[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Accepted linux 5.15.5-2~bpo11+1 (source) into bullseye-backports, bullseye-backports

Hash: SHA512

Format: 1.8
Date: Sun, 02 Jan 2022 04:45:50 +0100
Source: linux
Architecture: source
Version: 5.15.5-2~bpo11+1
Distribution: bullseye-backports
Urgency: medium
Maintainer: Debian Kernel Team <debian-kernel@lists.debian.org>
Changed-By: Ben Hutchings <benh@debian.org>
Closes: 804857 911815 919807 971892 977575 988044 989285 991921 992184 993453 993902 994050 994535 995276 995407 995466 995927 996175 996672 996951 996962 999638 999748 1000504 1001128
 linux (5.15.5-2~bpo11+1) bullseye-backports; urgency=medium
   * Rebuild for bullseye-backports:
     - Change ABI number to 0.bpo.2
     - Revert "Compile with gcc-11 on all architectures"
     - perf: Disable use of libopencsd, as bullseye's version is too old
 linux (5.15.5-2) unstable; urgency=medium
   * atlantic: Fix OOB read and write in hw_atl_utils_fw_rpc_wait
   * fget: check that the fd still exists after getting a ref to it
   * USB: gadget: detect too-big endpoint 0 requests (CVE-2021-39685)
   * USB: gadget: zero allocate endpoint 0 buffers (CVE-2021-39685)
   * [x86] Revert "drm/i915: Implement Wa_1508744258" (Closes: #1001128)
   * nfsd: fix use-after-free due to delegation race (Closes: #988044)
   * bpf: Fix kernel address leakage in atomic fetch
   * bpf: Fix signed bounds propagation after mov32
   * bpf: Make 32->64 bounds propagation slightly more robust
   * bpf: Fix kernel address leakage in atomic cmpxchg's r0 aux reg
 linux (5.15.5-1) unstable; urgency=medium
   * New upstream stable update:
     - string: uninline memcpy_and_pad
     - [x86] KVM: Fix steal time asm constraints
     - btrfs: introduce btrfs_is_data_reloc_root
     - btrfs: zoned: add a dedicated data relocation block group
     - btrfs: zoned: only allow one process to add pages to a relocation inode
     - btrfs: zoned: use regular writes for relocation
     - btrfs: check for relocation inodes on zoned btrfs in should_nocow
     - btrfs: zoned: allow preallocation for relocation inodes
     - block: Add a helper to validate the block size
     - loop: Use blk_validate_block_size() to validate block size
     - Bluetooth: btusb: Add support for TP-Link UB500 Adapter
     - PCI/MSI: Deal with devices lying about their MSI mask capability
     - PCI: Add MSI masking quirk for Nvidia ION AHCI
     - perf/core: Avoid put_page() when GUP fails
     - thermal: Fix NULL pointer dereferences in of_thermal_ functions
     - Revert "ACPI: scan: Release PM resources blocked by unused objects"
     - [arm64] zynqmp: Do not duplicate flash partition label property
     - [arm64] zynqmp: Fix serial compatible string
     - [arm64,armhf] clk: sunxi-ng: Unregister clocks/resets when unbinding
     - scsi: pm80xx: Fix memory leak during rmmod
     - scsi: lpfc: Fix list_add() corruption in lpfc_drain_txq()
     - [armhf] bus: ti-sysc: Add quirk handling for reinit on context lost
     - [armhf] bus: ti-sysc: Use context lost quirk for otg
     - [armhf] usb: musb: tusb6010: check return value after calling
     - [x86] usb: typec: tipd: Remove WARN_ON in tps6598x_block_read
     - staging: rtl8723bs: remove possible deadlock when disconnect (v2)
     - staging: rtl8723bs: remove a second possible deadlock
     - staging: rtl8723bs: remove a third possible deadlock
     - [arm64] dts: ls1012a: Add serial alias for ls1012a-rdb
     - RDMA/rxe: Separate HW and SW l/rkeys
     - [x86] ASoC: SOF: Intel: hda-dai: fix potential locking issue
     - scsi: core: Fix scsi_mode_sense() buffer length handling
     - ALSA: usb-audio: disable implicit feedback sync for Behringer UFX1204 and
     - [armhf] clk: imx: imx6ul: Move csi_sel mux to correct base register
     - ASoC: es8316: Use IRQF_NO_AUTOEN when requesting the IRQ
     - [x86] ASoC: rt5651: Use IRQF_NO_AUTOEN when requesting the IRQ
     - [x86] ASoC: nau8824: Add DMI quirk mechanism for active-high jack-detect
     - scsi: advansys: Fix kernel pointer leak
     - scsi: smartpqi: Add controller handshake during kdump
     - [arm64] dts: imx8mm-kontron: Fix reset delays for ethernet PHY
     - ALSA: intel-dsp-config: add quirk for APL/GLK/TGL devices based on ES8336
     - [x86] ASoC: Intel: soc-acpi: add missing quirk for TGL SDCA single amp
     - [x86] ASoC: Intel: sof_sdw: add missing quirk for Dell SKU 0A45
     - firmware_loader: fix pre-allocated buf built-in firmware use
     - HID: multitouch: disable sticky fingers for UPERFECT Y
     - ALSA: usb-audio: Add support for the Pioneer DJM 750MK2 Mixer/Soundcard
     - ASoC: rt5682: fix a little pop while playback
     - [amd64] iommu/vt-d: Do not falsely log intel_iommu is unsupported kernel
     - tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc
     - scsi: scsi_debug: Fix out-of-bound read in resp_readcap16()
     - scsi: scsi_debug: Fix out-of-bound read in resp_report_tgtpgs()
     - scsi: target: Fix ordered tag handling
     - scsi: target: Fix alua_tg_pt_gps_count tracking
     - iio: imu: st_lsm6dsx: Avoid potential array overflow in
     - RDMA/core: Use kvzalloc when allocating the struct ib_port
     - scsi: lpfc: Fix use-after-free in lpfc_unreg_rpi() routine
     - scsi: lpfc: Fix link down processing to address NULL pointer dereference
     - scsi: lpfc: Allow fabric node recovery if recovery is in progress before
     - [i386] ALSA: gus: fix null pointer dereference on pointer block
     - ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
     - f2fs: fix up f2fs_lookup tracepoints
     - f2fs: fix to use WHINT_MODE
     - f2fs: fix wrong condition to trigger background checkpoint correctly
     - f2fs: compress: disallow disabling compress on non-empty compressed file
     - f2fs: fix incorrect return value in f2fs_sanity_check_ckpt()
     - [armhf] clk/ast2600: Fix soc revision for AHB
     - [arm64] clk: qcom: gcc-msm8996: Drop (again) gcc_aggre1_pnoc_ahb_clk
     - [arm64] KVM: arm64: Fix host stage-2 finalization
     - sched/core: Mitigate race cpus_share_cache()/update_top_cache_domain()
     - sched/fair: Prevent dead task groups from regaining cfs_rq's
     - [x86] perf/x86/vlbr: Add c->flags to vlbr event constraints
     - blkcg: Remove extra blkcg_bio_issue_init
     - drm/nouveau: hdmigv100.c: fix corrupted HDMI Vendor InfoFrame
     - bpf: Fix inner map state pruning regression.
     - tcp: Fix uninitialized access in skb frags array for Rx 0cp.
