This is the start of the stable review cycle for the 5.15.138 release. There are 125 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Thu, 09 Nov 2023 20:22:58 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.15.138-rc2.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.15.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Linux 5.15.138-rc2 Mark Hasemeyer <markhas@xxxxxxxxxxxx> ALSA: hda: intel-dsp-config: Fix JSL Chromebook quirk detection Siddharth Vadapalli <s-vadapalli@xxxxxx> misc: pci_endpoint_test: Add deviceID for J721S2 PCIe EP device support Cameron Williams <cang1@xxxxxxxxxx> tty: 8250: Add Brainboxes Oxford Semiconductor-based quirks Cameron Williams <cang1@xxxxxxxxxx> tty: 8250: Add support for Intashield IX cards Cameron Williams <cang1@xxxxxxxxxx> tty: 8250: Add support for additional Brainboxes PX cards Cameron Williams <cang1@xxxxxxxxxx> tty: 8250: Fix up PX-803/PX-857 Cameron Williams <cang1@xxxxxxxxxx> tty: 8250: Fix port count of PX-257 Cameron Williams <cang1@xxxxxxxxxx> tty: 8250: Add support for Intashield IS-100 Cameron Williams <cang1@xxxxxxxxxx> tty: 8250: Add support for Brainboxes UP cards Cameron Williams <cang1@xxxxxxxxxx> tty: 8250: Add support for additional Brainboxes UC cards Cameron Williams <cang1@xxxxxxxxxx> tty: 8250: Remove UC-257 and UC-431 Daniel Starke <daniel.starke@xxxxxxxxxxx> tty: n_gsm: fix race condition in status line change on dead connections Andrey Konovalov <andreyknvl@xxxxxxxxx> usb: raw-gadget: properly handle interrupted requests Jimmy Hu <hhhuuu@xxxxxxxxxx> usb: typec: tcpm: Fix NULL pointer dereference in tcpm_pd_svdm() LihaSika <lihasika@xxxxxxxxx> usb: storage: set 1.50 as the lower bcdDevice for older "Super Top" compatibility Vicki Pfau <vi@xxxxxxxxxxx> PCI: Prevent xHCI driver from claiming AMD VanGogh USB3 DRD device Mario Limonciello <mario.limonciello@xxxxxxx> drm/amd: Disable ASPM for VI w/ all Intel systems Mario Limonciello <mario.limonciello@xxxxxxx> drm/amd: Move helper for dynamic speed switch check out of smu13 Oliver Hartkopp <socketcan@xxxxxxxxxxxx> can: isotp: isotp_sendmsg(): fix TX state detection and wait behavior Oliver Hartkopp <socketcan@xxxxxxxxxxxx> can: isotp: isotp_bind(): do not validate unused address information Oliver Hartkopp <socketcan@xxxxxxxxxxxx> can: isotp: add local echo tx processing and tx without FC Oliver Hartkopp <socketcan@xxxxxxxxxxxx> can: isotp: handle wait_event_interruptible() return values Oliver Hartkopp <socketcan@xxxxxxxxxxxx> can: isotp: check CAN address family in isotp_bind() Oliver Hartkopp <socketcan@xxxxxxxxxxxx> can: isotp: isotp_bind(): return -EINVAL on incorrect CAN ID formatting Oliver Hartkopp <socketcan@xxxxxxxxxxxx> can: isotp: set max PDU size to 64 kByte Michael Ellerman <mpe@xxxxxxxxxxxxxx> powerpc/mm: Fix boot crash with FLATMEM Douglas Anderson <dianders@xxxxxxxxxxxx> r8152: Check for unplug in r8153b_ups_en() / r8153c_ups_en() Douglas Anderson <dianders@xxxxxxxxxxxx> r8152: Check for unplug in rtl_phy_patch_request() Su Hui <suhui@xxxxxxxxxxxx> net: chelsio: cxgb4: add an error code check in t4_load_phy_fw Liming Sun <limings@xxxxxxxxxx> platform/mellanox: mlxbf-tmfifo: Fix a warning message Tomas Henzl <thenzl@xxxxxxxxxx> scsi: mpt3sas: Fix in error path Jorge Maidana <jorgem.linux@xxxxxxxxx> fbdev: uvesafb: Call cn_del_callback() at the end of uvesafb_exit() Karolina Stolarek <karolina.stolarek@xxxxxxxxx> drm/ttm: Reorder sys manager cleanup step Shuming Fan <shumingf@xxxxxxxxxxx> ASoC: rt5650: fix the wrong result of key button Florian Westphal <fw@xxxxxxxxx> netfilter: nfnetlink_log: silence bogus compiler warning William A. Kennington III <william@xxxxxxxxxxxxxxx> spi: npcm-fiu: Fix UMA reads when dummy.nbytes == 0 Su Hui <suhui@xxxxxxxxxxxx> fs/ntfs3: Avoid possible memory leak Gabriel Marcano <gabemarcano@xxxxxxxxx> fs/ntfs3: Fix directory element type detection Konstantin Komarov <almaz.alexandrovich@xxxxxxxxxxxxxxxxxxxx> fs/ntfs3: Fix NULL pointer dereference on error in attr_allocate_frame() Konstantin Komarov <almaz.alexandrovich@xxxxxxxxxxxxxxxxxxxx> fs/ntfs3: Fix possible NULL-ptr-deref in ni_readpage_cmpr() Konstantin Komarov <almaz.alexandrovich@xxxxxxxxxxxxxxxxxxxx> fs/ntfs3: Use kvmalloc instead of kmalloc(... __GFP_NOWARN) Konstantin Komarov <almaz.alexandrovich@xxxxxxxxxxxxxxxxxxxx> fs/ntfs3: Write immediately updated ntfs state Konstantin Komarov <almaz.alexandrovich@xxxxxxxxxxxxxxxxxxxx> fs/ntfs3: Add ckeck in ni_update_parent() Arnd Bergmann <arnd@xxxxxxxx> fbdev: atyfb: only use ioremap_uc() on i386 and ia64 Dmitry Torokhov <dmitry.torokhov@xxxxxxxxx> Input: synaptics-rmi4 - handle reset delay when using SMBus trsnsport Christophe Leroy <christophe.leroy@xxxxxxxxxx> powerpc/85xx: Fix math emulation exception Zhang Shurong <zhang_shurong@xxxxxxxxxxx> dmaengine: ste_dma40: Fix PM disable depth imbalance in d40_probe Ben Wolsieffer <ben.wolsieffer@xxxxxxxxxxx> irqchip/stm32-exti: add missing DT IRQ flag translation Anup Patel <apatel@xxxxxxxxxxxxxxxx> irqchip/riscv-intc: Mark all INTC nodes as initialized Gustavo A. R. Silva <gustavoars@xxxxxxxxxx> net: sched: cls_u32: Fix allocation size in u32_init() Kuninori Morimoto <kuninori.morimoto.gx@xxxxxxxxxxx> ASoC: simple-card: fixup asoc_simple_probe() error handling Juergen Gross <jgross@xxxxxxxx> x86: Fix .brk attribute in linker script Hangyu Hua <hbh25y@xxxxxxxxx> rpmsg: Fix possible refcount leak in rpmsg_register_device_override() Bjorn Andersson <quic_bjorande@xxxxxxxxxxx> rpmsg: glink: Release driver_override Krzysztof Kozlowski <krzysztof.kozlowski@xxxxxxxxxx> rpmsg: Fix calling device_lock() on non-initialized device Krzysztof Kozlowski <krzysztof.kozlowski@xxxxxxxxxx> rpmsg: Fix kfree() of static memory on setting driver_override Krzysztof Kozlowski <krzysztof.kozlowski@xxxxxxxxxx> rpmsg: Constify local variable in field store macro Krzysztof Kozlowski <krzysztof.kozlowski@xxxxxxxxxx> driver: platform: Add helper for safer setting of driver_override John Sperbeck <jsperbeck@xxxxxxxxxx> objtool/x86: add missing embedded_insn check Baokun Li <libaokun1@xxxxxxxxxx> ext4: avoid overlapping preallocations due to overflow Baokun Li <libaokun1@xxxxxxxxxx> ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow Baokun Li <libaokun1@xxxxxxxxxx> ext4: add two helper functions extent_logical_end() and pa_logical_end() Josh Poimboeuf <jpoimboe@xxxxxxxxxx> x86/mm: Fix RESERVE_BRK() for older binutils Josh Poimboeuf <jpoimboe@xxxxxxxxxx> x86/mm: Simplify RESERVE_BRK() Thomas Gleixner <tglx@xxxxxxxxxxxxx> x86/i8259: Skip probing when ACPI/MADT advertises PCAT compatibility Shailend Chand <shailend@xxxxxxxxxx> gve: Fix GFP flags when allocing pages Linus Walleij <linus.walleij@xxxxxxxxxx> iio: afe: rescale: Accept only offset channels Liam Beguin <liambeguin@xxxxxxxxx> iio: afe: rescale: add offset support Liam Beguin <liambeguin@xxxxxxxxx> iio: afe: rescale: expose scale processing function Liam Beguin <liambeguin@xxxxxxxxx> iio: afe: rescale: reorder includes Alessandro Carminati <alessandro.carminati@xxxxxxxxx> clk: Sanitize possible_parent_show to Handle Return Value of of_clk_get_parent_name Al Viro <viro@xxxxxxxxxxxxxxxxxx> sparc32: fix a braino in fault handling in csum_and_copy_..._user() Peter Zijlstra <peterz@xxxxxxxxxxxxx> perf/core: Fix potential NULL deref Peng Fan <peng.fan@xxxxxxx> nvmem: imx: correct nregs for i.MX6UL Peng Fan <peng.fan@xxxxxxx> nvmem: imx: correct nregs for i.MX6SLL Peng Fan <peng.fan@xxxxxxx> nvmem: imx: correct nregs for i.MX6ULL Ekansh Gupta <quic_ekangupt@xxxxxxxxxxx> misc: fastrpc: Clean buffers on remote invocation failures Yujie Liu <yujie.liu@xxxxxxxxx> tracing/kprobes: Fix the description of variable length arguments Jian Zhang <zhangjian.3032@xxxxxxxxxxxxx> i2c: aspeed: Fix i2c bus hang in slave read Alain Volmat <alain.volmat@xxxxxxxxxxx> i2c: stm32f7: Fix PEC handling in case of SMBUS transfers Herve Codina <herve.codina@xxxxxxxxxxx> i2c: muxes: i2c-demux-pinctrl: Use of_get_i2c_adapter_by_node() Herve Codina <herve.codina@xxxxxxxxxxx> i2c: muxes: i2c-mux-gpmux: Use of_get_i2c_adapter_by_node() Herve Codina <herve.codina@xxxxxxxxxxx> i2c: muxes: i2c-mux-pinctrl: Use of_get_i2c_adapter_by_node() Robert Hancock <robert.hancock@xxxxxxxxxx> iio: adc: xilinx-xadc: Correct temperature offset/scale for UltraScale Robert Hancock <robert.hancock@xxxxxxxxxx> iio: adc: xilinx-xadc: Don't clobber preset voltage/temperature thresholds Marek Szyprowski <m.szyprowski@xxxxxxxxxxx> iio: exynos-adc: request second interupt only when touchscreen mode is used Haibo Li <haibo.li@xxxxxxxxxxxx> kasan: print the original fault addr when access invalid shadow Ivan Vecera <ivecera@xxxxxxxxxx> i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx> gtp: fix fragmentation needed check with gso Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx> gtp: uapi: fix GTPA_MAX Fred Chen <fred.chenchen03@xxxxxxxxx> tcp: fix wrong RTO timeout when received SACK reneging Douglas Anderson <dianders@xxxxxxxxxxxx> r8152: Release firmware if we have an error in probe Douglas Anderson <dianders@xxxxxxxxxxxx> r8152: Cancel hw_phy_work if we have an error in probe Douglas Anderson <dianders@xxxxxxxxxxxx> r8152: Run the unload routine if we have errors during probe Douglas Anderson <dianders@xxxxxxxxxxxx> r8152: Increase USB control msg timeout to 5000ms as per spec Shigeru Yoshida <syoshida@xxxxxxxxxx> net: usb: smsc95xx: Fix uninit-value access in smsc95xx_read_reg Christophe JAILLET <christophe.jaillet@xxxxxxxxxx> net: ieee802154: adf7242: Fix some potential buffer overflow in adf7242_stats_show() Sasha Neftin <sasha.neftin@xxxxxxxxx> igc: Fix ambiguity in the ethtool advertising Eric Dumazet <edumazet@xxxxxxxxxx> neighbour: fix various data-races Mateusz Palczewski <mateusz.palczewski@xxxxxxxxx> igb: Fix potential memory leak in igb_add_ethtool_nfc_entry Kunwu Chan <chentao@xxxxxxxxxx> treewide: Spelling fix in comment Ivan Vecera <ivecera@xxxxxxxxxx> i40e: Fix I40E_FLAG_VF_VLAN_PRUNING value Mirsad Goran Todorovac <mirsad.todorovac@xxxxxxxxxxxx> r8169: fix the KCSAN reported data race in rtl_rx while reading desc->opts1 Mirsad Goran Todorovac <mirsad.todorovac@xxxxxxxxxxxx> r8169: fix the KCSAN reported data-race in rtl_tx while reading TxDescArray[entry].opts1 Mirsad Goran Todorovac <mirsad.todorovac@xxxxxxxxxxxx> r8169: fix the KCSAN reported data-race in rtl_tx() while reading tp->cur_tx Hao Ge <gehao@xxxxxxxxxx> firmware/imx-dsp: Fix use_after_free in imx_dsp_setup_channels() Lukasz Majczak <lma@xxxxxxxxxxxx> drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper() Alexandru Matei <alexandru.matei@xxxxxxxxxx> vsock/virtio: initialize the_virtio_vsock before using VQs Stefano Garzarella <sgarzare@xxxxxxxxxx> vsock/virtio: add support for device suspend/resume Stefano Garzarella <sgarzare@xxxxxxxxxx> vsock/virtio: factor our the code to initialize and delete VQs Umesh Nerlige Ramappa <umesh.nerlige.ramappa@xxxxxxxxx> drm/i915/pmu: Check if pmu is closed before stopping event Al Viro <viro@xxxxxxxxxxxxxxxxxx> nfsd: lock_rename() needs both directories to live on the same fs Gregory Price <gourry.memverge@xxxxxxxxx> mm/migrate: fix do_pages_move for compat pointers Kemeng Shi <shikemeng@xxxxxxxxxxxxxxx> mm/page_alloc: correct start page when guard page debug is enabled Eric Auger <eric.auger@xxxxxxxxxx> vhost: Allow null msg.size on VHOST_IOTLB_INVALIDATE Maximilian Heyne <mheyne@xxxxxxxxx> virtio-mmio: fix memory leak of vm_dev Gavin Shan <gshan@xxxxxxxxxx> virtio_balloon: Fix endless deflation and inflation on arm64 Rodríguez Barbarin, José Javier <JoseJavier.Rodriguez@xxxxxxxxxx> mcb-lpc: Reallocate memory region to avoid memory overlapping Rodríguez Barbarin, José Javier <JoseJavier.Rodriguez@xxxxxxxxxx> mcb: Return actual parsed size when reading chameleon table Paolo Abeni <pabeni@xxxxxxxxxx> mptcp: more conservative check for zero probes Eric Dumazet <edumazet@xxxxxxxxxx> tcp: cleanup tcp_remove_empty_skb() use Eric Dumazet <edumazet@xxxxxxxxxx> tcp: remove dead code from tcp_sendmsg_locked() Krzysztof Kozlowski <krzysztof.kozlowski@xxxxxxxxxx> pinctrl: qcom: lpass-lpi: fix concurrent register updates Johan Hovold <johan+linaro@xxxxxxxxxx> ASoC: codecs: wcd938x: fix runtime PM imbalance on remove Johan Hovold <johan+linaro@xxxxxxxxxx> ASoC: codecs: wcd938x: fix resource leaks on bind errors ------------- Diffstat: Makefile | 4 +- arch/powerpc/kernel/head_fsl_booke.S | 2 +- arch/powerpc/kernel/setup-common.c | 2 + arch/powerpc/mm/mem.c | 1 - arch/sparc/lib/checksum_32.S | 2 +- arch/x86/include/asm/i8259.h | 2 + arch/x86/include/asm/setup.h | 46 ++- arch/x86/kernel/acpi/boot.c | 3 + arch/x86/kernel/i8259.c | 38 +- arch/x86/kernel/setup.c | 5 - arch/x86/kernel/vmlinux.lds.S | 2 +- drivers/base/driver.c | 69 ++++ drivers/base/platform.c | 28 +- drivers/clk/clk.c | 21 +- drivers/dma/ste_dma40.c | 1 + drivers/firmware/imx/imx-dsp.c | 2 +- drivers/gpu/drm/amd/amdgpu/amdgpu.h | 1 + drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 19 + drivers/gpu/drm/amd/amdgpu/vi.c | 2 +- drivers/gpu/drm/drm_dp_mst_topology.c | 6 +- drivers/gpu/drm/i915/i915_pmu.c | 9 + drivers/gpu/drm/ttm/ttm_device.c | 8 +- drivers/i2c/busses/i2c-aspeed.c | 3 +- drivers/i2c/busses/i2c-stm32f7.c | 9 +- drivers/i2c/muxes/i2c-demux-pinctrl.c | 2 +- drivers/i2c/muxes/i2c-mux-gpmux.c | 2 +- drivers/i2c/muxes/i2c-mux-pinctrl.c | 2 +- drivers/iio/adc/exynos_adc.c | 24 +- drivers/iio/adc/xilinx-xadc-core.c | 39 +- drivers/iio/adc/xilinx-xadc.h | 2 + drivers/iio/afe/iio-rescale.c | 162 ++++++-- drivers/input/mouse/synaptics.c | 1 + drivers/input/rmi4/rmi_smbus.c | 50 +-- drivers/irqchip/irq-riscv-intc.c | 10 +- drivers/irqchip/irq-stm32-exti.c | 1 + drivers/mcb/mcb-lpc.c | 35 +- drivers/mcb/mcb-parse.c | 15 +- drivers/misc/fastrpc.c | 10 +- drivers/misc/pci_endpoint_test.c | 4 + drivers/net/ethernet/chelsio/cxgb4/t4_hw.c | 2 + drivers/net/ethernet/google/gve/gve_rx_dqo.c | 2 +- drivers/net/ethernet/intel/i40e/i40e.h | 2 +- drivers/net/ethernet/intel/i40e/i40e_txrx.c | 2 +- drivers/net/ethernet/intel/igb/igb_ethtool.c | 6 +- drivers/net/ethernet/intel/igc/igc_ethtool.c | 35 +- drivers/net/ethernet/realtek/r8169_main.c | 6 +- drivers/net/ethernet/toshiba/ps3_gelic_wireless.c | 2 +- drivers/net/gtp.c | 5 +- drivers/net/ieee802154/adf7242.c | 5 +- drivers/net/usb/r8152.c | 18 +- drivers/net/usb/smsc95xx.c | 4 +- drivers/nvmem/imx-ocotp.c | 6 +- drivers/pci/quirks.c | 8 +- drivers/pinctrl/qcom/pinctrl-lpass-lpi.c | 17 +- drivers/platform/mellanox/mlxbf-tmfifo.c | 21 +- drivers/rpmsg/qcom_glink_native.c | 2 + drivers/rpmsg/rpmsg_core.c | 37 +- drivers/rpmsg/rpmsg_internal.h | 5 +- drivers/rpmsg/rpmsg_ns.c | 4 +- drivers/scsi/mpt3sas/mpt3sas_scsih.c | 4 +- drivers/spi/spi-npcm-fiu.c | 5 +- drivers/tty/n_gsm.c | 2 + drivers/tty/serial/8250/8250_pci.c | 327 +++++++++++++++- drivers/usb/gadget/legacy/raw_gadget.c | 26 +- drivers/usb/storage/unusual_cypress.h | 2 +- drivers/usb/typec/tcpm/tcpm.c | 3 + drivers/vhost/vhost.c | 4 +- drivers/video/fbdev/aty/atyfb_base.c | 4 + drivers/video/fbdev/uvesafb.c | 2 +- drivers/virtio/virtio_balloon.c | 6 +- drivers/virtio/virtio_mmio.c | 19 +- fs/ext4/mballoc.c | 51 ++- fs/ext4/mballoc.h | 14 + fs/nfsd/vfs.c | 12 +- fs/ntfs3/attrib.c | 6 +- fs/ntfs3/attrlist.c | 15 +- fs/ntfs3/bitmap.c | 3 +- fs/ntfs3/dir.c | 6 +- fs/ntfs3/frecord.c | 8 +- fs/ntfs3/fslog.c | 6 +- fs/ntfs3/fsntfs.c | 13 +- fs/ntfs3/super.c | 2 +- include/linux/device/driver.h | 2 + include/linux/iio/afe/rescale.h | 36 ++ include/linux/kasan.h | 6 +- include/linux/pci_ids.h | 1 + include/linux/platform_device.h | 6 +- include/linux/rpmsg.h | 14 +- include/net/tcp.h | 2 +- include/uapi/linux/can/isotp.h | 25 +- include/uapi/linux/gtp.h | 2 +- kernel/events/core.c | 3 +- kernel/trace/trace_kprobe.c | 4 +- mm/kasan/report.c | 4 +- mm/migrate.c | 14 +- mm/page_alloc.c | 2 +- net/can/isotp.c | 438 ++++++++++++++-------- net/core/neighbour.c | 67 ++-- net/ipv4/tcp.c | 19 +- net/ipv4/tcp_input.c | 9 +- net/mptcp/protocol.c | 12 +- net/netfilter/nfnetlink_log.c | 2 +- net/sched/cls_u32.c | 2 +- net/vmw_vsock/virtio_transport.c | 215 +++++++---- sound/hda/intel-dsp-config.c | 6 + sound/soc/codecs/rt5645.c | 2 + sound/soc/codecs/wcd938x.c | 52 ++- sound/soc/generic/simple-card.c | 6 +- tools/objtool/check.c | 2 +- 109 files changed, 1648 insertions(+), 678 deletions(-)
