nikolay Kuratov)   
  - bpf: sync_linked_regs() must preserve subreg_def (Eduard Zingerman)   
  - blk-iocost: Avoid using clamp() on inuse in __propagate_weights() (Nathan Chancellor)   
  - ACPICA: events/evxfregn: don't release the ContextMutex that was never acquired (Daniil Tatianin)   
  - team: Fix feature propagation of NETIF_F_GSO_ENCAP_ALL (Daniel Borkmann)   
  - bonding: Fix feature propagation of NETIF_F_GSO_ENCAP_ALL (Daniel Borkmann)   
  - net/sched: netem: account for backlog updates from child qdisc (Martin Ottens)   
  - Documentation: PM: Clarify pm_runtime_resume_and_get() return value (Paul Barker)   
  - qca_spi: Make driver probing reliable (Stefan Wahren)   
  - qca_spi: Fix clock speed for multiple QCA7000 (Stefan Wahren)   
  - cxgb4: use port number to set mac addr (Anumula Murali Mohan Reddy)   
  - ACPI: resource: Fix memory resource type union access (Ilpo Järvinen)   
  - net: sparx5: fix the maximum frame length register (Daniel Machon)   
  - net: sparx5: fix FDMA performance issue (Daniel Machon)   
  - net: lapb: increase LAPB_HEADER_LEN (Eric Dumazet)   
  - ptp: kvm: x86: Return EOPNOTSUPP instead of ENODEV from kvm_arch_ptp_init() (Thomas Weißschuh)   
  - ptp: kvm: Use decrypted memory in confidential guest on x86 (Jeremi Piotrowski)   
  - selftests: mlxsw: sharedbuffer: Remove duplicate test cases (Danielle Ratson)   
  - selftests: mlxsw: sharedbuffer: Remove h1 ingress test case (Danielle Ratson)   
  - tipc: fix NULL deref in cleanup_bearer() (Eric Dumazet)   
  - batman-adv: Do not let TT changes list grows indefinitely (Remi Pommarel)   
  - batman-adv: Remove uninitialized data in full table TT response (Remi Pommarel)   
  - batman-adv: Do not send uninitialized TT changes (Remi Pommarel)   
  - acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl (Suraj Sonawane)   
  - exfat: fix potential deadlock on __exfat_get_dentry_set (Sungjong Seo)   
  - virtio/vsock: Fix accept_queue memory leak (Michal Luczaj)   
  - bpf, sockmap: Fix update element with same (Michal Luczaj)   
  - xfs: fix scrub tracepoints when inode-rooted btrees are involved (Darrick J. Wong)   
  - xfs: return from xfs_symlink_verify early on V4 filesystems (Darrick J. Wong)   
  - xfs: don't drop errno values when we fail to ficlone the entire range (Darrick J. Wong)   
  - xfs: update btree keys correctly when _insrec splits an inode root block (Darrick J. Wong)   
  - drm/i915: Fix memory leak by correcting cache object name in error handler (Jiasheng Jiang)   
  - usb: gadget: u_serial: Fix the issue that gs_start_io crashed due to accessing null pointer (Lianqin Hu)   
  - usb: ehci-hcd: fix call balance of clocks handling routines (Vitalii Mordan)   
  - usb: dwc2: Fix HCD port connection race (Stefan Wahren)   
  - usb: dwc2: hcd: Fix GetPortStatus & SetPortFeature (Stefan Wahren)   
  - usb: dwc2: Fix HCD resume (Stefan Wahren)   
  - ata: sata_highbank: fix OF node reference leak in highbank_initialize_phys() (Joe Hattori)   
  - usb: host: max3421-hcd: Correctly abort a USB request. (Mark Tomlinson)   
  - ALSA: usb-audio: Add implicit feedback quirk for Yamaha THR5 (Jaakko Salo)   
  - tcp: check space before adding MPTCP SYN options (MoYuanhao)   
  - LTS version: v5.15.174 (Vijayendra Suman)   
  - Bluetooth: hci_core: Fix calling mgmt_device_connected (Luiz Augusto von Dentz)   
  - net/smc: Fix af_ops of child socket pointing to released memory (Karsten Graul)   
  - media: venus: vdec: fixed possible memory leak issue (Ameer Hamza)   
  - serial: amba-pl011: fix build regression (Arnd Bergmann)   
  - drm/amdgpu: rework resume handling for display (v2) (Alex Deucher)   
  - drm/amd/display: Correct the defined value for AMDGPU_DMUB_NOTIFICATION_MAX (Wayne Lin)   
  - net: dsa: microchip: correct KSZ8795 static MAC table access (Tristram Ha)   
  - Bluetooth: L2CAP: Fix uaf in l2cap_connect (Luiz Augusto von Dentz)   
  - arm64: smccc: Remove broken support for SMCCCv1.3 SVE discard hint (Mark Rutland)   
  - arm64/sve: Discard stale CPU state when handling SVE traps (Mark Brown)   
  - gve: Fixes for napi_poll when budget is 0 (Ziwei Xiao)   
  - scsi: core: Fix scsi_mode_select() buffer length handling (Damien Le Moal)   
  - Revert "drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read()" (Zhang Zekun)   
  - fou: remove warn in gue_gro_receive on unsupported protocol (Willem de Bruijn)   
  - ima: Fix use-after-free on a dentry's dname.name (Stefan Berger)   
  - crypto: hisilicon/qm - inject error before stopping queue (Weili Qian)   
  - drm/amd/display: Check BIOS images before it is used (Alex Hung)   
  - mmc: mtk-sd: Fix error handle of probe function (Andy-ld Lu)   
  - xhci: dbc: Fix STALL transfer event handling (Mathias Nyman)   
  - mm/damon/vaddr: fix issue in damon_va_evenly_split_region() (Zheng Yejian)   
  - mm/damon/vaddr-test: split a test function having >1024 bytes frame size (SeongJae Park)   
  - jffs2: Fix rtime decompressor (Richard Weinberger)   
  - jffs2: Prevent rtime decompress memory corruption (Kinsey Moore)   
  - KVM: arm64: vgic-its: Clear ITE when DISCARD frees an ITE (Kunkun Jiang)   
  - KVM: arm64: vgic-its: Clear DTE when MAPD unmaps a device (Kunkun Jiang)   
  - KVM: arm64: vgic-its: Add a data length check in vgic_its_save_* (Jing Zhang)   
  - tracing/eprobe: Fix to release eprobe when failed to add dyn_event (Masami Hiramatsu (Google))   
  - btrfs: fix missing snapshot drew unlock when root is dead during swap activation (Filipe Manana)   
  - sched/core: Prevent wakeup of ksoftirqd during idle load balance (K Prateek Nayak)   
  - sched/fair: Check idle_cpu() before need_resched() to detect ilb CPU turning busy (K Prateek Nayak)   
  - sched/fair: Add NOHZ balancer flag for nohz.next_balance updates (Valentin Schneider)   
  - sched/core: Remove the unnecessary need_resched() check in nohz_csd_func() (K Prateek Nayak)   
  - modpost: Add .irqentry.text to OTHER_SECTIONS (Thomas Gleixner)   
  - modpost: Include '.text.*' in TEXT_SECTIONS (Nathan Chancellor)   
  - misc: eeprom: eeprom_93cx6: Add quirk for extra read clock cycle (Parker Newman)   
  - powerpc/prom_init: Fixup missing powermac #size-cells (Michael Ellerman)   
  - MIPS: Loongson64: DTS: Really fix PCIe port nodes for ls7a (Xi Ruoyao)   
  - usb: chipidea: udc: handle USB Error Interrupt if IOC not set (Xu Yang)   
  - i3c: Use i3cdev->desc->info instead of calling i3c_device_get_info() to avoid deadlock (Defa Li)   
  - PCI: Add ACS quirk for Wangxun FF5xxx NICs (Mengyuan Lou)   
  - PCI: Add 'reset_subordinate' to reset hierarchy below bridge (Keith Busch)   
  - PCI: Detect and trust built-in Thunderbolt chips (Esther Shimanovich)   
  - i3c: mipi-i3c-hci: Mask ring interrupts before ring stop request (Jarkko Nikula)   
  - f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode. (Qi Han)   
  - nvdimm: rectify the illogical code within nd_dax_probe() (Yi Yang)   
  - pinctrl: qcom-pmic-gpio: add support for PM8937 (Barnabás Czémán)   
  - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Kai Mäkisara)   
  - scsi: st: Don't modify unknown block number in MTIOCGET (Kai Mäkisara)   
  - leds: class: Protect brightness_show() with led_cdev->led_access mutex (Mukesh Ojha)   
  - scsi: hisi_sas: Add cond_resched() for no forced preemption model (Yihang Li)   
  - tracing: Use atomic64_inc_return() in trace_clock_counter() (Uros Bizjak)   
  - pinctrl: freescale: fix COMPILE_TEST error with PINCTRL_IMX_SCU (Esben Haabendal)   
  - netpoll: Use rcu_access_pointer() in __netpoll_setup (Breno Leitao)   
  - net/neighbor: clear error in case strict check is not set (Jakub Kicinski)   
  - rocker: fix link status detection in rocker_carrier_init() (Dmitry Antipov)   
  - ASoC: hdmi-codec: reorder channel allocation list (Jonas Karlman)   
  - Bluetooth: hci_core: Fix not checking skb length on hci_acldata_packet (Luiz Augusto von Dentz)   
  - wifi: brcmfmac: Fix oops due to NULL pointer dereference in brcmf_sdiod_sglist_rw() (Norbert van Bolhuis)   
  - wifi: ipw2x00: libipw_rx_any(): fix bad alignment (Jiapeng Chong)   
  - drm/amdgpu: set the right AMDGPU sg segment limitation (Prike Liang)   
  - drm/amdgpu: skip amdgpu_device_cache_pci_state under sriov (Victor Zhao)   
  - jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree (Nihar Chaithanya)   
  - jfs: fix array-index-out-of-bounds in jfs_readdir (Ghanshyam Agrawal)   
  - jfs: fix shift-out-of-bounds in dbSplit (Ghanshyam Agrawal)   
  - jfs: array-index-out-of-bounds fix in dtReadFirst (Ghanshyam Agrawal)   
  - dma-debug: fix a possible deadlock on radix_lock (Levi Yun)   
  - drm/amdgpu: refine error handling in amdgpu_ttm_tt_pin_userptr (Lang Yu)   
  - drm/amdgpu: Dereference the ATCS ACPI buffer (Prike Liang)   
  - drm/amdgpu: clear RB_OVERFLOW bit when enabling interrupts for vega20_ih (Victor Lu)   
  - drm/panel: simple: Add Microchip AC69T88A LVDS Display panel (Manikandan Muralidharan)   
  - wifi: ath5k: add PCI ID for Arcadyan devices (Rosen Penev)   
  - wifi: ath5k: add PCI ID for SX76X (Rosen Penev)   
  - net: inet6: do not leave a dangling sk pointer in inet6_create() (Ignat Korchagin)   
  - net: inet: do not leave a dangling sk pointer in inet_create() (Ignat Korchagin)   
  - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Ignat Korchagin)   
  - net: af_can: do not leave a dangling sk pointer in can_create() (Ignat Korchagin)   
  - Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create() (Ignat Korchagin)   
  - af_packet: avoid erroring out after sock_init_data() in packet_create() (Ignat Korchagin)   
  - net/sched: cbs: Fix integer overflow in cbs_set_port_rate() (Elena Salomatkina)   
  - net: ethernet: fs_enet: Use %pa to format resource_size_t (Simon Horman)   
  - net: fec_mpc52xx_phy: Use %pa to format resource_size_t (Simon Horman)   
  - samples/bpf: Fix a resource leak (Zhu Jun)   
  - r8169: don't apply UDP padding quirk on RTL8126A (Heiner Kallweit)   
  - drm/radeon/r600_cs: Fix possible int overflow in r600_packet3_check() (Igor Artemiev)   
  - drm/mcde: Enable module autoloading (Liao Chen)   
  - drm: panel-orientation-quirks: Add quirk for AYA NEO 2 model (Joaquín Ignacio Aramendía)   
  - drm/vc4: hvs: Set AXI panic modes for the HVS (Dave Stevenson)   
  - soc: imx8m: Probe the SoC driver as platform driver (Marek Vasut)   
  - media: cx231xx: Add support for Dexatek USB Video Grabber 1d19:6108 (Rohan Barar)   
  - media: uvcvideo: Add a quirk for the Kaiweets KTI-W02 infrared camera (David Given)   
  - kcsan: Turn report_filterlist_lock into a raw_spinlock (Marco Elver)   
  - kselftest/arm64: Don't leak pipe fds in pac.exec_sign_all() (Mark Brown)   
  - btrfs: avoid unnecessary device path update for the same device (Qu Wenruo)   
  - s390/cpum_sf: Handle CPU hotplug remove during sampling (Thomas Richter)   
  - epoll: annotate racy check (Christian Brauner)   
  - iommu/arm-smmu: Defer probe of clients after smmu device bound (Pratyush Brahma)   
  - ocfs2: update seq_file index in ocfs2_dlm_seq_next (Wengang Wang)   
  - mmc: core: Further prevent card detect during shutdown (Ulf Hansson)   
  - mmc: sdhci-pci: Add DMI quirk for missing CD GPIO on Vexia Edu Atla 10 tablet (Hans de Goede)   
  - regmap: detach regmap from dev on regmap_exit (Cosmin Tanislav)   
  - xsk: fix OOB map writes when deleting elements (Maciej Fijalkowski)   
  - dma-buf: fix dma_fence_array_signaled v4 (Christian König)   
  - bpf: fix OOB devmap writes when deleting elements (Maciej Fijalkowski)   
  - bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again (Liequan Che)   
  - nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry() (Ryusuke Konishi)   
  - scsi: ufs: core: sysfs: Prevent div by zero (Gwendal Grignou)   
  - scsi: qla2xxx: Remove check req_sg_cnt should be equal to rsp_sg_cnt (Saurav Kashyap)   
  - scsi: qla2xxx: Fix use after free on unload (Quinn Tran)   
  - scsi: qla2xxx: Supported speed displayed incorrectly for VPorts (Anil Gurumurthy)   
  - scsi: qla2xxx: Fix NVMe and NPIV connect issue (Quinn Tran)   
  - ALSA: hda/realtek: Add support for Samsung Galaxy Book3 360 (NP730QFG) (Sahas Leelodharry)   
  - ALSA: hda/realtek: Enable mute and micmute LED on HP ProBook 430 G8 (Nazar Bilinskyi)   
  - ALSA: usb-audio: add mixer mapping for Corsair HS80 (Marie Ramlow)   
  - arm64: ptrace: fix partial SETREGSET for NT_ARM_TAGGED_ADDR_CTRL (Mark Rutland)   
  - tracing: Fix cmp_entries_dup() to respect sort() comparison rules (Kuan-Wei Chiu)   
  - can: dev: can_set_termination(): allow sleeping GPIOs (Marc Kleine-Budde)   
  - watchdog: rti: of: honor timeout-sec property (Alexander Sverdlin)   
  - HID: wacom: fix when get product name maybe null pointer (WangYuli)   
  - bpf: Fix exact match conditions in trie_get_next_key() (Hou Tao)   
  - bpf: Handle BPF_EXIST and BPF_NOEXIST for LPM trie (Hou Tao)   
  - ocfs2: free inode when ocfs2_get_init_inode() fails (Tetsuo Handa)   
  - drm/v3d: Enable Performance Counters before clearing them (Maíra Canal)   
  - spi: mpc52xx: Add cancel_work_sync before module remove (Pei Xiao)   
  - tools: Override makefile ARCH variable if defined, but empty (Björn Töpel)   
  - ALSA: usb-audio: Notify xrun for low-latency mode (Takashi Iwai)   
  - ALSA: pcm: Avoid reference to status->state (Takashi Iwai)   
  - ALSA: pcm: Add more disconnection checks at file ops (Takashi Iwai)   
  - tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg (Zijian Zhang)   
  - drm/sti: Add __iomem for mixer_dbg_mxn's parameter (Pei Xiao)   
  - bpftool: fix potential NULL pointer dereferencing in prog_dump() (Amir Mohammadi)   
  - bpftool: Remove asserts from JIT disassembler (Quentin Monnet)   
  - serial: amba-pl011: Fix RX stall when DMA is used (Kartik Rajput)   
  - serial: amba-pl011: Use port lock wrappers (Thomas Gleixner)   
  - dt-bindings: serial: rs485: Fix rs485-rts-delay property (Michal Simek)   
  - dt_bindings: rs485: Correct delay values (Lino Sanfilippo)   
  - gpio: grgpio: Add NULL check in grgpio_probe (Charles Han)   
  - gpio: grgpio: use a helper variable to store the address of ofdev->dev (Bartosz Golaszewski)   
  - geneve: do not assume mac header is set in geneve_xmit_skb() (Eric Dumazet)   
  - ethtool: Fix wrong mod state in case of verbose and no_mask bitset (Kory Maincent)   
  - netfilter: nft_set_hash: skip duplicated elements pending gc run (Pablo Neira Ayuso)   
  - netfilter: ipset: Hold module reference while requesting a module (Phil Sutter)   
  - net: sched: fix erspan_opt settings in cls_flower (Xin Long)   
  - igb: Fix potential invalid memory access in igb_init_module() (Yuan Can)   
  - net/qed: allow old cards not supporting "num_images" to work (Louis Leseur)   
  - net/smc: fix LGR and link use-after-free issue (Wen Gu)   
  - net/smc: Limit backlog connections (D. Wythe)   
  - tipc: Fix use-after-free of kernel socket in cleanup_bearer(). (Kuniyuki Iwashima)   
  - dccp: Fix memory leak in dccp_feat_change_recv (Ivan Solodovnikov)   
  - net/ipv6: release expired exception dst cached in socket (Jiri Wiesner)   
  - can: j1939: j1939_session_new(): fix skb reference counting (Dmitry Antipov)   
  - net: hsr: avoid potential out-of-bound access in fill_frame_info() (Eric Dumazet)   
  - net/sched: tbf: correct backlog statistic for GSO packets (Martin Ottens)   
  - ptp: Add error handling for adjfine callback in ptp_clock_adjtime (Ajay Kaher)   
  - netfilter: x_tables: fix LED ID check in led_tg_check() (Dmitry Antipov)   
  - ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (Jinghao Jia)   
  - can: ems_usb: ems_usb_rx_err(): fix {rx,tx}_errors statistics (Dario Binacchi)   
  - can: sun4i_can: sun4i_can_err(): fix {rx,tx}_errors statistics (Dario Binacchi)   
  - can: ifi_canfd: ifi_canfd_handle_lec_err(): fix {rx,tx}_errors statistics (Dario Binacchi)   
  - can: m_can: m_can_handle_lec_err(): fix {rx,tx}_errors statistics (Dario Binacchi)   
  - can: sun4i_can: sun4i_can_err(): call can_change_state() even if cf is NULL (Dario Binacchi)   
  - can: c_can: c_can_handle_bus_err(): update statistics if skb allocation fails (Dario Binacchi)   
  - can: do not increase rx statistics when generating a CAN rx error message frame (Vincent Mailhol)   
  - can: peak_usb: CANFD: store 64-bits hw timestamps (Stephane Grosjean)   
  - watchdog: mediatek: Make sure system reset gets asserted in mtk_wdt_restart() (Yassine Oudjana)   
  - iTCO_wdt: mask NMI_NOW bit for update_no_reboot_bit() call (Oleksandr Ocheretnyi)   
  - drm/etnaviv: flush shader L1 cache after user commandstream (Lucas Stach)   
  - drm/sti: avoid potential dereference of error pointers (Ma Ke)   
  - drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check (Ma Ke)   
  - drm/sti: avoid potential dereference of error pointers in sti_hqvdp_atomic_check (Ma Ke)   
  - btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc() (Josef Bacik)   
  - nfsd: fix nfs4_openowner leak when concurrent nfsd4_open occur (Yang Erkun)   
  - nfsd: make sure exp active before svc_export_show (Yang Erkun)   
  - PCI: rockchip-ep: Fix address translation unit programming (Damien Le Moal)   
  - dm thin: Add missing destroy_work_on_stack() (Yuan Can)   
  - ovl: properly handle large files in ovl_security_fileattr (Oleksandr Tymoshenko)   
  - PCI: keystone: Add link up check to ks_pcie_other_map_bus() (Kishon Vijay Abraham I)   
  - i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs() (Frank Li)   
  - scsi: ufs: exynos: Fix hibern8 notify callbacks (Peter Griffin)   
  - util_macros.h: fix/rework find_closest() macros (Alexandru Ardelean)   
  - s390/entry: Mark IRQ entries to fix stack depot warnings (Vasily Gorbik)   
  - ad7780: fix division by zero in ad7780_write_raw() (Zicheng Qu)   
  - btrfs: ref-verify: fix use-after-free after invalid ref action (Filipe Manana)   
  - btrfs: add a sanity check for btrfs root in btrfs_search_slot() (Lizhi Xu)   
  - btrfs: add might_sleep() annotations (ChenXiaoSong)   
  - quota: flush quota_release_work upon quota writeback (Ojaswin Mujoo)   
  - xfs: remove unknown compat feature check in superblock write validation (Long Li)   
  - xfs: fix log recovery when unknown rocompat bits are set (Darrick J. Wong)   
  - ASoC: fsl_micfil: fix the naming style for mask definition (Shengjiu Wang)   
  - sh: intc: Fix use-after-free bug in register_intc_controller() (Dan Carpenter)   
  - sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport (Liu Jian)   
  - sunrpc: remove unnecessary test in rpc_task_set_client() (Thiago Rafael Becker)   
  - nfs: ignore SB_RDONLY when mounting nfs (Li Lingfeng)   
  - modpost: remove incorrect code in do_eisa_entry() (Masahiro Yamada)   
  - rtc: ab-eoz9: don't fail temperature reads on undervoltage notification (Maxime Chevallier)   
  - 9p/xen: fix release of IRQ (Alex Zenla)   
  - 9p/xen: fix init sequence (Alex Zenla)   
  - block: return unsigned int from bdev_io_min (Christoph Hellwig)   
  - jffs2: fix use of uninitialized variable (Qingfang Deng)   
  - ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit (Waqar Hameed)   
  - ubi: fastmap: Fix duplicate slab cache names while attaching (Zhihao Cheng)   
  - ubifs: Correct the total block count by deducting journal reservation (Zhihao Cheng)   
  - rtc: check if __rtc_read_time was successful in rtc_timer_do_work() (Yongliang Gao)   
  - rtc: abx80x: Fix WDT bit position of the status register (Nobuhiro Iwamatsu)   
  - rtc: st-lpc: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)   
  - NFSv4.0: Fix a use-after-free problem in the asynchronous open() (Trond Myklebust)   
  - um: Always dump trace for specified task in show_stack (Tiwei Bie)   
  - um: Fix the return value of elf_core_copy_task_fpregs (Tiwei Bie)   
  - um: Fix potential integer overflow during physmem setup (Tiwei Bie)   
  - rpmsg: glink: Propagate TX failures in intentless mode as well (Bjorn Andersson)   
  - SUNRPC: make sure cache entry active before cache_show (Yang Erkun)   
  - NFSD: Prevent a potential integer overflow (Chuck Lever)   
  - lib: string_helpers: silence snprintf() output truncation warning (Bartosz Golaszewski)   
  - usb: dwc3: gadget: Fix looping of queued SG entries (Thinh Nguyen)   
  - usb: dwc3: gadget: Fix checking for number of TRBs left (Thinh Nguyen)   
  - ALSA: hda/realtek: Apply quirk for Medion E15433 (Takashi Iwai)   
  - ALSA: hda/realtek: Fix Internal Speaker and Mic boost of Infinix Y4 Max (Dinesh Kumar)   
  - ALSA: hda/realtek: Set PCBeep to default value for ALC274 (Kailang Yang)   
  - ALSA: hda/realtek: Update ALC225 depop procedure (Kailang Yang)   
  - ALSA: pcm: Add sanity NULL check for the default mmap fault handler (Takashi Iwai)   
  - media: v4l2-core: v4l2-dv-timings: check cvt/gtf result (Hans Verkuil)   
  - soc: fsl: rcpm: fix missing of_node_put() in copy_ippdexpcr1_setting() (Javier Carrasco)   
  - media: wl128x: Fix atomicity violation in fmc_send_cmd() (Qiu-ji Chen)   
  - HID: wacom: Interpret tilt data from Intuos Pro BT as signed values (Jason Gerecke)   
  - block: fix ordering between checking BLK_MQ_S_STOPPED request adding (Muchun Song)   
  - arm64: tls: Fix context-switching of tpidrro_el0 when kpti is enabled (Will Deacon)   
  - sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK (Huacai Chen)   
  - um: vector: Do not use drvdata in release (Tiwei Bie)   
  - serial: 8250: omap: Move pm_runtime_get_sync (Bin Liu)   
  - um: net: Do not use drvdata in release (Tiwei Bie)   
  - um: ubd: Do not use drvdata in release (Tiwei Bie)   
  - ubi: wl: Put source PEB into correct list if trying locking LEB failed (Zhihao Cheng)   
  - platform/chrome: cros_ec_typec: fix missing fwnode reference decrement (Javier Carrasco)   
  - cpufreq: mediatek-hw: Fix wrong return value in mtk_cpufreq_get_cpu_power() (Jinjie Ruan)   
  - mtd: spi-nor: core: replace dummy buswidth from addr to data (Cheng Ming Lin)   
  - spi: Fix acpi deferred irq probe (Stanislaw Gruszka)   
  - netfilter: ipset: add missing range check in bitmap_ip_uadt (Jeongjun Park)   
  - gpio: exar: set value when external pull-up or pull-down is present (Sai Kumar Cholleti)   
  - Revert "serial: sh-sci: Clean sci_ports[0] after at earlycon exit" (Greg Kroah-Hartman)   
  - serial: sh-sci: Clean sci_ports[0] after at earlycon exit (Claudiu Beznea)   
  - Revert "usb: gadget: composite: fix OS descriptors w_value logic" (Michal Vrastil)   
  - driver core: bus: Fix double free in driver API bus_register() (Zijun Hu)   
  - usb: xhci: Fix TD invalidation under pending Set TR Dequeue (Michal Pecio)   
  - Bluetooth: Fix type of len in rfcomm_sock_getsockopt{,_old}() (Andrej Shadura)   
  - exfat: fix uninit-value in __exfat_get_dentry_set (Namjae Jeon)   
  - locking/lockdep: Avoid creating new name string literals in lockdep_set_subclass() (Ahmed Ehab)   
  - tty: ldsic: fix tty_ldisc_autoload sysctl's proc_handler (Nicolas Bouchinet)   
  - apparmor: test: Fix memory leak for aa_unpack_strdup() (Jinjie Ruan)   
  - comedi: Flush partial mappings in error case (Jann Horn)   
  - fsnotify: fix sending inotify event with unexpected filename (Amir Goldstein)   
  - PCI: Fix use-after-free of slot->bus on hot remove (Lukas Wunner)   
  - KVM: arm64: Ignore PMCNTENSET_EL0 while checking for overflow status (Raghavendra Rao Ananta)   
  - powerpc/pseries: Fix KVM guest detection for disabling hardlockup detector (Gautam Menghani)   
  - crypto: x86/aegis128 - access 32-bit arguments as 32-bit (Eric Biggers)   
  - perf/x86/intel/pt: Fix buffer full but size is 0 case (Adrian Hunter)   
  - ASoC: codecs: Fix atomicity violation in snd_soc_component_get_drvdata() (Qiu-ji Chen)   
  - jfs: xattr: check invalid xattr size more strictly (Artem Sadovnikov)   
  - ext4: fix FS_IOC_GETFSMAP handling (Theodore Ts'o)   
  - ext4: supress data-race warnings in ext4_free_inodes_{count,set}() (Jeongjun Park)   
  - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Benoît Sevens)   
  - soc: qcom: socinfo: fix revision check in qcom_socinfo_probe() (Manikanta Mylavarapu)   
  - ASoC: Intel: sst: Fix used of uninitialized ctx to log an error (Hans de Goede)   
  - Revert "drivers: clk: zynqmp: update divider round rate logic" (Joel Guittet)   
  - usb: ehci-spear: fix call balance of sehci clk handling routines (Vitalii Mordan)   
  - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Takashi Iwai)   
  - xen: Fix the issue of resource not being properly released in xenbus_dev_probe() (Qiu-ji Chen)   
  - ksmbd: fix slab-use-after-free in smb3_preauth_hash_rsp (Namjae Jeon)   
  - parisc: fix a possible DMA corruption (Mikulas Patocka)   
  - apparmor: fix 'Do simple duplicate message elimination' (chao liu)   
  - ALSA: hda/realtek: Update ALC256 depop procedure (Kailang Yang)   
  - counter: stm32-timer-cnt: Add check for clk_enable() (Jiasheng Jiang)   
  - misc: apds990x: Fix missing pm_runtime_disable() (Jinjie Ruan)   
  - USB: chaoskey: Fix possible deadlock chaoskey_list_lock (Edward Adam Davis)   
  - USB: chaoskey: fail open after removal (Oliver Neukum)   
  - usb: yurex: make waiting on yurex_write interruptible (Oliver Neukum)   
  - usb: using mutex lock and supporting O_NONBLOCK flag in iowarrior_read() (Jeongjun Park)   
  - iio: light: al3010: Fix an error handling path in al3010_probe() (Christophe JAILLET)   
  - bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down (Saravanan Vajravel)   
  - net: hsr: fix hsr_init_sk() vs network/transport headers. (Eric Dumazet)   
  - spi: atmel-quadspi: Fix register name in verbose logging function (Csókás, Bence)   
  - octeontx2-af: RPM: Fix mismatch in lmac type (Hariprasad Kelam)   
  - net: stmmac: dwmac-socfpga: Set RX watchdog interrupt as broken (Maxime Chevallier)   
  - marvell: pxa168_eth: fix call balance of pep->clk handling routines (Vitalii Mordan)   
  - net: mdio-ipq4019: add missing error check (Rosen Penev)   
  - net: usb: lan78xx: Fix refcounting and autosuspend on invalid WoL configuration (Oleksij Rempel)   
  - tg3: Set coherent DMA mask bits to 31 for BCM57766 chipsets (Pavan Chebbi)   
  - net: usb: lan78xx: Fix memory leak on device unplug by freeing PHY device (Oleksij Rempel)   
  - power: supply: bq27xxx: Fix registers of bq27426 (Barnabás Czémán)   
  - power: supply: core: Remove might_sleep() from power_supply_put() (Bart Van Assche)   
  - fs_parser: update mount_api doc to match function signature (Randy Dunlap)   
  - vfio/pci: Properly hide first-in-list PCIe extended capability (Avihai Horon)   
  - selftests/mount_setattr: Fix failures on 64K PAGE_SIZE kernels (Michael Ellerman)   
  - vdpa/mlx5: Fix suboptimal range on iotlb iteration (Si-Wei Liu)   
  - hwmon: (tps23861) Fix reporting of negative temperatures (Murad Masimov)   
  - NFSD: Fix nfsd4_shutdown_copy() (Chuck Lever)   
  - svcrdma: fix miss destroy percpu_counter in svc_rdma_proc_init() (Ye Bin)   
  - sunrpc: simplify two-level sysctl registration for svcrdma_parm_table (Luis Chamberlain)   
  - NFSD: Cap the number of bytes copied by nfs4_reset_recoverydir() (Chuck Lever)   
  - NFSD: Prevent NULL dereference in nfsd4_process_cb_update() (Chuck Lever)   
  - remoteproc: qcom_q6v5_mss: Re-order writes to the IMEM region (Sibi Sankar)   
  - rpmsg: glink: use only lower 16-bits of param2 for CMD_OPEN name length (Jonathan Marek)   
  - rpmsg: glink: Fix GLINK command prefix (Bjorn Andersson)   
  - rpmsg: glink: Send READ_NOTIFY command in FIFO full case (Arun Kumar Neelakantam)   
  - rpmsg: glink: Add TX_DATA_CONT command while sending (Arun Kumar Neelakantam)   
  - perf trace: Avoid garbage when not printing a syscall's arguments (Benjamin Peterson)   
  - perf trace: Do not lose last events in a race (Benjamin Peterson)   
  - svcrdma: Address an integer overflow (Chuck Lever)   
  - m68k: coldfire/device.c: only build FEC when HW macros are defined (Antonio Quartulli)   
  - m68k: mcfgpio: Fix incorrect register offset for CONFIG_M5441x (Jean-Michel Hautbois)   
  - perf trace: avoid garbage when not printing a trace event's arguments (Benjamin Peterson)   
  - f2fs: check curseg->inited before write_sum_page in change_curseg (Yongpeng Yang)   
  - f2fs: remove the unused flush argument to change_curseg (Christoph Hellwig)   
  - f2fs: open code allocate_segment_by_default (Christoph Hellwig)   
  - f2fs: remove struct segment_allocation default_salloc_ops (Christoph Hellwig)   
  - f2fs: fix the wrong f2fs_bug_on condition in f2fs_do_replace_block (LongPing Wei)   
  - PCI: cpqphp: Fix PCIBIOS_* return value confusion (Ilpo Järvinen)   
  - PCI: cpqphp: Use PCI_POSSIBLE_ERROR() to check config reads (weiyufeng)   
  - perf probe: Correct demangled symbols in C++ program (Leo Yan)   
  - perf probe: Fix libdw memory leak (Ian Rogers)   
  - PCI: Fix reset_method_store() memory leak (Todd Kjos)   
  - perf cs-etm: Don't flush when packet_queue fills up (James Clark)   
  - mailbox: arm_mhuv2: clean up loop in get_irq_chan_comb() (Dan Carpenter)   
  - pinctrl: k210: Undef K210_PC_DEFAULT (zhang jiao)   
  - clk: clk-axi-clkgen: make sure to enable the AXI bus clock (Nuno Sa)   
  - dt-bindings: clock: axi-clkgen: include AXI clk (Nuno Sa)   
  - fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem() (Zhen Lei)   
  - fbdev/sh7760fb: Alloc DMA memory from hardware device (Thomas Zimmermann)   
  - powerpc/kexec: Fix return of uninitialized variable (Zhang Zekun)   
  - powerpc/sstep: make emulate_vsx_load and emulate_vsx_store static (Michal Suchanek)   
  - ocfs2: fix uninitialized value in ocfs2_file_read_iter() (Dmitry Antipov)   
  - RDMA/hns: Fix out-of-order issue of requester when setting FENCE (Junxian Huang)   
  - scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb() (Zhen Lei)   
  - scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb() (Zhen Lei)   
  - scsi: fusion: Remove unused variable 'rc' (Zeng Heng)   
  - scsi: bfa: Fix use-after-free in bfad_im_module_exit() (Ye Bin)   
  - mfd: rt5033: Fix missing regmap_del_irq_chip() (Zhang Changzhong)   
  - clk: imx: clk-scu: fix clk enable state save and restore (Dong Aisheng)   
  - clk: imx: lpcg-scu: SW workaround for errata (e10858) (Peng Fan)   
  - powerpc/pseries: Fix dtl_access_lock to be a rw_semaphore (Michael Ellerman)   
  - powerpc/mm/fault: Fix kfence page fault reporting (Ritesh Harjani (IBM))   
  - mtd: rawnand: atmel: Fix possible memory leak (Miquel Raynal)   
  - cpufreq: loongson2: Unregister platform_driver on failure (Yuan Can)   
  - mfd: intel_soc_pmic_bxtwc: Use IRQ domain for PMIC devices (Andy Shevchenko)   
  - mfd: intel_soc_pmic_bxtwc: Use IRQ domain for TMU device (Andy Shevchenko)   
  - mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device (Andy Shevchenko)   
  - mfd: intel_soc_pmic_bxtwc: Use dev_err_probe() (Andy Shevchenko)   
  - mfd: da9052-spi: Change read-mask to write-mask (Marcus Folkesson)   
  - mfd: tps65010: Use IRQF_NO_AUTOEN flag in request_irq() to fix race (Jinjie Ruan)   
  - pinctrl: zynqmp: drop excess struct member description (Bartosz Golaszewski)   
  - trace/trace_event_perf: remove duplicate samples on the first tracepoint event (Levi Yun)   
  - bpf: fix recursive lock when verdict program return SK_PASS (Jiayuan Chen)   
  - wireguard: selftests: load nf_conntrack if not present (Hangbin Liu)   
  - netpoll: Use rcu_access_pointer() in netpoll_poll_lock (Breno Leitao)   
  - Bluetooth: fix use-after-free in device_for_each_child() (Dmitry Antipov)   
  - driver core: Introduce device_find_any_child() helper (Andy Shevchenko)   
  - ALSA: 6fire: Release resources at card release (Takashi Iwai)   
  - ALSA: caiaq: Use snd_card_free_when_closed() at disconnection (Takashi Iwai)   
  - ALSA: us122l: Use snd_card_free_when_closed() at disconnection (Takashi Iwai)   
  - ALSA: usx2y: Use snd_card_free_when_closed() at disconnection (Takashi Iwai)   
  - net: rfkill: gpio: Add check for clk_enable() (Mingwei Zheng)   
  - drm/amdkfd: Fix wrong usage of INIT_WORK() (Yuan Can)   
  - selftests: net: really check for bg process completion (Paolo Abeni)   
  - bpf, sockmap: Fix sk_msg_reset_curr (Zijian Zhang)   
  - bpf, sockmap: Several fixes to bpf_msg_pop_data (Zijian Zhang)   
  - bpf, sockmap: Several fixes to bpf_msg_push_data (Zijian Zhang)   
  - selftests/bpf: Add push/pop checking for msg_verify_data in test_sockmap (Zijian Zhang)   
  - selftests/bpf: Fix total_bytes in msg_loop_rx in test_sockmap (Zijian Zhang)   
  - selftests, bpf: Add one test for sockmap with strparser (Liu Jian)   
  - selftests/bpf: Fix SENDPAGE data logic in test_sockmap (Zijian Zhang)   
  - selftests/bpf: Add txmsg_pass to pull/push/pop in test_sockmap (Zijian Zhang)   
  - netlink: typographical error in nlmsg_type constants definition (Maurice Lambert)   
  - netfilter: nf_tables: must hold rcu read lock while iterating object type list (Florian Westphal)   
  - netfilter: nf_tables: skip transaction if update object is not implemented (Pablo Neira Ayuso)   
  - drm/msm/dpu: cast crtc_clk calculation to u64 in _dpu_core_perf_calc_clk() (Zichen Xie)   
  - wifi: wfx: Fix error handling in wfx_core_init() (Yuan Can)   
  - drm/etnaviv: hold GPU lock across perfmon sampling (Lucas Stach)   
  - drm/etnaviv: fix power register offset on GC300 (Doug Brown)   
  - drm/etnaviv: Request pages from DMA32 zone on addressing_limited (Xiaolei Wang)   
  - drm/msm/adreno: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)   
  - drm/panfrost: Remove unused id_mask from struct panfrost_model (Steven Price)   
  - octeontx2-pf: handle otx2_mbox_get_rsp errors in cn10k.c (Dipendra Khadka)   
  - octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c (Dipendra Khadka)   
  - octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_common.c (Dipendra Khadka)   
  - drm: fsl-dcu: enable PIXCLK on LS1021A (Matthias Schiffer)   
  - wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan() (Alper Nebi Yasak)   
  - selftests/bpf: Fix txmsg_redir of test_txmsg_pull in test_sockmap (Zijian Zhang)   
  - selftests/bpf: Fix msg_verify_data in test_sockmap (Zijian Zhang)   
  - drm/bridge: tc358767: Fix link properties discovery (Tomi Valkeinen)   
  - netdevsim: copy addresses for both in and out paths (Hangbin Liu)   
  - libbpf: fix sym_is_subprog() logic for weak global subprogs (Andrii Nakryiko)   
  - bpf: Fix the xdp_adjust_tail sample prog issue (Yuan Chen)   
  - libbpf: Fix output .symtab byte-order during linking (Tony Ambardar)   
  - drm/bridge: anx7625: Drop EDID cache on bridge power off (Pin-yen Lin)   
  - ASoC: dt-bindings: mt6359: Update generic node name and dmic-mode (Macpaul Lin)   
  - ASoC: fsl_micfil: fix regmap_write_bits usage (Shengjiu Wang)   
  - ASoC: fsl_micfil: use GENMASK to define register bit fields (Sascha Hauer)   
  - ASoC: fsl_micfil: do not define SHIFT/MASK for single bits (Sascha Hauer)   
  - ASoC: fsl_micfil: Drop unnecessary register read (Sascha Hauer)   
  - dt-bindings: vendor-prefixes: Add NeoFidelity, Inc (Igor Prusov)   
  - wifi: ath10k: fix invalid VHT parameters in supported_vht_mcs_rate_nss2 (Baochen Qiang)   
  - wifi: ath10k: fix invalid VHT parameters in supported_vht_mcs_rate_nss1 (Baochen Qiang)   
  - drm/v3d: Address race-condition in MMU flush (Maíra Canal)   
  - drm/imx/ipuv3: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)   
  - drm/imx/dcss: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)   
  - wifi: mwifiex: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)   
  - wifi: p54: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)   
  - drm/omap: Fix locking in omap_gem_new_dmabuf() (Tomi Valkeinen)   
  - drm/omap: Fix possible NULL dereference (Tomi Valkeinen)   
  - wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service() (Jeongjun Park)   
  - drm/mm: Mark drm_mm_interval_tree*() functions with __maybe_unused (Andy Shevchenko)   
  - platform/x86: panasonic-laptop: Return errno correctly in show callback (Yao Zi)   
  - platform/x86: panasonic-laptop: Replace snprintf in show functions with sysfs_emit (Qing Wang)   
  - media: atomisp: Add check for rgby_data memory allocation failure (Li Huafei)   
  - media: atomisp: remove #ifdef HAS_NO_HMEM (Mauro Carvalho Chehab)   
  - media: venus: provide ctx queue lock for ioctl synchronization (Sergey Senozhatsky)   
  - venus: venc: add handling for VIDIOC_ENCODER_CMD (Dikshita Agarwal)   
  - media: venus : Addition of support for VIDIOC_TRY_ENCODER_CMD (Dikshita Agarwal)   
  - media: venus : Addition of EOS Event support for Encoder (Viswanath Boma)   
  - media: venus: vdec: decoded picture buffer handling during reconfig sequence (Mansur Alisha Shaik)   
  - media: venus: venc: Use pmruntime autosuspend (Stanimir Varbanov)   
  - firmware: arm_scpi: Check the DVFS OPP count returned by the firmware (Luo Qiu)   
  - selftests/resctrl: Protect against array overrun during iMC config parsing (Reinette Chatre)   
  - arm64: dts: mediatek: mt8183-kukui-jacuzzi: Add supplies for fixed regulators (Chen-Yu Tsai)   
  - arm64: dts: mediatek: mt8183-kukui-jacuzzi: Fix DP bridge supply names (Chen-Yu Tsai)   
  - arm64: dts: mt8183: jacuzzi: Move panel under aux-bus (Hsin-Yi Wang)   
  - arm64: dts: mt8183: jacuzzi: remove unused ddc-i2c-bus (Hsin-Yi Wang)   
  - regmap: irq: Set lockdep class for hierarchical IRQ domains (Andy Shevchenko)   
  - spi: zynqmp-gqspi: Undo runtime PM changes at driver exit time​ (Jinjie Ruan)   
  - spi: tegra210-quad: Avoid shift-out-of-bounds (Breno Leitao)   
  - pmdomain: ti-sci: Add missing of_node_put() for args.np (Zhang Zekun)   
  - ARM: dts: cubieboard4: Fix DCDC5 regulator constraints (Andre Przywara)   
  - pwm: imx27: Workaround of the pwm output bug when decrease the duty cycle (Clark Wang)   
  - arm64: dts: mt8183: Damu: add i2c2's i2c-scl-internal-delay-ns (Daolong Zhu)   
  - arm64: dts: mt8183: burnet: add i2c2's i2c-scl-internal-delay-ns (Daolong Zhu)   
  - arm64: dts: mt8183: fennel: add i2c2's i2c-scl-internal-delay-ns (Daolong Zhu)   
  - cgroup/bpf: only cgroup v2 can be attached by bpf programs (Chen Ridong)   
  - Revert "cgroup: Fix memory leak caused by missing cgroup_bpf_offline" (Chen Ridong)   
  - arm64: dts: mediatek: mt8173-elm-hana: Add vdd-supply to second source trackpad (Chen-Yu Tsai)   
  - arm64: dts: mt8183: kukui: Fix the address of eeprom at i2c4 (Hsin-Te Yuan)   
  - arm64: dts: mt8183: krane: Fix the address of eeprom at i2c4 (Hsin-Te Yuan)   
  - tpm: fix signed/unsigned bug when checking event logs (Gregory Price)   
  - mmc: mmc_spi: drop buggy snprintf() (Bartosz Golaszewski)   
  - soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get() (Dan Carpenter)   
  - soc: ti: smartreflex: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)   
  - spi: spi-fsl-lpspi: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)   
  - spi: spi-fsl-lpspi: downgrade log level for pio mode (Alexander Stein)   
  - clocksource/drivers:sp804: Make user selectable (Mark Brown)   
  - kcsan, seqlock: Fix incorrect assumption in read_seqbegin() (Marco Elver)   
  - kcsan, seqlock: Support seqcount_latch_t (Marco Elver)   
  - seqlock/latch: Provide raw_read_seqcount_latch_retry() (Peter Zijlstra)   
  - timekeeping: Consolidate fast timekeeper (Thomas Gleixner)   
  - time: Fix references to _msecs_to_jiffies() handling of values (Miguel Ojeda)   
  - crypto: cavium - Fix an error handling path in cpt_ucode_load_fw() (Christophe JAILLET)   
  - crypto: bcm - add error check in the ahash_hmac_init function (Chen Ridong)   
  - crypto: caam - add error check to caam_rsa_set_priv_key_form (Chen Ridong)   
  - EDAC/igen6: Avoid segmentation fault on module unload (Orange Kao)   
  - crypto: cavium - Fix the if condition to exit loop after timeout (Everest K.C)   
  - crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY (Yi Yang)   
  - EDAC/fsl_ddr: Fix bad bit shift operations (Priyanka Singh)   
  - thermal: core: Initialize thermal zones before registering them (Rafael J. Wysocki)   
  - crypto: qat - remove faulty arbiter config reset (Ahsan Atta)   
  - EDAC/bluefield: Fix potential integer overflow (David Thompson)   
  - firmware: google: Unregister driver_info on failure (Yuan Can)   
  - crypto: caam - Fix the pointer passed to caam_qi_shutdown() (Christophe JAILLET)   
  - hfsplus: don't query the device logical block size multiple times (Thadeu Lima de Souza Cascardo)   
  - s390/syscalls: Avoid creation of arch/arch/ directory (Masahiro Yamada)   
  - acpi/arm64: Adjust error handling procedure in gtdt_parse_timer_block() (Aleksandr Mishin)   
  - arm64: fix .data.rel.ro size assertion when CONFIG_LTO_CLANG (Masahiro Yamada)   
  - m68k: mvme147: Reinstate early console (Daniel Palmer)   
  - m68k: mvme16x: Add and use "mvme16x.h" (Geert Uytterhoeven)   
  - m68k: mvme147: Fix SCSI controller IRQ numbers (Daniel Palmer)   
  - nvme-pci: fix freeing of the HMB descriptor table (Christoph Hellwig)   
  - initramfs: avoid filename buffer overrun (David Disseldorp)   
  - mips: asm: fix warning when disabling MIPS_FP_SUPPORT (Jonas Gorski)   
  - brd: defer automatic disk creation until module initialization succeeds (Yang Erkun)   
  - brd: remove brd_devices_mutex mutex (Tetsuo Handa)   
  - s390/cio: Do not unregister the subchannel based on DNV (Vineeth Vijayan)   
  - kselftest/arm64: mte: fix printf type warnings about longs (Andre Przywara)   
  - x86/barrier: Do not serialize MSR accesses on AMD (Borislav Petkov (AMD))   
  - nvme: fix metadata handling in nvme-passthrough (Puranjay Mohan)   
  - cifs: Fix buffer overflow when parsing NFS reparse points (Pali Rohár)   
  - rcu-tasks: Idle tasks on offline CPUs are in quiescent states (Paul E. McKenney)   
  - ipmr: Fix access to mfc_cache_list without lock held (Breno Leitao)   
  - ARM: 9420/1: smp: Fix SMP for xip kernels (Harith G)   
  - ALSA: usb-audio: Fix Yamaha P-125 Quirk Entry (Eryk Zagorski)   
  - proc/softirqs: replace seq_printf with seq_put_decimal_ull_width (David Wang)   
  - ASoC: stm: Prevent potential division by zero in stm32_sai_get_clk_div() (Luo Yifan)   
  - ASoC: stm: Prevent potential division by zero in stm32_sai_mclk_round_rate() (Luo Yifan)   
  - can: j1939: fix error in J1939 documentation. (Alexander Hölzl)   
  - platform/x86: dell-wmi-base: Handle META key Lock/Unlock events (Kurt Borja)   
  - platform/x86: dell-smbios-base: Extends support to Alienware products (Kurt Borja)   
  - regulator: rk808: Add apply_bit for BUCK3 on RK809 (Mikhail Rudenko)   
  - soc: qcom: Add check devm_kasprintf() returned value (Charles Han)   
  - net: usb: qmi_wwan: add Quectel RG650V (Benoît Monin)   
  - x86/amd_nb: Fix compile-testing without CONFIG_AMD_NB (Arnd Bergmann)   
  - ALSA: hda/realtek: Add subwoofer quirk for Infinix ZERO BOOK 13 (Piyush Raj Chouhan)   
  - selftests/watchdog-test: Fix system accidentally reset after watchdog-test (Li Zhijian)   
  - usb: add support for new USB device ID 0x17EF:0x3098 for the r8152 driver (Benjamin Große)   
  - mac80211: fix user-power when emulating chanctx (Ben Greear)   
  - wifi: iwlwifi: mvm: Use the sync timepoint API in suspend (Daniel Gabay)   
  - ASoC: Intel: sst: Support LPE0F28 ACPI HID (Hans de Goede)   
  - ASoC: Intel: bytcr_rt5640: Add DMI quirk for Vexia Edu Atla 10 tablet (Hans de Goede)   
  - ASoC: Intel: bytcr_rt5640: Add support for non ACPI instantiated codec (Hans de Goede)   
  - NFS: nfs_async_write_reschedule_io must not recurse into the writeback code (Trond Myklebust)   
  - mm: resolve faulty mmap_region() error path behaviour (Lorenzo Stoakes)   
  - mm: refactor arch_calc_vm_flag_bits() and arm64 MTE handling (Lorenzo Stoakes)   
  - mm: unconditionally close VMAs on error (Lorenzo Stoakes)   
