5.15.212longterm
Fixed
- perf/x86/amd/core: Always use the NMI latency mitigation
- ALSA: seq: Fix uninitialised heap leak in snd_seq_event_dup()
- iio: imu: inv_icm42600: fix timestamp clock period by using lower value
- ALSA: seq: Check UMP support for midi_version change
- ALSA: seq: Skip event type filtering for UMP events
- iio: invensense: fix odr switching to same value
- iio: imu: inv_mpu6050: fix frequency setting when chip is off
- ALSA: seq: Avoid confusion of aligned read size
- Bluetooth: L2CAP: Fix regressions caused by reusing ident
- posix-cpu-timers: Use u64 multiplication in update_rlimit_cpu()
- regulator: scmi: fix of_node refcount leak in scmi_regulator_probe()
- audit: fix potential integer overflow in audit_log_n_hex()
- btrfs: fix incorrect buffered IO fallback for append direct writes
- crypto: qat - validate RSA CRT component lengths
- btrfs: fix false IO failure after falling back to buffered write
- crypto: qat - fix restarting state leak on allocation failure
- X.509: Fix validation of ASN.1 certificate header
Security
- staging: rtl8723bs: fix heap buffer overflow in rtw_cfg80211_set_wpa_ie()
- staging: rtl8723bs: fix OOB reads in rtw_get_sec_ie(), rtw_get_wapi_ie(), and rtw_get_wps_attr()
The 120 most recent commits in this release — the full changelog is longer:
- Linux 5.15.212
- perf/x86/amd/core: Always use the NMI latency mitigation
- ALSA: seq: Fix uninitialised heap leak in snd_seq_event_dup()
- iio: imu: inv_icm42600: fix timestamp clock period by using lower value
- ALSA: seq: Check UMP support for midi_version change
- ALSA: seq: Skip event type filtering for UMP events
- iio: invensense: fix odr switching to same value
- iio: imu: inv_mpu6050: fix frequency setting when chip is off
- ALSA: seq: Avoid confusion of aligned read size
- Bluetooth: L2CAP: Fix regressions caused by reusing ident
- KVM: Move kvm_io_bus_get_dev() locking responsibilities to callers
- posix-cpu-timers: Use u64 multiplication in update_rlimit_cpu()
- regulator: scmi: fix of_node refcount leak in scmi_regulator_probe()
- audit: fix potential integer overflow in audit_log_n_hex()
- audit: add audit_log_nf_skb helper function
- btrfs: fix incorrect buffered IO fallback for append direct writes
- crypto: qat - validate RSA CRT component lengths
- btrfs: fix false IO failure after falling back to buffered write
- crypto: qat - fix restarting state leak on allocation failure
- btrfs: do not trim a device which is not writeable
- usb: gadget: f_fs: Tie read_buffer lifetime to ffs_epfile
- crypto: atmel-sha204a - drop hwrng quality reduction for ATSHA204A
- crypto: atmel - Drop explicit initialization of struct i2c_device_id::driver_data to 0
- crypto: atmel-sha204a - Mark OF related data as maybe unused
- usb: gadget: f_fs: initialize reset_work at allocation time
- usb: typec: tcpm: Fix VDM type for Enter Mode commands
- usb: atm: ueagle-atm: wait for pre-firmware load in .disconnect()
- usb: typec: ucsi: ccg: Fix use-after-free of ucsi on remove
- gpio: pca953x: Make platform teardown callback return void
- leds: lm3601x: Improve error reporting for problems during .remove()
- leds: lm3697: Remove duplicated error reporting in .remove()
- drm/i2c/sil164: Drop no-op remove function
- usb: iowarrior: remove inherent race with minor number
- bpf: Allow LPM map access from sleepable BPF programs
- bpf: Consistently use bpf_rcu_lock_held() everywhere
- bpf: Convert lpm_trie.c to rqspinlock
- bpf: Reject fragmented frames in devmap
- xdp: introduce flags field in xdp_buff/xdp_frame
- hfs/hfsplus: fix u32 overflow in check_and_correct_requested_length
- hfs/hfsplus: prevent getting negative values of offset/length
- xfs: use null daddr for unset first bad log block
- xfs: Remove dead code
- xfs: Remove redundant assignment of mp
- serial: 8250_mid: Disable DMA for selected platforms
- serial: 8250_mid: Remove 8250_pci usage
- HID: appleir: fix UAF on pending key_up_timer in remove()
- treewide: Switch/rename to timer_delete_sync
- proc: protect ptrace_may_access() with exec_update_lock (part 1)
- HID: multitouch: fix out-of-bounds bit access on mt_io_flags
- HID: add haptics page defines
- proc: protect ptrace_may_access() with exec_update_lock (FD links)
- proc: rename proc_setattr to proc_nochmod_setattr
- proc: Move fdinfo PTRACE_MODE_READ check into the inode .permission operation
- proc: use generic setattr() for /proc/$PID/net
- X.509: Fix validation of ASN.1 certificate header
- ksmbd: track the connection owning a byte-range lock
- ksmbd: centralize ksmbd_conn final release to plug transport leak
- ksmbd: destroy async_ida in ksmbd_conn_free()
- ksmbd: fix mechToken leak when SPNEGO decode fails after token alloc
- ksmbd: fix use-after-free in __ksmbd_close_fd() via durable scavenger
- smb: client: harden POSIX SID length parsing
- smb: client: use unaligned reads in parse_posix_ctxt()
- smb: client: mask server-provided mode to 07777 in modefromsid
- smb: client: resolve SWN tcon from live registrations
- cifs: Add tracing for the cifs_tcon struct refcounting
- smb: client: Fix next buffer leak in receive_encrypted_standard()
- Bluetooth: L2CAP: cancel pending_rx_work before taking conn->lock
- Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del()
- Bluetooth: L2CAP: Fix not tracking outstanding TX ident
- netfilter: ebtables: zero chainstack array
- netfilter: ebtables: Use vmalloc_array() to improve code
- gpio: sch: use raw_spinlock_t in the irq startup path
- gpio: sch: use new GPIO line value setter callbacks
- coresight: etb10: restore atomic_t for shared reading state
- PCI: Skip Resizable BAR restore on read error
- PCI: Move Resizable BAR code to rebar.c
- PCI: Add kerneldoc for pci_resize_resource()
- PCI: Fix restoring BARs on BAR resize rollback path
- PCI: Free saved list without holding pci_bus_sem
- PCI: Prevent resource tree corruption when BAR resize fails
- crypto: qat - fix VF2PF work teardown race in adf_disable_sriov()
- staging: rtl8723bs: fix OOB reads in rtw_get_sec_ie(), rtw_get_wapi_ie(), and rtw_get_wps_attr()
- staging: rtl8723bs: fix spaces around binary operators
- staging: rtl8723bs: core: move constants to right side in comparison
- staging: rtl8723bs: remove redundant braces in if statements
- staging: rtl8723bs: Remove redundant else branches.
- PCI: mediatek: Fix IRQ domain leak when port fails to enable
- PCI: mediatek: Convert bool to single quirks entry and bitmap
- PCI: controller: Use dev_fwnode() instead of of_fwnode_handle()
- staging: rtl8723bs: fix heap buffer overflow in rtw_cfg80211_set_wpa_ie()
- staging: rtl8723bs: Fix space issues
- staging: rtl8723bs: Fix indentation issues
- PCI: imx6: Fix IMX6SX_GPR12_PCIE_TEST_POWERDOWN handling
- smb: client: restrict implied bcc[0] exemption to responses without data area
- cifs: remove unused server parameter from calc_smb_size()
- smb2: small refactor in smb2_check_message()
- cifs: remove check of list iterator against head past the loop body
- cifs: Create a new shared file holding smb2 pdu definitions
- PCI: altera: Fix resource leaks on probe failure
- vfio/pci: Release the VGA arbiter client on register_device() failure
- ALSA: aoa: check snd_ctl_new1() return value
- iio: common: st_sensors: honour channel endianness in read_axis_data
- bitops: make BYTES_TO_BITS() treewide-available
- iio: imu: inv_icm42600: fix timestamping by limiting FIFO reading
- iio: imu: inv_icm42600: stabilized timestamp in interrupt
- iio: invensense: fix timestamp glitches when switching frequency
- iio: invensense: remove redundant initialization of variable period
- iio: imu: inv_mpu6050: use the common inv_sensors timestamp module
- iio: make invensense timestamp module generic
- iio: move inv_icm42600 timestamp module in common
- iio: imu: inv_icm42600: make timestamp module chip independent
- iio: hid-sensor-rotation: Fix stale or zero output when reading raw values
- iio: imu: adis: add IRQF_NO_THREAD to non-FIFO trigger IRQ
- ACPI: NFIT: core: Fix acpi_nfit_init() error cleanup
- ACPI: CPPC: Suppress UBSAN warning caused by field misuse
- mtd: rawnand: lpc32xx_slc: fail DMA transfer on completion timeout
- mtd: rawnand: lpc32xx_mlc: fail DMA transfers on timeout
- mtd: rawnand: fsl_ifc: return errors for failed page reads
- mmc: vub300: defer reset until cmd_mutex is unlocked
- mt