Accepted linux-5.10 5.10.197-1~deb10u1 (source) into oldoldstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Tue, 08 Aug 2023 19:36:53 +0200
Source: linux-5.10
Architecture: source
Version: 5.10.197-1~deb10u1
Distribution: buster-security
Urgency: high
Maintainer: Debian Kernel Team <debian-kernel@lists.debian.org>
Changed-By: Ben Hutchings <benh@debian.org>
Closes: 871216 1035359 1036543 1044518 1050622
Changes:
linux-5.10 (5.10.197-1~deb10u1) buster-security; urgency=high
.
* Rebuild for buster:
- Change ABI number to 0.deb10.26
.
linux (5.10.197-1) bullseye; urgency=medium
.
* New upstream stable update:
https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.192
- [arm64] mmc: sdhci-f-sdh30: Replace with sdhci_pltfm
- macsec: Fix traffic counters/statistics
- macsec: use DEV_STATS_INC()
- net/mlx5: Refactor init clock function
- net/mlx5: Move all internal timer metadata into a dedicated struct
- net/mlx5: Skip clock update work when device is in error state
- drm/radeon: Fix integer overflow in radeon_cs_parser_init
- ALSA: emu10k1: roll up loops in DSP setup code for Audigy
- [x86] ASoC: Intel: sof_sdw: add quirk for MTL RVP
- [x86] ASoC: Intel: sof_sdw: add quirk for LNL RVP
- [armhf] dts: imx6dl: prtrvt, prtvt7, prti6q, prtwd2: fix USB related
warnings
- [x86] ASoC: Intel: sof_sdw: Add support for Rex soundwire
- iopoll: Call cpu_relax() in busy loops
- quota: Properly disable quotas when add_dquot_ref() fails
- quota: fix warning in dqgrab()
- dma-remap: use kvmalloc_array/kvfree for larger dma memory remap
- drm/amdgpu: install stub fence into potential unused fence pointers
- HID: add quirk for 03f0:464a HP Elite Presenter Mouse
- RDMA/mlx5: Return the firmware result upon destroying QP/RQ
- ovl: check type and offset of struct vfsmount in ovl_entry
- udf: Fix uninitialized array access for some pathnames
- fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
- FS: JFS: Fix null-ptr-deref Read in txBegin
- FS: JFS: Check for read-only mounted filesystem in txBegin
- media: v4l2-mem2mem: add lock to protect parameter num_rdy
- usb: gadget: u_serial: Avoid spinlock recursion in __gs_console_push
- [arm64,armhf] usb: chipidea: imx: don't request QoS for imx8ulp
- [arm64,armhf] usb: chipidea: imx: add missing USB PHY DPDM wakeup setting
- gfs2: Fix possible data races in gfs2_show_options()
- pcmcia: rsrc_nonstatic: Fix memory leak in nonstatic_release_resource_db()
- Bluetooth: L2CAP: Fix use-after-free
- Bluetooth: btusb: Add MT7922 bluetooth ID for the Asus Ally
- drm/amdgpu: Fix potential fence use-after-free v2
- ALSA: hda/realtek: Add quirks for Unis H3C Desktop B760 & Q760
- ALSA: hda: fix a possible null-pointer dereference due to data race in
snd_hdac_regmap_sync()
- ring-buffer: Do not swap cpu_buffer during resize process
- bus: mhi: Add MHI PCI support for WWAN modems
- bus: mhi: Add MMIO region length to controller structure
- bus: mhi: Move host MHI code to "host" directory
- bus: mhi: host: Range check CHDBOFF and ERDBOFF
- [mips*] irqchip/mips-gic: Get rid of the reliance on irq_cpu_online()
- [mips*] irqchip/mips-gic: Use raw spinlock for gic_lock
- usb: gadget: udc: core: Introduce check_config to verify USB configuration
- usb: cdns3: allocate TX FIFO size according to composite EP number
- usb: cdns3: fix NCM gadget RX speed 20x slow than expection at iMX8QM
- [arm64] USB: dwc3: qcom: fix NULL-deref on suspend
- [arm*] mmc: bcm2835: fix deferred probing
- [arm64,armhf] mmc: sunxi: fix deferred probing
- mmc: core: add devm_mmc_alloc_host
- [arm64] mmc: meson-gx: use devm_mmc_alloc_host
- [arm64] mmc: meson-gx: fix deferred probing
- tracing/probes: Have process_fetch_insn() take a void * instead of pt_regs
- tracing/probes: Fix to update dynamic data counter if fetcharg uses it
- virtio-mmio: Use to_virtio_mmio_device() to simply code
- virtio-mmio: don't break lifecycle of vm_dev
- i2c: bcm-iproc: Fix bcm_iproc_i2c_isr deadlock issue
- fbdev: mmp: fix value check in mmphw_probe()
- [powerpc*] rtas_flash: allow user copy to flash block cache objects
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
- tty: serial: fsl_lpuart: Clear the error flags by writing 1 for lpuart32
platforms
- btrfs: fix BUG_ON condition in btrfs_cancel_balance
- i2c: designware: Handle invalid SMBus block data response length value
- net: xfrm: Fix xfrm_address_filter OOB read
- net: af_key: fix sadb_x_filter validation
- net: xfrm: Amend XFRMA_SEC_CTX nla_policy structure
- xfrm: fix slab-use-after-free in decode_session6
- ip6_vti: fix slab-use-after-free in decode_session6
- ip_vti: fix potential slab-use-after-free in decode_session6
- xfrm: add NULL check in xfrm_update_ae_params (CVE-2023-3772)
- xfrm: add forgotten nla_policy for XFRMA_MTIMER_THRESH (CVE-2023-3773)
- selftests: mirror_gre_changes: Tighten up the TTL test match
- ipvs: fix racy memcpy in proc_do_sync_threshold
- netfilter: nft_dynset: disallow object maps
- net: phy: broadcom: stub c45 read/write for 54810
- team: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- i40e: fix misleading debug logs
- net: dsa: mv88e6xxx: Wait for EEPROM done before HW reset
- sock: Fix misuse of sk_under_memory_pressure()
- net: do not allow gso_size to be set to GSO_BY_FRAGS
- bus: ti-sysc: Flush posted write on enable before reset
- ALSA: hda/realtek - Remodified 3k pull low procedure
- serial: 8250: Fix oops for port->pm on uart_change_pm()
- ALSA: usb-audio: Add support for Mythware XA001AU capture and playback
interfaces.
- cifs: Release folio lock on fscache read hit.
- mmc: wbsd: fix double mmc_free_host() in wbsd_init()
- mmc: block: Fix in_flight[issue_type] value error
- netfilter: set default timeout to 3 secs for sctp shutdown send and recv
state
- af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (CVE-2023-4622)
- virtio-net: set queues after driver_ok
- net: fix the RTO timer retransmitting skb every 1ms if linear option is
enabled
- [arm64] mmc: f-sdh30: fix order of function calls in sdhci_f_sdh30_remove
- [x86] cpu: Fix __x86_return_thunk symbol type
- [x86] cpu: Fix up srso_safe_ret() and __x86_return_thunk()
- [x86] alternative: Make custom return thunk unconditional
- objtool: Add frame-pointer-specific function ignore
- [x86] ibt: Add ANNOTATE_NOENDBR
- [x86] cpu: Clean up SRSO return thunk mess
- [x86] cpu: Rename original retbleed methods
- [x86] cpu: Rename srso_(.*)_alias to srso_alias_\1
- [x86] cpu: Cleanup the untrain mess
- [x86] srso: Explain the untraining sequences a bit more
- [x86] static_call: Fix __static_call_fixup()
- [x86] retpoline: Don't clobber RFLAGS during srso_safe_ret()
- [x86] CPU/AMD: Fix the DIV(0) initial fix attempt (CVE-2023-20588)
- [x86] srso: Disable the mitigation on unaffected configurations
- [x86] retpoline,kprobes: Fix position of thunk sections with
CONFIG_LTO_CLANG
- [x86] objtool/x86: Fixup frame-pointer vs rethunk
- [x86] srso: Correct the mitigation status when SMT is disabled
https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.193
- [x86] objtool/x86: Fix SRSO mess
- NFSv4: fix out path in __nfs4_get_acl_uncached
- xprtrdma: Remap Receive buffers after a reconnect
- PCI: acpiphp: Reassign resources on bridge if necessary
- dlm: improve plock logging if interrupted
- dlm: replace usage of found with dedicated list iterator variable
- fs: dlm: add pid to debug log
- fs: dlm: change plock interrupted message to debug again
- fs: dlm: use dlm_plock_info for do_unlock_close
- fs: dlm: fix mismatch of plock results from userspace
- [mips*] cpu-features: Enable octeon_cache by cpu_type
- [mips*] cpu-features: Use boot_cpu_type for CPU type based features
- fbdev: Improve performance of sys_imageblit()
- fbdev: Fix sys_imageblit() for arbitrary image widths
- fbdev: fix potential OOB read in fast_imageblit()
- dm integrity: increase RECALC_SECTORS to improve recalculate speed
- dm integrity: reduce vmalloc space footprint on 32-bit architectures
- ALSA: pcm: Fix potential data race at PCM memory allocation helpers
- drm/amd/display: do not wait for mpc idle if tg is disabled
- drm/amd/display: check TG is non-null before checking if enabled
- libceph, rbd: ignore addr->type while comparing in some cases
- rbd: make get_lock_owner_info() return a single locker or NULL
- rbd: retrieve and check lock owner twice before blocklisting
- rbd: prevent busy loop when requesting exclusive lock
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
- tracing: Fix memleak due to race between current_tracer and trace
- sock: annotate data-races around prot->memory_pressure
- dccp: annotate data-races in dccp_poll()
- ipvlan: Fix a reference count leak warning in ipvlan_ns_exit()
- [arm64] net: bcmgenet: Fix return value check for fixed_phy_register()
- net: validate veth and vxcan peer ifindexes
- ice: fix receive buffer size miscalculation
- igb: Avoid starting unnecessary workqueues
- net/sched: fix a qdisc modification with ambiguous command request
- netfilter: nf_tables: fix out of memory error handling
- rtnetlink: return ENODEV when ifname does not exist and group is given
- rtnetlink: Reject negative ifindexes in RTM_NEWLINK
- net: remove bond_slave_has_mac_rcu()
- bonding: fix macvlan over alb bond support
- [powerpc*] ibmveth: Use dcbf rather than dcbfl
- NFSv4: Fix dropped lock for racing OPEN and delegation return
- clk: Fix slab-out-of-bounds error in devm_clk_release()
- mm: add a call to flush_cache_vmap() in vmap_pfn()
- NFS: Fix a use after free in nfs_direct_join_group()
- nfsd: Fix race to FREE_STATEID and cl_revoked
- selinux: set next pointer before attaching to list
- batman-adv: Trigger events for auto adjusted MTU
- batman-adv: Don't increase MTU when set by user
- batman-adv: Do not get eth header before batadv_check_management_packet
- batman-adv: Fix TT global entry leak when client roamed back
- batman-adv: Fix batadv_v_ogm_aggr_send memory leak
- batman-adv: Hold rtnl lock during MTU update via netlink
- lib/clz_ctz.c: Fix __clzdi2() and __ctzdi2() for 32-bit kernels
- [powerpc*] of: dynamic: Refactor action prints to not use "%pOF" inside
devtree_lock
- PCI: acpiphp: Use pci_assign_unassigned_bridge_resources() only for
non-root bus
- [x86] drm/vmwgfx: Fix shader stage validation
- drm/display/dp: Fix the DP DSC Receiver cap size
- [x86] fpu: Set X86_FEATURE_OSXSAVE feature after enabling OSXSAVE in CR4
(Closes: #1050622)
- torture: Fix hang during kthread shutdown phase
- tick: Detect and fix jiffies update stall
- timers/nohz: Switch to ONESHOT_STOPPED in the low-res handler when the
tick is stopped
- cgroup/cpuset: Rename functions dealing with DEADLINE accounting
- sched/cpuset: Bring back cpuset_mutex
- sched/cpuset: Keep track of SCHED_DEADLINE task in cpusets
- cgroup/cpuset: Iterate only if DEADLINE tasks are present
- sched/deadline: Create DL BW alloc, free & check overflow interface
- cgroup/cpuset: Free DL BW in case can_attach() fails
- [x86] drm/i915: Fix premature release of request's reusable memory
- ASoC: rt711: add two jack detection modes
- scsi: snic: Fix double free in snic_tgt_create()
- scsi: core: raid_class: Remove raid_component_add()
- mm,hwpoison: refactor get_any_page
- mm: fix page reference leak in soft_offline_page()
- mm: memory-failure: kill soft_offline_free_page()
- mm: memory-failure: fix unexpected return value in soft_offline_page()
- [x86] ASoC: Intel: sof_sdw: include rt711.h for RT711 JD mode
- mm,hwpoison: fix printing of page flags
https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.194
- module: Expose module_init_layout_section()
- [arm64] module-plts: inline linux/moduleloader.h
- [arm64] module: Use module_init_layout_section() to spot init sections
- [armel,armhf] module: Use module_init_layout_section() to spot init
sections
- mhi: pci_generic: Fix implicit conversion warning
- Revert "drm/amdgpu: install stub fence into potential unused fence
pointers"
- rcu: Prevent expedited GP from enabling tick on offline CPU
- rcu-tasks: Fix IPI failure handling in trc_wait_for_one_reader
- rcu-tasks: Wait for trc_read_check_handler() IPIs
- rcu-tasks: Add trc_inspect_reader() checks for exiting critical section
https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.195
- erofs: ensure that the post-EOF tails are all zeroed
- mmc: au1xmmc: force non-modular build and remove symbol_get usage
- net: enetc: use EXPORT_SYMBOL_GPL for enetc_phc_index
- rtc: ds1685: use EXPORT_SYMBOL_GPL for ds1685_rtc_poweroff
- modules: only allow symbol_get of EXPORT_SYMBOL_GPL modules
- USB: serial: option: add Quectel EM05G variant (0x030e)
- USB: serial: option: add FOXCONN T99W368/T99W373 product
- [arm64,armhf] usb: dwc3: meson-g12a: do post init to fix broken usb after
resumption
- [arm64,armhf] usb: chipidea: imx: improve logic if samsung,picophy-*
parameter is 0
- HID: wacom: remove the battery when the EKR is off
- staging: rtl8712: fix race condition
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race
condition (CVE-2023-1989)
- configfs: fix a race in configfs_lookup()
- serial: qcom-geni: fix opp vote on shutdown
- serial: sc16is7xx: fix broken port 0 uart init
- serial: sc16is7xx: fix bug when first setting GPIO direction
- firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe
- fsi: master-ast-cf: Add MODULE_FIRMWARE macro
- nilfs2: fix general protection fault in nilfs_lookup_dirty_data_buffers()
- nilfs2: fix WARNING in mark_buffer_dirty due to discarded buffer reuse
- pinctrl: amd: Don't show `Invalid config param` errors
- ASoC: rt5682: Fix a problem with error handling in the io init function of
the soundwire
- phy: qcom-snps-femto-v2: use qcom_snps_hsphy_suspend/resume error code
- media: pulse8-cec: handle possible ping error
- media: pci: cx23885: fix error handling for cx23885 ATSC boards
- 9p: virtio: make sure 'offs' is initialized in zc_request
- ASoC: da7219: Flush pending AAD IRQ when suspending
- ASoC: da7219: Check for failure reading AAD IRQ events
- ethernet: atheros: fix return value check in atl1c_tso_csum()
- vxlan: generalize vxlan_parse_gpe_hdr and remove unused args
- [s390x] dasd: use correct number of retries for ERP requests
- [s390x] dasd: fix hanging device after request requeue
- fs/nls: make load_nls() take a const parameter
- ASoc: codecs: ES8316: Fix DMIC config
- [x86] platform/x86: intel: hid: Always call BTNL ACPI method
- [x86] platform/x86: huawei-wmi: Silence ambient light sensor
- drm/amd/display: Exit idle optimizations before attempt to access PHY
- ovl: Always reevaluate the file signature for IMA
- ata: pata_arasan_cf: Use dev_err_probe() instead dev_err() in data_xfer()
- security: keys: perform capable check only on privileged operations
- kprobes: Prohibit probing on CFI preamble symbol
- clk: fixed-mmio: make COMMON_CLK_FIXED_MMIO depend on HAS_IOMEM
- net: usb: qmi_wwan: add Quectel EM05GV2
- idmaengine: make FSL_EDMA and INTEL_IDMA64 depends on HAS_IOMEM
- scsi: qedi: Fix potential deadlock on &qedi_percpu->p_work_lock
- netlabel: fix shift wrapping bug in netlbl_catmap_setlong()
- bnx2x: fix page fault following EEH recovery
- sctp: handle invalid error codes without calling BUG()
- scsi: storvsc: Always set no_report_opcodes
- ALSA: seq: oss: Fix racy open/close of MIDI devices
- tracing: Introduce pipe_cpumask to avoid race on trace_pipes
- net: Avoid address overwrite in kernel_connect
- udf: Check consistency of Space Bitmap Descriptor
- udf: Handle error when adding extent to a file
- Revert "net: macsec: preserve ingress frame ordering"
- reiserfs: Check the return value from __getblk()
- eventfd: Export eventfd_ctx_do_read()
- eventfd: prevent underflow for eventfd semaphores
- fs: Fix error checking for d_hash_and_lookup()
- tmpfs: verify {g,u}id mount options correctly
- refscale: Fix uninitalized use of wait_queue_head_t
- OPP: Fix passing 0 to PTR_ERR in _opp_attach_genpd()
- [x86] decompressor: Don't rely on upper 32 bits of GPRs being preserved
- perf/imx_ddr: don't enable counter0 if none of 4 counters are used
- [s390x] pkey: fix/harmonize internal keyblob headers
- [s390x] paes: fix PKEY_TYPE_EP11_AES handling for secure keyblobs
- [x86] efistub: Fix PCI ROM preservation in mixed mode
- [x86] cpufreq: powernow-k8: Use related_cpus instead of cpus in
driver.exit()
- bpftool: Use a local bpf_perf_event_value to fix accessing its fields
- bpf: Clear the probe_addr for uprobe
- tcp: tcp_enter_quickack_mode() should be static
- regmap: rbtree: Use alloc_flags for memory allocations
- udp: re-score reuseport groups when connected sockets are present
- bpf: reject unhashed sockets in bpf_sk_assign
- [arm64,armhf] spi: tegra20-sflash: fix to check return value of
platform_get_irq() in tegra_sflash_probe()
- can: gs_usb: gs_usb_receive_bulk_callback(): count RX overflow errors also
in case of OOM
- wifi: mwifiex: Fix OOB and integer underflow when rx packets
- wifi: mwifiex: fix error recovery in PCIE buffer descriptor management
- [armhf] crypto: stm32 - Properly handle pm_runtime_get failing
- crypto: api - Use work queue in crypto_destroy_instance
- Bluetooth: nokia: fix value check in nokia_bluetooth_serdev_probe()
- Bluetooth: Fix potential use-after-free when clear keys
- net: tcp: fix unexcepted socket die when snd_wnd is 0
- ice: ice_aq_check_events: fix off-by-one check when filling buffer
- [arm64] crypto: caam - fix unchecked return value error
- hwrng: iproc-rng200 - Implement suspend and resume calls
- lwt: Fix return values of BPF xmit ops
- lwt: Check LWTUNNEL_XMIT_CONTINUE strictly
- fs: ocfs2: namei: check return value of ocfs2_add_entry()
- wifi: mwifiex: fix memory leak in mwifiex_histogram_read()
- wifi: mwifiex: Fix missed return in oob checks failed path
- samples/bpf: fix broken map lookup probe
- wifi: ath9k: fix races between ath9k_wmi_cmd and ath9k_wmi_ctrl_rx
- wifi: ath9k: protect WMI command response buffer replacement with a lock
- wifi: mwifiex: avoid possible NULL skb pointer dereference
- Bluetooth: btusb: Do not call kfree_skb() under spin_lock_irqsave()
- wifi: ath9k: use IS_ERR() with debugfs_create_dir()
- net: arcnet: Do not call kfree_skb() under local_irq_disable()
- mlxsw: i2c: Fix chunk size setting in output mailbox buffer
- mlxsw: i2c: Limit single transaction buffer size
- hwmon: (tmp513) Fix the channel number in tmp51x_is_visible()
- net/sched: sch_hfsc: Ensure inner classes have fsc curve (CVE-2023-4623)
- netrom: Deny concurrent connect().
- drm/bridge: tc358764: Fix debug print parameter order
- quota: factor out dquot_write_dquot()
- quota: rename dquot_active() to inode_quota_active()
- quota: add new helper dquot_active()
- quota: fix dqput() to follow the guarantees dquot_srcu should provide
- ASoC: stac9766: fix build errors with REGMAP_AC97
- [arm64] dts: qcom: msm8996: Add missing interrupt to the USB2 controller
- drm/amdgpu: avoid integer overflow warning in
amdgpu_device_resize_fb_bar()
- [armel,armhf] dts: BCM5301X: Harmonize EHCI/OHCI DT nodes name
- [armel,armhf] dts: BCM53573: Describe on-SoC BCM53125 rev 4 switch
- [armel,armhf] dts: BCM53573: Drop nonexistent #usb-cells
- [armel,armhf] dts: BCM53573: Add cells sizes to PCIe node
- [armel,armhf] dts: BCM53573: Use updated "spi-gpio" binding properties
- [armhf] drm/etnaviv: fix dumping of active MMU context
- [x86] mm: Fix PAT bit missing from page protection modify mask
- [armel,armhf] dts: s3c64xx: align pinctrl with dtschema
- [armel,armhf] dts: samsung: s3c6410-mini6410: correct ethernet reg
addresses (split)
- [armel,armhf] dts: s5pv210: adjust node names to DT spec
- [armel,armhf] dts: s5pv210: add dummy 5V regulator for backlight on
SMDKv210
- [armel,armhf] dts: samsung: s5pv210-smdkv210: correct ethernet reg
addresses (split)
- drm: adv7511: Fix low refresh rate register for ADV7533/5
- [armel,armhf] dts: BCM53573: Fix Ethernet info for Luxul devices
- [arm64] dts: qcom: sdm845: Add missing RPMh power domain to GCC
- [arm64] dts: qcom: sdm845: Fix the min frequency of "ice_core_clk"
- drm/amdgpu: Update min() to min_t() in 'amdgpu_info_ioctl'
- md/bitmap: don't set max_write_behind if there is no write mostly device
- md/md-bitmap: hold 'reconfig_mutex' in backlog_store()
- [arm64,armhf] drm/tegra: Remove superfluous error messages around
platform_get_irq()
- [arm64,armhf] drm/tegra: dpaux: Fix incorrect return value of
platform_get_irq
- of: unittest: fix null pointer dereferencing in
of_unittest_find_node_by_name()
- [arm64,armhf] drm/armada: Fix off-by-one error in
armada_overlay_get_property()
- drm/panel: simple: Add missing connector type and pixel format for AUO
T215HVN01
- ima: Remove deprecated IMA_TRUSTED_KEYRING Kconfig
- drm: xlnx: zynqmp_dpsub: Add missing check for dma_set_mask
- [arm64] drm/msm/mdp5: Don't leak some plane state
- firmware: meson_sm: fix to avoid potential NULL pointer dereference
- smackfs: Prevent underflow in smk_set_cipso()
- drm/amd/pm: fix variable dereferenced issue in amdgpu_device_attr_create()
- [arm64] drm/msm/a2xx: Call adreno_gpu_init() earlier
- audit: fix possible soft lockup in __audit_inode_child()
- bus: ti-sysc: Fix build warning for 64-bit build
- bus: ti-sysc: Fix cast to enum warning
- of: unittest: Fix overlay type in apply/revert check
- ALSA: ac97: Fix possible error value of *rac97
- ipmi:ssif: Add check for kstrdup
- ipmi:ssif: Fix a memory leak when scanning for an adapter
- drivers: clk: keystone: Fix parameter judgment in _of_pll_clk_init()
- clk: sunxi-ng: Modify mismatched function name
- clk: qcom: gcc-sc7180: use ARRAY_SIZE instead of specifying num_parents
- clk: qcom: gcc-sc7180: Fix up gcc_sdcc2_apps_clk_src
- ext4: correct grp validation in ext4_mb_good_group
- clk: qcom: gcc-sm8250: use ARRAY_SIZE instead of specifying num_parents
- clk: qcom: gcc-sm8250: Fix gcc_sdcc2_apps_clk_src
- clk: qcom: reset: Use the correct type of sleep/delay based on length
- PCI: Mark NVIDIA T4 GPUs to avoid bus reset
- pinctrl: mcp23s08: check return value of devm_kasprintf()
- PCI: pciehp: Use RMW accessors for changing LNKCTL
- PCI/ASPM: Use RMW accessors for changing LNKCTL
- clk: imx8mp: fix sai4 clock
- clk: imx: composite-8m: fix clock pauses when set_rate would be a no-op
- vfio/type1: fix cap_migration information leak
- [powerpc*] fadump: reset dump area size if fadump memory reserve fails
- [powerpc*] perf: Convert fsl_emb notifier to state machine callbacks
- drm/amdgpu: Use RMW accessors for changing LNKCTL
- drm/radeon: Use RMW accessors for changing LNKCTL
- net/mlx5: Use RMW accessors for changing LNKCTL
- wifi: ath10k: Use RMW accessors for changing LNKCTL
- [powerpc*] pseries: Rework lppaca_shared_proc() to avoid DEBUG_PREEMPT
- nfs/blocklayout: Use the passed in gfp flags
- [powerpc*] iommu: Fix notifiers being shared by PCI and VIO buses
- jfs: validate max amount of blocks before allocation.
- fs: lockd: avoid possible wrong NULL parameter
- NFSD: da_addr_body field missing in some GETDEVICEINFO replies
- NFS: Guard against READDIR loop when entry names exceed MAXNAMELEN
- NFSv4.2: fix handling of COPY ERR_OFFLOAD_NO_REQ
- media: ad5820: Drop unsupported ad5823 from i2c_ and of_device_id tables
- media: i2c: tvp5150: check return value of devm_kasprintf()
- media: v4l2-core: Fix a potential resource leak in
v4l2_fwnode_parse_link()
- drivers: usb: smsusb: fix error handling code in smsusb_init_device
- media: dib7000p: Fix potential division by zero
- media: dvb-usb: m920x: Fix a potential memory leak in m920x_i2c_xfer()
- media: cx24120: Add retval check for cx24120_message_send()
- [arm64] scsi: hisi_sas: Print SAS address for v3 hw erroneous completion
print
- scsi: libsas: Introduce more SAM status code aliases in enum exec_status
- [arm64] scsi: hisi_sas: Modify v3 HW SSP underflow error processing
- [arm64] scsi: hisi_sas: Modify v3 HW SATA completion error processing
- [arm64] scsi: hisi_sas: Fix warnings detected by sparse
- [arm64] scsi: hisi_sas: Fix normally completed I/O analysed as failed
- media: rkvdec: increase max supported height for H.264
- media: mediatek: vcodec: Return NULL if no vdec_fb is found
- usb: phy: mxs: fix getting wrong state with mxs_phy_is_otg_host()
- scsi: RDMA/srp: Fix residual handling
- scsi: iscsi: Rename iscsi_set_param() to iscsi_if_set_param()
- scsi: iscsi: Add length check for nlattr payload
- scsi: iscsi: Add strlen() check in iscsi_if_set{_host}_param()
- scsi: be2iscsi: Add length check when parsing nlattrs
- scsi: qla4xxx: Add length check when parsing nlattrs
- serial: sprd: Assign sprd_port after initialized to avoid wrong access
- serial: sprd: Fix DMA buffer leak issue
- [x86] APM: drop the duplicate APM_MINOR_DEV macro
- scsi: qedf: Do not touch __user pointer in
qedf_dbg_stop_io_on_error_cmd_read() directly
- scsi: qedf: Do not touch __user pointer in qedf_dbg_debug_cmd_read()
directly
- scsi: qedf: Do not touch __user pointer in qedf_dbg_fp_int_cmd_read()
directly
- coresight: tmc: Explicit type conversions to prevent integer overflow
- dma-buf/sync_file: Fix docs syntax
- driver core: test_async: fix an error code
- IB/uverbs: Fix an potential error pointer dereference
- fsi: aspeed: Reset master errors after CFAM reset
- iommu/qcom: Disable and reset context bank before programming
- [amd64] iommu/vt-d: Fix to flush cache of PASID directory table
- media: go7007: Remove redundant if statement
- USB: gadget: f_mass_storage: Fix unused variable warning
- media: ov5640: Enable MIPI interface in ov5640_set_power_mipi()
- media: i2c: ov2680: Set V4L2_CTRL_FLAG_MODIFY_LAYOUT on flips
- media: ov2680: Remove auto-gain and auto-exposure controls
- media: ov2680: Fix ov2680_bayer_order()
- media: ov2680: Fix vflip / hflip set functions
- media: ov2680: Fix regulators being left enabled on ov2680_power_on()
errors
- cgroup:namespace: Remove unused cgroup_namespaces_init()
- scsi: core: Use 32-bit hostnum in scsi_host_lookup()
- scsi: fcoe: Fix potential deadlock on &fip->ctlr_lock
- serial: tegra: handle clk prepare error in tegra_uart_hw_init()
- [arm*] amba: bus: fix refcount leak
- Revert "IB/isert: Fix incorrect release of isert connection"
- RDMA/siw: Balance the reference of cep->kref in the error path
- RDMA/siw: Correct wrong debug message
- HID: logitech-dj: Fix error handling in logi_dj_recv_switch_to_dj_mode()
- HID: multitouch: Correct devm device reference for hidinput input_dev name
- [x86] speculation: Mark all Skylake CPUs as vulnerable to GDS
- tracing: Fix race issue between cpu buffer write and swap
- mtd: rawnand: brcmnand: Fix mtd oobsize
- [arm64,armhf] phy/rockchip: inno-hdmi: use correct vco_div_5 macro on
rk3328
- [arm64,armhf] phy/rockchip: inno-hdmi: round fractal pixclock in rk3328
recalc_rate
- [arm64,armhf] phy/rockchip: inno-hdmi: do not power on rk3328 post pll on
reg write
- rpmsg: glink: Add check for kstrdup
- mtd: spi-nor: Check bus width while setting QE bit
- mtd: rawnand: fsmc: handle clk prepare error in fsmc_nand_resume()
- um: Fix hostaudio build errors
- dmaengine: ste_dma40: Add missing IRQ check in d40_probe
- cpufreq: Fix the race condition while updating the transition_task of
policy
- virtio_ring: fix avail_wrap_counter in virtqueue_add_packed
- igmp: limit igmpv3_newpack() packet size to IP_MAX_MTU
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for
ip_set_hash_netportnet.c (CVE-2023-42753)
- netfilter: xt_u32: validate user space input
- netfilter: xt_sctp: validate the flag_info count
- skbuff: skb_segment, Call zero copy functions before using skbuff frags
- igb: set max size RX buffer when store bad packet is enabled
- PM / devfreq: Fix leak in devfreq_dev_release()
- ALSA: pcm: Fix missing fixup call in compat hw_refine ioctl
- printk: ringbuffer: Fix truncating buffer size min_t cast
- scsi: core: Fix the scsi_set_resid() documentation
- ipmi_si: fix a memleak in try_smi_init()
- [armhf] OMAP2+: Fix -Warray-bounds warning in _pwrdm_state_switch()
- backlight/gpio_backlight: Compare against struct fb_info.device
- backlight/bd6107: Compare against struct fb_info.device
- backlight/lv5207lp: Compare against struct fb_info.device
- [arm64] csum: Fix OoB access in IP checksum code for negative lengths
- media: dvb: symbol fixup for dvb_attach()
- Revert "scsi: qla2xxx: Fix buffer overrun"
- scsi: mpt3sas: Perform additional retries if doorbell read returns 0
- ntb: Drop packets when qp link is down
- ntb: Clean up tx tail index on link down
- ntb: Fix calculation ntb_transport_tx_free_entry()
- Revert "PCI: Mark NVIDIA T4 GPUs to avoid bus reset"
- procfs: block chmod on /proc/thread-self/comm
- dlm: fix plock lookup when using multiple lockspaces
- dccp: Fix out of bounds access in DCCP error handler
- X.509: if signature is unsupported skip validation
- net: handle ARPHRD_PPP in dev_is_mac_header_xmit()
- fsverity: skip PKCS#7 parser when keyring is empty
- pstore/ram: Check start of empty przs during init
- [s390x] ipl: add missing secure/has_secure file to ipl type 'unknown'
- [armhf] crypto: stm32 - fix loop iterating through scatterlist for DMA
- cpufreq: brcmstb-avs-cpufreq: Fix -Warray-bounds bug
- usb: typec: bus: verify partner exists in typec_altmode_attention
- USB: core: Unite old scheme and new scheme descriptor reads
- USB: core: Change usb_get_device_descriptor() API
- USB: core: Fix race by not overwriting udev->descriptor in hub_port_init()
- USB: core: Fix oversight in SuperSpeed initialization
- usb: typec: tcpci: clear the fault status bit
- tracing: Zero the pipe cpumask on alloc to avoid spurious -EBUSY
- md/md-bitmap: remove unnecessary local variable in backlog_store()
- udf: initialize newblock to 0
- net/ipv6: SKB symmetric hash should incorporate transport ports
- io_uring: always lock in io_apoll_task_func
- io_uring: break out of iowq iopoll on teardown
- io_uring: break iopolling on signal
- scsi: qla2xxx: Fix deletion race condition
- scsi: qla2xxx: fix inconsistent TMF timeout
- scsi: qla2xxx: Fix erroneous link up failure
- scsi: qla2xxx: Turn off noisy message log
- scsi: qla2xxx: Remove unsupported ql2xenabledif option
- fbdev/ep93xx-fb: Do not assign to struct fb_info.dev
- drm/ast: Fix DRAM init on AST2200
- pinctrl: cherryview: fix address_space_handler() argument
- dt-bindings: clock: xlnx,versal-clk: drop select:false
- clk: imx: pll14xx: dynamically configure PLL for 393216000/361267200Hz
- clk: qcom: gcc-mdm9615: use proper parent for pll0_vote clock
- soc: qcom: qmi_encdec: Restrict string length in decode
- NFS: Fix a potential data corruption
- NFSv4/pnfs: minor fix for cleanup path in nfs4_get_device_info
- backlight: gpio_backlight: Drop output GPIO direction check for initial
power state
- perf annotate bpf: Don't enclose non-debug code with an assert()
- [x86] virt: Drop unnecessary check on extended CPUID level in
cpu_has_svm()
- perf top: Don't pass an ERR_PTR() directly to perf_session__delete()
- watchdog: intel-mid_wdt: add MODULE_ALIAS() to allow auto-load
- pwm: lpc32xx: Remove handling of PWM channels
- net/sched: fq_pie: avoid stalls in fq_pie_timer()
- sctp: annotate data-races around sk->sk_wmem_queued
- ipv4: annotate data-races around fi->fib_dead
- net: read sk->sk_family once in sk_mc_loop()
- [x86] drm/i915/gvt: Save/restore HW status to support GVT suspend/resume
- [x86] drm/i915/gvt: Drop unused helper intel_vgpu_reset_gtt()
- ipv4: ignore dst hint for multipath routes
- igb: disable virtualization features on 82580
- veth: Fixing transmit return status for dropped packets
- net: ipv6/addrconf: avoid integer underflow in ipv6_create_tempaddr
- af_unix: Fix data-races around user->unix_inflight.
- af_unix: Fix data-race around unix_tot_inflight.
- af_unix: Fix data-races around sk->sk_shutdown.
- af_unix: Fix data race around sk->sk_err.
- net: sched: sch_qfq: Fix UAF in qfq_dequeue() (CVE-2023-4921)
- kcm: Destroy mutex in kcm_exit_net()
- igc: Change IGC_MIN to allow set rx/tx value between 64 and 80
- igbvf: Change IGBVF_MIN to allow set rx/tx value between 64 and 80
- igb: Change IGB_MIN to allow set rx/tx value between 64 and 80
- [s390x] zcrypt: don't leak memory if dev_set_name() fails
- idr: fix param name in idr_alloc_cyclic() doc
- ip_tunnels: use DEV_STATS_INC()
- netfilter: nfnetlink_osf: avoid OOB read
- [arm64] net: hns3: fix the port information display when sfp is absent
- sh: boards: Fix CEU buffer size passed to dma_declare_coherent_memory()
- ext4: add correct group descriptors and reserved GDT blocks to system zone
- ata: sata_gemini: Add missing MODULE_DESCRIPTION
- ata: pata_ftide010: Add missing MODULE_DESCRIPTION
- fuse: nlookup missing decrement in fuse_direntplus_link
- btrfs: don't start transaction when joining with TRANS_JOIN_NOSTART
- btrfs: use the correct superblock to compare fsid in btrfs_validate_super
- mtd: rawnand: brcmnand: Fix crash during the panic_write
- mtd: rawnand: brcmnand: Fix potential out-of-bounds access in oob write
- mtd: rawnand: brcmnand: Fix potential false time out warning
- drm/amd/display: prevent potential division by zero errors
- perf hists browser: Fix hierarchy mode header
- perf tools: Handle old data in PERF_RECORD_ATTR
- perf hists browser: Fix the number of entries for 'e' key
- ACPI: APEI: explicit init of HEST and GHES in apci_init()
- [arm64] sdei: abort running SDEI handlers during crash
- scsi: qla2xxx: If fcport is undergoing deletion complete I/O with retry
- scsi: qla2xxx: Consolidate zio threshold setting for both FCP & NVMe
- scsi: qla2xxx: Fix crash in PCIe error handling
- scsi: qla2xxx: Flush mailbox commands on chip reset
- [armhf] dts: samsung: exynos4210-i9100: Fix LCD screen's physical size
- net: ipv4: fix one memleak in __inet_del_ifa()
- net/smc: use smc_lgr_list.lock to protect smc_lgr_list.list iterate in
smcr_port_add
- net: ethernet: mvpp2_main: fix possible OOB write in
mvpp2_ethtool_get_rxnfc()
- net: ethernet: mtk_eth_soc: fix possible NULL pointer dereference in
mtk_hwlro_get_fdir_all()
- hsr: Fix uninit-value access in fill_frame_info()
- r8152: check budget for r8152_poll()
- kcm: Fix memory leak in error path of kcm_sendmsg()
- ipv6: fix ip6_sock_set_addr_preferences() typo
- ixgbe: fix timestamp configuration code
- kcm: Fix error handling for SOCK_DGRAM in kcm_sendmsg().
- drm/amd/display: Fix a bug when searching for insert_above_mpcc
https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.196
- Revert "configfs: fix a race in configfs_lookup()"
https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.197
- autofs: fix memory leak of waitqueues in autofs_catatonic_mode
- btrfs: output extra debug info if we failed to find an inline backref
- ACPICA: Add AML_NO_OPERAND_RESOLVE flag to Timer
- kernel/fork: beware of __put_task_struct() calling context
- rcuscale: Move rcu_scale_writer() schedule_timeout_uninterruptible() to
_idle()
- [x86] ACPI: video: Add backlight=native DMI quirk for Lenovo Ideapad Z470
- [arm64] perf/smmuv3: Enable HiSilicon Erratum 162001900 quirk for HIP08/09
- [x86] ACPI: video: Add backlight=native DMI quirk for Apple iMac12,1 and
iMac12,2
- hw_breakpoint: fix single-stepping when using bpf_overflow_handler
- devlink: remove reload failed checks in params get/set callbacks
- crypto: lrw,xts - Replace strlcpy with strscpy
- wifi: ath9k: fix fortify warnings
- wifi: ath9k: fix printk specifier
- wifi: mwifiex: fix fortify warning
- wifi: wil6210: fix fortify warnings
- crypto: lib/mpi - avoid null pointer deref in mpi_cmp_ui()
- tpm_tis: Resend command to recover from data transfer errors
- [arm64,armhf] mmc: sdhci-esdhc-imx: improve ESDHC_FLAG_ERR010450
- alx: fix OOB-read compiler warning
- netfilter: ebtables: fix fortify warnings in size_entry_mwt()
- wifi: mac80211_hwsim: drop short frames
- ALSA: hda: intel-dsp-cfg: add LunarLake support
- [armhf] drm/exynos: fix a possible null-pointer dereference due to data
race in exynos_drm_crtc_atomic_disable()
- [armhf] bus: ti-sysc: Configure uart quirks for k3 SoC
- md: raid1: fix potential OOB in raid1_remove_disk()
- fs/jfs: prevent double-free in dbUnmount() after failed jfs_remount()
- jfs: fix invalid free of JFS_IP(ipimap)->i_imap in diUnmount
- [powerpc*] pseries: fix possible memory leak in ibmebus_bus_init()
- media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer
- media: dw2102: Fix null-ptr-deref in dw2102_i2c_transfer()
- media: af9005: Fix null-ptr-deref in af9005_i2c_xfer
- media: anysee: fix null-ptr-deref in anysee_master_xfer
- media: az6007: Fix null-ptr-deref in az6007_i2c_xfer()
- media: dvb-usb-v2: gl861: Fix null-ptr-deref in gl861_i2c_master_xfer
- media: tuners: qt1010: replace BUG_ON with a regular error
- media: pci: cx23885: replace BUG with error return
- usb: gadget: fsl_qe_udc: validate endpoint index for ch9 udc
- scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show()
- serial: cpm_uart: Avoid suspicious locking
- media: pci: ipu3-cio2: Initialise timing struct to avoid a compiler
warning
- kobject: Add sanity check for kset->kobj.ktype in kset_register()
- perf jevents: Make build dependency on test JSONs
- perf tools: Add an option to build without libbfd
- btrfs: move btrfs_pinned_by_swapfile prototype into volumes.h
- btrfs: add a helper to read the superblock metadata_uuid
- btrfs: compare the correct fsid/metadata_uuid in btrfs_validate_super
- scsi: qla2xxx: Fix NULL vs IS_ERR() bug for debugfs_create_dir()
- scsi: lpfc: Fix the NULL vs IS_ERR() bug for debugfs_create_file()
- [x86] boot/compressed: Reserve more memory for page tables
- md/raid1: fix error: ISO C90 forbids mixed declarations
- attr: block mode changes of symlinks
- ovl: fix incorrect fdput() on aio completion
- btrfs: fix lockdep splat and potential deadlock after failure running
delayed items
- btrfs: release path before inode lookup during the ino lookup ioctl
- drm/amdgpu: fix amdgpu_cs_p1_user_fence
- net/sched: Retire rsvp classifier (CVE-2023-42755)
- proc: fix a dentry lock race between release_task and lookup
- mm/filemap: fix infinite loop in generic_file_buffered_read()
- drm/amd/display: enable cursor degamma for DCN3+ DRM legacy gamma
- tracing: Have current_trace inc the trace array ref count
- tracing: Have option files inc the trace array ref count
- nfsd: fix change_info in NFSv4 RENAME replies
- tracefs: Add missing lockdown check to tracefs_create_dir()
- [armhf] i2c: aspeed: Reset the i2c controller when timeout occurs
- ata: libata: disallow dev-initiated LPM transitions to unsupported states
- scsi: megaraid_sas: Fix deadlock on firmware crashdump
- scsi: pm8001: Setup IRQs on resume
- ext4: fix rec_len verify error
.
[ Salvatore Bonaccorso ]
* [rt] Refresh "cpuset: Convert callback_lock to raw_spinlock_t"
* Bump ABI to 26
* [rt] Refresh "eventfd: Make signal recursion protection a task bit"
* Drop now unknown config options for IPv4 and IPv6 Resource Reservation
Protocol (RSVP, RSVP6)
* netfilter: nf_tables: integrate pipapo into commit protocol
* netfilter: nf_tables: don't skip expired elements during walk
(CVE-2023-4244)
* netfilter: nf_tables: GC transaction API to avoid race with control plane
(CVE-2023-4244)
* netfilter: nf_tables: adapt set backend to use GC transaction API
(CVE-2023-4244)
* netfilter: nft_set_hash: mark set element as dead when deleting from packet
path (CVE-2023-4244)
* netfilter: nf_tables: remove busy mark and gc batch API (CVE-2023-4244)
* netfilter: nf_tables: don't fail inserts if duplicate has expired
* netfilter: nf_tables: fix GC transaction races with netns and netlink event
exit path (CVE-2023-4244)
* netfilter: nf_tables: GC transaction race with netns dismantle
(CVE-2023-4244)
* netfilter: nf_tables: GC transaction race with abort path
* netfilter: nf_tables: use correct lock to protect gc_list
* netfilter: nf_tables: defer gc run if previous batch is still pending
* netfilter: nft_set_rbtree: skip sync GC for new elements in this transaction
* netfilter: nft_set_rbtree: use read spinlock to avoid datapath contention
* netfilter: nft_set_pipapo: stop GC iteration if GC transaction allocation
fails
* netfilter: nft_set_hash: try later when GC hits EAGAIN on iteration
* netfilter: nf_tables: fix memleak when more than 255 elements expired
* netfilter: nf_tables: disallow element removal on anonymous sets
* netfilter: ipset: Fix race between IPSET_CMD_CREATE and IPSET_CMD_SWAP
(CVE-2023-42756)
* netfilter: nf_tables: unregister flowtable hooks on netns exit
* netfilter: nf_tables: double hook unregistration in netns path
* ipv4: fix null-deref in ipv4_link_failure
.
linux (5.10.191-1) bullseye-security; urgency=high
.
* New upstream stable update:
https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.180
- seccomp: Move copy_seccomp() to no failure path.
- [arm64] KVM: arm64: Fix buffer overflow in kvm_arm_set_fw_reg()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
(CVE-2023-1380)
- drm/fb-helper: set x/yres_virtual in drm_fb_helper_check_var
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
(CVE-2023-2002)
- [x86] fpu: Prevent FPU state corruption
- USB: serial: option: add UNISOC vendor and TOZED LT70C product
- driver core: Don't require dynamic_debug for initcall_debug probe timing
- [x86] ASoC: Intel: bytcr_rt5640: Add quirk for the Acer Iconia One 7
B1-750
- asm-generic/io.h: suppress endianness warnings for readq() and writeq()
- wireguard: timers: cast enum limits members to int in prints
- PCI: pciehp: Fix AB-BA deadlock between reset_lock and device_lock
- [arm64] PCI: qcom: Fix the incorrect register usage in v2.7.0 config
- [arm64,armhf] USB: dwc3: fix runtime pm imbalance on probe errors
- [arm64,armhf] USB: dwc3: fix runtime pm imbalance on unbind
- [x86] hwmon: (k10temp) Check range scale when CUR_TEMP register is
read-write
- hwmon: (adt7475) Use device_property APIs when configuring polarity
- posix-cpu-timers: Implement the missing timer_wait_running callback
- perf sched: Cast PTHREAD_STACK_MIN to int as it may turn into
sysconf(__SC_THREAD_STACK_MIN_VALUE)
- blk-mq: release crypto keyslot before reporting I/O complete
- blk-crypto: make blk_crypto_evict_key() return void
- blk-crypto: make blk_crypto_evict_key() more robust
- ext4: use ext4_journal_start/stop for fast commit transactions
- xhci: fix debugfs register accesses while suspended
- tick/nohz: Fix cpu_is_hotpluggable() by checking with nohz subsystem
- [mips*] fw: Allow firmware to pass a empty env
- ipmi:ssif: Add send_retries increment
- ipmi: fix SSIF not responding under certain cond.
- kheaders: Use array declaration instead of char
- [arm64,armhf] pwm: meson: Fix axg ao mux parents
- [arm64,armhf] pwm: meson: Fix g12a ao clk81 name
- ring-buffer: Sync IRQ works before buffer destruction
- crypto: api - Demote BUG_ON() in crypto_unregister_alg() to a WARN_ON()
- [arm64] crypto: safexcel - Cleanup ring IRQ workqueues on load failure
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being
kprobe-ed
- reiserfs: Add security prefix to xattr name in reiserfs_security_write()
- [x86] KVM: nVMX: Emulate NOPs in L2, and PAUSE if it's not intercepted
- relayfs: fix out-of-bounds access in relay_file_read (CVE-2023-3268)
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- [armhf] i2c: omap: Fix standard mode false ACK readings
- [amd64] iommu/amd: Fix "Guest Virtual APIC Table Root Pointer"
configuration in IRTE
- Revert "ubifs: dirty_cow_znode: Fix memleak in error handling path"
- ubifs: Fix memleak when insert_old_idx() failed
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- ubifs: Free memory for tmpfile name
- nilfs2: do not write dirty data after degenerating to read-only
- nilfs2: fix infinite loop in nilfs_mdt_get_block()
- md/raid10: fix null-ptr-deref in raid10_sync_request
- [arm64] mailbox: zynqmp: Fix IPI isr handling
- [arm64] mailbox: zynqmp: Fix typo in IPI documentation
- wifi: rtl8xxxu: RTL8192EU always needs full init
- [arm64,armhf] clk: rockchip: rk3399: allow clk_cifout to force
clk_cifout_src to reparent
- rcu: Fix missing TICK_DEP_MASK_RCU_EXP dependency check
- selinux: fix Makefile dependencies of flask.h
- selinux: ensure av_permissions.h is built when needed
- tpm, tpm_tis: Do not skip reset of original interrupt vector
- tpm, tpm_tis: Claim locality before writing TPM_INT_ENABLE register
- tpm, tpm_tis: Disable interrupts if tpm_tis_probe_irq() failed
- tpm, tpm_tis: Claim locality before writing interrupt registers
- tpm, tpm: Implement usage counter for locality
- tpm, tpm_tis: Claim locality when interrupts are reenabled on resume
- erofs: stop parsing non-compact HEAD index if clusterofs is invalid
- erofs: fix potential overflow calculating xattr_isize
- [arm64,armhf] drm/rockchip: Drop unbalanced obj unref
- drm/vgem: add missing mutex_destroy
- drm/probe-helper: Cancel previous job before starting new one
- [arm64] drm/msm/disp/dpu: check for crtc enable rather than crtc active to
release shared resources
- [amd64] EDAC/skx: Fix overflows on the DRAM row address mapping arrays
- [x86] MCE/AMD: Use an u64 for bank_map
- [arm64] firmware: qcom_scm: Clear download bit during reboot
- [arm64] drm/bridge: adv7533: Fix adv7533_mode_valid for adv7533 and
adv7535
- [arm64] drm/msm/adreno: Defer enabling runpm until hw_init()
- [arm64] drm/msm/adreno: drop bogus pm_runtime_set_active()
- [arm64] drm: msm: adreno: Disable preemption on Adreno 510
- [x86] ACPI: processor: Fix evaluating _PDC method when running as Xen dom0
- [arm64] mmc: sdhci-of-esdhc: fix quirk to ignore command inhibit for data
- [arm64,armhf] drm/lima/lima_drv: Add missing unwind goto in
lima_pdev_probe()
- regulator: core: Consistently set mutex_owner when using
ww_mutex_lock_slow()
- regulator: core: Avoid lockdep reports when resolving supplies
- media: dm1105: Fix use after free bug in dm1105_remove due to race
condition (CVE-2023-35824)
- media: saa7134: fix use after free bug in saa7134_finidev due to race
condition (CVE-2023-35823)
- [x86] apic: Fix atomic update of offset in reserve_eilvt_offset()
- [x86] ioapic: Don't return 0 from arch_dynirq_lower_bound()
- debugobject: Prevent init race with static objects
- [x86] drm/i915: Make intel_get_crtc_new_encoder() less oopsy
- tick/sched: Use tick_next_period for lockless quick check
- tick/sched: Reduce seqcount held scope in tick_do_update_jiffies64()
- tick/sched: Optimize tick_do_update_jiffies64() further
- tick: Get rid of tick_period
- tick/common: Align tick period with the HZ tick.
- wifi: ath6kl: minor fix for allocation size
- wifi: ath9k: hif_usb: fix memory leak of remain_skbs
- wifi: ath5k: fix an off by one check in ath5k_eeprom_read_freq_list()
- wifi: ath6kl: reduce WARN to dev_dbg() in callback
- tools: bpftool: Remove invalid \' json escape
- wifi: rtw88: mac: Return the original error from rtw_pwr_seq_parser()
- wifi: rtw88: mac: Return the original error from rtw_mac_power_switch()
- bpf: take into account liveness when propagating precision
- bpf: fix precision propagation verbose logging
- scm: fix MSG_CTRUNC setting condition for SO_PASSSEC
- bpf: Remove misleading spec_v1 check on var-offset stack read
- vlan: partially enable SIOCSHWTSTAMP in container
- net/packet: annotate accesses to po->xmit
- net/packet: convert po->origdev to an atomic flag
- net/packet: convert po->auxdata to an atomic flag
- scsi: target: Rename struct sense_info to sense_detail
- scsi: target: Rename cmd.bad_sector to cmd.sense_info
- scsi: target: Make state_list per CPU
- scsi: target: Fix multiple LUN_RESET handling
- scsi: target: iscsit: Fix TAS handling during conn cleanup
- scsi: megaraid: Fix mega_cmd_done() CMDID_INT_CMDS
- f2fs: handle dqget error in f2fs_transfer_project_quota()
- f2fs: enforce single zone capacity
- f2fs: apply zone capacity to all zone type
- f2fs: compress: fix to call f2fs_wait_on_page_writeback() in
f2fs_write_raw_pages()
- [arm64] crypto: caam - Clear some memory in instantiate_rng
- wifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_rfreg()
- wifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_reg()
- net: qrtr: correct types of trace event parameters
- bpftool: Fix bug for long instructions in program CFG dumps
- crypto: drbg - make drbg_prepare_hrng() handle jent instantiation errors
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- xsk: Fix unaligned descriptor validation
- f2fs: fix to avoid use-after-free for cached IPU bio
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- [arm64,armhf] net: ethernet: stmmac: dwmac-rk: fix optional phy regulator
handling
- bpf, sockmap: fix deadlocks in the sockhash and sockmap
- nvme: handle the persistent internal error AER
- nvme: fix async event trace event
- bpf, sockmap: Revert buggy deadlock fix in the sockhash and sockmap
- md/raid10: fix leak of 'r10bio->remaining' for recovery
- md/raid10: fix memleak for 'conf->bio_split'
- md/raid10: fix memleak of md thread
- wifi: iwlwifi: yoyo: Fix possible division by zero
- wifi: iwlwifi: fw: move memset before early return
- jdb2: Don't refuse invalidation of already invalidated buffers
- wifi: iwlwifi: make the loop for card preparation effective
- wifi: iwlwifi: mvm: check firmware response size
- wifi: iwlwifi: fw: fix memory leak in debugfs
- ixgbe: Allow flow hash to be set via ethtool
- ixgbe: Enable setting RSS table to default values
- bpf: Don't EFAULT for getsockopt with optval=NULL
- netfilter: nf_tables: don't write table validation state without mutex
- net/sched: sch_fq: fix integer overflow of "credit"
- ipv4: Fix potential uninit variable access bug in __ip_make_skb()
- Revert "Bluetooth: btsdio: fix use after free bug in btsdio_remove due to
unfinished work"
- netlink: Use copy_to_user() for optval in netlink_getsockopt().
- net: amd: Fix link leak when verifying config failed
- tcp/udp: Fix memleaks of sk and zerocopy skbs with TX timestamp.
- pstore: Revert pmsg_lock back to a normal mutex
- [arm64,armhf] usb: dwc3: gadget: Change condition for processing suspend
event
- fpga: bridge: fix kernel-doc parameter description
- iio: light: max44009: add missing OF device matching
- [armhf] spi: spi-imx: using pm_runtime_resume_and_get instead of
pm_runtime_get_sync
- [armhf] spi: imx: Don't skip cleanup in remove's error path
- [armhf] PCI: imx6: Install the fault handler only on compatible match
- ASoC: es8316: Use IRQF_NO_AUTOEN when requesting the IRQ
- ASoC: es8316: Handle optional IRQ assignment
- linux/vt_buffer.h: allow either builtin or modular for macros
- [arm64] spi: qup: Don't skip cleanup in remove's error path
- [x86] vmci_host: fix a race condition in vmci_host_poll() causing GPF
- of: Fix modalias string generation
- [arm64,armhf] usb: chipidea: fix missing goto in `ci_hdrc_probe`
- [arm64] tty: serial: fsl_lpuart: adjust buffer length to the intended size
- serial: 8250: Add missing wakeup event reporting
- [x86] staging: rtl8192e: Fix W_DISABLE# does not work after stop/start
- [arm64] spmi: Add a check for remove callback when removing a SPMI driver
- [powerpc*] rtas: use memmove for potentially overlapping buffer copy
- perf/core: Fix hardlockup failure caused by perf throttle
- [amd64] RDMA/rdmavt: Delete unnecessary NULL check
- workqueue: Rename "delayed" (delayed by active management) to "inactive"
- workqueue: Fix hung time report of worker pools
- [armhf] rtc: omap: include header for omap_rtc_power_off_program prototype
- RDMA/mlx4: Prevent shift wrapping in set_user_sq_size()
- [arm64,armhf] rtc: meson-vrtc: Use ktime_get_real_ts64() to get the
current time
- clk: add missing of_node_put() in "assigned-clocks" property parsing
- RDMA/siw: Remove namespace check from siw_netdev_event()
- RDMA/cm: Trace icm_send_rej event before the cm state is reset
- RDMA/srpt: Add a check for valid 'mad_agent' pointer
- [amd64] IB/hfi1: Fix SDMA mmu_rb_node not being evicted in LRU order
- [amd64] IB/hfi1: Add AIP tx traces
- [amd64] IB/hfi1: Add additional usdma traces
- [amd64] IB/hfi1: Fix bugs with non-PAGE_SIZE-end multi-iovec user SDMA
requests
- NFSv4.1: Always send a RECLAIM_COMPLETE after establishing lease
- [arm*] firmware: raspberrypi: Introduce devm_rpi_firmware_get()
- RDMA/mlx5: Fix flow counter query via DEVX
- SUNRPC: remove the maximum number of retries in call_bind_status
- RDMA/mlx5: Use correct device num_ports when modify DC
- ext4: fix use-after-free read in ext4_find_extent for bigalloc + inline
- [arm64] dmaengine: mv_xor_v2: Fix an error code.
- [armhf] leds: tca6507: Fix error handling of using
fwnode_property_read_string
- [arm64,armhf] phy: tegra: xusb: Add missing tegra_xusb_port_unregister for
usb2_port and ulpi_port
- afs: Fix updating of i_size with dv jump from server
- btrfs: scrub: reject unsupported scrub flags
- [s390x] dasd: fix hanging blockdevice after request requeue
- dm integrity: call kmem_cache_destroy() in dm_integrity_init() error path
- dm flakey: fix a crash with invalid table line
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
(CVE-2023-2269)
- perf auxtrace: Fix address filter entire kernel size
- perf intel-pt: Fix CYC timestamps after standalone CBR
- [arm64] Always load shadow stack pointer directly from the task struct
- [arm64] Stash shadow stack pointer in the task struct on interrupt
- debugobject: Ensure pool refill (again)
- scsi: target: core: Avoid smp_processor_id() in preemptible code
- tty: create internal tty.h file
- tty: audit: move some local functions out of tty.h
- tty: move some internal tty lock enums and functions out of tty.h
- tty: move some tty-only functions to drivers/tty/tty.h
- tty: clean include/linux/tty.h up
- tty: Prevent writing chars during tcsetattr TCSADRAIN/FLUSH
- ring-buffer: Ensure proper resetting of atomic variables in
ring_buffer_reset_online_cpus
- [amd64] crypto: ccp - Clear PSP interrupt status register before calling
handler
- [arm64] mailbox: zynq: Switch to flexible array to simplify code
- [arm64] mailbox: zynqmp: Fix counts of child nodes
- dm verity: skip redundant verity_handle_err() on I/O errors
- dm verity: fix error handling for check_at_most_once on FEC
- scsi: qedi: Fix use after free bug in qedi_remove()
- [armhf] net/ncsi: clear Tx enable mode when handling a Config required AEN
- net/sched: cls_api: remove block_cb from driver_list before freeing
- sit: update dev->needed_headroom in ipip6_tunnel_bind_dev()
- [arm64,armhf] net: dsa: mv88e6xxx: add mv88e6321 rsvd2cpu
- writeback: fix call of incorrect macro
- [arm64,armhf] watchdog: dw_wdt: Fix the error handling path of
dw_wdt_drv_probe()
- net/sched: act_mirred: Add carrier check
- sfc: Fix module EEPROM reporting for QSFP modules
- rxrpc: Fix hard call timeout units
- af_packet: Don't send zero-byte data in packet_sendmsg_spkt().
- drm/amdgpu: add a missing lock for AMDGPU_SCHED
- ALSA: caiaq: input: Add error handling for unsupported input methods in
`snd_usb_caiaq_input_init`
- virtio_net: split free_unused_bufs()
- virtio_net: suppress cpu stall when free_unused_bufs
- [arm64] net: enetc: check the index of the SFI rather than the handle
- crypto: sun8i-ss - Fix a test in sun8i_ss_setup_ivs()
- btrfs: fix btrfs_prev_leaf() to not return the same key twice
- btrfs: don't free qgroup space unless specified
- btrfs: print-tree: parent bytenr must be aligned to sector size
- cifs: fix pcchunk length type in smb2_copychunk_range
- inotify: Avoid reporting event with invalid wd
- [armhf] remoteproc: stm32: Call of_node_put() on iteration error
- [armhf] dts: exynos: fix WM8960 clock name in Itop Elite
- f2fs: fix potential corruption when moving a directory
- [armhf] drm/panel: otm8009a: Set backlight parent to panel device
- drm/amdgpu: fix an amdgpu_irq_put() issue in gmc_v9_0_hw_fini()
- drm/amdgpu/gfx: disable gfx9 cp_ecc_error_irq only when enabling legacy
gfx ras
- drm/amdgpu: disable sdma ecc irq only when sdma RAS is enabled in suspend
- HID: wacom: Set a default resolution for older tablets
- HID: wacom: insert timestamp to packed Bluetooth (BT) events
- [x86] KVM: x86: do not report a vCPU as preempted outside instruction
boundaries (CVE-2022-39189)
- ext4: fix WARNING in mb_find_extent
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
(CVE-2023-34256)
- ext4: fix data races when using cached status extents
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- ext4: improve error recovery code paths in __ext4_remount()
- ext4: fix deadlock when converting an inline directory in nojournal mode
- ext4: add bounds checking in get_max_inline_xattr_value_size()
- ext4: bail out of ext4_xattr_ibody_get() fails for any reason
- ext4: remove a BUG_ON in ext4_mb_release_group_pa()
- ext4: fix invalid free tracking in ext4_xattr_move_to_block()
- serial: 8250: Fix serial8250_tx_empty() race with DMA Tx
- drbd: correctly submit flush bio on barrier
- [x86] KVM: x86: Ensure PV TLB flush tracepoint reflects KVM behavior
- [x86] KVM: x86: Fix recording of guest steal time / preempted status
- [x86] KVM: Fix steal time asm constraints
- [x86] KVM: x86: Remove obsolete disabling of page faults in
kvm_arch_vcpu_put()
- [x86] KVM: x86: do not set st->preempted when going back to user space
- [x86] KVM: x86: revalidate steal time cache if MSR value changes
- [x86] KVM: x86: do not report preemption if the steal time cache is stale
- [x86] KVM: x86: move guest_pv_has out of user_access section
- printk: declare printk_deferred_{enter,safe}() in include/linux/printk.h
- [armhf] drm/exynos: move to use request_irq by IRQF_NO_AUTOEN flag
- mm/page_alloc: fix potential deadlock on zonelist_update_seq seqlock
- drm/amd/display: Fix hang when skipping modeset
https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.181
- driver core: add a helper to setup both the of_node and fwnode of a device
- drm/mipi-dsi: Set the fwnode for mipi_dsi_device
- linux/dim: Do nothing if no time delta between samples
- net: Fix load-tearing on sk->sk_stamp in sock_recv_cmsgs().
- netfilter: conntrack: fix possible bug_on with enable_hooks=1
- netlink: annotate accesses to nlk->cb_running
- net: annotate sk->sk_err write from do_recvmmsg()
- net: deal with most data-races in sk_wait_event()
- net: tap: check vlan with eth_type_vlan() method
- net: add vlan_get_protocol_and_depth() helper
- tcp: factor out __tcp_close() helper
- tcp: add annotations around sk->sk_shutdown accesses
- ipvlan:Fix out-of-bounds caused by unclear skb->cb (CVE-2023-3090)
- net: datagram: fix data-races in datagram_poll()
- af_unix: Fix a data race of sk->sk_receive_queue->qlen.
- af_unix: Fix data races around sk->sk_shutdown.
- [x86] drm/i915/dp: prevent potential div-by-zero
- [x86] fbdev: arcfb: Fix error handling in arcfb_probe()
- ext4: remove an unused variable warning with CONFIG_QUOTA=n
- ext4: reflect error codes from ext4_multi_mount_protect() to its callers
- ext4: don't clear SB_RDONLY when remounting r/w until quota is re-enabled
- ext4: fix lockdep warning when enabling MMP
- ext4: remove redundant mb_regenerate_buddy()
- ext4: drop s_mb_bal_lock and convert protected fields to atomic
- ext4: add mballoc stats proc file
- ext4: allow to find by goal if EXT4_MB_HINT_GOAL_ONLY is set
- ext4: allow ext4_get_group_info() to fail
- rcu: Protect rcu_print_task_exp_stall() ->exp_tasks access
- fs: hfsplus: remove WARN_ON() from hfsplus_cat_{read,write}_inode()
- drm/amd/display: Use DC_LOG_DC in the trasform pixel function
- regmap: cache: Return error in cache sync operations for REGCACHE_NONE
- memstick: r592: Fix UAF bug in r592_remove due to race condition
(CVE-2023-3141)
- firmware: arm_sdei: Fix sleep from invalid context BUG
- ACPI: EC: Fix oops when removing custom query handlers
- [armhf] remoteproc: stm32_rproc: Add mutex protection for workqueue
- [arm64,armhf] drm/tegra: Avoid potential 32-bit integer overflow
- ACPICA: Avoid undefined behavior: applying zero offset to null pointer
- ACPICA: ACPICA: check null return of ACPI_ALLOCATE_ZEROED in
acpi_db_display_objects
- wifi: ath: Silence memcpy run-time false positive warning
- bpf: Annotate data races in bpf_local_storage
- wifi: brcmfmac: cfg80211: Pass the PMK in binary instead of hex
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- net: Catch invalid index in XPS mapping
- scsi: target: iscsit: Free cmds before session free
- lib: cpu_rmap: Avoid use after free on rmap->obj array entries
- scsi: message: mptlan: Fix use after free bug in mptlan_remove() due to
race condition
- gfs2: Fix inode height consistency check
- ext4: set goal start correctly in ext4_mb_normalize_request
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()
- f2fs: fix to drop all dirty pages during umount() if cp_error is set
- wifi: iwlwifi: pcie: fix possible NULL pointer dereference
- wifi: iwlwifi: pcie: Fix integer overflow in iwl_write_to_user_buf
- null_blk: Always check queue mode setting from configfs
- wifi: iwlwifi: dvm: Fix memcpy: detected field-spanning write backtrace
- wifi: ath11k: Fix SKB corruption in REO destination ring
- ipvs: Update width of source for ip_vs_sync_conn_options
- Bluetooth: hci_bcm: Fall back to getting bdaddr from EFI if not set
- Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp
- [x86] staging: rtl8192e: Replace macro RTL_PCI_DEVICE with PCI_DEVICE
- HID: logitech-hidpp: Don't use the USB serial for USB devices
- HID: logitech-hidpp: Reconcile USB and Unifying serials
- [armhf] spi: spi-imx: fix MX51_ECSPI_* macros when cs > 3
- HID: wacom: generic: Set battery quirk only when we see battery data
- usb: typec: tcpm: fix multiple times discover svids error
- serial: 8250: Reinit port->pm on port specific driver unbind
- recordmcount: Fix memory leaks in the uwrite function
- RDMA/core: Fix multiple -Warray-bounds warnings
- [arm64,armhf] iommu/arm-smmu-qcom: Limit the SMR groups to 128
- [arm64] iommu/arm-smmu-v3: Acknowledge pri/event queue overflow if any
- Input: xpad - add constants for GIP interface numbers
- btrfs: move btrfs_find_highest_objectid/btrfs_find_free_objectid to
disk-io.c
- btrfs: replace calls to btrfs_find_free_ino with btrfs_find_free_objectid
- btrfs: fix space cache inconsistency after error loading it from disk
- xfrm: don't check the default policy if the policy allows the packet
- Revert "Fix XFRM-I support for nested ESP tunnels"
- [arm64] drm/msm/dp: unregister audio driver during unbind
- [arm64] drm/msm/dpu: Remove duplicate register defines from INTF
- cpupower: Make TSC read per CPU for Mperf monitor
- af_key: Reject optional tunnel/BEET mode templates in outbound policies
- [arm64,armhf] net: fec: Better handle pm_runtime_get() failing in
.remove()
- net: phy: dp83867: add w/a for packet errors seen with short cables
- ALSA: firewire-digi00x: prevent potential use after free
- ALSA: hda/realtek: Apply HP B&O top speaker profile to Pavilion 15
- vsock: avoid to close connected socket after the timeout
- ipv4/tcp: do not use per netns ctl sockets
- net: Find dst with sk's xfrm policy not ctl_sk
- tcp: fix possible sk_priority leak in tcp_v4_send_reset()
- [armhf] serial: arc_uart: fix of_iomap leak in `arc_serial_probe`
- erspan: get the proto with the md version for collect_md
- [arm64] net: hns3: fix sending pfc frames after reset issue
- [arm64] net: hns3: fix reset delay time to avoid configuration timeout
- media: netup_unidvb: fix use-after-free at del_timer()
- SUNRPC: Fix trace_svc_register() call site
- net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
- net/tipc: fix tipc header files for kernel-doc
- tipc: add tipc_bearer_min_mtu to calculate min mtu
- tipc: do not update mtu if msg_max is too small in mtu negotiation
- tipc: check the bearer min mtu properly when setting it by netlink
- [arm64] net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- [arm64] net: bcmgenet: Restore phy_stop() depending upon suspend/close
- wifi: mac80211: fix min center freq offset tracing
- wifi: iwlwifi: mvm: don't trust firmware n_channels
- [x86] scsi: storvsc: Don't pass unused PFNs to Hyper-V host
- cassini: Fix a memory leak in the error handling path of cas_init_one()
- igb: fix bit_shift to be in [1..8] range
- vlan: fix a potential uninit-value in vlan_dev_hard_start_xmit()
- netfilter: nft_set_rbtree: fix null deref on element insertion
- bridge: always declare tunnel functions
- ALSA: usb-audio: Add a sample rate workaround for Line6 Pod Go
- USB: usbtmc: Fix direction for 0-length ioctl control messages
- usb-storage: fix deadlock when a scsi command timeouts more than once
- [arm64,armhf] usb: dwc3: debugfs: Resume dwc3 before accessing registers
- usb: gadget: u_ether: Fix host MAC address case
- usb: typec: altmodes/displayport: fix pin_assignment_show
- ALSA: hda: Fix Oops by 9.1 surround channel names
- ALSA: hda: Add NVIDIA codec IDs a3 through a7 to patch table
- ALSA: hda/realtek: Add quirk for Clevo L140AU
- ALSA: hda/realtek: Add a quirk for HP EliteDesk 805
- ALSA: hda/realtek: Add quirk for 2nd ASUS GU603
- can: j1939: recvmsg(): allow MSG_CMSG_COMPAT flag
- can: isotp: recvmsg(): allow MSG_CMSG_COMPAT flag
- statfs: enforce statfs[64] structure initialization
- serial: Add support for Advantech PCI-1611U card
- vc_screen: reload load of struct vc_data pointer in vcs_write() to avoid
UAF
- ceph: force updating the msg pointer in non-split case
- tpm/tpm_tis: Disable interrupts for more Lenovo devices
- [powerpc*] 64s/radix: Fix soft dirty tracking
- nilfs2: fix use-after-free bug of nilfs_root in nilfs_evict_inode()
- HID: wacom: Force pen out of prox if no events have been received in a
while
- HID: wacom: Add new Intuos Pro Small (PTH-460) device IDs
- HID: wacom: add three styli to wacom_intuos_get_tool_type
- [arm64] KVM: arm64: Link position-independent string routines into
.hyp.text
- serial: 8250_exar: derive nr_ports from PCI ID for Acces I/O cards
- serial: exar: Add support for Sealevel 7xxxC serial cards
- serial: 8250_exar: Add support for USR298x PCI Modems
- [s390x] qdio: get rid of register asm
- [s390x] qdio: fix do_sqbs() inline assembly constraint
- [x86] watchdog: sp5100_tco: Immediately trigger upon starting.
- writeback, cgroup: remove extra percpu_ref_exit()
- net/sched: act_mirred: refactor the handle of xmit
- net/sched: act_mirred: better wording on protection against excessive
stack growth
- act_mirred: use the backlog for nested calls to mirred ingress
(CVE-2022-4269)
- ocfs2: Switch to security_inode_init_security()
- ALSA: hda/ca0132: add quirk for EVGA X299 DARK
- ALSA: hda: Fix unhandled register update during auto-suspend period
- ALSA: hda/realtek: Enable headset onLenovo M70/M90
- net: cdc_ncm: Deal with too low values of dwNtbOutMaxSize
- btrfs: use nofs when cleaning up aborted transactions
- dt-binding: cdns,usb3: Fix cdns,on-chip-buff-size type
- [x86] mm: Avoid incomplete Global INVLPG flushes
- [x86] topology: Fix erroneous smp_num_siblings on Intel Hybrid platforms
- debugobjects: Don't wake up kswapd from fill_pool()
- fbdev: udlfb: Fix endpoint check
- net: fix stack overflow when LRO is disabled for virtual interfaces
- udplite: Fix NULL pointer dereference in __sk_mem_raise_allocated().
- USB: core: Add routines for endpoint checks in old drivers
- USB: sisusbvga: Add endpoint checks
- media: radio-shark: Add endpoint checks
- net: fix skb leak in __skb_tstamp_tx()
- bpf: Fix mask generation for 32-bit narrow loads of 64-bit fields
- ipv6: Fix out-of-bounds access in ipv6_find_tlv()
- power: supply: leds: Fix blink to LED on transition
- power: supply: bq27xxx: Fix bq27xxx_battery_update() race condition
- power: supply: bq27xxx: Fix I2C IRQ race on remove
- power: supply: bq27xxx: Fix poll_interval handling and races on remove
- fs: fix undefined behavior in bit shift for SB_NOUSER
- [x86] show_trace_log_lvl: Ensure stack pointer is aligned, again
- [x86] ASoC: Intel: Skylake: Fix declaration of enum skl_ch_cfg
- [x86] forcedeth: Fix an error handling path in nv_probe()
- net/mlx5e: do as little as possible in napi poll when budget is 0
- net/mlx5: DR, Fix crc32 calculation to work on big-endian (BE) CPUs
- net/mlx5: Fix error message when failing to allocate device memory
- net/mlx5: Devcom, fix error flow in mlx5_devcom_register_device
- [x86] 3c589_cs: Fix an error handling path in tc589_probe()
- net: phy: mscc: add VSC8502 to MODULE_DEVICE_TABLE
https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.182
- [x86] cpu: Add Raptor Lake to Intel family
- [x86] cpu: Drop spurious underscore from RAPTOR_LAKE #define
- power: supply: bq27xxx: fix polarity of current_now
- power: supply: bq27xxx: fix sign of current_now for newer ICs
- power: supply: bq27xxx: make status more robust
- power: supply: bq27xxx: Add cache parameter to
bq27xxx_battery_current_and_status()
- power: supply: bq27xxx: expose battery data when CI=1
- power: supply: bq27xxx: Move bq27xxx_battery_update() down
- power: supply: bq27xxx: Ensure power_supply_changed() is called on current
sign changes
- power: supply: bq27xxx: After charger plug in/out wait 0.5s for things to
stabilize
- power: supply: core: Refactor
power_supply_set_input_current_limit_from_supplier()
- [x86] power: supply: bq24190: Call power_supply_changed() after updating
input current
- regulator: Add regmap helper for ramp-delay setting
- net/mlx5: devcom only supports 2 ports
- net/mlx5: Devcom, serialize devcom registration
- net: phy: mscc: enable VSC8501/2 RGMII RX clock
- bluetooth: Add cmd validity checks at the start of hci_sock_ioctl()
- [arm*] binder: fix UAF caused by faulty buffer cleanup (CVE-2023-21255)
- ipv{4,6}/raw: fix output xfrm lookup wrt protocol
- netfilter: ctnetlink: Support offloaded conntrack entry deletion
https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.183
- [arm64,armhf] iommu/rockchip: Fix unwind goto issue
- [amd64] iommu/amd: Don't block updates to GATag if guest mode is on
- [arm64,armhf] dmaengine: pl330: rename _start to prevent build error
- net/mlx5: fw_tracer, Fix event handling
- netrom: fix info-leak in nr_write_internal()
- af_packet: Fix data-races of pkt_sk(sk)->num.
- [amd64,arm64] amd-xgbe: fix the false linkup in xgbe_phy_status
- af_packet: do not use READ_ONCE() in packet_bind()
- tcp: deny tcp_disconnect() when threads are waiting
- tcp: Return user_mss for TCP_MAXSEG in CLOSE/LISTEN state if user_mss set
- net/sched: sch_ingress: Only create under TC_H_INGRESS
- net/sched: sch_clsact: Only create under TC_H_CLSACT
- net/sched: Reserve TC_H_INGRESS (TC_H_CLSACT) for ingress (clsact) Qdiscs
- net/sched: Prohibit regrafting ingress or clsact Qdiscs
- net: sched: fix NULL pointer dereference in mq_attach
- net/netlink: fix NETLINK_LIST_MEMBERSHIPS length report
- udp6: Fix race condition in udp6_sendmsg & connect
- net/mlx5: Read embedded cpu after init bit cleared
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
(CVE-2023-35788)
- [arm64,armhf] net: dsa: mv88e6xxx: Increase wait after reset deactivation
- [armhf] mtd: rawnand: marvell: ensure timing values are written
- [armhf] mtd: rawnand: marvell: don't set the NAND frequency select
- ALSA: hda: Glenfly: add HD Audio PCI IDs and HDMI Codec Vendor IDs.
- btrfs: abort transaction when sibling keys check fails for leaves
- [armel] ARM: 9295/1: unwind:fix unwind abort for uleb128 case
- gfs2: Don't deref jdesc in evict (CVE-2023-3212)
- fbdev: modedb: Add 1920x1080 at 60 Hz video mode
- nbd: Fix debugfs_create_dir error checking
- xfrm: Check if_id in inbound policy/secpath match
- ASoC: dt-bindings: Adjust #sound-dai-cells on TI's single-DAI codecs
- media: dvb_demux: fix a bug for the continuity counter
- media: dvb-usb: az6027: fix three null-ptr-deref in az6027_i2c_xfer()
- media: dvb-usb-v2: ec168: fix null-ptr-deref in ec168_i2c_xfer()
- media: dvb-usb-v2: ce6230: fix null-ptr-deref in ce6230_i2c_master_xfer()
- media: dvb-usb-v2: rtl28xxu: fix null-ptr-deref in rtl28xxu_i2c_xfer
- media: dvb-usb: digitv: fix null-ptr-deref in digitv_i2c_xfer()
- media: dvb-usb: dw2102: fix uninit-value in su3000_read_mac_address
- media: netup_unidvb: fix irq init by register it at the end of probe
- media: dvb_ca_en50221: fix a size write bug
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- media: dvb-core: Fix kernel WARNING for blocking operation in
wait_event*() (CVE-2023-31084)
- media: dvb-core: Fix use-after-free due to race condition at
dvb_ca_en50221
- wifi: rtl8xxxu: fix authentication timeout due to incorrect RCR value
- [arm64] mm: mark private VM_FAULT_X defines as vm_fault_t
- scsi: core: Decrease scsi_device's iorequest_cnt if dispatch failed
- netfilter: conntrack: define variables exp_nat_nla_policy and any_addr
with CONFIG_NF_NAT
- ALSA: oss: avoid missing-prototype warnings
- [arm64] drm/msm: Be more shouty if per-process pgtables aren't working
- atm: hide unused procfs functions
- HID: google: add jewel USB id
- HID: wacom: avoid integer overflow in wacom_intuos_inout()
- iio: imu: inv_icm42600: fix timestamp reset
- iio: light: vcnl4035: fixed chip ID check
- iio: dac: mcp4725: Fix i2c_master_send() return value handling
- iio: adc: ad7192: Change "shorted" channels to differential
- net: usb: qmi_wwan: Set DTR quirk for BroadMobi BM818
- usb: gadget: f_fs: Add unbind event before functionfs_unbind
- ata: libata-scsi: Use correct device no in ata_find_dev()
- x86/boot: Wrap literal addresses in absolute_pointer()
- ACPI: thermal: drop an always true check
- ath6kl: Use struct_group() to avoid size-mismatched casting
- eth: sun: cassini: remove dead code
- mmc: vub300: fix invalid response handling
- [arm64] tty: serial: fsl_lpuart: use UARTCTRL_TXINV to send break instead
of UARTCTRL_SBK
- btrfs: fix csum_tree_block page iteration to avoid tripping on
-Werror=array-bounds
- selinux: don't use make's grouped targets feature yet
- tracing/probe: trace_probe_primary_from_call(): checked list_first_entry
- ext4: add EA_INODE checking to ext4_iget()
- ext4: set lockdep subclass for the ea_inode in
ext4_xattr_inode_cache_find()
- ext4: disallow ea_inodes with extended attributes
- ext4: add lockdep annotations for i_data_sem for ea_inode's
- fbcon: Fix null-ptr-deref in soft_cursor
- [arm64,armhf] serial: 8250_tegra: Fix an error handling path in
tegra_uart_probe()
- [x86] KVM: x86: Account fastpath-only VM-Exits in vCPU stats
- KEYS: asymmetric: Copy sig and digest in public_key_verify_signature()
- regmap: Account for register length when chunking
- tpm, tpm_tis: Request threaded interrupt handler
- [x86] scsi: dpt_i2o: Remove broken pass-through ioctl (I2OUSERCMD)
(CVE-2023-2007)
- [x86] scsi: dpt_i2o: Do not process completions with invalid addresses
- [amd64] crypto: ccp: Reject SEV commands with mismatching command buffer
- [amd64] crypto: ccp: Play nice with vmalloc'd memory for SEV command
structs (Closes: #1036543)
- ext4: enable the lazy init thread when remounting read/write
https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.184
- remove the sx8 block driver
- f2fs: fix iostat lock protection
- blk-iocost: avoid 64-bit division in ioc_timer_fn
- i40iw: fix build warning in i40iw_manage_apbvt()
- i40e: fix build warnings in i40e_alloc.h
- i40e: fix build warning in ice_fltr_add_mac_to_list()
- [arm*] staging: vchiq_core: drop vchiq_status from vchiq_initialise
- [arm64] spi: qup: Request DMA before enabling clocks
- afs: Fix setting of mtime when creating a file/dir/symlink
- neighbour: fix unaligned access to pneigh_entry
- net/smc: Avoid to access invalid RMBs' MRs in SMCRv1 ADD LINK CONT
- net/sched: fq_pie: ensure reasonable TCA_FQ_PIE_QUANTUM values
- Bluetooth: Fix l2cap_disconnect_req deadlock
- Bluetooth: L2CAP: Add missing checks for invalid DCID
- qed/qede: Fix scheduling while atomic
- netfilter: conntrack: fix NULL pointer dereference in nf_confirm_cthelper
- netfilter: ipset: Add schedule point in call_ad().
- rfs: annotate lockless accesses to sk->sk_rxhash
- rfs: annotate lockless accesses to RFS sock flow table
- net: sched: move rtm_tca_policy declaration to include file
- net: sched: fix possible refcount leak in tc_chain_tmplt_add()
- bpf: Add extra path pointer check to d_path helper
- lib: cpu_rmap: Fix potential use-after-free in irq_cpu_rmap_release()
- bnxt_en: Don't issue AP reset during ethtool's reset operation
- bnxt_en: Query default VLAN before VNIC setup on a VF
- bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
- batman-adv: Broken sync while rescheduling delayed work
- Input: xpad - delete a Razer DeathAdder mouse VID/PID entry
- Input: psmouse - fix OOB access in Elantech protocol
- ALSA: hda/realtek: Add a quirk for HP Slim Desktop S01
- ALSA: hda/realtek: Add Lenovo P3 Tower platform
- drm/amdgpu: fix xclk freq on CHIP_STONEY
- can: j1939: j1939_sk_send_loop_abort(): improved error queue handling in
J1939 Socket
- can: j1939: change j1939_netdev_lock type to mutex
- can: j1939: avoid possible use-after-free when j1939_can_rx_register fails
- ceph: fix use-after-free bug for inodes when flushing capsnaps
- [s390x] dasd: Use correct lock while counting channel queue length
- Bluetooth: Fix use-after-free in hci_remove_ltk/hci_remove_irk
- Bluetooth: hci_qca: fix debugfs registration
- rbd: move RBD_OBJ_FLAG_COPYUP_ENABLED flag setting
- rbd: get snapshot context after exclusive lock is ensured to be held
- [arm64] pinctrl: meson-axg: add missing GPIOA_18 gpio group
- usb: usbfs: Enforce page requirements for mmap
- usb: usbfs: Use consistent mmap functions
- [arm*] staging: vc04_services: fix gcc-13 build warning
- vhost: support PACKED when setting-getting vring_base
- Revert "ext4: don't clear SB_RDONLY when remounting r/w until quota is
re-enabled"
- ext4: only check dquot_initialize_needed() when debugging
- tcp: fix tcp_min_tso_segs sysctl
- xfs: verify buffer contents when we skip log replay (CVE-2023-2124)
- drm/atomic: Don't pollute crtc_state->mode_blob with error pointers
- btrfs: check return value of btrfs_commit_transaction in relocation
- btrfs: unset reloc control if transaction commit fails in
prepare_to_relocate() (CVE-2023-3111)
- [x86] Revert "staging: rtl8192e: Replace macro RTL_PCI_DEVICE with
PCI_DEVICE"
https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.185
- lib: cleanup kstrto*() usage
- kernel.h: split out kstrtox() and simple_strtox() to a separate header
- power: supply: bq27xxx: Use mod_delayed_work() instead of cancel() +
schedule()
- [armhf] dts: vexpress: add missing cache properties
- power: supply: Ratelimit no data debug output
- [x86] platform/x86: asus-wmi: Ignore WMI events with codes 0x7B, 0xC0
- regulator: Fix error checking for debugfs_create_dir
- [arm64,armhf] irqchip/gic-v3: Disable pseudo NMIs on Mediatek devices w/
firmware issues
- power: supply: Fix logic checking if system is running from battery
- btrfs: scrub: try harder to mark RAID56 block groups read-only
- btrfs: handle memory allocation failure in btrfs_csum_one_bio
- ASoC: soc-pcm: test if a BE can be prepared
- [mips*] Move initrd_start check after initrd address sanitisation.
- xen/blkfront: Only check REQ_FUA for writes
- drm:amd:amdgpu: Fix missing buffer object unlock in failure path
- [arm64,armhf] irqchip/gic: Correctly validate OF quirk descriptors
- io_uring: hold uring mutex around poll removal (CVE-2023-3389)
- epoll: ep_autoremove_wake_function should use list_del_init_careful
- ocfs2: fix use-after-free when unmounting read-only filesystem
- ocfs2: check new file size on fallocate call
- nilfs2: fix incomplete buffer cleanup in nilfs_btnode_abort_change_key()
- nilfs2: fix possible out-of-bounds segment allocation in resize ioctl
- kexec: support purgatories with .text.hot sections
- [x86] purgatory: remove PGO flags
- [powerpc*] purgatory: remove PGO flags
- nouveau: fix client work fence deletion race
- RDMA/uverbs: Restrict usage of privileged QKEYs
- net: usb: qmi_wwan: add support for Compal RXM-G1
- ALSA: hda/realtek: Add a quirk for Compaq N14JP6
- Remove DECnet support from kernel (CVE-2023-3338)
- USB: serial: option: add Quectel EM061KGL series
- [arm64,armhf] usb: dwc3: gadget: Reset num TRBs before giving back the
request
- [arm64] spi: fsl-dspi: avoid SCK glitches with continuous transfers
- netfilter: nfnetlink: skip error delivery on batch in case of ENOMEM
- [arm64] net: enetc: correct the indexes of highest and 2nd highest TCs
- ping6: Fix send to link-local addresses with VRF.
- net/sched: cls_u32: Fix reference counter leak leading to overflow
(CVE-2023-3609)
- RDMA/rxe: Remove the unused variable obj
- RDMA/rxe: Removed unused name from rxe_task struct
- RDMA/rxe: Fix the use-before-initialization error of resp_pkts
- iavf: remove mask from iavf_irq_enable_queues()
- RDMA/mlx5: Initiate dropless RQ for RAW Ethernet functions
- RDMA/cma: Always set static rate to 0 for RoCE
- IB/uverbs: Fix to consider event queue closing also upon non-blocking mode
- IB/isert: Fix dead lock in ib_isert
- IB/isert: Fix possible list corruption in CMA handler
- IB/isert: Fix incorrect release of isert connection
- ipvlan: fix bound dev checking for IPv6 l3s mode
- sctp: fix an error code in sctp_sf_eat_auth()
- igb: fix nvm.ops.read() error handling
- drm/nouveau: don't detect DSM for non-NVIDIA device
- drm/nouveau/dp: check for NULL nv_connector->native_mode
- drm/nouveau: add nv_encoder pointer check for NULL
- ext4: drop the call to ext4_error() from ext4_get_group_info()
- net/sched: cls_api: Fix lockup on flushing explicitly created chain
- net: tipc: resize nlattr array to correct size
- afs: Fix vlserver probe RTT handling
- cgroup: always put cset in cgroup_css_set_put_fork
- rcu/kvfree: Avoid freeing new kfree_rcu() memory after old grace period
- neighbour: Remove unused inline function neigh_key_eq16()
- net: Remove unused inline function dst_hold_and_use()
- net: Remove DECnet leftovers from flow.h.
- neighbour: delete neigh_lookup_nodev as not used
- batman-adv: Switch to kstrtox.h for kstrtou64
- mmc: block: ensure error propagation for non-blk
- mm/memory_hotplug: extend offline_and_remove_memory() to handle more than
one memory block
- nilfs2: reject devices with insufficient block count
- media: dvbdev: Fix memleak in dvb_register_device
- media: dvbdev: fix error logic at dvb_register_device()
- media: dvb-core: Fix use-after-free due to race at dvb_register_device()
- [x86] drm/i915/dg1: Wait for pcode/uncore handshake at startup
- [x86] drm/i915/gen11+: Only load DRAM information from pcode
https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.186
- drm/amd/display: fix the system hang while disable PSR
- net/sched: Refactor qdisc_graft() for ingress and clsact Qdiscs
- tracing: Add tracing_reset_all_online_cpus_unlocked() function
- tick/common: Align tick period during sched_timer setup
- nilfs2: fix buffer corruption due to concurrent device reads
- [x86] Drivers: hv: vmbus: Fix vmbus_wait_for_unload() to scan present CPUs
- [x86] PCI: hv: Fix a race condition bug in hv_pci_query_relations()
- [x86] Revert "PCI: hv: Fix a timing issue which causes kdump to fail
occasionally"
- [x86] PCI: hv: Remove the useless hv_pcichild_state from struct hv_pci_dev
- [x86] PCI: hv: Fix a race condition in hv_irq_unmask() that can cause
panic
- cgroup: Do not corrupt task iteration when rebinding subsystem
- [arm64] mmc: sdhci-msm: Disable broken 64-bit DMA on MSM8916
- [arm64] mmc: meson-gx: remove redundant mmc_request_done() call from irq
context
- [arm64,armhf] mmc: mmci: stm32: fix max busy timeout calculation
- ip_tunnels: allow VXLAN/GENEVE to inherit TOS/TTL from VLAN
- regulator: pca9450: Fix LDO3OUT and LDO4OUT MASK
- writeback: fix dereferencing NULL mapping->host on writeback_page_template
- io_uring/net: save msghdr->msg_control for retries
- io_uring/net: clear msg_controllen on partial sendmsg retry
- io_uring/net: disable partial retries for recvmsg with cmsg
- nilfs2: prevent general protection fault in nilfs_clear_dirty_page()
- [x86] mm: Avoid using set_pgd() outside of real PGD pages
- mm/pagealloc: sysctl: change watermark_scale_factor max limit to 30%
- sysctl: move some boundary constants from sysctl.c to sysctl_vals
- memfd: check for non-NULL file_seals in memfd_create() syscall
- ieee802154: hwsim: Fix possible memory leaks
- xfrm: Treat already-verified secpath entries as optional
- xfrm: interface: rename xfrm_interface.c to xfrm_interface_core.c
- xfrm: Ensure policies always checked on XFRM-I input path
- bpf: track immediate values written to stack by BPF_ST instruction
- bpf: Fix verifier id tracking of scalars on spill
- xfrm: fix inbound ipv4/udp/esp packets to UDPv6 dualstack sockets
- xfrm: Linearize the skb after offloading if needed.
- [armel,armhf] mmc: mvsdio: fix deferred probing
- [armhf] mmc: omap: fix deferred probing
- [armhf] mmc: omap_hsmmc: fix deferred probing
- mmc: sdhci-acpi: fix deferred probing
- ipvs: align inner_mac_header for encapsulation
- be2net: Extend xmit workaround to BE3 chip
- netfilter: nft_set_pipapo: .walk does not deal with generations
- netfilter: nf_tables: disallow element updates of bound anonymous sets
- netfilter: nfnetlink_osf: fix module autoload
- Revert "net: phy: dp83867: perform soft reset and retain established link"
- sch_netem: acquire qdisc lock in netem_change()
- gpio: Allow per-parent interrupt data
- gpiolib: Fix GPIO chip IRQ initialization restriction
- scsi: target: iscsi: Prevent login threads from racing between each other
- HID: wacom: Add error check to wacom_parse_and_register()
- [arm64] Add missing Set/Way CMO encodings
- media: cec: core: don't set last_initiator if tx in progress
- nfcsim.c: Fix error checking for debugfs_create_dir
- [i386] usb: gadget: udc: fix NULL dereference in remove()
- [x86] Input: soc_button_array - add invalid acpi_index DMI quirk handling
- [s390x] cio: unregister device when the only path is gone
- [arm*] ASoC: simple-card: Add missing of_node_put() in case of error
- [x86] ASoC: nau8824: Add quirk to active-high jack-detect
- [armhf] dts: Fix erroneous ADS touchscreen polarities
- drm/radeon: fix race condition UAF in radeon_gem_set_domain_ioctl
- [x86] apic: Fix kernel panic when booting with intremap=off and
x2apic_phys
- bpf/btf: Accept function names that contain dots
https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.187
https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.188
- media: atomisp: fix "variable dereferenced before check 'asd'"
- [x86] smp: Use dedicated cache-line for mwait_play_dead()
- can: isotp: isotp_sendmsg(): fix return error fix on TX path
- video: imsttfb: check for ioremap() failures
- fbdev: imsttfb: Fix use after free bug in imsttfb_probe
- HID: wacom: Use ktime_t rather than int when dealing with timestamps
- HID: logitech-hidpp: add HIDPP_QUIRK_DELAYED_INIT for the T651.
- drm/amdgpu: Validate VM ioctl flags.
- nubus: Partially revert proc_create_single_data() conversion
- fs: pipe: reveal missing function protoypes
- [x86] resctrl: Only show tasks' pid in current pid namespace
- blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
- md/raid10: fix overflow of md/safe_mode_delay
- md/raid10: fix wrong setting of max_corr_read_errors
- md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
- md/raid10: fix io loss while replacement replace rdev
- irqchip/jcore-aic: Kill use of irq_create_strict_mappings()
- irqchip/jcore-aic: Fix missing allocation of IRQ descriptors
- posix-timers: Prevent RT livelock in itimer_delete()
- tracing/timer: Add missing hrtimer modes to decode_hrtimer_mode().
- clocksource/drivers/cadence-ttc: Fix memory leak in ttc_timer_probe
- PM: domains: fix integer overflow issues in genpd_parse_state()
- perf/arm-cmn: Fix DTC reset
- powercap: RAPL: Fix CONFIG_IOSF_MBI dependency
- cpufreq: intel_pstate: Fix energy_performance_preference for passive
- thermal/drivers/sun8i: Fix some error handling paths in sun8i_ths_probe()
- rcuscale: Console output claims too few grace periods
- rcuscale: Always log error message
- rcuscale: Move shutdown from wait_event() to wait_event_idle()
- rcu/rcuscale: Move rcu_scale_*() after kfree_scale_cleanup()
- rcu/rcuscale: Stop kfree_scale_thread thread(s) after unloading rcuscale
- perf/ibs: Fix interface via core pmu events
- [x86] mm: Fix __swp_entry_to_pte() for Xen PV guests
- evm: Complete description of evm_inode_setattr()
- pstore/ram: Add check for kstrdup
- igc: Enable and fix RX hash usage by netstack
- wifi: ath9k: fix AR9003 mac hardware hang check register offset
calculation
- wifi: ath9k: avoid referencing uninit memory in ath9k_wmi_ctrl_rx
- spi: spi-geni-qcom: Correct CS_TOGGLE bit in SPI_TRANS_CFG
- wifi: wilc1000: fix for absent RSN capabilities WFA testcase
- wifi: mwifiex: Fix the size of a memory allocation in
mwifiex_ret_802_11_scan()
- bpf: Remove extra lock_sock for TCP_ZEROCOPY_RECEIVE
- sctp: add bpf_bypass_getsockopt proto callback
- nfc: constify several pointers to u8, char and sk_buff
- nfc: llcp: fix possible use of uninitialized variable in
nfc_llcp_send_connect()
- regulator: core: Fix more error checking for debugfs_create_dir()
- regulator: core: Streamline debugfs operations
- wifi: orinoco: Fix an error handling path in spectrum_cs_probe()
- wifi: orinoco: Fix an error handling path in orinoco_cs_probe()
- wifi: atmel: Fix an error handling path in atmel_probe()
- wl3501_cs: Fix misspelling and provide missing documentation
- net: create netdev->dev_addr assignment helpers
- wl3501_cs: use eth_hw_addr_set()
- wifi: wl3501_cs: Fix an error handling path in wl3501_probe()
- wifi: ray_cs: Utilize strnlen() in parse_addr()
- wifi: ray_cs: Drop useless status variable in parse_addr()
- wifi: ray_cs: Fix an error handling path in ray_probe()
- wifi: ath9k: don't allow to overwrite ENDPOINT0 attributes
- wifi: rsi: Do not configure WoWlan in shutdown hook if not enabled
- wifi: rsi: Do not set MMC_PM_KEEP_POWER in shutdown
- watchdog/perf: define dummy watchdog_update_hrtimer_threshold() on correct
config
- watchdog/perf: more properly prevent false positives with turbo modes
- kexec: fix a memory leak in crash_shrink_memory()
- memstick r592: make memstick_debug_get_tpc_name() static
- wifi: ath9k: Fix possible stall on ath9k_txq_list_has_key()
- rtnetlink: extend RTEXT_FILTER_SKIP_STATS to IFLA_VF_INFO
- wifi: iwlwifi: pull from TXQs with softirqs disabled
- wifi: cfg80211: rewrite merging of inherited elements
- wifi: ath9k: convert msecs to jiffies where needed
- igc: Fix race condition in PTP tx code
- net: stmmac: fix double serdes powerdown
- netlink: fix potential deadlock in netlink_set_err()
- netlink: do not hard code device address lenth in fdb dumps
- gtp: Fix use-after-free in __gtp_encap_destroy().
- net: axienet: Move reset before 64-bit DMA detection
- sfc: fix crash when reading stats while NIC is resetting
- nfc: llcp: simplify llcp_sock_connect() error paths
- net: nfc: Fix use-after-free caused by nfc_llcp_find_local (CVE-2023-3863)
- lib/ts_bm: reset initial match offset for every block of text
- netfilter: conntrack: dccp: copy entire header to stack buffer, not just
basic one
- netfilter: nf_conntrack_sip: fix the ct_sip_parse_numerical_param() return
value.
- ipvlan: Fix return value of ipvlan_queue_xmit()
- netlink: Add __sock_i_ino() for __netlink_diag_dump().
- radeon: avoid double free in ci_dpm_init()
- drm/amd/display: Explicitly specify update type per plane info change
- Input: drv260x - sleep between polling GO bit
- drm/bridge: tc358768: always enable HS video mode
- drm/bridge: tc358768: fix PLL parameters computation
- drm/bridge: tc358768: fix PLL target frequency
- drm/bridge: tc358768: fix TCLK_ZEROCNT computation
- drm/bridge: tc358768: Add atomic_get_input_bus_fmts() implementation
- drm/bridge: tc358768: fix TCLK_TRAILCNT computation
- drm/bridge: tc358768: fix THS_ZEROCNT computation
- drm/bridge: tc358768: fix TXTAGOCNT computation
- drm/bridge: tc358768: fix THS_TRAILCNT computation
- drm/vram-helper: fix function names in vram helper doc
- Input: adxl34x - do not hardcode interrupt trigger type
- drm: sun4i_tcon: use devm_clk_get_enabled in `sun4i_tcon_init_clocks`
- drm/panel: sharp-ls043t1le01: adjust mode settings
- bus: ti-sysc: Fix dispc quirk masking bool variables
- [arm64] dts: microchip: sparx5: do not use PSCI on reference boards
- RDMA/bnxt_re: Disable/kill tasklet only if it is enabled
- RDMA/bnxt_re: Fix to remove unnecessary return labels
- RDMA/bnxt_re: Use unique names while registering interrupts
- RDMA/bnxt_re: Remove a redundant check inside bnxt_re_update_gid
- RDMA/bnxt_re: Fix to remove an unnecessary log
- ARM: dts: gta04: Move model property out of pinctrl node
- [arm64] dts: qcom: msm8916: correct camss unit address
- [arm64] dts: qcom: msm8994: correct SPMI unit address
- [arm64] dts: qcom: msm8996: correct camss unit address
- drm/panel: simple: fix active size for Ampire AM-480272H3TMQW-T01H
- ARM: ep93xx: fix missing-prototype warnings
- ARM: omap2: fix missing tick_broadcast() prototype
- [arm64] dts: qcom: apq8096: fix fixed regulator name property
- ARM: dts: stm32: Shorten the AV96 HDMI sound card name
- memory: brcmstb_dpfe: fix testing array offset after use
- ASoC: es8316: Increment max value for ALC Capture Target Volume control
- ASoC: es8316: Do not set rate constraints for unsupported MCLKs
- ARM: dts: meson8: correct uart_B and uart_C clock references
- soc/fsl/qe: fix usb.c build errors
- IB/hfi1: Use bitmap_zalloc() when applicable
- IB/hfi1: Fix sdma.h tx->num_descs off-by-one errors
- IB/hfi1: Fix wrong mmu_node used for user SDMA packet after invalidate
- RDMA: Remove uverbs_ex_cmd_mask values that are linked to functions
- RDMA/hns: Fix coding style issues
- RDMA/hns: Use refcount_t APIs for HEM
- RDMA/hns: Clean the hardware related code for HEM
- RDMA/hns: Fix hns_roce_table_get return value
- ARM: dts: iwg20d-q7-common: Fix backlight pwm specifier
- fbdev: omapfb: lcd_mipid: Fix an error handling path in mipid_spi_probe()
- [arm64] dts: ti: k3-j7200: Fix physical address of pin
- ARM: dts: stm32: Fix audio routing on STM32MP15xx DHCOM PDK2
- ARM: dts: stm32: fix i2s endpoint format property for stm32mp15xx-dkx
- hwmon: (gsc-hwmon) fix fan pwm temperature scaling
- hwmon: (adm1275) enable adm1272 temperature reporting
- hwmon: (adm1275) Allow setting sample averaging
- hwmon: (pmbus/adm1275) Fix problems with temperature monitoring on ADM1272
- ARM: dts: BCM5301X: fix duplex-full => full-duplex
- drm/radeon: fix possible division-by-zero errors
- amdgpu: validate offset_in_bo of drm_amdgpu_gem_va
- RDMA/bnxt_re: wraparound mbox producer index
- RDMA/bnxt_re: Avoid calling wake_up threads from spin_lock context
- clk: imx: clk-imx8mn: fix memory leak in imx8mn_clocks_probe
- clk: imx: clk-imx8mp: improve error handling in imx8mp_clocks_probe()
- clk: tegra: tegra124-emc: Fix potential memory leak
- ALSA: ac97: Fix possible NULL dereference in snd_ac97_mixer
- drm/msm/dpu: do not enable color-management if DSPPs are not available
- drm/msm/dp: Free resources after unregistering them
- clk: vc5: check memory returned by kasprintf()
- clk: cdce925: check return value of kasprintf()
- clk: si5341: Allow different output VDD_SEL values
- clk: si5341: Add sysfs properties to allow checking/resetting device
faults
- clk: si5341: return error if one synth clock registration fails
- clk: si5341: check return value of {devm_}kasprintf()
- clk: si5341: free unused memory on probe failure
- clk: keystone: sci-clk: check return value of kasprintf()
- clk: ti: clkctrl: check return value of kasprintf()
- drivers: meson: secure-pwrc: always enable DMA domain
- ovl: update of dentry revalidate flags after copy up
- ASoC: imx-audmix: check return value of devm_kasprintf()
- PCI: cadence: Fix Gen2 Link Retraining process
- scsi: qedf: Fix NULL dereference in error handling
- pinctrl: bcm2835: Handle gpiochip_add_pin_range() errors
- PCI/ASPM: Disable ASPM on MFD function removal to avoid use-after-free
- scsi: 3w-xxxx: Add error handling for initialization failure in tw_probe()
- PCI: pciehp: Cancel bringup sequence if card is not present
- PCI: ftpci100: Release the clock resources
- PCI: Add pci_clear_master() stub for non-CONFIG_PCI
- perf bench: Use unbuffered output when pipe/tee'ing to a file
- perf bench: Add missing setlocale() call to allow usage of %'d style
formatting
- pinctrl: cherryview: Return correct value if pin in push-pull mode
- perf dwarf-aux: Fix off-by-one in die_get_varname()
- pinctrl: at91-pio4: check return value of devm_kasprintf()
- [powerpc*] powernv/sriov: perform null check on iov before dereferencing
iov
- mm: rename pud_page_vaddr to pud_pgtable and make it return pmd_t *
- mm: rename p4d_page_vaddr to p4d_pgtable and make it return pud_t *
- [powerpc*] book3s64/mm: Fix DirectMap stats in /proc/meminfo
- [powerpc*] mm/dax: Fix the condition when checking if altmap vmemap can
cross-boundary
- hwrng: virtio - add an internal buffer
- hwrng: virtio - don't wait on cleanup
- hwrng: virtio - don't waste entropy
- hwrng: virtio - always add a pending request
- hwrng: virtio - Fix race on data_avail and actual data
- crypto: nx - fix build warnings when DEBUG_FS is not enabled
- modpost: fix section mismatch message for R_ARM_ABS32
- modpost: fix section mismatch message for R_ARM_{PC24,CALL,JUMP24}
- crypto: marvell/cesa - Fix type mismatch warning
- modpost: fix off by one in is_executable_section()
- NFSv4.1: freeze the session table upon receiving NFS4ERR_BADSESSION
- dax: Fix dax_mapping_release() use after free
- dax: Introduce alloc_dev_dax_id()
- hwrng: st - keep clock enabled while hwrng is registered
- io_uring: ensure IOPOLL locks around deferred work (CVE-2023-21400)
- USB: serial: option: add LARA-R6 01B PIDs
- usb: dwc3: gadget: Propagate core init errors to UDC during pullup
- phy: tegra: xusb: Clear the driver reference in usb-phy dev
- block: fix signed int overflow in Amiga partition support
- block: change all __u32 annotations to __be32 in affs_hardblocks.h
- SUNRPC: Fix UAF in svc_tcp_listen_data_ready()
- w1: w1_therm: fix locking behavior in convert_t
- w1: fix loop in w1_fini()
- serial: 8250: omap: Fix freeing of resources on failed register
- clk: qcom: gcc-ipq6018: Use floor ops for sdcc clocks
- media: usb: Check az6007_read() return value
- media: videodev2.h: Fix struct v4l2_input tuner index comment
- media: usb: siano: Fix warning due to null work_func_t function pointer
(CVE-2023-4132)
- clk: qcom: reset: Allow specifying custom reset delay
- clk: qcom: reset: support resetting multiple bits
- clk: qcom: ipq6018: fix networking resets
- usb: dwc3: qcom: Fix potential memory leak
- usb: gadget: u_serial: Add null pointer check in gserial_suspend
- extcon: Fix kernel doc of property fields to avoid warnings
- extcon: Fix kernel doc of property capability fields to avoid warnings
- usb: phy: phy-tahvo: fix memory leak in tahvo_usb_probe()
- usb: hide unused usbfs_notify_suspend/resume functions
- serial: 8250: lock port for stop_rx() in omap8250_irq()
- serial: 8250: lock port for UART_IER access in omap8250_irq()
- kernfs: fix missing kernfs_idr_lock to remove an ID from the IDR
- coresight: Fix loss of connection info when a module is unloaded
- mfd: rt5033: Drop rt5033-battery sub-device
- media: venus: helpers: Fix ALIGN() of non power of two
- media: atomisp: gmin_platform: fix out_len in gmin_get_config_dsm_var()
- [s390x] KVM: s390: fix KVM_S390_GET_CMMA_BITS for GFNs in memslot holes
- usb: dwc3: qcom: Release the correct resources in dwc3_qcom_remove()
- usb: dwc3: qcom: Fix an error handling path in dwc3_qcom_probe()
- usb: common: usb-conn-gpio: Set last role to unknown before initial
detection
- usb: dwc3-meson-g12a: Fix an error handling path in
dwc3_meson_g12a_probe()
- mfd: intel-lpss: Add missing check for platform_get_resource
- Revert "usb: common: usb-conn-gpio: Set last role to unknown before
initial detection"
- serial: 8250_omap: Use force_suspend and resume for system suspend
- mfd: stmfx: Fix error path in stmfx_chip_init
- mfd: stmfx: Nullify stmfx->vdd in case of error
- [s390x] KVM: s390: vsie: fix the length of APCB bitmap
- mfd: stmpe: Only disable the regulators if they are enabled
- phy: tegra: xusb: check return value of devm_kzalloc()
- pwm: imx-tpm: force 'real_period' to be zero in suspend
- pwm: sysfs: Do not apply state to already disabled PWMs
- rtc: st-lpc: Release some resources in st_rtc_probe() in case of error
- media: cec: i2c: ch7322: also select REGMAP
- sctp: fix potential deadlock on &net->sctp.addr_wq_lock
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
- net: dsa: vsc73xx: fix MTU configuration
- spi: bcm-qspi: return error if neither hif_mspi nor mspi is available
- mailbox: ti-msgmgr: Fill non-message tx data fields with 0x0
- f2fs: fix error path handling in truncate_dnode()
- octeontx2-af: Fix mapping for NIX block from CGX connection
- [powerpc*] allow PPC_EARLY_DEBUG_CPM only when SERIAL_CPM=y
- net: bridge: keep ports without IFF_UNICAST_FLT in BR_PROMISC mode
- tcp: annotate data races in __tcp_oow_rate_limited()
- xsk: Honor SO_BINDTODEVICE on bind
- net/sched: act_pedit: Add size check for TCA_PEDIT_PARMS_EX
- pptp: Fix fib lookup calls.
- net: dsa: tag_sja1105: fix MAC DA patching from meta frames
- [s390x] qeth: Fix vipa deletion
- apparmor: fix missing error check for rhashtable_insert_fast
- i2c: xiic: Defer xiic_wakeup() and __xiic_start_xfer() in xiic_process()
- i2c: xiic: Don't try to handle more interrupt events after error
- ALSA: jack: Fix mutex call in snd_jack_report()
- i2c: qup: Add missing unwind goto in qup_i2c_probe()
- NFSD: add encoding of op_recall flag for write delegation
- io_uring: wait interruptibly for request completions on exit
- mmc: core: disable TRIM on Kingston EMMC04G-M627
- mmc: core: disable TRIM on Micron MTFC4GACAJCN-1M
- mmc: mmci: Set PROBE_PREFER_ASYNCHRONOUS
- mmc: sdhci: fix DMA configure compatibility issue when 64bit DMA mode is
used.
- bcache: fixup btree_cache_wait list damage
- bcache: Remove unnecessary NULL point check in node allocations
- bcache: Fix __bch_btree_node_alloc to make the failure behavior consistent
- integrity: Fix possible multiple allocation in integrity_inode_get()
- autofs: use flexible array in ioctl structure
- shmem: use ramfs_kill_sb() for kill_sb method of ramfs-based tmpfs
- jffs2: reduce stack usage in jffs2_build_xattr_subsystem()
- fs: avoid empty option when generating legacy mount string
- ext4: Remove ext4 locking of moved directory
- Revert "f2fs: fix potential corruption when moving a directory"
- fs: Establish locking order for unrelated directories
- fs: Lock moved directories
- btrfs: add handling for RAID1C23/DUP to btrfs_reduce_alloc_profile
- btrfs: fix race when deleting quota root from the dirty cow roots list
- ARM: orion5x: fix d2net gpio initialization
- leds: trigger: netdev: Recheck NETDEV_LED_MODE_LINKUP on dev rename
- fs: no need to check source
- fanotify: disallow mount/sb marks on kernel internal pseudo fs
- tpm, tpm_tis: Claim locality in interrupt handler
- block: add overflow checks for Amiga partition support
- netfilter: nf_tables: use net_generic infra for transaction data
- netfilter: nf_tables: add rescheduling points during loop detection walks
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound
set/chain
- netfilter: nf_tables: reject unbound anonymous set before commit phase
- netfilter: nf_tables: reject unbound chain set before commit phase
- netfilter: nftables: rename set element data activation/deactivation
functions
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails
- netfilter: nf_tables: fix scheduling-while-atomic splat
- netfilter: conntrack: Avoid nf_ct_helper_hash uses after free
- wireguard: queueing: use saner cpu selection wrapping
- wireguard: netlink: send staged packets when setting initial private key
- tty: serial: fsl_lpuart: add earlycon for imx8ulp platform
- rcu-tasks: Mark ->trc_reader_nesting data races
- rcu-tasks: Mark ->trc_reader_special.b.need_qs data races
- rcu-tasks: Simplify trc_read_check_handler() atomic operations
- block/partition: fix signedness issue for Amiga partitions
- io_uring: Use io_schedule* in cqring wait
- io_uring: add reschedule point to handle_tw_list()
- net: lan743x: Don't sleep in atomic context
- workqueue: clean up WORK_* constant types, clarify masking
- drm/panel: simple: Add connector_type for innolux_at043tn24
- drm/panel: simple: Add Powertip PH800480T013 drm_display_mode flags
- igc: Remove delay during TX ring configuration
- net/mlx5e: fix double free in mlx5e_destroy_flow_table
- net/mlx5e: Check for NOT_READY flag state after locking
- igc: set TP bit in 'supported' and 'advertising' fields of
ethtool_link_ksettings
- scsi: qla2xxx: Fix error code in qla2x00_start_sp()
- net: mvneta: fix txq_map in case of txq_number==1
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free
(CVE-2023-3776)
- gve: Set default duplex configuration to full
- ionic: remove WARN_ON to prevent panic_on_warn
- net: bgmac: postpone turning IRQs off to avoid SoC hangs
- net: prevent skb corruption on frag list segmentation
- icmp6: Fix null-ptr-deref of ip6_null_entry->rt6i_idev in icmp6_dev().
- udp6: fix udp6_ehashfn() typo
- ntb: idt: Fix error handling in idt_pci_driver_init()
- NTB: amd: Fix error handling in amd_ntb_pci_driver_init()
- ntb: intel: Fix error handling in intel_ntb_pci_driver_init()
- NTB: ntb_transport: fix possible memory leak while device_register() fails
- NTB: ntb_tool: Add check for devm_kcalloc
- ipv6/addrconf: fix a potential refcount underflow for idev
- [x86] platform/x86: wmi: remove unnecessary argument
- [x86] platform/x86: wmi: use guid_t and guid_equal()
- [x86] platform/x86: wmi: move variables
- [x86] platform/x86: wmi: Break possible infinite loop when parsing GUID
- igc: Fix launchtime before start of cycle
- igc: Fix inserting of empty frame for launchtime
- riscv: bpf: Move bpf_jit_alloc_exec() and bpf_jit_free_exec() to core
- erofs: avoid infinite loop in z_erofs_do_read_page() when reading beyond
EOF
- wifi: airo: avoid uninitialized warning in airo_get_rate()
- net/sched: flower: Ensure both minimum and maximum ports are specified
- netdevsim: fix uninitialized data in nsim_dev_trap_fa_cookie_write()
- net/sched: make psched_mtu() RTNL-less safe
- net/sched: sch_qfq: refactor parsing of netlink parameters
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
(CVE-2023-3611)
- nvme-pci: fix DMA direction of unmapping integrity data
- f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
(CVE-2023-2898)
- pinctrl: amd: Fix mistake in handling clearing pins at startup
- pinctrl: amd: Detect internal GPIO0 debounce handling
- pinctrl: amd: Only use special debounce behavior for GPIO 0
- tpm: tpm_vtpm_proxy: fix a race condition in /dev/vtpmx creation
- mtd: rawnand: meson: fix unaligned DMA buffers handling
- net: bcmgenet: Ensure MDIO unregistration has clocks enabled
- [powerpc*] Fail build if using recordmcount with binutils v2.37
- misc: fastrpc: Create fastrpc scalar with correct buffer count
- erofs: fix compact 4B support for 16k block size
- ext4: Fix reusing stale buffer heads from last failed mounting
- ext4: fix wrong unit use in ext4_mb_clear_bb
- ext4: get block from bh in ext4_free_blocks for fast commit replay
- ext4: fix wrong unit use in ext4_mb_new_blocks
- ext4: only update i_reserved_data_blocks on successful block allocation
- jfs: jfs_dmap: Validate db_l2nbperpage while mounting
- hwrng: imx-rngc - fix the timeout for init and self check
- PCI/PM: Avoid putting EloPOS E2/S2/H2 PCIe Ports in D3cold
- PCI: Add function 1 DMA alias quirk for Marvell 88SE9235
- PCI: qcom: Disable write access to read only registers for IP v2.3.3
- PCI: rockchip: Assert PCI Configuration Enable bit after probe
- PCI: rockchip: Write PCI Device ID to correct register
- PCI: rockchip: Add poll and timeout to wait for PHY PLLs to be locked
- PCI: rockchip: Fix legacy IRQ generation for RK3399 PCIe endpoint core
- PCI: rockchip: Use u32 variable to access 32-bit registers
- PCI: rockchip: Set address alignment for endpoint mode
- misc: pci_endpoint_test: Free IRQs before removing the device
- misc: pci_endpoint_test: Re-init completion for every test
- md/raid0: add discard support for the 'original' layout
- fs: dlm: return positive pid value for F_GETLK
- drm/atomic: Allow vblank-enabled + self-refresh "disable"
- drm/rockchip: vop: Leave vblank enabled in self-refresh
- drm/amd/display: Correct `DMUB_FW_VERSION` macro
- serial: atmel: don't enable IRQs prematurely
- tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() in
case of error
- tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk()
when iterating clk
- firmware: stratix10-svc: Fix a potential resource leak in
svc_create_memory_pool()
- ceph: don't let check_caps skip sending responses for revoke msgs
- xhci: Fix resume issue of some ZHAOXIN hosts
- xhci: Fix TRB prefetch issue of ZHAOXIN hosts
- xhci: Show ZHAOXIN xHCI root hub speed correctly
- meson saradc: fix clock divider mask length
- Revert "8250: add support for ASIX devices with a FIFO bug"
- [s390x] decompressor: fix misaligned symbol build error
- tracing/histograms: Add histograms to hist_vars if they have referenced
variables
- net: ena: fix shift-out-of-bounds in exponential backoff
- ring-buffer: Fix deadloop issue on reading trace_pipe
- tracing: Fix null pointer dereference in tracing_err_log_open()
- tracing/probes: Fix not to count error code to total length
- scsi: qla2xxx: Wait for io return on terminate rport
- scsi: qla2xxx: Array index may go out of bound
- scsi: qla2xxx: Fix buffer overrun
- scsi: qla2xxx: Fix potential NULL pointer dereference
- scsi: qla2xxx: Check valid rport returned by fc_bsg_to_rport()
- scsi: qla2xxx: Correct the index of array
- scsi: qla2xxx: Pointer may be dereferenced
- scsi: qla2xxx: Remove unused nvme_ls_waitq wait queue
- net/sched: sch_qfq: reintroduce lmax bound check for MTU
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- drm/atomic: Fix potential use-after-free in nonblocking commits
- ALSA: hda/realtek - remove 3k pull low procedure
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 15s-eq2xxx
- keys: Fix linking a duplicate key to a keyring's assoc_array
- perf probe: Add test for regression introduced by switch to
die_get_decl_file()
- btrfs: fix warning when putting transaction with qgroups enabled after
abort
- fuse: revalidate: don't invalidate if interrupted
- regmap: Drop initial version of maximum transfer length fixes
- regmap: Account for register length in SMBus I/O limits
- can: bcm: Fix UAF in bcm_proc_show()
- drm/client: Fix memory leak in drm_client_target_cloned
- drm/client: Fix memory leak in drm_client_modeset_probe
- ASoC: fsl_sai: Disable bit clock with transmitter
- ext4: correct inline offset when handling xattrs in inode body
- debugobjects: Recheck debug_objects_enabled before reporting
- nbd: Add the maximum limit of allocated index in nbd_dev_add
- md: fix data corruption for raid456 when reshape restart while grow up
- md/raid10: prevent soft lockup while flush writes
- posix-timers: Ensure timer ID search-loop limit is valid
- btrfs: add xxhash to fast checksum implementations
- ACPI: button: Add lid disable DMI quirk for Nextbook Ares 8A
- ACPI: video: Add backlight=native DMI quirk for Apple iMac11,3
- ACPI: video: Add backlight=native DMI quirk for Lenovo ThinkPad X131e
(3371 AMD version)
- [arm64] set __exception_irq_entry with __irq_entry as a default
- [arm64] mm: fix VA-range sanity check
- sched/fair: Don't balance task to its current running CPU
- wifi: ath11k: fix registration of 6Ghz-only phy without the full channel
range
- bpf: Address KCSAN report on bpf_lru_list
- devlink: report devlink_port_type_warn source device
- wifi: wext-core: Fix -Wstringop-overflow warning in
ioctl_standard_iw_point()
- wifi: iwlwifi: mvm: avoid baid size integer overflow
- igb: Fix igb_down hung on surprise removal
- spi: bcm63xx: fix max prepend length
- fbdev: imxfb: warn about invalid left/right margin
- pinctrl: amd: Use amd_pinconf_set() for all config options
- net: ethernet: ti: cpsw_ale: Fix cpsw_ale_get_field()/cpsw_ale_set_field()
- bridge: Add extack warning when enabling STP in netns.
- iavf: Fix use-after-free in free_netdev
- iavf: Fix out-of-bounds when setting channels on remove
- security: keys: Modify mismatched function name
- octeontx2-pf: Dont allocate BPIDs for LBK interfaces
- tcp: annotate data-races around tcp_rsk(req)->ts_recent
- net: ipv4: Use kfree_sensitive instead of kfree
- net:ipv6: check return value of pskb_trim()
- Revert "tcp: avoid the lookup process failing to get sk in ehash table"
- fbdev: au1200fb: Fix missing IRQ check in au1200fb_drv_probe
- llc: Don't drop packet from non-root netns.
- netfilter: nf_tables: fix spurious set element insertion failure
- netfilter: nf_tables: can't schedule in nft_chain_validate
- netfilter: nft_set_pipapo: fix improper element removal (CVE-2023-4004)
- netfilter: nf_tables: skip bound chain in netns release path
- netfilter: nf_tables: skip bound chain on rule flush
- tcp: annotate data-races around tp->tcp_tx_delay
- tcp: annotate data-races around tp->keepalive_time
- tcp: annotate data-races around tp->keepalive_intvl
- tcp: annotate data-races around tp->keepalive_probes
- net: Introduce net.ipv4.tcp_migrate_req.
- tcp: Fix data-races around sysctl_tcp_syn(ack)?_retries.
- tcp: annotate data-races around icsk->icsk_syn_retries
- tcp: annotate data-races around tp->linger2
- tcp: annotate data-races around rskq_defer_accept
- tcp: annotate data-races around tp->notsent_lowat
- tcp: annotate data-races around icsk->icsk_user_timeout
- tcp: annotate data-races around fastopenq.max_qlen
- net: phy: prevent stale pointer dereference in phy_init()
- tracing/histograms: Return an error if we fail to add histogram to
hist_vars list
- tracing: Fix memory leak of iter->temp when reading trace_pipe
- ftrace: Store the order of pages allocated in ftrace_page
- ftrace: Fix possible warning on checking all pages used in
ftrace_process_locs()
https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.189
- xen/netback: Fix buffer overrun triggered by unusual packet
(CVE-2023-34319)
- [x86] fix backwards merge of GDS/SRSO bit
https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.190
- [s390x] KVM: s390: pv: fix index value of replaced ASCE
- io_uring: don't audit the capability check in io_uring_create()
- btrfs: fix race between quota disable and relocation
- btrfs: fix extent buffer leak after tree mod log failure at split_node()
- i2c: Delete error messages for failed memory allocations
- i2c: Improve size determinations
- PCI/ASPM: Return 0 or -ETIMEDOUT from pcie_retrain_link()
- PCI/ASPM: Factor out pcie_wait_for_retrain()
- PCI/ASPM: Avoid link retraining race
- dlm: cleanup plock_op vs plock_xop
- dlm: rearrange async condition return
- fs: dlm: interrupt posix locks only when process is killed
- drm/ttm: add ttm_bo_pin()/ttm_bo_unpin() v2
- drm/ttm: never consider pinned BOs for eviction&swap
- tracing: Show real address for trace event arguments
- [arm64,armhf] pwm: meson: Simplify duplicated per-channel tracking
- [arm64,armhf] pwm: meson: fix handling of period/duty if greater than
UINT_MAX
- ext4: fix to check return value of freeze_bdev() in ext4_shutdown()
- i40e: Fix an NULL vs IS_ERR() bug for debugfs_create_dir()
- net: phy: marvell10g: fix 88x3310 power up
- [arm64] net: hns3: reconstruct function hclge_ets_validate()
- [arm64] net: hns3: fix wrong bw weight of disabled tc issue
- vxlan: move to its own directory
- vxlan: calculate correct header length for GPE
- phy: hisilicon: Fix an out of bounds check in hisi_inno_phy_probe()
- ethernet: atheros: fix return value check in atl1e_tso_csum()
- ipv6 addrconf: fix bug where deleting a mngtmpaddr can create a new
temporary address
- tcp: Reduce chance of collisions in inet6_hashfn(). (CVE-2023-1206)
- ice: Fix memory management in ice_ethtool_fdir.c
- bonding: reset bond's flags when down link is P2P device
- team: reset team's flags when down link is P2P device
- [x86] platform/x86: msi-laptop: Fix rfkill out-of-sync on MSI Wind U100
- netfilter: nft_set_rbtree: fix overlap expiration walk
- netfilter: nftables: add helper function to validate set element data
- netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
- netfilter: nf_tables: disallow rule addition to bound chain via
NFTA_RULE_CHAIN_ID (CVE-2023-4147)
- net/sched: mqprio: refactor nlattr parsing to a separate function
- net/sched: mqprio: add extack to mqprio_parse_nlattr()
- net/sched: mqprio: Add length check for TCA_MQPRIO_{MAX/MIN}_RATE64
- benet: fix return value check in be_lancer_xmit_workarounds()
- tipc: check return value of pskb_trim()
- tipc: stop tipc crypto on failure in tipc_node_create
- RDMA/mlx4: Make check for invalid flags stricter
- drm/msm/dpu: drop enum dpu_core_perf_data_bus_id
- drm/msm/adreno: Fix snapshot BINDLESS_DATA size
- RDMA/mthca: Fix crash when polling CQ for shared QPs
- drm/msm: Fix IS_ERR_OR_NULL() vs NULL check in a5xx_submit_in_rb()
- [armhf] ASoC: fsl_spdif: Silence output on stop
- block: Fix a source code comment in include/uapi/linux/blkzoned.h
- dm raid: fix missing reconfig_mutex unlock in raid_ctr() error paths
- dm raid: clean up four equivalent goto tags in raid_ctr()
- dm raid: protect md_stop() with 'reconfig_mutex'
- ata: pata_ns87415: mark ns87560_tf_read static
- ring-buffer: Fix wrong stat of cpu_buffer->read
- tracing: Fix warning in trace_buffered_event_disable()
- Revert "usb: gadget: tegra-xudc: Fix error check in
tegra_xudc_powerdomain_init()"
- USB: gadget: Fix the memory leak in raw_gadget driver
- serial: 8250_dw: Preserve original value of DLF register
- USB: serial: option: support Quectel EM060K_128
- USB: serial: option: add Quectel EC200A module support
- USB: serial: simple: add Kaufmann RKS+CAN VCP
- USB: serial: simple: sort driver entries
- can: gs_usb: gs_can_close(): add missing set of CAN state to
CAN_STATE_STOPPED
- Revert "usb: dwc3: core: Enable AutoRetry feature in the controller"
- usb: dwc3: pci: skip BYT GPIO lookup table for hardwired phy
- usb: dwc3: don't reset device side if dwc3 was configured as host-only
- usb: ohci-at91: Fix the unhandle interrupt when resume
- USB: quirks: add quirk for Focusrite Scarlett
- usb: xhci-mtk: set the dma max_seg_size
- Revert "usb: xhci: tegra: Fix error check"
- Documentation: security-bugs.rst: update preferences when dealing with the
linux-distros group
- Documentation: security-bugs.rst: clarify CVE handling
- staging: ks7010: potential buffer overflow in ks_wlan_set_encode_ext()
- tty: n_gsm: fix UAF in gsm_cleanup_mux
- ALSA: hda/relatek: Enable Mute LED on HP 250 G8
- hwmon: (nct7802) Fix for temp6 (PECI1) processed even if PECI1 disabled
- btrfs: check for commit error at btrfs_attach_transaction_barrier()
- file: always lock position for FMODE_ATOMIC_POS
- nfsd: Remove incorrect check in nfsd4_validate_stateid
- tpm_tis: Explicitly check for error code
- [arm64,armhf] irqchip/gic-v4.1: Properly lock VPEs when doing a directLPI
invalidation
- [x86] KVM: VMX: Invert handling of CR0.WP for EPT without unrestricted
guest
- [x86] KVM: VMX: Fold ept_update_paging_mode_cr0() back into vmx_set_cr0()
- [x86] KVM: nVMX: Do not clear CR3 load/store exiting bits if L1 wants 'em
- [x86] KVM: VMX: Don't fudge CR0 and CR4 for restricted L2 guest
- staging: rtl8712: Use constants from <linux/ieee80211.h>
- staging: r8712: Fix memory leak in _r8712_init_xmit_priv()
- btrfs: check if the transaction was aborted at btrfs_wait_for_commit()
- virtio-net: fix race between set queues and probe
- [s390x] dasd: fix hanging device after quiesce/resume
- [arm64] ASoC: wm8904: Fill the cache for WM8904_ADC_TEST_0 register
- ceph: never send metrics if disable_send_metrics is set
- dm cache policy smq: ensure IO doesn't prevent cleaner policy progress
- drm/ttm: make ttm_bo_unpin more defensive
- ACPI: processor: perflib: Use the "no limit" frequency QoS
- ACPI: processor: perflib: Avoid updating frequency QoS unnecessarily
- [x86] cpufreq: intel_pstate: Drop ACPI _PSS states table patching
- io_uring: treat -EAGAIN for REQ_F_NOWAIT as final for io-wq
- [armel,armhf] ASoC: cs42l51: fix driver to properly autoload with
automatic module loading
- [x86] kprobes/x86: Fix fall-through warnings for Clang
- [x86] kprobes: Do not decode opcode in resume_execution()
- [x86] kprobes: Retrieve correct opcode for group instruction
- [x86] kprobes: Identify far indirect JMP correctly
- [x86] kprobes: Use int3 instead of debug trap for single-step
- [x86] kprobes: Fix to identify indirect jmp and others using range case
- [x86] kprobes: Move 'inline' to the beginning of the kprobe_is_ss()
declaration
- [x86] kprobes: Update kcb status flag after singlestepping
- [x86] kprobes: Fix JNG/JNLE emulation
- io_uring: gate iowait schedule on having pending requests
- perf: Fix function pointer case
- loop: Select I/O scheduler 'none' from inside add_disk()
- [arm64] dts: imx8mn-var-som: add missing pull-up for onboard PHY reset
pinmux
- word-at-a-time: use the same return type for has_zero regardless of
endianness
- [s390x] KVM: s390: fix sthyi error handling
- wifi: cfg80211: Fix return value in scan logic
- net/mlx5: DR, fix memory leak in mlx5dr_cmd_create_reformat_ctx
- net/mlx5e: fix return value check in mlx5e_ipsec_remove_trailer()
- bpf: Add length check for SK_DIAG_BPF_STORAGE_REQ_MAP_FD parsing
- rtnetlink: let rtnl_bridge_setlink checks IFLA_BRIDGE_MODE length
- [armhf] net: dsa: fix value check in bcm_sf2_sw_probe()
- net: sched: cls_u32: Fix match key mis-addressing
- mISDN: hfcpci: Fix potential deadlock on &hc->lock
- net: annotate data-races around sk->sk_max_pacing_rate
- net: add missing READ_ONCE(sk->sk_rcvlowat) annotation
- net: add missing READ_ONCE(sk->sk_sndbuf) annotation
- net: add missing READ_ONCE(sk->sk_rcvbuf) annotation
- net: add missing data-race annotations around sk->sk_peek_off
- net: add missing data-race annotation for sk_ll_usec
- net/sched: cls_u32: No longer copy tcf_result on update to avoid
use-after-free (CVE-2023-4128)
- net/sched: cls_fw: No longer copy tcf_result on update to avoid
use-after-free (CVE-2023-4128)
- net/sched: cls_route: No longer copy tcf_result on update to avoid
use-after-free (CVE-2023-4128)
- bpf: sockmap: Remove preempt_disable in sock_map_sk_acquire
- net: netsec: Ignore 'phy-mode' on SynQuacer in DT mode
- net: dcb: choose correct policy to parse DCB_ATTR_BCN
- [s390x] qeth: Don't call dev_close/dev_open (DOWN/UP)
- ip6mr: Fix skb_under_panic in ip6mr_cache_report()
- vxlan: Fix nexthop hash size
- net/mlx5: fs_core: Make find_closest_ft more generic
- net/mlx5: fs_core: Skip the FTs in the same FS_TYPE_PRIO_CHAINS fs_prio
- tcp_metrics: fix addr_same() helper
- tcp_metrics: annotate data-races around tm->tcpm_stamp
- tcp_metrics: annotate data-races around tm->tcpm_lock
- tcp_metrics: annotate data-races around tm->tcpm_vals[]
- tcp_metrics: annotate data-races around tm->tcpm_net
- tcp_metrics: fix data-race in tcpm_suck_dst() vs fastopen
- scsi: zfcp: Defer fc_rport blocking until after ADISC response
- libceph: fix potential hang in ceph_osdc_notify()
- USB: zaurus: Add ID for A-300/B-500/C-700
- ceph: defer stopping mdsc delayed_work
- exfat: use kvmalloc_array/kvfree instead of kmalloc_array/kfree
- exfat: release s_lock before calling dir_emit()
- [arm64] dts: stratix10: fix incorrect I2C property for SCL signal
- net: tun_chr_open(): set sk_uid from current_fsuid() (CVE-2023-4194)
- net: tap_open(): set sk_uid from current_fsuid() (CVE-2023-4194)
- bpf: Disable preemption in bpf_event_output
- open: make RESOLVE_CACHED correctly test for O_TMPFILE
- drm/ttm: check null pointer before accessing when swapping
- file: reinstate f_pos locking optimization for regular files
- tracing: Fix sleeping while atomic in kdb ftdump
- fs/sysv: Null check to prevent null-ptr-deref bug
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
(CVE-2023-40283)
- net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb
- fs: Protect reconfiguration of sb read-write from racing writes
- [powerpc*] mm/altmap: Fix altmap boundary check
- soundwire: bus: add better dev_dbg to track complete() calls
- soundwire: bus: pm_runtime_request_resume on peripheral attachment
- soundwire: fix enumeration completion
- PM / wakeirq: support enabling wake-up irq after runtime_suspend called
- PM: sleep: wakeirq: fix wake irq arming
- exfat: speed up iterate/lookup by fixing start point of traversing cluster
chain
- exfat: support dynamic allocate bh for exfat_entry_set_cache
- exfat: check if filename entries exceeds max filename length
(CVE-2023-4273)
- mt76: move band capabilities in mt76_phy
- mt76: mt7615: Fix fall-through warnings for Clang
- wifi: mt76: mt7615: do not advertise 5 GHz on first phy of MT7615D (DBDC)
- [x86] CPU/AMD: Do not leak quotient data after a division by 0
(CVE-2023-20588)
https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.191
- wireguard: allowedips: expand maximum node depth
- ipv6: adjust ndisc_is_useropt() to also return true for PIO
- bpf: allow precision tracking for programs with subprogs
- bpf: stop setting precise in current state
- bpf: aggressively forget precise markings during state checkpointing
- [arm64,armhf] dmaengine: pl330: Return DMA_PAUSED when transaction is
paused
- drm/nouveau/gr: enable memory loads on helper invocation on all channels
- drm/shmem-helper: Reset vma->vm_ops before calling dma_buf_mmap()
- drm/amd/display: check attr flag before set cursor degamma on DCN3+
- [x86] x86/pkeys: Revert a5eff7259790 ("x86/pkeys: Add PKRU value to
init_fpstate") (Closes: #1044518)
- nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput
- io_uring: correct check for O_TMPFILE
- [arm64] iio: cros_ec: Fix the allocation size for cros_ec_command
- [arm*] binder: fix memory leak in binder_init()
- usb-storage: alauda: Fix uninit-value in alauda_check_media()
- [arm64,armhf] usb: dwc3: Properly handle processing of pending events
- [arm64,armhf] usb: common: usb-conn-gpio: Prevent bailing out if initial
role is none
- [x86] cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
- [x86] mm: Fix VDSO and VVAR placement on 5-level paging machines
- [x86] speculation: Add cpu_show_gds() prototype
- [x86] Move gds_ucode_mitigated() declaration to header
- drm/nouveau/disp: Revert a NULL check inside nouveau_connector_get_modes
- mISDN: Update parameter type of dsp_cmx_send()
- net/packet: annotate data-races around tp->status
- tunnels: fix kasan splat when generating ipv4 pmtu error
- bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
- dccp: fix data-race around dp->dccps_mss_cache
- drivers: net: prevent tun_build_skb() to exceed the packet size limit
- [amd64] IB/hfi1: Fix possible panic during hotplug remove
- wifi: cfg80211: fix sband iftype data lookup for AP_VLAN
- net: phy: at803x: remove set/get wol callbacks for AR8032
- [arm64] net: hns3: refactor hclge_mac_link_status_wait for interface reuse
- [arm64] net: hns3: add wait until mac link down
- net/mlx5: Allow 0 for total host VFs
- btrfs: don't stop integrity writeback too early
- btrfs: set cache_block_group_error if we find an error
- nvme-tcp: fix potential unbalanced freeze & unfreeze
- nvme-rdma: fix potential unbalanced freeze & unfreeze
- netfilter: nf_tables: report use refcount overflow
- scsi: core: Fix legacy /proc parsing buffer overflow
- [x86] scsi: storvsc: Fix handling of virtual Fibre Channel timeouts
- scsi: snic: Fix possible memory leak if device_add() fails
- scsi: core: Fix possible memory leak if device_add() fails
- scsi: qedi: Fix firmware halt over suspend and resume
- scsi: qedf: Fix firmware halt over suspend and resume
- sch_netem: fix issues in netem_change() vs get_dist_table()
.
[ Ben Hutchings ]
* d/b/test-patches: Fix installability; improve robustness and efficiency
(Closes: #871216, #1035359):
- d/b/gencontrol.py: Add optional extra config dir debian/config.local
- d/b/gencontrol.py: Add support for noudeb build profile
- d/b/test-patches: Change ABI name to make packages co-installable
- d/b/test-patches: Make debug info optional and disabled by default
- d/b/test-patches: Build a linux-headers-common package as well
- d/b/test-patches: Tolerate missing d/control, d/rules.gen, or d/p/test
- d/b/test-patches: Detect flavour correctly when running backported kernel
- Add pkg.linux.mintools profile for building minimal userland tools
- d/b/test-patches: Build linux-{kbuild,bootwrapper} packages
.
[ Salvatore Bonaccorso ]
* [rt] Update to 5.10.180-rt88
* Bump ABI to 25
* Drop unknown config setting NET_CLS_TCINDEX
* Drop unknown config setting BLK_DEV_SX8
* [rt] Update to 5.10.184-rt90
* Drop "decnet: Disable auto-loading as mitigation against local exploits"
* Drop now unknown config options for DECnet support
* [rt] Update to 5.10.186-rt91
Checksums-Sha1:
25683d0b2b6b1ee6ef351d0bdb492e77051d0647 42701 linux-5.10_5.10.197-1~deb10u1.dsc
89e23955a5c06acb14d67d85e1e24214c7b016ee 121862804 linux-5.10_5.10.197.orig.tar.xz
bf26c8c205f647828da20e44b1a61e7b5d052526 1625108 linux-5.10_5.10.197-1~deb10u1.debian.tar.xz
950fa58eda9e5c6bf4b31989d801972c654a45e9 13604 linux-5.10_5.10.197-1~deb10u1_source.buildinfo
Checksums-Sha256:
08ed59dd0d413972d1ef15d618b9687724d29eaaab96f9a8138ebae40f645663 42701 linux-5.10_5.10.197-1~deb10u1.dsc
0a0d5651b67c7881d094c6b1bfbedd5971e280fb2ff2ada8a31a6f2b96b90d71 121862804 linux-5.10_5.10.197.orig.tar.xz
f79bcf141abe5fdc2f2fadf1124f433f7ad207fddedfc48d0bb5575cdf9e0124 1625108 linux-5.10_5.10.197-1~deb10u1.debian.tar.xz
51807772b5cf1077587c3b41cb1f585411977a782a5ffacffc754d7b57cf404d 13604 linux-5.10_5.10.197-1~deb10u1_source.buildinfo
Files:
f1b22b9cbe6213ba2029e34943517810 42701 kernel optional linux-5.10_5.10.197-1~deb10u1.dsc
da815d9073d3caff8306fb97e6560797 121862804 kernel optional linux-5.10_5.10.197.orig.tar.xz
9347c60eef0c9547717046a0ef3fb758 1625108 kernel optional linux-5.10_5.10.197-1~deb10u1.debian.tar.xz
02a9d66cfe49ae41211c4f6c1ecfec96 13604 kernel optional linux-5.10_5.10.197-1~deb10u1_source.buildinfo
-----BEGIN PGP SIGNATURE-----
iQIzBAEBCgAdFiEErCspvTSmr92z9o8157/I7JWGEQkFAmUu8kkACgkQ57/I7JWG
EQkoug//c3VIrIoqNHs8NeSHNkGniBbCS8ffWjduVX9fIQ27lKKa5MRXhVfgftBU
9fGFk2tX5+zEeNzO6q0W0/5mFplqStrIdU6P16QbkRYlokPEQKjlljyv2N0aV4//
Gq+OLwXkt664dza7XZq21KDK1iHOJqKyww8+EoYJgRku2lnzBRAgLqIfr45dHhJY
QHveqPoJ7eCU9LBnSkD0MEoUqtAz6zAprPpiCuzQU8BxBUs7B1nKg+5VoRQ4CkED
qs6/+QYFW37inYS20RLxmK6r1DDWkcxbKl0TQ3NhqLZvtbgUzIu6v+pDOYVdAT+n
ciQbd2ZGa2cWGZ9MKzDoSU4Jdmiw2KsIRlRa2oSlAYsTQYZktpMMbr2cGfFzSVSO
6AnAPGZ5aE3VNesKJDMLMwHwOZHehpAJho/IBFa6RoKJq+8pwmxMF30dfuZprDYm
Bn3ztJOx8olxU3GGz6drpssE6Yf2bfz6yZiHadRxhLL4G1xtdEO8lRhpTIUKvEPQ
p8TjL9wB+o+6chPchgPGscLdguDN/BmWL4+onP0Ud6b0PFEWOyCjoPW7Heb2xnoc
2ujiatdofVdHCcV77UGpJHW5n32Mi2e6PKwLwPGptZCshZ1hdhkG5nWhKv4iS45f
J4Kp9HGdEBvjbBEzk40xOZxw1q6MaVYGkPmPK73A9BiAK53i+4s=
=lWN3
-----END PGP SIGNATURE-----
Reply to: