linux 5.15.0-15.15 source package in Ubuntu

Changelog

linux (5.15.0-15.15) jammy; urgency=medium

  * jammy/linux: 5.15.0-15.15 -proposed tracker (LP: #1956314)

  * Packaging resync (LP: #1786013)
    - update dkms package versions
    - debian/dkms-versions -- update from kernel-versions (main/master)

  * rtw88_8821ce causes freeze (LP: #1927808)
    - rtw88: Disable PCIe ASPM while doing NAPI poll on 8821CE

  * alsa/sdw: fix the  audio sdw codec parsing logic in the acpi table
    (LP: #1955686)
    - ALSA: hda: intel-sdw-acpi: go through HDAS ACPI at max depth of 2
    - ALSA: hda: intel-sdw-acpi: harden detection of controller

  * Got black screen when resume from s2idle with AMD dGPU (LP: #1955790)
    - SAUCE: drm/amdgpu: put SMU into proper state on runpm suspending for BOCO
      capable platform
    - SAUCE: drm/amdgpu: always reset the asic in suspend (v2)

  *  Fix USB3 detection on HP dock (LP: #1955443)
    - usb: hub: Add delay for SuperSpeed hub resume to let links transit to U0

  * support signed v4l2loopback dkms build (LP: #1938531)
    - enable v4l2loopback builds on amd64 kernels
    - support v4l2loopback dkms build

