Accepted:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Wed, 08 Dec 2021 17:21:12 +0100
Source: linux-signed-amd64
Architecture: source
Version: 5.10.84+1
Distribution: bullseye-proposed-updates
Urgency: medium
Maintainer: Debian Kernel Team <
debian-kernel@lists.debian.org>
Changed-By: Salvatore Bonaccorso <
carnil@debian.org>
Changes:
linux-signed-amd64 (5.10.84+1) bullseye; urgency=medium
.
* Sign kernel from linux 5.10.84-1
.
* New upstream stable update:
https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.71
- tty: Fix out-of-bound vmalloc access in imageblit
- cpufreq: schedutil: Use kobject release() method to free sugov_tunables
- scsi: qla2xxx: Changes to support kdump kernel for NVMe BFS
- cpufreq: schedutil: Destroy mutex before kobject_put() frees the memory
- ALSA: hda/realtek: Quirks to enable speaker output for Lenovo Legion 7i
15IMHG05, Yoga 7i 14ITL5/15ITL5, and 13s Gen2 laptops.
- [amd64,arm64] ACPI: NFIT: Use fallback node id when numa info in NFIT
table is incorrect
- fs-verity: fix signed integer overflow with i_size near S64_MAX
- hwmon: (tmp421) handle I2C errors
- hwmon: (w83793) Fix NULL pointer dereference by removing unnecessary
structure field
- hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary
structure field
- hwmon: (w83791d) Fix NULL pointer dereference by removing unnecessary
structure field
- [arm64,armhf] gpio: pca953x: do not ignore i2c errors
- scsi: ufs: Fix illegal offset in UPIU event trace
- mac80211: fix use-after-free in CCMP/GCMP RX
- [x86] kvmclock: Move this_cpu_pvti into kvmclock.h
- [x86] KVM: x86: Fix stack-out-of-bounds memory access from
ioapic_write_indirect()
- [x86] KVM: x86: nSVM: don't copy virt_ext from vmcb12
- [x86] KVM: nVMX: Filter out all unsupported controls when eVMCS was
activated
- KVM: rseq: Update rseq when processing NOTIFY_RESUME on xfer to KVM guest
- RDMA/cma: Do not change route.addr.src_addr.ss_family
- drm/amd/display: Pass PCI deviceid into DC
- drm/amdgpu: correct initial cp_hqd_quantum for gfx9
- ipvs: check that ip_vs_conn_tab_bits is between 8 and 20
- bpf: Handle return value of BPF_PROG_TYPE_STRUCT_OPS prog
- IB/cma: Do not send IGMP leaves for sendonly Multicast groups
- RDMA/cma: Fix listener leak in rdma_cma_listen_on_all() failure
- mac80211: Fix ieee80211_amsdu_aggregate frag_tail bug
- mac80211: limit injected vht mcs/nss in ieee80211_parse_tx_radiotap
- mac80211: mesh: fix potentially unaligned access
- mac80211-hwsim: fix late beacon hrtimer handling
- sctp: break out if skb_header_pointer returns NULL in sctp_rcv_ootb
- hwmon: (tmp421) report /PVLD condition as fault
- hwmon: (tmp421) fix rounding for negative values
- [arm64] net: enetc: fix the incorrect clearing of IF_MODE bits
- net: ipv4: Fix rtnexthop len when RTA_FLOW is present
- smsc95xx: fix stalled rx after link change
- [x86] drm/i915/request: fix early tracepoints
- [arm64,armhf] dsa: mv88e6xxx: 6161: Use chip wide MAX MTU
- [arm64,armhf] dsa: mv88e6xxx: Fix MTU definition
- [arm64,armhf] dsa: mv88e6xxx: Include tagger overhead when setting MTU for
DSA and CPU ports
- e100: fix length calculation in e100_get_regs_len
- e100: fix buffer overrun in e100_get_regs
- [arm64] RDMA/hns: Fix inaccurate prints
- bpf: Exempt CAP_BPF from checks against bpf_jit_limit
- Revert "block, bfq: honor already-setup queue merges"
- scsi: csiostor: Add module softdep on cxgb4
- ixgbe: Fix NULL pointer dereference in ixgbe_xdp_setup
- [arm64] net: hns3: do not allow call hns3_nic_net_open repeatedly
- [arm64] net: hns3: keep MAC pause mode when multiple TCs are enabled
- [arm64] net: hns3: fix mixed flag HCLGE_FLAG_MQPRIO_ENABLE and
HCLGE_FLAG_DCB_ENABLE
- [arm64] net: hns3: fix show wrong state when add existing uc mac address
- [arm64] net: hns3: fix prototype warning
- [arm64] net: hns3: reconstruct function hns3_self_test
- [arm64] net: hns3: fix always enable rx vlan filter problem after selftest
- [arm64,armhf] net: phy: bcm7xxx: Fixed indirect MMD operations
- net: sched: flower: protect fl_walk() with rcu
- af_unix: fix races in sk_peer_pid and sk_peer_cred accesses
- [x86] perf/x86/intel: Update event constraints for ICX
- nvme: add command id quirk for apple controllers
- elf: don't use MAP_FIXED_NOREPLACE for elf interpreter mappings
- debugfs: debugfs_create_file_size(): use IS_ERR to check for error
- ext4: fix loff_t overflow in ext4_max_bitmap_size()
- ext4: limit the number of blocks in one ADD_RANGE TLV (Closes: #995425)
- ext4: fix reserved space counter leakage
- ext4: add error checking to ext4_ext_replay_set_iblocks()
- ext4: fix potential infinite loop in ext4_dx_readdir()
- HID: u2fzero: ignore incomplete packets without data
- net: udp: annotate data race around udp_sk(sk)->corkflag
- ASoC: dapm: use component prefix when checking widget names
- usb: hso: remove the bailout parameter
- [x86] crypto: ccp - fix resource leaks in ccp_run_aes_gcm_cmd()
(CVE-2021-3744, CVE-2021-3764)
- HID: betop: fix slab-out-of-bounds Write in betop_probe
- netfilter: ipset: Fix oversized kvmalloc() calls
- mm: don't allow oversized kvmalloc() calls
- HID: usbhid: free raw_report buffers in usbhid_stop
- [x86] KVM: x86: Handle SRCU initialization failure during page track init
- netfilter: conntrack: serialize hash resizes and cleanups
- netfilter: nf_tables: Fix oversized kvmalloc() calls
https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.72
- [arm64,armhf] spi: rockchip: handle zero length transfers without timing
out
- nfsd: back channel stuck in SEQ4_STATUS_CB_PATH_DOWN
- btrfs: replace BUG_ON() in btrfs_csum_one_bio() with proper error handling
- btrfs: fix mount failure due to past and transient device flush error
- net: mdio: introduce a shutdown method to mdio device drivers
- xen-netback: correct success/error reporting for the SKB-with-fraglist
case
- scsi: sd: Free scsi_disk device via put_device()
- [arm*] usb: dwc2: check return value after calling platform_get_resource()
- nvme-fc: update hardware queues before using them
- nvme-fc: avoid race between time out and tear down
- [arm64] thermal/drivers/tsens: Fix wrong check for tzd in irq handlers
- scsi: ses: Retry failed Send/Receive Diagnostic commands
- [arm64,armhf] irqchip/gic: Work around broken Renesas integration
- smb3: correct smb3 ACL security descriptor
- KVM: do not shrink halt_poll_ns below grow_start
- [x86] kvm: Add AMD PMU MSRs to msrs_to_save_all[]
- [x86] KVM: nSVM: restore int_vector in svm_clear_vintr
- [x86] perf/x86: Reset destroy callback on event init failure
- libata: Add ATA_HORKAGE_NO_NCQ_ON_ATI for Samsung 860 and 870 SSD.
https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.73
- [arm64,armhf] usb: chipidea: ci_hdrc_imx: Also search for 'phys' phandle
- USB: cdc-acm: fix racy tty buffer accesses
- USB: cdc-acm: fix break reporting
- usb: typec: tcpm: handle SRC_STARTUP state if cc changes
- drm/nouveau/kms/tu102-: delay enabling cursor until after assign_windows
- xen/privcmd: fix error handling in mmap-resource processing
- [arm64] mmc: meson-gx: do not use memcpy_to/fromio for dram-access-quirk
- ovl: fix missing negative dentry check in ovl_rename() (CVE-2021-20321)
- ovl: fix IOCB_DIRECT if underlying fs doesn't support direct IO
- nfsd: fix error handling of register_pernet_subsys() in init_nfsd()
- nfsd4: Handle the NFSv4 READDIR 'dircount' hint being zero
- SUNRPC: fix sign error causing rpcsec_gss drops
- xen/balloon: fix cancelled balloon action
- [armhf] dts: omap3430-sdp: Fix NAND device node
- [armhf] bus: ti-sysc: Add break in switch statement in sysc_init_soc()
- [arm64] soc: qcom: mdt_loader: Drop PT_LOAD check on hash segment
- [armhf] dts: imx: Add missing pinctrl-names for panel on M53Menlo
- [armhf] dts: imx: Fix USB host power regulator polarity on M53Menlo
- [amd64] PCI: hv: Fix sleep while in non-sleep context when removing child
devices from the bus
- iwlwifi: pcie: add configuration of a Wi-Fi adapter on Dell XPS 15
- [armel,armhf] bpf, arm: Fix register clobbering in div/mod implementation
- [armhf] soc: ti: omap-prm: Fix external abort for am335x pruss
- bpf: Fix integer overflow in prealloc_elems_and_freelist()
(CVE-2021-41864)
- net/mlx5e: IPSEC RX, enable checksum complete
- net/mlx5: E-Switch, Fix double allocation of acl flow counter
- phy: mdio: fix memory leak
- net_sched: fix NULL deref in fifo_set_limit()
- [i386] ptp_pch: Load module automatically if ID matches
- [armhf] imx6: disable the GIC CPU interface before calling stby-poweroff
sequence
- net: bridge: use nla_total_size_64bit() in br_get_linkxstats_size()
- net: bridge: fix under estimation in br_get_linkxstats_size()
- net/sched: sch_taprio: properly cancel timer from taprio_destroy()
- net: sfp: Fix typo in state machine debug string
- netlink: annotate data races around nlk->bound
- perf jevents: Tidy error handling
- [armhf] bus: ti-sysc: Use CLKDM_NOAUTO for dra7 dcan1 for errata i893
- [arm64,armhf] drm/sun4i: dw-hdmi: Fix HDMI PHY clock setup
- drm/nouveau: avoid a use-after-free when BO init fails
- drm/nouveau/kms/nv50-: fix file release memory leak
- drm/nouveau/debugfs: fix file release memory leak
- [amd64] gve: Correct available tx qpl check
- [amd64] gve: Avoid freeing NULL pointer
- rtnetlink: fix if_nlmsg_stats_size() under estimation
- [amd64] gve: fix gve_get_stats()
- [amd64] gve: report 64bit tx_bytes counter from gve_handle_report_stats()
- i40e: fix endless loop under rtnl
- i40e: Fix freeing of uninitialized misc IRQ vector
- net: prefer socket bound to interface when not in VRF
- [powerpc*] iommu: Report the correct most efficient DMA mask for PCI
devices
- i2c: acpi: fix resource leak in reconfiguration device addition
- [s390x] bpf, s390: Fix potential memory leak about jit_data
- [powerpc*] bpf: Fix BPF_SUB when imm == 0x80000000
- [powerpc*] pseries/eeh: Fix the kdump kernel crash during eeh_pseries_init
- [i386] x86/platform/olpc: Correct ifdef symbol to intended
CONFIG_OLPC_XO15_SCI
- [x86] entry: Correct reference to intended CONFIG_64_BIT
- [x86] hpet: Use another crystalball to evaluate HPET usability
https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.74
- ext4: check and update i_disksize properly
- ext4: correct the error path of ext4_write_inline_data_end()
- [x86] ASoC: Intel: sof_sdw: tag SoundWire BEs as non-atomic
- HID: apple: Fix logical maximum and usage maximum of Magic Keyboard JIS
- netfilter: ip6_tables: zero-initialize fragment offset
- HID: wacom: Add new Intuos BT (CTL-4100WL/CTL-6100WL) device IDs
- [x86] ASoC: SOF: loader: release_firmware() on load failure to avoid
batching
- netfilter: nf_nat_masquerade: make async masq_inet6_event handling generic
- netfilter: nf_nat_masquerade: defer conntrack walk to work queue
- mac80211: Drop frames from invalid MAC address in ad-hoc mode
- net: prevent user from passing illegal stab size
- mac80211: check return value of rhashtable_init
- [x86] vboxfs: fix broken legacy mount signature checking
- drm/amdgpu: fix gart.bo pin_count leak
- scsi: ses: Fix unsigned comparison with less than zero
- scsi: virtio_scsi: Fix spelling mistake "Unsupport" -> "Unsupported"
- perf/core: fix userpage->time_enabled of inactive events
- sched: Always inline is_percpu_thread()
- [armhf] hwmon: (pmbus/ibm-cffps) max_power_out swap changes
https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.75
- ALSA: usb-audio: Add quirk for VF0770
- ALSA: pcm: Workaround for a wrong offset in SYNC_PTR compat ioctl
- ALSA: seq: Fix a potential UAF by wrong private_free call order
- ALSA: hda/realtek: Enable 4-speaker output for Dell Precision 5560 laptop
- ALSA: hda - Enable headphone mic on Dell Latitude laptops with ALC3254
- ALSA: hda/realtek: Complete partial device name to avoid ambiguity
- ALSA: hda/realtek: Add quirk for Clevo X170KM-G
- ALSA: hda/realtek - ALC236 headset MIC recording issue
- ALSA: hda/realtek: Add quirk for TongFang PHxTxX1
- ALSA: hda/realtek: Fix for quirk to enable speaker output on the Lenovo
13s Gen2
- ALSA: hda/realtek: Fix the mic type detection issue for ASUS G551JW
- [s390x] fix strrchr() implementation
- [arm64] hugetlb: fix CMA gigantic page order for non-4K PAGE_SIZE
- drm/msm: Avoid potential overflow in timeout_to_jiffies()
- btrfs: unlock newly allocated extent buffer after error
- btrfs: deal with errors when replaying dir entry during log replay
- btrfs: deal with errors when adding inode reference during log replay
- btrfs: check for error when looking up inode during dir entry replay
- btrfs: update refs for any root except tree log roots
- btrfs: fix abort logic in btrfs_replace_file_extents
- [x86] resctrl: Free the ctrlval arrays when domain_setup_mon_state() fails
- [x86] mei: me: add Ice Lake-N device id.
- xhci: guard accesses to ep_state in xhci_endpoint_reset()
- xhci: Fix command ring pointer corruption while aborting a command
- xhci: Enable trust tx length quirk for Fresco FL11 USB controller
- cb710: avoid NULL pointer subtraction
- [arm64,x86] efi/cper: use stack buffer for error record decoding
- efi: Change down_interruptible() in virt_efi_reset_system() to
down_trylock()
- [armhf] usb: musb: dsps: Fix the probe error path (Closes: 1000900)
- Input: xpad - add support for another USB ID of Nacon GC-100
- USB: serial: qcserial: add EM9191 QDL support
- USB: serial: option: add Quectel EC200S-CN module support
- USB: serial: option: add Telit LE910Cx composition 0x1204
- USB: serial: option: add prod. id for Quectel EG91
- virtio: write back F_VERSION_1 before validate
- nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells
- [powerpc*] xive: Discard disabled interrupts in get_irqchip_state()
- driver core: Reject pointless SYNC_STATE_ONLY device links
- iio: adc: ad7192: Add IRQ flag
- iio: adc: ad7780: Fix IRQ flag
- iio: adc: ad7793: Fix IRQ flag
- iio: adc128s052: Fix the error handling path of 'adc128_probe()'
- iio: adc: max1027: Fix wrong shift with 12-bit devices
- iio: light: opt3001: Fixed timeout error when 0 lux
- iio: adc: max1027: Fix the number of max1X31 channels
- iio: dac: ti-dac5571: fix an error code in probe()
- [arm64] tee: optee: Fix missing devices unregister during optee_remove
- [armel,armhf] dts: bcm2711-rpi-4-b: Fix usb's unit address
- [armel,armhf] dts: bcm2711-rpi-4-b: fix sd_io_1v8_reg regulator states
- [armel,armhf] dts: bcm2711-rpi-4-b: Fix pcie0's unit address formatting
- nvme-pci: Fix abort command id
- sctp: account stream padding length for reconf chunk
- [arm64,armhf] gpio: pca953x: Improve bias setting
- net/mlx5e: Fix memory leak in mlx5_core_destroy_cq() error path
- net/mlx5e: Mutually exclude RX-FCS and RX-port-timestamp
- net: stmmac: fix get_hw_feature() on old hardware
- ethernet: s2io: fix setting mac address during resume
- nfc: fix error handling of nfc_proto_register()
- NFC: digital: fix possible memory leak in digital_tg_listen_mdaa()
- NFC: digital: fix possible memory leak in digital_in_send_sdd_req()
- [i386] pata_legacy: fix a couple uninitialized variable bugs
- ata: ahci_platform: fix null-ptr-deref in
ahci_platform_enable_regulators()
- drm/edid: In connector_bad_edid() cap num_of_ext by num_blocks read
- [arm64] drm/msm: Fix null pointer dereference on pointer edp
- [arm64] drm/msm/mdp5: fix cursor-related warnings
- [arm64] drm/msm/a6xx: Track current ctx by seqno
- [arm64] drm/msm/dsi: Fix an error code in msm_dsi_modeset_init()
- [arm64] drm/msm/dsi: fix off by one in dsi_bus_clk_enable error handling
- [arm64] acpi/arm64: fix next_platform_timer() section mismatch error
- [x86] platform/x86: intel_scu_ipc: Fix busy loop expiry time
- mqprio: Correct stats in mqprio_dump_class_stats().
- qed: Fix missing error code in qed_slowpath_start()
- nfp: flow_offload: move flow_indr_dev_register from app init to app start
- [arm64] net: mscc: ocelot: warn when a PTP IRQ is raised for an unknown
skb
- [arm64,armhf] net: dsa: mv88e6xxx: don't use PHY_DETECT on internal PHY's
https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.76
- xhci: add quirk for host controllers that don't update endpoint DCS
- io_uring: fix splice_fd_in checks backport typo
- [armhf] dts: vexpress-v2p-ca9: Fix the SMB unit-address
- block: decode QUEUE_FLAG_HCTX_ACTIVE in debugfs output
- [x86] xen/x86: prevent PVH type from getting clobbered
- NFSD: Keep existing listeners on portlist error
- netfilter: xt_IDLETIMER: fix panic that occurs when timer_type has garbage
value
- ice: fix getting UDP tunnel entry
- netfilter: ip6t_rt: fix rt0_hdr parsing in rt_mt6
- netfilter: ipvs: make global sysctl readonly in non-init netns
- tcp: md5: Fix overlap between vrf and non-vrf keys
- ipv6: When forwarding count rx stats on the orig netdev
- [powerpc*] smp: do not decrement idle task preempt count in CPU offline
- [arm64] net: hns3: reset DWRR of unused tc to zero
- [arm64] net: hns3: add limit ets dwrr bandwidth cannot be 0
- [arm64] net: hns3: schedule the polling again when allocation fails
- [arm64] net: hns3: fix vf reset workqueue cannot exit
- [arm64] net: hns3: disable sriov before unload hclge layer
- net: stmmac: Fix E2E delay mechanism
- e1000e: Fix packet loss on Tiger Lake and later
- ice: Add missing E810 device ids
- [arm64] net: enetc: fix ethtool counter name for PM0_TERR
- can: peak_usb: pcan_usb_fd_decode_status(): fix back to ERROR_ACTIVE state
notification
- can: peak_pci: peak_pci_remove(): fix UAF
- can: isotp: isotp_sendmsg(): fix return error on FC timeout on TX path
- can: isotp: isotp_sendmsg(): add result check for
wait_event_interruptible()
- can: j1939: j1939_tp_rxtimer(): fix errant alert in j1939_tp_rxtimer
- can: j1939: j1939_netdev_start(): fix UAF for rx_kref of j1939_priv
- can: j1939: j1939_xtp_rx_dat_one(): cancel session if receive TP.DT with
error length
- can: j1939: j1939_xtp_rx_rts_session_new(): abort TP less than 9 bytes
- ceph: skip existing superblocks that are blocklisted or shut down when
mounting
- ceph: fix handling of "meta" errors
- ocfs2: fix data corruption after conversion from inline format
- ocfs2: mount fails with buffer overflow in strlen
- userfaultfd: fix a race between writeprotect and exit_mmap()
- vfs: check fd has read access in kernel_read_file_from_fd()
- ALSA: usb-audio: Provide quirk for Sennheiser GSP670 Headset
- ALSA: hda/realtek: Add quirk for Clevo PC50HS
- ASoC: DAPM: Fix missing kctl change notifications
- audit: fix possible null-pointer dereference in audit_filter_rules
- [powerpc*] powerpc64/idle: Fix SP offsets when saving GPRs
- [powerpc*] KVM: PPC: Book3S HV: Fix stack handling in
idle_kvm_start_guest()
- [powerpc*] KVM: PPC: Book3S HV: Make idle_kvm_start_guest() return 0 if it
went to guest (CVE-2021-43056)
- [powerpc*] idle: Don't corrupt back chain when going idle
- mm, slub: fix mismatch between reconstructed freelist depth and cnt
- mm, slub: fix potential memoryleak in kmem_cache_open()
- mm, slub: fix incorrect memcg slab count for bulk free
- [x86] KVM: nVMX: promptly process interrupts delivered while in guest mode
- nfc: nci: fix the UAF of rf_conn_info object (CVE-2021-3760)
- isdn: cpai: check ctr->cnr to avoid array index out of bound
(CVE-2021-43389)
- [arm64] net: hns3: fix the max tx size according to user manual
- ALSA: hda: intel: Allow repeatedly probing on codec configuration errors
- btrfs: deal with errors when checking if a dir entry exists during log
replay
- net: stmmac: add support for dwmac 3.40a
- isdn: mISDN: Fix sleeping function called from invalid context
- [x86] platform/x86: intel_scu_ipc: Update timeout value in comment
- ALSA: hda: avoid write to STATESTS if controller is in reset
- [x86] perf/x86/msr: Add Sapphire Rapids CPU support
- scsi: iscsi: Fix set_param() handling
- scsi: qla2xxx: Fix a memory leak in an error path of qla2x00_process_els()
- sched/scs: Reset the shadow stack when idle_task_exit
- [arm64] net: hns3: fix for miscalculation of rx unused desc
- scsi: core: Fix shost->cmd_per_lun calculation in scsi_add_host_with_dma()
- can: isotp: isotp_sendmsg(): fix TX buffer concurrent access in
isotp_sendmsg()
- [s390x] pci: fix zpci_zdev_put() on reserve
- net: mdiobus: Fix memory leak in __mdiobus_register
- tracing: Have all levels of checks prevent recursion
- e1000e: Separate TGP board type from SPT
- [armhf] pinctrl: stm32: use valid pin identifier in stm32_pinctrl_resume()
https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.77
- [armel,armhf] 9139/1: kprobes: fix arch_init_kprobes() prototype
- io_uring: don't take uring_lock during iowq cancel
- [powerpc*] bpf: Fix BPF_MOD when imm == 1
- [arm64] Avoid premature usercopy failure
- ext4: fix possible UAF when remounting r/o a mmp-protected file system
- usbnet: sanity check for maxpacket
- usbnet: fix error return code in usbnet_probe()
- pinctrl: amd: disable and mask interrupts on probe
- ata: sata_mv: Fix the error handling of mv_chip_id()
- tipc: fix size validations for the MSG_CRYPTO type (CVE-2021-43267)
- nfc: port100: fix using -ERRNO as command type mask
- Revert "net: mdiobus: Fix memory leak in __mdiobus_register"
- mmc: vub300: fix control-message timeouts
- mmc: cqhci: clear HALT state after CQE enable
- [armhf] mmc: dw_mmc: exynos: fix the finding clock sample value
- mmc: sdhci: Map more voltage level to SDHCI_POWER_330
- [arm64,armhf] mmc: sdhci-esdhc-imx: clear the buffer_read_ready to reset
standard tuning circuit
- ocfs2: fix race between searching chunks and release journal_head from
buffer_head
- nvme-tcp: fix H2CData PDU send accounting (again)
- cfg80211: scan: fix RCU in cfg80211_add_nontrans_list()
- cfg80211: fix management registrations locking
- net: lan78xx: fix division by zero in send path
- mm, thp: bail out early in collapse_file for writeback page
- drm/ttm: fix memleak in ttm_transfered_destroy
- drm/amdgpu: fix out of bounds write (CVE-2021-42327)
- cgroup: Fix memory leak caused by missing cgroup_bpf_offline
- tcp_bpf: Fix one concurrency problem in the tcp_bpf_send_verdict function
- bpf: Fix potential race in tail call compatibility check
- bpf: Fix error usage of map_fd and fdget() in generic_map_update_batch()
- [amd64] IB/qib: Protect from buffer overflow in struct qib_user_sdma_pkt
fields
- [amd64] IB/hfi1: Fix abba locking issue with sc_disable()
- nvmet-tcp: fix data digest pointer calculation
- nvme-tcp: fix data digest pointer calculation
- nvme-tcp: fix possible req->offset corruption
- RDMA/mlx5: Set user priority for DCT
- [arm64] dts: allwinner: h5: NanoPI Neo 2: Fix ethernet node
- regmap: Fix possible double-free in regcache_rbtree_exit()
- net: batman-adv: fix error handling
- net-sysfs: initialize uid and gid before calling net_ns_get_ownership
- cfg80211: correct bridge/4addr mode check
- net: Prevent infinite while loop in skb_tx_hash()
- RDMA/sa_query: Use strscpy_pad instead of memcpy to copy a string
- net: ethernet: microchip: lan743x: Fix driver crash when lan743x_pm_resume
fails
- net: ethernet: microchip: lan743x: Fix dma allocation failure by using
dma_set_mask_and_coherent
- phy: phy_ethtool_ksettings_get: Lock the phy for consistency
- phy: phy_ethtool_ksettings_set: Move after phy_start_aneg
- phy: phy_start_aneg: Add an unlocked version
- phy: phy_ethtool_ksettings_set: Lock the PHY while changing settings
- sctp: use init_tag from inithdr for ABORT chunk (CVE-2021-3772)
- sctp: fix the processing for INIT_ACK chunk (CVE-2021-3772)
- sctp: fix the processing for COOKIE_ECHO chunk (CVE-2021-3772)
- sctp: add vtag check in sctp_sf_violation (CVE-2021-3772)
- sctp: add vtag check in sctp_sf_do_8_5_1_E_sa (CVE-2021-3772)
- sctp: add vtag check in sctp_sf_ootb (CVE-2021-3772)
- lan743x: fix endianness when accessing descriptors
- [s390x] KVM: clear kicked_mask before sleeping again
- [s390x] KVM: preserve deliverable_mask in __airqs_kick_single_vcpu
https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.78
- scsi: core: Put LLD module refcnt after SCSI device is released
- Revert "io_uring: reinforce cancel on flush during exit"
- sfc: Fix reading non-legacy supported link modes
- vrf: Revert "Reset skb conntrack connection..."
- net: ethernet: microchip: lan743x: Fix skb allocation failure
- media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt()
(CVE-2021-42739)
- Revert "xhci: Set HCD flag to defer primary roothub registration"
- Revert "usb: core: hcd: Add support for deferring roothub registration"
- mm: khugepaged: skip huge page collapse for special files
- Revert "drm/ttm: fix memleak in ttm_transfered_destroy"
- [arm*] 9120/1: Revert "amba: make use of -1 IRQs warn"
- [arm64] Revert "wcn36xx: Disable bmps when encryption is disabled"
- ALSA: usb-audio: Add Schiit Hel device to mixer map quirk table
- ALSA: usb-audio: Add Audient iD14 to mixer map quirk table
https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.79
- [x86] Revert "x86/kvm: fix vcpu-id indexed array sizes"
- [arm64,armhf] usb: musb: Balance list entry in musb_gadget_queue
- usb-storage: Add compatibility quirk flags for iODD 2531/2541
- [arm*] binder: don't detect sender/target during buffer cleanup
- printk/console: Allow to disable console output by using console="" or
console=null
- staging: rtl8712: fix use-after-free in rtl8712_dl_fw
- isofs: Fix out of bound access for corrupted isofs image
- [x86] comedi: dt9812: fix DMA buffers on stack
- [x86] comedi: ni_usb6501: fix NULL-deref in command paths
- [x86] comedi: vmk80xx: fix transfer-buffer overflows
- [x86] comedi: vmk80xx: fix bulk-buffer overflow
- [x86] comedi: vmk80xx: fix bulk and interrupt message timeouts
- staging: r8712u: fix control-message timeout
- [x86] staging: rtl8192u: fix control-message timeouts
- rsi: fix control-message timeout
https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.80
- xhci: Fix USB 3.1 enumeration issues by increasing roothub power-on-good
delay
- usb: xhci: Enable runtime-pm by default on AMD Yellow Carp platform
- [arm*] binder: use euid from cred instead of using task
- [arm*] binder: use cred instead of task for selinux checks
- [arm*] binder: use cred instead of task for getsecid
- Input: iforce - fix control-message timeout
- Input: elantench - fix misreporting trackpoint coordinates
(Closes: #989285)
- libata: fix read log timeout value
- ocfs2: fix data corruption on truncate
- scsi: core: Remove command size deduction from scsi_setup_scsi_cmnd()
- scsi: qla2xxx: Fix kernel crash when accessing port_speed sysfs file
- scsi: qla2xxx: Fix use after free in eh_abort path
- [arm64,armhf] mmc: dw_mmc: Dont wait for DRTO on Write RSP error
- exfat: fix incorrect loading of i_blocks for large files
- tpm: Check for integer overflow in tpm2_map_response_body()
- media: ite-cir: IR receiver stop working after receive overflow
(Closes: #996672)
- media: ir-kbd-i2c: improve responsiveness of hauppauge zilog receivers
(Closes: #994050)
- media: v4l2-ioctl: Fix check_ext_ctrls
- ALSA: hda/realtek: Fix mic mute LED for the HP Spectre x360 14
- ALSA: hda/realtek: Add a quirk for HP OMEN 15 mute LED
- ALSA: hda/realtek: Add quirk for Clevo PC70HS
- ALSA: hda/realtek: Headset fixup for Clevo NH77HJQ
- ALSA: hda/realtek: Add a quirk for Acer Spin SP513-54N
- ALSA: hda/realtek: Add quirk for ASUS UX550VE
- ALSA: hda/realtek: Add quirk for HP EliteBook 840 G7 mute LED
- ALSA: ua101: fix division by zero at probe
- ALSA: 6fire: fix control and bulk message timeouts
- ALSA: line6: fix control and interrupt message timeouts
- ALSA: usb-audio: Line6 HX-Stomp XL USB_ID for 48k-fixed quirk
- ALSA: usb-audio: Add registration quirk for JBL Quantum 400
- ALSA: hda: Free card instance properly at probe errors
- ALSA: synth: missing check for possible NULL after the call to kstrdup
- ALSA: timer: Fix use-after-free problem
- ALSA: timer: Unconditionally unlink slave instances, too
- ext4: fix lazy initialization next schedule time computation in more
granular unit
- ext4: ensure enough credits in ext4_ext_shift_path_extents
- ext4: refresh the ext4_ext_path struct after dropping i_data_sem.
- fuse: fix page stealing
- [x86] cpu: Fix migration safety with X86_BUG_NULL_SEL
- [x86] irq: Ensure PI wakeup handler is unregistered before module unload
- ASoC: soc-core: fix null-ptr-deref in snd_soc_del_component_unlocked()
- ALSA: hda/realtek: Fixes HP Spectre x360 15-eb1xxx speakers
- [arm64] cavium: Return negative value when pci_alloc_irq_vectors() fails
- scsi: qla2xxx: Return -ENOMEM if kzalloc() fails
- scsi: qla2xxx: Fix unmap of already freed sgl
- mISDN: Fix return values of the probe function
- [arm64] cavium: Fix return values of the probe function
- sfc: Export fibre-specific supported link modes
- sfc: Don't use netif_info before net_device setup
- [armhf] reset: socfpga: add empty driver allowing consumers to probe
- drm: panel-orientation-quirks: Add quirk for Aya Neo 2021
- bpf: Define bpf_jit_alloc_exec_limit for arm64 JIT
- bpf: Prevent increasing bpf_jit_limit above max
- xen/netfront: stop tx queues during live migration
- nvmet-tcp: fix a memory leak when releasing a queue
- [armhf] spi: spl022: fix Microwire full duplex mode
- net: multicast: calculate csum of looped-back and forwarded packets
- [armhf] watchdog: Fix OMAP watchdog early handling
- drm: panel-orientation-quirks: Add quirk for GPD Win3
- block: schedule queue restart after BLK_STS_ZONE_RESOURCE
[continued in next message]
--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)