-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 29 Sep 2021 20:53:57 +0200
Source: linux
Architecture: source
Version: 4.19.208-1
Distribution: buster
Urgency: medium
Maintainer: Debian Kernel Team <debian-kernel@lists.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Closes: 961056
Changes:
linux (4.19.208-1) buster; urgency=medium
.
* New upstream stable update:
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.195
- perf/core: Fix endless multiplex timer
- net/nfc/rawsock.c: fix a permission check bug
- [x86] ASoC: Intel: bytcr_rt5640: Add quirk for the Glavey TM800A550L
tablet
- [x86] ASoC: Intel: bytcr_rt5640: Add quirk for the Lenovo Miix 3-830
tablet
- bonding: init notify_work earlier to avoid uninitialized use
- netlink: disable IRQs for netlink_lock_table()
- net: mdiobus: get rid of a BUG_ON()
- cgroup: disable controllers at parse time
- wq: handle VM suspension in stall detection
- net/qla3xxx: fix schedule while atomic in ql_sem_spinlock
- RDS tcp loopback connection can hang
- scsi: bnx2fc: Return failure if io_req is already in ABTS processing
- [x86] scsi: vmw_pvscsi: Set correct residual data length
- scsi: target: qla2xxx: Wait for stop_phase1 at WWN removal
- [arm64] net: macb: ensure the device is available before accessing GEMGXL
control registers
- nvme-fabrics: decode host pathing error for connect
- [mips*] Fix kernel hang under FUNCTION_GRAPH_TRACER and PREEMPT_TRACER
- bnx2x: Fix missing error code in bnx2x_iov_init_one()
- [powerpc*] i2c: mpc: Make use of i2c_recover_bus()
- [powerpc*] i2c: mpc: implement erratum A-004447 workaround
- drm: Fix use-after-free read in drm_getunique()
- drm: Lock pointer access in drm_master_release()
- kvm: avoid speculation-based attacks from out-of-range memslot accesses
- [arm64,x86] staging: rtl8723bs: Fix uninitialized variables
- btrfs: return value from btrfs_mark_extent_written() in case of error
- cgroup1: don't allow '\n' in renaming
- USB: f_ncm: ncm_bitrate (speed) is unsigned
- usb: f_ncm: only first packet of aggregate needs to start timer
- usb: pd: Set PD_T_SINK_WAIT_CAP to 310ms
- [arm64,armhf] usb: dwc3: ep0: fix NULL pointer exception
- [x86] usb: typec: ucsi: Clear PPM capability data in ucsi_init() error
path
- usb: gadget: f_fs: Ensure io_completion_wq is idle during unbind
- USB: serial: ftdi_sio: add NovaTech OrionMX product ID
- USB: serial: omninet: add device id for Zyxel Omni 56K Plus
- USB: serial: quatech2: fix control-request directions
- USB: serial: cp210x: fix alternate function for CP2102N QFN20
- usb: gadget: eem: fix wrong eem header operation
- usb: fix various gadgets null ptr deref on 10gbps cabling.
- usb: fix various gadget panics on 10gbps cabling
- regulator: core: resolve supply for boot-on/always-on regulators
- [arm64] regulator: max77620: Use device_set_of_node_from_dev()
- RDMA/mlx4: Do not map the core_clock page to user space unless enabled
- perf: Fix data race between pin_count increment/decrement
- sched/fair: Make sure to update tg contrib for blocked load
- IB/mlx5: Fix initializing CQ fragments buffer
- NFS: Fix a potential NULL dereference in nfs_get_client()
- NFSv4: Fix deadlock between nfs4_evict_inode() and
nfs4_opendata_get_inode()
- perf session: Correct buffer copying when peeking events
- kvm: fix previous commit for 32-bit builds
- NFS: Fix use-after-free in nfs4_init_client()
- NFSv4: Fix second deadlock in nfs4_evict_inode()
- NFSv4: nfs4_proc_set_acl needs to restore NFS_CAP_UIDGID_NOMAP on error.
- scsi: core: Fix error handling of scsi_host_alloc()
- scsi: core: Put .shost_dev in failure path if host state changes to
RUNNING
- scsi: core: Only put parent device if host state differs from
SHOST_CREATED
- ftrace: Do not blindly read the ip address in ftrace_bug()
- tracing: Correct the length check which causes memory corruption
- proc: only require mm_struct for writing
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.196
- net: ieee802154: fix null deref in parse dev addr
- HID: quirks: Set INCREMENT_USAGE_ON_DUPLICATE for Saitek X65
- HID: hid-sensor-hub: Return error for hid_set_field() failure
- HID: Add BUS_VIRTUAL to hid_connect logging
- HID: usbhid: fix info leak in hid_submit_ctrl
- gfs2: Prevent direct-I/O write fallback errors from getting lost
- gfs2: Fix use-after-free in gfs2_glock_shrink_scan
- scsi: target: core: Fix warning on realtime kernels
- ethernet: myri10ge: Fix missing error code in myri10ge_probe()
- scsi: scsi_devinfo: Add blacklist entry for HPE OPEN-V
- net: ipconfig: Don't override command-line hostnames or domains
- rtnetlink: Fix missing error code in rtnl_bridge_notify()
- net: Return the correct errno code
- fib: Return the correct errno code
- afs: Fix an IS_ERR() vs NULL check
- mm/memory-failure: make sure wait for page writeback in memory_failure
- batman-adv: Avoid WARN_ON timing related checks
- net: ipv4: fix memory leak in netlbl_cipsov4_add_std
- net: rds: fix memory leak in rds_recvmsg
- udp: fix race between close() and udp_abort()
- rtnetlink: Fix regression in bridge VLAN configuration
- net/mlx5e: Block offload of outer header csum for UDP tunnels
- netfilter: synproxy: Fix out of bounds when parsing TCP options
- sch_cake: Fix out of bounds when parsing TCP options and header
- alx: Fix an error handling path in 'alx_probe()'
- net: stmmac: dwmac1000: Fix extended MAC address registers definition
- net: add documentation to socket.c
- net: make get_net_ns return error if NET_NS is disabled
- qlcnic: Fix an error handling path in 'qlcnic_probe()'
- netxen_nic: Fix an error handling path in 'netxen_nic_probe()'
- ptp: ptp_clock: Publish scaled_ppm_to_ppb
- ptp: improve max_adj check against unreasonable values
- net: cdc_ncm: switch to eth%d interface naming
- net: usb: fix possible use-after-free in smsc75xx_bind
- [armhf] net: fec_ptp: fix issue caused by refactor the fec_devtype
- net: ipv4: fix memory leak in ip_mc_add1_src
- net/af_unix: fix a data-race in unix_dgram_sendmsg / unix_release_sock
- be2net: Fix an error handling path in 'be_probe()'
- net: hamradio: fix memory leak in mkiss_close
- net: cdc_eem: fix tx fixup skb leak
- icmp: don't send out ICMP messages with a source address of 0.0.0.0
- radeon: use memcpy_to/fromio for UVD fw upload
- hwmon: (scpi-hwmon) shows the negative temperature properly
- can: mcba_usb: fix memory leak in mcba_usb
- usb: core: hub: Disable autosuspend for Cypress CY7C65632
- tracing: Do not stop recording cmdlines when tracing is off
- tracing: Do not stop recording comms if the trace file is being read
- tracing: Do no increment trace_clock_global() by one
- PCI: Mark TI C667X to avoid bus reset
- PCI: Mark some NVIDIA GPUs to avoid bus reset
- PCI: Add ACS quirk for Broadcom BCM57414 NIC
- PCI: Work around Huawei Intelligent NIC VF FLR erratum
- [arm64,armhf] dmaengine: pl330: fix wrong usage of spinlock flags in
dma_cyclc
- net: bridge: fix vlan tunnel dst null pointer dereference
- net: bridge: fix vlan tunnel dst refcnt when egressing
- mm/slub: clarify verification reporting
- mm/slub.c: include swab.h
- [armhf] net: fec_ptp: add clock rate zero check
- [arm64,armhf] KVM: arm/arm64: Fix KVM_VGIC_V3_ADDR_TYPE_REDIST read
- can: bcm/raw/isotp: use per module netdevice notifier
- inet: use bigger hash table for IP ID generation
- [arm64,armhf] usb: dwc3: debugfs: Add and remove endpoint dirs dynamically
- [arm64,armhf] usb: dwc3: core: fix kernel panic when do reboot
- [x86] fpu: Reset state for all signal restore failures
- module: limit enabling module.sig_enforce (CVE-2021-35039)
- drm/nouveau: wait for moving fence after pinning v2
- drm/radeon: wait for moving fence after pinning
- Revert "PCI: PM: Do not read power state in pci_enable_device_flags()"
- mac80211: remove warning in ieee80211_get_sband()
- cfg80211: call cfg80211_leave_ocb when switching away from OCB
- mac80211: drop multicast fragments
- net: ethtool: clear heap allocations for ethtool function
- ping: Check return value of function 'ping_queue_rcv_skb'
- inet: annotate date races around sk->sk_txhash
- net/packet: annotate accesses to po->bind
- net/packet: annotate accesses to po->ifindex
- r8152: Avoid memcpy() over-reading of ETH_SS_STATS
- r8169: Avoid memcpy() over-reading of ETH_SS_STATS
- net: qed: Fix memcpy() overflow of qed_dcbx_params()
- [x86] PCI: Add AMD RS690 quirk to enable 64-bit DMA
- nilfs2: fix memory leak in nilfs_sysfs_delete_device_group
- i2c: robotfuzz-osif: fix control-request directions
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.197
- mm: add VM_WARN_ON_ONCE_PAGE() macro
- mm/rmap: remove unneeded semicolon in page_not_mapped()
- mm/rmap: use page_not_mapped in try_to_unmap()
- mm/thp: fix __split_huge_pmd_locked() on shmem migration entry
- mm/thp: make is_huge_zero_pmd() safe and quicker
- mm/thp: try_to_unmap() use TTU_SYNC for safe splitting
- mm/thp: fix vma_address() if virtual address below file offset
- mm/thp: fix page_address_in_vma() on file THP tails
- mm/thp: unmap_mapping_page() to fix THP truncate_cleanup_page()
- mm: thp: replace DEBUG_VM BUG with VM_WARN when unmap fails for split
- mm: page_vma_mapped_walk(): use page for pvmw->page
- mm: page_vma_mapped_walk(): settle PageHuge on entry
- mm: page_vma_mapped_walk(): use pmde for *pvmw->pmd
- mm: page_vma_mapped_walk(): prettify PVMW_MIGRATION block
- mm: page_vma_mapped_walk(): crossing page table boundary
- mm: page_vma_mapped_walk(): add a level of indentation
- mm: page_vma_mapped_walk(): use goto instead of while (1)
- mm: page_vma_mapped_walk(): get vma_address_end() earlier
- mm/thp: fix page_vma_mapped_walk() if THP mapped by ptes
- mm/thp: another PVMW_SYNC fix in page_vma_mapped_walk()
- mm, futex: fix shared futex pgoff on shmem huge page
- scsi: sr: Return appropriate error code when disk is ejected
- drm/nouveau: fix dma_address check for CPU/GPU sync
- ext4: eliminate bogus error in ext4_data_block_valid_rcu()
- kthread_worker: split code for canceling the delayed work timer
- kthread: prevent deadlock when kthread_mod_delayed_work() races with
kthread_cancel_delayed_work_sync()
- xen/events: reset active flag for lateeoi events later
- [x86] KVM: SVM: Call SEV Guest Decommission if ASID binding fails
- [armhf] OMAP: replace setup_irq() by request_irq()
- [armhf] clocksource/drivers/timer-ti-dm: Add clockevent and clocksource
support
- [armhf] clocksource/drivers/timer-ti-dm: Prepare to handle dra7 timer wrap
issue
- [armhf] clocksource/drivers/timer-ti-dm: Handle dra7 timer wrap errata
i940
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.198
- scsi: core: Retry I/O for Notify (Enable Spinup) Required error
- ALSA: usb-audio: fix rate on Ozone Z90 USB headset
- ALSA: usb-audio: Fix OOB access at proc output
- media: dvb-usb: fix wrong definition
- Input: usbtouchscreen - fix control-request directions
- net: can: ems_usb: fix use-after-free in ems_usb_disconnect()
- usb: gadget: eem: fix echo command packet response issue
- USB: cdc-acm: blacklist Heimann USB Appset device
- [arm64,armhf] usb: dwc3: Fix debugfs creation flow
- [x86] usb: typec: Add the missed altmode_id_remove() in
typec_register_altmode()
- xhci: solve a double free problem while doing s4
- iov_iter_fault_in_readable() should do nothing in xarray case
- Input: joydev - prevent use of not validated data in JSIOCSBTNMAP ioctl
(CVE-2021-3612)
- [armel,armhf] arm_pmu: Fix write counter incorrect in ARMv7 big-endian
mode
- btrfs: send: fix invalid path for unlink operations after parent
orphanization
- btrfs: clear defrag status of a root if starting transaction fails
- ext4: cleanup in-core orphan list if ext4_truncate() failed to get a
transaction handle
- ext4: fix kernel infoleak via ext4_extent_header
- ext4: return error code when ext4_fill_flex_info() fails
- ext4: correct the cache_nr in tracepoint ext4_es_shrink_exit
- ext4: remove check for zero nr_to_scan in ext4_es_scan()
- ext4: fix avefreec in find_group_orlov
- ext4: use ext4_grp_locked_error in mb_find_extent
- can: gw: synchronize rcu operations before removing gw job entry
- can: peak_pciefd: pucan_handle_status(): fix a potential starvation issue
in TX path
- SUNRPC: Fix the batch tasks count wraparound.
- SUNRPC: Should wake up the privileged task firstly.
- [s390x] cio: dont call css_wait_for_slow_path() inside a lock
- [x86] serial_cs: Add Option International GSM-Ready 56K/ISDN modem
- [x86] serial_cs: remove wrong GLOBETROTTER.cis entry
- ath9k: Fix kernel NULL pointer dereference during ath_reset_internal()
- ssb: sdio: Don't overwrite const buffer if block_write fails
- rsi: Assign beacon rate settings to the correct rate_info descriptor field
- rsi: fix AP mode with WPA failure due to encrypted EAPOL
- tracing/histograms: Fix parsing of "sym-offset" modifier
- tracepoint: Add tracepoint_probe_register_may_exist() for BPF tracing
- seq_buf: Make trace_seq_putmem_hex() support data longer than 8
- [powerpc*] stacktrace: Fix spurious "stale" traces in
raise_backtrace_ipi()
- fuse: check connected before queueing on fpq->io
- spi: Make of_register_spi_device also set the fwnode
- [i386] spi: spi-topcliff-pch: Fix potential double free in
pch_spi_process_messages()
- media: cpia2: fix memory leak in cpia2_usb_probe
- media: pvrusb2: fix warning in pvr2_i2c_core_done
- [x86] crypto: qat - check return code of qat_hal_rd_rel_reg()
- [x86] crypto: qat - remove unused macro in FW loader
- sched/fair: Fix ascii art by relpacing tabs
- media: em28xx: Fix possible memory leak of em28xx struct
- media: v4l2-core: Avoid the dangling pointer in v4l2_fh_release
- media: bt8xx: Fix a missing check bug in bt878_probe
- media: dvd_usb: memory leak in cinergyt2_fe_attach
- mmc: via-sdmmc: add a check against NULL pointer dereference
- crypto: shash - avoid comparing pointers to exported functions under CFI
- media: dvb_net: avoid speculation from net slot
- media: siano: fix device register error path
- btrfs: fix error handling in __btrfs_update_delayed_inode
- btrfs: abort transaction if we fail to update the delayed inode
- btrfs: disable build on platforms having page size 256K
- [armhf] regulator: da9052: Ensure enough delay time for
.set_voltage_time_sel
- HID: do not use down_interruptible() when unbinding devices
- ACPI: processor idle: Fix up C-state latency if not ordered
- [x86] hv_utils: Fix passing zero to 'PTR_ERR' warning
- lib: vsprintf: Fix handling of number field widths in vsscanf
- ACPI: EC: Make more Asus laptops use ECDT _GPE
- block_dump: remove block_dump feature in mark_inode_dirty()
- fs: dlm: cancel work sync othercon
- random32: Fix implicit truncation warning in prandom_seed_state()
- fs: dlm: fix memory leak when fenced
- ACPICA: Fix memory leak caused by _CID repair function
- ACPI: bus: Call kobject_put() in acpi_init() error path
- [x86] platform/x86: toshiba_acpi: Fix missing error code in
toshiba_acpi_setup_keyboard()
- clocksource: Retry clock read if long delays detected
- HID: wacom: Correct base usage for capacitive ExpressKey status bits
- [armhf] sata_highbank: fix deferred probing
- [mips*] pata_octeon_cf: avoid WARN_ON() in ata_host_activate()
- [x86] crypto: ccp - Fix a resource leak in an error handling path
- media: rc: i2c: Fix an error message
- media: gspca/gl860: fix zero-length control requests
- media: siano: Fix out-of-bounds warnings in
smscore_load_firmware_family2()
- btrfs: clear log tree recovering status if starting transaction fails
- [armhf] spi: spi-sun6i: Fix chipselect/clock bug
- ACPI: sysfs: Fix a buffer overrun problem with description_show()
- blk-wbt: introduce a new disable state to prevent false positive by
rwb_enabled()
- blk-wbt: make sure throttle is enabled properly
- ocfs2: fix snprintf() checking
- [arm64,armhf] net: mvpp2: Put fwnode in error case during ->probe()
- [i386] net: pch_gbe: Propagate error from devm_gpio_request_one()
- [arm64] drm/rockchip: cdn-dp-core: add missing clk_disable_unprepare() on
error in cdn_dp_grf_write()
- RDMA/rxe: Fix failure during driver load
- drm: qxl: ensure surf.data is ininitialized
- ieee802154: hwsim: Fix possible memory leak in hwsim_subscribe_all_others
- [arm64] wcn36xx: Move hal_buf allocation to devm_kmalloc in probe
- ssb: Fix error return code in ssb_bus_scan()
- brcmfmac: fix setting of station info chains bitmask
- brcmfmac: correctly report average RSSI in station info
- brcmsmac: mac80211_if: Fix a resource leak in an error handling path
- ath10k: Fix an error code in ath10k_add_interface()
- RDMA/mlx5: Don't add slave port to unaffiliated list
- netfilter: nft_exthdr: check for IPv6 packet before further processing
- netfilter: nft_osf: check for TCP packet before further processing
- netfilter: nft_tproxy: restrict support to TCP and UDP transport protocols
- RDMA/rxe: Fix qp reference counting for atomic ops
- pkt_sched: sch_qfq: fix qfq_change_class() error path
- vxlan: add missing rcu_read_lock() in neigh_reduce()
- net/ipv4: swap flow ports when validating source
- ieee802154: hwsim: Fix memory leak in hwsim_add_one
- ieee802154: hwsim: avoid possible crash in hwsim_del_edge_nl()
- mac80211: remove iwlwifi specific workaround NDPs of null_response
- ipv6: exthdrs: do not blindly use init_net
- bpf: Do not change gso_size during bpf_skb_change_proto()
- i40e: Fix error handling in i40e_vsi_open
- i40e: Fix autoneg disabling for non-10GBaseT links
- ipv6: fix out-of-bound access in ip6_parse_tlv()
- Bluetooth: mgmt: Fix slab-out-of-bounds in tlv_data_is_valid
- Bluetooth: Fix handling of HCI_LE_Advertising_Set_Terminated event
- writeback: fix obtain a reference to a freeing memcg css
- net: lwtunnel: handle MTU calculation in forwading
- net: sched: fix warning in tcindex_alloc_perfect_hash
- RDMA/mlx5: Don't access NULL-cleared mpi pointer
- tty: nozomi: Fix a resource leak in an error handling function
- mwifiex: re-fix for unaligned accesses
- [arm64] ASoC: hisilicon: fix missing clk_disable_unprepare() on error in
hi6210_i2s_startup()
- [x86] char: pcmcia: error out if 'num_bytes_read' is greater than 4 in
set_protocol()
- tty: nozomi: Fix the error handling path of 'nozomi_card_init()'
- scsi: FlashPoint: Rename si_flags field
- serial: 8250: Actually allow UPF_MAGIC_MULTIPLIER baud rates
- of: Fix truncation of memory sizes on 32-bit platforms
- [armhf] mtd: rawnand: marvell: add missing clk_disable_unprepare() on
error in marvell_nfc_resume()
- scsi: mpt3sas: Fix error return value in _scsih_expander_add()
- configfs: fix memleak in configfs_release_bin_file
- [powerpc*] Offline CPU in stop_this_cpu()
- [arm64] serial: mvebu-uart: correctly calculate minimal possible baudrate
- vfio/pci: Handle concurrent vma faults
- mm/huge_memory.c: don't discard hugepage if other processes are mapping it
- mmc: block: Disable CMDQ on the ioctl path
- mmc: vub3000: fix control-request direction
- drm/amd/amdgpu/sriov disable all ip hw status by default
- [i386] net: pch_gbe: Use proper accessors to BE data in pch_ptp_match()
- hugetlb: clear huge pte during flush function on mips platform
- atm: iphase: fix possible use-after-free in ia_module_exit()
- mISDN: fix possible use-after-free in HFC_cleanup()
- atm: nicstar: Fix possible use-after-free in nicstar_cleanup()
- net: Treat __napi_schedule_irqoff() as __napi_schedule() on PREEMPT_RT
- reiserfs: add check for invalid 1st journal block
- drm/virtio: Fix double free on probe failure
- udf: Fix NULL pointer dereference in udf_symlink function
- e100: handle eeprom as little endian
- [arm64,armhf] clk: tegra: Ensure that PLLU configuration is applied
properly
- ipv6: use prandom_u32() for ID generation
- RDMA/cxgb4: Fix missing error code in create_qp()
- dm space maps: don't reset space map allocation cursor when committing
- [armhf] pinctrl: mcp23s08: fix race condition in irq handler
- ice: set the value of global config lock timeout longer
- virtio_net: Remove BUG() to avoid machine dead
- [arm64,armhf] net: mvpp2: check return value after calling
platform_get_resource()
- [amd64] fjes: check return value after calling platform_get_resource()
- selinux: use __GFP_NOWARN with GFP_NOWAIT in the AVC
- xfrm: Fix error reporting in xfrm_state_construct.
- [arm64,armhf] wlcore/wl12xx: Fix wl12xx get_mac error if device is in ELP
- [arm64,armhf] wl1251: Fix possible buffer overflow in wl1251_cmd_scan
- net: fix mistake path for netdev_features_strings
- rtl8xxxu: Fix device info for RTL8192EU devices
- atm: nicstar: use 'dma_free_coherent' instead of 'kfree'
- atm: nicstar: register the interrupt handler in the right place
- vsock: notify server to shutdown when client has pending signal
- RDMA/rxe: Don't overwrite errno from ib_umem_get()
- iwlwifi: mvm: don't change band on bound PHY contexts
- iwlwifi: pcie: free IML DMA memory allocation
- sfc: avoid double pci_remove of VFs
- sfc: error code if SRIOV cannot be disabled
- wireless: wext-spy: Fix out-of-bounds warning
- net: ip: avoid OOM kills with large UDP sends over loopback
- RDMA/cma: Fix rdma_resolve_route() memory leak
- Bluetooth: Fix the HCI to MGMT status conversion table
- Bluetooth: Shutdown controller after workqueues are flushed or cancelled
- Bluetooth: btusb: fix bt fiwmare downloading failure issue for qca btsoc.
- sctp: validate from_addr_param return (CVE-2021-3655)
- sctp: add size validation when walking chunks (CVE-2021-3655)
- fscrypt: don't ignore minor_hash when hash is 0
- bdi: Do not use freezable workqueue
- [arm64] serial: mvebu-uart: clarify the baud rate derivation
- [arm64] serial: mvebu-uart: fix calculation of clock divisor
- fuse: reject internal errno
- [powerpc*] barrier: Avoid collision with clang's __lwsync macro
- usb: gadget: f_fs: Fix setting of device and driver data cross-references
- drm/radeon: Add the missed drm_gem_object_put() in
radeon_user_framebuffer_create()
- pinctrl/amd: Add device HID for new AMD GPIO controller
- [arm64] drm/msm/mdp4: Fix modifier support enabling
- mmc: sdhci: Fix warning message when accessing RPMB in HS400 mode
- mmc: core: clear flags before allowing to retune
- mmc: core: Allow UHS-I voltage switch for SDSC cards if supported
- [armhf] ata: ahci_sunxi: Disable DIPM
- cpu/hotplug: Cure the cpusets trainwreck
- [arm64,armhf] clocksource/arm_arch_timer: Improve Allwinner A64 timer
workaround
- [arm64,armhf] ASoC: tegra: Set driver_name=tegra for all machine drivers
- qemu_fw_cfg: Make fw_cfg_rev_attr a proper kobj_attribute
- ipmi/watchdog: Stop watchdog timer when the current action is 'none'
- seq_buf: Fix overflow in seq_buf_putmem_hex()
- tracing: Simplify & fix saved_tgids logic
- tracing: Resize tgid_map to pid_max, not PID_MAX_DEFAULT
- dm btree remove: assign new_root only when removal succeeds
- PCI: Leave Apple Thunderbolt controllers on for s2idle or standby
- [arm64] PCI: aardvark: Fix checking for PIO Non-posted Request
- media: subdev: disallow ioctl for saa6588/davinci
- media: dtv5100: fix control-request directions
- media: zr364xx: fix memory leak in zr364xx_start_readpipe
- media: gspca/sq905: fix control-request direction
- media: gspca/sunplus: fix zero-length control requests
- media: uvcvideo: Fix pixel format change for Elgato Cam Link 4K
- [armhf] pinctrl: mcp23s08: Fix missing unlock on error in mcp23s08_irq()
- jfs: fix GPF in diFree
- [x86] KVM: x86: Use guest MAXPHYADDR from CPUID.0x8000_0008 iff TDP is
enabled
- [x86] KVM: X86: Disable hardware breakpoints unconditionally before
kvm_x86->run()
- scsi: core: Fix bad pointer dereference when ehandler kthread is invalid
- tracing: Do not reference char * as a string in histograms
- [arm64] PCI: aardvark: Don't rely on jiffies while holding spinlock
- [arm64] PCI: aardvark: Fix kernel panic during PIO transfer
- [x86] misc/libmasm/module: Fix two use after free in ibmasm_init_one
- Revert "ALSA: bebob/oxfw: fix Kconfig entry for Mackie d.2 Pro"
- w1: ds2438: fixing bug that would always get page0
- scsi: lpfc: Fix "Unexpected timeout" error in direct attach topology
- scsi: lpfc: Fix crash when lpfc_sli4_hba_setup() fails to initialize the
SGLs
- scsi: core: Cap scsi_host cmd_per_lun at can_queue
- [x86] tty: serial: 8250: serial_cs: Fix a memory leak in error handling
path
- scsi: scsi_dh_alua: Check for negative result value
- fs/jfs: Fix missing error code in lmLogInit()
- scsi: iscsi: Add iscsi_cls_conn refcount helpers
- scsi: iscsi: Fix conn use after free during resets
- scsi: iscsi: Fix shost->max_id use
- scsi: qedi: Fix null ref during abort handling
- [armhf] mfd: da9052/stmpe: Add and modify MODULE_DEVICE_TABLE
- [s390x] sclp_vt220: fix console name to match device (Closes: #961056)
- [i386] ALSA: sb: Fix potential double-free of CSP mixer elements
- [powerpc*] ps3: Add dma_mask to ps3_dma_region
- [arm64] gpio: zynq: Check return value of pm_runtime_get_sync
- [arm64,armhf] gpio: pca953x: Add support for the On Semi pca9655
- ASoC: soc-core: Fix the error return code in
snd_soc_of_parse_audio_routing()
- ALSA: bebob: add support for ToneWeal FW66
- usb: gadget: f_hid: fix endianness issue with descriptors
- [powerpc*] boot: Fixup device-tree on little endian
- [arm64,armhf] ALSA: hda: Add IRQ check for platform_get_irq()
- [x86] intel_th: Wait until port is in reset before programming it
- i2c: core: Disable client irq on reboot/shutdown
- lib/decompress_unlz4.c: correctly handle zero-padding around initrds.
- [x86] power: supply: max17042: Do not enforce (incorrect) interrupt
trigger type
- [armel,armhf] power: reset: gpio-poweroff: add missing MODULE_DEVICE_TABLE
- [x86] watchdog: Fix possible use-after-free in wdt_startup()
- [x86] watchdog: Fix possible use-after-free by calling del_timer_sync()
- [x86] watchdog: iTCO_wdt: Account for rebooting on second timeout
- [x86] fpu: Return proper error codes from user access functions
- [arm64,armhf] PCI: tegra: Add missing MODULE_DEVICE_TABLE
- orangefs: fix orangefs df output.
- ceph: remove bogus checks and WARN_ONs from ceph_set_page_dirty
- NFS: nfs_find_open_context() may only select open files
- [arm64,armhf] pwm: tegra: Don't modify HW state in .remove callback
- [arm64] ACPI: AMBA: Fix resource name in /proc/iomem
- [x86] ACPI: video: Add quirk for the Dell Vostro 3350
- virtio-blk: Fix memory leak among suspend/resume procedure
- virtio_net: Fix error handling in virtnet_restore()
- virtio_console: Assure used length from device is limited (CVE-2021-38160)
- f2fs: add MODULE_SOFTDEP to ensure crc32 is included in the initramfs
- PCI/sysfs: Fix dsm_label_utf16s_to_utf8s() buffer overrun
- NFSv4: Initialise connection to the server in nfs4_alloc_client()
(CVE-2021-38199)
- nfs: fix acl memory leak of posix_acl_create()
- ubifs: Set/Clear I_LINKABLE under i_lock for whiteout inode
- [x86] fpu: Limit xstate copy size in xstateregs_set()
- virtio_net: move tx vq operation under tx queue lock
- [i386] ALSA: isa: Fix error return code in snd_cmi8330_probe()
- NFSv4/pNFS: Don't call _nfs4_pnfs_v3_ds_connect multiple times
- rtc: fix snprintf() checking in is_rtc_hctosys()
- [arm64,armhf] reset: bail if try_module_get() fails
- [armhf] dts: am335x: align ti,pindir-d0-out-d1-in property with dt-shema
- scsi: be2iscsi: Fix an error handling path in beiscsi_dev_probe()
- net: bridge: multicast: fix PIM hello router port marking race
- scsi: scsi_dh_alua: Fix signedness bug in alua_rtpg()
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.199
- [armhf] dts: rockchip: fix pinctrl sleep nodename for rk3036-kylin and
rk3288
- [armhf] imx: pm-imx5: Fix references to imx5_cpu_suspend_info
- [armhf] dts: rockchip: fix supply properties in io-domains nodes
- [arm64,armhf] soc/tegra: fuse: Fix Tegra234-only builds
- thermal/core: Correct function name thermal_zone_device_unregister()
- [arm64,armhf] rtc: max77686: Do not enforce (incorrect) interrupt trigger
type
- scsi: aic7xxx: Fix unintentional sign extension issue on left shift of u8
- scsi: libsas: Add LUN number check in .slave_alloc callback
- scsi: libfc: Fix array index out of bound exception
- sched/fair: Fix CFS bandwidth hrtimer expiry type
- mm: slab: fix kmem_cache_create failed when sysfs node not destroyed
- dm writecache: return the exact table values that were set
- dm writecache: fix writing beyond end of underlying device when shrinking
- [arm64,armhf] net: dsa: mv88e6xxx: enable .rmu_disable() on Topaz
- net: ipv6: fix return value of ip6_skb_dst_mtu
- netfilter: ctnetlink: suspicious RCU usage in ctnetlink_dump_helpinfo
- net: bridge: sync fdb to new unicast-filtering ports
- [arm64] net: qcom/emac: fix UAF in emac_remove
- net: ti: fix UAF in tlan_remove_one
- net: send SYNACK packet with accepted fwmark
- net: validate lwtstate->data before returning from skb_tunnel_info()
- dma-buf/sync_file: Don't leak fences on merge failure
- tcp: annotate data races around tp->mtu_info
- ipv6: tcp: drop silly ICMPv6 packet too big messages
- udp: annotate data races around unix_sk(sk)->gso_size
- net: ip_tunnel: fix mtu calculation for ETHER tunnel devices
- igb: Fix use-after-free error during reset
- ixgbe: Fix an error handling path in 'ixgbe_probe()'
- igb: Fix an error handling path in 'igb_probe()'
- e1000e: Fix an error handling path in 'e1000_probe()'
- iavf: Fix an error handling path in 'iavf_probe()'

[continued in next message]

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)