Update to 5.7.16

Add CVE id reference for CVE-2019-19770

Cleanup debian/changelog file

1 files changed, 273 insertions, 1 deletions

diff --git a/debian/changelog b/debian/changelog
index 1ca4b7b6c491..28885f9ffeee 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,4 +1,4 @@
-linux (5.7.15-1) UNRELEASED; urgency=medium
+linux (5.7.16-1) UNRELEASED; urgency=medium
 
   * New upstream stable update:
     https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.7.11
@@ -326,6 +326,278 @@ linux (5.7.15-1) UNRELEASED; urgency=medium
     - Revert "vxlan: fix tos value before xmit"
     - tcp: apply a floor of 1 for RTT samples from TCP timestamps
     - [arm64] kaslr: Use standard early random function
+    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.7.16
+    - tracepoint: Mark __tracepoint_string's __used
+    - io_uring: abstract out task work running
+    - HID: input: Fix devices that return multiple bytes in battery report
+    - [x86] mce/inject: Fix a wrong assignment of i_mce.status
+    - [x86] perf/x86/intel/uncore: Fix oops when counting IMC uncore events on
+      some TGL
+    - [x86] sched: Bail out of frequency invariance if turbo frequency is
+      unknown
+    - [x86] sched: Bail out of frequency invariance if turbo_freq/base_freq
+      gives 0
+    - sched/fair: Fix NOHZ next idle balance
+    - sched: correct SD_flags returned by tl->sd_flags()
+    - EDAC: Fix reference count leaks
+    - crc-t10dif: Fix potential crypto notify dead-lock
+    - blktrace: fix debugfs use after free (CVE-2019-19770)
+    - [armhf] exynos: MCPM: Restore big.LITTLE cpuidle support
+    - rcu/tree: Repeat the monitor if any free channel is busy
+    - sched/uclamp: Fix initialization of struct uclamp_rq
+    - [x86] crypto: qat - allow xts requests not multiple of block
+    - [x86] platform/x86: intel-hid: Fix return value check in
+      check_acpi_dev()
+    - [x86] platform/x86: intel-vbtn: Fix return value check in
+      check_acpi_dev()
+    - tpm: Require that all digests are present in TCG_PCR_EVENT2 structures
+    - recordmcount: only record relocation of type R_AARCH64_CALL26 on arm64.
+    - regulator: fix memory leak on error path of regulator_register()
+    - io_uring: fix sq array offset calculation
+    - [arm64] dts: meson: fix mmc0 tuning error on Khadas VIM3
+    - [arm64,armhf] spi: rockchip: Fix error in SPI slave pio read
+    - seccomp: Fix ioctl number for SECCOMP_IOCTL_NOTIF_ID_VALID
+    - md: raid0/linear: fix dereference before null check on pointer mddev
+    - [mips64el,mipsel] irqchip/loongson-liointc: Fix potential dead lock
+    - [arm64,armhf] irqchip/gic-v4.1: Use GFP_ATOMIC flag in
+      allocate_vpe_l1_table()
+    - nvme-tcp: fix controller reset hang during traffic
+    - nvme-rdma: fix controller reset hang during traffic
+    - nvme-multipath: fix logic for non-optimized paths
+    - nvme-multipath: do not fall back to __nvme_find_path() for non-optimized
+      paths
+    - block: don't do revalidate zones on invalid devices
+    - [armhf] drm/tilcdc: fix leak & null ref in panel_connector_get_modes
+    - [armhf] exynos: clear L310_AUX_CTRL_FULL_LINE_ZERO in default
+      l2c_aux_val
+    - Bluetooth: add a mutex lock to avoid UAF in do_enale_set
+    - loop: be paranoid on exit and prevent new additions / removals
+    - io_uring: fix req->work corruption
+    - fs/btrfs: Add cond_resched() for try_release_extent_mapping() stalls
+    - drm/amdgpu: avoid dereferencing a NULL pointer
+    - drm/radeon: Fix reference count leaks caused by pm_runtime_get_sync
+    - video: fbdev: savage: fix memory leak on error handling path in probe
+    - video: fbdev: neofb: fix memory leak in neo_scan_monitor()
+    - [armhf] bus: ti-sysc: Add missing quirk flags for usb_host_hs
+    - md-cluster: fix wild pointer of unlock_all_bitmaps()
+    - drm/nouveau/kms/nv50-: Fix disabling dithering
+    - [arm64] dts: hisilicon: hikey: fixes to comply with adi, adv7533 DT
+      binding
+    - [armhf] drm/etnaviv: fix ref count leak via pm_runtime_get_sync
+    - drm/nouveau: fix reference count leak in nouveau_debugfs_strap_peek
+    - drm/nouveau: fix multiple instances of reference count leaks
+    - btrfs: fix lockdep splat from btrfs_dump_space_info
+    - [arm64] drm: msm: a6xx: fix gpu failure after system resume
+    - [arm64] drm/msm: Fix a null pointer access in msm_gem_shrinker_count()
+    - drm/debugfs: fix plain echo to connector "force" attribute
+    - drm/radeon: disable AGP by default
+    - net: phy: mscc: restore the base page in vsc8514/8584_config_init
+    - mm/mmap.c: Add cond_resched() for exit_mmap() CPU stalls
+    - bpf: Fix fds_example SIGSEGV error
+    - Bluetooth: hci_qca: Bug fixes for SSR
+    - brcmfmac: keep SDIO watchdog running when console_interval is non-zero
+    - brcmfmac: To fix Bss Info flag definition Bug
+    - brcmfmac: set state of hanger slot to FREE when flushing PSQ
+    - [x86] platform/x86: asus-nb-wmi: add support for ASUS ROG Zephyrus G14
+      and G15
+    - iwlegacy: Check the return value of pcie_capability_read_*()
+    - [arm64,armhf] gpu: host1x: debug: Fix multiple channels emitting
+      messages simultaneously
+    - [x86] uaccess: Make __get_user_size() Clang compliant on 32-bit
+    - mmc: sdhci-pci-o2micro: Bug fix for O2 host controller Seabird1
+    - usb: gadget: net2280: fix memory leak on probe error handling paths
+    - dyndbg: fix a BUG_ON in ddebug_describe_flags
+    - bcache: fix super block seq numbers comparision in register_cache_set()
+    - btrfs: allow btrfs_truncate_block() to fallback to nocow for data space
+      reservation
+    - btrfs: qgroup: free per-trans reserved space when a subvolume gets
+      dropped
+    - [arm64,x86] ACPICA: Do not increment operation_region reference counts
+      for field units
+    - io_uring: fix racy overflow count reporting
+    - io_uring: fix stalled deferred requests
+    - [arm64] crypto: caam - silence .setkey in case of bad key length
+    - [arm64] drm/msm: ratelimit crtc event overflow error
+    - drm/gem: Fix a leak in drm_gem_objects_lookup()
+    - drm/amdgpu: use the unlocked drm_gem_object_put
+    - [x86] agp/intel: Fix a memory leak on module initialisation failure
+    - btmrvl: Fix firmware filename for sd8977 chipset
+    - btmrvl: Fix firmware filename for sd8997 chipset
+    - Bluetooth: hci_qca: Fix an error pointer dereference
+    - Bluetooth: hci_qca: Only remove TX clock vote after TX is completed
+    - Bluetooth: Allow suspend even when preparation has failed
+    - ath10k: Acquire tx_lock in tx error paths
+    - Bluetooth: hci_qca: Bug fix during SSR timeout
+    - Bluetooth: hci_qca: Increase SoC idle timeout to 200ms
+    - iio: improve IIO_CONCENTRATION channel type description
+    - scsi: ufs: Fix imprecise load calculation in devfreq window
+    - [armhf] drm/etnaviv: Fix error path on failure to enable bus clk
+    - [arm64,armhf] drm/panfrost: Fix inbalance of devfreq record_busy/idle()
+    - [arm64] drm/arm: fix unintentional integer overflow on left shift
+    - Bluetooth: btusb: fix up firmware download sequence
+    - Bluetooth: btmtksdio: fix up firmware download sequence
+    - media: marvell-ccic: Add missed v4l2_async_notifier_cleanup()
+    - [armhf] media: omap3isp: Add missed v4l2_ctrl_handler_free() for
+      preview_init_entities()
+    - [arm64] dpaa2-eth: fix condition for number of buffer acquire retries
+    - drm/mipi: use dcs write for mipi_dsi_dcs_set_tear_scanline
+    - [powerpc*] cxl: Fix kobject memleak
+    - tracing: Move pipe reference to trace array instead of current_tracer
+    - drm/amdgpu: ensure 0 is returned for success in jpeg_v2_5_wait_for_idle
+    - drm/radeon: fix array out-of-bounds read and write issues
+    - [arm*] staging: vchiq_arm: Add a matching unregister call
+    - iavf: fix error return code in iavf_init_get_resources()
+    - iavf: Fix updating statistics
+    - RDMA/core: Fix bogus WARN_ON during ib_unregister_device_queued()
+    - ipvs: allow connection reuse for unconfirmed conntrack
+    - media: firewire: Using uninitialized values in node_probe()
+    - media: tvp5150: Add missed media_entity_cleanup()
+    - xfs: don't eat an EIO/ENOSPC writeback error when scrubbing data fork
+    - xfs: fix reflink quota reservation accounting error
+    - RDMA/rxe: Skip dgid check in loopback mode
+    - PCI: Fix pci_cfg_wait queue locking problem
+    - samples: bpf: Fix bpf programs with kprobe/sys_connect event
+    - [armhf] drm/stm: repair runtime power management
+    - kobject: Avoid premature parent object freeing in kobject_cleanup()
+    - leds: core: Flush scheduled work for system suspend
+    - [arm64,armhf] drm: panel: simple: Fix bpc for LG LB070WV8 panel
+    - [armhf] phy: exynos5-usbdrd: Calibrating makes sense only for USB2.0 PHY
+    - [arm64] mmc: sdhci-of-arasan: Add missed checks for devm_clk_register()
+    - scsi: scsi_debug: Add check for sdebug_max_queue during module init
+    - mwifiex: Prevent memory corruption handling keys
+    - kernfs: do not call fsnotify() with name without a parent
+    - [powerpc*] pseries: remove cede offline state for CPUs
+    - [powerpc*] rtas: don't online CPUs for partition suspend
+    - [powerpc*] vdso: Fix vdso cpu truncation
+    - RDMA/qedr: SRQ's bug fixes
+    - RDMA/rxe: Prevent access to wr->next ptr afrer wr is posted to send
+      queue
+    - [x86] staging: rtl8192u: fix a dubious looking mask before a shift
+    - PCI/ASPM: Add missing newline in sysfs 'policy'
+    - go7007: add sanity checking for endpoints
+    - [powerpc*] book3s64/pkeys: Use PVR check instead of cpu feature
+    - [armhf] drm/imx: fix use after free
+    - [armhf] gpu: ipu-v3: Restore RGB32, BGR32
+    - USB: serial: iuu_phoenix: fix led-activity helpers
+    - usb: core: fix quirks_param_set() writing to a const pointer
+    - [armhf] thermal: ti-soc-thermal: Fix reversed condition in
+      ti_thermal_expose_sensor()
+    - [powerpc*] perf: Fix missing is_sier_aviable() during build
+    - [armhf] phy: armada-38x: fix NETA lockup when repeatedly switching
+      speeds
+    - [x86] ASoC: hdac_hda: fix deadlock after PCM open error
+    - [mips64el,mipsel] OCTEON: add missing put_device() call in
+      dwc3_octeon_device_init()
+    - [x86] thermal: int340x: processor_thermal: fix: update Jasper Lake PCI
+      id
+    - [arm*] usb: dwc2: Fix error path in gadget registration
+    - usb: gadget: f_uac2: fix AC Interface Header Descriptor wTotalLength
+    - scsi: megaraid_sas: Clear affinity hint
+    - [powerpc] scsi: mesh: Fix panic after host or bus reset
+    - [arm64,armhf] net: dsa: mv88e6xxx: MV88E6097 does not support jumbo
+      configuration
+    - RDMA/core: Fix return error value in _ib_modify_qp() to negative
+    - Bluetooth: btusb: Fix and detect most of the Chinese Bluetooth
+      controllers
+    - Bluetooth: hci_h5: Set HCI_UART_RESET_ON_INIT to correct flags
+    - Bluetooth: hci_serdev: Only unregister device if it was registered
+    - Bluetooth: Fix suspend notifier race
+    - Bluetooth: hci_qca: Stop collecting memdump again for command timeout
+      during SSR
+    - xfs: fix inode allocation block res calculation precedence
+    - xfs: clear XFS_DQ_FREEING if we can't lock the dquot buffer to flush
+    - RDMA/netlink: Remove CAP_NET_RAW check when dump a raw QP
+    - PCI: Release IVRS table in AMD ACS quirk
+    - [powerpc*] pseries/hotplug-cpu: Remove double free in error path
+    - ASoC: soc-core: Fix regression causing sysfs entries to disappear
+    - [s390x] qeth: tolerate pre-filled RX buffer
+    - [s390x] qeth: don't process empty bridge port events
+    - ice: Clear and free XLT entries on reset
+    - ice: Graceful error handling in HW table calloc failure
+    - netfilter: nft_meta: fix iifgroup matching
+    - rtw88: fix LDPC field for RA info
+    - rtw88: fix short GI capability based on current bandwidth
+    - rtw88: coex: only skip coex triggered by BT info
+    - [arm64,armhf] wl1251: fix always return 0 error
+    - net/mlx5: DR, Change push vlan action sequence
+    - net/mlx5: Delete extra dump stack that gives nothing
+    - ftrace: Fix ftrace_trace_task return value
+    - [amd64,arm64] net: ethernet: aquantia: Fix wrong return value
+    - liquidio: Fix wrong return value in cn23xx_get_pf_num()
+    - [powerpc] net: spider_net: Fix the size used in a 'dma_free_coherent()'
+      call
+    - gpio: don't use same lockdep class for all devm_gpiochip_add_data users
+    - [arm64] net: thunderx: initialize VF's mailbox mutex before first usage
+    - dlm: Fix kobject memleak
+    - ocfs2: fix unbalanced locking
+    - [arm64,armhf] pinctrl-single: fix pcs_parse_pinconf() return value
+    - svcrdma: Fix page leak in svc_rdma_recv_read_chunk()
+    - nfsd: avoid a NULL dereference in __cld_pipe_upcall()
+    - SUNRPC: Fix ("SUNRPC: Add "@len" parameter to gss_unwrap()")
+    - [amd64] x86/fsgsbase/64: Fix NULL deref in 86_fsgsbase_read_task
+    - [amd64] crypto: aesni - add compatibility with IAS
+    - af_packet: TPACKET_V3: fix fill status rwlock imbalance
+    - net: Fix potential memory leak in proto_register()
+    - net/nfc/rawsock.c: add CAP_NET_RAW check.
+    - net: phy: fix memory leak in device-create error path
+    - net: Set fput_needed iff FDPUT_FPUT is set
+    - tcp: correct read of TFO keys on big endian systems
+    - [x86] vmxnet3: use correct tcp hdr length when packet is encapsulated
+    - net: refactor bind_bucket fastreuse into helper
+    - net: initialize fastreuse on inet_inherit_port
+    - vsock: fix potential null pointer dereference in vsock_poll()
+    - net: phy: marvell10g: fix null pointer dereference
+    - USB: serial: cp210x: re-enable auto-RTS on open
+    - USB: serial: cp210x: enable usb generic throttle/unthrottle
+    - ALSA: hda - fix the micmute led status for Lenovo ThinkCentre AIO
+    - ALSA: usb-audio: Creative USB X-Fi Pro SB1095 volume knob support
+    - ALSA: usb-audio: fix overeager device match for MacroSilicon MS2109
+    - ALSA: usb-audio: work around streaming quirk for MacroSilicon MS2109
+    - ALSA: usb-audio: add quirk for Pioneer DDJ-RB
+    - [arm64,x86] tpm: Unify the mismatching TPM space buffer sizes
+    - [x86] crypto: qat - fix double free in qat_uclo_create_batch_init_list
+    - [x86] crypto: ccp - Fix use of merged scatterlists
+    - [arm64] crypto: cpt - don't sleep of CRYPTO_TFM_REQ_MAY_SLEEP was not
+      specified
+    - tick/nohz: Narrow down noise while setting current task's tick
+      dependency
+    - bitfield.h: don't compile-time validate _val in FIELD_FIT
+    - fs/minix: check return value of sb_getblk()
+    - fs/minix: don't allow getting deleted inodes
+    - fs/minix: reject too-large maximum file size
+    - [x86] kvm: x86: replace kvm_spec_ctrl_test_value with runtime test on
+      the host
+    - 9p: Fix memory leak in v9fs_mount
+    - driver core: Fix probe_count imbalance in really_probe()
+    - media: media-request: Fix crash if memory allocation fails
+    - drm/ttm/nouveau: don't call tt destroy callback on alloc failure.
+    - io_uring: set ctx sq/cq entry count earlier
+    - io_uring: use TWA_SIGNAL for task_work uncondtionally
+    - io_uring: fail poll arm on queue proc failure
+    - NFS: Don't move layouts to plh_return_segs list while in use
+    - NFS: Don't return layout segments that are in use
+    - cpufreq: Fix locking issues with governors
+    - [arm64] cpufreq: dt: fix oops on armada37xx
+    - include/asm-generic/vmlinux.lds.h: align ro_after_init
+    - [arm64] PM / devfreq: rk3399_dmc: Fix kernel oops when rockchip,pmu is
+      absent
+    - PM / devfreq: Fix indentaion of devfreq_summary debugfs node
+    - spi: spidev: Align buffers for DMA
+    - erofs: fix extended inode could cross boundary
+    - [arm64] firmware: qcom_scm: Fix legacy convention SCM accessors
+    - [x86] irqdomain/treewide: Free firmware node after domain removal
+    - xen/balloon: fix accounting in alloc_xenballooned_pages error path
+    - xen/balloon: make the balloon wait interruptible
+    - [x86] drm/xen-front: Fix misused IS_ERR_OR_NULL checks
+    - [s390x] dasd: fix inability to use DASD with DIAG driver
+    - [s390x] numa: set node distance to LOCAL_DISTANCE
+    - [s390x] gmap: improve THP splitting
+    - io_uring: sanitize double poll handling
+    - io_uring: Fix NULL pointer dereference in loop_rw_iter()
+    - task_work: only grab task signal lock when needed
+    - io_uring: add missing REQ_F_COMP_LOCKED for nested requests
+    - io_uring: enable lookup of links holding inflight files
+    - io_uring: hold 'ctx' reference around task_work queue + execute
 
   [ Salvatore Bonaccorso ]
   * Bump ABI to 3