SUSE-SU-2022:4504-1

The SUSE Linux Enterprise 15 SP4 Azure kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

• CVE-2022-4378: Fixed stack overflow in _doproc_dointvec (bsc#1206207).
• CVE-2022-42328: Guests could trigger denial of service via the netback driver (bnc#1206114).
• CVE-2022-42329: Guests could trigger denial of service via the netback driver (bnc#1206113).
• CVE-2022-3643: Guests could trigger NIC interface reset/abort/crash via netback driver (bnc#1206113).
• CVE-2022-3635: Fixed a use-after-free in the tsttimer() of the file drivers/atm/idt77252.c of the component IPsec (bsc#1204631). - CVE-2022-41850: Fixed a race condition in roccatreport_event() in drivers/hid/hid-roccat.c (bsc#1203960).
• CVE-2022-45934: Fixed a integer wraparound via L2CAPCONFREQ packets in l2capconfigreq in net/bluetooth/l2cap_core.c (bsc#1205796).
• CVE-2022-3567: Fixed a to race condition in inet6streamops()/inet6dgramops() of the component IPv6 Handler (bsc#1204414).
• CVE-2022-41858: Fixed a denial of service in sltxtimeout() in drivers/net/slip (bsc#1205671).
• CVE-2022-43945: Fixed a buffer overflow in the NFSD implementation (bsc#1205128).
• CVE-2022-4095: Fixed a use-after-free in rtl8712 driver (bsc#1205514).
• CVE-2022-3903: Fixed a denial of service with the Infrared Transceiver USB driver (bsc#1205220).
• CVE-2022-45869: Fixed a race condition in the x86 KVM subsystem which could cause a denial of service (bsc#1205882).
• CVE-2022-45888: Fixed a use-after-free during physical removal of a USB devices when using drivers/char/xillybus/xillyusb.c (bsc#1205764).
• CVE-2022-4139: Fixed an issue with the i915 driver that allowed the GPU to access any physical memory (bsc#1205700).
• CVE-2022-4129: Fixed a denial of service with the Layer 2 Tunneling Protocol (L2TP). A missing lock when clearing skuserdata can lead to a race condition and NULL pointer dereference. (bsc#1205711)
• CVE-2022-42896: Fixed a use-after-free vulnerability in the net/bluetooth/l2capcore.c's l2capconnect() and l2capleconnect_req() which may have allowed code execution and leaking kernel memory (respectively) remotely via Bluetooth (bsc#1205709).
• CVE-2022-42895: Fixed an information leak in the net/bluetooth/l2capcore.c's l2capparseconfreq() which can be used to leak kernel pointers remotely (bsc#1205705).
• CVE-2022-3566: Fixed a race condition in the functions tcpgetsockopt/tcpsetsockopt of the component TCP Handler. The manipulation leads to race condition (bsc#1204405).
• CVE-2022-2602: Fixed a local privilege escalation vulnerability involving Unix socket Garbage Collection and io_uring (bsc#1204228).
• CVE-2022-3176: Fixed a use-after-free in iouring related to signalfdpoll() and binder_poll() (bsc#1203391).
• CVE-2022-3707: Fixed a double free in the Intel GVT-g graphics driver (bsc#1204780).
• CVE-2022-41850: Fixed a use-after-free in roccatreportevent in drivers/hid/hid-roccat.c (bnc#1203960).

The following non-security bugs were fixed:

• ACPI: APEI: Fix integer overflow in ghesestatuspool_init() (git-fixes).
• ACPI: HMAT: Fix initiator registration for single-initiator systems (git-fixes).
• ACPI: HMAT: remove unnecessary variable initialization (git-fixes).
• ACPI: scan: Add LATT2021 to acpiignoredep_ids[] (git-fixes).
• ACPI: x86: Add another system to quirk list for forcing StorageD3Enable (git-fixes).
• ALSA: dice: fix regression for Lexicon I-ONIX FW810S (git-fixes).
• ALSA: hda/ca0132: add quirk for EVGA Z390 DARK (git-fixes).
• ALSA: hda/hdmi - enable runtime pm for more AMD display audio (git-fixes).
• ALSA: hda/realtek: Add Positivo C6300 model quirk (git-fixes).
• ALSA: hda/realtek: Add quirk for ASUS Zenbook using CS35L41 (git-fixes).
• ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy Book Pro 360 (bsc#1205100).
• ALSA: hda/realtek: fix speakers for Samsung Galaxy Book Pro (bsc#1205100).
• ALSA: hda: fix potential memleak in 'addwidgetnode' (git-fixes).
• ALSA: usb-audio: Add DSD support for Accuphase DAC-60 (git-fixes).
• ALSA: usb-audio: Add quirk entry for M-Audio Micro (git-fixes).
• ALSA: usb-audio: Drop sndBUGON() from sndusbmidioutput_open() (git-fixes).
• ALSA: usb-audio: Remove redundant workaround for Roland quirk (bsc#1205111).
• ALSA: usb-audio: Yet more regression for for the delayed card registration (bsc#1205111).
• ALSA: usb-audio: add quirk to fix Hamedal C20 disconnect issue (git-fixes).
• ARM: at91: rm9200: fix usb device clock id (git-fixes).
• ARM: dts: am335x-pcm-953: Define fixed regulators in root node (git-fixes).
• ARM: dts: at91: sam9g20ek: enable udc vbus gpio pinctrl (git-fixes).
• ARM: dts: imx6q-prti6q: Fix ref/tcxo-clock-frequency properties (git-fixes).
• ARM: dts: imx7: Fix NAND controller size-cells (git-fixes).
• ARM: mxs: fix memory leak in mxsmachineinit() (git-fixes).
• ASoC: Intel: bytcht_es8316: Add quirk for the Nanote UMPC-01 (git-fixes).
• ASoC: Intel: sof_sdw: add quirk variant for LAPBC710 NUC15 (git-fixes).
• ASoC: codecs: jz4725b: Fix spelling mistake 'Sourc' -> 'Source', 'Routee' -> 'Route' (git-fixes).
• ASoC: codecs: jz4725b: add missed Line In power control bit (git-fixes).
• ASoC: codecs: jz4725b: fix capture selector naming (git-fixes).
• ASoC: codecs: jz4725b: fix reported volume for Master ctl (git-fixes).
• ASoC: codecs: jz4725b: use right control for Capture Volume (git-fixes).
• ASoC: core: Fix use-after-free in sndsocexit() (git-fixes).
• ASoC: fslasrc fslesai fslsai: allow CONFIGPM=N (git-fixes).
• ASoC: fsl_sai: use local device pointer (git-fixes).
• ASoC: max98373: Add checks for devm_kcalloc (git-fixes).
• ASoC: mt6660: Keep the pmruntime enables before component stuff in mt6660i2c_probe (git-fixes).
• ASoC: ops: Fix bounds check for _sx controls (git-fixes).
• ASoC: rt1019: Fix the TDM settings (git-fixes).
• ASoC: sgtl5000: Reset the CHIPCLKCTRL reg on remove (git-fixes).
• ASoC: soc-pcm: Do not zero TDM masks in _socpcm_open() (git-fixes).
• ASoC: soc-utils: Remove _exit for sndsocutilexit() (git-fixes).
• ASoC: stm32: dfsdm: manage cb buffers cleanup (git-fixes).
• ASoC: tas2764: Fix settdmslot in case of single slot (git-fixes).
• ASoC: tas2770: Fix settdmslot in case of single slot (git-fixes).
• ASoC: wm8962: Add an event handler for TEMPHP and TEMPSPK (git-fixes).
• Bluetooth: 6LoWPAN: add missing hcidevput() in getl2capconn() (git-fixes).
• Bluetooth: Fix not cleanup led when bt_init fails (git-fixes).
• Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM (git-fixes).
• Bluetooth: L2CAP: Fix attempting to access uninitialized memory (git-fixes).
• Bluetooth: L2CAP: Fix l2capglobalchanbypsm (git-fixes).
• Decrease the number of SMB3 smbdirect client SGEs (bsc#1193629).
• Do not enable CONFIGATARIPARTITION (jsc#PED-1573)
• Drivers: hv: Always reserve framebuffer region for Gen1 VMs (git-fixes).
• Drivers: hv: Fix syntax errors in comments (git-fixes).
• Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region (git-fixes).
• Drivers: hv: fix repeated words in comments (git-fixes).
• Drivers: hv: remove duplicate word in a comment (git-fixes).
• Drivers: hv: vmbus: Accept hv_sock offers in isolated guests (git-fixes).
• Drivers: hv: vmbus: Add VMbus IMC device to unsupported list (git-fixes).
• Drivers: hv: vmbus: Do not wait for the ACPI device upon initialization (git-fixes).
• Drivers: hv: vmbus: Fix kernel-doc (git-fixes).
• Drivers: hv: vmbus: Optimize vmbusonevent (git-fixes).
• Drivers: hv: vmbus: Release cpu lock in error case (git-fixes).
• Drivers: hv: vmbus: Use PCIVENDORID_MICROSOFT for better discoverability (git-fixes).
• Drivers: hv: vmbus: fix double free in the error path of vmbusaddchannel_work() (git-fixes).
• Drivers: hv: vmbus: fix possible memory leak in vmbusdeviceregister() (git-fixes).
• Drivers: hv: vmbus: fix typo in comment (git-fixes).
• Fix formatting of client smbdirect RDMA logging (bsc#1193629).
• HID: core: fix shift-out-of-bounds in hidreportraw_event (git-fixes).
• HID: hid-lg4ff: Add check for empty lbuf (git-fixes).
• HID: hyperv: fix possible memory leak in mousevsc_probe() (git-fixes).
• HID: playstation: add initial DualSense Edge controller support (git-fixes).
• HID: saitek: add madcatz variant of MMO7 mouse device ID (git-fixes).
• Handle variable number of SGEs in client smbdirect send (bsc#1193629).
• IB/hfi1: Correctly move list in sc_disable() (git-fixes)
• IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers (git-fixes)
• Input: goodix - try resetting the controller when no config is set (git-fixes).
• Input: i8042 - fix leaking of platform device on module removal (git-fixes).
• Input: iforce - invert valid length check when fetching device IDs (git-fixes).
• Input: raydiumtsi2c - fix memory leak in raydiumi2csend() (git-fixes).
• Input: socbuttonarray - add Acer Switch V 10 to dmiuselowlevelirq[] (git-fixes).
• Input: socbuttonarray - add uselowlevel_irq module parameter (git-fixes).
• Input: synaptics - switch touchpad on HP Laptop 15-da3001TU to RMI mode (git-fixes).
• KVM: Move wiping of the kvm->vcpus array to common code (git-fixes).
• KVM: SEV: Mark nested locking of vcpu->lock (git-fixes).
• KVM: SVM: Disable SEV-ES support if MMIO caching is disable (git-fixes).
• KVM: SVM: Stuff next_rip on emulated INT3 injection if NRIPS is supported (git-fixes).
• KVM: SVM: adjust register allocation for _svmvcpu_run() (git-fixes).
• KVM: SVM: move guest vmsave/vmload back to assembly (git-fixes).
• KVM: SVM: replace regs argument of _svmvcpurun() with vcpusvm (git-fixes).
• KVM: SVM: retrieve VMCB from assembly (git-fixes).
• KVM: VMX: Add helper to check if the guest PMU has PERFGLOBALCTRL (git-fixes).
• KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS (git-fixes).
• KVM: VMX: Mark all PERFGLOBAL(OVF)_CTRL bits reserved if there's no vPMU (git-fixes).
• KVM: VMX: clear vmxx86ops.syncpirto_irr if APICv is disabled (bsc#1205007).
• KVM: VMX: fully disable SGX if SECONDARYEXECENCLS_EXITING unavailable (git-fixes).
• KVM: nVMX: Always enable TSC scaling for L2 when it was enabled for L1 (git-fixes).
• KVM: nVMX: Attempt to load PERFGLOBALCTRL on nVMX xfer iff it exists (git-fixes).
• KVM: nVMX: Rename handlevm{on,off}() to handlevmx{on,off}() (git-fixes).
• KVM: s390: Add a routine for setting userspace CPU state (git-fixes jsc#PED-611).
• KVM: s390: Simplify SIGP Set Arch handling (git-fixes jsc#PED-611).
• KVM: s390: pv: do not allow userspace to set the clock under PV (git-fixes).
• KVM: s390: pv: leak the topmost page table when destroy fails (git-fixes).
• KVM: x86/mmu: Fix wrong/misleading comments in TDP MMU fast zap (git-fixes).
• KVM: x86/mmu: WARN if old or new SPTE is REMOVED in non-atomic path (git-fixes).
• KVM: x86/mmu: fix memoryleak in kvmmmuvendormoduleinit() (git-fixes).
• KVM: x86/pmu: Fix and isolate TSX-specific performance event logic (git-fixes).
• KVM: x86/pmu: Update AMD PMC sample period to fix guest NMI-watchdog (git-fixes).
• KVM: x86/pmu: Use different raw event masks for AMD and Intel (git-fixes).
• KVM: x86/svm: Account for family 17h event renumberings in amdpmcperfhwid (git-fixes).
• KVM: x86: Fully initialize 'struct kvmlapicirq' in kvmpvkickcpuop() (git-fixes).
• KVM: x86: Hide IA32PLATFORMDCA_CAP[31:0] from the guest (git-fixes).
• KVM: x86: Mask off reserved bits in CPUID.80000001H (git-fixes).
• KVM: x86: Mask off reserved bits in CPUID.80000006H (git-fixes).
• KVM: x86: Mask off reserved bits in CPUID.80000008H (git-fixes).
• KVM: x86: Mask off reserved bits in CPUID.8000001AH (git-fixes).
• KVM: x86: Report error when setting CPUID if Hyper-V allocation fails (git-fixes).
• KVM: x86: Retry page fault if MMU reload is pending and root has no sp (bsc#1205744).
• KVM: x86: Signal #GP, not -EPERM, on bad WRMSR(MCi_CTL/STATUS) (git-fixes).
• KVM: x86: Treat #DBs from the emulator as fault-like (code and DR7.GD=1) (git-fixes).
• KVM: x86: Use _trycmpxchg_user() to emulate atomic accesses (git-fixes).
• KVM: x86: Use _trycmpxchg_user() to update guest PTE A/D bits (git-fixes).
• KVM: x86: avoid loading a vCPU after .vm_destroy was called (git-fixes).
• KVM: x86: emulator: em_sysexit should update ctxt->mode (git-fixes).
• KVM: x86: emulator: introduce emulatorrecalcandsetmode (git-fixes).
• KVM: x86: emulator: update the emulation mode after CR0 write (git-fixes).
• KVM: x86: emulator: update the emulation mode after rsm (git-fixes).
• KVM: x86: use a separate asm-offsets.c file (git-fixes).
• Kconfig: Add option for asm goto w/ tied outputs to workaround clang-13 bug (git-fixes).
• MIPS: Loongson: Use hwmondeviceregisterwithgroups() to register hwmon (git-fixes).
• NFC: nci: Bounds check struct nfc_target arrays (git-fixes).
• NFC: nci: fix memory leak in ncirxdata_packet() (git-fixes).
• PCI: Move PCIVENDORIDMICROSOFT/PCIDEVICEIDHYPERVVIDEO definitions to pciids.h (git-fixes).
• PCI: hv: Add validation for untrusted Hyper-V values (git-fixes).
• PCI: hv: Fix the definition of vector in hvcomposemsi_msg() (git-fixes).
• RDMA/cm: Fix memory leak in ibcminsert_listen (git-fixes)
• RDMA/cm: Use SLID in the work completion as the DLID in responder side (git-fixes)
• RDMA/cma: Use output interface for net_dev check (git-fixes)
• RDMA/core: Fix null-ptr-deref in ibcorecleanup() (git-fixes)
• RDMA/hfi1: Prevent panic when SDMA is disabled (git-fixes)
• RDMA/hfi1: Prevent use of lock before it is initialized (git-fixes)
• RDMA/hfi1: fix potential memory leak in setupbasectxt() (git-fixes)
• RDMA/hns: Correct the type of variables participating in the shift operation (git-fixes)
• RDMA/hns: Disable local invalidate operation (git-fixes)
• RDMA/hns: Fix incorrect clearing of interrupt status register (git-fixes)
• RDMA/hns: Fix supported page size (git-fixes)
• RDMA/hns: Fix wrong fixed value of qp->rq.wqe_shift (git-fixes)
• RDMA/hns: Remove magic number (git-fixes)
• RDMA/hns: Remove the numcqctimer variable (git-fixes)
• RDMA/hns: Remove the numqpctimer variable (git-fixes)
• RDMA/hns: Remove unnecessary check for the sgid_attr when modifying QP (git-fixes)
• RDMA/hns: Replace tab with space in the right-side comments (git-fixes)
• RDMA/hns: Use hrregxxx() instead of remaining rocesetxxx() (git-fixes)
• RDMA/irdma: Fix deadlock in irdmacleanupcm_core() (git-fixes)
• RDMA/irdma: Use s/g array in post send only when its valid (git-fixes)
• RDMA/mlx5: Set local port to one when accessing counters (git-fixes)
• RDMA/qedr: clean up work queue on failure in qedrallocresources() (git-fixes)
• RDMA/rtrs-clt: Use the right sgcnt after ibdmamapsg (git-fixes)
• RDMA/rtrs-srv: Fix modinfo output for stringify (git-fixes)
• RDMA/rxe: Limit the number of calls to each tasklet (git-fixes)
• RDMA/rxe: Remove useless pkt parameters (git-fixes)
• Reduce client smbdirect max receive segment size (bsc#1193629).
• Revert 'net: phy: meson-gxl: improve link-up behavior' (git-fixes).
• Revert 'tty: n_gsm: avoid call of sleeping functions from atomic context' (git-fixes).
• Revert 'tty: ngsm: replace kicktimer with delayedwork' (git-fixes).
• Revert 'usb: dwc3: disable USB core PHY management' (git-fixes).
• SCSI: scsiprobelun: retry INQUIRY after timeout (bsc#1189297).
• SMB3: fix lease break timeout when multiple deferred close handles for the same file (bsc#1193629).
• USB: bcma: Make GPIO explicitly optional (git-fixes).
• USB: serial: option: add Fibocom FM160 0x0111 composition (git-fixes).
• USB: serial: option: add Sierra Wireless EM9191 (git-fixes).
• USB: serial: option: add u-blox LARA-L6 modem (git-fixes).
• USB: serial: option: add u-blox LARA-R6 00B modem (git-fixes).
• USB: serial: option: remove old LARA-R6 PID (git-fixes).
• arcnet: fix potential memory leak in com20020_probe() (git-fixes).
• arm64/syscall: Include asm/ptrace.h in syscall_wrapper header (git-fixes).
• arm64: Add AMPERE1 to the Spectre-BHB affected list (git-fixes).
• arm64: Fix bit-shifting UB in the MIDRCPUMODEL() macro (git-fixes)
• arm64: dts: imx8mm: Fix NAND controller size-cells (git-fixes).
• arm64: dts: imx8mn: Fix NAND controller size-cells (git-fixes).
• arm64: dts: qcom: sa8155p-adp: Specify which LDO modes are allowed (git-fixes).
• arm64: dts: qcom: sm8150-xperia-kumano: Specify which LDO modes are allowed (git-fixes).
• arm64: dts: qcom: sm8250-xperia-edo: Specify which LDO modes are allowed (git-fixes).
• arm64: dts: qcom: sm8350-hdk: Specify which LDO modes are allowed (git-fixes).
• arm64: dts: rockchip: add enable-strobe-pulldown to emmc phy on nanopi4 (git-fixes).
• arm64: dts: rockchip: lower rk3399-puma-haikou SD controller clock frequency (git-fixes).
• arm64: efi: Fix handling of misaligned runtime regions and drop warning (git-fixes).
• arm64: errata: Add Cortex-A55 to the repeat tlbi list (git-fixes). Enable CONFIGARM64ERRATUM_2441007, too
• arm64: errata: Remove AES hwcap for COMPAT tasks (git-fixes) Enable CONFIGARM64ERRATUM_1742098 in arm64/default
• arm64: fix rodata=full again (git-fixes)
• ata: libata-core: do not issue non-internal commands once EH is pending (git-fixes).
• ata: libata-scsi: fix SYNCHRONIZE CACHE (16) command failure (git-fixes).
• ata: libata-scsi: simplify _atascsi_queuecmd() (git-fixes).
• ata: libata-transport: fix double atahostput() in atatportadd() (git-fixes).
• ata: libata-transport: fix error handling in atatdevadd() (git-fixes).
• ata: libata-transport: fix error handling in atatlinkadd() (git-fixes).
• ata: libata-transport: fix error handling in atatportadd() (git-fixes).
• audit: fix undefined behavior in bit shift for AUDIT_BIT (git-fixes).
• blk-cgroup: fix missing put device in error path from blkgconfpref() (git-fixes).
• blk-mq: Properly init requests from blkmqallocrequesthctx() (git-fixes).
• blk-mq: do not create hctx debugfs dir until q->debugfs_dir is created (git-fixes).
• blk-mq: fix io hung due to missing commit_rqs (git-fixes).
• blk-wbt: call rqqosadd() after wb_normal is initialized (git-fixes).
• blktrace: Trace remapped requests correctly (git-fixes).
• block/rnbd-srv: Set keepid to true after mutextrylock (git-fixes).
• block: add biostartioaccttime() to control start_time (git-fixes).
• block: blkqueueenter() / _bioqueue_enter() must return -EAGAIN for nowait (git-fixes).
• block: drop unused includes in <linux/genhd.h> (git-fixes).
• bridge: switchdev: Fix memory leaks when changing VLAN protocol (git-fixes).
• btrfs: check if root is readonly while setting security xattr (bsc#1206147).
• btrfs: do not allow compression on nodatacow files (bsc#1206149).
• btrfs: export a helper for compression hard check (bsc#1206149).
• btrfs: fix processing of delayed data refs during backref walking (bsc#1206056).
• btrfs: fix processing of delayed tree block refs during backref walking (bsc#1206057).
• btrfs: prevent subvol with swapfile from being deleted (bsc#1206035).
• btrfs: send: always use the rbtree based inode ref management infrastructure (bsc#1206036).
• btrfs: send: fix failures when processing inodes with no links (bsc#1206036).
• btrfs: send: fix send failure of a subcase of orphan inodes (bsc#1206036).
• btrfs: send: fix sending link commands for existing file paths (bsc#1206036).
• btrfs: send: introduce recordedrefalloc and recordedreffree (bsc#1206036).
• btrfs: send: refactor arguments of getinodeinfo() (bsc#1206036).
• btrfs: send: remove unused foundtype parameter to lookupdiriteminode() (bsc#1206036).
• btrfs: send: remove unused type parameter to iterateinoderef_t (bsc#1206036).
• btrfs: send: use boolean types for current inode status (bsc#1206036).
• bus: sunxi-rsb: Remove the shutdown callback (git-fixes).
• bus: sunxi-rsb: Support atomic transfers (git-fixes).
• ca8210: Fix crash by zero initializing data (git-fixes).
• can: afcan: fix NULL pointer dereference in canrx_register() (git-fixes).
• can: cc770: cc770isaprobe(): add missing free_cc770dev() (git-fixes).
• can: etases58x: es58xinitnetdev(): free netdev when registercandev() (git-fixes).
• can: j1939: j1939sendone(): fix missing CAN header initialization (git-fixes).
• can: mcan: Add check for devmclk_get (git-fixes).
• can: mcan: pci: add missing mcanclassfree_dev() in probe/remove methods (git-fixes).
• can: sja1000isa: sja1000isaprobe(): add missing freesja1000dev() (git-fixes).
• capabilities: fix potential memleak on error path from vfsgetxattralloc() (git-fixes).
• capabilities: fix undefined behavior in bit shift for CAPTOMASK (git-fixes).
• ceph: allow ceph.dir.rctime xattr to be updatable (bsc#1206050).
• ceph: avoid putting the realm twice when decoding snaps fails (bsc#1206051).
• ceph: do not update snapshot context when there is no new snapshot (bsc#1206047).
• ceph: fix inode reference leakage in cephgetsnapdir() (bsc#1206048).
• ceph: fix memory leak in cephreaddir when notelast_dentry returns error (bsc#1206049).
• ceph: properly handle statfs on multifs setups (bsc#1206045).
• ceph: switch netfs read ops to use rreq->inode instead of rreq->mapping->host (bsc#1206046).
• char: tpm: Protect tpmpmsuspend with locks (git-fixes).
• cifs: Add constructor/destructors for tcon->cfid (bsc#1193629).
• cifs: Add helper function to check smb1+ server (bsc#1193629).
• cifs: Do not access tcon->cfids->cfid directly from ispathaccessible (bsc#1193629).
• cifs: Do not use tcon->cfid directly, use the cfid we get from opencacheddir (bsc#1193629).
• cifs: Fix connections leak when tlink setup failed (git-fixes).
• cifs: Fix memory leak on the deferred close (bsc#1193629).
• cifs: Fix memory leak when build ntlmssp negotiate blob failed (bsc#1193629).
• cifs: Fix pages array leak when writedata alloc failed in cifswritedataalloc() (bsc#1193629).
• cifs: Fix pages leak when writedata alloc failed in cifswritefrom_iter() (bsc#1193629).
• cifs: Fix the error length of VALIDATENEGOTIATEINFO message (bsc#1193629).
• cifs: Fix wrong return value checking when GETFLAGS (git-fixes).
• cifs: Fix xid leak in cifscopyfile_range() (bsc#1193629).
• cifs: Fix xid leak in cifs_create() (bsc#1193629).
• cifs: Fix xid leak in cifs_flock() (bsc#1193629).
• cifs: Fix xid leak in cifsgetfileinfounix() (bsc#1193629).
• cifs: Fix xid leak in cifssesadd_channel() (bsc#1193629).
• cifs: Make tcon contain a wrapper structure cachedfids instead of cachedfid (bsc#1193629).
• cifs: Move cached-dir functions into a separate file (bsc#1193629).
• cifs: Replace a couple of one-element arrays with flexible-array members (bsc#1193629).
• cifs: Use after free in debug code (git-fixes).
• cifs: Use help macro to get the header preamble size (bsc#1193629).
• cifs: Use help macro to get the mid header size (bsc#1193629).
• cifs: add check for returning value of SMB2closeinit (git-fixes).
• cifs: add check for returning value of SMB2setinfo_init (git-fixes).
• cifs: add missing spinlock around tcon refcount (bsc#1193629).
• cifs: alloc_mid function should be marked as static (bsc#1193629).
• cifs: always initialize struct msghdr smb_msg completely (bsc#1193629).
• cifs: always iterate smb sessions using primary channel (bsc#1193629).
• cifs: avoid deadlocks while updating iface (bsc#1193629).
• cifs: avoid unnecessary iteration of tcp sessions (bsc#1193629).
• cifs: avoid use of global locks for high contention data (bsc#1193629).
• cifs: cache the dirents for entries in a cached directory (bsc#1193629).
• cifs: change iface_list from array to sorted linked list (bsc#1193629).
• cifs: destage dirty pages before re-reading them for cache=none (bsc#1193629).
• cifs: do not send down the destination address to sendmsg for a SOCK_STREAM (bsc#1193629).
• cifs: drop the lease for cached directories on rmdir or rename (bsc#1193629).
• cifs: during reconnect, update interface if necessary (bsc#1193629).
• cifs: enable caching of directories for which a lease is held (bsc#1193629).
• cifs: find and use the dentry for cached non-root directories also (bsc#1193629).
• cifs: fix double-fault crash during ntlmssp (bsc#1193629).
• cifs: fix lock length calculation (bsc#1193629).
• cifs: fix memory leaks in session setup (bsc#1193629).
• cifs: fix missing unlock in cifsfilecopychunk_range() (git-fixes).
• cifs: fix race condition with delayed threads (bsc#1193629).
• cifs: fix skipping to incorrect offset in emitcacheddirents (bsc#1193629).
• cifs: fix small mempool leak in SMB2_negotiate() (bsc#1193629).
• cifs: fix static checker warning (bsc#1193629).
• cifs: fix uninitialised var in smb2compoundop() (bsc#1193629).
• cifs: fix use-after-free caused by invalid pointer hostname (bsc#1193629).
• cifs: fix use-after-free on the link name (bsc#1193629).
• cifs: fix wrong unlock before return from cifstreeconnect() (bsc#1193629).
• cifs: improve handlecaching (bsc#1193629).
• cifs: improve symlink handling for smb2+ (bsc#1193629).
• cifs: lease key is uninitialized in smb1 paths (bsc#1193629).
• cifs: lease key is uninitialized in two additional functions when smb1 (bsc#1193629).
• cifs: listforeach() -> listforeach_entry() (bsc#1193629).
• cifs: misc: fix spelling typo in comment (bsc#1193629).
• cifs: move from strlcpy with unused retval to strscpy (bsc#1193629).
• cifs: periodically query network interfaces from server (bsc#1193629).
• cifs: populate empty hostnames for extra channels (bsc#1193629).
• cifs: prevent copying past input buffer boundaries (bsc#1193629).
• cifs: remove 'cifs_' prefix from init/destroy mids functions (bsc#1193629).
• cifs: remove initialization value (bsc#1193629).
• cifs: remove minor build warning (bsc#1193629).
• cifs: remove redundant initialization to variable mntsignenabled (bsc#1193629).
• cifs: remove remaining build warnings (bsc#1193629).
• cifs: remove some camelCase and also some static build warnings (bsc#1193629).
• cifs: remove unnecessary (void*) conversions (bsc#1193629).
• cifs: remove unnecessary locking of chan_lock while freeing session (bsc#1193629).
• cifs: remove unnecessary type castings (bsc#1193629).
• cifs: remove unused server parameter from calcsmbsize() (bsc#1193629).
• cifs: remove useless DeleteMidQEntry() (bsc#1193629).
• cifs: remove useless parameter 'isfsctl' from SMB2ioctl() (bsc#1193629).
• cifs: replace kfree() with kfree_sensitive() for sensitive data (bsc#1193629).
• cifs: return correct error in ->calc_signature() (bsc#1193629).
• cifs: return errors during session setup during reconnects (bsc#1193629).
• cifs: revalidate mapping when doing direct writes (bsc#1193629).
• cifs: secmech: use shash_desc directly, remove sdesc (bsc#1193629).
• cifs: set rc to -ENOENT if we can not get a dentry for the cached dir (bsc#1193629).
• cifs: skip extra NULL byte in filenames (bsc#1193629).
• cifs: store a pointer to a fid in the cfid structure instead of the struct (bsc#1193629).
• cifs: truncate the inode and mapping when we simulate fcollapse (bsc#1193629).
• cifs: update cifsses::ipaddr after failover (bsc#1193629).
• cifs: update internal module number (bsc#1193629).
• cifs: use ALIGN() and round_up() macros (bsc#1193629).
• cifs: use LISTHEAD() and listmove() to simplify code (bsc#1193629).
• cifs: when a channel is not found for server, log its connection id (bsc#1193629).
• cifs: when insecure legacy is disabled shrink amount of SMB1 code (bsc#1193629).
• clocksource/drivers/hyperv: add data structure for reference TSC MSR (git-fixes).
• cpufreq: intelpstate: Handle noturbo in frequency invariance (jsc#PED-849).
• cpufreq: intel_pstate: Support Sapphire Rapids OOB mode (jsc#PED-849).
• cpuidle: intel_idle: Drop redundant backslash at line end (jsc#PED-1936).
• dm btree remove: fix use after free in rebalance_children() (git-fixes).
• dm crypt: make printing of the key constant-time (git-fixes).
• dm era: commit metadata in postsuspend after worker stops (git-fixes).
• dm integrity: fix memory corruption when tag_size is less than digest size (git-fixes).
• dm mirror log: clear log bits up to BITSPERLONG boundary (git-fixes).
• dm raid: fix accesses beyond end of raid member array (git-fixes).
• dm stats: add cond_resched when looping over entries (git-fixes).
• dm thin: fix use-after-free crash in dmsmregisterthresholdcallback (git-fixes).
• dm: fix double accounting of flush with data (git-fixes).
• dm: interlock pending dmio and dmwaitforbios_completion (git-fixes).
• dm: properly fix redundant bio-based IO accounting (git-fixes).
• dm: remove unnecessary assignment statement in alloc_dev() (git-fixes).
• dm: return early from dmprcall() if DM device is suspended (git-fixes).
• dm: revert partial fix for redundant bio-based IO accounting (git-fixes).
• dma-buf: fix racing conflict of dmaheapadd() (git-fixes).
• dmaengine: athdmac: Check return code of dmaasyncdeviceregister (git-fixes).
• dmaengine: at_hdmac: Do not allow CPU to reorder channel enable (git-fixes).
• dmaengine: athdmac: Do not call the complete callback on deviceterminate_all (git-fixes).
• dmaengine: athdmac: Do not start transactions at txsubmit level (git-fixes).
• dmaengine: athdmac: Fix atlli struct definition (git-fixes).
• dmaengine: at_hdmac: Fix completion of unissued descriptor in case of errors (git-fixes).
• dmaengine: at_hdmac: Fix concurrency over descriptor (git-fixes).
• dmaengine: at_hdmac: Fix concurrency over the active list (git-fixes).
• dmaengine: athdmac: Fix concurrency problems by removing atccomplete_all() (git-fixes).
• dmaengine: at_hdmac: Fix descriptor handling when issuing it to hardware (git-fixes).
• dmaengine: at_hdmac: Fix impossible condition (git-fixes).
• dmaengine: athdmac: Fix premature completion of desc in issuepending (git-fixes).
• dmaengine: at_hdmac: Free the memset buf without holding the chan lock (git-fixes).
• dmaengine: at_hdmac: Protect atchan->status with the channel lock (git-fixes).
• dmaengine: athdmac: Start transfer for cyclic channels in issuepending (git-fixes).
• dmaengine: mvxorv2: Fix a resource leak in mvxorv2_remove() (git-fixes).
• dmaengine: pxadma: use platformgetirqoptional (git-fixes).
• dmaengine: ti: k3-udma-glue: fix memory leak when register device fail (git-fixes).
• docs, kprobes: Fix the wrong location of Kprobes (git-fixes).
• docs/core-api: expand Fedora instructions for GCC plugins (git-fixes).
• drm/amd/display: Add HUBP surface flip interrupt handler (git-fixes).
• drm/amdgpu: disable BACO on special BEIGE_GOBY card (git-fixes).
• drm/amdgpu: set vmupdatemode=0 as default for Sienna Cichlid in SRIOV case (git-fixes).
• drm/amdkfd: Fix NULL pointer dereference in svmmigrateto_ram() (git-fixes).
• drm/amdkfd: Migrate in CPU page fault use current mm (git-fixes).
• drm/amdkfd: avoid recursive lock in migrations back to RAM (git-fixes).
• drm/amdkfd: handle CPU fault on COW mapping (git-fixes).
• drm/drv: Fix potential memory leak in drmdevinit() (git-fixes).
• drm/hyperv: Add ratelimit on error message (git-fixes).
• drm/hyperv: Do not overwrite dirt_needed value set by host (git-fixes).
• drm/i915/dmabuf: fix sgtable handling in mapdma_buf (git-fixes).
• drm/i915/sdvo: Filter out invalid outputs more sensibly (git-fixes).
• drm/i915/sdvo: Setup DDC fully before output init (git-fixes).
• drm/imx: imx-tve: Fix return type of imxtveconnectormodevalid (git-fixes).
• drm/msm/hdmi: Remove spurious IRQF_ONESHOT flag (git-fixes).
• drm/msm/hdmi: fix IRQ lifetime (git-fixes).
• drm/panel: simple: set bpc field for logic technologies displays (git-fixes).
• drm/rockchip: dsi: Force synchronous probe (git-fixes).
• drm/vc4: Fix missing platformunregisterdrivers() call in vc4drmregister() (git-fixes).
• drm/vc4: kms: Fix ISERR() vs NULL check for vc4kms (git-fixes).
• drm: Fix potential null-ptr-deref in drmvblankdestroy_worker() (git-fixes).
• e1000e: Fix TX dispatch condition (git-fixes).
• e100: Fix possible use after free in e100xmitprepare (git-fixes).
• efi: random: Use 'ACPI reclaim' memory for random seed (git-fixes).
• efi: random: reduce seed size to 32 bytes (git-fixes).
• fbdev: smscufx: Fix several use-after-free bugs (git-fixes).
• firmware: coreboot: Register bus in module init (git-fixes).
• fm10k: Fix error handling in fm10kinitmodule() (git-fixes).
• ftrace: Fix null pointer dereference in ftraceaddmod() (git-fixes).
• ftrace: Fix the possible incorrect kernel message (git-fixes).
• ftrace: Fix use-after-free for dynamic ftrace_ops (git-fixes).
• ftrace: Optimize the allocation for mcount entries (git-fixes).
• fuse: add file_modified() to fallocate (bsc#1205332).
• fuse: fix readdir cache race (bsc#1205331).
• fuse: lock inode unconditionally in fuse_fallocate() (bsc#1206273).
• gpio: amd8111: Fix PCI device reference count leak (git-fixes).
• hamradio: fix issue of dev reference count leakage in bpqdeviceevent() (git-fixes).
• hv_netvsc: Fix potential dereference of NULL pointer (git-fixes).
• hv_netvsc: Fix race between VF offering and VF association message from host (bsc#1204850).
• hvnetvsc: Print value of invalid ID in netvscsend{completion,txcomplete}() (git-fixes).
• hv_sock: Add validation for untrusted Hyper-V values (git-fixes).
• hvsock: Check hvpktiterfirst_raw()'s return value (git-fixes).
• hv_sock: Copy packets sent by Hyper-V out of the ring buffer (git-fixes).
• hwmon: (coretemp) Check for null before removing sysfs attrs (git-fixes).
• hwmon: (coretemp) fix pci device refcount leak in nv1aramnew() (git-fixes).
• hwmon: (i5500temp) fix missing pcidisable_device() (git-fixes).
• hwmon: (ibmpex) Fix possible UAF when ibmpexregisterbmc() fails (git-fixes).
• hwmon: (ina3221) Fix shunt sum critical calculation (git-fixes).
• hwmon: (ltc2947) fix temperature scaling (git-fixes).
• i2c: i801: add lis3lv02d's I2C address for Vostro 5568 (git-fixes).
• i2c: imx: Only DMA messages with I2CMDMA_SAFE flag set (git-fixes).
• i2c: npcm7xx: Fix error handling in npcmi2cinit() (git-fixes).
• i2c: tegra: Allocate DMA memory for DMA engine (git-fixes).
• i2c: xiic: Add platform module alias (git-fixes).
• ibmvnic: Free rwi on reset success (bsc#1184350 ltc#191533 git-fixes).
• ieee802154: cc2520: Fix error return code in cc2520hwinit() (git-fixes).
• iio: adc: at91adc: fix possible memory leak in at91adcallocatetrigger() (git-fixes).
• iio: adc: mp2629: fix potential array out of bound access (git-fixes).
• iio: adc: mp2629: fix wrong comparison of channel (git-fixes).
• iio: core: Fix entry not deleted when iioregisterswtriggertype() fails (git-fixes).
• iio: health: afe4403: Fix oob read in afe4403readraw (git-fixes).
• iio: health: afe4404: Fix oob read in afe4404[read|write]raw (git-fixes).
• iio: light: apds9960: fix wrong register for gesture gain (git-fixes).
• iio: light: rpr0521: add missing Kconfig dependencies (git-fixes).
• iio: ms5611: Simplify IO callback parameters (git-fixes).
• iio: pressure: ms5611: changed hardcoded SPI speed to value limited (git-fixes).
• iio: pressure: ms5611: fixed value compensation bug (git-fixes).
• iio: trigger: sysfs: fix possible memory leak in iiosysfstrig_init() (git-fixes).
• init/Kconfig: fix CCHASASMGOTOTIED_OUTPUT test with dash (git-fixes).
• intel_idle: Add AlderLake support (jsc#PED-824).
• intel_idle: Fix SPR C6 optimization (jsc#PED-824 jsc#PED-1936).
• intelidle: Fix the 'preferredcstates' module parameter (jsc#PED-824 jsc#PED-1936).
• intel_idle: make SPR C1 and C1E be independent (jsc#PED-1936).
• io-wq: Remove duplicate code in ioworkqueuecreate() (bnc#1205113).
• io-wq: do not retry task_work creation failure on fatal conditions (bnc#1205113).
• io-wq: ensure we exit if thread group is exiting (git-fixes).
• io-wq: exclusively gate signal based exit on get_signal() return (git-fixes).
• io-wq: fix cancellation on create-worker failure (bnc#1205113).
• io-wq: fix silly logic error in iotaskwork_match() (bnc#1205113).
• iouring: correct _must_hold annotation (git-fixes).
• iouring: drop ctx->uringlock before acquiring sqd->lock (git-fixes).
• iouring: ensure IORINGREGISTERIOWQMAX_WORKERS works with SQPOLL (git-fixes).
• iouring: fix iotimeout_remove locking (git-fixes).
• iouring: fix missing mb() before waitqueueactive (git-fixes).
• iouring: fix missing sigmask restore in iocqring_wait() (git-fixes).
• io_uring: fix possible poll event lost in multi shot mode (git-fixes).
• io_uring: pin SQPOLL data before unlocking ring lock (git-fixes).
• ipv6: ping: fix wrong checksum for large frames (bsc#1203183).
• kABI: Fix kABI after 'KVM: x86/pmu: Use different raw event masks for AMD and Intel' (git-fixes).
• kbuild: Unify options for BTF generation for vmlinux and modules (bsc#1204693).
• kexec: turn all kexec_mutex acquisitions into trylocks (git-fixes).
• mISDN: fix misuse of putdevice() in mISDNregister_device() (git-fixes).
• mISDN: fix possible memory leak in mISDNdspelement_register() (git-fixes).
• mac80211: radiotap: Use BIT() instead of shifts (git-fixes).
• mac802154: fix missing INITLISTHEAD in ieee802154ifadd() (git-fixes).
• macsec: Fix invalid error code set (git-fixes).
• macsec: add missing attribute validation for offload (git-fixes).
• macsec: clear encryption keys from the stack after setting up offload (git-fixes).
• macsec: delete new rxsc when offload fails (git-fixes).
• macsec: fix detection of RXSCs when toggling offloading (git-fixes).
• macsec: fix secy->nrxsc accounting (git-fixes).
• md/raid5: Ensure stripe_fill happens on non-read IO with journal (git-fixes).
• md/raid5: Remove unnecessary bioput() in raid5readonechunk() (git-fixes).
• md: Replace snprintf with scnprintf (git-fixes, bsc#1164051).
• media: cros-ec-cec: limit msg.len to CECMAXMSG_SIZE (git-fixes).
• media: dvb-frontends/drxk: initialize err to 0 (git-fixes).
• media: meson: vdec: fix possible refcount leak in vdec_probe() (git-fixes).
• media: rkisp1: Do not pass the quantization to rkisp1csmconfig() (git-fixes).
• media: rkisp1: Initialize color space on resizer sink and source pads (git-fixes).
• media: rkisp1: Use correct macro for gradient registers (git-fixes).
• media: rkisp1: Zero v4l2subdevformat fields in when validating links (git-fixes).
• media: s5pcec: limit msg.len to CECMAXMSGSIZE (git-fixes).
• media: v4l: subdev: Fail graciously when getting try data for NULL state (git-fixes).
• misc/vmwvmci: fix an infoleak in vmcihostdoreceive_datagram() (git-fixes).
• mmc: core: Fix ambiguous TRIM and DISCARD arg (git-fixes).
• mmc: core: properly select voltage range without power cycle (git-fixes).
• mmc: cqhci: Provide helper for resetting both SDHCI and CQHCI (git-fixes).
• mmc: mmc_test: Fix removal of debugfs file (git-fixes).
• mmc: sdhci-brcmstb: Enable Clock Gating to save power (git-fixes).
• mmc: sdhci-brcmstb: Fix SDHCIRESETALL for CQHCI (git-fixes).
• mmc: sdhci-brcmstb: Re-organize flags (git-fixes).
• mmc: sdhci-esdhc-imx: correct CQHCI exit halt state check (git-fixes).
• mmc: sdhci-esdhc-imx: use the correct host caps for MMCCAP8BITDATA (git-fixes).
• mmc: sdhci-of-arasan: Fix SDHCIRESETALL for CQHCI (git-fixes).
• mmc: sdhci-pci-o2micro: fix card detect fail issue caused by CD# debounce timeout (git-fixes).
• mmc: sdhci-pci: Fix possible memory leak caused by missing pcidevput() (git-fixes).
• mmc: sdhci-sprd: Fix no reset data and command after voltage switch (git-fixes).
• mmc: sdhci-tegra: Fix SDHCIRESETALL for CQHCI (git-fixes).
• mmc: sdhciam654: Fix SDHCIRESET_ALL for CQHCI (git-fixes).
• mms: sdhci-esdhc-imx: Fix SDHCIRESETALL for CQHCI (git-fixes).
• mtd: parsers: bcm47xxpart: Fix halfblock reads (git-fixes).
• mtd: parsers: bcm47xxpart: print correct offset on read error (git-fixes).
• mtd: spi-nor: intel-spi: Disable write protection only if asked (git-fixes).
• nbd: Fix incorrect error handle when firstminor is illegal in nbddev_add (git-fixes).
• net/smc: Avoid overwriting the copies of clcsock callback functions (git-fixes).
• net/smc: Fix an error code in smclgrcreate() (git-fixes).
• net/smc: Fix possible access to freed memory in link clear (git-fixes).
• net/smc: Fix possible leaked pernet namespace in smc_init() (git-fixes).
• net/smc: Fix slab-out-of-bounds issue in fallback (git-fixes).
• net/smc: Fix sock leak when release after smc_shutdown() (git-fixes).
• net/smc: Forward wakeup to smc socket waitqueue after fallback (git-fixes).
• net/smc: Only save the original clcsock callback functions (git-fixes).
• net/smc: Send directly when TCP_CORK is cleared (git-fixes).
• net/smc: kABI workarounds for struct smc_link (git-fixes).
• net/smc: kABI workarounds for struct smc_sock (git-fixes).
• net/smc: send directly on setting TCP_NODELAY (git-fixes).
• net/x25: Fix skb leak in x25lapbreceive_frame() (git-fixes).
• net: ethernet: nixge: fix NULL dereference (git-fixes).
• net: ethernet: renesas: ravb: Fix promiscuous mode after system resumed (git-fixes).
• net: ethernet: ti: am65-cpsw: fix error handling in am65cpswnuss_probe() (git-fixes).
• net: hyperv: remove use of bpfopt (git-fixes).
• net: mdio: fix unbalanced fwnode reference count in mdiodevicerelease() (git-fixes).
• net: mdiobus: fix unbalanced node reference count (git-fixes).
• net: phy: fix null-ptr-deref while probe() failed (git-fixes).
• net: phy: marvell: add sleep time after enabling the loopback bit (git-fixes).
• net: phy: mscc: macsec: clear encryption keys when freeing a flow (git-fixes).
• net: smsc95xx: add support for Microchip EVB-LAN8670-USB (git-fixes).
• net: stmmac: work around sporadic tx issue on link-up (git-fixes).
• net: thunderbolt: Fix error handling in tbnet_init() (git-fixes).
• net: thunderbolt: fix memory leak in tbnet_open() (git-fixes).
• net: thunderx: Fix the ACPI memory leak (git-fixes).
• net: usb: qmi_wwan: add Telit 0x103a composition (git-fixes).
• net: wwan: iosm: fix dmaalloccoherent incompatible pointer type (git-fixes).
• net: wwan: iosm: fix kernel test robot reported error (git-fixes).
• nfc/nci: fix race with opening and closing (git-fixes).
• nfc: nfcmrvl: Fix potential memory leak in nfcmrvli2cnci_send() (git-fixes).
• nfc: nxp-nci: Fix potential memory leak in nxpncisend() (git-fixes).
• nfc: s3fwrn5: Fix potential memory leak in s3fwrn5ncisend() (git-fixes).
• nfc: st-nci: fix incorrect sizing calculations in EVT_TRANSACTION (git-fixes).
• nfc: st-nci: fix incorrect validating logic in EVT_TRANSACTION (git-fixes).
• nfc: st-nci: fix memory leaks in EVT_TRANSACTION (git-fixes).
• nilfs2: fix NULL pointer dereference in nilfspalloccommitfreeentry() (git-fixes).
• nilfs2: fix deadlock in nilfscountfree_blocks() (git-fixes).
• nilfs2: fix nilfssufilemark_dirty() not set segment usage as dirty (git-fixes).
• nilfs2: fix use-after-free bug of ns_writer on remount (git-fixes).
• nilfs2: replace WARNONs by nilfserror for checkpoint acquisition failure (git-fixes).
• panic, kexec: make _crashkexec() NMI safe (git-fixes).
• parport_pc: Avoid FIFO port location truncation (git-fixes).
• phy: ralink: mt7621-pci: add sentinel to quirks table (git-fixes).
• phy: stm32: fix an error code in probe (git-fixes).
• pinctrl: devicetree: fix null pointer dereferencing in pinctrldtto_map (git-fixes).
• pinctrl: intel: Save and restore pins in 'direct IRQ' mode (git-fixes).
• pinctrl: rockchip: list all pins in a possible mux route for PX30 (git-fixes).
• pinctrl: single: Fix potential division by zero (git-fixes).
• platform/surface: aggregator: Do not check for repeated unsequenced packets (git-fixes).
• platform/x86/intel/pmt: Sapphire Rapids PMT errata fix (jsc#PED-2684 bsc#1205683).
• platform/x86/intel: hid: add quirk to support Surface Go 3 (git-fixes).
• platform/x86/intel: pmc: Do not unconditionally attach Intel PMC when virtualized (git-fixes).
• platform/x86: acer-wmi: Enable SWTABLETMODE on Switch V 10 (SW5-017) (git-fixes).
• platform/x86: asus-wmi: add missing pcidevput() in asuswmiset_xusb2pr() (git-fixes).
• platform/x86: hp-wmi: Ignore Smart Experience App event (git-fixes).
• platform/x86: hp_wmi: Fix rfkill causing soft blocked wifi (git-fixes).
• platform/x86: ideapad-laptop: Disable touchpad_switch (git-fixes).
• platform/x86: touchscreen_dmi: Add info for the RCA Cambio W101 v2 2-in-1 (git-fixes).
• powerpc/64: Fix build failure with allyesconfig in book3s64entry.S (bsc#1194869).
• powerpc/boot: Explicitly disable usage of SPE instructions (bsc#1156395).
• powerpc/kvm: Fix kvmusemagic_page (bsc#1156395).
• powerpc/pseries/vas: Declare pseriesvasfaultthreadfn() as static (bsc#1194869).
• proc: avoid integer type confusion in getproclong (git-fixes).
• proc: procskipspaces() shouldn't think it is working on C strings (git-fixes).
• rbd: fix possible memory leak in rbdsysfsinit() (git-fixes).
• regulator: core: fix UAF in destroy_regulator() (git-fixes).
• regulator: core: fix kobject release warning and memory leak in regulator_register() (git-fixes).
• regulator: twl6030: re-add TWL6032_SUBCLASS (git-fixes).
• ring-buffer: Include dropped pages in counting dirty patches (git-fixes).
• ring_buffer: Do not deactivate non-existant pages (git-fixes).
• s390/futex: add missing EXTABLE entry to _futexatomicop() (bsc#1205427 LTC#200502).
• s390/pci: add missing EXTABLE entries to pcistgmioinuser()/pcilgmio_inuser() (bsc#1205427 LTC#200502).
• s390/uaccess: add missing EXTABLE entries to _clearuser(), copyinusermvcos(), copyinusermvc(), clearuserxc() and _strnlen_user() (bsc#1205428 LTC#200501).
• s390: fix nospec table alignments (git-fixes).
• sched: Clear ttwupending after enqueuetask() (git fixes (sched/core)).
• sched: Disable sched domain debugfs creation on ppc64 unless sched_verbose is specified (bnc#1205653).
• scripts/faddr2line: Fix regression in name resolution on ppc64le (git-fixes).
• scsi: ibmvfc: Avoid path failures during live migration (bsc#1065729).
• scsi: ibmvscsis: Increase INITIALSRPLIMIT to 1024 (bsc#1156395).
• scsi: megaraidsas: Correct value passed to scsidevice_lookup() (git-fixes).
• scsi: mpt3sas: Fix return value check of dmagetrequired_mask() (git-fixes).
• scsi: qedf: Populate sysfs attributes for vport (git-fixes).
• scsi: scsitransportsas: Fix error handling in sasphyadd() (git-fixes).
• scsi: storvsc: Drop DIDTARGETFAILURE use (git-fixes).
• scsi: storvsc: Fix handling of srb_status and capacity change events (git-fixes).
• scsi: storvsc: Fix typo in comment (git-fixes).
• scsi: storvsc: Remove WQMEMRECLAIM from storvscerrorwq (git-fixes).
• scsi: storvsc: remove an extraneous 'to' in a comment (git-fixes).
• scsi: zfcp: Fix double free of FSF request when qdio send fails (git-fixes).
• selftests/intelpstate: fix build for ARCH=x8664 (git-fixes).
• selftests: mptcp: fix mibit vs mbit mix up (git-fixes).
• selftests: mptcp: make sendfile selftest work (git-fixes).
• selftests: mptcp: more stable simult_flows tests (git-fixes).
• selftests: rtnetlink: correct xfrm policy rule in kcitestipsec_offload (git-fixes).
• serial: 8250: 8250omap: Avoid RS485 RTS glitch on ->settermios() (git-fixes).
• serial: 8250: Fall back to non-DMA Rx if IIR_RDI occurs (git-fixes).
• serial: 8250: Flush DMA Rx on RLSI (git-fixes).
• serial: 8250: omap: Fix unpaired pmruntimeputsync() in omap8250remove() (git-fixes).
• serial: 8250: omap: Flush PM QOS work on remove (git-fixes).
• serial: 8250_lpss: Configure DMA also w/o DMA filter (git-fixes).
• serial: 8250_omap: remove wait loop from Errata i202 workaround (git-fixes).
• serial: imx: Add missing .thaw_noirq hook (git-fixes).
• siox: fix possible memory leak in sioxdeviceadd() (git-fixes).
• slimbus: stream: correct presence rate frequencies (git-fixes).
• smb2: small refactor in smb2checkmessage() (bsc#1193629).
• smb3: Move the flush out of smb2copychunkrange() into its callers (bsc#1193629).
• smb3: add dynamic trace points for tree disconnect (bsc#1193629).
• smb3: add trace point for SMB2seteof (bsc#1193629).
• smb3: allow deferred close timeout to be configurable (bsc#1193629).
• smb3: check xattr value length earlier (bsc#1193629).
• smb3: clarify multichannel warning (bsc#1193629).
• smb3: do not log confusing message when server returns no network interfaces (bsc#1193629).
• smb3: fix empty netname context on secondary channels (bsc#1193629).
• smb3: fix oops in calculating shash_setkey (bsc#1193629).
• smb3: fix temporary data corruption in collapse range (bsc#1193629).
• smb3: fix temporary data corruption in insert range (bsc#1193629).
• smb3: improve SMB3 change notification support (bsc#1193629).
• smb3: interface count displayed incorrectly (bsc#1193629).
• smb3: missing inode locks in punch hole (bsc#1193629).
• smb3: missing inode locks in zero range (bsc#1193629).
• smb3: must initialize two ACL struct fields to zero (bsc#1193629).
• smb3: remove unneeded null check in cifs_readdir (bsc#1193629).
• smb3: rename encryption/decryption TFMs (bsc#1193629).
• smb3: use filemapwriteandwaitrange instead of filemapwriteand_wait (bsc#1193629).
• smb3: use netname when available on secondary channels (bsc#1193629).
• smb3: workaround negprot bug in some Samba servers (bsc#1193629).
• soc: imx8m: Enable OCOTP clock before reading the register (git-fixes).
• soundwire: intel: Initialize clock stop timeout (bsc#1205507).
• soundwire: qcom: check for outanding writes before doing a read (git-fixes).
• soundwire: qcom: reinit broadcast completion (git-fixes).
• speakup: fix a segfault caused by switching consoles (git-fixes).
• spi: dw-dma: decrease reference count in dwspidmainitmfld() (git-fixes).
• spi: spi-imx: Fix spibusclk if requested clock is higher than input clock (git-fixes).
• spi: stm32: Print summary 'callbacks suppressed' message (git-fixes).
• spi: stm32: fix stm32spiprepare_mbr() that halves spi clk for every run (git-fixes).
• spi: tegra210-quad: Fix duplicate resource error (git-fixes).
• thunderbolt: Add DP OUT resource when DP tunnel is discovered (git-fixes).
• tools: hv: Remove an extraneous 'the' (git-fixes).
• tools: hv: kvp: remove unnecessary (void*) conversions (git-fixes).
• tools: iio: iiogenericbuffer: Fix read size (git-fixes).
• tracing/ring-buffer: Have polling block on watermark (git-fixes).
• tracing: Fix memory leak in testgensynthcmd() and testemptysynthevent() (git-fixes).
• tracing: Fix memory leak in tracingreadpipe() (git-fixes).
• tracing: Fix wild-memory-access in registersynthevent() (git-fixes).
• tracing: kprobe: Fix memory leak in testgenkprobe/kretprobe_cmd() (git-fixes).
• tracing: kprobe: Fix potential null-ptr-deref on tracearray in kprobeeventgentest_exit() (git-fixes).
• tracing: kprobe: Fix potential null-ptr-deref on traceeventfile in kprobeeventgentestexit() (git-fixes).
• tty: ngsm: fix sleep-in-atomic-context bug in gsmcontrol_send (git-fixes).
• tty: serial: fsl_lpuart: do not break the on-going transfer when global reset (git-fixes).
• usb: add NO_LPM quirk for Realforce 87U Keyboard (git-fixes).
• usb: cdns3: host: fix endless superspeed hub port reset (git-fixes).
• usb: cdnsp: Fix issue with Clear Feature Halt Endpoint (git-fixes).
• usb: cdnsp: fix issue with ZLP - added TD_SIZE = 1 (git-fixes).
• usb: chipidea: fix deadlock in ciotgdel_timer (git-fixes).
• usb: dwc3: exynos: Fix remove() function (git-fixes).
• usb: dwc3: gadget: Clear ep descriptor last (git-fixes).
• usb: dwc3: gadget: Return -ESHUTDOWN on ep disable (git-fixes).
• usb: dwc3: gadget: conditionally remove requests (git-fixes).
• usb: smsc: use ethhwaddr_set() (git-fixes).
• usb: typec: mux: Enter safe mode only when pins need to be reconfigured (git-fixes).
• usb: xhci-mtk: check boundary before check tt (git-fixes).
• usb: xhci-mtk: update fs bus bandwidth by bwbudgettable (git-fixes).
• usbnet: smsc95xx: Do not reset PHY behind PHY driver's back (git-fixes).
• v3 of 'PCI: hv: Only reuse existing IRTE allocation for Multi-MSI'
• video/fbdev/stifb: Implement the stifb_fillrect() function (git-fixes).
• virtio-blk: Use blkvalidateblock_size() to validate block size (git-fixes).
• vmxnet3: correctly report encapsulated LRO packet (git-fixes).
• vmxnet3: use correct intrConf reference when using extended queues (git-fixes).
• wifi: airo: do not assign -1 to unsigned char (git-fixes).
• wifi: ath11k: Fix QCN9074 firmware boot on x86 (git-fixes).
• wifi: ath11k: avoid deadlock during regulatory update in ath11kregdupdate() (git-fixes).
• wifi: cfg80211: do not allow multi-BSSID in S1G (git-fixes).
• wifi: cfg80211: fix buffer overflow in elem comparison (git-fixes).
• wifi: cfg80211: fix memory leak in queryregdbfile() (git-fixes).
• wifi: cfg80211: silence a sparse RCU warning (git-fixes).
• wifi: mac80211: Fix ack frame idr leak when mesh has no route (git-fixes).
• wifi: mac80211: fix memory free error when registering wiphy fail (git-fixes).
• wifi: mac80211_hwsim: fix debugfs attribute ps with rc table support (git-fixes).
• wifi: mac8021: fix possible oob access in ieee80211getrate_duration (git-fixes).
• wifi: wext: use flex array destination for memcpy() (git-fixes).
• wifi: wilc1000: validate length of IEEE80211P2PATTRCHANNELLIST attribute (git-fixes).
• wifi: wilc1000: validate length of IEEE80211P2PATTROPERCHANNEL attribute (git-fixes).
• wifi: wilc1000: validate number of channels (git-fixes).
• wifi: wilc1000: validate pairwise and authentication suite offsets (git-fixes).
• x86/Xen: streamline (and fix) PV CPU enumeration (git-fixes).
• x86/bugs: Make sure MSRSPECCTRL is updated properly upon resume from S3 (bsc#1206037).
• x86/cpu: Restore AMD's DE_CFG MSR after resume (bsc#1205473).
• x86/entry: Work around Clang __bdos() bug (git-fixes).
• x86/extable: Extend extable functionality (git-fixes).
• x86/fpu: Drop fpregs lock before inheriting FPU permissions (bnc#1205282).
• x86/futex: Remove .fixup usage (git-fixes).
• x86/hyperv: Disable hardlockup detector by default in Hyper-V guests (git-fixes).
• x86/hyperv: Fix 'struct hvenlightenedvmcs' definition (git-fixes).
• x86/hyperv: Update 'struct hvenlightenedvmcs' definition (git-fixes).
• x86/hyperv: fix invalid writes to MSRs during root partition kexec (git-fixes).
• x86/kexec: Fix double-free of elf header buffer (bsc#1205567).
• x86/microcode/AMD: Apply the patch early on every logical thread (bsc#1205264).
• x86/uaccess: Implement macros for CMPXCHG on user addresses (git-fixes).
• xen/gntdev: Accommodate VMA splitting (git-fixes).
• xen/pcpu: fix possible memory leak in register_pcpu() (git-fixes).
• xen: delay xenhvminittimeops() if kdump is boot on vcpu>=32 (git-fixes).
• xfs: convert XLOGFORCEDSHUTDOWN() to xlogisshutdown() (git-fixes).
• xfs: fix perag reference leak on iteration race with growfs (git-fixes).
• xfs: fix xfs_ifree() error handling to not leak perag ref (git-fixes).
• xfs: reserve quota for dir expansion when linking/unlinking files (bsc#1205616).
• xfs: reserve quota for target dir expansion when renaming files (bsc#1205679).