Accepted linux-5.10 5.10.197-1~deb10u1 (source) into oldoldstable

[Debian FTP Masters <ftpmaster@ftp-master.debian.org>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 08 Aug 2023 19:36:53 +0200
Source: linux-5.10
Architecture: source
Version: 5.10.197-1~deb10u1
Distribution: buster-security
Urgency: high
Maintainer: Debian Kernel Team <debian-kernel@lists.debian.org>
Changed-By: Ben Hutchings <benh@debian.org>
Closes: 871216 1035359 1036543 1044518 1050622
Changes:
 linux-5.10 (5.10.197-1~deb10u1) buster-security; urgency=high
 .
   * Rebuild for buster:
     - Change ABI number to 0.deb10.26
 .
 linux (5.10.197-1) bullseye; urgency=medium
 .
   * New upstream stable update:
     https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.192
     - [arm64] mmc: sdhci-f-sdh30: Replace with sdhci_pltfm
     - macsec: Fix traffic counters/statistics
     - macsec: use DEV_STATS_INC()
     - net/mlx5: Refactor init clock function
     - net/mlx5: Move all internal timer metadata into a dedicated struct
     - net/mlx5: Skip clock update work when device is in error state
     - drm/radeon: Fix integer overflow in radeon_cs_parser_init
     - ALSA: emu10k1: roll up loops in DSP setup code for Audigy
     - [x86] ASoC: Intel: sof_sdw: add quirk for MTL RVP
     - [x86] ASoC: Intel: sof_sdw: add quirk for LNL RVP
     - [armhf] dts: imx6dl: prtrvt, prtvt7, prti6q, prtwd2: fix USB related
       warnings
     - [x86] ASoC: Intel: sof_sdw: Add support for Rex soundwire
     - iopoll: Call cpu_relax() in busy loops
     - quota: Properly disable quotas when add_dquot_ref() fails
     - quota: fix warning in dqgrab()
     - dma-remap: use kvmalloc_array/kvfree for larger dma memory remap
     - drm/amdgpu: install stub fence into potential unused fence pointers
     - HID: add quirk for 03f0:464a HP Elite Presenter Mouse
     - RDMA/mlx5: Return the firmware result upon destroying QP/RQ
     - ovl: check type and offset of struct vfsmount in ovl_entry
     - udf: Fix uninitialized array access for some pathnames
     - fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
     - FS: JFS: Fix null-ptr-deref Read in txBegin
     - FS: JFS: Check for read-only mounted filesystem in txBegin
     - media: v4l2-mem2mem: add lock to protect parameter num_rdy
     - usb: gadget: u_serial: Avoid spinlock recursion in __gs_console_push
     - [arm64,armhf] usb: chipidea: imx: don't request QoS for imx8ulp
     - [arm64,armhf] usb: chipidea: imx: add missing USB PHY DPDM wakeup setting
     - gfs2: Fix possible data races in gfs2_show_options()
     - pcmcia: rsrc_nonstatic: Fix memory leak in nonstatic_release_resource_db()
     - Bluetooth: L2CAP: Fix use-after-free
     - Bluetooth: btusb: Add MT7922 bluetooth ID for the Asus Ally
     - drm/amdgpu: Fix potential fence use-after-free v2
     - ALSA: hda/realtek: Add quirks for Unis H3C Desktop B760 & Q760
     - ALSA: hda: fix a possible null-pointer dereference due to data race in
       snd_hdac_regmap_sync()
     - ring-buffer: Do not swap cpu_buffer during resize process
     - bus: mhi: Add MHI PCI support for WWAN modems
     - bus: mhi: Add MMIO region length to controller structure
     - bus: mhi: Move host MHI code to "host" directory
     - bus: mhi: host: Range check CHDBOFF and ERDBOFF
     - [mips*] irqchip/mips-gic: Get rid of the reliance on irq_cpu_online()
     - [mips*] irqchip/mips-gic: Use raw spinlock for gic_lock
     - usb: gadget: udc: core: Introduce check_config to verify USB configuration
     - usb: cdns3: allocate TX FIFO size according to composite EP number
     - usb: cdns3: fix NCM gadget RX speed 20x slow than expection at iMX8QM
     - [arm64] USB: dwc3: qcom: fix NULL-deref on suspend
     - [arm*] mmc: bcm2835: fix deferred probing
     - [arm64,armhf] mmc: sunxi: fix deferred probing
     - mmc: core: add devm_mmc_alloc_host
     - [arm64] mmc: meson-gx: use devm_mmc_alloc_host
     - [arm64] mmc: meson-gx: fix deferred probing
     - tracing/probes: Have process_fetch_insn() take a void * instead of pt_regs
     - tracing/probes: Fix to update dynamic data counter if fetcharg uses it
     - virtio-mmio: Use to_virtio_mmio_device() to simply code
     - virtio-mmio: don't break lifecycle of vm_dev
     - i2c: bcm-iproc: Fix bcm_iproc_i2c_isr deadlock issue
     - fbdev: mmp: fix value check in mmphw_probe()
     - [powerpc*] rtas_flash: allow user copy to flash block cache objects
     - tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
     - tty: serial: fsl_lpuart: Clear the error flags by writing 1 for lpuart32
       platforms
     - btrfs: fix BUG_ON condition in btrfs_cancel_balance
     - i2c: designware: Handle invalid SMBus block data response length value
     - net: xfrm: Fix xfrm_address_filter OOB read
     - net: af_key: fix sadb_x_filter validation
     - net: xfrm: Amend XFRMA_SEC_CTX nla_policy structure
     - xfrm: fix slab-use-after-free in decode_session6
     - ip6_vti: fix slab-use-after-free in decode_session6
     - ip_vti: fix potential slab-use-after-free in decode_session6
     - xfrm: add NULL check in xfrm_update_ae_params (CVE-2023-3772)
     - xfrm: add forgotten nla_policy for XFRMA_MTIMER_THRESH (CVE-2023-3773)
     - selftests: mirror_gre_changes: Tighten up the TTL test match
     - ipvs: fix racy memcpy in proc_do_sync_threshold
     - netfilter: nft_dynset: disallow object maps
     - net: phy: broadcom: stub c45 read/write for 54810
     - team: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
     - i40e: fix misleading debug logs
     - net: dsa: mv88e6xxx: Wait for EEPROM done before HW reset
     - sock: Fix misuse of sk_under_memory_pressure()
     - net: do not allow gso_size to be set to GSO_BY_FRAGS
     - bus: ti-sysc: Flush posted write on enable before reset
     - ALSA: hda/realtek - Remodified 3k pull low procedure
     - serial: 8250: Fix oops for port->pm on uart_change_pm()
     - ALSA: usb-audio: Add support for Mythware XA001AU capture and playback
       interfaces.
     - cifs: Release folio lock on fscache read hit.
     - mmc: wbsd: fix double mmc_free_host() in wbsd_init()
     - mmc: block: Fix in_flight[issue_type] value error
     - netfilter: set default timeout to 3 secs for sctp shutdown send and recv
       state
     - af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (CVE-2023-4622)
     - virtio-net: set queues after driver_ok
     - net: fix the RTO timer retransmitting skb every 1ms if linear option is
       enabled
     - [arm64] mmc: f-sdh30: fix order of function calls in sdhci_f_sdh30_remove
     - [x86] cpu: Fix __x86_return_thunk symbol type
     - [x86] cpu: Fix up srso_safe_ret() and __x86_return_thunk()
     - [x86] alternative: Make custom return thunk unconditional
     - objtool: Add frame-pointer-specific function ignore
     - [x86] ibt: Add ANNOTATE_NOENDBR
     - [x86] cpu: Clean up SRSO return thunk mess
     - [x86] cpu: Rename original retbleed methods
     - [x86] cpu: Rename srso_(.*)_alias to srso_alias_\1
     - [x86] cpu: Cleanup the untrain mess
     - [x86] srso: Explain the untraining sequences a bit more
     - [x86] static_call: Fix __static_call_fixup()
     - [x86] retpoline: Don't clobber RFLAGS during srso_safe_ret()
     - [x86] CPU/AMD: Fix the DIV(0) initial fix attempt (CVE-2023-20588)
     - [x86] srso: Disable the mitigation on unaffected configurations
     - [x86] retpoline,kprobes: Fix position of thunk sections with
       CONFIG_LTO_CLANG
     - [x86] objtool/x86: Fixup frame-pointer vs rethunk
     - [x86] srso: Correct the mitigation status when SMT is disabled
     https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.193
     - [x86] objtool/x86: Fix SRSO mess
     - NFSv4: fix out path in __nfs4_get_acl_uncached
     - xprtrdma: Remap Receive buffers after a reconnect
     - PCI: acpiphp: Reassign resources on bridge if necessary
     - dlm: improve plock logging if interrupted
     - dlm: replace usage of found with dedicated list iterator variable
     - fs: dlm: add pid to debug log
     - fs: dlm: change plock interrupted message to debug again
     - fs: dlm: use dlm_plock_info for do_unlock_close
     - fs: dlm: fix mismatch of plock results from userspace
     - [mips*] cpu-features: Enable octeon_cache by cpu_type
     - [mips*] cpu-features: Use boot_cpu_type for CPU type based features
     - fbdev: Improve performance of sys_imageblit()
     - fbdev: Fix sys_imageblit() for arbitrary image widths
     - fbdev: fix potential OOB read in fast_imageblit()
     - dm integrity: increase RECALC_SECTORS to improve recalculate speed
     - dm integrity: reduce vmalloc space footprint on 32-bit architectures
     - ALSA: pcm: Fix potential data race at PCM memory allocation helpers
     - drm/amd/display: do not wait for mpc idle if tg is disabled
     - drm/amd/display: check TG is non-null before checking if enabled
     - libceph, rbd: ignore addr->type while comparing in some cases
     - rbd: make get_lock_owner_info() return a single locker or NULL
     - rbd: retrieve and check lock owner twice before blocklisting
     - rbd: prevent busy loop when requesting exclusive lock
     - tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
     - tracing: Fix memleak due to race between current_tracer and trace
     - sock: annotate data-races around prot->memory_pressure
     - dccp: annotate data-races in dccp_poll()
     - ipvlan: Fix a reference count leak warning in ipvlan_ns_exit()
     - [arm64] net: bcmgenet: Fix return value check for fixed_phy_register()
     - net: validate veth and vxcan peer ifindexes
     - ice: fix receive buffer size miscalculation
     - igb: Avoid starting unnecessary workqueues
     - net/sched: fix a qdisc modification with ambiguous command request
     - netfilter: nf_tables: fix out of memory error handling
     - rtnetlink: return ENODEV when ifname does not exist and group is given
     - rtnetlink: Reject negative ifindexes in RTM_NEWLINK
     - net: remove bond_slave_has_mac_rcu()
     - bonding: fix macvlan over alb bond support
     - [powerpc*] ibmveth: Use dcbf rather than dcbfl
     - NFSv4: Fix dropped lock for racing OPEN and delegation return
     - clk: Fix slab-out-of-bounds error in devm_clk_release()
     - mm: add a call to flush_cache_vmap() in vmap_pfn()
     - NFS: Fix a use after free in nfs_direct_join_group()
     - nfsd: Fix race to FREE_STATEID and cl_revoked
     - selinux: set next pointer before attaching to list
     - batman-adv: Trigger events for auto adjusted MTU
     - batman-adv: Don't increase MTU when set by user
     - batman-adv: Do not get eth header before batadv_check_management_packet
     - batman-adv: Fix TT global entry leak when client roamed back
     - batman-adv: Fix batadv_v_ogm_aggr_send memory leak
     - batman-adv: Hold rtnl lock during MTU update via netlink
     - lib/clz_ctz.c: Fix __clzdi2() and __ctzdi2() for 32-bit kernels
     - [powerpc*] of: dynamic: Refactor action prints to not use "%pOF" inside
       devtree_lock
     - PCI: acpiphp: Use pci_assign_unassigned_bridge_resources() only for
       non-root bus
     - [x86] drm/vmwgfx: Fix shader stage validation
     - drm/display/dp: Fix the DP DSC Receiver cap size
     - [x86] fpu: Set X86_FEATURE_OSXSAVE feature after enabling OSXSAVE in CR4
       (Closes: #1050622)
     - torture: Fix hang during kthread shutdown phase
     - tick: Detect and fix jiffies update stall
     - timers/nohz: Switch to ONESHOT_STOPPED in the low-res handler when the
       tick is stopped
     - cgroup/cpuset: Rename functions dealing with DEADLINE accounting
     - sched/cpuset: Bring back cpuset_mutex
     - sched/cpuset: Keep track of SCHED_DEADLINE task in cpusets
     - cgroup/cpuset: Iterate only if DEADLINE tasks are present
     - sched/deadline: Create DL BW alloc, free & check overflow interface
     - cgroup/cpuset: Free DL BW in case can_attach() fails
     - [x86] drm/i915: Fix premature release of request's reusable memory
     - ASoC: rt711: add two jack detection modes
     - scsi: snic: Fix double free in snic_tgt_create()
     - scsi: core: raid_class: Remove raid_component_add()
     - mm,hwpoison: refactor get_any_page
     - mm: fix page reference leak in soft_offline_page()
     - mm: memory-failure: kill soft_offline_free_page()
     - mm: memory-failure: fix unexpected return value in soft_offline_page()
     - [x86] ASoC: Intel: sof_sdw: include rt711.h for RT711 JD mode
     - mm,hwpoison: fix printing of page flags
     https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.194
     - module: Expose module_init_layout_section()
     - [arm64] module-plts: inline linux/moduleloader.h
     - [arm64] module: Use module_init_layout_section() to spot init sections
     - [armel,armhf] module: Use module_init_layout_section() to spot init
       sections
     - mhi: pci_generic: Fix implicit conversion warning
     - Revert "drm/amdgpu: install stub fence into potential unused fence
       pointers"
     - rcu: Prevent expedited GP from enabling tick on offline CPU
     - rcu-tasks: Fix IPI failure handling in trc_wait_for_one_reader
     - rcu-tasks: Wait for trc_read_check_handler() IPIs
     - rcu-tasks: Add trc_inspect_reader() checks for exiting critical section
     https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.195
     - erofs: ensure that the post-EOF tails are all zeroed
     - mmc: au1xmmc: force non-modular build and remove symbol_get usage
     - net: enetc: use EXPORT_SYMBOL_GPL for enetc_phc_index
     - rtc: ds1685: use EXPORT_SYMBOL_GPL for ds1685_rtc_poweroff
     - modules: only allow symbol_get of EXPORT_SYMBOL_GPL modules
     - USB: serial: option: add Quectel EM05G variant (0x030e)
     - USB: serial: option: add FOXCONN T99W368/T99W373 product
     - [arm64,armhf] usb: dwc3: meson-g12a: do post init to fix broken usb after
       resumption
     - [arm64,armhf] usb: chipidea: imx: improve logic if samsung,picophy-*
       parameter is 0
     - HID: wacom: remove the battery when the EKR is off
     - staging: rtl8712: fix race condition
     - Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race
       condition (CVE-2023-1989)
     - configfs: fix a race in configfs_lookup()
     - serial: qcom-geni: fix opp vote on shutdown
     - serial: sc16is7xx: fix broken port 0 uart init
     - serial: sc16is7xx: fix bug when first setting GPIO direction
     - firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe
     - fsi: master-ast-cf: Add MODULE_FIRMWARE macro
     - nilfs2: fix general protection fault in nilfs_lookup_dirty_data_buffers()
     - nilfs2: fix WARNING in mark_buffer_dirty due to discarded buffer reuse
     - pinctrl: amd: Don't show `Invalid config param` errors
     - ASoC: rt5682: Fix a problem with error handling in the io init function of
       the soundwire
     - phy: qcom-snps-femto-v2: use qcom_snps_hsphy_suspend/resume error code
     - media: pulse8-cec: handle possible ping error
     - media: pci: cx23885: fix error handling for cx23885 ATSC boards
     - 9p: virtio: make sure 'offs' is initialized in zc_request
     - ASoC: da7219: Flush pending AAD IRQ when suspending
     - ASoC: da7219: Check for failure reading AAD IRQ events
     - ethernet: atheros: fix return value check in atl1c_tso_csum()
     - vxlan: generalize vxlan_parse_gpe_hdr and remove unused args
     - [s390x] dasd: use correct number of retries for ERP requests
     - [s390x] dasd: fix hanging device after request requeue
     - fs/nls: make load_nls() take a const parameter
     - ASoc: codecs: ES8316: Fix DMIC config
     - [x86] platform/x86: intel: hid: Always call BTNL ACPI method
     - [x86] platform/x86: huawei-wmi: Silence ambient light sensor
     - drm/amd/display: Exit idle optimizations before attempt to access PHY
     - ovl: Always reevaluate the file signature for IMA
     - ata: pata_arasan_cf: Use dev_err_probe() instead dev_err() in data_xfer()
     - security: keys: perform capable check only on privileged operations
     - kprobes: Prohibit probing on CFI preamble symbol
     - clk: fixed-mmio: make COMMON_CLK_FIXED_MMIO depend on HAS_IOMEM
     - net: usb: qmi_wwan: add Quectel EM05GV2
     - idmaengine: make FSL_EDMA and INTEL_IDMA64 depends on HAS_IOMEM
     - scsi: qedi: Fix potential deadlock on &qedi_percpu->p_work_lock
     - netlabel: fix shift wrapping bug in netlbl_catmap_setlong()
     - bnx2x: fix page fault following EEH recovery
     - sctp: handle invalid error codes without calling BUG()
     - scsi: storvsc: Always set no_report_opcodes
     - ALSA: seq: oss: Fix racy open/close of MIDI devices
     - tracing: Introduce pipe_cpumask to avoid race on trace_pipes
     - net: Avoid address overwrite in kernel_connect
     - udf: Check consistency of Space Bitmap Descriptor
     - udf: Handle error when adding extent to a file
     - Revert "net: macsec: preserve ingress frame ordering"
     - reiserfs: Check the return value from __getblk()
     - eventfd: Export eventfd_ctx_do_read()
     - eventfd: prevent underflow for eventfd semaphores
     - fs: Fix error checking for d_hash_and_lookup()
     - tmpfs: verify {g,u}id mount options correctly
     - refscale: Fix uninitalized use of wait_queue_head_t
     - OPP: Fix passing 0 to PTR_ERR in _opp_attach_genpd()
     - [x86] decompressor: Don't rely on upper 32 bits of GPRs being preserved
     - perf/imx_ddr: don't enable counter0 if none of 4 counters are used
     - [s390x] pkey: fix/harmonize internal keyblob headers
     - [s390x] paes: fix PKEY_TYPE_EP11_AES handling for secure keyblobs
     - [x86] efistub: Fix PCI ROM preservation in mixed mode
     - [x86] cpufreq: powernow-k8: Use related_cpus instead of cpus in
       driver.exit()
     - bpftool: Use a local bpf_perf_event_value to fix accessing its fields
     - bpf: Clear the probe_addr for uprobe
     - tcp: tcp_enter_quickack_mode() should be static
     - regmap: rbtree: Use alloc_flags for memory allocations
     - udp: re-score reuseport groups when connected sockets are present
     - bpf: reject unhashed sockets in bpf_sk_assign
     - [arm64,armhf] spi: tegra20-sflash: fix to check return value of
       platform_get_irq() in tegra_sflash_probe()
     - can: gs_usb: gs_usb_receive_bulk_callback(): count RX overflow errors also
       in case of OOM
     - wifi: mwifiex: Fix OOB and integer underflow when rx packets
     - wifi: mwifiex: fix error recovery in PCIE buffer descriptor management
     - [armhf] crypto: stm32 - Properly handle pm_runtime_get failing
     - crypto: api - Use work queue in crypto_destroy_instance
     - Bluetooth: nokia: fix value check in nokia_bluetooth_serdev_probe()
     - Bluetooth: Fix potential use-after-free when clear keys
     - net: tcp: fix unexcepted socket die when snd_wnd is 0
     - ice: ice_aq_check_events: fix off-by-one check when filling buffer
     - [arm64] crypto: caam - fix unchecked return value error
     - hwrng: iproc-rng200 - Implement suspend and resume calls
     - lwt: Fix return values of BPF xmit ops
     - lwt: Check LWTUNNEL_XMIT_CONTINUE strictly
     - fs: ocfs2: namei: check return value of ocfs2_add_entry()
     - wifi: mwifiex: fix memory leak in mwifiex_histogram_read()
     - wifi: mwifiex: Fix missed return in oob checks failed path
     - samples/bpf: fix broken map lookup probe
     - wifi: ath9k: fix races between ath9k_wmi_cmd and ath9k_wmi_ctrl_rx
     - wifi: ath9k: protect WMI command response buffer replacement with a lock
     - wifi: mwifiex: avoid possible NULL skb pointer dereference
     - Bluetooth: btusb: Do not call kfree_skb() under spin_lock_irqsave()
     - wifi: ath9k: use IS_ERR() with debugfs_create_dir()
     - net: arcnet: Do not call kfree_skb() under local_irq_disable()
     - mlxsw: i2c: Fix chunk size setting in output mailbox buffer
     - mlxsw: i2c: Limit single transaction buffer size
     - hwmon: (tmp513) Fix the channel number in tmp51x_is_visible()
     - net/sched: sch_hfsc: Ensure inner classes have fsc curve (CVE-2023-4623)
     - netrom: Deny concurrent connect().
     - drm/bridge: tc358764: Fix debug print parameter order
     - quota: factor out dquot_write_dquot()
     - quota: rename dquot_active() to inode_quota_active()
     - quota: add new helper dquot_active()
     - quota: fix dqput() to follow the guarantees dquot_srcu should provide
     - ASoC: stac9766: fix build errors with REGMAP_AC97
     - [arm64] dts: qcom: msm8996: Add missing interrupt to the USB2 controller
     - drm/amdgpu: avoid integer overflow warning in
       amdgpu_device_resize_fb_bar()
     - [armel,armhf] dts: BCM5301X: Harmonize EHCI/OHCI DT nodes name
     - [armel,armhf] dts: BCM53573: Describe on-SoC BCM53125 rev 4 switch
     - [armel,armhf] dts: BCM53573: Drop nonexistent #usb-cells
     - [armel,armhf] dts: BCM53573: Add cells sizes to PCIe node
     - [armel,armhf] dts: BCM53573: Use updated "spi-gpio" binding properties
     - [armhf] drm/etnaviv: fix dumping of active MMU context
     - [x86] mm: Fix PAT bit missing from page protection modify mask
     - [armel,armhf] dts: s3c64xx: align pinctrl with dtschema
     - [armel,armhf] dts: samsung: s3c6410-mini6410: correct ethernet reg
       addresses (split)
     - [armel,armhf] dts: s5pv210: adjust node names to DT spec
     - [armel,armhf] dts: s5pv210: add dummy 5V regulator for backlight on
       SMDKv210
     - [armel,armhf] dts: samsung: s5pv210-smdkv210: correct ethernet reg
       addresses (split)
     - drm: adv7511: Fix low refresh rate register for ADV7533/5
     - [armel,armhf] dts: BCM53573: Fix Ethernet info for Luxul devices
     - [arm64] dts: qcom: sdm845: Add missing RPMh power domain to GCC
     - [arm64] dts: qcom: sdm845: Fix the min frequency of "ice_core_clk"
     - drm/amdgpu: Update min() to min_t() in 'amdgpu_info_ioctl'
     - md/bitmap: don't set max_write_behind if there is no write mostly device
     - md/md-bitmap: hold 'reconfig_mutex' in backlog_store()
     - [arm64,armhf] drm/tegra: Remove superfluous error messages around
       platform_get_irq()
     - [arm64,armhf] drm/tegra: dpaux: Fix incorrect return value of
       platform_get_irq
     - of: unittest: fix null pointer dereferencing in
       of_unittest_find_node_by_name()
     - [arm64,armhf] drm/armada: Fix off-by-one error in
       armada_overlay_get_property()
     - drm/panel: simple: Add missing connector type and pixel format for AUO
       T215HVN01
     - ima: Remove deprecated IMA_TRUSTED_KEYRING Kconfig
     - drm: xlnx: zynqmp_dpsub: Add missing check for dma_set_mask
     - [arm64] drm/msm/mdp5: Don't leak some plane state
     - firmware: meson_sm: fix to avoid potential NULL pointer dereference
     - smackfs: Prevent underflow in smk_set_cipso()
     - drm/amd/pm: fix variable dereferenced issue in amdgpu_device_attr_create()
     - [arm64] drm/msm/a2xx: Call adreno_gpu_init() earlier
     - audit: fix possible soft lockup in __audit_inode_child()
     - bus: ti-sysc: Fix build warning for 64-bit build
     - bus: ti-sysc: Fix cast to enum warning
     - of: unittest: Fix overlay type in apply/revert check
     - ALSA: ac97: Fix possible error value of *rac97
     - ipmi:ssif: Add check for kstrdup
     - ipmi:ssif: Fix a memory leak when scanning for an adapter
     - drivers: clk: keystone: Fix parameter judgment in _of_pll_clk_init()
     - clk: sunxi-ng: Modify mismatched function name
     - clk: qcom: gcc-sc7180: use ARRAY_SIZE instead of specifying num_parents
     - clk: qcom: gcc-sc7180: Fix up gcc_sdcc2_apps_clk_src
     - ext4: correct grp validation in ext4_mb_good_group
     - clk: qcom: gcc-sm8250: use ARRAY_SIZE instead of specifying num_parents
     - clk: qcom: gcc-sm8250: Fix gcc_sdcc2_apps_clk_src
     - clk: qcom: reset: Use the correct type of sleep/delay based on length
     - PCI: Mark NVIDIA T4 GPUs to avoid bus reset
     - pinctrl: mcp23s08: check return value of devm_kasprintf()
     - PCI: pciehp: Use RMW accessors for changing LNKCTL
     - PCI/ASPM: Use RMW accessors for changing LNKCTL
     - clk: imx8mp: fix sai4 clock
     - clk: imx: composite-8m: fix clock pauses when set_rate would be a no-op
     - vfio/type1: fix cap_migration information leak
     - [powerpc*] fadump: reset dump area size if fadump memory reserve fails
     - [powerpc*] perf: Convert fsl_emb notifier to state machine callbacks
     - drm/amdgpu: Use RMW accessors for changing LNKCTL
     - drm/radeon: Use RMW accessors for changing LNKCTL
     - net/mlx5: Use RMW accessors for changing LNKCTL
     - wifi: ath10k: Use RMW accessors for changing LNKCTL
     - [powerpc*] pseries: Rework lppaca_shared_proc() to avoid DEBUG_PREEMPT
     - nfs/blocklayout: Use the passed in gfp flags
     - [powerpc*] iommu: Fix notifiers being shared by PCI and VIO buses
     - jfs: validate max amount of blocks before allocation.
     - fs: lockd: avoid possible wrong NULL parameter
     - NFSD: da_addr_body field missing in some GETDEVICEINFO replies
     - NFS: Guard against READDIR loop when entry names exceed MAXNAMELEN
     - NFSv4.2: fix handling of COPY ERR_OFFLOAD_NO_REQ
     - media: ad5820: Drop unsupported ad5823 from i2c_ and of_device_id tables
     - media: i2c: tvp5150: check return value of devm_kasprintf()
     - media: v4l2-core: Fix a potential resource leak in
       v4l2_fwnode_parse_link()
     - drivers: usb: smsusb: fix error handling code in smsusb_init_device
     - media: dib7000p: Fix potential division by zero
     - media: dvb-usb: m920x: Fix a potential memory leak in m920x_i2c_xfer()
     - media: cx24120: Add retval check for cx24120_message_send()
     - [arm64] scsi: hisi_sas: Print SAS address for v3 hw erroneous completion
       print
     - scsi: libsas: Introduce more SAM status code aliases in enum exec_status
     - [arm64] scsi: hisi_sas: Modify v3 HW SSP underflow error processing
     - [arm64] scsi: hisi_sas: Modify v3 HW SATA completion error processing
     - [arm64] scsi: hisi_sas: Fix warnings detected by sparse
     - [arm64] scsi: hisi_sas: Fix normally completed I/O analysed as failed
     - media: rkvdec: increase max supported height for H.264
     - media: mediatek: vcodec: Return NULL if no vdec_fb is found
     - usb: phy: mxs: fix getting wrong state with mxs_phy_is_otg_host()
     - scsi: RDMA/srp: Fix residual handling
     - scsi: iscsi: Rename iscsi_set_param() to iscsi_if_set_param()
     - scsi: iscsi: Add length check for nlattr payload
     - scsi: iscsi: Add strlen() check in iscsi_if_set{_host}_param()
     - scsi: be2iscsi: Add length check when parsing nlattrs
     - scsi: qla4xxx: Add length check when parsing nlattrs
     - serial: sprd: Assign sprd_port after initialized to avoid wrong access
     - serial: sprd: Fix DMA buffer leak issue
     - [x86] APM: drop the duplicate APM_MINOR_DEV macro
     - scsi: qedf: Do not touch __user pointer in
       qedf_dbg_stop_io_on_error_cmd_read() directly
     - scsi: qedf: Do not touch __user pointer in qedf_dbg_debug_cmd_read()
       directly
     - scsi: qedf: Do not touch __user pointer in qedf_dbg_fp_int_cmd_read()
       directly
     - coresight: tmc: Explicit type conversions to prevent integer overflow
     - dma-buf/sync_file: Fix docs syntax
     - driver core: test_async: fix an error code
     - IB/uverbs: Fix an potential error pointer dereference
     - fsi: aspeed: Reset master errors after CFAM reset
     - iommu/qcom: Disable and reset context bank before programming
     - [amd64] iommu/vt-d: Fix to flush cache of PASID directory table
     - media: go7007: Remove redundant if statement
     - USB: gadget: f_mass_storage: Fix unused variable warning
     - media: ov5640: Enable MIPI interface in ov5640_set_power_mipi()
     - media: i2c: ov2680: Set V4L2_CTRL_FLAG_MODIFY_LAYOUT on flips
     - media: ov2680: Remove auto-gain and auto-exposure controls
     - media: ov2680: Fix ov2680_bayer_order()
     - media: ov2680: Fix vflip / hflip set functions
     - media: ov2680: Fix regulators being left enabled on ov2680_power_on()
       errors
     - cgroup:namespace: Remove unused cgroup_namespaces_init()
     - scsi: core: Use 32-bit hostnum in scsi_host_lookup()
     - scsi: fcoe: Fix potential deadlock on &fip->ctlr_lock
     - serial: tegra: handle clk prepare error in tegra_uart_hw_init()
     - [arm*] amba: bus: fix refcount leak
     - Revert "IB/isert: Fix incorrect release of isert connection"
     - RDMA/siw: Balance the reference of cep->kref in the error path
     - RDMA/siw: Correct wrong debug message
     - HID: logitech-dj: Fix error handling in logi_dj_recv_switch_to_dj_mode()
     - HID: multitouch: Correct devm device reference for hidinput input_dev name
     - [x86] speculation: Mark all Skylake CPUs as vulnerable to GDS
     - tracing: Fix race issue between cpu buffer write and swap
     - mtd: rawnand: brcmnand: Fix mtd oobsize
     - [arm64,armhf] phy/rockchip: inno-hdmi: use correct vco_div_5 macro on
       rk3328
     - [arm64,armhf] phy/rockchip: inno-hdmi: round fractal pixclock in rk3328
       recalc_rate
     - [arm64,armhf] phy/rockchip: inno-hdmi: do not power on rk3328 post pll on
       reg write
     - rpmsg: glink: Add check for kstrdup
     - mtd: spi-nor: Check bus width while setting QE bit
     - mtd: rawnand: fsmc: handle clk prepare error in fsmc_nand_resume()
     - um: Fix hostaudio build errors
     - dmaengine: ste_dma40: Add missing IRQ check in d40_probe
     - cpufreq: Fix the race condition while updating the transition_task of
       policy
     - virtio_ring: fix avail_wrap_counter in virtqueue_add_packed
     - igmp: limit igmpv3_newpack() packet size to IP_MAX_MTU
     - netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for
       ip_set_hash_netportnet.c (CVE-2023-42753)
     - netfilter: xt_u32: validate user space input
     - netfilter: xt_sctp: validate the flag_info count
     - skbuff: skb_segment, Call zero copy functions before using skbuff frags
     - igb: set max size RX buffer when store bad packet is enabled
     - PM / devfreq: Fix leak in devfreq_dev_release()
     - ALSA: pcm: Fix missing fixup call in compat hw_refine ioctl
     - printk: ringbuffer: Fix truncating buffer size min_t cast
     - scsi: core: Fix the scsi_set_resid() documentation
     - ipmi_si: fix a memleak in try_smi_init()
     - [armhf] OMAP2+: Fix -Warray-bounds warning in _pwrdm_state_switch()
     - backlight/gpio_backlight: Compare against struct fb_info.device
     - backlight/bd6107: Compare against struct fb_info.device
     - backlight/lv5207lp: Compare against struct fb_info.device
     - [arm64] csum: Fix OoB access in IP checksum code for negative lengths
     - media: dvb: symbol fixup for dvb_attach()
     - Revert "scsi: qla2xxx: Fix buffer overrun"
     - scsi: mpt3sas: Perform additional retries if doorbell read returns 0
     - ntb: Drop packets when qp link is down
     - ntb: Clean up tx tail index on link down
     - ntb: Fix calculation ntb_transport_tx_free_entry()
     - Revert "PCI: Mark NVIDIA T4 GPUs to avoid bus reset"
     - procfs: block chmod on /proc/thread-self/comm
     - dlm: fix plock lookup when using multiple lockspaces
     - dccp: Fix out of bounds access in DCCP error handler
     - X.509: if signature is unsupported skip validation
     - net: handle ARPHRD_PPP in dev_is_mac_header_xmit()
     - fsverity: skip PKCS#7 parser when keyring is empty
     - pstore/ram: Check start of empty przs during init
     - [s390x] ipl: add missing secure/has_secure file to ipl type 'unknown'
     - [armhf] crypto: stm32 - fix loop iterating through scatterlist for DMA
     - cpufreq: brcmstb-avs-cpufreq: Fix -Warray-bounds bug
     - usb: typec: bus: verify partner exists in typec_altmode_attention
     - USB: core: Unite old scheme and new scheme descriptor reads
     - USB: core: Change usb_get_device_descriptor() API
     - USB: core: Fix race by not overwriting udev->descriptor in hub_port_init()
     - USB: core: Fix oversight in SuperSpeed initialization
     - usb: typec: tcpci: clear the fault status bit
     - tracing: Zero the pipe cpumask on alloc to avoid spurious -EBUSY
     - md/md-bitmap: remove unnecessary local variable in backlog_store()
     - udf: initialize newblock to 0
     - net/ipv6: SKB symmetric hash should incorporate transport ports
     - io_uring: always lock in io_apoll_task_func
     - io_uring: break out of iowq iopoll on teardown
     - io_uring: break iopolling on signal
     - scsi: qla2xxx: Fix deletion race condition
     - scsi: qla2xxx: fix inconsistent TMF timeout
     - scsi: qla2xxx: Fix erroneous link up failure
     - scsi: qla2xxx: Turn off noisy message log
     - scsi: qla2xxx: Remove unsupported ql2xenabledif option
     - fbdev/ep93xx-fb: Do not assign to struct fb_info.dev
     - drm/ast: Fix DRAM init on AST2200
     - pinctrl: cherryview: fix address_space_handler() argument
     - dt-bindings: clock: xlnx,versal-clk: drop select:false
     - clk: imx: pll14xx: dynamically configure PLL for 393216000/361267200Hz
     - clk: qcom: gcc-mdm9615: use proper parent for pll0_vote clock
     - soc: qcom: qmi_encdec: Restrict string length in decode
     - NFS: Fix a potential data corruption
     - NFSv4/pnfs: minor fix for cleanup path in nfs4_get_device_info
     - backlight: gpio_backlight: Drop output GPIO direction check for initial
       power state
     - perf annotate bpf: Don't enclose non-debug code with an assert()
     - [x86] virt: Drop unnecessary check on extended CPUID level in
       cpu_has_svm()
     - perf top: Don't pass an ERR_PTR() directly to perf_session__delete()
     - watchdog: intel-mid_wdt: add MODULE_ALIAS() to allow auto-load
     - pwm: lpc32xx: Remove handling of PWM channels
     - net/sched: fq_pie: avoid stalls in fq_pie_timer()
     - sctp: annotate data-races around sk->sk_wmem_queued
     - ipv4: annotate data-races around fi->fib_dead
     - net: read sk->sk_family once in sk_mc_loop()
     - [x86] drm/i915/gvt: Save/restore HW status to support GVT suspend/resume
     - [x86] drm/i915/gvt: Drop unused helper intel_vgpu_reset_gtt()
     - ipv4: ignore dst hint for multipath routes
     - igb: disable virtualization features on 82580
     - veth: Fixing transmit return status for dropped packets
     - net: ipv6/addrconf: avoid integer underflow in ipv6_create_tempaddr
     - af_unix: Fix data-races around user->unix_inflight.
     - af_unix: Fix data-race around unix_tot_inflight.
     - af_unix: Fix data-races around sk->sk_shutdown.
     - af_unix: Fix data race around sk->sk_err.
     - net: sched: sch_qfq: Fix UAF in qfq_dequeue() (CVE-2023-4921)
     - kcm: Destroy mutex in kcm_exit_net()
     - igc: Change IGC_MIN to allow set rx/tx value between 64 and 80
     - igbvf: Change IGBVF_MIN to allow set rx/tx value between 64 and 80
     - igb: Change IGB_MIN to allow set rx/tx value between 64 and 80
     - [s390x] zcrypt: don't leak memory if dev_set_name() fails
     - idr: fix param name in idr_alloc_cyclic() doc
     - ip_tunnels: use DEV_STATS_INC()
     - netfilter: nfnetlink_osf: avoid OOB read
     - [arm64] net: hns3: fix the port information display when sfp is absent
     - sh: boards: Fix CEU buffer size passed to dma_declare_coherent_memory()
     - ext4: add correct group descriptors and reserved GDT blocks to system zone
     - ata: sata_gemini: Add missing MODULE_DESCRIPTION
     - ata: pata_ftide010: Add missing MODULE_DESCRIPTION
     - fuse: nlookup missing decrement in fuse_direntplus_link
     - btrfs: don't start transaction when joining with TRANS_JOIN_NOSTART
     - btrfs: use the correct superblock to compare fsid in btrfs_validate_super
     - mtd: rawnand: brcmnand: Fix crash during the panic_write
     - mtd: rawnand: brcmnand: Fix potential out-of-bounds access in oob write
     - mtd: rawnand: brcmnand: Fix potential false time out warning
     - drm/amd/display: prevent potential division by zero errors
     - perf hists browser: Fix hierarchy mode header
     - perf tools: Handle old data in PERF_RECORD_ATTR
     - perf hists browser: Fix the number of entries for 'e' key
     - ACPI: APEI: explicit init of HEST and GHES in apci_init()
     - [arm64] sdei: abort running SDEI handlers during crash
     - scsi: qla2xxx: If fcport is undergoing deletion complete I/O with retry
     - scsi: qla2xxx: Consolidate zio threshold setting for both FCP & NVMe
     - scsi: qla2xxx: Fix crash in PCIe error handling
     - scsi: qla2xxx: Flush mailbox commands on chip reset
     - [armhf] dts: samsung: exynos4210-i9100: Fix LCD screen's physical size
     - net: ipv4: fix one memleak in __inet_del_ifa()
     - net/smc: use smc_lgr_list.lock to protect smc_lgr_list.list iterate in
       smcr_port_add
     - net: ethernet: mvpp2_main: fix possible OOB write in
       mvpp2_ethtool_get_rxnfc()
     - net: ethernet: mtk_eth_soc: fix possible NULL pointer dereference in
       mtk_hwlro_get_fdir_all()
     - hsr: Fix uninit-value access in fill_frame_info()
     - r8152: check budget for r8152_poll()
     - kcm: Fix memory leak in error path of kcm_sendmsg()
     - ipv6: fix ip6_sock_set_addr_preferences() typo
     - ixgbe: fix timestamp configuration code
     - kcm: Fix error handling for SOCK_DGRAM in kcm_sendmsg().
     - drm/amd/display: Fix a bug when searching for insert_above_mpcc
     https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.196
     - Revert "configfs: fix a race in configfs_lookup()"
     https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.197
     - autofs: fix memory leak of waitqueues in autofs_catatonic_mode
     - btrfs: output extra debug info if we failed to find an inline backref
     - ACPICA: Add AML_NO_OPERAND_RESOLVE flag to Timer
     - kernel/fork: beware of __put_task_struct() calling context
     - rcuscale: Move rcu_scale_writer() schedule_timeout_uninterruptible() to
       _idle()
     - [x86] ACPI: video: Add backlight=native DMI quirk for Lenovo Ideapad Z470
     - [arm64] perf/smmuv3: Enable HiSilicon Erratum 162001900 quirk for HIP08/09
     - [x86] ACPI: video: Add backlight=native DMI quirk for Apple iMac12,1 and
       iMac12,2
     - hw_breakpoint: fix single-stepping when using bpf_overflow_handler
     - devlink: remove reload failed checks in params get/set callbacks
     - crypto: lrw,xts - Replace strlcpy with strscpy
     - wifi: ath9k: fix fortify warnings
     - wifi: ath9k: fix printk specifier
     - wifi: mwifiex: fix fortify warning
     - wifi: wil6210: fix fortify warnings
     - crypto: lib/mpi - avoid null pointer deref in mpi_cmp_ui()
     - tpm_tis: Resend command to recover from data transfer errors
     - [arm64,armhf] mmc: sdhci-esdhc-imx: improve ESDHC_FLAG_ERR010450
     - alx: fix OOB-read compiler warning
     - netfilter: ebtables: fix fortify warnings in size_entry_mwt()
     - wifi: mac80211_hwsim: drop short frames
     - ALSA: hda: intel-dsp-cfg: add LunarLake support
     - [armhf] drm/exynos: fix a possible null-pointer dereference due to data
       race in exynos_drm_crtc_atomic_disable()
     - [armhf] bus: ti-sysc: Configure uart quirks for k3 SoC
     - md: raid1: fix potential OOB in raid1_remove_disk()
     - fs/jfs: prevent double-free in dbUnmount() after failed jfs_remount()
     - jfs: fix invalid free of JFS_IP(ipimap)->i_imap in diUnmount
     - [powerpc*] pseries: fix possible memory leak in ibmebus_bus_init()
     - media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer
     - media: dw2102: Fix null-ptr-deref in dw2102_i2c_transfer()
     - media: af9005: Fix null-ptr-deref in af9005_i2c_xfer
     - media: anysee: fix null-ptr-deref in anysee_master_xfer
     - media: az6007: Fix null-ptr-deref in az6007_i2c_xfer()
     - media: dvb-usb-v2: gl861: Fix null-ptr-deref in gl861_i2c_master_xfer
     - media: tuners: qt1010: replace BUG_ON with a regular error
     - media: pci: cx23885: replace BUG with error return
     - usb: gadget: fsl_qe_udc: validate endpoint index for ch9 udc
     - scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show()
     - serial: cpm_uart: Avoid suspicious locking
     - media: pci: ipu3-cio2: Initialise timing struct to avoid a compiler
       warning
     - kobject: Add sanity check for kset->kobj.ktype in kset_register()
     - perf jevents: Make build dependency on test JSONs
     - perf tools: Add an option to build without libbfd
     - btrfs: move btrfs_pinned_by_swapfile prototype into volumes.h
     - btrfs: add a helper to read the superblock metadata_uuid
     - btrfs: compare the correct fsid/metadata_uuid in btrfs_validate_super
     - scsi: qla2xxx: Fix NULL vs IS_ERR() bug for debugfs_create_dir()
     - scsi: lpfc: Fix the NULL vs IS_ERR() bug for debugfs_create_file()
     - [x86] boot/compressed: Reserve more memory for page tables
     - md/raid1: fix error: ISO C90 forbids mixed declarations
     - attr: block mode changes of symlinks
     - ovl: fix incorrect fdput() on aio completion
     - btrfs: fix lockdep splat and potential deadlock after failure running
       delayed items
     - btrfs: release path before inode lookup during the ino lookup ioctl
     - drm/amdgpu: fix amdgpu_cs_p1_user_fence
     - net/sched: Retire rsvp classifier (CVE-2023-42755)
     - proc: fix a dentry lock race between release_task and lookup
     - mm/filemap: fix infinite loop in generic_file_buffered_read()
     - drm/amd/display: enable cursor degamma for DCN3+ DRM legacy gamma
     - tracing: Have current_trace inc the trace array ref count
     - tracing: Have option files inc the trace array ref count
     - nfsd: fix change_info in NFSv4 RENAME replies
     - tracefs: Add missing lockdown check to tracefs_create_dir()
     - [armhf] i2c: aspeed: Reset the i2c controller when timeout occurs
     - ata: libata: disallow dev-initiated LPM transitions to unsupported states
     - scsi: megaraid_sas: Fix deadlock on firmware crashdump
     - scsi: pm8001: Setup IRQs on resume
     - ext4: fix rec_len verify error
 .
   [ Salvatore Bonaccorso ]
   * [rt] Refresh "cpuset: Convert callback_lock to raw_spinlock_t"
   * Bump ABI to 26
   * [rt] Refresh "eventfd: Make signal recursion protection a task bit"
   * Drop now unknown config options for IPv4 and IPv6 Resource Reservation
     Protocol (RSVP, RSVP6)
   * netfilter: nf_tables: integrate pipapo into commit protocol
   * netfilter: nf_tables: don't skip expired elements during walk
     (CVE-2023-4244)
   * netfilter: nf_tables: GC transaction API to avoid race with control plane
     (CVE-2023-4244)
   * netfilter: nf_tables: adapt set backend to use GC transaction API
     (CVE-2023-4244)
   * netfilter: nft_set_hash: mark set element as dead when deleting from packet
     path (CVE-2023-4244)
   * netfilter: nf_tables: remove busy mark and gc batch API (CVE-2023-4244)
   * netfilter: nf_tables: don't fail inserts if duplicate has expired
   * netfilter: nf_tables: fix GC transaction races with netns and netlink event
     exit path (CVE-2023-4244)
   * netfilter: nf_tables: GC transaction race with netns dismantle
     (CVE-2023-4244)
   * netfilter: nf_tables: GC transaction race with abort path
   * netfilter: nf_tables: use correct lock to protect gc_list
   * netfilter: nf_tables: defer gc run if previous batch is still pending
   * netfilter: nft_set_rbtree: skip sync GC for new elements in this transaction
   * netfilter: nft_set_rbtree: use read spinlock to avoid datapath contention
   * netfilter: nft_set_pipapo: stop GC iteration if GC transaction allocation
     fails
   * netfilter: nft_set_hash: try later when GC hits EAGAIN on iteration
   * netfilter: nf_tables: fix memleak when more than 255 elements expired
   * netfilter: nf_tables: disallow element removal on anonymous sets
   * netfilter: ipset: Fix race between IPSET_CMD_CREATE and IPSET_CMD_SWAP
     (CVE-2023-42756)
   * netfilter: nf_tables: unregister flowtable hooks on netns exit
   * netfilter: nf_tables: double hook unregistration in netns path
   * ipv4: fix null-deref in ipv4_link_failure
 .
 linux (5.10.191-1) bullseye-security; urgency=high
 .
   * New upstream stable update:
     https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.180
     - seccomp: Move copy_seccomp() to no failure path.
     - [arm64] KVM: arm64: Fix buffer overflow in kvm_arm_set_fw_reg()
     - wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
       (CVE-2023-1380)
     - drm/fb-helper: set x/yres_virtual in drm_fb_helper_check_var
     - bluetooth: Perform careful capability checks in hci_sock_ioctl()
       (CVE-2023-2002)
     - [x86] fpu: Prevent FPU state corruption
     - USB: serial: option: add UNISOC vendor and TOZED LT70C product
     - driver core: Don't require dynamic_debug for initcall_debug probe timing
     - [x86] ASoC: Intel: bytcr_rt5640: Add quirk for the Acer Iconia One 7
       B1-750
     - asm-generic/io.h: suppress endianness warnings for readq() and writeq()
     - wireguard: timers: cast enum limits members to int in prints
     - PCI: pciehp: Fix AB-BA deadlock between reset_lock and device_lock
     - [arm64] PCI: qcom: Fix the incorrect register usage in v2.7.0 config
     - [arm64,armhf] USB: dwc3: fix runtime pm imbalance on probe errors
     - [arm64,armhf] USB: dwc3: fix runtime pm imbalance on unbind
     - [x86] hwmon: (k10temp) Check range scale when CUR_TEMP register is
       read-write
     - hwmon: (adt7475) Use device_property APIs when configuring polarity
     - posix-cpu-timers: Implement the missing timer_wait_running callback
     - perf sched: Cast PTHREAD_STACK_MIN to int as it may turn into
       sysconf(__SC_THREAD_STACK_MIN_VALUE)
     - blk-mq: release crypto keyslot before reporting I/O complete
     - blk-crypto: make blk_crypto_evict_key() return void
     - blk-crypto: make blk_crypto_evict_key() more robust
     - ext4: use ext4_journal_start/stop for fast commit transactions
     - xhci: fix debugfs register accesses while suspended
     - tick/nohz: Fix cpu_is_hotpluggable() by checking with nohz subsystem
     - [mips*] fw: Allow firmware to pass a empty env
     - ipmi:ssif: Add send_retries increment
     - ipmi: fix SSIF not responding under certain cond.
     - kheaders: Use array declaration instead of char
     - [arm64,armhf] pwm: meson: Fix axg ao mux parents
     - [arm64,armhf] pwm: meson: Fix g12a ao clk81 name
     - ring-buffer: Sync IRQ works before buffer destruction
     - crypto: api - Demote BUG_ON() in crypto_unregister_alg() to a WARN_ON()
     - [arm64] crypto: safexcel - Cleanup ring IRQ workqueues on load failure
     - rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being
       kprobe-ed
     - reiserfs: Add security prefix to xattr name in reiserfs_security_write()
     - [x86] KVM: nVMX: Emulate NOPs in L2, and PAUSE if it's not intercepted
     - relayfs: fix out-of-bounds access in relay_file_read (CVE-2023-3268)
     - writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
     - [armhf] i2c: omap: Fix standard mode false ACK readings
     - [amd64] iommu/amd: Fix "Guest Virtual APIC Table Root Pointer"
       configuration in IRTE
     - Revert "ubifs: dirty_cow_znode: Fix memleak in error handling path"
     - ubifs: Fix memleak when insert_old_idx() failed
     - ubi: Fix return value overwrite issue in try_write_vid_and_data()
     - ubifs: Free memory for tmpfile name
     - nilfs2: do not write dirty data after degenerating to read-only
     - nilfs2: fix infinite loop in nilfs_mdt_get_block()
     - md/raid10: fix null-ptr-deref in raid10_sync_request
     - [arm64] mailbox: zynqmp: Fix IPI isr handling
     - [arm64] mailbox: zynqmp: Fix typo in IPI documentation
     - wifi: rtl8xxxu: RTL8192EU always needs full init
     - [arm64,armhf] clk: rockchip: rk3399: allow clk_cifout to force
       clk_cifout_src to reparent
     - rcu: Fix missing TICK_DEP_MASK_RCU_EXP dependency check
     - selinux: fix Makefile dependencies of flask.h
     - selinux: ensure av_permissions.h is built when needed
     - tpm, tpm_tis: Do not skip reset of original interrupt vector
     - tpm, tpm_tis: Claim locality before writing TPM_INT_ENABLE register
     - tpm, tpm_tis: Disable interrupts if tpm_tis_probe_irq() failed
     - tpm, tpm_tis: Claim locality before writing interrupt registers
     - tpm, tpm: Implement usage counter for locality
     - tpm, tpm_tis: Claim locality when interrupts are reenabled on resume
     - erofs: stop parsing non-compact HEAD index if clusterofs is invalid
     - erofs: fix potential overflow calculating xattr_isize
     - [arm64,armhf] drm/rockchip: Drop unbalanced obj unref
     - drm/vgem: add missing mutex_destroy
     - drm/probe-helper: Cancel previous job before starting new one
     - [arm64] drm/msm/disp/dpu: check for crtc enable rather than crtc active to
       release shared resources
     - [amd64] EDAC/skx: Fix overflows on the DRAM row address mapping arrays
     - [x86] MCE/AMD: Use an u64 for bank_map
     - [arm64] firmware: qcom_scm: Clear download bit during reboot
     - [arm64] drm/bridge: adv7533: Fix adv7533_mode_valid for adv7533 and
       adv7535
     - [arm64] drm/msm/adreno: Defer enabling runpm until hw_init()
     - [arm64] drm/msm/adreno: drop bogus pm_runtime_set_active()
     - [arm64] drm: msm: adreno: Disable preemption on Adreno 510
     - [x86] ACPI: processor: Fix evaluating _PDC method when running as Xen dom0
     - [arm64] mmc: sdhci-of-esdhc: fix quirk to ignore command inhibit for data
     - [arm64,armhf] drm/lima/lima_drv: Add missing unwind goto in
       lima_pdev_probe()
     - regulator: core: Consistently set mutex_owner when using
       ww_mutex_lock_slow()
     - regulator: core: Avoid lockdep reports when resolving supplies
     - media: dm1105: Fix use after free bug in dm1105_remove due to race
       condition (CVE-2023-35824)
     - media: saa7134: fix use after free bug in saa7134_finidev due to race
       condition (CVE-2023-35823)
     - [x86] apic: Fix atomic update of offset in reserve_eilvt_offset()
     - [x86] ioapic: Don't return 0 from arch_dynirq_lower_bound()
     - debugobject: Prevent init race with static objects
     - [x86] drm/i915: Make intel_get_crtc_new_encoder() less oopsy
     - tick/sched: Use tick_next_period for lockless quick check
     - tick/sched: Reduce seqcount held scope in tick_do_update_jiffies64()
     - tick/sched: Optimize tick_do_update_jiffies64() further
     - tick: Get rid of tick_period
     - tick/common: Align tick period with the HZ tick.
     - wifi: ath6kl: minor fix for allocation size
     - wifi: ath9k: hif_usb: fix memory leak of remain_skbs
     - wifi: ath5k: fix an off by one check in ath5k_eeprom_read_freq_list()
     - wifi: ath6kl: reduce WARN to dev_dbg() in callback
     - tools: bpftool: Remove invalid \' json escape
     - wifi: rtw88: mac: Return the original error from rtw_pwr_seq_parser()
     - wifi: rtw88: mac: Return the original error from rtw_mac_power_switch()
     - bpf: take into account liveness when propagating precision
     - bpf: fix precision propagation verbose logging
     - scm: fix MSG_CTRUNC setting condition for SO_PASSSEC
     - bpf: Remove misleading spec_v1 check on var-offset stack read
     - vlan: partially enable SIOCSHWTSTAMP in container
     - net/packet: annotate accesses to po->xmit
     - net/packet: convert po->origdev to an atomic flag
     - net/packet: convert po->auxdata to an atomic flag
     - scsi: target: Rename struct sense_info to sense_detail
     - scsi: target: Rename cmd.bad_sector to cmd.sense_info
     - scsi: target: Make state_list per CPU
     - scsi: target: Fix multiple LUN_RESET handling
     - scsi: target: iscsit: Fix TAS handling during conn cleanup
     - scsi: megaraid: Fix mega_cmd_done() CMDID_INT_CMDS
     - f2fs: handle dqget error in f2fs_transfer_project_quota()
     - f2fs: enforce single zone capacity
     - f2fs: apply zone capacity to all zone type
     - f2fs: compress: fix to call f2fs_wait_on_page_writeback() in
       f2fs_write_raw_pages()
     - [arm64] crypto: caam - Clear some memory in instantiate_rng
     - wifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_rfreg()
     - wifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_reg()
     - net: qrtr: correct types of trace event parameters
     - bpftool: Fix bug for long instructions in program CFG dumps
     - crypto: drbg - make drbg_prepare_hrng() handle jent instantiation errors
     - crypto: drbg - Only fail when jent is unavailable in FIPS mode
     - xsk: Fix unaligned descriptor validation
     - f2fs: fix to avoid use-after-free for cached IPU bio
     - scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
     - [arm64,armhf] net: ethernet: stmmac: dwmac-rk: fix optional phy regulator
       handling
     - bpf, sockmap: fix deadlocks in the sockhash and sockmap
     - nvme: handle the persistent internal error AER
     - nvme: fix async event trace event
     - bpf, sockmap: Revert buggy deadlock fix in the sockhash and sockmap
     - md/raid10: fix leak of 'r10bio->remaining' for recovery
     - md/raid10: fix memleak for 'conf->bio_split'
     - md/raid10: fix memleak of md thread
     - wifi: iwlwifi: yoyo: Fix possible division by zero
     - wifi: iwlwifi: fw: move memset before early return
     - jdb2: Don't refuse invalidation of already invalidated buffers
     - wifi: iwlwifi: make the loop for card preparation effective
     - wifi: iwlwifi: mvm: check firmware response size
     - wifi: iwlwifi: fw: fix memory leak in debugfs
     - ixgbe: Allow flow hash to be set via ethtool
     - ixgbe: Enable setting RSS table to default values
     - bpf: Don't EFAULT for getsockopt with optval=NULL
     - netfilter: nf_tables: don't write table validation state without mutex
     - net/sched: sch_fq: fix integer overflow of "credit"
     - ipv4: Fix potential uninit variable access bug in __ip_make_skb()
     - Revert "Bluetooth: btsdio: fix use after free bug in btsdio_remove due to
       unfinished work"
     - netlink: Use copy_to_user() for optval in netlink_getsockopt().
     - net: amd: Fix link leak when verifying config failed
     - tcp/udp: Fix memleaks of sk and zerocopy skbs with TX timestamp.
     - pstore: Revert pmsg_lock back to a normal mutex
     - [arm64,armhf] usb: dwc3: gadget: Change condition for processing suspend
       event
     - fpga: bridge: fix kernel-doc parameter description
     - iio: light: max44009: add missing OF device matching
     - [armhf] spi: spi-imx: using pm_runtime_resume_and_get instead of
       pm_runtime_get_sync
     - [armhf] spi: imx: Don't skip cleanup in remove's error path
     - [armhf] PCI: imx6: Install the fault handler only on compatible match
     - ASoC: es8316: Use IRQF_NO_AUTOEN when requesting the IRQ
     - ASoC: es8316: Handle optional IRQ assignment
     - linux/vt_buffer.h: allow either builtin or modular for macros
     - [arm64] spi: qup: Don't skip cleanup in remove's error path
     - [x86] vmci_host: fix a race condition in vmci_host_poll() causing GPF
     - of: Fix modalias string generation
     - [arm64,armhf] usb: chipidea: fix missing goto in `ci_hdrc_probe`
     - [arm64] tty: serial: fsl_lpuart: adjust buffer length to the intended size
     - serial: 8250: Add missing wakeup event reporting
     - [x86] staging: rtl8192e: Fix W_DISABLE# does not work after stop/start
     - [arm64] spmi: Add a check for remove callback when removing a SPMI driver
     - [powerpc*] rtas: use memmove for potentially overlapping buffer copy
     - perf/core: Fix hardlockup failure caused by perf throttle
     - [amd64] RDMA/rdmavt: Delete unnecessary NULL check
     - workqueue: Rename "delayed" (delayed by active management) to "inactive"
     - workqueue: Fix hung time report of worker pools
     - [armhf] rtc: omap: include header for omap_rtc_power_off_program prototype
     - RDMA/mlx4: Prevent shift wrapping in set_user_sq_size()
     - [arm64,armhf] rtc: meson-vrtc: Use ktime_get_real_ts64() to get the
       current time
     - clk: add missing of_node_put() in "assigned-clocks" property parsing
     - RDMA/siw: Remove namespace check from siw_netdev_event()
     - RDMA/cm: Trace icm_send_rej event before the cm state is reset
     - RDMA/srpt: Add a check for valid 'mad_agent' pointer
     - [amd64] IB/hfi1: Fix SDMA mmu_rb_node not being evicted in LRU order
     - [amd64] IB/hfi1: Add AIP tx traces
     - [amd64] IB/hfi1: Add additional usdma traces
     - [amd64] IB/hfi1: Fix bugs with non-PAGE_SIZE-end multi-iovec user SDMA
       requests
     - NFSv4.1: Always send a RECLAIM_COMPLETE after establishing lease
     - [arm*] firmware: raspberrypi: Introduce devm_rpi_firmware_get()
     - RDMA/mlx5: Fix flow counter query via DEVX
     - SUNRPC: remove the maximum number of retries in call_bind_status
     - RDMA/mlx5: Use correct device num_ports when modify DC
     - ext4: fix use-after-free read in ext4_find_extent for bigalloc + inline
     - [arm64] dmaengine: mv_xor_v2: Fix an error code.
     - [armhf] leds: tca6507: Fix error handling of using
       fwnode_property_read_string
     - [arm64,armhf] phy: tegra: xusb: Add missing tegra_xusb_port_unregister for
       usb2_port and ulpi_port
     - afs: Fix updating of i_size with dv jump from server
     - btrfs: scrub: reject unsupported scrub flags
     - [s390x] dasd: fix hanging blockdevice after request requeue
     - dm integrity: call kmem_cache_destroy() in dm_integrity_init() error path
     - dm flakey: fix a crash with invalid table line
     - dm ioctl: fix nested locking in table_clear() to remove deadlock concern
       (CVE-2023-2269)
     - perf auxtrace: Fix address filter entire kernel size
     - perf intel-pt: Fix CYC timestamps after standalone CBR
     - [arm64] Always load shadow stack pointer directly from the task struct
     - [arm64] Stash shadow stack pointer in the task struct on interrupt
     - debugobject: Ensure pool refill (again)
     - scsi: target: core: Avoid smp_processor_id() in preemptible code
     - tty: create internal tty.h file
     - tty: audit: move some local functions out of tty.h
     - tty: move some internal tty lock enums and functions out of tty.h
     - tty: move some tty-only functions to drivers/tty/tty.h
     - tty: clean include/linux/tty.h up
     - tty: Prevent writing chars during tcsetattr TCSADRAIN/FLUSH
     - ring-buffer: Ensure proper resetting of atomic variables in
       ring_buffer_reset_online_cpus
     - [amd64] crypto: ccp - Clear PSP interrupt status register before calling
       handler
     - [arm64] mailbox: zynq: Switch to flexible array to simplify code
     - [arm64] mailbox: zynqmp: Fix counts of child nodes
     - dm verity: skip redundant verity_handle_err() on I/O errors
     - dm verity: fix error handling for check_at_most_once on FEC
     - scsi: qedi: Fix use after free bug in qedi_remove()
     - [armhf] net/ncsi: clear Tx enable mode when handling a Config required AEN
     - net/sched: cls_api: remove block_cb from driver_list before freeing
     - sit: update dev->needed_headroom in ipip6_tunnel_bind_dev()
     - [arm64,armhf] net: dsa: mv88e6xxx: add mv88e6321 rsvd2cpu
     - writeback: fix call of incorrect macro
     - [arm64,armhf] watchdog: dw_wdt: Fix the error handling path of
       dw_wdt_drv_probe()
     - net/sched: act_mirred: Add carrier check
     - sfc: Fix module EEPROM reporting for QSFP modules
     - rxrpc: Fix hard call timeout units
     - af_packet: Don't send zero-byte data in packet_sendmsg_spkt().
     - drm/amdgpu: add a missing lock for AMDGPU_SCHED
     - ALSA: caiaq: input: Add error handling for unsupported input methods in
       `snd_usb_caiaq_input_init`
     - virtio_net: split free_unused_bufs()
     - virtio_net: suppress cpu stall when free_unused_bufs
     - [arm64] net: enetc: check the index of the SFI rather than the handle
     - crypto: sun8i-ss - Fix a test in sun8i_ss_setup_ivs()
     - btrfs: fix btrfs_prev_leaf() to not return the same key twice
     - btrfs: don't free qgroup space unless specified
     - btrfs: print-tree: parent bytenr must be aligned to sector size
     - cifs: fix pcchunk length type in smb2_copychunk_range
     - inotify: Avoid reporting event with invalid wd
     - [armhf] remoteproc: stm32: Call of_node_put() on iteration error
     - [armhf] dts: exynos: fix WM8960 clock name in Itop Elite
     - f2fs: fix potential corruption when moving a directory
     - [armhf] drm/panel: otm8009a: Set backlight parent to panel device
     - drm/amdgpu: fix an amdgpu_irq_put() issue in gmc_v9_0_hw_fini()
     - drm/amdgpu/gfx: disable gfx9 cp_ecc_error_irq only when enabling legacy
       gfx ras
     - drm/amdgpu: disable sdma ecc irq only when sdma RAS is enabled in suspend
     - HID: wacom: Set a default resolution for older tablets
     - HID: wacom: insert timestamp to packed Bluetooth (BT) events
     - [x86] KVM: x86: do not report a vCPU as preempted outside instruction
       boundaries (CVE-2022-39189)
     - ext4: fix WARNING in mb_find_extent
     - ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
       (CVE-2023-34256)
     - ext4: fix data races when using cached status extents
     - ext4: check iomap type only if ext4_iomap_begin() does not fail
     - ext4: improve error recovery code paths in __ext4_remount()
     - ext4: fix deadlock when converting an inline directory in nojournal mode
     - ext4: add bounds checking in get_max_inline_xattr_value_size()
     - ext4: bail out of ext4_xattr_ibody_get() fails for any reason
     - ext4: remove a BUG_ON in ext4_mb_release_group_pa()
     - ext4: fix invalid free tracking in ext4_xattr_move_to_block()
     - serial: 8250: Fix serial8250_tx_empty() race with DMA Tx
     - drbd: correctly submit flush bio on barrier
     - [x86] KVM: x86: Ensure PV TLB flush tracepoint reflects KVM behavior
     - [x86] KVM: x86: Fix recording of guest steal time / preempted status
     - [x86] KVM: Fix steal time asm constraints
     - [x86] KVM: x86: Remove obsolete disabling of page faults in
       kvm_arch_vcpu_put()
     - [x86] KVM: x86: do not set st->preempted when going back to user space
     - [x86] KVM: x86: revalidate steal time cache if MSR value changes
     - [x86] KVM: x86: do not report preemption if the steal time cache is stale
     - [x86] KVM: x86: move guest_pv_has out of user_access section
     - printk: declare printk_deferred_{enter,safe}() in include/linux/printk.h
     - [armhf] drm/exynos: move to use request_irq by IRQF_NO_AUTOEN flag
     - mm/page_alloc: fix potential deadlock on zonelist_update_seq seqlock
     - drm/amd/display: Fix hang when skipping modeset
     https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.181
     - driver core: add a helper to setup both the of_node and fwnode of a device
     - drm/mipi-dsi: Set the fwnode for mipi_dsi_device
     - linux/dim: Do nothing if no time delta between samples
     - net: Fix load-tearing on sk->sk_stamp in sock_recv_cmsgs().
     - netfilter: conntrack: fix possible bug_on with enable_hooks=1
     - netlink: annotate accesses to nlk->cb_running
     - net: annotate sk->sk_err write from do_recvmmsg()
     - net: deal with most data-races in sk_wait_event()
     - net: tap: check vlan with eth_type_vlan() method
     - net: add vlan_get_protocol_and_depth() helper
     - tcp: factor out __tcp_close() helper
     - tcp: add annotations around sk->sk_shutdown accesses
     - ipvlan:Fix out-of-bounds caused by unclear skb->cb (CVE-2023-3090)
     - net: datagram: fix data-races in datagram_poll()
     - af_unix: Fix a data race of sk->sk_receive_queue->qlen.
     - af_unix: Fix data races around sk->sk_shutdown.
     - [x86] drm/i915/dp: prevent potential div-by-zero
     - [x86] fbdev: arcfb: Fix error handling in arcfb_probe()
     - ext4: remove an unused variable warning with CONFIG_QUOTA=n
     - ext4: reflect error codes from ext4_multi_mount_protect() to its callers
     - ext4: don't clear SB_RDONLY when remounting r/w until quota is re-enabled
     - ext4: fix lockdep warning when enabling MMP
     - ext4: remove redundant mb_regenerate_buddy()
     - ext4: drop s_mb_bal_lock and convert protected fields to atomic
     - ext4: add mballoc stats proc file
     - ext4: allow to find by goal if EXT4_MB_HINT_GOAL_ONLY is set
     - ext4: allow ext4_get_group_info() to fail
     - rcu: Protect rcu_print_task_exp_stall() ->exp_tasks access
     - fs: hfsplus: remove WARN_ON() from hfsplus_cat_{read,write}_inode()
     - drm/amd/display: Use DC_LOG_DC in the trasform pixel function
     - regmap: cache: Return error in cache sync operations for REGCACHE_NONE
     - memstick: r592: Fix UAF bug in r592_remove due to race condition
       (CVE-2023-3141)
     - firmware: arm_sdei: Fix sleep from invalid context BUG
     - ACPI: EC: Fix oops when removing custom query handlers
     - [armhf] remoteproc: stm32_rproc: Add mutex protection for workqueue
     - [arm64,armhf] drm/tegra: Avoid potential 32-bit integer overflow
     - ACPICA: Avoid undefined behavior: applying zero offset to null pointer
     - ACPICA: ACPICA: check null return of ACPI_ALLOCATE_ZEROED in
       acpi_db_display_objects
     - wifi: ath: Silence memcpy run-time false positive warning
     - bpf: Annotate data races in bpf_local_storage
     - wifi: brcmfmac: cfg80211: Pass the PMK in binary instead of hex
     - scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
     - net: Catch invalid index in XPS mapping
     - scsi: target: iscsit: Free cmds before session free
     - lib: cpu_rmap: Avoid use after free on rmap->obj array entries
     - scsi: message: mptlan: Fix use after free bug in mptlan_remove() due to
       race condition
     - gfs2: Fix inode height consistency check
     - ext4: set goal start correctly in ext4_mb_normalize_request
     - ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()
     - f2fs: fix to drop all dirty pages during umount() if cp_error is set
     - wifi: iwlwifi: pcie: fix possible NULL pointer dereference
     - wifi: iwlwifi: pcie: Fix integer overflow in iwl_write_to_user_buf
     - null_blk: Always check queue mode setting from configfs
     - wifi: iwlwifi: dvm: Fix memcpy: detected field-spanning write backtrace
     - wifi: ath11k: Fix SKB corruption in REO destination ring
     - ipvs: Update width of source for ip_vs_sync_conn_options
     - Bluetooth: hci_bcm: Fall back to getting bdaddr from EFI if not set
     - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp
     - [x86] staging: rtl8192e: Replace macro RTL_PCI_DEVICE with PCI_DEVICE
     - HID: logitech-hidpp: Don't use the USB serial for USB devices
     - HID: logitech-hidpp: Reconcile USB and Unifying serials
     - [armhf] spi: spi-imx: fix MX51_ECSPI_* macros when cs > 3
     - HID: wacom: generic: Set battery quirk only when we see battery data
     - usb: typec: tcpm: fix multiple times discover svids error
     - serial: 8250: Reinit port->pm on port specific driver unbind
     - recordmcount: Fix memory leaks in the uwrite function
     - RDMA/core: Fix multiple -Warray-bounds warnings
     - [arm64,armhf] iommu/arm-smmu-qcom: Limit the SMR groups to 128
     - [arm64] iommu/arm-smmu-v3: Acknowledge pri/event queue overflow if any
     - Input: xpad - add constants for GIP interface numbers
     - btrfs: move btrfs_find_highest_objectid/btrfs_find_free_objectid to
       disk-io.c
     - btrfs: replace calls to btrfs_find_free_ino with btrfs_find_free_objectid
     - btrfs: fix space cache inconsistency after error loading it from disk
     - xfrm: don't check the default policy if the policy allows the packet
     - Revert "Fix XFRM-I support for nested ESP tunnels"
     - [arm64] drm/msm/dp: unregister audio driver during unbind
     - [arm64] drm/msm/dpu: Remove duplicate register defines from INTF
     - cpupower: Make TSC read per CPU for Mperf monitor
     - af_key: Reject optional tunnel/BEET mode templates in outbound policies
     - [arm64,armhf] net: fec: Better handle pm_runtime_get() failing in
       .remove()
     - net: phy: dp83867: add w/a for packet errors seen with short cables
     - ALSA: firewire-digi00x: prevent potential use after free
     - ALSA: hda/realtek: Apply HP B&O top speaker profile to Pavilion 15
     - vsock: avoid to close connected socket after the timeout
     - ipv4/tcp: do not use per netns ctl sockets
     - net: Find dst with sk's xfrm policy not ctl_sk
     - tcp: fix possible sk_priority leak in tcp_v4_send_reset()
     - [armhf] serial: arc_uart: fix of_iomap leak in `arc_serial_probe`
     - erspan: get the proto with the md version for collect_md
     - [arm64] net: hns3: fix sending pfc frames after reset issue
     - [arm64] net: hns3: fix reset delay time to avoid configuration timeout
     - media: netup_unidvb: fix use-after-free at del_timer()
     - SUNRPC: Fix trace_svc_register() call site
     - net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
     - net/tipc: fix tipc header files for kernel-doc
     - tipc: add tipc_bearer_min_mtu to calculate min mtu
     - tipc: do not update mtu if msg_max is too small in mtu negotiation
     - tipc: check the bearer min mtu properly when setting it by netlink
     - [arm64] net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
     - [arm64] net: bcmgenet: Restore phy_stop() depending upon suspend/close
     - wifi: mac80211: fix min center freq offset tracing
     - wifi: iwlwifi: mvm: don't trust firmware n_channels
     - [x86] scsi: storvsc: Don't pass unused PFNs to Hyper-V host
     - cassini: Fix a memory leak in the error handling path of cas_init_one()
     - igb: fix bit_shift to be in [1..8] range
     - vlan: fix a potential uninit-value in vlan_dev_hard_start_xmit()
     - netfilter: nft_set_rbtree: fix null deref on element insertion
     - bridge: always declare tunnel functions
     - ALSA: usb-audio: Add a sample rate workaround for Line6 Pod Go
     - USB: usbtmc: Fix direction for 0-length ioctl control messages
     - usb-storage: fix deadlock when a scsi command timeouts more than once
     - [arm64,armhf] usb: dwc3: debugfs: Resume dwc3 before accessing registers
     - usb: gadget: u_ether: Fix host MAC address case
     - usb: typec: altmodes/displayport: fix pin_assignment_show
     - ALSA: hda: Fix Oops by 9.1 surround channel names
     - ALSA: hda: Add NVIDIA codec IDs a3 through a7 to patch table
     - ALSA: hda/realtek: Add quirk for Clevo L140AU
     - ALSA: hda/realtek: Add a quirk for HP EliteDesk 805
     - ALSA: hda/realtek: Add quirk for 2nd ASUS GU603
     - can: j1939: recvmsg(): allow MSG_CMSG_COMPAT flag
     - can: isotp: recvmsg(): allow MSG_CMSG_COMPAT flag
     - statfs: enforce statfs[64] structure initialization
     - serial: Add support for Advantech PCI-1611U card
     - vc_screen: reload load of struct vc_data pointer in vcs_write() to avoid
       UAF
     - ceph: force updating the msg pointer in non-split case
     - tpm/tpm_tis: Disable interrupts for more Lenovo devices
     - [powerpc*] 64s/radix: Fix soft dirty tracking
     - nilfs2: fix use-after-free bug of nilfs_root in nilfs_evict_inode()
     - HID: wacom: Force pen out of prox if no events have been received in a
       while
     - HID: wacom: Add new Intuos Pro Small (PTH-460) device IDs
     - HID: wacom: add three styli to wacom_intuos_get_tool_type
     - [arm64] KVM: arm64: Link position-independent string routines into
       .hyp.text
     - serial: 8250_exar: derive nr_ports from PCI ID for Acces I/O cards
     - serial: exar: Add support for Sealevel 7xxxC serial cards
     - serial: 8250_exar: Add support for USR298x PCI Modems
     - [s390x] qdio: get rid of register asm
     - [s390x] qdio: fix do_sqbs() inline assembly constraint
     - [x86] watchdog: sp5100_tco: Immediately trigger upon starting.
     - writeback, cgroup: remove extra percpu_ref_exit()
     - net/sched: act_mirred: refactor the handle of xmit
     - net/sched: act_mirred: better wording on protection against excessive
       stack growth
     - act_mirred: use the backlog for nested calls to mirred ingress
       (CVE-2022-4269)
     - ocfs2: Switch to security_inode_init_security()
     - ALSA: hda/ca0132: add quirk for EVGA X299 DARK
     - ALSA: hda: Fix unhandled register update during auto-suspend period
     - ALSA: hda/realtek: Enable headset onLenovo M70/M90
     - net: cdc_ncm: Deal with too low values of dwNtbOutMaxSize
     - btrfs: use nofs when cleaning up aborted transactions
     - dt-binding: cdns,usb3: Fix cdns,on-chip-buff-size type
     - [x86] mm: Avoid incomplete Global INVLPG flushes
     - [x86] topology: Fix erroneous smp_num_siblings on Intel Hybrid platforms
     - debugobjects: Don't wake up kswapd from fill_pool()
     - fbdev: udlfb: Fix endpoint check
     - net: fix stack overflow when LRO is disabled for virtual interfaces
     - udplite: Fix NULL pointer dereference in __sk_mem_raise_allocated().
     - USB: core: Add routines for endpoint checks in old drivers
     - USB: sisusbvga: Add endpoint checks
     - media: radio-shark: Add endpoint checks
     - net: fix skb leak in __skb_tstamp_tx()
     - bpf: Fix mask generation for 32-bit narrow loads of 64-bit fields
     - ipv6: Fix out-of-bounds access in ipv6_find_tlv()
     - power: supply: leds: Fix blink to LED on transition
     - power: supply: bq27xxx: Fix bq27xxx_battery_update() race condition
     - power: supply: bq27xxx: Fix I2C IRQ race on remove
     - power: supply: bq27xxx: Fix poll_interval handling and races on remove
     - fs: fix undefined behavior in bit shift for SB_NOUSER
     - [x86] show_trace_log_lvl: Ensure stack pointer is aligned, again
     - [x86] ASoC: Intel: Skylake: Fix declaration of enum skl_ch_cfg
     - [x86] forcedeth: Fix an error handling path in nv_probe()
     - net/mlx5e: do as little as possible in napi poll when budget is 0
     - net/mlx5: DR, Fix crc32 calculation to work on big-endian (BE) CPUs
     - net/mlx5: Fix error message when failing to allocate device memory
     - net/mlx5: Devcom, fix error flow in mlx5_devcom_register_device
     - [x86] 3c589_cs: Fix an error handling path in tc589_probe()
     - net: phy: mscc: add VSC8502 to MODULE_DEVICE_TABLE
     https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.182
     - [x86] cpu: Add Raptor Lake to Intel family
     - [x86] cpu: Drop spurious underscore from RAPTOR_LAKE #define
     - power: supply: bq27xxx: fix polarity of current_now
     - power: supply: bq27xxx: fix sign of current_now for newer ICs
     - power: supply: bq27xxx: make status more robust
     - power: supply: bq27xxx: Add cache parameter to
       bq27xxx_battery_current_and_status()
     - power: supply: bq27xxx: expose battery data when CI=1
     - power: supply: bq27xxx: Move bq27xxx_battery_update() down
     - power: supply: bq27xxx: Ensure power_supply_changed() is called on current
       sign changes
     - power: supply: bq27xxx: After charger plug in/out wait 0.5s for things to
       stabilize
     - power: supply: core: Refactor
       power_supply_set_input_current_limit_from_supplier()
     - [x86] power: supply: bq24190: Call power_supply_changed() after updating
       input current
     - regulator: Add regmap helper for ramp-delay setting
     - net/mlx5: devcom only supports 2 ports
     - net/mlx5: Devcom, serialize devcom registration
     - net: phy: mscc: enable VSC8501/2 RGMII RX clock
     - bluetooth: Add cmd validity checks at the start of hci_sock_ioctl()
     - [arm*] binder: fix UAF caused by faulty buffer cleanup (CVE-2023-21255)
     - ipv{4,6}/raw: fix output xfrm lookup wrt protocol
     - netfilter: ctnetlink: Support offloaded conntrack entry deletion
     https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.183
     - [arm64,armhf] iommu/rockchip: Fix unwind goto issue
     - [amd64] iommu/amd: Don't block updates to GATag if guest mode is on
     - [arm64,armhf] dmaengine: pl330: rename _start to prevent build error
     - net/mlx5: fw_tracer, Fix event handling
     - netrom: fix info-leak in nr_write_internal()
     - af_packet: Fix data-races of pkt_sk(sk)->num.
     - [amd64,arm64] amd-xgbe: fix the false linkup in xgbe_phy_status
     - af_packet: do not use READ_ONCE() in packet_bind()
     - tcp: deny tcp_disconnect() when threads are waiting
     - tcp: Return user_mss for TCP_MAXSEG in CLOSE/LISTEN state if user_mss set
     - net/sched: sch_ingress: Only create under TC_H_INGRESS
     - net/sched: sch_clsact: Only create under TC_H_CLSACT
     - net/sched: Reserve TC_H_INGRESS (TC_H_CLSACT) for ingress (clsact) Qdiscs
     - net/sched: Prohibit regrafting ingress or clsact Qdiscs
     - net: sched: fix NULL pointer dereference in mq_attach
     - net/netlink: fix NETLINK_LIST_MEMBERSHIPS length report
     - udp6: Fix race condition in udp6_sendmsg & connect
     - net/mlx5: Read embedded cpu after init bit cleared
     - net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
       (CVE-2023-35788)
     - [arm64,armhf] net: dsa: mv88e6xxx: Increase wait after reset deactivation
     - [armhf] mtd: rawnand: marvell: ensure timing values are written
     - [armhf] mtd: rawnand: marvell: don't set the NAND frequency select
     - ALSA: hda: Glenfly: add HD Audio PCI IDs and HDMI Codec Vendor IDs.
     - btrfs: abort transaction when sibling keys check fails for leaves
     - [armel] ARM: 9295/1: unwind:fix unwind abort for uleb128 case
     - gfs2: Don't deref jdesc in evict (CVE-2023-3212)
     - fbdev: modedb: Add 1920x1080 at 60 Hz video mode
     - nbd: Fix debugfs_create_dir error checking
     - xfrm: Check if_id in inbound policy/secpath match
     - ASoC: dt-bindings: Adjust #sound-dai-cells on TI's single-DAI codecs
     - media: dvb_demux: fix a bug for the continuity counter
     - media: dvb-usb: az6027: fix three null-ptr-deref in az6027_i2c_xfer()
     - media: dvb-usb-v2: ec168: fix null-ptr-deref in ec168_i2c_xfer()
     - media: dvb-usb-v2: ce6230: fix null-ptr-deref in ce6230_i2c_master_xfer()
     - media: dvb-usb-v2: rtl28xxu: fix null-ptr-deref in rtl28xxu_i2c_xfer
     - media: dvb-usb: digitv: fix null-ptr-deref in digitv_i2c_xfer()
     - media: dvb-usb: dw2102: fix uninit-value in su3000_read_mac_address
     - media: netup_unidvb: fix irq init by register it at the end of probe
     - media: dvb_ca_en50221: fix a size write bug
     - media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
     - media: dvb-core: Fix use-after-free due on race condition at dvb_net
     - media: dvb-core: Fix kernel WARNING for blocking operation in
       wait_event*() (CVE-2023-31084)
     - media: dvb-core: Fix use-after-free due to race condition at
       dvb_ca_en50221
     - wifi: rtl8xxxu: fix authentication timeout due to incorrect RCR value
     - [arm64] mm: mark private VM_FAULT_X defines as vm_fault_t
     - scsi: core: Decrease scsi_device's iorequest_cnt if dispatch failed
     - netfilter: conntrack: define variables exp_nat_nla_policy and any_addr
       with CONFIG_NF_NAT
     - ALSA: oss: avoid missing-prototype warnings
     - [arm64] drm/msm: Be more shouty if per-process pgtables aren't working
     - atm: hide unused procfs functions
     - HID: google: add jewel USB id
     - HID: wacom: avoid integer overflow in wacom_intuos_inout()
     - iio: imu: inv_icm42600: fix timestamp reset
     - iio: light: vcnl4035: fixed chip ID check
     - iio: dac: mcp4725: Fix i2c_master_send() return value handling
     - iio: adc: ad7192: Change "shorted" channels to differential
     - net: usb: qmi_wwan: Set DTR quirk for BroadMobi BM818
     - usb: gadget: f_fs: Add unbind event before functionfs_unbind
     - ata: libata-scsi: Use correct device no in ata_find_dev()
     - x86/boot: Wrap literal addresses in absolute_pointer()
     - ACPI: thermal: drop an always true check
     - ath6kl: Use struct_group() to avoid size-mismatched casting
     - eth: sun: cassini: remove dead code
     - mmc: vub300: fix invalid response handling
     - [arm64] tty: serial: fsl_lpuart: use UARTCTRL_TXINV to send break instead
       of UARTCTRL_SBK
     - btrfs: fix csum_tree_block page iteration to avoid tripping on
       -Werror=array-bounds
     - selinux: don't use make's grouped targets feature yet
     - tracing/probe: trace_probe_primary_from_call(): checked list_first_entry
     - ext4: add EA_INODE checking to ext4_iget()
     - ext4: set lockdep subclass for the ea_inode in
       ext4_xattr_inode_cache_find()
     - ext4: disallow ea_inodes with extended attributes
     - ext4: add lockdep annotations for i_data_sem for ea_inode's
     - fbcon: Fix null-ptr-deref in soft_cursor
     - [arm64,armhf] serial: 8250_tegra: Fix an error handling path in
       tegra_uart_probe()
     - [x86] KVM: x86: Account fastpath-only VM-Exits in vCPU stats
     - KEYS: asymmetric: Copy sig and digest in public_key_verify_signature()
     - regmap: Account for register length when chunking
     - tpm, tpm_tis: Request threaded interrupt handler
     - [x86] scsi: dpt_i2o: Remove broken pass-through ioctl (I2OUSERCMD)
       (CVE-2023-2007)
     - [x86] scsi: dpt_i2o: Do not process completions with invalid addresses
     - [amd64] crypto: ccp: Reject SEV commands with mismatching command buffer
     - [amd64] crypto: ccp: Play nice with vmalloc'd memory for SEV command
       structs (Closes: #1036543)
     - ext4: enable the lazy init thread when remounting read/write
     https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.184
     - remove the sx8 block driver
     - f2fs: fix iostat lock protection
     - blk-iocost: avoid 64-bit division in ioc_timer_fn
     - i40iw: fix build warning in i40iw_manage_apbvt()
     - i40e: fix build warnings in i40e_alloc.h
     - i40e: fix build warning in ice_fltr_add_mac_to_list()
     - [arm*] staging: vchiq_core: drop vchiq_status from vchiq_initialise
     - [arm64] spi: qup: Request DMA before enabling clocks
     - afs: Fix setting of mtime when creating a file/dir/symlink
     - neighbour: fix unaligned access to pneigh_entry
     - net/smc: Avoid to access invalid RMBs' MRs in SMCRv1 ADD LINK CONT
     - net/sched: fq_pie: ensure reasonable TCA_FQ_PIE_QUANTUM values
     - Bluetooth: Fix l2cap_disconnect_req deadlock
     - Bluetooth: L2CAP: Add missing checks for invalid DCID
     - qed/qede: Fix scheduling while atomic
     - netfilter: conntrack: fix NULL pointer dereference in nf_confirm_cthelper
     - netfilter: ipset: Add schedule point in call_ad().
     - rfs: annotate lockless accesses to sk->sk_rxhash
     - rfs: annotate lockless accesses to RFS sock flow table
     - net: sched: move rtm_tca_policy declaration to include file
     - net: sched: fix possible refcount leak in tc_chain_tmplt_add()
     - bpf: Add extra path pointer check to d_path helper
     - lib: cpu_rmap: Fix potential use-after-free in irq_cpu_rmap_release()
     - bnxt_en: Don't issue AP reset during ethtool's reset operation
     - bnxt_en: Query default VLAN before VNIC setup on a VF
     - bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
     - batman-adv: Broken sync while rescheduling delayed work
     - Input: xpad - delete a Razer DeathAdder mouse VID/PID entry
     - Input: psmouse - fix OOB access in Elantech protocol
     - ALSA: hda/realtek: Add a quirk for HP Slim Desktop S01
     - ALSA: hda/realtek: Add Lenovo P3 Tower platform
     - drm/amdgpu: fix xclk freq on CHIP_STONEY
     - can: j1939: j1939_sk_send_loop_abort(): improved error queue handling in
       J1939 Socket
     - can: j1939: change j1939_netdev_lock type to mutex
     - can: j1939: avoid possible use-after-free when j1939_can_rx_register fails
     - ceph: fix use-after-free bug for inodes when flushing capsnaps
     - [s390x] dasd: Use correct lock while counting channel queue length
     - Bluetooth: Fix use-after-free in hci_remove_ltk/hci_remove_irk
     - Bluetooth: hci_qca: fix debugfs registration
     - rbd: move RBD_OBJ_FLAG_COPYUP_ENABLED flag setting
     - rbd: get snapshot context after exclusive lock is ensured to be held
     - [arm64] pinctrl: meson-axg: add missing GPIOA_18 gpio group
     - usb: usbfs: Enforce page requirements for mmap
     - usb: usbfs: Use consistent mmap functions
     - [arm*] staging: vc04_services: fix gcc-13 build warning
     - vhost: support PACKED when setting-getting vring_base
     - Revert "ext4: don't clear SB_RDONLY when remounting r/w until quota is
       re-enabled"
     - ext4: only check dquot_initialize_needed() when debugging
     - tcp: fix tcp_min_tso_segs sysctl
     - xfs: verify buffer contents when we skip log replay (CVE-2023-2124)
     - drm/atomic: Don't pollute crtc_state->mode_blob with error pointers
     - btrfs: check return value of btrfs_commit_transaction in relocation
     - btrfs: unset reloc control if transaction commit fails in
       prepare_to_relocate() (CVE-2023-3111)
     - [x86] Revert "staging: rtl8192e: Replace macro RTL_PCI_DEVICE with
       PCI_DEVICE"
     https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.185
     - lib: cleanup kstrto*() usage
     - kernel.h: split out kstrtox() and simple_strtox() to a separate header
     - power: supply: bq27xxx: Use mod_delayed_work() instead of cancel() +
       schedule()
     - [armhf] dts: vexpress: add missing cache properties
     - power: supply: Ratelimit no data debug output
     - [x86] platform/x86: asus-wmi: Ignore WMI events with codes 0x7B, 0xC0
     - regulator: Fix error checking for debugfs_create_dir
     - [arm64,armhf] irqchip/gic-v3: Disable pseudo NMIs on Mediatek devices w/
       firmware issues
     - power: supply: Fix logic checking if system is running from battery
     - btrfs: scrub: try harder to mark RAID56 block groups read-only
     - btrfs: handle memory allocation failure in btrfs_csum_one_bio
     - ASoC: soc-pcm: test if a BE can be prepared
     - [mips*] Move initrd_start check after initrd address sanitisation.
     - xen/blkfront: Only check REQ_FUA for writes
     - drm:amd:amdgpu: Fix missing buffer object unlock in failure path
     - [arm64,armhf] irqchip/gic: Correctly validate OF quirk descriptors
     - io_uring: hold uring mutex around poll removal (CVE-2023-3389)
     - epoll: ep_autoremove_wake_function should use list_del_init_careful
     - ocfs2: fix use-after-free when unmounting read-only filesystem
     - ocfs2: check new file size on fallocate call
     - nilfs2: fix incomplete buffer cleanup in nilfs_btnode_abort_change_key()
     - nilfs2: fix possible out-of-bounds segment allocation in resize ioctl
     - kexec: support purgatories with .text.hot sections
     - [x86] purgatory: remove PGO flags
     - [powerpc*] purgatory: remove PGO flags
     - nouveau: fix client work fence deletion race
     - RDMA/uverbs: Restrict usage of privileged QKEYs
     - net: usb: qmi_wwan: add support for Compal RXM-G1
     - ALSA: hda/realtek: Add a quirk for Compaq N14JP6
     - Remove DECnet support from kernel (CVE-2023-3338)
     - USB: serial: option: add Quectel EM061KGL series
     - [arm64,armhf] usb: dwc3: gadget: Reset num TRBs before giving back the
       request
     - [arm64] spi: fsl-dspi: avoid SCK glitches with continuous transfers
     - netfilter: nfnetlink: skip error delivery on batch in case of ENOMEM
     - [arm64] net: enetc: correct the indexes of highest and 2nd highest TCs
     - ping6: Fix send to link-local addresses with VRF.
     - net/sched: cls_u32: Fix reference counter leak leading to overflow
       (CVE-2023-3609)
     - RDMA/rxe: Remove the unused variable obj
     - RDMA/rxe: Removed unused name from rxe_task struct
     - RDMA/rxe: Fix the use-before-initialization error of resp_pkts
     - iavf: remove mask from iavf_irq_enable_queues()
     - RDMA/mlx5: Initiate dropless RQ for RAW Ethernet functions
     - RDMA/cma: Always set static rate to 0 for RoCE
     - IB/uverbs: Fix to consider event queue closing also upon non-blocking mode
     - IB/isert: Fix dead lock in ib_isert
     - IB/isert: Fix possible list corruption in CMA handler
     - IB/isert: Fix incorrect release of isert connection
     - ipvlan: fix bound dev checking for IPv6 l3s mode
     - sctp: fix an error code in sctp_sf_eat_auth()
     - igb: fix nvm.ops.read() error handling
     - drm/nouveau: don't detect DSM for non-NVIDIA device
     - drm/nouveau/dp: check for NULL nv_connector->native_mode
     - drm/nouveau: add nv_encoder pointer check for NULL
     - ext4: drop the call to ext4_error() from ext4_get_group_info()
     - net/sched: cls_api: Fix lockup on flushing explicitly created chain
     - net: tipc: resize nlattr array to correct size
     - afs: Fix vlserver probe RTT handling
     - cgroup: always put cset in cgroup_css_set_put_fork
     - rcu/kvfree: Avoid freeing new kfree_rcu() memory after old grace period
     - neighbour: Remove unused inline function neigh_key_eq16()
     - net: Remove unused inline function dst_hold_and_use()
     - net: Remove DECnet leftovers from flow.h.
     - neighbour: delete neigh_lookup_nodev as not used
     - batman-adv: Switch to kstrtox.h for kstrtou64
     - mmc: block: ensure error propagation for non-blk
     - mm/memory_hotplug: extend offline_and_remove_memory() to handle more than
       one memory block
     - nilfs2: reject devices with insufficient block count
     - media: dvbdev: Fix memleak in dvb_register_device
     - media: dvbdev: fix error logic at dvb_register_device()
     - media: dvb-core: Fix use-after-free due to race at dvb_register_device()
     - [x86] drm/i915/dg1: Wait for pcode/uncore handshake at startup
     - [x86] drm/i915/gen11+: Only load DRAM information from pcode
     https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.186
     - drm/amd/display: fix the system hang while disable PSR
     - net/sched: Refactor qdisc_graft() for ingress and clsact Qdiscs
     - tracing: Add tracing_reset_all_online_cpus_unlocked() function
     - tick/common: Align tick period during sched_timer setup
     - nilfs2: fix buffer corruption due to concurrent device reads
     - [x86] Drivers: hv: vmbus: Fix vmbus_wait_for_unload() to scan present CPUs
     - [x86] PCI: hv: Fix a race condition bug in hv_pci_query_relations()
     - [x86] Revert "PCI: hv: Fix a timing issue which causes kdump to fail
       occasionally"
     - [x86] PCI: hv: Remove the useless hv_pcichild_state from struct hv_pci_dev
     - [x86] PCI: hv: Fix a race condition in hv_irq_unmask() that can cause
       panic
     - cgroup: Do not corrupt task iteration when rebinding subsystem
     - [arm64] mmc: sdhci-msm: Disable broken 64-bit DMA on MSM8916
     - [arm64] mmc: meson-gx: remove redundant mmc_request_done() call from irq
       context
     - [arm64,armhf] mmc: mmci: stm32: fix max busy timeout calculation
     - ip_tunnels: allow VXLAN/GENEVE to inherit TOS/TTL from VLAN
     - regulator: pca9450: Fix LDO3OUT and LDO4OUT MASK
     - writeback: fix dereferencing NULL mapping->host on writeback_page_template
     - io_uring/net: save msghdr->msg_control for retries
     - io_uring/net: clear msg_controllen on partial sendmsg retry
     - io_uring/net: disable partial retries for recvmsg with cmsg
     - nilfs2: prevent general protection fault in nilfs_clear_dirty_page()
     - [x86] mm: Avoid using set_pgd() outside of real PGD pages
     - mm/pagealloc: sysctl: change watermark_scale_factor max limit to 30%
     - sysctl: move some boundary constants from sysctl.c to sysctl_vals
     - memfd: check for non-NULL file_seals in memfd_create() syscall
     - ieee802154: hwsim: Fix possible memory leaks
     - xfrm: Treat already-verified secpath entries as optional
     - xfrm: interface: rename xfrm_interface.c to xfrm_interface_core.c
     - xfrm: Ensure policies always checked on XFRM-I input path
     - bpf: track immediate values written to stack by BPF_ST instruction
     - bpf: Fix verifier id tracking of scalars on spill
     - xfrm: fix inbound ipv4/udp/esp packets to UDPv6 dualstack sockets
     - xfrm: Linearize the skb after offloading if needed.
     - [armel,armhf] mmc: mvsdio: fix deferred probing
     - [armhf] mmc: omap: fix deferred probing
     - [armhf] mmc: omap_hsmmc: fix deferred probing
     - mmc: sdhci-acpi: fix deferred probing
     - ipvs: align inner_mac_header for encapsulation
     - be2net: Extend xmit workaround to BE3 chip
     - netfilter: nft_set_pipapo: .walk does not deal with generations
     - netfilter: nf_tables: disallow element updates of bound anonymous sets
     - netfilter: nfnetlink_osf: fix module autoload
     - Revert "net: phy: dp83867: perform soft reset and retain established link"
     - sch_netem: acquire qdisc lock in netem_change()
     - gpio: Allow per-parent interrupt data
     - gpiolib: Fix GPIO chip IRQ initialization restriction
     - scsi: target: iscsi: Prevent login threads from racing between each other
     - HID: wacom: Add error check to wacom_parse_and_register()
     - [arm64] Add missing Set/Way CMO encodings
     - media: cec: core: don't set last_initiator if tx in progress
     - nfcsim.c: Fix error checking for debugfs_create_dir
     - [i386] usb: gadget: udc: fix NULL dereference in remove()
     - [x86] Input: soc_button_array - add invalid acpi_index DMI quirk handling
     - [s390x] cio: unregister device when the only path is gone
     - [arm*] ASoC: simple-card: Add missing of_node_put() in case of error
     - [x86] ASoC: nau8824: Add quirk to active-high jack-detect
     - [armhf] dts: Fix erroneous ADS touchscreen polarities
     - drm/radeon: fix race condition UAF in radeon_gem_set_domain_ioctl
     - [x86] apic: Fix kernel panic when booting with intremap=off and
       x2apic_phys
     - bpf/btf: Accept function names that contain dots
     https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.187
     https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.188
     - media: atomisp: fix "variable dereferenced before check 'asd'"
     - [x86] smp: Use dedicated cache-line for mwait_play_dead()
     - can: isotp: isotp_sendmsg(): fix return error fix on TX path
     - video: imsttfb: check for ioremap() failures
     - fbdev: imsttfb: Fix use after free bug in imsttfb_probe
     - HID: wacom: Use ktime_t rather than int when dealing with timestamps
     - HID: logitech-hidpp: add HIDPP_QUIRK_DELAYED_INIT for the T651.
     - drm/amdgpu: Validate VM ioctl flags.
     - nubus: Partially revert proc_create_single_data() conversion
     - fs: pipe: reveal missing function protoypes
     - [x86] resctrl: Only show tasks' pid in current pid namespace
     - blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
     - md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
     - md/raid10: fix overflow of md/safe_mode_delay
     - md/raid10: fix wrong setting of max_corr_read_errors
     - md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
     - md/raid10: fix io loss while replacement replace rdev
     - irqchip/jcore-aic: Kill use of irq_create_strict_mappings()
     - irqchip/jcore-aic: Fix missing allocation of IRQ descriptors
     - posix-timers: Prevent RT livelock in itimer_delete()
     - tracing/timer: Add missing hrtimer modes to decode_hrtimer_mode().
     - clocksource/drivers/cadence-ttc: Fix memory leak in ttc_timer_probe
     - PM: domains: fix integer overflow issues in genpd_parse_state()
     - perf/arm-cmn: Fix DTC reset
     - powercap: RAPL: Fix CONFIG_IOSF_MBI dependency
     - cpufreq: intel_pstate: Fix energy_performance_preference for passive
     - thermal/drivers/sun8i: Fix some error handling paths in sun8i_ths_probe()
     - rcuscale: Console output claims too few grace periods
     - rcuscale: Always log error message
     - rcuscale: Move shutdown from wait_event() to wait_event_idle()
     - rcu/rcuscale: Move rcu_scale_*() after kfree_scale_cleanup()
     - rcu/rcuscale: Stop kfree_scale_thread thread(s) after unloading rcuscale
     - perf/ibs: Fix interface via core pmu events
     - [x86] mm: Fix __swp_entry_to_pte() for Xen PV guests
     - evm: Complete description of evm_inode_setattr()
     - pstore/ram: Add check for kstrdup
     - igc: Enable and fix RX hash usage by netstack
     - wifi: ath9k: fix AR9003 mac hardware hang check register offset
       calculation
     - wifi: ath9k: avoid referencing uninit memory in ath9k_wmi_ctrl_rx
     - spi: spi-geni-qcom: Correct CS_TOGGLE bit in SPI_TRANS_CFG
     - wifi: wilc1000: fix for absent RSN capabilities WFA testcase
     - wifi: mwifiex: Fix the size of a memory allocation in
       mwifiex_ret_802_11_scan()
     - bpf: Remove extra lock_sock for TCP_ZEROCOPY_RECEIVE
     - sctp: add bpf_bypass_getsockopt proto callback
     - nfc: constify several pointers to u8, char and sk_buff
     - nfc: llcp: fix possible use of uninitialized variable in
       nfc_llcp_send_connect()
     - regulator: core: Fix more error checking for debugfs_create_dir()
     - regulator: core: Streamline debugfs operations
     - wifi: orinoco: Fix an error handling path in spectrum_cs_probe()
     - wifi: orinoco: Fix an error handling path in orinoco_cs_probe()
     - wifi: atmel: Fix an error handling path in atmel_probe()
     - wl3501_cs: Fix misspelling and provide missing documentation
     - net: create netdev->dev_addr assignment helpers
     - wl3501_cs: use eth_hw_addr_set()
     - wifi: wl3501_cs: Fix an error handling path in wl3501_probe()
     - wifi: ray_cs: Utilize strnlen() in parse_addr()
     - wifi: ray_cs: Drop useless status variable in parse_addr()
     - wifi: ray_cs: Fix an error handling path in ray_probe()
     - wifi: ath9k: don't allow to overwrite ENDPOINT0 attributes
     - wifi: rsi: Do not configure WoWlan in shutdown hook if not enabled
     - wifi: rsi: Do not set MMC_PM_KEEP_POWER in shutdown
     - watchdog/perf: define dummy watchdog_update_hrtimer_threshold() on correct
       config
     - watchdog/perf: more properly prevent false positives with turbo modes
     - kexec: fix a memory leak in crash_shrink_memory()
     - memstick r592: make memstick_debug_get_tpc_name() static
     - wifi: ath9k: Fix possible stall on ath9k_txq_list_has_key()
     - rtnetlink: extend RTEXT_FILTER_SKIP_STATS to IFLA_VF_INFO
     - wifi: iwlwifi: pull from TXQs with softirqs disabled
     - wifi: cfg80211: rewrite merging of inherited elements
     - wifi: ath9k: convert msecs to jiffies where needed
     - igc: Fix race condition in PTP tx code
     - net: stmmac: fix double serdes powerdown
     - netlink: fix potential deadlock in netlink_set_err()
     - netlink: do not hard code device address lenth in fdb dumps
     - gtp: Fix use-after-free in __gtp_encap_destroy().
     - net: axienet: Move reset before 64-bit DMA detection
     - sfc: fix crash when reading stats while NIC is resetting
     - nfc: llcp: simplify llcp_sock_connect() error paths
     - net: nfc: Fix use-after-free caused by nfc_llcp_find_local (CVE-2023-3863)
     - lib/ts_bm: reset initial match offset for every block of text
     - netfilter: conntrack: dccp: copy entire header to stack buffer, not just
       basic one
     - netfilter: nf_conntrack_sip: fix the ct_sip_parse_numerical_param() return
       value.
     - ipvlan: Fix return value of ipvlan_queue_xmit()
     - netlink: Add __sock_i_ino() for __netlink_diag_dump().
     - radeon: avoid double free in ci_dpm_init()
     - drm/amd/display: Explicitly specify update type per plane info change
     - Input: drv260x - sleep between polling GO bit
     - drm/bridge: tc358768: always enable HS video mode
     - drm/bridge: tc358768: fix PLL parameters computation
     - drm/bridge: tc358768: fix PLL target frequency
     - drm/bridge: tc358768: fix TCLK_ZEROCNT computation
     - drm/bridge: tc358768: Add atomic_get_input_bus_fmts() implementation
     - drm/bridge: tc358768: fix TCLK_TRAILCNT computation
     - drm/bridge: tc358768: fix THS_ZEROCNT computation
     - drm/bridge: tc358768: fix TXTAGOCNT computation
     - drm/bridge: tc358768: fix THS_TRAILCNT computation
     - drm/vram-helper: fix function names in vram helper doc
     - Input: adxl34x - do not hardcode interrupt trigger type
     - drm: sun4i_tcon: use devm_clk_get_enabled in `sun4i_tcon_init_clocks`
     - drm/panel: sharp-ls043t1le01: adjust mode settings
     - bus: ti-sysc: Fix dispc quirk masking bool variables
     - [arm64] dts: microchip: sparx5: do not use PSCI on reference boards
     - RDMA/bnxt_re: Disable/kill tasklet only if it is enabled
     - RDMA/bnxt_re: Fix to remove unnecessary return labels
     - RDMA/bnxt_re: Use unique names while registering interrupts
     - RDMA/bnxt_re: Remove a redundant check inside bnxt_re_update_gid
     - RDMA/bnxt_re: Fix to remove an unnecessary log
     - ARM: dts: gta04: Move model property out of pinctrl node
     - [arm64] dts: qcom: msm8916: correct camss unit address
     - [arm64] dts: qcom: msm8994: correct SPMI unit address
     - [arm64] dts: qcom: msm8996: correct camss unit address
     - drm/panel: simple: fix active size for Ampire AM-480272H3TMQW-T01H
     - ARM: ep93xx: fix missing-prototype warnings
     - ARM: omap2: fix missing tick_broadcast() prototype
     - [arm64] dts: qcom: apq8096: fix fixed regulator name property
     - ARM: dts: stm32: Shorten the AV96 HDMI sound card name
     - memory: brcmstb_dpfe: fix testing array offset after use
     - ASoC: es8316: Increment max value for ALC Capture Target Volume control
     - ASoC: es8316: Do not set rate constraints for unsupported MCLKs
     - ARM: dts: meson8: correct uart_B and uart_C clock references
     - soc/fsl/qe: fix usb.c build errors
     - IB/hfi1: Use bitmap_zalloc() when applicable
     - IB/hfi1: Fix sdma.h tx->num_descs off-by-one errors
     - IB/hfi1: Fix wrong mmu_node used for user SDMA packet after invalidate
     - RDMA: Remove uverbs_ex_cmd_mask values that are linked to functions
     - RDMA/hns: Fix coding style issues
     - RDMA/hns: Use refcount_t APIs for HEM
     - RDMA/hns: Clean the hardware related code for HEM
     - RDMA/hns: Fix hns_roce_table_get return value
     - ARM: dts: iwg20d-q7-common: Fix backlight pwm specifier
     - fbdev: omapfb: lcd_mipid: Fix an error handling path in mipid_spi_probe()
     - [arm64] dts: ti: k3-j7200: Fix physical address of pin
     - ARM: dts: stm32: Fix audio routing on STM32MP15xx DHCOM PDK2
     - ARM: dts: stm32: fix i2s endpoint format property for stm32mp15xx-dkx
     - hwmon: (gsc-hwmon) fix fan pwm temperature scaling
     - hwmon: (adm1275) enable adm1272 temperature reporting
     - hwmon: (adm1275) Allow setting sample averaging
     - hwmon: (pmbus/adm1275) Fix problems with temperature monitoring on ADM1272
     - ARM: dts: BCM5301X: fix duplex-full => full-duplex
     - drm/radeon: fix possible division-by-zero errors
     - amdgpu: validate offset_in_bo of drm_amdgpu_gem_va
     - RDMA/bnxt_re: wraparound mbox producer index
     - RDMA/bnxt_re: Avoid calling wake_up threads from spin_lock context
     - clk: imx: clk-imx8mn: fix memory leak in imx8mn_clocks_probe
     - clk: imx: clk-imx8mp: improve error handling in imx8mp_clocks_probe()
     - clk: tegra: tegra124-emc: Fix potential memory leak
     - ALSA: ac97: Fix possible NULL dereference in snd_ac97_mixer
     - drm/msm/dpu: do not enable color-management if DSPPs are not available
     - drm/msm/dp: Free resources after unregistering them
     - clk: vc5: check memory returned by kasprintf()
     - clk: cdce925: check return value of kasprintf()
     - clk: si5341: Allow different output VDD_SEL values
     - clk: si5341: Add sysfs properties to allow checking/resetting device
       faults
     - clk: si5341: return error if one synth clock registration fails
     - clk: si5341: check return value of {devm_}kasprintf()
     - clk: si5341: free unused memory on probe failure
     - clk: keystone: sci-clk: check return value of kasprintf()
     - clk: ti: clkctrl: check return value of kasprintf()
     - drivers: meson: secure-pwrc: always enable DMA domain
     - ovl: update of dentry revalidate flags after copy up
     - ASoC: imx-audmix: check return value of devm_kasprintf()
     - PCI: cadence: Fix Gen2 Link Retraining process
     - scsi: qedf: Fix NULL dereference in error handling
     - pinctrl: bcm2835: Handle gpiochip_add_pin_range() errors
     - PCI/ASPM: Disable ASPM on MFD function removal to avoid use-after-free
     - scsi: 3w-xxxx: Add error handling for initialization failure in tw_probe()
     - PCI: pciehp: Cancel bringup sequence if card is not present
     - PCI: ftpci100: Release the clock resources
     - PCI: Add pci_clear_master() stub for non-CONFIG_PCI
     - perf bench: Use unbuffered output when pipe/tee'ing to a file
     - perf bench: Add missing setlocale() call to allow usage of %'d style
       formatting
     - pinctrl: cherryview: Return correct value if pin in push-pull mode
     - perf dwarf-aux: Fix off-by-one in die_get_varname()
     - pinctrl: at91-pio4: check return value of devm_kasprintf()
     - [powerpc*] powernv/sriov: perform null check on iov before dereferencing
       iov
     - mm: rename pud_page_vaddr to pud_pgtable and make it return pmd_t *
     - mm: rename p4d_page_vaddr to p4d_pgtable and make it return pud_t *
     - [powerpc*] book3s64/mm: Fix DirectMap stats in /proc/meminfo
     - [powerpc*] mm/dax: Fix the condition when checking if altmap vmemap can
       cross-boundary
     - hwrng: virtio - add an internal buffer
     - hwrng: virtio - don't wait on cleanup
     - hwrng: virtio - don't waste entropy
     - hwrng: virtio - always add a pending request
     - hwrng: virtio - Fix race on data_avail and actual data
     - crypto: nx - fix build warnings when DEBUG_FS is not enabled
     - modpost: fix section mismatch message for R_ARM_ABS32
     - modpost: fix section mismatch message for R_ARM_{PC24,CALL,JUMP24}
     - crypto: marvell/cesa - Fix type mismatch warning
     - modpost: fix off by one in is_executable_section()
     - NFSv4.1: freeze the session table upon receiving NFS4ERR_BADSESSION
     - dax: Fix dax_mapping_release() use after free
     - dax: Introduce alloc_dev_dax_id()
     - hwrng: st - keep clock enabled while hwrng is registered
     - io_uring: ensure IOPOLL locks around deferred work (CVE-2023-21400)
     - USB: serial: option: add LARA-R6 01B PIDs
     - usb: dwc3: gadget: Propagate core init errors to UDC during pullup
     - phy: tegra: xusb: Clear the driver reference in usb-phy dev
     - block: fix signed int overflow in Amiga partition support
     - block: change all __u32 annotations to __be32 in affs_hardblocks.h
     - SUNRPC: Fix UAF in svc_tcp_listen_data_ready()
     - w1: w1_therm: fix locking behavior in convert_t
     - w1: fix loop in w1_fini()
     - serial: 8250: omap: Fix freeing of resources on failed register
     - clk: qcom: gcc-ipq6018: Use floor ops for sdcc clocks
     - media: usb: Check az6007_read() return value
     - media: videodev2.h: Fix struct v4l2_input tuner index comment
     - media: usb: siano: Fix warning due to null work_func_t function pointer
       (CVE-2023-4132)
     - clk: qcom: reset: Allow specifying custom reset delay
     - clk: qcom: reset: support resetting multiple bits
     - clk: qcom: ipq6018: fix networking resets
     - usb: dwc3: qcom: Fix potential memory leak
     - usb: gadget: u_serial: Add null pointer check in gserial_suspend
     - extcon: Fix kernel doc of property fields to avoid warnings
     - extcon: Fix kernel doc of property capability fields to avoid warnings
     - usb: phy: phy-tahvo: fix memory leak in tahvo_usb_probe()
     - usb: hide unused usbfs_notify_suspend/resume functions
     - serial: 8250: lock port for stop_rx() in omap8250_irq()
     - serial: 8250: lock port for UART_IER access in omap8250_irq()
     - kernfs: fix missing kernfs_idr_lock to remove an ID from the IDR
     - coresight: Fix loss of connection info when a module is unloaded
     - mfd: rt5033: Drop rt5033-battery sub-device
     - media: venus: helpers: Fix ALIGN() of non power of two
     - media: atomisp: gmin_platform: fix out_len in gmin_get_config_dsm_var()
     - [s390x] KVM: s390: fix KVM_S390_GET_CMMA_BITS for GFNs in memslot holes
     - usb: dwc3: qcom: Release the correct resources in dwc3_qcom_remove()
     - usb: dwc3: qcom: Fix an error handling path in dwc3_qcom_probe()
     - usb: common: usb-conn-gpio: Set last role to unknown before initial
       detection
     - usb: dwc3-meson-g12a: Fix an error handling path in
       dwc3_meson_g12a_probe()
     - mfd: intel-lpss: Add missing check for platform_get_resource
     - Revert "usb: common: usb-conn-gpio: Set last role to unknown before
       initial detection"
     - serial: 8250_omap: Use force_suspend and resume for system suspend
     - mfd: stmfx: Fix error path in stmfx_chip_init
     - mfd: stmfx: Nullify stmfx->vdd in case of error
     - [s390x] KVM: s390: vsie: fix the length of APCB bitmap
     - mfd: stmpe: Only disable the regulators if they are enabled
     - phy: tegra: xusb: check return value of devm_kzalloc()
     - pwm: imx-tpm: force 'real_period' to be zero in suspend
     - pwm: sysfs: Do not apply state to already disabled PWMs
     - rtc: st-lpc: Release some resources in st_rtc_probe() in case of error
     - media: cec: i2c: ch7322: also select REGMAP
     - sctp: fix potential deadlock on &net->sctp.addr_wq_lock
     - Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
     - net: dsa: vsc73xx: fix MTU configuration
     - spi: bcm-qspi: return error if neither hif_mspi nor mspi is available
     - mailbox: ti-msgmgr: Fill non-message tx data fields with 0x0
     - f2fs: fix error path handling in truncate_dnode()
     - octeontx2-af: Fix mapping for NIX block from CGX connection
     - [powerpc*] allow PPC_EARLY_DEBUG_CPM only when SERIAL_CPM=y
     - net: bridge: keep ports without IFF_UNICAST_FLT in BR_PROMISC mode
     - tcp: annotate data races in __tcp_oow_rate_limited()
     - xsk: Honor SO_BINDTODEVICE on bind
     - net/sched: act_pedit: Add size check for TCA_PEDIT_PARMS_EX
     - pptp: Fix fib lookup calls.
     - net: dsa: tag_sja1105: fix MAC DA patching from meta frames
     - [s390x] qeth: Fix vipa deletion
     - apparmor: fix missing error check for rhashtable_insert_fast
     - i2c: xiic: Defer xiic_wakeup() and __xiic_start_xfer() in xiic_process()
     - i2c: xiic: Don't try to handle more interrupt events after error
     - ALSA: jack: Fix mutex call in snd_jack_report()
     - i2c: qup: Add missing unwind goto in qup_i2c_probe()
     - NFSD: add encoding of op_recall flag for write delegation
     - io_uring: wait interruptibly for request completions on exit
     - mmc: core: disable TRIM on Kingston EMMC04G-M627
     - mmc: core: disable TRIM on Micron MTFC4GACAJCN-1M
     - mmc: mmci: Set PROBE_PREFER_ASYNCHRONOUS
     - mmc: sdhci: fix DMA configure compatibility issue when 64bit DMA mode is
       used.
     - bcache: fixup btree_cache_wait list damage
     - bcache: Remove unnecessary NULL point check in node allocations
     - bcache: Fix __bch_btree_node_alloc to make the failure behavior consistent
     - integrity: Fix possible multiple allocation in integrity_inode_get()
     - autofs: use flexible array in ioctl structure
     - shmem: use ramfs_kill_sb() for kill_sb method of ramfs-based tmpfs
     - jffs2: reduce stack usage in jffs2_build_xattr_subsystem()
     - fs: avoid empty option when generating legacy mount string
     - ext4: Remove ext4 locking of moved directory
     - Revert "f2fs: fix potential corruption when moving a directory"
     - fs: Establish locking order for unrelated directories
     - fs: Lock moved directories
     - btrfs: add handling for RAID1C23/DUP to btrfs_reduce_alloc_profile
     - btrfs: fix race when deleting quota root from the dirty cow roots list
     - ARM: orion5x: fix d2net gpio initialization
     - leds: trigger: netdev: Recheck NETDEV_LED_MODE_LINKUP on dev rename
     - fs: no need to check source
     - fanotify: disallow mount/sb marks on kernel internal pseudo fs
     - tpm, tpm_tis: Claim locality in interrupt handler
     - block: add overflow checks for Amiga partition support
     - netfilter: nf_tables: use net_generic infra for transaction data
     - netfilter: nf_tables: add rescheduling points during loop detection walks
     - netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound
       set/chain
     - netfilter: nf_tables: reject unbound anonymous set before commit phase
     - netfilter: nf_tables: reject unbound chain set before commit phase
     - netfilter: nftables: rename set element data activation/deactivation
       functions
     - netfilter: nf_tables: drop map element references from preparation phase
     - netfilter: nf_tables: unbind non-anonymous set if rule construction fails
     - netfilter: nf_tables: fix scheduling-while-atomic splat
     - netfilter: conntrack: Avoid nf_ct_helper_hash uses after free
     - wireguard: queueing: use saner cpu selection wrapping
     - wireguard: netlink: send staged packets when setting initial private key
     - tty: serial: fsl_lpuart: add earlycon for imx8ulp platform
     - rcu-tasks: Mark ->trc_reader_nesting data races
     - rcu-tasks: Mark ->trc_reader_special.b.need_qs data races
     - rcu-tasks: Simplify trc_read_check_handler() atomic operations
     - block/partition: fix signedness issue for Amiga partitions
     - io_uring: Use io_schedule* in cqring wait
     - io_uring: add reschedule point to handle_tw_list()
     - net: lan743x: Don't sleep in atomic context
     - workqueue: clean up WORK_* constant types, clarify masking
     - drm/panel: simple: Add connector_type for innolux_at043tn24
     - drm/panel: simple: Add Powertip PH800480T013 drm_display_mode flags
     - igc: Remove delay during TX ring configuration
     - net/mlx5e: fix double free in mlx5e_destroy_flow_table
     - net/mlx5e: Check for NOT_READY flag state after locking
     - igc: set TP bit in 'supported' and 'advertising' fields of
       ethtool_link_ksettings
     - scsi: qla2xxx: Fix error code in qla2x00_start_sp()
     - net: mvneta: fix txq_map in case of txq_number==1
     - net/sched: cls_fw: Fix improper refcount update leads to use-after-free
       (CVE-2023-3776)
     - gve: Set default duplex configuration to full
     - ionic: remove WARN_ON to prevent panic_on_warn
     - net: bgmac: postpone turning IRQs off to avoid SoC hangs
     - net: prevent skb corruption on frag list segmentation
     - icmp6: Fix null-ptr-deref of ip6_null_entry->rt6i_idev in icmp6_dev().
     - udp6: fix udp6_ehashfn() typo
     - ntb: idt: Fix error handling in idt_pci_driver_init()
     - NTB: amd: Fix error handling in amd_ntb_pci_driver_init()
     - ntb: intel: Fix error handling in intel_ntb_pci_driver_init()
     - NTB: ntb_transport: fix possible memory leak while device_register() fails
     - NTB: ntb_tool: Add check for devm_kcalloc
     - ipv6/addrconf: fix a potential refcount underflow for idev
     - [x86] platform/x86: wmi: remove unnecessary argument
     - [x86] platform/x86: wmi: use guid_t and guid_equal()
     - [x86] platform/x86: wmi: move variables
     - [x86] platform/x86: wmi: Break possible infinite loop when parsing GUID
     - igc: Fix launchtime before start of cycle
     - igc: Fix inserting of empty frame for launchtime
     - riscv: bpf: Move bpf_jit_alloc_exec() and bpf_jit_free_exec() to core
     - erofs: avoid infinite loop in z_erofs_do_read_page() when reading beyond
       EOF
     - wifi: airo: avoid uninitialized warning in airo_get_rate()
     - net/sched: flower: Ensure both minimum and maximum ports are specified
     - netdevsim: fix uninitialized data in nsim_dev_trap_fa_cookie_write()
     - net/sched: make psched_mtu() RTNL-less safe
     - net/sched: sch_qfq: refactor parsing of netlink parameters
     - net/sched: sch_qfq: account for stab overhead in qfq_enqueue
       (CVE-2023-3611)
     - nvme-pci: fix DMA direction of unmapping integrity data
     - f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
       (CVE-2023-2898)
     - pinctrl: amd: Fix mistake in handling clearing pins at startup
     - pinctrl: amd: Detect internal GPIO0 debounce handling
     - pinctrl: amd: Only use special debounce behavior for GPIO 0
     - tpm: tpm_vtpm_proxy: fix a race condition in /dev/vtpmx creation
     - mtd: rawnand: meson: fix unaligned DMA buffers handling
     - net: bcmgenet: Ensure MDIO unregistration has clocks enabled
     - [powerpc*] Fail build if using recordmcount with binutils v2.37
     - misc: fastrpc: Create fastrpc scalar with correct buffer count
     - erofs: fix compact 4B support for 16k block size
     - ext4: Fix reusing stale buffer heads from last failed mounting
     - ext4: fix wrong unit use in ext4_mb_clear_bb
     - ext4: get block from bh in ext4_free_blocks for fast commit replay
     - ext4: fix wrong unit use in ext4_mb_new_blocks
     - ext4: only update i_reserved_data_blocks on successful block allocation
     - jfs: jfs_dmap: Validate db_l2nbperpage while mounting
     - hwrng: imx-rngc - fix the timeout for init and self check
     - PCI/PM: Avoid putting EloPOS E2/S2/H2 PCIe Ports in D3cold
     - PCI: Add function 1 DMA alias quirk for Marvell 88SE9235
     - PCI: qcom: Disable write access to read only registers for IP v2.3.3
     - PCI: rockchip: Assert PCI Configuration Enable bit after probe
     - PCI: rockchip: Write PCI Device ID to correct register
     - PCI: rockchip: Add poll and timeout to wait for PHY PLLs to be locked
     - PCI: rockchip: Fix legacy IRQ generation for RK3399 PCIe endpoint core
     - PCI: rockchip: Use u32 variable to access 32-bit registers
     - PCI: rockchip: Set address alignment for endpoint mode
     - misc: pci_endpoint_test: Free IRQs before removing the device
     - misc: pci_endpoint_test: Re-init completion for every test
     - md/raid0: add discard support for the 'original' layout
     - fs: dlm: return positive pid value for F_GETLK
     - drm/atomic: Allow vblank-enabled + self-refresh "disable"
     - drm/rockchip: vop: Leave vblank enabled in self-refresh
     - drm/amd/display: Correct `DMUB_FW_VERSION` macro
     - serial: atmel: don't enable IRQs prematurely
     - tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() in
       case of error
     - tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk()
       when iterating clk
     - firmware: stratix10-svc: Fix a potential resource leak in
       svc_create_memory_pool()
     - ceph: don't let check_caps skip sending responses for revoke msgs
     - xhci: Fix resume issue of some ZHAOXIN hosts
     - xhci: Fix TRB prefetch issue of ZHAOXIN hosts
     - xhci: Show ZHAOXIN xHCI root hub speed correctly
     - meson saradc: fix clock divider mask length
     - Revert "8250: add support for ASIX devices with a FIFO bug"
     - [s390x] decompressor: fix misaligned symbol build error
     - tracing/histograms: Add histograms to hist_vars if they have referenced
       variables
     - net: ena: fix shift-out-of-bounds in exponential backoff
     - ring-buffer: Fix deadloop issue on reading trace_pipe
     - tracing: Fix null pointer dereference in tracing_err_log_open()
     - tracing/probes: Fix not to count error code to total length
     - scsi: qla2xxx: Wait for io return on terminate rport
     - scsi: qla2xxx: Array index may go out of bound
     - scsi: qla2xxx: Fix buffer overrun
     - scsi: qla2xxx: Fix potential NULL pointer dereference
     - scsi: qla2xxx: Check valid rport returned by fc_bsg_to_rport()
     - scsi: qla2xxx: Correct the index of array
     - scsi: qla2xxx: Pointer may be dereferenced
     - scsi: qla2xxx: Remove unused nvme_ls_waitq wait queue
     - net/sched: sch_qfq: reintroduce lmax bound check for MTU
     - RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
     - drm/atomic: Fix potential use-after-free in nonblocking commits
     - ALSA: hda/realtek - remove 3k pull low procedure
     - ALSA: hda/realtek: Enable Mute LED on HP Laptop 15s-eq2xxx
     - keys: Fix linking a duplicate key to a keyring's assoc_array
     - perf probe: Add test for regression introduced by switch to
       die_get_decl_file()
     - btrfs: fix warning when putting transaction with qgroups enabled after
       abort
     - fuse: revalidate: don't invalidate if interrupted
     - regmap: Drop initial version of maximum transfer length fixes
     - regmap: Account for register length in SMBus I/O limits
     - can: bcm: Fix UAF in bcm_proc_show()
     - drm/client: Fix memory leak in drm_client_target_cloned
     - drm/client: Fix memory leak in drm_client_modeset_probe
     - ASoC: fsl_sai: Disable bit clock with transmitter
     - ext4: correct inline offset when handling xattrs in inode body
     - debugobjects: Recheck debug_objects_enabled before reporting
     - nbd: Add the maximum limit of allocated index in nbd_dev_add
     - md: fix data corruption for raid456 when reshape restart while grow up
     - md/raid10: prevent soft lockup while flush writes
     - posix-timers: Ensure timer ID search-loop limit is valid
     - btrfs: add xxhash to fast checksum implementations
     - ACPI: button: Add lid disable DMI quirk for Nextbook Ares 8A
     - ACPI: video: Add backlight=native DMI quirk for Apple iMac11,3
     - ACPI: video: Add backlight=native DMI quirk for Lenovo ThinkPad X131e
       (3371 AMD version)
     - [arm64] set __exception_irq_entry with __irq_entry as a default
     - [arm64] mm: fix VA-range sanity check
     - sched/fair: Don't balance task to its current running CPU
     - wifi: ath11k: fix registration of 6Ghz-only phy without the full channel
       range
     - bpf: Address KCSAN report on bpf_lru_list
     - devlink: report devlink_port_type_warn source device
     - wifi: wext-core: Fix -Wstringop-overflow warning in
       ioctl_standard_iw_point()
     - wifi: iwlwifi: mvm: avoid baid size integer overflow
     - igb: Fix igb_down hung on surprise removal
     - spi: bcm63xx: fix max prepend length
     - fbdev: imxfb: warn about invalid left/right margin
     - pinctrl: amd: Use amd_pinconf_set() for all config options
     - net: ethernet: ti: cpsw_ale: Fix cpsw_ale_get_field()/cpsw_ale_set_field()
     - bridge: Add extack warning when enabling STP in netns.
     - iavf: Fix use-after-free in free_netdev
     - iavf: Fix out-of-bounds when setting channels on remove
     - security: keys: Modify mismatched function name
     - octeontx2-pf: Dont allocate BPIDs for LBK interfaces
     - tcp: annotate data-races around tcp_rsk(req)->ts_recent
     - net: ipv4: Use kfree_sensitive instead of kfree
     - net:ipv6: check return value of pskb_trim()
     - Revert "tcp: avoid the lookup process failing to get sk in ehash table"
     - fbdev: au1200fb: Fix missing IRQ check in au1200fb_drv_probe
     - llc: Don't drop packet from non-root netns.
     - netfilter: nf_tables: fix spurious set element insertion failure
     - netfilter: nf_tables: can't schedule in nft_chain_validate
     - netfilter: nft_set_pipapo: fix improper element removal (CVE-2023-4004)
     - netfilter: nf_tables: skip bound chain in netns release path
     - netfilter: nf_tables: skip bound chain on rule flush
     - tcp: annotate data-races around tp->tcp_tx_delay
     - tcp: annotate data-races around tp->keepalive_time
     - tcp: annotate data-races around tp->keepalive_intvl
     - tcp: annotate data-races around tp->keepalive_probes
     - net: Introduce net.ipv4.tcp_migrate_req.
     - tcp: Fix data-races around sysctl_tcp_syn(ack)?_retries.
     - tcp: annotate data-races around icsk->icsk_syn_retries
     - tcp: annotate data-races around tp->linger2
     - tcp: annotate data-races around rskq_defer_accept
     - tcp: annotate data-races around tp->notsent_lowat
     - tcp: annotate data-races around icsk->icsk_user_timeout
     - tcp: annotate data-races around fastopenq.max_qlen
     - net: phy: prevent stale pointer dereference in phy_init()
     - tracing/histograms: Return an error if we fail to add histogram to
       hist_vars list
     - tracing: Fix memory leak of iter->temp when reading trace_pipe
     - ftrace: Store the order of pages allocated in ftrace_page
     - ftrace: Fix possible warning on checking all pages used in
       ftrace_process_locs()
     https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.189
     - xen/netback: Fix buffer overrun triggered by unusual packet
       (CVE-2023-34319)
     - [x86] fix backwards merge of GDS/SRSO bit
     https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.190
     - [s390x] KVM: s390: pv: fix index value of replaced ASCE
     - io_uring: don't audit the capability check in io_uring_create()
     - btrfs: fix race between quota disable and relocation
     - btrfs: fix extent buffer leak after tree mod log failure at split_node()
     - i2c: Delete error messages for failed memory allocations
     - i2c: Improve size determinations
     - PCI/ASPM: Return 0 or -ETIMEDOUT from pcie_retrain_link()
     - PCI/ASPM: Factor out pcie_wait_for_retrain()
     - PCI/ASPM: Avoid link retraining race
     - dlm: cleanup plock_op vs plock_xop
     - dlm: rearrange async condition return
     - fs: dlm: interrupt posix locks only when process is killed
     - drm/ttm: add ttm_bo_pin()/ttm_bo_unpin() v2
     - drm/ttm: never consider pinned BOs for eviction&swap
     - tracing: Show real address for trace event arguments
     - [arm64,armhf] pwm: meson: Simplify duplicated per-channel tracking
     - [arm64,armhf] pwm: meson: fix handling of period/duty if greater than
       UINT_MAX
     - ext4: fix to check return value of freeze_bdev() in ext4_shutdown()
     - i40e: Fix an NULL vs IS_ERR() bug for debugfs_create_dir()
     - net: phy: marvell10g: fix 88x3310 power up
     - [arm64] net: hns3: reconstruct function hclge_ets_validate()
     - [arm64] net: hns3: fix wrong bw weight of disabled tc issue
     - vxlan: move to its own directory
     - vxlan: calculate correct header length for GPE
     - phy: hisilicon: Fix an out of bounds check in hisi_inno_phy_probe()
     - ethernet: atheros: fix return value check in atl1e_tso_csum()
     - ipv6 addrconf: fix bug where deleting a mngtmpaddr can create a new
       temporary address
     - tcp: Reduce chance of collisions in inet6_hashfn(). (CVE-2023-1206)
     - ice: Fix memory management in ice_ethtool_fdir.c
     - bonding: reset bond's flags when down link is P2P device
     - team: reset team's flags when down link is P2P device
     - [x86] platform/x86: msi-laptop: Fix rfkill out-of-sync on MSI Wind U100
     - netfilter: nft_set_rbtree: fix overlap expiration walk
     - netfilter: nftables: add helper function to validate set element data
     - netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
     - netfilter: nf_tables: disallow rule addition to bound chain via
       NFTA_RULE_CHAIN_ID (CVE-2023-4147)
     - net/sched: mqprio: refactor nlattr parsing to a separate function
     - net/sched: mqprio: add extack to mqprio_parse_nlattr()
     - net/sched: mqprio: Add length check for TCA_MQPRIO_{MAX/MIN}_RATE64
     - benet: fix return value check in be_lancer_xmit_workarounds()
     - tipc: check return value of pskb_trim()
     - tipc: stop tipc crypto on failure in tipc_node_create
     - RDMA/mlx4: Make check for invalid flags stricter
     - drm/msm/dpu: drop enum dpu_core_perf_data_bus_id
     - drm/msm/adreno: Fix snapshot BINDLESS_DATA size
     - RDMA/mthca: Fix crash when polling CQ for shared QPs
     - drm/msm: Fix IS_ERR_OR_NULL() vs NULL check in a5xx_submit_in_rb()
     - [armhf] ASoC: fsl_spdif: Silence output on stop
     - block: Fix a source code comment in include/uapi/linux/blkzoned.h
     - dm raid: fix missing reconfig_mutex unlock in raid_ctr() error paths
     - dm raid: clean up four equivalent goto tags in raid_ctr()
     - dm raid: protect md_stop() with 'reconfig_mutex'
     - ata: pata_ns87415: mark ns87560_tf_read static
     - ring-buffer: Fix wrong stat of cpu_buffer->read
     - tracing: Fix warning in trace_buffered_event_disable()
     - Revert "usb: gadget: tegra-xudc: Fix error check in
       tegra_xudc_powerdomain_init()"
     - USB: gadget: Fix the memory leak in raw_gadget driver
     - serial: 8250_dw: Preserve original value of DLF register
     - USB: serial: option: support Quectel EM060K_128
     - USB: serial: option: add Quectel EC200A module support
     - USB: serial: simple: add Kaufmann RKS+CAN VCP
     - USB: serial: simple: sort driver entries
     - can: gs_usb: gs_can_close(): add missing set of CAN state to
       CAN_STATE_STOPPED
     - Revert "usb: dwc3: core: Enable AutoRetry feature in the controller"
     - usb: dwc3: pci: skip BYT GPIO lookup table for hardwired phy
     - usb: dwc3: don't reset device side if dwc3 was configured as host-only
     - usb: ohci-at91: Fix the unhandle interrupt when resume
     - USB: quirks: add quirk for Focusrite Scarlett
     - usb: xhci-mtk: set the dma max_seg_size
     - Revert "usb: xhci: tegra: Fix error check"
     - Documentation: security-bugs.rst: update preferences when dealing with the
       linux-distros group
     - Documentation: security-bugs.rst: clarify CVE handling
     - staging: ks7010: potential buffer overflow in ks_wlan_set_encode_ext()
     - tty: n_gsm: fix UAF in gsm_cleanup_mux
     - ALSA: hda/relatek: Enable Mute LED on HP 250 G8
     - hwmon: (nct7802) Fix for temp6 (PECI1) processed even if PECI1 disabled
     - btrfs: check for commit error at btrfs_attach_transaction_barrier()
     - file: always lock position for FMODE_ATOMIC_POS
     - nfsd: Remove incorrect check in nfsd4_validate_stateid
     - tpm_tis: Explicitly check for error code
     - [arm64,armhf] irqchip/gic-v4.1: Properly lock VPEs when doing a directLPI
       invalidation
     - [x86] KVM: VMX: Invert handling of CR0.WP for EPT without unrestricted
       guest
     - [x86] KVM: VMX: Fold ept_update_paging_mode_cr0() back into vmx_set_cr0()
     - [x86] KVM: nVMX: Do not clear CR3 load/store exiting bits if L1 wants 'em
     - [x86] KVM: VMX: Don't fudge CR0 and CR4 for restricted L2 guest
     - staging: rtl8712: Use constants from <linux/ieee80211.h>
     - staging: r8712: Fix memory leak in _r8712_init_xmit_priv()
     - btrfs: check if the transaction was aborted at btrfs_wait_for_commit()
     - virtio-net: fix race between set queues and probe
     - [s390x] dasd: fix hanging device after quiesce/resume
     - [arm64] ASoC: wm8904: Fill the cache for WM8904_ADC_TEST_0 register
     - ceph: never send metrics if disable_send_metrics is set
     - dm cache policy smq: ensure IO doesn't prevent cleaner policy progress
     - drm/ttm: make ttm_bo_unpin more defensive
     - ACPI: processor: perflib: Use the "no limit" frequency QoS
     - ACPI: processor: perflib: Avoid updating frequency QoS unnecessarily
     - [x86] cpufreq: intel_pstate: Drop ACPI _PSS states table patching
     - io_uring: treat -EAGAIN for REQ_F_NOWAIT as final for io-wq
     - [armel,armhf] ASoC: cs42l51: fix driver to properly autoload with
       automatic module loading
     - [x86] kprobes/x86: Fix fall-through warnings for Clang
     - [x86] kprobes: Do not decode opcode in resume_execution()
     - [x86] kprobes: Retrieve correct opcode for group instruction
     - [x86] kprobes: Identify far indirect JMP correctly
     - [x86] kprobes: Use int3 instead of debug trap for single-step
     - [x86] kprobes: Fix to identify indirect jmp and others using range case
     - [x86] kprobes: Move 'inline' to the beginning of the kprobe_is_ss()
       declaration
     - [x86] kprobes: Update kcb status flag after singlestepping
     - [x86] kprobes: Fix JNG/JNLE emulation
     - io_uring: gate iowait schedule on having pending requests
     - perf: Fix function pointer case
     - loop: Select I/O scheduler 'none' from inside add_disk()
     - [arm64] dts: imx8mn-var-som: add missing pull-up for onboard PHY reset
       pinmux
     - word-at-a-time: use the same return type for has_zero regardless of
       endianness
     - [s390x] KVM: s390: fix sthyi error handling
     - wifi: cfg80211: Fix return value in scan logic
     - net/mlx5: DR, fix memory leak in mlx5dr_cmd_create_reformat_ctx
     - net/mlx5e: fix return value check in mlx5e_ipsec_remove_trailer()
     - bpf: Add length check for SK_DIAG_BPF_STORAGE_REQ_MAP_FD parsing
     - rtnetlink: let rtnl_bridge_setlink checks IFLA_BRIDGE_MODE length
     - [armhf] net: dsa: fix value check in bcm_sf2_sw_probe()
     - net: sched: cls_u32: Fix match key mis-addressing
     - mISDN: hfcpci: Fix potential deadlock on &hc->lock
     - net: annotate data-races around sk->sk_max_pacing_rate
     - net: add missing READ_ONCE(sk->sk_rcvlowat) annotation
     - net: add missing READ_ONCE(sk->sk_sndbuf) annotation
     - net: add missing READ_ONCE(sk->sk_rcvbuf) annotation
     - net: add missing data-race annotations around sk->sk_peek_off
     - net: add missing data-race annotation for sk_ll_usec
     - net/sched: cls_u32: No longer copy tcf_result on update to avoid
       use-after-free (CVE-2023-4128)
     - net/sched: cls_fw: No longer copy tcf_result on update to avoid
       use-after-free (CVE-2023-4128)
     - net/sched: cls_route: No longer copy tcf_result on update to avoid
       use-after-free (CVE-2023-4128)
     - bpf: sockmap: Remove preempt_disable in sock_map_sk_acquire
     - net: netsec: Ignore 'phy-mode' on SynQuacer in DT mode
     - net: dcb: choose correct policy to parse DCB_ATTR_BCN
     - [s390x] qeth: Don't call dev_close/dev_open (DOWN/UP)
     - ip6mr: Fix skb_under_panic in ip6mr_cache_report()
     - vxlan: Fix nexthop hash size
     - net/mlx5: fs_core: Make find_closest_ft more generic
     - net/mlx5: fs_core: Skip the FTs in the same FS_TYPE_PRIO_CHAINS fs_prio
     - tcp_metrics: fix addr_same() helper
     - tcp_metrics: annotate data-races around tm->tcpm_stamp
     - tcp_metrics: annotate data-races around tm->tcpm_lock
     - tcp_metrics: annotate data-races around tm->tcpm_vals[]
     - tcp_metrics: annotate data-races around tm->tcpm_net
     - tcp_metrics: fix data-race in tcpm_suck_dst() vs fastopen
     - scsi: zfcp: Defer fc_rport blocking until after ADISC response
     - libceph: fix potential hang in ceph_osdc_notify()
     - USB: zaurus: Add ID for A-300/B-500/C-700
     - ceph: defer stopping mdsc delayed_work
     - exfat: use kvmalloc_array/kvfree instead of kmalloc_array/kfree
     - exfat: release s_lock before calling dir_emit()
     - [arm64] dts: stratix10: fix incorrect I2C property for SCL signal
     - net: tun_chr_open(): set sk_uid from current_fsuid() (CVE-2023-4194)
     - net: tap_open(): set sk_uid from current_fsuid() (CVE-2023-4194)
     - bpf: Disable preemption in bpf_event_output
     - open: make RESOLVE_CACHED correctly test for O_TMPFILE
     - drm/ttm: check null pointer before accessing when swapping
     - file: reinstate f_pos locking optimization for regular files
     - tracing: Fix sleeping while atomic in kdb ftdump
     - fs/sysv: Null check to prevent null-ptr-deref bug
     - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
       (CVE-2023-40283)
     - net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb
     - fs: Protect reconfiguration of sb read-write from racing writes
     - [powerpc*] mm/altmap: Fix altmap boundary check
     - soundwire: bus: add better dev_dbg to track complete() calls
     - soundwire: bus: pm_runtime_request_resume on peripheral attachment
     - soundwire: fix enumeration completion
     - PM / wakeirq: support enabling wake-up irq after runtime_suspend called
     - PM: sleep: wakeirq: fix wake irq arming
     - exfat: speed up iterate/lookup by fixing start point of traversing cluster
       chain
     - exfat: support dynamic allocate bh for exfat_entry_set_cache
     - exfat: check if filename entries exceeds max filename length
       (CVE-2023-4273)
     - mt76: move band capabilities in mt76_phy
     - mt76: mt7615: Fix fall-through warnings for Clang
     - wifi: mt76: mt7615: do not advertise 5 GHz on first phy of MT7615D (DBDC)
     - [x86] CPU/AMD: Do not leak quotient data after a division by 0
       (CVE-2023-20588)
     https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.191
     - wireguard: allowedips: expand maximum node depth
     - ipv6: adjust ndisc_is_useropt() to also return true for PIO
     - bpf: allow precision tracking for programs with subprogs
     - bpf: stop setting precise in current state
     - bpf: aggressively forget precise markings during state checkpointing
     - [arm64,armhf] dmaengine: pl330: Return DMA_PAUSED when transaction is
       paused
     - drm/nouveau/gr: enable memory loads on helper invocation on all channels
     - drm/shmem-helper: Reset vma->vm_ops before calling dma_buf_mmap()
     - drm/amd/display: check attr flag before set cursor degamma on DCN3+
     - [x86] x86/pkeys: Revert a5eff7259790 ("x86/pkeys: Add PKRU value to
       init_fpstate") (Closes: #1044518)
     - nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput
     - io_uring: correct check for O_TMPFILE
     - [arm64] iio: cros_ec: Fix the allocation size for cros_ec_command
     - [arm*] binder: fix memory leak in binder_init()
     - usb-storage: alauda: Fix uninit-value in alauda_check_media()
     - [arm64,armhf] usb: dwc3: Properly handle processing of pending events
     - [arm64,armhf] usb: common: usb-conn-gpio: Prevent bailing out if initial
       role is none
     - [x86] cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
     - [x86] mm: Fix VDSO and VVAR placement on 5-level paging machines
     - [x86] speculation: Add cpu_show_gds() prototype
     - [x86] Move gds_ucode_mitigated() declaration to header
     - drm/nouveau/disp: Revert a NULL check inside nouveau_connector_get_modes
     - mISDN: Update parameter type of dsp_cmx_send()
     - net/packet: annotate data-races around tp->status
     - tunnels: fix kasan splat when generating ipv4 pmtu error
     - bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
     - dccp: fix data-race around dp->dccps_mss_cache
     - drivers: net: prevent tun_build_skb() to exceed the packet size limit
     - [amd64] IB/hfi1: Fix possible panic during hotplug remove
     - wifi: cfg80211: fix sband iftype data lookup for AP_VLAN
     - net: phy: at803x: remove set/get wol callbacks for AR8032
     - [arm64] net: hns3: refactor hclge_mac_link_status_wait for interface reuse
     - [arm64] net: hns3: add wait until mac link down
     - net/mlx5: Allow 0 for total host VFs
     - btrfs: don't stop integrity writeback too early
     - btrfs: set cache_block_group_error if we find an error
     - nvme-tcp: fix potential unbalanced freeze & unfreeze
     - nvme-rdma: fix potential unbalanced freeze & unfreeze
     - netfilter: nf_tables: report use refcount overflow
     - scsi: core: Fix legacy /proc parsing buffer overflow
     - [x86] scsi: storvsc: Fix handling of virtual Fibre Channel timeouts
     - scsi: snic: Fix possible memory leak if device_add() fails
     - scsi: core: Fix possible memory leak if device_add() fails
     - scsi: qedi: Fix firmware halt over suspend and resume
     - scsi: qedf: Fix firmware halt over suspend and resume
     - sch_netem: fix issues in netem_change() vs get_dist_table()
 .
   [ Ben Hutchings ]
   * d/b/test-patches: Fix installability; improve robustness and efficiency
     (Closes: #871216, #1035359):
     - d/b/gencontrol.py: Add optional extra config dir debian/config.local
     - d/b/gencontrol.py: Add support for noudeb build profile
     - d/b/test-patches: Change ABI name to make packages co-installable
     - d/b/test-patches: Make debug info optional and disabled by default
     - d/b/test-patches: Build a linux-headers-common package as well
     - d/b/test-patches: Tolerate missing d/control, d/rules.gen, or d/p/test
     - d/b/test-patches: Detect flavour correctly when running backported kernel
     - Add pkg.linux.mintools profile for building minimal userland tools
     - d/b/test-patches: Build linux-{kbuild,bootwrapper} packages
 .
   [ Salvatore Bonaccorso ]
   * [rt] Update to 5.10.180-rt88
   * Bump ABI to 25
   * Drop unknown config setting NET_CLS_TCINDEX
   * Drop unknown config setting BLK_DEV_SX8
   * [rt] Update to 5.10.184-rt90
   * Drop "decnet: Disable auto-loading as mitigation against local exploits"
   * Drop now unknown config options for DECnet support
   * [rt] Update to 5.10.186-rt91
Checksums-Sha1:
 25683d0b2b6b1ee6ef351d0bdb492e77051d0647 42701 linux-5.10_5.10.197-1~deb10u1.dsc
 89e23955a5c06acb14d67d85e1e24214c7b016ee 121862804 linux-5.10_5.10.197.orig.tar.xz
 bf26c8c205f647828da20e44b1a61e7b5d052526 1625108 linux-5.10_5.10.197-1~deb10u1.debian.tar.xz
 950fa58eda9e5c6bf4b31989d801972c654a45e9 13604 linux-5.10_5.10.197-1~deb10u1_source.buildinfo
Checksums-Sha256:
 08ed59dd0d413972d1ef15d618b9687724d29eaaab96f9a8138ebae40f645663 42701 linux-5.10_5.10.197-1~deb10u1.dsc
 0a0d5651b67c7881d094c6b1bfbedd5971e280fb2ff2ada8a31a6f2b96b90d71 121862804 linux-5.10_5.10.197.orig.tar.xz
 f79bcf141abe5fdc2f2fadf1124f433f7ad207fddedfc48d0bb5575cdf9e0124 1625108 linux-5.10_5.10.197-1~deb10u1.debian.tar.xz
 51807772b5cf1077587c3b41cb1f585411977a782a5ffacffc754d7b57cf404d 13604 linux-5.10_5.10.197-1~deb10u1_source.buildinfo
Files:
 f1b22b9cbe6213ba2029e34943517810 42701 kernel optional linux-5.10_5.10.197-1~deb10u1.dsc
 da815d9073d3caff8306fb97e6560797 121862804 kernel optional linux-5.10_5.10.197.orig.tar.xz
 9347c60eef0c9547717046a0ef3fb758 1625108 kernel optional linux-5.10_5.10.197-1~deb10u1.debian.tar.xz
 02a9d66cfe49ae41211c4f6c1ecfec96 13604 kernel optional linux-5.10_5.10.197-1~deb10u1_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=lWN3
-----END PGP SIGNATURE-----