-
Wed Feb 19 2025 Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-306.177.4.el8uek]
- Revert "usb: gadget: u_serial: Disable ep before setting port to null to fix the crash caused by port being null" (Greg Kroah-Hartman)
- drm/v3d: Assign job pointer to NULL before signaling the fence (Maíra Canal)
- scsi: mpi3mr: Fix corrupt config pages PHY state is switched in sysfs (Ranjan Kumar) [Orabug: 37472354] {CVE-2024-57804}
-
Sat Feb 15 2025 Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-306.177.3.el8uek]
- uek-rpm: Update network stress testing options for embedded2 (Joe Dobosenski) [Orabug: 37530219]
- mm, madvise: fix potential workingset node list_lru leaks (Kairui Song) [Orabug: 37464586]
- crypto: qat/qat_4xxx - fix off by one in uof_get_name() (Dan Carpenter) [Orabug: 37427536] {CVE-2024-53162}
- vdpa/mlx5: Fix error path during device add (Dragos Tatulea) [Orabug: 37296163]
- vp_vdpa: fix id_table array not null terminated error (Xiaoguang Wang) [Orabug: 37296163] {CVE-2024-53110}
- vdpa/mlx5: Postpone MR deletion (Dragos Tatulea) [Orabug: 37296163]
- vdpa/mlx5: Introduce init/destroy for MR resources (Dragos Tatulea) [Orabug: 37296163]
- vdpa/mlx5: Rename mr_mtx -> lock (Dragos Tatulea) [Orabug: 37296163]
- vdpa/mlx5: Extract mr members in own resource struct (Dragos Tatulea) [Orabug: 37296163]
- vdpa/mlx5: Rename function (Dragos Tatulea) [Orabug: 37296163]
- vdpa/mlx5: Delete direct MKEYs in parallel (Dragos Tatulea) [Orabug: 37296163]
- vdpa/mlx5: Create direct MKEYs in parallel (Dragos Tatulea) [Orabug: 37296163]
- vdpa/mlx5: Parallelize VQ suspend/resume for CVQ MQ command (Dragos Tatulea) [Orabug: 37296163]
- vdpa/mlx5: Small improvement for change_num_qps() (Dragos Tatulea) [Orabug: 37296163]
- vdpa/mlx5: Keep notifiers during suspend but ignore (Dragos Tatulea) [Orabug: 37296163]
- vdpa/mlx5: Parallelize device resume (Dragos Tatulea) [Orabug: 37296163]
- vdpa/mlx5: Parallelize device suspend (Dragos Tatulea) [Orabug: 37296163]
- vdpa/mlx5: Use async API for vq modify commands (Dragos Tatulea) [Orabug: 37296163]
- vdpa/mlx5: Use async API for vq query command (Dragos Tatulea) [Orabug: 37296163]
- vdpa/mlx5: Introduce async fw command wrapper (Dragos Tatulea) [Orabug: 37296163]
- vdpa/mlx5: Introduce error logging function (Dragos Tatulea) [Orabug: 37296163]
- net/mlx5: Support throttled commands from async API (Dragos Tatulea) [Orabug: 37296163]
- vdpa/mlx5: Add the support of set mac address (Cindy Lu) [Orabug: 37296163]
- vdpa_sim_net: Add the support of set mac address (Cindy Lu) [Orabug: 37296163]
- vdpa: support set mac address from vdpa tool (Cindy Lu) [Orabug: 37296163]
- vdpa/mlx5: Fix invalid mr resource destroy (Dragos Tatulea) [Orabug: 37296163] {CVE-2024-47687}
- vdpa/mlx5: Don't enable non-active VQs in .set_vq_ready() (Dragos Tatulea) [Orabug: 37296163]
- vdpa/mlx5: Don't reset VQs more than necessary (Dragos Tatulea) [Orabug: 37296163]
- vdpa/mlx5: Re-create HW VQs under certain conditions (Dragos Tatulea) [Orabug: 37296163]
- vdpa/mlx5: Pre-create hardware VQs at vdpa .dev_add time (Dragos Tatulea) [Orabug: 37296163]
- vdpa/mlx5: Use suspend/resume during VQP change (Dragos Tatulea) [Orabug: 37296163]
- vdpa/mlx5: Forward error in suspend/resume device (Dragos Tatulea) [Orabug: 37296163]
- vdpa/mlx5: Consolidate all VQ modify to Ready to use resume_vq() (Dragos Tatulea) [Orabug: 37296163]
- vdpa/mlx5: Add error code for suspend/resume VQ (Dragos Tatulea) [Orabug: 37296163]
- vdpa/mlx5: Accept Init -> Ready VQ transition in resume_vq() (Dragos Tatulea) [Orabug: 37296163]
- vdpa/mlx5: Allow creation of blank VQs (Dragos Tatulea) [Orabug: 37296163]
- vdpa/mlx5: Set mkey modified flags on all VQs (Dragos Tatulea) [Orabug: 37296163]
- vdpa/mlx5: Start off rqt_size with max VQPs (Dragos Tatulea) [Orabug: 37296163]
- vdpa/mlx5: Set an initial size on the VQ (Dragos Tatulea) [Orabug: 37296163]
- vdpa/mlx5: Add support for modifying the VQ features field (Dragos Tatulea) [Orabug: 37296163]
- vdpa/mlx5: Add support for modifying the virtio_version VQ field (Dragos Tatulea) [Orabug: 37296163]
- vdpa/mlx5: Rename init_mvqs (Dragos Tatulea) [Orabug: 37296163]
- vdpa/mlx5: Clear and reinitialize software VQ data on reset (Dragos Tatulea) [Orabug: 37296163]
- vdpa/mlx5: Initialize and reset device with one queue pair (Dragos Tatulea) [Orabug: 37296163]
- vdpa/mlx5: Remove duplicate suspend code (Dragos Tatulea) [Orabug: 37296163]
- vdpa/mlx5: Iterate over active VQs during suspend/resume (Dragos Tatulea) [Orabug: 37296163]
- vdpa/mlx5: Drop redundant check in teardown_virtqueues() (Dragos Tatulea) [Orabug: 37296163]
- vdpa/mlx5: Drop redundant code (Dragos Tatulea) [Orabug: 37296163]
- vdpa/mlx5: Make setup/teardown_vq_resources() symmetrical (Dragos Tatulea) [Orabug: 37296163]
- vdpa/mlx5: Clarify meaning thorough function rename (Dragos Tatulea) [Orabug: 37296163]
- vhost-vdpa: Remove usage of the deprecated ida_simple_xx() API (Christophe JAILLET) [Orabug: 37296163]
- vp_vdpa: don't allocate unused msix vectors (Yuxue Liu) [Orabug: 37296163]
- vdpa: Convert sprintf/snprintf to sysfs_emit (Li Zhijian) [Orabug: 37296163]
- vp_vdpa: Fix return value check vp_vdpa_request_irq (Yuxue Liu) [Orabug: 37296163]
- vhost-vdpa: change ioctl # for VDPA_GET_VRING_SIZE (Michael S. Tsirkin) [Orabug: 37296163]
- virtio_vdpa: create vqs with the actual size (Zhu Lingshan) [Orabug: 37296163]
- vdpa_sim: implement vdpa_config_ops.get_vq_size for vDPA simulator (Zhu Lingshan) [Orabug: 37296163]
- vp_vdpa: implement vdpa_config_ops.get_vq_size (Zhu Lingshan) [Orabug: 37296163]
- vDPA: introduce get_vq_size to vdpa_config_ops (Zhu Lingshan) [Orabug: 37296163]
- vhost-vdpa: uapi to support reporting per vq size (Zhu Lingshan) [Orabug: 37296163]
- vdpa: skip suspend/resume ops if not DRIVER_OK (Steve Sistare) [Orabug: 37296163]
- vdpa_sim: reset must not run (Steve Sistare) [Orabug: 37296163]
- vdpa: Block vq property changes in DRIVER_OK (Dragos Tatulea) [Orabug: 37296163]
- vdpa: Track device suspended state (Dragos Tatulea) [Orabug: 37296163]
- vdpa: Remove usage of the deprecated ida_simple_xx() API (Christophe JAILLET) [Orabug: 37296163]
- SUNRPC: do not retry on EKEYEXPIRED when user TGT ticket expired (Dai Ngo) [Orabug: 34162493]
-
Fri Feb 14 2025 Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-306.177.2.el8uek]
- LTS version: v5.15.177 (Vijayendra Suman)
- Partial revert of xhci: use pm_ptr() instead #ifdef for CONFIG_PM conditionals (Ron Economos)
- xhci: use pm_ptr() instead of #ifdef for CONFIG_PM conditionals (Arnd Bergmann)
- net: fix data-races around sk->sk_forward_alloc (Wang Liang) [Orabug: 37388795] {CVE-2024-53124}
- scsi: sg: Fix slab-use-after-free read in sg_release() (Suraj Sonawane) [Orabug: 37434117] {CVE-2024-56631}
- x86/xen: fix SLS mitigation in xen_hypercall_iret() (Juergen Gross)
- nfsd: add list_head nf_gc to struct nfsd_file (Youzhong Yang)
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev() (Eric Dumazet) [Orabug: 37200706] {CVE-2024-47707}
- vsock/virtio: discard packets if the transport changes (Stefano Garzarella)
- blk-cgroup: Fix UAF in blkcg_unpin_online() (Tejun Heo) [Orabug: 37434276] {CVE-2024-56672}
- iio: adc: rockchip_saradc: fix information leak in triggered buffer (Javier Carrasco)
- iio: imu: inv_icm42600: fix timestamps after suspend if sensor is on (Jean-Baptiste Maneyrol)
- iio: imu: inv_icm42600: fix spi burst write not supported (Jean-Baptiste Maneyrol)
- drm/i915/fb: Relax clear color alignment to 64 bytes (Ville Syrjälä)
- irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly (Yogesh Lal)
- gpiolib: cdev: Fix use after free in lineinfo_changed_notify (Zhongqiu Han) [Orabug: 36683269] {CVE-2024-36899}
- fs/proc: fix softlockup in __read_vmcore (part 2) (Rik van Riel)
- filemap: avoid truncating 64-bit offset to 32 bits (Marco Nelissen)
- vsock: prevent null-ptr-deref in vsock_*[has_data|has_space] (Stefano Garzarella)
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella)
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella)
- net: ethernet: xgbe: re-add aneg to supported features in PHY quirks (Heiner Kallweit)
- nvmet: propagate npwg topology (Luis Chamberlain)
- poll_wait: add mb() to fix theoretical race between waitqueue_active() and .poll() (Oleg Nesterov)
- ACPI: resource: acpi_dev_irq_override(): Check DMI match last (Hans de Goede)
- kheaders: Ignore silly-rename files (David Howells)
- fs: fix missing declaration of init_files (Zhang Kunbo)
- hfs: Sanity check the root record (Leo Stone)
- mac802154: check local interfaces before deleting sdata list (Lizhi Xu)
- i2c: rcar: fix NACK handling when being a target (Wolfram Sang)
- i2c: mux: demux-pinctrl: check initial mux selection, too (Wolfram Sang)
- drm/v3d: Ensure job pointer is set to NULL after job completion (Maíra Canal)
- net/mlx5: Fix RDMA TX steering prio (Patrisious Haddad)
- net: xilinx: axienet: Fix IRQ coalescing packet count overflow (Sean Anderson)
- nfp: bpf: prevent integer overflow in nfp_bpf_event_output() (Dan Carpenter)
- pktgen: Avoid out-of-bounds access in get_imix_entries (Artem Chernyshev)
- bpf: Fix bpf_sk_select_reuseport() memory leak (Michal Luczaj)
- net: ethernet: ti: cpsw_ale: Fix cpsw_ale_get_field() (Sudheer Kumar Doredla)
- phy: usb: Fix clock imbalance for suspend/resume (Justin Chen)
- phy: usb: Use slow clock for wake enabled suspend (Justin Chen)
- mptcp: fix TCP options overflow. (Paolo Abeni)
- mptcp: drop port parameter of mptcp_pm_add_addr_signal (Geliang Tang)
- ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv (Dennis Lam)
- ocfs2: correct return value of ocfs2_local_free_info() (Joseph Qi)
- phy: usb: Toggle the PHY power during init (Justin Chen)
- phy: usb: Add "wake on" functionality for newer Synopsis XHCI controllers (Al Cooper)
- of: address: Preserve the flags portion on 1:1 dma-ranges mapping (Andrea della Porta)
- of: address: Store number of bus flag cells rather than bool (Rob Herring)
- of: address: Remove duplicated functions (Herve Codina)
- of: address: Fix address translation when address-size is greater than 2 (Herve Codina)
- of/address: Add support for 3 address cell bus (Rob Herring)
- of: unittest: Add bus address range parsing tests (Rob Herring)
- arm64: dts: rockchip: add hevc power domain clock to rk3328 (Peter Geis)
- block, bfq: fix waker_bfqq UAF after bfq_split_bfqq() (Yu Kuai)
- iio: adc: ad7124: Disable all channels at probe time (Uwe Kleine-König)
- iio: inkern: call iio_device_put() only on mapped devices (Joe Hattori)
- iio: adc: at91: call input_free_device() on allocated iio_dev (Joe Hattori)
- iio: adc: ti-ads124s08: Use gpiod_set_value_cansleep() (Fabio Estevam)
- iio: gyro: fxas21002c: Fix missing data update in trigger handler (Carlos Song)
- iio: adc: ti-ads8688: fix information leak in triggered buffer (Javier Carrasco)
- iio: imu: kmx61: fix information leak in triggered buffer (Javier Carrasco)
- iio: light: vcnl4035: fix information leak in triggered buffer (Javier Carrasco)
- iio: dummy: iio_simply_dummy_buffer: fix information leak in triggered buffer (Javier Carrasco)
- iio: pressure: zpa2326: fix information leak in triggered buffer (Javier Carrasco)
- usb: gadget: f_fs: Remove WARN_ON in functionfs_bind (Akash M)
- usb: gadget: f_uac2: Fix incorrect setting of bNumEndpoints (Prashanth K)
- usb: fix reference leak in usb_new_device() (Ma Ke)
- USB: core: Disable LPM only for non-suspended ports (Kai-Heng Feng)
- USB: usblp: return error when setting unsupported protocol (Jun Yan)
- usb: gadget: u_serial: Disable ep before setting port to null to fix the crash caused by port being null (Lianqin Hu)
- topology: Keep the cpumask unchanged when printing cpumap (Li Huafei)
- usb: dwc3: gadget: fix writing NYET threshold (André Draszik)
- USB: serial: cp210x: add Phoenix Contact UPS Device (Johan Hovold)
- usb-storage: Add max sectors quirk for Nokia 208 (Lubomir Rintel)
- staging: iio: ad9832: Correct phase range check (Zicheng Qu)
- staging: iio: ad9834: Correct phase range check (Zicheng Qu)
- USB: serial: option: add Neoway N723-EA support (Michal Hrusecky)
- USB: serial: option: add MeiG Smart SRM815 (Chukun Pan)
- md/raid5: fix atomicity violation in raid5_cache_count (Gui-Dong Han)
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Kuan-Wei Chiu)
- drm/amd/display: increase MAX_SURFACES to the value supported by hw (Melissa Wen)
- ACPI: resource: Add Asus Vivobook X1504VAP to irq1_level_low_skip_override[] (Hans de Goede)
- ACPI: resource: Add TongFang GM5HG0A to irq1_edge_low_force_override[] (Hans de Goede)
- riscv: Fix sleeping in invalid context in die() (Nam Cao)
- drm/amd/display: Add check for granularity in dml ceil/floor helpers (Roman Li)
- sctp: sysctl: plpmtud_probe_interval: avoid using current->nsproxy (Matthieu Baerts (NGI0))
- sctp: sysctl: udp_port: avoid using current->nsproxy (Matthieu Baerts (NGI0))
- sctp: sysctl: auth_enable: avoid using current->nsproxy (Matthieu Baerts (NGI0))
- sctp: sysctl: rto_min/max: avoid using current->nsproxy (Matthieu Baerts (NGI0))
- sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy (Matthieu Baerts (NGI0))
- dm-ebs: don't set the flag DM_TARGET_PASSES_INTEGRITY (Mikulas Patocka)
- dm thin: make get_first_thin use rcu-safe list first function (Krister Johansen)
- afs: Fix the maximum cell name length (David Howells)
- ksmbd: fix a missing return value check bug (Wentao Liang)
- drm/mediatek: Add support for 180-degree rotation in the display driver (Jason-JH.Lin)
- netfilter: conntrack: clamp maximum hashtable size to INT_MAX (Pablo Neira Ayuso)
- netfilter: nf_tables: imbalance in flowtable binding (Pablo Neira Ayuso)
- tls: Fix tls_sw_sendmsg error handling (Benjamin Coddington)
- cxgb4: Avoid removal of uninserted tid (Anumula Murali Mohan Reddy)
- bnxt_en: Fix possible memory leak when hwrm_req_replace fails (Kalesh AP)
- net_sched: cls_flow: validate TCA_FLOW_RSHIFT attribute (Eric Dumazet)
- tcp/dccp: allow a connection when sk_max_ack_backlog is zero (Zhongqiu Duan)
- tcp/dccp: complete lockless accesses to sk->sk_max_ack_backlog (Jason Xing)
- net: 802: LLC+SNAP OID:PID lookup on start of skb data (Antonio Pastor)
- ieee802154: ca8210: Add missing check for kfifo_alloc() in ca8210_probe() (Keisuke Nishimura)
- ASoC: mediatek: disable buffer pre-allocation (Chen-Yu Tsai)
- exfat: fix the infinite loop in __exfat_free_cluster() (Yuezhang Mo)
- exfat: fix the infinite loop in exfat_readdir() (Yuezhang Mo)
- dm array: fix cursor index when skipping across block boundaries (Ming-Hung Tsai)
- dm array: fix unreleased btree blocks on closing a faulty array cursor (Ming-Hung Tsai)
- dm array: fix releasing a faulty array block twice in dm_array_cursor_end (Ming-Hung Tsai)
- jbd2: flush filesystem device before updating tail sequence (Zhang Yi)
- ceph: give up on paths longer than PATH_MAX (Max Kellermann)
-
Wed Feb 05 2025 Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-306.176.1.el8uek]
- mm/page_alloc: fix min_free_kbytes calculation regarding ZONE_MOVABLE (liuq) [Orabug: 37503579]
- mm: Limit warning message in vmemmap_verify() to once (Ma Wupeng) [Orabug: 37503579]
- assoc_array: fix the return value in assoc_array_insert_mid_shortcut() (Roman Smirnov) [Orabug: 37503579]
- assoc_array: Avoid open coded arithmetic in allocator arguments (Len Baker) [Orabug: 37503579]
- mm/page_alloc: use accumulated load when building node fallback list (Krupa Ramakrishnan) [Orabug: 37503525]
- mm/page_alloc: print node fallback order (Bharata B Rao) [Orabug: 37503525]
- PCI: Support BAR sizes up to 8TB (Dongdong Liu) [Orabug: 37503525]
- uek-rpm: Enable USB_XHCI_PCI_RENESAS as a module for aarch64 platforms (Harshit Mogalapalli) [Orabug: 37552080]
- cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [Orabug: 37535421]
- cifs: fix NULL ptr dereference in refresh_mounts() (Paulo Alcantara) [Orabug: 37535421]
-
Tue Jan 28 2025 Brian Maly <brian.maly@oracle.com> [5.15.0-305.176.4.el8uek]
- x86/asm: Make serialize() always_inline (Juergen Gross)
- hwmon: (tmp513) Fix division of negative numbers (David Lechner)
- Revert "mtd: spi-nor: core: replace dummy buswidth from addr to data" (Pratyush Yadav)
- Revert "regmap: detach regmap from dev on regmap_exit" (Greg Kroah-Hartman)
- Revert "drm/amdgpu: rework resume handling for display (v2)" (Greg Kroah-Hartman)
- Revert "PCI: Use preserve_config in place of pci_flags" (Terry Tritton)
- virtio-net: synchronize probe with ndo_set_features (Jason Wang) [Orabug: 36637822]
- virtio-net: synchronize operstate with admin state on up/down (Jason Wang) [Orabug: 36637822]
- virtio: allow driver to disable the configure change notification (Jason Wang) [Orabug: 36637822]
- virtio: rename virtio_config_enabled to virtio_config_core_enabled (Jason Wang) [Orabug: 36637822]
- mlxsw: pci: Fix driver initialization with Spectrum-4 (Ido Schimmel) [Orabug: 36811057]
- mlxsw: pci: Fix driver initialization with old firmware (Ido Schimmel) [Orabug: 36811057]
- mmc: sdhci-of-dwcmshc: th1520: Increase tuning loop count to 128 (Maksim Kiselev) [Orabug: 36811057]
- net/mlx5e: Switch to using _bh variant of of spinlock API in port timestamping NAPI poll context (Rahul Rameshbabu) [Orabug: 36811057]
- net/mlx5e: Fix MACsec state loss upon state update in offload path (Emeel Hakim) [Orabug: 36811057]
- net/mlx5e: Change the warning when ignore_flow_level is not supported (Jianbo Liu) [Orabug: 36811057]
- Revert "net/mlx5: Block entering switchdev mode with ns inconsistency" (Gavin Li) [Orabug: 36811057]
- IB/mlx5: Don't expose debugfs entries for RRoCE general parameters if not supported (Mark Zhang) [Orabug: 36811057]
- net/mlx5e: Ignore IPsec replay window values on sender side (Leon Romanovsky) [Orabug: 36811057]
- net/mlx5e: Allow software parsing when IPsec crypto is enabled (Leon Romanovsky) [Orabug: 36811057]
- net/mlx5: Use mlx5 device constant for selecting CQ period mode for ASO (Rahul Rameshbabu) [Orabug: 36811057]
- net/mlx5: Bridge, fix multicast packets sent to uplink (Moshe Shemesh) [Orabug: 36811057]
- net/mlx5: Fix a WARN upon a callback command failure (Yishai Hadas) [Orabug: 36811057]
- net/mlx5e: Fix peer flow lists handling (Vlad Buslov) [Orabug: 36811057]
- net/mlx5: Fix query of sd_group field (Tariq Toukan) [Orabug: 36811057]
- net/mlx5e: Use the correct lag ports number when creating TISes (Saeed Mahameed) [Orabug: 36811057]
- selftests: mlxsw: qos_pfc: Remove wrong description (Amit Cohen) [Orabug: 36811057]
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path (Ido Schimmel) [Orabug: 36811057] {CVE-2024-26595}
- gpio: mlxbf3: add an error code check in mlxbf3_gpio_probe (Su Hui) [Orabug: 36811057]
- vdpa/mlx5: Add mkey leak detection (Dragos Tatulea) [Orabug: 36811057]
- vdpa/mlx5: Introduce reference counting to mrs (Dragos Tatulea) [Orabug: 36811057]
- vdpa/mlx5: Use vq suspend/resume during .set_map (Dragos Tatulea) [Orabug: 36811057]
- vdpa/mlx5: Mark vq state for modification in hw vq (Dragos Tatulea) [Orabug: 36811057]
- vdpa/mlx5: Mark vq addrs for modification in hw vq (Dragos Tatulea) [Orabug: 36811057]
- vdpa/mlx5: Introduce per vq and device resume (Dragos Tatulea) [Orabug: 36811057]
- vdpa/mlx5: Allow modifying multiple vq fields in one modify command (Dragos Tatulea) [Orabug: 36811057]
- vdpa/mlx5: Expose resumable vq capability (Dragos Tatulea) [Orabug: 36811057]
- Revert "mlx5 updates 2023-12-20" (Jakub Kicinski) [Orabug: 36811057]
- net/mlx5: DPLL, Implement fractional frequency offset get pin op (Jiri Pirko) [Orabug: 36811057]
- net/mlx5: DPLL, Use struct to get values from mlx5_dpll_synce_status_get() (Jiri Pirko) [Orabug: 36811057]
- net: macsec: move sci_to_cpu to macsec header (Radu Pirea (NXP OSS)) [Orabug: 36811057]
- net/mlx5: Implement management PF Ethernet profile (Armen Ratner) [Orabug: 36811057]
- net/mlx5: Enable SD feature (Tariq Toukan) [Orabug: 36811057]
- net/mlx5e: Block TLS device offload on combined SD netdev (Tariq Toukan) [Orabug: 36811057]
- net/mlx5e: Support per-mdev queue counter (Tariq Toukan) [Orabug: 36811057]
- net/mlx5e: Support cross-vhca RSS (Tariq Toukan) [Orabug: 36811057]
- net/mlx5e: Let channels be SD-aware (Tariq Toukan) [Orabug: 36811057]
- net/mlx5e: Create EN core HW resources for all secondary devices (Tariq Toukan) [Orabug: 36811057]
- net/mlx5e: Create single netdev per SD group (Tariq Toukan) [Orabug: 36811057]
- net/mlx5: SD, Add informative prints in kernel log (Tariq Toukan) [Orabug: 36811057]
- net/mlx5: SD, Implement steering for primary and secondaries (Tariq Toukan) [Orabug: 36811057]
- net/mlx5: SD, Implement devcom communication and primary election (Tariq Toukan) [Orabug: 36811057]
- net/mlx5: SD, Implement basic query and instantiation (Tariq Toukan) [Orabug: 36811057]
- net/mlx5: SD, Introduce SD lib (Tariq Toukan) [Orabug: 36811057]
- net/mlx5: Fix query of sd_group field (Tariq Toukan) [Orabug: 36811057]
- net/mlx5e: Use the correct lag ports number when creating TISes (Saeed Mahameed) [Orabug: 36811057]
- mlxsw: spectrum_fid: Set NVE flood profile as part of FID configuration (Petr Machata) [Orabug: 36811057]
- mlxsw: spectrum_fid: Add an "any" packet type (Petr Machata) [Orabug: 36811057]
- mlxsw: reg: Add nve_flood_prf_id field to SFMR (Petr Machata) [Orabug: 36811057]
- net/mlx5: DR, Use swap() instead of open coding it (Jiapeng Chong) [Orabug: 36811057]
- net/mlx5: devcom, Add component size getter (Tariq Toukan) [Orabug: 36811057]
- net/mlx5e: Decouple CQ from priv (Tariq Toukan) [Orabug: 36811057]
- net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args (Tariq Toukan) [Orabug: 36811057]
- net/mlx5e: Statify function mlx5e_monitor_counter_arm (Tariq Toukan) [Orabug: 36811057]
- net/mlx5: Move TISes from priv to mdev HW resources (Tariq Toukan) [Orabug: 36811057]
- net/mlx5e: Remove TLS-specific logic in generic create TIS API (Tariq Toukan) [Orabug: 36811057]
- net/mlx5: fs, Command to control TX flow table root (Tariq Toukan) [Orabug: 36811057]
- net/mlx5: fs, Command to control L2TABLE entry silent mode (Tariq Toukan) [Orabug: 36811057]
- net/mlx5: Expose Management PCIe Index Register (MPIR) (Tariq Toukan) [Orabug: 36811057]
- net/mlx5: Add mlx5_ifc bits used for supporting single netdev Socket-Direct (Tariq Toukan) [Orabug: 36811057]
- net/mlx5: Manage ICM type of SW encap (Shun Hao) [Orabug: 36811057]
- RDMA/mlx5: Support handling of SW encap ICM area (Shun Hao) [Orabug: 36811057]
- net/mlx5: Introduce indirect-sw-encap ICM properties (Shun Hao) [Orabug: 36811057]
- mmc: sdhci-of-dwcmshc: Use logical OR instead of bitwise OR in dwcmshc_probe() (Nathan Chancellor) [Orabug: 36811057]
- mmc: sdhci-of-dwcmshc: Add support for T-Head TH1520 (Drew Fustini) [Orabug: 36811057]
- mmc: sdhci: add __sdhci_execute_tuning() to header (Drew Fustini) [Orabug: 36811057]
- mlxsw: spectrum: Use CFF mode where available (Petr Machata) [Orabug: 36811057]
- mlxsw: spectrum_fid: Add support for rFID family in CFF flood mode (Petr Machata) [Orabug: 36811057]
- mlxsw: spectrum_fid: Add a family for bridge FIDs in CFF flood mode (Petr Machata) [Orabug: 36811057]
- mlxsw: spectrum_fid: Initialize flood profiles in CFF mode (Petr Machata) [Orabug: 36811057]
- mlxsw: spectrum_fid: Add profile_id to flood profile (Petr Machata) [Orabug: 36811057]
- mlxsw: spectrum_fid: Add an object to keep flood profiles (Petr Machata) [Orabug: 36811057]
- mlxsw: spectrum_fid: Add hooks for RSP table maintenance (Petr Machata) [Orabug: 36811057]
- mlxsw: spectrum_fid: Add a not-UC packet type (Petr Machata) [Orabug: 36811057]
- mlxsw: spectrum_fid: Add an op for packing SFMR (Petr Machata) [Orabug: 36811057]
- mlxsw: spectrum_fid: Add an op to get PGT address of a FID (Petr Machata) [Orabug: 36811057]
- mlxsw: spectrum_fid: Add an op to get PGT allocation size (Petr Machata) [Orabug: 36811057]
- mlxsw: spectrum_fid: Add an op for flood table initialization (Petr Machata) [Orabug: 36811057]
- mlxsw: spectrum_fid: Move mlxsw_sp_fid_flood_table_init() up (Petr Machata) [Orabug: 36811057]
- mlxsw: spectrum_fid: Make mlxsw_sp_fid_ops.setup return an int (Petr Machata) [Orabug: 36811057]
- mlxsw: spectrum_fid: Split a helper out of mlxsw_sp_fid_flood_table_mid() (Petr Machata) [Orabug: 36811057]
- mlxsw: spectrum_fid: Rename FID ops, families, arrays (Petr Machata) [Orabug: 36811057]
- mlxsw: spectrum_fid: Privatize FID families (Petr Machata) [Orabug: 36811057]
- mlxsw: pci: Fix missing error checking (Ido Schimmel) [Orabug: 36811057]
- mlxsw: spectrum_router: Call RIF setup before obtaining FID (Petr Machata) [Orabug: 36811057]
- mlxsw: spectrum_router: Add a helper to get subport number from a RIF (Petr Machata) [Orabug: 36811057]
- mlxsw: spectrum_fid: Extract SFMR packing into a helper (Petr Machata) [Orabug: 36811057]
- mlxsw: spectrum_fid: Drop unnecessary conditions (Petr Machata) [Orabug: 36811057]
- mlxsw: pci: Permit enabling CFF mode (Petr Machata) [Orabug: 36811057]
- mlxsw: core, pci: Add plumbing related to CFF mode (Petr Machata) [Orabug: 36811057]
- mlxsw: reg: Add to SFMR register the fields related to CFF flood mode (Petr Machata) [Orabug: 36811057]
- mlxsw: reg: Extract flood-mode specific part of mlxsw_reg_sfmr_pack() (Petr Machata) [Orabug: 36811057]
- mlxsw: reg: Drop unnecessary writes from mlxsw_reg_sfmr_pack() (Petr Machata) [Orabug: 36811057]
- mlxsw: reg: Mark SFGC & some SFMR fields as reserved in CFF mode (Petr Machata) [Orabug: 36811057]
- mlxsw: reg: Add Switch FID Flooding Profiles Register (Petr Machata) [Orabug: 36811057]
- mlxsw: resources: Add max_cap_nve_flood_prf (Petr Machata) [Orabug: 36811057]
- mlxsw: cmd: Add MLXSW_CMD_MBOX_CONFIG_PROFILE_FLOOD_MODE_CFF (Petr Machata) [Orabug: 36811057]
- mlxsw: cmd: Add cmd_mbox.query_fw.cff_support (Petr Machata) [Orabug: 36811057]
- EDAC/bluefield: Convert to platform remove callback returning void (Uwe Kleine-König) [Orabug: 36811057]
- selftests: mlxsw: Add PCI reset test (Ido Schimmel) [Orabug: 36811057]
- mlxsw: pci: Implement PCI reset handlers (Ido Schimmel) [Orabug: 36811057]
- mlxsw: pci: Add support for new reset flow (Ido Schimmel) [Orabug: 36811057]
- mlxsw: pci: Move software reset code to a separate function (Amit Cohen) [Orabug: 36811057]
- mlxsw: pci: Rename mlxsw_pci_sw_reset() (Amit Cohen) [Orabug: 36811057]
- mlxsw: Extend MRSR pack() function to support new commands (Amit Cohen) [Orabug: 36811057]
- net/mlx5e: Remove early assignment to netdev->features (Tariq Toukan) [Orabug: 36811057]
- net/mlx5e: Add local loopback counter to vport rep stats (Or Har-Toov) [Orabug: 36811057]
- net/mlx5: Query maximum frequency adjustment of the PTP hardware clock (Rahul Rameshbabu) [Orabug: 36811057]
- net/mlx5: Convert scaled ppm values outside the s32 range for PHC frequency adjustments (Rahul Rameshbabu) [Orabug: 36811057]
- net/mlx5: Initialize clock->ptp_info inside mlx5_init_timer_clock (Rahul Rameshbabu) [Orabug: 36811057]
- net/mlx5: Refactor real time clock operation checks for PHC (Rahul Rameshbabu) [Orabug: 36811057]
- net/mlx5e: Access array with enum values instead of magic numbers (Gal Pressman) [Orabug: 36811057]
- net/mlx5: simplify mlx5_set_driver_version string assignments (Justin Stitt) [Orabug: 36811057]
- net/mlx5: Annotate struct mlx5_flow_handle with __counted_by (Kees Cook) [Orabug: 36811057]
- net/mlx5: Annotate struct mlx5_fc_bulk with __counted_by (Kees Cook) [Orabug: 36811057]
- net/mlx5e: Some cleanup in mlx5e_tc_stats_matchall() (Amir Tzin) [Orabug: 36811057]
- net/mlx5: Allow sync reset flow when BF MGT interface device is present (Moshe Shemesh) [Orabug: 36811057]
- net/mlx5: print change on SW reset semaphore returns busy (Moshe Shemesh) [Orabug: 36811057]
- vdpa/mlx5: clean up indenting in handle_ctrl_vlan() (Dan Carpenter) [Orabug: 36811057]
- vdpa/mlx5: fix error code for deleting vlan (Dan Carpenter) [Orabug: 36811057]
- vdpa/mlx5: Fix syntax errors in comments (Xiang wangx) [Orabug: 36811057]
- macsec: Fix use-after-free while sending the offloading packet (Jianbo Liu) [Orabug: 37268700] {CVE-2024-50261}
- xfrm: Export symbol xfrm_dev_state_delete. (Steffen Klassert) [Orabug: 37357287]
- xfrm: Fix unregister netdevice hang on hardware offload. (Steffen Klassert) [Orabug: 37357287]
- xfrm: fix a data-race in xfrm_lookup_with_ifid() (Eric Dumazet) [Orabug: 37357287]
- xfrm: generalize xdo_dev_state_update_curlft to allow statistics update (Leon Romanovsky) [Orabug: 37357287]
- xfrm: copy_to_user_state fetch offloaded SA packets/bytes statistics (Raed Salem) [Orabug: 37357287]
- xfrm: annotate data-race around use_time (Eric Dumazet) [Orabug: 37357287]
- xfrm: consistently use time64_t in xfrm_timer_handler() (Eric Dumazet) [Orabug: 37357287]
- cpufreq: intel_pstate: Update Balance-performance EPP for Granite Rapids (Srinivas Pandruvada) [Orabug: 37383554]
- cpufreq: intel_pstate: Update Balance performance EPP for Emerald Rapids (Pedro Henrique Kopper) [Orabug: 37383554]
- cpufreq: intel_pstate: Use Meteor Lake EPPs for Arrow Lake (Srinivas Pandruvada) [Orabug: 37383554]
- cpufreq: intel_pstate: Update Meteor Lake EPPs (Srinivas Pandruvada) [Orabug: 37383554]
- cpufreq: intel_pstate: Switch to new Intel CPU model defines (Tony Luck) [Orabug: 37383554]
- cpufreq: Switch to new Intel CPU model defines (Tony Luck) [Orabug: 37383554]
- x86/cpu/vfm: Update arch/x86/include/asm/intel-family.h (Tony Luck) [Orabug: 37383554]
- x86/cpu: Add model number for another Intel Arrow Lake mobile processor (Tony Luck) [Orabug: 37383554]
- cpufreq: intel_pstate: Update default EPPs for Meteor Lake (Srinivas Pandruvada) [Orabug: 37383554]
- cpufreq: intel_pstate: Allow model specific EPPs (Srinivas Pandruvada) [Orabug: 37383554]
- x86/cpu: Add model number for Intel Clearwater Forest processor (Tony Luck) [Orabug: 37383554]
- cpufreq: intel_pstate: Update hybrid scaling factor for Meteor Lake (Srinivas Pandruvada) [Orabug: 37383554]
- cpufreq: intel_pstate: Prioritize firmware-provided balance performance EPP (Srinivas Pandruvada) [Orabug: 37383554]
- x86/cpu: Add model number for Intel Arrow Lake mobile processor (Tony Luck) [Orabug: 37383554]
- x86/cpu: Update Hybrids (Peter Zijlstra) [Orabug: 37383554]
