- 12 Jan, 2023 2 commits
-
-
Lorenzo "Palinuro" Faletra authored
linux (6.0.12-1parrot1) parrot-updates; urgency=medium . * Import new Debian release. * Update wifi patches. . linux (6.0.12-1~bpo11+1) bullseye-backports; urgency=medium . * Rebuild for bullseye-backports: - Change ABI number to 0.deb11.6 . linux (6.0.12-1) unstable; urgency=medium . * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.0.11 - [arm*] binder: validate alloc->mm in ->mmap() handler - ceph: Use kcalloc for allocating multiple elements - ceph: fix NULL pointer dereference for req->r_session - wifi: mac80211: fix memory free error when registering wiphy fail - wifi: cfg80211: Fix bitrates overflow issue - wifi: mac80211_hwsim: fix debugfs attribute ps with rc table support - [riscv64] dts: sifive unleashed: Add PWM controlled LEDs - audit: fix undefined behavior in bit shift for AUDIT_BIT - wifi: airo: do not assign -1 to unsigned char - wifi: mac80211: Fix ack frame idr leak when mesh has no route - wifi: ath11k: Fix QCN9074 firmware boot on x86 - [s390x] zcrypt: fix warning about field-spanning write - [armhf] spi: stm32: fix stm32_spi_prepare_mbr() that halves spi clk for every run - Revert "net: macsec: report real_dev features when HW offloading is enabled" - [x86] ACPI: video: Add backlight=native DMI quirk for Dell G15 5515 - [x86] platform/x86: ideapad-laptop: Disable touchpad_switch - [x86] platform/x86: touchscreen_dmi: Add info for the RCA Cambio W101 v2 2-in-1 - [x86] platform/x86/intel/pmt: Sapphire Rapids PMT errata fix - [x86] platform/x86/intel/hid: Add some ACPI device IDs - [powerpc*] scsi: ibmvfc: Avoid path failures during live migration - scsi: scsi_debug: Make the READ CAPACITY response compliant with ZBC - drm: panel-orientation-quirks: Add quirk for Nanote UMPC-01 - drm: panel-orientation-quirks: Add quirk for Acer Switch V 10 (SW5-017) - block, bfq: fix null pointer dereference in bfq_bio_bfqg() - [s390x] always build relocatable kernel - [arm64] syscall: Include asm/ptrace.h in syscall_wrapper header. - nvme: quiet user passthrough command errors - nvmet: fix memory leak in nvmet_subsys_attr_model_store_locked - net: wwan: iosm: fix kernel test robot reported errors - drm/amd/display: Zeromem mypipe heap struct before using it - drm/amd/display: Fix FCLK deviation and tool compile issues - drm/amd/display: Fix gpio port mapping issue - Revert "drm/amdgpu: Revert "drm/amdgpu: getting fan speed pwm for vega10 properly"" - drm/amdgpu: Drop eviction lock when allocating PT BO - drm/amd/display: only fill dirty rectangles when PSR is enabled - ALSA: usb-audio: add quirk to fix Hamedal C20 disconnect issue - [riscv64] vdso: Do not add missing symbols to version section in linker script - [mips*] pic32: treat port as signed integer - io_uring/poll: lockdep annote io_poll_req_insert_locked - xfrm: fix "disable_policy" on ipv4 early demux - [arm64] dts: rockchip: fix quartz64-a bluetooth configuration - xfrm: replay: Fix ESN wrap around for GSO - af_key: Fix send_acquire race with pfkey_register - [arm64,armhf] ASoC: sgtl5000: Reset the CHIP_CLK_CTRL reg on remove - ASoC: soc-pcm: Don't zero TDM masks in __soc_pcm_open() - [x86] hyperv: Restore VP assist page after cpu offlining/onlining - scsi: storvsc: Fix handling of srb_status and capacity change events - [amd64,arm64] PCI: hv: Only reuse existing IRTE allocation for Multi-MSI - [arm64] dts: rockchip: Fix Pine64 Quartz4-B PMIC interrupt - [x86] ASoC: max98373: Add checks for devm_kcalloc - regulator: core: fix kobject release warning and memory leak in regulator_register() - regulator: core: fix UAF in destroy_regulator() - [arm64,armhf] bus: sunxi-rsb: Remove the shutdown callback - [arm64,armhf] bus: sunxi-rsb: Support atomic transfers - [arm64] tee: optee: fix possible memory leak in optee_register_device() - net: liquidio: simplify if expression - ipvlan: hold lower dev to avoid possible use-after-free - rxrpc: Fix race between conn bundle lookup and bundle removal [ZDI-CAN-15975] - nfc/nci: fix race with opening and closing - [i386] net: pch_gbe: fix potential memleak in pch_gbe_tx_queue() - 9p/fd: fix issue of list_del corruption in p9_fd_cancel() - netfilter: conntrack: Fix data-races around ct mark - netfilter: nf_tables: do not set up extensions for end interval - iavf: Fix a crash during reset task - iavf: Do not restart Tx queues after reset task failure - iavf: remove INITIAL_MAC_SET to allow gARP to work properly - iavf: Fix race condition between iavf_shutdown and iavf_remove - [armhf] dts: imx6q-prti6q: Fix ref/tcxo-clock-frequency properties - net/mlx4: Check retval of mlx4_bitmap_init - [arm64,armhf] net: mvpp2: fix possible invalid pointer dereference - net/qla3xxx: fix potential memleak in ql3xxx_send() - [i386] net: pch_gbe: fix pci device refcount leak while module exiting - nfp: fill splittable of devlink_port_attrs correctly - nfp: add port from netdev validation for EEPROM access - bonding: fix ICMPv6 header handling when receiving IPv6 messages - macsec: Fix invalid error code set - [x86] drm/i915: Fix warn in intel_display_power_*_domain() functions - Drivers: hv: vmbus: fix double free in the error path of vmbus_add_channel_work() - Drivers: hv: vmbus: fix possible memory leak in vmbus_device_register() - netfilter: ipset: regression in ip_set_hash_ip.c - net/mlx5: Do not query pci info while pci disabled - net/mlx5: Fix FW tracer timestamp calculation - net/mlx5: SF: Fix probing active SFs during driver probe phase - net/mlx5: cmdif, Print info on any firmware cmd failure to tracepoint - net/mlx5: Fix handling of entry refcount when command is not issued to FW - net/mlx5: E-Switch, Set correctly vport destination - net/mlx5: Fix sync reset event handler error flow - net/mlx5e: Offload rule only when all encaps are valid - net: phy: at803x: fix error return code in at803x_probe() - tipc: set con sock in tipc_conn_alloc - tipc: add an extra conn_get in tipc_conn_alloc - tipc: check skb_linearize() return value in tipc_disc_rcv() - zonefs: Fix race between modprobe and mount - xfrm: Fix oops in __xfrm_state_delete() - xfrm: Fix ignored return value in xfrm6_init() - net: wwan: iosm: use ACPI_FREE() but not kfree() in ipc_pcie_read_bios_cfg() - sfc: fix potential memleak in __ef100_hard_start_xmit() - net: sched: allow act_ct to be built without NF_NAT - NFC: nci: fix memory leak in nci_rx_data_packet() - [armhf] regulator: twl6030: re-add TWL6032_SUBCLASS - bnx2x: fix pci device refcount leak in bnx2x_vf_is_pcie_pending() - [x86] cpufreq: amd-pstate: change amd-pstate driver to be built-in type - netfilter: ipset: restore allowing 64 clashing elements in hash:net,iface - netfilter: flowtable_offload: add missing locking - fs: do not update freeing inode i_io_list - blk-mq: fix queue reference leak on blk_mq_alloc_disk_for_queue failure - dccp/tcp: Reset saddr on failure after inet6?_hash_connect(). - ipv4: Fix error return code in fib_table_insert() - [x86] arcnet: fix potential memory leak in com20020_probe() - [s390x] ap: fix memory leak in ap_init_qci_info() - [s390x] dasd: fix no record found for raw_track_access - fscache: fix OOB Read in __fscache_acquire_volume - [arm64] net: enetc: cache accesses to &priv->si->hw - [arm64] net: enetc: preserve TX ring priority across reconfiguration - virtio_net: Fix probe failed when modprobe virtio_net - [arm64] net: thunderx: Fix the ACPI memory leak - io_uring/filetable: fix file reference underflow - io_uring/poll: fix poll_refs race with cancelation - lib/vdso: use "grep -E" instead of "egrep" - can: gs_usb: remove dma allocations - [armhf] usb: dwc3: exynos: Fix remove() function - cifs: fix missing unlock in cifs_file_copychunk_range() - cifs: Use after free in debug code - ext4: fix use-after-free in ext4_ext_shift_extents - [arm64] dts: rockchip: lower rk3399-puma-haikou SD controller clock frequency - [armhf] iio: adc: aspeed: Remove the trim valid dts property. - iio: light: apds9960: fix wrong register for gesture gain - iio: core: Fix entry not deleted when iio_register_sw_trigger_type() fails - iio: accel: bma400: Fix memory leak in bma400_get_steps_reg() - [amd64] virt/sev-guest: Prevent IV reuse in the SNP guest driver - [x86] cpufreq: amd-pstate: cpufreq: amd-pstate: reset MSR_AMD_PERF_CTL register at init - zonefs: Fix active zone accounting - [arm64,armhf] spi: spi-imx: Fix spi_bus_clk if requested clock is higher than input clock - [arm64,armhf] spi: spi-imx: spi_imx_transfer_one(): check for DMA transfer first - NFSD: Fix reads with a non-zero offset that don't end on a page boundary - drm/amdgpu: Enable SA software trap. - drm/amd/display: Added debug option for forcing subvp num ways - drm/amd/display: Add debug option for allocating extra way for cursor - drm/amd/display: Update MALL SS NumWays calculation - drm/amd/display: Fix calculation for cursor CAB allocation - [arm64,armhf] usb: dwc3: gadget: conditionally remove requests - [arm64,armhf] usb: dwc3: gadget: Return -ESHUTDOWN on ep disable - [arm64,armhf] usb: dwc3: gadget: Clear ep descriptor last - io_uring: cmpxchg for poll arm refs release - io_uring: make poll refs more robust - io_uring: clear TIF_NOTIFY_SIGNAL if set and task_work not available - nilfs2: fix nilfs_sufile_mark_dirty() not set segment usage as dirty - mm/cgroup/reclaim: fix dirty pages throttling on cgroup v1 - mm: vmscan: fix extreme overreclaim and swap floods - [x86] KVM: x86/mmu: Fix race condition in direct_page_fault (CVE-2022-45869) - [x86] KVM: x86/xen: Only do in-kernel acceleration of hypercalls for guest CPL0 - [x86] KVM: x86/xen: Validate port number in SCHEDOP_poll - [x86] drm/i915/gvt: Get reference to KVM iff attachment to VM is successful - [x86] KVM: x86: nSVM: leave nested mode on vCPU free - [x86] KVM: x86: forcibly leave nested mode on vCPU reset (CVE-2022-3344) - [x86] KVM: x86: nSVM: harden svm_free_nested against freeing vmcb02 while still in use (CVE-2022-3344) - [x86] KVM: x86: add kvm_leave_nested - [x86] KVM: x86: remove exit_int_info warning in svm_handle_exit - [x86] KVM: Update gfn_to_pfn_cache khva when it moves within the same page - [x86] tsx: Add a feature bit for TSX control MSR support - [x86] pm: Add enumeration check before spec MSRs save/restore setup - [x86] ioremap: Fix page aligned size calculation in __ioremap_caller() - mm: fix unexpected changes to {failslab|fail_page_alloc}.attr - mm: correctly charge compressed memory to its memcg - Input: synaptics - switch touchpad on HP Laptop 15-da3001TU to RMI mode - [x86] ASoC: amd: yc: Add Alienware m17 R5 AMD into DMI table - [x86] ASoC: Intel: bytcht_es8316: Add quirk for the Nanote UMPC-01 - [x86] ASoC: Intel: soc-acpi: add ES83x6 support to IceLake - ASoC: hda: intel-dsp-config: add ES83x6 quirk for IceLake - [x86] ASoC: SOF: ipc3-topology: use old pipeline teardown flow with SOF2.1 and older - Revert "tty: n_gsm: avoid call of sleeping functions from atomic context" - Revert "tty: n_gsm: replace kicktimer with delayed_work" - Input: goodix - try resetting the controller when no config is set - bpf: Convert BPF_DISPATCHER to use static_call() (not ftrace) - [x86] Input: soc_button_array - add use_low_level_irq module parameter - [x86] Input: soc_button_array - add Acer Switch V 10 to dmi_use_low_level_irq[] - Input: i8042 - apply probe defer to more ASUS ZenBook models - xen-pciback: Allow setting PCI_MSIX_FLAGS_MASKALL too - [x86] xen/platform-pci: add missing free_irq() in error path - [x86] platform/x86: thinkpad_acpi: Enable s2idle quirk for 21A1 machine type - [x86] platform/x86: asus-wmi: add missing pci_dev_put() in asus_wmi_set_xusb2pr() - [x86] platform/x86: acer-wmi: Enable SW_TABLET_MODE on Switch V 10 (SW5-017) - [x86] platform/surface: aggregator_registry: Add support for Surface Pro 9 - drm/amd/display: use uclk pstate latency for fw assisted mclk validation dcn32 - drm/amdgpu: disable BACO support on more cards - zonefs: fix zone report size in __zonefs_io_error() - [x86] platform/surface: aggregator_registry: Add support for Surface Laptop 5 - [x86] platform/x86: hp-wmi: Ignore Smart Experience App event - [x86] platform/x86: ideapad-laptop: Fix interrupt storm on fn-lock toggle on some Yoga laptops - [x86] platform/x86: ideapad-laptop: Add module parameters to match DMI quirk tables - tcp: configurable source port perturb table size - block: make blk_set_default_limits() private - dm-integrity: set dma_alignment limit in io_hints - dm-log-writes: set dma_alignment limit in io_hints - net: usb: qmi_wwan: add Telit 0x103a composition - scsi: iscsi: Fix possible memory leak when device_register() failed - [arm64,armhf] gpu: host1x: Avoid trying to use GART on Tegra20 - dm integrity: flush the journal on suspend - dm integrity: clear the journal on suspend - fuse: lock inode unconditionally in fuse_fallocate() - btrfs: free btrfs_path before copying root refs to userspace - btrfs: free btrfs_path before copying inodes to userspace - btrfs: free btrfs_path before copying fspath to userspace - btrfs: free btrfs_path before copying subvol info to userspace - btrfs: zoned: fix missing endianness conversion in sb_write_pointer - btrfs: use kvcalloc in btrfs_get_dev_zone_info - btrfs: sysfs: normalize the error handling branch in btrfs_init_sysfs() - btrfs: do not modify log tree while holding a leaf from fs tree locked - [x86] drm/i915/ttm: never purge busy objects - drm/display/dp_mst: Fix drm_dp_mst_add_affected_dsc_crtcs() return code - drm/amd/display: No display after resume from WB/CB - drm/amdgpu/psp: don't free PSP buffers on suspend - drm/amdgpu: Enable Aldebaran devices to report CU Occupancy - drm/amd/amdgpu: reserve vm invalidation engine for firmware - drm/amd/display: Update soc bounding box for dcn32/dcn321 - drm/amdgpu: always register an MMU notifier for userptr - drm/amdgpu: Partially revert "drm/amdgpu: update drm_display_info correctly when the edid is read" - bpf: Add explicit cast to 'void *' for __BPF_DISPATCHER_UPDATE() https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.0.12 - btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit() - drm/amdgpu: move setting the job resources - drm/amdgpu: cleanup error handling in amdgpu_cs_parser_bos - drm/amdgpu: fix userptr HMM range handling v2 - drm/amd/pm: add smu_v13_0_10 driver if version - drm/amd/pm: update driver-if header for smu_v13_0_10 - drm/amd/pm: update driver if header for smu_13_0_7 - [arm64] clk: qcom: gdsc: add missing error handling - [arm64] clk: qcom: gdsc: Remove direct runtime PM calls - bpf, perf: Use subprog name when reporting subprog ksymbol - scripts/faddr2line: Fix regression in name resolution on ppc64le - [x86] hwmon: (i5500_temp) fix missing pci_disable_device() - hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails - [arm64,armhf] clocksource/drivers/arm_arch_timer: Fix XGene-1 TVAL register math error - bpf: Do not copy spin lock field from user in bpf_selem_alloc - of: property: decrement node refcount in of_fwnode_get_reference_args() - ixgbevf: Fix resource leak in ixgbevf_init_module() - i40e: Fix error handling in i40e_init_module() - iavf: Fix error handling in iavf_init_module() - e100: Fix possible use after free in e100_xmit_prepare - net/mlx5: DR, Fix uninitialized var warning - net/mlx5: E-switch, Destroy legacy fdb table when needed - net/mlx5: E-switch, Fix duplicate lag creation - net/mlx5: Fix uninitialized variable bug in outlen_write() - net/mlx5e: Fix use-after-free when reverting termination table - can: sja1000_isa: sja1000_isa_probe(): add missing free_sja1000dev() - [i386] can: cc770: cc770_isa_probe(): add missing free_cc770dev() - vfs: fix copy_file_range() averts filesystem freeze protection - qlcnic: fix sleep-in-atomic-context bugs caused by msleep - aquantia: Do not purge addresses when setting the number of rings - wifi: cfg80211: fix buffer overflow in elem comparison - wifi: cfg80211: don't allow multi-BSSID in S1G - wifi: mac8021: fix possible oob access in ieee80211_get_rate_duration - net: phy: fix null-ptr-deref while probe() failed - net: net_netdev: Fix error handling in ntb_netdev_init_module() - net/9p: Fix a potential socket leak in p9_socket_open - net: wwan: iosm: fix kernel test robot reported error - net: wwan: iosm: fix dma_alloc_coherent incompatible pointer type - net: wwan: iosm: fix crash in peek throughput test - net: wwan: iosm: fix incorrect skb length - mptcp: don't orphan ssk in mptcp_close() - mptcp: fix sleep in atomic at close time - tipc: re-fetch skb cb after tipc_msg_validate - net: mdiobus: fix unbalanced node reference count - afs: Fix fileserver probe RTT handling - net: tun: Fix use-after-free in tun_detach() - net/mlx5: Lag, Fix for loop when checking lag - packet: do not set TP_STATUS_CSUM_VALID on CHECKSUM_COMPLETE - sctp: fix memory leak in sctp_stream_outq_migrate() - afs: Fix server->active leak in afs_put_server - [x86] hwmon: (coretemp) Check for null before removing sysfs attrs - [x86] hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() - [x86] hwmon: (asus-ec-sensors) Add checks for devm_kcalloc - [riscv64] vdso: fix section overlapping under some conditions - [riscv64] mm: Proper page permissions after initmem free - ALSA: dice: fix regression for Lexicon I-ONIX FW810S - nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry() - [x86] bugs: Make sure MSR_SPEC_CTRL is updated properly upon resume from S3 - [x86] pinctrl: intel: Save and restore pins in "direct IRQ" mode - v4l2: don't fall back to follow_pfn() if pin_user_pages_fast() fails - mm: migrate: fix THP's mapcount on isolation - net: stmmac: Set MAC's flow control register to reflect current settings - mmc: core: Fix ambiguous TRIM and DISCARD arg - [amd64,armhf] mmc: sdhci-esdhc-imx: correct CQHCI exit halt state check - mmc: sdhci: Fix voltage switch delay - drm/amdgpu: temporarily disable broken Clang builds due to blown stack-frame - drm/amdgpu: enable Vangogh VCN indirect sram mode - [x86] drm/i915: Fix negative value passed as remaining time - [x86] drm/i915: Never return 0 if not all requests retired - tracing/osnoise: Fix duration type - tracing: Fix race where histograms can be called before the event - tracing: Free buffers when a used dynamic event is removed - ASoC: ops: Fix bounds check for _sx controls - [arm64,armhf] pinctrl: single: Fix potential division by zero - [riscv64] Sync efi page table's kernel mappings before switching - [riscv64] fix race when vmap stack overflow - [riscv64] kexec: Fixup irq controller broken in kexec crash path - nvme: fix SRCU protection of nvme_ns_head list - [amd64] iommu/vt-d: Fix PCI device refcount leak in has_external_pci() - [amd64] iommu/vt-d: Fix PCI device refcount leak in dmar_dev_scope_init() - ipv4: Handle attempt to delete multipath route when fib_info contains an nh reference (CVE-2022-3435) - ipv4: Fix route deletion when nexthop info is not specified - i2c: Restore initial power state if probe fails - [arm64] i2c: qcom-geni: fix error return code in geni_i2c_gpi_xfer - [arm64,armhf] i2c: imx: Only DMA messages with I2C_M_DMA_SAFE flag set - [amd64,arm64] ACPI: HMAT: remove unnecessary variable initialization - [amd64,arm64] ACPI: HMAT: Fix initiator registration for single-initiator systems - char: tpm: Protect tpm_pm_suspend with locks - ipc/sem: Fix dangling sem_array access in semtimedop race - proc: avoid integer type confusion in get_proc_long - proc: proc_skip_spaces() shouldn't think it is working on C strings . [ Salvatore Bonaccorso ] * [rt] Refresh "serial: 8250: implement write_atomic" * Bump ABI to 6 * [s390x] debian/config: Drop explicit enable of RELOCATABLE. * [x86] drivers/cpufreq: Change X86_AMD_PSTATE from module to built-in * xen/netback: Ensure protocol headers don't fall in the non-linear area (XSA-423, CVE-2022-3643) * xen/netback: don't call kfree_skb() with interrupts disabled (XSA-424, CVE-2022-42328, CVE-2022-42329) . linux (6.0.10-2) unstable; urgency=medium . * [x86] drm/i915: fix TLB invalidation for Gen12 video and compute engines (CVE-2022-4139) . linux (6.0.10-1) unstable; urgency=medium . * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.0.9 - [x86] thunderbolt: Add DP OUT resource when DP tunnel is discovered - [x86] drm/i915/gvt: Add missing vfio_unregister_group_dev() call - KVM: debugfs: Return retval of simple_attr_open() if it fails - [x86] drm/i915: Allow more varied alternate fixed modes for panels - [x86] drm/i915: Simplify intel_panel_add_edid_alt_fixed_modes() - [x86] drm/i915/sdvo: Grab mode_config.mutex during LVDS init to avoid WARNs - drm/amd/display: Acquire FCLK DPM levels on DCN32 - drm/amd/display: Limit dcn32 to 1950Mhz display clock - drm/amd/display: Set memclk levels to be at least 1 for dcn32 - HID: wacom: Fix logic used for 3rd barrel switch emulation - [armhf] phy: stm32: fix an error code in probe - wifi: cfg80211: silence a sparse RCU warning - wifi: cfg80211: fix memory leak in query_regdb_file() - soundwire: qcom: reinit broadcast completion - soundwire: qcom: check for outanding writes before doing a read - bpf, verifier: Fix memory leak in array reallocation for stack state - bpf, sockmap: Fix the sk->sk_forward_alloc warning of sk_stream_kill_queues - wifi: mac80211: fix general-protection-fault in ieee80211_subif_start_xmit() - wifi: mac80211: Set TWT Information Frame Disabled bit as 1 - bpftool: Fix NULL pointer dereference when pin {PROG, MAP, LINK} without FILE - [x86,arm64] HID: hyperv: fix possible memory leak in mousevsc_probe() - [arm*] drm/vc4: hdmi: Fix HSM clock too low on Pi4 - bpf, sock_map: Move cancel_work_sync() out of sock lock - [amd64,arm64] PCI: hv: Fix the definition of vector in hv_compose_msi_msg() - bpf: Add helper macro bpf_for_each_reg_in_vstate - bpf: Fix wrong reg type conversion in release_reference() - net: gso: fix panic on frag_list with mixed head alloc types - macsec: delete new rxsc when offload fails - macsec: fix secy->n_rx_sc accounting - macsec: fix detection of RXSCs when toggling offloading - macsec: clear encryption keys from the stack after setting up offload - net: tun: Fix memory leaks of napi_get_frags - bnxt_en: Fix possible crash in bnxt_hwrm_set_coal() - bnxt_en: fix potentially incorrect return value for ndo_rx_flow_steer - capabilities: fix undefined behavior in bit shift for CAP_TO_MASK - [s390x] KVM: s390: pv: don't allow userspace to set the clock under PV - [s390x] KVM: s390: pci: Fix allocation size of aift kzdev elements - hamradio: fix issue of dev reference count leakage in bpq_device_event() - [amd64] net: wwan: iosm: fix memory leak in ipc_wwan_dellink - net: wwan: mhi: fix memory leak in mhi_mbim_dellink - [arm*] drm/vc4: Fix missing platform_unregister_drivers() call in vc4_drm_register() - tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent - [x86] platform/x86: p2sb: Don't fail if unknown CPU is found - ipv6: addrlabel: fix infoleak when sending struct ifaddrlblmsg to network - can: af_can: fix NULL pointer dereference in can_rx_register() - [x86] drm/i915/psr: Send update also on invalidate - [x86] drm/i915: Do not set cache_dirty for DGFX - [arm64,armhf] net: stmmac: dwmac-meson8b: fix meson8b_devm_clk_prepare_enable() - tipc: fix the msg->req tlv len check in tipc_nl_compat_name_table_dump_header - [amd64] dmanegine: idxd: reformat opcap output to match bitmap_parse() input - [amd64] dmaengine: idxd: Fix max batch size for Intel IAA - [amd64] dmaengine: idxd: fix RO device state error after been disabled/reset - [arm64] dmaengine: mv_xor_v2: Fix a resource leak in mv_xor_v2_remove() - [armhf] dmaengine: stm32-dma: fix potential race between pause and resume - [arm64] drivers: net: xgene: disable napi when register irq failed in xgene_enet_open() - netfilter: nfnetlink: fix potential dead lock in nfnetlink_rcv_msg() - netfilter: Cleanup nft_net->module_list from nf_tables_exit_net() - net: tun: call napi_schedule_prep() to ensure we own a napi - [amd64] net: wwan: iosm: fix memory leak in ipc_pcie_read_bios_cfg - [amd64] net: wwan: iosm: fix invalid mux header type - net/mlx5: Bridge, verify LAG state when adding bond to bridge - net/mlx5: Allow async trigger completion execution on single CPU systems - net/mlx5: E-switch, Set to legacy mode if failed to change switchdev mode - net/mlx5: fw_reset: Don't try to load device in case PCI isn't working - net/mlx5e: Add missing sanity checks for max TX WQE size - net/mlx5e: Fix tc acts array not to be dependent on enum order - net/mlx5e: TC, Fix wrong rejection of packet-per-second policing - net/mlx5e: E-Switch, Fix comparing termination table instance - ice: Fix spurious interrupt during removal of trusted VF - iavf: Fix VF driver counting VLAN 0 filters - [armhf] net: cpsw: disable napi in cpsw_ndo_open() - net: cxgb3_main: disable napi when bind qsets failed in cxgb_up() - [x86] stmmac: intel: Update PCH PTP clock rate from 200MHz to 204.8MHz - mctp: Fix an error handling path in mctp_init() - cxgb4vf: shut down the adapter when t4vf_update_port_info() failed in cxgb4vf_open() - net: phy: mscc: macsec: clear encryption keys when freeing a flow - net: atlantic: macsec: clear encryption keys from the stack - ethernet: s2io: disable napi when start nic failed in s2io_card_up() - [armel,armhf] net: mv643xx_eth: disable napi when init rxq or txq failed in mv643xx_eth_open() - ALSA: memalloc: Don't fall back for SG-buffer with IOMMU - net: macvlan: fix memory leaks of macvlan_common_newlink - [riscv64] process: fix kernel info leakage - [riscv64] vdso: fix build with llvm - [riscv64] fix reserved memory setup - [arm64] efi: Fix handling of misaligned runtime regions and drop warning - [mips*] jump_label: Fix compat branch range check - drm/amdgpu: Fix the lpfn checking condition in drm buddy - [arm64] mmc: sdhci-of-arasan: Fix SDHCI_RESET_ALL for CQHCI - [arm64,armhf] mmc: sdhci-tegra: Fix SDHCI_RESET_ALL for CQHCI - [arm64,armhf] mmc: sdhci-esdhc-imx: use the correct host caps for MMC_CAP_8_BIT_DATA - ALSA: hda/hdmi - enable runtime pm for more AMD display audio - ALSA: hda/ca0132: add quirk for EVGA Z390 DARK - ALSA: hda: fix potential memleak in 'add_widget_node' - ALSA: hda/realtek: Add quirk for ASUS Zenbook using CS35L41 - ALSA: hda/realtek: Add Positivo C6300 model quirk - ALSA: usb-audio: Yet more regression for for the delayed card registration - ALSA: usb-audio: Add quirk entry for M-Audio Micro - ALSA: usb-audio: Add DSD support for Accuphase DAC-60 - vmlinux.lds.h: Fix placement of '.data..decrypted' section - ata: libata-scsi: fix SYNCHRONIZE CACHE (16) command failure - nilfs2: fix deadlock in nilfs_count_free_blocks() - nilfs2: fix use-after-free bug of ns_writer on remount - [x86] drm/i915/dmabuf: fix sg_table handling in map_dma_buf - drm/amd/display: Fix reg timeout in enc314_enable_fifo - drm/amd/pm: update SMU IP v13.0.4 msg interface header - drm/amd/display: Update SR watermarks for DCN314 - drm/amdgpu: workaround for TLB seq race - drm/amdgpu: disable BACO on special BEIGE_GOBY card - [x86] platform/x86: hp_wmi: Fix rfkill causing soft blocked wifi - btrfs: fix match incorrectly in dev_args_match_device - btrfs: zoned: clone zoned device info when cloning a device - btrfs: zoned: initialize device's zone info for seeding - io_uring: check for rollover of buffer ID when providing buffers - [arm64] phy: qcom-qmp-combo: fix NULL-deref on runtime resume - [arm64,armhf] mms: sdhci-esdhc-imx: Fix SDHCI_RESET_ALL for CQHCI - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() - [x86] arch/x86/mm/hugetlbpage.c: pud_huge() returns 0 when using 2-level paging (Closes: #1023025) - [amd64,arm64] mm: hugetlb_vmemmap: include missing linux/moduleparam.h - dmaengine: idxd: Do not enable user type Work Queue without Shared Virtual Addressing - [amd64] mm/memremap.c: map FS_DAX device memory as decrypted - mm/shmem: use page_mapping() to detect page cache for uffd continue - can: j1939: j1939_send_one(): fix missing CAN header initialization - can: isotp: fix tx state handling for echo tx processing - [x86] KVM: x86/mmu: Block all page faults during kvm_zap_gfn_range() - [x86] KVM: x86/pmu: Do not speculatively query Intel GP PMCs that don't exist yet - [x86] KVM: x86: use a separate asm-offsets.c file - [x86] KVM: SVM: replace regs argument of __svm_vcpu_run() with vcpu_svm - [x86] KVM: SVM: adjust register allocation for __svm_vcpu_run() - [x86] KVM: SVM: Only dump VMSA to klog at KERN_DEBUG level - [x86] KVM: SVM: retrieve VMCB from assembly - [x86] KVM: SVM: move guest vmsave/vmload back to assembly - can: dev: fix skb drop check - ALSA: memalloc: Try dma_alloc_noncontiguous() at first - [x86] cpu: Restore AMD's DE_CFG MSR after resume https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.0.10 - [arm64] drm/msm/gpu: Fix crash during system suspend after unbind - [x86] ASoC: rt5682s: Fix the TDM Tx settings - [x86] ASoC: Intel: sof_sdw: add quirk variant for LAPBC710 NUC15 - [x86] ASoC: Intel: sof_rt5682: Add quirk for Rex board - [x86] ASoC: amd: yc: Adding Lenovo ThinkBook 14 Gen 4+ ARA and Lenovo ThinkBook 16 Gen 4+ ARA to the Quirks List - [x86] ASoC: amd: yc: Add Lenovo Thinkbook 14+ 2022 21D0 to quirks table - drm/amdgpu: Adjust MES polling timeout for sriov - [x86] platform/x86: thinkpad_acpi: Fix reporting a non present second fan on some models - [x86] platform/x86/intel: pmc/core: Add Raptor Lake support to pmc core driver - drm/amd/display: Remove wrong pipe control lock - drm/amd/display: Don't return false if no stream - drm/scheduler: fix fence ref counting - ACPI: scan: Add LATT2021 to acpi_ignore_dep_ids[] - btrfs: raid56: properly handle the error when unable to find the missing stripe - NFSv4: Retry LOCK on OLD_STATEID during delegation return - SUNRPC: Fix crasher in gss_unwrap_resp_integ() - [x86] ACPI: x86: Add another system to quirk list for forcing StorageD3Enable - block: blk_add_rq_to_plug(): clear stale 'last' after flush - [arm64,armhf] i2c: tegra: Allocate DMA memory for DMA engine - [x86] i2c: i801: add lis3lv02d's I2C address for Vostro 5568 - btrfs: remove pointless and double ulist frees in error paths of qgroup tests - drm/amd/display: Ignore Cable ID Feature - drm/amd/display: Enable timing sync on DCN32 - drm/amdgpu: set fb_modifiers_not_supported in vkms - drm/amd: Fail the suspend if resources can't be evicted - drm/amd/display: Fix DCN32 DSC delay calculation - drm/amd/display: Use forced DSC bpp in DML - drm/amd/display: Round up DST_after_scaler to nearest int - drm/amd/display: Investigate tool reported FCLK P-state deviations - Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm - [x86] cpu: Add several Intel server CPU model numbers - cifs: always iterate smb sessions using primary channel - [arm64] mm: fold check for KFENCE into can_set_direct_map() - [arm64] fix rodata=full again - hugetlb: rename remove_huge_page to hugetlb_delete_from_page_cache - hugetlbfs: don't delete error page from pagecache - [x86] KVM: SVM: remove dead field from struct svm_cpu_data - [x86] KVM: SVM: do not allocate struct svm_cpu_data dynamically - [x86] KVM: SVM: restore host save area from assembly - [x86] KVM: SVM: move MSR_IA32_SPEC_CTRL save/restore to assembly - [arm64] dts: qcom: sa8155p-adp: Specify which LDO modes are allowed - [arm64] dts: qcom: sa8295p-adp: Specify which LDO modes are allowed - [arm64] dts: qcom: sc8280xp-crd: Specify which LDO modes are allowed - [arm64] dts: qcom: sm8350-hdk: Specify which LDO modes are allowed - [armhf] spi: stm32: Print summary 'callbacks suppressed' message - ASoC: core: Fix use-after-free in snd_soc_exit() - [arm64] ASoC: fsl_asrc fsl_esai fsl_sai: allow CONFIG_PM=N - [arm64] tty: serial: fsl_lpuart: don't break the on-going transfer when global reset - [arm64,armhf] serial: imx: Add missing .thaw_noirq hook - tty: n_gsm: fix sleep-in-atomic-context bug in gsm_control_send - ASoC: rt5514: fix legacy dai naming - ASoC: rt5677: fix legacy dai naming - bpf, test_run: Fix alignment problem in bpf_prog_test_run_skb() - bnxt_en: refactor bnxt_cancel_reservations() - bnxt_en: fix the handling of PCIE-AER - ASoC: soc-utils: Remove __exit for snd_soc_util_exit() - [arm64,armhf] pinctrl: rockchip: list all pins in a possible mux route for PX30 - scsi: scsi_transport_sas: Fix error handling in sas_phy_add() - sctp: remove the unnecessary sinfo_stream check in sctp_prsctp_prune_unsent - sctp: clear out_curr if all frag chunks of current msg are pruned - erofs: clean up .read_folio() and .readahead() in fscache mode - erofs: get correct count for unmapped range in fscache mode - block: sed-opal: kmalloc the cmd/resp buffers - nfsd: put the export reference in nfsd4_verify_deleg_dentry - bpf: Fix memory leaks in __check_func_call - io_uring: calculate CQEs from the user visible value - nvmet: fix a memory leak - parport_pc: Avoid FIFO port location truncation - pinctrl: devicetree: fix null pointer dereferencing in pinctrl_dt_to_map - [arm*] drm/vc4: kms: Fix IS_ERR() vs NULL check for vc4_kms - [arm64,armhf] drm/panel: simple: set bpc field for logic technologies displays - drm/drv: Fix potential memory leak in drm_dev_init() - [arm64] dts: imx8mm-tqma8mqml-mba8mx: Fix USB DR - erofs: put metabuf in error path in fscache mode - ata: libata-transport: fix double ata_host_put() in ata_tport_add() - ata: libata-transport: fix error handling in ata_tport_add() - ata: libata-transport: fix error handling in ata_tlink_add() - ata: libata-transport: fix error handling in ata_tdev_add() - nfp: change eeprom length to max length enumerators - [mips*] fix duplicate definitions for exported symbols - io_uring/poll: fix double poll req->flags races - cifs: Fix connections leak when tlink setup failed - bpf: Initialize same number of free nodes for each pcpu_freelist - ata: libata-core: do not issue non-internal commands once EH is pending - mISDN: fix possible memory leak in mISDN_dsp_element_register() - net: hinic: Fix error handling in hinic_module_init() - net: phy: dp83867: Fix SGMII FIFO depth for non OF devices - net: stmmac: ensure tx function is not running in stmmac_xdp_release() - [arm64] soc: imx8m: Enable OCOTP clock before reading the register - net: liquidio: release resources when liquidio driver open failed - mISDN: fix misuse of put_device() in mISDN_register_device() - net: macvlan: Use built-in RCU list checking - bnxt_en: Remove debugfs when pci_register_driver failed - [arm64,armhf] drm/lima: Fix opp clkname setting in case of missing regulator - net: mhi: Fix memory leak in mhi_net_dellink() - [arm64,armhf] net: dsa: make dsa_master_ioctl() see through port_hwtstamp_get() shims - xen/pcpu: fix possible memory leak in register_pcpu() - erofs: fix missing xas_retry() in fscache mode - mlxsw: Avoid warnings when not offloaded FDB entry with IPv6 is removed - net: ena: Fix error handling in ena_init() - [arm64] net: hns3: fix incorrect hw rss hash type of rx packet - [arm64] net: hns3: fix return value check bug of rx copybreak - [arm64] net: hns3: fix setting incorrect phy link ksettings for firmware in resetting process - bridge: switchdev: Fix memory leaks when changing VLAN protocol - drbd: use after free in drbd_create_device() - [x86] platform/x86/intel: pmc: Don't unconditionally attach Intel PMC when virtualized - [x86] platform/surface: aggregator: Do not check for repeated unsequenced packets - netfs: Fix missing xas_retry() calls in xarray iteration - netfs: Fix dodgy maths - cifs: add check for returning value of SMB2_close_init - [arm64,armhf] net: dsa: don't leak tagger-owned storage on switch driver unbind - cifs: Fix wrong return value checking when GETFLAGS - [x86] net: thunderbolt: Fix error handling in tbnet_init() - cifs: add check for returning value of SMB2_set_info_init - block: make dma_alignment a stacking queue_limit - dm-crypt: provide dma_alignment limit in io_hints - ftrace: Fix the possible incorrect kernel message - ftrace: Optimize the allocation for mcount entries - ftrace: Fix null pointer dereference in ftrace_add_mod() - ring_buffer: Do not deactivate non-existant pages - tracing: Fix memory leak in tracing_read_pipe() - tracing/ring-buffer: Have polling block on watermark - tracing: Fix memory leak in test_gen_synth_cmd() and test_empty_synth_event() - tracing: Fix wild-memory-access in register_synth_event() - tracing: Fix race where eprobes can be called before the event - tracing: kprobe: Fix potential null-ptr-deref on trace_event_file in kprobe_event_gen_test_exit() - tracing: kprobe: Fix potential null-ptr-deref on trace_array in kprobe_event_gen_test_exit() - [x86] rethook: fix a potential memleak in rethook_alloc() - [amd64] platform/x86/amd: pmc: Remove more CONFIG_DEBUG_FS checks - [amd64] platform/x86/amd: pmc: Add new ACPI ID AMDI0009 - drm/amd/pm: enable runpm support over BACO for SMU13.0.7 - drm/amd/pm: enable runpm support over BACO for SMU13.0.0 - drm/amd/pm: fix SMU13 runpm hang due to unintentional workaround - drm/display: Don't assume dual mode adaptors support i2c sub-addressing - drm/amd/display: Fix invalid DPIA AUX reply causing system hang - drm/amd/display: Add HUBP surface flip interrupt handler - drm/amd/display: Fix access timeout to DPIA AUX at boot time - drm/amd/display: Support parsing VRAM info v3.0 from VBIOS - drm/amd/display: Fix optc2_configure warning on dcn314 - drm/amd/display: don't enable DRM CRTC degamma property for DCE - drm/amd/display: Fix prefetch calculations for dcn32 - ALSA: usb-audio: Drop snd_BUG_ON() from snd_usbmidi_output_open() - ALSA: hda/realtek: fix speakers for Samsung Galaxy Book Pro - ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy Book Pro 360 - [arm64,armhf] Revert "usb: dwc3: disable USB core PHY management" - [arm64,armhf] usb: dwc3: Do not get extcon device when usb-role-switch is used - io_uring: update res mask in io_poll_check_events - nvme-pci: add NVME_QUIRK_BOGUS_NID for Micron Nitro - nvme-pci: add NVME_QUIRK_BOGUS_NID for Netac NV7000 - slimbus: stream: correct presence rate frequencies - speakup: fix a segfault caused by switching consoles - USB: serial: option: add Sierra Wireless EM9191 - USB: serial: option: remove old LARA-R6 PID - USB: serial: option: add u-blox LARA-R6 00B modem - USB: serial: option: add u-blox LARA-L6 modem - USB: serial: option: add Fibocom FM160 0x0111 composition - usb: add NO_LPM quirk for Realforce 87U Keyboard - [x86] usb: typec: tipd: Prevent uninitialized event{1,2} in IRQ handler - iio: accel: bma400: Ensure VDDIO is enable defore reading the chip ID. - iio: pressure: ms5611: fixed value compensation bug - iio: pressure: ms5611: changed hardcoded SPI speed to value limited - dm bufio: Fix missing decrement of no_sleep_enabled if dm_bufio_client_create failed - dm ioctl: fix misbehavior if list_versions races with module loading - serial: 8250: Fall back to non-DMA Rx if IIR_RDI occurs - serial: 8250: Flush DMA Rx on RLSI - [x86] serial: 8250_lpss: Configure DMA also w/o DMA filter - [x86] serial: 8250_lpss: Use 16B DMA burst with Elkhart Lake - io_uring: fix tw losing poll events - io_uring: fix multishot accept request leaks - io_uring: fix multishot recv request leaks - io_uring: disallow self-propelled ring polling - ceph: avoid putting the realm twice when decoding snaps fails - Input: iforce - invert valid length check when fetching device IDs - maccess: Fix writing offset in case of fault in strncpy_from_kernel_nofault() - net: phy: marvell: add sleep time after enabling the loopback bit - [s390x] scsi: zfcp: Fix double free of FSF request when qdio send fails - [amd64] iommu/vt-d: Preset Access bit for IOVA in FL non-leaf paging entries - [amd64] iommu/vt-d: Set SRE bit only when hardware has SRS cap - firmware: coreboot: Register bus in module init - mmc: core: properly select voltage range without power cycle - mmc: sdhci-pci-o2micro: fix card detect fail issue caused by CD# debounce timeout - mmc: sdhci-pci: Fix possible memory leak caused by missing pci_dev_put() - docs: update mediator contact information in CoC doc - [s390x] dcssblk: fix deadlock when adding a DCSS - [x86] misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() - blk-cgroup: properly pin the parent in blkcg_css_online - [amd64] x86/sgx: Add overflow check in sgx_validate_offset_length() - [x86] fpu: Drop fpregs lock before inheriting FPU permissions - [x86] perf/x86/amd/uncore: Fix memory leak for events array - [x86] perf/x86/intel/pt: Fix sampling using single range output - nvme: restrict management ioctls to admin - nvme: ensure subsystem reset is single threaded (CVE-2022-3169) - [x86] ASoC: SOF: topology: No need to assign core ID if token parsing failed - perf: Improve missing SIGTRAP checking - vfio: Rename vfio_ioctl_check_extension() - vfio: Split the register_device ops call into functions - [x86] perf/x86/amd: Fix crash due to race between amd_pmu_enable_all, perf NMI and throttling - ring-buffer: Include dropped pages in counting dirty patches - tracing: Fix warning on variable 'struct trace_array' - net: usb: smsc95xx: fix external PHY reset - net: use struct_group to copy ip/ipv6 header addresses - scsi: target: tcm_loop: Fix possible name leak in tcm_loop_setup_hba_bus() - scsi: scsi_debug: Fix possible UAF in sdebug_add_host_helper() - kprobes: Skip clearing aggrprobe's post_handler in kprobe-on-ftrace case - tracing: Fix potential null-pointer-access of entry in list 'tr->err_log' - [arm64] mm: fix incorrect file_map_count for non-leaf pmd/pud - Input: i8042 - fix leaking of platform device on module removal - macvlan: enforce a consistent minimal mtu - tcp: cdg: allow tcp_cdg_release() to be called multiple times - kcm: avoid potential race in kcm_tx_work (CVE-2022-3521) - [x86] KVM: x86/xen: Fix eventfd error handling in kvm_xen_eventfd_assign() - 9p: trans_fd/p9_conn_cancel: drop client lock earlier - gfs2: Check sb_bsize_shift after reading superblock - gfs2: Switch from strlcpy to strscpy - 9p/trans_fd: always use O_NONBLOCK read/write - netlink: Bounds-check struct nlmsgerr creation - wifi: wext: use flex array destination for memcpy() - rseq: Use pr_warn_once() when deprecated/unknown ABI flags are encountered - mm: fs: initialize fsdata passed to write_begin/write_end interface - net/9p: use a dedicated spinlock for trans_fd - bpf: Prevent bpf program recursion for raw tracepoint probes - ntfs: fix use-after-free in ntfs_attr_find() - ntfs: fix out-of-bounds read in ntfs_attr_find() - ntfs: check overflow when iterating ATTR_RECORDs . [ Santiago Ruano Rincón ] * net/cdc_ncm: Fix multicast RX support for CDC NCM devices with ZLP (Closes: #1024328) . [ Salvatore Bonaccorso ] * Bump ABI to 5 * net: neigh: decrement the family specific qlen (Closes: #1024070) . linux (6.0.8-1) unstable; urgency=medium . * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.0.8 - [arm64,armhf] usb: dwc3: gadget: Force sending delayed status during soft disconnect - [arm64,armhf] usb: dwc3: gadget: Don't delay End Transfer on delayed_status - RDMA/cma: Use output interface for net_dev check - [amd64] IB/hfi1: Correctly move list in sc_disable() - [arm64] RDMA/hns: Disable local invalidate operation - [arm64] RDMA/hns: Fix NULL pointer problem in free_mr_init() - RDMA/rxe: Fix mr leak in RESPST_ERR_RNR - NFSv4: Fix a potential state reclaim deadlock - NFSv4.1: Handle RECLAIM_COMPLETE trunking errors - NFSv4.1: We must always send RECLAIM_COMPLETE after a reboot - SUNRPC: Fix null-ptr-deref when xps sysfs alloc failed - NFSv4.2: Fixup CLONE dest file size for zero-length count - nfs4: Fix kmemleak when allocate slot failed - RDMA/core: Fix null-ptr-deref in ib_core_cleanup() - RDMA/qedr: clean up work queue on failure in qedr_alloc_resources() - [arm64,armhf] net: dsa: fall back to default tagger if we can't load the one from DT - nfc: nxp-nci: Fix potential memory leak in nxp_nci_send() - [arm64,armhf] net: fec: fix improper use of NETDEV_TX_BUSY - [amd64,i386] ata: pata_legacy: fix pdc20230_set_piomode() - net: sched: Fix use after free in red_enqueue() - net: tun: fix bugs for oversize packet when napi frags enabled - netfilter: nf_tables: netlink notifier might race to release objects - netfilter: nf_tables: release flow rule object from commit path - sfc: Fix an error handling path in efx_pci_probe() - nfsd: fix nfsd_file_unhash_and_dispose - nfsd: fix net-namespace logic in __nfsd_file_cache_purge - ipvs: use explicitly signed chars - ipvs: fix WARNING in __ip_vs_cleanup_batch() - ipvs: fix WARNING in ip_vs_app_net_cleanup() - rose: Fix NULL pointer dereference in rose_send_frame() - mISDN: fix possible memory leak in mISDN_register_device() - btrfs: fix inode list leak during backref walking at resolve_indirect_refs() - btrfs: fix inode list leak during backref walking at find_parent_nodes() - btrfs: fix ulist leaks in error paths of qgroup self tests - netfilter: ipset: enforce documented limit to prevent allocating huge memory - Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu - Bluetooth: hci_conn: Fix CIS connection dst_type handling - Bluetooth: virtio_bt: Use skb_put to set length - Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del() - Bluetooth: L2CAP: Fix memory leak in vhci_write - Bluetooth: hci_conn: Fix not restoring ISO buffer count on disconnect - net: mdio: fix undefined behavior in bit shift for __mdiobus_register - net/smc: Fix possible leaked pernet namespace in smc_init() - net, neigh: Fix null-ptr-deref in neigh_table_clear() - bridge: Fix flushing of dynamic FDB entries - ipv6: fix WARNING in ip6_route_net_exit_late() - vsock: fix possible infinite sleep in vsock_connectible_wait_data() - [arm64] media: rkisp1: Fix source pad format configuration - [arm64] media: rkisp1: Don't pass the quantization to rkisp1_csm_config() - [arm64] media: rkisp1: Initialize color space on resizer sink and source pads - [arm64] media: rkisp1: Use correct macro for gradient registers - [arm64] media: rkisp1: Zero v4l2_subdev_format fields in when validating links - media: dvb-frontends/drxk: initialize err to 0 - [arm64] media: meson: vdec: fix possible refcount leak in vdec_probe() - [arm64,armhf] media: hantro: Store HEVC bit depth in context - [arm64,armhf] media: hantro: HEVC: Fix auxilary buffer size calculation - [arm64,armhf] media: hantro: HEVC: Fix chroma offset computation - [arm*] drm/vc4: hdmi: Check the HSM rate at runtime_resume - ACPI: APEI: Fix integer overflow in ghes_estatus_pool_init() - [arm*] hwrng: bcm2835 - use hwrng_msleep() instead of cpu_relax() - io_uring: don't iopoll from io_ring_ctx_wait_and_kill() - scsi: core: Restrict legal sdev_state transitions via sysfs - HID: saitek: add madcatz variant of MMO7 mouse device ID - drm/amdgpu: set vm_update_mode=0 as default for Sienna Cichlid in SRIOV case - drm/amd/pm: skip loading pptable from driver on secure board for smu_v13_0_10 - drm/amdgpu: Program GC registers through RLCG interface in gfx_v11/gmc_v11 - drm/amdgpu: dequeue mes scheduler during fini - nvme-pci: disable write zeroes on various Kingston SSD - bio: safeguard REQ_ALLOC_CACHE bio put - [arm64] dts: imx8mm: Enable CPLD_Dn pull down resistor on MX8Menlo - efi/tpm: Pass correct address to memblock_reserve - [arm64,armhf] drm/rockchip: dw_hdmi: filter regulator -EPROBE_DEFER error messages - [arm64,armhf] drm/rockchip: fix fbdev on non-IOMMU devices - [x86] drm/i915: stop abusing swiotlb_max_segment - block: Fix possible memory leak for rq_wb on add_disk failure - blk-mq: Fix kmemleak in blk_mq_init_allocated_queue - i2c: piix4: Fix adapter not be removed in piix4_remove() - fscrypt: stop using keyrings subsystem for fscrypt_master_key - fscrypt: fix keyring memory leak on mount failure - btrfs: fix lost file sync on direct IO write with nowait and dsync iocb - btrfs: fix tree mod log mishandling of reallocated nodes - btrfs: fix type of parameter generation in btrfs_get_dentry - btrfs: don't use btrfs_chunk::sub_stripes from disk - btrfs: fix a memory allocation failure test in btrfs_submit_direct - [amd64,arm64] ACPI: NUMA: Add CXL CFMWS 'nodes' to the possible nodes set - ftrace: Fix use-after-free for dynamic ftrace_ops - tracing/fprobe: Fix to check whether fprobe is registered correctly - fprobe: Check rethook_alloc() return in rethook initialization - tracing: kprobe: Fix memory leak in test_gen_kprobe/kretprobe_cmd() - kprobe: reverse kp->flags when arm_kprobe failed - ring-buffer: Check for NULL cpu_buffer in ring_buffer_wake_waiters() (Closes: #1023726) - tracing/histogram: Update document for KEYS_MAX size - capabilities: fix potential memleak on error path from vfs_getxattr_alloc() - fuse: add file_modified() to fallocate - fuse: fix readdir cache race - efi: random: reduce seed size to 32 bytes - efi: random: Use 'ACPI reclaim' memory for random seed - efi: efivars: Fix variable writes with unsupported query_variable_store() (Closes: #1022900) - net/ulp: remove SOCK_SUPPORT_ZC from tls sockets - [arm64] entry: avoid kprobe recursion - [armhf] dts: imx6dl-yapp4: Do not allow PM to switch PU regulator off on Q/QP - [x86] perf/x86/intel: Fix pebs event constraints for ICL - [x86] perf/x86/intel: Add Cooper Lake stepping to isolation_ucodes[] - [x86] perf/x86/intel: Fix pebs event constraints for SPR - net: remove SOCK_SUPPORT_ZC from sockmap - net: also flag accepted sockets supporting msghdr originated zerocopy - ext4: fix warning in 'ext4_da_release_space' - ext4: fix BUG_ON() when directory entry has invalid rec_len - ext4: update the backup superblock's at the end of the online resize (Closes: #1023450) - [x86] syscall: Include asm/ptrace.h in syscall_wrapper header - [x86] KVM: x86: Mask off reserved bits in CPUID.80000006H - [x86] KVM: x86: Mask off reserved bits in CPUID.8000001AH - [x86] KVM: x86: Mask off reserved bits in CPUID.80000008H - [x86] KVM: x86: Mask off reserved bits in CPUID.80000001H - [x86] KVM: x86: Mask off reserved bits in CPUID.8000001FH - [x86] KVM: VMX: Advertise PMU LBRs if and only if perf supports LBRs - [x86] KVM: VMX: Fold vmx_supported_debugctl() into vcpu_supported_debugctl() - [x86] KVM: VMX: Ignore guest CPUID for host userspace writes to DEBUGCTL - [x86] KVM: VMX: fully disable SGX if SECONDARY_EXEC_ENCLS_EXITING unavailable - [x86] KVM: Initialize gfn_to_pfn_cache locks in dedicated helper - [x86] KVM: Reject attempts to consume or refresh inactive gfn_to_pfn_cache - [arm64] KVM: arm64: Fix SMPRI_EL1/TPIDR2_EL0 trapping on VHE - [x86] KVM: x86: smm: number of GPRs in the SMRAM image depends on the image format - [x86] KVM: x86: emulator: em_sysexit should update ctxt->mode - [x86] KVM: x86: emulator: introduce emulator_recalc_and_set_mode - [x86] KVM: x86: emulator: update the emulation mode after rsm - [x86] KVM: x86: emulator: update the emulation mode after CR0 write - ext4,f2fs: fix readahead of verity data - cifs: fix regression in very old smb1 mounts - [arm64,armhf] drm/rockchip: dsi: Clean up 'usage_mode' when failing to attach - [arm64,armhf] drm/rockchip: dsi: Force synchronous probe - drm/amdgpu: disable GFXOFF during compute for GFX11 - drm/amd/display: Update latencies on DCN321 - drm/amd/display: Update DSC capabilitie for DCN314 - [x86] drm/i915/sdvo: Filter out invalid outputs more sensibly - [x86] drm/i915/sdvo: Setup DDC fully before output init - wifi: brcmfmac: Fix potential buffer overflow in brcmf_fweh_event_worker() (CVE-2022-3628) . [ Vincent Blut ] * [x86] drivers/platform/x86: Enable GIGABYTE_WMI as module (Closes: #1023613) . [ Salvatore Bonaccorso ] * Bump ABI to 4 . linux (6.0.7-1) unstable; urgency=medium . * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.0.7 - can: j1939: transport: j1939_session_skb_drop_old(): spin_unlock_irqrestore() before kfree_skb() - can: kvaser_usb: Fix possible completions during init_completion - ALSA: Use del_timer_sync() before freeing timer - ALSA: hda/realtek: Add quirk for ASUS Zenbook using CS35L41 - ALSA: usb-audio: Add quirks for M-Audio Fast Track C400/600 - ALSA: hda/realtek: Add another HP ZBook G9 model quirks - ALSA: control: add snd_ctl_rename() - ALSA: hda/realtek: Use snd_ctl_rename() to rename a control - ALSA: emu10k1: Use snd_ctl_rename() to rename a control - ALSA: ac97: Use snd_ctl_rename() to rename a control - ALSA: usb-audio: Use snd_ctl_rename() to rename a control - ALSA: ca0106: Use snd_ctl_rename() to rename a control - ALSA: au88x0: use explicitly signed char - ALSA: rme9652: use explicitly signed char - USB: add RESET_RESUME quirk for NVIDIA Jetson devices in RCM - usb: gadget: uvc: limit isoc_sg to super speed gadgets - Revert "usb: gadget: uvc: limit isoc_sg to super speed gadgets" - usb: gadget: uvc: fix dropped frame after missed isoc - usb: gadget: uvc: fix sg handling in error case - usb: gadget: uvc: fix sg handling during video encode - [armhf] usb: gadget: aspeed: Fix probe regression - [arm64,armhf] usb: dwc3: gadget: Stop processing more requests on IMI - [arm64,armhf] usb: dwc3: gadget: Don't set IMI for no_interrupt - [arm64,armhf] usb: dwc3: gadget: Force sending delayed status during soft disconnect - [arm64,armhf] usb: dwc3: gadget: Don't delay End Transfer on delayed_status - usb: typec: ucsi: Check the connection on resume - usb: typec: ucsi: acpi: Implement resume callback - [arm64,armhf] usb: dwc3: st: Rely on child's compatible instead of name - [arm64,armhf] usb: dwc3: Don't switch OTG -> peripheral if extcon is present - usb: xhci: add XHCI_SPURIOUS_SUCCESS to ASM1042 despite being a V0.96 controller - squashfs: fix read regression introduced in readahead code (Closes: #1023167) - squashfs: fix extending readahead beyond end of file - squashfs: fix buffer release race condition in readahead code - xhci: Add quirk to reset host back to default state at shutdown - xhci-pci: Set runtime PM as default policy on all xHC 1.2 or later devices - xhci: Remove device endpoints from bandwidth list when freeing the device - iio: light: tsl2583: Fix module unloading - iio: temperature: ltc2983: allocate iio channels once - iio: adxl372: Fix unsafe buffer attributes - fbdev: smscufx: Fix several use-after-free bugs - [x86] cpufreq: intel_pstate: Read all MSRs on the target CPU - [x86] cpufreq: intel_pstate: hybrid: Use known scaling factor for P-cores - fs/binfmt_elf: Fix memory leak in load_elf_binary() - exec: Copy oldsighand->action under spin-lock - mac802154: Fix LQI recording - scsi: qla2xxx: Use transport-defined speed mask for supported_speeds - drm/amdgpu: Fix VRAM BO swap issue - drm/amdgpu: Fix for BO move issue - [x86] drm/i915: Extend Wa_1607297627 to Alderlake-P - drm/amdgpu: Remove ATC L2 access for MMHUB 2.1.x - drm/amdgpu: disallow gfxoff until GC IP blocks complete s2idle resume - drm/amdgpu: fix pstate setting issue - drm/amd/display: Revert logic for plane modifiers - [arm64] drm/msm: fix use-after-free on probe deferral - [arm64] drm/msm/dsi: fix memory corruption with too many bridges - [arm64] drm/msm/hdmi: fix memory corruption with too many bridges - [arm64] drm/msm/hdmi: fix IRQ lifetime - [arm64] drm/msm/dp: fix memory corruption with too many bridges - [arm64] drm/msm/dp: fix aux-bus EP lifetime - [arm64] drm/msm/dp: fix IRQ lifetime - [arm64] drm/msm/dp: fix bridge lifetime - random: use arch_get_random*_early() in random_init() - mmc: block: Remove error check of hw_reset on reset - mmc: queue: Cancel recovery work on cleanup - mmc: core: Fix kernel panic when remove non-standard SDIO card - mmc: core: Fix WRITE_ZEROES CQE handling - mmc: sdhci-pci-core: Disable ES for ASUS BIOS on Jasper Lake - [arm64,armhf] mmc: sdhci-esdhc-imx: Propagate ESDHC_FLAG_HS400* only on 8bit bus - mm: migrate: fix return value if all subpages of THPs are migrated successfully - mm,madvise,hugetlb: fix unexpected data loss with MADV_DONTNEED on hugetlbfs - mm/huge_memory: do not clobber swp_entry_t during THP split - mm: prep_compound_tail() clear page->private - kernfs: fix use-after-free in __kernfs_remove - Revert "dt-bindings: pinctrl-zynqmp: Add output-enable configuration" - pinctrl: Ingenic: JZ4755 bug fixes - [s390x] boot: add secure boot trailer - [s390x] cio: fix out-of-bounds access on cio_ignore free - [s390x] uaccess: add missing EX_TABLE entries to __clear_user() - [s390x] futex: add missing EX_TABLE entry to __futex_atomic_op() - [s390x] pci: add missing EX_TABLE entries to __pcistg_mio_inuser()/__pcilg_mio_inuser() - ethtool: eeprom: fix null-deref on genl_info in dump - fbdev/core: Avoid uninitialized read in aperture_remove_conflicting_pci_device() - [amd64,arm64] ACPI: PCC: Fix unintentional integer overflow - net: ieee802154: fix error return code in dgram_bind() - media: v4l2: Fix v4l2_i2c_subdev_set_name function documentation - [arm64] drm/msm/a6xx: Replace kcalloc() with kvzalloc() - [arm64] drm/msm/dp: add atomic_check to bridge ops - [arm64] drm/msm: Fix return type of mdp4_lvds_connector_mode_valid - [arm64] drm/msm/dp: cleared DP_DOWNSPREAD_CTRL register before start link training - [arm64] ASoC: qcom: lpass-cpu: mark HDMI TX registers as volatile - [arm64] drm/msm/a6xx: Fix kvzalloc vs state_kcalloc usage - erofs: fix illegal unmapped accesses in z_erofs_fill_inode_lazy() - erofs: fix up inplace decompression success rate - [arm64] pinctrl: qcom: Avoid glitching lines when we first mux to output - [arm64] spi: qup: support using GPIO as chip select line - [x86] fpu: Configure init_fpstate attributes orderly - [x86] fpu: Fix the init_fpstate size check with the actual size - [x86] fpu: Exclude dynamic states from init_fpstate - sched/core: Fix comparison in sched_group_cookie_match() - bpf: prevent decl_tag from being referenced in func_proto - mtd: core: add missing of_node_get() in dynamic partitions code - [x86] ASoC: SOF: Intel: pci-mtl: fix firmware name - [armhf] spi: aspeed: Fix window offset of CE1 - [arm64] ASoC: qcom: lpass-cpu: Mark HDMI TX parity register as volatile - [x86] ASoC: Intel: common: add ACPI matching tables for Raptor Lake - [x86] ASoC: SOF: Intel: pci-tgl: use RPL specific firmware definitions - [x86] ASoC: SOF: Intel: pci-tgl: fix ADL-N descriptor - ALSA: ac97: fix possible memory leak in snd_ac97_dev_register() - [x86] perf/x86/intel/lbr: Use setup_clear_cpu_cap() instead of clear_cpu_cap() - rcu: Keep synchronize_rcu() from enabling irqs in early boot - tipc: fix a null-ptr-deref in tipc_topsrv_accept - [arm64] net: netsec: fix error handling in netsec_register_mdio() - net: hinic: fix incorrect assignment issue in hinic_set_interrupt_cfg() - net: hinic: fix memory leak when reading function table - net: hinic: fix the issue of CMDQ memory leaks - net: hinic: fix the issue of double release MBOX callback of VF - [arm64] net: macb: Specify PHY PM management done by MAC - [x86] unwind/orc: Fix unreliable stack dump with gcov - [x86] fpu: Fix copy_xstate_to_uabi() to copy init states correctly - [amd64,arm64] amd-xgbe: Yellow carp devices do not need rrc - [amd64,arm64] amd-xgbe: fix the SFP compliance codes check for DAC cables - [amd64,arm64] amd-xgbe: add the bit rate quirk for Molex cables - [x86] drm/i915/dgfx: Keep PCI autosuspend control 'on' by default on all dGPU - [x86] drm/i915/dp: Reset frl trained flag before restarting FRL training - atlantic: fix deadlock at aq_nic_stop - net: fix UAF issue in nfqnl_nf_hook_drop() when ops_init() failed - tcp: fix a signed-integer-overflow bug in tcp_add_backlog() - tcp: fix indefinite deferral of RTO with SACK reneging - mptcp: set msk local address earlier - can: mcp251x: mcp251x_can_probe(): add missing unregister_candev() in error path - PM: hibernate: Allow hybrid sleep to work with s2idle - media: vivid: s_fbuf: add more sanity checks - media: vivid: dev->bitmap_cap wasn't freed in all cases - media: v4l2-dv-timings: add sanity checks for blanking values - media: videodev2.h: V4L2_DV_BT_BLANKING_HEIGHT should check 'interlaced' - media: vivid: set num_in/outputs to 0 if not supported - ipv6: ensure sane device mtu in tunnels - i40e: Fix ethtool rx-flow-hash setting for X722 - i40e: Fix VF hang when reset is triggered on another VF - i40e: Fix flow-type by setting GL_HASH_INSET registers - net: ksz884x: fix missing pci_disable_device() on error in pcidev_init() - PM: domains: Fix handling of unavailable/disabled idle states - [arm64,armhf] net: fec: limit register access on i.MX6UL - openvswitch: switch from WARN to pr_warn - nh: fix scope used to find saddr when adding non gw nh - net/mlx5e: Do not increment ESN when updating IPsec ESN state - net/mlx5: Wait for firmware to enable CRS before pci_restore_state - net/mlx5: DR, Fix matcher disconnect error flow - net/mlx5e: Extend SKB room check to include PTP-SQ - net/mlx5e: Update restore chain id for slow path packets - net/mlx5: ASO, Create the ASO SQ with the correct timestamp format - net/mlx5: Fix possible use-after-free in async command interface - net/mlx5e: TC, Reject forwarding from internal port to internal port - net/mlx5: Update fw fatal reporter state on PCI handlers successful recover - net/mlx5: Fix crash during sync firmware reset - net: do not sense pfmemalloc status in skb_append_pagefrags() - [arm64] net: enetc: survive memory pressure without crashing - [arm64] Add AMPERE1 to the Spectre-BHB affected list - tcp/udp: Fix memory leak in ipv6_renew_options(). (CVE-2022-3524) . [ Salvatore Bonaccorso ] * wifi: ath11k: avoid deadlock during regulatory update in ath11k_regd_update() (Closes: #1023329) * Bump ABI to 3 (Fixes FTBFS on arm64 and armhf) (Closes: #1023298) * Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM (CVE-2022-42896) * Bluetooth: L2CAP: Fix attempting to access uninitialized memory (CVE-2022-42895) . linux (6.0.6-2) unstable; urgency=medium . * Ignore ABI changes for ahci_fill_cmd_slot, phylink_create and phylink_generic_validate . linux (6.0.6-1) unstable; urgency=medium . * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.0.6 - video/aperture: Call sysfb_disable() before removing PCI devices - ocfs2: clear dinode links count in case of error - ocfs2: fix BUG when iput after ocfs2_mknod fails - smb3: interface count displayed incorrectly - selinux: enable use of both GFP_KERNEL and GFP_ATOMIC in convert_context() - [x86] microcode/AMD: Apply the patch early on every logical thread - [x86] hwmon/coretemp: Handle large core ID value - [armhf] ata: ahci-imx: Fix MODULE_ALIAS - [x86] resctrl: Fix min_cbm_bits for AMD - drm/amdgpu: fix sdma doorbell init ordering on APUs - mm,hugetlb: take hugetlb_lock before decrementing h->resv_huge_pages - kvm: Add support for arch compat vm ioctls - [x86] KVM: x86: Copy filter arg outside kvm_vm_ioctl_set_msr_filter() - x[86] KVM: x86: Add compat handler for KVM_X86_SET_MSR_FILTER - [arm64] KVM: arm64: vgic: Fix exit condition in scan_its_table() - media: mceusb: set timeout to at least timeout provided - [x86] topology: Fix multiple packages shown on a single-package system - [x86] topology: Fix duplicated core ID within a package - [amd64] platform/x86/amd: pmc: Read SMU version during suspend on Cezanne systems - dm bufio: use the acquire memory barrier when testing for B_READING - btrfs: fix processing of delayed data refs during backref walking - btrfs: fix processing of delayed tree block refs during backref walking - [arm*] drm/vc4: Add module dependency on hdmi-codec - [arm*] drm/vc4: hdmi: Enforce the minimum rate at runtime_resume - ACPI: extlog: Handle multiple records - tipc: Fix recognition of trial period - tipc: fix an information leak in tipc_topsrv_kern_subscr - i40e: Fix DMA mappings leak - tls: strp: make sure the TCP skbs do not have overlapping data - HID: magicmouse: Do not set BTN_MOUSE on double report - sfc: Change VF mac via PF as first preference if available. - net/atm: fix proc_mpc_write incorrect return value - net: phy: dp83867: Extend RX strap quirk for SGMII mode - net/smc: Fix an error code in smc_lgr_create() - net: phylink: add mac_managed_pm in phylink_config structure - net: stmmac: Enable mac_managed_pm phylink config - skmsg: pass gfp argument to alloc_sk_msg() - erofs: shouldn't churn the mapping page for duplicated copies - blk-mq: fix null pointer dereference in blk_mq_clear_rq_mapping() - io_uring/rw: remove leftover debug statement - scsi: lpfc: Fix memory leak in lpfc_create_port() - udp: Update reuse->has_conns under reuseport_lock. - ip6mr: fix UAF issue in ip6mr_sk_done() when addrconf_init_net() failed - cifs: Fix xid leak in cifs_create() - cifs: Fix xid leak in cifs_copy_file_range() - cifs: Fix xid leak in cifs_flock() - cifs: Fix xid leak in cifs_ses_add_channel() - cifs: Fix memory leak when build ntlmssp negotiate blob failed - dm: remove unnecessary assignment statement in alloc_dev() - drm/amd/display: Increase frame size limit for display_mode_vba_util_32.o - bnxt_en: fix memory leak in bnxt_nvm_test() - netfilter: rpfilter/fib: Populate flowic_l3mdev field - netfilter: rpfilter/fib: Set ->flowic_uid correctly for user namespaces. - netfilter: nf_tables: relax NFTA_SET_ELEM_KEY_END set flags requirements - nvme-hwmon: consistently ignore errors from nvme_hwmon_init - nvme-hwmon: kmalloc the NVME SMART log buffer - nvmet: fix workqueue MEM_RECLAIM flushing dependency - net: sched: cake: fix null pointer access issue when cake_init() fails - net: sched: delete duplicate cleanup of backlog and qlen - net: sched: sfb: fix null pointer access issue when sfb_init() fails - net: Fix return value of qdisc ingress handling on success - io_uring/msg_ring: Fix NULL pointer dereference in io_msg_send_fd() - sfc: include vport_id in filter spec hash and equal() - [arm64] net: hns: fix possible memory leak in hnae_ae_register() - net: sched: fix race condition in qdisc_graft() - net: phy: dp83822: disable MDI crossover status change interrupt - drbd: only clone bio if we have a backing device - [amd64] iommu/vt-d: Allow NVS regions in arch_rmrr_sanity_check() - [amd64] iommu/vt-d: Clean up si_domain in the init_dmars() error path - wifi: mt76: mt7921e: fix random fw download fail - io_uring: don't gate task_work run on TIF_NOTIFY_SIGNAL - ext4: introduce EXT4_FC_TAG_BASE_LEN helper - ext4: factor out ext4_fc_get_tl() - ext4: fix potential out of bound read in ext4_fc_replay_scan() - ACPI: video: Force backlight native for more TongFang devices - mm: /proc/pid/smaps_rollup: fix no vma's null-deref . linux (6.0.5-1) unstable; urgency=medium . * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.0.4 - [x86] drm/i915/bios: Validate fp_timing terminator presence - [x86] drm/i915/bios: Use hardcoded fp_timing size for generating LFP data pointers - pinctrl: amd: change dev_warn to dev_dbg for additional feature support - [x86] thermal: intel_powerclamp: Use first online CPU as control_cpu - io_uring/net: fail zc send when unsupported by socket - HID: playstation: stop DualSense output work on remove. - HID: playstation: add initial DualSense Edge controller support - net: flag sockets supporting msghdr originated zerocopy - drm/amd/pm: fulfill SMU13.0.7 cstate control interface - drm/amd/pm: add SMU IP v13.0.4 IF version define to V7 - drm/amd/pm: disable cstate feature for gpu reset scenario - drm/amd/pm: fulfill SMU13.0.0 cstate control interface - drm/amd/pm: update SMU IP v13.0.4 driver interface version - dm clone: Fix typo in block_device format specifier - efi: efivars: Fix variable writes without query_variable_store() - efi: ssdt: Don't free memory if ACPI table was loaded successfully - gcov: support GCC 12.1 and newer compilers - io-wq: Fix memory leak in worker creation - fbdev/core: Remove remove_conflicting_pci_framebuffers() - Revert "ALSA: hda: Fix page fault in snd_hda_codec_shutdown()" (Closes: #1022544) https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.0.5 - [arm64,armhf] clk: tegra: Fix Tegra PWM parent clock - Revert "btrfs: call __btrfs_remove_free_space_cache_locked on cache load failure" (Closes: #1022848) . [ Salvatore Bonaccorso ] * [rt] Update to 6.0.5-rt14 * Ignore ABI changes doe to removed check_var_size, check_var_size_nonblocking and remove_conflicting_pci_framebuffers . linux (6.0.3-1~bpo11+1) bullseye-backports; urgency=medium . * Rebuild for bullseye-backports: - Change ABI number to 0.deb11.2 . linux (6.0.3-1) unstable; urgency=medium . * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.0.3 - ALSA: oss: Fix potential deadlock at unregistration - ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free() - ALSA: usb-audio: Fix potential memory leaks - ALSA: usb-audio: Fix NULL dererence at error path - ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530 - ALSA: hda/realtek: Correct pin configs for ASUS G533Z - ALSA: hda/realtek: Add quirk for ASUS GV601R laptop - ALSA: hda/realtek: Add Intel Reference SSID to support headset keys - io_uring: add custom opcode hooks on fail - io_uring/rw: don't lose partial IO result on fail - io_uring/net: don't lose partial send/recv on fail - io_uring/rw: fix unexpected link breakage - io_uring/rw: don't lose short results on io_setup_async_rw() - io_uring/net: fix fast_iov assignment in io_setup_async_msg() - io_uring/net: don't update msg_name if not provided - io_uring: limit registration w/ SINGLE_ISSUER - io_uring/net: handle -EINPROGRESS correct for IORING_OP_CONNECT - io_uring/af_unix: defer registered files gc to io_uring release (CVE-2022-2602) - io_uring: correct pinned_vm accounting - [x86] hv_netvsc: Fix race between VF offering and VF association message from host - cifs: destage dirty pages before re-reading them for cache=none - cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message - iio: dac: ad5593r: Fix i2c read protocol requirements - iio: ltc2497: Fix reading conversion results - iio: adc: ad7923: fix channel readings for some variants - iio: pressure: dps310: Refactor startup procedure - iio: pressure: dps310: Reset chip after timeout - xhci: dbc: Fix memory leak in xhci_alloc_dbc() - usb: gadget: uvc: Fix argument to sizeof() in uvc_register_video() - usb: add quirks for Lenovo OneLink+ Dock - mmc: core: Add SD card quirk for broken discard - can: kvaser_usb: Fix use of uninitialized completion - can: kvaser_usb_leaf: Fix overread with an invalid command - can: kvaser_usb_leaf: Fix TX queue out of sync after restart - can: kvaser_usb_leaf: Fix CAN state after restart - mmc: renesas_sdhi: Fix rounding errors - mmc: sdhci-tegra: Use actual clock rate for SW tuning correction - mmc: sdhci-sprd: Fix minimum clock limit - i2c: designware: Fix handling of real but unexpected device interrupts - fs: dlm: fix race between test_bit() and queue_work() - fs: dlm: handle -EBUSY first in lock arg validation - fs: dlm: fix invalid derefence of sb_lvbptr - btf: Export bpf_dynptr definition - mbcache: Avoid nesting of cache->c_list_lock under bit locks - HID: multitouch: Add memory barriers - quota: Check next/prev free block number after reading from quota file - platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure - [arm64] dts: qcom: sdm845-mtp: correct ADC settle time - ASoC: wcd9335: fix order of Slimbus unprepare/disable - ASoC: wcd934x: fix order of Slimbus unprepare/disable - hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API - net: thunderbolt: Enable DMA paths only after rings are enabled - regulator: qcom_rpm: Fix circular deferral regression - [arm64] topology: move store_cpu_topology() to shared code - [riscv64] topology: fix default topology reporting - [riscv64] Re-enable counter access from userspace - [riscv64] Make port I/O string accessors actually work - [riscv64] vdso: fix NULL deference in vdso_join_timens() when vfork - [riscv64] Allow PROT_WRITE-only mmap() - [riscv64] Make VM_WRITE imply VM_READ - [riscv64] always honor the CONFIG_CMDLINE_FORCE when parsing dtb - [riscv64] Pass -mno-relax only on lld < 15.0.0 - nvmem: core: Fix memleak in nvmem_register() - nvme-multipath: fix possible hang in live ns resize with ANA access - Revert "drm/amdgpu: use dirty framebuffer helper" - dm: verity-loadpin: Only trust verity targets with enforcement - dmaengine: mxs: use platform_driver_register - dmaengine: qcom-adm: fix wrong sizeof config in slave_config - dmaengine: qcom-adm: fix wrong calling convention for prep_slave_sg - drm/virtio: Check whether transferred 2D BO is shmem - drm/virtio: Unlock reservations on virtio_gpu_object_shmem_init() error - drm/virtio: Unlock reservations on dma_resv_reserve_fences() error - drm/virtio: Use appropriate atomic state in virtio_gpu_plane_cleanup_fb() - drm/udl: Restore display mode on resume - [arm64] mte: move register initialization to C - [arm64] mte: Avoid setting PG_mte_tagged if no tags cleared or restored - [arm64] errata: Add Cortex-A55 to the repeat tlbi list - clocksource/drivers/arm_arch_timer: Fix CNTPCT_LO and CNTVCT_LO value - mm/hugetlb: fix races when looking up a CONT-PTE/PMD size hugetlb page - mm/damon: validate if the pmd entry is present before accessing - mm/uffd: fix warning without PTE_MARKER_UFFD_WP compiled in - mm/mmap: undo ->mmap() when arch_validate_flags() fails - xen/gntdev: Prevent leaking grants - xen/gntdev: Accommodate VMA splitting - PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge - serial: cpm_uart: Don't request IRQ too early for console port - serial: stm32: Deassert Transmit Enable on ->rs485_config() - serial: Deassert Transmit Enable on probe in driver-specific way - serial: ar933x: Deassert Transmit Enable on ->rs485_config() - serial: 8250: Let drivers request full 16550A feature probing - serial: 8250: Request full 16550A feature probing for OxSemi PCIe devices - NFSD: Protect against send buffer overflow in NFSv3 READDIR - NFSD: Protect against send buffer overflow in NFSv2 READ - NFSD: Protect against send buffer overflow in NFSv3 READ - cpufreq: qcom-cpufreq-hw: Fix uninitialized throttled_freq warning - LoadPin: Fix Kconfig doc about format of file with verity digests - powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain - slimbus: qcom-ngd: use correct error in message of pdr_add_lookup() failure - slimbus: qcom-ngd: cleanup in probe error path - scsi: lpfc: Rework MIB Rx Monitor debug info logic - scsi: qedf: Populate sysfs attributes for vport - gpio: rockchip: request GPIO mux to pinctrl when setting direction - pinctrl: rockchip: add pinmux_ops.gpio_set_direction callback - fbdev: smscufx: Fix use-after-free in ufx_ops_open() - hwrng: core - let sleep be interrupted when unregistering hwrng - smb3: do not log confusing message when server returns no network interfaces - ksmbd: fix incorrect handling of iterate_dir - ksmbd: fix endless loop when encryption for response fails - ksmbd: Fix wrong return value and message length check in smb2_ioctl() - ksmbd: Fix user namespace mapping - fs: record I_DIRTY_TIME even if inode already has I_DIRTY_INODE - btrfs: fix alignment of VMA for memory mapped files on THP - btrfs: enhance unsupported compat RO flags handling - btrfs: fix race between quota enable and quota rescan ioctl - btrfs: fix missed extent on fsync after dropping extent maps - btrfs: set generation before calling btrfs_clean_tree_block in btrfs_init_new_buffer - f2fs: fix wrong continue condition in GC - f2fs: complete checkpoints during remount - f2fs: flush pending checkpoints when freezing super - f2fs: increase the limit for reserve_root - f2fs: fix to do sanity check on destination blkaddr during recovery - f2fs: fix to do sanity check on summary info - f2fs: allow direct read for zoned device - jbd2: wake up journal waiters in FIFO order, not LIFO - jbd2: fix potential buffer head reference count leak - jbd2: fix potential use-after-free in jbd2_fc_wait_bufs - jbd2: add miss release buffer head in fc_do_one_pass() - ext2: Add sanity checks for group and filesystem size - ext4: avoid crash when inline data creation follows DIO write - ext4: fix null-ptr-deref in ext4_write_info - ext4: make ext4_lazyinit_thread freezable - ext4: fix check for block being out of directory size (CVE-2022-1184) - ext4: don't increase iversion counter for ea_inodes - ext4: unconditionally enable the i_version counter - ext4: ext4_read_bh_lock() should submit IO if the buffer isn't uptodate - ext4: place buffer head allocation before handle start - ext4: fix i_version handling in ext4 - ext4: fix dir corruption when ext4_dx_add_entry() fails - ext4: fix miss release buffer head in ext4_fc_write_inode - ext4: fix potential memory leak in ext4_fc_record_modified_inode() - ext4: fix potential memory leak in ext4_fc_record_regions() - ext4: update 'state->fc_regions_size' after successful memory allocation - ftrace: Properly unset FTRACE_HASH_FL_MOD - ftrace: Still disable enabled records marked as disabled - ring-buffer: Allow splice to read previous partially read pages - ring-buffer: Have the shortest_full queue be the shortest not longest - ring-buffer: Check pending waiters when doing wake ups as well - ring-buffer: Add ring_buffer_wake_waiters() - ring-buffer: Fix race between reset page and reading page - tracing/eprobe: Fix alloc event dir failed when event name no set - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t - tracing: Wake up ring buffer waiters on closing of the file - tracing: Wake up waiters when tracing is disabled - tracing: Add ioctl() to force ring buffer waiters to wake up - tracing: Do not free snapshot if tracer is on cmdline - tracing: Move duplicate code of trace_kprobe/eprobe.c into header - tracing: Add "(fault)" name injection to kernel probes - tracing: Fix reading strings from synthetic events - rpmsg: char: Avoid double destroy of default endpoint - thunderbolt: Explicitly enable lane adapter hotplug events at startup - efi: libstub: drop pointless get_memory_map() call - media: cedrus: Fix watchdog race condition - media: cedrus: Set the platform driver data earlier - media: cedrus: Fix endless loop in cedrus_h265_skip_bits() - blk-throttle: fix that io throttle can only work for single bio - blk-wbt: call rq_qos_add() after wb_normal is initialized - [x86] KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility - [x86] KVM: nVMX: Unconditionally purge queued/injected events on nested "exit" - [x86] KVM: nVMX: Don't propagate vmcs12's PERF_GLOBAL_CTRL settings to vmcs02 - [x86] KVM: x86: Treat #DBs from the emulator as fault-like (code and DR7.GD=1) - [x86] KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS - staging: greybus: audio_helper: remove unused and wrong debugfs usage - drm/nouveau/kms/nv140-: Disable interlacing - drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table() - [x86] drm/i915/gt: Use i915_vm_put on ppgtt_create error paths - [x86] drm/i915/guc: Fix revocation of non-persistent contexts - [x86] drm/i915: Fix watermark calculations for gen12+ RC CCS modifier - [x86] drm/i915: Fix watermark calculations for gen12+ MC CCS modifier - [x86] drm/i915: Fix watermark calculations for gen12+ CCS+CC modifier - [x86] drm/i915: Fix watermark calculations for DG2 CCS modifiers - [x86] drm/i915: Fix watermark calculations for DG2 CCS+CC modifier - [x86] drm/i915: Fix display problems after resume - drm/amd/display: Fix watermark calculation - drm/amd/display: Update PMFW z-state interface for DCN314 - drm/amd/display: zeromem mypipe heap struct before using it - drm/amd/display: Validate DSC After Enable All New CRTCs - drm/amd/display: Enable dpia support for dcn314 - drm/amd/display: Enable 2 to 1 ODM policy if supported - drm/amd/display: Fix vblank refcount in vrr transition - drm/amd/display: Add HUBP surface flip interrupt handler - drm/amd/display: explicitly disable psr_feature_enable appropriately - drm/amdgpu: Enable VCN PG on GC11_0_1 - drm/amdgpu: Enable F32_WPTR_POLL_ENABLE in mqd - smb3: must initialize two ACL struct fields to zero - selinux: use "grep -E" instead of "egrep" - ima: fix blocking of security.ima xattrs of unsupported algorithms - userfaultfd: open userfaultfds with O_RDONLY - acl: return EOPNOTSUPP in posix_acl_fix_xattr_common() - thermal: cpufreq_cooling: Check the policy first in cpufreq_cooling_register() - cpufreq: amd-pstate: Fix initial highest_perf value - erofs: fix order >= MAX_ORDER warning due to crafted negative i_size - erofs: use kill_anon_super() to kill super in fscache mode - ACPI: PCC: Release resources on address space setup failure path - ACPI: PCC: replace wait_for_completion() - ACPI: PCC: Fix Tx acknowledge in the PCC address space handler - objtool: Preserve special st_shndx indexes in elf_update_symbol - nfsd: Fix a memory leak in an error handling path - SUNRPC: Fix svcxdr_init_decode's end-of-buffer calculation - SUNRPC: Fix svcxdr_init_encode's buflen calculation - NFSD: Protect against send buffer overflow in NFSv2 READDIR - NFSD: Fix handling of oversized NFSv4 COMPOUND requests - [x86] paravirt: add extra clobbers with ZERO_CALL_USED_REGS enabled - wifi: rtlwifi: 8192de: correct checking of IQK reload - wifi: ath10k: Set tx credit to one for WCN3990 snoc based devices - wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state() - bpf: Cleanup check_refcount_ok - bpf: Fix ref_obj_id for dynptr data slices in verifier - leds: lm3601x: Don't use mutex after it was destroyed - tsnep: Fix TSNEP_INFO_TX_TIME register define - net: prestera: cache port state for non-phylink ports too - bpf: Fix reference state management for synchronous callbacks - wifi: mac80211: properly set old_links when removing a link - wifi: cfg80211: get correct AP link chandef - wifi: mac80211: fix use-after-free - wifi: mac80211: mlme: don't add empty EML capabilities - wifi: mac80211_hwsim: fix link change handling - wifi: mac80211: allow bw change during channel switch in mesh - bpftool: Fix a wrong type cast in btf_dumper_int - ice: set tx_tstamps when creating new Tx rings via ethtool - audit: explicitly check audit_context->context enum value - audit: free audit_proctitle only on task exit - esp: choose the correct inner protocol for GSO on inter address family tunnels - spi: mt7621: Fix an error message in mt7621_spi_probe() - [x86] resctrl: Fix to restore to original value when re-enabling hardware prefetch register - xsk: Fix backpressure mechanism on Tx - bpf: Disable preemption when increasing per-cpu map_locked - bpf: Propagate error from htab_lock_bucket() to userspace - wifi: ath11k: Fix incorrect QMI message ID mappings - bpf: Use this_cpu_{inc|dec|inc_return} for bpf_task_storage_busy - bpf: Use this_cpu_{inc_return|dec} for prog->active - Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend - bpf: Only add BTF IDs for socket security hooks when CONFIG_SECURITY_NETWORK is on - wifi: rtw89: pci: fix interrupt stuck after leaving low power mode - wifi: rtw89: pci: correct TX resource checking in low power mode - wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse() - wifi: wfx: prevent underflow in wfx_send_pds() - wifi: rtw88: add missing destroy_workqueue() on error path in rtw_core_init() - wifi: mac80211: mlme: assign link address correctly - spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume() - spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime() - wifi: rtl8xxxu: Fix skb misuse in TX queue selection - spi: meson-spicc: do not rely on busy flag in pow2 clk ops - bpf: btf: fix truncated last_member_type_id in btf_struct_resolve - wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration - wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask - Bluetooth: avoid hci_dev_test_and_set_flag() in mgmt_init_hdev() - wifi: mt76: mt7921e: fix race issue between reset and suspend/resume - wifi: mt76: mt7921s: fix race issue between reset and suspend/resume - wifi: mt76: mt7921u: fix race issue between reset and suspend/resume - wifi: mt76: sdio: fix the deadlock caused by sdio->stat_work - wifi: mt76: sdio: poll sta stat when device transmits data - wifi: mt76: mt7915: fix an uninitialized variable bug - wifi: mt76: mt7921: fix use after free in mt7921_acpi_read() - wifi: mt76: sdio: fix transmitting packet hangs - wifi: mt76: mt7615: add mt7615_mutex_acquire/release in mt7615_sta_set_decap_offload - wifi: mt76: mt7915: fix possible unaligned access in mt7915_mac_add_twt_setup - wifi: mt76: connac: fix possible unaligned access in mt76_connac_mcu_add_nested_tlv - wifi: mt76: mt7921: add mt7921_mutex_acquire at mt7921_[start, stop]_ap - wifi: mt76: mt7921: add mt7921_mutex_acquire at mt7921_sta_set_decap_offload - wifi: mt76: mt7921: fix the firmware version report - wifi: mt76: mt7915: fix mcs value in ht mode - wifi: mt76: fix uninitialized pointer in mt7921_mac_fill_rx - wifi: mt76: mt7915: do not check state before configuring implicit beamform - wifi: mt76: mt7921e: fix rmmod crash in driver reload test - Bluetooth: RFCOMM: Fix possible deadlock on socket shutdown/release - net: fs_enet: Fix wrong check in do_pd_setup - bpf: Ensure correct locking around vulnerable function find_vpid() - libbpf: Fix crash if SEC("freplace") programs don't have attach_prog_fd set - wifi: ath11k: Include STA_KEEPALIVE_ARP_RESPONSE TLV header by default - Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure - netfilter: conntrack: fix the gc rescheduling delay - netfilter: conntrack: revisit the gc initial rescheduling bias - bpf, cgroup: Reject prog_attach_flags array when effective query - bpftool: Fix wrong cgroup attach flags being assigned to effective progs - flow_dissector: Do not count vlan tags inside tunnel payload - mwifiex: fix sleep in atomic context bugs caused by dev_coredumpv - wifi: ath11k: fix failed to find the peer with peer_id 0 when disconnected - wifi: ath11k: fix number of VHT beamformee spatial streams - mips: dts: ralink: mt7621: fix external phy on GB-PC2 - [x86] microcode/AMD: Track patch allocation size explicitly - wifi: ath11k: fix peer addition/deletion error on sta band migration - [x86] cpu: Include the header of init_ia32_feat_ctl()'s prototype - spi: cadence-quadspi: Fix PM disable depth imbalance in cqspi_probe - spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe - spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe - skmsg: Schedule psock work if the cached skb exists on the psock - cw1200: fix incorrect check to determine if no element is found in list - i2c: mlxbf: support lock mechanism - Bluetooth: hci_core: Fix not handling link timeouts propertly - xfrm: Reinject transport-mode packets through workqueue - netfilter: nft_fib: Fix for rpath check with VRF devices - spi: s3c64xx: Fix large transfers with DMA - Bluetooth: Prevent double register of suspend - wifi: rtl8xxxu: gen2: Enable 40 MHz channel width - wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM - vhost/vsock: Use kvmalloc/kvfree for larger packets. - eth: alx: take rtnl_lock on resume - mISDN: fix use-after-free bugs in l1oip timer handlers (CVE-2022-3565) - sctp: handle the error returned from sctp_auth_asoc_init_active_key - tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited - spi: Ensure that sg_table won't be used after being freed - Bluetooth: hci_sync: Fix not indicating power state - hwmon: (pmbus/mp2888) Fix sensors readouts for MPS Multi-phase mp2888 controller - net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks() - af_unix: Fix memory leaks of the whole sk due to OOB skb. (CVE-2022-3543) - net: prestera: acl: Add check for kmemdup - eth: lan743x: reject extts for non-pci11x1x devices - bnx2x: fix potential memory leak in bnx2x_tpa_stop() (CVE-2022-3542) - eth: sp7021: fix use after free bug in spl2sw_nvmem_get_mac_address (CVE-2022-3541) - net: wwan: iosm: Call mutex_init before locking it - net/ieee802154: reject zero-sized raw_sendmsg() - once: add DO_ONCE_SLOW() for sleepable contexts - net: mvpp2: fix mvpp2 debugfs leak (CVE-2022-3535) - drm: bridge: adv7511: fix CEC power down control register offset - drm: bridge: adv7511: unregister cec i2c device after cec adapter - drm/bridge: Avoid uninitialized variable warning - drm/mipi-dsi: Detach devices when removing the host - drm/vc4: drv: Call component_unbind_all() - drm/bridge: it6505: Power on downstream device in .atomic_enable - video/aperture: Disable and unregister sysfb devices via aperture helpers - drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling - drm/bridge: anx7625: Fix refcount bug in anx7625_parse_dt() - drm/bridge: tc358767: Add of_node_put() when breaking out of loop - drm/bridge: parade-ps8640: Fix regulator supply order - drm/format-helper: Fix test on big endian architectures - drm/dp_mst: fix drm_dp_dpcd_read return value checks - drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node() - ASoC: mt6359: fix tests for platform_get_irq() failure - ASoC: amd: acp: add missing platform_device_unregister() in acp_pci_probe() - drm/msm: Make .remove and .shutdown HW shutdown consistent - platform/chrome: fix double-free in chromeos_laptop_prepare() - platform/chrome: fix memory corruption in ioctl - [x86] drm/i915/dg2: Bump up CDCLK for DG2 - drm/virtio: Fix same-context optimization - ASoC: soc-pcm.c: call __soc_pcm_close() in soc_pcm_close() - ASoC: tas2764: Allow mono streams - ASoC: tas2764: Drop conflicting set_bias_level power setting - ASoC: tas2764: Fix mute/unmute - platform/x86: msi-laptop: Fix old-ec check for backlight registering - platform/x86: msi-laptop: Fix resource cleanup - drm/panel: use 'select' for Ili9341 panel driver helpers - drm: fix drm_mipi_dbi build errors - platform/chrome: cros_ec_typec: Add bit offset for DP VDO - platform/chrome: cros_ec_typec: Correct alt mode index - drm/amdgpu: add missing pci_disable_device() in amdgpu_pmops_runtime_resume() - drm/bridge: megachips: Fix a null pointer dereference bug - drm/bridge: it6505: Fix the order of DP_SET_POWER commands - ASoC: rsnd: Add check for rsnd_mod_power_on - ASoC: wm_adsp: Handle optional legacy support - ALSA: hda: beep: Simplify keep-power-at-enable behavior - drm/virtio: set fb_modifiers_not_supported - drm/bochs: fix blanking - ASoC: mediatek: mt8195-mt6359: Properly register sound card for SOF - ASoC: SOF: mediatek: mt8195: Import namespace SND_SOC_SOF_MTK_COMMON - drm/omap: dss: Fix refcount leak bugs - drm/amdgpu: Fix memory leak in hpd_rx_irq_create_workqueue() - ASoC: rockchip: i2s: use regmap_read_poll_timeout to poll I2S_CLR - mmc: au1xmmc: Fix an error handling path in au1xmmc_probe() - ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API - drm/msm: lookup the ICC paths in both mdp5/dpu and mdss devices - drm/msm/dpu: index dpu_kms->hw_vbif using vbif_idx - drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa() - ALSA: hda/hdmi: change type for the 'assigned' variable - ALSA: hda/hdmi: Fix the converter allocation for the silent stream - ALSA: usb-audio: Properly refcounting clock rate - ASoC: SOF: ipc4-topology: Free the ida when IPC fails in sof_ipc4_widget_setup() - drm/vmwgfx: Fix memory leak in vmw_mksstat_add_ioctl() - virtio-gpu: fix shift wrapping bug in virtio_gpu_fence_event_create() - ASoC: codecs: tx-macro: fix kcontrol put - ASoC: da7219: Fix an error handling path in da7219_register_dai_clks() - ALSA: dmaengine: increment buffer pointer atomically - mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe() - ASoC: stm32: dfsdm: Fix PM disable depth imbalance in stm32_adfsdm_probe - ASoC: stm32: spdifrx: Fix PM disable depth imbalance in stm32_spdifrx_probe - ASoC: stm: Fix PM disable depth imbalance in stm32_i2s_probe - ASoC: wcd-mbhc-v2: Revert "ASoC: wcd-mbhc-v2: use pm_runtime_resume_and_get()" - ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe - ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe - ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe - ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe - ASoC: rockchip: i2s: use regmap_read_poll_timeout_atomic to poll I2S_CLR - ALSA: hda/hdmi: Don't skip notification handling during PM operation - memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe() - memory: of: Fix refcount leak bug in of_get_ddr_timings() - memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings() - locks: fix TOCTOU race when granting write lease - soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe() - soc: qcom: smem_state: Add refcounting for the 'state->of_node' - ARM: dts: imx6qdl-kontron-samx6i: hook up DDC i2c bus - [arm64] dts: renesas: r9a07g044: Fix SCI{Rx,Tx} interrupt types - [arm64] dts: renesas: r9a07g054: Fix SCI{Rx,Tx} interrupt types - [arm64] dts: renesas: r9a07g043: Fix SCI{Rx,Tx} interrupt types - dt-bindings: clock: exynosautov9: correct clock numbering of peric0/c1 - [arm64] dts: qcom: sdm845-xiaomi-polaris: Fix sde_dsi_active pinctrl - [arm64] dts: qcom: sc7280: Cleanup the lpasscc node - [arm64] dts: qcom: sc7280: Update lpasscore node - [arm64] dts: qcom: sc8280xp-crd: disallow regulator mode switches - [arm64] dts: qcom: sc8280xp-lenovo-thinkpad-x13s: disallow regulator mode switches - [arm64] dts: qcom: sa8295p-adp: disallow regulator mode switches - [arm64] dts: qcom: pm8350c: Drop PWM reg declaration - [arm64] dts: qcom: sc7180-trogdor: Keep pm6150_adc enabled for TZ - [arm64] dts: marvell: 98dx25xx: use correct property for i2c gpios - [arm64] dts: qcom: sm8350-sagami: correct TS pin property - soc/tegra: fuse: Add missing of_node_put() in tegra_init_fuse() - soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA - [arm64] dts: qcom: ipq8074: fix PCIe PHY serdes size - [arm64] dts: qcom: sm8450: fix UFS PHY serdes size - [arm64] dts: ti: k3-j7200: fix main pinmux range - ext4: continue to expand file system when the target size doesn't reach - ext4: don't run ext4lazyinit for read-only filesystems - [arm64] ftrace: fix module PLTs with mcount - [arm64] dts: exynos: fix polarity of "enable" line of NFC chip in TM2 - ARM: dts: exynos: fix polarity of VBUS GPIO of Origen - iomap: iomap: fix memory corruption when recording errors during writeback - iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX - iio: adc: at91-sama5d2_adc: check return status for pressure and touch - iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq - iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume - iio: inkern: only release the device node when done with it - iio: inkern: fix return value in devm_of_iio_channel_get_by_name() - iio: ABI: Fix wrong format of differential capacitance channel ABI. - iio: magnetometer: yas530: Change data type of hard_offsets to signed - RDMA/mlx5: Don't compare mkey tags in DEVX indirect mkey - usb: common: usb-conn-gpio: Simplify some error message - usb: common: debug: Check non-standard control requests - clk: meson: Hold reference returned by of_get_parent() - clk: st: Hold reference returned by of_get_parent() - clk: oxnas: Hold reference returned by of_get_parent() - clk: qoriq: Hold reference returned by of_get_parent() - clk: berlin: Add of_node_put() for of_get_parent() - clk: sprd: Hold reference returned by of_get_parent() - coresight: docs: Fix a broken reference - clk: tegra: Fix refcount leak in tegra210_clock_init - clk: tegra: Fix refcount leak in tegra114_clock_init - clk: tegra20: Fix refcount leak in tegra20_clock_init - clk: samsung: exynosautov9: correct register offsets of peric0/c1 - HID: uclogic: Add missing suffix for digitalizers - HID: uclogic: Fix warning in uclogic_rdesc_template_apply - HSI: omap_ssi: Fix refcount leak in ssi_probe - HSI: omap_ssi_port: Fix dma_map_sg error check - clk: qcom: gcc-sdm660: Use floor ops for SDCC1 clock - media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop - media: airspy: fix memory leak in airspy probe - tty: xilinx_uartps: Check clk_enable return value - tty: xilinx_uartps: Fix the ignore_status - media: mediatek: vcodec: Skip non CBR bitrate mode - media: amphion: insert picture startcode after seek for vc1g format - media: amphion: adjust the encoder's value range of gop size - media: amphion: don't change the colorspace reported by decoder. - media: amphion: fix a bug that vpu core may not resume after suspend - media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start() - media: uvcvideo: Fix memory leak in uvc_gpio_parse - media: uvcvideo: Use entity get_cur in uvc_ctrl_set - media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init - RDMA/rxe: Fix "kernel NULL pointer dereference" error - RDMA/rxe: Fix the error caused by qp->sk - clk: mediatek: clk-mt8195-vdo0: Set rate on vdo0_dp_intf0_dp_intf's parent - clk: mediatek: clk-mt8195-vdo1: Reparent and set rate on vdo1_dpintf's parent - clk: mediatek: mt8195-infra_ao: Set pwrmcu clocks as critical - misc: ocxl: fix possible refcount leak in afu_ioctl() - fpga: dfl-pci: Add IDs for Intel N6000, N6001 and C6100 cards - fpga: prevent integer overflow in dfl_feature_ioctl_set_irq() - phy: rockchip-inno-usb2: Return zero after otg sync - dmaengine: idxd: avoid deadlock in process_misc_interrupts() - dmaengine: hisilicon: Disable channels when unregister hisi_dma - dmaengine: hisilicon: Fix CQ head update - dmaengine: hisilicon: Add multi-thread support for a DMA channel - iio: Use per-device lockdep class for mlock - usb: gadget: f_fs: stricter integer overflow checks - dyndbg: fix static_branch manipulation - dyndbg: fix module.dyndbg handling - dyndbg: let query-modname override actual module name - dyndbg: drop EXPORTed dynamic_debug_exec_queries - clk: qcom: sm6115: Select QCOM_GDSC - scsi: lpfc: Fix various issues reported by tools - mtd: devices: docg3: check the return value of devm_ioremap() in the probe - remoteproc: Harden rproc_handle_vdev() against integer overflow - phy: qcom-qmp-usb: disable runtime PM on unbind - phy: amlogic: phy-meson-axg-mipi-pcie-analog: Hold reference returned by of_get_parent() - phy: phy-mtk-tphy: fix the phy type setting issue - mtd: rawnand: intel: Read the chip-select line from the correct OF node - mtd: rawnand: intel: Remove undocumented compatible string - mtd: rawnand: fsl_elbc: Fix none ECC mode - RDMA/irdma: Align AE id codes to correct flush code and event - RDMA/irdma: Validate udata inlen and outlen - RDMA/srp: Fix srp_abort() - RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall. - RDMA/siw: Fix QP destroy to wait for all references dropped. - ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting() - ata: fix ata_id_has_devslp() - ata: fix ata_id_has_ncq_autosense() - ata: fix ata_id_has_dipm() - mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct() - block: Fix the enum blk_eh_timer_return documentation - eventfd: guard wake_up in eventfd fs calls as well - io_uring/fdinfo: fix sqe dumping for IORING_SETUP_SQE128 - md: Replace snprintf with scnprintf - md/raid5: Ensure stripe_fill happens on non-read IO with journal - md/raid5: Remove unnecessary bio_put() in raid5_read_one_chunk() - md: Remove extra mddev_get() in md_seq_start() - RDMA/cm: Use SLID in the work completion as the DLID in responder side - IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers - xhci: Don't show warning for reinit on known broken suspend - usb: gadget: function: fix dangling pnp_string in f_printer.c - usb: typec: anx7411: Use of_get_child_by_name() instead of of_find_node_by_name() - usb: dwc3: core: fix some leaks in probe - drivers: serial: jsm: fix some leaks in probe - serial: 8250: Toggle IER bits on only after irq has been set up - tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown - phy: qualcomm: call clk_disable_unprepare in the error handling - staging: vt6655: fix some erroneous memory clean-up loops - slimbus: qcom-ngd: Add error handling in of_qcom_slim_ngd_register - firmware: google: Test spinlock on panic path to avoid lockups - serial: 8250: Fix restoring termios speed after suspend - scsi: libsas: Fix use-after-free bug in smp_execute_task_sg() - scsi: pm8001: Fix running_req for internal abort commands - scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername() - clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical - clk: qcom: gcc-sm6115: Override default Alpha PLL regs - nvmet-auth: don't try to cancel a non-initialized work_struct - RDMA/rxe: Set pd early in mr alloc routines - RDMA/rxe: Fix resize_finish() in rxe_queue.c - fsi: core: Check error number after calling ida_simple_get - mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe() - mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq() - mfd: lp8788: Fix an error handling path in lp8788_probe() - mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init() - mfd: fsl-imx25: Fix check for platform_get_irq() errors - mfd: sm501: Add check for platform_driver_register() - mfd: da9061: Fix Failed to set Two-Wire Bus Mode. - clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent - clk: mediatek: clk-mt8195-mfg: Reparent mfg_bg3d and propagate rate changes - clk: mediatek: fix unregister function in mtk_clk_register_dividers cleanup - clk: mediatek: Migrate remaining clk_unregister_*() to clk_hw_unregister_*() - io_uring/rw: defer fsnotify calls to task context - dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup() - HID: amd_sfh: Handle condition of "no sensors" for SFH1.1 - usb: mtu3: fix failed runtime suspend in host only mode - spmi: pmic-arb: correct duplicate APID to PPID mapping logic - clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD - clk: baikal-t1: Fix invalid xGMAC PTP clock divider - clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent - clk: baikal-t1: Add SATA internal ref clock buffer - clk: bcm2835: Make peripheral PLLC critical - clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration - clk: imx8mp: tune the order of enet_qos_root_clk - clk: imx: scu: fix memleak on platform_device_add() fails - clk: ti: Balance of_node_get() calls for of_find_node_by_name() - clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe - clk: ast2600: BCLK comes from EPLL - ipc: mqueue: fix possible memory leak in init_mqueue_fs() - powerpc/configs: Properly enable PAPR_SCM in pseries_defconfig - powerpc/math_emu/efp: Include module.h - powerpc/sysdev/fsl_msi: Add missing of_node_put() - powerpc/pci_dn: Add missing of_node_put() - powerpc/powernv: add missing of_node_put() in opal_export_attrs() - cpuidle: riscv-sbi: Fix CPU_PM_CPU_IDLE_ENTER_xyz() macro usage - powerpc: dts: turris1x.dts: Fix NOR partitions labels - powerpc: dts: turris1x.dts: Fix labels in DSA cpu port nodes - powerpc: Fix fallocate and fadvise64_64 compat parameter combination - x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition - powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5 - powerpc/64/interrupt: Fix false warning in context tracking due to idle state - powerpc/64: mark irqs hard disabled in boot paca - powerpc/64/interrupt: Fix return to masked context after hard-mask irq becomes pending - powerpc: Fix SPE Power ISA properties for e500v1 platforms - powerpc/kprobes: Fix null pointer reference in arch_prepare_kprobe() - powerpc/pseries/vas: Pass hw_cpu_id to node associativity HCALL - crypto: sahara - don't sleep when in softirq - crypto: hisilicon/zip - fix mismatch in get/set sgl_sge_nr - hwrng: arm-smccc-trng - fix NO_ENTROPY handling - crypto: ccp - Fail the PSP initialization when writing psp data file failed - cgroup: Honor caller's cgroup NS when resolving path - hwrng: imx-rngc - use devm_clk_get_enabled - hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear() - crypto: qat - fix default value of WDT timer - crypto: hisilicon/qm - fix missing put dfx access - cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset - iommu/omap: Fix buffer overflow in debugfs - crypto: akcipher - default implementation for setting a private key - crypto: ccp - Release dma channels before dmaengine unrgister - crypto: inside-secure - Change swab to swab32 - crypto: qat - fix DMA transfer direction - clocksource/drivers/arm_arch_timer: Fix handling of ARM erratum 858921 - clocksource/drivers/timer-gxp: Add missing error handling in gxp_timer_probe - cifs: return correct error in ->calc_signature() - iommu/iova: Fix module config properly - tracing: kprobe: Fix kprobe event gen test module on exit - tracing: kprobe: Make gen test module work in arm and riscv - tracing/osnoise: Fix possible recursive locking in stop_per_cpu_kthreads - ftrace: Fix recursive locking direct_mutex in ftrace_modify_direct_caller - kbuild: remove the target in signal traps when interrupted - linux/export: use inline assembler to populate symbol CRCs - kbuild: rpm-pkg: fix breakage when V=1 is used - crypto: marvell/octeontx - prevent integer overflows - crypto: cavium - prevent integer overflow loading firmware - random: schedule jitter credit for next jiffy, not in two jiffies - thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id - ACPI: APEI: do not add task_work to kernel thread to avoid memory leak - f2fs: fix race condition on setting FI_NO_EXTENT flag - f2fs: fix to account FS_CP_DATA_IO correctly - tools/power turbostat: Use standard Energy Unit for SPR Dram RAPL domain - selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle - ARM/dma-mapping: don't override ->dma_coherent when set from a bus notifier - module: tracking: Keep a record of tainted unloaded modules only - fs: dlm: fix race in lowcomms - rcu: Avoid triggering strict-GP irq-work when RCU is idle - rcu: Back off upon fill_page_cache_func() allocation failure - rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE() - rcu-tasks: Ensure RCU Tasks Trace loops have quiescent states - cpufreq: amd_pstate: fix wrong lowest perf fetch - ACPI: video: Add Toshiba Satellite/Portege Z830 quirk - fortify: Fix __compiletime_strlen() under UBSAN_BOUNDS_LOCAL - ACPI: tables: FPDT: Don't call acpi_os_map_memory() on invalid phys address - cpufreq: intel_pstate: Add Tigerlake support in no-HWP mode - MIPS: BCM47XX: Cast memcmp() of function to (void *) - powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue - thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash - ARM: decompressor: Include .data.rel.ro.local - ACPI: x86: Add a quirk for Dell Inspiron 14 2-in-1 for StorageD3Enable - NFSD: Return nfserr_serverfault if splice_ok but buf->pages have data - NFSD: fix use-after-free on source server when doing inter-server copy - wifi: brcmfmac: fix invalid address access when enabling SCAN log level - bpftool: Clear errno after libcap's checks - net: ethernet: ti: davinci_mdio: Add workaround for errata i2329 - openvswitch: Fix double reporting of drops in dropwatch - openvswitch: Fix overreporting of drops in dropwatch - tcp: annotate data-race around tcp_md5sig_pool_populated - micrel: ksz8851: fixes struct pointer issue - wifi: mac80211: accept STA changes without link changes - [x86] mce: Retrieve poison range from hardware - wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg() - thunderbolt: Add back Intel Falcon Ridge end-to-end flow control workaround - [x86] apic: Don't disable x2APIC if locked - net: axienet: Switch to 64-bit RX/TX statistics - net-next: Fix IP_UNICAST_IF option behavior for connected sockets - xfrm: Update ipcomp_scratches with NULL when freed - wifi: ath11k: Register shutdown handler for WCN6750 - rtw89: ser: leave lps with mutex - net: ftmac100: fix endianness-related issues from 'sparse' - iavf: Fix race between iavf_close and iavf_reset_task - wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit() - Bluetooth: btintel: Mark Intel controller to support LE_STATES quirk - regulator: core: Prevent integer underflow - wifi: ath11k: mhi: fix potential memory leak in ath11k_mhi_register() - wifi: mt76: mt7921: reset msta->airtime_ac while clearing up hw value - wifi: rtw89: free unused skb to prevent memory leak - wifi: rtw89: fix rx filter after scan - Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create() - Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times - Bluetooth: hci_event: Make sure ISO events don't affect non-ISO connections - bnxt_en: replace reset with config timestamps - selftests/bpf: Free the allocated resources after test case succeeds - can: bcm: check the result of can_send() in bcm_can_tx() - wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620 - wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620 - wifi: rt2x00: set VGC gain for both chains of MT7620 - wifi: rt2x00: set SoC wmac clock register - wifi: rt2x00: correctly set BBP register 86 for MT7620 - hwmon: (sht4x) do not overflow clamping operation on 32-bit platforms - net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory - bpf: Adjust kprobe_multi entry_ip for CONFIG_X86_KERNEL_IBT - bpf: use bpf_prog_pack for bpf_dispatcher - Bluetooth: L2CAP: Fix user-after-free - net: sched: cls_u32: Avoid memcpy() false-positive warning - libbpf: Fix overrun in netlink attribute iteration - i2c: designware-pci: Group AMD NAVI quirk parts together - r8152: Rate limit overflow messages (CVE-2022-3594) - drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc() - drm: Use size_t type for len variable in drm_copy_field() - drm: Prevent drm_copy_field() to attempt copying a NULL pointer - drm/komeda: Fix handling of atomic commits in the atomic_commit_tail hook - gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init() - drm/amd/display: fix overflow on MIN_I64 definition - ALSA: hda: Fix page fault in snd_hda_codec_shutdown() - ALSA: usb-audio: Add quirk to enable Avid Mbox 3 support - udmabuf: Set ubuf->sg = NULL if the creation of sg table fails - platform/x86: pmc_atom: Improve quirk message to be less cryptic - drm/amd: fix potential memory leak - drm: bridge: dw_hdmi: only trigger hotplug event on link change - drm/amd/display: Fix variable dereferenced before check - drm/amdgpu: Skip the program of MMMC_VM_AGP_* in SRIOV on MMHUB v3_0_0 - drm/admgpu: Skip CG/PG on SOC21 under SRIOV VF - ALSA: usb-audio: Register card at the last interface - drm/vc4: vec: Fix timings for VEC modes - drm: panel-orientation-quirks: Add quirk for Anbernic Win600 - drm: panel-orientation-quirks: Add quirk for Aya Neo Air - platform/chrome: cros_ec: Notify the PM of wake events during resume - platform/x86: hp-wmi: Setting thermal profile fails with 0x06 - platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading - ALSA: intel-dspconfig: add ES8336 support for AlderLake-PS - ASoC: SOF: pci: Change DMI match info to support all Chrome platforms - ASoC: sunxi: sun4i-codec: set debugfs_prefix for CPU DAI component - ASoC: SOF: add quirk to override topology mclk_id - drm/amdgpu: SDMA update use unlocked iterator - drm/amd/display: Fix urgent latency override for DCN32/DCN321 - drm/amd/display: correct hostvm flag - drm/amdgpu: fix initial connector audio value - ASoC: amd: yc: Add ASUS UM5302TA into DMI table - ASoC: amd: yc: Add Lenovo Yoga Slim 7 Pro X to quirks table - drm/meson: reorder driver deinit sequence to fix use-after-free bug - drm/meson: explicitly remove aggregate driver at module unload time - drm/meson: remove drm bridges at aggregate driver unbind time - mmc: sdhci-msm: add compatible string check for sdm670 - drm/dp: Don't rewrite link config when setting phy test pattern - drm/amd/display: Remove interface for periodic interrupt 1 - drm/amd/display: polling vid stream status in hpo dp blank - drm/amdkfd: Fix UBSAN shift-out-of-bounds warning - ARM: dts: imx6: delete interrupts property if interrupts-extended is set - ARM: dts: imx7d-sdb: config the max pressure for tsc2046 - [arm64] dts: qcom: sc7280-idp: correct ADC channel node name and unit address - ARM: dts: imx6q: add missing properties for sram - ARM: dts: imx6dl: add missing properties for sram - ARM: dts: imx6qp: add missing properties for sram - ARM: dts: imx6sl: add missing properties for sram - ARM: dts: imx6sll: add missing properties for sram - ARM: dts: imx6sx: add missing properties for sram - ARM: dts: imx6sl: use tabs for code indent - ARM: dts: imx6sx-udoo-neo: don't use multiple blank lines - [arm64] dts: imx8mm-kontron: Use the VSELECT signal to switch SD card IO voltage - [arm64] dts: imx8mq-librem5: Add bq25895 as max17055's power supply - ARM: orion: fix include path - btrfs: dump extra info if one free space cache has more bitmaps than it should - btrfs: scrub: properly report super block errors in system log - btrfs: scrub: try to fix super block errors - btrfs: don't print information about space cache or tree every remount - btrfs: call __btrfs_remove_free_space_cache_locked on cache load failure - ARM: 9233/1: stacktrace: Skip frame pointer boundary check for call_with_stack() - ARM: 9234/1: stacktrace: Avoid duplicate saving of exception PC value - ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n - clk: zynqmp: Fix stack-out-of-bounds in strncpy` - media: cx88: Fix a null-ptr-deref bug in buffer_prepare() - media: platform: fix some double free in meson-ge2d and mtk-jpeg and s5p-mfc - clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate - RDMA/rxe: Delete error messages triggered by incoming Read requests - usb: host: xhci-plat: suspend and resume clocks - usb: host: xhci-plat: suspend/resume clks for brcm - scsi: lpfc: Fix null ndlp ptr dereference in abnormal exit path for GFT_ID - dmaengine: ti: k3-udma: Reset UDMA_CHAN_RT byte counters to prevent overflow - scsi: 3w-9xxx: Avoid disabling device if failing to enable it - nbd: Fix hung when signal interrupts nbd_start_device_ioctl() - iommu/arm-smmu-v3: Make default domain type of HiSilicon PTT device to identity - usb: gadget: uvc: increase worker prio to WQ_HIGHPRI - power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type() - staging: vt6655: fix potential memory leak - blk-throttle: prevent overflow while calculating wait time - ata: libahci_platform: Sanity check the DT child nodes number - bcache: fix set_at_max_writeback_rate() for multiple attached devices - soundwire: cadence: Don't overwrite msg->buf during write commands - soundwire: intel: fix error handling on dai registration issues - hid: topre: Add driver fixing report descriptor - HID: roccat: Fix use-after-free in roccat_read() - HSI: ssi_protocol: fix potential resource leak in ssip_pn_open() - HID: nintendo: check analog user calibration for plausibility - md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d - usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info() - usb: musb: Fix musb_gadget.c rxstate overflow bug - usb: dwc3: core: add gfladj_refclk_lpm_sel quirk - [arm64] dts: imx8mp: Add snps,gfladj-refclk-lpm-sel quirk to USB nodes - usb: dwc3: core: Enable GUCTL1 bit 10 for fixing termination error after resume bug - Revert "usb: storage: Add quirk for Samsung Fit flash" - io_uring: fix CQE reordering - staging: rtl8723bs: fix potential memory leak in rtw_init_drv_sw() - staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv() - scsi: tracing: Fix compile error in trace_array calls when TRACING is disabled - ext2: Use kvmalloc() for group descriptor array - nvme: handle effects after freeing the request - nvme: copy firmware_rev on each init - nvmet-tcp: add bounds check on Transfer Tag - usb: idmouse: fix an uninit-value in idmouse_open - blk-mq: use quiesced elevator switch when reinitializing queues - hwmon (occ): Retry for checksum failure - fsi: occ: Prevent use after free - fsi: master-ast-cf: Fix missing of_node_put in fsi_master_acf_probe - dmaengine: dw-edma: Remove runtime PM support - usb: typec: ucsi: Don't warn on probe deferral - clk: bcm2835: Round UART input clock up - perf: Skip and warn on unknown format 'configN' attrs - perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc - perf intel-pt: Fix system_wide dummy event for hybrid - io_uring/net: refactor io_sr_msg types - io_uring/net: use io_sr_msg for sendzc - io_uring/net: don't lose partial send_zc on fail - io_uring/net: rename io_sendzc() - io_uring/net: don't skip notifs for failed requests - io_uring/net: fix notif cqe reordering - mm: hugetlb: fix UAF in hugetlb_handle_userfault - net: ieee802154: return -EINVAL for unknown addr type - ALSA: usb-audio: Fix last interface check for registration - blk-wbt: fix that 'rwb->wc' is always set to 1 in wbt_init() - net: ethernet: ti: davinci_mdio: fix build for mdio bitbang uses - Revert "drm/amd/display: correct hostvm flag" - Revert "net/ieee802154: reject zero-sized raw_sendmsg()" - net/ieee802154: don't warn zero-sized raw_sendmsg() - powerpc/64s/interrupt: Fix lost interrupts when returning to soft-masked context - drm/amd/display: Fix build breakage with CONFIG_DEBUG_FS=n - io_uring: fix fdinfo sqe offsets calculation - io_uring/rw: ensure kiocb_end_write() is always called - [arm64] dts: qcom: sc8280xp-pmics: Remove reg entry & use correct node name for pmc8280c_lpg node . [ Zhang Ning ] * [arm64] disable CONFIG_ARM_CPUIDLE, it's arm only . [ Salvatore Bonaccorso ] * Bump ABI to 2 * [rt] Refresh "serial: 8250: implement write_atomic"
-
Lorenzo "Palinuro" Faletra authored
-
- 18 Oct, 2022 2 commits
-
-
Lorenzo "Palinuro" Faletra authored
linux (6.0.2-1parrot1) parrot-updates; urgency=medium . * Import new Debian unstable version. * Use gcc-11 instead of gcc-12. * perf: Disable use of libopencsd, as bullseye's version is too old * Bump Parrot ABI number to 14parrot1. * Increase timer frequency to 300Hz. * Disable generation of signed kernel images. * Import Parrot Wifi patches. . linux (6.0.2-1) unstable; urgency=high . * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.0.1 - xsk: Inherit need_wakeup flag for shared sockets - fs: fix UAF/GPF bug in nilfs_mdt_destroy - fix coredump breakage - sparc: Unbreak the build - Makefile.extrawarn: Move -Wcast-function-type-strict to W=1 - hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero - docs: update mediator information in CoC docs - hwmon: (aquacomputer_d5next) Fix Quadro fan speed offsets - usb: mon: make mmapped memory read only - USB: serial: ftdi_sio: fix 300 bps rate for SIO - gpiolib: acpi: Add support to ignore programming an interrupt - gpiolib: acpi: Add a quirk for Asus UM325UAZ - RISC-V: Print SSTC in canonical order - bpf: Gate dynptr API behind CAP_BPF - net: ethernet: mtk_eth_soc: fix state in __mtk_foe_entry_clear - bpf: Fix resetting logic for unreferenced kptrs - Bluetooth: use hdev->workqueue when queuing hdev->{cmd,ncmd}_timer works https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.0.2 - nilfs2: fix NULL pointer dereference at nilfs_bmap_lookup_at_level() - nilfs2: fix use-after-free bug of struct nilfs_root - nilfs2: fix leak of nilfs_root in case of writer thread creation failure - nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure - nvme-pci: set min_align_mask before calculating max_hw_sectors - random: restore O_NONBLOCK support - random: clamp credited irq bits to maximum mixed - ALSA: hda: Fix position reporting on Poulsbo - ALSA: hda/realtek: Add quirk for HP Zbook Firefly 14 G9 model - efi: Correct Macmini DMI match in uefi cert quirk - scsi: qla2xxx: Revert "scsi: qla2xxx: Fix response queue handler reading stale packets" - scsi: qla2xxx: Fix response queue handler reading stale packets - scsi: stex: Properly zero out the passthrough command structure - USB: serial: qcserial: add new usb-id for Dell branded EM7455 - Revert "USB: fixup for merge issue with "usb: dwc3: Don't switch OTG -> peripheral if extcon is present"" - Revert "usb: dwc3: Don't switch OTG -> peripheral if extcon is present" - Revert "powerpc/rtas: Implement reentrant rtas call" - Revert "crypto: qat - reduce size of mapped region" - random: avoid reading two cache lines on irq randomness - random: use expired timer rather than wq for mixing fast pool - wifi: cfg80211: fix u8 overflow in cfg80211_update_notlisted_nontrans() CVE-2022-41674 - wifi: cfg80211/mac80211: reject bad MBSSID elements - wifi: mac80211: fix MBSSID parsing use-after-free CVE-2022-42719 - wifi: cfg80211: ensure length byte is present before access - wifi: cfg80211: fix BSS refcounting bugs CVE-2022-42720 - wifi: cfg80211: avoid nontransmitted BSS list corruption CVE-2022-42721 - wifi: mac80211_hwsim: avoid mac80211 warning on bad rate - wifi: mac80211: fix crash in beacon protection for P2P-device CVE-2022-42722 - wifi: cfg80211: update hidden BSSes to avoid WARN_ON - mctp: prevent double key removal and unref - Input: xpad - add supported devices as contributed on github - Input: xpad - fix wireless 360 controller breaking after suspend - misc: pci_endpoint_test: Aggregate params checking for xfer - misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic . [ Bastian Blank] * [cloud] Enable INTEGRITY. . linux (6.0-1~exp1) experimental; urgency=medium . * New upstream release: https://kernelnewbies.org/Linux_6.0 . [ Salvatore Bonaccorso ] * drivers/hwmon: Enable SENSORS_SHT3x and SENSORS_SHT4x as module (Closes: #1016092) * [rt] Update to 6.0-rt11 . [ Diederik de Haas ] * [amd64] drivers/dma: Enable INTEL_IDXD as module and INTEL_IDXD_SVM as builtin (Closes: #1021337) . [ Ben Hutchings ] * d/salsa-ci.yml: Use !reference to include scripts from common pipeline * d/salsa-ci.yml: Remove obsolete lintian error suppressions . [ Christopher Obbard ] * [arm64] drivers/regulator: Enable MP8859 as module . [ Mateusz Łukasik ] * Compile with gcc-12 on all architectures * d/salsa-ci.yml: Add linux-compiler-* packages to build-signed job artifacts . linux (6.0~rc7-1~exp1) experimental; urgency=medium . * New upstream release candidate . [ Ben Hutchings ] * Rewrite "tools/perf: pmu-events: Fix reproducibility" for new Python generator * Build-depend on python3-setuptools for linux-perf * udeb: Move ledtrig-audio from sound-modules to kernel-image * d/bin/gencontrol_signed.py: Fix source package name in Built-Using field * [rt] Update to 6.0-rc5-rt7 . [ Didier Raboud ] * d/lib/python/debian_linux: Add two more known fields to {Source,Binary}Package . [ Diederik de Haas ] * [arm64] drivers/gpu/drm/v3d: Enable DRM_V3D as module (Closes: #977441) * drivers/nfc/nxp-nci: Enable NFC_NXP_NCI and NFC_NXP_NCI_I2C and reenable NFC_NCI as module (Closes: #1020276) . [ Frieder Schrempf ] * [arm64] Add nvmem-imx-ocotp driver to kernel-image udeb * [arm64] Add imx2_wdt driver to kernel-image udeb * udeb: Also add drivers in subdirectories of drivers/net/phy * [arm64] Add i2c-imx to i2c-modules udeb . [ Bastian Blank ] * Make cross build of signed packages self contained. . [ Zhang Ning ] * [armhf] enable multiple configs for rk3288 * [config] enable CONFIG_RTL8723BS for all arch . [ Zhang Boyang ] * [riscv64] Enable AMDGPU
-
Lorenzo "Palinuro" Faletra authored
-
- 13 Oct, 2022 2 commits
-
-
Lorenzo "Palinuro" Faletra authored
linux (5.19.11-11parrot1) parrot-updates; urgency=medium . * Import new Debian backports version. * Bump Parrot ABI number to 14parrot1. * Increase timer frequency to 300Hz. * Disable generation of signed kernel images. * Import Parrot Wifi patches. . linux (5.19.11-1~bpo11+1) bullseye-backports; urgency=medium . * Rebuild for bullseye-backports: - Change ABI number to 0.deb11.2 - Disable building rtla, since bullseye's libtraceevent and libtracefs are too old . linux (5.19.11-1) unstable; urgency=medium . * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.19.7 - [arm*] drm/vc4: hdmi: Rework power up - [arm*] drm/vc4: hdmi: Depends on CONFIG_PM - crypto: lib - remove unneeded selection of XOR_BLOCKS - docs: kerneldoc-preamble: Test xeCJK.sty before loading - [arm64] errata: Add Cortex-A510 to the repeat tlbi list - Bluetooth: L2CAP: Fix build errors in some archs - Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()" - HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report - media: pvrusb2: fix memory leak in pvr_probe - USB: gadget: Fix use-after-free Read in usb_udc_uevent() - HID: hidraw: fix memory leak in hidraw_release() - net: fix refcount bug in sk_psock_get (2) - fbdev: fb_pm2fb: Avoid potential divide by zero error - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead - bpf: Don't redirect packets with invalid pkt_len - mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse - ALSA: usb-audio: Add quirk for LH Labs Geek Out HD Audio 1V5 - HID: input: fix uclogic tablets - HID: add Lenovo Yoga C630 battery quirk - [amd64] HID: AMD_SFH: Add a DMI quirk entry for Chromebooks - HID: Add Apple Touchbar on T2 Macs in hid_have_special_driver list - HID: asus: ROG NKey: Ignore portion of 0x5a report - HID: nintendo: fix rumble worker null pointer deref - HID: thrustmaster: Add sparco wheel and fix array length - [amd64] HID: intel-ish-hid: ipc: Add Meteor Lake PCI device ID - ASoC: rt5640: Fix the JD voltage dropping issue - rtla: Fix tracer name - drm/amd/display: Add a missing register field for HPO DP stream encoder - drm/amd/display: Device flash garbage before get in OS - drm/amd/display: Avoid MPC infinite loop - drm/amd/display: Fix HDMI VSIF V3 incorrect issue - drm/amd/display: For stereo keep "FLIP_ANY_FRAME" - drm/amd/display: clear optc underflow before turn off odm clock - drm/amd/display: Fix TDR eDP and USB4 display light up issue - drm/amd/pm: skip pptable override for smu_v13_0_7 - drm/amd/pm: Fix a potential gpu_metrics_table memory leak - ksmbd: return STATUS_BAD_NETWORK_NAME error status if share is not configured - neigh: fix possible DoS due to net iface start/stop loop - ALSA: hda/realtek: Add quirks for ASUS Zenbooks using CS35L41 - [s390x] hypfs: avoid error message under KVM - ksmbd: don't remove dos attribute xattr on O_TRUNC open - drm/amdgpu: disable 3DCGCG/CGLS temporarily due to stability issue - drm/amd/pm: add missing ->fini_microcode interface for Sienna Cichlid - drm/amd/pm: add missing ->fini_xxxx interfaces for some SMU13 asics - drm/amd/display: Fix pixel clock programming - drm/amdgpu: Increase tlb flush timeout for sriov - drm/amd/display: Fix plug/unplug external monitor will hang while playback MPO video - drm/amd/display: avoid doing vm_init multiple time - drm/amdgpu: Add decode_iv_ts helper for ih_v6 block - drm/amdgpu: Add secure display TA load for Renoir - drm/amdgpu: Fix interrupt handling on ih_soft ring - netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y - [x86] platform/x86: serial-multi-instantiate: Add CLSA0101 Laptop - ALSA: hda/cs8409: Support new Dolphin Variants - btrfs: move lockdep class helpers to locking.c - btrfs: fix lockdep splat with reloc root extent buffers - btrfs: tree-checker: check for overlapping extent items - [arm*] android: binder: fix lockdep check on clearing vma - net/af_packet: check len when min_header_len equals to 0 - net: neigh: don't call kfree_skb() under spin_lock_irqsave() - [arm64] cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.19.8 - [arm64] drm/msm/dp: make eDP panel as the first connected connector - [arm64] drm/msm/dsi: fix the inconsistent indenting - [arm64] drm/msm/dpu: populate wb or intf before reset_intf_cfg - [arm64] drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4 - [arm64] drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg - [arm64] drm/msm/dsi: Fix number of regulators for SDM660 - [x86] platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask - [x86] platform/x86: x86-android-tablets: Fix broken touchscreen on Chuwi Hi8 with Windows BIOS - xsk: Fix corrupted packets for XDP_SHARED_UMEM - [arm64] drm/msm/gpu: Drop qos request if devm_devfreq_add_device() fails - iio: adc: mcp3911: make use of the sign bit - skmsg: Fix wrong last sg check in sk_msg_recvmsg() - bpf: Restrict bpf_sys_bpf to CAP_PERFMON - ip_tunnel: Respect tunnel key's "flow_flags" in IP tunnels - bpf, cgroup: Fix kernel BUG in purge_effective_progs - [x86] drm/i915/gvt: Fix Comet Lake - ieee802154/adf7242: defer destroy_workqueue call - bpf: Fix a data-race around bpf_jit_limit. - [x86] drm/i915/ttm: fix CCS handling - [x86] drm/i915/display: avoid warnings when registering dual panel backlight - ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array - wifi: cfg80211: debugfs: fix return type in ht40allow_map_read() - xhci: Fix null pointer dereference in remove if xHC has only one roothub - Revert "xhci: turn off port power in shutdown" - bpf: Allow helpers to accept pointers with a fixed size - bpf: Tidy up verifier check_func_arg() - bpf: Do mark_chain_precision for ARG_CONST_ALLOC_SIZE_OR_ZERO - Bluetooth: hci_event: Fix vendor (unknown) opcode status handling - Bluetooth: hci_sync: Fix suspend performance regression - Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt - Bluetooth: hci_sync: hold hdev->lock when cleanup hci_conn - [arm64,armhf] net: smsc911x: Stop and start PHY during suspend and resume - openvswitch: fix memory leak at failed datapath creation - nfp: flower: fix ingress police using matchall filter - [x86] drm/i915: fix null pointer dereference - net: sched: tbf: don't call qdisc_put() while holding tree lock - net/sched: fix netdevice reference leaks in attach_default_qdiscs() - net: phy: micrel: Make the GPIO to be non-exclusive - sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb - tcp: annotate data-race around challenge_timestamp - Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb" - net/smc: Remove redundant refcount increase - soundwire: qcom: fix device status array range - mm/slab_common: Deleting kobject in kmem_cache_destroy() without holding slab_mutex/cpu_hotplug_lock - [arm64] serial: fsl_lpuart: RS485 RTS polariy is inverse - staging: rtl8712: fix use after free bugs - staging: r8188eu: Add Rosewill USB-N150 Nano to device tables - staging: r8188eu: add firmware dependency - [powerpc*] rtas: Fix RTAS MSR[HV] handling for Cell - vt: Clear selection before changing the font - [arm64] tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete - Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag - iio: ad7292: Prevent regulator double disable - iio: adc: mcp3911: correct "microchip,device-addr" property - iio: adc: mcp3911: use correct formula for AD conversion - firmware_loader: Fix use-after-free during unregister - firmware_loader: Fix memory leak in firmware upload - USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id - landlock: Fix file reparenting without explicit LANDLOCK_ACCESS_FS_REFER - mmc: core: Fix UHS-I SD 1.8V workaround branch - mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure - [arm*] binder: fix UAF of ref->proc caused by race condition - [arm*] binder: fix alloc->vma_vm_mm null-ptr dereference - cifs: fix small mempool leak in SMB2_negotiate() - [x86] KVM: VMX: Heed the 'msr' argument in msr_write_intercepted() - [armhf] clk: ti: Fix missing of_node_get() ti_find_clock_provider() - [x86] drm/i915/reg: Fix spelling mistake "Unsupport" -> "Unsupported" - clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops - Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops" - clk: core: Fix runtime PM sequence in clk_core_unprepare() - [arm64,armhf] Input: rk805-pwrkey - fix module autoloading - [arm*] clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate - [arm*] clk: bcm: rpi: Prevent out-of-bounds access - [arm*] clk: bcm: rpi: Add missing newline - [arm*] hwmon: (gpio-fan) Fix array out of bounds access - [arm64,armhf] gpio: pca953x: Add mutex_lock for regcache sync in PM - [x86] KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES - xen/grants: prevent integer overflow in gnttab_dma_alloc_pages() - mm: pagewalk: Fix race between unmap and page walker - xen-blkback: Advertise feature-persistent as user requested - xen-blkfront: Advertise feature-persistent as user requested - xen-blkfront: Cache feature_persistent value before advertisement - [x86] thunderbolt: Use the actual buffer in tb_async_error() - [x86] thunderbolt: Check router generation before connecting xHCI - [arm64] usb: dwc3: pci: Add support for Intel Raptor Lake - media: mceusb: Use new usb_control_msg_*() routines - xhci: Add grace period after xHC start to prevent premature runtime suspend. - [arm64,armhf] usb: dwc3: disable USB core PHY management - [arm64,armhf] usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop - [arm64,armhf] usb: dwc3: fix PHY disable sequence - USB: serial: ch341: fix lost character on LCR updates - USB: serial: ch341: fix disabled rx timer on older devices - USB: serial: cp210x: add Decagon UCA device id - USB: serial: option: add support for OPPO R11 diag port - USB: serial: option: add Quectel EM060K modem - USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode - Revert "usb: typec: ucsi: add a common function ucsi_unregister_connectors()" - usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles - usb: typec: tcpm: Return ENOTSUPP for power supply prop writes - [arm*] usb: dwc2: fix wrong order of phy_power_on and phy_init - USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020) - usb-storage: Add ignore-residue quirk for NXP PN7462AU - [s390x] hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages - [s390x] fix nospec table alignments - USB: core: Prevent nested device-reset calls - usb: gadget: f_uac2: fix superspeed transfer - usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS - USB: gadget: Fix obscure lockdep violation for udc_mutex - dma-buf/dma-resv: check if the new fence is really later - driver core: Don't probe devices after bus_type.match() probe deferral - wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected - wifi: mac80211: Fix UAF in ieee80211_scan_rx() - ip: fix triggering of 'icmp redirect' - net: Use u64_stats_fetch_begin_irq() for stats fetch. - net: mac802154: Fix a condition in the receive path - ALSA: memalloc: Revive x86-specific WC page allocations again - ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298 - ALSA: seq: oss: Fix data-race for max_midi_devs access - ALSA: seq: Fix data-race at module auto-loading - [x86] drm/i915/backlight: Disable pps power hook for aux based backlight - [x86] drm/i915/guc: clear stalled request after a reset - [x86] drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk - [x86] drm/i915: Skip wm/ddb readout for disabled pipes - tty: n_gsm: add sanity check for gsm->receive in gsm_receive_buf() - tty: n_gsm: initialize more members at gsm_alloc_mux() - tty: n_gsm: replace kicktimer with delayed_work - tty: n_gsm: avoid call of sleeping functions from atomic context https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.19.9 - efi: libstub: Disable struct randomization - efi: capsule-loader: Fix use-after-free in efi_capsule_write (CVE-2022-40307) - wifi: mt76: mt7921e: fix crash in chip reset fail - wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd() - fs: only do a memory barrier for the first set_buffer_uptodate() - scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX - scsi: core: Allow the ALUA transitioning state enough time - scsi: megaraid_sas: Fix double kfree() - drm/gem: Fix GEM handle release errors - drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini - drm/amdgpu: fix hive reference leak when adding xgmi device - drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup. - drm/amdgpu: Remove the additional kfd pre reset call for sriov - drm/radeon: add a force flush to delay work when radeon - scsi: ufs: core: Reduce the power mode change timeout - [hppa/parisc64] Revert "parisc: Show error if wrong 32/64-bit compiler is being used" - [hppa/parisc64] parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources() - [hppa/parisc64] parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines - [arm64] errata: add detection for AMEVCNTR01 incrementing incorrectly - netfilter: conntrack: work around exceeded receive window - [amd64] thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR - cpufreq: check only freq_table in __resolve_freq() - net/core/skbuff: Check the return value of skb_copy_bits() - md: Flush workqueue md_rdev_misc_wq in md_alloc() - fbdev: fbcon: Destroy mutex on freeing struct fb_info - drm/amdgpu: add sdma instance check for gfx11 CGCG - drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly - ALSA: pcm: oss: Fix race at SNDCTL_DSP_SYNC - ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc() - ALSA: hda: Once again fix regression of page allocations with IOMMU - ALSA: aloop: Fix random zeros in capture data when using jiffies timer - ALSA: usb-audio: Split endpoint setups for hw_params and prepare - ALSA: usb-audio: Clear fixed clock rate at closing EP - ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface() - tracefs: Only clobber mode/uid/gid on remount if asked - tracing: hold caller_addr to hardirq_{enable,disable}_ip - tracing: Fix to check event_mutex is held while accessing trigger list - btrfs: zoned: set pseudo max append zone limit in zone emulation mode - btrfs: zoned: fix API misuse of zone finish waiting - vfio/type1: Unpin zero pages - kprobes: Prohibit probes in gate area - debugfs: add debugfs_lookup_and_remove() - drm/amd/display: fix memory leak when using debugfs_lookup() - driver core: fix driver_set_override() issue with empty strings - nvmet: fix a use-after-free - [x86] drm/i915/bios: Copy the whole MIPI sequence block - [x86] drm/i915/slpc: Let's fix the PCODE min freq table setup for SLPC - [x86] drm/i915: Implement WaEdpLinkRateDataReload - scsi: mpt3sas: Fix use-after-free warning - scsi: lpfc: Add missing destroy_workqueue() in error path - cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree - cgroup: Fix threadgroup_rwsem <-> cpus_read_lock() deadlock - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() - smb3: missing inode locks in zero range - [arm64] Revert "soc: imx: imx8m-blk-ctrl: set power device name" - regmap: spi: Reserve space for register address/padding - [arm64] dts: imx8mp-venice-gw74xx: fix sai2 pin settings - [arm64] dts: ls1028a-qds-65bb: don't use in-band autoneg for 2500base-x - [arm64] soc: imx: gpcv2: Assert reset before ungating clock - [arm64] dts: imx8mm-venice-gw7901: fix port/phy validation - regulator: core: Clean up on enable failure - [arm64] tee: fix compiler warning in tee_shm_register() - RDMA/irdma: Fix drain SQ hang with no completion - RDMA/cma: Fix arguments order in net device validation - [arm64] RDMA/hns: Fix supported page size - [arm64] RDMA/hns: Fix wrong fixed value of qp->rq.wqe_shift - [arm64] RDMA/hns: Remove the num_qpc_timer variable - netfilter: br_netfilter: Drop dst references before setting. - netfilter: nf_tables: clean up hook list when offload flags check fails - netfilter: nf_conntrack_irc: Fix forged IP logic (CVE-2022-2663) - RDMA/srp: Set scmnd->result only when scmnd is not NULL - ALSA: usb-audio: Inform the delayed registration more properly - ALSA: usb-audio: Register card again for iface over delayed_register option - rxrpc: Fix ICMP/ICMP6 error handling - rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2() - afs: Use the operation issue time instead of the reply time for callbacks - [arm64] Revert "net: phy: meson-gxl: improve link-up behavior" - sch_sfb: Don't assume the skb is still around after enqueueing to child - tipc: fix shift wrapping bug in map_get() - net: introduce __skb_fill_page_desc_noacc - tcp: TX zerocopy should not sense pfmemalloc status - ice: Fix DMA mappings leak - ice: use bitmap_free instead of devm_kfree - i40e: Fix kernel crash during module removal - iavf: Detach device during reset task - xen-netback: only remove 'hotplug-status' when the vif is actually destroyed - block: don't add partitions if GD_SUPPRESS_PART_SCAN is set - bonding: use unspecified address if no available link local address - bonding: add all node mcast address when slave up - ipv6: sr: fix out-of-bounds read when setting HMAC data. - IB/core: Fix a nested dead lock as part of ODP flow - RDMA/mlx5: Set local port to one when accessing counters - btrfs: zoned: fix mounting with conventional zones - erofs: fix error return code in erofs_fscache_{meta_,}read_folio - erofs: fix pcluster use-after-free on UP platforms - nvme-tcp: fix UAF when detecting digest errors - nvme-tcp: fix regression that causes sporadic requests to time out - tcp: fix early ETIMEDOUT after spurious non-SACK RTO - btrfs: fix the max chunk size and stripe length calculation - nvmet: fix mar and mor off-by-one errors - RDMA/irdma: Report the correct max cqes from query device - RDMA/irdma: Return error on MR deregister CQP failure - RDMA/irdma: Return correct WC error for bind operation failure - RDMA/irdma: Report RNR NAK generation in device caps - [arm64] net: dsa: felix: disable cut-through forwarding for frames oversized for tc-taprio - [arm64] net: dsa: felix: access QSYS_TAG_CONFIG under tas_lock in vsc9959_sched_speed_set - net/smc: Fix possible access to freed memory in link clear - io_uring: recycle kbuf recycle on tw requeue - net: phy: lan87xx: change interrupt src of link_up to comm_ready - sch_sfb: Also store skb len before calling child enqueue - lsm,io_uring: add LSM hooks for the new uring_cmd file op - selinux: implement the security_uring_cmd() LSM hook - i40e: Refactor tc mqprio checks - i40e: Fix ADQ rate limiting for PF - net: bonding: replace dev_trans_start() with the jiffies of the last ARP/NS - bonding: accept unsolicited NA message - swiotlb: avoid potential left shift overflow - [amd64] iommu/amd: use full 64-bit value in build_completion_wait() - [s390x] boot: fix absolute zero lowcore corruption on boot - time64.h: consolidate uses of PSEC_PER_NSEC - [arm64] net: dsa: felix: tc-taprio intervals smaller than MTU should send at least one packet - [amd64] iommu/vt-d: Fix possible recursive locking in intel_iommu_init() - [arm64] Revert "arm64: kasan: Revert "arm64: mte: reset the page tag in page->flags"" - [x86] hwmon: (asus-ec-sensors) add support for Strix Z690-a D4 - [x86] hwmon: (asus-ec-sensors) add support for Maximus XI Hero - [x86] hwmon: (asus-ec-sensors) add missing sensors for X570-I GAMING - [x86] hwmon: (asus-ec-sensors) add definitions for ROG ZENITH II EXTREME - [x86] hwmon: (asus-ec-sensors) autoload module via DMI data - [arm64] bti: Disable in kernel BTI when cross section thunks are broken - [amd64] iommu/vt-d: Correctly calculate sagaw value of IOMMU - iommu: Fix false ownership failure on AMD systems with PASID activated - drm/amd/display: Add SMU logging code - drm/amd/display: Removing assert statements for Linux https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.19.10 - [amd64] iommu/vt-d: Fix kdump kernels boot failure with scalable mode - net/mlx5: Introduce ifc bits for using software vhca id - net/mlx5: Use software VHCA id when it's supported - RDMA/mlx5: Rely on RoCE fw cap instead of devlink when setting profile - RDMA/mlx5: Add a umr recovery flow - RDMA/mlx5: Fix UMR cleanup on error flow of driver init - [amd64] ACPI: resource: skip IRQ override on AMD Zen platforms - Input: goodix - add support for GT1158 - [x86] platform/surface: aggregator_registry: Add support for Surface Laptop Go 2 - [arm64] drm/msm/rd: Fix FIFO-full deadlock - peci: cpu: Fix use-after-free in adev_release() - [x86] kvm: x86: mmu: Always flush TLBs when enabling dirty logging - [amd64] hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message - Bluetooth: MGMT: Fix Get Device Flags - tg3: Disable tg3 device on system reboot to avoid triggering AER - r8152: add PID for the Lenovo OneLink+ Dock - ieee802154: cc2520: add rc code in cc2520_tx() - Input: iforce - add support for Boeder Force Feedback Wheel - drm/amdgpu: disable FRU access on special SIENNA CICHLID card - drm/amd/pm: use vbios carried pptable for all SMU13.0.7 SKUs - nvme-pci: add NVME_QUIRK_BOGUS_NID for Lexar NM610 - nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change() - drm/amd/amdgpu: skip ucode loading if ucode_size == 0 - [x86] platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes - [x86] platform/x86: asus-wmi: Increase FAN_CURVE_BUF_LEN to 32 - RDMA/irdma: Use s/g array in post send only when its valid - Input: goodix - add compatible string for GT1158 https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.19.11 - of: fdt: fix off-by-one error in unflatten_dt_nodes() - [arm64,armhf] pinctrl: rockchip: Enhance support for IRQ_TYPE_EDGE_BOTH - [arm64] pinctrl: sunxi: Fix name for A100 R_PIO - SUNRPC: Fix call completion races with call_decode() - NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0 - [arm64] gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx - NFSv4.2: Update mode bits after ALLOCATE and DEALLOCATE - Revert "SUNRPC: Remove unreachable error condition" - [arm64,armhf] drm/panel-edp: Fix delays for Innolux N116BCA-EA1 - [arm64] drm/meson: Correct OSD1 global alpha value - [arm64] drm/meson: Fix OSD1 RGB to YCbCr coefficient - [x86] drm/i915/vdsc: Set VDSC PIC_HEIGHT before using for DP DSC - [x86] drm/i915/guc: Don't update engine busyness stats too frequently - [x86] drm/i915/guc: Cancel GuC engine busyness worker synchronously - block: blk_queue_enter() / __bio_queue_enter() must return -EAGAIN for nowait - [hppa/parisc] ccio-dma: Add missing iounmap in error path in ccio_probe() - of/device: Fix up of_dma_configure_id() stub - io_uring/msg_ring: check file type before putting - cifs: revalidate mapping when doing direct writes - cifs: don't send down the destination address to sendmsg for a SOCK_STREAM - cifs: always initialize struct msghdr smb_msg completely - blk-lib: fix blkdev_issue_secure_erase - [hppa] parisc: Allow CONFIG_64BIT with ARCH=parisc - tools/include/uapi: Fix <asm/errno.h> for parisc and xtensa - [x86] drm/i915/gt: Fix perf limit reasons bit positions - [x86] drm/i915: Set correct domains values at _i915_vma_move_to_active - drm/amdgpu: make sure to init common IP before gmc - drm/amdgpu: Don't enable LTR if not supported - drm/amdgpu: move nbio ih_doorbell_range() into ih code for vega - drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega - net: Find dst with sk's xfrm policy not ctl_sk - dt-bindings: apple,aic: Fix required item "apple,fiq-index" in affinity description - cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all() - ALSA: hda/sigmatel: Keep power up while beep is enabled - ALSA: hda/sigmatel: Fix unused variable warning for beep power change - [amd64] Revert "iommu/vt-d: Fix possible recursive locking in intel_iommu_init()" . [ Vincent Blut ] * [armhf] sound/soc/rockchip: Enable SND_SOC_RK3288_HDMI_ANALOG as module (Closes: #1019143) . [ Salvatore Bonaccorso ] * [x86] drivers/edac: Enable EDAC_I10NM as module (Closes: #1019248) * d/b/check-patches.sh: Use grep -(E|F) instead of deprecated (e|f)grep * d/templates/image.bug/include-model: Use grep -E instead of deprecated egrep * Bump ABI to 2 * Refresh "Export symbols needed by Android drivers" * Revert "[hppa/parisc64] Drop explicit setting of 64BIT" . [ Ben Hutchings ] * debian/bin/genpatch-rt: Change argument parsing to use argparse * debian/bin/genpatch-rt: Add option to disable signature verification * linux-headers: Skip exact compiler version comparison (Closes: #1019749) . [ Aurelien Jarno ] * [arm64] Add support for misalignment fixups for multiword loads from next branch. Enable COMPAT_ALIGNMENT_FIXUPS. . linux (5.19.6-1) unstable; urgency=medium . * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.19.1 https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.19.2 - Revert "net: usb: ax88179_178a needs FLAG_SEND_ZLP" (Closes: #1017894) https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.19.3 https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.19.4 https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.19.5 https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.19.6 - mm/gup: fix FOLL_FORCE COW security issue and remove FOLL_COW (CVE-2022-2590) - af_key: Do not call xfrm_probe_algs in parallel (CVE-2022-3028) - [x86] nospec: Unwreck the RSB stuffing - [x86] nospec: Fix i386 RSB stuffing (Closes: #1017425) - bpf: Don't use tnum_range on array range checking for poke descriptors (CVE-2022-2905) . [ Ben Hutchings ] * d/tests/kbuild: Fix default-flavour lookup for arches with no featuresets * d/tests/kbuild: Make flavour lookup verbose * d/lib/python/debian_linux, d/templates: Use variable for binary package name * lintian: Update overrides in linux-image-*-dbg for lintian 2.115 * d/{signing_templates/,}rules.real: Run dh_lintian for all packages * [hppa,mips,mipsel,powerpc] lintian: Override error for 64-bit kernels * [mips64el,mipsel,ppc64el] lintian: Override error for unstripped vmlinux * [arm64] lintian: Override errors for vdso32.so in linux-image-*-dbg * android: Remove CONFIG_ANDROID: - Drop "wireguard: Clear keys after suspend despite CONFIG_ANDROID=y" - pm/sleep: Add PM_USERSPACE_AUTOSLEEP Kconfig - remove CONFIG_ANDROID - Enable/disable ANDROID_BINDER_IPC to match previous configuration . [ Vincent Blut ] * [x86] drivers/hwmon: Enable SENSORS_ASUS_WMI and SENSORS_ASUS_EC as modules * [x86] drivers/platform/x86: Enable NVIDIA_WMI_EC_BACKLIGHT as module (Closes: #1017972) * [arm64] drivers/spi: Enable SPI_GPIO and SPI_SUN6I as modules (Closes: #1016807) . [ Diederik de Haas ] * [arm64] drivers/gpu/drm/rockchip: Explicitly enable ROCKCHIP_VOP . [ Helge Deller ] * [hppa] Drop CONFIG_PATA_LEGACY for hppa architecture . [ Salvatore Bonaccorso ] * [rt] Refresh "rcutorture: Also force sched priority to timersd on boosting test." * Drop setting of CRYPTO_BLAKE2S crypto: blake2s shash module was removed upstream. * [arm] arch/arm/crypto: Enable CRYPTO_BLAKE2S_ARM * certs: Rotate to use the "Debian Secure Boot Signer 2022 - linux" certificate (Closes: #1018752) * Set ABI to 1 * [hppa/parisc64] Drop explicit setting of 64BIT . linux (5.19-1~exp1) experimental; urgency=medium . * New upstream release: https://kernelnewbies.org/Linux_5.19 - [i386] x86/asm/32: Fix ANNOTATE_UNRET_SAFE use on 32-bit (fixes FTBFS) . [ Ben Hutchings ] * [riscv64] Disable COMPAT (fixes FTBFS) * linux-kbuild: Add check-local-export script (Closes: #1014633) * [x86,arm64,armhf] Add rtla package for Real-Time Linux Analysis tools . [ Uwe Kleine-König ] * Enable IOSM modem driver as a module. . [ Diederik de Haas ] * [arm64] drivers/crypto: Enable CRYPTO_DEV_ROCKCHIP as module . [ Salvatore Bonaccorso ] * [rt] Update to 5.19-rc8-rt9 . [ Vincent Blut ] * [amd64] crypto: Enable CRYPTO_NHPOLY1305_SSE2 and CRYPTO_NHPOLY1305_AVX2 as modules (Closes: #1013870) . linux (5.19~rc6-1~exp1) experimental; urgency=medium . * New upstream release candidate . [ Ben Hutchings ] * [mips64el/mips64r2el] Fix package description * [x86] Add mitigations for RETbleed on AMD/Hygon (CVE-2022-29900) and Intel (CVE-2022-29901) processors: - x86/kvm/vmx: Make noinstr clean - x86/cpufeatures: Move RETPOLINE flags to word 11 - x86/retpoline: Cleanup some #ifdefery - x86/retpoline: Swizzle retpoline thunk - x86/retpoline: Use -mfunction-return - x86: Undo return-thunk damage - x86,objtool: Create .return_sites - x86,static_call: Use alternative RET encoding - x86/ftrace: Use alternative RET encoding - x86/bpf: Use alternative RET encoding - x86/kvm: Fix SETcc emulation for return thunks - x86/vsyscall_emu/64: Don't use RET in vsyscall emulation - x86/sev: Avoid using __x86_return_thunk - x86: Use return-thunk in asm code - x86/entry: Avoid very early RET - objtool: Treat .text.__x86.* as noinstr - x86: Add magic AMD return-thunk - x86/bugs: Report AMD retbleed vulnerability - x86/bugs: Add AMD retbleed= boot parameter - x86/bugs: Enable STIBP for JMP2RET - x86/bugs: Keep a per-CPU IA32_SPEC_CTRL value - x86/entry: Add kernel IBRS implementation - x86/bugs: Optimize SPEC_CTRL MSR writes - x86/speculation: Add spectre_v2=ibrs option to support Kernel IBRS - x86/bugs: Split spectre_v2_select_mitigation() and spectre_v2_user_select_mitigation() - x86/bugs: Report Intel retbleed vulnerability - intel_idle: Disable IBRS during long idle - objtool: Update Retpoline validation - x86/xen: Rename SYS* entry points - x86/xen: Add UNTRAIN_RET - x86/bugs: Add retbleed=ibpb - x86/bugs: Do IBPB fallback check only once - objtool: Add entry UNRET validation - x86/cpu/amd: Add Spectral Chicken - x86/speculation: Fix RSB filling with CONFIG_RETPOLINE=n - x86/speculation: Fix firmware entry SPEC_CTRL handling - x86/speculation: Fix SPEC_CTRL write on SMT state change - x86/speculation: Use cached host SPEC_CTRL value for guest entry/exit - x86/speculation: Remove x86_spec_ctrl_mask - objtool: Re-add UNWIND_HINT_{SAVE_RESTORE} - KVM: VMX: Flatten __vmx_vcpu_run() - KVM: VMX: Convert launched argument to flags - KVM: VMX: Prevent guest RSB poisoning attacks with eIBRS - KVM: VMX: Fix IBRS handling after vmexit - x86/speculation: Fill RSB on vmexit for IBRS - KVM: VMX: Prevent RSB underflow before vmenter - x86/common: Stamp out the stepping madness - x86/cpu/amd: Enumerate BTC_NO - x86/retbleed: Add fine grained Kconfig knobs - x86/bugs: Add Cannon lake to RETBleed affected CPU list - x86/entry: Move PUSH_AND_CLEAR_REGS() back into error_entry - x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported - x86/kexec: Disable RET on kexec - x86/speculation: Disable RRSBA behavior - x86/static_call: Serialize __static_call_fixup() properly * [amd64] Enable SLS mitigation . linux (5.19~rc4-1~exp1) experimental; urgency=medium . * New upstream release candidate . [ Johannes Schauer Marin Rodrigues ] * [arm64] Add pwm-imx27, nwl-dsi, ti-sn65dsi86, imx-dcss, mxsfb, mux-mmio and imx8mq-interconnect to fb-modules udeb for the MNT Reform 2. . [ Julien Massot ] * [arm64] Enable Qualcomm SDA845 SoC: - Enable QCOM_CLK_RPMH, SDM_GCC_845, QCOM_HFPLL, INTERCONNECT_QCOM, INTERCONNECT_QCOM_SDM845, QCOM_PDC, PINCTRL_MSM, PINCTRL_SDM845, RESET_QCOM_AOSS, QCOM_AOSS_QMP, QCOM_COMMAND_DB, QCOM_GENI_SE, QCOM_RPMH, QCOM_RPMHPD, QCOM_RPMPD, SERIAL_QCOM_GENI, SERIAL_QCOM_GENI_CONSOLE as built-in - Enable SDM_CAMCC_845, SDM_GPUCC_845, SDM_VIDEOCC_845, SDM_DISPCC_845, ARM_QCOM_CPUFREQ_HW, REGULATOR_QCOM_RPMH, SCSI_UFSHCD_PLATFORM, SCSI_UFS_QCOM as modules . [ Diederik de Haas ] * [armel/rpi] drivers/char/hw_random: Enable HW_RANDOM_BCM2835 as module * [armel/rpi] drivers/rtc: Enable RTC_DRV_DS1307 as module (Closes: #958904) . [ Zhang Ning ] * [arm64] enable gpio polled keyboard which is needed for Khadas SBCs * [arm64] media: enable Amlogic CEC, GE2D, vdec, and Rockchip RGA, ISP1 * [arm64] phy: enable Rk3399 Mipi phy which is needed by RK3399 ISP1 * [arm64] enable GPIO ir receirer which is needed by Khadas edge SBC * [arm64] enable HYM8563 RTC driver which is needed by Khadas SBCs . [ Ben Hutchings ] * Refresh our patches for 5.19 * [rt] Update to 5.19-rc3-rt5 * Update config for 5.19 * virtio: disable notification hardening by default (regression in 5.19-rc1) * [rt] printk: Reinstate deferred printing with kthreads * d/bin: Use subprocess text mode support instead of decoding separately * d/bin, d/lib/python: Use open() with encoding instead of codecs.open() * d/lib/python/debian_linux: Introduce {Source,Binary}Package classes * d/lib/python/debian_linux: Add all used fields to {Source,Binary}Package * d/lib/python/debian_linux: Warn about unknown fields in control files * firmware_loader: Enable FW_LOADER_COMPRESS, FW_LOADER_COMPRESS_XZ . linux (5.18.16-1~bpo11+1) bullseye-backports; urgency=medium . * Rebuild for bullseye-backports: - Change ABI number to 0.deb11.4 . linux (5.18.16-1) unstable; urgency=medium . * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.18.15 - [arm64] pinctrl: armada-37xx: use raw spinlocks for regmap to avoid invalid wait context - [armhf] pinctrl: stm32: fix optional IRQ support to gpios - [riscv64] add as-options for modules with assembly compontents - lockdown: Fix kexec lockdown bypass with ima policy (CVE-2022-21505) - [armhf] mmc: sdhci-omap: Fix a lockdep warning for PM runtime init - [armhf] mtd: rawnand: gpmi: Set WAIT_FOR_READY timeout based on program/erase times - drm/ttm: fix locking in vmap/vunmap TTM GEM helpers - drm/amd/display: Fix new dmub notification enabling in DM - drm/scheduler: Don't kill jobs in interrupt context - net: usb: ax88179_178a needs FLAG_SEND_ZLP - PCI: hv: Fix multi-MSI to allow more than one MSI vector - PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI - PCI: hv: Reuse existing IRTE allocation in compose_msi_msg() - PCI: hv: Fix interrupt mapping for multi-MSI - r8152: fix a WOL issue - ip: Fix data-races around sysctl_ip_default_ttl. - xfrm: xfrm_policy: fix a possible double xfrm_pols_put() in xfrm_bundle_lookup() (CVE-2022-36879) - RDMA/irdma: Do not advertise 1GB page size for x722 - RDMA/irdma: Fix sleep from invalid context BUG - perf/core: Fix data race between perf_event_set_output() and perf_mmap_close() - e1000e: Enable GPT clock before sending message to CSME - Revert "e1000e: Fix possible HW unit hang after an s0ix exit" - igc: Reinstate IGC_REMOVED logic and implement it properly - ip: Fix data-races around sysctl_ip_no_pmtu_disc. - ip: Fix data-races around sysctl_ip_fwd_use_pmtu. - ip: Fix data-races around sysctl_ip_fwd_update_priority. - ip: Fix data-races around sysctl_ip_nonlocal_bind. - ip: Fix a data-race around sysctl_ip_autobind_reuse. - ip: Fix a data-race around sysctl_fwmark_reflect. - tcp/dccp: Fix a data-race around sysctl_tcp_fwmark_accept. - tcp: sk->sk_bound_dev_if once in inet_request_bound_dev_if() - tcp: Fix data-races around sysctl_tcp_l3mdev_accept. - tcp: Fix data-races around sysctl_tcp_mtu_probing. - tcp: Fix data-races around sysctl_tcp_base_mss. - tcp: Fix data-races around sysctl_tcp_min_snd_mss. - tcp: Fix a data-race around sysctl_tcp_mtu_probe_floor. - tcp: Fix a data-race around sysctl_tcp_probe_threshold. - tcp: Fix a data-race around sysctl_tcp_probe_interval. - net: stmmac: fix pm runtime issue in stmmac_dvr_remove() - net: stmmac: fix unbalanced ptp clock issue in suspend/resume flow - tcp/udp: Make early_demux back namespacified. - net: stmmac: fix dma queue left shift overflow issue - net/tls: Fix race in TLS device down flow - igmp: Fix data-races around sysctl_igmp_llm_reports. - igmp: Fix a data-race around sysctl_igmp_max_memberships. - igmp: Fix data-races around sysctl_igmp_max_msf. - igmp: Fix data-races around sysctl_igmp_qrv. - tcp: Fix data-races around keepalive sysctl knobs. - tcp: Fix data-races around sysctl_tcp_syn(ack)?_retries. - tcp: Fix data-races around sysctl_tcp_syncookies. - tcp: Fix data-races around sysctl_tcp_migrate_req. - tcp: Fix data-races around sysctl_tcp_reordering. - tcp: Fix data-races around some timeout sysctl knobs. - tcp: Fix a data-race around sysctl_tcp_notsent_lowat. - tcp: Fix a data-race around sysctl_tcp_tw_reuse. - tcp: Fix data-races around sysctl_max_syn_backlog. - tcp: Fix data-races around sysctl_tcp_fastopen. - tcp: Fix data-races around sysctl_tcp_fastopen_blackhole_timeout. - iavf: Fix VLAN_V2 addition/rejection - iavf: Disallow changing rx/tx-frames and rx/tx-frames-irq - iavf: Fix handling of dummy receive descriptors - iavf: Fix missing state logs - ACPI: CPPC: Don't require flexible address space if X86_FEATURE_CPPC is supported - [arm64] pinctrl: armada-37xx: Reuse GPIO fwnode in armada_37xx_irqchip_register() - [arm64] pinctrl: armada-37xx: make irq_lock a raw spinlock to avoid invalid wait context - i40e: Fix erroneous adapter reinitialization during recovery process - ixgbe: Add locking to prevent panic when setting sriov_numvfs to zero - [arm64,armhf] net: dsa: fix dsa_port_vlan_filtering when global - [arm64,armhf] net: dsa: move reset of VLAN filtering to dsa_port_switchdev_unsync_attrs - [arm64,armhf] net: dsa: fix NULL pointer dereference in dsa_port_reset_vlan_filtering - net: stmmac: remove redunctant disable xPCS EEE call - [arm64,armhf] gpio: pca953x: only use single read/write for No AI mode - [arm64,armhf] gpio: pca953x: use the correct range when do regmap sync - [arm64,armhf] gpio: pca953x: use the correct register address when regcache sync during init - be2net: Fix buffer overflow in be_get_module_eeprom - [arm64,armhf] drm/panel-edp: Fix variable typo when saving hpd absent delay from DT - [arm64] drm/imx/dcss: Add missing of_node_put() in fail path - ipv4: Fix a data-race around sysctl_fib_multipath_use_neigh. - ipv4: Fix data-races around sysctl_fib_multipath_hash_policy. - ipv4: Fix data-races around sysctl_fib_multipath_hash_fields. - ip: Fix data-races around sysctl_ip_prot_sock. - udp: Fix a data-race around sysctl_udp_l3mdev_accept. - tcp: Fix data-races around sysctl knobs related to SYN option. - tcp: Fix a data-race around sysctl_tcp_early_retrans. - tcp: Fix data-races around sysctl_tcp_recovery. - tcp: Fix a data-race around sysctl_tcp_thin_linear_timeouts. - tcp: Fix data-races around sysctl_tcp_slow_start_after_idle. - tcp: Fix a data-race around sysctl_tcp_retrans_collapse. - tcp: Fix a data-race around sysctl_tcp_stdurg. - tcp: Fix a data-race around sysctl_tcp_rfc1337. - tcp: Fix a data-race around sysctl_tcp_abort_on_overflow. - tcp: Fix data-races around sysctl_tcp_max_reordering. - net/sched: cls_api: Fix flow action initialization - [arm*] spi: bcm2835: bcm2835_spi_handle_err(): fix NULL pointer deref for non DMA transfers - KVM: Don't null dereference ops->destroy - mm/mempolicy: fix uninit-value in mpol_rebind_policy() - bpf: Make sure mac_header was set before using it - sched/deadline: Fix BUG_ON condition for deboosted tasks - [x86] perf/x86/intel/lbr: Fix unchecked MSR access error on HSW - [x86] x86/bugs: Warn when "ibrs" mitigation is selected on Enhanced IBRS parts - dlm: fix pending remove if msg allocation fails - [x86] crypto: qat - set to zero DH parameters before free - [x86] crypto: qat - use pre-allocated buffers in datapath - [x86] crypto: qat - refactor submission logic - [x86] crypto: qat - add backlog mechanism - [x86] crypto: qat - fix memory leak in RSA - [x86] crypto: qat - remove dma_free_coherent() for RSA - [x86] crypto: qat - remove dma_free_coherent() for DH - [x86] crypto: qat - add param check for RSA - [x86] crypto: qat - add param check for DH - [x86] crypto: qat - re-enable registration of algorithms - exfat: fix referencing wrong parent directory information after renaming - exfat: use updated exfat_chain directly during renaming - [x86] amd: Use IBPB for firmware calls - [x86] alternative: Report missing return thunk details - watchqueue: make sure to serialize 'wqueue->defunct' properly - [x86] ASoC: SOF: pm: add explicit behavior for ACPI S1 and S2 - [x86] ASoC: SOF: pm: add definitions for S4 and S5 states - [x86] ASoC: SOF: Intel: disable IMR boot when resuming from ACPI S4 and S5 states - watch-queue: remove spurious double semicolon https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.18.16 - Bluetooth: Always set event mask on suspend - Bluetooth: L2CAP: Fix use-after-free caused by l2cap_chan_put - Revert "ocfs2: mount shared volume without ha stack" - userfaultfd: provide properly masked address for huge-pages - fs: sendfile handles O_NONBLOCK of out_fd - secretmem: fix unhandled fault in truncate - mm: fix page leak with multiple threads mapping the same page - mm: fix missing wake-up event for FSDAX pages - hugetlb: fix memoryleak in hugetlb_mcopy_atomic_pte - [s390x] archrandom: prevent CPACF trng invocations in interrupt context - [x86] intel_idle: Fix false positive RCU splats due to incorrect hardirqs state - watch_queue: Fix missing rcu annotation - watch_queue: Fix missing locking in add_watch_to_object() - tcp: Fix data-races around sysctl_tcp_dsack. - tcp: Fix a data-race around sysctl_tcp_app_win. - tcp: Fix a data-race around sysctl_tcp_adv_win_scale. - tcp: Fix a data-race around sysctl_tcp_frto. - tcp: Fix a data-race around sysctl_tcp_nometrics_save. - tcp: Fix data-races around sysctl_tcp_no_ssthresh_metrics_save. - bridge: Do not send empty IFLA_AF_SPEC attribute - ice: Fix max VLANs available for VF - ice: check (DD | EOF) bits on Rx descriptor rather than (EOP | RS) - ice: do not setup vlan for loopback VSI - ice: Fix VSIs unable to share unicast MAC - Revert "tcp: change pingpong threshold to 3" - tcp: md5: fix IPv4-mapped support - tcp: Fix data-races around sysctl_tcp_moderate_rcvbuf. - tcp: Fix a data-race around sysctl_tcp_limit_output_bytes. - tcp: Fix a data-race around sysctl_tcp_challenge_ack_limit. - scsi: core: Fix warning in scsi_alloc_sgtables() - scsi: mpt3sas: Stop fw fault watchdog work item during system shutdown - net: ping6: Fix memleak in ipv6_renew_options(). - ipv6/addrconf: fix a null-ptr-deref bug for ip6_ptr - net/tls: Remove the context from the list in tls_device_down - net: pcs: xpcs: propagate xpcs_read error to xpcs_get_state_c37_sgmii - net: sungem_phy: Add of_node_put() for reference returned by of_get_parent() - tcp: Fix a data-race around sysctl_tcp_min_tso_segs. - tcp: Fix a data-race around sysctl_tcp_tso_rtt_log. - tcp: Fix a data-race around sysctl_tcp_min_rtt_wlen. - tcp: Fix a data-race around sysctl_tcp_autocorking. - tcp: Fix a data-race around sysctl_tcp_invalid_ratelimit. - Documentation: fix sctp_wmem in ip-sysctl.rst - macsec: fix NULL deref in macsec_add_rxsa - macsec: fix error message in macsec_add_rxsa and _txsa - macsec: limit replay window size with XPN - macsec: always read MACSEC_SA_ATTR_PN as a u64 - net: macsec: fix potential resource leak in macsec_add_rxsa() and macsec_add_txsa() - net: mld: fix reference count leak in mld_{query | report}_work() - tcp: Fix data-races around sk_pacing_rate. - net: Fix data-races around sysctl_[rw]mem(_offset)?. - tcp: Fix a data-race around sysctl_tcp_comp_sack_delay_ns. - tcp: Fix a data-race around sysctl_tcp_comp_sack_slack_ns. - tcp: Fix a data-race around sysctl_tcp_comp_sack_nr. - tcp: Fix data-races around sysctl_tcp_reflect_tos. - ipv4: Fix data-races around sysctl_fib_notify_on_flag_change. - i40e: Fix interface init with MSI interrupts (no MSI-X) - [arm64,armhf] net: dsa: fix reference counting for LAG FDBs - sctp: fix sleep in atomic context bug in timer handlers - netfilter: nf_queue: do not allow packet truncation below transport header offset (CVE-2022-36946) - scsi: ufs: Support clearing multiple commands at once - scsi: ufs: core: Fix a race condition related to device management - virtio-net: fix the race between refill work and close - perf symbol: Correct address for bss symbols - sfc: disable softirqs for ptp TX - sctp: leave the err path free in sctp_stream_init to sctp_stream_free - mm/hmm: fault non-owner device private entries - page_alloc: fix invalid watermark check on a negative value - tcp: Fix data-races around sysctl_tcp_workaround_signed_windows. - [armel,armhf] 9216/1: Fix MAX_DMA_ADDRESS overflow - docs/kernel-parameters: Update descriptions for "mitigations=" param with retbleed - locking/rwsem: Allow slowpath writer to ignore handoff bit if not set by first waiter - [x86] bugs: Do not enable IBPB at firmware entry when IBPB is not available . [ Ben Hutchings ] * d/tests: kbuild test case depends on python3 * d/tests: Run kbuild test with default flavour if quick flavour not defined * d/lib/python/debian_linux/debian.py: Add Architecture field to TestsControl * d/tests: Restrict kbuild tests to architectures with default or quick flavour * security: Add landlock and bpf to enabled LSM list (Closes: #999551) . [ Salvatore Bonaccorso ] * Bump ABI to 4 * Add mitigations for Post-Barrier Return Stack Buffer Predictions (PBRSB) issue (CVE-2022-26373): - x86/speculation: Add RSB VM Exit protections - x86/speculation: Add LFENCE to RSB fill sequence * posix-cpu-timers: Cleanup CPU timers before freeing them during exec (CVE-2022-2585) * netfilter: nf_tables: do not allow SET_ID to refer to another table (CVE-2022-2586) * netfilter: nf_tables: do not allow CHAIN_ID to refer to another table * netfilter: nf_tables: do not allow RULE_ID to refer to another chain * net_sched: cls_route: remove from list when handle is 0 (CVE-2022-2588) * Revert "mm/shmem: unconditionally set pte dirty in mfill_atomic_install_pte" (CVE-2022-2590) . linux (5.18.14-1parrot1) parrot-updates; urgency=medium . * Import new Debian backports version. * Bump Parrot ABI number to 14parrot1. * Increase timer frequency to 300Hz. * Disable generation of signed kernel images. * Import Parrot Wifi patches. . linux (5.18.14-1~bpo11+1) bullseye-backports; urgency=medium . * Rebuild for bullseye-backports: - Change ABI number to 0.deb11.3 . linux (5.18.14-1) unstable; urgency=medium . * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.18.6 - Revert "drm/amd/display: Fix DCN3 B0 DP Alt Mapping" (regression in 5.16) - [arm64] dts: imx8mm-beacon: Enable RTS-CTS on UART3 - [arm64] dts: imx8mn-beacon: Enable RTS-CTS on UART3 - io_uring: reinstate the inflight tracking (CVE-2022-1976) - [arm64] ASoC: qcom: lpass-platform: Update VMA access permissions in mmap callback - drm/amd/display: Read Golden Settings Table from VBIOS - drm/amdgpu: Resolve RAS GFX error count issue after cold boot on Arcturus - [amd64] drm/amdkfd: Use mmget_not_zero in MMU notifier - [x86] ASoC: Intel: cirrus-common: fix incorrect channel mapping - [armel,armhf] ASoC: cs42l51: Correct minimum value for SX volume control - [amd64] drm/amdkfd: add pinned BOs to kfd_bo_list - ata: libata-core: fix NULL pointer deref in ata_host_alloc_pinfo() - quota: Prevent memory allocation recursion while holding dq_lock - [armhf] ASoC: es8328: Fix event generation for deemphasis control - [x86] ASoC: wm_adsp: Fix event generation for wm_adsp_fw_put() - [x86] ALSA: hda: MTL: add HD Audio PCI ID and HDMI codec vendor ID - [x86] Input: soc_button_array - also add Lenovo Yoga Tablet2 1051F to dmi_use_low_level_irq - [x86] scsi: vmw_pvscsi: Expand vcpuHint to 16 bits - scsi: lpfc: Resolve NULL ptr dereference after an ELS LOGO is aborted - scsi: lpfc: Fix port stuck in bypassed state after LIP in PT2PT topology - scsi: lpfc: Allow reduced polling rate for nvme_admin_async_event cmd completion - scsi: mpt3sas: Fix out-of-bounds compiler warning - scsi: ipr: Fix missing/incorrect resource cleanup in error case - scsi: pmcraid: Fix missing resource cleanup in error case - ALSA: hda/realtek - Add HW8326 support - virtio-mmio: fix missing put_device() when vm_cmdline_parent registration failed - ipv6: Fix signed integer overflow in __ip6_append_data - ipv6: Fix signed integer overflow in l2tp_ip6_sendmsg - random: credit cpu and bootloader seeds by default - [x86] platform/x86/intel: pmc: Support Intel Raptorlake P - [x86] platform/x86/intel: hid: Add Surface Go to VGBS allow list - staging: r8188eu: fix rtw_alloc_hwxmits error detection for now (regression in 5.18.4) (Closes: #1013895) - staging: r8188eu: Fix warning of array overflow in ioctl_linux.c (regression in 5.15) - pNFS: Don't keep retrying if the server replied NFS4ERR_LAYOUTUNAVAILABLE - pNFS: Avoid a live lock condition in pnfs_update_layout() (regression in 5.14) - sunrpc: set cl_max_connect when cloning an rpc_clnt (regression in 5.15) - i40e: Fix adding ADQ filter to TC0 - i40e: Fix calculating the number of queue pairs - i40e: Fix call trace in setup_tx_descriptors - iavf: Fix issue with MAC address of VF shown as zero (regression in 5.18) - [x86,arm64] Drivers: hv: vmbus: Release cpu lock in error case - [riscv64] dts: microchip: re-add pdma to mpfs device tree (regression in 5.18) - io_uring: fix races with file table unregister - io_uring: fix races with buffer table unregister - [x86] drm/i915/reset: Fix error_state_read ptr + offset use - [arm64] net: hns3: set port base vlan tbl_sta to false before removing old vlan (regression in 5.18) - [arm64] net: hns3: don't push link state to VF if unalive - [arm64] net: hns3: restore tm priority/qset to default settings when tc disabled - [arm64] net: hns3: fix PF rss size initialization bug (regression in 5.17) - [arm64] net: hns3: fix tm port shapping of fibre port is incorrect after driver initialization - ice: Fix PTP TX timestamp offset calculation - ice: Sync VLAN filtering features for DVM - ice: Fix queue config fail handling - ice: Fix memory corruption in VF driver - net: ax25: Fix deadlock caused by skb_recv_datagram in ax25_recvmsg - [arm64] ftrace: fix branch range checks - [arm64] ftrace: consistently handle PLTs. - init: Initialize noop_backing_dev_info early (regression in 5.18.4) - block: Fix handling of offline queues in blk_mq_alloc_request_hctx() - [x86] ftrace: Remove OBJECT_FILES_NON_STANDARD usage - [arm64,armhf] irqchip/gic-v3: Fix error handling in gic_populate_ppi_partitions - sched: Fix balance_push() vs __sched_setscheduler() - i2c: designware: Use standard optional ref clock implementation - [x86] mei: hbm: drop capability response on early shutdown - [x86] mei: me: add raptor lake point S DID - [x86] comedi: vmk80xx: fix expression for tx buffer size - USB: serial: option: add support for Cinterion MV31 with new baseline - USB: serial: io_ti: add Agilent E5805A support - [arm64] mm: Don't invalidate FROM_DEVICE buffers at start of DMA transfer - [arm64,armhf] usb: dwc2: Fix memory leak in dwc2_hcd_init - [arm64,armhf] usb: dwc3: gadget: Fix IN endpoint max packet size allocation - [arm64,armhf] usb: dwc3: pci: Restore line lost in merge conflict resolution (regression in 5.18) - usb: gadget: u_ether: fix regression in setting fixed MAC address (regression in 5.16) - usb: gadget: f_fs: change ep->status safe in ffs_epfile_io() - usb: gadget: f_fs: change ep->ep safe in ffs_epfile_io() - tty: n_gsm: Debug output allocation must use GFP_ATOMIC (regression in 5.18.3) - serial: 8250: Store to lsr_save_flags after lsr read - [arm64] bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove() - md/raid5-ppl: Fix argument order in bio_alloc_bioset() (regression in 5.18) - dm: fix race in dm_start_io_acct (regression in 5.18) - dm mirror log: round up region bitmap size to BITS_PER_LONG - drm/amdgpu: Fix GTT size reporting in amdgpu_ioctl (regression in 5.18) - drm/amd/display: Cap OLED brightness per max frame-average luminance - audit: free module name (regression in 5.16) - fs: account for group membership - selinux: free contexts previously transferred in selinux_add_opt() (regression in 5.18) - ext4: fix super block checksum incorrect after mount - ext4: fix bug_on ext4_mb_use_inode_pa - ext4: make variable "count" signed - ext4: add reserved GDT blocks check - [arm64] KVM: arm64: Always start with clearing SVE flag on load (regression in 5.17) - [arm64] KVM: arm64: Don't read a HW interrupt pending state in user context (regression in 5.17) - netfs: Fix gcc-12 warning by embedding vfs inode in netfs_i_context - [x86] drm/i915/uc: remove accidental static from a local variable (regression in 5.17) - bpf: Use safer kvmalloc_array() where possible - dm: fix bio_set allocation - [arm64] clk: imx8mp: fix usb_root_clk parent https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.18.7 - [s390x] mm: use non-quiescing sske for KVM switch to keyed guest - zonefs: fix zonefs_iomap_begin() for reads - [x86] boot: Wrap literal addresses in absolute_pointer() - fsnotify: consistent behavior for parent not watching children - bpf: Fix calling global functions from BPF_PROG_TYPE_EXT programs (regression in 5.17) - io_uring: use original request task for inflight tracking https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.18.8 - random: schedule mix_interrupt_randomness() less often - random: quiet urandom warning ratelimit suppression message - [x86] ALSA: memalloc: Drop x86-specific hack for WC allocations - ALSA: hda/via: Fix missing beep setup - [x86] ALSA: hda: Fix discovery of i915 graphics PCI device (regression in 5.18) - ALSA: hda/conexant: Fix missing beep setup - [x86] ALSA: hda/realtek: Add mute LED quirk for HP Omen laptop - ALSA: hda/realtek - ALC897 headset MIC no sound - [x86] ALSA: hda/realtek: Apply fixup for Lenovo Yoga Duet 7 properly - [x86] ALSA: hda/realtek: Add quirk for Clevo PD70PNT - [x86] ALSA: hda/realtek: Add quirk for Clevo NS50PU - net: openvswitch: fix parsing of nw_proto for IPv6 fragments - ipv4: ping: fix bind address validity check (regression in 5.17) - 9p: Fix refcounting during full path walks for fid lookups - 9p: fix fid refcount leak in v9fs_vfs_atomic_open_dotl - 9p: fix fid refcount leak in v9fs_vfs_get_link - 9p: fix EBADF errors in cached mode (regression in 5.16) - btrfs: fix hang during unmount when block group reclaim task is running (regression in 5.13) - btrfs: prevent remounting to v1 space cache for subpage mount - btrfs: add error messages to all unrecognized mount options - [powerpc*] scsi: ibmvfc: Store vhost pointer during subcrq allocation - [powerpc*] scsi: ibmvfc: Allocate/free queue resource only during probe/ remove - mmc: sdhci-pci-o2micro: Fix card detect by dealing with debouncing - xen/gntdev: Avoid blocking in unmap_grant_pages() - dm era: commit metadata in postsuspend after worker stops - dm: do not return early from dm_io_complete if BLK_STS_AGAIN without polling (regression in 5.18) - dm mirror log: clear log bits up to BITS_PER_LONG boundary - tracing/kprobes: Check whether get_kretprobe() returns NULL in kretprobe_dispatcher() - filemap: Handle sibling entries in filemap_get_read_batch() - mm/slub: add missing TID updates on slab deactivation - [x86] drm/i915: Implement w/a 22010492432 for adl-s - amd/display/dc: Fix COLOR_ENCODING and COLOR_RANGE doing nothing for DCN20+ - drm/amd/display: Fix typo in override_lane_settings - USB: serial: pl2303: add support for more HXN (G) types - USB: serial: option: add Telit LE910Cx 0x1250 composition - USB: serial: option: add Quectel EM05-G modem - USB: serial: option: add Quectel RM500K module support - [arm64] drm/msm: Ensure mmap offset is initialized - [arm64] drm/msm: Fix double pm_runtime_disable() call - netfilter: use get_random_u32 instead of prandom - scsi: scsi_debug: Fix zone transition to full condition - [arm64] drm/msm: Switch ordering of runpm put vs devfreq_idle (regression in 5.15) - scsi: iscsi: Exclude zero from the endpoint ID range (regression in 5.18) - xsk: Fix generic transmit when completion queue reservation fails - [arm64] drm/msm: use for_each_sgtable_sg to iterate over scatterlist - bpf: Fix request_sock leak in sk lookup helpers - [arm64,armhf] drm/sun4i: Fix crash during suspend after component bind failure - [amd64] bpf, x86: Fix tail call count offset calculation on bpf2bpf call - [x86,arm64] scsi: storvsc: Correct reporting of Hyper-V I/O size limits - phy: aquantia: Fix AN when higher speeds than 1G are not advertised - net: fix data-race in dev_isalive() - veth: Add updating of trans_start - tipc: fix use-after-free Read in tipc_named_reinit - block: disable the elevator int del_gendisk - rethook: Reject getting a rethook if RCU is not watching - igb: fix a use-after-free issue in igb_clean_tx_ring - bonding: ARP monitor spams NETDEV_NOTIFY_PEERS notifiers - ethtool: Fix get module eeprom fallback - net/sched: sch_netem: Fix arithmetic in netem_dump() for 32-bit platforms - [arm64] drm/msm/dp: check core_initialized before disable interrupts at dp_display_unbind() (regression in 5.18.3) - [arm64] drm/msm/dp: force link training for display resolution change - net: phy: at803x: fix NULL pointer dereference on AR9331 PHY (regression in 5.18) - perf arm-spe: Don't set data source if it's not a memory operation - erspan: do not assume transport header is always set - net/tls: fix tls_sk_proto_close executed repeatedly - netfilter: nf_dup_netdev: do not push mac header a second time - netfilter: nf_dup_netdev: add and use recursion counter - xen-blkfront: Handle NULL gendisk (regression in 5.14) - afs: Fix dynamic root getattr (regression in 5.18) - block: pop cached rq before potentially blocking rq_qos_throttle() (regression in 5.17) - ice: ignore protocol field in GTP offload - ice: Fix switchdev rules book keeping - ice: ethtool: advertise 1000M speeds properly - ice: ethtool: Prohibit improper channel config for DCB - io_uring: fail links when poll fails (regression in 5.17) - regmap-irq: Fix a bug in regmap_irq_enable() for type_in_mask chips - regmap-irq: Fix offset/index mismatch in read_sub_irq_data() - drm/amd: Revert "drm/amd/display: keep eDP Vdd on when eDP stream is already enabled" (regression in 5.18) - igb: Make DMA faster when CPU is active on the PCIe link - virtio_net: fix xdp_rxq_info bug after suspend/resume - Revert "net/tls: fix tls_sk_proto_close executed repeatedly" - sock: redo the psock vs ULP protection check - nvme: move the Samsung X5 quirk entry to the core quirks - gpio: winbond: Fix error code in winbond_gpio_get() - [s390x] cpumf: Handle events cycles and instructions identical - filemap: Fix serialization adding transparent huge pages to page cache (regression in 5.18) - [x86] KVM: SEV: Init target VMCBs in sev_migrate_from - iio: mma8452: fix probe fail when device tree compatible is used. - io_uring: fix req->apoll_events (regression in 5.18) - io_uring: fix wrong arm_poll error handling (regression in 5.17) - vmcore: convert copy_oldmem_page() to take an iov_iter - [s390x] crash: add missing iterator advance in copy_oldmem_page() - [s390x] crash: make copy_oldmem_page() return number of bytes copied - xhci: turn off port power in shutdown - xhci-pci: Allow host runtime PM as default for Intel Raptor Lake xHCI - xhci-pci: Allow host runtime PM as default for Intel Meteor Lake xHCI - usb: gadget: uvc: fix list double add in uvcg_video_pump (regression in 5.16) - usb: gadget: Fix non-unique driver names in raw-gadget driver - USB: gadget: Fix double-free bug in raw_gadget driver - [arm64,armhf] usb: chipidea: udc: check request status before setting device address - btrfs: fix race between reflinking and ordered extent completion - btrfs: fix deadlock with fsync+fiemap+transaction commit - f2fs: attach inline_data after setting compression (regression in 5.18.3) - f2fs: fix iostat related lock protection (regression in 5.17) - f2fs: do not count ENOENT for error case (regression in 5.18.4) - iio:accel:kxcjk-1013: rearrange iio trigger get and register - iio:accel:bma180: rearrange iio trigger get and register - iio:accel:mxc4005: rearrange iio trigger get and register - iio: accel: mma8452: ignore the return value of reset operation - iio: gyro: mpu3050: Fix the error handling in mpu3050_power_up() - iio: trigger: sysfs: fix use-after-free on remove - iio: imu: inv_icm42600: Fix broken icm42600 (chip id 0 value) - iio: adc: axp288: Override TS pin bias current for some models - [hppa] Fix flush_anon_page on PA8800/PA8900 (regression in 5.18) - [hppa] Enable ARCH_HAS_STRICT_MODULE_RWX - [powerpc*] Enable execve syscall exit tracepoint - [powerpc*] rtas: Allow ibm,platform-dump RTAS call with null buffer address - [powerpc*] powernv: wire up rng during setup_arch - mm/memory-failure: disable unpoison once hw error happens - mm: lru_cache_disable: use synchronize_rcu_expedited (regression in 5.18) - [armhf] dts: imx6qdl: correct PU regulator ramp delay - modpost: fix section mismatch check for exported init/exit sections - [arm64] dts: bcm2711-rpi-400: Fix GPIO line names - smb3: fix empty netname context on secondary channels (regression in 5.18.4) - perf build-id: Fix caching files with a wrong build ID - smb3: use netname when available on secondary channels - dma-direct: use the correct size for dma_set_encrypted() (regression in 5.17) - [powerpc*] pseries: wire up rng during setup_arch() https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.18.9 - bcache: memset on stack variables in bch_btree_check() and bch_sectors_dirty_init() - hinic: Replace memcpy() with direct assignment - [powerpc*] ftrace: Remove ftrace init tramp once kernel init is complete - io_uring: fix not locked access to fixed buf table https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.18.10 - drm/amdgpu: fix adev variable used in amdgpu_device_gpu_recover() (regression in 5.17) - Revert "drm/amdgpu/display: set vblank_disable_immediate for DC" (regression in 5.17) - drm/amdgpu: To flush tlb for MMHUB of RAVEN series - ksmbd: set the range of bytes to zero without extending file size in FSCTL_ZERO_DATA - ksmbd: check invalid FileOffset and BeyondFinalZero in FSCTL_ZERO_DATA - ksmbd: use vfs_llseek instead of dereferencing NULL - ipv6: take care of disable_policy when restoring routes - net: phy: Don't trigger state machine while in suspend - [s390x] archrandom: simplify back to earlier design and initialize earlier - nvme-pci: add NVME_QUIRK_BOGUS_NID for ADATA XPG SX6000LNP (AKA SPECTRIX S40G) - nvme-pci: add NVME_QUIRK_BOGUS_NID for ADATA IM2P33F8ABR1 - nvdimm: Fix badblocks clear off-by-one error - ceph: wait on async create before checking caps for syncfs (regression in 5.18) - [hppa] Fix vDSO signal breakage on 32-bit kernel (regression in 5.18) - [hppa] unaligned: Fix emulate_ldw() breakage (regression in 5.18) - [powerpc*] prom_init: Fix kernel config grep - [powerpc*] bpf: Fix use of user_pt_regs in uapi - [x86] cpufreq: amd-pstate: Add resume and suspend callbacks - dm raid: fix accesses beyond end of raid member array - dm raid: fix KASAN warning in raid5_add_disks - SUNRPC: Fix READ_PLUS crasher - net: rose: fix UAF bugs caused by timer handler (CVE-2022-2318) - net: usb: ax88179_178a: Fix packet receiving (regression in 5.17) - virtio-net: fix race between ndo_open() and virtio_device_ready() - [armhf] net: dsa: bcm_sf2: force pause link settings - net: tun: unlink NAPI from device on destruction - net: tun: stop NAPI when detaching queues - net: fix IFF_TX_SKB_NO_LINEAR definition - net: dp83822: disable false carrier interrupt - net: dp83822: disable rx error interrupt - RDMA/qedr: Fix reporting QP timeout attribute - RDMA/cm: Fix memory leak in ib_cm_insert_listen - linux/dim: Fix divide by 0 in RDMA DIM - net: usb: asix: do not force pause frames support - usbnet: fix memory allocation in helpers - mptcp: fix race on unaccepted mptcp sockets (regression in 5.17) - mptcp: fix conflict with <netinet/in.h> (regression in 5.16) - [armhf] hwmon: (occ) Prevent power cap command overwriting poll response - NFS: restore module put when manager exits. (regression in 5.18) - NFSD: restore EINVAL error translation in nfsd_commit() (regression in 5.17) - NFSv4: Add an fattr allocation to _nfs4_discover_trunking() (regression in 5.18.3) - vfs: fix copy_file_range() regression in cross-fs copies - caif_virtio: fix race between virtio_device_ready() and ndo_open() - io_uring: ensure that send/sendmsg and recv/recvmsg check sqe->ioprio - PM / devfreq: exynos-ppmu: Fix refcount leak in of_get_devfreq_events - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() - vdpa/mlx5: Update Control VQ callback information - netfilter: nft_dynset: restore set element counter when failing to update - net/sched: act_api: Notify user space if any actions were flushed before error - net: asix: fix "can't send until first packet is send" issue - net: bonding: fix possible NULL deref in rlb code - net: phy: ax88772a: fix lost pause advertisement configuration - net: bonding: fix use-after-free after 802.3ad slave unbind - [arm64] net: dsa: felix: fix race between reading PSFP stats and port stats - [powerpc] memhotplug: Add add_pages override for PPC (regression in 5.18) - [x86] platform/x86: thinkpad_acpi: Fix a memory leak of EFCH MMIO resource (regression in 5.18) - [x86] platform/x86: ideapad-laptop: Add Ideapad 5 15ITL05 to ideapad_dytc_v4_allow_table[] - tipc: move bc link creation back to tipc_node_create - epic100: fix use after free on rmmod - tcp: add a missing nf_reset_ct() in 3WHS handling - nvmet-tcp: fix regression in data_digest calculation (regression in 5.12) - ACPI: video: Change how we determine if brightness key-presses are handled - tunnels: do not assume mac header is set in skb_tunnel_check_pmtu() - fanotify: refine the validation checks on non-dir inode mask (regression in 5.18) - nvmet: add a clear_ids attribute for passthru targets - ipv6/sit: fix ipip6_tunnel_get_prl return value - ipv6: fix lockdep splat in in6_dump_addrs() (regression in 5.13) - net: tun: avoid disabling NAPI twice - [arm64] drm/msm/dpu: Increment vsync_cnt before waking up userspace (regression in 5.16) - [x86] platform/x86: ideapad-laptop: Add allow_v4_dytc module parameter - [x86] drm/i915/gem: add missing else - [x86] drm/i915/dgfx: Disable d3cold at gfx root port - [arm64] drm/msm/gem: Fix error return on fence id alloc fail (regression in 5.15) - [x86] platform/x86: panasonic-laptop: revert "Resolve hotkey double trigger bug" - [x86] platform/x86: panasonic-laptop: don't report duplicate brightness key-presses - [x86] platform/x86: panasonic-laptop: filter out duplicate volume up/down /mute keypresses - drm/fourcc: fix integer type usage in uapi header - hwmon: (ibmaem) don't call platform_device_del() if platform_device_add() fails - xen/blkfront: fix leaking data in shared pages (CVE-2022-26365) - xen/netfront: fix leaking data in shared pages (CVE-2022-33740) - xen/netfront: force data bouncing when backend is untrusted (CVE-2022-33741) - xen/blkfront: force data bouncing when backend is untrusted (CVE-2022-33742) - xen-netfront: restore __skb_queue_tail() positioning in xennet_get_responses() (CVE-2022-33743) - [arm64,armhf] xen/arm: Fix race in RB-tree based P2M accounting (CVE-2022-33744) https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.18.11 - io_uring: fix provided buffer import (regression in 5.18) - ALSA: usb-audio: Workarounds for Behringer UMC 204/404 HD - [x86] ALSA: hda/realtek: Add quirk for Clevo L140PU - can: bcm: use call_rcu() instead of costly synchronize_rcu() - can: gs_usb: gs_usb_open/close(): fix memory leak - can: kvaser_usb: replace run-time checks with struct kvaser_usb_driver_info - can: kvaser_usb: kvaser_usb_leaf: fix CAN clock frequency regression (regression in 5.16) - can: kvaser_usb: kvaser_usb_leaf: fix bittiming limits - bpf: Fix incorrect verifier simulation around jmp32's jeq/jne - bpf: Fix insufficient bounds propagation from adjust_scalar_min_max_vals - usbnet: fix memory leak in error case - net: rose: fix UAF bug caused by rose_t0timer_expiry - netfilter: nft_set_pipapo: release elements in clone from abort path - netfilter: nf_tables: stricter validation of element data (CVE-2022-34918) - [x86] iommu/vt-d: Fix PCI bus rescan device hot add - [x86] iommu/vt-d: Fix RID2PASID setup/teardown failure - fbdev: Fix potential buffer overflow with silly screen sizes (CVE-2021-33655): + fbmem: Check virtual screen sizes in fb_set_var() + fbcon: Disallow setting font bigger than screen size + fbcon: Prevent that screen size is smaller than font size - PM: runtime: Redefine pm_runtime_release_supplier() - PM: runtime: Fix supplier device management during consumer probe - memregion: Fix memregion_free() fallback definition - fscache: Fix invalidation/lookup race (regression in 5.17) - fscache: Fix if condition in fscache_wait_on_volume_collision() - [powerpc*] powernv: delay rng platform device creation until later in boot - [armhf] pinctrl: sunxi: a83t: Fix NAND function name for some pins - srcu: Tighten cleanup_srcu_struct() GP checks - ASoC: rt711: Add endianness flag in snd_soc_component_driver - ASoC: rt711-sdca: Add endianness flag in snd_soc_component_driver - ASoC: codecs: rt700/rt711/rt711-sdca: resume bus/codec in .set_jack_detect - ASoC: SOF: ipc3-topology: Move and correct size checks in sof_ipc3_control_load_bytes() - [x86] ASoC: SOF: Intel: hda: Fix compressed stream position tracking - [arm64] dts: qcom: sm8450: fix interconnects property of UFS node - [arm64] dts: qcom: msm8994: Fix CPU6/7 reg values - [arm64] dts: qcom: sdm845: use dispcc AHB clock for mdss node - [arm64] dts: imx8mp-evk: correct mmc pad settings - [arm64] dts: imx8mp-evk: correct the uart2 pinctl value - [arm64] dts: imx8mp-evk: correct gpio-led pad settings - [arm64] dts: imx8mp-evk: correct vbus pad settings - [arm64] dts: imx8mp-evk: correct eqos pad settings - [arm64] dts: imx8mp-evk: correct I2C5 pad settings - [arm64] dts: imx8mp-evk: correct I2C1 pad settings - [arm64] dts: imx8mp-evk: correct I2C3 pad settings - [arm64] dts: imx8mp-phyboard-pollux-rdk: correct uart pad settings - [arm64] dts: imx8mp-phyboard-pollux-rdk: correct eqos pad settings - [arm64] dts: imx8mp-phyboard-pollux-rdk: correct i2c2 & mmc settings - [arm64,armhf] pinctrl: sunxi: sunxi_pconf_set: use correct offset - [arm64] dts: qcom: msm8992-*: Fix vdd_lvs1_2-supply typo - xsk: Clear page contiguity bit when unmapping pool - i2c: piix4: Fix a memory leak in the EFCH MMIO support - i40e: Fix dropped jumbo frames statistics - i40e: Fix VF's MAC Address change on VM - [armhf] dts: stm32: add missing usbh clock and fix clk order on stm32mp15 - ACPI: CPPC: Check _OSC for flexible address space - ACPI: bus: Set CPPC _OSC bits for all and when CPPC_LIB is supported - ACPI: CPPC: Only probe for _CPC if CPPC v2 is acked (regressions in 5.13, 5.18) - [x86] ACPI: CPPC: Don't require _OSC if X86_FEATURE_CPPC is supported - net/mlx5e: Fix matchall police parameters validation - mptcp: Avoid acquiring PM lock for subflow priority changes - mptcp: Acquire the subflow socket lock before modifying MP_PRIO flags - mptcp: fix local endpoint accounting - r8169: fix accessing unset transport header - net/sched: act_api: Add extack to offload_act_setup() callback - net/sched: act_police: Add extack messages for offload failure - net/sched: act_police: allow 'continue' action offload - [arm64] dmaengine: imx-sdma: Allow imx8m for imx7 FW revs - [arm64,armhf] dmaengine: imx-sdma: only restart cyclic channel when enabled (regression in 5.18) - misc: rtsx_usb: fix use of dma mapped buffer for usb bulk transfer (Closes: #1015240, regression in 5.18) - misc: rtsx_usb: use separate command and response buffers - misc: rtsx_usb: set return value in rsp_buf alloc err path - ida: don't use BUG_ON() for debugging - [arm64,armhf] dmaengine: pl330: Fix lockdep warning about non-static key - [armhf] dmaengine: ti: Fix refcount leak in ti_dra7_xbar_route_allocate - [arm64] dmaengine: qcom: bam_dma: fix runtime PM underflow - [armhf] dmaengine: ti: Add missing put_device in ti_dra7_xbar_route_allocate https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.18.12 https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.18.13 - USB: serial: ftdi_sio: add Belimo device ids - usb: typec: add missing uevent when partner support PD - [arm64,armhf] usb: dwc3: gadget: Fix event pending check - gpio: sim: fix the chip_name configfs item - [armhf] tty: serial: samsung_tty: set dma burst_size to 1 - [x86] xen: Use clear_bss() for Xen PV guests - [x86] ALSA: hda - Add fixup for Dell Latitidue E5430 - [x86] ALSA: hda/conexant: Apply quirk for another HP ProDesk 600 G3 model - [x86] ALSA: hda/realtek: Fix headset mic for Acer SF313-51 - [x86] ALSA: hda/realtek - Fix headset mic problem for a HP machine with alc671 - [x86] ALSA: hda/realtek: fix mute/micmute LEDs for HP machines - [x86] ALSA: hda/realtek - Fix headset mic problem for a HP machine with alc221 - [x86] ALSA: hda/realtek - Enable the headset-mic on a Xiaomi's laptop - xen/netback: avoid entering xenvif_rx_next_skb() with an empty rx queue - fix race between exit_itimers() and /proc/pid/timers - mm: userfaultfd: fix UFFDIO_CONTINUE on fallocated shmem pages - mm: sparsemem: fix missing higher order allocation splitting (regression in 5.18) - mm: split huge PUD on wp_huge_pud fallback - tracing/histograms: Fix memory leak problem - net: sock: tracing: Fix sock_exceed_buf_limit not to dereference stale pointer - ip: fix dflt addr selection for connected nexthop - [armhf] 9213/1: Print message about disabled Spectre workarounds only once - [armel,armhf] 9214/1: alignment: advance IT state after emulating Thumb instruction - wifi: mac80211: fix queue selection for mesh/OCB interfaces - cgroup: Use separate src/dst nodes when preloading css_sets for migration - btrfs: return -EAGAIN for NOWAIT dio reads/writes on compressed and inline extents - btrfs: zoned: fix a leaked bioc in read_zone_info - [arm64,armhf] drm/panfrost: Put mapping instead of shmem obj on panfrost_mmu_map_fault_addr() error - [arm64,armhf] drm/panfrost: Fix shrinker list corruption by madvise IOCTL - fs/remap: constrain dedupe of EOF blocks - nilfs2: fix incorrect masking of permission flags for symlinks - Revert "evm: Fix memleak in init_desc" - reset: Fix devm bulk optional exclusive control getter - [arm64] dts: ls1028a: Update SFP node to include clock - [armhf] dts: imx6qdl-ts7970: Fix ngpio typo and count - [riscv64] dts: microchip: hook up the mpfs' l2cache - [armhf] 9209/1: Spectre-BHB: avoid pr_info() every time a CPU comes out of idle - [armel,armhf] 9210/1: Mark the FDT_FIXED sections as shareable - net/mlx5e: Fix enabling sriov while tc nic rules are offloaded (regression in 5.14) - net/mlx5e: CT: Use own workqueue instead of mlx5e priv (regression in 5.18) - net/mlx5e: Fix capability check for updating vnic env counters - net/mlx5e: Ring the TX doorbell on DMA errors - drm/amdgpu: keep fbdev buffers pinned during suspend (regression in 5.17) - drm/amdgpu/display: disable prefer_shadow for generic fb helpers (regression in 5.17) - [x86] drm/i915: fix a possible refcount leak in intel_dp_add_mst_connector() - [x86] drm/i915/guc: ADL-N should use the same GuC FW as ADL-S - ima: Fix a potential integer overflow in ima_appraise_measurement - [arm64,armhf] ASoC: sgtl5000: Fix noise on shutdown/remove - [x86] ASoC: Intel: Skylake: Correct the ssp rate discovery in skl_get_ssp_clks() - [x86] ASoC: Intel: Skylake: Correct the handling of fmt_config flexible array - netfilter: ecache: move to separate structure - netfilter: conntrack: split inner loop of list dumping to own function - netfilter: ecache: use dedicated list for event redelivery - netfilter: conntrack: include ecache dying list in dumps - netfilter: conntrack: remove the percpu dying list - netfilter: conntrack: fix crash due to confirmed bit load reordering (regression in 5.17) - sysctl: Fix data races in proc_dointvec(). - sysctl: Fix data races in proc_douintvec(). - sysctl: Fix data races in proc_dointvec_minmax(). - sysctl: Fix data races in proc_douintvec_minmax(). - sysctl: Fix data races in proc_doulongvec_minmax(). - sysctl: Fix data races in proc_dointvec_jiffies(). - tcp: Fix a data-race around sysctl_tcp_max_orphans. - inetpeer: Fix data-races around sysctl. - net: Fix data-races around sysctl_mem. - cipso: Fix data-races around sysctl. - icmp: Fix data-races around sysctl. - ipv4: Fix a data-race around sysctl_fib_sync_mem. - [armhf] dts: sunxi: Fix SPI NOR campatible on Orange Pi Zero - netfilter: nf_log: incorrect offset to network header - nfp: fix issue of skb segments exceeds descriptor limitation - vlan: fix memory leak in vlan_newlink() (regression in 5.17) - netfilter: nf_tables: replace BUG_ON by element length check - [riscv64] KVM: Fix SRCU deadlock caused by kvm_riscv_check_vcpu_requests() - [x86] drm/i915/gvt: IS_ERR() vs NULL bug in intel_gvt_update_reg_whitelist() - xen/gntdev: Ignore failure to unmap INVALID_GRANT_HANDLE - mptcp: fix subflow traversal at disconnect time (regression in 5.17) - NFSD: Decode NFSv4 birth time attribute (regression in 5.18) - lockd: set fl_owner when unlocking files - lockd: fix nlm_close_files (regression in 5.15) - ice: handle E822 generic device ID in PLDM header - ice: change devlink code to read NVM in blocks - [x86] drm/i915/ttm: fix sg_table construction (regression in 5.15) - [x86] drm/i915/gt: Serialize GRDOM access between multiple engine resets - [x86] drm/i915/gt: Serialize TLB invalidates with GT resets - bnxt_en: reclaim max resources if sriov enable fails - bnxt_en: Fix bnxt_reinit_after_abort() code path - bnxt_en: fix livepatch query - bnxt_en: Fix bnxt_refclk_read() - sysctl: Fix data-races in proc_dou8vec_minmax(). - sysctl: Fix data-races in proc_dointvec_ms_jiffies(). - tcp: Fix a data-race around sysctl_max_tw_buckets. - icmp: Fix a data-race around sysctl_icmp_echo_ignore_all. - icmp: Fix data-races around sysctl_icmp_echo_enable_probe. - icmp: Fix a data-race around sysctl_icmp_echo_ignore_broadcasts. - icmp: Fix a data-race around sysctl_icmp_ignore_bogus_error_responses. - icmp: Fix a data-race around sysctl_icmp_errors_use_inbound_ifaddr. - icmp: Fix a data-race around sysctl_icmp_ratelimit. - icmp: Fix a data-race around sysctl_icmp_ratemask. - raw: Fix a data-race around sysctl_raw_l3mdev_accept. - tcp: Fix data-races around sysctl_tcp_ecn. - tcp: Fix a data-race around sysctl_tcp_ecn_fallback. - ipv4: Fix data-races around sysctl_ip_dynaddr. - nexthop: Fix data-races around nexthop_compat_mode. - [amd64] ima: force signature verification when CONFIG_KEXEC_SIG is configured - drm/amd/display: Ignore First MST Sideband Message Return Error - [amd64] drm/amdkfd: correct the MEC atomic support firmware checking for GC 10.3.7 - drm/amd/display: Only use depth 36 bpp linebuffers on DCN display engines. (regression in 5.14) - drm/amd/pm: Prevent divide by zero - drm/amd/display: Ensure valid event timestamp for cursor-only commits - smb3: workaround negprot bug in some Samba servers - sfc: fix use after free when disabling sriov - netfs: do not unlock and put the folio twice - seg6: fix skb checksum evaluation in SRH encapsulation/insertion - seg6: fix skb checksum in SRv6 End.B6 and End.B6.Encaps behaviors - seg6: bpf: fix skb checksum in bpf_push_seg6_encap() - sfc: fix kernel panic when creating VF - net: atlantic: remove deep parameter on suspend/resume functions - net: atlantic: remove aq_nic_deinit() when resume (regression in 5.18) - [x86] KVM: x86: Fully initialize 'struct kvm_lapic_irq' in kvm_pv_kick_cpu_op() - net/tls: Check for errors in tls_device_init - mm: sysctl: fix missing numa_stat when !CONFIG_HUGETLB_PAGE - [arm64] tee: tee_get_drvdata(): fix description of return value - tty: extract tty_flip_buffer_commit() from tty_flip_buffer_push() - tty: use new tty_insert_flip_string_and_push_buffer() in pty_write() - scsi: megaraid: Clear READ queue map's nr_queues (regression in 5.13) - scsi: ufs: core: Drop loglevel of WriteBoost message (regression in 5.13) - nvme: fix block device naming collision (regression in 5.18) - ksmbd: use SOCK_NONBLOCK type for kernel_accept() - [x86] platform/x86: intel/pmc: Add Alder Lake N support to PMC core driver - virtio_mmio: Add missing PM calls to freeze/restore - virtio_mmio: Restore guest page size on resume - netfilter: nf_tables: avoid skb access on nf_stolen - netfilter: br_netfilter: do not skip all hooks with 0 priority - [arm64] scsi: hisi_sas: Limit max hw sectors for v3 HW - [powerpc*] cpufreq: pmac32-cpufreq: Fix refcount leak bug - [x86] platform/x86: thinkpad-acpi: profile capabilities as integer - [x86] platform/x86: thinkpad_acpi: do not use PSC mode on Intel platforms - [x86] platform/x86: hp-wmi: Ignore Sanitization Mode event - firmware: sysfb: Make sysfb_create_simplefb() return a pdev pointer - firmware: sysfb: Add sysfb_disable() helper function - fbdev: Disable sysfb device registration when removing conflicting FBs - net: tipc: fix possible refcount leak in tipc_sk_create() - nvme-tcp: always fail a request when sending it failed - nvme: fix regression when disconnect a recovering ctrl - net: sfp: fix memory leak in sfp_probe() - ASoC: ops: Fix off by one in range control validation - [armhf] pinctrl: aspeed: Fix potential NULL dereference in aspeed_pinmux_set_mux() - ASoC: Realtek/Maxim SoundWire codecs: disable pm_runtime on remove - ASoC: rt711-sdca-sdw: fix calibrate mutex initialization - [x86] ASoC: Intel: sof_sdw: handle errors on card registration - ASoC: rt711: fix calibrate mutex initialization - ASoC: rt7*-sdw: harden jack_detect_handler - ASoC: codecs: rt700/rt711/rt711-sdca: initialize workqueues in probe - [x86] ASoC: SOF: Intel: hda-dsp: Expose hda_dsp_core_power_up() - [x86] ASoC: SOF: Intel: hda-loader: Make sure that the fw load sequence is followed - [x86] ASoC: SOF: Intel: hda-loader: Clarify the cl_dsp_init() flow - [x86] ASoC: Intel: bytcr_wm5102: Fix GPIO related probe-ordering problem - ASoC: wm_adsp: Fix event for preloader - ASoC: cs35l41: Correct some control names - ASoC: rt711-sdca: fix kernel NULL pointer dereference when IO error - ASoC: dapm: Initialise kcontrol data for mux/demux controls - ASoC: cs35l41: Add ASP TX3/4 source to register patch - [amd64] Clear .brk area at early boot - [armhf] dts: stm32: use the correct clock source for CEC on stm32mp151 - Revert "can: xilinx_can: Limit CANFD brp to 2" - ALSA: usb-audio: Add quirks for MacroSilicon MS2100/MS2106 devices - ALSA: usb-audio: Add quirk for Fiero SC-01 - ALSA: usb-audio: Add quirk for Fiero SC-01 (fw v1.0.0) - nvme-pci: phison e16 has bogus namespace ids - nvme: use struct group for generic command dwords - signal handling: don't use BUG_ON() for debugging - ACPI: video: Fix acpi_video_handles_brightness_key_presses() - vt: fix memory overlapping when deleting chars in the buffer - [s390x] ap: fix error handling in __verify_queue_reservations() - [x86] ACPI: CPPC: Fix enabling CPPC on AMD systems with shared memory - serial: 8250: fix return error code in serial8250_request_std_resource() - power: supply: core: Fix boundary conditions in interpolation (regression in 5.17) - [armhf] serial: stm32: Clear prev values before setting RTS delays - [arm*] serial: pl011: UPSTAT_AUTORTS requires .throttle/unthrottle - serial: 8250: Fix PM usage_count for console handover - [arm64] serial: mvebu-uart: correctly report configured baudrate value - [x86] pat: Fix x86_has_pat_wp() - [i386] drm/i915/ttm: fix 32b build - drm/aperture: Run fbdev removal before internal helpers https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.18.14 - [amd64] Preparation for mitigating RETbleed: + x86/traps: Use pt_regs directly in fixup_bad_iret() + x86/entry: Switch the stack after error_entry() returns + x86/entry: Move PUSH_AND_CLEAR_REGS out of error_entry() + x86/entry: Don't call error_entry() for XENPV + x86/entry: Remove skip_r11rcx - [amd64] Add mitigations for RETbleed on AMD/Hygon (CVE-2022-29900) and Intel (CVE-2022-29901) processors: + x86/kvm/vmx: Make noinstr clean + x86/cpufeatures: Move RETPOLINE flags to word 11 + x86/retpoline: Cleanup some #ifdefery + x86/retpoline: Swizzle retpoline thunk + x86/retpoline: Use -mfunction-return + x86: Undo return-thunk damage + x86,objtool: Create .return_sites + objtool: skip non-text sections when adding return-thunk sites + x86,static_call: Use alternative RET encoding + x86/ftrace: Use alternative RET encoding + x86/bpf: Use alternative RET encoding + x86/kvm: Fix SETcc emulation for return thunks + x86/vsyscall_emu/64: Don't use RET in vsyscall emulation + x86/sev: Avoid using __x86_return_thunk + x86: Use return-thunk in asm code + x86/entry: Avoid very early RET + objtool: Treat .text.__x86.* as noinstr + x86: Add magic AMD return-thunk + x86/bugs: Report AMD retbleed vulnerability + x86/bugs: Add AMD retbleed= boot parameter + x86/bugs: Enable STIBP for JMP2RET + x86/bugs: Keep a per-CPU IA32_SPEC_CTRL value + x86/entry: Add kernel IBRS implementation + x86/bugs: Optimize SPEC_CTRL MSR writes + x86/speculation: Add spectre_v2=ibrs option to support Kernel IBRS + x86/bugs: Split spectre_v2_select_mitigation() and spectre_v2_user_select_mitigation() + x86/bugs: Report Intel retbleed vulnerability + intel_idle: Disable IBRS during long idle + objtool: Update Retpoline validation + x86/xen: Rename SYS* entry points + x86/xen: Add UNTRAIN_RET + x86/bugs: Add retbleed=ibpb + x86/bugs: Do IBPB fallback check only once + objtool: Add entry UNRET validation + x86/cpu/amd: Add Spectral Chicken + x86/speculation: Fix RSB filling with CONFIG_RETPOLINE=n + x86/speculation: Fix firmware entry SPEC_CTRL handling + x86/speculation: Fix SPEC_CTRL write on SMT state change + x86/speculation: Use cached host SPEC_CTRL value for guest entry/exit + x86/speculation: Remove x86_spec_ctrl_mask + objtool: Re-add UNWIND_HINT_{SAVE_RESTORE} + KVM: VMX: Flatten __vmx_vcpu_run() + KVM: VMX: Convert launched argument to flags + KVM: VMX: Prevent guest RSB poisoning attacks with eIBRS + KVM: VMX: Fix IBRS handling after vmexit + x86/speculation: Fill RSB on vmexit for IBRS + KVM: VMX: Prevent RSB underflow before vmenter + x86/common: Stamp out the stepping madness + x86/cpu/amd: Enumerate BTC_NO + x86/retbleed: Add fine grained Kconfig knobs + x86/bugs: Add Cannon lake to RETBleed affected CPU list + x86/entry: Move PUSH_AND_CLEAR_REGS() back into error_entry + x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported + x86/kexec: Disable RET on kexec + x86/speculation: Disable RRSBA behavior + x86/static_call: Serialize __static_call_fixup() properly + x86/asm/32: Fix ANNOTATE_UNRET_SAFE use on 32-bit + x86/speculation: Use DECLARE_PER_CPU for x86_spec_ctrl_current + efi/x86: use naked RET on mixed mode call wrapper + x86/kvm: fix FASTOP_SIZE when return thunks are enabled + KVM: emulate: do not adjust size of fastop and setcc subroutines + tools arch x86: Sync the msr-index.h copy with the kernel sources + tools headers cpufeatures: Sync with the kernel sources + x86/bugs: Remove apostrophe typo + um: Add missing apply_returns() . [ John Paul Adrian Glaubitz ] * [ia64] Disable CONFIG_HARDENED_USERCOPY which is currently broken . [ Ben Hutchings ] * [arm64] pinctrl: Re-enable PINCTRL_MSM (regression in 5.14) * lintian: Update overrides for lintian 2.115 * [rt] Update to 5.18-rt11: - Revert "softirq: Check preemption after reenabling interrupts" * Bump ABI to 3 * Disable SECURITY_LOCKDOWN_LSM and MODULE_SIG where we don't sign code (Closes: #825141) * tools/bpf, tools/perf: Update for init_disassemble_info() API change in binutils 2.38.50 * tools/perf: Fix "unused parameter" warning introduced by "tools/perf: pmu-events: Fix reproducibility" * [amd64,arm64,armhf] wireguard: Clear keys after suspend despite CONFIG_ANDROID=y * d/salsa-ci.yml: Sync build-script with upstream * d/salsa-ci.yml: Handle APT sources in debian.sources as well as sources.list * d/tests: Remove obsolete dependencies of python test * d/tests: Add kbuild test that builds a trivial OOT module * linux-kbuild: Add missing pahole-version.sh script * [amd64] ata: Enable PATA_LEGACY (Closes: #910010) * udeb: Add essiv to crypto-modules (Closes: #973378) * udeb: Add SCSI device handlers to multipath-modules (Closes: #989079) * linux-source: Update Recommends to include all dependencies for deb-pkg target * [x86] speculation: Make all RETbleed mitigations depend on X86_64 . [ Vincent Blut ] * [armhf] drivers/crypto/caam: Enable CRYPTO_DEV_FSL_CAAM as module (Closes: #1013255) * drivers/net/wireless/mediatek/mt76/mt7921: Enable MT7921U as module (Closes: #1015808) . linux (5.18.5-1) unstable; urgency=medium . * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.18.3 - binfmt_flat: do not stop relocating GOT entries prematurely on riscv - parisc: fix a crash with multicore scheduler - parisc/stifb: Implement fb_is_primary_device() - parisc/stifb: Keep track of hardware path of graphics card - RISC-V: Mark IORESOURCE_EXCLUSIVE for reserved mem instead of IORESOURCE_BUSY - riscv: Initialize thread pointer before calling C functions - riscv: Fix irq_work when SMP is disabled - riscv: Wire up memfd_secret in UAPI header - riscv: Move alternative length validation into subsection - ALSA: hda/realtek - Add new type for ALC245 - ALSA: hda/realtek: Enable 4-speaker output for Dell XPS 15 9520 laptop - ALSA: hda/realtek - Fix microphone noise on ASUS TUF B550M-PLUS - ALSA: usb-audio: Cancel pending work at closing a MIDI substream - USB: serial: pl2303: fix type detection for odd device - USB: serial: option: add Quectel BG95 modem - USB: new quirk for Dell Gen 2 devices - usb: isp1760: Fix out-of-bounds array access - usb: dwc3: gadget: Move null pinter check to proper place - usb: core: hcd: Add support for deferring roothub registration - fs/ntfs3: provide block_invalidate_folio to fix memory leak - fs/ntfs3: Update valid size if -EIOCBQUEUED - fs/ntfs3: Fix fiemap + fix shrink file size (to remove preallocated space) - fs/ntfs3: Keep preallocated only if option prealloc enabled - fs/ntfs3: Check new size for limits - fs/ntfs3: In function ntfs_set_acl_ex do not change inode->i_mode if called from function ntfs_init_acl - fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()' - fs/ntfs3: Update i_ctime when xattr is added - fs/ntfs3: Restore ntfs_xattr_get_acl and ntfs_xattr_set_acl functions - cifs: don't call cifs_dfs_query_info_nonascii_quirk() if nodfs was set - cifs: fix ntlmssp on old servers - cifs: fix potential double free during failed mount - cifs: when extending a file with falloc we should make files not-sparse - xhci: Set HCD flag to defer primary roothub registration - xhci: Allow host runtime PM as default for Intel Alder Lake N xHCI - platform/x86: intel-hid: fix _DSM function index handling - x86/MCE/AMD: Fix memory leak when threshold_create_bank() fails - perf/x86/intel: Fix event constraints for ICL - x86/kexec: fix memory leak of elf header buffer - x86/sgx: Set active memcg prior to shmem allocation - kthread: Don't allocate kthread_struct for init and umh - ptrace/um: Replace PT_DTRACE with TIF_SINGLESTEP - ptrace/xtensa: Replace PT_SINGLESTEP with TIF_SINGLESTEP - ptrace: Reimplement PTRACE_KILL by always sending SIGKILL - btrfs: add "0x" prefix for unsupported optional features - btrfs: return correct error number for __extent_writepage_io() - btrfs: repair super block num_devices automatically - btrfs: fix the error handling for submit_extent_page() for btrfs_do_readpage() - btrfs: fix deadlock between concurrent dio writes when low on free data space - btrfs: zoned: properly finish block group on metadata write - btrfs: zoned: zone finish unused block group - btrfs: zoned: finish block group when there are no more allocatable bytes left - btrfs: zoned: fix comparison of alloc_offset vs meta_write_pointer - iommu/vt-d: Add RPLS to quirk list to skip TE disabling - drm/selftests: fix a shift-out-of-bounds bug - drm/vmwgfx: validate the screen formats - ath11k: fix the warning of dev_wake in mhi_pm_disable_transition() - drm/virtio: fix NULL pointer dereference in virtio_gpu_conn_get_modes - selftests/bpf: Fix vfs_link kprobe definition - selftests/bpf: Fix parsing of prog types in UAPI hdr for bpftool sync - ath11k: Change max no of active probe SSID and BSSID to fw capability - selftests/bpf: Fix file descriptor leak in load_kallsyms() - rtw89: ser: fix CAM leaks occurring in L2 reset - rtw89: fix misconfiguration on hw_scan channel time - mwifiex: add mutex lock for call in mwifiex_dfs_chan_sw_work_queue - b43legacy: Fix assigning negative value to unsigned variable - b43: Fix assigning negative value to unsigned variable - ipw2x00: Fix potential NULL dereference in libipw_xmit() - ipv6: fix locking issues with loops over idev->addr_list - fbcon: Consistently protect deferred_takeover with console_lock() - x86/platform/uv: Update TSC sync state for UV5 - ACPICA: Avoid cache flush inside virtual machines - libbpf: Fix a bug with checking bpf_probe_read_kernel() support in old kernels - mac80211: minstrel_ht: fix where rate stats are stored (fixes debugfs output) - drm/komeda: return early if drm_universal_plane_init() fails. - drm/amd/display: Disabling Z10 on DCN31 - rcu-tasks: Fix race in schedule and flush work - rcu-tasks: Handle sparse cpu_possible_mask in rcu_tasks_invoke_cbs() - rcu: Make TASKS_RUDE_RCU select IRQ_WORK - sfc: ef10: Fix assigning negative value to unsigned variable - ALSA: jack: Access input_dev under mutex - rtw88: fix incorrect frequency reported - rtw88: 8821c: fix debugfs rssi value - spi: spi-rspi: Remove setting {src,dst}_{addr,addr_width} based on DMA direction - tools/power turbostat: fix ICX DRAM power numbers - tcp: consume incoming skb leading to a reset - loop: implement ->free_disk - scsi: lpfc: Move cfg_log_verbose check before calling lpfc_dmp_dbg() - scsi: lpfc: Fix SCSI I/O completion and abort handler deadlock - scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI - scsi: lpfc: Protect memory leak for NPIV ports sending PLOGI_RJT - scsi: lpfc: Fix call trace observed during I/O with CMF enabled - cpuidle: PSCI: Improve support for suspend-to-RAM for PSCI OSI mode - drm/amdgpu/pm: fix the null pointer while the smu is disabled - drm/amd/pm: fix double free in si_parse_power_table() - ASoC: rsnd: care default case on rsnd_ssiu_busif_err_status_clear() - ASoC: rsnd: care return value from rsnd_node_fixed_index() - net: macb: In ZynqMP initialization make SGMII phy configuration optional - ath9k: fix QCA9561 PA bias level - media: Revert "media: dw9768: activate runtime PM and turn off device" - media: i2c: dw9714: Disable the regulator when the driver fails to probe - media: venus: hfi: avoid null dereference in deinit - media: venus: do not queue internal buffers from previous sequence - media: pci: cx23885: Fix the error handling in cx23885_initdev() - media: cx25821: Fix the warning when removing the module - md/bitmap: don't set sb values if can't pass sanity check - mmc: jz4740: Apply DMA engine limits to maximum segment size - drivers: mmc: sdhci_am654: Add the quirk to set TESTCD bit - scsi: megaraid: Fix error check return value of register_chrdev() - drm/amdgpu/sdma: Fix incorrect calculations of the wptr of the doorbells - scsi: ufs: Use pm_runtime_resume_and_get() instead of pm_runtime_get_sync() - scsi: lpfc: Fix resource leak in lpfc_sli4_send_seq_to_ulp() - ath11k: disable spectral scan during spectral deinit - ASoC: Intel: bytcr_rt5640: Add quirk for the HP Pro Tablet 408 - drm/plane: Move range check for format_count earlier - drm/amdkfd: Fix circular lock dependency warning - drm/amd/pm: fix the compile warning - ath10k: skip ath10k_halt during suspend for driver state RESTARTING - arm64: compat: Do not treat syscall number as ESR_ELx for a bad syscall - drm: msm: fix error check return value of irq_of_parse_and_map() - drm/msm/dpu: Clean up CRC debug logs - xtensa: move trace_hardirqs_off call back to entry.S - ath11k: fix warning of not found station for bssid in message - scsi: target: tcmu: Fix possible data corruption - ipv6: Don't send rs packets to the interface of ARPHRD_TUNNEL - net/mlx5: use kvfree() for kvzalloc() in mlx5_ct_fs_smfs_matcher_create - net/mlx5: fs, delete the FTE when there are no rules attached to it - ASoC: dapm: Don't fold register value changes into notifications - ASoC: SOF: ipc3-topology: Correct get_control_data for non bytes payload - mlxsw: spectrum_dcb: Do not warn about priority changes - mlxsw: Treat LLDP packets as control - drm/amdgpu/psp: move PSP memory alloc from hw_init to sw_init - drm/amdgpu/ucode: Remove firmware load type check in amdgpu_ucode_free_bo - regulator: mt6315: Enforce regulator-compatible, not name - ice: always check VF VSI pointer values - HID: bigben: fix slab-out-of-bounds Write in bigben_probe - drm/tegra: gem: Do not try to dereference ERR_PTR() - of: Support more than one crash kernel regions for kexec -s - ASoC: tscs454: Add endianness flag in snd_soc_component_driver - net/mlx5: Increase FW pre-init timeout for health recovery - ASoC: Intel: sof_ssp_amp: fix no DMIC BE Link on Chromebooks - scsi: hisi_sas: Undo RPM resume for failed notify phy event for v3 HW - scsi: lpfc: Inhibit aborts if external loopback plug is inserted - scsi: lpfc: Alter FPIN stat accounting logic - net: remove two BUG() from skb_checksum_help() - s390/preempt: disable __preempt_count_add() optimization for PROFILE_ALL_BRANCHES - perf/amd/ibs: Cascade pmu init functions' return value - sched/core: Avoid obvious double update_rq_clock warning - spi: stm32-qspi: Fix wait_cmd timeout in APM mode - dma-debug: change allocation mode from GFP_NOWAIT to GFP_ATIOMIC - fs: hold writers when changing mount's idmapping - ASoC: SOF: amd: add missing platform_device_unregister in acp_pci_rn_probe - ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default - ipmi:ssif: Check for NULL msg when handling events and messages - ipmi: Add an intializer for ipmi_smi_msg struct - ipmi: Fix pr_fmt to avoid compilation issues - kunit: bail out of test filtering logic quicker if OOM - rtlwifi: Use pr_warn instead of WARN_ONCE - mt76: mt7915: accept rx frames with non-standard VHT MCS10-11 - mt76: mt7921: accept rx frames with non-standard VHT MCS10-11 - mt76: fix encap offload ethernet type check - media: rga: fix possible memory leak in rga_probe - media: coda: limit frame interval enumeration to supported encoder frame sizes - media: hantro: HEVC: unconditionnaly set pps_{cb/cr}_qp_offset values - media: ccs-core.c: fix failure to call clk_disable_unprepare - media: imon: reorganize serialization - media: cec-adap.c: fix is_configuring state - usbnet: Run unregister_netdev() before unbind() again - Bluetooth: HCI: Add HCI_QUIRK_BROKEN_ENHANCED_SETUP_SYNC_CONN quirk - Bluetooth: btusb: Set HCI_QUIRK_BROKEN_ENHANCED_SETUP_SYNC_CONN for QCA - Bluetooth: btusb: Set HCI_QUIRK_BROKEN_ERR_DATA_REPORTING for QCA - bnxt_en: Configure ptp filters during bnxt open - media: mediatek: vcodec: prevent kernel crash when rmmod mtk-vcodec-dec.ko - openrisc: start CPU timer early in boot - nvme-pci: fix a NULL pointer dereference in nvme_alloc_admin_tags - ASoC: rt5645: Fix errorenous cleanup order - nbd: Fix hung on disconnect request if socket is closed before - drm/amd/pm: update smartshift powerboost calc for smu12 - drm/amd/pm: update smartshift powerboost calc for smu13 - drm/amdgpu: Move mutex_init(&smu->message_lock) to smu_early_init() - btrfs: fix anon_dev leak in create_subvol() - kunit: tool: make parser stop overwriting status of suites w/ no_tests - net: phy: micrel: Allow probing without .driver_data - media: exynos4-is: Fix compile warning - media: hantro: Stop using H.264 parameter pic_num - rtw89: cfo: check mac_id to avoid out-of-bounds - of/fdt: Ignore disabled memory nodes - blk-throttle: Set BIO_THROTTLED when bio has been throttled - ASoC: max98357a: remove dependency on GPIOLIB - ASoC: rt1015p: remove dependency on GPIOLIB - ACPI: CPPC: Assume no transition latency if no PCCT - nvme: set non-mdts limits in nvme_scan_work - can: mcp251xfd: silence clang's -Wunaligned-access warning - x86/microcode: Add explicit CPU vendor dependency - net: ipa: ignore endianness if there is no header - selftests/bpf: Add missing trampoline program type to trampoline_count test - m68k: atari: Make Atari ROM port I/O write macros return void - hwmon: (pmbus) Add get_voltage/set_voltage ops - rxrpc: Return an error to sendmsg if call failed - rxrpc, afs: Fix selection of abort codes - afs: Adjust ACK interpretation to try and cope with NAT - eth: tg3: silence the GCC 12 array-bounds warning - char: tpm: cr50_i2c: Suppress duplicated error message in .remove() - selftests/bpf: fix btf_dump/btf_dump due to recent clang change - gfs2: use i_lock spin_lock for inode qadata - linux/types.h: reinstate "__bitwise__" macro for user space use - scsi: target: tcmu: Avoid holding XArray lock when calling lock_page - kunit: fix executor OOM error handling logic on non-UML - IB/rdmavt: add missing locks in rvt_ruc_loopback - PCI/ASPM: Make Intel DG2 L1 acceptable latency unlimited - ARM: dts: ox820: align interrupt controller node name with dtschema - ARM: dts: socfpga: align interrupt controller node name with dtschema - ARM: dts: s5pv210: align DMA channels with dtschema - ASoC: amd: Add driver data to acp6x machine driver - arm64: dts: qcom: msm8994: Fix the cont_splash_mem address - arm64: dts: qcom: msm8994: Fix BLSP[12]_DMA channels count - PM / devfreq: rk3399_dmc: Disable edev on remove() - crypto: ccree - use fine grained DMA mapping dir - crypto: qat - fix off-by-one error in PFVF debug print - soc: ti: ti_sci_pm_domains: Check for null return of devm_kcalloc - fs: jfs: fix possible NULL pointer dereference in dbFree() - arm64: dts: qcom: sdm845-xiaomi-beryllium: fix typo in panel's vddio-supply property - ALSA: usb-audio: Add quirk bits for enabling/disabling generic implicit fb - ALSA: usb-audio: Move generic implicit fb quirk entries into quirks.c - ARM: OMAP1: clock: Fix UART rate reporting algorithm - powerpc/fadump: Fix fadump to work with a different endian capture kernel - fat: add ratelimit to fat*_ent_bread() - pinctrl: renesas: rzn1: Fix possible null-ptr-deref in sh_pfc_map_resources() - ARM: versatile: Add missing of_node_put in dcscb_init - ARM: dts: exynos: add atmel,24c128 fallback to Samsung EEPROM - arm64: dts: qcom: sc7280-idp: Configure CTS pin to bias-bus-hold for bluetooth - arm64: dts: qcom: sc7280-qcard: Configure CTS pin to bias-bus-hold for bluetooth - ARM: hisi: Add missing of_node_put after of_find_compatible_node - cpufreq: Avoid unnecessary frequency updates due to mismatch - PCI: microchip: Add missing chained_irq_enter()/exit() calls - powerpc/rtas: Keep MSR[RI] set when calling RTAS - PCI: Avoid pci_dev_lock() AB/BA deadlock with sriov_numvfs_store() - PCI: cadence: Clear FLR in device capabilities register - KVM: PPC: Book3S HV Nested: L2 LPCR should inherit L1 LPES setting - alpha: fix alloc_zeroed_user_highpage_movable() - tracing: incorrect isolate_mote_t cast in mm_vmscan_lru_isolate - cifs: return ENOENT for DFS lookup_cache_entry() - powerpc/powernv/vas: Assign real address to rx_fifo in vas_rx_win_attr - powerpc/xics: fix refcount leak in icp_opal_init() - powerpc/powernv: fix missing of_node_put in uv_init() - macintosh/via-pmu: Fix build failure when CONFIG_INPUT is disabled - powerpc/iommu: Add missing of_node_put in iommu_init_early_dart - fanotify: fix incorrect fmode_t casts - smb3: check for null tcon - RDMA/hfi1: Prevent panic when SDMA is disabled - cifs: do not use tcpStatus after negotiate completes - Input: gpio-keys - cancel delayed work only in case of GPIO - drm: fix EDID struct for old ARM OABI format - drm/bridge_connector: enable HPD by default if supported - drm/selftests: missing error code in igt_buddy_alloc_smoke() - drm/omap: fix NULL but dereferenced coccicheck error - dt-bindings: display: sitronix, st7735r: Fix backlight in example - drm/bridge: anx7625: check the return on anx7625_aux_trans - drm: ssd130x: Fix COM scan direction register mask - drm: ssd130x: Always apply segment remap setting - drm/solomon: Make DRM_SSD130X depends on MMU - drm/format-helper: Rename drm_fb_xrgb8888_to_mono_reversed() - drm/format-helper: Fix XRGB888 to monochrome conversion - drm/ssd130x: Fix rectangle updates - drm/ssd130x: Reduce temporary buffer sizes - fbdev: defio: fix the pagelist corruption - drm/vmwgfx: Fix an invalid read - ath11k: acquire ab->base_lock in unassign when finding the peer by addr - drm: bridge: it66121: Fix the register page length - drm/bridge: it6505: Fix build error - ath9k: fix ar9003_get_eepmisc - drm/edid: fix invalid EDID extension block filtering - drm/bridge: anx7625: add missing destroy_workqueue() in anx7625_i2c_probe() - drm/bridge: adv7511: clean up CEC adapter when probe fails - drm: bridge: icn6211: Fix register layout - drm: bridge: icn6211: Fix HFP_HSW_HBP_HI and HFP_MIN handling - mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG - spi: qcom-qspi: Add minItems to interconnect-names - ASoC: codecs: Fix error handling in power domain init and exit handlers - ASoC: cs35l41: Fix an out-of-bounds access in otp_packed_element_t - ASoC: SOF: ipc3-topology: Set scontrol->priv to NULL after freeing it - ASoC: mediatek: Fix error handling in mt8173_max98090_dev_probe - ASoC: mediatek: Fix missing of_node_put in mt2701_wm8960_machine_probe - docs: driver-api/thermal/intel_dptf: Use copyright symbol - x86/delay: Fix the wrong asm constraint in delay_loop() - drm/mediatek: Add vblank register/unregister callback functions - drm/mediatek: Fix DPI component detection for MT8192 - drm/vc4: kms: Take old state core clock rate into account - drm/vc4: hvs: Fix frame count register readout - drm/mediatek: Fix mtk_cec_mask() - drm/amd/amdgpu: Only reserve vram for firmware with vega9 MS_HYPERV host. - drm/vc4: hvs: Reset muxes at probe time - drm/vc4: txp: Don't set TXP_VSTART_AT_EOF - drm/vc4: txp: Force alpha to be 0xff if it's disabled - libbpf: Don't error out on CO-RE relos for overriden weak subprogs - x86/PCI: Fix ALi M1487 (IBC) PIRQ router link value interpretation - mptcp: optimize release_cb for the common case - mptcp: reset the packet scheduler on incoming MP_PRIO - mptcp: reset the packet scheduler on PRIO change - nl80211: show SSID for P2P_GO interfaces - drm/komeda: Fix an undefined behavior bug in komeda_plane_add() - drm: mali-dp: potential dereference of null pointer - drm/amd/amdgpu: Fix asm/hypervisor.h build error. - spi: spi-ti-qspi: Fix return value handling of wait_for_completion_timeout - scftorture: Fix distribution of short handler delays - net: ethernet: ti: am65-cpsw: Fix build error without PHYLINK - net: dsa: mt7530: 1G can also support 1000BASE-X link mode - ixp4xx_eth: fix error check return value of platform_get_irq() - NFC: NULL out the dev->rfkill to prevent UAF - cpufreq: governor: Use kobject release() method to free dbs_data - efi: Allow to enable EFI runtime services by default on RT - efi: Add missing prototype for efi_capsule_setup_info - device property: Allow error pointer to be passed to fwnode APIs - drm/amd/amdgpu: Remove static from variable in RLCG Reg RW - net: dsa: qca8k: correctly handle mdio read error - target: remove an incorrect unmap zeroes data deduction - drbd: remove assign_p_sizes_qlim - drbd: use bdev based limit helpers in drbd_send_sizes - drbd: use bdev_alignment_offset instead of queue_alignment_offset - drbd: fix duplicate array initializer - EDAC/dmc520: Don't print an error for each unconfigured interrupt line - bpf: Move rcu lock management out of BPF_PROG_RUN routines - drm/bridge: anx7625: Use uint8 for lane-swing arrays - mtd: rawnand: denali: Use managed device resources - HID: hid-led: fix maximum brightness for Dream Cheeky - HID: elan: Fix potential double free in elan_input_configured - drm/bridge: Fix error handling in analogix_dp_probe - regulator: da9121: Fix uninit-value in da9121_assign_chip_model() - drm/mediatek: dpi: Use mt8183 output formats for mt8192 - signal: Deliver SIGTRAP on perf event asynchronously if blocked - sched/fair: Fix cfs_rq_clock_pelt() for throttled cfs_rq - sched/psi: report zeroes for CPU full at the system level - spi: img-spfi: Fix pm_runtime_get_sync() error checking - drm/bridge: Fix it6505 Kconfig DRM_DP_AUX_BUS dependency - cpufreq: Fix possible race in cpufreq online error path - printk: add missing memory barrier to wake_up_klogd() - printk: wake waiters for safe and NMI contexts - ath9k_htc: fix potential out of bounds access with invalid rxstatus->rs_keyix - media: i2c: max9286: fix kernel oops when removing module - media: amphion: fix decoder's interlaced field - media: hantro: Implement support for encoder commands - media: hantro: Empty encoder capture buffers by default - media: imx: imx-mipi-csis: Rename csi_state to mipi_csis_device - media: imx: imx-mipi-csis: Fix active format initialization on source pad - drm/panel: simple: Add missing bus flags for Innolux G070Y2-L01 - ALSA: pcm: Check for null pointer of pointer substream before dereferencing it - mtdblock: warn if opened on NAND - inotify: show inotify mask flags in proc fdinfo - fsnotify: fix wrong lockdep annotations - spi: rockchip: fix missing error on unsupported SPI_CS_HIGH - of: overlay: do not break notify on NOTIFY_{OK|STOP} - selftests/damon: add damon to selftests root Makefile - drm/msm: properly add and remove internal bridges - drm/msm/dpu: adjust display_v_end for eDP and DP - scsi: iscsi: Fix harmless double shift bug - scsi: ufs: qcom: Fix ufs_qcom_resume() - scsi: ufs: core: Exclude UECxx from SFR dump list - drm/v3d: Fix null pointer dereference of pointer perfmon - selftests/resctrl: Fix null pointer dereference on open failed - libbpf: Fix logic for finding matching program for CO-RE relocation - mtd: spi-nor: core: Check written SR value in spi_nor_write_16bit_sr_and_check() - x86/pm: Fix false positive kmemleak report in msr_build_context() - mtd: rawnand: cadence: fix possible null-ptr-deref in cadence_nand_dt_probe() - mtd: rawnand: intel: fix possible null-ptr-deref in ebu_nand_probe() - x86/speculation: Add missing prototype for unpriv_ebpf_notify() - ASoC: rk3328: fix disabling mclk on pclk probe failure - perf tools: Add missing headers needed by util/data.h - drm/msm/disp/dpu1: set vbif hw config to NULL to avoid use after memory free during pm runtime resume - drm/msm/dp: stop event kernel thread when DP unbind - drm/msm/dp: fix error check return value of irq_of_parse_and_map() - drm/msm/dp: reset DP controller before transmit phy test pattern - drm/msm/dp: do not stop transmitting phy test pattern during DP phy compliance test - drm/msm/dsi: fix error checks and return values for DSI xmit functions - drm/msm/hdmi: check return value after calling platform_get_resource_byname() - drm/msm/hdmi: fix error check return value of irq_of_parse_and_map() - drm/msm: add missing include to msm_drv.c - drm/panel: panel-simple: Fix proper bpc for AM-1280800N3TZQW-T00H - drm/bridge: it6505: Send DPCD SET_POWER to downstream - drm/msm: Fix null pointer dereferences without iommu - kunit: fix debugfs code to use enum kunit_status, not bool - drm/rockchip: vop: fix possible null-ptr-deref in vop_bind() - spi: cadence-quadspi: fix Direct Access Mode disable for SoCFPGA - perf tools: Use Python devtools for version autodetection rather than runtime - virtio_blk: fix the discard_granularity and discard_alignment queue limits - nl80211: don't hold RTNL in color change request - x86: Fix return value of __setup handlers - irqchip/exiu: Fix acknowledgment of edge triggered interrupts - irqchip/aspeed-i2c-ic: Fix irq_of_parse_and_map() return value - irqchip/aspeed-scu-ic: Fix irq_of_parse_and_map() return value - x86/mm: Cleanup the control_va_addr_alignment() __setup handler - arm64: fix types in copy_highpage() - regulator: core: Fix enable_count imbalance with EXCLUSIVE_GET - wl1251: dynamically allocate memory used for DMA - linkage: Fix issue with missing symbol size - ACPI: AGDI: Fix missing prototype warning for acpi_agdi_init() - drm/msm/disp/dpu1: avoid clearing hw interrupts if hw_intr is null during drm uninit - drm/msm/dsi: fix address for second DSI PHY on SDM660 - drm/msm/dp: fix event thread stuck in wait_event after kthread_stop() - drm/msm/mdp5: Return error code in mdp5_pipe_release when deadlock is detected - drm/msm/mdp5: Return error code in mdp5_mixer_release when deadlock is detected - drm/msm: return an error pointer in msm_gem_prime_get_sg_table() - media: uvcvideo: Fix missing check to determine if element is found in list - arm64: stackleak: fix current_top_of_stack() - iomap: iomap_write_failed fix - spi: spi-fsl-qspi: check return value after calling platform_get_resource_byname() - selftests/bpf: Prevent skeleton generation race - Revert "cpufreq: Fix possible race in cpufreq online error path" - regulator: qcom_smd: Fix up PM8950 regulator configuration - samples: bpf: Don't fail for a missing VMLINUX_BTF when VMLINUX_H is provided - perf/amd/ibs: Use interrupt regs ip for stack unwinding - ath11k: Don't check arvif->is_started before sending management frames - scsi: lpfc: Fix element offset in __lpfc_sli_release_iocbq_s4() - scsi: lpfc: Fix dmabuf ptr assignment in lpfc_ct_reject_event() - wilc1000: fix crash observed in AP mode with cfg80211_register_netdevice() - HID: amd_sfh: Modify the bus name - HID: amd_sfh: Modify the hid name - ASoC: fsl: Fix refcount leak in imx_sgtl5000_probe - ASoC: imx-hdmi: Fix refcount leak in imx_hdmi_probe - ASoC: mxs-saif: Fix refcount leak in mxs_saif_probe - regulator: pfuze100: Fix refcount leak in pfuze_parse_regulators_dt - PM: EM: Decrement policy counter - dma-direct: don't fail on highmem CMA pages in dma_direct_alloc_pages - ASoC: samsung: Fix refcount leak in aries_audio_probe - block: Fix the bio.bi_opf comment - kselftest/cgroup: fix test_stress.sh to use OUTPUT dir - scripts/faddr2line: Fix overlapping text section failures - media: aspeed: Fix an error handling path in aspeed_video_probe() - media: exynos4-is: Fix PM disable depth imbalance in fimc_is_probe - mt76: mt7915: fix DBDC default band selection on MT7915D - mt76: mt7921: honor pm user configuration in mt7921_sniffer_interface_iter - mt76: mt7915: fix unbounded shift in mt7915_mcu_beacon_mbss - mt76: mt7921: Fix the error handling path of mt7921_pci_probe() - mt76: mt7915: fix possible uninitialized pointer dereference in mt7986_wmac_gpio_setup - mt76: mt7915: fix possible NULL pointer dereference in mt7915_mac_fill_rx_vector - mt76: mt7915: do not pass data pointer to mt7915_mcu_muru_debug_set - mt76: mt7915: report rx mode value in mt7915_mac_fill_rx_rate - mt76: fix antenna config missing in 6G cap - mt76: mt7921: fix kernel crash at mt7921_pci_remove - mt76: do not attempt to reorder received 802.3 packets without agg session - mt76: fix tx status related use-after-free race on station removal - mt76: mt7915: fix twt table_mask to u16 in mt7915_dev - media: st-delta: Fix PM disable depth imbalance in delta_probe - media: atmel: atmel-isc: Fix PM disable depth imbalance in atmel_isc_probe - media: i2c: rdacm2x: properly set subdev entity function - media: exynos4-is: Change clk_disable to clk_disable_unprepare - media: pvrusb2: fix array-index-out-of-bounds in pvr2_i2c_core_init - media: make RADIO_ADAPTERS tristate - media: vsp1: Fix offset calculation for plane cropping - media: atmel: atmel-sama5d2-isc: fix wrong mask in YUYV format check - media: hantro: HEVC: Fix tile info buffer value computation - Bluetooth: mt7921s: Fix the incorrect pointer check - Bluetooth: fix dangling sco_conn and use-after-free in sco_sock_timeout - Bluetooth: use hdev lock in activate_scan for hci_is_adv_monitoring - Bluetooth: use hdev lock for accept_list and reject_list in conn req - Bluetooth: protect le accept and resolv lists with hdev->lock - Bluetooth: btmtksdio: fix use-after-free at btmtksdio_recv_event - Bluetooth: btmtksdio: fix possible FW initialization failure - Bluetooth: btmtksdio: fix the reset takes too long - media: mediatek: vcodec: Fix v4l2 compliance decoder cmd test fail - io_uring: avoid io-wq -EAGAIN looping for !IOPOLL - io_uring: only wake when the correct events are set - irqchip/gic-v3: Ensure pseudo-NMIs have an ISB between ack and handling - irqchip/gic-v3: Refactor ISB + EOIR at ack time - irqchip/gic-v3: Fix priority mask handling - nvme: set dma alignment to dword - m68k: math-emu: Fix dependencies of math emulation support - net: annotate races around sk->sk_bound_dev_if - sctp: read sk->sk_bound_dev_if once in sctp_rcv() - net: hinic: add missing destroy_workqueue in hinic_pf_to_mgmt_init - ASoC: ti: j721e-evm: Fix refcount leak in j721e_soc_probe_* - kselftest/arm64: bti: force static linking - media: ov7670: remove ov7670_power_off from ov7670_remove - media: i2c: ov2640: Depend on V4L2_ASYNC - media: i2c: ov5648: fix wrong pointer passed to IS_ERR() and PTR_ERR() - media: rkvdec: h264: Fix dpb_valid implementation - media: rkvdec: h264: Fix bit depth wrap in pps packet - regulator: scmi: Fix refcount leak in scmi_regulator_probe - blk-cgroup: always terminate io.stat lines - erofs: fix buffer copy overflow of ztailpacking feature - net/mlx5e: Correct the calculation of max channels for rep - ext4: reject the 'commit' option on ext2 filesystems - drm/msm/dsi: don't powerup at modeset time for parade-ps8640 - drm/msm/a6xx: Fix refcount leak in a6xx_gpu_init - drm: msm: fix possible memory leak in mdp5_crtc_cursor_set() - x86/sev: Annotate stack change in the #VC handler - drm/msm: don't free the IRQ if it was not requested - selftests/bpf: Add missed ima_setup.sh in Makefile - drm/msm/dpu: handle pm_runtime_get_sync() errors in bind path - drm/i915: Fix CFI violation with show_dynamic_id() - thermal/drivers/bcm2711: Don't clamp temperature at zero - thermal/drivers/broadcom: Fix potential NULL dereference in sr_thermal_probe - thermal/core: Fix memory leak in __thermal_cooling_device_register() - thermal/drivers/imx_sc_thermal: Fix refcount leak in imx_sc_thermal_probe - bfq: Relax waker detection for shared queues - bfq: Allow current waker to defend against a tentative one - ASoC: codecs: lpass: Fix passing zero to 'PTR_ERR' - ASoC: wm2000: fix missing clk_disable_unprepare() on error in wm2000_anc_transition() - cpuidle: psci: Fix regression leading to no genpd governor - cpuidle: riscv-sbi: Fix code to allow a genpd governor to be used - platform/x86: intel_cht_int33fe: Set driver data - PM: domains: Fix initialization of genpd's next_wakeup - net: macb: Fix PTP one step sync support - scsi: hisi_sas: Fix rescan after deleting a disk - scsi: hisi_sas: Fix memory ordering in hisi_sas_task_deliver() - NFC: hci: fix sleep in atomic context bugs in nfc_hci_hcp_message_tx - bonding: fix missed rcu protection - ASoC: max98090: Move check for invalid values before casting in max98090_put_enab_tlv() - perf parse-events: Support different format of the topdown event name - net: stmmac: fix out-of-bounds access in a selftest - amt: fix gateway mode stuck - amt: fix memory leak for advertisement message - hv_netvsc: Fix potential dereference of NULL pointer - hwmon: (dimmtemp) Fix bitmap handling - hwmon: (pmbus) Check PEC support before reading other registers - rxrpc: Fix locking issue - rxrpc: Fix listen() setting the bar too high for the prealloc rings - rxrpc: Don't try to resend the request if we're receiving the reply - rxrpc: Fix overlapping ACK accounting - rxrpc: Don't let ack.previousPacket regress - rxrpc: Fix decision on when to generate an IDLE ACK - hinic: Avoid some over memory allocation - dpaa2-eth: retrieve the virtual address before dma_unmap - dpaa2-eth: use the correct software annotation field - dpaa2-eth: unmap the SGT buffer before accessing its contents - net: dsa: restrict SMSC_LAN9303_I2C kconfig - net/smc: postpone sk_refcnt increment in connect() - net/smc: fix listen processing for SMC-Rv2 - dma-direct: don't over-decrypt memory - Bluetooth: hci_conn: Fix hci_connect_le_sync - Revert "net/smc: fix listen processing for SMC-Rv2" - media: lirc: revert removal of unused feature flags - arm64: dts: rockchip: Move drive-impedance-ohm to emmc phy on rk3399 - arm64: dts: mt8192: Fix nor_flash status disable typo - PCI/ACPI: Allow D3 only if Root Port can signal and wake from D3 - memory: samsung: exynos5422-dmc: Avoid some over memory allocation - ARM: dts: BCM5301X: Update pin controller node name - ARM: dts: suniv: F1C100: fix watchdog compatible - soc: qcom: smp2p: Fix missing of_node_put() in smp2p_parse_ipc - soc: qcom: smsm: Fix missing of_node_put() in smsm_parse_ipc - arm64: defconfig: reenable SM_DISPCC_8250 - PCI: cadence: Fix find_first_zero_bit() limit - PCI: rockchip: Fix find_first_zero_bit() limit - PCI: mediatek: Fix refcount leak in mtk_pcie_subsys_powerup() - PCI: dwc: Fix setting error return on MSI DMA mapping failure - ARM: dts: ci4x10: Adapt to changes in imx6qdl.dtsi regarding fec clocks - arm64: dts: qcom: sc7280: Fix sar1_irq_odl node name - arm64: dts: qcom: sc7280-herobrine: Drop outputs on fpmcu pins - soc: qcom: llcc: Add MODULE_DEVICE_TABLE() - cxl/pci: Add debug for DVSEC range init failures - cxl/pci: Make cxl_dvsec_ranges() failure not fatal to cxl_pci - KVM: nVMX: Leave most VM-Exit info fields unmodified on failed VM-Entry - KVM: nVMX: Clear IDT vectoring on nested VM-Exit for double/triple fault - arm64: dts: juno: Fix SCMI power domain IDs for ETF and CS funnel - crypto: qat - set CIPHER capability for DH895XCC - crypto: qat - set COMPRESSION capability for DH895XCC - platform/chrome: cros_ec: fix error handling in cros_ec_register() - ARM: dts: imx6dl-colibri: Fix I2C pinmuxing - platform/chrome: Re-introduce cros_ec_cmd_xfer and use it for ioctls - can: xilinx_can: mark bit timing constants as const - ARM: dts: stm32: Fix PHY post-reset delay on Avenger96 - dt-bindings: soc: qcom: smd-rpm: Fix missing MSM8936 compatible - ARM: dts: qcom: sdx55: remove wrong unit address from RPMH RSC clocks - arm64: dts: qcom: sm8450: Fix missing iommus for qup - arm64: dts: qcom: sm8450: Fix missing iommus for qup1 - ARM: dts: bcm2835-rpi-zero-w: Fix GPIO line name for Wifi/BT - ARM: dts: bcm2837-rpi-cm3-io3: Fix GPIO line names for SMPS I2C - ARM: dts: bcm2837-rpi-3-b-plus: Fix GPIO line name of power LED - ARM: dts: bcm2835-rpi-b: Fix GPIO line names - misc: ocxl: fix possible double free in ocxl_file_register_afu - hwrng: cn10k - Optimize cn10k_rng_read() - hwrng: cn10k - Make check_rng_health() return an error code - crypto: marvell/cesa - ECB does not IV - gpiolib: of: Introduce hook for missing gpio-ranges - pinctrl: bcm2835: implement hook for missing gpio-ranges - drm/msm: simplify gpu_busy callback - drm/msm: return the average load over the polling period - arm: mediatek: select arch timer for mt7629 - pinctrl/rockchip: support deferring other gpio params - pinctrl: mediatek: mt8195: enable driver on mtk platforms - arm64: dts: qcom: qrb5165-rb5: Fix can-clock node name - Drivers: hv: vmbus: Fix handling of messages with transaction ID of zero - powerpc/fadump: fix PT_LOAD segment for boot memory area - mfd: ipaq-micro: Fix error check return value of platform_get_irq() - scsi: fcoe: Fix Wstringop-overflow warnings in fcoe_wwn_from_mac() - soc: bcm: Check for NULL return of devm_kzalloc() - arm64: dts: ti: k3-am64-mcu: remove incorrect UART base clock rates - ASoC: sh: rz-ssi: Propagate error codes returned from platform_get_irq_byname() - ASoC: sh: rz-ssi: Release the DMA channels in rz_ssi_probe() error path - firmware: arm_scmi: Fix list protocols enumeration in the base protocol - nvdimm: Fix firmware activation deadlock scenarios - nvdimm: Allow overwrite in the presence of disabled dimms - pinctrl: mvebu: Fix irq_of_parse_and_map() return value - crypto: ccp - Fix the INIT_EX data file open failure - drivers/base/node.c: fix compaction sysfs file leak - dax: fix cache flush on PMD-mapped pages - drivers/base/memory: fix an unlikely reference counting issue in __add_memory_block() - firmware: arm_ffa: Fix uuid parameter to ffa_partition_probe - firmware: arm_ffa: Remove incorrect assignment of driver_data - ocfs2: fix mounting crash if journal is not alloced - list: fix a data-race around ep->rdllist - drm/msm/dpu: fix error check return value of irq_of_parse_and_map() - powerpc/8xx: export 'cpm_setbrg' for modules - pinctrl: renesas: r8a779a0: Fix GPIO function on I2C-capable pins - pinctrl: renesas: r8a779f0: Fix GPIO function on I2C-capable pins - pinctrl: renesas: core: Fix possible null-ptr-deref in sh_pfc_map_resources() - powerpc/idle: Fix return value of __setup() handler - powerpc/4xx/cpm: Fix return value of __setup() handler - RDMA/hns: Add the detection for CMDQ status in the device initialization process - arm64: dts: marvell: espressobin-ultra: fix SPI-NOR config - arm64: dts: marvell: espressobin-ultra: enable front USB3 port - ASoC: atmel-pdmic: Remove endianness flag on pdmic component - ASoC: atmel-classd: Remove endianness flag on class d component - proc: fix dentry/inode overinstantiating under /proc/${pid}/net - ipc/mqueue: use get_tree_nodev() in mqueue_get_tree() - PCI: imx6: Fix PERST# start-up sequence - PCI: mediatek-gen3: Assert resets to ensure expected init state - module.h: simplify MODULE_IMPORT_NS - module: fix [e_shstrndx].sh_size=0 OOB access - tty: fix deadlock caused by calling printk() under tty_port->lock - crypto: sun8i-ss - rework handling of IV - crypto: sun8i-ss - handle zero sized sg - crypto: cryptd - Protect per-CPU resource by disabling BH. - ARM: dts: at91: sama7g5: remove interrupt-parent from gic node - ARM: dts: lan966x: swap dma channels for crypto node - hugetlbfs: fix hugetlbfs_statfs() locking - x86/mce: relocate set{clear}_mce_nospec() functions - mce: fix set_mce_nospec to always unmap the whole page - Input: sparcspkr - fix refcount leak in bbc_beep_probe - PCI/AER: Clear MULTI_ERR_COR/UNCOR_RCV bits - KVM: PPC: Book3S HV: Fix vcore_blocked tracepoint - PCI: microchip: Fix potential race in interrupt handling - cxl/mem: Drop mem_enabled check from wait_for_media() - hwrng: omap3-rom - fix using wrong clk_disable() in omap_rom_rng_runtime_resume() - perf evlist: Keep topdown counters in weak group - perf stat: Always keep perf metrics topdown events in a group - mailbox: pcc: Fix an invalid-load caught by the address sanitizer - powerpc/64: Only WARN if __pa()/__va() called with bad addresses - powerpc/powernv: Get L1D flush requirements from device-tree - powerpc/powernv: Get STF barrier requirements from device-tree - powerpc/perf: Fix the threshold compare group constraint for power10 - powerpc/perf: Fix the threshold compare group constraint for power9 - macintosh: via-pmu and via-cuda need RTC_LIB - powerpc/xive: Fix refcount leak in xive_spapr_init - powerpc/fsl_rio: Fix refcount leak in fsl_rio_setup - powerpc/papr_scm: Fix leaking nvdimm_events_map elements - powerpc/fsl_book3e: Don't set rodata RO too early - gpio: sim: Use correct order for the parameters of devm_kcalloc() - mfd: davinci_voicecodec: Fix possible null-ptr-deref davinci_vc_probe() - nfsd: destroy percpu stats counters after reply cache shutdown - mailbox: forward the hrtimer if not queued and under a lock - RDMA/rxe: Fix an error handling path in rxe_get_mcg() - RDMA/hfi1: Prevent use of lock before it is initialized - pinctrl: apple: Use a raw spinlock for the regmap - KVM: LAPIC: Drop pending LAPIC timer injection when canceling the timer - Input: stmfts - do not leave device disabled in stmfts_input_open - OPP: call of_node_put() on error path in _bandwidth_supported() - dmaengine: ti: k3-psil-am62: Update PSIL thread for saul. - f2fs: fix to do sanity check on inline_dots inode - f2fs: fix dereference of stale list iterator after loop body - riscv: Fixup difference with defconfig - iommu/amd: Enable swiotlb in all cases - iommu/amd: Do not call sleep while holding spinlock - iommu/mediatek: Fix 2 HW sharing pgtable issue - iommu/mediatek: Add list_del in mtk_iommu_remove - iommu/mediatek: Remove clk_disable in mtk_iommu_remove - iommu/mediatek: Add mutex for m4u_group and m4u_dom in data - i2c: at91: use dma safe buffers - cpufreq: mediatek: Use module_init and add module_exit - cpufreq: mediatek: Unregister platform device on exit - iommu/arm-smmu-v3-sva: Fix mm use-after-free - MIPS: Loongson: Use hwmon_device_register_with_groups() to register hwmon - iommu/mediatek: Fix NULL pointer dereference when printing dev_name - i2c: at91: Initialize dma_buf in at91_twi_xfer() - dmaengine: idxd: Fix the error handling path in idxd_cdev_register() - NFS: Do not report EINTR/ERESTARTSYS as mapping errors - NFS: fsync() should report filesystem errors over EINTR/ERESTARTSYS - NFS: Don't report ENOSPC write errors twice - NFS: Do not report flush errors in nfs_write_end() - NFS: Don't report errors from nfs_pageio_complete() more than once - NFSv4/pNFS: Do not fail I/O when we fail to allocate the pNFS layout - NFS: Further fixes to the writeback error handling - NFS: Pass i_size to fscache_unuse_cookie() when a file is released - video: fbdev: clcdfb: Fix refcount leak in clcdfb_of_vram_setup - dmaengine: stm32-mdma: remove GISR1 register - dmaengine: stm32-mdma: fix chan initialization in stm32_mdma_irq_handler() - iommu/amd: Increase timeout waiting for GA log enablement - i2c: npcm: Fix timeout calculation - i2c: npcm: Correct register access width - i2c: npcm: Handle spurious interrupts - i2c: rcar: fix PM ref counts in probe error paths - tracing: Reset the function filter after completing trampoline/graph selftest - RISC-V: Split out the XIP fixups into their own file - RISC-V: Fix the XIP build - MIPS: RALINK: Define pci_remap_iospace under CONFIG_PCI_DRIVERS_GENERIC - perf build: Fix btf__load_from_kernel_by_id() feature check - perf c2c: Use stdio interface if slang is not supported - rtla: Avoid record NULL pointer dereference - rtla: Don't overwrite existing directory mode - rtla: Minor grammar fix for rtla README - rtla: Fix __set_sched_attr error message - rtla: Remove procps-ng dependency - tracing/timerlat: Notify IRQ new max latency only if stop tracing is set - perf jevents: Fix event syntax error caused by ExtSel - video: fbdev: vesafb: Fix a use-after-free due early fb_info cleanup - NFSv4: Fix free of uninitialized nfs4_label on referral lookup. - NFSv4.1 mark qualified async operations as MOVEABLE tasks - f2fs: fix to avoid f2fs_bug_on() in dec_valid_node_count() - f2fs: fix to do sanity check on block address in f2fs_do_zero_range() - f2fs: fix to clear dirty inode in f2fs_evict_inode() - f2fs: fix deadloop in foreground GC - f2fs: don't need inode lock for system hidden quota - f2fs: fix to do sanity check on total_data_blocks - f2fs: don't use casefolded comparison for "." and ".." - f2fs: fix fallocate to use file_modified to update permissions consistently - f2fs: fix to do sanity check for inline inode - objtool: Fix objtool regression on x32 systems - objtool: Fix symbol creation - wifi: mac80211: fix use-after-free in chanctx code - iwlwifi: fw: init SAR GEO table only if data is present - iwlwifi: mvm: fix assert 1F04 upon reconfig - iwlwifi: mei: clear the sap data header before sending - iwlwifi: mei: fix potential NULL-ptr deref - ipmi:ipmb: Fix refcount leak in ipmi_ipmb_probe - fs-writeback: writeback_sb_inodes:Recalculate 'wrote' according skipped pages - efi: Do not import certificates from UEFI Secure Boot for T2 Macs - bfq: Avoid false marking of bic as stably merged - bfq: Avoid merging queues with different parents - bfq: Split shared queues on move between cgroups - bfq: Update cgroup information before merging bio - bfq: Drop pointless unlock-lock pair - bfq: Remove pointless bfq_init_rq() calls - bfq: Track whether bfq_group is still online - bfq: Get rid of __bio_blkcg() usage - bfq: Make sure bfqg for which we are queueing requests is online - ext4: mark group as trimmed only if it was fully scanned - ext4: fix use-after-free in ext4_rename_dir_prepare - ext4: fix journal_ioprio mount option handling - ext4: fix race condition between ext4_write and ext4_convert_inline_data - ext4: fix warning in ext4_handle_inode_extension - ext4: fix memory leak in parse_apply_sb_mount_options() - ext4: fix bug_on in ext4_writepages - ext4: filter out EXT4_FC_REPLAY from on-disk superblock field s_state - ext4: fix bug_on in __es_tree_search - ext4: verify dir block before splitting it - ext4: avoid cycles in directory h-tree - ACPI: property: Release subnode properties with data nodes - tty: goldfish: Introduce gf_ioread32()/gf_iowrite32() - tracing: Have event format check not flag %p* on __get_dynamic_array() - tracing: Fix potential double free in create_var_ref() - tracing: Fix return value of trace_pid_write() - tracing: Initialize integer variable to prevent garbage return value - drm/amdgpu: add beige goby PCI ID - PCI/PM: Fix bridge_d3_blacklist[] Elo i2 overwrite of Gigabyte X299 - PCI: qcom: Fix pipe clock imbalance - PCI: qcom: Fix runtime PM imbalance on probe errors - PCI: qcom: Fix unbalanced PHY init on probe errors - staging: r8188eu: prevent ->Ssid overflow in rtw_wx_set_scan() - block: Fix potential deadlock in blk_ia_range_sysfs_show() - mm, compaction: fast_find_migrateblock() should return pfn in the target zone - s390/perf: obtain sie_block from the right address - s390/stp: clock_delta should be signed - dlm: fix plock invalid read - dlm: uninitialized variable on error in dlm_listen_for_all() - dlm: fix wake_up() calls for pending remove - dlm: fix missing lkb refcount handling - ocfs2: dlmfs: fix error handling of user_dlm_destroy_lock - scsi: dc395x: Fix a missing check on list iterator - scsi: ufs: qcom: Add a readl() to make sure ref_clk gets enabled - landlock: Add clang-format exceptions - landlock: Format with clang-format - selftests/landlock: Add clang-format exceptions - selftests/landlock: Normalize array assignment - selftests/landlock: Format with clang-format - samples/landlock: Add clang-format exceptions - samples/landlock: Format with clang-format - landlock: Fix landlock_add_rule(2) documentation - selftests/landlock: Make tests build with old libc - selftests/landlock: Extend tests for minimal valid attribute size - selftests/landlock: Add tests for unknown access rights - selftests/landlock: Extend access right tests to directories - selftests/landlock: Fully test file rename with "remove" access - selftests/landlock: Add tests for O_PATH - landlock: Change landlock_add_rule(2) argument check ordering - landlock: Change landlock_restrict_self(2) check ordering - selftests/landlock: Test landlock_create_ruleset(2) argument check ordering - landlock: Define access_mask_t to enforce a consistent access mask size - landlock: Reduce the maximum number of layers to 16 - landlock: Create find_rule() from unmask_layers() - landlock: Fix same-layer rule unions - drm/amdgpu/cs: make commands with 0 chunks illegal behaviour. - drm/nouveau/subdev/bus: Ratelimit logging for fault errors - drm/etnaviv: check for reaped mapping in etnaviv_iommu_unmap_gem - drm/nouveau/clk: Fix an incorrect NULL check on list iterator - drm/nouveau/kms/nv50-: atom: fix an incorrect NULL check on list iterator - drm/bridge: analogix_dp: Grab runtime PM reference for DP-AUX - drm/i915/dsi: fix VBT send packet port selection for ICL+ - md: fix an incorrect NULL check in does_sb_need_changing - md: fix an incorrect NULL check in md_reload_sb - mtd: cfi_cmdset_0002: Move and rename chip_check/chip_ready/chip_good_for_write - mtd: cfi_cmdset_0002: Use chip_ready() for write on S29GL064N - media: coda: Fix reported H264 profile - media: coda: Add more H264 levels for CODA960 - ima: remove the IMA_TEMPLATE Kconfig option - Kconfig: Add option for asm goto w/ tied outputs to workaround clang-13 bug - lib/string_helpers: fix not adding strarray to device's resource list - RDMA/hfi1: Fix potential integer multiplication overflow errors - mmc: core: Allows to override the timeout value for ioctl() path - csky: patch_text: Fixup last cpu should be master - irqchip/armada-370-xp: Do not touch Performance Counter Overflow on A375, A38x, A39x - irqchip: irq-xtensa-mx: fix initial IRQ affinity - thermal: devfreq_cooling: use local ops instead of global ops - mt76: fix use-after-free by removing a non-RCU wcid pointer - cfg80211: declare MODULE_FIRMWARE for regulatory.db - mac80211: upgrade passive scan to active scan on DFS channels after beacon rx - um: virtio_uml: Fix broken device handling in time-travel - um: Use asm-generic/dma-mapping.h - um: chan_user: Fix winch_tramp() return value - um: Fix out-of-bounds read in LDT setup - MIPS: IP27: Remove incorrect `cpu_has_fpu' override - MIPS: IP30: Remove incorrect `cpu_has_fpu' override - kexec_file: drop weak attribute from arch_kexec_apply_relocations[_add] - ftrace: Clean up hash direct_functions on register failures - ksmbd: fix outstanding credits related bugs - iommu/msm: Fix an incorrect NULL check on list iterator - iommu/dma: Fix iova map result check bug - kprobes: Fix build errors with CONFIG_KRETPROBES=n - Revert "mm/cma.c: remove redundant cma_mutex lock" - mm/page_owner: use strscpy() instead of strlcpy() - mm/page_alloc: always attempt to allocate at least one page during bulk allocation - nodemask.h: fix compilation error with GCC12 - hugetlb: fix huge_pmd_unshare address update - mm/memremap: fix missing call to untrack_pfn() in pagemap_range() - xtensa/simdisk: fix proc_read_simdisk() - rtl818x: Prevent using not initialized queues - ASoC: rt5514: Fix event generation for "DSP Voice Wake Up" control - carl9170: tx: fix an incorrect use of list iterator - stm: ltdc: fix two incorrect NULL checks on list iterator - bcache: improve multithreaded bch_btree_check() - bcache: improve multithreaded bch_sectors_dirty_init() - bcache: remove incremental dirty sector counting for bch_sectors_dirty_init() - bcache: avoid journal no-space deadlock by reserving 1 journal bucket - serial: pch: don't overwrite xmit->buf[0] by x_char - tilcdc: tilcdc_external: fix an incorrect NULL check on list iterator - gma500: fix an incorrect NULL check on list iterator - arm64: dts: qcom: ipq8074: fix the sleep clock frequency - arm64: tegra: Add missing DFLL reset on Tegra210 - clk: tegra: Add missing reset deassertion - phy: qcom-qmp: fix struct clk leak on probe errors - ARM: dts: s5pv210: Remove spi-cs-high on panel in Aries - ARM: pxa: maybe fix gpio lookup tables - ceph: fix decoding of client session messages flags - misc: fastrpc: fix list iterator in fastrpc_req_mem_unmap_impl - SMB3: EBADF/EIO errors in rename/open caused by race condition in smb2_compound_op - docs/conf.py: Cope with removal of language=None in Sphinx 5.0.0 - dt-bindings: gpio: altera: correct interrupt-cells - vdpasim: allow to enable a vq repeatedly - blk-iolatency: Fix inflight count imbalances and IO hangs on offline - coresight: core: Fix coresight device probe failure issue - phy: qcom-qmp: fix reset-controller leak on probe errors - net: ipa: fix page free in ipa_endpoint_trans_release() - net: ipa: fix page free in ipa_endpoint_replenish_one() - media: lirc: add missing exceptions for lirc uapi header file - kseltest/cgroup: Make test_stress.sh work if run interactively - perf evlist: Extend arch_evsel__must_be_in_group to support hybrid systems - Revert "random: use static branch for crng_ready()" - staging: r8188eu: delete rtw_wx_read/write32() - binder: fix sender_euid type in uapi header - RDMA/hns: Remove the num_cqc_timer variable - RDMA/rxe: Generate a completion for unsupported/invalid opcode - ext4: only allow test_dummy_encryption when supported - fs: add two trivial lookup helpers - exportfs: support idmapped mounts - fs/ntfs3: Fix invalid free in log_replay (CVE-2022-1973) - md: Don't set mddev private to NULL in raid0 pers->free - md: fix double free of io_acct_set bioset - md: bcache: check the return value of kzalloc() in detached_dev_do_request() - macsec: fix UAF bug for real_dev - tty: n_gsm: Fix packet data hex dump output - pinctrl/rockchip: support setting input-enable param - block: fix bio_clone_blkg_association() to associate with proper blkcg_gq https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.18.4 - pcmcia: db1xxx_ss: restrict to MIPS_DB1XXX boards - staging: greybus: codecs: fix type confusion of list iterator variable - iio: adc: ad7124: Remove shift from scan_type - soundwire: qcom: fix an error message in swrm_wait_for_frame_gen_enabled() - remoteproc: mediatek: Fix side effect of mt8195 sram power on - remoteproc: mtk_scp: Fix a potential double free - lkdtm/bugs: Check for the NULL pointer after calling kmalloc - lkdtm/bugs: Don't expect thread termination without CONFIG_UBSAN_TRAP - tty: goldfish: Use tty_port_destroy() to destroy port - tty: serial: owl: Fix missing clk_disable_unprepare() in owl_uart_probe - tty: n_tty: Restore EOF push handling behavior - serial: 8250_aspeed_vuart: Fix potential NULL dereference in aspeed_vuart_probe - tty: serial: fsl_lpuart: fix potential bug when using both of_alias_get_id and ida_simple_get - remoteproc: imx_rproc: Ignore create mem entry for resource table - phy: rockchip-inno-usb2: Fix muxed interrupt support - staging: r8188eu: fix struct rt_firmware_hdr - usb: usbip: fix a refcount leak in stub_probe() - usb: usbip: add missing device lock on tweak configuration cmd - USB: storage: karma: fix rio_karma_init return - usb: musb: Fix missing of_node_put() in omap2430_probe - staging: fieldbus: Fix the error handling path in anybuss_host_common_probe() - pwm: lp3943: Fix duty calculation in case period was clamped - pwm: raspberrypi-poe: Fix endianness in firmware struct - rpmsg: qcom_smd: Fix irq_of_parse_and_map() return value - usb: dwc3: gadget: Replace list_for_each_entry_safe() if using giveback - usb: dwc3: pci: Fix pm_runtime_get_sync() error checking - scripts/get_abi: Fix wrong script file name in the help message - misc: fastrpc: fix an incorrect NULL check on list iterator - firmware: stratix10-svc: fix a missing check on list iterator - usb: typec: mux: Check dev_set_name() return value - rpmsg: virtio: Fix possible double free in rpmsg_probe() - rpmsg: virtio: Fix possible double free in rpmsg_virtio_add_ctrl_dev() - rpmsg: virtio: Fix the unregistration of the device rpmsg_ctrl - iio: adc: stmpe-adc: Fix wait_for_completion_timeout return value check - iio: proximity: vl53l0x: Fix return value check of wait_for_completion_timeout - iio: adc: sc27xx: fix read big scale voltage not right - iio: adc: sc27xx: Fine tune the scale calibration values - rpmsg: qcom_smd: Fix returning 0 if irq_of_parse_and_map() fails - misc/pvpanic: Convert regular spinlock into trylock on panic path - phy: qcom-qmp: fix pipe-clock imbalance on power-on failure - power: supply: core: Initialize struct to zero - power: supply: axp288_fuel_gauge: Fix battery reporting on the One Mix 1 - power: supply: axp288_fuel_gauge: Drop BIOS version check from "T3 MRD" DMI quirk - power: supply: ab8500_fg: Allocate wq in probe - serial: sifive: Report actual baud base rather than fixed 115200 - export: fix string handling of namespace in EXPORT_SYMBOL_NS - watchdog: rzg2l_wdt: Fix 32bit overflow issue - watchdog: rzg2l_wdt: Fix Runtime PM usage - watchdog: rzg2l_wdt: Fix 'BUG: Invalid wait context' - watchdog: rzg2l_wdt: Fix reset control imbalance - soundwire: intel: prevent pm_runtime resume prior to system suspend - soundwire: qcom: return error when pm_runtime_get_sync fails - coresight: cpu-debug: Replace mutex with mutex_trylock on panic notifier - ksmbd: fix reference count leak in smb_check_perm_dacl() - extcon: ptn5150: Add queue work sync before driver release - dt-bindings: remoteproc: mediatek: Make l1tcm reg exclusive to mt819x - soc: rockchip: Fix refcount leak in rockchip_grf_init - clocksource/drivers/riscv: Events are stopped during CPU suspend - ARM: dts: aspeed: ast2600-evb: Enable RX delay for MAC0/MAC1 - rtc: mt6397: check return value after calling platform_get_resource() - rtc: ftrtc010: Fix error handling in ftrtc010_rtc_probe - staging: r8188eu: add check for kzalloc - serial: meson: acquire port->lock in startup() - Revert "serial: 8250_mtk: Make sure to select the right FEATURE_SEL" - serial: 8250_fintek: Check SER_RS485_RTS_* only with RS485 - serial: cpm_uart: Fix build error without CONFIG_SERIAL_CPM_CONSOLE - serial: uartlite: Fix BRKINT clearing - serial: digicolor-usart: Don't allow CS5-6 - serial: rda-uart: Don't allow CS5-6 - serial: txx9: Don't allow CS5-6 - serial: sh-sci: Don't allow CS5-6 - serial: sifive: Sanitize CSIZE and c_iflag - serial: st-asc: Sanitize CSIZE and correct PARENB for CS7 - serial: stm32-usart: Correct CSIZE, bits, and parity - firmware: dmi-sysfs: Fix memory leak in dmi_sysfs_register_handle - bus: ti-sysc: Fix warnings for unbind for serial - driver: base: fix UAF when driver_attach failed - driver core: fix deadlock in __device_attach - watchdog: rti-wdt: Fix pm_runtime_get_sync() error checking - watchdog: ts4800_wdt: Fix refcount leak in ts4800_wdt_probe - blk-mq: don't touch ->tagset in blk_mq_get_sq_hctx - ASoC: fsl_sai: Fix FSL_SAI_xDR/xFR definition - scsi: sd: Don't call blk_cleanup_disk() in sd_probe() - clocksource/drivers/oxnas-rps: Fix irq_of_parse_and_map() return value - s390/crypto: fix scatterwalk_unmap() callers in AES-GCM - amt: fix return value of amt_update_handler() - amt: fix possible memory leak in amt_rcv() - net: ethernet: ti: am65-cpsw: Fix fwnode passed to phylink_create() - net/smc: set ini->smcrv2.ib_dev_v2 to NULL if SMC-Rv2 is unavailable - spi: fsi: Fix spurious timeout - drm/amdgpu: Off by one in dm_dmub_outbox1_low_irq() - net: lan966x: check devm_of_phy_get() for -EDEFER_PROBE - net: sched: fixed barrier to prevent skbuff sticking in qdisc backlog - net: ethernet: mtk_eth_soc: out of bounds read in mtk_hwlro_get_fdir_entry() - net: ethernet: ti: am65-cpsw-nuss: Fix some refcount leaks - net: dsa: mv88e6xxx: Fix refcount leak in mv88e6xxx_mdios_register - modpost: fix removing numeric suffixes - ep93xx: clock: Do not return the address of the freed memory - jffs2: fix memory leak in jffs2_do_fill_super - ubi: fastmap: Fix high cpu usage of ubi_bgt by making sure wl_pool not empty - ubi: ubi_create_volume: Fix use-after-free when volume creation failed - selftests/bpf: fix stacktrace_build_id with missing kprobe/urandom_read - bpf: Fix probe read error in ___bpf_prog_run() - block: take destination bvec offsets into account in bio_copy_data_iter - nbd: don't clear 'NBD_CMD_INFLIGHT' flag if request is not completed - nbd: fix possible overflow on 'first_minor' in nbd_dev_add() - riscv: read-only pages should not be writable - net/smc: fixes for converting from "struct smc_cdc_tx_pend **" to "struct smc_wr_tx_pend_priv *" - tcp: add accessors to read/set tp->snd_cwnd - nfp: only report pause frame configuration for physical device - block: use bio_queue_enter instead of blk_queue_enter in bio_poll - bonding: NS target should accept link local address - sfc: fix considering that all channels have TX queues - sfc: fix wrong tx channel offset with efx_separate_tx_channels - block: make bioset_exit() fully resilient against being called twice - sched/autogroup: Fix sysctl move - blk-mq: do not update io_ticks with passthrough requests - net: phy: at803x: disable WOL at probe - bonding: show NS IPv6 targets in proc master info - erofs: fix 'backmost' member of z_erofs_decompress_frontend - vdpa: Fix error logic in vdpa_nl_cmd_dev_get_doit - virtio: pci: Fix an error handling path in vp_modern_probe() - net/mlx5: Don't use already freed action pointer - net/mlx5e: TC NIC mode, fix tc chains miss table - net/mlx5: CT: Fix header-rewrite re-use for tupels - net/mlx5e: Disable softirq in mlx5e_activate_rq to avoid race condition - net/mlx5: correct ECE offset in query qp output - net/mlx5e: Update netdev features after changing XDP state - net: sched: add barrier to fix packet stuck problem for lockless qdisc - tcp: tcp_rtx_synack() can be called from process context - vdpa: ifcvf: set pci driver data in probe - bonding: guard ns_targets by CONFIG_IPV6 - octeontx2-af: fix error code in is_valid_offset() - s390/mcck: isolate SIE instruction when setting CIF_MCCK_GUEST flag - regulator: mt6315-regulator: fix invalid allowed mode - net: ping6: Fix ping -6 with interface name - net/sched: act_api: fix error code in tcf_ct_flow_table_fill_tuple_ipv6() - gpio: pca953x: use the correct register address to do regcache sync - afs: Fix infinite loop found by xfstest generic/676 - drm/msm/dp: Always clear mask bits to disable interrupts at dp_ctrl_reset_irq_ctrl() - scsi: sd: Fix potential NULL pointer dereference - ax25: Fix ax25 session cleanup problems - nfp: remove padding in nfp_nfdk_tx_desc - tipc: check attribute length for bearer name - driver core: Fix wait_for_device_probe() & deferred_probe_timeout interaction - perf evsel: Fixes topdown events in a weak group for the hybrid platform - perf parse-events: Move slots event for the hybrid platform too - perf record: Support sample-read topdown metric group for hybrid platforms - perf c2c: Fix sorting in percent_rmt_hitm_cmp() - Bluetooth: MGMT: Add conditions for setting HCI_CONN_FLAG_REMOTE_WAKEUP (Closes: #1012054) - Bluetooth: hci_sync: Fix attempting to suspend with unfiltered passive scan (Closes: #1012054) - bluetooth: don't use bitmaps for random flag accesses - dmaengine: idxd: set DMA_INTERRUPT cap bit - mips: cpc: Fix refcount leak in mips_cpc_default_phys_base - bootconfig: Make the bootconfig.o as a normal object file - tracing: Make tp_printk work on syscall tracepoints - tracing: Fix sleeping function called from invalid context on RT kernel - tracing: Avoid adding tracer option before update_tracer_options - i2c: mediatek: Optimize master_xfer() and avoid circular locking - iommu/arm-smmu: fix possible null-ptr-deref in arm_smmu_device_probe() - iommu/arm-smmu-v3: check return value after calling platform_get_resource() - f2fs: remove WARN_ON in f2fs_is_valid_blkaddr - f2fs: avoid infinite loop to flush node pages - i2c: cadence: Increase timeout per message if necessary - m68knommu: set ZERO_PAGE() to the allocated zeroed page - m68knommu: fix undefined reference to `_init_sp' - dmaengine: zynqmp_dma: In struct zynqmp_dma_chan fix desc_size data type - NFSv4: Don't hold the layoutget locks across multiple RPC calls - video: fbdev: hyperv_fb: Allow resolutions with size > 64 MB for Gen1 - video: fbdev: pxa3xx-gcu: release the resources correctly in pxa3xx_gcu_probe/remove() - RISC-V: use memcpy for kexec_file mode - m68knommu: fix undefined reference to `mach_get_rtc_pll' - rtla/Makefile: Properly handle dependencies - f2fs: fix to tag gcing flag on page during file defragment - xprtrdma: treat all calls not a bcall when bc_serv is NULL - drm/bridge: ti-sn65dsi83: Handle dsi_lanes == 0 as invalid - drm/panfrost: Job should reference MMU not file_priv - powerpc/papr_scm: don't requests stats with '0' sized stats buffer - netfilter: nat: really support inet nat without l3 address - netfilter: nf_tables: use kfree_rcu(ptr, rcu) to release hooks in clean_net path - netfilter: nf_tables: delete flowtable hooks via transaction list - powerpc/kasan: Force thread size increase with KASAN - NFSD: Fix potential use-after-free in nfsd_file_put() - SUNRPC: Trap RDMA segment overflows - netfilter: nf_tables: always initialize flowtable hook list in transaction - ata: pata_octeon_cf: Fix refcount leak in octeon_cf_probe - netfilter: nf_tables: release new hooks on unsupported flowtable flags - netfilter: nf_tables: memleak flow rule from commit path - netfilter: nf_tables: bail out early if hardware offload is not supported - amt: fix wrong usage of pskb_may_pull() - amt: fix possible null-ptr-deref in amt_rcv() - amt: fix wrong type string definition - net: ethernet: bgmac: Fix refcount leak in bcma_mdio_mii_register - xen: unexport __init-annotated xen_xlate_map_ballooned_pages() - stmmac: intel: Fix an error handling path in intel_eth_pci_probe() - af_unix: Fix a data-race in unix_dgram_peer_wake_me(). - selftests net: fix bpf build error - x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm() - bpf, arm64: Clear prog->jited_len along prog->jited - net: dsa: lantiq_gswip: Fix refcount leak in gswip_gphy_fw_list - net/mlx4_en: Fix wrong return value on ioctl EEPROM query failure - xsk: Fix handling of invalid descriptors in XSK TX batching API - drm/amdgpu: fix limiting AV1 to the first instance on VCN3 - SUNRPC: Fix the calculation of xdr->end in xdr_get_next_encode_buffer() - net: mdio: unexport __init-annotated mdio_bus_init() - net: xfrm: unexport __init-annotated xfrm4_protocol_init() - net: ipv6: unexport __init-annotated seg6_hmac_init() - net/mlx5e: CT: Fix cleanup of CT before cleanup of TC ct rules - net/mlx5: Lag, filter non compatible devices - net/mlx5: Fix mlx5_get_next_dev() peer device matching - net/mlx5: Rearm the FW tracer after each tracer event - net/mlx5: fs, fail conflicting actions - ip_gre: test csum_start instead of transport header - net: altera: Fix refcount leak in altera_tse_mdio_create - net: dsa: mv88e6xxx: use BMSR_ANEGCOMPLETE bit for filling an_complete - net: dsa: realtek: rtl8365mb: fix GMII caps for ports with internal PHY - tcp: use alloc_large_system_hash() to allocate table_perturb - drm: imx: fix compiler warning with gcc-12 - nfp: flower: restructure flow-key for gre+vlan combination - net: seg6: fix seg6_lookup_any_nexthop() to handle VRFs using flowi_l3mdev - iov_iter: Fix iter_xarray_get_pages{,_alloc}() - iio: dummy: iio_simple_dummy: check the return value of kstrdup() - staging: rtl8712: fix a potential memory leak in r871xu_drv_init() - iio: st_sensors: Add a local lock for protecting odr - lkdtm/usercopy: Expand size of "out of frame" object - drivers: staging: rtl8723bs: Fix deadlock in rtw_surveydone_event_callback() - drivers: staging: rtl8192bs: Fix deadlock in rtw_joinbss_event_prehandle() - drivers: staging: rtl8192eu: Fix deadlock in rtw_joinbss_event_prehandle - tty: synclink_gt: Fix null-pointer-dereference in slgt_clean() - tty: Fix a possible resource leak in icom_probe - thunderbolt: Use different lane for second DisplayPort tunnel - drivers: staging: rtl8192u: Fix deadlock in ieee80211_beacons_stop() - drivers: staging: rtl8192e: Fix deadlock in rtllib_beacons_stop() - USB: host: isp116x: check return value after calling platform_get_resource() - drivers: tty: serial: Fix deadlock in sa1100_set_termios() - drivers: usb: host: Fix deadlock in oxu_bus_suspend() - USB: hcd-pci: Fully suspend across freeze/thaw cycle - char: xillybus: fix a refcount leak in cleanup_dev() - sysrq: do not omit current cpu when showing backtrace of all active CPUs - usb: dwc2: gadget: don't reset gadget's driver->bus - usb: dwc3: host: Stop setting the ACPI companion - usb: dwc3: gadget: Only End Transfer for ep0 data phase - soundwire: qcom: adjust autoenumeration timeout - misc: rtsx: set NULL intfdata when probe fails - extcon: Fix extcon_get_extcon_dev() error handling - extcon: Modify extcon device to be created after driver data is set - clocksource/drivers/sp804: Avoid error on multiple instances - staging: rtl8712: fix uninit-value in usb_read8() and friends - staging: rtl8712: fix uninit-value in r871xu_drv_init() - serial: msm_serial: disable interrupts in __msm_console_write() - kernfs: Separate kernfs_pr_cont_buf and rename_lock. - watchdog: wdat_wdt: Stop watchdog when rebooting the system - ksmbd: smbd: fix connection dropped issue - md: protect md_unregister_thread from reentrancy - ASoC: SOF: amd: Fixed Build error - scsi: myrb: Fix up null pointer access on myrb_cleanup() - ASoC: rt5640: Do not manipulate pin "Platform Clock" if the "Platform Clock" is not in the DAPM - Revert "net: af_key: add check for pfkey_broadcast in function pfkey_process" - ceph: allow ceph.dir.rctime xattr to be updatable - ceph: flush the mdlog for filesystem sync - ceph: fix possible deadlock when holding Fwb to get inline_data - net, neigh: Set lower cap for neigh_managed_work rearming - drm/amd/display: Check if modulo is 0 before dividing. - drm/amd/display: Check zero planes for OTG disable W/A on clock change - drm/radeon: fix a possible null pointer dereference - drm/amd/pm: fix a potential gpu_metrics_table memory leak - drm/amd/pm: Fix missing thermal throttler status - drm/amd/pm: correct the metrics version for SMU 11.0.11/12/13 - um: line: Use separate IRQs per line - modpost: fix undefined behavior of is_arm_mapping_symbol() - objtool: Mark __ubsan_handle_builtin_unreachable() as noreturn - x86/cpu: Elide KCSAN for cpu_has() and friends - jump_label,noinstr: Avoid instrumentation for JUMP_LABEL=n builds - nbd: call genl_unregister_family() first in nbd_cleanup() - nbd: fix race between nbd_alloc_config() and module removal - nbd: fix io hung while disconnecting device - Revert "PCI: brcmstb: Do not turn off WOL regulators on suspend" - Revert "PCI: brcmstb: Add control of subdevice voltage regulators" - Revert "PCI: brcmstb: Add mechanism to turn on subdev regulators" - Revert "PCI: brcmstb: Split brcm_pcie_setup() into two funcs" - cifs: fix potential deadlock in direct reclaim - s390/gmap: voluntarily schedule during key setting - cifs: version operations for smb20 unneeded when legacy support disabled - drm/amd/pm: use bitmap_{from,to}_arr32 where appropriate - nodemask: Fix return values to be unsigned - scsi: lpfc: Correct BDE type for XMIT_SEQ64_WQE in lpfc_ct_reject_event() - vringh: Fix loop descriptors check in the indirect cases - platform/x86: barco-p50-gpio: Add check for platform_driver_register - scripts/gdb: change kernel config dumping method - platform/x86: hp-wmi: Resolve WMI query failures on some devices - platform/x86: hp-wmi: Use zero insize parameter only when supported - ALSA: usb-audio: Skip generic sync EP parse for secondary EP - ALSA: usb-audio: Set up (implicit) sync for Saffire 6 - ALSA: hda/conexant - Fix loopback issue with CX20632 - ALSA: hda/realtek: Fix for quirk to enable speaker output on the Lenovo Yoga DuetITL 2021 - ALSA: hda/realtek: Add quirk for HP Dev One - cifs: return errors during session setup during reconnects - cifs: fix reconnect on smb3 mount types - cifs: populate empty hostnames for extra channels - scsi: sd: Fix interpretation of VPD B9h length - scsi: lpfc: Resolve some cleanup issues following abort path refactoring - scsi: lpfc: Resolve some cleanup issues following SLI path refactoring - scsi: lpfc: Address NULL pointer dereference after starget_to_rport() - KVM: x86/mmu: Check every prev_roots in __kvm_mmu_free_obsolete_roots() - KVM: SVM: fix tsc scaling cache logic - filemap: Cache the value of vm_flags - KEYS: trusted: tpm2: Fix migratable logic - libata: fix reading concurrent positioning ranges log - libata: fix translation of concurrent positioning ranges - ata: libata-transport: fix {dma|pio|xfer}_mode sysfs files - mmc: sdhci-pci-gli: Fix GL9763E runtime PM when the system resumes from suspend - mmc: block: Fix CQE recovery reset success - net: phy: dp83867: retrigger SGMII AN when link change - net: openvswitch: fix misuse of the cached connection on tuple changes - writeback: Fix inode->i_io_list not be protected by inode->i_lock error - nfc: st21nfca: fix incorrect validating logic in EVT_TRANSACTION - nfc: st21nfca: fix memory leaks in EVT_TRANSACTION handling - nfc: st21nfca: fix incorrect sizing calculations in EVT_TRANSACTION - ixgbe: fix bcast packets Rx on VF after promisc removal - ixgbe: fix unexpected VLAN Rx in promisc mode on VF - Input: bcm5974 - set missing URB_NO_TRANSFER_DMA_MAP urb flag (Closes: #1012655) - vduse: Fix NULL pointer dereference on sysfs access - cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE - mm/huge_memory: Fix xarray node memory leak - powerpc: Don't select HAVE_IRQ_EXIT_ON_IRQ_STACK - drm/amdkfd:Fix fw version for 10.3.6 - drm/bridge: analogix_dp: Support PSR-exit to disable transition - drm/atomic: Force bridge self-refresh-exit on CRTC switch - drm/amdgpu/jpeg2: Add jpeg vmid update under IB submit - drm/amd/display: remove stale config guards - drm/amdgpu: update VCN codec support for Yellow Carp - virtio-rng: make device ready before making request - powerpc/32: Fix overread/overwrite of thread_struct via ptrace (CVE-2022-32981) - random: avoid checking crng_ready() twice in random_init() - random: mark bootloader randomness code as __init - random: account for arch randomness in bits - md/raid0: Ignore RAID0 layout if the second zone has only one device - zonefs: fix handling of explicit_open option on mount - iov_iter: fix build issue due to possible type mis-match - dmaengine: idxd: add missing callback function to support DMA_INTERRUPT - tcp: fix tcp_mtup_probe_success vs wrong snd_cwnd - net/mlx5: E-Switch, pair only capable devices https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.18.5 - Documentation: Add documentation for Processor MMIO Stale Data - x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug - x86/speculation: Add a common function for MD_CLEAR mitigation update - x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data - x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations - x86/speculation/mmio: Enable CPU Fill buffer clearing on idle - x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data - x86/speculation/srbds: Update SRBDS mitigation selection - x86/speculation/mmio: Reuse SRBDS mitigation for SBDS - KVM: x86/speculation: Disable Fill buffer clear within guests - x86/speculation/mmio: Print SMT warning . [ Ben Hutchings ] * d/rules: Fix maintainerclean rule to not remove linux-perf files * d/watch: Fix typo in gitmode option . [ Vincent Blut ] * [arm64] drivers/gpu/drm/sun4i: Enable DRM_SUN6I_DSI as module (Closes: #1012288) * sound/pci/hda: Enable SND_HDA_SCODEC_CS35L41_I2C and SND_HDA_SCODEC_CS35L41_SPI as modules (Closes: #1012794) * [armhf] drivers/crypto: Enable CRYPTO_DEV_OMAP as module (Closes: #1012880) . [ Salvatore Bonaccorso ] * Bump ABI to 2 * Drop "sign-file: Convert API usage to support OpenSSL v3" * io_uring: reinstate the inflight tracking (CVE-2022-1976)
-
Lorenzo "Palinuro" Faletra authored
-
- 23 Jun, 2022 1 commit
-
-
Lorenzo "Palinuro" Faletra authored
linux (5.18.2-1parrot1) parrot-updates; urgency=medium . * Import new Debian version. * Include Parrot patches and customizations.
-
- 21 Jun, 2022 2 commits
-
-
linux (5.18.2-1~bpo11+1) bullseye-backports; urgency=medium . * Rebuild for bullseye-backports: - Change ABI number to 0.bpo.1 . linux (5.18.2-1) unstable; urgency=medium . * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.18.1 https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.18.2 - netfilter: nf_tables: disallow non-stateful expression in sets earlier (CVE-2022-1966) - pipe: Fix missing lock in pipe_resize_ring() (ZDI-CAN-17291) - netfilter: nf_tables: sanitize nft_set_desc_concat_parse() (CVE-2022-1972) - [x86] fpu: KVM: Set the base guest FPU uABI size to sizeof(struct kvm_xsave) (Closes: #1011168) - KVM: x86: avoid calling x86 emulator without a decoded instruction (CVE-2022-1852) . [ Diederik de Haas ] * [arm64,armel.marvell] Remove duplicate MTD_SPI_NOR config option * [arm64] Remove duplicate CAN_MCP251X config option * drivers/net/can/spi: Enable CAN_HI311X as module (Closes: #927252) . [ Henning Schild ] * [x86] drivers/platform/x86: Enable SIEMENS_SIMATIC_IPC as module * [x86] drivers/leds: Enable LEDS_SIEMENS_SIMATIC_IPC as module * [x86] drivers/wdt: Enable SIEMENS_SIMATIC_IPC_WDT as module . [ Lubomir Rintel ] * [x86] Enable X86_ANDROID_TABLETS as a module . [ Michal Simek ] * [arm64] Enable Xilinx PHY driver and SI5341 clock driver . [ Zhang Ning ] * [arm64] Enable COMMON_CLK_PWM which is needed for some Amlogic SBCs * [arm64] Enable Khadas MCU and fan * [arm64] cpufreq: Enable SCPI cpufreq driver * [arm64] cpuidle: Enable CONFIG_ARM_PSCI_CPUIDLE . [ Ben Hutchings ] * drivers/firmware: Build ISCSI_IBFT as module on all architectures with ACPI. Thanks to Eric Mackay. (Closes: #1008933). * intel-iommu: Correct matching of the "intgpu_off" option value. Thanks to Markus Kolb. * random: Enable RANDOM_TRUST_BOOTLOADER. This can be reverted using the kernel parameter: random.trust_bootloader=off . [ Bastian Blank ] * [amd64] Enable X86_SGX. . [ Salvatore Bonaccorso ] * block, loop: support partitions without scanning (Closes: #1012298) * Set ABI to 1 . linux (5.18-1~exp1) experimental; urgency=medium . * New upstream release: https://kernelnewbies.org/Linux_5.18 . [ Diederik de Haas ] * Rebase patches: - Update patches - debian/dfsg/vs6624-disable.patch (9958d30f38) - debian/version.patch (b8321ed4a4, 03248addad) * Change patches: - debian/android-enable-building-ashmem-and-binder-as-modules.patch Upstream removed ashmem support in 721412ed3d saying "The mainline replacement for ashmem is memfd, so remove the legacy code from drivers/staging/" This seems to partially revert #901492, but there is no anbox-modules in the archive, even though the ITP bug was closed. . [ Ben Hutchings ] * Rewrite "module: Avoid ABI changes when debug info is disabled" for 5.18 * In "firmware: Remove redundant log messages from drivers", adjust some filenames * In "x86: Make x32 syscall support conditional on a kernel parameter", update dependency from X86_X32 to X86_X32_ABI * Drop "bpftool: Fix version string in recursive builds" as redundant * bpftool: Prepend program version to the package version * [s390x] Enable MARCH_Z10 instead of MARCH_Z900, since support for z9 has been removed upstream * d/config: Update with the help of kconfigeditor2 * udeb: Move crc64 to crc-modules and make scsi-core-modules depend on that * libcpupower1: Update symbols file for 5.18 * d/copyright: Update filename of extract-cert.c * lintian: Add lintian-override to linux-perf for non-issue * d/bin/gencontrol.py, d/templates: Stop using templates for linux-perf * [rt] Update to 5.18-rt10 . linux (5.17.11-1) unstable; urgency=medium . * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.17.7 - [arm64] pci_irq_vector() can't be used in atomic context any longer. This conflicts with the usage of this function in nic_mbx_intr_handler(). age of this function in nic_mbx_intr_handler(). - ipmi: When handling send message responses, don't process the message - ipmi:ipmi_ipmb: Fix null-ptr-deref in ipmi_unregister_smi() - [mips*] Fix CP0 counter erratum detection for R4k CPUs - ALSA: hda/realtek: Add quirk for Yoga Duet 7 13ITL6 speakers - ALSA: fireworks: fix wrong return count shorter than expected by 4 bytes - [arm64] mmc: sdhci-msm: Reset GCC_SDCC_BCR register for SDHC - [arm64,armhf] mmc: sunxi-mmc: Fix DMA descriptors allocated above 32 bits - mmc: core: Set HS clock speed before sending HS CMD13 - gpiolib: of: fix bounds check for 'gpio-reserved-ranges' - [x86] fpu: Prevent FPU state corruption - [x86] KVM: x86/svm: Account for family 17h event renumberings in amd_pmc_perf_hw_id - [amd64] iommu/vt-d: Calculate mask for non-aligned flushes - drm/amdgpu: do not use passthrough mode in Xen dom0 - Revert "SUNRPC: attempt AF_LOCAL connect on setup" - timekeeping: Mark NMI safe time accessors as notrace - firewire: fix potential uaf in outbound_phy_packet_callback() - firewire: remove check of list iterator against head past the loop body - firewire: core: extend card->lock in fw_core_handle_bus_reset - net: stmmac: disable Split Header (SPH) for Intel platforms - btrfs: sysfs: export the balance paused state of exclusive operation - btrfs: force v2 space cache usage for subpage mount - btrfs: do not BUG_ON() on failure to update inode when setting xattr - btrfs: export a helper for compression hard check - btrfs: do not allow compression on nodatacow files - btrfs: skip compression property for anything other than files and dirs - genirq: Synchronize interrupt thread startup - ASoC: da7219: Fix change notifications for tone generator frequency - [arm64] ASoC: wm8958: Fix change notifications for DSP controls - [arm64,armhf] ASoC: meson: Fix event generation for AUI ACODEC mux - [arm64,armhf] ASoC: meson: Fix event generation for G12A tohdmi mux - [arm64,armhf] ASoC: meson: Fix event generation for AUI CODEC mux - [s390x] dasd: fix data corruption for ESE devices - [s390x] dasd: prevent double format of tracks for ESE devices - [s390x] dasd: Fix read for ESE with blksize < 4k - [s390x] dasd: Fix read inconsistency for ESE DASD devices - can: isotp: remove re-binding of bound socket - nfc: replace improper check device_is_registered() in netlink related functions - NFC: netlink: fix sleep in atomic bug when firmware download timeout - [arm64,armhf] gpio: pca953x: fix irq_stat not updated when irq is disabled (irq_mask not set) - hwmon: (adt7470) Fix warning on module removal - [armhf] hwmon: (pmbus) disable PEC if not enabled - [arm*] ASoC: dmaengine: Restore NULL prepare_slave_config() callback - [arm64] ASoC: meson: axg-tdm-interface: Fix formatters in trigger" - [arm64] ASoC: meson: axg-card: Fix nonatomic links - ASoC: soc-ops: fix error handling - [amd64] iommu/vt-d: Drop stop marker messages - net/mlx5e: Fix trust state reset in reload - net/mlx5: Fix slab-out-of-bounds while reading resource dump menu - net/mlx5e: Fix wrong source vport matching on tunnel rule - net/mlx5e: Don't match double-vlan packets if cvlan is not set - net/mlx5e: CT: Fix queued up restore put() executing after relevant ft release - net/mlx5e: Fix the calling of update_buffer_lossy() API - net/mlx5: Fix matching on inner TTC - net/mlx5: Avoid double clear or set of sync reset requested - net/mlx5: Fix deadlock in sync reset flow - net/mlx5e: Lag, Fix use-after-free in fib event handler - net/mlx5e: Lag, Fix fib_info pointer assignment - net/mlx5e: Lag, Don't skip fib events on current dst - net/mlx5e: TC, fix decap fallback to uplink when int port not supported - ALSA: hda/realtek: Fix mute led issue on thinkpad with cs35l41 s-codec - SUNRPC release the transport of a relocated task with an assigned transport - RDMA/irdma: Flush iWARP QP if modified to ERR from RTR state - RDMA/irdma: Reduce iWARP QP destroy time - RDMA/irdma: Fix possible crash due to NULL netdev in notifier - NFSv4: Don't invalidate inode attributes on delegation return - [arm64,armhf] net: stmmac: dwmac-sun8i: add missing of_node_put() in sun8i_dwmac_register_mdio_mux() - [armhf] net: cpsw: add missing of_node_put() in cpsw_probe_dt() - net: igmp: respect RCU rules in ip_mc_source() and ip_mc_msfilter() - [arm64] drm/msm/dp: remove fail safe mode related code - hinic: fix bug of wq out of bound access - SUNRPC: Don't leak sockets in xs_local_connect() - mld: respect RCU rules in ip6_mc_source() and ip6_mc_msfilter() - rxrpc: Enable IPv6 checksums on transport socket - dt-bindings: pci: apple,pcie: Drop max-link-speed from example - bnxt_en: Fix possible bnxt_open() failure caused by wrong RFS flag - bnxt_en: Fix unnecessary dropping of RX packets - [arm64,armhf] smsc911x: allow using IRQ0 - btrfs: always log symlinks in full mode - [arm*] gpio: mvebu: drop pwm base assignment - net: rds: acquire refcount on TCP sockets - [x86] kvm: x86/cpuid: Only provide CPUID leaf 0xA if host has architectural PMU - fbdev: Make fb_release() return -ENODEV if fbdev was unregistered - [x86] KVM: SEV: Mark nested locking of vcpu->lock - [x86] KVM: VMX: Exit to userspace if vCPU has injected exception and invalid state - [x86] kvm: Preserve BSP MSR_KVM_POLL_CONTROL across suspend/resume - [x86] KVM: x86: Do not change ICR on write to APIC_SELF_IPI - [x86] KVM: x86/mmu: avoid NULL-pointer dereference on page freeing bugs - [x86] KVM: LAPIC: Enable timer posted-interrupt only when mwait/hlt is advertised - mmc: rtsx: add 74 Clocks in power on flow - [arm64] PCI: aardvark: Replace custom PCIE_CORE_INT_* macros with PCI_INTERRUPT_* - [arm64] PCI: aardvark: Rewrite IRQ code to chained IRQ handler - [arm64] PCI: aardvark: Check return value of generic_handle_domain_irq() when processing INTx IRQ - [arm64] PCI: aardvark: Make MSI irq_chip structures static driver structures - [arm64] PCI: aardvark: Make msi_domain_info structure a static driver structure - [arm64] PCI: aardvark: Use dev_fwnode() instead of of_node_to_fwnode(dev->of_node) - [arm64] PCI: aardvark: Refactor unmasking summary MSI interrupt - [arm64] PCI: aardvark: Add support for masking MSI interrupts - [arm64] PCI: aardvark: Fix setting MSI address - [arm64] PCI: aardvark: Enable MSI-X support - [arm64] PCI: aardvark: Add support for ERR interrupt on emulated bridge - [arm64] PCI: aardvark: Optimize writing PCI_EXP_RTCTL_PMEIE and PCI_EXP_RTSTA_PME on emulated bridge - [arm64] PCI: aardvark: Add support for PME interrupts - [arm64] PCI: aardvark: Fix support for PME requester on emulated bridge - [arm64] PCI: aardvark: Use separate INTA interrupt for emulated root bridge - [arm64] PCI: aardvark: Remove irq_mask_ack() callback for INTx interrupts - [arm64] PCI: aardvark: Don't mask irq when mapping - [arm64] PCI: aardvark: Drop __maybe_unused from advk_pcie_disable_phy() - [arm64] PCI: aardvark: Update comment about link going down after link-up https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.17.8 - Bluetooth: Fix the creation of hdev->name - rfkill: uapi: fix RFKILL_IOCTL_MAX_SIZE ioctl request definition - udf: Avoid using stale lengthOfImpUse - mm: fix missing cache flush for all tail pages of compound page - mm: hugetlb: fix missing cache flush in copy_huge_page_from_user() - mm: hugetlb: fix missing cache flush in hugetlb_mcopy_atomic_pte() - mm: shmem: fix missing cache flush in shmem_mfill_atomic_pte() - mm: userfaultfd: fix missing cache flush in mcopy_atomic_pte() and __mcopy_atomic() - mm/hwpoison: fix error page recovered but reported "not recovered" - mm/mlock: fix potential imbalanced rlimit ucounts adjustment - mm,migrate: fix establishing demotion target - mm: fix invalid page pointer returned with FOLL_PIN gups https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.17.9 - batman-adv: Don't skb_split skbuffs with frag_list - iwlwifi: iwl-dbg: Use del_timer_sync() before freeing - hwmon: (tmp401) Add OF device ID table - mac80211: Reset MBSSID parameters upon connection - net: rds: use maybe_get_net() when acquiring refcount on TCP sockets - net: Fix features skip in for_each_netdev_feature() - [arm64] net: mscc: ocelot: fix last VCAP IS1/IS2 filter persisting in hardware when deleted - [arm64] net: mscc: ocelot: fix VCAP IS2 filters matching on both lookups - [arm64] net: mscc: ocelot: restrict tc-trap actions to VCAP IS2 lookup 0 - [arm64] net: mscc: ocelot: avoid corrupting hardware counters when moving VCAP filters - [arm*] fbdev: simplefb: Cleanup fb_info in .fb_destroy rather than .remove - fbdev: efifb: Cleanup fb_info in .fb_destroy rather than .remove - [x86] fbdev: vesafb: Cleanup fb_info in .fb_destroy rather than .remove - [x86] platform/surface: aggregator: Fix initialization order when compiling as builtin module - ice: Fix race during aux device (un)plugging - ice: clear stale Tx queue settings before configuring - ice: fix PTP stale Tx timestamps cleanup - ipv4: drop dst in multicast routing path - drm/nouveau: Fix a potential theorical leak in nouveau_get_backlight_name() - netlink: do not reset transport header in netlink_recvmsg() - net: chelsio: cxgb4: Avoid potential negative array offset - fbdev: efifb: Fix a use-after-free due early fb_info cleanup - net: sfc: fix memory leak due to ptp channel - fanotify: do not allow setting dirent events in mask of non-dir - mac80211_hwsim: call ieee80211_tx_prepare_skb under RCU protection - nfs: fix broken handling of the softreval mount option - dim: initialize all struct fields - procfs: prevent unprivileged processes accessing fdinfo dir - [arm64,armhf] net: dsa: flush switchdev workqueue on bridge join error path - [arm64] vdso: fix makefile dependency on vdso.so - virtio: fix virtio transitional ids - [s390x] ctcm: fix variable dereferenced before check - [s390x] ctcm: fix potential memory leak - [s390x] lcs: fix variable dereferenced before check - net/sched: act_pedit: really ensure the skb is writable - [arm64] net: bcmgenet: Check for Wake-on-LAN interrupt probe deferral - [arm*] drm/vc4: hdmi: Fix build error for implicit function declaration - [armhf] net: dsa: bcm_sf2: Fix Wake-on-LAN with mac_link_down() - net/smc: non blocking recvmsg() return -EAGAIN when no data and signal_pending - net: sfc: ef10: fix memory leak in efx_ef10_mtd_probe() - tls: Fix context leak on tls_device_down - drm/vmwgfx: Fix fencing on SVGAv3 - gfs2: Fix filesystem block deallocation for short writes - hwmon: (f71882fg) Fix negative temperature - RDMA/irdma: Fix deadlock in irdma_cleanup_cm_core() - [arm64,armhf] iommu: arm-smmu: disable large page mappings for Nvidia arm-smmu - ASoC: max98090: Reject invalid values in custom control put() - ASoC: max98090: Generate notifications on changes for custom control - ASoC: ops: Validate input values in snd_soc_put_volsw_range() - [s390x] disable -Warray-bounds - [x86] ASoC: SOF: Fix NULL pointer exception in sof_pci_probe callback - io_uring: assign non-fixed early for async work - net: sfp: Add tx-fault workaround for Huawei MA5671A SFP ONT - secure_seq: use the 64 bits of the siphash for port offset calculation (CVE-2022-1012) - tcp: use different parts of the port_offset for index and offset (CVE-2022-1012) - tcp: resalt the secret every 10 seconds (CVE-2022-1012) - tcp: add small random increments to the source port (CVE-2022-1012) - tcp: dynamically allocate the perturb table used by source ports (CVE-2022-1012) - tcp: increase source port perturb table to 2^16 (CVE-2022-1012) - tcp: drop the hash_32() part from the index calculation (CVE-2022-1012) - block: Do not call folio_next() on an unreferenced folio - [arm64,armhf] interconnect: Restore sync state by ignoring ipa-virt in provider count - firmware_loader: use kernel credentials when reading firmware - [x86] mm: Fix marking of unused sub-pmd ranges - tty: n_gsm: fix buffer over-read in gsm_dlci_data() - tty: n_gsm: fix mux activation issues in gsm_config() - tty: n_gsm: fix invalid gsmtty_write_room() result - usb: gadget: uvc: allow for application to cleanly shutdown - usb: cdc-wdm: fix reading stuck on device close - [arm64] usb: typec: tcpci: Don't skip cleanup in .remove() on error - USB: serial: pl2303: add device id for HP LM930 Display - USB: serial: qcserial: add support for Sierra Wireless EM7590 - USB: serial: option: add Fibocom L610 modem - USB: serial: option: add Fibocom MA510 modem - [arm64] fsl_lpuart: Don't enable interrupts too early - genirq: Remove WARN_ON_ONCE() in generic_handle_domain_irq() - ceph: fix setting of xattrs on async created inodes - Revert "mm/memory-failure.c: skip huge_zero_page in memory_failure()" - mm/huge_memory: do not overkill when splitting huge_zero_page - mm: mremap: fix sign for EFAULT error return value - drm/vmwgfx: Disable command buffers on svga3 without gbobjects - drm/nouveau/tegra: Stop using iommu_present() - i40e: i40e_main: fix a missing check on list iterator - net: atlantic: always deep reset on pm op, fixing up my null deref regression - net: phy: Fix race condition on link status change - writeback: Avoid skipping inode writeback - cgroup/cpuset: Remove cpus_allowed/mems_allowed setup in cpuset_init_smp() - ping: fix address binding wrt vrf - ath11k: reduce the wait time of 11d scan and hw scan while add interface - [arm*] arm[64]/memremap: don't abuse pfn_valid() to ensure presence of linear map - net: phy: micrel: Do not use kszphy_suspend/resume for KSZ8061 - net: phy: micrel: Pass .probe for KS8737 - SUNRPC: Ensure that the gssproxy client can start in a connected state - drm/vmwgfx: Initialize drm_mode_fb_cmd2 - Revert "drm/amd/pm: keep the BACO feature enabled for suspend" - dma-buf: call dma_buf_stats_setup after dmabuf is in valid list - mm/hwpoison: use pr_err() instead of dump_page() in get_any_page() - net: phy: micrel: Fix incorrect variable type in micrel - mm/kfence: reset PG_slab and memcg_data before freeing __kfence_pool https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.17.10 - floppy: use a statically allocated error counter - kernel/resource: Introduce request_mem_region_muxed() - i2c: piix4: Replace hardcoded memory map size with a #define - i2c: piix4: Move port I/O region request/release code into functions - i2c: piix4: Move SMBus controller base address detect into function - i2c: piix4: Move SMBus port selection into function - i2c: piix4: Add EFCH MMIO support to region request and release - i2c: piix4: Add EFCH MMIO support to SMBus base address detect - i2c: piix4: Add EFCH MMIO support for SMBus port select - i2c: piix4: Enable EFCH MMIO for Family 17h+ - [x86] Watchdog: sp5100_tco: Move timer initialization into function - [x86] Watchdog: sp5100_tco: Refactor MMIO base address initialization - [x86] Watchdog: sp5100_tco: Add initialization using EFCH MMIO - [x86] Watchdog: sp5100_tco: Enable Family 17h+ CPUs - [x86] Revert "drm/i915/opregion: check port number bounds for SWSCI display power state" - gfs2: cancel timed-out glock requests - gfs2: Switch lock order of inode and iopen glock - rtc: fix use-after-free on device removal - [arm64] rtc: pcf2127: fix bug when reading alarm registers - Input: add bounds checking to input_set_capability() - nvme-pci: add quirks for Samsung X5 SSDs - gfs2: Disable page faults during lockless buffered reads - [arm64,armhf] rtc: sun6i: Fix time overflow handling - [armhf] crypto: stm32 - fix reference leak in stm32_crc_remove - [amd64] crypto: x86/chacha20 - Avoid spurious jumps to other functions - ALSA: hda/realtek: Enable headset mic on Lenovo P360 - [s390x] traps: improve panic message for translation-specification exception - [s390x] pci: improve zpci_dev reference counting - smb3: cleanup and clarify status of tree connections - nvmet: use a private workqueue instead of the system workqueue - nvme-multipath: fix hang when disk goes live over reconnect - rtc: mc146818-lib: Fix the AltCentury for AMD platforms - fs: fix an infinite loop in iomap_fiemap - drbd: remove usage of list iterator variable after loop - platform/chrome: cros_ec_debugfs: detach log reader wq from devm - [armel,armhf] arm/stacktrace, kasan: Silence KASAN warnings in unwind_frame() - nilfs2: fix lockdep warnings in page operations for btree nodes - nilfs2: fix lockdep warnings during disk space reclamation - ALSA: usb-audio: Restore Rane SL-1 quirk - [i386] ALSA: wavefront: Proper check of get_user() error - ALSA: hda/realtek: Add quirk for TongFang devices with pop noise - perf: Fix sys_perf_event_open() race against self (CVE-2022-1729) - selinux: fix bad cleanup on error in hashtab_duplicate() - audit,io_uring,io-wq: call __audit_uring_exit for dummy contexts - Fix double fget() in vhost_net_set_backend() - PCI/PM: Avoid putting Elo i2 PCIe Ports in D3cold - [arm64] KVM: arm64: vgic-v3: Consistently populate ID_AA64PFR0_EL1.GIC - [x86] KVM: x86/mmu: Update number of zapped pages even if page list is stable - KVM: Free new dirty bitmap if creating a new memslot fails - [arm64] paravirt: Use RCU read locks to guard stolen_time - [arm64] mte: Ensure the cleared tags are visible before setting the PTE - [arm64] crypto: qcom-rng - fix infinite loop on requests not multiple of WORD_SZ - mmc: core: Fix busy polling for MMC_SEND_OP_COND again - libceph: fix potential use-after-free on linger ping and resends - drm/amd: Don't reset dGPUs if the system is going to s2idle - [x86] drm/i915/dmc: Add MMIO range restrictions - drm/dp/mst: fix a possible memory leak in fetch_monitor_name() - dma-buf: fix use of DMA_BUF_SET_NAME_{A,B} in userspace - dma-buf: ensure unique directory name for dmabuf stats - [arm64] dts: qcom: sm8250: don't enable rx/tx macro by default - [armhf] pinctrl: pinctrl-aspeed-g6: remove FWQSPID group in pinctrl - ALSA: hda - fix unused Realtek function when PM is not enabled - block/mq-deadline: Set the fifo_time member also if inserting at head - mptcp: fix subflow accounting on close - [arm64] net: macb: Increment rx bd head after allocating skb and buffer - [x86] i915/guc/reset: Make __guc_reset_context aware of guilty engines - xfrm: rework default policy structure - xfrm: fix "disable_policy" flag use when arriving from different devices - net/sched: act_pedit: sanitize shift argument before usage - netfilter: flowtable: fix excessive hw offload attempts after failure - netfilter: nft_flow_offload: skip dst neigh lookup for ppp devices - net: fix dev_fill_forward_path with pppoe + bridge - netfilter: nft_flow_offload: fix offload with pppoe + vlan - ptp: ocp: have adjtime handle negative delta_ns correctly - [arm64] Revert "PCI: aardvark: Rewrite IRQ code to chained IRQ handler" - net: vmxnet3: fix possible use-after-free bugs in vmxnet3_rq_alloc_rx_buf() - net: vmxnet3: fix possible NULL pointer dereference in vmxnet3_rq_cleanup() - [arm64] kexec: load from kimage prior to clobbering - ice: fix crash when writing timestamp on RX rings - ice: fix possible under reporting of ethtool Tx and Rx statistics - ice: Fix interrupt moderation settings getting cleared - net/qla3xxx: Fix a test in ql_reset_work() - net/mlx5: DR, Fix missing flow_source when creating multi-destination FW table - net/mlx5: Initialize flow steering during driver probe - net/mlx5: DR, Ignore modify TTL on RX if device doesn't support it - net/mlx5e: Block rx-gro-hw feature in switchdev mode - net/mlx5e: Properly block LRO when XDP is enabled - net/mlx5e: Properly block HW GRO when XDP is enabled - net/mlx5e: Remove HW-GRO from reported features - net/mlx5: Drain fw_reset when removing device - net: af_key: add check for pfkey_broadcast in function pfkey_process - [armhf] 9196/1: spectre-bhb: enable for Cortex-A15 - [armel,armhf] 9197/1: spectre-bhb: fix loop8 sequence for Thumb2 - lockdown: also lock down previous kgdb use (CVE-2022-21499) - mptcp: fix checksum byte order - igb: skip phy status check where unavailable - netfilter: flowtable: fix TCP flow teardown - netfilter: flowtable: pass flowtable to nf_flow_table_iterate() - netfilter: flowtable: move dst_check to packet path - net: bridge: Clear offload_fwd_mark when passing frame up bridge interface. - [x86] kvm: x86/pmu: Fix the compare function used by the pmu event filter - [arm*] gpio: mvebu/pwm: Refuse requests with inverted polarity - scsi: scsi_dh_alua: Properly handle the ALUA transitioning state - scsi: qla2xxx: Fix missed DMA unmap for aborted commands - mac80211: fix rx reordering with non explicit / psmp ack policy - nl80211: validate S1G channel width - cfg80211: retrieve S1G operating channel number - Revert "fbdev: Make fb_release() return -ENODEV if fbdev was unregistered" - fbdev: Prevent possible use-after-free in fb_release() - [x86] platform/x86: thinkpad_acpi: Convert btusb DMI list to quirks - [x86] platform/x86: thinkpad_acpi: Correct dual fan probe - [x86] platform/surface: gpe: Add support for Surface Pro 8 - net: fix wrong network header length - nl80211: fix locking in nl80211_set_tx_bitrate_mask() - ethernet: tulip: fix missing pci_disable_device() on error in tulip_init_one() - net: atlantic: fix "frag[0] not initialized" - net: atlantic: reduce scope of is_rsc_complete - net: atlantic: add check for MAX_SKB_FRAGS - net: atlantic: verify hw_head_ lies within TX buffer ring - [arm64] Enable repeat tlbi workaround on KRYO4XX gold CPUs - dt-bindings: pinctrl: aspeed-g6: remove FWQSPID group - afs: Fix afs_getattr() to refetch file status if callback break occurred https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.17.11 - mptcp: Do TCP fallback on early DSS checksum failure . [ Vincent Blut ] * [x86] sound/soc/amd: Enable SND_SOC_AMD_ACP5x, SND_SOC_AMD_VANGOGH_MACH, SND_SOC_AMD_ACP6x and SND_SOC_AMD_YC_MACH as modules (Closes: #1010580) * [ppc64*] crypto: Enable CRYPTO_CRC32C_VPMSUM as module (Closes: #1010293) . [ Alejandro R. Sedeño ] * drivers/net/wwan: Enable MHI_WWAN_MBIM as module (Closes: #1011395) . [ Salvatore Bonaccorso ] * Bump ABI to 3 * sign-file: Convert API usage to support OpenSSL v3 * [x86] KVM: x86/mmu: fix NULL pointer dereference on guest INVPCID (CVE-2022-1789) . linux (5.17.6-1) unstable; urgency=medium . * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.17.4 - [arm64] cpuidle: PSCI: Move the `has_lpi` check to the beginning of the function - ACPI: processor idle: Check for architectural support for LPI - btrfs: remove no longer used counter when reading data page - btrfs: remove unused variable in btrfs_{start,write}_dirty_block_groups() - media: si2157: unknown chip version Si2147-A30 ROM 0x50 - drm/amdgpu: Ensure HDA function is suspended before ASIC reset - btrfs: release correct delalloc amount in direct IO write path - btrfs: fix btrfs_submit_compressed_write cgroup attribution - btrfs: return allocated block group from do_chunk_alloc() - ALSA: core: Add snd_card_free_on_error() helper - [i386] ALSA: sis7019: Fix the missing error handling - ALSA: ali5451: Fix the missing snd_card_free() call at probe error - ALSA: als300: Fix the missing snd_card_free() call at probe error - ALSA: als4000: Fix the missing snd_card_free() call at probe error - ALSA: atiixp: Fix the missing snd_card_free() call at probe error - ALSA: azt3328: Fix the missing snd_card_free() call at probe error - ALSA: bt87x: Fix the missing snd_card_free() call at probe error - ALSA: ca0106: Fix the missing snd_card_free() call at probe error - ALSA: cmipci: Fix the missing snd_card_free() call at probe error - ALSA: cs4281: Fix the missing snd_card_free() call at probe error - [i386] ALSA: cs5535audio: Fix the missing snd_card_free() call at probe error - ALSA: emu10k1x: Fix the missing snd_card_free() call at probe error - ALSA: ens137x: Fix the missing snd_card_free() call at probe error - ALSA: es1938: Fix the missing snd_card_free() call at probe error - ALSA: es1968: Fix the missing snd_card_free() call at probe error - ALSA: fm801: Fix the missing snd_card_free() call at probe error - ALSA: hdsp: Fix the missing snd_card_free() call at probe error - ALSA: hdspm: Fix the missing snd_card_free() call at probe error - ALSA: ice1724: Fix the missing snd_card_free() call at probe error - ALSA: intel8x0: Fix the missing snd_card_free() call at probe error - [x86] ALSA: intel_hdmi: Fix the missing snd_card_free() call at probe error - ALSA: korg1212: Fix the missing snd_card_free() call at probe error - ALSA: lola: Fix the missing snd_card_free() call at probe error - ALSA: lx6464es: Fix the missing snd_card_free() call at probe error - ALSA: maestro3: Fix the missing snd_card_free() call at probe error - ALSA: oxygen: Fix the missing snd_card_free() call at probe error - ALSA: riptide: Fix the missing snd_card_free() call at probe error - ALSA: rme32: Fix the missing snd_card_free() call at probe error - ALSA: rme9652: Fix the missing snd_card_free() call at probe error - ALSA: rme96: Fix the missing snd_card_free() call at probe error - [i386] ALSA: sc6000: Fix the missing snd_card_free() call at probe error - ALSA: sonicvibes: Fix the missing snd_card_free() call at probe error - ALSA: via82xx: Fix the missing snd_card_free() call at probe error - ALSA: usb-audio: Cap upper limits of buffer/period bytes for implicit fb - [x86] ALSA: memalloc: Add fallback SG-buffer allocations for x86 - ALSA: nm256: Don't call card private_free at probe error path - [arm64] drm/msm: Add missing put_task_struct() in debugfs path - nfsd: Fix a write performance regression - Revert "ath11k: mesh: add support for 256 bitmap in blockack frames in 11ax" - [arm64] KVM: arm64: Generalise VM features into a set of flags - [arm64] KVM: arm64: mixed-width check should be skipped for uninitialized vCPUs - SUNRPC: Fix the svc_deferred_event trace class - net/sched: flower: fix parsing of ethertype following VLAN header - veth: Ensure eth header is in skb's linear part - gpiolib: acpi: use correct format characters - cifs: release cached dentries only if mount is complete - ice: arfs: fix use-after-free when freeing @rx_cpu_rmap - Revert "iavf: Fix deadlock occurrence during resetting VF interface" - net: mdio: don't defer probe forever if PHY IRQ provider is missing - sctp: use the correct skb for security_sctp_assoc_request - net/sched: fix initialization order when updating chain 0 head - cachefiles: unmark inode in use in error path - cachefiles: Fix KASAN slab-out-of-bounds in cachefiles_set_volume_xattr - [arm64] net: dsa: felix: suppress -EPROBE_DEFER errors - io_uring: flag the fact that linked file assignment is sane - [armhf] net: ethernet: stmmac: fix altr_tse_pcs function when using a fixed-link - net/sched: taprio: Check if socket flags are valid - cfg80211: hold bss_lock while updating nontrans_list - netfilter: nft_socket: make cgroup match work in input too - [arm64] drm/msm: Fix range size vs end confusion - [arm64] drm/msm/dsi: Use connector directly in msm_dsi_manager_connector_init() - [arm64] drm/msm/dp: add fail safe mode outside of event_mutex context - io_uring: stop using io_wq_work as an fd placeholder - net/smc: use memcpy instead of snprintf to avoid out of bounds read - net/smc: Fix NULL pointer dereference in smc_pnet_find_ib() - scsi: pm80xx: Mask and unmask upper interrupt vectors 32-63 - scsi: pm80xx: Enable upper inbound, outbound queues - scsi: iscsi: Move iscsi_ep_disconnect() - scsi: iscsi: Fix offload conn cleanup when iscsid restarts - scsi: iscsi: Fix endpoint reuse regression - scsi: iscsi: Fix conn cleanup and stop race during iscsid restart - scsi: iscsi: Fix unbound endpoint error handling - sctp: Initialize daddr on peeled off socket - netfilter: nf_tables: nft_parse_register can return a negative value - io_uring: fix assign file locking issue - ALSA: ad1889: Fix the missing snd_card_free() call at probe error - ALSA: mtpav: Don't call card private_free at probe error path - io_uring: move io_uring_rsrc_update2 validation - io_uring: verify that resv2 is 0 in io_uring_rsrc_update2 - io_uring: verify pad field is 0 in io_get_ext_arg - ALSA: usb-audio: Increase max buffer size - ALSA: usb-audio: Limit max buffer and period sizes per time - macvlan: Fix leaking skb in source mode with nodst option - [armhf] net: ftgmac100: access hardware register after clock ready - cifs: potential buffer overflow in handling symlinks - vfio/pci: Fix vf_token mechanism when device-specific VF drivers are used - tun: annotate access to queue->trans_start - [arm64] net: dsa: felix: fix tagging protocol changes with multiple CPU ports - [arm64] net: bcmgenet: Revert "Use stronger register read/writes to assure ordering" - block: fix offset/size check in bio_trim() - block: null_blk: end timed out poll request - io_uring: abort file assignment prior to assigning creds - [powerpc*] KVM: PPC: Book3S HV P9: Fix "lost kick" race - drm/amd: Add USBC connector ID - btrfs: fix fallocate to use file_modified to update permissions consistently - btrfs: do not warn for free space inode in cow_file_range - drm/amdgpu: conduct a proper cleanup of PDB bo - drm/amdgpu/gmc: use PCI BARs for APUs in passthrough - drm/amd/display: FEC check in timing validation - drm/amdkfd: Fix Incorrect VMIDs passed to HWS - drm/amdgpu/vcn: improve vcn dpg stop procedure - [arm64,x86] Drivers: hv: vmbus: Deactivate sysctl_record_panic_msg by default in isolated guests - [arm64,x86] Drivers: hv: vmbus: Propagate VMbus coherence to each VMbus device - [amd64,arm64] PCI: hv: Propagate coherence from VMbus device to PCI device - [arm64,x86] Drivers: hv: vmbus: Prevent load re-ordering when reading ring buffer - scsi: target: tcmu: Fix possible page UAF - scsi: lpfc: Improve PCI EEH Error and Recovery Handling - scsi: lpfc: Fix unload hang after back to back PCI EEH faults - scsi: lpfc: Fix queue failures when recovering from PCI parity error - [powerpc*] scsi: ibmvscsis: Increase INITIAL_SRP_LIMIT to 1024 - ata: libata-core: Disable READ LOG DMA EXT for Samsung 840 EVOs - [armhf] gpu: ipu-v3: Fix dev_dbg frequency output - [powerpc*] static_call: Properly initialise DEFINE_STATIC_CALL_RET0() - [arm64] alternatives: mark patch_alternative() as `noinstr` - tlb: hugetlb: Add more sizes to tlb_remove_huge_tlb_entry - [arm64,x86] Drivers: hv: balloon: Disable balloon and hot-add accordingly - net: usb: aqc111: Fix out-of-bounds accesses in RX fixup - myri10ge: fix an incorrect free for skb in myri10ge_sw_tso - drm/amd/display: Fix allocate_mst_payload assert on resume - drbd: set QUEUE_FLAG_STABLE_WRITES - scsi: mpt3sas: Fail reset operation if config request timed out - scsi: mvsas: Add PCI ID of RocketRaid 2640 - scsi: megaraid_sas: Target with invalid LUN ID is deleted during scan - drivers: net: slip: fix NPD bug in sl_tx_timeout() - io_uring: zero tag on rsrc removal - io_uring: use nospec annotation for more indexes - [arm64] perf/imx_ddr: Fix undefined behavior due to shift overflowing the constant - mm/secretmem: fix panic when growing a memfd_secret - mm, page_alloc: fix build_zonerefs_node() - mm: fix unexpected zeroed page mapping with zram swap - hugetlb: do not demote poisoned hugetlb pages - revert "fs/binfmt_elf: fix PT_LOAD p_align values for loaders" - revert "fs/binfmt_elf: use PT_LOAD p_align values for static PIE" - [x86] KVM: x86/mmu: Resolve nx_huge_pages when kvm.ko is loaded - SUNRPC: Fix NFSD's request deferral on RDMA transports - cifs: verify that tcon is valid before dereference in cifs_kill_sb - ath9k: Properly clear TX status area before reporting to mac80211 - ath9k: Fix usage of driver-private space in tx_info - btrfs: zoned: activate block group only for extent allocation - btrfs: fix root ref counts in error handling in btrfs_get_root_ref - btrfs: mark resumed async balance as writing - ALSA: hda/realtek: Add quirk for Clevo PD50PNT - ALSA: hda/realtek: add quirk for Lenovo Thinkpad X12 speakers - ALSA: pcm: Test for "silence" field in struct "pcm_format_data" - nl80211: correctly check NL80211_ATTR_REG_ALPHA2 size - ipv6: fix panic when forwarding a pkt with no in6 dev - drm/amdgpu: Enable gfxoff quirk on MacBook Pro - [x86] tsx: Use MSR_TSX_CTRL to clear CPUID bits - [x86] tsx: Disable TSX development mode at boot - genirq/affinity: Consider that CPUs on nodes can be unbalanced - tick/nohz: Use WARN_ON_ONCE() to prevent console saturation - dm integrity: fix memory corruption when tag_size is less than digest size - i2c: dev: check return value when calling dev_set_name() - [arm64,armhf] Revert "net: dsa: setup master before ports" - smp: Fix offline cpu check in flush_smp_call_function_queue() - dt-bindings: memory: snps,ddrc-3.80a compatible also need interrupts - timers: Fix warning condition in __run_timers() - mm, kfence: support kmem_dump_obj() for KFENCE objects - [x86] drm/i915: Sunset igpu legacy mmap support based on GRAPHICS_VER_FULL - cpu/hotplug: Remove the 'cpu' member of cpuhp_cpu_state - ax25: Fix UAF bugs in ax25 timers (CVE-2022-1205) - io_uring: use right issue_flags for splice/tee - io_uring: fix poll file assign deadlock - io_uring: fix poll error reporting https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.17.5 - etherdevice: Adjust ether_addr* prototypes to silence -Wstringop-overead - perf tools: Fix segfault accessing sample_id xyarray - drm/amd/display: Only set PSR version when valid - block/compat_ioctl: fix range check in BLKGETSIZE - gfs2: assign rgrp glock before compute_bitstructs - scsi: ufs: core: scsi_get_lba() error fix - net/sched: cls_u32: fix netns refcount changes in u32_change() - ALSA: usb-audio: Clear MIDI port active flag after draining - ALSA: usb-audio: add mapping for MSI MAG X570S Torpedo MAX. - ALSA: hda/realtek: Add quirk for Clevo NP70PNP - ASoC: atmel: Remove system clock tree configuration for at91sam9g20ek - ASoC: topology: Correct error handling in soc_tplg_dapm_widget_create() - ASoC: rk817: Use devm_clk_get() in rk817_platform_probe - ASoC: msm8916-wcd-digital: Check failure for devm_snd_soc_register_component - ASoC: codecs: wcd934x: do not switch off SIDO Buck when codec is in use - dmaengine: idxd: fix device cleanup on disable - dmaengine: imx-sdma: Fix error checking in sdma_event_remap - dmaengine: mediatek:Fix PM usage reference leak of mtk_uart_apdma_alloc_chan_resources - dmaengine: dw-edma: Fix unaligned 64bit access - spi: spi-mtk-nor: initialize spi controller after resume - firmware: cs_dsp: Fix overrun of unterminated control name string - esp: limit skb_page_frag_refill use to a single page - spi: cadence-quadspi: fix incorrect supports_op() return value - igc: Fix infinite loop in release_swfw_sync - igc: Fix BUG: scheduling while atomic - igc: Fix suspending when PTM is active - ice: allow creating VFs for !CONFIG_NET_SWITCHDEV - ice: fix crash in switchdev mode - ice: Fix memory leak in ice_get_orom_civd_data() - ALSA: hda/hdmi: fix warning about PCM count when used with SOF - rxrpc: Restore removed timer deletion - net/smc: Fix sock leak when release after smc_shutdown() - net/packet: fix packet_sock xmit return value checking - ip6_gre: Avoid updating tunnel->tun_hlen in __gre6_xmit() - ip6_gre: Fix skb_under_panic in __gre6_xmit() - net: restore alpha order to Ethernet devices in config - net/sched: cls_u32: fix possible leak in u32_init_knode() - l3mdev: l3mdev_master_upper_ifindex_by_index_rcu should be using netdev_master_upper_dev_get_rcu - ipv6: make ip6_rt_gc_expire an atomic_t - can: isotp: stop timeout monitoring when no first frame was sent - net: dsa: hellcreek: Calculate checksums in tagger - net: mscc: ocelot: fix broken IP multicast flooding - netlink: reset network and mac headers in netlink_dump() - drm/i915/display/psr: Unset enable_psr2_sel_fetch if other checks in intel_psr2_config_valid() fails - RISC-V: KVM: Remove 's' & 'u' as valid ISA extension - RISC-V: KVM: Restrict the extensions that can be disabled - net: stmmac: Use readl_poll_timeout_atomic() in atomic state - dmaengine: idxd: match type for retries var in idxd_enqcmds() - dmaengine: idxd: fix retry value to be constant for duration of function call - dmaengine: idxd: add RO check for wq max_batch_size write - dmaengine: idxd: add RO check for wq max_transfer_size write - dmaengine: idxd: skip clearing device context when device is read-only - selftests: mlxsw: vxlan_flooding: Prevent flooding of unwanted packets - selftests: mlxsw: vxlan_flooding_ipv6: Prevent flooding of unwanted packets - userfaultfd: mark uffd_wp regardless of VM_WRITE flag - arm64: mm: fix p?d_leaf() - XArray: Disallow sibling entries of nodes - drm/msm/gpu: Rename runtime suspend/resume functions - drm/msm/gpu: Remove mutex from wait_event condition - ARM: vexpress/spc: Avoid negative array index when !SMP - reset: renesas: Check return value of reset_control_deassert() - reset: tegra-bpmp: Restore Handle errors in BPMP response - platform/x86: samsung-laptop: Fix an unsigned comparison which can never be negative - ALSA: usb-audio: Fix undefined behavior due to shift overflowing the constant - drm/msm/disp: check the return value of kzalloc() - selftests: KVM: Free the GIC FD when cleaning up in arch_timer - ALSA: hda: intel-dsp-config: update AlderLake PCI IDs - arm64: dts: imx: Fix imx8*-var-som touchscreen property sizes - vxlan: fix error return code in vxlan_fdb_append - cifs: Check the IOCB_DIRECT flag, not O_DIRECT - net: atlantic: Avoid out-of-bounds indexing - mt76: Fix undefined behavior due to shift overflowing the constant - brcmfmac: sdio: Fix undefined behavior due to shift overflowing the constant - dpaa_eth: Fix missing of_node_put in dpaa_get_ts_info() - drm/msm/mdp5: check the return of kzalloc() - KVM: x86: hyper-v: Avoid writing to TSC page without an active vCPU - net: macb: Restart tx only if queue pointer is lagging - scsi: iscsi: Release endpoint ID when its freed - scsi: iscsi: Merge suspend fields - scsi: iscsi: Fix NOP handling during conn recovery - scsi: qedi: Fix failed disconnect handling - stat: fix inconsistency between struct stat and struct compat_stat - VFS: filename_create(): fix incorrect intent. - nvme: add a quirk to disable namespace identifiers - nvme-pci: disable namespace identifiers for the MAXIO MAP1002/1202 - nvme-pci: disable namespace identifiers for Qemu controllers - irq_work: use kasan_record_aux_stack_noalloc() record callstack - EDAC/synopsys: Read the error count from the correct register - mm/memory-failure.c: skip huge_zero_page in memory_failure() - memcg: sync flush only if periodic flush is delayed - mm, hugetlb: allow for "high" userspace addresses - oom_kill.c: futex: delay the OOM reaper to allow time for proper futex cleanup - mm/mmu_notifier.c: fix race in mmu_interval_notifier_remove() - ata: pata_marvell: Check the 'bmdma_addr' beforing reading - dma: at_xdmac: fix a missing check on list iterator - dmaengine: imx-sdma: fix init of uart scripts - net: atlantic: invert deep par in pm functions, preventing null derefs - drm/radeon: fix logic inversion in radeon_sync_resv - io_uring: free iovec if file assignment fails - Input: omap4-keypad - fix pm_runtime_get_sync() error checking - scsi: sr: Do not leak information in ioctl - sched/pelt: Fix attach_entity_load_avg() corner case - perf/core: Fix perf_mmap fail when CONFIG_PERF_USE_VMALLOC enabled - drm/panel/raspberrypi-touchscreen: Avoid NULL deref if not initialised - drm/panel/raspberrypi-touchscreen: Initialise the bridge in prepare - powerpc/time: Always set decrementer in timer_interrupt() - KVM: PPC: Fix TCE handling for VFIO - drm/vc4: Use pm_runtime_resume_and_get to fix pm_runtime_get_sync() usage - powerpc/perf: Fix power9 event alternatives - powerpc/perf: Fix power10 event alternatives - arm/xen: Fix some refcount leaks - perf script: Always allow field 'data_src' for auxtrace - perf report: Set PERF_SAMPLE_DATA_SRC bit for Arm SPE event - fs: fix acl translation - cifs: fix NULL ptr dereference in refresh_mounts() - cifs: use correct lock type in cifs_reconnect() - xtensa: patch_text: Fixup last cpu should be master - xtensa: fix a7 clobbering in coprocessor context load/store - openvswitch: fix OOB access in reserve_sfa_size() - gpio: Request interrupts after IRQ is initialized - ASoC: rt5682: fix an incorrect NULL check on list iterator - ASoC: soc-dapm: fix two incorrect uses of list iterator - e1000e: Fix possible overflow in LTR decoding - codecs: rt5682s: fix an incorrect NULL check on list iterator - ARC: entry: fix syscall_trace_exit argument - drm/vmwgfx: Fix gem refcounting and memory evictions - arm_pmu: Validate single/group leader events - KVM: x86/pmu: Update AMD PMC sample period to fix guest NMI-watchdog - KVM: x86: Don't re-acquire SRCU lock in complete_emulated_io() - KVM: x86: Pend KVM_REQ_APICV_UPDATE during vCPU creation to fix a race - KVM: nVMX: Defer APICv updates while L2 is active until L1 is active - KVM: SVM: Simplify and harden helper to flush SEV guest page(s) - KVM: SVM: Flush when freeing encrypted pages even on SME_COHERENT CPUs - ext4: fix fallocate to use file_modified to update permissions consistently - ext4: fix symlink file size not match to file content - ext4: fix use-after-free in ext4_search_dir - ext4: limit length to bitmap_maxbytes - blocksize in punch_hole - ext4, doc: fix incorrect h_reserved size - ext4: fix overhead calculation to account for the reserved gdt blocks - ext4: force overhead calculation if the s_overhead_cluster makes no sense - ext4: update the cached overhead value in the superblock - jbd2: fix a potential race while discarding reserved buffers after an abort - spi: atmel-quadspi: Fix the buswidth adjustment between spi-mem and controller - ASoC: SOF: topology: cleanup dailinks on widget unload - io_uring: fix leaks on IOPOLL and CQE_SKIP - arm64: dts: qcom: add IPA qcom,qmp property https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.17.6 - usb: mtu3: fix USB 3.0 dual-role-switch from device to host - floppy: disable FDRAWCMD by default - USB: quirks: add a Realtek card reader - USB: quirks: add STRING quirk for VCOM device - USB: serial: whiteheat: fix heap overflow in WHITEHEAT_GET_DTR_RTS - USB: serial: cp210x: add PIDs for Kamstrup USB Meter Reader - USB: serial: option: add support for Cinterion MV32-WA/MV32-WB - USB: serial: option: add Telit 0x1057, 0x1058, 0x1075 compositions - usb: xhci: tegra:Fix PM usage reference leak of tegra_xusb_unpowergate_partitions - xhci: Enable runtime PM on second Alderlake controller - xhci: stop polling roothubs after shutdown - xhci: increase usb U3 -> U0 link resume timeout from 100ms to 500ms - iio: dac: ad5592r: Fix the missing return value. - iio: scd4x: check return of scd4x_write_and_fetch - iio: dac: ad5446: Fix read_raw not returning set value - iio: magnetometer: ak8975: Fix the error handling in ak8975_power_on() - iio: imu: inv_icm42600: Fix I2C init possible nack - usb: misc: fix improper handling of refcount in uss720_probe() - usb: core: Don't hold the device lock while sleeping in do_proc_control() - usb: typec: ucsi: Fix reuse of completion structure - usb: typec: ucsi: Fix role swapping - usb: gadget: uvc: Fix crash when encoding data for usb request - usb: gadget: configfs: clear deactivation flag in configfs_composite_unbind() - usb: dwc3: Try usb-role-switch first in dwc3_drd_init - usb: dwc3: core: Fix tx/rx threshold settings - usb: dwc3: core: Only handle soft-reset in DCTL - usb: dwc3: gadget: Return proper request status - usb: dwc3: pci: add support for the Intel Meteor Lake-P - usb: cdns3: Fix issue for clear halt endpoint - usb: phy: generic: Get the vbus supply - kernfs: fix NULL dereferencing in kernfs_remove - binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0 - binder: Address corner cases in deferred copy and fixup - serial: imx: fix overrun interrupts in DMA mode - serial: amba-pl011: do not time out prematurely when draining tx fifo - serial: 8250: Also set sticky MCR bits in console restoration - serial: 8250: Correct the clock for EndRun PTP/1588 PCIe device - eeprom: at25: Use DMA safe buffers - arch_topology: Do not set llc_sibling if llc_id is invalid - topology: make core_mask include at least cluster_siblings - ceph: fix possible NULL pointer dereference for req->r_session - bus: mhi: host: pci_generic: Add missing poweroff() PM callback - bus: mhi: host: pci_generic: Flush recovery worker during freeze - arm64: dts: imx8mm-venice: fix spi2 pin configuration - pinctrl: samsung: fix missing GPIOLIB on ARM64 Exynos config - f2fs: should not truncate blocks during roll-forward recovery - hex2bin: make the function hex_to_bin constant-time - hex2bin: fix access beyond string end - bus: fsl-mc-msi: Fix MSI descriptor mutex lock for msi_first_desc() - riscv: patch_text: Fixup last cpu should be master - x86/cpu: Load microcode during restore_processor_state() - x86/pci/xen: Disable PCI/MSI[-X] masking for XEN_HVM guests - iocost: don't reset the inuse weight of under-weighted debtors - virtio_net: fix wrong buf address calculation when using xdp - cpufreq: qcom-hw: drop affinity hint before freeing the IRQ - cpufreq: qcom-hw: fix the race between LMH worker and cpuhp - cpufreq: qcom-hw: fix the opp entries refcounting - cpufreq: qcom-cpufreq-hw: Fix throttle frequency value on EPSS platforms - video: fbdev: udlfb: properly check endpoint type - arm64: dts: meson: remove CPU opps below 1GHz for G12B boards - arm64: dts: meson: remove CPU opps below 1GHz for SM1 boards - iio: dac: ad3552r: fix signedness bug in ad3552r_reset() - iio:imu:bmi160: disable regulator in error path - iio:filter:admv8818: select REGMAP_SPI for ADMV8818 - mtd: rawnand: fix ecc parameters for mt7622 - tee: optee: add missing mutext_destroy in optee_ffa_probe - xsk: Fix l2fwd for copy mode + busy poll combo - arm64: dts: imx8qm: Correct SCU clock controller's compatible property - USB: Fix xhci event ring dequeue pointer ERDP update issue - soc: imx: imx8m-blk-ctrl: Fix IMX8MN_DISPBLK_PD_ISI hang - ARM: dts: imx6qdl-apalis: Fix sgtl5000 detection issue - iio:dac:ad3552r: Fix an IS_ERR() vs NULL check - arm64: dts: imx8mq-tqma8mq: change the spi-nor tx - arm64: dts: imx8mn: Fix SAI nodes - arm64: dts: meson-sm1-bananapi-m5: fix wrong GPIO pin labeling for CON1 - phy: samsung: Fix missing of_node_put() in exynos_sata_phy_probe - phy: samsung: exynos5250-sata: fix missing device put in probe error paths - ARM: OMAP2+: Fix refcount leak in omap_gic_of_init - bus: ti-sysc: Make omap3 gpt12 quirk handling SoC specific - ARM: dts: dra7: Fix suspend warning for vpe powerdomain - phy: ti: omap-usb2: Fix error handling in omap_usb2_enable_clocks - ARM: dts: at91: Map MCLK for wm8731 on at91sam9g20ek - ARM: dts: at91: sama5d4_xplained: fix pinctrl phandle name - ARM: dts: at91: fix pinctrl phandles - phy: mapphone-mdm6600: Fix PM error handling in phy_mdm6600_probe - phy: ti: Add missing pm_runtime_disable() in serdes_am654_probe - interconnect: qcom: sc7180: Drop IP0 interconnects - interconnect: qcom: sdx55: Drop IP0 interconnects - ARM: dts: Fix mmc order for omap3-gta04 - ARM: dts: am33xx-l4: Add missing touchscreen clock properties - ARM: dts: am3517-evm: Fix misc pinmuxing - ARM: dts: logicpd-som-lv: Fix wrong pinmuxing on OMAP35 - pinctrl: qcom: sm6350: fix order of UFS & SDC pins - ipvs: correctly print the memory size of ip_vs_conn_tab - phy: amlogic: fix error path in phy_g12a_usb3_pcie_probe() - pinctrl: mediatek: moore: Fix build error - mtd: rawnand: Fix return value check of wait_for_completion_timeout - mtd: fix 'part' field data corruption in mtd_info - pinctrl: stm32: Do not call stm32_gpio_get() for edge triggered IRQs in EOI - memory: renesas-rpc-if: Fix HF/OSPI data transfer in Manual Mode - net: dsa: Add missing of_node_put() in dsa_port_link_register_of - netfilter: nft_set_rbtree: overlap detection with element re-addition after deletion - bpf, lwt: Fix crash when using bpf_skb_set_tunnel_key() from bpf_xmit lwt hook - pinctrl: rockchip: fix RK3308 pinmux bits - tcp: md5: incorrect tcp_header_len for incoming connections - pinctrl: stm32: Keep pinctrl block clock enabled when LEVEL IRQ requested - tcp: ensure to use the most recently sent skb when filling the rate sample - wireguard: device: check for metadata_dst with skb_valid_dst() - sctp: check asoc strreset_chunk in sctp_generate_reconf_event - ARM: dts: imx6ull-colibri: fix vqmmc regulator - arm64: dts: imx8mn-ddr4-evk: Describe the 32.768 kHz PMIC clock - pinctrl: pistachio: fix use of irq_of_parse_and_map() - cpufreq: fix memory leak in sun50i_cpufreq_nvmem_probe - net: hns3: clear inited state and stop client after failed to register netdev - net: hns3: fix error log of tx/rx tqps stats - net: hns3: modify the return code of hclge_get_ring_chain_from_mbx - net: hns3: add validity check for message data length - net: hns3: add return value for mailbox handling in PF - net/smc: sync err code when tcp connection was refused - net: lan966x: fix a couple off by one bugs - ip_gre: Make o_seqno start from 0 in native mode - ip6_gre: Make o_seqno start from 0 in native mode - ip_gre, ip6_gre: Fix race condition on o_seqno in collect_md mode - tcp: fix potential xmit stalls caused by TCP_NOTSENT_LOWAT - tcp: make sure treq->af_specific is initialized - bus: sunxi-rsb: Fix the return value of sunxi_rsb_device_create() - clk: sunxi: sun9i-mmc: check return value after calling platform_get_resource() - cpufreq: qcom-cpufreq-hw: Clear dcvs interrupts - mctp: defer the kfree of object mdev->addrs - net: bcmgenet: hide status block before TX timestamping - net: phy: marvell10g: fix return value on error - net: dsa: mv88e6xxx: Fix port_hidden_wait to account for port_base_addr - drm/sun4i: Remove obsolete references to PHYS_OFFSET - ice: wait 5 s for EMP reset after firmware flash - Bluetooth: hci_event: Fix checking for invalid handle on error status - net: dsa: lantiq_gswip: Don't set GSWIP_MII_CFG_RMII_CLK - io_uring: check reserved fields for send/sendmsg - io_uring: check reserved fields for recv/recvmsg - netfilter: nf_conntrack_tcp: re-init for syn packets only - netfilter: conntrack: fix udp offload timeout sysctl - platform/x86: asus-wmi: Potential buffer overflow in asus_wmi_evaluate_method_buf() - platform/x86: asus-wmi: Fix driver not binding when fan curve control probe fails - drm/amdkfd: Fix GWS queue count - drm/amd/display: Fix memory leak in dcn21_clock_source_create - tls: Skip tls_append_frag on zero copy size - bnx2x: fix napi API usage sequence - net: fec: add missing of_node_put() in fec_enet_init_stop_mode() - gfs2: Minor retry logic cleanup - gfs2: Make sure not to return short direct writes - gfs2: No short reads or writes upon glock contention - perf arm-spe: Fix addresses of synthesized SPE events - ixgbe: ensure IPsec VF<->PF compatibility - net: enetc: allow tc-etf offload even with NETIF_F_CSUM_MASK - Revert "ibmvnic: Add ethtool private flag for driver-defined queue limits" - tcp: fix F-RTO may not work correctly when receiving DSACK - io_uring: fix uninitialized field in rw io_kiocb - ASoC: soc-pcm: use GFP_KERNEL when the code is sleepable - ASoC: cs35l41: Fix a shift-out-of-bounds warning found by UBSAN - ASoC: rt711/5682: check if bus is active before deferred jack detection - ASoC: Intel: soc-acpi: correct device endpoints for max98373 - ASoC: wm8731: Disable the regulator when probing fails - Input: cypress-sf - register a callback to disable the regulators - ext4: fix bug_on in start_this_handle during umount filesystem - arch: xtensa: platforms: Fix deadlock in rs_close() - ksmbd: increment reference count of parent fp - ksmbd: set fixed sector size to FS_SECTOR_SIZE_INFORMATION - erofs: fix use-after-free of on-stack io[] - bonding: do not discard lowest hash bit for non layer3+4 hashing - x86: __memcpy_flushcache: fix wrong alignment if size > 2^32 - cifs: destage any unwritten data to the server before calling copychunk_write - drivers: net: hippi: Fix deadlock in rr_close() - powerpc/perf: Fix 32bit compile - ALSA: hda: intel-dsp-config: Add RaptorLake PCI IDs - selftest/vm: verify mmap addr in mremap_test - selftest/vm: verify remap destination address in mremap_test - bfq: Fix warning in bfqq_request_over_limit() - Revert "ACPI: processor: idle: fix lockup regression on 32-bit ThinkPad T40" - Revert "block: inherit request start time from bio for BLK_CGROUP" - zonefs: Fix management of open zones - zonefs: Clear inode information flags on inode creation - kasan: prevent cpu_quarantine corruption when CPU offline and cache shrink occur at same time - mtd: rawnand: qcom: fix memory corruption that causes panic - netfilter: Update ip6_route_me_harder to consider L3 domain - drm/amdgpu: don't runtime suspend if there are displays attached (v3) - drm/i915: Check EDID for HDR static metadata when choosing blc - drm/i915: Fix SEL_FETCH_PLANE_*(PIPE_B+) register addresses - net: ethernet: stmmac: fix write to sgmii_adapter_base - ACPI: processor: idle: Avoid falling back to C3 type C-states - thermal: int340x: Fix attr.show callback prototype - btrfs: fix direct I/O read repair for split bios - btrfs: fix direct I/O writes for split bios on zoned devices - btrfs: fix leaked plug after failure syncing log on zoned filesystems - btrfs: zoned: use dedicated lock for data relocation - btrfs: fix assertion failure during scrub due to block group reallocation - ARM: dts: at91: sama7g5ek: enable pull-up on flexcom3 console lines - ARM: dts: imx8mm-venice-gw{71xx,72xx,73xx}: fix OTG controller OC mode - perf symbol: Pass is_kallsyms to symbols__fixup_end() - perf symbol: Update symbols__fixup_end() - perf symbol: Remove arch__symbols__fixup_end() - tty: n_gsm: fix missing mux reset on config change at responder - tty: n_gsm: fix restart handling via CLD command - tty: n_gsm: fix decoupled mux resource - tty: n_gsm: fix mux cleanup after unregister tty device - tty: n_gsm: fix wrong signal octet encoding in convergence layer type 2 - tty: n_gsm: fix frame reception handling - tty: n_gsm: fix malformed counter for out of frame data - netfilter: nft_socket: only do sk lookups when indev is available - tty: n_gsm: fix insufficient txframe size - tty: n_gsm: fix wrong DLCI release order - tty: n_gsm: fix missing explicit ldisc flush - tty: n_gsm: fix wrong command retry handling - tty: n_gsm: fix wrong command frame length field encoding - tty: n_gsm: fix wrong signal octets encoding in MSC - tty: n_gsm: fix missing tty wakeup in convergence layer type 2 - tty: n_gsm: fix reset fifo race condition - tty: n_gsm: fix incorrect UA handling - tty: n_gsm: fix missing update of modem controls after DLCI open - tty: n_gsm: fix broken virtual tty handling - tty: n_gsm: fix invalid use of MSC in advanced option - tty: n_gsm: fix software flow control handling - tty: n_gsm: fix sometimes uninitialized warning in gsm_dlci_modem_output() - objtool: Fix code relocs vs weak symbols - objtool: Fix type of reloc::addend - powerpc/64: Add UADDR64 relocation support . [ Diederik de Haas ] * [armhf] drivers/net/ethernet/freescale: Enable FEC as module (Closes: #991461) * [x86] drivers/extcon: Enable EXTCON_AXP288 as module * [x86] drivers/power/supply: Enable AXP288_CHARGER as module (Closes: #940672) . [ Vagrant Cascadian ] * [arm64] Enable modules for MNT Reform: DRM_LVDS_CODEC, DRM_SIMPLE_BRIDGE, DRM_TI_SN65DSI86, DRM_CDNS_MHDP8546, DRM_IMX_DCSS, DRM_PANEL_LVDS, I2C_IMX_LPI2C, I2C_MUX_REG, INTERCONNECT_IMX, INTERCONNECT_IMX8MQ, MFD_WM8994, MUX_GPIO, MUX_MMIO, RTC_DRV_PCF8523, USB_EHCI_FSL, BACKLIGHT_GPIO, BACKLIGHT_LED, SND_SOC_WM8960, SND_SOC_FSL_MICFIL, SND_IMX_SOC, SND_SOC_FSL_ASOC_CARD, SND_SOC_IMX_AUDMIX and SND_SOC_IMX_HDMI. Thanks to Johannes Schauer Marin Rodrigues. (Closes: #1009858) . [ Salvatore Bonaccorso ] * Bump ABI to 2 . linux (5.17.3-1) unstable; urgency=medium . * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.17.2 https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.17.3 . [ Salvatore Bonaccorso ] * linux-kbuild: Include scripts/pahole-flags.sh (Closes: #1008501) * [x86] drivers/cpufreq: Enable X86_AMD_PSTATE as module (Closes: #1009302) * [rt] Update to 5.17.1-rt17 * Set ABI to 1 . [ Adriaan Schmidt ] * tools: install perf python bindings (Closes: #860957) . [ Ben Hutchings ] * d/bin/gencontrol_signed.py: Add support for pkg.linux.quick profile * lintian: Add lintian-overrides to linux-signed-* for non-issues * d/salsa-ci.yml: Don't disable signed code * d/certs: Add certificate and key to enable test signing in CI * d/salsa-ci.yml: Add jobs to build and test the signed packages . [ Vagrant Cascadian ] * [arm64] Add nvmem-rockchip-efuse and phy-rockchip-inno-hdmi to fb-modules udeb. . linux (5.17.1-1~exp1) experimental; urgency=medium . * New upstream release: https://kernelnewbies.org/Linux_5.17 * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.17.1 . [ Bastian Blank ] * [arm64] Enable HyperV support. (closes: #1007023) * Replace FB_HYPERV with DRM_HYPERV. * Allow disabling debug info by build profile. * [arm64] Make sure hyperv-daemons are actually build. . [ Salvatore Bonaccorso ] * [rt] Update to 5.17-rt15 . [ Diederik de Haas ] * [armhf] Enable SUN8I_THERMAL as module (Closes: #1007799) . linux (5.17~rc8-1~exp1) experimental; urgency=medium . * New upstream release candidate . [ Salvatore Bonaccorso ] * [rt] Update to 5.17-rc7-rt13 . linux (5.17~rc7-1~exp1) experimental; urgency=medium . * New upstream release candidate . [ Salvatore Bonaccorso ] * [rt] Update to 5.17-rc7-rt12 . linux (5.17~rc6-1~exp1) experimental; urgency=medium . * New upstream release candidate . [ Salvatore Bonaccorso ] * [rt] Update to 5.17-rc6-rt10 . linux (5.17~rc5-1~exp1) experimental; urgency=medium . * New upstream release candidate . [ Salvatore Bonaccorso ] * [rt] Update to 5.17-rc5-rt8 . linux (5.17~rc4-1~exp1) experimental; urgency=medium . * New upstream release candidate . [ Bastian Blank ] * Add pkg.linux.nokerneldbg build profile that excludes kernel debug packages. . [ Salvatore Bonaccorso ] * [rt] Update to 5.17-rc4-rt7 . linux (5.17~rc3-1~exp1) experimental; urgency=medium . * New upstream release candidate . [ Ben Hutchings ] * Rebase patches: - Drop "x86-32: Disable 3D-Now in generic config" - Drop "RISC-V: Use SBI SRST extension when available" - Drop "objtool: check: give big enough buffer for pv_ops" - Drop part of "sh: Do not use hyphen in exported variable names" - Update "add sysctl to disallow unprivileged CLONE_NEWUSER by default" - Update "Disable uImage generation for mips generic" - Update "MODSIGN: do not load mok when secure boot disabled" * [rt] Update to 5.17-rc2-rt4 * linux-kbuild: Build extract-cert in certs/ instead of scripts/ * d/rules.real: Pass C compiler options to user-space build in HOSTCFLAGS too . [ Aurelien Jarno ] * [riscv64] Add basic support for StarFive JH7100 RISC-V SoC: enable I2C_DESIGNWARE_PLATFORM, MFD_TPS65086, REGULATOR_TPS65086, SERIAL_8250_DW, SOC_STARFIVE . linux (5.16.18-1) unstable; urgency=medium . * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.15 - HID: elo: Revert USB reference counting - HID: hid-thrustmaster: fix OOB read in thrustmaster_interrupts - [arm64] clk: qcom: gdsc: Add support to update GDSC transition delay - HID: vivaldi: fix sysfs attributes leak - HID: nintendo: check the return value of alloc_workqueue() - [arm64] dts: armada-3720-turris-mox: Add missing ethernet0 alias - tipc: fix kernel panic when enabling bearer - [arm64] net: phy: meson-gxl: fix interrupt handling in forced mode - mISDN: Fix memory leak in dsp_pipeline_build() - vhost: fix hung thread due to erroneous iotlb entries - virtio-blk: Don't use MAX_DISCARD_SEGMENTS if max_discard_seg is zero - virtio-blk: Remove BUG_ON() in virtio_queue_rq() - isdn: hfcpci: check the return value of dma_set_mask() in setup_hw() - net: qlogic: check the return value of dma_alloc_coherent() in qed_vf_hw_prepare() - esp: Fix possible buffer overflow in ESP transformation (CVE-2022-27666) - esp: Fix BEET mode inter address family tunneling on GSO - net: gro: move skb_gro_receive_list to udp_offload.c - qed: return status of qed_iov_get_link - smsc95xx: Ignore -ENODEV errors when device is unplugged - gpiolib: acpi: Convert ACPI value of debounce to microseconds - [x86] drm/i915/psr: Set "SF Partial Frame Enable" also on full update - drm/sun4i: mixer: Fix P010 and P210 format numbers - iavf: Fix handling of vlan strip virtual channel messages - i40e: stop disabling VFs due to PF error responses - ice: stop disabling VFs due to PF error responses - ice: Fix error with handling of bonding MTU - ice: Don't use GFP_KERNEL in atomic context - ice: Fix curr_link_speed advertised speed - ethernet: Fix error handling in xemaclite_of_probe - tipc: fix incorrect order of state message data sanity check - [armhf] net: ethernet: ti: cpts: Handle error for clk_enable - ax25: Fix NULL pointer dereference in ax25_kill_by_device - net/mlx5: Fix size field in bufferx_reg struct - net/mlx5: Fix a race on command flush flow - net/mlx5e: Lag, Only handle events from highest priority multipath entry - net/mlx5e: SHAMPO, reduce TIR indication - NFC: port100: fix use-after-free in port100_send_complete - mm: gup: make fault_in_safe_writeable() use fixup_user_fault() - net: phy: DP83822: clear MISR2 register to disable interrupts - sctp: fix kernel-infoleak for SCTP sockets - [arm64] net: bcmgenet: Don't claim WOL when its not available - [arm64] net: phy: meson-gxl: improve link-up behavior - swiotlb: fix info leak with DMA_FROM_DEVICE (CVE-2022-0854) - [arm64] usb: dwc3: pci: add support for the Intel Raptor Lake-S - [x86] pinctrl: tigerlake: Revert "Add Alder Lake-M ACPI ID" - KVM: Fix lockdep false negative during host resume - [x86] kvm: x86: Disable KVM_HC_CLOCK_PAIRING if tsc is in always catchup mode - [arm64,armhf] spi: rockchip: Fix error in getting num-cs property - [arm64,armhf] spi: rockchip: terminate dma transmission when slave abort - [arm*] drm/vc4: hdmi: Unregister codec device on unbind - of/fdt: move elfcorehdr reservation early for crash dump kernel - [x86] kvm: Don't use pv tlb/ipi/sched_yield if on 1 vCPU - drivers: hamradio: 6pack: fix UAF bug caused by mod_timer() - net-sysfs: add check for netdevice being present to speed_show - [armhf] hwmon: (pmbus) Clear pmbus fault/warning bits after read - nvme-tcp: send H2CData PDUs based on MAXH2CDATA - PCI: Mark all AMD Navi10 and Navi14 GPU ATS as broken - gpio: Return EPROBE_DEFER if gc->to_irq is NULL - drm/amdgpu: bypass tiling flag check in virtual display case (v2) - Revert "xen-netback: remove 'hotplug-status' once it has served its purpose" - Revert "xen-netback: Check for hotplug-status existence before watching" - ipv6: prevent a possible race condition with lifetimes - tracing: Ensure trace buffer is at least 4096 bytes large - tracing/osnoise: Make osnoise_main to sleep for microseconds - [armel,armhf] Spectre-BHB: provide empty stub for non-config - fuse: fix fileattr op failure - fuse: fix pipe buffer lifetime for direct_io (CVE-2022-1011) - [arm64,x86] staging: rtl8723bs: Fix access-point mode deadlock - [arm64] net: macb: Fix lost RX packet wakeup race in NAPI receive - [arm64] mmc: meson: Fix usage of meson_mmc_post_req() - tracing/osnoise: Force quiescent states while tracing - tracing/osnoise: Do not unregister events twice - [arm64] dts: marvell: armada-37xx: Remap IO space to bus address 0x0 - [arm64] Ensure execute-only permissions are not allowed without EPAN - swiotlb: rework "fix info leak with DMA_FROM_DEVICE" (CVE-2022-0854) - virtio: unexport virtio_finalize_features - virtio: acknowledge all features before access - net/mlx5: Fix offloading with ESWITCH_IPV4_TTL_MODIFY_ENABLE - [armel,armhf] fix Thumb2 regression with Spectre BHB - watch_queue: Fix filter limit check (CVE-2022-0995) - watch_queue, pipe: Free watchqueue state after clearing pipe ring (CVE-2022-0995) - watch_queue: Fix to release page in ->release() (CVE-2022-0995) - watch_queue: Fix to always request a pow-of-2 pipe ring size (CVE-2022-0995) - watch_queue: Fix the alloc bitmap size to reflect notes allocated (CVE-2022-0995) - watch_queue: Free the alloc bitmap when the watch_queue is torn down (CVE-2022-0995) - watch_queue: Fix lack of barrier/sync/lock between post and read (CVE-2022-0995) - watch_queue: Make comment about setting ->defunct more accurate (CVE-2022-0995) - [x86] boot: Fix memremap of setup_indirect structures - [x86] boot: Add setup_indirect support in early_memremap_is_setup_data() - [x86] module: Fix the paravirt vs alternative order - [x86] traps: Mark do_int3() NOKPROBE_SYMBOL - perf parse: Fix event parser error for hybrid systems - btrfs: make send work with concurrent block group relocation - vhost: allow batching hint without size https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.16 - Revert "xfrm: state and policy should fail if XFRMA_IF_ID 0" - [arm64] dts: rockchip: fix rk3399-puma-haikou USB OTG mode - xfrm: Check if_id in xfrm_migrate - xfrm: Fix xfrm migrate issues when address family changes - mac80211: refuse aggregations sessions before authorized - [mips64el,mipsel] smp: fill in sibling and core maps earlier - Bluetooth: hci_core: Fix leaking sent_cmd skb - [x86] atm: firestream: check the return value of ioremap() in fs_init() - netfilter: egress: silence egress hook lockdep splats - Input: goodix - use the new soc_intel_is_byt() helper - Input: goodix - workaround Cherry Trail devices with a bogus ACPI Interrupt() resource - iwlwifi: don't advertise TWT support - drm/vrr: Set VRR capable prop only if it is attached to connector - nl80211: Update bss channel on channel switch for P2P_CLIENT - tcp: make tcp_read_sock() more robust - sfc: extend the locking on mcdi->seqno - bnx2: Fix an error message - ice: Fix race condition during interface enslave https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.17 - crypto: qcom-rng - ensure buffer for generate is completely filled - ocfs2: fix crash when initialize filecheck kobj fails - mm: swap: get rid of livelock in swapin readahead - block: release rq qos structures for queue without disk - [x86] drm/mgag200: Fix PLL setup for g200wb and g200ew - efi: fix return value of __setup handlers - alx: acquire mutex for alx_reinit in alx_change_mtu - vsock: each transport cycles only on its own sockets - esp6: fix check on ipv6_skip_exthdr's return value - net: phy: marvell: Fix invalid comparison in the resume and suspend functions - net/packet: fix slab-out-of-bounds access in packet_recvmsg() - nvmet: revert "nvmet: make discovery NQN configurable" - atm: eni: Add check for dma_map_single - ice: fix NULL pointer dereference in ice_update_vsi_tx_ring_stats() - iavf: Fix double free in iavf_reset_task - hv_netvsc: Add check for kvmalloc_array - [armhf] drm/imx: parallel-display: Remove bus flags check in imx_pd_bridge_atomic_check() - [arm64,armhf] drm/panel: simple: Fix Innolux G070Y2-L01 BPP settings - net: handle ARPHRD_PIMREG in dev_is_mac_header_xmit() - [arm64,armhf] net: dsa: Add missing of_node_put() in dsa_port_parse_of - net: phy: mscc: Add MODULE_FIRMWARE macros - bnx2x: fix built-in kernel driver load failure - [arm64] net: bcmgenet: skip invalid partial checksums - [arm64] net: mscc: ocelot: fix backwards compatibility with single-chain tc-flower offload - iavf: Fix hang during reboot/shutdown - usb: gadget: rndis: prevent integer overflow in rndis_set_response() - usb: gadget: Fix use-after-free bug by not setting udc->dev.driver - usb: usbtmc: Fix bug in pipe direction for control transfers - scsi: mpt3sas: Page fault in reply q processing - Input: aiptek - properly check endpoint type - [arm64] errata: avoid duplicate field initializer - perf symbols: Fix symbol size calculation condition - Revert "ath10k: drop beacon and probe response which leak from other channel" - btrfs: skip reserved bytes warning on unmount after log cleanup failure https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.18 - Bluetooth: btusb: Add another Realtek 8761BU - llc: fix netdevice reference leaks in llc_ui_bind() - ALSA: oss: Fix PCM OSS buffer allocation overflow - ALSA: hda/realtek: Add quirk for Clevo NP70PNJ - ALSA: hda/realtek: Add quirk for Clevo NP50PNJ - ALSA: hda/realtek - Fix headset mic problem for a HP machine with alc671 - ALSA: hda/realtek: Add quirk for ASUS GA402 - ALSA: pcm: Fix races among concurrent hw_params and hw_free calls (CVE-2022-1048) - ALSA: pcm: Fix races among concurrent read/write and buffer changes (CVE-2022-1048) - nfc: st21nfca: Fix potential buffer overflows in EVT_TRANSACTION (CVE-2022-26490) - net: ipv6: fix skb_over_panic in __ip6_append_data - tpm: Fix error handling in async work - ALSA: pcm: Fix races among concurrent prepare and hw_params/hw_free calls (CVE-2022-1048) - ALSA: pcm: Fix races among concurrent prealloc proc writes (CVE-2022-1048) - ALSA: pcm: Add stream lock during PCM reset ioctl operations - ALSA: usb-audio: Add mute TLV for playback volumes on RODE NT-USB - ALSA: cmipci: Restore aux vol on suspend/resume - ALSA: pci: fix reading of swapped values from pcmreg in AC97 codec - [arm64] drivers: net: xgene: Fix regression in CRC stripping - netfilter: nf_tables: initialize registers in nft_do_chain() (CVE-2022-1016) - netfilter: nf_tables: validate registers coming from userspace. (CVE-2022-1015) - [x86] ACPI / x86: Work around broken XSDT on Advantech DAC-BJ01 board - ACPI: battery: Add device HID and quirk for Microsoft Surface Go 3 - [x86] ACPI: video: Force backlight native for Clevo NL5xRU and NL5xNU - [x86] crypto: qat - disable registration of algorithms - Bluetooth: btusb: Add one more Bluetooth part for the Realtek RTL8852AE - Revert "ath: add support for special 0x0 regulatory domain" - drm/virtio: Ensure that objs is not NULL in virtio_gpu_array_put_free() - rcu: Don't deboost before reporting expedited quiescent state - uaccess: fix integer overflow on access_ok() - mac80211: fix potential double free on mesh join - tpm: use try_get_ops() in tpm-space.c - [arm64] wcn36xx: Differentiate wcn3660 from wcn3620 - llc: only change llc->dev when bind() succeeds . [ Salvatore Bonaccorso ] * Bump ABI to 6 . [ Vincent Blut ] * sound/pci/hda: Enable SND_HDA_CODEC_CS8409 as module (Closes: #1008122) . linux (5.16.14-1) unstable; urgency=medium . * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.13 - mac80211_hwsim: report NOACK frames in tx_status - mac80211_hwsim: initialize ieee80211_tx_info at hw_scan_work - [arm*] i2c: bcm2835: Avoid clock stretching timeouts - [x86] ASoC: rt5682s: do not block workqueue if card is unbound - ASoC: rt5682: do not block workqueue if card is unbound - regulator: core: fix false positive in regulator_late_cleanup() - Input: clear BTN_RIGHT/MIDDLE on buttonpads - btrfs: get rid of warning on transaction commit when using flushoncommit - [arm64] KVM: arm64: vgic: Read HW interrupt pending state from the HW - block: loop:use kstatfs.f_bsize of backing file to set discard granularity - tipc: fix a bit overflow in tipc_crypto_key_rcv() - cifs: do not use uninitialized data in the owner/group sid - cifs: fix double free race when mount fails in cifs_get_root() - [amd64] HID: amd_sfh: Handle amd_sfh work buffer in PM ops - [amd64] HID: amd_sfh: Add functionality to clear interrupts - [amd64] HID: amd_sfh: Add interrupt handler to process interrupts - cifs: modefromsids must add an ACE for authenticated users - drm/amd/pm: correct UMD pstate clocks for Dimgrey Cavefish and Beige Goby - net: usb: cdc_mbim: avoid altsetting toggling for Telit FN990 - block-map: add __GFP_ZERO flag for alloc_page in function bio_copy_kern - usb: gadget: don't release an existing dev->buf (CVE-2022-24958) - usb: gadget: clear related members when goto fail (CVE-2022-24958) - exfat: reuse exfat_inode_info variable instead of calling EXFAT_I() - exfat: fix i_blocks for files truncated over 4 GiB - tracing: Add test for user space strings when filtering on string pointers - [arm64] Mark start_backtrace() notrace and NOKPROBE_SYMBOL - [armhf] serial: stm32: prevent TDR register overwrite when sending x_char - [arm64] KVM: arm64: Workaround Cortex-A510's single-step and PAC trap errata - ext4: drop ineligible txn start stop APIs - ext4: simplify updating of fast commit stats - ext4: fast commit may not fallback for ineligible commit - ext4: fast commit may miss file actions - sched/fair: Fix fault in reweight_entity - [x86] KVM: x86: Add KVM_CAP_ENABLE_CAP to x86 - ata: pata_hpt37x: fix PCI clock detection - drm/amdgpu: check vm ready by amdgpu_vm->evicting flag - tracing: Add ustring operation to filtering string pointers - ipv6: fix skb drops in igmp6_event_query() and igmp6_event_report() (CVE-2022-0742) - btrfs: defrag: bring back the old file extent search behavior - btrfs: defrag: don't use merged extent map for their generation check - [x86] ALSA: intel_hdmi: Fix reference to PCM buffer address - ucounts: Fix systemd LimitNPROC with private users regression - binfmt_elf: Avoid total_mapping_size for ET_EXEC - ASoC: ops: Shift tested values in snd_soc_put_volsw() by +min - [amd64] iommu/vt-d: Fix double list_add when enabling VMD in scalable mode - [amd64] iommu/amd: Recover from event log overflow - [x86] drm/i915: s/JSP2/ICP2/ PCH - drm/amd/display: Reduce dmesg error to a debug print - xen/netfront: destroy queues before real_num_tx_queues is zeroed - mac80211: fix EAPoL rekey fail in 802.3 rx path - blktrace: fix use after free for struct blk_trace - mm: Consider __GFP_NOWARN flag for oversized kvmalloc() calls - xfrm: fix MTU regression - netfilter: fix use-after-free in __nf_register_net_hook() - bpf, sockmap: Do not ignore orig_len parameter - xfrm: fix the if_id check in changelink - xfrm: enforce validity of offload input flags - e1000e: Correct NVM checksum verification flow - net: fix up skbs delta_truesize in UDP GRO frag_list - netfilter: nf_queue: don't assume sk is full socket - netfilter: nf_queue: fix possible use-after-free - netfilter: nf_queue: handle socket prefetch - batman-adv: Request iflink once in batadv-on-batadv check - batman-adv: Request iflink once in batadv_get_real_netdevice - batman-adv: Don't expect inter-netns unique iflink indices - net: ipv6: ensure we call ipv6_mc_down() at most once - net: dcb: flush lingering app table entries for unregistered devices - net/smc: fix connection leak - net/smc: fix unexpected SMC_CLC_DECL_ERR_REGRMB error generated by client - net/smc: fix unexpected SMC_CLC_DECL_ERR_REGRMB error cause by server - btrfs: fix ENOSPC failure when attempting direct IO write into NOCOW range - [amd64] platform/x86: amd-pmc: Set QOS during suspend on CZN w/ timer wakeup - mac80211: fix forwarded mesh frames AC & queue selection - net: stmmac: fix return value of __setup handler - mac80211: treat some SAE auth steps as final - iavf: Fix missing check for running netdev - net: arcnet: com20020: Fix null-ptr-deref in com20020pci_probe() - ixgbe: xsk: change !netif_carrier_ok() handling in ixgbe_xmit_zc() - iavf: Fix deadlock in iavf_reset_task - efivars: Respect "block" flag in efivar_entry_set_safe() - [armhf] firmware: arm_scmi: Remove space in MODULE_ALIAS name - can: gs_usb: change active_channels's type from atomic_t to u8 - [arm64,armhf] iommu/tegra-smmu: Fix missing put_device() call in tegra_smmu_find - igc: igc_read_phy_reg_gpy: drop premature return - [mips*] setup: fix setnocoherentio() boolean setting - [armel,armhf] 9182/1: mmu: fix returns from early_param() and __setup() functions - mptcp: Correctly set DATA_FIN timeout when number of retransmits is large - [arm64,armhf] pinctrl: sunxi: Use unique lockdep classes for IRQs - igc: igc_write_phy_reg_gpy: drop premature return - memfd: fix F_SEAL_WRITE after shmem huge page allocated - [s390x] setup: preserve memory at OLDMEM_BASE and OLDMEM_SIZE - [s390x] extable: fix exception table sorting - sched: Fix yet more sched_fork() races - [arm64] dts: rockchip: fix Quartz64-A ddr regulator voltage - [amd64] iommu/amd: Fix I/O page table memory leak - [armhf] dts: switch timer config to common devkit8000 devicetree - [armhf] dts: Use 32KiHz oscillator on devkit8000 - [arm64] soc: fsl: guts: Revert commit 3c0d64e867ed - [arm64] soc: fsl: guts: Add a missing memory allocation failure check - [arm64] soc: imx: gpcv2: Fix clock disabling imbalance in error path - netfilter: nf_tables: prefer kfree_rcu(ptr, rcu) variant - [armhf] tegra: Move panels to AUX bus - Bluetooth: Fix bt_skb_sendmmsg not allocating partial chunks - net: stmmac: enhance XDP ZC driver level switching performance - net: stmmac: only enable DMA interrupts when ready - net: chelsio: cxgb3: check the return value of pci_find_capability() - iavf: Add trace while removing device - iavf: Rework mutexes for better synchronisation - iavf: Add waiting so the port is initialized in remove - iavf: Fix init state closure on remove - iavf: Fix locking for VIRTCHNL_OP_GET_OFFLOAD_VLAN_V2_CAPS - iavf: Fix race in init state - iavf: Fix __IAVF_RESETTING state usage - [x86] drm/i915/guc/slpc: Correct the param count for unset param - e1000e: Fix possible HW unit hang after an s0ix exit - nl80211: Handle nla_memdup failures in handle_nan_filter - ptp: ocp: Add ptp_ocp_adjtime_coarse for large adjustments - drm/amdgpu: fix suspend/resume hang regression - net: dcb: disable softirqs in dcbnl_flush_dev() - net: stmmac: perserve TX and RX coalesce value during XDP setup - Input: elan_i2c - move regulator_[en|dis]able() out of elan_[en|dis]able_power() - Input: elan_i2c - fix regulator enable count imbalance after suspend/resume - HID: add mapping for KEY_DICTATE - HID: add mapping for KEY_ALL_APPLICATIONS - tracing/histogram: Fix sorting on old "cpu" value - tracing: Fix return value of __setup handlers - btrfs: fix lost prealloc extents beyond eof after full fsync - btrfs: fix relocation crash due to premature return from btrfs_commit_transaction() - btrfs: subpage: fix a wrong check on subpage->writers - btrfs: do not WARN_ON() if we have PageError set - btrfs: qgroup: fix deadlock between rescan worker and remove qgroup - btrfs: add missing run of delayed items after unlink during log replay - btrfs: fallback to blocking mode when doing async dio over multiple extents - btrfs: do not start relocation until in progress drops are done - Revert "xfrm: xfrm_state_mtu should return at least 1280 for ipv6" - proc: fix documentation and description of pagemap - [x86] kvmclock: Fix Hyper-V Isolated VM's boot issue when vCPUs > 64 - [s390x] ftrace: fix arch_ftrace_get_regs implementation - [s390x] ftrace: fix ftrace_caller/ftrace_regs_caller generation - [x86] KVM: x86/mmu: Passing up the error state of mmu_alloc_shadow_roots() https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.14 - [armhf] report Spectre v2 status through sysfs - [armel,armhf] early traps initialisation - [armel,armhf] use LOADADDR() to get load address of sections - [armel,armhf] Spectre-BHB workaround - [armhf] include unprivileged BPF status in Spectre V2 reporting - [arm64] add ID_AA64ISAR2_EL1 sys register - [arm64] cpufeature: add HWCAP for FEAT_AFP - [arm64] cpufeature: add HWCAP for FEAT_RPRES - [arm64] entry.S: Add ventry overflow sanity checks - [arm64] spectre: Rename spectre_v4_patch_fw_mitigation_conduit - [arm64] KVM: arm64: Allow indirect vectors to be used without SPECTRE_V3A - [arm64] entry: Make the trampoline cleanup optional - [arm64] entry: Free up another register on kpti's tramp_exit path - [arm64] entry: Move the trampoline data page before the text page - [arm64] entry: Allow tramp_alias to access symbols after the 4K boundary - [arm64] entry: Don't assume tramp_vectors is the start of the vectors - [arm64] entry: Move trampoline macros out of ifdef'd section - [arm64] entry: Make the kpti trampoline's kpti sequence optional - [arm64] entry: Allow the trampoline text to occupy multiple pages - [arm64] entry: Add non-kpti __bp_harden_el1_vectors for mitigations - [arm64] entry: Add vectors that have the bhb mitigation sequences - [arm64] entry: Add macro for reading symbol addresses from the trampoline - [arm64] Add percpu vectors for EL1 - [arm64] proton-pack: Report Spectre-BHB vulnerabilities as part of Spectre-v2 - [arm64] Mitigate spectre style branch history side channels - [arm64] KVM: arm64: Allow SMCCC_ARCH_WORKAROUND_3 to be discovered and migrated - [arm64] Use the clearbhb instruction in mitigations - [arm64] proton-pack: Include unprivileged eBPF status in Spectre v2 mitigation reporting - [armel,armhf] fix co-processor register typo - [armel,armhf] Do not use NOCROSSREFS directive with ld.lld - [arm64] Do not include __READ_ONCE() block in assembly files - [armhf] fix build warning in proc-v7-bugs.c - xen/xenbus: don't let xenbus_grant_ring() remove grants in error case (CVE-2022-23040, XSA-396) - xen/grant-table: add gnttab_try_end_foreign_access() (CVE-2022-23036, CVE-2022-23038, XSA-396) - xen/blkfront: don't use gnttab_query_foreign_access() for mapped status (CVE-2022-23036, XSA-396) - xen/netfront: don't use gnttab_query_foreign_access() for mapped status (CVE-2022-23037, XSA-396) - xen/scsifront: don't use gnttab_query_foreign_access() for mapped status (CVE-2022-23038, XSA-396) - xen/gntalloc: don't use gnttab_query_foreign_access() (CVE-2022-23039, XSA-396) - xen: remove gnttab_query_foreign_access() - xen/9p: use alloc/free_pages_exact() (CVE-2022-23041, XSA-396) - xen/pvcalls: use alloc/free_pages_exact() (CVE-2022-23041, XSA-396) - xen/gnttab: fix gnttab_end_foreign_access() without page specified (CVE-2022-23041, XSA-396) - xen/netfront: react properly to failing gnttab_end_foreign_access_ref() (CVE-2022-23042, XSA-396) - Revert "ACPI: PM: s2idle: Cancel wakeup before dispatching EC GPE" . [ Bastian Blank ] * [arm64] Enable hyperv-daemons package. . [ Salvatore Bonaccorso ] * Bump ABI to 5
-
Lorenzo "Palinuro" Faletra authored
-
- 11 Mar, 2022 2 commits
-
-
Lorenzo "Palinuro" Faletra authored
linux (5.16.12-2parrot1) parrot-updates; urgency=medium . * Import new Debian release. * Apply parrot patches for wifi drivers. * Disable secure boot on debian build configs. * Switch timer frequency from 250hz to 300hz. . linux (5.16.12-1) unstable; urgency=high . * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.12 - mm/filemap: Fix handling of THPs in generic_file_buffered_read() - cgroup/cpuset: Fix a race between cpuset_attach() and cpu hotplug - btrfs: tree-checker: check item_size for inode_item - btrfs: tree-checker: check item_size for dev_item - slab: remove __alloc_size attribute from __kmalloc_track_caller - io_uring: don't convert to jiffies for waiting on timeouts - io_uring: disallow modification of rsrc_data during quiesce - selinux: fix misuse of mutex_is_locked() - vhost/vsock: don't check owner in vhost_vsock_stop() while releasing - [x86] KVM: x86/mmu: make apf token non-zero to fix bug - [x86] KVM: x86: nSVM: disallow userspace setting of MSR_AMD64_TSC_RATIO to non default value when tsc scaling disabled - drm/amd: Check if ASPM is enabled from PCIe subsystem - drm/amdgpu: disable MMHUB PG for Picasso - drm/amdgpu: do not enable asic reset for raven2 - [x86] drm/i915: Widen the QGV point mask - [x86] drm/i915: Disconnect PHYs left connected by BIOS on disabled ports - [x86] drm/i915: Correctly populate use_sagv_wm for all pipes - [x86] drm/i915: Fix bw atomic check when switching between SAGV vs. no SAGV - sr9700: sanity check for packet length - USB: zaurus: support another broken Zaurus - CDC-NCM: avoid overflow in sanity checking - ping: remove pr_err from ping_lookup - Revert "i40e: Fix reset bw limit when DCB enabled with 1 TC" - [arm64,armhf] gpu: host1x: Always return syncpoint value when waiting - perf data: Fix double free in perf_session__delete() - mptcp: fix race in incoming ADD_ADDR option processing - mptcp: add mibs counter for ignored incoming options - bnx2x: fix driver load from initrd - bnxt_en: Fix devlink fw_activate - bnxt_en: Fix active FEC reporting to ethtool - bnxt_en: Fix offline ethtool selftest with RDMA enabled - bnxt_en: Fix occasional ethtool -t loopback test failures - bnxt_en: Fix incorrect multicast rx mask setting when not requested - bnxt_en: Restore the resets_reliable flag in bnxt_open() - hwmon: Handle failure to register sensor with thermal zone correctly - net/mlx5: Fix tc max supported prio for nic mode - ice: fix setting l4 port flag when adding filter - ice: fix concurrent reset and removal of VFs - ice: check the return of ice_ptp_gettimex64 - ice: initialize local variable 'tlv' - net/mlx5: Update the list of the PCI supported devices - bpf: Fix crash due to incorrect copy_map_value - bpf: Do not try bpf_msg_push_data with len 0 - bpf: Fix a bpf_timer initialization issue - bpf: Add schedule points in batch ops - io_uring: add a schedule point in io_add_buffers() - net: __pskb_pull_tail() & pskb_carve_frag_list() drop_monitor friends - nvme: also mark passthrough-only namespaces ready in nvme_update_ns_info - tipc: Fix end of loop tests for list_for_each_entry() - gso: do not skip outer ip header in case of ipip and net_failover - [armel,armhf] net: mv643xx_eth: process retval from of_get_mac_address - openvswitch: Fix setting ipv6 fields causing hw csum failure - drm/edid: Always set RGB444 - net/mlx5e: Fix wrong return value on ioctl EEPROM query failure - net/mlx5e: TC, Reject rules with forward and drop actions - net/mlx5e: TC, Reject rules with drop and modify hdr action - block: clear iocb->private in blkdev_bio_end_io_async() - [arm*] drm/vc4: crtc: Fix runtime_pm reference counting - [x86] drm/i915/dg2: Print PHY name properly on calibration error - drm/amd/display: For vblank_disable_immediate, check PSR is really used - net/sched: act_ct: Fix flow table lookup after ct clear or switching zones - net: Force inlining of checksum functions in net/checksum.h - netfilter: nf_tables: unregister flowtable hooks on netns exit - [arm64,armhf] net: dsa: avoid call to __dev_set_promiscuity() while rtnl_mutex isn't held - nfp: flower: Fix a potential leak in nfp_tunnel_add_shared_mac() - netfilter: nf_tables: fix memory leak during stateful obj update - net/smc: Use a mutex for locking "struct smc_pnettable" - [x86] surface: surface3_power: Fix battery readings on batteries without a serial number - udp_tunnel: Fix end of loop test in udp_tunnel_nic_unregister() - net/mlx5: DR, Cache STE shadow memory - net/mlx5: DR, Don't allow match on IP w/o matching on full ethertype/ip_version - net/mlx5: Fix possible deadlock on rule deletion - net/mlx5: Fix wrong limitation of metadata match on ecpf - net/mlx5: DR, Fix the threshold that defines when pool sync is initiated - net/mlx5e: MPLSoUDP decap, fix check for unsupported matches - net/mlx5e: kTLS, Use CHECKSUM_UNNECESSARY for device-offloaded packets - net/mlx5: DR, Fix slab-out-of-bounds in mlx5_cmd_dr_create_fte - net/mlx5: Update log_max_qp value to be 17 at most - net/mlx5e: Add missing increment of count - [armel,armhf] PCI: mvebu: Fix device enumeration regression - [arm64,armhf] gpio: rockchip: Reset int_bothedge when changing trigger - regmap-irq: Update interrupt clear register for proper reset - net: use sk_is_tcp() in more places - net-timestamp: convert sk->sk_tskey to atomic_t - bnxt_en: Increase firmware message response DMA wait time - configfs: fix a race in configfs_{,un}register_subsystem() - RDMA/ib_srp: Fix a deadlock - bpf: Extend kfunc with PTR_TO_CTX, PTR_TO_MEM argument support - bpf: Fix crash due to out of bounds access into reg2btf_ids. - tracing: Dump stacktrace trigger to the corresponding instance - tracing: Have traceon and traceoff trigger honor the instance - iio:imu:adis16480: fix buffering for devices with no burst mode - iio: adc: ad7124: fix mask used for setting AIN_BUFP & AIN_BUFM bits - iio: imu: st_lsm6dsx: wait for settling time in st_lsm6dsx_read_oneshot - iio: Fix error handling for PM - ata: pata_hpt37x: disable primary channel on HPT371 - Revert "USB: serial: ch341: add new Product ID for CH341A" - usb: gadget: rndis: add spinlock for rndis response list - tracefs: Set the group ownership in apply_options() not parse_options() - USB: serial: option: add support for DW5829e - USB: serial: option: add Telit LE910R1 compositions - [arm*] usb: dwc2: drd: fix soft connect when gadget is unconfigured - [arm64] usb: dwc3: pci: Add "snps,dis_u2_susphy_quirk" for Intel Bay Trail - [arm64] usb: dwc3: pci: Fix Bay Trail phy GPIO mappings - [arm64,armhf] usb: dwc3: gadget: Let the interrupt handler disable bottom halves. - xhci: re-initialize the HC during resume if HCE was set - xhci: Prevent futile URB re-submissions due to incorrect return value. - nvmem: core: Fix a conflict between MTD and NVMEM on wp-gpios property - mtd: core: Fix a conflict between MTD and NVMEM on wp-gpios property - driver core: Free DMA range map when device is released - btrfs: defrag: don't try to merge regular extents with preallocated extents - btrfs: defrag: don't defrag extents which are already at max capacity - btrfs: defrag: remove an ambiguous condition for rejection - btrfs: prevent copying too big compressed lzo segment - btrfs: defrag: allow defrag_one_cluster() to skip large extent which is not a target - btrfs: autodefrag: only scan one inode once - btrfs: reduce extent threshold for autodefrag - RDMA/cma: Do not change route.addr.src_addr outside state checks - [amd64] thermal: int340x: fix memory leak in int3400_notify() - [x86] tps6598x: clear int mask on probe failure - [amd64] IB/qib: Fix duplicate sysfs directory name - mm/hugetlb: fix kernel crash with hugetlb mremap - hugetlbfs: fix a truncation issue in hugepages parameter - tty: n_gsm: fix encoding of control signal octet bit DV - tty: n_gsm: fix encoding of command/response bit - tty: n_gsm: fix proper link termination after failed open - tty: n_gsm: fix NULL pointer access due to DLCI release - tty: n_gsm: fix wrong tty control line for flow control - tty: n_gsm: fix wrong modem processing in convergence layer type 2 - tty: n_gsm: fix deadlock in gsmtty_open() - memblock: use kfree() to release kmalloced memblock regions . [ Vincent Blut ] * drivers/leds: Enable LEDS_CLASS_MULTICOLOR as module (Closes: #1006490) . [ Salvatore Bonaccorso ] * Bump ABI to 4 * Mitigate Spectre v2-type Branch History Buffer attacks (CVE-2022-0001, CVE-2022-0002) - [x86] speculation: Rename RETPOLINE_AMD to RETPOLINE_LFENCE - [x86] speculation: Add eIBRS + Retpoline options - Documentation/hw-vuln: Update spectre doc - [x86] speculation: Include unprivileged eBPF status in Spectre v2 mitigation reporting - [x86] speculation: Use generic retpoline by default on AMD - [x86] speculation: Update link to AMD speculation whitepaper - [x86] speculation: Warn about Spectre v2 LFENCE mitigation - [x86] speculation: Warn about eIBRS + LFENCE + Unprivileged eBPF + SMT . [ Ben Hutchings [ * module: Avoid ABI changes when debug info is disabled . linux (5.16.11-1) unstable; urgency=medium . * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.11 - drm/nouveau/pmu/gm200-: use alternate falcon reset sequence - HID:Add support for UGTABLET WP5540 - [x86] Revert "svm: Add warning message for AVIC IPI invalid target" - mmc: block: fix read single on recovery logic - mm: don't try to NUMA-migrate COW pages that have other uses - [amd64] HID: amd_sfh: Add illuminance mask to limit ALS max value - [amd64] HID: amd_sfh: Increase sensor command timeout - [amd64] HID: amd_sfh: Correct the structure field name - [amd64] PCI: hv: Fix NUMA node assignment when kernel boots with custom NUMA topology - HID: apple: Set the tilde quirk flag on the Wellspring 5 and later - btrfs: don't hold CPU for too long when defragging a file - btrfs: send: in case of IO error log it - btrfs: defrag: don't try to defrag extents which are under writeback - [amd64] platform/x86: amd-pmc: Correct usage of SMU version - net: ieee802154: at86rf230: Stop leaking skb's - ax25: improve the incomplete fix to avoid UAF and NPD bugs - cifs: unlock chan_lock before calling cifs_put_tcp_session - vfs: make freeze_super abort when sync_filesystem returns error - vfs: make sync_filesystem return errors from ->sync_fs - quota: make dquot_quota_sync return errors from ->sync_fs - scsi: pm80xx: Fix double completion for SATA devices - scsi: core: Reallocate device's budget map on queue depth change - scsi: pm8001: Fix use-after-free for aborted TMF sas_task - scsi: pm8001: Fix use-after-free for aborted SSP/STP sas_task - drm/amd: Warn users about potential s0ix problems - nvme: fix a possible use-after-free in controller reset during load - nvme-tcp: fix possible use-after-free in transport error_recovery work - nvme-rdma: fix possible use-after-free in transport error_recovery work - drm/amd: add support to check whether the system is set to s3 - drm/amd: Only run s3 or s0ix if system is configured properly - drm/amdgpu: fix logic inversion in check - [amd64] x86/Xen: streamline (and fix) PV CPU enumeration - Revert "module, async: async_synchronize_full() on module init iff async is used" - random: wake up /dev/random writers after zap - [x86] KVM: x86/xen: Fix runstate updates to be atomic when preempting vCPU - [x86] KVM: x86: nSVM/nVMX: set nested_run_pending on VM entry which is a result of RSM - [x86] KVM: x86: SVM: don't passthrough SMAP/SMEP/PKE bits in !NPT && !gCR0.PG case - [x86] KVM: x86: nSVM: fix potential NULL derefernce on nested migration - [x86] KVM: x86: nSVM: mark vmcb01 as dirty when restoring SMM saved state - iwlwifi: remove deprecated broadcast filtering feature - iwlwifi: fix use-after-free (Closes: #1005884) - drm/radeon: Fix backlight control on iMac 12,1 - drm/atomic: Don't pollute crtc_state->mode_blob with error pointers - drm/amdgpu: skipping SDMA hw_init and hw_fini for S0ix. - [x86] drm/i915/opregion: check port number bounds for SWSCI display power state - [x86] drm/i915: Fix dbuf slice config lookup - [x86] drm/i915: Fix mbus join config lookup - vsock: remove vsock from connected table when connect is interrupted by a signal - [arm64] tee: export teedev_open() and teedev_close_context() - [arm64] optee: use driver internal tee_context for some rpc - [arm*] drm/cma-helper: Set VM_DONTEXPAND for mmap - [x86] drm/i915/gvt: Make DRM_I915_GVT depend on X86 - [x86] drm/i915/ttm: tweak priority hint selection - iwlwifi: pcie: fix locking when "HW not ready" - iwlwifi: pcie: gen2: fix locking when "HW not ready" - iwlwifi: mvm: fix condition which checks the version of rate_n_flags - iwlwifi: fix iwl_legacy_rate_to_fw_idx - iwlwifi: mvm: don't send SAR GEO command for 3160 devices - netfilter: nft_synproxy: unregister hooks on init error path - ipv4: fix data races in fib_alias_hw_flags_set - ipv6: fix data-race in fib6_info_hw_flags_set / fib6_purge_rt - ipv6: mcast: use rcu-safe version of ipv6_get_lladdr() - ipv6: per-netns exclusive flowlabel checks - Revert "net: ethernet: bgmac: Use devm_platform_ioremap_resource_byname" - mac80211: mlme: check for null after calling kmemdup - brcmfmac: firmware: Fix crash in brcm_alt_fw_path - cfg80211: fix race in netlink owner interface destruction - [arm64,armhf] net: dsa: mv88e6xxx: flush switchdev FDB workqueue before removing VLAN - ping: fix the dif and sdif check in ping_lookup - bonding: force carrier update when releasing slave - mctp: fix use after free - drop_monitor: fix data-race in dropmon_net_event / trace_napi_poll_hit - net_sched: add __rcu annotation to netdev->qdisc - crypto: af_alg - get rid of alg_memory_allocated - bonding: fix data-races around agg_select_timer - net/smc: Avoid overwriting the copies of clcsock callback functions - atl1c: fix tx timeout after link flap on Mikrotik 10/25G NIC - tipc: fix wrong publisher node address in link publications - [arm64] dpaa2-eth: Initialize mutex used in one step timestamping path - [arm64] net: mscc: ocelot: fix use-after-free in ocelot_vlan_del() - net: bridge: multicast: notify switchdev driver whenever MC processing gets disabled - [arm64] Correct wrong label in macro __init_el2_gicv3 - ALSA: usb-audio: Don't abort resume upon errors - ALSA: usb-audio: revert to IMPLICIT_FB_FIXED_DEV for M-Audio FastTrack Ultra - ALSA: memalloc: Fix dma_need_sync() checks - ALSA: memalloc: invalidate SG pages before sync - ALSA: hda/realtek: Add quirk for Legion Y9000X 2019 - ALSA: hda/realtek: Fix deadlock by COEF mutex - ALSA: hda: Fix regression on forced probe mask option - ALSA: hda: Fix missing codec probe on Shenker Dock 15 - ASoC: ops: Fix stereo change notifications in snd_soc_put_volsw() - ASoC: ops: Fix stereo change notifications in snd_soc_put_volsw_range() - ASoC: ops: Fix stereo change notifications in snd_soc_put_volsw_sx() - ASoC: ops: Fix stereo change notifications in snd_soc_put_xr_sx() - cifs: fix set of group SID via NTSD xattrs - cifs: fix confusing unneeded warning message on smb2.1 and earlier - ACPI: processor: idle: fix lockup regression on 32-bit ThinkPad T40 - [armhf] mtd: rawnand: gpmi: don't leak PM reference in error path - smb3: fix snapshot mount option - tipc: fix wrong notification node addresses - scsi: ufs: Remove dead code - scsi: ufs: Fix a deadlock in the error handler - [arm64] ASoC: qcom: Actually clear DMA interrupt register for HDMI - block/wbt: fix negative inflight counter when remove scsi device - NFS: Remove an incorrect revalidation in nfs4_update_changeattr_locked() - NFS: LOOKUP_DIRECTORY is also ok with symlinks - NFS: Do not report writeback errors in nfs_getattr() - tty: n_tty: do not look ahead for EOL character past the end of the buffer - block: fix surprise removal for drivers calling blk_set_queue_dying - mtd: phram: Prevent divide by zero bug in phram_setup() - scsi: lpfc: Fix pt2pt NVMe PRLI reject LOGO loop - EDAC: Fix calculation of returned address and next offset in edac_align_ptr() - [x86] ptrace: Fix xfpregs_set()'s incorrect xmm clearing - ucounts: Base set_cred_ucounts changes on the real user - ucounts: Handle wrapping in is_ucounts_overlimit - ucounts: Enforce RLIMIT_NPROC not RLIMIT_NPROC+1 - rlimit: Fix RLIMIT_NPROC enforcement failure caused by capability calls in set_user - ucounts: Move RLIMIT_NPROC handling after set_user - net: sched: limit TC_ACT_REPEAT loops - [armhf] dmaengine: stm32-dmamux: Fix PM disable depth imbalance in stm32_dmamux_probe - copy_process(): Move fd_install() out of sighand->siglock critical section - scsi: qedi: Fix ABBA deadlock in qedi_process_tmf_resp() and qedi_process_cmd_cleanup_resp() - ice: enable parsing IPSEC SPI headers for RSS - [arm*] i2c: brcmstb: fix support for DSL and CM variants - HID: elo: fix memory leak in elo_probe - [x86,arm64] Drivers: hv: vmbus: Fix memory leak in vmbus_add_channel_kobj - [x86] KVM: x86/pmu: Refactoring find_arch_event() to pmc_perf_hw_id() - [x86] KVM: x86/pmu: Don't truncate the PerfEvtSeln MSR when creating a perf event - [x86] KVM: x86/pmu: Use AMD64_RAW_EVENT_MASK for PERF_TYPE_RAW - [armhf] OMAP2+: hwmod: Add of_node_put() before break - [armhf] OMAP2+: adjust the location of put_device() call in omapdss_init_of - [arm*] staging: vc04_services: Fix RCU dereference check - [riscv64] irqchip/sifive-plic: Add missing thead,c900-plic match string - [x86] bug: Merge annotate_reachable() into _BUG_FLAGS() asm - netfilter: conntrack: don't refresh sctp entries in closed state - ksmbd: fix same UniqueId for dot and dotdot entries - ksmbd: don't align last entry offset in smb2 query directory - lib/iov_iter: initialize "flags" in new pipe_buffer - mm: io_uring: allow oom-killer from io_uring_setup - [x86] ACPI: PM: Revert "Only mark EC GPE for wakeup on Intel systems" - kconfig: let 'shell' return enough output for deep path names - ata: libata-core: Disable TRIM on M88V29 - [armhf] soc: aspeed: lpc-ctrl: Block error printing on probe defer cases - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create - [arm64,armhf] drm/rockchip: dw_hdmi: Do not leave clock enabled in error case - tracing: Fix tp_printk option related with tp_printk_stop_on_boot - drm/amdgpu: add utcl2_harvest to gc 10.3.1 - net: usb: qmi_wwan: Add support for Dell DW5829e - [arm64,riscv64] net: macb: Align the dma and coherent dma masks - kconfig: fix failing to generate auto.conf . [ Salvatore Bonaccorso ] * Bump ABI to 3 * cgroup-v1: Correct privileges check in release_agent writes * netfilter: xt_socket: fix a typo in socket_mt_destroy() * netfilter: xt_socket: missing ifdef CONFIG_IP6_NF_IPTABLES dependency * netfilter: nf_tables_offload: incorrect flow offload action array size (CVE-2022-25636) . [ Vincent Blut ] * drivers/hid: Enable HID_NINTENDO as module and NINTENDO_FF as built-in (Closes: #1006275) . linux (5.16.10-1) unstable; urgency=medium . * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.8 - [x86] drm/i915: Disable DSB usage for now - selinux: fix double free of cond_list on error paths - audit: improve audit queue handling when "audit=1" on cmdline - ipc/sem: do not sleep with a spin lock held - [armhf] spi: stm32-qspi: Update spi registering - ASoC: hdmi-codec: Fix OOB memory accesses - ASoC: ops: Reject out of bounds values in snd_soc_put_volsw() - ASoC: ops: Reject out of bounds values in snd_soc_put_volsw_sx() - ASoC: ops: Reject out of bounds values in snd_soc_put_xr_sx() - ALSA: usb-audio: Correct quirk for VF0770 - ALSA: hda: Fix UAF of leds class devs at unbinding - ALSA: hda: realtek: Fix race at concurrent COEF updates - ALSA: hda/realtek: Add quirk for ASUS GU603 - ALSA: hda/realtek: Add missing fixup-model entry for Gigabyte X570 ALC1220 quirks - ALSA: hda/realtek: Fix silent output on Gigabyte X570S Aorus Master (newer chipset) - ALSA: hda/realtek: Fix silent output on Gigabyte X570 Aorus Xtreme after reboot from Windows - ata: libata-core: Introduce ATA_HORKAGE_NO_LOG_DIR horkage - btrfs: don't start transaction for scrub if the fs is mounted read-only - btrfs: fix deadlock between quota disable and qgroup rescan worker - btrfs: fix use-after-free after failure to create a snapshot - Revert "fs/9p: search open fids first" - drm/nouveau: fix off by one in BIOS boundary checking - [x86] drm/i915/adlp: Fix TypeC PHY-ready status readout - drm/amdgpu: fix a potential GPU hang on cyan skillfish - drm/amd/display: Update watermark values for DCN301 - drm/amd/display: watermark latencies is not enough on DCN31 - drm/amd/display: Force link_rate as LINK_RATE_RBR2 for 2018 15" Apple Retina panels - mm/pgtable: define pte_index so that preprocessor could recognize it - mm/kmemleak: avoid scanning potential huge holes - block: bio-integrity: Advance seed correctly for larger interval sizes - cifs: fix workstation_name for multiuser mounts - dma-buf: heaps: Fix potential spectre v1 gadget - [amd64] IB/hfi1: Fix panic with larger ipoib send_queue_size - [amd64] IB/hfi1: Fix alloc failure with larger txqueuelen - [amd64] IB/hfi1: Fix AIP early init panic - Revert "fbdev: Garbage collect fbdev scrolling acceleration, part 1 (from TODO list)" - Revert "fbcon: Disable accelerated scrolling" - fbcon: Add option to enable legacy hardware acceleration - mptcp: fix msk traversal in mptcp_nl_cmd_set_flags() - [riscv64] KVM: make CY, TM, and IR counters accessible in VU mode - [arm64] KVM: arm64: Avoid consuming a stale esr value when SError occur - [arm64] KVM: arm64: Stop handle_exit() from handling HVC twice when an SError occurs - [arm64] Add Cortex-A510 CPU part definition - RDMA/cma: Use correct address when leaving multicast group - RDMA/ucma: Protect mc during concurrent multicast leaves - [amd64] IB/rdmavt: Validate remote_addr during loopback atomic tests - RDMA/mlx4: Don't continue event handler after memory allocation failure - ALSA: usb-audio: initialize variables that could ignore errors - ALSA: hda: Fix signedness of sscanf() arguments - ALSA: hda: Skip codec shutdown in case the codec is not registered - [amd64] iommu/vt-d: Fix potential memory leak in intel_setup_irq_remapping() - [amd64] iommu/amd: Fix loop timeout issue in iommu_ga_log_enable() - [arm64,armhf] spi: meson-spicc: add IRQ check in meson_spicc_probe - [amd64] IB/hfi1: Fix tstats alloc and dealloc - IB/cm: Release previously acquired reference counter in the cm_id_priv - net: ieee802154: hwsim: Ensure proper channel selection at probe time - netfilter: nft_reject_bridge: Fix for missing reply from prerouting - net: ieee802154: Return meaningful error codes from the netlink helpers - net/smc: Forward wakeup to smc socket waitqueue after fallback - net: stmmac: properly handle with runtime pm in stmmac_dvr_remove() - net: macsec: Fix offload support for NETDEV_UNREGISTER event - net: macsec: Verify that send_sci is on when setting Tx sci explicitly - net: stmmac: dump gmac4 DMA registers correctly - net, neigh: Do not trigger immediate probes on NUD_FAILED from neigh_managed_work - net: stmmac: ensure PTP time register reads are consistent - [arm64] drm: mxsfb: Fix NULL pointer dereference - [x86] drm/i915/overlay: Prevent divide by zero bugs in scaling - [x86] drm/i915: Lock timeline mutex directly in error path of eb_pin_timeline - drm/amd: avoid suspend on dGPUs w/ s2idle support when runtime PM enabled - ASoC: rt5682: Fix deadlock on resume - [arm*] ASoC: simple-card: fix probe failure on platform component - [arm64] pinctrl: sunxi: Fix H616 I2S3 pin data - [x86] pinctrl: intel: Fix a glitch when updating IRQ flags on a preconfigured line - [x86] pinctrl: intel: fix unexpected interrupt - [arm*] pinctrl: bcm2835: Fix a few error paths - btrfs: fix use of uninitialized variable at rm device ioctl - scsi: bnx2fc: Make bnx2fc_recv_frame() mp safe - nfsd: nfsd4_setclientid_confirm mistakenly expires confirmed client. - [amd64,arm64] gve: fix the wrong AdminQ buffer queue index check - bpf: Use VM_MAP instead of VM_ALLOC for ringbuf - tools/resolve_btfids: Do not print any commands when building silently - e1000e: Separate ADP board type from TGP - rtc: cmos: Evaluate century appropriate - kvm: add guest_state_{enter,exit}_irqoff() - [arm64] kvm/arm64: rework guest entry logic - perf: Copy perf_event_attr::sig_data on modification - [x86] perf/x86/intel/pt: Fix crash with stop filters in single-range mode - [x86] perf: Default set FREEZE_ON_SMI for all - [arm64] EDAC/xgene: Fix deferred probing - ext4: prevent used blocks from being allocated during fast commit replay - ext4: modify the logic of ext4_mb_new_blocks_simple - ext4: fix error handling in ext4_restore_inline_data() - ext4: fix error handling in ext4_fc_record_modified_inode() - ext4: fix incorrect type issue during replay_del_range - cgroup/cpuset: Fix "suspicious RCU usage" lockdep warning - [arm64] gpio: mpc8xxx: Fix an ignored error return from platform_get_irq() https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.9 - ata: libata-core: Fix ata_dev_config_cpr() - moxart: fix potential use-after-free on remove path (CVE-2022-0487) - [s390x] KVM: s390: Return error on SIDA memop on normal guest (CVE-2022-0516) - ksmbd: fix SMB 3.11 posix extension mount failure - crypto: api - Move cryptomgr soft dependency into algapi - tipc: improve size validations for received domain records CVE-2022-0435) https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.10 - integrity: check the return value of audit_log_start() - audit: don't deref the syscall args when checking the openat2 open_how::flags - ima: fix reference leak in asymmetric_verify() - ima: Remove ima_policy file before directory - ima: Allow template selection with ima_template[_fmt]= after ima_hash= - ima: Do not print policy rule with inactive LSM labels - [arm64] mmc: sdhci-of-esdhc: Check for error num after setting mask - mmc: core: Wait for command setting 'Power Off Notification' bit to complete - can: isotp: fix potential CAN frame reception race in isotp_rcv() - can: isotp: fix error path in isotp_sendmsg() to unlock wait queue - net: phy: marvell: Fix RGMII Tx/Rx delays setting in 88e1121-compatible PHYs - net: phy: marvell: Fix MDI-x polarity setting in 88e1118-compatible PHYs - NFS: Fix initialisation of nfs_client cl_flags field - NFSD: Fix NFSv3 SETATTR/CREATE's handling of large file sizes - NFSD: Fix ia_size underflow - NFSD: Clamp WRITE offsets - NFSD: Fix offset type in I/O trace points - NFSD: Fix the behavior of READ near OFFSET_MAX - NFS: change nfs_access_get_cached to only report the mask - NFSv4 only print the label when its queried - nfs: nfs4clinet: check the return value of kstrdup() - NFSv4.1: Fix uninitialised variable in devicenotify - NFSv4 remove zero number of fs_locations entries error check - NFSv4 store server support for fs_location attribute - NFSv4.1 query for fs_location attr on a new file system - NFSv4 expose nfs_parse_server_name function - NFSv4 handle port presence in fs_location server string - SUNRPC allow for unspecified transport time in rpc_clnt_add_xprt - net/sunrpc: fix reference count leaks in rpc_sysfs_xprt_state_change - sunrpc: Fix potential race conditions in rpc_sysfs_xprt_state_change() - [amd64] perf/x86/rapl: fix AMD event handling - [x86] perf: Avoid warning for Arch LBR without XSAVE - sched: Avoid double preemption in __cond_resched_*lock*() - [arm*] drm/vc4: Fix deadlock on DSI device attach error - drm: panel-orientation-quirks: Add quirk for the 1Netbook OneXPlayer - net: sched: Clarify error message when qdisc kind is unknown - [powerpc*] fixmap: Fix VM debug warning on unmap - [arm64] Add Cortex-X2 CPU part definition - [arm64] errata: Update ARM64_ERRATUM_[2119858|2224489] with Cortex-X2 ranges - scsi: target: iscsi: Make sure the np under each tpg is unique - scsi: qedf: Add stag_work to all the vports - scsi: qedf: Fix refcount issue when LOGO is received during TMF - scsi: qedf: Change context reset messages to ratelimited - scsi: pm8001: Fix bogus FW crash for maxcpus=1 - scsi: ufs: Use generic error code in ufshcd_set_dev_pwr_mode() - scsi: ufs: Treat link loss as fatal error - scsi: myrs: Fix crash in error case - net: stmmac: reduce unnecessary wakeups from eee sw timer - PM: hibernate: Remove register_nosave_region_late() - [arm*] usb: dwc2: gadget: don't try to disable ep0 in dwc2_hsotg_suspend - perf: Always wake the parent event - nvme-pci: add the IGNORE_DEV_SUBNQN quirk for Intel P4500/P4600 SSDs - [mips*] Fix build error due to PTR used in more places - [arm64,armhf] net: stmmac: dwmac-sun8i: use return val of readl_poll_timeout() - [arm64] errata: Add detection for TRBE ignored system register writes - [arm64] errata: Add detection for TRBE invalid prohibited states - [arm64] errata: Add detection for TRBE trace data corruption - [arm64] cpufeature: List early Cortex-A510 parts as having broken dbm - KVM: eventfd: Fix false positive RCU usage warning - [x86] KVM: nVMX: eVMCS: Filter out VM_EXIT_SAVE_VMX_PREEMPTION_TIMER - [x86] KVM: nVMX: Also filter MSR_IA32_VMX_TRUE_PINBASED_CTLS when eVMCS - [x86] KVM: SVM: Don't kill SEV guest if SMAP erratum triggers in usermode - [x86] KVM: VMX: Set vmcs.PENDING_DBG.BS on #DB in STI/MOVSS blocking shadow - [x86] KVM: x86: Report deprecated x87 features in supported CPUID - [riscv64] Fix XIP_FIXUP_FLASH_OFFSET - [riscv64] cpu-hotplug: clear cpu from numa map when teardown - [riscv64] mm: Add XIP_FIXUP for phys_ram_base - [riscv64] eliminate unreliable __builtin_frame_address(1) - gfs2: Fix gfs2_release for non-writers regression - Revert "gfs2: check context in gfs2_glock_put" - Revert "PCI/portdrv: Do not setup up IRQs if there are no users" - nvme-tcp: fix bogus request completion when failing to send AER - [arm64] ACPI/IORT: Check node revision for PMCG resources - PM: s2idle: ACPI: Fix wakeup interrupts handling - [arm64,armhf] drm/rockchip: vop: Correct RK3399 VOP register fields - [x86] drm/i915: Disable DRRS on IVB/HSW port != A - [x86] drm/i915: Allow !join_mbus cases for adlp+ dbuf configuration - [x86] drm/i915: Populate pipe dbuf slices more accurately during readout - [x86] drm/i915: Workaround broken BIOS DBUF configuration on TGL/RKL - [armhf] dts: Fix timer regression for beagleboard revision c - [arm64] tee: optee: do not check memref size on return from Secure World - [arm64] optee: add error checks in optee_ffa_do_call_with_arg() - [armhf] phy: stm32: fix a refcount leak in stm32_usbphyc_pll_enable() - usb: f_fs: Fix use-after-free for epfile - [arm64] Enable Cortex-A510 erratum 2051678 by default - [arm64,armhf] phy: dphy: Correct clk_pre parameter - NFS: Don't overfill uncached readdir pages - NFS: Don't skip directory entries when doing uncached readdir - NFS: Avoid duplicate uncached readdir calls on eof - [arm*] drm/vc4: hdmi: Allow DBLCLK modes even if horz timing is odd. - netfilter: nft_payload: don't allow th access for fragments - netfilter: ctnetlink: disable helper autoassign - [arm64] dts: meson-sm1-bananapi-m5: fix wrong GPIO domain for GPIOE_2 - ixgbevf: Require large buffers for build_skb on 82599VF - tcp: take care of mixed splice()/sendmsg(MSG_ZEROCOPY) case - [arm64] net: mscc: ocelot: fix all IP traffic getting trapped to CPU with PTP over IP - [arm64,armhf] drm/panel: simple: Assign data from panel_dpi_probe() correctly - ACPI: PM: s2idle: Cancel wakeup before dispatching EC GPE - gpiolib: Never return internal error codes to user space - [riscv64] gpio: sifive: use the correct register to read output values - fbcon: Avoid 'cap' set but not used warning - SUNRPC: lock against ->sock changing during sysfs read - [arm64,arm64] gve: Recording rx queue before sending to napi - bonding: pair enable_port with slave_arr_updates - [arm64,armhf] net: dsa: mv88e6xxx: don't use devres for mdiobus - [armhf] net: dsa: bcm_sf2: don't use devres for mdiobus - [arm64] net: dsa: felix: don't use devres for mdiobus - ipmr,ip6mr: acquire RTNL before calling ip[6]mr_free_table() on failure path - nfp: flower: fix ida_idx not being released - net: do not keep the dst cache when uncloning an skb dst and its metadata - net: fix a memleak when uncloning an skb dst and its metadata - veth: fix races around rq->rx_notify_masked - [armhf] net: mdio: aspeed: Add missing MODULE_DEVICE_TABLE - tipc: rate limit warning for received illegal binding update - [amd64,armhf] net: amd-xgbe: disable interrupts during pci removal - [amd64,armhf] net: dsa: fix panic when DSA master device unbinds on shutdown - mptcp: netlink: process IPv6 addrs in creating listening sockets - [arm64] dpaa2-eth: unregister the netdev before disconnecting from the PHY - ice: fix an error code in ice_cfg_phy_fec() - ice: fix IPIP and SIT TSO offload - ice: Avoid RTNL lock when re-creating auxiliary device - [arm64] net: mscc: ocelot: fix mutex lock error during ethtool stats read - [arm64,armhf] net: dsa: mv88e6xxx: fix use-after-free in mv88e6xxx_mdios_unregister - vt_ioctl: fix array_index_nospec in vt_setactivate - vt_ioctl: add array_index_nospec to VT_ACTIVATE - n_tty: wake up poll(POLLRDNORM) on receiving data - eeprom: ee1004: limit i2c reads to I2C_SMBUS_BLOCK_MAX - [arm*] usb: dwc2: drd: fix soft connect when gadget is unconfigured - [arm*] Revert "usb: dwc2: drd: fix soft connect when gadget is unconfigured" - net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup - [arm64,armhf] usb: ulpi: Move of_node_put to ulpi_dev_release - [arm64,armhf] usb: ulpi: Call of_node_put correctly - [arm64,armhf] usb: dwc3: gadget: Prevent core from processing stale TRBs - USB: gadget: validate interface OS descriptor requests (CVE-2022-25258) - usb: gadget: rndis: check size of RNDIS_MSG_SET command - usb: gadget: f_uac2: Define specific wTerminalType - USB: serial: ftdi_sio: add support for Brainboxes US-159/235/320 - USB: serial: option: add ZTE MF286D modem - USB: serial: ch341: add support for GW Instek USB2.0-Serial devices - USB: serial: cp210x: add NCR Retail IO box id - USB: serial: cp210x: add CPI Bulk Coin Recycler id - speakup-dectlk: Restore pitch setting - iio: buffer: Fix file related error handling in IIO_BUFFER_GET_FD_IOCTL - fs/proc: task_mmu.c: don't read mapcount for migration entry - mm: vmscan: remove deadlock due to throttling failing to make progress - mm: memcg: synchronize objcg lists with a dedicated spinlock - seccomp: Invalidate seccomp mode to catch death failures - signal: HANDLER_EXIT should clear SIGNAL_UNKILLABLE - [s390x] cio: verify the driver availability for path_event call - bus: mhi: pci_generic: Add mru_default for Foxconn SDX55 - bus: mhi: pci_generic: Add mru_default for Cinterion MV31-W - scsi: lpfc: Remove NVMe support if kernel has NVME_FC disabled - scsi: lpfc: Reduce log messages seen after firmware download - [mips64el,mipsel] octeon: Fix missed PTR->PTR_WD conversion - perf: Fix list corruption in perf_cgroup_switch() - iommu: Fix potential use-after-free during probe . [ Salvatore Bonaccorso ] * Bump ABI to 2 * [rt] Refresh "mm/memcg: Add a local_lock_t for IRQ and TASK object." * bpf: Introduce composable reg, ret and arg types. * bpf: Replace ARG_XXX_OR_NULL with ARG_XXX | PTR_MAYBE_NULL * bpf: Replace RET_XXX_OR_NULL with RET_XXX | PTR_MAYBE_NULL * bpf: Replace PTR_TO_XXX_OR_NULL with PTR_TO_XXX | PTR_MAYBE_NULL * bpf: Introduce MEM_RDONLY flag * bpf: Convert PTR_TO_MEM_OR_NULL to composable types. * bpf: Make per_cpu_ptr return rdonly PTR_TO_MEM. * bpf: Add MEM_RDONLY for helper args that are pointers to rdonly mem. * bpf/selftests: Test PTR_TO_RDONLY_MEM . [ Luca Boccassi ] * drivers/watchdog: enable CONFIG_WATCHDOG_HRTIMER_PRETIMEOUT . linux (5.16.7-2) unstable; urgency=medium . * linux-perf: Protect invocation of dpkg-divert to run only on relevant actions in maintscripts. Thanks to Guillem Jover (Closes: #1005141) . linux (5.16.7-1) unstable; urgency=medium . * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.5 - Bluetooth: refactor malicious adv data check - btrfs: fix too long loop when defragging a 1 byte file - btrfs: allow defrag to be interruptible - btrfs: defrag: fix wrong number of defragged sectors - btrfs: defrag: properly update range->start for autodefrag - btrfs: fix deadlock when reserving space during defrag - btrfs: add back missing dirty page rate limiting to defrag - btrfs: update writeback index when starting defrag - net: sfp: ignore disabled SFP node - net: stmmac: configure PTP clock source prior to PTP initialization - net: stmmac: skip only stmmac_ptp_register when resume from suspend - [armel,armhf] 9179/1: uaccess: avoid alignment faults in copy_[from|to]_kernel_nofault - [armel,armhf] 9180/1: Thumb2: align ALT_UP() sections in modules sufficiently - [arm64] KVM: arm64: vgic-v3: Restrict SEIS workaround to known broken systems - [s390x] module: fix loading modules with a lot of relocations - [s390x] hypfs: include z/VM guests with access control group set - [s390x] nmi: handle guarded storage validity failures for KVM guests - [s390x] nmi: handle vector validity failures for KVM guests - bpf: Guard against accessing NULL pt_regs in bpf_get_task_stack() - [s390x] scsi: zfcp: Fix failed recovery on gone remote port with non-NPIV FCP devices - udf: Restore i_lenAlloc when inode expansion fails - udf: Fix NULL ptr deref when converting from inline format - [x86] efi: runtime: avoid EFIv2 runtime services on Apple x86 machines - tracing: Don't inc err_log entry count if entry allocation fails - ceph: properly put ceph_string reference after async create attempt - ceph: set pool_ns in new inode layout for async creates - fsnotify: invalidate dcache before IN_DELETE event - fsnotify: fix fsnotify hooks in pseudo filesystems - Revert "KVM: SVM: avoid infinite loop on NPF from bad address" - psi: Fix uaf issue when psi trigger is destroyed while being polled - [x86] perf/x86/intel/uncore: Fix CAS_COUNT_WRITE issue for ICX - [x86] perf/x86/intel: Add a quirk for the calculation of the number of counters on Alder Lake - [arm64,armhf] drm/etnaviv: relax submit size limits - drm/atomic: Add the crtc to affected crtc only if uapi.enable = true - drm/amdgpu: filter out radeon secondary ids as well - [x86] KVM: LAPIC: Also cancel preemption timer during SET_LAPIC - [x86] KVM: SVM: Never reject emulation due to SMAP errata for !SEV guests - [x86] KVM: SVM: Don't intercept #GP for SEV guests - [x86] KVM: x86: nSVM: skip eax alignment check for non-SVM instructions - [x86] KVM: x86: Move CPUID.(EAX=0x12,ECX=1) mangling to __kvm_update_cpuid_runtime() - [x86] KVM: x86: Free kvm_cpuid_entry2 array on post-KVM_RUN KVM_SET_CPUID{,2} - [x86] KVM: x86: Forcibly leave nested virt when SMM state is toggled - [x86] KVM: x86: Check .flags in kvm_cpuid_check_equal() too - [x86] KVM: x86: Keep MSR_IA32_XSS unchanged for INIT - [x86] KVM: x86: Update vCPU's runtime CPUID on write to MSR_IA32_XSS - [x86] KVM: x86: Sync the states size with the XCR0/IA32_XSS at, any time - [powerpc*] KVM: PPC: Book3S HV Nested: Fix nested HFSCR being clobbered with multiple vCPUs - security, lsm: dentry_init_security() Handle multi LSM registration - [arm64] extable: fix load_unaligned_zeropad() reg indices - dm: revert partial fix for redundant bio-based IO accounting - block: add bio_start_io_acct_time() to control start_time - dm: properly fix redundant bio-based IO accounting - [arm*] serial: pl011: Fix incorrect rs485 RTS polarity on set_mctrl - serial: 8250: of: Fix mapped region size when using reg-offset property - [armhf] serial: stm32: fix software flow control transfer - tty: n_gsm: fix SW flow control encoding/handling - tty: Add support for Brainboxes UC cards. - usb-storage: Add unusual-devs entry for VL817 USB-SATA bridge - usb: xhci-plat: fix crash when suspend if remote wake enable - [arm64,armhf] usb: common: ulpi: Fix crash in ulpi_match() - usb: gadget: f_sourcesink: Fix isoc transfer for USB_SPEED_SUPER_PLUS - [arm64] usb: dwc3: xilinx: Skip resets and USB3 register settings for USB2.0 mode - [arm64] usb: dwc3: xilinx: Fix error handling when getting USB3 PHY - USB: core: Fix hang in usb_kill_urb by adding memory barriers - [arm64] usb: typec: tcpci: don't touch CC line if it's Vconn source - usb: typec: tcpm: Do not disconnect while receiving VBUS off - usb: typec: tcpm: Do not disconnect when receiving VSAFE0V - mt76: connac: introduce MCU_CE_CMD macro - jbd2: export jbd2_journal_[grab|put]_journal_head - ocfs2: fix a deadlock when commit trans - sched/membarrier: Fix membarrier-rseq fence command missing from query bitmask - PCI/sysfs: Find shadow ROM before static attribute initialization - [x86] MCE/AMD: Allow thresholding interface updates after init - [x86] cpu: Add Xeon Icelake-D to list of CPUs that support PPIN - i40e: Increase delay to 1 s after global EMP reset - i40e: Fix issue when maximum queues is exceeded - i40e: Fix queues reservation for XDP - i40e: Fix for failed to init adminq while VF reset - i40e: fix unsigned stat widths - scsi: bnx2fc: Flush destroy_work queue before calling bnx2fc_interface_put() - ipv6_tunnel: Rate limit warning messages - [armel,armhf] 9170/1: fix panic when kasan and kprobe are enabled - net: fix information leakage in /proc/net/ptype - hwmon: (lm90) Mark alert as broken for MAX6646/6647/6649 - hwmon: (lm90) Mark alert as broken for MAX6680 - ping: fix the sk_bound_dev_if match in ping_lookup - ipv4: avoid using shared IP generator for connected sockets - hwmon: (lm90) Reduce maximum conversion rate for G781 - NFSv4: Handle case where the lookup of a directory fails - NFSv4: nfs_atomic_open() can race when looking up a non-regular file - net-procfs: show net devices bound packet types - [arm64] drm/msm: Fix wrong size calculation - [arm64] drm/msm/dsi: Fix missing put_device() call in dsi_get_phy - [arm64] drm/msm/dsi: invalid parameter check in msm_dsi_phy_enable - ipv6: annotate accesses to fn->fn_sernum - NFS: Ensure the server has an up to date ctime before hardlinking - NFS: Ensure the server has an up to date ctime before renaming - [arm64] KVM: arm64: pkvm: Use the mm_ops indirection for cache maintenance - SUNRPC: Don't dereference xprt->snd_task if it's a cookie - netfilter: conntrack: don't increment invalid counter on NF_REPEAT - [powerpc*] 64s: Mask SRR0 before checking against the masked NIP - perf: Fix perf_event_read_local() time - sched/pelt: Relax the sync of util_sum with util_avg - net: phy: broadcom: hook up soft_reset for BCM54616S - ethtool: Fix link extended state for big endian - phylib: fix potential use-after-free - rxrpc: Adjust retransmission backoff - [arm64] efi/libstub: arm64: Fix image check alignment at entry - io_uring: fix bug in slow unregistering of nodes - block: fix memory leak in disk_register_independent_access_ranges - [x86] Drivers: hv: balloon: account for vmbus packet header in max_pkt_size - hwmon: (lm90) Re-enable interrupts after alert clears - hwmon: (lm90) Mark alert as broken for MAX6654 - hwmon: (lm90) Fix sysfs and udev notifications - hwmon: (adt7470) Prevent divide by zero in adt7470_fan_write() - ipv4: fix ip option filtering for locally generated fragments - net/smc: Transitional solution for clcsock race issue - video: hyperv_fb: Fix validation of screen resolution - hwmon: (nct6775) Fix crash in clear_caseopen - [arm64] drm/msm/hdmi: Fix missing put_device() call in msm_hdmi_get_phy - [arm64] drm/msm/dpu: invalid parameter check in dpu_setup_dspp_pcc - [arm64] drm/msm/a6xx: Add missing suspend_count increment - yam: fix a memory leak in yam_siocdevprivate() - [armhf] net: cpsw: Properly initialise struct page_pool_params - [arm64] net: hns3: handle empty unknown interrupt for VF - sch_htb: Fail on unsupported parameters when offload is requested - ceph: put the requests/sessions when it fails to alloc memory - gve: Fix GFP flags when allocing pages - Revert "ipv6: Honor all IPv6 PIO Valid Lifetime values" - net: bridge: vlan: fix single net device option dumping - ipv4: raw: lock the socket in raw_bind() - ipv4: tcp: send zero IPID in SYNACK messages - ipv4: remove sparse error in ip_neigh_gw4() - net: bridge: vlan: fix memory leak in __allowed_ingress - dt-bindings: can: tcan4x5x: fix mram-cfg RX FIFO config - perf/core: Fix cgroup event list management - [arm64] usb: dwc3: xilinx: fix uninitialized return value - [x86] KVM: nVMX: Rename vmcs_to_field_offset{,_table} - [x86] KVM: nVMX: Implement evmcs_field_offset() suitable for handle_vmread() - [x86] KVM: nVMX: Allow VMREAD when Enlightened VMCS is in use - block: Fix wrong offset in bio_truncate() https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.6 - PCI: pciehp: Fix infinite loop in IRQ handler upon power fault - [arm*] drm/vc4: hdmi: Make sure the device is powered with CEC - cgroup-v1: Require capabilities to set release_agent (CVE-2022-0492) - Revert "mm/gup: small refactoring: simplify try_grab_page()" - net: phy: Fix qca8081 with speeds lower than 2.5Gb/s - ovl: don't fail copy up if no fileattr support on upper - lockd: fix server crash on reboot of client holding lock - lockd: fix failure to cleanup client locks - net/mlx5e: TC, Reject rules with drop and modify hdr action - net/mlx5: Bridge, take rtnl lock in init error handler - net/mlx5e: Fix handling of wrong devices during bond netevent - net/mlx5: Use del_timer_sync in fw reset flow of halting poll - net/mlx5e: Fix module EEPROM query - net/mlx5e: TC, Reject rules with forward and drop actions - net/mlx5: Fix offloading with ESWITCH_IPV4_TTL_MODIFY_ENABLE - net/mlx5e: Don't treat small ceil values as unlimited in HTB offload - net/mlx5: Bridge, Fix devlink deadlock on net namespace deletion - net/mlx5e: Avoid field-overflowing memcpy() - net/mlx5e: Fix wrong calculation of header index in HW_GRO - net/mlx5e: Fix broken SKB allocation in HW-GRO - net/mlx5: E-Switch, Fix uninitialized variable modact - net/mlx5e: Avoid implicit modify hdr for decap drop rule - ipheth: fix EOVERFLOW in ipheth_rcvbulk_callback - i40e: Fix reset bw limit when DCB enabled with 1 TC - i40e: Fix reset path while removing the driver - [amd64,arm64] net: amd-xgbe: ensure to reset the tx_timer_active flag - [amd64,arm64] net: amd-xgbe: Fix skb data length underflow - fanotify: Fix stale file descriptor in copy_event_to_user() - net: sched: fix use-after-free in tc_new_tfilter() - rtnetlink: make sure to refresh master_dev/m_ops in __rtnl_newlink() - bpf: Fix possible race in inc_misses_counter - cpuset: Fix the bug that subpart_cpus updated wrongly in update_cpumask() - e1000e: Handshake with CSME starts from ADL platforms - af_packet: fix data-race in packet_setsockopt / packet_setsockopt - tcp: fix mem under-charging with zerocopy sendmsg() - tcp: add missing tcp_skb_can_collapse() test in tcp_shift_skb_data() - ovl: fix NULL pointer dereference in copy up warning https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.7 - [arm*] Revert "drm/vc4: hdmi: Make sure the device is powered with CEC" - [arm*] Revert "drm/vc4: hdmi: Make sure the device is powered with CEC" again . [ Salvatore Bonaccorso ] * Set ABI to 1 . linux (5.16.4-1~exp1) experimental; urgency=medium . * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.4 - io_uring: fix not released cached task refs - bnx2x: Utilize firmware 7.13.21.0 - bnx2x: Invalidate fastpath HSI version for VFs - memcg: better bounds on the memcg stats updates - rcu: Tighten rcu_advance_cbs_nowake() checks - select: Fix indefinitely sleeping task in poll_schedule_timeout() - [arm64] bpf: Remove 128MB limit for BPF JIT programs . * objtool: check: give big enough buffer for pv_ops (Closes: #1004495) * Refresh "firmware: Remove redundant log messages from drivers" * [rt] Refresh "mm/memcg: Protect per-CPU counter by disabling preemption on PREEMPT_RT where needed." . linux (5.16.3-1~exp1) experimental; urgency=medium . * New upstream release: https://kernelnewbies.org/Linux_5.16 * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.1 - bpf: Fix out of bounds access from invalid *_or_null type verification (CVE-2022-23222) https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.2 https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.3 - netfilter: nft_payload: do not update layer 4 checksum when mangling fragments (Closes: #1002706) . [ Helmut Grohne ] * Multiarchify python build-depends. (Closes: #983757) . [ Ben Hutchings ] * linux-perf: Fix detection of libperl and libpython in cross-build * debian/README.source: Tag signatures are automatically verified * [rt] trace: Enable OSNOISE_TRACER, TIMERLAT_TRACER, HIST_TRIGGERS * d/bin/git-tag-gpg-wrapper, debian/upstream: Use ASCII-armored keyring * d/watch: Rewrite to find all upstream versions through Git * d/bin/genorig.py, d/README.source: Only support Git as upstream * d/bin/genorig.py, d/README.source: Add support for remote upstream repos * lintian: Refresh lintian-overrides * d/copyright: Fix license name with spaces in it * d/copyright: Update for removed and renamed source files * d/tests/selftests: Use $AUTOPKGTEST_TMP instead of $ADTTMP * Fix missing user-space hardening: - d/rules.real: Define KBUILD_HOST{C,LD}FLAGS for sub-make - linux-kbuild: Build modpost with standard CPPFLAGS - cpupower: Build with standard CPPFLAGS - usbip: Build with standard CPPFLAGS - objtool: Build with standard CFLAGS and CPPFLAGS - tools/perf: Define DEBUG=0 for sub-make so libapi doesn't use wrong flags - libapi: Define _FORTIFY_SOURCE as 2, not empty - tools/perf: Fix missing LDFLAGS for some programs * d/rules: Tell blhc to ignore missing flags for perf-read-vdso* helpers * d/rules: Tell blhc to ignore kernel compilation * d/rules: Filter out -s option so that Kbuild is not silent * d/bin/gencontrol.py, d/lib/python: Use classes for build restriction formulae * d/bin/gencontrol.py, d/rules.real: Replace DEBUG variable with if_package * Introduce pkg.linux.quick build profile for quicker CI builds * d/salsa-ci.yml: Add CI config using some of the common pipeline * d/salsa-ci.yml, d/tests/python: Only run static checks in CI * d/salsa-ci.yml: Run kconfigeditor2 as kconfig static check * d/rules, d/salsa-ci.yml: Enable blhc, ignoring terse output * bpftool, objtool, usbip: Always build with V=1 so blhc can check them * d/salsa-ci.yml: Use per-release cache of orig tarballs * linux-perf: Build a single unversioned package of perf, as it is no longer necessary to match the kernel version . [ Vincent Blut ] * drivers/net/wireless/realtek/rtw89: Enable RTW89 and RTW89_8852AE as modules (Closes: #1004095) . [ Aurelien Jarno ] * [riscv64] Add support for SBI SRST extension . [ YunQiang Su ] * [mips*/generic] Change zload address for QEMU compatibility. . [ Salvatore Bonaccorso ] * [rt] Update to 5.16.2-rt18 * [rt] Update to 5.16.2-rt19 * [x86] drm/i915: Flush TLBs before releasing backing store (CVE-2022-0330) * drm/vmwgfx: Fix stale file descriptors on failed usercopy (CVE-2022-22942) . [ Bastian Blank ] * Build-depend on pahole after rename from dwarves. * Remove remaining aufs patches for good. . linux (5.16~rc8-1~exp1) experimental; urgency=medium . * New upstream release candidate . [ YunQiang Su ] * [mips*] unify installer flavors * [mips*] add generic platform and remove 5kc-malta from 32bit ports . [ Alper Nebi Yasak ] * [armhf,arm64] drivers/gpu/drm/panel: Enable DRM_PANEL_EDP as module * [arm64] Include panel-edp in fb-modules udeb . [ Noah Meyerhans ] * net: Use fq_codel as the default network qdisc (Closes: #890343) . [ Salvatore Bonaccorso ] * [rt] Update to 5.16-rc8-rt13 . linux (5.16~rc7-1~exp1) experimental; urgency=medium . * New upstream release candidate . [ Uwe Kleine-König ] * [arm64] enable DRM_VMWGFX_FBCON to get a tty to login in the absence of a graphical login manager. . [ Vincent Blut ] * [x86] drivers/platform/surface/aggregator: Enable SURFACE_AGGREGATOR as module (Closes: #1002460) * [x86] drivers/platform/surface: Enable SURFACE_3_POWER_OPREGION, SURFACE_ACPI_NOTIFY, SURFACE_AGGREGATOR_REGISTRY, SURFACE_DTX, SURFACE_GPE, SURFACE_HOTPLUG and SURFACE_PLATFORM_PROFILE as modules * [x86] drivers/hid/surface-hid: Enable SURFACE_HID and SURFACE_KBD as modules * [x86] drivers/power/supply: Enable BATTERY_SURFACE and CHARGER_SURFACE as modules . [ Salvatore Bonaccorso ] * [rt] Update to 5.16-rc6-rt12 * [x86] drivers/firmware/google: Re-enable GOOGLE_FIRMWARE (Closes: #947179) . linux (5.16~rc6-1~exp1) experimental; urgency=medium . * New upstream release candidate . [ Aurelien Jarno ] * [riscv64] Improve HiFive Unmatched support: enable INPUT_DA9063_ONKEY, MFD_DA9063, REGULATOR_DA9063, RTC_DRV_DA9063, DA9063_WATCHDOG. . [ Salvatore Bonaccorso ] * xen/blkfront: harden blkfront against event channel storms (CVE-2021-28711) * xen/netfront: harden netfront against event channel storms (CVE-2021-28712) * xen/console: harden hvc_xen against event channel storms (CVE-2021-28713) * xen/netback: fix rx queue stall detection (CVE-2021-28714) * xen/netback: don't queue unlimited number of packages (CVE-2021-28715) . linux (5.16~rc5-1~exp1) experimental; urgency=medium . * New upstream release candidate - nfsd: fix use-after-free due to delegation race (Closes: #988044) . [ Salvatore Bonaccorso ] * [rt] Update to 5.16-rc5-rt10 * Refresh "Export symbols needed by Android drivers" * net/tls: Enable TLS_DEVICE (Closes: #1001731) . linux (5.16~rc4-1~exp1) experimental; urgency=medium . * New upstream release candidate . [ Salvatore Bonaccorso ] * [rt] Update to 5.16-rc4-rt8 * Makefile: Do not quote value for CONFIG_CC_IMPLICIT_FALLTHROUGH (Closes: #1001083) * [arm64] drivers/iio/adc: Enable QCOM_SPMI_IADC, QCOM_SPMI_VADC and ROCKCHIP_SARADC as modules (Closes: #1001080) * [armhf] drivers/iio/adc: Enable ASPEED_ADC, EXYNOS_ADC, ROCKCHIP_SARADC, TI_AM335X_ADC and TWL4030_MADC as modules (Closes: #1001080) . linux (5.16~rc3-1~exp1) experimental; urgency=medium . * New upstream release candidate . [ Salvatore Bonaccorso ] * [rt] Update to 5.16-rc2-rt4 * [arm64] drivers/firmware/efi: Enable EFI_GENERIC_STUB_INITRD_CMDLINE_LOADER (Closes: #997907) * liblockdep: Remove code to build liblockdep packages * [rt] Update to 5.16-rc3-rt5 . [ Uwe Kleine-König ] * [arm*] Enable support for Raspberry Pi POE hat (PWM_RASPBERRYPI_POE) * [arm*] Enable suport for pinctrl-based I2C multiplexer (I2C_MUX_PINCTRL). These are used (among others) on the Raspberry Pi CM4 IO Board. . linux (5.16~rc1-1~exp1) experimental; urgency=medium . * New upstream release candidate . [ Salvatore Bonaccorso ] * [rt] Update to 5.16-rc1-rt2 * fs/ksmbd: Enable SMB_SERVER as module (Closes: #998835) . [ Aurelien Jarno ] * [riscv64] Enable VIRTUALIZATION and KVM.
-
Lorenzo "Palinuro" Faletra authored
-
- 15 Feb, 2022 1 commit
-
-
Lorenzo "Palinuro" Faletra authored
linux (5.15.15-15parrot2) parrot-updates; urgency=medium . * Import Debian backports settings.
-
- 03 Feb, 2022 2 commits
-
-
Lorenzo "Palinuro" Faletra authored
linux (5.15.15-15parrot1) parrot-updates; urgency=medium . * Import new Debian release. * Import Parrot patches and customizations. . linux (5.15.15-2) unstable; urgency=high . [ Bastian Blank ] * Build-depend on pahole after rename from dwarves. . [ Salvatore Bonaccorso ] * [x86] mwifiex: Fix skb_over_panic in mwifiex_usb_recv() (CVE-2021-43976) * [x86] drm/i915: Flush TLBs before releasing backing store (CVE-2022-0330) * drm/vmwgfx: Fix stale file descriptors on failed usercopy (CVE-2022-22942) * ucount: Make get_ucount a safe get_user replacement (CVE-2022-24122) . linux (5.15.15-1) unstable; urgency=high . * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.6 - scsi: sd: Fix sd_do_mode_sense() buffer length handling (Closes: #1001559) - ACPI: Get acpi_device's parent from the parent field - ACPI: CPPC: Add NULL pointer check to cppc_get_perf() - USB: serial: pl2303: fix GC type detection - USB: serial: option: add Telit LE910S1 0x9200 composition - USB: serial: option: add Fibocom FM101-GL variants - [arm*] usb: dwc2: gadget: Fix ISOC flow for elapsed frames - [arm*] usb: dwc2: hcd_queue: Fix use of floating point literal - [arm64,armhf] usb: dwc3: leave default DMA for PCI devices - [arm64,armhf] usb: dwc3: core: Revise GHWPARAMS9 offset - [arm64,armhf] usb: dwc3: gadget: Ignore NoStream after End Transfer - [arm64,armhf] usb: dwc3: gadget: Check for L1/L2/U3 for Start Transfer - [arm64,armhf] usb: dwc3: gadget: Fix null pointer exception - net: usb: Correct PHY handling of smsc95xx - net: nexthop: fix null pointer dereference when IPv6 is not enabled - [arm64,armhf] usb: chipidea: ci_hdrc_imx: fix potential error pointer dereference in probe - [x86,arm64] usb: typec: fusb302: Fix masking of comparator and bc_lvl interrupts - [arm64,armhf] usb: xhci: tegra: Check padctrl interrupt presence in device tree - usb: hub: Fix usb enumeration issue due to address0 race - usb: hub: Fix locking issues with address0_mutex - binder: fix test regression due to sender_euid change - ALSA: ctxfi: Fix out-of-range access - [x86] ALSA: hda/realtek: Add quirk for ASRock NUC Box 1100 - [x86] ALSA: hda/realtek: Fix LED on HP ProBook 435 G7 - media: cec: copy sequence field for the reply - [hppa] Revert "parisc: Fix backtrace to always include init funtion names" (regression in 5.15.3) - HID: wacom: Use "Confidence" flag to prevent reporting invalid contacts - staging: rtl8192e: Fix use after free in _rtl92e_pci_disconnect() - staging: r8188eu: Use kzalloc() with GFP_ATOMIC in atomic context - staging: r8188eu: Fix breakage introduced when 5G code was removed - staging: r8188eu: use GFP_ATOMIC under spinlock - staging: r8188eu: fix a memory leak in rtw_wx_read32() - xen: don't continue xenstore initialization in case of errors - xen: detect uninitialized xenbus in xenbus_init - io_uring: correct link-list traversal locking - io_uring: fail cancellation for EXITING tasks - io_uring: fix link traversal locking - drm/amdgpu: IH process reset count when restart - drm/amdgpu/pm: fix powerplay OD interface (regression in 5.15) - drm/nouveau: recognise GA106 - [powerpc*] KVM: PPC: Book3S HV: Prevent POWER7/8 TLB flush flushing SLB - tracing/uprobe: Fix uprobe_perf_open probes iteration - tracing: Fix pid filtering when triggers are attached - [arm64,armhf] mmc: sdhci-esdhc-imx: disable CMDQ support - mmc: sdhci: Fix ADMA for PAGE_SIZE >= 64KiB - [armhf] mdio: aspeed: Fix "Link is Down" issue - [arm64] mm: Fix VM_BUG_ON(mm != &init_mm) for trans_pgd - [x86] cpufreq: intel_pstate: Fix active mode offline/online EPP handling - [powerpc] Fix hardlockup on vmap stack overflow - iomap: Fix inline extent handling in iomap_readpage - NFSv42: Fix pagecache invalidation after COPY/CLONE - [arm64] PCI: aardvark: Deduplicate code in advk_pcie_rd_conf() - [arm64] PCI: aardvark: Implement re-issuing config requests on CRS response - [arm64] PCI: aardvark: Simplify initialization of rootcap on virtual bridge - [arm64] PCI: aardvark: Fix link training - drm/amd/display: Fix OLED brightness control on eDP - proc/vmcore: fix clearing user buffer by properly using clear_user() - [x86] ASoC: SOF: Intel: hda: fix hotplug when only codec is suspended - netfilter: ctnetlink: fix filtering with CTA_TUPLE_REPLY - netfilter: ctnetlink: do not erase error code with EINVAL - netfilter: ipvs: Fix reuse connection if RS weight is 0 - netfilter: flowtable: fix IPv6 tunnel addr match - media: v4l2-core: fix VIDIOC_DQEVENT handling on non-x86 - [armhf] firmware: arm_scmi: Fix null de-reference on error path - ASoC: topology: Add missing rwsem around snd_ctl_remove() calls - net: ieee802154: handle iftypes as u32 - [armhf] firmware: arm_scmi: Fix base agent discover response - [armhf] firmware: arm_scmi: pm: Propagate return value to caller - [armhf] ASoC: stm32: i2s: fix 32 bits channel length without mclk - NFSv42: Don't fail clone() unless the OP_CLONE operation failed - [armhf] socfpga: Fix crash with CONFIG_FORTIRY_SOURCE - drm/nouveau/acr: fix a couple NULL vs IS_ERR() checks - scsi: qla2xxx: edif: Fix off by one bug in qla_edif_app_getfcinfo() - scsi: mpt3sas: Fix kernel panic during drive powercycle test - scsi: mpt3sas: Fix system going into read-only mode - scsi: mpt3sas: Fix incorrect system timestamp - [arm*] drm/vc4: fix error code in vc4_create_object() - [armhf] drm/aspeed: Fix vga_pw sysfs output - HID: input: Fix parsing of HID_CP_CONSUMER_CONTROL fields - HID: input: set usage type to key on keycode remap - HID: magicmouse: prevent division by 0 on scroll - iavf: Prevent changing static ITR values if adaptive moderation is on - iavf: Fix refreshing iavf adapter stats on ethtool request - iavf: Fix VLAN feature flags after VFR - [x86] ALSA: intel-dsp-config: add quirk for JSL devices based on ES8336 codec - mptcp: fix delack timer - mptcp: use delegate action to schedule 3rd ack retrans - af_unix: fix regression in read after shutdown - [arm64,armhf] firmware: smccc: Fix check for ARCH_SOC_ID not implemented - ipv6: fix typos in __ip6_finish_output() - nfp: checking parameter process for rx-usecs/tx-usecs is invalid - net: stmmac: retain PTP clock time during SIOCSHWTSTAMP ioctls - net: ipv6: add fib6_nh_release_dsts stub - net: nexthop: release IPv6 per-cpu dsts when replacing a nexthop group - ice: fix vsi->txq_map sizing - ice: avoid bpf_prog refcount underflow - scsi: core: sysfs: Fix setting device state to SDEV_RUNNING - scsi: scsi_debug: Zero clear zones at reset write pointer - erofs: fix deadlock when shrink erofs slab - i2c: virtio: disable timeout handling - net/smc: Ensure the active closing peer first closes clcsock - [arm64,armhf] net: marvell: mvpp2: increase MTU limit when XDP enabled - [x86] cpufreq: intel_pstate: Add Ice Lake server to out-of-band IDs - nvmet-tcp: fix incomplete data digest send - [x86] drm/hyperv: Fix device removal on Gen1 VMs - [arm64] uaccess: avoid blocking within critical sections - [armhf] net/ncsi : Add payload to be 32-bit aligned to fix dropped packets - PM: hibernate: use correct mode for swsusp_close() - drm/amd/display: Fix DPIA outbox timeout after GPU reset - drm/amd/display: Set plane update flags for all planes in reset - tcp_cubic: fix spurious Hystart ACK train detections for not-cwnd-limited flows - lan743x: fix deadlock in lan743x_phy_link_status_change() - net: phylink: Force link down and retrigger resolve on interface change - net: phylink: Force retrigger in case of latched link-fail indicator - net/smc: Fix NULL pointer dereferencing in smc_vlan_by_tcpsk() - net/smc: Fix loop in smc_listen - nvmet: use IOCB_NOWAIT only if the filesystem supports it - igb: fix netpoll exit with traffic - [mips*el/loongson-3] fix FTLB configuration - tls: splice_read: fix record type check - tls: splice_read: fix accessing pre-processed records - tls: fix replacing proto_ops - net: stmmac: Disable Tx queues when reconfiguring the interface - net/sched: sch_ets: don't peek at classes beyond 'nbands' - ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce() - net: vlan: fix underflow for the real_dev refcnt - net/smc: Don't call clcsock shutdown twice when smc shutdown - [arm64] net: hns3: fix VF RSS failed problem after PF enable multi-TCs - [arm64] net: hns3: fix incorrect components info of ethtool --reset command - locking/rwsem: Make handoff bit handling more consistent - perf: Ignore sigtrap for tracepoints destined for other tasks - sched/scs: Reset task stack state in bringup_cpu() - [arm64] iommu/rockchip: Fix PAGE_DESC_HI_MASKs for RK3568 - [x86] iommu/vt-d: Fix unmap_pages support - f2fs: quota: fix potential deadlock - f2fs: set SBI_NEED_FSCK flag when inconsistent node block found - [riscv64] dts: microchip: fix board compatible - [riscv64] dts: microchip: drop duplicated MMC/SDHC node - cifs: nosharesock should not share socket with future sessions - ceph: properly handle statfs on multifs setups - [amd64] iommu/amd: Clarify AMD IOMMUv2 initialization messages - vhost/vsock: fix incorrect used length reported to the guest - tracing: Check pid filtering when creating events - cifs: nosharesock should be set on new server - io_uring: fix soft lockup when call __io_remove_buffers - [armhf] firmware: arm_scmi: Fix type error assignment in voltage protocol - [armhf] firmware: arm_scmi: Fix type error in sensor protocol - blk-mq: cancel blk-mq dispatch work in both blk_cleanup_queue and disk_release() - block: avoid to quiesce queue in elevator_init_mq - drm/amdgpu/gfx10: add wraparound gpu counter check for APUs as well - drm/amdgpu/gfx9: switch to golden tsc registers for renoir+ https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.7 - ALSA: usb-audio: Restrict rates for the shared clocks - ALSA: usb-audio: Rename early_playback_start flag with lowlatency_playback - ALSA: usb-audio: Disable low-latency playback for free-wheel mode - ALSA: usb-audio: Disable low-latency mode for implicit feedback sync - ALSA: usb-audio: Check available frames for the next packet size - ALSA: usb-audio: Add spinlock to stop_urbs() - ALSA: usb-audio: Improved lowlatency playback support - ALSA: usb-audio: Avoid killing in-flight URBs during draining - ALSA: usb-audio: Fix packet size calculation regression - ALSA: usb-audio: Less restriction for low-latency playback mode - ALSA: usb-audio: Switch back to non-latency mode at a later point - ALSA: usb-audio: Don't start stream for capture at prepare - gfs2: release iopen glock early in evict - gfs2: Fix length of holes reported at end-of-file - [powerpc*] pseries/ddw: Revert "Extend upper limit for huge DMA window for persistent memory" - [powerpc*] pseries/ddw: Do not try direct mapping with persistent memory and one window - mac80211: do not access the IV when it was stripped - mac80211: fix throughput LED trigger - [x86] hyperv: Move required MSRs check to initial platform probing - net/smc: Transfer remaining wait queue entries during fallback - net: return correct error code - [x86] platform/x86: dell-wmi-descriptor: disable by default - [x86] platform/x86: thinkpad_acpi: Add support for dual fan control - [x86] platform/x86: thinkpad_acpi: Fix WWAN device disabled issue after S3 deep - btrfs: silence lockdep when reading chunk tree during mount - btrfs: check-integrity: fix a warning on write caching disabled disk - thermal: core: Reset previous low and high trip during thermal zone init - scsi: iscsi: Unblock session then wake up error handler - net: usb: r8152: Add MAC passthrough support for more Lenovo Docks - drm/amd/pm: Remove artificial freq level on Navi1x - drm/amd/amdkfd: Fix kernel panic when reset failed and been triggered again - drm/amd/amdgpu: fix potential memleak - [x86] ata: ahci: Add Green Sardine vendor ID as board_ahci_mobile - ata: libahci: Adjust behavior when StorageD3Enable _DSD is set - [arm64] ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in hns_dsaf_ge_srst_by_port() - ipv6: check return value of ipv6_skip_exthdr - [alpha] net: tulip: de4x5: fix the problem that the array 'lp->phy[8]' may be out of bound - [alpha] net: ethernet: dec: tulip: de4x5: fix possible array overflows in type3_infoblock() - perf sort: Fix the 'weight' sort key behavior - perf sort: Fix the 'ins_lat' sort key behavior - perf sort: Fix the 'p_stage_cyc' sort key behavior - [arm*] perf inject: Fix ARM SPE handling - perf hist: Fix memory leak of a perf_hpp_fmt - perf report: Fix memory leaks around perf_tip() - tracing: Don't use out-of-sync va_list in event printing - net/smc: Avoid warning of possible recursive locking - ACPI: Add stubs for wakeup handler functions - net/tls: Fix authentication failure in CCM mode - vrf: Reset IPCB/IP6CB when processing outbound pkts in vrf dev xmit - kprobes: Limit max data_size of the kretprobe instances - rt2x00: do not mark device gone on EPROTO errors during start - ipmi: Move remove_work to dedicated workqueue - cpufreq: Fix get_cpu_device() failure in add_cpu_dev_symlink() - iwlwifi: mvm: retry init flow if failed - [s390x] pci: move pseudo-MMIO to prevent MIO overlap - scsi: lpfc: Fix non-recovery of remote ports following an unsolicited LOGO - scsi: ufs: ufs-pci: Add support for Intel ADL - ipv6: fix memory leak in fib6_rule_suppress - drm/amd/display: Allow DSC on supported MST branch devices - [x86] drm/i915/dp: Perform 30ms delay after source OUI write - [x86] KVM: fix avic_set_running for preemptable kernels - KVM: Disallow user memslot with size that exceeds "unsigned long" - [x86] KVM: x86/mmu: Fix TLB flush range when handling disconnected pt - KVM: Ensure local memslot copies operate on up-to-date arch-specific data - [x86] KVM: x86: ignore APICv if LAPIC is not enabled - [x86] KVM: nVMX: Emulate guest TLB flush on nested VM-Enter with new vpid12 - [x86] KVM: nVMX: Flush current VPID (L1 vs. L2) for KVM_REQ_TLB_FLUSH_GUEST - [x86] KVM: nVMX: Abide to KVM_REQ_TLB_FLUSH_GUEST request on nested vmentry/vmexit - [x86] KVM: VMX: prepare sync_pir_to_irr for running with APICv disabled - [x86] KVM: x86: Use a stable condition around all VT-d PI paths - [x86] KVM: MMU: shadow nested paging does not have PKU - [arm64] KVM: arm64: Avoid setting the upper 32 bits of TCR_EL2 and CPTR_EL2 to 1 - [x86] KVM: X86: Use vcpu->arch.walk_mmu for kvm_mmu_invlpg() - [x86] KVM: x86: check PIR even for vCPUs with disabled APICv - tracing/histograms: String compares should not care about signed values - [arm64,armhf] net: dsa: mv88e6xxx: Fix application of erratum 4.8 for 88E6393X - [arm64,armhf] net: dsa: mv88e6xxx: Drop unnecessary check in mv88e6393x_serdes_erratum_4_6() - [arm64,armhf] net: dsa: mv88e6xxx: Save power by disabling SerDes trasmitter and receiver - [arm64,armhf] net: dsa: mv88e6xxx: Add fix for erratum 5.2 of 88E6393X family - [arm64,armhf] net: dsa: mv88e6xxx: Fix inband AN for 2500base-x on 88E6393X family - [arm64,armhf] net: dsa: mv88e6xxx: Link in pcs_get_state() if AN is bypassed - wireguard: allowedips: add missing __rcu annotation to satisfy sparse - wireguard: device: reset peer src endpoint when netns exits - wireguard: receive: use ring buffer for incoming handshakes - wireguard: receive: drop handshakes if queue lock is contended - wireguard: ratelimiter: use kvcalloc() instead of kvzalloc() - [armhf] i2c: stm32f7: flush TX FIFO upon transfer errors - [armhf] i2c: stm32f7: recover the bus on access timeout - [armhf] i2c: stm32f7: stop dma transfer in case of NACK - tcp: fix page frag corruption on page fault - net: qlogic: qlcnic: Fix a NULL pointer dereference in qlcnic_83xx_add_rings() - net: mpls: Fix notifications when deleting a device - siphash: use _unaligned version by default - [arm64] ftrace: add missing BTIs - iwlwifi: fix warnings produced by kernel debug options - net/mlx5e: IPsec: Fix Software parser inner l3 type setting in case of encapsulation - net/mlx4_en: Fix an use-after-free bug in mlx4_en_try_alloc_resources() - [armhf] net: dsa: b53: Add SPI ID table (regression in 5.15) - mt76: mt7915: fix NULL pointer dereference in mt7915_get_phy_mode - [arm64,armhf] ASoC: tegra: Fix wrong value type in ADMAIF - [arm64,armhf] ASoC: tegra: Fix wrong value type in I2S - [arm64,armhf] ASoC: tegra: Fix wrong value type in DMIC - [arm64,armhf] ASoC: tegra: Fix wrong value type in DSPK - [arm64,armhf] ASoC: tegra: Fix kcontrol put callback in ADMAIF - [arm64,armhf] ASoC: tegra: Fix kcontrol put callback in I2S - [arm64,armhf] ASoC: tegra: Fix kcontrol put callback in DMIC - [arm64,armhf] ASoC: tegra: Fix kcontrol put callback in DSPK - [arm64,armhf] ASoC: tegra: Fix kcontrol put callback in AHUB - rxrpc: Fix rxrpc_peer leak in rxrpc_look_up_bundle() - rxrpc: Fix rxrpc_local leak in rxrpc_lookup_peer() - [x86] ALSA: intel-dsp-config: add quirk for CML devices based on ES8336 codec - net: stmmac: Avoid DMA_CHAN_CONTROL write if no Split Header support - net: usb: lan78xx: lan78xx_phy_init(): use PHY_POLL instead of "0" if no IRQ is available - [arm64,armhf] net: marvell: mvpp2: Fix the computation of shared CPUs - [arm64] dpaa2-eth: destroy workqueue at the end of remove function - net: annotate data-races on txq->xmit_lock_owner - ipv4: convert fib_num_tclassid_users to atomic_t - net/smc: fix wrong list_del in smc_lgr_cleanup_early - net/rds: correct socket tunable error in rds_tcp_tune() - net/smc: Keep smc_close_final rc during active close - [arm64] drm/msm/a6xx: Allocate enough space for GMU registers - [arm64] drm/msm: Do hw_init() before capturing GPU state - [arm*] drm/vc4: kms: Wait for the commit before increasing our clock rate - [arm*] drm/vc4: kms: Fix return code check - [arm*] drm/vc4: kms: Add missing drm_crtc_commit_put - [arm*] drm/vc4: kms: Clear the HVS FIFO commit pointer once done - [arm*] drm/vc4: kms: Don't duplicate pending commit - [arm*] drm/vc4: kms: Fix previous HVS commit wait - atlantic: Increase delay for fw transactions - atlatnic: enable Nbase-t speeds with base-t - atlantic: Fix to display FW bundle version instead of FW mac version. - atlantic: Add missing DIDs and fix 115c. - atlantic: Remove Half duplex mode speed capabilities. - atlantic: Fix statistics logic for production hardware - atlantic: Remove warn trace message. - [x86] KVM: x86/mmu: Skip tlb flush if it has been done in zap_gfn_range() - [x86] KVM: x86/mmu: Pass parameter flush as false in kvm_tdp_mmu_zap_collapsible_sptes() - [arm64] drm/msm/devfreq: Fix OPP refcnt leak - [arm64] drm/msm: Fix mmap to include VM_IO and VM_DONTDUMP - [arm64] drm/msm: Fix wait_fence submitqueue leak - [arm64] drm/msm: Restore error return on invalid fence - iwlwifi: Fix memory leaks in error handling path - [x86] KVM: X86: Fix when shadow_root_level=5 && guest root_level<4 - [x86] KVM: SEV: initialize regions_list of a mirror VM - net/mlx5e: Fix missing IPsec statistics on uplink representor - net/mlx5: Move MODIFY_RQT command to ignore list in internal error state - net/mlx5: E-switch, Respect BW share of the new group - net/mlx5: E-Switch, fix single FDB creation on BlueField - net/mlx5: E-Switch, Check group pointer before reading bw_share value - [x86] KVM: x86/pmu: Fix reserved bits for AMD PerfEvtSeln register - [x86] KVM: VMX: Set failure code in prepare_vmcs02() - io-wq: don't retry task_work creation failure on fatal conditions - [x86] sev: Fix SEV-ES INS/OUTS instructions for word, dword, and qword - [x86] entry: Add a fence for kernel entry SWAPGS in paranoid_entry() - [x86] entry: Use the correct fence macro after swapgs in kernel CR3 - [x86] xen: Add xenpv_restore_regs_and_return_to_usermode() - preempt/dynamic: Fix setup_preempt_mode() return value - sched/uclamp: Fix rq->uclamp_max not set on first enqueue - [x86] KVM: SEV: Return appropriate error codes if SEV-ES scratch setup fails - [x86] KVM: x86/mmu: Rename slot_handle_leaf to slot_handle_level_4k - [x86] KVM: x86/mmu: Remove spurious TLB flushes in TDP MMU zap collapsible path - net/mlx5e: Rename lro_timeout to packet_merge_timeout - net/mlx5e: Rename TIR lro functions to TIR packet merge functions - net/mlx5e: Sync TIR params updates against concurrent create/modify - [hppa] Fix KBUILD_IMAGE for self-extracting kernel - [hppa] Fix "make install" on newer debian releases - [hppa] Mark cr16 CPU clocksource unstable on all SMP machines - vgacon: Propagate console boot parameters before calling `vc_resize' - xhci: Fix commad ring abort, write all 64 bits to CRCR register. - USB: NO_LPM quirk Lenovo Powered USB-C Travel Hub - [x86,arm64] usb: typec: tcpm: Wait in SNK_DEBOUNCED until disconnect - [x86] tsc: Add a timer to make sure TSC_adjust is always checked - [x86] tsc: Disable clocksource watchdog for TSC on qualified platorms - [amd64] mm: Map all kernel memory into trampoline_pgd - [arm64] tty: serial: msm_serial: Deactivate RX DMA for polling support - [arm*] serial: pl011: Add ACPI SBSA UART match id - [arm64,armhf] serial: tegra: Change lower tolerance baud rate limit for tegra20 and tegra30 - serial: core: fix transmit-buffer reset and memleak - serial: 8250_pci: Fix ACCES entries in pci_serial_quirks array - serial: 8250_pci: rewrite pericom_do_set_divisor() - serial: 8250: Fix RTS modem control while in rs485 mode https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.8 - usb: gadget: uvc: fix multiple opens - [x86] HID: quirks: Add quirk for the Microsoft Surface 3 type-cover - HID: google: add eel USB id - [x86] HID: intel-ish-hid: ipc: only enable IRQ wakeup when requested - HID: bigbenff: prevent null pointer dereference - HID: wacom: fix problems when device is not a valid USB device - HID: check for valid USB device for many HID drivers - mtd: dataflash: Add device-tree SPI IDs (regression in 5.15) - mmc: spi: Add device-tree SPI IDs - HID: sony: fix error path in probe - [x86] HID: Ignore battery for Elan touchscreen on Asus UX550VE - [x86] platform/x86/intel: hid: add quirk to support Surface Go 3 - [x86] nft_set_pipapo: Fix bucket load in AVX2 lookup routine for six 8-bit groups - IB/hfi1: Insure use of smp_processor_id() is preempt disabled - IB/hfi1: Fix early init panic - IB/hfi1: Fix leak of rcvhdrtail_dummy_kvaddr - can: kvaser_usb: get CAN clock frequency from device - can: kvaser_pciefd: kvaser_pciefd_rx_error_frame(): increase correct stats->{rx,tx}_errors counter - can: sja1000: fix use after free in ems_pcmcia_add_card() - [i386] can: pch_can: pch_can_rx_normal: fix use after free - [arm64,armhf] net: dsa: mv88e6xxx: fix "don't use PHY_DETECT on internal PHY's" - [arm64,armhf] net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports - [x86] sme: Explicitly map new EFI memmap table as encrypted - [x86] platform/x86: amd-pmc: Fix s2idle failures on certain AMD laptops - nfc: fix potential NULL pointer deref in nfc_genl_dump_ses_done - vrf: don't run conntrack on vrf with !dflt qdisc - bpf, sockmap: Attach map progs to psock early for feature probes - bpf: Make sure bpf_disable_instrumentation() is safe vs preemption. - bpf: Fix the off-by-two error in range markings - ice: ignore dropped packets during init - ethtool: do not perform operations on net devices being unregistered - bonding: make tx_rebalance_counter an atomic - nfp: Fix memory leak in nfp_cpp_area_cache_add() - seg6: fix the iif in the IPv6 socket control block - udp: using datalen to cap max gso segments - netfilter: nft_exthdr: break evaluation if setting TCP option fails - netfilter: conntrack: annotate data-races around ct->timeout - iavf: restore MSI state on reset - iavf: Fix reporting when setting descriptor count - IB/hfi1: Correct guard on eager buffer deallocation - devlink: fix netns refcount leak in devlink_nl_cmd_reload() - [arm64,armhf] net: dsa: mv88e6xxx: error handling for serdes_power functions - [arm64] net: dsa: felix: Fix memory leak in felix_setup_mmio_filtering - net/sched: fq_pie: prevent dismantle issue - [arm64,armhf] net: mvpp2: fix XDP rx queues registering - [x86] KVM: x86: Don't WARN if userspace mucks with RCX during string I/O exit - [x86] KVM: x86: Ignore sparse banks size for an "all CPUs", non-sparse IPI req - [x86] KVM: x86: Wait for IPIs to be delivered when handling Hyper-V TLB flush hypercall - timers: implement usleep_idle_range() - mm/slub: fix endianness bug for alloc/free_traces attributes - mm: bdi: initialize bdi_min_ratio when bdi is unregistered - ALSA: ctl: Fix copy of updated id with element read/write - [x86] ALSA: hda/realtek - Add headset Mic support for Lenovo ALC897 platform - [x86] ALSA: hda/realtek: Fix quirk for TongFang PHxTxX1 - ALSA: pcm: oss: Fix negative period/buffer sizes - ALSA: pcm: oss: Limit the period size to 16MB - ALSA: pcm: oss: Handle missing errors in snd_pcm_oss_change_params*() - cifs: Fix crash on unload of cifs_arc4.ko - scsi: qla2xxx: Format log strings only if needed - btrfs: clear extent buffer uptodate when we fail to write it - btrfs: fix re-dirty process of tree-log nodes - btrfs: replace the BUG_ON in btrfs_del_root_ref with proper error handling - btrfs: free exchange changeset on failures - [x86] perf intel-pt: Fix some PGE (packet generation enable/control flow packets) usage - [x86] perf intel-pt: Fix sync state when a PSB (synchronization) packet is found - [x86] perf intel-pt: Fix intel_pt_fup_event() assumptions about setting state type - [x86] perf intel-pt: Fix state setting when receiving overflow (OVF) packet - [x86] perf intel-pt: Fix next 'err' value, walking trace - [x86] perf intel-pt: Fix missing 'instruction' events with 'q' option - [x86] perf intel-pt: Fix error timestamp setting on the decoder error path - md: fix update super 1.0 on rdev size change - nfsd: Fix nsfd startup race (again) - tracefs: Have new files inherit the ownership of their parent - hwmon: (pwm-fan) Ensure the fan going on in .probe() - [arm64] clk: qcom: regmap-mux: fix parent clock lookup - [x86] thermal: int340x: Fix VCoRefLow MMIO bit offset for TGL - drm/syncobj: Deal with signalled fences in drm_syncobj_find_fence. - libata: add horkage for ASMedia 1092 - io_uring: ensure task_work gets run as part of cancelations - wait: add wake_up_pollfree() - binder: use wake_up_pollfree() - signalfd: use wake_up_pollfree() - aio: keep poll requests on waitqueue until completed - aio: fix use-after-free due to missing POLLFREE handling - tracefs: Set all files to the same group ownership as the mount option - [powerpc*] i2c: mpc: Use atomic read and fix break condition - block: fix ioprio_get(IOPRIO_WHO_PGRP) vs setuid(2) - scsi: pm80xx: Do not call scsi_remove_host() in pm8001_alloc() - scsi: scsi_debug: Fix buffer size of REPORT ZONES command - ALSA: usb-audio: Reorder snd_djm_devices[] entries - qede: validate non LSO skb length - PM: runtime: Fix pm_runtime_active() kerneldoc comment - ASoC: rt5682: Fix crash due to out of scope stack vars - [arm64] RDMA/hns: Do not halt commands during reset until later - [arm64] RDMA/hns: Do not destroy QP resources in the hw resetting phase - [x86] hwmon: (dell-smm) Fix warning on /proc/i8k creation error - [arm64] clk: qcom: clk-alpha-pll: Don't reconfigure running Trion - i40e: Fix failed opcode appearing if handling messages from VF - i40e: Fix pre-set max number of queues for VF - bpf, sockmap: Re-evaluate proto ops when psock is removed from sockmap - i40e: Fix NULL pointer dereference in i40e_dbg_dump_desc - [arm64] Revert "PCI: aardvark: Fix support for PCI_ROM_ADDRESS1 on emulated bridge" (regression in 5.15.3) - drm/amd/display: Fix DPIA outbox timeout after S3/S4/reset - perf tools: Fix SMT detection fast read path - net: cdc_ncm: Allow for dwNtbOutMaxSize to be unset or zero - [arm64] net: fec: only clear interrupt of handling queue in fec_enet_rx_queue() - net, neigh: clear whole pneigh_entry at alloc time - net/qla3xxx: fix an error code in ql_adapter_up() - [arm64] Revert "usb: dwc3: dwc3-qcom: Enable tx-fifo-resize property by default" (regression in 5.15) - usb: core: config: fix validation of wMaxPacketValue entries - xhci: Remove CONFIG_USB_DEFAULT_PERSIST to prevent xHCI from runtime suspending - xhci: avoid race between disable slot command and host runtime suspend - iio: gyro: adxrs290: fix data signedness - iio: trigger: Fix reference counting - iio: stk3310: Don't return error code in interrupt handler - iio: mma8452: Fix trigger reference couting - iio: ltr501: Don't return error code in trigger handler - iio: kxsd9: Don't return error code in trigger handler - iio: itg3200: Call iio_trigger_notify_done() on error - iio: adc: axp20x_adc: fix charging current reporting on AXP22x - iio: ad7768-1: Call iio_trigger_notify_done() on error - iio: accel: kxcjk-1013: Fix possible memory leak in probe and remove - misc: rtsx: Avoid mangling IRQ during runtime PM - nvmem: eeprom: at25: fix FRAM byte_len - bus: mhi: pci_generic: Fix device recovery failed issue - bus: mhi: core: Add support for forced PM resume - [armhf] irqchip/aspeed-scu: Replace update_bits with write_bits. - [armhf] irqchip/armada-370-xp: Fix return value of armada_370_xp_msi_alloc() - [armhf] irqchip/armada-370-xp: Fix support for Multi-MSI interrupts - aio: Fix incorrect usage of eventfd_signal_allowed() - [arm64,armhf] irqchip/irq-gic-v3-its.c: Force synchronisation when issuing INVALL - [armhf] clocksource/drivers/dw_apb_timer_of: Fix probe failure https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.9 https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.10 - nfc: fix segfault in nfc_genl_dump_devices_done - [x86] hwmon: (corsair-psu) fix plain integer used as NULL pointer - RDMA: Fix use-after-free in rxe_queue_cleanup - RDMA/mlx5: Fix releasing unallocated memory in dereg MR flow - mtd: rawnand: Fix nand_erase_op delay - mtd: rawnand: Fix nand_choose_best_timings() on unsupported interface - netfs: Fix lockdep warning from taking sb_writers whilst holding mmap_lock - ice: fix FDIR init missing when reset VF - [x86] vmxnet3: fix minimum vectors alloc issue - [arm64] drm/msm: Fix null ptr access msm_ioctl_gem_submit() - [arm64] drm/msm/a6xx: Fix uinitialized use of gpu_scid - [arm64] drm/msm/dsi: set default num_data_lanes - [arm64] drm/msm/dp: Avoid unpowered AUX xfers that caused crashes - [arm64] KVM: arm64: Save PSTATE early on exit - [arm64] Revert "tty: serial: fsl_lpuart: drop earlycon entry for i.MX8QXP" - net/mlx4_en: Update reported link modes for 1/10G - loop: Use pr_warn_once() for loop_control_remove() warning - ALSA: hda: Add Intel DG2 PCI ID and HDMI codec vid - [x86] ALSA: hda/hdmi: fix HDA codec entry table order for ADL-P - [arm64,armhf] i2c: rk3x: Handle a spurious start completion interrupt flag - net: netlink: af_netlink: Prevent empty skb by adding a check on len. - drm/amdgpu: cancel the correct hrtimer on exit - drm/amdgpu: check atomic flag to differeniate with legacy path - drm/amd/display: Fix for the no Audio bug with Tiled Displays - drm/amdkfd: fix double free mem structure - drm/amd/display: add connector type check for CRC source set - drm/amdkfd: process_info lock not needed for svm - tracing: Fix a kmemleak false positive in tracing_map - fuse: make sure reclaim doesn't write the inode - perf inject: Fix itrace space allowed for new attributes https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.11 - [x86] KVM: VMX: clear vmx_x86_ops.sync_pir_to_irr if APICv is disabled - KVM: downgrade two BUG_ONs to WARN_ON_ONCE - [x86] kvm: remove unused ack_notifier callbacks - [x86] KVM: X86: Fix tlb flush for tdp in kvm_invalidate_pcid() - mac80211: fix rate control for retransmitted frames - mac80211: fix regression in SSN handling of addba tx - mac80211: mark TX-during-stop for TX in in_reconfig - mac80211: send ADDBA requests using the tid/queue of the aggregation session - mac80211: validate extended element ID is present - [arm64] firmware: arm_scpi: Fix string overflow in SCPI genpd driver - virtio_ring: Fix querying of maximum DMA mapping size for virtio device - [s390x] entry: fix duplicate tracking of irq nesting level - [s390x] recordmcount.pl: look for jgnop instruction as well as bcrl on s390 - [arm64] dts: ten64: remove redundant interrupt declaration for gpio-keys - ceph: fix up non-directory creation in SGID directories - dm btree remove: fix use after free in rebalance_children() - audit: improve robustness of the audit queue handling - btrfs: convert latest_bdev type to btrfs_device and rename - btrfs: use latest_dev in btrfs_show_devname - btrfs: update latest_dev when we create a sprout device - btrfs: remove stale comment about the btrfs_show_devname - scsi: ufs: core: Retry START_STOP on UNIT_ATTENTION - [x86] drm/i915/hdmi: convert intel_hdmi_to_dev to intel_hdmi_to_i915 - [x86] drm/i915/hdmi: Turn DP++ TMDS output buffers back on in encoder-> shutdown() - [x86] pinctrl: amd: Fix wakeups when IRQ is shared with SCI - [arm64] dts: rockchip: remove mmc-hs400-enhanced-strobe from rk3399-khadas-edge - [arm64] dts: rockchip: fix rk3308-roc-cc vcc-sd supply - [arm64] dts: rockchip: fix rk3399-leez-p710 vcc3v3-lan supply - [arm64] dts: rockchip: fix audio-supply for Rock Pi 4 - [arm64] dts: rockchip: fix poweroff on helios64 - mac80211: track only QoS data frames for admission control - ceph: fix duplicate increment of opened_inodes metric - ceph: initialize pathlen variable in reconnect_caps_cb - [armhf] socfpga: dts: fix qspi node compatible - [arm64] dts: imx8mq: remove interconnect property from lcdif - clk: Don't parent clks until the parent is fully registered - [armhf] soc: imx: Register SoC device only on i.MX boards - iwlwifi: mvm: don't crash on invalid rate w/o STA - virtio/vsock: fix the transport to work with VMADDR_CID_ANY - Revert "drm/fb-helper: improve DRM fbdev emulation device names" - sch_cake: do not call cake_destroy() from cake_init() - inet_diag: fix kernel-infoleak for UDP sockets - netdevsim: don't overwrite read only ethtool parms - [arm64] net: hns3: fix use-after-free bug in hclgevf_send_mbx_msg - [arm64] net: hns3: fix race condition in debugfs - net/sched: sch_ets: don't remove idle classes from the round-robin list - [arm64,armhf] net: dsa: mv88e6xxx: Unforce speed & duplex in mac_link_down() - mptcp: never allow the PM to close a listener subflow - drm/ast: potential dereference of null pointer - [x86] drm/i915/display: Fix an unsigned subtraction which can never be negative. - mac80211: agg-tx: don't schedule_and_wake_txq() under sta->lock - cfg80211: Acquire wiphy mutex on regulatory work - mac80211: fix lookup when adding AddBA extension element - net: stmmac: fix tc flower deletion for VLAN priority Rx steering - flow_offload: return EOPNOTSUPP for the unsupported mpls action type - rds: memory leak in __rds_conn_create() (CVE-2021-45480) - ice: Use div64_u64 instead of div_u64 in adjfine - ice: Don't put stale timestamps in the skb - drm/amd/display: Set exit_optimized_pwr_state for DCN31 - drm/amd/pm: fix a potential gpu_metrics_table memory leak - mptcp: remove tcp ulp setsockopt support - mptcp: clear 'kern' flag from fallback sockets - mptcp: fix deadlock in __mptcp_push_pending() - [arm64,armhf] soc/tegra: fuse: Fix bitwise vs. logical OR warning - igb: Fix removal of unicast MAC filters of VFs - igbvf: fix double free in `igbvf_probe` - igc: Fix typo in i225 LTR functions - ixgbe: Document how to enable NBASE-T support - ixgbe: set X550 MDIO speed before talking to PHY - netdevsim: Zero-initialize memory for new map's value in function nsim_bpf_map_alloc (CVE-2021-4135) - net/packet: rx_owner_map depends on pg_vec - [arm64,armhf] net: stmmac: dwmac-rk: fix oob read in rk_gmac_setup - sfc_ef100: potential dereference of null pointer - [arm64,armhf] dsa: mv88e6xxx: fix debug print for SPEED_UNFORCED - net: Fix double 0x prefix print in SKB dump - net/smc: Prevent smc_release() from long blocking - sit: do not call ipip6_dev_free() from sit_init_net() - afs: Fix mmap - [arm64] kexec: Fix missing error code 'ret' warning in load_other_segments() - bpf: Fix extable fixup offset. - USB: gadget: bRequestType is a bitfield, not a enum - Revert "usb: early: convert to readl_poll_timeout_atomic()" - [x86] KVM: x86: Drop guest CPUID check for host initiated writes to MSR_IA32_PERF_CAPABILITIES - tty: n_hdlc: make n_hdlc_tty_wakeup() asynchronous - USB: NO_LPM quirk Lenovo USB-C to Ethernet Adapher(RTL8153-04) - [arm*] usb: dwc2: fix STM ID/VBUS detection startup delay in dwc2_driver_probe - PCI/MSI: Clear PCI_MSIX_FLAGS_MASKALL on error - PCI/MSI: Mask MSI-X vectors only on success - [x86] usb: xhci: Extend support for runtime power management for AMD's Yellow carp. - [x86,arm64] usb: typec: tcpm: fix tcpm unregister port but leave a pending timer - usb: gadget: u_ether: fix race in setting MAC address in setup phase - USB: serial: cp210x: fix CP2105 GPIO registration - USB: serial: option: add Telit FN990 compositions - selinux: fix sleeping function called from invalid context - btrfs: fix memory leak in __add_inode_ref() - btrfs: fix double free of anon_dev after failure to create subvolume - btrfs: check WRITE_ERR when trying to read an extent buffer - btrfs: fix missing blkdev_put() call in btrfs_scan_one_device() - zonefs: add MODULE_ALIAS_FS - iocost: Fix divide-by-zero on donation from low hweight cgroup - [x86] serial: 8250_fintek: Fix garbled text for console - timekeeping: Really make sure wall_to_monotonic isn't positive - cifs: sanitize multiple delimiters in prepath - locking/rtmutex: Fix incorrect condition in rtmutex_spin_on_owner() - [riscv64] dts: unleashed: Add gpio card detect to mmc-spi-slot - [riscv64] dts: unmatched: Add gpio card detect to mmc-spi-slot - perf inject: Fix segfault due to close without open - perf inject: Fix segfault due to perf_data__fd() without open - libata: if T_LENGTH is zero, dma direction should be DMA_NONE - [powerpc*] powerpc/module_64: Fix livepatching for RO modules - drm/amdgpu: correct register access for RLC_JUMP_TABLE_RESTORE - drm/amdgpu: don't override default ECO_BITs setting - drm/amd/pm: fix reading SMU FW version from amdgpu_firmware_info on YC - [armhf] dts: imx6ull-pinfunc: Fix CSI_DATA07__ESAI_TX0 pad name - mptcp: add missing documented NL params - [amd64] bpf, x64: Factor out emission of REX byte in more cases - bpf: Fix extable address check. - USB: core: Make do_proc_control() and do_proc_bulk() killable - media: mxl111sf: change mutex_init() location - ovl: fix warning in ovl_create_real() - scsi: scsi_debug: Don't call kcalloc() if size arg is zero - scsi: scsi_debug: Fix type in min_t to avoid stack OOB - scsi: scsi_debug: Sanity check block descriptor length in resp_mode_select() - io-wq: remove spurious bit clear on task_work addition - io-wq: check for wq exit after adding new worker task_work - rcu: Mark accesses to rcu_state.n_force_qs - io-wq: drop wqe lock before creating new worker - [armhf] bus: ti-sysc: Fix variable set but not used warning for reinit_modules - xen/blkfront: harden blkfront against event channel storms (CVE-2021-28711) - xen/netfront: harden netfront against event channel storms (CVE-2021-28712) - xen/console: harden hvc_xen against event channel storms (CVE-2021-28713) - xen/netback: fix rx queue stall detection (CVE-2021-28714) - xen/netback: don't queue unlimited number of packages (CVE-2021-28715) https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.12 - net: usb: lan78xx: add Allied Telesis AT29M2-AF - ext4: prevent partial update of the extent blocks - ext4: check for out-of-order index extents in ext4_valid_extent_entries() - ext4: check for inconsistent extents between index and leaf block - HID: holtek: fix mouse probing - HID: potential dereference of null pointer - NFSD: Fix READDIR buffer overflow - PM: sleep: Fix error handling in dpm_prepare() - [arm64] dts: allwinner: orangepi-zero-plus: fix PHY mode - [arm64,armhf] bus: sunxi-rsb: Fix shutdown - spi: change clk_disable_unprepare to clk_unprepare - ucounts: Fix rlimit max values check - [arm64,armhf] ASoC: meson: aiu: fifo: Add missing dma_coerce_mask_and_coherent() - [arm64] RDMA/hns: Fix RNR retransmission issue for HIP08 - IB/qib: Fix memory leak in qib_user_sdma_queue_pkts() - [arm64] RDMA/hns: Replace kfree() with kvfree() - netfilter: nf_tables: fix use-after-free in nft_set_catchall_destroy() - netfilter: fix regression in looped (broad|multi)cast's MAC handling - [armhf] dts: imx6qdl-wandboard: Fix Ethernet support - ice: Use xdp_buf instead of rx_buf for xsk zero-copy - ice: xsk: return xsk buffers back to pool when cleaning the ring - qlcnic: potential dereference null pointer of rx_queue->page_ring - tcp: move inet->rx_dst_ifindex to sk->sk_rx_dst_ifindex - ipv6: move inet6_sk(sk)->rx_dst_cookie to sk->sk_rx_dst_cookie - inet: fully convert sk->sk_rx_dst to RCU rules - net: accept UFOv6 packages in virtio_net_hdr_to_skb - net: skip virtio_net_hdr_set_proto if protocol already set - igb: fix deadlock caused by taking RTNL in RPM resume path - ipmi: Fix UAF when uninstall ipmi_si and ipmi_msghandler module - bonding: fix ad_actor_system option setting to default - [amd64] fjes: Check for error irq - [armhf] drivers: net: smc911x: Check for error irq - asix: fix uninit-value in asix_mdio_read() - asix: fix wrong return value in asix_check_host_enable() - io_uring: zero iocb->ki_pos for stream file types - veth: ensure skb entering GRO are not cloned. - net: stmmac: ptp: fix potentially overflowing expression - net: bridge: Use array_size() helper in copy_to_user() - net: bridge: fix ioctl old_deviceless bridge argument - r8152: fix the force speed doesn't work for RTL8156 - Input: elantech - fix stack out of bound access in elantech_change_report_id() - [arm*] pinctrl: bcm2835: Change init order for gpio hogs - hwmon: (lm90) Fix usage of CONFIG2 register in detect function - hwmon: (lm90) Prevent integer overflow/underflow in hysteresis calculations - hwmon: (lm90) Introduce flag indicating extended temperature support - hwmon: (lm90) Add basic support for TI TMP461 - hwmon: (lm90) Drop critical attribute support for MAX6654 - kernel/crash_core: suppress unknown crashkernel parameter warning - [x86] Revert "x86/boot: Pull up cmdline preparation and early param parsing" - [x86] boot: Move EFI range reservation after cmdline parsing - ALSA: jack: Check the return value of kstrdup() - ALSA: drivers: opl3: Fix incorrect use of vp->state - ALSA: rawmidi - fix the uninitalized user_pversion - [x86] ALSA: hda/hdmi: Disable silent stream on GLK - [x86] ALSA: hda/realtek: Amp init fixup for HP ZBook 15 G6 - [x86] ALSA: hda/realtek: Add new alc285-hp-amp-init model - [x86] ALSA: hda/realtek: fix mute/micmute LEDs for a HP ProBook - [x86] ALSA: hda/realtek: Fix quirk for Clevo NJ51CU - [arm64,armhf] ASoC: meson: aiu: Move AIU_I2S_MISC hold setting to aiu-fifo-i2s - [arm64,armhf] ASoC: tegra: Add DAPM switches for headphones and mic jack - [armhf] ASoC: tegra: Restore headphones jack name on Nyan Big - Input: atmel_mxt_ts - fix double free in mxt_read_info_block - ipmi: bail out if init_srcu_struct fails - ipmi: ssif: initialize ssif_info->client early - ipmi: fix initialization when workqueue allocation fails - [hppa] Correct completer in lws start - [hppa] Fix mask used to select futex spinlock - tee: handle lookup of shm with reference count 0 - [x86] pkey: Fix undefined behaviour with PKRU_WD_BIT - [amd64] platform/x86: amd-pmc: only use callbacks for suspend - [x86] platform/x86: intel_pmc_core: fix memleak on registration failure - [x86] KVM: x86: Always set kvm_run->if_flag - [x86] KVM: x86/mmu: Don't advance iterator after restart due to yielding - [x86] KVM: nVMX: Synthesize TRIPLE_FAULT for L2 if emulation is required - [x86] KVM: VMX: Always clear vmx->fail on emulation_required - [x86] KVM: VMX: Wake vCPU when delivering posted IRQ even if vCPU == this vCPU - [armhf] pinctrl: stm32: consider the GPIO offset to expose all the GPIO lines - [arm64,armhf] mmc: sdhci-tegra: Fix switch to HS400ES mode - [armhf] mmc: meson-mx-sdhc: Set MANUAL_STOP for multi-block SDIO commands - mmc: core: Disable card detect during shutdown - [armhf] mmc: mmci: stm32: clear DLYB_CR after sending tuning command - mac80211: fix locking in ieee80211_start_ap error path - mm: mempolicy: fix THP allocations escaping mempolicy restrictions - mm, hwpoison: fix condition in free hugetlb page path - mm/hwpoison: clear MF_COUNT_INCREASED before retrying get_any_page() - [arm64] tee: optee: Fix incorrect page free bug - f2fs: fix to do sanity check on last xattr entry in __f2fs_setxattr() (CVE-2021-45469) - netfs: fix parameter of cleanup() - [x86] KVM: VMX: Fix stale docs for kvm-intel.emulate_invalid_guest_state - [arm64] dts: lx2160a: fix scl-gpios property name - [arm64] Input: elants_i2c - do not check Remark ID on eKTH3900/eKTH5312 - Input: goodix - add id->model mapping for the "9111" model - [x86] ASoC: SOF: Intel: pci-tgl: add new ADL-P variant - [x86] ASoC: SOF: Intel: pci-tgl: add ADL-N support - ASoC: rt5682: fix the wrong jack type detected - hwmom: (lm90) Fix citical alarm status for MAX6680/MAX6681 - hwmon: (lm90) Do not report 'busy' status bit as alarm - r8152: sync ocp base - ax25: NPD bug when detaching AX25 device - hamradio: defer ax25 kfree after unregister_netdev - hamradio: improve the incomplete fix to avoid NPD - tun: avoid double free in tun_free_netdev - phonet/pep: refuse to enable an unbound pipe https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.13 - Input: i8042 - add deferred probe support - Input: i8042 - enable deferred probe quirk for ASUS UM325UA - tomoyo: Check exceeded quota early in tomoyo_domain_quota_is_ok(). - tomoyo: use hwight16() in tomoyo_domain_quota_is_ok() - net/sched: Extend qdisc control block with tc control block - [x86] platform/x86: apple-gmux: use resource_size() with res - memblock: fix memblock_phys_alloc() section mismatch error - ALSA: hda: intel-sdw-acpi: harden detection of controller - ALSA: hda: intel-sdw-acpi: go through HDAS ACPI at max depth of 2 - efi: Move efifb_setup_from_dmi() prototype from arch headers - selinux: initialize proto variable in selinux_ip_postroute_compat() - scsi: lpfc: Terminate string in lpfc_debugfs_nvmeio_trc_write() - net/mlx5: DR, Fix NULL vs IS_ERR checking in dr_domain_init_resources - net/mlx5: Fix error print in case of IRQ request failed - net/mlx5: Fix SF health recovery flow - net/mlx5: Fix tc max supported prio for nic mode - net/mlx5e: Wrap the tx reporter dump callback to extract the sq - net/mlx5e: Fix interoperability between XSK and ICOSQ recovery flow - net/mlx5e: Fix ICOSQ recovery flow for XSK - net/mlx5e: Use tc sample stubs instead of ifdefs in source file - net/mlx5e: Delete forward rule for ct or sample action - udp: using datalen to cap ipv6 udp max gso segments - sctp: use call_rcu to free endpoint - net/smc: fix using of uninitialized completions - net: usb: pegasus: Do not drop long Ethernet frames - net/smc: don't send CDC/LLC message if link not ready - net/smc: fix kernel panic caused by race of smc_sock - igc: Do not enable crosstimestamping for i225-V models - igc: Fix TX timestamp support for non-MSI-X platforms - drm/amd/display: Send s0i2_rdy in stream_count == 0 optimization - drm/amd/display: Set optimize_pwr_state for DCN31 - net/mlx5e: Fix wrong features assignment in case of error - net: bridge: mcast: add and enforce query interval minimum - net: bridge: mcast: add and enforce startup query interval minimum - net: bridge: mcast: fix br_multicast_ctx_vlan_global_disabled helper - [armhf] net/ncsi: check for error return from call to nla_put_u32 - i2c: validate user data in compat ioctl - nfc: uapi: use kernel size_t to fix user-space builds - uapi: fix linux/nfc.h userspace compilation errors - drm/nouveau: wait for the exclusive fence after the shared ones v2 (Closes: #1000681) - drm/amdgpu: When the VCN(1.0) block is suspended, powergating is explicitly enabled - drm/amdgpu: add support for IP discovery gc_info table v2 - drm/amd/display: Changed pipe split policy to allow for multi-display pipe split - xhci: Fresco FL1100 controller should not have BROKEN_MSI quirk set. - usb: gadget: f_fs: Clear ffs_eventfd in ffs_data_clear. - [arm*] binder: fix async_free_space accounting for empty parcels - [x86] scsi: vmw_pvscsi: Set residual data length conditionally - Input: appletouch - initialize work before device registration - Input: spaceball - fix parsing of movement data packets - net: fix use-after-free in tw_timer_handler - fs/mount_setattr: always cleanup mount_kattr https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.14 - fscache_cookie_enabled: check cookie is valid before accessing it - tracing: Fix check for trace_percpu_buffer validity in get_trace_buf() - tracing: Tag trace_percpu_buffer as a percpu pointer - Revert "RDMA/mlx5: Fix releasing unallocated memory in dereg MR flow" - ieee802154: atusb: fix uninit value in atusb_set_extended_addr - i40e: Fix to not show opcode msg on unsuccessful VF MAC change - iavf: Fix limit of total number of queues to active queues of VF - RDMA/core: Don't infoleak GRH fields - Revert "net: usb: r8152: Add MAC passthrough support for more Lenovo Docks" - netrom: fix copying in user data in nr_setsockopt - RDMA/uverbs: Check for null return of kmalloc_array - mac80211: initialize variable have_higher_than_11mbit - mac80211: mesh: embedd mesh_paths and mpp_paths into ieee80211_if_mesh - sfc: The RX page_ring is optional - i40e: fix use-after-free in i40e_sync_filters_subtask() - i40e: Fix for displaying message regarding NVM version - i40e: Fix incorrect netdev's real number of RX/TX queues - ipv4: Check attribute length for RTA_GATEWAY in multipath route - ipv4: Check attribute length for RTA_FLOW in multipath route - ipv6: Check attribute length for RTA_GATEWAY in multipath route - ipv6: Check attribute length for RTA_GATEWAY when deleting multipath route - lwtunnel: Validate RTA_ENCAP_TYPE attribute length - sctp: hold endpoint before calling cb in sctp_transport_lookup_process - batman-adv: mcast: don't send link-local multicast to mcast routers - sch_qfq: prevent shift-out-of-bounds in qfq_init_qdisc - net: ena: Fix undefined state when tx request id is out of bounds - net: ena: Fix wrong rx request id by resetting device - net: ena: Fix error handling when calculating max IO queues number - md/raid1: fix missing bitmap update w/o WriteMostly devices - [x86] KVM: x86: Check for rmaps allocation - cgroup: Use open-time credentials for process migraton perm checks (CVE-2021-4197) - cgroup: Allocate cgroup_file_ctx for kernfs_open_file->priv (CVE-2021-4197) - cgroup: Use open-time cgroup namespace for process migration perm checks (CVE-2021-4197) - Revert "i2c: core: support bus regulator controlling in adapter" - xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (CVE-2021-4155) - power: supply: core: Break capacity loop - rndis_host: support Hytera digital radios - net ticp:fix a kernel-infoleak in __tipc_sendmsg() - phonet: refcount leak in pep_sock_accep (CVE-2021-45095) - fbdev: fbmem: add a helper to determine if an aperture is used by a fw fb - drm/amdgpu: disable runpm if we are the primary adapter - [arm64] power: bq25890: Enable continuous conversion for ADC at charging - ipv6: Continue processing multipath route even if gateway attribute is invalid - ipv6: Do cleanup if attribute validation fails in multipath route - drm/amdgpu: fix dropped backing store handling in amdgpu_dma_buf_move_notify - scsi: libiscsi: Fix UAF in iscsi_conn_get_param()/iscsi_conn_teardown() - ip6_vti: initialize __ip6_tnl_parm struct in vti6_siocdevprivate - net: udp: fix alignment problem in udp4_seq_show() - atlantic: Fix buff_ring OOB in aq_ring_rx_clean - drm/amd/pm: skip setting gfx cgpg in the s0ix suspend-resume - drm/amdgpu: always reset the asic in suspend (v2) - drm/amdgpu: put SMU into proper state on runpm suspending for BOCO capable platform - mISDN: change function names to avoid conflicts - drm/amd/display: fix B0 TMDS deepcolor no dislay issue - drm/amd/display: Added power down for DCN10 - ipv6: raw: check passed optlen before reading - Revert "drm/amdgpu: stop scheduler when calling hw_fini (v2)" - drm/amd/pm: keep the BACO feature enabled for suspend https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.15 - workqueue: Fix unbind_workers() VS wq_worker_running() race - staging: r8188eu: switch the led off during deinit - bpf: Fix out of bounds access from invalid *_or_null type verification (CVE-2022-23222) - Bluetooth: btusb: Add protocol for MediaTek bluetooth devices(MT7922) - Bluetooth: btusb: Add the new support ID for Realtek RTL8852A - Bluetooth: btusb: Add support for IMC Networks Mediatek Chip(MT7921) - Bbluetooth: btusb: Add another Bluetooth part for Realtek 8852AE - Bluetooth: btusb: fix memory leak in btusb_mtk_submit_wmt_recv_urb() - Bluetooth: btusb: enable Mediatek to support AOSP extension - Bluetooth: btusb: Add one more Bluetooth part for the Realtek RTL8852AE - Bluetooth: btusb: Add the new support IDs for WCN6855 - fget: clarify and improve __fget_files() implementation - Bluetooth: btusb: Add one more Bluetooth part for WCN6855 - Bluetooth: btusb: Add two more Bluetooth parts for WCN6855 - Bluetooth: btusb: Add support for Foxconn MT7922A - Bluetooth: btintel: Fix broken LED quirk for legacy ROM devices - Bluetooth: btusb: Add support for Foxconn QCA 0xe0d0 - Bluetooth: bfusb: fix division by zero in send path - [armhf] dts: exynos: Fix BCM4330 Bluetooth reset polarity in I9100 - USB: core: Fix bug in resuming hub's handling of wakeup requests - USB: Fix "slab-out-of-bounds Write" bug in usb_hcd_poll_rh_status - ath11k: Fix buffer overflow when scanning with extraie - mmc: sdhci-pci: Add PCI ID for Intel ADL - Bluetooth: add quirk disabling LE Read Transmit Power - Bluetooth: btbcm: disable read tx power for some Macs with the T2 Security chip - Bluetooth: btbcm: disable read tx power for MacBook Air 8,1 and 8,2 - veth: Do not record rx queue hint in veth_xmit - [x86] mfd: intel-lpss: Fix too early PM enablement in the ACPI ->probe() - can: gs_usb: fix use of uninitialized variable, detach device on reception of invalid USB data - can: isotp: convert struct tpcon::{idx,len} to unsigned int - can: gs_usb: gs_can_start_xmit(): zero-initialize hf->{flags,reserved} - random: fix data race on crng_node_pool - random: fix data race on crng init time - random: fix crash on multiple early calls to add_bootloader_randomness() - [x86] platform/x86/intel: hid: add quirk to support Surface Go 3 - media: Revert "media: uvcvideo: Set unique vdev name based in type" - [x86] drm/i915: Avoid bitwise vs logical OR warning in snb_wm_latency_quirk() . [ Ben Hutchings ] * Bump ABI to 3 * wait: Export new function __wake_up_pollfree() needed by binder * [rt] Add new signing key for Clark Williams * [rt] Update to 5.15.10-rt24 * debian/control: Add version to libopencsd-dev build-dependency * [armhf] media: Set MEDIA_SUPPORT=m so drivers are no longer built-in . [ Andrew Balmos ] * net/can: Enable CONFIG_CAN_MCP251X as module . [ Salvatore Bonaccorso ] * drivers/infiniband/hw/irdma: Enable INFINIBAND_IRDMA as module (Closes: #1003082) * vfs: fs_context: fix up param length parsing in legacy_parse_param (CVE-2022-0185)
-
Lorenzo "Palinuro" Faletra authored
-
- 06 Jan, 2022 2 commits
-
-
Lorenzo "Palinuro" Faletra authored
linux (5.15.5-2parrot1) lts-updates; urgency=medium . * Import new Debian release. * Re-include Wireless patches. * Disable kernel signing. . linux (5.15.5-2~bpo11+1) bullseye-backports; urgency=medium . * Rebuild for bullseye-backports: - Change ABI number to 0.bpo.2 - Revert "Compile with gcc-11 on all architectures" - perf: Disable use of libopencsd, as bullseye's version is too old . linux (5.15.5-2) unstable; urgency=medium . * atlantic: Fix OOB read and write in hw_atl_utils_fw_rpc_wait (CVE-2021-43975) * fget: check that the fd still exists after getting a ref to it (CVE-2021-4083) * USB: gadget: detect too-big endpoint 0 requests (CVE-2021-39685) * USB: gadget: zero allocate endpoint 0 buffers (CVE-2021-39685) * [x86] Revert "drm/i915: Implement Wa_1508744258" (Closes: #1001128) * nfsd: fix use-after-free due to delegation race (Closes: #988044) * bpf: Fix kernel address leakage in atomic fetch * bpf: Fix signed bounds propagation after mov32 * bpf: Make 32->64 bounds propagation slightly more robust * bpf: Fix kernel address leakage in atomic cmpxchg's r0 aux reg . linux (5.15.5-1) unstable; urgency=medium . * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.4 - string: uninline memcpy_and_pad - [x86] KVM: Fix steal time asm constraints - btrfs: introduce btrfs_is_data_reloc_root - btrfs: zoned: add a dedicated data relocation block group - btrfs: zoned: only allow one process to add pages to a relocation inode - btrfs: zoned: use regular writes for relocation - btrfs: check for relocation inodes on zoned btrfs in should_nocow - btrfs: zoned: allow preallocation for relocation inodes - block: Add a helper to validate the block size - loop: Use blk_validate_block_size() to validate block size - Bluetooth: btusb: Add support for TP-Link UB500 Adapter - PCI/MSI: Deal with devices lying about their MSI mask capability - PCI: Add MSI masking quirk for Nvidia ION AHCI - perf/core: Avoid put_page() when GUP fails - thermal: Fix NULL pointer dereferences in of_thermal_ functions - Revert "ACPI: scan: Release PM resources blocked by unused objects" https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.5 - [arm64] zynqmp: Do not duplicate flash partition label property - [arm64] zynqmp: Fix serial compatible string - [arm64,armhf] clk: sunxi-ng: Unregister clocks/resets when unbinding - scsi: pm80xx: Fix memory leak during rmmod - scsi: lpfc: Fix list_add() corruption in lpfc_drain_txq() - [armhf] bus: ti-sysc: Add quirk handling for reinit on context lost - [armhf] bus: ti-sysc: Use context lost quirk for otg - [armhf] usb: musb: tusb6010: check return value after calling platform_get_resource() - [x86] usb: typec: tipd: Remove WARN_ON in tps6598x_block_read - staging: rtl8723bs: remove possible deadlock when disconnect (v2) - staging: rtl8723bs: remove a second possible deadlock - staging: rtl8723bs: remove a third possible deadlock - [arm64] dts: ls1012a: Add serial alias for ls1012a-rdb - RDMA/rxe: Separate HW and SW l/rkeys - [x86] ASoC: SOF: Intel: hda-dai: fix potential locking issue - scsi: core: Fix scsi_mode_sense() buffer length handling - ALSA: usb-audio: disable implicit feedback sync for Behringer UFX1204 and UFX1604 - [armhf] clk: imx: imx6ul: Move csi_sel mux to correct base register - ASoC: es8316: Use IRQF_NO_AUTOEN when requesting the IRQ - [x86] ASoC: rt5651: Use IRQF_NO_AUTOEN when requesting the IRQ - [x86] ASoC: nau8824: Add DMI quirk mechanism for active-high jack-detect - scsi: advansys: Fix kernel pointer leak - scsi: smartpqi: Add controller handshake during kdump - [arm64] dts: imx8mm-kontron: Fix reset delays for ethernet PHY - ALSA: intel-dsp-config: add quirk for APL/GLK/TGL devices based on ES8336 codec - [x86] ASoC: Intel: soc-acpi: add missing quirk for TGL SDCA single amp - [x86] ASoC: Intel: sof_sdw: add missing quirk for Dell SKU 0A45 - firmware_loader: fix pre-allocated buf built-in firmware use - HID: multitouch: disable sticky fingers for UPERFECT Y - ALSA: usb-audio: Add support for the Pioneer DJM 750MK2 Mixer/Soundcard - ASoC: rt5682: fix a little pop while playback - [amd64] iommu/vt-d: Do not falsely log intel_iommu is unsupported kernel option - tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc - scsi: scsi_debug: Fix out-of-bound read in resp_readcap16() - scsi: scsi_debug: Fix out-of-bound read in resp_report_tgtpgs() - scsi: target: Fix ordered tag handling - scsi: target: Fix alua_tg_pt_gps_count tracking - iio: imu: st_lsm6dsx: Avoid potential array overflow in st_lsm6dsx_set_odr() - RDMA/core: Use kvzalloc when allocating the struct ib_port - scsi: lpfc: Fix use-after-free in lpfc_unreg_rpi() routine - scsi: lpfc: Fix link down processing to address NULL pointer dereference - scsi: lpfc: Allow fabric node recovery if recovery is in progress before devloss - [i386] ALSA: gus: fix null pointer dereference on pointer block - ALSA: usb-audio: fix null pointer dereference on pointer cs_desc - f2fs: fix up f2fs_lookup tracepoints - f2fs: fix to use WHINT_MODE - f2fs: fix wrong condition to trigger background checkpoint correctly - f2fs: compress: disallow disabling compress on non-empty compressed file - f2fs: fix incorrect return value in f2fs_sanity_check_ckpt() - [armhf] clk/ast2600: Fix soc revision for AHB - [arm64] clk: qcom: gcc-msm8996: Drop (again) gcc_aggre1_pnoc_ahb_clk - [arm64] KVM: arm64: Fix host stage-2 finalization - sched/core: Mitigate race cpus_share_cache()/update_top_cache_domain() - sched/fair: Prevent dead task groups from regaining cfs_rq's - [x86] perf/x86/vlbr: Add c->flags to vlbr event constraints - blkcg: Remove extra blkcg_bio_issue_init - drm/nouveau: hdmigv100.c: fix corrupted HDMI Vendor InfoFrame - bpf: Fix inner map state pruning regression. - tcp: Fix uninitialized access in skb frags array for Rx 0cp. - tracing: Add length protection to histogram string copies - nl80211: fix radio statistics in survey dump - mac80211: fix monitor_sdata RCU/locking assertions - net: bnx2x: fix variable dereferenced before check - bnxt_en: reject indirect blk offload when hw-tc-offload is off - tipc: only accept encrypted MSG_CRYPTO msgs - sock: fix /proc/net/sockstat underflow in sk_clone_lock() - net/smc: Make sure the link_id is unique - NFSD: Fix exposure in nfsd4_decode_bitmap() - iavf: Fix return of set the new channel count - iavf: check for null in iavf_fix_features - iavf: free q_vectors before queues in iavf_disable_vf - iavf: don't clear a lock we don't hold - iavf: Fix failure to exit out from last all-multicast mode - iavf: prevent accidental free of filter structure - iavf: validate pointers - iavf: Fix for the false positive ASQ/ARQ errors while issuing VF reset - iavf: Fix for setting queues to 0 - iavf: Restore VLAN filters after link down - bpf: Fix toctou on read-only map's constant scalar tracking (CVE-2021-4001) - [x86] platform/x86: hp_accel: Fix an error handling path in 'lis3lv02d_probe()' - udp: Validate checksum in udp_read_sock() - btrfs: make 1-bit bit-fields of scrub_page unsigned int - RDMA/core: Set send and receive CQ before forwarding to the driver - net/mlx5e: Wait for concurrent flow deletion during neigh/fib events - net/mlx5: E-Switch, Fix resetting of encap mode when entering switchdev - net/mlx5e: nullify cq->dbg pointer in mlx5_debug_cq_remove() - net/mlx5: Update error handler for UCTX and UMEM - net/mlx5: E-Switch, rebuild lag only when needed - net/mlx5e: CT, Fix multiple allocations and memleak of mod acts - net/mlx5: Lag, update tracker when state change event received - net/mlx5: E-Switch, return error if encap isn't supported - scsi: ufs: core: Improve SCSI abort handling - scsi: core: sysfs: Fix hang when device state is set via sysfs - scsi: ufs: core: Fix task management completion timeout race - scsi: ufs: core: Fix another task management completion race - [arm*] net: mvmdio: fix compilation warning - net: sched: act_mirred: drop dst for the direction from egress to ingress - [arm64] net: dpaa2-eth: fix use-after-free in dpaa2_eth_remove - net: virtio_net_hdr_to_skb: count transport header in UFO - i40e: Fix correct max_pkt_size on VF RX queue - i40e: Fix NULL ptr dereference on VSI filter sync - i40e: Fix changing previously set num_queue_pairs for PFs - i40e: Fix ping is lost after configuring ADq on VF - RDMA/mlx4: Do not fail the registration on port stats - i40e: Fix warning message and call stack during rmmod i40e driver - i40e: Fix creation of first queue by omitting it if is not power of two - i40e: Fix display error code in dmesg - e100: fix device suspend/resume (Closes: #995927) - [powerpc*] KVM: PPC: Book3S HV: Use GLOBAL_TOC for kvmppc_h_set_dabr/xdabr() - [powerpc*] pseries: rename numa_dist_table to form2_distances - [powerpc*] pseries: Fix numa FORM2 parsing fallback code - [x86] perf/x86/intel/uncore: Fix filter_tid mask for CHA events on Skylake Server - [x86] perf/x86/intel/uncore: Fix IIO event constraints for Skylake Server - [x86] perf/x86/intel/uncore: Fix IIO event constraints for Snowridge - [s390x] kexec: fix return code handling - blk-cgroup: fix missing put device in error path from blkg_conf_pref() - tun: fix bonding active backup with arp monitoring - tipc: check for null after calling kmemdup - ipc: WARN if trying to remove ipc object which is absent - shm: extend forced shm destroy to support objects from several IPC nses - hugetlb, userfaultfd: fix reservation restore on userfaultfd error - [x86] boot: Pull up cmdline preparation and early param parsing - [x86] hyperv: Fix NULL deref in set_hv_tscchange_cb() if Hyper-V setup fails - [x86] KVM: x86: Assume a 64-bit hypercall for guests with protected state - [x86] KVM: x86: Fix uninitialized eoi_exit_bitmap usage in vcpu_load_eoi_exitmap() - [x86] KVM: x86/mmu: include EFER.LMA in extended mmu role - [x86] KVM: x86/xen: Fix get_attr of KVM_XEN_ATTR_TYPE_SHARED_INFO - [powerpc*] xive: Change IRQ domain to a tree domain - [x86] Revert "drm/i915/tgl/dsi: Gate the ddi clocks after pll mapping" - ata: libata: improve ata_read_log_page() error message - ata: libata: add missing ata_identify_page_supported() calls - scsi: qla2xxx: Fix mailbox direction flags in qla2xxx_get_adapter_id() - [s390x] setup: avoid reserving memory above identity mapping - [s390x] boot: simplify and fix kernel memory layout setup - [s390x] vdso: filter out -mstack-guard and -mstack-size - [s390x] dump: fix copying to user-space of swapped kdump oldmem - block: Check ADMIN before NICE for IOPRIO_CLASS_RT - fbdev: Prevent probing generic drivers if a FB is already registered - [x86] KVM: SEV: Disallow COPY_ENC_CONTEXT_FROM if target has created vCPUs - [x86] KVM: nVMX: don't use vcpu->arch.efer when checking host state on nested state load - drm/cma-helper: Release non-coherent memory with dma_free_noncoherent() - printk: restore flushing of NMI buffers on remote CPUs after NMI backtraces - udf: Fix crash after seekdir - spi: fix use-after-free of the add_lock mutex - [armhf] net: stmmac: socfpga: add runtime suspend/resume callback for stratix10 platform - [x86] Drivers: hv: balloon: Use VMBUS_RING_SIZE() wrapper for dm_ring_size - btrfs: fix memory ordering between normal and ordered work functions - fs: handle circular mappings correctly - net: stmmac: Fix signed/unsigned wreckage - cfg80211: call cfg80211_stop_ap when switch from P2P_GO type - mac80211: drop check for DONT_REORDER in __ieee80211_select_queue - drm/amd/display: Update swizzle mode enums - drm/amd/display: Limit max DSC target bpp for specific monitors - [x86] drm/i915/guc: Fix outstanding G2H accounting - [x86] drm/i915/guc: Don't enable scheduling on a banned context, guc_id invalid, not registered - [x86] drm/i915/guc: Workaround reset G2H is received after schedule done G2H - [x86] drm/i915/guc: Don't drop ce->guc_active.lock when unwinding context - [x86] drm/i915/guc: Unwind context requests in reverse order - drm/udl: fix control-message timeout - drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap - drm/nouveau: Add a dedicated mutex for the clients list (CVE-2020-27820) - drm/nouveau: use drm_dev_unplug() during device removal (CVE-2020-27820) - drm/nouveau: clean up all clients on device removal (CVE-2020-27820) - [x86] drm/i915/dp: Ensure sink rate values are always valid - [x86] drm/i915/dp: Ensure max link params are always valid - [x86] drm/i915: Fix type1 DVI DP dual mode adapter heuristic for modern platforms - drm/amdgpu: fix set scaling mode Full/Full aspect/Center not works on vga and dvi connectors - drm/amd/pm: avoid duplicate powergate/ungate setting - signal: Implement force_fatal_sig - exit/syscall_user_dispatch: Send ordinary signals on failure - [powerpc*] signal/powerpc: On swapcontext failure force SIGSEGV - [s390x] signal/s390: Use force_sigsegv in default_trap_handler - [x86] signal/x86: In emulate_vsyscall force a signal instead of calling do_exit - signal: Replace force_sigsegv(SIGSEGV) with force_fatal_sig(SIGSEGV) - signal: Don't always set SA_IMMUTABLE for forced signals - signal: Replace force_fatal_sig with force_exit_sig when in doubt - hugetlbfs: flush TLBs correctly after huge_pmd_unshare (CVE-2021-4002) - RDMA/netlink: Add __maybe_unused to static inline in C file - bpf: Forbid bpf_ktime_get_coarse_ns and bpf_timer_* in tracing progs - selinux: fix NULL-pointer dereference when hashtab allocation fails - ASoC: DAPM: Cover regression by kctl change notification fix - ice: Fix VF true promiscuous mode - ice: Delete always true check of PF pointer - fs: export an inode_update_time helper - btrfs: update device path inode time instead of bd_inode - net: add and use skb_unclone_keeptruesize() helper - [x86] ALSA: hda: hdac_ext_stream: fix potential locking issues - ALSA: hda: hdac_stream: fix potential locking issue in snd_hdac_stream_assign() . [ Salvatore Bonaccorso ] * [rt] Update to 5.15.3-rt21 * Drop "arm64: dts: rockchip: disable USB type-c DisplayPort" * [rt] Refresh "printk: move console printing to kthreads" * [rt] Refresh "printk: remove deferred printing" * Bump ABI to 2 * fuse: release pipe buf after last use (Closes: #1000504) . linux (5.15.3-1) unstable; urgency=medium . * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.3 - Bluetooth: sco: Fix lock_sock() blockage by memcpy_from_msg() (CVE-2021-3640) . [ Vincent Blut ] * [arm64] sound/soc/meson: Enable SND_MESON_AXG_SOUND_CARD as module (Closes: #999638) * [arm64,armhf] sound/soc/meson: Enable SND_MESON_GX_SOUND_CARD as module * drivers/bluetooth: Enable BT_HCIBTUSB_MTK (Closes: #999748) . [ Salvatore Bonaccorso ] * mac80211: fix radiotap header generation * [rt] Update to 5.15.2-rt20 * [rt] Refresh "printk: introduce kernel sync mode" * [rt] Refresh "printk: move console printing to kthreads" * [rt] Drop "rcutorture: Avoid problematic critical section nesting on PREEMPT_RT" * [rt] Drop "lockdep: Let lock_is_held_type() detect recursive read as read" * [rt] Refresh "x86/softirq: Disable softirq stacks on PREEMPT_RT" * [rt] Refresh "POWERPC: Allow to enable RT" * Set ABI to 1 . linux (5.15.2-1~exp1) experimental; urgency=medium . * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.2 . [ Salvatore Bonaccorso ] * [rt] Update to 5.15-rt17 and reenable (Closes: #995466) * perf srcline: Use long-running addr2line per DSO (Closes: #911815) * Refresh "Export symbols needed by Android drivers" * [rt] Update to 5.15.2-rt19 * Input: elantench - fix misreporting trackpoint coordinates (Closes: #989285) * kernel/time: Enable NO_HZ_FULL (Closes: #804857) * io-wq: serialize hash clear with wakeup (Closes: #996951) . [ Vincent Blut ] * [x86] drivers/ptp: Enable PTP_1588_CLOCK_VMW as module * drivers/ptp: Enable PTP_1588_CLOCK_DTE, PTP_1588_CLOCK_IDT82P33, PTP_1588_CLOCK_IDTCM, PTP_1588_CLOCK_OCP as modules * drivers/ptp, net: Enable DP83640_PHY, PTP_1588_CLOCK_INES, NET_PTP_CLASSIFY, NETWORK_PHY_TIMESTAMPING . linux (5.15.1-1~exp1) experimental; urgency=medium . * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.1 . [ Salvatore Bonaccorso ] * [arm*] drop cc-option fallbacks for architecture selection * net/tls: Enable TLS as module (Closes: #919807) . [ Diederik de Haas ] * [x86] drivers/hwmon: Enable SENSORS_CORSAIR_PSU as module * [arm64] drivers/hwmon: Enable SENSORS_GPIO_FAN as module . linux (5.15-1~exp1) experimental; urgency=medium . * New upstream release candidate . [ Diederik de Haas ] * [arm*] drivers/led/trigger: Make LEDS_TRIGGER_HEARTBEAT builtin (Closes: #992184) * [arm64] sound/soc/codecs: Enable SND_SOC_SPDIF as module * [armel/rpi] Enable RPi's clock framework and CPU Freq scaling * [armel/rpi] Change default governor to 'ondemand' for RPi 0/0w/1 (Closes: #991921) * [arm64] sound/soc/rockchip: Enable SND_SOC_ROCKCHIP_PDM as module * [armel] Make explicit that -rpi kernel variant is for RPi 0/0w/1, not the others . [ Nathan Schulte ] * [arm64] drivers/staging/media/hantro: Enable VIDEO_HANTRO as module * [arm64] drivers/staging/media/rkvdec: Enable VIDEO_ROCKCHIP_VDEC as module (Closes: #993902) . [ Vincent Blut ] * [arm] arch/arm/crypto: Enable CRYPTO_BLAKE2S_ARM, CRYPTO_SHA256_ARM and CRYPTO_SHA512_ARM as modules * [armhf] arch/arm/crypto: Enable most NEON based implementation of cryptographic algorithms as modules * [arm] Move CRYPTO_NHPOLY1305_NEON in armhf config file * [arm64] drivers/gpu/drm/vmwgfx: Enable DRM_VMWGFX as module (Closes: #995276) * [armhf] sound/soc/sunxi: Enable SND_SUN4I_I2S as module (Closes: #971892) * [armhf] drivers/gpu/drm/bridge/synopsys: Enable DRM_DW_HDMI_I2S_AUDIO as module * drivers/usb/serial: Enable USB_SERIAL_XR as module (Closes: #996962) * drivers/bus/mhi: Enable MHI_BUS, MHI_BUS_PCI_GENERIC as modules (Closes: #995407) * drivers/net: Enable MHI_NET as module * drivers/net/wwan: Enable WWAN, MHI_WWAN_CTRL as modules . [ YunQiang Su ] * [mipsel,mips64el/loongson-3] linux-image: Recommend pmon-update . [ Salvatore Bonaccorso ] * Compile with gcc-11 on all architectures * [arm64] drivers/net: Enable VMXNET3 as module . [ Uwe Kleine-König ] * [arm64] Enable various symbols for the librem5 devkit and iMX8MN Variscite Symphony (Patches by Guido Günther and Ariel D'Alessandro) * [armhf,arm64] Cherrypick fix for snvs_pwrkey to prevent a machine hang. . [ Heiko Thiery ] * [arm64] drivers/mtd/spi-nor: enable MTD_SPI_NOR as module * [arm64] drivers/net/can/spi: enable CAN_MCP251X as module * [arm64] drivers/net/phy: enable MICROSEMI_PHY as module * [arm64] drivers/net/usb: enable USB_NET_SMSC95XX as module . [ Ryutaroh Matsumoto ] * [arm64] Enable TOUCHSCREEN_RASPBERRYPI_FW and REGULATOR_RASPBERRYPI_TOUCHSCREEN_ATTINY (Closes: #977575) . [ Ariel D'Alessandro ] * [arm64] drivers/regulator: Enable REGULATOR_BD718XX as module . [ Lubomir Rintel ] * [armhf] Add support for Marvell MMP3 * [armhf] Enable SND_MMP_SOC_SSPA, COMMON_CLK_MMP2_AUDIO, PHY_MMP3_USB, MFD_ENE_KB3930 and LEDS_ARIEL as modules. . [ Sean McAvoy ] * [armel] marvell: Enable CONFIG_SENSORS_LM63 as a module. . [ Dan Stefura ] * [arm64] enable i6300esb watchdog kernel module . [ Thore Sommer ] * drivers/md: Enable DM_VERITY_FEC . [ Aurelien Jarno ] * [riscv64] Enable NUMA (Closes: #993453) . linux (5.14.16-1) unstable; urgency=medium . * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.13 - ext4: check and update i_disksize properly - ext4: correct the error path of ext4_write_inline_data_end() - [x86] ASoC: Intel: sof_sdw: tag SoundWire BEs as non-atomic - ALSA: oxfw: fix transmission method for Loud models based on OXFW971 - ALSA: usb-audio: Unify mixer resume and reset_resume procedure - HID: apple: Fix logical maximum and usage maximum of Magic Keyboard JIS - netfilter: ip6_tables: zero-initialize fragment offset - HID: wacom: Add new Intuos BT (CTL-4100WL/CTL-6100WL) device IDs - [x86] ASoC: SOF: loader: release_firmware() on load failure to avoid batching - netfilter: nf_nat_masquerade: make async masq_inet6_event handling generic - netfilter: nf_nat_masquerade: defer conntrack walk to work queue - mac80211: Drop frames from invalid MAC address in ad-hoc mode - [m68k] Handle arrivals of multiple signals correctly - net: prevent user from passing illegal stab size - mac80211: check return value of rhashtable_init - [x86] vboxfs: fix broken legacy mount signature checking - drm/amdgpu: fix gart.bo pin_count leak - scsi: ses: Fix unsigned comparison with less than zero - scsi: virtio_scsi: Fix spelling mistake "Unsupport" -> "Unsupported" - scsi: qla2xxx: Fix excessive messages during device logout - perf/core: fix userpage->time_enabled of inactive events - sched: Always inline is_percpu_thread() - io_uring: kill fasync - [armhf] hwmon: (pmbus/ibm-cffps) max_power_out swap changes https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.14 - ALSA: usb-audio: Add quirk for VF0770 - ALSA: pcm: Workaround for a wrong offset in SYNC_PTR compat ioctl - ALSA: usb-audio: Fix a missing error check in scarlett gen2 mixer - ALSA: seq: Fix a potential UAF by wrong private_free call order - ALSA: hda/realtek: Enable 4-speaker output for Dell Precision 5560 laptop - ALSA: hda - Enable headphone mic on Dell Latitude laptops with ALC3254 - ALSA: hda/realtek: Complete partial device name to avoid ambiguity - ALSA: hda/realtek: Add quirk for Clevo X170KM-G - ALSA: hda/realtek - ALC236 headset MIC recording issue - ALSA: hda/realtek: Add quirk for TongFang PHxTxX1 - ALSA: hda/realtek: Fix for quirk to enable speaker output on the Lenovo 13s Gen2 - ALSA: hda/realtek: Fix the mic type detection issue for ASUS G551JW - [amd64] platform/x86: amd-pmc: Add alternative acpi id for PMC controller - dm: fix mempool NULL pointer race when completing IO - [x86] ACPI: PM: Include alternate AMDI0005 id in special behaviour - dm rq: don't queue request to blk-mq during DM suspend - [s390x] fix strrchr() implementation - drm/fbdev: Clamp fbdev surface size if too large - [arm64] hugetlb: fix CMA gigantic page order for non-4K PAGE_SIZE - drm/nouveau/fifo: Reinstate the correct engine bit programming - [arm64] drm/msm: Do not run snapshot on non-DPU devices - [arm64] drm/msm: Avoid potential overflow in timeout_to_jiffies() - btrfs: unlock newly allocated extent buffer after error - btrfs: deal with errors when replaying dir entry during log replay - btrfs: deal with errors when adding inode reference during log replay - btrfs: check for error when looking up inode during dir entry replay - btrfs: update refs for any root except tree log roots - btrfs: fix abort logic in btrfs_replace_file_extents - [x86] resctrl: Free the ctrlval arrays when domain_setup_mon_state() fails - [x86] mei: me: add Ice Lake-N device id. - [x86] mei: hbm: drop hbm responses on early shutdown - xhci: guard accesses to ep_state in xhci_endpoint_reset() - xhci: add quirk for host controllers that don't update endpoint DCS - xhci: Fix command ring pointer corruption while aborting a command - xhci: Enable trust tx length quirk for Fresco FL11 USB controller - cb710: avoid NULL pointer subtraction - [arm64,x86] efi/cper: use stack buffer for error record decoding - efi: Change down_interruptible() in virt_efi_reset_system() to down_trylock() - [armhf] usb: musb: dsps: Fix the probe error path - Input: xpad - add support for another USB ID of Nacon GC-100 - USB: serial: qcserial: add EM9191 QDL support - USB: serial: option: add Quectel EC200S-CN module support - USB: serial: option: add Telit LE910Cx composition 0x1204 - USB: serial: option: add prod. id for Quectel EG91 - virtio: write back F_VERSION_1 before validate - nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells - virtio-blk: remove unneeded "likely" statements - Revert "virtio-blk: Add validation for block size in config space" - [x86] fpu: Mask out the invalid MXCSR bits properly - [x86] Kconfig: Do not enable AMD_MEM_ENCRYPT_ACTIVE_BY_DEFAULT automatically - [powerpc*] xive: Discard disabled interrupts in get_irqchip_state() - [armhf] drivers: bus: simple-pm-bus: Add support for probing simple bus only devices - driver core: Reject pointless SYNC_STATE_ONLY device links - iio: adc: ad7192: Add IRQ flag - iio: adc: ad7780: Fix IRQ flag - iio: adc: ad7793: Fix IRQ flag - iio: adis16480: fix devices that do not support sleep mode - iio: adc128s052: Fix the error handling path of 'adc128_probe()' - iio: adc: max1027: Fix wrong shift with 12-bit devices - iio: adis16475: fix deadlock on frequency set - iio: light: opt3001: Fixed timeout error when 0 lux - iio: adc: max1027: Fix the number of max1X31 channels - eeprom: at25: Add SPI ID table - iio: dac: ti-dac5571: fix an error code in probe() - [arm64] tee: optee: Fix missing devices unregister during optee_remove - [armel,armhf] dts: bcm2711-rpi-4-b: Fix usb's unit address - [armel,armhf] dts: bcm2711-rpi-4-b: fix sd_io_1v8_reg regulator states - [armel,armhf] dts: bcm2711-rpi-4-b: Fix pcie0's unit address formatting - nvme-pci: Fix abort command id - sctp: account stream padding length for reconf chunk - [arm64,armhf] gpio: pca953x: Improve bias setting - net/smc: improved fix wait on already cleared link - net/mlx5e: Fix memory leak in mlx5_core_destroy_cq() error path - net/mlx5e: Mutually exclude RX-FCS and RX-port-timestamp - net/mlx5e: Switchdev representors are not vlan challenged - net: stmmac: fix get_hw_feature() on old hardware - net: phy: Do not shutdown PHYs in READY state - [arm64,armhf] net: dsa: mv88e6xxx: don't use PHY_DETECT on internal PHY's - [arm64,armhf] net: dsa: fix spurious error message when unoffloaded port leaves bridge - ethernet: s2io: fix setting mac address during resume - nfc: fix error handling of nfc_proto_register() - NFC: digital: fix possible memory leak in digital_tg_listen_mdaa() - NFC: digital: fix possible memory leak in digital_in_send_sdd_req() - pata_legacy: fix a couple uninitialized variable bugs - ata: ahci_platform: fix null-ptr-deref in ahci_platform_enable_regulators() - spi: spidev: Add SPI ID table - drm/edid: In connector_bad_edid() cap num_of_ext by num_blocks read - [arm64] drm/msm: Fix null pointer dereference on pointer edp - [arm64] drm/msm/mdp5: fix cursor-related warnings - [arm64] drm/msm/submit: fix overflow check on 64-bit architectures - [arm64] drm/msm/a6xx: Track current ctx by seqno - [arm64] drm/msm/a4xx: fix error handling in a4xx_gpu_init() - [arm64] drm/msm/a3xx: fix error handling in a3xx_gpu_init() - [arm64] drm/msm/dsi: dsi_phy_14nm: Take ready-bit into account in poll_for_ready - [arm64] drm/msm/dsi: Fix an error code in msm_dsi_modeset_init() - [arm64] drm/msm/dsi: fix off by one in dsi_bus_clk_enable error handling - [arm64] acpi/arm64: fix next_platform_timer() section mismatch error - [x86] platform/x86: intel_scu_ipc: Fix busy loop expiry time - mqprio: Correct stats in mqprio_dump_class_stats(). - mptcp: fix possible stall on recvmsg() - qed: Fix missing error code in qed_slowpath_start() - ice: fix locking for Tx timestamp tracking flush - nfp: flow_offload: move flow_indr_dev_register from app init to app start - [arm64] net: mscc: ocelot: make use of all 63 PTP timestamp identifiers - [arm64] net: mscc: ocelot: avoid overflowing the PTP timestamp FIFO - [arm64] net: mscc: ocelot: warn when a PTP IRQ is raised for an unknown skb - [arm64] net: mscc: ocelot: deny TX timestamping of non-PTP packets - [arm64] net: mscc: ocelot: cross-check the sequence id from the timestamp FIFO with the skb PTP header - [arm64] net: dsa: felix: break at first CPU port during init and teardown https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.15 - [armhf] dts: vexpress-v2p-ca9: Fix the SMB unit-address - block: decode QUEUE_FLAG_HCTX_ACTIVE in debugfs output - [x86] xen/x86: prevent PVH type from getting clobbered - r8152: avoid to resubmit rx immediately - drm/amdgpu: init iommu after amdkfd device init - NFSD: Keep existing listeners on portlist error - [powerpc*] powerpc/lib: Add helper to check if offset is within conditional branch range - [powerpc*] powerpc/bpf: Validate branch ranges - [powerpc*] powerpc/security: Add a helper to query stf_barrier type - [powerpc*] powerpc/bpf: Emit stf barrier instruction sequences for BPF_NOSPEC - [arm64] KVM: arm64: Fix host stage-2 PGD refcount - [arm64] KVM: arm64: Release mmap_lock when using VM_SHARED with MTE - netfilter: xt_IDLETIMER: fix panic that occurs when timer_type has garbage value - netfilter: nf_tables: skip netdev events generated on netns removal - ice: Fix failure to re-add LAN/RDMA Tx queues - ice: Avoid crash from unnecessary IDA free - ice: fix getting UDP tunnel entry - ice: Print the api_patch as part of the fw.mgmt.api - netfilter: ip6t_rt: fix rt0_hdr parsing in rt_mt6 - netfilter: ipvs: make global sysctl readonly in non-init netns - sctp: fix transport encap_port update in sctp_vtag_verify - tcp: md5: Fix overlap between vrf and non-vrf keys - ipv6: When forwarding count rx stats on the orig netdev - hamradio: baycom_epp: fix build for UML - net/sched: act_ct: Fix byte count on fragmented packets - [arm64,armhf] net: dsa: Fix an error handling path in 'dsa_switch_parse_ports_of()' - [powerpc*] smp: do not decrement idle task preempt count in CPU offline - [arm64] net: hns3: Add configuration of TM QCN error event - [arm64] net: hns3: reset DWRR of unused tc to zero - [arm64] net: hns3: add limit ets dwrr bandwidth cannot be 0 - [arm64] net: hns3: schedule the polling again when allocation fails - [arm64] net: hns3: fix vf reset workqueue cannot exit - [arm64] net: hns3: disable sriov before unload hclge layer - net: stmmac: Fix E2E delay mechanism - ptp: Fix possible memory leak in ptp_clock_register() - e1000e: Fix packet loss on Tiger Lake and later - igc: Update I226_K device ID - ice: Add missing E810 device ids - net/mlx5e: IPsec: Fix a misuse of the software parser's fields - net/mlx5e: IPsec: Fix work queue entry ethernet segment checksum flags - [arm64] net: enetc: fix ethtool counter name for PM0_TERR - [arm64] net: enetc: make sure all traffic classes can send large frames - can: peak_usb: pcan_usb_fd_decode_status(): fix back to ERROR_ACTIVE state notification - can: peak_pci: peak_pci_remove(): fix UAF - can: isotp: isotp_sendmsg(): fix return error on FC timeout on TX path - can: isotp: isotp_sendmsg(): add result check for wait_event_interruptible() - can: isotp: isotp_sendmsg(): fix TX buffer concurrent access in isotp_sendmsg() - can: j1939: j1939_tp_rxtimer(): fix errant alert in j1939_tp_rxtimer - can: j1939: j1939_netdev_start(): fix UAF for rx_kref of j1939_priv - can: j1939: j1939_xtp_rx_dat_one(): cancel session if receive TP.DT with error length - can: j1939: j1939_xtp_rx_rts_session_new(): abort TP less than 9 bytes - ceph: skip existing superblocks that are blocklisted or shut down when mounting - ceph: fix handling of "meta" errors - tracing: Have all levels of checks prevent recursion - ocfs2: fix data corruption after conversion from inline format - ocfs2: mount fails with buffer overflow in strlen - userfaultfd: fix a race between writeprotect and exit_mmap() - mm/mempolicy: do not allow illegal MPOL_F_NUMA_BALANCING | MPOL_LOCAL in mbind() - vfs: check fd has read access in kernel_read_file_from_fd() - ALSA: usb-audio: Provide quirk for Sennheiser GSP670 Headset - ALSA: hda/realtek: Add quirk for Clevo PC50HS - ASoC: DAPM: Fix missing kctl change notifications - [x86] ASoC: nau8824: Fix headphone vs headset, button-press detection no longer working - blk-cgroup: blk_cgroup_bio_start() should use irq-safe operations on blkg->iostat_cpu - audit: fix possible null-pointer dereference in audit_filter_rules - ucounts: Move get_ucounts from cred_alloc_blank to key_change_session_keyring - ucounts: Pair inc_rlimit_ucounts with dec_rlimit_ucoutns in commit_creds - ucounts: Proper error handling in set_cred_ucounts - ucounts: Fix signal ucount refcounting - [powerpc*] KVM: PPC: Book3S HV: Fix stack handling in idle_kvm_start_guest() - [powerpc*] KVM: PPC: Book3S HV: Make idle_kvm_start_guest() return 0 if it went to guest (CVE-2021-43056) - [powerpc*] idle: Don't corrupt back chain when going idle - mm, slub: fix mismatch between reconstructed freelist depth and cnt - mm, slub: fix potential memoryleak in kmem_cache_open() - mm, slub: fix potential use-after-free in slab_debugfs_fops - mm, slub: fix incorrect memcg slab count for bulk free - [x86] KVM: nVMX: promptly process interrupts delivered while in guest mode - [x86] KVM: SEV: Flush cache on non-coherent systems before RECEIVE_UPDATE_DATA - [x86] KVM: SEV-ES: rename guest_ins_data to sev_pio_data - [x86] KVM: SEV-ES: clean up kvm_sev_es_ins/outs - [x86] KVM: SEV-ES: keep INS functions together - [x86] KVM: SEV-ES: fix length of string I/O - [x86] KVM: SEV-ES: go over the sev_pio_data buffer in multiple passes if needed - [x86] KVM: SEV-ES: reduce ghcb_sa_len to 32 bits - [x86] KVM: x86: leave vcpu->arch.pio.count alone in emulator_pio_in_out - [x86] KVM: x86: check for interrupts before deciding whether to exit the fast path - [x86] KVM: x86: split the two parts of emulator_pio_in - [x86] KVM: x86: remove unnecessary arguments from complete_emulator_pio_in - nfc: nci: fix the UAF of rf_conn_info object (CVE-2021-3760) - isdn: cpai: check ctr->cnr to avoid array index out of bound (CVE-2021-3896) - [sh4] net: bridge: mcast: use multicast_membership_interval for IGMPv3 - [x86] KVM: SEV-ES: Set guest_state_protected after VMSA update - [arm64] net: hns3: fix the max tx size according to user manual - [x86] KVM: MMU: Reset mmu->pkru_mask to avoid stale data - [arm64] drm/msm/a6xx: Serialize GMU communication - ALSA: hda: intel: Allow repeatedly probing on codec configuration errors - btrfs: deal with errors when checking if a dir entry exists during log replay - net: stmmac: add support for dwmac 3.40a - [x86] platform/x86: intel_scu_ipc: Increase virtual timeout to 10s - [x86] platform/x86: intel_scu_ipc: Update timeout value in comment - ALSA: hda: avoid write to STATESTS if controller is in reset - spi: Fix deadlock when adding SPI controllers on SPI buses - spi-mux: Fix false-positive lockdep splats - [x86] perf/x86/msr: Add Sapphire Rapids CPU support - scsi: iscsi: Fix set_param() handling - [x86] scsi: storvsc: Fix validation for unsolicited incoming packets - scsi: qla2xxx: Fix a memory leak in an error path of qla2x00_process_els() - mm/thp: decrease nr_thps in file's mapping on THP split - sched/scs: Reset the shadow stack when idle_task_exit - [arm64] net: hns3: fix for miscalculation of rx unused desc - net/mlx5: Lag, move lag destruction to a workqueue - net/mlx5: Lag, change multipath and bonding to be mutually exclusive - autofs: fix wait name hash calculation in autofs_wait() - scsi: core: Fix shost->cmd_per_lun calculation in scsi_add_host_with_dma() - [s390x] pci: cleanup resources only if necessary - [s390x] pci: fix zpci_zdev_put() on reserve - net: mdiobus: Fix memory leak in __mdiobus_register - e1000e: Separate TGP board type from SPT - [armhf] pinctrl: stm32: use valid pin identifier in stm32_pinctrl_resume() https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.16 - [armel,armhf] 9134/1: remove duplicate memcpy() definition - [armel,armhf] 9139/1: kprobes: fix arch_init_kprobes() prototype - [armel,armhf] 9148/1: handle CONFIG_CPU_ENDIAN_BE32 in arch/arm/kernel/head.S - usbnet: sanity check for maxpacket - usbnet: fix error return code in usbnet_probe() - pinctrl: amd: disable and mask interrupts on probe - ata: sata_mv: Fix the error handling of mv_chip_id() - tipc: fix size validations for the MSG_CRYPTO type (CVE-2021-43267) - nfc: port100: fix using -ERRNO as command type mask - Revert "net: mdiobus: Fix memory leak in __mdiobus_register" - mmc: vub300: fix control-message timeouts - mmc: cqhci: clear HALT state after CQE enable - [armhf] mmc: dw_mmc: exynos: fix the finding clock sample value - mmc: sdhci: Map more voltage level to SDHCI_POWER_330 - mmc: sdhci-pci: Read card detect from ACPI for Intel Merrifield - [arm64,armhf] mmc: sdhci-esdhc-imx: clear the buffer_read_ready to reset standard tuning circuit - block: Fix partition check for host-aware zoned block devices - ocfs2: fix race between searching chunks and release journal_head from buffer_head - nvme-tcp: fix H2CData PDU send accounting (again) - cfg80211: scan: fix RCU in cfg80211_add_nontrans_list() - cfg80211: fix management registrations locking - net: lan78xx: fix division by zero in send path - mm: hwpoison: remove the unnecessary THP check - mm: filemap: check if THP has hwpoisoned subpage for PMD page fault - mm, thp: bail out early in collapse_file for writeback page - mm: khugepaged: skip huge page collapse for special files - [arm64] dts: imx8mm-kontron: Fix polarity of reg_rst_eth2 - [arm64] dts: imx8mm-kontron: Fix CAN SPI clock frequency - [arm64] dts: imx8mm-kontron: Fix connection type for VSC8531 RGMII PHY - [arm64] dts: imx8mm-kontron: Set lower limit of VDD_SNVS to 800 mV - [arm64] dts: imx8mm-kontron: Make sure SOC and DRAM supply voltages are correct - mac80211: mesh: fix HE operation element length check - drm/ttm: fix memleak in ttm_transfered_destroy - [x86] drm/i915: Convert unconditional clflush to drm_clflush_virt_range() - [x86] drm/i915: Catch yet another unconditioal clflush - [x86] drm/i915/dp: Skip the HW readout of DPCD on disabled encoders - drm/amdgpu: Fix even more out of bound writes from debugfs - drm/amdgpu: fix out of bounds write (CVE-2021-42327) - drm/amdgpu: support B0&B1 external revision id for yellow carp - drm/amd/display: Limit display scaling to up to true 4k for DCN 3.1 - drm/amd/display: Fix prefetch bandwidth calculation for DCN3.1 - drm/amd/display: increase Z9 latency to workaround underflow in Z9 - drm/amd/display: Increase watermark latencies for DCN3.1 - drm/amd/display: Moved dccg init to after bios golden init - drm/amd/display: Fallback to clocks which meet requested voltage on DCN31 - drm/amd/display: Fix deadlock when falling back to v2 from v3 - Revert "watchdog: iTCO_wdt: Account for rebooting on second timeout" - cgroup: Fix memory leak caused by missing cgroup_bpf_offline - [riscv64] riscv, bpf: Fix potential NULL dereference - tcp_bpf: Fix one concurrency problem in the tcp_bpf_send_verdict function - bpf: Fix potential race in tail call compatibility check - bpf: Fix error usage of map_fd and fdget() in generic_map_update_batch() - [amd64] IB/qib: Protect from buffer overflow in struct qib_user_sdma_pkt fields - [amd64] IB/hfi1: Fix abba locking issue with sc_disable() - nvmet-tcp: fix data digest pointer calculation - nvme-tcp: fix data digest pointer calculation - nvme-tcp: fix possible req->offset corruption - ice: Respond to a NETDEV_UNREGISTER event for LAG - RDMA/mlx5: Set user priority for DCT - ice: check whether PTP is initialized in ice_ptp_release() - [arm64] dts: allwinner: h5: NanoPI Neo 2: Fix ethernet node - regmap: Fix possible double-free in regcache_rbtree_exit() - net: batman-adv: fix error handling - net-sysfs: initialize uid and gid before calling net_ns_get_ownership - cfg80211: correct bridge/4addr mode check - net: Prevent infinite while loop in skb_tx_hash() - RDMA/mlx5: Initialize the ODP xarray when creating an ODP MR - RDMA/sa_query: Use strscpy_pad instead of memcpy to copy a string - net: ethernet: microchip: lan743x: Fix driver crash when lan743x_pm_resume fails - net: ethernet: microchip: lan743x: Fix dma allocation failure by using dma_set_mask_and_coherent - [arm64] net: hns3: fix pause config problem after autoneg disabled - [arm64] net: hns3: fix data endian problem of some functions of debugfs - net: ethernet: microchip: lan743x: Fix skb allocation failure - phy: phy_ethtool_ksettings_get: Lock the phy for consistency - phy: phy_ethtool_ksettings_set: Move after phy_start_aneg - phy: phy_start_aneg: Add an unlocked version - phy: phy_ethtool_ksettings_set: Lock the PHY while changing settings - sctp: use init_tag from inithdr for ABORT chunk (CVE-2021-3772) - sctp: fix the processing for INIT chunk (CVE-2021-3772) - sctp: fix the processing for INIT_ACK chunk (CVE-2021-3772) - sctp: fix the processing for COOKIE_ECHO chunk (CVE-2021-3772) - sctp: add vtag check in sctp_sf_violation (CVE-2021-3772) - sctp: add vtag check in sctp_sf_do_8_5_1_E_sa (CVE-2021-3772) - sctp: add vtag check in sctp_sf_ootb (CVE-2021-3772) - bpf: Use kvmalloc for map values in syscall - [arm64] watchdog: sbsa: only use 32-bit accessors - bpf: Move BPF_MAP_TYPE for INODE_STORAGE and TASK_STORAGE outside of CONFIG_NET - [arm64] net: hns3: add more string spaces for dumping packets number of queue info in debugfs - [arm64] net: hns3: expand buffer len for some debugfs command - virtio-ring: fix DMA metadata flags - [s390x] KVM: s390: clear kicked_mask before sleeping again - [s390x] KVM: s390: preserve deliverable_mask in __airqs_kick_single_vcpu - [powerpc*] scsi: ibmvfc: Fix up duplicate response detection - [riscv64] fix misalgned trap vector base address - [x86] KVM: switch pvclock_gtod_sync_lock to a raw spinlock - [x86] KVM: SEV-ES: fix another issue with string I/O VMGEXITs - [x86] KVM: Take srcu lock in post_kvm_run_save() . [ Salvatore Bonaccorso ] * Revert "[amd64] Unset AMD_MEM_ENCRYPT_ACTIVE_BY_DEFAULT" * Bump ABI to 4 * media: ir-kbd-i2c: improve responsiveness of hauppauge zilog receivers (Closes: #994050) * [x86] media: ite-cir: IR receiver stop working after receive overflow (Closes: #996672) * scsi: core: Put LLD module refcnt after SCSI device is released * sfc: Fix reading non-legacy supported link modes * vrf: Revert "Reset skb conntrack connection..." * media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (CVE-2021-42739) . linux (5.14.12-1) unstable; urgency=medium . * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.10 - [arm64,armhf] media: cedrus: Fix SUNXI tile size calculation - [arm64] ASoC: fsl_sai: register platform component before registering cpu dai - [armhf] ASoC: fsl_spdif: register platform component before registering cpu dai - [x86] ASoC: SOF: Fix DSP oops stack dump output contents - [arm64] pinctrl: qcom: spmi-gpio: correct parent irqspec translation - net/mlx4_en: Resolve bad operstate value - [s390x] qeth: Fix deadlock in remove_discipline - [s390x] qeth: fix deadlock during failing recovery - [x86] crypto: ccp - fix resource leaks in ccp_run_aes_gcm_cmd() (CVE-2021-3744, CVE-2021-3764) - [m68k] Update ->thread.esp0 before calling syscall_trace() in ret_from_signal - [amd64] HID: amd_sfh: Fix potential NULL pointer dereference - tty: Fix out-of-bound vmalloc access in imageblit - cpufreq: schedutil: Use kobject release() method to free sugov_tunables - scsi: qla2xxx: Changes to support kdump kernel for NVMe BFS - drm/amdgpu: adjust fence driver enable sequence - drm/amdgpu: avoid over-handle of fence driver fini in s3 test (v2) - drm/amdgpu: stop scheduler when calling hw_fini (v2) - cpufreq: schedutil: Destroy mutex before kobject_put() frees the memory - scsi: ufs: ufs-pci: Fix Intel LKF link stability - ALSA: rawmidi: introduce SNDRV_RAWMIDI_IOCTL_USER_PVERSION - ALSA: firewire-motu: fix truncated bytes in message tracepoints - ALSA: hda/realtek: Quirks to enable speaker output for Lenovo Legion 7i 15IMHG05, Yoga 7i 14ITL5/15ITL5, and 13s Gen2 laptops. - [amd64,arm64] ACPI: NFIT: Use fallback node id when numa info in NFIT table is incorrect - fs-verity: fix signed integer overflow with i_size near S64_MAX - hwmon: (tmp421) handle I2C errors - hwmon: (w83793) Fix NULL pointer dereference by removing unnecessary structure field - hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary structure field - hwmon: (w83791d) Fix NULL pointer dereference by removing unnecessary structure field - [arm64,armhf] gpio: pca953x: do not ignore i2c errors - scsi: ufs: Fix illegal offset in UPIU event trace - mac80211: fix use-after-free in CCMP/GCMP RX - [x86] platform/x86/intel: hid: Add DMI switches allow list - [x86] kvmclock: Move this_cpu_pvti into kvmclock.h - [x86] ptp: Fix ptp_kvm_getcrosststamp issue for x86 ptp_kvm - [x86] KVM: x86: Fix stack-out-of-bounds memory access from ioapic_write_indirect() - [x86] KVM: x86: nSVM: don't copy virt_ext from vmcb12 - [x86] KVM: x86: Clear KVM's cached guest CR3 at RESET/INIT - [x86] KVM: x86: Swap order of CPUID entry "index" vs. "significant flag" checks - [x86] KVM: nVMX: Filter out all unsupported controls when eVMCS was activated - [x86] KVM: SEV: Update svm_vm_copy_asid_from for SEV-ES - [x86] KVM: SEV: Pin guest memory for write for RECEIVE_UPDATE_DATA - [x86] KVM: SEV: Acquire vcpu mutex when updating VMSA - [x86] KVM: SEV: Allow some commands for mirror VM - [x86] KVM: SVM: fix missing sev_decommission in sev_receive_start - [x86] KVM: nVMX: Fix nested bus lock VM exit - [x86] KVM: VMX: Fix a TSX_CTRL_CPUID_CLEAR field mask issue - RDMA/cma: Do not change route.addr.src_addr.ss_family - RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests - nbd: use shifts rather than multiplies - drm/amd/display: initialize backlight_ramping_override to false - drm/amd/display: Pass PCI deviceid into DC - drm/amd/display: Fix Display Flicker on embedded panels - drm/amdgpu: force exit gfxoff on sdma resume for rmb s0ix - drm/amdgpu: check tiling flags when creating FB on GFX8- - drm/amdgpu: correct initial cp_hqd_quantum for gfx9 - [amd64] drm/i915/gvt: fix the usage of ww lock in gvt scheduler. - ipvs: check that ip_vs_conn_tab_bits is between 8 and 20 - bpf: Handle return value of BPF_PROG_TYPE_STRUCT_OPS prog - IB/cma: Do not send IGMP leaves for sendonly Multicast groups - RDMA/cma: Fix listener leak in rdma_cma_listen_on_all() failure - netfilter: nf_tables: unlink table before deleting it - netfilter: log: work around missing softdep backend module - Revert "mac80211: do not use low data rates for data frames with no ack flag" - mac80211: Fix ieee80211_amsdu_aggregate frag_tail bug - mac80211: limit injected vht mcs/nss in ieee80211_parse_tx_radiotap - mac80211: mesh: fix potentially unaligned access - mac80211-hwsim: fix late beacon hrtimer handling - driver core: fw_devlink: Add support for FWNODE_FLAG_NEEDS_CHILD_BOUND_ON_ADD - net: mdiobus: Set FWNODE_FLAG_NEEDS_CHILD_BOUND_ON_ADD for mdiobus parents - sctp: break out if skb_header_pointer returns NULL in sctp_rcv_ootb - mptcp: don't return sockets in foreign netns - mptcp: allow changing the 'backup' bit when no sockets are open - [arm64] RDMA/hns: Work around broken constant propagation in gcc 8 - hwmon: (tmp421) report /PVLD condition as fault - hwmon: (tmp421) fix rounding for negative values - [arm64] net: enetc: fix the incorrect clearing of IF_MODE bits - net: ipv4: Fix rtnexthop len when RTA_FLOW is present - smsc95xx: fix stalled rx after link change - [x86] drm/i915/request: fix early tracepoints - [x86] drm/i915: Remove warning from the rps worker - [arm64,armhf] dsa: mv88e6xxx: 6161: Use chip wide MAX MTU - [arm64,armhf] dsa: mv88e6xxx: Fix MTU definition - [arm64,armhf] dsa: mv88e6xxx: Include tagger overhead when setting MTU for DSA and CPU ports - e100: fix length calculation in e100_get_regs_len - e100: fix buffer overrun in e100_get_regs - [amd64] RDMA/hfi1: Fix kernel pointer leak - [arm64] RDMA/hns: Fix the size setting error when copying CQE in clean_cq() - [arm64] RDMA/hns: Add the check of the CQE size of the user space - bpf: Exempt CAP_BPF from checks against bpf_jit_limit - [amd64] bpf, x86: Fix bpf mapping of atomic fetch implementation - Revert "block, bfq: honor already-setup queue merges" - scsi: csiostor: Add module softdep on cxgb4 - ixgbe: Fix NULL pointer dereference in ixgbe_xdp_setup - [arm64] net: hns3: do not allow call hns3_nic_net_open repeatedly - [arm64] net: hns3: remove tc enable checking - [arm64] net: hns3: don't rollback when destroy mqprio fail - [arm64] net: hns3: fix mixed flag HCLGE_FLAG_MQPRIO_ENABLE and HCLGE_FLAG_DCB_ENABLE - [arm64] net: hns3: fix show wrong state when add existing uc mac address - [arm64] net: hns3: reconstruct function hns3_self_test - [arm64] net: hns3: fix always enable rx vlan filter problem after selftest - [arm64] net: hns3: disable firmware compatible features when uninstall PF - [arm64,armhf] net: phy: bcm7xxx: Fixed indirect MMD operations - net: sched: flower: protect fl_walk() with rcu - net: stmmac: fix EEE init issue when paired with EEE capable PHYs - af_unix: fix races in sk_peer_pid and sk_peer_cred accesses - [x86] perf/x86/intel: Update event constraints for ICX - sched/fair: Add ancestors of unthrottled undecayed cfs_rq - sched/fair: Null terminate buffer when updating tunable_scaling - [armhf] hwmon: (occ) Fix P10 VRM temp sensors - [x86] kvm: fix objtool relocation warning - nvme: add command id quirk for apple controllers - elf: don't use MAP_FIXED_NOREPLACE for elf interpreter mappings - driver core: fw_devlink: Improve handling of cyclic dependencies - debugfs: debugfs_create_file_size(): use IS_ERR to check for error - ext4: fix loff_t overflow in ext4_max_bitmap_size() - ext4: fix reserved space counter leakage - ext4: add error checking to ext4_ext_replay_set_iblocks() - ext4: fix potential infinite loop in ext4_dx_readdir() - ext4: flush s_error_work before journal destroy in ext4_fill_super - HID: u2fzero: ignore incomplete packets without data (Closes: #994535) - net: udp: annotate data race around udp_sk(sk)->corkflag - usb: hso: remove the bailout parameter - HID: betop: fix slab-out-of-bounds Write in betop_probe - netfilter: ipset: Fix oversized kvmalloc() calls - mm: don't allow oversized kvmalloc() calls - HID: usbhid: free raw_report buffers in usbhid_stop - [x86] crypto: aesni - xts_crypt() return if walk.nbytes is 0 - [x86] KVM: x86: Handle SRCU initialization failure during page track init - netfilter: conntrack: serialize hash resizes and cleanups - netfilter: nf_tables: Fix oversized kvmalloc() calls - [amd64] HID: amd_sfh: Fix potential NULL pointer dereference - take 2 https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.11 - [arm64,armhf] spi: rockchip: handle zero length transfers without timing out - afs: Add missing vnode validation checks - nfsd: back channel stuck in SEQ4_STATUS_CB_PATH_DOWN - btrfs: replace BUG_ON() in btrfs_csum_one_bio() with proper error handling - btrfs: fix mount failure due to past and transient device flush error - net: mdio: introduce a shutdown method to mdio device drivers - xen-netback: correct success/error reporting for the SKB-with-fraglist case - [sparc64] fix pci_iounmap() when CONFIG_PCI is not set - scsi: sd: Free scsi_disk device via put_device() - [arm*] usb: dwc2: check return value after calling platform_get_resource() - Xen/gntdev: don't ignore kernel unmapping error - swiotlb-xen: ensure to issue well-formed XENMEM_exchange requests - nvme-fc: update hardware queues before using them - nvme-fc: avoid race between time out and tear down - [arm64] thermal/drivers/tsens: Fix wrong check for tzd in irq handlers - scsi: ses: Retry failed Send/Receive Diagnostic commands - [arm64,armhf] irqchip/gic: Work around broken Renesas integration - smb3: correct smb3 ACL security descriptor - [x86] insn, tools/x86: Fix undefined behavior due to potential unaligned accesses - io_uring: allow conditional reschedule for intensive iterators - block: don't call rq_qos_ops->done_bio if the bio isn't tracked - KVM: do not shrink halt_poll_ns below grow_start - [x86] KVM: x86: reset pdptrs_from_userspace when exiting smm - [x86] kvm: x86: Add AMD PMU MSRs to msrs_to_save_all[] - [x86] KVM: x86: nSVM: restore int_vector in svm_clear_vintr - [x86] perf/x86: Reset destroy callback on event init failure - libata: Add ATA_HORKAGE_NO_NCQ_ON_ATI for Samsung 860 and 870 SSD. - Revert "brcmfmac: use ISO3166 country code and 0 rev as fallback" - [armhf] Revert "ARM: imx6q: drop of_platform_default_populate() from init_machine" https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.12 - usb: cdc-wdm: Fix check for WWAN - [arm64,armhf] usb: chipidea: ci_hdrc_imx: Also search for 'phys' phandle - usb: gadget: f_uac2: fixed EP-IN wMaxPacketSize - USB: cdc-acm: fix racy tty buffer accesses - USB: cdc-acm: fix break reporting - usb: typec: tcpm: handle SRC_STARTUP state if cc changes - [x86] usb: typec: tipd: Remove dependency on "connector" child fwnode - drm/amdgpu: During s0ix don't wait to signal GFXOFF - drm/nouveau/kms/tu102-: delay enabling cursor until after assign_windows - drm/nouveau/ga102-: support ttm buffer moves via copy engine - [x86] drm/i915: Fix runtime pm handling in i915_gem_shrink - [x86] drm/i915: Extend the async flip VT-d w/a to skl/bxt - xen/privcmd: fix error handling in mmap-resource processing - [arm64] mmc: meson-gx: do not use memcpy_to/fromio for dram-access-quirk - ovl: fix missing negative dentry check in ovl_rename() - ovl: fix IOCB_DIRECT if underlying fs doesn't support direct IO - nfsd: fix error handling of register_pernet_subsys() in init_nfsd() - nfsd4: Handle the NFSv4 READDIR 'dircount' hint being zero - SUNRPC: fix sign error causing rpcsec_gss drops - xen/balloon: fix cancelled balloon action - [armhf] dts: omap3430-sdp: Fix NAND device node - scsi: ufs: core: Fix task management completion - [riscv64] Flush current cpu icache before other cpus - [armhf] bus: ti-sysc: Add break in switch statement in sysc_init_soc() - iwlwifi: mvm: Fix possible NULL dereference - [arm64] soc: qcom: mdt_loader: Drop PT_LOAD check on hash segment - [armhf] dts: imx: Add missing pinctrl-names for panel on M53Menlo - [armhf] dts: imx: Fix USB host power regulator polarity on M53Menlo - [amd64] PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus - iwlwifi: pcie: add configuration of a Wi-Fi adapter on Dell XPS 15 - netfilter: conntrack: fix boot failure with nf_conntrack.enable_hooks=1 - netfilter: nf_tables: add position handle in event notification - netfilter: nf_tables: reverse order in rule replacement expansion - [armel,armhf] bpf, arm: Fix register clobbering in div/mod implementation - [armhf] soc: ti: omap-prm: Fix external abort for am335x pruss - bpf: Fix integer overflow in prealloc_elems_and_freelist() (CVE-2021-41864) - net/mlx5e: IPSEC RX, enable checksum complete - net/mlx5e: Keep the value for maximum number of channels in-sync - net/mlx5: E-Switch, Fix double allocation of acl flow counter - net/mlx5: Force round second at 1PPS out start time - net/mlx5: Avoid generating event after PPS out in Real time mode - net/mlx5: Fix length of irq_index in chars - net/mlx5: Fix setting number of EQs of SFs - net/mlx5e: Fix the presented RQ index in PTP stats - phy: mdio: fix memory leak - net_sched: fix NULL deref in fifo_set_limit() - [arm64] net: mscc: ocelot: fix VCAP filters remaining active after being deleted - [arm64,armhf] net: stmmac: dwmac-rk: Fix ethernet on rk3399 based devices - [mips*] Revert "add support for buggy MT7621S core detection" - netfilter: nf_tables: honor NLM_F_CREATE and NLM_F_EXCL in event notification - [i386] ptp_pch: Load module automatically if ID matches - [armhf] dts: imx: change the spi-nor tx - [arm64] dts: imx8: change the spi-nor tx - [armhf] imx6: disable the GIC CPU interface before calling stby-poweroff sequence - [x86] drm/i915/audio: Use BIOS provided value for RKL HDA link - [x86] drm/i915/jsl: Add W/A 1409054076 for JSL - [x86] drm/i915/tc: Fix TypeC port init/resume time sanitization - [x86] drm/i915/bdb: Fix version check - netfs: Fix READ/WRITE confusion when calling iov_iter_xarray() - afs: Fix afs_launder_page() to set correct start file position - net: bridge: use nla_total_size_64bit() in br_get_linkxstats_size() - net: bridge: fix under estimation in br_get_linkxstats_size() - net/sched: sch_taprio: properly cancel timer from taprio_destroy() - net: sfp: Fix typo in state machine debug string - net: pcs: xpcs: fix incorrect CL37 AN sequence - netlink: annotate data races around nlk->bound - drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume - [armhf] bus: ti-sysc: Use CLKDM_NOAUTO for dra7 dcan1 for errata i893 - [arm64,armhf] drm/sun4i: dw-hdmi: Fix HDMI PHY clock setup - drm/nouveau: avoid a use-after-free when BO init fails - drm/nouveau/kms/nv50-: fix file release memory leak - drm/nouveau/debugfs: fix file release memory leak - net: pcs: xpcs: fix incorrect steps on disable EEE - net: stmmac: trigger PCS EEE to turn off on link down - [amd64,arm64] gve: Correct available tx qpl check - [amd64,arm64] gve: Avoid freeing NULL pointer - [amd64,arm64] gve: Properly handle errors in gve_assign_qpl - rtnetlink: fix if_nlmsg_stats_size() under estimation - [amd64,arm64] gve: fix gve_get_stats() - [amd64,arm64] gve: report 64bit tx_bytes counter from gve_handle_report_stats() - i40e: fix endless loop under rtnl - i40e: Fix freeing of uninitialized misc IRQ vector - iavf: fix double unlock of crit_lock - net: prefer socket bound to interface when not in VRF - [powerpc*] iommu: Report the correct most efficient DMA mask for PCI devices - i2c: acpi: fix resource leak in reconfiguration device addition - [riscv64] explicitly use symbol offsets for VDSO - [riscv64] vdso: Refactor asm/vdso.h - [riscv64] vdso: Move vdso data page up front - [riscv64] vdso: make arch_setup_additional_pages wait for mmap_sem for write killable - [s390x] bpf, s390: Fix potential memory leak about jit_data - [riscv64] Include clone3() on rv32 - scsi: iscsi: Fix iscsi_task use after free - [powerpc*] bpf: Fix BPF_MOD when imm == 1 - [powerpc*] bpf: Fix BPF_SUB when imm == 0x80000000 - [powerpc*] 64s: fix program check interrupt emergency stack path - [powerpc*] traps: do not enable irqs in _exception - [powerpc*] 64s: Fix unrecoverable MCE calling async handler from NMI - [powerpc*] pseries/eeh: Fix the kdump kernel crash during eeh_pseries_init - [i386] x86/platform/olpc: Correct ifdef symbol to intended CONFIG_OLPC_XO15_SCI - [x86] fpu: Restore the masking out of reserved MXCSR bits - [x86] entry: Correct reference to intended CONFIG_64_BIT - [x86] hpet: Use another crystalball to evaluate HPET usability - [arm64,armhf] dsa: tag_dsa: Fix mask for trunked packets . [ Ben Hutchings ] * debian/.gitignore: Ignore debian/tests/control again * integrity: Drop "MODSIGN: load blacklist from MOKx" as redundant after 5.13 * tools/perf: Fix warning introduced by "tools/perf: pmu-events: Fix reproducibility" * debian/rules.real: Stop invoking obsolete headers_check target * libcpupower: Update symbols file for changes in 5.13.9-1~exp1 . [ John Paul Adrian Glaubitz ] * [alpha] Re-enable CONFIG_EISA which was disabled upstream by accident . [ Salvatore Bonaccorso ] * Bump ABI to 3 * mm/secretmem: Fix NULL page->mapping dereference in page_is_secretmem() (Closes: #996175) . [ Aurelien Jarno ] * [riscv64] Improve HiFive Unmatched support: enable SENSORS_LM90.
-
Lorenzo "Palinuro" Faletra authored
-
- 26 Oct, 2021 2 commits
-
-
Lorenzo "Palinuro" Faletra authored
linux (5.14.9-9parrot1) lts-updates; urgency=medium . * Import new Debian release. * Add Parrot wireless patches. * Disable kernel signing. . linux (5.14.9-2) unstable; urgency=medium . * [amd64] Unset AMD_MEM_ENCRYPT_ACTIVE_BY_DEFAULT. Do not activate AMD Secure Memory Encryption (SME) by default, until AMDGPU related incompatibilities are fixed. (Closes: #994453) . linux (5.14.9-1) unstable; urgency=medium . * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.7 - [amd64] net: stmmac: fix MAC not working when system resume back with WoL active - [amd64,arm64] swiotlb-xen: avoid double free - swiotlb-xen: fix late init retry - [amd64] xen: reset legacy rtc flag for PV domU - [amd64] xen: fix usage of pmd_populate in mremap for pv guests - [arm64] sve: Use correct size when reinitialising SVE state - PCI: Add AMD GPU multi-function power dependencies - drm/amd/display: dsc mst 2 4K displays go dark with 2 lane HBR3 - drm/amd/display: Fix white screen page fault for gpuvm - drm/amd/amdgpu: Increase HWIP_MAX_INSTANCE to 10 - drm/amdgpu: use IS_ERR for debugfs APIs - drm/amdgpu: fix use after free during BO move - drm/amdgpu: add amdgpu_amdkfd_resume_iommu - drm/amdgpu: move iommu_resume before ip init/resume - drm/radeon: pass drm dev radeon_agp_head_init directly - io_uring: allow retry for O_NONBLOCK if async is supported - [x86] drm/i915/dp: Use max params for panels < eDP 1.4 - [armhf] drm/etnaviv: return context from etnaviv_iommu_context_get - [armhf] drm/etnaviv: put submit prev MMU context when it exists - [armhf] drm/etnaviv: stop abusing mmu_context as FE running marker - [armhf] drm/etnaviv: keep MMU context across runtime suspend/resume - [armhf] drm/etnaviv: exec and MMU state is lost when resetting the GPU - [armhf] drm/etnaviv: fix MMU context leak on GPU reset - [armhf] drm/etnaviv: reference MMU context when setting up hardware state - [armhf] drm/etnaviv: add missing MMU context put when reaping MMU mapping - [s390x] sclp: fix Secure-IPL facility detection - net: qrtr: revert check in qrtr_endpoint_post() (Closes: #995491) - [x86] pat: Pass valid address to sanitize_phys() - [x86] mm: Fix kern_addr_valid() to cope with existing but not present entries - x86/mce: Avoid infinite loop for copy from user recovery - tipc: fix an use-after-free issue in tipc_recvmsg - net: remove the unnecessary check in cipso_v4_doi_free - net/{mlx5|nfp|bnxt}: Remove unnecessary RTNL lock assert - net/l2tp: Fix reference count leak in l2tp_udp_recv_core - r6040: Restore MDIO clock frequency after MAC reset - tipc: increase timeout in tipc_sk_enqueue() - [arm64] drm/rockchip: cdn-dp-core: Make cdn_dp_core_resume __maybe_unused - rtc: cmos: Disable irq around direct invocation of cmos_interrupt() - [x86] drm/i915/dp: return proper DPRX link training result - net/mlx5: FWTrace, cancel work on alloc pd error flow - net/mlx5: Fix potential sleeping in atomic context - net: stmmac: fix system hang caused by eee_ctrl_timer during suspend/resume - igc: fix tunnel offloading - nvme-tcp: fix io_work priority inversion - [powerpc*] 64s: system call scv tabort fix for corrupt irq soft-mask state - events: Reuse value read using READ_ONCE instead of re-reading it - vhost_net: fix OoB on sendmsg() failure. - net/af_unix: fix a data-race in unix_dgram_poll - [arm64,armhf] net: dsa: destroy the phylink instance on any error in dsa_slave_phy_setup - tcp: fix tp->undo_retrans accounting in tcp_sacktag_one() - qed: Handle management FW error - udp_tunnel: Fix udp_tunnel_nic work-queue type - dt-bindings: arm: Fix Toradex compatible typo - [powerpc*] KVM: PPC: Book3S HV: Tolerate treclaim. in fake-suspend mode changing registers - [powerpc*] 64s: system call rfscv workaround for TM bugs - [powerpc*] mce: Fix access error in mce handler - [s390x] pci_mmio: fully validate the VMA before calling follow_pte() - bnxt_en: make bnxt_free_skbs() safe to call after bnxt_free_mem() - [arm64] net: hns3: pad the short tunnel frame before sending to hardware - [arm64] net: hns3: change affinity_mask to numa node range - [arm64] net: hns3: disable mac in flr process - [arm64] net: hns3: fix the timing issue of VF clearing interrupt sources - net: stmmac: platform: fix build warning when with !CONFIG_PM_SLEEP - [x86] Drivers: hv: vmbus: Fix kernel crash upon unbinding a device from uio_hv_generic driver - net/mlx5e: Fix mutual exclusion between CQE compression and HW TS - ice: Correctly deal with PFs that do not support RDMA - [arm64] net: hns3: fix the exception when query imp info - nvme: avoid race in shutdown namespace removal - blkcg: fix memory leak in blk_iolatency_init - [arm64,armhf] net: dsa: flush switchdev workqueue before tearing down CPU/DSA ports - dt-bindings: mtd: gpmc: Fix the ECC bytes vs. OOB bytes equation - PCI: Add ACS quirks for NXP LX2xx0 and LX2xx2 platforms - fuse: fix use after free in fuse_read_interrupt() - [arm64,armhf] PCI: tegra: Fix OF node reference leak - [armhf] mfd: Don't use irq_create_mapping() to resolve a mapping - [riscv64] fix the global name pfn_base confliction error - [arm64] KVM: Make hyp_panic() more robust when protected mode is enabled - tracing/probes: Reject events which have the same name of existing one - PCI: Add ACS quirks for Cavium multi-function devices - watchdog: Start watchdog in watchdog_set_last_hw_keepalive only if appropriate - Set fc_nlinfo in nh_create_ipv4, nh_create_ipv6 - flow: fix object-size-mismatch warning in flowi{4,6}_to_flowi_common() - net: usb: cdc_mbim: avoid altsetting toggling for Telit LN920 - block, bfq: honor already-setup queue merges - [i386] PCI: ibmphp: Fix double unmap of io_mem - loop: reduce the loop_ctl_mutex scope - ethtool: Fix an error code in cxgb2.c - net: phylink: add suspend/resume support - mfd: axp20x: Update AXP288 volatile ranges - PCI: of: Don't fail devm_pci_alloc_host_bridge() on missing 'ranges' - netfilter: nft_ct: protect nft_ct_pcpu_template_refcnt with mutex - [arm64] KVM: Restrict IPA size to maximum 48 bits on 4K and 16K page size - PCI: Fix pci_dev_str_match_path() alloc while atomic bug - mtd: mtdconcat: Judge callback existence based on the master - mtd: mtdconcat: Check _read, _write callbacks existence before assignment - [arm64] KVM: Fix read-side race on updates to vcpu reset state - [arm64] KVM: Handle PSCI resets before userspace touches vCPU state - PCI/PTM: Remove error message at boot - watchdog: Fix NULL pointer dereference when releasing cdev - mtd: rawnand: cafe: Fix a resource leak in the error handling path of 'cafe_nand_probe()' - [arm64] gpio: mpc8xxx: Fix a resources leak in the error handling path of 'mpc8xxx_probe()' - [arm64] gpio: mpc8xxx: Fix a potential double iounmap call in 'mpc8xxx_probe()' - [arm64] gpio: mpc8xxx: Use 'devm_gpiochip_add_data()' to simplify the code and avoid a leak - io_uring: retry in case of short read on block device - mptcp: fix possible divide by zero - net: hso: add failure handler for add_net_device - [armhf] net: dsa: b53: Fix calculating number of switch ports - [armhf] net: dsa: b53: Set correct number of ports in the DSA struct - mptcp: Only send extra TCP acks in eligible socket states - netfilter: socket: icmp6: fix use-after-scope - fq_codel: reject silly quantum parameters - qlcnic: Remove redundant unlock in qlcnic_pinit_from_rom - iwlwifi: move get pnvm file name to a separate function - iwlwifi: pnvm: Fix a memory leak in 'iwl_pnvm_get_from_fs()' - ip_gre: validate csum_start only on pull - [armhf] net: dsa: b53: Fix IMP port setup on BCM5301x - bnxt_en: fix stored FW_PSID version masks - bnxt_en: Fix asic.rev in devlink dev info command - bnxt_en: Fix possible unintended driver initiated error recovery - ip6_gre: Revert "ip6_gre: add validation for csum_start" - mfd: lpc_sch: Rename GPIOBASE to prevent build error - cxgb3: fix oops on module removal - bnxt_en: Fix error recovery regression - [armhf] net: dsa: bcm_sf2: Fix array overrun in bcm_sf2_num_active_ports() - [s390x] bpf: Fix optimizing out zero-extensions - [s390x] bpf: Fix 64-bit subtraction of the -0x80000000 constant - [s390x] bpf: Fix branch shortening during codegen pass https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.8 - PCI: pci-bridge-emul: Add PCIe Root Capabilities Register - [arm64] PCI: aardvark: Fix reporting CRS value - console: consume APC, DM, DCS - [x86] staging: rtl8192u: Fix bitwise vs logical operator in TranslateRxSignalStuff819xUsb() - coredump: fix memleak in dump_vma_snapshot() - [arm64] RDMA/hns: Enable stash feature of HIP09 - RDMA/mlx5: Fix xlt_chunk_align calculation - dmaengine: acpi: Avoid comparison GSI with Linux vIRQ - staging: rtl8723bs: fix wpa_set_auth_algs() function - [armhf] thermal/drivers/exynos: Fix an error code in exynos_tmu_probe() - 9p/trans_virtio: Remove sysfs file on probe failure - prctl: allow to setup brk for et_dyn executables - nilfs2: use refcount_dec_and_lock() to fix potential UAF - profiling: fix shift-out-of-bounds bugs - PM: sleep: core: Avoid setting power.must_resume to false - ceph: cancel delayed work instead of flushing on mdsc teardown - platform/chrome: sensorhub: Add trace events for sample - platform/chrome: cros_ec_trace: Fix format warnings - [s390x] entry: make oklabel within CHKSTG macro local - SUNRPC: don't pause on incomplete allocation - init: move usermodehelper_enable() to populate_rootfs() - thermal/core: Fix thermal_cooling_device_register() prototype - drivers: base: cacheinfo: Get rid of DEFINE_SMP_CALL_CACHE_FUNCTION() - [amd64] iommu/amd: Relocate GAMSup check to early_enable_iommus - [amd64] iommu/vt-d: Fix PASID leak in intel_svm_unbind_mm() - [amd64] iommu/vt-d: Fix a deadlock in intel_svm_drain_prq() - [arm64] mm: limit linear region to 51 bits for KVM in nVHE mode - drm/ttm: Fix a deadlock if the target BO is not idle during swap - of: property: Disable fw_devlink DT support for X86 - [riscv64] dts: microchip: mpfs-icicle: Fix serial console - [arm64,armhf] ASoC: audio-graph: respawn Platform Support - [x86] ACPI: PM: s2idle: Run both AMD and Microsoft methods if both are supported - ceph: fix memory leak on decode error in ceph_handle_caps - ceph: request Fw caps before updating the mtime in ceph_write_iter - ceph: remove the capsnaps when removing caps - ceph: lockdep annotations for try_nonblocking_invalidate - [s390x] unwind: use current_frame_address() to unwind current task - btrfs: update the bdev time directly when closing - btrfs: delay blkdev_put until after the device remove - btrfs: fix lockdep warning while mounting sprout fs - nilfs2: fix memory leak in nilfs_sysfs_create_device_group - nilfs2: fix NULL pointer in nilfs_##name##_attr_release - nilfs2: fix memory leak in nilfs_sysfs_create_##name##_group - nilfs2: fix memory leak in nilfs_sysfs_delete_##name##_group - nilfs2: fix memory leak in nilfs_sysfs_create_snapshot_group - nilfs2: fix memory leak in nilfs_sysfs_delete_snapshot_group - drm/amdgpu: Fixes to returning VBIOS RAS EEPROM address - drm/amdgpu: fix fdinfo race with process exit - [arm64,armhf] pwm: rockchip: Don't modify HW state in .remove() callback - [armhf] pwm: stm32-lp: Don't modify HW state in .remove() callback - nvmet: fixup buffer overrun in nvmet_subsys_attr_serial() - block: genhd: don't call blkdev_show() with major_names_lock held - blk-throttle: fix UAF by deleteing timer in blk_throtl_exit() - blk-mq: allow 4x BLK_MAX_REQUEST_COUNT at blk_plug for multiple_queues - sched/idle: Make the idle timer expire in hard interrupt context - cifs: properly invalidate cached root handle when closing it - io_uring: fix off-by-one in BUILD_BUG_ON check of __REQ_F_LAST_BIT - selinux,smack: fix subjective/objective credential use mixups - drm/nouveau/nvkm: Replace -ENOSYS with -ENODEV https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.9 - mm, hwpoison: add is_free_buddy_page() in HWPoisonHandlable() - ocfs2: drop acl cache for directories too - mm/debug: sync up MR_CONTIG_RANGE and MR_LONGTERM_PIN - mm: fix uninitialized use in overcommit_policy_handler - usb: gadget: u_audio: EP-OUT bInterval in fback frequency - [arm*] usb: dwc2: gadget: Fix ISOC flow for BDMA and Slave - [arm*] usb: dwc2: gadget: Fix ISOC transfer complete handling for DDMA - [armhf] usb: musb: tusb6010: uninitialized data in tusb_fifo_write_unaligned() - cifs: Not to defer close on file when lock is set - cifs: Fix soft lockup during fsstress - cifs: fix incorrect check for null pointer in header_assemble - [xen] x86: fix PV trap handling on secondary processors - usb-storage: Add quirk for ScanLogic SL11R-IDE older than 2.6c - USB: serial: cp210x: add ID for GW Instek GDM-834x Digital Multimeter - USB: cdc-acm: fix minor-number release - [arm*] binder: make sure fd closes complete - [arm*] binder: fix freeze race - [arm64] usb: isp1760: do not sleep in field register poll - Re-enable UAS for LaCie Rugged USB3-FW with fk quirk - [arm64,armhf] usb: dwc3: core: balance phy init and exit - usb: core: hcd: Add support for deferring roothub registration - USB: serial: mos7840: remove duplicated 0xac24 device ID - USB: serial: option: add Telit LN920 compositions - USB: serial: option: remove duplicate USB device ID - USB: serial: option: add device id for Foxconn T99W265 - [powerpc*] misc: genwqe: Fixes DMA mask setting - KVM: rseq: Update rseq when processing NOTIFY_RESUME on xfer to KVM guest - erofs: fix up erofs_lookup tracepoint - nexthop: Fix division by zero while replacing a resilient group - btrfs: prevent __btrfs_dump_space_info() to underflow its free space - xhci: Set HCD flag to defer primary roothub registration - [arm64] serial: mvebu-uart: fix driver's tx_empty callback - scsi: sd_zbc: Ensure buffer size is aligned to SECTOR_SIZE - net: hso: fix muxed tty registration - [amd64] platform/x86: amd-pmc: Increase the response register timeout - [arm64] Restore forced disabling of KPTI on ThunderX - [arm64] Mitigate MTE issues with str{n}cmp() - [x86] comedi: Fix memory leak in compat_insnlist() - afs: Fix page leak - afs: Fix incorrect triggering of sillyrename on 3rd-party invalidation - afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server - afs: Fix updating of i_blocks on file/dir extension - virtio-net: fix pages leaking when building skb in big mode - [arm64] enetc: Fix illegal access when reading affinity_hint - [arm64] enetc: Fix uninitialized struct dim_sample field usage - [arm64,armhf] net: dsa: tear down devlink port regions when tearing down the devlink port on error - napi: fix race inside napi_enable - bnxt_en: Fix TX timeout when TX ring size is set to the smallest - [arm64] net: hns3: fix change RSS 'hfunc' ineffective issue - [arm64] net: hns3: fix inconsistent vf id print - [arm64] net: hns3: fix misuse vf id and vport id in some logs - [arm64] net: hns3: check queue id range before using - [arm64] net: hns3: check vlan id before using it - [arm64] net: hns3: fix a return value error in hclge_get_reset_status() - net/smc: add missing error check in smc_clc_prfx_set() - net/smc: fix 'workqueue leaked lock' in smc_conn_abort_work - [arm64,armhf] net: dsa: fix dsa_tree_setup error path - [arm64,armhf] net: dsa: don't allocate the slave_mii_bus using devres - spi: Revert modalias changes - [s390x] qeth: fix NULL deref in qeth_clear_working_pool_list() - gpiolib: acpi: Make set-debounce-timeout failures non fatal - qed: rdma - don't wait for resources under hw error recovery flow - mptcp: ensure tx skbs always have the MPTCP ext - nexthop: Fix memory leaks in nexthop notification chain listeners - [arm64] net: mscc: ocelot: fix forwarding from BLOCKING ports remaining enabled - net/mlx4_en: Don't allow aRFS for encapsulated packets - atlantic: Fix issue in the pm resume flow. - scsi: iscsi: Adjust iface sysfs attr detection - scsi: target: Fix the pgr/alua_support_store functions - [x86] tty: synclink_gt: rename a conflicting function name - [x86] fault: Fix wrong signal when vsyscall fails with pkey - nvme-tcp: fix incorrect h2cdata pdu offset accounting - nvme: keep ctrl->namespaces ordered - thermal/core: Potential buffer overflow in thermal_build_list_of_policies() - cifs: fix a sign extension bug - scsi: sd_zbc: Support disks with more than 2**32 logical blocks - scsi: ufs: Revert "Utilize Transfer Request List Completion Notification Register" - scsi: ufs: Retry aborted SCSI commands instead of completing these successfully - scsi: ufs: core: Unbreak the reset handler - scsi: qla2xxx: Restore initiator in dual mode - scsi: lpfc: Use correct scnprintf() limit - [arm64,armhf] irqchip/gic-v3-its: Fix potential VPE leak on error - md: fix a lock order reversal in md_alloc - [x86] asm: Fix SETZ size enqcmds() build failure - io_uring: fix race between poll completion and cancel_hash insertion - io_uring: fix missing set of EPOLLONESHOT for CQ ring overflow - io_uring: put provided buffer meta data under memcg accounting - io_uring: don't punt files update to io-wq unconditionally - blktrace: Fix uaf in blk_trace access after removing by sysfs - net: phylink: Update SFP selected interface on advertising changes - net: stmmac: allow CSR clock of 300MHz - blk-mq: avoid to iterate over stale request - ipv6: delay fib6_sernum increase in fib6_add - [x86] cpufreq: intel_pstate: Override parameters if HWP forced by BIOS - bpf: Add oversize check before call kvcalloc() - xen/balloon: use a kernel thread instead a workqueue - nvme-multipath: fix ANA state updates when a namespace is not present - nvme-rdma: destroy cm id before destroy qp to avoid use after free - amd/display: downgrade validation failure log level - drm/ttm: fix type mismatch error on sparc64 - block: check if a profile is actually registered in blk_integrity_unregister - block: flush the integrity workqueue in blk_integrity_unregister - blk-cgroup: fix UAF by grabbing blkcg lock before destroying blkg pd - compiler.h: Introduce absolute_pointer macro - qnx4: avoid stringop-overread errors - drm/amd/display: Fix unstable HPCP compliance on Chrome Barcelo - drm/amd/display: Link training retry fix for abort case - amd/display: enable panel orientation quirks - [arm64] Mark __stack_chk_guard as __ro_after_init - net: 6pack: Fix tx timeout and slot time - [arm64] spi: Fix tegra20 build with CONFIG_PM=n - [arm*] Revert drm/vc4 hdmi runtime PM changes - [x86] setup: Call early_reserve_memory() earlier - [x86] thermal/drivers/int340x: Do not set a wrong tcc offset on resume - [armhf] irqchip/armada-370-xp: Fix ack/eoi breakage - [arm64] add MTE supported check to thread switching and syscall entry/exit - USB: serial: cp210x: fix dropped characters with CP2102 - software node: balance refcount for managed software nodes - xen/balloon: fix balloon kthread freezing - qnx4: work around gcc false positive warning bug - nvmet: fix a width vs precision bug in nvmet_subsys_attr_serial_show() - usb: gadget: f_uac2: Add missing companion descriptor for feedback EP - usb: gadget: f_uac2: Populate SS descriptors' wBytesPerInterval . [ Salvatore Bonaccorso ] * Bump ABI to 2 * ext4: limit the number of blocks in one ADD_RANGE TLV (Closes: #995425)
-
Lorenzo "Palinuro" Faletra authored
-
- 25 Sep, 2021 2 commits
-
-
Lorenzo "Palinuro" Faletra authored
linux (5.14.6-2parrot1) lts-updates; urgency=medium . * Import new Debian release. . linux (5.14.6-2) unstable; urgency=medium . * io_uring: ensure symmetry in handling iter types in loop_rw_iter() (CVE-2021-41073) . linux (5.14.6-1) unstable; urgency=medium . * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.4 - locking/mutex: Fix HANDOFF condition - regmap: fix the offset of register error log - sched/deadline: Fix reset_on_fork reporting of DL tasks - power: supply: axp288_fuel_gauge: Report register-address on readb / writeb errors - sched/deadline: Fix missing clock update in migrate_task_rq_dl() - rcu/tree: Handle VM stoppage in stall detection - [x86] EDAC/mce_amd: Do not load edac_mce_amd module on guests - posix-cpu-timers: Force next expiration recalc after itimer reset - hrtimer: Avoid double reprogramming in __hrtimer_start_range_ns() - hrtimer: Ensure timerfd notification for HIGHRES=n - udf: Check LVID earlier - udf: Fix iocharset=utf8 mount option - isofs: joliet: Fix iocharset=utf8 mount option - bcache: add proper error unwinding in bcache_device_init - nbd: add the check to prevent overflow in __nbd_ioctl() - blk-throtl: optimize IOPS throttle for large IO scenarios - nvme-tcp: don't update queue count when failing to set io queues - nvme-rdma: don't update queue count when failing to set io queues - nvmet: pass back cntlid on successful completion - [s390x] cio: add dev_busid sysfs entry for each subchannel - [s390x] zcrypt: fix wrong offset index for APKA master key valid state - libata: fix ata_host_start() - sched/topology: Skip updating masks for non-online nodes - [x86] crypto: qat - do not ignore errors from enable_vf2pf_comms() - [x86] crypto: qat - handle both source of interrupt in VF ISR - [x86] crypto: qat - fix reuse of completion variable - [x86] crypto: qat - fix naming for init/shutdown VF to PF notifications - [x86] crypto: qat - do not export adf_iov_putmsg() - crypto: tcrypt - Fix missing return value check - fcntl: fix potential deadlocks for &fown_struct.lock - fcntl: fix potential deadlock for &fasync_struct.fa_lock - udf_get_extendedattr() had no boundary checks. - io-wq: remove GFP_ATOMIC allocation off schedule out path - [s390x] pci: fix misleading rc in clp_set_pci_fn() - [s390x] debug: keep debug data on resize - [s390x] debug: fix debug area life cycle - [s390x] ap: fix state machine hang after failure to enable irq - [s390x] smp: enable DAT before CPU restart callback is called - sched/debug: Don't update sched_domain debug directories before sched_debug_init() - [arm64] power: supply: cw2015: use dev_err_probe to allow deferred probe - [x86] crypto: x86/aes-ni - add missing error checks in XTS code - sched/numa: Fix is_core_idle() - sched: Fix UCLAMP_FLAG_IDLE setting - rcu: Fix to include first blocked task in stall warning - rcu: Fix stall-warning deadlock due to non-release of rcu_node ->lock - block: return ELEVATOR_DISCARD_MERGE if possible - [arm64] spi: spi-fsl-dspi: Fix issue with uninitialized dma_slave_config - [mips64el,mipsel] irqchip/loongson-pch-pic: Improve edge triggered interrupt support - lib/mpi: use kcalloc in mpi_resize - nbd: do del_gendisk() asynchronously for NBD_DESTROY_ON_DISCONNECT - block: nbd: add sanity check for first_minor - [arm64,armhf] irqchip/gic-v3: Fix priority comparison when non-secure priorities are used - [x86] crypto: qat - use proper type for vf_mask - [powerpc*] tpm: ibmvtpm: Avoid error message when process gets signal while waiting - [x86] mce: Defer processing of early errors - blk-crypto: fix check for too-large dun_bytes - [arm64] regulator: vctrl: Use locked regulator_get_voltage in probe path - [arm64] regulator: vctrl: Avoid lockdep warning in enable/disable ops - [arm64,armhf] drm/panfrost: Fix missing clk_disable_unprepare() on error in panfrost_clk_init() - [x86] drm/gma500: Fix end of loop tests for list_for_each_entry - drm/of: free the right object - bpf: Fix a typo of reuseport map in bpf.h. - bpf: Fix potential memleak and UAF in the verifier. - drm/of: free the iterator object on failure - [amd64,arm64] gve: fix the wrong AdminQ buffer overflow check - [armhf] dts: everest: Add phase corrections for eMMC - i40e: improve locking of mac_filter_hash - gfs2: Fix memory leak of object lsi on error return path - firmware: fix theoretical UAF race with firmware cache and resume - driver core: Fix error return code in really_probe() - media: dvb-usb: fix uninit-value in dvb_usb_adapter_dvb_init - media: dvb-usb: fix uninit-value in vp702x_read_mac_addr - media: dvb-usb: Fix error handling in dvb_usb_i2c_init - net: usb: asix: ax88772: add missing stop - media: go7007: fix memory leak in go7007_usb_probe - media: go7007: remove redundant initialization - [armhf] media: coda: fix frame_mem_ctrl for YUV420 and YVU420 formats - Bluetooth: sco: prevent information leak in sco_conn_defer_accept() - Bluetooth: btusb: Fix a unspported condition to set available debug features - [x86] drm/amdgpu/acp: Make PM domain really work - tcp: seq_file: Avoid skipping sk during tcp_seek_last_pos - [armhf] dts: meson8b: odroidc1: Fix the pwm regulator supply properties - [armhf] dts: meson8b: mxq: Fix the pwm regulator supply properties - [armhf] dts: meson8b: ec100: Fix the pwm regulator supply properties - net/mlx5e: Prohibit inner indir TIRs in IPoIB - net/mlx5e: Block LRO if firmware asks for tunneled LRO - cgroup/cpuset: Fix a partition bug with hotplug - net: cipso: fix warnings in netlbl_cipsov4_add_std - Bluetooth: mgmt: Fix wrong opcode in the response for add_adv cmd - drm/amd/pm: Fix a bug in semaphore double-lock - net/mlx5: Fix missing return value in mlx5_devlink_eswitch_inline_mode_set() - leds: lt3593: Put fwnode in any case during ->probe() - leds: trigger: audio: Add an activate callback to ensure the initial brightness is set - media: em28xx-input: fix refcount bug in em28xx_usb_disconnect - [armhf] media: omap3isp: Fix missing unlock in isp_subdev_notifier_complete() - PCI: PM: Avoid forcing PCI_D0 for wakeup reasons inconsistently - PCI: PM: Enable PME if it can be signaled from D3cold - [arm64] net: dsa: build tag_8021q.c as part of DSA core - debugfs: Return error during {full/open}_proxy_open() on rmmod - Bluetooth: increase BTNAMSIZ to 21 chars to fix potential buffer overflow - [arm64,armhf] net: dsa: stop syncing the bridge mcast_router attribute at join time - [arm64,armhf] net: dsa: don't disable multicast flooding to the CPU even without an IGMP querier - PM: EM: Increase energy calculation precision - [arm64] drm/msm: Fix error return code in msm_drm_init() - [arm64] drm/msm/mdp4: refactor HW revision detection into read_mdp_hw_revision - [arm64] drm/msm/mdp4: move HW revision detection to earlier phase - [arm64] drm/msm/dp: update is_connected status base on sink count at dp_pm_resume() - [arm64] drm/msm/dpu: make dpu_hw_ctl_clear_all_blendstages clear necessary LMs - cgroup/cpuset: Miscellaneous code cleanup - cgroup/cpuset: Fix violation of cpuset locking rule - [x86] ASoC: Intel: Fix platform ID matching - Bluetooth: fix repeated calls to sco_sock_kill - [arm64] drm/msm/dsi: Fix some reference counted resource leaks - [arm64] drm/msm/dp: replug event is converted into an unplug followed by an plug events - net/mlx5: Fix unpublish devlink parameters - [x86] ASoC: rt5682: Properly turn off regulators if wrong device ID - [arm64,armhf] usb: dwc3: meson-g12a: add IRQ check - [arm64,armhf] usb: dwc3: qcom: add IRQ check - mac80211: remove unnecessary NULL check in ieee80211_register_hw() - [armhf] usb: phy: twl6030: add IRQ checks - devlink: Clear whole devlink_flash_notify struct - net: stmmac: fix INTR TBU status affecting irq count statistic - Bluetooth: Move shutdown callback before flushing tx and rx queue - PM: cpu: Make notifier chain use a raw_spinlock_t - mac80211: Fix insufficient headroom issue for AMSDU - locking/local_lock: Add missing owner initialization - lockd: Fix invalid lockowner cast after vfs_test_lock - SUNRPC: Fix a NULL pointer deref in trace_svc_stats_latency() - nfsd4: Fix forced-expiry locking - [arm64] dts: marvell: armada-37xx: Extend PCIe MEM space - [arm*] firmware: raspberrypi: Fix a leak in 'rpi_firmware_get()' - mm/swap: consider max pages in iomap_swapfile_add_extent - Bluetooth: add timeout sanity check to hci_inquiry - [armhf] i2c: s3c2410: fix IRQ check - gfs2: init system threads before freeze lock - rsi: fix error code in rsi_load_9116_firmware() - rsi: fix an error code in rsi_probe() - [x86] ASoC: Intel: Skylake: Leave data as is when invoking TLV IPCs - [x86] ASoC: Intel: Skylake: Fix module resource and format selection - mmc: sdhci: Fix issue with uninitialized dma_slave_config - [arm64,armhf] mmc: dw_mmc: Fix issue with uninitialized dma_slave_config - bpf: Fix possible out of bound write in narrow load handling - [x86] hv_utils: Set the maximum packet size for VSS driver to the length of the receive buffer - CIFS: Fix a potencially linear read overflow - [arm64] i2c: xlp9xx: fix main IRQ check - [arm*] usb: ehci-orion: Handle errors of clk_prepare_enable() in probe - [arm64] tty: serial: fsl_lpuart: fix the wrong mapbase value - iwlwifi: skip first element in the WTAS ACPI table - net/mlx5: Lag, fix multipath lag activation - net/mlx5: Remove all auxiliary devices at the unregister event - net/mlx5e: Fix possible use-after-free deleting fdb rule - net/mlx5: E-Switch, Set vhca id valid flag when creating indir fwd group - net/mlx5e: Use correct eswitch for stack devices with lag - [x86] misc/pvpanic: fix set driver data - ice: fix Tx queue iteration for Tx timestamp enablement - ice: add lock around Tx timestamp tracker flush - ice: restart periodic outputs around time changes - ice: Only lock to update netdev dev_addr - net: phy: marvell10g: fix broken PHY interrupts for anyone after us in the driver probe list - ath6kl: wmi: fix an error code in ath6kl_wmi_sync_point() - ALSA: usb-audio: Add lowlatency module option - atlantic: Fix driver resume flow. - bcma: Fix memory leak for internally-handled cores - brcmfmac: pcie: fix oops on failure to resume and reprobe - ipv6: make exception cache less predictible - ipv4: make exception cache less predictible - net: qrtr: make checks in qrtr_endpoint_post() stricter - sch_htb: Fix inconsistency when leaf qdisc creation fails - net: sched: Fix qdisc_rate_table refcount leak when get tcf_block failed - ipv4: fix endianness issue in inet_rtm_getroute_build_skb() - [x86] ASoC: rt5682: Remove unused variable in rt5682_i2c_remove() - iwlwifi Add support for ax201 in Samsung Galaxy Book Flex2 Alpha - f2fs: guarantee to write dirty data when enabling checkpoint back - time: Handle negative seconds correctly in timespec64_to_ns() - io_uring: limit fixed table size by RLIMIT_NOFILE - io_uring: IORING_OP_WRITE needs hash_reg_file set - io_uring: io_uring_complete() trace should take an integer - io_uring: fail links of cancelled timeouts - bio: fix page leak bio_add_hw_page failure - raid1: ensure write behind bio has less than BIO_MAX_VECS sectors - cifs: Do not leak EDEADLK to dgetents64 for STATUS_USER_SESSION_DELETED - smb3: fix posix extensions mount option - tty: Fix data race between tiocsti() and flush_to_ldisc() - [x86] perf/x86/intel/uncore: Fix IIO cleanup mapping procedure for SNR/ICX - [x86] Revert "KVM: x86: mmu: Add guest physical address check in translate_gpa()" - [s390x] KVM: index kvm->arch.idle_mask by vcpu_idx - [x86] KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted - [x86] KVM: x86: clamp host mapping level to max_level in kvm_mmu_max_mapping_level - [x86] KVM: x86/mmu: Avoid collision with !PRESENT SPTEs in TDP MMU lpage stats - [x86] KVM: VMX: avoid running vmx_handle_exit_irqoff in case of emulation - [x86] KVM: nVMX: Unconditionally clear nested.pi_pending on nested VM-Enter - [arm64] KVM: arm64: Unregister HYP sections from kmemleak in protected mode - [arm64] KVM: arm64: vgic: Resample HW pending state on deactivation - io-wq: check max_worker limits if a worker transitions bound state - md/raid10: Remove unnecessary rcu_dereference in raid10_handle_discard - fuse: truncate pagecache on atomic_o_trunc - fuse: flush extending writes - fuse: wait for writepages in syncfs - fbmem: don't allow too huge resolutions - [amd64] ACPI: PRM: Find PRMT table before parsing it - RDMA/mlx5: Fix number of allocated XLT entries - backlight: pwm_bl: Improve bootloader/kernel device handover - [armel] clk: kirkwood: Fix a clocking boot regression - devlink: Break parameter notification sequence to be before/after unload/load driver https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.5 - Revert "posix-cpu-timers: Force next expiration recalc after itimer reset" - Revert "time: Handle negative seconds correctly in timespec64_to_ns()" https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.6 - io_uring: place fixed tables under memcg limits - io_uring: add ->splice_fd_in checks - io_uring: fix io_try_cancel_userdata race for iowq - io-wq: fix wakeup race when adding new work - io-wq: fix race between adding work and activating a free worker - btrfs: use delalloc_bytes to determine flush amount for shrink_delalloc - btrfs: wake up async_delalloc_pages waiters after submit - btrfs: wait on async extents when flushing delalloc - btrfs: reduce the preemptive flushing threshold to 90% - btrfs: do not do preemptive flushing if the majority is global rsv - btrfs: zoned: fix block group alloc_offset calculation - btrfs: zoned: suppress reclaim error message on EAGAIN - btrfs: fix upper limit for max_inline for page size 64K - btrfs: reset replace target device to allocation state on close - btrfs: zoned: fix double counting of split ordered extent - blk-zoned: allow zone management send operations without CAP_SYS_ADMIN - blk-zoned: allow BLKREPORTZONE without CAP_SYS_ADMIN - [powerpc*] perf/hv-gpci: Fix counter value parsing - xen: fix setting of max_pfn in shared_info - 9p/xen: Fix end of loop tests for list_for_each_entry - ceph: fix dereference of null pointer cf - Input: elan_i2c - reduce the resume time for controller in Whitebox - [armhf] soc: aspeed: lpc-ctrl: Fix boundary check for mmap - [armhf] soc: aspeed: p2a-ctrl: Fix boundary check for mmap - [arm64] Move .hyp.rodata outside of the _sdata.._edata range - [arm64] mm: Fix TLBI vs ASID rollover - [arm64] head: avoid over-mapping in map_memory - [arm64] Do not trap PMSNEVFR_EL1 - iio: ltc2983: fix device probe - [arm64] wcn36xx: Ensure finish scan is not requested before start scan - block: bfq: fix bfq_set_next_ioprio_data() - [x86] power: supply: max17042: handle fails of reading status register - dm crypt: Avoid percpu_counter spinlock contention in crypt_page_alloc() - [x86] crypto: ccp - shutdown SEV firmware on kexec - [x86] VMCI: fix NULL pointer dereference when unmapping queue pair - media: uvc: don't do DMA on stack - media: rc-loopback: return number of emitters rather than error - nvmem: core: fix error handling while validating keepout regions - [s390x] qdio: fix roll-back after timeout on ESTABLISH ccw - [s390x] qdio: cancel the ESTABLISH ccw after timeout - [armhf] Revert "dmaengine: imx-sdma: refine to load context only once" - [armhf] dmaengine: imx-sdma: remove duplicated sdma_load_context - [x86] watchdog: iTCO_wdt: Fix detection of SMI-off case - libata: add ATA_HORKAGE_NO_NCQ_TRIM for Samsung 860 and 870 SSDs - sched: Prevent balance_push() on remote runqueues - f2fs: let's keep writing IOs on SBI_NEED_FSCK - f2fs: fix to do sanity check for sb/cp fields correctly - PCI/portdrv: Enable Bandwidth Notification only if port supports it - PCI: Restrict ASMedia ASM1062 SATA Max Payload Size Supported - PCI: Return ~0 data on pciconfig_read() CAP_SYS_ADMIN failure - [arm64] PCI: xilinx-nwl: Enable the clock through CCF - [arm64] PCI: aardvark: Configure PCIe resources from 'ranges' DT property - [arm64] PCI: aardvark: Fix checking for PIO status - [arm64] PCI: aardvark: Increase polling delay to 1.5s while waiting for PIO response - [arm64] PCI: aardvark: Fix masking and unmasking legacy INTx interrupts - HID: input: do not report stylus battery state as "full" - f2fs: quota: fix potential deadlock - [arm64] pinctrl: armada-37xx: Correct PWM pins definitions - scsi: bsg: Remove support for SCSI_IOCTL_SEND_COMMAND - [arm64,armhf] clk: rockchip: drop GRF dependency for rk3328/rk3036 pll types - [amd64] IB/hfi1: Adjust pkey entry in index 0 - RDMA/iwcm: Release resources if iw_cm module initialization fails - docs: Fix infiniband uverbs minor number - scsi: BusLogic: Use %X for u32 sized integer rather than %lX - [armhf] pinctrl: samsung: Fix pinctrl bank pin count - f2fs: do not submit NEW_ADDR to read node block - f2fs: turn back remapped address in compressed page endio - f2fs: fix wrong checkpoint_changed value in f2fs_remount() - scsi: ufs: Fix memory corruption by ufshcd_read_desc_param() - scsi: ufs: Use DECLARE_COMPLETION_ONSTACK() where appropriate - scsi: ufs: Fix the SCSI abort handler - [powerpc*] cpuidle: pseries: Fixup CEDE0 latency only for POWER10 onwards - [powerpc*] stacktrace: Include linux/delay.h - [arm64] RDMA/hns: Don't overwrite supplied QP attributes - RDMA/mlx5: Delete not-available udata check - [powerpc*] cpuidle: pseries: Mark pseries_idle_proble() as __init - f2fs: reduce the scope of setting fsck tag when de->name_len is zero - xprtrdma: Put rpcrdma_reps before waking the tear-down completion - NFSv4/pNFS: Fix a layoutget livelock loop - NFSv4/pNFS: Always allow update of a zero valued layout barrier - NFSv4/pnfs: The layout barrier indicate a minimal value for the seqid - SUNRPC: Fix potential memory corruption - SUNRPC/xprtrdma: Fix reconnection locking - sunrpc: Fix return value of get_srcport() - scsi: ufs: Fix unsigned int compared with less than zero - scsi: ufshcd: Fix device links when BOOT WLUN fails to probe - [arm64,armhf] pinctrl: single: Fix error return code in pcs_parse_bits_in_pinctrl_entry() - [powerpc*] numa: Consider the max NUMA node for migratable LPAR - scsi: smartpqi: Fix an error code in pqi_get_raid_map() - scsi: qedi: Fix error codes in qedi_alloc_global_queues() - scsi: qedf: Fix error codes in qedf_alloc_global_queues() - f2fs: fix to keep compatibility of fault injection interface - iommu/vt-d: Update the virtual command related registers - [arm64] RDMA/hns: Fix return in hns_roce_rereg_user_mr() - [amd64] HID: amd_sfh: Fix period data field to enable sensor - HID: i2c-hid: Fix Elan touchpad regression - HID: thrustmaster: clean up Makefile and adapt quirks - [arm64] RDMA/hns: Ownerbit mode add control field - [arm64] clk: imx8mm: use correct mux type for clkout path - [arm64,armhf] clk: imx8m: fix clock tree update of TF-A managed clocks - [powerpc*] KVM: PPC: Book3S HV: Fix copy_tofrom_guest routines - [powerpc*] KVM: PPC: Book3S HV Nested: Reflect guest PMU in-use to L0 when guest SPRs are live - [powerpc*] powerpc/perf: Fix the check for SIAR value - [arm64] RDMA/hns: Fix incorrect lsn field - [arm64] RDMA/hns: Bugfix for data type of dip_idx - [arm64] RDMA/hns: Bugfix for the missing assignment for dip_idx - [arm64] RDMA/hns: Bugfix for incorrect association between dip_idx and dgid - [x86] platform/x86: dell-smbios-wmi: Add missing kfree in error-exit from run_smbios_call - [powerpc*] smp: Fix a crash while booting kvm guest with nr_cpus=2 - [powerpc*] smp: Update cpu_core_map on all PowerPc systems - [arm64] RDMA/hns: Fix query destination qpn - [arm64] RDMA/hns: Fix QP's resp incomplete assignment - fscache: Fix cookie key hashing - [powerpc*] KVM: PPC: Fix clearing never mapped TCEs in realmode - f2fs: fix to account missing .skipped_gc_rwsem - f2fs: fix unexpected ENOENT comes from f2fs_map_blocks() - f2fs: fix to unmap pages from userspace process in punch_hole() - f2fs: deallocate compressed pages when error happens - f2fs: should put a page beyond EOF when preparing a write - [mips64el,mipsel] Malta: fix alignment of the devicetree buffer - userfaultfd: prevent concurrent API initialization - [x86] drm/vmwgfx: Fix subresource updates with new contexts - [x86] drm/vmwgfx: Fix some static checker warnings - [arm*] drm/vc4: hdmi: Set HD_CTL_WHOLSMP and HD_CTL_CHALIGN_SET - drm/ttm: Fix multihop assert on eviction. - [armhf] drm/omap: Follow implicit fencing in prepare_fb - drm/amdgpu: Fix amdgpu_ras_eeprom_init() - drm/amdgpu: Fix koops when accessing RAS EEPROM - [arm*] drm: vc4: Fix pixel-wrap issue with DVP teardown - dma-buf: fix dma_resv_test_signaled test_all handling v2 - drm/panel: Fix up DT bindings for Samsung lms397kf04 - [armhf] ASoC: ti: davinci-mcasp: Fix DIT mode support - media: dib8000: rewrite the init prbs logic - [x86] hyperv: fix for unwanted manipulation of sched_clock when TSC marked unstable - PCI: Use pci_update_current_state() in pci_enable_device_flags() - tipc: keep the skb in rcv queue until the whole data is read - net: phy: Fix data type in DP83822 dp8382x_disable_wol() - iio: dac: ad5624r: Fix incorrect handling of an optional regulator. - iavf: do not override the adapter state in the watchdog task - iavf: fix locking of critical sections - video: fbdev: kyro: fix a DoS bug by restricting user input - drm/ast: Disable fast reset after DRAM initial - netlink: Deal with ESRCH error in nlmsg_notify() - [arm64] dts: qcom: Fix usb entries for SA8155p adp board - drm: avoid blocking in drm_clients_info's rcu section - drm: serialize drm_file.master with a new spinlock - drm: protect drm_master pointers in drm_lease.c - rcu: Fix macro name CONFIG_TASKS_RCU_TRACE - igc: Check if num of q_vectors is smaller than max before array access - usb: gadget: u_ether: fix a potential null pointer dereference - [armhf] USB: EHCI: ehci-mv: improve error handling in mv_ehci_enable() - usb: gadget: composite: Allow bMaxPower=0 if self-powered - tty: serial: jsm: hold port lock when reporting modem line changes - [arm64] bus: fsl-mc: fix arg in call to dprc_scan_objects() - [arm64] bus: fsl-mc: fix mmio base address for child DPRCs - [x86] misc/pvpanic-pci: Allow automatic loading - nfp: fix return statement in nfp_net_parse_meta() - ethtool: improve compat ioctl handling - drm/amdgpu: Fix a printing message - [arm64] dts: allwinner: h6: tanix-tx6: Fix regulator node names - video: fbdev: kyro: Error out if 'pixclock' equals zero - ipv4: ip_output.c: Fix out-of-bounds warning in ip_copy_addrs() - flow_dissector: Fix out-of-bounds warnings - [s390x] jump_label: print real address in a case of a jump label bug - [s390x] make PCI mio support a machine flag - serial: 8250: Define RX trigger levels for OxSemi 950 devices - serial: 8250_pci: make setup_port() parameters explicitly unsigned - vt: keyboard.c: make console an unsigned int - Bluetooth: skip invalid hci_sync_conn_complete_evt - workqueue: Fix possible memory leaks in wq_numa_init() - [arm64] drm/msm/a6xx: Fix llcc configuration for a660 gpu - netfilter: nft_compat: use nfnetlink_unicast() - bonding: 3ad: fix the concurrency between __bond_release_one() and bond_3ad_state_machine_handler() - [x86] ASoC: Intel: bytcr_rt5640: Move "Platform Clock" routes to the maps for the matching in-/output - Bluetooth: Fix not generating RPA when required - [armhf] media: imx: imx7-media-csi: Fix buffer return upon stream start failure - media: v4l2-dv-timings.c: fix wrong condition in two for-loops - gfs2: Fix glock recursion in freeze_go_xmote_bh - [arm*] misc: sram: Only map reserved areas in Tegra SYSRAM - [armhf] dts: imx53-ppd: Fix ACHC entry - [arm64] dts: qcom: sdm660: use reg value for memory node - [arm64] nvmem: qfprom: Fix up qfprom_disable_fuse_blowing() ordering - [arm64] net: ethernet: stmmac: Do not use unreachable() in ipq806x_gmac_probe() - [arm64] drm/msm: mdp4: drop vblank get/put from prepare/complete_commit - [arm64] drm/msm/dsi: Fix DSI and DSI PHY regulator config from SDM660 - [x86] thunderbolt: Fix port linking by checking all adapters - [x86] drm/vmwgfx: fix potential UAF in vmwgfx_surface.c - staging: rtl8723bs: fix right side of condition - Bluetooth: schedule SCO timeouts with delayed_work - Bluetooth: avoid circular locks in sco_sock_connect - [arm64] drm/msm/dp: reduce link rate if failed at link training 1 - [arm64] drm/msm/dp: reset aux controller after dp_aux_cmd_fifo_tx() failed. - [arm64] drm/msm/dp: return correct edid checksum after corrupted edid checksum read - [arm64] drm/msm/dp: do not end dp link training until video is ready - net/mlx5: Fix variable type to match 64bit - gpu: drm: amd: amdgpu: amdgpu_i2c: fix possible uninitialized-variable access in amdgpu_i2c_router_select_ddc_port() - mac80211: Fix monitor MTU limit so that A-MSDUs get through - nvme-tcp: don't check blk_mq_tag_to_rq when receiving pdu data - nvme: code command_id with a genctr for use-after-free validation - Bluetooth: Fix handling of LE Enhanced Connection Complete - Bluetooth: Fix race condition in handling NOP command - opp: Don't print an error if required-opps is missing - [sh4] serial: sh-sci: fix break handling for sysrq - iomap: pass writeback errors to the mapping - tcp: enable data-less, empty-cookie SYN with TFO_SERVER_COOKIE_NOT_REQD - locking/rtmutex: Set proper wait context for lockdep - rpc: fix gss_svc_init cleanup on failure - iavf: use mutexes for locking of critical sections - [armhf] hwmon: (pmbus/ibm-cffps) Fix write bits for LED control - [x86] staging: rts5208: Fix get_ms_information() heap buffer size - net: Fix offloading indirect devices dependency on qdisc order creation - gfs2: Don't call dlm after protocol is unmounted - [arm64,armhf] usb: chipidea: host: fix port index underflow and UBSAN complains - lockd: lockd server-side shouldn't set fl_ops - [armhf] drm/exynos: Always initialize mapping in exynos_drm_register_dma() - rtl8xxxu: Fix the handling of TX A-MPDU aggregation - rtw88: use read_poll_timeout instead of fixed sleep - rtw88: wow: build wow function only if CONFIG_PM is on - rtw88: wow: fix size access error of probe request - btrfs: remove racy and unnecessary inode transaction update when using no-holes - btrfs: tree-log: check btrfs_lookup_data_extent return value - soundwire: intel: fix potential race condition during power down - [x86] ASoC: Intel: Skylake: Fix module configuration for KPB and MIXER - [x86] ASoC: Intel: Skylake: Fix passing loadable flag for module - of: Don't allow __of_attached_node_sysfs() without CONFIG_SYSFS - [arm64] mmc: sdhci-of-arasan: Modified SD default speed to 19MHz for ZynqMP - [arm64] mmc: sdhci-of-arasan: Check return value of non-void funtions - mmc: core: Avoid hogging the CPU while polling for busy in the I/O err path - mmc: core: Avoid hogging the CPU while polling for busy for mmc ioctls - mmc: core: Avoid hogging the CPU while polling for busy after I/O writes - mmc: rtsx_pci: Fix long reads when clock is prescaled - mmc: core: Return correct emmc response in case of ioctl error - cifs: fix wrong release in sess_alloc_buffer() failed path - Revert "USB: xhci: fix U1/U2 handling for hardware with XHCI_INTEL_HOST quirk set" - [arm64] usb: dwc3: imx8mp: request irq after initializing dwc3 - [armhf] usb: musb: musb_dsps: request_irq() after initializing musb - usbip: give back URBs for unsent unlink requests during cleanup - usbip:vhci_hcd USB port can get stuck in the disabled state - [arm64,armhf] ASoC: rockchip: i2s: Fix regmap_ops hang - [arm64,armhf] ASoC: rockchip: i2s: Fixup config for DAIFMT_DSP_A/B - ASoC: soc-pcm: protect BE dailink state changes in trigger - nfs: don't atempt blocking locks on nfs reexports - nfsd: fix crash on LOCKT on reexported NFSv3 - iwlwifi: pcie: free RBs during configure - iwlwifi: mvm: Do not use full SSIDs in 6GHz scan - iwlwifi: mvm: fix a memory leak in iwl_mvm_mac_ctxt_beacon_changed - iwlwifi: mvm: avoid static queue number aliasing - iwlwifi: mvm: Fix umac scan request probe parameters - iwlwifi: mvm: fix access to BSS elements - iwlwifi: fw: correctly limit to monitor dump - iwlwifi: mvm: don't schedule the roc_done_wk if it is already running - iwlwifi: mvm: Fix scan channel flags settings - net/mlx5: DR, fix a potential use-after-free bug - net/mlx5: DR, Enable QP retransmission - [arm64] usb: isp1760: fix memory pool initialization - [arm64] usb: isp1760: fix qtd fill length - [arm64] usb: isp1760: write to status and address register - [arm64] usb: isp1760: use the right irq status bit - [arm64] usb: isp1760: otg control register access - parport: remove non-zero check on count - [arm64] wcn36xx: Fix missing frame timestamp for beacon/probe-resp - ath9k: fix OOB read ar9300_eeprom_restore_internal - ath9k: fix sleeping in atomic context - net: fix NULL pointer reference in cipso_v4_doi_free - fix array-index-out-of-bounds in taprio_change - [arm64] net: hns3: clean up a type mismatch warning - printk/console: Check consistent sequence number when handling race in console_unlock() - ovl: fix BUG_ON() in may_delete() when called from ovl_cleanup() - scsi: BusLogic: Fix missing pr_cont() use - scsi: qla2xxx: Changes to support kdump kernel - scsi: qla2xxx: Sync queue idx with queue_pair_map idx - [powerpc*] cpufreq: powernv: Fix init_chip_info initialization in numa=off - [s390x] pv: fix the forcing of the swiotlb - [s390x] topology: fix topology information when calling cpu hotplug notifiers - mm: fix panic caused by __page_handle_poison() - hugetlb: fix hugetlb cgroup refcounting during vma split - mm/memory_hotplug: use "unsigned long" for PFN in zone_for_pfn_range() - mm/hmm: bypass devmap pte when all pfn requested flags are fulfilled - mm/hugetlb: initialize hugetlb_usage in mm_init - mm,vmscan: fix divide by zero in get_scan_count - mm/page_alloc.c: avoid accessing uninitialized pcp page migratetype - mm/mempolicy: fix a race between offset_il_node and mpol_rebind_task - memcg: enable accounting for pids in nested pid namespaces - libnvdimm/pmem: Fix crash triggered when I/O in-flight during unbind - platform/chrome: cros_ec_proto: Send command again when timeout occurs - net: stmmac: Fix overall budget calculation for rxtx_napi - [x86] drm/mgag200: Select clock in PLL update functions - [arm64] drm/msi/mdp4: populate priv->kms in mdp4_kms_init - drm/dp_mst: Fix return code on sideband message failure - [arm64,armhf] drm/panfrost: Make sure MMU context lifetime is not bound to panfrost_priv - drm/amdgpu: Fix BUG_ON assert - drm/amdgpu: Enable S/G for Yellow Carp - drm/amdgpu: Fix a deadlock if previous GEM object allocation fails - [arm64] drm/msm/disp/dpu1: add safe lut config in dpu driver - drm/ttm: Fix ttm_bo_move_memcpy() for subclassed struct ttm_resource - [arm64,armhf] drm/panfrost: Simplify lock_region calculation - [arm64,armhf] drm/panfrost: Use u64 for size in lock_region - [arm64,armhf] drm/panfrost: Clamp lock region to Bifrost minimum . [ Vincent Blut ] * [arm64] drivers/bus/fsl-mc: Enable FSL_MC_UAPI_SUPPORT (Closes: #992988) * [arm64] drivers/vfio/fsl-mc: Enable VFIO_FSL_MC as module (Closes: #993000) * [arm64] drivers/firmware: Enable ARM_SCPI_PROTOCOL as module (Closes: #929528) * [arm64] drivers/hwmon: Enable SENSORS_ARM_SCPI as module * [arm64] drivers/mailbox: Enable ARM_MHU, PLATFORM_MHU as modules * [armhf] drivers/input/misc: Enable INPUT_TPS65218_PWRBUTTON as module (Closes: #944518) . [ Heiko Thiery ] * [arm64] drivers/regulator: Enable REGULATOR_PCA9450 as module * [arm64] drivers/regulator: Enable REGULATOR_PFUZE100 as module * [arm64] drivers/pci/controller: Enable PCI_IMX6 . [ Salvatore Bonaccorso ] * dccp: don't duplicate ccid when cloning dccp sock (CVE-2020-16119) * bnx2x: Fix enabling network interfaces without VFs (Closes: #993948) * Refresh "kbuild: Make the toolchain variables easily overwritable" * Drop "Partially revert "net: socket: implement 64-bit timestamps"" * Set ABI to 1 * [mipsel] bpf, mips: Validate conditional branch offsets (CVE-2021-38300) . linux (5.14.3-1~exp1) experimental; urgency=medium . * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.3 - firmware: dmi: Move product_sku info to the end of the modalias - igmp: Add ip_mc_list lock in ip_check_mc_rcu - Revert "r8169: avoid link-up interrupt issue on RTL8106e if user enables ASPM" - ALSA: usb-audio: Add registration quirk for JBL Quantum 800 - Bluetooth: Add additional Bluetooth part for Realtek 8852AE - Bluetooth: btusb: Make the CSR clone chip force-suspend workaround more generic - xhci: fix even more unsafe memory usage in xhci tracing - xhci: fix unsafe memory usage in xhci tracing - xhci: Fix failure to give back some cached cancelled URBs. - [x86] reboot: Limit Dell Optiplex 990 quirk to early BIOS versions - PCI: Call Max Payload Size-related fixup quirks early . linux (5.14.2-1~exp1) experimental; urgency=medium . * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.2 - ext4: fix race writing to an inline_data file while its xattrs are changing - ext4: fix e2fsprogs checksum failure for mounted filesystem - USB: serial: pl2303: fix GL type detection - USB: serial: cp210x: fix control-characters error handling - USB: serial: cp210x: fix flow-control error handling - HID: usbhid: Fix flood of "control queue full" messages - HID: usbhid: Fix warning caused by 0-length input reports - ALSA: hda/realtek: Quirk for HP Spectre x360 14 amp setup - ALSA: usb-audio: Fix regression on Sony WALKMAN NW-A45 DAC - ALSA: hda/realtek: Workaround for conflicting SSID on ASUS ROG Strix G17 - ALSA: pcm: fix divide error in snd_pcm_lib_ioctl - ALSA: usb-audio: Work around for XRUN with low latency playback - media: stkwebcam: fix memory leak in stk_camera_probe . [ Vincent Blut ] * drivers/media/cec: Enable MEDIA_CEC_RC (Closes: #872650) * drivers/hid: Enable various HID drivers as modules (Closes: #988277) * [x86] drivers/platform/chrome: Enable CROS_EC as module and set CROS_EC_PROTO explicitly * [arm64] sound/soc/generic: Enable SND_AUDIO_GRAPH_CARD as module (Closes: #987576) * drivers/net/wireless/mediatek/mt76/mt7915: Enable MT7915E as module (Closes: #993865) * drivers/net/wireless/mediatek/mt76/mt7921: Enable MT7921E as module * drivers/net/wireless/mediatek/mt76/mt7615: Enable MT7615E, MT7663U as modules . [ Salvatore Bonaccorso ] * HID: apple: Add missing scan code event for keys handled by hid-apple (Closes: #757356) . linux (5.14.1-1~exp1) experimental; urgency=medium . * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.1 - vt_kdsetmode: extend console locking (CVE-2021-3753) - Bluetooth: btusb: check conditions before enabling USB ALT 3 for WBS - btrfs: fix NULL pointer dereference when deleting device by invalid id (CVE-2021-3739) - Revert "floppy: reintroduce O_NDELAY fix" - fscrypt: add fscrypt_symlink_getattr() for computing st_size - ext4: report correct st_size for encrypted symlinks - f2fs: report correct st_size for encrypted symlinks - ubifs: report correct st_size for encrypted symlinks - net: don't unconditionally copy_from_user a struct ifreq for socket ioctls - audit: move put_tree() to avoid trim_trees refcount underflow and UAF . linux (5.14-1~exp2) experimental; urgency=medium . [ Bastian Blank ] * Fix perf build. * Enable EVM, ENCRYPTED_KEYS. (closes: #993535) * Enable IMA_SIG_TEMPLATE. * Enable AMD_SFH_HID, AMD_PMC. (closes: #992832) * Enable TMPFS_INODE64. (closes: #993641) * Move more into nic-shared-modules. . [ Diederik de Haas ] * [arm64] sound/soc/codecs: Enable SND_SOC_RK3328 as module * [arm64,armhf] drivers/input/misc: Enable INPUT_RK805_PWRKEY as module * [arm64,armhf] drivers/pinctrl: Enable PINCTRL_RK805 (Closes: #990536) * [arm64] drivers/mfd: Make MFD_RK808 builtin . linux (5.14-1~exp1) experimental; urgency=medium . * New upstream release: https://kernelnewbies.org/Linux_5.14 . [ Aurelien Jarno ] * [riscv64] Enable KEXEC. * [riscv64] Add initial Microchip Polarfire support: enable SOC_MICROCHIP_POLARFIRE, MMC_SDHCI_PLTFM, MMC_SDHCI_CADENCE and PCIE_MICROCHIP_HOST. * [riscv64] Improve HiFive Unmatched support: enable PCIE_DW_PLAT_HOST and PCIE_FU740. . [ Vincent Blut ] * [armhf] drivers/leds: Enable LEDS_PCA963X as module (Closes: #908196) . [ Salvatore Bonaccorso ] * net/batman-adv: Enable BATMAN_ADV_BATMAN_V . [ Bastian Blank ] * [powerpc*] Disable support for debugging VDSO. . linux (5.13.12-1~exp1) experimental; urgency=medium . * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.13.10 https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.13.11 https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.13.12 . [ Salvatore Bonaccorso ] * net: Enable MPTCP (Closes: #987815) . [ Bastian Blank ] * [mips*] Increase RELOCATION_TABLE_SIZE to 0x1c0000. * Enable SECURITY_LANDLOCK, SECURITY_PATH. * Fix external modules build. (closes: #992219) * Force more compressions modules into main installer package. (closes: #992221) * Drop redundant patch for overlay in user namespace. . [ Uwe Kleine-König ] * [x86] Enable X86_PLATFORM_DRIVERS_DELL which is needed to keep some Dell specific drivers. (Closes: #992251) . linux (5.13.9-1~exp2) experimental; urgency=medium . * Fix linux-cpupower installation. . linux (5.13.9-1~exp1) experimental; urgency=medium . * New upstream release: https://kernelnewbies.org/Linux_5.11 * New upstream release: https://kernelnewbies.org/Linux_5.12 * New upstream release: https://kernelnewbies.org/Linux_5.13 . [ Bastian Blank ] * Always build-depend on native libelf-dev. * Specify trusted certs file in package config. * Enable PROC_VMCORE. * Enable SECURITYFS. * Re-enable IMA. (closes: #972459) * [x86] Enable AMD_MEM_ENCRYPT. (closes: #983586, #989040) * Enable UNICODE. (closes: #985689) * Enable CGROUP_MISC. * [x86] Enable PINCTRL_ALDERLAKE, PINCTRL_ELKHARTLAKE, PINCTRL_EMMITSBURG, PINCTRL_JASPERLAKE, PINCTRL_LAKEFIELD. * [amd64] Enable MICROSOFT_MANA. * [arm64] Enable GVE. (closes: #991835)
-
Lorenzo "Palinuro" Faletra authored
-
- 21 Jul, 2021 2 commits
-
-
Lorenzo "Palinuro" Faletra authored
linux (5.10.46-8parrot1) rolling; urgency=medium . * Import new Debian release. . linux (5.10.46-2) unstable; urgency=medium . * swiotlb: manipulate orig_addr when tlb_addr has offset (Closes: #989778) * KVM: do not allow mapping valid but non-reference-counted pages (CVE-2021-22543) * [x86] platform/x86: toshiba_haps: Fix missing newline in pr_debug call in toshiba_haps_notify (Closes: #799193) * seq_file: Disallow extremely large seq buffer allocations (CVE-2021-33909) . linux (5.10.46-1) unstable; urgency=medium . * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.41 - context_tracking: Move guest exit context tracking to separate helpers - context_tracking: Move guest exit vtime accounting to separate helpers - [x86] KVM: Defer vtime accounting 'til after IRQ handling https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.42 - ALSA: hda/realtek: the bass speaker can't output sound on Yoga 9i - ALSA: hda/realtek: Headphone volume is controlled by Front mixer - ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation P340 - ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8 - ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP Zbook G8 - ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP Zbook Fury 15 G8 - ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP Zbook Fury 17 G8 - ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci - ALSA: usb-audio: scarlett2: Improve driver startup messages - cifs: set server->cipher_type to AES-128-CCM for SMB3.0 - NFSv4: Fix a NULL pointer dereference in pnfs_mark_matching_lsegs_return() - iommu/vt-d: Fix sysfs leak in alloc_iommu() - proc: Check /proc/$pid/attr/ writes against file opener - net: hso: fix control-request directions - net/sched: fq_pie: re-factor fix for fq_pie endless loop - net/sched: fq_pie: fix OOB access in the traffic path - netfilter: nft_set_pipapo_avx2: Add irq_fpu_usable() check, fallback to non-AVX2 version - mac80211: assure all fragments are encrypted (CVE-2020-26147) - mac80211: prevent mixed key and fragment cache attacks (CVE-2020-24586, CVE-2020-24587) - mac80211: properly handle A-MSDUs that start with an RFC 1042 header - cfg80211: mitigate A-MSDU aggregation attacks (CVE-2020-24588) - mac80211: drop A-MSDUs on old ciphers (CVE-2020-24588) - mac80211: add fragment cache to sta_info - mac80211: check defrag PN against current frame - mac80211: prevent attacks on TKIP/WEP as well - mac80211: do not accept/forward invalid EAPOL frames (CVE-2020-26139) - mac80211: extend protection against mixed key and fragment cache attacks (CVE-2020-24586, CVE-2020-24587) - ath10k: add CCMP PN replay protection for fragmented frames for PCIe - ath10k: drop fragments with multicast DA for PCIe (CVE-2020-26145) - ath10k: drop fragments with multicast DA for SDIO (CVE-2020-26145) - ath10k: drop MPDU which has discard flag set by firmware for SDIO (CVE-2020-24588) - ath10k: Fix TKIP Michael MIC verification for PCIe (CVE-2020-26141) - ath10k: Validate first subframe of A-MSDU before processing the list - ath11k: Clear the fragment cache during key install (CVE-2020-24587) - dm snapshot: properly fix a crash when an origin has no snapshots - drm/amdgpu/vcn1: add cancel_delayed_work_sync before power gate - [amd64] drm/amdkfd: correct sienna_cichlid SDMA RLC register offset error - drm/amdgpu/vcn2.0: add cancel_delayed_work_sync before power gate - drm/amdgpu/vcn2.5: add cancel_delayed_work_sync before power gate - drm/amdgpu/jpeg2.0: add cancel_delayed_work_sync before power gate - Documentation: seccomp: Fix user notification documentation - seccomp: Refactor notification handler to prepare for new semantics - serial: core: fix suspicious security_locked_down() call - misc/uss720: fix memory leak in uss720_probe - [x86] thunderbolt: usb4: Fix NVM read buffer bounds and offset issue - [x86] thunderbolt: dma_port: Fix NVM read buffer bounds and offset issue - [x86] KVM: Fix vCPU preempted state from guest's point of view - [arm64] KVM: Prevent mixed-width VM creation - [x86] mei: request autosuspend after sending rx flow control - iio: gyro: fxas21002c: balance runtime power in error path - iio: dac: ad5770r: Put fwnode in error case during ->probe() - iio: adc: ad7768-1: Fix too small buffer passed to iio_push_to_buffers_with_timestamp() - iio: adc: ad7124: Fix missbalanced regulator enable / disable on error. - iio: adc: ad7124: Fix potential overflow due to non sequential channel numbers - iio: adc: ad7923: Fix undersized rx buffer. - iio: adc: ad7793: Add missing error code in ad7793_setup() - iio: adc: ad7192: Avoid disabling a clock that was never enabled. - iio: adc: ad7192: handle regulator voltage error first - serial: 8250: Add UART_BUG_TXRACE workaround for Aspeed VUART - serial: 8250_dw: Add device HID for new AMD UART controller - serial: 8250_pci: Add support for new HPE serial device - serial: 8250_pci: handle FL_NOIRQ board flag - USB: trancevibrator: fix control-request direction - Revert "irqbypass: do not start cons/prod when failed connect" - USB: usbfs: Don't WARN about excessively large memory allocations - drivers: base: Fix device link removal - [arm64,armhf] serial: tegra: Fix a mask operation that is always true - serial: rp2: use 'request_firmware' instead of 'request_firmware_nowait' - USB: serial: ti_usb_3410_5052: add startech.com device id - USB: serial: option: add Telit LE910-S1 compositions 0x7010, 0x7011 - USB: serial: ftdi_sio: add IDs for IDS GmbH Products - USB: serial: pl2303: add device id for ADLINK ND-6530 GC - [x86] thermal/drivers/intel: Initialize RW trip to THERMAL_TEMP_INVALID - [arm64,armhf] usb: dwc3: gadget: Properly track pending and queued SG - [arm64,x86] usb: typec: mux: Fix matching with typec_altmode_desc - net: usb: fix memory leak in smsc75xx_bind - Bluetooth: cmtp: fix file refcount when cmtp_attach_device fails - fs/nfs: Use fatal_signal_pending instead of signal_pending - NFS: fix an incorrect limit in filelayout_decode_layout() - NFS: Fix an Oopsable condition in __nfs_pageio_add_request() - NFS: Don't corrupt the value of pg_bytes_written in nfs_do_recoalesce() - NFSv4: Fix v4.0/v4.1 SEEK_DATA return -ENOTSUPP when set NFS_V4_2 config - [arm64] drm/meson: fix shutdown crash when component not probed - net/mlx5e: reset XPS on error flow if netdev isn't registered yet - net/mlx5e: Fix multipath lag activation - net/mlx5e: Fix error path of updating netdev queues - {net,vdpa}/mlx5: Configure interface MAC into mpfs L2 table - net/mlx5e: Fix nullptr in add_vlan_push_action() - net/mlx5: Set reformat action when needed for termination rules - net/mlx5e: Fix null deref accessing lag dev - net/mlx4: Fix EEPROM dump support - net/mlx5: Set term table as an unmanaged flow table - SUNRPC in case of backlog, hand free slots directly to waiting task - Revert "net:tipc: Fix a double free in tipc_sk_mcast_rcv" - tipc: wait and exit until all work queues are done - tipc: skb_linearize the head skb when reassembling msgs - [arm64] spi: spi-fsl-dspi: Fix a resource leak in an error handling path - netfilter: flowtable: Remove redundant hw refresh bit - [arm64,armhf] net: dsa: fix a crash if ->get_sset_count() fails - [armhf] i2c: s3c2410: fix possible NULL pointer deref on read message after write - [x86] i2c: i801: Don't generate an interrupt on bus reset - afs: Fix the nlink handling of dir-over-dir rename - nvmet-tcp: fix inline data size comparison in nvmet_tcp_queue_response - [x86] platform/x86: hp_accel: Avoid invoking _INI to speed up resume - [arm64] Revert "crypto: cavium/nitrox - add an error message to explain the failure of pci_request_mem_regions" - Revert "media: usb: gspca: add a missed check for goto_low_power" - [i386] Revert "ALSA: sb: fix a missing check of snd_ctl_add" - Revert "net: fujitsu: fix a potential NULL pointer dereference" - net: fujitsu: fix potential null-ptr-deref - Revert "net/smc: fix a NULL pointer dereference" - net/smc: properly handle workqueue allocation failure - [x86] Revert "char: hpet: fix a missing check of ioremap" - [x86] char: hpet: add checks after calling ioremap - [i386] Revert "ALSA: gus: add a check of the status of snd_ctl_add" - Revert "isdn: mISDNinfineon: fix potential NULL pointer dereference" - isdn: mISDNinfineon: check/cleanup ioremap failure correctly in setup_io - Revert "ath6kl: return error code in ath6kl_wmi_set_roam_lrssi_cmd()" - ath6kl: return error code in ath6kl_wmi_set_roam_lrssi_cmd() - Revert "isdn: mISDN: Fix potential NULL pointer dereference of kzalloc" - isdn: mISDN: correctly handle ph_info allocation failure in hfcsusb_ph_info - [arm64] Revert "dmaengine: qcom_hidma: Check for driver register failure" - [arm64] dmaengine: qcom_hidma: comment platform_driver_register call - Revert "libertas: add checks for the return value of sysfs_create_group" - libertas: register sysfs groups properly - Revert "media: dvb: Add check on sp8870_readreg" - media: dvb: Add check on sp8870_readreg return - Revert "media: gspca: mt9m111: Check write_bridge for timeout" - media: gspca: mt9m111: Check write_bridge for timeout - Revert "media: gspca: Check the return value of write_bridge for timeout" - media: gspca: properly check for errors in po1030_probe() - Revert "net: liquidio: fix a NULL pointer dereference" - net: liquidio: Add missing null pointer checks - Revert "brcmfmac: add a check for the status of usb_register" - brcmfmac: properly check for bus register errors - btrfs: return whole extents in fiemap - [powerpc,x86] scsi: BusLogic: Fix 64-bit system enumeration error for Buslogic - scsi: pm80xx: Fix drives missing during rmmod/insmod loop - btrfs: release path before starting transaction when cloning inline extent - btrfs: do not BUG_ON in link_to_fixup_dir - [x86] platform/x86: hp-wireless: add AMD's hardware id to the supported list - SMB3: incorrect file id in requests compounded with open - drm/amd/amdgpu: fix refcount leak - drm/amdgpu: Fix a use-after-free - drm/amd/amdgpu: fix a potential deadlock in gpu reset - drm/amdgpu: stop touching sched.ready in the backend - block: fix a race between del_gendisk and BLKRRPART - linux/bits.h: fix compilation error with GENMASK - [arm64,armhf] net: dsa: fix error code getting shifted with 4 in dsa_slave_get_sset_count - net: stmmac: Fix MAC WoL not working if PHY does not support WoL - spi: Assume GPIO CS active high in ACPI case - net: really orphan skbs tied to closing sk - net: packetmmap: fix only tx timestamp on request - [arm64,armhf] net: fec: fix the potential memory leak in fec_enet_init() - [arm64] net: mdio: thunder: Fix a double free issue in the .remove function - [mips64el,mipsel] net: mdio: octeon: Fix some double free issues - cxgb4/ch_ktls: Clear resources when pf4 device is removed - openvswitch: meter: fix race when getting now_ms. - net: sched: fix packet stuck problem for lockless qdisc - net: sched: fix tx action rescheduling issue during deactivation - net: sched: fix tx action reschedule issue with stopped queue - net: hso: check for allocation failure in hso_create_bulk_serial_device() - net: bnx2: Fix error return code in bnx2_init_board() - bnxt_en: Include new P5 HV definition in VF check. - bnxt_en: Fix context memory setup for 64K page size. - mld: fix panic in mld_newpack() - net/smc: remove device from smcd_dev_list after failed device_add() - [amd64] gve: Check TX QPL was actually assigned - [amd64] gve: Update mgmt_msix_idx if num_ntfy changes - [amd64] gve: Add NULL pointer checks when freeing irqs. - [amd64] gve: Upgrade memory barrier in poll routine - [amd64] gve: Correct SKB queue index validation. - [arm64] net: hns3: fix incorrect resp_msg issue - [arm64] net: hns3: put off calling register_netdev() until client initialize complete - [amd64] iommu/vt-d: Use user privilege for RID2PASID translation - cxgb4: avoid accessing registers when clearing filters - bpf, offload: Reorder offload callback 'prepare' in verifier - bpf: Set mac_len in bpf_skb_change_head - ixgbe: fix large MTU request from VF - [arm64] ASoC: qcom: lpass-cpu: Use optional clk APIs - scsi: libsas: Use _safe() loop in sas_resume_port() - ipv6: record frag_max_size in atomic fragments in input path - ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create() can be static - sch_dsmark: fix a NULL deref in qdisc_reset() - net: zero-initialize tc skb extension on allocation - [arm64,armhf] net: mvpp2: add buffer header handling in RX - [x86] i915: fix build warning in intel_dp_get_link_status() - [arm64] net: hns3: check the return of skb_checksum_help() - bpftool: Add sock_release help info for cgroup attach/prog load command - SUNRPC: More fixes for backlog congestion - net: hso: bail out on interrupt URB allocation failure - neighbour: Prevent Race condition in neighbour subsytem - usb: core: reduce power-on-good delay time of root hub https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.43 - btrfs: tree-checker: do not error out if extent ref hash doesn't match - net: usb: cdc_ncm: don't spew notifications (Closes: #989451) - [x86] hwmon: (dell-smm-hwmon) Fix index values - netfilter: conntrack: unregister ipv4 sockopts on error unwind - efi/fdt: fix panic when no valid fdt found - efi: Allow EFI_MEMORY_XP and EFI_MEMORY_RO both to be cleared - efi/libstub: prevent read overflow in find_file_option() - [arm64,x86] efi: cper: fix snprintf() use in cper_dimm_err_location() - vfio/pci: Fix error return code in vfio_ecap_init() - ipvs: ignore IP_VS_SVC_F_HASHED flag when adding service - HID: logitech-hidpp: initialize level variable - HID: pidff: fix error return code in hid_pidff_init() - [arm64,x86] HID: i2c-hid: fix format string mismatch - devlink: Correct VIRTUAL port to not have phys_port attributes - net/sched: act_ct: Offload connections with commit action - net/sched: act_ct: Fix ct template allocation for zone 0 - nvme-rdma: fix in-casule data send for chained sgls - ACPICA: Clean up context mutex during object deletion - perf probe: Fix NULL pointer dereference in convert_variable_location() - net: sock: fix in-kernel mark setting - net/mlx5e: Fix incompatible casting - net/mlx5: Check firmware sync reset requested is set before trying to abort it - net/mlx5e: Check for needed capability for cvlan matching - net/mlx5: DR, Create multi-destination flow table with level less than 64 - nvmet: fix freeing unallocated p2pmem - netfilter: nft_ct: skip expectations for confirmed conntrack - netfilter: nfnetlink_cthelper: hit EBUSY on updates if size mismatches - bpf: Simplify cases in bpf_base_func_proto - bpf, lockdown, audit: Fix buggy SELinux lockdown permission checks - ieee802154: fix error return code in ieee802154_add_iface() - ieee802154: fix error return code in ieee802154_llsec_getparams() - igb: add correct exception tracing for XDP - ixgbevf: add correct exception tracing for XDP - cxgb4: fix regression with HASH tc prio value update - ipv6: Fix KASAN: slab-out-of-bounds Read in fib6_nh_flush_exceptions - ice: Fix allowing VF to request more/less queues via virtchnl - ice: Fix VFR issues for AVF drivers that expect ATQLEN cleared - ice: handle the VF VSI rebuild failure - ice: report supported and advertised autoneg using PHY capabilities - ice: Allow all LLDP packets from PF to Tx - cxgb4: avoid link re-train during TC-MQPRIO configuration - i40e: optimize for XDP_REDIRECT in xsk path - i40e: add correct exception tracing for XDP - ice: simplify ice_run_xdp - ice: optimize for XDP_REDIRECT in xsk path - ice: add correct exception tracing for XDP - ixgbe: optimize for XDP_REDIRECT in xsk path - ixgbe: add correct exception tracing for XDP - [arm64] optee: use export_uuid() to copy client UUID - [armhf] bus: ti-sysc: Fix am335x resume hang for usb otg module - [arm64] dts: freescale: sl28: var4: fix RGMII clock and voltage - [armhf] bus: ti-sysc: Fix flakey idling of uarts and stop using swsup_sidle_act - tipc: add extack messages for bearer/media failure - tipc: fix unique bearer names sanity check - [armhf] serial: stm32: fix threaded interrupt handling - io_uring: fix link timeout refs - io_uring: use better types for cflags - drm/amdgpu/vcn3: add cancel_delayed_work_sync before power gate - drm/amdgpu/jpeg2.5: add cancel_delayed_work_sync before power gate - drm/amdgpu/jpeg3: add cancel_delayed_work_sync before power gate - Bluetooth: fix the erroneous flush_work() order (CVE-2021-3564) - Bluetooth: use correct lock to prevent UAF of hdev object (CVE-2021-3573) - wireguard: do not use -O3 - wireguard: peer: allocate in kmem_cache - wireguard: use synchronize_net rather than synchronize_rcu - wireguard: allowedips: initialize list head in selftest - wireguard: allowedips: remove nodes in O(1) - wireguard: allowedips: allocate nodes in kmem_cache - wireguard: allowedips: free empty intermediate nodes when removing single node - [arm64,x86] HID: i2c-hid: Skip ELAN power-on command after reset - HID: magicmouse: fix NULL-deref on disconnect - HID: multitouch: require Finger field to mark Win8 reports as MT - gfs2: fix scheduling while atomic bug in glocks - ALSA: timer: Fix master timer notification - ALSA: hda: Fix for mute key LED for HP Pavilion 15-CK0xx - ALSA: hda: update the power_state during the direct-complete - ext4: fix memory leak in ext4_fill_super - ext4: fix bug on in ext4_es_cache_extent as ext4_split_extent_at failed - ext4: fix fast commit alignment issues - ext4: fix memory leak in ext4_mb_init_backend on error path. - ext4: fix accessing uninit percpu counter variable with fast_commit - [arm*] usb: dwc2: Fix build in periphal-only mode - pid: take a reference when initializing `cad_pid` - ocfs2: fix data corruption by fallocate - mm/page_alloc: fix counting of free pages after take off from buddy - [x86] cpufeatures: Force disable X86_FEATURE_ENQCMD and remove update_pasid() - nfc: fix NULL ptr dereference in llcp_sock_getname() after failed connect (CVE-2021-3587) - drm/amdgpu: Don't query CE and UE errors - drm/amdgpu: make sure we unpin the UVD BO - [x86] apic: Mark _all_ legacy interrupts when IO/APIC is missing - [powerpc] kprobes: Fix validation of prefixed instructions across page boundary - btrfs: mark ordered extent and inode with error if we fail to finish - btrfs: fix error handling in btrfs_del_csums - btrfs: return errors from btrfs_del_csums in cleanup_ref_head - btrfs: fixup error handling in fixup_inode_link_counts - btrfs: abort in rename_exchange if we fail to insert the second ref - btrfs: fix deadlock when cloning inline extents and low on available space - mm, hugetlb: fix simple resv_huge_pages underflow on UFFDIO_COPY - [arm64] drm/msm/dpu: always use mdp device to scale bandwidth - btrfs: fix unmountable seed device after fstrim - [x86] KVM: SVM: Truncate GPR value for DR and CR accesses in !64-bit mode - [arm64] KVM: Fix debug register indexing - [x86] kvm: Teardown PV features on boot CPU as well - [x86] kvm: Disable kvmclock on all CPUs on shutdown - [x86] kvm: Disable all PV features on crash - lib/lz4: explicitly support in-place decompression - netfilter: nf_tables: missing error reporting for not selected expressions - xen-netback: take a reference to the RX task thread (CVE-2021-28691) - neighbour: allow NUD_NOARP entries to be forced GCed https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.44 - proc: Track /proc/$pid/attr/ opener mm_struct - [amd64] ASoC: amd: fix for pcm_read() error - spi: Fix spi device unregister flow - bpf: Forbid trampoline attach for functions with variable arguments - net/nfc/rawsock.c: fix a permission check bug - [x86] ASoC: Intel: bytcr_rt5640: Add quirk for the Glavey TM800A550L tablet - [x86] ASoC: Intel: bytcr_rt5640: Add quirk for the Lenovo Miix 3-830 tablet - [arm64,armhf] usb: chipidea: udc: assign interrupt number to USB gadget structure - bonding: init notify_work earlier to avoid uninitialized use - netlink: disable IRQs for netlink_lock_table() - net: mdiobus: get rid of a BUG_ON() - cgroup: disable controllers at parse time - wq: handle VM suspension in stall detection - net/qla3xxx: fix schedule while atomic in ql_sem_spinlock - RDS tcp loopback connection can hang - net:sfc: fix non-freed irq in legacy irq mode - scsi: bnx2fc: Return failure if io_req is already in ABTS processing - [x86] scsi: vmw_pvscsi: Set correct residual data length - [arm64] scsi: hisi_sas: Drop free_irq() of devm_request_irq() allocated irq - scsi: target: qla2xxx: Wait for stop_phase1 at WWN removal - net: macb: ensure the device is available before accessing GEMGXL control registers - nvme-fabrics: decode host pathing error for connect - dm verity: fix require_signatures module_param permissions - bnx2x: Fix missing error code in bnx2x_iov_init_one() - nvmet: fix false keep-alive timeout when a controller is torn down - spi: Don't have controller clean up spi device before driver unbind - spi: Cleanup on failure of initial setup - [powerpc] i2c: mpc: Make use of i2c_recover_bus() - [powerpc] i2c: mpc: implement erratum A-004447 workaround - ALSA: seq: Fix race of snd_seq_timer_open() - ALSA: firewire-lib: fix the context to call snd_pcm_stop_xrun() - ALSA: hda/realtek: headphone and mic don't work on an Acer laptop - ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP Elite Dragonfly G2 - ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP EliteBook x360 1040 G8 - ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840 Aero G8 - ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8 - [arm*] spi: bcm2835: Fix out-of-bounds access with more than 4 slaves - Revert "ACPI: sleep: Put the FACS table after using it" - drm: Fix use-after-free read in drm_getunique() - drm: Lock pointer access in drm_master_release() - [x86] perf/x86/intel/uncore: Fix M2M event umask for Ice Lake server - [x86] KVM: X86: MMU: Use the correct inherited permissions to get shadow page - kvm: avoid speculation-based attacks from out-of-range memslot accesses - [arm64,x86] staging: rtl8723bs: Fix uninitialized variables - async_xor: check src_offs is not NULL before updating it - btrfs: return value from btrfs_mark_extent_written() in case of error - btrfs: promote debugging asserts to full-fledged checks in validate_super - cgroup1: don't allow '\n' in renaming - ftrace: Do not blindly read the ip address in ftrace_bug() - USB: f_ncm: ncm_bitrate (speed) is unsigned - usb: f_ncm: only first packet of aggregate needs to start timer - usb: pd: Set PD_T_SINK_WAIT_CAP to 310ms - [arm64,armhf] usb: dwc3-meson-g12a: fix usb2 PHY glue init when phy0 is disabled - [arm64,armhf] usb: dwc3: meson-g12a: Disable the regulator in the error handling path of the probe - [arm64,armhf] usb: dwc3: gadget: Bail from dwc3_gadget_exit() if dwc->gadget is NULL - [arm64,armhf] usb: dwc3: ep0: fix NULL pointer exception - [arm64,armhf] usb: musb: fix MUSB_QUIRK_B_DISCONNECT_99 handling - usb: typec: ucsi: Clear PPM capability data in ucsi_init() error path - usb: gadget: f_fs: Ensure io_completion_wq is idle during unbind - USB: serial: ftdi_sio: add NovaTech OrionMX product ID - USB: serial: omninet: add device id for Zyxel Omni 56K Plus - USB: serial: quatech2: fix control-request directions - USB: serial: cp210x: fix alternate function for CP2102N QFN20 - usb: gadget: eem: fix wrong eem header operation - usb: fix various gadgets null ptr deref on 10gbps cabling. - usb: fix various gadget panics on 10gbps cabling - usb: typec: tcpm: cancel vdm and state machine hrtimer when unregister tcpm port - usb: typec: tcpm: cancel frs hrtimer when unregister tcpm port - regulator: core: resolve supply for boot-on/always-on regulators - [arm64] regulator: max77620: Use device_set_of_node_from_dev() - regulator: bd71828: Fix .n_voltages settings - [arm64,armhf] usb: dwc3: gadget: Disable gadget IRQ during pullup disable - usb: typec: mux: Fix copy-paste mistake in typec_mux_match - [arm64] drm/msm/a6xx: fix incorrectly set uavflagprd_inv field for A650 - [arm64] drm/msm/a6xx: update/fix CP_PROTECT initialization - [arm64] drm/msm/a6xx: avoid shadow NULL reference in failure path - RDMA/ipoib: Fix warning caused by destroying non-initial netns - RDMA/mlx4: Do not map the core_clock page to user space unless enabled - ASoC: core: Fix Null-point-dereference in fmt_single_name() - perf: Fix data race between pin_count increment/decrement - sched/fair: Keep load_avg and load_sum synced - sched/fair: Make sure to update tg contrib for blocked load - sched/fair: Fix util_est UTIL_AVG_UNCHANGED handling - [x86] nmi_watchdog: Fix old-style NMI watchdog regression on old Intel CPUs - [x86] KVM: x86: Ensure liveliness of nested VM-Enter fail tracepoint message - IB/mlx5: Fix initializing CQ fragments buffer - NFS: Fix a potential NULL dereference in nfs_get_client() - NFSv4: Fix deadlock between nfs4_evict_inode() and nfs4_opendata_get_inode() - kvm: fix previous commit for 32-bit builds - NFS: Fix use-after-free in nfs4_init_client() - NFSv4: Fix second deadlock in nfs4_evict_inode() - NFSv4: nfs4_proc_set_acl needs to restore NFS_CAP_UIDGID_NOMAP on error. - scsi: core: Fix error handling of scsi_host_alloc() - scsi: core: Fix failure handling of scsi_add_host_with_dma() - scsi: core: Put .shost_dev in failure path if host state changes to RUNNING - scsi: core: Only put parent device if host state differs from SHOST_CREATED - tracing: Correct the length check which causes memory corruption - proc: only require mm_struct for writing https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.45 - net: ieee802154: fix null deref in parse dev addr - HID: quirks: Set INCREMENT_USAGE_ON_DUPLICATE for Saitek X65 - HID: a4tech: use A4_2WHEEL_MOUSE_HACK_B8 for A4TECH NB-95 - HID: hid-input: add mapping for emoji picker key - HID: hid-sensor-hub: Return error for hid_set_field() failure - HID: quirks: Add quirk for Lenovo optical mouse - HID: multitouch: set Stylus suffix for Stylus-application devices, too - HID: Add BUS_VIRTUAL to hid_connect logging - HID: usbhid: fix info leak in hid_submit_ctrl - [arm64,armhf] drm/tegra: sor: Do not leak runtime PM reference - [arm64,armhf] gpu: host1x: Split up client initalization and registration - [arm64,armhf] drm/tegra: sor: Fully initialize SOR before registration - gfs2: Prevent direct-I/O write fallback errors from getting lost - gfs2: fix a deadlock on withdraw-during-mount - HID: gt683r: add missing MODULE_DEVICE_TABLE - gfs2: Fix use-after-free in gfs2_glock_shrink_scan - scsi: target: core: Fix warning on realtime kernels - ethernet: myri10ge: Fix missing error code in myri10ge_probe() - scsi: qedf: Do not put host in qedf_vport_create() unconditionally - Bluetooth: Add a new USB ID for RTL8822CE - scsi: scsi_devinfo: Add blacklist entry for HPE OPEN-V - net: ipconfig: Don't override command-line hostnames or domains - drm/amd/display: Allow bandwidth validation for 0 streams. - drm/amdgpu: refine amdgpu_fru_get_product_info - drm/amd/display: Fix potential memory leak in DMUB hw_init - drm/amd/amdgpu:save psp ring wptr to avoid attack - rtnetlink: Fix missing error code in rtnl_bridge_notify() - net: Return the correct errno code - fib: Return the correct errno code https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.46 - afs: Fix an IS_ERR() vs NULL check - mm/memory-failure: make sure wait for page writeback in memory_failure - [x86] kvm: LAPIC: Restore guard to prevent illegal APIC register access - fanotify: fix copy_event_to_user() fid error clean up - batman-adv: Avoid WARN_ON timing related checks - mac80211: fix skb length check in ieee80211_scan_rx() - net: ipv4: fix memory leak in netlbl_cipsov4_add_std - vrf: fix maximum MTU - net: rds: fix memory leak in rds_recvmsg - [arm64] net: dsa: felix: re-enable TX flow control in ocelot_port_flush() - netfilter: nft_fib_ipv6: skip ipv6 packets from any to link-local - ice: add ndo_bpf callback for safe mode netdev ops - ice: parameterize functions responsible for Tx ring management - udp: fix race between close() and udp_abort() - rtnetlink: Fix regression in bridge VLAN configuration - net/sched: act_ct: handle DNAT tuple collision - net/mlx5e: Fix page reclaim for dead peer hairpin - net/mlx5: Consider RoCE cap before init RDMA resources - net/mlx5: DR, Allow SW steering for sw_owner_v2 devices - net/mlx5: DR, Don't use SW steering when RoCE is not supported - net/mlx5e: Block offload of outer header csum for UDP tunnels - netfilter: synproxy: Fix out of bounds when parsing TCP options - sch_cake: Fix out of bounds when parsing TCP options and header - alx: Fix an error handling path in 'alx_probe()' - cxgb4: fix endianness when flashing boot image - cxgb4: fix sleep in atomic when flashing PHY firmware - cxgb4: halt chip before flashing PHY firmware image - net: make get_net_ns return error if NET_NS is disabled - ethtool: strset: fix message length calculation - qlcnic: Fix an error handling path in 'qlcnic_probe()' - netxen_nic: Fix an error handling path in 'netxen_nic_probe()' - cxgb4: fix wrong ethtool n-tuple rule lookup - ipv4: Fix device used for dst_alloc with local routes - net: qrtr: fix OOB Read in qrtr_endpoint_post - bpf: Fix leakage under speculation on mispredicted branches (CVE-2021-33624) - ptp: improve max_adj check against unreasonable values - net: cdc_ncm: switch to eth%d interface naming - net: usb: fix possible use-after-free in smsc75xx_bind - [arm64,armhf] net: fec_ptp: fix issue caused by refactor the fec_devtype - net: ipv4: fix memory leak in ip_mc_add1_src - net/af_unix: fix a data-race in unix_dgram_sendmsg / unix_release_sock - net/mlx5: E-Switch, Read PF mac address - net/mlx5: E-Switch, Allow setting GUID for host PF vport - net/mlx5: Reset mkey index on creation - be2net: Fix an error handling path in 'be_probe()' - net: hamradio: fix memory leak in mkiss_close - net: cdc_eem: fix tx fixup skb leak - cxgb4: fix wrong shift. - bnxt_en: Rediscover PHY capabilities after firmware reset - bnxt_en: Fix TQM fastpath ring backing store computation - bnxt_en: Call bnxt_ethtool_free() in bnxt_init_one() error path - icmp: don't send out ICMP messages with a source address of 0.0.0.0 - [x86] platform/x86: thinkpad_acpi: Add X1 Carbon Gen 9 second fan support - sched/pelt: Ensure that *_sum is always synced with *_avg - [armhf] spi: stm32-qspi: Always wait BUSY bit to be cleared in stm32_qspi_wait_cmd() - ASoC: rt5682: Fix the fast discharge for headset unplugging in soundwire mode - [arm64,armhf] drm/sun4i: dw-hdmi: Make HDMI PHY into a platform device - [arm64] ASoC: qcom: lpass-cpu: Fix pop noise during audio capture begin - radeon: use memcpy_to/fromio for UVD fw upload - mm: relocate 'write_protect_seq' in struct mm_struct - [arm64,armhf] irqchip/gic-v3: Workaround inconsistent PMR setting on NMI entry - bpf: Inherit expanded/patched seen count from old aux data (CVE-2021-33624) - bpf: Do not mark insn as seen under speculative path verification (CVE-2021-33624) - can: bcm: fix infoleak in struct bcm_msg_head (CVE-2021-34693) - can: bcm/raw/isotp: use per module netdevice notifier - can: j1939: fix Use-after-Free, hold skb ref while in use - can: mcba_usb: fix memory leak in mcba_usb - usb: core: hub: Disable autosuspend for Cypress CY7C65632 - [arm64,armhf] usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection - tracing: Do not stop recording cmdlines when tracing is off - tracing: Do not stop recording comms if the trace file is being read - tracing: Do no increment trace_clock_global() by one - PCI: Mark TI C667X to avoid bus reset - PCI: Mark some NVIDIA GPUs to avoid bus reset - [arm64] PCI: aardvark: Fix kernel panic during PIO transfer - PCI: Add ACS quirk for Broadcom BCM57414 NIC - PCI: Work around Huawei Intelligent NIC VF FLR erratum - [x86] KVM: x86: Immediately reset the MMU context when the SMM flag is cleared - [x86] KVM: x86/mmu: Calculate and check "full" mmu_role for nested MMU - [x86] KVM: X86: Fix x86_emulator slab cache leak - [s390x] mcck: fix calculation of SIE critical section size - [s390x] ap: Fix hanging ioctl caused by wrong msg counter - [amd64] x86/mm: Avoid truncating memblocks for SGX memory - [x86] process: Check PF_KTHREAD and not current->mm for kernel threads - [x86] ioremap: Map EFI-reserved memory as encrypted for SEV - [x86] pkru: Write hardware init value to PKRU when xstate is init - [x86] fpu: Prevent state corruption in __fpu__restore_sig() - [x86] fpu: Invalidate FPU state after a failed XRSTOR from a user buffer - [x86] fpu: Reset state for all signal restore failures - crash_core, vmcoreinfo: append 'SECTION_SIZE_BITS' to vmcoreinfo - [arm64,armhf] dmaengine: pl330: fix wrong usage of spinlock flags in dma_cyclc - mac80211: Fix NULL ptr deref for injected rate info - cfg80211: avoid double free of PMSR request - drm/amdgpu/gfx10: enlarge CP_MEC_DOORBELL_RANGE_UPPER to cover full doorbell. - drm/amdgpu/gfx9: fix the doorbell missing when in CGPG issue. - net: ll_temac: Fix TX BD buffer overwrite - net: bridge: fix vlan tunnel dst null pointer dereference - net: bridge: fix vlan tunnel dst refcnt when egressing - mm/swap: fix pte_same_as_swp() not removing uffd-wp bit when compare - mm/slub: clarify verification reporting - mm/slub: fix redzoning for small allocations - mm/slub: actually fix freelist pointer vs redzoning - mm/slub.c: include swab.h - net: stmmac: disable clocks in stmmac_remove_config_dt() - [arm64,armhf] net: fec_ptp: add clock rate zero check - [arm64,armhf] usb: dwc3: debugfs: Add and remove endpoint dirs dynamically - [arm64,armhf] usb: dwc3: core: fix kernel panic when do reboot . [ Josua Mayer ] * [armhf] drivers/bluetooth: Enable BT_HCIUART as a module, with support for all features already enabled in the generic config. (Closes: #987361) * [armhf] enable i.MX6 MIPI-CSI video capture device. (Closes: #987365) - drivers/mux: Enable MUX_MMIO as a module. - drivers/media/platform: Enable VIDEO_MUX as a module. - drivers/staging/media/imx: Enable VIDEO_IMX_MEDIA and VIDEO_IMX_CSI as modules. . [ Uwe Kleine-König ] * [arm64] Update device tree for Kobol's helios64 from next . [ Salvatore Bonaccorso ] * [rt] Refresh "net/Qdisc: use a seqlock instead seqcount" * Ignore some ABI changes that should not affect OOT modules * Bump ABI to 8 * [rt] Refresh "tracing: Merge irqflags + preempt counter" * can: bcm: delay release of struct bcm_op after synchronize_rcu() (CVE-2021-3609) * Revert "PCI: PM: Do not read power state in pci_enable_device_flags()" (Closes: #990008) . [ Vagrant Cascadian ] * [arm64] Add pwm-rockchip to fb-modules udeb. * [arm64] Add fusb302, tcpm and typec to usb-modules udeb. * [armhf] Add gpio-mxc to kernel-image udeb. Thanks to Rick Thomas. (Closes: #982270) . linux (5.10.40-1) unstable; urgency=medium . * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.39 - [x86] msr: Fix wr/rdmsr_safe_regs_on_cpu() prototypes - [x86] drm/i915/display: fix compiler warning about array overrun - airo: work around stack usage warning - usb: sl811-hcd: improve misleading indentation - cxgb4: Fix the -Wmisleading-indentation warning - isdn: capi: fix mismatched prototypes - virtio_net: Do not pull payload in skb->head - [armel,armhf] 9066/1: ftrace: pause/unpause function graph tracer in cpu_suspend() - [arm64,x86] ACPI / hotplug / PCI: Fix reference count leak in enable_slot() - [arm64] Input: elants_i2c - do not bind to i2c-hid compatible ACPI instantiated devices - NFS: NFS_INO_REVAL_PAGECACHE should mark the change attribute invalid - [armel,armhf] 9075/1: kernel: Fix interrupted SMC calls - [arm64] platform/chrome: cros_ec_typec: Add DP mode check - scsi: lpfc: Fix illegal memory access on Abort IOCBs - ceph: fix fscache invalidation - ceph: don't clobber i_snap_caps on non-I_NEW inode - ceph: don't allow access to MDS-private inodes - scsi: target: tcmu: Return from tcmu_handle_completions() if cmd_id not found - bridge: Fix possible races between assigning rx_handler_data and setting IFF_BRIDGE_PORT bit - nvmet: remove unsupported command noise - drm/amd/display: Fix two cursor duplication when using overlay - [arm64,x86] gpiolib: acpi: Add quirk to ignore EC wakeups on Dell Venue 10 Pro 5055 - net:CXGB4: fix leak if sk_buff is not used - ALSA: hda: generic: change the DAC ctl name for LO+SPK or LO+HP - block: reexpand iov_iter after read/write - net: stmmac: Do not enable RX FIFO overflow interrupts - ip6_gre: proper dev_{hold|put} in ndo_[un]init methods - sit: proper dev_{hold|put} in ndo_[un]init methods - ip6_tunnel: sit: proper dev_{hold|put} in ndo_[un]init methods - ipv6: remove extra dev_hold() for fallback tunnels - tweewide: Fix most Shebang lines - scripts: switch explicitly to Python 3 https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.40 - RDMA/core: Prevent divide-by-zero error triggered by the user - RDMA/rxe: Clear all QP fields if creation failed - scsi: ufs: core: Increase the usable queue depth - scsi: qedf: Add pointer checks in qedf_update_link_speed() - scsi: qla2xxx: Fix error return code in qla82xx_write_flash_dword() - RDMA/mlx5: Recover from fatal event in dual port mode - RDMA/core: Don't access cm_id after its destruction - nvmet: remove unused ctrl->cqs - nvmet: fix memory leak in nvmet_alloc_ctrl() - nvme-tcp: rerun io_work if req_list is not empty - nvme-fc: clear q_live at beginning of association teardown - [x86] platform/x86: intel_int0002_vgpio: Only call enable_irq_wake() when using s2idle - [x86] platform/x86: dell-smbios-wmi: Fix oops on rmmod dell_smbios - RDMA/mlx5: Fix query DCT via DEVX - RDMA/uverbs: Fix a NULL vs IS_ERR() bug - [powerpc*] pseries: Fix hcall tracing recursion in pv queued spinlocks - ptrace: make ptrace() fail if the tracee changed its pid unexpectedly - nvmet: seset ns->file when open fails - [x86] perf/x86: Avoid touching LBR_TOS MSR for Arch LBR - locking/lockdep: Correct calling tracepoints - locking/mutex: clear MUTEX_FLAGS if wait_list is empty due to signal - [powerpc*] Fix early setup to make early_ioremap() work - btrfs: avoid RCU stalls while running delayed iputs - cifs: fix memory leak in smb2_copychunk_range - misc: eeprom: at24: check suspend status before disable regulator - ALSA: dice: fix stream format for TC Electronic Konnekt Live at high sampling transfer frequency - ALSA: intel8x0: Don't update period unless prepared - ALSA: firewire-lib: fix amdtp_packet tracepoints event for packet_index field - ALSA: line6: Fix racy initialization of LINE6 MIDI - ALSA: dice: fix stream format at middle sampling rate for Alesis iO 26 - ALSA: firewire-lib: fix calculation for size of IR context payload - ALSA: usb-audio: Validate MS endpoint descriptors - ALSA: bebob/oxfw: fix Kconfig entry for Mackie d.2 Pro - ALSA: hda: fixup headset for ASUS GU502 laptop - Revert "ALSA: sb8: add a check for request_region" - ALSA: firewire-lib: fix check for the size of isochronous packet payload - ALSA: hda/realtek: reset eapd coeff to default value for alc287 - ALSA: hda/realtek: Add some CLOVE SSIDs of ALC293 - ALSA: hda/realtek: Fix silent headphone output on ASUS UX430UA - ALSA: hda/realtek: Add fixup for HP OMEN laptop - ALSA: hda/realtek: Add fixup for HP Spectre x360 15-df0xxx - [x86] uio_hv_generic: Fix a memory leak in error handling paths - [arm64] Revert "serial: mvebu-uart: Fix to avoid a potential NULL pointer dereference" - nvme-tcp: fix possible use-after-completion - drm/amdgpu: Fix GPU TLB update error when PAGE_SIZE > AMDGPU_PAGE_SIZE - drm/amdgpu: disable 3DCGCG on picasso/raven1 to avoid compute hang - drm/amdgpu: update gc golden setting for Navi12 - drm/amdgpu: update sdma golden setting for Navi12 - [powerpc*] 64s/syscall: Use pt_regs.trap to distinguish syscall ABI difference between sc and scv syscalls - [powerpc*] 64s/syscall: Fix ptrace syscall info with scv syscalls - mmc: sdhci-pci-gli: increase 1.8V regulator wait - [x86] xen-pciback: redo VF placement in the virtual topology - [x86] xen-pciback: reconfigure also from backend watch handler - ipc/mqueue, msg, sem: avoid relying on a stack reference past its expiry - dm snapshot: fix crash with transient storage and zero chunk size - Revert "video: hgafb: fix potential NULL pointer dereference" - [arm64,armhf] Revert "net: stmicro: fix a missing check of clk_prepare" - Revert "hwmon: (lm80) fix a missing check of bus read in lm80 probe" - Revert "ecryptfs: replace BUG_ON with error handling code" - Revert "rtlwifi: fix a potential NULL pointer dereference" - Revert "qlcnic: Avoid potential NULL pointer dereference" - Revert "niu: fix missing checks of niu_pci_eeprom_read" - ethernet: sun: niu: fix missing checks of niu_pci_eeprom_read() - [arm64,armhf] net: stmicro: handle clk_prepare() failure during init - net: rtlwifi: properly check for alloc_workqueue() failure - ics932s401: fix broken handling of errors when word reading fails - qlcnic: Add null check after calling netdev_alloc_skb - [x86] video: hgafb: fix potential NULL pointer dereference - vgacon: Record video mode changes with VT_RESIZEX - vt_ioctl: Revert VT_RESIZEX parameter handling removal - vt: Fix character height handling with VT_RESIZEX - tty: vt: always invoke vc->vc_sw->con_resize callback - [x86] drm/i915/gt: Disable HiZ Raw Stall Optimization on broken gen7 - [amd64] x86/Xen: swap NX determination and GDT setup on BSP - nvme-multipath: fix double initialization of ANA state - [arm64] rtc: pcf85063: fallback to parent of_node - nvmet: use new ana_log_size instead the old one - [x86] video: hgafb: correctly handle card detect failure during probe - Bluetooth: SMP: Fail if remote and local public keys are identical . [ Salvatore Bonaccorso ] * bpf: Wrap aux data inside bpf_sanitize_info container (CVE-2021-33200) * bpf: Fix mask direction swap upon off reg sign change (CVE-2021-33200) * bpf: No need to simulate speculative domain for immediates (CVE-2021-33200) * [armhf] dts: sun8i: h3: orangepi-plus: Fix ethernet phy-mode (Closes: #988574) * [rt] Refresh "ptrace: fix ptrace vs tasklist_lock race" * Deal with vc_data ABI changes in 5.10.40 . linux (5.10.38-1) unstable; urgency=medium . * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.29 - [armhf] bus: ti-sysc: Fix warning on unbind if reset is not deasserted - [x86] platform/x86: intel-hid: Support Lenovo ThinkPad X1 Tablet Gen 2 - [amd64] bpf, x86: Use kvmalloc_array instead kmalloc_array in bpf_jit_comp - net/mlx5e: Enforce minimum value check for ICOSQ size - mISDN: fix crash in fritzpci - mac80211: Check crypto_aead_encrypt for errors - mac80211: choose first enabled channel for monitor - [arm64] drm/msm/dsi_pll_7nm: Fix variable usage for pll_lockdet_rate - [arm64] drm/msm/adreno: a5xx_power: Don't apply A540 lm_setup to other GPUs - [arm64] drm/msm: Ratelimit invalid-fence message - netfilter: conntrack: Fix gre tunneling over ipv6 - netfilter: nftables: skip hook overlap logic if flowtable is stale - [x86] platform/x86: thinkpad_acpi: Allow the FnLock LED to change state - [arm64] drm/msm/disp/dpu1: icc path needs to be set before dpu runtime resume - block: clear GD_NEED_PART_SCAN later in bdev_disk_changed - [x86] platform/x86: intel_pmc_core: Ignore GBE LTR on Tiger Lake platforms - [arm64] ptp_qoriq: fix overflow in ptp_qoriq_adjfine() u64 calcalation - scsi: target: pscsi: Clean up after failure in pscsi_map_sg() - [ia64] mca: allocate early mca with GFP_ATOMIC - [ia64] fix format strings for err_inject - cifs: revalidate mapping when we open files for SMB1 POSIX - cifs: Silently ignore unknown oplock break handle - io_uring: fix timeout cancel return code - math: Export mul_u64_u64_div_u64 https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.30 - ALSA: aloop: Fix initialization of controls - ALSA: hda/realtek: Fix speaker amp setup on Acer Aspire E1 - ALSA: hda/conexant: Apply quirk for another HP ZBook G5 model - [x86] ASoC: intel: atom: Stop advertising non working S24LE support - nfc: fix refcount leak in llcp_sock_bind() (CVE-2020-25670) - nfc: fix refcount leak in llcp_sock_connect() (CVE-2020-25671) - nfc: fix memory leak in llcp_sock_connect() (CVE-2020-25672) - nfc: Avoid endless loops caused by repeated llcp_sock_connect() - selinux: make nslot handling in avtab more robust - selinux: fix cond_list corruption when changing booleans - selinux: fix race between old and new sidtab - xen/evtchn: Change irq_info lock to raw_spinlock_t - net: ipv6: check for validity before dereferencing cfg->fc_nlinfo.nlh - [x86] drm/i915: Fix invalid access to ACPI _DSM objects - [amd64] IB/hfi1: Fix probe time panic when AIP is enabled with a buggy BIOS - LOOKUP_MOUNTPOINT: we are cleaning "jumped" flag too late - [ia64] fix user_stack_pointer() for ptrace() - ocfs2: fix deadlock between setattr and dio_end_io_write - fs: direct-io: fix missing sdio->boundary - ethtool: fix incorrect datatype in set_eee ops - of: property: fw_devlink: do not link ".*,nr-gpios" - [armhf] dts: turris-omnia: configure LED[2]/INTn pin as interrupt pin - batman-adv: initialize "struct batadv_tvlv_tt_vlan_data"->reserved field - ice: Continue probe on link/PHY errors - ice: Increase control queue timeout - ice: prevent ice_open and ice_stop during reset - ice: fix memory allocation call - ice: remove DCBNL_DEVRESET bit from PF state - ice: Fix for dereference of NULL pointer - ice: Use port number instead of PF ID for WoL - ice: Cleanup fltr list in case of allocation issues - iwlwifi: pcie: properly set LTR workarounds on 22000 devices - ice: fix memory leak of aRFS after resuming from suspend - net: hso: fix null-ptr-deref during tty device unregistration - bpf: Enforce that struct_ops programs be GPL-only - bpf: link: Refuse non-O_RDWR flags in BPF_OBJ_GET - ethernet/netronome/nfp: Fix a use after free in nfp_bpf_ctrl_msg_rx - bpf: Refcount task stack in bpf_get_task_stack - bpf, sockmap: Fix sk->prot unhash op reset - bpf, sockmap: Fix incorrect fwd_alloc accounting - net: ensure mac header is set in virtio_net_hdr_to_skb() - i40e: Fix sparse warning: missing error code 'err' - i40e: Fix sparse error: 'vsi->netdev' could be null - i40e: Fix sparse error: uninitialized symbol 'ring' - i40e: Fix sparse errors in i40e_txrx.c - net: sched: sch_teql: fix null-pointer dereference - net: sched: fix action overwrite reference counting - nl80211: fix beacon head validation - nl80211: fix potential leak of ACL params - cfg80211: check S1G beacon compat element length - mac80211: fix time-is-after bug in mlme - mac80211: fix TXQ AC confusion - net-ipv6: bugfix - raw & sctp - switch to ipv6_can_nonlocal_bind() - net: let skb_orphan_partial wake-up waiters. - [x86] thunderbolt: Fix a leak in tb_retimer_add() - [x86] thunderbolt: Fix off by one in tb_port_find_retimer() - usbip: add sysfs_lock to synchronize sysfs code paths - usbip: stub-dev synchronize sysfs code paths - usbip: vudc synchronize sysfs code paths - usbip: synchronize event handler with sysfs code paths - driver core: Fix locking bug in deferred_probe_timeout_work_func() - scsi: pm80xx: Fix chip initialization failure - scsi: target: iscsi: Fix zero tag inside a trace event - percpu: make pcpu_nr_empty_pop_pages per chunk type - i2c: turn recovery error on init to debug - [x86] KVM: x86/mmu: change TDP MMU yield function returns to match cond_resched - [x86] KVM: x86/mmu: Merge flush and non-flush tdp_mmu_iter_cond_resched - [x86] KVM: x86/mmu: Rename goal_gfn to next_last_level_gfn - [x86] KVM: x86/mmu: Ensure forward progress when yielding in TDP MMU iter - [x86] KVM: x86/mmu: Yield in TDU MMU iter even if no SPTES changed - [x86] KVM: x86/mmu: Ensure TLBs are flushed when yielding during GFN range zap - [x86] KVM: x86/mmu: Ensure TLBs are flushed for TDP MMU during NX zapping - [x86] KVM: x86/mmu: Don't allow TDP MMU to yield when recovering NX pages - [x86] KVM: x86/mmu: preserve pending TLB flush across calls to kvm_tdp_mmu_zap_sp - net: sched: fix err handler in tcf_action_init() - ice: Refactor DCB related variables out of the ice_port_info struct - ice: Recognize 860 as iSCSI port in CEE mode - xfrm: interface: fix ipv4 pmtu check to honor ip header df - xfrm: Use actual socket sk instead of skb socket for xfrm_output_resume - [armhf] OMAP4: PM: update ROM return address for OSWR and OFF - net: xfrm: Localize sequence counter per network namespace - esp: delete NETIF_F_SCTP_CRC bit from features for esp offload - [x86] ASoC: SOF: Intel: HDA: fix core status verification - xfrm: Fix NULL pointer dereference on policy lookup - virtchnl: Fix layout of RSS structures - i40e: Added Asym_Pause to supported link modes - i40e: Fix kernel oops when i40e driver removes VF's - vxlan: do not modify the shared tunnel info when PMTU triggers an ICMP reply - geneve: do not modify the shared tunnel info when PMTU triggers an ICMP reply - sch_red: fix off-by-one checks in red_check_params() - drivers/net/wan/hdlc_fr: Fix a double free in pvc_xmit - xfrm: Provide private skb extensions for segmented and hw offloaded ESP packets - can: bcm/raw: fix msg_namelen values depending on CAN_REQUIRED_SIZE - can: isotp: fix msg_namelen values depending on CAN_REQUIRED_SIZE - ethernet: myri10ge: Fix a use after free in myri10ge_sw_tso - gianfar: Handle error code at MAC address change - [arm64,armhf] net: dsa: Fix type was not set for devlink port - cxgb4: avoid collecting SGE_QBASE regs during traffic - net:tipc: Fix a double free in tipc_sk_mcast_rcv - [armhf] net/ncsi: Avoid channel_monitor hrtimer deadlock - net: qrtr: Fix memory leak on qrtr_tx_wait failure - nfp: flower: ignore duplicate merge hints from FW - net: phy: broadcom: Only advertise EEE for supported modes - [armhf] ASoC: sunxi: sun4i-codec: fill ASoC card owner (Closes: #980539) - net/mlx5e: Fix mapping of ct_label zero - net/mlx5e: Fix ethtool indication of connector type - net/mlx5: Don't request more than supported EQs - net/rds: Fix a use after free in rds_message_map_pages - xdp: fix xdp_return_frame() kernel BUG throw for page_pool memory model - i40e: Fix display statistics for veb_tc - [arm64] drm/msm: Set drvdata to NULL when msm_drm_init() fails - net: udp: Add support for getsockopt(..., ..., UDP_GRO, ..., ...); - scsi: ufs: core: Fix task management request completion timeout - scsi: ufs: core: Fix wrong Task Tag used in task management request UPIUs - net: cls_api: Fix uninitialised struct field bo->unlocked_driver_cb - [arm64,riscv64] net: macb: restore cmp registers on resume path - clk: fix invalid usage of list cursor in register - clk: fix invalid usage of list cursor in unregister - workqueue: Move the position of debug_work_activate() in __queue_work() - [s390x] cpcmd: fix inline assembly register clobbering - net: openvswitch: conntrack: simplify the return expression of ovs_ct_limit_get_default_limit() - openvswitch: fix send of uninitialized stack memory in ct limit reply - i2c: designware: Adjust bus_freq_hz when refuse high speed mode set - iwlwifi: fix 11ax disabled bit in the regulatory capability flags - tipc: increment the tmp aead refcnt before attaching it - [arm64] net: hns3: clear VF down state bit before request link status - net/mlx5: Fix placement of log_max_flow_counter - net/mlx5: Fix PPLM register mapping - net/mlx5: Fix PBMC register mapping - RDMA/cxgb4: check for ipv6 address properly while destroying listener - RDMA/qedr: Fix kernel panic when trying to access recv_cq - [arm*] drm/vc4: crtc: Reduce PV fifo threshold on hvs4 - i40e: Fix parameters in aq_get_phy_register() - RDMA/addr: Be strict with gid size - [armhf] clk: socfpga: fix iomem pointer cast on 64-bit - dt-bindings: net: ethernet-controller: fix typo in NVMEM - net: sched: bump refcount for new action in ACT replace mode - gpiolib: Read "gpio-line-names" from a firmware node - cfg80211: remove WARN_ON() in cfg80211_sme_connect - net: tun: set tun->dev->addr_len during TUNSETLINK processing - drivers: net: fix memory leak in atusb_probe - drivers: net: fix memory leak in peak_usb_create_dev - net: mac802154: Fix general protection fault (CVE-2021-33033) - net: ieee802154: nl-mac: fix check on panid - net: ieee802154: fix nl802154 del llsec key - net: ieee802154: fix nl802154 del llsec dev - net: ieee802154: fix nl802154 add llsec key - net: ieee802154: fix nl802154 del llsec devkey - net: ieee802154: forbid monitor for set llsec params - net: ieee802154: forbid monitor for del llsec seclevel - net: ieee802154: stop dump llsec params for monitors - Revert "net: sched: bump refcount for new action in ACT replace mode" https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.31 - gfs2: Flag a withdraw if init_threads() fails - [arm64] KVM: Hide system instruction access to Trace registers - [arm64] KVM: Disable guest access to trace filter controls - [armhf] drm/imx: imx-ldb: fix out of bounds array access warning - gfs2: report "already frozen/thawed" errors - ftrace: Check if pages were allocated before calling free_pages() - [arm64,armhf] drm/tegra: dc: Don't set PLL clock to 0Hz - [arm64,armhf] gpu: host1x: Use different lock classes for each client - XArray: Fix splitting to non-zero orders - block: only update parent bi_status when bio fail - null_blk: fix command timeout completion handling - io_uring: don't mark S_ISBLK async work as unbounded - [riscv64] entry: fix misaligned base for excp_vect_table - block: don't ignore REQ_NOWAIT for direct IO - netfilter: x_tables: fix compat match/target pad out-of-bound write - net: sfp: relax bitrate-derived mode check - net: sfp: cope with SFPs that set both LOS normal and LOS inverted - xen/events: fix setting irq affinity https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.32 - net/sctp: fix race condition in sctp_destroy_sock - gpio: sysfs: Obey valid_mask - dmaengine: Fix a double free in dma_async_device_register - [x86] ACPI: x86: Call acpi_boot_table_init() after acpi_table_upgrade() - iwlwifi: Fix softirq/hardirq disabling in iwl_pcie_enqueue_hcmd() - xfrm: BEET mode doesn't support fragments for inner packets - ASoC: max98373: Changed amp shutdown register as volatile - ASoC: max98373: Added 30ms turn on/off time delay - [x86] gpu/xen: Fix a use after free in xen_drm_drv_init - neighbour: Disregard DEAD dst in neigh_update - [arm64] drm/msm: Fix a5xx/a6xx timestamps - scsi: scsi_transport_srp: Don't block target in SRP_PORT_LOST state - iwlwifi: add support for Qu with AX201 device - net: ieee802154: stop dump llsec keys for monitors - net: ieee802154: forbid monitor for add llsec key - net: ieee802154: forbid monitor for del llsec key - net: ieee802154: stop dump llsec devs for monitors - net: ieee802154: forbid monitor for add llsec dev - net: ieee802154: forbid monitor for del llsec dev - net: ieee802154: stop dump llsec devkeys for monitors - net: ieee802154: forbid monitor for add llsec devkey - net: ieee802154: forbid monitor for del llsec devkey - net: ieee802154: stop dump llsec seclevels for monitors - net: ieee802154: forbid monitor for add llsec seclevel - pcnet32: Use pci_resource_len to validate PCI resource - mac80211: clear sta->fast_rx when STA removed from 4-addr VLAN - Input: i8042 - fix Pegatron C15B ID entry - HID: wacom: set EV_KEY and EV_ABS only for non-HID_GENERIC type of devices - readdir: make sure to verify directory entry for legacy interfaces too - [arm64] fix inline asm in load_unaligned_zeropad() - [arm64] alternatives: Move length validation in alternative_{insn, endif} - vfio/pci: Add missing range check in vfio_pci_mmap - scsi: libsas: Reset num_scatter if libata marks qc as NODATA - ixgbe: fix unbalanced device enable/disable in suspend/resume - netfilter: flowtable: fix NAT IPv6 offload mangling - netfilter: conntrack: do not print icmpv6 as unknown via /proc - ice: Fix potential infinite loop when using u8 loop counter - libnvdimm/region: Fix nvdimm_has_flush() to handle ND_REGION_ASYNC - netfilter: bridge: add pre_exit hooks for ebtable unregistration - netfilter: arp_tables: add pre_exit hook for table unregister - [arm64,riscv64] net: macb: fix the restore of cmp registers - net/mlx5e: fix ingress_ifindex check in mlx5e_flower_parse_meta - netfilter: nft_limit: avoid possible divide error in nft_limit_init - net/mlx5e: Fix setting of RS FEC mode - net: sit: Unregister catch-all devices - net: ip6_tunnel: Unregister catch-all devices - mm: ptdump: fix build failure - net: Make tcp_allowed_congestion_control readonly in non-init netns - i40e: fix the panic when running bpf in xdpdrv mode - ethtool: pause: make sure we init driver stats - [ia64] tools: remove inclusion of ia64-specific version of errno.h header - gro: ensure frag0 meets IP header alignment - [armhf] OMAP2+: Fix warning for omap_init_time_of() - [armhf] OMAP2+: Fix uninitialized sr_inst - [arm64] dts: allwinner: Fix SD card CD GPIO for SOPine systems - [arm64] dts: allwinner: h6: beelink-gs1: Remove ext. 32 kHz osc reference - bpf: Use correct permission flag for mixed signed bounds arithmetic (CVE-2021-29155) - [x86] KVM: VMX: Convert vcpu_vmx.exit_reason to a union - [x86] KVM: VMX: Don't use vcpu->run->internal.ndata as an array index (CVE-2021-3501) - r8169: tweak max read request size for newer chips also in jumbo mtu mode - r8169: don't advertise pause in jumbo mode - bpf: Ensure off_reg has no mixed signed bounds for all types (CVE-2021-29155) - bpf: Move off_reg into sanitize_ptr_alu (CVE-2021-29155) - [armel,armhf] 9071/1: uprobes: Don't hook on thumb instructions - [arm64] mte: Ensure TIF_MTE_ASYNC_FAULT is set atomically - bpf: Rework ptr_limit into alu_limit and add common error path (CVE-2021-29155) - bpf: Improve verifier error messages for users (CVE-2021-29155) - bpf: Move sanitize_val_alu out of op switch - net: phy: marvell: fix detection of PHY on Topaz switches https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.33 - [armhf] gpio: omap: Save and restore sysconfig - [x86] pinctrl: lewisburg: Update number of pins in community - block: return -EBUSY when there are open partitions in blkdev_reread_part - pinctrl: core: Show pin numbers for the controllers with base = 0 - [arm64] dts: allwinner: Revert SD card CD GPIO for Pine64-LTS - bpf: Permits pointers on stack for helper calls - bpf: Allow variable-offset stack access - bpf: Refactor and streamline bounds check into helper (CVE-2021-29155) - bpf: Tighten speculative pointer arithmetic mask - locking/qrwlock: Fix ordering in queued_write_lock_slowpath() - [x86] perf/x86/intel/uncore: Remove uncore extra PCI dev HSWEP_PCI_PCU_3 - [x86] perf/x86/kvm: Fix Broadwell Xeon stepping in isolation_ucodes[] - HID: alps: fix error return code in alps_input_configured() - HID cp2112: fix support for multiple gpiochips - HID: wacom: Assign boolean values to a bool variable - net: geneve: check skb is large enough for IPv4/IPv6 header - [arm64,armhf] dmaengine: tegra20: Fix runtime PM imbalance on error - [s390x] entry: save the caller of psw_idle - [arm64] kprobes: Restore local irqflag if kprobes is cancelled - xen-netback: Check for hotplug-status existence before watching - [x86] crash: Fix crash_setup_memmap_entries() out-of-bounds access - net: hso: fix NULL-deref on disconnect regression - USB: CDC-ACM: fix poison/unpoison imbalance (Closes: #986995) https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.34 - iwlwifi: Fix softirq/hardirq disabling in iwl_pcie_gen2_enqueue_hcmd() - [x86] mei: me: add Alder Lake P device id. https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.35 - [mips*] Do not include hi and lo in clobber list for R6 - netfilter: conntrack: Make global sysctls readonly in non-init netns - net: usb: ax88179_178a: initialize local variables before use - igb: Enable RSS for Intel I211 Ethernet Controller - bpf: Fix masking negation logic upon negative dst register (CVE-2021-31829) - bpf: Fix leakage of uninitialized bpf stack under speculation (CVE-2021-31829) - net: qrtr: Avoid potential use after free in MHI send - perf data: Fix error return code in perf_data__create_dir() - capabilities: require CAP_SETFCAP to map uid 0 - perf ftrace: Fix access to pid in array when setting a pid filter - driver core: add a min_align_mask field to struct device_dma_parameters - swiotlb: add a IO_TLB_SIZE define - swiotlb: factor out an io_tlb_offset helper - swiotlb: factor out a nr_slots helper - swiotlb: clean up swiotlb_tbl_unmap_single - swiotlb: refactor swiotlb_tbl_map_single - swiotlb: don't modify orig_addr in swiotlb_tbl_sync_single - swiotlb: respect min_align_mask - nvme-pci: set min_align_mask - ovl: fix leaked dentry - ovl: allow upperdir inside lowerdir - ALSA: usb-audio: Add MIDI quirk for Vox ToneLab EX - USB: Add LPM quirk for Lenovo ThinkPad USB-C Dock Gen2 Ethernet - USB: Add reset-resume quirk for WD19's Realtek Hub - [x86] platform/x86: thinkpad_acpi: Correct thermal sensor allocation - perf/core: Fix unconditional security_locked_down() call - vfio: Depend on MMU https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.36 - bus: mhi: core: Fix check for syserr at power_up - bus: mhi: core: Clear configuration from channel context during reset - bus: mhi: core: Sanity check values from remote device before use - dyndbg: fix parsing file query without a line-range suffix - [s390x] disassembler: increase ebpf disasm buffer size - [s390x] zcrypt: fix zcard and zqueue hot-unplug memleak - [arm64,x86] tpm: acpi: Check eventlog signature before using it - ftrace: Handle commands when closing set_ftrace_filter file - ecryptfs: fix kernel panic with null dev_name - fs/epoll: restore waking from ep_done_scan() - mtd: spi-nor: core: Fix an issue of releasing resources during read/write - Revert "mtd: spi-nor: macronix: Add support for mx25l51245g" - erofs: add unsupported inode i_format check - [armhf] spi: stm32-qspi: fix pm_runtime usage_count counter - [armhf] spi: spi-ti-qspi: Free DMA resources - scsi: qla2xxx: Fix crash in qla2xxx_mqueuecommand() - scsi: mpt3sas: Block PCI config access from userspace during reset - mmc: sdhci: Check for reset prior to DMA address unmap - mmc: sdhci-pci: Fix initialization of some SD cards for Intel BYT-based controllers - [arm64,armhf] mmc: sdhci-tegra: Add required callbacks to set/clear CQE_EN bit - mmc: block: Update ext_csd.cache_ctrl if it was written - mmc: block: Issue a cache flush only when it's enabled - mmc: core: Do a power cycle when the CMD11 fails - mmc: core: Set read only for SD cards with permanent write protect bit - mmc: core: Fix hanging on I/O during system suspend for removable cards - [arm64,armhf] irqchip/gic-v3: Do not enable irqs when handling spurious interrups - cifs: Return correct error code from smb2_get_enc_key - cifs: fix out-of-bound memory access when calling smb3_notify() at mount point - cifs: detect dead connections only when echoes are enabled. - smb2: fix use-after-free in smb2_ioctl_query_info() - btrfs: handle remount to no compress during compression - btrfs: fix metadata extent leak after failure to create subvolume - [x86] intel_th: pci: Add Rocket Lake CPU support - btrfs: fix race between transaction aborts and fsyncs leading to use-after-free - posix-timers: Preserve return value in clock_adjtime32() - fbdev: zero-fill colormap in fbcmap.c - [armhf] bus: ti-sysc: Probe for l4_wkup and l4_cfg interconnect devices first - staging: wimax/i2400m: fix byte-order issue - bus: mhi: core: Destroy SBL devices when moving to mission mode - crypto: api - check for ERR pointers in crypto_destroy_tfm() - [x86] crypto: qat - fix unmap invalid dma address - usb: gadget: uvc: add bInterval checking for HS mode - usb: webcam: Invalid size of Processing Unit Descriptor - [x86] genirq/matrix: Prevent allocation counter corruption - usb: gadget: f_uac2: validate input parameters - usb: gadget: f_uac1: validate input parameters - [arm64,armhf] usb: dwc3: gadget: Ignore EP queue requests during bus reset - usb: xhci: Fix port minor revision - PCI: PM: Do not read power state in pci_enable_device_flags() - [arm64,armhf] soc/tegra: pmc: Fix completion of power-gate toggling - [arm64] dts: imx8mq-librem5-r3: Mark buck3 as always on - [arm64] tee: optee: do not check memref size on return from Secure World - [arm64,x86] soundwire: cadence: only prepare attached devices on clock stop - [arm*] perf/arm_pmu_platform: Use dev_err_probe() for IRQ errors - [arm*] perf/arm_pmu_platform: Fix error handling - random: initialize ChaCha20 constants with correct endianness - xhci: check port array allocation was successful before dereferencing it - xhci: check control context is valid before dereferencing it. - xhci: fix potential array out of bounds with several interrupters - bus: mhi: core: Clear context for stopped channels from remove() - [arm64] spi: qup: fix PM reference leak in spi_qup_remove() - [arm64,armhf] usb: musb: fix PM reference leak in musb_irq_work() - usb: core: hub: Fix PM reference leak in usb_port_resume() - [arm64,armhf] usb: dwc3: gadget: Check for disabled LPM quirk - tty: n_gsm: check error while registering tty devices - [x86] intel_th: Consistency and off-by-one fix - [armhf] phy: phy-twl4030-usb: Fix possible use-after-free in twl4030_usb_remove() - [arm64] crypto: sun8i-ce - Fix PM reference leak in sun8i_ce_probe() - [armhf] crypto: stm32/hash - Fix PM reference leak on stm32-hash.c - [armhf] crypto: stm32/cryp - Fix PM reference leak on stm32-cryp.c - [x86] platform/x86: intel_pmc_core: Don't use global pmcdev in quirks - spi: sync up initial chipselect state - btrfs: do proper error handling in create_reloc_root - btrfs: do proper error handling in btrfs_update_reloc_root - btrfs: convert logic BUG_ON()'s in replace_path to ASSERT()'s - drm: Added orientation quirk for OneGX1 Pro - drm/qxl: do not run release if qxl failed to init - drm/qxl: release shadow on shutdown - drm/ast: Fix invalid usage of AST_MAX_HWC_WIDTH in cursor atomic_check - drm/ast: fix memory leak when unload the driver - drm/amd/display: Check for DSC support instead of ASIC revision - drm/amdgpu/display: buffer INTERRUPT_LOW_IRQ_CONTEXT interrupt work - scsi: lpfc: Fix incorrect dbde assignment when building target abts wqe - scsi: lpfc: Fix pt2pt connection does not recover after LOGO - drm/amdgpu: Fix some unload driver issues - sched/pelt: Fix task util_est update filtering - kvfree_rcu: Use same set of GFP flags as does single-argument - scsi: target: pscsi: Fix warning in pscsi_complete_cmd() - [x86] media: ite-cir: check for receive overflow - power: supply: bq27xxx: fix power_avg for newer ICs - media: media/saa7164: fix saa7164_encoder_register() memory leak bugs - media: gspca/sq905.c: fix uninitialized variable - drm/amdgpu: mask the xgmi number of hops reported from psp to kfd - drm/amdgpu : Fix asic reset regression issue introduce by 8f211fe8ac7c4f - drm/amd/display: Fix UBSAN warning for not a valid value for type '_Bool' - scsi: qla2xxx: Always check the return value of qla24xx_get_isp_stats() - scsi: qla2xxx: Fix use after free in bsg - [arm64,armhf] mmc: sdhci-esdhc-imx: validate pinctrl before use it - mmc: sdhci-pci: Add PCI IDs for Intel LKF - ata: ahci: Disable SXS for Hisilicon Kunpeng920 - nvmet: return proper error code from discovery ctrl - scsi: smartpqi: Use host-wide tag space - scsi: smartpqi: Correct request leakage during reset operations - scsi: smartpqi: Add new PCI IDs - scsi: scsi_dh_alua: Remove check for ASC 24h in alua_rtpg() - media: em28xx: fix memory leak - media: vivid: update EDID - [arm64] drm/msm/dp: Fix incorrect NULL check kbot warnings in DP driver - [armhf] clk: socfpga: arria10: Fix memory leak of socfpga_clk on error return - media: dvb-usb: fix memory leak in dvb_usb_adapter_init - media: gscpa/stv06xx: fix memory leak - sched/fair: Ignore percpu threads for imbalance pulls - [arm64] drm/msm/mdp5: Configure PP_SYNC_HEIGHT to double the vtotal - [arm64] drm/msm/mdp5: Do not multiply vclk line count by 100 - drm/amdgpu/ttm: Fix memory leak userptr pages - drm/radeon/ttm: Fix memory leak userptr pages - drm/amd/display: Try YCbCr420 color when YCbCr444 fails - drm/amdgpu: fix NULL pointer dereference - scsi: lpfc: Fix crash when a REG_RPI mailbox fails triggering a LOGO response - scsi: lpfc: Fix error handling for mailboxes completed in MBX_POLL mode - scsi: lpfc: Remove unsupported mbox PORT_CAPABILITIES logic - mfd: intel-m10-bmc: Fix the register access range - mfd: da9063: Support SMBus and I2C mode - scsi: libfc: Fix a format specifier - perf: Rework perf_event_exit_event() - sched,fair: Alternative sched_slice() - [s390x] archrandom: add parameter check for s390_arch_random_generate - sched,psi: Handle potential task count underflow bugs more gracefully - [i386] ALSA: emu8000: Fix a use after free in snd_emu8000_create_mixer - ALSA: hda/conexant: Re-order CX5066 quirk table entries - [i386] ALSA: sb: Fix two use after free in snd_sb_qsound_build - ALSA: usb-audio: Explicitly set up the clock selector - ALSA: usb-audio: Add dB range mapping for Sennheiser Communications Headset PC 8 - ALSA: hda/realtek: fix mute/micmute LEDs for HP ProBook 445 G7 - ALSA: hda/realtek: GA503 use same quirks as GA401 - ALSA: hda/realtek: fix mic boost on Intel NUC 8 - ALSA: hda/realtek - Headset Mic issue on HP platform - ALSA: hda/realtek: fix static noise on ALC285 Lenovo laptops - ALSA: hda/realtek: Add quirk for Intel Clevo PCx0Dx - [x86] tools/power/turbostat: Fix turbostat for AMD Zen CPUs (Closes: #985681) - btrfs: fix race when picking most recent mod log operation for an old root - [arm64] vdso: Discard .note.gnu.property sections in vDSO - Makefile: Move -Wno-unused-but-set-variable out of GCC only block - fs: fix reporting supported extra file attributes for statx() - virtiofs: fix memory leak in virtio_fs_probe() - ubifs: Only check replay with inode type to judge if inode linked - f2fs: fix error handling in f2fs_end_enable_verity() - f2fs: fix to avoid out-of-bounds memory access (CVE-2021-3506) - openvswitch: fix stack OOB read while fragmenting IPv4 packets - [arm64] ACPI: GTDT: Don't corrupt interrupt mappings on watchdow probe failure - NFS: fs_context: validate UDP retrans to prevent shift out-of-bounds - NFS: Don't discard pNFS layout segments that are marked for return - NFSv4: Don't discard segments marked for return in _pnfs_return_layout() - jffs2: Fix kasan slab-out-of-bounds problem - jffs2: Hook up splice_write callback - [powerpc*] powernv: Enable HAIL (HV AIL) for ISA v3.1 processors - [powerpc*] eeh: Fix EEH handling for hugepages in ioremap space. - [x86] intel_th: pci: Add Alder Lake-M support - [arm64,x86] tpm: efi: Use local variable for calculating final log size - [arm64,x86] tpm: vtpm_proxy: Avoid reading host log when using a virtual device - [armhf] crypto: arm/curve25519 - Move '.fpu' after '.arch' - md/raid1: properly indicate failure when ending a failed write request - dm raid: fix inconclusive reshape layout on fast raid4/5/6 table reload sequences - fuse: fix write deadlock - exfat: fix erroneous discard when clear cluster bit - sfc: farch: fix TX queue lookup in TX flush done handling - sfc: farch: fix TX queue lookup in TX event handling - security: commoncap: fix -Wstringop-overread warning - Fix misc new gcc warnings - jffs2: check the validity of dstlen in jffs2_zlib_compress() - smb3: when mounting with multichannel include it in requested capabilities - smb3: do not attempt multichannel to server which does not support it - Revert 337f13046ff0 ("futex: Allow FUTEX_CLOCK_REALTIME with FUTEX_WAIT op") - futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI - [x86] cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is supported - ext4: annotate data race in start_this_handle() - ext4: annotate data race in jbd2_journal_dirty_metadata() - ext4: fix check to prevent false positive report of incorrect used inodes - ext4: do not set SB_ACTIVE in ext4_orphan_cleanup() - ext4: fix error code in ext4_commit_super - ext4: fix ext4_error_err save negative errno into superblock - ext4: fix error return code in ext4_fc_perform_commit() - ext4: allow the dax flag to be set and cleared on inline directories - ext4: Fix occasional generic/418 failure - media: dvbdev: Fix memory leak in dvb_media_device_free() - media: dvb-usb: Fix use-after-free access - media: dvb-usb: Fix memory leak at error in dvb_usb_device_init() - media: v4l2-ctrls: fix reference to freed memory - [arm64] media: venus: hfi_parser: Don't initialize parser on v1 - usb: gadget: dummy_hcd: fix gpf in gadget_setup - usb: gadget: Fix double free of device descriptor pointers - usb: gadget/function/f_fs string table fix for multiple languages - [arm64,armhf] usb: dwc3: gadget: Remove FS bInterval_m1 limitation - [arm64,armhf] usb: dwc3: gadget: Fix START_TRANSFER link state check - [arm64,armhf] usb: dwc3: core: Do core softreset when switch mode - [arm*] usb: dwc2: Fix session request interrupt handler - tty: fix memory leak in vc_deallocate - [x86] tools/power turbostat: Fix offset overflow issue in index converting - tracing: Map all PIDs to command lines - tracing: Restructure trace_clock_global() to never block - dm space map common: fix division bug in sm_ll_find_free_block() - dm integrity: fix missing goto in bitmap_flush_interval error handling - dm rq: fix double free of blk_mq_tag_set in dev remove after table load fails - lib/vsprintf.c: remove leftover 'f' and 'F' cases from bstr_printf() - [arm*] thermal/drivers/cpufreq_cooling: Fix slab OOB issue - thermal/core/fair share: Lock the thermal zone while looping over instances https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.37 - Bluetooth: verify AMP hci_chan before amp_destroy (CVE-2021-33034) - bluetooth: eliminate the potential race condition when removing the HCI controller (CVE-2021-32399) - net/nfc: fix use-after-free llcp_sock_bind/connect (CVE-2021-23134) - io_uring: truncate lengths larger than MAX_RW_COUNT on provide buffers (CVE-2021-3491) - Revert "USB: cdc-acm: fix rounding error in TIOCSSERIAL" - usb: roles: Call try_module_get() from usb_role_switch_find_by_fwnode() - [amd64] tty: moxa: fix TIOCSSERIAL jiffies conversions - USB: serial: usb_wwan: fix TIOCSSERIAL jiffies conversions - USB: serial: ti_usb_3410_5052: fix TIOCSSERIAL permission check - [amd64] tty: moxa: fix TIOCSSERIAL permission check - [x86] usb: typec: tcpm: Address incorrect values of tcpm psy for fixed supply - [x86] usb: typec: tcpm: Address incorrect values of tcpm psy for pps supply - [x86] usb: typec: tcpm: update power supply once partner accepts - FDDI: defxx: Bail out gracefully with unassigned PCI resource for CSR - PCI: Allow VPD access for QLogic ISP2722 - [x86] KVM: Defer the MMU unload to the normal path on an global INVPCID - [arm64] PCI: xgene: Fix cfg resource mapping - PM / devfreq: Unlock mutex and free devfreq struct in error path - iio: inv_mpu6050: Fully validate gyro and accel scale writes - iio:accel:adis16201: Fix wrong axis assignment that prevents loading - iio:adc:ad7476: Fix remove handling - misc: lis3lv02d: Fix false-positive WARN on various HP models - [x86] misc: vmw_vmci: explicitly initialize vmci_notify_bm_set_msg struct - [x86] misc: vmw_vmci: explicitly initialize vmci_datagram payload - selinux: add proper NULL termination to the secclass_map permissions - [x86] sched: Treat Intel SNC topology as default, COD as exception - async_xor: increase src_offs when dropping destination page - md/bitmap: wait for external bitmap writes to complete during tear down - md-cluster: fix use-after-free issue when removing rdev - md: split mddev_find - md: factor out a mddev_find_locked helper from mddev_find - md: md_open returns -EBUSY when entering racing area - md: Fix missing unused status line of /proc/mdstat - ipw2x00: potential buffer overflow in libipw_wx_set_encodeext() - cfg80211: scan: drop entry from hidden_list on overflow - rtw88: Fix array overrun in rtw_get_tx_power_params() - mt76: fix potential DMA mapping leak - [amd64] drm/i915/gvt: Fix virtual display setup for BXT/APL - [amd64] drm/i915/gvt: Fix vfio_edid issue for BXT/APL - drm/qxl: use ttm bo priorities - [arm64,armhf] drm/panfrost: Clear MMU irqs before handling the fault - [arm64,armhf] drm/panfrost: Don't try to map pages that are already mapped - drm/radeon: fix copy of uninitialized variable back to userspace - drm/dp_mst: Revise broadcast msg lct & lcr - drm/dp_mst: Set CLEAR_PAYLOAD_ID_TABLE as broadcast - drm: bridge/panel: Cleanup connector on bridge detach - drm/amd/display: Reject non-zero src_y and src_x for video planes - drm/amdgpu: fix concurrent VM flushes on Vega/Navi v2 - ALSA: hda/realtek: Re-order ALC882 Acer quirk table entries - ALSA: hda/realtek: Re-order ALC882 Sony quirk table entries - ALSA: hda/realtek: Re-order ALC882 Clevo quirk table entries - ALSA: hda/realtek: Re-order ALC269 HP quirk table entries - ALSA: hda/realtek: Re-order ALC269 Acer quirk table entries - ALSA: hda/realtek: Re-order ALC269 Dell quirk table entries - ALSA: hda/realtek: Re-order ALC269 ASUS quirk table entries - ALSA: hda/realtek: Re-order ALC269 Sony quirk table entries - ALSA: hda/realtek: Re-order ALC269 Lenovo quirk table entries - ALSA: hda/realtek: Re-order remaining ALC269 quirk table entries - ALSA: hda/realtek: Re-order ALC662 quirk table entries - ALSA: hda/realtek: Remove redundant entry for ALC861 Haier/Uniwill devices - ALSA: hda/realtek: ALC285 Thinkpad jack pin quirk is unreachable - ALSA: hda/realtek: Fix speaker amp on HP Envy AiO 32 - [s390x] KVM: VSIE: correctly handle MVPG when in VSIE - [s390x] KVM: split kvm_s390_logical_to_effective - [s390x] KVM: fix guarded storage control register handling - [s390x] fix detection of vector enhancements facility 1 vs. vector packed decimal facility - [s390x] KVM: VSIE: fix MVPG handling for prefixing and MSO - [s390x] KVM: split kvm_s390_real_to_abs - [s390x] KVM: extend kvm_s390_shadow_fault to return entry pointer - [x86] KVM: x86/mmu: Alloc page for PDPTEs when shadowing 32-bit NPT with 64-bit - [x86] KVM: x86: Remove emulator's broken checks on CR0/CR3/CR4 loads - [x86] KVM: nSVM: Set the shadow root level to the TDP level for nested NPT - [x86] KVM: SVM: Don't strip the C-bit from CR2 on #PF interception - [x86] KVM: SVM: Do not allow SEV/SEV-ES initialization after vCPUs are created - [x86] KVM: SVM: Inject #GP on guest MSR_TSC_AUX accesses if RDTSCP unsupported - [x86] KVM: nVMX: Defer the MMU reload to the normal path on an EPTP switch - [x86] KVM: nVMX: Truncate bits 63:32 of VMCS field on nested check in !64-bit - [x86] KVM: nVMX: Truncate base/index GPR value on address calc in !64-bit - [arm64] KVM: arm/arm64: Fix KVM_VGIC_V3_ADDR_TYPE_REDIST read - KVM: Destroy I/O bus devices on unregister failure _after_ sync'ing SRCU - KVM: Stop looking for coalesced MMIO zones if the bus is destroyed - [arm64] KVM: Fully zero the vcpu state on reset - [arm64] KVM: arm64: Fix KVM_VGIC_V3_ADDR_TYPE_REDIST_REGION read - Revert "drivers/net/wan/hdlc_fr: Fix a double free in pvc_xmit" - Revert "i3c master: fix missing destroy_workqueue() on error in i3c_master_register" - ovl: fix missing revert_creds() on error path - Revert "drm/qxl: do not run release if qxl failed to init" - [x86] usb: gadget: pch_udc: Revert d3cb25a12138 completely - Revert "tools/power turbostat: adjust for temperature offset" - [arm64] firmware: xilinx: Fix dereferencing freed memory - [armhf] memory: gpmc: fix out of bounds read and dereference on gpmc_cs[] - [armhf] ARM: dts: exynos: correct fuel gauge interrupt trigger level on GT-I9100 - [armhf] ARM: dts: exynos: correct PMIC interrupt trigger level on SMDK5250 - [armhf] serial: stm32: fix code cleaning warnings and checks - [armhf] serial: stm32: add "_usart" prefix in functions name - [armhf] serial: stm32: fix probe and remove order for dma - [armhf] serial: stm32: Use of_device_get_match_data() - [armhf] serial: stm32: fix startup by enabling usart for reception - [armhf] serial: stm32: fix incorrect characters on console - [armhf] serial: stm32: fix TX and RX FIFO thresholds - [armhf] serial: stm32: fix a deadlock condition with wakeup event - [armhf] serial: stm32: fix wake-up flag handling - [armhf] serial: stm32: fix a deadlock in set_termios - [armhf] serial: stm32: fix tx dma completion, release channel - [armhf] serial: stm32: call stm32_transmit_chars locked - [armhf] serial: stm32: fix FIFO flush in startup and set_termios - [armhf] serial: stm32: add FIFO flush when port is closed - [armhf] serial: stm32: fix tx_empty condition - [x86] usb: typec: tps6598x: Fix return value check in tps6598x_probe() - regmap: set debugfs_name to NULL after it is freed - [arm64,armhf] spi: rockchip: avoid objtool warning - mtd: Handle possible -EPROBE_DEFER from parse_mtd_partitions() - mtd: don't lock when recursively deleting partitions - mtd: maps: fix error return code of physmap_flash_remove() - [arm64] dts: qcom: db845c: fix correct powerdown pin for WSA881x - [armhf] spi: stm32: drop devres version of spi_register_master - [armhf] spi: stm32: Fix use-after-free on unbind - [x86] microcode: Check for offline CPUs before requesting new microcode - devtmpfs: fix placement of complete() call - [x86] usb: gadget: pch_udc: Replace cpu_to_le32() by lower_32_bits() - [x86] usb: gadget: pch_udc: Check if driver is present before calling ->setup() - [x86] usb: gadget: pch_udc: Check for DMA mapping error - [x86] usb: gadget: pch_udc: Initialize device pointer before use - [x86] usb: gadget: pch_udc: Provide a GPIO line used on Intel Minnowboard (v1) - [amd64] crypto: ccp - fix command queuing to TEE ring buffer - [x86] crypto: qat - don't release uninitialized resources - [x86] crypto: qat - ADF_STATUS_PF_RUNNING should be set after adf_dev_init - dt-bindings: serial: stm32: Use 'type: object' instead of false for 'additionalProperties' - mtd: require write permissions for locking and badblock ioctls - [arm64] bus: qcom: Put child node before return - soundwire: bus: Fix device found flag correctly - NFSD: Fix sparse warning in nfs4proc.c - NFSv4.2: fix copy stateid copying for the async copy - crypto: poly1305 - fix poly1305_core_setkey() declaration - [x86] crypto: qat - fix error path in adf_isr_resource_alloc() - [armhf] usb: gadget: aspeed: fix dma map failure - [arm64] drivers: nvmem: Fix voltage settings for QTI qfprom-efuse - driver core: platform: Declare early_platform_cleanup() prototype - [armel,armhf] memory: pl353: fix mask of ECC page_size config register - soundwire: stream: fix memory leak in stream config error path - [arm64] firmware: qcom_scm: Make __qcom_scm_is_call_available() return bool - [arm64] firmware: qcom_scm: Reduce locking section for __get_convention() - [arm64] firmware: qcom_scm: Workaround lack of "is available" call on SC7180 - [arm64,armhf] irqchip/gic-v3: Fix OF_BAD_ADDR error handling - [x86] staging: rtl8192u: Fix potential infinite loop - PM / devfreq: Use more accurate returned new_freq as resume_freq - [armhf] clocksource/drivers/timer-ti-dm: Fix posted mode status check order - [armhf] clocksource/drivers/timer-ti-dm: Add missing set_state_oneshot_stopped - spi: Fix use-after-free with devm_spi_alloc_* - [arm64] soc: qcom: mdt_loader: Validate that p_filesz < p_memsz - [arm64] soc: qcom: mdt_loader: Detect truncated read of segments - PM: runtime: Replace inline function pm_runtime_callbacks_present() - [amd64,arm64] ACPI: CPPC: Replace cppc_attr with kobj_attribute - [x86] crypto: qat - Fix a double free in adf_create_ring - [arm64] cpufreq: armada-37xx: Fix setting TBG parent for load levels - [arm64] clk: mvebu: armada-37xx-periph: remove .set_parent method for CPU PM clock - [arm64] cpufreq: armada-37xx: Fix the AVS value for load L1 - [arm64] clk: mvebu: armada-37xx-periph: Fix switching CPU freq from 250 Mhz to 1 GHz - [arm64] clk: mvebu: armada-37xx-periph: Fix workaround for switching from L1 to L0 - [arm64] cpufreq: armada-37xx: Fix driver cleanup when registration failed - [arm64] cpufreq: armada-37xx: Fix determining base CPU frequency - USB: cdc-acm: fix unprivileged TIOCCSERIAL - USB: cdc-acm: fix TIOCGSERIAL implementation - tty: actually undefine superseded ASYNC flags - tty: fix return value for unsupported ioctls - tty: fix return value for unsupported termiox ioctls - serial: core: return early on unsupported ioctls - node: fix device cleanups in error handling code - crypto: chelsio - Read rxchannel-id from firmware - usbip: vudc: fix missing unlock on error in usbip_sockfd_store() - security: keys: trusted: fix TPM2 authorizations - [x86] platform/x86: pmc_atom: Match all Beckhoff Automation baytrail boards with critclk_systems DMI table - [armhf] dts: aspeed: Rainier: Fix humidity sensor bus address - [x86] Drivers: hv: vmbus: Use after free in __vmbus_open() - [x86] Drivers: hv: vmbus: Increase wait time for VMbus unload - [x86] PM: hibernate: x86: Use crc32 instead of md5 for hibernation e820 integrity check - [arm*] usb: dwc2: Fix host mode hibernation exit with remote wakeup flow. - [arm*] usb: dwc2: Fix hibernation between host and device modes. - ttyprintk: Add TTY hangup callback. - [armhf] serial: omap: don't disable rs485 if rts gpio is missing - [armhf] serial: omap: fix rs485 half-duplex filtering - xen-blkback: fix compatibility bug with single page rings - [armhf] soc: aspeed: fix a ternary sign expansion bug - [armhf] drm/tilcdc: send vblank event when disabling crtc - [armhf] drm/stm: Fix bus_flags handling - drm/amd/display: Fix off by one in hdmi_14_process_transaction() - sched/fair: Fix shift-out-of-bounds in load_balance() - afs: Fix updating of i_mode due to 3rd party change - rcu: Remove spurious instrumentation_end() in rcu_nmi_enter() - media: vivid: fix assignment of dev->fbuf_out_flags - media: saa7134: use sg_dma_len when building pgtable - media: saa7146: use sg_dma_len when building pgtable - [armhf] media: aspeed: fix clock handling logic - drm/probe-helper: Check epoch counter in output_poll_execute() - [arm64] media: venus: core: Fix some resource leaks in the error path of 'venus_probe()' - media: m88ds3103: fix return value check in m88ds3103_probe() - media: m88rs6000t: avoid potential out-of-bounds reads on arrays - [x86] kprobes: Fix to check non boostable prefixes correctly - sata_mv: add IRQ checks - ata: libahci_platform: fix IRQ check - seccomp: Fix CONFIG tests for Seccomp_filters - nvme-tcp: block BH in sk state_change sk callback - nvmet-tcp: fix incorrect locking in state_change sk callback - [armhf] clk: imx: Fix reparenting of UARTs not associated with stdout - nvme: retrigger ANA log update if group descriptor isn't found - media: v4l2-ctrls.c: fix race condition in hdl->requests list - vfio/pci: Move VGA and VF initialization to functions - vfio/pci: Re-order vfio_pci_probe() - [amd64] vfio/mdev: Do not allow a mdev_type to have a NULL parent pointer - drm/amd/display: use GFP_ATOMIC in dcn20_resource_construct - drm/radeon: Fix a missing check bug in radeon_dp_mst_detect() - scsi: pm80xx: Increase timeout for pm80xx mpi_uninit_check() - scsi: pm80xx: Fix potential infinite loop - scsi: ufs: ufshcd-pltfrm: Fix deferred probing - [amd64] scsi: hisi_sas: Fix IRQ checks - [powerpc*] scsi: ibmvfc: Fix invalid state machine BUG_ON() - nvmet-tcp: fix a segmentation fault during io parsing error - nvme-pci: don't simple map sgl when sgls are disabled - [armhf] HSI: core: fix resource leaks in hsi_add_client_from_dt() - [amd64] x86/events/amd/iommu: Fix sysfs type mismatch - [x86] perf/amd/uncore: Fix sysfs type mismatch - io_uring: fix overflows checks in provide buffers - sched/debug: Fix cgroup_path[] serialization - drivers/block/null_blk/main: Fix a double free in null_init. - xsk: Respect device's headroom and tailroom on generic xmit path - HID: plantronics: Workaround for double volume key presses - RDMA/mlx5: Fix mlx5 rates to IB rates map - [x86] KVM: x86/mmu: Retry page faults that hit an invalid memslot - Bluetooth: avoid deadlock between hci_dev->lock and socket lock - bpftool: Fix maybe-uninitialized warnings - iommu: Check dev->iommu in iommu_dev_xxx functions - [amd64] iommu/vt-d: Reject unsupported page request modes - [powerpc*] prom: Mark identical_pvr_fixup as __init - inet: use bigger hash table for IP ID generation - [arm64,armhf] pinctrl: pinctrl-single: remove unused parameter - [arm64,armhf] pinctrl: pinctrl-single: fix pcs_pin_dbg_show() when bits_per_mux is not zero - [mips64el,mipsel] loongson64: fix bug when PAGE_SIZE > 16KB - RDMA/mlx5: Fix drop packet rule in egress table - IB/isert: Fix a use after free in isert_connect_request - gpio: guard gpiochip_irqchip_add_domain() with GPIOLIB_IRQCHIP - ALSA: core: remove redundant spin_lock pair in snd_card_disconnect - net: phy: lan87xx: fix access to wrong register of LAN87xx - udp: never accept GSO_FRAGLIST packets - [powerpc*] pseries: Only register vio drivers if vio bus exists - net/tipc: fix missing destroy_workqueue() on error in tipc_crypto_start() - bug: Remove redundant condition check in report_bug - RDMA/core: Fix corrupted SL on passive side - nfc: pn533: prevent potential memory corruption - [arm64] net: hns3: Limiting the scope of vector_ring_chain variable - [amd64] iommu/vt-d: Don't set then clear private data in prq_event_thread() - iommu: Fix a boundary issue to avoid performance drop - [amd64] iommu/vt-d: Report right snoop capability when using FL for IOVA - [amd64] iommu/vt-d: Report the right page fault address - [amd64] iommu/vt-d: Preset Access/Dirty bits for IOVA over FL - [amd64] iommu/vt-d: Remove WO permissions on second-level paging entries - [amd64] iommu/vt-d: Invalidate PASID cache when root/context entry changed - ALSA: usb-audio: Add error checks for usb_driver_claim_interface() calls - HID: lenovo: Use brightness_set_blocking callback for setting LEDs brightness - HID: lenovo: Fix lenovo_led_set_tp10ubkbd() error handling - HID: lenovo: Check hid_get_drvdata() returns non NULL in lenovo_event() - HID: lenovo: Map mic-mute button to KEY_F20 instead of KEY_MICMUTE - [arm64] KVM: Initialize VCPU mdcr_el2 before loading it - [arm*] ASoC: simple-card: fix possible uninitialized single_cpu local variable - [amd64] IB/hfi1: Use kzalloc() for mmu_rb_handler allocation - [powerpc*] 64s: Fix pte update for kernel memory on radix - [powerpc*] perf: Fix PMU constraint check for EBB events - mac80211: bail out if cipher schemes are invalid - perf vendor events amd: Fix broken L2 Cache Hits from L2 HWPF metric - xfs: fix return of uninitialized value in variable error - rtw88: Fix an error code in rtw_debugfs_set_rsvd_page() - mt7601u: fix always true expression - [powerpc*] KVM: PPC: Book3S HV P9: Restore host CTRL SPR after guest exit - ovl: invalidate readdir cache on changes to dir with origin - RDMA/qedr: Fix error return code in qedr_iw_connect() - [amd64] IB/hfi1: Fix error return code in parse_platform_config() - cxgb4: Fix unintentional sign extension issues - [arm64] net: thunderx: Fix unintentional sign extension issue - RDMA/srpt: Fix error return code in srpt_cm_req_recv() - [arm64,armhf] i2c: imx: fix reference leak when pm_runtime_get_sync fails - [armhf] i2c: omap: fix reference leak when pm_runtime_get_sync fails - [armhf] i2c: stm32f7: fix reference leak when pm_runtime_get_sync fails - [powerpc*] xive: Drop check on irq_data in xive_core_debug_show() - [powerpc*] xive: Fix xmon command "dxi" - net/packet: make packet_fanout.arr size configurable up to 64K - net/packet: remove data races in fanout operations - [amd64] drm/i915/gvt: Fix error code in intel_gvt_init_device() - [amd64] iommu/amd: Put newline after closing bracket in warning - [mips64el,mipsel] pci-legacy: stop using of_pci_range_to_resource - [powerpc*] pseries: extract host bridge from pci_bus prior to bus removal - [powerpc*] smp: Reintroduce cpu_core_mask - [x86] KVM: dump_vmcs should not assume GUEST_IA32_EFER is valid - rtlwifi: 8821ae: upgrade PHY and RF parameters - [arm64,armhf] wlcore: fix overlapping snprintf arguments in debugfs - mwl8k: Fix a double Free in mwl8k_probe_hw - netfilter: nft_payload: fix C-VLAN offload support - netfilter: nftables_offload: VLAN id needs host byteorder in flow dissector - netfilter: nftables_offload: special ethertype handling for VLAN - [x86] vsock/vmci: log once the failed queue pair allocation - gro: fix napi_gro_frags() Fast GRO breakage due to IP alignment check - RDMA/cxgb4: add missing qpid increment - RDMA/i40iw: Fix error unwinding when i40iw_hmc_sd_one fails - ALSA: usb: midi: don't return -ENOMEM when usb_urb_ep_type_check fails - sfc: ef10: fix TX queue lookup in TX event handling - vsock/virtio: free queued packets when closing socket - [armhf] net: davinci_emac: Fix incorrect masking of tx and rx error channel - [amd64] crypto: ccp: Detect and reject "invalid" addresses destined for PSP - nfp: devlink: initialize the devlink port attribute "lanes" - net: stmmac: fix TSO and TBS feature enabling during driver open - RDMA/rxe: Fix a bug in rxe_fill_ip_info() - RDMA/core: Add CM to restrack after successful attachment to a device - [powerpc*] 64: Fix the definition of the fixmap area - ath9k: Fix error check in ath9k_hw_read_revisions() for PCI devices - ath10k: Fix a use after free in ath10k_htc_send_bundle - ath10k: Fix ath10k_wmi_tlv_op_pull_peer_stats_info() unlock without lock - wlcore: Fix buffer overrun by snprintf due to incorrect buffer size - [powerpc*] perf: Fix the threshold event selection for memory events in power10 - net: phy: marvell: fix m88e1011_set_downshift - net: phy: marvell: fix m88e1111_set_downshift - bnxt_en: fix ternary sign extension bug in bnxt_show_temp() - net: geneve: modify IP header check in geneve6_xmit_skb and geneve_xmit_skb - bnxt_en: Fix RX consumer index logic in the error path. - [x86] KVM: VMX: Intercept FS/GS_BASE MSR accesses for 32-bit KVM - [arm64] net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send - bpf: Fix propagation of 32 bit unsigned bounds from 64 bit bounds - net: bridge: mcast: fix broken length + header check for MRDv6 Adv. - net:nfc:digital: Fix a double free in digital_tg_recv_dep_req - perf tools: Change fields type in perf_record_time_conv - perf jit: Let convert_timestamp() to be backwards-compatible - perf session: Add swap operation for event TIME_CONV - mm/sl?b.c: remove ctor argument from kmem_cache_flags - mm: memcontrol: slab: fix obtain a reference to a freeing memcg - mm/sparse: add the missing sparse_buffer_fini() in error branch - mm/memory-failure: unnecessary amount of unmapping - afs: Fix speculative status fetches - bpf: Fix alu32 const subreg bound tracking on bitwise operations (CVE-2021-3490) - bpf, ringbuf: Deny reserve of buffers larger than ringbuf (CVE-2021-3489) - bpf: Prevent writable memory-mapping of read-only ringbuf pages - [arm64] Remove arm64_dma32_phys_limit and its uses - net: Only allow init netns to set default tcp cong to a restricted algo - smp: Fix smp_call_function_single_async prototype - Revert "net/sctp: fix race condition in sctp_destroy_sock" - sctp: delay auto_asconf init until binding the first addr (CVE-2021-23133) https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.38 - [arm64,x86] tpm: fix error return code in tpm2_get_cc_attrs_tbl() - [arm64,x86] tpm, tpm_tis: Extend locality handling to TPM2 in tpm_tis_gen_interrupt() - [arm64,x86] tpm, tpm_tis: Reserve locality in tpm_tis_resume() - [x86] KVM: x86/mmu: Remove the defunct update_pte() paging hook - [x86] KVM/VMX: Invoke NMI non-IST entry instead of IST entry - ACPI: PM: Add ACPI ID of Alder Lake Fan - PM: runtime: Fix unpaired parent child_count for force_resume - [x86] cpufreq: intel_pstate: Use HWP if enabled by platform firmware - kvm: Cap halt polling at kvm->max_halt_poll_ns - ath11k: fix thermal temperature read - fs: dlm: fix debugfs dump - fs: dlm: add errno handling to check callback - fs: dlm: check on minimum msglen size - fs: dlm: flush swork on shutdown - tipc: convert dest node's address to network order - [x86] ASoC: Intel: bytcr_rt5640: Enable jack-detect support on Asus T100TAF - net/mlx5e: Use net_prefetchw instead of prefetchw in MPWQE TX datapath - [arm64] net: stmmac: Set FIFO sizes for ipq806x - Bluetooth: Fix incorrect status handling in LE PHY UPDATE event - i2c: bail out early when RDWR parameters are wrong - ALSA: hdsp: don't disable if not enabled - ALSA: hdspm: don't disable if not enabled - ALSA: rme9652: don't disable if not enabled - ALSA: bebob: enable to deliver MIDI messages for multiple ports - Bluetooth: Set CONF_NOT_COMPLETE as l2cap_chan default - Bluetooth: initialize skb_queue_head at l2cap_chan_create() - net/sched: cls_flower: use ntohs for struct flow_dissector_key_ports - net: bridge: when suppression is enabled exclude RARP packets - Bluetooth: check for zapped sk before connecting - [powerpc] 32: Statically initialise first emergency context - [arm64] net: hns3: remediate a potential overflow risk of bd_num_list - [arm64] net: hns3: add handling for xmit skb with recursive fraglist - ip6_vti: proper dev_{hold|put} in ndo_[un]init methods - [x86] ASoC: Intel: bytcr_rt5640: Add quirk for the Chuwi Hi8 tablet - ice: handle increasing Tx or Rx ring sizes - Bluetooth: btusb: Enable quirk boolean flag for Mediatek Chip. - [x86] ASoC: rt5670: Add a quirk for the Dell Venue 10 Pro 5055 - i2c: Add I2C_AQ_NO_REP_START adapter quirk - [mips64el,mipsel] MIPS: Loongson64: Use _CACHE_UNCACHED instead of _CACHE_UNCACHED_ACCELERATED - [amd64] IB/hfi1: Correct oversized ring allocation - mac80211: clear the beacon's CRC after channel switch - [armhf] pinctrl: samsung: use 'int' for register masks in Exynos - rtw88: 8822c: add LC calibration for RTL8822C - mt76: mt76x0: disable GTK offloading - fuse: invalidate attrs when page writeback completes - virtiofs: fix userns - cuse: prevent clone - iwlwifi: pcie: make cfg vs. trans_cfg more robust - [powerpc*] mm: Add cond_resched() while removing hpte mappings - Revert "iommu/amd: Fix performance counter initialization" - [amd64] iommu/amd: Remove performance counter pre-initialization test - ALSA: hda/realtek: Add quirk for Lenovo Ideapad S740 - [x86] ASoC: Intel: sof_sdw: add quirk for new ADL-P Rvp - ALSA: hda/hdmi: fix race in handling acomp ELD notification at resume - sctp: Fix out-of-bounds warning in sctp_process_asconf_param() - flow_dissector: Fix out-of-bounds warning in __skb_flow_bpf_to_target() - [powerpc*] smp: Set numa node before updating mask - [x86] ASoC: rt286: Generalize support for ALC3263 codec - ethtool: ioctl: Fix out-of-bounds warning in store_link_ksettings_for_user() - net: sched: tapr: prevent cycle_time == 0 in parse_taprio_schedule - [powerpc*] pseries: Stop calling printk in rtas_stop_self() - wl3501_cs: Fix out-of-bounds warnings in wl3501_send_pkt - wl3501_cs: Fix out-of-bounds warnings in wl3501_mgmt_join - [powerpc*] iommu: Annotate nested lock for lockdep - iavf: remove duplicate free resources calls - kbuild: generate Module.symvers only when vmlinux exists - bnxt_en: Add PCI IDs for Hyper-V VF devices. - [ia64] module: fix symbolizer crash on fdescr - watchdog: rename __touch_watchdog() to a better descriptive name - watchdog: explicitly update timestamp when reporting softlockup - watchdog/softlockup: remove logic that tried to prevent repeated reports - watchdog: fix barriers when printing backtraces from all CPUs - [x86] ASoC: rt286: Make RT286_SET_GPIO_* readable and writable - thermal: thermal_of: Fix error return code of thermal_of_populate_bind_params() - f2fs: move ioctl interface definitions to separated file - f2fs: fix compat F2FS_IOC_{MOVE,GARBAGE_COLLECT}_RANGE - f2fs: fix to allow migrating fully valid segment - f2fs: fix panic during f2fs_resize_fs() - f2fs: fix a redundant call to f2fs_balance_fs if an error occurs - PCI: Release OF node in pci_scan_device()'s error path - [armel,armhf] 9064/1: hw_breakpoint: Do not directly check the event's overflow_handler hook - f2fs: fix to align to section for fallocate() on pinned file - f2fs: fix to update last i_size if fallocate partially succeeds - f2fs: fix to avoid touching checkpointed data in get_victim() - f2fs: fix to cover __allocate_new_section() with curseg_lock - f2fs: Fix a hungtask problem in atomic write - f2fs: fix to avoid accessing invalid fio in f2fs_allocate_data_block() - [arm64] rpmsg: qcom_glink_native: fix error return code of qcom_glink_rx_data() - NFS: nfs4_bitmask_adjust() must not change the server global bitmasks - NFS: Fix attribute bitmask in _nfs42_proc_fallocate() - NFSv4.2: Always flush out writes in nfs42_proc_fallocate() - NFS: Deal correctly with attribute generation counter overflow - pNFS/flexfiles: fix incorrect size check in decode_nfs_fh() - NFSv4.2 fix handling of sr_eof in SEEK's reply - SUNRPC: Move fault injection call sites - SUNRPC: Remove trace_xprt_transmit_queued - SUNRPC: Handle major timeout in xprt_adjust_timeout() - [arm64] thermal/drivers/tsens: Fix missing put_device error - NFSv4.x: Don't return NFS4ERR_NOMATCHING_LAYOUT if we're unmounting - nfsd: ensure new clients break delegations - SUNRPC: fix ternary sign expansion bug in tracing - xprtrdma: Avoid Receive Queue wrapping - xprtrdma: Fix cwnd update ordering - xprtrdma: rpcrdma_mr_pop() already does list_del_init() - swiotlb: Fix the type of index - ceph: fix inode leak on getattr error in __fh_to_dentry - scsi: qla2xxx: Prevent PRLI in target mode - scsi: ufs: core: Do not put UFS power into LPM if link is broken - scsi: ufs: core: Cancel rpm_dev_flush_recheck_work during system suspend - scsi: ufs: core: Narrow down fast path in system suspend path - rtc: ds1307: Fix wday settings for rx8130 - [arm64] net: hns3: fix incorrect configuration for igu_egu_hw_err - [arm64] net: hns3: initialize the message content in hclge_get_link_mode() - [arm64] net: hns3: add check for HNS3_NIC_STATE_INITED in hns3_reset_notify_up_enet() - [arm64] net: hns3: fix for vxlan gpe tx checksum bug - [arm64] net: hns3: use netif_tx_disable to stop the transmit queue - [arm64] net: hns3: disable phy loopback setting in hclge_mac_start_phy - sctp: do asoc update earlier in sctp_sf_do_dupcook_a - [riscv64] Fix error code returned by riscv_hartid_to_cpuid() - sunrpc: Fix misplaced barrier in call_decode - ethernet:enic: Fix a use after free bug in enic_hard_start_xmit - sctp: fix a SCTP_MIB_CURRESTAB leak in sctp_sf_do_dupcook_b - netfilter: xt_SECMARK: add new revision to fix structure layout - net: stmmac: Clear receive all(RA) bit when promiscuous mode is off - drm/radeon: Fix off-by-one power_state index heap overwrite - drm/radeon: Avoid power table parsing memory leaks - [arm64] entry: factor irq triage logic into macros - [arm64] entry: always set GIC_PRIO_PSR_I_SET during entry - khugepaged: fix wrong result value for trace_mm_collapse_huge_page_isolate() - mm/hugeltb: handle the error case in hugetlb_fix_reserve_counts() - mm/migrate.c: fix potential indeterminate pte entry in migrate_vma_insert_page() - ksm: fix potential missing rmap_item for stable_node - mm/gup: check every subpage of a compound page during isolation - mm/gup: return an error on migration failure - mm/gup: check for isolation errors - ethtool: fix missing NLM_F_MULTI flag when dumping - net: fix nla_strcmp to handle more then one trailing null character - smc: disallow TCP_ULP in smc_setsockopt() - netfilter: nfnetlink_osf: Fix a missing skb_header_pointer() NULL check - netfilter: nftables: Fix a memleak from userdata error path in new objects - sched: Fix out-of-bound access in uclamp - sched/fair: Fix unfairness caused by missing load decay - fs/proc/generic.c: fix incorrect pde_is_permanent check - kernel: kexec_file: fix error return code of kexec_calculate_store_digests() - kernel/resource: make walk_system_ram_res() find all busy IORESOURCE_SYSTEM_RAM resources - kernel/resource: make walk_mem_res() find all busy IORESOURCE_MEM resources - netfilter: nftables: avoid overflows in nft_hash_buckets() - i40e: fix broken XDP support - i40e: Fix use-after-free in i40e_client_subtask() - i40e: fix the restart auto-negotiation after FEC modified - i40e: Fix PHY type identifiers for 2.5G and 5G adapters - f2fs: avoid unneeded data copy in f2fs_ioc_move_range() - [powerpc*] 64s: Fix crashes when toggling stf barrier - [powerpc*] 64s: Fix crashes when toggling entry flush barrier - hfsplus: prevent corruption in shrinking truncate - squashfs: fix divide error in calculate_skip() - userfaultfd: release page in error path to avoid BUG_ON - mm/hugetlb: fix F_SEAL_FUTURE_WRITE - blk-iocost: fix weight updates of inner active iocgs - [arm64] mte: initialize RGSR_EL1.SEED in __cpu_setup - [arm64] Fix race condition on PG_dcache_clean in __sync_icache_dcache() - btrfs: fix race leading to unpersisted data and metadata on fsync - drm/radeon/dpm: Disable sclk switching on Oland when two 4K 60Hz monitors are connected - [x86] drm/i915: Avoid div-by-zero on gen2 - kvm: exit halt polling on need_resched() as well - [x86] KVM: LAPIC: Accurately guarantee busy wait for timer to expire when using hv_timer - [arm64] drm/msm/dp: initialize audio_comp when audio starts - [x86] KVM: x86: Cancel pvclock_gtod_work on module removal - [x86] KVM: x86: Prevent deadlock against tk_core.seq - dax: Add an enum for specifying dax wakup mode - dax: Add a wakeup mode parameter to put_unlocked_entry() - dax: Wake up all waiters after invalidating dax entry - [amd64] xen/unpopulated-alloc: consolidate pgmap manipulation - [amd64] xen/unpopulated-alloc: fix error return code in fill_list() - [arm64,armhf] usb: dwc3: gadget: Free gadget structure only after freeing endpoints - iio: light: gp2ap002: Fix rumtime PM imbalance on error - iio: proximity: pulsedlight: Fix rumtime PM imbalance on error - [armhf] hwmon: (occ) Fix poll rate limiting - ACPI: scan: Fix a memory leak in an error handling path - kyber: fix out of bounds access when preempted - nvmet: add lba to sect conversion helpers - nvmet: fix inline bio check for bdev-ns - nvmet-rdma: Fix NULL deref when SEND is completed with error - f2fs: compress: fix to free compress page correctly - f2fs: compress: fix race condition of overwrite vs truncate - f2fs: compress: fix to assign cc.cluster_idx correctly - nbd: Fix NULL pointer in flush_workqueue - blk-mq: plug request for shared sbitmap - blk-mq: Swap two calls in blk_mq_exit_queue() - [armhf] usb: dwc3: omap: improve extcon initialization - [arm64] usb: dwc3: pci: Enable usb2-gadget-lpm-disable for Intel Merrifield - usb: xhci: Increase timeout for HC halt - [arm*] usb: dwc2: Fix gadget DMA unmap direction - usb: core: hub: fix race condition about TRSMRCY of resume - [arm64,armhf] usb: dwc3: gadget: Enable suspend events - [arm64,armhf] usb: dwc3: gadget: Return success always for kick transfer in ep queue - [x86] usb: typec: ucsi: Retrieve all the PDOs instead of just the first 4 - [x86] usb: typec: ucsi: Put fwnode in any case during ->probe() - xhci-pci: Allow host runtime PM as default for Intel Alder Lake xHCI - xhci: Do not use GFP_KERNEL in (potentially) atomic context - xhci: Add reset resume quirk for AMD xhci controller. - iio: gyro: mpu3050: Fix reported temperature value - iio: tsl2583: Fix division by a zero lux_val - cdc-wdm: untangle a circular dependency between callback and softint - xen/gntdev: fix gntdev_mmap() error exit path - [x86] KVM: Emulate RDPID only if RDTSCP is supported - [x86] KVM: Move RDPID emulation intercept to its own enum - [x86] KVM: nVMX: Always make an attempt to map eVMCS after migration - [x86] KVM: VMX: Do not advertise RDPID if ENABLE_RDTSCP control is unsupported - [x86] KVM: VMX: Disable preemption when probing user return MSRs - Revert "iommu/vt-d: Remove WO permissions on second-level paging entries" - Revert "iommu/vt-d: Preset Access/Dirty bits for IOVA over FL" - iommu/vt-d: Preset Access/Dirty bits for IOVA over FL - iommu/vt-d: Remove WO permissions on second-level paging entries - mm: fix struct page layout on 32-bit systems - [mips*] Reinstate platform `__div64_32' handler - [mips*] Avoid DIVU in `__div64_32' is result would be zero - [mips*] Avoid handcoded DIVU in `__div64_32' altogether - [armhf] clocksource/drivers/timer-ti-dm: Prepare to handle dra7 timer wrap issue - [armhf] clocksource/drivers/timer-ti-dm: Handle dra7 timer wrap errata i940 - [armel,armhf] 9011/1: centralize phys-to-virt conversion of DT/ATAGS address - [armel,armhf] 9012/1: move device tree mapping out of linear region - [armel,armhf] 9020/1: mm: use correct section size macro to describe the FDT virtual address - [armel,armhf] 9027/1: head.S: explicitly map DT even if it lives in the first physical section - [x86] usb: typec: tcpm: Fix error while calculating PPS out values - kobject_uevent: remove warning in init_uevent_argv() - [x86] drm/i915/gt: Fix a double free in gen8_preallocate_top_level_pdp - [x86] drm/i915: Read C0DRB3/C1DRB3 as 16 bits again - [x86] drm/i915/overlay: Fix active retire callback alignment - [x86] drm/i915: Fix crash in auto_retire - debugfs: Make debugfs_allow RO after init - ext4: fix debug format string warning - nvme: do not try to reconfigure APST when the controller is not live . [ Vincent Blut ] * [x86] sound/soc/intel: Enable SND_SOC_INTEL_CATPT as module (Closes: #986822) * [x86] sound/soc/intel/boards: Enable SND_SOC_INTEL_BDW_RT5650_MACH as module * drivers/input/rmi4: Enable RMI4_F3A (Closes: #986848) * [armhf] drivers/gpio: Enable GPIO_MXC as module (Closes: #987019) * [x86] drivers/misc/mei: Enable INTEL_MEI_TXE, INTEL_MEI_HDCP as modules (Closes: #987281) . [ Uwe Kleine-König ] * [arm64] Enable more options for NXP's i.MX8 (Closes: #985862) . [ Salvatore Bonaccorso ] * vfs: move cap_convert_nscap() call into vfs_setxattr() (CVE-2021-3493) * Refresh "Makefile: Do not check for libelf when building OOT module" * Bump ABI to 7 * Refresh "tools/include/uapi: Fix <asm/errno.h>" * [rt] Update to 5.10.35-rt39 * [rt] Refresh "powerpc/mm/highmem: Switch to generic kmap atomic" * [arm64] udeb: Include mdio module for RPi4 ethernet in installer (Closes: #985956) . [ Vagrant Cascadian ] * [arm64] Disable USB type-C DisplayPort in pinebook pro device-tree. * [arm64] Enable TYPEC_FUSB302, SND_SOC_ES8316, TYPEC and TYPEC_TCPM as modules. (Closes: #987638) . [ Michal Simek ] * [arm64] Enable clock driver for Xilinx ZynqMP SoC . [ Valentin Vidic ] * [s390x] udeb: Include standard scsi-modules containing the virtio_blk module (Closes: #988005) . [ Ben Hutchings ] * kbuild: Abort build if SUBDIRS used (Closes: #987575)
-
Lorenzo "Palinuro" Faletra authored
-
- 12 Apr, 2021 2 commits
-
-
Lorenzo "Palinuro" Faletra authored
linux (5.10.28-6parrot1) rolling; urgency=medium . * Import new Debian release. . linux (5.10.28-1) unstable; urgency=medium . * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.27 - mm/memcg: rename mem_cgroup_split_huge_fixup to split_page_memcg and add nr_pages argument - mm/memcg: set memcg when splitting page - mt76: fix tx skb error handling in mt76_dma_tx_queue_skb - net: stmmac: fix dma physical address of descriptor when display ring - [arm64,armhf] net: fec: ptp: avoid register access when ipg clock is disabled - [powerpc*] 4xx: Fix build errors from mfdcr() - atm: eni: dont release is never initialized - atm: lanai: dont run lanai_dev_close if not open - Revert "r8152: adjust the settings about MAC clock speed down for RTL8153" - [x86] ALSA: hda: ignore invalid NHLT table - ixgbe: Fix memleak in ixgbe_configure_clsu32 - blk-cgroup: Fix the recursive blkg rwstat - net: tehuti: fix error return code in bdx_probe() - net: intel: iavf: fix error return code of iavf_init_get_resources() - sun/niu: fix wrong RXMAC_BC_FRM_CNT_COUNT count - gianfar: fix jumbo packets+napi+rx overrun crash (CVE-2021-29264) - cifs: ask for more credit on async read/write code paths - gfs2: fix use-after-free in trans_drain - [arm64,armhf] cpufreq: blacklist Arm Vexpress platforms in cpufreq-dt-platdev - gpiolib: acpi: Add missing IRQF_ONESHOT - nfs: fix PNFS_FLEXFILE_LAYOUT Kconfig default - NFS: Correct size calculation for create reply length - [arm64] net: hisilicon: hns: fix error return code of hns_nic_clear_all_rx_fetch() - [arm64] net: enetc: set MAC RX FIFO to recommended value - atm: uPD98402: fix incorrect allocation - atm: idt77252: fix null-ptr-dereference - cifs: change noisy error message to FYI - kbuild: add image_name to no-sync-config-targets - umem: fix error return code in mm_pci_probe() - [sparc64] Fix opcode filtering in handling of no fault loads - u64_stats,lockdep: Fix u64_stats_init() vs lockdep - block: Fix REQ_OP_ZONE_RESET_ALL handling - drm/amdgpu: fb BO should be ttm_bo_type_device - drm/radeon: fix AGP dependency - nvme: simplify error logic in nvme_validate_ns() - nvme: add NVME_REQ_CANCELLED flag in nvme_cancel_request() - nvme-fc: set NVME_REQ_CANCELLED in nvme_fc_terminate_exchange() - nvme-fc: return NVME_SC_HOST_ABORTED_CMD when a command has been aborted - nvme-core: check ctrl css before setting up zns - nvme-rdma: Fix a use after free in nvmet_rdma_write_data_done - nvme-pci: add the DISABLE_WRITE_ZEROES quirk for a Samsung PM1725a - nfs: we don't support removing system.nfs4_acl - block: Suppress uevent for hidden device when removed - mm/fork: clear PASID for new mm - [ia64] fix ia64_syscall_get_set_arguments() for break-based syscalls - [ia64] fix ptrace(PTRACE_SYSCALL_INFO_EXIT) sign - static_call: Pull some static_call declarations to the type headers - [x86] static_call: Allow module use without exposing static_call_key - [x86] static_call: Fix the module key fixup - [x86] static_call: Fix static_call_set_init() - [x86] KVM: Protect userspace MSR filter with SRCU, and set atomically-ish - btrfs: fix sleep while in non-sleep context during qgroup removal - selinux: don't log MAC_POLICY_LOAD record on failed policy load - selinux: fix variable scope issue in live sidtab conversion - [arm64] netsec: restore phy power state after controller reset - [x86] platform/x86: intel-vbtn: Stop reporting SW_DOCK events - psample: Fix user API breakage - z3fold: prevent reclaim/free race for headless pages - squashfs: fix inode lookup sanity checks - squashfs: fix xattr id and id lookup sanity checks - hugetlb_cgroup: fix imbalanced css_get and css_put pair for shared mappings - [x86] ACPI: video: Add missing callback back for Sony VPCEH3U1E - ACPICA: Always create namespace nodes using acpi_ns_create_node() - [arm64] stacktrace: don't trace arch_stack_walk() - integrity: double check iint_cache was initialized - [armhf] drm/etnaviv: Use FOLL_FORCE for userptr - drm/amdgpu: Add additional Sienna Cichlid PCI ID - [x86] drm/i915: Fix the GT fence revocation runtime PM logic - dm verity: fix DM_VERITY_OPTS_MAX value - dm ioctl: fix out of bounds array access when no devices - [armhf] bus: omap_l3_noc: mark l3 irqs as IRQF_NO_THREAD - [armhf] OMAP2+: Fix smartreflex init regression after dropping legacy data - [armhf] soc: ti: omap-prm: Fix occasional abort on reset deassert for dra7 iva - veth: Store queue_mapping independently of XDP prog presence - bpf: Change inode_storage's lookup_elem return value from NULL to -EBADF - net/mlx5e: RX, Mind the MPWQE gaps when calculating offsets - net/mlx5e: When changing XDP program without reset, take refs for XSK RQs - net/mlx5e: Don't match on Geneve options in case option masks are all zero - ipv6: fix suspecious RCU usage warning - drop_monitor: Perform cleanup upon probe registration failure - macvlan: macvlan_count_rx() needs to be aware of preemption - net: sched: validate stab values - [armhf] net: dsa: bcm_sf2: Qualify phydev->dev_flags based on port - igc: reinit_locked() should be called with rtnl_lock - igc: Fix Pause Frame Advertising - igc: Fix Supported Pause Frame Link Setting - igc: Fix igc_ptp_rx_pktstamp() - e1000e: add rtnl_lock() to e1000_reset_task - e1000e: Fix error handling in e1000_set_d0_lplu_state_82571 - net/qlcnic: Fix a use after free in qlcnic_83xx_get_minidump_template - net: phy: broadcom: Add power down exit reset state delay - [armhf] ftgmac100: Restart MAC HW once - net: qrtr: fix a kernel-infoleak in qrtr_recvmsg() (CVE-2021-29647) - flow_dissector: fix byteorder of dissected ICMP ID - netfilter: ctnetlink: fix dump of the expect mask attribute - net: phylink: Fix phylink_err() function name error in phylink_major_config - tipc: better validate user input in tipc_nl_retrieve_key() (CVE-2021-29646) - tcp: relookup sock for RST+ACK packets handled by obsolete req sock - can: isotp: isotp_setsockopt(): only allow to set low level TX flags for CAN-FD - can: isotp: TX-path: ensure that CAN frame flags are initialized - can: peak_usb: add forgotten supported devices - [arm64,armhf] can: flexcan: flexcan_chip_freeze(): fix chip freeze for missing bitrate - can: c_can_pci: c_can_pci_remove(): fix use-after-free - [armhf] can: c_can: move runtime PM enable/disable to c_can_platform - mac80211: fix rate mask reset - mac80211: Allow HE operation to be longer than expected. - nfp: flower: fix unsupported pre_tunnel flows - nfp: flower: add ipv6 bit to pre_tunnel control message - nfp: flower: fix pre_tun mask id allocation - ftrace: Fix modify_ftrace_direct. - [arm64] drm/msm/dsi: fix check-before-set in the 7nm dsi_pll code - net/sched: cls_flower: fix only mask bit check in the validate_ct_state - netfilter: nftables: report EOPNOTSUPP on unsupported flowtable flags - netfilter: nftables: allow to update flowtable flags - netfilter: flowtable: Make sure GC works periodically in idle system - [armhf] dts: imx6ull: fix ubi filesystem mount failed - ipv6: weaken the v4mapped source check - net: check all name nodes in __dev_alloc_name - net: cdc-phonet: fix data-interface release on probe failure - igb: check timestamp validity - r8152: limit the RX buffer size of RTL8153A for USB 2.0 - [arm64,armhf] net: stmmac: dwmac-sun8i: Provide TX and RX fifo sizes - selinux: vsock: Set SID for socket returned by accept() - bpf: Fix umd memory leak in copy_process() (CVE-2021-29649) - can: isotp: tx-path: zero initialize outgoing CAN frames - [arm64] drm/msm: fix shutdown hook in case GPU components failed to bind - [arm64] drm/msm: Fix suspend/resume on i.MX5 - [arm64] kdump: update ppos when reading elfcorehdr - PM: runtime: Defer suspending suppliers - net/mlx5: Add back multicast stats for uplink representor - net/mlx5e: Allow to match on MPLS parameters only for MPLS over UDP - net/mlx5e: Offload tuple rewrite for non-CT flows - net/mlx5e: Fix error path for ethtool set-priv-flag - PM: EM: postpone creating the debugfs dir till fs_initcall - net: bridge: don't notify switchdev for local FDB addresses - [amd64] xen/x86: make XEN_BALLOON_MEMORY_HOTPLUG_LIMIT depend on MEMORY_HOTPLUG - RDMA/cxgb4: Fix adapter LE hash errors while destroying ipv6 listening server - bpf: Don't do bpf_cgroup_storage_set() for kuprobe/tp programs - net: Consolidate common blackhole dst ops - net, bpf: Fix ip6ip6 crash with collect_md populated skbs - igb: avoid premature Rx buffer reuse - net: phy: introduce phydev->port - net: phy: broadcom: Avoid forward for bcm54xx_config_clock_delay() - net: phy: broadcom: Set proper 1000BaseX/SGMII interface mode for BCM54616S - net: phy: broadcom: Fix RGMII delays for BCM50160 and BCM50610M - Revert "netfilter: x_tables: Switch synchronization to RCU" - netfilter: x_tables: Use correct memory barriers. (CVE-2021-29650) - dm table: Fix zoned model check and zone sectors check - mm/mmu_notifiers: ensure range_end() is paired with range_start() - Revert "netfilter: x_tables: Update remaining dereference to RCU" - ACPI: scan: Rearrange memory allocation in acpi_device_add() - ACPI: scan: Use unique number for instance_no - io_uring: fix provide_buffers sign extension - block: recalculate segment count for multi-segment discards correctly - scsi: Revert "qla2xxx: Make sure that aborted commands are freed" - scsi: qedi: Fix error return code of qedi_alloc_global_queues() - scsi: mpt3sas: Fix error return code of mpt3sas_base_attach() - smb3: fix cached file size problems in duplicate extents (reflink) - cifs: Adjust key sizes and key generation routines for AES256 encryption - locking/mutex: Fix non debug version of mutex_lock_io_nested() - mm/memcg: fix 5.10 backport of splitting page memcg - fs/cachefiles: Remove wait_bit_key layout dependency - can: dev: Move device back to init netns on owning netns delete - r8169: fix DMA being used after buffer free if WoL is enabled - [armhf] net: dsa: b53: VLAN filtering is global to all users - mac80211: fix double free in ibss_leave - ext4: add reclaim checks to xattr code - fs/ext4: fix integer overflow in s_log_groups_per_flex - [amd64] Revert "xen: fix p2m size in dom0 for disabled memory hotplug case" - Revert "net: bonding: fix error return code of bond_neigh_init()" - nvme: fix the nsid value to print in nvme_validate_or_alloc_ns - can: peak_usb: Revert "can: peak_usb: add forgotten supported devices" - xen-blkback: don't leak persistent grants from xen_blkbk_map() (CVE-2021-28688) https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.28 - [arm64] mm: correct the inside linear map range during hotplug check - bpf: Fix fexit trampoline. - virtiofs: Fail dax mount if device does not support it - ext4: shrink race window in ext4_should_retry_alloc() - ext4: fix bh ref count on error paths - rpc: fix NULL dereference on kmalloc failure - iomap: Fix negative assignment to unsigned sis->pages in iomap_swapfile_activate - [x86] ASoC: rt1015: fix i2c communication error - ASoC: rt5640: Fix dac- and adc- vol-tlv values being off by a factor of 10 - [x86] ASoC: rt5651: Fix dac- and adc- vol-tlv values being off by a factor of 10 - [armhf] ASoC: sgtl5000: set DAP_AVC_CTRL register to correct default value on probe - [x86] ASoC: es8316: Simplify adc_pga_gain_tlv table - ASoC: soc-core: Prevent warning if no DMI table is present - NFSD: fix error handling in NFSv4.0 callbacks - kernel: freezer should treat PF_IO_WORKER like PF_KTHREAD for freezing - vhost: Fix vhost_vq_reset() - io_uring: fix ->flags races by linked timeouts - scsi: st: Fix a use after free in st_open() - scsi: qla2xxx: Fix broken #endif placement - [x86] staging: comedi: cb_pcidas: fix request_irq() warn - [x86] staging: comedi: cb_pcidas64: fix request_irq() warn - ASoC: rt711: add snd_soc_component remove callback - thermal/core: Add NULL pointer check before using cooling device stats - locking/ww_mutex: Simplify use_ww_ctx & ww_ctx handling - locking/ww_mutex: Fix acquire/release imbalance in ww_acquire_init()/ww_acquire_fini() - nvmet-tcp: fix kmap leak when data digest in use - io_uring: imply MSG_NOSIGNAL for send[msg]()/recv[msg]() calls - [x86] static_call: Align static_call_is_init() patching condition - ext4: do not iput inode under running transaction in ext4_rename() - io_uring: call req_set_fail_links() on short send[msg]()/recv[msg]() with MSG_WAITALL - [arm64,armhf] net: mvpp2: fix interrupt mask/unmask skip condition - flow_dissector: fix TTL and TOS dissection on IPv4 fragments - net: introduce CAN specific pointer in the struct net_device - brcmfmac: clear EAP/association status bits on linkdown events - ath11k: add ieee80211_unregister_hw to avoid kernel crash caused by NULL pointer - rtw88: coex: 8821c: correct antenna switch function - iwlwifi: pcie: don't disable interrupts for reg_lock - ath10k: hold RCU lock when calling ieee80211_find_sta_by_ifaddr() - [amd64,arm64] net: ethernet: aquantia: Handle error cleanup of start on open - appletalk: Fix skb allocation size in loopback case - net: wan/lmc: unregister device when no matching device is found - net: 9p: advance iov on empty read - bpf: Remove MTU check in __bpf_skb_max_len - ACPI: tables: x86: Reserve memory occupied by ACPI tables - ACPI: processor: Fix CPU0 wakeup in acpi_idle_play_dead() - ALSA: usb-audio: Apply sample rate quirk to Logitech Connect - ALSA: hda: Re-add dropped snd_poewr_change_state() calls - ALSA: hda: Add missing sanity checks in PM prepare/complete callbacks - ALSA: hda/realtek: fix a determine_headset_type issue for a Dell AIO - ALSA: hda/realtek: call alc_update_headset_mode() in hp_automute_hook - ALSA: hda/realtek: fix mute/micmute LEDs for HP 640 G8 - [x86] KVM: SVM: load control fields from VMCB12 before checking them (CVE-2021-29657) - [x86] KVM: SVM: ensure that EFER.SVME is set when running nested guest or on nested vmexit - PM: runtime: Fix race getting/putting suppliers at probe - PM: runtime: Fix ordering in pm_runtime_get_suppliers() - tracing: Fix stack trace event size - [s390x] vdso: copy tod_steering_delta value to vdso_data page - [s390x] vdso: fix tod_steering_delta type - mm: fix race by making init_zero_pfn() early_initcall - drm/amdgpu: fix offset calculation in amdgpu_vm_bo_clear_mappings() - drm/amdgpu: check alignment on CPU page for bo map - reiserfs: update reiserfs_xattrs_initialized() condition - [armhf] drm/imx: fix memory leak when fails to init - [arm64,armhf] drm/tegra: dc: Restore coupling of display controllers - [arm64,armhf] drm/tegra: sor: Grab runtime PM reference across reset - [arm64,armhf] pinctrl: rockchip: fix restore error in resume - extcon: Add stubs for extcon_register_notifier_all() functions - extcon: Fix error handling in extcon_dev_register - firmware: stratix10-svc: reset COMMAND_RECONFIG_FLAG_PARTIAL to 0 - [arm64] usb: dwc3: pci: Enable dis_uX_susphy_quirk for Intel Merrifield - [x86] video: hyperv_fb: Fix a double free in hvfb_probe - firewire: nosy: Fix a use-after-free bug in nosy_ioctl() (CVE-2021-3483) - usbip: vhci_hcd fix shift out-of-bounds in vhci_hub_control() - USB: quirks: ignore remote wake-up on Fibocom L850-GL LTE modem - [arm64,armhf] usb: musb: Fix suspend with devices connected for a64 - cdc-acm: fix BREAK rx code path adding necessary calls - USB: cdc-acm: untangle a circular dependency between callback and softint - USB: cdc-acm: downgrade message to debug - USB: cdc-acm: fix double free on probe failure - USB: cdc-acm: fix use-after-free after probe failure - [i386] usb: gadget: udc: amd5536udc_pci fix null-ptr-dereference - [arm*] usb: dwc2: Fix HPRT0.PrtSusp bit setting for HiKey 960 board. - [arm*] usb: dwc2: Prevent core suspend when port connection flag is 0 - [arm64] usb: dwc3: qcom: skip interconnect init for ACPI probe - [arm64,armhf] usb: dwc3: gadget: Clear DEP flags after stop transfers in ep disable - soc: qcom-geni-se: Cleanup the code to remove proxy votes - [x86] staging: rtl8192e: Fix incorrect source in memcpy() - [x86] staging: rtl8192e: Change state information from u16 to u8 - driver core: clear deferred probe reason on probe retry - drivers: video: fbcon: fix NULL dereference in fbcon_cursor() - [riscv64] evaluate put_user() arg before enabling user access - Revert "kernel: freezer should treat PF_IO_WORKER like PF_KTHREAD for freezing" - [amd64] bpf: Use NOP_ATOMIC5 instead of emit_nops(&prog, 5) for BPF_TRAMP_F_CALL_ORIG . [ Salvatore Bonaccorso ] * [rt] Refresh "u64_stats: Disable preemption on 32bit-UP/SMP with RT during updates" * Bump ABI to 6 * [rt] Refresh "tracing: Merge irqflags + preempt counter." * bpf, x86: Validate computation of branch displacements for x86-64 (CVE-2021-29154) * bpf, x86: Validate computation of branch displacements for x86-32 (CVE-2021-29154) . linux (5.10.26-1) unstable; urgency=medium . * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.25 https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.26 - ALSA: dice: fix null pointer dereference when node is disconnected - ALSA: hda/realtek: apply pin quirk for XiaomiNotebook Pro - ALSA: hda: generic: Fix the micmute led init state - ALSA: hda/realtek: Apply headset-mic quirks for Xiaomi Redmibook Air - ALSA: hda/realtek: fix mute/micmute LEDs for HP 840 G8 - ALSA: hda/realtek: fix mute/micmute LEDs for HP 440 G8 - ALSA: hda/realtek: fix mute/micmute LEDs for HP 850 G8 - Revert "PM: runtime: Update device status before letting suppliers suspend" - [s390x] vtime: fix increased steal time accounting - [s390x] pci: refactor zpci_create_device() - [s390x] pci: remove superfluous zdev->zbus check - [s390x] pci: fix leak of PCI device structure - zonefs: Fix O_APPEND async write handling - zonefs: prevent use of seq files as swap file - zonefs: fix to update .i_wr_refcnt correctly in zonefs_open_zone() - btrfs: fix race when cloning extent buffer during rewind of an old root (CVE-2021-28964) - btrfs: fix slab cache flags for free space tree bitmap - vhost-vdpa: fix use-after-free of v->config_ctx (CVE-2021-29266) - [armhf] ASoC: fsl_ssi: Fix TDM slot setup for I2S mode - [x86] ASoC: Intel: bytcr_rt5640: Fix HP Pavilion x2 10-p0XX OVCD current threshold - [x86] ASoC: SOF: Intel: unregister DMIC device on probe error - [x86] ASoC: SOF: intel: fix wrong poll bits in dsp power down - ASoC: qcom: sdm845: Fix array out of bounds access (CVE-2021-28952) - ASoC: qcom: sdm845: Fix array out of range on rx slim channels - [arm64] ASoC: qcom: lpass-cpu: Fix lpass dai ids parse - [arm*] ASoC: simple-card-utils: Do not handle device clock - afs: Fix accessing YFS xattrs on a non-YFS server - afs: Stop listxattr() from listing "afs.*" attributes - ALSA: usb-audio: Fix unintentional sign extension issue - nvme: fix Write Zeroes limitations - nvme-tcp: fix misuse of __smp_processor_id with preemption enabled - nvme-tcp: fix possible hang when failing to set io queues - nvme-tcp: fix a NULL deref when receiving a 0-length r2t PDU - nvmet: don't check iosqes,iocqes for discovery controllers - nfsd: Don't keep looking up unhashed files in the nfsd file cache - nfsd: don't abort copies early - NFSD: Repair misuse of sv_lock in 5.10.16-rt30. - NFSD: fix dest to src mount in inter-server COPY - svcrdma: disable timeouts on rdma backchannel - sunrpc: fix refcount leak for rpc auth modules - [x86] i915/perf: Start hrtimer only if sampling the OA buffer - pstore: Fix warning in pstore_kill_sb() - io_uring: ensure that SQPOLL thread is started for exit (CVE-2021-28951) - net/qrtr: fix __netdev_alloc_skb call - cifs: fix allocation size on newly created files - scsi: lpfc: Fix some error codes in debugfs - scsi: myrs: Fix a double free in myrs_cleanup() - [riscv64] correct enum sbi_ext_rfence_fid - gpiolib: Assign fwnode to parent's if no primary one provided - nvme-rdma: fix possible hang when failing to set io queues - [armhf] tty: serial: stm32-usart: Remove set but unused 'cookie' variables - [armhf] serial: stm32: fix DMA initialization error handling - bpf: Declare __bpf_free_used_maps() unconditionally - module: merge repetitive strings in module_sig_check() - module: avoid *goto*s in module_sig_check() - module: harden ELF info handling - scsi: pm80xx: Make mpi_build_cmd locking consistent - scsi: pm80xx: Make running_req atomic - scsi: pm80xx: Fix pm8001_mpi_get_nvmd_resp() race condition - scsi: pm8001: Neaten debug logging macros and uses - scsi: libsas: Remove notifier indirection - scsi: libsas: Introduce a _gfp() variant of event notifiers - scsi: mvsas: Pass gfp_t flags to libsas event notifiers - [x86] scsi: isci: Pass gfp_t flags in isci_port_link_down() - [x86] scsi: isci: Pass gfp_t flags in isci_port_link_up() - [x86] scsi: isci: Pass gfp_t flags in isci_port_bc_change_received() - RDMA/mlx5: Allow creating all QPs even when non RDMA profile is used - [powerpc*] sstep: Fix load-store and update emulation - [powerpc*] sstep: Fix darn emulation - i40e: Fix endianness conversions - net: phy: micrel: set soft_reset callback to genphy_soft_reset for KSZ8081 - drm/amd/display: turn DPMS off on connector unplug - iwlwifi: Add a new card for MA family - io_uring: fix inconsistent lock state - [arm64,armhf] media: cedrus: h264: Support profile controls - [s390x] qeth: schedule TX NAPI on QAOB completion - io_uring: don't attempt IO reissue from the ring exit path - io_uring: clear IOCB_WAITQ for non -EIOCBQUEUED return - net: bonding: fix error return code of bond_neigh_init() - gfs2: Add common helper for holding and releasing the freeze glock - gfs2: move freeze glock outside the make_fs_rw and _ro functions - gfs2: bypass signal_our_withdraw if no journal - [powerpc*] Force inlining of cpu_has_feature() to avoid build failure - usb-storage: Add quirk to defeat Kindle's automatic unload - usbip: Fix incorrect double assignment to udc->ud.tcp_rx - usb: gadget: configfs: Fix KASAN use-after-free - [x86] usb: typec: Remove vdo[3] part of tps6598x_rx_identity_reg struct - [x86] usb: typec: tcpm: Invoke power_supply_changed for tcpm-source-psy- - [arm64,armhf] usb: dwc3: gadget: Allow runtime suspend if UDC unbinded - [arm64,armhf] usb: dwc3: gadget: Prevent EP queuing while stopping transfers - [x86] thunderbolt: Initialize HopID IDAs in tb_switch_alloc() - [x86] thunderbolt: Increase runtime PM reference count on DP tunnel discovery - iio: gyro: mpu3050: Fix error handling in mpu3050_trigger_handler - iio: adc: ad7949: fix wrong ADC result due to incorrect bit mask - iio: hid-sensor-prox: Fix scale not correct issue - iio: hid-sensor-temperature: Fix issues of timestamp channel - [powerpc*] PCI: rpadlpar: Fix potential drc_name corruption in store functions (CVE-2021-28972) - [x86] perf/x86/intel: Fix a crash caused by zero PEBS status (CVE-2021-28971) - [x86] perf/x86/intel: Fix unchecked MSR access error caused by VLBR_EVENT - [x86] ioapic: Ignore IRQ2 again - kernel, fs: Introduce and use set_restart_fn() and arch_set_restart_data() - [x86] Move TS_COMPAT back to asm/thread_info.h - [x86] Introduce TS_COMPAT_RESTART to fix get_nr_restart_syscall() - efivars: respect EFI_UNSUPPORTED return from firmware - ext4: fix error handling in ext4_end_enable_verity() - ext4: find old entry again if failed to rename whiteout - ext4: stop inode update before return - ext4: do not try to set xattr into ea_inode if value is empty - ext4: fix potential error in ext4_do_update_inode - ext4: fix rename whiteout with fast commit - static_call: Fix static_call_update() sanity check - efi: use 32-bit alignment for efi_guid_t literals - firmware/efi: Fix a use after bug in efi_mem_reserve_persistent - genirq: Disable interrupts for force threaded handlers - [x86] apic/of: Fix CPU devicetree-node lookups - cifs: Fix preauth hash corruption . [ Salvatore Bonaccorso ] * linux-image: Add Breaks: relation with old fwupdate versions (Closes: #985801) * [rt] Update to 5.10.25-rt35 * Refresh "Include package version along with kernel release in stack traces" * Refresh "firmware: Remove redundant log messages from drivers" * Refresh "MODSIGN: checking the blacklisted hash before loading a kernel module" * libsas: Avoid ABI change for removal of notifier indirection . [ Uwe Kleine-König ] * [arm64] Enable various configurations for i.MX8 (Closes: #985862)
-
Lorenzo "Palinuro" Faletra authored
-
- 20 Mar, 2021 2 commits
-
-
Lorenzo Palinuro Faletra authored
-