• Accepted linux 4.19.232-1 (source) into oldstable-proposed-updates->old

    From Debian FTP Masters@21:1/5 to All on Fri Mar 11 08:40:03 2022
    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA512

    Format: 1.8
    Date: Mon, 07 Mar 2022 22:13:16 +0100
    Source: linux
    Architecture: source
    Version: 4.19.232-1
    Distribution: buster-security
    Urgency: high
    Maintainer: Debian Kernel Team <debian-kernel@lists.debian.org>
    Changed-By: Salvatore Bonaccorso <carnil@debian.org>
    Closes: 988044 989285 990411 994050
    Changes:
    linux (4.19.232-1) buster-security; urgency=high
    .
    * New upstream stable update:
    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.209
    - ocfs2: drop acl cache for directories too
    - [arm*] usb: dwc2: gadget: Fix ISOC transfer complete handling for DDMA
    - [armhf] usb: musb: tusb6010: uninitialized data in
    tusb_fifo_write_unaligned()
    - cifs: fix incorrect check for null pointer in header_assemble
    - [x86] xen/x86: fix PV trap handling on secondary processors
    - USB: serial: cp210x: add ID for GW Instek GDM-834x Digital Multimeter
    - USB: cdc-acm: fix minor-number release
    - Re-enable UAS for LaCie Rugged USB3-FW with fk quirk
    - USB: serial: mos7840: remove duplicated 0xac24 device ID
    - USB: serial: option: add Telit LN920 compositions
    - USB: serial: option: remove duplicate USB device ID
    - USB: serial: option: add device id for Foxconn T99W265
    - [arm64] serial: mvebu-uart: fix driver's tx_empty callback
    - net: hso: fix muxed tty registration
    - bnxt_en: Fix TX timeout when TX ring size is set to the smallest
    - net/smc: add missing error check in smc_clc_prfx_set()
    - net/mlx4_en: Don't allow aRFS for encapsulated packets
    - scsi: iscsi: Adjust iface sysfs attr detection
    - [x86] tty: synclink_gt, drop unneeded forward declarations
    - [x86] tty: synclink_gt: rename a conflicting function name
    - thermal/core: Potential buffer overflow in
    thermal_build_list_of_policies()
    - [arm64,armhf] irqchip/gic-v3-its: Fix potential VPE leak on error
    - md: fix a lock order reversal in md_alloc
    - blktrace: Fix uaf in blk_trace access after removing by sysfs
    - [arm64,armhf] net: stmmac: allow CSR clock of 300MHz
    - xen/balloon: use a kernel thread instead a workqueue
    - nvme-multipath: fix ANA state updates when a namespace is not present
    - qnx4: avoid stringop-overread errors
    - [arm64] Mark __stack_chk_guard as __ro_after_init
    - net: 6pack: Fix tx timeout and slot time
    - [arm64] PCI: aardvark: Fix checking for PIO status
    - tcp: address problems caused by EDT misshaps
    - tcp: always set retrans_stamp on recovery
    - tcp: create a helper to model exponential backoff
    - tcp: adjust rto_base in retransmits_timed_out()
    - xen/balloon: fix balloon kthread freezing
    - tty: Fix out-of-bound vmalloc access in imageblit
    - cpufreq: schedutil: Use kobject release() method to free sugov_tunables
    - cpufreq: schedutil: Destroy mutex before kobject_put() frees the memory
    - mac80211: fix use-after-free in CCMP/GCMP RX
    - [x86] kvmclock: Move this_cpu_pvti into kvmclock.h
    - ipvs: check that ip_vs_conn_tab_bits is between 8 and 20
    - mac80211: Fix ieee80211_amsdu_aggregate frag_tail bug
    - mac80211: limit injected vht mcs/nss in ieee80211_parse_tx_radiotap
    - sctp: break out if skb_header_pointer returns NULL in sctp_rcv_ootb
    - hwmon: (tmp421) Replace S_<PERMS> with octal values
    - hwmon: (tmp421) report /PVLD condition as fault
    - hwmon: (tmp421) fix rounding for negative values
    - e100: fix length calculation in e100_get_regs_len
    - e100: fix buffer overrun in e100_get_regs
    - Revert "block, bfq: honor already-setup queue merges"
    - scsi: csiostor: Add module softdep on cxgb4
    - af_unix: fix races in sk_peer_pid and sk_peer_cred accesses
    (CVE-2021-4203)
    - elf: don't use MAP_FIXED_NOREPLACE for elf interpreter mappings
    - ext4: fix potential infinite loop in ext4_dx_readdir()
    - net: udp: annotate data race around udp_sk(sk)->corkflag
    - [armel,armhf] 9077/1: PLT: Move struct plt_entries definition to header
    - [armel,armhf] 9078/1: Add warn suppress parameter to arm_gen_branch_link()
    - [armel,armhf] 9079/1: ftrace: Add MODULE_PLTS support
    - [armel,armhf] 9098/1: ftrace: MODULE_PLT: Fix build problem without
    DYNAMIC_FTRACE
    - [x86] crypto: ccp - fix resource leaks in ccp_run_aes_gcm_cmd()
    (CVE-2021-3744, CVE-2021-3764)
    - HID: betop: fix slab-out-of-bounds Write in betop_probe
    - netfilter: ipset: Fix oversized kvmalloc() calls
    - HID: usbhid: free raw_report buffers in usbhid_stop
    - cred: allow get_cred() and put_cred() to be given NULL.
    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.210
    - net: mdio: introduce a shutdown method to mdio device drivers
    - xen-netback: correct success/error reporting for the SKB-with-fraglist
    case
    - scsi: sd: Free scsi_disk device via put_device()
    - [arm*] usb: dwc2: check return value after calling platform_get_resource()
    - scsi: ses: Retry failed Send/Receive Diagnostic commands
    - libata: Add ATA_HORKAGE_NO_NCQ_ON_ATI for Samsung 860 and 870 SSD.
    - lib/timerqueue: Rely on rbtree semantics for next timer (CVE-2021-20317)
    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.211
    - USB: cdc-acm: fix racy tty buffer accesses
    - USB: cdc-acm: fix break reporting
    - xen/privcmd: fix error handling in mmap-resource processing
    - ovl: fix missing negative dentry check in ovl_rename() (CVE-2021-20321)
    - nfsd4: Handle the NFSv4 READDIR 'dircount' hint being zero
    - xen/balloon: fix cancelled balloon action
    - [armhf] dts: omap3430-sdp: Fix NAND device node
    - [mips,mipsel] bpf, mips: Validate conditional branch offsets
    (CVE-2021-38300)
    - [armel,armhf] bpf, arm: Fix register clobbering in div/mod implementation
    - bpf: Fix integer overflow in prealloc_elems_and_freelist()
    (CVE-2021-41864)
    - phy: mdio: fix memory leak
    - net_sched: fix NULL deref in fifo_set_limit()
    - [i386] ptp_pch: Load module automatically if ID matches
    - [armhf] imx6: disable the GIC CPU interface before calling stby-poweroff
    sequence
    - net: bridge: use nla_total_size_64bit() in br_get_linkxstats_size()
    - [arm64,armhf] net: sfp: Fix typo in state machine debug string
    - netlink: annotate data races around nlk->bound
    - drm/nouveau/debugfs: fix file release memory leak
    - rtnetlink: fix if_nlmsg_stats_size() under estimation
    - i40e: fix endless loop under rtnl
    - i40e: Fix freeing of uninitialized misc IRQ vector
    - i2c: acpi: fix resource leak in reconfiguration device addition
    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.212
    - [armhf] net: phy: bcm7xxx: Fixed indirect MMD operations
    - HID: apple: Fix logical maximum and usage maximum of Magic Keyboard JIS
    - netfilter: ip6_tables: zero-initialize fragment offset
    - mac80211: Drop frames from invalid MAC address in ad-hoc mode
    - net: prevent user from passing illegal stab size
    - mac80211: check return value of rhashtable_init
    - scsi: ses: Fix unsigned comparison with less than zero
    - scsi: virtio_scsi: Fix spelling mistake "Unsupport" -> "Unsupported"
    - [x86] perf/x86: Reset destroy callback on event init failure
    - sched: Always inline is_percpu_thread()
    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.213
    - ALSA: seq: Fix a potential UAF by wrong private_free call order
    - ALSA: hda/realtek: Complete partial device name to avoid ambiguity
    - ALSA: hda/realtek: Add quirk for Clevo X170KM-G
    - ALSA: hda/realtek - ALC236 headset MIC recording issue
    - [s390x] fix strrchr() implementation
    - btrfs: deal with errors when replaying dir entry during log replay
    - btrfs: deal with errors when adding inode reference during log replay
    - btrfs: check for error when looking up inode during dir entry replay
    - [x86] mei: me: add Ice Lake-N device id.
    - xhci: guard accesses to ep_state in xhci_endpoint_reset()
    - xhci: Fix command ring pointer corruption while aborting a command
    - xhci: Enable trust tx length quirk for Fresco FL11 USB controller
    - cb710: avoid NULL pointer subtraction
    - [arm64,x86] efi/cper: use stack buffer for error record decoding
    - efi: Change down_interruptible() in virt_efi_reset_system() to
    down_trylock()
    - [armhf] usb: musb: dsps: Fix the probe error path
    - Input: xpad - add support for another USB ID of Nacon GC-100
    - USB: serial: qcserial: add EM9191 QDL support
    - USB: serial: option: add Quectel EC200S-CN module support
    - USB: serial: option: add Telit LE910Cx composition 0x1204
    - USB: serial: option: add prod. id for Quectel EG91
    - virtio: write back F_VERSION_1 before validate
    - nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells
    - sctp: account stream padding length for reconf chunk (CVE-2022-0322)
    - ethernet: s2io: fix setting mac address during resume
    - nfc: fix error handling of nfc_proto_register()
    - NFC: digital: fix possible memory leak in digital_tg_listen_mdaa()
    - NFC: digital: fix possible memory leak in digital_in_send_sdd_req()
    - [i386] pata_legacy: fix a couple uninitialized variable bugs
    - [arm64] drm/msm: Fix null pointer dereference on pointer edp
    - [arm64] drm/msm/dsi: Fix an error code in msm_dsi_modeset_init()
    - [arm64] drm/msm/dsi: fix off by one in dsi_bus_clk_enable error handling
    - [arm64] acpi/arm64: fix next_platform_timer() section mismatch error
    - mqprio: Correct stats in mqprio_dump_class_stats().
    - qed: Fix missing error code in qed_slowpath_start()
    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.214
    - NFSD: Keep existing listeners on portlist error
    - netfilter: ipvs: make global sysctl readonly in non-init netns
    - [arm64] net: hns3: add limit ets dwrr bandwidth cannot be 0
    - [arm64] net: hns3: disable sriov before unload hclge layer
    - can: peak_usb: pcan_usb_fd_decode_status(): fix back to ERROR_ACTIVE state
    notification
    - can: peak_pci: peak_pci_remove(): fix UAF
    - ocfs2: fix data corruption after conversion from inline format
    - ocfs2: mount fails with buffer overflow in strlen
    - vfs: check fd has read access in kernel_read_file_from_fd()
    (CVE-2022-0644)
    - ALSA: usb-audio: Provide quirk for Sennheiser GSP670 Headset
    - ALSA: hda/realtek: Add quirk for Clevo PC50HS
    - ASoC: DAPM: Fix missing kctl change notifications
    - mm, slub: fix mismatch between reconstructed freelist depth and cnt
    - nfc: nci: fix the UAF of rf_conn_info object (CVE-2021-3760)
    - isdn: cpai: check ctr->cnr to avoid array index out of bound
    (CVE-2021-43389)
    - btrfs: deal with errors when checking if a dir entry exists during log
    replay
    - [arm64,armhf] net: stmmac: add support for dwmac 3.40a
    - isdn: mISDN: Fix sleeping function called from invalid context
    - ALSA: hda: avoid write to STATESTS if controller is in reset
    - scsi: core: Fix shost->cmd_per_lun calculation in scsi_add_host_with_dma()
    - net: mdiobus: Fix memory leak in __mdiobus_register
    - tracing: Have all levels of checks prevent recursion
    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.215
    - [armel,armhf] 9139/1: kprobes: fix arch_init_kprobes() prototype
    - [powerpc*] bpf: Fix BPF_MOD when imm == 1
    - [arm64] Avoid premature usercopy failure
    - usbnet: sanity check for maxpacket
    - usbnet: fix error return code in usbnet_probe()
    - ata: sata_mv: Fix the error handling of mv_chip_id()
    - nfc: port100: fix using -ERRNO as command type mask
    - Revert "net: mdiobus: Fix memory leak in __mdiobus_register"
    - ipv4: use siphash instead of Jenkins in fnhe_hashfun() (CVE-2021-20322)
    - ipv6: use siphash in rt6_exception_hash() (CVE-2021-20322)
    - ipv6: make exception cache less predictible (CVE-2021-20322)
    - mmc: vub300: fix control-message timeouts
    - mmc: cqhci: clear HALT state after CQE enable
    - [armhf] mmc: dw_mmc: exynos: fix the finding clock sample value
    - mmc: sdhci: Map more voltage level to SDHCI_POWER_330
    - [armhf] mmc: sdhci-esdhc-imx: clear the buffer_read_ready to reset
    standard tuning circuit
    - net: lan78xx: fix division by zero in send path
    - RDMA/mlx5: Set user priority for DCT
    - [arm64] dts: allwinner: h5: NanoPI Neo 2: Fix ethernet node
    - regmap: Fix possible double-free in regcache_rbtree_exit()
    - net: batman-adv: fix error handling
    - net: Prevent infinite while loop in skb_tx_hash()
    - net: ethernet: microchip: lan743x: Fix driver crash when lan743x_pm_resume
    fails
    - net: ethernet: microchip: lan743x: Fix dma allocation failure by using
    dma_set_mask_and_coherent
    - sctp: use init_tag from inithdr for ABORT chunk (CVE-2021-3772)
    - sctp: fix the processing for COOKIE_ECHO chunk (CVE-2021-3772)
    - sctp: add vtag check in sctp_sf_violation (CVE-2021-3772)
    - sctp: add vtag check in sctp_sf_do_8_5_1_E_sa (CVE-2021-3772)
    - sctp: add vtag check in sctp_sf_ootb (CVE-2021-3772)
    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.216
    - scsi: core: Put LLD module refcnt after SCSI device is released
    - media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt()
    (CVE-2021-42739)
    - IB/qib: Use struct_size() helper
    - IB/qib: Protect from buffer overflow in struct qib_user_sdma_pkt fields
    - sfc: Fix reading non-legacy supported link modes
    - arch: pgtable: define MAX_POSSIBLE_PHYSMEM_BITS where needed
    - [armel,armhf] 9120/1: Revert "amba: make use of -1 IRQs warn"
    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.217
    - [x86] Revert "x86/kvm: fix vcpu-id indexed array sizes"
    - usb: ehci: handshake CMD_RUN instead of STS_HALT
    - [arm64,armhf] usb: musb: Balance list entry in musb_gadget_queue
    - usb-storage: Add compatibility quirk flags for iODD 2531/2541
    - printk/console: Allow to disable console output by using console="" or
    console=null
    - isofs: Fix out of bound access for corrupted isofs image
    - [x86] comedi: dt9812: fix DMA buffers on stack
    - [x86] comedi: ni_usb6501: fix NULL-deref in command paths
    - [x86] comedi: vmk80xx: fix transfer-buffer overflows
    - [x86] comedi: vmk80xx: fix bulk-buffer overflow
    - [x86] comedi: vmk80xx: fix bulk and interrupt message timeouts
    - staging: r8712u: fix control-message timeout
    - [x86] staging: rtl8192u: fix control-message timeouts
    - rsi: fix control-message timeout
    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.218
    - xhci: Fix USB 3.1 enumeration issues by increasing roothub power-on-good
    delay
    - binder: use euid from cred instead of using task
    - binder: use cred instead of task for selinux checks
    - Input: elantench - fix misreporting trackpoint coordinates
    (Closes: #989285)
    - libata: fix read log timeout value
    - ocfs2: fix data corruption on truncate
    - [arm64,armhf] mmc: dw_mmc: Dont wait for DRTO on Write RSP error
    - tpm: Check for integer overflow in tpm2_map_response_body()
    - [x86] media: ite-cir: IR receiver stop working after receive overflow
    - media: ir-kbd-i2c: improve responsiveness of hauppauge zilog receivers
    (Closes: #994050)
    - ALSA: hda/realtek: Add quirk for Clevo PC70HS
    - ALSA: ua101: fix division by zero at probe
    - ALSA: 6fire: fix control and bulk message timeouts
    - ALSA: line6: fix control and interrupt message timeouts
    - ALSA: usb-audio: Add registration quirk for JBL Quantum 400
    - ALSA: synth: missing check for possible NULL after the call to kstrdup
    - ALSA: timer: Fix use-after-free problem
    - ALSA: timer: Unconditionally unlink slave instances, too
    - [x86] irq: Ensure PI wakeup handler is unregistered before module unload
    - [arm64] cavium: Return negative value when pci_alloc_irq_vectors() fails
    - scsi: qla2xxx: Fix unmap of already freed sgl
    - [arm64] cavium: Fix return values of the probe function
    - sfc: Don't use netif_info before net_device setup
    - [x86] hyperv/vmbus: include linux/bitops.h
    - drm: panel-orientation-quirks: Add quirk for Aya Neo 2021
    - bpf: Prevent increasing bpf_jit_limit above max
    - xen/netfront: stop tx queues during live migration
    - [armhf] spi: spl022: fix Microwire full duplex mode
    - [armhf] watchdog: Fix OMAP watchdog early handling
    - [x86] vmxnet3: do not stop tx queues after netif_device_detach()
    - btrfs: clear MISSING device status bit in btrfs_close_one_device
    - btrfs: fix lost error handling when replaying directory deletes
    - btrfs: call btrfs_check_rw_degradable only if there is a missing device
    - [armhf] regulator: s5m8767: do not use reset value as DVS voltage if GPIO
    DVS is disabled
    - [armhf] regulator: dt-bindings: samsung,s5m8767: correct
    s5m8767,pmic-buck-default-dvs-idx property
    - EDAC/sb_edac: Fix top-of-high-memory value for Broadwell/Haswell
    - [x86] mwifiex: fix division by zero in fw download path
    - ath6kl: fix division by zero in send path
    - ath6kl: fix control-message timeout
    - ath10k: fix control-message timeout
    - ath10k: fix division by zero in send path
    - PCI: Mark Atheros QCA6174 to avoid bus reset
    - rtl8187: fix control-message timeouts
    - [arm64] wcn36xx: Fix HT40 capability for 2Ghz band
    - mwifiex: Read a PCI register after writing the TX ring write pointer
    - libata: fix checking of DMA state
    - [arm64] wcn36xx: handle connection loss indication
    - rsi: fix occasional initialisation failure with BT coex
    - rsi: fix key enabled check causing unwanted encryption for vap_id > 0
    - rsi: fix rate mask set leading to P2P failure
    - rsi: Fix module dev_oper_mode parameter description
    - RDMA/qedr: Fix NULL deref for query_qp on the GSI QP
    - signal: Remove the bogus sigkill_pending in ptrace_stop
    - [mips*] signal/mips: Update (_save|_restore)_fp_context to fail with
    -EFAULT
    - [x86] power: supply: max17042_battery: Prevent int underflow in
    set_soc_threshold
    - [x86] power: supply: max17042_battery: use VFSOC for capacity when no rsns
    - serial: core: Fix initializing and restoring termios speed
    - ALSA: mixer: oss: Fix racy access to slots
    - ALSA: mixer: fix deadlock in snd_mixer_oss_set_volume
    - xen/balloon: add late_initcall_sync() for initial ballooning done
    - [arm64] PCI: aardvark: Do not clear status bits of masked interrupts
    - [arm64] PCI: aardvark: Do not unmask unused interrupts
    - [arm64] PCI: aardvark: Fix return value of MSI domain .alloc() method
    - [arm64] PCI: aardvark: Read all 16-bits from PCIE_MSI_PAYLOAD_REG
    - quota: check block number when reading the block in quota file
    - quota: correct error number in free_dqentry()
    - pinctrl: core: fix possible memory leak in pinctrl_enable()
    - iio: dac: ad5446: Fix ad5622_write() return value
    - USB: serial: keyspan: fix memleak on probe errors
    - USB: iowarrior: fix control-message timeouts
    - drm: panel-orientation-quirks: Add quirk for KD Kurio Smart C15200 2-in-1
    - Bluetooth: sco: Fix lock_sock() blockage by memcpy_from_msg()
    (CVE-2021-3640)
    - Bluetooth: fix use-after-free error in lock_sock_nested() (CVE-2021-3752)
    - [x86] platform/x86: wmi: do not fail if disabling fails
    - locking/lockdep: Avoid RCU-induced noinstr fail
    - net: sched: update default qdisc visibility after Tx queue cnt changes
    - [x86] Increase exception stack sizes
    - mwifiex: Run SET_BSS_MODE when changing from P2P to STATION vif-type
    - mwifiex: Properly initialize private structure on interface type changes
    - media: netup_unidvb: handle interrupt properly according to the firmware
    - media: uvcvideo: Set capability in s_param
    - media: uvcvideo: Return -EIO for control errors
    - media: mceusb: return without resubmitting URB in case of -EPROTO error.
    - ACPICA: Avoid evaluating methods too early during system resume
    - media: usb: dvd-usb: fix uninit-value bug in dibusb_read_eeprom_byte()
    - tracefs: Have tracefs directories not set OTH permission bits by default
    - ath: dfs_pattern_detector: Fix possible null-pointer dereference in
    channel_detector_create()
    - [x86] ACPI: battery: Accept charges over the design capacity as full
    - memstick: r592: Fix a UAF bug when removing the driver
    - lib/xz: Avoid overlapping memcpy() with invalid input with in-place
    decompression
    - lib/xz: Validate the value before assigning it to an enum variable
    - workqueue: make sysfs of unbound kworker cpumask more clever
    - mwl8k: Fix use-after-free in mwl8k_fw_state_machine()
    - PM: hibernate: Get block device exclusively in swsusp_check()
    - iwlwifi: mvm: disable RX-diversity in powersave
    - gre/sit: Don't generate link-local addr if addr_gen_mode is
    IN6_ADDR_GEN_MODE_NONE
    - [x86] hyperv: Protect set_hv_tscchange_cb() against getting preempted
    - task_stack: Fix end_of_stack() for architectures with upwards-growing
    stack
    - Bluetooth: fix init and cleanup of sco_conn.timeout_work
    - cgroup: Make rebind_subsystems() disable v2 controllers all at once
    - drm/amdgpu: fix warning for overflow check
    - media: em28xx: add missing em28xx_close_extension
    - media: dvb-usb: fix ununit-value in az6027_rc_query
    - media: si470x: Avoid card name truncation
    - media: cx23885: Fix snd_card_free call on null card pointer
    - cpuidle: Fix kobject memory leaks in error paths
    - media: em28xx: Don't use ops->suspend if it is NULL
    - ath9k: Fix potential interrupt storm on queue reset
    - [x86] crypto: qat - detect PFVF collision after ACK
    - [x86] crypto: qat - disregard spurious PFVF interrupts
    - b43legacy: fix a lower bounds test
    - b43: fix a lower bounds test
    - [armhf] mmc: sdhci-omap: Fix NULL pointer exception if regulator is not
    configured
    - memstick: jmb38x_ms: use appropriate free function in
    jmb38x_ms_alloc_host()
    - hwmon: Fix possible memleak in __hwmon_device_register()
    - ath10k: fix max antenna gain unit
    - [arm64] drm/msm: uninitialized variable in msm_gem_import()
    - net: stream: don't purge sk_error_queue in sk_stream_kill_queues()
    - [x86] platform/x86: thinkpad_acpi: Fix bitwise vs. logical warning
    - rsi: stop thread firstly in rsi_91x_init() error handling
    - mwifiex: Send DELBA requests according to spec
    - phy: micrel: ksz8041nl: do not use power down mode
    - nvme-rdma: fix error code in nvme_rdma_setup_ctrl
    - PM: hibernate: fix sparse warnings
    - [arm64] drm/msm: Fix potential NULL dereference in DPU SSPP
    - [s390x] gmap: don't unconditionally call pte_unmap_unlock() in
    __gmap_zap()
    - tcp: don't free a FIN sk_buff in tcp_remove_empty_skb()
    - [s390x] KVM: s390: Fix handle_sske page fault handling
    - libertas_tf: Fix possible memory leak in probe and disconnect
    - libertas: Fix possible memory leak in probe and disconnect
    - [arm64] wcn36xx: add proper DMA memory barriers in rx path
    - [amd64,arm64] net: amd-xgbe: Toggle PLL settings during rate change
    - [arm64,armhf] net: phylink: avoid mvneta warning when setting pause
    parameters
    - crypto: pcrypt - Delay write to padata->info
    - RDMA/rxe: Fix wrong port_cap_flags
    - scsi: dc395: Fix error case unwinding
    - JFS: fix memleak in jfs_mount
    - ALSA: hda: Reduce udelay() at SKL+ position reporting
    - [arm64,armhf] soc/tegra: Fix an error handling path in
    tegra_powergate_power_up()
    - serial: 8250_dw: Drop wrong use of ACPI_PTR()
    - scsi: csiostor: Uninitialized data in csio_ln_vnp_read_cbfn()
    - RDMA/mlx4: Return missed an error if device doesn't support steering
    - [arm64] phy: qcom-qusb2: Fix a memory leak on probe
    - [arm64] serial: xilinx_uartps: Fix race condition causing stuck TX
    - [mips*] cm: Convert to bitfield API to fix out-of-bounds access
    - apparmor: fix error check
    - rpmsg: Fix rpmsg_create_ept return when RPMSG config is not defined
    - pnfs/flexfiles: Fix misplaced barrier in nfs4_ff_layout_prepare_ds
    - drm/plane-helper: fix uninitialized variable reference
    - [arm64] PCI: aardvark: Don't spam about PIO Response Status
    - NFS: Fix deadlocks in nfs_scan_commit_list()
    - fs: orangefs: fix error return code of orangefs_revalidate_lookup()
    - [arm64] mtd: spi-nor: hisi-sfc: Remove excessive clk_disable_unprepare()
    - netfilter: nfnetlink_queue: fix OOB when mac header was cleared
    - dmaengine: dmaengine_desc_callback_valid(): Check for `callback_result`
    - [x86] watchdog: f71808e_wdt: fix inaccurate report in WDIOC_GETTIMEOUT
    - scsi: qla2xxx: Fix gnl list corruption
    - scsi: qla2xxx: Turn off target reset during issue_lip
    - xen-pciback: Fix return in pm_ctrl_init()
    - [armhf] net: davinci_emac: Fix interrupt pacing disable
    - bonding: Fix a use-after-free problem when bond_sysfs_slave_add() failed
    - mm/zsmalloc.c: close race window between zs_pool_dec_isolated() and
    zs_unregister_migration()
    - zram: off by one in read_block_state()
    - llc: fix out-of-bound array index in llc_sk_dev_hash()
    - nfc: pn533: Fix double free when pn533_fill_fragment_skbs() fails
    - [arm64] pgtable: make __pte_to_phys/__phys_to_pte_val inline functions
    - vsock: prevent unnecessary refcnt inc for nonblocking connect
    - cxgb4: fix eeprom len when diagnostics not implemented
    - [arm64,armhf] USB: chipidea: fix interrupt deadlock
    - [armel,armhf] 9155/1: fix early early_iounmap()
    - f2fs: should use GFP_NOFS for directory inodes
    - 9p/net: fix missing error check in p9_check_errors
    - [powerpc*] lib: Add helper to check if offset is within conditional branch
    range
    - [powerpc*] bpf: Validate branch ranges
    - [powerpc*] bpf: Fix BPF_SUB when imm == 0x80000000
    - [powerpc*] security: Add a helper to query stf_barrier type
    - [powerpc*] bpf: Emit stf barrier instruction sequences for BPF_NOSPEC
    - mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks
    - mm, oom: do not trigger out_of_memory from the #PF
    - [armhf] backlight: gpio-backlight: Correct initial power state handling
    - video: backlight: Drop maximum brightness override for brightness zero
    - [s390x] cio: check the subchannel validity for dev_busid
    - [s390x] tape: fix timer initialization in tape_std_assign()
    - PCI: Add PCI_EXP_DEVCTL_PAYLOAD_* macros
    - fuse: truncate pagecache on atomic_o_trunc
    - [x86] cpu: Fix migration safety with X86_BUG_NULL_SEL
    - ext4: fix lazy initialization next schedule time computation in more
    granular unit
    - PCI/MSI: Destroy sysfs before freeing entries
    - PCI/MSI: Deal with devices lying about their MSI mask capability
    - PCI: Add MSI masking quirk for Nvidia ION AHCI
    - [arm64] zynqmp: Do not duplicate flash partition label property
    - [arm64] zynqmp: Fix serial compatible string
    - scsi: lpfc: Fix list_add() corruption in lpfc_drain_txq()
    - [armhf] usb: musb: tusb6010: check return value after calling
    platform_get_resource()
    - [x86] usb: typec: tipd: Remove WARN_ON in tps6598x_block_read
    - [x86] ASoC: nau8824: Add DMI quirk mechanism for active-high jack-detect
    - scsi: advansys: Fix kernel pointer leak
    - firmware_loader: fix pre-allocated buf built-in firmware use
    - tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc
    - scsi: target: Fix ordered tag handling
    - scsi: target: Fix alua_tg_pt_gps_count tracking
    - [i386] ALSA: gus: fix null pointer dereference on pointer block
    - f2fs: fix up f2fs_lookup tracepoints
    - sched/core: Mitigate race cpus_share_cache()/update_top_cache_domain()
    - drm/nouveau: hdmigv100.c: fix corrupted HDMI Vendor InfoFrame
    - iavf: check for null in iavf_fix_features
    - iavf: Fix for the false positive ASQ/ARQ errors while issuing VF reset
    - [x86] platform/x86: hp_accel: Fix an error handling path in
    'lis3lv02d_probe()'
    - net: virtio_net_hdr_to_skb: count transport header in UFO
    - i40e: Fix correct max_pkt_size on VF RX queue
    - i40e: Fix NULL ptr dereference on VSI filter sync
    - i40e: Fix changing previously set num_queue_pairs for PFs
    - i40e: Fix display error code in dmesg
    - NFC: reorganize the functions in nci_request
    - [x86] perf/x86/intel/uncore: Fix filter_tid mask for CHA events on Skylake
    Server
    - [x86] perf/x86/intel/uncore: Fix IIO event constraints for Skylake Server
    - tun: fix bonding active backup with arp monitoring
    - ipc: WARN if trying to remove ipc object which is absent
    - [x86] hyperv: Fix NULL deref in set_hv_tscchange_cb() if Hyper-V setup
    fails
    - udf: Fix crash after seekdir
    - btrfs: fix memory ordering between normal and ordered work functions
    - cfg80211: call cfg80211_stop_ap when switch from P2P_GO type
    - drm/udl: fix control-message timeout
    - drm/amdgpu: fix set scaling mode Full/Full aspect/Center not works on vga
    and dvi connectors
    - perf/core: Avoid put_page() when GUP fails
    - batman-adv: mcast: fix duplicate mcast packets in BLA backbone from LAN
    - batman-adv: Consider fragmentation for needed_headroom
    - batman-adv: Reserve needed_*room for fragments
    - batman-adv: Don't always reallocate the fragmentation skb head
    - RDMA/netlink: Add __maybe_unused to static inline in C file
    - ASoC: DAPM: Cover regression by kctl change notification fix
    - [arm64,armhf] soc/tegra: pmc: Fix imbalanced clock disabling in error code
    path
    https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.219
    - USB: serial: option: add Telit LE910S1 0x9200 composition
    - USB: serial: option: add Fibocom FM101-GL variants
    - [arm*] usb: dwc2: hcd_queue: Fix use of floating point literal
    - usb: hub: Fix usb enumeration issue due to address0 race
    - usb: hub: Fix locking issues with address0_mutex
    - [arm*] binder: fix test regression due to sender_euid change
    - ALSA: ctxfi: Fix out-of-range access
    - media: cec: copy sequence field for the reply
    - HID: wacom: Use "Confidence" flag to prevent reporting invalid contacts
    - [x86] staging: rtl8192e: Fix use after free in _rtl92e_pci_disconnect()
    - fuse: fix page stealing
    - xen: don't continue xenstore initialization in case of errors
    - xen: detect uninitialized xenbus in xenbus_init
    - tracing: Fix pid filtering when triggers are attached
    - proc/vmcore: fix clearing user buffer by properly using clear_user()
    - [arm64] PCI: aardvark: Fix a leaked reference by adding missing
    of_node_put()
    - [arm64] PCI: aardvark: Wait for endpoint to be ready before training link
    - [arm64] PCI: aardvark: Train link immediately after enabling training
    - [arm64] PCI: aardvark: Improve link training
    - [arm64] PCI: aardvark: Issue PERST via GPIO
    - [arm64] PCI: aardvark: Replace custom macros by standard linux/pci_regs.h
    macros
    - [arm64] PCI: aardvark: Indicate error in 'val' when config read fails
    - [arm64] PCI: aardvark: Don't touch PCIe registers if no card connected
    - [arm64] PCI: aardvark: Fix compilation on s390

    [continued in next message]

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)