- cpufreq: intel_pstate: Fix scaling for hybrid-capable systems with disabled E-cores (Srinivas Pandruvada) [Orabug: 37383554]
- cpufreq: intel_pstate: Enable HWP IO boost for all servers (Srinivas Pandruvada) [Orabug: 37383554]
- cpufreq: intel_pstate: Allow EPP 0x80 setting by the firmware (Srinivas Pandruvada) [Orabug: 37383554]
- cpufreq: intel_pstate: Use firmware default EPP (Srinivas Pandruvada) [Orabug: 37383554]
- net/mlx5: Add a timeout to acquire the command queue semaphore (Akiva Goldberger) [Orabug: 37388415] {CVE-2024-38556}
- PCI: Fix pci_enable_acs() support for the ACS quirks (Jason Gunthorpe) [Orabug: 37477375]
- PCI: Clear Secondary Status errors after enumeration (Vidya Sagar) [Orabug: 37477375]
- PCI/AER: Configure ECRC only if AER is native (Vidya Sagar) [Orabug: 37477375]
- PCI: Extend ACS configurability (Vidya Sagar) [Orabug: 37477375]
- NFSv4/pNFS: Do layout state recovery upon reboot (Trond Myklebust) [Orabug: 37477755]
- NFSv4/pNFS: Remove redundant call to unhash the layout (Trond Myklebust) [Orabug: 37477755]
- NFSv4/pnfs: Give nfs4_proc_layoutreturn() a flags argument (Trond Myklebust) [Orabug: 37477755]
- NFSv4/pNFS: Retry the layout return later in case of a timeout or reboot (Trond Myklebust) [Orabug: 37477755]
- NFSv4/pNFS: Handle server reboots in pnfs_poc_release() (Trond Myklebust) [Orabug: 37477755]
- NFSv4/pNFS: Add a helper to defer failed layoutreturn calls (Trond Myklebust) [Orabug: 37477755]
- NFSv4/pnfs: Add support for the PNFS_LAYOUT_FILE_BULK_RETURN flag (Trond Myklebust) [Orabug: 37477755]
- pNFS: Add a flag argument to pnfs_destroy_layouts_byclid() (Trond Myklebust) [Orabug: 37477755]
- NFSv4: Clean up encode_nfs4_stateid() (Trond Myklebust) [Orabug: 37477755]
- NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [Orabug: 37477755]
- NFSv4/pnfs: Remove redundant list check (Trond Myklebust) [Orabug: 37477755]
- uek-rpm: Enable CONFIG_SENSORS_ARM_SCMI and CONFIG_MVL_MHU (Thomas Tai) [Orabug: 37498899]
-
Thu Jan 23 2025 Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-305.176.3.el8uek]
- LTS version: v5.15.176 (Vijayendra Suman)
- mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa)
- dt-bindings: display: adi,adv7533: Drop single lane support (Biju Das)
- drm: adv7511: Drop dsi single lane support (Biju Das)
- net/sctp: Prevent autoclose integer overflow in sctp_association_init() (Nikolay Kuratov)
- sky2: Add device ID 11ab:4373 for Marvell 88E8075 (Pascal Hambourg)
- pinctrl: mcp23s08: Fix sleeping in atomic context due to regmap locking (Evgenii Shatokhin)
- RDMA/uverbs: Prevent integer overflow issue (Dan Carpenter)
- kcov: mark in_softirq_really() as __always_inline (Arnd Bergmann)
- modpost: fix the missed iteration for the max bit in do_input() (Masahiro Yamada)
- modpost: fix input MODULE_DEVICE_TABLE() built for 64-bit on 32-bit host (Masahiro Yamada)
- usb: xhci: Avoid queuing redundant Stop Endpoint commands (Michal Pecio)
- ARC: build: Try to guess GCC variant of cross compiler (Leon Romanovsky)
- irqchip/gic: Correct declaration of *percpu_base pointer in union gic_base (Uros Bizjak)
- net: usb: qmi_wwan: add Telit FE910C04 compositions (Daniele Palmas)
- bpf: fix potential error return (Anton Protopopov)
- sound: usb: format: don't warn that raw DSD is unsupported (Adrian Ratiu)
- sound: usb: enable DSD output for ddHiFi TC44C (Adrian Ratiu)
- btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount (Filipe Manana)
- drm/amdkfd: Correct the migration DMA map direction (Prike Liang)
- wifi: mac80211: wake the queues in case of failure in resume (Emmanuel Grumbach)
- btrfs: sysfs: fix direct super block member reads (Qu Wenruo)
- btrfs: sysfs: convert scnprintf and snprintf to sysfs_emit (Anand Jain)
- btrfs: fix use-after-free when COWing tree bock and tracing is enabled (Filipe Manana) [Orabug: 37452645] {CVE-2024-56759}
- btrfs: rename and export __btrfs_cow_block() (Filipe Manana)
- ila: serialize calls to nf_register_net_hooks() (Eric Dumazet)
- af_packet: fix vlan_get_protocol_dgram() vs MSG_PEEK (Eric Dumazet)
- af_packet: fix vlan_get_tci() vs MSG_PEEK (Eric Dumazet)
- net: wwan: iosm: Properly check for valid exec stage in ipc_mmio_init() (Maciej S. Szmigiero)
- net: restrict SO_REUSEPORT to inet sockets (Eric Dumazet)
- RDMA/rtrs: Ensure 'ib_sge list' is accessible (Li Zhijian)
- net: mv643xx_eth: fix an OF node reference leak (Joe Hattori)
- eth: bcmsysport: fix call balance of priv->clk handling routines (Vitalii Mordan)
- ALSA: usb-audio: US16x08: Initialize array before use (Tanya Agarwal)
- net: llc: reset skb->transport_header (Antonio Pastor)
- netfilter: nft_set_hash: unaligned atomic read on struct nft_set_ext (Pablo Neira Ayuso)
- drm/i915/dg1: Fix power gate sequence. (Rodrigo Vivi)
- netrom: check buffer length before accessing it (Ilya Shchipletsov)
- net: fix memory leak in tcp_conn_request() (Wang Liang)
- net: stmmac: restructure the error path of stmmac_probe_config_dt() (Joe Hattori)
- net: stmmac: don't create a MDIO bus if unnecessary (Andrew Halaney)
- net: stmmac: platform: provide devm_stmmac_probe_config_dt() (Bartosz Golaszewski)
- RDMA/hns: Fix missing flush CQE for DWQE (Chengchang Tang)
- RDMA/hns: Fix warning storm caused by invalid input in IO path (Chengchang Tang)
- RDMA/hns: Fix mapping error of zero-hop WQE buffer (wenglianfa)
- RDMA/hns: Remove redundant 'bt_level' for hem_list_alloc_item() (Yunsheng Lin)
- RDMA/hns: Remove redundant 'attr_mask' in modify_qp_init_to_init() (Yixing Liu)
- drm/bridge: adv7511_audio: Update Audio InfoFrame properly (Stefan Ekenberg)
- RDMA/bnxt_re: Fix the locking while accessing the QP table (Selvin Xavier)
- RDMA/bnxt_re: Fix max_qp_wrs reported (Selvin Xavier)
- RDMA/bnxt_re: Fix reporting hw_ver in query_device (Kalesh AP)
- RDMA/bnxt_re: Add check for path mtu in modify_qp (Saravanan Vajravel)
- RDMA/mlx5: Enforce same type port association for multiport RoCE (Patrisious Haddad)
- xhci: Turn NEC specific quirk for handling Stop Endpoint errors generic (Mathias Nyman)
- usb: xhci: Limit Stop Endpoint retries (Michal Pecio)
- xhci: retry Stop Endpoint on buggy NEC controllers (Michal Pecio)
- thunderbolt: Add support for Intel Panther Lake-M/P (Mika Westerberg)
- thunderbolt: Add support for Intel Lunar Lake (Mika Westerberg)
- thunderbolt: Add Intel Barlow Ridge PCI ID (Mika Westerberg)
- thunderbolt: Add support for Intel Meteor Lake (Mika Westerberg)
- thunderbolt: Add support for Intel Raptor Lake (George D Sworo)
- tracing: Have process_string() also allow arrays (Steven Rostedt)
- selinux: ignore unknown extended permissions (Thiébaud Weksteen)
- x86/hyperv: Fix hv tsc page based sched_clock for hibernation (Naman Jain)
- net: dsa: improve shutdown sequence (Vladimir Oltean) [Orabug: 37206293] {CVE-2024-49998}
- nfsd: cancel nfsd_shrinker_work using sync mode in nfs4_state_shutdown_net (Yang Erkun) [Orabug: 37252394] {CVE-2024-50121}
- btrfs: avoid monopolizing a core when activating a swap file (Filipe Manana)
- power: supply: gpio-charger: Fix set charge current limits (Dimitri Fedrau)
- tracing: Prevent bad count for tracing_cpumask_write (Lizhi Xu) [Orabug: 37452666] {CVE-2024-56763}
- tracing: Constify string literal data member in struct trace_event_call (Christian Göttsche)
- ksmbd: fix racy issue from session lookup and expire (Namjae Jeon)
- lib: stackinit: hide never-taken branch from compiler (Kees Cook)
- drm/dp_mst: Verify request type in the corresponding down message reply (Imre Deak)
- arm64: Ensure bits ASID[15:8] are masked out when the kernel uses 8-bit ASIDs (Catalin Marinas)
- arm64: mm: Rename asid2idx() to ctxid2asid() (Yunfeng Ye)
- ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write (Jordy Zomer) [Orabug: 37434089] {CVE-2024-56626}
- ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read (Jordy Zomer) [Orabug: 37434096] {CVE-2024-56627}
- drm/dp_mst: Fix MST sideband message body length check (Imre Deak) [Orabug: 37434052] {CVE-2024-56616}
- bpf: Check validity of link->type in bpf_link_show_fdinfo() (Hou Tao) [Orabug: 37331881] {CVE-2024-53099}
- MIPS: Probe toolchain support of -msym32 (Jiaxun Yang)
- vmalloc: fix accounting with i915 (Matthew Wilcox (Oracle))
- virtio-blk: don't keep queue frozen during system suspend (Ming Lei)
- scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (Cathy Avery)
- scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load time (Ranjan Kumar)
- platform/x86: asus-nb-wmi: Ignore unknown event 0xCF (Armin Wolf)
- regmap: Use correct format specifier for logging range errors (Mark Brown)
- ALSA: hda/conexant: fix Z60MR100 startup pop issue (bo liu)
- scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl)
- scsi: qla1280: Fix hw revision numbering for ISP1020/1040 (Magnus Lindholm)
- watchdog: it87_wdt: add PWRGD enable quirk for Qotom QCML04 (James Hilliard)
- tracing/kprobe: Make trace_kprobe's module callback called after jump_label update (Masami Hiramatsu (Google))
- mtd: rawnand: fix double free in atmel_pmecc_create_user() (Dan Carpenter) [Orabug: 37522457] {CVE-2024-56766}
- dmaengine: at_xdmac: avoid null_prt_deref in at_xdmac_prep_dma_memset (Chen Ridong) [Orabug: 37452680] {CVE-2024-56767}
- dmaengine: dw: Select only supported masters for ACPI devices (Andy Shevchenko)
- dmaengine: mv_xor: fix child node refcount handling in early exit (Javier Carrasco)
- phy: core: Fix that API devm_phy_destroy() fails to destroy the phy (Zijun Hu)
- phy: core: Fix that API devm_of_phy_provider_unregister() fails to unregister the phy provider (Zijun Hu)
- phy: core: Fix that API devm_phy_put() fails to release the phy (Zijun Hu)
- phy: core: Fix an OF node refcount leakage in of_phy_provider_lookup() (Zijun Hu)
- phy: core: Fix an OF node refcount leakage in _of_phy_get() (Zijun Hu)
- mtd: rawnand: arasan: Fix missing de-registration of NAND (Maciej Andrzejewski)
- mtd: rawnand: arasan: Fix double assertion of chip-select (Maciej Andrzejewski)
- mtd: diskonchip: Cast an operand to prevent potential overflow (Zichen Xie)
- nfsd: restore callback functionality for NFSv4.0 (NeilBrown)
- bpf: Check negative offsets in __bpf_skb_min_len() (Cong Wang)
- tcp_bpf: Add sk_rmem_alloc related logic for tcp_bpf ingress redirection (Zijian Zhang)
- tcp_bpf: Charge receive socket buffer in bpf_tcp_ingress() (Cong Wang)
- mm/vmstat: fix a W=1 clang compiler warning (Bart Van Assche)
- media: dvb-frontends: dib3000mb: fix uninit-value in dib3000_write_reg (Nikita Zhandarovich) [Orabug: 37452686] {CVE-2024-56769}
- drm/amdgpu: Handle NULL bo->tbo.resource (again) in amdgpu_vm_bo_update (Michel Dänzer)
- epoll: Add synchronous wakeup support for ep_poll_callback (Xuewen Yan)
- ceph: validate snapdirname option length when mounting (Ilya Dryomov)
- of: Fix refcount leakage for OF node returned by __of_get_dma_parent() (Zijun Hu)
- of: Fix error path in of_parse_phandle_with_args_map() (Herve Codina)
- udmabuf: also check for F_SEAL_FUTURE_WRITE (Jann Horn)
- nilfs2: prevent use of deleted inode (Edward Adam Davis)
- of/irq: Fix using uninitialized variable @addr_len in API of_irq_parse_one() (Zijun Hu)
- NFS/pnfs: Fix a live lock between recalled layouts and layoutget (Trond Myklebust)
- tracing: Add "%s" check in test_event_printk() (Steven Rostedt)
- tracing: Add missing helper functions in event pointer dereference check (Steven Rostedt)
- tracing: Fix test_event_printk() to process entire print argument (Steven Rostedt)
- KVM: x86: Play nice with protected guests in complete_hypercall_exit() (Sean Christopherson)
- Drivers: hv: util: Avoid accessing a ringbuffer not initialized yet (Michael Kelley)
- btrfs: tree-checker: reject inline extent items with 0 ref count (Qu Wenruo)
- zram: refuse to use zero sized block device as backing device (Kairui Song)
- sh: clk: Fix clk_enable() to return 0 on NULL clk (Geert Uytterhoeven)
- hwmon: (tmp513) Fix interpretation of values of Temperature Result and Limit Registers (Murad Masimov)
- hwmon: (tmp513) Fix Current Register value interpretation (Murad Masimov)
- hwmon: (tmp513) Fix interpretation of values of Shunt Voltage and Limit Registers (Murad Masimov)
- hwmon: (tmp513) Use SI constants from units.h (Andy Shevchenko)
- hwmon: (tmp513) Simplify with dev_err_probe() (Andy Shevchenko)
- hwmon: (tmp513) Don't use "proxy" headers (Andy Shevchenko)
- drm/modes: Avoid divide by zero harder in drm_mode_vrefresh() (Ville Syrjälä)
- USB: serial: option: add Telit FE910C04 rmnet compositions (Daniele Palmas)
- USB: serial: option: add MediaTek T7XX compositions (Jack Wu)
- USB: serial: option: add Netprisma LCUK54 modules for WWAN Ready (Mank Wang)
- USB: serial: option: add MeiG Smart SLM770A (Michal Hrusecky)
- USB: serial: option: add TCL IK512 MBIM & ECM (Daniel Swanemar)
- efivarfs: Fix error on non-existent file (James Bottomley)
- i2c: riic: Always round-up when calculating bus period (Geert Uytterhoeven)
- chelsio/chtls: prevent potential integer overflow on 32bit (Dan Carpenter)
- mmc: sdhci-tegra: Remove SDHCI_QUIRK_BROKEN_ADMA_ZEROLEN_DESC quirk (Prathamesh Shete)
- net: mdiobus: fix an OF node reference leak (Joe Hattori)
- netfilter: ipset: Fix for recursive locking warning (Phil Sutter)
- net: ethernet: bgmac-platform: fix an OF node reference leak (Joe Hattori)
- net: hinic: Fix cleanup in create_rxqs/txqs() (Dan Carpenter)
- ionic: use ee->offset when returning sprom data (Shannon Nelson)
- ionic: Fix netdev notifier unregister on failure (Brett Creeley) [Orabug: 37434407] {CVE-2024-56715}
- netdevsim: prevent bad user input in nsim_dev_health_break_write() (Eric Dumazet) [Orabug: 37434410] {CVE-2024-56716}
- net/smc: check return value of sock_recvmsg when draining clc data (Guangguan Wang)
- net/smc: check smcd_v2_ext_offset when receiving proposal msg (Guangguan Wang)
- net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg (Guangguan Wang)
- net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll (Guangguan Wang)
- erofs: fix incorrect symlink detection in fast symlink (Gao Xiang)
- i2c: pnx: Fix timeout in wait functions (Vladimir Riabchun)
- usb: dwc2: gadget: Don't write invalid mapped sg entries into dma_desc with iommu enabled (Peng Hongchi)
- MIPS: Loongson64: DTS: Fix msi node for ls7a (Jiaxun Yang)
- PCI: Add ACS quirk for Broadcom BCM5760X NIC (Ajit Khaparde)
- PCI: vmd: Create domain symlink before pci_bus_add_devices() (Jiwei Sun)
- ASoC: Intel: sof_sdw: fix jack detection on ADL-N variant RVP (Pierre-Louis Bossart)
- usb: cdns3: Add quirk flag to enable suspend residency (Roger Quadros)
- ALSA: usb: Fix UBSAN warning in parse_audio_unit() (Takashi Iwai)
- PCI/AER: Disable AER service on suspend (Kai-Heng Feng)
- PCI: Use preserve_config in place of pci_flags (Vidya Sagar)
- net: sched: fix ordering of qlen adjustment (Lion Ackermann) [Orabug: 37433381] {CVE-2024-53164}
- LTS version: v5.15.175 (Vijayendra Suman)
- x86/static-call: fix 32-bit build (Juergen Gross)
- ALSA: usb-audio: Fix a DMA to stack memory bug (Dan Carpenter)
- x86/xen: remove hypercall page (Juergen Gross)
- x86/xen: use new hypercall functions instead of hypercall page (Juergen Gross)
- x86/xen: add central hypercall functions (Juergen Gross)
- x86/xen: don't do PV iret hypercall through hypercall page (Juergen Gross) [Orabug: 37427545] {CVE-2024-53241}
- x86/static-call: provide a way to do very early static-call updates (Juergen Gross)
- objtool/x86: allow syscall instruction (Juergen Gross)
- x86: make get_cpu_vendor() accessible from Xen code (Juergen Gross)
- xen/netfront: fix crash when removing device (Juergen Gross) [Orabug: 37427541] {CVE-2024-53240}
- Revert "parisc: fix a possible DMA corruption" (Greg Kroah-Hartman)
- tracing/kprobes: Skip symbol counting logic for module symbols in create_local_trace_kprobe() (Nikolay Kuratov)
- bpf: sync_linked_regs() must preserve subreg_def (Eduard Zingerman) [Orabug: 37388801] {CVE-2024-53125}
- blk-iocost: Avoid using clamp() on inuse in __propagate_weights() (Nathan Chancellor)
- ACPICA: events/evxfregn: don't release the ContextMutex that was never acquired (Daniil Tatianin)
- team: Fix feature propagation of NETIF_F_GSO_ENCAP_ALL (Daniel Borkmann)
- bonding: Fix feature propagation of NETIF_F_GSO_ENCAP_ALL (Daniel Borkmann)
- net/sched: netem: account for backlog updates from child qdisc (Martin Ottens)
- Documentation: PM: Clarify pm_runtime_resume_and_get() return value (Paul Barker)
- qca_spi: Make driver probing reliable (Stefan Wahren)
- qca_spi: Fix clock speed for multiple QCA7000 (Stefan Wahren)
- cxgb4: use port number to set mac addr (Anumula Murali Mohan Reddy)
- ACPI: resource: Fix memory resource type union access (Ilpo Järvinen)
- net: sparx5: fix the maximum frame length register (Daniel Machon)
- net: sparx5: fix FDMA performance issue (Daniel Machon)
- net: lapb: increase LAPB_HEADER_LEN (Eric Dumazet) [Orabug: 37434236] {CVE-2024-56659}
- ptp: kvm: x86: Return EOPNOTSUPP instead of ENODEV from kvm_arch_ptp_init() (Thomas Weißschuh)
- ptp: kvm: Use decrypted memory in confidential guest on x86 (Jeremi Piotrowski)
- selftests: mlxsw: sharedbuffer: Remove duplicate test cases (Danielle Ratson)
- selftests: mlxsw: sharedbuffer: Remove h1 ingress test case (Danielle Ratson)
- tipc: fix NULL deref in cleanup_bearer() (Eric Dumazet) [Orabug: 37522548] {CVE-2024-56661}
- batman-adv: Do not let TT changes list grows indefinitely (Remi Pommarel)
- batman-adv: Remove uninitialized data in full table TT response (Remi Pommarel)
- batman-adv: Do not send uninitialized TT changes (Remi Pommarel)
- acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl (Suraj Sonawane) [Orabug: 37434246] {CVE-2024-56662}
- exfat: fix potential deadlock on __exfat_get_dentry_set (Sungjong Seo) [Orabug: 36964279] {CVE-2024-42315}
- virtio/vsock: Fix accept_queue memory leak (Michal Luczaj) [Orabug: 37388777] {CVE-2024-53119}
- bpf, sockmap: Fix update element with same (Michal Luczaj)
- xfs: fix scrub tracepoints when inode-rooted btrees are involved (Darrick J. Wong)
- xfs: return from xfs_symlink_verify early on V4 filesystems (Darrick J. Wong)
- xfs: don't drop errno values when we fail to ficlone the entire range (Darrick J. Wong)
- xfs: update btree keys correctly when _insrec splits an inode root block (Darrick J. Wong)
- drm/i915: Fix memory leak by correcting cache object name in error handler (Jiasheng Jiang)
- usb: gadget: u_serial: Fix the issue that gs_start_io crashed due to accessing null pointer (Lianqin Hu) [Orabug: 37434263] {CVE-2024-56670}
- usb: ehci-hcd: fix call balance of clocks handling routines (Vitalii Mordan)
- usb: dwc2: Fix HCD port connection race (Stefan Wahren)
- usb: dwc2: hcd: Fix GetPortStatus & SetPortFeature (Stefan Wahren)
- usb: dwc2: Fix HCD resume (Stefan Wahren)
- ata: sata_highbank: fix OF node reference leak in highbank_initialize_phys() (Joe Hattori)
- usb: host: max3421-hcd: Correctly abort a USB request. (Mark Tomlinson)
- ALSA: usb-audio: Add implicit feedback quirk for Yamaha THR5 (Jaakko Salo)
- tcp: check space before adding MPTCP SYN options (MoYuanhao)
- LTS version: v5.15.174 (Vijayendra Suman)
- Bluetooth: hci_core: Fix calling mgmt_device_connected (Luiz Augusto von Dentz)
- net/smc: Fix af_ops of child socket pointing to released memory (Karsten Graul)
- media: venus: vdec: fixed possible memory leak issue (Ameer Hamza)
- serial: amba-pl011: fix build regression (Arnd Bergmann)
- drm/amdgpu: rework resume handling for display (v2) (Alex Deucher)
- drm/amd/display: Correct the defined value for AMDGPU_DMUB_NOTIFICATION_MAX (Wayne Lin) [Orabug: 37159692] {CVE-2024-46871}
- net: dsa: microchip: correct KSZ8795 static MAC table access (Tristram Ha)
- Bluetooth: L2CAP: Fix uaf in l2cap_connect (Luiz Augusto von Dentz) [Orabug: 37206073] {CVE-2024-49950}
- arm64: smccc: Remove broken support for SMCCCv1.3 SVE discard hint (Mark Rutland)
- arm64/sve: Discard stale CPU state when handling SVE traps (Mark Brown) [Orabug: 37298722] {CVE-2024-50275}
- gve: Fixes for napi_poll when budget is 0 (Ziwei Xiao)
- scsi: core: Fix scsi_mode_select() buffer length handling (Damien Le Moal)
- Revert "drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read()" (Zhang Zekun)
- fou: remove warn in gue_gro_receive on unsupported protocol (Willem de Bruijn) [Orabug: 36993166] {CVE-2024-44940}
- ima: Fix use-after-free on a dentry's dname.name (Stefan Berger) [Orabug: 36835557] {CVE-2024-39494}
- crypto: hisilicon/qm - inject error before stopping queue (Weili Qian) [Orabug: 37200767] {CVE-2024-47730}
- drm/amd/display: Check BIOS images before it is used (Alex Hung) [Orabug: 37116330] {CVE-2024-46809}
- mmc: mtk-sd: Fix error handle of probe function (Andy-ld Lu)
- xhci: dbc: Fix STALL transfer event handling (Mathias Nyman)
- mm/damon/vaddr: fix issue in damon_va_evenly_split_region() (Zheng Yejian)
- mm/damon/vaddr-test: split a test function having >1024 bytes frame size (SeongJae Park)
- jffs2: Fix rtime decompressor (Richard Weinberger)
- jffs2: Prevent rtime decompress memory corruption (Kinsey Moore)
- KVM: arm64: vgic-its: Clear ITE when DISCARD frees an ITE (Kunkun Jiang)
- KVM: arm64: vgic-its: Clear DTE when MAPD unmaps a device (Kunkun Jiang)
- KVM: arm64: vgic-its: Add a data length check in vgic_its_save_* (Jing Zhang)
- tracing/eprobe: Fix to release eprobe when failed to add dyn_event (Masami Hiramatsu (Google))
- btrfs: fix missing snapshot drew unlock when root is dead during swap activation (Filipe Manana)
- sched/core: Prevent wakeup of ksoftirqd during idle load balance (K Prateek Nayak)
- sched/fair: Check idle_cpu() before need_resched() to detect ilb CPU turning busy (K Prateek Nayak)
- sched/fair: Add NOHZ balancer flag for nohz.next_balance updates (Valentin Schneider)
- sched/core: Remove the unnecessary need_resched() check in nohz_csd_func() (K Prateek Nayak)
- modpost: Add .irqentry.text to OTHER_SECTIONS (Thomas Gleixner)
- modpost: Include '.text.*' in TEXT_SECTIONS (Nathan Chancellor)
- misc: eeprom: eeprom_93cx6: Add quirk for extra read clock cycle (Parker Newman)
- powerpc/prom_init: Fixup missing powermac #size-cells (Michael Ellerman)
- MIPS: Loongson64: DTS: Really fix PCIe port nodes for ls7a (Xi Ruoyao)
- usb: chipidea: udc: handle USB Error Interrupt if IOC not set (Xu Yang)
- i3c: Use i3cdev->desc->info instead of calling i3c_device_get_info() to avoid deadlock (Defa Li)
- PCI: Add ACS quirk for Wangxun FF5xxx NICs (Mengyuan Lou)
- PCI: Add 'reset_subordinate' to reset hierarchy below bridge (Keith Busch)
- PCI: Detect and trust built-in Thunderbolt chips (Esther Shimanovich)
- i3c: mipi-i3c-hci: Mask ring interrupts before ring stop request (Jarkko Nikula)
- f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode. (Qi Han) [Orabug: 37433860] {CVE-2024-56586}
- nvdimm: rectify the illogical code within nd_dax_probe() (Yi Yang)
- pinctrl: qcom-pmic-gpio: add support for PM8937 (Barnabás Czémán)
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Kai Mäkisara)
- scsi: st: Don't modify unknown block number in MTIOCGET (Kai Mäkisara)
- leds: class: Protect brightness_show() with led_cdev->led_access mutex (Mukesh Ojha) [Orabug: 37433867] {CVE-2024-56587}
- scsi: hisi_sas: Add cond_resched() for no forced preemption model (Yihang Li) [Orabug: 37433881] {CVE-2024-56589}
- tracing: Use atomic64_inc_return() in trace_clock_counter() (Uros Bizjak)
- pinctrl: freescale: fix COMPILE_TEST error with PINCTRL_IMX_SCU (Esben Haabendal)
- netpoll: Use rcu_access_pointer() in __netpoll_setup (Breno Leitao)
- net/neighbor: clear error in case strict check is not set (Jakub Kicinski)
- rocker: fix link status detection in rocker_carrier_init() (Dmitry Antipov)
- ASoC: hdmi-codec: reorder channel allocation list (Jonas Karlman)
- Bluetooth: hci_core: Fix not checking skb length on hci_acldata_packet (Luiz Augusto von Dentz) [Orabug: 37433887] {CVE-2024-56590}
- wifi: brcmfmac: Fix oops due to NULL pointer dereference in brcmf_sdiod_sglist_rw() (Norbert van Bolhuis) [Orabug: 37433907] {CVE-2024-56593}
- wifi: ipw2x00: libipw_rx_any(): fix bad alignment (Jiapeng Chong)
- drm/amdgpu: set the right AMDGPU sg segment limitation (Prike Liang) [Orabug: 37433913] {CVE-2024-56594}
- drm/amdgpu: skip amdgpu_device_cache_pci_state under sriov (Victor Zhao)
- jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree (Nihar Chaithanya) [Orabug: 37433919] {CVE-2024-56595}
- jfs: fix array-index-out-of-bounds in jfs_readdir (Ghanshyam Agrawal) [Orabug: 37433927] {CVE-2024-56596}
- jfs: fix shift-out-of-bounds in dbSplit (Ghanshyam Agrawal) [Orabug: 37433933] {CVE-2024-56597}
- jfs: array-index-out-of-bounds fix in dtReadFirst (Ghanshyam Agrawal) [Orabug: 37433940] {CVE-2024-56598}
- dma-debug: fix a possible deadlock on radix_lock (Levi Yun)
- drm/amdgpu: refine error handling in amdgpu_ttm_tt_pin_userptr (Lang Yu)
- drm/amdgpu: Dereference the ATCS ACPI buffer (Prike Liang)
- drm/amdgpu: clear RB_OVERFLOW bit when enabling interrupts for vega20_ih (Victor Lu)
- drm/panel: simple: Add Microchip AC69T88A LVDS Display panel (Manikandan Muralidharan)
- wifi: ath5k: add PCI ID for Arcadyan devices (Rosen Penev)
- wifi: ath5k: add PCI ID for SX76X (Rosen Penev)
- net: inet6: do not leave a dangling sk pointer in inet6_create() (Ignat Korchagin) [Orabug: 37433954] {CVE-2024-56600}
- net: inet: do not leave a dangling sk pointer in inet_create() (Ignat Korchagin) [Orabug: 37433961] {CVE-2024-56601}
- net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Ignat Korchagin) [Orabug: 37433968] {CVE-2024-56602}
- net: af_can: do not leave a dangling sk pointer in can_create() (Ignat Korchagin) [Orabug: 37433975] {CVE-2024-56603}
- Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create() (Ignat Korchagin) [Orabug: 37433989] {CVE-2024-56605}
- af_packet: avoid erroring out after sock_init_data() in packet_create() (Ignat Korchagin) [Orabug: 37433995] {CVE-2024-56606}
- net/sched: cbs: Fix integer overflow in cbs_set_port_rate() (Elena Salomatkina)
- net: ethernet: fs_enet: Use %pa to format resource_size_t (Simon Horman)
- net: fec_mpc52xx_phy: Use %pa to format resource_size_t (Simon Horman)
- samples/bpf: Fix a resource leak (Zhu Jun)
- r8169: don't apply UDP padding quirk on RTL8126A (Heiner Kallweit)
- drm/radeon/r600_cs: Fix possible int overflow in r600_packet3_check() (Igor Artemiev)
- drm/mcde: Enable module autoloading (Liao Chen)
- drm: panel-orientation-quirks: Add quirk for AYA NEO 2 model (Joaquín Ignacio Aramendía)
- drm/vc4: hvs: Set AXI panic modes for the HVS (Dave Stevenson)
- soc: imx8m: Probe the SoC driver as platform driver (Marek Vasut)
- media: cx231xx: Add support for Dexatek USB Video Grabber 1d19:6108 (Rohan Barar)
- media: uvcvideo: Add a quirk for the Kaiweets KTI-W02 infrared camera (David Given)
- kcsan: Turn report_filterlist_lock into a raw_spinlock (Marco Elver) [Orabug: 37434021] {CVE-2024-56610}
- kselftest/arm64: Don't leak pipe fds in pac.exec_sign_all() (Mark Brown)
- btrfs: avoid unnecessary device path update for the same device (Qu Wenruo)
- s390/cpum_sf: Handle CPU hotplug remove during sampling (Thomas Richter)
- epoll: annotate racy check (Christian Brauner)
- iommu/arm-smmu: Defer probe of clients after smmu device bound (Pratyush Brahma) [Orabug: 37433775] {CVE-2024-56568}
- ocfs2: update seq_file index in ocfs2_dlm_seq_next (Wengang Wang)
- mmc: core: Further prevent card detect during shutdown (Ulf Hansson)
- mmc: sdhci-pci: Add DMI quirk for missing CD GPIO on Vexia Edu Atla 10 tablet (Hans de Goede)
- regmap: detach regmap from dev on regmap_exit (Cosmin Tanislav)
- xsk: fix OOB map writes when deleting elements (Maciej Fijalkowski) [Orabug: 37434040] {CVE-2024-56614}
- dma-buf: fix dma_fence_array_signaled v4 (Christian König)
- bpf: fix OOB devmap writes when deleting elements (Maciej Fijalkowski) [Orabug: 37434046] {CVE-2024-56615}
- bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again (Liequan Che)
- nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry() (Ryusuke Konishi) [Orabug: 37434064] {CVE-2024-56619}
- scsi: ufs: core: sysfs: Prevent div by zero (Gwendal Grignou) [Orabug: 37434075] {CVE-2024-56622}
- scsi: qla2xxx: Remove check req_sg_cnt should be equal to rsp_sg_cnt (Saurav Kashyap)
- scsi: qla2xxx: Fix use after free on unload (Quinn Tran) [Orabug: 37434078] {CVE-2024-56623}
- scsi: qla2xxx: Supported speed displayed incorrectly for VPorts (Anil Gurumurthy)
- scsi: qla2xxx: Fix NVMe and NPIV connect issue (Quinn Tran)
- ALSA: hda/realtek: Add support for Samsung Galaxy Book3 360 (NP730QFG) (Sahas Leelodharry)
- ALSA: hda/realtek: Enable mute and micmute LED on HP ProBook 430 G8 (Nazar Bilinskyi)
- ALSA: usb-audio: add mixer mapping for Corsair HS80 (Marie Ramlow)
- arm64: ptrace: fix partial SETREGSET for NT_ARM_TAGGED_ADDR_CTRL (Mark Rutland)
- tracing: Fix cmp_entries_dup() to respect sort() comparison rules (Kuan-Wei Chiu)
- can: dev: can_set_termination(): allow sleeping GPIOs (Marc Kleine-Budde)
- watchdog: rti: of: honor timeout-sec property (Alexander Sverdlin)
- HID: wacom: fix when get product name maybe null pointer (WangYuli) [Orabug: 37434107] {CVE-2024-56629}
- bpf: Fix exact match conditions in trie_get_next_key() (Hou Tao)
- bpf: Handle BPF_EXIST and BPF_NOEXIST for LPM trie (Hou Tao)
- ocfs2: free inode when ocfs2_get_init_inode() fails (Tetsuo Handa) [Orabug: 37434112] {CVE-2024-56630}
- drm/v3d: Enable Performance Counters before clearing them (Maíra Canal)
- spi: mpc52xx: Add cancel_work_sync before module remove (Pei Xiao)
- tools: Override makefile ARCH variable if defined, but empty (Björn Töpel)
- ALSA: usb-audio: Notify xrun for low-latency mode (Takashi Iwai)
- ALSA: pcm: Avoid reference to status->state (Takashi Iwai)
- ALSA: pcm: Add more disconnection checks at file ops (Takashi Iwai)
- tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg (Zijian Zhang) [Orabug: 37434126] {CVE-2024-56633}
- drm/sti: Add __iomem for mixer_dbg_mxn's parameter (Pei Xiao)
- bpftool: fix potential NULL pointer dereferencing in prog_dump() (Amir Mohammadi)
- bpftool: Remove asserts from JIT disassembler (Quentin Monnet)
- serial: amba-pl011: Fix RX stall when DMA is used (Kartik Rajput)
- serial: amba-pl011: Use port lock wrappers (Thomas Gleixner)
- dt-bindings: serial: rs485: Fix rs485-rts-delay property (Michal Simek)
- dt_bindings: rs485: Correct delay values (Lino Sanfilippo)
- gpio: grgpio: Add NULL check in grgpio_probe (Charles Han) [Orabug: 37434130] {CVE-2024-56634}
- gpio: grgpio: use a helper variable to store the address of ofdev->dev (Bartosz Golaszewski)
- geneve: do not assume mac header is set in geneve_xmit_skb() (Eric Dumazet) [Orabug: 37434137] {CVE-2024-56636}
- ethtool: Fix wrong mod state in case of verbose and no_mask bitset (Kory Maincent)
- netfilter: nft_set_hash: skip duplicated elements pending gc run (Pablo Neira Ayuso)
- netfilter: ipset: Hold module reference while requesting a module (Phil Sutter) [Orabug: 37434142] {CVE-2024-56637}
- net: sched: fix erspan_opt settings in cls_flower (Xin Long)
- igb: Fix potential invalid memory access in igb_init_module() (Yuan Can)
- net/qed: allow old cards not supporting "num_images" to work (Louis Leseur)
- net/smc: fix LGR and link use-after-free issue (Wen Gu) [Orabug: 37434151] {CVE-2024-56640}
- net/smc: Limit backlog connections (D. Wythe)
- tipc: Fix use-after-free of kernel socket in cleanup_bearer(). (Kuniyuki Iwashima) [Orabug: 37434160] {CVE-2024-56642}
- dccp: Fix memory leak in dccp_feat_change_recv (Ivan Solodovnikov) [Orabug: 37434165] {CVE-2024-56643}
- net/ipv6: release expired exception dst cached in socket (Jiri Wiesner) [Orabug: 37434172] {CVE-2024-56644}
- can: j1939: j1939_session_new(): fix skb reference counting (Dmitry Antipov)
- net: hsr: avoid potential out-of-bound access in fill_frame_info() (Eric Dumazet) [Orabug: 37434192] {CVE-2024-56648}
- net/sched: tbf: correct backlog statistic for GSO packets (Martin Ottens)
- ptp: Add error handling for adjfine callback in ptp_clock_adjtime (Ajay Kaher)
- netfilter: x_tables: fix LED ID check in led_tg_check() (Dmitry Antipov) [Orabug: 37434199] {CVE-2024-56650}
- ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (Jinghao Jia)
- can: ems_usb: ems_usb_rx_err(): fix {rx,tx}_errors statistics (Dario Binacchi)
- can: sun4i_can: sun4i_can_err(): fix {rx,tx}_errors statistics (Dario Binacchi)
- can: ifi_canfd: ifi_canfd_handle_lec_err(): fix {rx,tx}_errors statistics (Dario Binacchi)
- can: m_can: m_can_handle_lec_err(): fix {rx,tx}_errors statistics (Dario Binacchi)
- can: sun4i_can: sun4i_can_err(): call can_change_state() even if cf is NULL (Dario Binacchi)
- can: c_can: c_can_handle_bus_err(): update statistics if skb allocation fails (Dario Binacchi)
- can: do not increase rx statistics when generating a CAN rx error message frame (Vincent Mailhol)
- can: peak_usb: CANFD: store 64-bits hw timestamps (Stephane Grosjean)
- watchdog: mediatek: Make sure system reset gets asserted in mtk_wdt_restart() (Yassine Oudjana)
- iTCO_wdt: mask NMI_NOW bit for update_no_reboot_bit() call (Oleksandr Ocheretnyi)
- drm/etnaviv: flush shader L1 cache after user commandstream (Lucas Stach)
- drm/sti: avoid potential dereference of error pointers (Ma Ke)
- drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check (Ma Ke)
- drm/sti: avoid potential dereference of error pointers in sti_hqvdp_atomic_check (Ma Ke)
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc() (Josef Bacik) [Orabug: 37116498] {CVE-2024-46841}
- nfsd: fix nfs4_openowner leak when concurrent nfsd4_open occur (Yang Erkun)
- nfsd: make sure exp active before svc_export_show (Yang Erkun) [Orabug: 37433743] {CVE-2024-56558}
- PCI: rockchip-ep: Fix address translation unit programming (Damien Le Moal)
- dm thin: Add missing destroy_work_on_stack() (Yuan Can)
- ovl: properly handle large files in ovl_security_fileattr (Oleksandr Tymoshenko)
- PCI: keystone: Add link up check to ks_pcie_other_map_bus() (Kishon Vijay Abraham I)
- i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs() (Frank Li) [Orabug: 37433755] {CVE-2024-56562}
- scsi: ufs: exynos: Fix hibern8 notify callbacks (Peter Griffin)
- util_macros.h: fix/rework find_closest() macros (Alexandru Ardelean)
- s390/entry: Mark IRQ entries to fix stack depot warnings (Vasily Gorbik)
- ad7780: fix division by zero in ad7780_write_raw() (Zicheng Qu) [Orabug: 37433771] {CVE-2024-56567}
- btrfs: ref-verify: fix use-after-free after invalid ref action (Filipe Manana) [Orabug: 37433831] {CVE-2024-56581}
- btrfs: add a sanity check for btrfs root in btrfs_search_slot() (Lizhi Xu)
- btrfs: add might_sleep() annotations (ChenXiaoSong)
- quota: flush quota_release_work upon quota writeback (Ojaswin Mujoo)
- xfs: remove unknown compat feature check in superblock write validation (Long Li)
- xfs: fix log recovery when unknown rocompat bits are set (Darrick J. Wong)
- ASoC: fsl_micfil: fix the naming style for mask definition (Shengjiu Wang)
- sh: intc: Fix use-after-free bug in register_intc_controller() (Dan Carpenter) [Orabug: 37433391] {CVE-2024-53165}
- sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport (Liu Jian) [Orabug: 37434313] {CVE-2024-56688}
- sunrpc: remove unnecessary test in rpc_task_set_client() (Thiago Rafael Becker)
- nfs: ignore SB_RDONLY when mounting nfs (Li Lingfeng)
- modpost: remove incorrect code in do_eisa_entry() (Masahiro Yamada)
- rtc: ab-eoz9: don't fail temperature reads on undervoltage notification (Maxime Chevallier)
- 9p/xen: fix release of IRQ (Alex Zenla) [Orabug: 37434373] {CVE-2024-56704}
- 9p/xen: fix init sequence (Alex Zenla)
- block: return unsigned int from bdev_io_min (Christoph Hellwig)
- jffs2: fix use of uninitialized variable (Qingfang Deng)
- ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit (Waqar Hameed) [Orabug: 37433413] {CVE-2024-53171}
- ubi: fastmap: Fix duplicate slab cache names while attaching (Zhihao Cheng) [Orabug: 37433417] {CVE-2024-53172}
- ubifs: Correct the total block count by deducting journal reservation (Zhihao Cheng)
- rtc: check if __rtc_read_time was successful in rtc_timer_do_work() (Yongliang Gao) [Orabug: 37434455] {CVE-2024-56739}
- rtc: abx80x: Fix WDT bit position of the status register (Nobuhiro Iwamatsu)
- rtc: st-lpc: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)
- NFSv4.0: Fix a use-after-free problem in the asynchronous open() (Trond Myklebust) [Orabug: 37433425] {CVE-2024-53173}
- um: Always dump trace for specified task in show_stack (Tiwei Bie)
- um: Fix the return value of elf_core_copy_task_fpregs (Tiwei Bie)
- um: Fix potential integer overflow during physmem setup (Tiwei Bie) [Orabug: 37427463] {CVE-2024-53145}
- rpmsg: glink: Propagate TX failures in intentless mode as well (Bjorn Andersson)
- SUNRPC: make sure cache entry active before cache_show (Yang Erkun) [Orabug: 37433432] {CVE-2024-53174}
- NFSD: Prevent a potential integer overflow (Chuck Lever) [Orabug: 37427469] {CVE-2024-53146}
- lib: string_helpers: silence snprintf() output truncation warning (Bartosz Golaszewski)
- usb: dwc3: gadget: Fix looping of queued SG entries (Thinh Nguyen) [Orabug: 37434350] {CVE-2024-56698}
- usb: dwc3: gadget: Fix checking for number of TRBs left (Thinh Nguyen)
- ALSA: hda/realtek: Apply quirk for Medion E15433 (Takashi Iwai)
- ALSA: hda/realtek: Fix Internal Speaker and Mic boost of Infinix Y4 Max (Dinesh Kumar)
- ALSA: hda/realtek: Set PCBeep to default value for ALC274 (Kailang Yang)
- ALSA: hda/realtek: Update ALC225 depop procedure (Kailang Yang)
- ALSA: pcm: Add sanity NULL check for the default mmap fault handler (Takashi Iwai) [Orabug: 37433460] {CVE-2024-53180}
- media: v4l2-core: v4l2-dv-timings: check cvt/gtf result (Hans Verkuil)
- soc: fsl: rcpm: fix missing of_node_put() in copy_ippdexpcr1_setting() (Javier Carrasco)
- media: wl128x: Fix atomicity violation in fmc_send_cmd() (Qiu-ji Chen) [Orabug: 37434357] {CVE-2024-56700}
- HID: wacom: Interpret tilt data from Intuos Pro BT as signed values (Jason Gerecke)
- block: fix ordering between checking BLK_MQ_S_STOPPED request adding (Muchun Song)
- arm64: tls: Fix context-switching of tpidrro_el0 when kpti is enabled (Will Deacon)
- sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK (Huacai Chen)
- um: vector: Do not use drvdata in release (Tiwei Bie) [Orabug: 37433466] {CVE-2024-53181}
- serial: 8250: omap: Move pm_runtime_get_sync (Bin Liu)
- um: net: Do not use drvdata in release (Tiwei Bie) [Orabug: 37433474] {CVE-2024-53183}
- um: ubd: Do not use drvdata in release (Tiwei Bie) [Orabug: 37433483] {CVE-2024-53184}
- ubi: wl: Put source PEB into correct list if trying locking LEB failed (Zhihao Cheng)
- platform/chrome: cros_ec_typec: fix missing fwnode reference decrement (Javier Carrasco)
- cpufreq: mediatek-hw: Fix wrong return value in mtk_cpufreq_get_cpu_power() (Jinjie Ruan)
- mtd: spi-nor: core: replace dummy buswidth from addr to data (Cheng Ming Lin)
- spi: Fix acpi deferred irq probe (Stanislaw Gruszka)
- netfilter: ipset: add missing range check in bitmap_ip_uadt (Jeongjun Park) [Orabug: 37388866] {CVE-2024-53141}
- gpio: exar: set value when external pull-up or pull-down is present (Sai Kumar Cholleti)
- Revert "serial: sh-sci: Clean sci_ports[0] after at earlycon exit" (Greg Kroah-Hartman)
- serial: sh-sci: Clean sci_ports[0] after at earlycon exit (Claudiu Beznea)
- Revert "usb: gadget: composite: fix OS descriptors w_value logic" (Michal Vrastil)
- driver core: bus: Fix double free in driver API bus_register() (Zijun Hu) [Orabug: 37206509] {CVE-2024-50055}
- usb: xhci: Fix TD invalidation under pending Set TR Dequeue (Michal Pecio)
- Bluetooth: Fix type of len in rfcomm_sock_getsockopt{,_old}() (Andrej Shadura)
- exfat: fix uninit-value in __exfat_get_dentry_set (Namjae Jeon)
- locking/lockdep: Avoid creating new name string literals in lockdep_set_subclass() (Ahmed Ehab)
- tty: ldsic: fix tty_ldisc_autoload sysctl's proc_handler (Nicolas Bouchinet)
- apparmor: test: Fix memory leak for aa_unpack_strdup() (Jinjie Ruan) [Orabug: 37434463] {CVE-2024-56741}
- comedi: Flush partial mappings in error case (Jann Horn) [Orabug: 37427481] {CVE-2024-53148}
- fsnotify: fix sending inotify event with unexpected filename (Amir Goldstein)
- PCI: Fix use-after-free of slot->bus on hot remove (Lukas Wunner) [Orabug: 37433515] {CVE-2024-53194}
- KVM: arm64: Ignore PMCNTENSET_EL0 while checking for overflow status (Raghavendra Rao Ananta)
- powerpc/pseries: Fix KVM guest detection for disabling hardlockup detector (Gautam Menghani)
- crypto: x86/aegis128 - access 32-bit arguments as 32-bit (Eric Biggers)
- perf/x86/intel/pt: Fix buffer full but size is 0 case (Adrian Hunter)
- ASoC: codecs: Fix atomicity violation in snd_soc_component_get_drvdata() (Qiu-ji Chen)
- jfs: xattr: check invalid xattr size more strictly (Artem Sadovnikov)
- ext4: fix FS_IOC_GETFSMAP handling (Theodore Ts'o)
- ext4: supress data-race warnings in ext4_free_inodes_{count,set}() (Jeongjun Park)
- ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Benoît Sevens) [Orabug: 37433531] {CVE-2024-53197}
- soc: qcom: socinfo: fix revision check in qcom_socinfo_probe() (Manikanta Mylavarapu)
- ASoC: Intel: sst: Fix used of uninitialized ctx to log an error (Hans de Goede)
- Revert "drivers: clk: zynqmp: update divider round rate logic" (Joel Guittet)
- usb: ehci-spear: fix call balance of sehci clk handling routines (Vitalii Mordan)
- ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Takashi Iwai) [Orabug: 37427488] {CVE-2024-53150}
- xen: Fix the issue of resource not being properly released in xenbus_dev_probe() (Qiu-ji Chen) [Orabug: 37433539] {CVE-2024-53198}
- ksmbd: fix slab-use-after-free in smb3_preauth_hash_rsp (Namjae Jeon) [Orabug: 37298755] {CVE-2024-50283}
- parisc: fix a possible DMA corruption (Mikulas Patocka) [Orabug: 37028940] {CVE-2024-44949}
- apparmor: fix 'Do simple duplicate message elimination' (chao liu)
- ALSA: hda/realtek: Update ALC256 depop procedure (Kailang Yang)
- counter: stm32-timer-cnt: Add check for clk_enable() (Jiasheng Jiang)
- misc: apds990x: Fix missing pm_runtime_disable() (Jinjie Ruan)
- USB: chaoskey: Fix possible deadlock chaoskey_list_lock (Edward Adam Davis)
- USB: chaoskey: fail open after removal (Oliver Neukum)
- usb: yurex: make waiting on yurex_write interruptible (Oliver Neukum)
- usb: using mutex lock and supporting O_NONBLOCK flag in iowarrior_read() (Jeongjun Park)
- iio: light: al3010: Fix an error handling path in al3010_probe() (Christophe JAILLET)
- bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down (Saravanan Vajravel)
- net: hsr: fix hsr_init_sk() vs network/transport headers. (Eric Dumazet)
- spi: atmel-quadspi: Fix register name in verbose logging function (Csókás, Bence)
- octeontx2-af: RPM: Fix mismatch in lmac type (Hariprasad Kelam)
- net: stmmac: dwmac-socfpga: Set RX watchdog interrupt as broken (Maxime Chevallier)
- marvell: pxa168_eth: fix call balance of pep->clk handling routines (Vitalii Mordan)
- net: mdio-ipq4019: add missing error check (Rosen Penev)
- net: usb: lan78xx: Fix refcounting and autosuspend on invalid WoL configuration (Oleksij Rempel)
- tg3: Set coherent DMA mask bits to 31 for BCM57766 chipsets (Pavan Chebbi)
- net: usb: lan78xx: Fix memory leak on device unplug by freeing PHY device (Oleksij Rempel)
- power: supply: bq27xxx: Fix registers of bq27426 (Barnabás Czémán)
- power: supply: core: Remove might_sleep() from power_supply_put() (Bart Van Assche)
- fs_parser: update mount_api doc to match function signature (Randy Dunlap)
- vfio/pci: Properly hide first-in-list PCIe extended capability (Avihai Horon) [Orabug: 37433577] {CVE-2024-53214}
- selftests/mount_setattr: Fix failures on 64K PAGE_SIZE kernels (Michael Ellerman)
- vdpa/mlx5: Fix suboptimal range on iotlb iteration (Si-Wei Liu)
- hwmon: (tps23861) Fix reporting of negative temperatures (Murad Masimov)
- NFSD: Fix nfsd4_shutdown_copy() (Chuck Lever)
- svcrdma: fix miss destroy percpu_counter in svc_rdma_proc_init() (Ye Bin) [Orabug: 37433585] {CVE-2024-53215}
- sunrpc: simplify two-level sysctl registration for svcrdma_parm_table (Luis Chamberlain)
- NFSD: Cap the number of bytes copied by nfs4_reset_recoverydir() (Chuck Lever)
- NFSD: Prevent NULL dereference in nfsd4_process_cb_update() (Chuck Lever) [Orabug: 37433593] {CVE-2024-53217}
- remoteproc: qcom_q6v5_mss: Re-order writes to the IMEM region (Sibi Sankar)
- rpmsg: glink: use only lower 16-bits of param2 for CMD_OPEN name length (Jonathan Marek)
- rpmsg: glink: Fix GLINK command prefix (Bjorn Andersson)
- rpmsg: glink: Send READ_NOTIFY command in FIFO full case (Arun Kumar Neelakantam)
- rpmsg: glink: Add TX_DATA_CONT command while sending (Arun Kumar Neelakantam)
- perf trace: Avoid garbage when not printing a syscall's arguments (Benjamin Peterson)
- perf trace: Do not lose last events in a race (Benjamin Peterson)
- svcrdma: Address an integer overflow (Chuck Lever) [Orabug: 37427495] {CVE-2024-53151}
- m68k: coldfire/device.c: only build FEC when HW macros are defined (Antonio Quartulli)
- m68k: mcfgpio: Fix incorrect register offset for CONFIG_M5441x (Jean-Michel Hautbois)
- perf trace: avoid garbage when not printing a trace event's arguments (Benjamin Peterson)
- f2fs: check curseg->inited before write_sum_page in change_curseg (Yongpeng Yang)
- f2fs: remove the unused flush argument to change_curseg (Christoph Hellwig)
- f2fs: open code allocate_segment_by_default (Christoph Hellwig)
- f2fs: remove struct segment_allocation default_salloc_ops (Christoph Hellwig)
- f2fs: fix the wrong f2fs_bug_on condition in f2fs_do_replace_block (LongPing Wei)
- PCI: cpqphp: Fix PCIBIOS_* return value confusion (Ilpo Järvinen)
- PCI: cpqphp: Use PCI_POSSIBLE_ERROR() to check config reads (weiyufeng)
- perf probe: Correct demangled symbols in C++ program (Leo Yan)
- perf probe: Fix libdw memory leak (Ian Rogers)
- PCI: Fix reset_method_store() memory leak (Todd Kjos) [Orabug: 37434474] {CVE-2024-56745}
- perf cs-etm: Don't flush when packet_queue fills up (James Clark)
- mailbox: arm_mhuv2: clean up loop in get_irq_chan_comb() (Dan Carpenter)
- pinctrl: k210: Undef K210_PC_DEFAULT (zhang jiao)
- clk: clk-axi-clkgen: make sure to enable the AXI bus clock (Nuno Sa)
- dt-bindings: clock: axi-clkgen: include AXI clk (Nuno Sa)
- fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem() (Zhen Lei) [Orabug: 37434477] {CVE-2024-56746}
- fbdev/sh7760fb: Alloc DMA memory from hardware device (Thomas Zimmermann)
- powerpc/kexec: Fix return of uninitialized variable (Zhang Zekun)
- powerpc/sstep: make emulate_vsx_load and emulate_vsx_store static (Michal Suchanek)
- ocfs2: fix uninitialized value in ocfs2_file_read_iter() (Dmitry Antipov) [Orabug: 37427502] {CVE-2024-53155}
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE (Junxian Huang)
- scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb() (Zhen Lei) [Orabug: 37434483] {CVE-2024-56747}
- scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb() (Zhen Lei) [Orabug: 37434488] {CVE-2024-56748}
- scsi: fusion: Remove unused variable 'rc' (Zeng Heng)
- scsi: bfa: Fix use-after-free in bfad_im_module_exit() (Ye Bin) [Orabug: 37433629] {CVE-2024-53227}
- mfd: rt5033: Fix missing regmap_del_irq_chip() (Zhang Changzhong)
- clk: imx: clk-scu: fix clk enable state save and restore (Dong Aisheng)
- clk: imx: lpcg-scu: SW workaround for errata (e10858) (Peng Fan)
- powerpc/pseries: Fix dtl_access_lock to be a rw_semaphore (Michael Ellerman) [Orabug: 37434363] {CVE-2024-56701}
- powerpc/mm/fault: Fix kfence page fault reporting (Ritesh Harjani (IBM))
- mtd: rawnand: atmel: Fix possible memory leak (Miquel Raynal)
- cpufreq: loongson2: Unregister platform_driver on failure (Yuan Can)
- mfd: intel_soc_pmic_bxtwc: Use IRQ domain for PMIC devices (Andy Shevchenko) [Orabug: 37434428] {CVE-2024-56723}
- mfd: intel_soc_pmic_bxtwc: Use IRQ domain for TMU device (Andy Shevchenko) [Orabug: 37434433] {CVE-2024-56724}
- mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device (Andy Shevchenko) [Orabug: 37434329] {CVE-2024-56691}
- mfd: intel_soc_pmic_bxtwc: Use dev_err_probe() (Andy Shevchenko)
- mfd: da9052-spi: Change read-mask to write-mask (Marcus Folkesson)
- mfd: tps65010: Use IRQF_NO_AUTOEN flag in request_irq() to fix race (Jinjie Ruan)
- pinctrl: zynqmp: drop excess struct member description (Bartosz Golaszewski)
- trace/trace_event_perf: remove duplicate samples on the first tracepoint event (Levi Yun)
- bpf: fix recursive lock when verdict program return SK_PASS (Jiayuan Chen) [Orabug: 37434615] {CVE-2024-56694}
- wireguard: selftests: load nf_conntrack if not present (Hangbin Liu)
- netpoll: Use rcu_access_pointer() in netpoll_poll_lock (Breno Leitao)
- Bluetooth: fix use-after-free in device_for_each_child() (Dmitry Antipov) [Orabug: 37433653] {CVE-2024-53237}
- driver core: Introduce device_find_any_child() helper (Andy Shevchenko)
- ALSA: 6fire: Release resources at card release (Takashi Iwai) [Orabug: 37433659] {CVE-2024-53239}
- ALSA: caiaq: Use snd_card_free_when_closed() at disconnection (Takashi Iwai) [Orabug: 37433665] {CVE-2024-56531}
- ALSA: us122l: Use snd_card_free_when_closed() at disconnection (Takashi Iwai) [Orabug: 37433671] {CVE-2024-56532}
- ALSA: usx2y: Use snd_card_free_when_closed() at disconnection (Takashi Iwai) [Orabug: 37433679] {CVE-2024-56533}
- net: rfkill: gpio: Add check for clk_enable() (Mingwei Zheng)
- drm/amdkfd: Fix wrong usage of INIT_WORK() (Yuan Can)
- selftests: net: really check for bg process completion (Paolo Abeni)
- bpf, sockmap: Fix sk_msg_reset_curr (Zijian Zhang)
- bpf, sockmap: Several fixes to bpf_msg_pop_data (Zijian Zhang)
- bpf, sockmap: Several fixes to bpf_msg_push_data (Zijian Zhang)
- selftests/bpf: Add push/pop checking for msg_verify_data in test_sockmap (Zijian Zhang)
- selftests/bpf: Fix total_bytes in msg_loop_rx in test_sockmap (Zijian Zhang)
- selftests, bpf: Add one test for sockmap with strparser (Liu Jian)
- selftests/bpf: Fix SENDPAGE data logic in test_sockmap (Zijian Zhang)
- selftests/bpf: Add txmsg_pass to pull/push/pop in test_sockmap (Zijian Zhang)
- netlink: typographical error in nlmsg_type constants definition (Maurice Lambert)
- netfilter: nf_tables: must hold rcu read lock while iterating object type list (Florian Westphal)
- netfilter: nf_tables: skip transaction if update object is not implemented (Pablo Neira Ayuso)
- drm/msm/dpu: cast crtc_clk calculation to u64 in _dpu_core_perf_calc_clk() (Zichen Xie)
- wifi: wfx: Fix error handling in wfx_core_init() (Yuan Can)
- drm/etnaviv: hold GPU lock across perfmon sampling (Lucas Stach)
- drm/etnaviv: fix power register offset on GC300 (Doug Brown)
- drm/etnaviv: Request pages from DMA32 zone on addressing_limited (Xiaolei Wang)
- drm/msm/adreno: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)
- drm/panfrost: Remove unused id_mask from struct panfrost_model (Steven Price)
- octeontx2-pf: handle otx2_mbox_get_rsp errors in cn10k.c (Dipendra Khadka) [Orabug: 37434443] {CVE-2024-56726}
- octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c (Dipendra Khadka) [Orabug: 37434449] {CVE-2024-56728}
- octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_common.c (Dipendra Khadka) [Orabug: 37434293] {CVE-2024-56679}
- drm: fsl-dcu: enable PIXCLK on LS1021A (Matthias Schiffer)
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan() (Alper Nebi Yasak) [Orabug: 37433694] {CVE-2024-56539}
- selftests/bpf: Fix txmsg_redir of test_txmsg_pull in test_sockmap (Zijian Zhang)
- selftests/bpf: Fix msg_verify_data in test_sockmap (Zijian Zhang)
- drm/bridge: tc358767: Fix link properties discovery (Tomi Valkeinen)
- netdevsim: copy addresses for both in and out paths (Hangbin Liu)
- libbpf: fix sym_is_subprog() logic for weak global subprogs (Andrii Nakryiko)
- bpf: Fix the xdp_adjust_tail sample prog issue (Yuan Chen)
- libbpf: Fix output .symtab byte-order during linking (Tony Ambardar)
- drm/bridge: anx7625: Drop EDID cache on bridge power off (Pin-yen Lin)
- ASoC: dt-bindings: mt6359: Update generic node name and dmic-mode (Macpaul Lin)
- ASoC: fsl_micfil: fix regmap_write_bits usage (Shengjiu Wang)
- ASoC: fsl_micfil: use GENMASK to define register bit fields (Sascha Hauer)
- ASoC: fsl_micfil: do not define SHIFT/MASK for single bits (Sascha Hauer)
- ASoC: fsl_micfil: Drop unnecessary register read (Sascha Hauer)
- dt-bindings: vendor-prefixes: Add NeoFidelity, Inc (Igor Prusov)
- wifi: ath10k: fix invalid VHT parameters in supported_vht_mcs_rate_nss2 (Baochen Qiang)
- wifi: ath10k: fix invalid VHT parameters in supported_vht_mcs_rate_nss1 (Baochen Qiang)
- drm/v3d: Address race-condition in MMU flush (Maíra Canal)
- drm/imx/ipuv3: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)
- drm/imx/dcss: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)
- wifi: mwifiex: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)
- wifi: p54: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)
- drm/omap: Fix locking in omap_gem_new_dmabuf() (Tomi Valkeinen)
- drm/omap: Fix possible NULL dereference (Tomi Valkeinen)
- wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service() (Jeongjun Park) [Orabug: 37427508] {CVE-2024-53156}
- drm/mm: Mark drm_mm_interval_tree*() functions with __maybe_unused (Andy Shevchenko)
- platform/x86: panasonic-laptop: Return errno correctly in show callback (Yao Zi)
- platform/x86: panasonic-laptop: Replace snprintf in show functions with sysfs_emit (Qing Wang)
- media: atomisp: Add check for rgby_data memory allocation failure (Li Huafei) [Orabug: 37434379] {CVE-2024-56705}
- media: atomisp: remove #ifdef HAS_NO_HMEM (Mauro Carvalho Chehab)
- media: venus: provide ctx queue lock for ioctl synchronization (Sergey Senozhatsky)
- venus: venc: add handling for VIDIOC_ENCODER_CMD (Dikshita Agarwal)
- media: venus : Addition of support for VIDIOC_TRY_ENCODER_CMD (Dikshita Agarwal)
- media: venus : Addition of EOS Event support for Encoder (Viswanath Boma)
- media: venus: vdec: decoded picture buffer handling during reconfig sequence (Mansur Alisha Shaik)
- media: venus: venc: Use pmruntime autosuspend (Stanimir Varbanov)
- firmware: arm_scpi: Check the DVFS OPP count returned by the firmware (Luo Qiu) [Orabug: 37427514] {CVE-2024-53157}
- selftests/resctrl: Protect against array overrun during iMC config parsing (Reinette Chatre)
- arm64: dts: mediatek: mt8183-kukui-jacuzzi: Add supplies for fixed regulators (Chen-Yu Tsai)
- arm64: dts: mediatek: mt8183-kukui-jacuzzi: Fix DP bridge supply names (Chen-Yu Tsai)
- arm64: dts: mt8183: jacuzzi: Move panel under aux-bus (Hsin-Yi Wang)
- arm64: dts: mt8183: jacuzzi: remove unused ddc-i2c-bus (Hsin-Yi Wang)
- regmap: irq: Set lockdep class for hierarchical IRQ domains (Andy Shevchenko)
- spi: zynqmp-gqspi: Undo runtime PM changes at driver exit time (Jinjie Ruan)
- spi: tegra210-quad: Avoid shift-out-of-bounds (Breno Leitao)
- pmdomain: ti-sci: Add missing of_node_put() for args.np (Zhang Zekun)
- ARM: dts: cubieboard4: Fix DCDC5 regulator constraints (Andre Przywara)
- pwm: imx27: Workaround of the pwm output bug when decrease the duty cycle (Clark Wang)
- arm64: dts: mt8183: Damu: add i2c2's i2c-scl-internal-delay-ns (Daolong Zhu)
- arm64: dts: mt8183: burnet: add i2c2's i2c-scl-internal-delay-ns (Daolong Zhu)
- arm64: dts: mt8183: fennel: add i2c2's i2c-scl-internal-delay-ns (Daolong Zhu)
- cgroup/bpf: only cgroup v2 can be attached by bpf programs (Chen Ridong)
- Revert "cgroup: Fix memory leak caused by missing cgroup_bpf_offline" (Chen Ridong)
- arm64: dts: mediatek: mt8173-elm-hana: Add vdd-supply to second source trackpad (Chen-Yu Tsai)
- arm64: dts: mt8183: kukui: Fix the address of eeprom at i2c4 (Hsin-Te Yuan)
- arm64: dts: mt8183: krane: Fix the address of eeprom at i2c4 (Hsin-Te Yuan)
- tpm: fix signed/unsigned bug when checking event logs (Gregory Price)
- mmc: mmc_spi: drop buggy snprintf() (Bartosz Golaszewski)
- soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get() (Dan Carpenter) [Orabug: 37427523] {CVE-2024-53158}
- soc: ti: smartreflex: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)
- spi: spi-fsl-lpspi: Use IRQF_NO_AUTOEN flag in request_irq() (Jinjie Ruan)
- spi: spi-fsl-lpspi: downgrade log level for pio mode (Alexander Stein)
- clocksource/drivers:sp804: Make user selectable (Mark Brown)
- kcsan, seqlock: Fix incorrect assumption in read_seqbegin() (Marco Elver)
- kcsan, seqlock: Support seqcount_latch_t (Marco Elver)
- seqlock/latch: Provide raw_read_seqcount_latch_retry() (Peter Zijlstra)
- timekeeping: Consolidate fast timekeeper (Thomas Gleixner)
- time: Fix references to _msecs_to_jiffies() handling of values (Miguel Ojeda)
- crypto: cavium - Fix an error handling path in cpt_ucode_load_fw() (Christophe JAILLET)
- crypto: bcm - add error check in the ahash_hmac_init function (Chen Ridong) [Orabug: 37434297] {CVE-2024-56681}
- crypto: caam - add error check to caam_rsa_set_priv_key_form (Chen Ridong)
- EDAC/igen6: Avoid segmentation fault on module unload (Orange Kao) [Orabug: 37434389] {CVE-2024-56708}
- crypto: cavium - Fix the if condition to exit loop after timeout (Everest K.C)
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY (Yi Yang) [Orabug: 37434322] {CVE-2024-56690}
- EDAC/fsl_ddr: Fix bad bit shift operations (Priyanka Singh)
- thermal: core: Initialize thermal zones before registering them (Rafael J. Wysocki)
- crypto: qat - remove faulty arbiter config reset (Ahsan Atta)
- EDAC/bluefield: Fix potential integer overflow (David Thompson) [Orabug: 37427532] {CVE-2024-53161}
- firmware: google: Unregister driver_info on failure (Yuan Can)
- crypto: caam - Fix the pointer passed to caam_qi_shutdown() (Christophe JAILLET) [Orabug: 37434504] {CVE-2024-56754}
- hfsplus: don't query the device logical block size multiple times (Thadeu Lima de Souza Cascardo) [Orabug: 37433719] {CVE-2024-56548}
- s390/syscalls: Avoid creation of arch/arch/ directory (Masahiro Yamada)
- acpi/arm64: Adjust error handling procedure in gtdt_parse_timer_block() (Aleksandr Mishin)
- arm64: fix .data.rel.ro size assertion when CONFIG_LTO_CLANG (Masahiro Yamada)
- m68k: mvme147: Reinstate early console (Daniel Palmer)
- m68k: mvme16x: Add and use "mvme16x.h" (Geert Uytterhoeven)
- m68k: mvme147: Fix SCSI controller IRQ numbers (Daniel Palmer)
- nvme-pci: fix freeing of the HMB descriptor table (Christoph Hellwig) [Orabug: 37434509] {CVE-2024-56756}
- initramfs: avoid filename buffer overrun (David Disseldorp) [Orabug: 37388873] {CVE-2024-53142}
- mips: asm: fix warning when disabling MIPS_FP_SUPPORT (Jonas Gorski)
- brd: defer automatic disk creation until module initialization succeeds (Yang Erkun) [Orabug: 37434341] {CVE-2024-56693}
- brd: remove brd_devices_mutex mutex (Tetsuo Handa)
- s390/cio: Do not unregister the subchannel based on DNV (Vineeth Vijayan)
- kselftest/arm64: mte: fix printf type warnings about longs (Andre Przywara)
- x86/barrier: Do not serialize MSR accesses on AMD (Borislav Petkov (AMD))
- nvme: fix metadata handling in nvme-passthrough (Puranjay Mohan)
- cifs: Fix buffer overflow when parsing NFS reparse points (Pali Rohár) [Orabug: 37206283] {CVE-2024-49996}
- rcu-tasks: Idle tasks on offline CPUs are in quiescent states (Paul E. McKenney)
- ipmr: Fix access to mfc_cache_list without lock held (Breno Leitao)
- ARM: 9420/1: smp: Fix SMP for xip kernels (Harith G)
- ALSA: usb-audio: Fix Yamaha P-125 Quirk Entry (Eryk Zagorski)
- proc/softirqs: replace seq_printf with seq_put_decimal_ull_width (David Wang)
- ASoC: stm: Prevent potential division by zero in stm32_sai_get_clk_div() (Luo Yifan)
- ASoC: stm: Prevent potential division by zero in stm32_sai_mclk_round_rate() (Luo Yifan)
- can: j1939: fix error in J1939 documentation. (Alexander Hölzl)
- platform/x86: dell-wmi-base: Handle META key Lock/Unlock events (Kurt Borja)
- platform/x86: dell-smbios-base: Extends support to Alienware products (Kurt Borja)
- regulator: rk808: Add apply_bit for BUCK3 on RK809 (Mikhail Rudenko)
- soc: qcom: Add check devm_kasprintf() returned value (Charles Han)
- net: usb: qmi_wwan: add Quectel RG650V (Benoît Monin)
- x86/amd_nb: Fix compile-testing without CONFIG_AMD_NB (Arnd Bergmann)
- ALSA: hda/realtek: Add subwoofer quirk for Infinix ZERO BOOK 13 (Piyush Raj Chouhan)
- selftests/watchdog-test: Fix system accidentally reset after watchdog-test (Li Zhijian)
- usb: add support for new USB device ID 0x17EF:0x3098 for the r8152 driver (Benjamin Große)
- mac80211: fix user-power when emulating chanctx (Ben Greear)
- wifi: iwlwifi: mvm: Use the sync timepoint API in suspend (Daniel Gabay)
- ASoC: Intel: sst: Support LPE0F28 ACPI HID (Hans de Goede)
- ASoC: Intel: bytcr_rt5640: Add DMI quirk for Vexia Edu Atla 10 tablet (Hans de Goede)
- ASoC: Intel: bytcr_rt5640: Add support for non ACPI instantiated codec (Hans de Goede)
- NFS: nfs_async_write_reschedule_io must not recurse into the writeback code (Trond Myklebust)
- mm: resolve faulty mmap_region() error path behaviour (Lorenzo Stoakes) [Orabug: 37331872] {CVE-2024-53096}
- mm: refactor arch_calc_vm_flag_bits() and arm64 MTE handling (Lorenzo Stoakes)
- mm: unconditionally close VMAs on error (Lorenzo Stoakes)
- mm: avoid unsafe VMA hook invocation when error arises on mmap hook (Lorenzo Stoakes)
- mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Paolo Abeni) [Orabug: 37388789] {CVE-2024-53122}
- NFSD: Never decrement pending_async_copies on error (Chuck Lever) [Orabug: 37522552] {CVE-2024-53073}
- NFSD: Initialize struct nfsd4_copy earlier (Chuck Lever) [Orabug: 37522573] {CVE-2024-50241}
- NFSD: Limit the number of concurrent async COPY operations (Chuck Lever) [Orabug: 37206186] {CVE-2024-49974}
- NFSD: Async COPY result needs to return a write verifier (Chuck Lever)
- NFSD: initialize copy->cp_clp early in nfsd4_copy for use by trace point (Dai Ngo)
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set (Mauro Carvalho Chehab)
- mmc: sunxi-mmc: Fix A100 compatible description (Andre Przywara)
- mmc: sunxi-mmc: Add D1 MMC variant (Samuel Holland)
- drm/bridge: tc358768: Fix DSI command tx (Francesco Dolcini)
- nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint (Ryusuke Konishi) [Orabug: 37388818] {CVE-2024-53130}
- ocfs2: fix UBSAN warning in ocfs2_verify_volume() (Dmitry Antipov)
- nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint (Ryusuke Konishi) [Orabug: 37388824] {CVE-2024-53131}
- KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN (Sean Christopherson) [Orabug: 37388845] {CVE-2024-53135}
- KVM: nVMX: Treat vpid01 as current if L2 is active, but with VPID disabled (Sean Christopherson)
- vdpa/mlx5: Fix PA offset with unaligned starting iotlb map (Si-Wei Liu)
- ocfs2: uncache inode which has failed entering the group (Dmitry Antipov) [Orabug: 37388752] {CVE-2024-53112}
- mm: fix NULL pointer dereference in alloc_pages_bulk_noprof (Jinjiang Tu) [Orabug: 37388759] {CVE-2024-53113}
- x86/mm: Fix a kdump kernel failure on SME system when CONFIG_IMA_KEXEC=y (Baoquan He)
- ARM: 9419/1: mm: Fix kernel memory mapping for xip kernels (Harith G)
- samples: pktgen: correct dev to DEV (Wei Fang)
- net/mlx5e: CT: Fix null-ptr-deref in add rule err flow (Moshe Shemesh) [Orabug: 37388780] {CVE-2024-53120}
- net/mlx5e: kTLS, Fix incorrect page refcounting (Dragos Tatulea)
- net/mlx5: fs, lock FTE when checking if active (Mark Bloch)
- drm/rockchip: vop: Fix a dereferenced before check warning (Andy Yan) [Orabug: 37388814] {CVE-2024-53129}
- netlink: terminate outstanding dump on socket close (Jakub Kicinski) [Orabug: 37388860] {CVE-2024-53140}
- clk: qcom: gcc-qcs404: fix initial rate of GPLL3 (Gabor Juhos)
- leds: lp55xx: Remove redundant test for invalid channel number (Michal Vokáč)
- iommu/io-pgtable-arm: Fix stage-2 map/unmap for concatenated tables (Mostafa Saleh)
- vmstat: call fold_vm_zone_numa_events() before show per zone NUMA event (MengEn Sun)
- ftrace: Fix regression with module command in stack_trace_filter (guoweikang) [Orabug: 37433783] {CVE-2024-56569}
- ovl: Filter invalid inodes with missing lookup function (Vasiliy Kovalev) [Orabug: 37433788] {CVE-2024-56570}
- media: uvcvideo: Require entities to have a non-zero unique ID (Thadeu Lima de Souza Cascardo) [Orabug: 37433794] {CVE-2024-56571}
- media: uvcvideo: Stop stream during unregister (Ricardo Ribalda)
- media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal() (Gaosheng Cui) [Orabug: 37433797] {CVE-2024-56572}
- media: gspca: ov534-ov772x: Fix off-by-one error in set_frame_rate() (Jinjie Ruan)
- media: venus: Fix pm_runtime_set_suspended() with runtime pm enabled (Jinjie Ruan)
- media: ts2020: fix null-ptr-deref in ts2020_probe() (Li Zetao) [Orabug: 37433804] {CVE-2024-56574}
- media: imx-jpeg: Ensure power suppliers be suspended before detach them (Ming Qian) [Orabug: 37433810] {CVE-2024-56575}
- media: i2c: tc358743: Fix crash in the probe error path when using polling (Alexander Shiyan) [Orabug: 37433816] {CVE-2024-56576}
- media: imx-jpeg: Set video drvdata before register video device (Ming Qian) [Orabug: 37433823] {CVE-2024-56578}
- arm64: dts: allwinner: pinephone: Add mount matrix to accelerometer (Dragan Simic)
- LTS version: v5.15.173 (Vijayendra Suman)
- 9p: fix slab cache name creation for real (Linus Torvalds)
- udf: Avoid directory type conversion failure due to ENOMEM (Jan Kara)
- udf: Allocate name buffer in directory iterator on heap (Jan Kara)
- mm/memory: add non-anonymous page check in the copy_present_page() (Yuanzheng Song)
- io_uring: fix possible deadlock in io_register_iowq_max_workers() (Hagar Hemdan) [Orabug: 36897353] {CVE-2024-41080}
- md/raid10: improve code of mrdev in raid10_sync_request (Li Nan)
- net: usb: qmi_wwan: add Fibocom FG132 0x0112 composition (Reinhard Speyerer)
- HID: lenovo: Add support for Thinkpad X1 Tablet Gen 3 keyboard (Hans de Goede)
- HID: multitouch: Add quirk for Logitech Bolt receiver w/ Casa touchpad (Kenneth Albanowski)
- fs: Fix uninitialized value issue in from_kuid and from_kgid (Alessandro Zanni) [Orabug: 37331927] {CVE-2024-53101}
- vDPA/ifcvf: Fix pci_read_config_byte() return code handling (Yuan Can)
- powerpc/powernv: Free name on error in opal_event_init() (Michael Ellerman)
- drm/vmwgfx: Limit display layout ioctl array size to VMWGFX_NUM_DISPLAY_UNITS (Ian Forbes)
- sound: Make CONFIG_SND depend on INDIRECT_IOMEM instead of UML (Julian Vetter)
- crypto: marvell/cesa - Disable hash algorithms (Herbert Xu)
- bpf: use kvzmalloc to allocate BPF verifier environment (Rik van Riel)
- HID: multitouch: Add quirk for HONOR MagicBook Art 14 touchpad (WangYuli)
- HID: multitouch: Add support for B2402FVA track point (Stefan Blum)
- block: Fix elevator_get_default() checking for NULL q->tag_set (SurajSonawane2415)
- irqchip/ocelot: Fix trigger register address (Sergey Matsievskiy)
- 9p: Avoid creating multiple slab caches with the same name (Pedro Falcato)
- LTS version: v5.15.172 (Vijayendra Suman)
- ALSA: usb-audio: Add endianness annotations (Jan Schär)
- vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Hyunwoo Kim) [Orabug: 37298679] {CVE-2024-50264}
- hv_sock: Initializing vsk->trans to NULL to prevent a dangling pointer (Hyunwoo Kim) [Orabug: 37344479] {CVE-2024-53103}
- ALSA: usb-audio: Add quirks for Dell WD19 dock (Jan Schär)
- ALSA: usb-audio: Support jack detection on Dell dock (Jan Schär)
- ucounts: fix counter leak in inc_rlimit_get_ucounts() (Andrei Vagin)
- ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove() (Andrew Kanner) [Orabug: 37298684] {CVE-2024-50265}
- irqchip/gic-v3: Force propagation of the active state with a read-back (Marc Zyngier)
- USB: serial: option: add Quectel RG650V (Benoît Monin)
- USB: serial: option: add Fibocom FG132 0x0112 composition (Reinhard Speyerer)
- USB: serial: qcserial: add support for Sierra Wireless EM86xx (Jack Wu)
- USB: serial: io_edgeport: fix use after free in debug printk (Dan Carpenter) [Orabug: 37298693] {CVE-2024-50267}
- usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd() (Dan Carpenter) [Orabug: 37298700] {CVE-2024-50268}
- usb: musb: sunxi: Fix accessing an released usb phy (Zijun Hu) [Orabug: 37298702] {CVE-2024-50269}
- fs/proc: fix compile warning about variable 'vmcore_mmap_ops' (Qi Xi)
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Benoit Sevens) [Orabug: 37344484] {CVE-2024-53104}
- net: do not delay dst_entries_add() in dst_release() (Eric Dumazet) [Orabug: 37206439] {CVE-2024-50036}
- net: bridge: xmit: make sure we have at least eth header len bytes (Nikolay Aleksandrov) [Orabug: 36753371] {CVE-2024-38538}
- btrfs: reinitialize delayed ref list after deleting it from the list (Filipe Manana) [Orabug: 37298714] {CVE-2024-50273}
- nfs: Fix KMSAN warning in decode_getfattr_attrs() (Roberto Sassu) [Orabug: 37304778] {CVE-2024-53066}
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write (Jens Axboe) [Orabug: 37304720] {CVE-2024-53052}
- io_uring: use kiocb_{start,end}_write() helpers (Amir Goldstein)
- fs: create kiocb_{start,end}_write() helpers (Amir Goldstein)
- io_uring: rename kiocb_end_write() local helper (Amir Goldstein)
- posix-cpu-timers: Clear TICK_DEP_BIT_POSIX_TIMER on clone (Benjamin Segall)
- ALSA: usb-audio: Add quirk for HP 320 FHD Webcam (Takashi Iwai)
- dm-unstriped: cast an operand to sector_t to prevent potential uint32_t overflow (Zichen Xie)
- dm cache: fix potential out-of-bounds access on the first resume (Ming-Hung Tsai) [Orabug: 37298731] {CVE-2024-50278}
- dm cache: optimize dirty bit checking with find_next_bit when resizing (Ming-Hung Tsai)
- dm cache: fix out-of-bounds access to the dirty bitset when resizing (Ming-Hung Tsai) [Orabug: 37298736] {CVE-2024-50279}
- dm cache: correct the number of origin blocks to match the target length (Ming-Hung Tsai)
- thermal/drivers/qcom/lmh: Remove false lockdep backtrace (Dmitry Baryshkov)
- drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read() (Alex Deucher) [Orabug: 37298750] {CVE-2024-50282}
- drm/amdgpu: Adjust debugfs eviction and IB access permissions (Alex Deucher)
- pwm: imx-tpm: Use correct MODULO value for EPWM mode (Erik Schumacher)
- media: v4l2-ctrls-api: fix error handling for v4l2_g_ctrl() (Mauro Carvalho Chehab)
- media: v4l2-tpg: prevent the risk of a division by zero (Mauro Carvalho Chehab) [Orabug: 37298781] {CVE-2024-50287}
- media: pulse8-cec: fix data timestamp at pulse8_setup() (Mauro Carvalho Chehab)
- media: cx24116: prevent overflows on SNR calculus (Mauro Carvalho Chehab) [Orabug: 37298796] {CVE-2024-50290}
- media: s5p-jpeg: prevent buffer overflows (Mauro Carvalho Chehab) [Orabug: 37304761] {CVE-2024-53061}
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove (Amelie Delaunay) [Orabug: 37298803] {CVE-2024-50292}
- ALSA: firewire-lib: fix return value on fail in amdtp_tscm_init() (Murad Masimov)
- scsi: sd_zbc: Use kvzalloc() to allocate REPORT ZONES buffer (Johannes Thumshirn)
- media: adv7604: prevent underflow condition when reporting colorspace (Mauro Carvalho Chehab)
- media: dvb_frontend: don't play tricks with underflow values (Mauro Carvalho Chehab)
- media: dvbdev: prevent the risk of out of memory access (Mauro Carvalho Chehab) [Orabug: 37304768] {CVE-2024-53063}
- media: stb0899_algo: initialize cfr before using it (Mauro Carvalho Chehab)
- net: arc: fix the device for dma_map_single/dma_unmap_single (Johan Jonker) [Orabug: 37298808] {CVE-2024-50295}
- net: stmmac: Fix unbalanced IRQ wake disable warning on single irq case (Nícolas F. R. A. Prado)
- net: phy: ti: add PHY_RST_AFTER_CLK_EN flag (Diogo Silva)
- net: hns3: fix kernel crash when uninstalling driver (Peiyang Wang) [Orabug: 37298810] {CVE-2024-50296}
- i40e: fix race condition by adding filter's intermediate sync state (Aleksandr Loktionov) [Orabug: 37304818] {CVE-2024-53088}
- can: c_can: fix {rx,tx}_errors statistics (Dario Binacchi)
- sctp: properly validate chunk size in sctp_sf_ootb() (Xin Long) [Orabug: 37298819] {CVE-2024-50299}
- net: enetc: set MAC address to the VF net_device (Wei Fang)
- security/keys: fix slab-out-of-bounds in key_task_permission (Chen Ridong) [Orabug: 37298826] {CVE-2024-50301}
- nfs: avoid i_lock contention in nfs_clear_invalid_mapping (Mike Snitzer)
- NFSv3: handle out-of-order write replies. (NeilBrown)
- NFS: Add a tracepoint to show the results of nfs_set_cache_invalid() (Benjamin Coddington)
- NFSv3: only use NFS timeout for MOUNT when protocols are compatible (NeilBrown)
- HID: core: zero-initialize the report buffer (Jiri Kosina) [Orabug: 37298832] {CVE-2024-50302}
- ARM: dts: rockchip: Fix the realtek audio codec on rk3036-kylin (Heiko Stuebner)
- ARM: dts: rockchip: Fix the spi controller on rk3036 (Heiko Stuebner)
- ARM: dts: rockchip: drop grf reference from rk3036 hdmi (Heiko Stuebner)
- ARM: dts: rockchip: fix rk3036 acodec node (Heiko Stuebner)
- arm64: dts: imx8mp: correct sdhc ipg clk (Peng Fan)
- arm64: dts: rockchip: Fix LED triggers on rk3308-roc-cc (Heiko Stuebner)
- arm64: dts: rockchip: Remove #cooling-cells from fan on Theobroma lion (Heiko Stuebner)
- arm64: dts: rockchip: Fix bluetooth properties on Rock960 boards (Heiko Stuebner)
- arm64: dts: rockchip: Remove hdmi's 2nd interrupt on rk3328 (Diederik de Haas)
- arm64: dts: rockchip: Fix rt5651 compatible value on rk3399-sapphire-excavator (Geert Uytterhoeven)
-
Wed Jan 15 2025 Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-305.171.2.el8uek]
- rds: ib: Avoid UAF on RDS Socket's rs_trans_lock (Håkon Bugge) [Orabug: 37475726]
- rds: ib: Fix blocked processes related to race in rds_rdma_free_dev_rs_worker() (Håkon Bugge) [Orabug: 37475726]
- rds: ib: Fix deterministic UAF in rds_rdma_free_dev_rs_worker() (Håkon Bugge) [Orabug: 37475726]
- uek-misc: Define a prefix for uek module messages (Alejandro Jimenez) [Orabug: 37459411]
- uek-misc: Clear the AVIC capability on platforms with known errata (Alejandro Jimenez) [Orabug: 37459411]
- uek-misc: Add identification for OCI platform (Alejandro Jimenez) [Orabug: 37459411]
- Revert "MIPS: do not call flush_tlb_all when setting pmd entry" (Vijay Kumar) [Orabug: 37454162]
- cpufreq: intel_pstate: Support highest performance change interrupt (Srinivas Pandruvada) [Orabug: 37426908]
- x86/cpufeatures: Add HWP highest perf change feature flag (Srinivas Pandruvada) [Orabug: 37426908]
- cpufreq: intel_pstate: Get rid of unnecessary READ_ONCE() annotations (Rafael J. Wysocki) [Orabug: 37426908]
- cpufreq: intel_pstate: Wait for canceled delayed work to complete (Rafael J. Wysocki) [Orabug: 37426908]
- cpufreq: intel_pstate: Simplify spinlock locking (Rafael J. Wysocki) [Orabug: 37426908]
- cpufreq: intel_pstate: Update cpuinfo.max_freq on HWP_CAP changes (Rafael J. Wysocki) [Orabug: 37426908]
- uek-rpm: Enable CONFIG_FIPS_SIGNATURE_SELFTEST for all archs (Saeed Mirzamohammadi) [Orabug: 37400483]
- uek-rpm: set DEFAULTKERNEL to other installed uek if possible (Sherry Yang) [Orabug: 37399094]
-
Wed Jan 08 2025 Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-305.171.1.el8uek]
- octeontx2-af: Fix CPT AF register offset calculation (Bharat Bhushan) [Orabug: 37445471]
- perf/arm-cmn: Remove for loop intial declarations (Dave Kleikamp) [Orabug: 37409090]
- perf/arm-cmn: Ensure port and device id bits are set properly (Namhyung Kim) [Orabug: 37409090]
- perf/arm-cmn: Improve format attr printing (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Clean up unnecessary NUMA_NO_NODE check (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Support CMN S3 (Robin Murphy) [Orabug: 37409090]
- dt-bindings: perf: arm-cmn: Add CMN S3 (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Refactor DTC PMU register access (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Make cycle counts less surprising (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Improve build-time assertion (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Ensure dtm_idx is big enough (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Fix CCLA register offset (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Refactor node ID handling. Again. (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Enable support for tertiary match group (Ilkka Koskinen) [Orabug: 37409090]
- perf/arm-cmn: Decouple wp_config registers from filter group number (Ilkka Koskinen) [Orabug: 37409090]
- perf/arm-cmn: Workaround AmpereOneX errata AC04_MESH_1 (incorrect child count) (Ilkka Koskinen) [Orabug: 37409090]
- perf/arm-cmn: Improve debugfs pretty-printing for large configs (Robin Murphy) [Orabug: 37409090]
- perf: arm-cmn: Convert to platform remove callback returning void (Uwe Kleine-König) [Orabug: 37409090]
- perf/arm-cmn: Fail DTC counter allocation correctly (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Fix HN-F class_occup_id events (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Enable per-DTC counter allocation (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Rework DTC counters (again) (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Fix DTC domain detection (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Add CMN-700 r3 support (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Refactor HN-F event selector macros (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Remove spurious event aliases (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Add sysfs identifier (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Revamp model detection (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Fix port detection for CMN-700 (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Validate cycles events fully (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Move overlapping wp_combine field (Ilkka Koskinen) [Orabug: 37409090]
- Partially revert "perf/arm-cmn: Optimise DTC counter accesses" (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Reset DTM_PMU_CONFIG at probe (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Decode CAL devices properly in debugfs (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Fix filter_sel lookup (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Add CMN-700 support (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Refactor occupancy filter selector (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Add CMN-650 support (Robin Murphy) [Orabug: 37409090]
- dt-bindings: perf: arm-cmn: Add CMN-650 and CMN-700 (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Update watchpoint format (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Hide XP PUB events for CMN-600 (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Make arm_cmn_debugfs static (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Add debugfs topology info (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Add CI-700 Support (Robin Murphy) [Orabug: 37409090]
- dt-bindings: perf: arm-cmn: Add CI-700 (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Support new IP features (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Demarcate CMN-600 specifics (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Move group validation data off-stack (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Optimise DTC counter accesses (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Optimise DTM counter reads (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Refactor DTM handling (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Streamline node iteration (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Refactor node ID handling (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Drop compile-test restriction (Robin Murphy) [Orabug: 37409090]
- perf/arm-cmn: Account for NUMA affinity (Robin Murphy) [Orabug: 37409090]
- Acquire mem_cgroup_per_node.lruvec locks for online nodes only. (Imran Khan) [Orabug: 37405595]
- Fix issues seen with mail thread patches. (Imran Khan) [Orabug: 37405595]
- mm: lru: use lruvec lock to serialize memcg changes (Muchun Song) [Orabug: 37405595]
- mm: lru: add VM_BUG_ON_PAGE to lru maintenance function (Muchun Song) [Orabug: 37405595]
- mm: memcontrol: rename {un}lock_page_memcg() to {un}lock_page_objcg() (Muchun Song) [Orabug: 37405595]
- mm: memcontrol: use obj_cgroup APIs to charge the LRU pages (Muchun Song) [Orabug: 37405595]
- mm: memcontrol: introduce memcg_reparent_ops (Muchun Song) [Orabug: 37405595]
- mm: memcontrol: make all the callers of page_memcg() safe (Muchun Song) [Orabug: 37405595]
- mm: thp: make split queue lock safe when LRU pages reparented (Muchun Song) [Orabug: 37405595]
- mm: thp: introduce split_queue_lock/unlock{_irqsave}() (Muchun Song) [Orabug: 37405595]
- mm: vmscan: rework move_pages_to_lru() (Muchun Song) [Orabug: 37405595]
- mm: memcontrol: make lruvec lock safe when the LRU pages reparented (Muchun Song) [Orabug: 37405595]
- mm: memcontrol: introduce compact_lock_page_irqsave (Muchun Song) [Orabug: 37405595]
- mm: memcontrol: prepare objcg API for non-kmem usage (Muchun Song) [Orabug: 37405595]
- mm: move mem_cgroup_kmem_disabled() to memcontrol.h (Muchun Song) [Orabug: 37405595]
- Uek-rpm/ol9: Enable CONFIG_FIPS_SIGNATURE_SELFTEST for mips64 (Vijay Kumar) [Orabug: 37390881]
- sfc: Fix an error handling path in efx_pci_probe() (Christophe JAILLET) [Orabug: 37384497]
- sfc: Separate netdev probe/remove from PCI probe/remove (Jonathan Cooper) [Orabug: 37384497]
- sfc: replace function name in string with __func__ (Jonathan Cooper) [Orabug: 37384497]
- sfc: Unsplit literal string. (Jonathan Cooper) [Orabug: 37384497]
- sfc: Move EF100 efx_nic_type structs to the end of the file (Jonathan Cooper) [Orabug: 37384497]
- sfc: Separate efx_nic memory from net_device memory (Jonathan Cooper) [Orabug: 37384497]
- sfc: Encapsulate access to netdev_priv() (Jonathan Cooper) [Orabug: 37384497]
- sfc: Add a PROBED state for EF100 VDPA use. (Jonathan Cooper) [Orabug: 37384497]
- ACPICA: Allow PCC Data Type in MCTP resource. (Adam Young) [Orabug: 37311726]
- ACPICA: Avoid undefined behavior: member access within misaligned address (Tamir Duberstein) [Orabug: 37311726]
- arm64: errata: Enable the AC03_CPU_38 workaround for ampere1a (D Scott Phillips) [Orabug: 37311726]
- arm64: Expose the end of the linear map in PHYSMEM_END (D Scott Phillips) [Orabug: 37311726]
- seqcount: replace smp_rmb() in read_seqcount() with load acquire (Christoph Lameter (Ampere)) [Orabug: 37311726]
- uek-rpm: Enable new config options for Ampere (Dave Kleikamp) [Orabug: 37311726]
- vmalloc: modify the alloc_vmap_area() error message for better diagnostics (Shubhang Kaushik OS) [Orabug: 37311726]
- NUMA: early use of cpu_to_node() returns 0 instead of the correct node id (Huang Shijie) [Orabug: 37311726]
- mm: mmap: no need to call khugepaged_enter_vma() for stack (Yang Shi) [Orabug: 37311726]
- crash_core: export vmemmap when CONFIG_SPARSEMEM_VMEMMAP is enabled (Huang Shijie) [Orabug: 37311726]
- PCI: acpiphp: Allow built-in drivers for Attention Indicators (D Scott Phillips) [Orabug: 37311726]
- PCI: acpiphp: Add missing MODULE_DESCRIPTION() macro (Jeff Johnson) [Orabug: 37311726]
- PCI: hotplug: Add Ampere Altra Attention Indicator extension driver (D Scott Phillips) [Orabug: 37311726]
- mm: mempolicy: keep VMA walk if both MPOL_MF_STRICT and MPOL_MF_MOVE are specified (Yang Shi) [Orabug: 37311726]
- arm64: compat: Work around uninitialized variable warning (Ard Biesheuvel) [Orabug: 37311726]
- arm64: compat: Implement misalignment fixups for multiword loads (Ard Biesheuvel) [Orabug: 37311726]
- RDMA/mlx5: Expose vhca id for all ports in multiport mode (Mark Bloch) [Orabug: 37234285]
- rds/ib: avoid scq/rcq polling during rds connection shutdown (Arumugam Kolappan) [Orabug: 37055939]
- RDMA/mlx5: Send UAR page index as ioctl attribute (Akiva Goldberger) [Orabug: 37029766]
- RDMA: Pass entire uverbs attr bundle to create cq function (Akiva Goldberger) [Orabug: 37029766]
- net/mlx5e: Fix CT entry update leaks of modify header context (Chris Mi) [Orabug: 36948578] {CVE-2024-43864}
- net/mlx5e: Require mlx5 tc classifier action support for IPsec prio capability (Rahul Rameshbabu) [Orabug: 36948578]
- net/mlx5: Fix missing lock on sync reset reload (Moshe Shemesh) [Orabug: 36948578] {CVE-2024-42268}
- net/mlx5: Lag, don't use the hardcoded value of the first port (Mark Bloch) [Orabug: 36948578]
- mlxsw: core_linecards: Fix double memory deallocation in case of invalid INI file (Aleksandr Mishin) [Orabug: 36948578] {CVE-2024-42138}
- net/mlx5e: Add mqprio_rl cleanup and free in mlx5e_priv_cleanup() (Jianbo Liu) [Orabug: 36948578]
- net/mlx5: E-switch, Create ingress ACL when needed (Chris Mi) [Orabug: 36948578]
- mlxsw: spectrum_buffers: Fix memory corruptions on Spectrum-4 systems (Ido Schimmel) [Orabug: 36948578] {CVE-2024-42073}
- RDMA/mlx5: Fix unwind flow as part of mlx5_ib_stage_init_init (Yishai Hadas) [Orabug: 36948578]
- RDMA/mlx5: Ensure created mkeys always have a populated rb_key (Jason Gunthorpe) [Orabug: 36948578]
- RDMA/mlx5: Follow rb_key.ats when creating new mkeys (Jason Gunthorpe) [Orabug: 36948578]
- RDMA/mlx5: Remove extra unlock on error path (Jason Gunthorpe) [Orabug: 36948578]
- net: wwan: iosm: Fix tainted pointer delete is case of region creation fail (Aleksandr Mishin) [Orabug: 36948578] {CVE-2024-40939}
- net/mlx5: Always stop health timer during driver removal (Shay Drory) [Orabug: 36948578] {CVE-2024-40906}
- net/mlx5: Fix MTMP register capability offset in MCAM register (Gal Pressman) [Orabug: 36948578]
- net/mlx5e: Advertise mlx5 ethernet driver updates sk_buff md_dst for MACsec (Rahul Rameshbabu) [Orabug: 36948578]
- mlxsw: core_env: Fix driver initialization with old firmware (Ido Schimmel) [Orabug: 36948578]
- net/mlx5: Lag, restore buckets number to default after hash LAG deactivation (Shay Drory) [Orabug: 36948578]
- net/mlx5e: Do not produce metadata freelist entries in Tx port ts WQE xmit (Rahul Rameshbabu) [Orabug: 36948578]
- RDMA/mlx5: Change check for cacheable mkeys (Or Har-Toov) [Orabug: 36948578]
- RDMA/mlx5: Uncacheable mkey has neither rb_key or cache_ent (Or Har-Toov) [Orabug: 36948578]
- mlx5: avoid truncating error message (Arnd Bergmann) [Orabug: 36948578]
- net/mlx5: Check capability for fw_reset (Moshe Shemesh) [Orabug: 36948578]
- net/mlx5: SF, Stop waiting for FW as teardown was called (Moshe Shemesh) [Orabug: 36948578]
- netlink: Correct offload_xstats size (Christoph Paasch) [Orabug: 36948578]
- net: fix net_dev_start_xmit trace event vs skb_transport_offset() (Eric Dumazet) [Orabug: 36948578]
- lib/bitmap: drop optimization of bitmap_{from,to}_arr64 (Yury Norov) [Orabug: 36948578]
- net: macsec: fix double free of percpu stats (Fedor Pchelkin) [Orabug: 36948578]
- tcp: gso: really support BIG TCP (Eric Dumazet) [Orabug: 36948578]
- RDMA/mlx5: Use rdma_umem_for_each_dma_block() (Jason Gunthorpe) [Orabug: 36948578]
- nfp: flower: fix ingress police using matchall filter (Tianyu Yuan) [Orabug: 36948578]
- lib/bitmap: fix off-by-one in bitmap_to_arr64() (Alexander Lobakin) [Orabug: 36948578]
- RDMA/mlx5: Fix flow steering egress flow (Leon Romanovsky) [Orabug: 36948578]
- rtnetlink: Fix handling of disabled L3 stats in RTM_GETSTATS replies (Petr Machata) [Orabug: 36948578]
- tun: annotate access to queue->trans_start (Antoine Tenart) [Orabug: 36948578]
- xsk: Do not write NULL in SW ring at allocation failure (Magnus Karlsson) [Orabug: 36948578]
- net/sched: fix incorrect vlan_push_eth dest field (Louis Peens) [Orabug: 36948578]
- RDMA/nldev: Prevent underflow in nldev_stat_set_counter_dynamic_doit() (Dan Carpenter) [Orabug: 36948578]
- net_tstamp: define new flag HWTSTAMP_FLAG_BONDED_PHC_INDEX (Hangbin Liu) [Orabug: 36948578]
- net: add missing include in include/net/gro.h (Eric Dumazet) [Orabug: 36948578]
- IB/hfi1: Properly allocate rdma counter desc memory (Dennis Dalessandro) [Orabug: 36948578]
- xsk: Initialise xskb free_list_node (Ciara Loftus) [Orabug: 36948578]
- xsk: Fix crash on double free in buffer pool (Magnus Karlsson) [Orabug: 36948578]
- KVM: x86: WARN only once if KVM leaves a dangling userspace I/O request (Sean Christopherson) [Orabug: 36815282]
- KVM: x86: Suppress pending MMIO write exits if emulator detects exception (Sean Christopherson) [Orabug: 36815282]
-
Tue Dec 24 2024 Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-304.171.4.el8uek]
- Revert "unicode: Don't special case ignorable code points" (Linus Torvalds)
- Revert "mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K" (Aurelien Jarno)
- tcp: Fix use-after-free of nreq in reqsk_timer_handler(). (Kuniyuki Iwashima) [Orabug: 37434606] {CVE-2024-53206}
- lib/buildid: Fix build ID parsing logic (Jiri Olsa)
- powerpc/vdso: Flag VDSO64 entry points as functions (Christophe Leroy)
- mm: krealloc: Fix MTE false alarm in __do_krealloc (Qun-Wei Lin) [Orabug: 37331938] {CVE-2024-53097}
- Revert "ALSA: hda/conexant: Mute speakers at suspend / shutdown" (Jarosław Janik)
- usb: dwc3: fix fault at system suspend if device was already runtime suspended (Roger Quadros) [Orabug: 37304834] {CVE-2024-53070}
- ACPI: PRM: Clean up guid type in struct prm_handler_info (Dan Carpenter)
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg() (Junxian Huang) [Orabug: 37434622] {CVE-2024-53226}
- mm: revert "mm: shmem: fix data-race in shmem_getattr()" (Andrew Morton)
- ACPI: CPPC: Fix _CPC register setting issue (Lifeng Zheng)
- scsi: qla2xxx: Fix abort in bsg timeout (Quinn Tran)
- drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported (Antonio Quartulli) [Orabug: 37304753] {CVE-2024-53060}
- RDMA/bnxt_re: Check cqe flags to know imm_data vs inv_irkey (Kashyap Desai)
- vhost_scsi: log write descriptors (Dongli Zhang) [Orabug: 37393531]
- vhost-scsi: protect vq->log_base with vq->mutex (Dongli Zhang) [Orabug: 37393531]
-
Wed Dec 18 2024 Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-304.171.3.el8uek]
- build: populate modules_thick.builtin for dirs containing only modules (Nick Alcock) [Orabug: 37381702]
- mtd: fix use-after-free in mtd release (Alexander Usyskin) [Orabug: 37371929]
- mtd: Clean refcounting with MTD_PARTITIONED_MASTER (Miquel Raynal) [Orabug: 37371929]
- mtd: call external _get and _put in right order (Alexander Usyskin) [Orabug: 37371929]
- nvmem: core: Check input parameter for NULL in nvmem_unregister() (Andy Shevchenko) [Orabug: 37371929]
- Revert "ocfs2: fix the la space leak when unmounting an ocfs2 volume" (Sherry Yang) [Orabug: 37364544]
- x86/pkeys: Ensure updated PKRU value is XRSTOR'd (Aruna Ramakrishna) [Orabug: 37361290]
- x86/pkeys: Change caller of update_pkru_in_sigframe() (Aruna Ramakrishna) [Orabug: 37361290]
- cgroup: cgroup-v1: do not exclude cgrp_dfl_root (Vishal Verma) [Orabug: 37347419]
- mm/memcontrol: Fix memcg stat calculation (Aruna Ramakrishna) [Orabug: 37306542]