Accepted linux 5.15.5-2~bpo11+1 (source) into bullseye-backports, bullseye-backports
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sun, 02 Jan 2022 04:45:50 +0100
Source: linux
Architecture: source
Version: 5.15.5-2~bpo11+1
Distribution: bullseye-backports
Urgency: medium
Maintainer: Debian Kernel Team <debian-kernel@lists.debian.org>
Changed-By: Ben Hutchings <benh@debian.org>
Closes: 804857 911815 919807 971892 977575 988044 989285 991921 992184 993453 993902 994050 994535 995276 995407 995466 995927 996175 996672 996951 996962 999638 999748 1000504 1001128
Changes:
linux (5.15.5-2~bpo11+1) bullseye-backports; urgency=medium
.
* Rebuild for bullseye-backports:
- Change ABI number to 0.bpo.2
- Revert "Compile with gcc-11 on all architectures"
- perf: Disable use of libopencsd, as bullseye's version is too old
.
linux (5.15.5-2) unstable; urgency=medium
.
* atlantic: Fix OOB read and write in hw_atl_utils_fw_rpc_wait
(CVE-2021-43975)
* fget: check that the fd still exists after getting a ref to it
(CVE-2021-4083)
* USB: gadget: detect too-big endpoint 0 requests (CVE-2021-39685)
* USB: gadget: zero allocate endpoint 0 buffers (CVE-2021-39685)
* [x86] Revert "drm/i915: Implement Wa_1508744258" (Closes: #1001128)
* nfsd: fix use-after-free due to delegation race (Closes: #988044)
* bpf: Fix kernel address leakage in atomic fetch
* bpf: Fix signed bounds propagation after mov32
* bpf: Make 32->64 bounds propagation slightly more robust
* bpf: Fix kernel address leakage in atomic cmpxchg's r0 aux reg
.
linux (5.15.5-1) unstable; urgency=medium
.
* New upstream stable update:
https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.4
- string: uninline memcpy_and_pad
- [x86] KVM: Fix steal time asm constraints
- btrfs: introduce btrfs_is_data_reloc_root
- btrfs: zoned: add a dedicated data relocation block group
- btrfs: zoned: only allow one process to add pages to a relocation inode
- btrfs: zoned: use regular writes for relocation
- btrfs: check for relocation inodes on zoned btrfs in should_nocow
- btrfs: zoned: allow preallocation for relocation inodes
- block: Add a helper to validate the block size
- loop: Use blk_validate_block_size() to validate block size
- Bluetooth: btusb: Add support for TP-Link UB500 Adapter
- PCI/MSI: Deal with devices lying about their MSI mask capability
- PCI: Add MSI masking quirk for Nvidia ION AHCI
- perf/core: Avoid put_page() when GUP fails
- thermal: Fix NULL pointer dereferences in of_thermal_ functions
- Revert "ACPI: scan: Release PM resources blocked by unused objects"
https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.5
- [arm64] zynqmp: Do not duplicate flash partition label property
- [arm64] zynqmp: Fix serial compatible string
- [arm64,armhf] clk: sunxi-ng: Unregister clocks/resets when unbinding
- scsi: pm80xx: Fix memory leak during rmmod
- scsi: lpfc: Fix list_add() corruption in lpfc_drain_txq()
- [armhf] bus: ti-sysc: Add quirk handling for reinit on context lost
- [armhf] bus: ti-sysc: Use context lost quirk for otg
- [armhf] usb: musb: tusb6010: check return value after calling
platform_get_resource()
- [x86] usb: typec: tipd: Remove WARN_ON in tps6598x_block_read
- staging: rtl8723bs: remove possible deadlock when disconnect (v2)
- staging: rtl8723bs: remove a second possible deadlock
- staging: rtl8723bs: remove a third possible deadlock
- [arm64] dts: ls1012a: Add serial alias for ls1012a-rdb
- RDMA/rxe: Separate HW and SW l/rkeys
- [x86] ASoC: SOF: Intel: hda-dai: fix potential locking issue
- scsi: core: Fix scsi_mode_sense() buffer length handling
- ALSA: usb-audio: disable implicit feedback sync for Behringer UFX1204 and
UFX1604
- [armhf] clk: imx: imx6ul: Move csi_sel mux to correct base register
- ASoC: es8316: Use IRQF_NO_AUTOEN when requesting the IRQ
- [x86] ASoC: rt5651: Use IRQF_NO_AUTOEN when requesting the IRQ
- [x86] ASoC: nau8824: Add DMI quirk mechanism for active-high jack-detect
- scsi: advansys: Fix kernel pointer leak
- scsi: smartpqi: Add controller handshake during kdump
- [arm64] dts: imx8mm-kontron: Fix reset delays for ethernet PHY
- ALSA: intel-dsp-config: add quirk for APL/GLK/TGL devices based on ES8336
codec
- [x86] ASoC: Intel: soc-acpi: add missing quirk for TGL SDCA single amp
- [x86] ASoC: Intel: sof_sdw: add missing quirk for Dell SKU 0A45
- firmware_loader: fix pre-allocated buf built-in firmware use
- HID: multitouch: disable sticky fingers for UPERFECT Y
- ALSA: usb-audio: Add support for the Pioneer DJM 750MK2 Mixer/Soundcard
- ASoC: rt5682: fix a little pop while playback
- [amd64] iommu/vt-d: Do not falsely log intel_iommu is unsupported kernel
option
- tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc
- scsi: scsi_debug: Fix out-of-bound read in resp_readcap16()
- scsi: scsi_debug: Fix out-of-bound read in resp_report_tgtpgs()
- scsi: target: Fix ordered tag handling
- scsi: target: Fix alua_tg_pt_gps_count tracking
- iio: imu: st_lsm6dsx: Avoid potential array overflow in
st_lsm6dsx_set_odr()
- RDMA/core: Use kvzalloc when allocating the struct ib_port
- scsi: lpfc: Fix use-after-free in lpfc_unreg_rpi() routine
- scsi: lpfc: Fix link down processing to address NULL pointer dereference
- scsi: lpfc: Allow fabric node recovery if recovery is in progress before
devloss
- [i386] ALSA: gus: fix null pointer dereference on pointer block
- ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
- f2fs: fix up f2fs_lookup tracepoints
- f2fs: fix to use WHINT_MODE
- f2fs: fix wrong condition to trigger background checkpoint correctly
- f2fs: compress: disallow disabling compress on non-empty compressed file
- f2fs: fix incorrect return value in f2fs_sanity_check_ckpt()
- [armhf] clk/ast2600: Fix soc revision for AHB
- [arm64] clk: qcom: gcc-msm8996: Drop (again) gcc_aggre1_pnoc_ahb_clk
- [arm64] KVM: arm64: Fix host stage-2 finalization
- sched/core: Mitigate race cpus_share_cache()/update_top_cache_domain()
- sched/fair: Prevent dead task groups from regaining cfs_rq's
- [x86] perf/x86/vlbr: Add c->flags to vlbr event constraints
- blkcg: Remove extra blkcg_bio_issue_init
- drm/nouveau: hdmigv100.c: fix corrupted HDMI Vendor InfoFrame
- bpf: Fix inner map state pruning regression.
- tcp: Fix uninitialized access in skb frags array for Rx 0cp.
- tracing: Add length protection to histogram string copies
- nl80211: fix radio statistics in survey dump
- mac80211: fix monitor_sdata RCU/locking assertions
- net: bnx2x: fix variable dereferenced before check
- bnxt_en: reject indirect blk offload when hw-tc-offload is off
- tipc: only accept encrypted MSG_CRYPTO msgs
- sock: fix /proc/net/sockstat underflow in sk_clone_lock()
- net/smc: Make sure the link_id is unique
- NFSD: Fix exposure in nfsd4_decode_bitmap()
- iavf: Fix return of set the new channel count
- iavf: check for null in iavf_fix_features
- iavf: free q_vectors before queues in iavf_disable_vf
- iavf: don't clear a lock we don't hold
- iavf: Fix failure to exit out from last all-multicast mode
- iavf: prevent accidental free of filter structure
- iavf: validate pointers
- iavf: Fix for the false positive ASQ/ARQ errors while issuing VF reset
- iavf: Fix for setting queues to 0
- iavf: Restore VLAN filters after link down
- bpf: Fix toctou on read-only map's constant scalar tracking
(CVE-2021-4001)
- [x86] platform/x86: hp_accel: Fix an error handling path in
'lis3lv02d_probe()'
- udp: Validate checksum in udp_read_sock()
- btrfs: make 1-bit bit-fields of scrub_page unsigned int
- RDMA/core: Set send and receive CQ before forwarding to the driver
- net/mlx5e: Wait for concurrent flow deletion during neigh/fib events
- net/mlx5: E-Switch, Fix resetting of encap mode when entering switchdev
- net/mlx5e: nullify cq->dbg pointer in mlx5_debug_cq_remove()
- net/mlx5: Update error handler for UCTX and UMEM
- net/mlx5: E-Switch, rebuild lag only when needed
- net/mlx5e: CT, Fix multiple allocations and memleak of mod acts
- net/mlx5: Lag, update tracker when state change event received
- net/mlx5: E-Switch, return error if encap isn't supported
- scsi: ufs: core: Improve SCSI abort handling
- scsi: core: sysfs: Fix hang when device state is set via sysfs
- scsi: ufs: core: Fix task management completion timeout race
- scsi: ufs: core: Fix another task management completion race
- [arm*] net: mvmdio: fix compilation warning
- net: sched: act_mirred: drop dst for the direction from egress to ingress
- [arm64] net: dpaa2-eth: fix use-after-free in dpaa2_eth_remove
- net: virtio_net_hdr_to_skb: count transport header in UFO
- i40e: Fix correct max_pkt_size on VF RX queue
- i40e: Fix NULL ptr dereference on VSI filter sync
- i40e: Fix changing previously set num_queue_pairs for PFs
- i40e: Fix ping is lost after configuring ADq on VF
- RDMA/mlx4: Do not fail the registration on port stats
- i40e: Fix warning message and call stack during rmmod i40e driver
- i40e: Fix creation of first queue by omitting it if is not power of two
- i40e: Fix display error code in dmesg
- e100: fix device suspend/resume (Closes: #995927)
- [powerpc*] KVM: PPC: Book3S HV: Use GLOBAL_TOC for
kvmppc_h_set_dabr/xdabr()
- [powerpc*] pseries: rename numa_dist_table to form2_distances
- [powerpc*] pseries: Fix numa FORM2 parsing fallback code
- [x86] perf/x86/intel/uncore: Fix filter_tid mask for CHA events on Skylake
Server
- [x86] perf/x86/intel/uncore: Fix IIO event constraints for Skylake Server
- [x86] perf/x86/intel/uncore: Fix IIO event constraints for Snowridge
- [s390x] kexec: fix return code handling
- blk-cgroup: fix missing put device in error path from blkg_conf_pref()
- tun: fix bonding active backup with arp monitoring
- tipc: check for null after calling kmemdup
- ipc: WARN if trying to remove ipc object which is absent
- shm: extend forced shm destroy to support objects from several IPC nses
- hugetlb, userfaultfd: fix reservation restore on userfaultfd error
- [x86] boot: Pull up cmdline preparation and early param parsing
- [x86] hyperv: Fix NULL deref in set_hv_tscchange_cb() if Hyper-V setup
fails
- [x86] KVM: x86: Assume a 64-bit hypercall for guests with protected state
- [x86] KVM: x86: Fix uninitialized eoi_exit_bitmap usage in
vcpu_load_eoi_exitmap()
- [x86] KVM: x86/mmu: include EFER.LMA in extended mmu role
- [x86] KVM: x86/xen: Fix get_attr of KVM_XEN_ATTR_TYPE_SHARED_INFO
- [powerpc*] xive: Change IRQ domain to a tree domain
- [x86] Revert "drm/i915/tgl/dsi: Gate the ddi clocks after pll mapping"
- ata: libata: improve ata_read_log_page() error message
- ata: libata: add missing ata_identify_page_supported() calls
- scsi: qla2xxx: Fix mailbox direction flags in qla2xxx_get_adapter_id()
- [s390x] setup: avoid reserving memory above identity mapping
- [s390x] boot: simplify and fix kernel memory layout setup
- [s390x] vdso: filter out -mstack-guard and -mstack-size
- [s390x] dump: fix copying to user-space of swapped kdump oldmem
- block: Check ADMIN before NICE for IOPRIO_CLASS_RT
- fbdev: Prevent probing generic drivers if a FB is already registered
- [x86] KVM: SEV: Disallow COPY_ENC_CONTEXT_FROM if target has created vCPUs
- [x86] KVM: nVMX: don't use vcpu->arch.efer when checking host state on
nested state load
- drm/cma-helper: Release non-coherent memory with dma_free_noncoherent()
- printk: restore flushing of NMI buffers on remote CPUs after NMI
backtraces
- udf: Fix crash after seekdir
- spi: fix use-after-free of the add_lock mutex
- [armhf] net: stmmac: socfpga: add runtime suspend/resume callback for
stratix10 platform
- [x86] Drivers: hv: balloon: Use VMBUS_RING_SIZE() wrapper for dm_ring_size
- btrfs: fix memory ordering between normal and ordered work functions
- fs: handle circular mappings correctly
- net: stmmac: Fix signed/unsigned wreckage
- cfg80211: call cfg80211_stop_ap when switch from P2P_GO type
- mac80211: drop check for DONT_REORDER in __ieee80211_select_queue
- drm/amd/display: Update swizzle mode enums
- drm/amd/display: Limit max DSC target bpp for specific monitors
- [x86] drm/i915/guc: Fix outstanding G2H accounting
- [x86] drm/i915/guc: Don't enable scheduling on a banned context, guc_id
invalid, not registered
- [x86] drm/i915/guc: Workaround reset G2H is received after schedule done
G2H
- [x86] drm/i915/guc: Don't drop ce->guc_active.lock when unwinding context
- [x86] drm/i915/guc: Unwind context requests in reverse order
- drm/udl: fix control-message timeout
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- drm/nouveau: Add a dedicated mutex for the clients list (CVE-2020-27820)
- drm/nouveau: use drm_dev_unplug() during device removal (CVE-2020-27820)
- drm/nouveau: clean up all clients on device removal (CVE-2020-27820)
- [x86] drm/i915/dp: Ensure sink rate values are always valid
- [x86] drm/i915/dp: Ensure max link params are always valid
- [x86] drm/i915: Fix type1 DVI DP dual mode adapter heuristic for modern
platforms
- drm/amdgpu: fix set scaling mode Full/Full aspect/Center not works on vga
and dvi connectors
- drm/amd/pm: avoid duplicate powergate/ungate setting
- signal: Implement force_fatal_sig
- exit/syscall_user_dispatch: Send ordinary signals on failure
- [powerpc*] signal/powerpc: On swapcontext failure force SIGSEGV
- [s390x] signal/s390: Use force_sigsegv in default_trap_handler
- [x86] signal/x86: In emulate_vsyscall force a signal instead of calling
do_exit
- signal: Replace force_sigsegv(SIGSEGV) with force_fatal_sig(SIGSEGV)
- signal: Don't always set SA_IMMUTABLE for forced signals
- signal: Replace force_fatal_sig with force_exit_sig when in doubt
- hugetlbfs: flush TLBs correctly after huge_pmd_unshare (CVE-2021-4002)
- RDMA/netlink: Add __maybe_unused to static inline in C file
- bpf: Forbid bpf_ktime_get_coarse_ns and bpf_timer_* in tracing progs
- selinux: fix NULL-pointer dereference when hashtab allocation fails
- ASoC: DAPM: Cover regression by kctl change notification fix
- ice: Fix VF true promiscuous mode
- ice: Delete always true check of PF pointer
- fs: export an inode_update_time helper
- btrfs: update device path inode time instead of bd_inode
- net: add and use skb_unclone_keeptruesize() helper
- [x86] ALSA: hda: hdac_ext_stream: fix potential locking issues
- ALSA: hda: hdac_stream: fix potential locking issue in
snd_hdac_stream_assign()
.
[ Salvatore Bonaccorso ]
* [rt] Update to 5.15.3-rt21
* Drop "arm64: dts: rockchip: disable USB type-c DisplayPort"
* [rt] Refresh "printk: move console printing to kthreads"
* [rt] Refresh "printk: remove deferred printing"
* Bump ABI to 2
* fuse: release pipe buf after last use (Closes: #1000504)
.
linux (5.15.3-1) unstable; urgency=medium
.
* New upstream stable update:
https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.3
- Bluetooth: sco: Fix lock_sock() blockage by memcpy_from_msg()
(CVE-2021-3640)
.
[ Vincent Blut ]
* [arm64] sound/soc/meson: Enable SND_MESON_AXG_SOUND_CARD as module
(Closes: #999638)
* [arm64,armhf] sound/soc/meson: Enable SND_MESON_GX_SOUND_CARD as module
* drivers/bluetooth: Enable BT_HCIBTUSB_MTK (Closes: #999748)
.
[ Salvatore Bonaccorso ]
* mac80211: fix radiotap header generation
* [rt] Update to 5.15.2-rt20
* [rt] Refresh "printk: introduce kernel sync mode"
* [rt] Refresh "printk: move console printing to kthreads"
* [rt] Drop "rcutorture: Avoid problematic critical section nesting on
PREEMPT_RT"
* [rt] Drop "lockdep: Let lock_is_held_type() detect recursive read as read"
* [rt] Refresh "x86/softirq: Disable softirq stacks on PREEMPT_RT"
* [rt] Refresh "POWERPC: Allow to enable RT"
* Set ABI to 1
.
linux (5.15.2-1~exp1) experimental; urgency=medium
.
* New upstream stable update:
https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.2
.
[ Salvatore Bonaccorso ]
* [rt] Update to 5.15-rt17 and reenable (Closes: #995466)
* perf srcline: Use long-running addr2line per DSO (Closes: #911815)
* Refresh "Export symbols needed by Android drivers"
* [rt] Update to 5.15.2-rt19
* Input: elantench - fix misreporting trackpoint coordinates (Closes: #989285)
* kernel/time: Enable NO_HZ_FULL (Closes: #804857)
* io-wq: serialize hash clear with wakeup (Closes: #996951)
.
[ Vincent Blut ]
* [x86] drivers/ptp: Enable PTP_1588_CLOCK_VMW as module
* drivers/ptp: Enable PTP_1588_CLOCK_DTE, PTP_1588_CLOCK_IDT82P33,
PTP_1588_CLOCK_IDTCM, PTP_1588_CLOCK_OCP as modules
* drivers/ptp, net: Enable DP83640_PHY, PTP_1588_CLOCK_INES,
NET_PTP_CLASSIFY, NETWORK_PHY_TIMESTAMPING
.
linux (5.15.1-1~exp1) experimental; urgency=medium
.
* New upstream stable update:
https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.1
.
[ Salvatore Bonaccorso ]
* [arm*] drop cc-option fallbacks for architecture selection
* net/tls: Enable TLS as module (Closes: #919807)
.
[ Diederik de Haas ]
* [x86] drivers/hwmon: Enable SENSORS_CORSAIR_PSU as module
* [arm64] drivers/hwmon: Enable SENSORS_GPIO_FAN as module
.
linux (5.15-1~exp1) experimental; urgency=medium
.
* New upstream release candidate
.
[ Diederik de Haas ]
* [arm*] drivers/led/trigger: Make LEDS_TRIGGER_HEARTBEAT builtin
(Closes: #992184)
* [arm64] sound/soc/codecs: Enable SND_SOC_SPDIF as module
* [armel/rpi] Enable RPi's clock framework and CPU Freq scaling
* [armel/rpi] Change default governor to 'ondemand' for RPi 0/0w/1
(Closes: #991921)
* [arm64] sound/soc/rockchip: Enable SND_SOC_ROCKCHIP_PDM as module
* [armel] Make explicit that -rpi kernel variant is for RPi 0/0w/1, not the
others
.
[ Nathan Schulte ]
* [arm64] drivers/staging/media/hantro: Enable VIDEO_HANTRO as module
* [arm64] drivers/staging/media/rkvdec: Enable VIDEO_ROCKCHIP_VDEC as module
(Closes: #993902)
.
[ Vincent Blut ]
* [arm] arch/arm/crypto: Enable CRYPTO_BLAKE2S_ARM, CRYPTO_SHA256_ARM and
CRYPTO_SHA512_ARM as modules
* [armhf] arch/arm/crypto: Enable most NEON based implementation of
cryptographic algorithms as modules
* [arm] Move CRYPTO_NHPOLY1305_NEON in armhf config file
* [arm64] drivers/gpu/drm/vmwgfx: Enable DRM_VMWGFX as module
(Closes: #995276)
* [armhf] sound/soc/sunxi: Enable SND_SUN4I_I2S as module (Closes: #971892)
* [armhf] drivers/gpu/drm/bridge/synopsys: Enable DRM_DW_HDMI_I2S_AUDIO as
module
* drivers/usb/serial: Enable USB_SERIAL_XR as module (Closes: #996962)
* drivers/bus/mhi: Enable MHI_BUS, MHI_BUS_PCI_GENERIC as modules
(Closes: #995407)
* drivers/net: Enable MHI_NET as module
* drivers/net/wwan: Enable WWAN, MHI_WWAN_CTRL as modules
.
[ YunQiang Su ]
* [mipsel,mips64el/loongson-3] linux-image: Recommend pmon-update
.
[ Salvatore Bonaccorso ]
* Compile with gcc-11 on all architectures
* [arm64] drivers/net: Enable VMXNET3 as module
.
[ Uwe Kleine-König ]
* [arm64] Enable various symbols for the librem5 devkit and iMX8MN Variscite
Symphony (Patches by Guido Günther and Ariel D'Alessandro)
* [armhf,arm64] Cherrypick fix for snvs_pwrkey to prevent a machine hang.
.
[ Heiko Thiery ]
* [arm64] drivers/mtd/spi-nor: enable MTD_SPI_NOR as module
* [arm64] drivers/net/can/spi: enable CAN_MCP251X as module
* [arm64] drivers/net/phy: enable MICROSEMI_PHY as module
* [arm64] drivers/net/usb: enable USB_NET_SMSC95XX as module
.
[ Ryutaroh Matsumoto ]
* [arm64] Enable TOUCHSCREEN_RASPBERRYPI_FW and
REGULATOR_RASPBERRYPI_TOUCHSCREEN_ATTINY (Closes: #977575)
.
[ Ariel D'Alessandro ]
* [arm64] drivers/regulator: Enable REGULATOR_BD718XX as module
.
[ Lubomir Rintel ]
* [armhf] Add support for Marvell MMP3
* [armhf] Enable SND_MMP_SOC_SSPA, COMMON_CLK_MMP2_AUDIO, PHY_MMP3_USB,
MFD_ENE_KB3930 and LEDS_ARIEL as modules.
.
[ Sean McAvoy ]
* [armel] marvell: Enable CONFIG_SENSORS_LM63 as a module.
.
[ Dan Stefura ]
* [arm64] enable i6300esb watchdog kernel module
.
[ Thore Sommer ]
* drivers/md: Enable DM_VERITY_FEC
.
[ Aurelien Jarno ]
* [riscv64] Enable NUMA (Closes: #993453)
.
linux (5.14.16-1) unstable; urgency=medium
.
* New upstream stable update:
https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.13
- ext4: check and update i_disksize properly
- ext4: correct the error path of ext4_write_inline_data_end()
- [x86] ASoC: Intel: sof_sdw: tag SoundWire BEs as non-atomic
- ALSA: oxfw: fix transmission method for Loud models based on OXFW971
- ALSA: usb-audio: Unify mixer resume and reset_resume procedure
- HID: apple: Fix logical maximum and usage maximum of Magic Keyboard JIS
- netfilter: ip6_tables: zero-initialize fragment offset
- HID: wacom: Add new Intuos BT (CTL-4100WL/CTL-6100WL) device IDs
- [x86] ASoC: SOF: loader: release_firmware() on load failure to avoid
batching
- netfilter: nf_nat_masquerade: make async masq_inet6_event handling generic
- netfilter: nf_nat_masquerade: defer conntrack walk to work queue
- mac80211: Drop frames from invalid MAC address in ad-hoc mode
- [m68k] Handle arrivals of multiple signals correctly
- net: prevent user from passing illegal stab size
- mac80211: check return value of rhashtable_init
- [x86] vboxfs: fix broken legacy mount signature checking
- drm/amdgpu: fix gart.bo pin_count leak
- scsi: ses: Fix unsigned comparison with less than zero
- scsi: virtio_scsi: Fix spelling mistake "Unsupport" -> "Unsupported"
- scsi: qla2xxx: Fix excessive messages during device logout
- perf/core: fix userpage->time_enabled of inactive events
- sched: Always inline is_percpu_thread()
- io_uring: kill fasync
- [armhf] hwmon: (pmbus/ibm-cffps) max_power_out swap changes
https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.14
- ALSA: usb-audio: Add quirk for VF0770
- ALSA: pcm: Workaround for a wrong offset in SYNC_PTR compat ioctl
- ALSA: usb-audio: Fix a missing error check in scarlett gen2 mixer
- ALSA: seq: Fix a potential UAF by wrong private_free call order
- ALSA: hda/realtek: Enable 4-speaker output for Dell Precision 5560 laptop
- ALSA: hda - Enable headphone mic on Dell Latitude laptops with ALC3254
- ALSA: hda/realtek: Complete partial device name to avoid ambiguity
- ALSA: hda/realtek: Add quirk for Clevo X170KM-G
- ALSA: hda/realtek - ALC236 headset MIC recording issue
- ALSA: hda/realtek: Add quirk for TongFang PHxTxX1
- ALSA: hda/realtek: Fix for quirk to enable speaker output on the Lenovo
13s Gen2
- ALSA: hda/realtek: Fix the mic type detection issue for ASUS G551JW
- [amd64] platform/x86: amd-pmc: Add alternative acpi id for PMC controller
- dm: fix mempool NULL pointer race when completing IO
- [x86] ACPI: PM: Include alternate AMDI0005 id in special behaviour
- dm rq: don't queue request to blk-mq during DM suspend
- [s390x] fix strrchr() implementation
- drm/fbdev: Clamp fbdev surface size if too large
- [arm64] hugetlb: fix CMA gigantic page order for non-4K PAGE_SIZE
- drm/nouveau/fifo: Reinstate the correct engine bit programming
- [arm64] drm/msm: Do not run snapshot on non-DPU devices
- [arm64] drm/msm: Avoid potential overflow in timeout_to_jiffies()
- btrfs: unlock newly allocated extent buffer after error
- btrfs: deal with errors when replaying dir entry during log replay
- btrfs: deal with errors when adding inode reference during log replay
- btrfs: check for error when looking up inode during dir entry replay
- btrfs: update refs for any root except tree log roots
- btrfs: fix abort logic in btrfs_replace_file_extents
- [x86] resctrl: Free the ctrlval arrays when domain_setup_mon_state() fails
- [x86] mei: me: add Ice Lake-N device id.
- [x86] mei: hbm: drop hbm responses on early shutdown
- xhci: guard accesses to ep_state in xhci_endpoint_reset()
- xhci: add quirk for host controllers that don't update endpoint DCS
- xhci: Fix command ring pointer corruption while aborting a command
- xhci: Enable trust tx length quirk for Fresco FL11 USB controller
- cb710: avoid NULL pointer subtraction
- [arm64,x86] efi/cper: use stack buffer for error record decoding
- efi: Change down_interruptible() in virt_efi_reset_system() to
down_trylock()
- [armhf] usb: musb: dsps: Fix the probe error path
- Input: xpad - add support for another USB ID of Nacon GC-100
- USB: serial: qcserial: add EM9191 QDL support
- USB: serial: option: add Quectel EC200S-CN module support
- USB: serial: option: add Telit LE910Cx composition 0x1204
- USB: serial: option: add prod. id for Quectel EG91
- virtio: write back F_VERSION_1 before validate
- nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells
- virtio-blk: remove unneeded "likely" statements
- Revert "virtio-blk: Add validation for block size in config space"
- [x86] fpu: Mask out the invalid MXCSR bits properly
- [x86] Kconfig: Do not enable AMD_MEM_ENCRYPT_ACTIVE_BY_DEFAULT
automatically
- [powerpc*] xive: Discard disabled interrupts in get_irqchip_state()
- [armhf] drivers: bus: simple-pm-bus: Add support for probing simple bus
only devices
- driver core: Reject pointless SYNC_STATE_ONLY device links
- iio: adc: ad7192: Add IRQ flag
- iio: adc: ad7780: Fix IRQ flag
- iio: adc: ad7793: Fix IRQ flag
- iio: adis16480: fix devices that do not support sleep mode
- iio: adc128s052: Fix the error handling path of 'adc128_probe()'
- iio: adc: max1027: Fix wrong shift with 12-bit devices
- iio: adis16475: fix deadlock on frequency set
- iio: light: opt3001: Fixed timeout error when 0 lux
- iio: adc: max1027: Fix the number of max1X31 channels
- eeprom: at25: Add SPI ID table
- iio: dac: ti-dac5571: fix an error code in probe()
- [arm64] tee: optee: Fix missing devices unregister during optee_remove
- [armel,armhf] dts: bcm2711-rpi-4-b: Fix usb's unit address
- [armel,armhf] dts: bcm2711-rpi-4-b: fix sd_io_1v8_reg regulator states
- [armel,armhf] dts: bcm2711-rpi-4-b: Fix pcie0's unit address formatting
- nvme-pci: Fix abort command id
- sctp: account stream padding length for reconf chunk
- [arm64,armhf] gpio: pca953x: Improve bias setting
- net/smc: improved fix wait on already cleared link
- net/mlx5e: Fix memory leak in mlx5_core_destroy_cq() error path
- net/mlx5e: Mutually exclude RX-FCS and RX-port-timestamp
- net/mlx5e: Switchdev representors are not vlan challenged
- net: stmmac: fix get_hw_feature() on old hardware
- net: phy: Do not shutdown PHYs in READY state
- [arm64,armhf] net: dsa: mv88e6xxx: don't use PHY_DETECT on internal PHY's
- [arm64,armhf] net: dsa: fix spurious error message when unoffloaded port
leaves bridge
- ethernet: s2io: fix setting mac address during resume
- nfc: fix error handling of nfc_proto_register()
- NFC: digital: fix possible memory leak in digital_tg_listen_mdaa()
- NFC: digital: fix possible memory leak in digital_in_send_sdd_req()
- pata_legacy: fix a couple uninitialized variable bugs
- ata: ahci_platform: fix null-ptr-deref in
ahci_platform_enable_regulators()
- spi: spidev: Add SPI ID table
- drm/edid: In connector_bad_edid() cap num_of_ext by num_blocks read
- [arm64] drm/msm: Fix null pointer dereference on pointer edp
- [arm64] drm/msm/mdp5: fix cursor-related warnings
- [arm64] drm/msm/submit: fix overflow check on 64-bit architectures
- [arm64] drm/msm/a6xx: Track current ctx by seqno
- [arm64] drm/msm/a4xx: fix error handling in a4xx_gpu_init()
- [arm64] drm/msm/a3xx: fix error handling in a3xx_gpu_init()
- [arm64] drm/msm/dsi: dsi_phy_14nm: Take ready-bit into account in
poll_for_ready
- [arm64] drm/msm/dsi: Fix an error code in msm_dsi_modeset_init()
- [arm64] drm/msm/dsi: fix off by one in dsi_bus_clk_enable error handling
- [arm64] acpi/arm64: fix next_platform_timer() section mismatch error
- [x86] platform/x86: intel_scu_ipc: Fix busy loop expiry time
- mqprio: Correct stats in mqprio_dump_class_stats().
- mptcp: fix possible stall on recvmsg()
- qed: Fix missing error code in qed_slowpath_start()
- ice: fix locking for Tx timestamp tracking flush
- nfp: flow_offload: move flow_indr_dev_register from app init to app start
- [arm64] net: mscc: ocelot: make use of all 63 PTP timestamp identifiers
- [arm64] net: mscc: ocelot: avoid overflowing the PTP timestamp FIFO
- [arm64] net: mscc: ocelot: warn when a PTP IRQ is raised for an unknown
skb
- [arm64] net: mscc: ocelot: deny TX timestamping of non-PTP packets
- [arm64] net: mscc: ocelot: cross-check the sequence id from the timestamp
FIFO with the skb PTP header
- [arm64] net: dsa: felix: break at first CPU port during init and teardown
https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.15
- [armhf] dts: vexpress-v2p-ca9: Fix the SMB unit-address
- block: decode QUEUE_FLAG_HCTX_ACTIVE in debugfs output
- [x86] xen/x86: prevent PVH type from getting clobbered
- r8152: avoid to resubmit rx immediately
- drm/amdgpu: init iommu after amdkfd device init
- NFSD: Keep existing listeners on portlist error
- [powerpc*] powerpc/lib: Add helper to check if offset is within
conditional branch range
- [powerpc*] powerpc/bpf: Validate branch ranges
- [powerpc*] powerpc/security: Add a helper to query stf_barrier type
- [powerpc*] powerpc/bpf: Emit stf barrier instruction sequences for
BPF_NOSPEC
- [arm64] KVM: arm64: Fix host stage-2 PGD refcount
- [arm64] KVM: arm64: Release mmap_lock when using VM_SHARED with MTE
- netfilter: xt_IDLETIMER: fix panic that occurs when timer_type has garbage
value
- netfilter: nf_tables: skip netdev events generated on netns removal
- ice: Fix failure to re-add LAN/RDMA Tx queues
- ice: Avoid crash from unnecessary IDA free
- ice: fix getting UDP tunnel entry
- ice: Print the api_patch as part of the fw.mgmt.api
- netfilter: ip6t_rt: fix rt0_hdr parsing in rt_mt6
- netfilter: ipvs: make global sysctl readonly in non-init netns
- sctp: fix transport encap_port update in sctp_vtag_verify
- tcp: md5: Fix overlap between vrf and non-vrf keys
- ipv6: When forwarding count rx stats on the orig netdev
- hamradio: baycom_epp: fix build for UML
- net/sched: act_ct: Fix byte count on fragmented packets
- [arm64,armhf] net: dsa: Fix an error handling path in
'dsa_switch_parse_ports_of()'
- [powerpc*] smp: do not decrement idle task preempt count in CPU offline
- [arm64] net: hns3: Add configuration of TM QCN error event
- [arm64] net: hns3: reset DWRR of unused tc to zero
- [arm64] net: hns3: add limit ets dwrr bandwidth cannot be 0
- [arm64] net: hns3: schedule the polling again when allocation fails
- [arm64] net: hns3: fix vf reset workqueue cannot exit
- [arm64] net: hns3: disable sriov before unload hclge layer
- net: stmmac: Fix E2E delay mechanism
- ptp: Fix possible memory leak in ptp_clock_register()
- e1000e: Fix packet loss on Tiger Lake and later
- igc: Update I226_K device ID
- ice: Add missing E810 device ids
- net/mlx5e: IPsec: Fix a misuse of the software parser's fields
- net/mlx5e: IPsec: Fix work queue entry ethernet segment checksum flags
- [arm64] net: enetc: fix ethtool counter name for PM0_TERR
- [arm64] net: enetc: make sure all traffic classes can send large frames
- can: peak_usb: pcan_usb_fd_decode_status(): fix back to ERROR_ACTIVE state
notification
- can: peak_pci: peak_pci_remove(): fix UAF
- can: isotp: isotp_sendmsg(): fix return error on FC timeout on TX path
- can: isotp: isotp_sendmsg(): add result check for
wait_event_interruptible()
- can: isotp: isotp_sendmsg(): fix TX buffer concurrent access in
isotp_sendmsg()
- can: j1939: j1939_tp_rxtimer(): fix errant alert in j1939_tp_rxtimer
- can: j1939: j1939_netdev_start(): fix UAF for rx_kref of j1939_priv
- can: j1939: j1939_xtp_rx_dat_one(): cancel session if receive TP.DT with
error length
- can: j1939: j1939_xtp_rx_rts_session_new(): abort TP less than 9 bytes
- ceph: skip existing superblocks that are blocklisted or shut down when
mounting
- ceph: fix handling of "meta" errors
- tracing: Have all levels of checks prevent recursion
- ocfs2: fix data corruption after conversion from inline format
- ocfs2: mount fails with buffer overflow in strlen
- userfaultfd: fix a race between writeprotect and exit_mmap()
- mm/mempolicy: do not allow illegal MPOL_F_NUMA_BALANCING | MPOL_LOCAL in
mbind()
- vfs: check fd has read access in kernel_read_file_from_fd()
- ALSA: usb-audio: Provide quirk for Sennheiser GSP670 Headset
- ALSA: hda/realtek: Add quirk for Clevo PC50HS
- ASoC: DAPM: Fix missing kctl change notifications
- [x86] ASoC: nau8824: Fix headphone vs headset, button-press detection no
longer working
- blk-cgroup: blk_cgroup_bio_start() should use irq-safe operations on
blkg->iostat_cpu
- audit: fix possible null-pointer dereference in audit_filter_rules
- ucounts: Move get_ucounts from cred_alloc_blank to
key_change_session_keyring
- ucounts: Pair inc_rlimit_ucounts with dec_rlimit_ucoutns in commit_creds
- ucounts: Proper error handling in set_cred_ucounts
- ucounts: Fix signal ucount refcounting
- [powerpc*] KVM: PPC: Book3S HV: Fix stack handling in
idle_kvm_start_guest()
- [powerpc*] KVM: PPC: Book3S HV: Make idle_kvm_start_guest() return 0 if it
went to guest (CVE-2021-43056)
- [powerpc*] idle: Don't corrupt back chain when going idle
- mm, slub: fix mismatch between reconstructed freelist depth and cnt
- mm, slub: fix potential memoryleak in kmem_cache_open()
- mm, slub: fix potential use-after-free in slab_debugfs_fops
- mm, slub: fix incorrect memcg slab count for bulk free
- [x86] KVM: nVMX: promptly process interrupts delivered while in guest mode
- [x86] KVM: SEV: Flush cache on non-coherent systems before
RECEIVE_UPDATE_DATA
- [x86] KVM: SEV-ES: rename guest_ins_data to sev_pio_data
- [x86] KVM: SEV-ES: clean up kvm_sev_es_ins/outs
- [x86] KVM: SEV-ES: keep INS functions together
- [x86] KVM: SEV-ES: fix length of string I/O
- [x86] KVM: SEV-ES: go over the sev_pio_data buffer in multiple passes if
needed
- [x86] KVM: SEV-ES: reduce ghcb_sa_len to 32 bits
- [x86] KVM: x86: leave vcpu->arch.pio.count alone in emulator_pio_in_out
- [x86] KVM: x86: check for interrupts before deciding whether to exit the
fast path
- [x86] KVM: x86: split the two parts of emulator_pio_in
- [x86] KVM: x86: remove unnecessary arguments from complete_emulator_pio_in
- nfc: nci: fix the UAF of rf_conn_info object (CVE-2021-3760)
- isdn: cpai: check ctr->cnr to avoid array index out of bound
(CVE-2021-3896)
- [sh4] net: bridge: mcast: use multicast_membership_interval for IGMPv3
- [x86] KVM: SEV-ES: Set guest_state_protected after VMSA update
- [arm64] net: hns3: fix the max tx size according to user manual
- [x86] KVM: MMU: Reset mmu->pkru_mask to avoid stale data
- [arm64] drm/msm/a6xx: Serialize GMU communication
- ALSA: hda: intel: Allow repeatedly probing on codec configuration errors
- btrfs: deal with errors when checking if a dir entry exists during log
replay
- net: stmmac: add support for dwmac 3.40a
- [x86] platform/x86: intel_scu_ipc: Increase virtual timeout to 10s
- [x86] platform/x86: intel_scu_ipc: Update timeout value in comment
- ALSA: hda: avoid write to STATESTS if controller is in reset
- spi: Fix deadlock when adding SPI controllers on SPI buses
- spi-mux: Fix false-positive lockdep splats
- [x86] perf/x86/msr: Add Sapphire Rapids CPU support
- scsi: iscsi: Fix set_param() handling
- [x86] scsi: storvsc: Fix validation for unsolicited incoming packets
- scsi: qla2xxx: Fix a memory leak in an error path of qla2x00_process_els()
- mm/thp: decrease nr_thps in file's mapping on THP split
- sched/scs: Reset the shadow stack when idle_task_exit
- [arm64] net: hns3: fix for miscalculation of rx unused desc
- net/mlx5: Lag, move lag destruction to a workqueue
- net/mlx5: Lag, change multipath and bonding to be mutually exclusive
- autofs: fix wait name hash calculation in autofs_wait()
- scsi: core: Fix shost->cmd_per_lun calculation in scsi_add_host_with_dma()
- [s390x] pci: cleanup resources only if necessary
- [s390x] pci: fix zpci_zdev_put() on reserve
- net: mdiobus: Fix memory leak in __mdiobus_register
- e1000e: Separate TGP board type from SPT
- [armhf] pinctrl: stm32: use valid pin identifier in stm32_pinctrl_resume()
https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.16
- [armel,armhf] 9134/1: remove duplicate memcpy() definition
- [armel,armhf] 9139/1: kprobes: fix arch_init_kprobes() prototype
- [armel,armhf] 9148/1: handle CONFIG_CPU_ENDIAN_BE32 in
arch/arm/kernel/head.S
- usbnet: sanity check for maxpacket
- usbnet: fix error return code in usbnet_probe()
- pinctrl: amd: disable and mask interrupts on probe
- ata: sata_mv: Fix the error handling of mv_chip_id()
- tipc: fix size validations for the MSG_CRYPTO type (CVE-2021-43267)
- nfc: port100: fix using -ERRNO as command type mask
- Revert "net: mdiobus: Fix memory leak in __mdiobus_register"
- mmc: vub300: fix control-message timeouts
- mmc: cqhci: clear HALT state after CQE enable
- [armhf] mmc: dw_mmc: exynos: fix the finding clock sample value
- mmc: sdhci: Map more voltage level to SDHCI_POWER_330
- mmc: sdhci-pci: Read card detect from ACPI for Intel Merrifield
- [arm64,armhf] mmc: sdhci-esdhc-imx: clear the buffer_read_ready to reset
standard tuning circuit
- block: Fix partition check for host-aware zoned block devices
- ocfs2: fix race between searching chunks and release journal_head from
buffer_head
- nvme-tcp: fix H2CData PDU send accounting (again)
- cfg80211: scan: fix RCU in cfg80211_add_nontrans_list()
- cfg80211: fix management registrations locking
- net: lan78xx: fix division by zero in send path
- mm: hwpoison: remove the unnecessary THP check
- mm: filemap: check if THP has hwpoisoned subpage for PMD page fault
- mm, thp: bail out early in collapse_file for writeback page
- mm: khugepaged: skip huge page collapse for special files
- [arm64] dts: imx8mm-kontron: Fix polarity of reg_rst_eth2
- [arm64] dts: imx8mm-kontron: Fix CAN SPI clock frequency
- [arm64] dts: imx8mm-kontron: Fix connection type for VSC8531 RGMII PHY
- [arm64] dts: imx8mm-kontron: Set lower limit of VDD_SNVS to 800 mV
- [arm64] dts: imx8mm-kontron: Make sure SOC and DRAM supply voltages are
correct
- mac80211: mesh: fix HE operation element length check
- drm/ttm: fix memleak in ttm_transfered_destroy
- [x86] drm/i915: Convert unconditional clflush to drm_clflush_virt_range()
- [x86] drm/i915: Catch yet another unconditioal clflush
- [x86] drm/i915/dp: Skip the HW readout of DPCD on disabled encoders
- drm/amdgpu: Fix even more out of bound writes from debugfs
- drm/amdgpu: fix out of bounds write (CVE-2021-42327)
- drm/amdgpu: support B0&B1 external revision id for yellow carp
- drm/amd/display: Limit display scaling to up to true 4k for DCN 3.1
- drm/amd/display: Fix prefetch bandwidth calculation for DCN3.1
- drm/amd/display: increase Z9 latency to workaround underflow in Z9
- drm/amd/display: Increase watermark latencies for DCN3.1
- drm/amd/display: Moved dccg init to after bios golden init
- drm/amd/display: Fallback to clocks which meet requested voltage on DCN31
- drm/amd/display: Fix deadlock when falling back to v2 from v3
- Revert "watchdog: iTCO_wdt: Account for rebooting on second timeout"
- cgroup: Fix memory leak caused by missing cgroup_bpf_offline
- [riscv64] riscv, bpf: Fix potential NULL dereference
- tcp_bpf: Fix one concurrency problem in the tcp_bpf_send_verdict function
- bpf: Fix potential race in tail call compatibility check
- bpf: Fix error usage of map_fd and fdget() in generic_map_update_batch()
- [amd64] IB/qib: Protect from buffer overflow in struct qib_user_sdma_pkt
fields
- [amd64] IB/hfi1: Fix abba locking issue with sc_disable()
- nvmet-tcp: fix data digest pointer calculation
- nvme-tcp: fix data digest pointer calculation
- nvme-tcp: fix possible req->offset corruption
- ice: Respond to a NETDEV_UNREGISTER event for LAG
- RDMA/mlx5: Set user priority for DCT
- ice: check whether PTP is initialized in ice_ptp_release()
- [arm64] dts: allwinner: h5: NanoPI Neo 2: Fix ethernet node
- regmap: Fix possible double-free in regcache_rbtree_exit()
- net: batman-adv: fix error handling
- net-sysfs: initialize uid and gid before calling net_ns_get_ownership
- cfg80211: correct bridge/4addr mode check
- net: Prevent infinite while loop in skb_tx_hash()
- RDMA/mlx5: Initialize the ODP xarray when creating an ODP MR
- RDMA/sa_query: Use strscpy_pad instead of memcpy to copy a string
- net: ethernet: microchip: lan743x: Fix driver crash when lan743x_pm_resume
fails
- net: ethernet: microchip: lan743x: Fix dma allocation failure by using
dma_set_mask_and_coherent
- [arm64] net: hns3: fix pause config problem after autoneg disabled
- [arm64] net: hns3: fix data endian problem of some functions of debugfs
- net: ethernet: microchip: lan743x: Fix skb allocation failure
- phy: phy_ethtool_ksettings_get: Lock the phy for consistency
- phy: phy_ethtool_ksettings_set: Move after phy_start_aneg
- phy: phy_start_aneg: Add an unlocked version
- phy: phy_ethtool_ksettings_set: Lock the PHY while changing settings
- sctp: use init_tag from inithdr for ABORT chunk (CVE-2021-3772)
- sctp: fix the processing for INIT chunk (CVE-2021-3772)
- sctp: fix the processing for INIT_ACK chunk (CVE-2021-3772)
- sctp: fix the processing for COOKIE_ECHO chunk (CVE-2021-3772)
- sctp: add vtag check in sctp_sf_violation (CVE-2021-3772)
- sctp: add vtag check in sctp_sf_do_8_5_1_E_sa (CVE-2021-3772)
- sctp: add vtag check in sctp_sf_ootb (CVE-2021-3772)
- bpf: Use kvmalloc for map values in syscall
- [arm64] watchdog: sbsa: only use 32-bit accessors
- bpf: Move BPF_MAP_TYPE for INODE_STORAGE and TASK_STORAGE outside of
CONFIG_NET
- [arm64] net: hns3: add more string spaces for dumping packets number of
queue info in debugfs
- [arm64] net: hns3: expand buffer len for some debugfs command
- virtio-ring: fix DMA metadata flags
- [s390x] KVM: s390: clear kicked_mask before sleeping again
- [s390x] KVM: s390: preserve deliverable_mask in __airqs_kick_single_vcpu
- [powerpc*] scsi: ibmvfc: Fix up duplicate response detection
- [riscv64] fix misalgned trap vector base address
- [x86] KVM: switch pvclock_gtod_sync_lock to a raw spinlock
- [x86] KVM: SEV-ES: fix another issue with string I/O VMGEXITs
- [x86] KVM: Take srcu lock in post_kvm_run_save()
.
[ Salvatore Bonaccorso ]
* Revert "[amd64] Unset AMD_MEM_ENCRYPT_ACTIVE_BY_DEFAULT"
* Bump ABI to 4
* media: ir-kbd-i2c: improve responsiveness of hauppauge zilog receivers
(Closes: #994050)
* [x86] media: ite-cir: IR receiver stop working after receive overflow
(Closes: #996672)
* scsi: core: Put LLD module refcnt after SCSI device is released
* sfc: Fix reading non-legacy supported link modes
* vrf: Revert "Reset skb conntrack connection..."
* media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt()
(CVE-2021-42739)
.
linux (5.14.12-1) unstable; urgency=medium
.
* New upstream stable update:
https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.10
- [arm64,armhf] media: cedrus: Fix SUNXI tile size calculation
- [arm64] ASoC: fsl_sai: register platform component before registering cpu
dai
- [armhf] ASoC: fsl_spdif: register platform component before registering
cpu dai
- [x86] ASoC: SOF: Fix DSP oops stack dump output contents
- [arm64] pinctrl: qcom: spmi-gpio: correct parent irqspec translation
- net/mlx4_en: Resolve bad operstate value
- [s390x] qeth: Fix deadlock in remove_discipline
- [s390x] qeth: fix deadlock during failing recovery
- [x86] crypto: ccp - fix resource leaks in ccp_run_aes_gcm_cmd()
(CVE-2021-3744, CVE-2021-3764)
- [m68k] Update ->thread.esp0 before calling syscall_trace() in
ret_from_signal
- [amd64] HID: amd_sfh: Fix potential NULL pointer dereference
- tty: Fix out-of-bound vmalloc access in imageblit
- cpufreq: schedutil: Use kobject release() method to free sugov_tunables
- scsi: qla2xxx: Changes to support kdump kernel for NVMe BFS
- drm/amdgpu: adjust fence driver enable sequence
- drm/amdgpu: avoid over-handle of fence driver fini in s3 test (v2)
- drm/amdgpu: stop scheduler when calling hw_fini (v2)
- cpufreq: schedutil: Destroy mutex before kobject_put() frees the memory
- scsi: ufs: ufs-pci: Fix Intel LKF link stability
- ALSA: rawmidi: introduce SNDRV_RAWMIDI_IOCTL_USER_PVERSION
- ALSA: firewire-motu: fix truncated bytes in message tracepoints
- ALSA: hda/realtek: Quirks to enable speaker output for Lenovo Legion 7i
15IMHG05, Yoga 7i 14ITL5/15ITL5, and 13s Gen2 laptops.
- [amd64,arm64] ACPI: NFIT: Use fallback node id when numa info in NFIT
table is incorrect
- fs-verity: fix signed integer overflow with i_size near S64_MAX
- hwmon: (tmp421) handle I2C errors
- hwmon: (w83793) Fix NULL pointer dereference by removing unnecessary
structure field
- hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary
structure field
- hwmon: (w83791d) Fix NULL pointer dereference by removing unnecessary
structure field
- [arm64,armhf] gpio: pca953x: do not ignore i2c errors
- scsi: ufs: Fix illegal offset in UPIU event trace
- mac80211: fix use-after-free in CCMP/GCMP RX
- [x86] platform/x86/intel: hid: Add DMI switches allow list
- [x86] kvmclock: Move this_cpu_pvti into kvmclock.h
- [x86] ptp: Fix ptp_kvm_getcrosststamp issue for x86 ptp_kvm
- [x86] KVM: x86: Fix stack-out-of-bounds memory access from
ioapic_write_indirect()
- [x86] KVM: x86: nSVM: don't copy virt_ext from vmcb12
- [x86] KVM: x86: Clear KVM's cached guest CR3 at RESET/INIT
- [x86] KVM: x86: Swap order of CPUID entry "index" vs. "significant flag"
checks
- [x86] KVM: nVMX: Filter out all unsupported controls when eVMCS was
activated
- [x86] KVM: SEV: Update svm_vm_copy_asid_from for SEV-ES
- [x86] KVM: SEV: Pin guest memory for write for RECEIVE_UPDATE_DATA
- [x86] KVM: SEV: Acquire vcpu mutex when updating VMSA
- [x86] KVM: SEV: Allow some commands for mirror VM
- [x86] KVM: SVM: fix missing sev_decommission in sev_receive_start
- [x86] KVM: nVMX: Fix nested bus lock VM exit
- [x86] KVM: VMX: Fix a TSX_CTRL_CPUID_CLEAR field mask issue
- RDMA/cma: Do not change route.addr.src_addr.ss_family
- RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
- nbd: use shifts rather than multiplies
- drm/amd/display: initialize backlight_ramping_override to false
- drm/amd/display: Pass PCI deviceid into DC
- drm/amd/display: Fix Display Flicker on embedded panels
- drm/amdgpu: force exit gfxoff on sdma resume for rmb s0ix
- drm/amdgpu: check tiling flags when creating FB on GFX8-
- drm/amdgpu: correct initial cp_hqd_quantum for gfx9
- [amd64] drm/i915/gvt: fix the usage of ww lock in gvt scheduler.
- ipvs: check that ip_vs_conn_tab_bits is between 8 and 20
- bpf: Handle return value of BPF_PROG_TYPE_STRUCT_OPS prog
- IB/cma: Do not send IGMP leaves for sendonly Multicast groups
- RDMA/cma: Fix listener leak in rdma_cma_listen_on_all() failure
- netfilter: nf_tables: unlink table before deleting it
- netfilter: log: work around missing softdep backend module
- Revert "mac80211: do not use low data rates for data frames with no ack
flag"
- mac80211: Fix ieee80211_amsdu_aggregate frag_tail bug
- mac80211: limit injected vht mcs/nss in ieee80211_parse_tx_radiotap
- mac80211: mesh: fix potentially unaligned access
- mac80211-hwsim: fix late beacon hrtimer handling
- driver core: fw_devlink: Add support for
FWNODE_FLAG_NEEDS_CHILD_BOUND_ON_ADD
- net: mdiobus: Set FWNODE_FLAG_NEEDS_CHILD_BOUND_ON_ADD for mdiobus parents
- sctp: break out if skb_header_pointer returns NULL in sctp_rcv_ootb
- mptcp: don't return sockets in foreign netns
- mptcp: allow changing the 'backup' bit when no sockets are open
- [arm64] RDMA/hns: Work around broken constant propagation in gcc 8
- hwmon: (tmp421) report /PVLD condition as fault
- hwmon: (tmp421) fix rounding for negative values
- [arm64] net: enetc: fix the incorrect clearing of IF_MODE bits
- net: ipv4: Fix rtnexthop len when RTA_FLOW is present
- smsc95xx: fix stalled rx after link change
- [x86] drm/i915/request: fix early tracepoints
- [x86] drm/i915: Remove warning from the rps worker
- [arm64,armhf] dsa: mv88e6xxx: 6161: Use chip wide MAX MTU
- [arm64,armhf] dsa: mv88e6xxx: Fix MTU definition
- [arm64,armhf] dsa: mv88e6xxx: Include tagger overhead when setting MTU for
DSA and CPU ports
- e100: fix length calculation in e100_get_regs_len
- e100: fix buffer overrun in e100_get_regs
- [amd64] RDMA/hfi1: Fix kernel pointer leak
- [arm64] RDMA/hns: Fix the size setting error when copying CQE in
clean_cq()
- [arm64] RDMA/hns: Add the check of the CQE size of the user space
- bpf: Exempt CAP_BPF from checks against bpf_jit_limit
- [amd64] bpf, x86: Fix bpf mapping of atomic fetch implementation
- Revert "block, bfq: honor already-setup queue merges"
- scsi: csiostor: Add module softdep on cxgb4
- ixgbe: Fix NULL pointer dereference in ixgbe_xdp_setup
- [arm64] net: hns3: do not allow call hns3_nic_net_open repeatedly
- [arm64] net: hns3: remove tc enable checking
- [arm64] net: hns3: don't rollback when destroy mqprio fail
- [arm64] net: hns3: fix mixed flag HCLGE_FLAG_MQPRIO_ENABLE and
HCLGE_FLAG_DCB_ENABLE
- [arm64] net: hns3: fix show wrong state when add existing uc mac address
- [arm64] net: hns3: reconstruct function hns3_self_test
- [arm64] net: hns3: fix always enable rx vlan filter problem after selftest
- [arm64] net: hns3: disable firmware compatible features when uninstall PF
- [arm64,armhf] net: phy: bcm7xxx: Fixed indirect MMD operations
- net: sched: flower: protect fl_walk() with rcu
- net: stmmac: fix EEE init issue when paired with EEE capable PHYs
- af_unix: fix races in sk_peer_pid and sk_peer_cred accesses
- [x86] perf/x86/intel: Update event constraints for ICX
- sched/fair: Add ancestors of unthrottled undecayed cfs_rq
- sched/fair: Null terminate buffer when updating tunable_scaling
- [armhf] hwmon: (occ) Fix P10 VRM temp sensors
- [x86] kvm: fix objtool relocation warning
- nvme: add command id quirk for apple controllers
- elf: don't use MAP_FIXED_NOREPLACE for elf interpreter mappings
- driver core: fw_devlink: Improve handling of cyclic dependencies
- debugfs: debugfs_create_file_size(): use IS_ERR to check for error
- ext4: fix loff_t overflow in ext4_max_bitmap_size()
- ext4: fix reserved space counter leakage
- ext4: add error checking to ext4_ext_replay_set_iblocks()
- ext4: fix potential infinite loop in ext4_dx_readdir()
- ext4: flush s_error_work before journal destroy in ext4_fill_super
- HID: u2fzero: ignore incomplete packets without data (Closes: #994535)
- net: udp: annotate data race around udp_sk(sk)->corkflag
- usb: hso: remove the bailout parameter
- HID: betop: fix slab-out-of-bounds Write in betop_probe
- netfilter: ipset: Fix oversized kvmalloc() calls
- mm: don't allow oversized kvmalloc() calls
- HID: usbhid: free raw_report buffers in usbhid_stop
- [x86] crypto: aesni - xts_crypt() return if walk.nbytes is 0
- [x86] KVM: x86: Handle SRCU initialization failure during page track init
- netfilter: conntrack: serialize hash resizes and cleanups
- netfilter: nf_tables: Fix oversized kvmalloc() calls
- [amd64] HID: amd_sfh: Fix potential NULL pointer dereference - take 2
https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.11
- [arm64,armhf] spi: rockchip: handle zero length transfers without timing
out
- afs: Add missing vnode validation checks
- nfsd: back channel stuck in SEQ4_STATUS_CB_PATH_DOWN
- btrfs: replace BUG_ON() in btrfs_csum_one_bio() with proper error handling
- btrfs: fix mount failure due to past and transient device flush error
- net: mdio: introduce a shutdown method to mdio device drivers
- xen-netback: correct success/error reporting for the SKB-with-fraglist
case
- [sparc64] fix pci_iounmap() when CONFIG_PCI is not set
- scsi: sd: Free scsi_disk device via put_device()
- [arm*] usb: dwc2: check return value after calling platform_get_resource()
- Xen/gntdev: don't ignore kernel unmapping error
- swiotlb-xen: ensure to issue well-formed XENMEM_exchange requests
- nvme-fc: update hardware queues before using them
- nvme-fc: avoid race between time out and tear down
- [arm64] thermal/drivers/tsens: Fix wrong check for tzd in irq handlers
- scsi: ses: Retry failed Send/Receive Diagnostic commands
- [arm64,armhf] irqchip/gic: Work around broken Renesas integration
- smb3: correct smb3 ACL security descriptor
- [x86] insn, tools/x86: Fix undefined behavior due to potential unaligned
accesses
- io_uring: allow conditional reschedule for intensive iterators
- block: don't call rq_qos_ops->done_bio if the bio isn't tracked
- KVM: do not shrink halt_poll_ns below grow_start
- [x86] KVM: x86: reset pdptrs_from_userspace when exiting smm
- [x86] kvm: x86: Add AMD PMU MSRs to msrs_to_save_all[]
- [x86] KVM: x86: nSVM: restore int_vector in svm_clear_vintr
- [x86] perf/x86: Reset destroy callback on event init failure
- libata: Add ATA_HORKAGE_NO_NCQ_ON_ATI for Samsung 860 and 870 SSD.
- Revert "brcmfmac: use ISO3166 country code and 0 rev as fallback"
- [armhf] Revert "ARM: imx6q: drop of_platform_default_populate() from
init_machine"
https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.12
- usb: cdc-wdm: Fix check for WWAN
- [arm64,armhf] usb: chipidea: ci_hdrc_imx: Also search for 'phys' phandle
- usb: gadget: f_uac2: fixed EP-IN wMaxPacketSize
- USB: cdc-acm: fix racy tty buffer accesses
- USB: cdc-acm: fix break reporting
- usb: typec: tcpm: handle SRC_STARTUP state if cc changes
- [x86] usb: typec: tipd: Remove dependency on "connector" child fwnode
- drm/amdgpu: During s0ix don't wait to signal GFXOFF
- drm/nouveau/kms/tu102-: delay enabling cursor until after assign_windows
- drm/nouveau/ga102-: support ttm buffer moves via copy engine
- [x86] drm/i915: Fix runtime pm handling in i915_gem_shrink
- [x86] drm/i915: Extend the async flip VT-d w/a to skl/bxt
- xen/privcmd: fix error handling in mmap-resource processing
- [arm64] mmc: meson-gx: do not use memcpy_to/fromio for dram-access-quirk
- ovl: fix missing negative dentry check in ovl_rename()
- ovl: fix IOCB_DIRECT if underlying fs doesn't support direct IO
- nfsd: fix error handling of register_pernet_subsys() in init_nfsd()
- nfsd4: Handle the NFSv4 READDIR 'dircount' hint being zero
- SUNRPC: fix sign error causing rpcsec_gss drops
- xen/balloon: fix cancelled balloon action
- [armhf] dts: omap3430-sdp: Fix NAND device node
- scsi: ufs: core: Fix task management completion
- [riscv64] Flush current cpu icache before other cpus
- [armhf] bus: ti-sysc: Add break in switch statement in sysc_init_soc()
- iwlwifi: mvm: Fix possible NULL dereference
- [arm64] soc: qcom: mdt_loader: Drop PT_LOAD check on hash segment
- [armhf] dts: imx: Add missing pinctrl-names for panel on M53Menlo
- [armhf] dts: imx: Fix USB host power regulator polarity on M53Menlo
- [amd64] PCI: hv: Fix sleep while in non-sleep context when removing child
devices from the bus
- iwlwifi: pcie: add configuration of a Wi-Fi adapter on Dell XPS 15
- netfilter: conntrack: fix boot failure with nf_conntrack.enable_hooks=1
- netfilter: nf_tables: add position handle in event notification
- netfilter: nf_tables: reverse order in rule replacement expansion
- [armel,armhf] bpf, arm: Fix register clobbering in div/mod implementation
- [armhf] soc: ti: omap-prm: Fix external abort for am335x pruss
- bpf: Fix integer overflow in prealloc_elems_and_freelist()
(CVE-2021-41864)
- net/mlx5e: IPSEC RX, enable checksum complete
- net/mlx5e: Keep the value for maximum number of channels in-sync
- net/mlx5: E-Switch, Fix double allocation of acl flow counter
- net/mlx5: Force round second at 1PPS out start time
- net/mlx5: Avoid generating event after PPS out in Real time mode
- net/mlx5: Fix length of irq_index in chars
- net/mlx5: Fix setting number of EQs of SFs
- net/mlx5e: Fix the presented RQ index in PTP stats
- phy: mdio: fix memory leak
- net_sched: fix NULL deref in fifo_set_limit()
- [arm64] net: mscc: ocelot: fix VCAP filters remaining active after being
deleted
- [arm64,armhf] net: stmmac: dwmac-rk: Fix ethernet on rk3399 based devices
- [mips*] Revert "add support for buggy MT7621S core detection"
- netfilter: nf_tables: honor NLM_F_CREATE and NLM_F_EXCL in event
notification
- [i386] ptp_pch: Load module automatically if ID matches
- [armhf] dts: imx: change the spi-nor tx
- [arm64] dts: imx8: change the spi-nor tx
- [armhf] imx6: disable the GIC CPU interface before calling stby-poweroff
sequence
- [x86] drm/i915/audio: Use BIOS provided value for RKL HDA link
- [x86] drm/i915/jsl: Add W/A 1409054076 for JSL
- [x86] drm/i915/tc: Fix TypeC port init/resume time sanitization
- [x86] drm/i915/bdb: Fix version check
- netfs: Fix READ/WRITE confusion when calling iov_iter_xarray()
- afs: Fix afs_launder_page() to set correct start file position
- net: bridge: use nla_total_size_64bit() in br_get_linkxstats_size()
- net: bridge: fix under estimation in br_get_linkxstats_size()
- net/sched: sch_taprio: properly cancel timer from taprio_destroy()
- net: sfp: Fix typo in state machine debug string
- net: pcs: xpcs: fix incorrect CL37 AN sequence
- netlink: annotate data races around nlk->bound
- drm/amdgpu: handle the case of pci_channel_io_frozen only in
amdgpu_pci_resume
- [armhf] bus: ti-sysc: Use CLKDM_NOAUTO for dra7 dcan1 for errata i893
- [arm64,armhf] drm/sun4i: dw-hdmi: Fix HDMI PHY clock setup
- drm/nouveau: avoid a use-after-free when BO init fails
- drm/nouveau/kms/nv50-: fix file release memory leak
- drm/nouveau/debugfs: fix file release memory leak
- net: pcs: xpcs: fix incorrect steps on disable EEE
- net: stmmac: trigger PCS EEE to turn off on link down
- [amd64,arm64] gve: Correct available tx qpl check
- [amd64,arm64] gve: Avoid freeing NULL pointer
- [amd64,arm64] gve: Properly handle errors in gve_assign_qpl
- rtnetlink: fix if_nlmsg_stats_size() under estimation
- [amd64,arm64] gve: fix gve_get_stats()
- [amd64,arm64] gve: report 64bit tx_bytes counter from
gve_handle_report_stats()
- i40e: fix endless loop under rtnl
- i40e: Fix freeing of uninitialized misc IRQ vector
- iavf: fix double unlock of crit_lock
- net: prefer socket bound to interface when not in VRF
- [powerpc*] iommu: Report the correct most efficient DMA mask for PCI
devices
- i2c: acpi: fix resource leak in reconfiguration device addition
- [riscv64] explicitly use symbol offsets for VDSO
- [riscv64] vdso: Refactor asm/vdso.h
- [riscv64] vdso: Move vdso data page up front
- [riscv64] vdso: make arch_setup_additional_pages wait for mmap_sem for
write killable
- [s390x] bpf, s390: Fix potential memory leak about jit_data
- [riscv64] Include clone3() on rv32
- scsi: iscsi: Fix iscsi_task use after free
- [powerpc*] bpf: Fix BPF_MOD when imm == 1
- [powerpc*] bpf: Fix BPF_SUB when imm == 0x80000000
- [powerpc*] 64s: fix program check interrupt emergency stack path
- [powerpc*] traps: do not enable irqs in _exception
- [powerpc*] 64s: Fix unrecoverable MCE calling async handler from NMI
- [powerpc*] pseries/eeh: Fix the kdump kernel crash during eeh_pseries_init
- [i386] x86/platform/olpc: Correct ifdef symbol to intended
CONFIG_OLPC_XO15_SCI
- [x86] fpu: Restore the masking out of reserved MXCSR bits
- [x86] entry: Correct reference to intended CONFIG_64_BIT
- [x86] hpet: Use another crystalball to evaluate HPET usability
- [arm64,armhf] dsa: tag_dsa: Fix mask for trunked packets
.
[ Ben Hutchings ]
* debian/.gitignore: Ignore debian/tests/control again
* integrity: Drop "MODSIGN: load blacklist from MOKx" as redundant after 5.13
* tools/perf: Fix warning introduced by "tools/perf: pmu-events: Fix
reproducibility"
* debian/rules.real: Stop invoking obsolete headers_check target
* libcpupower: Update symbols file for changes in 5.13.9-1~exp1
.
[ John Paul Adrian Glaubitz ]
* [alpha] Re-enable CONFIG_EISA which was disabled upstream by accident
.
[ Salvatore Bonaccorso ]
* Bump ABI to 3
* mm/secretmem: Fix NULL page->mapping dereference in page_is_secretmem()
(Closes: #996175)
.
[ Aurelien Jarno ]
* [riscv64] Improve HiFive Unmatched support: enable SENSORS_LM90.
Checksums-Sha1:
ceef25b2b4e4ea41d72c68e10412d9df2e645fa0 207353 linux_5.15.5-2~bpo11+1.dsc
562ad1a9902ff0e907fe9a9e90e95d1318a23fe5 1296300 linux_5.15.5-2~bpo11+1.debian.tar.xz
f0928dd4513a5ba181bafd87807665037367fce0 5924 linux_5.15.5-2~bpo11+1_source.buildinfo
Checksums-Sha256:
238e122442f2d1c8402a2305d7003a545b9e0a36dae1f0b3584905cdaba6b83c 207353 linux_5.15.5-2~bpo11+1.dsc
e581657ffe232e98dd9a28ec3d823e0b96f4b7b0c1a654b95234ab707229664e 1296300 linux_5.15.5-2~bpo11+1.debian.tar.xz
2e4279bcf72d39f3069c8e5a594f0b7f5d2aa75d03232bee51ace15e479e97df 5924 linux_5.15.5-2~bpo11+1_source.buildinfo
Files:
18f858602fc772aa0e8344bee247c121 207353 kernel optional linux_5.15.5-2~bpo11+1.dsc
b912049d821284876e00b3d52dec190d 1296300 kernel optional linux_5.15.5-2~bpo11+1.debian.tar.xz
894be248ca4599a70b165b5b1da5d92e 5924 kernel optional linux_5.15.5-2~bpo11+1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=wQr8
-----END PGP SIGNATURE-----
Reply to: