linux (5.16~rc2-1~exp1) UNRELEASED; urgency=medium * New upstream release candidate [ Salvatore Bonaccorso ] * [rt] Update to 5.16-rc2-rt4 -- Salvatore Bonaccorso Mon, 22 Nov 2021 12:57:16 +0100 linux (5.16~rc1-1~exp1) experimental; urgency=medium * New upstream release candidate [ Salvatore Bonaccorso ] * [rt] Update to 5.16-rc1-rt2 * fs/ksmbd: Enable SMB_SERVER as module (Closes: #998835) [ Aurelien Jarno ] * [riscv64] Enable VIRTUALIZATION and KVM. -- Salvatore Bonaccorso Fri, 19 Nov 2021 22:45:28 +0100 linux (5.15.3-1) unstable; urgency=medium * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.3 - Bluetooth: sco: Fix lock_sock() blockage by memcpy_from_msg() (CVE-2021-3640) [ Vincent Blut ] * [arm64] sound/soc/meson: Enable SND_MESON_AXG_SOUND_CARD as module (Closes: #999638) * [arm64,armhf] sound/soc/meson: Enable SND_MESON_GX_SOUND_CARD as module * drivers/bluetooth: Enable BT_HCIBTUSB_MTK (Closes: #999748) [ Salvatore Bonaccorso ] * mac80211: fix radiotap header generation * [rt] Update to 5.15.2-rt20 * [rt] Refresh "printk: introduce kernel sync mode" * [rt] Refresh "printk: move console printing to kthreads" * [rt] Drop "rcutorture: Avoid problematic critical section nesting on PREEMPT_RT" * [rt] Drop "lockdep: Let lock_is_held_type() detect recursive read as read" * [rt] Refresh "x86/softirq: Disable softirq stacks on PREEMPT_RT" * [rt] Refresh "POWERPC: Allow to enable RT" * Set ABI to 1 -- Salvatore Bonaccorso Thu, 18 Nov 2021 22:32:07 +0100 linux (5.15.2-1~exp1) experimental; urgency=medium * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.2 [ Salvatore Bonaccorso ] * [rt] Update to 5.15-rt17 and reenable (Closes: #995466) * perf srcline: Use long-running addr2line per DSO (Closes: #911815) * Refresh "Export symbols needed by Android drivers" * [rt] Update to 5.15.2-rt19 * Input: elantench - fix misreporting trackpoint coordinates (Closes: #989285) * kernel/time: Enable NO_HZ_FULL (Closes: #804857) * io-wq: serialize hash clear with wakeup (Closes: #996951) [ Vincent Blut ] * [x86] drivers/ptp: Enable PTP_1588_CLOCK_VMW as module * drivers/ptp: Enable PTP_1588_CLOCK_DTE, PTP_1588_CLOCK_IDT82P33, PTP_1588_CLOCK_IDTCM, PTP_1588_CLOCK_OCP as modules * drivers/ptp, net: Enable DP83640_PHY, PTP_1588_CLOCK_INES, NET_PTP_CLASSIFY, NETWORK_PHY_TIMESTAMPING -- Salvatore Bonaccorso Sun, 14 Nov 2021 14:27:40 +0100 linux (5.15.1-1~exp1) experimental; urgency=medium * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.1 [ Salvatore Bonaccorso ] * [arm*] drop cc-option fallbacks for architecture selection * net/tls: Enable TLS as module (Closes: #919807) [ Diederik de Haas ] * [x86] drivers/hwmon: Enable SENSORS_CORSAIR_PSU as module * [arm64] drivers/hwmon: Enable SENSORS_GPIO_FAN as module -- Salvatore Bonaccorso Sun, 07 Nov 2021 11:22:47 +0100 linux (5.15-1~exp1) experimental; urgency=medium * New upstream release candidate [ Diederik de Haas ] * [arm*] drivers/led/trigger: Make LEDS_TRIGGER_HEARTBEAT builtin (Closes: #992184) * [arm64] sound/soc/codecs: Enable SND_SOC_SPDIF as module * [armel/rpi] Enable RPi's clock framework and CPU Freq scaling * [armel/rpi] Change default governor to 'ondemand' for RPi 0/0w/1 (Closes: #991921) * [arm64] sound/soc/rockchip: Enable SND_SOC_ROCKCHIP_PDM as module * [armel] Make explicit that -rpi kernel variant is for RPi 0/0w/1, not the others [ Nathan Schulte ] * [arm64] drivers/staging/media/hantro: Enable VIDEO_HANTRO as module * [arm64] drivers/staging/media/rkvdec: Enable VIDEO_ROCKCHIP_VDEC as module (Closes: #993902) [ Vincent Blut ] * [arm] arch/arm/crypto: Enable CRYPTO_BLAKE2S_ARM, CRYPTO_SHA256_ARM and CRYPTO_SHA512_ARM as modules * [armhf] arch/arm/crypto: Enable most NEON based implementation of cryptographic algorithms as modules * [arm] Move CRYPTO_NHPOLY1305_NEON in armhf config file * [arm64] drivers/gpu/drm/vmwgfx: Enable DRM_VMWGFX as module (Closes: #995276) * [armhf] sound/soc/sunxi: Enable SND_SUN4I_I2S as module (Closes: #971892) * [armhf] drivers/gpu/drm/bridge/synopsys: Enable DRM_DW_HDMI_I2S_AUDIO as module * drivers/usb/serial: Enable USB_SERIAL_XR as module (Closes: #996962) * drivers/bus/mhi: Enable MHI_BUS, MHI_BUS_PCI_GENERIC as modules (Closes: #995407) * drivers/net: Enable MHI_NET as module * drivers/net/wwan: Enable WWAN, MHI_WWAN_CTRL as modules [ YunQiang Su ] * [mipsel,mips64el/loongson-3] linux-image: Recommend pmon-update [ Salvatore Bonaccorso ] * Compile with gcc-11 on all architectures * [arm64] drivers/net: Enable VMXNET3 as module [ Uwe Kleine-König ] * [arm64] Enable various symbols for the librem5 devkit and iMX8MN Variscite Symphony (Patches by Guido Günther and Ariel D'Alessandro) * [armhf,arm64] Cherrypick fix for snvs_pwrkey to prevent a machine hang. [ Heiko Thiery ] * [arm64] drivers/mtd/spi-nor: enable MTD_SPI_NOR as module * [arm64] drivers/net/can/spi: enable CAN_MCP251X as module * [arm64] drivers/net/phy: enable MICROSEMI_PHY as module * [arm64] drivers/net/usb: enable USB_NET_SMSC95XX as module [ Ryutaroh Matsumoto ] * [arm64] Enable TOUCHSCREEN_RASPBERRYPI_FW and REGULATOR_RASPBERRYPI_TOUCHSCREEN_ATTINY (Closes: #977575) [ Ariel D'Alessandro ] * [arm64] drivers/regulator: Enable REGULATOR_BD718XX as module [ Lubomir Rintel ] * [armhf] Add support for Marvell MMP3 * [armhf] Enable SND_MMP_SOC_SSPA, COMMON_CLK_MMP2_AUDIO, PHY_MMP3_USB, MFD_ENE_KB3930 and LEDS_ARIEL as modules. [ Sean McAvoy ] * [armel] marvell: Enable CONFIG_SENSORS_LM63 as a module. [ Dan Stefura ] * [arm64] enable i6300esb watchdog kernel module [ Thore Sommer ] * drivers/md: Enable DM_VERITY_FEC [ Aurelien Jarno ] * [riscv64] Enable NUMA (Closes: #993453) -- Bastian Blank Thu, 04 Nov 2021 09:01:01 +0100 linux (5.14.16-1) unstable; urgency=medium * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.13 - ext4: check and update i_disksize properly - ext4: correct the error path of ext4_write_inline_data_end() - [x86] ASoC: Intel: sof_sdw: tag SoundWire BEs as non-atomic - ALSA: oxfw: fix transmission method for Loud models based on OXFW971 - ALSA: usb-audio: Unify mixer resume and reset_resume procedure - HID: apple: Fix logical maximum and usage maximum of Magic Keyboard JIS - netfilter: ip6_tables: zero-initialize fragment offset - HID: wacom: Add new Intuos BT (CTL-4100WL/CTL-6100WL) device IDs - [x86] ASoC: SOF: loader: release_firmware() on load failure to avoid batching - netfilter: nf_nat_masquerade: make async masq_inet6_event handling generic - netfilter: nf_nat_masquerade: defer conntrack walk to work queue - mac80211: Drop frames from invalid MAC address in ad-hoc mode - [m68k] Handle arrivals of multiple signals correctly - net: prevent user from passing illegal stab size - mac80211: check return value of rhashtable_init - [x86] vboxfs: fix broken legacy mount signature checking - drm/amdgpu: fix gart.bo pin_count leak - scsi: ses: Fix unsigned comparison with less than zero - scsi: virtio_scsi: Fix spelling mistake "Unsupport" -> "Unsupported" - scsi: qla2xxx: Fix excessive messages during device logout - perf/core: fix userpage->time_enabled of inactive events - sched: Always inline is_percpu_thread() - io_uring: kill fasync - [armhf] hwmon: (pmbus/ibm-cffps) max_power_out swap changes https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.14 - ALSA: usb-audio: Add quirk for VF0770 - ALSA: pcm: Workaround for a wrong offset in SYNC_PTR compat ioctl - ALSA: usb-audio: Fix a missing error check in scarlett gen2 mixer - ALSA: seq: Fix a potential UAF by wrong private_free call order - ALSA: hda/realtek: Enable 4-speaker output for Dell Precision 5560 laptop - ALSA: hda - Enable headphone mic on Dell Latitude laptops with ALC3254 - ALSA: hda/realtek: Complete partial device name to avoid ambiguity - ALSA: hda/realtek: Add quirk for Clevo X170KM-G - ALSA: hda/realtek - ALC236 headset MIC recording issue - ALSA: hda/realtek: Add quirk for TongFang PHxTxX1 - ALSA: hda/realtek: Fix for quirk to enable speaker output on the Lenovo 13s Gen2 - ALSA: hda/realtek: Fix the mic type detection issue for ASUS G551JW - [amd64] platform/x86: amd-pmc: Add alternative acpi id for PMC controller - dm: fix mempool NULL pointer race when completing IO - [x86] ACPI: PM: Include alternate AMDI0005 id in special behaviour - dm rq: don't queue request to blk-mq during DM suspend - [s390x] fix strrchr() implementation - drm/fbdev: Clamp fbdev surface size if too large - [arm64] hugetlb: fix CMA gigantic page order for non-4K PAGE_SIZE - drm/nouveau/fifo: Reinstate the correct engine bit programming - [arm64] drm/msm: Do not run snapshot on non-DPU devices - [arm64] drm/msm: Avoid potential overflow in timeout_to_jiffies() - btrfs: unlock newly allocated extent buffer after error - btrfs: deal with errors when replaying dir entry during log replay - btrfs: deal with errors when adding inode reference during log replay - btrfs: check for error when looking up inode during dir entry replay - btrfs: update refs for any root except tree log roots - btrfs: fix abort logic in btrfs_replace_file_extents - [x86] resctrl: Free the ctrlval arrays when domain_setup_mon_state() fails - [x86] mei: me: add Ice Lake-N device id. - [x86] mei: hbm: drop hbm responses on early shutdown - xhci: guard accesses to ep_state in xhci_endpoint_reset() - xhci: add quirk for host controllers that don't update endpoint DCS - xhci: Fix command ring pointer corruption while aborting a command - xhci: Enable trust tx length quirk for Fresco FL11 USB controller - cb710: avoid NULL pointer subtraction - [arm64,x86] efi/cper: use stack buffer for error record decoding - efi: Change down_interruptible() in virt_efi_reset_system() to down_trylock() - [armhf] usb: musb: dsps: Fix the probe error path - Input: xpad - add support for another USB ID of Nacon GC-100 - USB: serial: qcserial: add EM9191 QDL support - USB: serial: option: add Quectel EC200S-CN module support - USB: serial: option: add Telit LE910Cx composition 0x1204 - USB: serial: option: add prod. id for Quectel EG91 - virtio: write back F_VERSION_1 before validate - nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells - virtio-blk: remove unneeded "likely" statements - Revert "virtio-blk: Add validation for block size in config space" - [x86] fpu: Mask out the invalid MXCSR bits properly - [x86] Kconfig: Do not enable AMD_MEM_ENCRYPT_ACTIVE_BY_DEFAULT automatically - [powerpc*] xive: Discard disabled interrupts in get_irqchip_state() - [armhf] drivers: bus: simple-pm-bus: Add support for probing simple bus only devices - driver core: Reject pointless SYNC_STATE_ONLY device links - iio: adc: ad7192: Add IRQ flag - iio: adc: ad7780: Fix IRQ flag - iio: adc: ad7793: Fix IRQ flag - iio: adis16480: fix devices that do not support sleep mode - iio: adc128s052: Fix the error handling path of 'adc128_probe()' - iio: adc: max1027: Fix wrong shift with 12-bit devices - iio: adis16475: fix deadlock on frequency set - iio: light: opt3001: Fixed timeout error when 0 lux - iio: adc: max1027: Fix the number of max1X31 channels - eeprom: at25: Add SPI ID table - iio: dac: ti-dac5571: fix an error code in probe() - [arm64] tee: optee: Fix missing devices unregister during optee_remove - [armel,armhf] dts: bcm2711-rpi-4-b: Fix usb's unit address - [armel,armhf] dts: bcm2711-rpi-4-b: fix sd_io_1v8_reg regulator states - [armel,armhf] dts: bcm2711-rpi-4-b: Fix pcie0's unit address formatting - nvme-pci: Fix abort command id - sctp: account stream padding length for reconf chunk - [arm64,armhf] gpio: pca953x: Improve bias setting - net/smc: improved fix wait on already cleared link - net/mlx5e: Fix memory leak in mlx5_core_destroy_cq() error path - net/mlx5e: Mutually exclude RX-FCS and RX-port-timestamp - net/mlx5e: Switchdev representors are not vlan challenged - net: stmmac: fix get_hw_feature() on old hardware - net: phy: Do not shutdown PHYs in READY state - [arm64,armhf] net: dsa: mv88e6xxx: don't use PHY_DETECT on internal PHY's - [arm64,armhf] net: dsa: fix spurious error message when unoffloaded port leaves bridge - ethernet: s2io: fix setting mac address during resume - nfc: fix error handling of nfc_proto_register() - NFC: digital: fix possible memory leak in digital_tg_listen_mdaa() - NFC: digital: fix possible memory leak in digital_in_send_sdd_req() - pata_legacy: fix a couple uninitialized variable bugs - ata: ahci_platform: fix null-ptr-deref in ahci_platform_enable_regulators() - spi: spidev: Add SPI ID table - drm/edid: In connector_bad_edid() cap num_of_ext by num_blocks read - [arm64] drm/msm: Fix null pointer dereference on pointer edp - [arm64] drm/msm/mdp5: fix cursor-related warnings - [arm64] drm/msm/submit: fix overflow check on 64-bit architectures - [arm64] drm/msm/a6xx: Track current ctx by seqno - [arm64] drm/msm/a4xx: fix error handling in a4xx_gpu_init() - [arm64] drm/msm/a3xx: fix error handling in a3xx_gpu_init() - [arm64] drm/msm/dsi: dsi_phy_14nm: Take ready-bit into account in poll_for_ready - [arm64] drm/msm/dsi: Fix an error code in msm_dsi_modeset_init() - [arm64] drm/msm/dsi: fix off by one in dsi_bus_clk_enable error handling - [arm64] acpi/arm64: fix next_platform_timer() section mismatch error - [x86] platform/x86: intel_scu_ipc: Fix busy loop expiry time - mqprio: Correct stats in mqprio_dump_class_stats(). - mptcp: fix possible stall on recvmsg() - qed: Fix missing error code in qed_slowpath_start() - ice: fix locking for Tx timestamp tracking flush - nfp: flow_offload: move flow_indr_dev_register from app init to app start - [arm64] net: mscc: ocelot: make use of all 63 PTP timestamp identifiers - [arm64] net: mscc: ocelot: avoid overflowing the PTP timestamp FIFO - [arm64] net: mscc: ocelot: warn when a PTP IRQ is raised for an unknown skb - [arm64] net: mscc: ocelot: deny TX timestamping of non-PTP packets - [arm64] net: mscc: ocelot: cross-check the sequence id from the timestamp FIFO with the skb PTP header - [arm64] net: dsa: felix: break at first CPU port during init and teardown https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.15 - [armhf] dts: vexpress-v2p-ca9: Fix the SMB unit-address - block: decode QUEUE_FLAG_HCTX_ACTIVE in debugfs output - [x86] xen/x86: prevent PVH type from getting clobbered - r8152: avoid to resubmit rx immediately - drm/amdgpu: init iommu after amdkfd device init - NFSD: Keep existing listeners on portlist error - [powerpc*] powerpc/lib: Add helper to check if offset is within conditional branch range - [powerpc*] powerpc/bpf: Validate branch ranges - [powerpc*] powerpc/security: Add a helper to query stf_barrier type - [powerpc*] powerpc/bpf: Emit stf barrier instruction sequences for BPF_NOSPEC - [arm64] KVM: arm64: Fix host stage-2 PGD refcount - [arm64] KVM: arm64: Release mmap_lock when using VM_SHARED with MTE - netfilter: xt_IDLETIMER: fix panic that occurs when timer_type has garbage value - netfilter: nf_tables: skip netdev events generated on netns removal - ice: Fix failure to re-add LAN/RDMA Tx queues - ice: Avoid crash from unnecessary IDA free - ice: fix getting UDP tunnel entry - ice: Print the api_patch as part of the fw.mgmt.api - netfilter: ip6t_rt: fix rt0_hdr parsing in rt_mt6 - netfilter: ipvs: make global sysctl readonly in non-init netns - sctp: fix transport encap_port update in sctp_vtag_verify - tcp: md5: Fix overlap between vrf and non-vrf keys - ipv6: When forwarding count rx stats on the orig netdev - hamradio: baycom_epp: fix build for UML - net/sched: act_ct: Fix byte count on fragmented packets - [arm64,armhf] net: dsa: Fix an error handling path in 'dsa_switch_parse_ports_of()' - [powerpc*] smp: do not decrement idle task preempt count in CPU offline - [arm64] net: hns3: Add configuration of TM QCN error event - [arm64] net: hns3: reset DWRR of unused tc to zero - [arm64] net: hns3: add limit ets dwrr bandwidth cannot be 0 - [arm64] net: hns3: schedule the polling again when allocation fails - [arm64] net: hns3: fix vf reset workqueue cannot exit - [arm64] net: hns3: disable sriov before unload hclge layer - net: stmmac: Fix E2E delay mechanism - ptp: Fix possible memory leak in ptp_clock_register() - e1000e: Fix packet loss on Tiger Lake and later - igc: Update I226_K device ID - ice: Add missing E810 device ids - net/mlx5e: IPsec: Fix a misuse of the software parser's fields - net/mlx5e: IPsec: Fix work queue entry ethernet segment checksum flags - [arm64] net: enetc: fix ethtool counter name for PM0_TERR - [arm64] net: enetc: make sure all traffic classes can send large frames - can: peak_usb: pcan_usb_fd_decode_status(): fix back to ERROR_ACTIVE state notification - can: peak_pci: peak_pci_remove(): fix UAF - can: isotp: isotp_sendmsg(): fix return error on FC timeout on TX path - can: isotp: isotp_sendmsg(): add result check for wait_event_interruptible() - can: isotp: isotp_sendmsg(): fix TX buffer concurrent access in isotp_sendmsg() - can: j1939: j1939_tp_rxtimer(): fix errant alert in j1939_tp_rxtimer - can: j1939: j1939_netdev_start(): fix UAF for rx_kref of j1939_priv - can: j1939: j1939_xtp_rx_dat_one(): cancel session if receive TP.DT with error length - can: j1939: j1939_xtp_rx_rts_session_new(): abort TP less than 9 bytes - ceph: skip existing superblocks that are blocklisted or shut down when mounting - ceph: fix handling of "meta" errors - tracing: Have all levels of checks prevent recursion - ocfs2: fix data corruption after conversion from inline format - ocfs2: mount fails with buffer overflow in strlen - userfaultfd: fix a race between writeprotect and exit_mmap() - mm/mempolicy: do not allow illegal MPOL_F_NUMA_BALANCING | MPOL_LOCAL in mbind() - vfs: check fd has read access in kernel_read_file_from_fd() - ALSA: usb-audio: Provide quirk for Sennheiser GSP670 Headset - ALSA: hda/realtek: Add quirk for Clevo PC50HS - ASoC: DAPM: Fix missing kctl change notifications - [x86] ASoC: nau8824: Fix headphone vs headset, button-press detection no longer working - blk-cgroup: blk_cgroup_bio_start() should use irq-safe operations on blkg->iostat_cpu - audit: fix possible null-pointer dereference in audit_filter_rules - ucounts: Move get_ucounts from cred_alloc_blank to key_change_session_keyring - ucounts: Pair inc_rlimit_ucounts with dec_rlimit_ucoutns in commit_creds - ucounts: Proper error handling in set_cred_ucounts - ucounts: Fix signal ucount refcounting - [powerpc*] KVM: PPC: Book3S HV: Fix stack handling in idle_kvm_start_guest() - [powerpc*] KVM: PPC: Book3S HV: Make idle_kvm_start_guest() return 0 if it went to guest (CVE-2021-43056) - [powerpc*] idle: Don't corrupt back chain when going idle - mm, slub: fix mismatch between reconstructed freelist depth and cnt - mm, slub: fix potential memoryleak in kmem_cache_open() - mm, slub: fix potential use-after-free in slab_debugfs_fops - mm, slub: fix incorrect memcg slab count for bulk free - [x86] KVM: nVMX: promptly process interrupts delivered while in guest mode - [x86] KVM: SEV: Flush cache on non-coherent systems before RECEIVE_UPDATE_DATA - [x86] KVM: SEV-ES: rename guest_ins_data to sev_pio_data - [x86] KVM: SEV-ES: clean up kvm_sev_es_ins/outs - [x86] KVM: SEV-ES: keep INS functions together - [x86] KVM: SEV-ES: fix length of string I/O - [x86] KVM: SEV-ES: go over the sev_pio_data buffer in multiple passes if needed - [x86] KVM: SEV-ES: reduce ghcb_sa_len to 32 bits - [x86] KVM: x86: leave vcpu->arch.pio.count alone in emulator_pio_in_out - [x86] KVM: x86: check for interrupts before deciding whether to exit the fast path - [x86] KVM: x86: split the two parts of emulator_pio_in - [x86] KVM: x86: remove unnecessary arguments from complete_emulator_pio_in - nfc: nci: fix the UAF of rf_conn_info object (CVE-2021-3760) - isdn: cpai: check ctr->cnr to avoid array index out of bound (CVE-2021-3896) - [sh4] net: bridge: mcast: use multicast_membership_interval for IGMPv3 - [x86] KVM: SEV-ES: Set guest_state_protected after VMSA update - [arm64] net: hns3: fix the max tx size according to user manual - [x86] KVM: MMU: Reset mmu->pkru_mask to avoid stale data - [arm64] drm/msm/a6xx: Serialize GMU communication - ALSA: hda: intel: Allow repeatedly probing on codec configuration errors - btrfs: deal with errors when checking if a dir entry exists during log replay - net: stmmac: add support for dwmac 3.40a - [x86] platform/x86: intel_scu_ipc: Increase virtual timeout to 10s - [x86] platform/x86: intel_scu_ipc: Update timeout value in comment - ALSA: hda: avoid write to STATESTS if controller is in reset - spi: Fix deadlock when adding SPI controllers on SPI buses - spi-mux: Fix false-positive lockdep splats - [x86] perf/x86/msr: Add Sapphire Rapids CPU support - scsi: iscsi: Fix set_param() handling - [x86] scsi: storvsc: Fix validation for unsolicited incoming packets - scsi: qla2xxx: Fix a memory leak in an error path of qla2x00_process_els() - mm/thp: decrease nr_thps in file's mapping on THP split - sched/scs: Reset the shadow stack when idle_task_exit - [arm64] net: hns3: fix for miscalculation of rx unused desc - net/mlx5: Lag, move lag destruction to a workqueue - net/mlx5: Lag, change multipath and bonding to be mutually exclusive - autofs: fix wait name hash calculation in autofs_wait() - scsi: core: Fix shost->cmd_per_lun calculation in scsi_add_host_with_dma() - [s390x] pci: cleanup resources only if necessary - [s390x] pci: fix zpci_zdev_put() on reserve - net: mdiobus: Fix memory leak in __mdiobus_register - e1000e: Separate TGP board type from SPT - [armhf] pinctrl: stm32: use valid pin identifier in stm32_pinctrl_resume() https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.16 - [armel,armhf] 9134/1: remove duplicate memcpy() definition - [armel,armhf] 9139/1: kprobes: fix arch_init_kprobes() prototype - [armel,armhf] 9148/1: handle CONFIG_CPU_ENDIAN_BE32 in arch/arm/kernel/head.S - usbnet: sanity check for maxpacket - usbnet: fix error return code in usbnet_probe() - pinctrl: amd: disable and mask interrupts on probe - ata: sata_mv: Fix the error handling of mv_chip_id() - tipc: fix size validations for the MSG_CRYPTO type (CVE-2021-43267) - nfc: port100: fix using -ERRNO as command type mask - Revert "net: mdiobus: Fix memory leak in __mdiobus_register" - mmc: vub300: fix control-message timeouts - mmc: cqhci: clear HALT state after CQE enable - [armhf] mmc: dw_mmc: exynos: fix the finding clock sample value - mmc: sdhci: Map more voltage level to SDHCI_POWER_330 - mmc: sdhci-pci: Read card detect from ACPI for Intel Merrifield - [arm64,armhf] mmc: sdhci-esdhc-imx: clear the buffer_read_ready to reset standard tuning circuit - block: Fix partition check for host-aware zoned block devices - ocfs2: fix race between searching chunks and release journal_head from buffer_head - nvme-tcp: fix H2CData PDU send accounting (again) - cfg80211: scan: fix RCU in cfg80211_add_nontrans_list() - cfg80211: fix management registrations locking - net: lan78xx: fix division by zero in send path - mm: hwpoison: remove the unnecessary THP check - mm: filemap: check if THP has hwpoisoned subpage for PMD page fault - mm, thp: bail out early in collapse_file for writeback page - mm: khugepaged: skip huge page collapse for special files - [arm64] dts: imx8mm-kontron: Fix polarity of reg_rst_eth2 - [arm64] dts: imx8mm-kontron: Fix CAN SPI clock frequency - [arm64] dts: imx8mm-kontron: Fix connection type for VSC8531 RGMII PHY - [arm64] dts: imx8mm-kontron: Set lower limit of VDD_SNVS to 800 mV - [arm64] dts: imx8mm-kontron: Make sure SOC and DRAM supply voltages are correct - mac80211: mesh: fix HE operation element length check - drm/ttm: fix memleak in ttm_transfered_destroy - [x86] drm/i915: Convert unconditional clflush to drm_clflush_virt_range() - [x86] drm/i915: Catch yet another unconditioal clflush - [x86] drm/i915/dp: Skip the HW readout of DPCD on disabled encoders - drm/amdgpu: Fix even more out of bound writes from debugfs - drm/amdgpu: fix out of bounds write (CVE-2021-42327) - drm/amdgpu: support B0&B1 external revision id for yellow carp - drm/amd/display: Limit display scaling to up to true 4k for DCN 3.1 - drm/amd/display: Fix prefetch bandwidth calculation for DCN3.1 - drm/amd/display: increase Z9 latency to workaround underflow in Z9 - drm/amd/display: Increase watermark latencies for DCN3.1 - drm/amd/display: Moved dccg init to after bios golden init - drm/amd/display: Fallback to clocks which meet requested voltage on DCN31 - drm/amd/display: Fix deadlock when falling back to v2 from v3 - Revert "watchdog: iTCO_wdt: Account for rebooting on second timeout" - cgroup: Fix memory leak caused by missing cgroup_bpf_offline - [riscv64] riscv, bpf: Fix potential NULL dereference - tcp_bpf: Fix one concurrency problem in the tcp_bpf_send_verdict function - bpf: Fix potential race in tail call compatibility check - bpf: Fix error usage of map_fd and fdget() in generic_map_update_batch() - [amd64] IB/qib: Protect from buffer overflow in struct qib_user_sdma_pkt fields - [amd64] IB/hfi1: Fix abba locking issue with sc_disable() - nvmet-tcp: fix data digest pointer calculation - nvme-tcp: fix data digest pointer calculation - nvme-tcp: fix possible req->offset corruption - ice: Respond to a NETDEV_UNREGISTER event for LAG - RDMA/mlx5: Set user priority for DCT - ice: check whether PTP is initialized in ice_ptp_release() - [arm64] dts: allwinner: h5: NanoPI Neo 2: Fix ethernet node - regmap: Fix possible double-free in regcache_rbtree_exit() - net: batman-adv: fix error handling - net-sysfs: initialize uid and gid before calling net_ns_get_ownership - cfg80211: correct bridge/4addr mode check - net: Prevent infinite while loop in skb_tx_hash() - RDMA/mlx5: Initialize the ODP xarray when creating an ODP MR - RDMA/sa_query: Use strscpy_pad instead of memcpy to copy a string - net: ethernet: microchip: lan743x: Fix driver crash when lan743x_pm_resume fails - net: ethernet: microchip: lan743x: Fix dma allocation failure by using dma_set_mask_and_coherent - [arm64] net: hns3: fix pause config problem after autoneg disabled - [arm64] net: hns3: fix data endian problem of some functions of debugfs - net: ethernet: microchip: lan743x: Fix skb allocation failure - phy: phy_ethtool_ksettings_get: Lock the phy for consistency - phy: phy_ethtool_ksettings_set: Move after phy_start_aneg - phy: phy_start_aneg: Add an unlocked version - phy: phy_ethtool_ksettings_set: Lock the PHY while changing settings - sctp: use init_tag from inithdr for ABORT chunk (CVE-2021-3772) - sctp: fix the processing for INIT chunk (CVE-2021-3772) - sctp: fix the processing for INIT_ACK chunk (CVE-2021-3772) - sctp: fix the processing for COOKIE_ECHO chunk (CVE-2021-3772) - sctp: add vtag check in sctp_sf_violation (CVE-2021-3772) - sctp: add vtag check in sctp_sf_do_8_5_1_E_sa (CVE-2021-3772) - sctp: add vtag check in sctp_sf_ootb (CVE-2021-3772) - bpf: Use kvmalloc for map values in syscall - [arm64] watchdog: sbsa: only use 32-bit accessors - bpf: Move BPF_MAP_TYPE for INODE_STORAGE and TASK_STORAGE outside of CONFIG_NET - [arm64] net: hns3: add more string spaces for dumping packets number of queue info in debugfs - [arm64] net: hns3: expand buffer len for some debugfs command - virtio-ring: fix DMA metadata flags - [s390x] KVM: s390: clear kicked_mask before sleeping again - [s390x] KVM: s390: preserve deliverable_mask in __airqs_kick_single_vcpu - [powerpc*] scsi: ibmvfc: Fix up duplicate response detection - [riscv64] fix misalgned trap vector base address - [x86] KVM: switch pvclock_gtod_sync_lock to a raw spinlock - [x86] KVM: SEV-ES: fix another issue with string I/O VMGEXITs - [x86] KVM: Take srcu lock in post_kvm_run_save() [ Salvatore Bonaccorso ] * Revert "[amd64] Unset AMD_MEM_ENCRYPT_ACTIVE_BY_DEFAULT" * Bump ABI to 4 * media: ir-kbd-i2c: improve responsiveness of hauppauge zilog receivers (Closes: #994050) * [x86] media: ite-cir: IR receiver stop working after receive overflow (Closes: #996672) * scsi: core: Put LLD module refcnt after SCSI device is released * sfc: Fix reading non-legacy supported link modes * vrf: Revert "Reset skb conntrack connection..." * media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (CVE-2021-42739) -- Salvatore Bonaccorso Wed, 03 Nov 2021 15:35:31 +0100 linux (5.14.12-1) unstable; urgency=medium * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.10 - [arm64,armhf] media: cedrus: Fix SUNXI tile size calculation - [arm64] ASoC: fsl_sai: register platform component before registering cpu dai - [armhf] ASoC: fsl_spdif: register platform component before registering cpu dai - [x86] ASoC: SOF: Fix DSP oops stack dump output contents - [arm64] pinctrl: qcom: spmi-gpio: correct parent irqspec translation - net/mlx4_en: Resolve bad operstate value - [s390x] qeth: Fix deadlock in remove_discipline - [s390x] qeth: fix deadlock during failing recovery - [x86] crypto: ccp - fix resource leaks in ccp_run_aes_gcm_cmd() (CVE-2021-3744, CVE-2021-3764) - [m68k] Update ->thread.esp0 before calling syscall_trace() in ret_from_signal - [amd64] HID: amd_sfh: Fix potential NULL pointer dereference - tty: Fix out-of-bound vmalloc access in imageblit - cpufreq: schedutil: Use kobject release() method to free sugov_tunables - scsi: qla2xxx: Changes to support kdump kernel for NVMe BFS - drm/amdgpu: adjust fence driver enable sequence - drm/amdgpu: avoid over-handle of fence driver fini in s3 test (v2) - drm/amdgpu: stop scheduler when calling hw_fini (v2) - cpufreq: schedutil: Destroy mutex before kobject_put() frees the memory - scsi: ufs: ufs-pci: Fix Intel LKF link stability - ALSA: rawmidi: introduce SNDRV_RAWMIDI_IOCTL_USER_PVERSION - ALSA: firewire-motu: fix truncated bytes in message tracepoints - ALSA: hda/realtek: Quirks to enable speaker output for Lenovo Legion 7i 15IMHG05, Yoga 7i 14ITL5/15ITL5, and 13s Gen2 laptops. - [amd64,arm64] ACPI: NFIT: Use fallback node id when numa info in NFIT table is incorrect - fs-verity: fix signed integer overflow with i_size near S64_MAX - hwmon: (tmp421) handle I2C errors - hwmon: (w83793) Fix NULL pointer dereference by removing unnecessary structure field - hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary structure field - hwmon: (w83791d) Fix NULL pointer dereference by removing unnecessary structure field - [arm64,armhf] gpio: pca953x: do not ignore i2c errors - scsi: ufs: Fix illegal offset in UPIU event trace - mac80211: fix use-after-free in CCMP/GCMP RX - [x86] platform/x86/intel: hid: Add DMI switches allow list - [x86] kvmclock: Move this_cpu_pvti into kvmclock.h - [x86] ptp: Fix ptp_kvm_getcrosststamp issue for x86 ptp_kvm - [x86] KVM: x86: Fix stack-out-of-bounds memory access from ioapic_write_indirect() - [x86] KVM: x86: nSVM: don't copy virt_ext from vmcb12 - [x86] KVM: x86: Clear KVM's cached guest CR3 at RESET/INIT - [x86] KVM: x86: Swap order of CPUID entry "index" vs. "significant flag" checks - [x86] KVM: nVMX: Filter out all unsupported controls when eVMCS was activated - [x86] KVM: SEV: Update svm_vm_copy_asid_from for SEV-ES - [x86] KVM: SEV: Pin guest memory for write for RECEIVE_UPDATE_DATA - [x86] KVM: SEV: Acquire vcpu mutex when updating VMSA - [x86] KVM: SEV: Allow some commands for mirror VM - [x86] KVM: SVM: fix missing sev_decommission in sev_receive_start - [x86] KVM: nVMX: Fix nested bus lock VM exit - [x86] KVM: VMX: Fix a TSX_CTRL_CPUID_CLEAR field mask issue - RDMA/cma: Do not change route.addr.src_addr.ss_family - RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests - nbd: use shifts rather than multiplies - drm/amd/display: initialize backlight_ramping_override to false - drm/amd/display: Pass PCI deviceid into DC - drm/amd/display: Fix Display Flicker on embedded panels - drm/amdgpu: force exit gfxoff on sdma resume for rmb s0ix - drm/amdgpu: check tiling flags when creating FB on GFX8- - drm/amdgpu: correct initial cp_hqd_quantum for gfx9 - [amd64] drm/i915/gvt: fix the usage of ww lock in gvt scheduler. - ipvs: check that ip_vs_conn_tab_bits is between 8 and 20 - bpf: Handle return value of BPF_PROG_TYPE_STRUCT_OPS prog - IB/cma: Do not send IGMP leaves for sendonly Multicast groups - RDMA/cma: Fix listener leak in rdma_cma_listen_on_all() failure - netfilter: nf_tables: unlink table before deleting it - netfilter: log: work around missing softdep backend module - Revert "mac80211: do not use low data rates for data frames with no ack flag" - mac80211: Fix ieee80211_amsdu_aggregate frag_tail bug - mac80211: limit injected vht mcs/nss in ieee80211_parse_tx_radiotap - mac80211: mesh: fix potentially unaligned access - mac80211-hwsim: fix late beacon hrtimer handling - driver core: fw_devlink: Add support for FWNODE_FLAG_NEEDS_CHILD_BOUND_ON_ADD - net: mdiobus: Set FWNODE_FLAG_NEEDS_CHILD_BOUND_ON_ADD for mdiobus parents - sctp: break out if skb_header_pointer returns NULL in sctp_rcv_ootb - mptcp: don't return sockets in foreign netns - mptcp: allow changing the 'backup' bit when no sockets are open - [arm64] RDMA/hns: Work around broken constant propagation in gcc 8 - hwmon: (tmp421) report /PVLD condition as fault - hwmon: (tmp421) fix rounding for negative values - [arm64] net: enetc: fix the incorrect clearing of IF_MODE bits - net: ipv4: Fix rtnexthop len when RTA_FLOW is present - smsc95xx: fix stalled rx after link change - [x86] drm/i915/request: fix early tracepoints - [x86] drm/i915: Remove warning from the rps worker - [arm64,armhf] dsa: mv88e6xxx: 6161: Use chip wide MAX MTU - [arm64,armhf] dsa: mv88e6xxx: Fix MTU definition - [arm64,armhf] dsa: mv88e6xxx: Include tagger overhead when setting MTU for DSA and CPU ports - e100: fix length calculation in e100_get_regs_len - e100: fix buffer overrun in e100_get_regs - [amd64] RDMA/hfi1: Fix kernel pointer leak - [arm64] RDMA/hns: Fix the size setting error when copying CQE in clean_cq() - [arm64] RDMA/hns: Add the check of the CQE size of the user space - bpf: Exempt CAP_BPF from checks against bpf_jit_limit - [amd64] bpf, x86: Fix bpf mapping of atomic fetch implementation - Revert "block, bfq: honor already-setup queue merges" - scsi: csiostor: Add module softdep on cxgb4 - ixgbe: Fix NULL pointer dereference in ixgbe_xdp_setup - [arm64] net: hns3: do not allow call hns3_nic_net_open repeatedly - [arm64] net: hns3: remove tc enable checking - [arm64] net: hns3: don't rollback when destroy mqprio fail - [arm64] net: hns3: fix mixed flag HCLGE_FLAG_MQPRIO_ENABLE and HCLGE_FLAG_DCB_ENABLE - [arm64] net: hns3: fix show wrong state when add existing uc mac address - [arm64] net: hns3: reconstruct function hns3_self_test - [arm64] net: hns3: fix always enable rx vlan filter problem after selftest - [arm64] net: hns3: disable firmware compatible features when uninstall PF - [arm64,armhf] net: phy: bcm7xxx: Fixed indirect MMD operations - net: sched: flower: protect fl_walk() with rcu - net: stmmac: fix EEE init issue when paired with EEE capable PHYs - af_unix: fix races in sk_peer_pid and sk_peer_cred accesses - [x86] perf/x86/intel: Update event constraints for ICX - sched/fair: Add ancestors of unthrottled undecayed cfs_rq - sched/fair: Null terminate buffer when updating tunable_scaling - [armhf] hwmon: (occ) Fix P10 VRM temp sensors - [x86] kvm: fix objtool relocation warning - nvme: add command id quirk for apple controllers - elf: don't use MAP_FIXED_NOREPLACE for elf interpreter mappings - driver core: fw_devlink: Improve handling of cyclic dependencies - debugfs: debugfs_create_file_size(): use IS_ERR to check for error - ext4: fix loff_t overflow in ext4_max_bitmap_size() - ext4: fix reserved space counter leakage - ext4: add error checking to ext4_ext_replay_set_iblocks() - ext4: fix potential infinite loop in ext4_dx_readdir() - ext4: flush s_error_work before journal destroy in ext4_fill_super - HID: u2fzero: ignore incomplete packets without data (Closes: #994535) - net: udp: annotate data race around udp_sk(sk)->corkflag - usb: hso: remove the bailout parameter - HID: betop: fix slab-out-of-bounds Write in betop_probe - netfilter: ipset: Fix oversized kvmalloc() calls - mm: don't allow oversized kvmalloc() calls - HID: usbhid: free raw_report buffers in usbhid_stop - [x86] crypto: aesni - xts_crypt() return if walk.nbytes is 0 - [x86] KVM: x86: Handle SRCU initialization failure during page track init - netfilter: conntrack: serialize hash resizes and cleanups - netfilter: nf_tables: Fix oversized kvmalloc() calls - [amd64] HID: amd_sfh: Fix potential NULL pointer dereference - take 2 https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.11 - [arm64,armhf] spi: rockchip: handle zero length transfers without timing out - afs: Add missing vnode validation checks - nfsd: back channel stuck in SEQ4_STATUS_CB_PATH_DOWN - btrfs: replace BUG_ON() in btrfs_csum_one_bio() with proper error handling - btrfs: fix mount failure due to past and transient device flush error - net: mdio: introduce a shutdown method to mdio device drivers - xen-netback: correct success/error reporting for the SKB-with-fraglist case - [sparc64] fix pci_iounmap() when CONFIG_PCI is not set - scsi: sd: Free scsi_disk device via put_device() - [arm*] usb: dwc2: check return value after calling platform_get_resource() - Xen/gntdev: don't ignore kernel unmapping error - swiotlb-xen: ensure to issue well-formed XENMEM_exchange requests - nvme-fc: update hardware queues before using them - nvme-fc: avoid race between time out and tear down - [arm64] thermal/drivers/tsens: Fix wrong check for tzd in irq handlers - scsi: ses: Retry failed Send/Receive Diagnostic commands - [arm64,armhf] irqchip/gic: Work around broken Renesas integration - smb3: correct smb3 ACL security descriptor - [x86] insn, tools/x86: Fix undefined behavior due to potential unaligned accesses - io_uring: allow conditional reschedule for intensive iterators - block: don't call rq_qos_ops->done_bio if the bio isn't tracked - KVM: do not shrink halt_poll_ns below grow_start - [x86] KVM: x86: reset pdptrs_from_userspace when exiting smm - [x86] kvm: x86: Add AMD PMU MSRs to msrs_to_save_all[] - [x86] KVM: x86: nSVM: restore int_vector in svm_clear_vintr - [x86] perf/x86: Reset destroy callback on event init failure - libata: Add ATA_HORKAGE_NO_NCQ_ON_ATI for Samsung 860 and 870 SSD. - Revert "brcmfmac: use ISO3166 country code and 0 rev as fallback" - [armhf] Revert "ARM: imx6q: drop of_platform_default_populate() from init_machine" https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.12 - usb: cdc-wdm: Fix check for WWAN - [arm64,armhf] usb: chipidea: ci_hdrc_imx: Also search for 'phys' phandle - usb: gadget: f_uac2: fixed EP-IN wMaxPacketSize - USB: cdc-acm: fix racy tty buffer accesses - USB: cdc-acm: fix break reporting - usb: typec: tcpm: handle SRC_STARTUP state if cc changes - [x86] usb: typec: tipd: Remove dependency on "connector" child fwnode - drm/amdgpu: During s0ix don't wait to signal GFXOFF - drm/nouveau/kms/tu102-: delay enabling cursor until after assign_windows - drm/nouveau/ga102-: support ttm buffer moves via copy engine - [x86] drm/i915: Fix runtime pm handling in i915_gem_shrink - [x86] drm/i915: Extend the async flip VT-d w/a to skl/bxt - xen/privcmd: fix error handling in mmap-resource processing - [arm64] mmc: meson-gx: do not use memcpy_to/fromio for dram-access-quirk - ovl: fix missing negative dentry check in ovl_rename() - ovl: fix IOCB_DIRECT if underlying fs doesn't support direct IO - nfsd: fix error handling of register_pernet_subsys() in init_nfsd() - nfsd4: Handle the NFSv4 READDIR 'dircount' hint being zero - SUNRPC: fix sign error causing rpcsec_gss drops - xen/balloon: fix cancelled balloon action - [armhf] dts: omap3430-sdp: Fix NAND device node - scsi: ufs: core: Fix task management completion - [riscv64] Flush current cpu icache before other cpus - [armhf] bus: ti-sysc: Add break in switch statement in sysc_init_soc() - iwlwifi: mvm: Fix possible NULL dereference - [arm64] soc: qcom: mdt_loader: Drop PT_LOAD check on hash segment - [armhf] dts: imx: Add missing pinctrl-names for panel on M53Menlo - [armhf] dts: imx: Fix USB host power regulator polarity on M53Menlo - [amd64] PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus - iwlwifi: pcie: add configuration of a Wi-Fi adapter on Dell XPS 15 - netfilter: conntrack: fix boot failure with nf_conntrack.enable_hooks=1 - netfilter: nf_tables: add position handle in event notification - netfilter: nf_tables: reverse order in rule replacement expansion - [armel,armhf] bpf, arm: Fix register clobbering in div/mod implementation - [armhf] soc: ti: omap-prm: Fix external abort for am335x pruss - bpf: Fix integer overflow in prealloc_elems_and_freelist() (CVE-2021-41864) - net/mlx5e: IPSEC RX, enable checksum complete - net/mlx5e: Keep the value for maximum number of channels in-sync - net/mlx5: E-Switch, Fix double allocation of acl flow counter - net/mlx5: Force round second at 1PPS out start time - net/mlx5: Avoid generating event after PPS out in Real time mode - net/mlx5: Fix length of irq_index in chars - net/mlx5: Fix setting number of EQs of SFs - net/mlx5e: Fix the presented RQ index in PTP stats - phy: mdio: fix memory leak - net_sched: fix NULL deref in fifo_set_limit() - [arm64] net: mscc: ocelot: fix VCAP filters remaining active after being deleted - [arm64,armhf] net: stmmac: dwmac-rk: Fix ethernet on rk3399 based devices - [mips*] Revert "add support for buggy MT7621S core detection" - netfilter: nf_tables: honor NLM_F_CREATE and NLM_F_EXCL in event notification - [i386] ptp_pch: Load module automatically if ID matches - [armhf] dts: imx: change the spi-nor tx - [arm64] dts: imx8: change the spi-nor tx - [armhf] imx6: disable the GIC CPU interface before calling stby-poweroff sequence - [x86] drm/i915/audio: Use BIOS provided value for RKL HDA link - [x86] drm/i915/jsl: Add W/A 1409054076 for JSL - [x86] drm/i915/tc: Fix TypeC port init/resume time sanitization - [x86] drm/i915/bdb: Fix version check - netfs: Fix READ/WRITE confusion when calling iov_iter_xarray() - afs: Fix afs_launder_page() to set correct start file position - net: bridge: use nla_total_size_64bit() in br_get_linkxstats_size() - net: bridge: fix under estimation in br_get_linkxstats_size() - net/sched: sch_taprio: properly cancel timer from taprio_destroy() - net: sfp: Fix typo in state machine debug string - net: pcs: xpcs: fix incorrect CL37 AN sequence - netlink: annotate data races around nlk->bound - drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume - [armhf] bus: ti-sysc: Use CLKDM_NOAUTO for dra7 dcan1 for errata i893 - [arm64,armhf] drm/sun4i: dw-hdmi: Fix HDMI PHY clock setup - drm/nouveau: avoid a use-after-free when BO init fails - drm/nouveau/kms/nv50-: fix file release memory leak - drm/nouveau/debugfs: fix file release memory leak - net: pcs: xpcs: fix incorrect steps on disable EEE - net: stmmac: trigger PCS EEE to turn off on link down - [amd64,arm64] gve: Correct available tx qpl check - [amd64,arm64] gve: Avoid freeing NULL pointer - [amd64,arm64] gve: Properly handle errors in gve_assign_qpl - rtnetlink: fix if_nlmsg_stats_size() under estimation - [amd64,arm64] gve: fix gve_get_stats() - [amd64,arm64] gve: report 64bit tx_bytes counter from gve_handle_report_stats() - i40e: fix endless loop under rtnl - i40e: Fix freeing of uninitialized misc IRQ vector - iavf: fix double unlock of crit_lock - net: prefer socket bound to interface when not in VRF - [powerpc*] iommu: Report the correct most efficient DMA mask for PCI devices - i2c: acpi: fix resource leak in reconfiguration device addition - [riscv64] explicitly use symbol offsets for VDSO - [riscv64] vdso: Refactor asm/vdso.h - [riscv64] vdso: Move vdso data page up front - [riscv64] vdso: make arch_setup_additional_pages wait for mmap_sem for write killable - [s390x] bpf, s390: Fix potential memory leak about jit_data - [riscv64] Include clone3() on rv32 - scsi: iscsi: Fix iscsi_task use after free - [powerpc*] bpf: Fix BPF_MOD when imm == 1 - [powerpc*] bpf: Fix BPF_SUB when imm == 0x80000000 - [powerpc*] 64s: fix program check interrupt emergency stack path - [powerpc*] traps: do not enable irqs in _exception - [powerpc*] 64s: Fix unrecoverable MCE calling async handler from NMI - [powerpc*] pseries/eeh: Fix the kdump kernel crash during eeh_pseries_init - [i386] x86/platform/olpc: Correct ifdef symbol to intended CONFIG_OLPC_XO15_SCI - [x86] fpu: Restore the masking out of reserved MXCSR bits - [x86] entry: Correct reference to intended CONFIG_64_BIT - [x86] hpet: Use another crystalball to evaluate HPET usability - [arm64,armhf] dsa: tag_dsa: Fix mask for trunked packets [ Ben Hutchings ] * debian/.gitignore: Ignore debian/tests/control again * integrity: Drop "MODSIGN: load blacklist from MOKx" as redundant after 5.13 * tools/perf: Fix warning introduced by "tools/perf: pmu-events: Fix reproducibility" * debian/rules.real: Stop invoking obsolete headers_check target * libcpupower: Update symbols file for changes in 5.13.9-1~exp1 [ John Paul Adrian Glaubitz ] * [alpha] Re-enable CONFIG_EISA which was disabled upstream by accident [ Salvatore Bonaccorso ] * Bump ABI to 3 * mm/secretmem: Fix NULL page->mapping dereference in page_is_secretmem() (Closes: #996175) [ Aurelien Jarno ] * [riscv64] Improve HiFive Unmatched support: enable SENSORS_LM90. -- Salvatore Bonaccorso Thu, 14 Oct 2021 08:39:01 +0200 linux (5.14.9-2) unstable; urgency=medium * [amd64] Unset AMD_MEM_ENCRYPT_ACTIVE_BY_DEFAULT. Do not activate AMD Secure Memory Encryption (SME) by default, until AMDGPU related incompatibilities are fixed. (Closes: #994453) -- Salvatore Bonaccorso Sun, 03 Oct 2021 22:14:52 +0200 linux (5.14.9-1) unstable; urgency=medium * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.7 - [amd64] net: stmmac: fix MAC not working when system resume back with WoL active - [amd64,arm64] swiotlb-xen: avoid double free - swiotlb-xen: fix late init retry - [amd64] xen: reset legacy rtc flag for PV domU - [amd64] xen: fix usage of pmd_populate in mremap for pv guests - [arm64] sve: Use correct size when reinitialising SVE state - PCI: Add AMD GPU multi-function power dependencies - drm/amd/display: dsc mst 2 4K displays go dark with 2 lane HBR3 - drm/amd/display: Fix white screen page fault for gpuvm - drm/amd/amdgpu: Increase HWIP_MAX_INSTANCE to 10 - drm/amdgpu: use IS_ERR for debugfs APIs - drm/amdgpu: fix use after free during BO move - drm/amdgpu: add amdgpu_amdkfd_resume_iommu - drm/amdgpu: move iommu_resume before ip init/resume - drm/radeon: pass drm dev radeon_agp_head_init directly - io_uring: allow retry for O_NONBLOCK if async is supported - [x86] drm/i915/dp: Use max params for panels < eDP 1.4 - [armhf] drm/etnaviv: return context from etnaviv_iommu_context_get - [armhf] drm/etnaviv: put submit prev MMU context when it exists - [armhf] drm/etnaviv: stop abusing mmu_context as FE running marker - [armhf] drm/etnaviv: keep MMU context across runtime suspend/resume - [armhf] drm/etnaviv: exec and MMU state is lost when resetting the GPU - [armhf] drm/etnaviv: fix MMU context leak on GPU reset - [armhf] drm/etnaviv: reference MMU context when setting up hardware state - [armhf] drm/etnaviv: add missing MMU context put when reaping MMU mapping - [s390x] sclp: fix Secure-IPL facility detection - net: qrtr: revert check in qrtr_endpoint_post() (Closes: #995491) - [x86] pat: Pass valid address to sanitize_phys() - [x86] mm: Fix kern_addr_valid() to cope with existing but not present entries - x86/mce: Avoid infinite loop for copy from user recovery - tipc: fix an use-after-free issue in tipc_recvmsg - net: remove the unnecessary check in cipso_v4_doi_free - net/{mlx5|nfp|bnxt}: Remove unnecessary RTNL lock assert - net/l2tp: Fix reference count leak in l2tp_udp_recv_core - r6040: Restore MDIO clock frequency after MAC reset - tipc: increase timeout in tipc_sk_enqueue() - [arm64] drm/rockchip: cdn-dp-core: Make cdn_dp_core_resume __maybe_unused - rtc: cmos: Disable irq around direct invocation of cmos_interrupt() - [x86] drm/i915/dp: return proper DPRX link training result - net/mlx5: FWTrace, cancel work on alloc pd error flow - net/mlx5: Fix potential sleeping in atomic context - net: stmmac: fix system hang caused by eee_ctrl_timer during suspend/resume - igc: fix tunnel offloading - nvme-tcp: fix io_work priority inversion - [powerpc*] 64s: system call scv tabort fix for corrupt irq soft-mask state - events: Reuse value read using READ_ONCE instead of re-reading it - vhost_net: fix OoB on sendmsg() failure. - net/af_unix: fix a data-race in unix_dgram_poll - [arm64,armhf] net: dsa: destroy the phylink instance on any error in dsa_slave_phy_setup - tcp: fix tp->undo_retrans accounting in tcp_sacktag_one() - qed: Handle management FW error - udp_tunnel: Fix udp_tunnel_nic work-queue type - dt-bindings: arm: Fix Toradex compatible typo - [powerpc*] KVM: PPC: Book3S HV: Tolerate treclaim. in fake-suspend mode changing registers - [powerpc*] 64s: system call rfscv workaround for TM bugs - [powerpc*] mce: Fix access error in mce handler - [s390x] pci_mmio: fully validate the VMA before calling follow_pte() - bnxt_en: make bnxt_free_skbs() safe to call after bnxt_free_mem() - [arm64] net: hns3: pad the short tunnel frame before sending to hardware - [arm64] net: hns3: change affinity_mask to numa node range - [arm64] net: hns3: disable mac in flr process - [arm64] net: hns3: fix the timing issue of VF clearing interrupt sources - net: stmmac: platform: fix build warning when with !CONFIG_PM_SLEEP - [x86] Drivers: hv: vmbus: Fix kernel crash upon unbinding a device from uio_hv_generic driver - net/mlx5e: Fix mutual exclusion between CQE compression and HW TS - ice: Correctly deal with PFs that do not support RDMA - [arm64] net: hns3: fix the exception when query imp info - nvme: avoid race in shutdown namespace removal - blkcg: fix memory leak in blk_iolatency_init - [arm64,armhf] net: dsa: flush switchdev workqueue before tearing down CPU/DSA ports - dt-bindings: mtd: gpmc: Fix the ECC bytes vs. OOB bytes equation - PCI: Add ACS quirks for NXP LX2xx0 and LX2xx2 platforms - fuse: fix use after free in fuse_read_interrupt() - [arm64,armhf] PCI: tegra: Fix OF node reference leak - [armhf] mfd: Don't use irq_create_mapping() to resolve a mapping - [riscv64] fix the global name pfn_base confliction error - [arm64] KVM: Make hyp_panic() more robust when protected mode is enabled - tracing/probes: Reject events which have the same name of existing one - PCI: Add ACS quirks for Cavium multi-function devices - watchdog: Start watchdog in watchdog_set_last_hw_keepalive only if appropriate - Set fc_nlinfo in nh_create_ipv4, nh_create_ipv6 - flow: fix object-size-mismatch warning in flowi{4,6}_to_flowi_common() - net: usb: cdc_mbim: avoid altsetting toggling for Telit LN920 - block, bfq: honor already-setup queue merges - [i386] PCI: ibmphp: Fix double unmap of io_mem - loop: reduce the loop_ctl_mutex scope - ethtool: Fix an error code in cxgb2.c - net: phylink: add suspend/resume support - mfd: axp20x: Update AXP288 volatile ranges - PCI: of: Don't fail devm_pci_alloc_host_bridge() on missing 'ranges' - netfilter: nft_ct: protect nft_ct_pcpu_template_refcnt with mutex - [arm64] KVM: Restrict IPA size to maximum 48 bits on 4K and 16K page size - PCI: Fix pci_dev_str_match_path() alloc while atomic bug - mtd: mtdconcat: Judge callback existence based on the master - mtd: mtdconcat: Check _read, _write callbacks existence before assignment - [arm64] KVM: Fix read-side race on updates to vcpu reset state - [arm64] KVM: Handle PSCI resets before userspace touches vCPU state - PCI/PTM: Remove error message at boot - watchdog: Fix NULL pointer dereference when releasing cdev - mtd: rawnand: cafe: Fix a resource leak in the error handling path of 'cafe_nand_probe()' - [arm64] gpio: mpc8xxx: Fix a resources leak in the error handling path of 'mpc8xxx_probe()' - [arm64] gpio: mpc8xxx: Fix a potential double iounmap call in 'mpc8xxx_probe()' - [arm64] gpio: mpc8xxx: Use 'devm_gpiochip_add_data()' to simplify the code and avoid a leak - io_uring: retry in case of short read on block device - mptcp: fix possible divide by zero - net: hso: add failure handler for add_net_device - [armhf] net: dsa: b53: Fix calculating number of switch ports - [armhf] net: dsa: b53: Set correct number of ports in the DSA struct - mptcp: Only send extra TCP acks in eligible socket states - netfilter: socket: icmp6: fix use-after-scope - fq_codel: reject silly quantum parameters - qlcnic: Remove redundant unlock in qlcnic_pinit_from_rom - iwlwifi: move get pnvm file name to a separate function - iwlwifi: pnvm: Fix a memory leak in 'iwl_pnvm_get_from_fs()' - ip_gre: validate csum_start only on pull - [armhf] net: dsa: b53: Fix IMP port setup on BCM5301x - bnxt_en: fix stored FW_PSID version masks - bnxt_en: Fix asic.rev in devlink dev info command - bnxt_en: Fix possible unintended driver initiated error recovery - ip6_gre: Revert "ip6_gre: add validation for csum_start" - mfd: lpc_sch: Rename GPIOBASE to prevent build error - cxgb3: fix oops on module removal - bnxt_en: Fix error recovery regression - [armhf] net: dsa: bcm_sf2: Fix array overrun in bcm_sf2_num_active_ports() - [s390x] bpf: Fix optimizing out zero-extensions - [s390x] bpf: Fix 64-bit subtraction of the -0x80000000 constant - [s390x] bpf: Fix branch shortening during codegen pass https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.8 - PCI: pci-bridge-emul: Add PCIe Root Capabilities Register - [arm64] PCI: aardvark: Fix reporting CRS value - console: consume APC, DM, DCS - [x86] staging: rtl8192u: Fix bitwise vs logical operator in TranslateRxSignalStuff819xUsb() - coredump: fix memleak in dump_vma_snapshot() - [arm64] RDMA/hns: Enable stash feature of HIP09 - RDMA/mlx5: Fix xlt_chunk_align calculation - dmaengine: acpi: Avoid comparison GSI with Linux vIRQ - staging: rtl8723bs: fix wpa_set_auth_algs() function - [armhf] thermal/drivers/exynos: Fix an error code in exynos_tmu_probe() - 9p/trans_virtio: Remove sysfs file on probe failure - prctl: allow to setup brk for et_dyn executables - nilfs2: use refcount_dec_and_lock() to fix potential UAF - profiling: fix shift-out-of-bounds bugs - PM: sleep: core: Avoid setting power.must_resume to false - ceph: cancel delayed work instead of flushing on mdsc teardown - platform/chrome: sensorhub: Add trace events for sample - platform/chrome: cros_ec_trace: Fix format warnings - [s390x] entry: make oklabel within CHKSTG macro local - SUNRPC: don't pause on incomplete allocation - init: move usermodehelper_enable() to populate_rootfs() - thermal/core: Fix thermal_cooling_device_register() prototype - drivers: base: cacheinfo: Get rid of DEFINE_SMP_CALL_CACHE_FUNCTION() - [amd64] iommu/amd: Relocate GAMSup check to early_enable_iommus - [amd64] iommu/vt-d: Fix PASID leak in intel_svm_unbind_mm() - [amd64] iommu/vt-d: Fix a deadlock in intel_svm_drain_prq() - [arm64] mm: limit linear region to 51 bits for KVM in nVHE mode - drm/ttm: Fix a deadlock if the target BO is not idle during swap - of: property: Disable fw_devlink DT support for X86 - [riscv64] dts: microchip: mpfs-icicle: Fix serial console - [arm64,armhf] ASoC: audio-graph: respawn Platform Support - [x86] ACPI: PM: s2idle: Run both AMD and Microsoft methods if both are supported - ceph: fix memory leak on decode error in ceph_handle_caps - ceph: request Fw caps before updating the mtime in ceph_write_iter - ceph: remove the capsnaps when removing caps - ceph: lockdep annotations for try_nonblocking_invalidate - [s390x] unwind: use current_frame_address() to unwind current task - btrfs: update the bdev time directly when closing - btrfs: delay blkdev_put until after the device remove - btrfs: fix lockdep warning while mounting sprout fs - nilfs2: fix memory leak in nilfs_sysfs_create_device_group - nilfs2: fix NULL pointer in nilfs_##name##_attr_release - nilfs2: fix memory leak in nilfs_sysfs_create_##name##_group - nilfs2: fix memory leak in nilfs_sysfs_delete_##name##_group - nilfs2: fix memory leak in nilfs_sysfs_create_snapshot_group - nilfs2: fix memory leak in nilfs_sysfs_delete_snapshot_group - drm/amdgpu: Fixes to returning VBIOS RAS EEPROM address - drm/amdgpu: fix fdinfo race with process exit - [arm64,armhf] pwm: rockchip: Don't modify HW state in .remove() callback - [armhf] pwm: stm32-lp: Don't modify HW state in .remove() callback - nvmet: fixup buffer overrun in nvmet_subsys_attr_serial() - block: genhd: don't call blkdev_show() with major_names_lock held - blk-throttle: fix UAF by deleteing timer in blk_throtl_exit() - blk-mq: allow 4x BLK_MAX_REQUEST_COUNT at blk_plug for multiple_queues - sched/idle: Make the idle timer expire in hard interrupt context - cifs: properly invalidate cached root handle when closing it - io_uring: fix off-by-one in BUILD_BUG_ON check of __REQ_F_LAST_BIT - selinux,smack: fix subjective/objective credential use mixups - drm/nouveau/nvkm: Replace -ENOSYS with -ENODEV https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.9 - mm, hwpoison: add is_free_buddy_page() in HWPoisonHandlable() - ocfs2: drop acl cache for directories too - mm/debug: sync up MR_CONTIG_RANGE and MR_LONGTERM_PIN - mm: fix uninitialized use in overcommit_policy_handler - usb: gadget: u_audio: EP-OUT bInterval in fback frequency - [arm*] usb: dwc2: gadget: Fix ISOC flow for BDMA and Slave - [arm*] usb: dwc2: gadget: Fix ISOC transfer complete handling for DDMA - [armhf] usb: musb: tusb6010: uninitialized data in tusb_fifo_write_unaligned() - cifs: Not to defer close on file when lock is set - cifs: Fix soft lockup during fsstress - cifs: fix incorrect check for null pointer in header_assemble - [xen] x86: fix PV trap handling on secondary processors - usb-storage: Add quirk for ScanLogic SL11R-IDE older than 2.6c - USB: serial: cp210x: add ID for GW Instek GDM-834x Digital Multimeter - USB: cdc-acm: fix minor-number release - [arm*] binder: make sure fd closes complete - [arm*] binder: fix freeze race - [arm64] usb: isp1760: do not sleep in field register poll - Re-enable UAS for LaCie Rugged USB3-FW with fk quirk - [arm64,armhf] usb: dwc3: core: balance phy init and exit - usb: core: hcd: Add support for deferring roothub registration - USB: serial: mos7840: remove duplicated 0xac24 device ID - USB: serial: option: add Telit LN920 compositions - USB: serial: option: remove duplicate USB device ID - USB: serial: option: add device id for Foxconn T99W265 - [powerpc*] misc: genwqe: Fixes DMA mask setting - KVM: rseq: Update rseq when processing NOTIFY_RESUME on xfer to KVM guest - erofs: fix up erofs_lookup tracepoint - nexthop: Fix division by zero while replacing a resilient group - btrfs: prevent __btrfs_dump_space_info() to underflow its free space - xhci: Set HCD flag to defer primary roothub registration - [arm64] serial: mvebu-uart: fix driver's tx_empty callback - scsi: sd_zbc: Ensure buffer size is aligned to SECTOR_SIZE - net: hso: fix muxed tty registration - [amd64] platform/x86: amd-pmc: Increase the response register timeout - [arm64] Restore forced disabling of KPTI on ThunderX - [arm64] Mitigate MTE issues with str{n}cmp() - [x86] comedi: Fix memory leak in compat_insnlist() - afs: Fix page leak - afs: Fix incorrect triggering of sillyrename on 3rd-party invalidation - afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server - afs: Fix updating of i_blocks on file/dir extension - virtio-net: fix pages leaking when building skb in big mode - [arm64] enetc: Fix illegal access when reading affinity_hint - [arm64] enetc: Fix uninitialized struct dim_sample field usage - [arm64,armhf] net: dsa: tear down devlink port regions when tearing down the devlink port on error - napi: fix race inside napi_enable - bnxt_en: Fix TX timeout when TX ring size is set to the smallest - [arm64] net: hns3: fix change RSS 'hfunc' ineffective issue - [arm64] net: hns3: fix inconsistent vf id print - [arm64] net: hns3: fix misuse vf id and vport id in some logs - [arm64] net: hns3: check queue id range before using - [arm64] net: hns3: check vlan id before using it - [arm64] net: hns3: fix a return value error in hclge_get_reset_status() - net/smc: add missing error check in smc_clc_prfx_set() - net/smc: fix 'workqueue leaked lock' in smc_conn_abort_work - [arm64,armhf] net: dsa: fix dsa_tree_setup error path - [arm64,armhf] net: dsa: don't allocate the slave_mii_bus using devres - spi: Revert modalias changes - [s390x] qeth: fix NULL deref in qeth_clear_working_pool_list() - gpiolib: acpi: Make set-debounce-timeout failures non fatal - qed: rdma - don't wait for resources under hw error recovery flow - mptcp: ensure tx skbs always have the MPTCP ext - nexthop: Fix memory leaks in nexthop notification chain listeners - [arm64] net: mscc: ocelot: fix forwarding from BLOCKING ports remaining enabled - net/mlx4_en: Don't allow aRFS for encapsulated packets - atlantic: Fix issue in the pm resume flow. - scsi: iscsi: Adjust iface sysfs attr detection - scsi: target: Fix the pgr/alua_support_store functions - [x86] tty: synclink_gt: rename a conflicting function name - [x86] fault: Fix wrong signal when vsyscall fails with pkey - nvme-tcp: fix incorrect h2cdata pdu offset accounting - nvme: keep ctrl->namespaces ordered - thermal/core: Potential buffer overflow in thermal_build_list_of_policies() - cifs: fix a sign extension bug - scsi: sd_zbc: Support disks with more than 2**32 logical blocks - scsi: ufs: Revert "Utilize Transfer Request List Completion Notification Register" - scsi: ufs: Retry aborted SCSI commands instead of completing these successfully - scsi: ufs: core: Unbreak the reset handler - scsi: qla2xxx: Restore initiator in dual mode - scsi: lpfc: Use correct scnprintf() limit - [arm64,armhf] irqchip/gic-v3-its: Fix potential VPE leak on error - md: fix a lock order reversal in md_alloc - [x86] asm: Fix SETZ size enqcmds() build failure - io_uring: fix race between poll completion and cancel_hash insertion - io_uring: fix missing set of EPOLLONESHOT for CQ ring overflow - io_uring: put provided buffer meta data under memcg accounting - io_uring: don't punt files update to io-wq unconditionally - blktrace: Fix uaf in blk_trace access after removing by sysfs - net: phylink: Update SFP selected interface on advertising changes - net: stmmac: allow CSR clock of 300MHz - blk-mq: avoid to iterate over stale request - ipv6: delay fib6_sernum increase in fib6_add - [x86] cpufreq: intel_pstate: Override parameters if HWP forced by BIOS - bpf: Add oversize check before call kvcalloc() - xen/balloon: use a kernel thread instead a workqueue - nvme-multipath: fix ANA state updates when a namespace is not present - nvme-rdma: destroy cm id before destroy qp to avoid use after free - amd/display: downgrade validation failure log level - drm/ttm: fix type mismatch error on sparc64 - block: check if a profile is actually registered in blk_integrity_unregister - block: flush the integrity workqueue in blk_integrity_unregister - blk-cgroup: fix UAF by grabbing blkcg lock before destroying blkg pd - compiler.h: Introduce absolute_pointer macro - qnx4: avoid stringop-overread errors - drm/amd/display: Fix unstable HPCP compliance on Chrome Barcelo - drm/amd/display: Link training retry fix for abort case - amd/display: enable panel orientation quirks - [arm64] Mark __stack_chk_guard as __ro_after_init - net: 6pack: Fix tx timeout and slot time - [arm64] spi: Fix tegra20 build with CONFIG_PM=n - [arm*] Revert drm/vc4 hdmi runtime PM changes - [x86] setup: Call early_reserve_memory() earlier - [x86] thermal/drivers/int340x: Do not set a wrong tcc offset on resume - [armhf] irqchip/armada-370-xp: Fix ack/eoi breakage - [arm64] add MTE supported check to thread switching and syscall entry/exit - USB: serial: cp210x: fix dropped characters with CP2102 - software node: balance refcount for managed software nodes - xen/balloon: fix balloon kthread freezing - qnx4: work around gcc false positive warning bug - nvmet: fix a width vs precision bug in nvmet_subsys_attr_serial_show() - usb: gadget: f_uac2: Add missing companion descriptor for feedback EP - usb: gadget: f_uac2: Populate SS descriptors' wBytesPerInterval [ Salvatore Bonaccorso ] * Bump ABI to 2 * ext4: limit the number of blocks in one ADD_RANGE TLV (Closes: #995425) -- Salvatore Bonaccorso Sun, 03 Oct 2021 14:09:38 +0200 linux (5.14.6-3) unstable; urgency=medium [ Salvatore Bonaccorso ] * ethtool: Fix rxnfc copy to user buffer overflow (Closes: #995109) * debian/bin/gencontrol.py: Fix under-indented line triggering pycodestyle problem. * [armhf] dts: sun7i: A20-olinuxino-lime2: Fix ethernet phy-mode [ John Paul Adrian Glaubitz ] * [ia64] Set CONFIG_CRYPTO_ZSTD=y to force CONFIG_ZSTD_COMPRESS=y * [ia64] Drop udebs for legacy IDE support, removed upstream * [m68k] Drop udebs for legacy IDE support, removed upstream * [sh4] Set CONFIG_CC_OPTIMIZE_FOR_SIZE=y to reduce image size -- Salvatore Bonaccorso Tue, 28 Sep 2021 06:29:40 +0200 linux (5.14.6-2) unstable; urgency=medium * io_uring: ensure symmetry in handling iter types in loop_rw_iter() (CVE-2021-41073) -- Salvatore Bonaccorso Sun, 19 Sep 2021 10:49:04 +0200 linux (5.14.6-1) unstable; urgency=medium * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.4 - locking/mutex: Fix HANDOFF condition - regmap: fix the offset of register error log - sched/deadline: Fix reset_on_fork reporting of DL tasks - power: supply: axp288_fuel_gauge: Report register-address on readb / writeb errors - sched/deadline: Fix missing clock update in migrate_task_rq_dl() - rcu/tree: Handle VM stoppage in stall detection - [x86] EDAC/mce_amd: Do not load edac_mce_amd module on guests - posix-cpu-timers: Force next expiration recalc after itimer reset - hrtimer: Avoid double reprogramming in __hrtimer_start_range_ns() - hrtimer: Ensure timerfd notification for HIGHRES=n - udf: Check LVID earlier - udf: Fix iocharset=utf8 mount option - isofs: joliet: Fix iocharset=utf8 mount option - bcache: add proper error unwinding in bcache_device_init - nbd: add the check to prevent overflow in __nbd_ioctl() - blk-throtl: optimize IOPS throttle for large IO scenarios - nvme-tcp: don't update queue count when failing to set io queues - nvme-rdma: don't update queue count when failing to set io queues - nvmet: pass back cntlid on successful completion - [s390x] cio: add dev_busid sysfs entry for each subchannel - [s390x] zcrypt: fix wrong offset index for APKA master key valid state - libata: fix ata_host_start() - sched/topology: Skip updating masks for non-online nodes - [x86] crypto: qat - do not ignore errors from enable_vf2pf_comms() - [x86] crypto: qat - handle both source of interrupt in VF ISR - [x86] crypto: qat - fix reuse of completion variable - [x86] crypto: qat - fix naming for init/shutdown VF to PF notifications - [x86] crypto: qat - do not export adf_iov_putmsg() - crypto: tcrypt - Fix missing return value check - fcntl: fix potential deadlocks for &fown_struct.lock - fcntl: fix potential deadlock for &fasync_struct.fa_lock - udf_get_extendedattr() had no boundary checks. - io-wq: remove GFP_ATOMIC allocation off schedule out path - [s390x] pci: fix misleading rc in clp_set_pci_fn() - [s390x] debug: keep debug data on resize - [s390x] debug: fix debug area life cycle - [s390x] ap: fix state machine hang after failure to enable irq - [s390x] smp: enable DAT before CPU restart callback is called - sched/debug: Don't update sched_domain debug directories before sched_debug_init() - [arm64] power: supply: cw2015: use dev_err_probe to allow deferred probe - [x86] crypto: x86/aes-ni - add missing error checks in XTS code - sched/numa: Fix is_core_idle() - sched: Fix UCLAMP_FLAG_IDLE setting - rcu: Fix to include first blocked task in stall warning - rcu: Fix stall-warning deadlock due to non-release of rcu_node ->lock - block: return ELEVATOR_DISCARD_MERGE if possible - [arm64] spi: spi-fsl-dspi: Fix issue with uninitialized dma_slave_config - [mips64el,mipsel] irqchip/loongson-pch-pic: Improve edge triggered interrupt support - lib/mpi: use kcalloc in mpi_resize - nbd: do del_gendisk() asynchronously for NBD_DESTROY_ON_DISCONNECT - block: nbd: add sanity check for first_minor - [arm64,armhf] irqchip/gic-v3: Fix priority comparison when non-secure priorities are used - [x86] crypto: qat - use proper type for vf_mask - [powerpc*] tpm: ibmvtpm: Avoid error message when process gets signal while waiting - [x86] mce: Defer processing of early errors - blk-crypto: fix check for too-large dun_bytes - [arm64] regulator: vctrl: Use locked regulator_get_voltage in probe path - [arm64] regulator: vctrl: Avoid lockdep warning in enable/disable ops - [arm64,armhf] drm/panfrost: Fix missing clk_disable_unprepare() on error in panfrost_clk_init() - [x86] drm/gma500: Fix end of loop tests for list_for_each_entry - drm/of: free the right object - bpf: Fix a typo of reuseport map in bpf.h. - bpf: Fix potential memleak and UAF in the verifier. - drm/of: free the iterator object on failure - [amd64,arm64] gve: fix the wrong AdminQ buffer overflow check - [armhf] dts: everest: Add phase corrections for eMMC - i40e: improve locking of mac_filter_hash - gfs2: Fix memory leak of object lsi on error return path - firmware: fix theoretical UAF race with firmware cache and resume - driver core: Fix error return code in really_probe() - media: dvb-usb: fix uninit-value in dvb_usb_adapter_dvb_init - media: dvb-usb: fix uninit-value in vp702x_read_mac_addr - media: dvb-usb: Fix error handling in dvb_usb_i2c_init - net: usb: asix: ax88772: add missing stop - media: go7007: fix memory leak in go7007_usb_probe - media: go7007: remove redundant initialization - [armhf] media: coda: fix frame_mem_ctrl for YUV420 and YVU420 formats - Bluetooth: sco: prevent information leak in sco_conn_defer_accept() - Bluetooth: btusb: Fix a unspported condition to set available debug features - [x86] drm/amdgpu/acp: Make PM domain really work - tcp: seq_file: Avoid skipping sk during tcp_seek_last_pos - [armhf] dts: meson8b: odroidc1: Fix the pwm regulator supply properties - [armhf] dts: meson8b: mxq: Fix the pwm regulator supply properties - [armhf] dts: meson8b: ec100: Fix the pwm regulator supply properties - net/mlx5e: Prohibit inner indir TIRs in IPoIB - net/mlx5e: Block LRO if firmware asks for tunneled LRO - cgroup/cpuset: Fix a partition bug with hotplug - net: cipso: fix warnings in netlbl_cipsov4_add_std - Bluetooth: mgmt: Fix wrong opcode in the response for add_adv cmd - drm/amd/pm: Fix a bug in semaphore double-lock - net/mlx5: Fix missing return value in mlx5_devlink_eswitch_inline_mode_set() - leds: lt3593: Put fwnode in any case during ->probe() - leds: trigger: audio: Add an activate callback to ensure the initial brightness is set - media: em28xx-input: fix refcount bug in em28xx_usb_disconnect - [armhf] media: omap3isp: Fix missing unlock in isp_subdev_notifier_complete() - PCI: PM: Avoid forcing PCI_D0 for wakeup reasons inconsistently - PCI: PM: Enable PME if it can be signaled from D3cold - [arm64] net: dsa: build tag_8021q.c as part of DSA core - debugfs: Return error during {full/open}_proxy_open() on rmmod - Bluetooth: increase BTNAMSIZ to 21 chars to fix potential buffer overflow - [arm64,armhf] net: dsa: stop syncing the bridge mcast_router attribute at join time - [arm64,armhf] net: dsa: don't disable multicast flooding to the CPU even without an IGMP querier - PM: EM: Increase energy calculation precision - [arm64] drm/msm: Fix error return code in msm_drm_init() - [arm64] drm/msm/mdp4: refactor HW revision detection into read_mdp_hw_revision - [arm64] drm/msm/mdp4: move HW revision detection to earlier phase - [arm64] drm/msm/dp: update is_connected status base on sink count at dp_pm_resume() - [arm64] drm/msm/dpu: make dpu_hw_ctl_clear_all_blendstages clear necessary LMs - cgroup/cpuset: Miscellaneous code cleanup - cgroup/cpuset: Fix violation of cpuset locking rule - [x86] ASoC: Intel: Fix platform ID matching - Bluetooth: fix repeated calls to sco_sock_kill - [arm64] drm/msm/dsi: Fix some reference counted resource leaks - [arm64] drm/msm/dp: replug event is converted into an unplug followed by an plug events - net/mlx5: Fix unpublish devlink parameters - [x86] ASoC: rt5682: Properly turn off regulators if wrong device ID - [arm64,armhf] usb: dwc3: meson-g12a: add IRQ check - [arm64,armhf] usb: dwc3: qcom: add IRQ check - mac80211: remove unnecessary NULL check in ieee80211_register_hw() - [armhf] usb: phy: twl6030: add IRQ checks - devlink: Clear whole devlink_flash_notify struct - net: stmmac: fix INTR TBU status affecting irq count statistic - Bluetooth: Move shutdown callback before flushing tx and rx queue - PM: cpu: Make notifier chain use a raw_spinlock_t - mac80211: Fix insufficient headroom issue for AMSDU - locking/local_lock: Add missing owner initialization - lockd: Fix invalid lockowner cast after vfs_test_lock - SUNRPC: Fix a NULL pointer deref in trace_svc_stats_latency() - nfsd4: Fix forced-expiry locking - [arm64] dts: marvell: armada-37xx: Extend PCIe MEM space - [arm*] firmware: raspberrypi: Fix a leak in 'rpi_firmware_get()' - mm/swap: consider max pages in iomap_swapfile_add_extent - Bluetooth: add timeout sanity check to hci_inquiry - [armhf] i2c: s3c2410: fix IRQ check - gfs2: init system threads before freeze lock - rsi: fix error code in rsi_load_9116_firmware() - rsi: fix an error code in rsi_probe() - [x86] ASoC: Intel: Skylake: Leave data as is when invoking TLV IPCs - [x86] ASoC: Intel: Skylake: Fix module resource and format selection - mmc: sdhci: Fix issue with uninitialized dma_slave_config - [arm64,armhf] mmc: dw_mmc: Fix issue with uninitialized dma_slave_config - bpf: Fix possible out of bound write in narrow load handling - [x86] hv_utils: Set the maximum packet size for VSS driver to the length of the receive buffer - CIFS: Fix a potencially linear read overflow - [arm64] i2c: xlp9xx: fix main IRQ check - [arm*] usb: ehci-orion: Handle errors of clk_prepare_enable() in probe - [arm64] tty: serial: fsl_lpuart: fix the wrong mapbase value - iwlwifi: skip first element in the WTAS ACPI table - net/mlx5: Lag, fix multipath lag activation - net/mlx5: Remove all auxiliary devices at the unregister event - net/mlx5e: Fix possible use-after-free deleting fdb rule - net/mlx5: E-Switch, Set vhca id valid flag when creating indir fwd group - net/mlx5e: Use correct eswitch for stack devices with lag - [x86] misc/pvpanic: fix set driver data - ice: fix Tx queue iteration for Tx timestamp enablement - ice: add lock around Tx timestamp tracker flush - ice: restart periodic outputs around time changes - ice: Only lock to update netdev dev_addr - net: phy: marvell10g: fix broken PHY interrupts for anyone after us in the driver probe list - ath6kl: wmi: fix an error code in ath6kl_wmi_sync_point() - ALSA: usb-audio: Add lowlatency module option - atlantic: Fix driver resume flow. - bcma: Fix memory leak for internally-handled cores - brcmfmac: pcie: fix oops on failure to resume and reprobe - ipv6: make exception cache less predictible - ipv4: make exception cache less predictible - net: qrtr: make checks in qrtr_endpoint_post() stricter - sch_htb: Fix inconsistency when leaf qdisc creation fails - net: sched: Fix qdisc_rate_table refcount leak when get tcf_block failed - ipv4: fix endianness issue in inet_rtm_getroute_build_skb() - [x86] ASoC: rt5682: Remove unused variable in rt5682_i2c_remove() - iwlwifi Add support for ax201 in Samsung Galaxy Book Flex2 Alpha - f2fs: guarantee to write dirty data when enabling checkpoint back - time: Handle negative seconds correctly in timespec64_to_ns() - io_uring: limit fixed table size by RLIMIT_NOFILE - io_uring: IORING_OP_WRITE needs hash_reg_file set - io_uring: io_uring_complete() trace should take an integer - io_uring: fail links of cancelled timeouts - bio: fix page leak bio_add_hw_page failure - raid1: ensure write behind bio has less than BIO_MAX_VECS sectors - cifs: Do not leak EDEADLK to dgetents64 for STATUS_USER_SESSION_DELETED - smb3: fix posix extensions mount option - tty: Fix data race between tiocsti() and flush_to_ldisc() - [x86] perf/x86/intel/uncore: Fix IIO cleanup mapping procedure for SNR/ICX - [x86] Revert "KVM: x86: mmu: Add guest physical address check in translate_gpa()" - [s390x] KVM: index kvm->arch.idle_mask by vcpu_idx - [x86] KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted - [x86] KVM: x86: clamp host mapping level to max_level in kvm_mmu_max_mapping_level - [x86] KVM: x86/mmu: Avoid collision with !PRESENT SPTEs in TDP MMU lpage stats - [x86] KVM: VMX: avoid running vmx_handle_exit_irqoff in case of emulation - [x86] KVM: nVMX: Unconditionally clear nested.pi_pending on nested VM-Enter - [arm64] KVM: arm64: Unregister HYP sections from kmemleak in protected mode - [arm64] KVM: arm64: vgic: Resample HW pending state on deactivation - io-wq: check max_worker limits if a worker transitions bound state - md/raid10: Remove unnecessary rcu_dereference in raid10_handle_discard - fuse: truncate pagecache on atomic_o_trunc - fuse: flush extending writes - fuse: wait for writepages in syncfs - fbmem: don't allow too huge resolutions - [amd64] ACPI: PRM: Find PRMT table before parsing it - RDMA/mlx5: Fix number of allocated XLT entries - backlight: pwm_bl: Improve bootloader/kernel device handover - [armel] clk: kirkwood: Fix a clocking boot regression - devlink: Break parameter notification sequence to be before/after unload/load driver https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.5 - Revert "posix-cpu-timers: Force next expiration recalc after itimer reset" - Revert "time: Handle negative seconds correctly in timespec64_to_ns()" https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.6 - io_uring: place fixed tables under memcg limits - io_uring: add ->splice_fd_in checks - io_uring: fix io_try_cancel_userdata race for iowq - io-wq: fix wakeup race when adding new work - io-wq: fix race between adding work and activating a free worker - btrfs: use delalloc_bytes to determine flush amount for shrink_delalloc - btrfs: wake up async_delalloc_pages waiters after submit - btrfs: wait on async extents when flushing delalloc - btrfs: reduce the preemptive flushing threshold to 90% - btrfs: do not do preemptive flushing if the majority is global rsv - btrfs: zoned: fix block group alloc_offset calculation - btrfs: zoned: suppress reclaim error message on EAGAIN - btrfs: fix upper limit for max_inline for page size 64K - btrfs: reset replace target device to allocation state on close - btrfs: zoned: fix double counting of split ordered extent - blk-zoned: allow zone management send operations without CAP_SYS_ADMIN - blk-zoned: allow BLKREPORTZONE without CAP_SYS_ADMIN - [powerpc*] perf/hv-gpci: Fix counter value parsing - xen: fix setting of max_pfn in shared_info - 9p/xen: Fix end of loop tests for list_for_each_entry - ceph: fix dereference of null pointer cf - Input: elan_i2c - reduce the resume time for controller in Whitebox - [armhf] soc: aspeed: lpc-ctrl: Fix boundary check for mmap - [armhf] soc: aspeed: p2a-ctrl: Fix boundary check for mmap - [arm64] Move .hyp.rodata outside of the _sdata.._edata range - [arm64] mm: Fix TLBI vs ASID rollover - [arm64] head: avoid over-mapping in map_memory - [arm64] Do not trap PMSNEVFR_EL1 - iio: ltc2983: fix device probe - [arm64] wcn36xx: Ensure finish scan is not requested before start scan - block: bfq: fix bfq_set_next_ioprio_data() - [x86] power: supply: max17042: handle fails of reading status register - dm crypt: Avoid percpu_counter spinlock contention in crypt_page_alloc() - [x86] crypto: ccp - shutdown SEV firmware on kexec - [x86] VMCI: fix NULL pointer dereference when unmapping queue pair - media: uvc: don't do DMA on stack - media: rc-loopback: return number of emitters rather than error - nvmem: core: fix error handling while validating keepout regions - [s390x] qdio: fix roll-back after timeout on ESTABLISH ccw - [s390x] qdio: cancel the ESTABLISH ccw after timeout - [armhf] Revert "dmaengine: imx-sdma: refine to load context only once" - [armhf] dmaengine: imx-sdma: remove duplicated sdma_load_context - [x86] watchdog: iTCO_wdt: Fix detection of SMI-off case - libata: add ATA_HORKAGE_NO_NCQ_TRIM for Samsung 860 and 870 SSDs - sched: Prevent balance_push() on remote runqueues - f2fs: let's keep writing IOs on SBI_NEED_FSCK - f2fs: fix to do sanity check for sb/cp fields correctly - PCI/portdrv: Enable Bandwidth Notification only if port supports it - PCI: Restrict ASMedia ASM1062 SATA Max Payload Size Supported - PCI: Return ~0 data on pciconfig_read() CAP_SYS_ADMIN failure - [arm64] PCI: xilinx-nwl: Enable the clock through CCF - [arm64] PCI: aardvark: Configure PCIe resources from 'ranges' DT property - [arm64] PCI: aardvark: Fix checking for PIO status - [arm64] PCI: aardvark: Increase polling delay to 1.5s while waiting for PIO response - [arm64] PCI: aardvark: Fix masking and unmasking legacy INTx interrupts - HID: input: do not report stylus battery state as "full" - f2fs: quota: fix potential deadlock - [arm64] pinctrl: armada-37xx: Correct PWM pins definitions - scsi: bsg: Remove support for SCSI_IOCTL_SEND_COMMAND - [arm64,armhf] clk: rockchip: drop GRF dependency for rk3328/rk3036 pll types - [amd64] IB/hfi1: Adjust pkey entry in index 0 - RDMA/iwcm: Release resources if iw_cm module initialization fails - docs: Fix infiniband uverbs minor number - scsi: BusLogic: Use %X for u32 sized integer rather than %lX - [armhf] pinctrl: samsung: Fix pinctrl bank pin count - f2fs: do not submit NEW_ADDR to read node block - f2fs: turn back remapped address in compressed page endio - f2fs: fix wrong checkpoint_changed value in f2fs_remount() - scsi: ufs: Fix memory corruption by ufshcd_read_desc_param() - scsi: ufs: Use DECLARE_COMPLETION_ONSTACK() where appropriate - scsi: ufs: Fix the SCSI abort handler - [powerpc*] cpuidle: pseries: Fixup CEDE0 latency only for POWER10 onwards - [powerpc*] stacktrace: Include linux/delay.h - [arm64] RDMA/hns: Don't overwrite supplied QP attributes - RDMA/mlx5: Delete not-available udata check - [powerpc*] cpuidle: pseries: Mark pseries_idle_proble() as __init - f2fs: reduce the scope of setting fsck tag when de->name_len is zero - xprtrdma: Put rpcrdma_reps before waking the tear-down completion - NFSv4/pNFS: Fix a layoutget livelock loop - NFSv4/pNFS: Always allow update of a zero valued layout barrier - NFSv4/pnfs: The layout barrier indicate a minimal value for the seqid - SUNRPC: Fix potential memory corruption - SUNRPC/xprtrdma: Fix reconnection locking - sunrpc: Fix return value of get_srcport() - scsi: ufs: Fix unsigned int compared with less than zero - scsi: ufshcd: Fix device links when BOOT WLUN fails to probe - [arm64,armhf] pinctrl: single: Fix error return code in pcs_parse_bits_in_pinctrl_entry() - [powerpc*] numa: Consider the max NUMA node for migratable LPAR - scsi: smartpqi: Fix an error code in pqi_get_raid_map() - scsi: qedi: Fix error codes in qedi_alloc_global_queues() - scsi: qedf: Fix error codes in qedf_alloc_global_queues() - f2fs: fix to keep compatibility of fault injection interface - iommu/vt-d: Update the virtual command related registers - [arm64] RDMA/hns: Fix return in hns_roce_rereg_user_mr() - [amd64] HID: amd_sfh: Fix period data field to enable sensor - HID: i2c-hid: Fix Elan touchpad regression - HID: thrustmaster: clean up Makefile and adapt quirks - [arm64] RDMA/hns: Ownerbit mode add control field - [arm64] clk: imx8mm: use correct mux type for clkout path - [arm64,armhf] clk: imx8m: fix clock tree update of TF-A managed clocks - [powerpc*] KVM: PPC: Book3S HV: Fix copy_tofrom_guest routines - [powerpc*] KVM: PPC: Book3S HV Nested: Reflect guest PMU in-use to L0 when guest SPRs are live - [powerpc*] powerpc/perf: Fix the check for SIAR value - [arm64] RDMA/hns: Fix incorrect lsn field - [arm64] RDMA/hns: Bugfix for data type of dip_idx - [arm64] RDMA/hns: Bugfix for the missing assignment for dip_idx - [arm64] RDMA/hns: Bugfix for incorrect association between dip_idx and dgid - [x86] platform/x86: dell-smbios-wmi: Add missing kfree in error-exit from run_smbios_call - [powerpc*] smp: Fix a crash while booting kvm guest with nr_cpus=2 - [powerpc*] smp: Update cpu_core_map on all PowerPc systems - [arm64] RDMA/hns: Fix query destination qpn - [arm64] RDMA/hns: Fix QP's resp incomplete assignment - fscache: Fix cookie key hashing - [powerpc*] KVM: PPC: Fix clearing never mapped TCEs in realmode - f2fs: fix to account missing .skipped_gc_rwsem - f2fs: fix unexpected ENOENT comes from f2fs_map_blocks() - f2fs: fix to unmap pages from userspace process in punch_hole() - f2fs: deallocate compressed pages when error happens - f2fs: should put a page beyond EOF when preparing a write - [mips64el,mipsel] Malta: fix alignment of the devicetree buffer - userfaultfd: prevent concurrent API initialization - [x86] drm/vmwgfx: Fix subresource updates with new contexts - [x86] drm/vmwgfx: Fix some static checker warnings - [arm*] drm/vc4: hdmi: Set HD_CTL_WHOLSMP and HD_CTL_CHALIGN_SET - drm/ttm: Fix multihop assert on eviction. - [armhf] drm/omap: Follow implicit fencing in prepare_fb - drm/amdgpu: Fix amdgpu_ras_eeprom_init() - drm/amdgpu: Fix koops when accessing RAS EEPROM - [arm*] drm: vc4: Fix pixel-wrap issue with DVP teardown - dma-buf: fix dma_resv_test_signaled test_all handling v2 - drm/panel: Fix up DT bindings for Samsung lms397kf04 - [armhf] ASoC: ti: davinci-mcasp: Fix DIT mode support - media: dib8000: rewrite the init prbs logic - [x86] hyperv: fix for unwanted manipulation of sched_clock when TSC marked unstable - PCI: Use pci_update_current_state() in pci_enable_device_flags() - tipc: keep the skb in rcv queue until the whole data is read - net: phy: Fix data type in DP83822 dp8382x_disable_wol() - iio: dac: ad5624r: Fix incorrect handling of an optional regulator. - iavf: do not override the adapter state in the watchdog task - iavf: fix locking of critical sections - video: fbdev: kyro: fix a DoS bug by restricting user input - drm/ast: Disable fast reset after DRAM initial - netlink: Deal with ESRCH error in nlmsg_notify() - [arm64] dts: qcom: Fix usb entries for SA8155p adp board - drm: avoid blocking in drm_clients_info's rcu section - drm: serialize drm_file.master with a new spinlock - drm: protect drm_master pointers in drm_lease.c - rcu: Fix macro name CONFIG_TASKS_RCU_TRACE - igc: Check if num of q_vectors is smaller than max before array access - usb: gadget: u_ether: fix a potential null pointer dereference - [armhf] USB: EHCI: ehci-mv: improve error handling in mv_ehci_enable() - usb: gadget: composite: Allow bMaxPower=0 if self-powered - tty: serial: jsm: hold port lock when reporting modem line changes - [arm64] bus: fsl-mc: fix arg in call to dprc_scan_objects() - [arm64] bus: fsl-mc: fix mmio base address for child DPRCs - [x86] misc/pvpanic-pci: Allow automatic loading - nfp: fix return statement in nfp_net_parse_meta() - ethtool: improve compat ioctl handling - drm/amdgpu: Fix a printing message - [arm64] dts: allwinner: h6: tanix-tx6: Fix regulator node names - video: fbdev: kyro: Error out if 'pixclock' equals zero - ipv4: ip_output.c: Fix out-of-bounds warning in ip_copy_addrs() - flow_dissector: Fix out-of-bounds warnings - [s390x] jump_label: print real address in a case of a jump label bug - [s390x] make PCI mio support a machine flag - serial: 8250: Define RX trigger levels for OxSemi 950 devices - serial: 8250_pci: make setup_port() parameters explicitly unsigned - vt: keyboard.c: make console an unsigned int - Bluetooth: skip invalid hci_sync_conn_complete_evt - workqueue: Fix possible memory leaks in wq_numa_init() - [arm64] drm/msm/a6xx: Fix llcc configuration for a660 gpu - netfilter: nft_compat: use nfnetlink_unicast() - bonding: 3ad: fix the concurrency between __bond_release_one() and bond_3ad_state_machine_handler() - [x86] ASoC: Intel: bytcr_rt5640: Move "Platform Clock" routes to the maps for the matching in-/output - Bluetooth: Fix not generating RPA when required - [armhf] media: imx: imx7-media-csi: Fix buffer return upon stream start failure - media: v4l2-dv-timings.c: fix wrong condition in two for-loops - gfs2: Fix glock recursion in freeze_go_xmote_bh - [arm*] misc: sram: Only map reserved areas in Tegra SYSRAM - [armhf] dts: imx53-ppd: Fix ACHC entry - [arm64] dts: qcom: sdm660: use reg value for memory node - [arm64] nvmem: qfprom: Fix up qfprom_disable_fuse_blowing() ordering - [arm64] net: ethernet: stmmac: Do not use unreachable() in ipq806x_gmac_probe() - [arm64] drm/msm: mdp4: drop vblank get/put from prepare/complete_commit - [arm64] drm/msm/dsi: Fix DSI and DSI PHY regulator config from SDM660 - [x86] thunderbolt: Fix port linking by checking all adapters - [x86] drm/vmwgfx: fix potential UAF in vmwgfx_surface.c - staging: rtl8723bs: fix right side of condition - Bluetooth: schedule SCO timeouts with delayed_work - Bluetooth: avoid circular locks in sco_sock_connect - [arm64] drm/msm/dp: reduce link rate if failed at link training 1 - [arm64] drm/msm/dp: reset aux controller after dp_aux_cmd_fifo_tx() failed. - [arm64] drm/msm/dp: return correct edid checksum after corrupted edid checksum read - [arm64] drm/msm/dp: do not end dp link training until video is ready - net/mlx5: Fix variable type to match 64bit - gpu: drm: amd: amdgpu: amdgpu_i2c: fix possible uninitialized-variable access in amdgpu_i2c_router_select_ddc_port() - mac80211: Fix monitor MTU limit so that A-MSDUs get through - nvme-tcp: don't check blk_mq_tag_to_rq when receiving pdu data - nvme: code command_id with a genctr for use-after-free validation - Bluetooth: Fix handling of LE Enhanced Connection Complete - Bluetooth: Fix race condition in handling NOP command - opp: Don't print an error if required-opps is missing - [sh4] serial: sh-sci: fix break handling for sysrq - iomap: pass writeback errors to the mapping - tcp: enable data-less, empty-cookie SYN with TFO_SERVER_COOKIE_NOT_REQD - locking/rtmutex: Set proper wait context for lockdep - rpc: fix gss_svc_init cleanup on failure - iavf: use mutexes for locking of critical sections - [armhf] hwmon: (pmbus/ibm-cffps) Fix write bits for LED control - [x86] staging: rts5208: Fix get_ms_information() heap buffer size - net: Fix offloading indirect devices dependency on qdisc order creation - gfs2: Don't call dlm after protocol is unmounted - [arm64,armhf] usb: chipidea: host: fix port index underflow and UBSAN complains - lockd: lockd server-side shouldn't set fl_ops - [armhf] drm/exynos: Always initialize mapping in exynos_drm_register_dma() - rtl8xxxu: Fix the handling of TX A-MPDU aggregation - rtw88: use read_poll_timeout instead of fixed sleep - rtw88: wow: build wow function only if CONFIG_PM is on - rtw88: wow: fix size access error of probe request - btrfs: remove racy and unnecessary inode transaction update when using no-holes - btrfs: tree-log: check btrfs_lookup_data_extent return value - soundwire: intel: fix potential race condition during power down - [x86] ASoC: Intel: Skylake: Fix module configuration for KPB and MIXER - [x86] ASoC: Intel: Skylake: Fix passing loadable flag for module - of: Don't allow __of_attached_node_sysfs() without CONFIG_SYSFS - [arm64] mmc: sdhci-of-arasan: Modified SD default speed to 19MHz for ZynqMP - [arm64] mmc: sdhci-of-arasan: Check return value of non-void funtions - mmc: core: Avoid hogging the CPU while polling for busy in the I/O err path - mmc: core: Avoid hogging the CPU while polling for busy for mmc ioctls - mmc: core: Avoid hogging the CPU while polling for busy after I/O writes - mmc: rtsx_pci: Fix long reads when clock is prescaled - mmc: core: Return correct emmc response in case of ioctl error - cifs: fix wrong release in sess_alloc_buffer() failed path - Revert "USB: xhci: fix U1/U2 handling for hardware with XHCI_INTEL_HOST quirk set" - [arm64] usb: dwc3: imx8mp: request irq after initializing dwc3 - [armhf] usb: musb: musb_dsps: request_irq() after initializing musb - usbip: give back URBs for unsent unlink requests during cleanup - usbip:vhci_hcd USB port can get stuck in the disabled state - [arm64,armhf] ASoC: rockchip: i2s: Fix regmap_ops hang - [arm64,armhf] ASoC: rockchip: i2s: Fixup config for DAIFMT_DSP_A/B - ASoC: soc-pcm: protect BE dailink state changes in trigger - nfs: don't atempt blocking locks on nfs reexports - nfsd: fix crash on LOCKT on reexported NFSv3 - iwlwifi: pcie: free RBs during configure - iwlwifi: mvm: Do not use full SSIDs in 6GHz scan - iwlwifi: mvm: fix a memory leak in iwl_mvm_mac_ctxt_beacon_changed - iwlwifi: mvm: avoid static queue number aliasing - iwlwifi: mvm: Fix umac scan request probe parameters - iwlwifi: mvm: fix access to BSS elements - iwlwifi: fw: correctly limit to monitor dump - iwlwifi: mvm: don't schedule the roc_done_wk if it is already running - iwlwifi: mvm: Fix scan channel flags settings - net/mlx5: DR, fix a potential use-after-free bug - net/mlx5: DR, Enable QP retransmission - [arm64] usb: isp1760: fix memory pool initialization - [arm64] usb: isp1760: fix qtd fill length - [arm64] usb: isp1760: write to status and address register - [arm64] usb: isp1760: use the right irq status bit - [arm64] usb: isp1760: otg control register access - parport: remove non-zero check on count - [arm64] wcn36xx: Fix missing frame timestamp for beacon/probe-resp - ath9k: fix OOB read ar9300_eeprom_restore_internal - ath9k: fix sleeping in atomic context - net: fix NULL pointer reference in cipso_v4_doi_free - fix array-index-out-of-bounds in taprio_change - [arm64] net: hns3: clean up a type mismatch warning - printk/console: Check consistent sequence number when handling race in console_unlock() - ovl: fix BUG_ON() in may_delete() when called from ovl_cleanup() - scsi: BusLogic: Fix missing pr_cont() use - scsi: qla2xxx: Changes to support kdump kernel - scsi: qla2xxx: Sync queue idx with queue_pair_map idx - [powerpc*] cpufreq: powernv: Fix init_chip_info initialization in numa=off - [s390x] pv: fix the forcing of the swiotlb - [s390x] topology: fix topology information when calling cpu hotplug notifiers - mm: fix panic caused by __page_handle_poison() - hugetlb: fix hugetlb cgroup refcounting during vma split - mm/memory_hotplug: use "unsigned long" for PFN in zone_for_pfn_range() - mm/hmm: bypass devmap pte when all pfn requested flags are fulfilled - mm/hugetlb: initialize hugetlb_usage in mm_init - mm,vmscan: fix divide by zero in get_scan_count - mm/page_alloc.c: avoid accessing uninitialized pcp page migratetype - mm/mempolicy: fix a race between offset_il_node and mpol_rebind_task - memcg: enable accounting for pids in nested pid namespaces - libnvdimm/pmem: Fix crash triggered when I/O in-flight during unbind - platform/chrome: cros_ec_proto: Send command again when timeout occurs - net: stmmac: Fix overall budget calculation for rxtx_napi - [x86] drm/mgag200: Select clock in PLL update functions - [arm64] drm/msi/mdp4: populate priv->kms in mdp4_kms_init - drm/dp_mst: Fix return code on sideband message failure - [arm64,armhf] drm/panfrost: Make sure MMU context lifetime is not bound to panfrost_priv - drm/amdgpu: Fix BUG_ON assert - drm/amdgpu: Enable S/G for Yellow Carp - drm/amdgpu: Fix a deadlock if previous GEM object allocation fails - [arm64] drm/msm/disp/dpu1: add safe lut config in dpu driver - drm/ttm: Fix ttm_bo_move_memcpy() for subclassed struct ttm_resource - [arm64,armhf] drm/panfrost: Simplify lock_region calculation - [arm64,armhf] drm/panfrost: Use u64 for size in lock_region - [arm64,armhf] drm/panfrost: Clamp lock region to Bifrost minimum [ Vincent Blut ] * [arm64] drivers/bus/fsl-mc: Enable FSL_MC_UAPI_SUPPORT (Closes: #992988) * [arm64] drivers/vfio/fsl-mc: Enable VFIO_FSL_MC as module (Closes: #993000) * [arm64] drivers/firmware: Enable ARM_SCPI_PROTOCOL as module (Closes: #929528) * [arm64] drivers/hwmon: Enable SENSORS_ARM_SCPI as module * [arm64] drivers/mailbox: Enable ARM_MHU, PLATFORM_MHU as modules * [armhf] drivers/input/misc: Enable INPUT_TPS65218_PWRBUTTON as module (Closes: #944518) [ Heiko Thiery ] * [arm64] drivers/regulator: Enable REGULATOR_PCA9450 as module * [arm64] drivers/regulator: Enable REGULATOR_PFUZE100 as module * [arm64] drivers/pci/controller: Enable PCI_IMX6 [ Salvatore Bonaccorso ] * dccp: don't duplicate ccid when cloning dccp sock (CVE-2020-16119) * bnx2x: Fix enabling network interfaces without VFs (Closes: #993948) * Refresh "kbuild: Make the toolchain variables easily overwritable" * Drop "Partially revert "net: socket: implement 64-bit timestamps"" * Set ABI to 1 * [mipsel] bpf, mips: Validate conditional branch offsets (CVE-2021-38300) -- Salvatore Bonaccorso Sat, 18 Sep 2021 20:58:49 +0200 linux (5.14.3-1~exp1) experimental; urgency=medium * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.3 - firmware: dmi: Move product_sku info to the end of the modalias - igmp: Add ip_mc_list lock in ip_check_mc_rcu - Revert "r8169: avoid link-up interrupt issue on RTL8106e if user enables ASPM" - ALSA: usb-audio: Add registration quirk for JBL Quantum 800 - Bluetooth: Add additional Bluetooth part for Realtek 8852AE - Bluetooth: btusb: Make the CSR clone chip force-suspend workaround more generic - xhci: fix even more unsafe memory usage in xhci tracing - xhci: fix unsafe memory usage in xhci tracing - xhci: Fix failure to give back some cached cancelled URBs. - [x86] reboot: Limit Dell Optiplex 990 quirk to early BIOS versions - PCI: Call Max Payload Size-related fixup quirks early -- Salvatore Bonaccorso Sun, 12 Sep 2021 19:17:38 +0200 linux (5.14.2-1~exp1) experimental; urgency=medium * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.2 - ext4: fix race writing to an inline_data file while its xattrs are changing - ext4: fix e2fsprogs checksum failure for mounted filesystem - USB: serial: pl2303: fix GL type detection - USB: serial: cp210x: fix control-characters error handling - USB: serial: cp210x: fix flow-control error handling - HID: usbhid: Fix flood of "control queue full" messages - HID: usbhid: Fix warning caused by 0-length input reports - ALSA: hda/realtek: Quirk for HP Spectre x360 14 amp setup - ALSA: usb-audio: Fix regression on Sony WALKMAN NW-A45 DAC - ALSA: hda/realtek: Workaround for conflicting SSID on ASUS ROG Strix G17 - ALSA: pcm: fix divide error in snd_pcm_lib_ioctl - ALSA: usb-audio: Work around for XRUN with low latency playback - media: stkwebcam: fix memory leak in stk_camera_probe [ Vincent Blut ] * drivers/media/cec: Enable MEDIA_CEC_RC (Closes: #872650) * drivers/hid: Enable various HID drivers as modules (Closes: #988277) * [x86] drivers/platform/chrome: Enable CROS_EC as module and set CROS_EC_PROTO explicitly * [arm64] sound/soc/generic: Enable SND_AUDIO_GRAPH_CARD as module (Closes: #987576) * drivers/net/wireless/mediatek/mt76/mt7915: Enable MT7915E as module (Closes: #993865) * drivers/net/wireless/mediatek/mt76/mt7921: Enable MT7921E as module * drivers/net/wireless/mediatek/mt76/mt7615: Enable MT7615E, MT7663U as modules [ Salvatore Bonaccorso ] * HID: apple: Add missing scan code event for keys handled by hid-apple (Closes: #757356) -- Salvatore Bonaccorso Fri, 10 Sep 2021 00:20:28 +0200 linux (5.14.1-1~exp1) experimental; urgency=medium * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.1 - vt_kdsetmode: extend console locking (CVE-2021-3753) - Bluetooth: btusb: check conditions before enabling USB ALT 3 for WBS - btrfs: fix NULL pointer dereference when deleting device by invalid id (CVE-2021-3739) - Revert "floppy: reintroduce O_NDELAY fix" - fscrypt: add fscrypt_symlink_getattr() for computing st_size - ext4: report correct st_size for encrypted symlinks - f2fs: report correct st_size for encrypted symlinks - ubifs: report correct st_size for encrypted symlinks - net: don't unconditionally copy_from_user a struct ifreq for socket ioctls - audit: move put_tree() to avoid trim_trees refcount underflow and UAF -- Salvatore Bonaccorso Tue, 07 Sep 2021 08:40:13 +0200 linux (5.14-1~exp2) experimental; urgency=medium [ Bastian Blank ] * Fix perf build. * Enable EVM, ENCRYPTED_KEYS. (closes: #993535) * Enable IMA_SIG_TEMPLATE. * Enable AMD_SFH_HID, AMD_PMC. (closes: #992832) * Enable TMPFS_INODE64. (closes: #993641) * Move more into nic-shared-modules. [ Diederik de Haas ] * [arm64] sound/soc/codecs: Enable SND_SOC_RK3328 as module * [arm64,armhf] drivers/input/misc: Enable INPUT_RK805_PWRKEY as module * [arm64,armhf] drivers/pinctrl: Enable PINCTRL_RK805 (Closes: #990536) * [arm64] drivers/mfd: Make MFD_RK808 builtin -- Bastian Blank Sun, 05 Sep 2021 20:51:25 +0200 linux (5.14-1~exp1) experimental; urgency=medium * New upstream release: https://kernelnewbies.org/Linux_5.14 [ Aurelien Jarno ] * [riscv64] Enable KEXEC. * [riscv64] Add initial Microchip Polarfire support: enable SOC_MICROCHIP_POLARFIRE, MMC_SDHCI_PLTFM, MMC_SDHCI_CADENCE and PCIE_MICROCHIP_HOST. * [riscv64] Improve HiFive Unmatched support: enable PCIE_DW_PLAT_HOST and PCIE_FU740. [ Vincent Blut ] * [armhf] drivers/leds: Enable LEDS_PCA963X as module (Closes: #908196) [ Salvatore Bonaccorso ] * net/batman-adv: Enable BATMAN_ADV_BATMAN_V [ Bastian Blank ] * [powerpc*] Disable support for debugging VDSO. -- Bastian Blank Wed, 01 Sep 2021 21:49:53 +0200 linux (5.13.12-1~exp1) experimental; urgency=medium * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.13.10 https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.13.11 https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.13.12 [ Salvatore Bonaccorso ] * net: Enable MPTCP (Closes: #987815) [ Bastian Blank ] * [mips*] Increase RELOCATION_TABLE_SIZE to 0x1c0000. * Enable SECURITY_LANDLOCK, SECURITY_PATH. * Fix external modules build. (closes: #992219) * Force more compressions modules into main installer package. (closes: #992221) * Drop redundant patch for overlay in user namespace. [ Uwe Kleine-König ] * [x86] Enable X86_PLATFORM_DRIVERS_DELL which is needed to keep some Dell specific drivers. (Closes: #992251) -- Bastian Blank Fri, 20 Aug 2021 22:39:29 +0200 linux (5.13.9-1~exp2) experimental; urgency=medium * Fix linux-cpupower installation. -- Bastian Blank Tue, 10 Aug 2021 21:12:41 +0200 linux (5.13.9-1~exp1) experimental; urgency=medium * New upstream release: https://kernelnewbies.org/Linux_5.11 * New upstream release: https://kernelnewbies.org/Linux_5.12 * New upstream release: https://kernelnewbies.org/Linux_5.13 [ Bastian Blank ] * Always build-depend on native libelf-dev. * Specify trusted certs file in package config. * Enable PROC_VMCORE. * Enable SECURITYFS. * Re-enable IMA. (closes: #972459) * [x86] Enable AMD_MEM_ENCRYPT. (closes: #983586, #989040) * Enable UNICODE. (closes: #985689) * Enable CGROUP_MISC. * [x86] Enable PINCTRL_ALDERLAKE, PINCTRL_ELKHARTLAKE, PINCTRL_EMMITSBURG, PINCTRL_JASPERLAKE, PINCTRL_LAKEFIELD. * [amd64] Enable MICROSOFT_MANA. * [arm64] Enable GVE. (closes: #991835) -- Bastian Blank Mon, 09 Aug 2021 18:35:43 +0200 linux (5.10.46-4) unstable; urgency=medium * bpf: Introduce BPF nospec instruction for mitigating Spectre v4 (CVE-2021-34556, CVE-2021-35477) * bpf: Fix leakage due to insufficient speculative store bypass mitigation (CVE-2021-34556, CVE-2021-35477) * bpf: Remove superfluous aux sanitation on subprog rejection * Ignore ABI changes for bpf_offload_dev_create and bpf_verifier_log_write * bpf: Add kconfig knob for disabling unpriv bpf by default * init: Enable BPF_UNPRIV_DEFAULT_OFF (Closes: #990411) * linux-image: Add NEWS entry documenting that unprivileged calls to bpf() are disabled by default in Debian. * bpf: verifier: Allocate idmap scratch in verifier env * bpf: Fix pointer arithmetic mask tightening under state pruning -- Salvatore Bonaccorso Tue, 03 Aug 2021 07:50:50 +0200 linux (5.10.46-3) unstable; urgency=medium * [armhf] Add mdio-aspeed to nic-modules. Thanks to Joel Stanley (Closes: #991262) * Revert "drm/amdgpu/gfx9: fix the doorbell missing when in CGPG issue." (Closes: #990312) * Revert "drm/amdgpu/gfx10: enlarge CP_MEC_DOORBELL_RANGE_UPPER to cover full doorbell." (Closes: #990312) * Input: joydev - prevent use of not validated data in JSIOCSBTNMAP ioctl (CVE-2021-3612) * sctp: validate from_addr_param return (CVE-2021-3655) * sctp: add size validation when walking chunks (CVE-2021-3655) * [s390x] sclp_vt220: fix console name to match device (Closes: #961056) * block: return the correct bvec when checking for gaps * sctp: fix return value check in __sctp_rcv_asconf_lookup -- Salvatore Bonaccorso Wed, 28 Jul 2021 07:55:40 +0200 linux (5.10.46-2) unstable; urgency=medium * swiotlb: manipulate orig_addr when tlb_addr has offset (Closes: #989778) * KVM: do not allow mapping valid but non-reference-counted pages (CVE-2021-22543) * [x86] platform/x86: toshiba_haps: Fix missing newline in pr_debug call in toshiba_haps_notify (Closes: #799193) * seq_file: Disallow extremely large seq buffer allocations (CVE-2021-33909) -- Salvatore Bonaccorso Tue, 20 Jul 2021 14:06:36 +0200 linux (5.10.46-1) unstable; urgency=medium * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.41 - context_tracking: Move guest exit context tracking to separate helpers - context_tracking: Move guest exit vtime accounting to separate helpers - [x86] KVM: Defer vtime accounting 'til after IRQ handling https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.42 - ALSA: hda/realtek: the bass speaker can't output sound on Yoga 9i - ALSA: hda/realtek: Headphone volume is controlled by Front mixer - ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation P340 - ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8 - ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP Zbook G8 - ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP Zbook Fury 15 G8 - ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP Zbook Fury 17 G8 - ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci - ALSA: usb-audio: scarlett2: Improve driver startup messages - cifs: set server->cipher_type to AES-128-CCM for SMB3.0 - NFSv4: Fix a NULL pointer dereference in pnfs_mark_matching_lsegs_return() - iommu/vt-d: Fix sysfs leak in alloc_iommu() - proc: Check /proc/$pid/attr/ writes against file opener - net: hso: fix control-request directions - net/sched: fq_pie: re-factor fix for fq_pie endless loop - net/sched: fq_pie: fix OOB access in the traffic path - netfilter: nft_set_pipapo_avx2: Add irq_fpu_usable() check, fallback to non-AVX2 version - mac80211: assure all fragments are encrypted (CVE-2020-26147) - mac80211: prevent mixed key and fragment cache attacks (CVE-2020-24586, CVE-2020-24587) - mac80211: properly handle A-MSDUs that start with an RFC 1042 header - cfg80211: mitigate A-MSDU aggregation attacks (CVE-2020-24588) - mac80211: drop A-MSDUs on old ciphers (CVE-2020-24588) - mac80211: add fragment cache to sta_info - mac80211: check defrag PN against current frame - mac80211: prevent attacks on TKIP/WEP as well - mac80211: do not accept/forward invalid EAPOL frames (CVE-2020-26139) - mac80211: extend protection against mixed key and fragment cache attacks (CVE-2020-24586, CVE-2020-24587) - ath10k: add CCMP PN replay protection for fragmented frames for PCIe - ath10k: drop fragments with multicast DA for PCIe (CVE-2020-26145) - ath10k: drop fragments with multicast DA for SDIO (CVE-2020-26145) - ath10k: drop MPDU which has discard flag set by firmware for SDIO (CVE-2020-24588) - ath10k: Fix TKIP Michael MIC verification for PCIe (CVE-2020-26141) - ath10k: Validate first subframe of A-MSDU before processing the list - ath11k: Clear the fragment cache during key install (CVE-2020-24587) - dm snapshot: properly fix a crash when an origin has no snapshots - drm/amdgpu/vcn1: add cancel_delayed_work_sync before power gate - [amd64] drm/amdkfd: correct sienna_cichlid SDMA RLC register offset error - drm/amdgpu/vcn2.0: add cancel_delayed_work_sync before power gate - drm/amdgpu/vcn2.5: add cancel_delayed_work_sync before power gate - drm/amdgpu/jpeg2.0: add cancel_delayed_work_sync before power gate - Documentation: seccomp: Fix user notification documentation - seccomp: Refactor notification handler to prepare for new semantics - serial: core: fix suspicious security_locked_down() call - misc/uss720: fix memory leak in uss720_probe - [x86] thunderbolt: usb4: Fix NVM read buffer bounds and offset issue - [x86] thunderbolt: dma_port: Fix NVM read buffer bounds and offset issue - [x86] KVM: Fix vCPU preempted state from guest's point of view - [arm64] KVM: Prevent mixed-width VM creation - [x86] mei: request autosuspend after sending rx flow control - iio: gyro: fxas21002c: balance runtime power in error path - iio: dac: ad5770r: Put fwnode in error case during ->probe() - iio: adc: ad7768-1: Fix too small buffer passed to iio_push_to_buffers_with_timestamp() - iio: adc: ad7124: Fix missbalanced regulator enable / disable on error. - iio: adc: ad7124: Fix potential overflow due to non sequential channel numbers - iio: adc: ad7923: Fix undersized rx buffer. - iio: adc: ad7793: Add missing error code in ad7793_setup() - iio: adc: ad7192: Avoid disabling a clock that was never enabled. - iio: adc: ad7192: handle regulator voltage error first - serial: 8250: Add UART_BUG_TXRACE workaround for Aspeed VUART - serial: 8250_dw: Add device HID for new AMD UART controller - serial: 8250_pci: Add support for new HPE serial device - serial: 8250_pci: handle FL_NOIRQ board flag - USB: trancevibrator: fix control-request direction - Revert "irqbypass: do not start cons/prod when failed connect" - USB: usbfs: Don't WARN about excessively large memory allocations - drivers: base: Fix device link removal - [arm64,armhf] serial: tegra: Fix a mask operation that is always true - serial: rp2: use 'request_firmware' instead of 'request_firmware_nowait' - USB: serial: ti_usb_3410_5052: add startech.com device id - USB: serial: option: add Telit LE910-S1 compositions 0x7010, 0x7011 - USB: serial: ftdi_sio: add IDs for IDS GmbH Products - USB: serial: pl2303: add device id for ADLINK ND-6530 GC - [x86] thermal/drivers/intel: Initialize RW trip to THERMAL_TEMP_INVALID - [arm64,armhf] usb: dwc3: gadget: Properly track pending and queued SG - [arm64,x86] usb: typec: mux: Fix matching with typec_altmode_desc - net: usb: fix memory leak in smsc75xx_bind - Bluetooth: cmtp: fix file refcount when cmtp_attach_device fails - fs/nfs: Use fatal_signal_pending instead of signal_pending - NFS: fix an incorrect limit in filelayout_decode_layout() - NFS: Fix an Oopsable condition in __nfs_pageio_add_request() - NFS: Don't corrupt the value of pg_bytes_written in nfs_do_recoalesce() - NFSv4: Fix v4.0/v4.1 SEEK_DATA return -ENOTSUPP when set NFS_V4_2 config - [arm64] drm/meson: fix shutdown crash when component not probed - net/mlx5e: reset XPS on error flow if netdev isn't registered yet - net/mlx5e: Fix multipath lag activation - net/mlx5e: Fix error path of updating netdev queues - {net,vdpa}/mlx5: Configure interface MAC into mpfs L2 table - net/mlx5e: Fix nullptr in add_vlan_push_action() - net/mlx5: Set reformat action when needed for termination rules - net/mlx5e: Fix null deref accessing lag dev - net/mlx4: Fix EEPROM dump support - net/mlx5: Set term table as an unmanaged flow table - SUNRPC in case of backlog, hand free slots directly to waiting task - Revert "net:tipc: Fix a double free in tipc_sk_mcast_rcv" - tipc: wait and exit until all work queues are done - tipc: skb_linearize the head skb when reassembling msgs - [arm64] spi: spi-fsl-dspi: Fix a resource leak in an error handling path - netfilter: flowtable: Remove redundant hw refresh bit - [arm64,armhf] net: dsa: fix a crash if ->get_sset_count() fails - [armhf] i2c: s3c2410: fix possible NULL pointer deref on read message after write - [x86] i2c: i801: Don't generate an interrupt on bus reset - afs: Fix the nlink handling of dir-over-dir rename - nvmet-tcp: fix inline data size comparison in nvmet_tcp_queue_response - [x86] platform/x86: hp_accel: Avoid invoking _INI to speed up resume - [arm64] Revert "crypto: cavium/nitrox - add an error message to explain the failure of pci_request_mem_regions" - Revert "media: usb: gspca: add a missed check for goto_low_power" - [i386] Revert "ALSA: sb: fix a missing check of snd_ctl_add" - Revert "net: fujitsu: fix a potential NULL pointer dereference" - net: fujitsu: fix potential null-ptr-deref - Revert "net/smc: fix a NULL pointer dereference" - net/smc: properly handle workqueue allocation failure - [x86] Revert "char: hpet: fix a missing check of ioremap" - [x86] char: hpet: add checks after calling ioremap - [i386] Revert "ALSA: gus: add a check of the status of snd_ctl_add" - Revert "isdn: mISDNinfineon: fix potential NULL pointer dereference" - isdn: mISDNinfineon: check/cleanup ioremap failure correctly in setup_io - Revert "ath6kl: return error code in ath6kl_wmi_set_roam_lrssi_cmd()" - ath6kl: return error code in ath6kl_wmi_set_roam_lrssi_cmd() - Revert "isdn: mISDN: Fix potential NULL pointer dereference of kzalloc" - isdn: mISDN: correctly handle ph_info allocation failure in hfcsusb_ph_info - [arm64] Revert "dmaengine: qcom_hidma: Check for driver register failure" - [arm64] dmaengine: qcom_hidma: comment platform_driver_register call - Revert "libertas: add checks for the return value of sysfs_create_group" - libertas: register sysfs groups properly - Revert "media: dvb: Add check on sp8870_readreg" - media: dvb: Add check on sp8870_readreg return - Revert "media: gspca: mt9m111: Check write_bridge for timeout" - media: gspca: mt9m111: Check write_bridge for timeout - Revert "media: gspca: Check the return value of write_bridge for timeout" - media: gspca: properly check for errors in po1030_probe() - Revert "net: liquidio: fix a NULL pointer dereference" - net: liquidio: Add missing null pointer checks - Revert "brcmfmac: add a check for the status of usb_register" - brcmfmac: properly check for bus register errors - btrfs: return whole extents in fiemap - [powerpc,x86] scsi: BusLogic: Fix 64-bit system enumeration error for Buslogic - scsi: pm80xx: Fix drives missing during rmmod/insmod loop - btrfs: release path before starting transaction when cloning inline extent - btrfs: do not BUG_ON in link_to_fixup_dir - [x86] platform/x86: hp-wireless: add AMD's hardware id to the supported list - SMB3: incorrect file id in requests compounded with open - drm/amd/amdgpu: fix refcount leak - drm/amdgpu: Fix a use-after-free - drm/amd/amdgpu: fix a potential deadlock in gpu reset - drm/amdgpu: stop touching sched.ready in the backend - block: fix a race between del_gendisk and BLKRRPART - linux/bits.h: fix compilation error with GENMASK - [arm64,armhf] net: dsa: fix error code getting shifted with 4 in dsa_slave_get_sset_count - net: stmmac: Fix MAC WoL not working if PHY does not support WoL - spi: Assume GPIO CS active high in ACPI case - net: really orphan skbs tied to closing sk - net: packetmmap: fix only tx timestamp on request - [arm64,armhf] net: fec: fix the potential memory leak in fec_enet_init() - [arm64] net: mdio: thunder: Fix a double free issue in the .remove function - [mips64el,mipsel] net: mdio: octeon: Fix some double free issues - cxgb4/ch_ktls: Clear resources when pf4 device is removed - openvswitch: meter: fix race when getting now_ms. - net: sched: fix packet stuck problem for lockless qdisc - net: sched: fix tx action rescheduling issue during deactivation - net: sched: fix tx action reschedule issue with stopped queue - net: hso: check for allocation failure in hso_create_bulk_serial_device() - net: bnx2: Fix error return code in bnx2_init_board() - bnxt_en: Include new P5 HV definition in VF check. - bnxt_en: Fix context memory setup for 64K page size. - mld: fix panic in mld_newpack() - net/smc: remove device from smcd_dev_list after failed device_add() - [amd64] gve: Check TX QPL was actually assigned - [amd64] gve: Update mgmt_msix_idx if num_ntfy changes - [amd64] gve: Add NULL pointer checks when freeing irqs. - [amd64] gve: Upgrade memory barrier in poll routine - [amd64] gve: Correct SKB queue index validation. - [arm64] net: hns3: fix incorrect resp_msg issue - [arm64] net: hns3: put off calling register_netdev() until client initialize complete - [amd64] iommu/vt-d: Use user privilege for RID2PASID translation - cxgb4: avoid accessing registers when clearing filters - bpf, offload: Reorder offload callback 'prepare' in verifier - bpf: Set mac_len in bpf_skb_change_head - ixgbe: fix large MTU request from VF - [arm64] ASoC: qcom: lpass-cpu: Use optional clk APIs - scsi: libsas: Use _safe() loop in sas_resume_port() - ipv6: record frag_max_size in atomic fragments in input path - ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create() can be static - sch_dsmark: fix a NULL deref in qdisc_reset() - net: zero-initialize tc skb extension on allocation - [arm64,armhf] net: mvpp2: add buffer header handling in RX - [x86] i915: fix build warning in intel_dp_get_link_status() - [arm64] net: hns3: check the return of skb_checksum_help() - bpftool: Add sock_release help info for cgroup attach/prog load command - SUNRPC: More fixes for backlog congestion - net: hso: bail out on interrupt URB allocation failure - neighbour: Prevent Race condition in neighbour subsytem - usb: core: reduce power-on-good delay time of root hub https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.43 - btrfs: tree-checker: do not error out if extent ref hash doesn't match - net: usb: cdc_ncm: don't spew notifications (Closes: #989451) - [x86] hwmon: (dell-smm-hwmon) Fix index values - netfilter: conntrack: unregister ipv4 sockopts on error unwind - efi/fdt: fix panic when no valid fdt found - efi: Allow EFI_MEMORY_XP and EFI_MEMORY_RO both to be cleared - efi/libstub: prevent read overflow in find_file_option() - [arm64,x86] efi: cper: fix snprintf() use in cper_dimm_err_location() - vfio/pci: Fix error return code in vfio_ecap_init() - ipvs: ignore IP_VS_SVC_F_HASHED flag when adding service - HID: logitech-hidpp: initialize level variable - HID: pidff: fix error return code in hid_pidff_init() - [arm64,x86] HID: i2c-hid: fix format string mismatch - devlink: Correct VIRTUAL port to not have phys_port attributes - net/sched: act_ct: Offload connections with commit action - net/sched: act_ct: Fix ct template allocation for zone 0 - nvme-rdma: fix in-casule data send for chained sgls - ACPICA: Clean up context mutex during object deletion - perf probe: Fix NULL pointer dereference in convert_variable_location() - net: sock: fix in-kernel mark setting - net/mlx5e: Fix incompatible casting - net/mlx5: Check firmware sync reset requested is set before trying to abort it - net/mlx5e: Check for needed capability for cvlan matching - net/mlx5: DR, Create multi-destination flow table with level less than 64 - nvmet: fix freeing unallocated p2pmem - netfilter: nft_ct: skip expectations for confirmed conntrack - netfilter: nfnetlink_cthelper: hit EBUSY on updates if size mismatches - bpf: Simplify cases in bpf_base_func_proto - bpf, lockdown, audit: Fix buggy SELinux lockdown permission checks - ieee802154: fix error return code in ieee802154_add_iface() - ieee802154: fix error return code in ieee802154_llsec_getparams() - igb: add correct exception tracing for XDP - ixgbevf: add correct exception tracing for XDP - cxgb4: fix regression with HASH tc prio value update - ipv6: Fix KASAN: slab-out-of-bounds Read in fib6_nh_flush_exceptions - ice: Fix allowing VF to request more/less queues via virtchnl - ice: Fix VFR issues for AVF drivers that expect ATQLEN cleared - ice: handle the VF VSI rebuild failure - ice: report supported and advertised autoneg using PHY capabilities - ice: Allow all LLDP packets from PF to Tx - cxgb4: avoid link re-train during TC-MQPRIO configuration - i40e: optimize for XDP_REDIRECT in xsk path - i40e: add correct exception tracing for XDP - ice: simplify ice_run_xdp - ice: optimize for XDP_REDIRECT in xsk path - ice: add correct exception tracing for XDP - ixgbe: optimize for XDP_REDIRECT in xsk path - ixgbe: add correct exception tracing for XDP - [arm64] optee: use export_uuid() to copy client UUID - [armhf] bus: ti-sysc: Fix am335x resume hang for usb otg module - [arm64] dts: freescale: sl28: var4: fix RGMII clock and voltage - [armhf] bus: ti-sysc: Fix flakey idling of uarts and stop using swsup_sidle_act - tipc: add extack messages for bearer/media failure - tipc: fix unique bearer names sanity check - [armhf] serial: stm32: fix threaded interrupt handling - io_uring: fix link timeout refs - io_uring: use better types for cflags - drm/amdgpu/vcn3: add cancel_delayed_work_sync before power gate - drm/amdgpu/jpeg2.5: add cancel_delayed_work_sync before power gate - drm/amdgpu/jpeg3: add cancel_delayed_work_sync before power gate - Bluetooth: fix the erroneous flush_work() order (CVE-2021-3564) - Bluetooth: use correct lock to prevent UAF of hdev object (CVE-2021-3573) - wireguard: do not use -O3 - wireguard: peer: allocate in kmem_cache - wireguard: use synchronize_net rather than synchronize_rcu - wireguard: allowedips: initialize list head in selftest - wireguard: allowedips: remove nodes in O(1) - wireguard: allowedips: allocate nodes in kmem_cache - wireguard: allowedips: free empty intermediate nodes when removing single node - [arm64,x86] HID: i2c-hid: Skip ELAN power-on command after reset - HID: magicmouse: fix NULL-deref on disconnect - HID: multitouch: require Finger field to mark Win8 reports as MT - gfs2: fix scheduling while atomic bug in glocks - ALSA: timer: Fix master timer notification - ALSA: hda: Fix for mute key LED for HP Pavilion 15-CK0xx - ALSA: hda: update the power_state during the direct-complete - ext4: fix memory leak in ext4_fill_super - ext4: fix bug on in ext4_es_cache_extent as ext4_split_extent_at failed - ext4: fix fast commit alignment issues - ext4: fix memory leak in ext4_mb_init_backend on error path. - ext4: fix accessing uninit percpu counter variable with fast_commit - [arm*] usb: dwc2: Fix build in periphal-only mode - pid: take a reference when initializing `cad_pid` - ocfs2: fix data corruption by fallocate - mm/page_alloc: fix counting of free pages after take off from buddy - [x86] cpufeatures: Force disable X86_FEATURE_ENQCMD and remove update_pasid() - nfc: fix NULL ptr dereference in llcp_sock_getname() after failed connect (CVE-2021-3587) - drm/amdgpu: Don't query CE and UE errors - drm/amdgpu: make sure we unpin the UVD BO - [x86] apic: Mark _all_ legacy interrupts when IO/APIC is missing - [powerpc] kprobes: Fix validation of prefixed instructions across page boundary - btrfs: mark ordered extent and inode with error if we fail to finish - btrfs: fix error handling in btrfs_del_csums - btrfs: return errors from btrfs_del_csums in cleanup_ref_head - btrfs: fixup error handling in fixup_inode_link_counts - btrfs: abort in rename_exchange if we fail to insert the second ref - btrfs: fix deadlock when cloning inline extents and low on available space - mm, hugetlb: fix simple resv_huge_pages underflow on UFFDIO_COPY - [arm64] drm/msm/dpu: always use mdp device to scale bandwidth - btrfs: fix unmountable seed device after fstrim - [x86] KVM: SVM: Truncate GPR value for DR and CR accesses in !64-bit mode - [arm64] KVM: Fix debug register indexing - [x86] kvm: Teardown PV features on boot CPU as well - [x86] kvm: Disable kvmclock on all CPUs on shutdown - [x86] kvm: Disable all PV features on crash - lib/lz4: explicitly support in-place decompression - netfilter: nf_tables: missing error reporting for not selected expressions - xen-netback: take a reference to the RX task thread (CVE-2021-28691) - neighbour: allow NUD_NOARP entries to be forced GCed https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.44 - proc: Track /proc/$pid/attr/ opener mm_struct - [amd64] ASoC: amd: fix for pcm_read() error - spi: Fix spi device unregister flow - bpf: Forbid trampoline attach for functions with variable arguments - net/nfc/rawsock.c: fix a permission check bug - [x86] ASoC: Intel: bytcr_rt5640: Add quirk for the Glavey TM800A550L tablet - [x86] ASoC: Intel: bytcr_rt5640: Add quirk for the Lenovo Miix 3-830 tablet - [arm64,armhf] usb: chipidea: udc: assign interrupt number to USB gadget structure - bonding: init notify_work earlier to avoid uninitialized use - netlink: disable IRQs for netlink_lock_table() - net: mdiobus: get rid of a BUG_ON() - cgroup: disable controllers at parse time - wq: handle VM suspension in stall detection - net/qla3xxx: fix schedule while atomic in ql_sem_spinlock - RDS tcp loopback connection can hang - net:sfc: fix non-freed irq in legacy irq mode - scsi: bnx2fc: Return failure if io_req is already in ABTS processing - [x86] scsi: vmw_pvscsi: Set correct residual data length - [arm64] scsi: hisi_sas: Drop free_irq() of devm_request_irq() allocated irq - scsi: target: qla2xxx: Wait for stop_phase1 at WWN removal - net: macb: ensure the device is available before accessing GEMGXL control registers - nvme-fabrics: decode host pathing error for connect - dm verity: fix require_signatures module_param permissions - bnx2x: Fix missing error code in bnx2x_iov_init_one() - nvmet: fix false keep-alive timeout when a controller is torn down - spi: Don't have controller clean up spi device before driver unbind - spi: Cleanup on failure of initial setup - [powerpc] i2c: mpc: Make use of i2c_recover_bus() - [powerpc] i2c: mpc: implement erratum A-004447 workaround - ALSA: seq: Fix race of snd_seq_timer_open() - ALSA: firewire-lib: fix the context to call snd_pcm_stop_xrun() - ALSA: hda/realtek: headphone and mic don't work on an Acer laptop - ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP Elite Dragonfly G2 - ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP EliteBook x360 1040 G8 - ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840 Aero G8 - ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8 - [arm*] spi: bcm2835: Fix out-of-bounds access with more than 4 slaves - Revert "ACPI: sleep: Put the FACS table after using it" - drm: Fix use-after-free read in drm_getunique() - drm: Lock pointer access in drm_master_release() - [x86] perf/x86/intel/uncore: Fix M2M event umask for Ice Lake server - [x86] KVM: X86: MMU: Use the correct inherited permissions to get shadow page - kvm: avoid speculation-based attacks from out-of-range memslot accesses - [arm64,x86] staging: rtl8723bs: Fix uninitialized variables - async_xor: check src_offs is not NULL before updating it - btrfs: return value from btrfs_mark_extent_written() in case of error - btrfs: promote debugging asserts to full-fledged checks in validate_super - cgroup1: don't allow '\n' in renaming - ftrace: Do not blindly read the ip address in ftrace_bug() - USB: f_ncm: ncm_bitrate (speed) is unsigned - usb: f_ncm: only first packet of aggregate needs to start timer - usb: pd: Set PD_T_SINK_WAIT_CAP to 310ms - [arm64,armhf] usb: dwc3-meson-g12a: fix usb2 PHY glue init when phy0 is disabled - [arm64,armhf] usb: dwc3: meson-g12a: Disable the regulator in the error handling path of the probe - [arm64,armhf] usb: dwc3: gadget: Bail from dwc3_gadget_exit() if dwc->gadget is NULL - [arm64,armhf] usb: dwc3: ep0: fix NULL pointer exception - [arm64,armhf] usb: musb: fix MUSB_QUIRK_B_DISCONNECT_99 handling - usb: typec: ucsi: Clear PPM capability data in ucsi_init() error path - usb: gadget: f_fs: Ensure io_completion_wq is idle during unbind - USB: serial: ftdi_sio: add NovaTech OrionMX product ID - USB: serial: omninet: add device id for Zyxel Omni 56K Plus - USB: serial: quatech2: fix control-request directions - USB: serial: cp210x: fix alternate function for CP2102N QFN20 - usb: gadget: eem: fix wrong eem header operation - usb: fix various gadgets null ptr deref on 10gbps cabling. - usb: fix various gadget panics on 10gbps cabling - usb: typec: tcpm: cancel vdm and state machine hrtimer when unregister tcpm port - usb: typec: tcpm: cancel frs hrtimer when unregister tcpm port - regulator: core: resolve supply for boot-on/always-on regulators - [arm64] regulator: max77620: Use device_set_of_node_from_dev() - regulator: bd71828: Fix .n_voltages settings - [arm64,armhf] usb: dwc3: gadget: Disable gadget IRQ during pullup disable - usb: typec: mux: Fix copy-paste mistake in typec_mux_match - [arm64] drm/msm/a6xx: fix incorrectly set uavflagprd_inv field for A650 - [arm64] drm/msm/a6xx: update/fix CP_PROTECT initialization - [arm64] drm/msm/a6xx: avoid shadow NULL reference in failure path - RDMA/ipoib: Fix warning caused by destroying non-initial netns - RDMA/mlx4: Do not map the core_clock page to user space unless enabled - ASoC: core: Fix Null-point-dereference in fmt_single_name() - perf: Fix data race between pin_count increment/decrement - sched/fair: Keep load_avg and load_sum synced - sched/fair: Make sure to update tg contrib for blocked load - sched/fair: Fix util_est UTIL_AVG_UNCHANGED handling - [x86] nmi_watchdog: Fix old-style NMI watchdog regression on old Intel CPUs - [x86] KVM: x86: Ensure liveliness of nested VM-Enter fail tracepoint message - IB/mlx5: Fix initializing CQ fragments buffer - NFS: Fix a potential NULL dereference in nfs_get_client() - NFSv4: Fix deadlock between nfs4_evict_inode() and nfs4_opendata_get_inode() - kvm: fix previous commit for 32-bit builds - NFS: Fix use-after-free in nfs4_init_client() - NFSv4: Fix second deadlock in nfs4_evict_inode() - NFSv4: nfs4_proc_set_acl needs to restore NFS_CAP_UIDGID_NOMAP on error. - scsi: core: Fix error handling of scsi_host_alloc() - scsi: core: Fix failure handling of scsi_add_host_with_dma() - scsi: core: Put .shost_dev in failure path if host state changes to RUNNING - scsi: core: Only put parent device if host state differs from SHOST_CREATED - tracing: Correct the length check which causes memory corruption - proc: only require mm_struct for writing https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.45 - net: ieee802154: fix null deref in parse dev addr - HID: quirks: Set INCREMENT_USAGE_ON_DUPLICATE for Saitek X65 - HID: a4tech: use A4_2WHEEL_MOUSE_HACK_B8 for A4TECH NB-95 - HID: hid-input: add mapping for emoji picker key - HID: hid-sensor-hub: Return error for hid_set_field() failure - HID: quirks: Add quirk for Lenovo optical mouse - HID: multitouch: set Stylus suffix for Stylus-application devices, too - HID: Add BUS_VIRTUAL to hid_connect logging - HID: usbhid: fix info leak in hid_submit_ctrl - [arm64,armhf] drm/tegra: sor: Do not leak runtime PM reference - [arm64,armhf] gpu: host1x: Split up client initalization and registration - [arm64,armhf] drm/tegra: sor: Fully initialize SOR before registration - gfs2: Prevent direct-I/O write fallback errors from getting lost - gfs2: fix a deadlock on withdraw-during-mount - HID: gt683r: add missing MODULE_DEVICE_TABLE - gfs2: Fix use-after-free in gfs2_glock_shrink_scan - scsi: target: core: Fix warning on realtime kernels - ethernet: myri10ge: Fix missing error code in myri10ge_probe() - scsi: qedf: Do not put host in qedf_vport_create() unconditionally - Bluetooth: Add a new USB ID for RTL8822CE - scsi: scsi_devinfo: Add blacklist entry for HPE OPEN-V - net: ipconfig: Don't override command-line hostnames or domains - drm/amd/display: Allow bandwidth validation for 0 streams. - drm/amdgpu: refine amdgpu_fru_get_product_info - drm/amd/display: Fix potential memory leak in DMUB hw_init - drm/amd/amdgpu:save psp ring wptr to avoid attack - rtnetlink: Fix missing error code in rtnl_bridge_notify() - net: Return the correct errno code - fib: Return the correct errno code https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.46 - afs: Fix an IS_ERR() vs NULL check - mm/memory-failure: make sure wait for page writeback in memory_failure - [x86] kvm: LAPIC: Restore guard to prevent illegal APIC register access - fanotify: fix copy_event_to_user() fid error clean up - batman-adv: Avoid WARN_ON timing related checks - mac80211: fix skb length check in ieee80211_scan_rx() - net: ipv4: fix memory leak in netlbl_cipsov4_add_std - vrf: fix maximum MTU - net: rds: fix memory leak in rds_recvmsg - [arm64] net: dsa: felix: re-enable TX flow control in ocelot_port_flush() - netfilter: nft_fib_ipv6: skip ipv6 packets from any to link-local - ice: add ndo_bpf callback for safe mode netdev ops - ice: parameterize functions responsible for Tx ring management - udp: fix race between close() and udp_abort() - rtnetlink: Fix regression in bridge VLAN configuration - net/sched: act_ct: handle DNAT tuple collision - net/mlx5e: Fix page reclaim for dead peer hairpin - net/mlx5: Consider RoCE cap before init RDMA resources - net/mlx5: DR, Allow SW steering for sw_owner_v2 devices - net/mlx5: DR, Don't use SW steering when RoCE is not supported - net/mlx5e: Block offload of outer header csum for UDP tunnels - netfilter: synproxy: Fix out of bounds when parsing TCP options - sch_cake: Fix out of bounds when parsing TCP options and header - alx: Fix an error handling path in 'alx_probe()' - cxgb4: fix endianness when flashing boot image - cxgb4: fix sleep in atomic when flashing PHY firmware - cxgb4: halt chip before flashing PHY firmware image - net: make get_net_ns return error if NET_NS is disabled - ethtool: strset: fix message length calculation - qlcnic: Fix an error handling path in 'qlcnic_probe()' - netxen_nic: Fix an error handling path in 'netxen_nic_probe()' - cxgb4: fix wrong ethtool n-tuple rule lookup - ipv4: Fix device used for dst_alloc with local routes - net: qrtr: fix OOB Read in qrtr_endpoint_post - bpf: Fix leakage under speculation on mispredicted branches (CVE-2021-33624) - ptp: improve max_adj check against unreasonable values - net: cdc_ncm: switch to eth%d interface naming - net: usb: fix possible use-after-free in smsc75xx_bind - [arm64,armhf] net: fec_ptp: fix issue caused by refactor the fec_devtype - net: ipv4: fix memory leak in ip_mc_add1_src - net/af_unix: fix a data-race in unix_dgram_sendmsg / unix_release_sock - net/mlx5: E-Switch, Read PF mac address - net/mlx5: E-Switch, Allow setting GUID for host PF vport - net/mlx5: Reset mkey index on creation - be2net: Fix an error handling path in 'be_probe()' - net: hamradio: fix memory leak in mkiss_close - net: cdc_eem: fix tx fixup skb leak - cxgb4: fix wrong shift. - bnxt_en: Rediscover PHY capabilities after firmware reset - bnxt_en: Fix TQM fastpath ring backing store computation - bnxt_en: Call bnxt_ethtool_free() in bnxt_init_one() error path - icmp: don't send out ICMP messages with a source address of 0.0.0.0 - [x86] platform/x86: thinkpad_acpi: Add X1 Carbon Gen 9 second fan support - sched/pelt: Ensure that *_sum is always synced with *_avg - [armhf] spi: stm32-qspi: Always wait BUSY bit to be cleared in stm32_qspi_wait_cmd() - ASoC: rt5682: Fix the fast discharge for headset unplugging in soundwire mode - [arm64,armhf] drm/sun4i: dw-hdmi: Make HDMI PHY into a platform device - [arm64] ASoC: qcom: lpass-cpu: Fix pop noise during audio capture begin - radeon: use memcpy_to/fromio for UVD fw upload - mm: relocate 'write_protect_seq' in struct mm_struct - [arm64,armhf] irqchip/gic-v3: Workaround inconsistent PMR setting on NMI entry - bpf: Inherit expanded/patched seen count from old aux data (CVE-2021-33624) - bpf: Do not mark insn as seen under speculative path verification (CVE-2021-33624) - can: bcm: fix infoleak in struct bcm_msg_head (CVE-2021-34693) - can: bcm/raw/isotp: use per module netdevice notifier - can: j1939: fix Use-after-Free, hold skb ref while in use - can: mcba_usb: fix memory leak in mcba_usb - usb: core: hub: Disable autosuspend for Cypress CY7C65632 - [arm64,armhf] usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection - tracing: Do not stop recording cmdlines when tracing is off - tracing: Do not stop recording comms if the trace file is being read - tracing: Do no increment trace_clock_global() by one - PCI: Mark TI C667X to avoid bus reset - PCI: Mark some NVIDIA GPUs to avoid bus reset - [arm64] PCI: aardvark: Fix kernel panic during PIO transfer - PCI: Add ACS quirk for Broadcom BCM57414 NIC - PCI: Work around Huawei Intelligent NIC VF FLR erratum - [x86] KVM: x86: Immediately reset the MMU context when the SMM flag is cleared - [x86] KVM: x86/mmu: Calculate and check "full" mmu_role for nested MMU - [x86] KVM: X86: Fix x86_emulator slab cache leak - [s390x] mcck: fix calculation of SIE critical section size - [s390x] ap: Fix hanging ioctl caused by wrong msg counter - [amd64] x86/mm: Avoid truncating memblocks for SGX memory - [x86] process: Check PF_KTHREAD and not current->mm for kernel threads - [x86] ioremap: Map EFI-reserved memory as encrypted for SEV - [x86] pkru: Write hardware init value to PKRU when xstate is init - [x86] fpu: Prevent state corruption in __fpu__restore_sig() - [x86] fpu: Invalidate FPU state after a failed XRSTOR from a user buffer - [x86] fpu: Reset state for all signal restore failures - crash_core, vmcoreinfo: append 'SECTION_SIZE_BITS' to vmcoreinfo - [arm64,armhf] dmaengine: pl330: fix wrong usage of spinlock flags in dma_cyclc - mac80211: Fix NULL ptr deref for injected rate info - cfg80211: avoid double free of PMSR request - drm/amdgpu/gfx10: enlarge CP_MEC_DOORBELL_RANGE_UPPER to cover full doorbell. - drm/amdgpu/gfx9: fix the doorbell missing when in CGPG issue. - net: ll_temac: Fix TX BD buffer overwrite - net: bridge: fix vlan tunnel dst null pointer dereference - net: bridge: fix vlan tunnel dst refcnt when egressing - mm/swap: fix pte_same_as_swp() not removing uffd-wp bit when compare - mm/slub: clarify verification reporting - mm/slub: fix redzoning for small allocations - mm/slub: actually fix freelist pointer vs redzoning - mm/slub.c: include swab.h - net: stmmac: disable clocks in stmmac_remove_config_dt() - [arm64,armhf] net: fec_ptp: add clock rate zero check - [arm64,armhf] usb: dwc3: debugfs: Add and remove endpoint dirs dynamically - [arm64,armhf] usb: dwc3: core: fix kernel panic when do reboot [ Josua Mayer ] * [armhf] drivers/bluetooth: Enable BT_HCIUART as a module, with support for all features already enabled in the generic config. (Closes: #987361) * [armhf] enable i.MX6 MIPI-CSI video capture device. (Closes: #987365) - drivers/mux: Enable MUX_MMIO as a module. - drivers/media/platform: Enable VIDEO_MUX as a module. - drivers/staging/media/imx: Enable VIDEO_IMX_MEDIA and VIDEO_IMX_CSI as modules. [ Uwe Kleine-König ] * [arm64] Update device tree for Kobol's helios64 from next [ Salvatore Bonaccorso ] * [rt] Refresh "net/Qdisc: use a seqlock instead seqcount" * Ignore some ABI changes that should not affect OOT modules * Bump ABI to 8 * [rt] Refresh "tracing: Merge irqflags + preempt counter" * can: bcm: delay release of struct bcm_op after synchronize_rcu() (CVE-2021-3609) * Revert "PCI: PM: Do not read power state in pci_enable_device_flags()" (Closes: #990008) [ Vagrant Cascadian ] * [arm64] Add pwm-rockchip to fb-modules udeb. * [arm64] Add fusb302, tcpm and typec to usb-modules udeb. * [armhf] Add gpio-mxc to kernel-image udeb. Thanks to Rick Thomas. (Closes: #982270) -- Salvatore Bonaccorso Thu, 24 Jun 2021 14:11:37 +0200 linux (5.10.40-1) unstable; urgency=medium * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.39 - [x86] msr: Fix wr/rdmsr_safe_regs_on_cpu() prototypes - [x86] drm/i915/display: fix compiler warning about array overrun - airo: work around stack usage warning - usb: sl811-hcd: improve misleading indentation - cxgb4: Fix the -Wmisleading-indentation warning - isdn: capi: fix mismatched prototypes - virtio_net: Do not pull payload in skb->head - [armel,armhf] 9066/1: ftrace: pause/unpause function graph tracer in cpu_suspend() - [arm64,x86] ACPI / hotplug / PCI: Fix reference count leak in enable_slot() - [arm64] Input: elants_i2c - do not bind to i2c-hid compatible ACPI instantiated devices - NFS: NFS_INO_REVAL_PAGECACHE should mark the change attribute invalid - [armel,armhf] 9075/1: kernel: Fix interrupted SMC calls - [arm64] platform/chrome: cros_ec_typec: Add DP mode check - scsi: lpfc: Fix illegal memory access on Abort IOCBs - ceph: fix fscache invalidation - ceph: don't clobber i_snap_caps on non-I_NEW inode - ceph: don't allow access to MDS-private inodes - scsi: target: tcmu: Return from tcmu_handle_completions() if cmd_id not found - bridge: Fix possible races between assigning rx_handler_data and setting IFF_BRIDGE_PORT bit - nvmet: remove unsupported command noise - drm/amd/display: Fix two cursor duplication when using overlay - [arm64,x86] gpiolib: acpi: Add quirk to ignore EC wakeups on Dell Venue 10 Pro 5055 - net:CXGB4: fix leak if sk_buff is not used - ALSA: hda: generic: change the DAC ctl name for LO+SPK or LO+HP - block: reexpand iov_iter after read/write - net: stmmac: Do not enable RX FIFO overflow interrupts - ip6_gre: proper dev_{hold|put} in ndo_[un]init methods - sit: proper dev_{hold|put} in ndo_[un]init methods - ip6_tunnel: sit: proper dev_{hold|put} in ndo_[un]init methods - ipv6: remove extra dev_hold() for fallback tunnels - tweewide: Fix most Shebang lines - scripts: switch explicitly to Python 3 https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.40 - RDMA/core: Prevent divide-by-zero error triggered by the user - RDMA/rxe: Clear all QP fields if creation failed - scsi: ufs: core: Increase the usable queue depth - scsi: qedf: Add pointer checks in qedf_update_link_speed() - scsi: qla2xxx: Fix error return code in qla82xx_write_flash_dword() - RDMA/mlx5: Recover from fatal event in dual port mode - RDMA/core: Don't access cm_id after its destruction - nvmet: remove unused ctrl->cqs - nvmet: fix memory leak in nvmet_alloc_ctrl() - nvme-tcp: rerun io_work if req_list is not empty - nvme-fc: clear q_live at beginning of association teardown - [x86] platform/x86: intel_int0002_vgpio: Only call enable_irq_wake() when using s2idle - [x86] platform/x86: dell-smbios-wmi: Fix oops on rmmod dell_smbios - RDMA/mlx5: Fix query DCT via DEVX - RDMA/uverbs: Fix a NULL vs IS_ERR() bug - [powerpc*] pseries: Fix hcall tracing recursion in pv queued spinlocks - ptrace: make ptrace() fail if the tracee changed its pid unexpectedly - nvmet: seset ns->file when open fails - [x86] perf/x86: Avoid touching LBR_TOS MSR for Arch LBR - locking/lockdep: Correct calling tracepoints - locking/mutex: clear MUTEX_FLAGS if wait_list is empty due to signal - [powerpc*] Fix early setup to make early_ioremap() work - btrfs: avoid RCU stalls while running delayed iputs - cifs: fix memory leak in smb2_copychunk_range - misc: eeprom: at24: check suspend status before disable regulator - ALSA: dice: fix stream format for TC Electronic Konnekt Live at high sampling transfer frequency - ALSA: intel8x0: Don't update period unless prepared - ALSA: firewire-lib: fix amdtp_packet tracepoints event for packet_index field - ALSA: line6: Fix racy initialization of LINE6 MIDI - ALSA: dice: fix stream format at middle sampling rate for Alesis iO 26 - ALSA: firewire-lib: fix calculation for size of IR context payload - ALSA: usb-audio: Validate MS endpoint descriptors - ALSA: bebob/oxfw: fix Kconfig entry for Mackie d.2 Pro - ALSA: hda: fixup headset for ASUS GU502 laptop - Revert "ALSA: sb8: add a check for request_region" - ALSA: firewire-lib: fix check for the size of isochronous packet payload - ALSA: hda/realtek: reset eapd coeff to default value for alc287 - ALSA: hda/realtek: Add some CLOVE SSIDs of ALC293 - ALSA: hda/realtek: Fix silent headphone output on ASUS UX430UA - ALSA: hda/realtek: Add fixup for HP OMEN laptop - ALSA: hda/realtek: Add fixup for HP Spectre x360 15-df0xxx - [x86] uio_hv_generic: Fix a memory leak in error handling paths - [arm64] Revert "serial: mvebu-uart: Fix to avoid a potential NULL pointer dereference" - nvme-tcp: fix possible use-after-completion - drm/amdgpu: Fix GPU TLB update error when PAGE_SIZE > AMDGPU_PAGE_SIZE - drm/amdgpu: disable 3DCGCG on picasso/raven1 to avoid compute hang - drm/amdgpu: update gc golden setting for Navi12 - drm/amdgpu: update sdma golden setting for Navi12 - [powerpc*] 64s/syscall: Use pt_regs.trap to distinguish syscall ABI difference between sc and scv syscalls - [powerpc*] 64s/syscall: Fix ptrace syscall info with scv syscalls - mmc: sdhci-pci-gli: increase 1.8V regulator wait - [x86] xen-pciback: redo VF placement in the virtual topology - [x86] xen-pciback: reconfigure also from backend watch handler - ipc/mqueue, msg, sem: avoid relying on a stack reference past its expiry - dm snapshot: fix crash with transient storage and zero chunk size - Revert "video: hgafb: fix potential NULL pointer dereference" - [arm64,armhf] Revert "net: stmicro: fix a missing check of clk_prepare" - Revert "hwmon: (lm80) fix a missing check of bus read in lm80 probe" - Revert "ecryptfs: replace BUG_ON with error handling code" - Revert "rtlwifi: fix a potential NULL pointer dereference" - Revert "qlcnic: Avoid potential NULL pointer dereference" - Revert "niu: fix missing checks of niu_pci_eeprom_read" - ethernet: sun: niu: fix missing checks of niu_pci_eeprom_read() - [arm64,armhf] net: stmicro: handle clk_prepare() failure during init - net: rtlwifi: properly check for alloc_workqueue() failure - ics932s401: fix broken handling of errors when word reading fails - qlcnic: Add null check after calling netdev_alloc_skb - [x86] video: hgafb: fix potential NULL pointer dereference - vgacon: Record video mode changes with VT_RESIZEX - vt_ioctl: Revert VT_RESIZEX parameter handling removal - vt: Fix character height handling with VT_RESIZEX - tty: vt: always invoke vc->vc_sw->con_resize callback - [x86] drm/i915/gt: Disable HiZ Raw Stall Optimization on broken gen7 - [amd64] x86/Xen: swap NX determination and GDT setup on BSP - nvme-multipath: fix double initialization of ANA state - [arm64] rtc: pcf85063: fallback to parent of_node - nvmet: use new ana_log_size instead the old one - [x86] video: hgafb: correctly handle card detect failure during probe - Bluetooth: SMP: Fail if remote and local public keys are identical [ Salvatore Bonaccorso ] * bpf: Wrap aux data inside bpf_sanitize_info container (CVE-2021-33200) * bpf: Fix mask direction swap upon off reg sign change (CVE-2021-33200) * bpf: No need to simulate speculative domain for immediates (CVE-2021-33200) * [armhf] dts: sun8i: h3: orangepi-plus: Fix ethernet phy-mode (Closes: #988574) * [rt] Refresh "ptrace: fix ptrace vs tasklist_lock race" * Deal with vc_data ABI changes in 5.10.40 -- Salvatore Bonaccorso Fri, 28 May 2021 10:31:38 +0200 linux (5.10.38-1) unstable; urgency=medium * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.29 - [armhf] bus: ti-sysc: Fix warning on unbind if reset is not deasserted - [x86] platform/x86: intel-hid: Support Lenovo ThinkPad X1 Tablet Gen 2 - [amd64] bpf, x86: Use kvmalloc_array instead kmalloc_array in bpf_jit_comp - net/mlx5e: Enforce minimum value check for ICOSQ size - mISDN: fix crash in fritzpci - mac80211: Check crypto_aead_encrypt for errors - mac80211: choose first enabled channel for monitor - [arm64] drm/msm/dsi_pll_7nm: Fix variable usage for pll_lockdet_rate - [arm64] drm/msm/adreno: a5xx_power: Don't apply A540 lm_setup to other GPUs - [arm64] drm/msm: Ratelimit invalid-fence message - netfilter: conntrack: Fix gre tunneling over ipv6 - netfilter: nftables: skip hook overlap logic if flowtable is stale - [x86] platform/x86: thinkpad_acpi: Allow the FnLock LED to change state - [arm64] drm/msm/disp/dpu1: icc path needs to be set before dpu runtime resume - block: clear GD_NEED_PART_SCAN later in bdev_disk_changed - [x86] platform/x86: intel_pmc_core: Ignore GBE LTR on Tiger Lake platforms - [arm64] ptp_qoriq: fix overflow in ptp_qoriq_adjfine() u64 calcalation - scsi: target: pscsi: Clean up after failure in pscsi_map_sg() - [ia64] mca: allocate early mca with GFP_ATOMIC - [ia64] fix format strings for err_inject - cifs: revalidate mapping when we open files for SMB1 POSIX - cifs: Silently ignore unknown oplock break handle - io_uring: fix timeout cancel return code - math: Export mul_u64_u64_div_u64 https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.30 - ALSA: aloop: Fix initialization of controls - ALSA: hda/realtek: Fix speaker amp setup on Acer Aspire E1 - ALSA: hda/conexant: Apply quirk for another HP ZBook G5 model - [x86] ASoC: intel: atom: Stop advertising non working S24LE support - nfc: fix refcount leak in llcp_sock_bind() (CVE-2020-25670) - nfc: fix refcount leak in llcp_sock_connect() (CVE-2020-25671) - nfc: fix memory leak in llcp_sock_connect() (CVE-2020-25672) - nfc: Avoid endless loops caused by repeated llcp_sock_connect() - selinux: make nslot handling in avtab more robust - selinux: fix cond_list corruption when changing booleans - selinux: fix race between old and new sidtab - xen/evtchn: Change irq_info lock to raw_spinlock_t - net: ipv6: check for validity before dereferencing cfg->fc_nlinfo.nlh - [x86] drm/i915: Fix invalid access to ACPI _DSM objects - [amd64] IB/hfi1: Fix probe time panic when AIP is enabled with a buggy BIOS - LOOKUP_MOUNTPOINT: we are cleaning "jumped" flag too late - [ia64] fix user_stack_pointer() for ptrace() - ocfs2: fix deadlock between setattr and dio_end_io_write - fs: direct-io: fix missing sdio->boundary - ethtool: fix incorrect datatype in set_eee ops - of: property: fw_devlink: do not link ".*,nr-gpios" - [armhf] dts: turris-omnia: configure LED[2]/INTn pin as interrupt pin - batman-adv: initialize "struct batadv_tvlv_tt_vlan_data"->reserved field - ice: Continue probe on link/PHY errors - ice: Increase control queue timeout - ice: prevent ice_open and ice_stop during reset - ice: fix memory allocation call - ice: remove DCBNL_DEVRESET bit from PF state - ice: Fix for dereference of NULL pointer - ice: Use port number instead of PF ID for WoL - ice: Cleanup fltr list in case of allocation issues - iwlwifi: pcie: properly set LTR workarounds on 22000 devices - ice: fix memory leak of aRFS after resuming from suspend - net: hso: fix null-ptr-deref during tty device unregistration - bpf: Enforce that struct_ops programs be GPL-only - bpf: link: Refuse non-O_RDWR flags in BPF_OBJ_GET - ethernet/netronome/nfp: Fix a use after free in nfp_bpf_ctrl_msg_rx - bpf: Refcount task stack in bpf_get_task_stack - bpf, sockmap: Fix sk->prot unhash op reset - bpf, sockmap: Fix incorrect fwd_alloc accounting - net: ensure mac header is set in virtio_net_hdr_to_skb() - i40e: Fix sparse warning: missing error code 'err' - i40e: Fix sparse error: 'vsi->netdev' could be null - i40e: Fix sparse error: uninitialized symbol 'ring' - i40e: Fix sparse errors in i40e_txrx.c - net: sched: sch_teql: fix null-pointer dereference - net: sched: fix action overwrite reference counting - nl80211: fix beacon head validation - nl80211: fix potential leak of ACL params - cfg80211: check S1G beacon compat element length - mac80211: fix time-is-after bug in mlme - mac80211: fix TXQ AC confusion - net-ipv6: bugfix - raw & sctp - switch to ipv6_can_nonlocal_bind() - net: let skb_orphan_partial wake-up waiters. - [x86] thunderbolt: Fix a leak in tb_retimer_add() - [x86] thunderbolt: Fix off by one in tb_port_find_retimer() - usbip: add sysfs_lock to synchronize sysfs code paths - usbip: stub-dev synchronize sysfs code paths - usbip: vudc synchronize sysfs code paths - usbip: synchronize event handler with sysfs code paths - driver core: Fix locking bug in deferred_probe_timeout_work_func() - scsi: pm80xx: Fix chip initialization failure - scsi: target: iscsi: Fix zero tag inside a trace event - percpu: make pcpu_nr_empty_pop_pages per chunk type - i2c: turn recovery error on init to debug - [x86] KVM: x86/mmu: change TDP MMU yield function returns to match cond_resched - [x86] KVM: x86/mmu: Merge flush and non-flush tdp_mmu_iter_cond_resched - [x86] KVM: x86/mmu: Rename goal_gfn to next_last_level_gfn - [x86] KVM: x86/mmu: Ensure forward progress when yielding in TDP MMU iter - [x86] KVM: x86/mmu: Yield in TDU MMU iter even if no SPTES changed - [x86] KVM: x86/mmu: Ensure TLBs are flushed when yielding during GFN range zap - [x86] KVM: x86/mmu: Ensure TLBs are flushed for TDP MMU during NX zapping - [x86] KVM: x86/mmu: Don't allow TDP MMU to yield when recovering NX pages - [x86] KVM: x86/mmu: preserve pending TLB flush across calls to kvm_tdp_mmu_zap_sp - net: sched: fix err handler in tcf_action_init() - ice: Refactor DCB related variables out of the ice_port_info struct - ice: Recognize 860 as iSCSI port in CEE mode - xfrm: interface: fix ipv4 pmtu check to honor ip header df - xfrm: Use actual socket sk instead of skb socket for xfrm_output_resume - [armhf] OMAP4: PM: update ROM return address for OSWR and OFF - net: xfrm: Localize sequence counter per network namespace - esp: delete NETIF_F_SCTP_CRC bit from features for esp offload - [x86] ASoC: SOF: Intel: HDA: fix core status verification - xfrm: Fix NULL pointer dereference on policy lookup - virtchnl: Fix layout of RSS structures - i40e: Added Asym_Pause to supported link modes - i40e: Fix kernel oops when i40e driver removes VF's - vxlan: do not modify the shared tunnel info when PMTU triggers an ICMP reply - geneve: do not modify the shared tunnel info when PMTU triggers an ICMP reply - sch_red: fix off-by-one checks in red_check_params() - drivers/net/wan/hdlc_fr: Fix a double free in pvc_xmit - xfrm: Provide private skb extensions for segmented and hw offloaded ESP packets - can: bcm/raw: fix msg_namelen values depending on CAN_REQUIRED_SIZE - can: isotp: fix msg_namelen values depending on CAN_REQUIRED_SIZE - ethernet: myri10ge: Fix a use after free in myri10ge_sw_tso - gianfar: Handle error code at MAC address change - [arm64,armhf] net: dsa: Fix type was not set for devlink port - cxgb4: avoid collecting SGE_QBASE regs during traffic - net:tipc: Fix a double free in tipc_sk_mcast_rcv - [armhf] net/ncsi: Avoid channel_monitor hrtimer deadlock - net: qrtr: Fix memory leak on qrtr_tx_wait failure - nfp: flower: ignore duplicate merge hints from FW - net: phy: broadcom: Only advertise EEE for supported modes - [armhf] ASoC: sunxi: sun4i-codec: fill ASoC card owner (Closes: #980539) - net/mlx5e: Fix mapping of ct_label zero - net/mlx5e: Fix ethtool indication of connector type - net/mlx5: Don't request more than supported EQs - net/rds: Fix a use after free in rds_message_map_pages - xdp: fix xdp_return_frame() kernel BUG throw for page_pool memory model - i40e: Fix display statistics for veb_tc - [arm64] drm/msm: Set drvdata to NULL when msm_drm_init() fails - net: udp: Add support for getsockopt(..., ..., UDP_GRO, ..., ...); - scsi: ufs: core: Fix task management request completion timeout - scsi: ufs: core: Fix wrong Task Tag used in task management request UPIUs - net: cls_api: Fix uninitialised struct field bo->unlocked_driver_cb - [arm64,riscv64] net: macb: restore cmp registers on resume path - clk: fix invalid usage of list cursor in register - clk: fix invalid usage of list cursor in unregister - workqueue: Move the position of debug_work_activate() in __queue_work() - [s390x] cpcmd: fix inline assembly register clobbering - net: openvswitch: conntrack: simplify the return expression of ovs_ct_limit_get_default_limit() - openvswitch: fix send of uninitialized stack memory in ct limit reply - i2c: designware: Adjust bus_freq_hz when refuse high speed mode set - iwlwifi: fix 11ax disabled bit in the regulatory capability flags - tipc: increment the tmp aead refcnt before attaching it - [arm64] net: hns3: clear VF down state bit before request link status - net/mlx5: Fix placement of log_max_flow_counter - net/mlx5: Fix PPLM register mapping - net/mlx5: Fix PBMC register mapping - RDMA/cxgb4: check for ipv6 address properly while destroying listener - RDMA/qedr: Fix kernel panic when trying to access recv_cq - [arm*] drm/vc4: crtc: Reduce PV fifo threshold on hvs4 - i40e: Fix parameters in aq_get_phy_register() - RDMA/addr: Be strict with gid size - [armhf] clk: socfpga: fix iomem pointer cast on 64-bit - dt-bindings: net: ethernet-controller: fix typo in NVMEM - net: sched: bump refcount for new action in ACT replace mode - gpiolib: Read "gpio-line-names" from a firmware node - cfg80211: remove WARN_ON() in cfg80211_sme_connect - net: tun: set tun->dev->addr_len during TUNSETLINK processing - drivers: net: fix memory leak in atusb_probe - drivers: net: fix memory leak in peak_usb_create_dev - net: mac802154: Fix general protection fault (CVE-2021-33033) - net: ieee802154: nl-mac: fix check on panid - net: ieee802154: fix nl802154 del llsec key - net: ieee802154: fix nl802154 del llsec dev - net: ieee802154: fix nl802154 add llsec key - net: ieee802154: fix nl802154 del llsec devkey - net: ieee802154: forbid monitor for set llsec params - net: ieee802154: forbid monitor for del llsec seclevel - net: ieee802154: stop dump llsec params for monitors - Revert "net: sched: bump refcount for new action in ACT replace mode" https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.31 - gfs2: Flag a withdraw if init_threads() fails - [arm64] KVM: Hide system instruction access to Trace registers - [arm64] KVM: Disable guest access to trace filter controls - [armhf] drm/imx: imx-ldb: fix out of bounds array access warning - gfs2: report "already frozen/thawed" errors - ftrace: Check if pages were allocated before calling free_pages() - [arm64,armhf] drm/tegra: dc: Don't set PLL clock to 0Hz - [arm64,armhf] gpu: host1x: Use different lock classes for each client - XArray: Fix splitting to non-zero orders - block: only update parent bi_status when bio fail - null_blk: fix command timeout completion handling - io_uring: don't mark S_ISBLK async work as unbounded - [riscv64] entry: fix misaligned base for excp_vect_table - block: don't ignore REQ_NOWAIT for direct IO - netfilter: x_tables: fix compat match/target pad out-of-bound write - net: sfp: relax bitrate-derived mode check - net: sfp: cope with SFPs that set both LOS normal and LOS inverted - xen/events: fix setting irq affinity https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.32 - net/sctp: fix race condition in sctp_destroy_sock - gpio: sysfs: Obey valid_mask - dmaengine: Fix a double free in dma_async_device_register - [x86] ACPI: x86: Call acpi_boot_table_init() after acpi_table_upgrade() - iwlwifi: Fix softirq/hardirq disabling in iwl_pcie_enqueue_hcmd() - xfrm: BEET mode doesn't support fragments for inner packets - ASoC: max98373: Changed amp shutdown register as volatile - ASoC: max98373: Added 30ms turn on/off time delay - [x86] gpu/xen: Fix a use after free in xen_drm_drv_init - neighbour: Disregard DEAD dst in neigh_update - [arm64] drm/msm: Fix a5xx/a6xx timestamps - scsi: scsi_transport_srp: Don't block target in SRP_PORT_LOST state - iwlwifi: add support for Qu with AX201 device - net: ieee802154: stop dump llsec keys for monitors - net: ieee802154: forbid monitor for add llsec key - net: ieee802154: forbid monitor for del llsec key - net: ieee802154: stop dump llsec devs for monitors - net: ieee802154: forbid monitor for add llsec dev - net: ieee802154: forbid monitor for del llsec dev - net: ieee802154: stop dump llsec devkeys for monitors - net: ieee802154: forbid monitor for add llsec devkey - net: ieee802154: forbid monitor for del llsec devkey - net: ieee802154: stop dump llsec seclevels for monitors - net: ieee802154: forbid monitor for add llsec seclevel - pcnet32: Use pci_resource_len to validate PCI resource - mac80211: clear sta->fast_rx when STA removed from 4-addr VLAN - Input: i8042 - fix Pegatron C15B ID entry - HID: wacom: set EV_KEY and EV_ABS only for non-HID_GENERIC type of devices - readdir: make sure to verify directory entry for legacy interfaces too - [arm64] fix inline asm in load_unaligned_zeropad() - [arm64] alternatives: Move length validation in alternative_{insn, endif} - vfio/pci: Add missing range check in vfio_pci_mmap - scsi: libsas: Reset num_scatter if libata marks qc as NODATA - ixgbe: fix unbalanced device enable/disable in suspend/resume - netfilter: flowtable: fix NAT IPv6 offload mangling - netfilter: conntrack: do not print icmpv6 as unknown via /proc - ice: Fix potential infinite loop when using u8 loop counter - libnvdimm/region: Fix nvdimm_has_flush() to handle ND_REGION_ASYNC - netfilter: bridge: add pre_exit hooks for ebtable unregistration - netfilter: arp_tables: add pre_exit hook for table unregister - [arm64,riscv64] net: macb: fix the restore of cmp registers - net/mlx5e: fix ingress_ifindex check in mlx5e_flower_parse_meta - netfilter: nft_limit: avoid possible divide error in nft_limit_init - net/mlx5e: Fix setting of RS FEC mode - net: sit: Unregister catch-all devices - net: ip6_tunnel: Unregister catch-all devices - mm: ptdump: fix build failure - net: Make tcp_allowed_congestion_control readonly in non-init netns - i40e: fix the panic when running bpf in xdpdrv mode - ethtool: pause: make sure we init driver stats - [ia64] tools: remove inclusion of ia64-specific version of errno.h header - gro: ensure frag0 meets IP header alignment - [armhf] OMAP2+: Fix warning for omap_init_time_of() - [armhf] OMAP2+: Fix uninitialized sr_inst - [arm64] dts: allwinner: Fix SD card CD GPIO for SOPine systems - [arm64] dts: allwinner: h6: beelink-gs1: Remove ext. 32 kHz osc reference - bpf: Use correct permission flag for mixed signed bounds arithmetic (CVE-2021-29155) - [x86] KVM: VMX: Convert vcpu_vmx.exit_reason to a union - [x86] KVM: VMX: Don't use vcpu->run->internal.ndata as an array index (CVE-2021-3501) - r8169: tweak max read request size for newer chips also in jumbo mtu mode - r8169: don't advertise pause in jumbo mode - bpf: Ensure off_reg has no mixed signed bounds for all types (CVE-2021-29155) - bpf: Move off_reg into sanitize_ptr_alu (CVE-2021-29155) - [armel,armhf] 9071/1: uprobes: Don't hook on thumb instructions - [arm64] mte: Ensure TIF_MTE_ASYNC_FAULT is set atomically - bpf: Rework ptr_limit into alu_limit and add common error path (CVE-2021-29155) - bpf: Improve verifier error messages for users (CVE-2021-29155) - bpf: Move sanitize_val_alu out of op switch - net: phy: marvell: fix detection of PHY on Topaz switches https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.33 - [armhf] gpio: omap: Save and restore sysconfig - [x86] pinctrl: lewisburg: Update number of pins in community - block: return -EBUSY when there are open partitions in blkdev_reread_part - pinctrl: core: Show pin numbers for the controllers with base = 0 - [arm64] dts: allwinner: Revert SD card CD GPIO for Pine64-LTS - bpf: Permits pointers on stack for helper calls - bpf: Allow variable-offset stack access - bpf: Refactor and streamline bounds check into helper (CVE-2021-29155) - bpf: Tighten speculative pointer arithmetic mask - locking/qrwlock: Fix ordering in queued_write_lock_slowpath() - [x86] perf/x86/intel/uncore: Remove uncore extra PCI dev HSWEP_PCI_PCU_3 - [x86] perf/x86/kvm: Fix Broadwell Xeon stepping in isolation_ucodes[] - HID: alps: fix error return code in alps_input_configured() - HID cp2112: fix support for multiple gpiochips - HID: wacom: Assign boolean values to a bool variable - net: geneve: check skb is large enough for IPv4/IPv6 header - [arm64,armhf] dmaengine: tegra20: Fix runtime PM imbalance on error - [s390x] entry: save the caller of psw_idle - [arm64] kprobes: Restore local irqflag if kprobes is cancelled - xen-netback: Check for hotplug-status existence before watching - [x86] crash: Fix crash_setup_memmap_entries() out-of-bounds access - net: hso: fix NULL-deref on disconnect regression - USB: CDC-ACM: fix poison/unpoison imbalance (Closes: #986995) https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.34 - iwlwifi: Fix softirq/hardirq disabling in iwl_pcie_gen2_enqueue_hcmd() - [x86] mei: me: add Alder Lake P device id. https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.35 - [mips*] Do not include hi and lo in clobber list for R6 - netfilter: conntrack: Make global sysctls readonly in non-init netns - net: usb: ax88179_178a: initialize local variables before use - igb: Enable RSS for Intel I211 Ethernet Controller - bpf: Fix masking negation logic upon negative dst register (CVE-2021-31829) - bpf: Fix leakage of uninitialized bpf stack under speculation (CVE-2021-31829) - net: qrtr: Avoid potential use after free in MHI send - perf data: Fix error return code in perf_data__create_dir() - capabilities: require CAP_SETFCAP to map uid 0 - perf ftrace: Fix access to pid in array when setting a pid filter - driver core: add a min_align_mask field to struct device_dma_parameters - swiotlb: add a IO_TLB_SIZE define - swiotlb: factor out an io_tlb_offset helper - swiotlb: factor out a nr_slots helper - swiotlb: clean up swiotlb_tbl_unmap_single - swiotlb: refactor swiotlb_tbl_map_single - swiotlb: don't modify orig_addr in swiotlb_tbl_sync_single - swiotlb: respect min_align_mask - nvme-pci: set min_align_mask - ovl: fix leaked dentry - ovl: allow upperdir inside lowerdir - ALSA: usb-audio: Add MIDI quirk for Vox ToneLab EX - USB: Add LPM quirk for Lenovo ThinkPad USB-C Dock Gen2 Ethernet - USB: Add reset-resume quirk for WD19's Realtek Hub - [x86] platform/x86: thinkpad_acpi: Correct thermal sensor allocation - perf/core: Fix unconditional security_locked_down() call - vfio: Depend on MMU https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.36 - bus: mhi: core: Fix check for syserr at power_up - bus: mhi: core: Clear configuration from channel context during reset - bus: mhi: core: Sanity check values from remote device before use - dyndbg: fix parsing file query without a line-range suffix - [s390x] disassembler: increase ebpf disasm buffer size - [s390x] zcrypt: fix zcard and zqueue hot-unplug memleak - [arm64,x86] tpm: acpi: Check eventlog signature before using it - ftrace: Handle commands when closing set_ftrace_filter file - ecryptfs: fix kernel panic with null dev_name - fs/epoll: restore waking from ep_done_scan() - mtd: spi-nor: core: Fix an issue of releasing resources during read/write - Revert "mtd: spi-nor: macronix: Add support for mx25l51245g" - erofs: add unsupported inode i_format check - [armhf] spi: stm32-qspi: fix pm_runtime usage_count counter - [armhf] spi: spi-ti-qspi: Free DMA resources - scsi: qla2xxx: Fix crash in qla2xxx_mqueuecommand() - scsi: mpt3sas: Block PCI config access from userspace during reset - mmc: sdhci: Check for reset prior to DMA address unmap - mmc: sdhci-pci: Fix initialization of some SD cards for Intel BYT-based controllers - [arm64,armhf] mmc: sdhci-tegra: Add required callbacks to set/clear CQE_EN bit - mmc: block: Update ext_csd.cache_ctrl if it was written - mmc: block: Issue a cache flush only when it's enabled - mmc: core: Do a power cycle when the CMD11 fails - mmc: core: Set read only for SD cards with permanent write protect bit - mmc: core: Fix hanging on I/O during system suspend for removable cards - [arm64,armhf] irqchip/gic-v3: Do not enable irqs when handling spurious interrups - cifs: Return correct error code from smb2_get_enc_key - cifs: fix out-of-bound memory access when calling smb3_notify() at mount point - cifs: detect dead connections only when echoes are enabled. - smb2: fix use-after-free in smb2_ioctl_query_info() - btrfs: handle remount to no compress during compression - btrfs: fix metadata extent leak after failure to create subvolume - [x86] intel_th: pci: Add Rocket Lake CPU support - btrfs: fix race between transaction aborts and fsyncs leading to use-after-free - posix-timers: Preserve return value in clock_adjtime32() - fbdev: zero-fill colormap in fbcmap.c - [armhf] bus: ti-sysc: Probe for l4_wkup and l4_cfg interconnect devices first - staging: wimax/i2400m: fix byte-order issue - bus: mhi: core: Destroy SBL devices when moving to mission mode - crypto: api - check for ERR pointers in crypto_destroy_tfm() - [x86] crypto: qat - fix unmap invalid dma address - usb: gadget: uvc: add bInterval checking for HS mode - usb: webcam: Invalid size of Processing Unit Descriptor - [x86] genirq/matrix: Prevent allocation counter corruption - usb: gadget: f_uac2: validate input parameters - usb: gadget: f_uac1: validate input parameters - [arm64,armhf] usb: dwc3: gadget: Ignore EP queue requests during bus reset - usb: xhci: Fix port minor revision - PCI: PM: Do not read power state in pci_enable_device_flags() - [arm64,armhf] soc/tegra: pmc: Fix completion of power-gate toggling - [arm64] dts: imx8mq-librem5-r3: Mark buck3 as always on - [arm64] tee: optee: do not check memref size on return from Secure World - [arm64,x86] soundwire: cadence: only prepare attached devices on clock stop - [arm*] perf/arm_pmu_platform: Use dev_err_probe() for IRQ errors - [arm*] perf/arm_pmu_platform: Fix error handling - random: initialize ChaCha20 constants with correct endianness - xhci: check port array allocation was successful before dereferencing it - xhci: check control context is valid before dereferencing it. - xhci: fix potential array out of bounds with several interrupters - bus: mhi: core: Clear context for stopped channels from remove() - [arm64] spi: qup: fix PM reference leak in spi_qup_remove() - [arm64,armhf] usb: musb: fix PM reference leak in musb_irq_work() - usb: core: hub: Fix PM reference leak in usb_port_resume() - [arm64,armhf] usb: dwc3: gadget: Check for disabled LPM quirk - tty: n_gsm: check error while registering tty devices - [x86] intel_th: Consistency and off-by-one fix - [armhf] phy: phy-twl4030-usb: Fix possible use-after-free in twl4030_usb_remove() - [arm64] crypto: sun8i-ce - Fix PM reference leak in sun8i_ce_probe() - [armhf] crypto: stm32/hash - Fix PM reference leak on stm32-hash.c - [armhf] crypto: stm32/cryp - Fix PM reference leak on stm32-cryp.c - [x86] platform/x86: intel_pmc_core: Don't use global pmcdev in quirks - spi: sync up initial chipselect state - btrfs: do proper error handling in create_reloc_root - btrfs: do proper error handling in btrfs_update_reloc_root - btrfs: convert logic BUG_ON()'s in replace_path to ASSERT()'s - drm: Added orientation quirk for OneGX1 Pro - drm/qxl: do not run release if qxl failed to init - drm/qxl: release shadow on shutdown - drm/ast: Fix invalid usage of AST_MAX_HWC_WIDTH in cursor atomic_check - drm/ast: fix memory leak when unload the driver - drm/amd/display: Check for DSC support instead of ASIC revision - drm/amdgpu/display: buffer INTERRUPT_LOW_IRQ_CONTEXT interrupt work - scsi: lpfc: Fix incorrect dbde assignment when building target abts wqe - scsi: lpfc: Fix pt2pt connection does not recover after LOGO - drm/amdgpu: Fix some unload driver issues - sched/pelt: Fix task util_est update filtering - kvfree_rcu: Use same set of GFP flags as does single-argument - scsi: target: pscsi: Fix warning in pscsi_complete_cmd() - [x86] media: ite-cir: check for receive overflow - power: supply: bq27xxx: fix power_avg for newer ICs - media: media/saa7164: fix saa7164_encoder_register() memory leak bugs - media: gspca/sq905.c: fix uninitialized variable - drm/amdgpu: mask the xgmi number of hops reported from psp to kfd - drm/amdgpu : Fix asic reset regression issue introduce by 8f211fe8ac7c4f - drm/amd/display: Fix UBSAN warning for not a valid value for type '_Bool' - scsi: qla2xxx: Always check the return value of qla24xx_get_isp_stats() - scsi: qla2xxx: Fix use after free in bsg - [arm64,armhf] mmc: sdhci-esdhc-imx: validate pinctrl before use it - mmc: sdhci-pci: Add PCI IDs for Intel LKF - ata: ahci: Disable SXS for Hisilicon Kunpeng920 - nvmet: return proper error code from discovery ctrl - scsi: smartpqi: Use host-wide tag space - scsi: smartpqi: Correct request leakage during reset operations - scsi: smartpqi: Add new PCI IDs - scsi: scsi_dh_alua: Remove check for ASC 24h in alua_rtpg() - media: em28xx: fix memory leak - media: vivid: update EDID - [arm64] drm/msm/dp: Fix incorrect NULL check kbot warnings in DP driver - [armhf] clk: socfpga: arria10: Fix memory leak of socfpga_clk on error return - media: dvb-usb: fix memory leak in dvb_usb_adapter_init - media: gscpa/stv06xx: fix memory leak - sched/fair: Ignore percpu threads for imbalance pulls - [arm64] drm/msm/mdp5: Configure PP_SYNC_HEIGHT to double the vtotal - [arm64] drm/msm/mdp5: Do not multiply vclk line count by 100 - drm/amdgpu/ttm: Fix memory leak userptr pages - drm/radeon/ttm: Fix memory leak userptr pages - drm/amd/display: Try YCbCr420 color when YCbCr444 fails - drm/amdgpu: fix NULL pointer dereference - scsi: lpfc: Fix crash when a REG_RPI mailbox fails triggering a LOGO response - scsi: lpfc: Fix error handling for mailboxes completed in MBX_POLL mode - scsi: lpfc: Remove unsupported mbox PORT_CAPABILITIES logic - mfd: intel-m10-bmc: Fix the register access range - mfd: da9063: Support SMBus and I2C mode - scsi: libfc: Fix a format specifier - perf: Rework perf_event_exit_event() - sched,fair: Alternative sched_slice() - [s390x] archrandom: add parameter check for s390_arch_random_generate - sched,psi: Handle potential task count underflow bugs more gracefully - [i386] ALSA: emu8000: Fix a use after free in snd_emu8000_create_mixer - ALSA: hda/conexant: Re-order CX5066 quirk table entries - [i386] ALSA: sb: Fix two use after free in snd_sb_qsound_build - ALSA: usb-audio: Explicitly set up the clock selector - ALSA: usb-audio: Add dB range mapping for Sennheiser Communications Headset PC 8 - ALSA: hda/realtek: fix mute/micmute LEDs for HP ProBook 445 G7 - ALSA: hda/realtek: GA503 use same quirks as GA401 - ALSA: hda/realtek: fix mic boost on Intel NUC 8 - ALSA: hda/realtek - Headset Mic issue on HP platform - ALSA: hda/realtek: fix static noise on ALC285 Lenovo laptops - ALSA: hda/realtek: Add quirk for Intel Clevo PCx0Dx - [x86] tools/power/turbostat: Fix turbostat for AMD Zen CPUs (Closes: #985681) - btrfs: fix race when picking most recent mod log operation for an old root - [arm64] vdso: Discard .note.gnu.property sections in vDSO - Makefile: Move -Wno-unused-but-set-variable out of GCC only block - fs: fix reporting supported extra file attributes for statx() - virtiofs: fix memory leak in virtio_fs_probe() - ubifs: Only check replay with inode type to judge if inode linked - f2fs: fix error handling in f2fs_end_enable_verity() - f2fs: fix to avoid out-of-bounds memory access (CVE-2021-3506) - openvswitch: fix stack OOB read while fragmenting IPv4 packets - [arm64] ACPI: GTDT: Don't corrupt interrupt mappings on watchdow probe failure - NFS: fs_context: validate UDP retrans to prevent shift out-of-bounds - NFS: Don't discard pNFS layout segments that are marked for return - NFSv4: Don't discard segments marked for return in _pnfs_return_layout() - jffs2: Fix kasan slab-out-of-bounds problem - jffs2: Hook up splice_write callback - [powerpc*] powernv: Enable HAIL (HV AIL) for ISA v3.1 processors - [powerpc*] eeh: Fix EEH handling for hugepages in ioremap space. - [x86] intel_th: pci: Add Alder Lake-M support - [arm64,x86] tpm: efi: Use local variable for calculating final log size - [arm64,x86] tpm: vtpm_proxy: Avoid reading host log when using a virtual device - [armhf] crypto: arm/curve25519 - Move '.fpu' after '.arch' - md/raid1: properly indicate failure when ending a failed write request - dm raid: fix inconclusive reshape layout on fast raid4/5/6 table reload sequences - fuse: fix write deadlock - exfat: fix erroneous discard when clear cluster bit - sfc: farch: fix TX queue lookup in TX flush done handling - sfc: farch: fix TX queue lookup in TX event handling - security: commoncap: fix -Wstringop-overread warning - Fix misc new gcc warnings - jffs2: check the validity of dstlen in jffs2_zlib_compress() - smb3: when mounting with multichannel include it in requested capabilities - smb3: do not attempt multichannel to server which does not support it - Revert 337f13046ff0 ("futex: Allow FUTEX_CLOCK_REALTIME with FUTEX_WAIT op") - futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI - [x86] cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is supported - ext4: annotate data race in start_this_handle() - ext4: annotate data race in jbd2_journal_dirty_metadata() - ext4: fix check to prevent false positive report of incorrect used inodes - ext4: do not set SB_ACTIVE in ext4_orphan_cleanup() - ext4: fix error code in ext4_commit_super - ext4: fix ext4_error_err save negative errno into superblock - ext4: fix error return code in ext4_fc_perform_commit() - ext4: allow the dax flag to be set and cleared on inline directories - ext4: Fix occasional generic/418 failure - media: dvbdev: Fix memory leak in dvb_media_device_free() - media: dvb-usb: Fix use-after-free access - media: dvb-usb: Fix memory leak at error in dvb_usb_device_init() - media: v4l2-ctrls: fix reference to freed memory - [arm64] media: venus: hfi_parser: Don't initialize parser on v1 - usb: gadget: dummy_hcd: fix gpf in gadget_setup - usb: gadget: Fix double free of device descriptor pointers - usb: gadget/function/f_fs string table fix for multiple languages - [arm64,armhf] usb: dwc3: gadget: Remove FS bInterval_m1 limitation - [arm64,armhf] usb: dwc3: gadget: Fix START_TRANSFER link state check - [arm64,armhf] usb: dwc3: core: Do core softreset when switch mode - [arm*] usb: dwc2: Fix session request interrupt handler - tty: fix memory leak in vc_deallocate - [x86] tools/power turbostat: Fix offset overflow issue in index converting - tracing: Map all PIDs to command lines - tracing: Restructure trace_clock_global() to never block - dm space map common: fix division bug in sm_ll_find_free_block() - dm integrity: fix missing goto in bitmap_flush_interval error handling - dm rq: fix double free of blk_mq_tag_set in dev remove after table load fails - lib/vsprintf.c: remove leftover 'f' and 'F' cases from bstr_printf() - [arm*] thermal/drivers/cpufreq_cooling: Fix slab OOB issue - thermal/core/fair share: Lock the thermal zone while looping over instances https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.37 - Bluetooth: verify AMP hci_chan before amp_destroy (CVE-2021-33034) - bluetooth: eliminate the potential race condition when removing the HCI controller (CVE-2021-32399) - net/nfc: fix use-after-free llcp_sock_bind/connect (CVE-2021-23134) - io_uring: truncate lengths larger than MAX_RW_COUNT on provide buffers (CVE-2021-3491) - Revert "USB: cdc-acm: fix rounding error in TIOCSSERIAL" - usb: roles: Call try_module_get() from usb_role_switch_find_by_fwnode() - [amd64] tty: moxa: fix TIOCSSERIAL jiffies conversions - USB: serial: usb_wwan: fix TIOCSSERIAL jiffies conversions - USB: serial: ti_usb_3410_5052: fix TIOCSSERIAL permission check - [amd64] tty: moxa: fix TIOCSSERIAL permission check - [x86] usb: typec: tcpm: Address incorrect values of tcpm psy for fixed supply - [x86] usb: typec: tcpm: Address incorrect values of tcpm psy for pps supply - [x86] usb: typec: tcpm: update power supply once partner accepts - FDDI: defxx: Bail out gracefully with unassigned PCI resource for CSR - PCI: Allow VPD access for QLogic ISP2722 - [x86] KVM: Defer the MMU unload to the normal path on an global INVPCID - [arm64] PCI: xgene: Fix cfg resource mapping - PM / devfreq: Unlock mutex and free devfreq struct in error path - iio: inv_mpu6050: Fully validate gyro and accel scale writes - iio:accel:adis16201: Fix wrong axis assignment that prevents loading - iio:adc:ad7476: Fix remove handling - misc: lis3lv02d: Fix false-positive WARN on various HP models - [x86] misc: vmw_vmci: explicitly initialize vmci_notify_bm_set_msg struct - [x86] misc: vmw_vmci: explicitly initialize vmci_datagram payload - selinux: add proper NULL termination to the secclass_map permissions - [x86] sched: Treat Intel SNC topology as default, COD as exception - async_xor: increase src_offs when dropping destination page - md/bitmap: wait for external bitmap writes to complete during tear down - md-cluster: fix use-after-free issue when removing rdev - md: split mddev_find - md: factor out a mddev_find_locked helper from mddev_find - md: md_open returns -EBUSY when entering racing area - md: Fix missing unused status line of /proc/mdstat - ipw2x00: potential buffer overflow in libipw_wx_set_encodeext() - cfg80211: scan: drop entry from hidden_list on overflow - rtw88: Fix array overrun in rtw_get_tx_power_params() - mt76: fix potential DMA mapping leak - [amd64] drm/i915/gvt: Fix virtual display setup for BXT/APL - [amd64] drm/i915/gvt: Fix vfio_edid issue for BXT/APL - drm/qxl: use ttm bo priorities - [arm64,armhf] drm/panfrost: Clear MMU irqs before handling the fault - [arm64,armhf] drm/panfrost: Don't try to map pages that are already mapped - drm/radeon: fix copy of uninitialized variable back to userspace - drm/dp_mst: Revise broadcast msg lct & lcr - drm/dp_mst: Set CLEAR_PAYLOAD_ID_TABLE as broadcast - drm: bridge/panel: Cleanup connector on bridge detach - drm/amd/display: Reject non-zero src_y and src_x for video planes - drm/amdgpu: fix concurrent VM flushes on Vega/Navi v2 - ALSA: hda/realtek: Re-order ALC882 Acer quirk table entries - ALSA: hda/realtek: Re-order ALC882 Sony quirk table entries - ALSA: hda/realtek: Re-order ALC882 Clevo quirk table entries - ALSA: hda/realtek: Re-order ALC269 HP quirk table entries - ALSA: hda/realtek: Re-order ALC269 Acer quirk table entries - ALSA: hda/realtek: Re-order ALC269 Dell quirk table entries - ALSA: hda/realtek: Re-order ALC269 ASUS quirk table entries - ALSA: hda/realtek: Re-order ALC269 Sony quirk table entries - ALSA: hda/realtek: Re-order ALC269 Lenovo quirk table entries - ALSA: hda/realtek: Re-order remaining ALC269 quirk table entries - ALSA: hda/realtek: Re-order ALC662 quirk table entries - ALSA: hda/realtek: Remove redundant entry for ALC861 Haier/Uniwill devices - ALSA: hda/realtek: ALC285 Thinkpad jack pin quirk is unreachable - ALSA: hda/realtek: Fix speaker amp on HP Envy AiO 32 - [s390x] KVM: VSIE: correctly handle MVPG when in VSIE - [s390x] KVM: split kvm_s390_logical_to_effective - [s390x] KVM: fix guarded storage control register handling - [s390x] fix detection of vector enhancements facility 1 vs. vector packed decimal facility - [s390x] KVM: VSIE: fix MVPG handling for prefixing and MSO - [s390x] KVM: split kvm_s390_real_to_abs - [s390x] KVM: extend kvm_s390_shadow_fault to return entry pointer - [x86] KVM: x86/mmu: Alloc page for PDPTEs when shadowing 32-bit NPT with 64-bit - [x86] KVM: x86: Remove emulator's broken checks on CR0/CR3/CR4 loads - [x86] KVM: nSVM: Set the shadow root level to the TDP level for nested NPT - [x86] KVM: SVM: Don't strip the C-bit from CR2 on #PF interception - [x86] KVM: SVM: Do not allow SEV/SEV-ES initialization after vCPUs are created - [x86] KVM: SVM: Inject #GP on guest MSR_TSC_AUX accesses if RDTSCP unsupported - [x86] KVM: nVMX: Defer the MMU reload to the normal path on an EPTP switch - [x86] KVM: nVMX: Truncate bits 63:32 of VMCS field on nested check in !64-bit - [x86] KVM: nVMX: Truncate base/index GPR value on address calc in !64-bit - [arm64] KVM: arm/arm64: Fix KVM_VGIC_V3_ADDR_TYPE_REDIST read - KVM: Destroy I/O bus devices on unregister failure _after_ sync'ing SRCU - KVM: Stop looking for coalesced MMIO zones if the bus is destroyed - [arm64] KVM: Fully zero the vcpu state on reset - [arm64] KVM: arm64: Fix KVM_VGIC_V3_ADDR_TYPE_REDIST_REGION read - Revert "drivers/net/wan/hdlc_fr: Fix a double free in pvc_xmit" - Revert "i3c master: fix missing destroy_workqueue() on error in i3c_master_register" - ovl: fix missing revert_creds() on error path - Revert "drm/qxl: do not run release if qxl failed to init" - [x86] usb: gadget: pch_udc: Revert d3cb25a12138 completely - Revert "tools/power turbostat: adjust for temperature offset" - [arm64] firmware: xilinx: Fix dereferencing freed memory - [armhf] memory: gpmc: fix out of bounds read and dereference on gpmc_cs[] - [armhf] ARM: dts: exynos: correct fuel gauge interrupt trigger level on GT-I9100 - [armhf] ARM: dts: exynos: correct PMIC interrupt trigger level on SMDK5250 - [armhf] serial: stm32: fix code cleaning warnings and checks - [armhf] serial: stm32: add "_usart" prefix in functions name - [armhf] serial: stm32: fix probe and remove order for dma - [armhf] serial: stm32: Use of_device_get_match_data() - [armhf] serial: stm32: fix startup by enabling usart for reception - [armhf] serial: stm32: fix incorrect characters on console - [armhf] serial: stm32: fix TX and RX FIFO thresholds - [armhf] serial: stm32: fix a deadlock condition with wakeup event - [armhf] serial: stm32: fix wake-up flag handling - [armhf] serial: stm32: fix a deadlock in set_termios - [armhf] serial: stm32: fix tx dma completion, release channel - [armhf] serial: stm32: call stm32_transmit_chars locked - [armhf] serial: stm32: fix FIFO flush in startup and set_termios - [armhf] serial: stm32: add FIFO flush when port is closed - [armhf] serial: stm32: fix tx_empty condition - [x86] usb: typec: tps6598x: Fix return value check in tps6598x_probe() - regmap: set debugfs_name to NULL after it is freed - [arm64,armhf] spi: rockchip: avoid objtool warning - mtd: Handle possible -EPROBE_DEFER from parse_mtd_partitions() - mtd: don't lock when recursively deleting partitions - mtd: maps: fix error return code of physmap_flash_remove() - [arm64] dts: qcom: db845c: fix correct powerdown pin for WSA881x - [armhf] spi: stm32: drop devres version of spi_register_master - [armhf] spi: stm32: Fix use-after-free on unbind - [x86] microcode: Check for offline CPUs before requesting new microcode - devtmpfs: fix placement of complete() call - [x86] usb: gadget: pch_udc: Replace cpu_to_le32() by lower_32_bits() - [x86] usb: gadget: pch_udc: Check if driver is present before calling ->setup() - [x86] usb: gadget: pch_udc: Check for DMA mapping error - [x86] usb: gadget: pch_udc: Initialize device pointer before use - [x86] usb: gadget: pch_udc: Provide a GPIO line used on Intel Minnowboard (v1) - [amd64] crypto: ccp - fix command queuing to TEE ring buffer - [x86] crypto: qat - don't release uninitialized resources - [x86] crypto: qat - ADF_STATUS_PF_RUNNING should be set after adf_dev_init - dt-bindings: serial: stm32: Use 'type: object' instead of false for 'additionalProperties' - mtd: require write permissions for locking and badblock ioctls - [arm64] bus: qcom: Put child node before return - soundwire: bus: Fix device found flag correctly - NFSD: Fix sparse warning in nfs4proc.c - NFSv4.2: fix copy stateid copying for the async copy - crypto: poly1305 - fix poly1305_core_setkey() declaration - [x86] crypto: qat - fix error path in adf_isr_resource_alloc() - [armhf] usb: gadget: aspeed: fix dma map failure - [arm64] drivers: nvmem: Fix voltage settings for QTI qfprom-efuse - driver core: platform: Declare early_platform_cleanup() prototype - [armel,armhf] memory: pl353: fix mask of ECC page_size config register - soundwire: stream: fix memory leak in stream config error path - [arm64] firmware: qcom_scm: Make __qcom_scm_is_call_available() return bool - [arm64] firmware: qcom_scm: Reduce locking section for __get_convention() - [arm64] firmware: qcom_scm: Workaround lack of "is available" call on SC7180 - [arm64,armhf] irqchip/gic-v3: Fix OF_BAD_ADDR error handling - [x86] staging: rtl8192u: Fix potential infinite loop - PM / devfreq: Use more accurate returned new_freq as resume_freq - [armhf] clocksource/drivers/timer-ti-dm: Fix posted mode status check order - [armhf] clocksource/drivers/timer-ti-dm: Add missing set_state_oneshot_stopped - spi: Fix use-after-free with devm_spi_alloc_* - [arm64] soc: qcom: mdt_loader: Validate that p_filesz < p_memsz - [arm64] soc: qcom: mdt_loader: Detect truncated read of segments - PM: runtime: Replace inline function pm_runtime_callbacks_present() - [amd64,arm64] ACPI: CPPC: Replace cppc_attr with kobj_attribute - [x86] crypto: qat - Fix a double free in adf_create_ring - [arm64] cpufreq: armada-37xx: Fix setting TBG parent for load levels - [arm64] clk: mvebu: armada-37xx-periph: remove .set_parent method for CPU PM clock - [arm64] cpufreq: armada-37xx: Fix the AVS value for load L1 - [arm64] clk: mvebu: armada-37xx-periph: Fix switching CPU freq from 250 Mhz to 1 GHz - [arm64] clk: mvebu: armada-37xx-periph: Fix workaround for switching from L1 to L0 - [arm64] cpufreq: armada-37xx: Fix driver cleanup when registration failed - [arm64] cpufreq: armada-37xx: Fix determining base CPU frequency - USB: cdc-acm: fix unprivileged TIOCCSERIAL - USB: cdc-acm: fix TIOCGSERIAL implementation - tty: actually undefine superseded ASYNC flags - tty: fix return value for unsupported ioctls - tty: fix return value for unsupported termiox ioctls - serial: core: return early on unsupported ioctls - node: fix device cleanups in error handling code - crypto: chelsio - Read rxchannel-id from firmware - usbip: vudc: fix missing unlock on error in usbip_sockfd_store() - security: keys: trusted: fix TPM2 authorizations - [x86] platform/x86: pmc_atom: Match all Beckhoff Automation baytrail boards with critclk_systems DMI table - [armhf] dts: aspeed: Rainier: Fix humidity sensor bus address - [x86] Drivers: hv: vmbus: Use after free in __vmbus_open() - [x86] Drivers: hv: vmbus: Increase wait time for VMbus unload - [x86] PM: hibernate: x86: Use crc32 instead of md5 for hibernation e820 integrity check - [arm*] usb: dwc2: Fix host mode hibernation exit with remote wakeup flow. - [arm*] usb: dwc2: Fix hibernation between host and device modes. - ttyprintk: Add TTY hangup callback. - [armhf] serial: omap: don't disable rs485 if rts gpio is missing - [armhf] serial: omap: fix rs485 half-duplex filtering - xen-blkback: fix compatibility bug with single page rings - [armhf] soc: aspeed: fix a ternary sign expansion bug - [armhf] drm/tilcdc: send vblank event when disabling crtc - [armhf] drm/stm: Fix bus_flags handling - drm/amd/display: Fix off by one in hdmi_14_process_transaction() - sched/fair: Fix shift-out-of-bounds in load_balance() - afs: Fix updating of i_mode due to 3rd party change - rcu: Remove spurious instrumentation_end() in rcu_nmi_enter() - media: vivid: fix assignment of dev->fbuf_out_flags - media: saa7134: use sg_dma_len when building pgtable - media: saa7146: use sg_dma_len when building pgtable - [armhf] media: aspeed: fix clock handling logic - drm/probe-helper: Check epoch counter in output_poll_execute() - [arm64] media: venus: core: Fix some resource leaks in the error path of 'venus_probe()' - media: m88ds3103: fix return value check in m88ds3103_probe() - media: m88rs6000t: avoid potential out-of-bounds reads on arrays - [x86] kprobes: Fix to check non boostable prefixes correctly - sata_mv: add IRQ checks - ata: libahci_platform: fix IRQ check - seccomp: Fix CONFIG tests for Seccomp_filters - nvme-tcp: block BH in sk state_change sk callback - nvmet-tcp: fix incorrect locking in state_change sk callback - [armhf] clk: imx: Fix reparenting of UARTs not associated with stdout - nvme: retrigger ANA log update if group descriptor isn't found - media: v4l2-ctrls.c: fix race condition in hdl->requests list - vfio/pci: Move VGA and VF initialization to functions - vfio/pci: Re-order vfio_pci_probe() - [amd64] vfio/mdev: Do not allow a mdev_type to have a NULL parent pointer - drm/amd/display: use GFP_ATOMIC in dcn20_resource_construct - drm/radeon: Fix a missing check bug in radeon_dp_mst_detect() - scsi: pm80xx: Increase timeout for pm80xx mpi_uninit_check() - scsi: pm80xx: Fix potential infinite loop - scsi: ufs: ufshcd-pltfrm: Fix deferred probing - [amd64] scsi: hisi_sas: Fix IRQ checks - [powerpc*] scsi: ibmvfc: Fix invalid state machine BUG_ON() - nvmet-tcp: fix a segmentation fault during io parsing error - nvme-pci: don't simple map sgl when sgls are disabled - [armhf] HSI: core: fix resource leaks in hsi_add_client_from_dt() - [amd64] x86/events/amd/iommu: Fix sysfs type mismatch - [x86] perf/amd/uncore: Fix sysfs type mismatch - io_uring: fix overflows checks in provide buffers - sched/debug: Fix cgroup_path[] serialization - drivers/block/null_blk/main: Fix a double free in null_init. - xsk: Respect device's headroom and tailroom on generic xmit path - HID: plantronics: Workaround for double volume key presses - RDMA/mlx5: Fix mlx5 rates to IB rates map - [x86] KVM: x86/mmu: Retry page faults that hit an invalid memslot - Bluetooth: avoid deadlock between hci_dev->lock and socket lock - bpftool: Fix maybe-uninitialized warnings - iommu: Check dev->iommu in iommu_dev_xxx functions - [amd64] iommu/vt-d: Reject unsupported page request modes - [powerpc*] prom: Mark identical_pvr_fixup as __init - inet: use bigger hash table for IP ID generation - [arm64,armhf] pinctrl: pinctrl-single: remove unused parameter - [arm64,armhf] pinctrl: pinctrl-single: fix pcs_pin_dbg_show() when bits_per_mux is not zero - [mips64el,mipsel] loongson64: fix bug when PAGE_SIZE > 16KB - RDMA/mlx5: Fix drop packet rule in egress table - IB/isert: Fix a use after free in isert_connect_request - gpio: guard gpiochip_irqchip_add_domain() with GPIOLIB_IRQCHIP - ALSA: core: remove redundant spin_lock pair in snd_card_disconnect - net: phy: lan87xx: fix access to wrong register of LAN87xx - udp: never accept GSO_FRAGLIST packets - [powerpc*] pseries: Only register vio drivers if vio bus exists - net/tipc: fix missing destroy_workqueue() on error in tipc_crypto_start() - bug: Remove redundant condition check in report_bug - RDMA/core: Fix corrupted SL on passive side - nfc: pn533: prevent potential memory corruption - [arm64] net: hns3: Limiting the scope of vector_ring_chain variable - [amd64] iommu/vt-d: Don't set then clear private data in prq_event_thread() - iommu: Fix a boundary issue to avoid performance drop - [amd64] iommu/vt-d: Report right snoop capability when using FL for IOVA - [amd64] iommu/vt-d: Report the right page fault address - [amd64] iommu/vt-d: Preset Access/Dirty bits for IOVA over FL - [amd64] iommu/vt-d: Remove WO permissions on second-level paging entries - [amd64] iommu/vt-d: Invalidate PASID cache when root/context entry changed - ALSA: usb-audio: Add error checks for usb_driver_claim_interface() calls - HID: lenovo: Use brightness_set_blocking callback for setting LEDs brightness - HID: lenovo: Fix lenovo_led_set_tp10ubkbd() error handling - HID: lenovo: Check hid_get_drvdata() returns non NULL in lenovo_event() - HID: lenovo: Map mic-mute button to KEY_F20 instead of KEY_MICMUTE - [arm64] KVM: Initialize VCPU mdcr_el2 before loading it - [arm*] ASoC: simple-card: fix possible uninitialized single_cpu local variable - [amd64] IB/hfi1: Use kzalloc() for mmu_rb_handler allocation - [powerpc*] 64s: Fix pte update for kernel memory on radix - [powerpc*] perf: Fix PMU constraint check for EBB events - mac80211: bail out if cipher schemes are invalid - perf vendor events amd: Fix broken L2 Cache Hits from L2 HWPF metric - xfs: fix return of uninitialized value in variable error - rtw88: Fix an error code in rtw_debugfs_set_rsvd_page() - mt7601u: fix always true expression - [powerpc*] KVM: PPC: Book3S HV P9: Restore host CTRL SPR after guest exit - ovl: invalidate readdir cache on changes to dir with origin - RDMA/qedr: Fix error return code in qedr_iw_connect() - [amd64] IB/hfi1: Fix error return code in parse_platform_config() - cxgb4: Fix unintentional sign extension issues - [arm64] net: thunderx: Fix unintentional sign extension issue - RDMA/srpt: Fix error return code in srpt_cm_req_recv() - [arm64,armhf] i2c: imx: fix reference leak when pm_runtime_get_sync fails - [armhf] i2c: omap: fix reference leak when pm_runtime_get_sync fails - [armhf] i2c: stm32f7: fix reference leak when pm_runtime_get_sync fails - [powerpc*] xive: Drop check on irq_data in xive_core_debug_show() - [powerpc*] xive: Fix xmon command "dxi" - net/packet: make packet_fanout.arr size configurable up to 64K - net/packet: remove data races in fanout operations - [amd64] drm/i915/gvt: Fix error code in intel_gvt_init_device() - [amd64] iommu/amd: Put newline after closing bracket in warning - [mips64el,mipsel] pci-legacy: stop using of_pci_range_to_resource - [powerpc*] pseries: extract host bridge from pci_bus prior to bus removal - [powerpc*] smp: Reintroduce cpu_core_mask - [x86] KVM: dump_vmcs should not assume GUEST_IA32_EFER is valid - rtlwifi: 8821ae: upgrade PHY and RF parameters - [arm64,armhf] wlcore: fix overlapping snprintf arguments in debugfs - mwl8k: Fix a double Free in mwl8k_probe_hw - netfilter: nft_payload: fix C-VLAN offload support - netfilter: nftables_offload: VLAN id needs host byteorder in flow dissector - netfilter: nftables_offload: special ethertype handling for VLAN - [x86] vsock/vmci: log once the failed queue pair allocation - gro: fix napi_gro_frags() Fast GRO breakage due to IP alignment check - RDMA/cxgb4: add missing qpid increment - RDMA/i40iw: Fix error unwinding when i40iw_hmc_sd_one fails - ALSA: usb: midi: don't return -ENOMEM when usb_urb_ep_type_check fails - sfc: ef10: fix TX queue lookup in TX event handling - vsock/virtio: free queued packets when closing socket - [armhf] net: davinci_emac: Fix incorrect masking of tx and rx error channel - [amd64] crypto: ccp: Detect and reject "invalid" addresses destined for PSP - nfp: devlink: initialize the devlink port attribute "lanes" - net: stmmac: fix TSO and TBS feature enabling during driver open - RDMA/rxe: Fix a bug in rxe_fill_ip_info() - RDMA/core: Add CM to restrack after successful attachment to a device - [powerpc*] 64: Fix the definition of the fixmap area - ath9k: Fix error check in ath9k_hw_read_revisions() for PCI devices - ath10k: Fix a use after free in ath10k_htc_send_bundle - ath10k: Fix ath10k_wmi_tlv_op_pull_peer_stats_info() unlock without lock - wlcore: Fix buffer overrun by snprintf due to incorrect buffer size - [powerpc*] perf: Fix the threshold event selection for memory events in power10 - net: phy: marvell: fix m88e1011_set_downshift - net: phy: marvell: fix m88e1111_set_downshift - bnxt_en: fix ternary sign extension bug in bnxt_show_temp() - net: geneve: modify IP header check in geneve6_xmit_skb and geneve_xmit_skb - bnxt_en: Fix RX consumer index logic in the error path. - [x86] KVM: VMX: Intercept FS/GS_BASE MSR accesses for 32-bit KVM - [arm64] net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send - bpf: Fix propagation of 32 bit unsigned bounds from 64 bit bounds - net: bridge: mcast: fix broken length + header check for MRDv6 Adv. - net:nfc:digital: Fix a double free in digital_tg_recv_dep_req - perf tools: Change fields type in perf_record_time_conv - perf jit: Let convert_timestamp() to be backwards-compatible - perf session: Add swap operation for event TIME_CONV - mm/sl?b.c: remove ctor argument from kmem_cache_flags - mm: memcontrol: slab: fix obtain a reference to a freeing memcg - mm/sparse: add the missing sparse_buffer_fini() in error branch - mm/memory-failure: unnecessary amount of unmapping - afs: Fix speculative status fetches - bpf: Fix alu32 const subreg bound tracking on bitwise operations (CVE-2021-3490) - bpf, ringbuf: Deny reserve of buffers larger than ringbuf (CVE-2021-3489) - bpf: Prevent writable memory-mapping of read-only ringbuf pages - [arm64] Remove arm64_dma32_phys_limit and its uses - net: Only allow init netns to set default tcp cong to a restricted algo - smp: Fix smp_call_function_single_async prototype - Revert "net/sctp: fix race condition in sctp_destroy_sock" - sctp: delay auto_asconf init until binding the first addr (CVE-2021-23133) https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.38 - [arm64,x86] tpm: fix error return code in tpm2_get_cc_attrs_tbl() - [arm64,x86] tpm, tpm_tis: Extend locality handling to TPM2 in tpm_tis_gen_interrupt() - [arm64,x86] tpm, tpm_tis: Reserve locality in tpm_tis_resume() - [x86] KVM: x86/mmu: Remove the defunct update_pte() paging hook - [x86] KVM/VMX: Invoke NMI non-IST entry instead of IST entry - ACPI: PM: Add ACPI ID of Alder Lake Fan - PM: runtime: Fix unpaired parent child_count for force_resume - [x86] cpufreq: intel_pstate: Use HWP if enabled by platform firmware - kvm: Cap halt polling at kvm->max_halt_poll_ns - ath11k: fix thermal temperature read - fs: dlm: fix debugfs dump - fs: dlm: add errno handling to check callback - fs: dlm: check on minimum msglen size - fs: dlm: flush swork on shutdown - tipc: convert dest node's address to network order - [x86] ASoC: Intel: bytcr_rt5640: Enable jack-detect support on Asus T100TAF - net/mlx5e: Use net_prefetchw instead of prefetchw in MPWQE TX datapath - [arm64] net: stmmac: Set FIFO sizes for ipq806x - Bluetooth: Fix incorrect status handling in LE PHY UPDATE event - i2c: bail out early when RDWR parameters are wrong - ALSA: hdsp: don't disable if not enabled - ALSA: hdspm: don't disable if not enabled - ALSA: rme9652: don't disable if not enabled - ALSA: bebob: enable to deliver MIDI messages for multiple ports - Bluetooth: Set CONF_NOT_COMPLETE as l2cap_chan default - Bluetooth: initialize skb_queue_head at l2cap_chan_create() - net/sched: cls_flower: use ntohs for struct flow_dissector_key_ports - net: bridge: when suppression is enabled exclude RARP packets - Bluetooth: check for zapped sk before connecting - [powerpc] 32: Statically initialise first emergency context - [arm64] net: hns3: remediate a potential overflow risk of bd_num_list - [arm64] net: hns3: add handling for xmit skb with recursive fraglist - ip6_vti: proper dev_{hold|put} in ndo_[un]init methods - [x86] ASoC: Intel: bytcr_rt5640: Add quirk for the Chuwi Hi8 tablet - ice: handle increasing Tx or Rx ring sizes - Bluetooth: btusb: Enable quirk boolean flag for Mediatek Chip. - [x86] ASoC: rt5670: Add a quirk for the Dell Venue 10 Pro 5055 - i2c: Add I2C_AQ_NO_REP_START adapter quirk - [mips64el,mipsel] MIPS: Loongson64: Use _CACHE_UNCACHED instead of _CACHE_UNCACHED_ACCELERATED - [amd64] IB/hfi1: Correct oversized ring allocation - mac80211: clear the beacon's CRC after channel switch - [armhf] pinctrl: samsung: use 'int' for register masks in Exynos - rtw88: 8822c: add LC calibration for RTL8822C - mt76: mt76x0: disable GTK offloading - fuse: invalidate attrs when page writeback completes - virtiofs: fix userns - cuse: prevent clone - iwlwifi: pcie: make cfg vs. trans_cfg more robust - [powerpc*] mm: Add cond_resched() while removing hpte mappings - Revert "iommu/amd: Fix performance counter initialization" - [amd64] iommu/amd: Remove performance counter pre-initialization test - ALSA: hda/realtek: Add quirk for Lenovo Ideapad S740 - [x86] ASoC: Intel: sof_sdw: add quirk for new ADL-P Rvp - ALSA: hda/hdmi: fix race in handling acomp ELD notification at resume - sctp: Fix out-of-bounds warning in sctp_process_asconf_param() - flow_dissector: Fix out-of-bounds warning in __skb_flow_bpf_to_target() - [powerpc*] smp: Set numa node before updating mask - [x86] ASoC: rt286: Generalize support for ALC3263 codec - ethtool: ioctl: Fix out-of-bounds warning in store_link_ksettings_for_user() - net: sched: tapr: prevent cycle_time == 0 in parse_taprio_schedule - [powerpc*] pseries: Stop calling printk in rtas_stop_self() - wl3501_cs: Fix out-of-bounds warnings in wl3501_send_pkt - wl3501_cs: Fix out-of-bounds warnings in wl3501_mgmt_join - [powerpc*] iommu: Annotate nested lock for lockdep - iavf: remove duplicate free resources calls - kbuild: generate Module.symvers only when vmlinux exists - bnxt_en: Add PCI IDs for Hyper-V VF devices. - [ia64] module: fix symbolizer crash on fdescr - watchdog: rename __touch_watchdog() to a better descriptive name - watchdog: explicitly update timestamp when reporting softlockup - watchdog/softlockup: remove logic that tried to prevent repeated reports - watchdog: fix barriers when printing backtraces from all CPUs - [x86] ASoC: rt286: Make RT286_SET_GPIO_* readable and writable - thermal: thermal_of: Fix error return code of thermal_of_populate_bind_params() - f2fs: move ioctl interface definitions to separated file - f2fs: fix compat F2FS_IOC_{MOVE,GARBAGE_COLLECT}_RANGE - f2fs: fix to allow migrating fully valid segment - f2fs: fix panic during f2fs_resize_fs() - f2fs: fix a redundant call to f2fs_balance_fs if an error occurs - PCI: Release OF node in pci_scan_device()'s error path - [armel,armhf] 9064/1: hw_breakpoint: Do not directly check the event's overflow_handler hook - f2fs: fix to align to section for fallocate() on pinned file - f2fs: fix to update last i_size if fallocate partially succeeds - f2fs: fix to avoid touching checkpointed data in get_victim() - f2fs: fix to cover __allocate_new_section() with curseg_lock - f2fs: Fix a hungtask problem in atomic write - f2fs: fix to avoid accessing invalid fio in f2fs_allocate_data_block() - [arm64] rpmsg: qcom_glink_native: fix error return code of qcom_glink_rx_data() - NFS: nfs4_bitmask_adjust() must not change the server global bitmasks - NFS: Fix attribute bitmask in _nfs42_proc_fallocate() - NFSv4.2: Always flush out writes in nfs42_proc_fallocate() - NFS: Deal correctly with attribute generation counter overflow - pNFS/flexfiles: fix incorrect size check in decode_nfs_fh() - NFSv4.2 fix handling of sr_eof in SEEK's reply - SUNRPC: Move fault injection call sites - SUNRPC: Remove trace_xprt_transmit_queued - SUNRPC: Handle major timeout in xprt_adjust_timeout() - [arm64] thermal/drivers/tsens: Fix missing put_device error - NFSv4.x: Don't return NFS4ERR_NOMATCHING_LAYOUT if we're unmounting - nfsd: ensure new clients break delegations - SUNRPC: fix ternary sign expansion bug in tracing - xprtrdma: Avoid Receive Queue wrapping - xprtrdma: Fix cwnd update ordering - xprtrdma: rpcrdma_mr_pop() already does list_del_init() - swiotlb: Fix the type of index - ceph: fix inode leak on getattr error in __fh_to_dentry - scsi: qla2xxx: Prevent PRLI in target mode - scsi: ufs: core: Do not put UFS power into LPM if link is broken - scsi: ufs: core: Cancel rpm_dev_flush_recheck_work during system suspend - scsi: ufs: core: Narrow down fast path in system suspend path - rtc: ds1307: Fix wday settings for rx8130 - [arm64] net: hns3: fix incorrect configuration for igu_egu_hw_err - [arm64] net: hns3: initialize the message content in hclge_get_link_mode() - [arm64] net: hns3: add check for HNS3_NIC_STATE_INITED in hns3_reset_notify_up_enet() - [arm64] net: hns3: fix for vxlan gpe tx checksum bug - [arm64] net: hns3: use netif_tx_disable to stop the transmit queue - [arm64] net: hns3: disable phy loopback setting in hclge_mac_start_phy - sctp: do asoc update earlier in sctp_sf_do_dupcook_a - [riscv64] Fix error code returned by riscv_hartid_to_cpuid() - sunrpc: Fix misplaced barrier in call_decode - ethernet:enic: Fix a use after free bug in enic_hard_start_xmit - sctp: fix a SCTP_MIB_CURRESTAB leak in sctp_sf_do_dupcook_b - netfilter: xt_SECMARK: add new revision to fix structure layout - net: stmmac: Clear receive all(RA) bit when promiscuous mode is off - drm/radeon: Fix off-by-one power_state index heap overwrite - drm/radeon: Avoid power table parsing memory leaks - [arm64] entry: factor irq triage logic into macros - [arm64] entry: always set GIC_PRIO_PSR_I_SET during entry - khugepaged: fix wrong result value for trace_mm_collapse_huge_page_isolate() - mm/hugeltb: handle the error case in hugetlb_fix_reserve_counts() - mm/migrate.c: fix potential indeterminate pte entry in migrate_vma_insert_page() - ksm: fix potential missing rmap_item for stable_node - mm/gup: check every subpage of a compound page during isolation - mm/gup: return an error on migration failure - mm/gup: check for isolation errors - ethtool: fix missing NLM_F_MULTI flag when dumping - net: fix nla_strcmp to handle more then one trailing null character - smc: disallow TCP_ULP in smc_setsockopt() - netfilter: nfnetlink_osf: Fix a missing skb_header_pointer() NULL check - netfilter: nftables: Fix a memleak from userdata error path in new objects - sched: Fix out-of-bound access in uclamp - sched/fair: Fix unfairness caused by missing load decay - fs/proc/generic.c: fix incorrect pde_is_permanent check - kernel: kexec_file: fix error return code of kexec_calculate_store_digests() - kernel/resource: make walk_system_ram_res() find all busy IORESOURCE_SYSTEM_RAM resources - kernel/resource: make walk_mem_res() find all busy IORESOURCE_MEM resources - netfilter: nftables: avoid overflows in nft_hash_buckets() - i40e: fix broken XDP support - i40e: Fix use-after-free in i40e_client_subtask() - i40e: fix the restart auto-negotiation after FEC modified - i40e: Fix PHY type identifiers for 2.5G and 5G adapters - f2fs: avoid unneeded data copy in f2fs_ioc_move_range() - [powerpc*] 64s: Fix crashes when toggling stf barrier - [powerpc*] 64s: Fix crashes when toggling entry flush barrier - hfsplus: prevent corruption in shrinking truncate - squashfs: fix divide error in calculate_skip() - userfaultfd: release page in error path to avoid BUG_ON - mm/hugetlb: fix F_SEAL_FUTURE_WRITE - blk-iocost: fix weight updates of inner active iocgs - [arm64] mte: initialize RGSR_EL1.SEED in __cpu_setup - [arm64] Fix race condition on PG_dcache_clean in __sync_icache_dcache() - btrfs: fix race leading to unpersisted data and metadata on fsync - drm/radeon/dpm: Disable sclk switching on Oland when two 4K 60Hz monitors are connected - [x86] drm/i915: Avoid div-by-zero on gen2 - kvm: exit halt polling on need_resched() as well - [x86] KVM: LAPIC: Accurately guarantee busy wait for timer to expire when using hv_timer - [arm64] drm/msm/dp: initialize audio_comp when audio starts - [x86] KVM: x86: Cancel pvclock_gtod_work on module removal - [x86] KVM: x86: Prevent deadlock against tk_core.seq - dax: Add an enum for specifying dax wakup mode - dax: Add a wakeup mode parameter to put_unlocked_entry() - dax: Wake up all waiters after invalidating dax entry - [amd64] xen/unpopulated-alloc: consolidate pgmap manipulation - [amd64] xen/unpopulated-alloc: fix error return code in fill_list() - [arm64,armhf] usb: dwc3: gadget: Free gadget structure only after freeing endpoints - iio: light: gp2ap002: Fix rumtime PM imbalance on error - iio: proximity: pulsedlight: Fix rumtime PM imbalance on error - [armhf] hwmon: (occ) Fix poll rate limiting - ACPI: scan: Fix a memory leak in an error handling path - kyber: fix out of bounds access when preempted - nvmet: add lba to sect conversion helpers - nvmet: fix inline bio check for bdev-ns - nvmet-rdma: Fix NULL deref when SEND is completed with error - f2fs: compress: fix to free compress page correctly - f2fs: compress: fix race condition of overwrite vs truncate - f2fs: compress: fix to assign cc.cluster_idx correctly - nbd: Fix NULL pointer in flush_workqueue - blk-mq: plug request for shared sbitmap - blk-mq: Swap two calls in blk_mq_exit_queue() - [armhf] usb: dwc3: omap: improve extcon initialization - [arm64] usb: dwc3: pci: Enable usb2-gadget-lpm-disable for Intel Merrifield - usb: xhci: Increase timeout for HC halt - [arm*] usb: dwc2: Fix gadget DMA unmap direction - usb: core: hub: fix race condition about TRSMRCY of resume - [arm64,armhf] usb: dwc3: gadget: Enable suspend events - [arm64,armhf] usb: dwc3: gadget: Return success always for kick transfer in ep queue - [x86] usb: typec: ucsi: Retrieve all the PDOs instead of just the first 4 - [x86] usb: typec: ucsi: Put fwnode in any case during ->probe() - xhci-pci: Allow host runtime PM as default for Intel Alder Lake xHCI - xhci: Do not use GFP_KERNEL in (potentially) atomic context - xhci: Add reset resume quirk for AMD xhci controller. - iio: gyro: mpu3050: Fix reported temperature value - iio: tsl2583: Fix division by a zero lux_val - cdc-wdm: untangle a circular dependency between callback and softint - xen/gntdev: fix gntdev_mmap() error exit path - [x86] KVM: Emulate RDPID only if RDTSCP is supported - [x86] KVM: Move RDPID emulation intercept to its own enum - [x86] KVM: nVMX: Always make an attempt to map eVMCS after migration - [x86] KVM: VMX: Do not advertise RDPID if ENABLE_RDTSCP control is unsupported - [x86] KVM: VMX: Disable preemption when probing user return MSRs - Revert "iommu/vt-d: Remove WO permissions on second-level paging entries" - Revert "iommu/vt-d: Preset Access/Dirty bits for IOVA over FL" - iommu/vt-d: Preset Access/Dirty bits for IOVA over FL - iommu/vt-d: Remove WO permissions on second-level paging entries - mm: fix struct page layout on 32-bit systems - [mips*] Reinstate platform `__div64_32' handler - [mips*] Avoid DIVU in `__div64_32' is result would be zero - [mips*] Avoid handcoded DIVU in `__div64_32' altogether - [armhf] clocksource/drivers/timer-ti-dm: Prepare to handle dra7 timer wrap issue - [armhf] clocksource/drivers/timer-ti-dm: Handle dra7 timer wrap errata i940 - [armel,armhf] 9011/1: centralize phys-to-virt conversion of DT/ATAGS address - [armel,armhf] 9012/1: move device tree mapping out of linear region - [armel,armhf] 9020/1: mm: use correct section size macro to describe the FDT virtual address - [armel,armhf] 9027/1: head.S: explicitly map DT even if it lives in the first physical section - [x86] usb: typec: tcpm: Fix error while calculating PPS out values - kobject_uevent: remove warning in init_uevent_argv() - [x86] drm/i915/gt: Fix a double free in gen8_preallocate_top_level_pdp - [x86] drm/i915: Read C0DRB3/C1DRB3 as 16 bits again - [x86] drm/i915/overlay: Fix active retire callback alignment - [x86] drm/i915: Fix crash in auto_retire - debugfs: Make debugfs_allow RO after init - ext4: fix debug format string warning - nvme: do not try to reconfigure APST when the controller is not live [ Vincent Blut ] * [x86] sound/soc/intel: Enable SND_SOC_INTEL_CATPT as module (Closes: #986822) * [x86] sound/soc/intel/boards: Enable SND_SOC_INTEL_BDW_RT5650_MACH as module * drivers/input/rmi4: Enable RMI4_F3A (Closes: #986848) * [armhf] drivers/gpio: Enable GPIO_MXC as module (Closes: #987019) * [x86] drivers/misc/mei: Enable INTEL_MEI_TXE, INTEL_MEI_HDCP as modules (Closes: #987281) [ Uwe Kleine-König ] * [arm64] Enable more options for NXP's i.MX8 (Closes: #985862) [ Salvatore Bonaccorso ] * vfs: move cap_convert_nscap() call into vfs_setxattr() (CVE-2021-3493) * Refresh "Makefile: Do not check for libelf when building OOT module" * Bump ABI to 7 * Refresh "tools/include/uapi: Fix " * [rt] Update to 5.10.35-rt39 * [rt] Refresh "powerpc/mm/highmem: Switch to generic kmap atomic" * [arm64] udeb: Include mdio module for RPi4 ethernet in installer (Closes: #985956) [ Vagrant Cascadian ] * [arm64] Disable USB type-C DisplayPort in pinebook pro device-tree. * [arm64] Enable TYPEC_FUSB302, SND_SOC_ES8316, TYPEC and TYPEC_TCPM as modules. (Closes: #987638) [ Michal Simek ] * [arm64] Enable clock driver for Xilinx ZynqMP SoC [ Valentin Vidic ] * [s390x] udeb: Include standard scsi-modules containing the virtio_blk module (Closes: #988005) [ Ben Hutchings ] * kbuild: Abort build if SUBDIRS used (Closes: #987575) -- Salvatore Bonaccorso Thu, 20 May 2021 07:47:35 +0200 linux (5.10.28-1) unstable; urgency=medium * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.27 - mm/memcg: rename mem_cgroup_split_huge_fixup to split_page_memcg and add nr_pages argument - mm/memcg: set memcg when splitting page - mt76: fix tx skb error handling in mt76_dma_tx_queue_skb - net: stmmac: fix dma physical address of descriptor when display ring - [arm64,armhf] net: fec: ptp: avoid register access when ipg clock is disabled - [powerpc*] 4xx: Fix build errors from mfdcr() - atm: eni: dont release is never initialized - atm: lanai: dont run lanai_dev_close if not open - Revert "r8152: adjust the settings about MAC clock speed down for RTL8153" - [x86] ALSA: hda: ignore invalid NHLT table - ixgbe: Fix memleak in ixgbe_configure_clsu32 - blk-cgroup: Fix the recursive blkg rwstat - net: tehuti: fix error return code in bdx_probe() - net: intel: iavf: fix error return code of iavf_init_get_resources() - sun/niu: fix wrong RXMAC_BC_FRM_CNT_COUNT count - gianfar: fix jumbo packets+napi+rx overrun crash (CVE-2021-29264) - cifs: ask for more credit on async read/write code paths - gfs2: fix use-after-free in trans_drain - [arm64,armhf] cpufreq: blacklist Arm Vexpress platforms in cpufreq-dt-platdev - gpiolib: acpi: Add missing IRQF_ONESHOT - nfs: fix PNFS_FLEXFILE_LAYOUT Kconfig default - NFS: Correct size calculation for create reply length - [arm64] net: hisilicon: hns: fix error return code of hns_nic_clear_all_rx_fetch() - [arm64] net: enetc: set MAC RX FIFO to recommended value - atm: uPD98402: fix incorrect allocation - atm: idt77252: fix null-ptr-dereference - cifs: change noisy error message to FYI - kbuild: add image_name to no-sync-config-targets - umem: fix error return code in mm_pci_probe() - [sparc64] Fix opcode filtering in handling of no fault loads - u64_stats,lockdep: Fix u64_stats_init() vs lockdep - block: Fix REQ_OP_ZONE_RESET_ALL handling - drm/amdgpu: fb BO should be ttm_bo_type_device - drm/radeon: fix AGP dependency - nvme: simplify error logic in nvme_validate_ns() - nvme: add NVME_REQ_CANCELLED flag in nvme_cancel_request() - nvme-fc: set NVME_REQ_CANCELLED in nvme_fc_terminate_exchange() - nvme-fc: return NVME_SC_HOST_ABORTED_CMD when a command has been aborted - nvme-core: check ctrl css before setting up zns - nvme-rdma: Fix a use after free in nvmet_rdma_write_data_done - nvme-pci: add the DISABLE_WRITE_ZEROES quirk for a Samsung PM1725a - nfs: we don't support removing system.nfs4_acl - block: Suppress uevent for hidden device when removed - mm/fork: clear PASID for new mm - [ia64] fix ia64_syscall_get_set_arguments() for break-based syscalls - [ia64] fix ptrace(PTRACE_SYSCALL_INFO_EXIT) sign - static_call: Pull some static_call declarations to the type headers - [x86] static_call: Allow module use without exposing static_call_key - [x86] static_call: Fix the module key fixup - [x86] static_call: Fix static_call_set_init() - [x86] KVM: Protect userspace MSR filter with SRCU, and set atomically-ish - btrfs: fix sleep while in non-sleep context during qgroup removal - selinux: don't log MAC_POLICY_LOAD record on failed policy load - selinux: fix variable scope issue in live sidtab conversion - [arm64] netsec: restore phy power state after controller reset - [x86] platform/x86: intel-vbtn: Stop reporting SW_DOCK events - psample: Fix user API breakage - z3fold: prevent reclaim/free race for headless pages - squashfs: fix inode lookup sanity checks - squashfs: fix xattr id and id lookup sanity checks - hugetlb_cgroup: fix imbalanced css_get and css_put pair for shared mappings - [x86] ACPI: video: Add missing callback back for Sony VPCEH3U1E - ACPICA: Always create namespace nodes using acpi_ns_create_node() - [arm64] stacktrace: don't trace arch_stack_walk() - integrity: double check iint_cache was initialized - [armhf] drm/etnaviv: Use FOLL_FORCE for userptr - drm/amdgpu: Add additional Sienna Cichlid PCI ID - [x86] drm/i915: Fix the GT fence revocation runtime PM logic - dm verity: fix DM_VERITY_OPTS_MAX value - dm ioctl: fix out of bounds array access when no devices - [armhf] bus: omap_l3_noc: mark l3 irqs as IRQF_NO_THREAD - [armhf] OMAP2+: Fix smartreflex init regression after dropping legacy data - [armhf] soc: ti: omap-prm: Fix occasional abort on reset deassert for dra7 iva - veth: Store queue_mapping independently of XDP prog presence - bpf: Change inode_storage's lookup_elem return value from NULL to -EBADF - net/mlx5e: RX, Mind the MPWQE gaps when calculating offsets - net/mlx5e: When changing XDP program without reset, take refs for XSK RQs - net/mlx5e: Don't match on Geneve options in case option masks are all zero - ipv6: fix suspecious RCU usage warning - drop_monitor: Perform cleanup upon probe registration failure - macvlan: macvlan_count_rx() needs to be aware of preemption - net: sched: validate stab values - [armhf] net: dsa: bcm_sf2: Qualify phydev->dev_flags based on port - igc: reinit_locked() should be called with rtnl_lock - igc: Fix Pause Frame Advertising - igc: Fix Supported Pause Frame Link Setting - igc: Fix igc_ptp_rx_pktstamp() - e1000e: add rtnl_lock() to e1000_reset_task - e1000e: Fix error handling in e1000_set_d0_lplu_state_82571 - net/qlcnic: Fix a use after free in qlcnic_83xx_get_minidump_template - net: phy: broadcom: Add power down exit reset state delay - [armhf] ftgmac100: Restart MAC HW once - net: qrtr: fix a kernel-infoleak in qrtr_recvmsg() (CVE-2021-29647) - flow_dissector: fix byteorder of dissected ICMP ID - netfilter: ctnetlink: fix dump of the expect mask attribute - net: phylink: Fix phylink_err() function name error in phylink_major_config - tipc: better validate user input in tipc_nl_retrieve_key() (CVE-2021-29646) - tcp: relookup sock for RST+ACK packets handled by obsolete req sock - can: isotp: isotp_setsockopt(): only allow to set low level TX flags for CAN-FD - can: isotp: TX-path: ensure that CAN frame flags are initialized - can: peak_usb: add forgotten supported devices - [arm64,armhf] can: flexcan: flexcan_chip_freeze(): fix chip freeze for missing bitrate - can: c_can_pci: c_can_pci_remove(): fix use-after-free - [armhf] can: c_can: move runtime PM enable/disable to c_can_platform - mac80211: fix rate mask reset - mac80211: Allow HE operation to be longer than expected. - nfp: flower: fix unsupported pre_tunnel flows - nfp: flower: add ipv6 bit to pre_tunnel control message - nfp: flower: fix pre_tun mask id allocation - ftrace: Fix modify_ftrace_direct. - [arm64] drm/msm/dsi: fix check-before-set in the 7nm dsi_pll code - net/sched: cls_flower: fix only mask bit check in the validate_ct_state - netfilter: nftables: report EOPNOTSUPP on unsupported flowtable flags - netfilter: nftables: allow to update flowtable flags - netfilter: flowtable: Make sure GC works periodically in idle system - [armhf] dts: imx6ull: fix ubi filesystem mount failed - ipv6: weaken the v4mapped source check - net: check all name nodes in __dev_alloc_name - net: cdc-phonet: fix data-interface release on probe failure - igb: check timestamp validity - r8152: limit the RX buffer size of RTL8153A for USB 2.0 - [arm64,armhf] net: stmmac: dwmac-sun8i: Provide TX and RX fifo sizes - selinux: vsock: Set SID for socket returned by accept() - bpf: Fix umd memory leak in copy_process() (CVE-2021-29649) - can: isotp: tx-path: zero initialize outgoing CAN frames - [arm64] drm/msm: fix shutdown hook in case GPU components failed to bind - [arm64] drm/msm: Fix suspend/resume on i.MX5 - [arm64] kdump: update ppos when reading elfcorehdr - PM: runtime: Defer suspending suppliers - net/mlx5: Add back multicast stats for uplink representor - net/mlx5e: Allow to match on MPLS parameters only for MPLS over UDP - net/mlx5e: Offload tuple rewrite for non-CT flows - net/mlx5e: Fix error path for ethtool set-priv-flag - PM: EM: postpone creating the debugfs dir till fs_initcall - net: bridge: don't notify switchdev for local FDB addresses - [amd64] xen/x86: make XEN_BALLOON_MEMORY_HOTPLUG_LIMIT depend on MEMORY_HOTPLUG - RDMA/cxgb4: Fix adapter LE hash errors while destroying ipv6 listening server - bpf: Don't do bpf_cgroup_storage_set() for kuprobe/tp programs - net: Consolidate common blackhole dst ops - net, bpf: Fix ip6ip6 crash with collect_md populated skbs - igb: avoid premature Rx buffer reuse - net: phy: introduce phydev->port - net: phy: broadcom: Avoid forward for bcm54xx_config_clock_delay() - net: phy: broadcom: Set proper 1000BaseX/SGMII interface mode for BCM54616S - net: phy: broadcom: Fix RGMII delays for BCM50160 and BCM50610M - Revert "netfilter: x_tables: Switch synchronization to RCU" - netfilter: x_tables: Use correct memory barriers. (CVE-2021-29650) - dm table: Fix zoned model check and zone sectors check - mm/mmu_notifiers: ensure range_end() is paired with range_start() - Revert "netfilter: x_tables: Update remaining dereference to RCU" - ACPI: scan: Rearrange memory allocation in acpi_device_add() - ACPI: scan: Use unique number for instance_no - io_uring: fix provide_buffers sign extension - block: recalculate segment count for multi-segment discards correctly - scsi: Revert "qla2xxx: Make sure that aborted commands are freed" - scsi: qedi: Fix error return code of qedi_alloc_global_queues() - scsi: mpt3sas: Fix error return code of mpt3sas_base_attach() - smb3: fix cached file size problems in duplicate extents (reflink) - cifs: Adjust key sizes and key generation routines for AES256 encryption - locking/mutex: Fix non debug version of mutex_lock_io_nested() - mm/memcg: fix 5.10 backport of splitting page memcg - fs/cachefiles: Remove wait_bit_key layout dependency - can: dev: Move device back to init netns on owning netns delete - r8169: fix DMA being used after buffer free if WoL is enabled - [armhf] net: dsa: b53: VLAN filtering is global to all users - mac80211: fix double free in ibss_leave - ext4: add reclaim checks to xattr code - fs/ext4: fix integer overflow in s_log_groups_per_flex - [amd64] Revert "xen: fix p2m size in dom0 for disabled memory hotplug case" - Revert "net: bonding: fix error return code of bond_neigh_init()" - nvme: fix the nsid value to print in nvme_validate_or_alloc_ns - can: peak_usb: Revert "can: peak_usb: add forgotten supported devices" - xen-blkback: don't leak persistent grants from xen_blkbk_map() (CVE-2021-28688) https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.28 - [arm64] mm: correct the inside linear map range during hotplug check - bpf: Fix fexit trampoline. - virtiofs: Fail dax mount if device does not support it - ext4: shrink race window in ext4_should_retry_alloc() - ext4: fix bh ref count on error paths - rpc: fix NULL dereference on kmalloc failure - iomap: Fix negative assignment to unsigned sis->pages in iomap_swapfile_activate - [x86] ASoC: rt1015: fix i2c communication error - ASoC: rt5640: Fix dac- and adc- vol-tlv values being off by a factor of 10 - [x86] ASoC: rt5651: Fix dac- and adc- vol-tlv values being off by a factor of 10 - [armhf] ASoC: sgtl5000: set DAP_AVC_CTRL register to correct default value on probe - [x86] ASoC: es8316: Simplify adc_pga_gain_tlv table - ASoC: soc-core: Prevent warning if no DMI table is present - NFSD: fix error handling in NFSv4.0 callbacks - kernel: freezer should treat PF_IO_WORKER like PF_KTHREAD for freezing - vhost: Fix vhost_vq_reset() - io_uring: fix ->flags races by linked timeouts - scsi: st: Fix a use after free in st_open() - scsi: qla2xxx: Fix broken #endif placement - [x86] staging: comedi: cb_pcidas: fix request_irq() warn - [x86] staging: comedi: cb_pcidas64: fix request_irq() warn - ASoC: rt711: add snd_soc_component remove callback - thermal/core: Add NULL pointer check before using cooling device stats - locking/ww_mutex: Simplify use_ww_ctx & ww_ctx handling - locking/ww_mutex: Fix acquire/release imbalance in ww_acquire_init()/ww_acquire_fini() - nvmet-tcp: fix kmap leak when data digest in use - io_uring: imply MSG_NOSIGNAL for send[msg]()/recv[msg]() calls - [x86] static_call: Align static_call_is_init() patching condition - ext4: do not iput inode under running transaction in ext4_rename() - io_uring: call req_set_fail_links() on short send[msg]()/recv[msg]() with MSG_WAITALL - [arm64,armhf] net: mvpp2: fix interrupt mask/unmask skip condition - flow_dissector: fix TTL and TOS dissection on IPv4 fragments - net: introduce CAN specific pointer in the struct net_device - brcmfmac: clear EAP/association status bits on linkdown events - ath11k: add ieee80211_unregister_hw to avoid kernel crash caused by NULL pointer - rtw88: coex: 8821c: correct antenna switch function - iwlwifi: pcie: don't disable interrupts for reg_lock - ath10k: hold RCU lock when calling ieee80211_find_sta_by_ifaddr() - [amd64,arm64] net: ethernet: aquantia: Handle error cleanup of start on open - appletalk: Fix skb allocation size in loopback case - net: wan/lmc: unregister device when no matching device is found - net: 9p: advance iov on empty read - bpf: Remove MTU check in __bpf_skb_max_len - ACPI: tables: x86: Reserve memory occupied by ACPI tables - ACPI: processor: Fix CPU0 wakeup in acpi_idle_play_dead() - ALSA: usb-audio: Apply sample rate quirk to Logitech Connect - ALSA: hda: Re-add dropped snd_poewr_change_state() calls - ALSA: hda: Add missing sanity checks in PM prepare/complete callbacks - ALSA: hda/realtek: fix a determine_headset_type issue for a Dell AIO - ALSA: hda/realtek: call alc_update_headset_mode() in hp_automute_hook - ALSA: hda/realtek: fix mute/micmute LEDs for HP 640 G8 - [x86] KVM: SVM: load control fields from VMCB12 before checking them (CVE-2021-29657) - [x86] KVM: SVM: ensure that EFER.SVME is set when running nested guest or on nested vmexit - PM: runtime: Fix race getting/putting suppliers at probe - PM: runtime: Fix ordering in pm_runtime_get_suppliers() - tracing: Fix stack trace event size - [s390x] vdso: copy tod_steering_delta value to vdso_data page - [s390x] vdso: fix tod_steering_delta type - mm: fix race by making init_zero_pfn() early_initcall - drm/amdgpu: fix offset calculation in amdgpu_vm_bo_clear_mappings() - drm/amdgpu: check alignment on CPU page for bo map - reiserfs: update reiserfs_xattrs_initialized() condition - [armhf] drm/imx: fix memory leak when fails to init - [arm64,armhf] drm/tegra: dc: Restore coupling of display controllers - [arm64,armhf] drm/tegra: sor: Grab runtime PM reference across reset - [arm64,armhf] pinctrl: rockchip: fix restore error in resume - extcon: Add stubs for extcon_register_notifier_all() functions - extcon: Fix error handling in extcon_dev_register - firmware: stratix10-svc: reset COMMAND_RECONFIG_FLAG_PARTIAL to 0 - [arm64] usb: dwc3: pci: Enable dis_uX_susphy_quirk for Intel Merrifield - [x86] video: hyperv_fb: Fix a double free in hvfb_probe - firewire: nosy: Fix a use-after-free bug in nosy_ioctl() (CVE-2021-3483) - usbip: vhci_hcd fix shift out-of-bounds in vhci_hub_control() - USB: quirks: ignore remote wake-up on Fibocom L850-GL LTE modem - [arm64,armhf] usb: musb: Fix suspend with devices connected for a64 - cdc-acm: fix BREAK rx code path adding necessary calls - USB: cdc-acm: untangle a circular dependency between callback and softint - USB: cdc-acm: downgrade message to debug - USB: cdc-acm: fix double free on probe failure - USB: cdc-acm: fix use-after-free after probe failure - [i386] usb: gadget: udc: amd5536udc_pci fix null-ptr-dereference - [arm*] usb: dwc2: Fix HPRT0.PrtSusp bit setting for HiKey 960 board. - [arm*] usb: dwc2: Prevent core suspend when port connection flag is 0 - [arm64] usb: dwc3: qcom: skip interconnect init for ACPI probe - [arm64,armhf] usb: dwc3: gadget: Clear DEP flags after stop transfers in ep disable - soc: qcom-geni-se: Cleanup the code to remove proxy votes - [x86] staging: rtl8192e: Fix incorrect source in memcpy() - [x86] staging: rtl8192e: Change state information from u16 to u8 - driver core: clear deferred probe reason on probe retry - drivers: video: fbcon: fix NULL dereference in fbcon_cursor() - [riscv64] evaluate put_user() arg before enabling user access - Revert "kernel: freezer should treat PF_IO_WORKER like PF_KTHREAD for freezing" - [amd64] bpf: Use NOP_ATOMIC5 instead of emit_nops(&prog, 5) for BPF_TRAMP_F_CALL_ORIG [ Salvatore Bonaccorso ] * [rt] Refresh "u64_stats: Disable preemption on 32bit-UP/SMP with RT during updates" * Bump ABI to 6 * [rt] Refresh "tracing: Merge irqflags + preempt counter." * bpf, x86: Validate computation of branch displacements for x86-64 (CVE-2021-29154) * bpf, x86: Validate computation of branch displacements for x86-32 (CVE-2021-29154) -- Salvatore Bonaccorso Fri, 09 Apr 2021 20:17:58 +0200 linux (5.10.26-1) unstable; urgency=medium * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.25 https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.26 - ALSA: dice: fix null pointer dereference when node is disconnected - ALSA: hda/realtek: apply pin quirk for XiaomiNotebook Pro - ALSA: hda: generic: Fix the micmute led init state - ALSA: hda/realtek: Apply headset-mic quirks for Xiaomi Redmibook Air - ALSA: hda/realtek: fix mute/micmute LEDs for HP 840 G8 - ALSA: hda/realtek: fix mute/micmute LEDs for HP 440 G8 - ALSA: hda/realtek: fix mute/micmute LEDs for HP 850 G8 - Revert "PM: runtime: Update device status before letting suppliers suspend" - [s390x] vtime: fix increased steal time accounting - [s390x] pci: refactor zpci_create_device() - [s390x] pci: remove superfluous zdev->zbus check - [s390x] pci: fix leak of PCI device structure - zonefs: Fix O_APPEND async write handling - zonefs: prevent use of seq files as swap file - zonefs: fix to update .i_wr_refcnt correctly in zonefs_open_zone() - btrfs: fix race when cloning extent buffer during rewind of an old root (CVE-2021-28964) - btrfs: fix slab cache flags for free space tree bitmap - vhost-vdpa: fix use-after-free of v->config_ctx (CVE-2021-29266) - [armhf] ASoC: fsl_ssi: Fix TDM slot setup for I2S mode - [x86] ASoC: Intel: bytcr_rt5640: Fix HP Pavilion x2 10-p0XX OVCD current threshold - [x86] ASoC: SOF: Intel: unregister DMIC device on probe error - [x86] ASoC: SOF: intel: fix wrong poll bits in dsp power down - ASoC: qcom: sdm845: Fix array out of bounds access (CVE-2021-28952) - ASoC: qcom: sdm845: Fix array out of range on rx slim channels - [arm64] ASoC: qcom: lpass-cpu: Fix lpass dai ids parse - [arm*] ASoC: simple-card-utils: Do not handle device clock - afs: Fix accessing YFS xattrs on a non-YFS server - afs: Stop listxattr() from listing "afs.*" attributes - ALSA: usb-audio: Fix unintentional sign extension issue - nvme: fix Write Zeroes limitations - nvme-tcp: fix misuse of __smp_processor_id with preemption enabled - nvme-tcp: fix possible hang when failing to set io queues - nvme-tcp: fix a NULL deref when receiving a 0-length r2t PDU - nvmet: don't check iosqes,iocqes for discovery controllers - nfsd: Don't keep looking up unhashed files in the nfsd file cache - nfsd: don't abort copies early - NFSD: Repair misuse of sv_lock in 5.10.16-rt30. - NFSD: fix dest to src mount in inter-server COPY - svcrdma: disable timeouts on rdma backchannel - sunrpc: fix refcount leak for rpc auth modules - [x86] i915/perf: Start hrtimer only if sampling the OA buffer - pstore: Fix warning in pstore_kill_sb() - io_uring: ensure that SQPOLL thread is started for exit (CVE-2021-28951) - net/qrtr: fix __netdev_alloc_skb call - cifs: fix allocation size on newly created files - scsi: lpfc: Fix some error codes in debugfs - scsi: myrs: Fix a double free in myrs_cleanup() - [riscv64] correct enum sbi_ext_rfence_fid - gpiolib: Assign fwnode to parent's if no primary one provided - nvme-rdma: fix possible hang when failing to set io queues - [armhf] tty: serial: stm32-usart: Remove set but unused 'cookie' variables - [armhf] serial: stm32: fix DMA initialization error handling - bpf: Declare __bpf_free_used_maps() unconditionally - module: merge repetitive strings in module_sig_check() - module: avoid *goto*s in module_sig_check() - module: harden ELF info handling - scsi: pm80xx: Make mpi_build_cmd locking consistent - scsi: pm80xx: Make running_req atomic - scsi: pm80xx: Fix pm8001_mpi_get_nvmd_resp() race condition - scsi: pm8001: Neaten debug logging macros and uses - scsi: libsas: Remove notifier indirection - scsi: libsas: Introduce a _gfp() variant of event notifiers - scsi: mvsas: Pass gfp_t flags to libsas event notifiers - [x86] scsi: isci: Pass gfp_t flags in isci_port_link_down() - [x86] scsi: isci: Pass gfp_t flags in isci_port_link_up() - [x86] scsi: isci: Pass gfp_t flags in isci_port_bc_change_received() - RDMA/mlx5: Allow creating all QPs even when non RDMA profile is used - [powerpc*] sstep: Fix load-store and update emulation - [powerpc*] sstep: Fix darn emulation - i40e: Fix endianness conversions - net: phy: micrel: set soft_reset callback to genphy_soft_reset for KSZ8081 - drm/amd/display: turn DPMS off on connector unplug - iwlwifi: Add a new card for MA family - io_uring: fix inconsistent lock state - [arm64,armhf] media: cedrus: h264: Support profile controls - [s390x] qeth: schedule TX NAPI on QAOB completion - io_uring: don't attempt IO reissue from the ring exit path - io_uring: clear IOCB_WAITQ for non -EIOCBQUEUED return - net: bonding: fix error return code of bond_neigh_init() - gfs2: Add common helper for holding and releasing the freeze glock - gfs2: move freeze glock outside the make_fs_rw and _ro functions - gfs2: bypass signal_our_withdraw if no journal - [powerpc*] Force inlining of cpu_has_feature() to avoid build failure - usb-storage: Add quirk to defeat Kindle's automatic unload - usbip: Fix incorrect double assignment to udc->ud.tcp_rx - usb: gadget: configfs: Fix KASAN use-after-free - [x86] usb: typec: Remove vdo[3] part of tps6598x_rx_identity_reg struct - [x86] usb: typec: tcpm: Invoke power_supply_changed for tcpm-source-psy- - [arm64,armhf] usb: dwc3: gadget: Allow runtime suspend if UDC unbinded - [arm64,armhf] usb: dwc3: gadget: Prevent EP queuing while stopping transfers - [x86] thunderbolt: Initialize HopID IDAs in tb_switch_alloc() - [x86] thunderbolt: Increase runtime PM reference count on DP tunnel discovery - iio: gyro: mpu3050: Fix error handling in mpu3050_trigger_handler - iio: adc: ad7949: fix wrong ADC result due to incorrect bit mask - iio: hid-sensor-prox: Fix scale not correct issue - iio: hid-sensor-temperature: Fix issues of timestamp channel - [powerpc*] PCI: rpadlpar: Fix potential drc_name corruption in store functions (CVE-2021-28972) - [x86] perf/x86/intel: Fix a crash caused by zero PEBS status (CVE-2021-28971) - [x86] perf/x86/intel: Fix unchecked MSR access error caused by VLBR_EVENT - [x86] ioapic: Ignore IRQ2 again - kernel, fs: Introduce and use set_restart_fn() and arch_set_restart_data() - [x86] Move TS_COMPAT back to asm/thread_info.h - [x86] Introduce TS_COMPAT_RESTART to fix get_nr_restart_syscall() - efivars: respect EFI_UNSUPPORTED return from firmware - ext4: fix error handling in ext4_end_enable_verity() - ext4: find old entry again if failed to rename whiteout - ext4: stop inode update before return - ext4: do not try to set xattr into ea_inode if value is empty - ext4: fix potential error in ext4_do_update_inode - ext4: fix rename whiteout with fast commit - static_call: Fix static_call_update() sanity check - efi: use 32-bit alignment for efi_guid_t literals - firmware/efi: Fix a use after bug in efi_mem_reserve_persistent - genirq: Disable interrupts for force threaded handlers - [x86] apic/of: Fix CPU devicetree-node lookups - cifs: Fix preauth hash corruption [ Salvatore Bonaccorso ] * linux-image: Add Breaks: relation with old fwupdate versions (Closes: #985801) * [rt] Update to 5.10.25-rt35 * Refresh "Include package version along with kernel release in stack traces" * Refresh "firmware: Remove redundant log messages from drivers" * Refresh "MODSIGN: checking the blacklisted hash before loading a kernel module" * libsas: Avoid ABI change for removal of notifier indirection [ Uwe Kleine-König ] * [arm64] Enable various configurations for i.MX8 (Closes: #985862) -- Salvatore Bonaccorso Sat, 27 Mar 2021 15:14:11 +0100 linux (5.10.24-1) unstable; urgency=medium * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.20 - vmlinux.lds.h: add DWARF v5 sections - debugfs: be more robust at handling improper input in debugfs_lookup() - debugfs: do not attempt to create a new file before the filesystem is initalized - scsi: libsas: docs: Remove notify_ha_event() - scsi: qla2xxx: Fix mailbox Ch erroneous error - kdb: Make memory allocations more robust - w1: w1_therm: Fix conversion result for negative temperatures - [arm64] PCI: qcom: Use PHY_REFCLK_USE_PAD only for ipq8064 - PCI: Decline to resize resources if boot config must be preserved - [x86] virt: vbox: Do not use wait_event_interruptible when called from kernel context - bfq: Avoid false bfq queue merging - ALSA: usb-audio: Fix PCM buffer allocation in non-vmalloc mode - [mips*] vmlinux.lds.S: add missing PAGE_ALIGNED_DATA() section - random: fix the RNDRESEEDCRNG ioctl - ALSA: pcm: Call sync_stop at disconnection - ALSA: pcm: Assure sync with the pending stop operation at suspend - ALSA: pcm: Don't call sync_stop if it hasn't been stopped - [arm64] Bluetooth: btqcomsmd: Fix a resource leak in error handling paths in the probe function - Bluetooth: hci_uart: Fix a race for write_work scheduling - Bluetooth: Fix initializing response id after clearing struct - [armhf] dts: exynos: correct PMIC interrupt trigger level on Spring - [armhf] dts: exynos: correct PMIC interrupt trigger level on Arndale Octa - Bluetooth: hci_qca: Fix memleak in qca_controller_memdump - [arm*] staging: vchiq: Fix bulk userdata handling - [arm*] staging: vchiq: Fix bulk transfers on 64-bit builds - [arm64,armhf] net: stmmac: dwmac-meson8b: fix enabling the timing-adjustment clock - bpf: Add bpf_patch_call_args prototype to include/linux/bpf.h - bpf: Avoid warning when re-casting __bpf_call_base into __bpf_call_base_args - [arm64] dts: allwinner: A64: properly connect USB PHY to port 0 - [arm64] dts: allwinner: A64: Limit MMC2 bus frequency to 150 MHz - ACPICA: Fix exception code class checks - usb: gadget: u_audio: Free requests only after callback - Bluetooth: drop HCI device reference before return - Bluetooth: Put HCI device if inquiry procedure interrupts - [arm*] usb: dwc2: Do not update data length if it is 0 on inbound transfers - [arm*] usb: dwc2: Abort transaction after errors with unknown reason - [arm*] usb: dwc2: Make "trimming xfer length" a debug message - staging: rtl8723bs: wifi_regd.c: Fix incorrect number of regulatory rules - [x86] MSR: Filter MSR writes through X86_IOC_WRMSR_REGS ioctl too - [armhf] dts: armada388-helios4: assign pinctrl to LEDs - [armhf] dts: armada388-helios4: assign pinctrl to each fan - opp: Correct debug message in _opp_add_static_v2() - Bluetooth: btusb: Fix memory leak in btusb_mtk_wmt_recv - iwlwifi: mvm: set enabled in the PPAG command properly - [arm64] optee: simplify i2c access - ath10k: Fix suspicious RCU usage warning in ath10k_wmi_tlv_parse_peer_stats_info() - ath10k: Fix lockdep assertion warning in ath10k_sta_statistics - iwlwifi: mvm: fix the type we use in the PPAG table validity checks - iwlwifi: mvm: store PPAG enabled/disabled flag properly - iwlwifi: mvm: send stored PPAG command instead of local - iwlwifi: mvm: assign SAR table revision to the command later - iwlwifi: mvm: don't check if CSA event is running before removing - bpf_lru_list: Read double-checked variable once without lock - iwlwifi: pnvm: set the PNVM again if it was already loaded - iwlwifi: pnvm: increment the pointer before checking the TLV - bnxt_en: reverse order of TX disable and carrier off - bnxt_en: Fix devlink info's stored fw.psid version format. - xen/netback: fix spurious event detection for common event case - net: phy: consider that suspend2ram may cut off PHY power - net/mlx5e: Don't change interrupt moderation params when DIM is enabled - net/mlx5e: Change interrupt moderation channel params also when channels are closed - net/mlx5: Fix health error state handling - net/mlx5e: Replace synchronize_rcu with synchronize_net - net/mlx5e: kTLS, Use refcounts to free kTLS RX priv context - net/mlx5: Disable devlink reload for multi port slave device - net/mlx5: Disallow RoCE on multi port slave device - net/mlx5: Disallow RoCE on lag device - net/mlx5: Disable devlink reload for lag devices - net/mlx5e: CT: manage the lifetime of the ct entry object - net/mlx5e: Check tunnel offload is required before setting SWP - mac80211: fix potential overflow when multiplying to u32 integers - libbpf: Ignore non function pointer member in struct_ops - bpf: Fix an unitialized value in bpf_iter - bpf, devmap: Use GFP_KERNEL for xdp bulk queue allocation - bpf: Fix bpf_fib_lookup helper MTU check for SKB ctx - tcp: fix SO_RCVLOWAT related hangs under mem pressure - cxgb4/chtls/cxgbit: Keeping the max ofld immediate data size same in cxgb4 and ulds - b43: N-PHY: Fix the update of coef for the PHY revision >= 3case - bpf: Clear subreg_def for global function return values - [amd64,arm64] net: amd-xgbe: Reset the PHY rx data path when mailbox command timeout - [amd64,arm64] net: amd-xgbe: Fix NETDEV WATCHDOG transmit queue timeout warning - [amd64,arm64] net: amd-xgbe: Reset link when the link never comes back - [amd64,arm64] net: amd-xgbe: Fix network fluctuations when using 1G BELFUSE SFP - [arm64,armhf] net: mvneta: Remove per-cpu queue mapping for Armada 3700 - tty: convert tty_ldisc_ops 'read()' function to take a kernel pointer - tty: implement read_iter - [x86] drm/gma500: Fix error return code in psb_driver_load() - [x86] gma500: clean up error handling in init - drm/fb-helper: Add missed unlocks in setcmap_legacy() - [arm*] drm/vc4: hdmi: Take into account the clock doubling flag in atomic_check - [arm64] crypto: arm64/aes-ce - really hide slower algos when faster ones are enabled - [mips*] c-r4k: Fix section mismatch for loongson2_sc_init - drm/virtio: make sure context is created in gem open - media: em28xx: Fix use-after-free in em28xx_alloc_urbs - media: media/pci: Fix memleak in empress_init - [x86] media: tm6000: Fix memleak in tm6000_start_stream - sched/fair: Avoid stale CPU util_est value for schedutil in task dequeue - [arm64,armhf] drm/sun4i: tcon: fix inverted DCLK polarity - [mips*] properly stop .eh_frame generation - [arm64,armhf] drm/tegra: Fix reference leak when pm_runtime_get_sync() fails - bsg: free the request before return error code - media: lmedm04: Fix misuse of comma - media: qm1d1c0042: fix error return code in qm1d1c0042_init() - media: uvcvideo: Accept invalid bFormatIndex and bFrameIndex values - sched/eas: Don't update misfit status if the task is pinned - f2fs: compress: fix potential deadlock - [arm64] ASoC: qcom: lpass-cpu: Remove bit clock state check - perf/arm-cmn: Fix PMU instance naming - perf/arm-cmn: Move IRQs when migrating context - mm: proc: Invalidate TLB after clearing soft-dirty page state - f2fs: fix to avoid inconsistent quota data - f2fs: fix a wrong condition in __submit_bio - [arm64] ASoC: qcom: Fix typo error in HDMI regmap config callbacks - [x86] KVM: nSVM: Don't strip host's C-bit from guest's CR3 when reading PDPTRs - [x86] Drivers: hv: vmbus: Avoid use-after-free in vmbus_onoffer_rescind() - [x86] ASoC: Intel: sof_sdw: add missing TGL_HDMI quirk for Dell SKU 0A5E - [x86] ASoC: Intel: sof_sdw: add missing TGL_HDMI quirk for Dell SKU 0A3E - locking/lockdep: Avoid unmatched unlock - [arm64] ASoC: qcom: lpass: Fix i2s ctl register bit map - btrfs: clarify error returns values in __load_free_space_cache - btrfs: fix double accounting of ordered extent for subpage case in btrfs_invalidapge - [x86] KVM: Restore all 64 bits of DR6 and DR7 during RSM on x86-64 - [s390x] zcrypt: return EIO when msg retry limit reached - [arm*] drm/vc4: hdmi: Move hdmi reset to bind - [arm*] drm/vc4: hdmi: Fix register offset with longer CEC messages - [arm*] drm/vc4: hdmi: Fix up CEC registers - [arm*] drm/vc4: hdmi: Restore cec physical address on reconnect - [arm*] drm/vc4: hdmi: Compute the CEC clock divider from the clock rate - [arm*] drm/vc4: hdmi: Update the CEC clock divider on HSM rate change - drm/dp_mst: Don't cache EDIDs for physical ports - crypto: ecdh_helper - Ensure 'len >= secret.len' in decode_key() - io_uring: fix possible deadlock in io_uring_poll - nvme-multipath: set nr_zones for zoned namespaces - nvmet: remove extra variable in identify ns - nvmet: set status to 0 in case for invalid nsid - [armel,armhf] ASoC: simple-card-utils: Fix device module clock - fs/jfs: fix potential integer overflow on shift of a int - jffs2: fix use after free in jffs2_sum_write_data() - smp: Process pending softirqs in flush_smp_call_function_from_idle() - capabilities: Don't allow writing ambiguous v3 file capabilities - [armhf] HSI: Fix PM usage counter unbalance in ssi_hw_init - [arm64,armhf] clk: meson: clk-pll: fix initializing the old rate (fallback) for a PLL - [arm64,armhf] clk: meson: clk-pll: make "ret" a signed integer - [arm64,armhf] clk: meson: clk-pll: propagate the error from meson_clk_pll_set_rate() - quota: Fix memory leak when handling corrupted quota file - [arm64] clk: sunxi-ng: h6: Fix CEC clock - HID: core: detect and skip invalid inputs to snto32() - fdt: Properly handle "no-map" field in the memory region - of/fdt: Make sure no-map does not remove already reserved regions - [armhf] spi: imx: Don't print error on -EPROBEDEFER - RDMA/mlx5: Use the correct obj_id upon DEVX TIR creation - IB/mlx5: Add mutex destroy call to cap_mask_mutex mutex - [arm64] clk: sunxi-ng: h6: Fix clock divider range on some clocks - [arm64,armhf] platform/chrome: cros_ec_proto: Use EC_HOST_EVENT_MASK not BIT - [arm64,armhf] platform/chrome: cros_ec_proto: Add LID and BATTERY to default mask - [arm64,armhf] regulator: axp20x: Fix reference cout leak - watch_queue: Drop references to /dev/watch_queue - certs: Fix blacklist flag type confusion - [armhf] regulator: s5m8767: Fix reference count leak - [armhf] regulator: s5m8767: Drop regulators OF node reference - [arm64,armhf] power: supply: axp20x_usb_power: Init work before enabling IRQs - regulator: core: Avoid debugfs: Directory ... already present! error - isofs: release buffer head before return - objtool: Fix error handling for STD/CLD warnings - objtool: Fix retpoline detection in asm code - objtool: Fix ".cold" section suffix check for newer versions of GCC - scsi: lpfc: Fix ancient double free - iommu: Switch gather->end to the inclusive end - IB/umad: Return EIO in case of when device disassociated - IB/umad: Return EPOLLERR in case of when device disassociated - [ppc64el] KVM: Make the VMX instruction emulation routines static - [powerpc*] time: Enable sched clock for irqtime - [armel,armhf] 9046/1: decompressor: Do not clear SCTLR.nTLSMD for ARMv7+ cores - [arm*] amba: Fix resource leak for drivers without .remove - iommu: Move iotlb_sync_map out from __iommu_map - iommu: Properly pass gfp_t in _iommu_map() to avoid atomic sleeping - IB/mlx5: Return appropriate error code instead of ENOMEM - IB/cm: Avoid a loop when device has 255 ports - tracepoint: Do not fail unregistering a probe due to memory failure - perf tools: Fix DSO filtering when not finding a map for a sampled address - perf vendor events arm64: Fix Ampere eMag event typo - RDMA/rxe: Fix coding error in rxe_recv.c - RDMA/rxe: Fix coding error in rxe_rcv_mcast_pkt - RDMA/rxe: Correct skb on loopback path - [powerpc*] pseries/dlpar: handle ibm, configure-connector delay status - [arm64] RDMA/hns: Fixed wrong judgments in the goto branch - [arm64] RDMA/hns: Fix type of sq_signal_bits - [arm64] RDMA/hns: Disable RQ inline by default - clk: divider: fix initialization with parent_hw - [amd64] spi: pxa2xx: Fix the controller numbering for Wildcat Point - [powerpc*] uaccess: Avoid might_fault() when user access is enabled - [powerpc*] kuap: Restore AMR after replaying soft interrupts - perf symbols: Use (long) for iterator for bfd symbols - spi: Skip zero-length transfers in spi_transfer_one_message() - printk: avoid prb_first_valid_seq() where possible - perf symbols: Fix return value when loading PE DSO - nfsd: register pernet ops last, unregister first - svcrdma: Hold private mutex while invoking rdma_accept() - ceph: fix flush_snap logic after putting caps - [arm64] RDMA/hns: Fixes missing error code of CMDQ - RDMA/ucma: Fix use-after-free bug in ucma_create_uevent - Input: sur40 - fix an error code in sur40_probe() - perf record: Fix continue profiling after draining the buffer - perf intel-pt: Fix missing CYC processing in PSB - perf intel-pt: Fix premature IPC - perf intel-pt: Fix IPC with CYC threshold - perf test: Fix unaligned access in sample parsing test - Input: elo - fix an error code in elo_connect() - [arm64,armhf] phy: rockchip-emmc: emmc_phy_init() always return 0 - [arm64,armhf] pwm: rockchip: Enable APB clock during register access while probing - [arm64,armhf] pwm: rockchip: rockchip_pwm_probe(): Remove superfluous clk_unprepare() - [arm64,armhf] pwm: rockchip: Eliminate potential race condition when probing - [x86] VMCI: Use set_page_dirty_lock() when unregistering guest memory - PCI: Align checking of syscall user config accessors - [x86] mei: hbm: call mei_set_devstate() on hbm stop response - [arm64] drm/msm: Fix MSM_INFO_GET_IOVA with carveout - [arm64] drm/msm/dsi: Correct io_start for MSM8994 (20nm PHY) - [arm64] drm/msm/mdp5: Fix wait-for-commit for cmd panels - [arm64] drm/msm: Fix race of GPU init vs timestamp power management. - [arm64] drm/msm: Fix races managing the OOB state for timestamp vs timestamps. - [arm64] drm/msm/dp: trigger unplug event in msm_dp_display_disable - [amd64,arm64] vfio/iommu_type1: Populate full dirty when detach non-pinned group - [amd64,arm64] vfio/iommu_type1: Fix some sanity checks in detach group - ext4: fix potential htree index checksum corruption - nvmem: core: Fix a resource leak on error in nvmem_add_cells_from_of() - nvmem: core: skip child nodes not matching binding - soundwire: bus: use sdw_update_no_pm when initializing a device - soundwire: bus: use sdw_write_no_pm when setting the bus scale registers - soundwire: export sdw_write/read_no_pm functions - soundwire: bus: fix confusion on device used by pm_runtime - ext: EXT4_KUNIT_TESTS should depend on EXT4_FS instead of selecting it - PCI: pci-bridge-emul: Fix array overruns, improve safety - i40e: Fix flow for IPv6 next header (extension header) - i40e: Add zero-initialization of AQ command structures - i40e: Fix overwriting flow control settings during driver loading - i40e: Fix addition of RX filters after enabling FW LLDP agent - i40e: Fix VFs not created - Take mmap lock in cacheflush syscall - i40e: Fix add TC filter for IPv6 - [amd64,arm64] vfio/type1: Use follow_pte() - ice: report correct max number of TCs - ice: Account for port VLAN in VF max packet size calculation - ice: Fix state bits on LLDP mode switch - ice: update the number of available RSS queues - [arm64,armhf] net: stmmac: fix CBS idleslope and sendslope calculation - net/mlx4_core: Add missed mlx4_free_cmd_mailbox() - [arm64] PCI: rockchip: Make 'ep-gpios' DT property optional - vxlan: move debug check after netdev unregister - wireguard: device: do not generate ICMP for non-IP packets - wireguard: kconfig: use arm chacha even with no neon - ocfs2: fix a use after free on error - mm: memcontrol: fix NR_ANON_THPS accounting in charge moving - mm: memcontrol: fix slub memory accounting - mm/memory.c: fix potential pte_unmap_unlock pte error - mm/hugetlb: fix potential double free in hugetlb_register_node() error path - mm/hugetlb: suppress wrong warning info when alloc gigantic page - mm/compaction: fix misbehaviors of fast_find_migrateblock() - NFSv4: Fixes for nfs4_bitmask_adjust() - [x86] KVM: SVM: Intercept INVPCID when it's disabled to inject #UD - [x86] KVM: x86/mmu: Expand collapsible SPTE zap for TDP MMU to ZONE_DEVICE and HugeTLB pages - [arm64] Add missing ISB after invalidating TLB in __primary_switch - [armhf] i2c: exynos5: Preserve high speed master code - mm,thp,shmem: make khugepaged obey tmpfs mount flags - mm: fix memory_failure() handling of dax-namespace metadata - mm/rmap: fix potential pte_unmap on an not mapped pte - proc: use kvzalloc for our kernel buffer - scsi: sd: sd_zbc: Don't pass GFP_NOIO to kvcalloc - block: reopen the device in blkdev_reread_part - scsi: sd: Fix Opal support - blk-settings: align max_sectors on "logical_block_size" boundary - ACPI: property: Fix fwnode string properties matching - ACPI: configfs: add missing check after configfs_register_default_group() - cpufreq: ACPI: Set cpuinfo.max_freq directly if max boost is known - HID: logitech-dj: add support for keyboard events in eQUAD step 4 Gaming - HID: wacom: Ignore attempts to overwrite the touch_max value from HID - Input: xpad - add support for PowerA Enhanced Wired Controller for Xbox Series X|S - Input: joydev - prevent potential read overflow in ioctl - Input: i8042 - add ASUS Zenbook Flip to noselftest list - media: mceusb: Fix potential out-of-bounds shift - USB: serial: option: update interface mapping for ZTE P685M - [arm64,armhf] usb: musb: Fix runtime PM race in musb_queue_resume_work - [arm64,armhf] usb: dwc3: gadget: Fix setting of DEPCFG.bInterval_m1 - [arm64,armhf] usb: dwc3: gadget: Fix dep->interval for fullspeed interrupt - USB: serial: ftdi_sio: fix FTX sub-integer prescaler - USB: serial: pl2303: fix line-speed handling on newer chips - USB: serial: mos7840: fix error code in mos7840_write() - USB: serial: mos7720: fix error code in mos7720_write() - ALSA: hda: Add another CometLake-H PCI ID - ALSA: hda/hdmi: Drop bogus check at closing a stream - ALSA: hda/realtek: modify EAPD in the ALC886 - ALSA: hda/realtek: Quirk for HP Spectre x360 14 amp setup - [mips*] Ingenic: Disable HPTLB for D0 XBurst CPUs too - [mips*] Revert "MIPS: Octeon: Remove special handling of CONFIG_MIPS_ELF_APPENDED_DTB=y" - Revert "bcache: Kill btree_io_wq" - bcache: Give btree_io_wq correct semantics again - bcache: Move journal work to new flush wq - drm/amdgpu: Set reference clock to 100Mhz on Renoir (v2) - drm/nouveau/kms: handle mDP connectors - drm/modes: Switch to 64bit maths to avoid integer overflow - drm/sched: Cancel and flush all outstanding jobs before finish. - selinux: fix inconsistency between inode_getxattr and inode_listsecurity - tpm_tis: Fix check_locality for correct locality acquisition - tpm_tis: Clean up locality release - KEYS: trusted: Fix incorrect handling of tpm_get_random() - KEYS: trusted: Fix migratable=1 failing - KEYS: trusted: Reserve TPM for seal and unseal operations - btrfs: do not cleanup upper nodes in btrfs_backref_cleanup_node - btrfs: do not warn if we can't find the reloc root when looking up backref - btrfs: add asserts for deleting backref cache nodes - btrfs: abort the transaction if we fail to inc ref in btrfs_copy_root - btrfs: fix reloc root leak with 0 ref reloc roots on recovery - btrfs: splice remaining dirty_bg's onto the transaction dirty bg list - btrfs: handle space_info::total_bytes_pinned inside the delayed ref itself - btrfs: account for new extents being deleted in total_bytes_pinned - btrfs: fix extent buffer leak on failure to copy root - [arm64] crypto: arm64/sha - add missing module aliases - [x86] crypto: aesni - prevent misaligned buffers on the stack - crypto: michael_mic - fix broken misalignment handling - seccomp: Add missing return in non-void function - [arm64] ptrace: Fix seccomp of traced syscall -1 (NO_SYSCALL) - misc: rtsx: init of rts522a add OCP power off when no card is present - [x86] drivers/misc/vmw_vmci: restrict too big queue size in qp_host_alloc_queue - pstore: Fix typo in compression option name - staging: rtl8188eu: Add Edimax EW-7811UN V2 to device table - floppy: reintroduce O_NDELAY fix - media: marvell-ccic: power up the device on mclk enable - media: smipcie: fix interrupt handling and IR timeout - [x86] virt: Eat faults on VMXOFF in reboot flows - [x86] reboot: Force all cpus to exit VMX root if VMX is supported - [x86] fault: Fix AMD erratum #91 errata fixup for user code - [x86] entry: Fix instrumentation annotation - [powerpc*] prom: Fix "ibm,arch-vec-5-platform-support" scan - rcu: Pull deferred rcuog wake up to rcu_eqs_enter() callers - rcu/nocb: Perform deferred wake up before last idle's need_resched() check - kprobes: Fix to delay the kprobes jump optimization - [arm64] Extend workaround for erratum 1024718 to all versions of Cortex-A55 - [arm64] uprobe: Return EOPNOTSUPP for AARCH32 instruction probing - [arm64] module: set plt* section addresses to 0x0 - [arm64] spectre: Prevent lockdep splat on v4 mitigation enable path - [arm64] watchdog: qcom: Remove incorrect usage of QCOM_WDT_ENABLE_IRQ - [x86] watchdog: mei_wdt: request stop on unregister - fs/affs: release old buffer head on error path - seq_file: document how per-entry resources are managed. - [x86] fix seq_file iteration for pat/memtype.c - mm: memcontrol: fix swap undercounting in cgroup2 - mm: memcontrol: fix get_active_memcg return value - hugetlb: fix update_and_free_page contig page struct assumption - hugetlb: fix copy_huge_page_from_user contig page struct assumption - mm/vmscan: restore zone_reclaim_mode ABI - mm, compaction: make fast_isolate_freepages() stay within zone - [x86] KVM: nSVM: fix running nested guests when npt=0 - nvmem: qcom-spmi-sdam: Fix uninitialized pdev pointer - module: Ignore _GLOBAL_OFFSET_TABLE_ when warning for undefined symbols - [armhf] mmc: sdhci-esdhc-imx: fix kernel panic when remove module - mmc: sdhci-pci-o2micro: Bug fix for SDR104 HW tuning failure - [arm64] spmi: spmi-pmic-arb: Fix hw_irq overflow - [x86] mei: fix transfer over dma with extended header - [x86] mei: me: emmitsburg workstation DID - [x86] mei: me: add adler lake point S DID - [x86] mei: me: add adler lake point LP DID - [armhf] gpio: pcf857x: Fix missing first interrupt - printk: fix deadlock when kernel panic - exfat: fix shift-out-of-bounds in exfat_fill_super() - zonefs: Fix file size of zones in full condition - [x86] cpufreq: intel_pstate: Change intel_pstate_get_hwp_max() argument - [x86] cpufreq: intel_pstate: Get per-CPU max freq via MSR_HWP_CAPABILITIES if available - proc: don't allow async path resolution of /proc/thread-self components - [s390x] vtime: fix inline assembly clobber list - [s390x] virtio/s390: implement virtio-ccw revision 2 correctly - f2fs: fix out-of-repair __setattr_copy() - f2fs: enforce the immutable flag on open files - f2fs: flush data when enabling checkpoint back - gfs2: fix glock confusion in function signal_our_withdraw - gfs2: Don't skip dlm unlock if glock has an lvb - gfs2: Lock imbalance on error path in gfs2_recover_one - gfs2: Recursive gfs2_quota_hold in gfs2_iomap_end - dm: fix deadlock when swapping to encrypted device - dm table: fix iterate_devices based device capability checks - dm table: fix DAX iterate_devices based device capability checks - dm table: fix zoned iterate_devices based device capability checks - dm writecache: fix performance degradation in ssd mode - dm writecache: return the exact table values that were set - dm writecache: fix writing beyond end of underlying device when shrinking - dm era: Recover committed writeset after crash - dm era: Update in-core bitset after committing the metadata - dm era: Verify the data block size hasn't changed - dm era: Fix bitset memory leaks - dm era: Use correct value size in equality function of writeset tree - dm era: Reinitialize bitset cache before digesting a new writeset - dm era: only resize metadata in preresume - kgdb: fix to kill breakpoints on initmem after boot - ipv6: silence compilation warning for non-IPV6 builds - net: icmp: pass zeroed opts from icmp{,v6}_ndo_send before sending - wireguard: queueing: get rid of per-peer ring buffers - net: sched: fix police ext initialization - net_sched: fix RTNL deadlock again caused by request_module() https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.21 - net: usb: qmi_wwan: support ZTE P685M modem - Input: elantech - fix protocol errors for some trackpoints in SMBus mode - Input: elan_i2c - add new trackpoint report type 0x5F - drm/virtio: use kvmalloc for large allocations - [x86] build: Treat R_386_PLT32 relocation as R_386_PC32 - JFS: more checks for invalid superblock - sched/core: Allow try_invoke_on_locked_down_task() with irqs disabled - udlfb: Fix memory leak in dlfb_usb_probe - media: mceusb: sanity check for prescaler value - erofs: fix shift-out-of-bounds of blkszbits - media: v4l2-ctrls.c: fix shift-out-of-bounds in std_validate - xfs: Fix assert failure in xfs_setattr_size() - [s390x] net/af_iucv: remove WARN_ONCE on malformed RX packets - tomoyo: ignore data race while checking quota - net: fix up truesize of cloned skb in skb_prepare_for_shift() - [riscv64] Get rid of MAX_EARLY_MAPPING_SIZE - nbd: handle device refs for DESTROY_ON_DISCONNECT properly - mm/hugetlb.c: fix unnecessary address expansion of pmd sharing - tcp: fix tcp_rmem documentation - net: bridge: use switchdev for port flags set through sysfs too - net/sched: cls_flower: Reject invalid ct_state flags rules - net: psample: Fix netlink skb length with tunnel info - net: fix dev_ifsioc_locked() race condition - dt-bindings: ethernet-controller: fix fixed-link specification - dt-bindings: net: btusb: DT fix s/interrupt-name/interrupt-names/ - [arm64] ASoC: qcom: Remove useless debug print - rsi: Fix TX EAPOL packet handling against iwlwifi AP - rsi: Move card interrupt handling to RX thread - [x86] EDAC/amd64: Do not load on family 0x15, model 0x13 - [x86] reboot: Add Zotac ZBOX CI327 nano PCI reboot quirk - vt/consolemap: do font sum unsigned - [arm64,armhf] wlcore: Fix command execute failure 19 for wl12xx - Bluetooth: hci_h5: Set HCI_QUIRK_SIMULTANEOUS_DISCOVERY for btrtl - Bluetooth: btusb: fix memory leak on suspend and resume - pktgen: fix misuse of BUG_ON() in pktgen_thread_worker() - ath10k: fix wmi mgmt tx queue full due to race condition - net: sfp: add mode quirk for GPON module Ubiquiti U-Fiber Instant - Bluetooth: Add new HCI_QUIRK_NO_SUSPEND_NOTIFIER quirk - Bluetooth: Fix null pointer dereference in amp_read_loc_assoc_final_data - [arm*] staging: bcm2835-audio: Replace unsafe strcpy() with strscpy() - brcmfmac: Add DMI nvram filename quirk for Predia Basic tablet - brcmfmac: Add DMI nvram filename quirk for Voyo winpad A15 tablet - [arm64] drm/hisilicon: Fix use-after-free - crypto: tcrypt - avoid signed overflow in byte count - fs: make unlazy_walk() error handling consistent - drm/amdgpu: Add check to prevent IH overflow - PCI: Add a REBAR size quirk for Sapphire RX 5600 XT Pulse - [x86] ASoC: Intel: bytcr_rt5640: Add new BYT_RT5640_NO_SPEAKERS quirk-flag - media: uvcvideo: Allow entities with no pads - f2fs: handle unallocated section and zone on pinned/atgc - f2fs: fix to set/clear I_LINKABLE under i_lock - nvme-core: add cancel tagset helpers - nvme-rdma: add clean action for failed reconnection - nvme-tcp: add clean action for failed reconnection - ASoC: Intel: Add DMI quirk table to soc_intel_is_byt_cr() - btrfs: fix error handling in commit_fs_roots - [x86] perf/x86/kvm: Add Cascade Lake Xeon steppings to isolation_ucodes[] - [x86] ASoC: Intel: sof-sdw: indent and add quirks consistently - [x86] ASoC: Intel: sof_sdw: detect DMIC number based on mach params - sched/features: Fix hrtick reprogramming - [x86] ASoC: Intel: bytcr_rt5640: Add quirk for the Estar Beauty HD MID 7316R tablet - [x86] ASoC: Intel: bytcr_rt5640: Add quirk for the Voyo Winpad A15 tablet - [x86] ASoC: Intel: bytcr_rt5651: Add quirk for the Jumper EZpad 7 tablet - [x86] ASoC: Intel: bytcr_rt5640: Add quirk for the Acer One S1002 tablet - scsi: iscsi: Restrict sessions and handles to admin capabilities (CVE-2021-27363, CVE-2021-27364) - scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (CVE-2021-27365) - scsi: iscsi: Verify lengths on passthrough PDUs (CVE-2021-27365) - Xen/gnttab: handle p2m update errors on a per-slot basis (CVE-2021-28038) - xen-netback: respect gnttab_map_refs()'s return value (CVE-2021-28038) - xen: fix p2m size in dom0 for disabled memory hotplug case (CVE-2021-28039) - zsmalloc: account the number of compacted pages correctly - swap: fix swapfile read/write offset - [powerpc*] sstep: Check instruction validity against ISA version before emulation - [powerpc*] sstep: Fix incorrect return from analyze_instr() - tty: fix up iterate_tty_read() EOVERFLOW handling - tty: fix up hung_up_tty_read() conversion - tty: clean up legacy leftovers from n_tty line discipline - tty: teach n_tty line discipline about the new "cookie continuations" - tty: teach the n_tty ICANON case about the new "cookie continuations" too - media: v4l: ioctl: Fix memory leak in video_usercopy - ALSA: hda/realtek: Add quirk for Clevo NH55RZQ - ALSA: hda/realtek: Add quirk for Intel NUC 10 - ALSA: hda/realtek: Apply dual codec quirks for MSI Godlike X570 board - net: sfp: VSOL V2801F / CarlitoxxPro CPGOS03-0490 v2.0 workaround - net: sfp: add workaround for Realtek RTL8672 and RTL9601C chips https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.22 - ALSA: hda/realtek: Enable headset mic of Acer SWIFT with ALC256 - ALSA: usb-audio: Drop bogus dB range in too low level - tpm, tpm_tis: Decorate tpm_tis_gen_interrupt() with request_locality() - tpm, tpm_tis: Decorate tpm_get_timeouts() with request_locality() - btrfs: avoid double put of block group when emptying cluster - btrfs: fix raid6 qstripe kmap - btrfs: fix race between writes to swap files and scrub - btrfs: fix race between swap file activation and snapshot creation - btrfs: fix stale data exposure after cloning a hole with NO_HOLES enabled - btrfs: fix race between extent freeing/allocation when using bitmaps - btrfs: validate qgroup inherit for SNAP_CREATE_V2 ioctl - btrfs: free correct amount of space in btrfs_delayed_inode_reserve_metadata - btrfs: unlock extents in btrfs_zero_range in case of quota reservation errors - btrfs: fix warning when creating a directory with smack enabled - PM: runtime: Update device status before letting suppliers suspend - ring-buffer: Force before_stamp and write_stamp to be different on discard - io_uring: ignore double poll add on the same waitqueue head - dm bufio: subtract the number of initial sectors in dm_bufio_get_device_size - drm/amdgpu:disable VCN for Navi12 SKU - drm/amdgpu: fix parameter error of RREG32_PCIE() in amdgpu_regs_pcie - [arm64] mm: Move reserve_crashkernel() into mem_init() - [arm64] mm: Move zone_dma_bits initialization into zone_sizes_init() - of/address: Introduce of_dma_get_max_cpu_address() - [arm64] mm: Set ZONE_DMA size based on devicetree's dma-ranges - [arm64] mm: Set ZONE_DMA size based on early IORT scan - ALSA: ctxfi: cthw20k2: fix mask on conf to allow 4 bits - RDMA/cm: Fix IRQ restore in ib_send_cm_sidr_rep - IB/mlx5: Add missing error code - ALSA: hda: intel-nhlt: verify config type - ftrace: Have recordmcount use w8 to read relp->r_info in arm64_is_fake_mcount - rsxx: Return -EFAULT if copy_to_user() fails - [amd64] iommu/vt-d: Fix status code for Allocate/Free PASID command - tomoyo: recognize kernel threads correctly - r8169: fix resuming from suspend on RTL8105e if machine runs on battery https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.23 - ACPICA: Fix race in generic_serial_bus (I2C) and GPIO op_region parameter handling - nvme-pci: mark Kingston SKC2000 as not supporting the deepest power state - btrfs: export and rename qgroup_reserve_meta - btrfs: don't flush from btrfs_delayed_inode_reserve_metadata - [amd64] iommu/amd: Fix sleeping in atomic in increase_address_space() - Bluetooth: btqca: Add valid le states quirk - mwifiex: pcie: skip cancel_work_sync() on reset failure path - [x86] ASoC: Intel: sof_sdw: add quirk for new TigerLake-SDCA device - [armhf] bus: ti-sysc: Implement GPMC debug quirk to drop platform data - [x86] platform/x86: acer-wmi: Cleanup ACER_CAP_FOO defines - [x86] platform/x86: acer-wmi: Cleanup accelerometer device handling - [x86] platform/x86: acer-wmi: Add new force_caps module parameter - [x86] platform/x86: acer-wmi: Add ACER_CAP_SET_FUNCTION_MODE capability flag - [x86] platform/x86: acer-wmi: Add support for SW_TABLET_MODE on Switch devices - [x86] platform/x86: acer-wmi: Add ACER_CAP_KBD_DOCK quirk for the Aspire Switch 10E SW3-016 - HID: mf: add support for 0079:1846 Mayflash/Dragonrise USB Gamecube Adapter - media: cx23885: add more quirks for reset DMA on some AMD IOMMU - [x86] ACPI: video: Add DMI quirk for GIGABYTE GB-BXBT-2807 - [x86] ASoC: Intel: bytcr_rt5640: Add quirk for ARCHOS Cesium 140 - PCI: Add function 1 DMA alias quirk for Marvell 9215 SATA controller - [x86] KVM: x86: Supplement __cr4_reserved_bits() with X86_FEATURE_PCID check - [x86] ASoC: Intel: sof_sdw: add missing TGL_HDMI quirk for Dell SKU 0A32 - scsi: ufs: Add a quirk to permit overriding UniPro defaults - misc: eeprom_93xx46: Add quirk to support Microchip 93LC46B eeprom - scsi: ufs: Introduce a quirk to allow only page-aligned sg entries - [arm64] drm/msm/a5xx: Remove overwriting A5XX_PC_DBG_ECO_CNTL register - HID: i2c-hid: Add I2C_HID_QUIRK_NO_IRQ_AFTER_RESET for ITE8568 EC on Voyo Winpad A15 - ALSA: usb-audio: Add DJM750 to Pioneer mixer quirk - ALSA: usb-audio: add mixer quirks for Pioneer DJM-900NXS2 - [x86] ASoC: Intel: sof_sdw: reorganize quirks by generation - [x86] ASoC: Intel: sof_sdw: add quirk for HP Spectre x360 convertible - [x86] KVM: SVM: Clear the CR4 register on reset - nvme-pci: mark Seagate Nytro XM1440 as QUIRK_NO_NS_DESC_LIST. - nvme-pci: add quirks for Lexar 256GB SSD https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.24 - uapi: nfnetlink_cthelper.h: fix userspace compilation error - [powerpc*] perf: Fix handling of privilege level checks in perf interrupt context - [powerpc*] pseries: Don't enforce MSI affinity with kdump - ethernet: alx: fix order of calls on resume (Closes: #983595) - [mips*] crypto: mips/poly1305 - enable for all MIPS processors - ath9k: fix transmitting to stations in dynamic SMPS mode - net: Fix gro aggregation for udp encaps with zero csum - net: check if protocol extracted by virtio_net_hdr_set_proto is correct - net: avoid infinite loop in mpls_gso_segment when mpls_hlen == 0 - net: l2tp: reduce log level of messages in receive path, add counter instead - can: skb: can_skb_set_owner(): fix ref counting if socket was closed before setting skb ownership - [armhf] can: flexcan: assert FRZ bit in flexcan_chip_freeze() - [armhf] can: flexcan: enable RX FIFO after FRZ/HALT valid - [armhf] can: flexcan: invoke flexcan_chip_freeze() to enter freeze mode - tcp: Fix sign comparison bug in getsockopt(TCP_ZEROCOPY_RECEIVE) - tcp: add sanity tests to TCP_QUEUE_SEQ - netfilter: nf_nat: undo erroneous tcp edemux lookup - netfilter: x_tables: gpf inside xt_find_revision() - net: always use icmp{,v6}_ndo_send from ndo_start_xmit - net: phy: fix save wrong speed and duplex problem if autoneg is on - mt76: dma: do not report truncated frames to mac80211 - [powerpc*] 603: Fix protection of user pages mapped with PROT_NONE - mount: fix mounting of detached mounts onto targets that reside on shared mounts - cifs: return proper error code in statfs(2) - Revert "mm, slub: consider rest of partial list if acquire_slab() fails" - docs: networking: drop special stable handling - [arm64] net: enetc: don't overwrite the RSS indirection table when initializing - [arm64] net: enetc: take the MDIO lock only once per NAPI poll cycle - [arm64] net: enetc: fix incorrect TPID when receiving 802.1ad tagged packets - [arm64] net: enetc: don't disable VLAN filtering in IFF_PROMISC mode - [arm64] net: enetc: force the RGMII speed and duplex instead of operating in inband mode - [arm64] net: enetc: remove bogus write to SIRXIDR from enetc_setup_rxbdr - [arm64] net: enetc: keep RX ring consumer index in sync with hardware - net/mlx4_en: update moderation when config reset - net: stmmac: fix incorrect DMA channel intr enable setting of EQoS v4.10 - nexthop: Do not flush blackhole nexthops when loopback goes down - net: sched: avoid duplicates in classes dump - [arm64] net: mscc: ocelot: properly reject destination IP keys in VCAP IS1 - net: usb: qmi_wwan: allow qmimux add/del with master up - cipso,calipso: resolve a number of problems with the DOI refcounts - net: stmmac: Fix VLAN filter delete timeout issue in Intel mGBE SGMII - [x86] stmmac: intel: Fixes clock registration error seen for multiple interfaces - [arm64] net: enetc: allow hardware timestamping on TX queues with tc-etf enabled - net: qrtr: fix error return code of qrtr_sendmsg() - [s390x] qeth: fix memory leak after failed TX Buffer allocation - r8169: fix r8168fp_adjust_ocp_cmd function - ixgbe: fail to create xfrm offload of IPsec tunnel mode SA - net: stmmac: stop each tx channel independently - net: stmmac: fix watchdog timeout during suspend/resume stress test - net: stmmac: fix wrongly set buffer2 valid when sph unsupport - ethtool: fix the check logic of at least one channel for RX/TX - net: phy: make mdio_bus_phy_suspend/resume as __maybe_unused - perf traceevent: Ensure read cmdlines are null terminated. - perf report: Fix -F for branch & mem modes - [arm64] net: hns3: fix query vlan mask value error for flow director - [arm64] net: hns3: fix bug when calculating the TCAM table info - bnxt_en: reliably allocate IRQ table on reset to avoid crash - gpiolib: acpi: Add ACPI_GPIO_QUIRK_ABSOLUTE_NUMBER quirk - gpiolib: acpi: Allow to find GpioInt() resource by name and index - [arm64,armhf] gpio: pca953x: Set IRQ type when handle Intel Galileo Gen 2 - gpio: fix gpio-device list corruption - drm/compat: Clear bounce structures - drm/amd/display: Add a backlight module option - drm/amd/display: Fix nested FPU context in dcn21_validate_bandwidth() - drm/shmem-helper: Check for purged buffers in fault handler - drm/shmem-helper: Don't remove the offset in vm_area_struct pgoff - drm: Use USB controller's DMA mask when importing dmabufs - [arm64] drm: meson_drv add shutdown function - drm/shmem-helpers: vunmap: Don't put pages for dma-buf - [x86] drm/i915: Wedge the GPU if command parser setup fails - qxl: Fix uninitialised struct field head.surface_id - media: usbtv: Fix deadlock on suspend - media: rc: compile rc-cec.c into rc-core - cifs: fix credit accounting for extra channel - [arm64] net: hns3: fix error mask definition of flow director - [s390x] qeth: don't replace a fully completed async TX buffer - [s390x] qeth: remove QETH_QDIO_BUF_HANDLED_DELAYED state - [s390x] qeth: improve completion of pending TX buffers - [s390x] qeth: fix notification for pending buffers during teardown - [arm64,armhf] net: dsa: implement a central TX reallocation procedure - [arm64,armhf] net: dsa: trailer: don't allocate additional memory for padding/tagging - [arm64] net: dsa: tag_ocelot: let DSA core deal with TX reallocation - [arm64,armhf] net: dsa: tag_edsa: let DSA core deal with TX reallocation - [armhf] net: dsa: tag_brcm: let DSA core deal with TX reallocation - [arm64,armhf] net: dsa: tag_dsa: let DSA core deal with TX reallocation - [arm64] enetc: Fix unused var build warning for CONFIG_OF - [arm64] net: enetc: initialize RFS/RSS memories for unused ports too - ath11k: peer delete synchronization with firmware - ath11k: start vdev if a bss peer is already created - ath11k: fix AP mode for QCA6390 - scsi: ufs: WB is only available on LUN #0 to #7 - udf: fix silent AED tagLocation corruption - [amd64] iommu/vt-d: Clear PRQ overflow only when PRQ is empty - [arm*] mmc: sdhci-iproc: Add ACPI bindings for the RPi - Platform: OLPC: Fix probe error handling - [powerpc*] pci: Add ppc_md.discover_phbs() - [armhf] spi: stm32: make spurious and overrun interrupts visible - [powerpc] improve handling of unrecoverable system reset - [powerpc] perf: Record counter overflow always if SAMPLE_IP is unset - HID: logitech-dj: add support for the new lightspeed connection iteration - [powerpc*] 64: Fix stack trace not displaying final frame - [amd64] iommu/amd: Fix performance counter initialization - [arm64] clk: qcom: gdsc: Implement NO_RET_PERIPH flag - [x86] Input: applespi - don't wait for responses to commands indefinitely. - [arm64] PCI: xgene-msi: Fix race in installing chained irq handler - ext4: don't try to processed freed blocks until mballoc is initialized - kbuild: clamp SUBLEVEL to 255 - PCI: Fix pci_register_io_range() memory leak - i40e: Fix memory leak in i40e_probe - [s390x] smp: __smp_rescan_cpus() - move cpumask away from stack - drivers/base/memory: don't store phys_device in memory blocks - sysctl.c: fix underflow value setting risk in vm_table - scsi: libiscsi: Fix iscsi_prep_scsi_cmd_pdu() error handling - scsi: target: core: Add cmd length set before cmd complete - scsi: target: core: Prevent underflow for service actions - mmc: sdhci: Update firmware interface API - [arm*] assembler: introduce adr_l, ldr_l and str_l macros - [arm*] efistub: replace adrl pseudo-op with adr_l macro invocation - ALSA: usb: Add Plantronics C320-M USB ctrl msg delay quirk - ALSA: hda/hdmi: Cancel pending works before suspend - ALSA: hda/conexant: Add quirk for mute LED control on HP ZBook G5 - ALSA: hda/ca0132: Add Sound BlasterX AE-5 Plus support - ALSA: hda: Drop the BATCH workaround for AMD controllers - ALSA: hda: Flush pending unsolicited events before suspend - ALSA: hda: Avoid spurious unsol event handling during S3/S4 - ALSA: usb-audio: Fix "cannot get freq eq" errors on Dell AE515 sound bar - ALSA: usb-audio: Apply the control quirk to Plantronics headsets - ALSA: usb-audio: Disable USB autosuspend properly in setup_disable_autosuspend() - ALSA: usb-audio: fix NULL ptr dereference in usb_audio_probe - ALSA: usb-audio: fix use after free in usb_audio_disconnect - Revert 95ebabde382c ("capabilities: Don't allow writing ambiguous v3 file capabilities") - block: Discard page cache of zone reset target range - block: Try to handle busy underlying device on discard - [arm64] mte: Map hotplugged memory as Normal Tagged - [arm64] perf: Fix 64-bit event counter read truncation - [s390x] dasd: fix hanging DASD driver unbind - [s390]x dasd: fix hanging IO request during DASD driver unbind - software node: Fix node registration - xen/events: reset affinity of 2-level event when tearing it down - [arm64,armhf] mmc: mmci: Add MMC_CAP_NEED_RSP_BUSY for the stm32 variants - mmc: core: Fix partition switch time for eMMC - mmc: cqhci: Fix random crash when remove mmc module/card - cifs: do not send close in compound create+close requests - Goodix Fingerprint device is not a modem - usb: gadget: f_uac2: always increase endpoint max_packet_size by one audio slot - usb: gadget: f_uac1: stop playback on function disable - [arm64] usb: dwc3: qcom: Add missing DWC3 OF node refcount decrement - [arm64] usb: dwc3: qcom: add URS Host support for sdm845 ACPI boot - [arm64] usb: dwc3: qcom: add ACPI device id for sc8180x - [arm64] usb: dwc3: qcom: Honor wakeup enabled/disabled state - USB: usblp: fix a hang in poll() if disconnected - usb: xhci: do not perform Soft Retry for some xHCI hosts - xhci: Improve detection of device initiated wake signal. - usb: xhci: Fix ASMedia ASM1042A and ASM3242 DMA addressing - xhci: Fix repeated xhci wake after suspend due to uncleared internal wake state - USB: serial: io_edgeport: fix memory leak in edge_startup - USB: serial: ch341: add new Product ID - USB: serial: cp210x: add ID for Acuity Brands nLight Air Adapter - USB: serial: cp210x: add some more GE USB IDs - usbip: fix stub_dev to check for stream socket - usbip: fix vhci_hcd to check for stream socket - usbip: fix vudc to check for stream socket - usbip: fix stub_dev usbip_sockfd_store() races leading to gpf - usbip: fix vhci_hcd attach_store() races leading to gpf - usbip: fix vudc usbip_sockfd_store races leading to gpf - [x86] misc/pvpanic: Export module FDT device table - misc: fastrpc: restrict user apps from sending kernel RPC messages (CVE-2021-28375) - [x86] staging: rtl8192u: fix ->ssid overflow in r8192_wx_set_scan() - staging: rtl8188eu: prevent ->ssid overflow in rtw_wx_set_scan() (CVE-2021-28660) - staging: rtl8712: unterminated string leads to read overflow - staging: rtl8188eu: fix potential memory corruption in rtw_check_beacon_data() - staging: rtl8712: Fix possible buffer overflow in r8712_sitesurvey_cmd - [x86] staging: rtl8192e: Fix possible buffer overflow in _rtl92e_wx_set_scan - [x86] staging: comedi: addi_apci_1032: Fix endian problem for COS sample - [x86] staging: comedi: addi_apci_1500: Fix endian problem for command sample - [x86] staging: comedi: adv_pci1710: Fix endian problem for AI command data - [i386] staging: comedi: das6402: Fix endian problem for AI command data - [i386] staging: comedi: das800: Fix endian problem for AI command data - [i386] staging: comedi: dmm32at: Fix endian problem for AI command data - [x86] staging: comedi: me4000: Fix endian problem for AI command data - [i386] staging: comedi: pcl711: Fix endian problem for AI command data - [i386] staging: comedi: pcl818: Fix endian problem for AI command data - [arm64] mm: Fix pfn_valid() for ZONE_DEVICE based memory - SUNRPC: Set memalloc_nofs_save() for sync tasks - NFS: Don't revalidate the directory permissions on a lookup failure - NFS: Don't gratuitously clear the inode cache when lookup failed - NFSv4.2: fix return value of _nfs4_get_security_label() - block: rsxx: fix error return code of rsxx_pci_probe() - nvme-fc: fix racing controller reset and create association - configfs: fix a use-after-free in __configfs_open_file - [arm64] mm: use a 48-bit ID map when possible on 52-bit VA builds - perf/core: Flush PMU internal buffers for per-CPU events - [x86] perf/x86/intel: Set PERF_ATTACH_SCHED_CB for large PEBS and LBR - hrtimer: Update softirq_expires_next correctly after __hrtimer_get_next_event() - seqlock,lockdep: Fix seqcount_latch_init() - stop_machine: mark helpers __always_inline - include/linux/sched/mm.h: use rcu_dereference in in_vfork() - zram: fix return value on writeback_store - sched/membarrier: fix missing local execution of ipi_sync_rq_state() - efi: stub: omit SetVirtualAddressMap() if marked unsupported in RT_PROP table - [powerpc*] 64s: Fix instruction encoding for lis in ppc_function_entry() - [powerpc*] Fix inverted SET_FULL_REGS bitop - [powerpc*] Fix missing declaration of [en/dis]able_kernel_vsx() - binfmt_misc: fix possible deadlock in bm_register_write - [amd64] x86/unwind/orc: Disable KASAN checking in the ORC unwinder, part 2 - [x86] entry: Move nmi entry/exit into common code - [x86] entry: Fix entry/exit mismatch on failed fast 32-bit syscalls - [x86] KVM: Ensure deadline timer has truly expired before posting its IRQ - [x86] KVM: kvmclock: Fix vCPUs > 64 can't be online/hotpluged - [arm64] KVM: Fix range alignment when walking page tables - [arm64] KVM: Avoid corrupting vCPU context register in guest exit - [arm64] KVM: nvhe: Save the SPE context early - [arm64] KVM: Reject VM creation when the default IPA size is unsupported - [arm64] KVM: Fix exclusive limit for IPA size - mm/userfaultfd: fix memory corruption due to writeprotect - mm/madvise: replace ptrace attach requirement for process_madvise - [arm64] KVM: Ensure I-cache isolation between vcpus of a same VM - mm/page_alloc.c: refactor initialization of struct page for holes in memory layout - xen/events: don't unmask an event channel when an eoi is pending - xen/events: avoid handling the same event on two cpus at the same time - [arm64] KVM: Fix nVHE hyp panic host context restore - RDMA/umem: Use ib_dma_max_seg_size instead of dma_get_max_seg_size [ Salvatore Bonaccorso ] * Bump ABI to 5 * [rt] Refresh "printk: remove logbuf_lock" * [rt] Refresh "printk: remove safe buffers" * [rt] Refresh "printk: remove deferred printing" * [rt] Refresh "mm/memcontrol: Replace local_irq_disable with local locks" * [rt] Update to 5.10.21-rt34 * Refresh "Include package version along with kernel release in stack traces" * bpf: Prohibit alu ops for pointer types not defining ptr_limit (CVE-2020-27170) * bpf: Fix off-by-one for area size in creating mask to left (CVE-2020-27171) * bpf: Simplify alu_limit masking for pointer arithmetic * bpf: Add sanity check for upper ptr_limit * bpf, selftests: Fix up some test_verifier cases for unprivileged * [x86] crypto: aesni - Use TEST %reg,%reg instead of CMP $0,%reg * [x86] crypto: x86/aes-ni-xts - use direct calls to and 4-way stride * RDMA/srp: Fix support for unpopulated and unbalanced NUMA nodes * fuse: fix live lock in fuse_iget() * Revert "nfsd4: remove check_conflicting_opens warning" * Revert "nfsd4: a client's own opens needn't prevent delegations" * ALSA: usb-audio: Don't avoid stopping the stream at disconnection * [armhf] net: dsa: b53: Support setting learning on port [ Wookey ] * [arm64] drivers/perf: Enable ARM_CMN as module (Closes: #981186) [ Vincent Blut ] * [arm64] drivers/perf: Enable ARM_SMMU_V3_PMU as module -- Salvatore Bonaccorso Fri, 19 Mar 2021 19:20:52 +0100 linux (5.10.19-1) unstable; urgency=medium * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.14 - [armhf] net: fec: put child node on error path - [x86] stmmac: intel: Configure EHL PSE0 GbE and PSE1 GbE to 32 bits DMA addressing - [armhf] net: dsa: bcm_sf2: put device node before return - net: switchdev: don't set port_obj_info->handled true when -EOPNOTSUPP - [arm64,armhf] iommu/io-pgtable-arm: Support coherency for Mali LPAE - [arm64,armhf] drm/panfrost: Support cache-coherent integrations - [arm64] Fix kernel address detection of __is_lm_address() - [arm64] Do not pass tagged addresses to __is_lm_address() - Revert "x86/setup: don't remove E820_TYPE_RAM for pfn 0" - [amd64] iommu/vt-d: Do not use flush-queue when caching-mode is on - [x86] platform/x86: touchscreen_dmi: Add swap-x-y quirk for Goodix touchscreen on Estar Beauty HD tablet - [x86] platform/x86: intel-vbtn: Support for tablet mode on Dell Inspiron 7352 - [x86] __always_inline __{rd,wr}msr() - scsi: scsi_transport_srp: Don't block target in failfast state - scsi: libfc: Avoid invoking response handler twice if ep is already completed - [x86] scsi: fnic: Fix memleak in vnic_dev_init_devcmd2 - [x86] ASoC: SOF: Intel: hda: Resume codec to do jack detection - ALSA: hda: Add AlderLake-P PCI ID and HDMI codec vid - mac80211: fix fast-rx encryption check - mac80211: fix encryption key selection for 802.3 xmit - [powerpc*] scsi: ibmvfc: Set default timeout to avoid crash during migration - ALSA: hda: Add Cometlake-R PCI ID - [arm64,armhf] i2c: tegra: Create i2c_writesl_vi() to use with VI I2C for filling TX FIFO - udf: fix the problem that the disc content is not displayed - nvme: check the PRINFO bit before deciding the host buffer length - nvme-rdma: avoid request double completion for concurrent nvme_rdma_timeout - nvme-tcp: avoid request double completion for concurrent nvme_tcp_timeout - nvme-pci: allow use of cmb on v1.4 controllers - nvmet: set right status on error in id-ns handler - [x86] platform/x86: thinkpad_acpi: Add P53/73 firmware to fan_quirk_table for dual fan control - objtool: Don't fail the kernel build on fatal errors - [x86] cpu: Add another Alder Lake CPU to the Intel family - kthread: Extract KTHREAD_IS_PER_CPU - workqueue: Restrict affinity change to rescuer https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.15 - USB: serial: cp210x: add pid/vid for WSDA-200-USB - USB: serial: cp210x: add new VID/PID for supporting Teraoka AD2000 - USB: serial: option: Adding support for Cinterion MV31 - [arm64,armhf] usb: host: xhci: mvebu: make USB 3.0 PHY optional for Armada 3720 - USB: gadget: legacy: fix an error code in eth_bind() - [armhf] usb: gadget: aspeed: add missing of_node_put - USB: usblp: don't call usb_set_interface if there's a single alt - [arm*] usb: dwc2: Fix endpoint direction check in ep_from_windex - [arm64,armhf] usb: dwc3: fix clock issue during resume in OTG mode - [arm64] dts: qcom: c630: keep both touchpad devices enabled - Input: i8042 - unbreak Pegatron C15B - [arm64] dts: rockchip: Use only supported PCIe link speed on Pinebook Pro - bpf, cgroup: Fix optlen WARN_ON_ONCE toctou (CVE-2021-20194) - bpf, cgroup: Fix problematic bounds check (CVE-2021-20194) - bpf, inode_storage: Put file handler if no storage was found - bpf, preload: Fix build when $(O) points to a relative path - [arm64] dts: meson: switch TFLASH_VDD_EN pin to open drain on Odroid-C4 - r8169: work around RTL8125 UDP hw bug - rxrpc: Fix deadlock around release of dst cached on udp tunnel - SUNRPC: Fix NFS READs that start at non-page-aligned offsets - igc: set the default return value to -IGC_ERR_NVM in igc_write_nvm_srwr - igc: check return value of ret_val in igc_config_fc_after_link_up - i40e: Revert "i40e: don't report link up for a VF who hasn't enabled queues" - net/mlx5: Fix function calculation for page trees - net/mlx5: Fix leak upon failure of rule creation - net/mlx5e: Update max_opened_tc also when channels are closed - net/mlx5e: Release skb in case of failure in tc update skb - net: lapb: Copy the skb before sending a packet - [arm64,armhf] net: mvpp2: TCAM entry enable should be written after SRAM data - [armhf] dts: sun7i: a20: bananapro: Fix ethernet phy-mode - nvmet-tcp: fix out-of-bounds access when receiving multiple h2cdata PDUs - memblock: do not start bottom-up allocations with kernel_end - [x86] thunderbolt: Fix possible NULL pointer dereference in tb_acpi_add_link() - ovl: fix dentry leak in ovl_get_redirect - ovl: avoid deadlock on directory ioctl - ovl: implement volatile-specific fsync error behaviour - mac80211: fix station rate table updates on assoc - gpiolib: free device name on error path to fix kmemleak - fgraph: Initialize tracing_graph_pause at task creation - tracing/kprobe: Fix to support kretprobe events on unloaded modules - kretprobe: Avoid re-registration of the same kretprobe earlier - tracing: Use pause-on-trace with the latency tracers - tracepoint: Fix race between tracing and removing tracepoint - [arm64,x86] libnvdimm/namespace: Fix visibility of namespace resource attribute - [arm64,x86] libnvdimm/dimm: Avoid race between probe and available_slots_show() - genirq: Prevent [devm_]irq_alloc_desc from returning irq 0 - genirq/msi: Activate Multi-MSI early when MSI_FLAG_ACTIVATE_EARLY is set - scripts: use pkg-config to locate libcrypto - xhci: fix bounce buffer usage for non-sg list case - cifs: report error instead of invalid when revalidating a dentry fails - iommu: Check dev->iommu in dev_iommu_priv_get() before dereferencing it - smb3: Fix out-of-bounds bug in SMB2_negotiate() - smb3: fix crediting for compounding when only one request in flight - mmc: core: Limit retries when analyse of SDIO tuples fails - [x86] Fix unsynchronized access to sev members through svm_register_enc_region - drm/dp/mst: Export drm_dp_get_vc_payload_bw() - [x86] drm/i915: Fix the MST PBN divider calculation - [x86] drm/i915/gem: Drop lru bumping on display unpinning - [x86] drm/i915/gt: Close race between enable_breadcrumbs and cancel_breadcrumbs - [x86] drm/i915/display: Prevent double YUV range correction on HDR planes - [x86] drm/i915: Extract intel_ddi_power_up_lanes() - [x86] drm/i915: Power up combo PHY lanes for for HDMI as well - drm/amd/display: Revert "Fix EDID parsing after resume from suspend" - io_uring: don't modify identity's files uncess identity is cowed - nvme-pci: avoid the deepest sleep state on Kingston A2000 SSDs - [x86] KVM: SVM: Treat SVM as unsupported when running as an SEV guest - [x86] KVM: x86/mmu: Fix TDP MMU zap collapsible SPTEs - [x86] KVM: x86: Allow guests to see MSR_IA32_TSX_CTRL even if tsx=off - [x86] KVM: x86: fix CPUID entries returned by KVM_GET_CPUID2 ioctl - [x86] KVM: x86: Update emulator context mode if SYSENTER xfers to 64-bit mode - [x86] KVM: x86: Set so called 'reserved CR3 bits in LM mask' at vCPU reset - mm: hugetlbfs: fix cannot migrate the fallocated HugeTLB page - mm: hugetlb: fix a race between freeing and dissolving the page - mm: hugetlb: fix a race between isolating and freeing page - mm: hugetlb: remove VM_BUG_ON_PAGE from page_huge_active - mm, compaction: move high_pfn to the for loop scope - mm/vmalloc: separate put pages and flush VM flags - mm: thp: fix MADV_REMOVE deadlock on shmem THP - mm/filemap: add missing mem_cgroup_uncharge() to __add_to_page_cache_locked() - [x86] build: Disable CET instrumentation in the kernel - [x86] debug: Fix DR6 handling - [x86] debug: Prevent data breakpoints on __per_cpu_offset - [x86] debug: Prevent data breakpoints on cpu_dr7 - [x86] apic: Add extra serialization for non-serializing MSRs - Input: goodix - add support for Goodix GT9286 chip - Input: xpad - sync supported devices with fork on GitHub - md: Set prev_flush_start and flush_bio in an atomic way - igc: Report speed and duplex as unknown when device is runtime suspended - neighbour: Prevent a dead entry from updating gc_list - net: ip_tunnel: fix mtu calculation - udp: ipv4: manipulate network header of NATed UDP GRO fraglist - [arm64,armhf] net: dsa: mv88e6xxx: override existent unicast portvec in port_fdb_add - net: sched: replaced invalid qdisc tree flush helper in qdisc_replace https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.16 - io_uring: simplify io_task_match() - io_uring: add a {task,files} pair matching helper - io_uring: don't iterate io_uring_cancel_files() - io_uring: pass files into kill timeouts/poll - io_uring: always batch cancel in *cancel_files() - io_uring: fix files cancellation - io_uring: account io_uring internal files as REQ_F_INFLIGHT - io_uring: if we see flush on exit, cancel related tasks - io_uring: fix __io_uring_files_cancel() with TASK_UNINTERRUPTIBLE - io_uring: replace inflight_wait with tctx->wait - io_uring: fix cancellation taking mutex while TASK_UNINTERRUPTIBLE - io_uring: fix flush cqring overflow list while TASK_INTERRUPTIBLE - io_uring: fix list corruption for splice file_get - io_uring: fix sqo ownership false positive warning - io_uring: reinforce cancel on flush during exit - io_uring: drop mm/files between task_work_submit - gpiolib: cdev: clear debounce period if line set to output - [powerpc*] 64/signal: Fix regression in __kernel_sigtramp_rt64() semantics - af_key: relax availability checks for skb size calculation - regulator: core: avoid regulator_resolve_supply() race condition - drm/nouveau/nvif: fix method count when pushing an array - mac80211: 160MHz with extended NSS BW in CSA - [x86] ASoC: Intel: Skylake: Zero snd_ctl_elem_value - pNFS/NFSv4: Try to return invalid layout in pnfs_layout_process() - pNFS/NFSv4: Improve rejection of out-of-order layouts - ALSA: hda: intel-dsp-config: add PCI id for TGL-H - [x86] ASoC: Intel: sof_sdw: set proper flags for Dell TGL-H SKU 0A5E - iwlwifi: mvm: skip power command when unbinding vif during CSA - iwlwifi: pcie: add a NULL check in iwl_pcie_txq_unmap - iwlwifi: pcie: fix context info memory leak - iwlwifi: mvm: invalidate IDs of internal stations at mvm start - iwlwifi: pcie: add rules to match Qu with Hr2 - iwlwifi: mvm: guard against device removal in reprobe - iwlwifi: queue: bail out on invalid freeing - SUNRPC: Move simple_get_bytes and simple_get_netobj into private header - SUNRPC: Handle 0 length opaque XDR object data properly - blk-cgroup: Use cond_resched() when destroy blkgs - regulator: Fix lockdep warning resolving supplies - bpf: Fix verifier jmp32 pruning decision logic - bpf: Fix 32 bit src register truncation on div/mod - bpf: Fix verifier jsgt branch analysis on max bound - [x86] drm/i915: Fix ICL MG PHY vswing handling - [x86] drm/i915: Skip vswing programming for TBT - nilfs2: make splice write available again - Revert "mm: memcontrol: avoid workload stalls when lowering memory.high" - squashfs: avoid out of bounds writes in decompressors - squashfs: add more sanity checks in id lookup - squashfs: add more sanity checks in inode lookup - squashfs: add more sanity checks in xattr id lookup https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.17 - objtool: Fix seg fault with Clang non-section symbols - Revert "dts: phy: add GPIO number and active state used for phy reset" - tracing: Do not count ftrace events in top level enable output - tracing: Check length before giving out the filter buffer - [x86] drm/i915: Fix overlay frontbuffer tracking - arm/xen: Don't probe xenbus as part of an early initcall - cgroup: fix psi monitor for root cgroup - [x86] drm/i915/tgl+: Make sure TypeC FIA is powered up when initializing it - drm/dp_mst: Don't report ports connected if nothing is attached to them - dmaengine: move channel device_node deletion to driver - [armhf] soc: ti: omap-prm: Fix boot time errors for rst_map_012 bits 0 and 1 - [arm64] dts: qcom: sdm845: Reserve LPASS clocks in gcc - [x86] platform/x86: hp-wmi: Disable tablet-mode reporting by default - [arm64] dts: rockchip: Disable display for NanoPi R2S - ovl: perform vfs_getxattr() with mounter creds - cap: fix conversions on getxattr - ovl: skip getxattr of security labels - scsi: lpfc: Fix EEH encountering oops with NVMe traffic - [x86] split_lock: Enable the split lock feature on another Alder Lake CPU - nvme-pci: ignore the subsysem NQN on Phison E16 - [riscv64] virt_addr_valid must check the address belongs to linear mapping - bfq-iosched: Revert "bfq: Fix computation of shallow depth" - kallsyms: fix nonconverging kallsyms table with lld - [armel,armhf] ensure the signal page contains defined contents - [armel,armhf] kexec: fix oops after TLB are invalidated - Revert "lib: Restrict cpumask_local_spread to houskeeping CPUs" - [amd64] x86/efi: Remove EFI PGD build time checks - [x86] KVM: x86: cleanup CR3 reserved bits checks - cgroup-v1: add disabled controller check in cgroup1_parse_param() - mt76: dma: fix a possible memory leak in mt76_add_fragment() - [arm*] drm/vc4: hvs: Fix buffer overflow with the dlist handling - bpf: Unbreak BPF_PROG_TYPE_KPROBE when kprobe is called via do_int3 - bpf: Check for integer overflow when using roundup_pow_of_two() - netfilter: xt_recent: Fix attempt to update deleted entry - netfilter: nftables: fix possible UAF over chains from packet path in netns - netfilter: flowtable: fix tcp and udp header checksum update - xen/netback: avoid race in xenvif_rx_ring_slots_available() - [x86] hv_netvsc: Reset the RSC count if NVSP_STAT_FAIL in netvsc_receive() - [arm64] net: enetc: initialize the RFS and RSS memories - net: stmmac: set TxQ mode back to DCB after disabling CBS - netfilter: conntrack: skip identical origin tuple in same zone only - scsi: scsi_debug: Fix a memory leak - [x86] build: Disable CET instrumentation in the kernel for 32-bit too - [arm64] net: dsa: felix: implement port flushing on .phylink_mac_link_down - [arm64] net: hns3: add a check for queue_id in hclge_reset_vf_queue() - [arm64] net: hns3: add a check for tqp_index in hclge_get_ring_chain_from_mbx() - [arm64] net: hns3: add a check for index in hclge_get_rss_key() - firmware_loader: align .builtin_fw to 8 - [arm64,armhf] drm/sun4i: tcon: set sync polarity for tcon1 channel - [arm64,armhf] drm/sun4i: dw-hdmi: always set clock rate - [arm64,armhf] drm/sun4i: Fix H6 HDMI PHY configuration - [arm64,armhf] drm/sun4i: dw-hdmi: Fix max. frequency for H6 - [arm64,armhf] clk: sunxi-ng: mp: fix parent rate change flag check - [armhf] i2c: stm32f7: fix configuration of the digital filter - scripts: set proper OpenSSL include dir also for sign-file - [x86] pci: Create PCI/MSI irqdomain after x86_init.pci.arch_init() - arm64: mte: Allow PTRACE_PEEKMTETAGS access to the zero page - rxrpc: Fix clearance of Tx/Rx ring when releasing a call - udp: fix skb_copy_and_csum_datagram with odd segment sizes - [arm64,armhf] net: dsa: call teardown method on probe failure - [x86] cpufreq: ACPI: Extend frequency tables to cover boost frequencies - [x86] cpufreq: ACPI: Update arch scale-invariance max perf ratio if CPPC is not there - net: gro: do not keep too many GRO packets in napi->rx_list - net: fix iteration for sctp transport seq_files - net/vmw_vsock: fix NULL pointer dereference - net/vmw_vsock: improve locking in vsock_connect_timeout() - net: watchdog: hold device global xmit lock during tx disable - switchdev: mrp: Remove SWITCHDEV_ATTR_ID_MRP_PORT_STAT - vsock/virtio: update credit only if socket is not closed - vsock: fix locking in vsock_shutdown() - net/rds: restrict iovecs length for RDS_CMSG_RDMA_ARGS - ovl: expand warning in ovl_d_real() - kcov, usb: only collect coverage from __usb_hcd_giveback_urb in softirq https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.18 - IB/isert: add module param to set sg_tablesize for IO cmd - net: qrtr: Fix port ID for control messages - net/sched: fix miss init the mru in qdisc_skb_cb - net: openvswitch: fix TTL decrement exception action execution - net: bridge: Fix a warning when del bridge sysfs - net: fix proc_fs init handling in af_packet and tls - [amd64] Xen/x86: don't bail early from clear_foreign_p2m_mapping() (CVE-2021-26932) - [amd64] Xen/x86: also check kernel mapping in set_foreign_p2m_mapping() (CVE-2021-26932) - Xen/gntdev: correct dev_bus_addr handling in gntdev_map_grant_pages() (CVE-2021-26932) - Xen/gntdev: correct error checking in gntdev_map_grant_pages() (CVE-2021-26932) - [armhf] xen/arm: don't ignore return errors from set_phys_to_machine (CVE-2021-26932) - xen-blkback: don't "handle" error by BUG() (CVE-2021-26931) - xen-netback: don't "handle" error by BUG() (CVE-2021-26931) - xen-scsiback: don't "handle" error by BUG() (CVE-2021-26931) - xen-blkback: fix error handling in xen_blkbk_map() (CVE-2021-26930) - tty: protect tty_write from odd low-level tty disciplines - Bluetooth: btusb: Always fallback to alt 1 for WBS - btrfs: fix crash after non-aligned direct IO write with O_DSYNC - media: pwc: Use correct device for DMA https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.19 - bpf: Fix truncation handling for mod32 dst reg wrt zero - HID: make arrays usage and value to be the same - RDMA: Lift ibdev_to_node from rds to common code - nvme-rdma: Use ibdev_to_node instead of dereferencing ->dma_device - USB: quirks: sort quirk entries - usb: quirks: add quirk to start video capture on ELMO L-12F document camera reliable - ceph: downgrade warning from mdsmap decode to debug - Bluetooth: btusb: Some Qualcomm Bluetooth adapters stop working (Closes: #981005) - [x86] hwmon: (dell-smm) Add XPS 15 L502X to fan control blacklist - [x86] KVM: Zap the oldest MMU pages, not the newest - mm: unexport follow_pte_pmd - mm: simplify follow_pte{,pmd} - KVM: do not assume PTE is writable after follow_pfn - mm: provide a saner PTE walking API for modules - KVM: Use kvm_pfn_t for local PFN variable in hva_to_pfn_remapped() - NET: usb: qmi_wwan: Adding support for Cinterion MV31 - cifs: Set CIFS_MOUNT_USE_PREFIX_PATH flag on setting cifs_sb->prepath. [ Salvatore Bonaccorso ] * [rt] Update to 5.10.14-rt28 * Ignore __udp_gso_segment to avoid ABI changes * Ignore xhci_init_driver to avoid ABI changes * [rt] Update to 5.10.16-rt30 * [rt] Refresh "tracing: Merge irqflags + preempt counter." for context changes * [rt] Update to 5.10.17-rt32 * [rt] Refresh "um: synchronize kmsg_dumper" for context changes * [rt] Refresh "printk: move console printing to kthreads" for context changes * Bump ABI to 4 * soundwire: intel: fix possible crash when no device is detected (Closes: #981003) * drm/nouveau: bail out of nouveau_channel_new if channel init fails (CVE-2020-25639) * [x86] drm/i915/gt: One more flush for Baytrail clear residuals * [x86] drm/i915/gt: Flush before changing register state * [x86] drm/i915/gt: Correct surface base address for renderclear * certs: Rotate to use the "Debian Secure Boot Signer 2021 - linux" certificate [ Vincent Blut ] * [x86] Enable PWM_CRC (Closes: #982808) * net/can: Enable CAN_J1939 as module * misc/eeprom: Enable EEPROM_EE1004 as module (Closes: #983495) * [arm64] Enable DRM_DW_HDMI_CEC as module (Closes: #983759) [ Luca Boccassi ] * bpf: enable CONFIG_BPF_LSM on all architectures. Not active by default, by explicitly setting CONFIG_LSM to include all other LSMs but not bpf. -- Salvatore Bonaccorso Tue, 02 Mar 2021 17:49:25 +0100 linux (5.10.13-1) unstable; urgency=medium * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.13 - iwlwifi: provide gso_type to GSO packets - nbd: freeze the queue while we're adding connections (CVE-2021-3348) - tty: avoid using vfs_iocb_iter_write() for redirected console writes - ACPI: sysfs: Prefer "compatible" modalias - ACPI: thermal: Do not call acpi_thermal_check() directly - kernel: kexec: remove the lock operation of system_transition_mutex - ALSA: hda/realtek: Enable headset of ASUS B1400CEPE with ALC256 - ALSA: hda/via: Apply the workaround generically for Clevo machines - [arm64,armhf] media: cedrus: Fix H264 decoding - media: rc: fix timeout handling after switch to microsecond durations - [x86] media: rc: ite-cir: fix min_timeout calculation - media: rc: ensure that uevent can be read directly after rc device register - [armhf] dts: tbs2910: rename MMC node aliases - wext: fix NULL-ptr-dereference with cfg80211's lack of commit() - [amd64] ASoC: AMD Renoir - refine DMI entries for some Lenovo products - drm/nouveau/kms/gk104-gp1xx: Fix > 64x64 cursors - [x86] drm/i915: Always flush the active worker before returning from the wait - [x86] drm/i915/gt: Always try to reserve GGTT address 0x0 - drivers/nouveau/kms/nv50-: Reject format modifiers for cursor planes - bcache: only check feature sets when sb->version >= BCACHE_SB_VERSION_CDEV_WITH_FEATURES - net: usb: qmi_wwan: added support for Thales Cinterion PLSx3 modem family - [s390x] uv: Fix sysfs max number of VCPUs reporting - PM: hibernate: flush swap writer after marking - [x86] efi/apple-properties: Reinstate support for boolean properties - btrfs: fix lockdep warning due to seqcount_mutex on 32bit arch - btrfs: fix possible free space tree corruption with online conversion - [x86] KVM: x86/pmu: Fix HW_REF_CPU_CYCLES event pseudo-encoding in intel_arch_events[] - [x86] KVM: x86/pmu: Fix UBSAN shift-out-of-bounds warning in intel_pmu_refresh() - [arm64] KVM: Filter out v8.1+ events on v8.0 HW - [x86] KVM: nSVM: cancel KVM_REQ_GET_NESTED_STATE_PAGES on nested vmexit - [x86] KVM: x86: allow KVM_REQ_GET_NESTED_STATE_PAGES outside guest mode for VMX - [x86] KVM: nVMX: Sync unsync'd vmcs02 state to vmcs12 on migration - [x86] KVM: get smi pending status correctly - KVM: Forbid the use of tagged userspace addresses for memslots - io_uring: fix wqe->lock/completion_lock deadlock - leds: trigger: fix potential deadlock with libata - mt7601u: fix kernel crash unplugging the device - mt7601u: fix rx buffer refcounting - iwlwifi: Fix IWL_SUBDEVICE_NO_160 macro to use the correct bit. - [x86] drm/i915/gt: Clear CACHE_MODE prior to clearing residuals - [x86] drm/i915/pmu: Don't grab wakeref when enabling events - [arm*] drm/vc4: Correct lbm size and calculation - [arm*] drm/vc4: Correct POS1_SCL for hvs5 - drm/nouveau/dispnv50: Restore pushing of all data. - [x86] drm/i915: Check for all subplatform bits - uapi: fix big endian definition of ipv6_rpl_sr_hdr - KVM: Documentation: Fix spec for KVM_CAP_ENABLE_CAP_VM - [arm64] tee: optee: replace might_sleep with cond_resched - xen-blkfront: allow discard-* nodes to be optional - blk-mq: test QUEUE_FLAG_HCTX_ACTIVE for sbitmap_shared in hctx_may_queue - [armhf] imx: build suspend-imx6.S with arm instruction set - netfilter: nft_dynset: add timeout extension to template - Revert "RDMA/mlx5: Fix devlink deadlock on net namespace deletion" - Revert "block: simplify set_init_blocksize" to regain lost performance - xfrm: Fix oops in xfrm_replay_advance_bmp - xfrm: fix disable_xfrm sysctl when used on xfrm interfaces - xfrm: Fix wraparound in xfrm_policy_addr_delta() - RDMA/cxgb4: Fix the reported max_recv_sge value - [arm64] ASoC: qcom: Fix incorrect volatile registers - [arm64] ASoC: qcom: Fix broken support to MI2S TERTIARY and QUATERNARY - [x86] ASoC: Intel: Skylake: skl-topology: Fix OOPs ib skl_tplg_complete - [powerpc*] 64s: prevent recursive replay_soft_interrupts causing superfluous interrupt - pNFS/NFSv4: Fix a layout segment leak in pnfs_layout_process() - pNFS/NFSv4: Update the layout barrier when we schedule a layoutreturn - ASoC: SOF: Intel: soundwire: fix select/depend unmet dependencies - ASoC: qcom: lpass: Fix out-of-bounds DAI ID lookup - iwlwifi: pcie: avoid potential PNVM leaks - iwlwifi: pnvm: don't skip everything when not reloading - iwlwifi: pnvm: don't try to load after failures - iwlwifi: pcie: set LTR on more devices - iwlwifi: pcie: use jiffies for memory read spin time limit - iwlwifi: pcie: reschedule in long-running memory reads - mac80211: pause TX while changing interface type - ice: fix FDir IPv6 flexbyte - ice: Implement flow for IPv6 next header (extension header) - ice: update dev_addr in ice_set_mac_address even if HW filter exists - ice: Don't allow more channels than LAN MSI-X available - ice: Fix MSI-X vector fallback logic - i40e: acquire VSI pointer only after VF is initialized - igc: fix link speed advertising - net/mlx5: Fix memory leak on flow table creation error flow - net/mlx5e: E-switch, Fix rate calculation for overflow - net/mlx5e: free page before return - net/mlx5e: Reduce tc unsupported key print level - net/mlx5: Maintain separate page trees for ECPF and PF functions - net/mlx5e: Disable hw-tc-offload when MLX5_CLS_ACT config is disabled - net/mlx5e: Fix CT rule + encap slow path offload and deletion - net/mlx5e: Correctly handle changing the number of queues when the interface is down - net/mlx5e: Revert parameters on errors when changing trust state without reset - net/mlx5e: Revert parameters on errors when changing MTU and LRO state without reset - can: dev: prevent potential information leak in can_fill_info() - [arm64] ACPI/IORT: Do not blindly trust DMA masks from firmware - of/device: Update dma_range_map only when dev has valid dma-ranges - [amd64] iommu/amd: Use IVHD EFR for early initialization of IOMMU features - [amd64] iommu/vt-d: Correctly check addr alignment in qi_flush_dev_iotlb_pasid() - nvme-multipath: Early exit if no path is available - rxrpc: Fix memory leak in rxrpc_lookup_local - NFC: fix resource leak when target index is invalid - NFC: fix possible resource leak - [x86] ASoC: topology: Properly unregister DAI on removal - [x86] ASoC: topology: Fix memory corruption in soc_tplg_denum_create_values() - scsi: qla2xxx: Fix description for parameter ql2xenforce_iocb_limit - team: protect features update by RCU to avoid deadlock - tcp: make TCP_USER_TIMEOUT accurate for zero window probes - tcp: fix TLP timer not set when CA_STATE changes from DISORDER to OPEN - vsock: fix the race conditions in multi-transport support (CVE-2021-26708) [ Salvatore Bonaccorso ] * arch/s390: uv_info: Ignore ABI changes [ Vincent Blut ] * [arm64] Enable CRYPTO_NHPOLY1305_NEON. (closes: #980214) * [armhf] Enable KERNEL_MODE_NEON. -- Salvatore Bonaccorso Sat, 06 Feb 2021 09:23:52 +0100 linux (5.10.12-1) unstable; urgency=medium * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.10 - [x86] hyperv: Initialize clockevents after LAPIC is initialized - bpf: Fix signed_{sub,add32}_overflows type handling - nfsd4: readdirplus shouldn't return parent of export (CVE-2021-3178) - bpf: Don't leak memory in bpf getsockopt when optlen == 0 - bpf: Support PTR_TO_MEM{,_OR_NULL} register spilling - bpf: Fix helper bpf_map_peek_elem_proto pointing to wrong callback - net: fix use-after-free when UDP GRO with shared fraglist - udp: Prevent reuseport_select_sock from reading uninitialized socks - netxen_nic: fix MSI/MSI-x interrupts - net: ipv6: Validate GSO SKB before finish IPv6 processing - tipc: fix NULL deref in tipc_link_xmit() - [arm64,armhf] net: mvpp2: Remove Pause and Asym_Pause support - rndis_host: set proper input size for OID_GEN_PHYSICAL_MEDIUM request - esp: avoid unneeded kmap_atomic call - net: dcb: Validate netlink message in DCB handler - net: dcb: Accept RTM_GETDCB messages carrying set-like DCB commands - rxrpc: Call state should be read with READ_ONCE() under some circumstances - i40e: fix potential NULL pointer dereferencing - [arm64,armhf] net: stmmac: Fixed mtu channged by cache aligned - net: sit: unregister_netdevice on newlink's error path - [arm64,armhf] net: stmmac: fix taprio schedule configuration - [arm64,armhf] net: stmmac: fix taprio configuration when base_time is in the past - net: avoid 32 x truesize under-estimation for tiny skbs - net: phy: smsc: fix clk error handling - [arm64,armhf] net: dsa: clear devlink port type before unregistering slave netdevs - rxrpc: Fix handling of an unsupported token type in rxrpc_read() - [arm64,armhf] net: stmmac: use __napi_schedule() for PREEMPT_RT - [armhf] drm/panel: otm8009a: allow using non-continuous dsi clock - mac80211: do not drop tx nulldata packets on encrypted links - mac80211: check if atf has been disabled in __ieee80211_schedule_txq - [arm64,armhf] net: dsa: unbind all switches from tree when DSA master unbinds https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.11 - scsi: target: tcmu: Fix use-after-free of se_cmd->priv - [armhf] mtd: rawnand: gpmi: fix dst bit offset when extracting raw payload - mtd: rawnand: nandsim: Fix the logic when selecting Hamming soft ECC engine - [arm64,armhf] i2c: tegra: Wait for config load atomically while in ISR - [x86] platform/x86: i2c-multi-instantiate: Don't create platform device for INT3515 ACPI nodes - [x86] platform/x86: ideapad-laptop: Disable touchpad_switch for ELAN0634 - ALSA: hda/realtek - Limit int mic boost on Acer Aspire E5-575T - ALSA: hda/via: Add minimum mute flag - crypto: xor - Fix divide error in do_xor_speed() - dm crypt: fix copy and paste bug in crypt_alloc_req_aead - ACPI: scan: Make acpi_bus_get_device() clear return pointer on error - btrfs: don't get an EINTR during drop_snapshot for reloc - btrfs: do not double free backref nodes on error - btrfs: fix lockdep splat in btrfs_recover_relocation - btrfs: don't clear ret in btrfs_start_dirty_block_groups - btrfs: send: fix invalid clone operations when cloning from the same file and root - fs: fix lazytime expiration handling in __writeback_single_inode() - mmc: core: don't initialize block size from ext_csd if not present - [arm64] mmc: sdhci-xenon: fix 1.8v regulator stabilization - dm: avoid filesystem lookup in dm_get_dev_t() - dm integrity: fix a crash if "recalculate" used without "internal_hash" - dm integrity: conditionally disable "recalculate" feature - drm/atomic: put state on error path - drm/syncobj: Fix use-after-free - drm/amdgpu: remove gpu info firmware of green sardine - [x86] drm/i915/gt: Prevent use of engine->wa_ctx after error - [x86] drm/i915: Check for rq->hwsp validity after acquiring RCU lock - ASoC: rt711: mutex between calibration and power state changes - SUNRPC: Handle TCP socket sends with kernel_sendpage() again - HID: multitouch: Enable multi-input for Synaptics pointstick/touchpad device - dm integrity: select CRYPTO_SKCIPHER - [x86] hyperv: Fix kexec panic/hang issues - scsi: ufs: Relax the condition of UFSHCI_QUIRK_SKIP_MANUAL_WB_FLUSH_CTRL - scsi: ufs: Correct the LUN used in eh_device_reset_handler() callback - scsi: qedi: Correct max length of CHAP secret - scsi: scsi_debug: Fix memleak in scsi_debug_init() - scsi: sd: Suppress spurious errors when WRITE SAME is being disabled - [riscv64] Fix kernel time_init() - [riscv64] Fix sifive serial driver - [riscv64] Enable interrupts during syscalls with M-Mode - HID: logitech-dj: add the G602 receiver - HID: Ignore battery for Elan touchscreen on ASUS UX550 - [arm64,armhf] ALSA: hda/tegra: fix tegra-hda on tegra30 soc - [riscv64] cacheinfo: Fix using smp_processor_id() in preemptible - [arm64] make atomic helpers __always_inline - xen: Fix event channel callback via INTX/GSI - [x86] xen: Add xen_no_vector_callback option to test PCI INTX delivery - [x86] xen: Fix xen_hvm_smp_init() when vector callback not available - [riscv64] dts: phy: fix missing mdio device and probe failure of vsc8541-01 device - [riscv64] dts: phy: add GPIO number and active state used for phy reset - drm/amdgpu/psp: fix psp gfx ctrl cmds - HID: logitech-hidpp: Add product ID for MX Ergo in Bluetooth mode - drm/nouveau/bios: fix issue shadowing expansion ROMs - drm/nouveau/privring: ack interrupts the same way as RM - drm/nouveau/i2c/gm200: increase width of aux semaphore owner fields - drm/nouveau/mmu: fix vram heap sizing - drm/nouveau/kms/nv50-: fix case where notifier buffer is at offset 0 - io_uring: flush timeouts that should already have expired - [riscv64] Set current memblock limit - [riscv64] Fix maximum allowed phsyical memory for RV32 - nfsd: Fixes for nfsd4_encode_read_plus_data() - nfsd: Don't set eof on a truncated READ_PLUS - gpiolib: cdev: fix frame size warning in gpio_ioctl() - [armhf] pinctrl: aspeed: g6: Fix PWMG0 pinctrl setting - RDMA/ucma: Do not miss ctx destruction steps in some cases - btrfs: print the actual offset in btrfs_root_name - scsi: megaraid_sas: Fix MEGASAS_IOC_FIRMWARE regression - scsi: ufs: Fix tm request when non-fatal error happens - bpf: Prevent double bpf_prog_put call from bpf_tracing_prog_attach - [powerpc*] Use the common INIT_DATA_SECTION macro in vmlinux.lds.S - [powerpc*] Fix alignment bug within the init sections - [arm64] entry: remove redundant IRQ flag tracing - bpf: Reject too big ctx_size_in for raw_tp test run - RDMA/umem: Avoid undefined behavior of rounddown_pow_of_two() - RDMA/cma: Fix error flow in default_roce_mode_store - printk: ringbuffer: fix line counting - printk: fix kmsg_dump_get_buffer length calulations - iov_iter: fix the uaccess area in copy_compat_iovec_from_user - [mips*] i2c: octeon: check correct size of maximum RECV_LEN packet - [armel,armhf] drm/vc4: Unify PCM card's driver_name - [x86] platform/x86: intel-vbtn: Drop HP Stream x360 Convertible PC 11 from allow-list - [x86] platform/x86: hp-wmi: Don't log a warning on HPWMI_RET_UNKNOWN_COMMAND errors - ALSA: hda: Balance runtime/system PM if direct-complete is disabled - xsk: Clear pool even for inactive queues - can: dev: can_restart: fix use after free bug - can: vxcan: vxcan_xmit: fix use after free bug - can: peak_usb: fix use after free bugs - iio: common: st_sensors: fix possible infinite loop in st_sensors_irq_thread - iio: ad5504: Fix setting power-down state - drivers: iio: temperature: Add delay after the addressed reset command in mlx90632.c - [powerpc*] 64s: fix scv entry fallback flush vs interrupt - cifs: do not fail __smb_send_rqst if non-fatal signals are pending - [mips*] irqchip/mips-cpu: Set IPI domain parent chip - [x86] fpu: Add kernel_fpu_begin_mask() to selectively initialize state - [x86] topology: Make __max_die_per_package available unconditionally - [x86] mmx: Use KFPU_387 for MMX string operations - [x86] setup: don't remove E820_TYPE_RAM for pfn 0 - proc_sysctl: fix oops caused by incorrect command parameters - mm: memcg/slab: optimize objcg stock draining - mm: memcg: fix memcg file_dirty numa stat - mm: fix numa stats for thp migration - io_uring: iopoll requests should also wake task ->in_idle state - io_uring: fix SQPOLL IORING_OP_CLOSE cancelation state - io_uring: fix short read retries for non-reg files - [x86] intel_th: pci: Add Alder Lake-P support - [arm64] serial: mvebu-uart: fix tx lost characters at power off - ehci: fix EHCI host controller initialization sequence - [armhf] usb: gadget: aspeed: fix stop dma register setting. - USB: gadget: dummy-hcd: Fix errors in port-reset handling - usb: udc: core: Use lock when write to soft_connect - xhci: make sure TRB is fully written before giving it to the controller - [arm64,armhf] xhci: tegra: Delay for disabling LFPS detector - drivers core: Free dma_range_map when driver probe failed - driver core: Fix device link device name collision - driver core: Extend device_is_dependent() - [x86] drm/i915: s/intel_dp_sink_dpms/intel_dp_set_power/ - [x86] drm/i915: Only enable DFP 4:4:4->4:2:0 conversion when outputting YCbCr 4:4:4 - [x86] entry: Fix noinstr fail - [x86] cpu/amd: Set __max_die_per_package on AMD - cls_flower: call nla_ok() before nla_next() - netfilter: rpfilter: mask ecn bits before fib lookup - [x86] drm/i915/hdcp: Update CP property in update_pipe - locking/lockdep: Cure noinstr fail - [x86] ASoC: SOF: Intel: fix page fault at probe if i915 init fails - [arm64,armhf] net: dsa: mv88e6xxx: also read STU state in mv88e6250_g1_vtu_getnext - nvme-pci: refactor nvme_unmap_data - nvme-pci: fix error unwind in nvme_map_data - cachefiles: Drop superfluous readpages aops NULL check - skbuff: back tiny skbs with kmalloc() in __netdev_alloc_skb() too - tcp: fix TCP socket rehash stats mis-accounting - net_sched: gen_estimator: support large ewma log - udp: mask TOS bits in udp_v4_early_demux() - ipv6: create multicast route with RTPROT_KERNEL - net_sched: avoid shift-out-of-bounds in tcindex_set_parms() - net_sched: reject silly cell_log in qdisc_get_rtab() - ipv6: set multicast flag on the multicast route - net: Disable NETIF_F_HW_TLS_RX when RXCSUM is disabled - [armhf] net: dsa: b53: fix an off by one in checking "vlan->vid" - tcp: do not mess with cloned skbs in tcp_add_backlog() - tcp: fix TCP_USER_TIMEOUT with zero window - net: core: devlink: use right genl user_ptr when handling port param get/set - [arm64] pinctrl: qcom: Allow SoCs to specify a GPIO function that's not 0 - [arm64] pinctrl: qcom: No need to read-modify-write the interrupt status - [arm64] pinctrl: qcom: Properly clear "intr_ack_high" interrupts when unmasking - [arm64] pinctrl: qcom: Don't clear pending interrupts when enabling - tty: implement write_iter - tty: fix up hung_up_tty_write() conversion - tcp: Fix potential use-after-free due to double kfree() - [x86] ASoC: SOF: Intel: hda: Avoid checking jack on system suspend - [x86] drm/i915/hdcp: Get conn while content_type changed - bpf: Local storage helpers should check nullness of owner ptr passed - kernfs: implement ->read_iter - kernfs: implement ->write_iter - kernfs: wire up ->splice_read and ->splice_write - fs/pipe: allow sendfile() to pipe again - mm: fix initialization of struct page for holes in memory layout - Revert "mm: fix initialization of struct page for holes in memory layout" https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.12 - [arm*] gpio: mvebu: fix pwm .get_state period calculation - Revert "mm/slub: fix a memory leak in sysfs_slab_add()" - HID: wacom: Correct NULL dereference on AES pen proximity - HID: multitouch: Apply MT_QUIRK_CONFIDENCE quirk for multi-input devices - media: Revert "media: videobuf2: Fix length check for single plane dmabuf queueing" - media: v4l2-subdev.h: BIT() is not available in userspace - RDMA/vmw_pvrdma: Fix network_hdr_type reported in WC - iwlwifi: dbg: Don't touch the tlv data - kernel/io_uring: cancel io_uring before task works - io_uring: inline io_uring_attempt_task_drop() - io_uring: add warn_once for io_uring_flush() - io_uring: stop SQPOLL submit on creator's death - io_uring: fix null-deref in io_disable_sqo_submit - io_uring: do sqo disable on install_fd error - io_uring: fix false positive sqo warning on flush - io_uring: fix uring_flush in exit_files() warning - io_uring: fix skipping disabling sqo on exec - io_uring: dont kill fasync under completion_lock - io_uring: fix sleeping under spin in __io_clean_op - objtool: Don't fail on missing symbol table - mm/page_alloc: add a missing mm_page_alloc_zone_locked() tracepoint - mm: fix a race on nr_swap_pages - tools: Factor HOSTCC, HOSTLD, HOSTAR definitions - printk: fix buffer overflow potential for print_text() - printk: fix string termination for record_print_text() [ Salvatore Bonaccorso ] * Add set of PI futex fixes (CVE-2021-3347) - futex: Ensure the correct return value from futex_lock_pi() - futex: Replace pointless printk in fixup_owner() - futex: Provide and use pi_state_update_owner() - rtmutex: Remove unused argument from rt_mutex_proxy_unlock() - futex: Use pi_state_update_owner() in put_pi_state() - futex: Simplify fixup_pi_state_owner() - futex: Handle faults correctly for PI futexes * Bump ABI to 3 * xen: Fix XenStore initialisation for XS_LOCAL * [rt] Refresh "printk: refactor kmsg_dump_get_buffer()" * [rt] Refresh "locking/rtmutex: Handle the various new futex race conditions" * [rt] Refresh "locking/rtmutex: add sleeping lock implementation" * [rt] Refresh "crypto: limit more FPU-enabled sections" * Unset CRYPTO_USER_API_ENABLE_OBSOLETE [ Ricardo Ribalda ] * Enable USB_NET_AQC111 as module (Closes: #968760) [ Vincent Blut ] * [arm64] Enable DRM_VC4 again. (Closes: #968181, #968188) * [arm64] Enable DRM_VC4_HDMI_CEC. (Closes: #977438) -- Salvatore Bonaccorso Sat, 30 Jan 2021 21:38:57 +0100 linux (5.10.9-1) unstable; urgency=medium * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.6 - [arm64] rtc: pcf2127: move watchdog initialisation to a separate function - [arm64] rtc: pcf2127: only use watchdog when explicitly available - dt-bindings: rtc: add reset-source property - kdev_t: always inline major/minor helper functions - ALSA: hda/realtek - Modify Dell platform name - ALSA: hda/hdmi: Fix incorrect mutex unlock in silent_stream_disable() - [x86] drm/i915/tgl: Fix Combo PHY DPLL fractional divider for 38.4MHz ref clock - RDMA/core: remove use of dma_virt_ops - RDMA/siw,rxe: Make emulated devices virtual in the device tree - fuse: fix bad inode - perf: Break deadlock involving exec_update_mutex - rwsem: Implement down_read_killable_nested - rwsem: Implement down_read_interruptible - exec: Transform exec_update_mutex into a rw_semaphore https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.7 - i40e: Fix Error I40E_AQ_RC_EINVAL when removing VFs - iavf: fix double-release of rtnl_lock - net/sched: sch_taprio: ensure to reset/destroy all child qdiscs - [arm64,armhf] net: mvpp2: Add TCAM entry to drop flow control pause frames - [arm64,armhf] net: mvpp2: prs: fix PPPoE with ipv6 packet parse - atm: idt77252: call pci_disable_device() on error path - [arm64,armhf] net: mvpp2: Fix GoP port 3 Networking Complex Control configurations - [arm64,armhf] net: stmmac: dwmac-meson8b: ignore the second clock input - [arm64,armhf] net: ethernet: mvneta: Fix error handling in mvneta_probe - qede: fix offload for IPIP tunnel packets - virtio_net: Fix recursive call to cpus_read_lock() - [armhf] net/ncsi: Use real net-device for response handler - net-sysfs: take the rtnl lock when storing xps_cpus - net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc - net-sysfs: take the rtnl lock when storing xps_rxqs - net-sysfs: take the rtnl lock when accessing xps_rxqs_map and num_tc - [armhf] net: ethernet: ti: cpts: fix ethtool output when no ptp_clock registered - tun: fix return value when the number of iovs exceeds MAX_SKB_FRAGS - e1000e: Only run S0ix flows if shutdown succeeded - e1000e: bump up timeout to wait when ME un-configures ULP mode - Revert "e1000e: disable s0ix entry and exit flows for ME systems" - e1000e: Export S0ix flags to ethtool - bnxt_en: Check TQM rings for maximum supported value. - [arm64,armhf] net: mvpp2: fix pkt coalescing int-threshold configuration - bnxt_en: Fix AER recovery. - ipv4: Ignore ECN bits for fib lookups in fib_compute_spec_dst() - net: sched: prevent invalid Scell_log shift count - [arm64] net: hns: fix return value check in __lb_other_process() - erspan: fix version 1 check in gre_parse_header() - net: hdlc_ppp: Fix issues when mod_timer is called while timer is running - vhost_net: fix ubuf refcount incorrectly when sendmsg fails - r8169: work around power-saving bug on some chip versions - CDC-NCM: remove "connected" log message - net: usb: qmi_wwan: add Quectel EM160R-GL - block: add debugfs stanza for QUEUE_FLAG_NOWAIT - workqueue: Kick a worker based on the actual activation of delayed works - scsi: ufs: Fix wrong print message in dev_err() - scsi: ufs-pci: Fix restore from S4 for Intel controllers - scsi: ufs-pci: Ensure UFS device is in PowerDown mode for suspend-to-disk ->poweroff() - scsi: ufs-pci: Fix recovery from hibernate exit errors for Intel controllers - scsi: ufs-pci: Enable UFSHCD_CAP_RPM_AUTOSUSPEND for Intel controllers - scsi: block: Introduce BLK_MQ_REQ_PM - scsi: ide: Do not set the RQF_PREEMPT flag for sense requests - scsi: scsi_transport_spi: Set RQF_PM for domain validation commands - scsi: core: Only process PM requests if rpm_status != RPM_ACTIVE - lib/genalloc: fix the overflow when size is too big - scsi: ufs: Clear UAC for FFU and RPMB LUNs - Bluetooth: revert: hci_h5: close serdev device and free hu in h5_close - scsi: block: Remove RQF_PREEMPT and BLK_MQ_REQ_PREEMPT - scsi: block: Do not accept any requests while suspended - crypto: ecdh - avoid buffer overflow in ecdh_set_secret() - [powerpc*] Handle .text.{hot,unlikely}.* in linker script - [x86] Staging: comedi: Return -EFAULT if copy_to_user() fails - usb: gadget: enable super speed plus - USB: cdc-acm: blacklist another IR Droid device - USB: cdc-wdm: Fix use after free in service_outstanding_interrupt(). - [arm64,armhf] usb: dwc3: meson-g12a: disable clk on error handling path in probe - [arm64,armhf] usb: dwc3: gadget: Restart DWC3 gadget when enabling pullup - [arm64,armhf] usb: dwc3: gadget: Clear wait flag on dequeue - [arm64] usb: dwc3: ulpi: Use VStsDone to detect PHY regs access completion - [arm64] usb: dwc3: ulpi: Replace CPU-based busyloop with Protocol-based one - [arm64] usb: dwc3: ulpi: Fix USB2.0 HS/FS/LS PHY suspend regression - [arm64,armhf] usb: chipidea: ci_hdrc_imx: add missing put_device() call in usbmisc_get_init_data() - USB: xhci: fix U1/U2 handling for hardware with XHCI_INTEL_HOST quirk set - usb: usbip: vhci_hcd: protect shift size - usb: uas: Add PNY USB Portable SSD to unusual_uas - USB: serial: iuu_phoenix: fix DMA from stack - USB: serial: option: add LongSung M5710 module support - USB: serial: option: add Quectel EM160R-GL - USB: yurex: fix control-URB timeout handling - USB: usblp: fix DMA to stack - ALSA: usb-audio: Fix UBSAN warnings for MIDI jacks - USB: Gadget: dummy-hcd: Fix shift-out-of-bounds bug - usb: gadget: f_uac2: reset wMaxPacketSize - usb: gadget: function: printer: Fix a memory leak for interface descriptor - usb: gadget: u_ether: Fix MTU size mismatch with RX packet size - usb: gadget: Fix spinlock lockup on usb_function_deactivate - usb: gadget: configfs: Preserve function ordering after bind failure - usb: gadget: configfs: Fix use-after-free issue with udc_name - USB: serial: keyspan_pda: remove unused variable - mm: make wait_on_page_writeback() wait for multiple pending writebacks - [x86] mm: Fix leak of pmd ptlock - [x86] KVM: mmu: Use -1 to flag an undefined spte in get_mmio_spte() - [x86] KVM: mmu: Get root level from walkers when retrieving MMIO SPTE - kvm: check tlbs_dirty directly - [x86] KVM: mmu: Ensure TDP MMU roots are freed after yield - [x86] resctrl: Use an IPI instead of task_work_add() to update PQR_ASSOC MSR - [x86] resctrl: Don't move a task to the same resource group - blk-iocost: fix NULL iocg deref from racing against initialization - ALSA: hda/via: Fix runtime PM for Clevo W35xSS - ALSA: hda/conexant: add a new hda codec CX11970 - ALSA: hda/realtek - Fix speaker volume control on Lenovo C940 - ALSA: hda/realtek: Add mute LED quirk for more HP laptops - ALSA: hda/realtek: Enable mute and micmute LED on HP EliteBook 850 G7 - ALSA: hda/realtek: Add two "Intel Reference board" SSID in the ALC256. - [amd64] iommu/vt-d: Move intel_iommu info from struct intel_svm to struct intel_svm_dev - btrfs: qgroup: don't try to wait flushing if we're already holding a transaction - btrfs: send: fix wrong file path when there is an inode with a pending rmdir - Revert "device property: Keep secondary firmware node secondary by type" - dmabuf: fix use-after-free of dmabuf's file->f_inode - [x86] drm/i915: clear the shadow batch - [x86] drm/i915: clear the gpu reloc batch - bcache: check unsupported feature sets for bcache register - bcache: introduce BCH_FEATURE_INCOMPAT_LOG_LARGE_BUCKET_SIZE for large bucket - net/mlx5e: Fix SWP offsets when vlan inserted by driver - netfilter: x_tables: Update remaining dereference to RCU - netfilter: ipset: fix shift-out-of-bounds in htable_bits() - netfilter: xt_RATEEST: reject non-null terminated string from userspace - netfilter: nft_dynset: report EOPNOTSUPP on missing set feature - [x86] mtrr: Correct the range check before performing MTRR type lookups - xsk: Fix memory leak for failed bind - rtlwifi: rise completion at the last step of firmware callback - scsi: target: Fix XCOPY NAA identifier lookup (CVE-2020-28374) https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.8 - [powerpc] 32s: Fix RTAS machine check with VMAP stack - io_uring: synchronise IOPOLL on task_submit fail - io_uring: limit {io|sq}poll submit locking scope - io_uring: patch up IOPOLL overflow_flush sync - [arm64] RDMA/hns: Avoid filling sl in high 3 bits of vlan_id - [arm64,armhf] iommu/arm-smmu-qcom: Initialize SCTLR of the bypass context - [arm64,armhf] drm/panfrost: Don't corrupt the queue mutex on open/close - io_uring: Fix return value from alloc_fixed_file_ref_node - scsi: ufs: Fix -Wsometimes-uninitialized warning - btrfs: skip unnecessary searches for xattrs when logging an inode - btrfs: fix deadlock when cloning inline extent and low on free metadata space - btrfs: shrink delalloc pages instead of full inodes - [arm64] net: hns3: fix incorrect handling of sctp6 rss tuple - [arm64] net: hns3: fix the number of queues actually used by ARQ - [arm64] net: hns3: fix a phy loopback fail issue - [arm64,armhf] net: stmmac: dwmac-sun8i: Fix probe error handling - [arm64,armhf] net: stmmac: dwmac-sun8i: Balance internal PHY resource references - [arm64,armhf] net: stmmac: dwmac-sun8i: Balance internal PHY power - [arm64,armhf] net: stmmac: dwmac-sun8i: Balance syscon (de)initialization - net: vlan: avoid leaks on register_vlan_dev() failures - net: ipv6: fib: flush exceptions when purging route - net: fix pmtu check in nopmtudisc mode - net: ip: always refragment ip defragmented packets - nexthop: Fix off-by-one error in error path - nexthop: Unlink nexthop group entry in error path - nexthop: Bounce NHA_GATEWAY in FDB nexthop groups - [s390x] qeth: fix deadlock during recovery - [s390x] qeth: fix locking for discipline setup / removal - [s390x] qeth: fix L2 header access in qeth_l3_osa_features_check() - net/mlx5: Use port_num 1 instead of 0 when delete a RoCE address - net/mlx5e: ethtool, Fix restriction of autoneg with 56G - net/mlx5e: In skb build skip setting mark in switchdev mode - net/mlx5: Check if lag is supported before creating one - scsi: lpfc: Fix variable 'vport' set but not used in lpfc_sli4_abts_err_handler() - HID: wacom: Fix memory leakage caused by kfifo_alloc - fanotify: Fix sys_fanotify_mark() on native x86-32 - [armhf] OMAP2+: omap_device: fix idling of devices during probe - [x86] cpufreq: powernow-k8: pass policy rather than use cpufreq_cpu_get() - [armhf] spi: stm32: FIFO threshold level - fix align packet size - i2c: i801: Fix the i2c-mux gpiod_lookup_table not being properly terminated - bcache: set bcache device into read-only mode for BCH_FEATURE_INCOMPAT_OBSO_LARGE_BUCKET - [amd64] iommu/vt-d: Fix misuse of ALIGN in qi_flush_piotlb() - [amd64] iommu/intel: Fix memleak in intel_irq_remapping_alloc - nvme-tcp: Fix possible race of io_work and direct send - net/mlx5e: Fix memleak in mlx5e_create_l2_table_groups - net/mlx5e: Fix two double free cases - regmap: debugfs: Fix a memory leak when calling regmap_attach_dev - [arm64,armhf] net: mvpp2: disable force link UP during port init procedure - [x86] drm/i915/dp: Track pm_qos per connector - [arm64,armhf] net: mvneta: fix error message when MTU too large for XDP - [arm64] KVM: Don't access PMCR_EL0 when no PMU is available - xsk: Fix race in SKB mode transmit with shared cq - xsk: Rollback reservation at NETDEV_TX_BUSY - can: isotp: isotp_getname(): fix kernel information leak - block: fix use-after-free in disk_part_iter_next - net: drop bogus skb with CHECKSUM_PARTIAL and offset beyond end of trimmed packet - regmap: debugfs: Fix a reversed if statement in regmap_debugfs_init() - [arm64,armhf] drm/panfrost: Remove unused variables in panfrost_job_close() - tools headers UAPI: Sync linux/fscrypt.h with the kernel sources https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.9 - btrfs: reloc: fix wrong file extent type check to avoid false ENOENT - btrfs: prevent NULL pointer dereference in extent_io_tree_panic - ALSA: hda/realtek: fix right sounds and mute/micmute LEDs for HP machines - ALSA: doc: Fix reference to mixart.rst - [amd64] ASoC: AMD Renoir - add DMI entry for Lenovo ThinkPad X395 - ASoC: dapm: remove widget from dirty list on free - [x86] hyperv: check cpu mask after interrupt has been disabled - drm/amdgpu: add green_sardine device id (v2) - drm/amdgpu: fix DRM_INFO flood if display core is not supported (bug 210921) - drm/amdgpu: add new device id for Renior - [x86] drm/i915: Allow the sysadmin to override security mitigations - [x86] drm/i915/gt: Limit VFE threads based on GT - [x86] drm/i915/backlight: fix CPU mode backlight takeover on LPT - [armhf] drm/bridge: sii902x: Refactor init code into separate function - dt-bindings: display: sii902x: Add supply bindings - [armhf] drm/bridge: sii902x: Enable I/O and core VCC supplies if present - tracing/kprobes: Do the notrace functions check without kprobes on ftrace - tools/bootconfig: Add tracing_on support to helper scripts - ext4: use IS_ERR instead of IS_ERR_OR_NULL and set inode null when IS_ERR - ext4: fix wrong list_splice in ext4_fc_cleanup - ext4: fix bug for rename with RENAME_WHITEOUT - cifs: check pointer before freeing - cifs: fix interrupted close commands - [riscv64] Drop a duplicated PAGE_KERNEL_EXEC - [riscv64] return -ENOSYS for syscall -1 - [riscv64] Fixup CONFIG_GENERIC_TIME_VSYSCALL - [mips*] fix Section mismatch in reference - [mips*] lib: uncached: fix non-standard usage of variable 'sp' - [mips*] boot: Fix unaligned access with CONFIG_MIPS_RAW_APPENDED_DTB - [mips*] Fix malformed NT_FILE and NT_SIGINFO in 32bit coredumps - [mips*] relocatable: fix possible boot hangup with KASLR enabled - RDMA/ocrdma: Fix use after free in ocrdma_dealloc_ucontext_pd() - ACPI: scan: Harden acpi_device_add() against device ID overflows - xen/privcmd: allow fetching resource sizes - mm/vmalloc.c: fix potential memory leak - mm/hugetlb: fix potential missing huge page size info - mm/process_vm_access.c: include compat.h - dm raid: fix discard limits for raid1 - dm snapshot: flush merged data before committing metadata - dm integrity: fix flush with external metadata device - dm integrity: fix the maximum number of arguments - dm crypt: use GFP_ATOMIC when allocating crypto requests from softirq - dm crypt: do not wait for backlogged crypto request completion in softirq - dm crypt: do not call bio_endio() from the dm-crypt tasklet - dm crypt: defer decryption to a tasklet if interrupts disabled - r8152: Add Lenovo Powered USB-C Travel Hub - btrfs: tree-checker: check if chunk item end overflows - ext4: don't leak old mountpoint samples - io_uring: don't take files/mm for a dead task - io_uring: drop mm and files after task_work_run - ath11k: fix crash caused by NULL rx_channel - netfilter: ipset: fixes possible oops in mtype_resize - ath11k: qmi: try to allocate a big block of DMA memory first - btrfs: fix async discard stall - btrfs: merge critical sections of discard lock in workfn - btrfs: fix transaction leak and crash after RO remount caused by qgroup rescan - ethernet: ucc_geth: fix definition and size of ucc_geth_tx_global_pram - [arm64,armhf] hwmon: (pwm-fan) Ensure that calculation doesn't discard big period values - spi: fix the divide by 0 error when calculating xfer waiting time - io_uring: drop file refs after task cancel - bfq: Fix computation of shallow depth - misdn: dsp: select CONFIG_BITREVERSE - net: ethernet: fs_enet: Add missing MODULE_LICENSE - nvme-pci: mark Samsung PM1725a as IGNORE_DEV_SUBNQN - nvme: avoid possible double fetch in handling CQE - nvmet-rdma: Fix list_del corruption on queue establishment failure - drm/amdgpu: fix a GPU hang issue when remove device - drm/amdgpu: fix potential memory leak during navi12 deinitialization - [amd64] iommu/vt-d: Fix lockdep splat in sva bind()/unbind() - ACPI: scan: add stub acpi_create_platform_device() for !CONFIG_ACPI - [arm64] drm/msm: Call msm_init_vram before binding the gpu - poll: fix performance regression due to out-of-line __put_user() - rcu-tasks: Move RCU-tasks initialization to before early_initcall() - bpf: Simplify task_file_seq_get_next() - bpf: Save correct stopping point in file seq iteration - nvme-fc: avoid calling _nvme_fc_abort_outstanding_ios from interrupt context - [amd64] iommu/vt-d: Update domain geometry in iommu_ops.at(de)tach_dev - net/mlx5: Fix passing zero to 'PTR_ERR' - net/mlx5: E-Switch, fix changing vf VLANID - blk-mq-debugfs: Add decode for BLK_MQ_F_TAG_HCTX_SHARED - mm: fix clear_refs_write locking - mm: don't play games with pinned pages in clear_page_refs - mm: don't put pinned pages into the swap cache - perf intel-pt: Fix 'CPU too large' error - dump_common_audit_data(): fix racy accesses to ->d_name - [x86] ASoC: Intel: fix error code cnl_set_dsp_D0() - nvmet-rdma: Fix NULL deref when setting pi_enable and traddr INADDR_ANY - nvme: don't intialize hwmon for discovery controllers - nvme-tcp: fix possible data corruption with bio merges - nvme-tcp: Fix warning with CONFIG_DEBUG_PREEMPT - NFS4: Fix use-after-free in trace_event_raw_event_nfs4_set_lock - pNFS: We want return-on-close to complete when evicting the inode - pNFS: Mark layout for return if return-on-close was not sent - pNFS: Stricter ordering of layoutget and layoutreturn - NFS: Adjust fs_context error logging - NFS/pNFS: Don't call pnfs_free_bucket_lseg() before removing the request - NFS/pNFS: Don't leak DS commits in pnfs_generic_retry_commit() - NFS/pNFS: Fix a leak of the layout 'plh_outstanding' counter - NFS: nfs_delegation_find_inode_server must first reference the superblock - NFS: nfs_igrab_and_active must first reference the superblock - scsi: ufs: Fix possible power drain during system suspend - ext4: fix superblock checksum failure when setting password salt - RDMA/restrack: Don't treat as an error allocation ID wrapping - [amd64] RDMA/usnic: Fix memleak in find_free_vf_and_create_qp_grp - bnxt_en: Improve stats context resource accounting with RDMA driver loaded. - RDMA/mlx5: Fix wrong free of blue flame register on error - IB/mlx5: Fix error unwinding when set_has_smi_cap fails - umount(2): move the flag validity checks first - [x86] drm/i915/dsi: Use unconditional msleep for the panel_on_delay when there is no reset-deassert MIPI-sequence - [x86] drm/i915/icl: Fix initing the DSI DSC power refcount during HW readout - [x86] drm/i915/gt: Restore clear-residual mitigations for Ivybridge, Baytrail - mm, slub: consider rest of partial list if acquire_slab() fails - [riscv64] Trace irq on only interrupt is enabled - [amd64] iommu/vt-d: Fix unaligned addresses for intel_flush_svm_range_dev() - net: sunrpc: interpret the return value of kstrtou32 correctly - dm: eliminate potential source of excessive kernel log noise - ALSA: fireface: Fix integer overflow in transmit_midi_msg() - ALSA: firewire-tascam: Fix integer overflow in midi_port_work() - netfilter: conntrack: fix reading nf_conntrack_buckets - netfilter: nf_nat: Fix memleak in nf_nat_init [ Aurelien Jarno ] * Ignore ABI change for dfltcc_* symbols. * [riscv64] PCI: Enable PCI_HOST_GENERIC. [ Salvatore Bonaccorso ] * Bump ABI to 2 * [rt] Update to 5.10.8-rt24 [ Bastian Blank ] * [arm64] Enable support for Marvell EBU SoC. * Enable remaining NET_ACT_*. * Enable ACPI_HMAT, EFI_SOFT_RESERVE. * Enable remaining THERMAL_GOV_*, ENERGY_MODEL. * Set SCTP_DEFAULT_COOKIE_HMAC_SHA1. * [x86] Enable SERIAL_8250_LPSS. (closes: #973985) * Enable CRYPTO_DEV_VIRTIO. * Enable DRM_AMD_DC_*. * [arm] Enable CRYPTO_NHPOLY1305_NEON. (closes: #980214) * [arm64] Enable MFD_AXP20X_I2C. (closes: #980114) * [amd64] Enable SENSORS_AMD_ENERGY. (closes: #970699) * [cloud] Enable SUSPEND. (closes: #964845) * [armhf] Enable GPIO_PCA953X_IRQ. (closes: #972221) * [arm] Enable DRM_VC4, DRM_VC4_HDMI_CEC. (closes: #956951) * [x86] Enable STMMAC_ETH, DWMAC_INTEL. (closes: #980180) -- Salvatore Bonaccorso Wed, 20 Jan 2021 17:40:43 +0100 linux (5.10.5-1) unstable; urgency=medium * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.5 - net/sched: sch_taprio: reset child qdiscs before freeing them - ethtool: fix error paths in ethnl_set_channels() - ethtool: fix string set id check - md/raid10: initialize r10_bio->read_slot before use. - io_uring: close a small race gap for files cancel - jffs2: Allow setting rp_size to zero during remounting - jffs2: Fix NULL pointer dereference in rp_size fs option parsing - opp: fix memory leak in _allocate_opp_table - opp: Call the missing clk_put() on error - scsi: block: Fix a race in the runtime power management code - mm/hugetlb: fix deadlock in hugetlb_cow error path - mm: memmap defer init doesn't work as expected - [s390x] lib/zlib: fix inflating zlib streams on s390 - io_uring: don't assume mm is constant across submits - io_uring: use bottom half safe lock for fixed file data - io_uring: add a helper for setting a ref node - io_uring: fix io_sqe_files_unregister() hangs - uapi: move constants from to - tools headers UAPI: Sync linux/const.h with the kernel headers - cgroup: Fix memory leak when parsing multiple source parameters - [s390x] zlib: move EXPORT_SYMBOL() and MODULE_LICENSE() out of dfltcc_syms.c - Bluetooth: hci_h5: close serdev device and free hu in h5_close - fbcon: Disable accelerated scrolling - reiserfs: add check for an invalid ih_entry_count - [x86] misc: vmw_vmci: fix kernel info-leak by initializing dbells in vmci_ctx_get_chkpt_doorbells() - media: gp8psk: initialize stats at power control logic - f2fs: fix shift-out-of-bounds in sanity_check_raw_super() - ALSA: seq: Use bool for snd_seq_queue internal flags - ALSA: rawmidi: Access runtime->avail always in spinlock - bfs: don't use WARNING: string when it's just info. - ext4: check for invalid block size early when mounting a file system - fcntl: Fix potential deadlock in send_sig{io, urg}() - io_uring: check kthread stopped flag when sq thread is unparked - [arm64,armhf] rtc: sun6i: Fix memleak in sun6i_rtc_clk_init - module: set MODULE_STATE_GOING state when a module fails to load - quota: Don't overflow quota file offsets - [arm64,armhf] rtc: pl031: fix resource leak in pl031_probe - i3c master: fix missing destroy_workqueue() on error in i3c_master_register - NFSv4: Fix a pNFS layout related use-after-free race when freeing the inode - f2fs: avoid race condition for shrinker count - f2fs: fix race of pending_pages in decompression - module: delay kobject uevent until after module init call - [powerpc*] 64: irq replay remove decrementer overflow check - fs/namespace.c: WARN if mnt_count has become negative - ceph: fix inode refcount leak when ceph_fill_inode on non-I_NEW inode fails - tick/sched: Remove bogus boot "safety" check - [s390x] always clear kernel stack backchain before calling functions - io_uring: remove racy overflow list fast checks - ALSA: pcm: Clear the full allocated memory at hw_params - dm verity: skip verity work if I/O error when system is shutting down - ext4: avoid s_mb_prefetch to be zero in individual scenarios - device-dax: Fix range release [ Luca Boccassi ] * [amd64,arm64] Generate BTF debug info: (partially closes: #973870) - Enable DEBUG_INFO_BTF. - Build-Depend on dwarves >= 1.16~. [ Aurelien Jarno ] * usbip: depend on usb.ids instead of usbutils. * [mips*] Fix build with binutils configured with --enable-mips-fix-loongson3-llsc=yes. [ Salvatore Bonaccorso ] * Bluetooth: Fix attempting to set RPA timeout when unsupported (Closes: #972968) * net: cdc_ncm: correct overhead in delayed_ndp_size (Closes: #970736) * mwifiex: Fix possible buffer overflows in mwifiex_cmd_802_11_ad_hoc_start (CVE-2020-36158) * [rt] Update to 5.10.4-rt22 * X.509: Fix crash caused by NULL pointer (Closes: #979496) * Revert "drm/amd/display: Fix memory leaks in S3 resume" -- Salvatore Bonaccorso Sat, 09 Jan 2021 21:25:11 +0100 linux (5.10.4-1) unstable; urgency=medium * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.3 - net: ipconfig: Avoid spurious blank lines in boot log - [x86] split-lock: Avoid returning with interrupts enabled - exfat: Avoid allocating upcase table using kcalloc() - [arm64] soc/tegra: fuse: Fix index bug in get_process_id - USB: serial: option: add interface-number sanity check to flag handling - USB: gadget: f_acm: add support for SuperSpeed Plus - USB: gadget: f_midi: setup SuperSpeed Plus descriptors - usb: gadget: f_fs: Re-use SS descriptors for SuperSpeedPlus - USB: gadget: f_rndis: fix bitrate for SuperSpeed and above - [arm64,armhf] usb: chipidea: ci_hdrc_imx: Pass DISABLE_DEVICE_STREAMING flag to imx6ul - [armhf] dts: exynos: fix roles of USB 3.0 ports on Odroid XU - [armhf] dts: exynos: fix USB 3.0 pins supply being turned off on Odroid XU - f2fs: fix to seek incorrect data offset in inline data file - f2fs: init dirty_secmap incorrectly - scsi: megaraid_sas: Check user-provided offsets - [arm64,x86] HID: i2c-hid: add Vero K147 to descriptor override - serial_core: Check for port state when tty is in error state - fscrypt: remove kernel-internal constants from UAPI header - fscrypt: add fscrypt_is_nokey_name() - ubifs: prevent creating duplicate encrypted filenames - ext4: prevent creating duplicate encrypted filenames - f2fs: prevent creating duplicate encrypted filenames - Bluetooth: Fix slab-out-of-bounds read in hci_le_direct_adv_report_evt() - quota: Sanity-check quota file headers on load - fs: quota: fix array-index-out-of-bounds bug by passing correct argument to vfs_cleanup_quota_inode() - media: msi2500: assign SPI bus number dynamically - crypto: af_alg - avoid undefined behavior accessing salg_name - nl80211: validate key indexes for cfg80211_registered_device - md: fix a warning caused by a race between concurrent md_ioctl()s https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.4 - [x86] hwmon: (k10temp) Remove support for displaying voltage and current on Zen CPUs - [x86] drm/gma500: fix double free of gma_connector - [arm64] rtc: pcf2127: fix pcf2127_nvmem_read/write() returns - selinux: fix error initialization in inode_doinit_with_dentry() - [armhf] dts: aspeed: s2600wf: Fix VGA memory region location - RDMA/core: Fix error return in _ib_modify_qp() - RDMA/rxe: Compute PSN windows correctly - [x86] /mm/ident_map: Check for errors from ident_pud_init() - [armel,armhf] p2v: fix handling of LPAE translation in BE mode - [x86] apic: Fix x2apic enablement without interrupt remapping - sched/deadline: Fix sched_dl_global_validate() - sched: Reenable interrupts in do_sched_yield() - [arm64] crypto: inside-secure - Fix sizeof() mismatch - [arm64] ASoC: sun4i-i2s: Fix lrck_period computation for I2S justified mode - drm/msm: Add missing stub definition - [armhf] dts: aspeed: tiogapass: Remove vuart - [powerpc*] 64: Set up a kernel stack for secondaries before cpu_restore() - f2fs: call f2fs_get_meta_page_retry for nat page - RDMA/mlx5: Fix corruption of reg_pages in mlx5_ib_rereg_user_mr() - [arm64] drm/msm/dp: DisplayPort PHY compliance tests fixup - [arm64] drm/msm/dsi_pll_7nm: restore VCO rate during restore_state - [arm64] drm/msm/dsi_pll_10nm: restore VCO rate during restore_state - [arm64] drm/msm/dpu: fix clock scaling on non-sc7180 board - spi: spi-mem: fix reference leak in spi_mem_access_start - scsi: aacraid: Improve compat_ioctl handlers - ASoC: pcm: DRAIN support reactivation - [armhf] drm/bridge: tpd12s015: Fix irq registering in tpd12s015_probe - [arm64] crypto: arm64/poly1305-neon - reorder PAC authentication with SP update - [arm64] crypto: caam - fix printing on xts fallback allocation error path - selinux: fix inode_doinit_with_dentry() LABEL_INVALID error handling - nl80211/cfg80211: fix potential infinite loop - [armhf] spi: stm32: fix reference leak in stm32_spi_resume - [x86] mce: Correct the detection of invalid notifier priorities - drm/edid: Fix uninitialized variable in drm_cvt_modes() - ath11k: Initialize complete alpha2 for regulatory change - ath11k: Fix number of rules in filtered ETSI regdomain - ath11k: fix wmi init configuration - brcmfmac: Fix memory leak for unpaired brcmf_{alloc/free} - [arm64,armhf] drm/panel: simple: Add flags to boe_nv133fhm_n61 - Bluetooth: Fix null pointer dereference in hci_event_packet() - Bluetooth: Fix: LL PRivacy BLE device fails to connect - Bluetooth: hci_h5: fix memory leak in h5_close - [armhf] spi: stm32-qspi: fix reference leak in stm32 qspi operations - [armhf] spi: spi-ti-qspi: fix reference leak in ti_qspi_setup - [arm64] spi: tegra20-slink: fix reference leak in slink ops of tegra20 - [arm64,armhf] spi: tegra20-sflash: fix reference leak in tegra_sflash_resume - [arm64,armhf] spi: tegra114: fix reference leak in tegra spi ops - [armhf] spi: imx: fix reference leak in two imx operations - [arm64] ASoC: qcom: common: Fix refcounting in qcom_snd_parse_of() - ath11k: Handle errors if peer creation fails - mwifiex: fix mwifiex_shutdown_sw() causing sw reset failure - [arm64] drm/msm/a6xx: Clear shadow on suspend - [arm64] drm/msm/a5xx: Clear shadow on suspend - [arm64] drm/msm/dp: return correct connection status after suspend - [arm64] drm/msm/dp: skip checking LINK_STATUS_UPDATED bit - [arm64] drm/msm/dp: do not notify audio subsystem if sink doesn't support audio - virtiofs fix leak in setup - RDMa/mthca: Work around -Wenum-conversion warning - [armhf] soc: ti: omap-prm: Do not check rstst bit on deassert if already deasserted - [x86] crypto: qat - fix status check in qat_hal_put_rel_rd_xfer() - drm/udl: Fix missing error code in udl_handle_damage() - [x86] media: tm6000: Fix sizeof() mismatches - media: v4l2-fwnode: Return -EINVAL for invalid bus-type - media: v4l2-fwnode: v4l2_fwnode_endpoint_parse caller must init vep argument - [arm64,armhf] media: cedrus: fix reference leak in cedrus_start_streaming - [arm64] media: venus: core: change clk enable and disable order in resume and suspend - [arm64] media: venus: core: vote for video-mem path - [arm64] media: venus: core: vote with average bandwidth and peak bandwidth as zero - RDMA/cma: Add missing error handling of listen_id - scsi: core: Fix VPD LUN ID designator priorities - [arm64] media: venus: put dummy vote on video-mem path after last session release - media: solo6x10: fix missing snd_card_free in error handling case - [arm64,armhf] mmc: sdhci: tegra: fix wrong unit with busy_timeout - [armhf] drm/omap: dmm_tiler: fix return error code in omap_dmm_probe() - [arm64] drm/meson: Free RDMA resources after tearing down DRM - [arm64] drm/meson: Unbind all connectors on module removal - [arm64] drm/meson: dw-hdmi: Register a callback to disable the regulator - [arm64] drm/meson: dw-hdmi: Ensure that clocks are enabled before touching the TOP registers - [amd64] iommu/vt-d: include conditionally on CONFIG_INTEL_IOMMU_SVM - Input: ads7846 - fix race that causes missing releases - Input: ads7846 - fix integer overflow on Rt calculation - Input: ads7846 - fix unaligned access on 7845 - bus: mhi: core: Remove double locking from mhi_driver_remove() - bus: mhi: core: Fix null pointer access when parsing MHI configuration - [powerpc*] Avoid broken GCC __attribute__((optimize)) - [powerpc*] feature: Fix CPU_FTRS_ALWAYS by removing CPU_FTRS_GENERIC_32 - [armhf] dts: tacoma: Fix node vs reg mismatch for flash memory - Revert "powerpc/pseries/hotplug-cpu: Remove double free in error path" - [powerpc*] powernv/sriov: fix unsigned int win compared to less than zero - [x86] EDAC/mce_amd: Use struct cpuinfo_x86.cpu_die_id for AMD NodeId - scsi: ufs: Avoid to call REQ_CLKS_OFF to CLKS_OFF - scsi: ufs: Fix clkgating on/off - rcu: Allow rcu_irq_enter_check_tick() from NMI - rcu,ftrace: Fix ftrace recursion - rcu/tree: Defer kvfree_rcu() allocation to a clean context - spi: fix resource leak for drivers without .remove callback - [arm64] drm/meson: dw-hdmi: Disable clocks on driver teardown - [arm64] drm/meson: dw-hdmi: Enable the iahb clock early enough - PCI: Disable MSI for Pericom PCIe-USB adapter - [arm64] PCI: brcmstb: Initialize "tmp" before use - [arm64] dts: qcom: sm8250: correct compatible for sm8250-mtp - [armhf] Input: omap4-keypad - fix runtime PM error handling - ath11k: Fix the rx_filter flag setting for peer rssi stats - RDMA/cxgb4: Validate the number of CQEs - [arm64] pinctrl: sunxi: fix irq bank map for the Allwinner A100 pin controller - memstick: fix a double-free bug in memstick_check - brcmfmac: fix error return code in brcmf_cfg80211_connect() - orinoco: Move context allocation after processing the skb - rsi: fix error return code in rsi_reset_card() - [arm64] dmaengine: mv_xor_v2: Fix error return code in mv_xor_v2_probe() - [armel] leds: netxbig: add missing put_device() call in netxbig_leds_get_of_pdata() - RDMA/cma: Fix deadlock on &lock in rdma_cma_listen_on_all() error unwind - media: siano: fix memory leak of debugfs members in smsdvb_hotplug - [x86] platform/x86: mlx-platform: Remove PSU EEPROM from default platform configuration - [x86] platform/x86: mlx-platform: Remove PSU EEPROM from MSN274x platform configuration - [arm64] RDMA/hns: Only record vlan info for HIP08 - [arm64] RDMA/hns: Fix missing fields in address vector - [arm64] RDMA/hns: Avoid setting loopback indicator when smac is same as dmac - RDMA/core: Track device memory MRs - [armhf] HSI: omap_ssi: Don't jump to free ID in ssi_add_controller() - [arm64] dts: armada-3720-turris-mox: update ethernet-phy handle name - [arm64] dts: rockchip: Set dr_mode to "host" for OTG on rk3328-roc-cc - [x86] power: supply: max17042_battery: Fix current_{avg,now} hiding with no current sense - [x86] power: supply: bq24190_charger: fix reference leak - genirq/irqdomain: Don't try to free an interrupt that has no mapping - [arm64] dts: freescale: sl28: combine SPI MTD partitions - [arm64,armhf] phy: tegra: xusb: Fix usb_phy device driver field - [arm64] dts: qcom: c630: Polish i2c-hid devices - [arm64] dts: qcom: c630: Fix pinctrl pins properties - PCI: Bounds-check command-line resource alignment requests - PCI: Fix overflow in command-line resource alignment requests - [arm64] dts: meson: fix spi-max-frequency on Khadas VIM2 - [arm64] soc: amlogic: canvas: add missing put_device() call in meson_canvas_get() - [arm64] scsi: hisi_sas: Fix up probe error handling for v3 hw - scsi: pm80xx: Do not sleep in atomic context - [arm64] spi: spi-fsl-dspi: Use max_native_cs instead of num_chipselect to set SPI_MCR - [arm64] RDMA/hns: Fix 0-length sge calculation error - [arm64] RDMA/hns: Bugfix for calculation of extended sge - soundwire: master: use pm_runtime_set_active() on add - [x86] platform/x86: dell-smbios-base: Fix error return code in dell_smbios_init - [x86] ASoC: Intel: Boards: tgl_max98373: update TDM slot_width - ath11k: Don't cast ath11k_skb_cb to ieee80211_tx_info.control - ath11k: Reset ath11k_skb_cb before setting new flags - ath11k: Fix an error handling path - ath10k: Fix the parsing error in service available event - ath10k: Fix an error handling path - ath10k: Release some resources in an error handling path - SUNRPC: rpc_wake_up() should wake up tasks in the correct order - NFSv4.2: condition READDIR's mask for security label based on LSM state - SUNRPC: xprt_load_transport() needs to support the netid "rdma6" - NFSv4: Fix the alignment of page data in the getdeviceinfo reply - net: sunrpc: Fix 'snprintf' return value check in 'do_xprt_debugfs' - lockd: don't use interval-based rebinding over TCP - NFS: switch nfsiod to be an UNBOUND workqueue. - vfio-pci: Use io_remap_pfn_range() for PCI IO memory - f2fs: fix double free of unicode map - media: tvp5150: Fix wrong return value of tvp5150_parse_dt() - media: saa7146: fix array overflow in vidioc_s_audio() - [powerpc*] perf: Fix crash with is_sier_available when pmu is not set - [powerpc*] 64: Fix an EMIT_BUG_ENTRY in head_64.S - [powerpc*] xmon: Fix build failure for 8xx - [powerpc*] perf: Fix to update radix_scope_qual in power10 - [powerpc*] perf: Update the PMU group constraints for l2l3 events in power10 - [powerpc*] perf: Fix the PMU group constraints for threshold events in power10 - [armel,armhf] clocksource/drivers/orion: Add missing clk_disable_unprepare() on error path - [arm64] mte: fix prctl(PR_GET_TAGGED_ADDR_CTRL) if TCF0=NONE - bpf: Fix bpf_put_raw_tracepoint()'s use of __module_address() - [arm64,armhf] soc: rockchip: io-domain: Fix error return code in rockchip_iodomain_probe() - memstick: r592: Fix error return in r592_probe() - [mips64el] Don't round up kernel sections size for memblock_add() - mt76: dma: fix possible deadlock running mt76_dma_cleanup - net/mlx5: Properly convey driver version to firmware - mt76: fix memory leak if device probing fails - dm ioctl: fix error return code in target_message - [arm64] drm/msm: a5xx: Make preemption reset case reentrant - [arm64,armhf] clocksource/drivers/arm_arch_timer: Use stable count reader in erratum sne - [arm64,armhf] clocksource/drivers/arm_arch_timer: Correct fault programming of CNTKCTL_EL1.EVNTI - [m68k] macintosh/adb-iop: Always wait for reply message from IOP - [m68k] macintosh/adb-iop: Send correct poll command - Bluetooth: btusb: Add the missed release_firmware() in btusb_mtk_setup_firmware() - Bluetooth: btmtksdio: Add the missed release_firmware() in mtk_setup_firmware() - Bluetooth: sco: Fix crash when using BT_SNDMTU/BT_RCVMTU option - Bluetooth: btusb: Fix detection of some fake CSR controllers with a bcdDevice val of 0x0134 - [x86] platform/x86: intel-vbtn: Fix SW_TABLET_MODE always reporting 1 on some HP x360 models - adm8211: fix error return code in adm8211_probe() - mtd: spi-nor: sst: fix BPn bits for the SST25VF064C - mtd: spi-nor: ignore errors in spi_nor_unlock_all() - mtd: spi-nor: atmel: remove global protection flag - mtd: spi-nor: atmel: fix unlock_all() for AT25FS010/040 - [arm64] dts: meson: fix PHY deassert timing requirements - [armhf] dts: meson: fix PHY deassert timing requirements - [arm64] dts: meson: g12a: x96-max: fix PHY deassert timing requirements - [arm64] clk: fsl-sai: fix memory leak - scsi: qedi: Fix missing destroy_workqueue() on error in __qedi_probe - scsi: pm80xx: Fix error return in pm8001_pci_probe() - scsi: iscsi: Fix inappropriate use of put_device() - seq_buf: Avoid type mismatch for seq_buf_init - [x86] scsi: fnic: Fix error return code in fnic_probe() - [x86] platform/x86: mlx-platform: Fix item counter assignment for MSN2700, MSN24xx systems - [x86] platform/x86: mlx-platform: Fix item counter assignment for MSN2700/ComEx system - [armel,armhf] 9030/1: entry: omit FP emulation for UND exceptions taken in kernel mode - [powerpc*] pseries/hibernation: drop pseries_suspend_begin() from suspend ops - [powerpc*] pseries/hibernation: remove redundant cacheinfo update - [powerpc*] powermac: Fix low_sleep_handler with CONFIG_VMAP_STACK - [x86] ASoC: amd: change clk_get() to devm_clk_get() and add missed checks - [x86] ASoC: max98390: Fix error codes in max98390_dsm_init() - [powerpc*] mm: sanity_check_fault() should work for all, not only BOOK3S - [armhf] usb: ehci-omap: Fix PM disable depth umbalance in ehci_hcd_omap_probe - speakup: fix uninitialized flush_lock - nfsd: Fix message level for normal termination - NFSD: Fix 5 seconds delay when doing inter server copy - nfs_common: need lock during iterate through the list - [x86] kprobes: Restore BTF if the single-stepping is cancelled - scsi: qla2xxx: Fix FW initialization error on big endian machines - scsi: qla2xxx: Fix N2N and NVMe connect retry failure - [arm64,armhf] platform/chrome: cros_ec_spi: Don't overwrite spi::mode - [arm64] bus: fsl-mc: add back accidentally dropped error check - [arm64] bus: fsl-mc: fix error return code in fsl_mc_object_allocate() - [armhf] fsi: Aspeed: Add mutex to protect HW access - [s390x] cio: fix use-after-free in ccw_device_destroy_console - iwlwifi: dbg-tlv: fix old length in is_trig_data_contained() - iwlwifi: mvm: hook up missing RX handlers - erofs: avoid using generic_block_bmap - [powerpc*] sstep: Emulate prefixed instructions only when CPU_FTR_ARCH_31 is set - [powerpc*] sstep: Cover new VSX instructions under CONFIG_VSX - ALSA: hda/hdmi: fix silent stream for first playback to DP - RDMA/core: Do not indicate device ready when device enablement fails - RDMA/uverbs: Fix incorrect variable type - [arm64,armhf] clk: tegra: Fix duplicated SE clock entry - [armhf] mtd: rawnand: gpmi: fix reference count leak in gpmi ops - [armhf] mtd: rawnand: gpmi: Fix the random DMA timeout issue - samples/bpf: Fix possible hang in xdpsock with multiple threads - fs: Handle I_DONTCACHE in iput_final() instead of generic_drop_inode() - mac80211: don't set set TDLS STA bandwidth wider than possible - mac80211: fix a mistake check for rx_stats update - [arm64] irqchip/alpine-msi: Fix freeing of interrupts on allocation error path - [arm64] RDMA/hns: Limit the length of data copied between kernel and userspace - [arm64] RDMA/hns: Normalization the judgment of some features - [arm64] RDMA/hns: Do shift on traffic class when using RoCEv2 - gpiolib: irq hooks: fix recursion in gpiochip_irq_unmask - ath11k: Fix incorrect tlvs in scan start command - watchdog: Fix potential dereferencing of null pointer - sunrpc: fix xs_read_xdr_buf for partial pages receive - RDMA/mlx5: Fix MR cache memory leak - RDMA/cma: Don't overwrite sgid_attr after device is released - [powerpc*] perf: Fix Threshold Event Counter Multiplier width for P10 - [powerpc*] ps3: use dma_mapping_error() - mm/gup: reorganize internal_get_user_pages_fast() - mm/gup: prevent gup_fast from racing with COW during fork - mm/gup: combine put_compound_head() and unpin_user_page() - mm: memcg/slab: fix return of child memcg objcg for root memcg - mm: memcg/slab: fix use after free in obj_cgroup_charge - mm/rmap: always do TTU_IGNORE_ACCESS - [sparc64] fix handling of page table constructor failure - mm/vmalloc: Fix unlock order in s_stop() - mm/vmalloc.c: fix kasan shadow poisoning size - mm,memory_failure: always pin the page in madvise_inject_error - hugetlb: fix an error code in hugetlb_reserve_pages() - mm: don't wake kswapd prematurely when watermark boosting is disabled - proc: fix lookup in /proc/net subdirectories after setns(2) - lan743x: fix rx_napi_poll/interrupt ping-pong - ice, xsk: clear the status bits for the next_to_use descriptor - i40e, xsk: clear the status bits for the next_to_use descriptor - [arm64] dpaa2-eth: fix the size of the mapped SGT buffer - [arm64] net: bcmgenet: Fix a resource leak in an error handling path in the probe functin - [armhf] net: allwinner: Fix some resources leak in the error handling path of the probe and in the remove function - NFS/pNFS: Fix a typo in ff_layout_resend_pnfs_read() - devlink: use _BITUL() macro instead of BIT() in the UAPI header - libnvdimm/label: Return -ENXIO for no slot in __blk_label_update - [powerpc*] 32s: Fix cleanup_cpu_mmu_context() compile bug - [arm64] watchdog: qcom: Avoid context switch in restart handler - [armhf] clk: ti: Fix memleak in ti_fapll_synth_setup - [armhf] pwm: imx27: Fix overflow for bigger periods - [arm64,armhf] pwm: sun4i: Remove erroneous else branch - io_uring: cancel only requests of current task - perf record: Fix memory leak when using '--user-regs=?' to list registers - qlcnic: Fix error code in probe - nfp: move indirect block cleanup to flower app stop callback - virtio_ring: Cut and paste bugs in vring_create_virtqueue_packed() - virtio_net: Fix error code in probe() - virtio_ring: Fix two use after free bugs - vhost scsi: fix error return code in vhost_scsi_set_endpoint() - epoll: check for events when removing a timed out thread from the wait queue - [arm*] clk: bcm: dvp: Add MODULE_DEVICE_TABLE() - [armhf] clk: s2mps11: Fix a resource leak in error handling paths in the probe function - [arm64,armhf] clk: sunxi-ng: Make sure divider tables have sentinel - [powerpc*] smp: Add __init to init_big_cores() - [armel,armhf] 9044/1: vfp: use undef hook for VFP support detection - [armel,armhf] 9036/1: uncompress: Fix dbgadtb size parameter name - perf probe: Fix memory leak when synthesizing SDT probes - io_uring: fix racy IOPOLL flush overflow - io_uring: cancel reqs shouldn't kill overflow list - proc mountinfo: make splice available again - io_uring: fix io_cqring_events()'s noflush - io_uring: fix racy IOPOLL completions - io_uring: always let io_iopoll_complete() complete polled io - vfio/pci: Move dummy_resources_list init in vfio_pci_probe() - media: gspca: Fix memory leak in probe - io_uring: fix io_wqe->work_list corruption - io_uring: fix 0-iov read buffer select - io_uring: hold uring_lock while completing failed polled io in io_wq_submit_work() - io_uring: fix ignoring xa_store errors - io_uring: fix double io_uring free - io_uring: make ctx cancel on exit targeted to actual ctx - [armhf] media: sunxi-cir: ensure IR is handled when it is continuous - media: netup_unidvb: Don't leak SPI master in probe error path - [x86] Input: cyapa_gen6 - fix out-of-bounds stack access - ALSA: hda/ca0132 - Change Input Source enum strings. - [amd64,arm64] ACPI: NFIT: Fix input validation of bus-family - PM: ACPI: PCI: Drop acpi_pm_set_bridge_wakeup() - Revert "ACPI / resources: Use AE_CTRL_TERMINATE to terminate resources walks" - ACPI: PNP: compare the string length in the matching_id() - ALSA: hda: Fix regressions on clear and reconfig sysfs - ALSA: hda/ca0132 - Fix AE-5 rear headphone pincfg. - ALSA: hda/realtek: make bass spk volume adjustable on a yoga laptop - ALSA: hda/realtek - Enable headset mic of ASUS X430UN with ALC256 - ALSA: hda/realtek - Enable headset mic of ASUS Q524UQK with ALC255 - ALSA: hda/realtek - Add supported for more Lenovo ALC285 Headset Button - ALSA: pcm: oss: Fix a few more UBSAN fixes - ALSA/hda: apply jack fixup for the Acer Veriton N4640G/N6640G/N2510G - ALSA: hda/realtek: Add quirk for MSI-GP73 - ALSA: hda/realtek: Apply jack fixup for Quanta NL3 - ALSA: hda/realtek: Remove dummy lineout on Acer TravelMate P648/P658 - ALSA: hda/realtek - Supported Dell fixed type headset - ALSA: usb-audio: Add VID to support native DSD reproduction on FiiO devices - ALSA: usb-audio: Disable sample read check if firmware doesn't give back - ALSA: usb-audio: Add alias entry for ASUS PRIME TRX40 PRO-S - ALSA: core: memalloc: add page alignment for iram - [s390x] smp: perform initial CPU reset also for SMT siblings - [s390x] idle: add missing mt_cycles calculation - [s390x] idle: fix accounting with machine checks - [s390x] dasd: fix hanging device offline processing - [s390x] dasd: prevent inconsistent LCU device data - [s390x] dasd: fix list corruption of pavgroup group list - [s390x] dasd: fix list corruption of lcu list - binder: add flag to clear buffer on txn complete - [x86] ASoC: cx2072x: Fix doubly definitions of Playback and Capture streams - [amd64] ASoC: AMD Renoir - add DMI table to avoid the ACP mic probe (broken BIOS) - [amd64] ASoC: AMD Raven/Renoir - fix the PCI probe (PCI revision) - [x86] staging: comedi: mf6x4: Fix AI end-of-conversion detection - z3fold: simplify freeing slots - z3fold: stricter locking and more careful reclaim - [x86] perf/x86/intel: Add event constraint for CYCLE_ACTIVITY.STALLS_MEM_ANY - [x86] perf/x86/intel: Fix rtm_abort_event encoding on Ice Lake - [x86] perf/x86/intel/lbr: Fix the return type of get_lbr_cycles() - [powerpc*] perf: Exclude kernel samples while counting events in user space. - [x86] cpufreq: intel_pstate: Use most recent guaranteed performance values - crypto: ecdh - avoid unaligned accesses in ecdh_set_secret() - [x86] EDAC/amd64: Fix PCI component registration - cpuset: fix race between hotplug work and later CPU offline - dyndbg: fix use before null check - USB: serial: mos7720: fix parallel-port state restore - USB: serial: digi_acceleport: fix write-wakeup deadlocks - USB: serial: keyspan_pda: fix dropped unthrottle interrupts - USB: serial: keyspan_pda: fix write deadlock - USB: serial: keyspan_pda: fix stalled writes - USB: serial: keyspan_pda: fix write-wakeup use-after-free - USB: serial: keyspan_pda: fix tx-unthrottle use-after-free - USB: serial: keyspan_pda: fix write unthrottling - btrfs: do not shorten unpin len for caching block groups - btrfs: update last_byte_to_unpin in switch_commit_roots - btrfs: fix race when defragmenting leads to unnecessary IO - ext4: fix an IS_ERR() vs NULL check - ext4: fix a memory leak of ext4_free_data - ext4: fix deadlock with fs freezing and EA inodes - ext4: don't remount read-only with errors=continue on reboot - [riscv64] Fix usage of memblock_enforce_memory_limit - [arm64] KVM: Introduce handling of AArch32 TTBCR2 traps - [x86] KVM: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits - [x86] KVM: SVM: Remove the call to sev_platform_status() during setup - [arm64,armhf] iommu/arm-smmu: Allow implementation specific write_s2cr - [arm64,armhf] iommu/arm-smmu-qcom: Read back stream mappings - [arm64,armhf] iommu/arm-smmu-qcom: Implement S2CR quirk - [armhf] dts: pandaboard: fix pinmux for gpio user button of Pandaboard ES - xprtrdma: Fix XDRBUF_SPARSE_PAGES support - [powerpc*] 32: Fix vmap stack - Properly set r1 before activating MMU on syscall too - [powerpc*] Fix incorrect stw{, ux, u, x} instructions in __set_pte_at - [powerpc*] rtas: Fix typo of ibm,open-errinjct in RTAS filter - [powerpc*] bitops: Fix possible undefined behaviour with fls() and fls64() - [powerpc*] feature: Add CPU_FTR_NOEXECUTE to G2_LE - [powerpc*] xmon: Change printk() to pr_cont() - [powerpc*] 8xx: Fix early debug when SMC1 is relocated - [powerpc*] mm: Fix verification of MMU_FTR_TYPE_44x - [powerpc*] powernv/npu: Do not attempt NPU2 setup on POWER8NVL NPU - [powerpc*] powernv/memtrace: Don't leak kernel memory to user space - [powerpc*] powernv/memtrace: Fix crashing the kernel when enabling concurrently - ovl: make ioctl() safe - ceph: fix race in concurrent __ceph_remove_cap invocations - SMB3: avoid confusing warning message on mount to Azure - SMB3.1.1: remove confusing mount warning when no SPNEGO info on negprot rsp - SMB3.1.1: do not log warning message if server doesn't populate salt - ubifs: wbuf: Don't leak kernel memory to flash - jffs2: Fix GC exit abnormally - jffs2: Fix ignoring mounting options problem during remounting - fsnotify: generalize handle_inode_event() - inotify: convert to handle_inode_event() interface - fsnotify: fix events reported to watching parent and child - jfs: Fix array index bounds check in dbAdjTree (CVE-2020-27815) - [arm64,armhf] drm/panfrost: Fix job timeout handling - [arm64,armhf] drm/panfrost: Move the GPU reset bits outside the timeout handler - [x86] platform/x86: mlx-platform: remove an unused variable - drm/dp_aux_dev: check aux_dev before use in drm_dp_aux_dev_get_by_minor() - [x86] drm/i915: Fix mismatch between misplaced vma check and vma insert - iio: ad_sigma_delta: Don't put SPI transfer buffer on the stack - [arm64,armhf] spi: pxa2xx: Fix use-after-free on unbind - [armhf] spi: gpio: Don't leak SPI master in probe error path - [armel] mtd: parser: cmdline: Fix parsing of part-names with colons - mtd: core: Fix refcounting for unpartitioned MTDs - scsi: qla2xxx: Fix crash during driver load on big endian machines - scsi: lpfc: Fix invalid sleeping context in lpfc_sli4_nvmet_alloc() - scsi: lpfc: Fix scheduling call while in softirq context in lpfc_unreg_rpi - scsi: lpfc: Re-fix use after free in lpfc_rq_buf_free() - openat2: reject RESOLVE_BENEATH|RESOLVE_IN_ROOT - iio: buffer: Fix demux update - iio: imu: st_lsm6dsx: fix edge-trigger interrupts - iio:light:rpr0521: Fix timestamp alignment and prevent data leak. - iio:light:st_uvis25: Fix timestamp alignment and prevent data leak. - iio:magnetometer:mag3110: Fix alignment and data leak issues. - iio:pressure:mpl3115: Force alignment of buffer - iio:imu:bmi160: Fix too large a buffer. - iio:imu:bmi160: Fix alignment and data leak issues - md/cluster: block reshape with remote resync job - md/cluster: fix deadlock when node is doing resync job - [arm64,armhf] pinctrl: sunxi: Always call chained_irq_{enter, exit} in sunxi_pinctrl_irq_handler - [arm64] clk: mvebu: a3700: fix the XTAL MODE pin to MPP1_9 - [arm64,armhf] clk: tegra: Do not return 0 on failure - device-dax/core: Fix memory leak when rmmod dax.ko - dma-buf/dma-resv: Respect num_fences when initializing the shared fence list. - driver: core: Fix list corruption after device_del() - libnvdimm/namespace: Fix reaping of invalidated block-window-namespace labels - [x86] platform/x86: intel-vbtn: Allow switch events on Acer Switch Alpha 12 - tracing: Disable ftrace selftests when any tracer is running - mt76: add back the SUPPORTS_REORDERING_BUFFER flag - PCI: Fix pci_slot_release() NULL pointer dereference - [arm64,armhf] regulator: axp20x: Fix DLDO2 voltage control register mask for AXP22x - [arm*] thermal/drivers/cpufreq_cooling: Update cpufreq_state only if state has changed - null_blk: Fix zone size initialization - null_blk: Fail zone append to conventional zones - drm/edid: fix objtool warning in drm_cvt_modes() - [x86] CPU/AMD: Save AMD NodeId as cpu_die_id [ Uwe Kleine-König ] * [armhf] Enable VIDEO_CODA and VIDEO_IMX_PXP for i.MX6 platforms [ Vincent Blut ] * [x86] Enable SND_SOC_INTEL_USER_FRIENDLY_LONG_NAMES. (Closes: #976791) [ Salvatore Bonaccorso ] * [rt] Drop "z3fold: simplify freeing slots" * [rt] Drop "z3fold: stricter locking and more careful reclaim" * [rt] Refresh "sched: Move mmdrop to RCU on RT" * Set ABI to 1 -- Salvatore Bonaccorso Thu, 31 Dec 2020 07:26:43 +0100 linux (5.10.2-1~exp1) experimental; urgency=medium * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.2 - ptrace: Prevent kernel-infoleak in ptrace_get_syscall_info() - USB: legotower: fix logical error in recent commit - USB: add RESET_RESUME quirk for Snapscan 1212 - ALSA: usb-audio: Fix potential out-of-bounds shift - ALSA: usb-audio: Fix control 'access overflow' errors from chmap - xhci: Give USB2 ports time to enter U3 in bus suspend - usb: xhci: Set quirk for XHCI_SG_TRB_CACHE_SIZE_QUIRK - xhci-pci: Allow host runtime PM as default for Intel Alpine Ridge LP - xhci-pci: Allow host runtime PM as default for Intel Maple Ridge xHCI - USB: UAS: introduce a quirk to set no_write_same - ALSA: pcm: oss: Fix potential out-of-bounds shift [ Salvatore Bonaccorso ] * [rt] Update to 5.10.1-rt20 * Revert "Generate BTF debug info" (fixes FTBFS on 32bit architectures) (Reopen: #973870) (Cf. #977715) * Enable USB_DUMMY_HCD as module (Closes: #868771) -- Salvatore Bonaccorso Tue, 22 Dec 2020 22:22:59 +0100 linux (5.10.1-1~exp1) experimental; urgency=medium * New upstream release: https://kernelnewbies.org/Linux_5.10 * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.1 [ Salvatore Bonaccorso ] * [rt] Update to 5.10-rt17 [ Ben Hutchings ] * userns: Enable unprivileged user namespaces by default (Closes: #898446) (sysctl: kernel.unprivileged_userns_clone) [ Bastian Blank ] * Enable all Industrial I/O accelerometers. (closes: #975572) * Enable all Industrial I/O ADC. * Enable all Industrial I/O DAC. * Enable all Industrial I/O digital gyroscopes. * Enable all Industrial I/O IMU. * Enable all Industrial I/O light sensors. * Enable all Industrial I/O magnetometers. * Enable all Industrial I/O pressure sensors. * Enable all Industrial I/O proximity sensors. * Enable all Industrial I/O temperatur sensors. * Enable BT_LEDS. * Enable remaining LEDS_TRIGGER_*. * Enable ZONEFS_FS. * Gemerate BTF debug info: (closes: #973870) - Enable DEBUG_INFO_BTF. - Build-depend on dwarves. * [amd64] Support high CPU counts: - Set MAXSMP. - Remove not longer modifiable NR_CPUS. * [armel/marvell] Disable uncompressed size check. * [x86] Enable INTEL_TXT. (closes: #960195) -- Salvatore Bonaccorso Thu, 17 Dec 2020 10:06:31 +0100 linux (5.10~rc7-1~exp1) experimental; urgency=medium * New upstream release candidate [ Vincent Blut ] * net/sched: Enable NET_SCH_ETS and NET_SCH_FQ_PIE as modules. [ Bastian Blank ] * Enable SOUNDWIRE, SOUNDWIRE_INTEL, SOUNDWIRE_QCOM. * Enable SND_SOC_RT700_SDW, SND_SOC_RT711_SDW, SND_SOC_RT715_SDW. (closes: #976791) * [x86] Enable SND_SOC_SOF_INTEL_SOUNDWIRE_LINK. * [x86] Enable SND_SOC_SOF_COMETLAKE_LP_SUPPORT, SND_SOC_SOF_ELKHARTLAKE_SUPPORT, SND_SOC_SOF_JASPERLAKE_SUPPORT. * [cloud] Disable some further filesystems. (closes: #977005) * [cloud] Disable NET_VENDOR_MICROCHIP. * [cloud] Disable ICE, IGC. * [amd64] Make GVE module. * [x86] Enable X86_CPU_RESCTRL. * [amd64/cloud] Disable INFINIBAND_USNIC. * Enable PSTORE_BLK. * Set SQUASHFS_FILE_DIRECT, SQUASHFS_DECOMP_MULTI_PERCPU. * Disable EFI_VARS. * [x86] Enable APPLE_PROPERTIES. * Enable CRYPTO_ECRDSA, CRYPTO_CURVE25519, disable CRYPTO_SM2. * Enable CRYPTO_CFB, CRYPTO_OFB, CRYPTO_KEYWRAP, CRYPTO_ADIANTUM. * Enable CRYPTO_BLAKE2S, disable CRYPTO_SM3. * Enable CRYPTO_AES_TI, disable CRYPTO_SM4. * Enable CRYPTO_DRBG_HASH, CRYPTO_DRBG_CTR. * Enable SND_SOC_MAX98373_SDW, SND_SOC_RT1308_SDW, SND_SOC_RT5682_SDW. * Enable SND_SOC_INTEL_SOUNDWIRE_SOF_MACH. * Enable ATH11K. (closes: #977004) * [arm64] Enable most accelerated crypto modules. (closes: #976635) * [s390x] Disable IIO. * Enable BLK_CGROUP_IOCOST. * Enable CGROUP_HUGETLB. [ Ben Hutchings ] * Fix missing module.lds for building out-of-tree modules (Closes: #975571) - debian/rules.real: Install module.lds under arch directory - kbuild: Look for module.lds under arch directory too -- Bastian Blank Fri, 11 Dec 2020 11:16:29 +0100 linux (5.10~rc6-1~exp1) experimental; urgency=medium * New upstream release candidate [ Romain Perier ] * Enable F2FS compression support (Closes: #969139) [ Uwe Kleine-König ] * [arm64] Enable support for Kontron's sl28cpld Board Management Controller * [arm64] Enable support for NXP's PCF85063 RTC (Closes: #972345) [ Salvatore Bonaccorso ] * udeb: Remove efivars from efi-modules. * [rt] Update to 5.10-rc6-rt13 [ Aurelien Jarno ] * [mips*] Increase RELOCATION_TABLE_SIZE to 0x180000. -- Salvatore Bonaccorso Thu, 03 Dec 2020 15:42:50 +0100 linux (5.10~rc4-1~exp1) experimental; urgency=medium * New upstream release candidate [ Uwe Kleine-König ] * enable support for ISO 15765-2:2016 CAN (CAN_ISOTP) [ YunQiang Su ] * [mips/loongson-3]: enable some new features for 3A 4000 - VIRTUALIZATION/KVM - HOTPLUG_PCI - RTC based on GOLDFISH - ieee754 to relaxed mode [ Madhu Adav M J ] * nvme: Enable NVME_TCP and NVME_TARGET_TCP as modules (Closes: #961573) [ Ben Hutchings ] * Rewrite "MODSIGN: load blacklist from MOKx" for 5.10 * Revert "lockdown: Refer to Debian wiki until manual page exists"; the page was added in man-pages 5.09 [ Salvatore Bonaccorso ] * [rt] Update to 5.10-rc4-rt8 * linux-cpupower: Add librt to turbostat linker flags [ Nicolas Dandrimont ] * udeb: add bonding driver to nic-modules -- Ben Hutchings Thu, 19 Nov 2020 12:58:26 +0000 linux (5.9.15-1) unstable; urgency=medium * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.9.12 - io_uring: get an active ref_node from files_data - io_uring: order refnode recycling - [arm*] spi: bcm2835: Fix use-after-free on unbind - ipv4: use IS_ENABLED instead of ifdef - [amd64] IB/hfi1: Ensure correct mm is used at all times (CVE-2020-27835) - RDMA/i40iw: Address an mmap handler exploit in i40iw - btrfs: fix missing delalloc new bit for new delalloc ranges - btrfs: tree-checker: add missing return after error in root_item - btrfs: tree-checker: add missing returns after data_ref alignment checks - btrfs: don't access possibly stale fs_info data for printing duplicate device - btrfs: fix lockdep splat when reading qgroup config on mount - [arm64] rtc: pcf2127: fix a bug when not specify interrupts property - [s390x] fix fpu restore in entry.S - mm: fix VM_BUG_ON(PageTail) and BUG_ON(PageWriteback) - smb3: Call cifs reconnect from demultiplex thread - smb3: Avoid Mid pending list corruption - smb3: Handle error case during offload read path - cifs: fix a memleak with modefromsid - [powerpc*] KVM: PPC: Book3S HV: XIVE: Fix possible oops when accessing ESB page - [arm64] KVM: vgic-v3: Drop the reporting of GICR_TYPER.Last for userspace - [x86] KVM: x86: handle !lapic_in_kernel case in kvm_cpu_*_extint - [x86] KVM: x86: Fix split-irqchip vs interrupt injection window request - [amd64] iommu/vt-d: Don't read VCCAP register unless it exists - [arm64] firmware: xilinx: Use hash-table for api feature check - drm/amdgpu: fix SI UVD firmware validate resume fail - io_uring: fix ITER_BVEC check - trace: fix potenial dangerous pointer - [arm64] pgtable: Fix pte_accessible() - [arm64] pgtable: Ensure dirty bit is preserved across pte_wrprotect() - drm/amdgpu: fix a page fault - drm/amdgpu: update golden setting for sienna_cichlid - drm/amd/amdgpu: fix null pointer in runtime pm - HID: uclogic: Add ID for Trust Flex Design Tablet - HID: ite: Replace ABS_MISC 120/121 events with touchpad on/off keypresses - HID: cypress: Support Varmilo Keyboards' media hotkeys - HID: add support for Sega Saturn - Input: i8042 - allow insmod to succeed on devices without an i8042 controller - HID: hid-sensor-hub: Fix issue with devices with no report ID - HID: add HID_QUIRK_INCREMENT_USAGE_ON_DUPLICATE for Gamevice devices - [x86] xen: don't unbind uninitialized lock_kicker_irq - HID: logitech-hidpp: Add HIDPP_CONSUMER_VENDOR_KEYS quirk for the Dinovo Edge - HID: Add Logitech Dinovo Edge battery quirk - proc: don't allow async path resolution of /proc/self components - nvme: free sq/cq dbbuf pointers when dbbuf set fails - io_uring: handle -EOPNOTSUPP on path resolution - [arm64,armhf] net: stmmac: dwmac_lib: enlarge dma reset timeout - vhost: add helper to check if a vq has been setup - vhost scsi: alloc cmds per vq instead of session - vhost scsi: fix cmd completion race - [arm64,armhf] dmaengine: pl330: _prep_dma_memcpy: Fix wrong burst size - scsi: libiscsi: Fix NOP race condition - scsi: target: iscsi: Fix cmd abort fabric stop race - lockdep: Put graph lock/unlock under lock_recursion protection - [x86] perf/x86: fix sysfs type mismatches - [x86] dumpstack: Do not try to access user space code of other tasks - [arm64,armhf] net: dsa: mv88e6xxx: Wait for EEPROM done after HW reset - [armhf] bus: ti-sysc: Fix reset status check for modules with quirks - [armhf] bus: ti-sysc: Fix bogus resetdone warning on enable for cpsw - [arm64,armhf] phy: tegra: xusb: Fix dangling pointer on probe failure - iwlwifi: mvm: use the HOT_SPOT_CMD to cancel an AUX ROC - iwlwifi: mvm: properly cancel a session protection for P2P - iwlwifi: mvm: write queue_sync_state only for sync - [s390x] KVM: pv: Mark mm as protected after the set secure parameters and improve cleanup - [s390x] KVM: remove diag318 reset code - btrfs: qgroup: don't commit transaction when we already hold the handle - arch: pgtable: define MAX_POSSIBLE_PHYSMEM_BITS where needed - [armhf] bus: ti-sysc: suppress err msg for timers used as clockevent/source - scsi: ufs: Fix race between shutdown and runtime resume flow - bnxt_en: fix error return code in bnxt_init_one() - bnxt_en: fix error return code in bnxt_init_board() - [x86] video: hyperv_fb: Fix the cache type when mapping the VRAM - bnxt_en: Release PCI regions when DMA mask setup fails during probe. - cxgb4: fix the panic caused by non smac rewrite - [s390x] qeth: make af_iucv TX notification call more robust - [s390x] qeth: fix af_iucv notification race - [s390x] qeth: fix tear down of async TX buffers - bonding: wait for sysfs kobject destruction before freeing struct slave - [powerpc*] 64s: Fix allnoconfig build since uaccess flush - iommu: Check return of __iommu_attach_device() - IB/mthca: fix return value of error branch in mthca_init_cq() - i40e: Fix removing driver while bare-metal VFs pass traffic - [arm64] firmware: xilinx: Fix SD DLL node reset issue - [armhf] spi: imx: fix the unbalanced spi runtime pm management - io_uring: fix shift-out-of-bounds when round up cq size - [amd64,arm64] aquantia: Remove the build_skb path - net: ena: handle bad request id in ena_netdev - net: ena: set initial DMA width to avoid intel iommu issue - net: ena: fix packet's addresses for rx_offset feature - [arm64] optee: add writeback to valid memory type - efi/efivars: Set generic ops before loading SSDT - efivarfs: revert "fix memory leak in efivarfs_create()" (Closes: #977048) - efi: EFI_EARLYCON should depend on EFI - [riscv64] Add missing jump label initialization - [riscv64] fix barrier() use in - [arm64,armhf] net: stmmac: fix incorrect merge of patch upstream - [arm64] enetc: Let the hardware auto-advance the taprio base-time of 0 - drm/nouveau: fix relocations applying logic and a double-free - can: gs_usb: fix endianess problem with candleLight firmware - [x86] platform/x86: thinkpad_acpi: Send tablet mode switch at wakeup time - [x86] platform/x86: toshiba_acpi: Fix the wrong variable assignment - [arm64] RDMA/hns: Fix retry_cnt and rnr_cnt when querying QP - [arm64] RDMA/hns: Bugfix for memory window mtpt configuration - perf record: Synthesize cgroup events only if needed - perf stat: Use proper cpu for shadow stats - perf probe: Fix to die_entrypc() returns error correctly - [arm*] spi: bcm2835aux: Restore err assignment in bcm2835aux_spi_probe - USB: core: Change %pK for __user pointers to %px - usb: gadget: f_midi: Fix memleak in f_midi_alloc - USB: core: Fix regression in Hercules audio card - USB: quirks: Add USB_QUIRK_DISCONNECT_SUSPEND quirk for Lenovo A630Z TIO built-in usb-audio card - usb: gadget: Fix memleak in gadgetfs_fill_super - [arm64] irqchip/exiu: Fix the index of fwspec for IRQ type - [x86] mce: Do not overwrite no_way_out if mce_end() fails - [x86] speculation: Fix prctl() when spectre_v2_user={seccomp,prctl},ibpb - drm/amdgpu: add rlc iram and dram firmware support https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.9.13 - devlink: Hold rtnl lock while reading netdev attributes - devlink: Make sure devlink instance and port are in same net namespace - ipv6: addrlabel: fix possible memory leak in ip6addrlbl_net_init - [s390x] net/af_iucv: set correct sk_protocol for child sockets - net: openvswitch: fix TTL decrement action netlink message format - rose: Fix Null pointer dereference in rose_send_frame() - sock: set sk_err to ee_errno on dequeue from errq - tcp: Set INET_ECN_xmit configuration in tcp_reinit_congestion_control - tun: honor IOCB_NOWAIT flag - vsock/virtio: discard packets only when socket is really closed - net/packet: fix packet receive on L3 devices without visible hard header - netfilter: bridge: reset skb->pkt_type after NF_INET_POST_ROUTING traversal - ipv4: Fix tos mask in inet_rtm_getroute() - dt-bindings: net: correct interrupt flags in examples - tipc: fix incompatible mtu of transmission - inet_ecn: Fix endianness of checksum update when setting ECT(1) - geneve: pull IP header before ECN decapsulation - net: ip6_gre: set dev->hard_header_len when using header_ops - cxgb3: fix error return code in t3_sge_alloc_qset() - [powerpc*] net: pasemi: fix error return code in pasemi_mac_open() - vxlan: fix error return code in __vxlan_dev_create() - [arm64,armhf] net: mvpp2: Fix error return code in mvpp2_open() - net: skbuff: ensure LSE is pullable before decrementing the MPLS ttl - net: openvswitch: ensure LSE is pullable before reading it - net/mlx5: DR, Proper handling of unsupported Connect-X6DX SW steering - net/mlx5: Fix wrong address reclaim when command interface is down - net: mlx5e: fix fs_tcp.c build when IPV6 is not enabled - ALSA: usb-audio: US16x08: fix value count for level meters - Input: xpad - support Ardwiino Controllers - Input: i8042 - add ByteSpeed touchpad to noloop table - Input: atmel_mxt_ts - fix lost interrupts - tracing: Fix alignment of static buffer - tracing: Remove WARN_ON in start_thread() - uapi: fix statx attribute value overlap for DAX & MOUNT_ROOT - [x86] drm/i915/gt: Fixup tgl mocs for PTE tracking https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.9.14 - usb: gadget: f_fs: Use local copy of descriptors for userspace copy - USB: serial: kl5kusb105: fix memleak on open - USB: serial: ch341: add new Product ID for CH341A - USB: serial: ch341: sort device-id entries - USB: serial: option: add Fibocom NL668 variants - USB: serial: option: add support for Thales Cinterion EXS82 - USB: serial: option: fix Quectel BG96 matching - tty: Fix ->pgrp locking in tiocspgrp() (CVE-2020-29661) - tty: Fix ->session locking (CVE-2020-29660) - speakup: Reject setting the speakup line discipline outside of speakup (CVE-2020-27830) - ALSA: hda/realtek: Fix bass speaker DAC assignment on Asus Zephyrus G14 - ALSA: hda/realtek: Add mute LED quirk to yet another HP x360 model - ALSA: hda/realtek: Enable headset of ASUS UX482EG & B9400CEA with ALC294 - ALSA: hda/realtek - Add new codec supported for ALC897 - ALSA: hda/realtek - Fixed Dell AIO wrong sound tone - ALSA: hda/generic: Add option to enforce preferred_dacs pairs - ring-buffer: Update write stamp with the correct ts - ring-buffer: Set the right timestamp in the slow path of __rb_reserve_next() - ring-buffer: Always check to put back before stamp when crossing pages - ftrace: Fix updating FTRACE_FL_TRAMP - ftrace: Fix DYNAMIC_FTRACE_WITH_DIRECT_CALLS dependency - cifs: allow syscalls to be restarted in __smb_send_rqst() - cifs: fix potential use-after-free in cifs_echo_request() - cifs: refactor create_sd_buf() and and avoid corrupting the buffer - cifs: add NULL check for ses->tcon_ipc - gfs2: Upgrade shared glocks for atime updates - gfs2: Fix deadlock between gfs2_{create_inode,inode_lookup} and delete_work_func - [s390x] pci: fix CPU address in MSI for directed IRQ - [arm64,armhf] i2c: imx: Fix reset of I2SR_IAL flag - [arm64,armhf] i2c: imx: Check for I2SR_IAL after every byte - [arm64,armhf] i2c: imx: Don't generate STOP condition if arbitration has been lost - tracing: Fix userstacktrace option for instances - [x86] thunderbolt: Fix use-after-free in remove_unplugged_switch() - [armhf] drm/omap: sdi: fix bridge enable/disable - drm/amdgpu/vcn3.0: stall DPG when WPTR/RPTR reset - drm/amdgpu/vcn3.0: remove old DPG workaround - [x86] drm/i915/gt: Retain default context state across shrinking - [x86] drm/i915/gt: Limit frequency drop to RPe on parking - [x86] drm/i915/gt: Program mocs:63 for cache eviction on gen9 - [powerpc*] KVM: PPC: Book3S HV: XIVE: Fix vCPU id sanity check - scsi: mpt3sas: Fix ioctl timeout - io_uring: fix recvmsg setup with compat buf-select - dm writecache: advance the number of arguments when reporting max_age - dm writecache: fix the maximum number of arguments - [powerpc*] 64s/powernv: Fix memory corruption when saving SLB entries on MCE - genirq/irqdomain: Add an irq_create_mapping_affinity() function - [powerpc*] pseries: Pass MSI affinity to irq_create_mapping() - dm: fix bug with RCU locking in dm_blk_report_zones - dm: fix double RCU unlock in dm_dax_zero_page_range() error path - dm: remove invalid sparse __acquires and __releases annotations - [x86] uprobes: Do not use prefixes.nbytes when looping over prefixes.bytes - coredump: fix core_pattern parse error - mm: list_lru: set shrinker map bit when child nr_items is not zero - mm/swapfile: do not sleep with a spin lock held - hugetlb_cgroup: fix offline of hugetlb cgroup with reservations - Revert "amd/amdgpu: Disable VCN DPG mode for Picasso" - iommu/amd: Set DTE[IntTabLen] to represent 512 IRTEs - mm: memcg/slab: fix obj_cgroup_charge() return value handling - lib/syscall: fix syscall registers retrieval on 32-bit platforms (CVE-2020-28588) - can: af_can: can_rx_unregister(): remove WARN() statement from list operation sanity check - gfs2: check for empty rgrp tree in gfs2_ri_update - netfilter: ipset: prevent uninit-value in hash_ip6_add - tipc: fix a deadlock when flushing scheduled work - gfs2: Fix deadlock dumping resource group glocks - gfs2: Don't freeze the file system during unmount - rtw88: debug: Fix uninitialized memory in debugfs code - [arm64] i2c: qup: Fix error return code in qup_i2c_bam_schedule_desc() - dm writecache: remove BUG() and fail gracefully instead - Input: i8042 - fix error return code in i8042_setup_aux() - netfilter: nf_tables: avoid false-postive lockdep splat - netfilter: nftables_offload: set address type in control dissector - netfilter: nftables_offload: build mask based from the matching bytes - [x86] insn-eval: Use new for_each_insn_prefix() macro to loop over prefixes bytes - Revert "geneve: pull IP header before ECN decapsulation" - bpf: Fix propagation of 32-bit signed bounds from 64-bit bounds. https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.9.15 - mm/zsmalloc.c: drop ZSMALLOC_PGTABLE_MAPPING - kprobes: Remove NMI context check - kprobes: Tell lockdep about kprobe nesting - [x86] ASoC: Intel: bytcr_rt5640: Fix HP Pavilion x2 Detachable quirks - net, xsk: Avoid taking multiple skbuff references - bpftool: Fix error return value in build_btf_type_table - [powerpc*] 64s: Fix hash ISA v3.0 TLBIEL instruction generation - batman-adv: Consider fragmentation for needed_headroom - batman-adv: Reserve needed_*room for fragments - batman-adv: Don't always reallocate the fragmentation skb head - ipvs: fix possible memory leak in ip_vs_control_net_init - [armhf] drm/panel: sony-acx565akm: Fix race condition in probe - can: sja1000: sja1000_err(): don't count arbitration lose as an error - [armhf] can: sun4i_can: sun4i_can_err(): don't count arbitration lose as an error - [armhf] can: c_can: c_can_power_up(): fix error handling - [x86] scsi: storvsc: Fix error return in storvsc_probe() - iwlwifi: pcie: invert values of NO_160 device config entries - [x86] perf/x86/intel: Fix a warning on x86_pmu_stop() with large PEBS - [x390x] zlib: export S390 symbols for zlib modules - mm/mmap.c: fix mmap return value when vma is merged after call_mmap() - [arm64] dts: rockchip: Remove system-power-controller from pmic on Odroid Go Advance - iwlwifi: pcie: limit memory read spin time - iwlwifi: sta: set max HE max A-MPDU according to HE capa - iwlwifi: pcie: set LTR to avoid completion timeout - iwlwifi: mvm: fix kernel panic in case of assert during CSA - [powerpc*] Drop -me200 addition to build flags - scsi: ufs: Fix unexpected values from ufshcd_read_desc_param() - scsi: ufs: Make sure clk scaling happens only when HBA is runtime ACTIVE - [arm64,armhf] irqchip/gic-v3-its: Unconditionally save/restore the ITS state on suspend - [arm64] spi: spi-nxp-fspi: fix fspi panic by unexpected interrupts - [arm64,armhf] arm-smmu-qcom: Ensure the qcom_scm driver has finished probing - btrfs: do nofs allocations when adding and removing qgroup relations - btrfs: fix lockdep splat when enabling and disabling qgroups - [arm64] soc: fsl: dpio: Get the cpumask through cpumask_of(cpu) - sched/idle: Fix arch_cpu_idle() vs tracing - [x86] intel_idle: Fix intel_idle() vs tracing - [x86] platform/x86: thinkpad_acpi: add P1 gen3 second fan support - [x86] platform/x86: thinkpad_acpi: Do not report SW_TABLET_MODE on Yoga 11e - [x86] platform/x86: thinkpad_acpi: Add BAT1 is primary battery quirk for Thinkpad Yoga 11e 4th gen - [x86] platform/x86: thinkpad_acpi: Whitelist P15 firmware for dual fan control - [x86] platform/x86: acer-wmi: add automatic keyboard background light toggle key as KEY_LIGHTS_TOGGLE - [x86] platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC - [s390x] fix irq state tracing - [x86] intel_idle: Build fix - media: pulse8-cec: fix duplicate free at disconnect or probe error - media: pulse8-cec: add support for FW v10 and up - xen: add helpers for caching grant mapping pages - xen: don't use page->lru for ZONE_DEVICE memory - Input: cm109 - do not stomp on control URB - Input: i8042 - add Acer laptops to the i8042 reset list - pinctrl: amd: remove debounce filter setting in IRQ type setting - [arm64] mmc: sdhci-of-arasan: Fix clock registration error for Keem Bay SOC - mmc: block: Fixup condition for CMD13 polling for RPMB requests - [x86] drm/i915/gem: Propagate error from cancelled submit due to context closure - [x86] drm/i915/display/dp: Compute the correct slice count for VDSC on DP - [x86] drm/i915/gt: Declare gen9 has 64 mocs entries! - [x86] drm/i915/gt: Ignore repeated attempts to suspend request flow across reset - [x86] drm/i915/gt: Cancel the preemption timeout on responding to it - drm/amdgpu: fix sdma instance fw version and feature version init - kbuild: avoid static_assert for genksyms - proc: use untagged_addr() for pagemap_read addresses - mm/hugetlb: clear compound_nr before freeing gigantic pages - scsi: be2iscsi: Revert "Fix a theoretical leak in beiscsi_create_eqs()" - [x86] membarrier: Get rid of a dubious optimization - [x86] apic/vector: Fix ordering in vector assignment - [x86] kprobes: Fix optprobe to detect INT3 padding correctly [ Salvatore Bonaccorso ] * [x86] drm/i915: Update TGL and RKL DMC firmware versions (Closes: #974646) * [rt] Refresh "mm/zsmalloc: copy with get_cpu_var() and locking" * xen/xenbus: Allow watches discard events before queueing (CVE-2020-29568, XSA-349) * xen/xenbus: Add 'will_handle' callback support in xenbus_watch_path() (CVE-2020-29568, XSA-349) * xen/xenbus/xen_bus_type: Support will_handle watch callback (CVE-2020-29568, XSA-349) * xen/xenbus: Count pending messages for each watch (CVE-2020-29568, XSA-349) * xenbus/xenbus_backend: Disallow pending watch messages (CVE-2020-29568, XSA-349) * xen-blkback: set ring->xenblkd to NULL after kthread_stop() (CVE-2020-29569, XSA-350) * Bump ABI to 5 -- Salvatore Bonaccorso Thu, 17 Dec 2020 06:31:52 +0100 linux (5.9.11-1) unstable; urgency=medium * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.9.10 - [powerpc*] 64s: flush L1D on kernel entry (CVE-2020-4788) - [powerpc*] 64s: flush L1D after user accesses (CVE-2020-4788) - [powerpc*] Only include kup-radix.h for 64-bit Book3S - Input: sunkbd - avoid use-after-free in teardown paths (CVE-2020-25669) - mac80211: always wind down STA state - can: proc: can_remove_proc(): silence remove_proc_entry warning - [powerpc*] smp: Call rcu_cpu_starting() earlier - [x86] perf/x86/intel/uncore: Fix Add BW copypasta - [x86] KVM: clflushopt should be treated as a no-op by emulation - [arm64,x86] ACPI: GED: fix -Wformat https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.9.11 - ah6: fix error return code in ah6_input() - atm: nicstar: Unmap DMA on send error - bnxt_en: read EEPROM A2h address using page 0 - devlink: Add missing genlmsg_cancel() in devlink_nl_sb_port_pool_fill() - [arm64] enetc: Workaround for MDIO register access issue - Exempt multicast addresses from five-second neighbor lifetime - inet_diag: Fix error path to cancel the meseage in inet_req_diag_fill() - ipv6: Fix error path to cancel the meseage - lan743x: fix issue causing intermittent kernel log warnings - lan743x: prevent entire kernel HANG on open, for some platforms - net: b44: fix error return code in b44_init_one() - net: bridge: add missing counters to ndo_get_stats64 callback - [arm64,armhf] net: dsa: mv88e6xxx: Avoid VTU corruption on 6097 - [armhf] net: ethernet: ti: cpsw: fix cpts irq after suspend - [armhf] net: ethernet: ti: cpsw: fix error return code in cpsw_probe() - [armhf] net: ftgmac100: Fix crash when removing driver - net: Have netpoll bring-up DSA management interface - netlabel: fix our progress tracking in netlbl_unlabel_staticlist() - netlabel: fix an uninitialized warning in netlbl_unlabel_staticlist() - net/mlx4_core: Fix init_hca fields offset - [armhf] net/ncsi: Fix netlink registration - net: phy: mscc: remove non-MACSec compatible phy - net/smc: fix direct access to ib_gid_addr->ndev in smc_ib_determine_gid() - [arm64,armhf] net: stmmac: Use rtnl_lock/unlock on netif_set_real_num_rx_queues() call - page_frag: Recover from memory pressure - qed: fix error return code in qed_iwarp_ll2_start() - qed: fix ILT configuration of SRC block - qlcnic: fix error return code in qlcnic_83xx_restart_hw() - sctp: change to hold/put transport for proto_unreach_timer - tcp: only postpone PROBE_RTT if RTT is < current min_rtt estimate - vsock: forward all packets to the host when no H2G is registered - net/mlx5e: Fix check if netdev is bond slave - net/mlx5: Add handling of port type in rule deletion - net/mlx5: Clear bw_share upon VF disable - net/mlx5: Disable QoS when min_rates on all VFs are zero - PM: runtime: Add pm_runtime_resume_and_get to deal with usage counter - [armhf] net: fec: Fix reference count leak in fec series ops - bnxt_en: Fix counter overflow logic. - bnxt_en: Free port stats during firmware reset. - [arm64,armhf] net: mvneta: fix possible memory leak in mvneta_swbm_add_rx_fragment - net: usb: qmi_wwan: Set DTR quirk for MR400 - [armhf] Revert "Revert "gpio: omap: Fix lost edge wake-up interrupts"" - tools, bpftool: Avoid array index warnings. - [arm64,armhf] pinctrl: rockchip: enable gpio pclk for rockchip_gpio_to_irq - scsi: ufs: Fix unbalanced scsi_block_reqs_cnt caused by ufshcd_hold() - scsi: ufs: Try to save power mode change and UIC cmd completion timeout - [armhf] pinctrl: mcp23s08: Print error message when regmap init fails - [x86] ACPI: button: Add DMI quirk for Medion Akoya E2228T - [arm64] errata: Fix handling of 1418040 with late CPU onlining - [arm64] psci: Avoid printing in cpu_psci_cpu_die() - [arm64] smp: Tell RCU about CPUs that fail to come online - vfs: remove lockdep bogosity in __sb_start_write - gfs2: fix possible reference leak in gfs2_check_blk_type - [arm64,armhf] hwmon: (pwm-fan) Fix RPM calculation - gfs2: Fix case in which ail writes are done to jdata holes - [arm64] Add MIDR value for KRYO2XX gold/silver CPU cores - [arm64] kpti: Add KRYO2XX gold/silver CPU cores to kpti safelist - [arm64] cpu_errata: Apply Erratum 845719 to KRYO2XX Silver - [arm64,armhf] usb: dwc2: Avoid leaving the error_debugfs label unused - [arm64] dts: allwinner: beelink-gs1: Enable both RGMII RX/TX delay - [arm64] dts: allwinner: Pine H64: Enable both RGMII RX/TX delay - [arm64] dts: allwinner: a64: OrangePi Win: Fix ethernet node - [arm64] dts: allwinner: a64: Pine64 Plus: Fix ethernet node - [arm64] dts: allwinner: h5: OrangePi PC2: Fix ethernet node - [armhf] dts: sun8i: r40: bananapi-m2-ultra: Fix ethernet node - [armhf] Revert "arm: sun8i: orangepi-pc-plus: Set EMAC activity LEDs to active high" - [armhf] dts: sun6i: a31-hummingbird: Enable RGMII RX/TX delay on Ethernet PHY - [armhf] dts: sun7i: cubietruck: Enable RGMII RX/TX delay on Ethernet PHY - [armhf] dts: sun7i: bananapi-m1-plus: Enable RGMII RX/TX delay on Ethernet PHY - [armhf] dts: sun8i: h3: orangepi-plus2e: Enable RGMII RX/TX delay on Ethernet PHY - [armhf] dts: sun9i: Enable both RGMII RX/TX delay on Ethernet PHY - [arm64] dts: allwinner: h5: libretech-all-h5-cc: Enable RGMII RX/TX delay on PHY - [arm64] dts: allwinner: a64: bananapi-m64: Enable RGMII RX/TX delay on PHY - [mips64el,mipsel] export has_transparent_hugepage() for modules - [arm64] dts: allwinner: h5: OrangePi Prime: Fix ethernet node - [armhf] dts: imx6q-prti6q: fix PHY address - swiotlb: using SIZE_MAX needs limits.h included - [armhf] dmaengine: ti: omap-dma: Block PM if SDMA is busy to fix audio - rcu: Don't invoke try_invoke_on_locked_down_task() with irqs disabled - spi: fix client driver breakages when using GPIO descriptors - Input: elan_i2c - fix firmware update on newer ICs - rfkill: Fix use-after-free in rfkill_resume() - perf lock: Correct field name "flags" - perf lock: Don't free "lock_seq_stat" if read_count isn't zero - SUNRPC: Fix oops in the rpc_xdr_buf event class - [arm64,armhf] drm: bridge: dw-hdmi: Avoid resetting force in the detect function - tools, bpftool: Add missing close before bpftool net attach exit - [amd64] IB/hfi1: Fix error return code in hfi1_init_dd() - ip_tunnels: Set tunnel option flag when tunnel metadata is present - can: af_can: prevent potential access of uninitialized member in can_rcv() - can: af_can: prevent potential access of uninitialized member in canfd_rcv() - can: dev: can_restart(): post buffer from the right context - can: mcba_usb: mcba_usb_start_xmit(): first fill skb, then pass to can_put_echo_skb() - can: peak_usb: fix potential integer overflow on shift of a int - [armhf] can: flexcan: fix failure handling of pm_runtime_get_sync() - [arm64] ASoC: qcom: lpass-platform: Fix memory leak - [arm64,armhf] drm/sun4i: dw-hdmi: fix error return code in sun8i_dw_hdmi_bind() - net/mlx5: E-Switch, Fail mlx5_esw_modify_vport_rate if qos disabled - bpf, sockmap: Fix partial copy_page_to_iter so progress can still be made - bpf, sockmap: Ensure SO_RCVBUF memory is observed on ingress redirect - can: kvaser_usb: kvaser_usb_hydra: Fix KCAN bittiming limits - dmaengine: fix error codes in channel_register() - [amd64] iommu/vt-d: Move intel_iommu_gfx_mapped to Intel IOMMU header - [amd64] iommu/vt-d: Avoid panic if iommu init fails in tboot system - [armhf] can: flexcan: flexcan_chip_start(): fix erroneous flexcan_transceiver_enable() during bus-off recovery - xfs: ensure inobt record walks always make forward progress - xfs: return corresponding errcode if xfs_initialize_perag() fail - [x86] ASOC: Intel: kbl_rt5663_rt5514_max98927: Do not try to disable disabled clock - [armhf] regulator: ti-abb: Fix array out of bound read access on the first transition - lib/strncpy_from_user.c: Mask out bytes after NUL terminator. - xfs: revert "xfs: fix rmap key and record comparison functions" - bpf, sockmap: Skb verdict SK_PASS to self already checked rmem limits - bpf, sockmap: On receive programs try to fast track SK_PASS ingress - bpf, sockmap: Use truesize with sk_rmem_schedule() - bpf, sockmap: Avoid returning unneeded EAGAIN when redirecting to self - [armhf] efi/arm: set HSCTLR Thumb2 bit correctly for HVC calls from HYP - [amd64] efi/x86: Free efi_pgd with free_pages() - sched/fair: Fix overutilized update in enqueue_task_fair() - sched: Fix data-race in wakeup - sched: Fix rq->nr_iowait ordering - libfs: fix error cast of negative value in simple_attr_write() - afs: Fix speculative status fetch going out of order wrt to modifications - HID: logitech-hidpp: Add PID for MX Anywhere 2 - HID: logitech-dj: Handle quad/bluetooth keyboards with a builtin trackpad - HID: logitech-dj: Fix Dinovo Mini when paired with a MX5x00 receiver - speakup: Do not let the line discipline be used several times (CVE-2020-28941) - ALSA: firewire: Clean up a locking issue in copy_resp_to_buf() - ALSA: usb-audio: Add delay quirk for all Logitech USB devices - ALSA: ctl: fix error path at adding user-defined element set - ALSA: mixart: Fix mutex deadlock - ALSA: hda/realtek - Add supported for Lenovo ThinkPad Headset Button - ALSA: hda/realtek - Add supported mute Led for HP - ALSA: hda/realtek: Add some Clove SSID in the ALC293(ALC1220) - ALSA: hda/realtek - HP Headset Mic can't detect after boot - [armhf] tty: serial: imx: fix potential deadlock - [armhf] tty: serial: imx: keep console clocks always on - HID: logitech-dj: Fix an error in mse_bluetooth_descriptor - [arm64,armhf,x86] efivarfs: fix memory leak in efivarfs_create() - [arm64,x86] staging: rtl8723bs: Add 024c:0627 to the list of SDIO device-ids - xfs: fix forkoff miscalculation related to XFS_LITINO(mp) - [arm64,x86] ACPI: fan: Initialize performance state sysfs attribute - [x86] iio: accel: kxcjk1013: Replace is_smo8500_device with an acpi_type enum - [x86] iio: accel: kxcjk1013: Add support for KIOX010A ACPI DSM for setting tablet-mode - [arm64] iio: cros_ec: Use default frequencies when EC returns invalid information - spi: Introduce device-managed SPI controller allocation - [arm64,armhf] spi: bcm2835aux: Fix use-after-free on unbind - [armhf] regulator: pfuze100: limit pfuze-support-disable-sw to pfuze{100,200} - regulator: fix memory leak with repeated set_machine_constraints() - regulator: avoid resolve_supply() infinite recursion - regulator: workaround self-referent regulators - gfs2: Fix regression in freeze_go_sync - mac80211: minstrel: remove deferred sampling code - mac80211: minstrel: fix tx status processing corner case - mac80211: free sta in sta_info_insert_finish() on errors - [s390x] fix system call exit path - [s390x] cpum_sf.c: fix file permission for cpum_sfb_size - [s390x] dasd: fix null pointer dereference for ERP requests - [x86] Drivers: hv: vmbus: Allow cleanup of VMBUS_CONNECT_CPU if disconnected - [x86] drm/i915: Handle max_bpc==16 - [x86] drm/i915/tgl: Fix Media power gate sequence. - io_uring: don't double complete failed reissue request - mmc: sdhci-pci: Prefer SDR25 timing for High Speed mode for BYT-based Intel controllers - [arm64] mmc: sdhci-of-arasan: Allow configuring zero tap values - [arm64] mmc: sdhci-of-arasan: Use Mask writes for Tap delays - [arm64] mmc: sdhci-of-arasan: Issue DLL reset explicitly - blk-cgroup: fix a hd_struct leak in blkcg_fill_root_iostats - ptrace: Set PF_SUPERPRIV when checking capability - seccomp: Set PF_SUPERPRIV when checking capability - fanotify: fix logic of reporting name info with watched parent - [x86] microcode/intel: Check patch signature before saving microcode for early loading - mm: never attempt async page lock if we've transferred data already - mm: fix readahead_page_batch for retry entries - mm: memcg/slab: fix root memcg vmstats - mm/userfaultfd: do not access vma->vm_mm after calling handle_userfault() [ Ben Hutchings ] * [arm64][rt] Disable KVM, which currently conflicts with PREEMPT_RT [ Yves-Alexis Perez ] * usbnet: ipheth: fix connectivity with iOS 14 [ Salvatore Bonaccorso ] * Bump ABI to 4 [ Julien Cristau ] * Disable NOUVEAU_LEGACY_CTX_SUPPORT, which was keeping DRM_LEGACY enabled for no good reason (closes: #975038) -- Salvatore Bonaccorso Fri, 27 Nov 2020 22:02:14 +0100 linux (5.9.9-1) unstable; urgency=medium * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.9.7 - net: core: use list_del_init() instead of list_del() in netdev_run_todo() - tipc: fix use-after-free in tipc_bcast_get_mode - [x86] drm/i915/gem: Avoid implicit vmap for highmem on x86-32 - [x86] drm/i915/gem: Prevent using pgprot_writecombine() if PAT is not supported - [x86] drm/i915/gem: Always test execution status on closing the context - [x86] drm/i915/gt: Always send a pulse down the engine after disabling heartbeat - [x86] drm/i915: Break up error capture compression loops with cond_resched() - [x86] drm/i915: Cancel outstanding work after disabling heartbeats on an engine - [x86] drm/i915: Avoid mixing integer types during batch copies - [x86] drm/i915: Fix TGL DKL PHY DP vswing handling - [x86] drm/i915/gt: Initialize reserved and unspecified MOCS indices - [x86] drm/i915/gt: Undo forced context restores after trivial preemptions - [x86] drm/i915/gt: Delay execlist processing for tgl - [x86] drm/i915: Drop runtime-pm assert from vgpu io accessors - [x86] drm/i915: Exclude low pages (128KiB) of stolen from use - [x86] drm/i915: Mark ininitial fb obj as WT on eLLC machines to avoid rcu lockup during fbdev init - [x86] drm/i915: Use the active reference on the vma while capturing - [x86] drm/i915: Reject 90/270 degree rotated initial fbs - [x86] drm/i915: Restore ILK-M RPS support - drm/nouveau/kms/nv50-: Program notifier offset before requesting disp caps - drm/nouveau/device: fix changing endianess code to work on older GPUs - ptrace: fix task_join_group_stop() for the case when current is traced - [arm64,riscv64] cadence: force nonlinear buffers to be cloned - ip_tunnel: fix over-mtu packet send fail without TUNNEL_DONT_FRAGMENT flags - [armhf] net: ethernet: ti: cpsw: disable PTPv1 hw timestamping advertisement - net: usb: qmi_wwan: add Telit LE910Cx 0x1230 composition - sctp: Fix COMM_LOST/CANT_STR_ASSOC err reporting on big-endian platforms - [arm64,armhf,riscv64] sfp: Fix error handing in sfp_probe() - ip6_tunnel: set inner ipproto before ip6_tnl_encap - [armhf] net: fec: fix MDIO probing for some FEC hardware blocks - net: openvswitch: silence suspicious RCU usage warning - r8169: work around short packet hw bug on RTL8125 - drm/nouveau/kms/nv50-: Get rid of bogus nouveau_conn_mode_valid() - drm/nouveau/kms/nv50-: Fix clock checking algorithm in nv50_dp_mode_valid() - Fonts: Replace discarded const qualifier - ALSA: hda/realtek - Fixed HP headset Mic can't be detected - ALSA: hda/realtek - Enable headphone for ASUS TM420 - ALSA: usb-audio: Add implicit feedback quirk for Zoom UAC-2 - ALSA: usb-audio: add usb vendor id as DSD-capable for Khadas devices - ALSA: usb-audio: Add implicit feedback quirk for Qu-16 - ALSA: usb-audio: Add implicit feedback quirk for MODX - hugetlb_cgroup: fix reservation accounting - mm: mempolicy: fix potential pte_unmap_unlock pte error - kthread_worker: prevent queuing delayed work from timer_fn when it is being canceled - mm: always have io_remap_pfn_range() set pgprot_decrypted() - gfs2: Wake up when sd_glock_disposal becomes zero - gfs2: Don't call cancel_delayed_work_sync from within delete work function - ring-buffer: Fix recursion protection transitions between interrupt context - drm/amdgpu: update golden setting for sienna_cichlid - drm/amdgpu: resolved ASD loading issue on sienna - [amd64] iommu/vt-d: Fix kernel NULL pointer dereference in find_domain() - mtd: spi-nor: Don't copy self-pointing struct around - ftrace: Fix recursion check for NMI test - ftrace: Handle tracing when switching between context - regulator: defer probe when trying to get voltage from unresolved supply - [arm*] spi: bcm2835: fix gpio cs level inversion - tracing: Fix out of bounds write in get_trace_buf - futex: Handle transient "ownerless" rtmutex state correctly - [amd64] x86/lib: Change .weak to SYM_FUNC_START_WEAK for arch/x86/lib/mem*_64.S - [x86] kexec: Use up-to-dated screen_info copy to fill boot params - [x86] hyperv_fb: Update screen_info after removing old framebuffer - io_uring: don't miss setting IO_WQ_WORK_CONCURRENT - of: Fix reserved-memory overlap detection - [arm64,armhf] drm/sun4i: frontend: Rework a bit the phase data - [arm64,armhf] drm/sun4i: frontend: Reuse the ch0 phase for RGB formats - [arm64,armhf] drm/sun4i: frontend: Fix the scaler phase on A33 - blk-cgroup: Fix memleak on error path - blk-cgroup: Pre-allocate tree node on blkg_conf_prep - btrfs: drop the path before adding qgroup items when enabling qgroups - btrfs: add a helper to read the tree_root commit root for backref lookup - scsi: core: Don't start concurrent async scan on same host - drm/amdgpu: disable DCN and VCN for navi10 blockchain SKU(v3) - drm/amdgpu: add DID for navi10 blockchain SKU - [powerpc*] scsi: ibmvscsi: Fix potential race after loss of transport - vsock: use ns_capable_noaudit() on socket create - nvme-rdma: handle unexpected nvme completion data length - nvmet: fix a NULL pointer dereference when tracing the flush command - [arm*] staging: mmal-vchiq: Fix memory leak for vchiq_instance - [arm*] drm/vc4: drv: Add error handding for bind - [amd64,arm64] ACPI: NFIT: Fix comparison to '-ENXIO' - drm/nouveau/gem: fix "refcount_t: underflow; use-after-free" - [arm64] smp: Move rcu_cpu_starting() earlier - vt: Disable KD_FONT_OP_COPY - tty: fix crash in release_tty if tty->port is not set - fork: fix copy_process(CLONE_PARENT) race with the exiting ->real_parent - entry: Fix the incorrect ordering of lockdep and RCU check - [s390x] pci: fix hot-plug of PCI function missing bus - [s390x] mm: make pmd/pud_deref() large page aware - [s390x] pkey: fix paes selftest failure with paes and pkey static build - USB: serial: cyberjack: fix write-URB completion race - USB: serial: option: add Quectel EC200T module support - USB: serial: option: add LE910Cx compositions 0x1203, 0x1230, 0x1231 - USB: serial: option: add Telit FN980 composition 0x1055 - [arm64,armhf] usb: dwc3: ep0: Fix delay status handling - USB: Add NO_LPM quirk for Kingston flash drive - io_uring: fix link lookup racing with link timeout - mac80211: fix regression where EAPOL frames were sent in plaintext - [arm64,armhf] drm/panfrost: Fix a deadlock between the shrinker and madvise path - PM: runtime: Drop runtime PM references to supplier on link removal - PM: runtime: Drop pm_runtime_clean_up_links() - PM: runtime: Resume the device earlier in __device_release_driver() - [x86] drm/i915: Fix encoder lookup during PSR atomic check - [x86] drm/i915/gt: Use the local HWSP offset during submission https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.9.8 - [x86] powercap: restrict energy meter to root access (CVE-2020-8694) https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.9.9 - [x86] drm/i915: Hold onto an explicit ref to i915_vma_work.pinned - [x86] drm/i915/gem: Flush coherency domains on first set-domain-ioctl - mm: memcg: link page counters to root if use_hierarchy is false - nbd: don't update block size after device is started - [arm64] KVM: Force PTE mapping on fault resulting in a device mapping - xfrm: interface: fix the priorities for ipip and ipv6 tunnels - [x86] ASoC: Intel: kbl_rt5663_max98927: Fix kabylake_ssp_fixup function - [x86] hv_balloon: disable warning when floor reached - net: xfrm: fix a race condition during allocing spi - [riscv64] irqchip/sifive-plic: Fix broken irq_set_affinity() callback - mtd: spi-nor: Fix address width on flash chips > 16MB - xfs: set xefi_discard when creating a deferred agfl free log intent item - mac80211: don't require VHT elements for HE on 2.4 GHz - netfilter: nftables: fix netlink report logic in flowtable and genid - netfilter: use actual socket sk rather than skb sk when routing harder - netfilter: nf_tables: missing validation from the abort path - PCI: Always enable ACS even if no ACS Capability - netfilter: ipset: Update byte and packet counters regardless of whether they match - [riscv64] irqchip/sifive-plic: Fix chip_data access within a hierarchy - [powerpc*] eeh_cache: Fix a possible debugfs deadlock - [arm*] drm/vc4: bo: Add a managed action to cleanup the cache - IB/srpt: Fix memory leak in srpt_add_one - mm: memcontrol: correct the NR_ANON_THPS counter of hierarchical memcg - [arm64,armhf] drm/panfrost: rename error labels in device_init - [arm64,armhf] drm/panfrost: move devfreq_init()/fini() in device - [arm64,armhf] drm/panfrost: Fix module unload - perf trace: Fix segfault when trying to trace events by cgroup - perf tools: Add missing swap for ino_generation - perf tools: Add missing swap for cgroup events - [x86] ALSA: hda: prevent undefined shift in snd_hdac_ext_bus_get_link() - [amd64] iommu/vt-d: Fix sid not set issue in intel_svm_bind_gpasid() - [amd64] iommu/vt-d: Fix a bug for PDP check in prq_event_thread - afs: Fix warning due to unadvanced marshalling pointer - afs: Fix incorrect freeing of the ACL passed to the YFS ACL store op - vfio/pci: Implement ioeventfd thread handler for contended memory lock - can: rx-offload: don't call kfree_skb() from IRQ context - can: dev: can_get_echo_skb(): prevent call to kfree_skb() in hard IRQ context - can: dev: __can_get_echo_skb(): fix real payload length return value for RTR frames - can: can_create_echo_skb(): fix echo skb generation: always use skb_clone() - can: j1939: swap addr and pgn in the send example - can: j1939: j1939_sk_bind(): return failure if netdev is down - can: peak_usb: add range checking in decode operations - can: peak_usb: peak_usb_get_ts_time(): fix timestamp wrapping - can: peak_canfd: pucan_handle_can_rx(): fix echo management when loopback is on - [armhf] can: flexcan: remove FLEXCAN_QUIRK_DISABLE_MECR quirk for LS1021A - [armhf] can: flexcan: flexcan_remove(): disable wakeup completely - xfs: flush new eof page on truncate to avoid post-eof corruption - xfs: fix missing CoW blocks writeback conversion retry - xfs: fix scrub flagging rtinherit even if there is no rt device - io_uring: ensure consistent view of original task ->mm from SQPOLL - [arm64] spi: fsl-dspi: fix wrong pointer in suspend/resume - [armel,armhf] PCI: mvebu: Fix duplicate resource requests - ceph: check session state after bumping session->s_seq - [x86] speculation: Allow IBPB to be conditionally enabled on CPUs with always-on STIBP - USB: apple-mfi-fastcharge: fix reference leak in apple_mfi_fc_set_property - [arm64,x86] tpm: efi: Don't create binary_bios_measurements file for an empty log - [arm64] KVM: ARM_SMCCC_ARCH_WORKAROUND_1 doesn't return SMCCC_RET_NOT_REQUIRED - ath9k_htc: Use appropriate rs_datalen type - scsi: ufs: Fix missing brace warning for old compilers - [arm64] usb: dwc3: pci: add support for the Intel Alder Lake-S - opp: Reduce the size of critical section in _opp_table_kref_release() - usb: raw-gadget: fix memory leak in gadget_setup - ALSA: hda: Separate runtime and system suspend - ALSA: hda: Reinstate runtime_allow() for all hda controllers - [amd64] x86/boot/compressed/64: Introduce sev_status - gfs2: Free rd_bits later in gfs2_clear_rgrpd to fix use-after-free - gfs2: Add missing truncate_inode_pages_final for sd_aspace - gfs2: check for live vs. read-only file system in gfs2_fitrim - scsi: hpsa: Fix memory leak in hpsa_init_one() - drm/amdgpu: perform srbm soft reset always on SDMA resume - mac80211: fix use of skb payload instead of header - cfg80211: initialize wdev data earlier - cfg80211: regulatory: Fix inconsistent format argument - tracing: Fix the checking of stackidx in __ftrace_trace_stack - Revert "nvme-pci: remove last_sq_tail" - scsi: scsi_dh_alua: Avoid crash during alua_bus_detach() - scsi: mpt3sas: Fix timeouts observed while reenabling IRQ - nvme: introduce nvme_sync_io_queues - nvme-rdma: avoid race between time out and tear down - nvme-rdma: avoid repeated request completion - [amd64] iommu/amd: Increase interrupt remapping table limit to 512 entries - [s390x] smp: move rcu_cpu_starting() earlier - vfio/pci: Bypass IGD init in case of -ENODEV - amd/amdgpu: Disable VCN DPG mode for Picasso - iomap: clean up writeback state logic on writepage error - [riscv64] Set text_offset correctly for M-Mode - tpm_tis: Disable interrupts on ThinkPad T490s - [arm*] spi: bcm2835: remove use of uninitialized gpio flags variable - [x86] pinctrl: intel: Fix 2 kOhm bias which is 833 Ohm - [x86] pinctrl: intel: Set default bias in case no particular value given - [armhf] gpio: aspeed: fix ast2600 bank properties - [armel,armhf] 9019/1: kprobes: Avoid fortify_panic() when copying optprobe template - bpf: Don't rely on GCC __attribute__((optimize)) to disable GCSE - libbpf, hashmap: Fix undefined behavior in hash_bits - [armhf] pinctrl: mcp23s08: Use full chunk of memory for regmap configuration - [armhf] pinctrl: aspeed: Fix GPI only function problem. - net/mlx5e: Fix modify header actions memory leak - net/mlx5e: Protect encap route dev from concurrent release - net/mlx5e: Use spin_lock_bh for async_icosq_lock - net/mlx5: Fix deletion of duplicate rules - net/mlx5: E-switch, Avoid extack error log for disabled vport - net/mlx5e: Fix VXLAN synchronization after function reload - net/mlx5e: Fix incorrect access of RCU-protected xdp_prog - SUNRPC: Fix general protection fault in trace_rpc_xdr_overflow() - NFSD: Fix use-after-free warning when doing inter-server copy - NFSD: fix missing refcount in nfsd4_copy by nfsd4_do_async_copy - tools/bpftool: Fix attaching flow dissector - bpf: Zero-fill re-used per-cpu map element - r8169: fix potential skb double free in an error path - r8169: disable hw csum for short packets on all chip versions - [arm64] pinctrl: qcom: Move clearing pending IRQ to .irq_request_resources callback - nbd: fix a block_device refcount leak in nbd_release - i40e: Fix MAC address setting for a VF via Host/VM - igc: Fix returning wrong statistics (Closes: #970722) - lan743x: correctly handle chips with internal PHY - net: phy: realtek: support paged operations on RTL8201CP - xfs: fix flags argument to rmap lookup when converting shared file rmaps - xfs: set the unwritten bit in rmap lookup flags in xchk_bmap_get_rmapextents - xfs: fix rmap key and record comparison functions - xfs: fix brainos in the refcount scrubber's rmap fragment processor - lan743x: fix "BUG: invalid wait context" when setting rx mode - xfs: fix a missing unlock on error in xfs_fs_map_blocks - of/address: Fix of_node memory leak in of_dma_is_coherent - ch_ktls: Update cheksum information - ch_ktls: tcb update fails sometimes - [i386] cosa: Add missing kfree in error path of cosa_write - hwmon: (applesmc) Re-work SMC comms - NFS: Fix listxattr receive buffer size - vrf: Fix fast path output packet handling with async Netfilter rules - lan743x: fix use of uninitialized variable - [arm64] mm: Validate hotplug range before creating linear mapping - kernel/watchdog: fix watchdog_allowed_mask not used warning - mm: memcontrol: fix missing wakeup polling thread - afs: Fix afs_write_end() when called with copied == 0 [ver #3] - perf: Fix get_recursion_context() - nvme: factor out a nvme_configure_metadata helper - nvme: freeze the queue over ->lba_shift updates - nvme: fix incorrect behavior when BLKROSET is called by the user - perf: Simplify group_sched_in() - perf: Fix event multiplexing for exclusive groups - [arm64] firmware: xilinx: fix out-of-bounds access - erofs: fix setting up pcluster for temporary pages - erofs: derive atime instead of leaving it empty - ext4: correctly report "not supported" for {usr,grp}jquota when !CONFIG_QUOTA - ext4: unlock xattr_sem properly in ext4_inline_data_truncate() - btrfs: fix potential overflow in cluster_pages_for_defrag on 32bit arch - btrfs: ref-verify: fix memory leak in btrfs_ref_tree_mod - btrfs: fix min reserved size calculation in merge_reloc_root - btrfs: dev-replace: fail mount if we don't have replace item with target device - [arm64] KVM: Don't hide ID registers from userspace - [x86] thunderbolt: Fix memory leak if ida_simple_get() fails in enumerate_services() - [x86] thunderbolt: Add the missed ida_simple_remove() in ring_request_msix() - block: add a return value to set_capacity_revalidate_and_notify - loop: Fix occasional uevent drop - uio: Fix use-after-free in uio_unregister_device() - Revert "usb: musb: convert to devm_platform_ioremap_resource_byname" - usb: cdc-acm: Add DISABLE_ECHO for Renesas USB Download mode - [x86] usb: typec: ucsi: Report power supply changes - virtio: virtio_console: fix DMA memory allocation for rproc serial - futex: Don't enable IRQs unconditionally in put_pi_state() - jbd2: fix up sparse warnings in checkpoint code - bootconfig: Extend the magic check range to the preceding 3 bytes - mm/compaction: count pages and stop correctly during page isolation - mm/compaction: stop isolation if too many pages are isolated and we have pages to migrate - mm/slub: fix panic in slab_alloc_node() - mm/vmscan: fix NR_ISOLATED_FILE corruption on 64-bit - mm/gup: use unpin_user_pages() in __gup_longterm_locked() - Revert "kernel/reboot.c: convert simple_strtoul to kstrtoint" - reboot: fix overflow parsing reboot cpu number - hugetlbfs: fix anon huge page migration race - ocfs2: initialize ip_next_orphan - hwmon: (amd_energy) modify the visibility of the counters (CVE-2020-12912) - selinux: Fix error return code in sel_ib_pkey_sid_slow() - io_uring: round-up cq size before comparing with rounded sq size - [riscv64] gpio: sifive: Fix SiFive gpio probe - gpio: pcie-idio-24: Fix irq mask when masking - gpio: pcie-idio-24: Fix IRQ Enable Register value - gpio: pcie-idio-24: Enable PEX8311 interrupts - [arm64] mmc: sdhci-of-esdhc: Handle pulse width detection erratum for more SoCs - don't dump the threads that had been already exiting when zapped. - [x86] drm/i915: Correctly set SFC capability for video engines - [x86] drm/gma500: Fix out-of-bounds access to struct drm_device.vblank[] - NFSv4.2: fix failure to unregister shrinker - pinctrl: amd: use higher precision for 512 RtcClk - pinctrl: amd: fix incorrect way to disable debounce filter - swiotlb: fix "x86: Don't panic if can not alloc buffer for swiotlb" - cpufreq: Introduce governor flags - cpufreq: Introduce CPUFREQ_GOV_STRICT_TARGET - cpufreq: Add strict_target to struct cpufreq_policy - cpufreq: intel_pstate: Take CPUFREQ_GOV_STRICT_TARGET into account - ethtool: netlink: add missing netdev_features_change() call - IPv6: Set SIT tunnel hard_header_len to zero - [s390x] net/af_iucv: fix null pointer dereference on shutdown - net: udp: fix IP header access and skb lookup on Fast/frag0 UDP GRO - net: udp: fix UDP header access on Fast/frag0 UDP GRO - net: Update window_clamp if SOCK_RCVBUF is set - tipc: fix memory leak in tipc_topsrv_start() - devlink: Avoid overwriting port attributes of registered port - tunnels: Fix off-by-one in lower MTU bounds for ICMP/ICMPv6 replies - [powerpc*] 603: Always fault when _PAGE_ACCESSED is not set - null_blk: Fix scheduling in atomic with zoned mode - Convert trailing spaces and periods in path components [ Uwe Kleine-König ] * [amd64] Enable SND_SOC_AMD_ACP3x, SND_SOC_AMD_RENOIR and SND_SOC_AMD_RENOIR_MACH (Closes: #973252) * [arm64] Add device tree for Kobol helios64 from rockchip next branch. [ John L. Villalovos ] * [arm64] NUMA: Kconfig: Increase NODES_SHIFT to 4 [ Salvatore Bonaccorso ] * [rt] Refresh "signals: Allow rt tasks to cache one sigqueue struct" * [armhf] dts: sun8i: a83t: Enable both RGMII RX/TX delay on Ethernet PHY (Closes: #973369) * Bump ABI to 3 -- Salvatore Bonaccorso Thu, 19 Nov 2020 08:19:18 +0100 linux (5.9.6-1) unstable; urgency=medium * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.9.2 - [powerpc*] ibmveth: Switch order of ibmveth_helper calls. - [powerpc*] ibmveth: Identify ingress large send packets. - cxgb4: handle 4-tuple PEDIT to NAT mode translation - ipv4: Restore flowi4_oif update before call to xfrm_lookup_route - mlx4: handle non-napi callers to napi_poll - net: dsa: microchip: fix race condition - net: fec: Fix phy_device lookup for phy_reset_after_clk_enable() - net: fec: Fix PHY init after phy_reset_after_clk_enable() - net: fix pos incrementment in ipv6_route_seq_next - net: ipa: skip suspend/resume activities if not set up - net: sched: Fix suspicious RCU usage while accessing tcf_tunnel_info - net/smc: fix use-after-free of delayed events - net/smc: fix valid DMBE buffer sizes - tipc: fix NULL pointer dereference in tipc_named_rcv - tipc: fix the skb_unshare() in tipc_buf_append() - socket: fix option SO_TIMESTAMPING_NEW - socket: don't clear SOCK_TSTAMP_NEW when SO_TIMESTAMPNS is disabled - can: m_can_platform: don't call m_can_class_suspend in runtime suspend - can: j1935: j1939_tp_tx_dat_new(): fix missing initialization of skbcnt - net: j1939: j1939_session_fresh_new(): fix missing initialization of skbcnt - binder: fix UAF when releasing todo list (CVE-2020-0423) - ALSA: bebob: potential info leak in hwdep_read() - ALSA: hda: fix jack detection with Realtek codecs when in D3 - ALSA: hda/hdmi: fix incorrect locking in hdmi_pcm_close - tipc: re-configure queue limit for broadcast link - tipc: fix incorrect setting window for bcast link - ibmvnic: save changed mac address to adapter->mac_addr - icmp: randomize the global rate limiter - net: ftgmac100: Fix Aspeed ast2600 TX hang issue - net: hdlc: In hdlc_rcv, check to make sure dev is an HDLC device - net: hdlc_raw_eth: Clear the IFF_TX_SKB_SHARING flag after calling ether_setup - net: Properly typecast int values to set sk_max_pacing_rate - net/sched: act_ct: Fix adding udp port mangle operation - net/sched: act_tunnel_key: fix OOB write in case of IPv6 ERSPAN tunnels - netsec: ignore 'phy-mode' device property on ACPI systems - nexthop: Fix performance regression in nexthop deletion - nfc: Ensure presence of NFC_ATTR_FIRMWARE_NAME attribute in nfc_genl_fw_download() - r8169: fix operation under forced interrupt threading - tcp: fix to update snd_wl1 in bulk receiver fast path - net: ethernet: mtk-star-emac: select REGMAP_MMIO - net/sched: act_gate: Unlock ->tcfa_lock in tc_setup_flow_action() - ixgbe: fix probing of multi-port devices with one MDIO - net: openvswitch: fix to make sure flow_lookup() is not preempted - sfc: move initialisation of efx->filter_sem to efx_init_struct() - ALSA: hda - Don't register a cb func if it is registered already - ALSA: hda - Fix the return value if cb func is already registered - ALSA: usb-audio: Line6 Pod Go interface requires static clock rate quirk - ALSA: hda/realtek - The front Mic on a HP machine doesn't work - ALSA: hda/realtek - set mic to auto detect on a HP AIO machine - ALSA: hda/realtek - Add mute Led support for HP Elitebook 845 G7 - ALSA: hda/realtek: Enable audio jacks of ASUS D700SA with ALC887 - cifs: remove bogus debug code - cifs: Return the error from crypt_message when enc/dec key not found. - SMB3: Resolve data corruption of TCP server info fields - SMB3.1.1: Fix ids returned in POSIX query dir - smb3: do not try to cache root directory if dir leases not supported - smb3: fix stat when special device file and mounted with modefromsid - [arm64] Make use of ARCH_WORKAROUND_1 even when KVM is not enabled - [x86] KVM: nVMX: Morph notification vector IRQ on nested VM-Enter to pending PI - [x86] KVM: nVMX: Reset the segment cache when stuffing guest segs - [x86] KVM: nVMX: Reload vmcs01 if getting vmcs12's pages fails - [x86] KVM: x86/mmu: Commit zap of remaining invalid pages when recovering lpages - [x86] KVM: x86: Intercept LA57 to inject #GP fault when it's reserved - [x86] KVM: SVM: Initialize prev_ga_tag before use - crypto: caam - add xts check for block length equal to zero - crypto: algif_aead - Do not set MAY_BACKLOG on the async path - crypto: caam/qi - add fallback for XTS with more than 8B IV - crypto: caam/qi - add support for more XTS key lengths - crypto: caam/jr - add fallback for XTS with more than 8B IV - crypto: caam/jr - add support for more XTS key lengths - crypto: caam/qi2 - add fallback for XTS with more than 8B IV - crypto: caam/qi2 - add support for more XTS key lengths - RAS/CEC: Fix cec_init() prototype - sched/fair: Fix wrong negative conversion in find_energy_efficient_cpu() - microblaze: fix kbuild redundant file warning - [x86] EDAC/i5100: Fix error handling order in i5100_init_one() - [x86] perf/x86/intel/ds: Fix x86_pmu_stop warning for large PEBS - [x86] x86/fpu: Allow multiple bits in clearcpuid= parameter - irqchip/ti-sci-inta: Fix unsigned comparison to zero - irqchip/ti-sci-intr: Fix unsigned comparison to zero - [arm64] kprobe: add checks for ARMv8.3-PAuth combined instructions - seqlock: Unbreak lockdep - drivers/perf: xgene_pmu: Fix uninitialized resource struct - drivers/perf: thunderx2_pmu: Fix memory resource error handling - sched/fair: Fix wrong cpu selecting from isolated domain - sched/fair: Use dst group while checking imbalance for NUMA balancer - [arm64] perf: Add missing ISB in armv8pmu_enable_counter() - [x86] perf/x86/intel/uncore: Update Ice Lake uncore units - [x86] perf/x86/intel/uncore: Reduce the number of CBOX counters - [x86] perf/x86/intel/uncore: Fix for iio mapping on Skylake Server - [x86] perf/x86/intel/uncore: Fix the scale of the IMC free-running events - [x86] x86/nmi: Fix nmi_handle() duration miscalculation - [amd64] x86/events/amd/iommu: Fix sizeof mismatch - [arm64] pinctrl: qcom: Set IRQCHIP_SET_TYPE_MASKED and IRQCHIP_MASK_ON_SUSPEND flags - [arm64] pinctrl: qcom: Use return value from irq_set_wake() call - [x86] perf/x86: Fix n_pair for cancelled txn - lockdep: Fix usage_traceoverflow - lockdep: Fix lockdep recursion - lockdep: Revert "lockdep: Use raw_cpu_*() for per-cpu variables" - perf/core: Fix race in the perf_mmap_close() function (CVE-2020-14351) - crypto: algif_skcipher - EBUSY on aio should be an error - crypto: ixp4xx - Fix the size used in a 'dma_free_coherent()' call - crypto: picoxcell - Fix potential race condition bug - media: vivid: Fix global-out-of-bounds read in precalculate_color() - crypto: ccree - fix runtime PM imbalance on error - media: hantro: h264: Get the correct fallback reference buffer - media: hantro: postproc: Fix motion vector space allocation - media: ov5640: Correct Bit Div register in clock tree diagram - media: i2c: fix error check on max9286_read call - media: m5mols: Check function pointer in m5mols_sensor_power - fscrypt: restrict IV_INO_LBLK_32 to ino_bits <= 32 - media: uvcvideo: Set media controller entity functions - media: uvcvideo: Silence shift-out-of-bounds warning - media: staging/intel-ipu3: css: Correctly reset some memory - media: omap3isp: Fix memleak in isp_probe - media: i2c: ov5640: Remain in power down for DVP mode unless streaming - media: i2c: ov5640: Separate out mipi configuration from s_power - media: i2c: ov5640: Enable data pins on poweron for DVP mode - media: i2c: max9286: Allocate v4l2_async_subdev dynamically - crypto: sa2ul - fix compiler warning produced by clang - spi: fsi: Handle 9 to 15 byte transfers lengths - spi: fsi: Fix use of the bneq+ sequencer instruction - spi: fsi: Implement restricted size for certain controllers - spi: dw-pci: free previously allocated IRQs if desc->setup() fails - crypto: sa2ul - Select CRYPTO_AUTHENC - crypto: omap-sham - fix digcnt register handling with export/import - crypto: sa2ul - Fix pm_runtime_get_sync() error checking - regmap: debugfs: Fix more error path regressions - hwmon: (pmbus/max34440) Fix status register reads for MAX344{51,60,61} - hwmon: (w83627ehf) Fix a resource leak in probe - crypto: stm32/crc32 - Avoid lock if hardware is already used - crypto: sun8i-ce - handle endianness of t_common_ctl - media: mx2_emmaprp: Fix memleak in emmaprp_probe - media: mtk-mdp: Fix Null pointer dereference when calling list_add - media: tc358743: initialize variable - media: tc358743: cleanup tc358743_cec_isr - nvme: fix error handling in nvme_ns_report_zones - media: rcar-vin: Fix a reference count leak. - media: rockchip/rga: Fix a reference count leak. - media: platform: fcp: Fix a reference count leak. - media: camss: Fix a reference count leak. - media: s5p-mfc: Fix a reference count leak - media: stm32-dcmi: Fix a reference count leak - media: ti-vpe: Fix a missing check and reference count leak - regulator: resolve supply after creating regulator - hwmon: (bt1-pvt) Test sensor power supply on probe - hwmon: (bt1-pvt) Cache current update timeout - hwmon: (bt1-pvt) Wait for the completion with timeout - spi: imx: Fix freeing of DMA channels if spi_bitbang_start() fails - btrfs: add owner and fs_info to alloc_state io_tree - blk-mq: move cancel of hctx->run_work to the front of blk_exit_queue - ath10k: provide survey info as accumulated data - Bluetooth: hci_uart: Cancel init work before unregistering - [arm64,armhf] drm: panel: Fix bus format for OrtusTech COM43H4M85ULC panel - ath6kl: prevent potential array overflow in ath6kl_add_new_sta() - ath9k: Fix potential out of bounds in ath9k_htc_txcompletion_cb() - ath10k: Fix the size used in a 'dma_free_coherent()' call in an error handling path - wcn36xx: Fix reported 802.11n rx_highest rate wcn3660/wcn3680 - [arm64] ASoC: qcom: lpass-platform: fix memory leak - [arm64] ASoC: qcom: lpass-cpu: fix concurrency issue - ath11k: Fix possible memleak in ath11k_qmi_init_service - brcmfmac: check ndev pointer - mwifiex: Do not use GFP_KERNEL in atomic context - [arm64] drm/malidp: Use struct drm_gem_object_funcs.get_sg_table internally - staging: rtl8192u: Do not use GFP_KERNEL in atomic context - drm/gma500: fix error check - scsi: qla4xxx: Fix an error handling path in 'qla4xxx_get_host_stats()' - scsi: qla2xxx: Fix the size used in a 'dma_free_coherent()' call - scsi: qla2xxx: Fix wrong return value in qlt_chk_unresolv_exchg() - scsi: qla2xxx: Fix wrong return value in qla_nvme_register_hba() - scsi: csiostor: Fix wrong return value in csio_hw_prep_fw() - libbpf: Fix unintentional success return code in bpf_object__load - wilc1000: Fix memleak in wilc_sdio_probe - wilc1000: Fix memleak in wilc_bus_probe - rtw88: don't treat NULL pointer as an array - backlight: sky81452-backlight: Fix refcount imbalance on error - staging: wfx: fix frame reordering - staging: emxx_udc: Fix passing of NULL to dma_alloc_coherent() - [x86] VMCI: check return value of get_user_pages_fast() for errors - mm/error_inject: Fix allow_error_inject function signatures. - drm: panel: Fix bpc for OrtusTech COM43H4M85ULC panel - Bluetooth: Clear suspend tasks on unregister - scsi: ufs: Make ufshcd_print_trs() consider UFSHCD_QUIRK_PRDT_BYTE_GRAN - binder: Remove bogus warning on failed same-process transaction - drm/amdgpu: fix max_entries calculation v4 - soundwire: stream: fix NULL/IS_ERR confusion - soundwire: intel: fix NULL/ERR_PTR confusion - tty: hvcs: Don't NULL tty->driver_data until hvcs_cleanup() - pty: do tty_flip_buffer_push without port->lock in pty_write - [x86] pwm: lpss: Fix off by one error in base_unit math in pwm_lpss_prepare() - [x86] pwm: lpss: Add range limit check for the base_unit register value - sfc: don't double-down() filters in ef100_reset() - ath11k: fix a double free and a memory leak - video: fbdev: vga16fb: fix setting of pixclock because a pass-by-value error - video: fbdev: sis: fix null ptr dereference - video: fbdev: radeon: Fix memleak in radeonfb_pci_register - HID: roccat: add bounds checking in kone_sysfs_write_settings() - ath11k: fix uninitialized return in ath11k_spectral_process_data() - drm/msm: Avoid div-by-zero in dpu_crtc_atomic_check() - [arm64,armhf] drm/panfrost: Ensure GPU quirks are always initialised - iomap: Clear page error before beginning a write - iomap: Mark read blocks uptodate in write_begin - Bluetooth: Fix memory leak in read_adv_mon_features() - Bluetooth: Re-order clearing suspend tasks - [armhf] pinctrl: mcp23s08: Fix mcp23x17_regmap initialiser - [armhf] pinctrl: mcp23s08: Fix mcp23x17 precious range - pinctrl: devicetree: Keep deferring even on timeout - [s390x] bpf: Fix multiple tail calls - net/mlx5: Fix uninitialized variable warning - net/mlx5: Don't call timecounter cyc2time directly from 1PPS flow - scsi: mpt3sas: Fix sync irqs - [arm64,armhf] net: stmmac: Fix incorrect location to set real_num_rx|tx_queues - [arm64,armhf] net: stmmac: use netif_tx_start|stop_all_queues() function - xfs: force the log after remapping a synchronous-writes file - [arm64] cpufreq: armada-37xx: Add missing MODULE_DEVICE_TABLE - ASoC: topology: disable size checks for bytes_ext controls if needed - ASoC: tlv320adcx140: Fix digital gain range - nvmem: core: fix missing of_node_put() in of_nvmem_device_get() - dmaengine: ti: k3-udma-glue: fix channel enable functions - Bluetooth: Fix auto-creation of hci_conn at Conn Complete event - xhci: don't create endpoint debugfs entry before ring buffer is set. - [arm64] drm/msm: Fix the a650 hw_apriv check - net: dsa: rtl8366: Check validity of passed VLANs - net: dsa: rtl8366: Refactor VLAN/PVID init - net: dsa: rtl8366: Skip PVID setting if not requested - net: wilc1000: clean up resource in error path of init mon interface - ASoC: tlv320aic32x4: Fix bdiv clock rate derivation - net: dsa: rtl8366rb: Support all 4096 VLANs - ASoC: SOF: control: add size checks for ext_bytes control .put() - ASoC: tas2770: Fix unbalanced calls to pm_runtime - [armhf] spi: omap2-mcspi: Improve performance waiting for CHSTAT - ath11k: Add checked value for ath11k_ahb_remove - ath6kl: wmi: prevent a shift wrapping bug in ath6kl_wmi_delete_pstream_cmd() - drm: rcar-du: Put reference to VSP device - phy: rockchip-dphy-rx0: Include linux/delay.h - dmaengine: dmatest: Check list for emptiness before access its last entry - ASoC: cros_ec_codec: fix kconfig dependency warning for SND_SOC_CROS_EC_CODEC - misc: mic: scif: Fix error handling path - ALSA: seq: oss: Avoid mutex lock for a long-time ioctl - net/mlx5e: IPsec: Use kvfree() for memory allocated with kvzalloc() - [arm*] usb: dwc2: Fix parameter type in function pointer prototype - [arm64,armhf] usb: dwc3: core: Properly default unspecified speed - [arm*] usb: dwc2: Add missing cleanups when usb_add_gadget_udc() fails - rtw88: Fix probe error handling race with firmware loading - rtw88: Fix potential probe error handling race with wow firmware loading - quota: clear padding in v2r1_mem2diskdqb() - [arm*] drm/vc4: crtc: Rework a bit the CRTC state code - ASoC: fsl_sai: Instantiate snd_soc_dai_driver - HID: hid-input: fix stylus battery reporting - tty: hvc: fix link error with CONFIG_SERIAL_CORE_CONSOLE=n - tty: serial: imx: fix link error with CONFIG_SERIAL_CORE_CONSOLE=n - nvmem: core: fix possibly memleak when use nvmem_cell_info_to_nvmem_cell() - [x86] hv: clocksource: Add notrace attribute to read_hv_sched_clock_*() functions - nl80211: fix OBSS PD min and max offset validation - iomap: Use kzalloc to allocate iomap_page - ibmvnic: set up 200GBPS speed - bpf: disallow attaching modify_return tracing functions to other BPF programs - qtnfmac: fix resource leaks on unsupported iftype error return path - pinctrl: aspeed: Use the right pinconf mask - [arm64] iommu/qcom: add missing put_device() call in qcom_iommu_of_xlate() - iio: adc: stm32-adc: fix runtime autosuspend delay when slow polling - net: enic: Cure the enic api locking trainwreck - pinctrl: tigerlake: Fix register offsets for TGL-H variant - serial: 8250: Discard RTS/DTS setting from clock update method - serial: 8250: Skip uninitialized TTY port baud rate update - serial: 8250_dw: Fix clk-notifier/port suspend deadlock - mfd: syscon: Don't free allocated name for regmap_config - mfd: sm501: Fix leaks in probe() - dm: fix missing imposition of queue_limits from dm_wq_work() thread - pinctrl: single: fix pinctrl_spec.args_count bounds check - pinctrl: single: fix debug output when #pinctrl-cells = 2 - staging: rtl8712: Fix enqueue_reorder_recvframe() - ASoC: wm_adsp: Pass full name to snd_ctl_notify - iwlwifi: mvm: split a print to avoid a WARNING in ROC - iwlwifi: dbg: remove no filter condition - iwlwifi: dbg: run init_cfg function once per driver load - usb: gadget: f_ncm: fix ncm_bitrate for SuperSpeed and above. - usb: gadget: u_serial: clear suspended flag when disconnecting - usb: gadget: u_ether: enable qmult on SuperSpeed Plus as well - bus: mhi: core: Fix the building of MHI module - ocxl: fix kconfig dependency warning for OCXL - nl80211: fix non-split wiphy information - [arm*] usb: dwc2: Fix INTR OUT transfers in DDMA mode. - scsi: target: tcmu: Fix warning: 'page' may be used uninitialized - scsi: be2iscsi: Fix a theoretical leak in beiscsi_create_eqs() - dmaengine: ioat: Allocate correct size for descriptor chunk - staging: qlge: fix build breakage with dumping enabled - ipmi_si: Fix wrong return value in try_smi_init() - tracing: Fix parse_synth_field() error handling - staging: wfx: fix BA sessions for older firmwares - [x86] platform/x86: mlx-platform: Remove PSU EEPROM configuration - dm: fix request-based DM to not bounce through indirect dm_submit_bio - mwifiex: fix double free - [arm64,armhf] drm/panfrost: increase readl_relaxed_poll_timeout values - drm/amdgpu: Fix invalid number of character '{' in amdgpu_acpi_init - ipvs: clear skb->tstamp in forwarding path - bpf, sockmap: Remove skb_orphan and let normal skb_kfree do cleanup - netfilter: nf_log: missing vlan offload tag and proto - mm/swapfile.c: fix potential memory leak in sys_swapon - mm: memcg/slab: fix racy access to page->mem_cgroup in mem_cgroup_from_obj() - mm/memcg: fix device private memcg accounting - mm/mmap.c: replace do_brk with do_brk_flags in comment of insert_vm_struct() - mm/page_alloc.c: fix freeing non-compound pages - mm, oom_adj: don't loop through tasks in __set_oom_adj when not necessary - fs: fix NULL dereference due to data race in prepend_path() - tracing: Handle synthetic event array field type checking correctly - i3c: master add i3c_master_attach_boardinfo to preserve boardinfo - IB/mlx4: Fix starvation in paravirt mux/demux - IB/mlx4: Adjust delayed work when a dup is observed - [powerpc*] pseries: Fix missing of_node_put() in rng_init() - [powerpc*] icp-hv: Fix missing of_node_put() in success path - rcu/tree: Force quiescent state on callback overload - rcutorture: Properly set rcu_fwds for OOM handling - refperf: Avoid null pointer dereference when buf fails to allocate - RDMA/ucma: Fix locking for ctx->events_reported - RDMA/ucma: Add missing locking around rdma_leave_multicast() - mtd: lpddr: fix excessive stack usage with clang - RDMA/hns: Add a check for current state before modifying QP - RDMA/umem: Fix signature of stub ib_umem_find_best_pgsz() - [powerpc*] pseries: explicitly reschedule during drmem_lmb list traversal - [powerpc*] pseries/drmem: don't cache node id in drmem_lmb struct - RDMA/mlx5: Fix potential race between destroy and CQE poll - mtd: mtdoops: Don't write panic data twice - perf tools: Make GTK2 support opt-in - [armel,armhf] 9007/1: l2c: fix prefetch bits init in L2X0_AUX_CTRL using DT values - xfs: fix finobt btree block recovery ordering - m68knommu: include SDHC support only when hardware has it - xfs: limit entries returned when counting fsmap records - xfs: fix deadlock and streamline xfs_getfsmap performance - nfs: add missing "posix" local_lock constant table definition - xfs: fix high key handling in the rt allocator's query_range function - RDMA/rtrs-srv: Incorporate ib_register_client into rtrs server init - RDMA/core: Delete function indirection for alloc/free kernel CQ - RDMA: Allow fail of destroy CQ - RDMA: Change XRCD destroy return value - RDMA: Restore ability to return error for destroy WQ - RDMA/umem: Fix ib_umem_find_best_pgsz() for mappings that cross a page boundary - RDMA/umem: Prevent small pages from being returned by ib_umem_find_best_pgsz() - RDMA/qedr: Fix qp structure memory leak - RDMA/qedr: Fix doorbell setting - RDMA/qedr: Fix use of uninitialized field - RDMA/qedr: Fix return code if accept is called on a destroyed qp - RDMA/qedr: Fix inline size returned for iWARP - [powerpc*] pseries/svm: Allocate SWIOTLB buffer anywhere in memory - [powerpc*] watchpoint: Fix quadword instruction handling on p10 predecessors - [powerpc*] watchpoint: Fix handling of vector instructions - [powerpc*] watchpoint: Add hw_len wherever missing - [powerpc*] book3s64/hash/4k: Support large linear mapping range with 4K - [powerpc*] 64s/radix: Fix mm_cpumask trimming race vs kthread_use_mm - [powerpc*] papr_scm: Fix warning triggered by perf_stats_show() - RDMA/cma: Combine cma_ndev_work with cma_work - RDMA/cma: Remove dead code for kernel rdmacm multicast - RDMA/cma: Consolidate the destruction of a cma_multicast in one place - RDMA/cma: Fix use after free race in roce multicast join - perf intel-pt: Fix "context_switch event has no tid" error - perf metricgroup: Fix uncore metric expressions - RDMA/qedr: Fix resource leak in qedr_create_qp - RDMA/hns: Set the unsupported wr opcode - RDMA/mlx5: Use set_mkc_access_pd_addr_fields() in reg_create() - RDMA/mlx5: Make mkeys always owned by the kernel's PD when not enabled - RDMA/mlx5: Disable IB_DEVICE_MEM_MGT_EXTENSIONS if IB_WR_REG_MR can't work - i40iw: Add support to make destroy QP synchronous - perf stat: Skip duration_time in setup_system_wide - RDMA/hns: Add check for the validity of sl configuration - RDMA/hns: Solve the overflow of the calc_pg_sz() - RDMA/hns: Fix the wrong value of rnr_retry when querying qp - RDMA/hns: Fix configuration of ack_req_freq in QPC - RDMA/hns: Fix missing sq_sig_type when querying QP - RDMA/mlx5: Fix type warning of sizeof in __mlx5_ib_alloc_counters() - mtd: hyperbus: hbmc-am654: Fix direct mapping setup flash access - overflow: Include header file with SIZE_MAX declaration - mtd: parsers: bcm63xx: Do not make it modular - RDMA/ipoib: Set rtnl_link_ops for ipoib interfaces - [powerpc*] 64: fix irq replay missing preempt - [powerpc*] 64: fix irq replay pt_regs->softe value - [powerpc*] perf: Exclude pmc5/6 from the irrelevant PMU group constraints - [powerpc*] perf/hv-gpci: Fix starting index value - perf stat: Fix out of bounds CPU map access when handling armv8_pmu events - i3c: master: Fix error return in cdns_i3c_master_probe() - [powerpc*] security: Fix link stack flush instruction - [powerpc*] book3s64/radix: Make radix_mem_block_size 64bit - [powerpc*] papr_scm: Add PAPR command family to pass-through command-set - [powerpc*] cpufreq: powernv: Fix frame-size-overflow in powernv_cpufreq_reboot_notifier - IB/rdmavt: Fix sizeof mismatch - RDMA/rxe: Fix skb lifetime in rxe_rcv_mcast_pkt() - f2fs: reject CASEFOLD inode flag without casefold feature - um: vector: Use GFP_ATOMIC under spin lock - um: time-travel: Fix IRQ handling in time_travel_handle_message() - thermal: core: Adding missing nlmsg_free() in thermal_genl_sampling_temp() - perf trace: Fix off by ones in memset() after realloc() in arches using libaudit - f2fs: wait for sysfs kobject removal before freeing f2fs_sb_info - afs: Fix rapid cell addition/removal by not using RCU on cells tree - afs: Fix cell refcounting by splitting the usage counter - afs: Fix cell purging with aliases - afs: Fix cell removal - RDMA/rxe: Handle skb_clone() failure in rxe_recv.c - mm/page_owner: change split_page_owner to take a count - mm/huge_memory: fix split assumption of page size - mm: fix a race during THP splitting - lib/crc32.c: fix trivial typo in preprocessor condition - ramfs: fix nommu mmap with gaps in the page cache - rapidio: fix error handling path - rapidio: fix the missed put_device() for rio_mport_add_riodev - clk: meson: axg-audio: separate axg and g12a regmap tables - rtc: ds1307: Clear OSF flag on DS1388 when setting time - clk: meson: g12a: mark fclk_div2 as critical - PCI: designware-ep: Fix the Header Type check - PCI: aardvark: Fix compilation on s390 - PCI: aardvark: Check for errors from pci_bridge_emul_init() call - PCI: iproc: Set affinity mask on MSI interrupts - PCI/IOV: Mark VFs as not implementing PCI_COMMAND_MEMORY - vfio: add a singleton check for vfio_group_pin_pages - [s390x] pci: Mark all VFs as not implementing PCI_COMMAND_MEMORY - vfio/pci: Decouple PCI_COMMAND_MEMORY bit checks from is_virtfn - vfio: fix a missed vfio group put in vfio_pin_pages - [x86,arm64] vfio/type1: fix dirty bitmap calculation in vfio_dma_rw - nfsd: Cache R, RW, and W opens separately - [x86] PCI: hv: Fix hibernation in case interrupts are not re-created - module: statically initialize init section freeing data - clk: at91: clk-main: update key before writing AT91_CKGR_MOR - clk: bcm2835: add missing release if devm_clk_hw_register fails - kbuild: deb-pkg: do not build linux-headers package if CONFIG_MODULES=n - watchdog: Fix memleak in watchdog_cdev_register - watchdog: Use put_device on error - watchdog: sp5100: Fix definition of EFCH_PM_DECODEEN3 - clk: at91: sam9x60: support only two programmable clocks - svcrdma: fix bounce buffers for unaligned offsets and multiple pages - ext4: fix dead loop in ext4_mb_new_blocks - ext4: discard preallocations before releasing group lock - ext4: disallow modifying DAX inode flag if inline_data has been set - ext4: limit entries returned when counting fsmap records - vfio/pci: Clear token on bypass registration failure - [x86,arm64] vfio iommu type1: Fix memory leak in vfio_iommu_type1_pin_pages - clk: qcom: gdsc: Keep RETAIN_FF bit set if gdsc is already on - clk: imx8mq: Fix usdhc parents order - SUNRPC: fix copying of multiple pages in gss_read_proxy_verf() - NFSv4.2: Fix NFS4ERR_STALE error when doing inter server copy - platform/chrome: cros_ec_typec: Send enum values to usb_role_switch_set_role() - platform/chrome: cros_ec_lightbar: Reduce ligthbar get version command - Input: elants_i2c - fix typo for an attribute to show calibration count - Input: imx6ul_tsc - clean up some errors in imx6ul_tsc_resume() - Input: stmfts - fix a & vs && typo - Input: ep93xx_keypad - fix handling of platform_get_irq() error - Input: omap4-keypad - fix handling of platform_get_irq() error - Input: twl4030_keypad - fix handling of platform_get_irq() error - Input: sun4i-ps2 - fix handling of platform_get_irq() error - [x86] KVM: x86: emulating RDPID failure shall return #UD rather than #GP - [x86] KVM: nSVM: CR3 MBZ bits are only 63:52 - scsi: bfa: Fix error return in bfad_pci_init() - [arm64] mm: use single quantity to represent the PA to VA translation - bpf: Enforce id generation for all may-be-null register type - net: dsa: seville: the packet buffer is 2 megabits, not megabytes - netfilter: conntrack: connection timeout after re-register - netfilter: ebtables: Fixes dropping of small packets in bridge nat - vdpa/mlx5: Make use of a specific 16 bit endianness API - vdpa/mlx5: Fix failure to bring link up - vdpa/mlx5: Setup driver only if VIRTIO_CONFIG_S_DRIVER_OK - netfilter: nf_fwd_netdev: clear timestamp in forwarding path - [arm64] soc: xilinx: Fix error code in zynqmp_pm_probe() - [arm64] arm64: dts: meson: vim3: correct led polarity - [armhf] dts: sun8i: r40: bananapi-m2-ultra: Fix dcdc1 regulator - [arm64] dts: allwinner: h5: remove Mali GPU PMU module - [armhf] memory: omap-gpmc: Fix a couple off by ones - [armhf] memory: omap-gpmc: Fix build error without CONFIG_OF - [arm64] dts: qcom: msm8992: Fix UART interrupt property - [arm64] dts: qcom: sdm845-db845c: Fix hdmi nodes - [arm64] dts: qcom: sm8150: fix up primary USB nodes - [arm64] dts: qcom: sc7180: Fix the LLCC base register size - memory: fsl-corenet-cf: Fix handling of platform_get_irq() error - firmware: arm_scmi: Fix NULL pointer dereference in mailbox_chan_free - [arm64] dts: mt8173-elm: fix supported values for regulator-allowed-modes of da9211 - [arm64] dts: qcom: sm8250: Rename UART2 node to UART12 - dmaengine: ti: k3-udma-glue: Fix parameters for rx ring pair request - [arm64] dts: imx8mq: Add missing interrupts to GPC - [arm64] dts: qcom: sc7180: Drop flags on mdss irqs - [arm64] dts: sdm845: Fixup OPP table for all qup devices - [arm64] dts: qcom: msm8916: Remove one more thermal trip point unit name - [arm64] dts: qcom: pm8916: Remove invalid reg size from wcd_codec - [arm64] dts: qcom: msm8916: Fix MDP/DSI interrupts - [arm64] dts: mt8173: elm: Fix nor_flash node property - [arm64] dts: ti: k3-j721e: Rename mux header and update macro names - [arm64] dts: actions: limit address range for pinctrl node - lightnvm: fix out-of-bounds write to array devices->info[] - [powerpc*] powernv/dump: Fix race while processing OPAL dump - [powerpc*] 64s: Remove TM from Power10 features - [powerpc*] pseries: Avoid using addr_to_pfn in real mode - nvmet: fix uninitialized work for zero kato - nvmet: limit passthru MTDS by BIO_MAX_PAGES - [x86] KVM: ioapic: break infinite recursion on lazy EOI (CVE-2020-27152) - NTB: hw: amd: fix an issue about leak system resources - sched/features: Fix !CONFIG_JUMP_LABEL case - perf: correct SNOOPX field offset - random32: make prandom_u32() output unpredictable - i2c: core: Restore acpi_walk_dep_device_list() getting called after registering the ACPI i2c devs - md/bitmap: fix memory leak of temporary bitmap - block: ratelimit handle_bad_sector() message - [x86] dumpstack: Fix misleading instruction pointer error message - crypto: ccp - fix error handling - [x86] asm: Replace __force_order with a memory clobber - [x86] mce: Add Skylake quirk for patrol scrub reported errors - media: firewire: fix memory leak - media: ati_remote: sanity check for both endpoints - media: st-delta: Fix reference count leak in delta_run_work - media: sti: Fix reference count leaks - media: exynos4-is: Fix several reference count leaks due to pm_runtime_get_sync - media: exynos4-is: Fix a reference count leak due to pm_runtime_get_sync - media: exynos4-is: Fix a reference count leak - media: vsp1: Fix runtime PM imbalance on error - media: platform: s3c-camif: Fix runtime PM imbalance on error - media: platform: sti: hva: Fix runtime PM imbalance on error - media: bdisp: Fix runtime PM imbalance on error - media: media/pci: prevent memory leak in bttv_probe - [x86] mce: Annotate mce_rd/wrmsrl() with noinstr - crypto: hisilicon - fixed memory allocation error - spi: fsi: Fix clock running too fast - blk-mq: always allow reserved allocation in hctx_may_queue - [x86] mce: Make mce_rdmsrl() panic on an inaccessible MSR - media: uvcvideo: Ensure all probed info is returned to v4l2 - mmc: sdio: Check for CISTPL_VERS_1 buffer size - media: saa7134: avoid a shift overflow - media: atomisp: fix memleak in ia_css_stream_create - media: venus: fixes for list corruption - notifier: Fix broken error handling pattern - fs: dlm: fix configfs memory leak - media: venus: core: Fix error handling in probe - media: venus: core: Fix runtime PM imbalance in venus_probe - ntfs: add check for mft record size in superblock - ip_gre: set dev->hard_header_len and dev->needed_headroom properly - mac80211: handle lack of sband->bitrates in rates - staging: wfx: fix handling of MMIC error - libbpf: Close map fd if init map slots failed - bpf: Use raw_spin_trylock() for pcpu_freelist_push/pop in NMI - PM: hibernate: remove the bogus call to get_gendisk() in software_resume() - scsi: mvumi: Fix error return in mvumi_io_attach() - scsi: target: core: Add CONTROL field for trace events - [amd64] mic: vop: copy data to kernel space then write to io memory - [amd64] misc: vop: add round_up(x,4) for vring_size to avoid kernel panic - [arm64,armhf] usb: dwc3: Add splitdisable quirk for Hisilicon Kirin Soc - usb: gadget: function: printer: fix use-after-free in __lock_acquire - rtw88: pci: Power cycle device during shutdown - udf: Limit sparing table size - udf: Avoid accessing uninitialized data on failed inode read - rtw88: increse the size of rx buffer size - USB: cdc-acm: handle broken union descriptors - [arm64,armhf] usb: dwc3: simple: add support for Hikey 970 - can: flexcan: flexcan_chip_stop(): add error handling and propagate error value - HID: multitouch: Lenovo X1 Tablet Gen3 trackpoint and buttons - ath9k: hif_usb: fix race condition between usb_get_urb() and usb_kill_anchored_urbs() - [arm64,armhf] drm/panfrost: add Amlogic GPU integration quirks - [arm64,armhf] drm/panfrost: add amlogic reset quirk callback - [arm64,armhf] drm/panfrost: add support for vendor quirk - bpf: Limit caller's stack depth 256 for subprogs with tailcalls - dma-direct: Fix potential NULL pointer dereference - misc: rtsx: Fix memory leak in rtsx_pci_probe - reiserfs: only call unlock_new_inode() if I_NEW - opp: Prevent memory leak in dev_pm_opp_attach_genpd() - xfs: make sure the rt allocator doesn't run off the end - usb: ohci: Default to per-port over-current protection - drm: fix double free for gbo in drm_gem_vram_init and drm_gem_vram_create - Bluetooth: Only mark socket zapped after unlocking - drm/msm/a6xx: fix a potential overflow issue - drm/xlnx: Use devm_drm_dev_alloc - iomap: fix WARN_ON_ONCE() from unprivileged users - scsi: ibmvfc: Fix error return in ibmvfc_probe() - scsi: qla2xxx: Warn if done() or free() are called on an already freed srb - soundwire: cadence: fix race condition between suspend and Slave device alerts - brcmsmac: fix memory leak in wlc_phy_attach_lcnphy - rtl8xxxu: prevent potential memory leak - Fix use after free in get_capset_info callback. - HID: ite: Add USB id match for Acer One S1003 keyboard dock - scsi: qedf: Return SUCCESS if stale rport is encountered - scsi: qedi: Mark all connections for recovery on link down event - scsi: qedi: Protect active command list to avoid list corruption - scsi: qedi: Fix list_del corruption while removing active I/O - fbmem: add margin check to fb_check_caps() - tty: ipwireless: fix error handling - Bluetooth: btusb: Fix memleak in btusb_mtk_submit_wmt_recv_urb - ipvs: Fix uninit-value in do_ip_vs_set_ctl() - reiserfs: Fix memory leak in reiserfs_parse_options() - [s390x] qeth: strictly order bridge address events - mwifiex: don't call del_timer_sync() on uninitialized timer - ALSA: hda/ca0132 - Add AE-7 microphone selection commands. - ALSA: hda/ca0132 - Add new quirk ID for SoundBlaster AE-7. - [x86] ASoC: SOF: Add topology filename override based on dmi data match - [x86] ASoC: Intel: sof_rt5682: override quirk data for tgl_max98373_rt5682 - scsi: smartpqi: Avoid crashing kernel for controller issues - brcm80211: fix possible memleak in brcmf_proto_msgbuf_attach - usb: core: Solve race condition in anchor cleanup functions - soundwire: intel: reinitialize IP+DSP in .prepare(), but only when resuming - scsi: ufs: ufs-qcom: Fix race conditions caused by ufs_qcom_testbus_config() - dmaengine: dw: Add DMA-channels mask cell support - dmaengine: dw: Activate FIFO-mode for memory peripherals only - drm/hisilicon: Code refactoring for hibmc_drv_de - [arm64,armhf] drm/panfrost: perfcnt: fix ref count leak in panfrost_perfcnt_enable_locked - ath10k: check idx validity in __ath10k_htt_rx_ring_fill_n() - [s390x] qeth: don't let HW override the configured port role - tty: serial: lpuart: fix lpuart32_write usage - tty: serial: fsl_lpuart: fix lpuart32_poll_get_char - usb: gadget: bcm63xx_udc: fix up the error of undeclared usb_debug_root - usb: cdc-acm: add quirk to blacklist ETAS ES58X devices - USB: cdc-wdm: Make wdm_flush() interruptible and add wdm_fsync(). - usb: cdns3: gadget: free interrupt after gadget has deleted - eeprom: at25: set minimum read/write access stride to 1 - usb: gadget: f_ncm: allow using NCM in SuperSpeed Plus gadgets. https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.9.3 - cpufreq: Improve code around unlisted freq check - netfilter: nftables_offload: KASAN slab-out-of-bounds Read in nft_flow_rule_create - io_uring: allow timeout/poll/files killing to take task into account - io_uring: move dropping of files into separate helper - io_uring: stash ctx task reference for SQPOLL - io_uring: unconditionally grab req->task - io_uring: return cancelation status from poll/timeout/files handlers - io_uring: enable task/files specific overflow flushing - io_uring: don't rely on weak ->files references - io_uring: reference ->nsproxy for file table commands - io_wq: Make io_wqe::lock a raw_spinlock_t - io-wq: fix use-after-free in io_wq_worker_running - io_uring: no need to call xa_destroy() on empty xarray - io_uring: Fix use of XArray in __io_uring_files_cancel - io_uring: Fix XArray usage in io_uring_add_task_file - io_uring: Convert advanced XArray uses to the normal API - scripts/setlocalversion: make git describe output more reliable - [arm64] efi/arm64: libstub: Deal gracefully with EFI_RNG_PROTOCOL failure - fs/kernel_read_file: Remove FIRMWARE_EFI_EMBEDDED enum - [arm64] Run ARCH_WORKAROUND_1 enabling code on all CPUs - [arm64] Run ARCH_WORKAROUND_2 enabling code on all CPUs - [arm64] link with -z norelro regardless of CONFIG_RELOCATABLE - [x86] PCI: Fix intel_mid_pci.c build error when ACPI is not enabled - efivarfs: Replace invalid slashes with exclamation marks in dentries. - bnxt_en: Check abort error state in bnxt_open_nic(). - bnxt_en: Fix regression in workqueue cleanup logic in bnxt_remove_one(). - bnxt_en: Invoke cancel_delayed_work_sync() for PFs also. - bnxt_en: Re-write PCI BARs after PCI fatal error. - bnxt_en: Send HWRM_FUNC_RESET fw command unconditionally. - cxgb4: set up filter action after rewrites - gtp: fix an use-before-init in gtp_newlink() - ibmveth: Fix use of ibmveth in a bridge. - ibmvnic: fix ibmvnic_set_mac - mlxsw: core: Fix memory leak on module removal - mlxsw: Only advertise link modes supported by both driver and device - netem: fix zero division in tabledist - net: hns3: Clear the CMDQ registers before unmapping BAR region - net: ipa: command payloads already mapped - net/sched: act_mpls: Add softdep on mpls_gso.ko - r8169: fix issue with forced threading in combination with shared interrupts - ravb: Fix bit fields checking in ravb_hwtstamp_get() - tcp: Prevent low rmem stalls with SO_RCVLOWAT. - tipc: fix memory leak caused by tipc_buf_append() - net/smc: fix invalid return code in smcd_new_buf_create() - net/smc: fix suppressed return code - net: protect tcf_block_unbind with block lock - erofs: avoid duplicated permission check for "trusted." xattrs - [x86] arch/x86/amd/ibs: Fix re-arming IBS Fetch - [x86] traps: Fix #DE Oops message regression - [x86] xen: disable Firmware First mode for correctable memory errors - PCI: aardvark: Fix initialization with old Marvell's Arm Trusted Firmware - ata: ahci: mvebu: Make SATA PHY optional for Armada 3720 - fuse: fix page dereference after free - bpf: Fix comment for helper bpf_current_task_under_cgroup() - evm: Check size of security.evm before using it - p54: avoid accessing the data mapped to streaming DMA - cxl: Rework error message for incompatible slots - RDMA/addr: Fix race with netevent_callback()/rdma_addr_cancel() - mtd: lpddr: Fix bad logic in print_drs_error - [x86] drm/i915/gem: Serialise debugfs i915_gem_objects with ctx->mutex - serial: qcom_geni_serial: To correct QUP Version detection logic - serial: pl011: Fix lockdep splat when handling magic-sysrq interrupt - PM: runtime: Fix timer_expires data type on 32-bit arches - ata: sata_rcar: Fix DMA boundary mask - mm: mark async iocb read as NOWAIT once some data has been copied - xen/gntdev.c: Mark pages as dirty - io_uring: don't reuse linked_timeout - misc: rtsx: do not setting OC_POWER_DOWN reg in rtsx_pci_init_ocp() - phy: marvell: comphy: Convert internal SMCC firmware return codes to errno https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.9.4 - [x86,powerpc] Rename memcpy_mcsafe() to copy_mc_to_{user, kernel}() - [x86] copy_mc: Introduce copy_mc_enhanced_fast_string() https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.9.5 - xen/events: avoid removing an event channel while handling it (CVE-2020-27675) - xen/events: add a proper barrier to 2-level uevent unmasking (CVE-2020-27673) - xen/events: fix race in evtchn_fifo_unmask() (CVE-2020-27673) - xen/events: add a new "late EOI" evtchn framework (CVE-2020-27673) - xen/blkback: use lateeoi irq binding (CVE-2020-27673) - xen/netback: use lateeoi irq binding (CVE-2020-27673) - xen/scsiback: use lateeoi irq binding (CVE-2020-27673) - xen/pvcallsback: use lateeoi irq binding (CVE-2020-27673) - xen/pciback: use lateeoi irq binding (CVE-2020-27673) - xen/events: switch user event channels to lateeoi model (CVE-2020-27673) - xen/events: use a common cpu hotplug hook for event channels (CVE-2020-27673) - xen/events: defer eoi in case of excessive number of events (CVE-2020-27673) - xen/events: block rogue events for some time (CVE-2020-27673) - [arm64] tee: client UUID: Skip REE kernel login method as well - [x86] unwind/orc: Fix inactive tasks with stack pointer in %sp on GCC 10 compiled kernels - [x86] alternative: Don't call text_poke() in lazy TLB mode - RDMA/mlx5: Fix devlink deadlock on net namespace deletion - afs: Fix a use after free in afs_xattr_get_acl() - afs: Fix afs_launder_page to not clear PG_writeback - RDMA/qedr: Fix memory leak in iWARP CM - ata: sata_nv: Fix retrieving of active qcs - [arm64] efi: increase EFI PE/COFF header padding to 64 KB - afs: Fix to take ref on page when PG_private is set - afs: Fix page leak on afs_write_begin() failure - afs: Fix where page->private is set during write - afs: Wrap page->private manipulations in inline functions - afs: Alter dirty range encoding in page->private - afs: Fix afs_invalidatepage to adjust the dirty region - afs: Fix dirty-region encoding on ppc32 with 64K pages - lockdep: Fix preemption WARN for spurious IRQ-enable - [arm64,armhf] usb: host: ehci-tegra: Fix error handling in tegra_ehci_probe() - futex: Fix incorrect should_fail_futex() handling - [powerpc*] vmemmap: Fix memory leak with vmemmap list allocation failures. - [powerpc*] powernv/smp: Fix spurious DBG() warning - RDMA/core: Change how failing destroy is handled during uobj abort - f2fs: allocate proper size memory for zstd decompress - mm: fix exec activate_mm vs TLB shootdown and lazy tlb switching race - [powerpc*] select ARCH_WANT_IRQS_OFF_ACTIVATE_MM - [sparc64] remove mm_cpumask clearing to fix kthread_use_mm race - f2fs: add trace exit in exception path - f2fs: do sanity check on zoned block device path - f2fs: fix uninit-value in f2fs_lookup - f2fs: fix to check segment boundary during SIT page readahead - [s390x] startup: avoid save_area_sync overflow - f2fs: compress: fix to disallow enabling compress on non-empty file - [s390x] ap/zcrypt: revisit ap and zcrypt error handling - f2fs: handle errors of f2fs_get_meta_page_nofail - afs: Don't assert on unpurgeable server records - [powerpc*] 64s: handle ISA v3.1 local copy-paste context switches - [armel,armhf] 8997/2: hw_breakpoint: Handle inexact watchpoint addresses - NFS4: Fix oops when copy_file_range is attempted with NFS4.0 source - xfs: Set xfs_buf type flag when growing summary/bitmap files - xfs: Set xfs_buf's b_ops member when zeroing bitmap/summary files - xfs: log new intent items created as part of finishing recovered intent items - power: supply: bq27xxx: report "not charging" on all types - xfs: change the order in which child and parent defer ops are finished - xfs: fix realtime bitmap/summary file truncation when growing rt volume - io_uring: don't set COMP_LOCKED if won't put - ath10k: fix retry packets update in station dump - [x86] kaslr: Initialize mem_limit to the real maximum address - drm/ast: Separate DRM driver from PCI code - drm/amdgpu: restore ras flags when user resets eeprom(v2) - ath10k: start recovery process when payload length exceeds max htc length for sdio - ath10k: fix VHT NSS calculation when STBC is enabled - drm/scheduler: Scheduler priority fixes (v2) - [x86] ASoC: SOF: fix a runtime pm issue in SOF when HDMI codec doesn't work - drm/bridge_connector: Set default status connected for eDP connectors - media: videodev2.h: RGB BT2020 and HSV are always full range - [x86] usb: typec: tcpm: During PR_SWAP, source caps should be sent only after tSwapSourceStart - mmc: via-sdmmc: Fix data race bug - brcmfmac: increase F2 watermark for BCM4329 - [arm64] topology: Stop using MPIDR for topology information - printk: reduce LOG_BUF_SHIFT range for H8300 - [ia64] kprobes: Use generic kretprobe trampoline handler - bpf: Permit map_ptr arithmetic with opcode add and offset 0 - [arm64,armhf] drm: lima: fix common struct sg_table related issues - [arm64,armhf] drm: panfrost: fix common struct sg_table related issues - media: uvcvideo: Fix dereference of out-of-bound list iterator - selinux: access policycaps with READ_ONCE/WRITE_ONCE - samples/bpf: Fix possible deadlock in xdpsock - [riscv64] Define AT_VECTOR_SIZE_ARCH for ARCH_DLINFO - cpufreq: sti-cpufreq: add stih418 support - USB: adutux: fix debugging - mac80211: add missing queue/hash initialization to 802.3 xmit - usb: xhci: omit duplicate actions when suspending a runtime suspended host. - SUNRPC: Mitigate cond_resched() in xprt_transmit() - [arm64] mm: return cpu_all_mask when node is NUMA_NO_NODE - [armhf] can: flexcan: disable clocks during stop mode - xfs: don't free rt blocks when we're doing a REMAP bunmapi call - xfs: avoid LR buffer overrun due to crafted h_len - ACPI: Add out of bounds and numa_off protections to pxm_to_node() - brcmfmac: Fix warning message after dongle setup failed - ath11k: Use GFP_ATOMIC instead of GFP_KERNEL in ath11k_dp_htt_get_ppdu_desc - ath11k: fix warning caused by lockdep_assert_held - ath11k: change to disable softirqs for ath11k_regd_update to solve deadlock - drivers/net/wan/hdlc_fr: Correctly handle special skb->protocol values - [arm64,armhf] usb: dwc3: core: do not queue work if dr_mode is not USB_DR_MODE_OTG - [arm64] bus/fsl_mc: Do not rely on caller to provide non NULL mc_io - ACPI: HMAT: Fix handling of changes from ACPI 6.2 to ACPI 6.3 - block: Consider only dispatched requests for inflight statistic - btrfs: fix replace of seed device - md/bitmap: md_bitmap_get_counter returns wrong blocks - f2fs: fix to set SBI_NEED_FSCK flag for inconsistent inode - bnxt_en: Log unknown link speed appropriately. - [arm64] rpmsg: glink: Use complete_all for open states - PCI/ACPI: Add Ampere Altra SOC MCFG quirk - [armhf] clk: ti: clockdomain: fix static checker warning - nfsd: rename delegation related tracepoints to make them less confusing - nfsd4: remove check_conflicting_opens warning - net: 9p: initialize sun_server.sun_path to have addr's value only when addr is valid - ceph: encode inodes' parent/d_name in cap reconnect message - jbd2: avoid transaction reuse after reformatting - ext4: Detect already used quota file early - [ppc64el] KVM: PPC: Book3S HV: Do not allocate HPT for a nested guest - scsi: core: Clean up allocation and freeing of sgtables - gfs2: call truncate_inode_pages_final for address space glocks - gfs2: Fix NULL pointer dereference in gfs2_rgrp_dump - gfs2: use-after-free in sysfs deregistration - gfs2: add validation checks for size of superblock - Handle STATUS_IO_TIMEOUT gracefully - cifs: handle -EINTR in cifs_setattr - [armhf] memory: emif: Remove bogus debugfs error handling - nbd: make the config put is called before the notifying the waiter - sgl_alloc_order: fix memory leak - nvme-rdma: fix crash when connect rejected - vmlinux.lds.h: Add PGO and AutoFDO input sections - [mips64el,mipsel] irqchip/loongson-htvec: Fix initial interrupt clearing - md: fix the checking of wrong work queue - md/raid5: fix oops during stripe resizing - mmc: sdhci: Add LTR support for some Intel BYT based controllers - mmc: sdhci-acpi: AMDI0040: Set SDHCI_QUIRK2_PRESET_VALUE_BROKEN - mm: memcg/slab: uncharge during kmem_cache_free_bulk() - seccomp: Make duplicate listener detection non-racy - [x86] perf/x86/intel: Fix Ice Lake event constraint table - [x86] perf/x86/amd: Fix sampling Large Increment per Cycle events - [x86] perf/amd/uncore: Set all slices and threads to restore perf stat -a behaviour - [x86] perf/x86/amd/ibs: Don't include randomized bits in get_ibs_op_count() - [x86] perf/x86/amd/ibs: Fix raw sample data accumulation - media: uvcvideo: Fix uvc_ctrl_fixup_xu_info() not having any effect - fs: Don't invalidate page buffers in block_write_full_page() - ACPI: configfs: Add missing config_item_put() to fix refcount leak - NFS: fix nfs_path in case of a rename retry - ACPI: button: fix handling lid state changes when input device closed - ACPI: video: use ACPI backlight for HP 635 Notebook - ACPI: debug: don't allow debugging when ACPI is disabled - PCI/ACPI: Whitelist hotplug ports for D3 if power managed by ACPI - ACPI: EC: PM: Flush EC work unconditionally after wakeup - ACPI: EC: PM: Drop ec_no_wakeup check from acpi_ec_dispatch_gpe() - acpi-cpufreq: Honor _PSD table setting on new AMD CPUs - io-wq: assign NUMA node locality if appropriate - w1: mxc_w1: Fix timeout resolution problem leading to bus error - fs/kernel_read_file: Remove FIRMWARE_PREALLOC_BUFFER enum - scsi: mptfusion: Fix null pointer dereferences in mptscsih_remove() - scsi: qla2xxx: Fix MPI reset needed message - scsi: qla2xxx: Fix reset of MPI firmware - scsi: qla2xxx: Fix crash on session cleanup with unload - PM: runtime: Remove link state checks in rpm_get/put_supplier() - btrfs: qgroup: fix wrong qgroup metadata reserve for delayed inode - btrfs: improve device scanning messages - btrfs: qgroup: fix qgroup meta rsv leak for subvolume operations - btrfs: sysfs: init devices outside of the chunk_mutex - btrfs: tracepoints: output proper root owner for trace_find_free_extent() - btrfs: reschedule if necessary when logging directory items - btrfs: send, orphanize first all conflicting inodes when processing references - btrfs: send, recompute reference path after orphanization of a directory - btrfs: use kvzalloc() to allocate clone_roots in btrfs_ioctl_send() - btrfs: tree-checker: fix false alert caused by legacy btrfs root item - btrfs: reschedule when cloning lots of extents - btrfs: cleanup cow block on error - btrfs: skip devices without magic signature when mounting - btrfs: tree-checker: validate number of chunk stripes and parity - btrfs: fix use-after-free on readahead extent after failure to create it - btrfs: fix readahead hang and use-after-free after removing a device - btrfs: drop the path before adding block group sysfs files - usb: xhci: Workaround for S3 issue on AMD SNPS 3.0 xHC - [arm64] usb: dwc3: pci: Allow Elkhart Lake to utilize DSM method for PM functionality - [arm64,armhf] usb: dwc3: ep0: Fix ZLP for OUT ep0 requests - [arm64,armhf] usb: dwc3: gadget: Check MPS of the request length - [arm64,armhf] usb: dwc3: gadget: Reclaim extra TRBs after request completion - [arm64,armhf] usb: dwc3: core: add phy cleanup for probe error handling - [arm64,armhf] usb: dwc3: core: don't trigger runtime pm when remove driver - [arm64,armhf] usb: dwc3: gadget: Resume pending requests after CLEAR_STALL - [arm64,armhf] usb: dwc3: gadget: END_TRANSFER before CLEAR_STALL command - usb: cdc-acm: fix cooldown mechanism - [x86] usb: typec: tcpm: reset hard_reset_count for any disconnect - usbcore: Check both id_table and match() when both available - USB: apple-mfi-fastcharge: don't probe unhandled devices - [x86] drm/i915: Force VT'd workarounds when running as a guest OS - vt: keyboard, simplify vt_kdgkbsent - vt: keyboard, extend func_buf_lock to readers (CVE-2020-25656) - vt_ioctl: fix GIO_UNIMAP regression - HID: wacom: Avoid entering wacom_wac_pen_report for pad / battery - [x86] mce: Allow for copy_mc_fragile symbol checksum to be generated - [arm64] tty: serial: fsl_lpuart: LS1021A has a FIFO size of 16 words, like LS1028A - tracing: Fix race in trace_open and buffer resize call - [powerpc*] Fix random segfault when freeing hugetlb range - udf: Fix memory leak when mounting - rcu-tasks: Fix grace-period/unlock race in RCU Tasks Trace - rcu-tasks: Fix low-probability task_struct leak - rcu-tasks: Enclose task-list scan in rcu_read_lock() - [s390x] stp: add locking to sysfs functions - [powerpc*] rtas: Restrict RTAS requests from userspace - [powerpc*] Warn about use of smt_snooze_delay - [powerpc*] memhotplug: Make lmb size 64bit - [powerpc*] powernv/elog: Fix race while processing OPAL error log event. - [powerpc*] powermac: Fix low_sleep_handler with KUAP and KUEP - [powerpc*] mce: Avoid nmi_enter/exit in real mode on pseries hash - [powerpc*] Fix undetected data corruption with P9N DD2.1 VSX CI load emulation - [powerpc*] 32: Fix vmap stack - Do not activate MMU before reading task struct - [powerpc*] 32: Fix vmap stack - Properly set r1 before activating MMU - block: advance iov_iter on bio_add_hw_page failure - io_uring: use type appropriate io_kiocb handler for double poll - [armhf] remoteproc: Fixup coredump debugfs disable request - gfs2: Make sure we don't miss any delayed withdraws - gfs2: Only access gl_delete for iopen glocks - NFSv4: Wait for stateid updates after CLOSE/OPEN_DOWNGRADE - NFSv4.2: support EXCHGID4_FLAG_SUPP_FENCE_OPS 4.2 EXCHANGE_ID flag - NFSD: Add missing NFSv2 .pc_func methods - ubifs: dent: Fix some potential memory leaks while iterating entries - ubifs: xattr: Fix some potential memory leaks while iterating entries - ubifs: journal: Make sure to not dirty twice for auth nodes - ubifs: Fix a memleak after dumping authentication mount options - ubifs: Don't parse authentication mount options in remount process - ubifs: mount_ubifs: Release authentication resource in error handling path - perf vendor events amd: Add L2 Prefetch events for zen1 - perf python scripting: Fix printable strings in python3 scripts - ubi: check kthread_should_stop() after the setting of task state - [arm64,armhf] i2c: imx: Fix external abort on interrupt in exit paths - drm/amdgpu: don't map BO in reserved region - drm/amdgpu: vcn and jpeg ring synchronization - drm/amdgpu: update golden setting for sienna_cichlid - drm/amdgpu: correct the gpu reset handling for job != NULL case - drm/amdgpu: add function to program pbb mode for sienna cichlid - drm/amdgpu: increase the reserved VM size to 2MB - ceph: promote to unsigned long long before shifting - libceph: clear con->out_msg on Policy::stateful_server faults - 9P: Cast to loff_t before multiplying - net/sunrpc: Fix return value for sysctl sunrpc.transports - [arm64] PCI: qcom: Make sure PCIe is reset before init for rev 2.1.0 - ring-buffer: Return 0 on success from ring_buffer_resize() - [x86] intel_idle: Ignore _CST if control cannot be taken from the platform - [x86] intel_idle: Fix max_cstate for processor models without C-state tables - cpufreq: Avoid configuring old governors as default with intel_pstate - cpufreq: Introduce CPUFREQ_NEED_UPDATE_LIMITS driver flag - cpufreq: intel_pstate: Avoid missing HWP max updates in passive mode - [amd64] vringh: fix __vringh_iov() when riov and wiov are different - ext4: fix leaking sysfs kobject after failed mount - ext4: fix error handling code in add_new_gdb - ext4: implement swap_activate aops using iomap - ext4: fix invalid inode checksum - ext4: clear buffer verified flag if read meta block from disk - ext4: fix bdev write error check failed when mount fs with ro - ext4: fix bs < ps issue reported with dioread_nolock mount opt - ext4: do not use extent after put_bh - drm/ttm: fix eviction valuable range check. - [arm64] mmc: sdhci-of-esdhc: make sure delay chain locked for HS400 - [arm64] mmc: sdhci-of-esdhc: set timeout to max before tuning - mmc: sdhci: Use Auto CMD Auto Select only when v4_mode is true - [arm64,armhf] memory: tegra: Remove GPU from DRM IOMMU group - futex: Adjust absolute futex timeouts with per time namespace offset - drm/amd/psp: Fix sysfs: cannot create duplicate filename - drm/amdgpu: correct the cu and rb info for sienna cichlid - tty: make FONTX ioctl use the tty pointer they were actually passed (CVE-2020-25668) - cachefiles: Handle readpage error correctly - [hppa] hil/parisc: Disable HIL driver when it gets stuck - [arm64] Change .weak to SYM_FUNC_START_WEAK_PI for arch/arm64/lib/mem*.S - [arm64] dts: marvell: espressobin: Add ethernet switch aliases - null_blk: synchronization fix for zoned device - device property: Keep secondary firmware node secondary by type - device property: Don't clear secondary pointer for shared primary firmware node - [x86] KVM: Fix NULL dereference at kvm_msr_ignored_check() - [arm64] KVM: Fix AArch32 handling of DBGD{CCINT,SCRext} and DBGVCR - stop_machine, rcu: Mark functions as notrace - [x86] staging: comedi: cb_pcidas: Allow 2-channel commands for AO subdevice - [mips64el,mipsel] staging: octeon: repair "fixed-link" support - [mips64el,mipsel] staging: octeon: Drop on uncorrectable alignment or FCS error - cpufreq: Introduce cpufreq_driver_test_flags() - cpufreq: schedutil: Always call driver if CPUFREQ_NEED_UPDATE_LIMITS is set - time: Prevent undefined behaviour in timespec64_to_ns() - time/sched_clock: Mark sched_clock_read_begin/retry() as notrace - null_blk: Fix zone reset all tracing - null_blk: Fix locking in zoned mode https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.9.6 - [x86] ASOC: SOF: Intel: hda-codec: move unused label to correct position [ Sudip Mukherjee ] * Remove libtraceevent. (See: #971976) [ Vagrant Cascadian ] * [arm64] Add i2c_mv64xxx i2c-modules udeb. * [arm64] Add drivers/pinctrl to kernel-image udeb. [ Salvatore Bonaccorso ] * [rt] Update to 5.9.1-rt20 * [rt] Drop "io_wq: Make io_wqe::lock a raw_spinlock_t" * [rt] Refresh "kernel/sched: move stack + kprobe clean up to __put_task_struct()" for context changes in 5.9.3 * Bump ABI to 2 * [x86] media/cec: Enable MEDIA_CEC_SUPPORT; Enable CEC_SECO as module (Closes: #972973) * [rt] Drop "printk: reduce LOG_BUF_SHIFT range for H8300" * [rt] Drop "mm: fix exec activate_mm vs TLB shootdown and lazy tlb switching race" * [x86] pinctrl: Enable PINCTRL_TIGERLAKE (Closes: #973372) * [x86] sound/soc: Enable SND_SOC_SOF_TIGERLAKE_SUPPORT (Closes: #973879) * perf/core: Fix a memory leak in perf_event_parse_addr_filter() [ Ben Hutchings ] * [rt] Rebase seqlock patches on top of 5.9.6 [ John Paul Adrian Glaubitz ] * [sh4] Update kernel configuration for sh7785lcr flavor - Compile CONFIG_HID, CONFIG_USB_HID, CONFIG_INPUT_EVDEV and CONFIG_R8169 as modules to reduce kernel image size - Disable CONFIG_KEYBOARD_ATKBD, CONFIG_MOUSE_PS2*, CONFIG_SERIO* and CONFIG_PARPORT_1284 as the SH-7785LCR board does not support PC-style keyboards, serial and parallel ports and mice -- Salvatore Bonaccorso Sun, 08 Nov 2020 13:40:04 +0100 linux (5.9.1-1) unstable; urgency=medium * New upstream release: https://kernelnewbies.org/Linux_5.9 * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.9.1 - Bluetooth: A2MP: Fix not initializing all members (CVE-2020-12352) - Bluetooth: L2CAP: Fix calling sk_filter on non-socket based channel (CVE-2020-12351) - Bluetooth: MGMT: Fix not checking if BT_HS is enabled - media: usbtv: Fix refcounting mixup - USB: serial: option: add Cellient MPL200 card - USB: serial: option: Add Telit FT980-KS composition - [x86] staging: comedi: check validity of wMaxPacketSize of usb endpoints found - USB: serial: pl2303: add device-id for HP GC device - USB: serial: ftdi_sio: add support for FreeCalypso JTAG+UART adapters - vt_ioctl: make VT_RESIZEX behave like VT_RESIZE - reiserfs: Initialize inode keys properly - reiserfs: Fix oops during mount - Revert "drm/amdgpu: Fix NULL dereference in dpm sysfs handlers" - [x86] crypto: qat - check cipher length for aead AES-CBC-HMAC-SHA [ Romain Perier ] * [rt] Update to 5.9-rc8-rt12 [ Uwe Kleine-König ] * [armhf,arm64] Enable CONFIG_VIDEO_SUNXI_CEDRUS (Closes: #972123) [ Salvatore Bonaccorso ] * [rt] Update to 5.9-rt16 * [x86] ACPI / extlog: Check for RDMSR failure (Closes: #971058) * Set ABI to 1 -- Salvatore Bonaccorso Sat, 17 Oct 2020 15:14:43 +0200 linux (5.9~rc8-1~exp1) experimental; urgency=medium * New upstream release candidate [ Ben Hutchings ] * linux-doc: Correct index filename in package description * [amd64/cloud-amd64] Generalise the description of supported platforms [ Salvatore Bonaccorso ] * [rt] Update to 5.9-rc8-rt11 -- Salvatore Bonaccorso Mon, 05 Oct 2020 23:17:12 +0200 linux (5.9~rc6-1~exp1) experimental; urgency=medium * New upstream release candidate: [ Ben Hutchings ] * linux-signed-*: Set Uploaders and Standards-Version to match linux * [rt] Update to 5.9-rc5-rt7 and re-enable [ Uwe Kleine-König ] * [arm64,generic] Enable configs used on SMARC-sAL28 board and its carriers. Patch by Michael Walle. [ Gianfranco Costamagna ] * Provide virtualbox-guest-modules now that the module is inside the kernel itself. [ Salvatore Bonaccorso ] * Set ABI to trunk * drivers/net/wireless: Enable RTW88_8821CE (Closes: #917941) -- Ben Hutchings Mon, 21 Sep 2020 03:23:41 +0100 linux (5.9~rc4-1~exp1) experimental; urgency=medium * New upstream release candidate [ Ben Hutchings ] * Un-export symbols no longer needed by the Android ashmem and binder drivers * aufs: Disable support patchset until it is updated for Linux 5.9 * Makefile: Do not check for libelf when building OOT module * udeb: Move any compression modules to kernel-image; drop compress-modules * libtraceevent1: Update symbols list for functions added in 5.9 * drm/virtio: Revert "drm/virtio: Call the right shmem helpers" -- Ben Hutchings Fri, 11 Sep 2020 04:20:59 +0100 linux (5.8.14-1) unstable; urgency=medium * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.8.11 - dt-bindings: spi: Fix spi-bcm-qspi compatible ordering - net: handle the return value of pskb_carve_frag_list() correctly - dt-bindings: PCI: intel,lgm-pcie: Fix matching on all snps,dw-pcie instances - [x86] hv_netvsc: Remove "unlikely" from netvsc_select_queue - loop: Set correct device size when using LOOP_CONFIGURE - firmware_loader: fix memory leak for paged buffer - xprtrdma: Release in-flight MRs on disconnect - NFSv4.1 handle ERR_DELAY error reclaiming locking state on delegation recall - [armhf] phy: omap-usb2-phy: disable PHY charger detect - scsi: pm8001: Fix memleak in pm8001_exec_internal_task_abort - scsi: libfc: Fix for double free() - scsi: lpfc: Fix FLOGI/PLOGI receive race condition in pt2pt discovery - scsi: lpfc: Extend the RDF FPIN Registration descriptor for additional events - [arm64] regulator: pwm: Fix machine constraints application - NFS: Zero-stateid SETATTR should first return delegation - SUNRPC: stop printk reading past end of string - cifs: fix DFS mount with cifsacl/modefromsid - nvme-fc: cancel async events before freeing event struct - nvme-rdma: cancel async events before freeing event struct - block: only call sched requeue_request() for scheduled requests - f2fs: fix indefinite loop scanning for free nid - f2fs: Return EOF on unaligned end of file DIO read - i2c: algo: pca: Reapply i2c bus settings after reset - spi: Fix memory leak on splited transfers - [mips*] KVM: Change the definition of kvm type - [arm64,armhf] clk: rockchip: Fix initialization of mux_pll_src_4plls_p - [x86] ASoC: Intel: skl_hda_dsp_generic: Fix NULLptr dereference in autosuspend delay - [arm64] ASoC: qcom: Set card->owner to avoid warnings - ASoC: qcom: common: Fix refcount imbalance on error - [powerpc*] book3s64/radix: Fix boot failure with large amount of guest memory - ASoC: soc-core: add snd_soc_find_dai_with_mutex() - [x86] ASoC: Intel: haswell: Fix power transition refactor - ASoC: core: Do not cleanup uninitialized dais on soc_pcm_open failure - [x86] Drivers: hv: vmbus: hibernation: do not hang forever in vmbus_bus_resume() - scsi: libsas: Fix error path in sas_notify_lldd_dev_found() - [arm64] Allow CPUs unffected by ARM erratum 1418040 to come in late - [x86] Drivers: hv: vmbus: Add timeout to vmbus_wait_for_unload - [x86] drm/i915/gem: Reduce context termination list iteration guard to RCU - fbcon: Fix user font detection test at fbcon_resize(). - [arm64] bpf: Fix branch offset in JIT - [amd64] iommu/amd: Fix potential @entry null deref - [amd64] iommu/amd: Restore IRTE.RemapEn bit for amd_iommu_activate_guest_mode - [riscv64] Add sfence.vma after early page table changes - locking/lockdep: Fix "USED" <- "IN-NMI" inversions - efi: efibc: check for efivars write capability - locking/percpu-rwsem: Use this_cpu_{inc,dec}() for read_count - [x86] unwind/fp: Fix FP unwinding in ret_from_fork - [x86] drm/i915/gem: Delay tracking the GEM context until it is registered - [x86] drm/i915: Filter wake_flags passed to default_wake_function - USB: quirks: Add USB_QUIRK_IGNORE_REMOTE_WAKEUP quirk for BYD zhaoxin notebook - USB: UAS: fix disconnect by unplugging a hub - usblp: fix race between disconnect() and read() - [x86] usb: typec: ucsi: acpi: Increase command completion timeout value - [x86] usb: typec: ucsi: Prevent mode overrun - [x86] i2c: i801: Fix resume bug - Revert "ALSA: hda - Fix silent audio output and corrupted input on MSI X570-A PRO" - ALSA: hda: fixup headset for ASUS GX502 laptop - ALSA: hda/realtek - The Mic on a RedmiBook doesn't work - percpu: fix first chunk size calculation for populated bitmap - Input: trackpoint - add new trackpoint variant IDs - Input: i8042 - add Entroware Proteus EL07R4 to nomux and reset lists - [x86] thunderbolt: Retry DROM read once if parsing fails - serial: 8250_pci: Add Realtek 816a and 816b - serial: core: fix port-lock initialisation - serial: core: fix console port-lock regression - ksm: reinstate memcg charge on copied pages - kprobes: fix kill kprobe which has been marked as gone - mm/thp: fix __split_huge_pmd_locked() for migration PMD - [s390x] add 3f program exception handler - [s390x] pci: fix leak of DMA tables on hard unplug - [s390x] zcrypt: fix kmalloc 256k failure - ehci-hcd: Move include to keep CRC stable - [arm64] paravirt: Initialize steal time when cpu is online - [powerpc*] dma: Fix dma_map_ops::get_required_mask - dm/dax: Fix table reference counts - mm/memory_hotplug: drain per-cpu pages again during memory offline - dm: Call proper helper to determine dax support - dax: Fix compilation for CONFIG_DAX && !CONFIG_FS_DAX - mm: memcg: fix memcg reclaim soft lockup https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.8.12 - act_ife: load meta modules before tcf_idr_check_alloc() - bnxt_en: Avoid sending firmware messages when AER error is detected. - bnxt_en: Fix NULL ptr dereference crash in bnxt_fw_reset_task() - cxgb4: fix memory leak during module unload - cxgb4: Fix offset when clearing filter byte counters - geneve: add transport ports in route lookup for geneve (CVE-2020-25645) - hdlc_ppp: add range checks in ppp_cp_parse_cr() (CVE-2020-25643) - [arm64,x86] hinic: bump up the timeout of SET_FUNC_STATE cmd - ip: fix tos reflection in ack and reset packets - ipv4: Initialize flowi4_multipath_hash in data path - ipv4: Update exception handling for multipath routes via same device - ipv6: avoid lockdep issue in fib6_del() - net: bridge: br_vlan_get_pvid_rcu() should dereference the VLAN group under RCU - net: DCB: Validate DCB_ATTR_DCB_BUFFER argument - net: Fix bridge enslavement failure - net: ipv6: fix kconfig dependency warning for IPV6_SEG6_HMAC - net/mlx5: Fix FTE cleanup - net: phy: call phy_disable_interrupts() in phy_attach_direct() instead - net: sched: initialize with 0 before setting erspan md->u - net: sch_generic: aviod concurrent reset and enqueue op for lockless qdisc - net: sctp: Fix IPv6 ancestor_size calc in sctp_copy_descendant - nfp: use correct define to return NONE fec - tipc: Fix memory leak in tipc_group_create_member() - tipc: fix shutdown() of connection oriented socket - tipc: use skb_unshare() instead in tipc_buf_append() - net/mlx5e: Enable adding peer miss rules only if merged eswitch is supported - bnxt_en: Use memcpy to copy VPD field info. - bnxt_en: return proper error codes in bnxt_show_temp - bnxt_en: Protect bnxt_set_eee() and bnxt_set_pauseparam() with mutex. - net: phy: Avoid NPD upon phy_detach() when driver is unbound - net: phy: Do not warn in phy_stop() on PHY_DOWN - net: add __must_check to skb_put_padto() - [armhf] net: ethernet: ti: cpsw_new: fix suspend/resume - wireguard: noise: take lock when removing handshake entry from table - wireguard: peerlookup: take lock before checking hash in replace operation - net/mlx5e: Fix memory leak of tunnel info when rule under multipath not ready - [arm64,x86] hinic: fix rewaking txq after netif_tx_disable - [x86] hv_netvsc: Fix hibernation for mlx5 VF driver - [arm64,armhf] net: dsa: link interfaces with the DSA master to get rid of lockdep warnings - net: macb: fix for pause frame receive enable bit - Revert "netns: don't disable BHs when locking "nsid_lock"" - net/mlx5e: Use RCU to protect rq->xdp_prog - net/mlx5e: Use synchronize_rcu to sync with NAPI - net/mlx5e: Fix endianness when calculating pedit mask first bit https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.8.13 - device_cgroup: Fix RCU list debugging warning - [x86] ASoC: Intel: bytcr_rt5640: Add quirk for MPMAN Converter9 2-in-1 - [riscv64] Take text_mutex in ftrace_init_nop() - [armhf] i2c: aspeed: Mask IRQ status to relevant bits - [s390x] init: add missing __init annotations - lockdep: fix order in trace_hardirqs_off_caller() - i2c: core: Call i2c_acpi_install_space_handler() before i2c_acpi_register_devices() - objtool: Fix noreturn detection for ignored functions - mwifiex: Increase AES key storage size to 256 bits - batman-adv: bla: fix type misuse for backbone_gw hash indexing - libbpf: Fix build failure from uninitialized variable warning - atm: eni: fix the missed pci_disable_device() for eni_init_one() - batman-adv: mcast/TT: fix wrongly dropped or rerouted packets - netfilter: ctnetlink: add a range check for l3/l4 protonum (CVE-2020-25211) - netfilter: ctnetlink: fix mark based dump filtering regression - netfilter: conntrack: nf_conncount_init is failing with IPv6 disabled - netfilter: nft_meta: use socket user_ns to retrieve skuid and skgid - mac802154: tx: fix use-after-free - bpf: Fix clobbering of r2 in bpf_gen_ld_abs - tools/libbpf: Avoid counting local symbols in ABI check - [arm*] drm/vc4/vc4_hdmi: fill ASoC card owner - net: qed: Disable aRFS for NPAR and 100G - net: qede: Disable aRFS for NPAR and 100G - net: qed: RDMA personality shouldn't fail VF load - igc: Fix wrong timestamp latency numbers - igc: Fix not considering the TX delay for timestamps - [x86] hv_netvsc: Switch the data path at the right time during hibernation - RDMA/core: Fix ordering of CQ pool destruction - batman-adv: Add missing include for in_interrupt() - xsk: Fix number of pinned pages/umem size discrepancy - batman-adv: mcast: fix duplicate mcast packets in BLA backbone from LAN - batman-adv: mcast: fix duplicate mcast packets in BLA backbone from mesh - batman-adv: mcast: fix duplicate mcast packets from BLA backbone to mesh - bpf: Fix a rcu warning for bpffs map pretty-print - mac80211: do not disable HE if HT is missing on 2.4 GHz - cfg80211: fix 6 GHz channel conversion - mac80211: fix 80 MHz association to 160/80+80 AP on 6 GHz - [x86] ALSA: asihpi: fix iounmap in error handler - io_uring: fix openat/openat2 unified prep handling - SUNRPC: Fix svc_flush_dcache() - regmap: fix page selection for noinc reads - regmap: fix page selection for noinc writes - net/mlx5e: mlx5e_fec_in_caps() returns a boolean - [mips64el,mipsel] Loongson-3: Fix fp register access if MSA enabled - [armhf] PM / devfreq: tegra30: Disable clock on error in probe - [arm64,armhf] regulator: axp20x: fix LDO2/4 description - [x86] KVM: Reset MMU context if guest toggles CR4.SMAP or CR4.PKE - [x86] KVM: SVM: Add a dedicated INVD intercept routine - mm: validate pmd after splitting - [x86] arch/x86/lib/usercopy_64.c: fix __copy_user_flushcache() cache writeback - [x86] irq: Make run_on_irqstack_cond() typesafe - [x86] ioapic: Unbreak check_timer() - scsi: lpfc: Fix initial FLOGI failure due to BBSCN not supported - ALSA: usb-audio: Add delay quirk for H570e USB headsets - ALSA: hda/realtek - Couldn't detect Mic if booting with headset plugged - ALSA: hda/realtek: Enable front panel headset LED on Lenovo ThinkStation P520 - lib/string.c: implement stpcpy - tracing: fix double free - [s390x] dasd: Fix zero write for FBA devices - kprobes: Fix to check probe enabled before disarm_kprobe_ftrace() - kprobes: tracing/kprobes: Fix to kill kprobes on initmem after boot - btrfs: fix put of uninitialized kobject after seed device delete - btrfs: fix overflow when copying corrupt csums for a message - media: cec-adap.c: don't use flush_scheduled_work() - dmabuf: fix NULL pointer dereference in dma_buf_release() - mm, THP, swap: fix allocating cluster for swapfile by mistake - mm/gup: fix gup_fast with dynamic page table folding - mm: replace memmap_context by meminit_context - mm: don't rely on system state to detect hot-plug operations - [s390x] zcrypt: Fix ZCRYPT_PERDEV_REQCNT ioctl - io_uring: ensure open/openat2 name is cleaned on cancelation - [arm64] KVM: Assume write fault on S1PTW permission fault on instruction fetch - dm: fix bio splitting and its bio completion order for regular IO - [armhf] clocksource/drivers/timer-ti-dm: Do reset before enable https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.8.14 - io_uring: always delete double poll wait entry on match - btrfs: fix filesystem corruption after a device replace - mmc: sdhci: Workaround broken command queuing on Intel GLK based IRBIS models - USB: gadget: f_ncm: Fix NDP16 datagram validation - Revert "usbip: Implement a match function to fix usbip" - usbcore/driver: Fix specific driver selection - usbcore/driver: Fix incorrect downcast - usbcore/driver: Accommodate usbip - [x86] gpio: amd-fch: correct logic of GPIO_LINE_DIRECTION - [armhf] clk: samsung: Keep top BPLL mux on Exynos542x enabled - scsi: iscsi: iscsi_tcp: Avoid holding spinlock while calling getpeername() - [arm64,x86] i2c: i801: Exclude device from suspend direct complete optimization - Input: i8042 - add nopnp quirk for Acer Aspire 5 A515 - ftrace: Move RCU is watching check after recursion check - tracing: Fix trace_find_next_entry() accounting of temp buffer size - memstick: Skip allocating card when removing host - drm/amdgpu: restore proper ref count in amdgpu_display_crtc_set_config - xen/events: don't use chip_data for legacy IRQs - [x86] vboxsf: Fix the check for the old binary mount-arguments struct - drivers/net/wan/hdlc_fr: Add needed_headroom for PVC devices - Revert "wlcore: Adding suppoprt for IGTK key in wlcore driver" - [arm64,armhf] drm/sun4i: mixer: Extend regmap max_register - [x86] hv_netvsc: Cache the current data path to avoid duplicate call and message - net: dec: de2104x: Increase receive ring size for Tulip - rndis_host: increase sleep time in the query-response loop - nvme-pci: disable the write zeros command for Intel 600P/P3100 - nvme-core: get/put ctrl and transport module in nvme_dev_open/release() - fuse: fix the ->direct_IO() treatment of iov_iter - drivers/net/wan/hdlc: Set skb->protocol before transmitting - mac80211: Fix radiotap header channel flag for 6GHz band - mac80211: do not allow bigger VHT MPDUs than the hardware supports - tracing: Make the space reserved for the pid wider - tools/io_uring: fix compile breakage - io_uring: mark statx/files_update/epoll_ctl as non-SQPOLL - cpuidle: psci: Fix suspicious RCU usage - nvme-pci: fix NULL req in completion handler - nvme-fc: fail new connections to a deleted host or remote port - scripts/kallsyms: skip ppc compiler stub *.long_branch.* / *.plt_branch.* - [armhf] pinctrl: mvebu: Fix i2c sda definition for 98DX3236 - nfs: Fix security label length not being reset - NFSv4.2: fix client's attribute cache management for copy_file_range - pNFS/flexfiles: Ensure we initialise the mirror bsizes correctly on read - [arm64,armhf] clk: tegra: Always program PLL_E when enabled - [arm64,armhf] clk: tegra: Fix missing prototype for tegra210_clk_register_emc() - [armhf] clk: samsung: exynos4: mark 'chipid' clock as CLK_IGNORE_UNUSED - scsi: target: Fix lun lookup for TARGET_SCF_LOOKUP_LUN_FROM_TAG case - [arm64,armhf] gpio: pca953x: Fix uninitialized pending variable - Input: trackpoint - enable Synaptics trackpoints - blk-mq: call commit_rqs while list empty but error happen - scripts/dtc: only append to HOST_EXTRACFLAGS instead of overwriting - autofs: use __kernel_write() for the autofs pipe writing - [arm64,armhf] gpio: pca953x: Correctly initialize registers 6 and 7 for PCA957x - [amd64] iommu/amd: Fix the overwritten field in IVMD header - pipe: remove pipe_wait() and fix wakeup race with splice - random32: Restore __latent_entropy attribute on net_rand_state - gpiolib: Fix line event handling in syscall compatible mode - [x86] drm/i915/gvt: Fix port number for BDW on EDID region setup - scsi: sd: sd_zbc: Fix handling of host-aware ZBC disks - scsi: sd: sd_zbc: Fix ZBC disk initialization - epoll: do not insert into poll queues until all sanity checks are done - epoll: replace ->visited/visited_list with generation count - epoll: EPOLL_CTL_ADD: close the race in decision to take fast path - ep_create_wakeup_source(): dentry name can change under you... [ Vagrant Cascadian ] * [armhf] Enable MFD_AXP20X_RSB as a built-in (Closes: #914813). Thanks to Bernhard. [ Salvatore Bonaccorso ] * [x86] Enable INTEL_PMC_CORE as module (Closes: #971017) * Bump ABI to 3 -- Salvatore Bonaccorso Sat, 10 Oct 2020 21:40:31 +0200 linux (5.8.10-1) unstable; urgency=medium * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.8.8 - HID: quirks: Always poll three more Lenovo PixArt mice - [arm64] drm/msm/dpu: Fix reservation failures in modeset - [arm64] drm/msm/dpu: Fix scale params in plane validation - [arm64] drm/msm/dpu: fix unitialized variable error - [arm64] drm/msm: add shutdown support for display platform_driver - [x86] hwmon: (applesmc) check status earlier. - nvmet: Disable keep-alive timer when kato is cleared to 0h - [arm64] drm/msm: enable vblank during atomic commits - [arm64] drm/msm/a6xx: fix gmu start on newer firmware - gfs2: add some much needed cleanup for log flushes that fail - [x86] hv_utils: return error if host timesysnc update is stale - [x86] hv_utils: drain the timesync packets on onchannelcallback - ceph: don't allow setlease on cephfs - [armhf] drm/omap: fix incorrect lock state - cpuidle: Fixup IRQ state - nbd: restore default timeout when setting it to zero - [s390x] don't trace preemption in percpu macros - xen/xenbus: Fix granting of vmalloc'd memory - dmaengine: of-dma: Fix of_dma_router_xlate's of_dma_xlate handling - batman-adv: Avoid uninitialized chaddr when handling DHCP - batman-adv: Fix own OGM check in aggregated OGMs - batman-adv: bla: use netif_rx_ni when not in interrupt context - rxrpc: Keep the ACK serial in a var in rxrpc_input_ack() - rxrpc: Fix loss of RTT samples due to interposed ACK - rxrpc: Make rxrpc_kernel_get_srtt() indicate validity - [mips*] mm: BMIPS5000 has inclusive physical caches - [arm64,x86] mmc: sdhci-acpi: Fix HS400 tuning for AMDI0040 - perf sched timehist: Fix use of CPU list with summary option - perf top: Skip side-band event setup if HAVE_LIBBPF_SUPPORT is not set - netfilter: nf_tables: add NFTA_SET_USERDATA if not null - netfilter: nf_tables: incorrect enum nft_list_attributes definition - netfilter: nf_tables: fix destination register zeroing - [arm64] net: hns: Fix memleak in hns_nic_dev_probe - bpf: Fix a buffer out-of-bound access when filling raw_tp link_info - [arm64,armhf] dmaengine: pl330: Fix burst length if burst size is smaller than bus width - gtp: add GTPA_LINK info to msg sent to userspace - [armhf] net: ethernet: ti: cpsw: fix clean up of vlan mc entries for host port - [armhf] net: ethernet: ti: cpsw_new: fix clean up of vlan mc entries for host port - bnxt_en: Don't query FW when netif_running() is false. - bnxt_en: Check for zero dir entries in NVRAM. - bnxt_en: Fix ethtool -S statitics with XDP or TCs enabled. - bnxt_en: Fix PCI AER error recovery flow - bnxt_en: Fix possible crash in bnxt_fw_reset_task(). - bnxt_en: fix HWRM error when querying VF temperature - xfs: finish dfops on every insert range shift iteration - xfs: fix boundary test in xfs_attr_shortform_verify - bnxt: don't enable NAPI until rings are ready - [armhf] net: ethernet: ti: cpsw_new: fix error handling in cpsw_ndo_vlan_rx_kill_vid() - netfilter: nfnetlink: nfnetlink_unicast() reports EAGAIN instead of ENOBUFS - nvmet-fc: Fix a missed _irqsave version of spin_lock in 'nvmet_fc_fod_op_done()' - nvme: fix controller instance leak - netfilter: conntrack: do not auto-delete clash entries on reply - opp: Don't drop reference for an OPP table that was never parsed - cxgb4: fix thermal zone device registration - [mips*] perf: Fix wrong check condition of Loongson event IDs - block: fix locking in bdev_del_partition - perf top/report: Fix infinite loop in the TUI for grouped events - perf cs-etm: Fix corrupt data after perf inject from - perf intel-pt: Fix corrupt data after perf inject from - perf tools: Correct SNOOPX field offset - net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() - fix regression in "epoll: Keep a reference on files added to the check list" - [arm64] net: bcmgenet: fix mask check in bcmgenet_validate_flow() - nfp: flower: fix ABI mismatch between driver and firmware - net: dp83867: Fix WoL SecureOn password - [mips*] add missing MSACSR and upper MSA initialization - xfs: fix xfs_bmap_validate_extent_raw when checking attr fork of rt files - perf jevents: Fix suspicious code in fixregex() - perf stat: Turn off summary for interval mode by default - perf bench: The do_run_multi_threaded() function must use IS_ERR(perf_session__new()) - tg3: Fix soft lockup when tg3_reset_task() fails. - [amd64] x86, fakenuma: Fix invalid starting node ID - [amd64] iommu/vt-d: Serialize IOMMU GCMD register modifications - [armhf] thermal: ti-soc-thermal: Fix bogus thermal shutdowns for omap4430 - [arm64] thermal: qcom-spmi-temp-alarm: Don't suppress negative temp - [amd64] iommu/amd: Restore IRTE.RemapEn bit after programming IRTE - [amd64] iommu/amd: Use cmpxchg_double() when updating 128-bit IRTE - [amd64] iommu/vt-d: Handle 36bit addressing for x86-32 - [x86] tracing/kprobes, x86/ptrace: Fix regs argument order for i386 - [x86] entry: Fix AC assertion - [x86] debug: Allow a single level of #DB recursion - ext2: don't update mtime on COW faults - xfs: don't update mtime on COW faults - btrfs: drop path before adding new uuid tree entry - btrfs: fix potential deadlock in the search ioctl - btrfs: allocate scrub workqueues outside of locks - btrfs: set the correct lockdep class for new nodes - btrfs: set the lockdep class for log tree extent buffers - btrfs: block-group: fix free-space bitmap threshold - btrfs: tree-checker: fix the error message for transid error - Bluetooth: Return NOTIFY_DONE for hci_suspend_notifier (Closes: #964839) - [x86] mm/32: Bring back vmalloc faulting on x86_32 - Revert "ALSA: hda: Add support for Loongson 7A1000 controller" - ALSA: ca0106: fix error code handling - ALSA: usb-audio: Add basic capture support for Pioneer DJ DJM-250MK2 - ALSA: usb-audio: Add implicit feedback quirk for UR22C - ALSA: pcm: oss: Remove superfluous WARN_ON() for mulaw sanity check - ALSA: hda/hdmi: always check pin power status in i915 pin fixup - ALSA: firewire-digi00x: exclude Avid Adrenaline from detection - ALSA: hda - Fix silent audio output and corrupted input on MSI X570-A PRO - ALSA; firewire-tascam: exclude Tascam FE-8 from detection - ALSA: hda/realtek: Add quirk for Samsung Galaxy Book Ion NT950XCJ-X716A - ALSA: hda/realtek - Improved routing for Thinkpad X1 7th/8th Gen - mmc: sdhci-pci: Fix SDHCI_RESET_ALL for CQHCI for Intel GLK-based controllers - media: rc: do not access device via sysfs after rc_unregister_device() - media: rc: uevent sysfs file races with rc_unregister_device() - affs: fix basic permission bits to actually work - block: allow for_each_bvec to support zero len bvec - block: ensure bdi->io_pages is always initialized - io_uring: set table->files[i] to NULL when io_sqe_file_register failed - io_uring: fix removing the wrong file in __io_sqe_files_update() - libata: implement ATA_HORKAGE_MAX_TRIM_128M and apply to Sandisks - [mips*] oprofile: Fix fallthrough placement - blk-stat: make q->stats->lock irqsafe - [x86] drm/i915: Fix sha_text population code - dm writecache: handle DAX to partitions on persistent memory correctly - dm mpath: fix racey management of PG initialization - dm integrity: fix error reporting in bitmap mode after creation - dm crypt: Initialize crypto wait structures - dm cache metadata: Avoid returning cmd->bm wild pointer on error - dm thin metadata: Avoid returning cmd->bm wild pointer on error - dm thin metadata: Fix use-after-free in dm_bm_set_read_only - mm: slub: fix conversion of freelist_corrupted() - mm: track page table modifications in __apply_to_page_range() - mm: madvise: fix vma user-after-free - mm/rmap: fixup copying of soft dirty and uffd ptes - io_uring: no read/write-retry on -EAGAIN error and O_NONBLOCK marked file - perf record: Correct the help info of option "--no-bpf-event" - [arm64,armhf] sdhci: tegra: Add missing TMCLK for data timeout - mm/migrate: fixup setting UFFD_WP flag - mm/hugetlb: try preferred node first when alloc gigantic page from cma - mm/hugetlb: fix a race between hugetlb sysctl handlers (CVE-2020-25285) - mm/khugepaged.c: fix khugepaged's request size in collapse_file - cfg80211: regulatory: reject invalid hints - net: usb: Fix uninit-was-stored issue in asix_read_phy_addr() https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.8.9 - io_uring: fix cancel of deferred reqs with ->files - io_uring: fix linked deferred ->files cancellation - RDMA/cma: Simplify DEVICE_REMOVAL for internal_id - RDMA/cma: Using the standard locking pattern when delivering the removal event - RDMA/cma: Remove unneeded locking for req paths - RDMA/cma: Execute rdma_cm destruction from a handler properly - ipv4: Silence suspicious RCU usage warning - ipv6: Fix sysctl max for fib_multipath_hash_policy - netlabel: fix problems with mapping removal - net: usb: dm9601: Add USB ID of Keenetic Plus DSL - sctp: not disable bh in the whole sctp_get_port_local() - tipc: fix shutdown() of connectionless socket - tipc: fix using smp_processor_id() in preemptible - net: disable netpoll on fresh napis https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.8.10 - [armhf] OMAP2+: Fix an IS_ERR() vs NULL check in _get_pwrdm() - regulator: push allocation in regulator_ena_gpio_request() out of lock - regulator: remove superfluous lock in regulator_resolve_coupling() - RDMA/rxe: Fix memleak in rxe_mem_init_user - RDMA/rxe: Drop pointless checks in rxe_init_ports - RDMA/rxe: Fix panic when calling kmem_cache_create() - [arm64,armhf] drm/sun4i: add missing put_device() call in sun8i_r40_tcon_tv_set_mux() - [armhf] drm/sun4i: Fix dsi dcs long write function - scsi: libsas: Set data_dir as DMA_NONE if libata marks qc as NODATA - drm/virtio: fix unblank - RDMA/core: Fix unsafe linked list traversal after failing to allocate CQ - RDMA/core: Fix reported speed and width - scsi: megaraid_sas: Don't call disable_irq from process IRQ poll - scsi: mpt3sas: Don't call disable_irq from IRQ poll handler - padata: fix possible padata_works_lock deadlock - [arm64,armhf] drm/sun4i: Fix DE2 YVU handling - [arm64,armhf] drm/sun4i: backend: Support alpha property on lowest plane - [arm64,armhf] drm/sun4i: backend: Disable alpha on the lowest plane on the A20 - [arm64] KVM: Update page shift if stage 2 block mapping not supported - [arm64,x86] mmc: sdhci-acpi: Clear amd_sdhci_host on reset - [arm64] mmc: sdhci-msm: Add retries when all tuning phases are found valid - [armhf] spi: stm32: Rate-limit the 'Communication suspended' message - btrfs: fix NULL pointer dereference after failure to create snapshot - block: restore a specific error code in bdev_del_partition - seccomp: don't leak memory when filter install races - nvme-fabrics: allow to queue requests for live queues - [armhf] spi: stm32: fix pm_runtime_get_sync() error checking - block: Set same_page to false in __bio_try_merge_page if ret is false - IB/isert: Fix unaligned immediate-data handling - [x86] KVM: nVMX: Fix the update value of nested load IA32_PERF_GLOBAL_CTRL control - [x86] KVM: always allow writing '0' to MSR_KVM_ASYNC_PF_EN - [arm64,x86] dmaengine: acpi: Put the CSRT table after using it - netfilter: conntrack: allow sctp hearbeat after connection re-use - netfilter: nft_set_rbtree: Detect partial overlap with start endpoint match - [x86] firestream: Fix memleak in fs_open - scsi: qedf: Fix null ptr reference in qedf_stag_change_work - [arm64,armhf] ALSA: hda: Fix 2 channel swapping for Tegra - [arm64,armhf] ALSA: hda/tegra: Program WAKEEN register for Tegra - [arm64] net: hns3: Fix for geneve tx checksum bug - xfs: fix off-by-one in inode alloc block reservation calculation - wireless: fix wrong 160/80+80 MHz setting - mac80211: reduce packet loss event false positives - cfg80211: Adjust 6 GHz frequency to channel conversion - xfs: initialize the shortform attr header padding entry - nvme-fabrics: don't check state NVME_CTRL_NEW for request acceptance - nvme: have nvme_wait_freeze_timeout return if it timed out - nvme-rdma: serialize controller teardown sequences - nvme-rdma: fix timeout handler - nvme-rdma: fix reset hang if controller died in the middle of a reset - nvme-pci: cancel nvme device request before disabling - HID: quirks: Set INCREMENT_USAGE_ON_DUPLICATE for all Saitek X52 devices - HID: microsoft: Add rumble support for the 8bitdo SN30 Pro+ controller - drivers/net/wan/hdlc_cisco: Add hard_header_len - HID: elan: Fix memleak in elan_input_configured - [x86] cpufreq: intel_pstate: Refuse to turn off with HWP enabled - [x86] cpufreq: intel_pstate: Fix intel_pstate_get_hwp_max() for turbo disabled - [arm64] module: set trampoline section flags regardless of CONFIG_DYNAMIC_FTRACE - ALSA: hda: hdmi - add Rocketlake support - ALSA: hda: fix a runtime pm issue in SOF when integrated GPU is disabled - ALSA: hda: use consistent HDAudio spelling in comments/docs - drivers/net/wan/hdlc: Change the default of hard_header_len to 0 - [amd64] iommu/amd: Do not force direct mapping when SME is active - [amd64] iommu/amd: Do not use IOMMUv2 functionality when SME is active - gcov: Disable gcov build with GCC 10 - iio: adc: ti-ads1015: fix conversion when CONFIG_PM is not set - [arm64] iio: cros_ec: Set Gyroscope default frequency to 25Hz - [x86] iio:accel:bmc150-accel: Fix timestamp alignment and prevent data leak. - [x86] iio:magnetometer:ak8975 Fix alignment and data leak issues. - [armhf] iio:accel:mma8452: Fix timestamp alignment and prevent data leak. - [x86] staging: wlan-ng: fix out of bounds read in prism2sta_probe_usb() - btrfs: require only sector size alignment for parent eb bytenr - btrfs: fix lockdep splat in add_missing_dev - btrfs: free data reloc tree on failed mount - btrfs: fix wrong address when faulting in pages in the search ioctl - [x86] thunderbolt: Disable ports that are not implemented - kobject: Restore old behaviour of kobject_del(NULL) - regulator: push allocation in regulator_init_coupling() outside of lock - regulator: push allocations in create_regulator() outside of lock - regulator: push allocation in set_consumer_device_supply() out of lock - regulator: plug of_node leak in regulator_register()'s error path - regulator: core: Fix slab-out-of-bounds in regulator_unlock_recursive() - misc: eeprom: at24: register nvmem only after eeprom is ready to use - scsi: target: iscsi: Fix data digest calculation - scsi: lpfc: Fix setting IRQ affinity with an empty CPU mask - scsi: target: iscsi: Fix hang in iscsit_access_np() when getting tpg->np_login_sem - [arm64] drm/msm: Split the a5xx preemption record - [arm64] drm/msm: Disable preemption on all 5xx targets - [arm64] drm/msm: Disable the RPTR shadow - mmc: sdio: Use mmc_pre_req() / mmc_post_req() - [arm64] mmc: sdhci-of-esdhc: Don't walk device-tree on every interrupt - nvme: Revert: Fix controller creation races with teardown flow - rbd: require global CAP_SYS_ADMIN for mapping and unmapping (CVE-2020-25284) - RDMA/rxe: Fix the parent sysfs read when the interface has 15 chars - RDMA/mlx4: Read pkey table length instead of hardcoded value - fbcon: remove soft scrollback code (CVE-2020-14390) - fbcon: remove now unusued 'softback_lines' cursor() argument - vgacon: remove software scrollback support - [x86] KVM: VMX: Don't freeze guest when event delivery causes an APIC-access exit - [arm64] KVM: Do not try to map PUDs when they are folded into PMD - [x86] kvm x86/mmu: use KVM_REQ_MMU_SYNC to sync when needed - KVM: fix memory leak in kvm_io_bus_unregister_dev() - [arm64,armhf] Revert "usb: dwc3: meson-g12a: fix shared reset control use" - debugfs: Fix module state check condition - test_firmware: Test platform fw loading on non-EFI systems - [x86] video: fbdev: fix OOB read in vga_8planes_imageblit() - [arm64] phy: qcom-qmp: Use correct values for ipq8074 PCIe Gen2 PHY init - usb: core: fix slab-out-of-bounds Read in read_descriptors - USB: serial: ftdi_sio: add IDs for Xsens Mti USB converter - USB: serial: option: support dynamic Quectel USB compositions - USB: serial: option: add support for SIM7070/SIM7080/SIM7090 modules - usb: Fix out of sync data toggle if a configured device is reconfigured - [x86] usb: typec: ucsi: acpi: Check the _DEP dependencies - [arm64] drm/msm/gpu: make ringbuffer readonly - gcov: add support for GCC 10.1 [ Salvatore Bonaccorso ] * [x86] drivers/input/keyboard: Enable KEYBOARD_APPLESPI as module (Closes: #943337) * drivers/net/wireless: Enable RTW88_8723DE * Bump ABI to 2 * udeb: Make input-modules depend on crc-modules. [ Vagrant Cascadian ] * [arm64] Enable BATTERY_CW2015 as a module. * [arm64] Apply patch from upstream to support battery status on Pinebook Pro. [ Ben Hutchings ] * [hppa] Set Build-Profiles for linux-image-parisc{,64}-smp (Closes: #970011) * Provide linux-{image,headers}-generic virtual packages on most architectures (Closes: #960209) -- Salvatore Bonaccorso Sat, 19 Sep 2020 14:17:19 +0200 linux (5.8.7-1) unstable; urgency=medium * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.8.4 - ext4: fix potential negative array index in do_split() (CVE-2020-14314) https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.8.5 https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.8.6 - nfsd: fix oops on mixed NFSv4/NFSv3 client access - [powerpc] 32s: Disable VMAP stack which CONFIG_ADB_PMU (Closes: #963689) https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.8.7 [ Ben Hutchings ] * [mips*] udeb: Drop hfs-modules (fixes FTBFS) * [m68k,powerpc,ppc64] udeb: Make hfs-modules depend on cdrom-core-modules (fixes FTBFS) * tools/include/uapi: Fix (probably fixes FTBFS on ia64) * bpftool: Build with Debian recommended compiler options [ Salvatore Bonaccorso ] * iwlwifi: yoyo: don't print failure if debug firmware is missing (Closes: #966218) * debian/tests/python: pycodestyle: Increase max-line-length to 100. * net/packet: fix overflow in tpacket_rcv (CVE-2020-14386) * Set ABI to 1 [ Uwe Kleine-König ] * [arm64] Enable a few options for Kobol's helios64 -- Salvatore Bonaccorso Sat, 05 Sep 2020 16:52:44 +0200 linux (5.8.3-1~exp1) experimental; urgency=medium * New upstream release: https://kernelnewbies.org/Linux_5.8 * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.8.1 https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.8.2 https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.8.3 [ Jeremy Stanley ] * [x86] PMIC operation region support (Closes: #925965) - Enable CONFIG_PMIC_OPREGION for general ACPI support of operation regions with Power Management Integrated Circuits. Turn on specific opregion support for: + CONFIG_BYTCRC_PMIC_OPREGION (Bay Trail Crystal Cove PMIC) + CONFIG_CHTCRC_PMIC_OPREGION (Cherry Trail Crystal Cove PMIC) + CONFIG_XPOWER_PMIC_OPREGION (XPower AXP288 PMIC) + CONFIG_BXT_WC_PMIC_OPREGION (BXT WhiskeyCove PMIC) + CONFIG_CHT_WC_PMIC_OPREGION (CHT Whiskey Cove PMIC) + CONFIG_CHT_DC_TI_PMIC_OPREGION (Dollar Cove TI PMIC) Additionally enable CONFIG_MFD_INTEL_PMC_BXT as a module (multi-function device driver for Intel Broxton Whiskey Cove PMIC), along with CONFIG_INTEL_SOC_PMIC (Crystal Cove PMIC) as a dependency for it. * [x86] Fix Cherry Trail power management regression (Closes: #949886) - Switch CONFIG_I2C_DESIGNWARE_PLATFORM from being compiled as a module to compiled into the kernel directly, since as of kernel version 5.1 this state became a dependency for CONFIG_INTEL_SOC_PMIC_CHTWC which is already enabled. - Enable CONFIG_USB_ROLES_INTEL_XHCI and CONFIG_TYPEC_MUX_PI3USB30532 as modules, which became dependencies for the already enabled CONFIG_INTEL_CHT_INT33FE as of kernel version 4.17. [ Romain Perier ] * Rebased patches onto 5.8. [ Uwe Kleine-König ] * [armhf] Enable BCM2835 auxiliar mini UART support found on Raspberry Pi (all models); patch by Marc Kleine-Budde. (Closes: #963619) * [arm64] Enable IR_MESON and SPI_MESON_SPICC. [ Helge Deller ] * [hppa] Build linux-image-parisc-smp and linux-image-parisc64-smp transition packages [ Yves-Alexis Perez ] * usb: Enable APPLE_MFI_FASTCHARGE as a module [ Salvatore Bonaccorso ] * Set ABI to trunk [ Bastian Blank ] * [x86] hyperv-daemons: - Rename services to remove "hyperv-daemons." prefix - Use debhelper for services. - Make systemd service bind to device. - Start kvp daemon way earlier in boot. - Specify some service restrictions. * udeb: Reverse order of cdrom-core and isofs/udf. * Fix build of documentation. * [amd64] Enable GVE. (closes: #964812) * Compile with gcc-10 on all architectures. * [cloud] Enable TARGET_CORE. (closes: #952108) * [cloud] Disable DLM, GFS2_FS, OCFS2_FS. * Move System.map into debug package and replace with pointer. [ Ben Hutchings ] * [x86] hyperv-daemons: Complete renaming of init scripts * [x86] hyperv-daemons: Correct old names in Conflicts field of unit files * [hppa] Use standard metadata for transitional packages * bpftool: Fix version string in recursive builds * Revert "linux-libc-dev: Re-add "Provides: linux-kernel-headers"" (Closes: #959462) * mm: Enable INIT_ON_ALLOC_DEFAULT_ON. This can be reverted using the kernel parameter: init_on_alloc=0 * libtraceevent1: Add new APIs to symbols file [ Christian Barcenas ] * bpftool: add packaging for tools/bpf/bpftool (Closes: #896165) - Thank you to Noah Meyerhans for the first iteration of packaging. [ Thomas W ] * [x86] Enable CONFIG_XIAOMI_WMI [ Matthew Gabeler-Lee ] * [x86] Re-enable APU2 LED control (Closes: 949448) [ Joel Stanley ] * [armhf] Enable NET_NCSI [ Walter Lozano ] * [armhf] Enable NVMEM_IMX_OCOTP (Closes: #968253) [ Philipp Kern ] * [s390x] Add virtio_net to nic-modules. -- Ben Hutchings Mon, 24 Aug 2020 01:23:22 +0100 linux (5.7.17-1) unstable; urgency=medium * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.7.11 - bpf: Set the number of exception entries properly for subprograms - mac80211: allow rx of mesh eapol frames with default rx key - scsi: scsi_transport_spi: Fix function pointer check - scsi: mpt3sas: Fix unlock imbalance - ALSA: hda/hdmi: fix failures at PCM open on Intel ICL and later - net: sky2: initialize return of gm_phy_read - drm/nouveau/i2c/g94-: increase NV_PMGR_DP_AUXCTL_TRANSACTREQ timeout - scsi: mpt3sas: Fix error returns in BRM_status_show - scsi: dh: Add Fujitsu device to devinfo and dh lists - dm: use bio_uninit instead of bio_disassociate_blkg - fuse: fix weird page warning - [x86] irqdomain/treewide: Keep firmware node unconditionally allocated - SUNRPC reverting d03727b248d0 ("NFSv4 fix CLOSE not waiting for direct IO compeletion") - exfat: fix overflow issue in exfat_cluster_to_sector() - exfat: fix wrong hint_stat initialization in exfat_find_dir_entry() - exfat: fix wrong size update of stream entry by typo - exfat: fix name_hash computation on big endian systems - btrfs: reloc: clear DEAD_RELOC_TREE bit for orphan roots to prevent runaway balance - uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression - ALSA: hda/realtek: Fixed ALC298 sound bug by adding quirk for Samsung Notebook Pen S - ALSA: info: Drop WARN_ON() from buffer NULL sanity check - [x86] ASoC: rt5670: Correct RT5670_LDO_SEL_MASK - [x86] ASoC: Intel: cht_bsw_rt5672: Change bus format to I2S 2 channel - [s390x] cpum_cf,perf: change DFLT_CCERROR counter name - btrfs: fix double free on ulist after backref resolution failure - btrfs: fix mount failure caused by race with umount - btrfs: fix page leaks after failure to lock page for delalloc - mt76: mt76x02: fix handling MCU timeouts during hw restart - efi/efivars: Expose RT service availability via efivars abstraction - bnxt_en: Fix race when modifying pause settings. - bnxt_en: Init ethtool link settings after reading updated PHY configuration. - bnxt_en: Fix completion ring sizing with TPA enabled. - [x86] hippi: Fix a size used in a 'pci_free_consistent()' in an error handling path - netfilter: nf_tables: fix nat hook table deletion - [arm64] dpaa2-eth: check fsl_mc_get_endpoint for IS_ERR_OR_NULL() - vsock/virtio: annotate 'the_virtio_vsock' RCU pointer - ax88172a: fix ax88172a_unbind() failures - RDMA/mlx5: Use xa_lock_irq when access to SRQ table - RDMA/core: Fix race in rdma_alloc_commit_uobject() - RDMA/cm: Protect access to remote_sidr_table - [armhf] net: fec: fix hardware time stamping by external devices - [x86] ASoC: Intel: bytcht_es8316: Add missed put_device() - ieee802154: fix one possible memleak in adf7242_probe - [arm64,armhf] drm: sun4i: hdmi: Fix inverted HPD result - [arm64,armhf] net: smc91x: Fix possible memory leak in smc_drv_probe() - [arm64,armhf] net: dsa: mv88e6xxx: fix in-band AN link establishment - [arm64] dts: clearfog-gt-8k: fix switch link configuration - bonding: check error value of register_netdevice() immediately - iwlwifi: Make some Killer Wireless-AC 1550 cards work again - [arm64] net: bcmgenet: fix error returns in bcmgenet_probe() - RDMA/mlx5: Prevent prefetch from racing with implicit destruction - [arm64] net: hns3: fix for not calculating TX BD send size correctly - [arm64] net: hns3: fix error handling for desc filling - [arm64] net: hns3: fix return value error when query MAC link status fail - qed: suppress "don't support RoCE & iWARP" flooding on HW init - qed: suppress false-positives interrupt error messages on HW init - ipvs: fix the connection sync failed in some cases - [arm64] iommu/qcom: Use domain rather than dev as tlb cookie - Revert "PCI/PM: Assume ports without DLL Link Active train links in 100 ms" - nfsd4: fix NULL dereference in nfsd/clients display code - bonding: check return value of register_netdevice() in bond_newlink() - geneve: fix an uninitialized value in geneve_changelink() - serial: exar: Fix GPIO configuration for Sealevel cards based on XR17V35X - scripts/decode_stacktrace: strip basepath from all paths - scripts/gdb: fix lx-symbols 'gdb.error' while loading modules - [riscv64] Do not rely on initrd_start/end computed during early dt parsing - kbuild: fix single target builds for external modules - [arm64,x86] HID: i2c-hid: add Mediacom FlexBook edge13 to descriptor override - HID: alps: support devices with report id 2 - HID: steam: fixes race in handling device list. - dmaengine: idxd: fix hw descriptor fields for delta record - HID: apple: Disable Fn-key key-re-mapping on clone keyboards - [arm64] dmaengine: tegra210-adma: Fix runtime PM imbalance on error - [arm64,armhf] soc: amlogic: meson-gx-socinfo: Fix S905X3 and S905D3 ID's - Input: add `SW_MACHINE_COVER` - [armhf] dts: n900: remove mmc1 card detect gpio - regmap: dev_get_regmap_match(): fix string comparison - hwmon: (aspeed-pwm-tacho) Avoid possible buffer overflow - [amd64] dmaengine: ioat setting ioat timeout as module parameter - Input: synaptics - enable InterTouch for ThinkPad X1E 1st gen - Input: elan_i2c - only increment wakeup count on touch - [arm64] usb: dwc3: pci: add support for the Intel Tiger Lake PCH -H variant - [arm64] usb: dwc3: pci: add support for the Intel Jasper Lake - drm/amdgpu/gfx10: fix race condition for kiq - drm/amdgpu: fix preemption unit test - hwmon: (nct6775) Accept PECI Calibration as temperature source for NCT6798D - [x86] platform: asus-wmi: allow BAT1 battery name - ALSA: hda/realtek - fixup for yet another Intel reference board - drivers/perf: Fix kernel panic when rmmod PMU modules during perf sampling - [arm64] Use test_tsk_thread_flag() for checking TIF_SINGLESTEP - asm-generic/mmiowb: Allow mmiowb_set_pending() when preemptible() - drivers/perf: Prevent forced unbinding of PMU drivers - [riscv64] Upgrade smp_mb__after_spinlock() to iorw,iorw - [x86] boot: Don't add the EFI stub to targets - [arm*] binder: Don't use mmput() from shrinker function. - [arm64,armhf] usb: tegra: Fix allocation for the FPCI context - usb: xhci: Fix ASM2142/ASM3142 DMA addressing - Revert "cifs: Fix the target file was deleted when rename failed." (Closes: #966917) - iwlwifi: mvm: don't call iwl_mvm_free_inactive_queue() under RCU - [arm64] tty: xilinx_uartps: Really fix id assignment - [x86] staging: wlan-ng: properly check endpoint types - [x86] staging: comedi: addi_apci_1032: check INSN_CONFIG_DIGITAL_TRIG shift - [x86] staging: comedi: ni_6527: fix INSN_CONFIG_DIGITAL_TRIG support - [x86] staging: comedi: addi_apci_1500: check INSN_CONFIG_DIGITAL_TRIG shift - [x86] staging: comedi: addi_apci_1564: check INSN_CONFIG_DIGITAL_TRIG shift - [arm64,armhf] serial: tegra: fix CREAD handling for PIO - serial: 8250: fix null-ptr-deref in serial8250_start_tx() - /dev/mem: Add missing memory barriers for devmem_inode - fbdev: Detect integer underflow at "struct fbcon_ops"->clear_margins. - vt: Reject zero-sized screen buffer size. - mm/mmap.c: close race between munmap() and expand_upwards()/downwards() - vfs/xattr: mm/shmem: kernfs: release simple xattr entry in a right way - mm/memcg: fix refcount error while moving and swapping - mm: memcg/slab: fix memory leak at non-root kmem_cache destroy - mm/hugetlb: avoid hardcoding while checking if cma is enabled - khugepaged: fix null-pointer dereference due to race - io-mapping: indicate mapping failure - [armhf] mmc: sdhci-of-aspeed: Fix clock divider calculation - drm/amdgpu: Fix NULL dereference in dpm sysfs handlers - [x86] vmlinux.lds: Page-align end of ..page_aligned sections - [x86] ASoC: rt5670: Add new gpio1_is_ext_spk_en quirk and enable it on the Lenovo Miix 2 10 - [x86] ASoC: topology: fix kernel oops on route addition error - [x86] ASoC: topology: fix tlvs in error handling for widget_dmixer - [x86] ASoC: Intel: bdw-rt5677: fix non BE conversion - dm integrity: fix integrity recalculation that is improperly skipped - ath9k: Fix general protection fault in ath9k_hif_usb_rx_cb - ath9k: Fix regression with Atheros 9271 https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.7.12 - AX.25: Fix out-of-bounds read in ax25_connect() - AX.25: Prevent out-of-bounds read in ax25_sendmsg() - dev: Defer free of skbs in flush_backlog - ip6_gre: fix null-ptr-deref in ip6gre_init_net() - net-sysfs: add a newline when printing 'tx_timeout' by sysfs - net: udp: Fix wrong clean up for IS_UDPLITE macro - rtnetlink: Fix memory(net_device) leak when ->newlink fails - rxrpc: Fix sendmsg() returning EPIPE due to recvmsg() returning ENODATA - tcp: allow at most one TLP probe per flight - AX.25: Prevent integer overflows in connect and sendmsg - sctp: shrink stream outq only when new outcnt < old outcnt - sctp: shrink stream outq when fails to do addstream reconf - udp: Copy has_conns in reuseport_grow(). - udp: Improve load balancing for SO_REUSEPORT. - tipc: allow to build NACK message in link timeout function - io_uring: ensure double poll additions work with both request types - regmap: debugfs: check count when read regmap file https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.7.13 - sunrpc: check that domain table is empty at module unload. - PCI/ASPM: Disable ASPM on ASMedia ASM1083/1085 PCIe-to-PCI bridge - ALSA: usb-audio: Add implicit feedback quirk for SSL2 - ALSA: hda/realtek: enable headset mic of ASUS ROG Zephyrus G15(GA502) series with ALC289 - ALSA: hda/realtek: typo_fix: enable headset mic of ASUS ROG Zephyrus G14(GA401) series with ALC289 - ALSA: hda/realtek: Fix add a "ultra_low_power" function for intel reference board (alc256) - ALSA: hda/realtek - Fixed HP right speaker no sound - ALSA: hda: Workaround for spurious wakeups on some Intel platforms - ALSA: hda/hdmi: Fix keep_power assignment for non-component devices - RDMA/mlx5: Fix prefetch memory leak if get_prefetchable_mr fails - [amd64] IB/rdmavt: Fix RQ counting issues causing use of an invalid RWQE - vhost/scsi: fix up req type endian-ness - 9p/trans_fd: Fix concurrency del of req_list in p9_fd_cancelled/p9_read_work - revert: 1320a4052ea1 ("audit: trigger accompanying records when no rules present") (Closes: #966822) - [armel,armhf] 8986/1: hw_breakpoint: Don't invoke overflow handler on uaccess watchpoints - [armhf] 8987/1: VDSO: Fix incorrect clock_gettime64 - [armhf] dts: imx6sx-sabreauto: Fix the phy-mode on fec2 - virtio_balloon: fix up endian-ness for free cmd id - Revert "drm/amdgpu: Fix NULL dereference in dpm sysfs handlers" - drm/amd/display: Clear dm_state for fast updates (Closes: #963868) - drm/amdgpu: Prevent kernel-infoleak in amdgpu_info_ioctl() - drm/dbi: Fix SPI Type 1 (9-bit) transfer - drm: hold gem reference until object is no longer accessed - drm: of: Fix double-free bug - rds: Prevent kernel-infoleak in rds_notify_queue_get() - xfrm: policy: match with both mark and mask on user interfaces - [arm64] pinctrl: qcom: Handle broken/missing PDC dual edge IRQs on sc7180 - espintcp: recv() should return 0 when the peer socket is closed - xfrm: Fix crash when the hold queue is used. - [arm64] net: hns3: fix desc filling bug when skb is expanded or lineared - [arm64] net: hns3: fix a TX timeout issue - [arm64] net: hns3: add reset check for VF updating port based VLAN - [arm64] net: hns3: fix aRFS FD rules leftover after add a user FD rule - [arm64] net: hns3: fix for VLAN config when reset failed - net/mlx5: E-switch, Destroy TSAR when fail to enable the mode - net/mlx5: E-switch, Destroy TSAR after reload interface - net/mlx5e: Fix error path of device attach - net/mlx5: Fix a bug of using ptp channel index as pin index - net/mlx5: Verify Hardware supports requested ptp function on a given pin - net/mlx5: Query PPS pin operational status before registering it - net/mlx5e: Modify uplink state on interface up/down - net/mlx5e: Fix kernel crash when setting vf VLANID on a VF dev - net: lan78xx: add missing endpoint sanity check - net: lan78xx: fix transfer-buffer memory leak - rhashtable: Fix unprotected RCU dereference in __rht_ptr - mlx4: disable device on shutdown - nvme: add a Identify Namespace Identification Descriptor list quirk - bpf: Fix map leak in HASH_OF_MAPS map - espintcp: handle short messages instead of breaking the encap socket - mac80211: mesh: Free ie data when leaving mesh - mac80211: mesh: Free pending skb when destroying a mpath - RDMA/core: Stop DIM before destroying CQ - RDMA/core: Free DIM memory in error unwind - [arm64] alternatives: move length validation inside the subsection - [arm64] csum: Fix handling of bad packets - Bluetooth: fix kernel oops in store_pending_adv_report - net/mlx5e: E-Switch, Add misc bit when misc fields changed for mirroring - net/mlx5e: fix bpf_prog reference count leaks in mlx5e_alloc_rq - vxlan: fix memleak of fdb - iwlwifi: fix crash in iwl_dbg_tlv_alloc_trigger - qed: Disable "MFW indication via attention" SPAM every 5 minutes - io_uring: always allow drain/link/hardlink/async sqe flags - scsi: core: Run queue in case of I/O resource contention failure - [amd64] x86/unwind/orc: Fix ORC for newly forked tasks - [x86] stacktrace: Fix reliable check for empty user task stacks - cxgb4: add missing release on skb in uld_send() - xen-netfront: fix potential deadlock in xennet_remove() - [riscv64] Set maximum number of mapped pages correctly - [riscv64] Parse all memory blocks to remove unusable memory - [arm64] KVM: Don't inherit exec permission across page-table levels - [x86] KVM: LAPIC: Prevent setting the tscdeadline timer if the lapic is hw disabled - [x86] KVM: SVM: Fix disable pause loop exit/pause filtering capability on SVM - [x86] i8259: Use printk_deferred() to prevent deadlock https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.7.14 - random32: update the net random state on interrupt and activity (CVE-2020-16166) - [armel] percpu.h: fix build error - [arm64] random: fix circular include dependency on arm64 after addition of percpu.h - random32: remove net_rand_state from the latent entropy gcc plugin - random32: move the pseudo-random 32-bit definitions to prandom.h - [arm64] Workaround circular dependency in pointer_auth.h - random: random.h should include archrandom.h, not the other way around https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.7.15 - scsi: ufs: Fix and simplify setup_xfer_req variant operation - USB: serial: qcserial: add EM7305 QDL product ID - USB: iowarrior: fix up report size handling for some devices - usb: xhci: define IDs for various ASMedia host controllers - usb: xhci: Fix ASMedia ASM1142 DMA addressing - Revert "ALSA: hda: call runtime_allow() for all hda controllers" - ALSA: hda/realtek: Add alc269/alc662 pin-tables for Loongson-3 laptops - ALSA: hda/ca0132 - Add new quirk ID for Recon3D. - ALSA: hda/ca0132 - Fix ZxR Headphone gain control get value. - ALSA: hda/ca0132 - Fix AE-5 microphone selection commands. - ALSA: seq: oss: Serialize ioctls - [arm*] staging: android: ashmem: Fix lockdep warning for write operation - staging: rtl8712: handle firmware load failure - Staging: rtl8188eu: rtw_mlme: Fix uninitialized variable authmode - Bluetooth: Fix slab-out-of-bounds read in hci_extended_inquiry_result_evt() - Bluetooth: Prevent out-of-bounds read in hci_inquiry_result_evt() - Bluetooth: Prevent out-of-bounds read in hci_inquiry_result_with_rssi_evt() - [arm*] binder: Prevent context manager from incrementing ref 0 - Smack: fix use-after-free in smk_write_relabel_self() - vgacon: Fix for missing check in scrollback handling (CVE-2020-14331) - mtd: properly check all write ioctls for permissions - [arm64] gpio: max77620: Fix missing release of interrupt - bpf: Fix NULL pointer dereference in __btf_resolve_helper_id() - net/9p: validate fds in p9_fd_open - drm/nouveau/kms/tu102: wait for core update to complete when assigning windows - drm/nouveau/fbcon: fix module unload when fbcon init has failed for some reason - drm/nouveau/fbcon: zero-initialise the mode_cmd2 structure - io_uring: fix lockup in io_fail_links() - nvme-pci: prevent SK hynix PC400 from using Write Zeroes command - [arm64] drm/bridge/adv7511: set the bridge type properly - [armhf] i2c: slave: improve sanity check when registering - [armhf] i2c: slave: add sanity check when unregistering - usb: hso: check for return value in hso_serial_common_create() - ALSA: hda: fix NULL pointer dereference during suspend - firmware: Fix a reference count leak. - cfg80211: check vendor command doit pointer before use - igb: reinit_locked() should be called with rtnl_lock - atm: fix atm_dev refcnt leaks in atmtcp_remove_persistent - tools lib traceevent: Fix memory leak in process_dynamic_array_len - xattr: break delegations in {set,remove}xattr - [arm64,armhf] PCI: tegra: Revert tegra124 raw_violation_fixup - ipv4: Silence suspicious RCU usage warning - ipv6: fix memory leaks on IPV6_ADDRFORM path - ipv6: Fix nexthop refcnt leak when creating ipv6 route info - rxrpc: Fix race between recvmsg and sendmsg on immediate call failure - vxlan: Ensure FDB dump is performed under RCU - net: lan78xx: replace bogus endpoint lookup - rhashtable: Restore RCU marking on rhash_lock_head - devlink: ignore -EOPNOTSUPP errors on dumpit - appletalk: Fix atalk_proc_init() return path - [arm64] dpaa2-eth: Fix passing zero to 'PTR_ERR' warning - [x86] hv_netvsc: do not use VF device if link is down - net: bridge: clear bridge's private skb space on xmit - net: gre: recompute gre csum for sctp over gre tunnels - net: macb: Properly handle phylink on at91sam9x - [arm64,armhf] net: mvpp2: fix memory leak in mvpp2_rx - net/sched: act_ct: fix miss set mru for ovs after defrag in act_ct - [arm64] net: thunderx: use spin_lock_bh in nicvf_set_rx_mode_task() - openvswitch: Prevent kernel-infoleak in ovs_ct_put_key() - Revert "vxlan: fix tos value before xmit" - tcp: apply a floor of 1 for RTT samples from TCP timestamps - [arm64] kaslr: Use standard early random function https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.7.16 - tracepoint: Mark __tracepoint_string's __used - io_uring: abstract out task work running - HID: input: Fix devices that return multiple bytes in battery report - [x86] mce/inject: Fix a wrong assignment of i_mce.status - [x86] perf/x86/intel/uncore: Fix oops when counting IMC uncore events on some TGL - [x86] sched: Bail out of frequency invariance if turbo frequency is unknown - [x86] sched: Bail out of frequency invariance if turbo_freq/base_freq gives 0 - sched/fair: Fix NOHZ next idle balance - sched: correct SD_flags returned by tl->sd_flags() - EDAC: Fix reference count leaks - crc-t10dif: Fix potential crypto notify dead-lock - blktrace: fix debugfs use after free (CVE-2019-19770) - [armhf] exynos: MCPM: Restore big.LITTLE cpuidle support - rcu/tree: Repeat the monitor if any free channel is busy - sched/uclamp: Fix initialization of struct uclamp_rq - [x86] crypto: qat - allow xts requests not multiple of block - [x86] platform/x86: intel-hid: Fix return value check in check_acpi_dev() - [x86] platform/x86: intel-vbtn: Fix return value check in check_acpi_dev() - tpm: Require that all digests are present in TCG_PCR_EVENT2 structures - recordmcount: only record relocation of type R_AARCH64_CALL26 on arm64. - regulator: fix memory leak on error path of regulator_register() - io_uring: fix sq array offset calculation - [arm64] dts: meson: fix mmc0 tuning error on Khadas VIM3 - [arm64,armhf] spi: rockchip: Fix error in SPI slave pio read - seccomp: Fix ioctl number for SECCOMP_IOCTL_NOTIF_ID_VALID - md: raid0/linear: fix dereference before null check on pointer mddev - [mips64el,mipsel] irqchip/loongson-liointc: Fix potential dead lock - [arm64,armhf] irqchip/gic-v4.1: Use GFP_ATOMIC flag in allocate_vpe_l1_table() - nvme-tcp: fix controller reset hang during traffic - nvme-rdma: fix controller reset hang during traffic - nvme-multipath: fix logic for non-optimized paths - nvme-multipath: do not fall back to __nvme_find_path() for non-optimized paths - block: don't do revalidate zones on invalid devices - [armhf] drm/tilcdc: fix leak & null ref in panel_connector_get_modes - [armhf] exynos: clear L310_AUX_CTRL_FULL_LINE_ZERO in default l2c_aux_val - Bluetooth: add a mutex lock to avoid UAF in do_enale_set - loop: be paranoid on exit and prevent new additions / removals - io_uring: fix req->work corruption - fs/btrfs: Add cond_resched() for try_release_extent_mapping() stalls - drm/amdgpu: avoid dereferencing a NULL pointer - drm/radeon: Fix reference count leaks caused by pm_runtime_get_sync - video: fbdev: savage: fix memory leak on error handling path in probe - video: fbdev: neofb: fix memory leak in neo_scan_monitor() - [armhf] bus: ti-sysc: Add missing quirk flags for usb_host_hs - md-cluster: fix wild pointer of unlock_all_bitmaps() - drm/nouveau/kms/nv50-: Fix disabling dithering - [arm64] dts: hisilicon: hikey: fixes to comply with adi, adv7533 DT binding - [armhf] drm/etnaviv: fix ref count leak via pm_runtime_get_sync - drm/nouveau: fix reference count leak in nouveau_debugfs_strap_peek - drm/nouveau: fix multiple instances of reference count leaks - btrfs: fix lockdep splat from btrfs_dump_space_info - [arm64] drm: msm: a6xx: fix gpu failure after system resume - [arm64] drm/msm: Fix a null pointer access in msm_gem_shrinker_count() - drm/debugfs: fix plain echo to connector "force" attribute - drm/radeon: disable AGP by default - net: phy: mscc: restore the base page in vsc8514/8584_config_init - mm/mmap.c: Add cond_resched() for exit_mmap() CPU stalls - bpf: Fix fds_example SIGSEGV error - Bluetooth: hci_qca: Bug fixes for SSR - brcmfmac: keep SDIO watchdog running when console_interval is non-zero - brcmfmac: To fix Bss Info flag definition Bug - brcmfmac: set state of hanger slot to FREE when flushing PSQ - [x86] platform/x86: asus-nb-wmi: add support for ASUS ROG Zephyrus G14 and G15 - iwlegacy: Check the return value of pcie_capability_read_*() - [arm64,armhf] gpu: host1x: debug: Fix multiple channels emitting messages simultaneously - [x86] uaccess: Make __get_user_size() Clang compliant on 32-bit - mmc: sdhci-pci-o2micro: Bug fix for O2 host controller Seabird1 - usb: gadget: net2280: fix memory leak on probe error handling paths - dyndbg: fix a BUG_ON in ddebug_describe_flags - bcache: fix super block seq numbers comparision in register_cache_set() - btrfs: allow btrfs_truncate_block() to fallback to nocow for data space reservation - btrfs: qgroup: free per-trans reserved space when a subvolume gets dropped - [arm64,x86] ACPICA: Do not increment operation_region reference counts for field units - io_uring: fix racy overflow count reporting - io_uring: fix stalled deferred requests - [arm64] crypto: caam - silence .setkey in case of bad key length - [arm64] drm/msm: ratelimit crtc event overflow error - drm/gem: Fix a leak in drm_gem_objects_lookup() - drm/amdgpu: use the unlocked drm_gem_object_put - [x86] agp/intel: Fix a memory leak on module initialisation failure - btmrvl: Fix firmware filename for sd8977 chipset - btmrvl: Fix firmware filename for sd8997 chipset - Bluetooth: hci_qca: Fix an error pointer dereference - Bluetooth: hci_qca: Only remove TX clock vote after TX is completed - Bluetooth: Allow suspend even when preparation has failed - ath10k: Acquire tx_lock in tx error paths - Bluetooth: hci_qca: Bug fix during SSR timeout - Bluetooth: hci_qca: Increase SoC idle timeout to 200ms - iio: improve IIO_CONCENTRATION channel type description - scsi: ufs: Fix imprecise load calculation in devfreq window - [armhf] drm/etnaviv: Fix error path on failure to enable bus clk - [arm64,armhf] drm/panfrost: Fix inbalance of devfreq record_busy/idle() - [arm64] drm/arm: fix unintentional integer overflow on left shift - Bluetooth: btusb: fix up firmware download sequence - Bluetooth: btmtksdio: fix up firmware download sequence - media: marvell-ccic: Add missed v4l2_async_notifier_cleanup() - [armhf] media: omap3isp: Add missed v4l2_ctrl_handler_free() for preview_init_entities() - [arm64] dpaa2-eth: fix condition for number of buffer acquire retries - drm/mipi: use dcs write for mipi_dsi_dcs_set_tear_scanline - [powerpc*] cxl: Fix kobject memleak - tracing: Move pipe reference to trace array instead of current_tracer - drm/amdgpu: ensure 0 is returned for success in jpeg_v2_5_wait_for_idle - drm/radeon: fix array out-of-bounds read and write issues - [arm*] staging: vchiq_arm: Add a matching unregister call - iavf: fix error return code in iavf_init_get_resources() - iavf: Fix updating statistics - RDMA/core: Fix bogus WARN_ON during ib_unregister_device_queued() - ipvs: allow connection reuse for unconfirmed conntrack - media: firewire: Using uninitialized values in node_probe() - media: tvp5150: Add missed media_entity_cleanup() - xfs: don't eat an EIO/ENOSPC writeback error when scrubbing data fork - xfs: fix reflink quota reservation accounting error - RDMA/rxe: Skip dgid check in loopback mode - PCI: Fix pci_cfg_wait queue locking problem - samples: bpf: Fix bpf programs with kprobe/sys_connect event - [armhf] drm/stm: repair runtime power management - kobject: Avoid premature parent object freeing in kobject_cleanup() - leds: core: Flush scheduled work for system suspend - [arm64,armhf] drm: panel: simple: Fix bpc for LG LB070WV8 panel - [armhf] phy: exynos5-usbdrd: Calibrating makes sense only for USB2.0 PHY - [arm64] mmc: sdhci-of-arasan: Add missed checks for devm_clk_register() - scsi: scsi_debug: Add check for sdebug_max_queue during module init - mwifiex: Prevent memory corruption handling keys - kernfs: do not call fsnotify() with name without a parent - [powerpc*] pseries: remove cede offline state for CPUs - [powerpc*] rtas: don't online CPUs for partition suspend - [powerpc*] vdso: Fix vdso cpu truncation - RDMA/qedr: SRQ's bug fixes - RDMA/rxe: Prevent access to wr->next ptr afrer wr is posted to send queue - [x86] staging: rtl8192u: fix a dubious looking mask before a shift - PCI/ASPM: Add missing newline in sysfs 'policy' - go7007: add sanity checking for endpoints - [powerpc*] book3s64/pkeys: Use PVR check instead of cpu feature - [armhf] drm/imx: fix use after free - [armhf] gpu: ipu-v3: Restore RGB32, BGR32 - USB: serial: iuu_phoenix: fix led-activity helpers - usb: core: fix quirks_param_set() writing to a const pointer - [armhf] thermal: ti-soc-thermal: Fix reversed condition in ti_thermal_expose_sensor() - [powerpc*] perf: Fix missing is_sier_aviable() during build - [armhf] phy: armada-38x: fix NETA lockup when repeatedly switching speeds - [x86] ASoC: hdac_hda: fix deadlock after PCM open error - [mips64el,mipsel] OCTEON: add missing put_device() call in dwc3_octeon_device_init() - [x86] thermal: int340x: processor_thermal: fix: update Jasper Lake PCI id - [arm*] usb: dwc2: Fix error path in gadget registration - usb: gadget: f_uac2: fix AC Interface Header Descriptor wTotalLength - scsi: megaraid_sas: Clear affinity hint - [powerpc] scsi: mesh: Fix panic after host or bus reset - [arm64,armhf] net: dsa: mv88e6xxx: MV88E6097 does not support jumbo configuration - RDMA/core: Fix return error value in _ib_modify_qp() to negative - Bluetooth: btusb: Fix and detect most of the Chinese Bluetooth controllers - Bluetooth: hci_h5: Set HCI_UART_RESET_ON_INIT to correct flags - Bluetooth: hci_serdev: Only unregister device if it was registered - Bluetooth: Fix suspend notifier race - Bluetooth: hci_qca: Stop collecting memdump again for command timeout during SSR - xfs: fix inode allocation block res calculation precedence - xfs: clear XFS_DQ_FREEING if we can't lock the dquot buffer to flush - RDMA/netlink: Remove CAP_NET_RAW check when dump a raw QP - PCI: Release IVRS table in AMD ACS quirk - [powerpc*] pseries/hotplug-cpu: Remove double free in error path - ASoC: soc-core: Fix regression causing sysfs entries to disappear - [s390x] qeth: tolerate pre-filled RX buffer - [s390x] qeth: don't process empty bridge port events - ice: Clear and free XLT entries on reset - ice: Graceful error handling in HW table calloc failure - netfilter: nft_meta: fix iifgroup matching - rtw88: fix LDPC field for RA info - rtw88: fix short GI capability based on current bandwidth - rtw88: coex: only skip coex triggered by BT info - [arm64,armhf] wl1251: fix always return 0 error - net/mlx5: DR, Change push vlan action sequence - net/mlx5: Delete extra dump stack that gives nothing - ftrace: Fix ftrace_trace_task return value - [amd64,arm64] net: ethernet: aquantia: Fix wrong return value - liquidio: Fix wrong return value in cn23xx_get_pf_num() - [powerpc] net: spider_net: Fix the size used in a 'dma_free_coherent()' call - gpio: don't use same lockdep class for all devm_gpiochip_add_data users - [arm64] net: thunderx: initialize VF's mailbox mutex before first usage - dlm: Fix kobject memleak - ocfs2: fix unbalanced locking - [arm64,armhf] pinctrl-single: fix pcs_parse_pinconf() return value - svcrdma: Fix page leak in svc_rdma_recv_read_chunk() - nfsd: avoid a NULL dereference in __cld_pipe_upcall() - SUNRPC: Fix ("SUNRPC: Add "@len" parameter to gss_unwrap()") - [amd64] x86/fsgsbase/64: Fix NULL deref in 86_fsgsbase_read_task - [amd64] crypto: aesni - add compatibility with IAS - af_packet: TPACKET_V3: fix fill status rwlock imbalance - net: Fix potential memory leak in proto_register() - net/nfc/rawsock.c: add CAP_NET_RAW check. - net: phy: fix memory leak in device-create error path - net: Set fput_needed iff FDPUT_FPUT is set - tcp: correct read of TFO keys on big endian systems - [x86] vmxnet3: use correct tcp hdr length when packet is encapsulated - net: refactor bind_bucket fastreuse into helper - net: initialize fastreuse on inet_inherit_port - vsock: fix potential null pointer dereference in vsock_poll() - net: phy: marvell10g: fix null pointer dereference - USB: serial: cp210x: re-enable auto-RTS on open - USB: serial: cp210x: enable usb generic throttle/unthrottle - ALSA: hda - fix the micmute led status for Lenovo ThinkCentre AIO - ALSA: usb-audio: Creative USB X-Fi Pro SB1095 volume knob support - ALSA: usb-audio: fix overeager device match for MacroSilicon MS2109 - ALSA: usb-audio: work around streaming quirk for MacroSilicon MS2109 - ALSA: usb-audio: add quirk for Pioneer DDJ-RB - [arm64,x86] tpm: Unify the mismatching TPM space buffer sizes - [x86] crypto: qat - fix double free in qat_uclo_create_batch_init_list - [x86] crypto: ccp - Fix use of merged scatterlists - [arm64] crypto: cpt - don't sleep of CRYPTO_TFM_REQ_MAY_SLEEP was not specified - tick/nohz: Narrow down noise while setting current task's tick dependency - bitfield.h: don't compile-time validate _val in FIELD_FIT - fs/minix: check return value of sb_getblk() - fs/minix: don't allow getting deleted inodes - fs/minix: reject too-large maximum file size - [x86] kvm: x86: replace kvm_spec_ctrl_test_value with runtime test on the host - 9p: Fix memory leak in v9fs_mount - driver core: Fix probe_count imbalance in really_probe() - media: media-request: Fix crash if memory allocation fails - drm/ttm/nouveau: don't call tt destroy callback on alloc failure. - io_uring: set ctx sq/cq entry count earlier - io_uring: use TWA_SIGNAL for task_work uncondtionally - io_uring: fail poll arm on queue proc failure - NFS: Don't move layouts to plh_return_segs list while in use - NFS: Don't return layout segments that are in use - cpufreq: Fix locking issues with governors - [arm64] cpufreq: dt: fix oops on armada37xx - include/asm-generic/vmlinux.lds.h: align ro_after_init - [arm64] PM / devfreq: rk3399_dmc: Fix kernel oops when rockchip,pmu is absent - PM / devfreq: Fix indentaion of devfreq_summary debugfs node - spi: spidev: Align buffers for DMA - erofs: fix extended inode could cross boundary - [arm64] firmware: qcom_scm: Fix legacy convention SCM accessors - [x86] irqdomain/treewide: Free firmware node after domain removal - xen/balloon: fix accounting in alloc_xenballooned_pages error path - xen/balloon: make the balloon wait interruptible - [x86] drm/xen-front: Fix misused IS_ERR_OR_NULL checks - [s390x] dasd: fix inability to use DASD with DIAG driver - [s390x] numa: set node distance to LOCAL_DISTANCE - [s390x] gmap: improve THP splitting - io_uring: sanitize double poll handling - io_uring: Fix NULL pointer dereference in loop_rw_iter() - task_work: only grab task signal lock when needed - io_uring: add missing REQ_F_COMP_LOCKED for nested requests - io_uring: enable lookup of links holding inflight files - io_uring: hold 'ctx' reference around task_work queue + execute https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.7.17 - smb3: warn on confusing error scenario with sec=krb5 - genirq/affinity: Make affinity setting if activated opt-in - genirq/PM: Always unlock IRQ descriptor in rearm_wake_irq() - [arm64,x86] PCI: hotplug: ACPI: Fix context refcounting in acpiphp_grab_context() - PCI/ATS: Add pci_pri_supported() to check device or associated PF - PCI: Mark AMD Navi10 GPU rev 0x00 ATS as broken - PCI: Add device even if driver attach failed - [arm64] PCI: qcom: Define some PARF params needed for ipq8064 SoC - [arm64] PCI: qcom: Add support for tx term offset for rev 2.1.0 - btrfs: allow use of global block reserve for balance item deletion - btrfs: free anon block device right after subvolume deletion - btrfs: don't allocate anonymous block device for user invisible roots - btrfs: ref-verify: fix memory leak in add_block_entry - btrfs: only commit the delayed inode when doing a full fsync - btrfs: stop incremening log_batch for the log root tree when syncing log - btrfs: only commit delayed items at fsync if we are logging a directory - btrfs: remove no longer needed use of log_writers for the log root tree - btrfs: don't traverse into the seed devices in show_devname - btrfs: pass checksum type via BTRFS_IOC_FS_INFO ioctl - btrfs: open device without device_list_mutex - btrfs: move the chunk_mutex in btrfs_read_chunk_tree - btrfs: relocation: review the call sites which can be interrupted by signal - btrfs: add missing check for nocow and compression inode flags - btrfs: avoid possible signal interruption of btrfs_drop_snapshot() on relocation tree - btrfs: return EROFS for BTRFS_FS_STATE_ERROR cases - btrfs: sysfs: use NOFS for device creation - btrfs: don't WARN if we abort a transaction with EROFS - btrfs: fix race between page release and a fast fsync - btrfs: don't show full path of bind mounts in subvol= - btrfs: fix messages after changing compression level by remount - btrfs: only search for left_info if there is no right_info in try_merge_free_space - btrfs: inode: fix NULL pointer dereference if inode doesn't need compression - btrfs: fix memory leaks after failure to lookup checksums during inode logging - btrfs: trim: fix underflow in trim length to prevent access beyond device boundary - btrfs: make sure SB_I_VERSION doesn't get unset by remount - btrfs: fix return value mixup in btrfs_get_extent - [arm64] perf: Correct the event index in sysfs - cifs: Fix leak when handling lease break for cached root fid - [powerpc*] Allow 4224 bytes of stack expansion for the signal frame - [powerpc*] Fix circular dependency between percpu.h and mmu.h - [arm64] media: venus: fix multiple encoder crash - [arm64] net: ethernet: stmmac: Disable hardware multicast filter - [arm64,armhf] net: stmmac: dwmac1000: provide multicast filter fallback - [mips64el,mipsel] irqchip/loongson-liointc: Fix misuse of gc->mask_cache - [arm64,armhf] irqchip/gic-v4.1: Ensure accessing the correct RD when writing INVALLR - pidfd: Add missing sock updates for pidfd_getfd() - net/compat: Add missing sock updates for SCM_RIGHTS - md/raid5: Fix Force reconstruct-write io stuck in degraded raid5 - bcache: allocate meta data pages as compound pages - bcache: fix overflow in offset_to_stripe() - mac80211: fix misplaced while instead of if - driver core: Avoid binding drivers to dead devices - [mips*] CPU#0 is not hotpluggable - ext2: fix missing percpu_counter_inc - khugepaged: collapse_pte_mapped_thp() flush the right range - mm/hugetlb: fix calculation of adjust_range_if_pmd_sharing_possible - khugepaged: collapse_pte_mapped_thp() protect the pmd lock - hugetlbfs: remove call to huge_pte_alloc without i_mmap_rwsem - [amd64,arm64] mm/shuffle: don't move pages between zones and don't read garbage memmaps - ocfs2: change slot number type s16 to u16 - mm/page_counter.c: fix protection usage propagation - cma: don't quit at first error when activating reserved areas - mm/memory_hotplug: fix unpaired mem_hotplug_begin/done - ftrace: Setup correct FTRACE_FL_REGS flags for module - kprobes: Fix NULL pointer dereference at kprobe_ftrace_handler - tracing: Use trace_sched_process_free() instead of exit() for pid tracing - [x86] watchdog: f71808e_wdt: indicate WDIOF_CARDRESET support in watchdog_info.options - [x86] watchdog: f71808e_wdt: remove use of wrong watchdog_info option - [x86] watchdog: f71808e_wdt: clear watchdog timeout occurred flag - ceph: set sec_context xattr on symlink creation - ceph: handle zero-length feature mask in session messages - [powerpc*] pseries: Fix 64 bit logical memory block panic - dm: don't call report zones for more than the user requested - module: Correctly truncate sysfs sections output - bootconfig: Fix to find the initargs correctly - perf probe: Fix wrong variable warning when the probe point is not found - perf probe: Fix memory leakage when the probe point is not found - perf intel-pt: Fix FUP packet state - perf intel-pt: Fix duplicate branch after CBR - gfs2: Never call gfs2_block_zero_range with an open transaction - [armhf] drm/imx: imx-ldb: Disable both channels for split mode in enc->disable() - crypto: algif_aead - Only wake up when ctx->more is zero - RDMA/ipoib: Return void from ipoib_ib_dev_stop() - RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() - rtc: cpcap: fix range - IB/uverbs: Set IOVA on IB MR in uverbs layer - sched/uclamp: Protect uclamp fast path code with static key - USB: serial: ftdi_sio: make process-packet buffer unsigned - USB: serial: ftdi_sio: clean up receive processing - crypto: af_alg - Fix regression on empty requests - devres: keep both device name and resource name in pretty name - RDMA/counter: Only bind user QPs in auto mode - RDMA/counter: Allow manually bind QPs with different pids to same counter - rtw88: pci: disable aspm for platform inter-op with module parameter - [arm64,armhf] rtc: pl031: fix set_alarm by adding back call to alarm_irq_enable - [armhf] gpu: ipu-v3: image-convert: Combine rotate/no-rotate irq handlers - [armhf] gpu: ipu-v3: image-convert: Wait for all EOFs before completing a tile - dm rq: don't call blk_mq_queue_stopped() in dm_stop_queue() - f2fs: compress: fix to avoid memory leak on cc->cpages - [arm64] clk: qcom: clk-alpha-pll: remove unused/incorrect PLL_CAL_VAL - iommu/vt-d: Enforce PASID devTLB field mask - f2fs: compress: fix to update isize when overwriting compressed file - nvme: fix deadlock in disconnect during scan_work and/or ana_work - sched/uclamp: Fix a deadlock when enabling uclamp static key - nfs: ensure correct writeback errors are returned on close() - ubifs: Fix wrong orphan node deletion in ubifs_jnl_update|rename - [arm*] clk: bcm2835: Do not use prediv with bcm2711's PLLs - scsi: lpfc: nvmet: Avoid hang / use-after-free again when destroying targetport - nfs: nfs_file_write() should check for writeback errors - watchdog: initialize device before misc_register - md-cluster: Fix potential error pointer dereference in resize_bitmaps() - [x86] tsr: Fix tsc frequency enumeration bug on Lightning Mountain SoC - [x86] bugs/multihit: Fix mitigation reporting when VMX is not in use - Input: sentelic - fix error return when fsp_reg_write fails - [x86] drm/vmwgfx: Use correct vmw_legacy_display_unit pointer - [x86] drm/vmwgfx: Fix two list_for_each loop exit tests - [arm64] net: qcom/emac: add missed clk_disable_unprepare in error path of emac_clks_phase1_init - nfs: Fix getxattr kernel panic and memory overflow - NFS: Fix flexfiles read failover - fs/minix: set s_maxbytes correctly - fs/minix: fix block limit check for V1 filesystems - fs/minix: remove expected error message in block_to_path() - fs/ufs: avoid potential u32 multiplication overflow - crypto: algif_aead - fix uninitialized ctx->init - perf bench mem: Always memset source before memcpy - [x86] perf/x86/rapl: Fix missing psys sysfs attributes - khugepaged: retract_page_tables() remember to test exit - [arm64,armhf] ASoC: tegra: Use device managed resource APIs to get the clock - [arm64,armhf] ASoC: tegra: Add audio mclk parent configuration - [arm64,armhf] ASoC: tegra: Enable audio mclk during tegra_asoc_utils_init() - [x86] drm/i915/gt: Force the GT reset on shutdown - [arm64,armhf] drm/panfrost: Use kvfree() to free bo->sgts - drm/dp_mst: Fix the DDC I2C device registration of an MST port - drm/amdgpu: fix ordering of psp suspend - [armhf] drm/omap: force runtime PM suspend on system suspend - drm: Added orientation quirk for ASUS tablet model T103HAF - drm: fix drm_dp_mst_port refcount leaks in drm_dp_mst_allocate_vcpi - drm/amdgpu: Fix bug where DPM is not enabled after hibernate and resume [ Salvatore Bonaccorso ] * Bump ABI to 3 [ Ben Hutchings ] * doc: Disable extension incompatible with Sphinx 3 (fixes FTBFS) -- Salvatore Bonaccorso Sun, 23 Aug 2020 15:44:14 +0200 linux (5.7.10-1) unstable; urgency=medium * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.7.7 - block/bio-integrity: don't free 'buf' if bio_integrity_add_page() failed - ethtool: Fix check in ethtool_rx_flow_rule_create - geneve: allow changing DF behavior after creation - [powerpc*] ibmveth: Fix max MTU limit - mld: fix memory leak in ipv6_mc_destroy_dev() - [arm64,armhf] mvpp2: ethtool rxtx stats fix - net: bridge: enfore alignment for ethernet address - net: core: reduce recursion limit value - net: Do not clear the sock TX queue in sk_set_socket() - net: ethtool: add missing string for NETIF_F_GSO_TUNNEL_REMCSUM - net: fix memleak in register_netdevice() - net: Fix the arp error in some cases - net: increment xmit_recursion level in dev_direct_xmit() - net: usb: ax88179_178a: fix packet alignment padding - openvswitch: take into account de-fragmentation/gso_size in execute_check_pkt_len - rxrpc: Fix notification call on completion of discarded calls - sctp: Don't advertise IPv4 addresses if ipv6only is set on the socket - tcp: don't ignore ECN CWR on pure ACK - tcp: grow window for OOO packets only for SACK flows - tg3: driver sleeps indefinitely when EEH errors exceed eeh_max_freezes - ip6_gre: fix use-after-free in ip6gre_tunnel_lookup() - net: phy: Check harder for errors in get_phy_id() - ip_tunnel: fix use-after-free in ip_tunnel_lookup() - bnxt_en: Store the running firmware version code. - bnxt_en: Do not enable legacy TX push on older firmware. - bnxt_en: Fix statistics counters issue during ifdown with older firmware. - bnxt_en: Read VPD info only for PFs - net: phylink: fix ethtool -A with attached PHYs - net: phylink: ensure manual pause mode configuration takes effect - sch_cake: don't try to reallocate or unshare skb unconditionally - sch_cake: don't call diffserv parsing code when it is not needed - sch_cake: fix a few style nits - tcp_cubic: fix spurious HYSTART_DELAY exit upon drop in min RTT - bpf: tcp: bpf_cubic: fix spurious HYSTART_DELAY exit upon drop in min RTT - [arm64,riscv64] net: macb: undo operations in case of failure - r8169: fix firmware not resetting tp->ocp_base - net: ethtool: add missing NETIF_F_GSO_FRAGLIST feature string - [arm64,riscv64] net: macb: call pm_runtime_put_sync on failure path - net: phy: mscc: avoid skcipher API for single block AES encryption - of: of_mdio: Correct loop scanning logic - wireguard: device: avoid circular netns references - bareudp: Fixed multiproto mode configuration - [armhf] net: dsa: bcm_sf2: Fix node reference count - net: phy: smsc: fix printing too many logs - genetlink: clean up family attributes allocations - nvmet: cleanups the loop in nvmet_async_events_process - nvmet: fail outstanding host posted AEN req - ALSA: usb-audio: Fix potential use-after-free of streams - [arm64,armhf] Revert "i2c: tegra: Fix suspending in active runtime PM state" - btrfs: fix a block group ref counter leak after failure to remove block group - binder: fix null deref of proc->context - [x86] mei: me: disable mei interface on Mehlow server platforms - [x86] mei: me: add tiger lake point device ids for H platforms. - [armhf] Revert "usb: dwc3: exynos: Add support for Exynos5422 suspend clk" - [mips*/*-malta,sh4] USB: ohci-sm501: Add missed iounmap() in remove - [arm64,armhf] usb: dwc2: Postponed gadget registration to the udc class driver - usb: add USB_QUIRK_DELAY_INIT for Logitech C922 - USB: ehci: reopen solution for Synopsys HC bug - xhci: Poll for U0 after disabling USB2 LPM - [armhf] usb: host: ehci-exynos: Fix error check in exynos_ehci_probe() - ALSA: usb-audio: Add implicit feedback quirk for SSL2+. - ALSA: usb-audio: add quirk for Denon DCD-1500RE - ALSA: usb-audio: Set 48 kHz rate for Rodecaster - ALSA: usb-audio: Add registration quirk for Kingston HyperX Cloud Flight S - ALSA: usb-audio: add quirk for Samsung USBC Headset (AKG) - ALSA: usb-audio: Fix OOB access of mixer element list - scsi: qla2xxx: Keep initiator ports after RSCN - [s390x] scsi: zfcp: Fix panic on ERP timeout for previously dismissed ERP action - cifs: Fix cached_fid refcnt leak in open_shroot - cifs/smb3: Fix data inconsistent when punch hole - cifs/smb3: Fix data inconsistent when zero file range - xhci: Fix incorrect EP_STATE_MASK - xhci: Fix enumeration issue when setting max packet size for FS devices. - xhci: Return if xHCI doesn't support LPM - cdc-acm: Add DISABLE_ECHO quirk for Microchip/SMSC chip - loop: replace kill_bdev with invalidate_bdev - IB/mad: Fix use after free when destroying MAD agent - IB/hfi1: Fix module use count flaw due to leftover module put calls - [armhf] bus: ti-sysc: Flush posted write on enable and disable - [armhf] bus: ti-sysc: Use optional clocks on for enable and wait for softreset bit - [armhf] bus: ti-sysc: Ignore clockactivity unless specified as a quirk - [armhf] bus: ti-sysc: Fix uninitialized framedonetv_irq - [armhf] OMAP2+: Fix legacy mode dss_reset - xfrm: Fix double ESP trailer insertion in IPsec crypto offload. - [armhf] dts: Fix am33xx.dtsi USB ranges length - [armhf] dts: Fix am33xx.dtsi ti,sysc-mask wrong softreset flag - [x86] resctrl: Support CPUID enumeration of MBM counter width - [x86] resctrl: Fix memory bandwidth counter width for AMD - efi/tpm: Verify event log header before parsing - ASoC: soc-pcm: fix checks for multi-cpu FE dailinks - [arm64] ASoC: qcom: common: set correct directions for dailinks - [armhf] regualtor: pfuze100: correct sw1a/sw2 on pfuze3000 - efi/libstub: Fix path separator regression - RDMA/siw: Fix pointer-to-int-cast warning in siw_rx_pbl() - [armhf] dts: am335x-pocketbeagle: Fix mmc0 Write Protect - [armhf] dts: Fix duovero smsc interrupt for suspend - dma-direct: re-encrypt memory if dma_direct_alloc_pages() fails - dma-direct: check return value when encrypting or decrypting memory - [x86] resctrl: Fix a NULL vs IS_ERR() static checker warning in rdt_cdp_peer_get() - [x86] efi/x86: Setup stack correctly for efi_pe_entry - regmap: Fix memory leak from regmap_register_patch - devmap: Use bpf_map_area_alloc() for allocating hash buckets - bpf: Don't return EINVAL from {get,set}sockopt when optlen > PAGE_SIZE - rxrpc: Fix handling of rwind from an ACK packet - RDMA/rvt: Fix potential memory leak caused by rvt_alloc_rq - RDMA/efa: Set maximum pkeys device attribute - RDMA/qedr: Fix KASAN: use-after-free in ucma_event_handler+0x532 - RDMA/cma: Protect bind_list and listen_list while finding matching cm id - RDMA/core: Check that type_attrs is not NULL prior access - [arm64,armhf] ASoC: rockchip: Fix a reference count leak. - [s390x] qeth: fix error handling for isolation mode cmds - RDMA/mad: Fix possible memory leak in ib_mad_post_receive_mads() - [x86] Revert "KVM: VMX: Micro-optimize vmexit time when not exposing PMU" - [x86] iommu/vt-d: Set U/S bit in first level page table by default - [x86] iommu/vt-d: Enable PCI ACS for platform opt in hint - [x86] iommu/vt-d: Update scalable mode paging structure coherency - dma-direct: add missing set_memory_decrypted() for coherent mapping - net: qed: fix left elements count calculation - net: qed: fix async event callbacks unregistering - net: qede: stop adding events on an already destroyed workqueue - net: qed: fix NVMe login fails over VFs - net: qed: fix excessive QM ILT lines consumption - net: qede: fix PTP initialization on recovery - net: qede: fix use-after-free on recovery and AER handling - net: qed: reset ILT block sizes before recomputing to fix crashes - cxgb4: move handling L2T ARP failures to caller - cxgb4: move PTP lock and unlock to caller in Tx path - [armhf] imx5: add missing put_device() call in imx_suspend_alloc_ocram() - scsi: lpfc: Avoid another null dereference in lpfc_sli4_hba_unset() - usb: gadget: udc: Potential Oops in error handling code - nvme: don't protect ns mutation with ns->head->lock - qed: add missing error test for DBG_STATUS_NO_MATCHING_FRAMING_MODE - netfilter: ipset: fix unaligned atomic access - [arm64] net: bcmgenet: use hardware padding of runt frames - io_uring: fix hanging iopoll in case of -EAGAIN - [riscv64] clk: sifive: allocate sufficient memory for struct __prci_data - [armhf] i2c: fsi: Fix the port number field in status register - wireguard: receive: account for napi_gro_receive never returning GRO_DROP - [arm64] socionext: account for napi_gro_receive never returning GRO_DROP - wil6210: account for napi_gro_receive never returning GRO_DROP - i2c: core: check returned size of emulated smbus block read - afs: Fix storage of cell names - sched/deadline: Initialize ->dl_boosted - sched/core: Fix PI boosting between RT and DEADLINE tasks - sched/cfs: change initial value of runnable_avg - ata/libata: Fix usage of page address by page_address in ata_scsi_mode_select_xlat function - drm/amd/display: Use kfree() to free rgb_user in calculate_user_regamma_ramp() - [riscv64] atomic: Fix sign extension for RV64I - bcache: check and adjust logical block size for backing devices - net: alx: fix race condition in alx_remove - [arm64] pinctrl: qcom: spmi-gpio: fix warning about irq chip reusage - [arm64,armhf] pinctrl: tegra: Use noirq suspend/resume callbacks - [s390x] seccomp: pass syscall arguments via seccomp_data - [s390x] ptrace: return -ENOSYS when invalid syscall is supplied - [s390x] ptrace: pass invalid syscall numbers to tracing - [s390x] ptrace: fix setting syscall number - [s390x] vdso: Use $(LD) instead of $(CC) to link vDSO - [s390x] vdso: fix vDSO clock_getres() - [arm64] sve: Fix build failure when ARM64_SVE=y and SYSCTL=n - kbuild: improve cc-option to clean up all temporary files - recordmcount: support >64k sections - kprobes: Suppress the suspicious RCU warning on kprobes - blktrace: break out of blktrace setup on concurrent calls - nvdimm/region: always show the 'align' attribute - block: update hctx map when use multiple maps - [riscv64] Don't allow write+exec only page mapping request in mmap - syscalls: Fix offset type of ksys_ftruncate() - ALSA: hda: Add NVIDIA codec IDs 9a & 9d through a0 to patch table - [x86] ALSA: hda/realtek - Add quirk for MSI GE63 laptop - [x86] ALSA: hda/realtek: Add mute LED and micmute LED support for HP systems - ACPI: sysfs: Fix pm_profile_attr type - ACPI: configfs: Disallow loading ACPI tables when locked down (CVE-2020-15780) - erofs: fix partially uninitialized misuse in z_erofs_onlinepage_fixup - [x86] KVM: X86: Fix MSR range of APIC registers in X2APIC mode - [x86] kvm: lapic: fix broken vcpu hotplug - [x86] KVM: nVMX: Plumb L2 GPA through to PML emulation - [x86] KVM: VMX: Stop context switching MSR_IA32_UMWAIT_CONTROL - [x86] cpu: Use pinning mask for CR4 bits needing to be 0 - [x86] cpu: Reinitialize IA32_FEAT_CTL MSR on BSP during wakeup - [amd64] asm/64: Align start of __clear_user() loop to 16-bytes - btrfs: fix bytes_may_use underflow when running balance and scrub in parallel - btrfs: fix data block group relocation failure due to concurrent scrub - btrfs: check if a log root exists before locking the log_mutex on unlink - btrfs: fix hang on snapshot creation after RWF_NOWAIT write - btrfs: fix failure of RWF_NOWAIT write into prealloc extent beyond eof - btrfs: fix RWF_NOWAIT write not failling when we need to cow - mm, compaction: make capture control handling safe wrt interrupts - mm, slab: fix sign conversion problem in memcg_uncharge_slab() - mm/slab: use memzero_explicit() in kzfree() - ocfs2: avoid inode removal while nfsd is accessing it - ocfs2: load global_inode_alloc - ocfs2: fix value of OCFS2_INVALID_SLOT - ocfs2: fix panic on nfs server over ocfs2 - mm: memcontrol: handle div0 crash race condition in memory.low - mm/memcontrol.c: add missed css_put() - mm/memory_hotplug.c: fix false softlockup during pfn range removal - [arm64] perf: Report the PC value in REGS_ABI_32 mode - tracing/boottime: Fix kprobe multiple events - tracing: Fix event trigger to accept redundant spaces - ring-buffer: Zero out time extend if it is nested and not absolute - drm/amd/display: Enable output_bpc property on all outputs - drm/amd: fix potential memleak in err branch - drm/radeon: fix fb_div check in ni_init_smc_spll_table() - drm/fb-helper: Fix vt restore - drm/amdgpu: add fw release for sdma v5_0 - drm/amdgpu/display: Unlock mutex on error - drm/panel-simple: fix connector type for newhaven_nhd_43_480272ef_atxl - drm/panel-simple: fix connector type for LogicPD Type28 Display - [armhf] dts: imx6ul-kontron: Move watchdog from Kontron i.MX6UL/ULL board to SoM - [armhf] dts: imx6ul-kontron: Change WDOG_ANY signal from push-pull to open-drain - [x86,arm64] Staging: rtl8723bs: prevent buffer overflow in update_sta_support_rate() - sunrpc: fixed rollback in rpc_gssd_dummy_populate() - SUNRPC: Properly set the @subbuf parameter of xdr_buf_subsegment() - pNFS/flexfiles: Fix list corruption if the mirror count changes - NFSv4 fix CLOSE not waiting for direct IO compeletion - [x86] EDAC/amd64: Read back the scrub rate PCI register on F15h - xprtrdma: Fix handling of RDMA_ERROR replies - dm writecache: correct uncommitted_block when discarding uncommitted entry - dm writecache: add cond_resched to loop in persistent_memory_claim() - Revert "tty: hvc: Fix data abort due to race in hvc_open" https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.7.8 - exfat: Set the unused characters of FileName field to the value 0000h - exfat: add missing brelse() calls on error paths - exfat: call sync_filesystem for read-only remount - exfat: move setting VOL_DIRTY over exfat_remove_entries() - exfat: flush dirty metadata in fsync - btrfs: block-group: refactor how we delete one block group item - btrfs: fix race between block group removal and block group creation - mm: fix swap cache node allocation mask - drm/amd/display: Fix incorrectly pruned modes with deep color - drm/amd/display: Fix ineffective setting of max bpc property - seg6: fix seg6_validate_srh() to avoid slab-out-of-bounds - tipc: add test for Nagle algorithm effectiveness - tipc: fix kernel WARNING in tipc_msg_append() - usbnet: smsc95xx: Fix use-after-free after removal - tipc: Fix NULL pointer dereference in __tipc_sendstream() - [x86] drm/i915/gt: Mark timeline->cacheline as destroyed after rcu grace period - drm/amdgpu: disable ras query and iject during gpu reset - drm/amdgpu: fix non-pointer dereference for non-RAS supported - drm/amdgpu: fix kernel page fault issue by ras recovery on sGPU - sched/debug: Make sd->flags sysctl read-only - soc: ti: omap-prm: use atomic iopoll instead of sleeping one - [powerpc*] kvm/book3s: Add helper to walk partition scoped linux page table. - [powerpc*] book3s64/kvm: Fix secondary page table walk warning during migration - mm/slub.c: fix corrupted freechain in deactivate_slab() - mm/slub: fix stack overruns with SLUB_STATS - mm, dump_page(): do not crash with invalid mapping pointer - io_uring: fix {SQ,IO}POLL with unsupported opcodes - rxrpc: Fix race between incoming ACK parser and retransmitter - usb: usbtest: fix missing kfree(dev->buf) in usbtest_disconnect (CVE-2020-15393) - tools lib traceevent: Add append() function helper for appending strings - tools lib traceevent: Handle __attribute__((user)) in field names - [s390x] debug: avoid kernel warning on too large number of pages - io_uring: fix io_sq_thread no schedule when busy - nvme-multipath: set bdi capabilities once - nvme: fix possible deadlock when I/O is blocked - nvme-multipath: fix deadlock between ana_work and scan_work - nvme-multipath: fix deadlock due to head->lock - nvme-multipath: fix bogus request queue reference put - io_uring: fix current->mm NULL dereference on exit - tpm: Fix TIS locality timeout problems - crypto: af_alg - fix use-after-free in af_alg_accept() due to bh_lock_sock() - task_work: teach task_work_add() to do signal_wake_up() - io_uring: use signal based task_work running - [arm64] drm/msm/dpu: fix error return code in dpu_encoder_init - btrfs: fix RWF_NOWAIT writes blocking on extent locks and waiting for IO - rxrpc: Fix afs large storage transmission performance drop - RDMA/counter: Query a counter before release - xfs: fix use-after-free on CIL context on shutdown - hsr: remove hsr interface if all slaves are removed - hsr: avoid to create proc file after unregister - cxgb4: use unaligned conversion for fetching timestamp - cxgb4: parse TC-U32 key values and masks natively - cxgb4: fix endian conversions for L4 ports in filters - cxgb4: use correct type for all-mask IP address comparison - cxgb4: fix SGE queue dump destination buffer context - security: Fix hook iteration and default value for inode_copy_up_xattr - [x86] hwmon: (acpi_power_meter) Fix potential memory leak in acpi_power_meter_add() - scsi: qla2xxx: Fix a condition in qla2x00_find_all_fabric_devs() - nfsd4: fix nfsdfs reference count loop - nfsd: fix nfsdfs inode reference count leak - [arm64,armhf] drm: sun4i: hdmi: Remove extra HPD polling - virtio-blk: free vblk-vqs in error path of virtblk_probe() - SMB3: Honor 'posix' flag for multiuser mounts - nvme: fix identify error status silent ignore - nvme: fix a crash in nvme_mpath_add_disk - [sh4] i2c: algo-pca: Add 0x78 as SCL stuck low status for PCA9665 - [x86,arm64] i2c: designware: platdrv: Set class based on DMI - io_uring: fix regression with always ignoring signals in io_cqring_wait() - Revert "ALSA: usb-audio: Improve frames size computation" - padata: upgrade smp_mb__after_atomic to smp_mb in padata_do_serial - SMB3: Honor 'seal' flag for multiuser mounts - SMB3: Honor persistent/resilient handle flags for multiuser mounts - SMB3: Honor lease disabling for multiuser mounts - SMB3: Honor 'handletimeout' flag for multiuser mounts - cifs: Fix the target file was deleted when rename failed. - [x86] Drivers: hv: Change flag to write log level in panic msg to false - hwmon: (pmbus) Fix page vs. register when accessing fans - [x86] ACPI: fan: Fix Tiger Lake ACPI device ID - gfs2: fix trans slab error when withdraw occurs inside log_flush - [x86] split_lock: Don't write MSR_TEST_CTRL on CPUs that aren't whitelisted - [mips*] Add missing EHB in mtc0 -> mfc0 sequence for DSPen - [x86] drm/i915: Include asm sources for {ivb, hsw}_clear_kernel.c - drm/amd/powerplay: Fix NULL dereference in lock_bus() on Vega20 w/o RAS - drm/amd/display: Only revalidate bandwidth on medium and fast updates - drm/amdgpu: use %u rather than %d for sclk/mclk - drm/amdgpu/atomfirmware: fix vram_info fetching for renoir - dma-buf: Move dma_buf_release() from fops to dentry_ops - [arm64,armhf] irqchip/gic: Atomically update affinity - mm/hugetlb.c: fix pages per hugetlb calculation - [arm*] mm/cma.c: use exact_nid true to fix possible per-numa cma leak - dm zoned: assign max_io_len correctly - efi: Make it possible to disable efivar_ssdt entirely https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.7.9 - [s389x] KVM: s390: reduce number of IO pins to 1 - regmap: fix alignment issue - [x86] perf/x86/rapl: Move RAPL support to common x86 code - [x86] perf/x86/rapl: Fix RAPL config variable bug - [armhf] dts: omap4-droid4: Fix spi configuration and increase rate - drm/ttm: Fix dma_fence refcnt leak in ttm_bo_vm_fault_reserved - drm/ttm: Fix dma_fence refcnt leak when adding move fence - [arm64,armhf] gpu: host1x: Clean up debugfs in error handling path - [arm64,armhf] drm/tegra: hub: Do not enable orphaned window group - [arm64,armhf] gpu: host1x: Detach driver on unregister - [x86] ASoC: SOF: Intel: add PCI ID for CometLake-S - ASoC: hdac_hda: fix memleak with regmap not freed on remove - [x86] ALSA: hda: Intel: add missing PCI IDs for ICL-H, TGL-H and EKL - spi: spidev: fix a race between spidev_release and spidev_remove - spi: spidev: fix a potential use-after-free in spidev_release() - [arm64,armhf] net: ethernet: mvneta: Fix Serdes configuration for SoCs without comphy - [arm64,armhf] net: ethernet: mvneta: Add 2500BaseX support for SoCs without comphy - ixgbe: protect ring accesses with READ- and WRITE_ONCE - i40e: protect ring accesses with READ- and WRITE_ONCE - ice: protect ring accesses with WRITE_ONCE - [powerpc*] kvm/book3s64: Fix kernel crash with nested kvm & DEBUG_VIRTUAL - xprtrdma: Prevent dereferencing r_xprt->rx_ep after it is freed - [x86] iommu/vt-d: Don't apply gfx quirks to untrusted devices - [x86] drm: panel-orientation-quirks: Add quirk for Asus T101HA panel - [x86] drm: panel-orientation-quirks: Use generic orientation-data for Acer S1003 - [s390x] kasan: fix early pgm check handler execution - cifs: update ctime and mtime during truncate - [armhf] imx6: add missing put_device() call in imx6q_suspend_init() - scsi: qla2xxx: Fix MPI failure AEN (8200) handling - scsi: mptscsih: Fix read sense data size - [arm64,armhf] usb: dwc3: pci: Fix reference count leak in dwc3_pci_resume_work - [arm64] kpti: Add KRYO{3, 4}XX silver CPU cores to kpti safelist - block: release bip in a right way in error path - nvme-rdma: assign completion vector correctly - [x86] entry: Increase entry_stack size to a full page - [arm64] Add KRYO{3,4}XX silver CPU cores to SSB safelist - nfs: Fix memory leak of export_path - sched/core: Check cpus_mask, not cpus_ptr in __set_cpus_allowed_ptr(), to fix mask corruption - mtd: set master partition panic write flag - [arm64,armhf] gpio: pca953x: Synchronize interrupt handler properly - [arm64,armhf] gpio: pca953x: Fix direction setting when configure an IRQ - [arm64] KVM: arm64: vgic-v4: Plug race between non-residency and v4.1 doorbell - mac80211: Fix dropping broadcast packets in 802.11 encap - bpf: Do not allow btf_ctx_access with __int128 types - nl80211: don't return err unconditionally in nl80211_start_ap() - nl80211: fix memory leak when parsing NL80211_ATTR_HE_BSS_COLOR - bpf, sockmap: RCU splat with redirect and strparser error or TLS - bpf, sockmap: RCU dereferenced psock may be used outside RCU block - netfilter: ipset: call ip_set_free() instead of kfree() - [arm64,armhf] net: mvneta: fix use of state->speed - net: cxgb4: fix return error value in t4_prep_fw - btrfs: fix reclaim_size counter leak after stealing from global reserve - [arm64] drm/meson: viu: fix setting the OSD burst length in VIU_OSD1_FIFO_CTRL_STAT - IB/sa: Resolv use-after-free in ib_nl_make_request() - netfilter: conntrack: refetch conntrack after nf_conntrack_update() - perf report TUI: Fix segmentation fault in perf_evsel__hists_browse() - [x86] perf intel-pt: Fix recording PEBS-via-PT with registers - [x86] perf intel-pt: Fix PEBS sample for XMM registers - smsc95xx: check return value of smsc95xx_reset - smsc95xx: avoid memory leak in smsc95xx_bind - [arm64] net: hns3: check reset pending after FLR prepare - [arm64] net: hns3: fix for mishandle of asserting VF reset fail - [arm64] net: hns3: add a missing uninit debugfs when unload driver - [arm64] net: hns3: fix use-after-free when doing self test - ALSA: compress: fix partial_drain completion state - net: qed: fix buffer overflow on ethtool -d - [powerpc*] 64s/exception: Fix 0x1500 interrupt handler crash - RDMA/siw: Fix reporting vendor_part_id - net: atlantic: fix ip dst and ipv6 address filters - nbd: Fix memory leak in nbd_add_socket - cxgb4: fix all-mask IP address comparison - IB/mlx5: Fix 50G per lane indication - qed: Populate nvm-file attributes while reading nvm config partition. - net/mlx5: Fix eeprom support for SFP module - net/mlx5e: Fix VXLAN configuration restore after function reload - net/mlx5e: Fix CPU mapping after function reload to avoid aRFS RX crash - net/mlx5e: Fix 50G per lane indication - net/mlx5e: CT: Fix memory leak in cleanup - bnxt_en: fix NULL dereference in case SR-IOV configuration fails - [arm64,riscv64] net: macb: fix wakeup test in runtime suspend/resume routines - [arm64,riscv64] net: macb: mark device wake capable when "magic-packet" property present - [arm64,riscv64] net: macb: fix macb_get/set_wol() when moving to phylink - [arm64,riscv64] net: macb: fix macb_suspend() by removing call to netif_carrier_off() - [arm64,riscv64] net: macb: fix call to pm_runtime in the suspend/resume functions - IB/hfi1: Do not destroy hfi1_wq when the device is shut down - IB/hfi1: Do not destroy link_wq when the device is shut down - [i386,alpha,hppa] ALSA: opl3: fix infoleak in opl3 - ALSA: hda - let hs_mic be picked ahead of hp_mic - ALSA: usb-audio: add quirk for MacroSilicon MS2109 - ALSA: usb-audio: Add implicit feedback quirk for RTX6001 - [x86] ALSA: hda/realtek - Fix Lenovo Thinkpad X1 Carbon 7th quirk subdevice id - ALSA: hda/realtek - Enable audio jacks of Acer vCopperbox with ALC269VC - [x86] ALSA: hda/realtek: Enable headset mic of Acer C20-820 with ALC269VC - [x86] ALSA: hda/realtek: Enable headset mic of Acer Veriton N4660G with ALC269VC - [arm64] KVM: arm64: Fix definition of PAGE_HYP_DEVICE - [arm64] KVM: arm64: Stop clobbering x0 for HVC_SOFT_RESTART - [arm64] KVM: arm64: Annotate hyp NMI-related functions as __always_inline - [x86] KVM: x86: bit 8 of non-leaf PDPEs is not reserved - [x86] KVM: x86: Inject #GP if guest attempts to toggle CR4.LA57 in 64-bit mode - [x86] KVM: x86: Mark CR4.TSD as being possibly owned by the guest - [arm64] KVM: arm64: Fix kvm_reset_vcpu() return code being incorrect with SVE - io_uring: fix memleak in __io_sqe_files_update() - io_uring: account user memory freed when exit has been queued - io_uring: fix memleak in io_sqe_files_register() - io_uring: fix missing msg_name assignment - kallsyms: Refactor kallsyms_show_value() to take cred - module: Refactor section attr into bin attribute - module: Do not expose section addresses to non-CAP_SYSLOG - kprobes: Do not expose probe addresses to non-CAP_SYSLOG - bpf: Check correct cred for CAP_SYSLOG in bpf_dump_raw_ok() - Revert "ath9k: Fix general protection fault in ath9k_hif_usb_rx_cb" (Closes: #964153, #964480) - btrfs: fix fatal extent_buffer readahead vs releasepage race - btrfs: reset tree root pointer after error in init_tree_roots - btrfs: discard: add missing put when grabbing block group from unused list - btrfs: fix double put of block group with nocow - drm/radeon: fix double free - [x86] drm/i915/gt: Pin the rings before marking active - [x86] drm/i915: Skip stale object handle for debugfs per-file-stats - drm/amdgpu: don't do soft recovery if gpu_recovery=0 - drm/amdgpu: add TMR destory function for psp - drm/amdgpu: asd function needs to be unloaded in suspend phase - [x86] drm/i915: Drop vm.ref for duplicate vma on construction - [x86] drm/i915: Also drop vm.ref along error paths for vma construction - cifs: fix reference leak for tlink - smb3: fix access denied on change notify request to some servers - smb3: fix unneeded error message on change notify - dm: use noio when sending kobject event - [arm64] mmc: meson-gx: limit segments to 1 when dram-access-quirk is needed - [x86] pinctrl: baytrail: Fix pin being driven low for a while on gpiod_get(..., GPIOD_OUT_HIGH) - [s390x] setup: init jump labels before command line parsing - [s390x] mm: fix huge pte soft dirty copying - [arm64] Introduce a way to disable the 32bit vdso - [arm64] arch_timer: Allow an workaround descriptor to disable compat vdso - [arm64] arch_timer: Disable the compat vdso for cores affected by ARM64_WORKAROUND_1418040 - blk-mq: consider non-idle request as "inflight" in blk_mq_rq_inflight() - dm writecache: reject asynchronous pmem devices - perf scripts python: export-to-postgresql.py: Fix struct.pack() int argument - perf scripts python: exported-sql-viewer.py: Fix zero id in call graph 'Find' result - perf scripts python: exported-sql-viewer.py: Fix zero id in call tree 'Find' result - perf scripts python: exported-sql-viewer.py: Fix unexpanded 'Find' result - perf scripts python: exported-sql-viewer.py: Fix time chart call tree - [s390x] Change s390_kernel_write() return type to match memcpy() - [s390x] maccess: add no DAT mode to kernel_write https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.7.10 - bridge: mcast: Fix MLD2 Report IPv6 payload length check - genetlink: remove genl_bind - ipv4: fill fl4_icmp_{type,code} in ping_v4_sendmsg - ipv6: fib6_select_path can not use out path for nexthop objects - ipv6: Fix use of anycast address with loopback - l2tp: remove skb_dst_set() from l2tp_xmit_skb() - llc: make sure applications use ARPHRD_ETHER - net: Added pointer check for dst->ops->neigh_lookup in dst_neigh_lookup_skb - net_sched: fix a memory leak in atm_tc_init() - net: usb: qmi_wwan: add support for Quectel EG95 LTE modem - sched: consistently handle layer3 header accesses in the presence of VLANs - tcp: fix SO_RCVLOWAT possible hangs under high mem pressure - tcp: make sure listeners don't initialize congestion-control state - tcp: md5: add missing memory barriers in tcp_md5_do_add()/ tcp_md5_hash_key() - tcp: md5: do not send silly options in SYNCOOKIES - vlan: consolidate VLAN parsing code and limit max parsing depth - tcp: md5: refine tcp_md5_do_add()/tcp_md5_hash_key() barriers - tcp: md5: allow changing MD5 keys in all socket states - cgroup: fix cgroup_sk_alloc() for sk_clone_lock() - cgroup: Fix sock_cgroup_data on big-endian. - ip: Fix SO_MARK in RST, ACK and ICMP packets - genetlink: get rid of family->attrbuf - net: ipv4: Fix wrong type conversion from hint to rt in ip_route_use_hint() - ethtool: fix genlmsg_put() failure handling in ethnl_default_dumpit() - [arm64] drm/msm: fix potential memleak in error branch - [arm64] drm/msm/dpu: allow initialization of encoder locks during encoder init - [armhf] drm/exynos: Properly propagate return value in drm_iommu_attach_device() - [armhf] drm/exynos: fix ref count leak in mic_pre_enable - [x86] fpu: Reset MXCSR to default in kernel_fpu_begin() - [armhf] thermal/drivers: imx: Fix missing of_node_put() at probe time - [x86] ACPI: DPTF: Add battery participant for TigerLake - blk-mq-debugfs: update blk_queue_flag_name[] accordingly for new flags - [m68k] mm: fix node memblock init - cifs: prevent truncation from long to int in wait_for_free_credits - [arm64] alternatives: use subsections for replacement sequences - tpm_tis: extra chip->ops check on error path in tpm_tis_core_init - xen/xenbus: avoid large structs and arrays on the stack - xen/xenbus: let xenbus_map_ring_valloc() return errno values only - gfs2: eliminate GIF_ORDERED in favor of list_empty - gfs2: freeze should work on read-only mounts - gfs2: read-only mounts should grab the sd_freeze_gl glock - gfs2: When freezing gfs2, use GL_EXACT and not GL_NOCACHE - gfs2: The freeze glock should never be frozen - [arm64] Add MIDR value for KRYO4XX gold CPU cores - [arm64] Add KRYO4XX gold CPU cores to erratum list 1463225 and 1418040 - [arm64] Add KRYO4XX silver CPU cores to erratum list 1530923 and 1024718 - [i386,mips*/boston] i2c: eg20t: Load module automatically if ID matches - [arm64] alternatives: don't patch up internal branches - iio: core: add missing IIO_MOD_H2/ETHANOL string identifiers - [armhf] iio: mma8452: Add missed iio_device_unregister() call in mma8452_probe() - [arm64] Add missing sentinel to erratum_1463225 - xen/xenbus: Fix a double free in xenbus_map_ring_pv() - [arm64,armhf] net: ethernet: mvneta: Do not error out in non serdes modes - [arm64,armhf] net: ethernet: mvneta: Add back interface mode validation - scsi: qla2xxx: make 1-bit bit-fields unsigned int - io_uring: fix recvmsg memory leak with buffer selection - [arm64,armhf] phy: rockchip: Fix return value of inno_dsidphy_probe() - [arm64,armhf] phy: sun4i-usb: fix dereference of pointer phy0 before it is null checked - [arm64] dts: meson: add missing gxl rng clock - [arm64] dts: meson-gxl-s805x: reduce initial Mali450 core frequency - [armhf] bus: ti-sysc: Fix wakeirq sleeping function called from invalid context - [armhf] bus: ti-sysc: Fix sleeping function called from invalid context for RTC quirk - [armhf] bus: ti-sysc: Do not disable on suspend for no-idle - [x86] dmaengine: dw: Initialize channel before each transfer - [armhf] spi: spi-sun6i: sun6i_spi_transfer_one(): fix setting of clock rate - [x86] staging: comedi: verify array index is correct before using it - serial: core: Initialise spin lock before use in uart_configure_port() - [arm64,armhf] clk: mvebu: ARMADA_AP_CPU_CLK needs to select ARMADA_AP_CP_HELPER - [armhf] clk: AST2600: Add mux for EMMC clock - xprtrdma: Fix double-free in rpcrdma_ep_create() - xprtrdma: Fix recursion into rpcrdma_xprt_disconnect() - xprtrdma: Fix return code from rpcrdma_xprt_connect() - xprtrdma: Fix handling of connect errors - NFS: Fix interrupted slots by sending a solo SEQUENCE operation - fuse: don't ignore errors from fuse_writepages_fill() - xprtrdma: fix incorrect header size calculations - [armhf] dts: socfpga: Align L2 cache-controller nodename with dtschema - keys: asymmetric: fix error return code in software_key_query() - nvme: explicitly update mpath disk capacity on revalidation - regmap: debugfs: Don't sleep while atomic for fast_io regmaps - copy_xstate_to_kernel: Fix typo which caused GDB regression - apparmor: ensure that dfa state tables have entries - RDMA/rxe: Set default vendor ID - PCI/PM: Call .bridge_d3() hook only if non-NULL - perf stat: Zero all the 'ena' and 'run' array slot stats for interval mode - RDMA/mlx5: Verify that QP is created with RQ or SQ - [arm64] clk: qcom: Add missing msm8998 ufs_unipro_core_clk_src - mtd: spi-nor: winbond: Fix 4-byte opcode support for w25q256 - mtd: spi-nor: spansion: fix writes on S25FS512S - [armhf] mtd: rawnand: marvell: Fix the condition on a return code - [armhf] mtd: rawnand: marvell: Use nand_cleanup() when the device is not yet registered - [armhf] mtd: rawnand: marvell: Fix probe error path - mtd: rawnand: timings: Fix default tR_max and tCCS_min timings - [arm64] clk: qcom: gcc: Add GPU and NPU clocks for SM8150 - [arm64] clk: qcom: gcc: Add missing UFS clocks for SM8150 - [arm64] clk: qcom: gcc: Add support for a new frequency for SC7180 - HID: logitech-hidpp: avoid repeated "multiplier = " log messages - HID: magicmouse: do not set up autorepeat - HID: quirks: Always poll Obins Anne Pro 2 keyboard - HID: quirks: Ignore Simply Automated UPB PIM - ALSA: line6: Perform sanity check for each URB creation - ALSA: line6: Sync the pending work cancel at disconnection - ALSA: usb-audio: Fix race against the error recovery URB submission - [x86] ALSA: hda/realtek - change to suitable link model for ASUS platform - [x86] ALSA: hda/realtek: enable headset mic of ASUS ROG Zephyrus G14(G401) series with ALC289 - [x86] ALSA: hda/realtek: Enable headset mic of Acer TravelMate B311R-31 with ALC256 - [x86] ALSA: hda/realtek - Enable Speaker for ASUS UX533 and UX534 - [x86] ALSA: hda/realtek - Enable Speaker for ASUS UX563 - [x86] thunderbolt: Fix path indices used in USB3 tunnel discovery - [arm64,armhf] usb: dwc2: Fix shutdown callback in platform - [arm64,armh] usb: chipidea: core: add wakeup support for extcon - usb: gadget: function: fix missing spinlock in f_uac1_legacy - USB: serial: iuu_phoenix: fix memory corruption - USB: serial: cypress_m8: enable Simply Automated UPB PIM - USB: serial: ch341: add new Product ID for CH340 - USB: serial: option: add GosunCn GM500 series - USB: serial: option: add Quectel EG95 LTE modem - [x86] virt: vbox: Fix VBGL_IOCTL_VMMDEV_REQUEST_BIG and _LOG req numbers to match upstream - [x86] virt: vbox: Fix guest capabilities mask check - [arm64] Revert "tty: xilinx_uartps: Fix missing id assignment to the console" - virtio: virtio_console: add missing MODULE_DEVICE_TABLE() for rproc serial - [sh4] serial: sh-sci: Initialize spinlock for uart console - Revert "serial: core: Refactor uart_unlock_and_check_sysrq()" - serial: core: fix sysrq overhead regression - ovl: fix regression with re-formatted lower squashfs - ovl: inode reference leak in ovl_is_inuse true case. - ovl: relax WARN_ON() when decoding lower directory file handle - ovl: fix unneeded call to ovl_change_flags() - fuse: ignore 'data' argument of mount(..., MS_REMOUNT) - fuse: use ->reconfigure() instead of ->remount_fs() - fuse: Fix parameter for FS_IOC_{GET,SET}FLAGS - Revert "zram: convert remaining CLASS_ATTR() to CLASS_ATTR_RO()" (CVE-2020-10781) - [x86] mei: bus: don't clean driver pointer - [arm64] Revert "Input: elants_i2c - report resolution information for touch major" - [x86] Input: i8042 - add Lenovo XiaoXin Air 12 to i8042 nomux list - [x86] Input: elan_i2c - add more hardware ID for Lenovo laptops - scsi: megaraid_sas: Remove undefined ENABLE_IRQ_POLL macro - timer: Prevent base->clk from moving backward - timer: Fix wheel index calculation on last level - [riscv64] use 16KB kernel stack on 64-bit - hwmon: (emc2103) fix unable to change fan pwm1_enable attribute - hwmon: (drivetemp) Avoid SCT usage on Toshiba DT01ACA family drives - [powerpc*] book3s64/pkeys: Fix pkey_access_permitted() for execute disable pkey - [powerpc*] pseries/svm: Fix incorrect check for shared_lppaca_size - [x86] intel_th: pci: Add Jasper Lake CPU support - [x86] intel_th: pci: Add Tiger Lake PCH-H support - [x86] intel_th: pci: Add Emmitsburg PCH support - [x86] intel_th: Fix a NULL dereference when hub driver is not loaded - opp: Increase parsed_static_opps in _of_add_opp_table_v1() - dmabuf: use spinlock to access dmabuf->name - [x86] thermal: int3403_thermal: Downgrade error message - [armhf] dts: imx6qdl-gw551x: fix audio SSI - [arm64] ptrace: Override SPSR.SS when single-stepping is enabled - [arm64] ptrace: Consistently use pseudo-singlestep exceptions - [arm64] compat: Ensure upper 32 bits of x0 are zero on syscall return - sched: Fix unreliable rseq cpu_id for new tasks - sched/fair: handle case of task_h_load() returning 0 - [x86] ioperm: Fix io bitmap invalidation on Xen PV - genirq/affinity: Handle affinity setting on inactive interrupts correctly - [x86] drm/vmwgfx: fix update of display surface when resolution changes - drm/amdgpu/powerplay: Modify SMC message name for setting power profile mode - drm/amdgpu/sdma5: fix wptr overwritten in ->get_wptr() - drm/amd/display: handle failed allocation during stream construction - drm/amd/display: OLED panel backlight adjust not work with external display connected - drm/amdgpu/display: create fake mst encoders ahead of time (v4) - [x86] drm/i915: Move cec_notifier to intel_hdmi_connector_unregister, v2. - [x86] drm/i915/gt: Ignore irq enabling on the virtual engines - [x86] drm/i915/gt: Only swap to a random sibling once upon creation - libceph: don't omit recovery_deletes in target_copy() - rxrpc: Fix trace string - [x86] iommu/vt-d: Make Intel SVM code 64-bit only - mm/memory.c: properly pte_offset_map_lock/unlock in vm_insert_pages() - [x86] drm/i915/gvt: Fix two CFL MMIO handling caused by regression. - [arm64,armhf] gpio: pca953x: disable regmap locking for automatic address incrementing - bpf: sockmap: Check value of unused args to BPF_PROG_ATTACH - bpf: sockmap: Require attach_bpf_fd when detaching a program - [x86] drm/i915/perf: Use GTT when saving/restoring engine GPR [ Aurelien Jarno ] * Enable perf on riscv64. [ Salvatore Bonaccorso ] * drivers/net/ethernet/intel: Enable IGC as module (Closes: #965931) * [x86] ioperm: Fix io bitmap invalidation on Xen PV (CVE-2020-15852, XSA-329) * certs: Rotate to use the Debian Secure Boot Signer 2020 certificate * perf cs-etm: Move definition of 'traceid_list' global variable from header file (Closes: #957491) * usbip: tools: fix build error for multiple definition [ Ben Hutchings ] * libtraceevent: Fix build with binutils 2.35 * Bump ABI to 2 [ John Paul Adrian Glaubitz ] * [sh4] Add patch to implement __get_user_u64() -- Salvatore Bonaccorso Sun, 26 Jul 2020 08:40:40 +0200 linux (5.7.6-1) unstable; urgency=medium * New upstream release: https://kernelnewbies.org/Linux_5.7 - [x86] syscalls: Revert "x86/syscalls: Make __X32_SYSCALL_BIT be unsigned long" (Closes: #954294) * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.7.1 https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.7.2 - vt: keyboard: avoid signed integer overflow in k_ascii (CVE-2020-13974) https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.7.3 - [x86] speculation: Prevent rogue cross-process SSBD shutdown (CVE-2020-10766) - [x86] speculation: Avoid force-disabling IBPB based on STIBP and enhanced IBRS. (CVE-2020-10767) - [x86] speculation: PR_SPEC_FORCE_DISABLE enforcement for indirect branches. (CVE-2020-10768) https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.7.4 https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.7.5 https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.7.6 [ Ben Hutchings ] * fs: Enable EXFAT_FS as module (Closes: #959781) * Fix conversion of meta-package doc directories to symlinks (Closes: #942861) [ Vagrant Cascadian ] * [arm64] Enable DRM_ANALOGIX_ANX6345 as a module. * [arm64] Add analogix-anx6345, pwm-sun4i, sun4i-drm and sun8i-mixer to fb-modules udeb. [ Helge Deller ] * [hppa] Don't run dh_strip on vmlinuz (Closes: #961299) [ YunQiang Su ] * [mips/loongson-3] Enable SERIAL_OF_PLATFORM and OF (Closes: 961328) [ Aurelien Jarno ] * Enable CONFIG_NVME_HWMON (Closes: #961823) [ Romain Perier ] * [arm64] Enable PCIE_BRCMSTB * [arm64] Enable BCM2711_THERMAL [ Salvatore Bonaccorso ] * nfsd: apply umask on fs without ACL support (Closes: #962254) * [rt] Add new signing key for Tom Zanussi * Set ABI to 1 * [arm64] Remove explicit setting of CONFIG_HNS * debian/config: Clean up with the help of kconfigeditor2 [ Gianfranco Costamagna ] * [x86] Enable VBOXSF_FS as a module (Closes: #961516) -- Salvatore Bonaccorso Wed, 24 Jun 2020 20:56:57 +0200 linux (5.7~rc5-1~exp1) experimental; urgency=medium * New upstream release candidate [ Romain Perier ] * Enable support for fsverity [ Ben Hutchings ] * [rt] Disable until it is updated for 5.5 or later * lockdown: Update Secure Boot support patches for 5.7 * [amd64] Update "x86: Make x32 syscall support conditional ..." for 5.7 * Update "tools/perf: pmu-events: Fix reproducibility" for 5.7 -- Ben Hutchings Sun, 10 May 2020 23:42:53 +0100 linux (5.6.14-2) unstable; urgency=medium [ Vagrant Cascadian ] * [arm64] Add pwm-sun4i to fb-modules udeb. [ Salvatore Bonaccorso ] * kernel/relay.c: handle alloc_percpu returning NULL in relay_open (CVE-2019-19462) * fs/binfmt_elf.c: allocate initialized memory in fill_thread_core_info() (CVE-2020-10732) * mm: Fix mremap not considering huge pmd devmap (CVE-2020-10757) [ Ben Hutchings ] * [x86] Add support for mitigation of Special Register Buffer Data Sampling (SRBDS) (CVE-2020-0543): - x86/cpu: Add 'table' argument to cpu_matches() - x86/speculation: Add Special Register Buffer Data Sampling (SRBDS) mitigation - x86/speculation: Add SRBDS vulnerability and mitigation documentation - x86/speculation: Add Ivy Bridge to affected list * [x86] speculation: Do not match steppings, to avoid an ABI change -- Ben Hutchings Tue, 09 Jun 2020 18:50:00 +0100 linux (5.6.14-1) unstable; urgency=medium * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.6.8 - mm: check that mm is still valid in madvise() - watchdog: reset last_hw_keepalive time at start - scsi: lpfc: Fix kasan slab-out-of-bounds error in lpfc_unreg_login - xfs: correctly acount for reclaimable slabs - scsi: lpfc: Fix crash after handling a pci error - scsi: lpfc: Fix crash in target side cable pulls hitting WAIT_FOR_UNREG - scsi: libfc: If PRLI rejected, move rport to PLOGI state - ceph: return ceph_mdsc_do_request() errors from __get_parent() - ceph: don't skip updating wanted caps when cap is stale - [armhf] pwm: imx27: Fix clock handling in pwm_imx27_apply() - nvme-tcp: fix possible crash in write_zeroes processing - scsi: iscsi: Report unbind session event when the target has been removed - [x86] ASoC: Intel: atom: Take the drv->lock mutex before calling sst_send_slot_map() - nvme: fix deadlock caused by ANA update wrong locking - drm/amd/display: Update stream adjust in dc_stream_adjust_vmin_vmax - dma-direct: fix data truncation in dma_direct_get_required_mask() - kernel/gcov/fs.c: gcov_seq_next() should increase position index - ipc/util.c: sysvipc_find_ipc() should increase position index - block: fix busy device checking in blk_drop_partitions - [s390x] cio: generate delayed uevent for vfio-ccw subchannels - [s390x] cio: avoid duplicated 'ADD' uevents - loop: Better discard support for block devices - [powerpc*] Revert "powerpc/64: irq_work avoid interrupt when called with hardware irqs enabled" - [powerpc*] pseries: Fix MCE handling on pseries - nvme: fix compat address handling in several ioctls - pwm: renesas-tpu: Fix late Runtime PM enablement - [armel, armhf, arm64] pwm: bcm2835: Dynamically allocate base - scsi: lpfc: Fix erroneous cpu limit of 128 on I/O statistics - scsi: lpfc: Fix lockdep error - register non-static key - perf/core: Disable page faults when getting phys address - drm/amd/display: Calculate scaling ratios on every medium/full update - ASoC: Intel: bytcr_rt5640: Add quirk for MPMAN MPWIN895CL tablet - ALSA: usb-audio: Add Pioneer DJ DJM-250MK2 quirk - xhci: Ensure link state is U3 after setting USB_SS_PORT_LS_U3 - xhci: Wait until link state trainsits to U0 after setting USB_SS_PORT_LS_U0 - xhci: Finetune host initiated USB3 rootport link suspend and resume - block: fix busy device checking in blk_drop_partitions again - cxgb4: fix adapter crash due to wrong MC size - cxgb4: fix large delays in PTP synchronization - ipv4: Update fib_select_default to handle nexthop objects - ipv6: fix restrict IPV6_ADDRFORM operation - macsec: avoid to set wrong mtu - macvlan: fix null dereference in macvlan_device_event() - mlxsw: Fix some IS_ERR() vs NULL bugs - [arm64] net: bcmgenet: correct per TX/RX ring statistics - net/mlx4_en: avoid indirect call in TX completion - net: netrom: Fix potential nr_neigh refcnt leak in nr_add_node - net: openvswitch: ovs_ct_exit to be done under ovs_lock - [armhf, arm64] net: stmmac: dwmac-meson8b: Add missing boundary to RGMII TX clock array - net/x25: Fix x25_neigh refcnt leak when receiving frame - sched: etf: do not assume all sockets are full blown - tcp: cache line align MAX_TCP_HEADER - team: fix hang in team_mode_get() - tipc: Fix potential tipc_aead refcnt leak in tipc_crypto_rcv - tipc: Fix potential tipc_node refcnt leak in tipc_rcv - vrf: Fix IPv6 with qdisc and xfrm - net: dsa: b53: Lookup VID in ARL searches when VLAN is enabled - net: dsa: b53: Fix valid setting for MDB entries - net: dsa: b53: Fix ARL register definitions - net: dsa: b53: Rework ARL bin logic - net: dsa: b53: b53_arl_rw_op() needs to select IVL or SVL - vxlan: use the correct nlattr array in NL_SET_ERR_MSG_ATTR - geneve: use the correct nlattr array in NL_SET_ERR_MSG_ATTR - xfrm: Always set XFRM_TRANSFORMED in xfrm{4,6}_output_finish - vrf: Check skb for XFRM_TRANSFORMED flag - net: ethernet: ixp4xx: Add error handling in ixp4xx_eth_probe() - KEYS: Avoid false positive ENOMEM error on key read - ALSA: hda: Remove ASUS ROG Zenith from the blacklist - ALSA: usb-audio: Add static mapping table for ALC1220-VB-based mobos - ALSA: usb-audio: Add connector notifier delegation - mac80211: populate debugfs only after cfg80211 init - libbpf: Only check mode flags in get_xdp_id - iio: core: remove extra semi-colon from devm_iio_device_register() macro - iio: imu: st_lsm6dsx: flush hw FIFO before resetting the device - iio: st_sensors: rely on odr mask to know if odr can be set - iio: adc: stm32-adc: fix sleep in atomic context - iio: adc: ti-ads8344: properly byte swap value - USB: sisusbvga: Change port variable from signed to unsigned - USB: Add USB_QUIRK_DELAY_CTRL_MSG and USB_QUIRK_DELAY_INIT for Corsair K70 RGB RAPIDFIRE - USB: early: Handle AMD's spec-compliant identifiers, too - USB: core: Fix free-while-in-use bug in the USB S-Glibrary (CVE-2020-12464) - USB: hub: Fix handling of connect changes during sleep - USB: hub: Revert commit bd0e6c9614b9 ("usb: hub: try old enumeration scheme first for high speed devices") - tty: serial: owl: add "much needed" clk_prepare_enable() - vmalloc: fix remap_vmalloc_range() bounds checks - staging: gasket: Fix incongruency in handling of sysfs entries creation - coredump: fix null pointer dereference on coredump - mm/hugetlb: fix a addressing exception caused by huge_pte_offset - mm/ksm: fix NULL pointer dereference when KSM zero page is enabled - ALSA: usx2y: Fix potential NULL dereference - ALSA: hda/realtek - Fix unexpected init_amp override - ALSA: hda/realtek - Add new codec supported for ALC245 - ALSA: hda/hdmi: Add module option to disable audio component binding - ALSA: usb-audio: Fix usb audio refcnt leak when getting spdif - ALSA: usb-audio: Filter out unsupported sample rates on Focusrite devices - tpm/tpm_tis: Free IRQ if probing fails - tpm: fix wrong return value in tpm_pcr_extend - tpm: ibmvtpm: retry on H_CLOSED in tpm_ibmvtpm_send() - [s390x] KVM: Return last valid slot if approx index is out-of-bounds - KVM: Check validity of resolved slot when searching memslots - [x86] KVM: VMX: Enable machine check support for 32bit targets - tty: hvc: fix buffer overflow during hvc_alloc(). - tty: rocket, avoid OOB access - usb-storage: Add unusual_devs entry for JMicron JMS566 - signal: Avoid corrupting si_pid and si_uid in do_notify_parent - drm/dp_mst: Zero assigned PBN when releasing VCPI slots - audit: check the length of userspace generated audit records - ASoC: dapm: fixup dapm kcontrol widget - SUNRPC: Fix backchannel RPC soft lockups - iwlwifi: pcie: actually release queue memory in TVQM - iwlwifi: mvm: beacon statistics shouldn't go backwards - iwlwifi: pcie: indicate correct RB size to device - iwlwifi: mvm: limit maximum queue appropriately - iwlwifi: mvm: Do not declare support for ACK Enabled Aggregation - iwlwifi: mvm: fix inactive TID removal return value usage - iwlwifi: fix WGDS check when WRDS is disabled - cifs: fix uninitialised lease_key in open_shroot() - [armhf] imx: provide v7_cpu_resume() only on ARM_CPU_SUSPEND=y - [powerpc*] 8xx: Fix STRICT_KERNEL_RWX startup test failure - [powerpc*] setup_64: Set cache-line-size based on cache-block-size - [x86] staging: comedi: dt2815: fix writing hi byte of analog output - [x86] staging: comedi: Fix comedi_device refcnt leak in comedi_open - vt: don't hardcode the mem allocation upper bound - vt: don't use kmalloc() for the unicode screen buffer - [x86] staging: vt6656: Don't set RCR_MULTICAST or RCR_BROADCAST by default. - [x86] staging: vt6656: Fix calling conditions of vnt_set_bss_mode - [x86] staging: vt6656: Fix drivers TBTT timing counter. - [x86] staging: vt6656: Fix pairwise key entry save. - [x86] staging: vt6656: Power save stop wake_up_count wrap around. - [x86] mei: me: fix irq number stored in hw struct - cdc-acm: close race betrween suspend() and acm_softint - cdc-acm: introduce a cool down - UAS: no use logging any details in case of ENODEV - UAS: fix deadlock in error handling and PM flushing work - fpga: dfl: pci: fix return value of cci_pci_sriov_configure - [armhf, arm64] usb: dwc3: gadget: Fix request completion check - usb: f_fs: Clear OS Extended descriptor counts to zero in ffs_data_reset() - [x86] usb: typec: tcpm: Ignore CC and vbus changes in PORT_RESET change - [x86] usb: typec: altmode: Fix typec_altmode_get_partner sometimes returning an invalid pointer - xhci: Fix handling halted endpoint even if endpoint ring appears empty - xhci: prevent bus suspend if a roothub port detected a over-current condition - xhci: Don't clear hub TT buffer on ep0 protocol stall - serial: sh-sci: Make sure status register SCxSR is read in correct sequence - Revert "serial: uartps: Fix uartps_major handling" - Revert "serial: uartps: Use the same dynamic major number for all ports" - Revert "serial: uartps: Fix error path when alloc failed" - Revert "serial: uartps: Do not allow use aliases >= MAX_UART_INSTANCES" - Revert "serial: uartps: Change uart ID port allocation" - Revert "serial: uartps: Move Port ID to device data structure" - Revert "serial: uartps: Register own uart console and driver structures" - [x86] drm/i915/gt: Update PMINTRMSK holding fw https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.6.9 - ubifs: Fix ubifs_tnc_lookup() usage in do_kill_orphans() - printk: queue wake_up_klogd irq_work only if per-CPU areas are ready - [armhf] ASoC: stm32: sai: fix sai probe - [armhf, arm64] usb: dwc3: gadget: Do link recovery for SS and SSP - [armel, armhf] ARM: dts: bcm283x: Add cells encoding format to firmware bus - usb: gadget: udc: bdc: Remove unnecessary NULL checks in bdc_req_complete - usb: gadget: udc: atmel: Fix vbus disconnect handling - afs: Make record checking use TASK_UNINTERRUPTIBLE when appropriate - afs: Fix to actually set AFS_SERVER_FL_HAVE_EPOCH - iio:ad7797: Use correct attribute_group - iio: imu: st_lsm6dsx: fix read misalignment on untagged FIFO - iio: imu: st_lsm6dsx: specify slave odr in slv_odr - propagate_one(): mnt_set_mountpoint() needs mount_lock - counter: 104-quad-8: Add lock guards - generic interface - [s390x] ftrace: fix potential crashes when switching tracers - ASoC: q6dsp6: q6afe-dai: add missing channels to MI2S DAIs - iwlwifi: actually check allocated conf_tlv pointer - ASoC: tas571x: disable regulators on failed probe - [armhf, arm64] ASoC: meson: axg-card: fix codec-to-codec link setup - ASoC: wm8960: Fix wrong clock after suspend & resume - nfsd: memory corruption in nfsd4_lock() - [armhf] dts: OMAP3: disable RNG on N950/N9 - bpf: Forbid XADD on spilled pointers for unprivileged users - brcmfmac: add stub for monitor interface xmit - i2c: altera: use proper variable to hold errno - clk: asm9260: fix __clk_hw_register_fixed_rate_with_accuracy typo - rtw88: avoid unused function warnings - hwmon: (drivetemp) Return -ENODATA for invalid temperatures - rxrpc: Fix DATA Tx to disable nofrag for UDP on AF_INET6 socket - netfilter: nf_tables: reintroduce the NFT_SET_CONCAT flag - [x86] efi: Don't remap text<->rodata gap read-only for mixed mode - net/cxgb4: Check the return from t4_query_params properly - tipc: fix incorrect increasing of link window - xfs: acquire superblock freeze protection on eofblocks scans - svcrdma: Fix trace point use-after-free race - svcrdma: Fix leak of svc_rdma_recv_ctxt objects - [armhf, arm64] net/mlx5e: Don't trigger IRQ multiple times on XSK wakeup to avoid WQ overruns - [armhf, arm64] net/mlx5e: Get the latest values from counters in switchdev mode - PCI: Avoid ASMedia XHCI USB PME# from D0 defect - PCI: Add Zhaoxin Vendor ID - PCI: Add ACS quirk for Zhaoxin multi-function devices - PCI: Add ACS quirk for Zhaoxin Root/Downstream Ports - PCI: Move Apex Edge TPU class quirk to fix BAR assignment - ARM: dts: bcm283x: Disable dsi0 node - cpumap: Avoid warning when CONFIG_DEBUG_PER_CPU_MAPS is enabled - [s390x] pci: do not set affinity for floating irqs - remoteproc: mtk_scp: use dma_addr_t for DMA API - net/mlx5: Fix failing fw tracer allocation on s390 - sched/core: Fix reset-on-fork from RT with uclamp - perf/core: fix parent pid/tid in task exit events - netfilter: nat: fix error handling upon registering inet hook - PM: sleep: core: Switch back to async_schedule_dev() - blk-iocost: Fix error on iocost_ioc_vrate_adj - bpf: Fix handling of XADD on BTF memory - [x86] bpf: Fix encoding for lower 8-bit registers in BPF_STX BPF_B - [x86] bpf: x32: Fix incorrect encoding in BPF_LDX zero-extension - [x86] bpf: x32: Fix clobbering of dst for BPF_JSET - [x86] bpf, x32: Fix logic error in BPF_LDX zero-extension - bpf: Propagate expected_attach_type when verifying freplace programs - mm: shmem: disable interrupt when acquiring info->lock in userfaultfd_copy path - xfs: clear PF_MEMALLOC before exiting xfsaild thread - libbpf: Initialize *nl_pid so gcc 10 is happy - [armhf] net: fec: set GPR bit on suspend by DT configuration. - [x86] hyperv: report value of misc_features - signal: check sig before setting info in kill_pid_usb_asyncio - afs: Fix length of dump of bad YFSFetchStatus record - xfs: fix partially uninitialized structure in xfs_reflink_remap_extent - ALSA: hda: Release resources at error in delayed probe - ALSA: hda: Keep the controller initialization even if no codecs found - ALSA: hda: Explicitly permit using autosuspend if runtime PM is supported - drm/amdgpu: fix wrong vram lost counter increment V2 - scsi: target: fix PR IN / READ FULL STATUS for FC - scsi: target: tcmu: reset_ring should reset TCMU_DEV_BIT_BROKEN - objtool: Fix CONFIG_UBSAN_TRAP unreachable warnings - objtool: Support Clang non-section symbols in ORC dump - xen/xenbus: ensure xenbus_map_ring_valloc() returns proper grant status - ALSA: hda: call runtime_allow() for all hda controllers - net: stmmac: socfpga: Allow all RGMII modes - mac80211: fix channel switch trigger from unknown mesh peer - sched/isolation: Allow "isolcpus=" to skip unknown sub-parameters - sched/vtime: Work around an unitialized variable warning - [arm64] Delete the space separator in __emit_inst - ext4: use matching invalidatepage in ext4_writepage - ext4: increase wait time needed before reuse of deleted inode numbers - ext4: convert BUG_ON's to WARN_ON's in mballoc.c - irqchip/gic-v4.1: Add support for VPENDBASER's Dirty+Valid signaling - blk-mq: Put driver tag in blk_mq_dispatch_rq_list() when no budget - irqchip/meson-gpio: Fix HARDIRQ-safe -> HARDIRQ-unsafe lock order - hwmon: (jc42) Fix name to have no illegal characters - sfc: fix XDP-redirect in this driver - taprio: do not use BIT() in TCA_TAPRIO_ATTR_FLAG_* definitions - tipc: Add a missing case of TIPC_DIRECT_MSG type - qed: Fix race condition between scheduling and destroying the slowpath workqueue - Crypto: chelsio - Fixes a hang issue during driver registration - net: use indirect call wrappers for skb_copy_datagram_iter() - qed: Fix use after free in qed_chain_free - ext4: check for non-zero journal inum in ext4_calculate_overhead - ASoC: soc-pcm: fix regression in soc_new_pcm() - ASoC: soc-core: disable route checks for legacy devices - [armhf] ASoC: stm32: spdifrx: fix regmap status check https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.6.10 - Revert "ASoC: meson: axg-card: fix codec-to-codec link setup" https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.6.11 - drm/scheduler: fix drm_sched_get_cleanup_job - dma-buf: Fix SET_NAME ioctl uapi - drm/amdgpu: invalidate L2 before SDMA IBs (v2) - drm/edid: Fix off-by-one in DispID DTD pixel clock - drm/amd/display: Fix green screen issue after suspend - [x86] drm/i915/gem: Hold obj->vma.lock over for_each_ggtt_vma() - [x86] drm/i915/gt: Check cacheline is valid before acquiring - drm/qxl: qxl_release leak in qxl_draw_dirty_fb() - drm/qxl: qxl_release leak in qxl_hw_surface_alloc() - drm/qxl: qxl_release use after free - NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION - btrfs: fix transaction leak in btrfs_recover_relocation - btrfs: fix block group leak when removing fails - btrfs: fix partial loss of prealloc extent past i_size after fsync - btrfs: transaction: Avoid deadlock due to bad initialization timing of fs_info::journal_info - mmc: cqhci: Avoid false "cqhci: CQE stuck on" by not open-coding timeout loop - [arm64] mmc: sdhci-xenon: fix annoying 1.8V regulator warning - mmc: sdhci-pci: Fix eMMC driver strength for BYT-based controllers - [arm64] mmc: sdhci-msm: Enable host capabilities pertains to R1b response - [armhf] mmc: meson-mx-sdio: Set MMC_CAP_WAIT_WHILE_BUSY - [armhf] mmc: meson-mx-sdio: remove the broken ->card_busy() op - ALSA: hda/realtek - Two front mics on a Lenovo ThinkCenter - ALSA: usb-audio: Correct a typo of NuPrime DAC-10 USB ID - ALSA: hda/hdmi: fix without unlocked before return - ALSA: line6: Fix POD HD500 audio playback - ALSA: pcm: oss: Place the plugin buffer overflow checks correctly - [x86] i2c: amd-mp2-pci: Fix Oops in amd_mp2_pci_init() error handling - [x86] hyperv: Suspend/resume the VP assist page for hibernation - [x86] Drivers: hv: vmbus: Fix Suspend-to-Idle for Generation-2 VM - dlmfs_file_write(): fix the bogosity in handling non-zero *ppos - selinux: properly handle multiple messages in selinux_netlink_send() - [amd64] IB/rdmavt: Always return ERR_PTR from rvt_create_mmap_info() - PM: ACPI: Output correct message on target power state - PM: hibernate: Freeze kernel threads in software_resume() - dm writecache: fix data corruption when reloading the target - dm multipath: use updated MPATHF_QUEUE_IO on mapping for bio-based mpath - block: remove the bd_openers checks in blk_drop_partitions - scsi: qla2xxx: set UNLOADING before waiting for session deletion - scsi: qla2xxx: check UNLOADING before posting async work - RDMA/mlx5: Set GRH fields in query QP on RoCE - RDMA/uverbs: Fix a race with disassociate and exit_mmap() - RDMA/mlx4: Initialize ib_spec on the stack - RDMA/core: Prevent mixed use of FDs between shared ufiles - RDMA/core: Fix overwriting of uobj in case of error - RDMA/core: Fix race between destroy and release FD object - RDMA/cm: Fix ordering of xa_alloc_cyclic() in ib_create_cm_id() - RDMA/cm: Fix an error check in cm_alloc_id_priv() - [arm64] dmaengine: hisilicon: Fix build error without PCI_MSI - [x86,arm64] vfio: avoid possible overflow in vfio_iommu_type1_pin_pages - [x86,arm64] vfio/type1: Fix VA->PA translation for PFNMAP VMAs in vaddr_get_pfn() - [arm64] iommu/qcom: Fix local_base status check - dmaengine: fix channel index enumeration - scsi: target/iblock: fix WRITE SAME zeroing - iommu: Properly export iommu_group_get_for_dev() - [amd64] iommu/vt-d: Use right Kconfig option name - [amd64] iommu/amd: Fix legacy interrupt remapping for x2APIC-enabled system - [armhf] i2c: aspeed: Avoid i2c interrupt status clear race condition. - [i386] ALSA: opti9xx: shut up gcc-10 range warning - Fix use after free in get_tree_bdev() - nvme: prevent double free in nvme_alloc_ns() error handling - nfs: Fix potential posix_acl refcnt leak in nfs3_set_acl - [x86] drm/i915: Use proper fault mask in interrupt postinstall too - [arm64] vdso: Add -fasynchronous-unwind-tables to cflags - io_uring: statx must grab the file table for valid fd https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.6.12 - vhost: vsock: kick send_pkt worker once device is started - [arm64,armhf] drm/bridge: analogix_dp: Split bind() into probe() and real bind() - [x86] ASoC: topology: Add missing memory checks - [x86] ASoC: topology: Check return value of soc_tplg_create_tlv - [x86] ASoC: topology: Check return value of soc_tplg_*_create - [x86] ASoC: topology: Check soc_tplg_add_route return value - [x86] ASoC: topology: Check return value of pcm_new_ver - [x86] ASoC: topology: Check return value of soc_tplg_dai_config - SUNRPC/cache: Fix unsafe traverse caused double-free in cache_purge - scsi: sg: add sg_remove_request in sg_write (CVE-2020-12770) - [armhf] ASoC: sgtl5000: Fix VAG power-on handling - [x86] ASoC: topology: Fix endianness issue - [arm64,armhf] usb: dwc3: gadget: Properly set maxpacket limit - [x86] ASoC: codecs: hdac_hdmi: Fix incorrect use of list_for_each_entry - wimax/i2400m: Fix potential urb refcnt leak - [armhf] net: stmmac: fix enabling socfpga's ptp_ref_clock - [arm64,armhf] net: stmmac: Fix sub-second increment - cifs: protect updating server->dstaddr with a spinlock - cifs: do not share tcons with DFS - tracing: Fix memory leaks in trace_events_hist.c - ftrace: Fix memory leak caused by not freeing entry in unregister_ftrace_direct() - mac80211: sta_info: Add lockdep condition for RCU list usage - [arm64] net: bcmgenet: suppress warnings on failed Rx SKB allocations - sctp: Fix SHUTDOWN CTSN Ack in the peer restart case - drm/amdgpu: Fix oops when pp_funcs is unset in ACPI event - ALSA: hda: Match both PCI ID and SSID for driver blacklist - [x86] kvm: fix a missing-prototypes "vmread_error" - [x86] platform: GPD pocket fan: Fix error message when temp-limits are out of range - ACPI: PM: s2idle: Fix comment in acpi_s2idle_prepare_late() - mac80211: add ieee80211_is_any_nullfunc() - cgroup, netclassid: remove double cond_resched - mm/mremap: Add comment explaining the untagging behaviour of mremap() https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.6.13 - [x86] thunderbolt: Check return value of tb_sw_read() in usb4_switch_op() - USB: serial: qcserial: Add DW5816e support - drm/amdgpu: move kfd suspend after ip_suspend_phase1 - drm/amdgpu: drop redundant cg/pg ungate on runpm enter - vt: fix unicode console freeing with a common interface - [arm64] tty: xilinx_uartps: Fix missing id assignment to the console - ext4: don't set dioread_nolock by default for blocksize < pagesize - ext4: disable dioread_nolock whenever delayed allocation is disabled - nvme: refactor nvme_identify_ns_descs error handling - nvme: fix possible hang when ns scanning fails during error recovery - tracing/kprobes: Fix a double initialization typo - [arm64,riscv64] net: macb: Fix runtime PM refcounting - cxgb4: fix EOTID leak when disabling TC-MQPRIO offload - devlink: Fix reporter's recovery condition - devlink: fix return value after hitting end in region read - fq_codel: fix TCA_FQ_CODEL_DROP_BATCH_SIZE sanity checks - ipv6: Use global sernum for dst validation with nexthop objects - neigh: send protocol value in neighbor create notification - net: bridge: vlan: Add a schedule point during VLAN processing - [arm64,armhf] net: dsa: Do not leave DSA master with NULL netdev_ops - [arm64,armhf] net: dsa: Do not make user port errors fatal - [arm64,riscv64] net: macb: fix an issue about leak related system resources - net: macsec: preserve ingress frame ordering - net/mlx4_core: Fix use of ENOSPC around mlx4_counter_alloc() - net: phy: marvell10g: fix temperature sensor on 2110 - net_sched: sch_skbprio: add message validation to skbprio_change() - net: stricter validation of untrusted gso packets - net: usb: qmi_wwan: add support for DW5816e - nfp: abm: fix a memory leak bug - sch_choke: avoid potential panic in choke_reset() - sch_sfq: validate silly quantum values - tipc: fix partial topology connection closure - tunnel: Propagate ECT(1) when decapsulating as recommended by RFC6040 - bnxt_en: Fix VF anti-spoof filter setup. - bnxt_en: Reduce BNXT_MSIX_VEC_MAX value to supported CQs per PF. - bnxt_en: Improve AER slot reset. - bnxt_en: Return error when allocating zero size context memory. - bnxt_en: Fix VLAN acceleration handling in bnxt_fix_features(). - net/mlx5: DR, On creation set CQ's arm_db member to right value - net/mlx5: Fix forced completion access non initialized command entry - net/mlx5: Fix command entry leak in Internal Error State - net/mlx5e: Fix q counters on uplink representors - [arm64,armhf] net: mvpp2: prevent buffer overflow in mvpp22_rss_ctx() - [arm64,armhf] net: mvpp2: cls: Prevent buffer overflow in mvpp2_ethtool_cls_rule_del() - wireguard: queueing: cleanup ptr_ring in error path of packet_queue_init - wireguard: receive: use tunnel helpers for decapsulating ECN markings - wireguard: socket: remove errant restriction on looping to self - wireguard: send/receive: cond_resched() when processing worker ringbuffers - HID: wacom: Read HID_DG_CONTACTMAX directly for non-generic devices - sctp: Fix bundling of SHUTDOWN with COOKIE-ACK - Revert "HID: wacom: generic: read the number of expected touches on a per collection basis" - HID: usbhid: Fix race between usbhid_close() and usbhid_stop() - HID: wacom: Report 2nd-gen Intuos Pro S center button status over BT - USB: uas: add quirk for LaCie 2Big Quadra - [arm64,armhf] usb: chipidea: msm: Ensure proper controller reset using role switch API - USB: serial: garmin_gps: add sanity checking for data length - tracing/boottime: Fix kprobe event API usage - tracing/kprobes: Reject new event if loc is NULL - tracing: Wait for preempt irq delay thread to finish - tracing: Add a vmalloc_sync_mappings() for safe measure - crypto: arch/lib - limit simd usage to 4k chunks - [s390x] KVM: Remove false WARN_ON_ONCE for the PQAP instruction - [x86] KVM: VMX: Explicitly clear RFLAGS.CF and RFLAGS.ZF in VM-Exit RSB path - [arm64,armhf] KVM: vgic: Fix limit condition when writing to GICD_I[CS]ACTIVER - [arm64] KVM: Fix 32bit PC wrap-around - [arm64] hugetlb: avoid potential NULL dereference - driver core: platform: Initialize dma_parms for platform devices - [arm*] amba: Initialize dma_parms for amba devices - [x86] mei: me: disable mei interface on LBG servers. - ipc/mqueue.c: change __do_notify() to bypass check_kill_permission() - epoll: atomically remove wait entry on wake up - eventpoll: fix missing wakeup for ovflist in ep_poll_callback - mm/page_alloc: fix watchdog soft lockups during set_zone_contiguous() - mm: limit boost_watermark on small zones - ceph: fix endianness bug when handling MDS session feature bits - ceph: demote quotarealm lookup warning to a debug message - coredump: fix crash when umh is disabled - [riscv64] set max_pfn to the PFN of the last page - batman-adv: fix batadv_nc_random_weight_tq - batman-adv: Fix refcnt leak in batadv_show_throughput_override - batman-adv: Fix refcnt leak in batadv_store_throughput_override - batman-adv: Fix refcnt leak in batadv_v_ogm_process - [x86] mm/cpa: Flush direct map alias during cpa - [x86] entry/64: Fix unwind hints in register clearing code - [x86] entry/64: Fix unwind hints in kernel exit path - [x86] entry/64: Fix unwind hints in __switch_to_asm() - [x86] entry/64: Fix unwind hints in rewind_stack_do_exit() - [amd64] x86/unwind/orc: Don't skip the first frame for inactive tasks - [amd64] x86/unwind/orc: Prevent unwinding before ORC initialization - [amd64] x86/unwind/orc: Fix error path for bad ORC entry type - [amd64] x86/unwind/orc: Fix premature unwind stoppage due to IRET frames - [x86] KVM: Fixes posted interrupt check for IRQs delivery modes - [x86] arch/x86/kvm/svm/sev.c: change flag passed to GUP fast in sev_pin_memory() - netfilter: nat: never update the UDP checksum when it's 0 - netfilter: nf_osf: avoid passing pointer to local var - [x86] kvm: ioapic: Restrict lazy EOI update to edge-triggered interrupts - scripts/decodecode: fix trapping instruction formatting - mm, memcg: fix error return value of mem_cgroup_css_alloc() - bdi: move bdi_dev_name out of line - bdi: add a ->dev_name field to struct backing_dev_info - io_uring: don't use 'fd' for openat/openat2/statx - fsnotify: replace inode pointer with an object id - fanotify: merge duplicate events on parent and child https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.6.14 - [x86] KVM: nVMX: Consolidate nested MTF checks to helper function - [x86] kvm: nVMX: reflect MTF VM-exits if injected by L1 - xprtrdma: Clean up the post_send path - xprtrdma: Fix trace point use-after-free race - [x86] drm/i915/tgl: Add Wa_14010477008:tgl - [x86] drm/i915/tgl: TBT AUX should use TC power well ops - [x86] drm/i915/display: Load DP_TP_CTL/STATUS offset before use it - shmem: fix possible deadlocks on shmlock_user_lock - net: phy: microchip_t1: add lan87xx_phy_init to initialize the lan87xx phy. - [arm64,armhf] KVM: vgic: Synchronize the whole guest on GIC{D,R}_I{S,C}ACTIVER read - [arm64,armhf] KVM: vgic-v2: Only use the virtual state when userspace accesses pending bits - gpio: pca953x: Fix pca953x_gpio_set_config - SUNRPC: Add "@len" parameter to gss_unwrap() - SUNRPC: Fix GSS privacy computation of auth->au_ralign - [x86] hv_netvsc: Fix netvsc_start_xmit's return type - drop_monitor: work around gcc-10 stringop-overflow warning - virtio-blk: handle block_device_operations callbacks after hot unplug - net_sched: fix tcm_parent in tc filter dump - [arm64,armhf] net: stmmac: gmac5+: fix potential integer overflow on 32 bit multiply - [amd64] iommu/amd: Fix race in increase_address_space()/fetch_pte() - [amd64] iommu/amd: Update Device Table in increase_address_space() - mmc: sdhci-acpi: Add SDHCI_QUIRK2_BROKEN_64_BIT_DMA for AMDI0040 - [arm64] dpaa2-eth: properly handle buffer size restrictions - mptcp: set correct vfs info for subflows - net: fix a potential recursive NETDEV_FEAT_CHANGE - netlabel: cope with NULL catmap (CVE-2020-10711) - net: phy: fix aneg restart in phy_ethtool_set_eee - [arm64] net: stmmac: fix num_por initialization - pppoe: only process PADT targeted at local interfaces - Revert "ipv6: add mtu lock check in __ip6_rt_update_pmtu" - tcp: fix error recovery in tcp_zerocopy_receive() - tcp: fix SO_RCVLOWAT hangs with fat skbs - virtio_net: fix lockdep warning on 32 bit - [arm64] dpaa2-eth: prevent array underflow in update_cls_rule() - hinic: fix a bug of ndo_stop - net: ipv4: really enforce backoff for redirects - netprio_cgroup: Fix unlimited memory leak of v2 cgroups - net: tcp: fix rx timestamp behavior for tcp_recvmsg - nfp: abm: fix error return code in nfp_abm_vnic_alloc() - r8169: re-establish support for RTL8401 chip version - umh: fix memory leak on execve failure - [arm64] net: broadcom: Select BROADCOM_PHY for BCMGENET - [i386] dmaengine: pch_dma.c: Avoid data race between probe and irq handler - [x86] cpufreq: intel_pstate: Only mention the BIOS disabling turbo mode once - ALSA: hda/hdmi: fix race in monitor detection during probe - drm/qxl: lost qxl_bo_kunmap_atomic_page in qxl_image_init_helper() - fibmap: Warn and return an error in case of block > INT_MAX - io_uring: use cond_resched() in io_ring_ctx_wait_and_kill() - io_uring: check non-sync defer_list carefully - ipc/util.c: sysvipc_find_ipc() incorrectly updates position index - ALSA: hda/realtek - Fix S3 pop noise on Dell Wyse - gfs2: Another gfs2_walk_metadata fix - mmc: sdhci-pci-gli: Fix no irq handler from suspend - [amd64] IB/hfi1: Fix another case where pq is left on waitlist - ACPI: EC: PM: Avoid premature returns from acpi_s2idle_wake() - [x86] pinctrl: sunrisepoint: Fix PAD lock register offset for SPT-H - [x86] pinctrl: baytrail: Enable pin configuration setting for GPIO chip - [arm64] pinctrl: qcom: fix wrong write in update_dual_edge - [x86] pinctrl: cherryview: Add missing spinlock usage in chv_gpio_irq_handler - [arm64,armhf] drm/tegra: Fix SMMU support on Tegra124 and Tegra210 - bpf: Fix error return code in map_lookup_and_delete_elem() - ALSA: firewire-lib: fix 'function sizeof not defined' error of tracepoints format - cachefiles: Fix corruption of the return value in cachefiles_read_or_alloc_pages() - i40iw: Fix error handling in i40iw_manage_arp_cache() - [x86] drm/i915/gt: Make timeslicing an explicit engine property - [x86] drm/i915: Don't enable WaIncreaseLatencyIPCEnabled when IPC is disabled - bpf, sockmap: msg_pop_data can incorrecty set an sge length - bpf, sockmap: bpf_tcp_ingress needs to subtract bytes from sg.size - [x86] drm/i915/gem: Remove object_is_locked assertion from unpin_from_display_plane - mmc: sdhci-pci-gli: Fix can not access GL9750 after reboot from Windows 10 - mmc: core: Check request type before completing the request - mmc: core: Fix recursive locking issue in CQE recovery path - mmc: block: Fix request completion in the CQE timeout path - gfs2: More gfs2_find_jhead fixes - fork: prevent accidental access to clone3 features - drm/amdgpu: force fbdev into vram - NFS: Fix fscache super_cookie index_key from changing after umount - NFS: Fix fscache super_cookie allocation - NFSv4: Fix fscache cookie aux_data to ensure change_attr is included - hwmon: (drivetemp) Fix SCT support if SCT data tables are not supported - netfilter: conntrack: avoid gcc-10 zero-length-bounds warning - [x86] drm/i915/gvt: Fix kernel oops for 3-level ppgtt guest - [arm64] fix the flush_icache_range arguments in machine_kexec - netfilter: conntrack: fix infinite loop on rmmod - [x86] drm/i915: Mark concurrent submissions with a weak-dependency - nfs: fix NULL deference in nfs4_get_valid_delegation - SUNRPC: Signalled ASYNC tasks need to exit - tracing: Wait for preempt irq delay thread to execute - netfilter: flowtable: set NF_FLOW_TEARDOWN flag on entry expiration - netfilter: nft_set_rbtree: Add missing expired checks - RDMA/rxe: Always return ERR_PTR from rxe_create_mmap_info() - IB/mlx4: Test return value of calls to ib_get_cached_pkey - IB/core: Fix potential NULL pointer dereference in pkey cache - RDMA/core: Fix double put of resource - RDMA/iw_cxgb4: Fix incorrect function parameters - [x86] ftrace: Have ftrace trampolines turn read-only at the end of system boot up - [x86] drm/i915: Handle idling during i915_gem_evict_something busy loops - mm, memcg: fix inconsistent oom event behavior - epoll: call final ep_events_available() check under the lock - bpf: Fix bug in mmap() implementation for BPF array map - NFSv3: fix rpc receive buffer size for MOUNT call - pnp: Use list_for_each_entry() instead of open coding - net/rds: Use ERR_PTR for rds_message_alloc_sgs() - Stop the ad-hoc games with -Wno-maybe-initialized - gcc-10: disable 'zero-length-bounds' warning for now - gcc-10: disable 'array-bounds' warning for now - gcc-10: disable 'stringop-overflow' warning for now - gcc-10: disable 'restrict' warning for now - gcc-10 warnings: fix low-hanging fruit - gcc-10: mark more functions __init to avoid section mismatch warnings - gcc-10: avoid shadowing standard library 'free()' in crypto - bootconfig: Fix to remove bootconfig data from initrd while boot - bootconfig: Fix to prevent warning message if no bootconfig option - usb: usbfs: correct kernel->user page attribute mismatch - USB: usbfs: fix mmap dma mismatch - ALSA: hda/realtek - Limit int mic boost for Thinkpad T530 - ALSA: hda/realtek - Add COEF workaround for ASUS ZenBook UX431DA - ALSA: rawmidi: Fix racy buffer resize under concurrent accesses - ALSA: usb-audio: Add control message quirk delay for Kingston HyperX headset - usb: core: hub: limit HUB_QUIRK_DISABLE_AUTOSUSPEND to USB5534B - [arm64,armhf,riscv64] usb: host: xhci-plat: keep runtime active when removing host - USB: gadget: fix illegal array access in binding with UDC (CVE-2020-13143) - usb: xhci: Fix NULL pointer dereference when enqueuing trbs from urb sg list - [x86] Make the "Reducing compressed framebufer size" message be DRM_INFO_ONCE() - [armhf] dts: imx6dl-yapp4: Fix Ursa board Ethernet connection - drm/amd/amdgpu: add raven1 part to the gfxoff quirk list - [x86] drm/i915/tgl+: Fix interrupt handling for DP AUX transactions - [powerpc*] vdso32: Fallback on getres syscall when clock is unknown - cifs: fix leaked reference on requeued write - [x86] KVM: Fix pkru save/restore when guest CR4.PKE=0, move it to x86.c - [x86] Fix early boot crash on gcc-10, third try - [amd64] x86/unwind/orc: Fix error handling in __unwind_start() - exec: Move would_dump into flush_old_exec - [arm64,armhf] clk: rockchip: fix incorrect configuration of rk3228 aclk_gpu* clocks - [arm64,armhf] dwc3: Remove check for HWO flag in dwc3_gadget_ep_reclaim_trb_sg() - fanotify: fix merging marks masks with FAN_ONDIR - [arm64] dts: meson-g12b-ugoos-am6: fix usb vbus-supply - Revert "ALSA: hda/realtek: Fix pop noise on ALC225" - [armhf] clk: ti: clkctrl: Fix Bad of_node_put within clkctrl_get_name - clk: Unlink clock if failed to prepare or enable - [arm64] dts: rockchip: Replace RK805 PMIC node name with "pmic" on rk3328 boards - dt-bindings: dma: fsl-edma: fix ls1028a-edma compatible - SUNRPC: Revert 241b1f419f0e ("SUNRPC: Remove xdr_buf_trim()") - bpf: Fix sk_psock refcnt leak when receiving message - RDMA/uverbs: Do not discard the IB_EVENT_DEVICE_FATAL event - RDMA/uverbs: Move IB_EVENT_DEVICE_FATAL to destroy_uobj - [x86] KVM: Fix off-by-one error in kvm_vcpu_ioctl_x86_setup_mce - bpf: Enforce returning 0 for fentry/fexit progs - bpf: Restrict bpf_trace_printk()'s %s usage and add %pks, %pus specifier - Makefile: disallow data races on gcc-10 as well [ Ben Hutchings ] * linux-libc-dev: Re-add "Provides: linux-kernel-headers" as several source packages still have this in Build-Depends [ Luca Boccassi ] * [cloud] Enable INFINIBAND configs for HyperV/Azure (Closes: #958300) [ Bastian Blank ] * [cloud] Re-enable some FB drivers. [ Romain Perier ] * Enable support for fsverity [ Salvatore Bonaccorso ] * [rt] Update to 5.6.10-rt5 and re-enable * Bump ABI to 2. * xfs: add agf freeblocks verify in xfs_agf_verify (CVE-2020-12655) [ Domenico Andreoli ] * [arm64] udeb: Add armada_37xx_wdt to kernel-image (Closes: #961086) -- Salvatore Bonaccorso Sat, 23 May 2020 16:29:21 +0200 linux (5.6.7-1) unstable; urgency=medium * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.6.5 - perf tools: Support Python 3.8+ in Makefile (Closes: #958165) https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.6.6 https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.6.7 [ Ben Hutchings ] * [armhf,arm64] lockdown: Update arm Secure Boot patch for 5.6 (fixes FTBFS) * Use debhelper compatibility level 12: - Build-Depend on debhelper-compat and remove debian/compat - hyperv-daemons: Use dh_installsystemd instead of dh_systemd_{enable,start} - hyperv-daemons: Add "Pre-Depends: ${misc:Pre-Depends}" * debian/README.source: Refer to upload checklist in kernel-team.git * [armel] Disable NETLABEL, since SECURITY_SELINUX is also disabled * Drop linux-headers--all and linux-headers--all- packages, which are no longer needed * linux-libc-dev: Drop "Provides: linux-kernel-headers" which is no longer needed * [s390x] mm: fix page table upgrade vs 2ndary address mode accesses (CVE-2020-11884) * Set ABI to 1 [ Romain Perier ] * Rebased patch firmware-remove-redundant-log-messages-from-drivers.patch onto 5.6.7. [ Philip Rinn ] * [arm64] Enable CRYPTO_DEV_SUN8I_CE (closes: #958037) * [arm64] Enable SUN8I_THERMAL [ Roberto Bampi ] * [arm64] Enable ARMADA_37XX_WATCHDOG as module [ Vagrant Cascadian ] * [arm64] Enable SENSORS_PWM_FAN as a module. [ Paul Tagliamonte ] * Enable CONFIG_NETLABEL (Closes: #958804) -- Ben Hutchings Wed, 29 Apr 2020 04:46:47 +0100 linux (5.6.4-1~exp1) experimental; urgency=medium * New upstream release: https://kernelnewbies.org/Linux_5.6 * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.6.1 https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.6.2 https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.6.3 https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.6.4 [ Ben Hutchings ] * Set ABI to trunk * [mips*] Revert "staging: octeon-usb: delete the octeon usb host controller driver" * [mips*] Revert "staging: octeon: delete driver" * [powerpc*] i2c: Enable I2C_PARPORT instead of I2C_PARPORT_LIGHT * aufs: Update support patchset to aufs5.x-rcN 20200302; no functional change * linux-signed-*: Build-Depend on kernel-wedge 2.102 for consistency * aufs: Update support patchset to aufs5.6 20200413; no functional change * [rt] Update to 5.6.4-rt3 and re-enable [ Aurelien Jarno ] * Enable SENSORS_DRIVETEMP * [riscv64] Enable SOC_VIRT * [riscv64] Enable GPIOLIB, GPIO_SIFIVE, POWER_RESET, POWER_RESET_GPIO, POWER_RESET_GPIO_RESTART, POWER_RESET_RESTART, CONFIG_PWM, CONFIG_PWM_SIFIVE, CONFIG_SIFIVE_L2 [ Christian Barcenas ] * linux-kbuild: Stop building conmakehash * linux-cpupower: Add libcap to Build-Depends and turbostat linker flags * [x86] Drop EFI cold boot mitigation patch in favor of upstream * [amd64] Update "x86: Make x32 syscall support conditional ..." for 5.6 [ Romain Perier ] * [x86] udeb: Add crc32_pclmul to crc-modules * udeb: Add crc32_generic to crc-modules [ Luca Boccassi ] * lockdown: set default (with Secure Boot) to LOCKDOWN_INTEGRITY_MAX (Closes: #956197) -- Ben Hutchings Fri, 17 Apr 2020 01:26:42 +0100 linux (5.5.17-1) unstable; urgency=medium * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.5.14 - mmc: core: Allow host controllers to require R1B for CMD6 - mmc: core: Respect MMC_CAP_NEED_RSP_BUSY for erase/trim/discard - mmc: core: Respect MMC_CAP_NEED_RSP_BUSY for eMMC sleep command - [armhf] mmc: sdhci-omap: Fix busy detection by enabling MMC_CAP_NEED_RSP_BUSY - [armhf,arm64] mmc: sdhci-tegra: Fix busy detection by enabling MMC_CAP_NEED_RSP_BUSY - cxgb4: fix throughput drop during Tx backpressure - cxgb4: fix Txq restart check during backpressure - geneve: move debug check after netdev unregister - hsr: fix general protection fault in hsr_addr_is_self() - ipv4: fix a RCU-list lock in inet_dump_fib() - macsec: restrict to ethernet devices - net/bpfilter: fix dprintf usage for /dev/kmsg - net: cbs: Fix software cbs to consider packet sending time - [armhf,arm64] net: dsa: Fix duplicate frames flooded by learning - net: ena: Add PCI shutdown handler to allow safe kexec - [armhf] net: mvneta: Fix the case where the last poll did not process all rx - net/packet: tpacket_rcv: avoid a producer race condition - net: phy: dp83867: w/a for fld detect threshold bootstrapping issue - [armhf,arm64] net: phy: mdio-bcm-unimac: Fix clock handling - net: qmi_wwan: add support for ASKEY WWHC050 - net/sched: act_ct: Fix leak of ct zone template on replace - net_sched: cls_route: remove the right filter from hashtable - net_sched: hold rtnl lock in tcindex_partial_destroy_work() - net_sched: keep alloc_hash updated after hash allocation - [armhf,arm64] net: stmmac: dwmac-rk: fix error path in rk_gmac_probe - r8169: re-enable MSI on RTL8168c - slcan: not call free_netdev before rtnl_unlock in slcan_open - tcp: also NULL skb->dev when copy was needed - tcp: ensure skb->dev is NULL before leaving TCP stack - tcp: repair: fix TCP_QUEUE_SEQ implementation - vxlan: check return value of gro_cells_init() - [arm64] Revert "net: bcmgenet: use RGMII loopback for MAC reset" - [arm64] net: bcmgenet: keep MAC in reset until PHY is up - bnxt_en: Fix Priority Bytes and Packets counters in ethtool -S. - bnxt_en: fix memory leaks in bnxt_dcbnl_ieee_getets() - bnxt_en: Return error if bnxt_alloc_ctx_mem() fails. - bnxt_en: Free context memory after disabling PCI in probe error path. - bnxt_en: Reset rings if ring reservation fails during open() - net: ena: fix incorrect setting of the number of msix vectors - net: ena: fix request of incorrect number of IRQ vectors - net: ena: avoid memory access violation by validating req_id properly - net: ena: fix continuous keep-alive resets - net: ip_gre: Separate ERSPAN newlink / changelink callbacks - net: ip_gre: Accept IFLA_INFO_DATA-less configuration - hsr: use rcu_read_lock() in hsr_get_node_{list/status}() - hsr: add restart routine into hsr_get_node_list() - hsr: set .netnsok flag - net/mlx5: DR, Fix postsend actions write length - net/mlx5e: Enhance ICOSQ WQE info fields - net/mlx5e: Fix missing reset of SW metadata in Striding RQ reset - net/mlx5e: Fix ICOSQ recovery flow with Striding RQ - net/mlx5e: Do not recover from a non-fatal syndrome - net/mlx5_core: Set IB capability mask1 to fix ib_srpt connection failure - net/mlx5e: kTLS, Fix TCP seq off-by-1 issue in TX resync flow - net/mlx5e: Fix endianness handling in pedit mask - cgroup-v1: cgroup_pidlist_next should update position index - nfs: add minor version to nfs_server_key for fscache - drivers/of/of_mdio.c:fix of_mdiobus_register() - cgroup1: don't call release_agent when it is "" - veth: ignore peer tx_dropped when counting local rx_dropped - drm/amd/display: update soc bb for nv14 - drm/amdgpu: correct ROM_INDEX/DATA offset for VEGA20 - [armhf] drm/exynos: Fix cleanup of IOMMU related objects - [x86] iommu/vt-d: Silence RCU-list debugging warnings - scsi: ipr: Fix softlockup when rescanning devices in petitboot - mac80211: Do not send mesh HWMP PREQ if HWMP is disabled - [x86] iommu/vt-d: Fix debugfs register reads - [x86] iommu/vt-d: Populate debugfs if IOMMUs are detected - Input: fix stale timestamp on key autorepeat events - [x86] Input: synaptics - enable RMI on HP Envy 13-ad105ng - Input: avoid BIT() macro usage in the serio.h UAPI header - IB/rdmavt: Free kernel completion queue when done - RDMA/core: Fix missing error check on dev_set_name() - RDMA/odp: Fix leaking the tgid for implicit ODP - gpiolib: Fix irq_disable() semantics - RDMA/nl: Do not permit empty devices names during RDMA_NLDEV_CMD_NEWLINK/SET - RDMA/mad: Do not crash if the rdma device does not have a umad interface - ceph: check POOL_FLAG_FULL/NEARFULL in addition to OSDMAP_FULL/NEARFULL - ceph: fix memory leak in ceph_cleanup_snapid_map() - [x86] KVM: SVM: Issue WBINVD after deactivating an SEV guest - [armhf] dts: dra7: Add bus_dma_limit for L3 bus - [armhf] dts: omap5: Add bus_dma_limit for L3 bus - perf probe: Fix to delete multiple probe event - perf probe: Do not depend on dwfl_module_addrsym() - rtlwifi: rtl8188ee: Fix regression due to commit d1d1a96bdb44 - drm/prime: use dma length macro when mapping sg - drm/amdgpu: fix scatter-gather mapping with user pages - drm/radeon: fix scatter-gather mapping with user pages - [armhf] soc: samsung: chipid: Fix return value on non-Exynos platforms - scsi: sd: Fix optimal I/O size for devices that change reported values - nl80211: fix NL80211_ATTR_CHANNEL_WIDTH attribute type - mac80211: drop data frames without key on encrypted links - mac80211: mark station unauthorized before key removal - mm/swapfile.c: move inode_lock out of claim_swapfile - drivers/base/memory.c: indicate all memory blocks as removable - mm/sparse: fix kernel crash with pfn_section_valid check - mm: fork: fix kernel_stack memcg stats for various stack implementations - [x86] gpiolib: acpi: Correct comment for HP x2 10 honor_wakeup quirk - gpiolib: acpi: Rework honor_wakeup option into an ignore_wake option - [x86] gpiolib: acpi: Add quirk to ignore EC wakeups on HP x2 10 BYT + AXP288 model - bpf: Fix cgroup ref leak in cgroup_bpf_inherit on out-of-memory - RDMA/core: Ensure security pkey modify is not lost - afs: Fix handling of an abort from a service handler - genirq: Fix reference leaks on irq affinity notifiers - xfrm: handle NETDEV_UNREGISTER for xfrm device - vti[6]: fix packet tx through bpf_redirect() in XinY cases - RDMA/mlx5: Fix the number of hwcounters of a dynamic counter - RDMA/mlx5: Fix access to wrong pointer while performing flush due to error - RDMA/mlx5: Block delay drop to unprivileged users - xfrm: fix uctx len check in verify_sec_ctx_len - xfrm: add the missing verify_sec_ctx_len check in xfrm_add_acquire - xfrm: policy: Fix doulbe free in xfrm_policy_timer - afs: Fix client call Rx-phase signal handling - afs: Fix some tracing details - afs: Fix unpinned address list during probing - ieee80211: fix HE SPR size calculation - mac80211: set IEEE80211_TX_CTRL_PORT_CTRL_PROTO for nl80211 TX - netfilter: flowtable: reload ip{v6}h in nf_flow_tuple_ip{v6} - netfilter: flowtable: populate addr_type mask - netfilter: nft_fwd_netdev: validate family and chain type - netfilter: nft_fwd_netdev: allow to redirect to ifb via ingress - [i386] bpf, x32: Fix bug with JMP32 JSET BPF_X checking upper bits - bpf: Initialize storage pointers to NULL to prevent freeing garbage pointer - bpf/btf: Fix BTF verification of enum members in struct/union - bpf, sockmap: Remove bucket->lock from sock_{hash|map}_free - [armhf] dts: sun8i-a83t-tbs-a711: Fix USB OTG mode detection - vti6: Fix memory leak of skb if input policy check fails - r8169: fix PHY driver check on platforms w/o module softdeps - [x86] clocksource/drivers/hyper-v: Untangle stimers and timesync from clocksources - bpf: Undo incorrect __reg_bound_offset32 handling - USB: serial: option: add support for ASKEY WWHC050 - USB: serial: option: add BroadMobi BM806U - USB: serial: option: add Wistron Neweb D19Q1 - USB: cdc-acm: restore capability check order - USB: serial: io_edgeport: fix slab-out-of-bounds read in edge_interrupt_callback - [armhf,arm64] usb: musb: fix crash with highmen PIO and usbmon - media: flexcop-usb: fix endpoint sanity check - media: usbtv: fix control-message timeouts - staging: rtl8188eu: Add ASUS USB-N10 Nano B1 to device table - [x86] staging: wlan-ng: fix ODEBUG bug in prism2sta_disconnect_usb - [x86] staging: wlan-ng: fix use-after-free Read in hfa384x_usbin_callback - [x86] ahci: Add Intel Comet Lake H RAID PCI ID - libfs: fix infoleak in simple_attr_read() - media: ov519: add missing endpoint sanity checks (CVE-2020-11608) - media: dib0700: fix rc endpoint lookup - media: stv06xx: add missing descriptor sanity checks (CVE-2020-11609) - media: xirlink_cit: add missing descriptor sanity checks (CVE-2020-11668) - media: v4l2-core: fix a use-after-free bug of sd->devnode https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.5.15 - bpf: update jmp32 test cases to fix range bound deduction - mac80211: Check port authorization in the ieee80211_tx_dequeue() case - mac80211: fix authentication with iwlwifi/mvm - vt: selection, introduce vc_is_sel - vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines - vt: switch vt_dont_switch to bool - vt: vt_ioctl: remove unnecessary console allocation checks - vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console - vt: vt_ioctl: fix use-after-free in vt_in_use() - [x86] platform: pmc_atom: Add Lex 2I385SW to critclk_systems DMI table - bpf: Explicitly memset the bpf_attr structure - bpf: Explicitly memset some bpf info structures declared on the stack - iwlwifi: don't send GEO_TX_POWER_LIMIT if no wgds table - [x86] gpiolib: acpi: Add quirk to ignore EC wakeups on HP x2 10 CHT + AXP288 model - [armhf] clk: imx: Align imx sc clock msg structs to 4 - [armhf] clk: imx: Align imx sc clock parent msg structs to 4 - libceph: fix alloc_msg_with_page_vector() memory leaks - perf map: Fix off by one in strncpy() size argument - [armel,armhf] dts: bcm283x: Fix vc4's firmware bus DMA limitations - [armel] bcm2835-rpi-zero-w: Add missing pinctrl name - [armhf] dts: imx6: phycore-som: fix arm and soc minimum voltage - [armhf] dts: N900: fix onenand timings https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.5.16 - ipv4: fix a RCU-list lock in fib_triestat_seq_show - net, ip_tunnel: fix interface lookup with no key - sctp: fix possibly using a bad saddr with a given dst - sctp: fix refcount bug in sctp_wfree - [arm64,riscv64] net: macb: Fix handling of fixed-link node - nvme-rdma: Avoid double freeing of async event data - drm/amdgpu: add fbdev suspend/resume on gpu reset - [x86] drm/amd/display: Add link_rate quirk for Apple 15" MBP 2017 - drm/bochs: downgrade pci_request_region failure from error to warning - initramfs: restore default compression behavior - drm/amdgpu: fix typo for vcn1 idle check - tools/power turbostat: Fix gcc build warnings - tools/power turbostat: Fix missing SYS_LPI counter on some Chromebooks - tools/power turbostat: Fix 32-bit capabilities warning - padata: fix uninitialized return value in padata_replace() - brcmfmac: abort and release host after error - XArray: Fix xa_find_next for large multi-index entries - misc: rtsx: set correct pcr_ops for rts522A - PCI: sysfs: Revert "rescan" file renames - [x86] mei: me: add cedar fork device ids - nvmem: check for NULL reg_read and reg_write before dereferencing - [armhf] extcon: axp288: Add wakeup support - Revert "dm: always call blk_queue_split() in dm_process_bio()" - [x86] ALSA: hda/ca0132 - Add Recon3Di quirk to handle integrated sound on EVGA X99 Classified motherboard - iwlwifi: consider HE capability when setting LDPC - iwlwifi: yoyo: don't add TLV offset when reading FIFOs - iwlwifi: dbg: don't abort if sending DBGC_SUSPEND_RESUME fails - rxrpc: Fix sendmsg(MSG_WAITALL) handling - IB/hfi1: Ensure pq is not left on waitlist - sched: act: count in the size of action flags bitfield - tcp: fix TFO SYNACK undo to avoid double-timestamp-undo - [x86,ia64] watchdog: iTCO_wdt: Export vendorsupport - [x86,ia64] watchdog: iTCO_wdt: Make ICH_RES_IO_SMI optional - i2c: i801: Do not add ICH_RES_IO_SMI for the iTCO_wdt device - net: genetlink: return the error code when attribute parsing fails. - net: Fix Tx hash bound checking - net/smc: fix cleanup for linkgroup setup failures - padata: always acquire cpu_hotplug_lock before pinst->lock - mm: mempolicy: require at least one nodeid for MPOL_PREFERRED (CVE-2020-11565) https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.5.17 - cxgb4: fix MPS index overwrite when setting MAC address - ipv6: don't auto-add link-local address to lag ports - [armhf] net: dsa: bcm_sf2: Do not register slave MDIO bus with OF - [armhf] net: dsa: bcm_sf2: Ensure correct sub-node is parsed - net: phy: micrel: kszphy_resume(): add delay after genphy_resume() before accessing PHY registers - net_sched: add a temporary refcnt for struct tcindex_data - net_sched: fix a missing refcnt in tcindex_init() - [armhf,arm64] net: stmmac: dwmac1000: fix out-of-bounds mac address reg setting - slcan: Don't transmit uninitialized stack data in padding - tun: Don't put_page() for all negative return values from XDP program - r8169: change back SG and TSO to be disabled by default - cxgb4: free MQPRIO resources in shutdown path - [s390x] prevent leaking kernel address in BEAR - random: always use batched entropy for get_random_u{32,64} - [armhf,arm64] usb: dwc3: gadget: Wrap around when skip TRBs - slub: improve bit diffusion for freelist ptr obfuscation - ubi: fastmap: Free unused fastmap anchor peb during detach - RDMA/ucma: Put a lock around every call to the rdma_cm layer - RDMA/cma: Teach lockdep about the order of rtnl and lock - RDMA/siw: Fix passive connection establishment - Bluetooth: RFCOMM: fix ODEBUG bug in rfcomm_dev_ioctl - RDMA/cm: Update num_paths in cma_resolve_iboe_route error flow - blk-mq: Keep set->nr_hw_queues and set->map[].nr_queues in sync - fbcon: fix null-ptr-deref in fbcon_switch - driver core: Reevaluate dev->links.need_for_probe as suppliers are added - [x86] iommu/vt-d: Allow devices with RMRRs to use identity domain - ACPI: PM: Add acpi_[un]register_wakeup_handler() - [x86] platform: intel_int0002_vgpio: Use acpi_register_wakeup_handler() - IB/hfi1: Call kobject_put() when kobject_init_and_add() fails - IB/hfi1: Fix memory leaks in sysfs registration and unregistration - IB/mlx5: Replace tunnel mpls capability bits for tunnel_offloads - [armhf] imx: Enable ARM_ERRATA_814220 for i.MX6UL and i.MX7D - [armhf] imx: only select ARM_ERRATA_814220 for ARMv7-A - ceph: remove the extra slashes in the server path - ceph: canonicalize server path in place [ Noah Meyerhans ] * Fix autopkgtest failure due to pycodestyle violation * [cloud] Re-enable kernel page merge functionality (Closes: #955366) * [cloud] Apply a number of additional optimizations (Closes: #947759) - Statically link nvme and ext4 drivers with the kernel - [amd64] Re-enable SCHED_MC_PRIO - Switch to LZ4 for compression - Disable a number of additional drivers unlikely to be found in cloud environments [ Ben Hutchings ] * drm: Disable DRM_LEGACY (DRI1) * Bump ABI to 2 * WireGuard: Update for renaming of skb_reset_tc() to skb_reset_redirect() * lib/fonts: Enable FONTS, FONT_8x8, FONT_8x16, FONT_TER16x32 for most flavours (Closes: #956173) * keys: Enable PERSISTENT_KEYRINGS * mm: Enable DEFERRED_STRUCT_PAGE_INIT (Closes: #954025) * [armel/marvell] mm: Enable COMPACTION (Closes: #949171) * [x86} media/cec: Enable CEC_PLATFORM_DRIVERS; enable VIDEO_SECO_CEC as a module (Closes: #951543) * [x86] sound/soc/intel: Enable SND_SOC_INTEL_BYT_CHT_CX2072X_MACH as module (Closes: #951482) [ Sudip Mukherjee ] * Remove libbpf. (See: #948041) [ Jason A. Donenfeld ] * Provide wireguard-modules as stop-gap for packages. [ Christian Barcenas ] * linux-cpupower: Add libcap to Build-Depends and turbostat linker flags [ Joel Johnson ] * [armhf] Build PHY_MVEBU_A38X_COMPHY module (Closes: #951409) [ Josua Mayer ] * [arm64] enable support for the Honeycomb arm64 workstation (Closes: #948576) -- Ben Hutchings Wed, 15 Apr 2020 03:37:48 +0100 linux (5.5.13-2) unstable; urgency=medium * bpf: Undo incorrect __reg_bound_offset32 handling (CVE-2020-8835) -- Salvatore Bonaccorso Mon, 30 Mar 2020 23:06:57 +0200 linux (5.5.13-1) unstable; urgency=medium * New upstream release: https://kernelnewbies.org/Linux_5.5 (Closes: #953680) * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.5.1 https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.5.2 https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.5.3 https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.5.4 https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.5.5 https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.5.6 https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.5.7 https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.5.8 https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.5.9 https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.5.10 https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.5.11 https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.5.12 https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.5.13 [ Ben Hutchings ] * aufs: Update support patchset to aufs5.x-rcN 20200120; no functional change * net: Enable NET_SWITCHDEV; disable on armel/marvell (Closes: #949863) * [armhf] net/ethernet/ti: Enable TI_CPSW_SWITCHDEV as module; enable TI_CPTS * wireless: Enable regulatory.db direct loading: - Drop "wireless: Disable regulatory.db direct loading" - linux-image: Add Breaks: relation with old wireless-regdb versions - Regenerate my wireless-regdb certificate with expected attributes * [x86] Drop "Add a SysRq option to lift kernel lockdown" (Closes: #947021) - This patch allowed remotely disabling lockdown using usbip - Lockdown can be disabled by running "mokutil --disable-validation", rebooting, and confirming the change when prompted * Set PYTHON=python3 for document build (fixes FTBFS) * [x86,arm64] Move linux-headers metapackages to src:linux-signed-*. This should ensure that src:linux and src:linux-signed-* transition to testing together. * debian/bin/gencontrol_signed.py: Generate valid versions in a linux binNMU * udeb: Drop zlib-modules packages, as zlib_deflate is now always built-in (fixes FTBFS on several architectures) * [mips*/octeon] Fix and re-enable the Octeon Ethernet driver * [mips*] Fix FTBFS: - Increase RELOCATION_TABLE_SIZE to 0x160000 - Fix exception handler memcpy() * debian/config: Delete redundant arch/flavour-specific "debug-info: true" * linux-source: Suggest qtbase5-dev instead of the removed libqt4-dev (Closes: #953386) * Add WireGuard driver and required crypto changes from 5.6-rc7 and cryptodev-2.6, thanks to Jason A. Donenfeld (Closes: #953569) * drivers/net: Enable WIREGUARD as module * debian/control: Use my debian.org email in Uploaders field * debian/certs: Rename Romain Perier's certificate to match email address * security/integrity/platform_certs: Rebase db-mok-keyring patch set for 5.5.9 * [x86] Enable X86_UMIP (previously configured as X86_INTEL_UMIP) * Set ABI to 1 * [amd64] Enable Intel GVT-g (except cloud-amd64) (Closes: #954088): - vfio: Enable VFIO_MDEV, VFIO_MDEV_DEVICE as modules - i915: Enable DRM_I915_GVT; enable DRM_I915_GVT_KVMGT as module * drivers/net/wireless: Enable MT76x0E as module (Closes: #953683) * bcmgenet: Backport ACPI support, supporting Raspberry Pi 4 (Closes: #950578) [ Aurelien Jarno ] * [riscv64] Enable SECCOMP. [ Romain Perier ] * [arm64] Enable BCMGENET * [arm64] Fix CONFIG_INFINIBAND_HNS_HIP06 and CONFIG_INFINIBAND_HNS_HIP08 from tristate to boolean * debian/certs: Add my own certificate for wireless-regdb * debian/patches/debian/wireless-add-debian-wireless-regdb-certificates.patch: Add the hexdump of my certificate to this patch, so the kernel can directly load the regulatory db and trust it if have I signed it. [ Noah Meyerhans ] * [arm64] Enable KVM_ARM_HOST and KVM_ARM_PMU * [arm64] Enable CONFIG_ARM64_ERRATUM_1418040 * [arm64/cloud-arm64] Introduce cloud build flavour * [cloud] random: Enable RANDOM_TRUST_BOOTLOADER [ Mark Pearson ] * [amd64] ASoC: Enable SND_SOC_SOF_COMETLAKE_LP_SUPPORT, SND_SOC_SOF_COMETLAKE_H_SUPPORT [ Christian Barcenas ] * lockdown: honor LOCK_DOWN_IN_EFI_SECURE_BOOT=n (Closes: #945604) [ Salvatore Bonaccorso ] * libcpupower: Lower back soname version to 1 and add new cpufreq_{get,put}_boost_frequencies methods [ Joel Stanley ] * [armhf] Enable ASPEED AST2600 SoC family. This includes all ASPEED symbols for the AST2600 and FTGMAC100, the network device used by this SoC. The SoC has 5 UARTs so CONFIG_SERIAL_8250_NR_UARTS is bumped to 5 from 4 in order to correctly register UART5, the boot console. [ Petr Stastny ] * [x86] i2c: Enable I2C_AMD_MP2 as module (Closes: #955004) [ Vagrant Cascadian ] * [arm64] Add patch from next-20200325 to enable device-tree for Pinebook Pro. -- Ben Hutchings Mon, 30 Mar 2020 03:03:47 +0100 linux (5.5~rc5-1~exp1) experimental; urgency=medium * New upstream release candidate [ Romain Perier ] * [rt] Disable until it is updated for 5.5 or later * [mips*] Remove obsolete patch MIPS-Loongson-3-Add-Loongson-LS3A-RS780E-1-way-machi.patch * Retrieve the new aufs5 patches from the upstream tree, with an update in aufs5-standalone.patch (see its header). * Refreshed patches: - debian/dfsg/vs6624-disable.patch - bugfix/all/firmware_class-log-every-success-and-failure.patch - bugfix/all/ radeon-amdgpu-firmware-is-required-for-drm-and-kms-on-r600-onward.patch - bugfix/all/disable-some-marvell-phys.patch - features/all/ security-perf-allow-further-restriction-of-perf_event_open.patch - features/x86/x86-make-x32-syscall-support-conditional.patch - bugfix/all/fs-add-module_softdep-declarations-for-hard-coded-cr.patch - features/all/lockdown/ efi-add-an-efi_secure_boot-flag-to-indicate-secure-b.patch [ Ben Hutchings ] * udeb: Add f2fs-modules package * linux-kbuild: Stop building pnmtologo * linux-kbuild: Add new file to Makefile for kconfig -- Ben Hutchings Mon, 06 Jan 2020 04:26:45 +0000 linux (5.4.19-1) unstable; urgency=medium * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.14 - [arm64,armhf] soc: amlogic: meson-ee-pwrc: propagate PD provider registration errors - [arm64,armhf] soc: amlogic: meson-ee-pwrc: propagate errors from pm_genpd_init() - [armhf] bus: ti-sysc: Fix iterating over clocks - clk: Don't try to enable critical clocks if prepare failed - [armhf] ASoC: stm32: sai: fix possible circular locking - [armhf] ASoC: stm32: dfsdm: fix 16 bits record - [armhf] OMAP2+: Fix ti_sysc_find_one_clockdomain to check for to_clk_hw_omap - [armhf] dts: imx6q-dhcom: Fix SGTL5000 VDDIO regulator connection - [x86] ASoC: Intel: bytcht_es8316: Fix Irbis NB41 netbook quirk - ALSA: dice: fix fallback from protocol extension into limited functionality - ALSA: seq: Fix racy access for queue timer in proc read - ALSA: firewire-tascam: fix corruption due to spin lock without restoration in SoftIRQ context - ALSA: usb-audio: fix sync-ep altsetting sanity check - [arm64] dts: allwinner: a64: olinuxino: Fix SDIO supply regulator - [arm64] dts: allwinner: a64: olinuxino: Fix eMMC supply regulator - [armhf] clk: sunxi-ng: r40: Allow setting parent rate for external clock outputs - block: fix an integer overflow in logical block size - fuse: fix fuse_send_readpages() in the syncronous read case - io_uring: only allow submit from owning task - [armhf] dts: am571x-idk: Fix gpios property to have the correct gpio number - [armel] davinci: select CONFIG_RESET_CONTROLLER - perf: Correctly handle failed perf_get_aux_event() - iio: buffer: align the size of scan bytes to size of the largest element - USB: serial: simple: Add Motorola Solutions TETRA MTP3xxx and MTP85xx - USB: serial: option: Add support for Quectel RM500Q - USB: serial: opticon: fix control-message timeouts - USB: serial: option: add support for Quectel RM500Q in QDL mode - USB: serial: suppress driver bind attributes - USB: serial: ch341: handle unbound port at reset_resume - USB: serial: io_edgeport: handle unbound ports on URB completion - USB: serial: io_edgeport: add missing active-port sanity check - USB: serial: keyspan: handle unbound ports - USB: serial: quatech2: handle unbound ports - [x86] staging: comedi: ni_routes: fix null dereference in ni_find_route_source() - [x86] staging: comedi: ni_routes: allow partial routing information - [x86] scsi: fnic: fix invalid stack access - scsi: mptfusion: Fix double fetch bug in ioctl - ptrace: reintroduce usage of subjective credentials in ptrace_has_cap() - [armhf] mtd: rawnand: gpmi: Fix suspend/resume problem - [armhf] mtd: rawnand: gpmi: Restore nfc timing setup after suspend/resume - usb: core: hub: Improved device recognition on remote wakeup - cpu/SMT: Fix x86 link error without CONFIG_SYSFS - [x86] CPU/AMD: Ensure clearing of SME/SEV features is maintained - locking/rwsem: Fix kernel crash when spinning on RWSEM_OWNER_UNKNOWN - [x86] perf/x86/intel/uncore: Fix missing marker for snr_uncore_imc_freerunning_events - [amd64] x86/efistub: Disable paging at mixed mode entry - [s390x] zcrypt: Fix CCA cipher key gen with clear key value function - [x86] scsi: storvsc: Correctly set number of hardware queues for IDE disk - mtd: spi-nor: Fix selection of 4-byte addressing opcodes on Spansion - [x86] efi/earlycon: Fix write-combine mapping on x86 - [s390x] setup: Fix secure ipl message - [armhf] clk: samsung: exynos5420: Keep top G3D clocks enabled - perf hists: Fix variable name's inconsistency in hists__for_each() macro - locking/lockdep: Fix buffer overrun problem in stack_trace[] - perf report: Fix incorrectly added dimensions as switch perf data file - mm/shmem.c: thp, shmem: fix conflict of above-47bit hint address and PMD alignment - mm/huge_memory.c: thp: fix conflict of above-47bit hint address and PMD alignment - mm: memcg/slab: fix percpu slab vmstats flushing - mm: memcg/slab: call flush_memcg_workqueue() only if memcg workqueue is valid - mm, debug_pagealloc: don't rely on static keys too early - btrfs: rework arguments of btrfs_unlink_subvol - btrfs: fix invalid removal of root ref - btrfs: do not delete mismatched root refs - btrfs: relocation: fix reloc_root lifespan and access - btrfs: fix memory leak in qgroup accounting - btrfs: check rw_devices, not num_devices for balance - Btrfs: always copy scrub arguments back to user space - mm/memory_hotplug: don't free usage map when removing a re-added early section - mm/page-writeback.c: avoid potential division by zero in wb_min_max_ratio() - mm: khugepaged: add trace status description for SCAN_PAGE_HAS_PRIVATE - [armhf] dts: imx6sx-sdb: Remove incorrect power supply assignment - [armhf] dts: imx6sl-evk: Remove incorrect power supply assignment - [armhf] dts: imx6sll-evk: Remove incorrect power supply assignment - [armhf] dts: imx6q-icore-mipi: Use 1.5 version of i.Core MX6DL - [arm64,armhf] net: stmmac: 16KB buffer must be 16 byte aligned - [arm64,armhf] net: stmmac: Enable 16KB buffer size - [arm*] reset: Fix {of,devm}_reset_control_array_get kerneldoc return types - tipc: fix potential hanging after b/rcast changing - tipc: fix retrans failure due to wrong destination - block: Fix the type of 'sts' in bsg_queue_rq() - bpf: Fix incorrect verifier simulation of ARSH under ALU32 - bpf: Sockmap/tls, during free we may call tcp_bpf_unhash() in loop - bpf: Sockmap, ensure sock lock held during tear down - bpf: Sockmap/tls, push write_space updates through ulp updates - bpf: Sockmap, skmsg helper overestimates push, pull, and pop bounds - bpf: Sockmap/tls, msg_push_data may leave end mark in place - bpf: Sockmap/tls, tls_sw can create a plaintext buf > encrypt buf - bpf: Sockmap/tls, skmsg can have wrapped skmsg that needs extra chaining - bpf: Sockmap/tls, fix pop data with SK_DROP return code - [arm64,armhf] i2c: tegra: Fix suspending in active runtime PM state - [arm64,armhf] i2c: tegra: Properly disable runtime PM on driver's probe error - cfg80211: fix deadlocks in autodisconnect work - cfg80211: fix memory leak in nl80211_probe_mesh_link - cfg80211: fix memory leak in cfg80211_cqm_rssi_update - cfg80211: fix page refcount issue in A-MSDU decap - bpf/sockmap: Read psock ingress_msg before sk_receive_queue - netfilter: fix a use-after-free in mtype_destroy() - netfilter: arp_tables: init netns pointer in xt_tgdtor_param struct - netfilter: nat: fix ICMP header corruption on ICMP errors - netfilter: nft_tunnel: fix null-attribute check - netfilter: nft_tunnel: ERSPAN_VERSION must not be null - netfilter: nf_tables: remove WARN and add NLA_STRING upper limits - netfilter: nf_tables: store transaction list locally while requesting module - netfilter: nf_tables: fix flowtable list del corruption - NFC: pn533: fix bulk-message timeout - net: bpf: Don't leak time wait and request sockets - bpftool: Fix printing incorrect pointer in btf_dump_ptr - batman-adv: Fix DAT candidate selection on little endian systems - macvlan: use skb_reset_mac_header() in macvlan_queue_xmit() - [x86] hv_netvsc: Fix memory leak when removing rndis device - net: avoid updating qdisc_xmit_lock_key in netdev_update_lockdep_key() - [arm64] net: hns3: pad the short frame before sending to the hardware - [arm64] net: hns: fix soft lockup when there is not enough memory - net: phy: dp83867: Set FORCE_LINK_GOOD to default after reset - net/sched: act_ife: initalize ife->metalist earlier - net: usb: lan78xx: limit size of local TSO packets - ptp: free ptp device pin descriptors properly - r8152: add missing endpoint sanity check - tcp: fix marked lost packets not being retransmitted - bnxt_en: Fix NTUPLE firmware command failures. - bnxt_en: Fix ipv6 RFS filter matching logic. - bnxt_en: Do not treat DSN (Digital Serial Number) read failure as fatal. - net: sched: act_ctinfo: fix memory leak - [armhf] net: dsa: bcm_sf2: Configure IMP port for 2Gb/sec - i40e: prevent memory leak in i40e_setup_macvlans (CVE-2019-19043) - drm/amdgpu: allow direct upload save restore list for raven2 - [arm64,armhf] net: stmmac: tc: Do not setup flower filtering if RSS is enabled - devlink: Wait longer before warning about unset port type - xen/blkfront: Adjust indentation in xlvbd_alloc_gendisk - tcp: refine rule to allow EPOLLOUT generation under mem pressure - [arm64] dts: meson-gxl-s905x-khadas-vim: fix gpio-keys-polled node - cfg80211: check for set_wiphy_params - tick/sched: Annotate lockless access to last_jiffies_update - [armhf] dts: imx6ul-kontron-n6310-s: Disable the snvs-poweroff driver - mtd: cfi_cmdset_0002: only check errors when ready in cfi_check_err_status() - mtd: cfi_cmdset_0002: fix delayed error detection on HyperFlash - reiserfs: fix handling of -EOPNOTSUPP in reiserfs_for_each_xattr - scsi: esas2r: unlock on error in esas2r_nvram_read_direct() - [arm64] scsi: hisi_sas: Don't create debugfs dump folder twice - [arm64] scsi: hisi_sas: Set the BIST init value before enabling BIST - scsi: qla4xxx: fix double free bug - scsi: bnx2i: fix potential use after free - scsi: target: core: Fix a pr_debug() argument - scsi: lpfc: fix: Coverity: lpfc_get_scsi_buf_s3(): Null pointer dereferences - [arm64] scsi: hisi_sas: Return directly if init hardware failed - scsi: scsi_transport_sas: Fix memory leak when removing devices - scsi: qla2xxx: Fix qla2x00_request_irqs() for MSI - scsi: qla2xxx: fix rports not being mark as lost in sync fabric scan - scsi: core: scsi_trace: Use get_unaligned_be*() - scsi: lpfc: Fix list corruption detected in lpfc_put_sgl_per_hdwq - scsi: lpfc: Fix hdwq sgl locks and irq handling - scsi: lpfc: Fix a kernel warning triggered by lpfc_get_sgl_per_hdwq() - rtw88: fix potential read outside array boundary - perf probe: Fix wrong address verification - perf script: Allow --time with --reltime - perf script: Fix --reltime with --time - scsi: lpfc: use hdwq assigned cpu for allocation https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.15 - [x86] drm/i915: Fix pid leak with banned clients - libbpf: Fix compatibility for kernels without need_wakeup - libbpf: Fix memory leak/double free issue - libbpf: Fix potential overflow issue - libbpf: Fix another potential overflow issue in bpf_prog_linfo - libbpf: Make btf__resolve_size logic always check size error condition - bpf: Force .BTF section start to zero when dumping from vmlinux - [armhf] OMAP2+: Add missing put_device() call in omapdss_init_of() - xfs: Sanity check flags of Q_XQUOTARM call - [armhf] i2c: stm32f7: rework slave_id allocation - [armhf] i2c: i2c-stm32f7: fix 10-bits check in slave free id search loop - [x86] mfd: intel-lpss: Add default I2C device properties for Gemini Lake - SUNRPC: Fix svcauth_gss_proxy_init() - SUNRPC: Fix backchannel latency metrics - [powerpc*] security: Fix debugfs data leak on 32-bit - [powerpc*] pseries: Enable support for ibm,drc-info property - tipc: reduce sensitive to retransmit failures - tipc: update mon's self addr when node addr generated - tipc: fix potential memory leak in __tipc_sendmsg() - tipc: fix wrong socket reference counter after tipc_sk_timeout() returns - tipc: fix wrong timeout input for tipc_wait_for_cond() - [arm64,armhf] net/mlx5e: Fix free peer_flow when refcount is 0 - net: phy: broadcom: Fix RGMII delays configuration for BCM54210E - [armhf] phy: ti: gmii-sel: fix mac tx internal delay for rgmii-rxid - mt7601u: fix bbp version check in mt7601u_wait_bbp_ready - ice: fix stack leakage - [s390x] pkey: fix memory leak within _copy_apqns_from_user() - nfsd: depend on CRYPTO_MD5 for legacy client tracking - [armhf] crypto: sun4i-ss - fix big endian issues - perf map: No need to adjust the long name of modules - [arm64,armhf] soc/tegra: pmc: Fix crashes for hierarchical interrupts - watchdog: sprd: Fix the incorrect pointer getting from driver data - ipmi: Fix memory leak in __ipmi_bmc_register (CVE-2019-19046) - sched/core: Further clarify sched_class::set_next_task() - gpiolib: No need to call gpiochip_remove_pin_ranges() twice - rtw88: fix beaconing mode rsvd_page memory violation issue - rtw88: fix error handling when setup efuse info - [arm64,armhf] drm/panfrost: Add missing check for pfdev->regulator - drm/amdgpu: remove excess function parameter description - [armhf] hwrng: omap3-rom - Fix missing clock by probing with device tree - [arm64,armhf] drm/rockchip: Round up _before_ giving to the clock framework - software node: Get reference to parent swnode in get_parent op - [arm64] net: netsec: Correct dma sync for XDP_TX frames - ACPI: platform: Unregister stale platform devices - [arm64,armhf] pwm: sun4i: Fix incorrect calculation of duty_cycle/period - libbpf: Don't use kernel-side u32 type in xsk.c - scsi: ufs: delete redundant function ufshcd_def_desc_sizes() - net: openvswitch: don't unlock mutex when changing the user_features fails - [x86] hv_netvsc: flag software created hash value - rt2800: remove errornous duplicate condition - net: neigh: use long type to store jiffies delta - packet: fix data-race in fanout_flow_is_huge() - [armhf] i2c: stm32f7: report dma error during probe - [arm64] tee: optee: Fix dynamic shm pool allocations - [arm64] tee: optee: fix device enumeration error handling - workqueue: Add RCU annotation for pwq list walk - SUNRPC: Fix another issue with MIC buffer space - sched/cpufreq: Move the cfs_rq_util_change() call to cpufreq_update_util() - mt76: mt76u: rely on usb_interface instead of usb_dev - dma-direct: don't check swiotlb=force in dma_direct_map_resource - afs: Remove set but not used variables 'before', 'after' - [armhf] dmaengine: ti: edma: fix missed failure handling - drm/radeon: fix bad DMA from INTERRUPT_CNTL2 - xdp: Fix cleanup on map free for devmap_hash map type - block: fix memleak of bio integrity data - [s390x] qeth: fix dangling IO buffers after halt/clear - net-sysfs: Call dev_hold always in netdev_queue_add_kobject - [arm64,armhf] phy/rockchip: inno-hdmi: round clock rate down to closest 1000 Hz - [arm64] optee: Fix multi page dynamic shm pool alloc https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.16 - can, slip: Protect tty->disc_data in write_wakeup and close with RCU - firestream: fix memory leaks - gtp: make sure only SOCK_DGRAM UDP sockets are accepted - ipv6: sr: remove SKB_GSO_IPXIP6 on End.D* actions - net: cxgb3_main: Add CAP_NET_ADMIN check to CHELSIO_GET_MEM - net: ip6_gre: fix moving ip6gre between namespaces - net, ip6_tunnel: fix namespaces move - net, ip_tunnel: fix namespaces move - net: rtnetlink: validate IFLA_MTU attribute in rtnl_create_link() - net_sched: fix datalen for ematch - net_sched: use validated TCA_KIND attribute in tc_new_tfilter() - net-sysfs: Fix reference count leak - net: usb: lan78xx: Add .ndo_features_check - Revert "udp: do rmem bulk free even if the rx sk queue is empty" - tcp_bbr: improve arithmetic division in bbr_update_bw() - tcp: do not leave dangling pointers in tp->highest_sack - tun: add mutex_unlock() call and napi.skb clearing in tun_get_user() - airo: Fix possible info leak in AIROOLDIOCTL/SIOCDEVPRIVATE - airo: Add missing CAP_NET_ADMIN check in AIROOLDIOCTL/SIOCDEVPRIVATE - fou: Fix IPv6 netlink policy - net: Fix packet reordering caused by GRO and listified RX cooperation - [arm64,armhf] net/mlx5: Fix lowest FDB pool size - [arm64,armhf] net/mlx5: Update the list of the PCI supported devices - [arm64,armhf] net/mlx5: DR, Enable counter on non-fwd-dest objects - [arm64,armhf] net/mlx5: E-Switch, Prevent ingress rate configuration of uplink rep - [arm64,armhf] net/mlx5: DR, use non preemptible call to get the current cpu number - ipv4: Detect rollover in specific fib table dump - Revert "io_uring: only allow submit from owning task" - afs: Fix characters allowed into cell names - hwmon: (adt7475) Make volt2reg return same reg as reg2volt input - hwmon: (core) Do not use device managed functions for memory allocations - ceph: hold extra reference to r_parent over life of request - PCI: Mark AMD Navi14 GPU rev 0xc5 ATS as broken - [arm64,armhf] drm/panfrost: Add the panfrost_gem_mapping concept - [x86] drm/i915: Align engine->uabi_class/instance with i915_drm.h - PM: hibernate: fix crashes with init_on_free=1 - tracing: trigger: Replace unneeded RCU-list traversals - tracing/uprobe: Fix double perf_event linking on multiprobe uprobe - tracing: Do not set trace clock if tracefs lockdown is in effect - tracing: Fix histogram code when expression has same var as value - [powerpc*] xive: Discard ESB load value when interrupt is invalid - Revert "iwlwifi: mvm: fix scan config command size" - iwlwifi: mvm: don't send the IWL_MVM_RXQ_NSSN_SYNC notif to Rx queues - XArray: Fix infinite loop with entry at ULONG_MAX - XArray: Fix xa_find_after with multi-index entries - XArray: Fix xas_find returning too many entries - [x86] pinctrl: sunrisepoint: Add missing Interrupt Status register offset - [amd64] iommu/vt-d: Call __dmar_remove_one_dev_info with valid pointer - Input: keyspan-remote - fix control-message timeouts - [x86] Revert "Input: synaptics-rmi4 - don't increment rmiaddr for SMBus transfers" - [arm64,armhf] mmc: tegra: fix SDR50 tuning override - mmc: sdhci: fix minimum clock rate for v3 controller - Input: sur40 - fix interface sanity checks - Input: gtco - fix endpoint sanity check - Input: aiptek - fix endpoint sanity check - Input: pegasus_notetaker - fix endpoint sanity check - Input: sun4i-ts - add a check for devm_thermal_zone_of_sensor_register - netfilter: nft_osf: add missing check for DREG attribute - [amd64] iommu/amd: Fix IOMMU perf counter clobbering during init - readdir: make user_access_begin() use the real access range - leds: gpio: Fix uninitialized gpio label for fwnode based probe - hwmon: (nct7802) Fix voltage limits to wrong registers - hwmon: (nct7802) Fix non-working alarm on voltages - scsi: RDMA/isert: Fix a recently introduced regression related to logout - tracing: xen: Ordered comparison of function pointers - iwlwifi: mvm: fix SKB leak on invalid queue - iwlwifi: mvm: fix potential SKB leak on TXQ TX - [x86] drm/i915/userptr: fix size calculation - xfrm: support output_mark for offload ESP packets - net, sk_msg: Don't check if sock is locked when tearing down psock - do_last(): fetch directory ->i_mode and ->i_uid before it's too late (CVE-2020-8428) - readdir: be more conservative with directory entry names - libertas: Fix two buffer overflows at parsing bss descriptor (CVE-2019-14896 CVE-2019-14897) - media: v4l2-ioctl.c: zero reserved fields for S/TRY_FMT - netfilter: ipset: use bitmap infrastructure completely - netfilter: nf_tables: add __nft_chain_type_get() - netfilter: nf_tables: autoload modules from the abort path https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.17 - Bluetooth: btusb: fix non-atomic allocation in completion handler - orinoco_usb: fix interface sanity check - rsi_91x_usb: fix interface sanity check - usb: dwc3: pci: add ID for the Intel Comet Lake -V variant - [arm64,armhf] usb: host: xhci-tegra: set MODULE_FIRMWARE for tegra186 - USB: serial: ir-usb: add missing endpoint sanity check - USB: serial: ir-usb: fix link-speed handling - USB: serial: ir-usb: fix IrLAP framing - [arm64,armhf] usb: dwc3: turn off VBUS when leaving host mode - [x86] usb: typec: fusb302: fix "op-sink-microwatt" default that was in mW - [x86] staging: vt6656: correct packet types for CTS protect, mode. - [x86] staging: vt6656: use NULLFUCTION stack on mac80211 - [x86] staging: vt6656: Fix false Tx excessive retries reporting. - [arm64,armel] serial: 8250_bcm2835aux: Fix line mismatch on driver unbind - [armhf] serial: imx: fix a race condition in receive path - debugfs: Return -EPERM when locked down - component: do not dereference opaque pointer in debugfs - [arm*] binder: fix log spam for existing debugfs file creation. - [x86] mei: me: add comet point (lake) H device ids - crypto: chelsio - fix writing tfm flags to wrong place - CIFS: Fix task struct use-after-free on reconnect - cifs: set correct max-buffer-size for smb2_ioctl_init() - cifs: Fix memory allocation in __smb2_handle_cancelled_cmd() - ath9k: fix storage endpoint lookup - brcmfmac: fix interface sanity check - rtl8xxxu: fix interface sanity check - zd1211rw: fix storage endpoint lookup - net_sched: ematch: reject invalid TCF_EM_SIMPLE - net_sched: fix ops->bind_class() implementations - net_sched: walk through all child classes in tc_bind_tclass() - [arm64] net: socionext: fix possible user-after-free in netsec_process_rx - [arm64] net: socionext: fix xdp_result initialization in netsec_process_rx - udp: segment looped gso packets correctly - net: include struct nhmsg size in nh nlmsg size - rxrpc: Fix use-after-free in rxrpc_receive_data() - HID: multitouch: Add LG MELF0410 I2C touchscreen support - HID: Add quirk for Xin-Mo Dual Controller - HID: ite: Add USB id match for Acer SW5-012 keyboard dock - HID: asus: Ignore Asus vendor-page usage-code 0xff events - HID: Add quirk for incorrect input length on Lenovo Y720 - HID: intel-ish-hid: ipc: add CMP device id - HID: wacom: Recognize new MobileStudio Pro PID - [x86] ASoC: SOF: fix fault at driver unload after failed probe - [x86] ASoC: SOF: Intel: hda: hda-dai: fix oops on hda_link .hw_free - drivers/hid/hid-multitouch.c: fix a possible null pointer access. - phy: qcom-qmp: Increase PHY ready timeout - [x86] ASoC: topology: Prevent use-after-free in snd_soc_get_pcm_runtime() - HID: intel-ish-hid: ipc: Add Tiger Lake PCI device ID - [arm64] watchdog: max77620_wdt: fix potential build errors - [armel,armhf] watchdog: orion: fix platform_get_irq() complaints - drivers/net/b44: Change to non-atomic bit operations on pwol_mask - [i386] net: wan: sdla: Fix cast from pointer to integer of different size - [arm64] gpio: max77620: Add missing dependency on GPIOLIB_IRQCHIP - [arm64] iommu/dma: fix variable 'cookie' set but not used - [arm64,armhf] stmmac: debugfs entry name is not be changed when udev rename device name. - atm: eni: fix uninitialized variable warning - HID: steam: Fix input device disappearing - [x86] ASoC: Intel: cht_bsw_rt5645: Add quirk for boards using pmc_plt_clk_0 - drm/amdgpu/SRIOV: add navi12 pci id for SRIOV (v2) - libbpf: Fix BTF-defined map's __type macro handling of arrays - [x86] platform/x86: dell-laptop: disable kbd backlight on Inspiron 10xx - PCI: Add DMA alias quirk for Intel VCA NTB - media: dvbsky: add support for eyeTV Geniatech T2 lite - [armhf] bus: ti-sysc: Handle mstandby quirk and use it for musb - [armhf] bus: ti-sysc: Use swsup quirks also for am335x musb - [amd64,armhf] spi: pxa2xx: Add support for Intel Comet Lake-H - [amd64] iommu/amd: Support multiple PCI DMA aliases in device table - [amd64] iommu/amd: Support multiple PCI DMA aliases in IRQ Remapping - perf/imx_ddr: Add enhanced AXI ID filter support - [x86] mfd: intel-lpss: Add Intel Comet Lake PCH-H PCI IDs - mmc: sdhci-pci: Quirk for AMD SDHC Device 0x7906 - mmc: sdhci-pci: Add support for Intel JSL - [armhf] bus: ti-sysc: Add module enable quirk for audio AESS - usb-storage: Disable UAS on JMicron SATA enclosure - ALSA: hda/realtek - Move some alc236 pintbls to fallback table - Bluetooth: Allow combination of BDADDR_PROPERTY and INVALID_BDADDR quirks - Bluetooth: btbcm: Use the BDADDR_PROPERTY quirk - [armhf] bus: ti-sysc: Fix missing force mstandby quirk handling - rsi: fix use-after-free on failed probe and unbind - rsi: fix use-after-free on probe errors - rsi: fix memory leak on failed URB submission - rsi: fix non-atomic allocation in completion handler - crypto: af_alg - Use bh_lock_sock in sk_destruct - [powerpc*] crypto: vmx - reject xts inputs that are too short - crypto: pcrypt - Fix user-after-free on module unload - [arm64] KVM: Write arch.mdcr_el2 changes since last vcpu_load on VHE https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.18 - vfs: fix do_last() regression - cifs: fix soft mounts hanging in the reconnect code - e1000e: Drop unnecessary __E1000_DOWN bit twiddling - e1000e: Revert "e1000e: Make watchdog use delayed work" - gfs2: Another gfs2_find_jhead fix - perf c2c: Fix return type for histogram sorting comparision functions - PM / devfreq: Add new name attribute for sysfs - mm/mempolicy.c: fix out of bounds write in mpol_parse_str() - reiserfs: Fix memory leak of journal device string - media: digitv: don't continue if remote control state can't be read - media: af9005: uninitialized variable printked - media: vp7045: do not read uninitialized values if usb transfer fails - media: gspca: zero usb_buf - media: dvb-usb/dvb-usb-urb.c: initialize actlen to 0 - tomoyo: Use atomic_t for statistics counter - ttyprintk: fix a potential deadlock in interrupt context issue - Bluetooth: Fix race condition in hci_release_sock() - cgroup: Prevent double killing of css when enabling threaded cgroup - [armhf] clk: sunxi-ng: v3s: Fix incorrect number of hw_clks. - [arm64] dts: meson-sm1-sei610: add gpio bluetooth interrupt - [armhf] dts: sun8i: a83t: Correct USB3503 GPIOs polarity - [armhf] dts: am57xx-beagle-x15/am57xx-idk: Remove "gpios" for endpoint dt nodes - rseq: Unregister rseq for clone CLONE_VM - [arm64,armhf] clk: sunxi-ng: sun8i-r: Fix divider on APB0 clock - [arm64] clk: sunxi-ng: h6-r: Fix AR100/R_APB2 parent order - mac80211: mesh: restrict airtime metric to peered established plinks - [armhf] clk: mmp2: Fix the order of timer mux parents - ASoC: rt5640: Fix NULL dereference on module unload - [s390x] zcrypt: move ap device reset from bus to driver code - i40e: Fix virtchnl_queue_select bitmap validation - ixgbevf: Remove limit of 10 entries for unicast filter list - ixgbe: Fix calculation of queue with VFs and flow director on interface flap - igb: Fix SGMII SFP module discovery for 100FX/LX. - iavf: remove current MAC address filter on VF reset - [x86] platform/x86: GPD pocket fan: Allow somewhat lower/higher temperature limits - [x86] platform/x86: intel_pmc_core: update Comet Lake platform driver - [x86] ASoC: SOF: Intel: fix HDA codec driver probe with multiple controllers - [x86] ASoC: hdac_hda: Fix error in driver removal after failed probe - qmi_wwan: Add support for Quectel RM500Q - [hppa/parisc] Use proper printk format for resource_size_t - wireless: fix enabling channel 12 for custom regulatory domain - cfg80211: Fix radar event during another phy CAC - mac80211: Fix TKIP replay protection immediately after key setup - [x86] perf/x86/intel/uncore: Add PCI ID of IMC for Xeon E3 V5 Family - [x86] perf/x86/intel/uncore: Remove PCIe3 unit for SNR - XArray: Fix xas_pause at ULONG_MAX - iwlwifi: pcie: allocate smaller dev_cmd for TX headers - iwlwifi: Don't ignore the cap field upon mcc update - iwlwifi: dbg: force stop the debug monitor HW - Input: evdev - convert kzalloc()/vzalloc() to kvzalloc() - vti[6]: fix packet tx through bpf_redirect() - xfrm interface: fix packet tx through bpf_redirect() - xfrm: interface: do not confirm neighbor when do pmtu update - [x86] scsi: fnic: do not queue commands during fwreset - [armhf] 8955/1: virt: Relax arch timer version check during early boot - r8152: get default setting of WOL before initializing - r8152: disable U2P3 for RTL8153B - r8152: Disable PLA MCU clock speed down - r8152: disable test IO for RTL8153B - r8152: avoid the MCU to clear the lanwake - r8152: disable DelayPhyPwrChg - qlcnic: Fix CPU soft lockup while collecting firmware dump - seq_tab_next() should increase position index - l2t_seq_next should increase position index - netfilter: conntrack: sctp: use distinct states for new SCTP connections - netfilter: nf_tables_offload: fix check the chain offload flag - net: Fix skb->csum update in inet_proto_csum_replace16(). - btrfs: do not zero f_bavail if we have available space - flow_dissector: Fix to use new variables for port ranges in bpf hook - dm thin: fix use-after-free in metadata_pre_commit_callback - perf report: Fix no libunwind compiled warning break s390 issue - mm/migrate.c: also overwrite error when it is bigger than zero - [x86] ASoC: topology: fix soc_tplg_fe_link_create() - link->dobj initialization order - Revert "rsi: fix potential null dereference in rsi_probe()" - tracing/uprobe: Fix to make trace_uprobe_filter alignment safe https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.19 - bnxt_en: Move devlink_register before registering netdev - gtp: use __GFP_NOWARN to avoid memalloc warning - l2tp: Allow duplicate session creation with UDP - net_sched: fix an OOB access in cls_tcindex - [arm64,armhf] net: stmmac: Delete txtimer in suspend() - bnxt_en: Fix TC queue mapping. - rxrpc: Fix use-after-free in rxrpc_put_local() - rxrpc: Fix insufficient receive notification generation - rxrpc: Fix missing active use pinning of rxrpc_local object - rxrpc: Fix NULL pointer deref due to call->conn being cleared on disconnect - tcp: clear tp->total_retrans in tcp_disconnect() - tcp: clear tp->delivered in tcp_disconnect() - tcp: clear tp->data_segs{in|out} in tcp_disconnect() - tcp: clear tp->segs_{in|out} in tcp_disconnect() - bnxt_en: Fix logic that disables Bus Master during firmware reset. - media: uvcvideo: Avoid cyclic entity chains due to malformed USB descriptors - netfilter: ipset: fix suspicious RCU usage in find_set_and_id - ipc/msg.c: consolidate all xxxctl_down() functions - tracing/kprobes: Have uname use __get_str() in print_fmt - tracing: Fix sched switch start/stop refcount racy updates - rcu: Use *_ONCE() to protect lockless ->expmask accesses - rcu: Avoid data-race in rcu_gp_fqs_check_wake() - srcu: Apply *_ONCE() to ->srcu_last_gp_end - rcu: Use READ_ONCE() for ->expmask in rcu_read_unlock_special() - nvmet: Fix error print message at nvmet_install_queue function - nvmet: Fix controller use after free - Bluetooth: btusb: fix memory leak on fw - Bluetooth: btusb: Disable runtime suspend on Realtek devices - brcmfmac: Fix memory leak in brcmf_usbdev_qinit - [arm64,armhf] usb: dwc3: gadget: Check END_TRANSFER completion - [arm64,armhf] usb: dwc3: gadget: Delay starting transfer - usb: gadget: f_fs: set req->num_sgs as 0 for non-sg transfer - usb: gadget: legacy: set max_speed to super-speed - usb: gadget: f_ncm: Use atomic_t to track in-flight request - usb: gadget: f_ecm: Use atomic_t to track in-flight request - ALSA: usb-audio: Fix endianess in descriptor validation - ALSA: usb-audio: Annotate endianess in Scarlett gen2 quirk - ALSA: dummy: Fix PCM format loop in proc output - memcg: fix a crash in wb_workfn when a device disappears - mm/sparse.c: reset section's mem_map when fully deactivated - mmc: sdhci-pci: Make function amd_sdhci_reset static - utimes: Clamp the timestamps in notify_change() - mm/memory_hotplug: fix remove_memory() lockdep splat - mm: thp: don't need care deferred split queue in memcg charge move path - mm: move_pages: report the number of non-attempted pages - media/v4l2-core: set pages dirty upon releasing DMA buffers - media: v4l2-core: compat: ignore native command codes - media: v4l2-rect.h: fix v4l2_rect_map_inside() top/left adjustments - irqdomain: Fix a memory leak in irq_domain_push_irq() - [x86] cpu: Update cached HLE state on write to TSX_CTRL_CPUID_CLEAR - ALSA: hda: Apply aligned MMIO access only conditionally - ALSA: hda: Add Clevo W65_67SB the power_save blacklist - ALSA: hda: Add JasperLake PCI ID and codec vid - [arm64] acpi: fix DAIF manipulation with pNMI - [arm64] KVM: Correct PSTATE on exception entry - [arm64,armhf] KVM: Correct CPSR on exception entry - [arm64,armhf] KVM: Correct AArch32 SPSR on exception entry - [arm64] KVM: Only sign-extend MMIO up to register width - [s390x] mm: fix dynamic pagetable upgrade for hugetlbfs - [powerpc*] xmon: don't access ASDR in VMs - [powerpc*] pseries: Advance pfn if section is not present in lmb_is_removable() - tracing: Fix now invalid var_ref_vals assumption in trace action - [arm64,armhf] PCI: tegra: Fix return value check of pm_runtime_get_sync() - mmc: spi: Toggle SPI polarity, do not hardcode it - [x86] ACPI: video: Do not export a non working backlight interface on MSI MS-7721 boards - ACPI / battery: Deal with design or full capacity being reported as -1 - ACPI / battery: Use design-cap for capacity calculations if full-cap is not available - ACPI / battery: Deal better with neither design nor full capacity not being reported - alarmtimer: Unregister wakeup source when module get fails - fscrypt: don't print name of busy file when removing key - ubifs: don't trigger assertion on invalid no-key filename - ubifs: Fix wrong memory allocation - ubifs: Fix FS_IOC_SETFLAGS unexpectedly clearing encrypt flag - ubifs: Fix deadlock in concurrent bulk-read and writepage - [x86] ASoC: SOF: core: free trace on errors - [x86] hv_balloon: Balloon up according to request page number - mfd: axp20x: Mark AXP20X_VBUS_IPSOUT_MGMT as volatile - nvmem: core: fix memory abort in cleanup path - crypto: api - Check spawn->alg under lock in crypto_drop_spawn - padata: Remove broken queue flushing - fs: allow deduplication of eof block into the end of the destination file - erofs: fix out-of-bound read for shifted uncompressed block - scsi: megaraid_sas: Do not initiate OCR if controller is not in ready state - scsi: qla2xxx: Fix mtcp dump collection failure - cpupower: Revert library ABI changes from commit ae2917093fb60bdc1ed3e - [arm64,armhf] power: supply: axp20x_ac_power: Fix reporting online status - ovl: fix wrong WARN_ON() in ovl_cache_update_ino() - ovl: fix lseek overflow on 32bit - f2fs: choose hardlimit when softlimit is larger than hardlimit in f2fs_statfs_project() - f2fs: fix miscounted block limit in f2fs_statfs_project() - f2fs: code cleanup for f2fs_statfs_project() - f2fs: fix dcache lookup of !casefolded directories - f2fs: fix race conditions in ->d_compare() and ->d_hash() - PM: core: Fix handling of devices deleted during system-wide resume - cpufreq: Avoid creating excessively large stack frames - [armel,armhf] dma-api: fix max_pfn off-by-one error in __dma_supported() - dm zoned: support zone sizes smaller than 128MiB - dm space map common: fix to ensure new block isn't already in use - dm writecache: fix incorrect flush sequence when doing SSD mode commit - dm crypt: fix GFP flags passed to skcipher_request_alloc() - dm crypt: fix benbi IV constructor crash if used in authenticated mode - dm thin metadata: use pool locking at end of dm_pool_metadata_close - dm: fix potential for q->make_request_fn NULL pointer - scsi: qla2xxx: Fix stuck login session using prli_pend_timer - [x86] ASoC: SOF: Introduce state machine for FW boot - [x86] ASoC: SOF: core: release resources on errors in probe_continue - tracing: Annotate ftrace_graph_hash pointer with __rcu - tracing: Annotate ftrace_graph_notrace_hash pointer with __rcu - ftrace: Add comment to why rcu_dereference_sched() is open coded - ftrace: Protect ftrace_graph_hash with ftrace_sync - crypto: pcrypt - Avoid deadlock by using per-instance padata queues - btrfs: fix improper setting of scanned for range cyclic write cache pages - btrfs: Handle another split brain scenario with metadata uuid feature - [riscv64] bpf: Fix broken BPF tail calls - bpf, devmap: Pass lockdep expression to RCU lists - libbpf: Fix realloc usage in bpf_core_find_cands - crypto: api - fix unexpectedly getting generic implementation - [arm64] crypto: hisilicon - Use the offset fields in sqe to avoid need to split scatterlists - [x86] crypto: ccp - set max RSA modulus size for v3 platform devices as well - [arm64] crypto: arm64/ghash-neon - bump priority to 150 - crypto: pcrypt - Do not clear MAY_SLEEP flag in original request - crypto: api - Fix race condition in crypto_spawn_alg - [powerpc*] futex: Fix incorrect user access blocking - scsi: qla2xxx: Fix unbound NVME response length - NFS: Fix memory leaks and corruption in readdir - NFS: Directory page cache pages need to be locked when read - nfsd: fix filecache lookup - jbd2_seq_info_next should increase position index - ext4: fix deadlock allocating crypto bounce page from mempool - ext4: fix race conditions in ->d_compare() and ->d_hash() - Btrfs: fix missing hole after hole punching and fsync when using NO_HOLES - Btrfs: make deduplication with range including the last block work - Btrfs: fix infinite loop during fsync after rename operations - btrfs: set trans->drity in btrfs_commit_transaction - btrfs: drop log root for dropped roots - Btrfs: fix race between adding and putting tree mod seq elements and nodes - btrfs: flush write bio if we loop in extent_write_cache_pages - btrfs: Correctly handle empty trees in find_first_clear_extent_bit - [armhf] tegra: Enable PLLP bypass during Tegra124 LP1 - iwlwifi: don't throw error when trying to remove IGTK - mwifiex: fix unbalanced locking in mwifiex_process_country_ie() - sunrpc: expiry_time should be seconds not timeval - gfs2: fix gfs2_find_jhead that returns uninitialized jhead with seq 0 - gfs2: move setting current->backing_dev_info - gfs2: fix O_SYNC write handling - drm/rect: Avoid division by zero - media: iguanair: fix endpoint sanity check - media: rc: ensure lirc is initialized before registering input device - xen/balloon: Support xend-based toolstack take two - watchdog: fix UAF in reboot notifier handling in watchdog core code - bcache: add readahead cache policy options via sysfs interface - eventfd: track eventfd_signal() recursion depth - aio: prevent potential eventfd recursion on poll - [x86] KVM: Refactor picdev_write() to prevent Spectre-v1/L1TF attacks - [x86] KVM: Refactor prefix decoding to prevent Spectre-v1/L1TF attacks - [x86] KVM: Protect pmu_intel.c from Spectre-v1/L1TF attacks - [x86] KVM: Protect DR-based index computations from Spectre-v1/L1TF attacks - [x86] KVM: Protect kvm_lapic_reg_write() from Spectre-v1/L1TF attacks - [x86] KVM: Protect kvm_hv_msr_[get|set]_crash_data() from Spectre-v1/L1TF attacks - [x86] KVM: Protect ioapic_write_indirect() from Spectre-v1/L1TF attacks - [x86] KVM: Protect MSR-based index computations in pmu.h from Spectre-v1/L1TF attacks - [x86] KVM: Protect ioapic_read_indirect() from Spectre-v1/L1TF attacks - [x86] KVM: Protect MSR-based index computations from Spectre-v1/L1TF attacks in x86.c - [x86] KVM: Protect x86_decode_insn from Spectre-v1/L1TF attacks - [x86] KVM: Protect MSR-based index computations in fixed_msr_to_seg_unit() from Spectre-v1/L1TF attacks - [x86] KVM: Fix potential put_fpu() w/o load_fpu() on MPX platform - [powerpc*] KVM: PPC: Book3S HV: Uninit vCPU if vcore creation fails - [powerpc*] KVM: PPC: Book3S PR: Free shared page if mmu initialization fails - [x86] kvm/svm: PKU not currently supported - [x86] kvm: Be careful not to clear KVM_VCPU_FLUSH_TLB bit (CVE-2019-3016) - [x86] kvm: Introduce kvm_(un)map_gfn() (CVE-2019-3016) - [x86] KVM: Make sure KVM_VCPU_FLUSH_TLB flag is not missed (CVE-2019-3016) - [x86] kvm: Cache gfn to pfn translation (CVE-2019-3016) - [x86] KVM: Clean up host's steal time structure (CVE-2019-3016) - [x86] KVM: VMX: Add non-canonical check on writes to RTIT address MSRs - [x86] KVM: Don't let userspace set host-reserved cr4 bits - [x86] KVM: Free wbinvd_dirty_mask if vCPU creation fails - [x86] KVM: Handle TIF_NEED_FPU_LOAD in kvm_{load,put}_guest_fpu() - [x86] KVM: Ensure guest's FPU state is loaded when accessing for emulation - [x86] KVM: Revert "KVM: X86: Fix fpu state crash in kvm guest" - [s390x] KVM: do not clobber registers during guest reset/store status - ocfs2: fix oops when writing cloned file - mm/page_alloc.c: fix uninitialized memmaps on a partially populated last section - mm/mmu_gather: invalidate TLB correctly on batch allocation failure and flush - [arm64,armhf] clk: tegra: Mark fuse clock as critical - virtio-balloon: initialize all vq callbacks - virtio-pci: check name when counting MSI-X vectors - fix up iter on short count in fuse_direct_io() - broken ping to ipv6 linklocal addresses on debian buster - percpu: Separate decrypted varaibles anytime encryption can be enabled - scsi: qla2xxx: Fix the endianness of the qla82xx_get_fw_size() return type - scsi: csiostor: Adjust indentation in csio_device_reset - scsi: qla4xxx: Adjust indentation in qla4xxx_mem_free - scsi: ufs: Recheck bkops level if bkops is disabled - mtd: spi-nor: Split mt25qu512a (n25q512a) entry into two - [arm64] phy: qualcomm: Adjust indentation in read_poll_timeout - ext2: Adjust indentation in ext2_fill_super - [arm64] drm: msm: mdp4: Adjust indentation in mdp4_dsi_encoder_enable - [x86] NFC: pn544: Adjust indentation in pn544_hci_check_presence - ppp: Adjust indentation into ppp_async_input - [armhf] net: smc911x: Adjust indentation in smc911x_phy_configure - net: tulip: Adjust indentation in {dmfe, uli526x}_init_module - IB/mlx5: Fix outstanding_pi index for GSI qps - IB/core: Fix ODP get user pages flow - nfsd: fix delay timer on 32-bit architectures - nfsd: fix jiffies/time_t mixup in LRU list - nfsd: Return the correct number of bytes written to the file - virtio-balloon: Fix memory leak when unloading while hinting is in progress - virtio_balloon: Fix memory leaks on errors in virtballoon_probe() - ubifs: Fix memory leak from c->sup_node - regulator: core: Add regulator_is_equal() helper - [armhf] ASoC: sgtl5000: Fix VDDA and VDDIO comparison - bonding/alb: properly access headers in bond_alb_xmit() - devlink: report 0 after hitting end in region read - [armhf] net: dsa: b53: Always use dev->vlan_enabled in b53_configure_vlan() - [armhf] net: dsa: bcm_sf2: Only 7278 supports 2Gb/sec IMP port - [arm64,armhf] net: mvneta: move rx_dropped and rx_errors in per-cpu stats - net_sched: fix a resource leak in tcindex_set_parms() - [arm64] net: stmmac: fix a possible endless loop - [arm64,riscv64] net: macb: Remove unnecessary alignment check for TSO - [arm64,riscv64] net: macb: Limit maximum GEM TX length in TSO - ipv6/addrconf: fix potential NULL deref in inet6_set_link_af() - qed: Fix timestamping issue for L2 unicast ptp packets. - drop_monitor: Do not cancel uninitialized work item - net/mlx5: Fix deadlock in fs_core - net/mlx5: Deprecate usage of generic TLS HW capability bit - [x86] ASoC: Intel: skl_hda_dsp_common: Fix global-out-of-bounds bug - [x86] timer: Don't skip PIT setup when APIC is disabled or in legacy mode - btrfs: use bool argument in free_root_pointers() - btrfs: free block groups after free'ing fs trees - drm/dp_mst: Remove VCPI while disabling topology mgr - [x86] KVM: x86/mmu: Apply max PA check for MMIO sptes to 32-bit KVM - [x86] KVM: x86: use CPUID to locate host page table reserved bits - [x86] KVM: x86: Use gpa_t for cr2/gpa to fix TDP support on 32-bit KVM - [x86] KVM: x86: fix overlap between SPTE_MMIO_MASK and generation - [x86] KVM: nVMX: vmread should not set rflags to specify success in case of #PF - KVM: Use vcpu-specific gva->hva translation when querying host page size - KVM: Play nice with read-only memslots when querying host page size - cifs: fail i/o on soft mounts if sessionsetup errors out - [x86] apic/msi: Plug non-maskable MSI affinity race - clocksource: Prevent double add_timer_on() for watchdog_timer - perf/core: Fix mlock accounting in perf_mmap() - rxrpc: Fix service call disconnection [ Aurelien Jarno ] * [mips*/malta] Enable POWER_RESET_PIIX4_POWEROFF. [ Salvatore Bonaccorso ] * [rt] Update to 5.4.13-rt6 * [rt] Update to 5.4.13-rt7 * [rt] Update to 5.4.17-rt8 * [rt] Update to 5.4.17-rt9 * Bump ABI to 4. * Revert "cpupower: Revert library ABI changes from commit ae2917093fb60bdc1ed3e" [ Ben Hutchings ] * linux-perf: Build with CORESIGHT=1 (thanks to Wookey) (Closes: #924673) [ Steve McIntyre ] * [arm64] Include the Hisilicon Hibmc drm driver in fb-modules Closes: #944546) -- Salvatore Bonaccorso Thu, 13 Feb 2020 06:14:49 +0100 linux (5.4.13-1) unstable; urgency=medium * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.9 - nvme_fc: add module to ops template to allow module references - nvme-fc: fix double-free scenarios on hw queues - drm/amdgpu: add check before enabling/disabling broadcast mode - drm/amdgpu: add header line for power profile on Arcturus - drm/amdgpu: add cache flush workaround to gfx8 emit_fence - nvme/pci: Fix write and poll queue types - nvme/pci: Fix read queue count - [armhf] iio: st_accel: Fix unused variable warning - PM / devfreq: Fix devfreq_notifier_call returning errno - PM / devfreq: Set scaling_max_freq to max on OPP notifier error - PM / devfreq: Don't fail devfreq_dev_release if not in list - afs: Fix afs_find_server lookups for ipv4 peers - afs: Fix SELinux setting security label on /afs - RDMA/cma: add missed unregister_pernet_subsys in init failure - rxe: correctly calculate iCRC for unaligned payloads - scsi: lpfc: Fix memory leak on lpfc_bsg_write_ebuf_set func - scsi: qla2xxx: Use explicit LOGO in target mode - scsi: qla2xxx: Drop superfluous INIT_WORK of del_work - scsi: qla2xxx: Don't call qlt_async_event twice - scsi: qla2xxx: Fix PLOGI payload and ELS IOCB dump length - scsi: qla2xxx: Configure local loop for N2N target - scsi: qla2xxx: Send Notify ACK after N2N PLOGI - scsi: qla2xxx: Don't defer relogin unconditonally - scsi: qla2xxx: Ignore PORT UPDATE after N2N PLOGI - scsi: iscsi: qla4xxx: fix double free in probe - scsi: libsas: stop discovering if oob mode is disconnected (CVE-2019-19965) - scsi: iscsi: Avoid potential deadlock in iscsi_if_rx func - [x86] staging/wlan-ng: add CRC32 dependency in Kconfig - drm/nouveau: Move the declaration of struct nouveau_conn_atom up a bit - drm/nouveau: Fix drm-core using atomic code-paths on pre-nv50 hardware - drm/nouveau/kms/nv50-: fix panel scaling - usb: gadget: fix wrong endpoint desc - net: make socket read/write_iter() honor IOCB_NOWAIT - afs: Fix mountpoint parsing - afs: Fix creation calls in the dynamic root to fail with EOPNOTSUPP - raid5: need to set STRIPE_HANDLE for batch head - md: raid1: check rdev before reference in raid1_sync_request func - [s390x] cpum_sf: Adjust sampling interval to avoid hitting sample limits - [s390x] cpum_sf: Avoid SBD overflow condition in irq handler - RDMA/counter: Prevent auto-binding a QP which are not tracked with res - IB/mlx4: Follow mirror sequence of device add during device removal - IB/mlx5: Fix steering rule of drop and count - xen-blkback: prevent premature module unload - xen/balloon: fix ballooned page accounting without hotplug enabled - PM / hibernate: memory_bm_find_bit(): Tighten node optimisation - ALSA: hda/realtek - Add Bass Speaker and fixed dac for bass speaker - ALSA: hda/realtek - Enable the bass speaker of ASUS UX431FLC - PCI: Add a helper to check Power Resource Requirements _PR3 existence - ALSA: hda: Allow HDA to be runtime suspended when dGPU is not bound to a driver - PCI: Fix missing inline for pci_pr3_present() - ALSA: hda - fixup for the bass speaker on Lenovo Carbon X1 7th gen - tcp: fix data-race in tcp_recvmsg() - shmem: pin the file in shmem_fault() if mmap_sem is dropped - taskstats: fix data-race - ALSA: hda - Downgrade error message for single-cmd fallback - netfilter: nft_tproxy: Fix port selector on Big Endian - block: add bio_truncate to fix guard_bio_eod - mm: drop mmap_sem before calling balance_dirty_pages() in write fault - ALSA: ice1724: Fix sleep-in-atomic in Infrasonic Quartet support code - ALSA: usb-audio: fix set_format altsetting sanity check - ALSA: usb-audio: set the interface format after resume on Dell WD19 - ALSA: hda - Apply sync-write workaround to old Intel platforms, too - ALSA: hda/realtek - Add headset Mic no shutup for ALC283 - [arm64,armhf] drm/sun4i: hdmi: Remove duplicate cleanup calls - [mips*] BPF: Disable MIPS32 eBPF JIT - [mips*] BPF: eBPF JIT: check for MIPS ISA compliance in Kconfig - [mips*] Avoid VDSO ABI breakage due to global register variable - media: pulse8-cec: fix lost cec_transmit_attempt_done() call - media: cec: CEC 2.0-only bcast messages were ignored - media: cec: avoid decrementing transmit_queue_sz if it is 0 - media: cec: check 'transmit_in_progress', not 'transmitting' - mm/memory_hotplug: shrink zones when offlining memory - mm/zsmalloc.c: fix the migrated zspage statistics. - memcg: account security cred as well to kmemcg - mm: move_pages: return valid node id in status if the page is already on the target node - mm/oom: fix pgtables units mismatch in Killed process message - ocfs2: fix the crash due to call ocfs2_get_dlm_debug once less - [x86,arm64] pstore/ram: Write new dumps to start of recycled zones - [x86,arm64] pstore/ram: Fix error-path memory leak in persistent_ram_new() callers - locks: print unsigned ino in /proc/locks - seccomp: Check that seccomp_notif is zeroed out by the user - Btrfs: fix infinite loop during nocow writeback due to race - compat_ioctl: block: handle Persistent Reservations - compat_ioctl: block: handle BLKREPORTZONE/BLKRESETZONE - compat_ioctl: block: handle BLKGETZONESZ/BLKGETNRZONES - bpf: Fix precision tracking for unbounded scalars - ata: libahci_platform: Export again ahci_platform_able_phys() - libata: Fix retrieving of active qcs - gpiolib: fix up emulated open drain outputs - [riscv64] clocksource: riscv: add notrace to riscv_sched_clock - [riscv64] ftrace: correct the condition logic in function graph tracer - tracing: Fix lock inversion in trace_event_enable_tgid_record() - tracing: Avoid memory leak in process_system_preds() - tracing: Have the histogram compare functions convert to u64 first - tracing: Fix endianness bug in histogram trigger - io_uring: use current task creds instead of allocating a new one - mm/gup: fix memory leak in __gup_benchmark_ioctl - apparmor: fix aa_xattrs_match() may sleep while holding a RCU lock - dmaengine: virt-dma: Fix access after free in vchan_complete() - [i386] ALSA: cs4236: fix error return comparison of an unsigned integer - ALSA: pcm: Yet another missing check of non-cached buffer type - ALSA: firewire-motu: Correct a typo in the clock proc string - scsi: lpfc: Fix rpi release when deleting vport - exit: panic before exit_mm() on global init exit - [arm64] Revert support for execute-only user mappings - ftrace: Avoid potential division by zero in function profiler - [arm64] drm/msm: include linux/sched/task.h - PM / devfreq: Check NULL governor in available_governors_show - sunrpc: fix crash when cache_head become valid before update - nfsd4: fix up replay_matches_cache() - [powerpc*] Chunk calls to flush_dcache_range in arch_*_memory - [x86,arm64] HID: i2c-hid: Reset ALPS touchpads on resume - net/sched: annotate lockless accesses to qdisc->empty - kernel/module.c: wakeup processes in module_wq on module unload - ACPI: sysfs: Change ACPI_MASKABLE_GPE_MAX to 0x100 - perf callchain: Fix segfault in thread__resolve_callchain_sample() - [amd64] iommu/vt-d: Remove incorrect PSI capability check - cifs: Fix potential softlockups while refreshing DFS cache - xfs: don't check for AG deadlock for realtime files in bunmapi - [x86] platform/x86: pmc_atom: Add Siemens CONNECT X300 to critclk_systems DMI table - netfilter: nf_queue: enqueue skbs with NULL dst - [arm64,armhf] regulator: axp20x: Fix axp20x_set_ramp_delay - [arm64,armhf] regulator: axp20x: Fix AXP22x ELDO2 regulator enable bitmask - [powerpc*] mm: Mark get_slice_psize() & slice_addr_is_low() as notrace - Bluetooth: btusb: fix PM leak in error case of setup - Bluetooth: delete a stray unlock - Bluetooth: Fix memory leak in hci_connect_le_scan - [arm64] dts: meson-gxl-s905x-khadas-vim: fix uart_A bluetooth node - [arm64] dts: meson-gxm-khadas-vim2: fix uart_A bluetooth node - media: flexcop-usb: ensure -EIO is returned on error condition - media: usb: fix memory leak in af9005_identify_state (CVE-2019-18809) - [arm64] dts: meson: odroid-c2: Disable usb_otg bus to avoid power failed warning - [arm64] tty: serial: msm_serial: Fix lockup for sysrq and oops - cifs: Fix lookup of root ses in DFS referral cache - fs: cifs: Fix atime update check vs mtime - fix compat handling of FICLONERANGE, FIDEDUPERANGE and FS_IOC_FIEMAP - ath9k_htc: Modify byte order for an error message - ath9k_htc: Discard undersized packets - [x86] drm/i915/execlists: Fix annotation for decoupling virtual request - xfs: periodically yield scrub threads to the scheduler - net: add annotations on hh->hh_len lockless accesses - ubifs: ubifs_tnc_start_commit: Fix OOB in layout_in_gaps - btrfs: get rid of unique workqueue helper functions - Btrfs: only associate the locked page with one async_chunk struct - [s390x] smp: fix physical to logical CPU map for SMT - mm/sparse.c: mark populate_section_memmap as __meminit - xen/blkback: Avoid unmapping unmapped grant pages - lib/ubsan: don't serialize UBSAN report - [x86] perf/x86/intel/bts: Fix the use of page_private() - net: annotate lockless accesses to sk->sk_pacing_shift - mm/hugetlb: defer freeing of huge pages if in non-task context https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.10 - [powerpc*] pmem: Fix kernel crash due to wrong range value usage in flush_dcache_range https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.11 - bpf: Fix passing modified ctx to ld/abs/ind instruction - [x86] ASoC: rt5682: fix i2c arbitration lost issue - spi: pxa2xx: Add support for Intel Jasper Lake - regulator: fix use after free issue - ASoC: max98090: fix possible race conditions - gpio: Handle counting of Freescale chipselects - netfilter: ctnetlink: netns exit must wait for callbacks - [x86] intel: Disable HPET on Intel Ice Lake platforms - netfilter: nf_tables_offload: Check for the NETDEV_UNREGISTER event - mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame() (CVE-2019-14901) - regulator: core: fix regulator_register() error paths to properly release rdev - [x86] efi: Update e820 with reserved EFI boot services data to fix kexec breakage - [x86] ASoC: Intel: bytcr_rt5640: Update quirk for Teclast X89 - efi/gop: Return EFI_NOT_FOUND if there are no usable GOPs - efi/gop: Return EFI_SUCCESS if a usable GOP was found - efi/gop: Fix memory leak in __gop_query32/64() - [x86,arm64] efi/earlycon: Remap entire framebuffer after page initialization - netfilter: uapi: Avoid undefined left-shift in xt_sctp.h - netfilter: nft_set_rbtree: bogus lookup/get on consecutive elements in named sets - netfilter: nf_tables: validate NFT_SET_ELEM_INTERVAL_END - netfilter: nf_tables: validate NFT_DATA_VALUE after nft_data_init() - netfilter: nf_tables: skip module reference count bump on object updates - netfilter: nf_tables_offload: return EOPNOTSUPP if rule specifies no actions - [arm64] spi: spi-cavium-thunderx: Add missing pci_release_regions() - [arm*] reset: Do not register resource data for missing resets - [x86] ASoC: topology: Check return value for snd_soc_add_dai_link() - [x86] ASoC: topology: Check return value for soc_tplg_pcm_create() - [x86] ASoC: SOF: loader: snd_sof_fw_parse_ext_data log warning on unknown header - [x86] ASoC: SOF: Intel: split cht and byt debug window sizes - [armhf] dts: am335x-sancloud-bbe: fix phy mode - [riscv64] bpf, riscv: Limit to 33 tail calls - [mips64el,mipsel] bpf, mips: Limit to 33 tail calls - perf header: Fix false warning when there are no duplicate cache entries - [armhf] spi: spi-ti-qspi: Fix a bug when accessing non default CS - [armhf] bus: ti-sysc: Fix missing reset delay handling - clk: walk orphan list on clock provider registration - mac80211: fix TID field in monitor mode transmit - cfg80211: fix double-free after changing network namespace - pinctrl: pinmux: fix a possible null pointer in pinmux_can_be_used_for_gpio - [powerpc*] Ensure that swiotlb buffer is allocated from low memory - btrfs: Fix error messages in qgroup_rescan_init - Btrfs: fix cloning range with a hole when using the NO_HOLES feature - [powerpc*] vcpu: Assume dedicated processors as non-preempt - [powerpc*] spinlocks: Include correct header for static key - btrfs: handle error in btrfs_cache_block_group - Btrfs: fix hole extent items with a zero size after range cloning - [powerpc*] ocxl: Fix potential memory leak on context creation - bpf: Clear skb->tstamp in bpf_redirect when necessary - bnx2x: Do not handle requests from VFs after parity - bnx2x: Fix logic to get total no. of PFs per engine - cxgb4: Fix kernel panic while accessing sge_info - net: usb: lan78xx: Fix error message format specifier - [hppa/parisc] add missing __init annotation - rfkill: Fix incorrect check to avoid NULL pointer dereference - staging: axis-fifo: add unspecified HAS_IOMEM dependency - [arm*] iommu/iova: Init the struct iova to fix the possible memleak - [x86] perf/x86: Fix potential out-of-bounds access - [x86] perf/x86/intel: Fix PT PMI handling - sched/psi: Fix sampling error and rare div0 crashes with cgroups and high uptime - psi: Fix a division error in psi poll() - [x86] usb: typec: fusb302: Fix an undefined reference to 'extcon_get_state' - block: end bio with BLK_STS_AGAIN in case of non-mq devs and REQ_NOWAIT - fs: avoid softlockups in s_inodes iterators - fs: call fsnotify_sb_delete after evict_inodes - [arm64] iommu/dma: Relax locking in iommu_dma_prepare_msi() - io_uring: don't wait when under-submitting - clk: Move clk_core_reparent_orphans() under CONFIG_OF - [arm64,armhf] net: stmmac: Determine earlier the size of RX buffer - [arm64,armhf] net: stmmac: Do not accept invalid MTU values - [arm64,armhf] net: stmmac: xgmac: Clear previous RX buffer size - [arm64,armhf] net: stmmac: RX buffer size must be 16 byte aligned - [arm64,armhf] net: stmmac: Always arm TX Timer at end of transmission start - xsk: Add rcu_read_lock around the XSK wakeup - net/mlx5e: Fix concurrency issues between config flow and XSK - net/i40e: Fix concurrency issues between config flow and XSK - net/ixgbe: Fix concurrency issues between config flow and XSK - [arm64] cpu_errata: Add Hisilicon TSV110 to spectre-v2 safe list - block: Fix a lockdep complaint triggered by request queue flushing - [s390x] dasd/cio: Interpret ccw_device_get_mdc return value correctly - [s390x] dasd: fix memleak in path handling error case - block: fix memleak when __blk_rq_map_user_iov() is failed - sbitmap: only queue kyber's wait callback if not already active - [s390x] qeth: handle error due to unsupported transport mode - [s390x] qeth: fix promiscuous mode after reset - [s390x] qeth: don't return -ENOTSUPP to userspace - llc2: Fix return statement of llc_stat_ev_rx_null_dsap_xid_c (and _test_c) - [x86] hv_netvsc: Fix unwanted rx_table reset - gtp: fix bad unlock balance in gtp_encap_enable_socket - macvlan: do not assume mac_header is set in macvlan_broadcast() - [arm64,armhf] net: dsa: mv88e6xxx: Preserve priority when setting CPU port. - [armhf] net: freescale: fec: Fix ethtool -d runtime PM - [arm64,armhf] net: stmmac: dwmac-sun8i: Allow all RGMII modes - [arm64,armhf] net: stmmac: dwmac-sunxi: Allow all RGMII modes - [arm64,armhf] net: stmmac: Fixed link does not need MDIO Bus - net: usb: lan78xx: fix possible skb leak - pkt_sched: fq: do not accept silly TCA_FQ_QUANTUM - sch_cake: avoid possible divide by zero in cake_enqueue() - sctp: free cmd->obj.chunk for the unprocessed SCTP_CMD_REPLY - tcp: fix "old stuff" D-SACK causing SACK to be treated as D-SACK - vxlan: fix tos value before xmit - net: sch_prio: When ungrafting, replace with FIFO - vlan: fix memory leak in vlan_dev_set_egress_priority - vlan: vlan_changelink() should propagate errors - [arm64,riscv64] macb: Don't unregister clks unconditionally - net/mlx5: Move devlink registration before interfaces load - [arm64,armhf] net: dsa: mv88e6xxx: force cmode write on 6141/6341 - net/mlx5e: Always print health reporter message to dmesg - net/mlx5: DR, No need for atomic refcount for internal SW steering resources - net/mlx5e: Fix hairpin RSS table size - net/mlx5: DR, Init lists that are used in rule's member - [arm64,armhf] usb: dwc3: gadget: Fix request complete check - USB: core: fix check for duplicate endpoints - USB: serial: option: add Telit ME910G1 0x110a composition - usb: missing parentheses in USE_NEW_SCHEME https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.12 - chardev: Avoid potential use-after-free in 'chrdev_open()' - i2c: fix bus recovery stop mode timing - [x86] powercap: intel_rapl: add NULL pointer check to rapl_mmio_cpu_online() - [arm64,armhf] usb: chipidea: host: Disable port power only if previously enabled - ALSA: usb-audio: Apply the sample rate quirk for Bose Companion 5 - ALSA: hda/realtek - Add new codec supported for ALCS1200A - ALSA: hda/realtek - Set EAPD control to default for ALC222 - ALSA: hda/realtek - Add quirk for the bass speaker on Lenovo Yoga X1 7th gen - tpm: Revert "tpm_tis: reserve chip for duration of tpm_tis_core_init" - tpm: Revert "tpm_tis_core: Set TPM_CHIP_FLAG_IRQ before probing for interrupts" - tpm: Revert "tpm_tis_core: Turn on the TPM before probing IRQ's" - tpm: Handle negative priv->response_len in tpm_common_read() - [arm64,armhf] rtc: sun6i: Add support for RTC clocks on R40 - kernel/trace: Fix do not unregister tracepoints when register sched_migrate_task fail - tracing: Have stack tracer compile when MCOUNT_INSN_SIZE is not defined - tracing: Change offset type to s32 in preempt/irq tracepoints - HID: Fix slab-out-of-bounds read in hid_field_extract - HID: uhid: Fix returning EPOLLOUT from uhid_char_poll - HID: hidraw: Fix returning EPOLLOUT from hidraw_poll - HID: hid-input: clear unmapped usages - Input: add safety guards to input_set_keycode() - [x86] drm/i915: Add Wa_1408615072 and Wa_1407596294 to icl,ehl - [arm64,armhf] drm/sun4i: tcon: Set RGB DCLK min. divider based on hardware model - drm/fb-helper: Round up bits_per_pixel if possible - drm/dp_mst: correct the shifting in DP_REMOTE_I2C_READ - [x86] drm/i915: Add Wa_1407352427:icl,ehl - [x86] drm/i915/gt: Mark up virtual engine uabi_instance - [amd64] IB/hfi1: Adjust flow PSN with the correct resync_psn - can: kvaser_usb: fix interface sanity check - can: gs_usb: gs_usb_probe(): use descriptors of current altsetting - gpiolib: acpi: Turn dmi_system_id table into a generic quirk table - gpiolib: acpi: Add honor_wakeup module-option + quirk mechanism - pstore/ram: Regularize prz label allocation lifetime - [x86] staging: vt6656: set usb_set_intfdata on driver fail. - [x86] staging: vt6656: Fix non zero logical return of, usb_control_msg - USB: serial: option: add ZLP support for 0x1bc7/0x9010 - [arm64,armhf] usb: musb: fix idling for suspend after disconnect interrupt - [arm64,armhf] usb: musb: Disable pullup at init - [arm64,armhf] usb: musb: dma: Correct parameter passed to IRQ handler - [x86] staging: comedi: adv_pci1710: fix AI channels 16-31 for PCI-1713 - [x86] staging: vt6656: correct return of vnt_init_registers. - [x86] staging: vt6656: limit reg output to block size - staging: rtl8188eu: Add device code for TP-Link TL-WN727N v5.21 - serdev: Don't claim unsupported ACPI serial devices - [amd64] iommu/vt-d: Fix adding non-PCI devices to Intel IOMMU - tty: link tty and port before configuring it as console - tty: always relink the port - [arm64] Move __ARCH_WANT_SYS_CLONE3 definition to uapi headers - [arm64] Implement copy_thread_tls - [arm*] Implement copy_thread_tls - [hppa/parisc] Implement copy_thread_tls - [riscv64] Implement copy_thread_tls - clone3: ensure copy_thread_tls is implemented - um: Implement copy_thread_tls - [x86] staging: vt6656: remove bool from vnt_radio_power_on ret - mwifiex: fix possible heap overflow in mwifiex_process_country_ie() (CVE-2019-14895) - mwifiex: pcie: Fix memory leak in mwifiex_pcie_alloc_cmdrsp_buf (CVE-2019-19056) - rpmsg: char: release allocated memory (CVE-2019-19053) - scsi: bfa: release allocated memory in case of error (CVE-2019-19066) - rtl8xxxu: prevent leaking urb (CVE-2019-19068) - ath10k: fix memory leak (CVE-2019-19078) - HID: hiddev: fix mess in hiddev_open() - USB: Fix: Don't skip endpoint descriptors with maxpacket=0 - netfilter: arp_tables: init netns pointer in xt_tgchk_param struct - netfilter: conntrack: dccp, sctp: handle null timeout argument - netfilter: ipset: avoid null deref when IPSET_ATTR_LINENO is present - [x86] drm/i915/gen9: Clear residual context state on context switch (CVE-2019-14615) https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.13 - HID: hidraw, uhid: Always report EPOLLOUT - [amd64] IB/hfi1: Don't cancel unused work item - [armhf] mtd: rawnand: stm32_fmc2: avoid to lock the CPU bus - [arm*] 2c: bcm2835: Store pointer to bus clock - ASoC: soc-core: Set dpcm_playback / dpcm_capture - [armhf] ASoC: stm32: spdifrx: fix inconsistent lock state - [armhf] ASoC: stm32: spdifrx: fix race condition in irq handler - [armhf] ASoC: stm32: spdifrx: fix input pin state management - netfilter: nft_flow_offload: fix underflow in flowtable reference counter - [armhf] mtd: onenand: omap2: Pass correct flags for prep_dma_memcpy - [arm64] gpio: zynq: Fix for bug in zynq_gpio_restore_context API - [arm64,armhf] pinctrl: meson: Fix wrong shift value when get drive-strength - [amd64] iommu/vt-d: Unlink device if failed to add to group - iommu: Remove device link to group on failure - bpf: cgroup: prevent out-of-order release of cgroup bpf - fs: move guard_bio_eod() after bio_set_op_attrs - scsi: mpt3sas: Fix double free in attach error handling - gpio: Fix error message on out-of-range GPIO in lookup table - [arm64,armhf] PM / devfreq: tegra: Add COMMON_CLK dependency - [arm64,armhf] drm/tegra: Fix ordering of cleanup code - [s390x] qeth: fix qdio teardown after early init error - [s390x] qeth: fix false reporting of VNIC CHAR config failure - [s390x] qeth: Fix vnicc_is_in_use if rx_bcast not set - [s390x] qeth: vnicc Fix init to default - [s390x] qeth: fix initialization on old HW - scsi: smartpqi: Update attribute name to `driver_version` - afs: Fix missing cell comparison in afs_test_super() - [x86] syscalls/x86: Wire up COMPAT_SYSCALL_DEFINE0 - [x86] syscalls/x86: Use COMPAT_SYSCALL_DEFINE0 for IA32 (rt_)sigreturn - [x86] syscalls/x86: Use the correct function type for sys_ni_syscall - [x86] syscalls/x86: Fix function types in COND_SYSCALL - btrfs: simplify inode locking for RWF_NOWAIT - netfilter: nf_tables_offload: release flow_rule on error from commit path - netfilter: nft_meta: use 64-bit time arithmetic - [arm64] RDMA/hns: Prevent undefined behavior in hns_roce_set_user_sq_size() - [arm64] RDMA/hns: remove a redundant le16_to_cpu - [arm64] RDMA/hns: Modify return value of restrack functions - RDMA/counter: Prevent QP counter manual binding in auto mode - [arm64] RDMA/hns: Release qp resources when failed to destroy qp - xprtrdma: Add unique trace points for posting Local Invalidate WRs - xprtrdma: Connection becomes unstable after a reconnect - xprtrdma: Fix MR list handling - xprtrdma: Close window between waking RPC senders and posting Receives - [arm64] RDMA/hns: Fix to support 64K page for srq - [arm64] RDMA/hns: Bugfix for qpc/cqc timer configuration - RDMA/mlx5: Return proper error value - RDMA/srpt: Report the SCSI residual to the initiator - uaccess: Add non-pagefault user-space write function - bpf: Make use of probe_user_write in probe write helper - bpf: skmsg, fix potential psock NULL pointer dereference - libbpf: Fix Makefile' libbpf symbol mismatch diagnostic - afs: Fix use-after-loss-of-ref - afs: Fix afs_lookup() to not clobber the version on a new dentry - keys: Fix request_key() cache - scsi: enclosure: Fix stale device oops with hot replug - scsi: sd: Clear sdkp->protection_type if disk is reformatted without PI - [x86] platform/x86: asus-wmi: Fix keyboard brightness cannot be set to 0 - [x86] platform/x86: GPD pocket fan: Use default values when wrong modparams are given - Documentation/ABI: Fix documentation inconsistency for mlxreg-io sysfs interfaces - Documentation/ABI: Add missed attribute for mlxreg-io sysfs interfaces - xprtrdma: Fix create_qp crash on device unload - xprtrdma: Fix completion wait during device removal - xprtrdma: Fix oops in Receive handler after device removal - dm: add dm-clone to the documentation index - scsi: ufs: Give an unique ID to each ufs-bsg - [arm64] crypto: cavium/nitrox - fix firmware assignment to AE cores - crypto: virtio - implement missing support for output IVs - crypto: algif_skcipher - Use chunksize instead of blocksize - [i386] crypto: geode-aes - convert to skcipher API and make thread-safe - NFSv2: Fix a typo in encode_sattr() - nfsd: Fix cld_net->cn_tfm initialization - nfsd: v4 support requires CRYPTO_SHA256 - NFSv4.x: Handle bad/dead sessions correctly in nfs41_sequence_process() - NFSv4.x: Drop the slot if nfs4_delegreturn_prepare waits for layoutreturn - mei: fix modalias documentation - [armhf] clk: samsung: exynos5420: Preserve CPU clocks configuration during suspend/resume - clk: Fix memory leak in clk_unregister() - [arm64,armhf] dmaengine: dw: platform: Mark 'hclk' clock optional - [armhf] clk: imx: pll14xx: Fix quick switch of S/K parameter - rsi: fix potential null dereference in rsi_probe() - affs: fix a memory leak in affs_remount - [armhf] pinctl: ti: iodelay: fix error checking on pinctrl_count_index_with_args call - [x86] pinctrl: lewisburg: Update pin list according to v1.1v6 - PCI: pciehp: Do not disable interrupt twice on suspend - Revert "drm/virtio: switch virtio_gpu_wait_ioctl() to gem helper." - drm/amdgpu: cleanup creating BOs at fixed location - drm/amdgpu/discovery: reserve discovery data at the top of VRAM - scsi: sd: enable compat ioctls for sed-opal - gfs2: add compat_ioctl support - af_unix: add compat_ioctl support - compat_ioctl: handle SIOCOUTQNSD - [arm64] PCI: aardvark: Use LTSSM state to build link training flag - [arm64] PCI: aardvark: Fix PCI_EXP_RTCTL register configuration - [arm64,armhf] PCI: dwc: Fix find_next_bit() usage - PCI: Fix missing bridge dma_ranges resource list cleanup - PCI/PM: Clear PCIe PME Status even for legacy power management - PCI/PTM: Remove spurious "d" from granularity message - [powerpc*] powernv: Disable native PCIe port management - [mips64el,mipsel] Loongson: Fix return value of loongson_hwmon_init - [armhf] tty: serial: imx: use the sg count from dma_map_sg - [i386] tty: serial: pch_uart: correct usage of dma_unmap_sg - ARM: 8943/1: Fix topology setup in case of CPU hotplug for CONFIG_SCHED_MC - Revert "ubifs: Fix memory leak bug in alloc_ubifs_info() error path" - ubifs: Fixed missed le64_to_cpu() in journal - ubifs: do_kill_orphans: Fix a memory leak bug - mtd: spi-nor: fix silent truncation in spi_nor_read() - mtd: spi-nor: fix silent truncation in spi_nor_read_raw() - [arm64,armhf] spi: pxa2xx: Set controller->max_transfer_size in dma mode - iwlwifi: mvm: consider ieee80211 station max amsdu value - rtlwifi: Remove unnecessary NULL check in rtl_regd_init - iwlwifi: mvm: fix support for single antenna diversity - sch_cake: Add missing NLA policy entry TCA_CAKE_SPLIT_GSO - f2fs: fix potential overflow - NFSD fixing possible null pointer derefering in copy offload - scsi: libcxgbi: fix NULL pointer dereference in cxgbi_device_destroy() - scsi: target/iblock: Fix protection error with blocks greater than 512B - [riscv64] export flush_icache_all to modules - [mips64el,mipsel] cacheinfo: report shared CPU map - [mips64el,mipsel] Fix gettimeofday() in the vdso library - tomoyo: Suppress RCU warning at list_for_each_entry_rcu(). - [arm64] drm/arm/mali: make malidp_mw_connector_helper_funcs static - rxrpc: Unlock new call in rxrpc_new_incoming_call() rather than the caller - rxrpc: Don't take call->user_mutex in rxrpc_new_incoming_call() - rxrpc: Fix missing security check on incoming calls - [arm64] dmaengine: k3dma: Avoid null pointer traversal - [s390x] qeth: lock the card while changing its hsuid - [amd64] ioat: ioat_alloc_ring() failure handling. - drm/amdgpu: enable gfxoff for raven1 refresh - ocfs2: call journal flush to mark journal as empty after journal recovery when mount [ Salvatore Bonaccorso ] * signing_templates/rules.real: Include modules.builtin.modinfo file in image (Closes: #948427) * [rt] Drop "lib/ubsan: Don't seralize UBSAN report" * nvme: Ignore ABI changes * Drop "ARM: dts: bcm283x: Fix critical trip point" * Drop "tracing: Do not create directories if lockdown is in affect" * Drop "libtraceevent: Fix lib installation with O=" * Drop "libtraceevent: Copy pkg-config file to output folder when using O=" * Refresh "libbpf: fix readelf output parsing on powerpc with recent binutils" * Refresh "x86: Make x32 syscall support conditional on a kernel parameter" * Bump ABI to 3. [ Ben Hutchings ] * f2fs: Fix crypto softdep: it uses crc32, not crc32c -- Salvatore Bonaccorso Sun, 19 Jan 2020 10:22:58 +0100 linux (5.4.8-1) unstable; urgency=medium * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.7 - af_packet: set defaule value for tmo - [amd64] fjes: fix missed check in fjes_acpi_add - mod_devicetable: fix PHY module format - net: dst: Force 4-byte alignment of dst_metrics - [arm64] net: hisilicon: Fix a BUG trigered by wrong bytes_compl - net: phy: ensure that phy IDs are correctly typed - net: qlogic: Fix error paths in ql_alloc_large_buffers() - net-sysfs: Call dev_hold always in rx_queue_add_kobject - net: usb: lan78xx: Fix suspend/resume PHY register access error - [arm64,armhf] nfp: flower: fix stats id allocation - qede: Disable hardware gro when xdp prog is installed - qede: Fix multicast mac configuration - sctp: fix memleak on err handling of stream initialization - sctp: fully initialize v4 addr in some functions - neighbour: remove neigh_cleanup() method - bonding: fix bond_neigh_init() - net: ena: fix default tx interrupt moderation interval - net: ena: fix issues in setting interrupt moderation params in ethtool - [armhf] net: ethernet: ti: davinci_cpdma: fix warning "device driver frees DMA memory with different size" - [arm64,armhf] net: stmmac: platform: Fix MDIO init for platforms without PHY - [armhf] net: dsa: b53: Fix egress flooding settings - btrfs: don't double lock the subvol_sem for rename exchange - btrfs: do not call synchronize_srcu() in inode_tree_del - Btrfs: make tree checker detect checksum items with overlapping ranges - btrfs: return error pointer from alloc_test_extent_buffer - Btrfs: fix missing data checksums after replaying a log tree - btrfs: send: remove WARN_ON for readonly mount - btrfs: abort transaction after failed inode updates in create_subvol - btrfs: skip log replay on orphaned roots - btrfs: do not leak reloc root if we fail to read the fs root - btrfs: handle ENOENT in btrfs_uuid_tree_iterate - Btrfs: fix removal logic of the tree mod log that leads to use-after-free issues - ALSA: pcm: Avoid possible info leaks from PCM stream buffers - ALSA: hda/ca0132 - Keep power on during processing DSP response - ALSA: hda/ca0132 - Avoid endless loop - ALSA: hda/ca0132 - Fix work handling in delayed HP detection - [arm*] drm/vc4/vc4_hdmi: fill in connector info - drm/virtio: switch virtio_gpu_wait_ioctl() to gem helper. - drm: mst: Fix query_payload ack reply struct - [arm64,armhf] drm/panel: Add missing drm_panel_init() in panel drivers - [armhf] drm: exynos: exynos_hdmi: use cec_notifier_conn_(un)register - drm: Use EOPNOTSUPP, not ENOTSUPP - drm/amdgpu/sriov: add ring_stop before ring_create in psp v11 code - drm/amdgpu: grab the id mgr lock while accessing passid_mapping - drm/ttm: return -EBUSY on pipelining with no_gpu_wait (v2) - ath10k: add cleanup in ath10k_sta_state() - ath10k: Check if station exists before forwarding tx airtime report - spi: Add call to spi_slave_abort() function when spidev driver is released - [arm64] drm/meson: vclk: use the correct G12A frac max value - [x86] staging: rtl8192u: fix multiple memory leaks on error path - staging: rtl8188eu: fix possible null dereference - rtlwifi: prevent memory leak in rtl_usb_probe (CVE-2019-19063) - libertas: fix a potential NULL pointer dereference - ath10k: fix backtrace on coredump - IB/iser: bound protection_sg size by data_sg size - [armhf] spi: gpio: prevent memory leak in spi_gpio_probe - media: max2175: Fix build error without CONFIG_REGMAP_I2C - [arm64] media: venus: core: Fix msm8996 frequency table - ath10k: fix offchannel tx failure when no ath10k_mac_tx_frm_has_freq - pinctrl: devicetree: Avoid taking direct reference to device name string - [armhf] drm/sun4i: dsi: Fix TCON DRQ set bits - [arm64] media: venus: Fix occasionally failures to suspend - rtw88: fix NSS of hw_cap - [armhf] hwrng: omap3-rom - Call clk_disable_unprepare() on exit only if not idled - media: flexcop-usb: fix NULL-ptr deref in flexcop_usb_transfer_init() - [arm64,armhf] drm/bridge: dw-hdmi: Refuse DDC/CI transfers on the internal I2C controller - mwifiex: pcie: Fix memory leak in mwifiex_pcie_init_evt_ring (CVE-2019-19057) - drm/drm_vblank: Change EINVAL by the correct errno - libbpf: Fix struct end padding in btf_dump - libbpf: Fix passing uninitialized bytes to setsockopt - net/smc: increase device refcount for added link group - team: call RCU read lock when walking the port_list - media: cx88: Fix some error handling path in 'cx8800_initdev()' - [arm64] crypto: inside-secure - Fix a maybe-uninitialized warning - [arm64] crypto: aegis128/simd - build 32-bit ARM for v8 architecture explicitly - [x86] ASoC: SOF: enable sync_write in hdac_bus - [armhf] media: ti-vpe: vpe: Fix Motion Vector vpdma stride - [armhf] media: ti-vpe: vpe: fix a v4l2-compliance warning about invalid pixel format - [armhf] media: ti-vpe: vpe: fix a v4l2-compliance failure about frame sequence number - [armhf] media: ti-vpe: vpe: Make sure YUYV is set as default format - [armhf] media: ti-vpe: vpe: fix a v4l2-compliance failure causing a kernel panic - [armhf] media: ti-vpe: vpe: ensure buffers are cleaned up properly in abort cases - [armhf] media: ti-vpe: vpe: fix a v4l2-compliance failure about invalid sizeimage - [x86] syscalls/x86: Use the correct function type in SYSCALL_DEFINE0 - [x86] mm: Use the correct function type for native_set_fixmap() - ath10k: Correct error handling of dma_map_single() - rtw88: coex: Set 4 slot mode for A2DP - [arm64,armhf] drm/bridge: dw-hdmi: Restore audio when setting a mode - perf vendor events arm64: Fix Hisi hip08 DDRC PMU eventname - usb: usbfs: Suppress problematic bind and unbind uevents. - Bluetooth: btusb: avoid unused function warning - Bluetooth: missed cpu_to_le16 conversion in hci_init4_req - Bluetooth: Workaround directed advertising bug in Broadcom controllers - Bluetooth: hci_core: fix init for HCI_USER_CHANNEL - bpf/stackmap: Fix deadlock with rq_lock in bpf_get_stack() - [x86] mce: Lower throttling MCE messages' priority to warning - [arm64] net: hns3: log and clear hardware error after reset complete - [arm64] RDMA/hns: Fix wrong parameters when initial mtt of srq->idx_que - [x86] drm/gma500: fix memory disclosures due to uninitialized bytes - ASoC: soc-pcm: fixup dpcm_prune_paths() loop continue - rtl8xxxu: fix RTL8723BU connection failure issue after warm reboot - ipmi: Don't allow device module unload when in use - [x86] ioapic: Prevent inconsistent state when moving an interrupt - media: cedrus: Fix undefined shift with a SHIFT_AND_MASK_BITS macro - drm/nouveau: Don't grab runtime PM refs for HPD IRQs - md: no longer compare spare disk superblock events in super_load - md/bitmap: avoid race window between md_bitmap_resize and bitmap_file_clear_bit - drm: Don't free jobs in wait_event_interruptible() - EDAC/amd64: Set grain per DIMM - [arm64] psci: Reduce the waiting time for cpu_psci_cpu_kill() - i40e: initialize ITRN registers with correct values - i40e: Wrong 'Advertised FEC modes' after set FEC to AUTO - net: phy: dp83867: enable robust auto-mdix - [arm64,armhf] drm/tegra: sor: Use correct SOR index on Tegra210 - regulator: core: Release coupled_rdevs on regulator_init_coupling() error - ubsan, x86: Annotate and allow __ubsan_handle_shift_out_of_bounds() in uaccess regions - ACPI: button: Add DMI quirk for Medion Akoya E2215T - RDMA/qedr: Fix memory leak in user qp and mr - [arm64] RDMA/hns: Fix memory leak on 'context' on error return path - RDMA/qedr: Fix srqs xarray initialization - RDMA/core: Set DMA parameters correctly - [arm64,armhf] gpu: host1x: Allocate gather copy for host1x - [arm64,armhf] net: dsa: LAN9303: select REGMAP when LAN9303 enable - [arm64] phy: qcom-usb-hs: Fix extcon double register after power cycle - [s390x] time: ensure get_clock_monotonic() returns monotonic values - [s390x] add error handling to perf_callchain_kernel - [s390x] mm: add mm_pxd_folded() checks to pxd_free() - [arm64] net: hns3: add struct netdev_queue debug info for TX timeout - libata: Ensure ata_port probe has completed before detach - loop: fix no-unmap write-zeroes request behavior - [arm64,armhf] net/mlx5e: Verify that rule has at least one fwd/drop action - ALSA: bebob: expand sleep just after breaking connections for protocol version 1 - libbpf: Fix error handling in bpf_map__reuse_fd() - Bluetooth: Fix advertising duplicated flags - ALSA: pcm: Fix missing check of the new non-cached buffer type - [riscv64] spi: sifive: disable clk when probe fails and remove - pinctrl: amd: fix __iomem annotation in amd_gpio_irq_handler() - ixgbe: protect TX timestamping from API misuse - media: rcar_drif: fix a memory disclosure (CVE-2019-18786) - media: v4l2-core: fix touch support in v4l_g_fmt - nvme: introduce "Command Aborted By host" status code - nvmem: core: fix nvmem_cell_write inline function - ASoC: SOF: topology: set trigger order for FE DAI link - media: vivid: media_device_cleanup was called too early - bnx2x: Fix PF-VF communication over multi-cos queues. - ALSA: timer: Limit max amount of slave instances - RDMA/core: Fix return code when modify_port isn't supported - [arm64] drm: msm: a6xx: fix debug bus register configuration - rtlwifi: fix memory leak in rtl92c_set_fw_rsvdpagepkt() - perf probe: Fix to find range-only function instance - perf cs-etm: Fix definition of macro TO_CS_QUEUE_NR - perf probe: Fix to list probe event with correct line number - perf jevents: Fix resource leak in process_mapfile() and main() - perf probe: Walk function lines in lexical blocks - perf probe: Fix to probe an inline function which has no entry pc - perf probe: Fix to show ranges of variables in functions without entry_pc - perf probe: Fix to show inlined function callsite without entry_pc - perf probe: Fix to probe a function which has no entry pc - perf tools: Fix cross compile for ARM64 - perf tools: Splice events onto evlist even on error - ice: Check for null pointer dereference when setting rings - perf parse: If pmu configuration fails free terms - perf probe: Skip overlapped location on searching variables - net: avoid potential false sharing in neighbor related code - perf probe: Return a better scope DIE if there is no best scope - perf probe: Fix to show calling lines of inlined functions - perf probe: Skip end-of-sequence and non statement lines - perf probe: Filter out instances except for inlined subroutine and subprogram - libbpf: Fix negative FD close() in xsk_setup_xdp_prog() - [s390x] bpf: Use kvcalloc for addrs array - cgroup: freezer: don't change task and cgroups status unnecessarily - ath10k: fix get invalid tx rate for Mesh metric - media: pvrusb2: Fix oops on tear-down when radio support is not present - ice: delay less - media: cedrus: Use helpers to access capture queue - [arm64,armhf] spi: pxa2xx: Add missed security checks - ASoC: rt5677: Mark reg RT5677_PWR_ANLG2 as volatile - iio: dac: ad5446: Add support for new AD5600 DAC - [x86] ASoC: Intel: kbl_rt5663_rt5514_max98927: Add dmic format constraint - r8169: respect EEE user setting when restarting network - [s390x] disassembler: don't hide instruction addresses - [armhf] net: ethernet: ti: Add dependency for TI_DAVINCI_EMAC - nvme: Discard workaround for non-conformant devices - parport: load lowlevel driver if ports not found - bcache: fix static checker warning in bcache_device_free() - cpufreq: Register drivers only after CPU devices have been registered - [x86] crash: Add a forward declaration of struct kimage - tracing: use kvcalloc for tgid_map array allocation - tracing/kprobe: Check whether the non-suffixed symbol is notrace - bcache: fix deadlock in bcache_allocator - iwlwifi: mvm: fix unaligned read of rx_pkt_status - regulator: core: Let boot-on regulators be powered off - [arm64] spi: tegra20-slink: add missed clk_unprepare - tun: fix data-race in gro_normal_list() - xhci-pci: Allow host runtime PM as default also for Intel Ice Lake xHCI - crypto: virtio - deal with unsupported input sizes - btrfs: don't prematurely free work in end_workqueue_fn() - btrfs: don't prematurely free work in run_ordered_work() - sched/uclamp: Fix overzealous type replacement - perf/core: Fix the mlock accounting, again - bnxt_en: Return proper error code for non-existent NVM variable - net: phy: avoid matching all-ones clause 45 PHY IDs - [x86] ASoC: Intel: bytcr_rt5640: Update quirk for Acer Switch 10 SW5-012 2-in-1 - [x86] insn: Add some Intel instructions to the opcode map - brcmfmac: remove monitor interface when detaching - perf session: Fix decompression of PERF_RECORD_COMPRESSED records - perf probe: Fix to show function entry line as probe-able - [s390x] crypto: Fix unsigned variable compared with zero - [s390x] kasan: support memcpy_real with TRACE_IRQFLAGS - bnxt_en: Improve RX buffer error handling. - iwlwifi: check kasprintf() return value - ASoC: soc-pcm: check symmetry before hw_params - [armhf] net: ethernet: ti: ale: clean ale tbl on init and intf restart - [s390x] cpumf: Adjust registration of s390 PMU device drivers - [armhf] crypto: sun4i-ss - Fix 64-bit size_t warnings - [armhf] crypto: sun4i-ss - Fix 64-bit size_t warnings on sun4i-ss-hash.c - mac80211: consider QoS Null frames for STA_NULLFUNC_ACKED - libtraceevent: Fix memory leakage in copy_filter_type - ice: Only disable VF state when freeing each VF resources - ice: Fix setting coalesce to handle DCB configuration - net: phy: initialise phydev speed and duplex sanely - tools, bpf: Fix build for 'make -s tools/bpf O=' - bpf: Provide better register bounds after jmp32 instructions - net: wireless: intel: iwlwifi: fix GRO_NORMAL packet stalling - btrfs: don't prematurely free work in reada_start_machine_worker() - btrfs: don't prematurely free work in scrub_missing_raid56_worker() - Revert "mmc: sdhci: Fix incorrect switch to HS mode" - tpm_tis: reserve chip for duration of tpm_tis_core_init - tpm: fix invalid locking in NONBLOCKING mode - iommu: fix KASAN use-after-free in iommu_insert_resv_region - iommu: set group default domain before creating direct mappings - iommu/vt-d: Fix dmar pte read access not set error - iommu/vt-d: Set ISA bridge reserved region as relaxable - iommu/vt-d: Allocate reserved region for ISA with correct permission - [armhf] can: flexcan: fix possible deadlock and out-of-order reception after wakeup - [armhf] can: flexcan: poll MCR_LPM_ACK instead of GPR ACK for stop mode acknowledgment - can: kvaser_usb: kvaser_usb_leaf: Fix some info-leaks to USB devices (CVE-2019-19947) - usb: xhci: Fix build warning seen with CONFIG_PM=n - ath10k: Revert "ath10k: add cleanup in ath10k_sta_state()" - md: avoid invalid memory access for array sb->dev_roles - [s390x] ftrace: fix endless recursion in function_graph tracer - [armhf] can: flexcan: add low power enter/exit acknowledgment helper - usbip: Fix receive error in vhci-hcd when using scatter-gather - usbip: Fix error path of vhci_recv_ret_submit() - cpufreq: Avoid leaving stale IRQ work items during CPU offline - mm: vmscan: protect shrinker idr replace with CONFIG_MEMCG - [x86] intel_th: pci: Add Comet Lake PCH-V support - [x86] intel_th: pci: Add Elkhart Lake SOC support - [x86] intel_th: Fix freeing IRQs - [x86] intel_th: msu: Fix window switching without windows - [x86] platform/x86: hp-wmi: Make buffer for HPWMI_FEATURE2_QUERY 128 bytes - [x86] staging: comedi: gsc_hpdi: check dma_alloc_coherent() return value - [x86] pinctrl: baytrail: Really serialize all register accesses - ext4: fix ext4_empty_dir() for directories with holes (CVE-2019-19037) - ext4: check for directory entries too close to block end - ext4: unlock on error in ext4_expand_extra_isize() - ext4: validate the debug_want_extra_isize mount option at parse time - [powerpc*] KVM: PPC: Book3S HV: Fix regression on big endian hosts - [x86] kvm: x86: Host feature SSBD doesn't imply guest feature SPEC_CTRL_SSBD - [x86] kvm: x86: Host feature SSBD doesn't imply guest feature AMD_SSBD - [arm64,armhf] KVM: arm/arm64: Properly handle faulting of device mappings - [arm64] KVM: arm64: Ensure 'params' is initialised when looking up sys register - [x86] intel: Disable HPET on Intel Coffee Lake H platforms - [x86] MCE/AMD: Do not use rdmsr_safe_on_cpu() in smca_configure() - [x86] MCE/AMD: Allow Reserved types to be overwritten in smca_banks[] - [x86] mce: Fix possibly incorrect severity calculation on AMD - [powerpc*] irq: fix stack overflow verification - [powerpc*] ocxl: Fix concurrent AFU open and device removal - [arm64] mmc: sdhci-msm: Correct the offset and value for DDR_CONFIG register - mmc: sdhci: Update the tuning failed messages to pr_debug level - mmc: sdhci: Workaround broken command queuing on Intel GLK - mmc: sdhci: Add a quirk for broken command queuing - nbd: fix shutdown and recv work deadlock v2 - iwlwifi: pcie: move power gating workaround earlier in the flow https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.8 - Revert "MIPS: futex: Restore \n after sync instructions" - Revert "MIPS: futex: Emit Loongson3 sync workarounds within asm" - scsi: lpfc: Fix spinlock_irq issues in lpfc_els_flush_cmd() - scsi: lpfc: Fix discovery failures when target device connectivity bounces - scsi: mpt3sas: Fix clear pending bit in ioctl status - scsi: lpfc: Fix locking on mailbox command completion - scsi: mpt3sas: Reject NVMe Encap cmnds to unsupported HBA - [armhf] gpio: mxc: Only get the second IRQ when there is more than one IRQ - scsi: lpfc: Fix list corruption in lpfc_sli_get_iocbq - Input: atmel_mxt_ts - disable IRQ across suspend - f2fs: fix to update time in lazytime mode - [x86] platform/x86: peaq-wmi: switch to using polled mode of input devices - [arm64,armhf] iommu: rockchip: Free domain on .domain_free - [arm64,armhf] iommu/tegra-smmu: Fix page tables in > 4 GiB memory - scsi: target: compare full CHAP_A Algorithm strings - scsi: lpfc: Fix hardlockup in lpfc_abort_handler - scsi: lpfc: Fix SLI3 hba in loop mode not discovering devices - scsi: csiostor: Don't enable IRQs too early - [arm64] scsi: hisi_sas: Replace in_softirq() check in hisi_sas_task_exec() - [arm64] scsi: hisi_sas: Delete the debugfs folder of hisi_sas when the probe fails - [powerpc*] pseries: Mark accumulate_stolen_time() as notrace - [powerpc*] pseries: Don't fail hash page table insert for bolted mapping - dma-mapping: Add vmap checks to dma_map_single() - dma-mapping: fix handling of dma-ranges for reserved memory (again) - clocksource/drivers/timer-of: Use unique device name instead of timer - [powerpc*] security/book3s64: Report L1TF status in sysfs - [powerpc*] book3s64/hash: Add cond_resched to avoid soft lockup warning - ext4: update direct I/O read lock pattern for IOCB_NOWAIT - ext4: iomap that extends beyond EOF should be marked dirty - jbd2: Fix statistics for the number of logged blocks - scsi: tracing: Fix handling of TRANSFER LENGTH == 0 for READ(6) and WRITE(6) - scsi: lpfc: Fix unexpected error messages during RSCN handling - scsi: lpfc: Fix duplicate unreg_rpi error in port offline flow - f2fs: fix to update dir's i_pino during cross_rename - [arm64] clk: qcom: smd: Add missing pnoc clock - [arm64] clk: qcom: Allow constant ratio freq tables for rcg - clk: clk-gpio: propagate rate change to parent - dma-direct: check for overflows on 32 bit DMA addresses - fs/quota: handle overflows of sysctl fs.quota.* and report as unsigned long - [arm64] iommu/arm-smmu-v3: Don't display an error when IRQ lines are missing - [armhf] i2c: stm32f7: fix & reorder remove & probe error handling - iomap: fix return value of iomap_dio_bio_actor on 32bit systems - scsi: lpfc: fix: Coverity: lpfc_cmpl_els_rsp(): Null pointer dereferences - [m68k] scsi: zorro_esp: Limit DMA transfers to 65536 bytes (except on Fastlane) - [powerpc*] PCI: rpaphp: Fix up pointer to first drc-info entry - scsi: ufs: fix potential bug which ends in system hang - [powerpc*] PCI: rpaphp: Don't rely on firmware feature to imply drc-info support - [powerpc*] PCI: rpaphp: Annotate and correctly byte swap DRC properties - [powerpc*] PCI: rpaphp: Correctly match ibm, my-drc-index to drc-name when using drc-info - [powerpc*] security: Fix wrong message when RFI Flush is disable - [powerpc*] eeh: differentiate duplicate detection message - [powerpc*] book3s/mm: Update Oops message to print the correct translation in use - bcache: at least try to shrink 1 node in bch_mca_scan() - HID: quirks: Add quirk for HP MSU1465 PIXART OEM mouse - HID: logitech-hidpp: Silence intermittent get_battery_capacity errors - HID: i2c-hid: fix no irq after reset on raydium 3118 - [armhf] 8937/1: spectre-v2: remove Brahma-B53 from hardening - libnvdimm/btt: fix variable 'rc' set but not used - HID: Improve Windows Precision Touchpad detection. - HID: rmi: Check that the RMI_STARTED bit is set before unregistering the RMI transport device - watchdog: prevent deferral of watchdogd wakeup on RT - watchdog: Fix the race between the release of watchdog_core_data and cdev - scsi: pm80xx: Fix for SATA device discovery - scsi: ufs: Fix error handing during hibern8 enter - scsi: scsi_debug: num_tgts must be >= 0 - scsi: target: core: Release SPC-2 reservations when closing a session - scsi: ufs: Fix up auto hibern8 enablement - scsi: iscsi: Don't send data to unbound connection - scsi: target: iscsi: Wait for all commands to finish before freeing a session - f2fs: Fix deadlock in f2fs_gc() context during atomic files handling - [x86] Drivers: hv: vmbus: Fix crash handler reset of Hyper-V synic - apparmor: fix unsigned len comparison with less than zero - drm/amdgpu: Call find_vma under mmap_sem - cifs: Fix use-after-free bug in cifs_reconnect() - io_uring: io_allocate_scq_urings() should return a sane state - cdrom: respect device capabilities during opening action - cifs: move cifsFileInfo_put logic into a work-queue - perf diff: Use llabs() with 64-bit values - perf script: Fix brstackinsn for AUXTRACE - perf regs: Make perf_reg_name() return "unknown" instead of NULL - [s390x] zcrypt: handle new reply code FILTERED_BY_HYPERVISOR - [s390x] unwind: filter out unreliable bogus %r14 - [s390x] cpum_sf: Check for SDBT and SDB consistency - ocfs2: fix passing zero to 'PTR_ERR' warning - [s390x] disable preemption when switching to nodat stack with CALL_ON_STACK - mm/hugetlbfs: fix error handling when setting up mounts - kernel: sysctl: make drop_caches write-only - userfaultfd: require CAP_SYS_PTRACE for UFFD_FEATURE_EVENT_FORK - sctp: fix err handling of stream initialization - md: make sure desc_nr less than MD_SB_DISKS - Revert "iwlwifi: assign directly to iwl_trans->cfg in QuZ detection" - netfilter: ebtables: compat: reject all padding in matches/watchers - 6pack,mkiss: fix possible deadlock - [powerpc*] Fix __clear_user() with KUAP enabled - net/smc: add fallback check to connect() - netfilter: bridge: make sure to pull arp header in br_nf_forward_arp() - inetpeer: fix data-race in inet_putpeer / inet_putpeer - net: add a READ_ONCE() in skb_peek_tail() - net: icmp: fix data-race in cmp_global_allow() - hrtimer: Annotate lockless access to timer->state - tomoyo: Don't use nifty names on sockets. - uaccess: disallow > INT_MAX copy sizes - drm: limit to INT_MAX in create_blob ioctl - xfs: fix mount failure crash on invalid iclog memory access - cxgb4/cxgb4vf: fix flow control display for auto negotiation - [armhf] net: dsa: bcm_sf2: Fix IP fragment location and behavior - net/mlxfw: Fix out-of-memory error in mfa2 flash burning - net: phy: aquantia: add suspend / resume ops for AQR105 - net/sched: act_mirred: Pull mac prior redir to non mac_header_xmit device - net/sched: add delete_empty() to filters and use it in cls_flower - net_sched: sch_fq: properly set sk->sk_pacing_status - [arm64,armhf] net: stmmac: dwmac-meson8b: Fix the RGMII TX delay on Meson8b/8m2 SoCs - ptp: fix the race between the release of ptp_clock and cdev - tcp: Fix highest_sack and highest_sack_seq - udp: fix integer overflow while computing available space in sk_rcvbuf - bnxt_en: Fix MSIX request logic for RDMA driver. - bnxt_en: Free context memory in the open path if firmware has been reset. - bnxt_en: Return error if FW returns more data than dump length - bnxt_en: Fix bp->fw_health allocation and free logic. - bnxt_en: Remove unnecessary NULL checks for fw_health - bnxt_en: Fix the logic that creates the health reporters. - bnxt_en: Add missing devlink health reporters for VFs. - net: add bool confirm_neigh parameter for dst_ops.update_pmtu - ip6_gre: do not confirm neighbor when do pmtu update - gtp: do not confirm neighbor when do pmtu update - net/dst: add new function skb_dst_update_pmtu_no_confirm - tunnel: do not confirm neighbor when do pmtu update - vti: do not confirm neighbor when do pmtu update - sit: do not confirm neighbor when do pmtu update - net/dst: do not confirm neighbor for vxlan and geneve pmtu update - [arm64,armhf] net: marvell: mvpp2: phylink requires the link interrupt - gtp: fix wrong condition in gtp_genl_dump_pdp() - gtp: avoid zero size hashtable - bonding: fix active-backup transition after link failure - tcp: do not send empty skb from tcp_write_xmit() - tcp/dccp: fix possible race __inet_lookup_established() - [x86] hv_netvsc: Fix tx_table init in rndis_set_subchannel() - gtp: fix an use-after-free in ipv4_pdp_find() - gtp: do not allow adding duplicate tid and ms_addr pdp context - bnxt: apply computed clamp value for coalece parameter - ipv6/addrconf: only check invalid header values when NETLINK_F_STRICT_CHK is set - [arm64,armhf] net: phylink: fix interface passed to mac_link_up - net: ena: fix napi handler misbehavior when the napi budget is zero - vhost/vsock: accept only packets with the right dst_cid - mm/hugetlbfs: fix for_each_hstate() loop in init_hugetlbfs_fs() [ Salvatore Bonaccorso ] * debian/lib/python/debian_linux/abi.py: Add one missing string replacement. * debian/lib/python/debian_linux/abi.py: strip whitespace characters in line. * [rt] Refresh lib-ubsan-Don-t-seralize-UBSAN-report.patch for context changes in 5.4.7 * [rt] Drop x86-ioapic-Prevent-inconsistent-state-when-moving-an.patch * Enable EROFS filesystem support as module. Enable EROFS_FS as module, enable EROFS_FS_XATTR, EROFS_FS_POSIX_ACL, EROFS_FS_SECURITY, EROFS_FS_ZIP and EROFS_FS_CLUSTER_PAGE_LIMIT. Thanks to Gao Xiang (Closes: #946569) * Enable additional netfilter modules. Enable NFT_BRIDGE_META, NF_CONNTRACK_BRIDGE, IP6_NF_MATCH_SRH, NFT_XFRM and NFT_SYNPROXY as modules. Thanks to Arturo Borrero Gonzalez (Closes: #948031) * [rt] Drop watchdog-prevent-deferral-of-watchdogd-wakeup-on-RT.patch * [rt] Refresh Use-CONFIG_PREEMPTION.patch (Context changes in 5.4.8) * Bump ABI to 2 [ YunQiang Su ] * [mips*/octeon] Fix ftbfs on mips* due to octeon image-file: move "image-file: linux" to octeon_build from octeon_image. -- Salvatore Bonaccorso Sun, 05 Jan 2020 15:40:37 +0100 linux (5.4.6-1) unstable; urgency=medium * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.3 - rsi: release skb if rsi_prepare_beacon fails (CVE-2019-19071) - lp: fix sparc64 LPSETTIMEOUT ioctl - time: Zero the upper 32-bits in __kernel_timespec on 32-bit - usb: gadget: u_serial: add missing port entry locking - [arm64] tty: serial: msm_serial: Fix flow control - [arm64,armel,armhf] serial: pl011: Fix DMA ->flush_buffer() - serial: serial_core: Perform NULL checks for break_ctl ops - [armhf] serial: stm32: fix clearing interrupt error flags - serial: 8250_dw: Avoid double error messaging when IRQ absent - mwifiex: Re-work support for SDIO HW reset - io_uring: fix dead-hung for non-iter fixed rw - io_uring: transform send/recvmsg() -ERESTARTSYS to -EINTR - fuse: fix leak of fuse_io_priv - fuse: verify nlink - fuse: verify write return - fuse: verify attributes - io_uring: fix missing kmap() declaration on powerpc - io_uring: ensure req->submit is copied when req is deferred - SUNRPC: Avoid RPC delays when exiting suspend - ALSA: hda/realtek - Enable internal speaker of ASUS UX431FLC - ALSA: hda/realtek - Enable the headset-mic on a Xiaomi's laptop - ALSA: hda/realtek - Dell headphone has noise on unmute for ALC236 - ALSA: hda/realtek - Fix inverted bass GPIO pin on Acer 8951G - ALSA: pcm: oss: Avoid potential buffer overflows - ALSA: hda - Add mute led support for HP ProBook 645 G4 - ALSA: hda: Modify stream stripe mask only when needed - Input: synaptics - switch another X1 Carbon 6 to RMI/SMbus - Input: synaptics-rmi4 - re-enable IRQs in f34v7_do_reflash - [x86] Input: synaptics-rmi4 - don't increment rmiaddr for SMBus transfers - Input: goodix - add upside-down quirk for Teclast X89 tablet - media: rc: mark input device as pointing stick - [i386] x86/mm/32: Sync only to VMALLOC_END in vmalloc_sync_all() - [x86] PCI: Avoid AMD FCH XHCI USB PME# from D0 defect - CIFS: Fix NULL-pointer dereference in smb2_push_mandatory_locks - CIFS: Fix SMB2 oplock break processing - tty: vt: keyboard: reject invalid keycodes - can: slcan: Fix use-after-free Read in slcan_open - nfsd: Ensure CLONE persists data and metadata changes to the target file - nfsd: restore NFSv3 ACL support - kernfs: fix ino wrap-around detection - jbd2: Fix possible overflow in jbd2_log_space_left() - [arm64] drm/msm: fix memleak on release - drm: damage_helper: Fix race checking plane->state->fb - [i386] drm/i810: Prevent underflow in ioctl - [arm64] Validate tagged addresses in access_ok() called from kernel threads - [powerpc*] KVM: PPC: Book3S HV: XIVE: Free previous EQ page when setting up a new one - [powerpc*] KVM: PPC: Book3S HV: XIVE: Fix potential page leak on error path - [powerpc*] KVM: PPC: Book3S HV: XIVE: Set kvm->arch.xive when VPs are allocated - [x86] KVM: nVMX: Always write vmcs02.GUEST_CR3 during nested VM-Enter - [arm64,armhf] KVM: vgic: Don't rely on the wrong pending table - [x86] KVM: do not modify masked bits of shared MSRs - [x86] KVM: fix presentation of TSX feature in ARCH_CAPABILITIES - [x86] KVM: Remove a spurious export of a static function - [x86] KVM: Grab KVM's srcu lock when setting nested state - crypto: af_alg - cast ki_complete ternary op to int - [i386] crypto: geode-aes - switch to skcipher for cbc(aes) fallback - [x86] crypto: ccp - fix uninitialized list head - crypto: ecdh - fix big endian bug in ECC library - crypto: user - fix memory leak in crypto_report (CVE-2019-19062) - [armhf] spi: stm32-qspi: Fix kernel oops when unbinding driver - spi: Fix SPI_CS_HIGH setting when using native and GPIO CS - spi: Fix NULL pointer when setting SPI_CS_HIGH for GPIO CS - can: ucan: fix non-atomic allocation in completion handler - [amd64] RDMA/qib: Validate ->show()/store() callbacks before calling them - rfkill: allocate static minor - bdev: Factor out bdev revalidation into a common helper - bdev: Refresh bdev size for disks without partitioning - iomap: Fix pipe page leakage during splicing - thermal: Fix deadlock in thermal thermal_zone_device_check - vcs: prevent write access to vcsu devices - Revert "serial/8250: Add support for NI-Serial PXI/PXIe+485 devices" - binder: Fix race between mmap() and binder_alloc_print_pages() - binder: Prevent repeated use of ->mmap() via NULL mapping - binder: Handle start==NULL in binder_update_page_range() - [x86] KVM: fix out-of-bounds write in KVM_GET_EMULATED_CPUID (CVE-2019-19332) - ALSA: hda - Fix pending unsol events at shutdown - md/raid0: Fix an error message in raid0_make_request() - drm/mcde: Fix an error handling path in 'mcde_probe()' - perf script: Fix invalid LBR/binary mismatch error https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.4 - usb: gadget: configfs: Fix missing spin_lock_init() - [x86] usb: gadget: pch_udc: fix use after free - nvme: Namepace identification descriptor list is optional - Revert "nvme: Add quirk for Kingston NVME SSD running FW E8FK11.T" - scsi: lpfc: Fix bad ndlp ptr in xri aborted handling - [s390x] scsi: zfcp: trace channel log even for FCP command responses - scsi: qla2xxx: Do command completion on abort timeout - scsi: qla2xxx: Fix driver unload hang - scsi: qla2xxx: Fix double scsi_done for abort path - scsi: qla2xxx: Fix memory leak when sending I/O fails - compat_ioctl: add compat_ptr_ioctl() - ceph: fix compat_ioctl for ceph_dir_operations - [arm64] media: venus: remove invalid compat_ioctl32 handler - USB: uas: honor flag to avoid CAPACITY16 - USB: uas: heed CAPACITY_HEURISTICS - USB: documentation: flags on usb-storage versus UAS - usb: Allow USB device to be warm reset in suspended state - [arm64,armhf] usb: host: xhci-tegra: Correct phy enable sequence - binder: fix incorrect calculation for num_valid - staging: rtl8188eu: fix interface sanity check - staging: rtl8712: fix interface sanity check - [arm*] staging: vchiq: call unregister_chrdev_region() when driver registration fails - staging: gigaset: fix general protection fault on probe - staging: gigaset: fix illegal free on probe errors - staging: gigaset: add endpoint-type sanity check - usb: xhci: only set D3hot for pci device - xhci: Fix memory leak in xhci_add_in_port() - xhci: fix USB3 device initiated resume race with roothub autosuspend - xhci: Increase STS_HALT timeout in xhci_suspend() - xhci: handle some XHCI_TRUST_TX_LENGTH quirks cases as default behaviour. - xhci: make sure interrupts are restored to correct state - [x86] iio: imu: inv_mpu6050: fix temperature reporting using bad unit - USB: atm: ueagle-atm: add missing endpoint check - USB: idmouse: fix interface sanity checks - USB: serial: io_edgeport: fix epic endpoint lookup - usb: roles: fix a potential use after free - USB: adutux: fix interface sanity check - usb: core: urb: fix URB structure initialization function - usb: mon: Fix a deadlock in usbmon between mmap and read - [arm64,amd64,i386] tpm: add check after commands attribs tab allocation - [arm64,amd64,i386] tpm: Switch to platform_get_irq_optional() - brcmfmac: disable PCIe interrupts before bus reset - mtd: rawnand: Change calculating of position page containing BBM - virtio-balloon: fix managed page counts when migrating pages between zones - usb: dwc3: pci: add ID for the Intel Comet Lake -H variant - [arm64,armhf] usb: dwc3: gadget: Fix logical condition - [arm64,armhf] usb: dwc3: gadget: Clear started flag for non-IOC - [arm64,armhf] usb: dwc3: ep0: Clear started flag on completion - [x86] usb: typec: fix use after free in typec_register_port() - iwlwifi: pcie: fix support for transmitting SKBs with fraglist - btrfs: check page->mapping when loading free space cache - btrfs: use btrfs_block_group_cache_done in update_block_group - btrfs: use refcount_inc_not_zero in kill_all_nodes - Btrfs: fix metadata space leak on fixup worker failure to set range as delalloc - Btrfs: fix negative subv_writers counter and data space leak after buffered write - btrfs: Avoid getting stuck during cyclic writebacks - btrfs: Remove btrfs_bio::flags member - Btrfs: send, skip backreference walking for extents with many references - btrfs: record all roots for rename exchange on a subvol - rtlwifi: rtl8192de: Fix missing code to retrieve RX buffer address - rtlwifi: rtl8192de: Fix missing callback that tests for hw release of buffer - rtlwifi: rtl8192de: Fix missing enable interrupt flag - ovl: fix lookup failure on multi lower squashfs - ovl: fix corner case of non-unique st_dev;st_ino - ovl: relax WARN_ON() on rename to self - [arm*] hwrng: omap - Fix RNG wait loop timeout - dm writecache: handle REQ_FUA - dm zoned: reduce overhead of backing device checks - workqueue: Fix spurious sanity check failures in destroy_workqueue() - workqueue: Fix pwq ref leak in rescuer_thread() - ASoC: rt5645: Fixed buddy jack support. - ASoC: rt5645: Fixed typo for buddy jack support. - ASoC: Jack: Fix NULL pointer dereference in snd_soc_jack_report - md: improve handling of bio with REQ_PREFLUSH in md_flush_request() - blk-mq: avoid sysfs buffer overflow with too many CPU cores - cgroup: pids: use atomic64_t for pids->limit - wil6210: check len before memcpy() calls - ar5523: check NULL before memcpy() in ar5523_cmd() - [s390x] mm: properly clear _PAGE_NOEXEC bit when it is not supported - cpuidle: Do not unset the driver if it is there already - cpuidle: use first valid target residency as poll time - [arm64,armhf] drm/panfrost: Open/close the perfcnt BO - [powerpc*] perf: Disable trace_imc pmu - [x86] intel_th: Fix a double put_device() in error path - [x86] intel_th: pci: Add Ice Lake CPU support - [x86] intel_th: pci: Add Tiger Lake CPU support - PM / devfreq: Lock devfreq in trans_stat_show - [powerpc*] cpufreq: powernv: fix stack bloat and hard limit on number of CPUs - ALSA: fireface: fix return value in error path of isochronous resources reservation - ALSA: oxfw: fix return value in error path of isochronous resources reservation - ALSA: hda/realtek - Line-out jack doesn't work on a Dell AIO - ACPI / utils: Move acpi_dev_get_first_match_dev() under CONFIG_ACPI - ACPI: LPSS: Add LNXVIDEO -> BYT I2C7 to lpss_device_links - ACPI: LPSS: Add LNXVIDEO -> BYT I2C1 to lpss_device_links - ACPI: LPSS: Add dmi quirk for skipping _DEP check for some device-links - ACPI / hotplug / PCI: Allocate resources directly under the non-hotplug bridge - ACPI: OSL: only free map once in osl.c - ACPI: bus: Fix NULL pointer check in acpi_bus_get_private_data() - ACPI: EC: Rework flushing of pending work - ACPI: PM: Avoid attaching ACPI PM domain to certain devices - [arm64] pinctrl: armada-37xx: Fix irq mask access in armada_37xx_irq_set_type() - [armhf] pinctrl: samsung: Add of_node_put() before return in error path - [armhf] pinctrl: samsung: Fix device node refcount leaks in Exynos wakeup controller init - [armhf] pinctrl: samsung: Fix device node refcount leaks in init code - [armhf] mmc: host: omap_hsmmc: add code for special init of wl1251 to get rid of pandora_wl1251_init_card - RDMA/core: Fix ib_dma_max_seg_size() - ppdev: fix PPGETTIME/PPSETTIME ioctls - [powerpc*] Allow 64bit VDSO __kernel_sync_dicache to work across ranges >4GB - [powerpc*] xive: Prevent page fault issues in the machine crash handler - [powerpc*] Allow flush_icache_range to work across ranges >4GB - [powerpc*] xive: Skip ioremap() of ESB pages for LSI interrupts - video/hdmi: Fix AVI bar unpack - quota: Check that quota is not dirty before release - ext2: check err when partial != NULL - seccomp: avoid overflow in implicit constant conversion - quota: fix livelock in dquot_writeback_dquots - ext4: Fix credit estimate for final inode freeing - reiserfs: fix extended attributes on the root directory - scsi: qla2xxx: Fix SRB leak on switch command timeout - scsi: qla2xxx: Fix a dma_pool_free() call - Revert "scsi: qla2xxx: Fix memory leak when sending I/O fails" - [armhf] omap: pdata-quirks: revert pandora specific gpiod additions - [armhf] omap: pdata-quirks: remove openpandora quirks for mmc3 and wl1251 - [powerpc*] Avoid clang warnings around setjmp and longjmp - [powerpc*] Fix vDSO clock_getres() - mm, memfd: fix COW issue on MAP_PRIVATE and F_SEAL_FUTURE_WRITE mappings - mm: memcg/slab: wait for !root kmem_cache refcnt killing on root kmem_cache destruction - ext4: work around deleting a file with i_nlink == 0 safely - [arm64] firmware: qcom: scm: Ensure 'a0' status code is treated as signed - [s390x] smp,vdso: fix ASCE handling - [s390x] kaslr: store KASLR offset for early dumps - mm/shmem.c: cast the type of unmap_start to u64 - [powerpc*] Define arch_is_kernel_initmem_freed() for lockdep - rtc: disable uie before setting time and enable after - splice: only read in as much information as there is pipe buffer space - ext4: fix a bug in ext4_wait_for_tail_page_commit - ext4: fix leak of quota reservations - blk-mq: make sure that line break can be printed - workqueue: Fix missing kfree(rescuer) in destroy_workqueue() - r8169: fix rtl_hw_jumbo_disable for RTL8168evl https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.5 - inet: protect against too small mtu values. - mqprio: Fix out-of-bounds access in mqprio_dump - net: bridge: deny dev_set_mac_address() when unregistering - net: dsa: fix flow dissection on Tx path - [armhf] net: ethernet: ti: cpsw: fix extra rx interrupt - net: sched: fix dump qlen for sch_mq/sch_mqprio with NOLOCK subqueues - net_sched: validate TCA_KIND attribute in tc_chain_tmplt_add() - [arm64] net: thunderx: start phy before starting autonegotiation - openvswitch: support asymmetric conntrack - tcp: md5: fix potential overestimation of TCP option space - tipc: fix ordering of tipc module init and exit routine - net/mlx5e: Query global pause state before setting prio2buffer - net: ipv6: add net argument to ip6_dst_lookup_flow - net: ipv6_stub: use ip6_dst_lookup_flow instead of ip6_dst_lookup - tcp: fix rejected syncookies due to stale timestamps - tcp: tighten acceptance of ACKs not matching a child socket - tcp: Protect accesses to .ts_recent_stamp with {READ,WRITE}_ONCE() - net: core: rename indirect block ingress cb function - net: sched: allow indirect blocks to bind to clsact in TC - cls_flower: Fix the behavior using port ranges with hw-offload - gre: refetch erspan header from skb->data after pskb_may_pull() - Fixed updating of ethertype in function skb_mpls_pop - net: Fixed updating of ethertype in skb_mpls_push() - net/mlx5e: Fix TXQ indices to be sequential - net/mlx5e: Fix SFF 8472 eeprom length - net/mlx5e: Fix freeing flow with kfree() and not kvfree() - net/mlx5e: Fix translation of link mode into speed - net/mlx5e: ethtool, Fix analysis of speed setting - page_pool: do not release pool until inflight == 0. - xdp: obtain the mem_id mutex before trying to remove an entry. - r8169: add missing RX enabling for WoL on RTL8125 https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.6 - USB: Fix incorrect DMA allocations for local memory pool drivers - mmc: block: Make card_busy_detect() a bit more generic - mmc: block: Add CMD13 polling for MMC IOCTLS with R1B response - mmc: core: Drop check for mmc_card_is_removable() in mmc_rescan() - mmc: core: Re-work HW reset for SDIO cards - PCI/PM: Always return devices to D0 when thawing - PCI: pciehp: Avoid returning prematurely from sysfs requests - PCI: Fix Intel ACS quirk UPDCR register address - PCI/MSI: Fix incorrect MSI-X masking on resume - PCI: Do not use bus number zero from EA capability - PCI: Apply Cavium ACS quirk to ThunderX2 and ThunderX3 - PM / QoS: Redefine FREQ_QOS_MAX_DEFAULT_VALUE to S32_MAX - block: fix "check bi_size overflow before merge" - gfs2: Multi-block allocations in gfs2_page_mkwrite - gfs2: fix glock reference problem in gfs2_trans_remove_revoke - [arm64] rpmsg: glink: Fix reuse intents memory leak issue - [arm64] rpmsg: glink: Fix use after free in open_ack TIMEOUT case - [arm64] rpmsg: glink: Put an extra reference during cleanup - [arm64] rpmsg: glink: Fix rpmsg_register_device err handling - [arm64] rpmsg: glink: Don't send pending rx_done during remove - [arm64] rpmsg: glink: Free pending deferred work on remove - cifs: smbd: Return -EAGAIN when transport is reconnecting - cifs: smbd: Only queue work for error recovery on memory registration - cifs: smbd: Add messages on RDMA session destroy and reconnection - cifs: smbd: Return -EINVAL when the number of iovs exceeds SMBDIRECT_MAX_SGE - cifs: smbd: Return -ECONNABORTED when trasnport is not in connected state - cifs: Don't display RDMA transport on reconnect - CIFS: Respect O_SYNC and O_DIRECT flags during reconnect - CIFS: Close open handle after interrupted close - CIFS: Do not miss cancelled OPEN responses - CIFS: Fix NULL pointer dereference in mid callback - cifs: Fix retrieval of DFS referrals in cifs_mount() - [armhf] ARM: tegra: Fix FLOW_CTLR_HALT register clobbering by tegra_resume() - vfio/pci: call irq_bypass_unregister_producer() before freeing irq - dma-buf: Fix memory leak in sync_file_merge() - [arm64,armhf] drm/panfrost: Fix a race in panfrost_ioctl_madvise() - [arm64,armhf] drm/panfrost: Fix a BO leak in panfrost_ioctl_mmap_bo() - [arm64,armhf] drm/panfrost: Fix a race in panfrost_gem_free_object() - [x86] drm/mgag200: Extract device type from flags - [x86] drm/mgag200: Store flags from PCI driver data in device structure - [x86] drm/mgag200: Add workaround for HW that does not support 'startadd' - [x86] drm/mgag200: Flag all G200 SE A machines as broken wrt - [arm64] drm: meson: venc: cvbs: fix CVBS mode matching - dm mpath: remove harmful bio-based optimization - dm btree: increase rebalance threshold in __rebalance2() - dm clone metadata: Track exact changes per transaction - dm clone metadata: Use a two phase commit - dm clone: Flush destination device before committing metadata - dm thin metadata: Add support for a pre-commit callback - dm thin: Flush data device before committing metadata - scsi: ufs: Disable autohibern8 feature in Cadence UFS - scsi: iscsi: Fix a potential deadlock in the timeout handler - scsi: qla2xxx: Ignore NULL pointer in tcm_qla2xxx_free_mcmd - scsi: qla2xxx: Initialize free_work before flushing it - scsi: qla2xxx: Added support for MPI and PEP regions for ISP28XX - scsi: qla2xxx: Change discovery state before PLOGI - scsi: qla2xxx: Correctly retrieve and interpret active flash region - scsi: qla2xxx: Fix incorrect SFUB length used for Secure Flash Update MB Cmd - drm/nouveau/kms/nv50-: Call outp_atomic_check_view() before handling PBN - drm/nouveau/kms/nv50-: Store the bpc we're using in nv50_head_atom - drm/nouveau/kms/nv50-: Limit MST BPC to 8 - [x86] drm/i915/fbc: Disable fbc by default on all glk+ - drm/radeon: fix r1xx/r2xx register checker for POT textures - drm/dp_mst: Correct the bug in drm_dp_update_payload_part1() - drm/amdgpu: initialize vm_inv_eng0_sem for gfxhub and mmhub - drm/amdgpu: invalidate mmhub semaphore workaround in gmc9/gmc10 - drm/amdgpu/gfx10: explicitly wait for cp idle after halt/unhalt - drm/amdgpu/gfx10: re-init clear state buffer after gpu reset - drm/amdgpu: avoid using invalidate semaphore for picasso - drm/amdgpu: add invalidate semaphore limit for SRIOV and picasso in gmc9 - ALSA: hda: Fix regression by strip mask fix [ Joe Richey ] * [amd64/cloud-amd64] tpm: Enable TPM drivers for Cloud (Closes: #946237) [ Ben Hutchings ] * [armel/rpi,armhf,arm64] Enable DEBUG_WX * linux-cpupower: Fix grammar error in package description * debian/control: Make library package descriptions more consistent * Set ABI to 1 * tracing: Do not create directories if lockdown is in affect [ Aurelien Jarno ] * [armhf,arm64] Fix critical trip point on RPI 3. [ Salvatore Bonaccorso ] * [rt] Update to 5.4.3-rt1 and re-enable * [rt] Enable PREEMPT_RT (instead of PREEMPT_RT_FULL) which is part of 5.4 * [rt] Update to 5.4.5-rt3 [ YunQiang Su ] * [mipsel,mips64el/loongson-3] Enable AMDGPU. * [mips*] switch to vmlinuz from vmlinux except octeon. * [mips*] enable CONFIG_MIPS_O32_FP64_SUPPORT. * [mips*] enable CONFIG_CPU_HAS_MSA except octeon. [ Vagrant Cascadian ] * [arm64] drivers/gpu/drm/sun4i: Enable DRM_SUN8I_MIXER as a module. (Closes: #946510). Thanks to Andrei POPESCU. [ Sudip Mukherjee ] * Add libtraceevent packages (Closes: #944138) -- Ben Hutchings Fri, 27 Dec 2019 22:17:44 +0000 linux (5.4.2-1~exp1) experimental; urgency=medium * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.1 - Bluetooth: Fix invalid-free in bcsp_close() - ath9k_hw: fix uninitialized variable data - ath10k: Fix a NULL-ptr-deref bug in ath10k_usb_alloc_urb_from_pipe (CVE-2019-15099) - ath10k: Fix HOST capability QMI incompatibility - ath10k: restore QCA9880-AR1A (v1) detection - Revert "Bluetooth: hci_ll: set operational frequency earlier" - Revert "dm crypt: use WQ_HIGHPRI for the IO and crypt workqueues" - md/raid10: prevent access of uninitialized resync_pages offset - [x86] insn: Fix awk regexp warnings - [x86] speculation: Fix incorrect MDS/TAA mitigation status - [x86] speculation: Fix redundant MDS mitigation message - nbd: prevent memory leak - [i386] x86/stackframe/32: Repair 32-bit Xen PV - [i386] x86/xen/32: Make xen_iret_crit_fixup() independent of frame layout - [i386] x86/xen/32: Simplify ring check in xen_iret_crit_fixup() - [i386] x86/doublefault/32: Fix stack canaries in the double fault handler - [i386] x86/pti/32: Size initial_page_table correctly - [i386] x86/cpu_entry_area: Add guard page for entry stack on 32bit - [i386] x86/entry/32: Fix IRET exception - [i386] x86/entry/32: Use %ss segment where required - [i386] x86/entry/32: Move FIXUP_FRAME after pushing %fs in SAVE_ALL - [i386] x86/entry/32: Unwind the ESPFIX stack earlier on exception entry - [i386] x86/entry/32: Fix NMI vs ESPFIX - [i386] x86/pti/32: Calculate the various PTI cpu_entry_area sizes correctly, make the CPU_ENTRY_AREA_PAGES assert precise - [i386] x86/entry/32: Fix FIXUP_ESPFIX_STACK with user CR3 - futex: Prevent robust futex exit race - ALSA: usb-audio: Fix NULL dereference at parsing BADD - ALSA: usb-audio: Fix Scarlett 6i6 Gen 2 port data - media: vivid: Set vid_cap_streaming and vid_out_streaming to true - media: vivid: Fix wrong locking that causes race conditions on streaming stop (CVE-2019-18683) - media: usbvision: Fix invalid accesses after device disconnect - media: usbvision: Fix races among open, close, and disconnect - cpufreq: Add NULL checks to show() and store() methods of cpufreq - futex: Move futex exit handling into futex code - futex: Replace PF_EXITPIDONE with a state - exit/exec: Seperate mm_release() - futex: Split futex_mm_release() for exit/exec - futex: Set task::futex_state to DEAD right after handling futex exit - futex: Mark the begin of futex exit explicitly - futex: Sanitize exit state handling - futex: Provide state handling for exec() as well - futex: Add mutex around futex exit - futex: Provide distinct return value when owner is exiting - futex: Prevent exit livelock - media: uvcvideo: Fix error path in control parsing failure - media: b2c2-flexcop-usb: add sanity checking (CVE-2019-15291) - media: cxusb: detect cxusb_ctrl_msg error in query - media: imon: invalid dereference in imon_touch_event - media: mceusb: fix out of bounds read in MCE receiver buffer - ALSA: hda - Disable audio component for legacy Nvidia HDMI codecs - usbip: tools: fix fd leakage in the function of read_attr_usbip_status - usbip: Fix uninitialized symbol 'nents' in stub_recv_cmd_submit() - usb-serial: cp201x: support Mark-10 digital force gauge - USB: chaoskey: fix error case of a timeout - appledisplay: fix error handling in the scheduled work - USB: serial: mos7840: add USB ID to support Moxa UPort 2210 - USB: serial: mos7720: fix remote wakeup - USB: serial: mos7840: fix remote wakeup - USB: serial: option: add support for DW5821e with eSIM support - USB: serial: option: add support for Foxconn T77W968 LTE modules - [x86] staging: comedi: usbduxfast: usbduxfast_ai_cmdtest rounding error - [powerpc*] powerpc/book3s64: Fix link stack flush on context switch (CVE-2019-18660) - [powerpc*] KVM: PPC: Book3S HV: Flush link stack on guest exit to host kernel https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.2 - io_uring: async workers should inherit the user creds - net: separate out the msghdr copy from ___sys_{send,recv}msg() - net: disallow ancillary data for __sys_{send,recv}msg_file() - [arm64] crypto: inside-secure - Fix stability issue with Macchiatobin - driver core: platform: use the correct callback type for bus_find_device - [arm64,armel,armhf] usb: dwc2: use a longer core rest timeout in dwc2_core_reset() - [x86] staging: rtl8192e: fix potential use after free - staging: rtl8723bs: Drop ACPI device ids - staging: rtl8723bs: Add 024c:0525 to the list of SDIO device-ids - USB: serial: ftdi_sio: add device IDs for U-Blox C099-F9P - [x86] mei: bus: prefix device names on bus with the bus name - [x86] mei: me: add comet point V device id - [x86] thunderbolt: Power cycle the router if NVM authentication fails - [x86] fpu: Don't cache access to fpu_fpregs_owner_ctx - macvlan: schedule bc_work even if error - mdio_bus: don't use managed reset-controller - net: macb: add missed tasklet_kill - net: psample: fix skb_over_panic - net: sched: fix `tc -s class show` no bstats on class with nolock subqueues - openvswitch: fix flow command message size - sctp: Fix memory leak in sctp_sf_do_5_2_4_dupcook - slip: Fix use-after-free Read in slip_open - sctp: cache netns in sctp_ep_common - openvswitch: drop unneeded BUG_ON() in ovs_flow_cmd_build_info() - openvswitch: remove another BUG_ON() - net: skmsg: fix TLS 1.3 crash with full sk_msg - tipc: fix link name length check - r8169: fix jumbo configuration for RTL8168evl - r8169: fix resume on cable plug-in - ext4: add more paranoia checking in ext4_expand_extra_isize handling - Revert "jffs2: Fix possible null-pointer dereferences in jffs2_add_frag_to_fragtree()" - HID: core: check whether Usage Page item is after Usage ID items - [x86] platform/x86: hp-wmi: Fix ACPI errors caused by too small buffer - [x86] platform/x86: hp-wmi: Fix ACPI errors caused by passing 0 as input size [ Ben Hutchings ] * [armel] udeb: Replace m25p80 with spi-nor in mtd-modules (fixes FTBFS) * [ia64] udeb: Remove SGI SN2 modules (fixes FTBFS) * iio: Enable TI_ADS1015 as module, replacing SENSORS_ADS1015 * [armhf] regulator: Really enable REGULATOR_STM32_PWR * [armhf] drm/panel: Enable DRM_PANEL_{SONY_ACX565AKM,TPO_TD028TTEC1, TPO_TD043MTEA1} as modules, replacing the corresponding omapdrm options * [armhf,arm64] platform/chrome: Change chromeos drivers back to modules * Build-Depend on kernel-wedge 2.102; remove workaround in debian/rules.real * debian/bin: Add script to update taint list for bug reporting script * linux-image: bug: Update taint list and use upstream descriptions * btrfs,fanotify: Use TAINT_AUX instead of TAINT_USER for unsupported features [ Romain Perier ] * Enable VIRTIO_FS and VIRTIO_PMEM (Closes: #945853) [ Aurelien Jarno] * [ppc64el] Fix building libbpf with recent binutils versions (fixes FTBFS). [ Luca Boccassi ] * verity: enable DM_VERITY_VERIFY_ROOTHASH_SIG -- Salvatore Bonaccorso Thu, 05 Dec 2019 08:37:56 +0100 linux (5.4-1~exp1) experimental; urgency=medium * New upstream release: https://kernelnewbies.org/Linux_5.4 [ Ben Hutchings ] * lockdown: Rebase on upstream Lockdown LSM: - Refresh "efi: Add an EFI_SECURE_BOOT flag to indicate secure boot mode" - Update "efi: Lock down the kernel if booted in secure boot mode" - Update "Add a SysRq option to lift kernel lockdown" - Update "mtd: Disable slram and phram when locked down" - Update "arm64: add kernel config option to lock down when in Secure Boot mode" - Refresh "lockdown: Refer to Debian wiki until manual page exists" - Drop all other lockdown patches - Enable SECURITY_LOCKDOWN_LSM, LOCK_DOWN_KERNEL_FORCE_NONE, LOCK_DOWN_IN_EFI_SECURE_BOOT * [armel/marvell] lockdown: Disable Lockdown as it now selects MODULE_SIG * [amd64] Update "x86: Make x32 syscall support conditional …" for 5.4 * debian/lib/python/debian_linux/abi.py: Add support for symbol namespaces * debian/bin/genpatch-rt: Fix series generation from git [ Romain Perier ] * Rebased the following patches onto 5.4.x: - debian/version.patch - debian/ia64-hardcode-arch-script-output.patch - bugfix/all/ radeon-amdgpu-firmware-is-required-for-drm-and-kms-on-r600-onward.patch - features/all/aufs5/aufs5-mmap.patch - features/all/aufs5/aufs5-standalone.patch - features/x86/ intel-iommu-add-kconfig-option-to-exclude-igpu-by-default.patch - bugfix/all/fs-add-module_softdep-declarations-for-hard-coded-cr.patch - debian/revert-objtool-fix-config_stack_validation-y-warning.patch - features/all/db-mok-keyring/ 0003-MODSIGN-checking-the-blacklisted-hash-before-loading-a-kernel-module .patch - bugfix/all/tools-perf-man-date.patch - bugfix/all/usbip-fix-misuse-of-strncpy.patch - bugfix/all/partially-revert-usb-kconfig-using-select-for-usb_co.patch [ John Paul Adrian Glaubitz ] * [m68k] Enable CONFIG_PATA_BUDDHA as module [ Aurelien Jarno ] * [armhf] Add support for STM32MP1 SoC: enable ARCH_STM32, CRYPTO_DEV_STM32_CRC, CRYPTO_DEV_STM32_CRYP, CRYPTO_DEV_STM32_HASH, DRM_PANEL_ORISETECH_OTM8009A, DRM_SII902X, DRM_STM, DRM_STM_DSI, HW_RANDOM_STM32, I2C_STM32F7, INPUT_STPMIC1_ONKEY, MFD_STM32_LPTIMER, MFD_STPMIC1, MTD_NAND_STM32_FMC2, PHY_STM32_USBPHYC, PWM_STM32_LP, REGULATOR_STM32_BOOSTER, REGULATOR_STM32_PWR, REGULATOR_STM32_VREFBUF, REGULATOR_STPMIC1, REMOTEPROC, RTC_DRV_STM32, SERIAL_STM32, SERIAL_STM32_CONSOLE, SND_AUDIO_GRAPH_CARD, SND_SOC_CS42L51_I2C, SND_SOC_STM32_DFSDM, SND_SOC_STM32_I2S, SND_SOC_STM32_SAI, SND_SOC_STM32_SPDIFRX, SPI_STM32, SPI_STM32_QSPI, STM32_DMA, STM32_DMAMUX, STM32_MDMA, STM32_RPROC, STPMIC1_WATCHDOG, TOUCHSCREEN_EDT_FT5X06. * [arm64] Re-enable BT_HCIUART_{BCM,LL} (arm64 version of #906048). * [arm64,armhf] Enable CLK_RASPBERRYPI and RASPBERRYPI_CPUFREQ. [ Salvatore Bonaccorso ] * md: Enable MD_CLUSTER as module (Closes: #927026) -- Ben Hutchings Tue, 26 Nov 2019 01:33:11 +0000 linux (5.3.15-1) unstable; urgency=medium * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.10 - regulator: of: fix suspend-min/max-voltage parsing - ASoC: topology: Fix a signedness bug in soc_tplg_dapm_widget_create() - [arm64] dts: allwinner: a64: pine64-plus: Add PHY regulator delay - [arm64] dts: allwinner: a64: Drop PMU node - [arm64] dts: allwinner: a64: sopine-baseboard: Add PHY regulator delay - [arm64] dts: Fix gpio to pinmux mapping - [x86] pinctrl: intel: Allocate IRQ chip dynamic - [amd64] ASoC: SOF: loader: fix kernel oops on firmware boot failure - [amd64] ASoC: SOF: topology: fix parse fail issue for byte/bool tuple types - [amd64] ASoC: SOF: Intel: hda: fix warnings during FW load - [amd64] ASoC: SOF: Intel: initialise and verify FW crash dump data. - [amd64] ASoC: SOF: Intel: hda: Disable DMI L1 entry during capture - [amd64] ASoC: rt5682: add NULL handler to set_jack function - [amd64] ASoC: intel: sof_rt5682: add remove function to disable jack - [x86] ASoC: intel: bytcr_rt5651: add null check to support_button_press - [armhf] regulator: pfuze100-regulator: Variable "val" in pfuze100_regulator_probe() could be uninitialized - [armhf,arm64] ASoc: rockchip: i2s: Fix RPM imbalance - [arm64] dts: rockchip: fix Rockpro64 RK808 interrupt line - [armhf] dts: logicpd-torpedo-som: Remove twl_keypad - [arm64] dts: rockchip: fix RockPro64 vdd-log regulator settings - [arm64] dts: rockchip: fix RockPro64 sdhci settings - [arm64] dts: zii-ultra: fix ARM regulator states - [armhf] dts: am3874-iceboard: Fix 'i2c-mux-idle-disconnect' usage - [armhf] dts: Use level interrupt for omap4 & 5 wlcore - [armel,armhf] mm: fix alignment handler faults under memory pressure - scsi: qla2xxx: fix a potential NULL pointer dereference - scsi: scsi_dh_alua: handle RTPG sense code correctly during state transitions - [armel,armhf] 8908/1: add __always_inline to functions called from __get_user_check() - [arm64] dts: rockchip: fix RockPro64 sdmmc settings - [arm64] dts: rockchip: Fix usb-c on Hugsun X99 TV Box - [armhf] dts: imx6q-logicpd: Re-Enable SNVS power key - perf tools: Fix resource leak of closedir() on the error paths - perf c2c: Fix memory leak in build_cl_output() - perf kmem: Fix memory leak in compact_gfp_flags() - drm/amdgpu: fix potential VM faults - drm/amdgpu: fix error handling in amdgpu_bo_list_create - scsi: target: core: Do not overwrite CDB byte 1 - scsi: hpsa: add missing hunks in reset-patch - [x86] ASoC: Intel: sof-rt5682: add a check for devm_clk_get - [x86] ASoC: SOF: control: return true when kcontrol values change - tracing: Fix "gfp_t" format for synthetic events - [arm64] dts: bcm2837-rpi-cm3: Avoid leds-gpio probing issue - [x86] ALSA: hda: Add Tigerlake/Jasperlake PCI ID - [armhf,arm64] irqchip/gic-v3-its: Use the exact ITSList for VMOVP - cifs: Fix cifsInodeInfo lock_sem deadlock when reconnect occurs - [riscv64] irqchip/sifive-plic: Skip contexts except supervisor in plic_init() - nbd: protect cmd->status with cmd->lock - nbd: handle racing with error'ed out commands - cxgb4: fix panic when attaching to ULD fail - cxgb4: request the TX CIDX updates to status page - dccp: do not leak jiffies on the wire - erspan: fix the tun_info options_len check for erspan - inet: stop leaking jiffies on the wire - net: annotate accesses to sk->sk_incoming_cpu - net: annotate lockless accesses to sk->sk_napi_id - [armhf] net: dsa: bcm_sf2: Fix IMP setup for port different than 8 - net: fix sk_page_frag() recursion from memory reclaim - [arm64] net: hisilicon: Fix ping latency when deal with high throughput - net/mlx4_core: Dynamically set guaranteed amount of counters per VF - netns: fix GFP flags in rtnl_net_notifyid() - net: rtnetlink: fix a typo fbd -> fdb - net: usb: lan78xx: Disable interrupts before calling generic_handle_irq() - net: Zeroing the structure ethtool_wolinfo in ethtool_get_wol() - udp: fix data-race in udp_set_dev_scratch() - vxlan: check tun_info options_len properly - net: add skb_queue_empty_lockless() - udp: use skb_queue_empty_lockless() - net: use skb_queue_empty_lockless() in poll() handlers - net: use skb_queue_empty_lockless() in busy poll contexts - net: add READ_ONCE() annotation in __skb_wait_for_more_packets() - ipv4: fix route update on metric change. - net/smc: fix closing of fallback SMC sockets - net/smc: keep vlan_id for SMC-R in smc_listen_work() - keys: Fix memory leak in copy_net_ns - net: phylink: Fix phylink_dbg() macro - rxrpc: Fix handling of last subpacket of jumbo packet - net/mlx5e: Determine source port properly for vlan push action - net/mlx5e: Remove incorrect match criteria assignment line - net/mlx5e: Initialize on stack link modes bitmap - net/mlx5: Fix flow counter list auto bits struct - net/smc: fix refcounting for non-blocking connect() - net/mlx5: Fix rtable reference leak - r8169: fix wrong PHY ID issue with RTL8168dp - net/mlx5e: Fix ethtool self test: link speed - net/mlx5e: Fix handling of compressed CQEs in case of low NAPI budget - ipv4: fix IPSKB_FRAG_PMTU handling with fragmentation - [armhf] net: dsa: b53: Do not clear existing mirrored port mask - net: dsa: fix switch tree list - net: ensure correct skb->tstamp in various fragmenters - [arm64] net: hns3: fix mis-counting IRQ vector numbers issue - net: netem: fix error path for corrupted GSO frames - net: reorder 'struct net' fields to avoid false sharing - net: usb: lan78xx: Connect PHY before registering MAC - [x86] r8152: add device id for Lenovo ThinkPad USB-C Dock Gen 2 - net: netem: correct the parent's backlog when corrupted packet was dropped - net/flow_dissector: switch to siphash - CIFS: Fix retry mid list corruption on reconnects - usb: gadget: udc: core: Fix segfault if udc_bind_to_driver() for pending driver fails https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.11 - bonding: fix state transition issue in link monitoring - CDC-NCM: handle incomplete transfer of MTU - ipv4: Fix table id reference in fib_sync_down_addr - [mips*/octeon] net: ethernet: octeon_mgmt: Account for second possible VLAN header - net: fix data-race in neigh_event_send() - net: usb: qmi_wwan: add support for DW5821e with eSIM support - nfc: netlink: fix double device reference drop - qede: fix NULL pointer deref in __qede_remove() - ipv6: fixes rt6_probe() and fib6_nh->last_probe init - [arm64] net: hns: Fix the stray netpoll locks causing deadlock in NAPI path - net: prevent load/store tearing on sk->sk_stamp - net: sched: prevent duplicate flower rules from tcf_proto destroy race - net/smc: fix ethernet interface refcounting - vsock/virtio: fix sock refcnt holding during the shutdown - r8169: fix page read in r8168g_mdio_read - ALSA: timer: Fix incorrectly assigned timer instance - ALSA: bebob: fix to detect configured source of sampling clock for Focusrite Saffire Pro i/o series - ALSA: hda/ca0132 - Fix possible workqueue stall - mm: memcontrol: fix NULL-ptr deref in percpu stats flush - mm: memcontrol: fix network errors from failing __GFP_ATOMIC charges - mm, meminit: recalculate pcpu batch and high limits after init completes - mm: thp: handle page cache THP correctly in PageTransCompoundMap - mm, vmstat: hide /proc/pagetypeinfo from normal users - dump_stack: avoid the livelock of the dump_lock - mm: slab: make page_cgroup_ino() to recognize non-compound slab pages properly - btrfs: Consider system chunk array size for new SYSTEM chunks - btrfs: tree-checker: Fix wrong check on max devid - btrfs: save i_size to avoid double evaluation of i_size_read in compress_file_range - [x86] pinctrl: intel: Avoid potential glitches if pin is in GPIO mode - perf tools: Fix time sorting - perf map: Use zalloc for map_groups - drm/radeon: fix si_enable_smc_cac() failed issue - HID: wacom: generic: Treat serial number and related fields as unsigned - mm/khugepaged: fix might_sleep() warn with CONFIG_HIGHPTE=y - blkcg: make blkcg_print_stat() print stats only for online blkgs - [arm64] Do not mask out PTE_RDONLY in pte_same() - ceph: fix use-after-free in __ceph_remove_cap() - ceph: fix RCU case handling in ceph_d_revalidate() - ceph: add missing check in d_revalidate snapdir handling - ceph: don't try to handle hashed dentries in non-O_CREAT atomic_open - ceph: don't allow copy_file_range when stripe_count != 1 - [x86] iio: imu: inv_mpu6050: fix no data on MPU6050 - [armhf] sunxi: Fix CPU powerdown on A83T - [armhf] dts: imx6-logicpd: Re-enable SNVS power key - cpufreq: intel_pstate: Fix invalid EPB setting - clone3: validate stack arguments - netfilter: nf_tables: Align nft_expr private data to 64-bit - netfilter: ipset: Fix an error code in ip_set_sockfn_get() - [x86] intel_th: gth: Fix the window switching sequence - [x86] intel_th: pci: Add Comet Lake PCH support - [x86] intel_th: pci: Add Jasper Lake PCH support - [amd64] dumpstack: Don't evaluate exception stacks before setup - [i386] apic: Avoid bogus LDR warnings - SMB3: Fix persistent handles reconnect - can: usb_8dev: fix use-after-free on disconnect - [armhf] can: flexcan: disable completely the ECC mechanism - [armhf] can: c_can: c_can_poll(): only read status register after status IRQ - can: peak_usb: fix a potential out-of-sync while decoding packets - can: rx-offload: can_rx_offload_queue_sorted(): fix error handling, avoid skb mem leak - can: gs_usb: gs_can_open(): prevent memory leak (CVE-2019-19052) - can: dev: add missing of_node_put() after calling of_get_child_by_name() - can: mcba_usb: fix use-after-free on disconnect (CVE-2019-19529) - can: peak_usb: fix slab info leak (CVE-2019-19534) - configfs: fix a deadlock in configfs_symlink() - ALSA: usb-audio: More validations of descriptor units - ALSA: usb-audio: Simplify parse_audio_unit() - ALSA: usb-audio: Unify the release of usb_mixer_elem_info objects - ALSA: usb-audio: Remove superfluous bLength checks - ALSA: usb-audio: Clean up check_input_term() - ALSA: usb-audio: Fix possible NULL dereference at create_yamaha_midi_quirk() - ALSA: usb-audio: remove some dead code - ALSA: usb-audio: Fix copy&paste error in the validator - usbip: Implement SG support to vhci-hcd and stub driver - HID: google: add magnemite/masterball USB ids - bpf: lwtunnel: Fix reroute supplying invalid dst - [x86] HID: intel-ish-hid: fix wrong error handling in ishtp_cl_alloc_tx_ring() - [powerpc] fix allow/prevent_user_access() when crossing segment boundaries. - RDMA/mlx5: Clear old rate limit when closing QP - iw_cxgb4: fix ECN check on the passive accept - RDMA/siw: free siw_base_qp in kref release routine - RDMA/qedr: Fix reported firmware version - IB/core: Use rdma_read_gid_l2_fields to compare GID L2 fields - net/mlx5e: Tx, Fix assumption of single WQEBB of NOP in cleanup flow - net/mlx5e: TX, Fix consumer index of error cqe dump - net/mlx5: prevent memory leak in mlx5_fpga_conn_create_cq (CVE-2019-19045) - net/mlx5: fix memory leak in mlx5_fw_fatal_reporter_dump (CVE-2019-19047) - scsi: qla2xxx: fixup incorrect usage of host_byte - scsi: lpfc: Check queue pointer before use - scsi: ufs-bsg: Wake the device before sending raw upiu commands - RDMA/uverbs: Prevent potential underflow - bpf: Fix use after free in subprog's jited symbol removal - [armhf,arm64] net: stmmac: Fix the problem of tso_xmit - net: openvswitch: free vport unless register_netdevice() succeeds - scsi: lpfc: Honor module parameter lpfc_use_adisc - scsi: qla2xxx: Initialized mailbox to prevent driver load failure - bpf: Fix use after free in bpf_get_prog_name - iwlwifi: pcie: fix PCI ID 0x2720 configs that should be soc - iwlwifi: pcie: fix all 9460 entries for qnj - iwlwifi: pcie: 0x2720 is qu and 0x30DC is not - netfilter: nf_flow_table: set timeout before insertion into hashes - xsk: Fix registration of Rx-only sockets - net: phy: smsc: LAN8740: add PHY_RST_AFTER_CLK_EN flag - ipvs: don't ignore errors in case refcounting ip_vs module fails - ipvs: move old_secure_tcp into struct netns_ipvs - netfilter: nft_payload: fix missing check for matching length in offloads - RDMA/nldev: Skip counter if port doesn't match - bonding: fix unexpected IFF_BONDING bit unset - bonding: use dynamic lockdep key instead of subclass - macsec: fix refcnt leak in module exit routine - virt_wifi: fix refcnt leak in module exit routine - scsi: sd: define variable dif as unsigned int instead of bool - usb: gadget: composite: Fix possible double free memory bug - usb: gadget: configfs: fix concurrent issue between composite APIs - [armhf,arm64] usb: dwc3: remove the call trace of USBx_GFLADJ - [x86] perf/amd/ibs: Fix reading of the IBS OpData register and thus precise RIP validity - [x86] perf/amd/ibs: Handle erratum #420 only on the affected CPU family (10h) - [x86] perf/uncore: Fix event group support - USB: Skip endpoints with 0 maxpacket length - USB: ldusb: use unsigned size format specifiers - usbip: tools: Fix read_usb_vudc_device() error path handling - RDMA/iw_cxgb4: Avoid freeing skb twice in arp failure case - [arm64] RDMA/hns: Prevent memory leaks of eq->buf_list - scsi: qla2xxx: stop timer in shutdown path - sched/topology: Don't try to build empty sched domains - sched/topology: Allow sched_asym_cpucapacity to be disabled - nvme-multipath: fix possible io hang after ctrl reconnect - [amd64] fjes: Handle workqueue allocation failure - [arm64] net: hisilicon: Fix "Trying to free already-free IRQ" - wimax: i2400: Fix memory leak in i2400m_op_rfkill_sw_toggle (CVE-2019-19051) - [x86] iommu/amd: Apply the same IVRS IOAPIC workaround to Acer Aspire A315-41 - mt76: dma: fix buffer unmap with non-linear skbs - drm/amdgpu/sdma5: do not execute 0-sized IBs (v2) - drm/sched: Set error to s_fence if HW job submission failed. - drm/amdgpu: If amdgpu_ib_schedule fails return back the error. - drm/amd/display: do not synchronize "drr" displays - drm/amd/display: add 50us buffer as WA for pstate switch in active - drm/amd/display: Passive DP->HDMI dongle detection fix - drm/amd/display: dc.c:use kzalloc without test - SUNRPC: The TCP back channel mustn't disappear while requests are outstanding - SUNRPC: The RDMA back channel mustn't disappear while requests are outstanding - SUNRPC: Destroy the back channel when we destroy the host transport - [x86] hv_netvsc: Fix error handling in netvsc_attach() - efi/tpm: Return -EINVAL when determining tpm final events log size fails - efi: libstub/arm: Account for firmware reserved memory at the base of RAM - [x86] efi: Never relocate kernel below lowest acceptable address - [arm64] cpufeature: Enable Qualcomm Falkor errata 1009 for Kryo - usb: dwc3: gadget: fix race when disabling ep with cancelled xfers - [arm64] apply ARM64_ERRATUM_845719 workaround for Brahma-B53 core - [arm64] Brahma-B53 is SSB and spectre v2 safe - [arm64] apply ARM64_ERRATUM_843419 workaround for Brahma-B53 core - NFSv4: Don't allow a cached open with a revoked delegation - igb: Fix constant media auto sense switching when no cable is connected - e1000: fix memory leaks - ocfs2: protect extent tree in ocfs2_prepare_inode_for_write() - [x86] pinctrl: cherryview: Fix irq_valid_mask calculation - timekeeping/vsyscall: Update VDSO data unconditionally - mm/filemap.c: don't initiate writeback if mapping has no dirty pages - cgroup,writeback: don't switch wbs immediately on dead wbs if the memcg is dead - [x86] ASoC: SOF: Intel: hda-stream: fix the CONFIG_ prefix missing - usbip: Fix free of unallocated memory in vhci tx - bonding: fix using uninitialized mode_lock - netfilter: ipset: Copy the right MAC address in hash:ip,mac IPv6 sets https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.12 - scsi: core: Handle drivers which set sg_tablesize to zero - ax88172a: fix information leak on short answers - devlink: disallow reload operation during device cleanup - ipmr: Fix skb headroom in ipmr_get_route(). - net/smc: fix fastopen for non-blocking connect() - net: usb: qmi_wwan: add support for Foxconn T77W968 LTE modules - slip: Fix memory leak in slip_open error path - tcp: remove redundant new line from tcp_event_sk_skb - devlink: Add method for time-stamp on reporter's dump - net/smc: fix refcount non-blocking connect() -part 2 - ALSA: usb-audio: Fix missing error check at mixer resolution test - ALSA: usb-audio: not submit urb for stopped endpoint - ALSA: usb-audio: Fix incorrect NULL check in create_yamaha_midi_quirk() - ALSA: usb-audio: Fix incorrect size check for processing/extension units - Btrfs: fix log context list corruption after rename exchange operation - cgroup: freezer: call cgroup_enter_frozen() with preemption disabled in ptrace_stop() - Input: ff-memless - kill timer in destroy() (CVE-2019-19524) - Input: synaptics-rmi4 - fix video buffer size - Input: synaptics-rmi4 - disable the relative position IRQ in the F12 driver - Input: synaptics-rmi4 - do not consume more data than we have (F11, F12) - Input: synaptics-rmi4 - clear IRQ enables for F54 - Input: synaptics-rmi4 - destroy F54 poller workqueue when removing - KVM: MMU: Do not treat ZONE_DEVICE pages as being reserved - IB/hfi1: Ensure r_tid_ack is valid before building TID RDMA ACK packet - IB/hfi1: Calculate flow weight based on QP MTU for TID RDMA - IB/hfi1: TID RDMA WRITE should not return IB_WC_RNR_RETRY_EXC_ERR - IB/hfi1: Ensure full Gen3 speed in a Gen4 system - IB/hfi1: Use a common pad buffer for 9B and 16B packets - i2c: acpi: Force bus speed to 400KHz if a Silead touchscreen is present - [x86] quirks: Disable HPET on Intel Coffe Lake platforms - ecryptfs_lookup_interpose(): lower_dentry->d_inode is not stable - ecryptfs_lookup_interpose(): lower_dentry->d_parent is not stable either - io_uring: ensure registered buffer import returns the IO length - [x86] drm/i915: update rawclk also on resume - [x86] Revert "drm/i915/ehl: Update MOCS table for EHL" - ntp/y2038: Remove incorrect time_t truncation - [x86] iommu/vt-d: Fix QI_DEV_IOTLB_PFSID and QI_DEV_EIOTLB_PFSID macros - mm: mempolicy: fix the wrong return value and potential pages leak of mbind - mm: memcg: switch to css_tryget() in get_mem_cgroup_from_mm() - mm: hugetlb: switch to css_tryget() in hugetlb_cgroup_charge_cgroup() - mm: slub: really fix slab walking for init_on_free - mm/memory_hotplug: fix try_offline_node() - mm/page_io.c: do not free shared swap slots - mmc: sdhci-of-at91: fix quirk2 overwrite - slcan: Fix memory leak in error path https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.13 - net: cdc_ncm: Signedness bug in cdc_ncm_set_dgram_size() - block, bfq: deschedule empty bfq_queues not referred by any process - mm/memory_hotplug: don't access uninitialized memmaps in shrink_pgdat_span() - mm/memory_hotplug: fix updating the node span - [arm64] uaccess: Ensure PAN is re-enabled after unhandled uaccess fault - fbdev: Ditch fb_edid_add_monspecs https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.14 - net/mlx4_en: fix mlx4 ethtool -N insertion - net/mlx4_en: Fix wrong limitation for number of TX rings - net: rtnetlink: prevent underflows in do_setvfinfo() - net/sched: act_pedit: fix WARN() in the traffic path - net: sched: ensure opts_len <= IP_TUNNEL_OPTS_MAX in act_tunnel_key - sfc: Only cancel the PPS workqueue if it exists - net/mlxfw: Verify FSM error code translation doesn't exceed array size - net/mlx5e: Fix set vf link state error flow - net/mlx5: Fix auto group size calculation - ipv6/route: return if there is no fib_nh_gw_family - taprio: don't reject same mqprio settings - net/ipv4: fix sysctl max for fib_multipath_hash_policy - net/mlx5e: Fix error flow cleanup in mlx5e_tc_tun_create_header_ipv4/6 - net/mlx5e: Do not use non-EXT link modes in EXT mode - net/mlx5: Update the list of the PCI supported devices - vhost/vsock: split packets to send using multiple buffers - [arm64] gpio: max77620: Fixup debounce delays - fork: fix pidfd_poll()'s return type - nbd:fix memory leak in nbd_get_socket() - virtio_console: allocate inbufs in add_port() only if it is needed - virtio_ring: fix return code on DMA mapping fails - virtio_balloon: fix shrinker count - Revert "fs: ocfs2: fix possible null-pointer dereferences in ocfs2_xa_prepare_entry()" - mm/memory_hotplug: don't access uninitialized memmaps in shrink_zone_span() - mm/ksm.c: don't WARN if page is still mapped in remove_stable_node() - drm/amdgpu: disable gfxoff when using register read interface - drm/amdgpu: disable gfxoff on original raven - drm/amd/powerplay: issue no PPSMC_MSG_GetCurrPkgPwr on unsupported ASICs - [x86] drm/i915: Don't oops in dumb_create ioctl if we have no crtcs - [x86] drm/i915/pmu: "Frequency" is reported as accumulated cycles - [x86] drm/i915/userptr: Try to acquire the page lock around set_page_dirty() - Bluetooth: Fix invalid-free in bcsp_close() - ath10k: restore QCA9880-AR1A (v1) detection - ath10k: Fix HOST capability QMI incompatibility - ath10k: Fix a NULL-ptr-deref bug in ath10k_usb_alloc_urb_from_pipe (CVE-2019-15099) - ath9k_hw: fix uninitialized variable data - Revert "Bluetooth: hci_ll: set operational frequency earlier" - Revert "dm crypt: use WQ_HIGHPRI for the IO and crypt workqueues" - md/raid10: prevent access of uninitialized resync_pages offset - mdio_bus: Fix init if CONFIG_RESET_CONTROLLER=n - [armel,armhf] 8904/1: skip nomap memblocks while finding the lowmem/ highmem boundary - [x86] insn: Fix awk regexp warnings - [x86] speculation: Fix incorrect MDS/TAA mitigation status - [x86] speculation: Fix redundant MDS mitigation message - nbd: prevent memory leak - [i386] stackframe: Repair 32-bit Xen PV - [i386] xen: Make xen_iret_crit_fixup() independent of frame layout - [i386] xen: Simplify ring check in xen_iret_crit_fixup() - [i386] doublefault: Fix stack canaries in the double fault handler - [i386] pti: Size initial_page_table correctly - [i386] cpu_entry_area: Add guard page for entry stack on 32bit - [i386] entry: Fix IRET exception - [i386] entry: Use %ss segment where required - [i386] entry: Move FIXUP_FRAME after pushing %fs in SAVE_ALL - [i386] entry: Unwind the ESPFIX stack earlier on exception entry - [i386] entry: Fix NMI vs ESPFIX - [i386] pti: Calculate the various PTI cpu_entry_area sizes correctly, make the CPU_ENTRY_AREA_PAGES assert precise - [i386] entry: Fix FIXUP_ESPFIX_STACK with user CR3 - futex: Prevent robust futex exit race - ALSA: usb-audio: Fix NULL dereference at parsing BADD - nfc: port100: handle command failure cleanly - media: vivid: Set vid_cap_streaming and vid_out_streaming to true - media: vivid: Fix wrong locking that causes race conditions on streaming stop (CVE-2019-18683) - media: usbvision: Fix invalid accesses after device disconnect - media: usbvision: Fix races among open, close, and disconnect - cpufreq: Add NULL checks to show() and store() methods of cpufreq - media: uvcvideo: Fix error path in control parsing failure - media: b2c2-flexcop-usb: add sanity checking (CVE-2019-15291) - media: cxusb: detect cxusb_ctrl_msg error in query - media: imon: invalid dereference in imon_touch_event - media: mceusb: fix out of bounds read in MCE receiver buffer - mm/slub.c: init_on_free=1 should wipe freelist ptr for bulk allocations - usbip: tools: fix fd leakage in the function of read_attr_usbip_status - usbip: Fix uninitialized symbol 'nents' in stub_recv_cmd_submit() - usb-serial: cp201x: support Mark-10 digital force gauge - USB: chaoskey: fix error case of a timeout - appledisplay: fix error handling in the scheduled work - USB: serial: mos7840: add USB ID to support Moxa UPort 2210 - USB: serial: mos7720: fix remote wakeup - USB: serial: mos7840: fix remote wakeup - USB: serial: option: add support for DW5821e with eSIM support - USB: serial: option: add support for Foxconn T77W968 LTE modules - [x86] staging: comedi: usbduxfast: usbduxfast_ai_cmdtest rounding error - [powerpc*] 64s: support nospectre_v2 cmdline option - [powerpc*] book3s64: Fix link stack flush on context switch (CVE-2019-18660) - [powerpc*] KVM: Book3S HV: Flush link stack on guest exit to host kernel https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.15 - io_uring: async workers should inherit the user creds - net: separate out the msghdr copy from ___sys_{send,recv}msg() - net: disallow ancillary data for __sys_{send,recv}msg_file() - XArray: Fix xas_next() with a single entry at 0 - [arm64] clk: meson: gxbb: let sar_adc_clk_div set the parent clock rate - [x86] thunderbolt: Read DP IN adapter first two dwords in one go - [x86] thunderbolt: Fix lockdep circular locking depedency warning - [x86] ASoC: compress: fix unsigned integer overflow check - [arm64,armel,armhf] reset: Fix memory leak in reset_control_array_put() - [armhf] clk: samsung: exynos542x: Move G3D subsystem clocks to its sub-CMU - [armel,armhf] ASoC: kirkwood: fix external clock probe defer - [armel,armhf] ASoC: kirkwood: fix device remove ordering - [armhf] clk: samsung: exynos5420: Preserve PLL configuration during suspend/resume - [x86] pinctrl: cherryview: Allocate IRQ chip dynamic - [armhf] soc: imx: gpc: fix initialiser format - ASoC: SOF: ipc: Fix memory leak in sof_set_get_large_ctrl_data (CVE-2019-18811) - [armhf] ASoC: ti: sdma-pcm: Add back the flags parameter for non standard dma names - [armhf] ASoC: rockchip: rockchip_max98090: Enable SHDN to fix headset detection - [arm64,armhf] clk: sunxi: Fix operator precedence in sunxi_divs_clk_setup - [armhf] clk: sunxi-ng: a80: fix the zero'ing of bits 16 and 18 - [armhf] dts: sun8i-a83t-tbs-a711: Fix WiFi resume from suspend - bpf: Allow narrow loads of bpf_sysctl fields with offset > 0 - bpf: Change size to u64 for bpf_map_{area_alloc, charge_init}() - [powerpc*] bpf: Fix tail call implementation - idr: Fix idr_get_next_ul race with idr_remove - idr: Fix integer overflow in idr_for_each_entry - idr: Fix idr_alloc_u32 on 32-bit systems - [amd64] ASoC: hdac_hda: fix race in device removal - [armhf] clk: ti: dra7-atl-clock: Remove ti_clk_add_alias call - [armhf] clk: ti: clkctrl: Fix failed to enable error with double udelay timeout - [armhf] net: fec: add missed clk_disable_unprepare in remove - netfilter: ipset: Fix nla_policies to fully support NL_VALIDATE_STRICT - bridge: ebtables: don't crash when using dnat target in output chains - netfilter: nf_tables: bogus EOPNOTSUPP on basechain update - netfilter: nf_tables_offload: skip EBUSY on chain update - stacktrace: Don't skip first entry on noncurrent tasks - can: peak_usb: report bus recovery as well - [armhf] can: c_can: D_CAN: c_can_chip_config(): perform a sofware reset on open - can: rx-offload: can_rx_offload_queue_tail(): fix error handling, avoid skb mem leak - can: rx-offload: can_rx_offload_offload_one(): do not increase the skb_queue beyond skb_queue_len_max - can: rx-offload: can_rx_offload_offload_one(): increment rx_fifo_errors on queue overflow or OOM - can: rx-offload: can_rx_offload_offload_one(): use ERR_PTR() to propagate error value in case of errors - can: rx-offload: can_rx_offload_irq_offload_timestamp(): continue on error - can: rx-offload: can_rx_offload_irq_offload_fifo(): continue on error - [armhf] can: flexcan: increase error counters if skb enqueueing via can_rx_offload_queue_sorted() fails - [x86] tsc: Respect tsc command line paraemeter for clocksource_tsc_early - nvme-rdma: fix a segmentation fault during module unload - nvme-multipath: fix crash in nvme_mpath_clear_ctrl_paths - [arm64] watchdog: meson: Fix the wrong value of left time - ALSA: hda: hdmi - add Tigerlake support - [amd64] ASoC: SOF: topology: Fix bytes control size checks - drm/amdgpu: dont schedule jobs while in reset - [arm64,armhf] net/mlx5e: Fix eswitch debug print of max fdb flow - net/mlx5e: Use correct enum to determine uplink port - drm/amdgpu: register gpu instance before fan boost feature enablment - drm/amdgpu: add warning for GRBM 1-cycle delay issue in gfx9 - [arm64,armhf] net: stmmac: gmac4: bitrev32 returns u32 - [arm64,armhf] net: stmmac: xgmac: bitrev32 returns u32 - [arm64,armhf] net: stmmac: xgmac: Fix TSA selection - [arm64,armhf] net: stmmac: xgmac: Disable Flow Control when 1 or more queues are in AV - ceph: return -EINVAL if given fsc mount option on kernel w/o support - mac80211: fix ieee80211_txq_setup_flows() failure path - mac80211: fix station inactive_time shortly after boot - block: drbd: remove a stray unlock in __drbd_send_protocol() - ice: fix potential infinite loop because loop counter being too small - iavf: initialize ITRN registers with correct values - [arm64,armel,armhf] usb: dwc2: use a longer core rest timeout in dwc2_core_reset() - [x86] staging: rtl8192e: fix potential use after free - staging: rtl8723bs: Drop ACPI device ids - staging: rtl8723bs: Add 024c:0525 to the list of SDIO device-ids - USB: serial: ftdi_sio: add device IDs for U-Blox C099-F9P - [x86] mei: bus: prefix device names on bus with the bus name - [x86] mei: me: add comet point V device id - [x86] thunderbolt: Power cycle the router if NVM authentication fails - xfrm: Fix memleak on xfrm state destroy - [x86] fpu: Don't cache access to fpu_fpregs_owner_ctx (CVE-2019-19602) - macvlan: schedule bc_work even if error - mdio_bus: don't use managed reset-controller - net: macb: add missed tasklet_kill - net: psample: fix skb_over_panic - net: sched: fix `tc -s class show` no bstats on class with nolock subqueues - openvswitch: fix flow command message size - sctp: Fix memory leak in sctp_sf_do_5_2_4_dupcook - slip: Fix use-after-free Read in slip_open - sctp: cache netns in sctp_ep_common - openvswitch: drop unneeded BUG_ON() in ovs_flow_cmd_build_info() - openvswitch: remove another BUG_ON() - net/tls: take into account that bpf_exec_tx_verdict() may free the record - net: skmsg: fix TLS 1.3 crash with full sk_msg - tipc: fix link name length check - ext4: add more paranoia checking in ext4_expand_extra_isize handling - HID: core: check whether Usage Page item is after Usage ID items - [x86] platform/x86: hp-wmi: Fix ACPI errors caused by too small buffer - [x86] platform/x86: hp-wmi: Fix ACPI errors caused by passing 0 as input size - [armhf] net: fec: fix clock count mis-match [ Ben Hutchings ] * [amd64] sound/soc/sof: Disable SND_SOC_SOF_ACPI, SND_SOC_SOF_{BAYTRAIL,BROADWELL}_SUPPORT (Closes: #945914) * [amd64] sound/soc/intel/boarss: Disable Broxton drivers again * [i386] sound/soc: Enable same SOF drivers as on amd64 * Bump ABI to 3 -- Salvatore Bonaccorso Sat, 07 Dec 2019 13:24:06 +0100 linux (5.3.9-3) unstable; urgency=medium * [arm64,armhf,powerpc*,s390x] KVM: Add more exports to ABI ignore list (fixes FTBFS) -- Ben Hutchings Tue, 19 Nov 2019 01:43:33 +0000 linux (5.3.9-2) unstable; urgency=medium * [x86] Add mitigation for TSX Asynchronous Abort (CVE-2019-11135): - x86/msr: Add the IA32_TSX_CTRL MSR - x86/cpu: Add a helper function x86_read_arch_cap_msr() - x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default - x86/speculation/taa: Add mitigation for TSX Async Abort - x86/speculation/taa: Add sysfs reporting for TSX Async Abort - kvm/x86: Export MDS_NO=0 to guests when TSX is enabled - x86/tsx: Add "auto" option to the tsx= cmdline parameter - x86/speculation/taa: Add documentation for TSX Async Abort - x86/tsx: Add config options to set tsx=on|off|auto - x86/speculation/taa: Fix printing of TAA_MSG_SMT on IBRS_ALL CPUs TSX is now disabled by default; see Documentation/admin-guide/hw-vuln/tsx_async_abort.rst * [x86] KVM: Add mitigation for Machine Check Error on Page Size Change (aka iTLB multi-hit, CVE-2018-12207): - kvm: x86, powerpc: do not allow clearing largepages debugfs entry - x86/bugs: Add ITLB_MULTIHIT bug infrastructure - x86/cpu: Add Tremont to the cpu vulnerability whitelist - cpu/speculation: Uninline and export CPU mitigations helpers - kvm: mmu: ITLB_MULTIHIT mitigation - kvm: Add helper function for creating VM worker threads - kvm: x86: mmu: Recovery of shattered NX large pages - Documentation: Add ITLB_MULTIHIT documentation * [x86] i915: Mitigate local privilege escalation on gen9 (CVE-2019-0155): - drm/i915: Rename gen7 cmdparser tables - drm/i915: Disable Secure Batches for gen6+ - drm/i915: Remove Master tables from cmdparser - drm/i915: Add support for mandatory cmdparsing - drm/i915: Support ro ppgtt mapped cmdparser shadow buffers - drm/i915: Allow parsing of unsized batches - drm/i915: Add gen9 BCS cmdparsing - drm/i915/cmdparser: Use explicit goto for error paths - drm/i915/cmdparser: Add support for backward jumps - drm/i915/cmdparser: Ignore Length operands during command matching - drm/i915/cmdparser: Fix jump whitelist clearing * [x86] i915: Mitigate local denial-of-service on gen8/gen9 (CVE-2019-0154): - drm/i915: Lower RM timeout to avoid DSI hard hangs - drm/i915/gen8+: Add RC6 CTX corruption WA -- Ben Hutchings Tue, 12 Nov 2019 15:44:08 +0000 linux (5.3.9-1) unstable; urgency=medium * New version hopefully closes: #942881 * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.8 - drm: Free the writeback_job when it with an empty fb - drm: Clear the fence pointer when writeback job signaled - [armhf] clk: ti: dra7: Fix mcasp8 clock bits - [armhf] dts: Fix wrong clocks for dra7 mcasp - nvme-pci: Fix a race in controller removal - scsi: ufs: skip shutdown if hba is not powered - scsi: megaraid: disable device when probe failed after enabled device - scsi: qla2xxx: Silence fwdump template message - scsi: qla2xxx: Fix unbound sleep in fcport delete path. - scsi: qla2xxx: Fix stale mem access on driver unload - scsi: qla2xxx: Fix N2N link reset - scsi: qla2xxx: Fix N2N link up fail - [armhf] dts: Fix gpio0 flags for am335x-icev2 - [armhf] OMAP2+: Fix missing reset done flag for am3 and am43 - [armhf] OMAP2+: Add missing LCDC midlemode for am335x - [armhf] OMAP2+: Fix warnings with broken omap2_set_init_voltage() - nvme-tcp: fix wrong stop condition in io_work - nvme-pci: Save PCI state before putting drive into deepest state - nvme: fix an error code in nvme_init_subsystem() - nvme-rdma: Fix max_hw_sectors calculation - nvme: Added QUIRKs for ADATA XPG SX8200 Pro 512GB - nvme: Add quirk for Kingston NVME SSD running FW E8FK11.T - nvme-rdma: fix possible use-after-free in connect timeout - blk-mq: honor IO scheduler for multiqueue devices - xen/efi: Set nonblocking callbacks - loop: change queue block size to match when using DIO - nl80211: fix null pointer dereference - mac80211: fix txq null pointer dereference - netfilter: nft_connlimit: disable bh on garbage collection - [armhf,arm64] net: stmmac: xgmac: Not all Unicast addresses may be available - [armhf,arm64] net: stmmac: dwmac4: Always update the MAC Hash Filter - [armhf,arm64] net: stmmac: Correctly take timestamp for PTPv2 - [armhf,arm64] net: stmmac: Do not stop PHY if WoL is enabled - drm/amdgpu: fix multiple memory leaks in acp_hw_init - drm/amd/display: memory leak - [mips*el/loongson-*] Fix the link time qualifier of 'serial_exit()' - [arm64] net: hisilicon: Fix usage of uninitialized variable in function mdio_sc_cfg_reg_write() - [armhf,arm64] net: stmmac: Avoid deadlock on suspend/resume - [s390x] mm: fix -Wunused-but-set-variable warnings - r8152: Set macpassthru in reset_resume callback - net: phy: allow for reset line to be tied to a sleepy GPIO controller - net: phy: fix write to mii-ctrl1000 register - vfs: Convert filldir[64]() from __put_user() to unsafe_put_user() - elf: don't use MAP_FIXED_NOREPLACE for elf executable mappings (regression in 4.17) - vfs: Make filldir[64]() verify the directory entry filename is valid - uaccess: implement a proper unsafe_copy_to_user() and switch filldir over to it - vfs: filldir[64]: remove WARN_ON_ONCE() for bad directory entries - net_sched: fix backward compatibility for TCA_KIND (regression in 5.3.4) - net_sched: fix backward compatibility for TCA_ACT_KIND (regression in 5.3.4) - libata/ahci: Fix PCS quirk application (regression in 5.3.4) - md/raid0: fix warning message for parameter default_layout - Revert "drm/radeon: Fix EEH during kexec" (regression in 5.3.5) - ocfs2: fix panic due to ocfs2_wq is null - nvme-pci: Set the prp2 correctly when using more than 4k page - ipv4: fix race condition between route lookup and invalidation - ipv4: Return -ENETUNREACH if we can't create route but saddr is valid - net: avoid potential infinite loop in tc_ctl_action() - [hppa,m68k] net: i82596: fix dma_alloc_attr for sni_82596 - net: ipv6: fix listify ip6_rcv_finish in case of forwarding - [armhf,arm64] net: stmmac: disable/enable ptp_ref_clk in suspend/resume flow - rxrpc: Fix possible NULL pointer access in ICMP handling - sched: etf: Fix ordering of packets with same txtime - sctp: change sctp_prot .no_autobind with true - net: aquantia: temperature retrieval fix - net: aquantia: when cleaning hw cache it should be toggled - net: aquantia: do not pass lro session with invalid tcp checksum - net: aquantia: correctly handle macvlan and multicast coexistence - net: phy: micrel: Discern KSZ8051 and KSZ8795 PHYs - net: phy: micrel: Update KSZ87xx PHY name - net: avoid errors when trying to pop MLPS header on non-MPLS packets - net/sched: fix corrupted L2 header with MPLS 'push' and 'pop' actions - netdevsim: Fix error handling in nsim_fib_init and nsim_fib_exit - net: ethernet: broadcom: have drivers select DIMLIB as needed - net: phy: Fix "link partner" information disappear issue - rxrpc: use rcu protection while reading sk->sk_user_data - io_uring: fix bad inflight accounting for SETUP_IOPOLL|SETUP_SQTHREAD - io_uring: Fix corrupted user_data - USB: legousbtower: fix memleak on disconnect - ALSA: hda/realtek - Add support for ALC711 - [x86] ALSA: hda/realtek - Enable headset mic on Asus MJ401TA - ALSA: usb-audio: Disable quirks for BOSS Katana amplifiers - ALSA: hda - Force runtime PM on Nvidia HDMI codecs - USB: serial: ti_usb_3410_5052: fix port-close races - USB: ldusb: fix memleak on disconnect - USB: usblp: fix use-after-free on disconnect - USB: ldusb: fix read info leaks - binder: Don't modify VMA bounds in ->mmap handler - [mips*] tlbex: Fix build_restore_pagemask KScratch restore - staging: wlan-ng: fix exit return when sme->key_idx >= NUM_WEPKEYS - [s390x] scsi: zfcp: fix reaction on bit error threshold notification - scsi: sd: Ignore a failure to sync cache due to lack of authorization - scsi: core: save/restore command resid for error handling - scsi: core: try to get module before removing device - scsi: ch: Make it possible to open a ch device multiple times again - Revert "Input: elantech - enable SMBus on new (2018+) systems" (regression in 5.3) - Input: synaptics-rmi4 - avoid processing unknown IRQs - ACPI: CPPC: Set pcc_data[pcc_ss_id] to NULL in acpi_cppc_processor_exit() - ACPI: NFIT: Fix unlock on error in scrub_show() - iwlwifi: pcie: change qu with jf devices to use qu configuration - cfg80211: wext: avoid copying malformed SSIDs (CVE-2019-17133) - mac80211: Reject malformed SSID elements - drm/edid: Add 6 bpc quirk for SDC panel in Lenovo G50 - drm/ttm: Restore ttm prefaulting - [armhf,arm64] drm/panfrost: Handle resetting on timeout better - drm/amdgpu: Bail earlier when amdgpu.cik_/si_support is not set to 1 - drm/amdgpu/sdma5: fix mask value of POLL_REGMEM packet for pipe sync - [x86] drm/i915/userptr: Never allow userptr into the mappable GGTT - [x86] drm/i915: Favor last VBT child device with conflicting AUX ch/DDC pin - drm/amdgpu/vce: fix allocation size in enc ring test - drm/amdgpu/vcn: fix allocation size in enc ring test - drm/amdgpu/uvd6: fix allocation size in enc ring test (v2) - drm/amdgpu/uvd7: fix allocation size in enc ring test (v2) - drm/amdgpu: user pages array memory leak fix - drivers/base/memory.c: don't access uninitialized memmaps in soft_offline_page_store() - fs/proc/page.c: don't access uninitialized memmaps in fs/proc/page.c - io_uring: Fix broken links with offloading - io_uring: Fix race for sqes with userspace - io_uring: used cached copies of sq->dropped and cq->overflow - [armhf] mmc: sdhci-omap: Fix Tuning procedure for temperatures < -20C - mm/memory-failure.c: don't access uninitialized memmaps in memory_failure() - mm/slub: fix a deadlock in show_slab_objects() - mm/page_owner: don't access uninitialized memmaps when reading /proc/pagetypeinfo - mm/memunmap: don't access uninitialized memmap in memunmap_pages() - mm: memcg/slab: fix panic in __free_slab() caused by premature memcg pointer release - mm, compaction: fix wrong pfn handling in __reset_isolation_pfn() - mm: memcg: get number of pages on the LRU list in memcgroup base on lru_zone_size - mm: memblock: do not enforce current limit for memblock_phys* family - hugetlbfs: don't access uninitialized memmaps in pfn_range_valid_gigantic() - mm/memory-failure: poison read receives SIGKILL instead of SIGBUS if mmaped more than once - zram: fix race between backing_dev_show and backing_dev_store - [s390x] zcrypt: fix memleak at release - [s390x] kaslr: add support for R_390_GLOB_DAT relocation type - lib/vdso: Make clock_getres() POSIX compliant again - [hppa] Fix vmap memory leak in ioremap()/iounmap() - [arm64] KVM: Trap VM ops when ARM64_WORKAROUND_CAVIUM_TX2_219_TVM is set - [arm64] Avoid Cavium TX2 erratum 219 when switching TTBR - [arm64] Enable workaround for Cavium TX2 erratum 219 when running SMT - [arm64] Allow CAVIUM_TX2_ERRATUM_219 to be selected - CIFS: avoid using MID 0xFFFF - cifs: Fix missed free operations - CIFS: Fix use after free of file info structures - perf/aux: Fix AUX output stopping - tracing: Fix race in perf_trace_buf initialization - fs/dax: Fix pmd vs pte conflict detection - dm cache: fix bugs when a GFP_NOWAIT allocation fails - [riscv64] irqchip/sifive-plic: Switch to fasteoi flow - [amd64] boot: Make level2_kernel_pgt pages invalid outside kernel area - [x86] apic/x2apic: Fix a NULL pointer deref when handling a dying cpu - [x86] hyperv: Make vapic support x2apic mode - [x86] pinctrl: cherryview: restore Strago DMI workaround for all versions - [arm64] pinctrl: armada-37xx: fix control of pins 32 and up - [arm64] pinctrl: armada-37xx: swap polarity on LED group - btrfs: block-group: Fix a memory leak due to missing btrfs_put_block_group() - Btrfs: add missing extents release on file extent cluster relocation error - btrfs: don't needlessly create extent-refs kernel thread - Btrfs: fix qgroup double free after failure to reserve metadata for delalloc - Btrfs: check for the full sync flag while holding the inode lock during fsync - btrfs: tracepoints: Fix wrong parameter order for qgroup events - btrfs: tracepoints: Fix bad entry members of qgroup events - [ppc64*] KVM: Book3S HV: XIVE: Ensure VP isn't already in use - memstick: jmb38x_ms: Fix an error handling path in 'jmb38x_ms_probe()' - cpufreq: Avoid cpufreq_suspend() deadlock on system shutdown - ceph: just skip unrecognized info in ceph_reply_info_extra - xen/netback: fix error path of xenvif_connect_data() - PCI: PM: Fix pci_power_up() - opp: of: drop incorrect lockdep_assert_held() - of: reserved_mem: add missing of_node_put() for proper ref-counting - blk-rq-qos: fix first node deletion of rq_qos_del() https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.9 - io_uring: fix up O_NONBLOCK handling for sockets - dm snapshot: introduce account_start_copy() and account_end_copy() - dm snapshot: rework COW throttling to fix deadlock - Btrfs: fix inode cache block reserve leak on failure to allocate data space - btrfs: qgroup: Always free PREALLOC META reserve in btrfs_delalloc_release_extents() - iio: fix center temperature of bmc150-accel-core - libsubcmd: Make _FORTIFY_SOURCE defines dependent on the feature - perf tests: Avoid raising SEGV using an obvious NULL dereference - perf map: Fix overlapped map handling - perf script brstackinsn: Fix recovery from LBR/binary mismatch - perf jevents: Fix period for Intel fixed counters - perf tools: Propagate get_cpuid() error - perf annotate: Propagate perf_env__arch() error - perf annotate: Fix the signedness of failure returns - perf annotate: Propagate the symbol__annotate() error return - perf annotate: Fix arch specific ->init() failure errors - perf annotate: Return appropriate error code for allocation failures - perf annotate: Don't return -1 for error when doing BPF disassembly - staging: rtl8188eu: fix null dereference when kzalloc fails - RDMA/hfi1: Prevent memory leak in sdma_init - RDMA/iw_cxgb4: fix SRQ access from dump_qp() - RDMA/iwcm: Fix a lock inversion issue - [x86] HID: hyperv: Use in-place iterator API in the channel callback - nfs: Fix nfsi->nrequests count error on nfs_inode_remove_request - [arm64] cpufeature: Effectively expose FRINT capability to userspace - [arm64] Fix incorrect irqflag restore for priority masking for compat - [arm64] ftrace: Ensure synchronisation in PLT setup for Neoverse-N1 #1542419 - [riscv64] serial/sifive: select SERIAL_EARLYCON - RDMA/core: Fix an error handling path in 'res_get_common_doit()' - RDMA/cm: Fix memory leak in cm_add/remove_one - RDMA/nldev: Reshuffle the code to avoid need to rebind QP in error path - RDMA/mlx5: Do not allow rereg of a ODP MR - RDMA/mlx5: Order num_pending_prefetch properly with synchronize_srcu - RDMA/mlx5: Add missing synchronize_srcu() for MW cases - [arm64] gpio: max77620: Use correct unit for debounce times - fs: cifs: mute -Wunused-const-variable message - [arm64] vdso32: Fix broken compat vDSO build warnings - [arm64] vdso32: Detect binutils support for dmb ishld - serial: mctrl_gpio: Check for NULL pointer - [armhf] serial: 8250_omap: Fix gpio check for auto RTS/CTS - [arm64] vdso32: Don't use KBUILD_CPPFLAGS unconditionally - efi/cper: Fix endianness of PCIe class code - [x86] efi: Do not clean dummy variable in kexec path - [mips*] include: Mark __cmpxchg as __always_inline - [riscv64] avoid kernel hangs when trapped in BUG() - [riscv64] avoid sending a SIGTRAP to a user thread trapped in WARN() - [riscv64] Correct the handling of unexpected ebreak in do_trap_break() - [x86] xen: Return from panic notifier - ocfs2: clear zero in unaligned direct IO - fs: ocfs2: fix possible null-pointer dereferences in ocfs2_xa_prepare_entry() - fs: ocfs2: fix a possible null-pointer dereference in ocfs2_write_end_nolock() - fs: ocfs2: fix a possible null-pointer dereference in ocfs2_info_scan_inode_alloc() - btrfs: silence maybe-uninitialized warning in clone_range - [arm64] armv8_deprecated: Checking return value for memory allocation - [x86] cpu: Add Comet Lake to the Intel CPU models header - sched/fair: Scale bandwidth quota and period without losing quota/period ratio precision - sched/vtime: Fix guest/system mis-accounting on task switch - perf/core: Rework memory accounting in perf_mmap() - perf/core: Fix corner case in perf_rotate_context() - [x86] perf/amd: Change/fix NMI latency mitigation to use a timestamp - drm/amdgpu: fix memory leak - [mips*] include: Mark __xchg as __always_inline - [mips*] fw: sni: Fix out of bounds init of o32 stack - [s390x] cio: fix virtio-ccw DMA without PV - [x86] virt: vbox: fix memory leak in hgcm_call_preprocess_linaddr - nbd: fix possible sysfs duplicate warning - NFSv4: Fix leak of clp->cl_acceptor string - SUNRPC: fix race to sk_err after xs_error_report - [s390x] uaccess: avoid (false positive) compiler warnings - tracing: Initialize iter->seq after zeroing in tracing_read_pipe() - perf annotate: Fix multiple memory and file descriptor leaks - perf/aux: Fix tracking of auxiliary trace buffer allocation - USB: legousbtower: fix a signedness bug in tower_probe() - nbd: verify socket is supported during setup - [arm64] dts: qcom: Add Lenovo Miix 630 - [arm64] dts: qcom: Add HP Envy x2 - [arm64] dts: qcom: Add Asus NovaGo TP370QL - rtw88: Fix misuse of GENMASK macro - [s390x] pci: fix MSI message data - thunderbolt: Correct path indices for PCIe tunnel - thunderbolt: Use 32-bit writes when writing ring producer/consumer - fuse: flush dirty data/metadata before non-truncate setattr - fuse: truncate pending writes on O_TRUNC - ALSA: bebob: Fix prototype of helper function to return negative value - ALSA: timer: Fix mutex deadlock at releasing card - ALSA: hda/realtek - Fix 2 front mics of codec 0x623 - ALSA: hda/realtek - Add support for ALC623 - ath10k: fix latency issue for QCA988x - UAS: Revert commit 3ae62a42090f ("UAS: fix alignment of scatter/gather segments") (regression in 5.2) - nl80211: fix validation of mesh path nexthop - USB: gadget: Reject endpoints with 0 maxpacket value - usb-storage: Revert commit 747668dbc061 ("usb-storage: Set virt_boundary_mask to avoid SG overflows") (regression in 5.2) - USB: ldusb: fix ring-buffer locking - USB: ldusb: fix control-message timeout - usb: xhci: fix Immediate Data Transfer endianness - USB: serial: whiteheat: fix potential slab corruption - USB: serial: whiteheat: fix line-speed endianness - xhci: Fix use-after-free regression in xhci clear hub TT implementation - scsi: qla2xxx: Fix partial flash write of MBI - scsi: target: cxgbit: Fix cxgbit_fw4_ack() - [x86] HID: i2c-hid: add Trekstor Primebook C11B to descriptor override - HID: Fix assumption that devices have inputs - HID: fix error message in hid_open_report() - HID: logitech-hidpp: split g920_get_config() - HID: logitech-hidpp: rework device validation - HID: logitech-hidpp: do all FF cleanup in hidpp_ff_destroy() - [s390x] unwind: fix mixing regs and sp - [s390x] cmm: fix information leak in cmm_timeout_handler() - [s390x] idle: fix cpu idle time calculation - IB/hfi1: Avoid excessive retry for TID RDMA READ request - [arm64] Ensure VM_WRITE|VM_SHARED ptes are clean by default - [arm64] cpufeature: Enable Qualcomm Falkor/Kryo errata 1003 - virtio_ring: fix stalls for packed rings - rtlwifi: rtl_pci: Fix problem of too small skb->len - rtlwifi: Fix potential overflow on P2P code - [x86] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is active - [arm64] dmaengine: qcom: bam_dma: Fix resource leak - [arm64] dmaengine: tegra210-adma: fix transfer failure - [armhf] dmaengine: imx-sdma: fix size check for sdma script_number - [armhf] dmaengine: cppi41: Fix cppi41_dma_prep_slave_sg() when idle - drm/amdgpu/gmc10: properly set BANK_SELECT and FRAGMENT_SIZE - [x86] drm/i915: Fix PCH reference clock for FDI on HSW/BDW - drm/amdgpu/gfx10: update gfx golden settings - drm/amdgpu/powerplay/vega10: allow undervolting in p7 - drm/amdgpu: Fix SDMA hang when performing VKexample test - NFS: Fix an RCU lock leak in nfs4_refresh_delegation_stateid() - io_uring: ensure we clear io_kiocb->result before each issue - [x86] iommu/vt-d: Fix panic after kexec -p for kdump - batman-adv: Avoid free/alloc race when handling OGM buffer - llc: fix sk_buff leak in llc_sap_state_process() - llc: fix sk_buff leak in llc_conn_service() - rxrpc: Fix call ref leak - rxrpc: rxrpc_peer needs to hold a ref on the rxrpc_local record - rxrpc: Fix trace-after-put looking at the put peer record - NFC: pn533: fix use-after-free and memleaks - bonding: fix potential NULL deref in bond_update_slave_arr - netfilter: conntrack: avoid possible false sharing - net: usb: sr9800: fix uninitialized local variable - sch_netem: fix rcu splat in netem_enqueue() - net: sched: sch_sfb: don't call qdisc_put() while holding tree lock - iwlwifi: exclude GEO SAR support for 3168 - sched/fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices - ALSA: usb-audio: DSD auto-detection for Playback Designs - ALSA: usb-audio: Update DSD support quirks for Oppo and Rotel - ALSA: usb-audio: Add DSD support for Gustard U16/X26 USB Interface - RDMA/mlx5: Use irq xarray locking for mkey_table - sched/fair: Fix -Wunused-but-set-variable warnings - [powerpc*] powernv: Fix CPU idle to be called with IRQs disabled - Revert "ALSA: hda: Flush interrupts on disabling" (regression in 5.3.4) [ Ben Hutchings ] * debian/bin/gencontrol_signed.py: Fix code style error * debian/bin/gencontrol.py: Skip linux-perf lintian-overrides if we won't build it * debian/bin/gencontrol{,_signed}.py: Use vars parameter instead of self.vars * debian/bin/gencontrol{,_signed}.py: Use %(name)s to format template vars * debian/.gitignore, debian/rules: Generalise patterns for generated files * gencontrol: Generalise substitution of debhelper config template * Add maint scripts to meta-packages to convert doc directories to symlinks (Closes: #942861) * debian/lib/python/debian_linux/utils.py: Use 'with' to manage file handles * debian/lib/python/debian_linux/utils.py: Store file mode for templates * Copy template file permissions to output files * debian/templates/headers.postinst.in: Set executable for consistency * debian/README.source: Document code signing and how to test it * debian/tests/control: Mark python test as superficial * [arm64] linux-headers: Disable check for a 32-bit compiler (Closes: #943953): - arm64: Kconfig: Make CONFIG_COMPAT_VDSO a proper Kconfig option - debian/bin/gencontrol.py: Optionally define $(CROSS_COMPILE_COMPAT) make variable - Enable COMPAT_VDSO and set $(CROSS_COMPILE_COMPAT) instead of setting CROSS_COMPILE_COMPAT_VDSO * crypto: Enable PKCS8_PRIVATE_KEY_PARSER as module (Closes: #924705) * Bump ABI to 2 * [arm64] atmel_mxt_ts: Disable TOUCHSCREEN_ATMEL_MXT_T37 to avoid V4L dependency * random: try to actively add entropy rather than passively wait for it [ Bastian Blank ] * [amd64/cloud-amd64] Re-enable RTC drivers. (closes: #931341) [ Thomas W ] * [x86] Enable missing modules and setting: CONFIG_HUAWEI_WMI CONFIG_I2C_MULTI_INSTANTIATE CONFIG_INTEL_TURBO_MAX_3 [ Alper Nebi Yasak ] * [arm64] udeb: Add i2c-rk3x to i2c-modules * [arm64,armhf] udeb: Add rockchip-io-domain to kernel-image * udeb: Add atmel_mxt_ts to input-modules [ Noah Meyerhans ] * drivers/net/ethernet/amazon: Backport driver fixes from v5.4-rc5 [ Niv Sardi ] * KEYS: Make use of platform keyring for module signature verify (closes: #935945) -- Ben Hutchings Sat, 09 Nov 2019 15:42:49 +0000 linux (5.3.7-1) unstable; urgency=medium * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.3 https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.4 - mISDN: enforce CAP_NET_RAW for raw sockets (CVE-2019-17055) - appletalk: enforce CAP_NET_RAW for raw sockets (CVE-2019-17054) - ax25: enforce CAP_NET_RAW for raw sockets (CVE-2019-17052) - ieee802154: enforce CAP_NET_RAW for raw sockets (CVE-2019-17053) - nfc: enforce CAP_NET_RAW for raw sockets (CVE-2019-17056) https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.5 https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.6 - nl80211: validate beacon head (CVE-2019-16746) https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.7 [ Aurelien Jarno ] * [riscv64] Enable SOC_SIFIVE. Do not select CLK_SIFIVE, CLK_SIFIVE_FU540_PRCI, SIFIVE_PLIC, SERIAL_SIFIVE and SERIAL_SIFIVE_CONSOLE as they are selected by SOC_SIFIVE. * [riscv64] Install DTBS using dtbs_install target. * [riscv64] Enable SPI_SIFIVE. * [riscv64] Enable SERIAL_EARLYCON_RISCV_SBI. * [riscv64] Enable MMC, MMC_SPI. * [riscv64] udeb: Add mmc-core-modules and mmc-modules. * [riscv64] Fix memblock reservation for device tree blob. * [riscv64] Clear load reservations while restoring hart contexts. [ Ben Hutchings ] * [mips*] Revert "Only define MAX_PHYSMEM_BITS on Loongson-3" * KEYS: Re-enable SECONDARY_TRUSTED_KEYRING, dropped in 5.2.6-1 by mis-merge (Closes: #935945) [ John Paul Adrian Glaubitz ] * [m68k] Enable CONFIG_CRYPTO_MANAGER_DISABLE_TESTS * [hppa] Enable CONFIG_CRYPTO_MANAGER_DISABLE_TESTS * [sh4] Enable CONFIG_CRYPTO_MANAGER_DISABLE_TESTS [ Salvatore Bonaccorso ] * RDMA/cxgb4: Do not dma memory off of the stack (CVE-2019-17075) * ath6kl: fix a NULL-ptr-deref bug in ath6kl_usb_alloc_urb_from_pipe() (CVE-2019-15098) [ Romain Perier ] * [armel/rpi] Enable CONFIG_BRCMFMAC_SDIO (Closes: #940530) [ Héctor Orón Martínez ] * [x86] Enable ASoC: SOF sound driver (Closes: #940726) -- Salvatore Bonaccorso Sun, 20 Oct 2019 00:56:32 +0200 linux (5.3.2-1~exp1) experimental; urgency=medium * New upstream release: https://kernelnewbies.org/Linux_5.3 - [armhf] select the dma-noncoherent symbols for all swiotlb builds (fixes FTBFS) * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.1 https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.2 [ Ben Hutchings ] * [hppa,sparc64] udeb: Delete osst from scsi-modules (fixes FTBFS) * Compile with gcc-9 on all architectures * Set KCFLAGS make variable instead of CFLAGS_{KERNEL,MODULE} * linux-image-dbg: Delete ./ from source file names in debug info * debian/rules: Make maintainerclean delete (almost) everything clean does * debian/rules: Make maintainerclean delete everything gencontrol.py creates * debian/.gitignore: Synchronise some patterns with clean target * Add the metapackages previously built by src:linux-latest: - Add template and NEWS files from linux-latest - Rename added templates to be consistent with existing templates - Fix some inconsistencies in metapackage templates - Define pkg.linux.nometa build profile to exclude the metapackages - Build the metapackages by default (Closes: #583849, #941042) - Make linux-perf an arch-dependent package - Require metapackage dependencies to be the same version, and link doc dirs [ Uwe Kleine-König ] * [arm64] enable I2C_QCOM_GENI for Lenovo C630 -- Ben Hutchings Wed, 02 Oct 2019 05:31:27 +0100 linux (5.3~rc5-1~exp2) experimental; urgency=medium * tools/perf: pmu-events: Fix reproducibility * Fix FTBFS: - Update "kbuild: Make the toolchain variables easily overwritable" for 5.3 - udeb: Make nic-wireless-modules depend on crypto-modules * debian/control: Remove build profile qual for rsync, needed for headers_install * debian/changelog: Move older entries to changelog.old -- Ben Hutchings Sun, 25 Aug 2019 16:28:41 +0100 linux (5.3~rc5-1~exp1) experimental; urgency=medium * New upstream release candidate [ Ben Hutchings ] * aufs: Update support patchset to aufs5.x-rcN 20190805 * [rt] Disable until it is updated for 5.3 or later * [powerpcspe] Remove all support for powerpcspe, which is dead upstream * linux-headers: Change per-flavour Makefile to match upstream out-of-tree builds * debian/bin/genorig.py: Import debian.deb822 instead of deprecated deb822 * [arm64] Use armhf cross-compiler for building compat vDSO * Documentation: Fix broken link to CIPSO draft [ Lubomir Rintel ] * udeb: input-modules: Add OLPC AP-SP keyboard * [armhf] Add camera, EC and battery drivers for OLPC XO-1.75 laptop. -- Ben Hutchings Sat, 24 Aug 2019 19:07:56 +0100 linux (5.2.17-1) unstable; urgency=medium * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.2.10 - KEYS: trusted: allow module init if TPM is inactive or deactivated - seq_file: fix problem when seeking mid-record - mm/hmm: fix bad subpage pointer in try_to_unmap_one - mm: mempolicy: make the behavior consistent when MPOL_MF_MOVE* and MPOL_MF_STRICT were specified - mm: mempolicy: handle vma with unmovable pages mapped correctly in mbind - mm/z3fold.c: fix z3fold_destroy_pool() ordering - mm/z3fold.c: fix z3fold_destroy_pool() race condition - mm/memcontrol.c: fix use after free in mem_cgroup_iter() - mm/usercopy: use memory range to be accessed for wraparound check - mm, vmscan: do not special-case slab reclaim when watermarks are boosted - [armhf,arm64] cpufreq: schedutil: Don't skip freq update when limits change - drm/amdgpu: fix gfx9 soft recovery - drm/nouveau: Only recalculate PBN/VCPI on mode/connector changes - [arm64] ftrace: Ensure module ftrace trampoline is coherent with I-side - [x86] ALSA: hda/realtek - Add quirk for HP Envy x360 - ALSA: usb-audio: Fix a stack buffer overflow bug in check_input_term (CVE-2019-15118) - ALSA: usb-audio: Fix an OOB bug in parse_audio_mixer_unit (CVE-2019-15117) - [x86] ALSA: hda - Apply workaround for another AMD chip 1022:1487 - ALSA: hda - Fix a memory leak bug - ALSA: hda - Add a generic reboot_notify - ALSA: hda - Let all conexant codec enter D3 when rebooting - HID: holtek: test for sanity of intfdata - HID: hiddev: avoid opening a disconnected device - HID: hiddev: do cleanup in failure of opening a device - Input: kbtab - sanity check for endpoint type - Input: iforce - add sanity checks - net: usb: pegasus: fix improper read if get_registers() fail - bpf: fix access to skb_shared_info->gso_segs - netfilter: ebtables: also count base chain policies - [riscv64] Correct the initialized flow of FP register - [riscv64] Make __fstate_clean() work correctly. - [armhf] Revert "i2c: imx: improve the error handling in i2c_imx_dma_request()" - blk-mq: move cancel of requeue_work to the front of blk_exit_queue - io_uring: fix manual setup of iov_iter for fixed buffers - [arm64] RDMA/hns: Fix sg offset non-zero issue - IB/mlx5: Replace kfree with kvfree - dma-mapping: check pfn validity in dma_common_{mmap,get_sgtable} - [x87] platform: intel_pmc_core: Add ICL-NNPI support to PMC Core - mm/hmm: always return EBUSY for invalid ranges in hmm_range_{fault,snapshot} - [armhf,arm64] irqchip/gic-v3-its: Free unused vpt_page when alloc vpe table fail - [armhf] irqchip/irq-imx-gpcv2: Forward irq type to parent - f2fs: fix to read source block before invalidating it - tools perf beauty: Fix usbdevfs_ioctl table generator to handle _IOC() - perf header: Fix divide by zero error if f_header.attr_size==0 - perf header: Fix use of unitialized value warning - RDMA/qedr: Fix the hca_type and hca_rev returned in device attributes - ALSA: pcm: fix lost wakeup event scenarios in snd_pcm_drain - libata: zpodd: Fix small read overflow in zpodd_get_mech_type() - Btrfs: fix deadlock between fiemap and transaction commits - scsi: hpsa: correct scsi command status issue after reset - scsi: qla2xxx: Fix possible fcport null-pointer dereferences - drm/amdkfd: Fix byte align on VegaM - drm/amd/powerplay: fix null pointer dereference around dpm state relates - drm/amdgpu: fix error handling in amdgpu_cs_process_fence_dep - drm/amdgpu: fix a potential information leaking bug - ata: libahci: do not complain in case of deferred probe - [riscv64] Fix perf record without libelf support - [arm64] Lower priority mask for GIC_PRIO_IRQON - [arm64] unwind: Prohibit probing on return_address() - IB/core: Add mitigation for Spectre V1 (CVE-2017-5753) - IB/mlx5: Fix MR registration flow to use UMR properly - RDMA/restrack: Track driver QP types in resource tracker - IB/mad: Fix use-after-free in ib mad completion handling - RDMA/mlx5: Release locks during notifier unregister - [arm64] drm: msm: Fix add_gpu_components - [arm64] RDMA/hns: Fix error return code in hns_roce_v1_rsv_lp_qp() - [armhf] drm/exynos: fix missing decrement of retry counter - [arm64] kprobes: Recover pstate.D in single-step exception handler - [arm64] Make debug exception handlers visible from RCU - Revert "kmemleak: allow to coexist with fault injection" - ocfs2: remove set but not used variable 'last_hash' - page flags: prioritize kasan bits over last-cpuid - asm-generic: fix -Wtype-limits compiler warnings - tpm: tpm_ibm_vtpm: Fix unallocated banks - [arm64] KVM: regmap: Fix unexpected switch fall-through - [x86] staging: comedi: dt3000: Fix signed integer overflow 'divider * base' - [x86] staging: comedi: dt3000: Fix rounding up of timer divisor - USB: core: Fix races in character device registration and deregistraion - usb: cdc-acm: make sure a refcount is taken early enough - USB: CDC: fix sanity checks in CDC union parser - USB: serial: option: add D-Link DWM-222 device ID - USB: serial: option: Add support for ZTE MF871A - USB: serial: option: add the BroadMobi BM818 card - USB: serial: option: Add Motorola modem UARTs - usb: setup authorized_default attributes using usb_bus_notify - netfilter: conntrack: Use consistent ct id hash calculation - iwlwifi: Add support for SAR South Korea limitation - Input: psmouse - fix build error of multiple definition - bnx2x: Fix VF's VLAN reconfiguration in reload. - bonding: Add vlan tx offload to hw_enc_features - [armhf,arm64] net: dsa: Check existence of .port_mdb_add callback before calling it - net/mlx4_en: fix a memory leak bug - net/packet: fix race in tpacket_snd() - net: sched: sch_taprio: fix memleak in error path for sched list parse - sctp: fix memleak in sctp_send_reset_streams - sctp: fix the transport error_count check - team: Add vlan tx offload to hw_enc_features - tipc: initialise addr_trail_end when setting node addresses - xen/netback: Reset nr_frags before freeing skb - net/mlx5e: Only support tx/rx pause setting for port owner - bnxt_en: Fix VNIC clearing logic for 57500 chips. - bnxt_en: Improve RX doorbell sequence. - bnxt_en: Fix handling FRAG_ERR when NVM_INSTALL_UPDATE cmd fails - bnxt_en: Suppress HWRM errors for HWRM_NVM_GET_VARIABLE command - bnxt_en: Use correct src_fid to determine direction of the flow - bnxt_en: Fix to include flow direction in L2 key - net sched: update skbedit action for batched events operations - netdevsim: Restore per-network namespace accounting for fib entries - net/mlx5e: ethtool, Avoid setting speed to 56GBASE when autoneg off - net/mlx5e: Fix false negative indication on tx reporter CQE recovery - net/mlx5e: Remove redundant check in CQE recovery flow of tx reporter - net/mlx5e: Use flow keys dissector to parse packets for ARFS - net/tls: prevent skb_orphan() from leaking TLS plain text with offload - net: phy: consider AN_RESTART status when reading link status - netlink: Fix nlmsg_parse as a wrapper for strict message parsing https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.2.11 - ASoC: simple_card_utils.h: care NULL dai at asoc_simple_debug_dai() - ASoC: simple-card: fix an use-after-free in simple_dai_link_of_dpcm() - ASoC: simple-card: fix an use-after-free in simple_for_each_link() - ASoC: audio-graph-card: fix use-after-free in graph_dai_link_of_dpcm() - ASoC: audio-graph-card: fix an use-after-free in graph_get_dai_id() - ASoC: audio-graph-card: add missing const at graph_get_dai_id() - regulator: axp20x: fix DCDCA and DCDCD for AXP806 - regulator: axp20x: fix DCDC5 and DCDC6 for AXP803 - [armhf] ASoC: samsung: odroid: fix an use-after-free issue for codec - [armhf] ASoC: samsung: odroid: fix a double-free issue for cpu_dai - [x86] ASoC: Intel: bytcht_es8316: Add quirk for Irbis NB41 netbook - HID: logitech-hidpp: add USB PID for a few more supported mice - HID: Add 044f:b320 ThrustMaster, Inc. 2 in 1 DT - [mips*] kernel: only use i8253 clocksource with periodic clockevent - [mips*] fix cacheinfo - libbpf: sanitize VAR to conservative 1-byte INT - netfilter: ebtables: fix a memory leak bug in compat - ASoC: dapm: Fix handling of custom_stop_condition on DAPM graph walks - [amd64] spi: pxa2xx: Balance runtime PM enable/disable on error - bpf: sockmap, sock_map_delete needs to use xchg - bpf: sockmap, synchronize_rcu before free'ing map - bpf: sockmap, only create entry if ulp is not already enabled - ASoC: dapm: fix a memory leak bug - bonding: Force slave speed check after link state recovery for 802.3ad - [armhf,arm64] net: mvpp2: Don't check for 3 consecutive Idle frames for 10G links - libbpf: fix using uninitialized ioctl results - can: dev: call netif_carrier_off() in register_candev() - can: gw: Fix error path of cgw_module_init - libbpf: silence GCC8 warning about string truncation - {nl,mac}80211: fix interface combinations on crypto controlled devices - [armhf] ASoC: ti: davinci-mcasp: Fix clk PDIR handling for i2s master mode - [armhf,arm64] ASoC: rockchip: Fix mono capture - [armhf] ASoC: ti: davinci-mcasp: Correct slot_width posed constraint - net: usb: qmi_wwan: Add the BroadMobi BM818 card - qed: RDMA - Fix the hw_ver returned in device attributes - isdn: mISDN: hfcsusb: Fix possible null-pointer dereferences in start_isoc_chain() - mac80211_hwsim: Fix possible null-pointer dereferences in hwsim_dump_radio_nl() - [armhf,arm64] net: stmmac: manage errors returned by of_get_mac_address() - netfilter: ipset: Actually allow destination MAC address for hash:ip,mac sets too - netfilter: ipset: Copy the right MAC address in bitmap:ip,mac and hash:ip,mac sets - netfilter: ipset: Fix rename concurrency with listing - rxrpc: Fix potential deadlock - rxrpc: Fix the lack of notification when sendmsg() fails on a DATA packet - nvmem: Use the same permissions for eeprom as for nvmem - iwlwifi: mvm: avoid races in rate init and rate perform - iwlwifi: dbg_ini: move iwl_dbg_tlv_load_bin out of debug override ifdef - iwlwifi: dbg_ini: move iwl_dbg_tlv_free outside of debugfs ifdef - iwlwifi: fix locking in delayed GTK setting - iwlwifi: mvm: send LQ command always ASYNC - isdn: hfcsusb: Fix mISDN driver crash caused by transfer buffer on the stack - net: phy: phy_led_triggers: Fix a possible null-pointer dereference in phy_led_trigger_change_speed() - perf bench numa: Fix cpu0 binding - [arm64] spi: pxa2xx: Add support for Intel Tiger Lake - can: sja1000: force the string buffer NULL-terminated - can: peak_usb: force the string buffer NULL-terminated - [x86] ASoC: amd: acp3x: use dma_ops of parent device for acp3x dma driver - net/ethernet/qlogic/qed: force the string buffer NULL-terminated - NFSv4: Fix a credential refcount leak in nfs41_check_delegation_stateid - NFSv4: When recovering state fails with EAGAIN, retry the same recovery - NFSv4.1: Fix open stateid recovery - NFSv4.1: Only reap expired delegations - NFSv4: Fix a potential sleep while atomic in nfs4_do_reclaim() - NFS: Fix regression whereby fscache errors are appearing on 'nofsc' mounts - HID: quirks: Set the INCREMENT_USAGE_ON_DUPLICATE quirk on Saitek X52 - HID: input: fix a4tech horizontal wheel custom usage - [armhf,arm64] drm/rockchip: Suspend DP late - SMB3: Fix potential memory leak when processing compound chain - SMB3: Kernel oops mounting a encryptData share with CONFIG_DEBUG_VIRTUAL - sched/deadline: Fix double accounting of rq/running bw in push & pull - sched/psi: Reduce psimon FIFO priority - sched/psi: Do not require setsched permission from the trigger creator - [s390x] protvirt: avoid memory sharing for diag 308 set/store - [s390x] mm: fix dump_pagetables top level page table walking - [s390x] put _stext and _etext into .text section - net: cxgb3_main: Fix a resource leak in a error path in 'init_one()' - [armhf,arm64] net: stmmac: Fix issues when number of Queues >= 4 - [armhf,arm64] net: stmmac: tc: Do not return a fragment entry - drm/amdgpu: pin the csb buffer on hw init for gfx v8 - [arm64] net: hisilicon: make hip04_tx_reclaim non-reentrant - [arm64] net: hisilicon: fix hip04-xmit never return TX_BUSY - [arm64] net: hisilicon: Fix dma_map_single failed on arm64 - NFSv4: Ensure state recovery handles ETIMEDOUT correctly - libata: have ata_scsi_rw_xlat() fail invalid passthrough requests - libata: add SG safety checks in SFF pio transfers - [x86] lib/cpu: Address missing prototypes warning - [x86] drm/vmwgfx: fix memory leak when too many retries have occurred - block: aoe: Fix kernel crash due to atomic sleep when exiting - block, bfq: handle NULL return value by bfq_init_rq() - perf ftrace: Fix failure to set cpumask when only one cpu is present - perf cpumap: Fix writing to illegal memory in handling cpumap mask - perf pmu-events: Fix missing "cpu_clk_unhalted.core" event - [riscv64] dt-bindings: fix the schema compatible string for the HiFive Unleashed board - [arm64] KVM: Don't write junk to sysregs on reset - [armhf] KVM: Don't write junk to CP15 registers on reset - iwlwifi: mvm: disable TX-AMSDU on older NICs (Closes: #939853) - HID: wacom: correct misreported EKR ring values - HID: wacom: Correct distance scale for 2nd-gen Intuos devices - [x86] Revert "KVM: x86/mmu: Zap only the relevant pages when removing a memslot" (regression in 5.1) - Revert "dm bufio: fix deadlock with loop device" (regression in 5.2.3) - [armhf] clk: socfpga: stratix10: fix rate caclulationg for cnt_clks - ceph: clear page dirty before invalidate page - ceph: don't try fill file_lock on unsuccessful GETFILELOCK reply - libceph: fix PG split vs OSD (re)connect race - drm/amdgpu/gfx9: update pg_flags after determining if gfx off is possible - drm/nouveau: Don't retry infinitely when receiving no data on i2c over AUX - scsi: ufs: Fix NULL pointer dereference in ufshcd_config_vreg_hpm() - gpiolib: never report open-drain/source lines as 'input' to user-space - [x86] Drivers: hv: vmbus: Fix virt_to_hvpfn() for X86_PAE - userfaultfd_release: always remove uffd flags and clear vm_userfaultfd_ctx - [i386] retpoline: Don't clobber RFLAGS during CALL_NOSPEC on i386 - [x86] apic: Handle missing global clockevent gracefully - [x86] CPU/AMD: Clear RDRAND CPUID bit on AMD family 15h/16h - [x86] boot: Save fields explicitly, zero out everything else - [x86] boot: Fix boot regression caused by bootparam sanitizing - IB/hfi1: Unsafe PSN checking for TID RDMA READ Resp packet - IB/hfi1: Add additional checks when handling TID RDMA READ RESP packet - IB/hfi1: Add additional checks when handling TID RDMA WRITE DATA packet - IB/hfi1: Drop stale TID RDMA packets that cause TIDErr - psi: get poll_work to run when calling poll syscall next time - dm kcopyd: always complete failed jobs - dm btree: fix order of block initialization in btree_split_beneath - dm integrity: fix a crash due to BUG_ON in __journal_read_write() - dm raid: add missing cleanup in raid_ctr() - dm space map metadata: fix missing store of apply_bops() return value - dm table: fix invalid memory accesses with too high sector number - dm zoned: improve error handling in reclaim - dm zoned: improve error handling in i/o map code - dm zoned: properly handle backing device failure - genirq: Properly pair kobject_del() with kobject_add() - mm/z3fold.c: fix race between migration and destruction - mm, page_alloc: move_freepages should not examine struct page of reserved memory - mm: memcontrol: flush percpu vmstats before releasing memcg - mm: memcontrol: flush percpu vmevents before releasing memcg - mm, page_owner: handle THP splits correctly - mm/zsmalloc.c: migration can leave pages in ZS_EMPTY indefinitely - mm/zsmalloc.c: fix race condition in zs_destroy_pool - IB/hfi1: Drop stale TID RDMA packets - dm zoned: fix potential NULL dereference in dmz_do_reclaim() - io_uring: fix potential hang with polled IO - io_uring: don't enter poll loop if we have CQEs pending - io_uring: add need_resched() check in inner poll loop - [powerpc*] Allow flush_(inval_)dcache_range to work across ranges >4GB - rxrpc: Fix local endpoint refcounting - rxrpc: Fix read-after-free in rxrpc_queue_local() - rxrpc: Fix local endpoint replacement - rxrpc: Fix local refcounting https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.2.12 - nvme-multipath: revalidate nvme_ns_head gendisk in nvme_validate_ns - afs: Fix the CB.ProbeUuid service handler to reply correctly - afs: Fix loop index mixup in afs_deliver_vl_get_entry_by_name_u() - fs: afs: Fix a possible null-pointer dereference in afs_put_read() - afs: Fix off-by-one in afs_rename() expected data version calculation - afs: Only update d_fsdata if different in afs_d_revalidate() - afs: Fix missing dentry data version updating - nvmet: Fix use-after-free bug when a port is removed - nvmet-loop: Flush nvme_delete_wq when removing the port - nvmet-file: fix nvmet_file_flush() always returning an error - nvme-core: Fix extra device_put() call on error path - nvme: fix a possible deadlock when passthru commands sent to a multipath device - nvme-rdma: fix possible use-after-free in connect error flow - nvme: fix controller removal race with scan work - nvme-pci: Fix async probe remove race - btrfs: trim: Check the range passed into to prevent overflow - IB/mlx5: Fix implicit MR release flow - [armhf] omap-dma/omap_vout_vrfb: fix off-by-one fi value - iommu/dma: Handle SG length overflow better - dma-direct: don't truncate dma_required_mask to bus addressing capabilities - usb: gadget: composite: Clear "suspended" on reset/disconnect - usb: gadget: mass_storage: Fix races between fsg_disable and fsg_set_alt - xen/blkback: fix memory leaks - [arm64] cpufeature: Don't treat granule sizes as strict - [riscv64] fix flush_tlb_range() end address for flush_tlb_page() - drm/scheduler: use job count instead of peek - drm/ast: Fixed reboot test may cause system hanged - [x86] tools: hv: fix KVP and VSS daemons exit code - locking/rwsem: Add missing ACQUIRE to read_slowpath exit when queue is empty - lcoking/rwsem: Add missing ACQUIRE to read_slowpath sleep loop - [arm*] watchdog: bcm2835_wdt: Fix module autoload - mt76: usb: fix rx A-MSDU support - ipv6/addrconf: allow adding multicast addr if IFA_F_MCAUTOJOIN is set - ipv6: Fix return value of ipv6_mc_may_pull() for malformed packets (regression in 5.1) - [armhf] net: cpsw: fix NULL pointer exception in the probe error path - net: fix __ip_mc_inc_group usage - net/smc: make sure EPOLLOUT is raised - tcp: make sure EPOLLOUT wont be missed - ipv4: mpls: fix mpls_xmit for iptunnel - openvswitch: Fix conntrack cache with timeout - ipv4/icmp: fix rt dst dev null pointer dereference - xfrm/xfrm_policy: fix dst dev null pointer dereference in collect_md mode - mm/zsmalloc.c: fix build when CONFIG_COMPACTION=n - ALSA: usb-audio: Check mixer unit bitmap yet more strictly - ALSA: hda/ca0132 - Add new SBZ quirk - ALSA: line6: Fix memory leak at line6_init_pcm() error path - ALSA: hda - Fixes inverted Conexant GPIO mic mute led - ALSA: seq: Fix potential concurrent access to the deleted pool - ALSA: usb-audio: Fix invalid NULL check in snd_emuusb_set_samplerate() - ALSA: usb-audio: Add implicit fb quirk for Behringer UFX1604 - [x86] kvm: skip populating logical dest map if apic is not sw enabled - [x86] KVM: hyper-v: don't crash on KVM_GET_SUPPORTED_HV_CPUID when kvm_intel.nested is disabled - [x86] KVM: Don't update RIP or do single-step on faulting emulation - [x86] uprobes: Fix detection of 32-bit user mode - [x86] mm/cpa: Prevent large page split when ftrace flips RW on kernel text - [x86] apic: Do not initialize LDR and DFR for bigsmp - [x86] apic: Include the LDR when clearing out APIC registers - HID: logitech-hidpp: remove support for the G700 over USB - ftrace: Fix NULL pointer dereference in t_probe_next() - ftrace: Check for successful allocation of hash - ftrace: Check for empty hash and comment the race with registering probes - usbtmc: more sanity checking for packet size - usb-storage: Add new JMS567 revision to unusual_devs - USB: cdc-wdm: fix race between write and disconnect due to flag abuse - usb: hcd: use managed device resources - [armhf,arm64] usb: chipidea: udc: don't do hardware access if gadget has stopped - usb: host: ohci: fix a race condition between shutdown and irq - USB: storage: ums-realtek: Whitelist auto-delink support - [x86] tools/power turbostat: Fix caller parameter of get_tdp_amd() - [powerpc*] KVM: Book3S: Fix incorrect guest-to-user-translation error handling - [armhf,arm64] KVM: vgic: Fix potential deadlock when ap_list is long - [armhf,arm64] KVM: vgic-v2: Handle SGI bits in GICD_I{S,C}PENDR0 as WI - [x86] mei: me: add Tiger Lake point LP device ID - [armhf,arm64] Revert "mmc: sdhci-tegra: drop ->get_ro() implementation" (regression in 5.1) - mmc: core: Fix init of SD cards reporting an invalid VDD range - [x86] intel_th: pci: Add support for another Lewisburg PCH - [x86] intel_th: pci: Add Tiger Lake support - [x86] typec: tcpm: fix a typo in the comparison of pdo_max_voltage - NFSv4/pnfs: Fix a page lock leak in nfs_pageio_resend() - NFS: Ensure O_DIRECT reports an error if the bytes read/written is 0 - Revert "NFSv4/flexfiles: Abort I/O early if the layout segment was invalidated" (regression in 5.1) - lib: logic_pio: Fix RCU usage - lib: logic_pio: Avoid possible overlap for unregistering regions - lib: logic_pio: Add logic_pio_unregister_range() - drm/amdgpu: Add APTX quirk for Dell Latitude 5495 - drm/amdgpu: fix GFXOFF on Picasso and Raven2 - [x86] drm/i915: Don't deballoon unused ggtt drm_mm_node in linux guest - [x86] drm/i915: Call dma_set_max_seg_size() in i915_driver_hw_probe() - i2c: piix4: Fix port selection for AMD Family 16h Model 30h - [arm64] bus: hisi_lpc: Unregister logical PIO range to avoid potential use-after-free - [arm64] bus: hisi_lpc: Add .remove method to avoid driver unbind crash - [x86] VMCI: Release resource if the work is already queued - [x86] crypto: ccp - Ignore unconfigured CCP device on suspend/resume - SUNRPC: Don't handle errors if the bind/connect succeeded - mt76: mt76x0u: do not reset radio on resume - mm, memcg: partially revert "mm/memcontrol.c: keep local VM counters in sync with the hierarchical ones" (regression in 5.2.7) - mm: memcontrol: fix percpu vmstats and vmevents flush - mac80211: fix possible sta leak - cfg80211: Fix Extended Key ID key install checks - mac80211: Don't memset RXCB prior to PAE intercept - mac80211: Correctly set noencrypt for PAE frames - iwlwifi: add new cards for 22000 and fix struct name - iwlwifi: add new cards for 22000 and change wrong structs - iwlwifi: add new cards for 9000 and 20000 series - iwlwifi: change 0x02F0 fw from qu to quz - iwlwifi: pcie: add support for qu c-step devices - iwlwifi: pcie: don't switch FW to qnj when ax201 is detected - iwlwifi: pcie: handle switching killer Qu B0 NICs to C0 - [x86] drm/i915: Do not create a new max_bpc prop for MST connectors - [x86] drm/i915/dp: Fix DSC enable code to use cpu_transcoder instead of encoder->type - [x86] ptrace: fix up botched merge of spectrev1 fix - bpf: fix use after free in prog symbol exposure - hsr: implement dellink to clean up resources - hsr: fix a NULL pointer deref in hsr_dev_xmit() - hsr: switch ->dellink() to ->ndo_uninit() https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.2.13 - Revert "Input: elantech - enable SMBus on new (2018+) systems" (regression in 5.2.9) https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.2.14 - mld: fix memory leak in mld_del_delrec() - net: fix skb use after free in netpoll - net: sched: act_sample: fix psample group handling on overwrite - net_sched: fix a NULL pointer deref in ipt action - [arm64, armhf] net: stmmac: dwmac-rk: Don't fail if phy regulator is absent - tcp: inherit timestamp on mtu probe - tcp: remove empty skb from write queue in error cases - Revert "r8152: napi hangup fix after disconnect" - r8152: remove calling netif_napi_del - net/sched: cbs: Set default link speed to 10 Mbps in cbs_set_port_rate - Add genphy_c45_config_aneg() function to phy-c45.c - net/sched: pfifo_fast: fix wrong dereference in pfifo_fast_enqueue - net/sched: pfifo_fast: fix wrong dereference when qdisc is reset - net/rds: Fix info leak in rds6_inc_info_copy() (CVE-2019-16714) - batman-adv: Fix netlink dumping of all mcast_flags buckets - libbpf: fix erroneous multi-closing of BTF FD - libbpf: set BTF FD for prog only when there is supported .BTF.ext data - netfilter: nf_flow_table: fix offload for flows that are subject to xfrm - net/mlx5e: Fix error flow of CQE recovery on tx reporter - [armhf] clk: samsung: Change signature of exynos5_subcmus_init() function - [armhf] clk: samsung: exynos5800: Move MAU subsystem clocks to MAU sub-CMU - [armhf] clk: samsung: exynos542x: Move MSCL subsystem clocks to its sub-CMU - netfilter: nf_tables: use-after-free in failing rule with bound set - netfilter: nf_flow_table: conntrack picks up expired flows - netfilter: nf_flow_table: teardown flow timeout race - tools: bpftool: fix error message (prog -> object) - ixgbe: fix possible deadlock in ixgbe_service_task() - [x86] hv_netvsc: Fix a warning of suspicious RCU usage - net: tc35815: Explicitly check NET_IP_ALIGN is not zero in tc35815_rx - Bluetooth: btqca: Add a short delay before downloading the NVM - Bluetooth: hci_qca: Send VS pre shutdown command. - [s390x] qeth: serialize cmd reply with concurrent timeout - ibmveth: Convert multicast list size for little-endian system - gpio: Fix build error of function redefinition - netfilter: nft_flow_offload: skip tcp rst and fin packets - scsi: qla2xxx: Fix gnl.l memory leak on adapter init failure - scsi: target: tcmu: avoid use-after-free after command timeout - cxgb4: fix a memory leak bug - liquidio: add cleanup in octeon_setup_iq() - net: myri10ge: fix memory leaks - clk: Fix falling back to legacy parent string matching - clk: Fix potential NULL dereference in clk_fetch_parent_index() - lan78xx: Fix memory leaks - vfs: fix page locking deadlocks when deduping files - cx82310_eth: fix a memory leak bug - net: kalmia: fix memory leaks - net: cavium: fix driver name - wimax/i2400m: fix a memory leak bug - sched/core: Schedule new worker even if PI-blocked - kprobes: Fix potential deadlock in kprobe_optimizer() - [x86] HID: intel-ish-hid: ipc: add EHL device id - HID: cp2112: prevent sleeping function called from invalid context - [x86] boot/compressed/64: Fix boot on machines with broken E820 table - scsi: lpfc: Mitigate high memory pre-allocation by SCSI-MQ - [x86] Input: hyperv-keyboard: Use in-place iterator API in the channel callback - Tools: hv: kvp: eliminate 'may be used uninitialized' warning - nvme-multipath: fix possible I/O hang when paths are updated - nvme: Fix cntlid validation when not using NVMEoF - RDMA/cma: fix null-ptr-deref Read in cma_cleanup - IB/mlx4: Fix memory leaks - [x86] infiniband: hfi1: fix a memory leak bug - [x86] infiniband: hfi1: fix memory leaks - drm/amdgpu: prevent memory leaks in AMDGPU_CS ioctl - ceph: fix buffer free while holding i_ceph_lock in __ceph_setxattr() - ceph: fix buffer free while holding i_ceph_lock in __ceph_build_xattrs_blob() - ceph: fix buffer free while holding i_ceph_lock in fill_inode() - [arm64, armhf] KVM: Only skip MMIO insn once - afs: Fix leak in afs_lookup_cell_rcu() - afs: Fix possible oops in afs_lookup trace event - afs: use correct afs_call_type in yfs_fs_store_opaque_acl2 - RDMA/bnxt_re: Fix stack-out-of-bounds in bnxt_qplib_rcfw_send_message - gpio: Fix irqchip initialization order - [arm64, armhf] KVM: VGIC: Properly initialise private IRQ affinity - [x86] boot/compressed/64: Fix missing initialization in find_trampoline_placement() - libceph: allow ceph_buffer_put() to receive a NULL ceph_buffer - [x86] Revert "x86/apic: Include the LDR when clearing out APIC registers" - [x86] boot: Preserve boot_params.secure_boot from sanitizing - Revert "mmc: core: do not retry CMD6 in __mmc_switch()" https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.2.15 - gpio: pca953x: correct type of reg_direction - gpio: pca953x: use pca953x_read_regs instead of regmap_bulk_read - ALSA: hda - Fix potential endless loop at applying quirks - ALSA: hda/realtek - Fix overridden device-specific initialization - ALSA: hda/realtek - Add quirk for HP Pavilion 15 - ALSA: hda/realtek - Enable internal speaker & headset mic of ASUS UX431FL - ALSA: hda/realtek - Fix the problem of two front mics on a ThinkCentre - sched/fair: Don't assign runtime for throttled cfs_rq - [x86] drm/vmwgfx: Fix double free in vmw_recv_msg() - drm/nouveau/sec2/gp102: add missing MODULE_FIRMWAREs - [powerpc*] 64e: Drop stale call to smp_processor_id() which hangs SMP startup - [powerpc*] tm: Fix restoring FP/VMX facility incorrectly on interrupts (CVE-2019-15031) - batman-adv: fix uninit-value in batadv_netlink_get_ifindex() - batman-adv: Only read OGM tvlv_len after buffer len check - bcache: only clear BTREE_NODE_dirty bit when it is set - bcache: add comments for mutex_lock(&b->write_lock) - bcache: fix race in btree_flush_write() - IB/rdmavt: Add new completion inline - IB/{rdmavt, qib, hfi1}: Convert to new completion API - IB/hfi1: Unreserve a flushed OPFN request - [x86] drm/i915: Disable SAMPLER_STATE prefetching on all Gen11 steppings. - [x86] drm/i915: Make sure cdclk is high enough for DP audio on VLV/CHV - mmc: sdhci-sprd: Fix the incorrect soft reset operation when runtime resuming - usb: chipidea: imx: add imx7ulp support - usb: chipidea: imx: fix EPROBE_DEFER support during driver probe - [s390x] virtio: fix race on airq_areas[] - [x86] drm/i915: Support flags in whitlist WAs - [x86] drm/i915: Support whitelist workarounds on all engines - [x86] drm/i915: whitelist PS_(DEPTH|INVOCATION)_COUNT - [x86] drm/i915: Add whitelist workarounds for ICL - [x86] drm/i915/icl: whitelist PS_(DEPTH|INVOCATION)_COUNT - Btrfs: fix unwritten extent buffers and hangs on future writeback attempts (Closes: #940105) - vhost: make sure log_num < in_num (CVE-2019-14835) https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.2.16 - bridge/mdb: remove wrong use of NLM_F_MULTI - cdc_ether: fix rndis support for Mediatek based smartphones - ipv6: Fix the link time qualifier of 'ping_v6_proc_exit_net()' - isdn/capi: check message length in capi_write() - ixgbe: Fix secpath usage for IPsec TX offload. - ixgbevf: Fix secpath usage for IPsec Tx offload - net: Fix null de-reference of device refcount - net: gso: Fix skb_segment splat when splitting gso_size mangled skb having linear-headed frag_list - net: phylink: Fix flow control resolution - net: sched: fix reordering issues - sch_hhf: ensure quantum and hhf_non_hh_weight are non-zero - sctp: Fix the link time qualifier of 'sctp_ctrlsock_exit()' - sctp: use transport pf_retrans in sctp_do_8_2_transport_strike - tcp: fix tcp_ecn_withdraw_cwr() to clear TCP_ECN_QUEUE_CWR - tipc: add NULL pointer check before calling kfree_rcu - tun: fix use-after-free when register netdev failed - net-ipv6: fix excessive RTF_ADDRCONF flag on ::1/128 local route (and others) - ipv6: addrconf_f6i_alloc - fix non-null pointer check to !IS_ERR() - net: fixed_phy: Add forward declaration for struct gpio_desc; - sctp: fix the missing put_user when dumping transport thresholds - net: sock_map, fix missing ulp check in sock hash case - gpiolib: acpi: Add gpiolib_acpi_run_edge_events_on_boot option and blacklist - gpio: mockup: add missing single_release() - gpio: fix line flag validation in linehandle_create - gpio: fix line flag validation in lineevent_create - Btrfs: fix assertion failure during fsync and use of stale transaction - cgroup: freezer: fix frozen state inheritance - Revert "mmc: bcm2835: Terminate timeout work synchronously" - Revert "mmc: sdhci: Remove unneeded quirk2 flag of O2 SD host controller" - mmc: tmio: Fixup runtime PM management during probe - mmc: tmio: Fixup runtime PM management during remove - drm/lima: fix lima_gem_wait() return value - [x86] drm/i915: Limit MST to <= 8bpc once again - [x86] drm/i915: Restore relaxed padding (OCL_OOB_SUPPRES_ENABLE) for skl+ - ipc: fix semtimedop for generic 32-bit architectures - ipc: fix sparc64 ipc() wrapper - ixgbe: fix double clean of Tx descriptors with xdp - ixgbe: Prevent u8 wrapping of ITR value to something less than 10us - Revert "rt2800: enable TX_PIN_CFG_LNA_PE_ bits per band" - mt76: mt76x0e: disable 5GHz band for MT7630E - genirq: Prevent NULL pointer dereference in resend_irqs() - regulator: twl: voltage lists for vdd1/2 on twl4030 - [s390x] KVM: kvm_s390_vm_start_migration: check dirty_bitmap before using it as target for memset() - [s390x] KVM: Do not leak kernel stack data in the KVM_S390_INTERRUPT ioctl - [x86] KVM: work around leak of uninitialized stack contents - [x86] KVM: mmu: Reintroduce fast invalidate/zap for flushing memslot - [x86] KVM: nVMX: handle page fault in vmread - [x86] purgatory: Change compiler flags from -mcmodel=kernel to -mcmodel=large to fix kexec relocation errors - powerpc: Add barrier_nospec to raw_copy_in_user() - kernel/module: Fix mem leak in module_add_modinfo_attrs - x86/boot: Use efi_setup_data for searching RSDP on kexec-ed kernels - x86/ima: check EFI SetupMode too - drm/meson: Add support for XBGR8888 & ABGR8888 formats - clk: Fix debugfs clk_possible_parents for clks without parent string names - clk: Simplify debugfs printing and add a newline - mt76: Fix a signedness bug in mt7615_add_interface() - mt76: mt7615: Use after free in mt7615_mcu_set_bcn() - clk: rockchip: Don't yell about bad mmc phases when getting - mtd: rawnand: mtk: Fix wrongly assigned OOB buffer pointer issue - PCI: Always allow probing with driver_override - ubifs: Correctly use tnc_next() in search_dh_cookie() - driver core: Fix use-after-free and double free on glue directory - crypto: talitos - check AES key size - crypto: talitos - fix CTR alg blocksize - crypto: talitos - check data blocksize in ablkcipher. - crypto: talitos - fix ECB algs ivsize - crypto: talitos - Do not modify req->cryptlen on decryption. - crypto: talitos - HMAC SNOOP NO AFEU mode requires SW icv checking. - firmware: ti_sci: Always request response from firmware - drm: panel-orientation-quirks: Add extra quirk table entry for GPD MicroPC - drm/mediatek: mtk_drm_drv.c: Add of_node_put() before goto - mm/z3fold.c: remove z3fold_migration trylock - mm/z3fold.c: fix lock/unlock imbalance in z3fold_page_isolate - Revert "Bluetooth: btusb: driver to enable the usb-wakeup feature" - modules: fix BUG when load module with rodata=n - modules: fix compile error if don't have strict module rwx - modules: always page-align module section allocations - [x86] kvm: nVMX: Remove unnecessary sync_roots from handle_invept - [x86] KVM: SVM: Fix detection of AMD Errata 1096 - [x86] platform: pmc_atom: Add CB4063 Beckhoff Automation board to critclk_systems DMI table - [x86] platform: pcengines-apuv2: use KEY_RESTART for front button - rsi: fix a double free bug in rsi_91x_deinit() (CVE-2019-15504) https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.2.17 - USB: usbcore: Fix slab-out-of-bounds bug during device reset - media: tm6000: double free if usb disconnect while streaming - phy: renesas: rcar-gen3-usb2: Disable clearing VBUS in over-current - net: hns3: adjust hns3_uninit_phy()'s location in the hns3_client_uninit() - netfilter: nf_flow_table: set default timeout after successful insertion - HID: wacom: generic: read HID_DG_CONTACTMAX from any feature report - Input: elan_i2c - remove Lenovo Legion Y7000 PnpID - SUNRPC: Handle connection breakages correctly in call_status() - nfs: disable client side deduplication - [powerpc*] mm/radix: Use the right page size for vmemmap mapping - net: hns: fix LED configuration for marvell phy - net: aquantia: fix limit of vlan filters - ip6_gre: fix a dst leak in ip6erspan_tunnel_xmit - net/sched: fix race between deactivation and dequeue for NOLOCK qdisc - net_sched: let qdisc_put() accept NULL pointer - udp: correct reuseport selection with connected sockets - xen-netfront: do not assume sk_buff_head list is empty in error handling - net: dsa: Fix load order between DSA drivers and taggers - KVM: coalesced_mmio: add bounds checking (CVE-2019-14821) - firmware: google: check if size is valid when decoding VPD data - serial: sprd: correct the wrong sequence of arguments - tty/serial: atmel: reschedule TX after RX was started - mwifiex: Fix three heap overflow at parsing element in cfg80211_ap_settings (CVE-2019-14814, CVE-2019-14815, CVE-2019-14816) - nl80211: Fix possible Spectre-v1 for CQM RSSI thresholds - ieee802154: hwsim: Fix error handle path in hwsim_init_module - ieee802154: hwsim: unregister hw while hwsim_subscribe_all_others fails - [armhf] dts: am57xx: Disable voltage switching for SD card - [armhf] OMAP2+: Fix missing SYSC_HAS_RESET_STATUS for dra7 epwmss - bus: ti-sysc: Fix handling of forced idle - bus: ti-sysc: Fix using configured sysc mask value - [armhf] dts: Fix flags for gpio7 - [armhf] dts: Fix incorrect dcan register mapping for am3, am4 and dra7 - [arm64] dts: meson-g12a: add missing dwc2 phy-names - [s390x] bpf: fix lcgr instruction encoding - [armhf] OMAP2+: Fix omap4 errata warning on other SoCs - [armhf] dts: am335x: Fix UARTs length - [armhf] dts: dra74x: Fix iodelay configuration for mmc3 - bus: ti-sysc: Simplify cleanup upon failures in sysc_probe() - [armhf] dts: Fix incomplete dts data for am3 and am4 mmc - [s390x] bpf: use 32-bit index for tail calls - fpga: altera-ps-spi: Fix getting of optional confd gpio - netfilter: ebtables: Fix argument order to ADD_COUNTER - netfilter: nft_flow_offload: missing netlink attribute policy - netfilter: xt_nfacct: Fix alignment mismatch in xt_nfacct_match_info - NFSv4: Fix return values for nfs4_file_open() - NFSv4: Fix return value in nfs_finish_open() - NFS: Fix initialisation of I/O result struct in nfs_pgio_rpcsetup - NFS: On fatal writeback errors, we need to call nfs_inode_remove_request() - xdp: unpin xdp umem pages in error path - selftests/bpf: fix test_cgroup_storage on s390 - selftests/bpf: add config fragment BPF_JIT - qed: Add cleanup in qed_slowpath_start() - drm/omap: Fix port lookup for SDI output - drm/virtio: use virtio_max_dma_size - [armel,armhf] 8874/1: mm: only adjust sections of valid mm structures - batman-adv: Only read OGM2 tvlv_len after buffer len check - flow_dissector: Fix potential use-after-free on BPF_PROG_DETACH - bpf: allow narrow loads of some sk_reuseport_md fields with offset > 0 - r8152: Set memory to all 0xFFs on failed reg reads - x86/apic: Fix arch_dynirq_lower_bound() bug for DT enabled machines - pNFS/flexfiles: Don't time out requests on hard mounts - NFS: Fix spurious EIO read errors - NFS: Fix writepage(s) error handling to not report errors twice - drm/amdgpu: fix dma_fence_wait without reference - netfilter: xt_physdev: Fix spurious error message in physdev_mt_check - netfilter: nf_conntrack_ftp: Fix debug output - NFSv2: Fix eof handling - NFSv2: Fix write regression - NFS: remove set but not used variable 'mapping' - kallsyms: Don't let kallsyms_lookup_size_offset() fail on retrieving the first symbol - netfilter: conntrack: make sysctls per-namespace again - drm/amd/powerplay: correct Vega20 dpm level related settings - cifs: set domainName when a domain-key is used in multiuser - cifs: Use kzfree() to zero out the password - libceph: don't call crypto_free_sync_skcipher() on a NULL tfm - usb: host: xhci-tegra: Set DMA mask correctly - RISC-V: Fix FIXMAP area corruption on RV32 systems - [armel,armhf] 8901/1: add a criteria for pfn_valid of arm - ibmvnic: Do not process reset during or after device removal - sky2: Disable MSI on yet another ASUS boards (P6Xxxx) - i2c: designware: Synchronize IRQs when unregistering slave client - perf/x86/intel: Restrict period on Nehalem - perf/x86/amd/ibs: Fix sample bias for dispatched micro-ops - i2c: iproc: Stop advertising support of SMBUS quick cmd - i2c: mediatek: disable zero-length transfers for mt8183 - amd-xgbe: Fix error path in xgbe_mod_init() - netfilter: nf_flow_table: clear skb tstamp before xmit - [x86] tools/power x86_energy_perf_policy: Fix argument parsing - [x86] tools/power turbostat: fix leak of file descriptor on error return path - [x86] tools/power turbostat: fix file descriptor leaks - [x86] tools/power turbostat: fix buffer overrun - [x86] tools/power turbostat: Fix Haswell Core systems - [x86] tools/power turbostat: Add Ice Lake NNPI support - [x86] tools/power turbostat: Fix CPU%C1 display value - net: aquantia: fix removal of vlan 0 - net: aquantia: reapply vlan filters on up - net: aquantia: linkstate irq should be oneshot - net: aquantia: fix out of memory condition on rx side - net: dsa: microchip: add KSZ8563 compatibility string - enetc: Add missing call to 'pci_free_irq_vectors()' in probe and remove functions - net: seeq: Fix the function used to release some memory in an error handling path - dmaengine: ti: dma-crossbar: Fix a memory leak bug - dmaengine: ti: omap-dma: Add cleanup in omap_dma_probe() - [x86] uaccess: Don't leak the AC flags into __get_user() argument evaluation - [x86] hyper-v: Fix overflow bug in fill_gva_list() - [x86] iommu/vt-d: Remove global page flush support - dmaengine: sprd: Fix the DMA link-list configuration - dmaengine: rcar-dmac: Fix DMACHCLR handling if iommu is mapped - keys: Fix missing null pointer check in request_key_auth_describe() - [x86] iommu/amd: Flush old domains in kdump kernel - [x86] iommu/amd: Fix race in increase_address_space() - [arm64] Revert "arm64: Remove unnecessary ISBs from set_{pte,pmd,pud}" - ovl: fix regression caused by overlapping layers detection - floppy: fix usercopy direction - media: technisat-usb2: break out of loop at end of buffer (CVE-2019-15505) - vfs: Fix refcounting of filenames in fs_parser [ Salvatore Bonaccorso ] * xfs: fix missing ILOCK unlock when xfs_setattr_nonsize fails due to EDQUOT (CVE-2019-15538) [ Romain Perier ] * [rt] Update to 5.2.14-rt7 [ Ben Hutchings ] * Bump ABI to 3 -- Salvatore Bonaccorso Thu, 26 Sep 2019 14:19:06 +0200 linux (5.2.9-2) unstable; urgency=medium [ Ben Hutchings ] * Partially revert "net: socket: implement 64-bit timestamps" (fixes build/test regressions for glibc, qemu, suricata) * [x86] intel-iommu: Exclude integrated GPUs by default (Closes: #935270): - intel-iommu: Add option to exclude integrated GPU only - intel-iommu: Add Kconfig option to exclude iGPU by default - Enable INTEL_IOMMU_DEFAULT_ON_INTGPU_OFF instead of INTEL_IOMMU_DEFAULT_ON [ Thomas W ] * [x86] Add various laptop modules. (Closes: #932086) CONFIG_ACER_WIRELESS CONFIG_LG_LAPTOP CONFIG_SURFACE3_WMI CONFIG_INTEL_WMI_THUNDERBOLT CONFIG_PEAQ_WMI CONFIG_TOSHIBA_WMI CONFIG_SURFACE_3_BUTTON -- Ben Hutchings Wed, 21 Aug 2019 13:48:11 +0100 linux (5.2.9-1) unstable; urgency=medium * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.2.8 - scsi: fcoe: Embed fc_rport_priv in fcoe_rport structure - libnvdimm/bus: Prepare the nd_ioctl() path to be re-entrant - libnvdimm/bus: Fix wait_nvdimm_bus_probe_idle() ABBA deadlock - ALSA: usb-audio: Sanity checks for each pipe and EP types - ALSA: usb-audio: Fix gpf in snd_usb_pipe_sanity_check - HID: wacom: fix bit shift for Cintiq Companion 2 - HID: Add quirk for HP X1200 PIXART OEM mouse - atm: iphase: Fix Spectre v1 vulnerability (CVE-2017-5753) - bnx2x: Disable multi-cos feature. - drivers/net/ethernet/marvell/mvmdio.c: Fix non OF case (Closes: #908712) - ife: error out when nla attributes are empty - ip6_gre: reload ipv6h in prepare_ip6gre_xmit_ipv6 - ip6_tunnel: fix possible use-after-free on xmit - ipip: validate header length in ipip_tunnel_xmit - [armhf,arm64] mvpp2: fix panic on module removal - [armhf,arm64] mvpp2: refactor MTU change code - net: bridge: delete local fdb on device init failure - net: bridge: mcast: don't delete permanent entries when fast leave is enabled - net: bridge: move default pvid init/deinit to NETDEV_REGISTER/UNREGISTER - net: fix ifindex collision during namespace removal - net/mlx5e: always initialize frag->last_in_page - net/mlx5: Use reversed order when unregister devices - net: phy: fixed_phy: print gpio error only if gpio node is present - net: phy: mscc: initialize stats array - net: sched: Fix a possible null-pointer dereference in dequeue_func() - net sched: update vlan action for batched events operations - net: sched: use temporary variable for actions indexes - net/smc: do not schedule tx_work in SMC_CLOSED state - [armhf,arm64] net: stmmac: Use netif_tx_napi_add() for TX polling function - tipc: compat: allow tipc commands without arguments - tipc: fix unitilized skb list crash - tun: mark small packets as owned by the tap sock - net/mlx5: Fix modify_cq_in alignment - net/mlx5e: Prevent encap flow counter update async to user query - r8169: don't use MSI before RTL8168d - net: fix bpf_xdp_adjust_head regression for generic-XDP - [x86] hv_sock: Fix hang when a connection is closed - net: phy: fix race in genphy_update_link - net/smc: avoid fallback in case of non-blocking connect - rocker: fix memory leaks of fib_work on two error return paths - net/mlx5: Add missing RDMA_RX capabilities - net/mlx5e: Fix matching of speed to PRM link modes - compat_ioctl: pppoe: fix PPPOEIOCSFWD handling - [x86] drm/i915/vbt: Fix VBT parsing for the PSR section - Revert "mac80211: set NETIF_F_LLTX when using intermediate tx queues" - [armhf,arm64] spi: bcm2835: Fix 3-wire mode if DMA is enabled https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.2.9 - Revert "PCI: Add missing link delays required by the PCIe spec" - [arm64] iio: cros_ec_accel_legacy: Fix incorrect channel setting - [x86] iio: imu: mpu6050: add missing available scan masks - [x86] crypto: ccp - Fix oops by properly managing allocated structures - [x86] crypto: ccp - Add support for valid authsize values less than 16 - [x86] crypto: ccp - Ignore tag length when decrypting GCM ciphertext - driver core: platform: return -ENXIO for missing GpioInt - usb: usbfs: fix double-free of usb memory upon submiturb error - Revert "USB: rio500: simplify locking" - usb: iowarrior: fix deadlock on disconnect - sound: fix a memory leak bug - [arm64,mips/octeon] mmc: cavium: Set the correct dma max segment size for mmc_host - [arm64,mips/octeon] mmc: cavium: Add the missing dma unmap when the dma has finished. - loop: set PF_MEMALLOC_NOIO for the worker thread - bdev: Fixup error handling in blkdev_get() (Closes: #934378) - Input: usbtouchscreen - initialize PM mutex before using it - Input: elantech - enable SMBus on new (2018+) systems - [x86] Input: synaptics - enable RMI mode for HP Spectre X360 - [x86] mm: Check for pfn instead of page in vmalloc_sync_one() - [x86] mm: Sync also unmappings in vmalloc_sync_all() - mm/vmalloc: Sync unmappings in __purge_vmap_area_lazy() - [s390x] perf annotate: Fix s390 gap between kernel end and module start - perf db-export: Fix thread__exec_comm() - [s390x] perf record: Fix module size on s390 - [x86] purgatory: Do not use __builtin_memcpy and __builtin_memset - [x86] purgatory: Use CFLAGS_REMOVE rather than reset KBUILD_CFLAGS - genirq/affinity: Create affinity mask for single vector - gfs2: gfs2_walk_metadata fix - usb: yurex: Fix use-after-free in yurex_delete - usb: typec: ucsi: ccg: Fix uninitilized symbol error - usb: typec: tcpm: free log buf memory when remove debug file - usb: typec: tcpm: remove tcpm dir if no children - usb: typec: tcpm: Add NULL check before dereferencing config - usb: typec: tcpm: Ignore unsupported/unknown alternate mode requests - [armhf] can: flexcan: fix stop mode acknowledgment - [armhf] can: flexcan: fix an use-after-free in flexcan_setup_stop_mode() - can: peak_usb: fix potential double kfree_skb() - [powerpc*] fix off by one in max_zone_pfn initialization for ZONE_DMA - netfilter: nfnetlink: avoid deadlock due to synchronous request_module - netfilter: Fix rpfilter dropping vrf packets by mistake - netfilter: nf_tables: fix module autoload for redir - netfilter: conntrack: always store window size un-scaled - netfilter: nft_hash: fix symhash with modulus one - rq-qos: don't reset has_sleepers on spurious wakeups - rq-qos: set ourself TASK_UNINTERRUPTIBLE after we schedule - rq-qos: use a mb for got_token - netfilter: nf_tables: Support auto-loading for inet nat - drm/amd/display: No audio endpoint for Dell MST display - drm/amd/display: Clock does not lower in Updateplanes - drm/amd/display: Wait for backlight programming completion in set backlight level - drm/amd/display: fix DMCU hang when going into Modern Standby - drm/amd/display: use encoder's engine id to find matched free audio device - drm/amd/display: put back front end initialization sequence - drm/amd/display: allocate 4 ddc engines for RV2 - drm/amd/display: Fix dc_create failure handling and 666 color depths - drm/amd/display: Only enable audio if speaker allocation exists - drm/amd/display: Increase size of audios array - nl80211: fix NL80211_HE_MAX_CAPABILITY_LEN - mac80211: fix possible memory leak in ieee80211_assign_beacon - mac80211: don't warn about CW params when not using them - allocate_flower_entry: should check for null deref - hwmon: (nct6775) Fix register address and added missed tolerance for nct6106 - [armhf] dts: imx6ul: fix clock frequency property name of I2C buses - [powerpc*] papr_scm: Force a scm-unbind if initial scm-bind fails - [arm64] Force SSBS on context switch - [arm64] entry: SP Alignment Fault doesn't write to FAR_EL1 - [x86] iommu/vt-d: Check if domain->pgd was allocated - [arm64] drm/msm/dpu: Correct dpu encoder spinlock initialization - [ppc64] cpufreq/pasemi: fix use-after-free in pas_cpufreq_cpu_init() - [s390x] qdio: add sanity checks to the fast-requeue path - ALSA: compress: Fix regression on compressed capture streams - ALSA: compress: Prevent bypasses of set_params - ALSA: compress: Don't allow paritial drain operations on capture streams - ALSA: compress: Be more restrictive about when a drain is allowed - perf script: Fix off by one in brstackinsn IPC computation - perf tools: Fix proper buffer size for feature processing - perf stat: Fix segfault for event group in repeat mode - perf session: Fix loading of compressed data split across adjacent records - perf probe: Avoid calling freeing routine multiple times for same pointer - drbd: dynamically allocate shash descriptor - ACPI/IORT: Fix off-by-one check in iort_dev_find_its_id() - nvme: ignore subnqn for ADATA SX6000LNP - nvme: fix memory leak caused by incorrect subsystem free - scsi: megaraid_sas: fix panic on loading firmware crashdump - scsi: ibmvfc: fix WARN_ON during event pool release - scsi: scsi_dh_alua: always use a 2 second delay before retrying RTPG - test_firmware: fix a memory leak bug - tty/ldsem, locking/rwsem: Add missing ACQUIRE to read_failed sleep loop - [x86] perf/intel: Fix SLOTS PEBS event constraint - [x86] perf/intel: Fix invalid Bit 13 for Icelake MSR_OFFCORE_RSP_x register - [x86] perf: Apply more accurate check on hypervisor platform - perf/core: Fix creating kernel counters for PMUs that override event->cpu - [s390x] dma: provide proper ARCH_ZONE_DMA_BITS value - HID: sony: Fix race condition between rumble and device remove. - ALSA: usb-audio: fix a memory leak bug - [x86] KVM/nSVM: properly map nested VMCB - can: peak_usb: pcan_usb_pro: Fix info-leaks to USB devices - can: peak_usb: pcan_usb_fd: Fix info-leaks to USB devices - hwmon: (nct7802) Fix wrong detection of in4 presence - hwmon: (lm75) Fixup tmp75b clr_mask - [x86] drm/i915: Fix wrong escape clock divisor init for GLK - ALSA: firewire: fix a memory leak bug - ALSA: hiface: fix multiple memory leak bugs - ALSA: hda - Don't override global PCM hw info flag - [x86] ALSA: hda - Workaround for crackled sound on AMD controller (1022:1457) - mac80211: don't WARN on short WMM parameters from AP - dax: dax_layout_busy_page() should not unmap cow pages - SMB3: Fix deadlock in validate negotiate hits reconnect - smb3: send CAP_DFS capability during session setup - NFSv4: Fix delegation state recovery - NFSv4: Check the return value of update_open_stateid() - NFSv4: Fix an Oops in nfs4_do_setattr - [x86] KVM: Fix leak vCPU's VMCS value into other pCPU - [armhf,arm64] KVM: Sync ICH_VMCR_EL2 back when about to block - mwifiex: fix 802.11n/WPA detection - iwlwifi: don't unmap as page memory that was mapped as single - iwlwifi: mvm: fix an out-of-bound access - iwlwifi: mvm: fix a use-after-free bug in iwl_mvm_tx_tso_segment - iwlwifi: mvm: don't send GEO_TX_POWER_LIMIT on version < 41 - iwlwifi: mvm: fix version check for GEO_TX_POWER_LIMIT support [ Salvatore Bonaccorso ] * Enable Realtek 802.11ac wireless chips support (Closes: #933963) [ Ben Hutchings ] * [armel] fb-modules: Remove xgifb, which was removed upstream (fixes FTBFS) * tracefs: Fix potential null dereference in default_file_open() (Closes: #934304) * [arm64] hwrandom: Re-enable HW_RANDOM_OMAP as module (Closes: #931707) * ptp: Change CAVIUM_PTP from built-in to modular (Closes: #934848) * bug script: Check whether /e/n/interfaces exists (Closes: #934824) * bug script: Include network configuration from /e/n/interfaces.d * bug script: Check for unreadable /e/n/interfaces files * [x86] iommu: Enable INTEL_IOMMU_DEFAULT_ON (Closes: #934309) * HID: Enable HID_BIGBEN_FF, HID_MACALLY, HID_GFRM, HID_GT683R, HID_VIEWSONIC, HID_MALTRON, HID_U2FZERO as modules (Closes: #934091) * usbip: network: Fix unaligned member access (Closes: #925766) * libbpf: Fix cross-build * [rt] Update to 5.2.9-rt3: - i2c: exynos5: Remove IRQF_ONESHOT - i2c: hix5hd2: Remove IRQF_ONESHOT - sched/deadline: Ensure inactive_timer runs in hardirq context - thermal/x86_pkg_temp: make pkg_temp_lock a raw spinlock - dma-buf: Use seqlock_t instread disabling preemption - KVM: arm/arm64: Let the timer expire in hardirq context on RT - x86: preempt: Check preemption level before looking at lazy-preempt - arm64: preempt: Fixup lazy preempt - arm64: preempt: Check preemption level before looking at lazy-preempt [ Alper Nebi Yasak ] * [arm64] udeb: Add pl330 to kernel-image -- Ben Hutchings Sun, 18 Aug 2019 22:54:21 +0100 linux (5.2.7-1) unstable; urgency=medium * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.2.7 - [armhf] dts: rockchip: Make rk3288-veyron-minnie run at hs200 - [armhf] dts: rockchip: Make rk3288-veyron-mickey's emmc work again - [arm64] clk: meson: mpll: properly handle spread spectrum - [armhf] dts: rockchip: Mark that the rk3288 timer might stop in suspend - ftrace: Enable trampoline when rec count returns back to one - [arm64] dts: qcom: qcs404-evb: fix l3 min voltage - [arm64] dts: marvell: mcbin: enlarge PCI memory window - [armhf,arm64] dmaengine: tegra-apb: Error out if DMA_PREP_INTERRUPT flag is unset - [arm64] dts: rockchip: fix isp iommu clocks and power domain - kernel/module.c: Only return -EEXIST for modules that have finished loading - PCI: OF: Initialize dev->fwnode appropriately - [armhf,arm64] firmware/psci: psci_checker: Park kthreads before stopping them - [arm64] qcom: qcs404: Add reset-cells to GCC node - swiotlb: fix phys_addr_t overflow warning - [arm64] clk: tegra210: fix PLLU and PLLU_OUT1 - fs/adfs: super: fix use-after-free bug - [arm64] dts: rockchip: Fix USB3 Type-C on rk3399-sapphire - btrfs: tree-checker: Check if the file extent end overflows - btrfs: fix minimum number of chunk errors for DUP - btrfs: Flush before reflinking any extent to prevent NOCOW write falling back to COW without data reservation - [arm64] remoteproc: copy parent dma_pfn_offset for vdev - btrfs: qgroup: Don't hold qgroup_ioctl_lock in btrfs_qgroup_inherit() - cifs: Fix a race condition with cifs_echo_request - ceph: fix improper use of smp_mb__before_atomic() - ceph: fix dir_lease_is_valid() - ceph: return -ERANGE if virtual xattr value didn't fit in buffer - virtio-mmio: add error check for platform_get_irq - drm/amd/display: Expose audio inst from DC to DM - cifs: fix crash in cifs_dfs_do_automount - perf version: Fix segfault due to missing OPT_END() - [x86] kvm: avoid constant-conversion warning - ACPI: fix false-positive -Wuninitialized warning - [x86] KVM: nVMX: Ignore segment base for VMX memory operand when segment not FS or GS - bpf: fix BTF verifier size resolution logic - be2net: Signal that the device cannot transmit during reconfiguration - mm/z3fold: don't try to use buddy slots after free - mm/memcontrol.c: keep local VM counters in sync with the hierarchical ones - mm/z3fold.c: reinitialize zhdr structs after migration - [x86] apic: Silence -Wtype-limits compiler warnings - [arm*] mm/cma.c: fail if fixed declaration can't be honored - mm/ioremap: check virtual address alignment while creating huge mappings - coda: add error handling for fget - uapi linux/coda_psdev.h: move upc_req definition from uapi to kernel side headers - ipc/mqueue.c: only perform resource calculation if user valid - device-dax: fix memory and resource leak if hotplug fails - mm/hotplug: make remove_memory() interface usable - stacktrace: Force USER_DS for stack_trace_save_user() - [x86] crypto: ccp - Fix SEV_VERSION_GREATER_OR_EQUAL - xen/pv: Fix a boot up hang revealed by int3 self test - [x86] kvm: Don't call kvm_spurious_fault() from .fixup - [x86] paravirt: Fix callee-saved function ELF sizes - [x86] boot: Remove multiple copy of static function sanitize_boot_params() - bpf: Disable GCC -fgcse optimization for ___bpf_prog_run() - drm/nouveau: fix memory leak in nouveau_conn_reset() - drm/nouveau/dmem: missing mutex_lock in error path - kconfig: Clear "written" flag to avoid data loss - tpm: Fix null pointer dereference on chip register error path - Btrfs: fix incremental send failure after deduplication - Btrfs: fix race leading to fs corruption after transaction abort - dax: Fix missed wakeup in put_unlocked_entry() - fgraph: Remove redundant ftrace_graph_notrace_addr() test - [armhf,arm64] mmc: dw_mmc: Fix occasional hang after tuning on eMMC - [armhf] mmc: meson-mx-sdio: Fix misuse of GENMASK macro - mmc: mmc_spi: Enable stable writes - gpiolib: Preserve desc->flags when setting state - gpio: don't WARN() on NULL descs if gpiolib is disabled - gpiolib: fix incorrect IRQ requesting of an active-low lineevent - IB/hfi1: Fix Spectre v1 vulnerability - drm/nouveau: Only release VCPI slots on mode changes - mtd: rawnand: micron: handle on-die "ECC-off" devices correctly - eeprom: at24: make spd world-readable again - [arm*] i2c: iproc: Fix i2c master read more than 63 bytes - selinux: fix memory leak in policydb_init() - [x86] ALSA: hda: Fix 1-minute detection delay when i915 module is not available (see #931507) - mm: vmscan: check if mem cgroup is disabled or not before calling memcg slab shrinker - mm: migrate: fix reference check race between __find_get_block() and migration - mm: compaction: avoid 100% CPU usage during compaction when a task is killed - mm/migrate.c: initialize pud_entry in migrate_vma() - loop: Fix mount(2) failure due to race with LOOP_SET_FD - [s390x] dasd: fix endless loop after read unit address configuration - cgroup: kselftest: relax fs_spec checks - [hppa] Add archclean Makefile target - [hppa] Strip debug info from kernel before creating compressed vmlinuz - [hppa] Fix build of compressed kernel even with debug enabled - drivers/perf: arm_pmu: Fix failure path in PM notifier - [arm64] compat: Allow single-byte watchpoints on all addresses - [arm64] cpufeature: Fix feature comparison for CTR_EL0.{CWG,ERG} - io_uring: fix KASAN use after free in io_sq_wq_submit_work - scsi: mpt3sas: Use 63-bit DMA addressing on SAS35 HBA - nbd: replace kill_bdev() with __invalidate_device() again - xen/swiotlb: fix condition for calling xen_destroy_contiguous_region() - xen/gntdev.c: Replace vm_map_pages() with vm_map_pages_zero() - RDMA/devices: Do not deadlock during client removal - IB/mlx5: Fix unreg_umr to ignore the mkey state - IB/mlx5: Use direct mkey destroy command upon UMR unreg failure - IB/mlx5: Move MRs to a kernel PD when freeing them to the MR cache - IB/mlx5: Fix clean_mr() to work in the expected order - IB/mlx5: Fix RSS Toeplitz setup to be aligned with the HW specification - IB/hfi1: Check for error on call to alloc_rsm_map_table - IB/hfi1: Drop all TID RDMA READ RESP packets after r_next_psn - IB/hfi1: Field not zero-ed when allocating TID flow memory - [x86] drm/i915/perf: fix ICL perf register offsets - [x86] drm/i915/gvt: fix incorrect cache entry for guest page mapping - [x86] cpufeatures: Carve out CQM features retrieval - [x86] cpufeatures: Combine word 11 and 12 into a new scattered features word - [x86] speculation: Prepare entry code for Spectre v1 swapgs mitigations - [x86] speculation: Enable Spectre v1 swapgs mitigations (CVE-2019-1125) - [amd64] entry: Use JMP instead of JMPQ - [x86] speculation/swapgs: Exclude ATOMs from speculation through SWAPGS - Documentation: Add swapgs description to the Spectre v1 documentation [ Ben Hutchings ] * [armhf] udeb: Remove davinci_cpdma from nic-modules (fixes FTBFS) * Bump ABI to 2 * [armel/marvell] Increase maximum image size (fixes FTBFS): - This removes support for QNAP TS-109, TS-119, TS-209, TS-219, TS-409, and HP Media Vault mv2120 - This may be reverted if we can disable or modularise some features [ Julien Cristau ] * Fix libcpupower-dev's Depends field to account for SONAME bump. -- Ben Hutchings Wed, 07 Aug 2019 14:50:10 +0100 linux (5.2.6-1) unstable; urgency=medium * New upstream release: https://kernelnewbies.org/Linux_5.1 https://kernelnewbies.org/Linux_5.2 * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.2.1 https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.2.2 https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.2.3 https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.2.4 https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.2.5 https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.2.6 [ Bastian Germann ] * [armhf] Enable C_CAN as a module. (Closes: #929968) [ Ben Hutchings ] * Drop "x86/boot: Add ACPI RSDP address to setup_header", which should not have been applied to 4.20 or later * Drop redundant part of "Install perf scripts non-executable" * Drop "kbuild: Use -nostdinc in compile tests", which is no longer needed * debian/rules.d/scripts/kconfig: Update for upstream file renaming * debian/rules.d/scripts/mod: Add uuid_t and UUID_STRING_LEN definitions * liblockdep: Disable until it can be built again * libcpupower: Bump soversion since 2 exported functions have been removed * libbpf: Stop overriding upstream soname; rename shlib package to libbpf0 * vfs: Enable FS_ENCRYPTION as built-in; disable on armel/marvell * net: Enable NET_DEVLINK as built-in; disable on armel/marvell * aufs: Update support patchset to aufs5.2 20190805 * lockdown: Update for 5.2: - Update "acpi: Ignore acpi_rsdp kernel param when the kernel ..." - Add "tracefs: Restrict tracefs when the kernel is locked down" - Add "efi: Restrict efivar_ssdt_load when the kernel is locked down" - Drop "MODSIGN: Import certificates from UEFI Secure Boot" * [rt] Rebase onto 5.2.6, and re-enable * [armhf,arm64] gpu: Enable DRM_LIMA, DRM_PANFROST as modules * sched: Enable PSI (Closes: #931247) * [armhf,arm64] power: Enable ENERGY_MODEL * [armhf,arm64] cpufreq: Enable CPU_FREQ_DEFAULT_GOV_SCHEDUTIL (instead of CPU_FREQ_DEFAULT_GOV_PERFORMANCE) * hamradio: Disable auto-loading as mitigation against local exploits * hamradio: Enable most options in top-level config: - [arm64,ia64,mips*,riscv64,s390x,sh4,sparc64] Enable AX25, NETROM, ROSE, and all possible drivers (Closes: #920651) - [alpha,amd64,armel] ax25: Enable AX25_DAMA_SLAVE - [armhf] Enable BPQETHER, BAYCOM_SER_FDX, BAYCOM_SER_HDX, BAYCOM_PAR, BAYCOM_EPP, YAM as modules * [armel/rpi,armhf] media: Enable VIDEO_BCM2835 as module * usb/typec: Enable TYPEC_DP_ALTMODE, TYPEC_NVIDIA_ALTMODE as modules (Closes: #931752) * [amd64/cloud-amd64] hwrandom: Enable HW_RANDOM_VIRTIO (Closes: #914511) * [ppc64*] crypto: Enable CRYPTO_DEV_NX, and CRYPTO_DEV_NX_ENCRYPT, CRYPTO_DEV_NX_COMPRESS, CRYPTO_DEV_NX_COMPRESS_PSERIES, CRYPTO_DEV_NX_COMPRESS_POWERNV as modules (Closes: #931374) * [ppc64*] Disable PPC_TRANSACTIONAL_MEM (Closes: #866122) [ Vagrant Cascadian ] * [arm64] Enable modules to support audio on pinebook: SND_SUN4I_I2S, SND_SUN8I_CODEC, SND_SUN50I_CODEC_ANALOG, SND_SIMPLE_CARD, SND_SOC_SIMPLE_AMPLIFIER. (Closes: #921019) [ Romain Perier ] * Refreshed patches: - debian/revert-objtool-fix-config_stack_validation-y-warning.patch - debian/dfsg/video-remove-nvidiafb-and-rivafb.patch - debian/gitignore.patch - debian/mips-disable-werror.patch - bugfix/all/firmware-remove-redundant-log-messages-from-drivers.patch - bugfix/arm/arm-mm-export-__sync_icache_dcache-for-xen-privcmd.patch - bugfix/powerpc/powerpc-lib-makefile-don-t-pull-in-quad.o-for-32-bit.patch - bugfix/all/ radeon-amdgpu-firmware-is-required-for-drm-and-kms-on-r600-onward.patch - bugfix/all/disable-some-marvell-phys.patch - debian/overlayfs-permit-mounts-in-userns.patch - bugfix/all/tools-perf-remove-shebangs.patch - debian/ntfs-mark-it-as-broken.patch - features/all/db-mok-keyring/ 0003-MODSIGN-checking-the-blacklisted-hash-before-loading-a-kernel-module.patch - features/all/db-mok-keyring/ 0004-MODSIGN-Import-certificates-from-UEFI-Secure-Boot.patch - debian/android-enable-building-ashmem-and-binder-as-modules.patch - features/all/aufs5/aufs5-mmap.patch - features/all/aufs5/aufs5-standalone.patch - features/all/lockdown/ 0029-efi-Lock-down-the-kernel-if-booted-in-secure-boot-mo.patch * Enable coreboot memconsole (Closes: #872069) * [rt] Update to 5.2-rt1 [ Karsten Merker ] * [riscv64] Change the kernel image format from ELF to flat Image. (Closes: #928451) * [riscv64] Update config and image format (Closes: #933603): - Enable SiFive UART and UART console support - Enable clock drivers for the SiFive FU540 - Backport kernel image header support from kernel 5.3 [ Uwe Kleine-König ] * [armhf] Add support for all i.MX6 variants. * enable XFRM_STATISTICS (Closes: #929938) * [arm64] Add support for Raspberry Pi 3 camera host interface (Closes: #933228) * Enable CRYPTO_ZSTD for ZRAM with ZSTD compression (Closes: #932722) [ Lubomir Rintel ] * [armhf] Enable config items for OLPC XO-1.75 (Closes: #927791) -- Ben Hutchings Mon, 05 Aug 2019 02:27:14 +0100 linux (5.0.2-1~exp1) experimental; urgency=medium * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.2 [ Vagrant Cascadian ] * [arm64,armhf] Enable PHY_ROCKCHIP_INNO_HDMI as modules. [ Ben Hutchings ] * [amd64] kexec: Enable KEXEC_SIG, replacing KEXEC_VERIFY_SIG * [armel] MTD: Enable MTD_PHYSMAP as module and set MTD_PHYSMAP_OF=y - udeb: Include physmap instead of physmap_of in mtd-modules (fixes FTBFS) * [armhf] sound/soc/ti: Enable SND_SOC_DAVINCI_MCASP, SND_SOC_NOKIA_RX51, SND_SOC_OMAP3_PANDORA, SND_SOC_OMAP3_TWL4030, SND_SOC_OMAP_ABE_TWL6040 as modules; replacing SND_DAVINCI_SOC_MCASP, SND_OMAP_SOC_RX51, SND_OMAP_SOC_OMAP3_PANDORA, SND_OMAP_SOC_OMAP_TWL4030, SND_OMAP_SOC_OMAP_ABE_TWL6040 respectively * udeb: Add thermal_sys to kernel-image (fixes FTBFS on mips*, ppc64*, riscv64) * [powerpc*] mm: Only define MAX_PHYSMEM_BITS in SPARSEMEM configurations (fixes FTBFS on powerpc, powerpcspe) * debian/source/lintian-overrides: Override license-problem-gfdl-invariants in more files * debian/rules: Remove debian/*.substvars in clean target * debian/source/lintian-overrides: Override orig-tarball-missing-upstream-signature -- Ben Hutchings Mon, 18 Mar 2019 04:01:01 +0000 linux (5.0.1-1~exp1) experimental; urgency=medium * New upstream release: https://kernelnewbies.org/Linux_5.0 * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.1 [ YunQiang Su ] * [mipsel, mips64el] Enable DRM_AST and FB_SM750 for loongson-3 install ast and sm750fb to loongson-3's fb-modules * [mips r6] Disable JUMP_LABEL for now: it will cause Reserved Instruction. Enable SERIAL_OF_PLATFORM, if not, userland shows nothing. Enable CPU_HAS_MSA, HIGHMEM, CRYPTO_CRC32_MIPS, and NR_CPUS to 16. Support some boston drivers: IMG_ASCII_LCD, I2C_EG20T, PCH_PHUB, MMC, PCIE_XILINX, RTC_DRV_M41T80, SPI_TOPCLIFF_PCH. [ Hideki Yamane ] * [x86] Enable Touchpad support on Gemini Lake (Closes: #917388) [ Helge Deller ] * [hppa] Build only 32- and 64-bit SMP-kernel: Alternative live-patching code will patch kernel for UP at boot if necessary. [ Romain Perier ] * Refreshed debian/export-symbols-needed-by-android-drivers.patch to export __close_fd_get_file() and task_work_add(), both required by binder. * Refreshed debian/revert-objtool-fix-config_stack_validation-y-warning.patch, so this can be applied against 4.20.4 * Refreshed patch for lockdown 0028-efi-Add-an-EFI_SECURE_BOOT-flag-to-indicate-secure-b.patch, so this can be applied against >= 4.20.13 [ Marcin Juszkiewicz ] * udeb: Add virtio-gpu into d-i to get graphical output in VM instances. [ Ben Hutchings ] * SCSI: Enable SCSI_MYRB, SCSI_MYRS as modules, replacing BLK_DEV_DAC960 * [arm64] remoteproc: Enable QCOM_Q6V5_MSS, renamed version of QCOM_Q6V5_PIL * [x86] drivers/gpu/drm/amd: Re-enable HSA_AMD (Closes: #920454) * genpatch-aufs: Update to use aufs5-standalone * aufs: Update support patchset to aufs5.0 20190311 * lockdown: Update patchset to 2019-02-18 version -- Ben Hutchings Tue, 12 Mar 2019 23:15:21 +0000 linux (4.20-1~exp1) experimental; urgency=medium * New upstream release: https://kernelnewbies.org/Linux_4.20 [ Ben Hutchings ] * aufs: Update support patchset to aufs4.x-rcN 20181217 * [rt] Disable until it is updated for 4.20 or later * [x86] udeb: Move rfkill to new rfkill-modules package to avoid duplication * debian/source/lintian-overrides: Update overrides for GFDL notices -- Ben Hutchings Mon, 24 Dec 2018 04:26:47 +0000 linux (4.19.37-6) unstable; urgency=high [ John Paul Adrian Glaubitz ] * [sh4]: Check for kprobe trap number before trying to handle a kprobe trap [ Salvatore Bonaccorso ] * tcp: refine memory limit test in tcp_fragment() (Closes: #930904) * ptrace: Fix ->ptracer_cred handling for PTRACE_TRACEME (CVE-2019-13272) [ Steve McIntyre ] * [arm64] Improve support for the Huawei TaiShan server platform (Closes: #930554): - Enable the HNS/ROCE Infiniband driver - Backport fixes from 4.20 and 4.21 for HNS3 networking, hisi_sas SAS and HNS/ROCE Infiniband - Add module:drivers/scsi/hisi_sas/* to the ABI ignore list [ Cyril Brulebois ] * [arm] Backport DTB support for Rasperry Pi Compute Module 3. * [arm64] Backport DTB support for Rasperry Pi Compute Module 3. -- Salvatore Bonaccorso Fri, 19 Jul 2019 00:23:17 +0200