linux-oem-6.0 (6.0.0-1017.17) jammy; urgency=medium

  * jammy/linux-oem-6.0: 6.0.0-1017.17 -proposed tracker (LP: #2019649)

  * CVE-2023-26606
    - fs/ntfs3: Fix slab-out-of-bounds read in ntfs_trim_fs

  * CVE-2023-32233
    - netfilter: nf_tables: deactivate anonymous set from preparation phase

  * CVE-2023-2612
    - SAUCE: shiftfs: prevent lock unbalance in shiftfs_create_object()

  * CVE-2023-1670
    - xirc2ps_cs: Fix use after free bug in xirc2ps_detach

  * CVE-2023-30456
    - KVM: nVMX: add missing consistency checks for CR0 and CR4

 -- Timo Aaltonen <timo.aaltonen@canonical.com>  Thu, 18 May 2023 15:32:19 +0300

linux-oem-6.0 (6.0.0-1016.16) jammy; urgency=medium

  * jammy/linux-oem-6.0: 6.0.0-1016.16 -proposed tracker (LP: #2016550)

  * both dell_backlight and nvidia_0 backlight interface appear, and can't
    adjust the display  brightness (LP: #2017774)
    - ACPI: video: Add acpi_video_backlight_use_native() helper
    - ACPI: video: Drop backlight_device_get_by_type() call from
      acpi_video_get_backlight_type()
    - ACPI: video: Refactor acpi_video_get_backlight_type() a bit
    - ACPI: video: Make acpi_video_backlight_use_native() always return true
    - ACPI: video: Simplify __acpi_video_get_backlight_type()
    - ACPI: video: Prefer native over vendor

  * CVE-2022-4139
    - drm/i915: fix TLB invalidation for Gen12 video and compute engines

 -- Timo Aaltonen <timo.aaltonen@canonical.com>  Thu, 27 Apr 2023 13:15:34 +0300

linux-oem-6.0 (6.0.0-1015.15) jammy; urgency=medium

  * jammy/linux-oem-6.0: 6.0.0-1015.15 -proposed tracker (LP: #2016822)

  * CVE-2023-23455
    - net: sched: atm: dont intepret cls results when asked to drop

  * CVE-2023-26545
    - net: mpls: fix stale pointer if allocation fails during device rename

  * CVE-2023-1829
    - net/sched: Retire tcindex classifier
    - [Config]: Make sure CONFIG_NET_CLS_TCINDEX is not available

  * CVE-2023-1859
    - 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race
      condition

  * CVE-2023-0468
    - io_uring: update res mask in io_poll_check_events
    - io_uring: fix tw losing poll events
    - io_uring: cmpxchg for poll arm refs release
    - io_uring: make poll refs more robust
    - io_uring/poll: fix poll_refs race with cancelation

  * CVE-2023-0386
    - ovl: fail on invalid uid/gid mapping at copy up

  * Miscellaneous Ubuntu changes
    - [Config] Update gcc version

 -- Timo Aaltonen <timo.aaltonen@canonical.com>  Tue, 18 Apr 2023 16:01:23 +0300

linux-oem-6.0 (6.0.0-1014.14) jammy; urgency=medium

  * jammy/linux-oem-6.0: 6.0.0-1014.14 -proposed tracker (LP: #2011920)

  * CVE-2022-4382
    - USB: gadgetfs: Fix race between mounting and unmounting

  * CVE-2023-23559
    - wifi: rndis_wlan: Prevent buffer overflow in rndis_query_oid

  * CVE-2023-1118
    - media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()

  * CVE-2023-26605
    - fs: do not update freeing inode i_io_list

  * CVE-2023-26607
    - ntfs: fix out-of-bounds read in ntfs_attr_find()

  * CVE-2022-36280
    - drm/vmwgfx: Validate the box size for the snooped cursor

  * CVE-2023-1074
    - sctp: fail if no bound addresses can be used for a given scope

  * Packaging resync (LP: #1786013)
    - [Packaging] update helper scripts
    - [Packaging] update Ubuntu.md
    - [Packaging] update update.conf

 -- Manuel Diewald <manuel.diewald@canonical.com>  Fri, 31 Mar 2023 17:29:02 +0200

linux-oem-6.0 (6.0.0-1013.13) jammy; urgency=medium

  * jammy/linux-oem-6.0: 6.0.0-1013.13 -proposed tracker (LP: #2008351)

  * CVE-2023-1281
    - net/sched: tcindex: update imperfect hash filters respecting rcu

  * CVE-2023-1032
    - net: avoid double iput when sock_alloc_file fails

  * rtcpie in timers from ubuntu_kernel_selftests randomly failing
    (LP: #1814234)
    - SAUCE: selftest: rtcpie: Force passing unreliable subtest

  * CVE-2022-2196
    - KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS

  * Fix HFP mSBC support on Realtek Bluetooth USB controller (LP: #2007331)
    - Bluetooth: btrtl: Add btrealtek data struct
    - Bluetooth: btusb: Ignore zero length of USB packets on ALT 6 for specific
      chip

 -- Timo Aaltonen <timo.aaltonen@canonical.com>  Thu, 16 Mar 2023 17:59:47 +0200

linux-oem-6.0 (6.0.0-1012.12) jammy; urgency=medium

  * jammy/linux-oem-6.0: 6.0.0-1012.12 -proposed tracker (LP: #2004348)

  * CVE-2023-0469
    - io_uring/filetable: fix file reference underflow

  * LSM: Configuring Too Many LSMs Causes Kernel Panic on Boot (LP: #1987998)
    - SAUCE: LSM: Change Landlock from LSMBLOB_NEEDED to LSMBLOB_NOT_NEEDED

  * CVE-2023-0045
    - x86/bugs: Flush IBP in ib_prctl_set()

  * CVE-2022-47520
    - wifi: wilc1000: validate pairwise and authentication suite offsets

  * CVE-2022-3567
    - ipv6: Fix data races around sk->sk_prot.

  * CVE-2022-45934
    - Bluetooth: L2CAP: Fix u8 overflow

  * CVE-2022-42896
    - Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm

  * CVE-2022-43945
    - NFSD: Remove "inline" directives on op_rsize_bop helpers
    - NFSD: Cap rsize_bop result based on send buffer size

  * CVE-2022-20369
    - NFSD: fix use-after-free in __nfs42_ssc_open()

  * CVE-2023-0461
    - net/ulp: prevent ULP without clone op from entering the LISTEN status
    - net/ulp: use consistent error code when blocking ULP

  * Expose built-in trusted and revoked certificates (LP: #1996892)
    - [Packaging] Expose built-in trusted and revoked certificates

 -- Timo Aaltonen <timo.aaltonen@canonical.com>  Fri, 10 Feb 2023 12:37:27 +0200

linux-oem-6.0 (6.0.0-1011.11) jammy; urgency=medium

  * jammy/linux-oem-6.0: 6.0.0-1011.11 -proposed tracker (LP: #2001806)

  * jammy/linux-oem-6.0: 6.0.0-1011.11 -proposed tracker (LP: #2003453)

  * Revoke & rotate to new signing key (LP: #2002812)
    - [Packaging] Revoke and rotate to new signing key

  * Packaging resync (LP: #1786013)
    - debian/dkms-versions -- update from kernel-versions (main/2023.01.02)

  * Fix speaker mute hotkey doesn't work on Dell G16 series (LP: #2003161)
    - SAUCE: platform/x86: dell-wmi: Add a keymap for KEY_MUTE in type 0x0010
      table

  * CVE-2023-0179
    - netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits

  * Fix headset mic not working issue on Dell Latitude 5340 (LP: #2002013)
    - ALSA: hda - Enable headset mic on another Dell laptop with ALC3254

  * Mediatek FM350-GL wwan module failed to init: Invalid device status 0x1
    (LP: #2002089)
    - SAUCE: Revert "net: wwan: t7xx: Add AP CLDMA"
    - net: devlink: extend info_get() version put to indicate a flash component
    - SAUCE: net: wwan: t7xx: Add AP CLDMA
    - SAUCE: net: wwan: t7xx: Infrastructure for early port configuration
    - SAUCE: net: wwan: t7xx: PCIe reset rescan
    - SAUCE: net: wwan: t7xx: Enable devlink based fw flashing and coredump
      collection
    - SAUCE: net: wwan: t7xx: Devlink documentation

  * Fix flicker display problem on some panels which support PSR2 (LP: #2002968)
    - drm/i915/psr: Add continuous full frame bit together with single

 -- Timo Aaltonen <timo.aaltonen@canonical.com>  Mon, 23 Jan 2023 20:30:00 +0200

linux-oem-6.0 (6.0.0-1010.10) jammy; urgency=medium

  * jammy/linux-oem-6.0: 6.0.0-1010.10 -proposed tracker (LP: #2001070)

  * Microphone mute LED not working as expected after pressing the mic mute
    hotkey (LP: #2000909)
    - ALSA: hda/realtek: Apply dual codec fixup for Dell Latitude laptops

  * Soundwire support for the Intel RPL Gen 0C40/0C11 platforms (LP: #2000030)
    - SAUCE: ASoC: Intel: soc-acpi: add configuration for variant of 0C40 product
    - SAUCE: ASoC: Intel: soc-acpi: add configuration for variant of 0C11 product

  * Keeps rebooting with AMD W6400, W6600, and W6800 graphic cards
    (LP: #2000110)
    - drm/amdgpu: disable BACO support on more cards

  * Fix SUT can't displayed after resume from WB/CB with dGFX
    installed(FR:6/10)[RX6300][RX6500]  (LP: #1999836)
    - drm/amd/display: No display after resume from WB/CB

  * Soundwire support for the Intel RPL Gen platforms (LP: #1997944)
    - ASoC: Intel: soc-acpi-intel-rpl-match: add rpl_sdca_3_in_1 support
    - ASoC: Intel: sof_sdw: Add support for SKU 0C10 product
    - ASoC: Intel: soc-acpi: add SKU 0C10 SoundWire configuration
    - ASoC: Intel: sof_sdw: Add support for SKU 0C40 product
    - ASoC: Intel: soc-acpi: add SKU 0C40 SoundWire configuration
    - ASoC: Intel: sof_sdw: Add support for SKU 0C4F product
    - ASoC: rt1318: Add RT1318 SDCA vendor-specific driver
    - ASoC: intel: sof_sdw: add rt1318 codec support.
    - ASoC: Intel: sof_sdw: Add support for SKU 0C11 product
    - ASoC: Intel: soc-acpi: add SKU 0C11 SoundWire configuration
    - SAUCE: ASoC: Intel: soc-acpi: update codec addr on 0C11/0C4F product
    - [Config] enable CONFIG_SND_SOC_RT1318_SDW

  * Add additional Mediatek MT7922 BT device ID (LP: #1998885)
    - Bluetooth: btusb: Add a new VID/PID 0489/e0f2 for MT7922

  * Mute/mic LEDs no function on a HP platfrom (LP: #1998882)
    - ALSA: hda/realtek: fix mute/micmute LEDs for a HP ProBook

  * Enable Intel FM350 wwan CCCI driver port logging (LP: #1997686)
    - net: wwan: t7xx: use union to group port type specific data
    - net: wwan: t7xx: Add port for modem logging

  * CVE-2022-4378
    - proc: proc_skip_spaces() shouldn't think it is working on C strings
    - proc: avoid integer type confusion in get_proc_long

  * Add cs35l41 firmware loading support (LP: #1995957)
    - ALSA: hda/realtek: More robust component matching for CS35L41

 -- Timo Aaltonen <timo.aaltonen@canonical.com>  Wed, 04 Jan 2023 11:54:42 +0200

linux-oem-6.0 (6.0.0-1009.9) jammy; urgency=medium

  * jammy/linux-oem-6.0: 6.0.0-1009.9 -proposed tracker (LP: #1999041)

  * Support Intel IPU6 MIPI camera (LP: #1987595)
    - debian/dkms-versions -- manual update for IPU6/IVSC.

  * Gnome doesn't run smooth when performing normal usage with RPL-P CPU
    (LP: #1998419)
    - drm/i915/rpl-p: Add stepping info

  * Fix iosm: WWAN cannot build the connection (DW5823e) (LP: #1998115)
    - net: wwan: iosm: fix driver not working with INTEL_IOMMU disabled

  * Fix System cannot detect bluetooth after running suspend stress test
    (LP: #1998727)
    - wifi: rtw88: 8821c: enable BT device recovery mechanism

  * Rear Audio port sometimes has no audio output after reboot(Cirrus Logic)
    (LP: #1998905)
    - SAUCE: ALSA: hda/cirrus: Add extra 10 ms delay to allow PLL settle and lock.

 -- Timo Aaltonen <timo.aaltonen@canonical.com>  Wed, 07 Dec 2022 20:00:55 +0200

linux-oem-6.0 (6.0.0-1008.8) jammy; urgency=medium

  * jammy/linux-oem-6.0: 6.0.0-1008.8 -proposed tracker (LP: #1996347)

  * Packaging resync (LP: #1786013)
    - debian/dkms-versions -- update from kernel-versions (main/2022.11.14)

  * Fix a race condition with AMD PMF and Thinkpad-ACPI (LP: #1993242)
    - platform/x86/amd/pmf: Fix undefined reference to platform_profile
    - platform/x86/amd/pmf: Fix clang unused variable warning
    - platform/x86/amd/pmf: install notify handler after acpi init

  * Screen freeze after resuming from suspend (nvme0: I/O timeout)
    (LP: #1996048)
    - SAUCE: PCI: vmd: Disable MSI remapping after suspend

  *  Fibocom WWAN FM350-GL suspend error (notebook not suspend) (LP: #1990700)
    - net: wwan: t7xx: Add AP CLDMA

  * Add some ACPI device IDs for Intel HID device (LP: #1995453)
    - platform/x86/intel/hid: Add some ACPI device IDs

  * amd_sfh modprobe fails when no sensor reported from AMD MP2 (LP: #1993240)
    - HID: amd_sfh: Change dev_err to dev_dbg for additional debug info

  * Jammy update: v6.0.9 upstream stable release (LP: #1996785)
    - drm/i915/gvt: Add missing vfio_unregister_group_dev() call
    - m68k: Rework BI_VIRT_RNG_SEED as BI_RNG_SEED
    - KVM: debugfs: Return retval of simple_attr_open() if it fails
    - drm/i915: Allow more varied alternate fixed modes for panels
    - drm/i915: Simplify intel_panel_add_edid_alt_fixed_modes()
    - drm/i915/sdvo: Grab mode_config.mutex during LVDS init to avoid WARNs
    - drm/amd/display: Acquire FCLK DPM levels on DCN32
    - drm/amd/display: Limit dcn32 to 1950Mhz display clock
    - drm/amd/display: Set memclk levels to be at least 1 for dcn32
    - drm/amdkfd: handle CPU fault on COW mapping
    - drm/amdkfd: Fix NULL pointer dereference in svm_migrate_to_ram()
    - cxl/region: Recycle region ids
    - HID: wacom: Fix logic used for 3rd barrel switch emulation
    - hwspinlock: qcom: correct MMIO max register for newer SoCs
    - phy: stm32: fix an error code in probe
    - wifi: cfg80211: silence a sparse RCU warning
    - wifi: cfg80211: fix memory leak in query_regdb_file()
    - soundwire: qcom: reinit broadcast completion
    - soundwire: qcom: check for outanding writes before doing a read
    - ALSA: arm: pxa: pxa2xx-ac97-lib: fix return value check of
      platform_get_irq()
    - spi: mediatek: Fix package division error
    - bpf, verifier: Fix memory leak in array reallocation for stack state
    - bpf, sockmap: Fix the sk->sk_forward_alloc warning of sk_stream_kill_queues
    - wifi: mac80211: fix general-protection-fault in ieee80211_subif_start_xmit()
    - wifi: mac80211: Set TWT Information Frame Disabled bit as 1
    - bpftool: Fix NULL pointer dereference when pin {PROG, MAP, LINK} without
      FILE
    - HID: hyperv: fix possible memory leak in mousevsc_probe()
    - drm/vc4: hdmi: Fix HSM clock too low on Pi4
    - bpf, sock_map: Move cancel_work_sync() out of sock lock
    - PCI: hv: Fix the definition of vector in hv_compose_msi_msg()
    - bpf: Add helper macro bpf_for_each_reg_in_vstate
    - bpf: Fix wrong reg type conversion in release_reference()
    - net: gso: fix panic on frag_list with mixed head alloc types
    - macsec: delete new rxsc when offload fails
    - macsec: fix secy->n_rx_sc accounting
    - macsec: fix detection of RXSCs when toggling offloading
    - macsec: clear encryption keys from the stack after setting up offload
    - octeontx2-pf: NIX TX overwrites SQ_CTX_HW_S[SQ_INT]
    - net: tun: Fix memory leaks of napi_get_frags
    - bnxt_en: Fix possible crash in bnxt_hwrm_set_coal()
    - bnxt_en: fix potentially incorrect return value for ndo_rx_flow_steer
    - net: fman: Unregister ethernet device on removal
    - capabilities: fix undefined behavior in bit shift for CAP_TO_MASK
    - phy: ralink: mt7621-pci: add sentinel to quirks table
    - KVM: s390: pv: don't allow userspace to set the clock under PV
    - KVM: s390: pci: Fix allocation size of aift kzdev elements
    - net: lapbether: fix issue of dev reference count leakage in
      lapbeth_device_event()
    - hamradio: fix issue of dev reference count leakage in bpq_device_event()
    - net: wwan: iosm: fix memory leak in ipc_wwan_dellink
    - net: wwan: mhi: fix memory leak in mhi_mbim_dellink
    - drm/vc4: Fix missing platform_unregister_drivers() call in
      vc4_drm_register()
    - tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
    - platform/x86: p2sb: Don't fail if unknown CPU is found
    - ipv6: addrlabel: fix infoleak when sending struct ifaddrlblmsg to network
    - can: af_can: fix NULL pointer dereference in can_rx_register()
    - drm/i915/psr: Send update also on invalidate
    - drm/i915: Do not set cache_dirty for DGFX
    - net: stmmac: dwmac-meson8b: fix meson8b_devm_clk_prepare_enable()
    - dt-bindings: net: tsnep: Fix typo on generic nvmem property
    - net: broadcom: Fix BCMGENET Kconfig
    - tipc: fix the msg->req tlv len check in
      tipc_nl_compat_name_table_dump_header
    - dmaengine: pxa_dma: use platform_get_irq_optional
    - dmanegine: idxd: reformat opcap output to match bitmap_parse() input
    - dmaengine: idxd: Fix max batch size for Intel IAA
    - dmaengine: idxd: fix RO device state error after been disabled/reset
    - dmaengine: apple-admac: Fix grabbing of channels in of_xlate
    - dmaengine: mv_xor_v2: Fix a resource leak in mv_xor_v2_remove()
    - dmaengine: ti: k3-udma-glue: fix memory leak when register device fail
    - dmaengine: stm32-dma: fix potential race between pause and resume
    - net: lapbether: fix issue of invalid opcode in lapbeth_open()
    - net: ethernet: mtk-star-emac: disable napi when connect and start PHY failed
      in mtk_star_enable()
    - octeontx2-pf: Fix SQE threshold checking
    - drivers: net: xgene: disable napi when register irq failed in
      xgene_enet_open()
    - perf stat: Fix crash with --per-node --metric-only in CSV mode
    - perf stat: Fix printing os->prefix in CSV metrics output
    - perf test: Fix skipping branch stack sampling test
    - perf tools: Add the include/perf/ directory to .gitignore
    - netfilter: nfnetlink: fix potential dead lock in nfnetlink_rcv_msg()
    - netfilter: Cleanup nft_net->module_list from nf_tables_exit_net()
    - net: marvell: prestera: fix memory leak in prestera_rxtx_switch_init()
    - net: tun: call napi_schedule_prep() to ensure we own a napi
    - net: nixge: disable napi when enable interrupts failed in nixge_open()
    - net: wwan: iosm: fix memory leak in ipc_pcie_read_bios_cfg
    - net: wwan: iosm: fix invalid mux header type
    - net/mlx5: Bridge, verify LAG state when adding bond to bridge
    - net/mlx5: Allow async trigger completion execution on single CPU systems
    - net/mlx5: E-switch, Set to legacy mode if failed to change switchdev mode
    - net/mlx5: fw_reset: Don't try to load device in case PCI isn't working
    - net/mlx5e: Add missing sanity checks for max TX WQE size
    - net/mlx5e: Fix tc acts array not to be dependent on enum order
    - net/mlx5e: TC, Fix wrong rejection of packet-per-second policing
    - net/mlx5e: E-Switch, Fix comparing termination table instance
    - ice: Fix spurious interrupt during removal of trusted VF
    - iavf: Fix VF driver counting VLAN 0 filters
    - net: cpsw: disable napi in cpsw_ndo_open()
    - net: cxgb3_main: disable napi when bind qsets failed in cxgb_up()
    - stmmac: intel: Update PCH PTP clock rate from 200MHz to 204.8MHz
    - mctp: Fix an error handling path in mctp_init()
    - cxgb4vf: shut down the adapter when t4vf_update_port_info() failed in
      cxgb4vf_open()
    - stmmac: dwmac-loongson: fix missing pci_disable_msi() while module exiting
    - stmmac: dwmac-loongson: fix missing pci_disable_device() in
      loongson_dwmac_probe()
    - stmmac: dwmac-loongson: fix missing of_node_put() while module exiting
    - net: phy: mscc: macsec: clear encryption keys when freeing a flow
    - net: atlantic: macsec: clear encryption keys from the stack
    - ethernet: s2io: disable napi when start nic failed in s2io_card_up()
    - net: mv643xx_eth: disable napi when init rxq or txq failed in
      mv643xx_eth_open()
    - ALSA: memalloc: Don't fall back for SG-buffer with IOMMU
    - ethernet: tundra: free irq when alloc ring failed in tsi108_open()
    - net: macvlan: fix memory leaks of macvlan_common_newlink
    - riscv: process: fix kernel info leakage
    - riscv: vdso: fix build with llvm
    - riscv: fix reserved memory setup
    - eth: sp7021: drop free_netdev() from spl2sw_init_netdev()
    - arm64: efi: Fix handling of misaligned runtime regions and drop warning
    - MIPS: jump_label: Fix compat branch range check
    - drm/amdgpu: Fix the lpfn checking condition in drm buddy
    - mmc: cqhci: Provide helper for resetting both SDHCI and CQHCI
    - mmc: sdhci-of-arasan: Fix SDHCI_RESET_ALL for CQHCI
    - mmc: sdhci-brcmstb: Fix SDHCI_RESET_ALL for CQHCI
    - mmc: sdhci_am654: Fix SDHCI_RESET_ALL for CQHCI
    - mmc: sdhci-tegra: Fix SDHCI_RESET_ALL for CQHCI
    - mmc: sdhci-esdhc-imx: use the correct host caps for MMC_CAP_8_BIT_DATA
    - ALSA: hda/hdmi - enable runtime pm for more AMD display audio
    - ALSA: hda/ca0132: add quirk for EVGA Z390 DARK
    - ALSA: hda: fix potential memleak in 'add_widget_node'
    - ALSA: hda/realtek: Add quirk for ASUS Zenbook using CS35L41
    - ALSA: hda/realtek: Add Positivo C6300 model quirk
    - ALSA: usb-audio: Yet more regression for for the delayed card registration
    - ALSA: usb-audio: Add quirk entry for M-Audio Micro
    - ALSA: usb-audio: Add DSD support for Accuphase DAC-60
    - vmlinux.lds.h: Fix placement of '.data..decrypted' section
    - ata: libata-scsi: fix SYNCHRONIZE CACHE (16) command failure
    - nilfs2: fix deadlock in nilfs_count_free_blocks()
    - nilfs2: fix use-after-free bug of ns_writer on remount
    - drm/i915/dmabuf: fix sg_table handling in map_dma_buf
    - drm/amd/display: Fix reg timeout in enc314_enable_fifo
    - drm/amd/pm: update SMU IP v13.0.4 msg interface header
    - drm/amd/display: Update SR watermarks for DCN314
    - drm/amdgpu: workaround for TLB seq race
    - drm/amdgpu: disable BACO on special BEIGE_GOBY card
    - drm/amdkfd: Fix error handling in criu_checkpoint
    - drm/amdkfd: Fix error handling in kfd_criu_restore_events
    - platform/x86: hp_wmi: Fix rfkill causing soft blocked wifi
    - wifi: ath11k: avoid deadlock during regulatory update in
      ath11k_regd_update()
    - btrfs: fix match incorrectly in dev_args_match_device
    - btrfs: selftests: fix wrong error check in btrfs_free_dummy_root()
    - btrfs: zoned: clone zoned device info when cloning a device
    - btrfs: zoned: initialize device's zone info for seeding
    - io_uring: check for rollover of buffer ID when providing buffers
    - phy: qcom-qmp-combo: fix NULL-deref on runtime resume
    - net: ethernet: ti: am65-cpsw: Fix segmentation fault at module unload
    - mms: sdhci-esdhc-imx: Fix SDHCI_RESET_ALL for CQHCI
    - udf: Fix a slab-out-of-bounds write bug in udf_find_entry()
    - spi: intel: Use correct mask for flash and protected regions
    - arch/x86/mm/hugetlbpage.c: pud_huge() returns 0 when using 2-level paging
    - mm: hugetlb_vmemmap: include missing linux/moduleparam.h
    - dmaengine: idxd: Do not enable user type Work Queue without Shared Virtual
      Addressing
    - mm/damon/dbgfs: check if rm_contexts input is for a real context
    - mm/memremap.c: map FS_DAX device memory as decrypted
    - mm/shmem: use page_mapping() to detect page cache for uffd continue
    - can: j1939: j1939_send_one(): fix missing CAN header initialization
    - can: isotp: fix tx state handling for echo tx processing
    - can: rcar_canfd: Add missing ECC error checks for channels 2-7
    - KVM: x86/mmu: Block all page faults during kvm_zap_gfn_range()
    - KVM: x86/pmu: Do not speculatively query Intel GP PMCs that don't exist yet
    - KVM: x86: use a separate asm-offsets.c file
    - KVM: SVM: replace regs argument of __svm_vcpu_run() with vcpu_svm
    - KVM: SVM: adjust register allocation for __svm_vcpu_run()
    - KVM: SVM: Only dump VMSA to klog at KERN_DEBUG level
    - KVM: SVM: retrieve VMCB from assembly
    - KVM: SVM: move guest vmsave/vmload back to assembly
    - can: dev: fix skb drop check
    - dmaengine: at_hdmac: Fix at_lli struct definition
    - dmaengine: at_hdmac: Don't start transactions at tx_submit level
    - dmaengine: at_hdmac: Start transfer for cyclic channels in issue_pending
    - dmaengine: at_hdmac: Fix premature completion of desc in issue_pending
    - dmaengine: at_hdmac: Do not call the complete callback on
      device_terminate_all
    - dmaengine: at_hdmac: Protect atchan->status with the channel lock
    - dmaengine: at_hdmac: Fix concurrency problems by removing atc_complete_all()
    - dmaengine: at_hdmac: Fix concurrency over descriptor
    - dmaengine: at_hdmac: Free the memset buf without holding the chan lock
    - dmaengine: at_hdmac: Fix concurrency over the active list
    - dmaengine: at_hdmac: Fix descriptor handling when issuing it to hardware
    - dmaengine: at_hdmac: Fix completion of unissued descriptor in case of errors
    - dmaengine: at_hdmac: Don't allow CPU to reorder channel enable
    - dmaengine: at_hdmac: Fix impossible condition
    - dmaengine: at_hdmac: Check return code of dma_async_device_register
    - drm/amdkfd: Migrate in CPU page fault use current mm
    - ALSA: memalloc: Try dma_alloc_noncontiguous() at first
    - x86/cpu: Restore AMD's DE_CFG MSR after resume
    - Linux 6.0.9
    - Upstream stable to v6.0.9

  * Jammy update: v6.0.8 upstream stable release (LP: #1996783)
    - usb: dwc3: gadget: Force sending delayed status during soft disconnect
    - usb: dwc3: gadget: Don't delay End Transfer on delayed_status
    - RDMA/cma: Use output interface for net_dev check
    - IB/hfi1: Correctly move list in sc_disable()
    - RDMA/hns: Disable local invalidate operation
    - RDMA/hns: Fix NULL pointer problem in free_mr_init()
    - docs/process/howto: Replace C89 with C11
    - RDMA/rxe: Fix mr leak in RESPST_ERR_RNR
    - NFSv4: Fix a potential state reclaim deadlock
    - NFSv4.1: Handle RECLAIM_COMPLETE trunking errors
    - NFSv4.1: We must always send RECLAIM_COMPLETE after a reboot
    - SUNRPC: Fix null-ptr-deref when xps sysfs alloc failed
    - NFSv4.2: Fixup CLONE dest file size for zero-length count
    - nfs4: Fix kmemleak when allocate slot failed
    - net: dsa: Fix possible memory leaks in dsa_loop_init()
    - RDMA/core: Fix null-ptr-deref in ib_core_cleanup()
    - RDMA/qedr: clean up work queue on failure in qedr_alloc_resources()
    - tools/nolibc: Fix missing strlen() definition and infinite loop with gcc-12
    - net: dsa: fall back to default tagger if we can't load the one from DT
    - nfc: fdp: Fix potential memory leak in fdp_nci_send()
    - nfc: nxp-nci: Fix potential memory leak in nxp_nci_send()
    - nfc: s3fwrn5: Fix potential memory leak in s3fwrn5_nci_send()
    - nfc: nfcmrvl: Fix potential memory leak in nfcmrvl_i2c_nci_send()
    - net: fec: fix improper use of NETDEV_TX_BUSY
    - ata: pata_legacy: fix pdc20230_set_piomode()
    - ata: palmld: fix return value check in palmld_pata_probe()
    - net: sched: Fix use after free in red_enqueue()
    - net: tun: fix bugs for oversize packet when napi frags enabled
    - netfilter: nf_tables: netlink notifier might race to release objects
    - netfilter: nf_tables: release flow rule object from commit path
    - sfc: Fix an error handling path in efx_pci_probe()
    - nfsd: fix nfsd_file_unhash_and_dispose
    - nfsd: fix net-namespace logic in __nfsd_file_cache_purge
    - net: lan966x: Fix the MTU calculation
    - net: lan966x: Adjust maximum frame size when vlan is enabled/disabled
    - net: lan966x: Fix FDMA when MTU is changed
    - net: lan966x: Fix unmapping of received frames using FDMA
    - ipvs: use explicitly signed chars
    - ipvs: fix WARNING in __ip_vs_cleanup_batch()
    - ipvs: fix WARNING in ip_vs_app_net_cleanup()
    - rose: Fix NULL pointer dereference in rose_send_frame()
    - mISDN: fix possible memory leak in mISDN_register_device()
    - isdn: mISDN: netjet: fix wrong check of device registration
    - btrfs: fix inode list leak during backref walking at resolve_indirect_refs()
    - btrfs: fix inode list leak during backref walking at find_parent_nodes()
    - btrfs: fix ulist leaks in error paths of qgroup self tests
    - netfilter: ipset: enforce documented limit to prevent allocating huge memory
    - Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu
    - Bluetooth: hci_conn: Fix CIS connection dst_type handling
    - Bluetooth: virtio_bt: Use skb_put to set length
    - Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
    - Bluetooth: L2CAP: Fix memory leak in vhci_write
    - Bluetooth: hci_conn: Fix not restoring ISO buffer count on disconnect
    - net: mdio: fix undefined behavior in bit shift for __mdiobus_register
    - ibmvnic: Free rwi on reset success
    - stmmac: dwmac-loongson: fix invalid mdio_node
    - net/smc: Fix possible leaked pernet namespace in smc_init()
    - net, neigh: Fix null-ptr-deref in neigh_table_clear()
    - bridge: Fix flushing of dynamic FDB entries
    - ipv6: fix WARNING in ip6_route_net_exit_late()
    - vsock: fix possible infinite sleep in vsock_connectible_wait_data()
    - iio: adc: stm32-adc: fix channel sampling time init
    - media: rkisp1: Fix source pad format configuration
    - media: rkisp1: Don't pass the quantization to rkisp1_csm_config()
    - media: rkisp1: Initialize color space on resizer sink and source pads
    - media: rkisp1: Use correct macro for gradient registers
    - media: rkisp1: Zero v4l2_subdev_format fields in when validating links
    - media: s5p_cec: limit msg.len to CEC_MAX_MSG_SIZE
    - media: cros-ec-cec: limit msg.len to CEC_MAX_MSG_SIZE
    - media: dvb-frontends/drxk: initialize err to 0
    - media: platform: cros-ec: Add Kuldax to the match table
    - media: meson: vdec: fix possible refcount leak in vdec_probe()
    - media: hantro: Store HEVC bit depth in context
    - media: hantro: HEVC: Fix auxilary buffer size calculation
    - media: hantro: HEVC: Fix chroma offset computation
    - media: v4l: subdev: Fail graciously when getting try data for NULL state
    - drm/vc4: hdmi: Check the HSM rate at runtime_resume
    - ACPI: APEI: Fix integer overflow in ghes_estatus_pool_init()
    - hwrng: bcm2835 - use hwrng_msleep() instead of cpu_relax()
    - io_uring: don't iopoll from io_ring_ctx_wait_and_kill()
    - scsi: core: Restrict legal sdev_state transitions via sysfs
    - HID: saitek: add madcatz variant of MMO7 mouse device ID
    - drm/amdgpu: set vm_update_mode=0 as default for Sienna Cichlid in SRIOV case
    - drm/amd/pm: skip loading pptable from driver on secure board for
      smu_v13_0_10
    - drm/amdkfd: Fix type of reset_type parameter in hqd_destroy() callback
    - drm/amdgpu: Program GC registers through RLCG interface in gfx_v11/gmc_v11
    - drm/amdgpu: dequeue mes scheduler during fini
    - nvme-pci: disable write zeroes on various Kingston SSD
    - i2c: xiic: Add platform module alias
    - bio: safeguard REQ_ALLOC_CACHE bio put
    - clk: rs9: Fix I2C accessors
    - arm64: dts: imx8mm: Enable CPLD_Dn pull down resistor on MX8Menlo
    - efi/tpm: Pass correct address to memblock_reserve
    - clk: renesas: r8a779g0: Fix HSCIF parent clocks
    - clk: qcom: Update the force mem core bit for GPU clocks
    - arm64: dts: verdin-imx8mp: fix ctrl_sleep_moci
    - arm64: dts: imx8mm: remove otg1/2 power domain dependency on hsio
    - arm64: dts: imx8mm: correct usb power domains
    - arm64: dts: imx8mn: remove otg1 power domain dependency on hsio
    - arm64: dts: imx8mn: Correct the usb power domain
    - ARM: dts: imx6qdl-gw59{10,13}: fix user pushbutton GPIO offset
    - arm64: dts: imx8: correct clock order
    - arm64: dts: imx93: add gpio clk
    - arm64: dts: imx93: correct gpio-ranges
    - arm64: dts: lx2160a: specify clock frequencies for the MDIO controllers
    - arm64: dts: ls1088a: specify clock frequencies for the MDIO controllers
    - arm64: dts: ls208xa: specify clock frequencies for the MDIO controllers
    - drm/rockchip: dw_hdmi: filter regulator -EPROBE_DEFER error messages
    - drm/rockchip: fix fbdev on non-IOMMU devices
    - drm/i915: stop abusing swiotlb_max_segment
    - ublk_drv: return flag of UBLK_F_URING_CMD_COMP_IN_TASK in case of module
    - block: Fix possible memory leak for rq_wb on add_disk failure
    - blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
    - ARM: dts: ux500: Add trips to battery thermal zones
    - firmware: arm_scmi: Suppress the driver's bind attributes
    - firmware: arm_scmi: Make Rx chan_setup fail on memory errors
    - firmware: arm_scmi: Fix devres allocation device in virtio transport
    - firmware: arm_scmi: Fix deferred_tx_wq release on error paths
    - arm64: dts: juno: Add thermal critical trip points
    - i2c: piix4: Fix adapter not be removed in piix4_remove()
    - Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM
    - Bluetooth: L2CAP: Fix attempting to access uninitialized memory
    - fscrypt: stop using keyrings subsystem for fscrypt_master_key
    - fscrypt: fix keyring memory leak on mount failure
    - clk: renesas: r8a779g0: Add SASYNCPER clocks
    - btrfs: fix lost file sync on direct IO write with nowait and dsync iocb
    - btrfs: fix tree mod log mishandling of reallocated nodes
    - btrfs: fix type of parameter generation in btrfs_get_dentry
    - btrfs: don't use btrfs_chunk::sub_stripes from disk
    - btrfs: fix a memory allocation failure test in btrfs_submit_direct
    - ACPI: NUMA: Add CXL CFMWS 'nodes' to the possible nodes set
    - cxl/pmem: Fix cxl_pmem_region and cxl_memdev leak
    - cxl/region: Fix decoder allocation crash
    - cxl/region: Fix region HPA ordering validation
    - cxl/region: Fix cxl_region leak, cleanup targets at region delete
    - cxl/region: Fix 'distance' calculation with passthrough ports
    - ftrace: Fix use-after-free for dynamic ftrace_ops
    - tracing/fprobe: Fix to check whether fprobe is registered correctly
    - fprobe: Check rethook_alloc() return in rethook initialization
    - tracing: kprobe: Fix memory leak in test_gen_kprobe/kretprobe_cmd()
    - kprobe: reverse kp->flags when arm_kprobe failed
    - ring-buffer: Check for NULL cpu_buffer in ring_buffer_wake_waiters()
    - tools/nolibc/string: Fix memcmp() implementation
    - tracing/histogram: Update document for KEYS_MAX size
    - capabilities: fix potential memleak on error path from vfs_getxattr_alloc()
    - fuse: add file_modified() to fallocate
    - fuse: fix readdir cache race
    - selftests/landlock: Build without static libraries
    - efi: random: reduce seed size to 32 bytes
    - efi: random: Use 'ACPI reclaim' memory for random seed
    - efi: efivars: Fix variable writes with unsupported query_variable_store()
    - net/ulp: remove SOCK_SUPPORT_ZC from tls sockets
    - arm64: entry: avoid kprobe recursion
    - ARM: dts: imx6dl-yapp4: Do not allow PM to switch PU regulator off on Q/QP
    - perf/x86/intel: Fix pebs event constraints for ICL
    - perf/x86/intel: Add Cooper Lake stepping to isolation_ucodes[]
    - perf/x86/intel: Fix pebs event constraints for SPR
    - net: remove SOCK_SUPPORT_ZC from sockmap
    - net: also flag accepted sockets supporting msghdr originated zerocopy
    - parisc: Make 8250_gsc driver dependend on CONFIG_PARISC
    - parisc: Export iosapic_serial_irq() symbol for serial port driver
    - parisc: Avoid printing the hardware path twice
    - ext4: fix warning in 'ext4_da_release_space'
    - ext4: fix BUG_ON() when directory entry has invalid rec_len
    - ext4: update the backup superblock's at the end of the online resize
    - x86/tdx: Prepare for using "INFO" call for a second purpose
    - x86/tdx: Panic on bad configs that #VE on "private" memory access
    - x86/syscall: Include asm/ptrace.h in syscall_wrapper header
    - KVM: x86: Mask off reserved bits in CPUID.80000006H
    - KVM: x86: Mask off reserved bits in CPUID.8000001AH
    - KVM: x86: Mask off reserved bits in CPUID.80000008H
    - KVM: x86: Mask off reserved bits in CPUID.80000001H
    - KVM: x86: Mask off reserved bits in CPUID.8000001FH
    - KVM: VMX: Advertise PMU LBRs if and only if perf supports LBRs
    - KVM: VMX: Fold vmx_supported_debugctl() into vcpu_supported_debugctl()
    - KVM: VMX: Ignore guest CPUID for host userspace writes to DEBUGCTL
    - KVM: VMX: fully disable SGX if SECONDARY_EXEC_ENCLS_EXITING unavailable
    - KVM: Initialize gfn_to_pfn_cache locks in dedicated helper
    - KVM: Reject attempts to consume or refresh inactive gfn_to_pfn_cache
    - KVM: arm64: Fix bad dereference on MTE-enabled systems
    - KVM: arm64: Fix SMPRI_EL1/TPIDR2_EL0 trapping on VHE
    - KVM: x86: smm: number of GPRs in the SMRAM image depends on the image format
    - KVM: x86: emulator: em_sysexit should update ctxt->mode
    - KVM: x86: emulator: introduce emulator_recalc_and_set_mode
    - KVM: x86: emulator: update the emulation mode after rsm
    - KVM: x86: emulator: update the emulation mode after CR0 write
    - ext4,f2fs: fix readahead of verity data
    - cifs: fix regression in very old smb1 mounts
    - drm/rockchip: dsi: Clean up 'usage_mode' when failing to attach
    - drm/rockchip: dsi: Force synchronous probe
    - drm/amdgpu: disable GFXOFF during compute for GFX11
    - drm/amd/display: Update latencies on DCN321
    - drm/amd/display: Update DSC capabilitie for DCN314
    - drm/i915/sdvo: Filter out invalid outputs more sensibly
    - drm/i915/sdvo: Setup DDC fully before output init
    - wifi: brcmfmac: Fix potential buffer overflow in brcmf_fweh_event_worker()
    - Linux 6.0.8
    - Upstream stable to v6.0.8

  * Jammy update: v6.0.7 upstream stable release (LP: #1996084)
    - platform/x86/amd: pmc: remove CONFIG_DEBUG_FS checks
    - can: j1939: transport: j1939_session_skb_drop_old():
      spin_unlock_irqrestore() before kfree_skb()
    - can: kvaser_usb: Fix possible completions during init_completion
    - can: rcar_canfd: rcar_canfd_handle_global_receive(): fix IRQ storm on global
      FIFO receive
    - can: rcar_canfd: fix channel specific IRQ handling for RZ/G2L
    - ALSA: Use del_timer_sync() before freeing timer
    - ALSA: hda/realtek: Add quirk for ASUS Zenbook using CS35L41
    - ALSA: usb-audio: Add quirks for M-Audio Fast Track C400/600
    - ALSA: hda/realtek: Add another HP ZBook G9 model quirks
    - ALSA: control: add snd_ctl_rename()
    - ALSA: hda/realtek: Use snd_ctl_rename() to rename a control
    - ALSA: emu10k1: Use snd_ctl_rename() to rename a control
    - ALSA: ac97: Use snd_ctl_rename() to rename a control
    - ALSA: usb-audio: Use snd_ctl_rename() to rename a control
    - ALSA: ca0106: Use snd_ctl_rename() to rename a control
    - ALSA: au88x0: use explicitly signed char
    - ALSA: rme9652: use explicitly signed char
    - USB: add RESET_RESUME quirk for NVIDIA Jetson devices in RCM
    - usb: gadget: uvc: limit isoc_sg to super speed gadgets
    - Revert "usb: gadget: uvc: limit isoc_sg to super speed gadgets"
    - usb: gadget: uvc: fix dropped frame after missed isoc
    - usb: gadget: uvc: fix sg handling in error case
    - usb: gadget: uvc: fix sg handling during video encode
    - usb: gadget: aspeed: Fix probe regression
    - usb: dwc3: gadget: Stop processing more requests on IMI
    - usb: dwc3: gadget: Don't set IMI for no_interrupt
    - usb: dwc3: gadget: Force sending delayed status during soft disconnect
    - usb: dwc3: gadget: Don't delay End Transfer on delayed_status
    - usb: typec: ucsi: Check the connection on resume
    - usb: typec: ucsi: acpi: Implement resume callback
    - usb: dwc3: st: Rely on child's compatible instead of name
    - usb: dwc3: Don't switch OTG -> peripheral if extcon is present
    - usb: bdc: change state when port disconnected
    - usb: xhci: add XHCI_SPURIOUS_SUCCESS to ASM1042 despite being a V0.96
      controller
    - mtd: rawnand: tegra: Fix PM disable depth imbalance in probe
    - mtd: spi-nor: core: Ignore -ENOTSUPP in spi_nor_init()
    - mtd: parsers: bcm47xxpart: Fix halfblock reads
    - mtd: rawnand: marvell: Use correct logic for nand-keep-config
    - squashfs: fix read regression introduced in readahead code
    - squashfs: fix extending readahead beyond end of file
    - squashfs: fix buffer release race condition in readahead code
    - xhci: Add quirk to reset host back to default state at shutdown
    - xhci-pci: Set runtime PM as default policy on all xHC 1.2 or later devices
    - xhci: Remove device endpoints from bandwidth list when freeing the device
    - tools: iio: iio_utils: fix digit calculation
    - iio: light: tsl2583: Fix module unloading
    - iio: temperature: ltc2983: allocate iio channels once
    - iio: adxl372: Fix unsafe buffer attributes
    - iio: adxl367: Fix unsafe buffer attributes
    - fbdev: stifb: Fall back to cfb_fillrect() on 32-bit HCRX cards
    - fbdev: smscufx: Fix several use-after-free bugs
    - cpufreq: intel_pstate: Read all MSRs on the target CPU
    - cpufreq: intel_pstate: hybrid: Use known scaling factor for P-cores
    - fs/binfmt_elf: Fix memory leak in load_elf_binary()
    - exec: Copy oldsighand->action under spin-lock
    - mac802154: Fix LQI recording
    - scsi: qla2xxx: Use transport-defined speed mask for supported_speeds
    - drm/amdgpu: Fix VRAM BO swap issue
    - drm/amdgpu: Fix for BO move issue
    - drm/i915: Extend Wa_1607297627 to Alderlake-P
    - drm/amdgpu: Remove ATC L2 access for MMHUB 2.1.x
    - drm/amdgpu: disallow gfxoff until GC IP blocks complete s2idle resume
    - drm/amdgpu: fix pstate setting issue
    - drm/amd/display: Revert logic for plane modifiers
    - drm/amdkfd: update gfx1037 Lx cache setting
    - drm/amdkfd: correct the cache info for gfx1036
    - drm/msm: fix use-after-free on probe deferral
    - drm/msm/dsi: fix memory corruption with too many bridges
    - drm/msm/hdmi: fix memory corruption with too many bridges
    - drm/msm/hdmi: fix IRQ lifetime
    - drm/msm/dp: fix memory corruption with too many bridges
    - drm/msm/dp: fix aux-bus EP lifetime
    - drm/msm/dp: fix IRQ lifetime
    - drm/msm/dp: fix bridge lifetime
    - crypto: x86/polyval - Fix crashes when keys are not 16-byte aligned
    - random: use arch_get_random*_early() in random_init()
    - coresight: cti: Fix hang in cti_disable_hw()
    - mmc: sdhci_am654: 'select', not 'depends' REGMAP_MMIO
    - mmc: block: Remove error check of hw_reset on reset
    - mmc: queue: Cancel recovery work on cleanup
    - mmc: core: Fix kernel panic when remove non-standard SDIO card
    - mmc: core: Fix WRITE_ZEROES CQE handling
    - mmc: sdhci-pci-core: Disable ES for ASUS BIOS on Jasper Lake
    - mmc: sdhci-esdhc-imx: Propagate ESDHC_FLAG_HS400* only on 8bit bus
    - counter: microchip-tcb-capture: Handle Signal1 read and Synapse
    - counter: 104-quad-8: Fix race getting function mode and direction
    - mm/uffd: fix vma check on userfault for wp
    - mm: migrate: fix return value if all subpages of THPs are migrated
      successfully
    - mm,madvise,hugetlb: fix unexpected data loss with MADV_DONTNEED on hugetlbfs
    - mm/kmemleak: prevent soft lockup in kmemleak_scan()'s object iteration loops
    - mm/huge_memory: do not clobber swp_entry_t during THP split
    - mm: prep_compound_tail() clear page->private
    - kernfs: fix use-after-free in __kernfs_remove
    - Revert "dt-bindings: pinctrl-zynqmp: Add output-enable configuration"
    - pinctrl: Ingenic: JZ4755 bug fixes
    - Revert "pinctrl: pinctrl-zynqmp: Add support for output-enable and bias-
      high-impedance"
    - ARC: mm: fix leakage of memory allocated for PTE
    - perf auxtrace: Fix address filter symbol name match for modules
    - s390/boot: add secure boot trailer
    - s390/cio: fix out-of-bounds access on cio_ignore free
    - s390/uaccess: add missing EX_TABLE entries to __clear_user()
    - s390/futex: add missing EX_TABLE entry to __futex_atomic_op()
    - s390/pci: add missing EX_TABLE entries to
      __pcistg_mio_inuser()/__pcilg_mio_inuser()
    - ethtool: eeprom: fix null-deref on genl_info in dump
    - fbdev/core: Avoid uninitialized read in
      aperture_remove_conflicting_pci_device()
    - ACPI: PCC: Fix unintentional integer overflow
    - powerpc/64s/interrupt: Fix clear of PACA_IRQS_HARD_DIS when returning to
      soft-masked context
    - net: ieee802154: fix error return code in dgram_bind()
    - media: amphion: release m2m ctx when releasing vpu instance
    - media: v4l2: Fix v4l2_i2c_subdev_set_name function documentation
    - media: ar0521: fix error return code in ar0521_power_on()
    - media: ar0521: Fix return value check in writing initial registers
    - media: ov8865: Fix an error handling path in ov8865_probe()
    - media: sun6i-mipi-csi2: Depend on PHY_SUN6I_MIPI_DPHY
    - media: atomisp: prevent integer overflow in sh_css_set_black_frame()
    - media: sunxi: Fix some error handling path of sun8i_a83t_mipi_csi2_probe()
    - media: sunxi: Fix some error handling path of sun6i_mipi_csi2_probe()
    - media: sun6i-mipi-csi2: Add a Kconfig dependency on RESET_CONTROLLER
    - media: sun8i-a83t-mipi-csi2: Add a Kconfig dependency on RESET_CONTROLLER
    - media: sun6i-csi: Add a Kconfig dependency on RESET_CONTROLLER
    - media: sun4i-csi: Add a Kconfig dependency on RESET_CONTROLLER
    - media: sun8i-di: Add a Kconfig dependency on RESET_CONTROLLER
    - media: sun8i-rotate: Add a Kconfig dependency on RESET_CONTROLLER
    - media: cedrus: Add a Kconfig dependency on RESET_CONTROLLER
    - drm/msm/a6xx: Replace kcalloc() with kvzalloc()
    - drm/msm/dp: add atomic_check to bridge ops
    - drm/msm: Fix return type of mdp4_lvds_connector_mode_valid
    - drm/msm/dp: cleared DP_DOWNSPREAD_CTRL register before start link training
    - ASoC: codec: tlv320adc3xxx: add GPIOLIB dependency
    - KVM: selftests: Fix number of pages for memory slot in
      memslot_modification_stress_test
    - ASoC: qcom: lpass-cpu: mark HDMI TX registers as volatile
    - drm/msm/a6xx: Fix kvzalloc vs state_kcalloc usage
    - erofs: fix illegal unmapped accesses in z_erofs_fill_inode_lazy()
    - erofs: fix up inplace decompression success rate
    - pinctrl: qcom: Avoid glitching lines when we first mux to output
    - spi: qup: support using GPIO as chip select line
    - x86/fpu: Configure init_fpstate attributes orderly
    - x86/fpu: Fix the init_fpstate size check with the actual size
    - x86/fpu: Exclude dynamic states from init_fpstate
    - perf: Fix missing SIGTRAPs
    - sched/core: Fix comparison in sched_group_cookie_match()
    - bpf: prevent decl_tag from being referenced in func_proto
    - arc: iounmap() arg is volatile
    - mtd: core: add missing of_node_get() in dynamic partitions code
    - mtd: rawnand: intel: Remove unused nand_pa member from ebu_nand_cs
    - mtd: rawnand: intel: Use devm_platform_ioremap_resource_byname()
    - mtd: rawnand: intel: Add missing of_node_put() in ebu_nand_probe()
    - pinctrl: ocelot: Fix incorrect trigger of the interrupt.
    - ASoC: codecs: tlv320adc3xxx: Wrap adc3xxx_i2c_remove() in __exit_p()
    - ASoC: SOF: Intel: pci-mtl: fix firmware name
    - selftests/ftrace: fix dynamic_events dependency check
    - spi: aspeed: Fix window offset of CE1
    - ASoC: qcom: lpass-cpu: Mark HDMI TX parity register as volatile
    - ASoC: SOF: Intel: pci-tgl: fix ADL-N descriptor
    - ALSA: ac97: fix possible memory leak in snd_ac97_dev_register()
    - perf/x86/intel/lbr: Use setup_clear_cpu_cap() instead of clear_cpu_cap()
    - rcu: Keep synchronize_rcu() from enabling irqs in early boot
    - tipc: fix a null-ptr-deref in tipc_topsrv_accept
    - net: netsec: fix error handling in netsec_register_mdio()
    - net: lan966x: Fix the rx drop counter
    - selftests: net: Fix cross-tree inclusion of scripts
    - selftests: net: Fix netdev name mismatch in cleanup
    - net: hinic: fix incorrect assignment issue in hinic_set_interrupt_cfg()
    - net: hinic: fix memory leak when reading function table
    - net: hinic: fix the issue of CMDQ memory leaks
    - net: hinic: fix the issue of double release MBOX callback of VF
    - net: macb: Specify PHY PM management done by MAC
    - nfc: virtual_ncidev: Fix memory leak in virtual_nci_send()
    - RISC-V: KVM: Provide UAPI for Zicbom block size
    - RISC-V: Fix compilation without RISCV_ISA_ZICBOM
    - RISC-V: KVM: Fix kvm_riscv_vcpu_timer_pending() for Sstc
    - x86/unwind/orc: Fix unreliable stack dump with gcov
    - drm/bridge: ps8640: Add back the 50 ms mystery delay after HPD
    - x86/fpu: Fix copy_xstate_to_uabi() to copy init states correctly
    - amd-xgbe: Yellow carp devices do not need rrc
    - amd-xgbe: fix the SFP compliance codes check for DAC cables
    - amd-xgbe: add the bit rate quirk for Molex cables
    - drm/i915/dgfx: Keep PCI autosuspend control 'on' by default on all dGPU
    - drm/i915/dp: Reset frl trained flag before restarting FRL training
    - atlantic: fix deadlock at aq_nic_stop
    - kcm: annotate data-races around kcm->rx_psock
    - kcm: annotate data-races around kcm->rx_wait
    - net: fix UAF issue in nfqnl_nf_hook_drop() when ops_init() failed
    - net: lantiq_etop: don't free skb when returning NETDEV_TX_BUSY
    - tcp: fix a signed-integer-overflow bug in tcp_add_backlog()
    - tcp: fix indefinite deferral of RTO with SACK reneging
    - net-memcg: avoid stalls when under memory pressure
    - drm/amdkfd: Fix memory leak in kfd_mem_dmamap_userptr()
    - net: lan966x: Stop replacing tx dcbs and dcbs_buf when changing MTU
    - mptcp: set msk local address earlier
    - can: mscan: mpc5xxx: mpc5xxx_can_probe(): add missing put_clock() in error
      path
    - can: mcp251x: mcp251x_can_probe(): add missing unregister_candev() in error
      path
    - PM: hibernate: Allow hybrid sleep to work with s2idle
    - media: vivid: s_fbuf: add more sanity checks
    - media: vivid: dev->bitmap_cap wasn't freed in all cases
    - media: v4l2-dv-timings: add sanity checks for blanking values
    - media: videodev2.h: V4L2_DV_BT_BLANKING_HEIGHT should check 'interlaced'
    - media: vivid: set num_in/outputs to 0 if not supported
    - perf vendor events power10: Fix hv-24x7 metric events
    - perf list: Fix PMU name pai_crypto in perf list on s390
    - ipv6: ensure sane device mtu in tunnels
    - i40e: Fix ethtool rx-flow-hash setting for X722
    - i40e: Fix VF hang when reset is triggered on another VF
    - i40e: Fix flow-type by setting GL_HASH_INSET registers
    - net: ksz884x: fix missing pci_disable_device() on error in pcidev_init()
    - riscv: jump_label: mark arguments as const to satisfy asm constraints
    - PM: domains: Fix handling of unavailable/disabled idle states
    - perf vendor events arm64: Fix incorrect Hisi hip08 L3 metrics
    - net: fec: limit register access on i.MX6UL
    - net: ethernet: ave: Fix MAC to be in charge of PHY PM
    - ALSA: aoa: i2sbus: fix possible memory leak in i2sbus_add_dev()
    - ALSA: aoa: Fix I2S device accounting
    - openvswitch: switch from WARN to pr_warn
    - net: ehea: fix possible memory leak in ehea_register_port()
    - net: bcmsysport: Indicate MAC is in charge of PHY PM
    - nh: fix scope used to find saddr when adding non gw nh
    - net: broadcom: bcm4908_enet: update TX stats after actual transmission
    - netdevsim: fix memory leak in nsim_bus_dev_new()
    - netdevsim: fix memory leak in nsim_drv_probe() when
      nsim_dev_resources_register() failed
    - netdevsim: remove dir in nsim_dev_debugfs_init() when creating ports dir
      failed
    - net/mlx5e: Do not increment ESN when updating IPsec ESN state
    - net/mlx5: Wait for firmware to enable CRS before pci_restore_state
    - net/mlx5: DR, Fix matcher disconnect error flow
    - net/mlx5e: Extend SKB room check to include PTP-SQ
    - net/mlx5e: Update restore chain id for slow path packets
    - net/mlx5: ASO, Create the ASO SQ with the correct timestamp format
    - net/mlx5: Fix possible use-after-free in async command interface
    - net/mlx5e: TC, Reject forwarding from internal port to internal port
    - net/mlx5: Update fw fatal reporter state on PCI handlers successful recover
    - net/mlx5: Fix crash during sync firmware reset
    - net: do not sense pfmemalloc status in skb_append_pagefrags()
    - kcm: do not sense pfmemalloc status in kcm_sendpage()
    - net: enetc: survive memory pressure without crashing
    - riscv: mm: add missing memcpy in kasan_init
    - riscv: fix detection of toolchain Zicbom support
    - riscv: fix detection of toolchain Zihintpause support
    - arm64: Add AMPERE1 to the Spectre-BHB affected list
    - tcp/udp: Fix memory leak in ipv6_renew_options().
    - Linux 6.0.7
    - upstream stable to v6.0.7

  * Jammy update: v6.0.6 upstream stable release (LP: #1996083)
    - video/aperture: Call sysfb_disable() before removing PCI devices
    - ocfs2: clear dinode links count in case of error
    - ocfs2: fix BUG when iput after ocfs2_mknod fails
    - smb3: interface count displayed incorrectly
    - selinux: enable use of both GFP_KERNEL and GFP_ATOMIC in convert_context()
    - cpufreq: qcom: fix writes in read-only memory region
    - i2c: qcom-cci: Fix ordering of pm_runtime_xx and i2c_add_adapter
    - cpufreq: tegra194: Fix module loading
    - x86/microcode/AMD: Apply the patch early on every logical thread
    - hwmon/coretemp: Handle large core ID value
    - ata: ahci-imx: Fix MODULE_ALIAS
    - x86/resctrl: Fix min_cbm_bits for AMD
    - cpufreq: qcom: fix memory leak in error path
    - drm/amdgpu: fix sdma doorbell init ordering on APUs
    - mm,hugetlb: take hugetlb_lock before decrementing h->resv_huge_pages
    - kvm: Add support for arch compat vm ioctls
    - KVM: x86: Copy filter arg outside kvm_vm_ioctl_set_msr_filter()
    - KVM: x86: Add compat handler for KVM_X86_SET_MSR_FILTER
    - KVM: arm64: vgic: Fix exit condition in scan_its_table()
    - media: ipu3-imgu: Fix NULL pointer dereference in active selection access
    - media: mceusb: set timeout to at least timeout provided
    - media: venus: dec: Handle the case where find_format fails
    - media: venus: Fix NV12 decoder buffer discovery on HFI_VERSION_1XX
    - x86/Kconfig: Drop check for -mabi=ms for CONFIG_EFI_STUB
    - x86/topology: Fix multiple packages shown on a single-package system
    - x86/topology: Fix duplicated core ID within a package
    - dm bufio: use the acquire memory barrier when testing for B_READING
    - btrfs: fix processing of delayed data refs during backref walking
    - btrfs: fix processing of delayed tree block refs during backref walking
    - drm/vc4: Add module dependency on hdmi-codec
    - drm/vc4: hdmi: Enforce the minimum rate at runtime_resume
    - ACPI: extlog: Handle multiple records
    - tipc: Fix recognition of trial period
    - tipc: fix an information leak in tipc_topsrv_kern_subscr
    - net: dsa: qca8k: fix inband mgmt for big-endian systems
    - net: dsa: qca8k: fix ethtool autocast mib for big-endian systems
    - i40e: Fix DMA mappings leak
    - tls: strp: make sure the TCP skbs do not have overlapping data
    - HID: magicmouse: Do not set BTN_MOUSE on double report
    - sfc: Change VF mac via PF as first preference if available.
    - net/atm: fix proc_mpc_write incorrect return value
    - net: phy: dp83867: Extend RX strap quirk for SGMII mode
    - net/smc: Fix an error code in smc_lgr_create()
    - net: phylink: add mac_managed_pm in phylink_config structure
    - net: stmmac: Enable mac_managed_pm phylink config
    - skmsg: pass gfp argument to alloc_sk_msg()
    - erofs: shouldn't churn the mapping page for duplicated copies
    - blk-mq: fix null pointer dereference in blk_mq_clear_rq_mapping()
    - io_uring/rw: remove leftover debug statement
    - net: ethernet: mtk_eth_soc: fix possible memory leak in mtk_probe()
    - net: ethernet: mtk_eth_wed: add missing put_device() in mtk_wed_add_hw()
    - net: ethernet: mtk_eth_wed: add missing of_node_put()
    - scsi: lpfc: Fix memory leak in lpfc_create_port()
    - udp: Update reuse->has_conns under reuseport_lock.
    - ip6mr: fix UAF issue in ip6mr_sk_done() when addrconf_init_net() failed
    - cifs: Fix xid leak in cifs_create()
    - cifs: Fix xid leak in cifs_copy_file_range()
    - cifs: Fix xid leak in cifs_flock()
    - cifs: Fix xid leak in cifs_ses_add_channel()
    - cifs: Fix memory leak when build ntlmssp negotiate blob failed
    - dm: remove unnecessary assignment statement in alloc_dev()
    - drm/amd/display: Increase frame size limit for display_mode_vba_util_32.o
    - bnxt_en: fix memory leak in bnxt_nvm_test()
    - net: hsr: avoid possible NULL deref in skb_clone()
    - ionic: catch NULL pointer issue on reconfig
    - netfilter: rpfilter/fib: Populate flowic_l3mdev field
    - netfilter: rpfilter/fib: Set ->flowic_uid correctly for user namespaces.
    - netfilter: nf_tables: relax NFTA_SET_ELEM_KEY_END set flags requirements
    - nvme-hwmon: consistently ignore errors from nvme_hwmon_init
    - nvme-hwmon: kmalloc the NVME SMART log buffer
    - nvmet: fix workqueue MEM_RECLAIM flushing dependency
    - net: sched: cake: fix null pointer access issue when cake_init() fails
    - net: sched: delete duplicate cleanup of backlog and qlen
    - net: sched: sfb: fix null pointer access issue when sfb_init() fails
    - net: Fix return value of qdisc ingress handling on success
    - io_uring/msg_ring: Fix NULL pointer dereference in io_msg_send_fd()
    - sfc: include vport_id in filter spec hash and equal()
    - wwan_hwsim: fix possible memory leak in wwan_hwsim_dev_new()
    - net: hns: fix possible memory leak in hnae_ae_register()
    - net: sched: fix race condition in qdisc_graft()
    - net: phy: dp83822: disable MDI crossover status change interrupt
    - drbd: only clone bio if we have a backing device
    - rv/dot2c: Make automaton definition static
    - iommu/vt-d: Allow NVS regions in arch_rmrr_sanity_check()
    - iommu/vt-d: Clean up si_domain in the init_dmars() error path
    - wifi: mt76: mt7921e: fix random fw download fail
    - io_uring: don't gate task_work run on TIF_NOTIFY_SIGNAL
    - ext4: introduce EXT4_FC_TAG_BASE_LEN helper
    - ext4: factor out ext4_fc_get_tl()
    - ext4: fix potential out of bound read in ext4_fc_replay_scan()
    - ACPI: video: Force backlight native for more TongFang devices
    - mm: /proc/pid/smaps_rollup: fix no vma's null-deref
    - Linux 6.0.6
    - upstream stable to v6.0.6

  * UBSAN: array-index-out-of-bounds in
    /build/linux-9H675w/linux-5.15.0/drivers/ata/libahci.c:968:41
    (LP: #1970074) // Jammy update: v6.0.6 upstream stable release
    (LP: #1996083)
    - ata: ahci: Match EM_MAX_SLOTS with SATA_PMP_MAX_PORTS

  * Jammy update: v6.0.5 upstream stable release (LP: #1996081)
    - clk: tegra: Fix Tegra PWM parent clock
    - Revert "btrfs: call __btrfs_remove_free_space_cache_locked on cache load
      failure"
    - Linux 6.0.5
    - upstream stable to v6.0.5

  * Jammy update: v6.0.4 upstream stable release (LP: #1996080)
    - drm/i915/bios: Validate fp_timing terminator presence
    - drm/i915/bios: Use hardcoded fp_timing size for generating LFP data pointers
    - pinctrl: amd: change dev_warn to dev_dbg for additional feature support
    - thermal: intel_powerclamp: Use first online CPU as control_cpu
    - io_uring/net: fail zc send when unsupported by socket
    - HID: playstation: stop DualSense output work on remove.
    - HID: playstation: add initial DualSense Edge controller support
    - net: flag sockets supporting msghdr originated zerocopy
    - drm/amd/pm: fulfill SMU13.0.7 cstate control interface
    - drm/amd/pm: add SMU IP v13.0.4 IF version define to V7
    - drm/amd/pm: disable cstate feature for gpu reset scenario
    - drm/amd/pm: fulfill SMU13.0.0 cstate control interface
    - drm/amd/pm: update SMU IP v13.0.4 driver interface version
    - dm clone: Fix typo in block_device format specifier
    - efi: efivars: Fix variable writes without query_variable_store()
    - efi: ssdt: Don't free memory if ACPI table was loaded successfully
    - gcov: support GCC 12.1 and newer compilers
    - io-wq: Fix memory leak in worker creation
    - fbdev/core: Remove remove_conflicting_pci_framebuffers()
    - Revert "ALSA: hda: Fix page fault in snd_hda_codec_shutdown()"
    - Linux 6.0.4
    - upstream stable to v6.0.4

  * Miscellaneous Ubuntu changes
    - [Config] Update gcc version

 -- Timo Aaltonen <timo.aaltonen@canonical.com>  Wed, 16 Nov 2022 19:03:59 +0200

# For older changelog entries, run 'apt-get changelog linux-headers-6.0.0-1017-oem'