     - tracing: Add length protection to histogram string copies
     - nl80211: fix radio statistics in survey dump
     - mac80211: fix monitor_sdata RCU/locking assertions
     - net: bnx2x: fix variable dereferenced before check
     - bnxt_en: reject indirect blk offload when hw-tc-offload is off
     - tipc: only accept encrypted MSG_CRYPTO msgs
     - sock: fix /proc/net/sockstat underflow in sk_clone_lock()
     - net/smc: Make sure the link_id is unique
     - NFSD: Fix exposure in nfsd4_decode_bitmap()
     - iavf: Fix return of set the new channel count
     - iavf: check for null in iavf_fix_features
     - iavf: free q_vectors before queues in iavf_disable_vf
     - iavf: don't clear a lock we don't hold
     - iavf: Fix failure to exit out from last all-multicast mode
     - iavf: prevent accidental free of filter structure
     - iavf: validate pointers
     - iavf: Fix for the false positive ASQ/ARQ errors while issuing VF reset
     - iavf: Fix for setting queues to 0
     - iavf: Restore VLAN filters after link down
     - bpf: Fix toctou on read-only map's constant scalar tracking
     - [x86] platform/x86: hp_accel: Fix an error handling path in
     - udp: Validate checksum in udp_read_sock()
     - btrfs: make 1-bit bit-fields of scrub_page unsigned int
     - RDMA/core: Set send and receive CQ before forwarding to the driver
     - net/mlx5e: Wait for concurrent flow deletion during neigh/fib events
     - net/mlx5: E-Switch, Fix resetting of encap mode when entering switchdev
     - net/mlx5e: nullify cq->dbg pointer in mlx5_debug_cq_remove()
     - net/mlx5: Update error handler for UCTX and UMEM
     - net/mlx5: E-Switch, rebuild lag only when needed
     - net/mlx5e: CT, Fix multiple allocations and memleak of mod acts
     - net/mlx5: Lag, update tracker when state change event received
     - net/mlx5: E-Switch, return error if encap isn't supported
     - scsi: ufs: core: Improve SCSI abort handling
     - scsi: core: sysfs: Fix hang when device state is set via sysfs
     - scsi: ufs: core: Fix task management completion timeout race
     - scsi: ufs: core: Fix another task management completion race
     - [arm*] net: mvmdio: fix compilation warning
     - net: sched: act_mirred: drop dst for the direction from egress to ingress
     - [arm64] net: dpaa2-eth: fix use-after-free in dpaa2_eth_remove
     - net: virtio_net_hdr_to_skb: count transport header in UFO
     - i40e: Fix correct max_pkt_size on VF RX queue
     - i40e: Fix NULL ptr dereference on VSI filter sync
     - i40e: Fix changing previously set num_queue_pairs for PFs
     - i40e: Fix ping is lost after configuring ADq on VF
     - RDMA/mlx4: Do not fail the registration on port stats
     - i40e: Fix warning message and call stack during rmmod i40e driver
     - i40e: Fix creation of first queue by omitting it if is not power of two
     - i40e: Fix display error code in dmesg
     - e100: fix device suspend/resume (Closes: #995927)
     - [powerpc*] KVM: PPC: Book3S HV: Use GLOBAL_TOC for
     - [powerpc*] pseries: rename numa_dist_table to form2_distances
     - [powerpc*] pseries: Fix numa FORM2 parsing fallback code
     - [x86] perf/x86/intel/uncore: Fix filter_tid mask for CHA events on Skylake
     - [x86] perf/x86/intel/uncore: Fix IIO event constraints for Skylake Server
     - [x86] perf/x86/intel/uncore: Fix IIO event constraints for Snowridge
     - [s390x] kexec: fix return code handling
     - blk-cgroup: fix missing put device in error path from blkg_conf_pref()
     - tun: fix bonding active backup with arp monitoring
     - tipc: check for null after calling kmemdup
     - ipc: WARN if trying to remove ipc object which is absent
     - shm: extend forced shm destroy to support objects from several IPC nses
     - hugetlb, userfaultfd: fix reservation restore on userfaultfd error
     - [x86] boot: Pull up cmdline preparation and early param parsing
     - [x86] hyperv: Fix NULL deref in set_hv_tscchange_cb() if Hyper-V setup
     - [x86] KVM: x86: Assume a 64-bit hypercall for guests with protected state
     - [x86] KVM: x86: Fix uninitialized eoi_exit_bitmap usage in
     - [x86] KVM: x86/mmu: include EFER.LMA in extended mmu role
     - [x86] KVM: x86/xen: Fix get_attr of KVM_XEN_ATTR_TYPE_SHARED_INFO
     - [powerpc*] xive: Change IRQ domain to a tree domain
     - [x86] Revert "drm/i915/tgl/dsi: Gate the ddi clocks after pll mapping"
     - ata: libata: improve ata_read_log_page() error message
     - ata: libata: add missing ata_identify_page_supported() calls
     - scsi: qla2xxx: Fix mailbox direction flags in qla2xxx_get_adapter_id()
     - [s390x] setup: avoid reserving memory above identity mapping
     - [s390x] boot: simplify and fix kernel memory layout setup
     - [s390x] vdso: filter out -mstack-guard and -mstack-size
     - [s390x] dump: fix copying to user-space of swapped kdump oldmem
     - block: Check ADMIN before NICE for IOPRIO_CLASS_RT
     - fbdev: Prevent probing generic drivers if a FB is already registered
     - [x86] KVM: SEV: Disallow COPY_ENC_CONTEXT_FROM if target has created vCPUs
     - [x86] KVM: nVMX: don't use vcpu->arch.efer when checking host state on
       nested state load
     - drm/cma-helper: Release non-coherent memory with dma_free_noncoherent()
     - printk: restore flushing of NMI buffers on remote CPUs after NMI
     - udf: Fix crash after seekdir
     - spi: fix use-after-free of the add_lock mutex
     - [armhf] net: stmmac: socfpga: add runtime suspend/resume callback for
       stratix10 platform
     - [x86] Drivers: hv: balloon: Use VMBUS_RING_SIZE() wrapper for dm_ring_size
     - btrfs: fix memory ordering between normal and ordered work functions
     - fs: handle circular mappings correctly
     - net: stmmac: Fix signed/unsigned wreckage
     - cfg80211: call cfg80211_stop_ap when switch from P2P_GO type
     - mac80211: drop check for DONT_REORDER in __ieee80211_select_queue
     - drm/amd/display: Update swizzle mode enums
     - drm/amd/display: Limit max DSC target bpp for specific monitors
     - [x86] drm/i915/guc: Fix outstanding G2H accounting
     - [x86] drm/i915/guc: Don't enable scheduling on a banned context, guc_id
       invalid, not registered
     - [x86] drm/i915/guc: Workaround reset G2H is received after schedule done
     - [x86] drm/i915/guc: Don't drop ce->guc_active.lock when unwinding context
     - [x86] drm/i915/guc: Unwind context requests in reverse order
     - drm/udl: fix control-message timeout
     - drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
     - drm/nouveau: Add a dedicated mutex for the clients list (CVE-2020-27820)
     - drm/nouveau: use drm_dev_unplug() during device removal (CVE-2020-27820)
     - drm/nouveau: clean up all clients on device removal (CVE-2020-27820)
     - [x86] drm/i915/dp: Ensure sink rate values are always valid
     - [x86] drm/i915/dp: Ensure max link params are always valid
     - [x86] drm/i915: Fix type1 DVI DP dual mode adapter heuristic for modern
     - drm/amdgpu: fix set scaling mode Full/Full aspect/Center not works on vga
       and dvi connectors
     - drm/amd/pm: avoid duplicate powergate/ungate setting
     - signal: Implement force_fatal_sig
     - exit/syscall_user_dispatch: Send ordinary signals on failure
     - [powerpc*] signal/powerpc: On swapcontext failure force SIGSEGV
     - [s390x] signal/s390: Use force_sigsegv in default_trap_handler
     - [x86] signal/x86: In emulate_vsyscall force a signal instead of calling
     - signal: Replace force_sigsegv(SIGSEGV) with force_fatal_sig(SIGSEGV)
     - signal: Don't always set SA_IMMUTABLE for forced signals
     - signal: Replace force_fatal_sig with force_exit_sig when in doubt
     - hugetlbfs: flush TLBs correctly after huge_pmd_unshare (CVE-2021-4002)
     - RDMA/netlink: Add __maybe_unused to static inline in C file
     - bpf: Forbid bpf_ktime_get_coarse_ns and bpf_timer_* in tracing progs
     - selinux: fix NULL-pointer dereference when hashtab allocation fails
     - ASoC: DAPM: Cover regression by kctl change notification fix
     - ice: Fix VF true promiscuous mode
     - ice: Delete always true check of PF pointer
     - fs: export an inode_update_time helper
     - btrfs: update device path inode time instead of bd_inode
     - net: add and use skb_unclone_keeptruesize() helper
     - [x86] ALSA: hda: hdac_ext_stream: fix potential locking issues
     - ALSA: hda: hdac_stream: fix potential locking issue in
   [ Salvatore Bonaccorso ]
   * [rt] Update to 5.15.3-rt21
   * Drop "arm64: dts: rockchip: disable USB type-c DisplayPort"
   * [rt] Refresh "printk: move console printing to kthreads"
   * [rt] Refresh "printk: remove deferred printing"
   * Bump ABI to 2
   * fuse: release pipe buf after last use (Closes: #1000504)
 linux (5.15.3-1) unstable; urgency=medium
   * New upstream stable update:
     - Bluetooth: sco: Fix lock_sock() blockage by memcpy_from_msg()
   [ Vincent Blut ]
   * [arm64] sound/soc/meson: Enable SND_MESON_AXG_SOUND_CARD as module
     (Closes: #999638)
   * [arm64,armhf] sound/soc/meson: Enable SND_MESON_GX_SOUND_CARD as module
   * drivers/bluetooth: Enable BT_HCIBTUSB_MTK (Closes: #999748)
   [ Salvatore Bonaccorso ]
   * mac80211: fix radiotap header generation
   * [rt] Update to 5.15.2-rt20
   * [rt] Refresh "printk: introduce kernel sync mode"
   * [rt] Refresh "printk: move console printing to kthreads"
   * [rt] Drop "rcutorture: Avoid problematic critical section nesting on
   * [rt] Drop "lockdep: Let lock_is_held_type() detect recursive read as read"
   * [rt] Refresh "x86/softirq: Disable softirq stacks on PREEMPT_RT"
   * [rt] Refresh "POWERPC: Allow to enable RT"
   * Set ABI to 1
 linux (5.15.2-1~exp1) experimental; urgency=medium
   * New upstream stable update:
   [ Salvatore Bonaccorso ]
   * [rt] Update to 5.15-rt17 and reenable (Closes: #995466)
   * perf srcline: Use long-running addr2line per DSO (Closes: #911815)
   * Refresh "Export symbols needed by Android drivers"
   * [rt] Update to 5.15.2-rt19
   * Input: elantench - fix misreporting trackpoint coordinates (Closes: #989285)
   * kernel/time: Enable NO_HZ_FULL (Closes: #804857)
   * io-wq: serialize hash clear with wakeup (Closes: #996951)
   [ Vincent Blut ]
   * [x86] drivers/ptp: Enable PTP_1588_CLOCK_VMW as module
   * drivers/ptp: Enable PTP_1588_CLOCK_DTE, PTP_1588_CLOCK_IDT82P33,
     PTP_1588_CLOCK_IDTCM, PTP_1588_CLOCK_OCP as modules
   * drivers/ptp, net: Enable DP83640_PHY, PTP_1588_CLOCK_INES,
 linux (5.15.1-1~exp1) experimental; urgency=medium
   * New upstream stable update:
   [ Salvatore Bonaccorso ]
   * [arm*] drop cc-option fallbacks for architecture selection
   * net/tls: Enable TLS as module (Closes: #919807)
   [ Diederik de Haas ]
   * [x86] drivers/hwmon: Enable SENSORS_CORSAIR_PSU as module
   * [arm64] drivers/hwmon: Enable SENSORS_GPIO_FAN as module
 linux (5.15-1~exp1) experimental; urgency=medium
   * New upstream release candidate
   [ Diederik de Haas ]
   * [arm*] drivers/led/trigger: Make LEDS_TRIGGER_HEARTBEAT builtin
     (Closes: #992184)
   * [arm64] sound/soc/codecs: Enable SND_SOC_SPDIF as module
   * [armel/rpi] Enable RPi's clock framework and CPU Freq scaling
   * [armel/rpi] Change default governor to 'ondemand' for RPi 0/0w/1
     (Closes: #991921)
   * [arm64] sound/soc/rockchip: Enable SND_SOC_ROCKCHIP_PDM as module
   * [armel] Make explicit that -rpi kernel variant is for RPi 0/0w/1, not the
   [ Nathan Schulte ]
   * [arm64] drivers/staging/media/hantro: Enable VIDEO_HANTRO as module
   * [arm64] drivers/staging/media/rkvdec: Enable VIDEO_ROCKCHIP_VDEC as module
     (Closes: #993902)
   [ Vincent Blut ]
   * [arm] arch/arm/crypto: Enable CRYPTO_BLAKE2S_ARM, CRYPTO_SHA256_ARM and
     CRYPTO_SHA512_ARM as modules
   * [armhf] arch/arm/crypto: Enable most NEON based implementation of
     cryptographic algorithms as modules
   * [arm] Move CRYPTO_NHPOLY1305_NEON in armhf config file
   * [arm64] drivers/gpu/drm/vmwgfx: Enable DRM_VMWGFX as module
     (Closes: #995276)
   * [armhf] sound/soc/sunxi: Enable SND_SUN4I_I2S as module (Closes: #971892)
   * [armhf] drivers/gpu/drm/bridge/synopsys: Enable DRM_DW_HDMI_I2S_AUDIO as
   * drivers/usb/serial: Enable USB_SERIAL_XR as module (Closes: #996962)
   * drivers/bus/mhi: Enable MHI_BUS, MHI_BUS_PCI_GENERIC as modules
     (Closes: #995407)
   * drivers/net: Enable MHI_NET as module
   * drivers/net/wwan: Enable WWAN, MHI_WWAN_CTRL as modules
   [ YunQiang Su ]
   * [mipsel,mips64el/loongson-3] linux-image: Recommend pmon-update
   [ Salvatore Bonaccorso ]
   * Compile with gcc-11 on all architectures
   * [arm64] drivers/net: Enable VMXNET3 as module
   [ Uwe Kleine-König ]
   * [arm64] Enable various symbols for the librem5 devkit and iMX8MN Variscite
     Symphony (Patches by Guido Günther and Ariel D'Alessandro)
   * [armhf,arm64] Cherrypick fix for snvs_pwrkey to prevent a machine hang.
   [ Heiko Thiery ]
   * [arm64] drivers/mtd/spi-nor: enable MTD_SPI_NOR as module
   * [arm64] drivers/net/can/spi: enable CAN_MCP251X as module
   * [arm64] drivers/net/phy: enable MICROSEMI_PHY as module
   * [arm64] drivers/net/usb: enable USB_NET_SMSC95XX as module
   [ Ryutaroh Matsumoto ]
   * [arm64] Enable TOUCHSCREEN_RASPBERRYPI_FW and
   [ Ariel D'Alessandro ]
   * [arm64] drivers/regulator: Enable REGULATOR_BD718XX as module
   [ Lubomir Rintel ]
   * [armhf] Add support for Marvell MMP3
     MFD_ENE_KB3930 and LEDS_ARIEL as modules.
   [ Sean McAvoy ]
   * [armel] marvell: Enable CONFIG_SENSORS_LM63 as a module.
   [ Dan Stefura ]
   * [arm64] enable i6300esb watchdog kernel module
   [ Thore Sommer ]
   * drivers/md: Enable DM_VERITY_FEC
   [ Aurelien Jarno ]
   * [riscv64] Enable NUMA (Closes: #993453)
 linux (5.14.16-1) unstable; urgency=medium
   * New upstream stable update:
     - ext4: check and update i_disksize properly
     - ext4: correct the error path of ext4_write_inline_data_end()
     - [x86] ASoC: Intel: sof_sdw: tag SoundWire BEs as non-atomic
     - ALSA: oxfw: fix transmission method for Loud models based on OXFW971
     - ALSA: usb-audio: Unify mixer resume and reset_resume procedure
     - HID: apple: Fix logical maximum and usage maximum of Magic Keyboard JIS
     - netfilter: ip6_tables: zero-initialize fragment offset
     - HID: wacom: Add new Intuos BT (CTL-4100WL/CTL-6100WL) device IDs
     - [x86] ASoC: SOF: loader: release_firmware() on load failure to avoid
     - netfilter: nf_nat_masquerade: make async masq_inet6_event handling generic
     - netfilter: nf_nat_masquerade: defer conntrack walk to work queue
     - mac80211: Drop frames from invalid MAC address in ad-hoc mode
     - [m68k] Handle arrivals of multiple signals correctly
     - net: prevent user from passing illegal stab size
     - mac80211: check return value of rhashtable_init
     - [x86] vboxfs: fix broken legacy mount signature checking
     - drm/amdgpu: fix gart.bo pin_count leak
     - scsi: ses: Fix unsigned comparison with less than zero
     - scsi: virtio_scsi: Fix spelling mistake "Unsupport" -> "Unsupported"
     - scsi: qla2xxx: Fix excessive messages during device logout
     - perf/core: fix userpage->time_enabled of inactive events
     - sched: Always inline is_percpu_thread()
     - io_uring: kill fasync
     - [armhf] hwmon: (pmbus/ibm-cffps) max_power_out swap changes
     - ALSA: usb-audio: Add quirk for VF0770
     - ALSA: pcm: Workaround for a wrong offset in SYNC_PTR compat ioctl
     - ALSA: usb-audio: Fix a missing error check in scarlett gen2 mixer
     - ALSA: seq: Fix a potential UAF by wrong private_free call order
     - ALSA: hda/realtek: Enable 4-speaker output for Dell Precision 5560 laptop
     - ALSA: hda - Enable headphone mic on Dell Latitude laptops with ALC3254
     - ALSA: hda/realtek: Complete partial device name to avoid ambiguity
     - ALSA: hda/realtek: Add quirk for Clevo X170KM-G
     - ALSA: hda/realtek - ALC236 headset MIC recording issue
     - ALSA: hda/realtek: Add quirk for TongFang PHxTxX1
     - ALSA: hda/realtek: Fix for quirk to enable speaker output on the Lenovo
       13s Gen2
     - ALSA: hda/realtek: Fix the mic type detection issue for ASUS G551JW
     - [amd64] platform/x86: amd-pmc: Add alternative acpi id for PMC controller
     - dm: fix mempool NULL pointer race when completing IO
     - [x86] ACPI: PM: Include alternate AMDI0005 id in special behaviour
     - dm rq: don't queue request to blk-mq during DM suspend
     - [s390x] fix strrchr() implementation
     - drm/fbdev: Clamp fbdev surface size if too large
     - [arm64] hugetlb: fix CMA gigantic page order for non-4K PAGE_SIZE
     - drm/nouveau/fifo: Reinstate the correct engine bit programming
     - [arm64] drm/msm: Do not run snapshot on non-DPU devices
     - [arm64] drm/msm: Avoid potential overflow in timeout_to_jiffies()
     - btrfs: unlock newly allocated extent buffer after error
     - btrfs: deal with errors when replaying dir entry during log replay
     - btrfs: deal with errors when adding inode reference during log replay
     - btrfs: check for error when looking up inode during dir entry replay
     - btrfs: update refs for any root except tree log roots
     - btrfs: fix abort logic in btrfs_replace_file_extents
     - [x86] resctrl: Free the ctrlval arrays when domain_setup_mon_state() fails
     - [x86] mei: me: add Ice Lake-N device id.
     - [x86] mei: hbm: drop hbm responses on early shutdown
     - xhci: guard accesses to ep_state in xhci_endpoint_reset()
     - xhci: add quirk for host controllers that don't update endpoint DCS
     - xhci: Fix command ring pointer corruption while aborting a command
     - xhci: Enable trust tx length quirk for Fresco FL11 USB controller
     - cb710: avoid NULL pointer subtraction
     - [arm64,x86] efi/cper: use stack buffer for error record decoding
     - efi: Change down_interruptible() in virt_efi_reset_system() to
     - [armhf] usb: musb: dsps: Fix the probe error path
     - Input: xpad - add support for another USB ID of Nacon GC-100
     - USB: serial: qcserial: add EM9191 QDL support
     - USB: serial: option: add Quectel EC200S-CN module support
     - USB: serial: option: add Telit LE910Cx composition 0x1204
     - USB: serial: option: add prod. id for Quectel EG91
     - virtio: write back F_VERSION_1 before validate
     - nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells
     - virtio-blk: remove unneeded "likely" statements
     - Revert "virtio-blk: Add validation for block size in config space"
     - [x86] fpu: Mask out the invalid MXCSR bits properly
     - [x86] Kconfig: Do not enable AMD_MEM_ENCRYPT_ACTIVE_BY_DEFAULT
     - [powerpc*] xive: Discard disabled interrupts in get_irqchip_state()
     - [armhf] drivers: bus: simple-pm-bus: Add support for probing simple bus
       only devices
     - driver core: Reject pointless SYNC_STATE_ONLY device links
     - iio: adc: ad7192: Add IRQ flag
     - iio: adc: ad7780: Fix IRQ flag
     - iio: adc: ad7793: Fix IRQ flag
     - iio: adis16480: fix devices that do not support sleep mode
     - iio: adc128s052: Fix the error handling path of 'adc128_probe()'
     - iio: adc: max1027: Fix wrong shift with 12-bit devices
     - iio: adis16475: fix deadlock on frequency set
     - iio: light: opt3001: Fixed timeout error when 0 lux
     - iio: adc: max1027: Fix the number of max1X31 channels
     - eeprom: at25: Add SPI ID table
     - iio: dac: ti-dac5571: fix an error code in probe()
     - [arm64] tee: optee: Fix missing devices unregister during optee_remove
     - [armel,armhf] dts: bcm2711-rpi-4-b: Fix usb's unit address
     - [armel,armhf] dts: bcm2711-rpi-4-b: fix sd_io_1v8_reg regulator states
     - [armel,armhf] dts: bcm2711-rpi-4-b: Fix pcie0's unit address formatting
     - nvme-pci: Fix abort command id
     - sctp: account stream padding length for reconf chunk
     - [arm64,armhf] gpio: pca953x: Improve bias setting
     - net/smc: improved fix wait on already cleared link
     - net/mlx5e: Fix memory leak in mlx5_core_destroy_cq() error path
     - net/mlx5e: Mutually exclude RX-FCS and RX-port-timestamp
     - net/mlx5e: Switchdev representors are not vlan challenged
     - net: stmmac: fix get_hw_feature() on old hardware
     - net: phy: Do not shutdown PHYs in READY state
     - [arm64,armhf] net: dsa: mv88e6xxx: don't use PHY_DETECT on internal PHY's
     - [arm64,armhf] net: dsa: fix spurious error message when unoffloaded port
       leaves bridge
     - ethernet: s2io: fix setting mac address during resume
     - nfc: fix error handling of nfc_proto_register()
     - NFC: digital: fix possible memory leak in digital_tg_listen_mdaa()
     - NFC: digital: fix possible memory leak in digital_in_send_sdd_req()
     - pata_legacy: fix a couple uninitialized variable bugs
     - ata: ahci_platform: fix null-ptr-deref in
     - spi: spidev: Add SPI ID table
     - drm/edid: In connector_bad_edid() cap num_of_ext by num_blocks read
     - [arm64] drm/msm: Fix null pointer dereference on pointer edp
     - [arm64] drm/msm/mdp5: fix cursor-related warnings
     - [arm64] drm/msm/submit: fix overflow check on 64-bit architectures
     - [arm64] drm/msm/a6xx: Track current ctx by seqno
     - [arm64] drm/msm/a4xx: fix error handling in a4xx_gpu_init()
     - [arm64] drm/msm/a3xx: fix error handling in a3xx_gpu_init()
     - [arm64] drm/msm/dsi: dsi_phy_14nm: Take ready-bit into account in
     - [arm64] drm/msm/dsi: Fix an error code in msm_dsi_modeset_init()
     - [arm64] drm/msm/dsi: fix off by one in dsi_bus_clk_enable error handling
     - [arm64] acpi/arm64: fix next_platform_timer() section mismatch error
     - [x86] platform/x86: intel_scu_ipc: Fix busy loop expiry time
     - mqprio: Correct stats in mqprio_dump_class_stats().
     - mptcp: fix possible stall on recvmsg()
     - qed: Fix missing error code in qed_slowpath_start()
     - ice: fix locking for Tx timestamp tracking flush
     - nfp: flow_offload: move flow_indr_dev_register from app init to app start
     - [arm64] net: mscc: ocelot: make use of all 63 PTP timestamp identifiers
     - [arm64] net: mscc: ocelot: avoid overflowing the PTP timestamp FIFO
     - [arm64] net: mscc: ocelot: warn when a PTP IRQ is raised for an unknown
     - [arm64] net: mscc: ocelot: deny TX timestamping of non-PTP packets
     - [arm64] net: mscc: ocelot: cross-check the sequence id from the timestamp
       FIFO with the skb PTP header
     - [arm64] net: dsa: felix: break at first CPU port during init and teardown
     - [armhf] dts: vexpress-v2p-ca9: Fix the SMB unit-address
     - block: decode QUEUE_FLAG_HCTX_ACTIVE in debugfs output
     - [x86] xen/x86: prevent PVH type from getting clobbered
     - r8152: avoid to resubmit rx immediately
     - drm/amdgpu: init iommu after amdkfd device init
     - NFSD: Keep existing listeners on portlist error
     - [powerpc*] powerpc/lib: Add helper to check if offset is within
       conditional branch range
     - [powerpc*] powerpc/bpf: Validate branch ranges
     - [powerpc*] powerpc/security: Add a helper to query stf_barrier type
     - [powerpc*] powerpc/bpf: Emit stf barrier instruction sequences for
     - [arm64] KVM: arm64: Fix host stage-2 PGD refcount
     - [arm64] KVM: arm64: Release mmap_lock when using VM_SHARED with MTE
     - netfilter: xt_IDLETIMER: fix panic that occurs when timer_type has garbage
     - netfilter: nf_tables: skip netdev events generated on netns removal
     - ice: Fix failure to re-add LAN/RDMA Tx queues
     - ice: Avoid crash from unnecessary IDA free
     - ice: fix getting UDP tunnel entry
     - ice: Print the api_patch as part of the fw.mgmt.api
     - netfilter: ip6t_rt: fix rt0_hdr parsing in rt_mt6
     - netfilter: ipvs: make global sysctl readonly in non-init netns
     - sctp: fix transport encap_port update in sctp_vtag_verify
     - tcp: md5: Fix overlap between vrf and non-vrf keys
     - ipv6: When forwarding count rx stats on the orig netdev
     - hamradio: baycom_epp: fix build for UML
     - net/sched: act_ct: Fix byte count on fragmented packets
     - [arm64,armhf] net: dsa: Fix an error handling path in
     - [powerpc*] smp: do not decrement idle task preempt count in CPU offline
     - [arm64] net: hns3: Add configuration of TM QCN error event
     - [arm64] net: hns3: reset DWRR of unused tc to zero
     - [arm64] net: hns3: add limit ets dwrr bandwidth cannot be 0
     - [arm64] net: hns3: schedule the polling again when allocation fails
     - [arm64] net: hns3: fix vf reset workqueue cannot exit
     - [arm64] net: hns3: disable sriov before unload hclge layer
     - net: stmmac: Fix E2E delay mechanism
     - ptp: Fix possible memory leak in ptp_clock_register()
     - e1000e: Fix packet loss on Tiger Lake and later
     - igc: Update I226_K device ID
     - ice: Add missing E810 device ids
     - net/mlx5e: IPsec: Fix a misuse of the software parser's fields
     - net/mlx5e: IPsec: Fix work queue entry ethernet segment checksum flags
     - [arm64] net: enetc: fix ethtool counter name for PM0_TERR
     - [arm64] net: enetc: make sure all traffic classes can send large frames
     - can: peak_usb: pcan_usb_fd_decode_status(): fix back to ERROR_ACTIVE state
     - can: peak_pci: peak_pci_remove(): fix UAF
     - can: isotp: isotp_sendmsg(): fix return error on FC timeout on TX path
     - can: isotp: isotp_sendmsg(): add result check for
     - can: isotp: isotp_sendmsg(): fix TX buffer concurrent access in
     - can: j1939: j1939_tp_rxtimer(): fix errant alert in j1939_tp_rxtimer
     - can: j1939: j1939_netdev_start(): fix UAF for rx_kref of j1939_priv
     - can: j1939: j1939_xtp_rx_dat_one(): cancel session if receive TP.DT with
       error length
     - can: j1939: j1939_xtp_rx_rts_session_new(): abort TP less than 9 bytes
     - ceph: skip existing superblocks that are blocklisted or shut down when
     - ceph: fix handling of "meta" errors
     - tracing: Have all levels of checks prevent recursion
     - ocfs2: fix data corruption after conversion from inline format
     - ocfs2: mount fails with buffer overflow in strlen
     - userfaultfd: fix a race between writeprotect and exit_mmap()
     - mm/mempolicy: do not allow illegal MPOL_F_NUMA_BALANCING | MPOL_LOCAL in
     - vfs: check fd has read access in kernel_read_file_from_fd()
     - ALSA: usb-audio: Provide quirk for Sennheiser GSP670 Headset
     - ALSA: hda/realtek: Add quirk for Clevo PC50HS
     - ASoC: DAPM: Fix missing kctl change notifications
     - [x86] ASoC: nau8824: Fix headphone vs headset, button-press detection no
       longer working
     - blk-cgroup: blk_cgroup_bio_start() should use irq-safe operations on
     - audit: fix possible null-pointer dereference in audit_filter_rules
     - ucounts: Move get_ucounts from cred_alloc_blank to
     - ucounts: Pair inc_rlimit_ucounts with dec_rlimit_ucoutns in commit_creds
     - ucounts: Proper error handling in set_cred_ucounts
     - ucounts: Fix signal ucount refcounting
     - [powerpc*] KVM: PPC: Book3S HV: Fix stack handling in
     - [powerpc*] KVM: PPC: Book3S HV: Make idle_kvm_start_guest() return 0 if it
       went to guest (CVE-2021-43056)
     - [powerpc*] idle: Don't corrupt back chain when going idle
     - mm, slub: fix mismatch between reconstructed freelist depth and cnt
     - mm, slub: fix potential memoryleak in kmem_cache_open()
     - mm, slub: fix potential use-after-free in slab_debugfs_fops
     - mm, slub: fix incorrect memcg slab count for bulk free
     - [x86] KVM: nVMX: promptly process interrupts delivered while in guest mode
     - [x86] KVM: SEV: Flush cache on non-coherent systems before
     - [x86] KVM: SEV-ES: rename guest_ins_data to sev_pio_data
     - [x86] KVM: SEV-ES: clean up kvm_sev_es_ins/outs
     - [x86] KVM: SEV-ES: keep INS functions together
     - [x86] KVM: SEV-ES: fix length of string I/O
     - [x86] KVM: SEV-ES: go over the sev_pio_data buffer in multiple passes if
     - [x86] KVM: SEV-ES: reduce ghcb_sa_len to 32 bits
     - [x86] KVM: x86: leave vcpu->arch.pio.count alone in emulator_pio_in_out
     - [x86] KVM: x86: check for interrupts before deciding whether to exit the
       fast path
     - [x86] KVM: x86: split the two parts of emulator_pio_in
     - [x86] KVM: x86: remove unnecessary arguments from complete_emulator_pio_in
     - nfc: nci: fix the UAF of rf_conn_info object (CVE-2021-3760)
     - isdn: cpai: check ctr->cnr to avoid array index out of bound
     - [sh4] net: bridge: mcast: use multicast_membership_interval for IGMPv3
     - [x86] KVM: SEV-ES: Set guest_state_protected after VMSA update
     - [arm64] net: hns3: fix the max tx size according to user manual
     - [x86] KVM: MMU: Reset mmu->pkru_mask to avoid stale data
     - [arm64] drm/msm/a6xx: Serialize GMU communication
     - ALSA: hda: intel: Allow repeatedly probing on codec configuration errors
     - btrfs: deal with errors when checking if a dir entry exists during log
     - net: stmmac: add support for dwmac 3.40a
     - [x86] platform/x86: intel_scu_ipc: Increase virtual timeout to 10s
     - [x86] platform/x86: intel_scu_ipc: Update timeout value in comment
     - ALSA: hda: avoid write to STATESTS if controller is in reset
     - spi: Fix deadlock when adding SPI controllers on SPI buses
     - spi-mux: Fix false-positive lockdep splats
     - [x86] perf/x86/msr: Add Sapphire Rapids CPU support
     - scsi: iscsi: Fix set_param() handling
     - [x86] scsi: storvsc: Fix validation for unsolicited incoming packets
     - scsi: qla2xxx: Fix a memory leak in an error path of qla2x00_process_els()
     - mm/thp: decrease nr_thps in file's mapping on THP split
     - sched/scs: Reset the shadow stack when idle_task_exit
     - [arm64] net: hns3: fix for miscalculation of rx unused desc
     - net/mlx5: Lag, move lag destruction to a workqueue
     - net/mlx5: Lag, change multipath and bonding to be mutually exclusive
     - autofs: fix wait name hash calculation in autofs_wait()
     - scsi: core: Fix shost->cmd_per_lun calculation in scsi_add_host_with_dma()
     - [s390x] pci: cleanup resources only if necessary
     - [s390x] pci: fix zpci_zdev_put() on reserve
     - net: mdiobus: Fix memory leak in __mdiobus_register
     - e1000e: Separate TGP board type from SPT
     - [armhf] pinctrl: stm32: use valid pin identifier in stm32_pinctrl_resume()
     - [armel,armhf] 9134/1: remove duplicate memcpy() definition
     - [armel,armhf] 9139/1: kprobes: fix arch_init_kprobes() prototype
     - [armel,armhf] 9148/1: handle CONFIG_CPU_ENDIAN_BE32 in
     - usbnet: sanity check for maxpacket
     - usbnet: fix error return code in usbnet_probe()
     - pinctrl: amd: disable and mask interrupts on probe
     - ata: sata_mv: Fix the error handling of mv_chip_id()
     - tipc: fix size validations for the MSG_CRYPTO type (CVE-2021-43267)
     - nfc: port100: fix using -ERRNO as command type mask
     - Revert "net: mdiobus: Fix memory leak in __mdiobus_register"
     - mmc: vub300: fix control-message timeouts
     - mmc: cqhci: clear HALT state after CQE enable
     - [armhf] mmc: dw_mmc: exynos: fix the finding clock sample value
     - mmc: sdhci: Map more voltage level to SDHCI_POWER_330
     - mmc: sdhci-pci: Read card detect from ACPI for Intel Merrifield
     - [arm64,armhf] mmc: sdhci-esdhc-imx: clear the buffer_read_ready to reset
       standard tuning circuit
     - block: Fix partition check for host-aware zoned block devices
     - ocfs2: fix race between searching chunks and release journal_head from
     - nvme-tcp: fix H2CData PDU send accounting (again)
     - cfg80211: scan: fix RCU in cfg80211_add_nontrans_list()
     - cfg80211: fix management registrations locking
     - net: lan78xx: fix division by zero in send path
     - mm: hwpoison: remove the unnecessary THP check
     - mm: filemap: check if THP has hwpoisoned subpage for PMD page fault
     - mm, thp: bail out early in collapse_file for writeback page
     - mm: khugepaged: skip huge page collapse for special files
     - [arm64] dts: imx8mm-kontron: Fix polarity of reg_rst_eth2
     - [arm64] dts: imx8mm-kontron: Fix CAN SPI clock frequency
     - [arm64] dts: imx8mm-kontron: Fix connection type for VSC8531 RGMII PHY
     - [arm64] dts: imx8mm-kontron: Set lower limit of VDD_SNVS to 800 mV
     - [arm64] dts: imx8mm-kontron: Make sure SOC and DRAM supply voltages are
     - mac80211: mesh: fix HE operation element length check
     - drm/ttm: fix memleak in ttm_transfered_destroy
     - [x86] drm/i915: Convert unconditional clflush to drm_clflush_virt_range()
     - [x86] drm/i915: Catch yet another unconditioal clflush
     - [x86] drm/i915/dp: Skip the HW readout of DPCD on disabled encoders
     - drm/amdgpu: Fix even more out of bound writes from debugfs
     - drm/amdgpu: fix out of bounds write (CVE-2021-42327)
     - drm/amdgpu: support B0&B1 external revision id for yellow carp
     - drm/amd/display: Limit display scaling to up to true 4k for DCN 3.1
     - drm/amd/display: Fix prefetch bandwidth calculation for DCN3.1
     - drm/amd/display: increase Z9 latency to workaround underflow in Z9
     - drm/amd/display: Increase watermark latencies for DCN3.1
     - drm/amd/display: Moved dccg init to after bios golden init
     - drm/amd/display: Fallback to clocks which meet requested voltage on DCN31
     - drm/amd/display: Fix deadlock when falling back to v2 from v3
     - Revert "watchdog: iTCO_wdt: Account for rebooting on second timeout"
     - cgroup: Fix memory leak caused by missing cgroup_bpf_offline
     - [riscv64] riscv, bpf: Fix potential NULL dereference
     - tcp_bpf: Fix one concurrency problem in the tcp_bpf_send_verdict function
     - bpf: Fix potential race in tail call compatibility check
     - bpf: Fix error usage of map_fd and fdget() in generic_map_update_batch()
     - [amd64] IB/qib: Protect from buffer overflow in struct qib_user_sdma_pkt
     - [amd64] IB/hfi1: Fix abba locking issue with sc_disable()
     - nvmet-tcp: fix data digest pointer calculation
     - nvme-tcp: fix data digest pointer calculation
     - nvme-tcp: fix possible req->offset corruption
     - ice: Respond to a NETDEV_UNREGISTER event for LAG
     - RDMA/mlx5: Set user priority for DCT
     - ice: check whether PTP is initialized in ice_ptp_release()
     - [arm64] dts: allwinner: h5: NanoPI Neo 2: Fix ethernet node
     - regmap: Fix possible double-free in regcache_rbtree_exit()
     - net: batman-adv: fix error handling
     - net-sysfs: initialize uid and gid before calling net_ns_get_ownership
     - cfg80211: correct bridge/4addr mode check
     - net: Prevent infinite while loop in skb_tx_hash()
     - RDMA/mlx5: Initialize the ODP xarray when creating an ODP MR
     - RDMA/sa_query: Use strscpy_pad instead of memcpy to copy a string
     - net: ethernet: microchip: lan743x: Fix driver crash when lan743x_pm_resume
     - net: ethernet: microchip: lan743x: Fix dma allocation failure by using
     - [arm64] net: hns3: fix pause config problem after autoneg disabled
     - [arm64] net: hns3: fix data endian problem of some functions of debugfs
     - net: ethernet: microchip: lan743x: Fix skb allocation failure
     - phy: phy_ethtool_ksettings_get: Lock the phy for consistency
     - phy: phy_ethtool_ksettings_set: Move after phy_start_aneg
     - phy: phy_start_aneg: Add an unlocked version
     - phy: phy_ethtool_ksettings_set: Lock the PHY while changing settings
     - sctp: use init_tag from inithdr for ABORT chunk (CVE-2021-3772)
     - sctp: fix the processing for INIT chunk (CVE-2021-3772)
     - sctp: fix the processing for INIT_ACK chunk (CVE-2021-3772)
     - sctp: fix the processing for COOKIE_ECHO chunk (CVE-2021-3772)
     - sctp: add vtag check in sctp_sf_violation (CVE-2021-3772)
     - sctp: add vtag check in sctp_sf_do_8_5_1_E_sa (CVE-2021-3772)
     - sctp: add vtag check in sctp_sf_ootb (CVE-2021-3772)
     - bpf: Use kvmalloc for map values in syscall
     - [arm64] watchdog: sbsa: only use 32-bit accessors
     - bpf: Move BPF_MAP_TYPE for INODE_STORAGE and TASK_STORAGE outside of
     - [arm64] net: hns3: add more string spaces for dumping packets number of
       queue info in debugfs
     - [arm64] net: hns3: expand buffer len for some debugfs command
     - virtio-ring: fix DMA metadata flags
     - [s390x] KVM: s390: clear kicked_mask before sleeping again
     - [s390x] KVM: s390: preserve deliverable_mask in __airqs_kick_single_vcpu
     - [powerpc*] scsi: ibmvfc: Fix up duplicate response detection
     - [riscv64] fix misalgned trap vector base address
     - [x86] KVM: switch pvclock_gtod_sync_lock to a raw spinlock
     - [x86] KVM: SEV-ES: fix another issue with string I/O VMGEXITs
     - [x86] KVM: Take srcu lock in post_kvm_run_save()
   [ Salvatore Bonaccorso ]
   * Revert "[amd64] Unset AMD_MEM_ENCRYPT_ACTIVE_BY_DEFAULT"
   * Bump ABI to 4
   * media: ir-kbd-i2c: improve responsiveness of hauppauge zilog receivers
     (Closes: #994050)
   * [x86] media: ite-cir: IR receiver stop working after receive overflow
     (Closes: #996672)
   * scsi: core: Put LLD module refcnt after SCSI device is released
   * sfc: Fix reading non-legacy supported link modes
   * vrf: Revert "Reset skb conntrack connection..."
   * media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt()
 linux (5.14.12-1) unstable; urgency=medium
   * New upstream stable update:
     - [arm64,armhf] media: cedrus: Fix SUNXI tile size calculation
     - [arm64] ASoC: fsl_sai: register platform component before registering cpu
     - [armhf] ASoC: fsl_spdif: register platform component before registering
       cpu dai
     - [x86] ASoC: SOF: Fix DSP oops stack dump output contents
     - [arm64] pinctrl: qcom: spmi-gpio: correct parent irqspec translation
     - net/mlx4_en: Resolve bad operstate value
     - [s390x] qeth: Fix deadlock in remove_discipline
     - [s390x] qeth: fix deadlock during failing recovery
     - [x86] crypto: ccp - fix resource leaks in ccp_run_aes_gcm_cmd()
       (CVE-2021-3744, CVE-2021-3764)
     - [m68k] Update ->thread.esp0 before calling syscall_trace() in
     - [amd64] HID: amd_sfh: Fix potential NULL pointer dereference
     - tty: Fix out-of-bound vmalloc access in imageblit
     - cpufreq: schedutil: Use kobject release() method to free sugov_tunables
     - scsi: qla2xxx: Changes to support kdump kernel for NVMe BFS
     - drm/amdgpu: adjust fence driver enable sequence
     - drm/amdgpu: avoid over-handle of fence driver fini in s3 test (v2)
     - drm/amdgpu: stop scheduler when calling hw_fini (v2)
     - cpufreq: schedutil: Destroy mutex before kobject_put() frees the memory
     - scsi: ufs: ufs-pci: Fix Intel LKF link stability
     - ALSA: firewire-motu: fix truncated bytes in message tracepoints
     - ALSA: hda/realtek: Quirks to enable speaker output for Lenovo Legion 7i
       15IMHG05, Yoga 7i 14ITL5/15ITL5, and 13s Gen2 laptops.
     - [amd64,arm64] ACPI: NFIT: Use fallback node id when numa info in NFIT
       table is incorrect
     - fs-verity: fix signed integer overflow with i_size near S64_MAX
     - hwmon: (tmp421) handle I2C errors
     - hwmon: (w83793) Fix NULL pointer dereference by removing unnecessary
       structure field
     - hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary
       structure field
     - hwmon: (w83791d) Fix NULL pointer dereference by removing unnecessary
       structure field
     - [arm64,armhf] gpio: pca953x: do not ignore i2c errors
     - scsi: ufs: Fix illegal offset in UPIU event trace
     - mac80211: fix use-after-free in CCMP/GCMP RX
     - [x86] platform/x86/intel: hid: Add DMI switches allow list
     - [x86] kvmclock: Move this_cpu_pvti into kvmclock.h
     - [x86] ptp: Fix ptp_kvm_getcrosststamp issue for x86 ptp_kvm
     - [x86] KVM: x86: Fix stack-out-of-bounds memory access from
     - [x86] KVM: x86: nSVM: don't copy virt_ext from vmcb12
     - [x86] KVM: x86: Clear KVM's cached guest CR3 at RESET/INIT
     - [x86] KVM: x86: Swap order of CPUID entry "index" vs. "significant flag"
     - [x86] KVM: nVMX: Filter out all unsupported controls when eVMCS was
     - [x86] KVM: SEV: Update svm_vm_copy_asid_from for SEV-ES
     - [x86] KVM: SEV: Pin guest memory for write for RECEIVE_UPDATE_DATA
     - [x86] KVM: SEV: Acquire vcpu mutex when updating VMSA
     - [x86] KVM: SEV: Allow some commands for mirror VM
     - [x86] KVM: SVM: fix missing sev_decommission in sev_receive_start
     - [x86] KVM: nVMX: Fix nested bus lock VM exit
     - [x86] KVM: VMX: Fix a TSX_CTRL_CPUID_CLEAR field mask issue
     - RDMA/cma: Do not change route.addr.src_addr.ss_family
     - RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
     - nbd: use shifts rather than multiplies
     - drm/amd/display: initialize backlight_ramping_override to false
     - drm/amd/display: Pass PCI deviceid into DC
     - drm/amd/display: Fix Display Flicker on embedded panels
     - drm/amdgpu: force exit gfxoff on sdma resume for rmb s0ix
     - drm/amdgpu: check tiling flags when creating FB on GFX8-
     - drm/amdgpu: correct initial cp_hqd_quantum for gfx9
     - [amd64] drm/i915/gvt: fix the usage of ww lock in gvt scheduler.
     - ipvs: check that ip_vs_conn_tab_bits is between 8 and 20
     - bpf: Handle return value of BPF_PROG_TYPE_STRUCT_OPS prog
     - IB/cma: Do not send IGMP leaves for sendonly Multicast groups
     - RDMA/cma: Fix listener leak in rdma_cma_listen_on_all() failure
     - netfilter: nf_tables: unlink table before deleting it
     - netfilter: log: work around missing softdep backend module
     - Revert "mac80211: do not use low data rates for data frames with no ack
     - mac80211: Fix ieee80211_amsdu_aggregate frag_tail bug
     - mac80211: limit injected vht mcs/nss in ieee80211_parse_tx_radiotap
     - mac80211: mesh: fix potentially unaligned access
     - mac80211-hwsim: fix late beacon hrtimer handling
     - driver core: fw_devlink: Add support for
     - net: mdiobus: Set FWNODE_FLAG_NEEDS_CHILD_BOUND_ON_ADD for mdiobus parents
     - sctp: break out if skb_header_pointer returns NULL in sctp_rcv_ootb
     - mptcp: don't return sockets in foreign netns
     - mptcp: allow changing the 'backup' bit when no sockets are open
     - [arm64] RDMA/hns: Work around broken constant propagation in gcc 8
     - hwmon: (tmp421) report /PVLD condition as fault
     - hwmon: (tmp421) fix rounding for negative values
     - [arm64] net: enetc: fix the incorrect clearing of IF_MODE bits
     - net: ipv4: Fix rtnexthop len when RTA_FLOW is present
     - smsc95xx: fix stalled rx after link change
     - [x86] drm/i915/request: fix early tracepoints
     - [x86] drm/i915: Remove warning from the rps worker
     - [arm64,armhf] dsa: mv88e6xxx: 6161: Use chip wide MAX MTU
     - [arm64,armhf] dsa: mv88e6xxx: Fix MTU definition
     - [arm64,armhf] dsa: mv88e6xxx: Include tagger overhead when setting MTU for
       DSA and CPU ports
     - e100: fix length calculation in e100_get_regs_len
     - e100: fix buffer overrun in e100_get_regs
     - [amd64] RDMA/hfi1: Fix kernel pointer leak
     - [arm64] RDMA/hns: Fix the size setting error when copying CQE in
     - [arm64] RDMA/hns: Add the check of the CQE size of the user space
     - bpf: Exempt CAP_BPF from checks against bpf_jit_limit
     - [amd64] bpf, x86: Fix bpf mapping of atomic fetch implementation
     - Revert "block, bfq: honor already-setup queue merges"
     - scsi: csiostor: Add module softdep on cxgb4
     - ixgbe: Fix NULL pointer dereference in ixgbe_xdp_setup
     - [arm64] net: hns3: do not allow call hns3_nic_net_open repeatedly
     - [arm64] net: hns3: remove tc enable checking
     - [arm64] net: hns3: don't rollback when destroy mqprio fail
     - [arm64] net: hns3: fix mixed flag HCLGE_FLAG_MQPRIO_ENABLE and
     - [arm64] net: hns3: fix show wrong state when add existing uc mac address
     - [arm64] net: hns3: reconstruct function hns3_self_test
     - [arm64] net: hns3: fix always enable rx vlan filter problem after selftest
     - [arm64] net: hns3: disable firmware compatible features when uninstall PF
     - [arm64,armhf] net: phy: bcm7xxx: Fixed indirect MMD operations
     - net: sched: flower: protect fl_walk() with rcu
     - net: stmmac: fix EEE init issue when paired with EEE capable PHYs
     - af_unix: fix races in sk_peer_pid and sk_peer_cred accesses
     - [x86] perf/x86/intel: Update event constraints for ICX
     - sched/fair: Add ancestors of unthrottled undecayed cfs_rq
     - sched/fair: Null terminate buffer when updating tunable_scaling
     - [armhf] hwmon: (occ) Fix P10 VRM temp sensors
     - [x86] kvm: fix objtool relocation warning
     - nvme: add command id quirk for apple controllers
     - elf: don't use MAP_FIXED_NOREPLACE for elf interpreter mappings
     - driver core: fw_devlink: Improve handling of cyclic dependencies
     - debugfs: debugfs_create_file_size(): use IS_ERR to check for error
     - ext4: fix loff_t overflow in ext4_max_bitmap_size()
     - ext4: fix reserved space counter leakage
     - ext4: add error checking to ext4_ext_replay_set_iblocks()
     - ext4: fix potential infinite loop in ext4_dx_readdir()
     - ext4: flush s_error_work before journal destroy in ext4_fill_super
     - HID: u2fzero: ignore incomplete packets without data (Closes: #994535)
     - net: udp: annotate data race around udp_sk(sk)->corkflag
     - usb: hso: remove the bailout parameter
     - HID: betop: fix slab-out-of-bounds Write in betop_probe
     - netfilter: ipset: Fix oversized kvmalloc() calls
     - mm: don't allow oversized kvmalloc() calls
     - HID: usbhid: free raw_report buffers in usbhid_stop
     - [x86] crypto: aesni - xts_crypt() return if walk.nbytes is 0
     - [x86] KVM: x86: Handle SRCU initialization failure during page track init
     - netfilter: conntrack: serialize hash resizes and cleanups
     - netfilter: nf_tables: Fix oversized kvmalloc() calls
     - [amd64] HID: amd_sfh: Fix potential NULL pointer dereference - take 2
     - [arm64,armhf] spi: rockchip: handle zero length transfers without timing
     - afs: Add missing vnode validation checks
     - nfsd: back channel stuck in SEQ4_STATUS_CB_PATH_DOWN
     - btrfs: replace BUG_ON() in btrfs_csum_one_bio() with proper error handling
     - btrfs: fix mount failure due to past and transient device flush error
     - net: mdio: introduce a shutdown method to mdio device drivers
     - xen-netback: correct success/error reporting for the SKB-with-fraglist
     - [sparc64] fix pci_iounmap() when CONFIG_PCI is not set
     - scsi: sd: Free scsi_disk device via put_device()
     - [arm*] usb: dwc2: check return value after calling platform_get_resource()
     - Xen/gntdev: don't ignore kernel unmapping error
     - swiotlb-xen: ensure to issue well-formed XENMEM_exchange requests
     - nvme-fc: update hardware queues before using them
     - nvme-fc: avoid race between time out and tear down
     - [arm64] thermal/drivers/tsens: Fix wrong check for tzd in irq handlers
     - scsi: ses: Retry failed Send/Receive Diagnostic commands
     - [arm64,armhf] irqchip/gic: Work around broken Renesas integration
     - smb3: correct smb3 ACL security descriptor
     - [x86] insn, tools/x86: Fix undefined behavior due to potential unaligned
     - io_uring: allow conditional reschedule for intensive iterators
     - block: don't call rq_qos_ops->done_bio if the bio isn't tracked
     - KVM: do not shrink halt_poll_ns below grow_start
     - [x86] KVM: x86: reset pdptrs_from_userspace when exiting smm
     - [x86] kvm: x86: Add AMD PMU MSRs to msrs_to_save_all[]
     - [x86] KVM: x86: nSVM: restore int_vector in svm_clear_vintr
     - [x86] perf/x86: Reset destroy callback on event init failure
     - libata: Add ATA_HORKAGE_NO_NCQ_ON_ATI for Samsung 860 and 870 SSD.
