• linux_6.1.52-1_source.changes ACCEPTED into proposed-updates (4/4)

    From Debian FTP Masters@21:1/5 to All on Fri Sep 29 11:10:02 2023
    [continued from previous message]

    - gfs2: Fix possible data races in gfs2_show_options()
    - pcmcia: rsrc_nonstatic: Fix memory leak in nonstatic_release_resource_db()
    - [x86] thunderbolt: Add Intel Barlow Ridge PCI ID
    - [x86] thunderbolt: Limit Intel Barlow Ridge USB3 bandwidth
    - firewire: net: fix use after free in fwnet_finish_incoming_packet()
    - watchdog: sp5100_tco: support Hygon FCH/SCH (Server Controller Hub)
    - Bluetooth: L2CAP: Fix use-after-free
    - Bluetooth: btusb: Add MT7922 bluetooth ID for the Asus Ally
    - ceph: try to dump the msgs when decoding fails
    - drm/amdgpu: Fix potential fence use-after-free v2
    - fs/ntfs3: Enhance sanity check while generating attr_list
    - fs: ntfs3: Fix possible null-pointer dereferences in mi_read()
    - fs/ntfs3: Mark ntfs dirty when on-disk struct is corrupted
    - ALSA: hda/realtek: Add quirks for Unis H3C Desktop B760 & Q760
    - ALSA: hda: fix a possible null-pointer dereference due to data race in
    snd_hdac_regmap_sync()
    - ALSA: hda/realtek: Add quirk for ASUS ROG GX650P
    - ALSA: hda/realtek: Add quirk for ASUS ROG GA402X
    - ALSA: hda/realtek: Add quirk for ASUS ROG GZ301V
    - Bluetooth: MGMT: Use correct address for memcpy()
    - ring-buffer: Do not swap cpu_buffer during resize process
    - igc: read before write to SRRCTL register
    - drm/amd/display: save restore hdcp state when display is unplugged from
    mst hub
    - drm/amd/display: phase3 mst hdcp for multiple displays
    - drm/amd/display: fix access hdcp_workqueue assert
    - [arm64] KVM: arm64: vgic-v4: Make the doorbell request robust w.r.t
    preemption
    - fbdev/hyperv-fb: Do not set struct fb_info.apertures
    - video/aperture: Only remove sysfb on the default vga pci device
    (Closes: #1051163)
    - btrfs: move out now unused BG from the reclaim list
    - btrfs: convert btrfs_block_group::needs_free_space to runtime flag
    - btrfs: convert btrfs_block_group::seq_zone to runtime flag
    - btrfs: fix use-after-free of new block group that became unused
    - virtio-mmio: don't break lifecycle of vm_dev
    - cifs: fix potential oops in cifs_oplock_break
    - i2c: bcm-iproc: Fix bcm_iproc_i2c_isr deadlock issue
    - i2c: hisi: Only handle the interrupt of the driver's transfer
    - i2c: tegra: Fix i2c-tegra DMA config option processing
    - fbdev: mmp: fix value check in mmphw_probe()
    - [powerpc*] rtas_flash: allow user copy to flash block cache objects
    - tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
    - tty: serial: fsl_lpuart: Clear the error flags by writing 1 for lpuart32
    platforms
    - btrfs: fix incorrect splitting in btrfs_drop_extent_map_range
    - btrfs: fix BUG_ON condition in btrfs_cancel_balance
    - i2c: designware: Correct length byte validation logic
    - i2c: designware: Handle invalid SMBus block data response length value
    - net: xfrm: Fix xfrm_address_filter OOB read
    - net: af_key: fix sadb_x_filter validation
    - net: xfrm: Amend XFRMA_SEC_CTX nla_policy structure
    - xfrm: fix slab-use-after-free in decode_session6
    - ip6_vti: fix slab-use-after-free in decode_session6
    - ip_vti: fix potential slab-use-after-free in decode_session6
    - xfrm: add NULL check in xfrm_update_ae_params (CVE-2023-3772)
    - xfrm: add forgotten nla_policy for XFRMA_MTIMER_THRESH (CVE-2023-3773)
    - virtio_net: notify MAC address change on device initialization
    - virtio-net: set queues after driver_ok
    - net: pcs: Add missing put_device call in miic_create
    - net: phy: fix IRQ-based wake-on-lan over hibernate / power off
    - drm/panel: simple: Fix AUO G121EAN01 panel timings according to the docs
    - net: macb: In ZynqMP resume always configure PS GTR for non-wakeup source
    - octeon_ep: cancel tx_timeout_task later in remove sequence
    - netfilter: nf_tables: fix false-positive lockdep splat
    - netfilter: nf_tables: deactivate catchall elements in next generation
    (CVE-2023-4569)
    - ipvs: fix racy memcpy in proc_do_sync_threshold
    - netfilter: nft_dynset: disallow object maps
    - net: phy: broadcom: stub c45 read/write for 54810
    - team: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
    - net: openvswitch: reject negative ifindex
    - iavf: fix FDIR rule fields masks validation
    - i40e: fix misleading debug logs
    - net: dsa: mv88e6xxx: Wait for EEPROM done before HW reset
    - sfc: don't unregister flow_indr if it was never registered
    - sock: Fix misuse of sk_under_memory_pressure()
    - net: do not allow gso_size to be set to GSO_BY_FRAGS
    - qede: fix firmware halt over suspend and resume
    - ice: Block switchdev mode when ADQ is active and vice versa
    - bus: ti-sysc: Flush posted write on enable before reset
    - [arm64] dts: qcom: qrb5165-rb5: fix thermal zone conflict
    - [arm64] dts: rockchip: Disable HS400 for eMMC on ROCK Pi 4
    - [arm64] dts: rockchip: Disable HS400 for eMMC on ROCK 4C+
    - [armhf] dts: imx: align LED node names with dtschema
    - [arm64] dts: imx8mm: Drop CSI1 PHY reference clock configuration
    - [armhf] dts: imx: Set default tuning step for imx6sx usdhc
    - [arm64] dts: imx93: Fix anatop node size
    - ASoC: rt5665: add missed regulator_bulk_disable
    - ASoC: meson: axg-tdm-formatter: fix channel slot allocation
    - ALSA: hda/realtek: Add quirks for HP G11 Laptops
    - soc: aspeed: uart-routing: Use __sysfs_match_string
    - soc: aspeed: socinfo: Add kfree for kstrdup
    - ALSA: hda/realtek - Remodified 3k pull low procedure
    - serial: 8250: Fix oops for port->pm on uart_change_pm()
    - ALSA: usb-audio: Add support for Mythware XA001AU capture and playback
    interfaces.
    - cifs: Release folio lock on fscache read hit.
    - virtio-net: Zero max_tx_vq field for VIRTIO_NET_CTRL_MQ_HASH_CONFIG case
    - [arm64] dts: rockchip: Fix Wifi/Bluetooth on ROCK Pi 4 boards
    - blk-crypto: dynamically allocate fallback profile
    - mmc: wbsd: fix double mmc_free_host() in wbsd_init()
    - mmc: block: Fix in_flight[issue_type] value error
    - drm/qxl: fix UAF on handle creation
    - [x86] drm/i915/sdvo: fix panel_type initialization
    - drm/amd: flush any delayed gfxoff on suspend entry
    - drm/amdgpu: skip fence GFX interrupts disable/enable for S0ix
    - drm/amdgpu/pm: fix throttle_status for other than MP1 11.0.7
    - drm/amd/display: disable RCO for DCN314
    - zsmalloc: allow only one active pool compaction context
    - sched/fair: unlink misfit task from cpu overutilized
    - sched/fair: Remove capacity inversion detection
    - drm/amd/display: Implement workaround for writing to OTG_PIXEL_RATE_DIV
    register
    - hugetlb: do not clear hugetlb dtor until allocating vmemmap
    - netfilter: set default timeout to 3 secs for sctp shutdown send and recv
    state
    - [arm64] ptrace: Ensure that SME is set up for target when writing SSVE
    state
    - drm/amd/pm: skip the RLC stop when S0i3 suspend for SMU v13.0.4/11
    - drm/amdgpu: keep irq count in amdgpu_irq_disable_all
    - af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (CVE-2023-4622)
    - drm/nouveau/disp: fix use-after-free in error handling of
    nouveau_connector_create
    - net: fix the RTO timer retransmitting skb every 1ms if linear option is
    enabled
    - [arm64] mmc: f-sdh30: fix order of function calls in sdhci_f_sdh30_remove
    https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.48
    - [x86] cpu: Fix __x86_return_thunk symbol type
    - [x86] cpu: Fix up srso_safe_ret() and __x86_return_thunk()
    - [x86] alternative: Make custom return thunk unconditional
    - [x86] cpu: Clean up SRSO return thunk mess
    - [x86] cpu: Rename original retbleed methods
    - [x86] cpu: Rename srso_(.*)_alias to srso_alias_\1
    - [x86] cpu: Cleanup the untrain mess
    - [x86] srso: Explain the untraining sequences a bit more
    - [x86] static_call: Fix __static_call_fixup()
    - [x86] retpoline: Don't clobber RFLAGS during srso_safe_ret()
    (Closes: #1043585)
    - [x86] CPU/AMD: Fix the DIV(0) initial fix attempt (CVE-2023-20588)
    - [x86] srso: Disable the mitigation on unaffected configurations
    - [x86] retpoline,kprobes: Fix position of thunk sections with
    CONFIG_LTO_CLANG
    - [x86] objtool/x86: Fixup frame-pointer vs rethunk
    - [x86] srso: Correct the mitigation status when SMT is disabled
    https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.49
    - [x86] objtool/x86: Fix SRSO mess
    - Revert "f2fs: don't reset unchangable mount option in f2fs_remount()"
    - Revert "f2fs: fix to set flush_merge opt and show noflush_merge"
    - Revert "f2fs: fix to do sanity check on direct node in truncate_dnode()"
    https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.50
    - NFSv4.2: fix error handling in nfs42_proc_getxattr
    - NFSv4: fix out path in __nfs4_get_acl_uncached
    - xprtrdma: Remap Receive buffers after a reconnect
    - drm/ast: Use drm_aperture_remove_conflicting_pci_framebuffers
    - fbdev/radeon: use pci aperture helpers
    - [x86] drm/gma500: Use drm_aperture_remove_conflicting_pci_framebuffers
    - drm/aperture: Remove primary argument
    - video/aperture: Only kick vgacon when the pdev is decoding vga
    - video/aperture: Move vga handling to pci function
    - PCI: acpiphp: Reassign resources on bridge if necessary
    - [mips*]: cpu-features: Enable octeon_cache by cpu_type
    - [mips*] cpu-features: Use boot_cpu_type for CPU type based features
    - jbd2: remove t_checkpoint_io_list
    - jbd2: remove journal_clean_one_cp_list()
    - jbd2: fix a race when checking checkpoint buffer busy
    - can: raw: fix receiver memory leak
    - can: raw: fix lockdep issue in raw_release()
    - [s390x] zcrypt: remove unnecessary (void *) conversions
    - [s390x] zcrypt: fix reply buffer calculations for CCA replies
    - [x86] drm/i915: Add the gen12_needs_ccs_aux_inv helper
    - [x86] drm/i915/gt: Ensure memory quiesced before invalidation
    - [x86] drm/i915/gt: Poll aux invalidation register bit on invalidation
    - [x86] drm/i915/gt: Support aux invalidation on all engines
    - tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
    - tracing: Fix memleak due to race between current_tracer and trace
    - devlink: move code to a dedicated directory
    - devlink: add missing unregister linecard notification
    - [arm64] net: dsa: felix: fix oversize frame dropping for always closed
    tc-taprio gates
    - sock: annotate data-races around prot->memory_pressure
    - dccp: annotate data-races in dccp_poll()
    - ipvlan: Fix a reference count leak warning in ipvlan_ns_exit()
    - mlxsw: pci: Set time stamp fields also when its type is MIRROR_UTC
    - mlxsw: reg: Fix SSPR register layout
    - mlxsw: Fix the size of 'VIRT_ROUTER_MSB'
    - net: bgmac: Fix return value check for fixed_phy_register()
    - net: bcmgenet: Fix return value check for fixed_phy_register()
    - net: validate veth and vxcan peer ifindexes
    - ipv4: fix data-races around inet->inet_id
    - ice: fix receive buffer size miscalculation
    - Revert "ice: Fix ice VF reset during iavf initialization"
    - ice: Fix NULL pointer deref during VF reset
    - can: isotp: fix support for transmission of SF without flow control
    - igb: Avoid starting unnecessary workqueues
    - igc: Fix the typo in the PTM Control macro
    - net/sched: fix a qdisc modification with ambiguous command request
    - i40e: fix potential NULL pointer dereferencing of pf->vf
    i40e_sync_vsi_filters()
    - netfilter: nf_tables: flush pending destroy work before netlink notifier
    - netfilter: nf_tables: fix out of memory error handling
    - rtnetlink: Reject negative ifindexes in RTM_NEWLINK
    - bonding: fix macvlan over alb bond support
    - [x86] KVM: x86: Preserve TDP MMU roots until they are explicitly
    invalidated
    - [x86] KVM: x86/mmu: Fix an sign-extension bug with mmu_seq that hangs
    vCPUs
    - io_uring: get rid of double locking
    - io_uring: extract a io_msg_install_complete helper
    - io_uring/msg_ring: move double lock/unlock helpers higher up
    - io_uring/msg_ring: fix missing lock on overflow for IOPOLL (CVE-2023-2430)
    - [x86] ASoC: amd: yc: Add VivoBook Pro 15 to quirks list for acp6x
    - [x86] ASoC: cs35l41: Correct amp_gain_tlv values
    - ibmveth: Use dcbf rather than dcbfl
    - wifi: mac80211: limit reorder_buf_filtered to avoid UBSAN warning
    - [x86] platform/x86: ideapad-laptop: Add support for new hotkeys found on
    ThinkBook 14s Yoga ITL
    - NFSv4: Fix dropped lock for racing OPEN and delegation return
    - clk: Fix slab-out-of-bounds error in devm_clk_release()
    - mm,ima,kexec,of: use memblock_free_late from ima_free_kexec_buffer
    - shmem: fix smaps BUG sleeping while atomic
    - ALSA: ymfpci: Fix the missing snd_card_free() call at probe error
    - mm/gup: handle cont-PTE hugetlb pages correctly in gup_must_unshare() via
    GUP-fast
    - mm: add a call to flush_cache_vmap() in vmap_pfn()
    - mm: memory-failure: fix unexpected return value in soft_offline_page()
    - NFS: Fix a use after free in nfs_direct_join_group()
    - nfsd: Fix race to FREE_STATEID and cl_revoked
    - selinux: set next pointer before attaching to list
    - batman-adv: Trigger events for auto adjusted MTU
    - batman-adv: Don't increase MTU when set by user
    - batman-adv: Do not get eth header before batadv_check_management_packet
    - batman-adv: Fix TT global entry leak when client roamed back
    - batman-adv: Fix batadv_v_ogm_aggr_send memory leak
    - batman-adv: Hold rtnl lock during MTU update via netlink
    - lib/clz_ctz.c: Fix __clzdi2() and __ctzdi2() for 32-bit kernels
    - of: dynamic: Refactor action prints to not use "%pOF" inside devtree_lock
    - pinctrl: amd: Mask wake bits on probe again
    - media: vcodec: Fix potential array out-of-bounds in encoder queue_setup
    - PCI: acpiphp: Use pci_assign_unassigned_bridge_resources() only for
    non-root bus
    - drm/vmwgfx: Fix shader stage validation
    - [x86] drm/i915/dgfx: Enable d3cold at s2idle
    - drm/display/dp: Fix the DP DSC Receiver cap size
    - [x86] fpu: Invalidate FPU state correctly on exec()
    - [x86] fpu: Set X86_FEATURE_OSXSAVE feature after enabling OSXSAVE in CR4
    (Closes: #1050622)
    - hwmon: (aquacomputer_d5next) Add selective 200ms delay after sending ctrl
    report
    - nfs: use vfs setgid helper
    - nfsd: use vfs setgid helper
    - cgroup/cpuset: Rename functions dealing with DEADLINE accounting
    - sched/cpuset: Bring back cpuset_mutex
    - sched/cpuset: Keep track of SCHED_DEADLINE task in cpusets
    - cgroup/cpuset: Iterate only if DEADLINE tasks are present
    - sched/deadline: Create DL BW alloc, free & check overflow interface
    - cgroup/cpuset: Free DL BW in case can_attach() fails
    - [x86] thunderbolt: Fix Thunderbolt 3 display flickering issue on 2nd hot
    plug onwards
    - can: raw: add missing refcount for memory leak fix
    - madvise:madvise_free_pte_range(): don't use mapcount() against large folio
    for sharing check
    - scsi: snic: Fix double free in snic_tgt_create()
    - scsi: core: raid_class: Remove raid_component_add()
    - clk: Fix undefined reference to `clk_rate_exclusive_{get,put}'
    - dma-buf/sw_sync: Avoid recursive lock during fence signal
    - gpio: sim: dispose of irq mappings before destroying the irq_sim domain
    - gpio: sim: pass the GPIO device's software node to irq domain
    - [x86] ASoC: amd: yc: Fix a non-functional mic on Lenovo 82SJ
    - maple_tree: disable mas_wr_append() when other readers are possible
    https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.51
    - ACPI: thermal: Drop nocrt parameter
    - module: Expose module_init_layout_section()
    - [arm64] module-plts: inline linux/moduleloader.h
    - [arm64] module: Use module_init_layout_section() to spot init sections
    - [armel,armhf] module: Use module_init_layout_section() to spot init
    sections
    - [x86] thunderbolt: Fix a backport error for display flickering issue
    https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.52
    - erofs: ensure that the post-EOF tails are all zeroed
    - ksmbd: fix wrong DataOffset validation of create context
    - ksmbd: fix slub overflow in ksmbd_decode_ntlmssp_auth_blob()
    - ksmbd: replace one-element array with flex-array member in struct
    smb2_ea_info
    - ksmbd: reduce descriptor size if remaining bytes is less than request size
    - [arm64] net: enetc: use EXPORT_SYMBOL_GPL for enetc_phc_index
    - modules: only allow symbol_get of EXPORT_SYMBOL_GPL modules
    - USB: serial: option: add Quectel EM05G variant (0x030e)
    - USB: serial: option: add FOXCONN T99W368/T99W373 product
    - ALSA: usb-audio: Fix init call orders for UAC1
    - [arm64,armhf] usb: dwc3: meson-g12a: do post init to fix broken usb after
    resumption
    - [arm64,armhf] usb: chipidea: imx: improve logic if samsung,picophy-*
    parameter is 0
    - HID: wacom: remove the battery when the EKR is off
    - staging: rtl8712: fix race condition
    - Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race
    condition (CVE-2023-1989)
    - wifi: mt76: mt7921: do not support one stream on secondary antenna only
    - wifi: mt76: mt7921: fix skb leak by txs missing in AMSDU
    - [arm64] serial: qcom-geni: fix opp vote on shutdown
    - firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe
    - tcpm: Avoid soft reset when partner does not support get_status
    - dt-bindings: sc16is7xx: Add property to change GPIO function
    - nilfs2: fix general protection fault in nilfs_lookup_dirty_data_buffers()
    - nilfs2: fix WARNING in mark_buffer_dirty due to discarded buffer reuse
    - [arm64] usb: typec: tcpci: clear the fault status bit
    - pinctrl: amd: Don't show `Invalid config param` errors
    .
    [ Salvatore Bonaccorso ]
    * drivers/ptp: Make PTP_1588_CLOCK builtin (except armel/marvell)
    (Closes: #1036744)
    * [rt] Refresh "serial: 8250: implement write_atomic"
    * Bump ABI to 12
    * [rt] Update to 6.1.46-rt13
    * [rt] Refresh "net: Remove the obsolte u64_stats_fetch_*_irq() users (net)."
    * [x86] tpm: Enable hwrng only for Pluton on AMD CPUs
    Checksums-Sha1:
    5dcad2a387db6c59d0ac3d3ac6af4ea747008b9a 290924 linux_6.1.52-1.dsc
    ad8ab71769d6488c2fda53aa022396df65c117cc 137409052 linux_6.1.52.orig.tar.xz
    00cc5811ad451ace6fc1f7777cf508b0c7df9b0e 1511016 linux_6.1.52-1.debian.tar.xz
    fce6c57e74e73e218b61df1d88a754f8b084a77f 6853 linux_6.1.52-1_source.buildinfo Checksums-Sha256:
    6bb55226c5fb3d8c94dcaeb7e218f6b411c2cdb44d83217f8b807f6e3fc5619f 290924 linux_6.1.52-1.dsc
    9bc63c931294b87b6f656d39875c6471c5b06fec780eb06403ac70771bd3cb2b 137409052 linux_6.1.52.orig.tar.xz
    3f5a348786852c86b07afb845eebfdc745d802b103573b8836d7af249cd4d856 1511016 linux_6.1.52-1.debian.tar.xz
    2c15bb89c2dce221306103bd26f34bd78b80ae80b1da3e342de2270135360e6a 6853 linux_6.1.52-1_source.buildinfo
    Files:
    4e613d663f127e03386a2eb433f155b3 290924 kernel optional linux_6.1.52-1.dsc
    5fe26babb9c63b546b6a81c27ee32aa5 137409052 kernel optional linux_6.1.52.orig.tar.xz
    bb54d0e7044cbc1861234d7d4c28d513 1511016 kernel optional linux_6.1.52-1.debian.tar.xz
    7c2cbb3d215a472172a2d45aeb38200c 6853 kernel optional linux_6.1.52-1_source.buildinfo

    -----BEGIN PGP SIGNATURE-----

    iQKmBAEBCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAmT5fsBfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk ZWJpYW4ub3JnAAoJEAVMuPMTQ89ER0wP/3wN34n++lYfwgZZ48SSx2BiNpMRAFjj ZtZR74dY27iBXcQTbbhGbpAaRJRBQmXgfSEX1qyWcDBjj9tkt3XgziNttCm6ckwK xmaKjoC0tc5wQ68nl+E3jgLRwnPxUsLK8oajgZ9cezMMcUDg5rI54lYhX2SC1X3F JNhsebEyHUBZ1fByMlps9lzhGFeJwelTcZ3CogF7NWWvTxmT4OXmlY6w8Z/7e6sv MpdMTjwNgmAcn+PE9tDR66dixwzcrElZpcpYORMwth6zV1z5Kr+JuSPgpp3CfqXt jNzZTIL8zip71YzxOCwyfjEigdS6xpyZm2R0iWKx+UQCNipMUJl0pTrAqvhnxdr+ Q3gTPoDkWerTRwY8P3hGuPgWKmx0GqUjf9F8SZ93NOCNmpDrD119yXnssg1YO/wD Yyj0JLknGQb0Zy0oZaXYS0eaW8/z6d/dGVeQp/KKlgwW0cbqMdoOLrndJrFovXxf y/EFW8Pz9WQfZjg8jf9k/bfRtmPLMd3SPo5/iz/Yg6OXbtuUhCsVurqBjLJ0AHnj 9vx/S05EWROb0zB2ktQQK4PIIJKUq6D8Bo0onsVroplQhwO0rJa3WSXe/eXVgFTl 8JK2IXSROUQbjDjQj011S64Vn0QZexn63s3exvpTi0UKMglgAyk7qFBRo+IfR/Uh
    iV7JCoWN376H
    =sdaU
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)