  - mm: avoid unsafe VMA hook invocation when error arises on mmap hook (Lorenzo Stoakes)   
  - mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Paolo Abeni)   
  - NFSD: Never decrement pending_async_copies on error (Chuck Lever)   
  - NFSD: Initialize struct nfsd4_copy earlier (Chuck Lever)   
  - NFSD: Limit the number of concurrent async COPY operations (Chuck Lever)   
  - NFSD: Async COPY result needs to return a write verifier (Chuck Lever)   
  - NFSD: initialize copy->cp_clp early in nfsd4_copy for use by trace point (Dai Ngo)   
  - media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set (Mauro Carvalho Chehab)   
  - mmc: sunxi-mmc: Fix A100 compatible description (Andre Przywara)   
  - mmc: sunxi-mmc: Add D1 MMC variant (Samuel Holland)   
  - drm/bridge: tc358768: Fix DSI command tx (Francesco Dolcini)   
  - nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint (Ryusuke Konishi)   
  - ocfs2: fix UBSAN warning in ocfs2_verify_volume() (Dmitry Antipov)   
  - nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint (Ryusuke Konishi)   
  - KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN (Sean Christopherson)   
  - KVM: nVMX: Treat vpid01 as current if L2 is active, but with VPID disabled (Sean Christopherson)   
  - vdpa/mlx5: Fix PA offset with unaligned starting iotlb map (Si-Wei Liu)   
  - ocfs2: uncache inode which has failed entering the group (Dmitry Antipov)   
  - mm: fix NULL pointer dereference in alloc_pages_bulk_noprof (Jinjiang Tu)   
  - x86/mm: Fix a kdump kernel failure on SME system when CONFIG_IMA_KEXEC=y (Baoquan He)   
  - ARM: 9419/1: mm: Fix kernel memory mapping for xip kernels (Harith G)   
  - samples: pktgen: correct dev to DEV (Wei Fang)   
  - net/mlx5e: CT: Fix null-ptr-deref in add rule err flow (Moshe Shemesh)   
  - net/mlx5e: kTLS, Fix incorrect page refcounting (Dragos Tatulea)   
  - net/mlx5: fs, lock FTE when checking if active (Mark Bloch)   
  - drm/rockchip: vop: Fix a dereferenced before check warning (Andy Yan)   
  - netlink: terminate outstanding dump on socket close (Jakub Kicinski)   
  - clk: qcom: gcc-qcs404: fix initial rate of GPLL3 (Gabor Juhos)   
  - leds: lp55xx: Remove redundant test for invalid channel number (Michal Vokáč)   
  - iommu/io-pgtable-arm: Fix stage-2 map/unmap for concatenated tables (Mostafa Saleh)   
  - vmstat: call fold_vm_zone_numa_events() before show per zone NUMA event (MengEn Sun)   
  - ftrace: Fix regression with module command in stack_trace_filter (guoweikang)   
  - ovl: Filter invalid inodes with missing lookup function (Vasiliy Kovalev)   
  - media: uvcvideo: Require entities to have a non-zero unique ID (Thadeu Lima de Souza Cascardo)   
  - media: uvcvideo: Stop stream during unregister (Ricardo Ribalda)   
  - media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal() (Gaosheng Cui)   
  - media: gspca: ov534-ov772x: Fix off-by-one error in set_frame_rate() (Jinjie Ruan)   
  - media: venus: Fix pm_runtime_set_suspended() with runtime pm enabled (Jinjie Ruan)   
  - media: ts2020: fix null-ptr-deref in ts2020_probe() (Li Zetao)   
  - media: imx-jpeg: Ensure power suppliers be suspended before detach them (Ming Qian)   
  - media: i2c: tc358743: Fix crash in the probe error path when using polling (Alexander Shiyan)   
  - media: imx-jpeg: Set video drvdata before register video device (Ming Qian)   
  - arm64: dts: allwinner: pinephone: Add mount matrix to accelerometer (Dragan Simic)   
  - LTS version: v5.15.173 (Vijayendra Suman)   
  - 9p: fix slab cache name creation for real (Linus Torvalds)   
  - udf: Avoid directory type conversion failure due to ENOMEM (Jan Kara)   
  - udf: Allocate name buffer in directory iterator on heap (Jan Kara)   
  - mm/memory: add non-anonymous page check in the copy_present_page() (Yuanzheng Song)   
  - io_uring: fix possible deadlock in io_register_iowq_max_workers() (Hagar Hemdan)   
  - md/raid10: improve code of mrdev in raid10_sync_request (Li Nan)   
  - net: usb: qmi_wwan: add Fibocom FG132 0x0112 composition (Reinhard Speyerer)   
  - HID: lenovo: Add support for Thinkpad X1 Tablet Gen 3 keyboard (Hans de Goede)   
  - HID: multitouch: Add quirk for Logitech Bolt receiver w/ Casa touchpad (Kenneth Albanowski)   
  - fs: Fix uninitialized value issue in from_kuid and from_kgid (Alessandro Zanni)   
  - vDPA/ifcvf: Fix pci_read_config_byte() return code handling (Yuan Can)   
  - powerpc/powernv: Free name on error in opal_event_init() (Michael Ellerman)   
  - drm/vmwgfx: Limit display layout ioctl array size to VMWGFX_NUM_DISPLAY_UNITS (Ian Forbes)   
  - sound: Make CONFIG_SND depend on INDIRECT_IOMEM instead of UML (Julian Vetter)   
  - crypto: marvell/cesa - Disable hash algorithms (Herbert Xu)   
  - bpf: use kvzmalloc to allocate BPF verifier environment (Rik van Riel)   
  - HID: multitouch: Add quirk for HONOR MagicBook Art 14 touchpad (WangYuli)   
  - HID: multitouch: Add support for B2402FVA track point (Stefan Blum)   
  - block: Fix elevator_get_default() checking for NULL q->tag_set (SurajSonawane2415)   
  - irqchip/ocelot: Fix trigger register address (Sergey Matsievskiy)   
  - 9p: Avoid creating multiple slab caches with the same name (Pedro Falcato)   
  - LTS version: v5.15.172 (Vijayendra Suman)   
  - ALSA: usb-audio: Add endianness annotations (Jan Schär)   
  - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Hyunwoo Kim)   
  - hv_sock: Initializing vsk->trans to NULL to prevent a dangling pointer (Hyunwoo Kim)   
  - ALSA: usb-audio: Add quirks for Dell WD19 dock (Jan Schär)   
  - ALSA: usb-audio: Support jack detection on Dell dock (Jan Schär)   
  - ucounts: fix counter leak in inc_rlimit_get_ucounts() (Andrei Vagin)   
  - ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove() (Andrew Kanner)   
  - irqchip/gic-v3: Force propagation of the active state with a read-back (Marc Zyngier)   
  - USB: serial: option: add Quectel RG650V (Benoît Monin)   
  - USB: serial: option: add Fibocom FG132 0x0112 composition (Reinhard Speyerer)   
  - USB: serial: qcserial: add support for Sierra Wireless EM86xx (Jack Wu)   
  - USB: serial: io_edgeport: fix use after free in debug printk (Dan Carpenter)   
  - usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd() (Dan Carpenter)   
  - usb: musb: sunxi: Fix accessing an released usb phy (Zijun Hu)   
  - fs/proc: fix compile warning about variable 'vmcore_mmap_ops' (Qi Xi)   
  - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Benoit Sevens)   
  - net: do not delay dst_entries_add() in dst_release() (Eric Dumazet)   
  - net: bridge: xmit: make sure we have at least eth header len bytes (Nikolay Aleksandrov)   
  - btrfs: reinitialize delayed ref list after deleting it from the list (Filipe Manana)   
  - nfs: Fix KMSAN warning in decode_getfattr_attrs() (Roberto Sassu)   
  - io_uring/rw: fix missing NOWAIT check for O_DIRECT start write (Jens Axboe)   
  - io_uring: use kiocb_{start,end}_write() helpers (Amir Goldstein)   
  - fs: create kiocb_{start,end}_write() helpers (Amir Goldstein)   
  - io_uring: rename kiocb_end_write() local helper (Amir Goldstein)   
  - posix-cpu-timers: Clear TICK_DEP_BIT_POSIX_TIMER on clone (Benjamin Segall)   
  - ALSA: usb-audio: Add quirk for HP 320 FHD Webcam (Takashi Iwai)   
  - dm-unstriped: cast an operand to sector_t to prevent potential uint32_t overflow (Zichen Xie)   
  - dm cache: fix potential out-of-bounds access on the first resume (Ming-Hung Tsai)   
  - dm cache: optimize dirty bit checking with find_next_bit when resizing (Ming-Hung Tsai)   
  - dm cache: fix out-of-bounds access to the dirty bitset when resizing (Ming-Hung Tsai)   
  - dm cache: correct the number of origin blocks to match the target length (Ming-Hung Tsai)   
  - thermal/drivers/qcom/lmh: Remove false lockdep backtrace (Dmitry Baryshkov)   
  - drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read() (Alex Deucher)   
  - drm/amdgpu: Adjust debugfs eviction and IB access permissions (Alex Deucher)   
  - pwm: imx-tpm: Use correct MODULO value for EPWM mode (Erik Schumacher)   
  - media: v4l2-ctrls-api: fix error handling for v4l2_g_ctrl() (Mauro Carvalho Chehab)   
  - media: v4l2-tpg: prevent the risk of a division by zero (Mauro Carvalho Chehab)   
  - media: pulse8-cec: fix data timestamp at pulse8_setup() (Mauro Carvalho Chehab)   
  - media: cx24116: prevent overflows on SNR calculus (Mauro Carvalho Chehab)   
  - media: s5p-jpeg: prevent buffer overflows (Mauro Carvalho Chehab)   
  - ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove (Amelie Delaunay)   
  - ALSA: firewire-lib: fix return value on fail in amdtp_tscm_init() (Murad Masimov)   
  - scsi: sd_zbc: Use kvzalloc() to allocate REPORT ZONES buffer (Johannes Thumshirn)   
  - media: adv7604: prevent underflow condition when reporting colorspace (Mauro Carvalho Chehab)   
  - media: dvb_frontend: don't play tricks with underflow values (Mauro Carvalho Chehab)   
  - media: dvbdev: prevent the risk of out of memory access (Mauro Carvalho Chehab)   
  - media: stb0899_algo: initialize cfr before using it (Mauro Carvalho Chehab)   
  - net: arc: fix the device for dma_map_single/dma_unmap_single (Johan Jonker)   
  - net: stmmac: Fix unbalanced IRQ wake disable warning on single irq case (Nícolas F. R. A. Prado)   
  - net: phy: ti: add PHY_RST_AFTER_CLK_EN flag (Diogo Silva)   
  - net: hns3: fix kernel crash when uninstalling driver (Peiyang Wang)   
  - i40e: fix race condition by adding filter's intermediate sync state (Aleksandr Loktionov)   
  - can: c_can: fix {rx,tx}_errors statistics (Dario Binacchi)   
  - sctp: properly validate chunk size in sctp_sf_ootb() (Xin Long)   
  - net: enetc: set MAC address to the VF net_device (Wei Fang)   
  - security/keys: fix slab-out-of-bounds in key_task_permission (Chen Ridong)   
  - nfs: avoid i_lock contention in nfs_clear_invalid_mapping (Mike Snitzer)   
  - NFSv3: handle out-of-order write replies. (NeilBrown)   
  - NFS: Add a tracepoint to show the results of nfs_set_cache_invalid() (Benjamin Coddington)   
  - NFSv3: only use NFS timeout for MOUNT when protocols are compatible (NeilBrown)   
  - HID: core: zero-initialize the report buffer (Jiri Kosina)   
  - ARM: dts: rockchip: Fix the realtek audio codec on rk3036-kylin (Heiko Stuebner)   
  - ARM: dts: rockchip: Fix the spi controller on rk3036 (Heiko Stuebner)   
  - ARM: dts: rockchip: drop grf reference from rk3036 hdmi (Heiko Stuebner)   
  - ARM: dts: rockchip: fix rk3036 acodec node (Heiko Stuebner)   
  - arm64: dts: imx8mp: correct sdhc ipg clk (Peng Fan)   
  - arm64: dts: rockchip: Fix LED triggers on rk3308-roc-cc (Heiko Stuebner)   
  - arm64: dts: rockchip: Remove #cooling-cells from fan on Theobroma lion (Heiko Stuebner)   
  - arm64: dts: rockchip: Fix bluetooth properties on Rock960 boards (Heiko Stuebner)   
  - arm64: dts: rockchip: Remove hdmi's 2nd interrupt on rk3328 (Diederik de Haas)   
  - arm64: dts: rockchip: Fix rt5651 compatible value on rk3399-sapphire-excavator (Geert Uytterhoeven)


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-305.176.3.el9uek]
changelog:
  - LTS version: v5.15.176 (Vijayendra Suman)
  - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa)
  - dt-bindings: display: adi,adv7533: Drop single lane support (Biju Das)
  - drm: adv7511: Drop dsi single lane support (Biju Das)
  - net/sctp: Prevent autoclose integer overflow in sctp_association_init() (Nikolay Kuratov)
  - sky2: Add device ID 11ab:4373 for Marvell 88E8075 (Pascal Hambourg)
  - pinctrl: mcp23s08: Fix sleeping in atomic context due to regmap locking (Evgenii Shatokhin)
  - RDMA/uverbs: Prevent integer overflow issue (Dan Carpenter)
  - kcov: mark in_softirq_really() as __always_inline (Arnd Bergmann)
  - modpost: fix the missed iteration for the max bit in do_input() (Masahiro Yamada)
  - modpost: fix input MODULE_DEVICE_TABLE() built for 64-bit on 32-bit host (Masahiro Yamada)
  - usb: xhci: Avoid queuing redundant Stop Endpoint commands (Michal Pecio)
  - ARC: build: Try to guess GCC variant of cross compiler (Leon Romanovsky)
  - irqchip/gic: Correct declaration of *percpu_base pointer in union gic_base (Uros Bizjak)
  - net: usb: qmi_wwan: add Telit FE910C04 compositions (Daniele Palmas)
  - bpf: fix potential error return (Anton Protopopov)
  - sound: usb: format: don't warn that raw DSD is unsupported (Adrian Ratiu)
  - sound: usb: enable DSD output for ddHiFi TC44C (Adrian Ratiu)
  - btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount (Filipe Manana)
  - drm/amdkfd: Correct the migration DMA map direction (Prike Liang)
  - wifi: mac80211: wake the queues in case of failure in resume (Emmanuel Grumbach)
  - btrfs: sysfs: fix direct super block member reads (Qu Wenruo)
  - btrfs: sysfs: convert scnprintf and snprintf to sysfs_emit (Anand Jain)
  - btrfs: fix use-after-free when COWing tree bock and tracing is enabled (Filipe Manana)
  - btrfs: rename and export __btrfs_cow_block() (Filipe Manana)
  - ila: serialize calls to nf_register_net_hooks() (Eric Dumazet)
  - af_packet: fix vlan_get_protocol_dgram() vs MSG_PEEK (Eric Dumazet)
  - af_packet: fix vlan_get_tci() vs MSG_PEEK (Eric Dumazet)
  - net: wwan: iosm: Properly check for valid exec stage in ipc_mmio_init() (Maciej S. Szmigiero)
  - net: restrict SO_REUSEPORT to inet sockets (Eric Dumazet)
  - RDMA/rtrs: Ensure 'ib_sge list' is accessible (Li Zhijian)
  - net: mv643xx_eth: fix an OF node reference leak (Joe Hattori)
  - eth: bcmsysport: fix call balance of priv->clk handling routines (Vitalii Mordan)
  - ALSA: usb-audio: US16x08: Initialize array before use (Tanya Agarwal)
  - net: llc: reset skb->transport_header (Antonio Pastor)
  - netfilter: nft_set_hash: unaligned atomic read on struct nft_set_ext (Pablo Neira Ayuso)
  - drm/i915/dg1: Fix power gate sequence. (Rodrigo Vivi)
  - netrom: check buffer length before accessing it (Ilya Shchipletsov)
  - net: fix memory leak in tcp_conn_request() (Wang Liang)
  - net: stmmac: restructure the error path of stmmac_probe_config_dt() (Joe Hattori)
  - net: stmmac: don't create a MDIO bus if unnecessary (Andrew Halaney)
  - net: stmmac: platform: provide devm_stmmac_probe_config_dt() (Bartosz Golaszewski)
  - RDMA/hns: Fix missing flush CQE for DWQE (Chengchang Tang)
  - RDMA/hns: Fix warning storm caused by invalid input in IO path (Chengchang Tang)
  - RDMA/hns: Fix mapping error of zero-hop WQE buffer (wenglianfa)
  - RDMA/hns: Remove redundant 'bt_level' for hem_list_alloc_item() (Yunsheng Lin)
  - RDMA/hns: Remove redundant 'attr_mask' in modify_qp_init_to_init() (Yixing Liu)
  - drm/bridge: adv7511_audio: Update Audio InfoFrame properly (Stefan Ekenberg)
  - RDMA/bnxt_re: Fix the locking while accessing the QP table (Selvin Xavier)
  - RDMA/bnxt_re: Fix max_qp_wrs reported (Selvin Xavier)
  - RDMA/bnxt_re: Fix reporting hw_ver in query_device (Kalesh AP)
  - RDMA/bnxt_re: Add check for path mtu in modify_qp (Saravanan Vajravel)
  - RDMA/mlx5: Enforce same type port association for multiport RoCE (Patrisious Haddad)
  - xhci: Turn NEC specific quirk for handling Stop Endpoint errors generic (Mathias Nyman)
  - usb: xhci: Limit Stop Endpoint retries (Michal Pecio)
  - xhci: retry Stop Endpoint on buggy NEC controllers (Michal Pecio)
  - thunderbolt: Add support for Intel Panther Lake-M/P (Mika Westerberg)
  - thunderbolt: Add support for Intel Lunar Lake (Mika Westerberg)
  - thunderbolt: Add Intel Barlow Ridge PCI ID (Mika Westerberg)
  - thunderbolt: Add support for Intel Meteor Lake (Mika Westerberg)
  - thunderbolt: Add support for Intel Raptor Lake (George D Sworo)
  - tracing: Have process_string() also allow arrays (Steven Rostedt)
  - selinux: ignore unknown extended permissions (Thiébaud Weksteen)
  - x86/hyperv: Fix hv tsc page based sched_clock for hibernation (Naman Jain)
  - net: dsa: improve shutdown sequence (Vladimir Oltean)
  - nfsd: cancel nfsd_shrinker_work using sync mode in nfs4_state_shutdown_net (Yang Erkun)
  - btrfs: avoid monopolizing a core when activating a swap file (Filipe Manana)
  - power: supply: gpio-charger: Fix set charge current limits (Dimitri Fedrau)
  - tracing: Prevent bad count for tracing_cpumask_write (Lizhi Xu)
  - tracing: Constify string literal data member in struct trace_event_call (Christian Göttsche)
  - ksmbd: fix racy issue from session lookup and expire (Namjae Jeon)
  - lib: stackinit: hide never-taken branch from compiler (Kees Cook)
  - drm/dp_mst: Verify request type in the corresponding down message reply (Imre Deak)
  - arm64: Ensure bits ASID[15:8] are masked out when the kernel uses 8-bit ASIDs (Catalin Marinas)
  - arm64: mm: Rename asid2idx() to ctxid2asid() (Yunfeng Ye)
  - ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write (Jordy Zomer)
  - ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read (Jordy Zomer)
  - drm/dp_mst: Fix MST sideband message body length check (Imre Deak)
  - bpf: Check validity of link->type in bpf_link_show_fdinfo() (Hou Tao)
  - MIPS: Probe toolchain support of -msym32 (Jiaxun Yang)
  - vmalloc: fix accounting with i915 (Matthew Wilcox (Oracle))
  - virtio-blk: don't keep queue frozen during system suspend (Ming Lei)
  - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (Cathy Avery)
  - scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load time (Ranjan Kumar)
  - platform/x86: asus-nb-wmi: Ignore unknown event 0xCF (Armin Wolf)
  - regmap: Use correct format specifier for logging range errors (Mark Brown)
  - ALSA: hda/conexant: fix Z60MR100 startup pop issue (bo liu)
  - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl)
  - scsi: qla1280: Fix hw revision numbering for ISP1020/1040 (Magnus Lindholm)
  - watchdog: it87_wdt: add PWRGD enable quirk for Qotom QCML04 (James Hilliard)
  - tracing/kprobe: Make trace_kprobe's module callback called after jump_label update (Masami Hiramatsu (Google))
  - mtd: rawnand: fix double free in atmel_pmecc_create_user() (Dan Carpenter)
  - dmaengine: at_xdmac: avoid null_prt_deref in at_xdmac_prep_dma_memset (Chen Ridong)
  - dmaengine: dw: Select only supported masters for ACPI devices (Andy Shevchenko)
  - dmaengine: mv_xor: fix child node refcount handling in early exit (Javier Carrasco)
  - phy: core: Fix that API devm_phy_destroy() fails to destroy the phy (Zijun Hu)
  - phy: core: Fix that API devm_of_phy_provider_unregister() fails to unregister the phy provider (Zijun Hu)
  - phy: core: Fix that API devm_phy_put() fails to release the phy (Zijun Hu)
  - phy: core: Fix an OF node refcount leakage in of_phy_provider_lookup() (Zijun Hu)
  - phy: core: Fix an OF node refcount leakage in _of_phy_get() (Zijun Hu)
  - mtd: rawnand: arasan: Fix missing de-registration of NAND (Maciej Andrzejewski)
  - mtd: rawnand: arasan: Fix double assertion of chip-select (Maciej Andrzejewski)
  - mtd: diskonchip: Cast an operand to prevent potential overflow (Zichen Xie)
  - nfsd: restore callback functionality for NFSv4.0 (NeilBrown)
  - bpf: Check negative offsets in __bpf_skb_min_len() (Cong Wang)
  - tcp_bpf: Add sk_rmem_alloc related logic for tcp_bpf ingress redirection (Zijian Zhang)
  - tcp_bpf: Charge receive socket buffer in bpf_tcp_ingress() (Cong Wang)
  - mm/vmstat: fix a W=1 clang compiler warning (Bart Van Assche)
  - media: dvb-frontends: dib3000mb: fix uninit-value in dib3000_write_reg (Nikita Zhandarovich)
  - drm/amdgpu: Handle NULL bo->tbo.resource (again) in amdgpu_vm_bo_update (Michel Dänzer)
  - epoll: Add synchronous wakeup support for ep_poll_callback (Xuewen Yan)
  - ceph: validate snapdirname option length when mounting (Ilya Dryomov)
  - of: Fix refcount leakage for OF node returned by __of_get_dma_parent() (Zijun Hu)
  - of: Fix error path in of_parse_phandle_with_args_map() (Herve Codina)
  - udmabuf: also check for F_SEAL_FUTURE_WRITE (Jann Horn)
  - nilfs2: prevent use of deleted inode (Edward Adam Davis)
  - of/irq: Fix using uninitialized variable @addr_len in API of_irq_parse_one() (Zijun Hu)
  - NFS/pnfs: Fix a live lock between recalled layouts and layoutget (Trond Myklebust)
  - tracing: Add "%s" check in test_event_printk() (Steven Rostedt)
  - tracing: Add missing helper functions in event pointer dereference check (Steven Rostedt)
  - tracing: Fix test_event_printk() to process entire print argument (Steven Rostedt)
  - KVM: x86: Play nice with protected guests in complete_hypercall_exit() (Sean Christopherson)
  - Drivers: hv: util: Avoid accessing a ringbuffer not initialized yet (Michael Kelley)
  - btrfs: tree-checker: reject inline extent items with 0 ref count (Qu Wenruo)
  - zram: refuse to use zero sized block device as backing device (Kairui Song)
  - sh: clk: Fix clk_enable() to return 0 on NULL clk (Geert Uytterhoeven)
  - hwmon: (tmp513) Fix interpretation of values of Temperature Result and Limit Registers (Murad Masimov)
  - hwmon: (tmp513) Fix Current Register value interpretation (Murad Masimov)
  - hwmon: (tmp513) Fix interpretation of values of Shunt Voltage and Limit Registers (Murad Masimov)
  - hwmon: (tmp513) Use SI constants from units.h (Andy Shevchenko)
  - hwmon: (tmp513) Simplify with dev_err_probe() (Andy Shevchenko)
  - hwmon: (tmp513) Don't use "proxy" headers (Andy Shevchenko)
  - drm/modes: Avoid divide by zero harder in drm_mode_vrefresh() (Ville Syrjälä)
  - USB: serial: option: add Telit FE910C04 rmnet compositions (Daniele Palmas)
  - USB: serial: option: add MediaTek T7XX compositions (Jack Wu)
  - USB: serial: option: add Netprisma LCUK54 modules for WWAN Ready (Mank Wang)
  - USB: serial: option: add MeiG Smart SLM770A (Michal Hrusecky)
  - USB: serial: option: add TCL IK512 MBIM & ECM (Daniel Swanemar)
  - efivarfs: Fix error on non-existent file (James Bottomley)
  - i2c: riic: Always round-up when calculating bus period (Geert Uytterhoeven)
  - chelsio/chtls: prevent potential integer overflow on 32bit (Dan Carpenter)
  - mmc: sdhci-tegra: Remove SDHCI_QUIRK_BROKEN_ADMA_ZEROLEN_DESC quirk (Prathamesh Shete)
  - net: mdiobus: fix an OF node reference leak (Joe Hattori)
  - netfilter: ipset: Fix for recursive locking warning (Phil Sutter)
  - net: ethernet: bgmac-platform: fix an OF node reference leak (Joe Hattori)
  - net: hinic: Fix cleanup in create_rxqs/txqs() (Dan Carpenter)
  - ionic: use ee->offset when returning sprom data (Shannon Nelson)
  - ionic: Fix netdev notifier unregister on failure (Brett Creeley)
  - netdevsim: prevent bad user input in nsim_dev_health_break_write() (Eric Dumazet)
  - net/smc: check return value of sock_recvmsg when draining clc data (Guangguan Wang)
  - net/smc: check smcd_v2_ext_offset when receiving proposal msg (Guangguan Wang)
  - net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg (Guangguan Wang)
  - net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll (Guangguan Wang)
  - erofs: fix incorrect symlink detection in fast symlink (Gao Xiang)
  - i2c: pnx: Fix timeout in wait functions (Vladimir Riabchun)
  - usb: dwc2: gadget: Don't write invalid mapped sg entries into dma_desc with iommu enabled (Peng Hongchi)
  - MIPS: Loongson64: DTS: Fix msi node for ls7a (Jiaxun Yang)
  - PCI: Add ACS quirk for Broadcom BCM5760X NIC (Ajit Khaparde)
  - PCI: vmd: Create domain symlink before pci_bus_add_devices() (Jiwei Sun)
  - ASoC: Intel: sof_sdw: fix jack detection on ADL-N variant RVP (Pierre-Louis Bossart)
  - usb: cdns3: Add quirk flag to enable suspend residency (Roger Quadros)
  - ALSA: usb: Fix UBSAN warning in parse_audio_unit() (Takashi Iwai)
  - PCI/AER: Disable AER service on suspend (Kai-Heng Feng)
  - PCI: Use preserve_config in place of pci_flags (Vidya Sagar)
  - net: sched: fix ordering of qlen adjustment (Lion Ackermann)
  - LTS version: v5.15.175 (Vijayendra Suman)
  - x86/static-call: fix 32-bit build (Juergen Gross)
  - ALSA: usb-audio: Fix a DMA to stack memory bug (Dan Carpenter)
  - x86/xen: remove hypercall page (Juergen Gross)
  - x86/xen: use new hypercall functions instead of hypercall page (Juergen Gross)
  - x86/xen: add central hypercall functions (Juergen Gross)
  - x86/xen: don't do PV iret hypercall through hypercall page (Juergen Gross)
  - x86/static-call: provide a way to do very early static-call updates (Juergen Gross)
  - objtool/x86: allow syscall instruction (Juergen Gross)
  - x86: make get_cpu_vendor() accessible from Xen code (Juergen Gross)
  - xen/netfront: fix crash when removing device (Juergen Gross)
  - Revert "parisc: fix a possible DMA corruption" (Greg Kroah-Hartman)
  - tracing/kprobes: Skip symbol counting logic for module symbols in create_local_trace_kprobe() (Nikolay Kuratov)
  - bpf: sync_linked_regs() must preserve subreg_def (Eduard Zingerman)
  - blk-iocost: Avoid using clamp() on inuse in __propagate_weights() (Nathan Chancellor)
  - ACPICA: events/evxfregn: don't release the ContextMutex that was never acquired (Daniil Tatianin)
  - team: Fix feature propagation of NETIF_F_GSO_ENCAP_ALL (Daniel Borkmann)
  - bonding: Fix feature propagation of NETIF_F_GSO_ENCAP_ALL (Daniel Borkmann)
  - net/sched: netem: account for backlog updates from child qdisc (Martin Ottens)
  - Documentation: PM: Clarify pm_runtime_resume_and_get() return value (Paul Barker)
  - qca_spi: Make driver probing reliable (Stefan Wahren)
  - qca_spi: Fix clock speed for multiple QCA7000 (Stefan Wahren)
  - cxgb4: use port number to set mac addr (Anumula Murali Mohan Reddy)
  - ACPI: resource: Fix memory resource type union access (Ilpo Järvinen)
  - net: sparx5: fix the maximum frame length register (Daniel Machon)
  - net: sparx5: fix FDMA performance issue (Daniel Machon)
  - net: lapb: increase LAPB_HEADER_LEN (Eric Dumazet)
  - ptp: kvm: x86: Return EOPNOTSUPP instead of ENODEV from kvm_arch_ptp_init() (Thomas Weißschuh)
  - ptp: kvm: Use decrypted memory in confidential guest on x86 (Jeremi Piotrowski)
  - selftests: mlxsw: sharedbuffer: Remove duplicate test cases (Danielle Ratson)
  - selftests: mlxsw: sharedbuffer: Remove h1 ingress test case (Danielle Ratson)
  - tipc: fix NULL deref in cleanup_bearer() (Eric Dumazet)
  - batman-adv: Do not let TT changes list grows indefinitely (Remi Pommarel)
  - batman-adv: Remove uninitialized data in full table TT response (Remi Pommarel)
  - batman-adv: Do not send uninitialized TT changes (Remi Pommarel)
  - acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl (Suraj Sonawane)
  - exfat: fix potential deadlock on __exfat_get_dentry_set (Sungjong Seo)
  - virtio/vsock: Fix accept_queue memory leak (Michal Luczaj)
  - bpf, sockmap: Fix update element with same (Michal Luczaj)
  - xfs: fix scrub tracepoints when inode-rooted btrees are involved (Darrick J. Wong)
  - xfs: return from xfs_symlink_verify early on V4 filesystems (Darrick J. Wong)
  - xfs: don't drop errno values when we fail to ficlone the entire range (Darrick J. Wong)
  - xfs: update btree keys correctly when _insrec splits an inode root block (Darrick J. Wong)
  - drm/i915: Fix memory leak by correcting cache object name in error handler (Jiasheng Jiang)
  - usb: gadget: u_serial: Fix the issue that gs_start_io crashed due to accessing null pointer (Lianqin Hu)
  - usb: ehci-hcd: fix call balance of clocks handling routines (Vitalii Mordan)
  - usb: dwc2: Fix HCD port connection race (Stefan Wahren)
  - usb: dwc2: hcd: Fix GetPortStatus & SetPortFeature (Stefan Wahren)
  - usb: dwc2: Fix HCD resume (Stefan Wahren)
  - ata: sata_highbank: fix OF node reference leak in highbank_initialize_phys() (Joe Hattori)
  - usb: host: max3421-hcd: Correctly abort a USB request. (Mark Tomlinson)
  - ALSA: usb-audio: Add implicit feedback quirk for Yamaha THR5 (Jaakko Salo)
  - tcp: check space before adding MPTCP SYN options (MoYuanhao)
  - LTS version: v5.15.174 (Vijayendra Suman)
  - Bluetooth: hci_core: Fix calling mgmt_device_connected (Luiz Augusto von Dentz)
  - net/smc: Fix af_ops of child socket pointing to released memory (Karsten Graul)
  - media: venus: vdec: fixed possible memory leak issue (Ameer Hamza)
  - serial: amba-pl011: fix build regression (Arnd Bergmann)
  - drm/amdgpu: rework resume handling for display (v2) (Alex Deucher)
  - drm/amd/display: Correct the defined value for AMDGPU_DMUB_NOTIFICATION_MAX (Wayne Lin)
  - net: dsa: microchip: correct KSZ8795 static MAC table access (Tristram Ha)
  - Bluetooth: L2CAP: Fix uaf in l2cap_connect (Luiz Augusto von Dentz)
  - arm64: smccc: Remove broken support for SMCCCv1.3 SVE discard hint (Mark Rutland)
  - arm64/sve: Discard stale CPU state when handling SVE traps (Mark Brown)
  - gve: Fixes for napi_poll when budget is 0 (Ziwei Xiao)
  - scsi: core: Fix scsi_mode_select() buffer length handling (Damien Le Moal)
  - Revert "drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read()" (Zhang Zekun)
  - fou: remove warn in gue_gro_receive on unsupported protocol (Willem de Bruijn)
  - ima: Fix use-after-free on a dentry's dname.name (Stefan Berger)
  - crypto: hisilicon/qm - inject error before stopping queue (Weili Qian)
  - drm/amd/display: Check BIOS images before it is used (Alex Hung)
  - mmc: mtk-sd: Fix error handle of probe function (Andy-ld Lu)
  - xhci: dbc: Fix STALL transfer event handling (Mathias Nyman)
  - mm/damon/vaddr: fix issue in damon_va_evenly_split_region() (Zheng Yejian)
  - mm/damon/vaddr-test: split a test function having >1024 bytes frame size (SeongJae Park)
  - jffs2: Fix rtime decompressor (Richard Weinberger)
  - jffs2: Prevent rtime decompress memory corruption (Kinsey Moore)
  - KVM: arm64: vgic-its: Clear ITE when DISCARD frees an ITE (Kunkun Jiang)
  - KVM: arm64: vgic-its: Clear DTE when MAPD unmaps a device (Kunkun Jiang)
  - KVM: arm64: vgic-its: Add a data length check in vgic_its_save_* (Jing Zhang)
  - tracing/eprobe: Fix to release eprobe when failed to add dyn_event (Masami Hiramatsu (Google))
  - btrfs: fix missing snapshot drew unlock when root is dead during swap activation (Filipe Manana)
  - sched/core: Prevent wakeup of ksoftirqd during idle load balance (K Prateek Nayak)
  - sched/fair: Check idle_cpu() before need_resched() to detect ilb CPU turning busy (K Prateek Nayak)
  - sched/fair: Add NOHZ balancer flag for nohz.next_balance updates (Valentin Schneider)
  - sched/core: Remove the unnecessary need_resched() check in nohz_csd_func() (K Prateek Nayak)
  - modpost: Add .irqentry.text to OTHER_SECTIONS (Thomas Gleixner)
  - modpost: Include '.text.*' in TEXT_SECTIONS (Nathan Chancellor)
  - misc: eeprom: eeprom_93cx6: Add quirk for extra read clock cycle (Parker Newman)
  - powerpc/prom_init: Fixup missing powermac #size-cells (Michael Ellerman)
  - MIPS: Loongson64: DTS: Really fix PCIe port nodes for ls7a (Xi Ruoyao)
  - usb: chipidea: udc: handle USB Error Interrupt if IOC not set (Xu Yang)
  - i3c: Use i3cdev->desc->info instead of calling i3c_device_get_info() to avoid deadlock (Defa Li)
  - PCI: Add ACS quirk for Wangxun FF5xxx NICs (Mengyuan Lou)
  - PCI: Add 'reset_subordinate' to reset hierarchy below bridge (Keith Busch)
  - PCI: Detect and trust built-in Thunderbolt chips (Esther Shimanovich)
  - i3c: mipi-i3c-hci: Mask ring interrupts before ring stop request (Jarkko Nikula)
  - f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode. (Qi Han)
  - nvdimm: rectify the illogical code within nd_dax_probe() (Yi Yang)
  - pinctrl: qcom-pmic-gpio: add support for PM8937 (Barnabás Czémán)
  - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Kai Mäkisara)
  - scsi: st: Don't modify unknown block number in MTIOCGET (Kai Mäkisara)
  - leds: class: Protect brightness_show() with led_cdev->led_access mutex (Mukesh Ojha)
  - scsi: hisi_sas: Add cond_resched() for no forced preemption model (Yihang Li)
  - tracing: Use atomic64_inc_return() in trace_clock_counter() (Uros Bizjak)
  - pinctrl: freescale: fix COMPILE_TEST error with PINCTRL_IMX_SCU (Esben Haabendal)
  - netpoll: Use rcu_access_pointer() in __netpoll_setup (Breno Leitao)
  - net/neighbor: clear error in case strict check is not set (Jakub Kicinski)
  - rocker: fix link status detection in rocker_carrier_init() (Dmitry Antipov)
  - ASoC: hdmi-codec: reorder channel allocation list (Jonas Karlman)
  - Bluetooth: hci_core: Fix not checking skb length on hci_acldata_packet (Luiz Augusto von Dentz)
  - wifi: brcmfmac: Fix oops due to NULL pointer dereference in brcmf_sdiod_sglist_rw() (Norbert van Bolhuis)
  - wifi: ipw2x00: libipw_rx_any(): fix bad alignment (Jiapeng Chong)
  - drm/amdgpu: set the right AMDGPU sg segment limitation (Prike Liang)
  - drm/amdgpu: skip amdgpu_device_cache_pci_state under sriov (Victor Zhao)
  - jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree (Nihar Chaithanya)
  - jfs: fix array-index-out-of-bounds in jfs_readdir (Ghanshyam Agrawal)
  - jfs: fix shift-out-of-bounds in dbSplit (Ghanshyam Agrawal)
  - jfs: array-index-out-of-bounds fix in dtReadFirst (Ghanshyam Agrawal)
  - dma-debug: fix a possible deadlock on radix_lock (Levi Yun)
  - drm/amdgpu: refine error handling in amdgpu_ttm_tt_pin_userptr (Lang Yu)
  - drm/amdgpu: Dereference the ATCS ACPI buffer (Prike Liang)
  - drm/amdgpu: clear RB_OVERFLOW bit when enabling interrupts for vega20_ih (Victor Lu)
  - drm/panel: simple: Add Microchip AC69T88A LVDS Display panel (Manikandan Muralidharan)
  - wifi: ath5k: add PCI ID for Arcadyan devices (Rosen Penev)
  - wifi: ath5k: add PCI ID for SX76X (Rosen Penev)
  - net: inet6: do not leave a dangling sk pointer in inet6_create() (Ignat Korchagin)
  - net: inet: do not leave a dangling sk pointer in inet_create() (Ignat Korchagin)
  - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Ignat Korchagin)
  - net: af_can: do not leave a dangling sk pointer in can_create() (Ignat Korchagin)
  - Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create() (Ignat Korchagin)
  - af_packet: avoid erroring out after sock_init_data() in packet_create() (Ignat Korchagin)
  - net/sched: cbs: Fix integer overflow in cbs_set_port_rate() (Elena Salomatkina)
  - net: ethernet: fs_enet: Use %pa to format resource_size_t (Simon Horman)
  - net: fec_mpc52xx_phy: Use %pa to format resource_size_t (Simon Horman)
  - samples/bpf: Fix a resource leak (Zhu Jun)
  - r8169: don't apply UDP padding quirk on RTL8126A (Heiner Kallweit)
  - drm/radeon/r600_cs: Fix possible int overflow in r600_packet3_check() (Igor Artemiev)
  - drm/mcde: Enable module autoloading (Liao Chen)
  - drm: panel-orientation-quirks: Add quirk for AYA NEO 2 model (Joaquín Ignacio Aramendía)
  - drm/vc4: hvs: Set AXI panic modes for the HVS (Dave Stevenson)
  - soc: imx8m: Probe the SoC driver as platform driver (Marek Vasut)
  - media: cx231xx: Add support for Dexatek USB Video Grabber 1d19:6108 (Rohan Barar)
  - media: uvcvideo: Add a quirk for the Kaiweets KTI-W02 infrared camera (David Given)
  - kcsan: Turn report_filterlist_lock into a raw_spinlock (Marco Elver)
  - kselftest/arm64: Don't leak pipe fds in pac.exec_sign_all() (Mark Brown)
  - btrfs: avoid unnecessary device path update for the same device (Qu Wenruo)
  - s390/cpum_sf: Handle CPU hotplug remove during sampling (Thomas Richter)
  - epoll: annotate racy check (Christian Brauner)
  - iommu/arm-smmu: Defer probe of clients after smmu device bound (Pratyush Brahma)
  - ocfs2: update seq_file index in ocfs2_dlm_seq_next (Wengang Wang)
  - mmc: core: Further prevent card detect during shutdown (Ulf Hansson)
  - mmc: sdhci-pci: Add DMI quirk for missing CD GPIO on Vexia Edu Atla 10 tablet (Hans de Goede)
  - regmap: detach regmap from dev on regmap_exit (Cosmin Tanislav)
  - xsk: fix OOB map writes when deleting elements (Maciej Fijalkowski)
  - dma-buf: fix dma_fence_array_signaled v4 (Christian König)
  - bpf: fix OOB devmap writes when deleting elements (Maciej Fijalkowski)
  - bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again (Liequan Che)
  - nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry() (Ryusuke Konishi)
  - scsi: ufs: core: sysfs: Prevent div by zero (Gwendal Grignou)
  - scsi: qla2xxx: Remove check req_sg_cnt should be equal to rsp_sg_cnt (Saurav Kashyap)
  - scsi: qla2xxx: Fix use after free on unload (Quinn Tran)
  - scsi: qla2xxx: Supported speed displayed incorrectly for VPorts (Anil Gurumurthy)
  - scsi: qla2xxx: Fix NVMe and NPIV connect issue (Quinn Tran)
  - ALSA: hda/realtek: Add support for Samsung Galaxy Book3 360 (NP730QFG) (Sahas Leelodharry)
  - ALSA: hda/realtek: Enable mute and micmute LED on HP ProBook 430 G8 (Nazar Bilinskyi)
  - ALSA: usb-audio: add mixer mapping for Corsair HS80 (Marie Ramlow)
  - arm64: ptrace: fix partial SETREGSET for NT_ARM_TAGGED_ADDR_CTRL (Mark Rutland)
  - tracing: Fix cmp_entries_dup() to respect sort() comparison rules (Kuan-Wei Chiu)
  - can: dev: can_set_termination(): allow sleeping GPIOs (Marc Kleine-Budde)
  - watchdog: rti: of: honor timeout-sec property (Alexander Sverdlin)
  - HID: wacom: fix when get product name maybe null pointer (WangYuli)
  - bpf: Fix exact match conditions in trie_get_next_key() (Hou Tao)
  - bpf: Handle BPF_EXIST and BPF_NOEXIST for LPM trie (Hou Tao)
  - ocfs2: free inode when ocfs2_get_init_inode() fails (Tetsuo Handa)
  - drm/v3d: Enable Performance Counters before clearing them (Maíra Canal)
  - spi: mpc52xx: Add cancel_work_sync before module remove (Pei Xiao)
  - tools: Override makefile ARCH variable if defined, but empty (Björn Töpel)
  - ALSA: usb-audio: Notify xrun for low-latency mode (Takashi Iwai)
  - ALSA: pcm: Avoid reference to status->state (Takashi Iwai)
  - ALSA: pcm: Add more disconnection checks at file ops (Takashi Iwai)
  - tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg (Zijian Zhang)
  - drm/sti: Add __iomem for mixer_dbg_mxn's parameter (Pei Xiao)
  - bpftool: fix potential NULL pointer dereferencing in prog_dump() (Amir Mohammadi)
  - bpftool: Remove asserts from JIT disassembler (Quentin Monnet)
  - serial: amba-pl011: Fix RX stall when DMA is used (Kartik Rajput)
  - serial: amba-pl011: Use port lock wrappers (Thomas Gleixner)
  - dt-bindings: serial: rs485: Fix rs485-rts-delay property (Michal Simek)
  - dt_bindings: rs485: Correct delay values (Lino Sanfilippo)
  - gpio: grgpio: Add NULL check in grgpio_probe (Charles Han)
  - gpio: grgpio: use a helper variable to store the address of ofdev->dev (Bartosz Golaszewski)
  - geneve: do not assume mac header is set in geneve_xmit_skb() (Eric Dumazet)
  - ethtool: Fix wrong mod state in case of verbose and no_mask bitset (Kory Maincent)
  - netfilter: nft_set_hash: skip duplicated elements pending gc run (Pablo Neira Ayuso)
  - netfilter: ipset: Hold module reference while requesting a module (Phil Sutter)
  - net: sched: fix erspan_opt settings in cls_flower (Xin Long)
  - igb: Fix potential invalid memory access in igb_init_module() (Yuan Can)
  - net/qed: allow old cards not supporting "num_images" to work (Louis Leseur)
  - net/smc: fix LGR and link use-after-free issue (Wen Gu)
  - net/smc: Limit backlog connections (D. Wythe)
  - tipc: Fix use-after-free of kernel socket in cleanup_bearer(). (Kuniyuki Iwashima)
  - dccp: Fix memory leak in dccp_feat_change_recv (Ivan Solodovnikov)
  - net/ipv6: release expired exception dst cached in socket (Jiri Wiesner)
  - can: j1939: j1939_session_new(): fix skb reference counting (Dmitry Antipov)
  - net: hsr: avoid potential out-of-bound access in fill_frame_info() (Eric Dumazet)
  - net/sched: tbf: correct backlog statistic for GSO packets (Martin Ottens)
  - ptp: Add error handling for adjfine callback in ptp_clock_adjtime (Ajay Kaher)
  - netfilter: x_tables: fix LED ID check in led_tg_check() (Dmitry Antipov)
  - ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (Jinghao Jia)
  - can: ems_usb: ems_usb_rx_err(): fix {rx,tx}_errors statistics (Dario Binacchi)
  - can: sun4i_can: sun4i_can_err(): fix {rx,tx}_errors statistics (Dario Binacchi)
  - can: ifi_canfd: ifi_canfd_handle_lec_err(): fix {rx,tx}_errors statistics (Dario Binacchi)
  - can: m_can: m_can_handle_lec_err(): fix {rx,tx}_errors statistics (Dario Binacchi)
  - can: sun4i_can: sun4i_can_err(): call can_change_state() even if cf is NULL (Dario Binacchi)
  - can: c_can: c_can_handle_bus_err(): update statistics if skb allocation fails (Dario Binacchi)
  - can: do not increase rx statistics when generating a CAN rx error message frame (Vincent Mailhol)
  - can: peak_usb: CANFD: store 64-bits hw timestamps (Stephane Grosjean)
  - watchdog: mediatek: Make sure system reset gets asserted in mtk_wdt_restart() (Yassine Oudjana)
  - iTCO_wdt: mask NMI_NOW bit for update_no_reboot_bit() call (Oleksandr Ocheretnyi)
  - drm/etnaviv: flush shader L1 cache after user commandstream (Lucas Stach)
  - drm/sti: avoid potential dereference of error pointers (Ma Ke)
  - drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check (Ma Ke)
  - drm/sti: avoid potential dereference of error pointers in sti_hqvdp_atomic_check (Ma Ke)
  - btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc() (Josef Bacik)
  - nfsd: fix nfs4_openowner leak when concurrent nfsd4_open occur (Yang Erkun)
  - nfsd: make sure exp active before svc_export_show (Yang Erkun)
  - PCI: rockchip-ep: Fix address translation unit programming (Damien Le Moal)
  - dm thin: Add missing destroy_work_on_stack() (Yuan Can)
  - ovl: properly handle large files in ovl_security_fileattr (Oleksandr Tymoshenko)
  - PCI: keystone: Add link up check to ks_pcie_other_map_bus() (Kishon Vijay Abraham I)
  - i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs() (Frank Li)
  - scsi: ufs: exynos: Fix hibern8 notify callbacks (Peter Griffin)
  - util_macros.h: fix/rework find_closest() macros (Alexandru Ardelean)
  - s390/entry: Mark IRQ entries to fix stack depot warnings (Vasily Gorbik)
  - ad7780: fix division by zero in ad7780_write_raw() (Zicheng Qu)
  - btrfs: ref-verify: fix use-after-free after invalid ref action (Filipe Manana)
  - btrfs: add a sanity check for btrfs root in btrfs_search_slot() (Lizhi Xu)
  - btrfs: add might_sleep() annotations (ChenXiaoSong)
  - quota: flush quota_release_work upon quota writeback (Ojaswin Mujoo)
  - xfs: remove unknown compat feature check in superblock write validation (Long Li)
  - xfs: fix log recovery when unknown rocompat bits are set (Darrick J. Wong)
  - ASoC: fsl_micfil: fix the naming style for mask definition (Shengjiu Wang)
  - sh: intc: Fix use-after-free bug in register_intc_controller() (Dan Carpenter)
  - sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport (Liu Jian)
  - sunrpc: remove unnecessary test in rpc_task_set_client() (Thiago Rafael Becker)
  - nfs: ignore SB_RDONLY when mounting nfs (Li Lingfeng)
  - modpost: remove incorrect code in do_eisa_entry() (Masahiro Yamada)
  - rtc: ab-eoz9: don't fail temperature reads on undervoltage notification (Maxime Chevallier)
  - 9p/xen: fix release of IRQ (Alex Zenla)
  - 9p/xen: fix init sequence (Alex Zenla)
  - block: return unsigned int from bdev_io_min (Christoph Hellwig)
  - jffs2: fix use of uninitialized variable (Qingfang Deng)
  - ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit (Waqar Hameed)
  - ubi: fastmap: Fix duplicate slab cache names while attaching (Zhihao Cheng)
  - ubifs: Correct the total block count by deducting journal reservation (Zhihao Cheng)
  - rtc: check if __rtc_read_time was successful in rtc_timer_do_work() (Yongliang Gao)
  - rtc: abx80x: Fix WDT bit position of the status register (Nobuhiro Iwamatsu)
  - rtc: st-lpc: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)
  - NFSv4.0: Fix a use-after-free problem in the asynchronous open() (Trond Myklebust)
  - um: Always dump trace for specified task in show_stack (Tiwei Bie)
  - um: Fix the return value of elf_core_copy_task_fpregs (Tiwei Bie)
  - um: Fix potential integer overflow during physmem setup (Tiwei Bie)
  - rpmsg: glink: Propagate TX failures in intentless mode as well (Bjorn Andersson)
  - SUNRPC: make sure cache entry active before cache_show (Yang Erkun)
