Accepted linux 5.10.46-1 (source) into unstable, unstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Thu, 24 Jun 2021 14:11:37 +0200
Source: linux
Architecture: source
Version: 5.10.46-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Kernel Team <debian-kernel@lists.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Closes: 982270 987361 987365 989451 990008
Changes:
linux (5.10.46-1) unstable; urgency=medium
.
* New upstream stable update:
https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.41
- context_tracking: Move guest exit context tracking to separate helpers
- context_tracking: Move guest exit vtime accounting to separate helpers
- [x86] KVM: Defer vtime accounting 'til after IRQ handling
https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.42
- ALSA: hda/realtek: the bass speaker can't output sound on Yoga 9i
- ALSA: hda/realtek: Headphone volume is controlled by Front mixer
- ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation P340
- ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP Zbook G8
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP Zbook Fury 15
G8
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP Zbook Fury 17
G8
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
- ALSA: usb-audio: scarlett2: Improve driver startup messages
- cifs: set server->cipher_type to AES-128-CCM for SMB3.0
- NFSv4: Fix a NULL pointer dereference in pnfs_mark_matching_lsegs_return()
- iommu/vt-d: Fix sysfs leak in alloc_iommu()
- proc: Check /proc/$pid/attr/ writes against file opener
- net: hso: fix control-request directions
- net/sched: fq_pie: re-factor fix for fq_pie endless loop
- net/sched: fq_pie: fix OOB access in the traffic path
- netfilter: nft_set_pipapo_avx2: Add irq_fpu_usable() check, fallback to
non-AVX2 version
- mac80211: assure all fragments are encrypted (CVE-2020-26147)
- mac80211: prevent mixed key and fragment cache attacks (CVE-2020-24586,
CVE-2020-24587)
- mac80211: properly handle A-MSDUs that start with an RFC 1042 header
- cfg80211: mitigate A-MSDU aggregation attacks (CVE-2020-24588)
- mac80211: drop A-MSDUs on old ciphers (CVE-2020-24588)
- mac80211: add fragment cache to sta_info
- mac80211: check defrag PN against current frame
- mac80211: prevent attacks on TKIP/WEP as well
- mac80211: do not accept/forward invalid EAPOL frames (CVE-2020-26139)
- mac80211: extend protection against mixed key and fragment cache attacks
(CVE-2020-24586, CVE-2020-24587)
- ath10k: add CCMP PN replay protection for fragmented frames for PCIe
- ath10k: drop fragments with multicast DA for PCIe (CVE-2020-26145)
- ath10k: drop fragments with multicast DA for SDIO (CVE-2020-26145)
- ath10k: drop MPDU which has discard flag set by firmware for SDIO
(CVE-2020-24588)
- ath10k: Fix TKIP Michael MIC verification for PCIe (CVE-2020-26141)
- ath10k: Validate first subframe of A-MSDU before processing the list
- ath11k: Clear the fragment cache during key install (CVE-2020-24587)
- dm snapshot: properly fix a crash when an origin has no snapshots
- drm/amdgpu/vcn1: add cancel_delayed_work_sync before power gate
- [amd64] drm/amdkfd: correct sienna_cichlid SDMA RLC register offset error
- drm/amdgpu/vcn2.0: add cancel_delayed_work_sync before power gate
- drm/amdgpu/vcn2.5: add cancel_delayed_work_sync before power gate
- drm/amdgpu/jpeg2.0: add cancel_delayed_work_sync before power gate
- Documentation: seccomp: Fix user notification documentation
- seccomp: Refactor notification handler to prepare for new semantics
- serial: core: fix suspicious security_locked_down() call
- misc/uss720: fix memory leak in uss720_probe
- [x86] thunderbolt: usb4: Fix NVM read buffer bounds and offset issue
- [x86] thunderbolt: dma_port: Fix NVM read buffer bounds and offset issue
- [x86] KVM: Fix vCPU preempted state from guest's point of view
- [arm64] KVM: Prevent mixed-width VM creation
- [x86] mei: request autosuspend after sending rx flow control
- iio: gyro: fxas21002c: balance runtime power in error path
- iio: dac: ad5770r: Put fwnode in error case during ->probe()
- iio: adc: ad7768-1: Fix too small buffer passed to
iio_push_to_buffers_with_timestamp()
- iio: adc: ad7124: Fix missbalanced regulator enable / disable on error.
- iio: adc: ad7124: Fix potential overflow due to non sequential channel
numbers
- iio: adc: ad7923: Fix undersized rx buffer.
- iio: adc: ad7793: Add missing error code in ad7793_setup()
- iio: adc: ad7192: Avoid disabling a clock that was never enabled.
- iio: adc: ad7192: handle regulator voltage error first
- serial: 8250: Add UART_BUG_TXRACE workaround for Aspeed VUART
- serial: 8250_dw: Add device HID for new AMD UART controller
- serial: 8250_pci: Add support for new HPE serial device
- serial: 8250_pci: handle FL_NOIRQ board flag
- USB: trancevibrator: fix control-request direction
- Revert "irqbypass: do not start cons/prod when failed connect"
- USB: usbfs: Don't WARN about excessively large memory allocations
- drivers: base: Fix device link removal
- [arm64,armhf] serial: tegra: Fix a mask operation that is always true
- serial: rp2: use 'request_firmware' instead of 'request_firmware_nowait'
- USB: serial: ti_usb_3410_5052: add startech.com device id
- USB: serial: option: add Telit LE910-S1 compositions 0x7010, 0x7011
- USB: serial: ftdi_sio: add IDs for IDS GmbH Products
- USB: serial: pl2303: add device id for ADLINK ND-6530 GC
- [x86] thermal/drivers/intel: Initialize RW trip to THERMAL_TEMP_INVALID
- [arm64,armhf] usb: dwc3: gadget: Properly track pending and queued SG
- [arm64,x86] usb: typec: mux: Fix matching with typec_altmode_desc
- net: usb: fix memory leak in smsc75xx_bind
- Bluetooth: cmtp: fix file refcount when cmtp_attach_device fails
- fs/nfs: Use fatal_signal_pending instead of signal_pending
- NFS: fix an incorrect limit in filelayout_decode_layout()
- NFS: Fix an Oopsable condition in __nfs_pageio_add_request()
- NFS: Don't corrupt the value of pg_bytes_written in nfs_do_recoalesce()
- NFSv4: Fix v4.0/v4.1 SEEK_DATA return -ENOTSUPP when set NFS_V4_2 config
- [arm64] drm/meson: fix shutdown crash when component not probed
- net/mlx5e: reset XPS on error flow if netdev isn't registered yet
- net/mlx5e: Fix multipath lag activation
- net/mlx5e: Fix error path of updating netdev queues
- {net,vdpa}/mlx5: Configure interface MAC into mpfs L2 table
- net/mlx5e: Fix nullptr in add_vlan_push_action()
- net/mlx5: Set reformat action when needed for termination rules
- net/mlx5e: Fix null deref accessing lag dev
- net/mlx4: Fix EEPROM dump support
- net/mlx5: Set term table as an unmanaged flow table
- SUNRPC in case of backlog, hand free slots directly to waiting task
- Revert "net:tipc: Fix a double free in tipc_sk_mcast_rcv"
- tipc: wait and exit until all work queues are done
- tipc: skb_linearize the head skb when reassembling msgs
- [arm64] spi: spi-fsl-dspi: Fix a resource leak in an error handling path
- netfilter: flowtable: Remove redundant hw refresh bit
- [arm64,armhf] net: dsa: fix a crash if ->get_sset_count() fails
- [armhf] i2c: s3c2410: fix possible NULL pointer deref on read message
after write
- [x86] i2c: i801: Don't generate an interrupt on bus reset
- afs: Fix the nlink handling of dir-over-dir rename
- nvmet-tcp: fix inline data size comparison in nvmet_tcp_queue_response
- [x86] platform/x86: hp_accel: Avoid invoking _INI to speed up resume
- [arm64] Revert "crypto: cavium/nitrox - add an error message to explain
the failure of pci_request_mem_regions"
- Revert "media: usb: gspca: add a missed check for goto_low_power"
- [i386] Revert "ALSA: sb: fix a missing check of snd_ctl_add"
- Revert "net: fujitsu: fix a potential NULL pointer dereference"
- net: fujitsu: fix potential null-ptr-deref
- Revert "net/smc: fix a NULL pointer dereference"
- net/smc: properly handle workqueue allocation failure
- [x86] Revert "char: hpet: fix a missing check of ioremap"
- [x86] char: hpet: add checks after calling ioremap
- [i386] Revert "ALSA: gus: add a check of the status of snd_ctl_add"
- Revert "isdn: mISDNinfineon: fix potential NULL pointer dereference"
- isdn: mISDNinfineon: check/cleanup ioremap failure correctly in setup_io
- Revert "ath6kl: return error code in ath6kl_wmi_set_roam_lrssi_cmd()"
- ath6kl: return error code in ath6kl_wmi_set_roam_lrssi_cmd()
- Revert "isdn: mISDN: Fix potential NULL pointer dereference of kzalloc"
- isdn: mISDN: correctly handle ph_info allocation failure in
hfcsusb_ph_info
- [arm64] Revert "dmaengine: qcom_hidma: Check for driver register failure"
- [arm64] dmaengine: qcom_hidma: comment platform_driver_register call
- Revert "libertas: add checks for the return value of sysfs_create_group"
- libertas: register sysfs groups properly
- Revert "media: dvb: Add check on sp8870_readreg"
- media: dvb: Add check on sp8870_readreg return
- Revert "media: gspca: mt9m111: Check write_bridge for timeout"
- media: gspca: mt9m111: Check write_bridge for timeout
- Revert "media: gspca: Check the return value of write_bridge for timeout"
- media: gspca: properly check for errors in po1030_probe()
- Revert "net: liquidio: fix a NULL pointer dereference"
- net: liquidio: Add missing null pointer checks
- Revert "brcmfmac: add a check for the status of usb_register"
- brcmfmac: properly check for bus register errors
- btrfs: return whole extents in fiemap
- [powerpc,x86] scsi: BusLogic: Fix 64-bit system enumeration error for
Buslogic
- scsi: pm80xx: Fix drives missing during rmmod/insmod loop
- btrfs: release path before starting transaction when cloning inline extent
- btrfs: do not BUG_ON in link_to_fixup_dir
- [x86] platform/x86: hp-wireless: add AMD's hardware id to the supported
list
- SMB3: incorrect file id in requests compounded with open
- drm/amd/amdgpu: fix refcount leak
- drm/amdgpu: Fix a use-after-free
- drm/amd/amdgpu: fix a potential deadlock in gpu reset
- drm/amdgpu: stop touching sched.ready in the backend
- block: fix a race between del_gendisk and BLKRRPART
- linux/bits.h: fix compilation error with GENMASK
- [arm64,armhf] net: dsa: fix error code getting shifted with 4 in
dsa_slave_get_sset_count
- net: stmmac: Fix MAC WoL not working if PHY does not support WoL
- spi: Assume GPIO CS active high in ACPI case
- net: really orphan skbs tied to closing sk
- net: packetmmap: fix only tx timestamp on request
- [arm64,armhf] net: fec: fix the potential memory leak in fec_enet_init()
- [arm64] net: mdio: thunder: Fix a double free issue in the .remove
function
- [mips64el,mipsel] net: mdio: octeon: Fix some double free issues
- cxgb4/ch_ktls: Clear resources when pf4 device is removed
- openvswitch: meter: fix race when getting now_ms.
- net: sched: fix packet stuck problem for lockless qdisc
- net: sched: fix tx action rescheduling issue during deactivation
- net: sched: fix tx action reschedule issue with stopped queue
- net: hso: check for allocation failure in hso_create_bulk_serial_device()
- net: bnx2: Fix error return code in bnx2_init_board()
- bnxt_en: Include new P5 HV definition in VF check.
- bnxt_en: Fix context memory setup for 64K page size.
- mld: fix panic in mld_newpack()
- net/smc: remove device from smcd_dev_list after failed device_add()
- [amd64] gve: Check TX QPL was actually assigned
- [amd64] gve: Update mgmt_msix_idx if num_ntfy changes
- [amd64] gve: Add NULL pointer checks when freeing irqs.
- [amd64] gve: Upgrade memory barrier in poll routine
- [amd64] gve: Correct SKB queue index validation.
- [arm64] net: hns3: fix incorrect resp_msg issue
- [arm64] net: hns3: put off calling register_netdev() until client
initialize complete
- [amd64] iommu/vt-d: Use user privilege for RID2PASID translation
- cxgb4: avoid accessing registers when clearing filters
- bpf, offload: Reorder offload callback 'prepare' in verifier
- bpf: Set mac_len in bpf_skb_change_head
- ixgbe: fix large MTU request from VF
- [arm64] ASoC: qcom: lpass-cpu: Use optional clk APIs
- scsi: libsas: Use _safe() loop in sas_resume_port()
- ipv6: record frag_max_size in atomic fragments in input path
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create() can be
static
- sch_dsmark: fix a NULL deref in qdisc_reset()
- net: zero-initialize tc skb extension on allocation
- [arm64,armhf] net: mvpp2: add buffer header handling in RX
- [x86] i915: fix build warning in intel_dp_get_link_status()
- [arm64] net: hns3: check the return of skb_checksum_help()
- bpftool: Add sock_release help info for cgroup attach/prog load command
- SUNRPC: More fixes for backlog congestion
- net: hso: bail out on interrupt URB allocation failure
- neighbour: Prevent Race condition in neighbour subsytem
- usb: core: reduce power-on-good delay time of root hub
https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.43
- btrfs: tree-checker: do not error out if extent ref hash doesn't match
- net: usb: cdc_ncm: don't spew notifications (Closes: #989451)
- [x86] hwmon: (dell-smm-hwmon) Fix index values
- netfilter: conntrack: unregister ipv4 sockopts on error unwind
- efi/fdt: fix panic when no valid fdt found
- efi: Allow EFI_MEMORY_XP and EFI_MEMORY_RO both to be cleared
- efi/libstub: prevent read overflow in find_file_option()
- [arm64,x86] efi: cper: fix snprintf() use in cper_dimm_err_location()
- vfio/pci: Fix error return code in vfio_ecap_init()
- ipvs: ignore IP_VS_SVC_F_HASHED flag when adding service
- HID: logitech-hidpp: initialize level variable
- HID: pidff: fix error return code in hid_pidff_init()
- [arm64,x86] HID: i2c-hid: fix format string mismatch
- devlink: Correct VIRTUAL port to not have phys_port attributes
- net/sched: act_ct: Offload connections with commit action
- net/sched: act_ct: Fix ct template allocation for zone 0
- nvme-rdma: fix in-casule data send for chained sgls
- ACPICA: Clean up context mutex during object deletion
- perf probe: Fix NULL pointer dereference in convert_variable_location()
- net: sock: fix in-kernel mark setting
- net/mlx5e: Fix incompatible casting
- net/mlx5: Check firmware sync reset requested is set before trying to
abort it
- net/mlx5e: Check for needed capability for cvlan matching
- net/mlx5: DR, Create multi-destination flow table with level less than 64
- nvmet: fix freeing unallocated p2pmem
- netfilter: nft_ct: skip expectations for confirmed conntrack
- netfilter: nfnetlink_cthelper: hit EBUSY on updates if size mismatches
- bpf: Simplify cases in bpf_base_func_proto
- bpf, lockdown, audit: Fix buggy SELinux lockdown permission checks
- ieee802154: fix error return code in ieee802154_add_iface()
- ieee802154: fix error return code in ieee802154_llsec_getparams()
- igb: add correct exception tracing for XDP
- ixgbevf: add correct exception tracing for XDP
- cxgb4: fix regression with HASH tc prio value update
- ipv6: Fix KASAN: slab-out-of-bounds Read in fib6_nh_flush_exceptions
- ice: Fix allowing VF to request more/less queues via virtchnl
- ice: Fix VFR issues for AVF drivers that expect ATQLEN cleared
- ice: handle the VF VSI rebuild failure
- ice: report supported and advertised autoneg using PHY capabilities
- ice: Allow all LLDP packets from PF to Tx
- cxgb4: avoid link re-train during TC-MQPRIO configuration
- i40e: optimize for XDP_REDIRECT in xsk path
- i40e: add correct exception tracing for XDP
- ice: simplify ice_run_xdp
- ice: optimize for XDP_REDIRECT in xsk path
- ice: add correct exception tracing for XDP
- ixgbe: optimize for XDP_REDIRECT in xsk path
- ixgbe: add correct exception tracing for XDP
- [arm64] optee: use export_uuid() to copy client UUID
- [armhf] bus: ti-sysc: Fix am335x resume hang for usb otg module
- [arm64] dts: freescale: sl28: var4: fix RGMII clock and voltage
- [armhf] bus: ti-sysc: Fix flakey idling of uarts and stop using
swsup_sidle_act
- tipc: add extack messages for bearer/media failure
- tipc: fix unique bearer names sanity check
- [armhf] serial: stm32: fix threaded interrupt handling
- io_uring: fix link timeout refs
- io_uring: use better types for cflags
- drm/amdgpu/vcn3: add cancel_delayed_work_sync before power gate
- drm/amdgpu/jpeg2.5: add cancel_delayed_work_sync before power gate
- drm/amdgpu/jpeg3: add cancel_delayed_work_sync before power gate
- Bluetooth: fix the erroneous flush_work() order (CVE-2021-3564)
- Bluetooth: use correct lock to prevent UAF of hdev object (CVE-2021-3573)
- wireguard: do not use -O3
- wireguard: peer: allocate in kmem_cache
- wireguard: use synchronize_net rather than synchronize_rcu
- wireguard: allowedips: initialize list head in selftest
- wireguard: allowedips: remove nodes in O(1)
- wireguard: allowedips: allocate nodes in kmem_cache
- wireguard: allowedips: free empty intermediate nodes when removing single
node
- [arm64,x86] HID: i2c-hid: Skip ELAN power-on command after reset
- HID: magicmouse: fix NULL-deref on disconnect
- HID: multitouch: require Finger field to mark Win8 reports as MT
- gfs2: fix scheduling while atomic bug in glocks
- ALSA: timer: Fix master timer notification
- ALSA: hda: Fix for mute key LED for HP Pavilion 15-CK0xx
- ALSA: hda: update the power_state during the direct-complete
- ext4: fix memory leak in ext4_fill_super
- ext4: fix bug on in ext4_es_cache_extent as ext4_split_extent_at failed
- ext4: fix fast commit alignment issues
- ext4: fix memory leak in ext4_mb_init_backend on error path.
- ext4: fix accessing uninit percpu counter variable with fast_commit
- [arm*] usb: dwc2: Fix build in periphal-only mode
- pid: take a reference when initializing `cad_pid`
- ocfs2: fix data corruption by fallocate
- mm/page_alloc: fix counting of free pages after take off from buddy
- [x86] cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
update_pasid()
- nfc: fix NULL ptr dereference in llcp_sock_getname() after failed connect
(CVE-2021-3587)
- drm/amdgpu: Don't query CE and UE errors
- drm/amdgpu: make sure we unpin the UVD BO
- [x86] apic: Mark _all_ legacy interrupts when IO/APIC is missing
- [powerpc] kprobes: Fix validation of prefixed instructions across page
boundary
- btrfs: mark ordered extent and inode with error if we fail to finish
- btrfs: fix error handling in btrfs_del_csums
- btrfs: return errors from btrfs_del_csums in cleanup_ref_head
- btrfs: fixup error handling in fixup_inode_link_counts
- btrfs: abort in rename_exchange if we fail to insert the second ref
- btrfs: fix deadlock when cloning inline extents and low on available space
- mm, hugetlb: fix simple resv_huge_pages underflow on UFFDIO_COPY
- [arm64] drm/msm/dpu: always use mdp device to scale bandwidth
- btrfs: fix unmountable seed device after fstrim
- [x86] KVM: SVM: Truncate GPR value for DR and CR accesses in !64-bit mode
- [arm64] KVM: Fix debug register indexing
- [x86] kvm: Teardown PV features on boot CPU as well
- [x86] kvm: Disable kvmclock on all CPUs on shutdown
- [x86] kvm: Disable all PV features on crash
- lib/lz4: explicitly support in-place decompression
- netfilter: nf_tables: missing error reporting for not selected expressions
- xen-netback: take a reference to the RX task thread (CVE-2021-28691)
- neighbour: allow NUD_NOARP entries to be forced GCed
https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.44
- proc: Track /proc/$pid/attr/ opener mm_struct
- [amd64] ASoC: amd: fix for pcm_read() error
- spi: Fix spi device unregister flow
- bpf: Forbid trampoline attach for functions with variable arguments
- net/nfc/rawsock.c: fix a permission check bug
- [x86] ASoC: Intel: bytcr_rt5640: Add quirk for the Glavey TM800A550L
tablet
- [x86] ASoC: Intel: bytcr_rt5640: Add quirk for the Lenovo Miix 3-830
tablet
- [arm64,armhf] usb: chipidea: udc: assign interrupt number to USB gadget
structure
- bonding: init notify_work earlier to avoid uninitialized use
- netlink: disable IRQs for netlink_lock_table()
- net: mdiobus: get rid of a BUG_ON()
- cgroup: disable controllers at parse time
- wq: handle VM suspension in stall detection
- net/qla3xxx: fix schedule while atomic in ql_sem_spinlock
- RDS tcp loopback connection can hang
- net:sfc: fix non-freed irq in legacy irq mode
- scsi: bnx2fc: Return failure if io_req is already in ABTS processing
- [x86] scsi: vmw_pvscsi: Set correct residual data length
- [arm64] scsi: hisi_sas: Drop free_irq() of devm_request_irq() allocated
irq
- scsi: target: qla2xxx: Wait for stop_phase1 at WWN removal
- net: macb: ensure the device is available before accessing GEMGXL control
registers
- nvme-fabrics: decode host pathing error for connect
- dm verity: fix require_signatures module_param permissions
- bnx2x: Fix missing error code in bnx2x_iov_init_one()
- nvmet: fix false keep-alive timeout when a controller is torn down
- spi: Don't have controller clean up spi device before driver unbind
- spi: Cleanup on failure of initial setup
- [powerpc] i2c: mpc: Make use of i2c_recover_bus()
- [powerpc] i2c: mpc: implement erratum A-004447 workaround
- ALSA: seq: Fix race of snd_seq_timer_open()
- ALSA: firewire-lib: fix the context to call snd_pcm_stop_xrun()
- ALSA: hda/realtek: headphone and mic don't work on an Acer laptop
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP Elite
Dragonfly G2
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP EliteBook x360
1040 G8
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840 Aero G8
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
- [arm*] spi: bcm2835: Fix out-of-bounds access with more than 4 slaves
- Revert "ACPI: sleep: Put the FACS table after using it"
- drm: Fix use-after-free read in drm_getunique()
- drm: Lock pointer access in drm_master_release()
- [x86] perf/x86/intel/uncore: Fix M2M event umask for Ice Lake server
- [x86] KVM: X86: MMU: Use the correct inherited permissions to get shadow
page
- kvm: avoid speculation-based attacks from out-of-range memslot accesses
- [arm64,x86] staging: rtl8723bs: Fix uninitialized variables
- async_xor: check src_offs is not NULL before updating it
- btrfs: return value from btrfs_mark_extent_written() in case of error
- btrfs: promote debugging asserts to full-fledged checks in validate_super
- cgroup1: don't allow '\n' in renaming
- ftrace: Do not blindly read the ip address in ftrace_bug()
- USB: f_ncm: ncm_bitrate (speed) is unsigned
- usb: f_ncm: only first packet of aggregate needs to start timer
- usb: pd: Set PD_T_SINK_WAIT_CAP to 310ms
- [arm64,armhf] usb: dwc3-meson-g12a: fix usb2 PHY glue init when phy0 is
disabled
- [arm64,armhf] usb: dwc3: meson-g12a: Disable the regulator in the error
handling path of the probe
- [arm64,armhf] usb: dwc3: gadget: Bail from dwc3_gadget_exit() if
dwc->gadget is NULL
- [arm64,armhf] usb: dwc3: ep0: fix NULL pointer exception
- [arm64,armhf] usb: musb: fix MUSB_QUIRK_B_DISCONNECT_99 handling
- usb: typec: ucsi: Clear PPM capability data in ucsi_init() error path
- usb: gadget: f_fs: Ensure io_completion_wq is idle during unbind
- USB: serial: ftdi_sio: add NovaTech OrionMX product ID
- USB: serial: omninet: add device id for Zyxel Omni 56K Plus
- USB: serial: quatech2: fix control-request directions
- USB: serial: cp210x: fix alternate function for CP2102N QFN20
- usb: gadget: eem: fix wrong eem header operation
- usb: fix various gadgets null ptr deref on 10gbps cabling.
- usb: fix various gadget panics on 10gbps cabling
- usb: typec: tcpm: cancel vdm and state machine hrtimer when unregister
tcpm port
- usb: typec: tcpm: cancel frs hrtimer when unregister tcpm port
- regulator: core: resolve supply for boot-on/always-on regulators
- [arm64] regulator: max77620: Use device_set_of_node_from_dev()
- regulator: bd71828: Fix .n_voltages settings
- [arm64,armhf] usb: dwc3: gadget: Disable gadget IRQ during pullup disable
- usb: typec: mux: Fix copy-paste mistake in typec_mux_match
- [arm64] drm/msm/a6xx: fix incorrectly set uavflagprd_inv field for A650
- [arm64] drm/msm/a6xx: update/fix CP_PROTECT initialization
- [arm64] drm/msm/a6xx: avoid shadow NULL reference in failure path
- RDMA/ipoib: Fix warning caused by destroying non-initial netns
- RDMA/mlx4: Do not map the core_clock page to user space unless enabled
- ASoC: core: Fix Null-point-dereference in fmt_single_name()
- perf: Fix data race between pin_count increment/decrement
- sched/fair: Keep load_avg and load_sum synced
- sched/fair: Make sure to update tg contrib for blocked load
- sched/fair: Fix util_est UTIL_AVG_UNCHANGED handling
- [x86] nmi_watchdog: Fix old-style NMI watchdog regression on old Intel
CPUs
- [x86] KVM: x86: Ensure liveliness of nested VM-Enter fail tracepoint
message
- IB/mlx5: Fix initializing CQ fragments buffer
- NFS: Fix a potential NULL dereference in nfs_get_client()
- NFSv4: Fix deadlock between nfs4_evict_inode() and
nfs4_opendata_get_inode()
- kvm: fix previous commit for 32-bit builds
- NFS: Fix use-after-free in nfs4_init_client()
- NFSv4: Fix second deadlock in nfs4_evict_inode()
- NFSv4: nfs4_proc_set_acl needs to restore NFS_CAP_UIDGID_NOMAP on error.
- scsi: core: Fix error handling of scsi_host_alloc()
- scsi: core: Fix failure handling of scsi_add_host_with_dma()
- scsi: core: Put .shost_dev in failure path if host state changes to
RUNNING
- scsi: core: Only put parent device if host state differs from
SHOST_CREATED
- tracing: Correct the length check which causes memory corruption
- proc: only require mm_struct for writing
https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.45
- net: ieee802154: fix null deref in parse dev addr
- HID: quirks: Set INCREMENT_USAGE_ON_DUPLICATE for Saitek X65
- HID: a4tech: use A4_2WHEEL_MOUSE_HACK_B8 for A4TECH NB-95
- HID: hid-input: add mapping for emoji picker key
- HID: hid-sensor-hub: Return error for hid_set_field() failure
- HID: quirks: Add quirk for Lenovo optical mouse
- HID: multitouch: set Stylus suffix for Stylus-application devices, too
- HID: Add BUS_VIRTUAL to hid_connect logging
- HID: usbhid: fix info leak in hid_submit_ctrl
- [arm64,armhf] drm/tegra: sor: Do not leak runtime PM reference
- [arm64,armhf] gpu: host1x: Split up client initalization and registration
- [arm64,armhf] drm/tegra: sor: Fully initialize SOR before registration
- gfs2: Prevent direct-I/O write fallback errors from getting lost
- gfs2: fix a deadlock on withdraw-during-mount
- HID: gt683r: add missing MODULE_DEVICE_TABLE
- gfs2: Fix use-after-free in gfs2_glock_shrink_scan
- scsi: target: core: Fix warning on realtime kernels
- ethernet: myri10ge: Fix missing error code in myri10ge_probe()
- scsi: qedf: Do not put host in qedf_vport_create() unconditionally
- Bluetooth: Add a new USB ID for RTL8822CE
- scsi: scsi_devinfo: Add blacklist entry for HPE OPEN-V
- net: ipconfig: Don't override command-line hostnames or domains
- drm/amd/display: Allow bandwidth validation for 0 streams.
- drm/amdgpu: refine amdgpu_fru_get_product_info
- drm/amd/display: Fix potential memory leak in DMUB hw_init
- drm/amd/amdgpu:save psp ring wptr to avoid attack
- rtnetlink: Fix missing error code in rtnl_bridge_notify()
- net: Return the correct errno code
- fib: Return the correct errno code
https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.46
- afs: Fix an IS_ERR() vs NULL check
- mm/memory-failure: make sure wait for page writeback in memory_failure
- [x86] kvm: LAPIC: Restore guard to prevent illegal APIC register access
- fanotify: fix copy_event_to_user() fid error clean up
- batman-adv: Avoid WARN_ON timing related checks
- mac80211: fix skb length check in ieee80211_scan_rx()
- net: ipv4: fix memory leak in netlbl_cipsov4_add_std
- vrf: fix maximum MTU
- net: rds: fix memory leak in rds_recvmsg
- [arm64] net: dsa: felix: re-enable TX flow control in ocelot_port_flush()
- netfilter: nft_fib_ipv6: skip ipv6 packets from any to link-local
- ice: add ndo_bpf callback for safe mode netdev ops
- ice: parameterize functions responsible for Tx ring management
- udp: fix race between close() and udp_abort()
- rtnetlink: Fix regression in bridge VLAN configuration
- net/sched: act_ct: handle DNAT tuple collision
- net/mlx5e: Fix page reclaim for dead peer hairpin
- net/mlx5: Consider RoCE cap before init RDMA resources
- net/mlx5: DR, Allow SW steering for sw_owner_v2 devices
- net/mlx5: DR, Don't use SW steering when RoCE is not supported
- net/mlx5e: Block offload of outer header csum for UDP tunnels
- netfilter: synproxy: Fix out of bounds when parsing TCP options
- sch_cake: Fix out of bounds when parsing TCP options and header
- alx: Fix an error handling path in 'alx_probe()'
- cxgb4: fix endianness when flashing boot image
- cxgb4: fix sleep in atomic when flashing PHY firmware
- cxgb4: halt chip before flashing PHY firmware image
- net: make get_net_ns return error if NET_NS is disabled
- ethtool: strset: fix message length calculation
- qlcnic: Fix an error handling path in 'qlcnic_probe()'
- netxen_nic: Fix an error handling path in 'netxen_nic_probe()'
- cxgb4: fix wrong ethtool n-tuple rule lookup
- ipv4: Fix device used for dst_alloc with local routes
- net: qrtr: fix OOB Read in qrtr_endpoint_post
- bpf: Fix leakage under speculation on mispredicted branches
(CVE-2021-33624)
- ptp: improve max_adj check against unreasonable values
- net: cdc_ncm: switch to eth%d interface naming
- net: usb: fix possible use-after-free in smsc75xx_bind
- [arm64,armhf] net: fec_ptp: fix issue caused by refactor the fec_devtype
- net: ipv4: fix memory leak in ip_mc_add1_src
- net/af_unix: fix a data-race in unix_dgram_sendmsg / unix_release_sock
- net/mlx5: E-Switch, Read PF mac address
- net/mlx5: E-Switch, Allow setting GUID for host PF vport
- net/mlx5: Reset mkey index on creation
- be2net: Fix an error handling path in 'be_probe()'
- net: hamradio: fix memory leak in mkiss_close
- net: cdc_eem: fix tx fixup skb leak
- cxgb4: fix wrong shift.
- bnxt_en: Rediscover PHY capabilities after firmware reset
- bnxt_en: Fix TQM fastpath ring backing store computation
- bnxt_en: Call bnxt_ethtool_free() in bnxt_init_one() error path
- icmp: don't send out ICMP messages with a source address of 0.0.0.0
- [x86] platform/x86: thinkpad_acpi: Add X1 Carbon Gen 9 second fan support
- sched/pelt: Ensure that *_sum is always synced with *_avg
- [armhf] spi: stm32-qspi: Always wait BUSY bit to be cleared in
stm32_qspi_wait_cmd()
- ASoC: rt5682: Fix the fast discharge for headset unplugging in soundwire
mode
- [arm64,armhf] drm/sun4i: dw-hdmi: Make HDMI PHY into a platform device
- [arm64] ASoC: qcom: lpass-cpu: Fix pop noise during audio capture begin
- radeon: use memcpy_to/fromio for UVD fw upload
- mm: relocate 'write_protect_seq' in struct mm_struct
- [arm64,armhf] irqchip/gic-v3: Workaround inconsistent PMR setting on NMI
entry
- bpf: Inherit expanded/patched seen count from old aux data
(CVE-2021-33624)
- bpf: Do not mark insn as seen under speculative path verification
(CVE-2021-33624)
- can: bcm: fix infoleak in struct bcm_msg_head (CVE-2021-34693)
- can: bcm/raw/isotp: use per module netdevice notifier
- can: j1939: fix Use-after-Free, hold skb ref while in use
- can: mcba_usb: fix memory leak in mcba_usb
- usb: core: hub: Disable autosuspend for Cypress CY7C65632
- [arm64,armhf] usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
- tracing: Do not stop recording cmdlines when tracing is off
- tracing: Do not stop recording comms if the trace file is being read
- tracing: Do no increment trace_clock_global() by one
- PCI: Mark TI C667X to avoid bus reset
- PCI: Mark some NVIDIA GPUs to avoid bus reset
- [arm64] PCI: aardvark: Fix kernel panic during PIO transfer
- PCI: Add ACS quirk for Broadcom BCM57414 NIC
- PCI: Work around Huawei Intelligent NIC VF FLR erratum
- [x86] KVM: x86: Immediately reset the MMU context when the SMM flag is
cleared
- [x86] KVM: x86/mmu: Calculate and check "full" mmu_role for nested MMU
- [x86] KVM: X86: Fix x86_emulator slab cache leak
- [s390x] mcck: fix calculation of SIE critical section size
- [s390x] ap: Fix hanging ioctl caused by wrong msg counter
- [amd64] x86/mm: Avoid truncating memblocks for SGX memory
- [x86] process: Check PF_KTHREAD and not current->mm for kernel threads
- [x86] ioremap: Map EFI-reserved memory as encrypted for SEV
- [x86] pkru: Write hardware init value to PKRU when xstate is init
- [x86] fpu: Prevent state corruption in __fpu__restore_sig()
- [x86] fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
- [x86] fpu: Reset state for all signal restore failures
- crash_core, vmcoreinfo: append 'SECTION_SIZE_BITS' to vmcoreinfo
- [arm64,armhf] dmaengine: pl330: fix wrong usage of spinlock flags in
dma_cyclc
- mac80211: Fix NULL ptr deref for injected rate info
- cfg80211: avoid double free of PMSR request
- drm/amdgpu/gfx10: enlarge CP_MEC_DOORBELL_RANGE_UPPER to cover full
doorbell.
- drm/amdgpu/gfx9: fix the doorbell missing when in CGPG issue.
- net: ll_temac: Fix TX BD buffer overwrite
- net: bridge: fix vlan tunnel dst null pointer dereference
- net: bridge: fix vlan tunnel dst refcnt when egressing
- mm/swap: fix pte_same_as_swp() not removing uffd-wp bit when compare
- mm/slub: clarify verification reporting
- mm/slub: fix redzoning for small allocations
- mm/slub: actually fix freelist pointer vs redzoning
- mm/slub.c: include swab.h
- net: stmmac: disable clocks in stmmac_remove_config_dt()
- [arm64,armhf] net: fec_ptp: add clock rate zero check
- [arm64,armhf] usb: dwc3: debugfs: Add and remove endpoint dirs dynamically
- [arm64,armhf] usb: dwc3: core: fix kernel panic when do reboot
.
[ Josua Mayer ]
* [armhf] drivers/bluetooth: Enable BT_HCIUART as a module, with support
for all features already enabled in the generic config. (Closes: #987361)
* [armhf] enable i.MX6 MIPI-CSI video capture device. (Closes: #987365)
- drivers/mux: Enable MUX_MMIO as a module.
- drivers/media/platform: Enable VIDEO_MUX as a module.
- drivers/staging/media/imx: Enable VIDEO_IMX_MEDIA and VIDEO_IMX_CSI as
modules.
.
[ Uwe Kleine-König ]
* [arm64] Update device tree for Kobol's helios64 from next
.
[ Salvatore Bonaccorso ]
* [rt] Refresh "net/Qdisc: use a seqlock instead seqcount"
* Ignore some ABI changes that should not affect OOT modules
* Bump ABI to 8
* [rt] Refresh "tracing: Merge irqflags + preempt counter"
* can: bcm: delay release of struct bcm_op after synchronize_rcu()
(CVE-2021-3609)
* Revert "PCI: PM: Do not read power state in pci_enable_device_flags()"
(Closes: #990008)
.
[ Vagrant Cascadian ]
* [arm64] Add pwm-rockchip to fb-modules udeb.
* [arm64] Add fusb302, tcpm and typec to usb-modules udeb.
* [armhf] Add gpio-mxc to kernel-image udeb. Thanks to Rick Thomas.
(Closes: #982270)
Checksums-Sha1:
2227aff8de5c4ae5b73feb27f3ea8667609cef40 195000 linux_5.10.46-1.dsc
28d0ba1a26c98af40cd304a2dbbb9e7c03f2d172 121572512 linux_5.10.46.orig.tar.xz
d798e9f96a5e8b825ba50e280736d5d0e1fe61d3 1399644 linux_5.10.46-1.debian.tar.xz
b638745054c030cd7d25ff17c550989e95a4e36c 6224 linux_5.10.46-1_source.buildinfo
Checksums-Sha256:
85495415070e7a7446b30170fde71920555b60ed136cd0349581b7a29820d349 195000 linux_5.10.46-1.dsc
bcd8edcbc6ed21d93dc138a754b1ac08329452c2ea509ae2a4071cd521da38a3 121572512 linux_5.10.46.orig.tar.xz
7af4de8d3f250fd822ecf820ffa46650520b6953264b97db242a301a0991e983 1399644 linux_5.10.46-1.debian.tar.xz
e270a4870488f9756605b00e6cf584cc4acf957c37193b09ab8171774174882a 6224 linux_5.10.46-1_source.buildinfo
Files:
9e6f0b1c9b0b775bdd7d03af61822161 195000 kernel optional linux_5.10.46-1.dsc
20074caf4bbf7773920f6e5f08beb771 121572512 kernel optional linux_5.10.46.orig.tar.xz
d99ef592e7e874a6d3c6a12168f4b6ce 1399644 kernel optional linux_5.10.46-1.debian.tar.xz
3eac5007ad9818339a6e697b13495c98 6224 kernel optional linux_5.10.46-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=83NZ
-----END PGP SIGNATURE-----
Reply to: