Accepted linux-5.10 5.10.178-3~deb10u1 (source) into oldstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Tue, 25 Apr 2023 21:12:13 +0200
Source: linux-5.10
Architecture: source
Version: 5.10.178-3~deb10u1
Distribution: buster-security
Urgency: high
Maintainer: Debian Kernel Team <debian-kernel@lists.debian.org>
Changed-By: Ben Hutchings <benh@debian.org>
Closes: 989705 993612 1022126 1031753
Changes:
linux-5.10 (5.10.178-3~deb10u1) buster-security; urgency=high
.
* Rebuild for buster:
- Change ABI number to 0.deb10.22
.
linux (5.10.178-3) bullseye; urgency=medium
.
* [mips*] Define RUNTIME_DISCARD_EXIT in LD script
.
linux (5.10.178-2) bullseye; urgency=medium
.
* docs: futex: Fix kernel-doc references after code split-up preparation
* powerpc/doc: Fix htmldocs errors
.
linux (5.10.178-1) bullseye; urgency=medium
.
* New upstream stable update:
https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.163
- [arm64,armhf] usb: musb: remove extra check in musb_gadget_vbus_draw
- [arm64] dts: qcom: ipq6018-cp01-c1: use BLSPI1 pins
- [armhf] dts: stm32: Drop stm32mp15xc.dtsi from Avenger96
- [arm64] perf/smmuv3: Fix hotplug callback leak in arm_smmu_pmu_init()
- [arm64] dts: armada-3720-turris-mox: Add missing interrupt for RTC
- pstore/ram: Fix error return code in ramoops_probe()
- [armhf] mmp: fix timer_read delay
- pstore: Avoid kcore oops by vmap()ing with VM_IOREMAP
- sched/fair: Cleanup task_util and capacity type
- sched/uclamp: Fix relationship between uclamp and migration margin
- cpuidle: dt: Return the correct numbers of parsed idle states
- PM: hibernate: Fix mistake in kerneldoc comment
- fs: don't audit the capability check in simple_xattr_list()
- perf: Fix possible memleak in pmu_dev_alloc()
- [x86] platform/x86: huawei-wmi: fix return value calculation
- timerqueue: Use rb_entry_safe() in timerqueue_getnext()
- lib/fonts: fix undefined behavior in bit shift for get_default_font
- ocfs2: fix memory leak in ocfs2_stack_glue_init()
- PNP: fix name memory leak in pnp_alloc_dev()
- [x86] perf/x86/intel/uncore: Fix reference count leak in
hswep_has_limit_sbox()
- [x86] perf/x86/intel/uncore: Fix reference count leak in
snr_uncore_mmio_map()
- [x86] perf/x86/intel/uncore: Fix reference count leak in
__uncore_imc_init_box()
- [arm64] platform/chrome: cros_usbpd_notify: Fix error handling in
cros_usbpd_notify_init()
- [arm64] irqchip: gic-pm: Use pm_runtime_resume_and_get() in gic_probe()
- [amd64] EDAC/i10nm: fix refcount leak in pci_get_dev_wrapper()
- nfsd: don't call nfsd_file_put from client states seqfile display
- genirq/irqdesc: Don't try to remove non-existing sysfs files
- [x86] cpufreq: amd_freq_sensitivity: Add missing pci_dev_put()
- libfs: add DEFINE_SIMPLE_ATTRIBUTE_SIGNED for signed value
- lib/notifier-error-inject: fix error when writing -errno to debugfs file
- docs: fault-injection: fix non-working usage of negative values
- debugfs: fix error when writing negative value to atomic_t debugfs file
- ocfs2: ocfs2_mount_volume does cleanup job before return error
- ocfs2: rewrite error handling of ocfs2_fill_super
- ocfs2: fix memory leak in ocfs2_mount_volume()
- rapidio: fix possible name leaks when rio_add_device() fails
- rapidio: rio: fix possible name leak in rio_register_mport()
- futex: Move to kernel/futex/
- futex: Resend potentially swallowed owner death notification
- cpu/hotplug: Make target_store() a nop when target == state
- [armhf] clocksource/drivers/timer-ti-dm: Fix missing clk_disable_unprepare
in dmtimer_systimer_init_clock()
- ACPICA: Fix use-after-free in acpi_ut_copy_ipackage_to_ipackage()
- [x86] uprobes/x86: Allow to probe a NOP instruction with 0x66 prefix
- [x86] xen: Fix memory leak in xen_smp_intr_init{_pv}()
- [x86] xen: Fix memory leak in xen_init_lock_cpu()
- xen/privcmd: Fix a possible warning in privcmd_ioctl_mmap_resource()
- PM: runtime: Improve path in rpm_idle() when no callback
- PM: runtime: Do not call __rpm_callback() from rpm_idle()
- [x86] platform/x86: mxm-wmi: fix memleak in mxm_wmi_call_mx[ds|mx]()
- [x86] platform/x86: intel_scu_ipc: fix possible name leak in
__intel_scu_ipc_register()
- fs: sysv: Fix sysv_nblocks() returns wrong value
- rapidio: fix possible UAF when kfifo_alloc() fails
- eventfd: change int to __u64 in eventfd_signal() ifndef CONFIG_EVENTFD
- relay: fix type mismatch when allocating memory in relay_create_buf()
- hfs: Fix OOB Write in hfs_asc2mac
- rapidio: devices: fix missing put_device in mport_cdev_open
- wifi: ath9k: hif_usb: fix memory leak of urbs in
ath9k_hif_usb_dealloc_tx_urbs()
- wifi: ath9k: hif_usb: Fix use-after-free in ath9k_hif_usb_reg_in_cb()
- wifi: rtl8xxxu: Fix reading the vendor of combo chips
- [arm64] drm/bridge: adv7533: remove dynamic lane switching from adv7533
bridge
- [armhf] media: coda: jpeg: Add check for kmalloc
- [arm64] venus: pm_helpers: Fix error check in vcodec_domains_get()
- can: kvaser_usb: do not increase tx statistics when sending error message
frames
- can: kvaser_usb: kvaser_usb_leaf: Get capabilities from device
- can: kvaser_usb: kvaser_usb_leaf: Rename {leaf,usbcan}_cmd_error_event to
{leaf,usbcan}_cmd_can_error_event
- can: kvaser_usb: kvaser_usb_leaf: Handle CMD_ERROR_EVENT
- can: kvaser_usb_leaf: Set Warning state even without bus errors
- can: kvaser_usb_leaf: Fix improved state not being reported
- can: kvaser_usb_leaf: Fix wrong CAN state after stopping
- can: kvaser_usb_leaf: Fix bogus restart events
- can: kvaser_usb: Add struct kvaser_usb_busparams
- can: kvaser_usb: Compare requested bittiming parameters with actual
parameters in do_set_{,data}_bittiming
- spi: Update reference to struct spi_controller
- ima: Fix fall-through warnings for Clang
- ima: Handle -ESTALE returned by ima_filter_rule_match()
- [arm64] drm/msm/hdmi: switch to drm_bridge_connector
- [arm64] drm/msm/hdmi: drop unused GPIO support
- bpf: Fix slot type check in check_stack_write_var_off
- media: vivid: fix compose size exceed boundary
- bpf: propagate precision in ALU/ALU64 operations
- bpf: Check the other end of slot_type for STACK_SPILL
- bpf: propagate precision across all frames, not just the last one
- mtd: Fix device name leak when register device failed in add_mtd_device()
- wifi: rsi: Fix handling of 802.3 EAPOL frames sent via control port
- rxrpc: Fix ack.bufferSize to be 0 when generating an ack
- drm/radeon: Add the missed acpi_put_table() to fix memory leak
- regulator: core: fix unbalanced of node refcount in regulator_dev_lookup()
- amdgpu/pm: prevent array underflow in vega20_odn_edit_dpm_table()
- drm/fourcc: Add packed 10bit YUV 4:2:0 format
- drm/fourcc: Fix vsub/hsub for Q410 and Q401
- integrity: Fix memory leakage in keyring allocation error path
- ima: Fix misuse of dereference of pointer in template_desc_init_fields()
- wifi: ath10k: Fix return value in ath10k_pci_init()
- mtd: lpddr2_nvm: Fix possible null-ptr-deref
- Input: elants_i2c - properly handle the reset GPIO when power is off
- media: vidtv: Fix use-after-free in vidtv_bridge_dvb_init()
- media: solo6x10: fix possible memory leak in solo_sysfs_init()
- inet: add READ_ONCE(sk->sk_bound_dev_if) in inet_csk_bind_conflict()
- bpf: Move skb->len == 0 checks into __bpf_redirect
- HID: hid-sensor-custom: set fixed size for custom attributes
- ALSA: pcm: fix undefined behavior in bit shift for SNDRV_PCM_RATE_KNOT
- ALSA: seq: fix undefined behavior in bit shift for
SNDRV_SEQ_FILTER_USE_EVENT
- regulator: core: use kfree_const() to free space conditionally
- [arm64,armhf] clk: rockchip: Fix memory leak in
rockchip_clk_register_pll()
- drm/amdgpu: fix pci device refcount leak
- bonding: fix link recovery in mode 2 when updelay is nonzero
- drbd: fix an invalid memory access caused by incorrect use of list
iterator
- media: imon: fix a race condition in send_packet()
- [arm64] clk: imx: replace osc_hdmi with dummy
- pinctrl: pinconf-generic: add missing of_node_put()
- media: dvb-core: Fix ignored return value in dvb_register_frontend()
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()
(CVE-2023-28328)
- [arm64,armhf] drm/tegra: Add missing clk_disable_unprepare() in
tegra_dc_probe()
- ASoC: dt-bindings: wcd9335: fix reset line polarity in example
- NFSv4.2: Clear FATTR4_WORD2_SECURITY_LABEL when done decoding
- NFSv4.2: Fix a memory stomp in decode_attr_security_label
- NFSv4.2: Fix initialisation of struct nfs4_label
- NFSv4: Fix a deadlock between nfs4_open_recover_helper() and delegreturn
- NFS: Fix an Oops in nfs_d_automount()
- [x86] ALSA: asihpi: fix missing pci_disable_device()
- wifi: iwlwifi: mvm: fix double free on tx path.
- drm/amd/pm/smu11: BACO is supported when it's in BACO state
- drm/radeon: Fix PCI device refcount leak in radeon_atrm_get_bios()
- drm/amdgpu: Fix PCI device refcount leak in amdgpu_atrm_get_bios()
- netfilter: conntrack: set icmpv6 redirects as RELATED
- bpf, sockmap: Fix repeated calls to sock_put() when msg has more_data
- bpf, sockmap: Fix data loss caused by using apply_bytes on ingress
redirect
- bonding: uninitialized variable in bond_miimon_inspect()
- spi: spidev: mask SPI_CS_HIGH in SPI_IOC_RD_MODE
- wifi: mac80211: fix memory leak in ieee80211_if_add()
- wifi: cfg80211: Fix not unregister reg_pdev when load_builtin_regdb_keys()
fails
- regulator: core: fix module refcount leak in set_supply()
- regulator: core: fix resource leak in regulator_register()
- hwmon: (jc42) Convert register access and caching to regmap/regcache
- hwmon: (jc42) Restore the min/max/critical temperatures on resume
- bpf, sockmap: fix race in sock_map_free()
- ALSA: pcm: Set missing stop_operating flag at undoing trigger start
- media: saa7164: fix missing pci_disable_device()
- ALSA: mts64: fix possible null-ptr-defer in snd_mts64_interrupt
- xprtrdma: Fix regbuf data not freed in rpcrdma_req_create()
- SUNRPC: Fix missing release socket in rpc_sockname()
- NFSv4.x: Fail client initialisation if state manager thread can't run
- [armhf] media: coda: Add check for dcoda_iram_alloc
- [armhf] media: coda: Add check for kmalloc
- [armhf] clk: samsung: Fix memory leak in _samsung_clk_register_pll()
- [armhf] spi: spi-gpio: Don't set MOSI as an input if not 3WIRE mode
- wifi: rtl8xxxu: Add __packed to struct rtl8723bu_c2h
- wifi: rtl8xxxu: Fix the channel width reporting
- wifi: brcmfmac: Fix error return code in brcmf_sdio_download_firmware()
- blktrace: Fix output non-blktrace event when blk_classic option enabled
- [armhf] clk: socfpga: clk-pll: Remove unused variable 'rc'
- [armhf] clk: socfpga: use clk_hw_register for a5/c5
- [armhf] clk: socfpga: Fix memory leak in socfpga_gate_init()
- [x86] net: vmw_vsock: vmci: Check memcpy_from_msg()
- net: defxx: Fix missing err handling in dfx_init()
- drivers: net: qlcnic: Fix potential memory leak in qlcnic_sriov_init()
- of: overlay: fix null pointer dereferencing in find_dup_cset_node_entry()
and find_dup_cset_prop()
- ethernet: s2io: don't call dev_kfree_skb() under spin_lock_irqsave()
- net: farsync: Fix kmemleak when rmmods farsync
- net/tunnel: wait until all sk_user_data reader finish before releasing the
sock
- hamradio: don't call dev_kfree_skb() under spin_lock_irqsave()
- [i386] net: amd: lance: don't call dev_kfree_skb() under
spin_lock_irqsave()
- [amd64,arm64] net: amd-xgbe: Fix logic around active and passive cables
- [amd64,arm64] net: amd-xgbe: Check only the minimum speed for
active/passive cables
- sctp: sysctl: make extra pointers netns aware
- Bluetooth: btusb: don't call kfree_skb() under spin_lock_irqsave()
- Bluetooth: hci_qca: don't call kfree_skb() under spin_lock_irqsave()
- Bluetooth: hci_ll: don't call kfree_skb() under spin_lock_irqsave()
- Bluetooth: hci_h5: don't call kfree_skb() under spin_lock_irqsave()
- Bluetooth: hci_bcsp: don't call kfree_skb() under spin_lock_irqsave()
- Bluetooth: hci_core: don't call kfree_skb() under spin_lock_irqsave()
- Bluetooth: RFCOMM: don't call kfree_skb() under spin_lock_irqsave()
- stmmac: fix potential division by 0
- apparmor: fix a memleak in multi_transaction_new()
- apparmor: fix lockdep warning when removing a namespace
- apparmor: Fix abi check to include v8 abi
- [arm64] crypto: nitrox - avoid double free on error path in
nitrox_sriov_init()
- scsi: core: Fix a race between scsi_done() and scsi_timeout()
- apparmor: Use pointer to struct aa_label for lbs_cred
- [arm64,armhf] PCI: dwc: Fix n_fts[] array overrun
- RDMA/core: Fix order of nldev_exit call
- f2fs: Fix the race condition of resize flag between resizefs
- apparmor: Fix memleak in alloc_ns()
- f2fs: fix normal discard process
- RDMA/nldev: Return "-EAGAIN" if the cm_id isn't from expected port
- scsi: scsi_debug: Fix a warning in resp_write_scat()
- crypto: cryptd - Use request context instead of stack for sub-request
- [arm64] RDMA/hns: Repacing 'dseg_len' by macros in fill_ext_sge_inl_data()
- [arm64] RDMA/hns: Fix ext_sge num error when post send
- PCI: Check for alloc failure in pci_request_irq()
- [amd64] RDMA/hfi: Decrease PCI device reference count in error path
- [arm64] RDMA/hns: fix memory leak in hns_roce_alloc_mr()
- RDMA/rxe: Fix NULL-ptr-deref in rxe_qp_do_cleanup() when socket create
failed
- scsi: hpsa: Fix possible memory leak in hpsa_init_one()
- crypto: tcrypt - Fix multibuffer skcipher speed test mem leak
- padata: Always leave BHs disabled when running ->parallel()
- padata: Fix list iterator in padata_do_serial()
- scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()
- scsi: hpsa: Fix error handling in hpsa_add_sas_host()
- scsi: hpsa: Fix possible memory leak in hpsa_add_sas_device()
- scsi: scsi_debug: Fix a warning in resp_verify()
- scsi: scsi_debug: Fix a warning in resp_report_zones()
- scsi: fcoe: Fix possible name leak when device_register() fails
- scsi: scsi_debug: Fix possible name leak in sdebug_add_host_helper()
- scsi: ipr: Fix WARNING in ipr_init()
- scsi: fcoe: Fix transport not deattached when fcoe_if_init() fails
- scsi: snic: Fix possible UAF in snic_tgt_create()
- RDMA/nldev: Add checks for nla_nest_start() in fill_stat_counter_qps()
- f2fs: avoid victim selection from previous victim section
- RDMA/nldev: Fix failure to send large messages
- [arm64,armhf] crypto: amlogic - Remove kcalloc without check
- [amd64] RDMA/hfi1: Fix error return code in parse_platform_config()
- RDMA/srp: Fix error return code in srp_parse_options()
- orangefs: Fix sysfs not cleanup when dev init failed
- [arm64] RDMA/hns: Fix PBL page MTR find
- [arm64] RDMA/hns: Fix page size cap from firmware
- [x86] hwrng: amd - Fix PCI device refcount leak
- [i386] hwrng: geode - Fix PCI device refcount leak
- IB/IPoIB: Fix queue count inconsistency for PKEY child interfaces
- [arm64,armhf] serial: tegra: Read DMA status before terminating
- class: fix possible memory leak in __class_register()
- vfio: platform: Do not pass return buffer to ACPI _RST method
- usb: typec: Check for ops->exit instead of ops->enter in altmode_exit
- usb: typec: tcpci: fix of node refcount leak in tcpci_register_port()
- usb: typec: tipd: Fix spurious fwnode_handle_put in error path
- [arm*] serial: amba-pl011: avoid SBSA UART accessing DMACR register
- [arm*] serial: pl011: Do not clear RX FIFO & RX interrupt in unthrottle.
- [i386] serial: pch: Fix PCI device refcount leak in pch_request_dma()
- tty: serial: clean up stop-tx part in altera_uart_tx_chars()
- misc: tifm: fix possible memory leak in tifm_7xx1_switch_media()
- misc: sgi-gru: fix use-after-free error in gru_set_context_option,
gru_fault and gru_handle_user_call_os (CVE-2022-3424)
- [arm*] firmware: raspberrypi: fix possible memory leak in
rpi_firmware_probe()
- iio: temperature: ltc2983: make bulk write buffer DMA-safe
- genirq: Add IRQF_NO_AUTOEN for request_irq/nmi()
- iio:imu:adis: Use IRQF_NO_AUTOEN instead of irq request then disable
- iio: adis: handle devices that cannot unmask the drdy pin
- iio: adis: stylistic changes
- iio:imu:adis: Move exports into IIO_ADISLIB namespace
- iio: adis: add '__adis_enable_irq()' implementation
- usb: roles: fix of node refcount leak in usb_role_switch_is_parent()
- usb: gadget: f_hid: optional SETUP/SET_REPORT mode
- usb: gadget: f_hid: fix f_hidg lifetime vs cdev
- usb: gadget: f_hid: fix refcount leak on error path
- chardev: fix error handling in cdev_device_add()
- [i386] i2c: pxa-pci: fix missing pci_disable_device() on error in
ce4100_i2c_probe
- [x86] staging: rtl8192u: Fix use after free in ieee80211_rx()
- [x86] staging: rtl8192e: Fix potential use-after-free in
rtllib_rx_Monitor()
- gpiolib: Get rid of redundant 'else'
- gpiolib: cdev: fix NULL-pointer dereferences
- usb: storage: Add check for kcalloc
- tracing/hist: Fix issue of losting command info in error_log
- fbdev: pm2fb: fix missing pci_disable_device()
- [x86] fbdev: via: Fix error in via_core_init()
- [x86] fbdev: vermilion: decrease reference count in error path
- [x86] fbdev: uvesafb: Fixes an error handling path in uvesafb_probe()
- [armhf] HSI: omap_ssi_core: fix unbalanced pm_runtime_disable()
- [armhf] HSI: omap_ssi_core: fix possible memory leak in ssi_probe()
- power: supply: fix residue sysfs file in error handle route of
__power_supply_register()
- perf trace: Return error if a system call doesn't exist
- perf trace: Use macro RAW_SYSCALL_ARGS_NUM to replace number
- perf trace: Handle failure when trace point folder is missed
- perf symbol: correction while adjusting symbol
- [armhf] HSI: omap_ssi_core: Fix error handling in ssi_init()
- power: supply: fix null pointer dereferencing in
power_supply_get_battery_info
- [arm64,armhf] pwm: tegra: Improve required rate calculation
- dmaengine: idxd: Fix crc_val field for completion record
- rtc: rtc-cmos: Do not check ACPI_FADT_LOW_POWER_S0
- rtc: cmos: Fix event handler registration ordering issue
- rtc: cmos: Fix wake alarm breakage
- rtc: cmos: fix build on non-ACPI platforms
- rtc: cmos: Call cmos_wake_setup() from cmos_do_probe()
- rtc: cmos: Call rtc_wake_setup() from cmos_do_probe()
- rtc: cmos: Eliminate forward declarations of some functions
- rtc: cmos: Rename ACPI-related functions
- rtc: cmos: Disable ACPI RTC event on removal
- [armhf] rtc: snvs: Allow a time difference on clock register read
- [arm64] rtc: pcf85063: Fix reading alarm
- [amd64] iommu/amd: Fix pci device refcount leak in ppr_notifier()
- [powerpc*] xmon: Enable breakpoints on 8xx
- [powerpc*] xmon: Fix -Wswitch-unreachable warning in bpt_cmds
- [powerpc*] xive: add missing iounmap() in error path in
xive_spapr_populate_irq_data()
- kbuild: remove unneeded mkdir for external modules_install
- kbuild: unify modules(_install) for in-tree and external modules
- kbuild: refactor single builds of *.ko
- [powerpc*] perf: callchain validate kernel stack pointer bounds
- [powerpc*] hv-gpci: Fix hv_gpci event list
- [powerpc*] eeh: Drop redundant spinlock initialization
- [powerpc*] pseries/eeh: use correct API for error log size
- netfilter: flowtable: really fix NAT IPv6 offload
- [arm64] rtc: pcf85063: fix pcf85063_clkout_control
- NFSD: Remove spurious cb_setup_err tracepoint
- nfsd: under NFSv4.1, fix double svc_xprt_put on rpc_create failure
- net: macsec: fix net device access prior to holding a lock
- mISDN: hfcsusb: don't call dev_kfree_skb/kfree_skb() under
spin_lock_irqsave()
- mISDN: hfcpci: don't call dev_kfree_skb/kfree_skb() under
spin_lock_irqsave()
- mISDN: hfcmulti: don't call dev_kfree_skb/kfree_skb() under
spin_lock_irqsave()
- nfc: pn533: Clear nfc_target before being used
- r6040: Fix kmemleak in probe and remove
- net: switch to storing KCOV handle directly in sk_buff
- net: add inline function skb_csum_is_sctp
- net: igc: use skb_csum_is_sctp instead of protocol check
- net: add a helper to avoid issues with HW TX timestamping and SO_TXTIME
- igc: Enhance Qbv scheduling by using first flag bit
- igc: Use strict cycles for Qbv scheduling
- igc: Add checking for basetime less than zero
- igc: recalculate Qbv end_time by considering cycle time
- igc: Lift TAPRIO schedule restriction
- igc: Set Qbv start_time and end_time to end_time if not being configured
in GCL
- openvswitch: Fix flow lookup to use unmasked key
- skbuff: Account for tail adjustment during pull operations
- [arm64] mailbox: zynq-ipi: fix error handling while device_register()
fails
- net_sched: reject TCF_EM_SIMPLE case for complex ematch module
- rxrpc: Fix missing unlock in rxrpc_do_sendmsg()
- myri10ge: Fix an error handling path in myri10ge_probe()
- net: stream: purge sk_error_queue in sk_stream_kill_queues()
- rcu: Fix __this_cpu_read() lockdep warning in rcu_force_quiescent_state()
- [arm64] make is_ttbrX_addr() noinstr-safe
- video: hyperv_fb: Avoid taking busy spinlock on panic path
- [x86] hyperv: Remove unregister syscore call from Hyper-V cleanup
- binfmt_misc: fix shift-out-of-bounds in check_special_flags
- fs: jfs: fix shift-out-of-bounds in dbAllocAG
- udf: Avoid double brelse() in udf_rename()
- fs: jfs: fix shift-out-of-bounds in dbDiscardAG
- ACPICA: Fix error code path in acpi_ds_call_control_method()
- nilfs2: fix shift-out-of-bounds/overflow in nilfs_sb2_bad_offset()
- nilfs2: fix shift-out-of-bounds due to too large exponent of block size
- acct: fix potential integer overflow in encode_comp_t()
- hfs: fix OOB Read in __hfs_brec_find
- [armhf] drm/etnaviv: add missing quirks for GC300
- brcmfmac: return error when getting invalid max_flowrings from dongle
- wifi: ath9k: verify the expected usb_endpoints are present
- wifi: ar5523: Fix use-after-free on ar5523_cmd() timed out
- ipmi: fix memleak when unload ipmi driver
- drm/amd/display: prevent memory leak
- qed (gcc13): use u16 for fid to be big enough
- bpf: make sure skb->len != 0 when redirecting to a tunneling device
- hamradio: baycom_epp: Fix return type of baycom_send_packet()
- wifi: brcmfmac: Fix potential shift-out-of-bounds in
brcmf_fw_alloc_request()
- igb: Do not free q_vector unless new one was allocated
- drm/amdgpu: Fix type of second parameter in trans_msg() callback
- drm/amdgpu: Fix type of second parameter in odn_edit_dpm_table() callback
- [s390x] ctcm: Fix return type of ctc{mp,}m_tx()
- [s390x] netiucv: Fix return type of netiucv_tx()
- [s390x] lcs: Fix return type of lcs_start_xmit()
- [arm64] drm/msm: Use drm_mode_copy()
- [arm64] drm/rockchip: Use drm_mode_copy()
- drivers/md/md-bitmap: check the return value of md_bitmap_get_counter()
- md/raid1: stop mdx_raid1 thread when raid1 array run failed
- drm/amd/display: fix array index out of bound error in bios parser
- net: add atomic_long_t to net_device_stats fields
- mrp: introduce active flags to prevent UAF when applicant uninit
- ppp: associate skb with a device at tx
- bpf: Prevent decl_tag from being referenced in func_proto arg
- ethtool: avoiding integer overflow in ethtool_phys_id()
- media: dvb-frontends: fix leak of memory fw
- media: dvbdev: adopts refcnt to avoid UAF
- media: dvb-usb: fix memory leak in dvb_usb_adapter_init()
- blk-mq: fix possible memleak when register 'hctx' failed
- regulator: core: fix use_count leakage when handling boot-on
- [arm64] mmc: f-sdh30: Add quirks for broken timeout clock capability
- media: si470x: Fix use-after-free in si470x_int_in_callback()
- hugetlbfs: fix null-ptr-deref in hugetlbfs_parse_param()
- orangefs: Fix kmemleak in orangefs_prepare_debugfs_help_string()
- orangefs: Fix kmemleak in orangefs_{kernel,client}_debug_init()
- hwmon: (jc42) Fix missing unlock on error in jc42_write()
- ALSA/ASoC: hda: move/rename snd_hdac_ext_stop_streams to hdac_stream.c
- ALSA: hda: add snd_hdac_stop_streams() helper
- [x86] ASoC: Intel: Skylake: Fix driver hang during shutdown
- ASoC: audio-graph-card: fix refcount leak of cpu_ep in
__graph_for_each_link()
- [x86] ASoC: rt5670: Remove unbalanced pm_runtime_put()
- pstore: Switch pmsg_lock to an rt_mutex to avoid priority inversion
- perf debug: Set debug_peo_args and redirect_to_stderr variable to correct
values in perf_quiet_option()
- afs: Fix lost servers_outstanding count
- pstore: Make sure CONFIG_PSTORE_PMSG selects CONFIG_RT_MUTEXES
- ima: Simplify ima_lsm_copy_rule
- ALSA: usb-audio: add the quirk for KT0206 device
- ALSA: hda/realtek: Add quirk for Lenovo TianYi510Pro-14IOB
- ALSA: hda/hdmi: Add HP Device 0x8711 to force connect list
- [arm64,armhf] usb: dwc3: Fix race between dwc3_set_mode and
__dwc3_set_mode
- [arm64,armhf] usb: dwc3: core: defer probe on ulpi_read_id timeout
- HID: wacom: Ensure bootloader PID is usable in hidraw mode
- reiserfs: Add missing calls to reiserfs_security_free()
- iio: adc: ad_sigma_delta: do not use internal iio_dev lock
- iio: adc128s052: add proper .data members in adc128_of_match table
- regulator: core: fix deadlock on regulator enable
- ovl: fix use inode directly in rcu-walk mode
- media: dvbdev: fix build warning due to comments
- media: dvbdev: fix refcnt bug
- [armhf] pwm: tegra: Fix 32 bit build
- [arm64,armhf] usb: dwc3: qcom: Fix memory leak in
dwc3_qcom_interconnect_init
- cifs: fix oops during encryption
- nvme-pci: fix doorbell buffer value endianness
- nvme-pci: fix mempool alloc size
- nvme-pci: fix page size checks
- ata: ahci: Fix PCS quirk application for suspend
- nvme: fix the NVME_CMD_EFFECTS_CSE_MASK definition
- [powerpc*] rtas: avoid device tree lookups in rtas_os_term()
- [powerpc*] rtas: avoid scheduling in rtas_os_term()
- HID: multitouch: fix Asus ExpertBook P2 P2451FA trackpoint
- HID: plantronics: Additional PIDs for double volume key presses quirk
- pstore/zone: Use GFP_ATOMIC to allocate zone buffer
- hfsplus: fix bug causing custom uid and gid being unable to be assigned
with mount
- binfmt: Fix error return code in load_elf_fdpic_binary()
- ovl: Use ovl mounter's fsuid and fsgid in ovl_link()
- ALSA: line6: correct midi status byte when receiving data from podxt
- ALSA: line6: fix stack overflow in line6_midi_transmit
- pnode: terminate at peers of source
- md: fix a crash in mempool_free
- mm, compaction: fix fast_isolate_around() to stay within boundaries
- f2fs: should put a page when checking the summary info
- mmc: vub300: fix warning - do not call blocking ops when !TASK_RUNNING
- tpm: acpi: Call acpi_put_table() to fix memory leak
- tpm: tpm_crb: Add the missed acpi_put_table() to fix memory leak
- tpm: tpm_tis: Add the missed acpi_put_table() to fix memory leak
- SUNRPC: Don't leak netobj memory when gss_read_proxy_verf() fails
- net/mlx5e: Fix nullptr in mlx5e_tc_add_fdb_flow()
- wifi: rtlwifi: remove always-true condition pointed out by GCC 12
- wifi: rtlwifi: 8192de: correct checking of IQK reload
- rcu: Prevent lockdep-RCU splats on lock acquisition/release
- net/af_packet: add VLAN support for AF_PACKET SOCK_RAW GSO
- net/af_packet: make sure to pull mac header
- media: stv0288: use explicitly signed char
- jbd2: use the correct print format
- [arm64] dts: qcom: sdm845-db845c: correct SPI2 pins drive strength
- btrfs: fix resolving backrefs for inline extent followed by prealloc
- [arm64] dts: qcom: sdm850-lenovo-yoga-c630: correct I2C12 pins drive
strength
- PM/devfreq: governor: Add a private governor_data for governor
- cpufreq: Init completion before kobject_init_and_add()
- ALSA: patch_realtek: Fix Dell Inspiron Plus 16
- ALSA: hda/realtek: Apply dual codec fixup for Dell Latitude laptops
- dm cache: Fix ABBA deadlock between shrink_slab and
dm_cache_metadata_abort
- dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata
- dm thin: Use last transaction's pmd->root when commit failed
- dm thin: resume even if in FAIL mode
- dm thin: Fix UAF in run_timer_softirq()
- dm integrity: Fix UAF in dm_integrity_dtr()
- dm cache: Fix UAF in destroy()
- dm cache: set needs_check flag after aborting metadata
- tracing/hist: Fix out-of-bound write on 'action_data.var_ref_idx'
- perf/core: Call LSM hook after copying perf_event_attr
- [x86] KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check
fails
- [x86] microcode/intel: Do not retry microcode reloading on the APs
- [x86] ftrace/x86: Add back ftrace_expected for ftrace bug reports
- [x86] kprobes: Fix kprobes instruction boudary check with CONFIG_RETHUNK
- tracing/hist: Fix wrong return value in parse_action_params()
- tracing: Fix infinite loop in tracing_read_pipe on overflowed
print_trace_line
- media: dvb-core: Fix double free in dvb_register_device()
- cifs: fix confusing debug message
- cifs: fix missing display of three mount options
- md/bitmap: Fix bitmap chunk size overflow issues
- efi: Add iMac Pro 2017 to uefi skip cert quirk
- wifi: wilc1000: sdio: fix module autoloading
- ipmi: fix long wait in unload when IPMI disconnect
- mtd: spi-nor: Check for zero erase size in spi_nor_find_best_erase_type()
- ima: Fix a potential NULL pointer access in ima_restore_measurement_list
- ipmi: fix use after free in _ipmi_destroy_user()
- PCI: Fix pci_device_is_present() for VFs by checking PF
- PCI/sysfs: Fix double free in error path
- driver core: Fix bus_type.match() error handling in __driver_attach()
- [amd64] iommu/amd: Fix ivrs_acpihid cmdline parsing code
- [armhf] remoteproc: core: Do pm_relax when in RPROC_OFFLINE state
- device_cgroup: Roll back to original exceptions after copy failure
- drm/connector: send hotplug uevent on connector cleanup
- [x86] drm/i915/dsi: fix VBT send packet port selection for dual link DSI
- ext4: silence the warning when evicting inode with dioread_nolock
- ext4: add inode table check in __ext4_get_inode_loc to aovid possible
infinite loop
- ext4: fix use-after-free in ext4_orphan_cleanup
- ext4: fix undefined behavior in bit shift for ext4_check_flag_values
- ext4: add EXT4_IGET_BAD flag to prevent unexpected bad inode
- ext4: add helper to check quota inums
- ext4: fix bug_on in __es_tree_search caused by bad quota inode
- ext4: fix reserved cluster accounting in __es_remove_extent()
- ext4: check and assert if marking an no_delete evicting inode dirty
- ext4: fix bug_on in __es_tree_search caused by bad boot loader inode
- ext4: init quota for 'old.inode' in 'ext4_rename'
- ext4: fix delayed allocation bug in ext4_clu_mapped for bigalloc + inline
- ext4: fix corruption when online resizing a 1K bigalloc fs
- ext4: fix error code return to user-space in ext4_get_branch()
- ext4: avoid BUG_ON when creating xattrs
- ext4: fix inode leak in ext4_xattr_inode_create() on an error path
- ext4: initialize quota before expanding inode in setproject ioctl
- ext4: avoid unaccounted block allocation when expanding inode
- ext4: allocate extended attribute value in vmalloc area
- drm/amdgpu: handle polaris10/11 overlap asics (v2)
- drm/amdgpu: make display pinning more flexible (v2)
- [armel,armhf] renumber bits related to _TIF_WORK_MASK
- [x86] perf/x86/intel/uncore: Generalize I/O stacks to PMON mapping
procedure
- [x86] perf/x86/intel/uncore: Clear attr_update properly
- btrfs: replace strncpy() with strscpy()
- [x86] mce: Get rid of msr_ops
- [x86] MCE/AMD: Clear DFR errors found in THR handler
- perf probe: Use dwarf_attr_integrate as generic DWARF attr accessor
- perf probe: Fix to get the DW_AT_decl_file and DW_AT_call_file as unsinged
data
- [x86] kprobes: Convert to insn_decode()
- [x86] kprobes: Fix optprobe optimization check with CONFIG_RETHUNK
- ext4: goto right label 'failed_mount3a'
- ext4: correct inconsistent error msg in nojournal mode
- mm/highmem: Lift memcpy_[to|from]_page to core
- ext4: use memcpy_to_page() in pagecache_write()
- fs: ext4: initialize fsdata in pagecache_write()
- ext4: move functions in super.c
- ext4: simplify ext4 error translation
- ext4: fix various seppling typos
- ext4: fix leaking uninitialized memory in fast-commit journal
- ext4: use kmemdup() to replace kmalloc + memcpy
- mbcache: don't reclaim used entries
- mbcache: add functions to delete entry if unused
- ext4: remove EA inode entry from mbcache on inode eviction
- ext4: unindent codeblock in ext4_xattr_block_set()
- ext4: fix race when reusing xattr blocks
- mbcache: automatically delete entries from cache on freeing
- ext4: fix deadlock due to mbcache entry corruption
- SUNRPC: ensure the matching upcall is in-flight upon downcall
- bpf: pull before calling skb_postpull_rcsum()
- [arm64,armhf] drm/panfrost: Fix GEM handle creation ref-counting
- [x86] vmxnet3: correctly report csum_level for encapsulated packet
- veth: Fix race with AF_XDP exposing old or uninitialized descriptors
- nfsd: shut down the NFSv4 state objects before the filecache
- [arm64] net: hns3: add interrupts re-initialization while doing VF FLR
- net: sched: fix memory leak in tcindex_set_parms
- qlcnic: prevent ->dcb use-after-free on qlcnic_dcb_enable() failure
- nfc: Fix potential resource leaks
- vhost/vsock: Fix error handling in vhost_vsock_init()
- vhost: fix range used in translate_desc()
- net/mlx5: Add forgotten cleanup calls into mlx5_init_once() error path
- net/mlx5: Avoid recovery in probe flows
- net/mlx5e: IPoIB, Don't allow CQE compression to be turned on by default
- net/mlx5e: Fix hw mtu initializing at XDP SQ allocation
- [amd64,arm64] net: amd-xgbe: add missed tasklet_kill
- RDMA/mlx5: Fix validation of max_rd_atomic caps for DC
- [arm64] drm/meson: Reduce the FIFO lines held when AFBC is not used
- filelock: new helper: vfs_inode_has_locks
- ceph: switch to vfs_inode_has_locks() to fix file lock bug
- netfilter: ipset: fix hash:net,port,net hang with /0 subnet
- netfilter: ipset: Rework long task execution when adding/deleting entries
- perf tools: Fix resources leak in perf_data__open_dir()
- drivers/net/bonding/bond_3ad: return when there's no aggregator
- usb: rndis_host: Secure rndis_query check against int overflow
- [x86] drm/i915: unpin on error in intel_vgpu_shadow_mm_pin()
- udf: Fix extension of the last extent in the file
- [x86] ASoC: Intel: bytcr_rt5640: Add quirk for the Advantech MICA-071
tablet
- nvme: fix multipath crash caused by flush request when blktrace is enabled
- [x86] bugs: Flush IBP in ib_prctl_set() (CVE-2023-0045)
- nfsd: fix handling of readdir in v4root vs. mount upcall timeout
- fbdev: matroxfb: G200eW: Increase max memory from 1 MB to 16 MB
- [x86] drm/i915/gvt: fix gvt debugfs destroy
- [x86] drm/i915/gvt: fix vgpu debugfs clean in remove
- ext4: don't allow journal inode to have encrypt flag
- hfs/hfsplus: use WARN_ON for sanity check
- hfs/hfsplus: avoid WARN_ON() for sanity check, use proper error handling
- mbcache: Avoid nesting of cache->c_list_lock under bit locks
- efi: random: combine bootloader provided RNG seed with RNG protocol output
- io_uring: Fix unsigned 'res' comparison with zero in io_fixup_rw_res()
- ext4: disable fast-commit of encrypted dir operations
- ext4: don't set up encryption key during jbd2 transaction
- [arm64] fsl_lpuart: Don't enable interrupts too early
- serial: fixup backport of "serial: Deassert Transmit Enable on probe in
driver-specific way"
- net/ulp: prevent ULP without clone op from entering the LISTEN status
(CVE-2023-0461)
- ALSA: hda/hdmi: Add a HP device 0x8715 to force connect list
- ALSA: hda - Enable headset mic on another Dell laptop with ALC3254
https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.164
- ALSA: hda/realtek: Enable mute/micmute LEDs on HP Spectre x360 13-aw0xxx
- [arm64] KVM: arm64: Fix S1PTW handling on RO memslots
- efi: tpm: Avoid READ_ONCE() for accessing the event log
- docs: Fix the docs build with Sphinx 6.0
- perf auxtrace: Fix address filter duplicate symbol selection
- [arm64] ASoC: qcom: lpass-cpu: Fix fallback SD line index handling
- [s390x] cpum_sf: add READ_ONCE() semantics to compare and swap loops
- [s390x] percpu: add READ_ONCE() to arch_this_cpu_to_op_simple()
- cifs: Fix uninitialized memory read for smb311 posix symlink create
- [arm64] drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for
aux transfer
- [x86] platform/x86: sony-laptop: Don't turn off 0x153 keyboard backlight
during probe
- ixgbe: fix pci device refcount leak
- bus: mhi: host: Fix race between channel preparation and M0 event
- [amd64] iommu/amd: Add PCI segment support for ivrs_[ioapic/hpet/acpihid]
commands
- [amd64] iommu/amd: Fix ill-formed ivrs_ioapic, ivrs_hpet and ivrs_acpihid
options
- [arm64] clk: imx8mp: Add DISP2 pixel clock
- [arm64] clk: imx8mp: add clkout1/2 support
- dt-bindings: clocks: imx8mp: Add ID for usb suspend clock
- [arm64] clk: imx: imx8mp: add shared clk gate for usb suspend clk
- xhci: Avoid parsing transfer events several times
- xhci: get isochronous ring directly from endpoint structure
- xhci: adjust parameters passed to cleanup_halted_endpoint()
- xhci: Add xhci_reset_halted_ep() helper function
- xhci: move xhci_td_cleanup so it can be called by more functions
- xhci: store TD status in the td struct instead of passing it along
- xhci: move and rename xhci_cleanup_halted_endpoint()
- xhci: Prevent infinite loop in transaction errors recovery for streams
- [arm64,armhf] usb: ulpi: defer ulpi_register on ulpi_read_id timeout
- ext4: fix uninititialized value in 'ext4_evict_inode'
- xfrm: fix rcu lock in xfrm_notify_userpolicy()
- netfilter: ipset: Fix overflow before widen in the bitmap_ip_create()
function.
- [powerpc*] imc-pmu: Fix use of mutex in IRQs disabled section
- [x86] boot: Avoid using Intel mnemonics in AT&T syntax asm
- EDAC/device: Fix period calculation in edac_device_reset_delay_period()
- [arm64] ASoC: wm8904: fix wrong outputs volume after power reactivation
- tipc: fix unexpected link reset due to discovery messages
- hvc/xen: lock console list traversal
- nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
- net/sched: act_mpls: Fix warning during failed attribute validation
- net/mlx5: Fix ptp max frequency adjustment range
- net/mlx5e: Don't support encap rules with gbp option
- mm: Always release pages to the buddy allocator in memblock_free_late().
- Documentation: KVM: add API issues section
- [x86] KVM: x86: Do not return host topology information from
KVM_GET_SUPPORTED_CPUID
- [x86] resctrl: Use task_curr() instead of task_struct->on_cpu to prevent
unnecessary IPI
- [x86] resctrl: Fix task CLOSID/RMID update race
- [arm64] atomics: remove LL/SC trampolines
- [arm64] cmpxchg_double*: hazard against entire exchange variable
- efi: fix NULL-deref in init error path
- drm/virtio: Fix GEM handle creation UAF
- io_uring/io-wq: free worker if task_work creation is canceled
- io_uring/io-wq: only free worker if it was allocated for creation
- Revert "usb: ulpi: defer ulpi_register on ulpi_read_id timeout"
https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.165
- btrfs: fix trace event name typo for FLUSH_DELAYED_REFS
- pNFS/filelayout: Fix coalescing test for single DS
- net/ethtool/ioctl: return -EOPNOTSUPP if we have no phy stats
- btrfs: always report error in run_one_delayed_ref()
- [x86] asm: Fix an assembler warning with current binutils
- f2fs: let's avoid panic if extent_tree is not created
- wifi: brcmfmac: fix regression for Broadcom PCIe wifi devices
- wifi: mac80211: sdata can be NULL during AMPDU start
- zonefs: Detect append writes at invalid locations
- nilfs2: fix general protection fault in nilfs_btree_insert()
- efi: fix userspace infinite retry read efivars after EFI runtime services
page fault
- ALSA: hda/realtek - Turn on power early
- [x86] drm/i915/gt: Reset twice
- Bluetooth: hci_qca: Wait for timeout during suspend
- Bluetooth: hci_qca: Fix driver shutdown on closed serdev
- io_uring: don't gate task_work run on TIF_NOTIFY_SIGNAL
- io_uring: improve send/recv error handling
- io_uring: ensure recv and recvmsg handle MSG_WAITALL correctly
- io_uring: add flag for disabling provided buffer recycling
- io_uring: support MSG_WAITALL for IORING_OP_SEND(MSG)
- io_uring: allow re-poll if we made progress
- io_uring: fix async accept on O_NONBLOCK sockets
- io_uring: check for valid register opcode earlier
- io_uring: lock overflowing for IOPOLL
- io_uring: fix CQ waiting timeout handling
- io_uring: ensure that cached task references are always put on exit
- io_uring: remove duplicated calls to io_kiocb_ppos
- io_uring: update kiocb->ki_pos at execution time
- io_uring: do not recalculate ppos unnecessarily
- io_uring/rw: defer fsnotify calls to task context
- xhci-pci: set the dma max_seg_size
- usb: xhci: Check endpoint is valid before dereferencing it
- xhci: Fix null pointer dereference when host dies
- xhci: Add update_hub_device override for PCI xHCI hosts
- xhci: Add a flag to disable USB3 lpm on a xhci root port level.
- usb: acpi: add helper to check port lpm capability using acpi _DSM
- xhci: Detect lpm incapable xHC USB3 roothub ports from ACPI tables
- prlimit: do_prlimit needs to have a speculation check (CVE-2023-0458)
- USB: serial: option: add Quectel EM05-G (GR) modem
- USB: serial: option: add Quectel EM05-G (CS) modem
- USB: serial: option: add Quectel EM05-G (RS) modem
- USB: serial: option: add Quectel EC200U modem
- USB: serial: option: add Quectel EM05CN (SG) modem
- USB: serial: option: add Quectel EM05CN modem
- USB: misc: iowarrior: fix up header size for
USB_DEVICE_ID_CODEMERCS_IOW100
- usb: core: hub: disable autosuspend for TI TUSB8041
- [x86] comedi: adv_pci1760: Fix PWM instruction handling
- [arm64,armhf] mmc: sunxi-mmc: Fix clock refcount imbalance during unbind
- [arm64,armhf] mmc: sdhci-esdhc-imx: correct the tuning start tap and step
setting
- btrfs: fix race between quota rescan and disable leading to NULL pointer
deref
- cifs: do not include page data when checking signature
- [x86] thunderbolt: Use correct function to calculate maximum USB3 link
rate
- USB: gadgetfs: Fix race between mounting and unmounting
- USB: serial: cp210x: add SCALANCE LPE-9000 device id
- usb: typec: altmodes/displayport: Add pin assignment helper
- usb: typec: altmodes/displayport: Fix pin assignment calculation
- usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()
- usb-storage: apply IGNORE_UAS only for HIKSEMI MD202 on RTL9210
- [i386] serial: pch_uart: Pass correct sg to dma_unmap_sg()
- [arm64] dmaengine: tegra210-adma: fix global intr clear
- [x86] mei: me: add meteor lake point M DID
- [x86] drm/i915: re-disable RC6p on Sandy Bridge
- drm/amd/display: Fix set scaling doesn's work
- drm/amd/display: Calculate output_color_space after pixel encoding
adjustment
- drm/amd/display: Fix COLOR_SPACE_YCBCR2020_TYPE matrix
- [arm64] efi: Execute runtime services from a dedicated stack
- [arm64] efi: rt-wrapper: Add missing include
- Revert "drm/amdgpu: make display pinning more flexible (v2)"
- [x86] fpu: Use _Alignof to avoid undefined behavior in TYPE_ALIGN
- tracing: Use alignof__(struct {type b;}) instead of offsetof()
- io_uring: io_kiocb_update_pos() should not touch file for non -1 offset
- io_uring/net: fix fast_iov assignment in io_setup_async_msg()
- net/ulp: use consistent error code when blocking ULP
- net/mlx5: fix missing mutex_unlock in mlx5_fw_fatal_reporter_err_work()
- Revert "wifi: mac80211: fix memory leak in ieee80211_if_add()"
- Bluetooth: hci_qca: Wait for SSR completion during suspend
- Bluetooth: hci_qca: check for SSR triggered flag while suspend
- Bluetooth: hci_qca: Fixed issue during suspend
- mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma
- io_uring: Clean up a false-positive warning from GCC 9.3.0
- io_uring: fix double poll leak on repolling
- io_uring/rw: ensure kiocb_end_write() is always called
- io_uring/rw: remove leftover debug statement
https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.166
- clk: generalize devm_clk_get() a bit
- clk: Provide new devm_clk helpers for prepared and enabled clocks
- [armel,armhf] memory: mvebu-devbus: Fix missing clk_disable_unprepare in
mvebu_devbus_probe()
- [armhf] dts: imx6ul-pico-dwarf: Use 'clock-frequency'
- [armhf] imx: add missing of_node_put()
- [amd64] HID: intel_ish-hid: Add check for ishtp_dma_tx_map
- tomoyo: fix broken dependency on *.conf.default
- RDMA/core: Fix ib block iterator counter overflow
- [amd64] IB/hfi1: Reject a zero-length user expected buffer
- [amd64] IB/hfi1: Reserve user expected TIDs
- [amd64] IB/hfi1: Fix expected receive setup error exit issues
- [amd64] IB/hfi1: Immediately remove invalid memory from hardware
- [amd64] IB/hfi1: Remove user expected buffer invalidate race
- affs: initialize fsdata in affs_truncate()
- [amd64,arm64] amd-xgbe: TX Flow Ctrl Registers are h/w ver dependent
- [amd64,arm64] amd-xgbe: Delay AN timeout during KR training
- bpf: Fix pointer-leak due to insufficient speculative store bypass
mitigation
- [arm64] phy: rockchip-inno-usb2: Fix missing clk_disable_unprepare() in
rockchip_usb2phy_power_on()
- net: nfc: Fix use-after-free in local_cleanup()
- [arm64,armhf] gpio: mxc: Always set GPIOs used as interrupt source to
INPUT mode
- wifi: rndis_wlan: Prevent buffer overflow in rndis_query_oid
(CVE-2023-23559)
- net/sched: sch_taprio: fix possible use-after-free
- l2tp: Serialize access to sk_user_data with sk_callback_lock
(CVE-2022-4129)
- l2tp: Don't sleep and disable BH under writer-side sk_callback_lock
(CVE-2022-4129)
- l2tp: convert l2tp_tunnel_list to idr
- l2tp: close all race conditions in l2tp_tunnel_register()
- net: usb: sr9700: Handle negative len
- net: mdio: validate parameter addr in mdiobus_get_phy()
- HID: check empty report_list in hid_validate_values() (CVE-2023-1073)
- HID: check empty report_list in bigben_probe()
- net: stmmac: fix invalid call to mdiobus_get_phy()
- HID: revert CHERRY_MOUSE_000C quirk
- usb: gadget: f_fs: Prevent race during ffs_ep0_queue_wait
- usb: gadget: f_fs: Ensure ep0req is dequeued before free_request
- net: mlx5: eliminate anonymous module_init & module_exit
- dmaengine: Fix double increment of client_count in dma_chan_get()
- [arm64] net: macb: fix PTP TX timestamp failure due to packet padding
- l2tp: prevent lockdep issue in l2tp_tunnel_register()
- HID: betop: check shape of output reports
- nvme-pci: fix timeout request state check
- tcp: avoid the lookup process failing to get sk in ehash table
- w1: fix deadloop in __w1_remove_master_device()
- w1: fix WARNING after calling w1_process()
- driver core: Fix test_async_probe_init saves device in wrong array
- tcp: fix rate_app_limited to default to 1
- scsi: iscsi: Fix multiple iSCSI session unbind events sent to userspace
- [arm64,armhf] cpufreq: Add Tegra234 to cpufreq-dt-platdev blocklist
- drm: Add orientation quirk for Lenovo ideapad D330-10IGL
- [arm64] cpufreq: armada-37xx: stop using 0 as NULL pointer
- [armhf] ASoC: fsl_ssi: Rename AC'97 streams to avoid collisions with AC'97
CODEC
- spi: spidev: remove debug messages that access spidev->spi without locking
- [s390x] KVM: s390: interrupt: use READ_ONCE() before cmpxchg()
- [arm64] scsi: hisi_sas: Set a port invalid only if there are no devices
attached when refreshing port id
- [x86] platform/x86: touchscreen_dmi: Add info for the CSL Panther Tab HD
- [x86] platform/x86: asus-nb-wmi: Add alternate mapping for KEY_SCREENLOCK
- lockref: stop doing cpu_relax in the cmpxchg loop
- netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state
- [x86] ACPI: cstate: Optimize C3 entry on AMD CPUs
- fs: reiserfs: remove useless new_opts in reiserfs_remount
- sysctl: add a new register_sysctl_init() interface
- kernel/panic: move panic sysctls to its own file
- panic: unset panic_on_warn inside panic()
- exit: Add and use make_task_dead.
- objtool: Add a missing comma to avoid string concatenation
- panic: Separate sysctl logic from CONFIG_SMP
- exit: Put an upper limit on how often we can oops
- exit: Expose "oops_count" to sysfs
- exit: Allow oops_limit to be disabled
- panic: Consolidate open-coded panic_on_warn checks
- panic: Introduce warn_limit
- panic: Expose "warn_count" to sysfs
- docs: Fix path paste-o for /sys/kernel/warn_count
- exit: Use READ_ONCE() for all oops/warn limit reads
- Bluetooth: hci_sync: cancel cmd_timer if hci_open failed
- xhci: Set HCD flag to defer primary roothub registration
- scsi: hpsa: Fix allocation size for scsi_host_alloc()
- module: Don't wait for GOING modules
- tracing: Make sure trace_printk() can output as soon as it can be used
- trace_events_hist: add check for return value of 'create_hist_field'
- ftrace/scripts: Update the instructions for ftrace-bisect.sh
- cifs: Fix oops due to uncleared server->smbd_conn in reconnect
- [x86] KVM: x86/vmx: Do not skip segment attributes if unusable bit is set
- [x86] thermal: intel: int340x: Protect trip temperature from concurrent
updates
- EDAC/device: Respect any driver-supplied workqueue polling value
- units: Add Watt units
- units: Add SI metric prefix definitions
- i2c: designware: Use DIV_ROUND_CLOSEST() macro
- i2c: designware: use casting of u64 in clock multiplication to avoid
overflow
- netlink: prevent potential spectre v1 gadgets
- net: fix UaF in netns ops registration error path
- netfilter: nft_set_rbtree: Switch to node list walk for overlap detection
- netfilter: nft_set_rbtree: skip elements in transaction from garbage
collection
- netlink: annotate data races around nlk->portid
- netlink: annotate data races around dst_portid and dst_group
- netlink: annotate data races around sk_state
- ipv4: prevent potential spectre v1 gadget in ip_metrics_convert()
- ipv4: prevent potential spectre v1 gadget in fib_metrics_match()
- netfilter: conntrack: fix vtag checks for ABORT/SHUTDOWN_COMPLETE
- netrom: Fix use-after-free of a listening socket.
- net/sched: sch_taprio: do not schedule in taprio_reset()
- sctp: fail if no bound addresses can be used for a given scope
(CVE-2023-1074)
- [x86] thermal: intel: int340x: Add locking to
int340x_thermal_get_trip_type()
- net/tg3: resolve deadlock in tg3_reset_task() during EEH
- [arm64,armhf] net: mdio-mux-meson-g12a: force internal PHY off on mux
switch
- Revert "Input: synaptics - switch touchpad on HP Laptop 15-da3001TU to RMI
mode"
- nouveau: explicitly wait on the fence in nouveau_bo_move_m2mf
(Closes: #989705)
- nfsd: Ensure knfsd shuts down when the "nfsd" pseudofs is unmounted
- block: fix and cleanup bio_check_ro
- [x86] i8259: Mark legacy PIC interrupts with IRQ_LEVEL
- netfilter: conntrack: unify established states for SCTP paths
- [x86] perf/x86/amd: fix potential integer overflow on shift of a int
- clk: Fix pointer casting to prevent oops in devm_clk_release()
https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.167
- [armhf] dts: imx: Fix pca9547 i2c-mux node name
- [arm64] dts: imx8mq-thor96: fix no-mmc property for SDHCI
- bpf: Skip task with pid=1 in send_signal_common()
- blk-cgroup: fix missing pd_online_fn() while activating policy
- [armhf] dmaengine: imx-sdma: Fix a possible memory leak in
sdma_transfer_init
- ACPI: processor idle: Practically limit "Dummy wait" workaround to old
Intel systems
- Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt
- net: fix NULL pointer in skb_segment_list
https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.168
- firewire: fix memory leak for payload of request subaction to IEC 61883-1
FCP region
- [arm64,armhf] bus: sunxi-rsb: Fix error handling in sunxi_rsb_init()
- bpf: Fix incorrect state pruning for <8B spill/fill
- [powerpc*] imc-pmu: Revert nest_init_lock to being a mutex
- bpf: Fix a possible task gone issue with bpf_send_signal[_thread]()
helpers
- ALSA: hda/via: Avoid potential array out-of-bound in add_secret_dac_path()
- bpf: Support <8-byte scalar spill and refill
- bpf: Fix to preserve reg parent/live fields when copying range info
- bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener
- [arm*] drm/vc4: hdmi: make CEC adapter name unique
- scsi: Revert "scsi: core: map PQ=1, PDT=other values to
SCSI_SCAN_TARGET_PRESENT"
- vhost/net: Clear the pending messages when the backend is removed
- [armhf] WRITE is "data source", not destination...
- fix iov_iter_bvec() "direction" argument
- fix "direction" argument of iov_iter_kvec()
- virtio-net: execute xdp_do_flush() before napi_complete_done()
- sfc: correctly advertise tunneled IPv6 segmentation
- net: phy: dp83822: Fix null pointer access on DP83825/DP83826 devices
- netrom: Fix use-after-free caused by accept on already connected socket
- netfilter: br_netfilter: disable sabotage_in hook after first suppression
- squashfs: harden sanity check in squashfs_read_xattr_id_table
- [arm64] net: phy: meson-gxl: Add generic dummy stubs for MMD register
access
- igc: return an error if the mac type is unknown in
igc_ptp_systim_to_hwtstamp()
- can: j1939: fix errant WARN_ON_ONCE in j1939_session_deactivate
- ata: libata: Fix sata_down_spd_limit() when no link speed is reported
- virtio-net: Keep stop() to follow mirror sequence of open()
- net: openvswitch: fix flow memory leak in ovs_flow_cmd_new
- efi: fix potential NULL deref in efi_mem_reserve_persistent
- qede: add netpoll support for qede driver
- qede: execute xdp_do_flush() before napi_complete_done()
- scsi: target: core: Fix warning on RT kernels
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
(CVE-2023-2162)
- [arm64,armhf] i2c: rk3x: fix a bunch of kernel-doc warnings
- [x86] platform/x86: dell-wmi: Add a keymap for KEY_MUTE in type 0x0010
table
- [arm64] usb: dwc3: dwc3-qcom: Fix typo in the dwc3 vbus override API
- [arm64] usb: dwc3: qcom: enable vbus override when in OTG dr-mode
- usb: gadget: f_fs: Fix unbalanced spinlock in __ffs_ep0_queue_wait
- vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
- Input: i8042 - move __initconst to fix code styling warning
- Input: i8042 - merge quirk tables
- Input: i8042 - add TUXEDO devices to i8042 quirk tables
- Input: i8042 - add Clevo PCX0DX to i8042 quirk table
- fbcon: Check font dimension limits
- net: qrtr: free memory on error path in radix_tree_insert()
- [s390x] watchdog: diag288_wdt: do not use stack buffers for hardware data
- [s390x] watchdog: diag288_wdt: fix __diag288() inline assembly
- ALSA: hda/realtek: Add Acer Predator PH315-54
- efi: Accept version 2 of memory attributes table
- iio: hid: fix the retval in accel_3d_capture_sample
- iio: imu: fxos8700: fix ACCEL measurement range selection
- iio: imu: fxos8700: fix incomplete ACCEL and MAGN channels readback
- iio: imu: fxos8700: fix IMU data bits returned to user space
- iio: imu: fxos8700: fix map label of channel type to MAGN sensor
- iio: imu: fxos8700: fix swapped ACCEL and MAGN channels readback
- iio: imu: fxos8700: fix incorrect ODR mode readback
- iio: imu: fxos8700: fix failed initialization ODR mode assignment
- iio: imu: fxos8700: remove definition FXOS8700_CTRL_ODR_MIN
- iio: imu: fxos8700: fix MAGN sensor scale and unit
- mm: hugetlb: proc: check for hugetlb shared PMD in /proc/PID/smaps
- [x86] debug: Fix stack recursion caused by wrongly ordered DR7 accesses
- mm/swapfile: add cond_resched() in get_swap_pages()
- Squashfs: fix handling and sanity checking of xattr_ids count
- [x86] drm/i915: Fix potential bit_17 double-free
- nvmem: core: initialise nvmem->id early
- nvmem: core: fix cell removal on error
- serial: 8250_dma: Fix DMA Rx completion race
- serial: 8250_dma: Fix DMA Rx rearm race
- fbdev: smscufx: fix error handling code in ufx_usb_probe
- f2fs: fix to do sanity check on i_extra_isize in is_alive()
- wifi: brcmfmac: Check the count value of channel spec to prevent
out-of-bounds reads
- nvmem: core: Fix a conflict between MTD and NVMEM on wp-gpios property
- bpf: Do not reject when the stack read size is different from the tracked
scalar size
- mm/migration: return errno when isolate_huge_page failed
- migrate: hugetlb: check for hugetlb shared PMD in node migration
- btrfs: limit device extents to the device size
- btrfs: zlib: zero-initialize zlib workspace
- ALSA: hda/realtek: Add Positivo N14KP6-TG
- ALSA: emux: Avoid potential array out-of-bound in snd_emux_xg_control()
- ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy Book2 Pro 360
- tracing: Fix poll() and select() do not work on per_cpu trace_pipe and
trace_pipe_raw
- of/address: Return an error when no valid dma-ranges are found
(Closes: #993612)
- can: j1939: do not wait 250 ms if the same addr was already claimed
- [amd64] IB/hfi1: Restore allocated resources on failed copyout
- IB/IPoIB: Fix legacy IPoIB due to wrong number of queues
- [amd64] RDMA/usnic: use iommu_map_atomic() under spin_lock()
- xfrm: fix bug with DSCP copy to v6 from v4 tunnel
- bonding: fix error checking in bond_debug_reregister()
- [arm64] net: phy: meson-gxl: use MMD access dummy stubs for GXL, internal
PHY
- ice: Do not use WQ_MEM_RECLAIM flag for workqueue
- [arm64] net: mscc: ocelot: fix VCAP filters not matching on MAC with
"protocol 802.1Q"
- net/mlx5e: IPoIB, Show unknown speed instead of error
- net/mlx5: fw_tracer, Clear load bit when freeing string DBs buffers
- net/mlx5: fw_tracer, Zero consumer index when reloading the tracer
- rds: rds_rm_zerocopy_callback() use list_first_entry() (CVE-2023-1078)
- ALSA: pci: lx6464es: fix a debug loop
- [armhf] pinctrl: aspeed: Fix confusing types in return value
- [arm64,armhf] pinctrl: single: fix potential NULL dereference
- [x86] pinctrl: intel: Restore the pins that used to be in Direct IRQ mode
- cifs: Fix use-after-free in rdata->read_into_pages()
- net: USB: Fix wrong-direction WARNING in plusb.c
- btrfs: free device in btrfs_close_devices for a single device filesystem
- usb: core: add quirk for Alcor Link AK9563 smartcard reader
- usb: typec: altmodes/displayport: Fix probe pin assign check
- ceph: flush cap releases when the session is flushed
- Fix page corruption caused by racy check in __free_pages
https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.169
- [x86] ASoC: Intel: sof_rt5682: always set dpcm_capture for amplifiers
- ALSA: hda: Do not unset preset when cleaning up codec
- net/rose: Fix to not accept on connected socket
- net: stmmac: do not stop RX_CLK in Rx LPI state for qcs404 SoC
- net: sched: sch: Bounds check priority
- [s390x] decompressor: specify __decompress() buf len to avoid overflow
- nvme-fc: fix a missing queue put in nvmet_fc_ls_create_association
- nvmem: core: add error handling for dev_set_name
- nvmem: core: remove nvmem_config wp_gpio
- nvmem: core: fix cleanup after dev_set_name()
- nvmem: core: fix registration vs use race
- aio: fix mremap after fork null-deref
- [s390x] signal: fix endless loop in do_signal (Closes: #1031753)
- ovl: remove privs in ovl_copyfile()
- ovl: remove privs in ovl_fallocate()
- netfilter: nft_tproxy: restrict to prerouting hook
- mmc: sdio: fix possible resource leaks in some error paths
- [arm64,armhf] mmc: mmc_spi: fix error handling in mmc_spi_probe()
- ALSA: hda/conexant: add a new hda codec SN6180
- ALSA: hda/realtek - fixed wrong gpio assigned
- sched/psi: Fix use-after-free in ep_remove_wait_queue()
- hugetlb: check for undefined shift on 32 bit architectures
- Revert "mm: Always release pages to the buddy allocator in
memblock_free_late()."
- net: Fix unwanted sign extension in netdev_stats_to_stats64()
- revert "squashfs: harden sanity check in squashfs_read_xattr_id_table"
- ixgbe: allow to increase MTU to 3K with XDP enabled
- i40e: add double of VLAN header when computing the max MTU
- sctp: sctp_sock_filter(): avoid list_entry() on possibly empty list
- net/sched: tcindex: update imperfect hash filters respecting rcu
(CVE-2023-1281)
- dccp/tcp: Avoid negative sk_forward_alloc by ipv6_pinfo.pktoptions.
- net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
- net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()
- net: stmmac: fix order of dwmac5 FlexPPS parametrization sequence
- bnxt_en: Fix mqprio and XDP ring checking logic
- net: stmmac: Restrict warning on disabling DMA store and fwd mode
- net: mpls: fix stale pointer if allocation fails during device rename
(CVE-2023-26545)
- ixgbe: add double of VLAN header when computing the max MTU
- ipv6: Fix datagram socket connection with DSCP.
- ipv6: Fix tcp socket connection with DSCP.
- nilfs2: fix underflow in second superblock position calculations
- [x86] drm/i915/gen11: Moving WAs to icl_gt_workarounds_init()
- [x86] drm/i915/gen11: Wa_1408615072/Wa_1407596294 should be on GT list
- flow_offload: fill flags to action structure
- net/sched: act_ctinfo: use percpu stats
- i40e: Add checking for null for nlmsg_find_attr()
- net/sched: tcindex: search key must be 16 bits
- [x86] kvm: initialize all of the kvm_debugregs structure before sending it
to userspace (CVE-2023-1513)
- alarmtimer: Prevent starvation by small intervals and SIG_IGN
- [x86] ASoC: SOF: Intel: hda-dai: fix possible stream_tag leak
- net: sched: sch: Fix off by one in htb_activate_prios()
- nvmem: core: fix return value
https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.170
- [armhf] drm/etnaviv: don't truncate physical page address
- wifi: rtl8xxxu: gen2: Turn on the rate control
- powerpc: dts: t208x: Mark MAC1 and MAC2 as 10G
- random: always mix cycle counter in add_latent_entropy()
- [x86] KVM: x86: Fail emulation during EMULTYPE_SKIP on any exception
- [x86] KVM: SVM: Skip WRMSR fastpath on VM-Exit if next RIP isn't valid
- [x86] KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
(CVE-2022-2196)
- [x86] drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
(CVE-2022-3707)
- mac80211: mesh: embedd mesh_paths and mpp_paths into ieee80211_if_mesh
- uaccess: Add speculation barrier to copy_from_user() (CVE-2023-0459)
- Revert "Revert "block: nbd: add sanity check for first_minor""
- nbd: fix max value for 'first_minor'
- nbd: fix possible overflow for 'first_minor' in nbd_dev_add()
- nbd: fix possible overflow on 'first_minor' in nbd_dev_add()
- wifi: mwifiex: Add missing compatible string for SD8787
- audit: update the mailing list in MAINTAINERS
- ext4: Fix function prototype mismatch for ext4_feat_ktype
- Revert "net/sched: taprio: make qdisc_leaf() see the per-netdev-queue
pfifo child qdiscs"
- bpf: add missing header file include
https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.171
- Fix XFRM-I support for nested ESP tunnels
- [arm64] dts: rockchip: drop unused LED mode property from rk3328-roc-cc
- [amd64,arm64] ACPI: NFIT: fix a potential deadlock during NFIT teardown
- btrfs: send: limit number of clones and allocated memory size
- [amd64] IB/hfi1: Assign npages earlier
- neigh: make sure used and confirmed times are valid
- HID: core: Fix deadloop in hid_apply_multiplier.
- bpf: bpf_fib_lookup should not return neigh in NUD_FAILED state
- net: Remove WARN_ON_ONCE(sk->sk_forward_alloc) from
sk_stream_kill_queues().
- vc_screen: don't clobber return value in vcs_read
- md: Flush workqueue md_rdev_misc_wq in md_alloc()
- drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init
(CVE-2023-22998)
- drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling
(CVE-2023-22998)
- USB: serial: option: add support for VW/Skoda "Carstick LTE"
- usb: gadget: u_serial: Add null pointer check in gserial_resume
- USB: core: Don't hold device lock while reading the "descriptors" sysfs
file
- io_uring: add missing lock in io_get_file_fixed (CVE-2023-1872)
https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.172
- io_uring: ensure that io_init_req() passes in the right issue_flags
(CVE-2023-1872)
https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.173
- HID: asus: Remove check for same LED brightness on set
- HID: asus: use spinlock to protect concurrent accesses
- HID: asus: use spinlock to safely schedule workers (CVE-2023-1079)
- [powerpc*] mm: Rearrange if-else block to avoid clang warning
- [armhf] OMAP2+: Fix memory leak in realtime_counter_init()
- [arm64] dts: qcom: sdm845-db845c: fix audio codec interrupt pin name
- [armhf] imx: Call ida_simple_remove() for ida_simple_get
- [armhf] dts: sun8i: nanopi-duo2: Fix regulator GPIO reference
- blk-mq: avoid sleep in blk_mq_alloc_request_hctx
- blk-mq: remove stale comment for blk_mq_sched_mark_restart_hctx
- blk-mq: correct stale comment of .get_budget
- [s390x] dasd: Prepare for additional path event handling
- [s390x] dasd: Fix potential memleak in dasd_eckd_init()
- sched/deadline,rt: Remove unused parameter from pick_next_[rt|dl]_entity()
- sched/rt: pick_next_rt_entity(): check list_entry (CVE-2023-1077)
- [x86] perf/zhaoxin: Add stepping check for ZXC
- block: bio-integrity: Copy flags when bio_integrity_payload is cloned
- wifi: rsi: Fix memory leak in rsi_coex_attach()
- wifi: rtlwifi: rtl8821ae: don't call kfree_skb() under spin_lock_irqsave()
- wifi: rtlwifi: rtl8188ee: don't call kfree_skb() under spin_lock_irqsave()
- wifi: rtlwifi: rtl8723be: don't call kfree_skb() under spin_lock_irqsave()
- wifi: iwlegacy: common: don't call dev_kfree_skb() under
spin_lock_irqsave()
- wifi: libertas: fix memory leak in lbs_init_adapter()
- wifi: rtl8xxxu: don't call dev_kfree_skb() under spin_lock_irqsave()
- wifi: rtlwifi: Fix global-out-of-bounds bug in
_rtl8812ae_phy_set_txpower_limit()
- wifi: ipw2x00: don't call dev_kfree_skb() under spin_lock_irqsave()
- wifi: ipw2200: fix memory leak in ipw_wdev_init()
- wifi: wilc1000: fix potential memory leak in wilc_mac_xmit()
- wifi: brcmfmac: fix potential memory leak in brcmf_netdev_start_xmit()
- wifi: brcmfmac: unmap dma buffer in brcmf_msgbuf_alloc_pktid()
- wifi: libertas_tf: don't call kfree_skb() under spin_lock_irqsave()
- wifi: libertas: if_usb: don't call kfree_skb() under spin_lock_irqsave()
- wifi: libertas: main: don't call kfree_skb() under spin_lock_irqsave()
- wifi: libertas: cmdresp: don't call kfree_skb() under spin_lock_irqsave()
- wifi: wl3501_cs: don't call kfree_skb() under spin_lock_irqsave()
- [amd64] crypto: x86/ghash - fix unaligned access in ghash_setkey()
- ACPICA: Drop port I/O validation for some regions
- genirq: Fix the return type of kstat_cpu_irqs_sum()
- rcu-tasks: Improve comments explaining tasks_rcu_exit_srcu purpose
- rcu-tasks: Remove preemption disablement around srcu_read_[un]lock() calls
- rcu-tasks: Fix synchronize_rcu_tasks() VS zap_pid_ns_processes()
- lib/mpi: Fix buffer overrun when SG is too long
- [amd64] crypto: ccp: Use the stack for small SEV command buffers
- [amd64] crypto: ccp: Use the stack and common buffer for status commands
- [amd64] crypto: ccp - Use kzalloc for sev ioctl interfaces to prevent
kernel memory leak
- [amd64] crypto: ccp - Avoid page allocation failure warning for
SEV_GET_ID2
- ACPICA: nsrepair: handle cases without a return value correctly
- [arm64] thermal/drivers/tsens: Drop msm8976-specific defines
- [arm64] thermal/drivers/qcom/tsens_v1: Enable sensor 3 on MSM8976
- [arm64] thermal/drivers/tsens: Add compat string for the qcom,msm8960
- [arm64] thermal/drivers/tsens: Sort out msm8976 vs msm8956 data
- wifi: rtl8xxxu: Fix memory leaks with RTL8723BU, RTL8192EU
- wifi: orinoco: check return value of hermes_write_wordrec()
- wifi: ath9k: htc_hst: free skb in ath9k_htc_rx_msg() if there is no
callback function
- ath9k: hif_usb: simplify if-if to if-else
- ath9k: htc: clean up statistics macros
- wifi: ath9k: hif_usb: clean up skbs if ath9k_hif_usb_rx_stream() fails
- wifi: ath9k: Fix potential stack-out-of-bounds write in
ath9k_wmi_rsp_callback()
- wifi: ath11k: Fix memory leak in ath11k_peer_rx_frag_setup
- wifi: cfg80211: Fix extended KCK key length check in
nl80211_set_rekey_data()
- ACPI: battery: Fix missing NUL-termination with large strings
- [amd64] crypto: ccp - Failure on re-initialization due to duplicate sysfs
filename
- crypto: essiv - Handle EBUSY correctly
- crypto: seqiv - Handle EBUSY correctly
- [x86] powercap: fix possible name leak in powercap_register_zone()
- [x86] cpu: Init AP exception handling from cpu_init_secondary()
- [x86] microcode: Replace deprecated CPU-hotplug functions.
- [x86] Mark stop_this_cpu() __noreturn
- [x86] microcode: Rip out the OLD_INTERFACE
- [x86] microcode: Default-disable late loading
- [x86] microcode: Print previous version of microcode after reload
- [x86] microcode: Add a parameter to microcode_check() to store CPU
capabilities
- [x86] microcode: Check CPU capabilities after late microcode update
correctly
- [x86] microcode: Adjust late loading result reporting message
- crypto: xts - Handle EBUSY correctly
- leds: led-class: Add missing put_device() to led_put()
- [amd64] crypto: ccp - Refactor out sev_fw_alloc()
- [amd64] crypto: ccp - Flush the SEV-ES TMR memory before giving it to
firmware
- net/mlx5: Enhance debug print in page allocation failure
- irqchip: Fix refcount leak in platform_irqchip_probe
- irqchip/alpine-msi: Fix refcount leak in alpine_msix_init_domains
- irqchip/irq-mvebu-gicp: Fix refcount leak in mvebu_gicp_probe
- irqchip/ti-sci: Fix refcount leak in ti_sci_intr_irq_domain_probe
- [s390x] vmem: fix empty page tables cleanup under KASAN
- net: add sock_init_data_uid()
- tun: tun_chr_open(): correctly initialize socket uid (CVE-2023-1076)
- tap: tap_open(): correctly initialize socket uid (CVE-2023-1076)
- OPP: fix error checking in opp_migrate_dentry()
- Bluetooth: L2CAP: Fix potential user-after-free
- rds: rds_rm_zerocopy_callback() correct order for list_add_tail()
- crypto: rsa-pkcs1pad - Use akcipher_request_complete
- wifi: iwl3945: Add missing check for create_singlethread_workqueue
- wifi: iwl4965: Add missing check for create_singlethread_workqueue()
- wifi: mwifiex: fix loop iterator in mwifiex_update_ampdu_txwinsize()
- wifi: mac80211: make rate u32 in sta_set_rate_info_rx()
- [arm64] thermal/drivers/hisi: Drop second sensor hi3660
- can: esd_usb: Move mislocated storage of SJA1000_ECC_SEG bits in case of a
bus error
- bpf: Fix global subprog context argument resolution logic
- l2tp: Avoid possible recursive deadlock in l2tp_tunnel_register()
- [arm64] net: bcmgenet: fix MoCA LED control
- drm: Fix potential null-ptr-deref due to drmm_mode_config_init()
- drm/fourcc: Add missing big-endian XRGB1555 and RGB565 formats
- [arm*] drm/vc4: dpi: Add option for inverting pixel clock and output
enable
- [arm*] drm/vc4: dpi: Fix format mapping for RGB565
- [armhf] gpu: ipu-v3: common: Add of_node_put() for reference returned by
of_graph_get_port_by_id()
- [arm64] drm/msm/hdmi: Add missing check for alloc_ordered_workqueue
- [armhf] pinctrl: stm32: Fix refcount leak in stm32_pctrl_get_irq_domain
- [arm64,armhf] pinctrl: rockchip: add support for rk3568
- [arm64,armhf] pinctrl: rockchip: do coding style for mux route struct
- [arm64,armhf] pinctrl: rockchip: Fix refcount leak in
rockchip_pinctrl_parse_groups
- [arm*] drm/vc4: hvs: Set AXI panic modes
- [arm*] drm/vc4: hvs: Fix colour order for xRGB1555 on HVS5
- [arm*] drm/vc4: hdmi: Correct interlaced timings again
- [arm64] ASoC: fsl_sai: initialize is_dsp_mode flag
- [arm64] drm/msm/adreno: Fix null ptr access in adreno_gpu_cleanup()
- ALSA: hda/ca0132: minor fix for allocation size
- [arm64] drm/msm/dpu: Disallow unallocated resources to be returned
- drm/mipi-dsi: Fix byte order of 16-bit DCS set/get brightness
- [arm64] drm/msm: use strscpy instead of strncpy
- [arm64] drm/msm/dpu: Add check for cstate
- [arm64] drm/msm/dpu: Add check for pstates
- [arm64] drm/msm/mdp5: Add check for kzalloc
- [arm*] pinctrl: bcm2835: Remove of_node_put() in
bcm2835_of_gpio_ranges_fallback()
- [x86] ASoC: soc-compress.c: fixup private_data on snd_soc_new_compress()
- drm/amdgpu: fix enum odm_combine_mode mismatch
- scsi: mpt3sas: Fix a memory leak
- scsi: aic94xx: Add missing check for dma_map_single()
- dm: remove flush_scheduled_work() during local_exit()
- NFS: Fix up handling of outstanding layoutcommit in nfs_update_inode()
- NFSv4: keep state manager thread active if swap is enabled
- nfs4trace: fix state manager flag printing
- NFS: fix disabling of swap
- HID: bigben: use spinlock to protect concurrent accesses
- HID: bigben_worker() remove unneeded check on report_field
- HID: bigben: use spinlock to safely schedule workers (CVE-2023-25012)
- hid: bigben_probe(): validate report count
- nfsd: fix race to check ls_layouts
- cifs: Fix lost destroy smbd connection when MR allocate failed
- cifs: Fix warning and UAF when destroy the MR list
- gfs2: jdata writepage fix
- leds: led-core: Fix refcount leak in of_led_get()
- [armhf] mtd: rawnand: sunxi: Fix the size of the last OOB region
- [arm64,armhf] clk: imx: avoid memory leak
- Input: ads7846 - don't report pressure for ads7845
- Input: ads7846 - convert to full duplex
- Input: ads7846 - convert to one message
- Input: ads7846 - always set last command to PWRDOWN
- Input: ads7846 - don't check penirq immediately for 7845
- [powerpc*] powernv/ioda: Skip unallocated resources when mapping to PE
- clk: Honor CLK_OPS_PARENT_ENABLE in clk_core_is_enabled()
- [powerpc*] perf/hv-24x7: add missing RTAS retry status handling
- [powerpc*] pseries/lpar: add missing RTAS retry status handling
- [powerpc*] pseries/lparcfg: add missing RTAS retry status handling
- [powerpc*] rtas: make all exports GPL
- [powerpc*] rtas: ensure 4KB alignment for rtas_data_buf
- [powerpc*] eeh: Small refactor of eeh_handle_normal_event()
- [powerpc*] eeh: Set channel state after notifying the drivers
- [armhf] media: platform: ti: Add missing check for devm_regulator_get
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
(CVE-2023-1118)
- media: usb: siano: Fix use after free bugs caused by do_submit_urb
- media: saa7134: Use video_unregister_device for radio_dev
- [arm64] rpmsg: glink: Avoid infinite loop on intent for missing channel
- udf: Define EFSCORRUPTED error code
- blk-iocost: fix divide by 0 error in calc_lcoefs()
- wifi: ath9k: Fix use-after-free in ath9k_hif_usb_disconnect()
- wifi: brcmfmac: Fix potential stack-out-of-bounds in
brcmf_c_preinit_dcmds()
- rcu: Make RCU_LOCKDEP_WARN() avoid early lockdep checks
- rcu: Suppress smp_processor_id() complaint in
synchronize_rcu_expedited_wait()
- rcu-tasks: Make rude RCU-Tasks work well with CPU hotplug
- wifi: ath11k: debugfs: fix to work with multiple PCI devices
- [x86] thermal: intel: Fix unsigned comparison with less than zero
- timers: Prevent union confusion from unexpected restart_syscall()
- [x86] bugs: Reset speculation control settings on init
- wifi: brcmfmac: ensure CLM version is null-terminated to prevent
stack-out-of-bounds
- wifi: mt7601u: fix an integer underflow
- inet: fix fast path in __inet_hash_connect()
- ice: add missing checks for PF vsi type
- ACPI: Don't build ACPICA with '-Os'
- clocksource: Suspend the watchdog temporarily when high read latency
detected
- net: bcmgenet: Add a check for oversized packets
- wifi: mt76: dma: free rx_head in mt76_dma_rx_cleanup
- ACPI: video: Fix Lenovo Ideapad Z570 DMI match
- net/mlx5: fw_tracer: Fix debug print
- coda: Avoid partial allocation of sig_inputArgs
- uaccess: Add minimum bounds check on kernel buffer size
- PM: EM: fix memory leak with using debugfs_lookup()
- Bluetooth: btusb: Add VID:PID 13d3:3529 for Realtek RTL8821CE
- drm/amd/display: Fix potential null-deref in dm_resume
- [armhf] drm/omap: dsi: Fix excessive stack usage
- HID: Add Mapping for System Microphone Mute
- drm/radeon: free iio for atombios when driver shutdown
- drm: amd: display: Fix memory leakage
- [arm64] drm/msm/dsi: Add missing check for alloc_ordered_workqueue
- [armel,armhf] ASoC: kirkwood: Iterate over array indexes instead of using
pointer math
- [armhf] regulator: s5m8767: Bounds check id indexing into arrays
- gfs2: Improve gfs2_make_fs_rw error handling
- [x86] hwmon: (coretemp) Simplify platform device handling
- HID: logitech-hidpp: Don't restart communication if not necessary
- drm: panel-orientation-quirks: Add quirk for Lenovo IdeaPad Duet 3 10IGL5
- dm thin: add cond_resched() to various workqueue loops
- dm cache: add cond_resched() to various workqueue loops
- nfsd: zero out pointers after putting nfsd_files on COPY setup error
- wifi: rtl8xxxu: fixing transmisison failure for rtl8192eu
- firmware: coreboot: framebuffer: Ignore reserved pixel color bits
- [arm64] rtc: pm8xxx: fix set-alarm race
- ipmi_ssif: Rename idle state and check
- [s390x] extmem: return correct segment type in __segment_load()
- [s390x] discard .interp section
- [s390x] kprobes: fix irq mask clobbering on kprobe reenter from
post_handler
- [s390x] kprobes: fix current_kprobe never cleared after kprobes reenter
- cifs: Fix uninitialized memory read in smb3_qfs_tcon()
- hfs: fix missing hfs_bnode_get() in __hfs_bnode_create
- fs: hfsplus: fix UAF issue in hfsplus_put_super
- exfat: fix reporting fs error when reading dir beyond EOF
- exfat: fix unexpected EOF while reading dir
- exfat: redefine DIR_DELETED as the bad cluster number
- exfat: fix inode->i_blocks for non-512 byte sector size device
- f2fs: fix information leak in f2fs_move_inline_dirents()
- f2fs: fix cgroup writeback accounting with fs-layer encryption
- ocfs2: fix defrag path triggering jbd2 ASSERT
- ocfs2: fix non-auto defrag path not working issue
- udf: Truncate added extents on failed expansion
- udf: Do not bother merging very long extents
- udf: Do not update file length for failed writes to inline files
- udf: Preserve link count of system files
- udf: Detect system inodes linked into directory hierarchy
- udf: Fix file corruption when appending just after end of preallocated
extent
- KVM: Destroy target device if coalesced MMIO unregistration fails
- [x86] KVM: x86: Inject #GP if WRMSR sets reserved bits in APIC Self-IPI
- [s390x] KVM: s390: disable migration mode when dirty tracking is disabled
- [x86] virt: Force GIF=1 prior to disabling SVM (for reboot flows)
- [x86] crash: Disable virt in core NMI crash handler to avoid double
shootdown
- [x86] reboot: Disable virtualization in an emergency if SVM is supported
- [x86] reboot: Disable SVM, not just VMX, when stopping CPUs
- [x86] kprobes: Fix __recover_optprobed_insn check optimizing logic
- [x86] kprobes: Fix arch_check_optimized_kprobe check within
optimized_kprobe range
- [x86] microcode/amd: Remove load_microcode_amd()'s bsp parameter
- [x86] microcode/AMD: Add a @cpu parameter to the reloading functions
- [x86] microcode/AMD: Fix mixed steppings support
- [x86] speculation: Allow enabling STIBP with legacy IBRS (CVE-2023-1998)
- Documentation/hw-vuln: Document the interaction between IBRS and STIBP
- brd: return 0/-error from brd_insert_page()
- ima: Align ima_file_mmap() parameters with mmap_file LSM hook
- irqdomain: Fix association race
- irqdomain: Fix disassociation race
- irqdomain: Drop bogus fwspec-mapping error handling
- io_uring: handle TIF_NOTIFY_RESUME when checking for task_work
- io_uring: mark task TASK_RUNNING before handling resume/task work
- io_uring: add a conditional reschedule to the IOPOLL cancelation loop
- io_uring/rsrc: disallow multi-source reg buffers
- io_uring: remove MSG_NOSIGNAL from recvmsg
- io_uring/poll: allow some retries for poll triggering spuriously
- ALSA: ice1712: Do not left ice->gpio_mutex locked in aureon_add_controls()
- ALSA: hda/realtek: Add quirk for HP EliteDesk 800 G6 Tower PC
- jbd2: fix data missing when reusing bh which is ready to be checkpointed
- ext4: optimize ea_inode block expansion
- ext4: refuse to create ea block when umounted
- mtd: spi-nor: Fix shift-out-of-bounds in spi_nor_set_erase_type
- dm: add cond_resched() to dm_wq_work()
- wifi: rtl8xxxu: Use a longer retry limit of 48
- wifi: cfg80211: Fix use after free for wext
- [x86] thermal: intel: powerclamp: Fix cur_state for multi package system
- dm flakey: fix logic when corrupting a bio
- dm flakey: don't corrupt the zero page
- rbd: avoid use-after-free in do_rbd_add() when rbd_dev_create() fails
- dax/kmem: Fix leak of memory-hotplug resources
- mm: memcontrol: deprecate charge moving
- mm/thp: check and bail out if page in deferred queue already
- ring-buffer: Handle race between rb_move_tail and rb_check_pages
- scsi: qla2xxx: Fix link failure in NPIV environment
- scsi: qla2xxx: Fix DMA-API call trace on NVMe LS requests
- scsi: qla2xxx: Fix erroneous link down
- scsi: ses: Don't attach if enclosure has no components
- scsi: ses: Fix slab-out-of-bounds in ses_enclosure_data_process()
- scsi: ses: Fix possible addl_desc_ptr out-of-bounds accesses
- scsi: ses: Fix possible desc_ptr out-of-bounds accesses
- scsi: ses: Fix slab-out-of-bounds in ses_intf_remove()
- PCI/PM: Observe reset delay irrespective of bridge_d3
- PCI: hotplug: Allow marking devices as disconnected during bind/unbind
- PCI: Avoid FLR for AMD FCH AHCI adapters
- vfio/type1: prevent underflow of locked_vm via exec()
- [x86] drm/i915/quirks: Add inverted backlight quirk for HP 14-r206nv
- drm/radeon: Fix eDP for single-display iMac11,2
- drm/edid: fix AVI infoframe aspect ratio handling
- wifi: ath9k: use proper statements in conditionals
- [arm64,armhf] pinctrl: rockchip: fix mux route data for rk3568
- [arm64,armhf] pinctrl: rockchip: fix reading pull type on rk3568
- net/sched: Retire tcindex classifier (CVE-2023-1829)
- fs/jfs: fix shift exponent db_agl2size negative
- objtool: Fix memory leak in create_static_call_sections()
- [armhf] pwm: stm32-lp: fix the check on arr and cmp registers update
- f2fs: use memcpy_{to,from}_page() where possible
- fs: f2fs: initialize fsdata in pagecache_write()
- ubi: ensure that VID header offset + VID header size <= alloc, size
- ubifs: Fix build errors as symbol undefined
- ubifs: Rectify space budget for ubifs_symlink() if symlink is encrypted
- ubifs: Rectify space budget for ubifs_xrename()
- ubifs: Fix wrong dirty space budget for dirty inode
- ubifs: do_rename: Fix wrong space budget when target inode's nlink > 1
- ubifs: Reserve one leb for each journal head while doing budget
- ubi: Fix use-after-free when volume resizing failed
- ubi: Fix unreferenced object reported by kmemleak in ubi_resize_volume()
- ubifs: Fix memory leak in alloc_wbufs()
- ubi: Fix possible null-ptr-deref in ubi_free_volume()
- ubifs: Re-statistic cleaned znode count if commit failed
- ubifs: dirty_cow_znode: Fix memleak in error handling path
- ubifs: ubifs_writepage: Mark page dirty after writing inode failed
- ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling
fastmap
- ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
- ubi: ubi_wl_put_peb: Fix infinite loop when wear-leveling work failed
- [x86] um: vdso: Add '%rcx' and '%r11' to the syscall clobber list
- watchdog: Fix kmemleak in watchdog_cdev_register
- watchdog: pcwd_usb: Fix attempting to access uninitialized memory
- netfilter: ctnetlink: fix possible refcount leak in
ctnetlink_create_conntrack()
- netfilter: ebtables: fix table blob use-after-free
- ipv6: Add lwtunnel encap size of all siblings in nexthop calculation
- sctp: add a refcnt in sctp_stream_priorities to avoid a nested loop
- net: fix __dev_kfree_skb_any() vs drop monitor
- 9p/xen: fix version parsing
- 9p/xen: fix connection sequence
- 9p/rdma: unmap receive dma buffer in rdma_request()/post_recv()
- net/mlx5: Geneve, Fix handling of Geneve object id as error code
- nfc: fix memory leak of se_io context in nfc_genl_se_io
- net/sched: act_sample: fix action bind logic
- tcp: tcp_check_req() can be called from process context
- vc_screen: modify vcs_size() handling in vcs_read()
- [arm64,armhf] rtc: sun6i: Always export the internal oscillator
- scsi: ipr: Work around fortify-string warning
- loop: loop_set_status_from_info() check before assignment
- tracing: Add NULL checks for buffer in ring_buffer_free_read_page()
- [x86] firmware/efi sysfb_efi: Add quirk for Lenovo IdeaPad Duet 3
- bootconfig: Increase max nodes of bootconfig from 1024 to 8192 for DCC
support
- [amd64] IB/hfi1: Update RMT size calculation
- media: uvcvideo: Handle cameras with invalid descriptors
- media: uvcvideo: Handle errors from calls to usb_string
- media: uvcvideo: Quirk for autosuspend in Logitech B910 and C910
- media: uvcvideo: Silence memcpy() run-time false positive warnings
- tty: fix out-of-bounds access in tty_driver_lookup_tty()
- tty: serial: fsl_lpuart: disable the CTS when send break signal
- [x86] mei: bus-fixup:upon error print return values of send and receive
- iio: accel: mma9551_core: Prevent uninitialized variable in
mma9551_read_status_word()
- iio: accel: mma9551_core: Prevent uninitialized variable in
mma9551_read_config_word()
- [arm64,armhf] usb: host: xhci: mvebu: Iterate over array indexes instead
of using pointer math
- USB: ene_usb6250: Allocate enough memory for full object
- usb: uvc: Enumerate valid values for color matching
- usb: gadget: uvc: Make bSourceID read/write
- PCI: Align extra resources for hotplug bridges properly
- PCI: Take other bus devices into account when distributing resources
- kernel/fail_function: fix memory leak with using debugfs_lookup()
- PCI: Add ACS quirk for Wangxun NICs
- [arm64] phy: rockchip-typec: Fix unsigned comparison with less than zero
- soundwire: cadence: Remove wasted space in response_buf
- soundwire: cadence: Drain the RX FIFO after an IO timeout
- [x86] resctrl: Apply READ_ONCE/WRITE_ONCE to task_struct.{rmid,closid}
- [x86] resctl: fix scheduler confusion with 'current'
- drm/display/dp_mst: Fix down/up message handling after sink disconnect
- drm/display/dp_mst: Fix down message handling after a packet reception
error
- Bluetooth: hci_sock: purge socket queues in the destruct() callback
- tcp: Fix listen() regression in 5.10.163
- drm/virtio: Fix error code in virtio_gpu_object_shmem_init()
- media: uvcvideo: Provide sync and async uvc_ctrl_status_event
- media: uvcvideo: Fix race condition with usb_kill_urb
- Revert "scsi: mpt3sas: Fix return value check of dma_get_required_mask()"
- scsi: mpt3sas: Don't change DMA mask while reallocating pools
- scsi: mpt3sas: re-do lost mpt3sas DMA mask fix
- scsi: mpt3sas: Remove usage of dma_get_required_mask() API
(Closes: #1022126)
- malidp: Fix NULL vs IS_ERR() checking (CVE-2023-23004)
- usb: gadget: uvc: fix missing mutex_unlock() if kstrtou8() fails
https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.174
- wifi: cfg80211: Partial revert "wifi: cfg80211: Fix use after free for
wext"
- [x86] staging: rtl8192e: Remove function ..dm_check_ac_dc_power calling a
script
- [x86] staging: rtl8192e: Remove call_usermodehelper starting RadioPower.sh
https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.175
- fs: prevent out-of-bounds array speculation when closing a file descriptor
- fork: allow CLONE_NEWTIME in clone3 flags
- [x86] CPU/AMD: Disable XSAVES on AMD family 0x17
- drm/amdgpu: fix error checking in amdgpu_read_mm_registers for soc15
- drm/connector: print max_requested_bpc in state debugfs
- ext4: fix cgroup writeback accounting with fs-layer encryption
- ext4: fix RENAME_WHITEOUT handling for inline directories
- ext4: fix another off-by-one fsmap error on 1k block filesystems
- ext4: move where set the MAY_INLINE_DATA flag is set
- ext4: fix WARNING in ext4_update_inline_data
- ext4: zero i_disksize when initializing the bootloader inode
- nfc: change order inside nfc_se_io error path
- udf: Fix off-by-one error when discarding preallocation
- irq: Fix typos in comments
- irqdomain: Look for existing mapping only once
- irqdomain: Refactor __irq_domain_alloc_irqs()
- irqdomain: Fix mapping-creation race
- irqdomain: Change the type of 'size' in __irq_domain_add() to be
consistent
- irqdomain: Fix domain registration race
- [amd64] iommu/vt-d: Fix lockdep splat in intel_pasid_get_entry()
- [amd64] iommu/vt-d: Fix PASID directory pointer coherency
- [arm64] efi: Make efi_rt_lock a raw_spinlock
- scsi: core: Remove the /proc/scsi/${proc_name} directory earlier
- ext4: Fix possible corruption when moving a directory
- drm/nouveau/kms/nv50-: remove unused functions
- drm/nouveau/kms/nv50: fix nv50_wndw_new_ prototype
- [arm64] drm/msm: Fix potential invalid ptr free
- [arm64] drm/msm/a5xx: fix setting of the CP_PREEMPT_ENABLE_LOCAL register
- [arm64] drm/msm: Document and rename preempt_lock
- [arm64] drm/msm/a5xx: fix the emptyness check in the preempt code
- [arm64] drm/msm/a5xx: fix context faults during ring switch
- ila: do not generate empty messages in ila_xlat_nl_cmd_get_mapping()
- net: usb: lan78xx: Remove lots of set but unused 'ret' variables
- net: lan78xx: fix accessing the LAN7800's internal phy specific registers
from the MAC driver
- net: stmmac: add to set device wake up flag when stmmac init phy
- net: phylib: get rid of unnecessary locking
- bnxt_en: Avoid order-5 memory allocation for TPA data
- netfilter: ctnetlink: revert to dumping mark regardless of event type
- netfilter: tproxy: fix deadlock due to missing BH disable
- btf: fix resolving BTF_KIND_VAR after ARRAY, STRUCT, UNION, PTR
- scsi: megaraid_sas: Update max supported LD IDs to 240
- net/smc: fix fallback failed while sendmsg with fastopen
- SUNRPC: Fix a server shutdown leak
- ext4: Fix deadlock during directory rename
- [amd64] iommu/amd: Add a length limitation for the ivrs_acpihid
command-line parameter
- watch_queue: fix IOC_WATCH_QUEUE_SET_SIZE alloc error paths
- tpm/eventlog: Don't abort tpm_read_log on faulty ACPI address
- block, bfq: fix possible uaf for 'bfqq->bic'
- block, bfq: fix uaf for bfqq in bfq_exit_icq_bfqq
- block/bfq-iosched.c: use "false" rather than "BLK_RW_ASYNC"
- block, bfq: replace 0/1 with false/true in bic apis
- block, bfq: fix uaf for bfqq in bic_set_bfqq()
- PCI: Add SolidRun vendor ID
- [armhf] media: rc: gpio-ir-recv: add remove function
- ipmi/watchdog: replace atomic_add() and atomic_sub()
- ipmi:watchdog: Set panic count to proper value on a panic
- skbuff: Fix nfct leak on napi stolen
- [x86] drm/i915: Don't use BAR mappings for ring buffers with LLC
- ext4: refactor ext4_free_blocks() to pull out ext4_mb_clear_bb()
- ext4: add ext4_sb_block_valid() refactored out of ext4_inode_block_valid()
- ext4: add strict range checks while freeing blocks
- ext4: block range must be validated before use in ext4_mb_clear_bb()
- arch: fix broken BuildID for arm64 and riscv
- [powerpc*] vmlinux.lds: Define RUNTIME_DISCARD_EXIT
- [powerpc*] vmlinux.lds: Don't discard .rela* for relocatable builds
- [s390x] define RUNTIME_DISCARD_EXIT to fix link error with GNU ld < 2.36
- [x86] KVM: nVMX: Don't use Enlightened MSR Bitmap for L3
- [x86] KVM: VMX: Introduce vmx_msr_bitmap_l01_changed() helper
- [x86] KVM: VMX: Fix crash due to uninitialized current_vmcs
- [s390x] dasd: add missing discipline function
https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.176
- xfrm: Allow transport-mode states with AF_UNSPEC selector
- [arm64,armhf] drm/panfrost: Don't sync rpm suspension after mmu flushing
- cifs: Move the in_send statistic to __smb_send_rqst()
- [arm64] drm/meson: fix 1px pink line on GXM when scaling video overlay
- docs: Correct missing "d_" prefix for dentry_operations member
d_weak_revalidate
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- ALSA: hda: Match only Intel devices with CONTROLLER_IN_GPU()
- netfilter: nft_nat: correct length for loading protocol registers
- netfilter: nft_masq: correct length for loading protocol registers
- netfilter: nft_redir: correct length for loading protocol registers
- netfilter: nft_redir: correct value of inet type `.maxattrs`
- scsi: core: Fix a comment in function scsi_host_dev_release()
- scsi: core: Fix a procfs host directory removal regression
- tcp: tcp_make_synack() can be called from process context
- nfc: pn533: initialize struct pn533_out_arg properly
- ipvlan: Make skb->skb_iif track skb->dev for l3s mode
- i40e: Fix kernel crash during reboot when adapter is in recovery mode
- net/smc: fix NULL sndbuf_desc in smc_cdc_tx_handler()
- qed/qed_dev: guard against a possible division by zero
- net: tunnels: annotate lockless accesses to dev->needed_headroom
- net: phy: smsc: bail out in lan87xx_read_status if genphy_read_status
fails
- net/smc: fix deadlock triggered by cancel_delayed_work_syn()
- net: usb: smsc75xx: Limit packet length to skb->len
- drm/bridge: Fix returned array size name for atomic_get_input_bus_fmts
kdoc
- nvme: fix handling single range discard request
- nvmet: avoid potential UAF in nvmet_req_complete()
- ice: xsk: disable txq irq before flushing hw
- net: dsa: mv88e6xxx: fix max_mtu of 1492 on 6165, 6191, 6220, 6250, 6290
- ipv4: Fix incorrect table ID in IOCTL path
- net: usb: smsc75xx: Move packet length check to prevent kernel panic in
skb_pull
- [s390x] net/iucv: Fix size of interrupt data
- qed/qed_mng_tlv: correctly zero out ->min instead of ->hour
- hwmon: (adt7475) Display smoothing attributes in correct order
- hwmon: (adt7475) Fix masking of hysteresis registers
- [arm64] hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to
race condition (CVE-2023-1855)
- jffs2: correct logic when creating a hole in jffs2_write_begin
- ext4: fail ext4_iget if special inode unallocated
- ext4: fix task hung in ext4_xattr_delete_inode
- drm/amd/display: fix shift-out-of-bounds in CalculateVMAndRowBytes
- ext4: fix possible double unlock when moving a directory
- [arm64] tty: serial: fsl_lpuart: skip waiting for transmission complete
when UARTCTRL_SBK is asserted
- [arm64] firmware: xilinx: don't make a sleepable memory allocation from an
atomic context
- tracing: Make splice_read available again
- tracing: Check field value in hist_field_name()
- tracing: Make tracepoint lockdep check actually test something
- cifs: Fix smb2_set_path_size()
- [x86] KVM: nVMX: add missing consistency checks for CR0 and CR4
(CVE-2023-30456)
- ALSA: hda: intel-dsp-config: add MTL PCI id
- ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy Book2 Pro
- drm/shmem-helper: Remove another errant put in error path
- ftrace: Fix invalid address access in lookup_rec() when index is 0
- mm/userfaultfd: propagate uffd-wp bit when PTE-mapping the huge zeropage
- [x86] mce: Make sure logged MCEs are processed after sysfs update
- [x86] mm: Fix use of uninitialized buffer in sme_enable()
- [x86] drm/i915: Don't use stolen memory for ring buffers with LLC
- [x86] drm/i915/active: Fix misuse of non-idle barriers as fence trackers
- io_uring: avoid null-ptr-deref in io_arm_poll_handler
- [s390x] ipl: add missing intersection check to ipl_report handling
- PCI: Unify delay handling for reset and resume
- PCI/DPC: Await readiness of secondary bus after reset
- xfs: don't assert fail on perag references on teardown
- xfs: purge dquots after inode walk fails during quotacheck
- xfs: don't leak btree cursor when insrec fails after a split
- xfs: remove XFS_PREALLOC_SYNC
- xfs: fallocate() should call file_modified()
- xfs: set prealloc flag in xfs_alloc_file_space()
- xfs: use setattr_copy to set vfs inode attributes
- fs: add mode_strip_sgid() helper
- fs: move S_ISGID stripping into the vfs_*() helpers
- attr: add in_group_or_capable()
- fs: move should_remove_suid()
- attr: add setattr_should_drop_sgid()
- attr: use consistent sgid stripping checks
- fs: use consistent setgid checks in is_sxid()
- xfs: remove xfs_setattr_time() declaration
- HID: core: Provide new max_buffer_size attribute to over-ride the default
- HID: uhid: Over-ride the default maximum data buffer value with our own
https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.177
- perf/core: Fix perf_output_begin parameter is incorrectly invoked in
perf_event_bpf_output
- perf: fix perf_event_context->time
- ipmi:ssif: make ssif_i2c_send() void
- ipmi:ssif: Increase the message retry time
- ipmi:ssif: resend_msg() cannot fail
- ipmi:ssif: Add a timer between request retries
- KVM: Clean up benign vcpu->cpu data races when kicking vCPUs
- KVM: KVM: Use cpumask_available() to check for NULL cpumask when kicking
vCPUs
- KVM: Optimize kvm_make_vcpus_request_mask() a bit
- KVM: Pre-allocate cpumasks for kvm_make_all_cpus_request_except()
- KVM: Register /dev/kvm as the _very_ last thing during initialization
- [arm64] serial: fsl_lpuart: Fix comment typo
- [arm64] tty: serial: fsl_lpuart: fix race on RX DMA shutdown
- [arm64,armhf] drm/sun4i: fix missing component unbind on bind errors
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and
do_tls_setsockopt_conf() (CVE-2023-28466)
- [x86] power: supply: bq24190_charger: using pm_runtime_resume_and_get
instead of pm_runtime_get_sync
- [x86] power: supply: bq24190: Fix use after free bug in bq24190_remove due
to race condition
- [armhf] dts: imx6sl: tolino-shine2hd: fix usbotg1 pinctrl
- xsk: Add missing overflow check in xdp_umem_reg
- iavf: fix inverted Rx hash condition leading to disabled hash
- iavf: fix non-tunneled IPv6 UDP packet type and hashing
- intel/igbvf: free irq on the error path in igbvf_request_msix()
- igbvf: Regard vf reset nack as success
- igc: fix the validation logic for taprio's gate list
- scsi: scsi_dh_alua: Fix memleak for 'qdata' in alua_activate()
- net: usb: smsc95xx: Limit packet length to skb->len
- qed/qed_sriov: guard against NULL derefs from qed_iov_get_vf_info
- [x86] xirc2ps_cs: Fix use after free bug in xirc2ps_detach (CVE-2023-1670)
- net: phy: Ensure state transitions are processed from phy_stop()
- net: mdio: fix owner field for mdio buses registered using device-tree
- [arm64] net: qcom/emac: Fix use after free bug in emac_remove due to race
condition
- keys: Do not cache key in task struct if key is requested from kernel
thread
- bpf: Adjust insufficient default bpf_jit_limit
- net/mlx5: Fix steering rules cleanup
- net/mlx5: Read the TC mapping of all priorities on ETS query
- net/mlx5: E-Switch, Fix an Oops in error handling code
- atm: idt77252: fix kmemleak when rmmod idt77252
- erspan: do not use skb_mac_header() in ndo_start_xmit()
- nvme-tcp: fix nvme_tcp_term_pdu to match spec
- [amd64,arm64] gve: Cache link_speed value from device
- [arm64] net: mdio: thunder: Add missing fwnode_handle_put()
- [arm64] Bluetooth: btqcomsmd: Fix command timeout after setting BD address
- Bluetooth: L2CAP: Fix not checking for maximum number of DCID
- Bluetooth: L2CAP: Fix responding with wrong PDU type
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to
unfinished work (CVE-2023-1989)
- [arm64] platform/chrome: cros_ec_chardev: fix kernel data leak from ioctl
- hwmon: fix potential sensor registration fail if of_node is missing
- [x86] hwmon (it87): Fix voltage scaling for chips with 10.9mV ADCs
- scsi: qla2xxx: Perform lockless command completion in abort path
- [x86] thunderbolt: Use scale field when allocating USB3 bandwidth
- [x86] thunderbolt: Use const qualifier for `ring_interrupt_index`
- HID: cp2112: Fix driver not registering GPIO IRQ chip as threaded
- scsi: target: iscsi: Fix an error message in iscsi_check_key()
- [arm64] scsi: hisi_sas: Check devm_add_action() return value
- scsi: ufs: core: Add soft dependency on governor_simpleondemand
- scsi: lpfc: Avoid usage of list iterator variable after loop
- [x86] scsi: storvsc: Handle BlockSize change in Hyper-V VHD/VHDX file
- net: usb: cdc_mbim: avoid altsetting toggling for Telit FE990
- net: usb: qmi_wwan: add Telit 0x1080 composition
- cifs: empty interface list when server doesn't support query interfaces
- scsi: core: Add BLIST_SKIP_VPD_PAGES for SKhynix H28U74301AMR
- [arm*] usb: dwc2: fix a devres leak in hw_enable upon suspend resume
- usb: gadget: u_audio: don't let userspace block driver unbind
- fsverity: Remove WQ_UNBOUND from fsverity read workqueue
- igb: revert rtnl_lock() that causes deadlock
- dm thin: fix deadlock when swapping to thin device
- [arm64,armhf] usb: chipdea: core: fix return -EINVAL if request role is
the same with current role
- [arm64,armhf] usb: chipidea: core: fix possible concurrent when switch
role
- usb: ucsi: Fix NULL pointer deref in ucsi_connector_change()
- wifi: mac80211: fix qos on mesh interfaces
- nilfs2: fix kernel-infoleak in nilfs_ioctl_wrap_copy()
- [x86] drm/i915/active: Fix missing debug object activation
- [x86] drm/i915: Preserve crtc_state->inherited during state clearing
- [arm64] i2c: xgene-slimpro: Fix out-of-bounds bug in
xgene_slimpro_i2c_xfer() (CVE-2023-2194)
- dm stats: check for and propagate alloc_percpu failure
- dm crypt: add cond_resched() to dmcrypt_write()
- sched/fair: sanitize vruntime of entity being placed
- sched/fair: Sanitize vruntime of entity being migrated
- ocfs2: fix data corruption after failed write
- xfs: shut down the filesystem if we screw up quota reservation
- xfs: don't reuse busy extents on extent trim
- KVM: fix memoryleak in kvm_init()
- NFSD: fix use-after-free in __nfs42_ssc_open() (CVE-2022-4379)
- [arm64,armhf] usb: dwc3: gadget: move cmd_endtransfer to extra function
- [arm64,armhf] usb: dwc3: gadget: Add 1ms delay after end transfer command
without IOC
- [arm64] drm/meson: Fix error handling when afbcd.ops->init fails
- [arm64] drm/meson: fix missing component unbind on bind errors
- dm crypt: avoid accessing uninitialized tasklet
- fsverity: don't drop pagecache at end of FS_IOC_ENABLE_VERITY
- md: avoid signed overflow in slot_store()
- [x86] ALSA: asihpi: check pao in control_message()
- ALSA: hda/ca0132: fixup buffer overrun at tuning_ctl_set()
- sched_getaffinity: don't assume 'cpumask_size()' is fully initialized
- tracing: Fix wrong return in kprobe_event_gen_test.c
- sfc: ef10: don't overwrite offload features at NIC reset
- scsi: megaraid_sas: Fix crash after a double completion
- [arm64] ptp_qoriq: fix memory leak in probe()
- r8169: fix RTL8168H and RTL8107E rx crc error
- [arm*] regulator: Handle deferred clk
- net/net_failover: fix txq exceeding warning
- net: stmmac: don't reject VLANs when IFF_PROMISC is set
- ALSA: ymfpci: Fix assignment in if condition
- ALSA: ymfpci: Fix BUG_ON in probe function
- i40e: fix registers dump after run ethtool adapter self test
- bnxt_en: Fix typo in PCI id to device description string mapping
- bnxt_en: Add missing 200G link speed reporting
- [arm64,armhf] net: dsa: mv88e6xxx: Enable IGMP snooping on user ports only
- Input: alps - fix compatibility with -funsigned-char
- Input: focaltech - use explicitly signed char type
- cifs: prevent infinite recursion in CIFSGetDFSRefer()
- cifs: fix DFS traversal oops without CONFIG_CIFS_DFS_UPCALL
- Input: goodix - add Lenovo Yoga Book X90F to nine_bytes_report DMI table
- btrfs: fix race between quota disable and quota assign ioctls
(CVE-2023-1611)
- xen/netback: don't do grant copy across page boundary
- pinctrl: amd: Disable and mask interrupts on resume
- [powerpc*] Don't try to copy PPR for task with NULL pt_regs
- NFSv4: Fix hangs when recovering open state after a server reboot
- ALSA: hda/conexant: Partial revert of a quirk for Lenovo
- ALSA: usb-audio: Fix regression on detection of Roland VS-100
- ALSA: hda/realtek: Add quirk for Lenovo ZhaoYang CF4620Z
- rcu: Fix rcu_torture_read ftrace event
- [armhf] drm/etnaviv: fix reference leak when mmaping imported buffer
- drm/amd/display: Add DSC Support for Synaptics Cascaded MST Hub
- [s390x] uaccess: add missing earlyclobber annotations to __clear_user()
- btrfs: scan device in non-exclusive mode
- zonefs: Fix error message in zonefs_file_dio_append()
- ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
- gfs2: Always check inode size of inline inodes
https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.178
- [x86] Drivers: vmbus: Check for channel allocation before looking up
relids
- [arm64] pwm: cros-ec: Explicitly set .polarity in .get_state()
- [s390x] KVM: s390: pv: fix external interruption loop not always detected
- wifi: mac80211: fix invalid drv_sta_pre_rcu_remove calls for non-uploaded
sta
- icmp: guard against too small mtu
- net: don't let netpoll invoke NAPI if in xmit context
- sctp: check send stream number after wait_for_sndbuf
- ipv6: Fix an uninit variable access bug in __ip6_make_skb()
- net: stmmac: fix up RX flow hash indirection table when setting channels
- sunrpc: only free unix grouplist after RCU settles
- NFSD: callback request does not use correct credential for AUTH_SYS
- [arm64,armhf] usb: xhci: tegra: fix sleep in atomic call
- xhci: also avoid the XHCI_ZERO_64B_REGS quirk with a passthrough iommu
- USB: serial: cp210x: add Silicon Labs IFS-USB-DATACABLE IDs
- usb: typec: altmodes/displayport: Fix configure initial pin assignment
- USB: serial: option: add Telit FE990 compositions
- USB: serial: option: add Quectel RM500U-CN modem
- iio: adc: ti-ads7950: Set `can_sleep` flag for GPIO chip
- iio: light: cm32181: Unregister second I2C client if present
- [arm64] tty: serial: fsl_lpuart: avoid checking for transfer complete when
UARTCTRL_SBK is asserted in lpuart32_tx_empty
- nilfs2: fix potential UAF of struct nilfs_sc_info in
nilfs_segctor_thread()
- nilfs2: fix sysfs interface lifetime
- dt-bindings: serial: renesas,scif: Fix 4th IRQ for 4-IRQ SCIFs
- ALSA: hda/realtek: Add quirk for Clevo X370SNW
- iio: adc: ad7791: fix IRQ flags
- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param()
- perf/core: Fix the same task check in perf_event_set_output
- ftrace: Mark get_lock_parent_ip() __always_inline
- ftrace: Fix issue that 'direct->addr' not restored in
modify_ftrace_direct()
- can: j1939: j1939_tp_tx_dat_new(): fix out-of-bounds memory access
- can: isotp: isotp_ops: fix poll() to not report false EPOLLOUT events
- tracing: Free error logs of tracing instances
- ASoC: hdac_hdmi: use set_stream() instead of set_tdm_slots()
- [arm64,armhf] drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error
path
- drm/nouveau/disp: Support more modes by checking with lower bpc
- ring-buffer: Fix race while reader and writer are on the same page
- mm/swap: fix swap_info_struct race between swapoff and get_swap_pages()
- ocfs2: fix freeing uninitialized resource on ocfs2_dlm_shutdown
- bpftool: Print newline before '}' for struct with padding only fields
- Revert "pinctrl: amd: Disable and mask interrupts on resume"
- ALSA: emu10k1: fix capture interrupt handler unlinking
- ALSA: hda/sigmatel: add pin overrides for Intel DP45SG motherboard
- ALSA: i2c/cs8427: fix iec958 mixer control deactivation
- ALSA: firewire-tascam: add missing unwind goto in
snd_tscm_stream_start_duplex()
- ALSA: hda/sigmatel: fix S/PDIF out on Intel D*45* motherboards
- Bluetooth: L2CAP: Fix use-after-free in l2cap_disconnect_{req,rsp}
- Bluetooth: Fix race condition in hidp_session_thread
- btrfs: print checksum type and implementation at mount time
- btrfs: fix fast csum implementation detection
- fbmem: Reject FB_ACTIVATE_KD_TEXT from userspace
- mtdblock: tolerate corrected bit-flips
- [armhf] mtd: rawnand: stm32_fmc2: remove unsupported EDO mode
- [armhf] mtd: rawnand: stm32_fmc2: use timings.mode instead of checking
tRC_min
- IB/mlx5: Add support for NDR link speed
- IB/mlx5: Add support for 400G_8X lane speed
- RDMA/cma: Allow UD qp_type to join multicast only
- 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race
condition (CVE-2023-1859)
- niu: Fix missing unwind goto in niu_alloc_channels()
- sysctl: add proc_dou8vec_minmax()
- ipv4: shrink netns_ipv4 with sysctl conversions
- tcp: convert elligible sysctls to u8
- tcp: restrict net.ipv4.tcp_app_win
- [armhf] drm/armada: Fix a potential double free in an error handling path
- qlcnic: check pci_reset_function result
- sctp: fix a potential overflow in sctp_ifwdtsn_skip
- RDMA/core: Fix GID entry ref leak when create_ah fails
- udp6: fix potential access to stale information
- [arm64] net: macb: fix a memory corruption in extended buffer descriptor
mode
- [arm64] power: supply: cros_usbpd: reclassify "default case!" as debug
- wifi: mwifiex: mark OF related data as maybe unused
- [x86] efi: sysfb_efi: Add quirk for Lenovo Yoga Book X91F/L
- drm: panel-orientation-quirks: Add quirk for Lenovo Yoga Book X90F
- [amd64] verify_pefile: relax wrapper length check
- asymmetric_keys: log on fatal failures in PE/pkcs7
- net: sfp: initialize sfp->i2c_block_size at sfp allocation
- scsi: ses: Handle enclosure with just a primary component gracefully
- [x86] PCI: Add quirk for AMD XHCI controller that loses MSI-X state in
D3hot
- cgroup/cpuset: Wake up cpuset_attach_wq tasks in cpuset_cancel_attach()
- ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size
- mtd: ubi: wl: Fix a couple of kernel-doc issues
- ubi: Fix deadlock caused by recursively holding work_sem
- [powerpc*] pseries: rename min_common_depth to primary_domain_index
- [powerpc*] pseries: Rename TYPE1_AFFINITY to FORM1_AFFINITY
- [powerpc*] pseries: Consolidate different NUMA distance update code paths
- [powerpc*] pseries: Add a helper for form1 cpu distance
- [powerpc*] pseries: Add support for FORM2 associativity
- [powerpc*] papr_scm: Update the NUMA distance table for the target node
- sched/fair: Move calculate of avg_load to a better location
- sched/fair: Fix imbalance overflow
- [x86] rtc: Remove __init for runtime functions
- i2c: ocores: generate stop condition after timeout in polling mode
- [arm64] watchdog: sbsa_wdog: Make sure the timeout programming is within
the limits
- kbuild: check the minimum assembler version in Kconfig
- kbuild: Switch to 'f' variants of integrated assembler flag
- kexec: move locking into do_kexec_load
- kexec: turn all kexec_mutex acquisitions into trylocks
- panic, kexec: make __crash_kexec() NMI safe
- sysctl: Fix data-races in proc_dou8vec_minmax().
.
[ Salvatore Bonaccorso ]
* Refresh "security,perf: Allow further restriction of perf_event_open"
* [rt] Update to 5.10.165-rt81
* Bump ABI to 22
* [rt] Refresh "printk: add pr_flush()"
* [rt] Update to 5.10.168-rt83
* [rt] Update to 5.10.176-rt86
Checksums-Sha1:
5e824979264dfa46304b0ce479fa5a2b55e55f06 42421 linux-5.10_5.10.178-3~deb10u1.dsc
1811f6fd31017567322e7dc88524220e0c2ff524 121853348 linux-5.10_5.10.178.orig.tar.xz
8a06b05784960033024ae7f095706bd91da44e3c 1573084 linux-5.10_5.10.178-3~deb10u1.debian.tar.xz
7c3aaf2c69522c237401e8af406b6626e55573b5 13594 linux-5.10_5.10.178-3~deb10u1_source.buildinfo
Checksums-Sha256:
847787b6f603b671bb0c191f843be621723738fe1afa073e94cbb4f66ea5095a 42421 linux-5.10_5.10.178-3~deb10u1.dsc
e1d79017284620f7f8d9e9fd650aa2e8387fa164138c9da6029638b3343fdad4 121853348 linux-5.10_5.10.178.orig.tar.xz
3538b066c43a93f884947a68550a692178df382dac2df4731acaff122dee0d3f 1573084 linux-5.10_5.10.178-3~deb10u1.debian.tar.xz
c6454f536f6cc145624004206e5b49f136ffdb0a8246b777fed0bdd7678ba232 13594 linux-5.10_5.10.178-3~deb10u1_source.buildinfo
Files:
2bcc73d2ae8a8d60d9d24ce10ed48072 42421 kernel optional linux-5.10_5.10.178-3~deb10u1.dsc
a2ef6fa93155b5d129f0a86b2b61af7b 121853348 kernel optional linux-5.10_5.10.178.orig.tar.xz
702b8066145e56ae8b9b453c0568b3f0 1573084 kernel optional linux-5.10_5.10.178-3~deb10u1.debian.tar.xz
ca17d6480b717f7e59947f6a2a1803c3 13594 kernel optional linux-5.10_5.10.178-3~deb10u1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=wzTs
-----END PGP SIGNATURE-----
Reply to: