SUSE-SU-2023:0146-1

The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

• CVE-2022-3344: Fixed a flaw found in the KVM's AMD nested virtualization (SVM). A malicious L1 guest could purposely fail to intercept the shutdown of a cooperative nested guest (L2), possibly leading to a page fault and kernel panic in the host (L0). (bsc#1204652)
• CVE-2022-4662: Fixed a recursive locking violation in usb-storage that can cause the kernel to deadlock. (bsc#1206664)
• CVE-2022-3115: Fixed a null pointer dereference in malidp_crtc.c caused by a lack of checks of the return value of kzalloc. (bsc#1206393)
• CVE-2022-47520: Fixed an out-of-bounds read when parsing a Robust Security Network (RSN) information element from a Netlink packet. (bsc#1206515)
• CVE-2022-3112: Fixed a null pointer dereference caused by a missing check of the return value of kzalloc() in vdechelpers.c:amvdecset_canvases. (bsc#1206399)
• CVE-2022-3564: Fixed a bug which could lead to use after free, it was found in the function l2capreassemblesdu of the file net/bluetooth/l2cap_core.c of the component Bluetooth. (bsc#1206073)
• CVE-2022-4379: Fixed a use-after-free vulnerability in nfs4file.c:_nfs42ssc_open. (bsc#1206209)
• CVE-2022-3108: Fixed a bug in kfdparsesubtypeiolink in drivers/gpu/drm/amd/amdkfd/kfdcrat.c where a lack of check of the return value of kmemdup() could lead to a NULL pointer dereference. (bsc#1206389)
• CVE-2022-3104: Fixed a null pointer dereference caused by caused by a missing check of the return value of kzalloc() in bugs.c:lkdtmARRAYBOUNDS. (bsc#1206396)
• CVE-2022-3113: Fixed a null pointer dereference caused by a missing check of the return value of devm_kzalloc. (bsc#1206390)
• CVE-2022-3107: Fixed a null pointer dereference caused by a missing check of the return value of kvmalloc_array. (bsc#1206395)
• CVE-2022-3114: Fixed a null pointer dereference caused by a missing check of the return value of kcalloc. (bsc#1206391)
• CVE-2022-3111: Fixed a missing release of resource after effective lifetime bug caused by a missing free of the WM8350IRQCHGFASTRDY in wm8350initcharger. (bsc#1206394)
• CVE-2022-3105: Fixed a null pointer dereference caused by a missing check of the return value of kmalloc_array. (bsc#1206398)
• CVE-2022-3106: Fixed a null pointer dereference caused by a missing check of the return value of kmalloc. (bsc#1206397)

The following non-security bugs were fixed:

• acct: fix potential integer overflow in encodecompt() (git-fixes).
• ACPI: resource: Skip IRQ override on Asus Vivobook K3402ZA/K3502ZA (git-fixes).
• ACPICA: Fix error code path in acpidscallcontrolmethod() (git-fixes).
• ACPICA: Fix use-after-free in acpiutcopyipackageto_ipackage() (git-fixes).
• ALSA: asihpi: fix missing pcidisabledevice() (git-fixes).
• ALSA: hda/hdmi: Add HP Device 0x8711 to force connect list (git-fixes).
• ALSA: hda/realtek: Add quirk for Lenovo TianYi510Pro-14IOB (git-fixes).
• ALSA: hda/realtek: Apply dual codec fixup for Dell Latitude laptops (git-fixes).
• ALSA: line6: correct midi status byte when receiving data from podxt (git-fixes).
• ALSA: line6: fix stack overflow in line6miditransmit (git-fixes).
• ALSA: mts64: fix possible null-ptr-defer in sndmts64interrupt (git-fixes).
• ALSA: patch_realtek: Fix Dell Inspiron Plus 16 (git-fixes).
• ALSA: pcm: fix undefined behavior in bit shift for SNDRVPCMRATE_KNOT (git-fixes).
• ALSA: pcm: Set missing stop_operating flag at undoing trigger start (git-fixes).
• ALSA: seq: Fix function prototype mismatch in sndseqexpandvarevent (git-fixes).
• ALSA: seq: fix undefined behavior in bit shift for SNDRVSEQFILTERUSEEVENT (git-fixes).
• ALSA: usb-audio: add the quirk for KT0206 device (git-fixes).
• amdgpu/pm: prevent array underflow in vega20odneditdpmtable() (git-fixes).
• apparmor: fix a memleak in multitransactionnew() (git-fixes).
• apparmor: Fix abi check to include v8 abi (git-fixes).
• apparmor: fix lockdep warning when removing a namespace (git-fixes).
• apparmor: Fix memleak in alloc_ns() (git-fixes).
• apparmor: Use pointer to struct aalabel for lbscred (git-fixes).
• ARM: 9251/1: perf: Fix stacktraces for tracepoint events in THUMB2 kernels (git-fixes).
• ARM: 9256/1: NWFPE: avoid compiler-generated _aeabiuldivmod (git-fixes).
• ARM: dts: armada-370: Fix assigned-addresses for every PCIe Root Port (git-fixes).
• ARM: dts: armada-375: Fix assigned-addresses for every PCIe Root Port (git-fixes).
• ARM: dts: armada-38x: Fix assigned-addresses for every PCIe Root Port (git-fixes).
• ARM: dts: armada-38x: Fix compatible string for gpios (git-fixes).
• ARM: dts: armada-39x: Fix assigned-addresses for every PCIe Root Port (git-fixes).
• ARM: dts: armada-39x: Fix compatible string for gpios (git-fixes).
• ARM: dts: armada-xp: Fix assigned-addresses for every PCIe Root Port (git-fixes).
• ARM: dts: dove: Fix assigned-addresses for every PCIe Root Port (git-fixes).
• ARM: dts: nuvoton: Remove bogus unit addresses from fixed-partition nodes (git-fixes).
• ARM: dts: qcom: apq8064: fix coresight compatible (git-fixes).
• ARM: dts: rockchip: disable armglobaltimer on rk3066 and rk3188 (git-fixes).
• ARM: dts: rockchip: fix ir-receiver node names (git-fixes).
• ARM: dts: rockchip: fix node name for hym8563 rtc (git-fixes).
• ARM: dts: rockchip: remove clock-frequency from rtc (git-fixes).
• ARM: dts: rockchip: rk3188: fix lcdc1-rgb24 node name (git-fixes).
• ARM: dts: spear600: Fix clcd interrupt (git-fixes).
• ARM: dts: stm32: Drop stm32mp15xc.dtsi from Avenger96 (git-fixes).
• ARM: dts: stm32: Fix AV96 WLAN regulator gpio property (git-fixes).
• ARM: dts: turris-omnia: Add ethernet aliases (git-fixes).
• ARM: dts: turris-omnia: Add switch port 6 node (git-fixes).
• ARM: mmp: fix timer_read delay (git-fixes).
• ARM: ux500: do not directly dereference __iomem (git-fixes).
• arm64: Avoid repeated AA64MMFR1_EL1 register read on pagefault path (performance bsc#1203219).
• arm64: dts: armada-3720-turris-mox: Add missing interrupt for RTC (git-fixes).
• arm64: dts: mediatek: mt6797: Fix 26M oscillator unit name (git-fixes).
• arm64: dts: mediatek: pumpkin-common: Fix devicetree warnings (git-fixes).
• arm64: dts: mt2712-evb: Fix usb vbus regulators unit names (git-fixes).
• arm64: dts: mt2712-evb: Fix vproc fixed regulators unit names (git-fixes).
• arm64: dts: mt2712e: Fix unit address for pinctrl node (git-fixes).
• arm64: dts: mt2712e: Fix unitaddressvs_reg warning for oscillators (git-fixes).
• arm64: dts: mt6779: Fix devicetree build warnings (git-fixes).
• arm64: dts: mt7622: drop r_smpl property from mmc node (git-fixes).
• arm64: dts: mt8183: drop drv-type from mmc-node (git-fixes).
• arm64: dts: mt8183: Fix Mali GPU clock (git-fixes).
• arm64: dts: qcom: ipq6018-cp01-c1: use BLSPI1 pins (git-fixes).
• arm64: dts: qcom: msm8916: Drop MSS fallback compatible (git-fixes).
• arm64: dts: qcom: msm8996: Add MSM8996 Pro support (git-fixes).
• arm64: dts: qcom: msm8996: fix GPU OPP table (git-fixes).
• arm64: dts: qcom: msm8996: fix supported-hw in cpufreq OPP tables (git-fixes).
• arm64: dts: qcom: sdm630: fix UART1 pin bias (git-fixes).
• arm64: dts: qcom: sdm845-cheza: fix AP suspend pin bias (git-fixes).
• arm64: dts: qcom: sdm845-db845c: correct SPI2 pins drive strength (git-fixes).
• arm64: dts: qcom: sdm850-lenovo-yoga-c630: correct I2C12 pins drive strength (git-fixes).
• arm64: dts: qcom: sm8250-sony-xperia-edo: fix touchscreen bias-disable (git-fixes).
• arm64: dts: qcom: sm8250: correct LPASS pin pull down (git-fixes).
• arm64: dts: qcom: sm8250: drop bogus DP PHY clock (git-fixes).
• arm64: dts: qcom: sm8250: fix USB-DP PHY registers (git-fixes).
• arm64: dts: rockchip: fix ir-receiver node names (git-fixes).
• arm64: dts: rockchip: keep I2S1 disabled for GPIO function on ROCK Pi 4 series (git-fixes).
• arm64: dts: ti: k3-am65-main: Drop dma-coherent in crypto node (git-fixes).
• arm64: dts: ti: k3-j721e-main: Drop dma-coherent in crypto node (git-fixes).
• ASoC: audio-graph-card: fix refcount leak of cpuep in _graphforeach_link() (git-fixes).
• ASoC: codecs: rt298: Add quirk for KBL-R RVP platform (git-fixes).
• ASoC: cs42l51: Correct PGA Volume minimum value (git-fixes).
• ASoC: dt-bindings: wcd9335: fix reset line polarity in example (git-fixes).
• ASoC: fsl_micfil: explicitly clear CHnF flags (git-fixes).
• ASoC: fsl_micfil: explicitly clear software reset bit (git-fixes).
• ASoC: Intel: bytcr_rt5640: Add quirk for the Advantech MICA-071 tablet (git-fixes).
• ASoC: jz4740-i2s: Handle independent FIFO flush bits (git-fixes).
• ASoC: mediatek: mt8173-rt5650-rt5514: fix refcount leak in mt8173rt5650rt5514devprobe() (git-fixes).
• ASoC: mediatek: mt8173: Enable IRQ when pdata is ready (git-fixes).
• ASoC: mediatek: mt8183: fix refcount leak in mt8183mt6358ts3a227max98357dev_probe() (git-fixes).
• ASoC: mediatek: mtk-btcvsd: Add checks for write and read of mtkbtcvsdsnd (git-fixes).
• ASoC: ops: Check bounds for second channel in sndsocputvolswsx() (git-fixes).
• ASoC: ops: Correct bounds check for second channel on SX controls (git-fixes).
• ASoC: pcm512x: Fix PM disable depth imbalance in pcm512x_probe (git-fixes).
• ASoC: pxa: fix null-pointer dereference in filter() (git-fixes).
• ASoC: qcom: Add checks for devm_kcalloc (git-fixes).
• ASoC: rockchip: pdm: Add missing clkdisableunprepare() in rockchippdmruntime_resume() (git-fixes).
• ASoC: rockchip: spdif: Add missing clkdisableunprepare() in rkspdifruntime_resume() (git-fixes).
• ASoC: rt5670: Remove unbalanced pmruntimeput() (git-fixes).
• ASoC: rt711-sdca: fix the latency time of clock stop prepare state machine transitions (git-fixes).
• ASoC: soc-pcm: Add NULL check in BE reparenting (git-fixes).
• ASoC: wm8962: Wait for updated value of WM8962_CLOCKING1 register (git-fixes).
• ASoC: wm8994: Fix potential deadlock (git-fixes).
• ata: ahci: Fix PCS quirk application for suspend (git-fixes).
• binfmtelf: fix documented return value for loadelf_phdrs() (git-fixes).
• binfmtmisc: fix shift-out-of-bounds in checkspecial_flags (git-fixes).
• binfmt: Fix error return code in loadelffdpic_binary() (git-fixes).
• block: Do not reread partition table on exclusively open device (bsc#1190969).
• Bluetooth: btintel: Fix missing free skb in btintelsetupcombined() (git-fixes).
• Bluetooth: btusb: Add debug message for CSR controllers (git-fixes).
• Bluetooth: btusb: do not call kfreeskb() under spinlock_irqsave() (git-fixes).
• Bluetooth: hcibcsp: do not call kfreeskb() under spinlockirqsave() (git-fixes).
• Bluetooth: hcicore: do not call kfreeskb() under spinlockirqsave() (git-fixes).
• Bluetooth: hcih5: do not call kfreeskb() under spinlockirqsave() (git-fixes).
• Bluetooth: hcill: do not call kfreeskb() under spinlockirqsave() (git-fixes).
• Bluetooth: hciqca: do not call kfreeskb() under spinlockirqsave() (git-fixes).
• Bluetooth: MGMT: Fix error report for ADDEXTADV_PARAMS (git-fixes).
• Bluetooth: RFCOMM: do not call kfreeskb() under spinlock_irqsave() (git-fixes).
• brcmfmac: return error when getting invalid max_flowrings from dongle (git-fixes).
• caif: fix memory leak in cfctrllinkuprequest() (git-fixes).
• can: do not increase rx statistics when generating a CAN rx error message frame (git-fixes).
• can: do not increase rx_bytes statistics for RTR frames (git-fixes).
• can: kvaserusbleaf: Fix bogus restart events (git-fixes).
• can: kvaserusbleaf: Fix wrong CAN state after stopping (git-fixes).
• can: kvaserusbleaf: Set Warning state even without bus errors (git-fixes).
• can: kvaser_usb: do not increase tx statistics when sending error message frames (git-fixes).
• can: kvaserusb: kvaserusb_leaf: fix bittiming limits (git-fixes).
• can: kvaser_usb: make use of units.h in assignment of frequency (git-fixes).
• can: m_can: fix typo prescalar -> prescaler (git-fixes).
• can: mcan: islec_err(): clean up LEC error handling (git-fixes).
• can: mcba_usb: Fix termination command argument (git-fixes).
• can: sja1000: fix size of OCRMODEMASK define (git-fixes).
• can: tcan4x5x: Remove invalid write in clear_interrupts (git-fixes).
• chardev: fix error handling in cdevdeviceadd() (git-fixes).
• cifs: Add 'extbuf' and 'extbuflen' args to smb2compoundop() (bsc#1193629).
• cifs: do not block in dfscachenorequpdatetgthint() (bsc#1193629).
• cifs: do not leak -ENOMEM in smb2openfile() (bsc#1193629).
• cifs: do not refresh cached referrals from unactive mounts (bsc#1193629).
• cifs: fix confusing debug message (bsc#1193629).
• cifs: Fix kmaplocalpage() unmapping (git-fixes).
• cifs: fix missing display of three mount options (bsc#1193629).
• cifs: fix oops during encryption (bsc#1199294).
• cifs: fix refresh of cached referrals (bsc#1193629).
• cifs: fix source pathname comparison of dfs supers (bsc#1193629).
• cifs: fix various whitespace errors in headers (bsc#1193629).
• cifs: get rid of mount options string parsing (bsc#1193629).
• cifs: minor cleanup of some headers (bsc#1193629).
• cifs: optimize reconnect of nested links (bsc#1193629).
• cifs: Parse owner/group for stat in smb311 posix extensions (bsc#1193629).
• cifs: print warning when conflicting soft vs. hard mount options specified (bsc#1193629).
• cifs: reduce roundtrips on create/qinfo requests (bsc#1193629).
• cifs: refresh root referrals (bsc#1193629).
• cifs: Remove duplicated include in cifsglob.h (bsc#1193629).
• cifs: remove unused smb3fscontext::mount_options (bsc#1193629).
• cifs: set correct ipc status after initial tree connect (bsc#1193629).
• cifs: set correct status of tcon ipc when reconnecting (bsc#1193629).
• cifs: set correct tcon status after initial tree connect (bsc#1193629).
• cifs: set resolved ip in sockaddr (bsc#1193629).
• cifs: share dfs connections and supers (bsc#1193629).
• cifs: skip alloc when request has no pages (bsc#1193629).
• cifs: split out ses and tcon retrieval from mountgetconns() (bsc#1193629).
• cifs: update internal module number (bsc#1193629).
• cifs: use fs_context for automounts (bsc#1193629).
• cifs: use origin fullpath for automounts (bsc#1193629).
• class: fix possible memory leak in _classregister() (git-fixes).
• clk: Fix pointer casting to prevent oops in devmclkrelease() (git-fixes).
• clk: generalize devmclkget() a bit (git-fixes).
• clk: imx: imx8mp: add shared clk gate for usb suspend clk (git-fixes).
• clk: imx: replace osc_hdmi with dummy (git-fixes).
• clk: nomadik: correct struct name kernel-doc warning (git-fixes).
• clk: Provide new devm_clk helpers for prepared and enabled clocks (git-fixes).
• clk: qcom: clk-krait: fix wrong div2 functions (git-fixes).
• clk: qcom: gcc-sm8250: Use retention mode for USB GDSCs (git-fixes).
• clk: qcom: lpass-sc7180: Fix pm_runtime usage (git-fixes).
• clk: renesas: r9a06g032: Repair grave increment error (git-fixes).
• clk: rockchip: Fix memory leak in rockchipclkregister_pll() (git-fixes).
• clk: samsung: Fix memory leak in samsungclkregisterpll() (git-fixes).
• clk: socfpga: Fix memory leak in socfpgagateinit() (git-fixes).
• clk: st: Fix memory leak in stofquadfs_setup() (git-fixes).
• clk: sunxi-ng: v3s: Correct the header guard of ccu-sun8i-v3s.h (git-fixes).
• clocksource/drivers/sh_cmt: Access registers according to spec (git-fixes).
• clocksource/drivers/timer-ti-dm: Fix missing clkdisableunprepare in dmtimersystimerinit_clock() (git-fixes).
• cpufreq: ACPI: Defer setting boost MSRs (bsc#1205485).
• cpufreq: ACPI: Only set boost MSRs on supported CPUs (bsc#1205485).
• cpufreq: ACPI: Remove unused variables 'acpicpufreqonline' and 'ret' (bsc#1205485).
• cpufreq: intel_pstate: Add Sapphire Rapids support in no-HWP mode (bsc#1201068).
• crypto: ccree - Make ccdebugfsglobal_fini() available for module init function (git-fixes).
• crypto: ccree - Remove debugfs when platformdriverregister failed (git-fixes).
• crypto: cryptd - Use request context instead of stack for sub-request (git-fixes).
• crypto: hisilicon/qm - fix missing destroy qp_idr (git-fixes).
• crypto: img-hash - Fix variable dereferenced before check 'hdev->req' (git-fixes).
• crypto: n2 - add missing hash statesize (git-fixes).
• crypto: nitrox - avoid double free on error path in nitroxsriovinit() (git-fixes).
• crypto: omap-sham - Use pmruntimeresumeandget() in omapshamprobe() (git-fixes).
• crypto: rockchip - add fallback for ahash (git-fixes).
• crypto: rockchip - add fallback for cipher (git-fixes).
• crypto: rockchip - better handle cipher key (git-fixes).
• crypto: rockchip - do not do custom power management (git-fixes).
• crypto: rockchip - do not store mode globally (git-fixes).
• crypto: rockchip - remove non-aligned handling (git-fixes).
• crypto: rockchip - rework by using crypto_engine (git-fixes).
• crypto: sun8i-ss - use dma_addr instead u32 (git-fixes).
• crypto: tcrypt - Fix multibuffer skcipher speed test mem leak (git-fixes).
• device property: Fix documentation for fwnodegetnext_parent() (git-fixes).
• dmaengine: idxd: Fix crc_val field for completion record (git-fixes).
• docs/zh_CN: Fix '.. only::' directive's expression (git-fixes).
• Documentation: bonding: update miimon default to 100 (git-fixes).
• Documentation: devres: add missing devmacpidmacontrollerfree() helper (git-fixes).
• Documentation: devres: add missing MEM helper (git-fixes).
• Documentation: devres: add missing PHY helpers (git-fixes).
• Documentation: devres: add missing PWM helper (git-fixes).
• Documentation/features-refresh.sh: Only sed the beginning 'arch' of ARCH_DIR (git-fixes).
• drbd: destroy workqueue when drbd device was freed (git-fixes).
• drbd: remove call to memset before free device/resource/connection (git-fixes).
• drbd: remove usage of list iterator variable after loop (git-fixes).
• drbd: set QUEUEFLAGSTABLE_WRITES (git-fixes).
• drbd: use after free in drbdcreatedevice() (git-fixes).
• driver core: Fix bustype.match() error handling in _driver_attach() (git-fixes).
• drivers: dio: fix possible memory leak in dio_init() (git-fixes).
• drivers: soc: ti: knavqmssqueue: Mark knavaccfirmwares as static (git-fixes).
• drm: bridge: dw_hdmi: fix preference of RGB modes over YUV420 (git-fixes).
• drm/amd/display: fix array index out of bound error in bios parser (git-fixes).
• drm/amd/display: Manually adjust strobe for DCN303 (git-fixes).
• drm/amd/display: prevent memory leak (git-fixes).
• drm/amd/display: Use the largest vready_offset in pipe group (git-fixes).
• drm/amd/pm/smu11: BACO is supported when it's in BACO state (git-fixes).
• drm/amdgpu: fix pci device refcount leak (git-fixes).
• drm/amdgpu: Fix PCI device refcount leak in amdgpuatrmget_bios() (git-fixes).
• drm/amdgpu: Fix type of second parameter in odneditdpm_table() callback (git-fixes).
• drm/amdgpu: Fix type of second parameter in trans_msg() callback (git-fixes).
• drm/amdgpu: handle polaris10/11 overlap asics (v2) (git-fixes).
• drm/amdgpu: make display pinning more flexible (v2) (git-fixes).
• drm/amdgpu/powerplay/psm: Fix memory leak in power state init (git-fixes).
• drm/amdgpu/sdmav40: turn off SDMA ring buffer in the s2idle suspend (git-fixes).
• drm/amdkfd: Fix memory leakage (git-fixes).
• drm/bridge: adv7533: remove dynamic lane switching from adv7533 bridge (git-fixes).
• drm/bridge: anx7625: Fix edidread break case in sptxedidread() (git-fixes).
• drm/bridge: ti-sn65dsi86: Fix output polarity setting bug (git-fixes).
• drm/connector: send hotplug uevent on connector cleanup (git-fixes).
• drm/edid: Fix minimum bpc supported with DSC1.2 for HDMI sink (git-fixes).
• drm/etnaviv: add missing quirks for GC300 (git-fixes).
• drm/etnaviv: do not truncate physical page address (git-fixes).
• drm/fourcc: Add packed 10bit YUV 4:2:0 format (git-fixes).
• drm/fourcc: Fix vsub/hsub for Q410 and Q401 (git-fixes).
• drm/fsl-dcu: Fix return type of fsldcudrmconnectormode_valid() (git-fixes).
• drm/i915: Fix documentation for inteluncoreforcewakeput_locked (git-fixes).
• drm/i915: remove circ_buf.h includes (git-fixes).
• drm/i915: unpin on error in intelvgpushadowmmpin() (git-fixes).
• drm/i915/display: Do not disable DDI/Transcoder when setting phy test pattern (git-fixes).
• drm/i915/dsi: fix VBT send packet port selection for dual link DSI (git-fixes).
• drm/i915/gvt: fix gvt debugfs destroy (git-fixes).
• drm/i915/gvt: fix vgpu debugfs clean in remove (git-fixes).
• drm/i915/migrate: do not check the scratch page (git-fixes).
• drm/i915/migrate: fix length calculation (git-fixes).
• drm/i915/migrate: fix offset calculation (git-fixes).
• drm/i915/ttm: never purge busy objects (git-fixes).
• drm/imx: ipuv3-plane: Fix overlay plane width (git-fixes).
• drm/ingenic: Fix missing platformdriverunregister() call in ingenicdrminit() (git-fixes).
• drm/mediatek: Fix return type of mtkhdmibridgemodevalid() (git-fixes).
• drm/mediatek: Modify dpi power on/off sequence (git-fixes).
• drm/meson: Reduce the FIFO lines held when AFBC is not used (git-fixes).
• drm/msm: Use drmmodecopy() (git-fixes).
• drm/panel/panel-sitronix-st7701: Remove panel on DSI attach failure (git-fixes).
• drm/panfrost: Fix GEM handle creation ref-counting (git-fixes).
• drm/radeon: Add the missed acpiputtable() to fix memory leak (git-fixes).
• drm/radeon: Fix PCI device refcount leak in radeonatrmget_bios() (git-fixes).
• drm/rockchip: lvds: fix PM usage counter unbalance in poweron (git-fixes).
• drm/rockchip: Use drmmodecopy() (git-fixes).
• drm/shmem-helper: Avoid vm_open error paths (git-fixes).
• drm/shmem-helper: Remove errant put in error path (git-fixes).
• drm/sti: Fix return type of sti{dvo,hda,hdmi}connectormodevalid() (git-fixes).
• drm/sti: Use drmmodecopy() (git-fixes).
• drm/tegra: Add missing clkdisableunprepare() in tegradcprobe() (git-fixes).
• drm/vmwgfx: Do not use screen objects when SEV is active (git-fixes).
• drm/vmwgfx: Fix a sparse warning in kernel docs (git-fixes).
• drm/vmwgfx: Validate the box size for the snooped cursor (git-fixes).
• Drop FIPS mode DRBG->getrandom(2) wire-up (bsc#1191259)
• dt-bindings: clock: qcom,aoncc-sm8250: fix compatible (git-fixes).
• dt-bindings: clocks: imx8mp: Add ID for usb suspend clock (git-fixes).
• dt-bindings: display: sun6i-dsi: Fix clock conditional (git-fixes).
• dt-bindings: gpio: gpio-davinci: Increase maxItems in gpio-line-names (git-fixes).
• dt-bindings: net: sun8i-emac: Add phy-supply property (git-fixes).
• EDAC/mc_sysfs: Increase legacy channel support to 12 (bsc#1205263).
• efi: Add iMac Pro 2017 to uefi skip cert quirk (git-fixes).
• ext4: avoid BUG_ON when creating xattrs (bsc#1205496).
• extcon: usbc-tusb320: Add support for mode setting and reset (git-fixes).
• extcon: usbc-tusb320: Add support for TUSB320L (git-fixes).
• extcon: usbc-tusb320: Factor out extcon into dedicated functions (git-fixes).
• fbcon: Use kzalloc() in fbconpreparelogo() (git-fixes).
• fbdev: fbcon: release buffer when fbcondoset_font() failed (git-fixes).
• fbdev: geode: do not build on UML (git-fixes).
• fbdev: matroxfb: G200eW: Increase max memory from 1 MB to 16 MB (git-fixes).
• fbdev: pm2fb: fix missing pcidisabledevice() (git-fixes).
• fbdev: ssd1307fb: Drop optional dependency (git-fixes).
• fbdev: uvesafb: do not build on UML (git-fixes).
• fbdev: uvesafb: Fixes an error handling path in uvesafb_probe() (git-fixes).
• fbdev: vermilion: decrease reference count in error path (git-fixes).
• fbdev: via: Fix error in viacoreinit() (git-fixes).
• firmware: raspberrypi: fix possible memory leak in rpifirmwareprobe() (git-fixes).
• floppy: Fix memory leak in dofloppyinit() (git-fixes).
• gpio: sifive: Fix refcount leak in sifivegpioprobe (git-fixes).
• gpiolib: cdev: fix NULL-pointer dereferences (git-fixes).
• gpiolib: check the 'ngpios' property in core gpiolib code (git-fixes).
• gpiolib: fix memory leak in gpiochipsetupdev() (git-fixes).
• gpiolib: Get rid of redundant 'else' (git-fixes).
• gpiolib: improve coding style for local variables (git-fixes).
• gpiolib: make struct comments into real kernel docs (git-fixes).
• hamradio: baycomepp: Fix return type of baycomsend_packet() (git-fixes).
• hamradio: do not call devkfreeskb() under spinlockirqsave() (git-fixes).
• HID: hid-sensor-custom: set fixed size for custom attributes (git-fixes).
• HID: ite: Enable QUIRKTOUCHPADONOFFREPORT on Acer Aspire Switch V 10 (git-fixes).
• HID: mcp2221: do not connect hidraw (git-fixes).
• HID: multitouch: fix Asus ExpertBook P2 P2451FA trackpoint (git-fixes).
• HID: plantronics: Additional PIDs for double volume key presses quirk (git-fixes).
• HID: uclogic: Add HIDQUIRKHIDINPUT_FORCE quirk (git-fixes).
• HID: usbhid: Add ALWAYS_POLL quirk for some mice (git-fixes).
• HID: wacom: Ensure bootloader PID is usable in hidraw mode (git-fixes).
• HSI: omapssicore: Fix error handling in ssi_init() (git-fixes).
• HSI: omapssicore: fix possible memory leak in ssi_probe() (git-fixes).
• HSI: omapssicore: fix unbalanced pmruntimedisable() (git-fixes).
• hwmon: (jc42) Convert register access and caching to regmap/regcache (git-fixes).
• hwmon: (jc42) Fix missing unlock on error in jc42_write() (git-fixes).
• hwmon: (jc42) Restore the min/max/critical temperatures on resume (git-fixes).
• hwrng: amd - Fix PCI device refcount leak (git-fixes).
• i2c: ismt: Fix an out-of-bounds bug in ismt_access() (git-fixes).
• i2c: mux: reg: check return value after calling platformgetresource() (git-fixes).
• i2c: pxa-pci: fix missing pcidisabledevice() on error in ce4100i2cprobe (git-fixes).
• IB/IPoIB: Fix queue count inconsistency for PKEY child interfaces (git-fixes)
• ibmveth: Always stop tx queues during close (bsc#1065729).
• iio: adc: adsigmadelta: do not use internal iio_dev lock (git-fixes).
• iio: adc128s052: add proper .data members in adc128ofmatch table (git-fixes).
• iio: fix memory leak in iiodeviceregister_eventset() (git-fixes).
• iio: temperature: ltc2983: make bulk write buffer DMA-safe (git-fixes).
• ima: Fix a potential NULL pointer access in imarestoremeasurement_list (git-fixes).
• Input: elants_i2c - properly handle the reset GPIO when power is off (git-fixes).
• Input: joystick - fix Kconfig warning for JOYSTICK_ADC (git-fixes).
• Input: wistron_btns - disable on UML (git-fixes).
• integrity: Fix memory leakage in keyring allocation error path (git-fixes).
• ipmi: fix long wait in unload when IPMI disconnect (git-fixes).
• ipmi: fix memleak when unload ipmi driver (git-fixes).
• ipmi: fix use after free in ipmidestroy_user() (git-fixes).
• ipmi: kcs: Poll OBF briefly to reduce OBE latency (git-fixes).
• ipu3-imgu: Fix NULL pointer dereference in imgusubdevset_selection() (git-fixes).
• kABI: reintroduce a non-inline usleep_range (git-fixes).
• lib/debugobjects: fix stat count and optimize debugobjectsmem_init (git-fixes).
• lib/fonts: fix undefined behavior in bit shift for getdefaultfont (git-fixes).
• mailbox: armmhuv2: Fix return value check in mhuv2probe() (git-fixes).
• mailbox: mpfs: read the system controller's status (git-fixes).
• mailbox: zynq-ipi: fix error handling while device_register() fails (git-fixes).
• media: adv748x: afe: Select input port when initializing AFE (git-fixes).
• media: camss: Clean up received buffers on failed start of streaming (git-fixes).
• media: dvb-core: Fix double free in dvbregisterdevice() (git-fixes).
• media: dvb-core: Fix ignored return value in dvbregisterfrontend() (git-fixes).
• media: dvb-frontends: fix leak of memory fw (git-fixes).
• media: dvb-usb: az6027: fix null-ptr-deref in az6027i2cxfer() (git-fixes).
• media: dvb-usb: fix memory leak in dvbusbadapter_init() (git-fixes).
• media: i2c: ad5820: Fix error path (git-fixes).
• media: imon: fix a race condition in send_packet() (git-fixes).
• media: saa7164: fix missing pcidisabledevice() (git-fixes).
• media: si470x: Fix use-after-free in si470xintin_callback() (git-fixes).
• media: solo6x10: fix possible memory leak in solosysfsinit() (git-fixes).
• media: stv0288: use explicitly signed char (git-fixes).
• media: v4l2-ctrls: Fix off-by-one error in integer menu control check (git-fixes).
• media: v4l2-dv-timings.c: fix too strict blanking sanity checks (git-fixes).
• media: videobuf-dma-contig: use dmammapcoherent (git-fixes).
• media: vidtv: Fix use-after-free in vidtvbridgedvb_init() (git-fixes).
• media: vimc: Fix wrong function called when vimc_init() fails (git-fixes).
• media: vivid: fix compose size exceed boundary (git-fixes).
• memcg, kmem: further deprecate kmem.limitinbytes (bsc#1206896).
• memcg: Fix possible use-after-free in memcgwriteevent_control() (bsc#1206344).
• mfd: bd957x: Fix Kconfig dependency on REGMAP_IRQ (git-fixes).
• mfd: mt6360: Add bounds checking in Regmap read/write call-backs (git-fixes).
• mfd: pm8008: Fix return value check in pm8008_probe() (git-fixes).
• mfd: pm8008: Remove driver data structure pm8008_data (git-fixes).
• mfd: qcomrpm: Fix an error handling path in qcomrpm_probe() (git-fixes).
• mfd: qcomrpm: Use devmofplatformpopulate() to simplify code (git-fixes).
• misc: ocxl: fix possible name leak in ocxlfileregister_afu() (git-fixes).
• misc: tifm: fix possible memory leak in tifm7xx1switch_media() (git-fixes).
• mISDN: hfcmulti: do not call devkfreeskb/kfreeskb() under spinlock_irqsave() (git-fixes).
• mISDN: hfcpci: do not call devkfreeskb/kfreeskb() under spinlock_irqsave() (git-fixes).
• mISDN: hfcsusb: do not call devkfreeskb/kfreeskb() under spinlock_irqsave() (git-fixes).
• mm: fix race between MADV_FREE reclaim and blkdev direct IO read (bsc#1204989,bsc#1205601).
• mm/mempolicy: fix memory leak in setmempolicyhome_node system call (bsc#1206468).
• mmc: alcor: fix return value check of mmcaddhost() (git-fixes).
• mmc: atmel-mci: fix return value check of mmcaddhost() (git-fixes).
• mmc: core: Normalize the error handling branch in sdreadext_regs() (git-fixes).
• mmc: f-sdh30: Add quirks for broken timeout clock capability (git-fixes).
• mmc: meson-gx: fix return value check of mmcaddhost() (git-fixes).
• mmc: mmci: fix return value check of mmcaddhost() (git-fixes).
• mmc: moxart: fix return value check of mmcaddhost() (git-fixes).
• mmc: mtk-sd: Fix missing clkdisableunprepare in msdcofclock_parse() (git-fixes).
• mmc: mxcmmc: fix return value check of mmcaddhost() (git-fixes).
• mmc: omaphsmmc: fix return value check of mmcadd_host() (git-fixes).
• mmc: pxamci: fix return value check of mmcaddhost() (git-fixes).
• mmc: renesas_sdhi: alway populate SCC pointer (git-fixes).
• mmc: renesas_sdhi: better reset from HS400 mode (git-fixes).
• mmc: rtsxpci: fix return value check of mmcadd_host() (git-fixes).
• mmc: rtsxusbsdmmc: fix return value check of mmcaddhost() (git-fixes).
• mmc: sdhci-sprd: Disable CLK_AUTO when the clock is less than 400K (git-fixes).
• mmc: toshsd: fix return value check of mmcaddhost() (git-fixes).
• mmc: via-sdmmc: fix return value check of mmcaddhost() (git-fixes).
• mmc: vub300: fix return value check of mmcaddhost() (git-fixes).
• mmc: vub300: fix warning - do not call blocking ops when !TASK_RUNNING (git-fixes).
• mmc: wbsd: fix return value check of mmcaddhost() (git-fixes).
• mmc: wmt-sdmmc: fix return value check of mmcaddhost() (git-fixes).
• module: change to print useful messages from elfvaliditycheck() (git-fixes).
• module: fix [eshstrndx].shsize=0 OOB access (git-fixes).
• mt76: stop the radar detector after leaving dfs channel (git-fixes).
• mtd: Fix device name leak when register device failed in addmtddevice() (git-fixes).
• mtd: lpddr2_nvm: Fix possible null-ptr-deref (git-fixes).
• mtd: maps: pxa2xx-flash: fix memory leak in probe (git-fixes).
• mtd: spi-nor: Check for zero erase size in spinorfindbesterase_type() (git-fixes).
• mtd: spi-nor: Fix the number of bytes for the dummy cycles (git-fixes).
• mtd: spi-nor: hide jedec_id sysfs attribute if not present (git-fixes).
• net: allow retransmitting a TCP packet if original is still in queue (bsc#1188605 bsc#1187428 bsc#1206619).
• net: mana: Fix race on per-CQ variable napi work_done (git-fixes).
• net: phy: xgmiitorgmii: Fix refcount leak in xgmiitorgmii_probe (git-fixes).
• net: usb: qmi_wwan: add u-blox 0x1342 composition (git-fixes).
• net: usb: smsc95xx: fix external PHY reset (git-fixes).
• net/mlx5: Fix mlx5getnext_dev() peer device matching (bsc#1206536).
• net/mlx5: Lag, filter non compatible devices (bsc#1206536).
• netfilter: nfnetlinkosf: fix possible bogus match in nfosf_find() (bsc#1204614).
• nfc: Fix potential resource leaks (git-fixes).
• nfc: pn533: Clear nfc_target before being used (git-fixes).
• nfc: pn533: Wait for outurb's completion in pn533usbsendframe() (git-fixes).
• NFS: Handle missing attributes in OPEN reply (bsc#1203740).
• nilfs2: fix shift-out-of-bounds due to too large exponent of block size (git-fixes).
• nilfs2: fix shift-out-of-bounds/overflow in nilfssb2bad_offset() (git-fixes).
• octeontx2-af: Add PTP PPS Errata workaround on CN10K silicon (jsc#SLE-24682).
• octeontx2-af: Allow mkex profile without DMAC and add L2M/L2B header extraction support (jsc#SLE-24682).
• octeontx2-af: Do not reset previous pfc config (jsc#SLE-24682).
• octeontx2-af: fix operand size in bitwise operation (jsc#SLE-24682).
• octeontx2-af: Initialize PTPSECROLLOVER register properly (jsc#SLE-24682).
• octeontx2-af: Limit link bringup time at firmware (jsc#SLE-24682).
• octeontx2-af: return correct ptp timestamp for CN10K silicon (jsc#SLE-24682).
• octeontx2-af: Set NIX link credits based on max LMAC (jsc#SLE-24682).
• octeontx2-af: Skip CGX/RPM probe incase of zero lmac count (jsc#SLE-24682).
• octeontx2-pf: Add egress PFC support (jsc#SLE-24682).
• octeontx2-pf: Add support for ptp 1-step mode on CN10K silicon (jsc#SLE-24682).
• octeontx2-pf: Fix lmtst ID used in aura free (jsc#SLE-24682).
• octeontx2-pf: Fix pfcallocstatus array overflow (jsc#SLE-24682).
• octeontx2-pf: Fix SQE threshold checking (jsc#SLE-24682).
• octeontx2-pf: Fix unused variable build error (jsc#SLE-24682).
• octeontx2-pf: NIX TX overwrites SQCTXHWS[SQINT] (jsc#SLE-24682).
• octeontx2-pf: Reduce minimum mtu size to 60 (jsc#SLE-24682).
• octeontx2: Modify mbox request and response structures (jsc#SLE-24682).
• padata: Fix list iterator in padatadoserial() (git-fixes).
• PCI: Check for alloc failure in pcirequestirq() (git-fixes).
• PCI: dwc: Fix n_fts[] array overrun (git-fixes).
• PCI: Fix pcideviceis_present() for VFs by checking PF (git-fixes).
• PCI: pci-epf-test: Register notifier if only coreinitnotifier is enabled (git-fixes).
• PCI: vmd: Disable MSI remapping after suspend (git-fixes).
• PCI/sysfs: Fix double free in error path (git-fixes).
• phy: usb: s2 WoL wakeup_count not incremented for USB->Eth devices (git-fixes).
• pinctrl: k210: call ofnodeput() (git-fixes).
• pinctrl: meditatek: Startup with the IRQs disabled (git-fixes).
• pinctrl: pinconf-generic: add missing ofnodeput() (git-fixes).
• platform/chrome: crosectypec: Cleanup switch handle return paths (git-fixes).
• platform/chrome: crosusbpdnotify: Fix error handling in crosusbpdnotify_init() (git-fixes).
• platform/mellanox: mlxbf-pmc: Fix event typo (git-fixes).
• platform/x86: huawei-wmi: fix return value calculation (git-fixes).
• platform/x86: intelscuipc: fix possible name leak in _intelscuipcregister() (git-fixes).
• platform/x86: mxm-wmi: fix memleak in mxmwmicall_mxds|mx (git-fixes).
• PM: hibernate: Fix mistake in kerneldoc comment (git-fixes).
• PM: runtime: Do not call _rpmcallback() from rpm_idle() (git-fixes).
• PNP: fix name memory leak in pnpallocdev() (git-fixes).
• power: supply: ab8500: Fix error handling in ab8500chargerinit() (git-fixes).
• power: supply: fix null pointer dereferencing in powersupplygetbatteryinfo (git-fixes).
• power: supply: fix residue sysfs file in error handle route of _powersupply_register() (git-fixes).
• power: supply: z2battery: Fix possible memleak in z2batt_probe() (git-fixes).
• powerpc: export the CPU node count (bsc#1207016 ltc#201108).
• powerpc: Take in account addition CPU node when building kexec FDT (bsc#1207016 ltc#201108).
• powerpc/64: Init jump labels before parseearlyparam() (bsc#1065729).
• powerpc/pci: Fix getphbnumber() locking (bsc#1065729).
• powerpc/perf: callchain validate kernel stack pointer bounds (bsc#1065729).
• powerpc/powernv: add missing ofnodeput (bsc#1065729).
• powerpc/pseries: unregister VPA when hot unplugging a CPU (bsc#1205695 ltc#200603).
• powerpc/pseries/eeh: use correct API for error log size (bsc#1065729).
• powerpc/rtas: avoid device tree lookups in rtasosterm() (bsc#1065729).
• powerpc/rtas: avoid scheduling in rtasosterm() (bsc#1065729).
• powerpc/xive: add missing iounmap() in error path in xivespaprpopulateirqdata() (git-fixes).
• powerpc/xive/spapr: correct bitmap allocation size (git-fixes).
• proc: fixup uptime selftest (git-fixes).
• pstore: Avoid kcore oops by vmap()ing with VM_IOREMAP (git-fixes).
• pstore: Make sure CONFIGPSTOREPMSG selects CONFIGRTMUTEXES (git-fixes).
• pstore: Properly assign mem_type property (git-fixes).
• pstore: Switch pmsglock to an rtmutex to avoid priority inversion (git-fixes).
• pstore/ram: Fix error return code in ramoops_probe() (git-fixes).
• pstore/zone: Use GFP_ATOMIC to allocate zone buffer (git-fixes).
• pwm: lpc18xx-sct: Fix a comment to match code (git-fixes).
• pwm: mediatek: always use bus clock for PWM on MT7622 (git-fixes).
• pwm: sifive: Call pwmsifiveupdate_clock() while mutex is held (git-fixes).
• pwm: tegra: Improve required rate calculation (git-fixes).
• r6040: Fix kmemleak in probe and remove (git-fixes).
• random: allow partial reads if later user copies fail (bsc#1204911).
• random: check for signals every PAGE_SIZE chunk of /dev/random (bsc#1204911).
• random: convert to using fops->read_iter() (bsc#1204911).
• random: convert to using fops->write_iter() (bsc#1204911).
• random: remove outdated INTMAX >> 6 check in urandomread() (bsc#1204911).
• random: zero buffer after reading entropy from userspace (bsc#1204911).
• RDMA: Disable IB HW for UML (git-fixes)
• RDMA/core: Fix order of nldev_exit call (git-fixes)
• RDMA/core: Make sure 'ib_port' is valid when access sysfs node (git-fixes)
• RDMA/efa: Add EFA 0xefa2 PCI ID (git-fixes)
• RDMA/hfi: Decrease PCI device reference count in error path (git-fixes)
• RDMA/hfi1: Fix error return code in parseplatformconfig() (git-fixes)
• RDMA/hns: Fix AH attr queried by query_qp (git-fixes)
• RDMA/hns: Fix error code of CMD (git-fixes)
• RDMA/hns: Fix ext_sge num error when post send (git-fixes)
• RDMA/hns: fix memory leak in hnsrocealloc_mr() (git-fixes)
• RDMA/hns: Fix page size cap from firmware (git-fixes)
• RDMA/hns: Fix PBL page MTR find (git-fixes)
• RDMA/hns: Fix XRC caps on HIP08 (git-fixes)
• RDMA/hns: Repacing 'dseglen' by macros in fillextsgeinl_data() (git-fixes)
• RDMA/irdma: Do not request 2-level PBLEs for CQ alloc (git-fixes)
• RDMA/irdma: Initialize net_type before checking it (git-fixes)
• RDMA/irdma: Report the correct link speed (git-fixes)
• RDMA/nldev: Add checks for nlaneststart() in fillstatcounter_qps() (git-fixes)
• RDMA/nldev: Fix failure to send large messages (git-fixes)
• RDMA/nldev: Return '-EAGAIN' if the cm_id isn't from expected port (git-fixes)
• RDMA/restrack: Release MR restrack when delete (git-fixes)
• RDMA/rxe: Fix NULL-ptr-deref in rxeqpdo_cleanup() when socket create failed (git-fixes)
• RDMA/siw: Fix immediate work request flush to completion queue (git-fixes)
• RDMA/siw: Fix pointer cast warning (git-fixes)
• RDMA/siw: Set defined status for work completion with undefined status (git-fixes)
• RDMA/srp: Fix error return code in srpparseoptions() (git-fixes)
• regulator: bd718x7: Drop unnecessary info print (git-fixes).
• regulator: core: fix deadlock on regulator enable (git-fixes).
• regulator: core: fix module refcount leak in set_supply() (git-fixes).
• regulator: core: fix resource leak in regulator_register() (git-fixes).
• regulator: core: fix unbalanced of node refcount in regulatordevlookup() (git-fixes).
• regulator: core: fix use_count leakage when handling boot-on (git-fixes).
• regulator: core: use kfree_const() to free space conditionally (git-fixes).
• regulator: qcom-labibb: Fix missing ofnodeput() in qcomlabibbregulator_probe() (git-fixes).
• regulator: qcom-rpmh: Fix PMR735a S3 regulator spec (git-fixes).
• regulator: slg51000: Wait after asserting CS pin (git-fixes).
• regulator: twl6030: fix get status of twl6032 regulators (git-fixes).
• remoteproc: core: Do pmrelax when in RPROCOFFLINE state (git-fixes).
• remoteproc: qcomq6v5pas: detach power domains on remove (git-fixes).
• remoteproc: qcomq6v5pas: disable wakeup on probe fail or remove (git-fixes).
• remoteproc: qcomq6v5pas: Fix missing ofnodeput() in adspallocmemory_region() (git-fixes).
• remoteproc: qcom: q6v5: Fix missing clkdisableunprepare() in q6v5wcssqcs404poweron() (git-fixes).
• remoteproc: qcom: q6v5: Fix potential null-ptr-deref in q6v5wcssinit_mmio() (git-fixes).
• remoteproc: sysmon: fix memory leak in qcomaddsysmon_subdev() (git-fixes).
• restore mcanlec_type (git-fixes).
• rtc: cmos: fix build on non-ACPI platforms (git-fixes).
• rtc: cmos: Fix event handler registration ordering issue (git-fixes).
• rtc: cmos: Fix wake alarm breakage (git-fixes).
• rtc: ds1347: fix value written to century register (git-fixes).
• rtc: mxcv2: Add missing clkdisable_unprepare() (git-fixes).
• rtc: pcf85063: fix pcf85063clkoutcontrol (gut-fixes).
• rtc: pcf85063: Fix reading alarm (git-fixes).
• rtc: pic32: Move devmrtcallocatedevice earlier in pic32rtc_probe() (git-fixes).
• rtc: rtc-cmos: Do not check ACPIFADTLOWPOWERS0 (git-fixes).
• rtc: snvs: Allow a time difference on clock register read (git-fixes).
• rtc: st-lpc: Add missing clkdisableunprepare in strtcprobe() (git-fixes).
• rtmutex: Add acquire semantics for rtmutex lock acquisition slow path (bnc#1203829).
• s390/boot: add secure boot trailer (bsc#1205257 LTC#200451).
• sbitmap: fix lockup while swapping (bsc#1206602).
• sched/core: Fix comparison in schedgroupcookie_match() (git-fixes)
• sched/core: Fix the bug that task won't enqueue into core (git-fixes)
• sched/topology: Remove redundant variable and fix incorrect (git-fixes)
• sched/uclamp: Fix relationship between uclamp and migration (git-fixes)
• sched/uclamp: Make taskfitscapacity() use utilfitscpu() (git-fixes)
• scsi: 3w-9xxx: Avoid disabling device if failing to enable it (git-fixes).
• scsi: advansys: Fix kernel pointer leak (git-fixes).
• scsi: aha152x: Fix aha152xsetup() _setup handler return value (git-fixes).
• scsi: bfa: Replace snprintf() with sysfs_emit() (git-fixes).
• scsi: core: Fix sbitmap depth in scsireallocsdevbudgetmap() (git-fixes).
• scsi: core: Fix scsimodesense() buffer length handling (git-fixes).
• scsi: core: Reallocate device's budget map on queue depth change (git-fixes).
• scsi: core: Restrict legal sdev_state transitions via sysfs (git-fixes).
• scsi: hisi_sas: Free irq vectors in order for v3 HW (git-fixes).
• scsi: hisi_sas: Limit max hw sectors for v3 HW (git-fixes).
• scsi: hisi_sas: Use managed PCI functions (git-fixes).
• scsi: ipr: Fix missing/incorrect resource cleanup in error case (git-fixes).
• scsi: iscsi: Add recv workqueue helpers (git-fixes).
• scsi: iscsi: Fix harmless double shift bug (git-fixes).
• scsi: iscsi: Fix possible memory leak when device_register() failed (git-fixes).
• scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername() (git-fixes).
• scsi: iscsi: kabi: add iscsiconnqueue_work back (git-fixes).
• scsi: iscsi: kabi: fix libiscsi new field (git-fixes).
• scsi: iscsi: Merge suspend fields (git-fixes).
• scsi: iscsi: Rename iscsiconnqueue_work() (git-fixes).
• scsi: iscsi: Run recv path from workqueue (git-fixes).
• scsi: iscsi: Unblock session then wake up error handler (git-fixes).
• scsi: libfc: Fix use after free in fcexchabts_resp() (git-fixes).
• scsi: libiscsi: Fix UAF in iscsiconngetparam()/iscsiconn_teardown() (git-fixes).
• scsi: lpfc: Correct bandwidth logging during receipt of congestion sync WCQE (jsc#PED-1445).
• scsi: lpfc: Fix crash involving race between FLOGI timeout and devloss handler (jsc#PED-1445).
• scsi: lpfc: Fix MI capability display in cmf_info sysfs attribute (jsc#PED-1445).
• scsi: lpfc: Fix WQ|CQ|EQ resource check (jsc#PED-1445).
• scsi: lpfc: Remove linux/msi.h include (jsc#PED-1445).
• scsi: lpfc: Remove redundant pointer 'lp' (jsc#PED-1445).
• scsi: lpfc: Update lpfc version to 14.2.0.9 (jsc#PED-1445).
• scsi: lpfc: Use memset_startat() helper (jsc#PED-1445).
• scsi: megaraid_sas: Fix double kfree() (git-fixes).
• scsi: megaraid_sas: Target with invalid LUN ID is deleted during scan (git-fixes).
• scsi: megaraid: Fix error check return value of register_chrdev() (git-fixes).
• scsi: mpi3mr: Fix memory leaks (git-fixes).
• scsi: mpi3mr: Fix reporting of actual data transfer size (git-fixes).
• scsi: mpi3mr: Fixes around reply request queues (git-fixes).
• scsi: mpt3sas: Do not change DMA mask while reallocating pools (bsc#1206912,bsc#1206098).
• scsi: mpt3sas: Fail reset operation if config request timed out (git-fixes).
• scsi: mpt3sas: Fix out-of-bounds compiler warning (git-fixes).
• scsi: mpt3sas: re-do lost mpt3sas DMA mask fix (bsc#1206912,bsc#1206098).
• scsi: mpt3sas: Remove usage of dmagetrequired_mask() API (bsc#1206912,bsc#1206098).
• scsi: mvsas: Add PCI ID of RocketRaid 2640 (git-fixes).
• scsi: mvsas: Replace snprintf() with sysfs_emit() (git-fixes).
• scsi: myrb: Fix up null pointer access on myrb_cleanup() (git-fixes).
• scsi: myrs: Fix crash in error case (git-fixes).
• scsi: ncr53c8xx: Remove unused retrievefromwaiting_list() function (git-fixes).
• scsi: pm8001: Fix bogus FW crash for maxcpus=1 (git-fixes).
• scsi: pm8001: Fix memory leak in pm8001chipfwflashupdate_req() (git-fixes).
• scsi: pm8001: Fix pm8001mpitaskabortresp() (git-fixes).
• scsi: pm8001: Fix pm80xxpcimem_copy() interface (git-fixes).
• scsi: pm8001: Fix tag leaks on error (git-fixes).
• scsi: pm8001: Fix task leak in pm8001sendabort_all() (git-fixes).
• scsi: pm8001: Fix use-after-free for aborted SSP/STP sas_task (git-fixes).
• scsi: pm8001: Fix use-after-free for aborted TMF sas_task (git-fixes).
• scsi: pm80xx: Fix double completion for SATA devices (git-fixes).
• scsi: pm80xx: Fix memory leak during rmmod (git-fixes).
• scsi: pmcraid: Fix missing resource cleanup in error case (git-fixes).
• scsi: qedf: Add stag_work to all the vports (git-fixes).
• scsi: qedf: Change context reset messages to ratelimited (git-fixes).
• scsi: qedf: Fix a UAF bug in _qedfprobe() (git-fixes).
• scsi: qedf: Fix refcount issue when LOGO is received during TMF (git-fixes).
• scsi: qla2xxx: Fix crash when I/O abort times out (jsc#PED-568).
• scsi: qla2xxx: Fix set-but-not-used variable warnings (jsc#PED-568).
• scsi: qla2xxx: Initialize vha->unknownatio[list, work] for NPIV hosts (jsc#PED-568).
• scsi: qla2xxx: Remove duplicate of vha->iocb_work initialization (jsc#PED-568).
• scsi: qla2xxx: Remove unused variable 'found_devs' (jsc#PED-568).
• scsi: scsidebug: Fix out-of-bound read in respreadcap16() (git-fixes).
• scsi: scsidebug: Fix out-of-bound read in respreport_tgtpgs() (git-fixes).
• scsi: scsidebug: Fix possible UAF in sdebugaddhosthelper() (git-fixes).
• scsi: scsi_debug: Make the READ CAPACITY response compliant with ZBC (git-fixes).
• scsi: scsidhalua: Properly handle the ALUA transitioning state (git-fixes).
• scsi: smartpqi: Fix kdump issue when controller is locked up (git-fixes).
• scsi: sr: Do not use GFP_DMA (git-fixes).
• scsi: ufs: core: Fix ufshcdprobehba() prototype to match the definition (git-fixes).
• scsi: ufs: Fix a kernel crash during shutdown (git-fixes).
• scsi: ufs: Treat link loss as fatal error (git-fixes).
• scsi: ufs: ufshcd-pltfrm: Check the return value of devm_kstrdup() (git-fixes).
• scsi: ufs: Use generic error code in ufshcdsetdevpwrmode() (git-fixes).
• scsi: ufs: Use pmruntimeresumeandget() instead of pmruntimeget_sync() (git-fixes).
• scsi: vmw_pvscsi: Expand vcpuHint to 16 bits (git-fixes).
• sctp: sysctl: make extra pointers netns aware (bsc#1204760).
• selftests: devlink: fix the fd redirect in dummyreportertest (git-fixes).
• selftests: set the BUILD variable to absolute path (git-fixes).
• selftests: Use optional USERCFLAGS and USERLDFLAGS (git-fixes).
• selftests/efivarfs: Add checking of the test return value (git-fixes).
• selftests/ftrace: eventtriggers: wait longer for testevent_enable (git-fixes).
• selftests/powerpc: Fix resource leaks (git-fixes).
• serial: 8250bcm7271: Fix error handling in brcmuartinit() (git-fixes).
• serial: amba-pl011: avoid SBSA UART accessing DMACR register (git-fixes).
• serial: pch: Fix PCI device refcount leak in pchrequestdma() (git-fixes).
• serial: pl011: Do not clear RX FIFO & RX interrupt in unthrottle (git-fixes).
• serial: stm32: move dmarequestchan() before clkprepareenable() (git-fixes).
• serial: sunsab: Fix error handling in sunsab_init() (git-fixes).
• serial: tegra: Read DMA status before terminating (git-fixes).
• soc: mediatek: pm-domains: Fix the power glitch issue (git-fixes).
• soc: qcom: llcc: make irq truly optional (git-fixes).
• soc: qcom: Select REMAP_MMIO for LLCC driver (git-fixes).
• soc: ti: knavqmssqueue: Fix PM disable depth imbalance in knavqueueprobe (git-fixes).
• soc: ti: knavqmssqueue: Use pmruntimeresumeandget instead of pmruntimeget_sync (git-fixes).
• soc: ti: smartreflex: Fix PM disable depth imbalance in omapsrprobe (git-fixes).
• soundwire: dmi-quirks: add quirk variant for LAPBC710 NUC15 (git-fixes).
• spi: spi-gpio: Do not set MOSI as an input if not 3WIRE mode (git-fixes).
• spi: spidev: mask SPICSHIGH in SPIIOCRD_MODE (git-fixes).
• spi: Update reference to struct spi_controller (git-fixes).
• staging: media: tegra-video: fix chan->mipi value on error (git-fixes).
• staging: media: tegra-video: fix device_node use after free (git-fixes).
• staging: rtl8192e: Fix potential use-after-free in rtllibrxMonitor() (git-fixes).
• staging: rtl8192u: Fix use after free in ieee80211_rx() (git-fixes).
• string.h: Introduce memset_startat() for wiping trailing members and padding (jsc#PED-1445).
• testfirmware: fix memory leak in testfirmware_init() (git-fixes).
• thermal: core: fix some possible name leaks in error paths (git-fixes).
• thermal: int340x: Add missing attribute for data rate base (git-fixes).
• thermal/drivers/imx8mm_thermal: Validate temperature range (git-fixes).
• thermal/drivers/qcom/temp-alarm: Fix inaccurate warning for gen2 (git-fixes).
• timers: implement usleepidlerange() (git-fixes).
• tpm: acpi: Call acpiputtable() to fix memory leak (git-fixes).
• tpm: tpmcrb: Add the missed acpiput_table() to fix memory leak (git-fixes).
• tpm: tpmtis: Add the missed acpiput_table() to fix memory leak (git-fixes).
• tpm/tpmcrb: Fix error message in _crbrelinquishlocality() (git-fixes).
• tpm/tpmftpmtee: Fix error handling in ftpmmodinit() (git-fixes).
• tracing: Add tracingresetallonlinecpus_unlocked() function (git-fixes).
• tracing: Free buffers when a used dynamic event is removed (git-fixes).
• tracing/doc: Fix typos on the timerlat tracer documentation (git-fixes).
• tracing/osnoise: Fix duration type (git-fixes).
• tty: serial: alterauart{r,t}xchars() need only uartport (git-fixes).
• tty: serial: clean up stop-tx part in alterauarttx_chars() (git-fixes).
• uio: uiodmemgenirq: Fix deadlock between irq config and handling (git-fixes).
• uio: uiodmemgenirq: Fix missing unlock in irq configuration (git-fixes).
• units: Add SI metric prefix definitions (git-fixes).
• units: add the HZ macros (git-fixes).
• usb: cdnsp: fix lack of ZLP for ep0 (git-fixes).
• usb: dwc3: core: defer probe on ulpireadid timeout (git-fixes).
• usb: dwc3: fix PHY disable sequence (git-fixes).
• usb: dwc3: Fix race between dwc3setmode and _dwc3set_mode (git-fixes).
• usb: dwc3: gadget: Disable GUSB2PHYCFG.SUSPHY for End Transfer (git-fixes).
• usb: dwc3: pci: Update PCIe device ID for USB3 controller on CPU sub-system for Raptor Lake (git-fixes).
• usb: dwc3: qcom: fix runtime PM wakeup (git-fixes).
• usb: gadget: uvc: Prevent buffer overflow in setup handler (git-fixes).
• usb: gadget: uvc: Rename bmInterfaceFlags -> bmInterlaceFlags (git-fixes).
• usb: rndishost: Secure rndisquery check against int overflow (git-fixes).
• usb: roles: fix of node refcount leak in usbroleswitchisparent() (git-fixes).
• usb: serial: cp210x: add Kamstrup RF sniffer PIDs (git-fixes).
• usb: serial: f81232: fix division by zero on line-speed change (git-fixes).
• usb: serial: f81534: fix division by zero on line-speed change (git-fixes).
• usb: serial: option: add Quectel EM05-G modem (git-fixes).
• usb: storage: Add check for kcalloc (git-fixes).
• usb: typec: Check for ops->exit instead of ops->enter in altmode_exit (git-fixes).
• usb: typec: Factor out non-PD fwnode properties (git-fixes).
• usb: typec: tcpci: fix of node refcount leak in tcpciregisterport() (git-fixes).
• usb: typec: tipd: Cleanup resources if devmtps6598psy_register fails (git-fixes).
• usb: typec: tipd: Fix spurious fwnodehandleput in error path (git-fixes).
• usb: ulpi: defer ulpiregister on ulpiread_id timeout (git-fixes).
• usb: xhci-mtk: fix leakage of shared hcd when fail to set wakeup irq (git-fixes).
• vdpasim: fix possible memory leak in vdpasimnetinit() and vdpasimblk_init() (git-fixes).
• vdpasim: fix vringh initialization in vdpasimqueue_ready() (git-fixes).
• vfio: platform: Do not pass return buffer to ACPI _RST method (git-fixes).
• vhost: fix range used in translate_desc() (git-fixes).
• vhost/vsock: Fix error handling in vhostvsockinit() (git-fixes).
• vmxnet3: correctly report csum_level for encapsulated packet (git-fixes).
• vringh: fix range used in iotlb_translate() (git-fixes).
• vsock: Enable y2038 safe timeval for timeout (bsc#1206101).
• vsock: Refactor vsock*getsockopt to resemble sock_getsockopt (bsc#1206101).
• wifi: ar5523: Fix use-after-free on ar5523_cmd() timed out (git-fixes).
• wifi: ath10k: Fix return value in ath10kpciinit() (git-fixes).
• wifi: ath9k: hifusb: fix memory leak of urbs in ath9khifusbdealloctxurbs() (git-fixes).
• wifi: ath9k: hifusb: Fix use-after-free in ath9khifusbregincb() (git-fixes).
• wifi: ath9k: verify the expected usb_endpoints are present (git-fixes).
• wifi: brcmfmac: Fix error return code in brcmfsdiodownload_firmware() (git-fixes).
• wifi: brcmfmac: Fix potential shift-out-of-bounds in brcmffwalloc_request() (git-fixes).
• wifi: cfg80211: Fix not unregister regpdev when loadbuiltinregdbkeys() fails (git-fixes).
• wifi: iwlwifi: mvm: fix double free on tx path (git-fixes).
• wifi: mac80211: fix memory leak in ieee80211ifadd() (git-fixes).
• wifi: mt76: do not run mt76ustatusworker if the device is not running (git-fixes).
• wifi: mt76: fix coverity overrun-call in mt76gettxpower() (git-fixes).
• wifi: rsi: Fix handling of 802.3 EAPOL frames sent via control port (git-fixes).
• wifi: rtl8xxxu: Add _packed to struct rtl8723buc2h (git-fixes).
• wifi: rtl8xxxu: Fix the channel width reporting (git-fixes).
• wifi: rtl8xxxu: gen2: Turn on the rate control (git-fixes).
• wifi: rtw89: fix physts IE page check (git-fixes).
• wifi: rtw89: Fix some error handling path in rtw89coresta_assoc() (git-fixes).
• wifi: rtw89: use u32encodebits() to fill MAC quota value (git-fixes).
• wifi: wilc1000: sdio: fix module autoloading (git-fixes).
• xfrm: Fix oops in _xfrmstate_delete() (bsc#1206794).
• xhci: Apply XHCIRESETTO_DEFAULT quirk to ADL-N (git-fixes).