  * Jammy update: v5.15.12 upstream stable release (LP: #1956305)
    - arm64: vdso32: require CROSS_COMPILE_COMPAT for gcc+bfd
    - net: usb: lan78xx: add Allied Telesis AT29M2-AF
    - ext4: prevent partial update of the extent blocks
    - ext4: check for out-of-order index extents in ext4_valid_extent_entries()
    - ext4: check for inconsistent extents between index and leaf block
    - selftests: KVM: Fix non-x86 compiling
    - HID: holtek: fix mouse probing
    - HID: potential dereference of null pointer
    - NFSD: Fix READDIR buffer overflow
    - PM: sleep: Fix error handling in dpm_prepare()
    - arm64: dts: allwinner: orangepi-zero-plus: fix PHY mode
    - bus: sunxi-rsb: Fix shutdown
    - spi: change clk_disable_unprepare to clk_unprepare
    - ucounts: Fix rlimit max values check
    - drm/mediatek: hdmi: Perform NULL pointer check for mtk_hdmi_conf
    - ASoC: meson: aiu: fifo: Add missing dma_coerce_mask_and_coherent()
    - RDMA/hns: Fix RNR retransmission issue for HIP08
    - IB/qib: Fix memory leak in qib_user_sdma_queue_pkts()
    - RDMA/hns: Replace kfree() with kvfree()
    - netfilter: nf_tables: fix use-after-free in nft_set_catchall_destroy()
    - netfilter: fix regression in looped (broad|multi)cast's MAC handling
    - ARM: dts: imx6qdl-wandboard: Fix Ethernet support
    - ice: Use xdp_buf instead of rx_buf for xsk zero-copy
    - ice: xsk: return xsk buffers back to pool when cleaning the ring
    - net: marvell: prestera: fix incorrect return of port_find
    - net: marvell: prestera: fix incorrect structure access
    - qlcnic: potential dereference null pointer of rx_queue->page_ring
    - tcp: move inet->rx_dst_ifindex to sk->sk_rx_dst_ifindex
    - ipv6: move inet6_sk(sk)->rx_dst_cookie to sk->sk_rx_dst_cookie
    - inet: fully convert sk->sk_rx_dst to RCU rules
    - net: accept UFOv6 packages in virtio_net_hdr_to_skb
    - net: skip virtio_net_hdr_set_proto if protocol already set
    - igb: fix deadlock caused by taking RTNL in RPM resume path
    - ipmi: Fix UAF when uninstall ipmi_si and ipmi_msghandler module
    - gpio: virtio: remove timeout
    - bonding: fix ad_actor_system option setting to default
    - fjes: Check for error irq
    - drivers: net: smc911x: Check for error irq
    - net: ks8851: Check for error irq
    - sfc: Check null pointer of rx_queue->page_ring
    - sfc: falcon: Check null pointer of rx_queue->page_ring
    - asix: fix uninit-value in asix_mdio_read()
    - asix: fix wrong return value in asix_check_host_enable()
    - io_uring: zero iocb->ki_pos for stream file types
    - veth: ensure skb entering GRO are not cloned.
    - net: stmmac: ptp: fix potentially overflowing expression
    - net: bridge: Use array_size() helper in copy_to_user()
    - net: bridge: fix ioctl old_deviceless bridge argument
    - r8152: fix the force speed doesn't work for RTL8156
    - net: stmmac: dwmac-visconti: Fix value of ETHER_CLK_SEL_FREQ_SEL_2P5M
    - pinctrl: bcm2835: Change init order for gpio hogs
    - hwmon: (lm90) Fix usage of CONFIG2 register in detect function
    - hwmon: (lm90) Prevent integer overflow/underflow in hysteresis calculations
    - hwmon: (lm90) Introduce flag indicating extended temperature support
    - hwmon: (lm90) Add basic support for TI TMP461
    - hwmon: (lm90) Drop critical attribute support for MAX6654
    - ARM: 9160/1: NOMMU: Reload __secondary_data after PROCINFO_INITFUNC
    - uapi: Fix undefined __always_inline on non-glibc systems
    - compiler.h: Fix annotation macro misplacement with Clang
    - platform/x86/intel: Remove X86_PLATFORM_DRIVERS_INTEL
    - kernel/crash_core: suppress unknown crashkernel parameter warning
    - Revert "x86/boot: Pull up cmdline preparation and early param parsing"
    - x86/boot: Move EFI range reservation after cmdline parsing
    - ALSA: jack: Check the return value of kstrdup()
    - ALSA: drivers: opl3: Fix incorrect use of vp->state
    - ALSA: rawmidi - fix the uninitalized user_pversion
    - ALSA: hda/hdmi: Disable silent stream on GLK
    - ALSA: hda/realtek: Amp init fixup for HP ZBook 15 G6
    - ALSA: hda/realtek: Add new alc285-hp-amp-init model
    - ALSA: hda/realtek: fix mute/micmute LEDs for a HP ProBook
    - ALSA: hda/realtek: Fix quirk for Clevo NJ51CU
    - ASoC: meson: aiu: Move AIU_I2S_MISC hold setting to aiu-fifo-i2s
    - ASoC: tegra: Add DAPM switches for headphones and mic jack
    - ASoC: tegra: Restore headphones jack name on Nyan Big
    - Input: atmel_mxt_ts - fix double free in mxt_read_info_block
    - ipmi: bail out if init_srcu_struct fails
    - ipmi: ssif: initialize ssif_info->client early
    - ipmi: fix initialization when workqueue allocation fails
    - parisc: Correct completer in lws start
    - parisc: Fix mask used to select futex spinlock
    - tee: handle lookup of shm with reference count 0
    - x86/pkey: Fix undefined behaviour with PKRU_WD_BIT
    - platform/x86: amd-pmc: only use callbacks for suspend
    - platform/x86: intel_pmc_core: fix memleak on registration failure
    - KVM: x86: Always set kvm_run->if_flag
    - KVM: x86/mmu: Don't advance iterator after restart due to yielding
    - KVM: nVMX: Synthesize TRIPLE_FAULT for L2 if emulation is required
    - KVM: VMX: Always clear vmx->fail on emulation_required
    - KVM: VMX: Wake vCPU when delivering posted IRQ even if vCPU == this vCPU
    - pinctrl: stm32: consider the GPIO offset to expose all the GPIO lines
    - gpio: dln2: Fix interrupts when replugging the device
    - mmc: sdhci-tegra: Fix switch to HS400ES mode
    - mmc: meson-mx-sdhc: Set MANUAL_STOP for multi-block SDIO commands
    - mmc: core: Disable card detect during shutdown
    - mmc: mmci: stm32: clear DLYB_CR after sending tuning command
    - ARM: 9169/1: entry: fix Thumb2 bug in iWMMXt exception handling
    - ksmbd: fix error code in ndr_read_int32()
    - ksmbd: fix uninitialized symbol 'pntsd_size'
    - ksmbd: disable SMB2_GLOBAL_CAP_ENCRYPTION for SMB 3.1.1
    - mac80211: fix locking in ieee80211_start_ap error path
    - mm: mempolicy: fix THP allocations escaping mempolicy restrictions
    - mm, hwpoison: fix condition in free hugetlb page path
    - mm/hwpoison: clear MF_COUNT_INCREASED before retrying get_any_page()
    - mm/damon/dbgfs: protect targets destructions with kdamond_lock
    - tee: optee: Fix incorrect page free bug
    - f2fs: fix to do sanity check on last xattr entry in __f2fs_setxattr()
    - netfs: fix parameter of cleanup()
    - KVM: VMX: Fix stale docs for kvm-intel.emulate_invalid_guest_state
    - arm64: dts: lx2160a: fix scl-gpios property name
    - kfence: fix memory leak when cat kfence objects
    - Input: iqs626a - prohibit inlining of channel parsing functions
    - Input: elants_i2c - do not check Remark ID on eKTH3900/eKTH5312
    - Input: goodix - add id->model mapping for the "9111" model
    - ASoC: tas2770: Fix setting of high sample rates
    - ASoC: SOF: Intel: pci-tgl: add new ADL-P variant
    - ASoC: SOF: Intel: pci-tgl: add ADL-N support
    - ASoC: rt5682: fix the wrong jack type detected
    - pinctrl: mediatek: fix global-out-of-bounds issue
    - hwmom: (lm90) Fix citical alarm status for MAX6680/MAX6681
    - hwmon: (lm90) Do not report 'busy' status bit as alarm
    - r8152: sync ocp base
    - ax25: NPD bug when detaching AX25 device
    - hamradio: defer ax25 kfree after unregister_netdev
    - hamradio: improve the incomplete fix to avoid NPD
    - tun: avoid double free in tun_free_netdev
    - phonet/pep: refuse to enable an unbound pipe
    - Linux 5.15.12

  * Thinkpad E14 Gen2: Kernel panic with trackpad and trackpoint enabled
    (LP: #1945590) // Jammy update: v5.15.12 upstream stable release
    (LP: #1956305)
    - Input: elantech - fix stack out of bound access in
      elantech_change_report_id()

  * Jammy update: v5.15.11 upstream stable release (LP: #1956302)
    - reset: tegra-bpmp: Revert Handle errors in BPMP response
    - KVM: VMX: clear vmx_x86_ops.sync_pir_to_irr if APICv is disabled
    - KVM: selftests: Make sure kvm_create_max_vcpus test won't hit RLIMIT_NOFILE
    - KVM: downgrade two BUG_ONs to WARN_ON_ONCE
    - x86/kvm: remove unused ack_notifier callbacks
    - KVM: X86: Fix tlb flush for tdp in kvm_invalidate_pcid()
    - mac80211: fix rate control for retransmitted frames
    - mac80211: fix regression in SSN handling of addba tx
    - mac80211: mark TX-during-stop for TX in in_reconfig
    - mac80211: send ADDBA requests using the tid/queue of the aggregation session
    - mac80211: validate extended element ID is present
    - firmware: arm_scpi: Fix string overflow in SCPI genpd driver
    - bpf: Fix kernel address leakage in atomic fetch
    - bpf, selftests: Add test case for atomic fetch on spilled pointer
    - bpf: Fix signed bounds propagation after mov32
    - bpf: Make 32->64 bounds propagation slightly more robust
    - bpf, selftests: Add test case trying to taint map value pointer
    - bpf: Fix kernel address leakage in atomic cmpxchg's r0 aux reg
    - bpf, selftests: Update test case for atomic cmpxchg on r0 with pointer
    - vduse: fix memory corruption in vduse_dev_ioctl()
    - vduse: check that offset is within bounds in get_config()
    - virtio_ring: Fix querying of maximum DMA mapping size for virtio device
    - vdpa: check that offsets are within bounds
    - s390/entry: fix duplicate tracking of irq nesting level
    - recordmcount.pl: look for jgnop instruction as well as bcrl on s390
    - arm64: dts: ten64: remove redundant interrupt declaration for gpio-keys
    - ceph: fix up non-directory creation in SGID directories
    - dm btree remove: fix use after free in rebalance_children()
    - audit: improve robustness of the audit queue handling
    - btrfs: convert latest_bdev type to btrfs_device and rename
    - btrfs: use latest_dev in btrfs_show_devname
    - btrfs: update latest_dev when we create a sprout device
    - btrfs: remove stale comment about the btrfs_show_devname
    - scsi: ufs: core: Retry START_STOP on UNIT_ATTENTION
    - arm64: dts: rockchip: remove mmc-hs400-enhanced-strobe from rk3399-khadas-
      edge
    - arm64: dts: rockchip: fix rk3308-roc-cc vcc-sd supply
    - arm64: dts: rockchip: fix rk3399-leez-p710 vcc3v3-lan supply
    - arm64: dts: rockchip: fix audio-supply for Rock Pi 4
    - arm64: dts: rockchip: fix poweroff on helios64
    - dmaengine: idxd: add halt interrupt support
    - dmaengine: idxd: fix calling wq quiesce inside spinlock
    - mac80211: track only QoS data frames for admission control
    - tee: amdtee: fix an IS_ERR() vs NULL bug
    - ceph: fix duplicate increment of opened_inodes metric
    - ceph: initialize pathlen variable in reconnect_caps_cb
    - ARM: socfpga: dts: fix qspi node compatible
    - arm64: dts: imx8mq: remove interconnect property from lcdif
    - clk: Don't parent clks until the parent is fully registered
    - soc: imx: Register SoC device only on i.MX boards
    - iwlwifi: mvm: don't crash on invalid rate w/o STA
    - virtio: always enter drivers/virtio/
    - virtio/vsock: fix the transport to work with VMADDR_CID_ANY
    - vdpa: Consider device id larger than 31
    - Revert "drm/fb-helper: improve DRM fbdev emulation device names"
    - selftests: net: Correct ping6 expected rc from 2 to 1
    - s390/kexec_file: fix error handling when applying relocations
    - sch_cake: do not call cake_destroy() from cake_init()
    - inet_diag: fix kernel-infoleak for UDP sockets
    - netdevsim: don't overwrite read only ethtool parms
    - selftests: icmp_redirect: pass xfail=0 to log_test()
    - net: hns3: fix use-after-free bug in hclgevf_send_mbx_msg
    - net: hns3: fix race condition in debugfs
    - selftests: Add duplicate config only for MD5 VRF tests
    - selftests: Fix raw socket bind tests with VRF
    - selftests: Fix IPv6 address bind tests
    - dmaengine: idxd: fix missed completion on abort path
    - dmaengine: st_fdma: fix MODULE_ALIAS
    - drm: simpledrm: fix wrong unit with pixel clock
    - net/sched: sch_ets: don't remove idle classes from the round-robin list
    - selftests/net: toeplitz: fix udp option
    - net: dsa: mv88e6xxx: Unforce speed & duplex in mac_link_down()
    - selftest/net/forwarding: declare NETIFS p9 p10
    - mptcp: never allow the PM to close a listener subflow
    - drm/ast: potential dereference of null pointer
    - drm/i915/display: Fix an unsigned subtraction which can never be negative.
    - mac80211: agg-tx: don't schedule_and_wake_txq() under sta->lock
    - cfg80211: Acquire wiphy mutex on regulatory work
    - mac80211: fix lookup when adding AddBA extension element
    - net: stmmac: fix tc flower deletion for VLAN priority Rx steering
    - flow_offload: return EOPNOTSUPP for the unsupported mpls action type
    - rds: memory leak in __rds_conn_create()
    - ice: Use div64_u64 instead of div_u64 in adjfine
    - ice: Don't put stale timestamps in the skb
    - drm/amd/display: Set exit_optimized_pwr_state for DCN31
    - drm/amd/pm: fix a potential gpu_metrics_table memory leak
    - mptcp: remove tcp ulp setsockopt support
    - mptcp: clear 'kern' flag from fallback sockets
    - mptcp: fix deadlock in __mptcp_push_pending()
    - soc/tegra: fuse: Fix bitwise vs. logical OR warning
    - igb: Fix removal of unicast MAC filters of VFs
    - igbvf: fix double free in `igbvf_probe`
    - igc: Fix typo in i225 LTR functions
    - ixgbe: Document how to enable NBASE-T support
    - ixgbe: set X550 MDIO speed before talking to PHY
    - netdevsim: Zero-initialize memory for new map's value in function
      nsim_bpf_map_alloc
    - net/packet: rx_owner_map depends on pg_vec
    - net: stmmac: dwmac-rk: fix oob read in rk_gmac_setup
    - sfc_ef100: potential dereference of null pointer
    - dsa: mv88e6xxx: fix debug print for SPEED_UNFORCED
    - net: Fix double 0x prefix print in SKB dump
    - net/smc: Prevent smc_release() from long blocking
    - net: systemport: Add global locking for descriptor lifecycle
    - sit: do not call ipip6_dev_free() from sit_init_net()
    - afs: Fix mmap
    - arm64: kexec: Fix missing error code 'ret' warning in load_other_segments()
    - bpf: Fix extable fixup offset.
    - bpf, selftests: Fix racing issue in btf_skc_cls_ingress test
    - powerpc/85xx: Fix oops when CONFIG_FSL_PMC=n
    - USB: gadget: bRequestType is a bitfield, not a enum
    - Revert "usb: early: convert to readl_poll_timeout_atomic()"
    - KVM: x86: Drop guest CPUID check for host initiated writes to
      MSR_IA32_PERF_CAPABILITIES
    - tty: n_hdlc: make n_hdlc_tty_wakeup() asynchronous
    - USB: NO_LPM quirk Lenovo USB-C to Ethernet Adapher(RTL8153-04)
    - usb: dwc2: fix STM ID/VBUS detection startup delay in dwc2_driver_probe
    - PCI/MSI: Clear PCI_MSIX_FLAGS_MASKALL on error
    - PCI/MSI: Mask MSI-X vectors only on success
    - usb: xhci-mtk: fix list_del warning when enable list debug
    - usb: xhci: Extend support for runtime power management for AMD's Yellow
      carp.
    - usb: cdnsp: Fix incorrect status for control request
    - usb: cdnsp: Fix incorrect calling of cdnsp_died function
    - usb: cdnsp: Fix issue in cdnsp_log_ep trace event
    - usb: cdnsp: Fix lack of spin_lock_irqsave/spin_lock_restore
    - usb: typec: tcpm: fix tcpm unregister port but leave a pending timer
    - usb: gadget: u_ether: fix race in setting MAC address in setup phase
    - USB: serial: cp210x: fix CP2105 GPIO registration
    - USB: serial: option: add Telit FN990 compositions
    - selinux: fix sleeping function called from invalid context
    - btrfs: fix memory leak in __add_inode_ref()
    - btrfs: fix double free of anon_dev after failure to create subvolume
    - btrfs: check WRITE_ERR when trying to read an extent buffer
    - btrfs: fix missing blkdev_put() call in btrfs_scan_one_device()
    - zonefs: add MODULE_ALIAS_FS
    - iocost: Fix divide-by-zero on donation from low hweight cgroup
    - serial: 8250_fintek: Fix garbled text for console
    - timekeeping: Really make sure wall_to_monotonic isn't positive
    - cifs: sanitize multiple delimiters in prepath
    - locking/rtmutex: Fix incorrect condition in rtmutex_spin_on_owner()
    - riscv: dts: unleashed: Add gpio card detect to mmc-spi-slot
    - riscv: dts: unmatched: Add gpio card detect to mmc-spi-slot
    - perf inject: Fix segfault due to close without open
    - perf inject: Fix segfault due to perf_data__fd() without open
    - libata: if T_LENGTH is zero, dma direction should be DMA_NONE
    - powerpc/module_64: Fix livepatching for RO modules
    - drm/amdgpu: correct register access for RLC_JUMP_TABLE_RESTORE
    - drm/amdgpu: don't override default ECO_BITs setting
    - drm/amd/pm: fix reading SMU FW version from amdgpu_firmware_info on YC
    - Revert "can: m_can: remove support for custom bit timing"
    - can: m_can: make custom bittiming fields const
    - can: m_can: pci: use custom bit timings for Elkhart Lake
    - ARM: dts: imx6ull-pinfunc: Fix CSI_DATA07__ESAI_TX0 pad name
    - xsk: Do not sleep in poll() when need_wakeup set
    - mptcp: add missing documented NL params
    - bpf, x64: Factor out emission of REX byte in more cases
    - bpf: Fix extable address check.
    - USB: core: Make do_proc_control() and do_proc_bulk() killable
    - media: mxl111sf: change mutex_init() location
    - fuse: annotate lock in fuse_reverse_inval_entry()
    - ovl: fix warning in ovl_create_real()
    - scsi: scsi_debug: Don't call kcalloc() if size arg is zero
    - scsi: scsi_debug: Fix type in min_t to avoid stack OOB
    - scsi: scsi_debug: Sanity check block descriptor length in resp_mode_select()
    - io-wq: remove spurious bit clear on task_work addition
    - io-wq: check for wq exit after adding new worker task_work
    - rcu: Mark accesses to rcu_state.n_force_qs
    - io-wq: drop wqe lock before creating new worker
    - bus: ti-sysc: Fix variable set but not used warning for reinit_modules
    - selftests/damon: test debugfs file reads/writes with huge count
    - Revert "xsk: Do not sleep in poll() when need_wakeup set"
    - xen/blkfront: harden blkfront against event channel storms
    - xen/netfront: harden netfront against event channel storms
    - xen/console: harden hvc_xen against event channel storms
    - xen/netback: fix rx queue stall detection
    - xen/netback: don't queue unlimited number of packages
    - Linux 5.15.11

  * Jammy update: v5.15.10 upstream stable release (LP: #1956301)
    - nfc: fix segfault in nfc_genl_dump_devices_done
    - hwmon: (corsair-psu) fix plain integer used as NULL pointer
    - RDMA: Fix use-after-free in rxe_queue_cleanup
    - RDMA/mlx5: Fix releasing unallocated memory in dereg MR flow
    - mtd: rawnand: Fix nand_erase_op delay
    - mtd: rawnand: Fix nand_choose_best_timings() on unsupported interface
    - inet: use #ifdef CONFIG_SOCK_RX_QUEUE_MAPPING consistently
    - dt-bindings: media: nxp,imx7-mipi-csi2: Drop bad if/then schema
    - clk: qcom: sm6125-gcc: Swap ops of ice and apps on sdcc1
    - perf bpf_skel: Do not use typedef to avoid error on old clang
    - netfs: Fix lockdep warning from taking sb_writers whilst holding mmap_lock
    - RDMA/irdma: Fix a user-after-free in add_pble_prm
    - RDMA/irdma: Fix a potential memory allocation issue in
      'irdma_prm_add_pble_mem()'
    - RDMA/irdma: Report correct WC errors
    - RDMA/irdma: Don't arm the CQ more than two times if no CE for this CQ
    - ice: fix FDIR init missing when reset VF
    - vmxnet3: fix minimum vectors alloc issue
    - i2c: virtio: fix completion handling
    - drm/msm: Fix null ptr access msm_ioctl_gem_submit()
    - drm/msm/a6xx: Fix uinitialized use of gpu_scid
    - drm/msm/dsi: set default num_data_lanes
    - drm/msm/dp: Avoid unpowered AUX xfers that caused crashes
    - KVM: arm64: Save PSTATE early on exit
    - s390/test_unwind: use raw opcode instead of invalid instruction
    - Revert "tty: serial: fsl_lpuart: drop earlycon entry for i.MX8QXP"
    - net/mlx4_en: Update reported link modes for 1/10G
    - loop: Use pr_warn_once() for loop_control_remove() warning
    - ALSA: hda: Add Intel DG2 PCI ID and HDMI codec vid
    - ALSA: hda/hdmi: fix HDA codec entry table order for ADL-P
    - parisc/agp: Annotate parisc agp init functions with __init
    - i2c: rk3x: Handle a spurious start completion interrupt flag
    - net: netlink: af_netlink: Prevent empty skb by adding a check on len.
    - drm/amdgpu: cancel the correct hrtimer on exit
    - drm/amdgpu: check atomic flag to differeniate with legacy path
    - drm/amd/display: Fix for the no Audio bug with Tiled Displays
    - drm/amdkfd: fix double free mem structure
    - drm/amd/display: add connector type check for CRC source set
    - drm/amdkfd: process_info lock not needed for svm
    - tracing: Fix a kmemleak false positive in tracing_map
    - staging: most: dim2: use device release method
    - fuse: make sure reclaim doesn't write the inode
    - perf inject: Fix itrace space allowed for new attributes
    - Linux 5.15.10

  * Jammy update: v5.15.9 upstream stable release (LP: #1955161)
    - netfilter: selftest: conntrack_vrf.sh: fix file permission
    - Linux 5.15.9

  * [SRU][I/J/OEM-5.13/OEM-5.14] Fix pci port lost when hotplug dock
    (LP: #1954646)
    - PCI: Re-enable Downstream Port LTR after reset or hotplug

  * Add support for NVIDIA EC backlight (LP: #1953286)
    - platform/x86: Add driver for ACPI WMAA EC-based backlight control
    - platform/x86: Remove "WMAA" from identifier names in wmaa-backlight-wmi.c
    - platform/x86: Rename wmaa-backlight-wmi to nvidia-wmi-ec-backlight
    - [Config] NVIDIA_WMI_EC_BACKLIGHT=m

  * Improve USB Type-C support (LP: #1950974)
    - usb: typec: ucsi: Always cancel the command if PPM reports BUSY condition
    - usb: typec: ucsi: Don't stop alt mode registration on busy condition
    - usb: typec: ucsi: Add polling mechanism for partner tasks like alt mode
      checking
    - usb: typec: ucsi: acpi: Reduce the command completion timeout
    - usb: typec: ucsi: Check the partner alt modes always if there is PD contract
    - usb: typec: ucsi: Read the PDOs in separate work
    - usb: typec: ucsi: Better fix for missing unplug events issue

  *  Fix power button wakeup with shared IRQs on AMD platforms (LP: #1953540)
    - pinctrl: amd: Fix wakeups when IRQ is shared with SCI

  * AMD: Suspend not working when some cores are disabled through cpufreq
    (LP: #1954930)
    - ACPI: processor idle: Allow playing dead in C3 state

  * Jammy update: v5.15.8 upstream stable release (LP: #1954931)
    - Revert "UBUNTU: SAUCE: selftests: fib_tests: assign address to dummy1 for
      rp_filter tests"
    - usb: gadget: uvc: fix multiple opens
    - HID: quirks: Add quirk for the Microsoft Surface 3 type-cover
    - HID: google: add eel USB id
    - HID: intel-ish-hid: ipc: only enable IRQ wakeup when requested
    - HID: add hid_is_usb() function to make it simpler for USB detection
    - HID: add USB_HID dependancy to hid-prodikeys
    - HID: add USB_HID dependancy to hid-chicony
    - HID: add USB_HID dependancy on some USB HID drivers
    - HID: bigbenff: prevent null pointer dereference
    - HID: wacom: fix problems when device is not a valid USB device
    - HID: check for valid USB device for many HID drivers
    - mtd: dataflash: Add device-tree SPI IDs
    - mmc: spi: Add device-tree SPI IDs
    - HID: sony: fix error path in probe
    - HID: Ignore battery for Elan touchscreen on Asus UX550VE
    - platform/x86/intel: hid: add quirk to support Surface Go 3
    - nft_set_pipapo: Fix bucket load in AVX2 lookup routine for six 8-bit groups
    - IB/hfi1: Insure use of smp_processor_id() is preempt disabled
    - IB/hfi1: Fix early init panic
    - IB/hfi1: Fix leak of rcvhdrtail_dummy_kvaddr
    - can: kvaser_usb: get CAN clock frequency from device
    - can: kvaser_pciefd: kvaser_pciefd_rx_error_frame(): increase correct
      stats->{rx,tx}_errors counter
    - can: sja1000: fix use after free in ems_pcmcia_add_card()
    - can: pch_can: pch_can_rx_normal: fix use after free
    - can: m_can: m_can_read_fifo: fix memory leak in error branch
    - can: m_can: pci: fix incorrect reference clock rate
    - can: m_can: pci: fix iomap_read_fifo() and iomap_write_fifo()
    - can: m_can: Disable and ignore ELO interrupt
    - net: dsa: mv88e6xxx: fix "don't use PHY_DETECT on internal PHY's"
    - net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
    - x86/sme: Explicitly map new EFI memmap table as encrypted
    - platform/x86: amd-pmc: Fix s2idle failures on certain AMD laptops
    - nfc: fix potential NULL pointer deref in nfc_genl_dump_ses_done
    - selftests: netfilter: add a vrf+conntrack testcase
    - vrf: don't run conntrack on vrf with !dflt qdisc
    - bpf, x86: Fix "no previous prototype" warning
    - bpf, sockmap: Attach map progs to psock early for feature probes
    - bpf: Make sure bpf_disable_instrumentation() is safe vs preemption.
    - bpf: Fix the off-by-two error in range markings
    - ice: ignore dropped packets during init
    - ethtool: do not perform operations on net devices being unregistered
    - bonding: make tx_rebalance_counter an atomic
    - nfp: Fix memory leak in nfp_cpp_area_cache_add()
    - udp: using datalen to cap max gso segments
    - netfilter: nft_exthdr: break evaluation if setting TCP option fails
    - netfilter: conntrack: annotate data-races around ct->timeout
    - iavf: restore MSI state on reset
    - iavf: Fix reporting when setting descriptor count
    - IB/hfi1: Correct guard on eager buffer deallocation
    - devlink: fix netns refcount leak in devlink_nl_cmd_reload()
    - net: bcm4908: Handle dma_set_coherent_mask error codes
    - net: dsa: mv88e6xxx: error handling for serdes_power functions
    - net: dsa: felix: Fix memory leak in felix_setup_mmio_filtering
    - net/sched: fq_pie: prevent dismantle issue
    - net: mvpp2: fix XDP rx queues registering
    - KVM: x86: Don't WARN if userspace mucks with RCX during string I/O exit
    - KVM: x86: Ignore sparse banks size for an "all CPUs", non-sparse IPI req
    - KVM: x86: Wait for IPIs to be delivered when handling Hyper-V TLB flush
      hypercall
    - timers: implement usleep_idle_range()
    - mm/damon/core: fix fake load reports due to uninterruptible sleeps
    - mm/slub: fix endianness bug for alloc/free_traces attributes
    - mm: bdi: initialize bdi_min_ratio when bdi is unregistered
    - ALSA: ctl: Fix copy of updated id with element read/write
    - ALSA: hda/realtek - Add headset Mic support for Lenovo ALC897 platform
    - ALSA: hda/realtek: Fix quirk for TongFang PHxTxX1
    - ALSA: pcm: oss: Fix negative period/buffer sizes
    - ALSA: pcm: oss: Limit the period size to 16MB
    - ALSA: pcm: oss: Handle missing errors in snd_pcm_oss_change_params*()
    - cifs: Fix crash on unload of cifs_arc4.ko
    - scsi: qla2xxx: Format log strings only if needed
    - btrfs: clear extent buffer uptodate when we fail to write it
    - btrfs: fix re-dirty process of tree-log nodes
    - btrfs: replace the BUG_ON in btrfs_del_root_ref with proper error handling
    - btrfs: free exchange changeset on failures
    - perf intel-pt: Fix some PGE (packet generation enable/control flow packets)
      usage
    - perf intel-pt: Fix sync state when a PSB (synchronization) packet is found
    - perf intel-pt: Fix intel_pt_fup_event() assumptions about setting state type
    - perf intel-pt: Fix state setting when receiving overflow (OVF) packet
    - perf intel-pt: Fix next 'err' value, walking trace
    - perf intel-pt: Fix missing 'instruction' events with 'q' option
    - perf intel-pt: Fix error timestamp setting on the decoder error path
    - md: fix update super 1.0 on rdev size change
    - nfsd: fix use-after-free due to delegation race
    - nfsd: Fix nsfd startup race (again)
    - tracefs: Have new files inherit the ownership of their parent
    - selftests: KVM: avoid failures due to reserved HyperTransport region
    - hwmon: (pwm-fan) Ensure the fan going on in .probe()
    - mmc: renesas_sdhi: initialize variable properly when tuning
    - clk: qcom: regmap-mux: fix parent clock lookup
    - thermal: int340x: Fix VCoRefLow MMIO bit offset for TGL
    - drm/syncobj: Deal with signalled fences in drm_syncobj_find_fence.
    - libata: add horkage for ASMedia 1092
    - io_uring: ensure task_work gets run as part of cancelations
    - wait: add wake_up_pollfree()
    - binder: use wake_up_pollfree()
    - signalfd: use wake_up_pollfree()
    - aio: keep poll requests on waitqueue until completed
    - aio: fix use-after-free due to missing POLLFREE handling
    - tracefs: Set all files to the same group ownership as the mount option
    - i2c: mpc: Use atomic read and fix break condition
    - block: fix ioprio_get(IOPRIO_WHO_PGRP) vs setuid(2)
    - scsi: pm80xx: Do not call scsi_remove_host() in pm8001_alloc()
    - scsi: scsi_debug: Fix buffer size of REPORT ZONES command
    - ALSA: usb-audio: Reorder snd_djm_devices[] entries
    - qede: validate non LSO skb length
    - PM: runtime: Fix pm_runtime_active() kerneldoc comment
    - ASoC: rt5682: Fix crash due to out of scope stack vars
    - ASoC: qdsp6: q6routing: Fix return value from msm_routing_put_audio_mixer
    - ASoC: codecs: wsa881x: fix return values from kcontrol put
    - ASoC: codecs: wcd934x: handle channel mappping list correctly
    - ASoC: codecs: wcd934x: return correct value from mixer put
    - RDMA/hns: Do not halt commands during reset until later
    - RDMA/hns: Do not destroy QP resources in the hw resetting phase
    - hwmon: (dell-smm) Fix warning on /proc/i8k creation error
    - clk: imx: use module_platform_driver
    - clk: qcom: clk-alpha-pll: Don't reconfigure running Trion
    - i40e: Fix failed opcode appearing if handling messages from VF
    - i40e: Fix pre-set max number of queues for VF
    - mtd: rawnand: fsmc: Take instruction delay into account
    - mtd: rawnand: fsmc: Fix timing computation
    - bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap
    - i40e: Fix NULL pointer dereference in i40e_dbg_dump_desc
    - Revert "PCI: aardvark: Fix support for PCI_ROM_ADDRESS1 on emulated bridge"
    - drm/amd/display: Fix DPIA outbox timeout after S3/S4/reset
    - perf tools: Fix SMT detection fast read path
    - Documentation/locking/locktypes: Update migrate_disable() bits.
    - dt-bindings: net: Reintroduce PHY no lane swap binding
    - tools build: Remove needless libpython-version feature check that breaks
      test-all fast path
    - net: cdc_ncm: Allow for dwNtbOutMaxSize to be unset or zero
    - net: altera: set a couple error code in probe()
    - net: fec: only clear interrupt of handling queue in fec_enet_rx_queue()
    - net, neigh: clear whole pneigh_entry at alloc time
    - net/qla3xxx: fix an error code in ql_adapter_up()
    - selftests/fib_tests: Rework fib_rp_filter_test()
    - USB: gadget: detect too-big endpoint 0 requests
    - USB: gadget: zero allocate endpoint 0 buffers
    - Revert "usb: dwc3: dwc3-qcom: Enable tx-fifo-resize property by default"
    - usb: core: config: fix validation of wMaxPacketValue entries
    - usb: core: config: using bit mask instead of individual bits
    - xhci: avoid race between disable slot command and host runtime suspend
    - iio: gyro: adxrs290: fix data signedness
    - iio: trigger: Fix reference counting
    - iio: trigger: stm32-timer: fix MODULE_ALIAS
    - iio: stk3310: Don't return error code in interrupt handler
    - iio: mma8452: Fix trigger reference couting
    - iio: ltr501: Don't return error code in trigger handler
    - iio: kxsd9: Don't return error code in trigger handler
    - iio: itg3200: Call iio_trigger_notify_done() on error
    - iio: dln2-adc: Fix lockdep complaint
    - iio: dln2: Check return value of devm_iio_trigger_register()
    - iio: at91-sama5d2: Fix incorrect sign extension
    - iio: adc: stm32: fix a current leak by resetting pcsel before disabling vdda
    - iio: adc: axp20x_adc: fix charging current reporting on AXP22x
    - iio: ad7768-1: Call iio_trigger_notify_done() on error
    - iio: accel: kxcjk-1013: Fix possible memory leak in probe and remove
    - nvmem: eeprom: at25: fix FRAM byte_len
    - bus: mhi: pci_generic: Fix device recovery failed issue
    - bus: mhi: core: Add support for forced PM resume
    - csky: fix typo of fpu config macro
    - irqchip/aspeed-scu: Replace update_bits with write_bits.
    - irqchip/armada-370-xp: Fix return value of armada_370_xp_msi_alloc()
    - irqchip/armada-370-xp: Fix support for Multi-MSI interrupts
    - aio: Fix incorrect usage of eventfd_signal_allowed()
    - irqchip/irq-gic-v3-its.c: Force synchronisation when issuing INVALL
    - irqchip: nvic: Fix offset for Interrupt Priority Offsets
    - misc: fastrpc: fix improper packet size calculation
    - clocksource/drivers/dw_apb_timer_of: Fix probe failure
    - bpf: Add selftests to cover packet access corner cases
    - Linux 5.15.8

  * Can't read/write SD card after running CPU offline test in 5.11.0 and 5.13.0
    (LP: #1951784) // Jammy update: v5.15.8 upstream stable release
    (LP: #1954931)
    - misc: rtsx: Avoid mangling IRQ during runtime PM

  * Enable Landlock by default (LP: #1953192)
    - [Config] Enable Landlock by default

  * Add s0i3 RTC wake up for AMD systems (LP: #1950013)
    - platform/x86: amd-pmc: Export Idlemask values based on the APU
    - platform/x86: amd-pmc: adjust arguments for `amd_pmc_send_cmd`
    - platform/x86: amd-pmc: Add special handling for timer based S0i3 wakeup

  * Fix runtime power management on USB controller with XHCI_RESET_ON_RESUME
    flag (LP: #1954369)
    - SAUCE: xhci: Remove CONFIG_USB_DEFAULT_PERSIST to prevent xHCI from runtime
      suspending

  * Fix System hangs on black screen when reboot (LP: #1949321)
    - drm/i915/hdmi: convert intel_hdmi_to_dev to intel_hdmi_to_i915
    - drm/i915: Don't request GMBUS to generate irqs when called while irqs are
      off
    - drm/i915/hdmi: Turn DP++ TMDS output buffers back on in encoder->shutdown()

  * require CAP_NET_ADMIN to attach N_HCI ldisc (LP: #1949516)
    - Bluetooth: hci_ldisc: require CAP_NET_ADMIN to attach N_HCI ldisc

  * mt7921e: Failed to start WM firmware (LP: #1954300)
    - SAUCE: Bluetooth: btusb: Handle download_firmware failure cases
    - SAUCE: Bluetooth: btusb: Return error code when getting patch status failed

  * Miscellaneous Ubuntu changes
    - [Packaging] Add list of built-in modules to the ABI
    - [Packaging] abi-check: Process modules.builtin
    - SAUCE: allow to use __wake_up_pollfree() from GPL modules
    - [Packaging] enforce xz compression for debs
    - [Config] update config after v5.15.12
    - [Packaging] temporarily disable signed v4l2loopback

 -- Andrea Righi <email address hidden>  Tue, 04 Jan 2022 11:22:10 +0100