~ubuntu-mainline/ubuntu-mainline/+git/linux-upstream:linux-rolling-lts

Branch merges

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related charm recipes

2b4bd11... by Greg Kroah-Hartman <email address hidden> on 2024-09-18

Merge v6.6.52

Signed-off-by: Greg Kroah-Hartman <email address hidden>

561bbd5... by Greg Kroah-Hartman <email address hidden> on 2024-09-18

Linux 6.6.52

Link: https://<email address hidden>
Tested-by: Takeshi Ogasawara <email address hidden>
Tested-by: Harshit Mogalapalli <email address hidden>
Tested-by: Peter Schneider <email address hidden>
Tested-by: Mark Brown <email address hidden>
Tested-by: Jon Hunter <email address hidden>
Tested-by: Florian Fainelli <email address hidden>
Tested-by: Ron Economos <email address hidden>
Tested-by: Kexy Biscuit <email address hidden>
Signed-off-by: Greg Kroah-Hartman <email address hidden>

bd9c3c2... by William Qiu <email address hidden> on 2023-09-22

riscv: dts: starfive: add assigned-clock* to limit frquency

commit af571133f7ae028ec9b5fdab78f483af13bf28d3 upstream.

In JH7110 SoC, we need to go by-pass mode, so we need add the
assigned-clock* properties to limit clock frquency.

Signed-off-by: William Qiu <email address hidden>
Reviewed-by: Emil Renner Berthing <email address hidden>
Signed-off-by: Conor Dooley <email address hidden>
Signed-off-by: WangYuli <email address hidden>
Signed-off-by: Greg Kroah-Hartman <email address hidden>

e43364f... by Arseniy Krasnov <email address hidden> on 2024-09-11

ASoC: meson: axg-card: fix 'use-after-free'

commit 4f9a71435953f941969a4f017e2357db62d85a86 upstream.

Buffer 'card->dai_link' is reallocated in 'meson_card_reallocate_links()',
so move 'pad' pointer initialization after this function when memory is
already reallocated.

Kasan bug report:

==================================================================
BUG: KASAN: slab-use-after-free in axg_card_add_link+0x76c/0x9bc
Read of size 8 at addr ffff000000e8b260 by task modprobe/356

CPU: 0 PID: 356 Comm: modprobe Tainted: G O 6.9.12-sdkernel #1
Call trace:
 dump_backtrace+0x94/0xec
 show_stack+0x18/0x24
 dump_stack_lvl+0x78/0x90
 print_report+0xfc/0x5c0
 kasan_report+0xb8/0xfc
 __asan_load8+0x9c/0xb8
 axg_card_add_link+0x76c/0x9bc [snd_soc_meson_axg_sound_card]
 meson_card_probe+0x344/0x3b8 [snd_soc_meson_card_utils]
 platform_probe+0x8c/0xf4
 really_probe+0x110/0x39c
 __driver_probe_device+0xb8/0x18c
 driver_probe_device+0x108/0x1d8
 __driver_attach+0xd0/0x25c
 bus_for_each_dev+0xe0/0x154
 driver_attach+0x34/0x44
 bus_add_driver+0x134/0x294
 driver_register+0xa8/0x1e8
 __platform_driver_register+0x44/0x54
 axg_card_pdrv_init+0x20/0x1000 [snd_soc_meson_axg_sound_card]
 do_one_initcall+0xdc/0x25c
 do_init_module+0x10c/0x334
 load_module+0x24c4/0x26cc
 init_module_from_file+0xd4/0x128
 __arm64_sys_finit_module+0x1f4/0x41c
 invoke_syscall+0x60/0x188
 el0_svc_common.constprop.0+0x78/0x13c
 do_el0_svc+0x30/0x40
 el0_svc+0x38/0x78
 el0t_64_sync_handler+0x100/0x12c
 el0t_64_sync+0x190/0x194

Fixes: 7864a79f37b5 ("ASoC: meson: add axg sound card support")
Cc: <email address hidden>
Signed-off-by: Arseniy Krasnov <email address hidden>
Reviewed-by: Jerome Brunet <email address hidden>
Link: https://<email address hidden>
Signed-off-by: Mark Brown <email address hidden>
Signed-off-by: Greg Kroah-Hartman <email address hidden>

2a01f3b... by Mika Westerberg <email address hidden> on 2024-06-24

pinctrl: meteorlake: Add Arrow Lake-H/U ACPI ID

commit a366e46da10d7bfa1a52c3bd31f342a3d0e8e7fe upstream.

Intel Arrow Lake-H/U has the same GPIO hardware than Meteor Lake-P but
the ACPI ID is different. Add this new ACPI ID to the list of supported
devices.

Cc: <email address hidden>
Signed-off-by: Mika Westerberg <email address hidden>
Signed-off-by: Greg Kroah-Hartman <email address hidden>

b9d510e... by David Howells on 2024-09-12

cifs: Fix signature miscalculation

[ Upstream commit 5a20b7cb0d8d3ee490a8e088dc2584aa782e3355 ]

Fix the calculation of packet signatures by adding the offset into a page
in the read or write data payload when hashing the pages from it.

Fixes: 39bc58203f04 ("cifs: Add a function to Hash the contents of an iterator")
Signed-off-by: David Howells <email address hidden>
Reviewed-by: Tom Talpey <email address hidden>
Reviewed-by: Paulo Alcantara (Red Hat) <email address hidden>
cc: Shyam Prasad N <email address hidden>
cc: Rohith Surabattula <email address hidden>
cc: Jeff Layton <email address hidden>
cc: <email address hidden>
cc: <email address hidden>
Signed-off-by: Steve French <email address hidden>
Signed-off-by: Sasha Levin <email address hidden>

6ec7cbc... by Su Hui <email address hidden> on 2024-09-11

ASoC: codecs: avoid possible garbage value in peb2466_reg_read()

[ Upstream commit 38cc0334baabc5baf08a1db753de521e016c0432 ]

Clang static checker (scan-build) warning:
sound/soc/codecs/peb2466.c:232:8:
Assigned value is garbage or undefined [core.uninitialized.Assign]
  232 | *val = tmp;
      | ^ ~~~

When peb2466_read_byte() fails, 'tmp' will have a garbage value.
Add a judgemnet to avoid this problem.

Fixes: 227f609c7c0e ("ASoC: codecs: Add support for the Infineon PEB2466 codec")
Signed-off-by: Su Hui <email address hidden>
Link: https://<email address hidden>
Signed-off-by: Mark Brown <email address hidden>
Signed-off-by: Sasha Levin <email address hidden>

8623860... by Nikita Zhandarovich <email address hidden> on 2024-07-25

drm/i915/guc: prevent a possible int overflow in wq offsets

[ Upstream commit d3d37f74683e2f16f2635ee265884f7ca69350ae ]

It may be possible for the sum of the values derived from
i915_ggtt_offset() and __get_parent_scratch_offset()/
i915_ggtt_offset() to go over the u32 limit before being assigned
to wq offsets of u64 type.

Mitigate these issues by expanding one of the right operands
to u64 to avoid any overflow issues just in case.

Found by Linux Verification Center (linuxtesting.org) with static
analysis tool SVACE.

Fixes: c2aa552ff09d ("drm/i915/guc: Add multi-lrc context registration")
Cc: Matthew Brost <email address hidden>
Cc: John Harrison <email address hidden>
Signed-off-by: Nikita Zhandarovich <email address hidden>
Link: https://patchwork.freedesktop<email address hidden>
Reviewed-by: Rodrigo Vivi <email address hidden>
Signed-off-by: Rodrigo Vivi <email address hidden>
(cherry picked from commit 1f1c1bd56620b80ae407c5790743e17caad69cec)
Signed-off-by: Tvrtko Ursulin <email address hidden>
Signed-off-by: Sasha Levin <email address hidden>

f9e08c2... by Jinjie Ruan <email address hidden> on 2024-09-09

spi: geni-qcom: Fix incorrect free_irq() sequence

[ Upstream commit b787a33864121a565aeb0e88561bf6062a19f99c ]

In spi_geni_remove(), the free_irq() sequence is different from that
on the probe error path. And the IRQ will still remain and it's interrupt
handler may use the dma channel after release dma channel and before free
irq, which is not secure, fix it.

Fixes: b59c122484ec ("spi: spi-geni-qcom: Add support for GPI dma")
Signed-off-by: Jinjie Ruan <email address hidden>
Reviewed-by: Dmitry Baryshkov <email address hidden>
Link: https://<email address hidden>
Signed-off-by: Mark Brown <email address hidden>
Signed-off-by: Sasha Levin <email address hidden>

64cdc5d... by Jinjie Ruan <email address hidden> on 2024-09-09

spi: geni-qcom: Undo runtime PM changes at driver exit time

[ Upstream commit 89e362c883c65ff94b76b9862285f63545fb5274 ]

It's important to undo pm_runtime_use_autosuspend() with
pm_runtime_dont_use_autosuspend() at driver exit time unless driver
initially enabled pm_runtime with devm_pm_runtime_enable()
(which handles it for you).

Hence, switch to devm_pm_runtime_enable() to fix it, so the
pm_runtime_disable() in probe error path and remove function
can be removed.

Fixes: cfdab2cd85ec ("spi: spi-geni-qcom: Set an autosuspend delay of 250 ms")
Signed-off-by: Jinjie Ruan <email address hidden>
Suggested-by: Dmitry Baryshkov <email address hidden>
Reviewed-by: Dmitry Baryshkov <email address hidden>
Link: https://<email address hidden>
Signed-off-by: Mark Brown <email address hidden>
Signed-off-by: Sasha Levin <email address hidden>