-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Mon, 07 Mar 2022 22:06:21 +0100
Source: linux-signed-amd64
Architecture: source
Version: 5.10.103+1
Distribution: bullseye-security
Urgency: high
Maintainer: Debian Kernel Team <
debian-kernel@lists.debian.org>
Changed-By: Salvatore Bonaccorso <
carnil@debian.org>
Changes:
linux-signed-amd64 (5.10.103+1) bullseye-security; urgency=high
.
* Sign kernel from linux 5.10.103-1
.
* New upstream stable update:
https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.93
- kbuild: Add $(KBUILD_HOSTLDFLAGS) to 'has_libelf' test
- devtmpfs regression fix: reconfigure on each mount
- orangefs: Fix the size of a memory allocation in orangefs_bufmap_alloc()
- perf: Protect perf_guest_cbs with RCU
- [x86] KVM: Register Processor Trace interrupt hook iff PT enabled in guest
- [s390x] KVM: Clarify SIGP orders versus STOP/RESTART
- 9p: only copy valid iattrs in 9P2000.L setattr implementation
- [x86] video: vga16fb: Only probe for EGA and VGA 16 color graphic cards
- media: uvcvideo: fix division by zero at stream start
- rtlwifi: rtl8192cu: Fix WARNING when calling local_irq_restore() with
interrupts enabled
- firmware: qemu_fw_cfg: fix sysfs information leak
- firmware: qemu_fw_cfg: fix NULL-pointer deref on duplicate entries
- firmware: qemu_fw_cfg: fix kobject leak in probe error path
- [x86] KVM: remove PMU FIXED_CTR3 from msrs_to_save_all
- ALSA: hda/realtek: Add speaker fixup for some Yoga 15ITL5 devices
- ALSA: hda/realtek - Fix silent output on Gigabyte X570 Aorus Master after
reboot from Windows
- ALSA: hda: ALC287: Add Lenovo IdeaPad Slim 9i 14ITL5 speaker quirk
- ALSA: hda/realtek: Add quirk for Legion Y9000X 2020
- ALSA: hda/realtek: Re-order quirk entries for Lenovo
- [powerpc*] pseries: Get entry and uaccess flush required bits from
H_GET_CPU_CHARACTERISTICS
https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.94
- [x86] KVM: VMX: switch blocked_vcpu_on_cpu_lock to raw spinlock
- HID: uhid: Fix worker destroying device without any protection
- HID: wacom: Reset expected and received contact counts at the same time
- HID: wacom: Ignore the confidence flag when a touch is removed
- HID: wacom: Avoid using stale array indicies to read contact count
- f2fs: fix to do sanity check in is_alive()
- nfc: llcp: fix NULL error pointer dereference on sendmsg() after failed
bind()
- [armhf] mtd: rawnand: gpmi: Add ERR007117 protection for nfc_apply_timings
- [armhf] mtd: rawnand: gpmi: Remove explicit default gpmi clock setting for
i.MX6
- mtd: Fixed breaking list in __mtd_del_partition.
- [x86] gpu: Reserve stolen memory for first integrated Intel GPU
- rtc: cmos: take rtc_lock while reading from CMOS
- media: v4l2-ioctl.c: readbuffers depends on V4L2_CAP_READWRITE
- media: flexcop-usb: fix control-message timeouts
- media: mceusb: fix control-message timeouts
- media: em28xx: fix control-message timeouts
- media: cpia2: fix control-message timeouts
- media: s2255: fix control-message timeouts
- media: dib0700: fix undefined behavior in tuner shutdown
- media: redrat3: fix control-message timeouts
- media: pvrusb2: fix control-message timeouts
- media: stk1160: fix control-message timeouts
- [armhf] media: cec-pin: fix interrupt en/disable handling
- [x86] can: softing_cs: softingcs_probe(): fix memleak on registration
failure
- iio: adc: ti-adc081c: Partial revert of removal of ACPI IDs
- [arm64,armhf] gpu: host1x: Add back arm_iommu_detach_device()
- dma_fence_array: Fix PENDING_ERROR leak in dma_fence_array_signaled()
- PCI: Add function 1 DMA alias quirk for Marvell 88SE9125 SATA controller
- mm_zone: add function to check if managed dma zone exists
- [arm64] dma/pool: create dma atomic pool only if dma zone has managed
pages
- mm/page_alloc.c: do not warn allocation failure on zone DMA if no managed
pages
- shmem: fix a race between shmem_unused_huge_shrink and shmem_evict_inode
- drm/ttm: Put BO in its memory manager's lru list
- Bluetooth: L2CAP: Fix not initializing sk_peer_pid
- [armhf] drm/bridge: display-connector: fix an uninitialized pointer in
probe()
- drm: fix null-ptr-deref in drm_dev_init_release()
- [arm64,armhf] drm/rockchip: dsi: Fix unbalanced clock on probe error
- [arm64,armhf] drm/rockchip: dsi: Hold pm-runtime across bind/unbind
- [arm64,armhf] drm/rockchip: dsi: Disable PLL clock on bind error
- [arm64,armhf] drm/rockchip: dsi: Reconfigure hardware on resume()
- Bluetooth: cmtp: fix possible panic when cmtp_init_sockets() fails
- [arm*] clk: bcm-2835: Pick the closest clock rate
- [arm*] clk: bcm-2835: Remove rounding up the dividers
- [arm*] drm/vc4: hdmi: Set a default HSM rate
- [arm64] wcn36xx: ensure pairing of init_scan/finish_scan and
start_scan/end_scan
- [arm64] wcn36xx: Indicate beacon not connection loss on MISSED_BEACON_IND
- [arm64] wcn36xx: Fix DMA channel enable/disable cycle
- [arm64] wcn36xx: Release DMA channel descriptor allocations
- [arm64] wcn36xx: Put DXE block into reset before freeing memory
- [arm64] wcn36xx: populate band before determining rate on RX
- [arm64] wcn36xx: fix RX BD rate mapping for 5GHz legacy rates
- ath11k: Send PPDU_STATS_CFG with proper pdev mask to firmware
- media: videobuf2: Fix the size printk format
- [armhf] media: aspeed: fix mode-detect always time out at 2nd run
- media: em28xx: fix memory leak in em28xx_init_dev
- [armhf] media: aspeed: Update signal status immediately to ensure sane hw
state
- fs: dlm: use sk->sk_socket instead of con->sock
- fs: dlm: don't call kernel_getpeername() in error_report()
- Bluetooth: stop proccessing malicious adv data
- ath11k: Fix ETSI regd with weather radar overlap
- ath11k: clear the keys properly via DISABLE_KEY
- ath11k: reset RSN/WPA present state for open BSS
- [arm64] tee: fix put order in teedev_close_context()
- [x86] drm/vboxvideo: fix a NULL vs IS_ERR() check
- media: dmxdev: fix UAF when dvb_register_device() fails
- [arm64] crypto: qce - fix uaf on qce_ahash_register_one
- [arm64] crypto: qce - fix uaf on qce_skcipher_register_one
- [armhf] dts: stm32: fix dtbs_check warning on ili9341 dts binding on
stm32f429 disco
- [x86] crypto: qat - fix spelling mistake: "messge" -> "message"
- [x86] crypto: qat - remove unnecessary collision prevention step in PFVF
- [x86] crypto: qat - make pfvf send message direction agnostic
- [x86] crypto: qat - fix undetected PFVF timeout in ACK loop
- ath11k: Use host CE parameters for CE interrupts configuration
- [armhf] media: imx-pxp: Initialize the spinlock prior to using it
- [armhf] media: coda: fix CODA960 JPEG encoder buffer overflow
- [arm64] media: venus: pm_helpers: Control core power domain manually
- [arm64] media: venus: core, venc, vdec: Fix probe dependency error
- [arm64] media: venus: core: Fix a potential NULL pointer dereference in an
error handling path
- [arm64] media: venus: core: Fix a resource leak in the error handling path
of 'venus_probe()'
- [armhf] thermal/drivers/imx: Implement runtime PM support
- netfilter: bridge: add support for pppoe filtering
- cgroup: Trace event cgroup id fields should be u64
- ACPI: EC: Rework flushing of EC work while suspended to idle
- drm/amdgpu: Fix a NULL pointer dereference in
amdgpu_connector_lcd_native_mode()
- drm/radeon/radeon_kms: Fix a NULL pointer dereference in
radeon_driver_open_kms()
- [arm*] serial: amba-pl011: do not request memory region twice
- floppy: Fix hang in watchdog when disk is ejected
- [x86] staging: rtl8192e: return error code from rtllib_softmac_init()
- [x86] staging: rtl8192e: rtllib_module: fix error handle case in
alloc_rtllib()
- sched/fair: Fix detection of per-CPU kthreads waking a task
- sched/fair: Fix per-CPU kthread and wakee stacking for asym CPU capacity
- bpf: Adjust BTF log size limit.
- bpf: Disallow BPF_LOG_KERNEL log level for bpf(BPF_BTF_LOAD)
- bpf: Remove config check to enable bpf support for branch records
- [arm64] lib: Annotate {clear, copy}_page() as position-independent
- [arm64] clear_page() shouldn't use DC ZVA when DCZID_EL0.DZP == 1
- media: dib8000: Fix a memleak in dib8000_init()
- media: saa7146: mxb: Fix a NULL pointer dereference in mxb_attach()
- media: si2157: Fix "warm" tuner state detection
- wireless: iwlwifi: Fix a double free in iwl_txq_dyn_alloc_dma
- sched/rt: Try to restart rt period timer when rt runtime exceeded
- rcu/exp: Mark current CPU as exp-QS in IPI loop second pass
- mwifiex: Fix possible ABBA deadlock
- xfrm: fix a small bug in xfrm_sa_len()
- [x86] uaccess: Move variable into switch case statement
- [armhf] crypto: stm32 - Fix last sparse warning in
stm32_cryp_check_ctr_counter
- [armhf] crypto: stm32/cryp - fix CTR counter carry
- [armhf] crypto: stm32/cryp - fix xts and race condition in crypto_engine
requests
- [armhf] crypto: stm32/cryp - check early input data
- [armhf] crypto: stm32/cryp - fix double pm exit
- [armhf] crypto: stm32/cryp - fix lrw chaining mode
- [armhf] crypto: stm32/cryp - fix bugs and crash in tests
- [armhf] crypto: stm32 - Revert broken pm_runtime_resume_and_get changes
- ath11k: Fix deleting uninitialized kernel timer during fragment cache
flush
- media: dw2102: Fix use after free
- media: msi001: fix possible null-ptr-deref in msi001_probe()
- [armhf] media: coda/imx-vdoa: Handle dma_set_coherent_mask error codes
- ath11k: Fix a NULL pointer dereference in ath11k_mac_op_hw_scan()
- [arm64] dts: qcom: c630: Fix soundcard setup
- [arm64] drm/msm/dpu: fix safe status debugfs file
- [arm64,armhf] drm/tegra: vic: Fix DMA API misuse
- xfrm: interface with if_id 0 should return error
- xfrm: state and policy should fail if XFRMA_IF_ID 0
- [armel,armhf] 9159/1: decompressor: Avoid UNPREDICTABLE NOP encoding
- usb: ftdi-elan: fix memory leak on device disconnect
- iwlwifi: mvm: fix 32-bit build in FTM
- iwlwifi: mvm: test roc running status bits before removing the sta
- [armhf] mmc: meson-mx-sdio: add IRQ check
- selinux: fix potential memleak in selinux_add_opt()
- Bluetooth: L2CAP: Fix using wrong mode
- bpftool: Enable line buffering for stdout
- software node: fix wrong node passed to find nargs_prop
- Bluetooth: hci_qca: Stop IBS timer during BT OFF
- [x86] mce/inject: Avoid out-of-bounds write when setting flags
- ACPI: scan: Create platform device for BCM4752 and LNV4752 ACPI nodes
- [x86] pcmcia: rsrc_nonstatic: Fix a NULL pointer dereference in
__nonstatic_find_io_region()
- [x86] pcmcia: rsrc_nonstatic: Fix a NULL pointer dereference in
nonstatic_find_mem_region()
- netfilter: ipt_CLUSTERIP: fix refcount leak in clusterip_tg_check()
- bpf: Don't promote bogus looking registers after null check.
- bpf: Fix SO_RCVBUF/SO_SNDBUF handling in _bpf_setsockopt().
- netfilter: nft_set_pipapo: allocate pcpu scratch maps on clone
- ppp: ensure minimum packet size in ppp_write()
- Bluetooth: hci_bcm: Check for error irq
- Bluetooth: hci_qca: Fix NULL vs IS_ERR_OR_NULL check in qca_serdev_probe
- [arm64] usb: dwc3: qcom: Fix NULL vs IS_ERR checking in dwc3_qcom_probe
- HID: hid-uclogic-params: Invalid parameter check in uclogic_params_init
- HID: hid-uclogic-params: Invalid parameter check in
uclogic_params_get_str_desc
- HID: hid-uclogic-params: Invalid parameter check in
uclogic_params_huion_init
- HID: hid-uclogic-params: Invalid parameter check in
uclogic_params_frame_init_v1_buttonpad
- debugfs: lockdown: Allow reading debugfs files that are not world readable
- net/mlx5e: Fix page DMA map/unmap attributes
- net/mlx5e: Don't block routes with nexthop objects in SW
- Revert "net/mlx5e: Block offload of outer header csum for UDP tunnels"
- net/mlx5: Set command entry semaphore up once got index free
- lib/mpi: Add the return value check of kcalloc()
- Bluetooth: L2CAP: uninitialized variables in l2cap_sock_setsockopt()
- [arm64,armhf] spi: spi-meson-spifc: Add missing pm_runtime_disable() in
meson_spifc_probe
- ax25: uninitialized variable in ax25_setsockopt()
- netrom: fix api breakage in nr_setsockopt()
- regmap: Call regmap_debugfs_exit() prior to _init()
- tpm: add request_locality before write TPM_INT_ENABLE
- tpm_tis: Fix an error handling path in 'tpm_tis_core_init()'
- can: softing: softing_startstop(): fix set but not used variable warning
- pcmcia: fix setting of kthread task states
- iwlwifi: mvm: Use div_s64 instead of do_div in iwl_mvm_ftm_rtt_smoothing()
- net: mcs7830: handle usb read errors properly
- ext4: avoid trim error on fs with small groups
- ALSA: jack: Add missing rwsem around snd_ctl_remove() calls
- ALSA: PCM: Add missing rwsem around snd_ctl_remove() calls
- ALSA: hda: Add missing rwsem around snd_ctl_remove() calls
- RDMA/bnxt_re: Scan the whole bitmap when checking if "disabling RCFW with
pending cmd-bit"
- [arm64] RDMA/hns: Validate the pkey index
- scsi: pm80xx: Update WARN_ON check in pm8001_mpi_build_cmd()
- [arm64] clk: imx8mn: Fix imx8mn_clko1_sels
- [powerpc*] prom_init: Fix improper check of prom_getprop()
- dt-bindings: thermal: Fix definition of cooling-maps contribution property
- [powerpc*] 64s: Convert some cpu_setup() and cpu_restore() functions to C
- [powerpc*] perf: MMCR0 control for PMU registers under PMCC=00
- [powerpc*] perf: move perf irq/nmi handling details into traps.c
- [powerpc*] irq: Add helper to set regs->softe
- [powerpc*] perf: Fix PMU callbacks to clear pending PMI before resetting
an overflown PMC
- clocksource: Reduce clocksource-skew threshold
- clocksource: Avoid accidental unstable marking of clocksources
- ALSA: oss: fix compile error when OSS_DEBUG is enabled
- ALSA: usb-audio: Drop superfluous '0' in Presonus Studio 1810c's ID
- [arm*] binder: fix handling of error during copy
- [arm64,armhf] iommu/io-pgtable-arm: Fix table descriptor paddr formatting
- scsi: ufs: Fix race conditions related to driver data
- RDMA/qedr: Fix reporting max_{send/recv}_wr attrs
- PCI/MSI: Fix pci_irq_vector()/pci_irq_get_affinity()
- RDMA/core: Let ib_find_gid() continue search even after empty entry
- RDMA/cma: Let cma_resolve_ib_dev() continue search even after empty entry
- [x86] ASoC: rt5663: Handle device_property_read_u32_array error codes
- [amd64] iommu/amd: Remove iommu_init_ga()
- [amd64] iommu/amd: Restore GA log/tail pointer on host resume
- [x86] ASoC: Intel: catpt: Test dmaengine_submit() result before moving on
- iommu/iova: Fix race between FQ timeout and teardown
- scsi: block: pm: Always set request queue runtime active in
blk_post_runtime_resume()
- [powerpc*] xive: Add missing null check after calling kmalloc
- RDMA/cxgb4: Set queue pair state when being queried
- of: base: Fix phandle argument length mismatch error message
- [armhf] dts: omap3-n900: Fix lp5523 for multi color
- Bluetooth: Fix debugfs entry leak in hci_register_dev()
- fs: dlm: filter user dlm messages for kernel locks
- [arm64,armhf] drm/lima: fix warning when CONFIG_DEBUG_SG=y &
CONFIG_DMA_API_DEBUG=y
- ar5523: Fix null-ptr-deref with unexpected WDCMSG_TARGET_START reply
- [arm64,armhf] drm/bridge: dw-hdmi: handle ELD when
DRM_BRIDGE_ATTACH_NO_CONNECTOR
- drm/nouveau/pmu/gm200-: avoid touching PMU outside of DEVINIT/PREOS/ACR
- batman-adv: allow netlink usage in unprivileged containers
- ath11k: Fix crash caused by uninitialized TX ring
- usb: gadget: f_fs: Use stream_open() for endpoint files
- drm: panel-orientation-quirks: Add quirk for the Lenovo Yoga Book X91F/L
- HID: apple: Do not reset quirks when the Fn key is not found
- media: b2c2: Add missing check in flexcop_pci_isr:
- drm/amdgpu/display: set vblank_disable_immediate for DC
- [arm64,armhf] tty: serial: imx: disable UCR4_OREN in .stop_rx() instead of
.shutdown()
- gpiolib: acpi: Do not set the IRQ type if the IRQ is already in use
- [armhf] HSI: core: Fix return freed object in hsi_new_client
- crypto: jitter - consider 32 LSB for APT
- rsi: Fix use-after-free in rsi_rx_done_handler()
- rsi: Fix out-of-bounds read in rsi_read_pkt()
- ath11k: Avoid NULL ptr access during mgmt tx cleanup
- [arm64] media: venus: avoid calling core_clk_setrate() concurrently during
concurrent video sessions
- [x86] ACPI / x86: Drop PWM2 device on Lenovo Yoga Book from always present
table
- ACPI: Change acpi_device_always_present() into
acpi_device_override_status()
- [x86] ACPI / x86: Allow specifying acpi_device_override_status() quirks by
path
- [x86] ACPI / x86: Add not-present quirk for the PCI0.SDHB.BRC1 device on
the GPD win
- floppy: Add max size check for user space request
- [x86] mm: Flush global TLB when switching to trampoline page-table
- media: saa7146: hexium_orion: Fix a NULL pointer dereference in
hexium_attach()
- media: m920x: don't use stack on USB reads
- [x86] thunderbolt: Runtime PM activate both ends of the device link
- iwlwifi: mvm: synchronize with FW after multicast commands
- iwlwifi: mvm: avoid clearing a just saved session protection id
- ath11k: avoid deadlock by change ieee80211_queue_work for regd_update_work
- ath10k: Fix tx hanging
- net-sysfs: update the queue counts in the unregistration path
- net: phy: prefer 1000baseT over 1000baseKX
- [armhf] gpio: aspeed: Convert aspeed_gpio.lock to raw_spinlock
- ath11k: Avoid false DEADLOCK warning reported by lockdep
- [x86] mce: Allow instrumentation during task work queueing
- [x86] mce: Mark mce_panic() noinstr
- [x86] mce: Mark mce_end() noinstr
- [x86] mce: Mark mce_read_aux() noinstr
- net: bonding: debug: avoid printing debug logs when bond is not notifying
peers
- bpf: Do not WARN in bpf_warn_invalid_xdp_action()
- HID: quirks: Allow inverting the absolute X/Y values
- media: igorplugusb: receiver overflow should be reported
- media: saa7146: hexium_gemini: Fix a NULL pointer dereference in
hexium_attach()
- mmc: core: Fixup storing of OCR for MMC_QUIRK_NONSTD_SDIO
- audit: ensure userspace is penalized the same as the kernel when under
pressure
- [arm64] dts: ls1028a-qds: move rtc node to the correct i2c bus
- PM: runtime: Add safety net to supplier device release
- cpufreq: Fix initialization of min and max frequency QoS requests
- usb: hub: Add delay for SuperSpeed hub resume to let links transit to U0
- ath9k: Fix out-of-bound memcpy in ath9k_hif_usb_rx_stream
- rtw88: 8822c: update rx settings to prevent potential hw deadlock
- iwlwifi: fix leaks/bad data after failed firmware load
- iwlwifi: remove module loading failure message
- iwlwifi: mvm: Fix calculation of frame length
- iwlwifi: pcie: make sure prph_info is set when treating wakeup IRQ
- ath11k: Fix napi related hang
- Bluetooth: vhci: Set HCI_QUIRK_VALID_LE_STATES
- xfrm: rate limit SA mapping change message to user space
- [armhf] drm/etnaviv: consider completed fence seqno in hang check
- jffs2: GC deadlock reading a page that is used in jffs2_write_begin()
- ACPICA: actypes.h: Expand the ACPI_ACCESS_ definitions
- ACPICA: Utilities: Avoid deleting the same object twice in a row
- ACPICA: Executer: Fix the REFCLASS_REFOF case in acpi_ex_opcode_1A_0T_1R()
- ACPICA: Fix wrong interpretation of PCC address
- ACPICA: Hardware: Do not flush CPU cache when entering S4 and S5
- drm/amdgpu: fixup bad vram size on gmc v8
- ACPI: battery: Add the ThinkPad "Not Charging" quirk
- btrfs: remove BUG_ON() in find_parent_nodes()
- btrfs: remove BUG_ON(!eie) in find_parent_nodes
- net: mdio: Demote probed message to debug print
- mac80211: allow non-standard VHT MCS-10/11
- dm btree: add a defensive bounds check to insert_at()
- dm space map common: add bounds check to sm_ll_lookup_bitmap()
- net: phy: marvell: configure RGMII delays for 88E1118
- [arm64] regulator: qcom_smd: Align probe function with rpmh-regulator
- [arm64,armhf] serial: pl010: Drop CR register reset on set_termios
- serial: core: Keep mctrl register state and cached copy in sync
- random: do not throw away excess input to crng_fast_load
- [powerpc*] powernv: add missing of_node_put
- [powerpc*] btext: add missing of_node_put
- [powerpc*] watchdog: Fix missed watchdog reset due to memory ordering race
- [x86] i2c: i801: Don't silently correct invalid transfer size
- [powerpc*] smp: Move setup_profiling_timer() under CONFIG_PROFILING
- [powerpc*] i2c: mpc: Correct I2C reset procedure
- [arm64] clk: meson: gxbb: Fix the SDM_EN bit for MPLL0 on GXBB
- [powerpc*] KVM: PPC: Book3S: Suppress warnings when allocating too big
memory slots
- [powerpc*] KVM: PPC: Book3S: Suppress failed alloc warning in
H_COPY_TOFROM_GUEST
- w1: Misuse of get_user()/put_user() reported by sparse
- nvmem: core: set size for sysfs bin file
- dm: fix alloc_dax error handling in alloc_dev
- scsi: lpfc: Trigger SLI4 firmware dump before doing driver cleanup
- ALSA: seq: Set upper limit of processed events
- [powerpc*] handle kdump appropriately with crash_kexec_post_notifiers
option
- [powerpc*] fadump: Fix inaccurate CPU state info in vmcore generated with
panic
- udf: Fix error handling in udf_new_inode()
- [mips64el,mipsel] OCTEON: add put_device() after of_find_device_by_node()
- [arm64,armhf] irqchip/gic-v4: Disable redistributors' view of the VPE
table at boot time
- [x86] i2c: designware-pci: Fix to change data types of hcnt and lcnt
parameters
- scsi: sr: Don't use GFP_DMA
- [arm64] rpmsg: core: Clean up resources on announce_create failure.
- [armhf] crypto: stm32/crc32 - Fix kernel BUG triggered in probe()
- [arm64] crypto: caam - replace this_cpu_ptr with raw_cpu_ptr
- ubifs: Error path in ubifs_remount_rw() seems to wrongly free write
buffers
- tpm: fix NPE on probe for missing device
- xen/gntdev: fix unmap notification order
- fuse: Pass correct lend value to filemap_write_and_wait_range()
- serial: Fix incorrect rs485 polarity on uart open
- cputime, cpuacct: Include guest time in user time in cpuacct.stat
- tracing/kprobes: 'nmissed' not showed correctly for kretprobe
- iwlwifi: mvm: Increase the scan timeout guard to 30 seconds
- [s390x] mm: fix 2KB pgtable release race
- device property: Fix fwnode_graph_devcon_match() fwnode leak
- [armhf] drm/etnaviv: limit submit sizes
- drm/nouveau/kms/nv04: use vzalloc for nv04_display
- [arm64,armhf] drm/bridge: analogix_dp: Make PSR-exit block less
- [powerpc*] 64s/radix: Fix huge vmap false positive
- [arm64] PCI: xgene: Fix IB window setup
- PCI: pciehp: Use down_read/write_nested(reset_lock) to fix lockdep errors
- [arm*] PCI: pci-bridge-emul: Make expansion ROM Base Address register
read-only
- [arm*] PCI: pci-bridge-emul: Properly mark reserved PCIe bits in PCI
config space
- [arm*] PCI: pci-bridge-emul: Fix definitions of reserved bits
- [arm*] PCI: pci-bridge-emul: Correctly set PCIe capabilities
- [arm*] PCI: pci-bridge-emul: Set PCI_STATUS_CAP_LIST for PCIe device
- xfrm: fix policy lookup for ipv6 gre packets
- btrfs: fix deadlock between quota enable and other quota operations
- btrfs: check the root node for uptodate before returning it
- btrfs: respect the max size in the header when activating swap file
- ext4: make sure to reset inode lockdep class when quota enabling fails
- ext4: make sure quota gets properly shutdown on error
- ext4: fix a possible ABBA deadlock due to busy PA
- ext4: initialize err_blk before calling __ext4_get_inode_loc
- ext4: fix fast commit may miss tracking range for FALLOC_FL_ZERO_RANGE
- ext4: set csum seed in tmp inode while migrating to extents
- ext4: Fix BUG_ON in ext4_bread when write quota data
- ext4: use ext4_ext_remove_space() for fast commit replay delete range
- ext4: fast commit may miss tracking unwritten range during ftruncate
- ext4: destroy ext4_fc_dentry_cachep kmemcache on module removal
- ext4: fix null-ptr-deref in '__ext4_journal_ensure_credits'
- ext4: don't use the orphan list when migrating an inode
- drm/radeon: fix error handling in radeon_driver_open_kms
- of: base: Improve argument length mismatch error
- firmware: Update Kconfig help text for Google firmware
- [arm*] drm/vc4: hdmi: Make sure the device is powered with CEC
- Documentation: dmaengine: Correctly describe dmatest with channel unset
- Documentation: ACPI: Fix data node reference documentation
- Documentation: refer to config RANDOMIZE_BASE for kernel address-space
randomization
- Documentation: fix firewire.rst ABI file path error
- Bluetooth: hci_sync: Fix not setting adv set duration
- scsi: core: Show SCMD_LAST in text form
- [arm64] RDMA/hns: Modify the mapping attribute of doorbell to device
- RDMA/rxe: Fix a typo in opcode name
- [armhf] dmaengine: stm32-mdma: fix STM32_MDMA_CTBR_TSEL_MASK
- Revert "net/mlx5: Add retry mechanism to the command entry index
allocation"
- block: Fix fsync always failed if once failed
- bpftool: Remove inclusion of utilities.mak from Makefiles
- xdp: check prog type before updating BPF link
- ipv4: update fib_info_cnt under spinlock protection
- ipv4: avoid quadratic behavior in netns dismantle
- [arm64] net/fsl: xgmac_mdio: Add workaround for erratum A-009885
- [arm64] net/fsl: xgmac_mdio: Fix incorrect iounmap when removing module
- f2fs: compress: fix potential deadlock of compress file
- f2fs: fix to reserve space for IO align feature
- af_unix: annote lockless accesses to unix_tot_inflight & gc_in_progress
- clk: Emit a stern warning with writable debugfs enabled
- net/smc: Fix hung_task when removing SMC-R devices
- virtio_ring: mark ring unused on error
- taskstats: Cleanup the use of task->exit_code
- inet: frags: annotate races around fqdir->dead and fqdir->high_thresh
- netns: add schedule point in ops_exit_list()
- xfrm: Don't accidentally set RTO_ONLINK in decode_session4()
- gre: Don't accidentally set RTO_ONLINK in gre_fill_metadata_dst()
- libcxgb: Don't accidentally set RTO_ONLINK in cxgb_find_route()
- perf script: Fix hex dump character output
- perf probe: Fix ppc64 'perf probe add events failed' case
- devlink: Remove misleading internal_flags from health reporter dump
- net: bonding: fix bond_xmit_broadcast return value error bug
- net_sched: restore "mpu xxx" handling
- [arm64] bcmgenet: add WOL IRQ check
- net: sfp: fix high power modules without diagnostic monitoring
- [arm64] net: mscc: ocelot: fix using match before it is set
- dt-bindings: display: meson-dw-hdmi: add missing sound-name-prefix
property
- dt-bindings: display: meson-vpu: Add missing amlogic,canvas property
- dt-bindings: watchdog: Require samsung,syscon-phandle for Exynos7
- mm/hmm.c: allow VM_MIXEDMAP to work with hmm_range_fault
- mtd: nand: bbt: Fix corner case in bad block table handling
- ath10k: Fix the MTU size on QCA9377 SDIO
https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.95
- bnx2x: Utilize firmware 7.13.21.0
- bnx2x: Invalidate fastpath HSI version for VFs
- rcu: Tighten rcu_advance_cbs_nowake() checks
- [x86] KVM: x86/mmu: Fix write-protection of PTs mapped by the TDP MMU
- select: Fix indefinitely sleeping task in poll_schedule_timeout()
https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.96
- Bluetooth: refactor malicious adv data check
- [arm64] media: venus: core: Drop second v4l2 device unregister
- net: sfp: ignore disabled SFP node
- net: stmmac: skip only stmmac_ptp_register when resume from suspend
- [s390x] module: fix loading modules with a lot of relocations
- [s390x] hypfs: include z/VM guests with access control group set
- bpf: Guard against accessing NULL pt_regs in bpf_get_task_stack()
- [s390x] scsi: zfcp: Fix failed recovery on gone remote port with non-NPIV
FCP devices
- udf: Restore i_lenAlloc when inode expansion fails (CVE-2022-0617)
- udf: Fix NULL ptr deref when converting from inline format (CVE-2022-0617)
- efi: runtime: avoid EFIv2 runtime services on Apple x86 machines
- tracing: Don't inc err_log entry count if entry allocation fails
- ceph: properly put ceph_string reference after async create attempt
- ceph: set pool_ns in new inode layout for async creates
- fsnotify: fix fsnotify hooks in pseudo filesystems
- Revert "KVM: SVM: avoid infinite loop on NPF from bad address"
- [x86] perf/x86/intel/uncore: Fix CAS_COUNT_WRITE issue for ICX
- [armhf] drm/etnaviv: relax submit size limits
- [x86] KVM: x86: Update vCPU's runtime CPUID on write to MSR_IA32_XSS
- [arm64] errata: Fix exec handling in erratum 1418040 workaround
- netfilter: nft_payload: do not update layer 4 checksum when mangling
fragments
- serial: 8250: of: Fix mapped region size when using reg-offset property
- [armhf] serial: stm32: fix software flow control transfer
- tty: n_gsm: fix SW flow control encoding/handling
- tty: Add support for Brainboxes UC cards.
- usb-storage: Add unusual-devs entry for VL817 USB-SATA bridge
- [arm64,armhf] usb: xhci-plat: fix crash when suspend if remote wake enable
- [arm64,armhf] usb: common: ulpi: Fix crash in ulpi_match()
- usb: gadget: f_sourcesink: Fix isoc transfer for USB_SPEED_SUPER_PLUS
- USB: core: Fix hang in usb_kill_urb by adding memory barriers
- usb: typec: tcpm: Do not disconnect while receiving VBUS off
- jbd2: export jbd2_journal_[grab|put]_journal_head
- ocfs2: fix a deadlock when commit trans
- sched/membarrier: Fix membarrier-rseq fence command missing from query
bitmask
- [x86] MCE/AMD: Allow thresholding interface updates after init
- i40e: Increase delay to 1 s after global EMP reset
- i40e: Fix issue when maximum queues is exceeded
- i40e: Fix queues reservation for XDP
- i40e: Fix for failed to init adminq while VF reset
- i40e: fix unsigned stat widths
- scsi: bnx2fc: Flush destroy_work queue before calling
bnx2fc_interface_put()
[continued in next message]
--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)