-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Mon, 07 Mar 2022 22:13:16 +0100
Source: linux
Architecture: source
Version: 4.19.232-1
Distribution: buster-security
Urgency: high
Maintainer: Debian Kernel Team <
debian-kernel@lists.debian.org>
Changed-By: Salvatore Bonaccorso <
carnil@debian.org>
Closes: 988044 989285 990411 994050
Changes:
linux (4.19.232-1) buster-security; urgency=high
.
* New upstream stable update:
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.209
- ocfs2: drop acl cache for directories too
- [arm*] usb: dwc2: gadget: Fix ISOC transfer complete handling for DDMA
- [armhf] usb: musb: tusb6010: uninitialized data in
tusb_fifo_write_unaligned()
- cifs: fix incorrect check for null pointer in header_assemble
- [x86] xen/x86: fix PV trap handling on secondary processors
- USB: serial: cp210x: add ID for GW Instek GDM-834x Digital Multimeter
- USB: cdc-acm: fix minor-number release
- Re-enable UAS for LaCie Rugged USB3-FW with fk quirk
- USB: serial: mos7840: remove duplicated 0xac24 device ID
- USB: serial: option: add Telit LN920 compositions
- USB: serial: option: remove duplicate USB device ID
- USB: serial: option: add device id for Foxconn T99W265
- [arm64] serial: mvebu-uart: fix driver's tx_empty callback
- net: hso: fix muxed tty registration
- bnxt_en: Fix TX timeout when TX ring size is set to the smallest
- net/smc: add missing error check in smc_clc_prfx_set()
- net/mlx4_en: Don't allow aRFS for encapsulated packets
- scsi: iscsi: Adjust iface sysfs attr detection
- [x86] tty: synclink_gt, drop unneeded forward declarations
- [x86] tty: synclink_gt: rename a conflicting function name
- thermal/core: Potential buffer overflow in
thermal_build_list_of_policies()
- [arm64,armhf] irqchip/gic-v3-its: Fix potential VPE leak on error
- md: fix a lock order reversal in md_alloc
- blktrace: Fix uaf in blk_trace access after removing by sysfs
- [arm64,armhf] net: stmmac: allow CSR clock of 300MHz
- xen/balloon: use a kernel thread instead a workqueue
- nvme-multipath: fix ANA state updates when a namespace is not present
- qnx4: avoid stringop-overread errors
- [arm64] Mark __stack_chk_guard as __ro_after_init
- net: 6pack: Fix tx timeout and slot time
- [arm64] PCI: aardvark: Fix checking for PIO status
- tcp: address problems caused by EDT misshaps
- tcp: always set retrans_stamp on recovery
- tcp: create a helper to model exponential backoff
- tcp: adjust rto_base in retransmits_timed_out()
- xen/balloon: fix balloon kthread freezing
- tty: Fix out-of-bound vmalloc access in imageblit
- cpufreq: schedutil: Use kobject release() method to free sugov_tunables
- cpufreq: schedutil: Destroy mutex before kobject_put() frees the memory
- mac80211: fix use-after-free in CCMP/GCMP RX
- [x86] kvmclock: Move this_cpu_pvti into kvmclock.h
- ipvs: check that ip_vs_conn_tab_bits is between 8 and 20
- mac80211: Fix ieee80211_amsdu_aggregate frag_tail bug
- mac80211: limit injected vht mcs/nss in ieee80211_parse_tx_radiotap
- sctp: break out if skb_header_pointer returns NULL in sctp_rcv_ootb
- hwmon: (tmp421) Replace S_<PERMS> with octal values
- hwmon: (tmp421) report /PVLD condition as fault
- hwmon: (tmp421) fix rounding for negative values
- e100: fix length calculation in e100_get_regs_len
- e100: fix buffer overrun in e100_get_regs
- Revert "block, bfq: honor already-setup queue merges"
- scsi: csiostor: Add module softdep on cxgb4
- af_unix: fix races in sk_peer_pid and sk_peer_cred accesses
(CVE-2021-4203)
- elf: don't use MAP_FIXED_NOREPLACE for elf interpreter mappings
- ext4: fix potential infinite loop in ext4_dx_readdir()
- net: udp: annotate data race around udp_sk(sk)->corkflag
- [armel,armhf] 9077/1: PLT: Move struct plt_entries definition to header
- [armel,armhf] 9078/1: Add warn suppress parameter to arm_gen_branch_link()
- [armel,armhf] 9079/1: ftrace: Add MODULE_PLTS support
- [armel,armhf] 9098/1: ftrace: MODULE_PLT: Fix build problem without
DYNAMIC_FTRACE
- [x86] crypto: ccp - fix resource leaks in ccp_run_aes_gcm_cmd()
(CVE-2021-3744, CVE-2021-3764)
- HID: betop: fix slab-out-of-bounds Write in betop_probe
- netfilter: ipset: Fix oversized kvmalloc() calls
- HID: usbhid: free raw_report buffers in usbhid_stop
- cred: allow get_cred() and put_cred() to be given NULL.
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.210
- net: mdio: introduce a shutdown method to mdio device drivers
- xen-netback: correct success/error reporting for the SKB-with-fraglist
case
- scsi: sd: Free scsi_disk device via put_device()
- [arm*] usb: dwc2: check return value after calling platform_get_resource()
- scsi: ses: Retry failed Send/Receive Diagnostic commands
- libata: Add ATA_HORKAGE_NO_NCQ_ON_ATI for Samsung 860 and 870 SSD.
- lib/timerqueue: Rely on rbtree semantics for next timer (CVE-2021-20317)
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.211
- USB: cdc-acm: fix racy tty buffer accesses
- USB: cdc-acm: fix break reporting
- xen/privcmd: fix error handling in mmap-resource processing
- ovl: fix missing negative dentry check in ovl_rename() (CVE-2021-20321)
- nfsd4: Handle the NFSv4 READDIR 'dircount' hint being zero
- xen/balloon: fix cancelled balloon action
- [armhf] dts: omap3430-sdp: Fix NAND device node
- [mips,mipsel] bpf, mips: Validate conditional branch offsets
(CVE-2021-38300)
- [armel,armhf] bpf, arm: Fix register clobbering in div/mod implementation
- bpf: Fix integer overflow in prealloc_elems_and_freelist()
(CVE-2021-41864)
- phy: mdio: fix memory leak
- net_sched: fix NULL deref in fifo_set_limit()
- [i386] ptp_pch: Load module automatically if ID matches
- [armhf] imx6: disable the GIC CPU interface before calling stby-poweroff
sequence
- net: bridge: use nla_total_size_64bit() in br_get_linkxstats_size()
- [arm64,armhf] net: sfp: Fix typo in state machine debug string
- netlink: annotate data races around nlk->bound
- drm/nouveau/debugfs: fix file release memory leak
- rtnetlink: fix if_nlmsg_stats_size() under estimation
- i40e: fix endless loop under rtnl
- i40e: Fix freeing of uninitialized misc IRQ vector
- i2c: acpi: fix resource leak in reconfiguration device addition
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.212
- [armhf] net: phy: bcm7xxx: Fixed indirect MMD operations
- HID: apple: Fix logical maximum and usage maximum of Magic Keyboard JIS
- netfilter: ip6_tables: zero-initialize fragment offset
- mac80211: Drop frames from invalid MAC address in ad-hoc mode
- net: prevent user from passing illegal stab size
- mac80211: check return value of rhashtable_init
- scsi: ses: Fix unsigned comparison with less than zero
- scsi: virtio_scsi: Fix spelling mistake "Unsupport" -> "Unsupported"
- [x86] perf/x86: Reset destroy callback on event init failure
- sched: Always inline is_percpu_thread()
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.213
- ALSA: seq: Fix a potential UAF by wrong private_free call order
- ALSA: hda/realtek: Complete partial device name to avoid ambiguity
- ALSA: hda/realtek: Add quirk for Clevo X170KM-G
- ALSA: hda/realtek - ALC236 headset MIC recording issue
- [s390x] fix strrchr() implementation
- btrfs: deal with errors when replaying dir entry during log replay
- btrfs: deal with errors when adding inode reference during log replay
- btrfs: check for error when looking up inode during dir entry replay
- [x86] mei: me: add Ice Lake-N device id.
- xhci: guard accesses to ep_state in xhci_endpoint_reset()
- xhci: Fix command ring pointer corruption while aborting a command
- xhci: Enable trust tx length quirk for Fresco FL11 USB controller
- cb710: avoid NULL pointer subtraction
- [arm64,x86] efi/cper: use stack buffer for error record decoding
- efi: Change down_interruptible() in virt_efi_reset_system() to
down_trylock()
- [armhf] usb: musb: dsps: Fix the probe error path
- Input: xpad - add support for another USB ID of Nacon GC-100
- USB: serial: qcserial: add EM9191 QDL support
- USB: serial: option: add Quectel EC200S-CN module support
- USB: serial: option: add Telit LE910Cx composition 0x1204
- USB: serial: option: add prod. id for Quectel EG91
- virtio: write back F_VERSION_1 before validate
- nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells
- sctp: account stream padding length for reconf chunk (CVE-2022-0322)
- ethernet: s2io: fix setting mac address during resume
- nfc: fix error handling of nfc_proto_register()
- NFC: digital: fix possible memory leak in digital_tg_listen_mdaa()
- NFC: digital: fix possible memory leak in digital_in_send_sdd_req()
- [i386] pata_legacy: fix a couple uninitialized variable bugs
- [arm64] drm/msm: Fix null pointer dereference on pointer edp
- [arm64] drm/msm/dsi: Fix an error code in msm_dsi_modeset_init()
- [arm64] drm/msm/dsi: fix off by one in dsi_bus_clk_enable error handling
- [arm64] acpi/arm64: fix next_platform_timer() section mismatch error
- mqprio: Correct stats in mqprio_dump_class_stats().
- qed: Fix missing error code in qed_slowpath_start()
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.214
- NFSD: Keep existing listeners on portlist error
- netfilter: ipvs: make global sysctl readonly in non-init netns
- [arm64] net: hns3: add limit ets dwrr bandwidth cannot be 0
- [arm64] net: hns3: disable sriov before unload hclge layer
- can: peak_usb: pcan_usb_fd_decode_status(): fix back to ERROR_ACTIVE state
notification
- can: peak_pci: peak_pci_remove(): fix UAF
- ocfs2: fix data corruption after conversion from inline format
- ocfs2: mount fails with buffer overflow in strlen
- vfs: check fd has read access in kernel_read_file_from_fd()
(CVE-2022-0644)
- ALSA: usb-audio: Provide quirk for Sennheiser GSP670 Headset
- ALSA: hda/realtek: Add quirk for Clevo PC50HS
- ASoC: DAPM: Fix missing kctl change notifications
- mm, slub: fix mismatch between reconstructed freelist depth and cnt
- nfc: nci: fix the UAF of rf_conn_info object (CVE-2021-3760)
- isdn: cpai: check ctr->cnr to avoid array index out of bound
(CVE-2021-43389)
- btrfs: deal with errors when checking if a dir entry exists during log
replay
- [arm64,armhf] net: stmmac: add support for dwmac 3.40a
- isdn: mISDN: Fix sleeping function called from invalid context
- ALSA: hda: avoid write to STATESTS if controller is in reset
- scsi: core: Fix shost->cmd_per_lun calculation in scsi_add_host_with_dma()
- net: mdiobus: Fix memory leak in __mdiobus_register
- tracing: Have all levels of checks prevent recursion
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.215
- [armel,armhf] 9139/1: kprobes: fix arch_init_kprobes() prototype
- [powerpc*] bpf: Fix BPF_MOD when imm == 1
- [arm64] Avoid premature usercopy failure
- usbnet: sanity check for maxpacket
- usbnet: fix error return code in usbnet_probe()
- ata: sata_mv: Fix the error handling of mv_chip_id()
- nfc: port100: fix using -ERRNO as command type mask
- Revert "net: mdiobus: Fix memory leak in __mdiobus_register"
- ipv4: use siphash instead of Jenkins in fnhe_hashfun() (CVE-2021-20322)
- ipv6: use siphash in rt6_exception_hash() (CVE-2021-20322)
- ipv6: make exception cache less predictible (CVE-2021-20322)
- mmc: vub300: fix control-message timeouts
- mmc: cqhci: clear HALT state after CQE enable
- [armhf] mmc: dw_mmc: exynos: fix the finding clock sample value
- mmc: sdhci: Map more voltage level to SDHCI_POWER_330
- [armhf] mmc: sdhci-esdhc-imx: clear the buffer_read_ready to reset
standard tuning circuit
- net: lan78xx: fix division by zero in send path
- RDMA/mlx5: Set user priority for DCT
- [arm64] dts: allwinner: h5: NanoPI Neo 2: Fix ethernet node
- regmap: Fix possible double-free in regcache_rbtree_exit()
- net: batman-adv: fix error handling
- net: Prevent infinite while loop in skb_tx_hash()
- net: ethernet: microchip: lan743x: Fix driver crash when lan743x_pm_resume
fails
- net: ethernet: microchip: lan743x: Fix dma allocation failure by using
dma_set_mask_and_coherent
- sctp: use init_tag from inithdr for ABORT chunk (CVE-2021-3772)
- sctp: fix the processing for COOKIE_ECHO chunk (CVE-2021-3772)
- sctp: add vtag check in sctp_sf_violation (CVE-2021-3772)
- sctp: add vtag check in sctp_sf_do_8_5_1_E_sa (CVE-2021-3772)
- sctp: add vtag check in sctp_sf_ootb (CVE-2021-3772)
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.216
- scsi: core: Put LLD module refcnt after SCSI device is released
- media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt()
(CVE-2021-42739)
- IB/qib: Use struct_size() helper
- IB/qib: Protect from buffer overflow in struct qib_user_sdma_pkt fields
- sfc: Fix reading non-legacy supported link modes
- arch: pgtable: define MAX_POSSIBLE_PHYSMEM_BITS where needed
- [armel,armhf] 9120/1: Revert "amba: make use of -1 IRQs warn"
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.217
- [x86] Revert "x86/kvm: fix vcpu-id indexed array sizes"
- usb: ehci: handshake CMD_RUN instead of STS_HALT
- [arm64,armhf] usb: musb: Balance list entry in musb_gadget_queue
- usb-storage: Add compatibility quirk flags for iODD 2531/2541
- printk/console: Allow to disable console output by using console="" or
console=null
- isofs: Fix out of bound access for corrupted isofs image
- [x86] comedi: dt9812: fix DMA buffers on stack
- [x86] comedi: ni_usb6501: fix NULL-deref in command paths
- [x86] comedi: vmk80xx: fix transfer-buffer overflows
- [x86] comedi: vmk80xx: fix bulk-buffer overflow
- [x86] comedi: vmk80xx: fix bulk and interrupt message timeouts
- staging: r8712u: fix control-message timeout
- [x86] staging: rtl8192u: fix control-message timeouts
- rsi: fix control-message timeout
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.218
- xhci: Fix USB 3.1 enumeration issues by increasing roothub power-on-good
delay
- binder: use euid from cred instead of using task
- binder: use cred instead of task for selinux checks
- Input: elantench - fix misreporting trackpoint coordinates
(Closes: #989285)
- libata: fix read log timeout value
- ocfs2: fix data corruption on truncate
- [arm64,armhf] mmc: dw_mmc: Dont wait for DRTO on Write RSP error
- tpm: Check for integer overflow in tpm2_map_response_body()
- [x86] media: ite-cir: IR receiver stop working after receive overflow
- media: ir-kbd-i2c: improve responsiveness of hauppauge zilog receivers
(Closes: #994050)
- ALSA: hda/realtek: Add quirk for Clevo PC70HS
- ALSA: ua101: fix division by zero at probe
- ALSA: 6fire: fix control and bulk message timeouts
- ALSA: line6: fix control and interrupt message timeouts
- ALSA: usb-audio: Add registration quirk for JBL Quantum 400
- ALSA: synth: missing check for possible NULL after the call to kstrdup
- ALSA: timer: Fix use-after-free problem
- ALSA: timer: Unconditionally unlink slave instances, too
- [x86] irq: Ensure PI wakeup handler is unregistered before module unload
- [arm64] cavium: Return negative value when pci_alloc_irq_vectors() fails
- scsi: qla2xxx: Fix unmap of already freed sgl
- [arm64] cavium: Fix return values of the probe function
- sfc: Don't use netif_info before net_device setup
- [x86] hyperv/vmbus: include linux/bitops.h
- drm: panel-orientation-quirks: Add quirk for Aya Neo 2021
- bpf: Prevent increasing bpf_jit_limit above max
- xen/netfront: stop tx queues during live migration
- [armhf] spi: spl022: fix Microwire full duplex mode
- [armhf] watchdog: Fix OMAP watchdog early handling
- [x86] vmxnet3: do not stop tx queues after netif_device_detach()
- btrfs: clear MISSING device status bit in btrfs_close_one_device
- btrfs: fix lost error handling when replaying directory deletes
- btrfs: call btrfs_check_rw_degradable only if there is a missing device
- [armhf] regulator: s5m8767: do not use reset value as DVS voltage if GPIO
DVS is disabled
- [armhf] regulator: dt-bindings: samsung,s5m8767: correct
s5m8767,pmic-buck-default-dvs-idx property
- EDAC/sb_edac: Fix top-of-high-memory value for Broadwell/Haswell
- [x86] mwifiex: fix division by zero in fw download path
- ath6kl: fix division by zero in send path
- ath6kl: fix control-message timeout
- ath10k: fix control-message timeout
- ath10k: fix division by zero in send path
- PCI: Mark Atheros QCA6174 to avoid bus reset
- rtl8187: fix control-message timeouts
- [arm64] wcn36xx: Fix HT40 capability for 2Ghz band
- mwifiex: Read a PCI register after writing the TX ring write pointer
- libata: fix checking of DMA state
- [arm64] wcn36xx: handle connection loss indication
- rsi: fix occasional initialisation failure with BT coex
- rsi: fix key enabled check causing unwanted encryption for vap_id > 0
- rsi: fix rate mask set leading to P2P failure
- rsi: Fix module dev_oper_mode parameter description
- RDMA/qedr: Fix NULL deref for query_qp on the GSI QP
- signal: Remove the bogus sigkill_pending in ptrace_stop
- [mips*] signal/mips: Update (_save|_restore)_fp_context to fail with
-EFAULT
- [x86] power: supply: max17042_battery: Prevent int underflow in
set_soc_threshold
- [x86] power: supply: max17042_battery: use VFSOC for capacity when no rsns
- serial: core: Fix initializing and restoring termios speed
- ALSA: mixer: oss: Fix racy access to slots
- ALSA: mixer: fix deadlock in snd_mixer_oss_set_volume
- xen/balloon: add late_initcall_sync() for initial ballooning done
- [arm64] PCI: aardvark: Do not clear status bits of masked interrupts
- [arm64] PCI: aardvark: Do not unmask unused interrupts
- [arm64] PCI: aardvark: Fix return value of MSI domain .alloc() method
- [arm64] PCI: aardvark: Read all 16-bits from PCIE_MSI_PAYLOAD_REG
- quota: check block number when reading the block in quota file
- quota: correct error number in free_dqentry()
- pinctrl: core: fix possible memory leak in pinctrl_enable()
- iio: dac: ad5446: Fix ad5622_write() return value
- USB: serial: keyspan: fix memleak on probe errors
- USB: iowarrior: fix control-message timeouts
- drm: panel-orientation-quirks: Add quirk for KD Kurio Smart C15200 2-in-1
- Bluetooth: sco: Fix lock_sock() blockage by memcpy_from_msg()
(CVE-2021-3640)
- Bluetooth: fix use-after-free error in lock_sock_nested() (CVE-2021-3752)
- [x86] platform/x86: wmi: do not fail if disabling fails
- locking/lockdep: Avoid RCU-induced noinstr fail
- net: sched: update default qdisc visibility after Tx queue cnt changes
- [x86] Increase exception stack sizes
- mwifiex: Run SET_BSS_MODE when changing from P2P to STATION vif-type
- mwifiex: Properly initialize private structure on interface type changes
- media: netup_unidvb: handle interrupt properly according to the firmware
- media: uvcvideo: Set capability in s_param
- media: uvcvideo: Return -EIO for control errors
- media: mceusb: return without resubmitting URB in case of -EPROTO error.
- ACPICA: Avoid evaluating methods too early during system resume
- media: usb: dvd-usb: fix uninit-value bug in dibusb_read_eeprom_byte()
- tracefs: Have tracefs directories not set OTH permission bits by default
- ath: dfs_pattern_detector: Fix possible null-pointer dereference in
channel_detector_create()
- [x86] ACPI: battery: Accept charges over the design capacity as full
- memstick: r592: Fix a UAF bug when removing the driver
- lib/xz: Avoid overlapping memcpy() with invalid input with in-place
decompression
- lib/xz: Validate the value before assigning it to an enum variable
- workqueue: make sysfs of unbound kworker cpumask more clever
- mwl8k: Fix use-after-free in mwl8k_fw_state_machine()
- PM: hibernate: Get block device exclusively in swsusp_check()
- iwlwifi: mvm: disable RX-diversity in powersave
- gre/sit: Don't generate link-local addr if addr_gen_mode is
IN6_ADDR_GEN_MODE_NONE
- [x86] hyperv: Protect set_hv_tscchange_cb() against getting preempted
- task_stack: Fix end_of_stack() for architectures with upwards-growing
stack
- Bluetooth: fix init and cleanup of sco_conn.timeout_work
- cgroup: Make rebind_subsystems() disable v2 controllers all at once
- drm/amdgpu: fix warning for overflow check
- media: em28xx: add missing em28xx_close_extension
- media: dvb-usb: fix ununit-value in az6027_rc_query
- media: si470x: Avoid card name truncation
- media: cx23885: Fix snd_card_free call on null card pointer
- cpuidle: Fix kobject memory leaks in error paths
- media: em28xx: Don't use ops->suspend if it is NULL
- ath9k: Fix potential interrupt storm on queue reset
- [x86] crypto: qat - detect PFVF collision after ACK
- [x86] crypto: qat - disregard spurious PFVF interrupts
- b43legacy: fix a lower bounds test
- b43: fix a lower bounds test
- [armhf] mmc: sdhci-omap: Fix NULL pointer exception if regulator is not
configured
- memstick: jmb38x_ms: use appropriate free function in
jmb38x_ms_alloc_host()
- hwmon: Fix possible memleak in __hwmon_device_register()
- ath10k: fix max antenna gain unit
- [arm64] drm/msm: uninitialized variable in msm_gem_import()
- net: stream: don't purge sk_error_queue in sk_stream_kill_queues()
- [x86] platform/x86: thinkpad_acpi: Fix bitwise vs. logical warning
- rsi: stop thread firstly in rsi_91x_init() error handling
- mwifiex: Send DELBA requests according to spec
- phy: micrel: ksz8041nl: do not use power down mode
- nvme-rdma: fix error code in nvme_rdma_setup_ctrl
- PM: hibernate: fix sparse warnings
- [arm64] drm/msm: Fix potential NULL dereference in DPU SSPP
- [s390x] gmap: don't unconditionally call pte_unmap_unlock() in
__gmap_zap()
- tcp: don't free a FIN sk_buff in tcp_remove_empty_skb()
- [s390x] KVM: s390: Fix handle_sske page fault handling
- libertas_tf: Fix possible memory leak in probe and disconnect
- libertas: Fix possible memory leak in probe and disconnect
- [arm64] wcn36xx: add proper DMA memory barriers in rx path
- [amd64,arm64] net: amd-xgbe: Toggle PLL settings during rate change
- [arm64,armhf] net: phylink: avoid mvneta warning when setting pause
parameters
- crypto: pcrypt - Delay write to padata->info
- RDMA/rxe: Fix wrong port_cap_flags
- scsi: dc395: Fix error case unwinding
- JFS: fix memleak in jfs_mount
- ALSA: hda: Reduce udelay() at SKL+ position reporting
- [arm64,armhf] soc/tegra: Fix an error handling path in
tegra_powergate_power_up()
- serial: 8250_dw: Drop wrong use of ACPI_PTR()
- scsi: csiostor: Uninitialized data in csio_ln_vnp_read_cbfn()
- RDMA/mlx4: Return missed an error if device doesn't support steering
- [arm64] phy: qcom-qusb2: Fix a memory leak on probe
- [arm64] serial: xilinx_uartps: Fix race condition causing stuck TX
- [mips*] cm: Convert to bitfield API to fix out-of-bounds access
- apparmor: fix error check
- rpmsg: Fix rpmsg_create_ept return when RPMSG config is not defined
- pnfs/flexfiles: Fix misplaced barrier in nfs4_ff_layout_prepare_ds
- drm/plane-helper: fix uninitialized variable reference
- [arm64] PCI: aardvark: Don't spam about PIO Response Status
- NFS: Fix deadlocks in nfs_scan_commit_list()
- fs: orangefs: fix error return code of orangefs_revalidate_lookup()
- [arm64] mtd: spi-nor: hisi-sfc: Remove excessive clk_disable_unprepare()
- netfilter: nfnetlink_queue: fix OOB when mac header was cleared
- dmaengine: dmaengine_desc_callback_valid(): Check for `callback_result`
- [x86] watchdog: f71808e_wdt: fix inaccurate report in WDIOC_GETTIMEOUT
- scsi: qla2xxx: Fix gnl list corruption
- scsi: qla2xxx: Turn off target reset during issue_lip
- xen-pciback: Fix return in pm_ctrl_init()
- [armhf] net: davinci_emac: Fix interrupt pacing disable
- bonding: Fix a use-after-free problem when bond_sysfs_slave_add() failed
- mm/zsmalloc.c: close race window between zs_pool_dec_isolated() and
zs_unregister_migration()
- zram: off by one in read_block_state()
- llc: fix out-of-bound array index in llc_sk_dev_hash()
- nfc: pn533: Fix double free when pn533_fill_fragment_skbs() fails
- [arm64] pgtable: make __pte_to_phys/__phys_to_pte_val inline functions
- vsock: prevent unnecessary refcnt inc for nonblocking connect
- cxgb4: fix eeprom len when diagnostics not implemented
- [arm64,armhf] USB: chipidea: fix interrupt deadlock
- [armel,armhf] 9155/1: fix early early_iounmap()
- f2fs: should use GFP_NOFS for directory inodes
- 9p/net: fix missing error check in p9_check_errors
- [powerpc*] lib: Add helper to check if offset is within conditional branch
range
- [powerpc*] bpf: Validate branch ranges
- [powerpc*] bpf: Fix BPF_SUB when imm == 0x80000000
- [powerpc*] security: Add a helper to query stf_barrier type
- [powerpc*] bpf: Emit stf barrier instruction sequences for BPF_NOSPEC
- mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks
- mm, oom: do not trigger out_of_memory from the #PF
- [armhf] backlight: gpio-backlight: Correct initial power state handling
- video: backlight: Drop maximum brightness override for brightness zero
- [s390x] cio: check the subchannel validity for dev_busid
- [s390x] tape: fix timer initialization in tape_std_assign()
- PCI: Add PCI_EXP_DEVCTL_PAYLOAD_* macros
- fuse: truncate pagecache on atomic_o_trunc
- [x86] cpu: Fix migration safety with X86_BUG_NULL_SEL
- ext4: fix lazy initialization next schedule time computation in more
granular unit
- PCI/MSI: Destroy sysfs before freeing entries
- PCI/MSI: Deal with devices lying about their MSI mask capability
- PCI: Add MSI masking quirk for Nvidia ION AHCI
- [arm64] zynqmp: Do not duplicate flash partition label property
- [arm64] zynqmp: Fix serial compatible string
- scsi: lpfc: Fix list_add() corruption in lpfc_drain_txq()
- [armhf] usb: musb: tusb6010: check return value after calling
platform_get_resource()
- [x86] usb: typec: tipd: Remove WARN_ON in tps6598x_block_read
- [x86] ASoC: nau8824: Add DMI quirk mechanism for active-high jack-detect
- scsi: advansys: Fix kernel pointer leak
- firmware_loader: fix pre-allocated buf built-in firmware use
- tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc
- scsi: target: Fix ordered tag handling
- scsi: target: Fix alua_tg_pt_gps_count tracking
- [i386] ALSA: gus: fix null pointer dereference on pointer block
- f2fs: fix up f2fs_lookup tracepoints
- sched/core: Mitigate race cpus_share_cache()/update_top_cache_domain()
- drm/nouveau: hdmigv100.c: fix corrupted HDMI Vendor InfoFrame
- iavf: check for null in iavf_fix_features
- iavf: Fix for the false positive ASQ/ARQ errors while issuing VF reset
- [x86] platform/x86: hp_accel: Fix an error handling path in
'lis3lv02d_probe()'
- net: virtio_net_hdr_to_skb: count transport header in UFO
- i40e: Fix correct max_pkt_size on VF RX queue
- i40e: Fix NULL ptr dereference on VSI filter sync
- i40e: Fix changing previously set num_queue_pairs for PFs
- i40e: Fix display error code in dmesg
- NFC: reorganize the functions in nci_request
- [x86] perf/x86/intel/uncore: Fix filter_tid mask for CHA events on Skylake
Server
- [x86] perf/x86/intel/uncore: Fix IIO event constraints for Skylake Server
- tun: fix bonding active backup with arp monitoring
- ipc: WARN if trying to remove ipc object which is absent
- [x86] hyperv: Fix NULL deref in set_hv_tscchange_cb() if Hyper-V setup
fails
- udf: Fix crash after seekdir
- btrfs: fix memory ordering between normal and ordered work functions
- cfg80211: call cfg80211_stop_ap when switch from P2P_GO type
- drm/udl: fix control-message timeout
- drm/amdgpu: fix set scaling mode Full/Full aspect/Center not works on vga
and dvi connectors
- perf/core: Avoid put_page() when GUP fails
- batman-adv: mcast: fix duplicate mcast packets in BLA backbone from LAN
- batman-adv: Consider fragmentation for needed_headroom
- batman-adv: Reserve needed_*room for fragments
- batman-adv: Don't always reallocate the fragmentation skb head
- RDMA/netlink: Add __maybe_unused to static inline in C file
- ASoC: DAPM: Cover regression by kctl change notification fix
- [arm64,armhf] soc/tegra: pmc: Fix imbalanced clock disabling in error code
path
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.219
- USB: serial: option: add Telit LE910S1 0x9200 composition
- USB: serial: option: add Fibocom FM101-GL variants
- [arm*] usb: dwc2: hcd_queue: Fix use of floating point literal
- usb: hub: Fix usb enumeration issue due to address0 race
- usb: hub: Fix locking issues with address0_mutex
- [arm*] binder: fix test regression due to sender_euid change
- ALSA: ctxfi: Fix out-of-range access
- media: cec: copy sequence field for the reply
- HID: wacom: Use "Confidence" flag to prevent reporting invalid contacts
- [x86] staging: rtl8192e: Fix use after free in _rtl92e_pci_disconnect()
- fuse: fix page stealing
- xen: don't continue xenstore initialization in case of errors
- xen: detect uninitialized xenbus in xenbus_init
- tracing: Fix pid filtering when triggers are attached
- proc/vmcore: fix clearing user buffer by properly using clear_user()
- [arm64] PCI: aardvark: Fix a leaked reference by adding missing
of_node_put()
- [arm64] PCI: aardvark: Wait for endpoint to be ready before training link
- [arm64] PCI: aardvark: Train link immediately after enabling training
- [arm64] PCI: aardvark: Improve link training
- [arm64] PCI: aardvark: Issue PERST via GPIO
- [arm64] PCI: aardvark: Replace custom macros by standard linux/pci_regs.h
macros
- [arm64] PCI: aardvark: Indicate error in 'val' when config read fails
- [arm64] PCI: aardvark: Don't touch PCIe registers if no card connected
- [arm64] PCI: aardvark: Fix compilation on s390
[continued in next message]
--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)