  - NFSD: Prevent a potential integer overflow (Chuck Lever)
  - lib: string_helpers: silence snprintf() output truncation warning (Bartosz Golaszewski)
  - usb: dwc3: gadget: Fix looping of queued SG entries (Thinh Nguyen)
  - usb: dwc3: gadget: Fix checking for number of TRBs left (Thinh Nguyen)
  - ALSA: hda/realtek: Apply quirk for Medion E15433 (Takashi Iwai)
  - ALSA: hda/realtek: Fix Internal Speaker and Mic boost of Infinix Y4 Max (Dinesh Kumar)
  - ALSA: hda/realtek: Set PCBeep to default value for ALC274 (Kailang Yang)
  - ALSA: hda/realtek: Update ALC225 depop procedure (Kailang Yang)
  - ALSA: pcm: Add sanity NULL check for the default mmap fault handler (Takashi Iwai)
  - media: v4l2-core: v4l2-dv-timings: check cvt/gtf result (Hans Verkuil)
  - soc: fsl: rcpm: fix missing of_node_put() in copy_ippdexpcr1_setting() (Javier Carrasco)
  - media: wl128x: Fix atomicity violation in fmc_send_cmd() (Qiu-ji Chen)
  - HID: wacom: Interpret tilt data from Intuos Pro BT as signed values (Jason Gerecke)
  - block: fix ordering between checking BLK_MQ_S_STOPPED request adding (Muchun Song)
  - arm64: tls: Fix context-switching of tpidrro_el0 when kpti is enabled (Will Deacon)
  - sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK (Huacai Chen)
  - um: vector: Do not use drvdata in release (Tiwei Bie)
  - serial: 8250: omap: Move pm_runtime_get_sync (Bin Liu)
  - um: net: Do not use drvdata in release (Tiwei Bie)
  - um: ubd: Do not use drvdata in release (Tiwei Bie)
  - ubi: wl: Put source PEB into correct list if trying locking LEB failed (Zhihao Cheng)
  - platform/chrome: cros_ec_typec: fix missing fwnode reference decrement (Javier Carrasco)
  - cpufreq: mediatek-hw: Fix wrong return value in mtk_cpufreq_get_cpu_power() (Jinjie Ruan)
  - mtd: spi-nor: core: replace dummy buswidth from addr to data (Cheng Ming Lin)
  - spi: Fix acpi deferred irq probe (Stanislaw Gruszka)
  - netfilter: ipset: add missing range check in bitmap_ip_uadt (Jeongjun Park)
  - gpio: exar: set value when external pull-up or pull-down is present (Sai Kumar Cholleti)
  - Revert "serial: sh-sci: Clean sci_ports[0] after at earlycon exit" (Greg Kroah-Hartman)
  - serial: sh-sci: Clean sci_ports[0] after at earlycon exit (Claudiu Beznea)
  - Revert "usb: gadget: composite: fix OS descriptors w_value logic" (Michal Vrastil)
  - driver core: bus: Fix double free in driver API bus_register() (Zijun Hu)
  - usb: xhci: Fix TD invalidation under pending Set TR Dequeue (Michal Pecio)
  - Bluetooth: Fix type of len in rfcomm_sock_getsockopt{,_old}() (Andrej Shadura)
  - exfat: fix uninit-value in __exfat_get_dentry_set (Namjae Jeon)
  - locking/lockdep: Avoid creating new name string literals in lockdep_set_subclass() (Ahmed Ehab)
  - tty: ldsic: fix tty_ldisc_autoload sysctl's proc_handler (Nicolas Bouchinet)
  - apparmor: test: Fix memory leak for aa_unpack_strdup() (Jinjie Ruan)
  - comedi: Flush partial mappings in error case (Jann Horn)
  - fsnotify: fix sending inotify event with unexpected filename (Amir Goldstein)
  - PCI: Fix use-after-free of slot->bus on hot remove (Lukas Wunner)
  - KVM: arm64: Ignore PMCNTENSET_EL0 while checking for overflow status (Raghavendra Rao Ananta)
  - powerpc/pseries: Fix KVM guest detection for disabling hardlockup detector (Gautam Menghani)
  - crypto: x86/aegis128 - access 32-bit arguments as 32-bit (Eric Biggers)
  - perf/x86/intel/pt: Fix buffer full but size is 0 case (Adrian Hunter)
  - ASoC: codecs: Fix atomicity violation in snd_soc_component_get_drvdata() (Qiu-ji Chen)
  - jfs: xattr: check invalid xattr size more strictly (Artem Sadovnikov)
  - ext4: fix FS_IOC_GETFSMAP handling (Theodore Ts'o)
  - ext4: supress data-race warnings in ext4_free_inodes_{count,set}() (Jeongjun Park)
  - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Benoît Sevens)
  - soc: qcom: socinfo: fix revision check in qcom_socinfo_probe() (Manikanta Mylavarapu)
  - ASoC: Intel: sst: Fix used of uninitialized ctx to log an error (Hans de Goede)
  - Revert "drivers: clk: zynqmp: update divider round rate logic" (Joel Guittet)
  - usb: ehci-spear: fix call balance of sehci clk handling routines (Vitalii Mordan)
  - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Takashi Iwai)
  - xen: Fix the issue of resource not being properly released in xenbus_dev_probe() (Qiu-ji Chen)
  - ksmbd: fix slab-use-after-free in smb3_preauth_hash_rsp (Namjae Jeon)
  - parisc: fix a possible DMA corruption (Mikulas Patocka)
  - apparmor: fix 'Do simple duplicate message elimination' (chao liu)
  - ALSA: hda/realtek: Update ALC256 depop procedure (Kailang Yang)
  - counter: stm32-timer-cnt: Add check for clk_enable() (Jiasheng Jiang)
  - misc: apds990x: Fix missing pm_runtime_disable() (Jinjie Ruan)
  - USB: chaoskey: Fix possible deadlock chaoskey_list_lock (Edward Adam Davis)
  - USB: chaoskey: fail open after removal (Oliver Neukum)
  - usb: yurex: make waiting on yurex_write interruptible (Oliver Neukum)
  - usb: using mutex lock and supporting O_NONBLOCK flag in iowarrior_read() (Jeongjun Park)
  - iio: light: al3010: Fix an error handling path in al3010_probe() (Christophe JAILLET)
  - bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down (Saravanan Vajravel)
  - net: hsr: fix hsr_init_sk() vs network/transport headers. (Eric Dumazet)
  - spi: atmel-quadspi: Fix register name in verbose logging function (Csókás, Bence)
  - octeontx2-af: RPM: Fix mismatch in lmac type (Hariprasad Kelam)
  - net: stmmac: dwmac-socfpga: Set RX watchdog interrupt as broken (Maxime Chevallier)
  - marvell: pxa168_eth: fix call balance of pep->clk handling routines (Vitalii Mordan)
  - net: mdio-ipq4019: add missing error check (Rosen Penev)
  - net: usb: lan78xx: Fix refcounting and autosuspend on invalid WoL configuration (Oleksij Rempel)
  - tg3: Set coherent DMA mask bits to 31 for BCM57766 chipsets (Pavan Chebbi)
  - net: usb: lan78xx: Fix memory leak on device unplug by freeing PHY device (Oleksij Rempel)
  - power: supply: bq27xxx: Fix registers of bq27426 (Barnabás Czémán)
  - power: supply: core: Remove might_sleep() from power_supply_put() (Bart Van Assche)
  - fs_parser: update mount_api doc to match function signature (Randy Dunlap)
  - vfio/pci: Properly hide first-in-list PCIe extended capability (Avihai Horon)
  - selftests/mount_setattr: Fix failures on 64K PAGE_SIZE kernels (Michael Ellerman)
  - vdpa/mlx5: Fix suboptimal range on iotlb iteration (Si-Wei Liu)
  - hwmon: (tps23861) Fix reporting of negative temperatures (Murad Masimov)
  - NFSD: Fix nfsd4_shutdown_copy() (Chuck Lever)
  - svcrdma: fix miss destroy percpu_counter in svc_rdma_proc_init() (Ye Bin)
  - sunrpc: simplify two-level sysctl registration for svcrdma_parm_table (Luis Chamberlain)
  - NFSD: Cap the number of bytes copied by nfs4_reset_recoverydir() (Chuck Lever)
  - NFSD: Prevent NULL dereference in nfsd4_process_cb_update() (Chuck Lever)
  - remoteproc: qcom_q6v5_mss: Re-order writes to the IMEM region (Sibi Sankar)
  - rpmsg: glink: use only lower 16-bits of param2 for CMD_OPEN name length (Jonathan Marek)
  - rpmsg: glink: Fix GLINK command prefix (Bjorn Andersson)
  - rpmsg: glink: Send READ_NOTIFY command in FIFO full case (Arun Kumar Neelakantam)
  - rpmsg: glink: Add TX_DATA_CONT command while sending (Arun Kumar Neelakantam)
  - perf trace: Avoid garbage when not printing a syscall's arguments (Benjamin Peterson)
  - perf trace: Do not lose last events in a race (Benjamin Peterson)
  - svcrdma: Address an integer overflow (Chuck Lever)
  - m68k: coldfire/device.c: only build FEC when HW macros are defined (Antonio Quartulli)
  - m68k: mcfgpio: Fix incorrect register offset for CONFIG_M5441x (Jean-Michel Hautbois)
  - perf trace: avoid garbage when not printing a trace event's arguments (Benjamin Peterson)
  - f2fs: check curseg->inited before write_sum_page in change_curseg (Yongpeng Yang)
  - f2fs: remove the unused flush argument to change_curseg (Christoph Hellwig)
  - f2fs: open code allocate_segment_by_default (Christoph Hellwig)
  - f2fs: remove struct segment_allocation default_salloc_ops (Christoph Hellwig)
  - f2fs: fix the wrong f2fs_bug_on condition in f2fs_do_replace_block (LongPing Wei)
  - PCI: cpqphp: Fix PCIBIOS_* return value confusion (Ilpo Järvinen)
  - PCI: cpqphp: Use PCI_POSSIBLE_ERROR() to check config reads (weiyufeng)
  - perf probe: Correct demangled symbols in C++ program (Leo Yan)
  - perf probe: Fix libdw memory leak (Ian Rogers)
  - PCI: Fix reset_method_store() memory leak (Todd Kjos)
  - perf cs-etm: Don't flush when packet_queue fills up (James Clark)
  - mailbox: arm_mhuv2: clean up loop in get_irq_chan_comb() (Dan Carpenter)
  - pinctrl: k210: Undef K210_PC_DEFAULT (zhang jiao)
  - clk: clk-axi-clkgen: make sure to enable the AXI bus clock (Nuno Sa)
  - dt-bindings: clock: axi-clkgen: include AXI clk (Nuno Sa)
  - fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem() (Zhen Lei)
  - fbdev/sh7760fb: Alloc DMA memory from hardware device (Thomas Zimmermann)
  - powerpc/kexec: Fix return of uninitialized variable (Zhang Zekun)
  - powerpc/sstep: make emulate_vsx_load and emulate_vsx_store static (Michal Suchanek)
  - ocfs2: fix uninitialized value in ocfs2_file_read_iter() (Dmitry Antipov)
  - RDMA/hns: Fix out-of-order issue of requester when setting FENCE (Junxian Huang)
  - scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb() (Zhen Lei)
  - scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb() (Zhen Lei)
  - scsi: fusion: Remove unused variable 'rc' (Zeng Heng)
  - scsi: bfa: Fix use-after-free in bfad_im_module_exit() (Ye Bin)
  - mfd: rt5033: Fix missing regmap_del_irq_chip() (Zhang Changzhong)
  - clk: imx: clk-scu: fix clk enable state save and restore (Dong Aisheng)
  - clk: imx: lpcg-scu: SW workaround for errata (e10858) (Peng Fan)
  - powerpc/pseries: Fix dtl_access_lock to be a rw_semaphore (Michael Ellerman)
  - powerpc/mm/fault: Fix kfence page fault reporting (Ritesh Harjani (IBM))
  - mtd: rawnand: atmel: Fix possible memory leak (Miquel Raynal)
  - cpufreq: loongson2: Unregister platform_driver on failure (Yuan Can)
  - mfd: intel_soc_pmic_bxtwc: Use IRQ domain for PMIC devices (Andy Shevchenko)
  - mfd: intel_soc_pmic_bxtwc: Use IRQ domain for TMU device (Andy Shevchenko)
  - mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device (Andy Shevchenko)
  - mfd: intel_soc_pmic_bxtwc: Use dev_err_probe() (Andy Shevchenko)
  - mfd: da9052-spi: Change read-mask to write-mask (Marcus Folkesson)
  - mfd: tps65010: Use IRQF_NO_AUTOEN flag in request_irq() to fix race (Jinjie Ruan)
  - pinctrl: zynqmp: drop excess struct member description (Bartosz Golaszewski)
  - trace/trace_event_perf: remove duplicate samples on the first tracepoint event (Levi Yun)
  - bpf: fix recursive lock when verdict program return SK_PASS (Jiayuan Chen)
  - wireguard: selftests: load nf_conntrack if not present (Hangbin Liu)
  - netpoll: Use rcu_access_pointer() in netpoll_poll_lock (Breno Leitao)
  - Bluetooth: fix use-after-free in device_for_each_child() (Dmitry Antipov)
  - driver core: Introduce device_find_any_child() helper (Andy Shevchenko)
  - ALSA: 6fire: Release resources at card release (Takashi Iwai)
  - ALSA: caiaq: Use snd_card_free_when_closed() at disconnection (Takashi Iwai)
  - ALSA: us122l: Use snd_card_free_when_closed() at disconnection (Takashi Iwai)
  - ALSA: usx2y: Use snd_card_free_when_closed() at disconnection (Takashi Iwai)
  - net: rfkill: gpio: Add check for clk_enable() (Mingwei Zheng)
  - drm/amdkfd: Fix wrong usage of INIT_WORK() (Yuan Can)
  - selftests: net: really check for bg process completion (Paolo Abeni)
  - bpf, sockmap: Fix sk_msg_reset_curr (Zijian Zhang)
  - bpf, sockmap: Several fixes to bpf_msg_pop_data (Zijian Zhang)
  - bpf, sockmap: Several fixes to bpf_msg_push_data (Zijian Zhang)
  - selftests/bpf: Add push/pop checking for msg_verify_data in test_sockmap (Zijian Zhang)
  - selftests/bpf: Fix total_bytes in msg_loop_rx in test_sockmap (Zijian Zhang)
  - selftests, bpf: Add one test for sockmap with strparser (Liu Jian)
  - selftests/bpf: Fix SENDPAGE data logic in test_sockmap (Zijian Zhang)
  - selftests/bpf: Add txmsg_pass to pull/push/pop in test_sockmap (Zijian Zhang)
  - netlink: typographical error in nlmsg_type constants definition (Maurice Lambert)
  - netfilter: nf_tables: must hold rcu read lock while iterating object type list (Florian Westphal)
  - netfilter: nf_tables: skip transaction if update object is not implemented (Pablo Neira Ayuso)
  - drm/msm/dpu: cast crtc_clk calculation to u64 in _dpu_core_perf_calc_clk() (Zichen Xie)
  - wifi: wfx: Fix error handling in wfx_core_init() (Yuan Can)
  - drm/etnaviv: hold GPU lock across perfmon sampling (Lucas Stach)
  - drm/etnaviv: fix power register offset on GC300 (Doug Brown)
  - drm/etnaviv: Request pages from DMA32 zone on addressing_limited (Xiaolei Wang)
  - drm/msm/adreno: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)
  - drm/panfrost: Remove unused id_mask from struct panfrost_model (Steven Price)
  - octeontx2-pf: handle otx2_mbox_get_rsp errors in cn10k.c (Dipendra Khadka)
  - octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c (Dipendra Khadka)
  - octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_common.c (Dipendra Khadka)
  - drm: fsl-dcu: enable PIXCLK on LS1021A (Matthias Schiffer)
  - wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan() (Alper Nebi Yasak)
  - selftests/bpf: Fix txmsg_redir of test_txmsg_pull in test_sockmap (Zijian Zhang)
  - selftests/bpf: Fix msg_verify_data in test_sockmap (Zijian Zhang)
  - drm/bridge: tc358767: Fix link properties discovery (Tomi Valkeinen)
  - netdevsim: copy addresses for both in and out paths (Hangbin Liu)
  - libbpf: fix sym_is_subprog() logic for weak global subprogs (Andrii Nakryiko)
  - bpf: Fix the xdp_adjust_tail sample prog issue (Yuan Chen)
  - libbpf: Fix output .symtab byte-order during linking (Tony Ambardar)
  - drm/bridge: anx7625: Drop EDID cache on bridge power off (Pin-yen Lin)
  - ASoC: dt-bindings: mt6359: Update generic node name and dmic-mode (Macpaul Lin)
  - ASoC: fsl_micfil: fix regmap_write_bits usage (Shengjiu Wang)
  - ASoC: fsl_micfil: use GENMASK to define register bit fields (Sascha Hauer)
  - ASoC: fsl_micfil: do not define SHIFT/MASK for single bits (Sascha Hauer)
  - ASoC: fsl_micfil: Drop unnecessary register read (Sascha Hauer)
  - dt-bindings: vendor-prefixes: Add NeoFidelity, Inc (Igor Prusov)
  - wifi: ath10k: fix invalid VHT parameters in supported_vht_mcs_rate_nss2 (Baochen Qiang)
  - wifi: ath10k: fix invalid VHT parameters in supported_vht_mcs_rate_nss1 (Baochen Qiang)
  - drm/v3d: Address race-condition in MMU flush (Maíra Canal)
  - drm/imx/ipuv3: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)
  - drm/imx/dcss: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)
  - wifi: mwifiex: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)
  - wifi: p54: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)
  - drm/omap: Fix locking in omap_gem_new_dmabuf() (Tomi Valkeinen)
  - drm/omap: Fix possible NULL dereference (Tomi Valkeinen)
  - wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service() (Jeongjun Park)
  - drm/mm: Mark drm_mm_interval_tree*() functions with __maybe_unused (Andy Shevchenko)
  - platform/x86: panasonic-laptop: Return errno correctly in show callback (Yao Zi)
  - platform/x86: panasonic-laptop: Replace snprintf in show functions with sysfs_emit (Qing Wang)
  - media: atomisp: Add check for rgby_data memory allocation failure (Li Huafei)
  - media: atomisp: remove #ifdef HAS_NO_HMEM (Mauro Carvalho Chehab)
  - media: venus: provide ctx queue lock for ioctl synchronization (Sergey Senozhatsky)
  - venus: venc: add handling for VIDIOC_ENCODER_CMD (Dikshita Agarwal)
  - media: venus : Addition of support for VIDIOC_TRY_ENCODER_CMD (Dikshita Agarwal)
  - media: venus : Addition of EOS Event support for Encoder (Viswanath Boma)
  - media: venus: vdec: decoded picture buffer handling during reconfig sequence (Mansur Alisha Shaik)
  - media: venus: venc: Use pmruntime autosuspend (Stanimir Varbanov)
  - firmware: arm_scpi: Check the DVFS OPP count returned by the firmware (Luo Qiu)
  - selftests/resctrl: Protect against array overrun during iMC config parsing (Reinette Chatre)
  - arm64: dts: mediatek: mt8183-kukui-jacuzzi: Add supplies for fixed regulators (Chen-Yu Tsai)
  - arm64: dts: mediatek: mt8183-kukui-jacuzzi: Fix DP bridge supply names (Chen-Yu Tsai)
  - arm64: dts: mt8183: jacuzzi: Move panel under aux-bus (Hsin-Yi Wang)
  - arm64: dts: mt8183: jacuzzi: remove unused ddc-i2c-bus (Hsin-Yi Wang)
  - regmap: irq: Set lockdep class for hierarchical IRQ domains (Andy Shevchenko)
  - spi: zynqmp-gqspi: Undo runtime PM changes at driver exit time​ (Jinjie Ruan)
  - spi: tegra210-quad: Avoid shift-out-of-bounds (Breno Leitao)
  - pmdomain: ti-sci: Add missing of_node_put() for args.np (Zhang Zekun)
  - ARM: dts: cubieboard4: Fix DCDC5 regulator constraints (Andre Przywara)
  - pwm: imx27: Workaround of the pwm output bug when decrease the duty cycle (Clark Wang)
  - arm64: dts: mt8183: Damu: add i2c2's i2c-scl-internal-delay-ns (Daolong Zhu)
  - arm64: dts: mt8183: burnet: add i2c2's i2c-scl-internal-delay-ns (Daolong Zhu)
  - arm64: dts: mt8183: fennel: add i2c2's i2c-scl-internal-delay-ns (Daolong Zhu)
  - cgroup/bpf: only cgroup v2 can be attached by bpf programs (Chen Ridong)
  - Revert "cgroup: Fix memory leak caused by missing cgroup_bpf_offline" (Chen Ridong)
  - arm64: dts: mediatek: mt8173-elm-hana: Add vdd-supply to second source trackpad (Chen-Yu Tsai)
  - arm64: dts: mt8183: kukui: Fix the address of eeprom at i2c4 (Hsin-Te Yuan)
  - arm64: dts: mt8183: krane: Fix the address of eeprom at i2c4 (Hsin-Te Yuan)
  - tpm: fix signed/unsigned bug when checking event logs (Gregory Price)
  - mmc: mmc_spi: drop buggy snprintf() (Bartosz Golaszewski)
  - soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get() (Dan Carpenter)
  - soc: ti: smartreflex: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)
  - spi: spi-fsl-lpspi: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)
  - spi: spi-fsl-lpspi: downgrade log level for pio mode (Alexander Stein)
  - clocksource/drivers:sp804: Make user selectable (Mark Brown)
  - kcsan, seqlock: Fix incorrect assumption in read_seqbegin() (Marco Elver)
  - kcsan, seqlock: Support seqcount_latch_t (Marco Elver)
  - seqlock/latch: Provide raw_read_seqcount_latch_retry() (Peter Zijlstra)
  - timekeeping: Consolidate fast timekeeper (Thomas Gleixner)
  - time: Fix references to _msecs_to_jiffies() handling of values (Miguel Ojeda)
  - crypto: cavium - Fix an error handling path in cpt_ucode_load_fw() (Christophe JAILLET)
  - crypto: bcm - add error check in the ahash_hmac_init function (Chen Ridong)
  - crypto: caam - add error check to caam_rsa_set_priv_key_form (Chen Ridong)
  - EDAC/igen6: Avoid segmentation fault on module unload (Orange Kao)
  - crypto: cavium - Fix the if condition to exit loop after timeout (Everest K.C)
  - crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY (Yi Yang)
  - EDAC/fsl_ddr: Fix bad bit shift operations (Priyanka Singh)
  - thermal: core: Initialize thermal zones before registering them (Rafael J. Wysocki)
  - crypto: qat - remove faulty arbiter config reset (Ahsan Atta)
  - EDAC/bluefield: Fix potential integer overflow (David Thompson)
  - firmware: google: Unregister driver_info on failure (Yuan Can)
  - crypto: caam - Fix the pointer passed to caam_qi_shutdown() (Christophe JAILLET)
  - hfsplus: don't query the device logical block size multiple times (Thadeu Lima de Souza Cascardo)
  - s390/syscalls: Avoid creation of arch/arch/ directory (Masahiro Yamada)
  - acpi/arm64: Adjust error handling procedure in gtdt_parse_timer_block() (Aleksandr Mishin)
  - arm64: fix .data.rel.ro size assertion when CONFIG_LTO_CLANG (Masahiro Yamada)
  - m68k: mvme147: Reinstate early console (Daniel Palmer)
  - m68k: mvme16x: Add and use "mvme16x.h" (Geert Uytterhoeven)
  - m68k: mvme147: Fix SCSI controller IRQ numbers (Daniel Palmer)
  - nvme-pci: fix freeing of the HMB descriptor table (Christoph Hellwig)
  - initramfs: avoid filename buffer overrun (David Disseldorp)
  - mips: asm: fix warning when disabling MIPS_FP_SUPPORT (Jonas Gorski)
  - brd: defer automatic disk creation until module initialization succeeds (Yang Erkun)
  - brd: remove brd_devices_mutex mutex (Tetsuo Handa)
  - s390/cio: Do not unregister the subchannel based on DNV (Vineeth Vijayan)
  - kselftest/arm64: mte: fix printf type warnings about longs (Andre Przywara)
  - x86/barrier: Do not serialize MSR accesses on AMD (Borislav Petkov (AMD))
  - nvme: fix metadata handling in nvme-passthrough (Puranjay Mohan)
  - cifs: Fix buffer overflow when parsing NFS reparse points (Pali Rohár)
  - rcu-tasks: Idle tasks on offline CPUs are in quiescent states (Paul E. McKenney)
  - ipmr: Fix access to mfc_cache_list without lock held (Breno Leitao)
  - ARM: 9420/1: smp: Fix SMP for xip kernels (Harith G)
  - ALSA: usb-audio: Fix Yamaha P-125 Quirk Entry (Eryk Zagorski)
  - proc/softirqs: replace seq_printf with seq_put_decimal_ull_width (David Wang)
  - ASoC: stm: Prevent potential division by zero in stm32_sai_get_clk_div() (Luo Yifan)
  - ASoC: stm: Prevent potential division by zero in stm32_sai_mclk_round_rate() (Luo Yifan)
  - can: j1939: fix error in J1939 documentation. (Alexander Hölzl)
  - platform/x86: dell-wmi-base: Handle META key Lock/Unlock events (Kurt Borja)
  - platform/x86: dell-smbios-base: Extends support to Alienware products (Kurt Borja)
  - regulator: rk808: Add apply_bit for BUCK3 on RK809 (Mikhail Rudenko)
  - soc: qcom: Add check devm_kasprintf() returned value (Charles Han)
  - net: usb: qmi_wwan: add Quectel RG650V (Benoît Monin)
  - x86/amd_nb: Fix compile-testing without CONFIG_AMD_NB (Arnd Bergmann)
  - ALSA: hda/realtek: Add subwoofer quirk for Infinix ZERO BOOK 13 (Piyush Raj Chouhan)
  - selftests/watchdog-test: Fix system accidentally reset after watchdog-test (Li Zhijian)
  - usb: add support for new USB device ID 0x17EF:0x3098 for the r8152 driver (Benjamin Große)
  - mac80211: fix user-power when emulating chanctx (Ben Greear)
  - wifi: iwlwifi: mvm: Use the sync timepoint API in suspend (Daniel Gabay)
  - ASoC: Intel: sst: Support LPE0F28 ACPI HID (Hans de Goede)
  - ASoC: Intel: bytcr_rt5640: Add DMI quirk for Vexia Edu Atla 10 tablet (Hans de Goede)
  - ASoC: Intel: bytcr_rt5640: Add support for non ACPI instantiated codec (Hans de Goede)
  - NFS: nfs_async_write_reschedule_io must not recurse into the writeback code (Trond Myklebust)
  - mm: resolve faulty mmap_region() error path behaviour (Lorenzo Stoakes)
  - mm: refactor arch_calc_vm_flag_bits() and arm64 MTE handling (Lorenzo Stoakes)
  - mm: unconditionally close VMAs on error (Lorenzo Stoakes)
  - mm: avoid unsafe VMA hook invocation when error arises on mmap hook (Lorenzo Stoakes)
  - mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Paolo Abeni)
  - NFSD: Never decrement pending_async_copies on error (Chuck Lever)
  - NFSD: Initialize struct nfsd4_copy earlier (Chuck Lever)
  - NFSD: Limit the number of concurrent async COPY operations (Chuck Lever)
  - NFSD: Async COPY result needs to return a write verifier (Chuck Lever)
  - NFSD: initialize copy->cp_clp early in nfsd4_copy for use by trace point (Dai Ngo)
  - media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set (Mauro Carvalho Chehab)
  - mmc: sunxi-mmc: Fix A100 compatible description (Andre Przywara)
  - mmc: sunxi-mmc: Add D1 MMC variant (Samuel Holland)
  - drm/bridge: tc358768: Fix DSI command tx (Francesco Dolcini)
  - nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint (Ryusuke Konishi)
  - ocfs2: fix UBSAN warning in ocfs2_verify_volume() (Dmitry Antipov)
  - nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint (Ryusuke Konishi)
  - KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN (Sean Christopherson)
  - KVM: nVMX: Treat vpid01 as current if L2 is active, but with VPID disabled (Sean Christopherson)
  - vdpa/mlx5: Fix PA offset with unaligned starting iotlb map (Si-Wei Liu)
  - ocfs2: uncache inode which has failed entering the group (Dmitry Antipov)
  - mm: fix NULL pointer dereference in alloc_pages_bulk_noprof (Jinjiang Tu)
  - x86/mm: Fix a kdump kernel failure on SME system when CONFIG_IMA_KEXEC=y (Baoquan He)
  - ARM: 9419/1: mm: Fix kernel memory mapping for xip kernels (Harith G)
  - samples: pktgen: correct dev to DEV (Wei Fang)
  - net/mlx5e: CT: Fix null-ptr-deref in add rule err flow (Moshe Shemesh)
  - net/mlx5e: kTLS, Fix incorrect page refcounting (Dragos Tatulea)
  - net/mlx5: fs, lock FTE when checking if active (Mark Bloch)
  - drm/rockchip: vop: Fix a dereferenced before check warning (Andy Yan)
  - netlink: terminate outstanding dump on socket close (Jakub Kicinski)
  - clk: qcom: gcc-qcs404: fix initial rate of GPLL3 (Gabor Juhos)
  - leds: lp55xx: Remove redundant test for invalid channel number (Michal Vokáč)
  - iommu/io-pgtable-arm: Fix stage-2 map/unmap for concatenated tables (Mostafa Saleh)
  - vmstat: call fold_vm_zone_numa_events() before show per zone NUMA event (MengEn Sun)
  - ftrace: Fix regression with module command in stack_trace_filter (guoweikang)
  - ovl: Filter invalid inodes with missing lookup function (Vasiliy Kovalev)
  - media: uvcvideo: Require entities to have a non-zero unique ID (Thadeu Lima de Souza Cascardo)
  - media: uvcvideo: Stop stream during unregister (Ricardo Ribalda)
  - media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal() (Gaosheng Cui)
  - media: gspca: ov534-ov772x: Fix off-by-one error in set_frame_rate() (Jinjie Ruan)
  - media: venus: Fix pm_runtime_set_suspended() with runtime pm enabled (Jinjie Ruan)
  - media: ts2020: fix null-ptr-deref in ts2020_probe() (Li Zetao)
  - media: imx-jpeg: Ensure power suppliers be suspended before detach them (Ming Qian)
  - media: i2c: tc358743: Fix crash in the probe error path when using polling (Alexander Shiyan)
  - media: imx-jpeg: Set video drvdata before register video device (Ming Qian)
  - arm64: dts: allwinner: pinephone: Add mount matrix to accelerometer (Dragan Simic)
  - LTS version: v5.15.173 (Vijayendra Suman)
  - 9p: fix slab cache name creation for real (Linus Torvalds)
  - udf: Avoid directory type conversion failure due to ENOMEM (Jan Kara)
  - udf: Allocate name buffer in directory iterator on heap (Jan Kara)
  - mm/memory: add non-anonymous page check in the copy_present_page() (Yuanzheng Song)
  - io_uring: fix possible deadlock in io_register_iowq_max_workers() (Hagar Hemdan)
  - md/raid10: improve code of mrdev in raid10_sync_request (Li Nan)
  - net: usb: qmi_wwan: add Fibocom FG132 0x0112 composition (Reinhard Speyerer)
  - HID: lenovo: Add support for Thinkpad X1 Tablet Gen 3 keyboard (Hans de Goede)
  - HID: multitouch: Add quirk for Logitech Bolt receiver w/ Casa touchpad (Kenneth Albanowski)
  - fs: Fix uninitialized value issue in from_kuid and from_kgid (Alessandro Zanni)
  - vDPA/ifcvf: Fix pci_read_config_byte() return code handling (Yuan Can)
  - powerpc/powernv: Free name on error in opal_event_init() (Michael Ellerman)
  - drm/vmwgfx: Limit display layout ioctl array size to VMWGFX_NUM_DISPLAY_UNITS (Ian Forbes)
  - sound: Make CONFIG_SND depend on INDIRECT_IOMEM instead of UML (Julian Vetter)
  - crypto: marvell/cesa - Disable hash algorithms (Herbert Xu)
  - bpf: use kvzmalloc to allocate BPF verifier environment (Rik van Riel)
  - HID: multitouch: Add quirk for HONOR MagicBook Art 14 touchpad (WangYuli)
  - HID: multitouch: Add support for B2402FVA track point (Stefan Blum)
  - block: Fix elevator_get_default() checking for NULL q->tag_set (SurajSonawane2415)
  - irqchip/ocelot: Fix trigger register address (Sergey Matsievskiy)
  - 9p: Avoid creating multiple slab caches with the same name (Pedro Falcato)
  - LTS version: v5.15.172 (Vijayendra Suman)
  - ALSA: usb-audio: Add endianness annotations (Jan Schär)
  - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Hyunwoo Kim)
  - hv_sock: Initializing vsk->trans to NULL to prevent a dangling pointer (Hyunwoo Kim)
  - ALSA: usb-audio: Add quirks for Dell WD19 dock (Jan Schär)
  - ALSA: usb-audio: Support jack detection on Dell dock (Jan Schär)
  - ucounts: fix counter leak in inc_rlimit_get_ucounts() (Andrei Vagin)
  - ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove() (Andrew Kanner)
  - irqchip/gic-v3: Force propagation of the active state with a read-back (Marc Zyngier)
  - USB: serial: option: add Quectel RG650V (Benoît Monin)
  - USB: serial: option: add Fibocom FG132 0x0112 composition (Reinhard Speyerer)
  - USB: serial: qcserial: add support for Sierra Wireless EM86xx (Jack Wu)
  - USB: serial: io_edgeport: fix use after free in debug printk (Dan Carpenter)
  - usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd() (Dan Carpenter)
  - usb: musb: sunxi: Fix accessing an released usb phy (Zijun Hu)
  - fs/proc: fix compile warning about variable 'vmcore_mmap_ops' (Qi Xi)
  - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Benoit Sevens)
  - net: do not delay dst_entries_add() in dst_release() (Eric Dumazet)
  - net: bridge: xmit: make sure we have at least eth header len bytes (Nikolay Aleksandrov)
  - btrfs: reinitialize delayed ref list after deleting it from the list (Filipe Manana)
  - nfs: Fix KMSAN warning in decode_getfattr_attrs() (Roberto Sassu)
  - io_uring/rw: fix missing NOWAIT check for O_DIRECT start write (Jens Axboe)
  - io_uring: use kiocb_{start,end}_write() helpers (Amir Goldstein)
  - fs: create kiocb_{start,end}_write() helpers (Amir Goldstein)
  - io_uring: rename kiocb_end_write() local helper (Amir Goldstein)
  - posix-cpu-timers: Clear TICK_DEP_BIT_POSIX_TIMER on clone (Benjamin Segall)
  - ALSA: usb-audio: Add quirk for HP 320 FHD Webcam (Takashi Iwai)
  - dm-unstriped: cast an operand to sector_t to prevent potential uint32_t overflow (Zichen Xie)
  - dm cache: fix potential out-of-bounds access on the first resume (Ming-Hung Tsai)
  - dm cache: optimize dirty bit checking with find_next_bit when resizing (Ming-Hung Tsai)
  - dm cache: fix out-of-bounds access to the dirty bitset when resizing (Ming-Hung Tsai)
  - dm cache: correct the number of origin blocks to match the target length (Ming-Hung Tsai)
  - thermal/drivers/qcom/lmh: Remove false lockdep backtrace (Dmitry Baryshkov)
  - drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read() (Alex Deucher)
  - drm/amdgpu: Adjust debugfs eviction and IB access permissions (Alex Deucher)
  - pwm: imx-tpm: Use correct MODULO value for EPWM mode (Erik Schumacher)
  - media: v4l2-ctrls-api: fix error handling for v4l2_g_ctrl() (Mauro Carvalho Chehab)
  - media: v4l2-tpg: prevent the risk of a division by zero (Mauro Carvalho Chehab)
  - media: pulse8-cec: fix data timestamp at pulse8_setup() (Mauro Carvalho Chehab)
  - media: cx24116: prevent overflows on SNR calculus (Mauro Carvalho Chehab)
  - media: s5p-jpeg: prevent buffer overflows (Mauro Carvalho Chehab)
  - ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove (Amelie Delaunay)
  - ALSA: firewire-lib: fix return value on fail in amdtp_tscm_init() (Murad Masimov)
  - scsi: sd_zbc: Use kvzalloc() to allocate REPORT ZONES buffer (Johannes Thumshirn)
  - media: adv7604: prevent underflow condition when reporting colorspace (Mauro Carvalho Chehab)
  - media: dvb_frontend: don't play tricks with underflow values (Mauro Carvalho Chehab)
  - media: dvbdev: prevent the risk of out of memory access (Mauro Carvalho Chehab)
  - media: stb0899_algo: initialize cfr before using it (Mauro Carvalho Chehab)
  - net: arc: fix the device for dma_map_single/dma_unmap_single (Johan Jonker)
  - net: stmmac: Fix unbalanced IRQ wake disable warning on single irq case (Nícolas F. R. A. Prado)
  - net: phy: ti: add PHY_RST_AFTER_CLK_EN flag (Diogo Silva)
  - net: hns3: fix kernel crash when uninstalling driver (Peiyang Wang)
  - i40e: fix race condition by adding filter's intermediate sync state (Aleksandr Loktionov)
  - can: c_can: fix {rx,tx}_errors statistics (Dario Binacchi)
  - sctp: properly validate chunk size in sctp_sf_ootb() (Xin Long)
  - net: enetc: set MAC address to the VF net_device (Wei Fang)
  - security/keys: fix slab-out-of-bounds in key_task_permission (Chen Ridong)
  - nfs: avoid i_lock contention in nfs_clear_invalid_mapping (Mike Snitzer)
  - NFSv3: handle out-of-order write replies. (NeilBrown)
  - NFS: Add a tracepoint to show the results of nfs_set_cache_invalid() (Benjamin Coddington)
  - NFSv3: only use NFS timeout for MOUNT when protocols are compatible (NeilBrown)
  - HID: core: zero-initialize the report buffer (Jiri Kosina)
  - ARM: dts: rockchip: Fix the realtek audio codec on rk3036-kylin (Heiko Stuebner)
  - ARM: dts: rockchip: Fix the spi controller on rk3036 (Heiko Stuebner)
  - ARM: dts: rockchip: drop grf reference from rk3036 hdmi (Heiko Stuebner)
  - ARM: dts: rockchip: fix rk3036 acodec node (Heiko Stuebner)
  - arm64: dts: imx8mp: correct sdhc ipg clk (Peng Fan)
  - arm64: dts: rockchip: Fix LED triggers on rk3308-roc-cc (Heiko Stuebner)
  - arm64: dts: rockchip: Remove #cooling-cells from fan on Theobroma lion (Heiko Stuebner)
  - arm64: dts: rockchip: Fix bluetooth properties on Rock960 boards (Heiko Stuebner)
  - arm64: dts: rockchip: Remove hdmi's 2nd interrupt on rk3328 (Diederik de Haas)
  - arm64: dts: rockchip: Fix rt5651 compatible value on rk3399-sapphire-excavator (Geert Uytterhoeven)


author: Brian Maly <brian.maly@oracle.com> [5.15.0-305.176.4.el9uek]
changelog:
  - x86/asm: Make serialize() always_inline (Juergen Gross)   
  - hwmon: (tmp513) Fix division of negative numbers (David Lechner)   
  - Revert "mtd: spi-nor: core: replace dummy buswidth from addr to data" (Pratyush Yadav)   
  - Revert "regmap: detach regmap from dev on regmap_exit" (Greg Kroah-Hartman)   
  - Revert "drm/amdgpu: rework resume handling for display (v2)" (Greg Kroah-Hartman)   
  - Revert "PCI: Use preserve_config in place of pci_flags" (Terry Tritton)   
  - virtio-net: synchronize probe with ndo_set_features (Jason Wang)  [Orabug: 36637822]  
  - virtio-net: synchronize operstate with admin state on up/down (Jason Wang)  [Orabug: 36637822]  
  - virtio: allow driver to disable the configure change notification (Jason Wang)  [Orabug: 36637822]  
  - virtio: rename virtio_config_enabled to virtio_config_core_enabled (Jason Wang)  [Orabug: 36637822]  
  - mlxsw: pci: Fix driver initialization with Spectrum-4 (Ido Schimmel)  [Orabug: 36811057]  
  - mlxsw: pci: Fix driver initialization with old firmware (Ido Schimmel)  [Orabug: 36811057]  
  - mmc: sdhci-of-dwcmshc: th1520: Increase tuning loop count to 128 (Maksim Kiselev)  [Orabug: 36811057]  
  - net/mlx5e: Switch to using _bh variant of of spinlock API in port timestamping NAPI poll context (Rahul Rameshbabu)  [Orabug: 36811057]  
  - net/mlx5e: Fix MACsec state loss upon state update in offload path (Emeel Hakim)  [Orabug: 36811057]  
  - net/mlx5e: Change the warning when ignore_flow_level is not supported (Jianbo Liu)  [Orabug: 36811057]  
  - Revert "net/mlx5: Block entering switchdev mode with ns inconsistency" (Gavin Li)  [Orabug: 36811057]  
  - IB/mlx5: Don't expose debugfs entries for RRoCE general parameters if not supported (Mark Zhang)  [Orabug: 36811057]  
  - net/mlx5e: Ignore IPsec replay window values on sender side (Leon Romanovsky)  [Orabug: 36811057]  
  - net/mlx5e: Allow software parsing when IPsec crypto is enabled (Leon Romanovsky)  [Orabug: 36811057]  
  - net/mlx5: Use mlx5 device constant for selecting CQ period mode for ASO (Rahul Rameshbabu)  [Orabug: 36811057]  
  - net/mlx5: Bridge, fix multicast packets sent to uplink (Moshe Shemesh)  [Orabug: 36811057]  
  - net/mlx5: Fix a WARN upon a callback command failure (Yishai Hadas)  [Orabug: 36811057]  
  - net/mlx5e: Fix peer flow lists handling (Vlad Buslov)  [Orabug: 36811057]  
  - net/mlx5: Fix query of sd_group field (Tariq Toukan)  [Orabug: 36811057]  
  - net/mlx5e: Use the correct lag ports number when creating TISes (Saeed Mahameed)  [Orabug: 36811057]  
  - selftests: mlxsw: qos_pfc: Remove wrong description (Amit Cohen)  [Orabug: 36811057]  
  - mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path (Ido Schimmel)  [Orabug: 36811057]  
  - gpio: mlxbf3: add an error code check in mlxbf3_gpio_probe (Su Hui)  [Orabug: 36811057]  
  - vdpa/mlx5: Add mkey leak detection (Dragos Tatulea)  [Orabug: 36811057]  
  - vdpa/mlx5: Introduce reference counting to mrs (Dragos Tatulea)  [Orabug: 36811057]  
  - vdpa/mlx5: Use vq suspend/resume during .set_map (Dragos Tatulea)  [Orabug: 36811057]  
  - vdpa/mlx5: Mark vq state for modification in hw vq (Dragos Tatulea)  [Orabug: 36811057]  
  - vdpa/mlx5: Mark vq addrs for modification in hw vq (Dragos Tatulea)  [Orabug: 36811057]  
  - vdpa/mlx5: Introduce per vq and device resume (Dragos Tatulea)  [Orabug: 36811057]  
  - vdpa/mlx5: Allow modifying multiple vq fields in one modify command (Dragos Tatulea)  [Orabug: 36811057]  
  - vdpa/mlx5: Expose resumable vq capability (Dragos Tatulea)  [Orabug: 36811057]  
  - Revert "mlx5 updates 2023-12-20" (Jakub Kicinski)  [Orabug: 36811057]  
  - net/mlx5: DPLL, Implement fractional frequency offset get pin op (Jiri Pirko)  [Orabug: 36811057]  
  - net/mlx5: DPLL, Use struct to get values from mlx5_dpll_synce_status_get() (Jiri Pirko)  [Orabug: 36811057]  
  - net: macsec: move sci_to_cpu to macsec header (Radu Pirea (NXP OSS))  [Orabug: 36811057]  
  - net/mlx5: Implement management PF Ethernet profile (Armen Ratner)  [Orabug: 36811057]  
  - net/mlx5: Enable SD feature (Tariq Toukan)  [Orabug: 36811057]  
  - net/mlx5e: Block TLS device offload on combined SD netdev (Tariq Toukan)  [Orabug: 36811057]  
  - net/mlx5e: Support per-mdev queue counter (Tariq Toukan)  [Orabug: 36811057]  
  - net/mlx5e: Support cross-vhca RSS (Tariq Toukan)  [Orabug: 36811057]  
  - net/mlx5e: Let channels be SD-aware (Tariq Toukan)  [Orabug: 36811057]  
  - net/mlx5e: Create EN core HW resources for all secondary devices (Tariq Toukan)  [Orabug: 36811057]  
  - net/mlx5e: Create single netdev per SD group (Tariq Toukan)  [Orabug: 36811057]  
  - net/mlx5: SD, Add informative prints in kernel log (Tariq Toukan)  [Orabug: 36811057]  
  - net/mlx5: SD, Implement steering for primary and secondaries (Tariq Toukan)  [Orabug: 36811057]  
  - net/mlx5: SD, Implement devcom communication and primary election (Tariq Toukan)  [Orabug: 36811057]  
  - net/mlx5: SD, Implement basic query and instantiation (Tariq Toukan)  [Orabug: 36811057]  
  - net/mlx5: SD, Introduce SD lib (Tariq Toukan)  [Orabug: 36811057]  
  - net/mlx5: Fix query of sd_group field (Tariq Toukan)  [Orabug: 36811057]  
  - net/mlx5e: Use the correct lag ports number when creating TISes (Saeed Mahameed)  [Orabug: 36811057]  
  - mlxsw: spectrum_fid: Set NVE flood profile as part of FID configuration (Petr Machata)  [Orabug: 36811057]  
  - mlxsw: spectrum_fid: Add an "any" packet type (Petr Machata)  [Orabug: 36811057]  
  - mlxsw: reg: Add nve_flood_prf_id field to SFMR (Petr Machata)  [Orabug: 36811057]  
  - net/mlx5: DR, Use swap() instead of open coding it (Jiapeng Chong)  [Orabug: 36811057]  
  - net/mlx5: devcom, Add component size getter (Tariq Toukan)  [Orabug: 36811057]  
  - net/mlx5e: Decouple CQ from priv (Tariq Toukan)  [Orabug: 36811057]  
  - net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args (Tariq Toukan)  [Orabug: 36811057]  
  - net/mlx5e: Statify function mlx5e_monitor_counter_arm (Tariq Toukan)  [Orabug: 36811057]  
  - net/mlx5: Move TISes from priv to mdev HW resources (Tariq Toukan)  [Orabug: 36811057]  
  - net/mlx5e: Remove TLS-specific logic in generic create TIS API (Tariq Toukan)  [Orabug: 36811057]  
  - net/mlx5: fs, Command to control TX flow table root (Tariq Toukan)  [Orabug: 36811057]  
  - net/mlx5: fs, Command to control L2TABLE entry silent mode (Tariq Toukan)  [Orabug: 36811057]  
  - net/mlx5: Expose Management PCIe Index Register (MPIR) (Tariq Toukan)  [Orabug: 36811057]  
  - net/mlx5: Add mlx5_ifc bits used for supporting single netdev Socket-Direct (Tariq Toukan)  [Orabug: 36811057]  
  - net/mlx5: Manage ICM type of SW encap (Shun Hao)  [Orabug: 36811057]  
  - RDMA/mlx5: Support handling of SW encap ICM area (Shun Hao)  [Orabug: 36811057]  
  - net/mlx5: Introduce indirect-sw-encap ICM properties (Shun Hao)  [Orabug: 36811057]  
  - mmc: sdhci-of-dwcmshc: Use logical OR instead of bitwise OR in dwcmshc_probe() (Nathan Chancellor)  [Orabug: 36811057]  
  - mmc: sdhci-of-dwcmshc: Add support for T-Head TH1520 (Drew Fustini)  [Orabug: 36811057]  
  - mmc: sdhci: add __sdhci_execute_tuning() to header (Drew Fustini)  [Orabug: 36811057]  
  - mlxsw: spectrum: Use CFF mode where available (Petr Machata)  [Orabug: 36811057]  
  - mlxsw: spectrum_fid: Add support for rFID family in CFF flood mode (Petr Machata)  [Orabug: 36811057]  
  - mlxsw: spectrum_fid: Add a family for bridge FIDs in CFF flood mode (Petr Machata)  [Orabug: 36811057]  
  - mlxsw: spectrum_fid: Initialize flood profiles in CFF mode (Petr Machata)  [Orabug: 36811057]  
  - mlxsw: spectrum_fid: Add profile_id to flood profile (Petr Machata)  [Orabug: 36811057]  
  - mlxsw: spectrum_fid: Add an object to keep flood profiles (Petr Machata)  [Orabug: 36811057]  
  - mlxsw: spectrum_fid: Add hooks for RSP table maintenance (Petr Machata)  [Orabug: 36811057]  
  - mlxsw: spectrum_fid: Add a not-UC packet type (Petr Machata)  [Orabug: 36811057]  
  - mlxsw: spectrum_fid: Add an op for packing SFMR (Petr Machata)  [Orabug: 36811057]  
  - mlxsw: spectrum_fid: Add an op to get PGT address of a FID (Petr Machata)  [Orabug: 36811057]  
  - mlxsw: spectrum_fid: Add an op to get PGT allocation size (Petr Machata)  [Orabug: 36811057]  
  - mlxsw: spectrum_fid: Add an op for flood table initialization (Petr Machata)  [Orabug: 36811057]  
  - mlxsw: spectrum_fid: Move mlxsw_sp_fid_flood_table_init() up (Petr Machata)  [Orabug: 36811057]  
  - mlxsw: spectrum_fid: Make mlxsw_sp_fid_ops.setup return an int (Petr Machata)  [Orabug: 36811057]  
  - mlxsw: spectrum_fid: Split a helper out of mlxsw_sp_fid_flood_table_mid() (Petr Machata)  [Orabug: 36811057]  
  - mlxsw: spectrum_fid: Rename FID ops, families, arrays (Petr Machata)  [Orabug: 36811057]  
  - mlxsw: spectrum_fid: Privatize FID families (Petr Machata)  [Orabug: 36811057]  
  - mlxsw: pci: Fix missing error checking (Ido Schimmel)  [Orabug: 36811057]  
  - mlxsw: spectrum_router: Call RIF setup before obtaining FID (Petr Machata)  [Orabug: 36811057]  
  - mlxsw: spectrum_router: Add a helper to get subport number from a RIF (Petr Machata)  [Orabug: 36811057]  
  - mlxsw: spectrum_fid: Extract SFMR packing into a helper (Petr Machata)  [Orabug: 36811057]  
  - mlxsw: spectrum_fid: Drop unnecessary conditions (Petr Machata)  [Orabug: 36811057]  
  - mlxsw: pci: Permit enabling CFF mode (Petr Machata)  [Orabug: 36811057]  
  - mlxsw: core, pci: Add plumbing related to CFF mode (Petr Machata)  [Orabug: 36811057]  
  - mlxsw: reg: Add to SFMR register the fields related to CFF flood mode (Petr Machata)  [Orabug: 36811057]  
  - mlxsw: reg: Extract flood-mode specific part of mlxsw_reg_sfmr_pack() (Petr Machata)  [Orabug: 36811057]  
  - mlxsw: reg: Drop unnecessary writes from mlxsw_reg_sfmr_pack() (Petr Machata)  [Orabug: 36811057]  
  - mlxsw: reg: Mark SFGC & some SFMR fields as reserved in CFF mode (Petr Machata)  [Orabug: 36811057]  
  - mlxsw: reg: Add Switch FID Flooding Profiles Register (Petr Machata)  [Orabug: 36811057]  
  - mlxsw: resources: Add max_cap_nve_flood_prf (Petr Machata)  [Orabug: 36811057]  
  - mlxsw: cmd: Add MLXSW_CMD_MBOX_CONFIG_PROFILE_FLOOD_MODE_CFF (Petr Machata)  [Orabug: 36811057]  
  - mlxsw: cmd: Add cmd_mbox.query_fw.cff_support (Petr Machata)  [Orabug: 36811057]  
  - EDAC/bluefield: Convert to platform remove callback returning void (Uwe Kleine-König)  [Orabug: 36811057]  
  - selftests: mlxsw: Add PCI reset test (Ido Schimmel)  [Orabug: 36811057]  
  - mlxsw: pci: Implement PCI reset handlers (Ido Schimmel)  [Orabug: 36811057]  
  - mlxsw: pci: Add support for new reset flow (Ido Schimmel)  [Orabug: 36811057]  
  - mlxsw: pci: Move software reset code to a separate function (Amit Cohen)  [Orabug: 36811057]  
  - mlxsw: pci: Rename mlxsw_pci_sw_reset() (Amit Cohen)  [Orabug: 36811057]  
  - mlxsw: Extend MRSR pack() function to support new commands (Amit Cohen)  [Orabug: 36811057]  
  - net/mlx5e: Remove early assignment to netdev->features (Tariq Toukan)  [Orabug: 36811057]  
  - net/mlx5e: Add local loopback counter to vport rep stats (Or Har-Toov)  [Orabug: 36811057]  
  - net/mlx5: Query maximum frequency adjustment of the PTP hardware clock (Rahul Rameshbabu)  [Orabug: 36811057]  
  - net/mlx5: Convert scaled ppm values outside the s32 range for PHC frequency adjustments (Rahul Rameshbabu)  [Orabug: 36811057]  
  - net/mlx5: Initialize clock->ptp_info inside mlx5_init_timer_clock (Rahul Rameshbabu)  [Orabug: 36811057]  
  - net/mlx5: Refactor real time clock operation checks for PHC (Rahul Rameshbabu)  [Orabug: 36811057]  
  - net/mlx5e: Access array with enum values instead of magic numbers (Gal Pressman)  [Orabug: 36811057]  
  - net/mlx5: simplify mlx5_set_driver_version string assignments (Justin Stitt)  [Orabug: 36811057]  
  - net/mlx5: Annotate struct mlx5_flow_handle with __counted_by (Kees Cook)  [Orabug: 36811057]  
  - net/mlx5: Annotate struct mlx5_fc_bulk with __counted_by (Kees Cook)  [Orabug: 36811057]  
  - net/mlx5e: Some cleanup in mlx5e_tc_stats_matchall() (Amir Tzin)  [Orabug: 36811057]  
  - net/mlx5: Allow sync reset flow when BF MGT interface device is present (Moshe Shemesh)  [Orabug: 36811057]  
  - net/mlx5: print change on SW reset semaphore returns busy (Moshe Shemesh)  [Orabug: 36811057]  
  - vdpa/mlx5: clean up indenting in handle_ctrl_vlan() (Dan Carpenter)  [Orabug: 36811057]  
  - vdpa/mlx5: fix error code for deleting vlan (Dan Carpenter)  [Orabug: 36811057]  
  - vdpa/mlx5: Fix syntax errors in comments (Xiang wangx)  [Orabug: 36811057]  
  - macsec: Fix use-after-free while sending the offloading packet (Jianbo Liu)  [Orabug: 37268700]  {CVE-2024-50261} 
  - xfrm: Export symbol xfrm_dev_state_delete. (Steffen Klassert)  [Orabug: 37357287]  
  - xfrm: Fix unregister netdevice hang on hardware offload. (Steffen Klassert)  [Orabug: 37357287]  
  - xfrm: fix a data-race in xfrm_lookup_with_ifid() (Eric Dumazet)  [Orabug: 37357287]  
  - xfrm: generalize xdo_dev_state_update_curlft to allow statistics update (Leon Romanovsky)  [Orabug: 37357287]  
  - xfrm: copy_to_user_state fetch offloaded SA packets/bytes statistics (Raed Salem)  [Orabug: 37357287]  
  - xfrm: annotate data-race around use_time (Eric Dumazet)  [Orabug: 37357287]  
  - xfrm: consistently use time64_t in xfrm_timer_handler() (Eric Dumazet)  [Orabug: 37357287]  
  - cpufreq: intel_pstate: Update Balance-performance EPP for Granite Rapids (Srinivas Pandruvada)  [Orabug: 37383554]  
  - cpufreq: intel_pstate: Update Balance performance EPP for Emerald Rapids (Pedro Henrique Kopper)  [Orabug: 37383554]  
  - cpufreq: intel_pstate: Use Meteor Lake EPPs for Arrow Lake (Srinivas Pandruvada)  [Orabug: 37383554]  
  - cpufreq: intel_pstate: Update Meteor Lake EPPs (Srinivas Pandruvada)  [Orabug: 37383554]  
  - cpufreq: intel_pstate: Switch to new Intel CPU model defines (Tony Luck)  [Orabug: 37383554]  
  - cpufreq: Switch to new Intel CPU model defines (Tony Luck)  [Orabug: 37383554]  
  - x86/cpu/vfm: Update arch/x86/include/asm/intel-family.h (Tony Luck)  [Orabug: 37383554]  
  - x86/cpu: Add model number for another Intel Arrow Lake mobile processor (Tony Luck)  [Orabug: 37383554]  
  - cpufreq: intel_pstate: Update default EPPs for Meteor Lake (Srinivas Pandruvada)  [Orabug: 37383554]  
  - cpufreq: intel_pstate: Allow model specific EPPs (Srinivas Pandruvada)  [Orabug: 37383554]  
  - x86/cpu: Add model number for Intel Clearwater Forest processor (Tony Luck)  [Orabug: 37383554]  
  - cpufreq: intel_pstate: Update hybrid scaling factor for Meteor Lake (Srinivas Pandruvada)  [Orabug: 37383554]  
  - cpufreq: intel_pstate: Prioritize firmware-provided balance performance EPP (Srinivas Pandruvada)  [Orabug: 37383554]  
  - x86/cpu: Add model number for Intel Arrow Lake mobile processor (Tony Luck)  [Orabug: 37383554]  
  - x86/cpu: Update Hybrids (Peter Zijlstra)  [Orabug: 37383554]  
  - cpufreq: intel_pstate: Fix scaling for hybrid-capable systems with disabled E-cores (Srinivas Pandruvada)  [Orabug: 37383554]  
  - cpufreq: intel_pstate: Enable HWP IO boost for all servers (Srinivas Pandruvada)  [Orabug: 37383554]  
  - cpufreq: intel_pstate: Allow EPP 0x80 setting by the firmware (Srinivas Pandruvada)  [Orabug: 37383554]  
  - cpufreq: intel_pstate: Use firmware default EPP (Srinivas Pandruvada)  [Orabug: 37383554]  
  - net/mlx5: Add a timeout to acquire the command queue semaphore (Akiva Goldberger)  [Orabug: 37388415]  
  - PCI: Fix pci_enable_acs() support for the ACS quirks (Jason Gunthorpe)  [Orabug: 37477375]  
  - PCI: Clear Secondary Status errors after enumeration (Vidya Sagar)  [Orabug: 37477375]  
  - PCI/AER: Configure ECRC only if AER is native (Vidya Sagar)  [Orabug: 37477375]  
  - PCI: Extend ACS configurability (Vidya Sagar)  [Orabug: 37477375]  
  - NFSv4/pNFS: Do layout state recovery upon reboot (Trond Myklebust)  [Orabug: 37477755]  
  - NFSv4/pNFS: Remove redundant call to unhash the layout (Trond Myklebust)  [Orabug: 37477755]  
  - NFSv4/pnfs: Give nfs4_proc_layoutreturn() a flags argument (Trond Myklebust)  [Orabug: 37477755]  
  - NFSv4/pNFS: Retry the layout return later in case of a timeout or reboot (Trond Myklebust)  [Orabug: 37477755]  
  - NFSv4/pNFS: Handle server reboots in pnfs_poc_release() (Trond Myklebust)  [Orabug: 37477755]  
  - NFSv4/pNFS: Add a helper to defer failed layoutreturn calls (Trond Myklebust)  [Orabug: 37477755]  
  - NFSv4/pnfs: Add support for the PNFS_LAYOUT_FILE_BULK_RETURN flag (Trond Myklebust)  [Orabug: 37477755]  
  - pNFS: Add a flag argument to pnfs_destroy_layouts_byclid() (Trond Myklebust)  [Orabug: 37477755]  
  - NFSv4: Clean up encode_nfs4_stateid() (Trond Myklebust)  [Orabug: 37477755]  
  - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust)  [Orabug: 37477755]  
  - NFSv4/pnfs: Remove redundant list check (Trond Myklebust)  [Orabug: 37477755]  
  - uek-rpm: Enable CONFIG_SENSORS_ARM_SCMI and CONFIG_MVL_MHU (Thomas Tai)  [Orabug: 37498899]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-305.176.3.el9uek]
changelog:
  - LTS version: v5.15.176 (Vijayendra Suman)
  - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa)
  - dt-bindings: display: adi,adv7533: Drop single lane support (Biju Das)
  - drm: adv7511: Drop dsi single lane support (Biju Das)
  - net/sctp: Prevent autoclose integer overflow in sctp_association_init() (Nikolay Kuratov)
  - sky2: Add device ID 11ab:4373 for Marvell 88E8075 (Pascal Hambourg)
  - pinctrl: mcp23s08: Fix sleeping in atomic context due to regmap locking (Evgenii Shatokhin)
  - RDMA/uverbs: Prevent integer overflow issue (Dan Carpenter)
  - kcov: mark in_softirq_really() as __always_inline (Arnd Bergmann)
  - modpost: fix the missed iteration for the max bit in do_input() (Masahiro Yamada)
  - modpost: fix input MODULE_DEVICE_TABLE() built for 64-bit on 32-bit host (Masahiro Yamada)
  - usb: xhci: Avoid queuing redundant Stop Endpoint commands (Michal Pecio)
  - ARC: build: Try to guess GCC variant of cross compiler (Leon Romanovsky)
  - irqchip/gic: Correct declaration of *percpu_base pointer in union gic_base (Uros Bizjak)
  - net: usb: qmi_wwan: add Telit FE910C04 compositions (Daniele Palmas)
  - bpf: fix potential error return (Anton Protopopov)
  - sound: usb: format: don't warn that raw DSD is unsupported (Adrian Ratiu)
  - sound: usb: enable DSD output for ddHiFi TC44C (Adrian Ratiu)
  - btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount (Filipe Manana)
  - drm/amdkfd: Correct the migration DMA map direction (Prike Liang)
  - wifi: mac80211: wake the queues in case of failure in resume (Emmanuel Grumbach)
  - btrfs: sysfs: fix direct super block member reads (Qu Wenruo)
  - btrfs: sysfs: convert scnprintf and snprintf to sysfs_emit (Anand Jain)
  - btrfs: fix use-after-free when COWing tree bock and tracing is enabled (Filipe Manana) [Orabug: 37452645] {CVE-2024-56759}
  - btrfs: rename and export __btrfs_cow_block() (Filipe Manana)
  - ila: serialize calls to nf_register_net_hooks() (Eric Dumazet)
  - af_packet: fix vlan_get_protocol_dgram() vs MSG_PEEK (Eric Dumazet)
  - af_packet: fix vlan_get_tci() vs MSG_PEEK (Eric Dumazet)
  - net: wwan: iosm: Properly check for valid exec stage in ipc_mmio_init() (Maciej S. Szmigiero)
  - net: restrict SO_REUSEPORT to inet sockets (Eric Dumazet)
  - RDMA/rtrs: Ensure 'ib_sge list' is accessible (Li Zhijian)
  - net: mv643xx_eth: fix an OF node reference leak (Joe Hattori)
  - eth: bcmsysport: fix call balance of priv->clk handling routines (Vitalii Mordan)
  - ALSA: usb-audio: US16x08: Initialize array before use (Tanya Agarwal)
  - net: llc: reset skb->transport_header (Antonio Pastor)
  - netfilter: nft_set_hash: unaligned atomic read on struct nft_set_ext (Pablo Neira Ayuso)
  - drm/i915/dg1: Fix power gate sequence. (Rodrigo Vivi)
  - netrom: check buffer length before accessing it (Ilya Shchipletsov)
  - net: fix memory leak in tcp_conn_request() (Wang Liang)
  - net: stmmac: restructure the error path of stmmac_probe_config_dt() (Joe Hattori)
  - net: stmmac: don't create a MDIO bus if unnecessary (Andrew Halaney)
  - net: stmmac: platform: provide devm_stmmac_probe_config_dt() (Bartosz Golaszewski)
  - RDMA/hns: Fix missing flush CQE for DWQE (Chengchang Tang)
  - RDMA/hns: Fix warning storm caused by invalid input in IO path (Chengchang Tang)
  - RDMA/hns: Fix mapping error of zero-hop WQE buffer (wenglianfa)
  - RDMA/hns: Remove redundant 'bt_level' for hem_list_alloc_item() (Yunsheng Lin)
  - RDMA/hns: Remove redundant 'attr_mask' in modify_qp_init_to_init() (Yixing Liu)
  - drm/bridge: adv7511_audio: Update Audio InfoFrame properly (Stefan Ekenberg)
  - RDMA/bnxt_re: Fix the locking while accessing the QP table (Selvin Xavier)
  - RDMA/bnxt_re: Fix max_qp_wrs reported (Selvin Xavier)
  - RDMA/bnxt_re: Fix reporting hw_ver in query_device (Kalesh AP)
  - RDMA/bnxt_re: Add check for path mtu in modify_qp (Saravanan Vajravel)
  - RDMA/mlx5: Enforce same type port association for multiport RoCE (Patrisious Haddad)
  - xhci: Turn NEC specific quirk for handling Stop Endpoint errors generic (Mathias Nyman)
  - usb: xhci: Limit Stop Endpoint retries (Michal Pecio)
  - xhci: retry Stop Endpoint on buggy NEC controllers (Michal Pecio)
  - thunderbolt: Add support for Intel Panther Lake-M/P (Mika Westerberg)
  - thunderbolt: Add support for Intel Lunar Lake (Mika Westerberg)
  - thunderbolt: Add Intel Barlow Ridge PCI ID (Mika Westerberg)
  - thunderbolt: Add support for Intel Meteor Lake (Mika Westerberg)
  - thunderbolt: Add support for Intel Raptor Lake (George D Sworo)
  - tracing: Have process_string() also allow arrays (Steven Rostedt)
  - selinux: ignore unknown extended permissions (Thiébaud Weksteen)
  - x86/hyperv: Fix hv tsc page based sched_clock for hibernation (Naman Jain)
  - net: dsa: improve shutdown sequence (Vladimir Oltean) [Orabug: 37206293] {CVE-2024-49998}
  - nfsd: cancel nfsd_shrinker_work using sync mode in nfs4_state_shutdown_net (Yang Erkun) [Orabug: 37252394] {CVE-2024-50121}
  - btrfs: avoid monopolizing a core when activating a swap file (Filipe Manana)
  - power: supply: gpio-charger: Fix set charge current limits (Dimitri Fedrau)
  - tracing: Prevent bad count for tracing_cpumask_write (Lizhi Xu) [Orabug: 37452666] {CVE-2024-56763}
  - tracing: Constify string literal data member in struct trace_event_call (Christian Göttsche)
  - ksmbd: fix racy issue from session lookup and expire (Namjae Jeon)
  - lib: stackinit: hide never-taken branch from compiler (Kees Cook)
  - drm/dp_mst: Verify request type in the corresponding down message reply (Imre Deak)
  - arm64: Ensure bits ASID[15:8] are masked out when the kernel uses 8-bit ASIDs (Catalin Marinas)
  - arm64: mm: Rename asid2idx() to ctxid2asid() (Yunfeng Ye)
  - ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write (Jordy Zomer) [Orabug: 37434089] {CVE-2024-56626}
  - ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read (Jordy Zomer) [Orabug: 37434096] {CVE-2024-56627}
  - drm/dp_mst: Fix MST sideband message body length check (Imre Deak) [Orabug: 37434052] {CVE-2024-56616}
  - bpf: Check validity of link->type in bpf_link_show_fdinfo() (Hou Tao) [Orabug: 37331881] {CVE-2024-53099}
  - MIPS: Probe toolchain support of -msym32 (Jiaxun Yang)
  - vmalloc: fix accounting with i915 (Matthew Wilcox (Oracle))
  - virtio-blk: don't keep queue frozen during system suspend (Ming Lei)
  - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (Cathy Avery)
  - scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load time (Ranjan Kumar)
  - platform/x86: asus-nb-wmi: Ignore unknown event 0xCF (Armin Wolf)
  - regmap: Use correct format specifier for logging range errors (Mark Brown)
  - ALSA: hda/conexant: fix Z60MR100 startup pop issue (bo liu)
  - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl)
  - scsi: qla1280: Fix hw revision numbering for ISP1020/1040 (Magnus Lindholm)
  - watchdog: it87_wdt: add PWRGD enable quirk for Qotom QCML04 (James Hilliard)
  - tracing/kprobe: Make trace_kprobe's module callback called after jump_label update (Masami Hiramatsu (Google))
  - mtd: rawnand: fix double free in atmel_pmecc_create_user() (Dan Carpenter) [Orabug: 37522457] {CVE-2024-56766}
  - dmaengine: at_xdmac: avoid null_prt_deref in at_xdmac_prep_dma_memset (Chen Ridong) [Orabug: 37452680] {CVE-2024-56767}
  - dmaengine: dw: Select only supported masters for ACPI devices (Andy Shevchenko)
  - dmaengine: mv_xor: fix child node refcount handling in early exit (Javier Carrasco)
  - phy: core: Fix that API devm_phy_destroy() fails to destroy the phy (Zijun Hu)
  - phy: core: Fix that API devm_of_phy_provider_unregister() fails to unregister the phy provider (Zijun Hu)
  - phy: core: Fix that API devm_phy_put() fails to release the phy (Zijun Hu)
  - phy: core: Fix an OF node refcount leakage in of_phy_provider_lookup() (Zijun Hu)
  - phy: core: Fix an OF node refcount leakage in _of_phy_get() (Zijun Hu)
  - mtd: rawnand: arasan: Fix missing de-registration of NAND (Maciej Andrzejewski)
  - mtd: rawnand: arasan: Fix double assertion of chip-select (Maciej Andrzejewski)
  - mtd: diskonchip: Cast an operand to prevent potential overflow (Zichen Xie)
  - nfsd: restore callback functionality for NFSv4.0 (NeilBrown)
  - bpf: Check negative offsets in __bpf_skb_min_len() (Cong Wang)
  - tcp_bpf: Add sk_rmem_alloc related logic for tcp_bpf ingress redirection (Zijian Zhang)
  - tcp_bpf: Charge receive socket buffer in bpf_tcp_ingress() (Cong Wang)
  - mm/vmstat: fix a W=1 clang compiler warning (Bart Van Assche)
  - media: dvb-frontends: dib3000mb: fix uninit-value in dib3000_write_reg (Nikita Zhandarovich) [Orabug: 37452686] {CVE-2024-56769}
  - drm/amdgpu: Handle NULL bo->tbo.resource (again) in amdgpu_vm_bo_update (Michel Dänzer)
  - epoll: Add synchronous wakeup support for ep_poll_callback (Xuewen Yan)
  - ceph: validate snapdirname option length when mounting (Ilya Dryomov)
  - of: Fix refcount leakage for OF node returned by __of_get_dma_parent() (Zijun Hu)
  - of: Fix error path in of_parse_phandle_with_args_map() (Herve Codina)
  - udmabuf: also check for F_SEAL_FUTURE_WRITE (Jann Horn)
  - nilfs2: prevent use of deleted inode (Edward Adam Davis)
  - of/irq: Fix using uninitialized variable @addr_len in API of_irq_parse_one() (Zijun Hu)
  - NFS/pnfs: Fix a live lock between recalled layouts and layoutget (Trond Myklebust)
  - tracing: Add "%s" check in test_event_printk() (Steven Rostedt)
  - tracing: Add missing helper functions in event pointer dereference check (Steven Rostedt)
  - tracing: Fix test_event_printk() to process entire print argument (Steven Rostedt)
  - KVM: x86: Play nice with protected guests in complete_hypercall_exit() (Sean Christopherson)
  - Drivers: hv: util: Avoid accessing a ringbuffer not initialized yet (Michael Kelley)
  - btrfs: tree-checker: reject inline extent items with 0 ref count (Qu Wenruo)
  - zram: refuse to use zero sized block device as backing device (Kairui Song)
  - sh: clk: Fix clk_enable() to return 0 on NULL clk (Geert Uytterhoeven)
  - hwmon: (tmp513) Fix interpretation of values of Temperature Result and Limit Registers (Murad Masimov)
  - hwmon: (tmp513) Fix Current Register value interpretation (Murad Masimov)
  - hwmon: (tmp513) Fix interpretation of values of Shunt Voltage and Limit Registers (Murad Masimov)
  - hwmon: (tmp513) Use SI constants from units.h (Andy Shevchenko)
  - hwmon: (tmp513) Simplify with dev_err_probe() (Andy Shevchenko)
  - hwmon: (tmp513) Don't use "proxy" headers (Andy Shevchenko)
  - drm/modes: Avoid divide by zero harder in drm_mode_vrefresh() (Ville Syrjälä)
  - USB: serial: option: add Telit FE910C04 rmnet compositions (Daniele Palmas)
  - USB: serial: option: add MediaTek T7XX compositions (Jack Wu)
  - USB: serial: option: add Netprisma LCUK54 modules for WWAN Ready (Mank Wang)
  - USB: serial: option: add MeiG Smart SLM770A (Michal Hrusecky)
  - USB: serial: option: add TCL IK512 MBIM & ECM (Daniel Swanemar)
  - efivarfs: Fix error on non-existent file (James Bottomley)
  - i2c: riic: Always round-up when calculating bus period (Geert Uytterhoeven)
  - chelsio/chtls: prevent potential integer overflow on 32bit (Dan Carpenter)
  - mmc: sdhci-tegra: Remove SDHCI_QUIRK_BROKEN_ADMA_ZEROLEN_DESC quirk (Prathamesh Shete)
  - net: mdiobus: fix an OF node reference leak (Joe Hattori)
  - netfilter: ipset: Fix for recursive locking warning (Phil Sutter)
  - net: ethernet: bgmac-platform: fix an OF node reference leak (Joe Hattori)
  - net: hinic: Fix cleanup in create_rxqs/txqs() (Dan Carpenter)
  - ionic: use ee->offset when returning sprom data (Shannon Nelson)
  - ionic: Fix netdev notifier unregister on failure (Brett Creeley) [Orabug: 37434407] {CVE-2024-56715}
  - netdevsim: prevent bad user input in nsim_dev_health_break_write() (Eric Dumazet) [Orabug: 37434410] {CVE-2024-56716}
  - net/smc: check return value of sock_recvmsg when draining clc data (Guangguan Wang)
  - net/smc: check smcd_v2_ext_offset when receiving proposal msg (Guangguan Wang)
  - net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg (Guangguan Wang)
  - net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll (Guangguan Wang)
  - erofs: fix incorrect symlink detection in fast symlink (Gao Xiang)
  - i2c: pnx: Fix timeout in wait functions (Vladimir Riabchun)
  - usb: dwc2: gadget: Don't write invalid mapped sg entries into dma_desc with iommu enabled (Peng Hongchi)
  - MIPS: Loongson64: DTS: Fix msi node for ls7a (Jiaxun Yang)
  - PCI: Add ACS quirk for Broadcom BCM5760X NIC (Ajit Khaparde)
  - PCI: vmd: Create domain symlink before pci_bus_add_devices() (Jiwei Sun)
  - ASoC: Intel: sof_sdw: fix jack detection on ADL-N variant RVP (Pierre-Louis Bossart)
  - usb: cdns3: Add quirk flag to enable suspend residency (Roger Quadros)
  - ALSA: usb: Fix UBSAN warning in parse_audio_unit() (Takashi Iwai)
  - PCI/AER: Disable AER service on suspend (Kai-Heng Feng)
  - PCI: Use preserve_config in place of pci_flags (Vidya Sagar)
  - net: sched: fix ordering of qlen adjustment (Lion Ackermann) [Orabug: 37433381] {CVE-2024-53164}
  - LTS version: v5.15.175 (Vijayendra Suman)
  - x86/static-call: fix 32-bit build (Juergen Gross)
  - ALSA: usb-audio: Fix a DMA to stack memory bug (Dan Carpenter)
  - x86/xen: remove hypercall page (Juergen Gross)
  - x86/xen: use new hypercall functions instead of hypercall page (Juergen Gross)
  - x86/xen: add central hypercall functions (Juergen Gross)
  - x86/xen: don't do PV iret hypercall through hypercall page (Juergen Gross) [Orabug: 37427545] {CVE-2024-53241}
  - x86/static-call: provide a way to do very early static-call updates (Juergen Gross)
  - objtool/x86: allow syscall instruction (Juergen Gross)
  - x86: make get_cpu_vendor() accessible from Xen code (Juergen Gross)
  - xen/netfront: fix crash when removing device (Juergen Gross) [Orabug: 37427541] {CVE-2024-53240}
  - Revert "parisc: fix a possible DMA corruption" (Greg Kroah-Hartman)
  - tracing/kprobes: Skip symbol counting logic for module symbols in create_local_trace_kprobe() (Nikolay Kuratov)
  - bpf: sync_linked_regs() must preserve subreg_def (Eduard Zingerman) [Orabug: 37388801] {CVE-2024-53125}
  - blk-iocost: Avoid using clamp() on inuse in __propagate_weights() (Nathan Chancellor)
  - ACPICA: events/evxfregn: don't release the ContextMutex that was never acquired (Daniil Tatianin)
  - team: Fix feature propagation of NETIF_F_GSO_ENCAP_ALL (Daniel Borkmann)
  - bonding: Fix feature propagation of NETIF_F_GSO_ENCAP_ALL (Daniel Borkmann)
  - net/sched: netem: account for backlog updates from child qdisc (Martin Ottens)
  - Documentation: PM: Clarify pm_runtime_resume_and_get() return value (Paul Barker)
  - qca_spi: Make driver probing reliable (Stefan Wahren)
  - qca_spi: Fix clock speed for multiple QCA7000 (Stefan Wahren)
  - cxgb4: use port number to set mac addr (Anumula Murali Mohan Reddy)
  - ACPI: resource: Fix memory resource type union access (Ilpo Järvinen)
  - net: sparx5: fix the maximum frame length register (Daniel Machon)
  - net: sparx5: fix FDMA performance issue (Daniel Machon)
  - net: lapb: increase LAPB_HEADER_LEN (Eric Dumazet) [Orabug: 37434236] {CVE-2024-56659}
  - ptp: kvm: x86: Return EOPNOTSUPP instead of ENODEV from kvm_arch_ptp_init() (Thomas Weißschuh)
  - ptp: kvm: Use decrypted memory in confidential guest on x86 (Jeremi Piotrowski)
  - selftests: mlxsw: sharedbuffer: Remove duplicate test cases (Danielle Ratson)
  - selftests: mlxsw: sharedbuffer: Remove h1 ingress test case (Danielle Ratson)
  - tipc: fix NULL deref in cleanup_bearer() (Eric Dumazet) [Orabug: 37522548] {CVE-2024-56661}
  - batman-adv: Do not let TT changes list grows indefinitely (Remi Pommarel)
  - batman-adv: Remove uninitialized data in full table TT response (Remi Pommarel)
  - batman-adv: Do not send uninitialized TT changes (Remi Pommarel)
  - acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl (Suraj Sonawane) [Orabug: 37434246] {CVE-2024-56662}
  - exfat: fix potential deadlock on __exfat_get_dentry_set (Sungjong Seo) [Orabug: 36964279] {CVE-2024-42315}
  - virtio/vsock: Fix accept_queue memory leak (Michal Luczaj) [Orabug: 37388777] {CVE-2024-53119}
  - bpf, sockmap: Fix update element with same (Michal Luczaj)
  - xfs: fix scrub tracepoints when inode-rooted btrees are involved (Darrick J. Wong)
  - xfs: return from xfs_symlink_verify early on V4 filesystems (Darrick J. Wong)
  - xfs: don't drop errno values when we fail to ficlone the entire range (Darrick J. Wong)
  - xfs: update btree keys correctly when _insrec splits an inode root block (Darrick J. Wong)
  - drm/i915: Fix memory leak by correcting cache object name in error handler (Jiasheng Jiang)
  - usb: gadget: u_serial: Fix the issue that gs_start_io crashed due to accessing null pointer (Lianqin Hu) [Orabug: 37434263] {CVE-2024-56670}
  - usb: ehci-hcd: fix call balance of clocks handling routines (Vitalii Mordan)
  - usb: dwc2: Fix HCD port connection race (Stefan Wahren)
  - usb: dwc2: hcd: Fix GetPortStatus & SetPortFeature (Stefan Wahren)
  - usb: dwc2: Fix HCD resume (Stefan Wahren)
  - ata: sata_highbank: fix OF node reference leak in highbank_initialize_phys() (Joe Hattori)
  - usb: host: max3421-hcd: Correctly abort a USB request. (Mark Tomlinson)
  - ALSA: usb-audio: Add implicit feedback quirk for Yamaha THR5 (Jaakko Salo)
  - tcp: check space before adding MPTCP SYN options (MoYuanhao)
  - LTS version: v5.15.174 (Vijayendra Suman)
  - Bluetooth: hci_core: Fix calling mgmt_device_connected (Luiz Augusto von Dentz)
  - net/smc: Fix af_ops of child socket pointing to released memory (Karsten Graul)
  - media: venus: vdec: fixed possible memory leak issue (Ameer Hamza)
  - serial: amba-pl011: fix build regression (Arnd Bergmann)
  - drm/amdgpu: rework resume handling for display (v2) (Alex Deucher)
  - drm/amd/display: Correct the defined value for AMDGPU_DMUB_NOTIFICATION_MAX (Wayne Lin) [Orabug: 37159692] {CVE-2024-46871}
  - net: dsa: microchip: correct KSZ8795 static MAC table access (Tristram Ha)
  - Bluetooth: L2CAP: Fix uaf in l2cap_connect (Luiz Augusto von Dentz) [Orabug: 37206073] {CVE-2024-49950}
  - arm64: smccc: Remove broken support for SMCCCv1.3 SVE discard hint (Mark Rutland)
  - arm64/sve: Discard stale CPU state when handling SVE traps (Mark Brown) [Orabug: 37298722] {CVE-2024-50275}
  - gve: Fixes for napi_poll when budget is 0 (Ziwei Xiao)
  - scsi: core: Fix scsi_mode_select() buffer length handling (Damien Le Moal)
  - Revert "drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read()" (Zhang Zekun)
  - fou: remove warn in gue_gro_receive on unsupported protocol (Willem de Bruijn) [Orabug: 36993166] {CVE-2024-44940}
  - ima: Fix use-after-free on a dentry's dname.name (Stefan Berger) [Orabug: 36835557] {CVE-2024-39494}
  - crypto: hisilicon/qm - inject error before stopping queue (Weili Qian) [Orabug: 37200767] {CVE-2024-47730}
  - drm/amd/display: Check BIOS images before it is used (Alex Hung) [Orabug: 37116330] {CVE-2024-46809}
  - mmc: mtk-sd: Fix error handle of probe function (Andy-ld Lu)
  - xhci: dbc: Fix STALL transfer event handling (Mathias Nyman)
  - mm/damon/vaddr: fix issue in damon_va_evenly_split_region() (Zheng Yejian)
  - mm/damon/vaddr-test: split a test function having >1024 bytes frame size (SeongJae Park)
  - jffs2: Fix rtime decompressor (Richard Weinberger)
  - jffs2: Prevent rtime decompress memory corruption (Kinsey Moore)
  - KVM: arm64: vgic-its: Clear ITE when DISCARD frees an ITE (Kunkun Jiang)
  - KVM: arm64: vgic-its: Clear DTE when MAPD unmaps a device (Kunkun Jiang)
  - KVM: arm64: vgic-its: Add a data length check in vgic_its_save_* (Jing Zhang)
  - tracing/eprobe: Fix to release eprobe when failed to add dyn_event (Masami Hiramatsu (Google))
  - btrfs: fix missing snapshot drew unlock when root is dead during swap activation (Filipe Manana)
  - sched/core: Prevent wakeup of ksoftirqd during idle load balance (K Prateek Nayak)
  - sched/fair: Check idle_cpu() before need_resched() to detect ilb CPU turning busy (K Prateek Nayak)
  - sched/fair: Add NOHZ balancer flag for nohz.next_balance updates (Valentin Schneider)
  - sched/core: Remove the unnecessary need_resched() check in nohz_csd_func() (K Prateek Nayak)
  - modpost: Add .irqentry.text to OTHER_SECTIONS (Thomas Gleixner)
  - modpost: Include '.text.*' in TEXT_SECTIONS (Nathan Chancellor)
  - misc: eeprom: eeprom_93cx6: Add quirk for extra read clock cycle (Parker Newman)
  - powerpc/prom_init: Fixup missing powermac #size-cells (Michael Ellerman)
  - MIPS: Loongson64: DTS: Really fix PCIe port nodes for ls7a (Xi Ruoyao)
  - usb: chipidea: udc: handle USB Error Interrupt if IOC not set (Xu Yang)
  - i3c: Use i3cdev->desc->info instead of calling i3c_device_get_info() to avoid deadlock (Defa Li)
  - PCI: Add ACS quirk for Wangxun FF5xxx NICs (Mengyuan Lou)
  - PCI: Add 'reset_subordinate' to reset hierarchy below bridge (Keith Busch)
  - PCI: Detect and trust built-in Thunderbolt chips (Esther Shimanovich)
  - i3c: mipi-i3c-hci: Mask ring interrupts before ring stop request (Jarkko Nikula)
  - f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode. (Qi Han) [Orabug: 37433860] {CVE-2024-56586}
  - nvdimm: rectify the illogical code within nd_dax_probe() (Yi Yang)
  - pinctrl: qcom-pmic-gpio: add support for PM8937 (Barnabás Czémán)
  - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Kai Mäkisara)
  - scsi: st: Don't modify unknown block number in MTIOCGET (Kai Mäkisara)
  - leds: class: Protect brightness_show() with led_cdev->led_access mutex (Mukesh Ojha) [Orabug: 37433867] {CVE-2024-56587}
  - scsi: hisi_sas: Add cond_resched() for no forced preemption model (Yihang Li) [Orabug: 37433881] {CVE-2024-56589}
  - tracing: Use atomic64_inc_return() in trace_clock_counter() (Uros Bizjak)
  - pinctrl: freescale: fix COMPILE_TEST error with PINCTRL_IMX_SCU (Esben Haabendal)
  - netpoll: Use rcu_access_pointer() in __netpoll_setup (Breno Leitao)
  - net/neighbor: clear error in case strict check is not set (Jakub Kicinski)
  - rocker: fix link status detection in rocker_carrier_init() (Dmitry Antipov)
  - ASoC: hdmi-codec: reorder channel allocation list (Jonas Karlman)
  - Bluetooth: hci_core: Fix not checking skb length on hci_acldata_packet (Luiz Augusto von Dentz) [Orabug: 37433887] {CVE-2024-56590}
  - wifi: brcmfmac: Fix oops due to NULL pointer dereference in brcmf_sdiod_sglist_rw() (Norbert van Bolhuis) [Orabug: 37433907] {CVE-2024-56593}
  - wifi: ipw2x00: libipw_rx_any(): fix bad alignment (Jiapeng Chong)
  - drm/amdgpu: set the right AMDGPU sg segment limitation (Prike Liang) [Orabug: 37433913] {CVE-2024-56594}
  - drm/amdgpu: skip amdgpu_device_cache_pci_state under sriov (Victor Zhao)
  - jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree (Nihar Chaithanya) [Orabug: 37433919] {CVE-2024-56595}
  - jfs: fix array-index-out-of-bounds in jfs_readdir (Ghanshyam Agrawal) [Orabug: 37433927] {CVE-2024-56596}
  - jfs: fix shift-out-of-bounds in dbSplit (Ghanshyam Agrawal) [Orabug: 37433933] {CVE-2024-56597}
  - jfs: array-index-out-of-bounds fix in dtReadFirst (Ghanshyam Agrawal) [Orabug: 37433940] {CVE-2024-56598}
  - dma-debug: fix a possible deadlock on radix_lock (Levi Yun)
  - drm/amdgpu: refine error handling in amdgpu_ttm_tt_pin_userptr (Lang Yu)
  - drm/amdgpu: Dereference the ATCS ACPI buffer (Prike Liang)
  - drm/amdgpu: clear RB_OVERFLOW bit when enabling interrupts for vega20_ih (Victor Lu)
  - drm/panel: simple: Add Microchip AC69T88A LVDS Display panel (Manikandan Muralidharan)
  - wifi: ath5k: add PCI ID for Arcadyan devices (Rosen Penev)
  - wifi: ath5k: add PCI ID for SX76X (Rosen Penev)
  - net: inet6: do not leave a dangling sk pointer in inet6_create() (Ignat Korchagin) [Orabug: 37433954] {CVE-2024-56600}
  - net: inet: do not leave a dangling sk pointer in inet_create() (Ignat Korchagin) [Orabug: 37433961] {CVE-2024-56601}
  - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Ignat Korchagin) [Orabug: 37433968] {CVE-2024-56602}
  - net: af_can: do not leave a dangling sk pointer in can_create() (Ignat Korchagin) [Orabug: 37433975] {CVE-2024-56603}
  - Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create() (Ignat Korchagin) [Orabug: 37433989] {CVE-2024-56605}
  - af_packet: avoid erroring out after sock_init_data() in packet_create() (Ignat Korchagin) [Orabug: 37433995] {CVE-2024-56606}
  - net/sched: cbs: Fix integer overflow in cbs_set_port_rate() (Elena Salomatkina)
  - net: ethernet: fs_enet: Use %pa to format resource_size_t (Simon Horman)
  - net: fec_mpc52xx_phy: Use %pa to format resource_size_t (Simon Horman)
  - samples/bpf: Fix a resource leak (Zhu Jun)
  - r8169: don't apply UDP padding quirk on RTL8126A (Heiner Kallweit)
  - drm/radeon/r600_cs: Fix possible int overflow in r600_packet3_check() (Igor Artemiev)
  - drm/mcde: Enable module autoloading (Liao Chen)
  - drm: panel-orientation-quirks: Add quirk for AYA NEO 2 model (Joaquín Ignacio Aramendía)
  - drm/vc4: hvs: Set AXI panic modes for the HVS (Dave Stevenson)
  - soc: imx8m: Probe the SoC driver as platform driver (Marek Vasut)
  - media: cx231xx: Add support for Dexatek USB Video Grabber 1d19:6108 (Rohan Barar)
  - media: uvcvideo: Add a quirk for the Kaiweets KTI-W02 infrared camera (David Given)
  - kcsan: Turn report_filterlist_lock into a raw_spinlock (Marco Elver) [Orabug: 37434021] {CVE-2024-56610}
  - kselftest/arm64: Don't leak pipe fds in pac.exec_sign_all() (Mark Brown)
  - btrfs: avoid unnecessary device path update for the same device (Qu Wenruo)
  - s390/cpum_sf: Handle CPU hotplug remove during sampling (Thomas Richter)
  - epoll: annotate racy check (Christian Brauner)
  - iommu/arm-smmu: Defer probe of clients after smmu device bound (Pratyush Brahma) [Orabug: 37433775] {CVE-2024-56568}
  - ocfs2: update seq_file index in ocfs2_dlm_seq_next (Wengang Wang)
  - mmc: core: Further prevent card detect during shutdown (Ulf Hansson)
  - mmc: sdhci-pci: Add DMI quirk for missing CD GPIO on Vexia Edu Atla 10 tablet (Hans de Goede)
  - regmap: detach regmap from dev on regmap_exit (Cosmin Tanislav)
  - xsk: fix OOB map writes when deleting elements (Maciej Fijalkowski) [Orabug: 37434040] {CVE-2024-56614}
  - dma-buf: fix dma_fence_array_signaled v4 (Christian König)
  - bpf: fix OOB devmap writes when deleting elements (Maciej Fijalkowski) [Orabug: 37434046] {CVE-2024-56615}
  - bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again (Liequan Che)
  - nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry() (Ryusuke Konishi) [Orabug: 37434064] {CVE-2024-56619}
  - scsi: ufs: core: sysfs: Prevent div by zero (Gwendal Grignou) [Orabug: 37434075] {CVE-2024-56622}
  - scsi: qla2xxx: Remove check req_sg_cnt should be equal to rsp_sg_cnt (Saurav Kashyap)
  - scsi: qla2xxx: Fix use after free on unload (Quinn Tran) [Orabug: 37434078] {CVE-2024-56623}
  - scsi: qla2xxx: Supported speed displayed incorrectly for VPorts (Anil Gurumurthy)
  - scsi: qla2xxx: Fix NVMe and NPIV connect issue (Quinn Tran)
  - ALSA: hda/realtek: Add support for Samsung Galaxy Book3 360 (NP730QFG) (Sahas Leelodharry)
  - ALSA: hda/realtek: Enable mute and micmute LED on HP ProBook 430 G8 (Nazar Bilinskyi)
  - ALSA: usb-audio: add mixer mapping for Corsair HS80 (Marie Ramlow)
  - arm64: ptrace: fix partial SETREGSET for NT_ARM_TAGGED_ADDR_CTRL (Mark Rutland)
  - tracing: Fix cmp_entries_dup() to respect sort() comparison rules (Kuan-Wei Chiu)
  - can: dev: can_set_termination(): allow sleeping GPIOs (Marc Kleine-Budde)
  - watchdog: rti: of: honor timeout-sec property (Alexander Sverdlin)
  - HID: wacom: fix when get product name maybe null pointer (WangYuli) [Orabug: 37434107] {CVE-2024-56629}
  - bpf: Fix exact match conditions in trie_get_next_key() (Hou Tao)
  - bpf: Handle BPF_EXIST and BPF_NOEXIST for LPM trie (Hou Tao)
  - ocfs2: free inode when ocfs2_get_init_inode() fails (Tetsuo Handa) [Orabug: 37434112] {CVE-2024-56630}
  - drm/v3d: Enable Performance Counters before clearing them (Maíra Canal)
  - spi: mpc52xx: Add cancel_work_sync before module remove (Pei Xiao)
  - tools: Override makefile ARCH variable if defined, but empty (Björn Töpel)
  - ALSA: usb-audio: Notify xrun for low-latency mode (Takashi Iwai)
  - ALSA: pcm: Avoid reference to status->state (Takashi Iwai)
  - ALSA: pcm: Add more disconnection checks at file ops (Takashi Iwai)
  - tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg (Zijian Zhang) [Orabug: 37434126] {CVE-2024-56633}
  - drm/sti: Add __iomem for mixer_dbg_mxn's parameter (Pei Xiao)
  - bpftool: fix potential NULL pointer dereferencing in prog_dump() (Amir Mohammadi)
  - bpftool: Remove asserts from JIT disassembler (Quentin Monnet)
  - serial: amba-pl011: Fix RX stall when DMA is used (Kartik Rajput)
  - serial: amba-pl011: Use port lock wrappers (Thomas Gleixner)
  - dt-bindings: serial: rs485: Fix rs485-rts-delay property (Michal Simek)
  - dt_bindings: rs485: Correct delay values (Lino Sanfilippo)
  - gpio: grgpio: Add NULL check in grgpio_probe (Charles Han) [Orabug: 37434130] {CVE-2024-56634}
  - gpio: grgpio: use a helper variable to store the address of ofdev->dev (Bartosz Golaszewski)
  - geneve: do not assume mac header is set in geneve_xmit_skb() (Eric Dumazet) [Orabug: 37434137] {CVE-2024-56636}
  - ethtool: Fix wrong mod state in case of verbose and no_mask bitset (Kory Maincent)
  - netfilter: nft_set_hash: skip duplicated elements pending gc run (Pablo Neira Ayuso)
  - netfilter: ipset: Hold module reference while requesting a module (Phil Sutter) [Orabug: 37434142] {CVE-2024-56637}
  - net: sched: fix erspan_opt settings in cls_flower (Xin Long)
  - igb: Fix potential invalid memory access in igb_init_module() (Yuan Can)
  - net/qed: allow old cards not supporting "num_images" to work (Louis Leseur)
  - net/smc: fix LGR and link use-after-free issue (Wen Gu) [Orabug: 37434151] {CVE-2024-56640}
  - net/smc: Limit backlog connections (D. Wythe)
  - tipc: Fix use-after-free of kernel socket in cleanup_bearer(). (Kuniyuki Iwashima) [Orabug: 37434160] {CVE-2024-56642}
  - dccp: Fix memory leak in dccp_feat_change_recv (Ivan Solodovnikov) [Orabug: 37434165] {CVE-2024-56643}
  - net/ipv6: release expired exception dst cached in socket (Jiri Wiesner) [Orabug: 37434172] {CVE-2024-56644}
  - can: j1939: j1939_session_new(): fix skb reference counting (Dmitry Antipov)
  - net: hsr: avoid potential out-of-bound access in fill_frame_info() (Eric Dumazet) [Orabug: 37434192] {CVE-2024-56648}
  - net/sched: tbf: correct backlog statistic for GSO packets (Martin Ottens)
  - ptp: Add error handling for adjfine callback in ptp_clock_adjtime (Ajay Kaher)
  - netfilter: x_tables: fix LED ID check in led_tg_check() (Dmitry Antipov) [Orabug: 37434199] {CVE-2024-56650}
  - ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (Jinghao Jia)
  - can: ems_usb: ems_usb_rx_err(): fix {rx,tx}_errors statistics (Dario Binacchi)
  - can: sun4i_can: sun4i_can_err(): fix {rx,tx}_errors statistics (Dario Binacchi)
  - can: ifi_canfd: ifi_canfd_handle_lec_err(): fix {rx,tx}_errors statistics (Dario Binacchi)
  - can: m_can: m_can_handle_lec_err(): fix {rx,tx}_errors statistics (Dario Binacchi)
  - can: sun4i_can: sun4i_can_err(): call can_change_state() even if cf is NULL (Dario Binacchi)
  - can: c_can: c_can_handle_bus_err(): update statistics if skb allocation fails (Dario Binacchi)
  - can: do not increase rx statistics when generating a CAN rx error message frame (Vincent Mailhol)
  - can: peak_usb: CANFD: store 64-bits hw timestamps (Stephane Grosjean)
  - watchdog: mediatek: Make sure system reset gets asserted in mtk_wdt_restart() (Yassine Oudjana)
  - iTCO_wdt: mask NMI_NOW bit for update_no_reboot_bit() call (Oleksandr Ocheretnyi)
  - drm/etnaviv: flush shader L1 cache after user commandstream (Lucas Stach)
  - drm/sti: avoid potential dereference of error pointers (Ma Ke)
  - drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check (Ma Ke)
  - drm/sti: avoid potential dereference of error pointers in sti_hqvdp_atomic_check (Ma Ke)
  - btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc() (Josef Bacik) [Orabug: 37116498] {CVE-2024-46841}
  - nfsd: fix nfs4_openowner leak when concurrent nfsd4_open occur (Yang Erkun)
  - nfsd: make sure exp active before svc_export_show (Yang Erkun) [Orabug: 37433743] {CVE-2024-56558}
  - PCI: rockchip-ep: Fix address translation unit programming (Damien Le Moal)
  - dm thin: Add missing destroy_work_on_stack() (Yuan Can)
  - ovl: properly handle large files in ovl_security_fileattr (Oleksandr Tymoshenko)
  - PCI: keystone: Add link up check to ks_pcie_other_map_bus() (Kishon Vijay Abraham I)
  - i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs() (Frank Li) [Orabug: 37433755] {CVE-2024-56562}
  - scsi: ufs: exynos: Fix hibern8 notify callbacks (Peter Griffin)
  - util_macros.h: fix/rework find_closest() macros (Alexandru Ardelean)
  - s390/entry: Mark IRQ entries to fix stack depot warnings (Vasily Gorbik)
  - ad7780: fix division by zero in ad7780_write_raw() (Zicheng Qu) [Orabug: 37433771] {CVE-2024-56567}
  - btrfs: ref-verify: fix use-after-free after invalid ref action (Filipe Manana) [Orabug: 37433831] {CVE-2024-56581}
  - btrfs: add a sanity check for btrfs root in btrfs_search_slot() (Lizhi Xu)
  - btrfs: add might_sleep() annotations (ChenXiaoSong)
  - quota: flush quota_release_work upon quota writeback (Ojaswin Mujoo)
  - xfs: remove unknown compat feature check in superblock write validation (Long Li)
  - xfs: fix log recovery when unknown rocompat bits are set (Darrick J. Wong)
  - ASoC: fsl_micfil: fix the naming style for mask definition (Shengjiu Wang)
  - sh: intc: Fix use-after-free bug in register_intc_controller() (Dan Carpenter) [Orabug: 37433391] {CVE-2024-53165}
  - sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport (Liu Jian) [Orabug: 37434313] {CVE-2024-56688}
  - sunrpc: remove unnecessary test in rpc_task_set_client() (Thiago Rafael Becker)
  - nfs: ignore SB_RDONLY when mounting nfs (Li Lingfeng)
  - modpost: remove incorrect code in do_eisa_entry() (Masahiro Yamada)
  - rtc: ab-eoz9: don't fail temperature reads on undervoltage notification (Maxime Chevallier)
  - 9p/xen: fix release of IRQ (Alex Zenla) [Orabug: 37434373] {CVE-2024-56704}
  - 9p/xen: fix init sequence (Alex Zenla)
  - block: return unsigned int from bdev_io_min (Christoph Hellwig)
  - jffs2: fix use of uninitialized variable (Qingfang Deng)
  - ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit (Waqar Hameed) [Orabug: 37433413] {CVE-2024-53171}
  - ubi: fastmap: Fix duplicate slab cache names while attaching (Zhihao Cheng) [Orabug: 37433417] {CVE-2024-53172}
  - ubifs: Correct the total block count by deducting journal reservation (Zhihao Cheng)
  - rtc: check if __rtc_read_time was successful in rtc_timer_do_work() (Yongliang Gao) [Orabug: 37434455] {CVE-2024-56739}
  - rtc: abx80x: Fix WDT bit position of the status register (Nobuhiro Iwamatsu)
  - rtc: st-lpc: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)
  - NFSv4.0: Fix a use-after-free problem in the asynchronous open() (Trond Myklebust) [Orabug: 37433425] {CVE-2024-53173}
  - um: Always dump trace for specified task in show_stack (Tiwei Bie)
  - um: Fix the return value of elf_core_copy_task_fpregs (Tiwei Bie)
  - um: Fix potential integer overflow during physmem setup (Tiwei Bie) [Orabug: 37427463] {CVE-2024-53145}
  - rpmsg: glink: Propagate TX failures in intentless mode as well (Bjorn Andersson)
  - SUNRPC: make sure cache entry active before cache_show (Yang Erkun) [Orabug: 37433432] {CVE-2024-53174}
  - NFSD: Prevent a potential integer overflow (Chuck Lever) [Orabug: 37427469] {CVE-2024-53146}
  - lib: string_helpers: silence snprintf() output truncation warning (Bartosz Golaszewski)
  - usb: dwc3: gadget: Fix looping of queued SG entries (Thinh Nguyen) [Orabug: 37434350] {CVE-2024-56698}
  - usb: dwc3: gadget: Fix checking for number of TRBs left (Thinh Nguyen)
  - ALSA: hda/realtek: Apply quirk for Medion E15433 (Takashi Iwai)
  - ALSA: hda/realtek: Fix Internal Speaker and Mic boost of Infinix Y4 Max (Dinesh Kumar)
  - ALSA: hda/realtek: Set PCBeep to default value for ALC274 (Kailang Yang)
  - ALSA: hda/realtek: Update ALC225 depop procedure (Kailang Yang)
  - ALSA: pcm: Add sanity NULL check for the default mmap fault handler (Takashi Iwai) [Orabug: 37433460] {CVE-2024-53180}
  - media: v4l2-core: v4l2-dv-timings: check cvt/gtf result (Hans Verkuil)
  - soc: fsl: rcpm: fix missing of_node_put() in copy_ippdexpcr1_setting() (Javier Carrasco)
  - media: wl128x: Fix atomicity violation in fmc_send_cmd() (Qiu-ji Chen) [Orabug: 37434357] {CVE-2024-56700}
  - HID: wacom: Interpret tilt data from Intuos Pro BT as signed values (Jason Gerecke)
  - block: fix ordering between checking BLK_MQ_S_STOPPED request adding (Muchun Song)
  - arm64: tls: Fix context-switching of tpidrro_el0 when kpti is enabled (Will Deacon)
  - sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK (Huacai Chen)
