[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#940181: marked as done (linux-image-5.2.0-2-amd64: Kernel does not accept self-signed modules using UEFI db key)



Your message dated Sat, 09 Nov 2019 21:10:12 +0000
with message-id <E1iTXzo-0003H6-Bv@fasolo.debian.org>
and subject line Bug#935945: fixed in linux 5.3.9-1
has caused the Debian Bug report #935945,
regarding linux-image-5.2.0-2-amd64: Kernel does not accept self-signed modules using UEFI db key
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
935945: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=935945
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message ---
Package: src:linux
Version: 5.2.9-2
Severity: important

Dear Maintainer,

I sign the kernel for UEFI secure boot with my own key and also do so for custom-build kernel modules such as "vboxdrv" for VirtualBox (package virtualbox-6.0). This worked without a flaw for linux-image-4.19.0-5-amd64, but this kernel version rejects the signature:

> sudo modprobe -v vboxdrv
insmod /lib/modules/5.2.0-2-amd64/misc/vboxdrv.ko
modprobe: ERROR: could not insert 'vboxdrv': Operation not permitted

In `dmesg` I see my key being loaded:

[    1.609556] integrity: Loading X.509 certificate: UEFI:db
[    1.609992] integrity: Loaded X.509 cert 'My kernel signing key: XXXXXXXXXXXXXXXXXXXXXX'

it also appears in `cat /proc/keys`, but is probably not trusted:

> sudo keyctl list "%:.builtin_trusted_keys"
2 keys in keyring:
813811236: ---lswrv     0     0 asymmetric: Debian Secure Boot CA: 6ccece7e4c6c0d1f6149f3dd27dfcc5cbb419ea1
915392374: ---lswrv     0     0 asymmetric: Debian Secure Boot Signer: 00a7468def

I suspect this is due to kernel config CONFIG_SECONDARY_TRUSTED_KEYRING not being set:

> grep CONFIG_SECONDARY_TRUSTED_KEYRING /boot/config-5.2.0-2-amd64
# CONFIG_SECONDARY_TRUSTED_KEYRING is not set

whereas

> grep CONFIG_SECONDARY_TRUSTED_KEYRING /boot/config-4.19.0-5-amd64
CONFIG_SECONDARY_TRUSTED_KEYRING=y


Could you please also set this configuration value in this version?

Thank you very much.
Best regards,
Sven

-- Package-specific info:
** Version:
Linux version 5.2.0-2-amd64 (debian-kernel@lists.debian.org) (gcc version 8.3.0 (Debian 8.3.0-21)) #1 SMP Debian 5.2.9-2 (2019-08-21)

** Command line:
resume=/dev/mapper/casaubon--vg-swap_1 root=/dev/mapper/casaubon--vg-root ro splash quiet loglevel=3 add_efi_memmap biosdevname=0 cgroup_enable=memory drm.vblankoffdelay=1 elevator=noop i915.enable_dc=2 i915.enable_fbc=1 i915.fastboot=1 net.ifnames=0 rd.systemd.show_status=auto rd.udev.log_priority=3 swapaccount=1 vga=current vt.global_cursor_default=0 


** Tainted: U (64)
 * Userspace-defined naughtiness.

** Kernel log:
Unable to read kernel log; any relevant messages should be attached

** Model information
sys_vendor: Dell Inc.
product_name: Latitude 7480
product_version: 
chassis_vendor: Dell Inc.
chassis_version: 
bios_vendor: Dell Inc.
bios_version: 1.6.5
board_vendor: Dell Inc.
board_name: 00F6D3
board_version: A00

** Loaded modules:
sha512_ssse3
sha512_generic
ipheth
xt_TPROXY
nf_tproxy_ipv6
nf_tproxy_ipv4
xt_tcpudp
xt_socket
nf_socket_ipv4
nf_socket_ipv6
nf_defrag_ipv6
nf_defrag_ipv4
xt_mark
nft_compat
nft_counter
nf_tables
nfnetlink
bnep
cdc_ether
usbnet
r8152
mii
snd_usb_audio
snd_usbmidi_lib
snd_rawmidi
snd_seq_device
uvcvideo
videobuf2_vmalloc
videobuf2_memops
videobuf2_v4l2
videobuf2_common
videodev
media
zram
zsmalloc
btusb
btrtl
btbcm
btintel
bluetooth
drbg
ansi_cprng
binfmt_misc
ecdh_generic
ecc
nls_ascii
nls_cp437
vfat
fat
arc4
snd_hda_codec_hdmi
snd_soc_skl
snd_soc_skl_ipc
snd_soc_sst_ipc
snd_soc_sst_dsp
snd_hda_ext_core
intel_rapl
snd_soc_acpi_intel_match
snd_hda_codec_realtek
snd_soc_acpi
snd_hda_codec_generic
snd_soc_core
iwlmvm
x86_pkg_temp_thermal
intel_powerclamp
dell_rbtn
snd_compress
mac80211
coretemp
kvm_intel
snd_hda_intel
dell_laptop
snd_hda_codec
mei_wdt
ledtrig_audio
kvm
watchdog
irqbypass
iwlwifi
snd_hda_core
dell_smm_hwmon
snd_hwdep
intel_cstate
efi_pstore
snd_pcm
intel_uncore
dell_wmi
snd_timer
dell_smbios
dcdbas
serio_raw
intel_wmi_thunderbolt
efivars
intel_rapl_perf
cfg80211
wmi_bmof
dell_wmi_descriptor
snd
soundcore
rtsx_pci_ms
rfkill
joydev
memstick
sg
mei_me
intel_pch_thermal
mei
idma64
processor_thermal_device
intel_soc_dts_iosf
battery
pcc_cpufreq
ac
intel_hid
acpi_pad
sparse_keymap
evdev
int3403_thermal
int340x_thermal_zone
int3400_thermal
acpi_thermal_rel
parport_pc
ppdev
lp
parport
efivarfs
ip_tables
x_tables
autofs4
ext4
crc16
mbcache
jbd2
crc32c_generic
dm_crypt
dm_mod
hid_lenovo
usbhid
hid_alps
hid_generic
sd_mod
crct10dif_pclmul
crc32_pclmul
crc32c_intel
ghash_clmulni_intel
i2c_designware_platform
i2c_designware_core
i915
rtsx_pci_sdmmc
mmc_core
aesni_intel
i2c_algo_bit
aes_x86_64
e1000e
ahci
crypto_simd
cryptd
glue_helper
libahci
drm_kms_helper
libata
ptp
pps_core
rtsx_pci
xhci_pci
drm
scsi_mod
xhci_hcd
i2c_i801
usbcore
intel_lpss_pci
i2c_hid
hid
usb_common
wmi
intel_lpss_acpi
video
intel_lpss
mfd_core
button

** PCI devices:
00:00.0 Host bridge [0600]: Intel Corporation Xeon E3-1200 v5/E3-1500 v5/6th Gen Core Processor Host Bridge/DRAM Registers [8086:1904] (rev 08)
	Subsystem: Dell Xeon E3-1200 v5/E3-1500 v5/6th Gen Core Processor Host Bridge/DRAM Registers [1028:07a0]
	Control: I/O- Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx-
	Status: Cap+ 66MHz- UDF- FastB2B+ ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort+ >SERR- <PERR- INTx-
	Latency: 0
	Capabilities: <access denied>
	Kernel driver in use: skl_uncore

00:02.0 VGA compatible controller [0300]: Intel Corporation Skylake GT2 [HD Graphics 520] [8086:1916] (rev 07) (prog-if 00 [VGA controller])
	DeviceName:  Onboard IGD
	Subsystem: Dell Skylake GT2 [HD Graphics 520] [1028:07a0]
	Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx+
	Status: Cap+ 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
	Latency: 0
	Interrupt: pin A routed to IRQ 133
	Region 0: Memory at eb000000 (64-bit, non-prefetchable) [size=16M]
	Region 2: Memory at a0000000 (64-bit, prefetchable) [size=256M]
	Region 4: I/O ports at f000 [size=64]
	[virtual] Expansion ROM at 000c0000 [disabled] [size=128K]
	Capabilities: <access denied>
	Kernel driver in use: i915

00:04.0 Signal processing controller [1180]: Intel Corporation Xeon E3-1200 v5/E3-1500 v5/6th Gen Core Processor Thermal Subsystem [8086:1903] (rev 08)
	Subsystem: Dell Xeon E3-1200 v5/E3-1500 v5/6th Gen Core Processor Thermal Subsystem [1028:07a0]
	Control: I/O- Mem+ BusMaster- SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx-
	Status: Cap+ 66MHz- UDF- FastB2B+ ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
	Interrupt: pin A routed to IRQ 16
	Region 0: Memory at ec240000 (64-bit, non-prefetchable) [size=32K]
	Capabilities: <access denied>
	Kernel driver in use: proc_thermal

00:14.0 USB controller [0c03]: Intel Corporation Sunrise Point-LP USB 3.0 xHCI Controller [8086:9d2f] (rev 21) (prog-if 30 [XHCI])
	Subsystem: Dell Sunrise Point-LP USB 3.0 xHCI Controller [1028:07a0]
	Control: I/O- Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx+
	Status: Cap+ 66MHz- UDF- FastB2B+ ParErr- DEVSEL=medium >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
	Latency: 0
	Interrupt: pin A routed to IRQ 129
	Region 0: Memory at ec230000 (64-bit, non-prefetchable) [size=64K]
	Capabilities: <access denied>
	Kernel driver in use: xhci_hcd

00:14.2 Signal processing controller [1180]: Intel Corporation Sunrise Point-LP Thermal subsystem [8086:9d31] (rev 21)
	Subsystem: Dell Sunrise Point-LP Thermal subsystem [1028:07a0]
	Control: I/O- Mem+ BusMaster- SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx-
	Status: Cap+ 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
	Interrupt: pin C routed to IRQ 18
	Region 0: Memory at ec25a000 (64-bit, non-prefetchable) [size=4K]
	Capabilities: <access denied>
	Kernel driver in use: intel_pch_thermal

00:15.0 Signal processing controller [1180]: Intel Corporation Sunrise Point-LP Serial IO I2C Controller #0 [8086:9d60] (rev 21)
	Subsystem: Dell Sunrise Point-LP Serial IO I2C Controller [1028:07a0]
	Control: I/O- Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx-
	Status: Cap+ 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
	Latency: 0, Cache Line Size: 128 bytes
	Interrupt: pin A routed to IRQ 16
	Region 0: Memory at ec259000 (64-bit, non-prefetchable) [size=4K]
	Capabilities: <access denied>
	Kernel driver in use: intel-lpss

00:15.1 Signal processing controller [1180]: Intel Corporation Sunrise Point-LP Serial IO I2C Controller #1 [8086:9d61] (rev 21)
	Subsystem: Dell Sunrise Point-LP Serial IO I2C Controller [1028:07a0]
	Control: I/O- Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx-
	Status: Cap+ 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
	Latency: 0, Cache Line Size: 128 bytes
	Interrupt: pin B routed to IRQ 17
	Region 0: Memory at ec258000 (64-bit, non-prefetchable) [size=4K]
	Capabilities: <access denied>
	Kernel driver in use: intel-lpss

00:15.2 Signal processing controller [1180]: Intel Corporation Sunrise Point-LP Serial IO I2C Controller #2 [8086:9d62] (rev 21)
	Subsystem: Dell Sunrise Point-LP Serial IO I2C Controller [1028:07a0]
	Control: I/O- Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx-
	Status: Cap+ 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
	Latency: 0, Cache Line Size: 128 bytes
	Interrupt: pin C routed to IRQ 18
	Region 0: Memory at ec257000 (64-bit, non-prefetchable) [size=4K]
	Capabilities: <access denied>
	Kernel driver in use: intel-lpss

00:16.0 Communication controller [0780]: Intel Corporation Sunrise Point-LP CSME HECI #1 [8086:9d3a] (rev 21)
	Subsystem: Dell Sunrise Point-LP CSME HECI [1028:07a0]
	Control: I/O- Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx+
	Status: Cap+ 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
	Latency: 0
	Interrupt: pin A routed to IRQ 135
	Region 0: Memory at ec256000 (64-bit, non-prefetchable) [size=4K]
	Capabilities: <access denied>
	Kernel driver in use: mei_me

00:16.3 Serial controller [0700]: Intel Corporation Sunrise Point-LP Active Management Technology - SOL [8086:9d3d] (rev 21) (prog-if 02 [16550])
	Subsystem: Dell Sunrise Point-LP Active Management Technology - SOL [1028:07a0]
	Control: I/O+ Mem+ BusMaster- SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx-
	Status: Cap+ 66MHz+ UDF- FastB2B+ ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
	Interrupt: pin D routed to IRQ 19
	Region 0: I/O ports at f0a0 [size=8]
	Region 1: Memory at ec255000 (32-bit, non-prefetchable) [size=4K]
	Capabilities: <access denied>
	Kernel driver in use: serial

00:17.0 SATA controller [0106]: Intel Corporation Sunrise Point-LP SATA Controller [AHCI mode] [8086:9d03] (rev 21) (prog-if 01 [AHCI 1.0])
	Subsystem: Dell Sunrise Point-LP SATA Controller [AHCI mode] [1028:07a0]
	Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx+
	Status: Cap+ 66MHz+ UDF- FastB2B+ ParErr- DEVSEL=medium >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
	Latency: 0
	Interrupt: pin A routed to IRQ 130
	Region 0: Memory at ec250000 (32-bit, non-prefetchable) [size=8K]
	Region 1: Memory at ec254000 (32-bit, non-prefetchable) [size=256]
	Region 2: I/O ports at f090 [size=8]
	Region 3: I/O ports at f080 [size=4]
	Region 4: I/O ports at f060 [size=32]
	Region 5: Memory at ec253000 (32-bit, non-prefetchable) [size=2K]
	Capabilities: <access denied>
	Kernel driver in use: ahci

00:1c.0 PCI bridge [0604]: Intel Corporation Sunrise Point-LP PCI Express Root Port #1 [8086:9d10] (rev f1) (prog-if 00 [Normal decode])
	Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx+
	Status: Cap+ 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
	Latency: 0
	Interrupt: pin A routed to IRQ 122
	Bus: primary=00, secondary=01, subordinate=01, sec-latency=0
	I/O behind bridge: None
	Memory behind bridge: ec100000-ec1fffff [size=1M]
	Prefetchable memory behind bridge: None
	Secondary status: 66MHz- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort+ <SERR- <PERR-
	BridgeCtl: Parity- SERR+ NoISA- VGA- VGA16+ MAbort- >Reset- FastB2B-
		PriDiscTmr- SecDiscTmr- DiscTmrStat- DiscTmrSERREn-
	Capabilities: <access denied>
	Kernel driver in use: pcieport

00:1c.2 PCI bridge [0604]: Intel Corporation Sunrise Point-LP PCI Express Root Port #3 [8086:9d12] (rev f1) (prog-if 00 [Normal decode])
	Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx+
	Status: Cap+ 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
	Latency: 0
	Interrupt: pin C routed to IRQ 123
	Bus: primary=00, secondary=02, subordinate=02, sec-latency=0
	I/O behind bridge: None
	Memory behind bridge: ec000000-ec0fffff [size=1M]
	Prefetchable memory behind bridge: None
	Secondary status: 66MHz- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort+ <SERR- <PERR-
	BridgeCtl: Parity- SERR+ NoISA- VGA- VGA16+ MAbort- >Reset- FastB2B-
		PriDiscTmr- SecDiscTmr- DiscTmrStat- DiscTmrSERREn-
	Capabilities: <access denied>
	Kernel driver in use: pcieport

00:1c.4 PCI bridge [0604]: Intel Corporation Sunrise Point-LP PCI Express Root Port #5 [8086:9d14] (rev f1) (prog-if 00 [Normal decode])
	Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx+
	Status: Cap+ 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
	Latency: 0
	Interrupt: pin A routed to IRQ 124
	Bus: primary=00, secondary=03, subordinate=3b, sec-latency=0
	I/O behind bridge: 00002000-00004fff [size=12K]
	Memory behind bridge: d4000000-ea0fffff [size=353M]
	Prefetchable memory behind bridge: 00000000b0000000-00000000d1ffffff [size=544M]
	Secondary status: 66MHz- FastB2B- ParErr- DEVSEL=fast >TAbort+ <TAbort- <MAbort+ <SERR- <PERR-
	BridgeCtl: Parity- SERR+ NoISA- VGA- VGA16+ MAbort- >Reset- FastB2B-
		PriDiscTmr- SecDiscTmr- DiscTmrStat- DiscTmrSERREn-
	Capabilities: <access denied>
	Kernel driver in use: pcieport

00:1f.0 ISA bridge [0601]: Intel Corporation Sunrise Point-LP LPC Controller [8086:9d48] (rev 21)
	Subsystem: Dell Sunrise Point-LP LPC Controller [1028:07a0]
	Control: I/O+ Mem+ BusMaster- SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx+
	Status: Cap- 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-

00:1f.2 Memory controller [0580]: Intel Corporation Sunrise Point-LP PMC [8086:9d21] (rev 21)
	Subsystem: Dell Sunrise Point-LP PMC [1028:07a0]
	Control: I/O- Mem- BusMaster- SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx-
	Status: Cap- 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
	Region 0: Memory at ec24c000 (32-bit, non-prefetchable) [disabled] [size=16K]

00:1f.3 Audio device [0403]: Intel Corporation Sunrise Point-LP HD Audio [8086:9d70] (rev 21)
	Subsystem: Dell Sunrise Point-LP HD Audio [1028:07a0]
	Control: I/O- Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx+
	Status: Cap+ 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
	Latency: 32
	Interrupt: pin B routed to IRQ 137
	Region 0: Memory at ec248000 (64-bit, non-prefetchable) [size=16K]
	Region 4: Memory at ec220000 (64-bit, non-prefetchable) [size=64K]
	Capabilities: <access denied>
	Kernel driver in use: snd_hda_intel

00:1f.4 SMBus [0c05]: Intel Corporation Sunrise Point-LP SMBus [8086:9d23] (rev 21)
	Subsystem: Dell Sunrise Point-LP SMBus [1028:07a0]
	Control: I/O+ Mem+ BusMaster- SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx-
	Status: Cap- 66MHz- UDF- FastB2B+ ParErr- DEVSEL=medium >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
	Interrupt: pin A routed to IRQ 16
	Region 0: Memory at ec252000 (64-bit, non-prefetchable) [size=256]
	Region 4: I/O ports at f040 [size=32]
	Kernel driver in use: i801_smbus

00:1f.6 Ethernet controller [0200]: Intel Corporation Ethernet Connection (4) I219-LM [8086:15d7] (rev 21)
	Subsystem: Dell Ethernet Connection (4) I219-LM [1028:07a0]
	Control: I/O- Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx+
	Status: Cap+ 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
	Latency: 0
	Interrupt: pin A routed to IRQ 131
	Region 0: Memory at ec200000 (32-bit, non-prefetchable) [size=128K]
	Capabilities: <access denied>
	Kernel driver in use: e1000e

01:00.0 Unassigned class [ff00]: Realtek Semiconductor Co., Ltd. RTS525A PCI Express Card Reader [10ec:525a] (rev 01)
	Subsystem: Dell RTS525A PCI Express Card Reader [1028:07a0]
	Control: I/O- Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx+
	Status: Cap+ 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
	Latency: 0
	Interrupt: pin A routed to IRQ 132
	Region 1: Memory at ec100000 (32-bit, non-prefetchable) [size=4K]
	Capabilities: <access denied>
	Kernel driver in use: rtsx_pci

02:00.0 Network controller [0280]: Intel Corporation Wireless 8265 / 8275 [8086:24fd] (rev 78)
	Subsystem: Intel Corporation Wireless 8265 / 8275 [8086:0050]
	Control: I/O- Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx+
	Status: Cap+ 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
	Latency: 0
	Interrupt: pin A routed to IRQ 136
	Region 0: Memory at ec000000 (64-bit, non-prefetchable) [size=8K]
	Capabilities: <access denied>
	Kernel driver in use: iwlwifi

03:00.0 PCI bridge [0604]: Intel Corporation JHL6340 Thunderbolt 3 Bridge (C step) [Alpine Ridge 2C 2016] [8086:15da] (rev 02) (prog-if 00 [Normal decode])
	Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx+
	Status: Cap+ 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
	Latency: 0, Cache Line Size: 128 bytes
	Interrupt: pin A routed to IRQ 125
	Bus: primary=03, secondary=04, subordinate=3b, sec-latency=0
	I/O behind bridge: 00002000-00003fff [size=8K]
	Memory behind bridge: d4000000-ea0fffff [size=353M]
	Prefetchable memory behind bridge: 00000000b0000000-00000000d1ffffff [size=544M]
	Secondary status: 66MHz- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- <SERR- <PERR-
	BridgeCtl: Parity- SERR+ NoISA- VGA- VGA16+ MAbort- >Reset- FastB2B-
		PriDiscTmr- SecDiscTmr- DiscTmrStat- DiscTmrSERREn-
	Capabilities: <access denied>
	Kernel driver in use: pcieport

04:00.0 PCI bridge [0604]: Intel Corporation JHL6340 Thunderbolt 3 Bridge (C step) [Alpine Ridge 2C 2016] [8086:15da] (rev 02) (prog-if 00 [Normal decode])
	Control: I/O- Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx+
	Status: Cap+ 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
	Latency: 0, Cache Line Size: 128 bytes
	Interrupt: pin A routed to IRQ 126
	Bus: primary=04, secondary=05, subordinate=05, sec-latency=0
	I/O behind bridge: None
	Memory behind bridge: ea000000-ea0fffff [size=1M]
	Prefetchable memory behind bridge: None
	Secondary status: 66MHz- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- <SERR- <PERR-
	BridgeCtl: Parity- SERR+ NoISA- VGA- VGA16+ MAbort- >Reset- FastB2B-
		PriDiscTmr- SecDiscTmr- DiscTmrStat- DiscTmrSERREn-
	Capabilities: <access denied>
	Kernel driver in use: pcieport

04:01.0 PCI bridge [0604]: Intel Corporation JHL6340 Thunderbolt 3 Bridge (C step) [Alpine Ridge 2C 2016] [8086:15da] (rev 02) (prog-if 00 [Normal decode])
	Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx+
	Status: Cap+ 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
	Latency: 0, Cache Line Size: 128 bytes
	Interrupt: pin A routed to IRQ 127
	Bus: primary=04, secondary=06, subordinate=3a, sec-latency=0
	I/O behind bridge: 00002000-00002fff [size=4K]
	Memory behind bridge: d4000000-e9efffff [size=351M]
	Prefetchable memory behind bridge: 00000000b0000000-00000000d1ffffff [size=544M]
	Secondary status: 66MHz- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- <SERR- <PERR-
	BridgeCtl: Parity- SERR+ NoISA- VGA- VGA16+ MAbort- >Reset- FastB2B-
		PriDiscTmr- SecDiscTmr- DiscTmrStat- DiscTmrSERREn-
	Capabilities: <access denied>
	Kernel driver in use: pcieport

04:02.0 PCI bridge [0604]: Intel Corporation JHL6340 Thunderbolt 3 Bridge (C step) [Alpine Ridge 2C 2016] [8086:15da] (rev 02) (prog-if 00 [Normal decode])
	Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx+
	Status: Cap+ 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
	Latency: 0, Cache Line Size: 128 bytes
	Interrupt: pin A routed to IRQ 128
	Bus: primary=04, secondary=3b, subordinate=3b, sec-latency=0
	I/O behind bridge: 00003000-00003fff [size=4K]
	Memory behind bridge: e9f00000-e9ffffff [size=1M]
	Prefetchable memory behind bridge: None
	Secondary status: 66MHz- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- <SERR- <PERR-
	BridgeCtl: Parity- SERR+ NoISA- VGA- VGA16+ MAbort- >Reset- FastB2B-
		PriDiscTmr- SecDiscTmr- DiscTmrStat- DiscTmrSERREn-
	Capabilities: <access denied>
	Kernel driver in use: pcieport

3b:00.0 USB controller [0c03]: Intel Corporation JHL6340 Thunderbolt 3 USB 3.1 Controller (C step) [Alpine Ridge 2C 2016] [8086:15db] (rev 02) (prog-if 30 [XHCI])
	Subsystem: Device [2222:1111]
	Control: I/O- Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx+
	Status: Cap+ 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
	Latency: 0, Cache Line Size: 128 bytes
	Interrupt: pin A routed to IRQ 134
	Region 0: Memory at e9f00000 (32-bit, non-prefetchable) [size=64K]
	Capabilities: <access denied>
	Kernel driver in use: xhci_hcd


** USB devices:
Bus 004 Device 003: ID 0bda:8153 Realtek Semiconductor Corp. RTL8153 Gigabit Ethernet Adapter
Bus 004 Device 002: ID 0424:5807 Standard Microsystems Corp. Hub
Bus 004 Device 001: ID 1d6b:0003 Linux Foundation 3.0 root hub
Bus 003 Device 005: ID 0424:2514 Standard Microsystems Corp. USB 2.0 Hub
Bus 003 Device 004: ID 0bda:4014 Realtek Semiconductor Corp. 
Bus 003 Device 006: ID 05ac:12a8 Apple, Inc. iPhone5/5C/5S/6
Bus 003 Device 003: ID 17ef:6047 Lenovo USB2807 Hub
Bus 003 Device 002: ID 0424:2807 Standard Microsystems Corp. Hub
Bus 003 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
Bus 002 Device 001: ID 1d6b:0003 Linux Foundation 3.0 root hub
Bus 001 Device 002: ID 0c45:6717 Microdia Integrated_Webcam_HD
Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub


-- System Information:
Debian Release: bullseye/sid
  APT prefers testing
  APT policy: (990, 'testing'), (20, 'stable'), (10, 'unstable')
Architecture: amd64 (x86_64)

Kernel: Linux 5.2.0-2-amd64 (SMP w/4 CPU cores)
Kernel taint flags: TAINT_USER
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en_US:en (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages linux-image-5.2.0-2-amd64 depends on:
ii  initramfs-tools [linux-initramfs-tool]  0.135
ii  kmod                                    26-1
ii  linux-base                              4.6

Versions of packages linux-image-5.2.0-2-amd64 recommends:
ii  apparmor             2.13.3-4
ii  firmware-linux-free  3.4

Versions of packages linux-image-5.2.0-2-amd64 suggests:
pn  debian-kernel-handbook               <none>
pn  grub-pc | grub-efi-amd64 | extlinux  <none>
pn  linux-doc-5.2                        <none>

Versions of packages linux-image-5.2.0-2-amd64 is related to:
ii  firmware-amd-graphics     20190717-1
pn  firmware-atheros          <none>
pn  firmware-bnx2             <none>
pn  firmware-bnx2x            <none>
pn  firmware-brcm80211        <none>
pn  firmware-cavium           <none>
ii  firmware-intel-sound      20190717-1
pn  firmware-intelwimax       <none>
pn  firmware-ipw2x00          <none>
pn  firmware-ivtv             <none>
ii  firmware-iwlwifi          20190717-1
pn  firmware-libertas         <none>
ii  firmware-linux-nonfree    20190717-1
ii  firmware-misc-nonfree     20190717-1
pn  firmware-myricom          <none>
pn  firmware-netxen           <none>
pn  firmware-qlogic           <none>
pn  firmware-realtek          <none>
pn  firmware-samsung          <none>
pn  firmware-siano            <none>
pn  firmware-ti-connectivity  <none>
pn  xen-hypervisor            <none>

-- no debconf information

--- End Message ---
--- Begin Message ---
Source: linux
Source-Version: 5.3.9-1

We believe that the bug you reported is fixed in the latest version of
linux, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 935945@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Ben Hutchings <ben@decadent.org.uk> (supplier of updated linux package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 09 Nov 2019 15:42:49 +0000
Source: linux
Architecture: source
Version: 5.3.9-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Kernel Team <debian-kernel@lists.debian.org>
Changed-By: Ben Hutchings <ben@decadent.org.uk>
Closes: 924705 931341 935945 942861 942881 943953
Changes:
 linux (5.3.9-1) unstable; urgency=medium
 .
   * New version hopefully closes: #942881
   * New upstream stable update:
     https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.8
     - drm: Free the writeback_job when it with an empty fb
     - drm: Clear the fence pointer when writeback job signaled
     - [armhf] clk: ti: dra7: Fix mcasp8 clock bits
     - [armhf] dts: Fix wrong clocks for dra7 mcasp
     - nvme-pci: Fix a race in controller removal
     - scsi: ufs: skip shutdown if hba is not powered
     - scsi: megaraid: disable device when probe failed after enabled device
     - scsi: qla2xxx: Silence fwdump template message
     - scsi: qla2xxx: Fix unbound sleep in fcport delete path.
     - scsi: qla2xxx: Fix stale mem access on driver unload
     - scsi: qla2xxx: Fix N2N link reset
     - scsi: qla2xxx: Fix N2N link up fail
     - [armhf] dts: Fix gpio0 flags for am335x-icev2
     - [armhf] OMAP2+: Fix missing reset done flag for am3 and am43
     - [armhf] OMAP2+: Add missing LCDC midlemode for am335x
     - [armhf] OMAP2+: Fix warnings with broken omap2_set_init_voltage()
     - nvme-tcp: fix wrong stop condition in io_work
     - nvme-pci: Save PCI state before putting drive into deepest state
     - nvme: fix an error code in nvme_init_subsystem()
     - nvme-rdma: Fix max_hw_sectors calculation
     - nvme: Added QUIRKs for ADATA XPG SX8200 Pro 512GB
     - nvme: Add quirk for Kingston NVME SSD running FW E8FK11.T
     - nvme-rdma: fix possible use-after-free in connect timeout
     - blk-mq: honor IO scheduler for multiqueue devices
     - xen/efi: Set nonblocking callbacks
     - loop: change queue block size to match when using DIO
     - nl80211: fix null pointer dereference
     - mac80211: fix txq null pointer dereference
     - netfilter: nft_connlimit: disable bh on garbage collection
     - [armhf,arm64] net: stmmac: xgmac: Not all Unicast addresses may be
       available
     - [armhf,arm64] net: stmmac: dwmac4: Always update the MAC Hash Filter
     - [armhf,arm64] net: stmmac: Correctly take timestamp for PTPv2
     - [armhf,arm64] net: stmmac: Do not stop PHY if WoL is enabled
     - drm/amdgpu: fix multiple memory leaks in acp_hw_init
     - drm/amd/display: memory leak
     - [mips*el/loongson-*] Fix the link time qualifier of 'serial_exit()'
     - [arm64] net: hisilicon: Fix usage of uninitialized variable in function
       mdio_sc_cfg_reg_write()
     - [armhf,arm64] net: stmmac: Avoid deadlock on suspend/resume
     - [s390x] mm: fix -Wunused-but-set-variable warnings
     - r8152: Set macpassthru in reset_resume callback
     - net: phy: allow for reset line to be tied to a sleepy GPIO controller
     - net: phy: fix write to mii-ctrl1000 register
     - vfs: Convert filldir[64]() from __put_user() to unsafe_put_user()
     - elf: don't use MAP_FIXED_NOREPLACE for elf executable mappings
       (regression in 4.17)
     - vfs: Make filldir[64]() verify the directory entry filename is valid
     - uaccess: implement a proper unsafe_copy_to_user() and switch filldir over
       to it
     - vfs: filldir[64]: remove WARN_ON_ONCE() for bad directory entries
     - net_sched: fix backward compatibility for TCA_KIND (regression in 5.3.4)
     - net_sched: fix backward compatibility for TCA_ACT_KIND (regression in
       5.3.4)
     - libata/ahci: Fix PCS quirk application (regression in 5.3.4)
     - md/raid0: fix warning message for parameter default_layout
     - Revert "drm/radeon: Fix EEH during kexec" (regression in 5.3.5)
     - ocfs2: fix panic due to ocfs2_wq is null
     - nvme-pci: Set the prp2 correctly when using more than 4k page
     - ipv4: fix race condition between route lookup and invalidation
     - ipv4: Return -ENETUNREACH if we can't create route but saddr is valid
     - net: avoid potential infinite loop in tc_ctl_action()
     - [hppa,m68k] net: i82596: fix dma_alloc_attr for sni_82596
     - net: ipv6: fix listify ip6_rcv_finish in case of forwarding
     - [armhf,arm64] net: stmmac: disable/enable ptp_ref_clk in suspend/resume
       flow
     - rxrpc: Fix possible NULL pointer access in ICMP handling
     - sched: etf: Fix ordering of packets with same txtime
     - sctp: change sctp_prot .no_autobind with true
     - net: aquantia: temperature retrieval fix
     - net: aquantia: when cleaning hw cache it should be toggled
     - net: aquantia: do not pass lro session with invalid tcp checksum
     - net: aquantia: correctly handle macvlan and multicast coexistence
     - net: phy: micrel: Discern KSZ8051 and KSZ8795 PHYs
     - net: phy: micrel: Update KSZ87xx PHY name
     - net: avoid errors when trying to pop MLPS header on non-MPLS packets
     - net/sched: fix corrupted L2 header with MPLS 'push' and 'pop' actions
     - netdevsim: Fix error handling in nsim_fib_init and nsim_fib_exit
     - net: ethernet: broadcom: have drivers select DIMLIB as needed
     - net: phy: Fix "link partner" information disappear issue
     - rxrpc: use rcu protection while reading sk->sk_user_data
     - io_uring: fix bad inflight accounting for SETUP_IOPOLL|SETUP_SQTHREAD
     - io_uring: Fix corrupted user_data
     - USB: legousbtower: fix memleak on disconnect
     - ALSA: hda/realtek - Add support for ALC711
     - [x86] ALSA: hda/realtek - Enable headset mic on Asus MJ401TA
     - ALSA: usb-audio: Disable quirks for BOSS Katana amplifiers
     - ALSA: hda - Force runtime PM on Nvidia HDMI codecs
     - USB: serial: ti_usb_3410_5052: fix port-close races
     - USB: ldusb: fix memleak on disconnect
     - USB: usblp: fix use-after-free on disconnect
     - USB: ldusb: fix read info leaks
     - binder: Don't modify VMA bounds in ->mmap handler
     - [mips*] tlbex: Fix build_restore_pagemask KScratch restore
     - staging: wlan-ng: fix exit return when sme->key_idx >= NUM_WEPKEYS
     - [s390x] scsi: zfcp: fix reaction on bit error threshold notification
     - scsi: sd: Ignore a failure to sync cache due to lack of authorization
     - scsi: core: save/restore command resid for error handling
     - scsi: core: try to get module before removing device
     - scsi: ch: Make it possible to open a ch device multiple times again
     - Revert "Input: elantech - enable SMBus on new (2018+) systems"
       (regression in 5.3)
     - Input: synaptics-rmi4 - avoid processing unknown IRQs
     - ACPI: CPPC: Set pcc_data[pcc_ss_id] to NULL in acpi_cppc_processor_exit()
     - ACPI: NFIT: Fix unlock on error in scrub_show()
     - iwlwifi: pcie: change qu with jf devices to use qu configuration
     - cfg80211: wext: avoid copying malformed SSIDs (CVE-2019-17133)
     - mac80211: Reject malformed SSID elements
     - drm/edid: Add 6 bpc quirk for SDC panel in Lenovo G50
     - drm/ttm: Restore ttm prefaulting
     - [armhf,arm64] drm/panfrost: Handle resetting on timeout better
     - drm/amdgpu: Bail earlier when amdgpu.cik_/si_support is not set to 1
     - drm/amdgpu/sdma5: fix mask value of POLL_REGMEM packet for pipe sync
     - [x86] drm/i915/userptr: Never allow userptr into the mappable GGTT
     - [x86] drm/i915: Favor last VBT child device with conflicting AUX ch/DDC
       pin
     - drm/amdgpu/vce: fix allocation size in enc ring test
     - drm/amdgpu/vcn: fix allocation size in enc ring test
     - drm/amdgpu/uvd6: fix allocation size in enc ring test (v2)
     - drm/amdgpu/uvd7: fix allocation size in enc ring test (v2)
     - drm/amdgpu: user pages array memory leak fix
     - drivers/base/memory.c: don't access uninitialized memmaps in
       soft_offline_page_store()
     - fs/proc/page.c: don't access uninitialized memmaps in fs/proc/page.c
     - io_uring: Fix broken links with offloading
     - io_uring: Fix race for sqes with userspace
     - io_uring: used cached copies of sq->dropped and cq->overflow
     - [armhf] mmc: sdhci-omap: Fix Tuning procedure for temperatures < -20C
     - mm/memory-failure.c: don't access uninitialized memmaps in
       memory_failure()
     - mm/slub: fix a deadlock in show_slab_objects()
     - mm/page_owner: don't access uninitialized memmaps when reading
       /proc/pagetypeinfo
     - mm/memunmap: don't access uninitialized memmap in memunmap_pages()
     - mm: memcg/slab: fix panic in __free_slab() caused by premature memcg
       pointer release
     - mm, compaction: fix wrong pfn handling in __reset_isolation_pfn()
     - mm: memcg: get number of pages on the LRU list in memcgroup base on
       lru_zone_size
     - mm: memblock: do not enforce current limit for memblock_phys* family
     - hugetlbfs: don't access uninitialized memmaps in
       pfn_range_valid_gigantic()
     - mm/memory-failure: poison read receives SIGKILL instead of SIGBUS if
       mmaped more than once
     - zram: fix race between backing_dev_show and backing_dev_store
     - [s390x] zcrypt: fix memleak at release
     - [s390x] kaslr: add support for R_390_GLOB_DAT relocation type
     - lib/vdso: Make clock_getres() POSIX compliant again
     - [hppa] Fix vmap memory leak in ioremap()/iounmap()
     - [arm64] KVM: Trap VM ops when ARM64_WORKAROUND_CAVIUM_TX2_219_TVM is set
     - [arm64] Avoid Cavium TX2 erratum 219 when switching TTBR
     - [arm64] Enable workaround for Cavium TX2 erratum 219 when running SMT
     - [arm64] Allow CAVIUM_TX2_ERRATUM_219 to be selected
     - CIFS: avoid using MID 0xFFFF
     - cifs: Fix missed free operations
     - CIFS: Fix use after free of file info structures
     - perf/aux: Fix AUX output stopping
     - tracing: Fix race in perf_trace_buf initialization
     - fs/dax: Fix pmd vs pte conflict detection
     - dm cache: fix bugs when a GFP_NOWAIT allocation fails
     - [riscv64] irqchip/sifive-plic: Switch to fasteoi flow
     - [amd64] boot: Make level2_kernel_pgt pages invalid outside kernel area
     - [x86] apic/x2apic: Fix a NULL pointer deref when handling a dying cpu
     - [x86] hyperv: Make vapic support x2apic mode
     - [x86] pinctrl: cherryview: restore Strago DMI workaround for all versions
     - [arm64] pinctrl: armada-37xx: fix control of pins 32 and up
     - [arm64] pinctrl: armada-37xx: swap polarity on LED group
     - btrfs: block-group: Fix a memory leak due to missing
       btrfs_put_block_group()
     - Btrfs: add missing extents release on file extent cluster relocation
       error
     - btrfs: don't needlessly create extent-refs kernel thread
     - Btrfs: fix qgroup double free after failure to reserve metadata for
       delalloc
     - Btrfs: check for the full sync flag while holding the inode lock during
       fsync
     - btrfs: tracepoints: Fix wrong parameter order for qgroup events
     - btrfs: tracepoints: Fix bad entry members of qgroup events
     - [ppc64*] KVM: Book3S HV: XIVE: Ensure VP isn't already in use
     - memstick: jmb38x_ms: Fix an error handling path in 'jmb38x_ms_probe()'
     - cpufreq: Avoid cpufreq_suspend() deadlock on system shutdown
     - ceph: just skip unrecognized info in ceph_reply_info_extra
     - xen/netback: fix error path of xenvif_connect_data()
     - PCI: PM: Fix pci_power_up()
     - opp: of: drop incorrect lockdep_assert_held()
     - of: reserved_mem: add missing of_node_put() for proper ref-counting
     - blk-rq-qos: fix first node deletion of rq_qos_del()
     https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.9
     - io_uring: fix up O_NONBLOCK handling for sockets
     - dm snapshot: introduce account_start_copy() and account_end_copy()
     - dm snapshot: rework COW throttling to fix deadlock
     - Btrfs: fix inode cache block reserve leak on failure to allocate data
       space
     - btrfs: qgroup: Always free PREALLOC META reserve in
       btrfs_delalloc_release_extents()
     - iio: fix center temperature of bmc150-accel-core
     - libsubcmd: Make _FORTIFY_SOURCE defines dependent on the feature
     - perf tests: Avoid raising SEGV using an obvious NULL dereference
     - perf map: Fix overlapped map handling
     - perf script brstackinsn: Fix recovery from LBR/binary mismatch
     - perf jevents: Fix period for Intel fixed counters
     - perf tools: Propagate get_cpuid() error
     - perf annotate: Propagate perf_env__arch() error
     - perf annotate: Fix the signedness of failure returns
     - perf annotate: Propagate the symbol__annotate() error return
     - perf annotate: Fix arch specific ->init() failure errors
     - perf annotate: Return appropriate error code for allocation failures
     - perf annotate: Don't return -1 for error when doing BPF disassembly
     - staging: rtl8188eu: fix null dereference when kzalloc fails
     - RDMA/hfi1: Prevent memory leak in sdma_init
     - RDMA/iw_cxgb4: fix SRQ access from dump_qp()
     - RDMA/iwcm: Fix a lock inversion issue
     - [x86] HID: hyperv: Use in-place iterator API in the channel callback
     - nfs: Fix nfsi->nrequests count error on nfs_inode_remove_request
     - [arm64] cpufeature: Effectively expose FRINT capability to userspace
     - [arm64] Fix incorrect irqflag restore for priority masking for compat
     - [arm64] ftrace: Ensure synchronisation in PLT setup for Neoverse-N1
       #1542419
     - [riscv64] serial/sifive: select SERIAL_EARLYCON
     - RDMA/core: Fix an error handling path in 'res_get_common_doit()'
     - RDMA/cm: Fix memory leak in cm_add/remove_one
     - RDMA/nldev: Reshuffle the code to avoid need to rebind QP in error path
     - RDMA/mlx5: Do not allow rereg of a ODP MR
     - RDMA/mlx5: Order num_pending_prefetch properly with synchronize_srcu
     - RDMA/mlx5: Add missing synchronize_srcu() for MW cases
     - [arm64] gpio: max77620: Use correct unit for debounce times
     - fs: cifs: mute -Wunused-const-variable message
     - [arm64] vdso32: Fix broken compat vDSO build warnings
     - [arm64] vdso32: Detect binutils support for dmb ishld
     - serial: mctrl_gpio: Check for NULL pointer
     - [armhf] serial: 8250_omap: Fix gpio check for auto RTS/CTS
     - [arm64] vdso32: Don't use KBUILD_CPPFLAGS unconditionally
     - efi/cper: Fix endianness of PCIe class code
     - [x86] efi: Do not clean dummy variable in kexec path
     - [mips*] include: Mark __cmpxchg as __always_inline
     - [riscv64] avoid kernel hangs when trapped in BUG()
     - [riscv64] avoid sending a SIGTRAP to a user thread trapped in WARN()
     - [riscv64] Correct the handling of unexpected ebreak in do_trap_break()
     - [x86] xen: Return from panic notifier
     - ocfs2: clear zero in unaligned direct IO
     - fs: ocfs2: fix possible null-pointer dereferences in
       ocfs2_xa_prepare_entry()
     - fs: ocfs2: fix a possible null-pointer dereference in
       ocfs2_write_end_nolock()
     - fs: ocfs2: fix a possible null-pointer dereference in
       ocfs2_info_scan_inode_alloc()
     - btrfs: silence maybe-uninitialized warning in clone_range
     - [arm64] armv8_deprecated: Checking return value for memory allocation
     - [x86] cpu: Add Comet Lake to the Intel CPU models header
     - sched/fair: Scale bandwidth quota and period without losing quota/period
       ratio precision
     - sched/vtime: Fix guest/system mis-accounting on task switch
     - perf/core: Rework memory accounting in perf_mmap()
     - perf/core: Fix corner case in perf_rotate_context()
     - [x86] perf/amd: Change/fix NMI latency mitigation to use a timestamp
     - drm/amdgpu: fix memory leak
     - [mips*] include: Mark __xchg as __always_inline
     - [mips*] fw: sni: Fix out of bounds init of o32 stack
     - [s390x] cio: fix virtio-ccw DMA without PV
     - [x86] virt: vbox: fix memory leak in hgcm_call_preprocess_linaddr
     - nbd: fix possible sysfs duplicate warning
     - NFSv4: Fix leak of clp->cl_acceptor string
     - SUNRPC: fix race to sk_err after xs_error_report
     - [s390x] uaccess: avoid (false positive) compiler warnings
     - tracing: Initialize iter->seq after zeroing in tracing_read_pipe()
     - perf annotate: Fix multiple memory and file descriptor leaks
     - perf/aux: Fix tracking of auxiliary trace buffer allocation
     - USB: legousbtower: fix a signedness bug in tower_probe()
     - nbd: verify socket is supported during setup
     - [arm64] dts: qcom: Add Lenovo Miix 630
     - [arm64] dts: qcom: Add HP Envy x2
     - [arm64] dts: qcom: Add Asus NovaGo TP370QL
     - rtw88: Fix misuse of GENMASK macro
     - [s390x] pci: fix MSI message data
     - thunderbolt: Correct path indices for PCIe tunnel
     - thunderbolt: Use 32-bit writes when writing ring producer/consumer
     - fuse: flush dirty data/metadata before non-truncate setattr
     - fuse: truncate pending writes on O_TRUNC
     - ALSA: bebob: Fix prototype of helper function to return negative value
     - ALSA: timer: Fix mutex deadlock at releasing card
     - ALSA: hda/realtek - Fix 2 front mics of codec 0x623
     - ALSA: hda/realtek - Add support for ALC623
     - ath10k: fix latency issue for QCA988x
     - UAS: Revert commit 3ae62a42090f ("UAS: fix alignment of scatter/gather
       segments") (regression in 5.2)
     - nl80211: fix validation of mesh path nexthop
     - USB: gadget: Reject endpoints with 0 maxpacket value
     - usb-storage: Revert commit 747668dbc061 ("usb-storage: Set
       virt_boundary_mask to avoid SG overflows") (regression in 5.2)
     - USB: ldusb: fix ring-buffer locking
     - USB: ldusb: fix control-message timeout
     - usb: xhci: fix Immediate Data Transfer endianness
     - USB: serial: whiteheat: fix potential slab corruption
     - USB: serial: whiteheat: fix line-speed endianness
     - xhci: Fix use-after-free regression in xhci clear hub TT implementation
     - scsi: qla2xxx: Fix partial flash write of MBI
     - scsi: target: cxgbit: Fix cxgbit_fw4_ack()
     - [x86] HID: i2c-hid: add Trekstor Primebook C11B to descriptor override
     - HID: Fix assumption that devices have inputs
     - HID: fix error message in hid_open_report()
     - HID: logitech-hidpp: split g920_get_config()
     - HID: logitech-hidpp: rework device validation
     - HID: logitech-hidpp: do all FF cleanup in hidpp_ff_destroy()
     - [s390x] unwind: fix mixing regs and sp
     - [s390x] cmm: fix information leak in cmm_timeout_handler()
     - [s390x] idle: fix cpu idle time calculation
     - IB/hfi1: Avoid excessive retry for TID RDMA READ request
     - [arm64] Ensure VM_WRITE|VM_SHARED ptes are clean by default
     - [arm64] cpufeature: Enable Qualcomm Falkor/Kryo errata 1003
     - virtio_ring: fix stalls for packed rings
     - rtlwifi: rtl_pci: Fix problem of too small skb->len
     - rtlwifi: Fix potential overflow on P2P code
     - [x86] KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is
       active
     - [arm64] dmaengine: qcom: bam_dma: Fix resource leak
     - [arm64] dmaengine: tegra210-adma: fix transfer failure
     - [armhf] dmaengine: imx-sdma: fix size check for sdma script_number
     - [armhf] dmaengine: cppi41: Fix cppi41_dma_prep_slave_sg() when idle
     - drm/amdgpu/gmc10: properly set BANK_SELECT and FRAGMENT_SIZE
     - [x86] drm/i915: Fix PCH reference clock for FDI on HSW/BDW
     - drm/amdgpu/gfx10: update gfx golden settings
     - drm/amdgpu/powerplay/vega10: allow undervolting in p7
     - drm/amdgpu: Fix SDMA hang when performing VKexample test
     - NFS: Fix an RCU lock leak in nfs4_refresh_delegation_stateid()
     - io_uring: ensure we clear io_kiocb->result before each issue
     - [x86] iommu/vt-d: Fix panic after kexec -p for kdump
     - batman-adv: Avoid free/alloc race when handling OGM buffer
     - llc: fix sk_buff leak in llc_sap_state_process()
     - llc: fix sk_buff leak in llc_conn_service()
     - rxrpc: Fix call ref leak
     - rxrpc: rxrpc_peer needs to hold a ref on the rxrpc_local record
     - rxrpc: Fix trace-after-put looking at the put peer record
     - NFC: pn533: fix use-after-free and memleaks
     - bonding: fix potential NULL deref in bond_update_slave_arr
     - netfilter: conntrack: avoid possible false sharing
     - net: usb: sr9800: fix uninitialized local variable
     - sch_netem: fix rcu splat in netem_enqueue()
     - net: sched: sch_sfb: don't call qdisc_put() while holding tree lock
     - iwlwifi: exclude GEO SAR support for 3168
     - sched/fair: Fix low cpu usage with high throttling by removing expiration
       of cpu-local slices
     - ALSA: usb-audio: DSD auto-detection for Playback Designs
     - ALSA: usb-audio: Update DSD support quirks for Oppo and Rotel
     - ALSA: usb-audio: Add DSD support for Gustard U16/X26 USB Interface
     - RDMA/mlx5: Use irq xarray locking for mkey_table
     - sched/fair: Fix -Wunused-but-set-variable warnings
     - [powerpc*] powernv: Fix CPU idle to be called with IRQs disabled
     - Revert "ALSA: hda: Flush interrupts on disabling" (regression in 5.3.4)
 .
   [ Ben Hutchings ]
   * debian/bin/gencontrol_signed.py: Fix code style error
   * debian/bin/gencontrol.py: Skip linux-perf lintian-overrides if we won't
     build it
   * debian/bin/gencontrol{,_signed}.py: Use vars parameter instead of self.vars
   * debian/bin/gencontrol{,_signed}.py: Use %(name)s to format template vars
   * debian/.gitignore, debian/rules: Generalise patterns for generated files
   * gencontrol: Generalise substitution of debhelper config template
   * Add maint scripts to meta-packages to convert doc directories to symlinks
     (Closes: #942861)
   * debian/lib/python/debian_linux/utils.py: Use 'with' to manage file handles
   * debian/lib/python/debian_linux/utils.py: Store file mode for templates
   * Copy template file permissions to output files
   * debian/templates/headers.postinst.in: Set executable for consistency
   * debian/README.source: Document code signing and how to test it
   * debian/tests/control: Mark python test as superficial
   * [arm64] linux-headers: Disable check for a 32-bit compiler
     (Closes: #943953):
     - arm64: Kconfig: Make CONFIG_COMPAT_VDSO a proper Kconfig option
     - debian/bin/gencontrol.py: Optionally define $(CROSS_COMPILE_COMPAT) make
       variable
     - Enable COMPAT_VDSO and set $(CROSS_COMPILE_COMPAT) instead of setting
       CROSS_COMPILE_COMPAT_VDSO
   * crypto: Enable PKCS8_PRIVATE_KEY_PARSER as module (Closes: #924705)
   * Bump ABI to 2
   * [arm64] atmel_mxt_ts: Disable TOUCHSCREEN_ATMEL_MXT_T37 to avoid V4L
     dependency
   * random: try to actively add entropy rather than passively wait for it
 .
   [ Bastian Blank ]
   * [amd64/cloud-amd64] Re-enable RTC drivers. (closes: #931341)
 .
   [ Thomas W ]
   * [x86] Enable missing modules and setting:
     CONFIG_HUAWEI_WMI
     CONFIG_I2C_MULTI_INSTANTIATE
     CONFIG_INTEL_TURBO_MAX_3
 .
   [ Alper Nebi Yasak ]
   * [arm64] udeb: Add i2c-rk3x to i2c-modules
   * [arm64,armhf] udeb: Add rockchip-io-domain to kernel-image
   * udeb: Add atmel_mxt_ts to input-modules
 .
   [ Noah Meyerhans ]
   * drivers/net/ethernet/amazon: Backport driver fixes from v5.4-rc5
 .
   [ Niv Sardi ]
   * KEYS: Make use of platform keyring for module signature verify
     (closes: #935945)
Checksums-Sha1:
 16ba65a01cf3a93775866b0df4eca268ff849032 197528 linux_5.3.9-1.dsc
 cee863e34cb3a23cb94b981f255b65856d5b75de 112779172 linux_5.3.9.orig.tar.xz
 79ef2d96fd27907e12024f29366eb2fa43f864b7 1179104 linux_5.3.9-1.debian.tar.xz
 85fd398a1318272e2e4f59aada813ac12118dfda 46930 linux_5.3.9-1_source.buildinfo
Checksums-Sha256:
 4d3e62121dd50dba422c2a207fed84da2af131e5ef6376be74ecb665e41c89b6 197528 linux_5.3.9-1.dsc
 c2cefda8b78aa056737888f36a851f18cb0f4467f94fa3f22d41ff1642e427f4 112779172 linux_5.3.9.orig.tar.xz
 b43d25048d75f706e8bb0263fdc30441d491da61ebf8d9eb792d48fe8825f4cb 1179104 linux_5.3.9-1.debian.tar.xz
 f2c1d04db607ea8360d376127bcf4eb8455e56eec7d40d24299d3bb3b52ad93d 46930 linux_5.3.9-1_source.buildinfo
Files:
 02a9fea6aa27c243cc2e57b766470a6f 197528 kernel optional linux_5.3.9-1.dsc
 abc86b9ca8f3fe055e29a6ef8758bfae 112779172 kernel optional linux_5.3.9.orig.tar.xz
 b873dbbdf07af8d77d7a8f23b8c204f8 1179104 kernel optional linux_5.3.9-1.debian.tar.xz
 559e6cbad3457f8516eeae31d0351891 46930 kernel optional linux_5.3.9-1_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=/rWS
-----END PGP SIGNATURE-----

--- End Message ---

Reply to: