Thank you for your contribution to Debian.



Accepted:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 16 Aug 2023 22:52:03 +0200
Source: linux-signed-arm64
Architecture: source
Version: 5.10.191+1
Distribution: bullseye-security
Urgency: high
Maintainer: Debian Kernel Team <debian-kernel@lists.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Changes:
linux-signed-arm64 (5.10.191+1) bullseye-security; urgency=high
.
* Sign kernel from linux 5.10.191-1
.
* New upstream stable update:
https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.180
- seccomp: Move copy_seccomp() to no failure path.
- [arm64] KVM: arm64: Fix buffer overflow in kvm_arm_set_fw_reg()
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
(CVE-2023-1380)
- drm/fb-helper: set x/yres_virtual in drm_fb_helper_check_var
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
(CVE-2023-2002)
- [x86] fpu: Prevent FPU state corruption
- USB: serial: option: add UNISOC vendor and TOZED LT70C product
- driver core: Don't require dynamic_debug for initcall_debug probe timing
- [x86] ASoC: Intel: bytcr_rt5640: Add quirk for the Acer Iconia One 7
B1-750
- asm-generic/io.h: suppress endianness warnings for readq() and writeq()
- wireguard: timers: cast enum limits members to int in prints
- PCI: pciehp: Fix AB-BA deadlock between reset_lock and device_lock
- [arm64] PCI: qcom: Fix the incorrect register usage in v2.7.0 config
- [arm64,armhf] USB: dwc3: fix runtime pm imbalance on probe errors
- [arm64,armhf] USB: dwc3: fix runtime pm imbalance on unbind
- [x86] hwmon: (k10temp) Check range scale when CUR_TEMP register is
read-write
- hwmon: (adt7475) Use device_property APIs when configuring polarity
- posix-cpu-timers: Implement the missing timer_wait_running callback
- perf sched: Cast PTHREAD_STACK_MIN to int as it may turn into
sysconf(__SC_THREAD_STACK_MIN_VALUE)
- blk-mq: release crypto keyslot before reporting I/O complete
- blk-crypto: make blk_crypto_evict_key() return void
- blk-crypto: make blk_crypto_evict_key() more robust
- ext4: use ext4_journal_start/stop for fast commit transactions
- xhci: fix debugfs register accesses while suspended
- tick/nohz: Fix cpu_is_hotpluggable() by checking with nohz subsystem
- [mips*] fw: Allow firmware to pass a empty env
- ipmi:ssif: Add send_retries increment
- ipmi: fix SSIF not responding under certain cond.
- kheaders: Use array declaration instead of char
- [arm64,armhf] pwm: meson: Fix axg ao mux parents
- [arm64,armhf] pwm: meson: Fix g12a ao clk81 name
- ring-buffer: Sync IRQ works before buffer destruction
- crypto: api - Demote BUG_ON() in crypto_unregister_alg() to a WARN_ON()
- [arm64] crypto: safexcel - Cleanup ring IRQ workqueues on load failure
- rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being
kprobe-ed
- reiserfs: Add security prefix to xattr name in reiserfs_security_write()
- [x86] KVM: nVMX: Emulate NOPs in L2, and PAUSE if it's not intercepted
- relayfs: fix out-of-bounds access in relay_file_read (CVE-2023-3268)
- writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
- [armhf] i2c: omap: Fix standard mode false ACK readings
- [amd64] iommu/amd: Fix "Guest Virtual APIC Table Root Pointer"
configuration in IRTE
- Revert "ubifs: dirty_cow_znode: Fix memleak in error handling path"
- ubifs: Fix memleak when insert_old_idx() failed
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- ubifs: Free memory for tmpfile name
- nilfs2: do not write dirty data after degenerating to read-only
- nilfs2: fix infinite loop in nilfs_mdt_get_block()
- md/raid10: fix null-ptr-deref in raid10_sync_request
- [arm64] mailbox: zynqmp: Fix IPI isr handling
- [arm64] mailbox: zynqmp: Fix typo in IPI documentation
- wifi: rtl8xxxu: RTL8192EU always needs full init
- [arm64,armhf] clk: rockchip: rk3399: allow clk_cifout to force
clk_cifout_src to reparent
- rcu: Fix missing TICK_DEP_MASK_RCU_EXP dependency check
- selinux: fix Makefile dependencies of flask.h
- selinux: ensure av_permissions.h is built when needed
- tpm, tpm_tis: Do not skip reset of original interrupt vector
- tpm, tpm_tis: Claim locality before writing TPM_INT_ENABLE register
- tpm, tpm_tis: Disable interrupts if tpm_tis_probe_irq() failed
- tpm, tpm_tis: Claim locality before writing interrupt registers
- tpm, tpm: Implement usage counter for locality
- tpm, tpm_tis: Claim locality when interrupts are reenabled on resume
- erofs: stop parsing non-compact HEAD index if clusterofs is invalid
- erofs: fix potential overflow calculating xattr_isize
- [arm64,armhf] drm/rockchip: Drop unbalanced obj unref
- drm/vgem: add missing mutex_destroy
- drm/probe-helper: Cancel previous job before starting new one
- [arm64] drm/msm/disp/dpu: check for crtc enable rather than crtc active to
release shared resources
- [amd64] EDAC/skx: Fix overflows on the DRAM row address mapping arrays
- [x86] MCE/AMD: Use an u64 for bank_map
- [arm64] firmware: qcom_scm: Clear download bit during reboot
- [arm64] drm/bridge: adv7533: Fix adv7533_mode_valid for adv7533 and
adv7535
- [arm64] drm/msm/adreno: Defer enabling runpm until hw_init()
- [arm64] drm/msm/adreno: drop bogus pm_runtime_set_active()
- [arm64] drm: msm: adreno: Disable preemption on Adreno 510
- [x86] ACPI: processor: Fix evaluating _PDC method when running as Xen dom0
- [arm64] mmc: sdhci-of-esdhc: fix quirk to ignore command inhibit for data
- [arm64,armhf] drm/lima/lima_drv: Add missing unwind goto in
lima_pdev_probe()
- regulator: core: Consistently set mutex_owner when using
ww_mutex_lock_slow()
- regulator: core: Avoid lockdep reports when resolving supplies
- media: dm1105: Fix use after free bug in dm1105_remove due to race
condition (CVE-2023-35824)
- media: saa7134: fix use after free bug in saa7134_finidev due to race
condition (CVE-2023-35823)
- [x86] apic: Fix atomic update of offset in reserve_eilvt_offset()
- [x86] ioapic: Don't return 0 from arch_dynirq_lower_bound()
- debugobject: Prevent init race with static objects
- [x86] drm/i915: Make intel_get_crtc_new_encoder() less oopsy
- tick/sched: Use tick_next_period for lockless quick check
- tick/sched: Reduce seqcount held scope in tick_do_update_jiffies64()
- tick/sched: Optimize tick_do_update_jiffies64() further
- tick: Get rid of tick_period
- tick/common: Align tick period with the HZ tick.
- wifi: ath6kl: minor fix for allocation size
- wifi: ath9k: hif_usb: fix memory leak of remain_skbs
- wifi: ath5k: fix an off by one check in ath5k_eeprom_read_freq_list()
- wifi: ath6kl: reduce WARN to dev_dbg() in callback
- tools: bpftool: Remove invalid \' json escape
- wifi: rtw88: mac: Return the original error from rtw_pwr_seq_parser()
- wifi: rtw88: mac: Return the original error from rtw_mac_power_switch()
- bpf: take into account liveness when propagating precision
- bpf: fix precision propagation verbose logging
- scm: fix MSG_CTRUNC setting condition for SO_PASSSEC
- bpf: Remove misleading spec_v1 check on var-offset stack read
- vlan: partially enable SIOCSHWTSTAMP in container
- net/packet: annotate accesses to po->xmit
- net/packet: convert po->origdev to an atomic flag
- net/packet: convert po->auxdata to an atomic flag
- scsi: target: Rename struct sense_info to sense_detail
- scsi: target: Rename cmd.bad_sector to cmd.sense_info
- scsi: target: Make state_list per CPU
- scsi: target: Fix multiple LUN_RESET handling
- scsi: target: iscsit: Fix TAS handling during conn cleanup
- scsi: megaraid: Fix mega_cmd_done() CMDID_INT_CMDS
- f2fs: handle dqget error in f2fs_transfer_project_quota()
- f2fs: enforce single zone capacity
- f2fs: apply zone capacity to all zone type
- f2fs: compress: fix to call f2fs_wait_on_page_writeback() in
f2fs_write_raw_pages()
- [arm64] crypto: caam - Clear some memory in instantiate_rng
- wifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_rfreg()
- wifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_reg()
- net: qrtr: correct types of trace event parameters
- bpftool: Fix bug for long instructions in program CFG dumps
- crypto: drbg - make drbg_prepare_hrng() handle jent instantiation errors
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- xsk: Fix unaligned descriptor validation
- f2fs: fix to avoid use-after-free for cached IPU bio
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
- [arm64,armhf] net: ethernet: stmmac: dwmac-rk: fix optional phy regulator
handling
- bpf, sockmap: fix deadlocks in the sockhash and sockmap
- nvme: handle the persistent internal error AER
- nvme: fix async event trace event
- bpf, sockmap: Revert buggy deadlock fix in the sockhash and sockmap
- md/raid10: fix leak of 'r10bio->remaining' for recovery
- md/raid10: fix memleak for 'conf->bio_split'
- md/raid10: fix memleak of md thread
- wifi: iwlwifi: yoyo: Fix possible division by zero
- wifi: iwlwifi: fw: move memset before early return
- jdb2: Don't refuse invalidation of already invalidated buffers
- wifi: iwlwifi: make the loop for card preparation effective
- wifi: iwlwifi: mvm: check firmware response size
- wifi: iwlwifi: fw: fix memory leak in debugfs
- ixgbe: Allow flow hash to be set via ethtool
- ixgbe: Enable setting RSS table to default values
- bpf: Don't EFAULT for getsockopt with optval=NULL
- netfilter: nf_tables: don't write table validation state without mutex
- net/sched: sch_fq: fix integer overflow of "credit"
- ipv4: Fix potential uninit variable access bug in __ip_make_skb()
- Revert "Bluetooth: btsdio: fix use after free bug in btsdio_remove due to
unfinished work"
- netlink: Use copy_to_user() for optval in netlink_getsockopt().
- net: amd: Fix link leak when verifying config failed
- tcp/udp: Fix memleaks of sk and zerocopy skbs with TX timestamp.
- pstore: Revert pmsg_lock back to a normal mutex
- [arm64,armhf] usb: dwc3: gadget: Change condition for processing suspend
event
- fpga: bridge: fix kernel-doc parameter description
- iio: light: max44009: add missing OF device matching
- [armhf] spi: spi-imx: using pm_runtime_resume_and_get instead of
pm_runtime_get_sync
- [armhf] spi: imx: Don't skip cleanup in remove's error path
- [armhf] PCI: imx6: Install the fault handler only on compatible match
- ASoC: es8316: Use IRQF_NO_AUTOEN when requesting the IRQ
- ASoC: es8316: Handle optional IRQ assignment
- linux/vt_buffer.h: allow either builtin or modular for macros
- [arm64] spi: qup: Don't skip cleanup in remove's error path
- [x86] vmci_host: fix a race condition in vmci_host_poll() causing GPF
- of: Fix modalias string generation
- [arm64,armhf] usb: chipidea: fix missing goto in `ci_hdrc_probe`
- [arm64] tty: serial: fsl_lpuart: adjust buffer length to the intended size
- serial: 8250: Add missing wakeup event reporting
- [x86] staging: rtl8192e: Fix W_DISABLE# does not work after stop/start
- [arm64] spmi: Add a check for remove callback when removing a SPMI driver
- [powerpc*] rtas: use memmove for potentially overlapping buffer copy
- perf/core: Fix hardlockup failure caused by perf throttle
- [amd64] RDMA/rdmavt: Delete unnecessary NULL check
- workqueue: Rename "delayed" (delayed by active management) to "inactive"
- workqueue: Fix hung time report of worker pools
- [armhf] rtc: omap: include header for omap_rtc_power_off_program prototype
- RDMA/mlx4: Prevent shift wrapping in set_user_sq_size()
- [arm64,armhf] rtc: meson-vrtc: Use ktime_get_real_ts64() to get the
current time
- clk: add missing of_node_put() in "assigned-clocks" property parsing
- RDMA/siw: Remove namespace check from siw_netdev_event()
- RDMA/cm: Trace icm_send_rej event before the cm state is reset
- RDMA/srpt: Add a check for valid 'mad_agent' pointer
- [amd64] IB/hfi1: Fix SDMA mmu_rb_node not being evicted in LRU order
- [amd64] IB/hfi1: Add AIP tx traces
- [amd64] IB/hfi1: Add additional usdma traces
- [amd64] IB/hfi1: Fix bugs with non-PAGE_SIZE-end multi-iovec user SDMA
requests
- NFSv4.1: Always send a RECLAIM_COMPLETE after establishing lease
- [arm*] firmware: raspberrypi: Introduce devm_rpi_firmware_get()
- RDMA/mlx5: Fix flow counter query via DEVX
- SUNRPC: remove the maximum number of retries in call_bind_status
- RDMA/mlx5: Use correct device num_ports when modify DC
- ext4: fix use-after-free read in ext4_find_extent for bigalloc + inline
- [arm64] dmaengine: mv_xor_v2: Fix an error code.
- [armhf] leds: tca6507: Fix error handling of using
fwnode_property_read_string
- [arm64,armhf] phy: tegra: xusb: Add missing tegra_xusb_port_unregister for
usb2_port and ulpi_port
- afs: Fix updating of i_size with dv jump from server
- btrfs: scrub: reject unsupported scrub flags
- [s390x] dasd: fix hanging blockdevice after request requeue
- dm integrity: call kmem_cache_destroy() in dm_integrity_init() error path
- dm flakey: fix a crash with invalid table line
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
(CVE-2023-2269)
- perf auxtrace: Fix address filter entire kernel size
- perf intel-pt: Fix CYC timestamps after standalone CBR
- [arm64] Always load shadow stack pointer directly from the task struct
- [arm64] Stash shadow stack pointer in the task struct on interrupt
- debugobject: Ensure pool refill (again)
- scsi: target: core: Avoid smp_processor_id() in preemptible code
- tty: create internal tty.h file
- tty: audit: move some local functions out of tty.h
- tty: move some internal tty lock enums and functions out of tty.h
- tty: move some tty-only functions to drivers/tty/tty.h
- tty: clean include/linux/tty.h up
- tty: Prevent writing chars during tcsetattr TCSADRAIN/FLUSH
- ring-buffer: Ensure proper resetting of atomic variables in
ring_buffer_reset_online_cpus
- [amd64] crypto: ccp - Clear PSP interrupt status register before calling
handler
- [arm64] mailbox: zynq: Switch to flexible array to simplify code
- [arm64] mailbox: zynqmp: Fix counts of child nodes
- dm verity: skip redundant verity_handle_err() on I/O errors
- dm verity: fix error handling for check_at_most_once on FEC
- scsi: qedi: Fix use after free bug in qedi_remove()
- [armhf] net/ncsi: clear Tx enable mode when handling a Config required AEN
- net/sched: cls_api: remove block_cb from driver_list before freeing
- sit: update dev->needed_headroom in ipip6_tunnel_bind_dev()
- [arm64,armhf] net: dsa: mv88e6xxx: add mv88e6321 rsvd2cpu
- writeback: fix call of incorrect macro
- [arm64,armhf] watchdog: dw_wdt: Fix the error handling path of
dw_wdt_drv_probe()
- net/sched: act_mirred: Add carrier check
- sfc: Fix module EEPROM reporting for QSFP modules
- rxrpc: Fix hard call timeout units
- af_packet: Don't send zero-byte data in packet_sendmsg_spkt().
- drm/amdgpu: add a missing lock for AMDGPU_SCHED
- ALSA: caiaq: input: Add error handling for unsupported input methods in
`snd_usb_caiaq_input_init`
- virtio_net: split free_unused_bufs()
- virtio_net: suppress cpu stall when free_unused_bufs
- [arm64] net: enetc: check the index of the SFI rather than the handle
- crypto: sun8i-ss - Fix a test in sun8i_ss_setup_ivs()
- btrfs: fix btrfs_prev_leaf() to not return the same key twice
- btrfs: don't free qgroup space unless specified
- btrfs: print-tree: parent bytenr must be aligned to sector size
- cifs: fix pcchunk length type in smb2_copychunk_range
- inotify: Avoid reporting event with invalid wd
- [armhf] remoteproc: stm32: Call of_node_put() on iteration error
- [armhf] dts: exynos: fix WM8960 clock name in Itop Elite
- f2fs: fix potential corruption when moving a directory
- [armhf] drm/panel: otm8009a: Set backlight parent to panel device
- drm/amdgpu: fix an amdgpu_irq_put() issue in gmc_v9_0_hw_fini()
- drm/amdgpu/gfx: disable gfx9 cp_ecc_error_irq only when enabling legacy
gfx ras
- drm/amdgpu: disable sdma ecc irq only when sdma RAS is enabled in suspend
- HID: wacom: Set a default resolution for older tablets
- HID: wacom: insert timestamp to packed Bluetooth (BT) events
- [x86] KVM: x86: do not report a vCPU as preempted outside instruction
boundaries (CVE-2022-39189)
- ext4: fix WARNING in mb_find_extent
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
(CVE-2023-34256)
- ext4: fix data races when using cached status extents
- ext4: check iomap type only if ext4_iomap_begin() does not fail
- ext4: improve error recovery code paths in __ext4_remount()
- ext4: fix deadlock when converting an inline directory in nojournal mode
- ext4: add bounds checking in get_max_inline_xattr_value_size()
- ext4: bail out of ext4_xattr_ibody_get() fails for any reason
- ext4: remove a BUG_ON in ext4_mb_release_group_pa()
- ext4: fix invalid free tracking in ext4_xattr_move_to_block()
- serial: 8250: Fix serial8250_tx_empty() race with DMA Tx
- drbd: correctly submit flush bio on barrier
- [x86] KVM: x86: Ensure PV TLB flush tracepoint reflects KVM behavior
- [x86] KVM: x86: Fix recording of guest steal time / preempted status
- [x86] KVM: Fix steal time asm constraints
- [x86] KVM: x86: Remove obsolete disabling of page faults in
kvm_arch_vcpu_put()
- [x86] KVM: x86: do not set st->preempted when going back to user space
- [x86] KVM: x86: revalidate steal time cache if MSR value changes
- [x86] KVM: x86: do not report preemption if the steal time cache is stale
- [x86] KVM: x86: move guest_pv_has out of user_access section
- printk: declare printk_deferred_{enter,safe}() in include/linux/printk.h
- [armhf] drm/exynos: move to use request_irq by IRQF_NO_AUTOEN flag
- mm/page_alloc: fix potential deadlock on zonelist_update_seq seqlock
- drm/amd/display: Fix hang when skipping modeset
https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.181
- driver core: add a helper to setup both the of_node and fwnode of a device
- drm/mipi-dsi: Set the fwnode for mipi_dsi_device
- linux/dim: Do nothing if no time delta between samples
- net: Fix load-tearing on sk->sk_stamp in sock_recv_cmsgs().
- netfilter: conntrack: fix possible bug_on with enable_hooks=1
- netlink: annotate accesses to nlk->cb_running
- net: annotate sk->sk_err write from do_recvmmsg()
- net: deal with most data-races in sk_wait_event()
- net: tap: check vlan with eth_type_vlan() method
- net: add vlan_get_protocol_and_depth() helper
- tcp: factor out __tcp_close() helper
- tcp: add annotations around sk->sk_shutdown accesses
- ipvlan:Fix out-of-bounds caused by unclear skb->cb (CVE-2023-3090)
- net: datagram: fix data-races in datagram_poll()
- af_unix: Fix a data race of sk->sk_receive_queue->qlen.
- af_unix: Fix data races around sk->sk_shutdown.
- [x86] drm/i915/dp: prevent potential div-by-zero
- [x86] fbdev: arcfb: Fix error handling in arcfb_probe()
- ext4: remove an unused variable warning with CONFIG_QUOTA=n
- ext4: reflect error codes from ext4_multi_mount_protect() to its callers
- ext4: don't clear SB_RDONLY when remounting r/w until quota is re-enabled
- ext4: fix lockdep warning when enabling MMP
- ext4: remove redundant mb_regenerate_buddy()
- ext4: drop s_mb_bal_lock and convert protected fields to atomic
- ext4: add mballoc stats proc file
- ext4: allow to find by goal if EXT4_MB_HINT_GOAL_ONLY is set
- ext4: allow ext4_get_group_info() to fail
- rcu: Protect rcu_print_task_exp_stall() ->exp_tasks access
- fs: hfsplus: remove WARN_ON() from hfsplus_cat_{read,write}_inode()
- drm/amd/display: Use DC_LOG_DC in the trasform pixel function
- regmap: cache: Return error in cache sync operations for REGCACHE_NONE
- memstick: r592: Fix UAF bug in r592_remove due to race condition
(CVE-2023-3141)
- firmware: arm_sdei: Fix sleep from invalid context BUG
- ACPI: EC: Fix oops when removing custom query handlers
- [armhf] remoteproc: stm32_rproc: Add mutex protection for workqueue
- [arm64,armhf] drm/tegra: Avoid potential 32-bit integer overflow
- ACPICA: Avoid undefined behavior: applying zero offset to null pointer
- ACPICA: ACPICA: check null return of ACPI_ALLOCATE_ZEROED in
acpi_db_display_objects
- wifi: ath: Silence memcpy run-time false positive warning
- bpf: Annotate data races in bpf_local_storage
- wifi: brcmfmac: cfg80211: Pass the PMK in binary instead of hex
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
- net: Catch invalid index in XPS mapping
- scsi: target: iscsit: Free cmds before session free
- lib: cpu_rmap: Avoid use after free on rmap->obj array entries
- scsi: message: mptlan: Fix use after free bug in mptlan_remove() due to
race condition
- gfs2: Fix inode height consistency check
- ext4: set goal start correctly in ext4_mb_normalize_request
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()
- f2fs: fix to drop all dirty pages during umount() if cp_error is set
- wifi: iwlwifi: pcie: fix possible NULL pointer dereference
- wifi: iwlwifi: pcie: Fix integer overflow in iwl_write_to_user_buf
- null_blk: Always check queue mode setting from configfs
- wifi: iwlwifi: dvm: Fix memcpy: detected field-spanning write backtrace
- wifi: ath11k: Fix SKB corruption in REO destination ring
- ipvs: Update width of source for ip_vs_sync_conn_options
- Bluetooth: hci_bcm: Fall back to getting bdaddr from EFI if not set
- Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp
- [x86] staging: rtl8192e: Replace macro RTL_PCI_DEVICE with PCI_DEVICE
- HID: logitech-hidpp: Don't use the USB serial for USB devices
- HID: logitech-hidpp: Reconcile USB and Unifying serials
- [armhf] spi: spi-imx: fix MX51_ECSPI_* macros when cs > 3
- HID: wacom: generic: Set battery quirk only when we see battery data
- usb: typec: tcpm: fix multiple times discover svids error
- serial: 8250: Reinit port->pm on port specific driver unbind
- recordmcount: Fix memory leaks in the uwrite function
- RDMA/core: Fix multiple -Warray-bounds warnings
- [arm64,armhf] iommu/arm-smmu-qcom: Limit the SMR groups to 128
- [arm64] iommu/arm-smmu-v3: Acknowledge pri/event queue overflow if any
- Input: xpad - add constants for GIP interface numbers
- btrfs: move btrfs_find_highest_objectid/btrfs_find_free_objectid to
disk-io.c
- btrfs: replace calls to btrfs_find_free_ino with btrfs_find_free_objectid
- btrfs: fix space cache inconsistency after error loading it from disk
- xfrm: don't check the default policy if the policy allows the packet
- Revert "Fix XFRM-I support for nested ESP tunnels"
- [arm64] drm/msm/dp: unregister audio driver during unbind
- [arm64] drm/msm/dpu: Remove duplicate register defines from INTF
- cpupower: Make TSC read per CPU for Mperf monitor
- af_key: Reject optional tunnel/BEET mode templates in outbound policies
- [arm64,armhf] net: fec: Better handle pm_runtime_get() failing in
.remove()
- net: phy: dp83867: add w/a for packet errors seen with short cables
- ALSA: firewire-digi00x: prevent potential use after free
- ALSA: hda/realtek: Apply HP B&O top speaker profile to Pavilion 15
- vsock: avoid to close connected socket after the timeout
- ipv4/tcp: do not use per netns ctl sockets
- net: Find dst with sk's xfrm policy not ctl_sk
- tcp: fix possible sk_priority leak in tcp_v4_send_reset()
- [armhf] serial: arc_uart: fix of_iomap leak in `arc_serial_probe`
- erspan: get the proto with the md version for collect_md
- [arm64] net: hns3: fix sending pfc frames after reset issue
- [arm64] net: hns3: fix reset delay time to avoid configuration timeout
- media: netup_unidvb: fix use-after-free at del_timer()
- SUNRPC: Fix trace_svc_register() call site
- net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
- net/tipc: fix tipc header files for kernel-doc
- tipc: add tipc_bearer_min_mtu to calculate min mtu
- tipc: do not update mtu if msg_max is too small in mtu negotiation
- tipc: check the bearer min mtu properly when setting it by netlink
- [arm64] net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
- [arm64] net: bcmgenet: Restore phy_stop() depending upon suspend/close
- wifi: mac80211: fix min center freq offset tracing
- wifi: iwlwifi: mvm: don't trust firmware n_channels
- [x86] scsi: storvsc: Don't pass unused PFNs to Hyper-V host
- cassini: Fix a memory leak in the error handling path of cas_init_one()
- igb: fix bit_shift to be in [1..8] range
- vlan: fix a potential uninit-value in vlan_dev_hard_start_xmit()
- netfilter: nft_set_rbtree: fix null deref on element insertion
- bridge: always declare tunnel functions
- ALSA: usb-audio: Add a sample rate workaround for Line6 Pod Go
- USB: usbtmc: Fix direction for 0-length ioctl control messages
- usb-storage: fix deadlock when a scsi command timeouts more than once
- [arm64,armhf] usb: dwc3: debugfs: Resume dwc3 before accessing registers
- usb: gadget: u_ether: Fix host MAC address case
- usb: typec: altmodes/displayport: fix pin_assignment_show
- ALSA: hda: Fix Oops by 9.1 surround channel names
- ALSA: hda: Add NVIDIA codec IDs a3 through a7 to patch table
- ALSA: hda/realtek: Add quirk for Clevo L140AU
- ALSA: hda/realtek: Add a quirk for HP EliteDesk 805
- ALSA: hda/realtek: Add quirk for 2nd ASUS GU603
- can: j1939: recvmsg(): allow MSG_CMSG_COMPAT flag
- can: isotp: recvmsg(): allow MSG_CMSG_COMPAT flag
- statfs: enforce statfs[64] structure initialization
- serial: Add support for Advantech PCI-1611U card
- vc_screen: reload load of struct vc_data pointer in vcs_write() to avoid
UAF
- ceph: force updating the msg pointer in non-split case
- tpm/tpm_tis: Disable interrupts for more Lenovo devices
- [powerpc*] 64s/radix: Fix soft dirty tracking
- nilfs2: fix use-after-free bug of nilfs_root in nilfs_evict_inode()
- HID: wacom: Force pen out of prox if no events have been received in a
while
- HID: wacom: Add new Intuos Pro Small (PTH-460) device IDs
- HID: wacom: add three styli to wacom_intuos_get_tool_type
- [arm64] KVM: arm64: Link position-independent string routines into
.hyp.text
- serial: 8250_exar: derive nr_ports from PCI ID for Acces I/O cards
- serial: exar: Add support for Sealevel 7xxxC serial cards
- serial: 8250_exar: Add support for USR298x PCI Modems
- [s390x] qdio: get rid of register asm
- [s390x] qdio: fix do_sqbs() inline assembly constraint
- [x86] watchdog: sp5100_tco: Immediately trigger upon starting.
- writeback, cgroup: remove extra percpu_ref_exit()
- net/sched: act_mirred: refactor the handle of xmit
- net/sched: act_mirred: better wording on protection against excessive
stack growth
- act_mirred: use the backlog for nested calls to mirred ingress
(CVE-2022-4269)
- ocfs2: Switch to security_inode_init_security()
- ALSA: hda/ca0132: add quirk for EVGA X299 DARK
- ALSA: hda: Fix unhandled register update during auto-suspend period
- ALSA: hda/realtek: Enable headset onLenovo M70/M90
- net: cdc_ncm: Deal with too low values of dwNtbOutMaxSize
- btrfs: use nofs when cleaning up aborted transactions
- dt-binding: cdns,usb3: Fix cdns,on-chip-buff-size type
- [x86] mm: Avoid incomplete Global INVLPG flushes
- [x86] topology: Fix erroneous smp_num_siblings on Intel Hybrid platforms
- debugobjects: Don't wake up kswapd from fill_pool()
- fbdev: udlfb: Fix endpoint check
- net: fix stack overflow when LRO is disabled for virtual interfaces
- udplite: Fix NULL pointer dereference in __sk_mem_raise_allocated().
- USB: core: Add routines for endpoint checks in old drivers
- USB: sisusbvga: Add endpoint checks
- media: radio-shark: Add endpoint checks
- net: fix skb leak in __skb_tstamp_tx()
- bpf: Fix mask generation for 32-bit narrow loads of 64-bit fields
- ipv6: Fix out-of-bounds access in ipv6_find_tlv()
- power: supply: leds: Fix blink to LED on transition
- power: supply: bq27xxx: Fix bq27xxx_battery_update() race condition
- power: supply: bq27xxx: Fix I2C IRQ race on remove
- power: supply: bq27xxx: Fix poll_interval handling and races on remove
- fs: fix undefined behavior in bit shift for SB_NOUSER
- [x86] show_trace_log_lvl: Ensure stack pointer is aligned, again
- [x86] ASoC: Intel: Skylake: Fix declaration of enum skl_ch_cfg
- [x86] forcedeth: Fix an error handling path in nv_probe()
- net/mlx5e: do as little as possible in napi poll when budget is 0
- net/mlx5: DR, Fix crc32 calculation to work on big-endian (BE) CPUs
- net/mlx5: Fix error message when failing to allocate device memory
- net/mlx5: Devcom, fix error flow in mlx5_devcom_register_device
- [x86] 3c589_cs: Fix an error handling path in tc589_probe()
- net: phy: mscc: add VSC8502 to MODULE_DEVICE_TABLE
https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.182
- [x86] cpu: Add Raptor Lake to Intel family
- [x86] cpu: Drop spurious underscore from RAPTOR_LAKE #define
- power: supply: bq27xxx: fix polarity of current_now
- power: supply: bq27xxx: fix sign of current_now for newer ICs
- power: supply: bq27xxx: make status more robust
- power: supply: bq27xxx: Add cache parameter to
bq27xxx_battery_current_and_status()
- power: supply: bq27xxx: expose battery data when CI=1
- power: supply: bq27xxx: Move bq27xxx_battery_update() down
- power: supply: bq27xxx: Ensure power_supply_changed() is called on current
sign changes
- power: supply: bq27xxx: After charger plug in/out wait 0.5s for things to
stabilize
- power: supply: core: Refactor
power_supply_set_input_current_limit_from_supplier()
- [x86] power: supply: bq24190: Call power_supply_changed() after updating
input current
- regulator: Add regmap helper for ramp-delay setting
- net/mlx5: devcom only supports 2 ports

[continued in next message]

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)