  - um: vector: Do not use drvdata in release (Tiwei Bie) [Orabug: 37433466] {CVE-2024-53181}
  - serial: 8250: omap: Move pm_runtime_get_sync (Bin Liu)
  - um: net: Do not use drvdata in release (Tiwei Bie) [Orabug: 37433474] {CVE-2024-53183}
  - um: ubd: Do not use drvdata in release (Tiwei Bie) [Orabug: 37433483] {CVE-2024-53184}
  - ubi: wl: Put source PEB into correct list if trying locking LEB failed (Zhihao Cheng)
  - platform/chrome: cros_ec_typec: fix missing fwnode reference decrement (Javier Carrasco)
  - cpufreq: mediatek-hw: Fix wrong return value in mtk_cpufreq_get_cpu_power() (Jinjie Ruan)
  - mtd: spi-nor: core: replace dummy buswidth from addr to data (Cheng Ming Lin)
  - spi: Fix acpi deferred irq probe (Stanislaw Gruszka)
  - netfilter: ipset: add missing range check in bitmap_ip_uadt (Jeongjun Park) [Orabug: 37388866] {CVE-2024-53141}
  - gpio: exar: set value when external pull-up or pull-down is present (Sai Kumar Cholleti)
  - Revert "serial: sh-sci: Clean sci_ports[0] after at earlycon exit" (Greg Kroah-Hartman)
  - serial: sh-sci: Clean sci_ports[0] after at earlycon exit (Claudiu Beznea)
  - Revert "usb: gadget: composite: fix OS descriptors w_value logic" (Michal Vrastil)
  - driver core: bus: Fix double free in driver API bus_register() (Zijun Hu) [Orabug: 37206509] {CVE-2024-50055}
  - usb: xhci: Fix TD invalidation under pending Set TR Dequeue (Michal Pecio)
  - Bluetooth: Fix type of len in rfcomm_sock_getsockopt{,_old}() (Andrej Shadura)
  - exfat: fix uninit-value in __exfat_get_dentry_set (Namjae Jeon)
  - locking/lockdep: Avoid creating new name string literals in lockdep_set_subclass() (Ahmed Ehab)
  - tty: ldsic: fix tty_ldisc_autoload sysctl's proc_handler (Nicolas Bouchinet)
  - apparmor: test: Fix memory leak for aa_unpack_strdup() (Jinjie Ruan) [Orabug: 37434463] {CVE-2024-56741}
  - comedi: Flush partial mappings in error case (Jann Horn) [Orabug: 37427481] {CVE-2024-53148}
  - fsnotify: fix sending inotify event with unexpected filename (Amir Goldstein)
  - PCI: Fix use-after-free of slot->bus on hot remove (Lukas Wunner) [Orabug: 37433515] {CVE-2024-53194}
  - KVM: arm64: Ignore PMCNTENSET_EL0 while checking for overflow status (Raghavendra Rao Ananta)
  - powerpc/pseries: Fix KVM guest detection for disabling hardlockup detector (Gautam Menghani)
  - crypto: x86/aegis128 - access 32-bit arguments as 32-bit (Eric Biggers)
  - perf/x86/intel/pt: Fix buffer full but size is 0 case (Adrian Hunter)
  - ASoC: codecs: Fix atomicity violation in snd_soc_component_get_drvdata() (Qiu-ji Chen)
  - jfs: xattr: check invalid xattr size more strictly (Artem Sadovnikov)
  - ext4: fix FS_IOC_GETFSMAP handling (Theodore Ts'o)
  - ext4: supress data-race warnings in ext4_free_inodes_{count,set}() (Jeongjun Park)
  - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Benoît Sevens) [Orabug: 37433531] {CVE-2024-53197}
  - soc: qcom: socinfo: fix revision check in qcom_socinfo_probe() (Manikanta Mylavarapu)
  - ASoC: Intel: sst: Fix used of uninitialized ctx to log an error (Hans de Goede)
  - Revert "drivers: clk: zynqmp: update divider round rate logic" (Joel Guittet)
  - usb: ehci-spear: fix call balance of sehci clk handling routines (Vitalii Mordan)
  - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Takashi Iwai) [Orabug: 37427488] {CVE-2024-53150}
  - xen: Fix the issue of resource not being properly released in xenbus_dev_probe() (Qiu-ji Chen) [Orabug: 37433539] {CVE-2024-53198}
  - ksmbd: fix slab-use-after-free in smb3_preauth_hash_rsp (Namjae Jeon) [Orabug: 37298755] {CVE-2024-50283}
  - parisc: fix a possible DMA corruption (Mikulas Patocka) [Orabug: 37028940] {CVE-2024-44949}
  - apparmor: fix 'Do simple duplicate message elimination' (chao liu)
  - ALSA: hda/realtek: Update ALC256 depop procedure (Kailang Yang)
  - counter: stm32-timer-cnt: Add check for clk_enable() (Jiasheng Jiang)
  - misc: apds990x: Fix missing pm_runtime_disable() (Jinjie Ruan)
  - USB: chaoskey: Fix possible deadlock chaoskey_list_lock (Edward Adam Davis)
  - USB: chaoskey: fail open after removal (Oliver Neukum)
  - usb: yurex: make waiting on yurex_write interruptible (Oliver Neukum)
  - usb: using mutex lock and supporting O_NONBLOCK flag in iowarrior_read() (Jeongjun Park)
  - iio: light: al3010: Fix an error handling path in al3010_probe() (Christophe JAILLET)
  - bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down (Saravanan Vajravel)
  - net: hsr: fix hsr_init_sk() vs network/transport headers. (Eric Dumazet)
  - spi: atmel-quadspi: Fix register name in verbose logging function (Csókás, Bence)
  - octeontx2-af: RPM: Fix mismatch in lmac type (Hariprasad Kelam)
  - net: stmmac: dwmac-socfpga: Set RX watchdog interrupt as broken (Maxime Chevallier)
  - marvell: pxa168_eth: fix call balance of pep->clk handling routines (Vitalii Mordan)
  - net: mdio-ipq4019: add missing error check (Rosen Penev)
  - net: usb: lan78xx: Fix refcounting and autosuspend on invalid WoL configuration (Oleksij Rempel)
  - tg3: Set coherent DMA mask bits to 31 for BCM57766 chipsets (Pavan Chebbi)
  - net: usb: lan78xx: Fix memory leak on device unplug by freeing PHY device (Oleksij Rempel)
  - power: supply: bq27xxx: Fix registers of bq27426 (Barnabás Czémán)
  - power: supply: core: Remove might_sleep() from power_supply_put() (Bart Van Assche)
  - fs_parser: update mount_api doc to match function signature (Randy Dunlap)
  - vfio/pci: Properly hide first-in-list PCIe extended capability (Avihai Horon) [Orabug: 37433577] {CVE-2024-53214}
  - selftests/mount_setattr: Fix failures on 64K PAGE_SIZE kernels (Michael Ellerman)
  - vdpa/mlx5: Fix suboptimal range on iotlb iteration (Si-Wei Liu)
  - hwmon: (tps23861) Fix reporting of negative temperatures (Murad Masimov)
  - NFSD: Fix nfsd4_shutdown_copy() (Chuck Lever)
  - svcrdma: fix miss destroy percpu_counter in svc_rdma_proc_init() (Ye Bin) [Orabug: 37433585] {CVE-2024-53215}
  - sunrpc: simplify two-level sysctl registration for svcrdma_parm_table (Luis Chamberlain)
  - NFSD: Cap the number of bytes copied by nfs4_reset_recoverydir() (Chuck Lever)
  - NFSD: Prevent NULL dereference in nfsd4_process_cb_update() (Chuck Lever) [Orabug: 37433593] {CVE-2024-53217}
  - remoteproc: qcom_q6v5_mss: Re-order writes to the IMEM region (Sibi Sankar)
  - rpmsg: glink: use only lower 16-bits of param2 for CMD_OPEN name length (Jonathan Marek)
  - rpmsg: glink: Fix GLINK command prefix (Bjorn Andersson)
  - rpmsg: glink: Send READ_NOTIFY command in FIFO full case (Arun Kumar Neelakantam)
  - rpmsg: glink: Add TX_DATA_CONT command while sending (Arun Kumar Neelakantam)
  - perf trace: Avoid garbage when not printing a syscall's arguments (Benjamin Peterson)
  - perf trace: Do not lose last events in a race (Benjamin Peterson)
  - svcrdma: Address an integer overflow (Chuck Lever) [Orabug: 37427495] {CVE-2024-53151}
  - m68k: coldfire/device.c: only build FEC when HW macros are defined (Antonio Quartulli)
  - m68k: mcfgpio: Fix incorrect register offset for CONFIG_M5441x (Jean-Michel Hautbois)
  - perf trace: avoid garbage when not printing a trace event's arguments (Benjamin Peterson)
  - f2fs: check curseg->inited before write_sum_page in change_curseg (Yongpeng Yang)
  - f2fs: remove the unused flush argument to change_curseg (Christoph Hellwig)
  - f2fs: open code allocate_segment_by_default (Christoph Hellwig)
  - f2fs: remove struct segment_allocation default_salloc_ops (Christoph Hellwig)
  - f2fs: fix the wrong f2fs_bug_on condition in f2fs_do_replace_block (LongPing Wei)
  - PCI: cpqphp: Fix PCIBIOS_* return value confusion (Ilpo Järvinen)
  - PCI: cpqphp: Use PCI_POSSIBLE_ERROR() to check config reads (weiyufeng)
  - perf probe: Correct demangled symbols in C++ program (Leo Yan)
  - perf probe: Fix libdw memory leak (Ian Rogers)
  - PCI: Fix reset_method_store() memory leak (Todd Kjos) [Orabug: 37434474] {CVE-2024-56745}
  - perf cs-etm: Don't flush when packet_queue fills up (James Clark)
  - mailbox: arm_mhuv2: clean up loop in get_irq_chan_comb() (Dan Carpenter)
  - pinctrl: k210: Undef K210_PC_DEFAULT (zhang jiao)
  - clk: clk-axi-clkgen: make sure to enable the AXI bus clock (Nuno Sa)
  - dt-bindings: clock: axi-clkgen: include AXI clk (Nuno Sa)
  - fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem() (Zhen Lei) [Orabug: 37434477] {CVE-2024-56746}
  - fbdev/sh7760fb: Alloc DMA memory from hardware device (Thomas Zimmermann)
  - powerpc/kexec: Fix return of uninitialized variable (Zhang Zekun)
  - powerpc/sstep: make emulate_vsx_load and emulate_vsx_store static (Michal Suchanek)
  - ocfs2: fix uninitialized value in ocfs2_file_read_iter() (Dmitry Antipov) [Orabug: 37427502] {CVE-2024-53155}
  - RDMA/hns: Fix out-of-order issue of requester when setting FENCE (Junxian Huang)
  - scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb() (Zhen Lei) [Orabug: 37434483] {CVE-2024-56747}
  - scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb() (Zhen Lei) [Orabug: 37434488] {CVE-2024-56748}
  - scsi: fusion: Remove unused variable 'rc' (Zeng Heng)
  - scsi: bfa: Fix use-after-free in bfad_im_module_exit() (Ye Bin) [Orabug: 37433629] {CVE-2024-53227}
  - mfd: rt5033: Fix missing regmap_del_irq_chip() (Zhang Changzhong)
  - clk: imx: clk-scu: fix clk enable state save and restore (Dong Aisheng)
  - clk: imx: lpcg-scu: SW workaround for errata (e10858) (Peng Fan)
  - powerpc/pseries: Fix dtl_access_lock to be a rw_semaphore (Michael Ellerman) [Orabug: 37434363] {CVE-2024-56701}
  - powerpc/mm/fault: Fix kfence page fault reporting (Ritesh Harjani (IBM))
  - mtd: rawnand: atmel: Fix possible memory leak (Miquel Raynal)
  - cpufreq: loongson2: Unregister platform_driver on failure (Yuan Can)
  - mfd: intel_soc_pmic_bxtwc: Use IRQ domain for PMIC devices (Andy Shevchenko) [Orabug: 37434428] {CVE-2024-56723}
  - mfd: intel_soc_pmic_bxtwc: Use IRQ domain for TMU device (Andy Shevchenko) [Orabug: 37434433] {CVE-2024-56724}
  - mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device (Andy Shevchenko) [Orabug: 37434329] {CVE-2024-56691}
  - mfd: intel_soc_pmic_bxtwc: Use dev_err_probe() (Andy Shevchenko)
  - mfd: da9052-spi: Change read-mask to write-mask (Marcus Folkesson)
  - mfd: tps65010: Use IRQF_NO_AUTOEN flag in request_irq() to fix race (Jinjie Ruan)
  - pinctrl: zynqmp: drop excess struct member description (Bartosz Golaszewski)
  - trace/trace_event_perf: remove duplicate samples on the first tracepoint event (Levi Yun)
  - bpf: fix recursive lock when verdict program return SK_PASS (Jiayuan Chen) [Orabug: 37434615] {CVE-2024-56694}
  - wireguard: selftests: load nf_conntrack if not present (Hangbin Liu)
  - netpoll: Use rcu_access_pointer() in netpoll_poll_lock (Breno Leitao)
  - Bluetooth: fix use-after-free in device_for_each_child() (Dmitry Antipov) [Orabug: 37433653] {CVE-2024-53237}
  - driver core: Introduce device_find_any_child() helper (Andy Shevchenko)
  - ALSA: 6fire: Release resources at card release (Takashi Iwai) [Orabug: 37433659] {CVE-2024-53239}
  - ALSA: caiaq: Use snd_card_free_when_closed() at disconnection (Takashi Iwai) [Orabug: 37433665] {CVE-2024-56531}
  - ALSA: us122l: Use snd_card_free_when_closed() at disconnection (Takashi Iwai) [Orabug: 37433671] {CVE-2024-56532}
  - ALSA: usx2y: Use snd_card_free_when_closed() at disconnection (Takashi Iwai) [Orabug: 37433679] {CVE-2024-56533}
  - net: rfkill: gpio: Add check for clk_enable() (Mingwei Zheng)
  - drm/amdkfd: Fix wrong usage of INIT_WORK() (Yuan Can)
  - selftests: net: really check for bg process completion (Paolo Abeni)
  - bpf, sockmap: Fix sk_msg_reset_curr (Zijian Zhang)
  - bpf, sockmap: Several fixes to bpf_msg_pop_data (Zijian Zhang)
  - bpf, sockmap: Several fixes to bpf_msg_push_data (Zijian Zhang)
  - selftests/bpf: Add push/pop checking for msg_verify_data in test_sockmap (Zijian Zhang)
  - selftests/bpf: Fix total_bytes in msg_loop_rx in test_sockmap (Zijian Zhang)
  - selftests, bpf: Add one test for sockmap with strparser (Liu Jian)
  - selftests/bpf: Fix SENDPAGE data logic in test_sockmap (Zijian Zhang)
  - selftests/bpf: Add txmsg_pass to pull/push/pop in test_sockmap (Zijian Zhang)
  - netlink: typographical error in nlmsg_type constants definition (Maurice Lambert)
  - netfilter: nf_tables: must hold rcu read lock while iterating object type list (Florian Westphal)
  - netfilter: nf_tables: skip transaction if update object is not implemented (Pablo Neira Ayuso)
  - drm/msm/dpu: cast crtc_clk calculation to u64 in _dpu_core_perf_calc_clk() (Zichen Xie)
  - wifi: wfx: Fix error handling in wfx_core_init() (Yuan Can)
  - drm/etnaviv: hold GPU lock across perfmon sampling (Lucas Stach)
  - drm/etnaviv: fix power register offset on GC300 (Doug Brown)
  - drm/etnaviv: Request pages from DMA32 zone on addressing_limited (Xiaolei Wang)
  - drm/msm/adreno: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)
  - drm/panfrost: Remove unused id_mask from struct panfrost_model (Steven Price)
  - octeontx2-pf: handle otx2_mbox_get_rsp errors in cn10k.c (Dipendra Khadka) [Orabug: 37434443] {CVE-2024-56726}
  - octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c (Dipendra Khadka) [Orabug: 37434449] {CVE-2024-56728}
  - octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_common.c (Dipendra Khadka) [Orabug: 37434293] {CVE-2024-56679}
  - drm: fsl-dcu: enable PIXCLK on LS1021A (Matthias Schiffer)
  - wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan() (Alper Nebi Yasak) [Orabug: 37433694] {CVE-2024-56539}
  - selftests/bpf: Fix txmsg_redir of test_txmsg_pull in test_sockmap (Zijian Zhang)
  - selftests/bpf: Fix msg_verify_data in test_sockmap (Zijian Zhang)
  - drm/bridge: tc358767: Fix link properties discovery (Tomi Valkeinen)
  - netdevsim: copy addresses for both in and out paths (Hangbin Liu)
  - libbpf: fix sym_is_subprog() logic for weak global subprogs (Andrii Nakryiko)
  - bpf: Fix the xdp_adjust_tail sample prog issue (Yuan Chen)
  - libbpf: Fix output .symtab byte-order during linking (Tony Ambardar)
  - drm/bridge: anx7625: Drop EDID cache on bridge power off (Pin-yen Lin)
  - ASoC: dt-bindings: mt6359: Update generic node name and dmic-mode (Macpaul Lin)
  - ASoC: fsl_micfil: fix regmap_write_bits usage (Shengjiu Wang)
  - ASoC: fsl_micfil: use GENMASK to define register bit fields (Sascha Hauer)
  - ASoC: fsl_micfil: do not define SHIFT/MASK for single bits (Sascha Hauer)
  - ASoC: fsl_micfil: Drop unnecessary register read (Sascha Hauer)
  - dt-bindings: vendor-prefixes: Add NeoFidelity, Inc (Igor Prusov)
  - wifi: ath10k: fix invalid VHT parameters in supported_vht_mcs_rate_nss2 (Baochen Qiang)
  - wifi: ath10k: fix invalid VHT parameters in supported_vht_mcs_rate_nss1 (Baochen Qiang)
  - drm/v3d: Address race-condition in MMU flush (Maíra Canal)
  - drm/imx/ipuv3: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)
  - drm/imx/dcss: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)
  - wifi: mwifiex: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)
  - wifi: p54: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)
  - drm/omap: Fix locking in omap_gem_new_dmabuf() (Tomi Valkeinen)
  - drm/omap: Fix possible NULL dereference (Tomi Valkeinen)
  - wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service() (Jeongjun Park) [Orabug: 37427508] {CVE-2024-53156}
  - drm/mm: Mark drm_mm_interval_tree*() functions with __maybe_unused (Andy Shevchenko)
  - platform/x86: panasonic-laptop: Return errno correctly in show callback (Yao Zi)
  - platform/x86: panasonic-laptop: Replace snprintf in show functions with sysfs_emit (Qing Wang)
  - media: atomisp: Add check for rgby_data memory allocation failure (Li Huafei) [Orabug: 37434379] {CVE-2024-56705}
  - media: atomisp: remove #ifdef HAS_NO_HMEM (Mauro Carvalho Chehab)
  - media: venus: provide ctx queue lock for ioctl synchronization (Sergey Senozhatsky)
  - venus: venc: add handling for VIDIOC_ENCODER_CMD (Dikshita Agarwal)
  - media: venus : Addition of support for VIDIOC_TRY_ENCODER_CMD (Dikshita Agarwal)
  - media: venus : Addition of EOS Event support for Encoder (Viswanath Boma)
  - media: venus: vdec: decoded picture buffer handling during reconfig sequence (Mansur Alisha Shaik)
  - media: venus: venc: Use pmruntime autosuspend (Stanimir Varbanov)
  - firmware: arm_scpi: Check the DVFS OPP count returned by the firmware (Luo Qiu) [Orabug: 37427514] {CVE-2024-53157}
  - selftests/resctrl: Protect against array overrun during iMC config parsing (Reinette Chatre)
  - arm64: dts: mediatek: mt8183-kukui-jacuzzi: Add supplies for fixed regulators (Chen-Yu Tsai)
  - arm64: dts: mediatek: mt8183-kukui-jacuzzi: Fix DP bridge supply names (Chen-Yu Tsai)
  - arm64: dts: mt8183: jacuzzi: Move panel under aux-bus (Hsin-Yi Wang)
  - arm64: dts: mt8183: jacuzzi: remove unused ddc-i2c-bus (Hsin-Yi Wang)
  - regmap: irq: Set lockdep class for hierarchical IRQ domains (Andy Shevchenko)
  - spi: zynqmp-gqspi: Undo runtime PM changes at driver exit time​ (Jinjie Ruan)
  - spi: tegra210-quad: Avoid shift-out-of-bounds (Breno Leitao)
  - pmdomain: ti-sci: Add missing of_node_put() for args.np (Zhang Zekun)
  - ARM: dts: cubieboard4: Fix DCDC5 regulator constraints (Andre Przywara)
  - pwm: imx27: Workaround of the pwm output bug when decrease the duty cycle (Clark Wang)
  - arm64: dts: mt8183: Damu: add i2c2's i2c-scl-internal-delay-ns (Daolong Zhu)
  - arm64: dts: mt8183: burnet: add i2c2's i2c-scl-internal-delay-ns (Daolong Zhu)
  - arm64: dts: mt8183: fennel: add i2c2's i2c-scl-internal-delay-ns (Daolong Zhu)
  - cgroup/bpf: only cgroup v2 can be attached by bpf programs (Chen Ridong)
  - Revert "cgroup: Fix memory leak caused by missing cgroup_bpf_offline" (Chen Ridong)
  - arm64: dts: mediatek: mt8173-elm-hana: Add vdd-supply to second source trackpad (Chen-Yu Tsai)
  - arm64: dts: mt8183: kukui: Fix the address of eeprom at i2c4 (Hsin-Te Yuan)
  - arm64: dts: mt8183: krane: Fix the address of eeprom at i2c4 (Hsin-Te Yuan)
  - tpm: fix signed/unsigned bug when checking event logs (Gregory Price)
  - mmc: mmc_spi: drop buggy snprintf() (Bartosz Golaszewski)
  - soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get() (Dan Carpenter) [Orabug: 37427523] {CVE-2024-53158}
  - soc: ti: smartreflex: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)
  - spi: spi-fsl-lpspi: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)
  - spi: spi-fsl-lpspi: downgrade log level for pio mode (Alexander Stein)
  - clocksource/drivers:sp804: Make user selectable (Mark Brown)
  - kcsan, seqlock: Fix incorrect assumption in read_seqbegin() (Marco Elver)
  - kcsan, seqlock: Support seqcount_latch_t (Marco Elver)
  - seqlock/latch: Provide raw_read_seqcount_latch_retry() (Peter Zijlstra)
  - timekeeping: Consolidate fast timekeeper (Thomas Gleixner)
  - time: Fix references to _msecs_to_jiffies() handling of values (Miguel Ojeda)
  - crypto: cavium - Fix an error handling path in cpt_ucode_load_fw() (Christophe JAILLET)
  - crypto: bcm - add error check in the ahash_hmac_init function (Chen Ridong) [Orabug: 37434297] {CVE-2024-56681}
  - crypto: caam - add error check to caam_rsa_set_priv_key_form (Chen Ridong)
  - EDAC/igen6: Avoid segmentation fault on module unload (Orange Kao) [Orabug: 37434389] {CVE-2024-56708}
  - crypto: cavium - Fix the if condition to exit loop after timeout (Everest K.C)
  - crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY (Yi Yang) [Orabug: 37434322] {CVE-2024-56690}
  - EDAC/fsl_ddr: Fix bad bit shift operations (Priyanka Singh)
  - thermal: core: Initialize thermal zones before registering them (Rafael J. Wysocki)
  - crypto: qat - remove faulty arbiter config reset (Ahsan Atta)
  - EDAC/bluefield: Fix potential integer overflow (David Thompson) [Orabug: 37427532] {CVE-2024-53161}
  - firmware: google: Unregister driver_info on failure (Yuan Can)
  - crypto: caam - Fix the pointer passed to caam_qi_shutdown() (Christophe JAILLET) [Orabug: 37434504] {CVE-2024-56754}
  - hfsplus: don't query the device logical block size multiple times (Thadeu Lima de Souza Cascardo) [Orabug: 37433719] {CVE-2024-56548}
  - s390/syscalls: Avoid creation of arch/arch/ directory (Masahiro Yamada)
  - acpi/arm64: Adjust error handling procedure in gtdt_parse_timer_block() (Aleksandr Mishin)
  - arm64: fix .data.rel.ro size assertion when CONFIG_LTO_CLANG (Masahiro Yamada)
  - m68k: mvme147: Reinstate early console (Daniel Palmer)
  - m68k: mvme16x: Add and use "mvme16x.h" (Geert Uytterhoeven)
  - m68k: mvme147: Fix SCSI controller IRQ numbers (Daniel Palmer)
  - nvme-pci: fix freeing of the HMB descriptor table (Christoph Hellwig) [Orabug: 37434509] {CVE-2024-56756}
  - initramfs: avoid filename buffer overrun (David Disseldorp) [Orabug: 37388873] {CVE-2024-53142}
  - mips: asm: fix warning when disabling MIPS_FP_SUPPORT (Jonas Gorski)
  - brd: defer automatic disk creation until module initialization succeeds (Yang Erkun) [Orabug: 37434341] {CVE-2024-56693}
  - brd: remove brd_devices_mutex mutex (Tetsuo Handa)
  - s390/cio: Do not unregister the subchannel based on DNV (Vineeth Vijayan)
  - kselftest/arm64: mte: fix printf type warnings about longs (Andre Przywara)
  - x86/barrier: Do not serialize MSR accesses on AMD (Borislav Petkov (AMD))
  - nvme: fix metadata handling in nvme-passthrough (Puranjay Mohan)
  - cifs: Fix buffer overflow when parsing NFS reparse points (Pali Rohár) [Orabug: 37206283] {CVE-2024-49996}
  - rcu-tasks: Idle tasks on offline CPUs are in quiescent states (Paul E. McKenney)
  - ipmr: Fix access to mfc_cache_list without lock held (Breno Leitao)
  - ARM: 9420/1: smp: Fix SMP for xip kernels (Harith G)
  - ALSA: usb-audio: Fix Yamaha P-125 Quirk Entry (Eryk Zagorski)
  - proc/softirqs: replace seq_printf with seq_put_decimal_ull_width (David Wang)
  - ASoC: stm: Prevent potential division by zero in stm32_sai_get_clk_div() (Luo Yifan)
  - ASoC: stm: Prevent potential division by zero in stm32_sai_mclk_round_rate() (Luo Yifan)
  - can: j1939: fix error in J1939 documentation. (Alexander Hölzl)
  - platform/x86: dell-wmi-base: Handle META key Lock/Unlock events (Kurt Borja)
  - platform/x86: dell-smbios-base: Extends support to Alienware products (Kurt Borja)
  - regulator: rk808: Add apply_bit for BUCK3 on RK809 (Mikhail Rudenko)
  - soc: qcom: Add check devm_kasprintf() returned value (Charles Han)
  - net: usb: qmi_wwan: add Quectel RG650V (Benoît Monin)
  - x86/amd_nb: Fix compile-testing without CONFIG_AMD_NB (Arnd Bergmann)
  - ALSA: hda/realtek: Add subwoofer quirk for Infinix ZERO BOOK 13 (Piyush Raj Chouhan)
  - selftests/watchdog-test: Fix system accidentally reset after watchdog-test (Li Zhijian)
  - usb: add support for new USB device ID 0x17EF:0x3098 for the r8152 driver (Benjamin Große)
  - mac80211: fix user-power when emulating chanctx (Ben Greear)
  - wifi: iwlwifi: mvm: Use the sync timepoint API in suspend (Daniel Gabay)
  - ASoC: Intel: sst: Support LPE0F28 ACPI HID (Hans de Goede)
  - ASoC: Intel: bytcr_rt5640: Add DMI quirk for Vexia Edu Atla 10 tablet (Hans de Goede)
  - ASoC: Intel: bytcr_rt5640: Add support for non ACPI instantiated codec (Hans de Goede)
  - NFS: nfs_async_write_reschedule_io must not recurse into the writeback code (Trond Myklebust)
  - mm: resolve faulty mmap_region() error path behaviour (Lorenzo Stoakes) [Orabug: 37331872] {CVE-2024-53096}
  - mm: refactor arch_calc_vm_flag_bits() and arm64 MTE handling (Lorenzo Stoakes)
  - mm: unconditionally close VMAs on error (Lorenzo Stoakes)
  - mm: avoid unsafe VMA hook invocation when error arises on mmap hook (Lorenzo Stoakes)
  - mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Paolo Abeni) [Orabug: 37388789] {CVE-2024-53122}
  - NFSD: Never decrement pending_async_copies on error (Chuck Lever) [Orabug: 37522552] {CVE-2024-53073}
  - NFSD: Initialize struct nfsd4_copy earlier (Chuck Lever) [Orabug: 37522573] {CVE-2024-50241}
  - NFSD: Limit the number of concurrent async COPY operations (Chuck Lever) [Orabug: 37206186] {CVE-2024-49974}
  - NFSD: Async COPY result needs to return a write verifier (Chuck Lever)
  - NFSD: initialize copy->cp_clp early in nfsd4_copy for use by trace point (Dai Ngo)
  - media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set (Mauro Carvalho Chehab)
  - mmc: sunxi-mmc: Fix A100 compatible description (Andre Przywara)
  - mmc: sunxi-mmc: Add D1 MMC variant (Samuel Holland)
  - drm/bridge: tc358768: Fix DSI command tx (Francesco Dolcini)
  - nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint (Ryusuke Konishi) [Orabug: 37388818] {CVE-2024-53130}
  - ocfs2: fix UBSAN warning in ocfs2_verify_volume() (Dmitry Antipov)
  - nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint (Ryusuke Konishi) [Orabug: 37388824] {CVE-2024-53131}
  - KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN (Sean Christopherson) [Orabug: 37388845] {CVE-2024-53135}
  - KVM: nVMX: Treat vpid01 as current if L2 is active, but with VPID disabled (Sean Christopherson)
  - vdpa/mlx5: Fix PA offset with unaligned starting iotlb map (Si-Wei Liu)
  - ocfs2: uncache inode which has failed entering the group (Dmitry Antipov) [Orabug: 37388752] {CVE-2024-53112}
  - mm: fix NULL pointer dereference in alloc_pages_bulk_noprof (Jinjiang Tu) [Orabug: 37388759] {CVE-2024-53113}
  - x86/mm: Fix a kdump kernel failure on SME system when CONFIG_IMA_KEXEC=y (Baoquan He)
  - ARM: 9419/1: mm: Fix kernel memory mapping for xip kernels (Harith G)
  - samples: pktgen: correct dev to DEV (Wei Fang)
  - net/mlx5e: CT: Fix null-ptr-deref in add rule err flow (Moshe Shemesh) [Orabug: 37388780] {CVE-2024-53120}
  - net/mlx5e: kTLS, Fix incorrect page refcounting (Dragos Tatulea)
  - net/mlx5: fs, lock FTE when checking if active (Mark Bloch)
  - drm/rockchip: vop: Fix a dereferenced before check warning (Andy Yan) [Orabug: 37388814] {CVE-2024-53129}
  - netlink: terminate outstanding dump on socket close (Jakub Kicinski) [Orabug: 37388860] {CVE-2024-53140}
  - clk: qcom: gcc-qcs404: fix initial rate of GPLL3 (Gabor Juhos)
  - leds: lp55xx: Remove redundant test for invalid channel number (Michal Vokáč)
  - iommu/io-pgtable-arm: Fix stage-2 map/unmap for concatenated tables (Mostafa Saleh)
  - vmstat: call fold_vm_zone_numa_events() before show per zone NUMA event (MengEn Sun)
  - ftrace: Fix regression with module command in stack_trace_filter (guoweikang) [Orabug: 37433783] {CVE-2024-56569}
  - ovl: Filter invalid inodes with missing lookup function (Vasiliy Kovalev) [Orabug: 37433788] {CVE-2024-56570}
  - media: uvcvideo: Require entities to have a non-zero unique ID (Thadeu Lima de Souza Cascardo) [Orabug: 37433794] {CVE-2024-56571}
  - media: uvcvideo: Stop stream during unregister (Ricardo Ribalda)
  - media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal() (Gaosheng Cui) [Orabug: 37433797] {CVE-2024-56572}
  - media: gspca: ov534-ov772x: Fix off-by-one error in set_frame_rate() (Jinjie Ruan)
  - media: venus: Fix pm_runtime_set_suspended() with runtime pm enabled (Jinjie Ruan)
  - media: ts2020: fix null-ptr-deref in ts2020_probe() (Li Zetao) [Orabug: 37433804] {CVE-2024-56574}
  - media: imx-jpeg: Ensure power suppliers be suspended before detach them (Ming Qian) [Orabug: 37433810] {CVE-2024-56575}
  - media: i2c: tc358743: Fix crash in the probe error path when using polling (Alexander Shiyan) [Orabug: 37433816] {CVE-2024-56576}
  - media: imx-jpeg: Set video drvdata before register video device (Ming Qian) [Orabug: 37433823] {CVE-2024-56578}
  - arm64: dts: allwinner: pinephone: Add mount matrix to accelerometer (Dragan Simic)
  - LTS version: v5.15.173 (Vijayendra Suman)
  - 9p: fix slab cache name creation for real (Linus Torvalds)
  - udf: Avoid directory type conversion failure due to ENOMEM (Jan Kara)
  - udf: Allocate name buffer in directory iterator on heap (Jan Kara)
  - mm/memory: add non-anonymous page check in the copy_present_page() (Yuanzheng Song)
  - io_uring: fix possible deadlock in io_register_iowq_max_workers() (Hagar Hemdan) [Orabug: 36897353] {CVE-2024-41080}
  - md/raid10: improve code of mrdev in raid10_sync_request (Li Nan)
  - net: usb: qmi_wwan: add Fibocom FG132 0x0112 composition (Reinhard Speyerer)
  - HID: lenovo: Add support for Thinkpad X1 Tablet Gen 3 keyboard (Hans de Goede)
  - HID: multitouch: Add quirk for Logitech Bolt receiver w/ Casa touchpad (Kenneth Albanowski)
  - fs: Fix uninitialized value issue in from_kuid and from_kgid (Alessandro Zanni) [Orabug: 37331927] {CVE-2024-53101}
  - vDPA/ifcvf: Fix pci_read_config_byte() return code handling (Yuan Can)
  - powerpc/powernv: Free name on error in opal_event_init() (Michael Ellerman)
  - drm/vmwgfx: Limit display layout ioctl array size to VMWGFX_NUM_DISPLAY_UNITS (Ian Forbes)
  - sound: Make CONFIG_SND depend on INDIRECT_IOMEM instead of UML (Julian Vetter)
  - crypto: marvell/cesa - Disable hash algorithms (Herbert Xu)
  - bpf: use kvzmalloc to allocate BPF verifier environment (Rik van Riel)
  - HID: multitouch: Add quirk for HONOR MagicBook Art 14 touchpad (WangYuli)
  - HID: multitouch: Add support for B2402FVA track point (Stefan Blum)
  - block: Fix elevator_get_default() checking for NULL q->tag_set (SurajSonawane2415)
  - irqchip/ocelot: Fix trigger register address (Sergey Matsievskiy)
  - 9p: Avoid creating multiple slab caches with the same name (Pedro Falcato)
  - LTS version: v5.15.172 (Vijayendra Suman)
  - ALSA: usb-audio: Add endianness annotations (Jan Schär)
  - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Hyunwoo Kim) [Orabug: 37298679] {CVE-2024-50264}
  - hv_sock: Initializing vsk->trans to NULL to prevent a dangling pointer (Hyunwoo Kim) [Orabug: 37344479] {CVE-2024-53103}
  - ALSA: usb-audio: Add quirks for Dell WD19 dock (Jan Schär)
  - ALSA: usb-audio: Support jack detection on Dell dock (Jan Schär)
  - ucounts: fix counter leak in inc_rlimit_get_ucounts() (Andrei Vagin)
  - ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove() (Andrew Kanner) [Orabug: 37298684] {CVE-2024-50265}
  - irqchip/gic-v3: Force propagation of the active state with a read-back (Marc Zyngier)
  - USB: serial: option: add Quectel RG650V (Benoît Monin)
  - USB: serial: option: add Fibocom FG132 0x0112 composition (Reinhard Speyerer)
  - USB: serial: qcserial: add support for Sierra Wireless EM86xx (Jack Wu)
  - USB: serial: io_edgeport: fix use after free in debug printk (Dan Carpenter) [Orabug: 37298693] {CVE-2024-50267}
  - usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd() (Dan Carpenter) [Orabug: 37298700] {CVE-2024-50268}
  - usb: musb: sunxi: Fix accessing an released usb phy (Zijun Hu) [Orabug: 37298702] {CVE-2024-50269}
  - fs/proc: fix compile warning about variable 'vmcore_mmap_ops' (Qi Xi)
  - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Benoit Sevens) [Orabug: 37344484] {CVE-2024-53104}
  - net: do not delay dst_entries_add() in dst_release() (Eric Dumazet) [Orabug: 37206439] {CVE-2024-50036}
  - net: bridge: xmit: make sure we have at least eth header len bytes (Nikolay Aleksandrov) [Orabug: 36753371] {CVE-2024-38538}
  - btrfs: reinitialize delayed ref list after deleting it from the list (Filipe Manana) [Orabug: 37298714] {CVE-2024-50273}
  - nfs: Fix KMSAN warning in decode_getfattr_attrs() (Roberto Sassu) [Orabug: 37304778] {CVE-2024-53066}
  - io_uring/rw: fix missing NOWAIT check for O_DIRECT start write (Jens Axboe) [Orabug: 37304720] {CVE-2024-53052}
  - io_uring: use kiocb_{start,end}_write() helpers (Amir Goldstein)
  - fs: create kiocb_{start,end}_write() helpers (Amir Goldstein)
  - io_uring: rename kiocb_end_write() local helper (Amir Goldstein)
  - posix-cpu-timers: Clear TICK_DEP_BIT_POSIX_TIMER on clone (Benjamin Segall)
  - ALSA: usb-audio: Add quirk for HP 320 FHD Webcam (Takashi Iwai)
  - dm-unstriped: cast an operand to sector_t to prevent potential uint32_t overflow (Zichen Xie)
  - dm cache: fix potential out-of-bounds access on the first resume (Ming-Hung Tsai) [Orabug: 37298731] {CVE-2024-50278}
  - dm cache: optimize dirty bit checking with find_next_bit when resizing (Ming-Hung Tsai)
  - dm cache: fix out-of-bounds access to the dirty bitset when resizing (Ming-Hung Tsai) [Orabug: 37298736] {CVE-2024-50279}
  - dm cache: correct the number of origin blocks to match the target length (Ming-Hung Tsai)
  - thermal/drivers/qcom/lmh: Remove false lockdep backtrace (Dmitry Baryshkov)
  - drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read() (Alex Deucher) [Orabug: 37298750] {CVE-2024-50282}
  - drm/amdgpu: Adjust debugfs eviction and IB access permissions (Alex Deucher)
  - pwm: imx-tpm: Use correct MODULO value for EPWM mode (Erik Schumacher)
  - media: v4l2-ctrls-api: fix error handling for v4l2_g_ctrl() (Mauro Carvalho Chehab)
  - media: v4l2-tpg: prevent the risk of a division by zero (Mauro Carvalho Chehab) [Orabug: 37298781] {CVE-2024-50287}
  - media: pulse8-cec: fix data timestamp at pulse8_setup() (Mauro Carvalho Chehab)
  - media: cx24116: prevent overflows on SNR calculus (Mauro Carvalho Chehab) [Orabug: 37298796] {CVE-2024-50290}
  - media: s5p-jpeg: prevent buffer overflows (Mauro Carvalho Chehab) [Orabug: 37304761] {CVE-2024-53061}
  - ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove (Amelie Delaunay) [Orabug: 37298803] {CVE-2024-50292}
  - ALSA: firewire-lib: fix return value on fail in amdtp_tscm_init() (Murad Masimov)
  - scsi: sd_zbc: Use kvzalloc() to allocate REPORT ZONES buffer (Johannes Thumshirn)
  - media: adv7604: prevent underflow condition when reporting colorspace (Mauro Carvalho Chehab)
  - media: dvb_frontend: don't play tricks with underflow values (Mauro Carvalho Chehab)
  - media: dvbdev: prevent the risk of out of memory access (Mauro Carvalho Chehab) [Orabug: 37304768] {CVE-2024-53063}
  - media: stb0899_algo: initialize cfr before using it (Mauro Carvalho Chehab)
  - net: arc: fix the device for dma_map_single/dma_unmap_single (Johan Jonker) [Orabug: 37298808] {CVE-2024-50295}
  - net: stmmac: Fix unbalanced IRQ wake disable warning on single irq case (Nícolas F. R. A. Prado)
  - net: phy: ti: add PHY_RST_AFTER_CLK_EN flag (Diogo Silva)
  - net: hns3: fix kernel crash when uninstalling driver (Peiyang Wang) [Orabug: 37298810] {CVE-2024-50296}
  - i40e: fix race condition by adding filter's intermediate sync state (Aleksandr Loktionov) [Orabug: 37304818] {CVE-2024-53088}
  - can: c_can: fix {rx,tx}_errors statistics (Dario Binacchi)
  - sctp: properly validate chunk size in sctp_sf_ootb() (Xin Long) [Orabug: 37298819] {CVE-2024-50299}
  - net: enetc: set MAC address to the VF net_device (Wei Fang)
  - security/keys: fix slab-out-of-bounds in key_task_permission (Chen Ridong) [Orabug: 37298826] {CVE-2024-50301}
  - nfs: avoid i_lock contention in nfs_clear_invalid_mapping (Mike Snitzer)
  - NFSv3: handle out-of-order write replies. (NeilBrown)
  - NFS: Add a tracepoint to show the results of nfs_set_cache_invalid() (Benjamin Coddington)
  - NFSv3: only use NFS timeout for MOUNT when protocols are compatible (NeilBrown)
  - HID: core: zero-initialize the report buffer (Jiri Kosina) [Orabug: 37298832] {CVE-2024-50302}
  - ARM: dts: rockchip: Fix the realtek audio codec on rk3036-kylin (Heiko Stuebner)
  - ARM: dts: rockchip: Fix the spi controller on rk3036 (Heiko Stuebner)
  - ARM: dts: rockchip: drop grf reference from rk3036 hdmi (Heiko Stuebner)
  - ARM: dts: rockchip: fix rk3036 acodec node (Heiko Stuebner)
  - arm64: dts: imx8mp: correct sdhc ipg clk (Peng Fan)
  - arm64: dts: rockchip: Fix LED triggers on rk3308-roc-cc (Heiko Stuebner)
  - arm64: dts: rockchip: Remove #cooling-cells from fan on Theobroma lion (Heiko Stuebner)
  - arm64: dts: rockchip: Fix bluetooth properties on Rock960 boards (Heiko Stuebner)
  - arm64: dts: rockchip: Remove hdmi's 2nd interrupt on rk3328 (Diederik de Haas)
  - arm64: dts: rockchip: Fix rt5651 compatible value on rk3399-sapphire-excavator (Geert Uytterhoeven)


author: Brian Maly <brian.maly@oracle.com> [5.15.0-305.176.4.el9uek]
changelog:
  - x86/asm: Make serialize() always_inline (Juergen Gross)
  - hwmon: (tmp513) Fix division of negative numbers (David Lechner)
  - Revert "mtd: spi-nor: core: replace dummy buswidth from addr to data" (Pratyush Yadav)
  - Revert "regmap: detach regmap from dev on regmap_exit" (Greg Kroah-Hartman)
  - Revert "drm/amdgpu: rework resume handling for display (v2)" (Greg Kroah-Hartman)
  - Revert "PCI: Use preserve_config in place of pci_flags" (Terry Tritton)
  - virtio-net: synchronize probe with ndo_set_features (Jason Wang)  [Orabug: 36637822]
  - virtio-net: synchronize operstate with admin state on up/down (Jason Wang)  [Orabug: 36637822]
  - virtio: allow driver to disable the configure change notification (Jason Wang)  [Orabug: 36637822]
  - virtio: rename virtio_config_enabled to virtio_config_core_enabled (Jason Wang)  [Orabug: 36637822]
  - mlxsw: pci: Fix driver initialization with Spectrum-4 (Ido Schimmel)  [Orabug: 36811057]
  - mlxsw: pci: Fix driver initialization with old firmware (Ido Schimmel)  [Orabug: 36811057]
  - mmc: sdhci-of-dwcmshc: th1520: Increase tuning loop count to 128 (Maksim Kiselev)  [Orabug: 36811057]
  - net/mlx5e: Switch to using _bh variant of of spinlock API in port timestamping NAPI poll context (Rahul Rameshbabu)  [Orabug: 36811057]
  - net/mlx5e: Fix MACsec state loss upon state update in offload path (Emeel Hakim)  [Orabug: 36811057]
  - net/mlx5e: Change the warning when ignore_flow_level is not supported (Jianbo Liu)  [Orabug: 36811057]
  - Revert "net/mlx5: Block entering switchdev mode with ns inconsistency" (Gavin Li)  [Orabug: 36811057]
  - IB/mlx5: Don't expose debugfs entries for RRoCE general parameters if not supported (Mark Zhang)  [Orabug: 36811057]
  - net/mlx5e: Ignore IPsec replay window values on sender side (Leon Romanovsky)  [Orabug: 36811057]
  - net/mlx5e: Allow software parsing when IPsec crypto is enabled (Leon Romanovsky)  [Orabug: 36811057]
  - net/mlx5: Use mlx5 device constant for selecting CQ period mode for ASO (Rahul Rameshbabu)  [Orabug: 36811057]
  - net/mlx5: Bridge, fix multicast packets sent to uplink (Moshe Shemesh)  [Orabug: 36811057]
  - net/mlx5: Fix a WARN upon a callback command failure (Yishai Hadas)  [Orabug: 36811057]
  - net/mlx5e: Fix peer flow lists handling (Vlad Buslov)  [Orabug: 36811057]
  - net/mlx5: Fix query of sd_group field (Tariq Toukan)  [Orabug: 36811057]
  - net/mlx5e: Use the correct lag ports number when creating TISes (Saeed Mahameed)  [Orabug: 36811057]
  - selftests: mlxsw: qos_pfc: Remove wrong description (Amit Cohen)  [Orabug: 36811057]
  - mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path (Ido Schimmel)  [Orabug: 36811057] {CVE-2024-26595}
  - gpio: mlxbf3: add an error code check in mlxbf3_gpio_probe (Su Hui)  [Orabug: 36811057]
  - vdpa/mlx5: Add mkey leak detection (Dragos Tatulea)  [Orabug: 36811057]
  - vdpa/mlx5: Introduce reference counting to mrs (Dragos Tatulea)  [Orabug: 36811057]
  - vdpa/mlx5: Use vq suspend/resume during .set_map (Dragos Tatulea)  [Orabug: 36811057]
  - vdpa/mlx5: Mark vq state for modification in hw vq (Dragos Tatulea)  [Orabug: 36811057]
  - vdpa/mlx5: Mark vq addrs for modification in hw vq (Dragos Tatulea)  [Orabug: 36811057]
  - vdpa/mlx5: Introduce per vq and device resume (Dragos Tatulea)  [Orabug: 36811057]
  - vdpa/mlx5: Allow modifying multiple vq fields in one modify command (Dragos Tatulea)  [Orabug: 36811057]
  - vdpa/mlx5: Expose resumable vq capability (Dragos Tatulea)  [Orabug: 36811057]
  - Revert "mlx5 updates 2023-12-20" (Jakub Kicinski)  [Orabug: 36811057]
  - net/mlx5: DPLL, Implement fractional frequency offset get pin op (Jiri Pirko)  [Orabug: 36811057]
  - net/mlx5: DPLL, Use struct to get values from mlx5_dpll_synce_status_get() (Jiri Pirko)  [Orabug: 36811057]
  - net: macsec: move sci_to_cpu to macsec header (Radu Pirea (NXP OSS))  [Orabug: 36811057]
  - net/mlx5: Implement management PF Ethernet profile (Armen Ratner)  [Orabug: 36811057]
  - net/mlx5: Enable SD feature (Tariq Toukan)  [Orabug: 36811057]
  - net/mlx5e: Block TLS device offload on combined SD netdev (Tariq Toukan)  [Orabug: 36811057]
  - net/mlx5e: Support per-mdev queue counter (Tariq Toukan)  [Orabug: 36811057]
  - net/mlx5e: Support cross-vhca RSS (Tariq Toukan)  [Orabug: 36811057]
  - net/mlx5e: Let channels be SD-aware (Tariq Toukan)  [Orabug: 36811057]
  - net/mlx5e: Create EN core HW resources for all secondary devices (Tariq Toukan)  [Orabug: 36811057]
  - net/mlx5e: Create single netdev per SD group (Tariq Toukan)  [Orabug: 36811057]
  - net/mlx5: SD, Add informative prints in kernel log (Tariq Toukan)  [Orabug: 36811057]
  - net/mlx5: SD, Implement steering for primary and secondaries (Tariq Toukan)  [Orabug: 36811057]
  - net/mlx5: SD, Implement devcom communication and primary election (Tariq Toukan)  [Orabug: 36811057]
  - net/mlx5: SD, Implement basic query and instantiation (Tariq Toukan)  [Orabug: 36811057]
  - net/mlx5: SD, Introduce SD lib (Tariq Toukan)  [Orabug: 36811057]
  - net/mlx5: Fix query of sd_group field (Tariq Toukan)  [Orabug: 36811057]
  - net/mlx5e: Use the correct lag ports number when creating TISes (Saeed Mahameed)  [Orabug: 36811057]
  - mlxsw: spectrum_fid: Set NVE flood profile as part of FID configuration (Petr Machata)  [Orabug: 36811057]
  - mlxsw: spectrum_fid: Add an "any" packet type (Petr Machata)  [Orabug: 36811057]
  - mlxsw: reg: Add nve_flood_prf_id field to SFMR (Petr Machata)  [Orabug: 36811057]
  - net/mlx5: DR, Use swap() instead of open coding it (Jiapeng Chong)  [Orabug: 36811057]
  - net/mlx5: devcom, Add component size getter (Tariq Toukan)  [Orabug: 36811057]
  - net/mlx5e: Decouple CQ from priv (Tariq Toukan)  [Orabug: 36811057]
  - net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args (Tariq Toukan)  [Orabug: 36811057]
  - net/mlx5e: Statify function mlx5e_monitor_counter_arm (Tariq Toukan)  [Orabug: 36811057]
  - net/mlx5: Move TISes from priv to mdev HW resources (Tariq Toukan)  [Orabug: 36811057]
  - net/mlx5e: Remove TLS-specific logic in generic create TIS API (Tariq Toukan)  [Orabug: 36811057]
  - net/mlx5: fs, Command to control TX flow table root (Tariq Toukan)  [Orabug: 36811057]
  - net/mlx5: fs, Command to control L2TABLE entry silent mode (Tariq Toukan)  [Orabug: 36811057]
  - net/mlx5: Expose Management PCIe Index Register (MPIR) (Tariq Toukan)  [Orabug: 36811057]
  - net/mlx5: Add mlx5_ifc bits used for supporting single netdev Socket-Direct (Tariq Toukan)  [Orabug: 36811057]
  - net/mlx5: Manage ICM type of SW encap (Shun Hao)  [Orabug: 36811057]
  - RDMA/mlx5: Support handling of SW encap ICM area (Shun Hao)  [Orabug: 36811057]
  - net/mlx5: Introduce indirect-sw-encap ICM properties (Shun Hao)  [Orabug: 36811057]
  - mmc: sdhci-of-dwcmshc: Use logical OR instead of bitwise OR in dwcmshc_probe() (Nathan Chancellor)  [Orabug: 36811057]
  - mmc: sdhci-of-dwcmshc: Add support for T-Head TH1520 (Drew Fustini)  [Orabug: 36811057]
  - mmc: sdhci: add __sdhci_execute_tuning() to header (Drew Fustini)  [Orabug: 36811057]
  - mlxsw: spectrum: Use CFF mode where available (Petr Machata)  [Orabug: 36811057]
  - mlxsw: spectrum_fid: Add support for rFID family in CFF flood mode (Petr Machata)  [Orabug: 36811057]
  - mlxsw: spectrum_fid: Add a family for bridge FIDs in CFF flood mode (Petr Machata)  [Orabug: 36811057]
  - mlxsw: spectrum_fid: Initialize flood profiles in CFF mode (Petr Machata)  [Orabug: 36811057]
  - mlxsw: spectrum_fid: Add profile_id to flood profile (Petr Machata)  [Orabug: 36811057]
  - mlxsw: spectrum_fid: Add an object to keep flood profiles (Petr Machata)  [Orabug: 36811057]
  - mlxsw: spectrum_fid: Add hooks for RSP table maintenance (Petr Machata)  [Orabug: 36811057]
  - mlxsw: spectrum_fid: Add a not-UC packet type (Petr Machata)  [Orabug: 36811057]
  - mlxsw: spectrum_fid: Add an op for packing SFMR (Petr Machata)  [Orabug: 36811057]
  - mlxsw: spectrum_fid: Add an op to get PGT address of a FID (Petr Machata)  [Orabug: 36811057]
  - mlxsw: spectrum_fid: Add an op to get PGT allocation size (Petr Machata)  [Orabug: 36811057]
  - mlxsw: spectrum_fid: Add an op for flood table initialization (Petr Machata)  [Orabug: 36811057]
  - mlxsw: spectrum_fid: Move mlxsw_sp_fid_flood_table_init() up (Petr Machata)  [Orabug: 36811057]
  - mlxsw: spectrum_fid: Make mlxsw_sp_fid_ops.setup return an int (Petr Machata)  [Orabug: 36811057]
  - mlxsw: spectrum_fid: Split a helper out of mlxsw_sp_fid_flood_table_mid() (Petr Machata)  [Orabug: 36811057]
  - mlxsw: spectrum_fid: Rename FID ops, families, arrays (Petr Machata)  [Orabug: 36811057]
  - mlxsw: spectrum_fid: Privatize FID families (Petr Machata)  [Orabug: 36811057]
  - mlxsw: pci: Fix missing error checking (Ido Schimmel)  [Orabug: 36811057]
  - mlxsw: spectrum_router: Call RIF setup before obtaining FID (Petr Machata)  [Orabug: 36811057]
  - mlxsw: spectrum_router: Add a helper to get subport number from a RIF (Petr Machata)  [Orabug: 36811057]
  - mlxsw: spectrum_fid: Extract SFMR packing into a helper (Petr Machata)  [Orabug: 36811057]
  - mlxsw: spectrum_fid: Drop unnecessary conditions (Petr Machata)  [Orabug: 36811057]
  - mlxsw: pci: Permit enabling CFF mode (Petr Machata)  [Orabug: 36811057]
  - mlxsw: core, pci: Add plumbing related to CFF mode (Petr Machata)  [Orabug: 36811057]
  - mlxsw: reg: Add to SFMR register the fields related to CFF flood mode (Petr Machata)  [Orabug: 36811057]
  - mlxsw: reg: Extract flood-mode specific part of mlxsw_reg_sfmr_pack() (Petr Machata)  [Orabug: 36811057]
  - mlxsw: reg: Drop unnecessary writes from mlxsw_reg_sfmr_pack() (Petr Machata)  [Orabug: 36811057]
  - mlxsw: reg: Mark SFGC & some SFMR fields as reserved in CFF mode (Petr Machata)  [Orabug: 36811057]
  - mlxsw: reg: Add Switch FID Flooding Profiles Register (Petr Machata)  [Orabug: 36811057]
  - mlxsw: resources: Add max_cap_nve_flood_prf (Petr Machata)  [Orabug: 36811057]
  - mlxsw: cmd: Add MLXSW_CMD_MBOX_CONFIG_PROFILE_FLOOD_MODE_CFF (Petr Machata)  [Orabug: 36811057]
  - mlxsw: cmd: Add cmd_mbox.query_fw.cff_support (Petr Machata)  [Orabug: 36811057]
  - EDAC/bluefield: Convert to platform remove callback returning void (Uwe Kleine-König)  [Orabug: 36811057]
  - selftests: mlxsw: Add PCI reset test (Ido Schimmel)  [Orabug: 36811057]
  - mlxsw: pci: Implement PCI reset handlers (Ido Schimmel)  [Orabug: 36811057]
  - mlxsw: pci: Add support for new reset flow (Ido Schimmel)  [Orabug: 36811057]
  - mlxsw: pci: Move software reset code to a separate function (Amit Cohen)  [Orabug: 36811057]
  - mlxsw: pci: Rename mlxsw_pci_sw_reset() (Amit Cohen)  [Orabug: 36811057]
  - mlxsw: Extend MRSR pack() function to support new commands (Amit Cohen)  [Orabug: 36811057]
  - net/mlx5e: Remove early assignment to netdev->features (Tariq Toukan)  [Orabug: 36811057]
  - net/mlx5e: Add local loopback counter to vport rep stats (Or Har-Toov)  [Orabug: 36811057]
  - net/mlx5: Query maximum frequency adjustment of the PTP hardware clock (Rahul Rameshbabu)  [Orabug: 36811057]
  - net/mlx5: Convert scaled ppm values outside the s32 range for PHC frequency adjustments (Rahul Rameshbabu)  [Orabug: 36811057]
  - net/mlx5: Initialize clock->ptp_info inside mlx5_init_timer_clock (Rahul Rameshbabu)  [Orabug: 36811057]
  - net/mlx5: Refactor real time clock operation checks for PHC (Rahul Rameshbabu)  [Orabug: 36811057]
  - net/mlx5e: Access array with enum values instead of magic numbers (Gal Pressman)  [Orabug: 36811057]
  - net/mlx5: simplify mlx5_set_driver_version string assignments (Justin Stitt)  [Orabug: 36811057]
  - net/mlx5: Annotate struct mlx5_flow_handle with __counted_by (Kees Cook)  [Orabug: 36811057]
  - net/mlx5: Annotate struct mlx5_fc_bulk with __counted_by (Kees Cook)  [Orabug: 36811057]
  - net/mlx5e: Some cleanup in mlx5e_tc_stats_matchall() (Amir Tzin)  [Orabug: 36811057]
  - net/mlx5: Allow sync reset flow when BF MGT interface device is present (Moshe Shemesh)  [Orabug: 36811057]
  - net/mlx5: print change on SW reset semaphore returns busy (Moshe Shemesh)  [Orabug: 36811057]
  - vdpa/mlx5: clean up indenting in handle_ctrl_vlan() (Dan Carpenter)  [Orabug: 36811057]
  - vdpa/mlx5: fix error code for deleting vlan (Dan Carpenter)  [Orabug: 36811057]
  - vdpa/mlx5: Fix syntax errors in comments (Xiang wangx)  [Orabug: 36811057]
  - macsec: Fix use-after-free while sending the offloading packet (Jianbo Liu)  [Orabug: 37268700]  {CVE-2024-50261}
  - xfrm: Export symbol xfrm_dev_state_delete. (Steffen Klassert)  [Orabug: 37357287]
  - xfrm: Fix unregister netdevice hang on hardware offload. (Steffen Klassert)  [Orabug: 37357287]
  - xfrm: fix a data-race in xfrm_lookup_with_ifid() (Eric Dumazet)  [Orabug: 37357287]
  - xfrm: generalize xdo_dev_state_update_curlft to allow statistics update (Leon Romanovsky)  [Orabug: 37357287]
  - xfrm: copy_to_user_state fetch offloaded SA packets/bytes statistics (Raed Salem)  [Orabug: 37357287]
  - xfrm: annotate data-race around use_time (Eric Dumazet)  [Orabug: 37357287]
  - xfrm: consistently use time64_t in xfrm_timer_handler() (Eric Dumazet)  [Orabug: 37357287]
  - cpufreq: intel_pstate: Update Balance-performance EPP for Granite Rapids (Srinivas Pandruvada)  [Orabug: 37383554]
  - cpufreq: intel_pstate: Update Balance performance EPP for Emerald Rapids (Pedro Henrique Kopper)  [Orabug: 37383554]
  - cpufreq: intel_pstate: Use Meteor Lake EPPs for Arrow Lake (Srinivas Pandruvada)  [Orabug: 37383554]
  - cpufreq: intel_pstate: Update Meteor Lake EPPs (Srinivas Pandruvada)  [Orabug: 37383554]
  - cpufreq: intel_pstate: Switch to new Intel CPU model defines (Tony Luck)  [Orabug: 37383554]
  - cpufreq: Switch to new Intel CPU model defines (Tony Luck)  [Orabug: 37383554]
  - x86/cpu/vfm: Update arch/x86/include/asm/intel-family.h (Tony Luck)  [Orabug: 37383554]
  - x86/cpu: Add model number for another Intel Arrow Lake mobile processor (Tony Luck)  [Orabug: 37383554]
  - cpufreq: intel_pstate: Update default EPPs for Meteor Lake (Srinivas Pandruvada)  [Orabug: 37383554]
  - cpufreq: intel_pstate: Allow model specific EPPs (Srinivas Pandruvada)  [Orabug: 37383554]
  - x86/cpu: Add model number for Intel Clearwater Forest processor (Tony Luck)  [Orabug: 37383554]
  - cpufreq: intel_pstate: Update hybrid scaling factor for Meteor Lake (Srinivas Pandruvada)  [Orabug: 37383554]
  - cpufreq: intel_pstate: Prioritize firmware-provided balance performance EPP (Srinivas Pandruvada)  [Orabug: 37383554]
  - x86/cpu: Add model number for Intel Arrow Lake mobile processor (Tony Luck)  [Orabug: 37383554]
  - x86/cpu: Update Hybrids (Peter Zijlstra)  [Orabug: 37383554]
  - cpufreq: intel_pstate: Fix scaling for hybrid-capable systems with disabled E-cores (Srinivas Pandruvada)  [Orabug: 37383554]
  - cpufreq: intel_pstate: Enable HWP IO boost for all servers (Srinivas Pandruvada)  [Orabug: 37383554]
  - cpufreq: intel_pstate: Allow EPP 0x80 setting by the firmware (Srinivas Pandruvada)  [Orabug: 37383554]
  - cpufreq: intel_pstate: Use firmware default EPP (Srinivas Pandruvada)  [Orabug: 37383554]
  - net/mlx5: Add a timeout to acquire the command queue semaphore (Akiva Goldberger)  [Orabug: 37388415] {CVE-2024-38556}
  - PCI: Fix pci_enable_acs() support for the ACS quirks (Jason Gunthorpe)  [Orabug: 37477375]
  - PCI: Clear Secondary Status errors after enumeration (Vidya Sagar)  [Orabug: 37477375]
  - PCI/AER: Configure ECRC only if AER is native (Vidya Sagar)  [Orabug: 37477375]
  - PCI: Extend ACS configurability (Vidya Sagar)  [Orabug: 37477375]
  - NFSv4/pNFS: Do layout state recovery upon reboot (Trond Myklebust)  [Orabug: 37477755]
  - NFSv4/pNFS: Remove redundant call to unhash the layout (Trond Myklebust)  [Orabug: 37477755]
  - NFSv4/pnfs: Give nfs4_proc_layoutreturn() a flags argument (Trond Myklebust)  [Orabug: 37477755]
  - NFSv4/pNFS: Retry the layout return later in case of a timeout or reboot (Trond Myklebust)  [Orabug: 37477755]
  - NFSv4/pNFS: Handle server reboots in pnfs_poc_release() (Trond Myklebust)  [Orabug: 37477755]
  - NFSv4/pNFS: Add a helper to defer failed layoutreturn calls (Trond Myklebust)  [Orabug: 37477755]
  - NFSv4/pnfs: Add support for the PNFS_LAYOUT_FILE_BULK_RETURN flag (Trond Myklebust)  [Orabug: 37477755]
  - pNFS: Add a flag argument to pnfs_destroy_layouts_byclid() (Trond Myklebust)  [Orabug: 37477755]
  - NFSv4: Clean up encode_nfs4_stateid() (Trond Myklebust)  [Orabug: 37477755]
  - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust)  [Orabug: 37477755]
  - NFSv4/pnfs: Remove redundant list check (Trond Myklebust)  [Orabug: 37477755]
  - uek-rpm: Enable CONFIG_SENSORS_ARM_SCMI and CONFIG_MVL_MHU (Thomas Tai)  [Orabug: 37498899]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-306.176.1.el9uek]
changelog:
  - mm/page_alloc: fix min_free_kbytes calculation regarding ZONE_MOVABLE (liuq)  [Orabug: 37503579]  
  - mm: Limit warning message in vmemmap_verify() to once (Ma Wupeng)  [Orabug: 37503579]  
  - assoc_array: fix the return value in assoc_array_insert_mid_shortcut() (Roman Smirnov)  [Orabug: 37503579]  
  - assoc_array: Avoid open coded arithmetic in allocator arguments (Len Baker)  [Orabug: 37503579]  
  - mm/page_alloc: use accumulated load when building node fallback list (Krupa Ramakrishnan)  [Orabug: 37503525]  
  - mm/page_alloc: print node fallback order (Bharata B Rao)  [Orabug: 37503525]  
  - PCI: Support BAR sizes up to 8TB (Dongdong Liu)  [Orabug: 37503525]  
  - uek-rpm: Enable USB_XHCI_PCI_RENESAS as a module for aarch64 platforms (Harshit Mogalapalli)  [Orabug: 37552080]  
  - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara)  [Orabug: 37535421]  
  - cifs: fix NULL ptr dereference in refresh_mounts() (Paulo Alcantara)  [Orabug: 37535421]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-306.176.1.el9uek]
changelog:
  - mm/page_alloc: fix min_free_kbytes calculation regarding ZONE_MOVABLE (liuq)  [Orabug: 37503579]
  - mm: Limit warning message in vmemmap_verify() to once (Ma Wupeng)  [Orabug: 37503579]
  - assoc_array: fix the return value in assoc_array_insert_mid_shortcut() (Roman Smirnov)  [Orabug: 37503579]
  - assoc_array: Avoid open coded arithmetic in allocator arguments (Len Baker)  [Orabug: 37503579]
  - mm/page_alloc: use accumulated load when building node fallback list (Krupa Ramakrishnan)  [Orabug: 37503525]
  - mm/page_alloc: print node fallback order (Bharata B Rao)  [Orabug: 37503525]
  - PCI: Support BAR sizes up to 8TB (Dongdong Liu)  [Orabug: 37503525]
  - uek-rpm: Enable USB_XHCI_PCI_RENESAS as a module for aarch64 platforms (Harshit Mogalapalli)  [Orabug: 37552080]
  - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara)  [Orabug: 37535421]
  - cifs: fix NULL ptr dereference in refresh_mounts() (Paulo Alcantara)  [Orabug: 37535421]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-306.177.2.el9uek]
changelog:
  - LTS version: v5.15.177 (Vijayendra Suman)
  - Partial revert of xhci: use pm_ptr() instead #ifdef for CONFIG_PM conditionals (Ron Economos)
  - xhci: use pm_ptr() instead of #ifdef for CONFIG_PM conditionals (Arnd Bergmann)
  - net: fix data-races around sk->sk_forward_alloc (Wang Liang)
  - scsi: sg: Fix slab-use-after-free read in sg_release() (Suraj Sonawane)
  - x86/xen: fix SLS mitigation in xen_hypercall_iret() (Juergen Gross)
  - nfsd: add list_head nf_gc to struct nfsd_file (Youzhong Yang)
  - ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev() (Eric Dumazet)
  - vsock/virtio: discard packets if the transport changes (Stefano Garzarella)
  - blk-cgroup: Fix UAF in blkcg_unpin_online() (Tejun Heo)
  - iio: adc: rockchip_saradc: fix information leak in triggered buffer (Javier Carrasco)
  - iio: imu: inv_icm42600: fix timestamps after suspend if sensor is on (Jean-Baptiste Maneyrol)
  - iio: imu: inv_icm42600: fix spi burst write not supported (Jean-Baptiste Maneyrol)
  - drm/i915/fb: Relax clear color alignment to 64 bytes (Ville Syrjälä)
  - irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly (Yogesh Lal)
  - gpiolib: cdev: Fix use after free in lineinfo_changed_notify (Zhongqiu Han)
  - fs/proc: fix softlockup in __read_vmcore (part 2) (Rik van Riel)
  - filemap: avoid truncating 64-bit offset to 32 bits (Marco Nelissen)
  - vsock: prevent null-ptr-deref in vsock_*[has_data|has_space] (Stefano Garzarella)
  - vsock: reset socket state when de-assigning the transport (Stefano Garzarella)
  - vsock/virtio: cancel close work in the destructor (Stefano Garzarella)
  - net: ethernet: xgbe: re-add aneg to supported features in PHY quirks (Heiner Kallweit)
  - nvmet: propagate npwg topology (Luis Chamberlain)
  - poll_wait: add mb() to fix theoretical race between waitqueue_active() and .poll() (Oleg Nesterov)
  - ACPI: resource: acpi_dev_irq_override(): Check DMI match last (Hans de Goede)
  - kheaders: Ignore silly-rename files (David Howells)
  - fs: fix missing declaration of init_files (Zhang Kunbo)
  - hfs: Sanity check the root record (Leo Stone)
  - mac802154: check local interfaces before deleting sdata list (Lizhi Xu)
  - i2c: rcar: fix NACK handling when being a target (Wolfram Sang)
  - i2c: mux: demux-pinctrl: check initial mux selection, too (Wolfram Sang)
  - drm/v3d: Ensure job pointer is set to NULL after job completion (Maíra Canal)
  - net/mlx5: Fix RDMA TX steering prio (Patrisious Haddad)
  - net: xilinx: axienet: Fix IRQ coalescing packet count overflow (Sean Anderson)
  - nfp: bpf: prevent integer overflow in nfp_bpf_event_output() (Dan Carpenter)
  - pktgen: Avoid out-of-bounds access in get_imix_entries (Artem Chernyshev)
  - bpf: Fix bpf_sk_select_reuseport() memory leak (Michal Luczaj)
  - net: ethernet: ti: cpsw_ale: Fix cpsw_ale_get_field() (Sudheer Kumar Doredla)
  - phy: usb: Fix clock imbalance for suspend/resume (Justin Chen)
  - phy: usb: Use slow clock for wake enabled suspend (Justin Chen)
  - mptcp: fix TCP options overflow. (Paolo Abeni)
  - mptcp: drop port parameter of mptcp_pm_add_addr_signal (Geliang Tang)
  - ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv (Dennis Lam)
  - ocfs2: correct return value of ocfs2_local_free_info() (Joseph Qi)
  - phy: usb: Toggle the PHY power during init (Justin Chen)
  - phy: usb: Add "wake on" functionality for newer Synopsis XHCI controllers (Al Cooper)
  - of: address: Preserve the flags portion on 1:1 dma-ranges mapping (Andrea della Porta)
  - of: address: Store number of bus flag cells rather than bool (Rob Herring)
  - of: address: Remove duplicated functions (Herve Codina)
  - of: address: Fix address translation when address-size is greater than 2 (Herve Codina)
  - of/address: Add support for 3 address cell bus (Rob Herring)
  - of: unittest: Add bus address range parsing tests (Rob Herring)
  - arm64: dts: rockchip: add hevc power domain clock to rk3328 (Peter Geis)
  - block, bfq: fix waker_bfqq UAF after bfq_split_bfqq() (Yu Kuai)
  - iio: adc: ad7124: Disable all channels at probe time (Uwe Kleine-König)
  - iio: inkern: call iio_device_put() only on mapped devices (Joe Hattori)
  - iio: adc: at91: call input_free_device() on allocated iio_dev (Joe Hattori)
  - iio: adc: ti-ads124s08: Use gpiod_set_value_cansleep() (Fabio Estevam)
  - iio: gyro: fxas21002c: Fix missing data update in trigger handler (Carlos Song)
  - iio: adc: ti-ads8688: fix information leak in triggered buffer (Javier Carrasco)
  - iio: imu: kmx61: fix information leak in triggered buffer (Javier Carrasco)
  - iio: light: vcnl4035: fix information leak in triggered buffer (Javier Carrasco)
  - iio: dummy: iio_simply_dummy_buffer: fix information leak in triggered buffer (Javier Carrasco)
  - iio: pressure: zpa2326: fix information leak in triggered buffer (Javier Carrasco)
  - usb: gadget: f_fs: Remove WARN_ON in functionfs_bind (Akash M)
  - usb: gadget: f_uac2: Fix incorrect setting of bNumEndpoints (Prashanth K)
  - usb: fix reference leak in usb_new_device() (Ma Ke)
  - USB: core: Disable LPM only for non-suspended ports (Kai-Heng Feng)
  - USB: usblp: return error when setting unsupported protocol (Jun Yan)
  - usb: gadget: u_serial: Disable ep before setting port to null to fix the crash caused by port being null (Lianqin Hu)
  - topology: Keep the cpumask unchanged when printing cpumap (Li Huafei)
  - usb: dwc3: gadget: fix writing NYET threshold (André Draszik)
  - USB: serial: cp210x: add Phoenix Contact UPS Device (Johan Hovold)
  - usb-storage: Add max sectors quirk for Nokia 208 (Lubomir Rintel)
  - staging: iio: ad9832: Correct phase range check (Zicheng Qu)
  - staging: iio: ad9834: Correct phase range check (Zicheng Qu)
  - USB: serial: option: add Neoway N723-EA support (Michal Hrusecky)
  - USB: serial: option: add MeiG Smart SRM815 (Chukun Pan)
  - md/raid5: fix atomicity violation in raid5_cache_count (Gui-Dong Han)
  - scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Kuan-Wei Chiu)
  - drm/amd/display: increase MAX_SURFACES to the value supported by hw (Melissa Wen)
  - ACPI: resource: Add Asus Vivobook X1504VAP to irq1_level_low_skip_override[] (Hans de Goede)
  - ACPI: resource: Add TongFang GM5HG0A to irq1_edge_low_force_override[] (Hans de Goede)
  - riscv: Fix sleeping in invalid context in die() (Nam Cao)
  - drm/amd/display: Add check for granularity in dml ceil/floor helpers (Roman Li)
  - sctp: sysctl: plpmtud_probe_interval: avoid using current->nsproxy (Matthieu Baerts (NGI0))
  - sctp: sysctl: udp_port: avoid using current->nsproxy (Matthieu Baerts (NGI0))
  - sctp: sysctl: auth_enable: avoid using current->nsproxy (Matthieu Baerts (NGI0))
  - sctp: sysctl: rto_min/max: avoid using current->nsproxy (Matthieu Baerts (NGI0))
  - sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy (Matthieu Baerts (NGI0))
  - dm-ebs: don't set the flag DM_TARGET_PASSES_INTEGRITY (Mikulas Patocka)
  - dm thin: make get_first_thin use rcu-safe list first function (Krister Johansen)
  - afs: Fix the maximum cell name length (David Howells)
  - ksmbd: fix a missing return value check bug (Wentao Liang)
  - drm/mediatek: Add support for 180-degree rotation in the display driver (Jason-JH.Lin)
  - netfilter: conntrack: clamp maximum hashtable size to INT_MAX (Pablo Neira Ayuso)
  - netfilter: nf_tables: imbalance in flowtable binding (Pablo Neira Ayuso)
  - tls: Fix tls_sw_sendmsg error handling (Benjamin Coddington)
  - cxgb4: Avoid removal of uninserted tid (Anumula Murali Mohan Reddy)
  - bnxt_en: Fix possible memory leak when hwrm_req_replace fails (Kalesh AP)
  - net_sched: cls_flow: validate TCA_FLOW_RSHIFT attribute (Eric Dumazet)
  - tcp/dccp: allow a connection when sk_max_ack_backlog is zero (Zhongqiu Duan)
  - tcp/dccp: complete lockless accesses to sk->sk_max_ack_backlog (Jason Xing)
  - net: 802: LLC+SNAP OID:PID lookup on start of skb data (Antonio Pastor)
  - ieee802154: ca8210: Add missing check for kfifo_alloc() in ca8210_probe() (Keisuke Nishimura)
  - ASoC: mediatek: disable buffer pre-allocation (Chen-Yu Tsai)
  - exfat: fix the infinite loop in __exfat_free_cluster() (Yuezhang Mo)
  - exfat: fix the infinite loop in exfat_readdir() (Yuezhang Mo)
  - dm array: fix cursor index when skipping across block boundaries (Ming-Hung Tsai)
  - dm array: fix unreleased btree blocks on closing a faulty array cursor (Ming-Hung Tsai)
  - dm array: fix releasing a faulty array block twice in dm_array_cursor_end (Ming-Hung Tsai)
  - jbd2: flush filesystem device before updating tail sequence (Zhang Yi)
  - ceph: give up on paths longer than PATH_MAX (Max Kellermann)


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-306.177.3.el9uek]
changelog:
  - uek-rpm: Update network stress testing options for embedded2 (Joe Dobosenski)  [Orabug: 37530219]  
  - mm, madvise: fix potential workingset node list_lru leaks (Kairui Song)  [Orabug: 37464586]  
  - crypto: qat/qat_4xxx - fix off by one in uof_get_name() (Dan Carpenter)  [Orabug: 37427536]  
  - vdpa/mlx5: Fix error path during device add (Dragos Tatulea)  [Orabug: 37296163]  
  - vp_vdpa: fix id_table array not null terminated error (Xiaoguang Wang)  [Orabug: 37296163]  
  - vdpa/mlx5: Postpone MR deletion (Dragos Tatulea)  [Orabug: 37296163]  
  - vdpa/mlx5: Introduce init/destroy for MR resources (Dragos Tatulea)  [Orabug: 37296163]  
  - vdpa/mlx5: Rename mr_mtx -> lock (Dragos Tatulea)  [Orabug: 37296163]  
  - vdpa/mlx5: Extract mr members in own resource struct (Dragos Tatulea)  [Orabug: 37296163]  
  - vdpa/mlx5: Rename function (Dragos Tatulea)  [Orabug: 37296163]  
  - vdpa/mlx5: Delete direct MKEYs in parallel (Dragos Tatulea)  [Orabug: 37296163]  
  - vdpa/mlx5: Create direct MKEYs in parallel (Dragos Tatulea)  [Orabug: 37296163]  
  - vdpa/mlx5: Parallelize VQ suspend/resume for CVQ MQ command (Dragos Tatulea)  [Orabug: 37296163]  
  - vdpa/mlx5: Small improvement for change_num_qps() (Dragos Tatulea)  [Orabug: 37296163]  
  - vdpa/mlx5: Keep notifiers during suspend but ignore (Dragos Tatulea)  [Orabug: 37296163]  
  - vdpa/mlx5: Parallelize device resume (Dragos Tatulea)  [Orabug: 37296163]  
  - vdpa/mlx5: Parallelize device suspend (Dragos Tatulea)  [Orabug: 37296163]  
  - vdpa/mlx5: Use async API for vq modify commands (Dragos Tatulea)  [Orabug: 37296163]  
  - vdpa/mlx5: Use async API for vq query command (Dragos Tatulea)  [Orabug: 37296163]  
  - vdpa/mlx5: Introduce async fw command wrapper (Dragos Tatulea)  [Orabug: 37296163]  
  - vdpa/mlx5: Introduce error logging function (Dragos Tatulea)  [Orabug: 37296163]  
  - net/mlx5: Support throttled commands from async API (Dragos Tatulea)  [Orabug: 37296163]  
  - vdpa/mlx5: Add the support of set mac address (Cindy Lu)  [Orabug: 37296163]  
  - vdpa_sim_net: Add the support of set mac address (Cindy Lu)  [Orabug: 37296163]  
  - vdpa: support set mac address from vdpa tool (Cindy Lu)  [Orabug: 37296163]  
  - vdpa/mlx5: Fix invalid mr resource destroy (Dragos Tatulea)  [Orabug: 37296163]  
  - vdpa/mlx5: Don't enable non-active VQs in .set_vq_ready() (Dragos Tatulea)  [Orabug: 37296163]  
  - vdpa/mlx5: Don't reset VQs more than necessary (Dragos Tatulea)  [Orabug: 37296163]  
  - vdpa/mlx5: Re-create HW VQs under certain conditions (Dragos Tatulea)  [Orabug: 37296163]  
  - vdpa/mlx5: Pre-create hardware VQs at vdpa .dev_add time (Dragos Tatulea)  [Orabug: 37296163]  
  - vdpa/mlx5: Use suspend/resume during VQP change (Dragos Tatulea)  [Orabug: 37296163]  
  - vdpa/mlx5: Forward error in suspend/resume device (Dragos Tatulea)  [Orabug: 37296163]  
  - vdpa/mlx5: Consolidate all VQ modify to Ready to use resume_vq() (Dragos Tatulea)  [Orabug: 37296163]  
  - vdpa/mlx5: Add error code for suspend/resume VQ (Dragos Tatulea)  [Orabug: 37296163]  
  - vdpa/mlx5: Accept Init -> Ready VQ transition in resume_vq() (Dragos Tatulea)  [Orabug: 37296163]  
  - vdpa/mlx5: Allow creation of blank VQs (Dragos Tatulea)  [Orabug: 37296163]  
  - vdpa/mlx5: Set mkey modified flags on all VQs (Dragos Tatulea)  [Orabug: 37296163]  
  - vdpa/mlx5: Start off rqt_size with max VQPs (Dragos Tatulea)  [Orabug: 37296163]  
  - vdpa/mlx5: Set an initial size on the VQ (Dragos Tatulea)  [Orabug: 37296163]  
  - vdpa/mlx5: Add support for modifying the VQ features field (Dragos Tatulea)  [Orabug: 37296163]  
  - vdpa/mlx5: Add support for modifying the virtio_version VQ field (Dragos Tatulea)  [Orabug: 37296163]  
  - vdpa/mlx5: Rename init_mvqs (Dragos Tatulea)  [Orabug: 37296163]  
  - vdpa/mlx5: Clear and reinitialize software VQ data on reset (Dragos Tatulea)  [Orabug: 37296163]  
  - vdpa/mlx5: Initialize and reset device with one queue pair (Dragos Tatulea)  [Orabug: 37296163]  
  - vdpa/mlx5: Remove duplicate suspend code (Dragos Tatulea)  [Orabug: 37296163]  
  - vdpa/mlx5: Iterate over active VQs during suspend/resume (Dragos Tatulea)  [Orabug: 37296163]  
  - vdpa/mlx5: Drop redundant check in teardown_virtqueues() (Dragos Tatulea)  [Orabug: 37296163]  
  - vdpa/mlx5: Drop redundant code (Dragos Tatulea)  [Orabug: 37296163]  
  - vdpa/mlx5: Make setup/teardown_vq_resources() symmetrical (Dragos Tatulea)  [Orabug: 37296163]  
  - vdpa/mlx5: Clarify meaning thorough function rename (Dragos Tatulea)  [Orabug: 37296163]  
  - vhost-vdpa: Remove usage of the deprecated ida_simple_xx() API (Christophe JAILLET)  [Orabug: 37296163]  
  - vp_vdpa: don't allocate unused msix vectors (Yuxue Liu)  [Orabug: 37296163]  
  - vdpa: Convert sprintf/snprintf to sysfs_emit (Li Zhijian)  [Orabug: 37296163]  
  - vp_vdpa: Fix return value check vp_vdpa_request_irq (Yuxue Liu)  [Orabug: 37296163]  
  - vhost-vdpa: change ioctl # for VDPA_GET_VRING_SIZE (Michael S. Tsirkin)  [Orabug: 37296163]  
  - virtio_vdpa: create vqs with the actual size (Zhu Lingshan)  [Orabug: 37296163]  
  - vdpa_sim: implement vdpa_config_ops.get_vq_size for vDPA simulator (Zhu Lingshan)  [Orabug: 37296163]  
  - vp_vdpa: implement vdpa_config_ops.get_vq_size (Zhu Lingshan)  [Orabug: 37296163]  
  - vDPA: introduce get_vq_size to vdpa_config_ops (Zhu Lingshan)  [Orabug: 37296163]  
  - vhost-vdpa: uapi to support reporting per vq size (Zhu Lingshan)  [Orabug: 37296163]  
  - vdpa: skip suspend/resume ops if not DRIVER_OK (Steve Sistare)  [Orabug: 37296163]  
  - vdpa_sim: reset must not run (Steve Sistare)  [Orabug: 37296163]  
  - vdpa: Block vq property changes in DRIVER_OK (Dragos Tatulea)  [Orabug: 37296163]  
  - vdpa: Track device suspended state (Dragos Tatulea)  [Orabug: 37296163]  
  - vdpa: Remove usage of the deprecated ida_simple_xx() API (Christophe JAILLET)  [Orabug: 37296163]  
  - SUNRPC: do not retry on EKEYEXPIRED when user TGT ticket expired (Dai Ngo)  [Orabug: 34162493]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-306.177.2.el9uek]
changelog:
  - LTS version: v5.15.177 (Vijayendra Suman)
  - Partial revert of xhci: use pm_ptr() instead #ifdef for CONFIG_PM conditionals (Ron Economos)
  - xhci: use pm_ptr() instead of #ifdef for CONFIG_PM conditionals (Arnd Bergmann)
  - net: fix data-races around sk->sk_forward_alloc (Wang Liang) [Orabug: 37388795] {CVE-2024-53124}
  - scsi: sg: Fix slab-use-after-free read in sg_release() (Suraj Sonawane) [Orabug: 37434117] {CVE-2024-56631}
  - x86/xen: fix SLS mitigation in xen_hypercall_iret() (Juergen Gross)
  - nfsd: add list_head nf_gc to struct nfsd_file (Youzhong Yang)
  - ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev() (Eric Dumazet) [Orabug: 37200706] {CVE-2024-47707}
  - vsock/virtio: discard packets if the transport changes (Stefano Garzarella)
  - blk-cgroup: Fix UAF in blkcg_unpin_online() (Tejun Heo) [Orabug: 37434276] {CVE-2024-56672}
  - iio: adc: rockchip_saradc: fix information leak in triggered buffer (Javier Carrasco)
  - iio: imu: inv_icm42600: fix timestamps after suspend if sensor is on (Jean-Baptiste Maneyrol)
  - iio: imu: inv_icm42600: fix spi burst write not supported (Jean-Baptiste Maneyrol)
  - drm/i915/fb: Relax clear color alignment to 64 bytes (Ville Syrjälä)
  - irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly (Yogesh Lal)
  - gpiolib: cdev: Fix use after free in lineinfo_changed_notify (Zhongqiu Han) [Orabug: 36683269] {CVE-2024-36899}
  - fs/proc: fix softlockup in __read_vmcore (part 2) (Rik van Riel)
  - filemap: avoid truncating 64-bit offset to 32 bits (Marco Nelissen)
  - vsock: prevent null-ptr-deref in vsock_*[has_data|has_space] (Stefano Garzarella)
  - vsock: reset socket state when de-assigning the transport (Stefano Garzarella)
  - vsock/virtio: cancel close work in the destructor (Stefano Garzarella)
  - net: ethernet: xgbe: re-add aneg to supported features in PHY quirks (Heiner Kallweit)
  - nvmet: propagate npwg topology (Luis Chamberlain)
  - poll_wait: add mb() to fix theoretical race between waitqueue_active() and .poll() (Oleg Nesterov)
  - ACPI: resource: acpi_dev_irq_override(): Check DMI match last (Hans de Goede)
  - kheaders: Ignore silly-rename files (David Howells)
  - fs: fix missing declaration of init_files (Zhang Kunbo)
  - hfs: Sanity check the root record (Leo Stone)
  - mac802154: check local interfaces before deleting sdata list (Lizhi Xu)
  - i2c: rcar: fix NACK handling when being a target (Wolfram Sang)
  - i2c: mux: demux-pinctrl: check initial mux selection, too (Wolfram Sang)
  - drm/v3d: Ensure job pointer is set to NULL after job completion (Maíra Canal)
  - net/mlx5: Fix RDMA TX steering prio (Patrisious Haddad)
  - net: xilinx: axienet: Fix IRQ coalescing packet count overflow (Sean Anderson)
  - nfp: bpf: prevent integer overflow in nfp_bpf_event_output() (Dan Carpenter)
  - pktgen: Avoid out-of-bounds access in get_imix_entries (Artem Chernyshev)
  - bpf: Fix bpf_sk_select_reuseport() memory leak (Michal Luczaj)
  - net: ethernet: ti: cpsw_ale: Fix cpsw_ale_get_field() (Sudheer Kumar Doredla)
  - phy: usb: Fix clock imbalance for suspend/resume (Justin Chen)
  - phy: usb: Use slow clock for wake enabled suspend (Justin Chen)
  - mptcp: fix TCP options overflow. (Paolo Abeni)
  - mptcp: drop port parameter of mptcp_pm_add_addr_signal (Geliang Tang)
  - ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv (Dennis Lam)
  - ocfs2: correct return value of ocfs2_local_free_info() (Joseph Qi)
  - phy: usb: Toggle the PHY power during init (Justin Chen)
  - phy: usb: Add "wake on" functionality for newer Synopsis XHCI controllers (Al Cooper)
  - of: address: Preserve the flags portion on 1:1 dma-ranges mapping (Andrea della Porta)
  - of: address: Store number of bus flag cells rather than bool (Rob Herring)
  - of: address: Remove duplicated functions (Herve Codina)
  - of: address: Fix address translation when address-size is greater than 2 (Herve Codina)
  - of/address: Add support for 3 address cell bus (Rob Herring)
  - of: unittest: Add bus address range parsing tests (Rob Herring)
  - arm64: dts: rockchip: add hevc power domain clock to rk3328 (Peter Geis)
  - block, bfq: fix waker_bfqq UAF after bfq_split_bfqq() (Yu Kuai)
  - iio: adc: ad7124: Disable all channels at probe time (Uwe Kleine-König)
  - iio: inkern: call iio_device_put() only on mapped devices (Joe Hattori)
  - iio: adc: at91: call input_free_device() on allocated iio_dev (Joe Hattori)
  - iio: adc: ti-ads124s08: Use gpiod_set_value_cansleep() (Fabio Estevam)
  - iio: gyro: fxas21002c: Fix missing data update in trigger handler (Carlos Song)
  - iio: adc: ti-ads8688: fix information leak in triggered buffer (Javier Carrasco)
  - iio: imu: kmx61: fix information leak in triggered buffer (Javier Carrasco)
  - iio: light: vcnl4035: fix information leak in triggered buffer (Javier Carrasco)
  - iio: dummy: iio_simply_dummy_buffer: fix information leak in triggered buffer (Javier Carrasco)
  - iio: pressure: zpa2326: fix information leak in triggered buffer (Javier Carrasco)
  - usb: gadget: f_fs: Remove WARN_ON in functionfs_bind (Akash M)
  - usb: gadget: f_uac2: Fix incorrect setting of bNumEndpoints (Prashanth K)
  - usb: fix reference leak in usb_new_device() (Ma Ke)
  - USB: core: Disable LPM only for non-suspended ports (Kai-Heng Feng)
  - USB: usblp: return error when setting unsupported protocol (Jun Yan)
  - usb: gadget: u_serial: Disable ep before setting port to null to fix the crash caused by port being null (Lianqin Hu)
  - topology: Keep the cpumask unchanged when printing cpumap (Li Huafei)
  - usb: dwc3: gadget: fix writing NYET threshold (André Draszik)
  - USB: serial: cp210x: add Phoenix Contact UPS Device (Johan Hovold)
  - usb-storage: Add max sectors quirk for Nokia 208 (Lubomir Rintel)
  - staging: iio: ad9832: Correct phase range check (Zicheng Qu)
  - staging: iio: ad9834: Correct phase range check (Zicheng Qu)
  - USB: serial: option: add Neoway N723-EA support (Michal Hrusecky)
  - USB: serial: option: add MeiG Smart SRM815 (Chukun Pan)
  - md/raid5: fix atomicity violation in raid5_cache_count (Gui-Dong Han)
  - scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Kuan-Wei Chiu)
  - drm/amd/display: increase MAX_SURFACES to the value supported by hw (Melissa Wen)
  - ACPI: resource: Add Asus Vivobook X1504VAP to irq1_level_low_skip_override[] (Hans de Goede)
  - ACPI: resource: Add TongFang GM5HG0A to irq1_edge_low_force_override[] (Hans de Goede)
  - riscv: Fix sleeping in invalid context in die() (Nam Cao)
  - drm/amd/display: Add check for granularity in dml ceil/floor helpers (Roman Li)
  - sctp: sysctl: plpmtud_probe_interval: avoid using current->nsproxy (Matthieu Baerts (NGI0))
  - sctp: sysctl: udp_port: avoid using current->nsproxy (Matthieu Baerts (NGI0))
  - sctp: sysctl: auth_enable: avoid using current->nsproxy (Matthieu Baerts (NGI0))
  - sctp: sysctl: rto_min/max: avoid using current->nsproxy (Matthieu Baerts (NGI0))
  - sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy (Matthieu Baerts (NGI0))
  - dm-ebs: don't set the flag DM_TARGET_PASSES_INTEGRITY (Mikulas Patocka)
  - dm thin: make get_first_thin use rcu-safe list first function (Krister Johansen)
  - afs: Fix the maximum cell name length (David Howells)
  - ksmbd: fix a missing return value check bug (Wentao Liang)
  - drm/mediatek: Add support for 180-degree rotation in the display driver (Jason-JH.Lin)
  - netfilter: conntrack: clamp maximum hashtable size to INT_MAX (Pablo Neira Ayuso)
  - netfilter: nf_tables: imbalance in flowtable binding (Pablo Neira Ayuso)
  - tls: Fix tls_sw_sendmsg error handling (Benjamin Coddington)
  - cxgb4: Avoid removal of uninserted tid (Anumula Murali Mohan Reddy)
  - bnxt_en: Fix possible memory leak when hwrm_req_replace fails (Kalesh AP)
  - net_sched: cls_flow: validate TCA_FLOW_RSHIFT attribute (Eric Dumazet)
  - tcp/dccp: allow a connection when sk_max_ack_backlog is zero (Zhongqiu Duan)
  - tcp/dccp: complete lockless accesses to sk->sk_max_ack_backlog (Jason Xing)
  - net: 802: LLC+SNAP OID:PID lookup on start of skb data (Antonio Pastor)
  - ieee802154: ca8210: Add missing check for kfifo_alloc() in ca8210_probe() (Keisuke Nishimura)
  - ASoC: mediatek: disable buffer pre-allocation (Chen-Yu Tsai)
  - exfat: fix the infinite loop in __exfat_free_cluster() (Yuezhang Mo)
  - exfat: fix the infinite loop in exfat_readdir() (Yuezhang Mo)
  - dm array: fix cursor index when skipping across block boundaries (Ming-Hung Tsai)
  - dm array: fix unreleased btree blocks on closing a faulty array cursor (Ming-Hung Tsai)
  - dm array: fix releasing a faulty array block twice in dm_array_cursor_end (Ming-Hung Tsai)
  - jbd2: flush filesystem device before updating tail sequence (Zhang Yi)
  - ceph: give up on paths longer than PATH_MAX (Max Kellermann)


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-306.177.3.el9uek]
changelog:
  - uek-rpm: Update network stress testing options for embedded2 (Joe Dobosenski)  [Orabug: 37530219]
  - mm, madvise: fix potential workingset node list_lru leaks (Kairui Song)  [Orabug: 37464586]
  - crypto: qat/qat_4xxx - fix off by one in uof_get_name() (Dan Carpenter)  [Orabug: 37427536] {CVE-2024-53162}
  - vdpa/mlx5: Fix error path during device add (Dragos Tatulea)  [Orabug: 37296163]
  - vp_vdpa: fix id_table array not null terminated error (Xiaoguang Wang)  [Orabug: 37296163] {CVE-2024-53110}
  - vdpa/mlx5: Postpone MR deletion (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Introduce init/destroy for MR resources (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Rename mr_mtx -> lock (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Extract mr members in own resource struct (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Rename function (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Delete direct MKEYs in parallel (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Create direct MKEYs in parallel (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Parallelize VQ suspend/resume for CVQ MQ command (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Small improvement for change_num_qps() (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Keep notifiers during suspend but ignore (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Parallelize device resume (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Parallelize device suspend (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Use async API for vq modify commands (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Use async API for vq query command (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Introduce async fw command wrapper (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Introduce error logging function (Dragos Tatulea)  [Orabug: 37296163]
  - net/mlx5: Support throttled commands from async API (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Add the support of set mac address (Cindy Lu)  [Orabug: 37296163]
  - vdpa_sim_net: Add the support of set mac address (Cindy Lu)  [Orabug: 37296163]
  - vdpa: support set mac address from vdpa tool (Cindy Lu)  [Orabug: 37296163]
  - vdpa/mlx5: Fix invalid mr resource destroy (Dragos Tatulea)  [Orabug: 37296163] {CVE-2024-47687}
  - vdpa/mlx5: Don't enable non-active VQs in .set_vq_ready() (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Don't reset VQs more than necessary (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Re-create HW VQs under certain conditions (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Pre-create hardware VQs at vdpa .dev_add time (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Use suspend/resume during VQP change (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Forward error in suspend/resume device (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Consolidate all VQ modify to Ready to use resume_vq() (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Add error code for suspend/resume VQ (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Accept Init -> Ready VQ transition in resume_vq() (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Allow creation of blank VQs (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Set mkey modified flags on all VQs (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Start off rqt_size with max VQPs (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Set an initial size on the VQ (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Add support for modifying the VQ features field (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Add support for modifying the virtio_version VQ field (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Rename init_mvqs (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Clear and reinitialize software VQ data on reset (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Initialize and reset device with one queue pair (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Remove duplicate suspend code (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Iterate over active VQs during suspend/resume (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Drop redundant check in teardown_virtqueues() (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Drop redundant code (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Make setup/teardown_vq_resources() symmetrical (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa/mlx5: Clarify meaning thorough function rename (Dragos Tatulea)  [Orabug: 37296163]
  - vhost-vdpa: Remove usage of the deprecated ida_simple_xx() API (Christophe JAILLET)  [Orabug: 37296163]
  - vp_vdpa: don't allocate unused msix vectors (Yuxue Liu)  [Orabug: 37296163]
  - vdpa: Convert sprintf/snprintf to sysfs_emit (Li Zhijian)  [Orabug: 37296163]
  - vp_vdpa: Fix return value check vp_vdpa_request_irq (Yuxue Liu)  [Orabug: 37296163]
  - vhost-vdpa: change ioctl # for VDPA_GET_VRING_SIZE (Michael S. Tsirkin)  [Orabug: 37296163]
  - virtio_vdpa: create vqs with the actual size (Zhu Lingshan)  [Orabug: 37296163]
  - vdpa_sim: implement vdpa_config_ops.get_vq_size for vDPA simulator (Zhu Lingshan)  [Orabug: 37296163]
  - vp_vdpa: implement vdpa_config_ops.get_vq_size (Zhu Lingshan)  [Orabug: 37296163]
  - vDPA: introduce get_vq_size to vdpa_config_ops (Zhu Lingshan)  [Orabug: 37296163]
  - vhost-vdpa: uapi to support reporting per vq size (Zhu Lingshan)  [Orabug: 37296163]
  - vdpa: skip suspend/resume ops if not DRIVER_OK (Steve Sistare)  [Orabug: 37296163]
  - vdpa_sim: reset must not run (Steve Sistare)  [Orabug: 37296163]
  - vdpa: Block vq property changes in DRIVER_OK (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa: Track device suspended state (Dragos Tatulea)  [Orabug: 37296163]
  - vdpa: Remove usage of the deprecated ida_simple_xx() API (Christophe JAILLET)  [Orabug: 37296163]
  - SUNRPC: do not retry on EKEYEXPIRED when user TGT ticket expired (Dai Ngo)  [Orabug: 34162493]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-306.177.4.el9uek]
changelog:
  - Revert "usb: gadget: u_serial: Disable ep before setting port to null to fix the crash caused by port being null" (Greg Kroah-Hartman)   
  - drm/v3d: Assign job pointer to NULL before signaling the fence (Maíra Canal)   
  - scsi: mpi3mr: Fix corrupt config pages PHY state is switched in sysfs (Ranjan Kumar)  [Orabug: 37472354]  {CVE-2024-57804}


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-306.177.4.el9uek]
changelog:
  - Revert "usb: gadget: u_serial: Disable ep before setting port to null to fix the crash caused by port being null" (Greg Kroah-Hartman)
  - drm/v3d: Assign job pointer to NULL before signaling the fence (Maíra Canal)
  - scsi: mpi3mr: Fix corrupt config pages PHY state is switched in sysfs (Ranjan Kumar)  [Orabug: 37472354]  {CVE-2024-57804}


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-307.177.1.el9uek]
changelog:
  - nvmet: always initialize cqe.result (Daniel Wagner)  [Orabug: 36897348]  {CVE-2024-41079} 
  - nvmet-auth: complete a request only after freeing the dhchap pointers (Maurizio Lombardi)  [Orabug: 36897348]  {CVE-2024-41079} 
  - scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info (Justin Tee)  [Orabug: 37116505]  {CVE-2024-46842} 
  - netdevsim: use cond_resched() in nsim_dev_trap_report_work() (Eric Dumazet)  [Orabug: 37264120]  {CVE-2024-50155} 
  - nvmet-auth: assign dh_key to NULL after kfree_sensitive (Vitaliy Shevtsov)  [Orabug: 37268555]  {CVE-2024-50215} 
  - net: usb: lan78xx: Fix double free issue with interrupt buffer allocation (Oleksij Rempel)  [Orabug: 37433573]  {CVE-2024-53213} 
  - PCI/MSI: Handle lack of irqdomain gracefully (Thomas Gleixner)  [Orabug: 37452651]  {CVE-2024-56760} 
  - selftests: rtnetlink: update netdevsim ipsec output format (Hangbin Liu)  [Orabug: 37547931]  
  - netdevsim: print human readable IP address (Hangbin Liu)  [Orabug: 37547931]  
  - uek: kabi: Fix build error for HIDE_INCLUDE macro (Saeed Mirzamohammadi)  [Orabug: 37619141]  
  - Add __init annotation to pensando_efi_mem_reserve (Joe Dobosenski)  [Orabug: 37619785]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-305.171.1.el9uek]
changelog:
  - octeontx2-af: Fix CPT AF register offset calculation (Bharat Bhushan) [Orabug: 37445471]
  - perf/arm-cmn: Remove for loop intial declarations (Dave Kleikamp) [Orabug: 37409090]
  - perf/arm-cmn: Ensure port and device id bits are set properly (Namhyung Kim) [Orabug: 37409090]
  - perf/arm-cmn: Improve format attr printing (Robin Murphy) [Orabug: 37409090]
  - perf/arm-cmn: Clean up unnecessary NUMA_NO_NODE check (Robin Murphy) [Orabug: 37409090]
  - perf/arm-cmn: Support CMN S3 (Robin Murphy) [Orabug: 37409090]
  - dt-bindings: perf: arm-cmn: Add CMN S3 (Robin Murphy) [Orabug: 37409090]
  - perf/arm-cmn: Refactor DTC PMU register access (Robin Murphy) [Orabug: 37409090]
  - perf/arm-cmn: Make cycle counts less surprising (Robin Murphy) [Orabug: 37409090]
  - perf/arm-cmn: Improve build-time assertion (Robin Murphy) [Orabug: 37409090]
  - perf/arm-cmn: Ensure dtm_idx is big enough (Robin Murphy) [Orabug: 37409090]
  - perf/arm-cmn: Fix CCLA register offset (Robin Murphy) [Orabug: 37409090]
  - perf/arm-cmn: Refactor node ID handling. Again. (Robin Murphy) [Orabug: 37409090]
  - perf/arm-cmn: Enable support for tertiary match group (Ilkka Koskinen) [Orabug: 37409090]
  - perf/arm-cmn: Decouple wp_config registers from filter group number (Ilkka Koskinen) [Orabug: 37409090]
  - perf/arm-cmn: Workaround AmpereOneX errata AC04_MESH_1 (incorrect child count) (Ilkka Koskinen) [Orabug: 37409090]
  - perf/arm-cmn: Improve debugfs pretty-printing for large configs (Robin Murphy) [Orabug: 37409090]
  - perf: arm-cmn: Convert to platform remove callback returning void (Uwe Kleine-König) [Orabug: 37409090]
  - perf/arm-cmn: Fail DTC counter allocation correctly (Robin Murphy) [Orabug: 37409090]
  - perf/arm-cmn: Fix HN-F class_occup_id events (Robin Murphy) [Orabug: 37409090]
  - perf/arm-cmn: Enable per-DTC counter allocation (Robin Murphy) [Orabug: 37409090]
  - perf/arm-cmn: Rework DTC counters (again) (Robin Murphy) [Orabug: 37409090]
  - perf/arm-cmn: Fix DTC domain detection (Robin Murphy) [Orabug: 37409090]
  - perf/arm-cmn: Add CMN-700 r3 support (Robin Murphy) [Orabug: 37409090]
  - perf/arm-cmn: Refactor HN-F event selector macros (Robin Murphy) [Orabug: 37409090]
  - perf/arm-cmn: Remove spurious event aliases (Robin Murphy) [Orabug: 37409090]
  - perf/arm-cmn: Add sysfs identifier (Robin Murphy) [Orabug: 37409090]
  - perf/arm-cmn: Revamp model detection (Robin Murphy) [Orabug: 37409090]
  - perf/arm-cmn: Fix port detection for CMN-700 (Robin Murphy) [Orabug: 37409090]
  - perf/arm-cmn: Validate cycles events fully (Robin Murphy) [Orabug: 37409090]
  - perf/arm-cmn: Move overlapping wp_combine field (Ilkka Koskinen) [Orabug: 37409090]
  - Partially revert "perf/arm-cmn: Optimise DTC counter accesses" (Robin Murphy) [Orabug: 37409090]
  - perf/arm-cmn: Reset DTM_PMU_CONFIG at probe (Robin Murphy) [Orabug: 37409090]
  - perf/arm-cmn: Decode CAL devices properly in debugfs (Robin Murphy) [Orabug: 37409090]
  - perf/arm-cmn: Fix filter_sel lookup (Robin Murphy) [Orabug: 37409090]
  - perf/arm-cmn: Add CMN-700 support (Robin Murphy) [Orabug: 37409090]
  - perf/arm-cmn: Refactor occupancy filter selector (Robin Murphy) [Orabug: 37409090]
  - perf/arm-cmn: Add CMN-650 support (Robin Murphy) [Orabug: 37409090]
  - dt-bindings: perf: arm-cmn: Add CMN-650 and CMN-700 (Robin Murphy) [Orabug: 37409090]
  - perf/arm-cmn: Update watchpoint format (Robin Murphy) [Orabug: 37409090]
  - perf/arm-cmn: Hide XP PUB events for CMN-600 (Robin Murphy) [Orabug: 37409090]
  - perf/arm-cmn: Make arm_cmn_debugfs static (Robin Murphy) [Orabug: 37409090]
  - perf/arm-cmn: Add debugfs topology info (Robin Murphy) [Orabug: 37409090]
  - perf/arm-cmn: Add CI-700 Support (Robin Murphy) [Orabug: 37409090]
  - dt-bindings: perf: arm-cmn: Add CI-700 (Robin Murphy) [Orabug: 37409090]
  - perf/arm-cmn: Support new IP features (Robin Murphy) [Orabug: 37409090]
  - perf/arm-cmn: Demarcate CMN-600 specifics (Robin Murphy) [Orabug: 37409090]
  - perf/arm-cmn: Move group validation data off-stack (Robin Murphy) [Orabug: 37409090]
  - perf/arm-cmn: Optimise DTC counter accesses (Robin Murphy) [Orabug: 37409090]
  - perf/arm-cmn: Optimise DTM counter reads (Robin Murphy) [Orabug: 37409090]
  - perf/arm-cmn: Refactor DTM handling (Robin Murphy) [Orabug: 37409090]
  - perf/arm-cmn: Streamline node iteration (Robin Murphy) [Orabug: 37409090]
  - perf/arm-cmn: Refactor node ID handling (Robin Murphy) [Orabug: 37409090]
  - perf/arm-cmn: Drop compile-test restriction (Robin Murphy) [Orabug: 37409090]
  - perf/arm-cmn: Account for NUMA affinity (Robin Murphy) [Orabug: 37409090]
  - Acquire mem_cgroup_per_node.lruvec locks for online nodes only. (Imran Khan) [Orabug: 37405595]
  - Fix issues seen with mail thread patches. (Imran Khan) [Orabug: 37405595]
  - mm: lru: use lruvec lock to serialize memcg changes (Muchun Song) [Orabug: 37405595]
  - mm: lru: add VM_BUG_ON_PAGE to lru maintenance function (Muchun Song) [Orabug: 37405595]
  - mm: memcontrol: rename {un}lock_page_memcg() to {un}lock_page_objcg() (Muchun Song) [Orabug: 37405595]
  - mm: memcontrol: use obj_cgroup APIs to charge the LRU pages (Muchun Song) [Orabug: 37405595]
  - mm: memcontrol: introduce memcg_reparent_ops (Muchun Song) [Orabug: 37405595]
  - mm: memcontrol: make all the callers of page_memcg() safe (Muchun Song) [Orabug: 37405595]
  - mm: thp: make split queue lock safe when LRU pages reparented (Muchun Song) [Orabug: 37405595]
  - mm: thp: introduce split_queue_lock/unlock{_irqsave}() (Muchun Song) [Orabug: 37405595]
  - mm: vmscan: rework move_pages_to_lru() (Muchun Song) [Orabug: 37405595]
  - mm: memcontrol: make lruvec lock safe when the LRU pages reparented (Muchun Song) [Orabug: 37405595]
  - mm: memcontrol: introduce compact_lock_page_irqsave (Muchun Song) [Orabug: 37405595]
  - mm: memcontrol: prepare objcg API for non-kmem usage (Muchun Song) [Orabug: 37405595]
  - mm: move mem_cgroup_kmem_disabled() to memcontrol.h (Muchun Song) [Orabug: 37405595]
  - Uek-rpm/ol9: Enable CONFIG_FIPS_SIGNATURE_SELFTEST for mips64 (Vijay Kumar) [Orabug: 37390881,37509583]
  - sfc: Fix an error handling path in efx_pci_probe() (Christophe Jaillet) [Orabug: 37384497]
  - sfc: Separate netdev probe/remove from PCI probe/remove (Jonathan Cooper) [Orabug: 37384497]
  - sfc: replace function name in string with __func__ (Jonathan Cooper) [Orabug: 37384497]
  - sfc: Unsplit literal string. (Jonathan Cooper) [Orabug: 37384497]
  - sfc: Move EF100 efx_nic_type structs to the end of the file (Jonathan Cooper) [Orabug: 37384497]
  - sfc: Separate efx_nic memory from net_device memory (Jonathan Cooper) [Orabug: 37384497]
  - sfc: Encapsulate access to netdev_priv() (Jonathan Cooper) [Orabug: 37384497]
  - sfc: Add a PROBED state for EF100 VDPA use. (Jonathan Cooper) [Orabug: 37384497]
  - ACPICA: Allow PCC Data Type in MCTP resource. (Adam Young) [Orabug: 37311726,37356469]
  - ACPICA: Avoid undefined behavior: member access within misaligned address (Tamir Duberstein) [Orabug: 37311726,37356469]
  - arm64: errata: Enable the AC03_CPU_38 workaround for ampere1a (D Scott Phillips) [Orabug: 37311726,37356469]
  - arm64: Expose the end of the linear map in PHYSMEM_END (D Scott Phillips) [Orabug: 37311726,37356469]
  - seqcount: replace smp_rmb() in read_seqcount() with load acquire (Christoph Lameter) [Orabug: 37311726,37356469]
  - uek-rpm: Enable new config options for Ampere (Dave Kleikamp) [Orabug: 37311726,37356469]
  - vmalloc: modify the alloc_vmap_area() error message for better diagnostics (Shubhang Kaushik) [Orabug: 37311726,37356469]
  - NUMA: early use of cpu_to_node() returns 0 instead of the correct node id (Huang Shijie) [Orabug: 37311726,37356469]
  - mm: mmap: no need to call khugepaged_enter_vma() for stack (Yang Shi) [Orabug: 37311726,37356469]
  - crash_core: export vmemmap when CONFIG_SPARSEMEM_VMEMMAP is enabled (Huang Shijie) [Orabug: 37311726,37356469]
  - PCI: acpiphp: Allow built-in drivers for Attention Indicators (D Scott Phillips) [Orabug: 37311726,37356469]
  - PCI: acpiphp: Add missing MODULE_DESCRIPTION() macro (Jeff Johnson) [Orabug: 37311726,37356469]
  - PCI: hotplug: Add Ampere Altra Attention Indicator extension driver (D Scott Phillips) [Orabug: 37311726,37356469]
  - mm: mempolicy: keep VMA walk if both MPOL_MF_STRICT and MPOL_MF_MOVE are specified (Yang Shi) [Orabug: 37311726,37356469]
  - arm64: compat: Work around uninitialized variable warning (Ard Biesheuvel) [Orabug: 37311726,37356469]
  - arm64: compat: Implement misalignment fixups for multiword loads (Ard Biesheuvel) [Orabug: 37311726,37356469]
  - RDMA/mlx5: Expose vhca id for all ports in multiport mode (Mark Bloch) [Orabug: 37234285]
  - rds/ib: avoid scq/rcq polling during rds connection shutdown (Arumugam Kolappan) [Orabug: 37055939]
  - RDMA/mlx5: Send UAR page index as ioctl attribute (Akiva Goldberger) [Orabug: 37029766]
  - RDMA: Pass entire uverbs attr bundle to create cq function (Akiva Goldberger) [Orabug: 37029766]
  - net/mlx5e: Fix CT entry update leaks of modify header context (Chris Mi) [Orabug: 36948578,36983969] {CVE-2024-43864}
  - net/mlx5e: Require mlx5 tc classifier action support for IPsec prio capability (Rahul Rameshbabu) [Orabug: 36948578]
  - net/mlx5: Fix missing lock on sync reset reload (Moshe Shemesh) [Orabug: 36948578,36963817] {CVE-2024-42268}
  - net/mlx5: Lag, don't use the hardcoded value of the first port (Mark Bloch) [Orabug: 36948578]
  - mlxsw: core_linecards: Fix double memory deallocation in case of invalid INI file (Aleksandr Mishin) [Orabug: 36948578] {CVE-2024-42138}
  - net/mlx5e: Add mqprio_rl cleanup and free in mlx5e_priv_cleanup() (Jianbo Liu) [Orabug: 36948578]
  - net/mlx5: E-switch, Create ingress ACL when needed (Chris Mi) [Orabug: 36897834,36948578] {CVE-2024-42142}
  - mlxsw: spectrum_buffers: Fix memory corruptions on Spectrum-4 systems (Ido Schimmel) [Orabug: 36948578] {CVE-2024-42073}
  - RDMA/mlx5: Fix unwind flow as part of mlx5_ib_stage_init_init (Yishai Hadas) [Orabug: 36948578]
  - RDMA/mlx5: Ensure created mkeys always have a populated rb_key (Jason Gunthorpe) [Orabug: 36948578]
  - RDMA/mlx5: Follow rb_key.ats when creating new mkeys (Jason Gunthorpe) [Orabug: 36948578]
  - RDMA/mlx5: Remove extra unlock on error path (Jason Gunthorpe) [Orabug: 36948578]
  - net: wwan: iosm: Fix tainted pointer delete is case of region creation fail (Aleksandr Mishin) [Orabug: 36948578] {CVE-2024-40939}
  - net/mlx5: Always stop health timer during driver removal (Shay Drory) [Orabug: 36835719,36948578] {CVE-2024-40906}
  - net/mlx5: Fix MTMP register capability offset in MCAM register (Gal Pressman) [Orabug: 36948578]
  - net/mlx5e: Advertise mlx5 ethernet driver updates sk_buff md_dst for MACsec (Rahul Rameshbabu) [Orabug: 36948578]
  - mlxsw: core_env: Fix driver initialization with old firmware (Ido Schimmel) [Orabug: 36948578]
  - net/mlx5: Lag, restore buckets number to default after hash LAG deactivation (Shay Drory) [Orabug: 36948578]
  - net/mlx5e: Do not produce metadata freelist entries in Tx port ts WQE xmit (Rahul Rameshbabu) [Orabug: 36948578]
  - RDMA/mlx5: Change check for cacheable mkeys (Or Har-Toov) [Orabug: 36948578]
  - RDMA/mlx5: Uncacheable mkey has neither rb_key or cache_ent (Or Har-Toov) [Orabug: 36948578]
  - mlx5: avoid truncating error message (Arnd Bergmann) [Orabug: 36948578]
  - net/mlx5: Check capability for fw_reset (Moshe Shemesh) [Orabug: 36948578]
  - net/mlx5: SF, Stop waiting for FW as teardown was called (Moshe Shemesh) [Orabug: 36948578]
  - netlink: Correct offload_xstats size (Christoph Paasch) [Orabug: 36948578]
  - net: fix net_dev_start_xmit trace event vs skb_transport_offset() (Eric Dumazet) [Orabug: 36948578]
  - lib/bitmap: drop optimization of bitmap_{from,to}_arr64 (Yury Norov) [Orabug: 36948578]
  - net: macsec: fix double free of percpu stats (Fedor Pchelkin) [Orabug: 36948578]
  - tcp: gso: really support BIG TCP (Eric Dumazet) [Orabug: 36948578]
  - RDMA/mlx5: Use rdma_umem_for_each_dma_block() (Jason Gunthorpe) [Orabug: 36948578]
  - nfp: flower: fix ingress police using matchall filter (Tianyu Yuan) [Orabug: 36948578]
  - lib/bitmap: fix off-by-one in bitmap_to_arr64() (Alexander Lobakin) [Orabug: 36948578]
  - RDMA/mlx5: Fix flow steering egress flow (Leon Romanovsky) [Orabug: 36948578]
  - rtnetlink: Fix handling of disabled L3 stats in RTM_GETSTATS replies (Petr Machata) [Orabug: 36948578]
  - tun: annotate access to queue->trans_start (Antoine Tenart) [Orabug: 36948578]
  - xsk: Do not write NULL in SW ring at allocation failure (Magnus Karlsson) [Orabug: 36948578]
  - net/sched: fix incorrect vlan_push_eth dest field (Louis Peens) [Orabug: 36948578]
  - RDMA/nldev: Prevent underflow in nldev_stat_set_counter_dynamic_doit() (Dan Carpenter) [Orabug: 36948578]
  - net_tstamp: define new flag HWTSTAMP_FLAG_BONDED_PHC_INDEX (Hangbin Liu) [Orabug: 36948578]
  - net: add missing include in include/net/gro.h (Eric Dumazet) [Orabug: 36948578]
  - IB/hfi1: Properly allocate rdma counter desc memory (Dennis Dalessandro) [Orabug: 36948578]
  - xsk: Initialise xskb free_list_node (Ciara Loftus) [Orabug: 36948578]
  - xsk: Fix crash on double free in buffer pool (Magnus Karlsson) [Orabug: 36948578]
  - KVM: x86: WARN only once if KVM leaves a dangling userspace I/O request (Sean Christopherson) [Orabug: 36815282]
  - KVM: x86: Suppress pending MMIO write exits if emulator detects exception (Sean Christopherson) [Orabug: 36815282]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-305.171.2.el9uek]
changelog:
  - rds: ib: Avoid UAF on RDS Socket's rs_trans_lock (Håkon Bugge) [Orabug: 37475724,37475726]
  - rds: ib: Fix blocked processes related to race in rds_rdma_free_dev_rs_worker() (Håkon Bugge) [Orabug: 37475724,37475726]
  - rds: ib: Fix deterministic UAF in rds_rdma_free_dev_rs_worker() (Håkon Bugge) [Orabug: 37475724,37475726]
  - uek-misc: Define a prefix for uek module messages (Alejandro Jimenez) [Orabug: 37459409,37459411]
  - uek-misc: Clear the AVIC capability on platforms with known errata (Alejandro Jimenez) [Orabug: 37459409,37459411]
  - uek-misc: Add identification for OCI platform (Alejandro Jimenez) [Orabug: 37459409,37459411]
  - Revert "MIPS: do not call flush_tlb_all when setting pmd entry" (Vijay Kumar) [Orabug: 37454162]
  - cpufreq: intel_pstate: Support highest performance change interrupt (Srinivas Pandruvada) [Orabug: 37426908]
  - x86/cpufeatures: Add HWP highest perf change feature flag (Srinivas Pandruvada) [Orabug: 37426908]
  - cpufreq: intel_pstate: Get rid of unnecessary READ_ONCE() annotations (Rafael J Wysocki) [Orabug: 37426908]
  - cpufreq: intel_pstate: Wait for canceled delayed work to complete (Rafael J Wysocki) [Orabug: 37426908]
  - cpufreq: intel_pstate: Simplify spinlock locking (Rafael J Wysocki) [Orabug: 37426908]
  - cpufreq: intel_pstate: Update cpuinfo.max_freq on HWP_CAP changes (Rafael J Wysocki) [Orabug: 37426908]
  - uek-rpm: Enable CONFIG_FIPS_SIGNATURE_SELFTEST for all archs (Saeed Mirzamohammadi) [Orabug: 37400483,37459895,37509575]
  - uek-rpm: set DEFAULTKERNEL to other installed uek if possible (Sherry Yang) [Orabug: 37399094,37455023]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-305.176.3.el9uek]
changelog:
  - LTS version: v5.15.176 (Vijayendra Suman)
  - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [Orabug: 37484969] {CVE-2024-57884}
  - dt-bindings: display: adi,adv7533: Drop single lane support (Biju Das)
  - drm: adv7511: Drop dsi single lane support (Biju Das)
  - net/sctp: Prevent autoclose integer overflow in sctp_association_init() (Nikolay Kuratov) [Orabug: 37506731] {CVE-2024-57938}
  - sky2: Add device ID 11ab:4373 for Marvell 88E8075 (Pascal Hambourg)
  - pinctrl: mcp23s08: Fix sleeping in atomic context due to regmap locking (Evgenii Shatokhin) {CVE-2024-57889}
  - RDMA/uverbs: Prevent integer overflow issue (Dan Carpenter) [Orabug: 37484995] {CVE-2024-57890}
  - kcov: mark in_softirq_really() as __always_inline (Arnd Bergmann)
  - modpost: fix the missed iteration for the max bit in do_input() (Masahiro Yamada)
  - modpost: fix input MODULE_DEVICE_TABLE() built for 64-bit on 32-bit host (Masahiro Yamada)
  - usb: xhci: Avoid queuing redundant Stop Endpoint commands (Michał Pecio)
  - ARC: build: Try to guess GCC variant of cross compiler (Leon Romanovsky)
  - irqchip/gic: Correct declaration of *percpu_base pointer in union gic_base (Uros Bizjak)
  - net: usb: qmi_wwan: add Telit FE910C04 compositions (Daniele Palmas)
  - bpf: fix potential error return (Anton Protopopov)
  - sound: usb: format: don't warn that raw DSD is unsupported (Adrian Ratiu)
  - sound: usb: enable DSD output for ddHiFi TC44C (Adrian Ratiu)
  - btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount (Filipe Manana) [Orabug: 37485030] {CVE-2024-57896}
  - drm/amdkfd: Correct the migration DMA map direction (Prike Liang) [Orabug: 37485039] {CVE-2024-57897}
  - wifi: mac80211: wake the queues in case of failure in resume (Emmanuel Grumbach)
  - btrfs: sysfs: fix direct super block member reads (Qu Wenruo)
  - btrfs: sysfs: convert scnprintf and snprintf to sysfs_emit (Anand Jain)
  - btrfs: fix use-after-free when COWing tree bock and tracing is enabled (Filipe Manana) [Orabug: 37452645] {CVE-2024-56759}
  - btrfs: rename and export __btrfs_cow_block() (Filipe Manana)
  - ila: serialize calls to nf_register_net_hooks() (Eric Dumazet) {CVE-2024-57900}
  - af_packet: fix vlan_get_protocol_dgram() vs MSG_PEEK (Eric Dumazet) [Orabug: 37485099] {CVE-2024-57901}
  - af_packet: fix vlan_get_tci() vs MSG_PEEK (Eric Dumazet) [Orabug: 37485113] {CVE-2024-57902}
  - net: wwan: iosm: Properly check for valid exec stage in ipc_mmio_init() (Maciej S Szmigiero)
  - net: restrict SO_REUSEPORT to inet sockets (Eric Dumazet) [Orabug: 37485074] {CVE-2024-57903}
  - RDMA/rtrs: Ensure 'ib_sge list' is accessible (Li Zhijian) {CVE-2024-36476}
  - net: mv643xx_eth: fix an OF node reference leak (Joe Hattori)
  - eth: bcmsysport: fix call balance of priv->clk handling routines (Vitalii Mordan)
  - ALSA: usb-audio: US16x08: Initialize array before use (Tanya Agarwal)
  - net: llc: reset skb->transport_header (Antonio Pastor)
  - netfilter: nft_set_hash: unaligned atomic read on struct nft_set_ext (Pablo Neira Ayuso) [Orabug: 37522656] {CVE-2024-54031}
  - drm/i915/dg1: Fix power gate sequence. (Rodrigo Vivi)
  - netrom: check buffer length before accessing it (Ilya Shchipletsov) {CVE-2024-57802}
  - net: fix memory leak in tcp_conn_request() (Wang Liang) [Orabug: 37485137] {CVE-2024-57841}
  - net: stmmac: restructure the error path of stmmac_probe_config_dt() (Joe Hattori)
  - net: stmmac: don't create a MDIO bus if unnecessary (Andrew Halaney)
  - net: stmmac: platform: provide devm_stmmac_probe_config_dt() (Bartosz Golaszewski)
  - RDMA/hns: Fix missing flush CQE for DWQE (Chengchang Tang)
  - RDMA/hns: Fix warning storm caused by invalid input in IO path (Chengchang Tang)
  - RDMA/hns: Fix mapping error of zero-hop WQE buffer (Wenglianfa)
  - RDMA/hns: Remove redundant 'bt_level' for hem_list_alloc_item() (Yunsheng Lin)
  - RDMA/hns: Remove redundant 'attr_mask' in modify_qp_init_to_init() (Yixing Liu)
  - drm/bridge: adv7511_audio: Update Audio InfoFrame properly (Stefan Ekenberg)
  - RDMA/bnxt_re: Fix the locking while accessing the QP table (Selvin Xavier)
  - RDMA/bnxt_re: Fix max_qp_wrs reported (Selvin Xavier)
  - RDMA/bnxt_re: Fix reporting hw_ver in query_device (Kalesh Ap)
  - RDMA/bnxt_re: Add check for path mtu in modify_qp (Saravanan Vajravel)
  - RDMA/mlx5: Enforce same type port association for multiport RoCE (Patrisious Haddad)
  - xhci: Turn NEC specific quirk for handling Stop Endpoint errors generic (Mathias Nyman)
  - usb: xhci: Limit Stop Endpoint retries (Michał Pecio)
  - xhci: retry Stop Endpoint on buggy NEC controllers (Michał Pecio)
  - thunderbolt: Add support for Intel Panther Lake-M/P (Mika Westerberg)
  - thunderbolt: Add support for Intel Lunar Lake (Mika Westerberg)
  - thunderbolt: Add Intel Barlow Ridge PCI ID (Mika Westerberg)
  - thunderbolt: Add support for Intel Meteor Lake (Mika Westerberg)
  - thunderbolt: Add support for Intel Raptor Lake (George D Sworo)
  - tracing: Have process_string() also allow arrays (Steven Rostedt) [Orabug: 37522630] {CVE-2024-57930}
  - selinux: ignore unknown extended permissions (Thiébaud Weksteen) [Orabug: 37506711] {CVE-2024-57931}
  - x86/hyperv: Fix hv tsc page based sched_clock for hibernation (Naman Jain)
  - net: dsa: improve shutdown sequence (Vladimir Oltean) [Orabug: 37206293] {CVE-2024-49998}
  - nfsd: cancel nfsd_shrinker_work using sync mode in nfs4_state_shutdown_net (Yang Erkun) [Orabug: 37252394] {CVE-2024-50121}
  - btrfs: avoid monopolizing a core when activating a swap file (Filipe Manana)
  - power: supply: gpio-charger: Fix set charge current limits (Dimitri Fedrau) [Orabug: 37472340] {CVE-2024-57792}
  - tracing: Prevent bad count for tracing_cpumask_write (Lizhi Xu) [Orabug: 37452666] {CVE-2024-56763}
  - tracing: Constify string literal data member in struct trace_event_call (Christian Göttsche)
  - ksmbd: fix racy issue from session lookup and expire (Namjae Jeon)
  - lib: stackinit: hide never-taken branch from compiler (Kees Cook)
  - drm/dp_mst: Verify request type in the corresponding down message reply (Imre Deak)
  - arm64: Ensure bits ASID[15:8] are masked out when the kernel uses 8-bit ASIDs (Catalin Marinas)
  - arm64: mm: Rename asid2idx() to ctxid2asid() (Yunfeng Ye)
  - ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write (Jordy Zomer) {CVE-2024-56626}
  - ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read (Jordy Zomer) {CVE-2024-56627}
  - drm/dp_mst: Fix MST sideband message body length check (Imre Deak) {CVE-2024-56616}
  - bpf: Check validity of link->type in bpf_link_show_fdinfo() (Hou Tao) [Orabug: 37331881] {CVE-2024-53099}
  - MIPS: Probe toolchain support of -msym32 (Jiaxun Yang)
  - vmalloc: fix accounting with i915 (Matthew Wilcox)
  - virtio-blk: don't keep queue frozen during system suspend (Ming Lei) [Orabug: 37506752] {CVE-2024-57946}
  - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (Cathy Avery)
  - scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load time (Ranjan Kumar)
  - platform/x86: asus-nb-wmi: Ignore unknown event 0xCF (Armin Wolf)
  - regmap: Use correct format specifier for logging range errors (Mark Brown)
  - ALSA: hda/conexant: fix Z60MR100 startup pop issue (Bo Liu)
  - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [Orabug: 37472363] {CVE-2024-57807}
  - scsi: qla1280: Fix hw revision numbering for ISP1020/1040 (Magnus Lindholm)
  - watchdog: it87_wdt: add PWRGD enable quirk for Qotom QCML04 (James Hilliard)
  - tracing/kprobe: Make trace_kprobe's module callback called after jump_label update (Masami Hiramatsu)
  - mtd: rawnand: fix double free in atmel_pmecc_create_user() (Dan Carpenter) {CVE-2024-56766}
  - dmaengine: at_xdmac: avoid null_prt_deref in at_xdmac_prep_dma_memset (Chen Ridong) {CVE-2024-56767}
  - dmaengine: dw: Select only supported masters for ACPI devices (Andy Shevchenko)
  - dmaengine: mv_xor: fix child node refcount handling in early exit (Javier Carrasco)
  - phy: core: Fix that API devm_phy_destroy() fails to destroy the phy (Zijun Hu)
  - phy: core: Fix that API devm_of_phy_provider_unregister() fails to unregister the phy provider (Zijun Hu)
  - phy: core: Fix that API devm_phy_put() fails to release the phy (Zijun Hu)
  - phy: core: Fix an OF node refcount leakage in of_phy_provider_lookup() (Zijun Hu)
  - phy: core: Fix an OF node refcount leakage in _of_phy_get() (Zijun Hu)
  - mtd: rawnand: arasan: Fix missing de-registration of NAND (Maciej Andrzejewski Iceye)
  - mtd: rawnand: arasan: Fix double assertion of chip-select (Maciej Andrzejewski Iceye)
  - mtd: diskonchip: Cast an operand to prevent potential overflow (Zichen Xie)
  - nfsd: restore callback functionality for NFSv4.0 (Neil Brown)
  - bpf: Check negative offsets in __bpf_skb_min_len() (Cong Wang)
  - tcp_bpf: Add sk_rmem_alloc related logic for tcp_bpf ingress redirection (Zijian Zhang)
  - tcp_bpf: Charge receive socket buffer in bpf_tcp_ingress() (Cong Wang)
  - mm/vmstat: fix a W=1 clang compiler warning (Bart Van Assche)
  - media: dvb-frontends: dib3000mb: fix uninit-value in dib3000_write_reg (Nikita Zhandarovich) [Orabug: 37452686] {CVE-2024-56769}
  - drm/amdgpu: Handle NULL bo->tbo.resource (again) in amdgpu_vm_bo_update (Michel Dänzer)
  - epoll: Add synchronous wakeup support for ep_poll_callback (Xuewen Yan)
  - ceph: validate snapdirname option length when mounting (Ilya Dryomov)
  - of: Fix refcount leakage for OF node returned by __of_get_dma_parent() (Zijun Hu)
  - of: Fix error path in of_parse_phandle_with_args_map() (Herve Codina)
  - udmabuf: also check for F_SEAL_FUTURE_WRITE (Jann Horn)
  - nilfs2: prevent use of deleted inode (Edward Adam Davis) {CVE-2024-53690}
  - of/irq: Fix using uninitialized variable @addr_len in API of_irq_parse_one() (Zijun Hu)
  - NFS/pnfs: Fix a live lock between recalled layouts and layoutget (Trond Myklebust)
  - tracing: Add "%s" check in test_event_printk() (Steven Rostedt)
  - tracing: Add missing helper functions in event pointer dereference check (Steven Rostedt)
  - tracing: Fix test_event_printk() to process entire print argument (Steven Rostedt)
  - KVM: x86: Play nice with protected guests in complete_hypercall_exit() (Sean Christopherson) [Orabug: 37472314] {CVE-2024-55881}
  - Drivers: hv: util: Avoid accessing a ringbuffer not initialized yet (Michael Kelley) [Orabug: 37472318] {CVE-2024-55916}
  - btrfs: tree-checker: reject inline extent items with 0 ref count (Qu Wenruo)
  - zram: refuse to use zero sized block device as backing device (Kairui Song)
  - sh: clk: Fix clk_enable() to return 0 on NULL clk (Geert Uytterhoeven)
  - hwmon: (tmp513) Fix interpretation of values of Temperature Result and Limit Registers (Murad Masimov)
  - hwmon: (tmp513) Fix Current Register value interpretation (Murad Masimov)
  - hwmon: (tmp513) Fix interpretation of values of Shunt Voltage and Limit Registers (Murad Masimov)
  - hwmon: (tmp513) Use SI constants from units.h (Andy Shevchenko)
  - hwmon: (tmp513) Simplify with dev_err_probe() (Andy Shevchenko)
  - hwmon: (tmp513) Don't use "proxy" headers (Andy Shevchenko)
  - drm/modes: Avoid divide by zero harder in drm_mode_vrefresh() (Ville Syrjälä) [Orabug: 37472327] {CVE-2024-56369}
  - USB: serial: option: add Telit FE910C04 rmnet compositions (Daniele Palmas)
  - USB: serial: option: add MediaTek T7XX compositions (Jack Wu)
  - USB: serial: option: add Netprisma LCUK54 modules for WWAN Ready (Mank Wang)
  - USB: serial: option: add MeiG Smart SLM770A (Michal Hrusecky)
  - USB: serial: option: add TCL IK512 MBIM & ECM (Daniel Swanemar)
  - efivarfs: Fix error on non-existent file (James E J Bottomley)
  - i2c: riic: Always round-up when calculating bus period (Geert Uytterhoeven)
  - chelsio/chtls: prevent potential integer overflow on 32bit (Dan Carpenter)
  - mmc: sdhci-tegra: Remove SDHCI_QUIRK_BROKEN_ADMA_ZEROLEN_DESC quirk (Prathamesh Shete)
  - net: mdiobus: fix an OF node reference leak (Joe Hattori)
  - netfilter: ipset: Fix for recursive locking warning (Phil Sutter)
  - net: ethernet: bgmac-platform: fix an OF node reference leak (Joe Hattori)
  - net: hinic: Fix cleanup in create_rxqs/txqs() (Dan Carpenter)
  - ionic: use ee->offset when returning sprom data (Shannon Nelson)
  - ionic: Fix netdev notifier unregister on failure (Brett Creeley) [Orabug: 37434407] {CVE-2024-56715}
  - netdevsim: prevent bad user input in nsim_dev_health_break_write() (Eric Dumazet) [Orabug: 37434410] {CVE-2024-56716}
  - net/smc: check return value of sock_recvmsg when draining clc data (Guangguan Wang) {CVE-2024-57791}
  - net/smc: check smcd_v2_ext_offset when receiving proposal msg (Guangguan Wang) {CVE-2024-47408}
  - net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg (Guangguan Wang) {CVE-2024-49571}
  - net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll (Guangguan Wang)
  - erofs: fix incorrect symlink detection in fast symlink (Gao Xiang)
  - i2c: pnx: Fix timeout in wait functions (Vladimir Riabchun)
  - usb: dwc2: gadget: Don't write invalid mapped sg entries into dma_desc with iommu enabled (Peng Hongchi)
  - MIPS: Loongson64: DTS: Fix msi node for ls7a (Jiaxun Yang)
  - PCI: Add ACS quirk for Broadcom BCM5760X NIC (Ajit Khaparde)
  - PCI: vmd: Create domain symlink before pci_bus_add_devices() (Jiwei Sun)
  - ASoC: Intel: sof_sdw: fix jack detection on ADL-N variant RVP (Pierre-Louis Bossart)
  - usb: cdns3: Add quirk flag to enable suspend residency (Roger Quadros)
  - ALSA: usb: Fix UBSAN warning in parse_audio_unit() (Takashi Iwai)
  - PCI/AER: Disable AER service on suspend (Kai-Heng Feng)
  - PCI: Use preserve_config in place of pci_flags (Vidya Sagar)
  - net: sched: fix ordering of qlen adjustment (Lion Ackermann) [Orabug: 37433381] {CVE-2024-53164}
  - LTS version: v5.15.175 (Vijayendra Suman)
  - x86/static-call: fix 32-bit build (Juergen Gross)
  - ALSA: usb-audio: Fix a DMA to stack memory bug (Dan Carpenter)
  - x86/xen: remove hypercall page (Juergen Gross) {CVE-2024-53241}
  - x86/xen: use new hypercall functions instead of hypercall page (Juergen Gross) {CVE-2024-53241}
  - x86/xen: add central hypercall functions (Juergen Gross) {CVE-2024-53241}
  - x86/xen: don't do PV iret hypercall through hypercall page (Juergen Gross) [Orabug: 37427545] {CVE-2024-53241}
  - x86/static-call: provide a way to do very early static-call updates (Juergen Gross) {CVE-2024-53241}
  - objtool/x86: allow syscall instruction (Juergen Gross) {CVE-2024-53241}
  - x86: make get_cpu_vendor() accessible from Xen code (Juergen Gross) {CVE-2024-53241}
  - xen/netfront: fix crash when removing device (Juergen Gross) [Orabug: 37427541] {CVE-2024-53240}
  - Revert "parisc: fix a possible DMA corruption" (Greg Kroah-Hartman)
  - tracing/kprobes: Skip symbol counting logic for module symbols in create_local_trace_kprobe() (Nikolay Kuratov)
  - bpf: sync_linked_regs() must preserve subreg_def (Eduard Zingerman) [Orabug: 37388801] {CVE-2024-53125}
  - blk-iocost: Avoid using clamp() on inuse in __propagate_weights() (Nathan Chancellor)
  - ACPICA: events/evxfregn: don't release the ContextMutex that was never acquired (Daniil Tatianin)
  - team: Fix feature propagation of NETIF_F_GSO_ENCAP_ALL (Daniel Borkmann)
  - bonding: Fix feature propagation of NETIF_F_GSO_ENCAP_ALL (Daniel Borkmann)
  - net/sched: netem: account for backlog updates from child qdisc (Martin Ottens) [Orabug: 37462137] {CVE-2024-56770}
  - Documentation: PM: Clarify pm_runtime_resume_and_get() return value (Paul Barker)
  - qca_spi: Make driver probing reliable (Stefan Wahren)
  - qca_spi: Fix clock speed for multiple QCA7000 (Stefan Wahren)
  - cxgb4: use port number to set mac addr (Anumula Murali Mohan Reddy)
  - ACPI: resource: Fix memory resource type union access (Ilpo Järvinen)
  - net: sparx5: fix the maximum frame length register (Daniel Machon)
  - net: sparx5: fix FDMA performance issue (Daniel Machon)
  - net: lapb: increase LAPB_HEADER_LEN (Eric Dumazet) {CVE-2024-56659}
  - ptp: kvm: x86: Return EOPNOTSUPP instead of ENODEV from kvm_arch_ptp_init() (Thomas Weißschuh)
  - ptp: kvm: Use decrypted memory in confidential guest on x86 (Jeremi Piotrowski)
  - selftests: mlxsw: sharedbuffer: Remove duplicate test cases (Danielle Ratson)
  - selftests: mlxsw: sharedbuffer: Remove h1 ingress test case (Danielle Ratson)
  - tipc: fix NULL deref in cleanup_bearer() (Eric Dumazet) [Orabug: 37522548] {CVE-2024-56661}
  - batman-adv: Do not let TT changes list grows indefinitely (Remi Pommarel)
  - batman-adv: Remove uninitialized data in full table TT response (Remi Pommarel)
  - batman-adv: Do not send uninitialized TT changes (Remi Pommarel)
  - acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl (Surajsonawane2415) [Orabug: 37434246] {CVE-2024-56662}
  - exfat: fix potential deadlock on __exfat_get_dentry_set (Sungjong Seo) [Orabug: 36964279] {CVE-2024-42315}
  - virtio/vsock: Fix accept_queue memory leak (Michal Luczaj) [Orabug: 37388777] {CVE-2024-53119}
  - bpf, sockmap: Fix update element with same (Michal Luczaj)
  - xfs: fix scrub tracepoints when inode-rooted btrees are involved (Darrick J Wong)
  - xfs: return from xfs_symlink_verify early on V4 filesystems (Darrick J Wong)
  - xfs: don't drop errno values when we fail to ficlone the entire range (Darrick J Wong)
  - xfs: update btree keys correctly when _insrec splits an inode root block (Darrick J Wong)
  - drm/i915: Fix memory leak by correcting cache object name in error handler (Jiasheng Jiang)
  - usb: gadget: u_serial: Fix the issue that gs_start_io crashed due to accessing null pointer (Lianqin Hu) [Orabug: 37434263] {CVE-2024-56670}
  - usb: ehci-hcd: fix call balance of clocks handling routines (Vitalii Mordan)
  - usb: dwc2: Fix HCD port connection race (Stefan Wahren)
  - usb: dwc2: hcd: Fix GetPortStatus & SetPortFeature (Stefan Wahren)
  - usb: dwc2: Fix HCD resume (Stefan Wahren)
  - ata: sata_highbank: fix OF node reference leak in highbank_initialize_phys() (Joe Hattori)
  - usb: host: max3421-hcd: Correctly abort a USB request. (Mark Tomlinson)
  - ALSA: usb-audio: Add implicit feedback quirk for Yamaha THR5 (Jaakko Salo)
  - tcp: check space before adding MPTCP SYN options (Moyuanhao)
  - LTS version: v5.15.174 (Vijayendra Suman)
  - Bluetooth: hci_core: Fix calling mgmt_device_connected (Luiz Augusto Von Dentz)
  - net/smc: Fix af_ops of child socket pointing to released memory (Karsten Graul)
  - media: venus: vdec: fixed possible memory leak issue (Ameer Hamza)
  - serial: amba-pl011: fix build regression (Arnd Bergmann)
  - drm/amdgpu: rework resume handling for display (v2) (Alex Deucher)
  - drm/amd/display: Correct the defined value for AMDGPU_DMUB_NOTIFICATION_MAX (Wayne Lin) [Orabug: 37159692] {CVE-2024-46871}
  - net: dsa: microchip: correct KSZ8795 static MAC table access (Tristram Ha)
  - Bluetooth: L2CAP: Fix uaf in l2cap_connect (Luiz Augusto Von Dentz) [Orabug: 37206073] {CVE-2024-49950}
  - arm64: smccc: Remove broken support for SMCCCv1.3 SVE discard hint (Mark Rutland)
  - arm64/sve: Discard stale CPU state when handling SVE traps (Mark Brown) [Orabug: 37298722] {CVE-2024-50275}
  - gve: Fixes for napi_poll when budget is 0 (Ziwei Xiao)
  - scsi: core: Fix scsi_mode_select() buffer length handling (Damien Le Moal)
  - Revert "drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read()" (Zhang Zekun)
  - fou: remove warn in gue_gro_receive on unsupported protocol (Willem De Bruijn) {CVE-2024-44940}
  - ima: Fix use-after-free on a dentry's dname.name (Stefan Berger) [Orabug: 36835557] {CVE-2024-39494}
  - crypto: hisilicon/qm - inject error before stopping queue (Weili Qian) {CVE-2024-47730}
  - drm/amd/display: Check BIOS images before it is used (Alex Hung) [Orabug: 37116330] {CVE-2024-46809}
  - mmc: mtk-sd: Fix error handle of probe function (Andy-Ld Lu)
  - xhci: dbc: Fix STALL transfer event handling (Mathias Nyman)
  - mm/damon/vaddr: fix issue in damon_va_evenly_split_region() (Zheng Yejian)
  - mm/damon/vaddr-test: split a test function having >1024 bytes frame size (Seongjae Park)
  - jffs2: Fix rtime decompressor (Richard Weinberger)
  - jffs2: Prevent rtime decompress memory corruption (Kinsey Moore) [Orabug: 37472397] {CVE-2024-57850}
  - KVM: arm64: vgic-its: Clear ITE when DISCARD frees an ITE (Kunkun Jiang)
  - KVM: arm64: vgic-its: Clear DTE when MAPD unmaps a device (Kunkun Jiang)
  - KVM: arm64: vgic-its: Add a data length check in vgic_its_save_* (Jing Zhang)
  - tracing/eprobe: Fix to release eprobe when failed to add dyn_event (Masami Hiramatsu)
  - btrfs: fix missing snapshot drew unlock when root is dead during swap activation (Filipe Manana)
  - sched/core: Prevent wakeup of ksoftirqd during idle load balance (K Prateek Nayak)
  - sched/fair: Check idle_cpu() before need_resched() to detect ilb CPU turning busy (K Prateek Nayak)
  - sched/fair: Add NOHZ balancer flag for nohz.next_balance updates (Valentin Schneider)
  - sched/core: Remove the unnecessary need_resched() check in nohz_csd_func() (K Prateek Nayak)
  - modpost: Add .irqentry.text to OTHER_SECTIONS (Thomas Gleixner)
  - modpost: Include '.text.*' in TEXT_SECTIONS (Nathan Chancellor)
  - misc: eeprom: eeprom_93cx6: Add quirk for extra read clock cycle (Parker Newman)
  - powerpc/prom_init: Fixup missing powermac #size-cells (Michael Ellerman) {CVE-2024-56781}
  - MIPS: Loongson64: DTS: Really fix PCIe port nodes for ls7a (Xi Ruoyao) {CVE-2024-56785}
  - usb: chipidea: udc: handle USB Error Interrupt if IOC not set (Xu Yang)
  - i3c: Use i3cdev->desc->info instead of calling i3c_device_get_info() to avoid deadlock (Defa Li) {CVE-2024-43098}
  - PCI: Add ACS quirk for Wangxun FF5xxx NICs (Mengyuan Lou)
  - PCI: Add 'reset_subordinate' to reset hierarchy below bridge (Keith Busch)
  - PCI: Detect and trust built-in Thunderbolt chips (Esther Shimanovich)
  - i3c: mipi-i3c-hci: Mask ring interrupts before ring stop request (Jarkko Nikula) {CVE-2024-45828}
  - f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode. (Qi Han) {CVE-2024-56586}
  - nvdimm: rectify the illogical code within nd_dax_probe() (Yi Yang)
  - pinctrl: qcom-pmic-gpio: add support for PM8937 (Barnabás Czémán)
  - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Kai Mäkisara)
  - scsi: st: Don't modify unknown block number in MTIOCGET (Kai Mäkisara)
  - leds: class: Protect brightness_show() with led_cdev->led_access mutex (Mukesh Ojha) [Orabug: 37433867] {CVE-2024-56587}
  - scsi: hisi_sas: Add cond_resched() for no forced preemption model (Yihang Li) [Orabug: 37433881] {CVE-2024-56589}
  - tracing: Use atomic64_inc_return() in trace_clock_counter() (Uros Bizjak)
  - pinctrl: freescale: fix COMPILE_TEST error with PINCTRL_IMX_SCU (Esben Haabendal)
  - netpoll: Use rcu_access_pointer() in __netpoll_setup (Breno Leitao)
  - net/neighbor: clear error in case strict check is not set (Jakub Kicinski)
  - rocker: fix link status detection in rocker_carrier_init() (Dmitry Antipov)
  - ASoC: hdmi-codec: reorder channel allocation list (Jonas Karlman)
  - Bluetooth: hci_core: Fix not checking skb length on hci_acldata_packet (Luiz Augusto Von Dentz) [Orabug: 37433887] {CVE-2024-56590}
  - wifi: brcmfmac: Fix oops due to NULL pointer dereference in brcmf_sdiod_sglist_rw() (Norbert Van Bolhuis) [Orabug: 37433907] {CVE-2024-56593}
  - wifi: ipw2x00: libipw_rx_any(): fix bad alignment (Jiapeng Chong)
  - drm/amdgpu: set the right AMDGPU sg segment limitation (Prike Liang) [Orabug: 37433913] {CVE-2024-56594}
  - drm/amdgpu: skip amdgpu_device_cache_pci_state under sriov (Victor Zhao)
  - jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree (Nihar Chaithanya) {CVE-2024-56595}
  - jfs: fix array-index-out-of-bounds in jfs_readdir (Ghanshyam Agrawal) {CVE-2024-56596}
  - jfs: fix shift-out-of-bounds in dbSplit (Ghanshyam Agrawal) {CVE-2024-56597}
  - jfs: array-index-out-of-bounds fix in dtReadFirst (Ghanshyam Agrawal) {CVE-2024-56598}
  - dma-debug: fix a possible deadlock on radix_lock (Levi Yun) {CVE-2024-47143}
  - drm/amdgpu: refine error handling in amdgpu_ttm_tt_pin_userptr (Lang Yu)
  - drm/amdgpu: Dereference the ATCS ACPI buffer (Prike Liang)
  - drm/amdgpu: clear RB_OVERFLOW bit when enabling interrupts for vega20_ih (Victor Lu)
  - drm/panel: simple: Add Microchip AC69T88A LVDS Display panel (Manikandan Muralidharan)
  - wifi: ath5k: add PCI ID for Arcadyan devices (Rosen Penev)
  - wifi: ath5k: add PCI ID for SX76X (Rosen Penev)
  - net: inet6: do not leave a dangling sk pointer in inet6_create() (Ignat Korchagin) [Orabug: 37433954] {CVE-2024-56600}
  - net: inet: do not leave a dangling sk pointer in inet_create() (Ignat Korchagin) [Orabug: 37433961] {CVE-2024-56601}
  - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Ignat Korchagin) [Orabug: 37433968] {CVE-2024-56602}
  - net: af_can: do not leave a dangling sk pointer in can_create() (Ignat Korchagin) [Orabug: 37433975] {CVE-2024-56603}
  - Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create() (Ignat Korchagin) [Orabug: 37433989] {CVE-2024-56605}
  - af_packet: avoid erroring out after sock_init_data() in packet_create() (Ignat Korchagin) [Orabug: 37433995] {CVE-2024-56606}
  - net/sched: cbs: Fix integer overflow in cbs_set_port_rate() (Elena Salomatkina)
  - net: ethernet: fs_enet: Use %pa to format resource_size_t (Simon Horman)
  - net: fec_mpc52xx_phy: Use %pa to format resource_size_t (Simon Horman)
  - samples/bpf: Fix a resource leak (Zhujun2)
  - r8169: don't apply UDP padding quirk on RTL8126A (Heiner Kallweit)
  - drm/radeon/r600_cs: Fix possible int overflow in r600_packet3_check() (Igor Artemiev)
  - drm/mcde: Enable module autoloading (Liao Chen)
  - drm: panel-orientation-quirks: Add quirk for AYA NEO 2 model (Joaquín Ignacio Aramendía)
  - drm/vc4: hvs: Set AXI panic modes for the HVS (Dave Stevenson)
  - soc: imx8m: Probe the SoC driver as platform driver (Marek Vasut) {CVE-2024-56787}
  - media: cx231xx: Add support for Dexatek USB Video Grabber 1d19:6108 (Rohan Barar)
  - media: uvcvideo: Add a quirk for the Kaiweets KTI-W02 infrared camera (David Given)
  - kcsan: Turn report_filterlist_lock into a raw_spinlock (Marco Elver) {CVE-2024-56610}
  - kselftest/arm64: Don't leak pipe fds in pac.exec_sign_all() (Mark Brown)
  - btrfs: avoid unnecessary device path update for the same device (Qu Wenruo)
  - s390/cpum_sf: Handle CPU hotplug remove during sampling (Thomas Richter) {CVE-2024-57849}
  - epoll: annotate racy check (Christian Brauner)
  - iommu/arm-smmu: Defer probe of clients after smmu device bound (Pratyush Brahma) [Orabug: 37433775] {CVE-2024-56568}
  - ocfs2: update seq_file index in ocfs2_dlm_seq_next (Wengang Wang)
  - mmc: core: Further prevent card detect during shutdown (Ulf Hansson)
  - mmc: sdhci-pci: Add DMI quirk for missing CD GPIO on Vexia Edu Atla 10 tablet (Hans de Goede)
  - regmap: detach regmap from dev on regmap_exit (Cosmin Tanislav)
  - xsk: fix OOB map writes when deleting elements (Maciej Fijalkowski) [Orabug: 37434040] {CVE-2024-56614}
  - dma-buf: fix dma_fence_array_signaled v4 (Christian König)
  - bpf: fix OOB devmap writes when deleting elements (Maciej Fijalkowski) [Orabug: 37434046] {CVE-2024-56615}
  - bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again (Liequan Che) [Orabug: 37472224] {CVE-2024-48881}
  - nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry() (Ryusuke Konishi) {CVE-2024-56619}
  - scsi: ufs: core: sysfs: Prevent div by zero (Gwendal Grignou) [Orabug: 37434075] {CVE-2024-56622}
  - scsi: qla2xxx: Remove check req_sg_cnt should be equal to rsp_sg_cnt (Saurav Kashyap)
  - scsi: qla2xxx: Fix use after free on unload (Quinn Tran) [Orabug: 37434078] {CVE-2024-56623}
  - scsi: qla2xxx: Supported speed displayed incorrectly for VPorts (Anil Gurumurthy)
  - scsi: qla2xxx: Fix NVMe and NPIV connect issue (Quinn Tran)
  - ALSA: hda/realtek: Add support for Samsung Galaxy Book3 360 (NP730QFG) (Sahas Leelodharry)
  - ALSA: hda/realtek: Enable mute and micmute LED on HP ProBook 430 G8 (Nazar Bilinskyi)
  - ALSA: usb-audio: add mixer mapping for Corsair HS80 (Marie Ramlow)
  - arm64: ptrace: fix partial SETREGSET for NT_ARM_TAGGED_ADDR_CTRL (Mark Rutland) [Orabug: 37472409] {CVE-2024-57874}
  - tracing: Fix cmp_entries_dup() to respect sort() comparison rules (Kuan-Wei Chiu)
  - can: dev: can_set_termination(): allow sleeping GPIOs (Marc Kleine-Budde) [Orabug: 37434086] {CVE-2024-56625}
  - watchdog: rti: of: honor timeout-sec property (Alexander Sverdlin)
  - HID: wacom: fix when get product name maybe null pointer (Yuli Wang) [Orabug: 37434107] {CVE-2024-56629}
  - bpf: Fix exact match conditions in trie_get_next_key() (Hou Tao)
  - bpf: Handle BPF_EXIST and BPF_NOEXIST for LPM trie (Hou Tao)
  - ocfs2: free inode when ocfs2_get_init_inode() fails (Tetsuo Handa) [Orabug: 37434112] {CVE-2024-56630}
  - drm/v3d: Enable Performance Counters before clearing them (Maíra Canal)
  - spi: mpc52xx: Add cancel_work_sync before module remove (Pei Xiao) {CVE-2024-50051}
  - tools: Override makefile ARCH variable if defined, but empty (Björn Töpel)
  - ALSA: usb-audio: Notify xrun for low-latency mode (Takashi Iwai)
  - ALSA: pcm: Avoid reference to status->state (Takashi Iwai)
  - ALSA: pcm: Add more disconnection checks at file ops (Takashi Iwai)
  - tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg (Zijian Zhang) [Orabug: 37434126] {CVE-2024-56633}
  - drm/sti: Add __iomem for mixer_dbg_mxn's parameter (Pei Xiao)
  - bpftool: fix potential NULL pointer dereferencing in prog_dump() (Amir Mohammadi)
  - bpftool: Remove asserts from JIT disassembler (Quentin Monnet)
  - serial: amba-pl011: Fix RX stall when DMA is used (Kartik)