     - Revert "brcmfmac: use ISO3166 country code and 0 rev as fallback"
     - [armhf] Revert "ARM: imx6q: drop of_platform_default_populate() from
     - usb: cdc-wdm: Fix check for WWAN
     - [arm64,armhf] usb: chipidea: ci_hdrc_imx: Also search for 'phys' phandle
     - usb: gadget: f_uac2: fixed EP-IN wMaxPacketSize
     - USB: cdc-acm: fix racy tty buffer accesses
     - USB: cdc-acm: fix break reporting
     - usb: typec: tcpm: handle SRC_STARTUP state if cc changes
     - [x86] usb: typec: tipd: Remove dependency on "connector" child fwnode
     - drm/amdgpu: During s0ix don't wait to signal GFXOFF
     - drm/nouveau/kms/tu102-: delay enabling cursor until after assign_windows
     - drm/nouveau/ga102-: support ttm buffer moves via copy engine
     - [x86] drm/i915: Fix runtime pm handling in i915_gem_shrink
     - [x86] drm/i915: Extend the async flip VT-d w/a to skl/bxt
     - xen/privcmd: fix error handling in mmap-resource processing
     - [arm64] mmc: meson-gx: do not use memcpy_to/fromio for dram-access-quirk
     - ovl: fix missing negative dentry check in ovl_rename()
     - ovl: fix IOCB_DIRECT if underlying fs doesn't support direct IO
     - nfsd: fix error handling of register_pernet_subsys() in init_nfsd()
     - nfsd4: Handle the NFSv4 READDIR 'dircount' hint being zero
     - SUNRPC: fix sign error causing rpcsec_gss drops
     - xen/balloon: fix cancelled balloon action
     - [armhf] dts: omap3430-sdp: Fix NAND device node
     - scsi: ufs: core: Fix task management completion
     - [riscv64] Flush current cpu icache before other cpus
     - [armhf] bus: ti-sysc: Add break in switch statement in sysc_init_soc()
     - iwlwifi: mvm: Fix possible NULL dereference
     - [arm64] soc: qcom: mdt_loader: Drop PT_LOAD check on hash segment
     - [armhf] dts: imx: Add missing pinctrl-names for panel on M53Menlo
     - [armhf] dts: imx: Fix USB host power regulator polarity on M53Menlo
     - [amd64] PCI: hv: Fix sleep while in non-sleep context when removing child
       devices from the bus
     - iwlwifi: pcie: add configuration of a Wi-Fi adapter on Dell XPS 15
     - netfilter: conntrack: fix boot failure with nf_conntrack.enable_hooks=1
     - netfilter: nf_tables: add position handle in event notification
     - netfilter: nf_tables: reverse order in rule replacement expansion
     - [armel,armhf] bpf, arm: Fix register clobbering in div/mod implementation
     - [armhf] soc: ti: omap-prm: Fix external abort for am335x pruss
     - bpf: Fix integer overflow in prealloc_elems_and_freelist()
     - net/mlx5e: IPSEC RX, enable checksum complete
     - net/mlx5e: Keep the value for maximum number of channels in-sync
     - net/mlx5: E-Switch, Fix double allocation of acl flow counter
     - net/mlx5: Force round second at 1PPS out start time
     - net/mlx5: Avoid generating event after PPS out in Real time mode
     - net/mlx5: Fix length of irq_index in chars
     - net/mlx5: Fix setting number of EQs of SFs
     - net/mlx5e: Fix the presented RQ index in PTP stats
     - phy: mdio: fix memory leak
     - net_sched: fix NULL deref in fifo_set_limit()
     - [arm64] net: mscc: ocelot: fix VCAP filters remaining active after being
     - [arm64,armhf] net: stmmac: dwmac-rk: Fix ethernet on rk3399 based devices
     - [mips*] Revert "add support for buggy MT7621S core detection"
     - netfilter: nf_tables: honor NLM_F_CREATE and NLM_F_EXCL in event
     - [i386] ptp_pch: Load module automatically if ID matches
     - [armhf] dts: imx: change the spi-nor tx
     - [arm64] dts: imx8: change the spi-nor tx
     - [armhf] imx6: disable the GIC CPU interface before calling stby-poweroff
     - [x86] drm/i915/audio: Use BIOS provided value for RKL HDA link
     - [x86] drm/i915/jsl: Add W/A 1409054076 for JSL
     - [x86] drm/i915/tc: Fix TypeC port init/resume time sanitization
     - [x86] drm/i915/bdb: Fix version check
     - netfs: Fix READ/WRITE confusion when calling iov_iter_xarray()
     - afs: Fix afs_launder_page() to set correct start file position
     - net: bridge: use nla_total_size_64bit() in br_get_linkxstats_size()
     - net: bridge: fix under estimation in br_get_linkxstats_size()
     - net/sched: sch_taprio: properly cancel timer from taprio_destroy()
     - net: sfp: Fix typo in state machine debug string
     - net: pcs: xpcs: fix incorrect CL37 AN sequence
     - netlink: annotate data races around nlk->bound
     - drm/amdgpu: handle the case of pci_channel_io_frozen only in
     - [armhf] bus: ti-sysc: Use CLKDM_NOAUTO for dra7 dcan1 for errata i893
     - [arm64,armhf] drm/sun4i: dw-hdmi: Fix HDMI PHY clock setup
     - drm/nouveau: avoid a use-after-free when BO init fails
     - drm/nouveau/kms/nv50-: fix file release memory leak
     - drm/nouveau/debugfs: fix file release memory leak
     - net: pcs: xpcs: fix incorrect steps on disable EEE
     - net: stmmac: trigger PCS EEE to turn off on link down
     - [amd64,arm64] gve: Correct available tx qpl check
     - [amd64,arm64] gve: Avoid freeing NULL pointer
     - [amd64,arm64] gve: Properly handle errors in gve_assign_qpl
     - rtnetlink: fix if_nlmsg_stats_size() under estimation
     - [amd64,arm64] gve: fix gve_get_stats()
     - [amd64,arm64] gve: report 64bit tx_bytes counter from
     - i40e: fix endless loop under rtnl
     - i40e: Fix freeing of uninitialized misc IRQ vector
     - iavf: fix double unlock of crit_lock
     - net: prefer socket bound to interface when not in VRF
     - [powerpc*] iommu: Report the correct most efficient DMA mask for PCI
     - i2c: acpi: fix resource leak in reconfiguration device addition
     - [riscv64] explicitly use symbol offsets for VDSO
     - [riscv64] vdso: Refactor asm/vdso.h
     - [riscv64] vdso: Move vdso data page up front
     - [riscv64] vdso: make arch_setup_additional_pages wait for mmap_sem for
       write killable
     - [s390x] bpf, s390: Fix potential memory leak about jit_data
     - [riscv64] Include clone3() on rv32
     - scsi: iscsi: Fix iscsi_task use after free
     - [powerpc*] bpf: Fix BPF_MOD when imm == 1
     - [powerpc*] bpf: Fix BPF_SUB when imm == 0x80000000
     - [powerpc*] 64s: fix program check interrupt emergency stack path
     - [powerpc*] traps: do not enable irqs in _exception
     - [powerpc*] 64s: Fix unrecoverable MCE calling async handler from NMI
     - [powerpc*] pseries/eeh: Fix the kdump kernel crash during eeh_pseries_init
     - [i386] x86/platform/olpc: Correct ifdef symbol to intended
     - [x86] fpu: Restore the masking out of reserved MXCSR bits
     - [x86] entry: Correct reference to intended CONFIG_64_BIT
     - [x86] hpet: Use another crystalball to evaluate HPET usability
     - [arm64,armhf] dsa: tag_dsa: Fix mask for trunked packets
   [ Ben Hutchings ]
   * debian/.gitignore: Ignore debian/tests/control again
   * integrity: Drop "MODSIGN: load blacklist from MOKx" as redundant after 5.13
   * tools/perf: Fix warning introduced by "tools/perf: pmu-events: Fix
   * debian/rules.real: Stop invoking obsolete headers_check target
   * libcpupower: Update symbols file for changes in 5.13.9-1~exp1
   [ John Paul Adrian Glaubitz ]
   * [alpha] Re-enable CONFIG_EISA which was disabled upstream by accident
   [ Salvatore Bonaccorso ]
   * Bump ABI to 3
   * mm/secretmem: Fix NULL page->mapping dereference in page_is_secretmem()
     (Closes: #996175)
   [ Aurelien Jarno ]
   * [riscv64] Improve HiFive Unmatched support: enable SENSORS_LM90.
 ceef25b2b4e4ea41d72c68e10412d9df2e645fa0 207353 linux_5.15.5-2~bpo11+1.dsc
 562ad1a9902ff0e907fe9a9e90e95d1318a23fe5 1296300 linux_5.15.5-2~bpo11+1.debian.tar.xz
 f0928dd4513a5ba181bafd87807665037367fce0 5924 linux_5.15.5-2~bpo11+1_source.buildinfo
 238e122442f2d1c8402a2305d7003a545b9e0a36dae1f0b3584905cdaba6b83c 207353 linux_5.15.5-2~bpo11+1.dsc
 e581657ffe232e98dd9a28ec3d823e0b96f4b7b0c1a654b95234ab707229664e 1296300 linux_5.15.5-2~bpo11+1.debian.tar.xz
 2e4279bcf72d39f3069c8e5a594f0b7f5d2aa75d03232bee51ace15e479e97df 5924 linux_5.15.5-2~bpo11+1_source.buildinfo
 18f858602fc772aa0e8344bee247c121 207353 kernel optional linux_5.15.5-2~bpo11+1.dsc
 b912049d821284876e00b3d52dec190d 1296300 kernel optional linux_5.15.5-2~bpo11+1.debian.tar.xz
 894be248ca4599a70b165b5b1da5d92e 5924 kernel optional linux_5.15.5-2~bpo11+1_source.buildinfo



Reply to: