• Accepted linux-signed-amd64 5.10.84+1 (source) into proposed-updates->s

    From Debian FTP Masters@21:1/5 to All on Mon Dec 13 08:20:01 2021
    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA512

    Format: 1.8
    Date: Wed, 08 Dec 2021 17:21:12 +0100
    Source: linux-signed-amd64
    Architecture: source
    Version: 5.10.84+1
    Distribution: bullseye-proposed-updates
    Urgency: medium
    Maintainer: Debian Kernel Team <debian-kernel@lists.debian.org>
    Changed-By: Salvatore Bonaccorso <carnil@debian.org>
    Changes:
    linux-signed-amd64 (5.10.84+1) bullseye; urgency=medium
    .
    * Sign kernel from linux 5.10.84-1
    .
    * New upstream stable update:
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.71
    - tty: Fix out-of-bound vmalloc access in imageblit
    - cpufreq: schedutil: Use kobject release() method to free sugov_tunables
    - scsi: qla2xxx: Changes to support kdump kernel for NVMe BFS
    - cpufreq: schedutil: Destroy mutex before kobject_put() frees the memory
    - ALSA: hda/realtek: Quirks to enable speaker output for Lenovo Legion 7i
    15IMHG05, Yoga 7i 14ITL5/15ITL5, and 13s Gen2 laptops.
    - [amd64,arm64] ACPI: NFIT: Use fallback node id when numa info in NFIT
    table is incorrect
    - fs-verity: fix signed integer overflow with i_size near S64_MAX
    - hwmon: (tmp421) handle I2C errors
    - hwmon: (w83793) Fix NULL pointer dereference by removing unnecessary
    structure field
    - hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary
    structure field
    - hwmon: (w83791d) Fix NULL pointer dereference by removing unnecessary
    structure field
    - [arm64,armhf] gpio: pca953x: do not ignore i2c errors
    - scsi: ufs: Fix illegal offset in UPIU event trace
    - mac80211: fix use-after-free in CCMP/GCMP RX
    - [x86] kvmclock: Move this_cpu_pvti into kvmclock.h
    - [x86] KVM: x86: Fix stack-out-of-bounds memory access from
    ioapic_write_indirect()
    - [x86] KVM: x86: nSVM: don't copy virt_ext from vmcb12
    - [x86] KVM: nVMX: Filter out all unsupported controls when eVMCS was
    activated
    - KVM: rseq: Update rseq when processing NOTIFY_RESUME on xfer to KVM guest
    - RDMA/cma: Do not change route.addr.src_addr.ss_family
    - drm/amd/display: Pass PCI deviceid into DC
    - drm/amdgpu: correct initial cp_hqd_quantum for gfx9
    - ipvs: check that ip_vs_conn_tab_bits is between 8 and 20
    - bpf: Handle return value of BPF_PROG_TYPE_STRUCT_OPS prog
    - IB/cma: Do not send IGMP leaves for sendonly Multicast groups
    - RDMA/cma: Fix listener leak in rdma_cma_listen_on_all() failure
    - mac80211: Fix ieee80211_amsdu_aggregate frag_tail bug
    - mac80211: limit injected vht mcs/nss in ieee80211_parse_tx_radiotap
    - mac80211: mesh: fix potentially unaligned access
    - mac80211-hwsim: fix late beacon hrtimer handling
    - sctp: break out if skb_header_pointer returns NULL in sctp_rcv_ootb
    - hwmon: (tmp421) report /PVLD condition as fault
    - hwmon: (tmp421) fix rounding for negative values
    - [arm64] net: enetc: fix the incorrect clearing of IF_MODE bits
    - net: ipv4: Fix rtnexthop len when RTA_FLOW is present
    - smsc95xx: fix stalled rx after link change
    - [x86] drm/i915/request: fix early tracepoints
    - [arm64,armhf] dsa: mv88e6xxx: 6161: Use chip wide MAX MTU
    - [arm64,armhf] dsa: mv88e6xxx: Fix MTU definition
    - [arm64,armhf] dsa: mv88e6xxx: Include tagger overhead when setting MTU for
    DSA and CPU ports
    - e100: fix length calculation in e100_get_regs_len
    - e100: fix buffer overrun in e100_get_regs
    - [arm64] RDMA/hns: Fix inaccurate prints
    - bpf: Exempt CAP_BPF from checks against bpf_jit_limit
    - Revert "block, bfq: honor already-setup queue merges"
    - scsi: csiostor: Add module softdep on cxgb4
    - ixgbe: Fix NULL pointer dereference in ixgbe_xdp_setup
    - [arm64] net: hns3: do not allow call hns3_nic_net_open repeatedly
    - [arm64] net: hns3: keep MAC pause mode when multiple TCs are enabled
    - [arm64] net: hns3: fix mixed flag HCLGE_FLAG_MQPRIO_ENABLE and
    HCLGE_FLAG_DCB_ENABLE
    - [arm64] net: hns3: fix show wrong state when add existing uc mac address
    - [arm64] net: hns3: fix prototype warning
    - [arm64] net: hns3: reconstruct function hns3_self_test
    - [arm64] net: hns3: fix always enable rx vlan filter problem after selftest
    - [arm64,armhf] net: phy: bcm7xxx: Fixed indirect MMD operations
    - net: sched: flower: protect fl_walk() with rcu
    - af_unix: fix races in sk_peer_pid and sk_peer_cred accesses
    - [x86] perf/x86/intel: Update event constraints for ICX
    - nvme: add command id quirk for apple controllers
    - elf: don't use MAP_FIXED_NOREPLACE for elf interpreter mappings
    - debugfs: debugfs_create_file_size(): use IS_ERR to check for error
    - ext4: fix loff_t overflow in ext4_max_bitmap_size()
    - ext4: limit the number of blocks in one ADD_RANGE TLV (Closes: #995425)
    - ext4: fix reserved space counter leakage
    - ext4: add error checking to ext4_ext_replay_set_iblocks()
    - ext4: fix potential infinite loop in ext4_dx_readdir()
    - HID: u2fzero: ignore incomplete packets without data
    - net: udp: annotate data race around udp_sk(sk)->corkflag
    - ASoC: dapm: use component prefix when checking widget names
    - usb: hso: remove the bailout parameter
    - [x86] crypto: ccp - fix resource leaks in ccp_run_aes_gcm_cmd()
    (CVE-2021-3744, CVE-2021-3764)
    - HID: betop: fix slab-out-of-bounds Write in betop_probe
    - netfilter: ipset: Fix oversized kvmalloc() calls
    - mm: don't allow oversized kvmalloc() calls
    - HID: usbhid: free raw_report buffers in usbhid_stop
    - [x86] KVM: x86: Handle SRCU initialization failure during page track init
    - netfilter: conntrack: serialize hash resizes and cleanups
    - netfilter: nf_tables: Fix oversized kvmalloc() calls
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.72
    - [arm64,armhf] spi: rockchip: handle zero length transfers without timing
    out
    - nfsd: back channel stuck in SEQ4_STATUS_CB_PATH_DOWN
    - btrfs: replace BUG_ON() in btrfs_csum_one_bio() with proper error handling
    - btrfs: fix mount failure due to past and transient device flush error
    - net: mdio: introduce a shutdown method to mdio device drivers
    - xen-netback: correct success/error reporting for the SKB-with-fraglist
    case
    - scsi: sd: Free scsi_disk device via put_device()
    - [arm*] usb: dwc2: check return value after calling platform_get_resource()
    - nvme-fc: update hardware queues before using them
    - nvme-fc: avoid race between time out and tear down
    - [arm64] thermal/drivers/tsens: Fix wrong check for tzd in irq handlers
    - scsi: ses: Retry failed Send/Receive Diagnostic commands
    - [arm64,armhf] irqchip/gic: Work around broken Renesas integration
    - smb3: correct smb3 ACL security descriptor
    - KVM: do not shrink halt_poll_ns below grow_start
    - [x86] kvm: Add AMD PMU MSRs to msrs_to_save_all[]
    - [x86] KVM: nSVM: restore int_vector in svm_clear_vintr
    - [x86] perf/x86: Reset destroy callback on event init failure
    - libata: Add ATA_HORKAGE_NO_NCQ_ON_ATI for Samsung 860 and 870 SSD.
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.73
    - [arm64,armhf] usb: chipidea: ci_hdrc_imx: Also search for 'phys' phandle
    - USB: cdc-acm: fix racy tty buffer accesses
    - USB: cdc-acm: fix break reporting
    - usb: typec: tcpm: handle SRC_STARTUP state if cc changes
    - drm/nouveau/kms/tu102-: delay enabling cursor until after assign_windows
    - xen/privcmd: fix error handling in mmap-resource processing
    - [arm64] mmc: meson-gx: do not use memcpy_to/fromio for dram-access-quirk
    - ovl: fix missing negative dentry check in ovl_rename() (CVE-2021-20321)
    - ovl: fix IOCB_DIRECT if underlying fs doesn't support direct IO
    - nfsd: fix error handling of register_pernet_subsys() in init_nfsd()
    - nfsd4: Handle the NFSv4 READDIR 'dircount' hint being zero
    - SUNRPC: fix sign error causing rpcsec_gss drops
    - xen/balloon: fix cancelled balloon action
    - [armhf] dts: omap3430-sdp: Fix NAND device node
    - [armhf] bus: ti-sysc: Add break in switch statement in sysc_init_soc()
    - [arm64] soc: qcom: mdt_loader: Drop PT_LOAD check on hash segment
    - [armhf] dts: imx: Add missing pinctrl-names for panel on M53Menlo
    - [armhf] dts: imx: Fix USB host power regulator polarity on M53Menlo
    - [amd64] PCI: hv: Fix sleep while in non-sleep context when removing child
    devices from the bus
    - iwlwifi: pcie: add configuration of a Wi-Fi adapter on Dell XPS 15
    - [armel,armhf] bpf, arm: Fix register clobbering in div/mod implementation
    - [armhf] soc: ti: omap-prm: Fix external abort for am335x pruss
    - bpf: Fix integer overflow in prealloc_elems_and_freelist()
    (CVE-2021-41864)
    - net/mlx5e: IPSEC RX, enable checksum complete
    - net/mlx5: E-Switch, Fix double allocation of acl flow counter
    - phy: mdio: fix memory leak
    - net_sched: fix NULL deref in fifo_set_limit()
    - [i386] ptp_pch: Load module automatically if ID matches
    - [armhf] imx6: disable the GIC CPU interface before calling stby-poweroff
    sequence
    - net: bridge: use nla_total_size_64bit() in br_get_linkxstats_size()
    - net: bridge: fix under estimation in br_get_linkxstats_size()
    - net/sched: sch_taprio: properly cancel timer from taprio_destroy()
    - net: sfp: Fix typo in state machine debug string
    - netlink: annotate data races around nlk->bound
    - perf jevents: Tidy error handling
    - [armhf] bus: ti-sysc: Use CLKDM_NOAUTO for dra7 dcan1 for errata i893
    - [arm64,armhf] drm/sun4i: dw-hdmi: Fix HDMI PHY clock setup
    - drm/nouveau: avoid a use-after-free when BO init fails
    - drm/nouveau/kms/nv50-: fix file release memory leak
    - drm/nouveau/debugfs: fix file release memory leak
    - [amd64] gve: Correct available tx qpl check
    - [amd64] gve: Avoid freeing NULL pointer
    - rtnetlink: fix if_nlmsg_stats_size() under estimation
    - [amd64] gve: fix gve_get_stats()
    - [amd64] gve: report 64bit tx_bytes counter from gve_handle_report_stats()
    - i40e: fix endless loop under rtnl
    - i40e: Fix freeing of uninitialized misc IRQ vector
    - net: prefer socket bound to interface when not in VRF
    - [powerpc*] iommu: Report the correct most efficient DMA mask for PCI
    devices
    - i2c: acpi: fix resource leak in reconfiguration device addition
    - [s390x] bpf, s390: Fix potential memory leak about jit_data
    - [powerpc*] bpf: Fix BPF_SUB when imm == 0x80000000
    - [powerpc*] pseries/eeh: Fix the kdump kernel crash during eeh_pseries_init
    - [i386] x86/platform/olpc: Correct ifdef symbol to intended
    CONFIG_OLPC_XO15_SCI
    - [x86] entry: Correct reference to intended CONFIG_64_BIT
    - [x86] hpet: Use another crystalball to evaluate HPET usability
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.74
    - ext4: check and update i_disksize properly
    - ext4: correct the error path of ext4_write_inline_data_end()
    - [x86] ASoC: Intel: sof_sdw: tag SoundWire BEs as non-atomic
    - HID: apple: Fix logical maximum and usage maximum of Magic Keyboard JIS
    - netfilter: ip6_tables: zero-initialize fragment offset
    - HID: wacom: Add new Intuos BT (CTL-4100WL/CTL-6100WL) device IDs
    - [x86] ASoC: SOF: loader: release_firmware() on load failure to avoid
    batching
    - netfilter: nf_nat_masquerade: make async masq_inet6_event handling generic
    - netfilter: nf_nat_masquerade: defer conntrack walk to work queue
    - mac80211: Drop frames from invalid MAC address in ad-hoc mode
    - net: prevent user from passing illegal stab size
    - mac80211: check return value of rhashtable_init
    - [x86] vboxfs: fix broken legacy mount signature checking
    - drm/amdgpu: fix gart.bo pin_count leak
    - scsi: ses: Fix unsigned comparison with less than zero
    - scsi: virtio_scsi: Fix spelling mistake "Unsupport" -> "Unsupported"
    - perf/core: fix userpage->time_enabled of inactive events
    - sched: Always inline is_percpu_thread()
    - [armhf] hwmon: (pmbus/ibm-cffps) max_power_out swap changes
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.75
    - ALSA: usb-audio: Add quirk for VF0770
    - ALSA: pcm: Workaround for a wrong offset in SYNC_PTR compat ioctl
    - ALSA: seq: Fix a potential UAF by wrong private_free call order
    - ALSA: hda/realtek: Enable 4-speaker output for Dell Precision 5560 laptop
    - ALSA: hda - Enable headphone mic on Dell Latitude laptops with ALC3254
    - ALSA: hda/realtek: Complete partial device name to avoid ambiguity
    - ALSA: hda/realtek: Add quirk for Clevo X170KM-G
    - ALSA: hda/realtek - ALC236 headset MIC recording issue
    - ALSA: hda/realtek: Add quirk for TongFang PHxTxX1
    - ALSA: hda/realtek: Fix for quirk to enable speaker output on the Lenovo
    13s Gen2
    - ALSA: hda/realtek: Fix the mic type detection issue for ASUS G551JW
    - [s390x] fix strrchr() implementation
    - [arm64] hugetlb: fix CMA gigantic page order for non-4K PAGE_SIZE
    - drm/msm: Avoid potential overflow in timeout_to_jiffies()
    - btrfs: unlock newly allocated extent buffer after error
    - btrfs: deal with errors when replaying dir entry during log replay
    - btrfs: deal with errors when adding inode reference during log replay
    - btrfs: check for error when looking up inode during dir entry replay
    - btrfs: update refs for any root except tree log roots
    - btrfs: fix abort logic in btrfs_replace_file_extents
    - [x86] resctrl: Free the ctrlval arrays when domain_setup_mon_state() fails
    - [x86] mei: me: add Ice Lake-N device id.
    - xhci: guard accesses to ep_state in xhci_endpoint_reset()
    - xhci: Fix command ring pointer corruption while aborting a command
    - xhci: Enable trust tx length quirk for Fresco FL11 USB controller
    - cb710: avoid NULL pointer subtraction
    - [arm64,x86] efi/cper: use stack buffer for error record decoding
    - efi: Change down_interruptible() in virt_efi_reset_system() to
    down_trylock()
    - [armhf] usb: musb: dsps: Fix the probe error path (Closes: 1000900)
    - Input: xpad - add support for another USB ID of Nacon GC-100
    - USB: serial: qcserial: add EM9191 QDL support
    - USB: serial: option: add Quectel EC200S-CN module support
    - USB: serial: option: add Telit LE910Cx composition 0x1204
    - USB: serial: option: add prod. id for Quectel EG91
    - virtio: write back F_VERSION_1 before validate
    - nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells
    - [powerpc*] xive: Discard disabled interrupts in get_irqchip_state()
    - driver core: Reject pointless SYNC_STATE_ONLY device links
    - iio: adc: ad7192: Add IRQ flag
    - iio: adc: ad7780: Fix IRQ flag
    - iio: adc: ad7793: Fix IRQ flag
    - iio: adc128s052: Fix the error handling path of 'adc128_probe()'
    - iio: adc: max1027: Fix wrong shift with 12-bit devices
    - iio: light: opt3001: Fixed timeout error when 0 lux
    - iio: adc: max1027: Fix the number of max1X31 channels
    - iio: dac: ti-dac5571: fix an error code in probe()
    - [arm64] tee: optee: Fix missing devices unregister during optee_remove
    - [armel,armhf] dts: bcm2711-rpi-4-b: Fix usb's unit address
    - [armel,armhf] dts: bcm2711-rpi-4-b: fix sd_io_1v8_reg regulator states
    - [armel,armhf] dts: bcm2711-rpi-4-b: Fix pcie0's unit address formatting
    - nvme-pci: Fix abort command id
    - sctp: account stream padding length for reconf chunk
    - [arm64,armhf] gpio: pca953x: Improve bias setting
    - net/mlx5e: Fix memory leak in mlx5_core_destroy_cq() error path
    - net/mlx5e: Mutually exclude RX-FCS and RX-port-timestamp
    - net: stmmac: fix get_hw_feature() on old hardware
    - ethernet: s2io: fix setting mac address during resume
    - nfc: fix error handling of nfc_proto_register()
    - NFC: digital: fix possible memory leak in digital_tg_listen_mdaa()
    - NFC: digital: fix possible memory leak in digital_in_send_sdd_req()
    - [i386] pata_legacy: fix a couple uninitialized variable bugs
    - ata: ahci_platform: fix null-ptr-deref in
    ahci_platform_enable_regulators()
    - drm/edid: In connector_bad_edid() cap num_of_ext by num_blocks read
    - [arm64] drm/msm: Fix null pointer dereference on pointer edp
    - [arm64] drm/msm/mdp5: fix cursor-related warnings
    - [arm64] drm/msm/a6xx: Track current ctx by seqno
    - [arm64] drm/msm/dsi: Fix an error code in msm_dsi_modeset_init()
    - [arm64] drm/msm/dsi: fix off by one in dsi_bus_clk_enable error handling
    - [arm64] acpi/arm64: fix next_platform_timer() section mismatch error
    - [x86] platform/x86: intel_scu_ipc: Fix busy loop expiry time
    - mqprio: Correct stats in mqprio_dump_class_stats().
    - qed: Fix missing error code in qed_slowpath_start()
    - nfp: flow_offload: move flow_indr_dev_register from app init to app start
    - [arm64] net: mscc: ocelot: warn when a PTP IRQ is raised for an unknown
    skb
    - [arm64,armhf] net: dsa: mv88e6xxx: don't use PHY_DETECT on internal PHY's
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.76
    - xhci: add quirk for host controllers that don't update endpoint DCS
    - io_uring: fix splice_fd_in checks backport typo
    - [armhf] dts: vexpress-v2p-ca9: Fix the SMB unit-address
    - block: decode QUEUE_FLAG_HCTX_ACTIVE in debugfs output
    - [x86] xen/x86: prevent PVH type from getting clobbered
    - NFSD: Keep existing listeners on portlist error
    - netfilter: xt_IDLETIMER: fix panic that occurs when timer_type has garbage
    value
    - ice: fix getting UDP tunnel entry
    - netfilter: ip6t_rt: fix rt0_hdr parsing in rt_mt6
    - netfilter: ipvs: make global sysctl readonly in non-init netns
    - tcp: md5: Fix overlap between vrf and non-vrf keys
    - ipv6: When forwarding count rx stats on the orig netdev
    - [powerpc*] smp: do not decrement idle task preempt count in CPU offline
    - [arm64] net: hns3: reset DWRR of unused tc to zero
    - [arm64] net: hns3: add limit ets dwrr bandwidth cannot be 0
    - [arm64] net: hns3: schedule the polling again when allocation fails
    - [arm64] net: hns3: fix vf reset workqueue cannot exit
    - [arm64] net: hns3: disable sriov before unload hclge layer
    - net: stmmac: Fix E2E delay mechanism
    - e1000e: Fix packet loss on Tiger Lake and later
    - ice: Add missing E810 device ids
    - [arm64] net: enetc: fix ethtool counter name for PM0_TERR
    - can: peak_usb: pcan_usb_fd_decode_status(): fix back to ERROR_ACTIVE state
    notification
    - can: peak_pci: peak_pci_remove(): fix UAF
    - can: isotp: isotp_sendmsg(): fix return error on FC timeout on TX path
    - can: isotp: isotp_sendmsg(): add result check for
    wait_event_interruptible()
    - can: j1939: j1939_tp_rxtimer(): fix errant alert in j1939_tp_rxtimer
    - can: j1939: j1939_netdev_start(): fix UAF for rx_kref of j1939_priv
    - can: j1939: j1939_xtp_rx_dat_one(): cancel session if receive TP.DT with
    error length
    - can: j1939: j1939_xtp_rx_rts_session_new(): abort TP less than 9 bytes
    - ceph: skip existing superblocks that are blocklisted or shut down when
    mounting
    - ceph: fix handling of "meta" errors
    - ocfs2: fix data corruption after conversion from inline format
    - ocfs2: mount fails with buffer overflow in strlen
    - userfaultfd: fix a race between writeprotect and exit_mmap()
    - vfs: check fd has read access in kernel_read_file_from_fd()
    - ALSA: usb-audio: Provide quirk for Sennheiser GSP670 Headset
    - ALSA: hda/realtek: Add quirk for Clevo PC50HS
    - ASoC: DAPM: Fix missing kctl change notifications
    - audit: fix possible null-pointer dereference in audit_filter_rules
    - [powerpc*] powerpc64/idle: Fix SP offsets when saving GPRs
    - [powerpc*] KVM: PPC: Book3S HV: Fix stack handling in
    idle_kvm_start_guest()
    - [powerpc*] KVM: PPC: Book3S HV: Make idle_kvm_start_guest() return 0 if it
    went to guest (CVE-2021-43056)
    - [powerpc*] idle: Don't corrupt back chain when going idle
    - mm, slub: fix mismatch between reconstructed freelist depth and cnt
    - mm, slub: fix potential memoryleak in kmem_cache_open()
    - mm, slub: fix incorrect memcg slab count for bulk free
    - [x86] KVM: nVMX: promptly process interrupts delivered while in guest mode
    - nfc: nci: fix the UAF of rf_conn_info object (CVE-2021-3760)
    - isdn: cpai: check ctr->cnr to avoid array index out of bound
    (CVE-2021-43389)
    - [arm64] net: hns3: fix the max tx size according to user manual
    - ALSA: hda: intel: Allow repeatedly probing on codec configuration errors
    - btrfs: deal with errors when checking if a dir entry exists during log
    replay
    - net: stmmac: add support for dwmac 3.40a
    - isdn: mISDN: Fix sleeping function called from invalid context
    - [x86] platform/x86: intel_scu_ipc: Update timeout value in comment
    - ALSA: hda: avoid write to STATESTS if controller is in reset
    - [x86] perf/x86/msr: Add Sapphire Rapids CPU support
    - scsi: iscsi: Fix set_param() handling
    - scsi: qla2xxx: Fix a memory leak in an error path of qla2x00_process_els()
    - sched/scs: Reset the shadow stack when idle_task_exit
    - [arm64] net: hns3: fix for miscalculation of rx unused desc
    - scsi: core: Fix shost->cmd_per_lun calculation in scsi_add_host_with_dma()
    - can: isotp: isotp_sendmsg(): fix TX buffer concurrent access in
    isotp_sendmsg()
    - [s390x] pci: fix zpci_zdev_put() on reserve
    - net: mdiobus: Fix memory leak in __mdiobus_register
    - tracing: Have all levels of checks prevent recursion
    - e1000e: Separate TGP board type from SPT
    - [armhf] pinctrl: stm32: use valid pin identifier in stm32_pinctrl_resume()
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.77
    - [armel,armhf] 9139/1: kprobes: fix arch_init_kprobes() prototype
    - io_uring: don't take uring_lock during iowq cancel
    - [powerpc*] bpf: Fix BPF_MOD when imm == 1
    - [arm64] Avoid premature usercopy failure
    - ext4: fix possible UAF when remounting r/o a mmp-protected file system
    - usbnet: sanity check for maxpacket
    - usbnet: fix error return code in usbnet_probe()
    - pinctrl: amd: disable and mask interrupts on probe
    - ata: sata_mv: Fix the error handling of mv_chip_id()
    - tipc: fix size validations for the MSG_CRYPTO type (CVE-2021-43267)
    - nfc: port100: fix using -ERRNO as command type mask
    - Revert "net: mdiobus: Fix memory leak in __mdiobus_register"
    - mmc: vub300: fix control-message timeouts
    - mmc: cqhci: clear HALT state after CQE enable
    - [armhf] mmc: dw_mmc: exynos: fix the finding clock sample value
    - mmc: sdhci: Map more voltage level to SDHCI_POWER_330
    - [arm64,armhf] mmc: sdhci-esdhc-imx: clear the buffer_read_ready to reset
    standard tuning circuit
    - ocfs2: fix race between searching chunks and release journal_head from
    buffer_head
    - nvme-tcp: fix H2CData PDU send accounting (again)
    - cfg80211: scan: fix RCU in cfg80211_add_nontrans_list()
    - cfg80211: fix management registrations locking
    - net: lan78xx: fix division by zero in send path
    - mm, thp: bail out early in collapse_file for writeback page
    - drm/ttm: fix memleak in ttm_transfered_destroy
    - drm/amdgpu: fix out of bounds write (CVE-2021-42327)
    - cgroup: Fix memory leak caused by missing cgroup_bpf_offline
    - tcp_bpf: Fix one concurrency problem in the tcp_bpf_send_verdict function
    - bpf: Fix potential race in tail call compatibility check
    - bpf: Fix error usage of map_fd and fdget() in generic_map_update_batch()
    - [amd64] IB/qib: Protect from buffer overflow in struct qib_user_sdma_pkt
    fields
    - [amd64] IB/hfi1: Fix abba locking issue with sc_disable()
    - nvmet-tcp: fix data digest pointer calculation
    - nvme-tcp: fix data digest pointer calculation
    - nvme-tcp: fix possible req->offset corruption
    - RDMA/mlx5: Set user priority for DCT
    - [arm64] dts: allwinner: h5: NanoPI Neo 2: Fix ethernet node
    - regmap: Fix possible double-free in regcache_rbtree_exit()
    - net: batman-adv: fix error handling
    - net-sysfs: initialize uid and gid before calling net_ns_get_ownership
    - cfg80211: correct bridge/4addr mode check
    - net: Prevent infinite while loop in skb_tx_hash()
    - RDMA/sa_query: Use strscpy_pad instead of memcpy to copy a string
    - net: ethernet: microchip: lan743x: Fix driver crash when lan743x_pm_resume
    fails
    - net: ethernet: microchip: lan743x: Fix dma allocation failure by using
    dma_set_mask_and_coherent
    - phy: phy_ethtool_ksettings_get: Lock the phy for consistency
    - phy: phy_ethtool_ksettings_set: Move after phy_start_aneg
    - phy: phy_start_aneg: Add an unlocked version
    - phy: phy_ethtool_ksettings_set: Lock the PHY while changing settings
    - sctp: use init_tag from inithdr for ABORT chunk (CVE-2021-3772)
    - sctp: fix the processing for INIT_ACK chunk (CVE-2021-3772)
    - sctp: fix the processing for COOKIE_ECHO chunk (CVE-2021-3772)
    - sctp: add vtag check in sctp_sf_violation (CVE-2021-3772)
    - sctp: add vtag check in sctp_sf_do_8_5_1_E_sa (CVE-2021-3772)
    - sctp: add vtag check in sctp_sf_ootb (CVE-2021-3772)
    - lan743x: fix endianness when accessing descriptors
    - [s390x] KVM: clear kicked_mask before sleeping again
    - [s390x] KVM: preserve deliverable_mask in __airqs_kick_single_vcpu
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.78
    - scsi: core: Put LLD module refcnt after SCSI device is released
    - Revert "io_uring: reinforce cancel on flush during exit"
    - sfc: Fix reading non-legacy supported link modes
    - vrf: Revert "Reset skb conntrack connection..."
    - net: ethernet: microchip: lan743x: Fix skb allocation failure
    - media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt()
    (CVE-2021-42739)
    - Revert "xhci: Set HCD flag to defer primary roothub registration"
    - Revert "usb: core: hcd: Add support for deferring roothub registration"
    - mm: khugepaged: skip huge page collapse for special files
    - Revert "drm/ttm: fix memleak in ttm_transfered_destroy"
    - [arm*] 9120/1: Revert "amba: make use of -1 IRQs warn"
    - [arm64] Revert "wcn36xx: Disable bmps when encryption is disabled"
    - ALSA: usb-audio: Add Schiit Hel device to mixer map quirk table
    - ALSA: usb-audio: Add Audient iD14 to mixer map quirk table
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.79
    - [x86] Revert "x86/kvm: fix vcpu-id indexed array sizes"
    - [arm64,armhf] usb: musb: Balance list entry in musb_gadget_queue
    - usb-storage: Add compatibility quirk flags for iODD 2531/2541
    - [arm*] binder: don't detect sender/target during buffer cleanup
    - printk/console: Allow to disable console output by using console="" or
    console=null
    - staging: rtl8712: fix use-after-free in rtl8712_dl_fw
    - isofs: Fix out of bound access for corrupted isofs image
    - [x86] comedi: dt9812: fix DMA buffers on stack
    - [x86] comedi: ni_usb6501: fix NULL-deref in command paths
    - [x86] comedi: vmk80xx: fix transfer-buffer overflows
    - [x86] comedi: vmk80xx: fix bulk-buffer overflow
    - [x86] comedi: vmk80xx: fix bulk and interrupt message timeouts
    - staging: r8712u: fix control-message timeout
    - [x86] staging: rtl8192u: fix control-message timeouts
    - rsi: fix control-message timeout
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.80
    - xhci: Fix USB 3.1 enumeration issues by increasing roothub power-on-good
    delay
    - usb: xhci: Enable runtime-pm by default on AMD Yellow Carp platform
    - [arm*] binder: use euid from cred instead of using task
    - [arm*] binder: use cred instead of task for selinux checks
    - [arm*] binder: use cred instead of task for getsecid
    - Input: iforce - fix control-message timeout
    - Input: elantench - fix misreporting trackpoint coordinates
    (Closes: #989285)
    - libata: fix read log timeout value
    - ocfs2: fix data corruption on truncate
    - scsi: core: Remove command size deduction from scsi_setup_scsi_cmnd()
    - scsi: qla2xxx: Fix kernel crash when accessing port_speed sysfs file
    - scsi: qla2xxx: Fix use after free in eh_abort path
    - [arm64,armhf] mmc: dw_mmc: Dont wait for DRTO on Write RSP error
    - exfat: fix incorrect loading of i_blocks for large files
    - tpm: Check for integer overflow in tpm2_map_response_body()
    - media: ite-cir: IR receiver stop working after receive overflow
    (Closes: #996672)
    - media: ir-kbd-i2c: improve responsiveness of hauppauge zilog receivers
    (Closes: #994050)
    - media: v4l2-ioctl: Fix check_ext_ctrls
    - ALSA: hda/realtek: Fix mic mute LED for the HP Spectre x360 14
    - ALSA: hda/realtek: Add a quirk for HP OMEN 15 mute LED
    - ALSA: hda/realtek: Add quirk for Clevo PC70HS
    - ALSA: hda/realtek: Headset fixup for Clevo NH77HJQ
    - ALSA: hda/realtek: Add a quirk for Acer Spin SP513-54N
    - ALSA: hda/realtek: Add quirk for ASUS UX550VE
    - ALSA: hda/realtek: Add quirk for HP EliteBook 840 G7 mute LED
    - ALSA: ua101: fix division by zero at probe
    - ALSA: 6fire: fix control and bulk message timeouts
    - ALSA: line6: fix control and interrupt message timeouts
    - ALSA: usb-audio: Line6 HX-Stomp XL USB_ID for 48k-fixed quirk
    - ALSA: usb-audio: Add registration quirk for JBL Quantum 400
    - ALSA: hda: Free card instance properly at probe errors
    - ALSA: synth: missing check for possible NULL after the call to kstrdup
    - ALSA: timer: Fix use-after-free problem
    - ALSA: timer: Unconditionally unlink slave instances, too
    - ext4: fix lazy initialization next schedule time computation in more
    granular unit
    - ext4: ensure enough credits in ext4_ext_shift_path_extents
    - ext4: refresh the ext4_ext_path struct after dropping i_data_sem.
    - fuse: fix page stealing
    - [x86] cpu: Fix migration safety with X86_BUG_NULL_SEL
    - [x86] irq: Ensure PI wakeup handler is unregistered before module unload
    - ASoC: soc-core: fix null-ptr-deref in snd_soc_del_component_unlocked()
    - ALSA: hda/realtek: Fixes HP Spectre x360 15-eb1xxx speakers
    - [arm64] cavium: Return negative value when pci_alloc_irq_vectors() fails
    - scsi: qla2xxx: Return -ENOMEM if kzalloc() fails
    - scsi: qla2xxx: Fix unmap of already freed sgl
    - mISDN: Fix return values of the probe function
    - [arm64] cavium: Fix return values of the probe function
    - sfc: Export fibre-specific supported link modes
    - sfc: Don't use netif_info before net_device setup
    - [armhf] reset: socfpga: add empty driver allowing consumers to probe
    - drm: panel-orientation-quirks: Add quirk for Aya Neo 2021
    - bpf: Define bpf_jit_alloc_exec_limit for arm64 JIT
    - bpf: Prevent increasing bpf_jit_limit above max
    - xen/netfront: stop tx queues during live migration
    - nvmet-tcp: fix a memory leak when releasing a queue
    - [armhf] spi: spl022: fix Microwire full duplex mode
    - net: multicast: calculate csum of looped-back and forwarded packets
    - [armhf] watchdog: Fix OMAP watchdog early handling
    - drm: panel-orientation-quirks: Add quirk for GPD Win3
    - block: schedule queue restart after BLK_STS_ZONE_RESOURCE

    [continued in next message]

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)