  - serial: amba-pl011: Use port lock wrappers (Thomas Gleixner)
  - dt-bindings: serial: rs485: Fix rs485-rts-delay property (Michal Simek)
  - dt_bindings: rs485: Correct delay values (Lino Sanfilippo)
  - gpio: grgpio: Add NULL check in grgpio_probe (Charles Han) {CVE-2024-56634}
  - gpio: grgpio: use a helper variable to store the address of ofdev->dev (Bartosz Golaszewski)
  - geneve: do not assume mac header is set in geneve_xmit_skb() (Eric Dumazet) [Orabug: 37434137] {CVE-2024-56636}
  - ethtool: Fix wrong mod state in case of verbose and no_mask bitset (Kory Maincent)
  - netfilter: nft_set_hash: skip duplicated elements pending gc run (Pablo Neira Ayuso)
  - netfilter: ipset: Hold module reference while requesting a module (Phil Sutter) [Orabug: 37434142] {CVE-2024-56637}
  - net: sched: fix erspan_opt settings in cls_flower (Xin Long)
  - igb: Fix potential invalid memory access in igb_init_module() (Yuan Can) [Orabug: 37472255] {CVE-2024-52332}
  - net/qed: allow old cards not supporting "num_images" to work (Louis Leseur)
  - net/smc: fix LGR and link use-after-free issue (Wen Gu) {CVE-2024-56640}
  - net/smc: Limit backlog connections (D Wythe)
  - tipc: Fix use-after-free of kernel socket in cleanup_bearer(). (Kuniyuki Iwashima) [Orabug: 37434160] {CVE-2024-56642}
  - dccp: Fix memory leak in dccp_feat_change_recv (Ivan Solodovnikov) [Orabug: 37434167] {CVE-2024-56643}
  - net/ipv6: release expired exception dst cached in socket (Jiri Wiesner) [Orabug: 37434172] {CVE-2024-56644}
  - can: j1939: j1939_session_new(): fix skb reference counting (Dmitry Antipov) [Orabug: 37434180] {CVE-2024-56645}
  - net: hsr: avoid potential out-of-bound access in fill_frame_info() (Eric Dumazet) [Orabug: 37434192] {CVE-2024-56648}
  - net/sched: tbf: correct backlog statistic for GSO packets (Martin Ottens)
  - ptp: Add error handling for adjfine callback in ptp_clock_adjtime (Ajay Kaher)
  - netfilter: x_tables: fix LED ID check in led_tg_check() (Dmitry Antipov) [Orabug: 37434199] {CVE-2024-56650}
  - ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (Jinghao Jia) [Orabug: 37472265] {CVE-2024-53680}
  - can: ems_usb: ems_usb_rx_err(): fix {rx,tx}_errors statistics (Dario Binacchi)
  - can: sun4i_can: sun4i_can_err(): fix {rx,tx}_errors statistics (Dario Binacchi)
  - can: ifi_canfd: ifi_canfd_handle_lec_err(): fix {rx,tx}_errors statistics (Dario Binacchi)
  - can: m_can: m_can_handle_lec_err(): fix {rx,tx}_errors statistics (Dario Binacchi)
  - can: sun4i_can: sun4i_can_err(): call can_change_state() even if cf is NULL (Dario Binacchi)
  - can: c_can: c_can_handle_bus_err(): update statistics if skb allocation fails (Dario Binacchi)
  - can: do not increase rx statistics when generating a CAN rx error message frame (Vincent Mailhol)
  - can: peak_usb: CANFD: store 64-bits hw timestamps (Stephane Grosjean)
  - watchdog: mediatek: Make sure system reset gets asserted in mtk_wdt_restart() (Yassine Oudjana)
  - iTCO_wdt: mask NMI_NOW bit for update_no_reboot_bit() call (Oleksandr Ocheretnyi)
  - drm/etnaviv: flush shader L1 cache after user commandstream (Lucas Stach)
  - drm/sti: avoid potential dereference of error pointers (Ma Ke) {CVE-2024-56776}
  - drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check (Ma Ke) {CVE-2024-56777}
  - drm/sti: avoid potential dereference of error pointers in sti_hqvdp_atomic_check (Ma Ke) {CVE-2024-56778}
  - btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc() (Josef Bacik) [Orabug: 37116498] {CVE-2024-46841}
  - nfsd: fix nfs4_openowner leak when concurrent nfsd4_open occur (Yangerkun) [Orabug: 37462182] {CVE-2024-56779}
  - nfsd: make sure exp active before svc_export_show (Yangerkun) [Orabug: 37433743] {CVE-2024-56558}
  - PCI: rockchip-ep: Fix address translation unit programming (Damien Le Moal)
  - dm thin: Add missing destroy_work_on_stack() (Yuan Can)
  - ovl: properly handle large files in ovl_security_fileattr (Oleksandr Tymoshenko)
  - PCI: keystone: Add link up check to ks_pcie_other_map_bus() (Kishon Vijay Abraham I)
  - i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs() (Frank Li) {CVE-2024-56562}
  - scsi: ufs: exynos: Fix hibern8 notify callbacks (Peter Griffin)
  - util_macros.h: fix/rework find_closest() macros (Alexandru Ardelean)
  - s390/entry: Mark IRQ entries to fix stack depot warnings (Vasily Gorbik) {CVE-2024-57838}
  - ad7780: fix division by zero in ad7780_write_raw() (Zicheng Qu) {CVE-2024-56567}
  - btrfs: ref-verify: fix use-after-free after invalid ref action (Filipe Manana) {CVE-2024-56581}
  - btrfs: add a sanity check for btrfs root in btrfs_search_slot() (Lizhi Xu) [Orabug: 37462151] {CVE-2024-56774}
  - btrfs: add might_sleep() annotations (Chenxiaosong)
  - quota: flush quota_release_work upon quota writeback (Ojaswin Mujoo) [Orabug: 37462190] {CVE-2024-56780}
  - xfs: remove unknown compat feature check in superblock write validation (Long Li)
  - xfs: fix log recovery when unknown rocompat bits are set (Darrick J Wong)
  - ASoC: fsl_micfil: fix the naming style for mask definition (Shengjiu Wang)
  - sh: intc: Fix use-after-free bug in register_intc_controller() (Dan Carpenter) {CVE-2024-53165}
  - sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport (Liu Jian) [Orabug: 37434313] {CVE-2024-56688}
  - sunrpc: remove unnecessary test in rpc_task_set_client() (Thiago Rafael Becker)
  - nfs: ignore SB_RDONLY when mounting nfs (Li Lingfeng)
  - modpost: remove incorrect code in do_eisa_entry() (Masahiro Yamada)
  - rtc: ab-eoz9: don't fail temperature reads on undervoltage notification (Maxime Chevallier)
  - 9p/xen: fix release of IRQ (Alex Zenla) {CVE-2024-56704}
  - 9p/xen: fix init sequence (Alex Zenla)
  - block: return unsigned int from bdev_io_min (Christoph Hellwig)
  - jffs2: fix use of uninitialized variable (Qingfang Deng)
  - ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit (Waqar Hameed) [Orabug: 37433413] {CVE-2024-53171}
  - ubi: fastmap: Fix duplicate slab cache names while attaching (Zhihao Cheng) [Orabug: 37433417] {CVE-2024-53172}
  - ubifs: Correct the total block count by deducting journal reservation (Zhihao Cheng)
  - rtc: check if __rtc_read_time was successful in rtc_timer_do_work() (Yongliang Gao) [Orabug: 37434455] {CVE-2024-56739}
  - rtc: abx80x: Fix WDT bit position of the status register (Nobuhiro Iwamatsu)
  - rtc: st-lpc: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)
  - NFSv4.0: Fix a use-after-free problem in the asynchronous open() (Trond Myklebust) [Orabug: 37433425] {CVE-2024-53173}
  - um: Always dump trace for specified task in show_stack (Tiwei Bie)
  - um: Fix the return value of elf_core_copy_task_fpregs (Tiwei Bie)
  - um: Fix potential integer overflow during physmem setup (Tiwei Bie) {CVE-2024-53145}
  - rpmsg: glink: Propagate TX failures in intentless mode as well (Bjorn Andersson)
  - SUNRPC: make sure cache entry active before cache_show (Yangerkun) [Orabug: 37433432] {CVE-2024-53174}
  - NFSD: Prevent a potential integer overflow (Chuck Lever) [Orabug: 37427469] {CVE-2024-53146}
  - lib: string_helpers: silence snprintf() output truncation warning (Bartosz Golaszewski)
  - usb: dwc3: gadget: Fix looping of queued SG entries (Thinh Nguyen) [Orabug: 37434350] {CVE-2024-56698}
  - usb: dwc3: gadget: Fix checking for number of TRBs left (Thinh Nguyen)
  - ALSA: hda/realtek: Apply quirk for Medion E15433 (Takashi Iwai)
  - ALSA: hda/realtek: Fix Internal Speaker and Mic boost of Infinix Y4 Max (Dinesh Kumar)
  - ALSA: hda/realtek: Set PCBeep to default value for ALC274 (Kailang Yang)
  - ALSA: hda/realtek: Update ALC225 depop procedure (Kailang Yang)
  - ALSA: pcm: Add sanity NULL check for the default mmap fault handler (Takashi Iwai) [Orabug: 37433460] {CVE-2024-53180}
  - media: v4l2-core: v4l2-dv-timings: check cvt/gtf result (Hans Verkuil)
  - soc: fsl: rcpm: fix missing of_node_put() in copy_ippdexpcr1_setting() (Javier Carrasco)
  - media: wl128x: Fix atomicity violation in fmc_send_cmd() (Qiu-Ji Chen) {CVE-2024-56700}
  - HID: wacom: Interpret tilt data from Intuos Pro BT as signed values (Jason Gerecke)
  - block: fix ordering between checking BLK_MQ_S_STOPPED request adding (Muchun Song)
  - arm64: tls: Fix context-switching of tpidrro_el0 when kpti is enabled (Will Deacon)
  - sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK (Huacai Chen)
  - um: vector: Do not use drvdata in release (Tiwei Bie) {CVE-2024-53181}
  - serial: 8250: omap: Move pm_runtime_get_sync (Bin Liu)
  - um: net: Do not use drvdata in release (Tiwei Bie) {CVE-2024-53183}
  - um: ubd: Do not use drvdata in release (Tiwei Bie) {CVE-2024-53184}
  - ubi: wl: Put source PEB into correct list if trying locking LEB failed (Zhihao Cheng)
  - platform/chrome: cros_ec_typec: fix missing fwnode reference decrement (Javier Carrasco)
  - cpufreq: mediatek-hw: Fix wrong return value in mtk_cpufreq_get_cpu_power() (Jinjie Ruan)
  - mtd: spi-nor: core: replace dummy buswidth from addr to data (Cheng Ming Lin)
  - spi: Fix acpi deferred irq probe (Stanislaw Gruszka)
  - netfilter: ipset: add missing range check in bitmap_ip_uadt (Jeongjun Park) [Orabug: 37388866] {CVE-2024-53141}
  - gpio: exar: set value when external pull-up or pull-down is present (Sai Kumar Cholleti)
  - Revert "serial: sh-sci: Clean sci_ports[0] after at earlycon exit" (Greg Kroah-Hartman)
  - serial: sh-sci: Clean sci_ports[0] after at earlycon exit (Claudiu Beznea)
  - Revert "usb: gadget: composite: fix OS descriptors w_value logic" (Michal Vrastil)
  - driver core: bus: Fix double free in driver API bus_register() (Zijun Hu) [Orabug: 37206509] {CVE-2024-50055}
  - usb: xhci: Fix TD invalidation under pending Set TR Dequeue (Michał Pecio)
  - Bluetooth: Fix type of len in rfcomm_sock_getsockopt{,_old}() (Andrej Shadura)
  - exfat: fix uninit-value in __exfat_get_dentry_set (Namjae Jeon)
  - locking/lockdep: Avoid creating new name string literals in lockdep_set_subclass() (Ahmed Ehab)
  - tty: ldsic: fix tty_ldisc_autoload sysctl's proc_handler (Nicolas Bouchinet)
  - apparmor: test: Fix memory leak for aa_unpack_strdup() (Jinjie Ruan)
  - comedi: Flush partial mappings in error case (Jann Horn) {CVE-2024-53148}
  - fsnotify: fix sending inotify event with unexpected filename (Amir Goldstein)
  - PCI: Fix use-after-free of slot->bus on hot remove (Lukas Wunner) [Orabug: 37433515] {CVE-2024-53194}
  - KVM: arm64: Ignore PMCNTENSET_EL0 while checking for overflow status (Raghavendra Rao Ananta)
  - powerpc/pseries: Fix KVM guest detection for disabling hardlockup detector (Gautam Menghani)
  - crypto: x86/aegis128 - access 32-bit arguments as 32-bit (Eric Biggers)
  - perf/x86/intel/pt: Fix buffer full but size is 0 case (Adrian Hunter)
  - ASoC: codecs: Fix atomicity violation in snd_soc_component_get_drvdata() (Qiu-Ji Chen)
  - jfs: xattr: check invalid xattr size more strictly (Artem Sadovnikov)
  - ext4: fix FS_IOC_GETFSMAP handling (Theodore Ts'O)
  - ext4: supress data-race warnings in ext4_free_inodes_{count,set}() (Jeongjun Park)
  - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Benoît Sevens) [Orabug: 37433531] {CVE-2024-53197}
  - soc: qcom: socinfo: fix revision check in qcom_socinfo_probe() (Manikanta Mylavarapu)
  - ASoC: Intel: sst: Fix used of uninitialized ctx to log an error (Hans de Goede)
  - Revert "drivers: clk: zynqmp: update divider round rate logic" (Joel Guittet)
  - usb: ehci-spear: fix call balance of sehci clk handling routines (Vitalii Mordan)
  - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Takashi Iwai) [Orabug: 37427488] {CVE-2024-53150}
  - xen: Fix the issue of resource not being properly released in xenbus_dev_probe() (Qiu-Ji Chen) [Orabug: 37433539] {CVE-2024-53198}
  - ksmbd: fix slab-use-after-free in smb3_preauth_hash_rsp (Namjae Jeon) {CVE-2024-50283}
  - parisc: fix a possible DMA corruption (Mikulas Patocka) {CVE-2024-44949}
  - apparmor: fix 'Do simple duplicate message elimination' (Chao Liu)
  - ALSA: hda/realtek: Update ALC256 depop procedure (Kailang Yang)
  - counter: stm32-timer-cnt: Add check for clk_enable() (Jiasheng Jiang)
  - misc: apds990x: Fix missing pm_runtime_disable() (Jinjie Ruan)
  - USB: chaoskey: Fix possible deadlock chaoskey_list_lock (Edward Adam Davis)
  - USB: chaoskey: fail open after removal (Oliver Neukum)
  - usb: yurex: make waiting on yurex_write interruptible (Oliver Neukum)
  - usb: using mutex lock and supporting O_NONBLOCK flag in iowarrior_read() (Jeongjun Park)
  - iio: light: al3010: Fix an error handling path in al3010_probe() (Christophe Jaillet)
  - bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down (Saravanan Vajravel)
  - net: hsr: fix hsr_init_sk() vs network/transport headers. (Eric Dumazet)
  - spi: atmel-quadspi: Fix register name in verbose logging function (Csókás Bence)
  - octeontx2-af: RPM: Fix mismatch in lmac type (Hariprasad Kelam)
  - net: stmmac: dwmac-socfpga: Set RX watchdog interrupt as broken (Maxime Chevallier)
  - marvell: pxa168_eth: fix call balance of pep->clk handling routines (Vitalii Mordan)
  - net: mdio-ipq4019: add missing error check (Rosen Penev)
  - net: usb: lan78xx: Fix refcounting and autosuspend on invalid WoL configuration (Oleksij Rempel)
  - tg3: Set coherent DMA mask bits to 31 for BCM57766 chipsets (Pavan Chebbi)
  - net: usb: lan78xx: Fix memory leak on device unplug by freeing PHY device (Oleksij Rempel)
  - power: supply: bq27xxx: Fix registers of bq27426 (Barnabás Czémán)
  - power: supply: core: Remove might_sleep() from power_supply_put() (Bart Van Assche)
  - fs_parser: update mount_api doc to match function signature (Randy Dunlap)
  - vfio/pci: Properly hide first-in-list PCIe extended capability (Avihai Horon) [Orabug: 37433577] {CVE-2024-53214}
  - selftests/mount_setattr: Fix failures on 64K PAGE_SIZE kernels (Michael Ellerman)
  - vdpa/mlx5: Fix suboptimal range on iotlb iteration (Si-Wei Liu)
  - hwmon: (tps23861) Fix reporting of negative temperatures (Murad Masimov)
  - NFSD: Fix nfsd4_shutdown_copy() (Chuck Lever)
  - svcrdma: fix miss destroy percpu_counter in svc_rdma_proc_init() (Ye Bin) [Orabug: 37433585] {CVE-2024-53215}
  - sunrpc: simplify two-level sysctl registration for svcrdma_parm_table (Luis Chamberlain)
  - NFSD: Cap the number of bytes copied by nfs4_reset_recoverydir() (Chuck Lever)
  - NFSD: Prevent NULL dereference in nfsd4_process_cb_update() (Chuck Lever) [Orabug: 37433593] {CVE-2024-53217}
  - remoteproc: qcom_q6v5_mss: Re-order writes to the IMEM region (Sibi Sankar)
  - rpmsg: glink: use only lower 16-bits of param2 for CMD_OPEN name length (Jonathan Marek)
  - rpmsg: glink: Fix GLINK command prefix (Bjorn Andersson)
  - rpmsg: glink: Send READ_NOTIFY command in FIFO full case (Arun Kumar Neelakantam)
  - rpmsg: glink: Add TX_DATA_CONT command while sending (Arun Kumar Neelakantam)
  - perf trace: Avoid garbage when not printing a syscall's arguments (Benjamin Peterson)
  - perf trace: Do not lose last events in a race (Benjamin Peterson)
  - svcrdma: Address an integer overflow (Chuck Lever) [Orabug: 37427495] {CVE-2024-53151}
  - m68k: coldfire/device.c: only build FEC when HW macros are defined (Antonio Quartulli)
  - m68k: mcfgpio: Fix incorrect register offset for CONFIG_M5441x (Jean-Michel Hautbois)
  - perf trace: avoid garbage when not printing a trace event's arguments (Benjamin Peterson)
  - f2fs: check curseg->inited before write_sum_page in change_curseg (Yongpeng Yang)
  - f2fs: remove the unused flush argument to change_curseg (Christoph Hellwig)
  - f2fs: open code allocate_segment_by_default (Christoph Hellwig)
  - f2fs: remove struct segment_allocation default_salloc_ops (Christoph Hellwig)
  - f2fs: fix the wrong f2fs_bug_on condition in f2fs_do_replace_block (Longping Wei)
  - PCI: cpqphp: Fix PCIBIOS_* return value confusion (Ilpo Järvinen)
  - PCI: cpqphp: Use PCI_POSSIBLE_ERROR() to check config reads (Weiyufeng)
  - perf probe: Correct demangled symbols in C++ program (Leo Yan)
  - perf probe: Fix libdw memory leak (Ian Rogers)
  - PCI: Fix reset_method_store() memory leak (Todd Kjos) [Orabug: 37434474] {CVE-2024-56745}
  - perf cs-etm: Don't flush when packet_queue fills up (James Clark)
  - mailbox: arm_mhuv2: clean up loop in get_irq_chan_comb() (Dan Carpenter)
  - pinctrl: k210: Undef K210_PC_DEFAULT (Zhang Jiao)
  - clk: clk-axi-clkgen: make sure to enable the AXI bus clock (Nuno Sa)
  - dt-bindings: clock: axi-clkgen: include AXI clk (Nuno Sa)
  - fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem() (Zhen Lei) {CVE-2024-56746}
  - fbdev/sh7760fb: Alloc DMA memory from hardware device (Thomas Zimmermann)
  - powerpc/kexec: Fix return of uninitialized variable (Zhang Zekun)
  - powerpc/sstep: make emulate_vsx_load and emulate_vsx_store static (Michal Suchanek)
  - ocfs2: fix uninitialized value in ocfs2_file_read_iter() (Dmitry Antipov) [Orabug: 37427502] {CVE-2024-53155}
  - RDMA/hns: Fix out-of-order issue of requester when setting FENCE (Junxian Huang)
  - scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb() (Zhen Lei) [Orabug: 37434483] {CVE-2024-56747}
  - scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb() (Zhen Lei) [Orabug: 37434488] {CVE-2024-56748}
  - scsi: fusion: Remove unused variable 'rc' (Zeng Heng)
  - scsi: bfa: Fix use-after-free in bfad_im_module_exit() (Ye Bin) [Orabug: 37433629] {CVE-2024-53227}
  - mfd: rt5033: Fix missing regmap_del_irq_chip() (Zhang Changzhong)
  - clk: imx: clk-scu: fix clk enable state save and restore (Aisheng Dong)
  - clk: imx: lpcg-scu: SW workaround for errata (e10858) (Peng Fan)
  - powerpc/pseries: Fix dtl_access_lock to be a rw_semaphore (Michael Ellerman) {CVE-2024-56701}
  - powerpc/mm/fault: Fix kfence page fault reporting (Ritesh Harjani) {CVE-2024-56678}
  - mtd: rawnand: atmel: Fix possible memory leak (Miquel Raynal)
  - cpufreq: loongson2: Unregister platform_driver on failure (Yuan Can)
  - mfd: intel_soc_pmic_bxtwc: Use IRQ domain for PMIC devices (Andy Shevchenko) {CVE-2024-56723}
  - mfd: intel_soc_pmic_bxtwc: Use IRQ domain for TMU device (Andy Shevchenko) {CVE-2024-56724}
  - mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device (Andy Shevchenko) {CVE-2024-56691}
  - mfd: intel_soc_pmic_bxtwc: Use dev_err_probe() (Andy Shevchenko)
  - mfd: da9052-spi: Change read-mask to write-mask (Marcus Folkesson)
  - mfd: tps65010: Use IRQF_NO_AUTOEN flag in request_irq() to fix race (Jinjie Ruan)
  - pinctrl: zynqmp: drop excess struct member description (Bartosz Golaszewski)
  - trace/trace_event_perf: remove duplicate samples on the first tracepoint event (Levi Yun)
  - bpf: fix recursive lock when verdict program return SK_PASS (Jiayuan Chen) [Orabug: 37434615] {CVE-2024-56694}
  - wireguard: selftests: load nf_conntrack if not present (Hangbin Liu)
  - netpoll: Use rcu_access_pointer() in netpoll_poll_lock (Breno Leitao)
  - Bluetooth: fix use-after-free in device_for_each_child() (Dmitry Antipov) [Orabug: 37433653] {CVE-2024-53237}
  - driver core: Introduce device_find_any_child() helper (Andy Shevchenko)
  - ALSA: 6fire: Release resources at card release (Takashi Iwai) [Orabug: 37433659] {CVE-2024-53239}
  - ALSA: caiaq: Use snd_card_free_when_closed() at disconnection (Takashi Iwai) [Orabug: 37433665] {CVE-2024-56531}
  - ALSA: us122l: Use snd_card_free_when_closed() at disconnection (Takashi Iwai) [Orabug: 37433671] {CVE-2024-56532}
  - ALSA: usx2y: Use snd_card_free_when_closed() at disconnection (Takashi Iwai) [Orabug: 37433679] {CVE-2024-56533}
  - net: rfkill: gpio: Add check for clk_enable() (Mingwei Zheng)
  - drm/amdkfd: Fix wrong usage of INIT_WORK() (Yuan Can)
  - selftests: net: really check for bg process completion (Paolo Abeni)
  - bpf, sockmap: Fix sk_msg_reset_curr (Zijian Zhang)
  - bpf, sockmap: Several fixes to bpf_msg_pop_data (Zijian Zhang) [Orabug: 37434418] {CVE-2024-56720}
  - bpf, sockmap: Several fixes to bpf_msg_push_data (Zijian Zhang)
  - selftests/bpf: Add push/pop checking for msg_verify_data in test_sockmap (Zijian Zhang)
  - selftests/bpf: Fix total_bytes in msg_loop_rx in test_sockmap (Zijian Zhang)
  - selftests, bpf: Add one test for sockmap with strparser (Liu Jian)
  - selftests/bpf: Fix SENDPAGE data logic in test_sockmap (Zijian Zhang)
  - selftests/bpf: Add txmsg_pass to pull/push/pop in test_sockmap (Zijian Zhang)
  - netlink: typographical error in nlmsg_type constants definition (Maurice Lambert)
  - netfilter: nf_tables: must hold rcu read lock while iterating object type list (Florian Westphal)
  - netfilter: nf_tables: skip transaction if update object is not implemented (Pablo Neira Ayuso)
  - drm/msm/dpu: cast crtc_clk calculation to u64 in _dpu_core_perf_calc_clk() (Zichen Xie)
  - wifi: wfx: Fix error handling in wfx_core_init() (Yuan Can)
  - drm/etnaviv: hold GPU lock across perfmon sampling (Lucas Stach)
  - drm/etnaviv: fix power register offset on GC300 (Doug Brown)
  - drm/etnaviv: Request pages from DMA32 zone on addressing_limited (Xiaolei Wang)
  - drm/msm/adreno: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)
  - drm/panfrost: Remove unused id_mask from struct panfrost_model (Steven Price)
  - octeontx2-pf: handle otx2_mbox_get_rsp errors in cn10k.c (Dipendra Khadka) {CVE-2024-56726}
  - octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c (Dipendra Khadka) {CVE-2024-56728}
  - octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_common.c (Dipendra Khadka) {CVE-2024-56679}
  - drm: fsl-dcu: enable PIXCLK on LS1021A (Matthias Schiffer)
  - wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan() (Alper Nebi Yasak) [Orabug: 37433694] {CVE-2024-56539}
  - selftests/bpf: Fix txmsg_redir of test_txmsg_pull in test_sockmap (Zijian Zhang)
  - selftests/bpf: Fix msg_verify_data in test_sockmap (Zijian Zhang)
  - drm/bridge: tc358767: Fix link properties discovery (Tomi Valkeinen)
  - netdevsim: copy addresses for both in and out paths (Hangbin Liu)
  - libbpf: fix sym_is_subprog() logic for weak global subprogs (Andrii Nakryiko)
  - bpf: Fix the xdp_adjust_tail sample prog issue (Yuan Chen)
  - libbpf: Fix output .symtab byte-order during linking (Tony Ambardar)
  - drm/bridge: anx7625: Drop EDID cache on bridge power off (Pin-Yen Lin)
  - ASoC: dt-bindings: mt6359: Update generic node name and dmic-mode (Macpaul Lin)
  - ASoC: fsl_micfil: fix regmap_write_bits usage (Shengjiu Wang)
  - ASoC: fsl_micfil: use GENMASK to define register bit fields (Sascha Hauer)
  - ASoC: fsl_micfil: do not define SHIFT/MASK for single bits (Sascha Hauer)
  - ASoC: fsl_micfil: Drop unnecessary register read (Sascha Hauer)
  - dt-bindings: vendor-prefixes: Add NeoFidelity, Inc (Igor Prusov)
  - wifi: ath10k: fix invalid VHT parameters in supported_vht_mcs_rate_nss2 (Baochen Qiang)
  - wifi: ath10k: fix invalid VHT parameters in supported_vht_mcs_rate_nss1 (Baochen Qiang)
  - drm/v3d: Address race-condition in MMU flush (Maíra Canal)
  - drm/imx/ipuv3: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)
  - drm/imx/dcss: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)
  - wifi: mwifiex: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)
  - wifi: p54: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)
  - drm/omap: Fix locking in omap_gem_new_dmabuf() (Tomi Valkeinen)
  - drm/omap: Fix possible NULL dereference (Tomi Valkeinen)
  - wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service() (Jeongjun Park) [Orabug: 37427508] {CVE-2024-53156}
  - drm/mm: Mark drm_mm_interval_tree*() functions with __maybe_unused (Andy Shevchenko)
  - platform/x86: panasonic-laptop: Return errno correctly in show callback (Yao Zi)
  - platform/x86: panasonic-laptop: Replace snprintf in show functions with sysfs_emit (Qing Wang)
  - media: atomisp: Add check for rgby_data memory allocation failure (Li Huafei) {CVE-2024-56705}
  - media: atomisp: remove #ifdef HAS_NO_HMEM (Mauro Carvalho Chehab)
  - media: venus: provide ctx queue lock for ioctl synchronization (Sergey Senozhatsky)
  - venus: venc: add handling for VIDIOC_ENCODER_CMD (Dikshita Agarwal)
  - media: venus : Addition of support for VIDIOC_TRY_ENCODER_CMD (Dikshita Agarwal)
  - media: venus : Addition of EOS Event support for Encoder (Viswanath Boma)
  - media: venus: vdec: decoded picture buffer handling during reconfig sequence (Mansur Alisha Shaik)
  - media: venus: venc: Use pmruntime autosuspend (Stanimir Varbanov)
  - firmware: arm_scpi: Check the DVFS OPP count returned by the firmware (Luo Qiu) [Orabug: 37427514] {CVE-2024-53157}
  - selftests/resctrl: Protect against array overrun during iMC config parsing (Reinette Chatre)
  - arm64: dts: mediatek: mt8183-kukui-jacuzzi: Add supplies for fixed regulators (Chen-Yu Tsai)
  - arm64: dts: mediatek: mt8183-kukui-jacuzzi: Fix DP bridge supply names (Chen-Yu Tsai)
  - arm64: dts: mt8183: jacuzzi: Move panel under aux-bus (Hsin-Yi Wang)
  - arm64: dts: mt8183: jacuzzi: remove unused ddc-i2c-bus (Hsin-Yi Wang)
  - regmap: irq: Set lockdep class for hierarchical IRQ domains (Andy Shevchenko)
  - spi: zynqmp-gqspi: Undo runtime PM changes at driver exit time (Jinjie Ruan)
  - spi: tegra210-quad: Avoid shift-out-of-bounds (Breno Leitao)
  - pmdomain: ti-sci: Add missing of_node_put() for args.np (Zhang Zekun)
  - ARM: dts: cubieboard4: Fix DCDC5 regulator constraints (Andre Przywara)
  - pwm: imx27: Workaround of the pwm output bug when decrease the duty cycle (Clark Wang)
  - arm64: dts: mt8183: Damu: add i2c2's i2c-scl-internal-delay-ns (Daolong Zhu)
  - arm64: dts: mt8183: burnet: add i2c2's i2c-scl-internal-delay-ns (Daolong Zhu)
  - arm64: dts: mt8183: fennel: add i2c2's i2c-scl-internal-delay-ns (Daolong Zhu)
  - cgroup/bpf: only cgroup v2 can be attached by bpf programs (Chen Ridong)
  - Revert "cgroup: Fix memory leak caused by missing cgroup_bpf_offline" (Chen Ridong)
  - arm64: dts: mediatek: mt8173-elm-hana: Add vdd-supply to second source trackpad (Chen-Yu Tsai)
  - arm64: dts: mt8183: kukui: Fix the address of eeprom at i2c4 (Hsin-Te Yuan)
  - arm64: dts: mt8183: krane: Fix the address of eeprom at i2c4 (Hsin-Te Yuan)
  - tpm: fix signed/unsigned bug when checking event logs (Gregory Price)
  - mmc: mmc_spi: drop buggy snprintf() (Bartosz Golaszewski)
  - soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get() (Dan Carpenter) {CVE-2024-53158}
  - soc: ti: smartreflex: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)
  - spi: spi-fsl-lpspi: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)
  - spi: spi-fsl-lpspi: downgrade log level for pio mode (Alexander Stein)
  - clocksource/drivers:sp804: Make user selectable (Mark Brown)
  - kcsan, seqlock: Fix incorrect assumption in read_seqbegin() (Marco Elver)
  - kcsan, seqlock: Support seqcount_latch_t (Marco Elver)
  - seqlock/latch: Provide raw_read_seqcount_latch_retry() (Peter Zijlstra)
  - timekeeping: Consolidate fast timekeeper (Thomas Gleixner)
  - time: Fix references to _msecs_to_jiffies() handling of values (Miguel Ojeda)
  - crypto: cavium - Fix an error handling path in cpt_ucode_load_fw() (Christophe Jaillet)
  - crypto: bcm - add error check in the ahash_hmac_init function (Chen Ridong) [Orabug: 37434297] {CVE-2024-56681}
  - crypto: caam - add error check to caam_rsa_set_priv_key_form (Chen Ridong)
  - EDAC/igen6: Avoid segmentation fault on module unload (Orange Kao) [Orabug: 37434389] {CVE-2024-56708}
  - crypto: cavium - Fix the if condition to exit loop after timeout (Everest K C )
  - crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY (Yi Yang) [Orabug: 37434322] {CVE-2024-56690}
  - EDAC/fsl_ddr: Fix bad bit shift operations (Priyanka Singh)
  - thermal: core: Initialize thermal zones before registering them (Rafael J Wysocki)
  - crypto: qat - remove faulty arbiter config reset (Ahsan Atta)
  - EDAC/bluefield: Fix potential integer overflow (David Thompson) {CVE-2024-53161}
  - firmware: google: Unregister driver_info on failure (Yuan Can)
  - crypto: caam - Fix the pointer passed to caam_qi_shutdown() (Christophe Jaillet) {CVE-2024-56754}
  - hfsplus: don't query the device logical block size multiple times (Thadeu Lima De Souza Cascardo) {CVE-2024-56548}
  - s390/syscalls: Avoid creation of arch/arch/ directory (Masahiro Yamada)
  - acpi/arm64: Adjust error handling procedure in gtdt_parse_timer_block() (Aleksandr Mishin)
  - arm64: fix .data.rel.ro size assertion when CONFIG_LTO_CLANG (Masahiro Yamada)
  - m68k: mvme147: Reinstate early console (Daniel Palmer)
  - m68k: mvme16x: Add and use "mvme16x.h" (Geert Uytterhoeven)
  - m68k: mvme147: Fix SCSI controller IRQ numbers (Daniel Palmer)
  - nvme-pci: fix freeing of the HMB descriptor table (Christoph Hellwig) [Orabug: 37434509] {CVE-2024-56756}
  - initramfs: avoid filename buffer overrun (David Disseldorp) [Orabug: 37388873] {CVE-2024-53142}
  - mips: asm: fix warning when disabling MIPS_FP_SUPPORT (Jonas Gorski)
  - brd: defer automatic disk creation until module initialization succeeds (Yangerkun) [Orabug: 37434341] {CVE-2024-56693}
  - brd: remove brd_devices_mutex mutex (Tetsuo Handa)
  - s390/cio: Do not unregister the subchannel based on DNV (Vineeth Vijayan)
  - kselftest/arm64: mte: fix printf type warnings about longs (Andre Przywara)
  - x86/barrier: Do not serialize MSR accesses on AMD (Borislav Petkov)
  - nvme: fix metadata handling in nvme-passthrough (Puranjay Mohan)
  - cifs: Fix buffer overflow when parsing NFS reparse points (Pali Rohár)
  - rcu-tasks: Idle tasks on offline CPUs are in quiescent states (Paul E Mckenney)
  - ipmr: Fix access to mfc_cache_list without lock held (Breno Leitao)
  - ARM: 9420/1: smp: Fix SMP for xip kernels (Harith George)
  - ALSA: usb-audio: Fix Yamaha P-125 Quirk Entry (Eryk Zagorski)
  - proc/softirqs: replace seq_printf with seq_put_decimal_ull_width (David Wang)
  - ASoC: stm: Prevent potential division by zero in stm32_sai_get_clk_div() (Luo Yifan)
  - ASoC: stm: Prevent potential division by zero in stm32_sai_mclk_round_rate() (Luo Yifan)
  - can: j1939: fix error in J1939 documentation. (Alexander Hölzl)
  - platform/x86: dell-wmi-base: Handle META key Lock/Unlock events (Kurt Borja)
  - platform/x86: dell-smbios-base: Extends support to Alienware products (Kurt Borja)
  - regulator: rk808: Add apply_bit for BUCK3 on RK809 (Mikhail Rudenko)
  - soc: qcom: Add check devm_kasprintf() returned value (Charles Han)
  - net: usb: qmi_wwan: add Quectel RG650V (Benoît Monin)
  - x86/amd_nb: Fix compile-testing without CONFIG_AMD_NB (Arnd Bergmann)
  - ALSA: hda/realtek: Add subwoofer quirk for Infinix ZERO BOOK 13 (Piyush Raj Chouhan)
  - selftests/watchdog-test: Fix system accidentally reset after watchdog-test (Li Zhijian)
  - usb: add support for new USB device ID 0x17EF:0x3098 for the r8152 driver (Benjamin Große)
  - mac80211: fix user-power when emulating chanctx (Ben Greear)
  - wifi: iwlwifi: mvm: Use the sync timepoint API in suspend (Daniel Gabay)
  - ASoC: Intel: sst: Support LPE0F28 ACPI HID (Hans de Goede)
  - ASoC: Intel: bytcr_rt5640: Add DMI quirk for Vexia Edu Atla 10 tablet (Hans de Goede)
  - ASoC: Intel: bytcr_rt5640: Add support for non ACPI instantiated codec (Hans de Goede)
  - NFS: nfs_async_write_reschedule_io must not recurse into the writeback code (Trond Myklebust)
  - mm: resolve faulty mmap_region() error path behaviour (Lorenzo Stoakes) [Orabug: 37331872] {CVE-2024-53096}
  - mm: refactor arch_calc_vm_flag_bits() and arm64 MTE handling (Lorenzo Stoakes)
  - mm: unconditionally close VMAs on error (Lorenzo Stoakes)
  - mm: avoid unsafe VMA hook invocation when error arises on mmap hook (Lorenzo Stoakes)
  - mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Paolo Abeni) [Orabug: 37388789] {CVE-2024-53122}
  - NFSD: Never decrement pending_async_copies on error (Chuck Lever) [Orabug: 37522552] {CVE-2024-53073}
  - NFSD: Initialize struct nfsd4_copy earlier (Chuck Lever) [Orabug: 37522573] {CVE-2024-50241}
  - NFSD: Limit the number of concurrent async COPY operations (Chuck Lever) [Orabug: 37206186,37516381] {CVE-2024-49974}
  - NFSD: Async COPY result needs to return a write verifier (Chuck Lever)
  - NFSD: initialize copy->cp_clp early in nfsd4_copy for use by trace point (Dai Ngo)
  - media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set (Mauro Carvalho Chehab)
  - mmc: sunxi-mmc: Fix A100 compatible description (Andre Przywara)
  - mmc: sunxi-mmc: Add D1 MMC variant (Samuel Holland)
  - drm/bridge: tc358768: Fix DSI command tx (Francesco Dolcini)
  - nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint (Ryusuke Konishi) {CVE-2024-53130}
  - ocfs2: fix UBSAN warning in ocfs2_verify_volume() (Dmitry Antipov)
  - nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint (Ryusuke Konishi) {CVE-2024-53131}
  - KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN (Sean Christopherson) [Orabug: 37388845] {CVE-2024-53135}
  - KVM: nVMX: Treat vpid01 as current if L2 is active, but with VPID disabled (Sean Christopherson)
  - vdpa/mlx5: Fix PA offset with unaligned starting iotlb map (Si-Wei Liu)
  - ocfs2: uncache inode which has failed entering the group (Dmitry Antipov) [Orabug: 37388752] {CVE-2024-53112}
  - mm: fix NULL pointer dereference in alloc_pages_bulk_noprof (Tu Jinjiang) [Orabug: 37388759] {CVE-2024-53113}
  - x86/mm: Fix a kdump kernel failure on SME system when CONFIG_IMA_KEXEC=y (Baoquan He)
  - ARM: 9419/1: mm: Fix kernel memory mapping for xip kernels (Harith George)
  - samples: pktgen: correct dev to DEV (Wei Fang)
  - net/mlx5e: CT: Fix null-ptr-deref in add rule err flow (Moshe Shemesh) [Orabug: 37388780] {CVE-2024-53120}
  - net/mlx5e: kTLS, Fix incorrect page refcounting (Dragos Tatulea) [Orabug: 37388853] {CVE-2024-53138}
  - net/mlx5: fs, lock FTE when checking if active (Mark Bloch) [Orabug: 37388784] {CVE-2024-53121}
  - drm/rockchip: vop: Fix a dereferenced before check warning (Andy Yan) [Orabug: 37388814] {CVE-2024-53129}
  - netlink: terminate outstanding dump on socket close (Jakub Kicinski) [Orabug: 37388860] {CVE-2024-53140}
  - clk: qcom: gcc-qcs404: fix initial rate of GPLL3 (Gabor Juhos)
  - leds: lp55xx: Remove redundant test for invalid channel number (Michal Vokáč)
  - iommu/io-pgtable-arm: Fix stage-2 map/unmap for concatenated tables (Mostafa Saleh)
  - vmstat: call fold_vm_zone_numa_events() before show per zone NUMA event (Mengen Sun)
  - ftrace: Fix regression with module command in stack_trace_filter (Guoweikang) [Orabug: 37433783] {CVE-2024-56569}
  - ovl: Filter invalid inodes with missing lookup function (Vasiliy Kovalev) [Orabug: 37433788] {CVE-2024-56570}
  - media: uvcvideo: Require entities to have a non-zero unique ID (Thadeu Lima De Souza Cascardo)
  - media: uvcvideo: Stop stream during unregister (Ricardo Ribalda)
  - media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal() (Gaosheng Cui) {CVE-2024-56572}
  - media: gspca: ov534-ov772x: Fix off-by-one error in set_frame_rate() (Jinjie Ruan)
  - media: venus: Fix pm_runtime_set_suspended() with runtime pm enabled (Jinjie Ruan)
  - media: ts2020: fix null-ptr-deref in ts2020_probe() (Li Zetao) [Orabug: 37433804] {CVE-2024-56574}
  - media: imx-jpeg: Ensure power suppliers be suspended before detach them (Ming Qian) {CVE-2024-56575}
  - media: i2c: tc358743: Fix crash in the probe error path when using polling (Alexander Shiyan) [Orabug: 37433817] {CVE-2024-56576}
  - media: imx-jpeg: Set video drvdata before register video device (Ming Qian) {CVE-2024-56578}
  - arm64: dts: allwinner: pinephone: Add mount matrix to accelerometer (Dragan Simic)
  - LTS version: v5.15.173 (Vijayendra Suman)
  - 9p: fix slab cache name creation for real (Linus Torvalds)
  - udf: Avoid directory type conversion failure due to ENOMEM (Jan Kara)
  - udf: Allocate name buffer in directory iterator on heap (Jan Kara)
  - mm/memory: add non-anonymous page check in the copy_present_page() (Yuanzheng Song)
  - io_uring: fix possible deadlock in io_register_iowq_max_workers() (Hagar Hemdan) [Orabug: 37565787] {CVE-2024-41080,CVE-2024-53052}
  - md/raid10: improve code of mrdev in raid10_sync_request (Li Nan)
  - net: usb: qmi_wwan: add Fibocom FG132 0x0112 composition (Reinhard Speyerer)
  - HID: lenovo: Add support for Thinkpad X1 Tablet Gen 3 keyboard (Hans de Goede)
  - HID: multitouch: Add quirk for Logitech Bolt receiver w/ Casa touchpad (Kenneth Albanowski)
  - fs: Fix uninitialized value issue in from_kuid and from_kgid (Alessandro Zanni) [Orabug: 37331927] {CVE-2024-53101}
  - vDPA/ifcvf: Fix pci_read_config_byte() return code handling (Yuan Can)
  - powerpc/powernv: Free name on error in opal_event_init() (Michael Ellerman)
  - drm/vmwgfx: Limit display layout ioctl array size to VMWGFX_NUM_DISPLAY_UNITS (Ian Forbes)
  - sound: Make CONFIG_SND depend on INDIRECT_IOMEM instead of UML (Julian Vetter)
  - crypto: marvell/cesa - Disable hash algorithms (Herbert Xu)
  - bpf: use kvzmalloc to allocate BPF verifier environment (Rik Van Riel)
  - HID: multitouch: Add quirk for HONOR MagicBook Art 14 touchpad (Yuli Wang)
  - HID: multitouch: Add support for B2402FVA track point (Stefan Blum)
  - block: Fix elevator_get_default() checking for NULL q->tag_set (Surajsonawane2415)
  - irqchip/ocelot: Fix trigger register address (Sergey Matsievskiy)
  - 9p: Avoid creating multiple slab caches with the same name (Pedro Falcato)
  - LTS version: v5.15.172 (Vijayendra Suman)
  - ALSA: usb-audio: Add endianness annotations (Jan Schär)
  - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Hyunwoo Kim) [Orabug: 37298679] {CVE-2024-50264}
  - hv_sock: Initializing vsk->trans to NULL to prevent a dangling pointer (Hyunwoo Kim) [Orabug: 37344479] {CVE-2024-53103}
  - ALSA: usb-audio: Add quirks for Dell WD19 dock (Jan Schär)
  - ALSA: usb-audio: Support jack detection on Dell dock (Jan Schär)
  - ucounts: fix counter leak in inc_rlimit_get_ucounts() (Andrei Vagin)
  - ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove() (Andrew Kanner) [Orabug: 37298684] {CVE-2024-50265}
  - irqchip/gic-v3: Force propagation of the active state with a read-back (Marc Zyngier)
  - USB: serial: option: add Quectel RG650V (Benoît Monin)
  - USB: serial: option: add Fibocom FG132 0x0112 composition (Reinhard Speyerer)
  - USB: serial: qcserial: add support for Sierra Wireless EM86xx (Jack Wu)
  - USB: serial: io_edgeport: fix use after free in debug printk (Dan Carpenter) [Orabug: 37298693] {CVE-2024-50267}
  - usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd() (Dan Carpenter) {CVE-2024-50268}
  - usb: musb: sunxi: Fix accessing an released usb phy (Zijun Hu) {CVE-2024-50269}
  - fs/proc: fix compile warning about variable 'vmcore_mmap_ops' (Qi Xi)
  - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Benoît Sevens) [Orabug: 37344484] {CVE-2024-53104}
  - net: do not delay dst_entries_add() in dst_release() (Eric Dumazet) [Orabug: 37206439] {CVE-2024-50036}
  - net: bridge: xmit: make sure we have at least eth header len bytes (Nikolay Aleksandrov) [Orabug: 36753371] {CVE-2024-38538}
  - btrfs: reinitialize delayed ref list after deleting it from the list (Filipe Manana) [Orabug: 37298714] {CVE-2024-50273}
  - nfs: Fix KMSAN warning in decode_getfattr_attrs() (Roberto Sassu) [Orabug: 37304778] {CVE-2024-53066}
  - io_uring/rw: fix missing NOWAIT check for O_DIRECT start write (Jens Axboe) [Orabug: 37304720,37565787] {CVE-2024-41080,CVE-2024-53052}
  - io_uring: use kiocb_{start,end}_write() helpers (Amir Goldstein) [Orabug: 37565787] {CVE-2024-41080,CVE-2024-53052}
  - fs: create kiocb_{start,end}_write() helpers (Amir Goldstein) [Orabug: 37565787] {CVE-2024-41080,CVE-2024-53052}
  - io_uring: rename kiocb_end_write() local helper (Amir Goldstein) [Orabug: 37565787] {CVE-2024-41080,CVE-2024-53052}
  - posix-cpu-timers: Clear TICK_DEP_BIT_POSIX_TIMER on clone (Benjamin Segall)
  - ALSA: usb-audio: Add quirk for HP 320 FHD Webcam (Takashi Iwai)
  - dm-unstriped: cast an operand to sector_t to prevent potential uint32_t overflow (Zichen Xie)
  - dm cache: fix potential out-of-bounds access on the first resume (Ming-Hung Tsai) [Orabug: 37298731] {CVE-2024-50278}
  - dm cache: optimize dirty bit checking with find_next_bit when resizing (Ming-Hung Tsai)
  - dm cache: fix out-of-bounds access to the dirty bitset when resizing (Ming-Hung Tsai) [Orabug: 37298736] {CVE-2024-50279}
  - dm cache: correct the number of origin blocks to match the target length (Ming-Hung Tsai)
  - thermal/drivers/qcom/lmh: Remove false lockdep backtrace (Dmitry Baryshkov)
  - drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read() (Alex Deucher) [Orabug: 37298750] {CVE-2024-50282}
  - drm/amdgpu: Adjust debugfs eviction and IB access permissions (Alex Deucher)
  - pwm: imx-tpm: Use correct MODULO value for EPWM mode (Erik Schumacher)
  - media: v4l2-ctrls-api: fix error handling for v4l2_g_ctrl() (Mauro Carvalho Chehab)
  - media: v4l2-tpg: prevent the risk of a division by zero (Mauro Carvalho Chehab) {CVE-2024-50287}
  - media: pulse8-cec: fix data timestamp at pulse8_setup() (Mauro Carvalho Chehab)
  - media: cx24116: prevent overflows on SNR calculus (Mauro Carvalho Chehab) [Orabug: 37298796] {CVE-2024-50290}
  - media: s5p-jpeg: prevent buffer overflows (Mauro Carvalho Chehab) [Orabug: 37304761] {CVE-2024-53061}
  - ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove (Amelie Delaunay) {CVE-2024-50292}
  - ALSA: firewire-lib: fix return value on fail in amdtp_tscm_init() (Murad Masimov)
  - scsi: sd_zbc: Use kvzalloc() to allocate REPORT ZONES buffer (Johannes Thumshirn)
  - media: adv7604: prevent underflow condition when reporting colorspace (Mauro Carvalho Chehab)
  - media: dvb_frontend: don't play tricks with underflow values (Mauro Carvalho Chehab)
  - media: dvbdev: prevent the risk of out of memory access (Mauro Carvalho Chehab) [Orabug: 37304768] {CVE-2024-53063}
  - media: stb0899_algo: initialize cfr before using it (Mauro Carvalho Chehab)
  - net: arc: fix the device for dma_map_single/dma_unmap_single (Johan Jonker) {CVE-2024-50295}
  - net: stmmac: Fix unbalanced IRQ wake disable warning on single irq case (Nícolas F R A Prado)
  - net: phy: ti: add PHY_RST_AFTER_CLK_EN flag (Diogo Silva)
  - net: hns3: fix kernel crash when uninstalling driver (Peiyang Wang) {CVE-2024-50296}
  - i40e: fix race condition by adding filter's intermediate sync state (Aleksandr Loktionov) [Orabug: 37304818] {CVE-2024-53088}
  - can: c_can: fix {rx,tx}_errors statistics (Dario Binacchi)
  - sctp: properly validate chunk size in sctp_sf_ootb() (Xin Long) [Orabug: 37298819] {CVE-2024-50299}
  - net: enetc: set MAC address to the VF net_device (Wei Fang)
  - security/keys: fix slab-out-of-bounds in key_task_permission (Chen Ridong) [Orabug: 37298826,37516370] {CVE-2024-50301}
  - nfs: avoid i_lock contention in nfs_clear_invalid_mapping (Mike Snitzer)
  - NFSv3: handle out-of-order write replies. (Neil Brown)
  - NFS: Add a tracepoint to show the results of nfs_set_cache_invalid() (Benjamin Coddington)
  - NFSv3: only use NFS timeout for MOUNT when protocols are compatible (Neil Brown)
  - HID: core: zero-initialize the report buffer (Jiri Kosina) [Orabug: 37298832] {CVE-2024-50302}
  - ARM: dts: rockchip: Fix the realtek audio codec on rk3036-kylin (Heiko Stuebner)
  - ARM: dts: rockchip: Fix the spi controller on rk3036 (Heiko Stuebner)
  - ARM: dts: rockchip: drop grf reference from rk3036 hdmi (Heiko Stuebner)
  - ARM: dts: rockchip: fix rk3036 acodec node (Heiko Stuebner)
  - arm64: dts: imx8mp: correct sdhc ipg clk (Peng Fan)
  - arm64: dts: rockchip: Fix LED triggers on rk3308-roc-cc (Heiko Stuebner)
  - arm64: dts: rockchip: Remove #cooling-cells from fan on Theobroma lion (Heiko Stuebner)
  - arm64: dts: rockchip: Fix bluetooth properties on Rock960 boards (Heiko Stuebner)
  - arm64: dts: rockchip: Remove hdmi's 2nd interrupt on rk3328 (Diederik De Haas)
  - arm64: dts: rockchip: Fix rt5651 compatible value on rk3399-sapphire-excavator (Geert Uytterhoeven)


