Thank you for your contribution to Debian.



Accepted:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 19 Dec 2022 15:14:58 +0100
Source: linux
Architecture: source
Version: 6.0.12-1~bpo11+1
Distribution: bullseye-backports
Urgency: medium
Maintainer: Debian Kernel Team <debian-kernel@lists.debian.org>
Changed-By: Ben Hutchings <benh@debian.org>
Closes: 1022544 1022848 1022900 1023025 1023167 1023298 1023329 1023450 1023613 1023726 1024070 1024328
Changes:
linux (6.0.12-1~bpo11+1) bullseye-backports; urgency=medium
.
* Rebuild for bullseye-backports:
- Change ABI number to 0.deb11.6
.
linux (6.0.12-1) unstable; urgency=medium
.
* New upstream stable update:
https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.0.11
- [arm*] binder: validate alloc->mm in ->mmap() handler
- ceph: Use kcalloc for allocating multiple elements
- ceph: fix NULL pointer dereference for req->r_session
- wifi: mac80211: fix memory free error when registering wiphy fail
- wifi: cfg80211: Fix bitrates overflow issue
- wifi: mac80211_hwsim: fix debugfs attribute ps with rc table support
- [riscv64] dts: sifive unleashed: Add PWM controlled LEDs
- audit: fix undefined behavior in bit shift for AUDIT_BIT
- wifi: airo: do not assign -1 to unsigned char
- wifi: mac80211: Fix ack frame idr leak when mesh has no route
- wifi: ath11k: Fix QCN9074 firmware boot on x86
- [s390x] zcrypt: fix warning about field-spanning write
- [armhf] spi: stm32: fix stm32_spi_prepare_mbr() that halves spi clk for
every run
- Revert "net: macsec: report real_dev features when HW offloading is
enabled"
- [x86] ACPI: video: Add backlight=native DMI quirk for Dell G15 5515
- [x86] platform/x86: ideapad-laptop: Disable touchpad_switch
- [x86] platform/x86: touchscreen_dmi: Add info for the RCA Cambio W101 v2
2-in-1
- [x86] platform/x86/intel/pmt: Sapphire Rapids PMT errata fix
- [x86] platform/x86/intel/hid: Add some ACPI device IDs
- [powerpc*] scsi: ibmvfc: Avoid path failures during live migration
- scsi: scsi_debug: Make the READ CAPACITY response compliant with ZBC
- drm: panel-orientation-quirks: Add quirk for Nanote UMPC-01
- drm: panel-orientation-quirks: Add quirk for Acer Switch V 10 (SW5-017)
- block, bfq: fix null pointer dereference in bfq_bio_bfqg()
- [s390x] always build relocatable kernel
- [arm64] syscall: Include asm/ptrace.h in syscall_wrapper header.
- nvme: quiet user passthrough command errors
- nvmet: fix memory leak in nvmet_subsys_attr_model_store_locked
- net: wwan: iosm: fix kernel test robot reported errors
- drm/amd/display: Zeromem mypipe heap struct before using it
- drm/amd/display: Fix FCLK deviation and tool compile issues
- drm/amd/display: Fix gpio port mapping issue
- Revert "drm/amdgpu: Revert "drm/amdgpu: getting fan speed pwm for vega10
properly""
- drm/amdgpu: Drop eviction lock when allocating PT BO
- drm/amd/display: only fill dirty rectangles when PSR is enabled
- ALSA: usb-audio: add quirk to fix Hamedal C20 disconnect issue
- [riscv64] vdso: Do not add missing symbols to version section in linker
script
- [mips*] pic32: treat port as signed integer
- io_uring/poll: lockdep annote io_poll_req_insert_locked
- xfrm: fix "disable_policy" on ipv4 early demux
- [arm64] dts: rockchip: fix quartz64-a bluetooth configuration
- xfrm: replay: Fix ESN wrap around for GSO
- af_key: Fix send_acquire race with pfkey_register
- [arm64,armhf] ASoC: sgtl5000: Reset the CHIP_CLK_CTRL reg on remove
- ASoC: soc-pcm: Don't zero TDM masks in __soc_pcm_open()
- [x86] hyperv: Restore VP assist page after cpu offlining/onlining
- scsi: storvsc: Fix handling of srb_status and capacity change events
- [amd64,arm64] PCI: hv: Only reuse existing IRTE allocation for Multi-MSI
- [arm64] dts: rockchip: Fix Pine64 Quartz4-B PMIC interrupt
- [x86] ASoC: max98373: Add checks for devm_kcalloc
- regulator: core: fix kobject release warning and memory leak in
regulator_register()
- regulator: core: fix UAF in destroy_regulator()
- [arm64,armhf] bus: sunxi-rsb: Remove the shutdown callback
- [arm64,armhf] bus: sunxi-rsb: Support atomic transfers
- [arm64] tee: optee: fix possible memory leak in optee_register_device()
- net: liquidio: simplify if expression
- ipvlan: hold lower dev to avoid possible use-after-free
- rxrpc: Fix race between conn bundle lookup and bundle removal
[ZDI-CAN-15975]
- nfc/nci: fix race with opening and closing
- [i386] net: pch_gbe: fix potential memleak in pch_gbe_tx_queue()
- 9p/fd: fix issue of list_del corruption in p9_fd_cancel()
- netfilter: conntrack: Fix data-races around ct mark
- netfilter: nf_tables: do not set up extensions for end interval
- iavf: Fix a crash during reset task
- iavf: Do not restart Tx queues after reset task failure
- iavf: remove INITIAL_MAC_SET to allow gARP to work properly
- iavf: Fix race condition between iavf_shutdown and iavf_remove
- [armhf] dts: imx6q-prti6q: Fix ref/tcxo-clock-frequency properties
- net/mlx4: Check retval of mlx4_bitmap_init
- [arm64,armhf] net: mvpp2: fix possible invalid pointer dereference
- net/qla3xxx: fix potential memleak in ql3xxx_send()
- [i386] net: pch_gbe: fix pci device refcount leak while module exiting
- nfp: fill splittable of devlink_port_attrs correctly
- nfp: add port from netdev validation for EEPROM access
- bonding: fix ICMPv6 header handling when receiving IPv6 messages
- macsec: Fix invalid error code set
- [x86] drm/i915: Fix warn in intel_display_power_*_domain() functions
- Drivers: hv: vmbus: fix double free in the error path of
vmbus_add_channel_work()
- Drivers: hv: vmbus: fix possible memory leak in vmbus_device_register()
- netfilter: ipset: regression in ip_set_hash_ip.c
- net/mlx5: Do not query pci info while pci disabled
- net/mlx5: Fix FW tracer timestamp calculation
- net/mlx5: SF: Fix probing active SFs during driver probe phase
- net/mlx5: cmdif, Print info on any firmware cmd failure to tracepoint
- net/mlx5: Fix handling of entry refcount when command is not issued to FW
- net/mlx5: E-Switch, Set correctly vport destination
- net/mlx5: Fix sync reset event handler error flow
- net/mlx5e: Offload rule only when all encaps are valid
- net: phy: at803x: fix error return code in at803x_probe()
- tipc: set con sock in tipc_conn_alloc
- tipc: add an extra conn_get in tipc_conn_alloc
- tipc: check skb_linearize() return value in tipc_disc_rcv()
- zonefs: Fix race between modprobe and mount
- xfrm: Fix oops in __xfrm_state_delete()
- xfrm: Fix ignored return value in xfrm6_init()
- net: wwan: iosm: use ACPI_FREE() but not kfree() in
ipc_pcie_read_bios_cfg()
- sfc: fix potential memleak in __ef100_hard_start_xmit()
- net: sched: allow act_ct to be built without NF_NAT
- NFC: nci: fix memory leak in nci_rx_data_packet()
- [armhf] regulator: twl6030: re-add TWL6032_SUBCLASS
- bnx2x: fix pci device refcount leak in bnx2x_vf_is_pcie_pending()
- [x86] cpufreq: amd-pstate: change amd-pstate driver to be built-in type
- netfilter: ipset: restore allowing 64 clashing elements in hash:net,iface
- netfilter: flowtable_offload: add missing locking
- fs: do not update freeing inode i_io_list
- blk-mq: fix queue reference leak on blk_mq_alloc_disk_for_queue failure
- dccp/tcp: Reset saddr on failure after inet6?_hash_connect().
- ipv4: Fix error return code in fib_table_insert()
- [x86] arcnet: fix potential memory leak in com20020_probe()
- [s390x] ap: fix memory leak in ap_init_qci_info()
- [s390x] dasd: fix no record found for raw_track_access
- fscache: fix OOB Read in __fscache_acquire_volume
- [arm64] net: enetc: cache accesses to &priv->si->hw
- [arm64] net: enetc: preserve TX ring priority across reconfiguration
- virtio_net: Fix probe failed when modprobe virtio_net
- [arm64] net: thunderx: Fix the ACPI memory leak
- io_uring/filetable: fix file reference underflow
- io_uring/poll: fix poll_refs race with cancelation
- lib/vdso: use "grep -E" instead of "egrep"
- can: gs_usb: remove dma allocations
- [armhf] usb: dwc3: exynos: Fix remove() function
- cifs: fix missing unlock in cifs_file_copychunk_range()
- cifs: Use after free in debug code
- ext4: fix use-after-free in ext4_ext_shift_extents
- [arm64] dts: rockchip: lower rk3399-puma-haikou SD controller clock
frequency
- [armhf] iio: adc: aspeed: Remove the trim valid dts property.
- iio: light: apds9960: fix wrong register for gesture gain
- iio: core: Fix entry not deleted when iio_register_sw_trigger_type() fails
- iio: accel: bma400: Fix memory leak in bma400_get_steps_reg()
- [amd64] virt/sev-guest: Prevent IV reuse in the SNP guest driver
- [x86] cpufreq: amd-pstate: cpufreq: amd-pstate: reset MSR_AMD_PERF_CTL
register at init
- zonefs: Fix active zone accounting
- [arm64,armhf] spi: spi-imx: Fix spi_bus_clk if requested clock is higher
than input clock
- [arm64,armhf] spi: spi-imx: spi_imx_transfer_one(): check for DMA transfer
first
- NFSD: Fix reads with a non-zero offset that don't end on a page boundary
- drm/amdgpu: Enable SA software trap.
- drm/amd/display: Added debug option for forcing subvp num ways
- drm/amd/display: Add debug option for allocating extra way for cursor
- drm/amd/display: Update MALL SS NumWays calculation
- drm/amd/display: Fix calculation for cursor CAB allocation
- [arm64,armhf] usb: dwc3: gadget: conditionally remove requests
- [arm64,armhf] usb: dwc3: gadget: Return -ESHUTDOWN on ep disable
- [arm64,armhf] usb: dwc3: gadget: Clear ep descriptor last
- io_uring: cmpxchg for poll arm refs release
- io_uring: make poll refs more robust
- io_uring: clear TIF_NOTIFY_SIGNAL if set and task_work not available
- nilfs2: fix nilfs_sufile_mark_dirty() not set segment usage as dirty
- mm/cgroup/reclaim: fix dirty pages throttling on cgroup v1
- mm: vmscan: fix extreme overreclaim and swap floods
- [x86] KVM: x86/mmu: Fix race condition in direct_page_fault
(CVE-2022-45869)
- [x86] KVM: x86/xen: Only do in-kernel acceleration of hypercalls for guest
CPL0
- [x86] KVM: x86/xen: Validate port number in SCHEDOP_poll
- [x86] drm/i915/gvt: Get reference to KVM iff attachment to VM is
successful
- [x86] KVM: x86: nSVM: leave nested mode on vCPU free
- [x86] KVM: x86: forcibly leave nested mode on vCPU reset (CVE-2022-3344)
- [x86] KVM: x86: nSVM: harden svm_free_nested against freeing vmcb02 while
still in use (CVE-2022-3344)
- [x86] KVM: x86: add kvm_leave_nested
- [x86] KVM: x86: remove exit_int_info warning in svm_handle_exit
- [x86] KVM: Update gfn_to_pfn_cache khva when it moves within the same page
- [x86] tsx: Add a feature bit for TSX control MSR support
- [x86] pm: Add enumeration check before spec MSRs save/restore setup
- [x86] ioremap: Fix page aligned size calculation in __ioremap_caller()
- mm: fix unexpected changes to {failslab|fail_page_alloc}.attr
- mm: correctly charge compressed memory to its memcg
- Input: synaptics - switch touchpad on HP Laptop 15-da3001TU to RMI mode
- [x86] ASoC: amd: yc: Add Alienware m17 R5 AMD into DMI table
- [x86] ASoC: Intel: bytcht_es8316: Add quirk for the Nanote UMPC-01
- [x86] ASoC: Intel: soc-acpi: add ES83x6 support to IceLake
- ASoC: hda: intel-dsp-config: add ES83x6 quirk for IceLake
- [x86] ASoC: SOF: ipc3-topology: use old pipeline teardown flow with SOF2.1
and older
- Revert "tty: n_gsm: avoid call of sleeping functions from atomic context"
- Revert "tty: n_gsm: replace kicktimer with delayed_work"
- Input: goodix - try resetting the controller when no config is set
- bpf: Convert BPF_DISPATCHER to use static_call() (not ftrace)
- [x86] Input: soc_button_array - add use_low_level_irq module parameter
- [x86] Input: soc_button_array - add Acer Switch V 10 to
dmi_use_low_level_irq[]
- Input: i8042 - apply probe defer to more ASUS ZenBook models
- xen-pciback: Allow setting PCI_MSIX_FLAGS_MASKALL too
- [x86] xen/platform-pci: add missing free_irq() in error path
- [x86] platform/x86: thinkpad_acpi: Enable s2idle quirk for 21A1 machine
type
- [x86] platform/x86: asus-wmi: add missing pci_dev_put() in
asus_wmi_set_xusb2pr()
- [x86] platform/x86: acer-wmi: Enable SW_TABLET_MODE on Switch V 10
(SW5-017)
- [x86] platform/surface: aggregator_registry: Add support for Surface Pro 9
- drm/amd/display: use uclk pstate latency for fw assisted mclk validation
dcn32
- drm/amdgpu: disable BACO support on more cards
- zonefs: fix zone report size in __zonefs_io_error()
- [x86] platform/surface: aggregator_registry: Add support for Surface
Laptop 5
- [x86] platform/x86: hp-wmi: Ignore Smart Experience App event
- [x86] platform/x86: ideapad-laptop: Fix interrupt storm on fn-lock toggle
on some Yoga laptops
- [x86] platform/x86: ideapad-laptop: Add module parameters to match DMI
quirk tables
- tcp: configurable source port perturb table size
- block: make blk_set_default_limits() private
- dm-integrity: set dma_alignment limit in io_hints
- dm-log-writes: set dma_alignment limit in io_hints
- net: usb: qmi_wwan: add Telit 0x103a composition
- scsi: iscsi: Fix possible memory leak when device_register() failed
- [arm64,armhf] gpu: host1x: Avoid trying to use GART on Tegra20
- dm integrity: flush the journal on suspend
- dm integrity: clear the journal on suspend
- fuse: lock inode unconditionally in fuse_fallocate()
- btrfs: free btrfs_path before copying root refs to userspace
- btrfs: free btrfs_path before copying inodes to userspace
- btrfs: free btrfs_path before copying fspath to userspace
- btrfs: free btrfs_path before copying subvol info to userspace
- btrfs: zoned: fix missing endianness conversion in sb_write_pointer
- btrfs: use kvcalloc in btrfs_get_dev_zone_info
- btrfs: sysfs: normalize the error handling branch in btrfs_init_sysfs()
- btrfs: do not modify log tree while holding a leaf from fs tree locked
- [x86] drm/i915/ttm: never purge busy objects
- drm/display/dp_mst: Fix drm_dp_mst_add_affected_dsc_crtcs() return code
- drm/amd/display: No display after resume from WB/CB
- drm/amdgpu/psp: don't free PSP buffers on suspend
- drm/amdgpu: Enable Aldebaran devices to report CU Occupancy
- drm/amd/amdgpu: reserve vm invalidation engine for firmware
- drm/amd/display: Update soc bounding box for dcn32/dcn321
- drm/amdgpu: always register an MMU notifier for userptr
- drm/amdgpu: Partially revert "drm/amdgpu: update drm_display_info
correctly when the edid is read"
- bpf: Add explicit cast to 'void *' for __BPF_DISPATCHER_UPDATE()
https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.0.12
- btrfs: qgroup: fix sleep from invalid context bug in
btrfs_qgroup_inherit()
- drm/amdgpu: move setting the job resources
- drm/amdgpu: cleanup error handling in amdgpu_cs_parser_bos
- drm/amdgpu: fix userptr HMM range handling v2
- drm/amd/pm: add smu_v13_0_10 driver if version
- drm/amd/pm: update driver-if header for smu_v13_0_10
- drm/amd/pm: update driver if header for smu_13_0_7
- [arm64] clk: qcom: gdsc: add missing error handling
- [arm64] clk: qcom: gdsc: Remove direct runtime PM calls
- bpf, perf: Use subprog name when reporting subprog ksymbol
- scripts/faddr2line: Fix regression in name resolution on ppc64le
- [x86] hwmon: (i5500_temp) fix missing pci_disable_device()
- hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails
- [arm64,armhf] clocksource/drivers/arm_arch_timer: Fix XGene-1 TVAL
register math error
- bpf: Do not copy spin lock field from user in bpf_selem_alloc
- of: property: decrement node refcount in of_fwnode_get_reference_args()
- ixgbevf: Fix resource leak in ixgbevf_init_module()
- i40e: Fix error handling in i40e_init_module()
- iavf: Fix error handling in iavf_init_module()
- e100: Fix possible use after free in e100_xmit_prepare
- net/mlx5: DR, Fix uninitialized var warning
- net/mlx5: E-switch, Destroy legacy fdb table when needed
- net/mlx5: E-switch, Fix duplicate lag creation
- net/mlx5: Fix uninitialized variable bug in outlen_write()
- net/mlx5e: Fix use-after-free when reverting termination table
- can: sja1000_isa: sja1000_isa_probe(): add missing free_sja1000dev()
- [i386] can: cc770: cc770_isa_probe(): add missing free_cc770dev()
- vfs: fix copy_file_range() averts filesystem freeze protection
- qlcnic: fix sleep-in-atomic-context bugs caused by msleep
- aquantia: Do not purge addresses when setting the number of rings
- wifi: cfg80211: fix buffer overflow in elem comparison
- wifi: cfg80211: don't allow multi-BSSID in S1G
- wifi: mac8021: fix possible oob access in ieee80211_get_rate_duration
- net: phy: fix null-ptr-deref while probe() failed
- net: net_netdev: Fix error handling in ntb_netdev_init_module()
- net/9p: Fix a potential socket leak in p9_socket_open
- net: wwan: iosm: fix kernel test robot reported error
- net: wwan: iosm: fix dma_alloc_coherent incompatible pointer type
- net: wwan: iosm: fix crash in peek throughput test
- net: wwan: iosm: fix incorrect skb length
- mptcp: don't orphan ssk in mptcp_close()
- mptcp: fix sleep in atomic at close time
- tipc: re-fetch skb cb after tipc_msg_validate
- net: mdiobus: fix unbalanced node reference count
- afs: Fix fileserver probe RTT handling
- net: tun: Fix use-after-free in tun_detach()
- net/mlx5: Lag, Fix for loop when checking lag
- packet: do not set TP_STATUS_CSUM_VALID on CHECKSUM_COMPLETE
- sctp: fix memory leak in sctp_stream_outq_migrate()
- afs: Fix server->active leak in afs_put_server
- [x86] hwmon: (coretemp) Check for null before removing sysfs attrs
- [x86] hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new()
- [x86] hwmon: (asus-ec-sensors) Add checks for devm_kcalloc
- [riscv64] vdso: fix section overlapping under some conditions
- [riscv64] mm: Proper page permissions after initmem free
- ALSA: dice: fix regression for Lexicon I-ONIX FW810S
- nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry()
- [x86] bugs: Make sure MSR_SPEC_CTRL is updated properly upon resume from
S3
- [x86] pinctrl: intel: Save and restore pins in "direct IRQ" mode
- v4l2: don't fall back to follow_pfn() if pin_user_pages_fast() fails
- mm: migrate: fix THP's mapcount on isolation
- net: stmmac: Set MAC's flow control register to reflect current settings
- mmc: core: Fix ambiguous TRIM and DISCARD arg
- [amd64,armhf] mmc: sdhci-esdhc-imx: correct CQHCI exit halt state check
- mmc: sdhci: Fix voltage switch delay
- drm/amdgpu: temporarily disable broken Clang builds due to blown
stack-frame
- drm/amdgpu: enable Vangogh VCN indirect sram mode
- [x86] drm/i915: Fix negative value passed as remaining time
- [x86] drm/i915: Never return 0 if not all requests retired
- tracing/osnoise: Fix duration type
- tracing: Fix race where histograms can be called before the event
- tracing: Free buffers when a used dynamic event is removed
- ASoC: ops: Fix bounds check for _sx controls
- [arm64,armhf] pinctrl: single: Fix potential division by zero
- [riscv64] Sync efi page table's kernel mappings before switching
- [riscv64] fix race when vmap stack overflow
- [riscv64] kexec: Fixup irq controller broken in kexec crash path
- nvme: fix SRCU protection of nvme_ns_head list
- [amd64] iommu/vt-d: Fix PCI device refcount leak in has_external_pci()
- [amd64] iommu/vt-d: Fix PCI device refcount leak in dmar_dev_scope_init()
- ipv4: Handle attempt to delete multipath route when fib_info contains an
nh reference (CVE-2022-3435)
- ipv4: Fix route deletion when nexthop info is not specified
- i2c: Restore initial power state if probe fails
- [arm64] i2c: qcom-geni: fix error return code in geni_i2c_gpi_xfer
- [arm64,armhf] i2c: imx: Only DMA messages with I2C_M_DMA_SAFE flag set
- [amd64,arm64] ACPI: HMAT: remove unnecessary variable initialization
- [amd64,arm64] ACPI: HMAT: Fix initiator registration for single-initiator
systems
- char: tpm: Protect tpm_pm_suspend with locks
- ipc/sem: Fix dangling sem_array access in semtimedop race
- proc: avoid integer type confusion in get_proc_long
- proc: proc_skip_spaces() shouldn't think it is working on C strings
.
[ Salvatore Bonaccorso ]
* [rt] Refresh "serial: 8250: implement write_atomic"
* Bump ABI to 6
* [s390x] debian/config: Drop explicit enable of RELOCATABLE.
* [x86] drivers/cpufreq: Change X86_AMD_PSTATE from module to built-in
* xen/netback: Ensure protocol headers don't fall in the non-linear area
(XSA-423, CVE-2022-3643)
* xen/netback: don't call kfree_skb() with interrupts disabled (XSA-424,
CVE-2022-42328, CVE-2022-42329)
.
linux (6.0.10-2) unstable; urgency=medium
.
* [x86] drm/i915: fix TLB invalidation for Gen12 video and compute engines
(CVE-2022-4139)
.
linux (6.0.10-1) unstable; urgency=medium
.
* New upstream stable update:
https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.0.9
- [x86] thunderbolt: Add DP OUT resource when DP tunnel is discovered
- [x86] drm/i915/gvt: Add missing vfio_unregister_group_dev() call
- KVM: debugfs: Return retval of simple_attr_open() if it fails
- [x86] drm/i915: Allow more varied alternate fixed modes for panels
- [x86] drm/i915: Simplify intel_panel_add_edid_alt_fixed_modes()
- [x86] drm/i915/sdvo: Grab mode_config.mutex during LVDS init to avoid
WARNs
- drm/amd/display: Acquire FCLK DPM levels on DCN32
- drm/amd/display: Limit dcn32 to 1950Mhz display clock
- drm/amd/display: Set memclk levels to be at least 1 for dcn32
- HID: wacom: Fix logic used for 3rd barrel switch emulation
- [armhf] phy: stm32: fix an error code in probe
- wifi: cfg80211: silence a sparse RCU warning
- wifi: cfg80211: fix memory leak in query_regdb_file()
- soundwire: qcom: reinit broadcast completion
- soundwire: qcom: check for outanding writes before doing a read
- bpf, verifier: Fix memory leak in array reallocation for stack state
- bpf, sockmap: Fix the sk->sk_forward_alloc warning of
sk_stream_kill_queues
- wifi: mac80211: fix general-protection-fault in
ieee80211_subif_start_xmit()
- wifi: mac80211: Set TWT Information Frame Disabled bit as 1
- bpftool: Fix NULL pointer dereference when pin {PROG, MAP, LINK} without
FILE
- [x86,arm64] HID: hyperv: fix possible memory leak in mousevsc_probe()
- [arm*] drm/vc4: hdmi: Fix HSM clock too low on Pi4
- bpf, sock_map: Move cancel_work_sync() out of sock lock
- [amd64,arm64] PCI: hv: Fix the definition of vector in
hv_compose_msi_msg()
- bpf: Add helper macro bpf_for_each_reg_in_vstate
- bpf: Fix wrong reg type conversion in release_reference()
- net: gso: fix panic on frag_list with mixed head alloc types
- macsec: delete new rxsc when offload fails
- macsec: fix secy->n_rx_sc accounting
- macsec: fix detection of RXSCs when toggling offloading
- macsec: clear encryption keys from the stack after setting up offload
- net: tun: Fix memory leaks of napi_get_frags
- bnxt_en: Fix possible crash in bnxt_hwrm_set_coal()
- bnxt_en: fix potentially incorrect return value for ndo_rx_flow_steer
- capabilities: fix undefined behavior in bit shift for CAP_TO_MASK
- [s390x] KVM: s390: pv: don't allow userspace to set the clock under PV
- [s390x] KVM: s390: pci: Fix allocation size of aift kzdev elements
- hamradio: fix issue of dev reference count leakage in bpq_device_event()
- [amd64] net: wwan: iosm: fix memory leak in ipc_wwan_dellink
- net: wwan: mhi: fix memory leak in mhi_mbim_dellink
- [arm*] drm/vc4: Fix missing platform_unregister_drivers() call in
vc4_drm_register()
- tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent
- [x86] platform/x86: p2sb: Don't fail if unknown CPU is found
- ipv6: addrlabel: fix infoleak when sending struct ifaddrlblmsg to network
- can: af_can: fix NULL pointer dereference in can_rx_register()
- [x86] drm/i915/psr: Send update also on invalidate
- [x86] drm/i915: Do not set cache_dirty for DGFX
- [arm64,armhf] net: stmmac: dwmac-meson8b: fix
meson8b_devm_clk_prepare_enable()
- tipc: fix the msg->req tlv len check in
tipc_nl_compat_name_table_dump_header
- [amd64] dmanegine: idxd: reformat opcap output to match bitmap_parse()
input
- [amd64] dmaengine: idxd: Fix max batch size for Intel IAA
- [amd64] dmaengine: idxd: fix RO device state error after been
disabled/reset
- [arm64] dmaengine: mv_xor_v2: Fix a resource leak in mv_xor_v2_remove()
- [armhf] dmaengine: stm32-dma: fix potential race between pause and resume
- [arm64] drivers: net: xgene: disable napi when register irq failed in
xgene_enet_open()
- netfilter: nfnetlink: fix potential dead lock in nfnetlink_rcv_msg()
- netfilter: Cleanup nft_net->module_list from nf_tables_exit_net()
- net: tun: call napi_schedule_prep() to ensure we own a napi
- [amd64] net: wwan: iosm: fix memory leak in ipc_pcie_read_bios_cfg
- [amd64] net: wwan: iosm: fix invalid mux header type
- net/mlx5: Bridge, verify LAG state when adding bond to bridge
- net/mlx5: Allow async trigger completion execution on single CPU systems
- net/mlx5: E-switch, Set to legacy mode if failed to change switchdev mode
- net/mlx5: fw_reset: Don't try to load device in case PCI isn't working
- net/mlx5e: Add missing sanity checks for max TX WQE size
- net/mlx5e: Fix tc acts array not to be dependent on enum order
- net/mlx5e: TC, Fix wrong rejection of packet-per-second policing
- net/mlx5e: E-Switch, Fix comparing termination table instance
- ice: Fix spurious interrupt during removal of trusted VF
- iavf: Fix VF driver counting VLAN 0 filters
- [armhf] net: cpsw: disable napi in cpsw_ndo_open()
- net: cxgb3_main: disable napi when bind qsets failed in cxgb_up()
- [x86] stmmac: intel: Update PCH PTP clock rate from 200MHz to 204.8MHz
- mctp: Fix an error handling path in mctp_init()
- cxgb4vf: shut down the adapter when t4vf_update_port_info() failed in
cxgb4vf_open()
- net: phy: mscc: macsec: clear encryption keys when freeing a flow
- net: atlantic: macsec: clear encryption keys from the stack
- ethernet: s2io: disable napi when start nic failed in s2io_card_up()
- [armel,armhf] net: mv643xx_eth: disable napi when init rxq or txq failed
in mv643xx_eth_open()
- ALSA: memalloc: Don't fall back for SG-buffer with IOMMU
- net: macvlan: fix memory leaks of macvlan_common_newlink
- [riscv64] process: fix kernel info leakage
- [riscv64] vdso: fix build with llvm
- [riscv64] fix reserved memory setup
- [arm64] efi: Fix handling of misaligned runtime regions and drop warning
- [mips*] jump_label: Fix compat branch range check
- drm/amdgpu: Fix the lpfn checking condition in drm buddy
- [arm64] mmc: sdhci-of-arasan: Fix SDHCI_RESET_ALL for CQHCI
- [arm64,armhf] mmc: sdhci-tegra: Fix SDHCI_RESET_ALL for CQHCI
- [arm64,armhf] mmc: sdhci-esdhc-imx: use the correct host caps for
MMC_CAP_8_BIT_DATA
- ALSA: hda/hdmi - enable runtime pm for more AMD display audio
- ALSA: hda/ca0132: add quirk for EVGA Z390 DARK
- ALSA: hda: fix potential memleak in 'add_widget_node'
- ALSA: hda/realtek: Add quirk for ASUS Zenbook using CS35L41
- ALSA: hda/realtek: Add Positivo C6300 model quirk
- ALSA: usb-audio: Yet more regression for for the delayed card registration
- ALSA: usb-audio: Add quirk entry for M-Audio Micro
- ALSA: usb-audio: Add DSD support for Accuphase DAC-60
- vmlinux.lds.h: Fix placement of '.data..decrypted' section
- ata: libata-scsi: fix SYNCHRONIZE CACHE (16) command failure
- nilfs2: fix deadlock in nilfs_count_free_blocks()
- nilfs2: fix use-after-free bug of ns_writer on remount
- [x86] drm/i915/dmabuf: fix sg_table handling in map_dma_buf
- drm/amd/display: Fix reg timeout in enc314_enable_fifo
- drm/amd/pm: update SMU IP v13.0.4 msg interface header
- drm/amd/display: Update SR watermarks for DCN314
- drm/amdgpu: workaround for TLB seq race
- drm/amdgpu: disable BACO on special BEIGE_GOBY card
- [x86] platform/x86: hp_wmi: Fix rfkill causing soft blocked wifi
- btrfs: fix match incorrectly in dev_args_match_device
- btrfs: zoned: clone zoned device info when cloning a device
- btrfs: zoned: initialize device's zone info for seeding
- io_uring: check for rollover of buffer ID when providing buffers
- [arm64] phy: qcom-qmp-combo: fix NULL-deref on runtime resume
- [arm64,armhf] mms: sdhci-esdhc-imx: Fix SDHCI_RESET_ALL for CQHCI
- udf: Fix a slab-out-of-bounds write bug in udf_find_entry()
- [x86] arch/x86/mm/hugetlbpage.c: pud_huge() returns 0 when using 2-level
paging (Closes: #1023025)
- [amd64,arm64] mm: hugetlb_vmemmap: include missing linux/moduleparam.h
- dmaengine: idxd: Do not enable user type Work Queue without Shared Virtual
Addressing
- [amd64] mm/memremap.c: map FS_DAX device memory as decrypted
- mm/shmem: use page_mapping() to detect page cache for uffd continue
- can: j1939: j1939_send_one(): fix missing CAN header initialization
- can: isotp: fix tx state handling for echo tx processing
- [x86] KVM: x86/mmu: Block all page faults during kvm_zap_gfn_range()
- [x86] KVM: x86/pmu: Do not speculatively query Intel GP PMCs that don't
exist yet
- [x86] KVM: x86: use a separate asm-offsets.c file
- [x86] KVM: SVM: replace regs argument of __svm_vcpu_run() with vcpu_svm
- [x86] KVM: SVM: adjust register allocation for __svm_vcpu_run()
- [x86] KVM: SVM: Only dump VMSA to klog at KERN_DEBUG level
- [x86] KVM: SVM: retrieve VMCB from assembly
- [x86] KVM: SVM: move guest vmsave/vmload back to assembly
- can: dev: fix skb drop check
- ALSA: memalloc: Try dma_alloc_noncontiguous() at first
- [x86] cpu: Restore AMD's DE_CFG MSR after resume
https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.0.10
- [arm64] drm/msm/gpu: Fix crash during system suspend after unbind
- [x86] ASoC: rt5682s: Fix the TDM Tx settings
- [x86] ASoC: Intel: sof_sdw: add quirk variant for LAPBC710 NUC15

[continued in next message]

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)