--- Begin Message ---
Source: linux
Source-Version: 5.10.46-1
Done: Salvatore Bonaccorso <carnil@debian.org>
We believe that the bug you reported is fixed in the latest version of
linux, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 989451@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Salvatore Bonaccorso <carnil@debian.org> (supplier of updated linux package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Thu, 24 Jun 2021 14:11:37 +0200
Source: linux
Architecture: source
Version: 5.10.46-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Kernel Team <debian-kernel@lists.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Closes: 982270 987361 987365 989451 990008
Changes:
linux (5.10.46-1) unstable; urgency=medium
.
* New upstream stable update:
https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.41
- context_tracking: Move guest exit context tracking to separate helpers
- context_tracking: Move guest exit vtime accounting to separate helpers
- [x86] KVM: Defer vtime accounting 'til after IRQ handling
https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.42
- ALSA: hda/realtek: the bass speaker can't output sound on Yoga 9i
- ALSA: hda/realtek: Headphone volume is controlled by Front mixer
- ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation P340
- ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP Zbook G8
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP Zbook Fury 15
G8
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP Zbook Fury 17
G8
- ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci
- ALSA: usb-audio: scarlett2: Improve driver startup messages
- cifs: set server->cipher_type to AES-128-CCM for SMB3.0
- NFSv4: Fix a NULL pointer dereference in pnfs_mark_matching_lsegs_return()
- iommu/vt-d: Fix sysfs leak in alloc_iommu()
- proc: Check /proc/$pid/attr/ writes against file opener
- net: hso: fix control-request directions
- net/sched: fq_pie: re-factor fix for fq_pie endless loop
- net/sched: fq_pie: fix OOB access in the traffic path
- netfilter: nft_set_pipapo_avx2: Add irq_fpu_usable() check, fallback to
non-AVX2 version
- mac80211: assure all fragments are encrypted (CVE-2020-26147)
- mac80211: prevent mixed key and fragment cache attacks (CVE-2020-24586,
CVE-2020-24587)
- mac80211: properly handle A-MSDUs that start with an RFC 1042 header
- cfg80211: mitigate A-MSDU aggregation attacks (CVE-2020-24588)
- mac80211: drop A-MSDUs on old ciphers (CVE-2020-24588)
- mac80211: add fragment cache to sta_info
- mac80211: check defrag PN against current frame
- mac80211: prevent attacks on TKIP/WEP as well
- mac80211: do not accept/forward invalid EAPOL frames (CVE-2020-26139)
- mac80211: extend protection against mixed key and fragment cache attacks
(CVE-2020-24586, CVE-2020-24587)
- ath10k: add CCMP PN replay protection for fragmented frames for PCIe
- ath10k: drop fragments with multicast DA for PCIe (CVE-2020-26145)
- ath10k: drop fragments with multicast DA for SDIO (CVE-2020-26145)
- ath10k: drop MPDU which has discard flag set by firmware for SDIO
(CVE-2020-24588)
- ath10k: Fix TKIP Michael MIC verification for PCIe (CVE-2020-26141)
- ath10k: Validate first subframe of A-MSDU before processing the list
- ath11k: Clear the fragment cache during key install (CVE-2020-24587)
- dm snapshot: properly fix a crash when an origin has no snapshots
- drm/amdgpu/vcn1: add cancel_delayed_work_sync before power gate
- [amd64] drm/amdkfd: correct sienna_cichlid SDMA RLC register offset error
- drm/amdgpu/vcn2.0: add cancel_delayed_work_sync before power gate
- drm/amdgpu/vcn2.5: add cancel_delayed_work_sync before power gate
- drm/amdgpu/jpeg2.0: add cancel_delayed_work_sync before power gate
- Documentation: seccomp: Fix user notification documentation
- seccomp: Refactor notification handler to prepare for new semantics
- serial: core: fix suspicious security_locked_down() call
- misc/uss720: fix memory leak in uss720_probe
- [x86] thunderbolt: usb4: Fix NVM read buffer bounds and offset issue
- [x86] thunderbolt: dma_port: Fix NVM read buffer bounds and offset issue
- [x86] KVM: Fix vCPU preempted state from guest's point of view
- [arm64] KVM: Prevent mixed-width VM creation
- [x86] mei: request autosuspend after sending rx flow control
- iio: gyro: fxas21002c: balance runtime power in error path
- iio: dac: ad5770r: Put fwnode in error case during ->probe()
- iio: adc: ad7768-1: Fix too small buffer passed to
iio_push_to_buffers_with_timestamp()
- iio: adc: ad7124: Fix missbalanced regulator enable / disable on error.
- iio: adc: ad7124: Fix potential overflow due to non sequential channel
numbers
- iio: adc: ad7923: Fix undersized rx buffer.
- iio: adc: ad7793: Add missing error code in ad7793_setup()
- iio: adc: ad7192: Avoid disabling a clock that was never enabled.
- iio: adc: ad7192: handle regulator voltage error first
- serial: 8250: Add UART_BUG_TXRACE workaround for Aspeed VUART
- serial: 8250_dw: Add device HID for new AMD UART controller
- serial: 8250_pci: Add support for new HPE serial device
- serial: 8250_pci: handle FL_NOIRQ board flag
- USB: trancevibrator: fix control-request direction
- Revert "irqbypass: do not start cons/prod when failed connect"
- USB: usbfs: Don't WARN about excessively large memory allocations
- drivers: base: Fix device link removal
- [arm64,armhf] serial: tegra: Fix a mask operation that is always true
- serial: rp2: use 'request_firmware' instead of 'request_firmware_nowait'
- USB: serial: ti_usb_3410_5052: add startech.com device id
- USB: serial: option: add Telit LE910-S1 compositions 0x7010, 0x7011
- USB: serial: ftdi_sio: add IDs for IDS GmbH Products
- USB: serial: pl2303: add device id for ADLINK ND-6530 GC
- [x86] thermal/drivers/intel: Initialize RW trip to THERMAL_TEMP_INVALID
- [arm64,armhf] usb: dwc3: gadget: Properly track pending and queued SG
- [arm64,x86] usb: typec: mux: Fix matching with typec_altmode_desc
- net: usb: fix memory leak in smsc75xx_bind
- Bluetooth: cmtp: fix file refcount when cmtp_attach_device fails
- fs/nfs: Use fatal_signal_pending instead of signal_pending
- NFS: fix an incorrect limit in filelayout_decode_layout()
- NFS: Fix an Oopsable condition in __nfs_pageio_add_request()
- NFS: Don't corrupt the value of pg_bytes_written in nfs_do_recoalesce()
- NFSv4: Fix v4.0/v4.1 SEEK_DATA return -ENOTSUPP when set NFS_V4_2 config
- [arm64] drm/meson: fix shutdown crash when component not probed
- net/mlx5e: reset XPS on error flow if netdev isn't registered yet
- net/mlx5e: Fix multipath lag activation
- net/mlx5e: Fix error path of updating netdev queues
- {net,vdpa}/mlx5: Configure interface MAC into mpfs L2 table
- net/mlx5e: Fix nullptr in add_vlan_push_action()
- net/mlx5: Set reformat action when needed for termination rules
- net/mlx5e: Fix null deref accessing lag dev
- net/mlx4: Fix EEPROM dump support
- net/mlx5: Set term table as an unmanaged flow table
- SUNRPC in case of backlog, hand free slots directly to waiting task
- Revert "net:tipc: Fix a double free in tipc_sk_mcast_rcv"
- tipc: wait and exit until all work queues are done
- tipc: skb_linearize the head skb when reassembling msgs
- [arm64] spi: spi-fsl-dspi: Fix a resource leak in an error handling path
- netfilter: flowtable: Remove redundant hw refresh bit
- [arm64,armhf] net: dsa: fix a crash if ->get_sset_count() fails
- [armhf] i2c: s3c2410: fix possible NULL pointer deref on read message
after write
- [x86] i2c: i801: Don't generate an interrupt on bus reset
- afs: Fix the nlink handling of dir-over-dir rename
- nvmet-tcp: fix inline data size comparison in nvmet_tcp_queue_response
- [x86] platform/x86: hp_accel: Avoid invoking _INI to speed up resume
- [arm64] Revert "crypto: cavium/nitrox - add an error message to explain
the failure of pci_request_mem_regions"
- Revert "media: usb: gspca: add a missed check for goto_low_power"
- [i386] Revert "ALSA: sb: fix a missing check of snd_ctl_add"
- Revert "net: fujitsu: fix a potential NULL pointer dereference"
- net: fujitsu: fix potential null-ptr-deref
- Revert "net/smc: fix a NULL pointer dereference"
- net/smc: properly handle workqueue allocation failure
- [x86] Revert "char: hpet: fix a missing check of ioremap"
- [x86] char: hpet: add checks after calling ioremap
- [i386] Revert "ALSA: gus: add a check of the status of snd_ctl_add"
- Revert "isdn: mISDNinfineon: fix potential NULL pointer dereference"
- isdn: mISDNinfineon: check/cleanup ioremap failure correctly in setup_io
- Revert "ath6kl: return error code in ath6kl_wmi_set_roam_lrssi_cmd()"
- ath6kl: return error code in ath6kl_wmi_set_roam_lrssi_cmd()
- Revert "isdn: mISDN: Fix potential NULL pointer dereference of kzalloc"
- isdn: mISDN: correctly handle ph_info allocation failure in
hfcsusb_ph_info
- [arm64] Revert "dmaengine: qcom_hidma: Check for driver register failure"
- [arm64] dmaengine: qcom_hidma: comment platform_driver_register call
- Revert "libertas: add checks for the return value of sysfs_create_group"
- libertas: register sysfs groups properly
- Revert "media: dvb: Add check on sp8870_readreg"
- media: dvb: Add check on sp8870_readreg return
- Revert "media: gspca: mt9m111: Check write_bridge for timeout"
- media: gspca: mt9m111: Check write_bridge for timeout
- Revert "media: gspca: Check the return value of write_bridge for timeout"
- media: gspca: properly check for errors in po1030_probe()
- Revert "net: liquidio: fix a NULL pointer dereference"
- net: liquidio: Add missing null pointer checks
- Revert "brcmfmac: add a check for the status of usb_register"
- brcmfmac: properly check for bus register errors
- btrfs: return whole extents in fiemap
- [powerpc,x86] scsi: BusLogic: Fix 64-bit system enumeration error for
Buslogic
- scsi: pm80xx: Fix drives missing during rmmod/insmod loop
- btrfs: release path before starting transaction when cloning inline extent
- btrfs: do not BUG_ON in link_to_fixup_dir
- [x86] platform/x86: hp-wireless: add AMD's hardware id to the supported
list
- SMB3: incorrect file id in requests compounded with open
- drm/amd/amdgpu: fix refcount leak
- drm/amdgpu: Fix a use-after-free
- drm/amd/amdgpu: fix a potential deadlock in gpu reset
- drm/amdgpu: stop touching sched.ready in the backend
- block: fix a race between del_gendisk and BLKRRPART
- linux/bits.h: fix compilation error with GENMASK
- [arm64,armhf] net: dsa: fix error code getting shifted with 4 in
dsa_slave_get_sset_count
- net: stmmac: Fix MAC WoL not working if PHY does not support WoL
- spi: Assume GPIO CS active high in ACPI case
- net: really orphan skbs tied to closing sk
- net: packetmmap: fix only tx timestamp on request
- [arm64,armhf] net: fec: fix the potential memory leak in fec_enet_init()
- [arm64] net: mdio: thunder: Fix a double free issue in the .remove
function
- [mips64el,mipsel] net: mdio: octeon: Fix some double free issues
- cxgb4/ch_ktls: Clear resources when pf4 device is removed
- openvswitch: meter: fix race when getting now_ms.
- net: sched: fix packet stuck problem for lockless qdisc
- net: sched: fix tx action rescheduling issue during deactivation
- net: sched: fix tx action reschedule issue with stopped queue
- net: hso: check for allocation failure in hso_create_bulk_serial_device()
- net: bnx2: Fix error return code in bnx2_init_board()
- bnxt_en: Include new P5 HV definition in VF check.
- bnxt_en: Fix context memory setup for 64K page size.
- mld: fix panic in mld_newpack()
- net/smc: remove device from smcd_dev_list after failed device_add()
- [amd64] gve: Check TX QPL was actually assigned
- [amd64] gve: Update mgmt_msix_idx if num_ntfy changes
- [amd64] gve: Add NULL pointer checks when freeing irqs.
- [amd64] gve: Upgrade memory barrier in poll routine
- [amd64] gve: Correct SKB queue index validation.
- [arm64] net: hns3: fix incorrect resp_msg issue
- [arm64] net: hns3: put off calling register_netdev() until client
initialize complete
- [amd64] iommu/vt-d: Use user privilege for RID2PASID translation
- cxgb4: avoid accessing registers when clearing filters
- bpf, offload: Reorder offload callback 'prepare' in verifier
- bpf: Set mac_len in bpf_skb_change_head
- ixgbe: fix large MTU request from VF
- [arm64] ASoC: qcom: lpass-cpu: Use optional clk APIs
- scsi: libsas: Use _safe() loop in sas_resume_port()
- ipv6: record frag_max_size in atomic fragments in input path
- ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create() can be
static
- sch_dsmark: fix a NULL deref in qdisc_reset()
- net: zero-initialize tc skb extension on allocation
- [arm64,armhf] net: mvpp2: add buffer header handling in RX
- [x86] i915: fix build warning in intel_dp_get_link_status()
- [arm64] net: hns3: check the return of skb_checksum_help()
- bpftool: Add sock_release help info for cgroup attach/prog load command
- SUNRPC: More fixes for backlog congestion
- net: hso: bail out on interrupt URB allocation failure
- neighbour: Prevent Race condition in neighbour subsytem
- usb: core: reduce power-on-good delay time of root hub
https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.43
- btrfs: tree-checker: do not error out if extent ref hash doesn't match
- net: usb: cdc_ncm: don't spew notifications (Closes: #989451)
- [x86] hwmon: (dell-smm-hwmon) Fix index values
- netfilter: conntrack: unregister ipv4 sockopts on error unwind
- efi/fdt: fix panic when no valid fdt found
- efi: Allow EFI_MEMORY_XP and EFI_MEMORY_RO both to be cleared
- efi/libstub: prevent read overflow in find_file_option()
- [arm64,x86] efi: cper: fix snprintf() use in cper_dimm_err_location()
- vfio/pci: Fix error return code in vfio_ecap_init()
- ipvs: ignore IP_VS_SVC_F_HASHED flag when adding service
- HID: logitech-hidpp: initialize level variable
- HID: pidff: fix error return code in hid_pidff_init()
- [arm64,x86] HID: i2c-hid: fix format string mismatch
- devlink: Correct VIRTUAL port to not have phys_port attributes
- net/sched: act_ct: Offload connections with commit action
- net/sched: act_ct: Fix ct template allocation for zone 0
- nvme-rdma: fix in-casule data send for chained sgls
- ACPICA: Clean up context mutex during object deletion
- perf probe: Fix NULL pointer dereference in convert_variable_location()
- net: sock: fix in-kernel mark setting
- net/mlx5e: Fix incompatible casting
- net/mlx5: Check firmware sync reset requested is set before trying to
abort it
- net/mlx5e: Check for needed capability for cvlan matching
- net/mlx5: DR, Create multi-destination flow table with level less than 64
- nvmet: fix freeing unallocated p2pmem
- netfilter: nft_ct: skip expectations for confirmed conntrack
- netfilter: nfnetlink_cthelper: hit EBUSY on updates if size mismatches
- bpf: Simplify cases in bpf_base_func_proto
- bpf, lockdown, audit: Fix buggy SELinux lockdown permission checks
- ieee802154: fix error return code in ieee802154_add_iface()
- ieee802154: fix error return code in ieee802154_llsec_getparams()
- igb: add correct exception tracing for XDP
- ixgbevf: add correct exception tracing for XDP
- cxgb4: fix regression with HASH tc prio value update
- ipv6: Fix KASAN: slab-out-of-bounds Read in fib6_nh_flush_exceptions
- ice: Fix allowing VF to request more/less queues via virtchnl
- ice: Fix VFR issues for AVF drivers that expect ATQLEN cleared
- ice: handle the VF VSI rebuild failure
- ice: report supported and advertised autoneg using PHY capabilities
- ice: Allow all LLDP packets from PF to Tx
- cxgb4: avoid link re-train during TC-MQPRIO configuration
- i40e: optimize for XDP_REDIRECT in xsk path
- i40e: add correct exception tracing for XDP
- ice: simplify ice_run_xdp
- ice: optimize for XDP_REDIRECT in xsk path
- ice: add correct exception tracing for XDP
- ixgbe: optimize for XDP_REDIRECT in xsk path
- ixgbe: add correct exception tracing for XDP
- [arm64] optee: use export_uuid() to copy client UUID
- [armhf] bus: ti-sysc: Fix am335x resume hang for usb otg module
- [arm64] dts: freescale: sl28: var4: fix RGMII clock and voltage
- [armhf] bus: ti-sysc: Fix flakey idling of uarts and stop using
swsup_sidle_act
- tipc: add extack messages for bearer/media failure
- tipc: fix unique bearer names sanity check
- [armhf] serial: stm32: fix threaded interrupt handling
- io_uring: fix link timeout refs
- io_uring: use better types for cflags
- drm/amdgpu/vcn3: add cancel_delayed_work_sync before power gate
- drm/amdgpu/jpeg2.5: add cancel_delayed_work_sync before power gate
- drm/amdgpu/jpeg3: add cancel_delayed_work_sync before power gate
- Bluetooth: fix the erroneous flush_work() order (CVE-2021-3564)
- Bluetooth: use correct lock to prevent UAF of hdev object (CVE-2021-3573)
- wireguard: do not use -O3
- wireguard: peer: allocate in kmem_cache
- wireguard: use synchronize_net rather than synchronize_rcu
- wireguard: allowedips: initialize list head in selftest
- wireguard: allowedips: remove nodes in O(1)
- wireguard: allowedips: allocate nodes in kmem_cache
- wireguard: allowedips: free empty intermediate nodes when removing single
node
- [arm64,x86] HID: i2c-hid: Skip ELAN power-on command after reset
- HID: magicmouse: fix NULL-deref on disconnect
- HID: multitouch: require Finger field to mark Win8 reports as MT
- gfs2: fix scheduling while atomic bug in glocks
- ALSA: timer: Fix master timer notification
- ALSA: hda: Fix for mute key LED for HP Pavilion 15-CK0xx
- ALSA: hda: update the power_state during the direct-complete
- ext4: fix memory leak in ext4_fill_super
- ext4: fix bug on in ext4_es_cache_extent as ext4_split_extent_at failed
- ext4: fix fast commit alignment issues
- ext4: fix memory leak in ext4_mb_init_backend on error path.
- ext4: fix accessing uninit percpu counter variable with fast_commit
- [arm*] usb: dwc2: Fix build in periphal-only mode
- pid: take a reference when initializing `cad_pid`
- ocfs2: fix data corruption by fallocate
- mm/page_alloc: fix counting of free pages after take off from buddy
- [x86] cpufeatures: Force disable X86_FEATURE_ENQCMD and remove
update_pasid()
- nfc: fix NULL ptr dereference in llcp_sock_getname() after failed connect
(CVE-2021-3587)
- drm/amdgpu: Don't query CE and UE errors
- drm/amdgpu: make sure we unpin the UVD BO
- [x86] apic: Mark _all_ legacy interrupts when IO/APIC is missing
- [powerpc] kprobes: Fix validation of prefixed instructions across page
boundary
- btrfs: mark ordered extent and inode with error if we fail to finish
- btrfs: fix error handling in btrfs_del_csums
- btrfs: return errors from btrfs_del_csums in cleanup_ref_head
- btrfs: fixup error handling in fixup_inode_link_counts
- btrfs: abort in rename_exchange if we fail to insert the second ref
- btrfs: fix deadlock when cloning inline extents and low on available space
- mm, hugetlb: fix simple resv_huge_pages underflow on UFFDIO_COPY
- [arm64] drm/msm/dpu: always use mdp device to scale bandwidth
- btrfs: fix unmountable seed device after fstrim
- [x86] KVM: SVM: Truncate GPR value for DR and CR accesses in !64-bit mode
- [arm64] KVM: Fix debug register indexing
- [x86] kvm: Teardown PV features on boot CPU as well
- [x86] kvm: Disable kvmclock on all CPUs on shutdown
- [x86] kvm: Disable all PV features on crash
- lib/lz4: explicitly support in-place decompression
- netfilter: nf_tables: missing error reporting for not selected expressions
- xen-netback: take a reference to the RX task thread (CVE-2021-28691)
- neighbour: allow NUD_NOARP entries to be forced GCed
https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.44
- proc: Track /proc/$pid/attr/ opener mm_struct
- [amd64] ASoC: amd: fix for pcm_read() error
- spi: Fix spi device unregister flow
- bpf: Forbid trampoline attach for functions with variable arguments
- net/nfc/rawsock.c: fix a permission check bug
- [x86] ASoC: Intel: bytcr_rt5640: Add quirk for the Glavey TM800A550L
tablet
- [x86] ASoC: Intel: bytcr_rt5640: Add quirk for the Lenovo Miix 3-830
tablet
- [arm64,armhf] usb: chipidea: udc: assign interrupt number to USB gadget
structure
- bonding: init notify_work earlier to avoid uninitialized use
- netlink: disable IRQs for netlink_lock_table()
- net: mdiobus: get rid of a BUG_ON()
- cgroup: disable controllers at parse time
- wq: handle VM suspension in stall detection
- net/qla3xxx: fix schedule while atomic in ql_sem_spinlock
- RDS tcp loopback connection can hang
- net:sfc: fix non-freed irq in legacy irq mode
- scsi: bnx2fc: Return failure if io_req is already in ABTS processing
- [x86] scsi: vmw_pvscsi: Set correct residual data length
- [arm64] scsi: hisi_sas: Drop free_irq() of devm_request_irq() allocated
irq
- scsi: target: qla2xxx: Wait for stop_phase1 at WWN removal
- net: macb: ensure the device is available before accessing GEMGXL control
registers
- nvme-fabrics: decode host pathing error for connect
- dm verity: fix require_signatures module_param permissions
- bnx2x: Fix missing error code in bnx2x_iov_init_one()
- nvmet: fix false keep-alive timeout when a controller is torn down
- spi: Don't have controller clean up spi device before driver unbind
- spi: Cleanup on failure of initial setup
- [powerpc] i2c: mpc: Make use of i2c_recover_bus()
- [powerpc] i2c: mpc: implement erratum A-004447 workaround
- ALSA: seq: Fix race of snd_seq_timer_open()
- ALSA: firewire-lib: fix the context to call snd_pcm_stop_xrun()
- ALSA: hda/realtek: headphone and mic don't work on an Acer laptop
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP Elite
Dragonfly G2
- ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP EliteBook x360
1040 G8
- ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840 Aero G8
- ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8
- [arm*] spi: bcm2835: Fix out-of-bounds access with more than 4 slaves
- Revert "ACPI: sleep: Put the FACS table after using it"
- drm: Fix use-after-free read in drm_getunique()
- drm: Lock pointer access in drm_master_release()
- [x86] perf/x86/intel/uncore: Fix M2M event umask for Ice Lake server
- [x86] KVM: X86: MMU: Use the correct inherited permissions to get shadow
page
- kvm: avoid speculation-based attacks from out-of-range memslot accesses
- [arm64,x86] staging: rtl8723bs: Fix uninitialized variables
- async_xor: check src_offs is not NULL before updating it
- btrfs: return value from btrfs_mark_extent_written() in case of error
- btrfs: promote debugging asserts to full-fledged checks in validate_super
- cgroup1: don't allow '\n' in renaming
- ftrace: Do not blindly read the ip address in ftrace_bug()
- USB: f_ncm: ncm_bitrate (speed) is unsigned
- usb: f_ncm: only first packet of aggregate needs to start timer
- usb: pd: Set PD_T_SINK_WAIT_CAP to 310ms
- [arm64,armhf] usb: dwc3-meson-g12a: fix usb2 PHY glue init when phy0 is
disabled
- [arm64,armhf] usb: dwc3: meson-g12a: Disable the regulator in the error
handling path of the probe
- [arm64,armhf] usb: dwc3: gadget: Bail from dwc3_gadget_exit() if
dwc->gadget is NULL
- [arm64,armhf] usb: dwc3: ep0: fix NULL pointer exception
- [arm64,armhf] usb: musb: fix MUSB_QUIRK_B_DISCONNECT_99 handling
- usb: typec: ucsi: Clear PPM capability data in ucsi_init() error path
- usb: gadget: f_fs: Ensure io_completion_wq is idle during unbind
- USB: serial: ftdi_sio: add NovaTech OrionMX product ID
- USB: serial: omninet: add device id for Zyxel Omni 56K Plus
- USB: serial: quatech2: fix control-request directions
- USB: serial: cp210x: fix alternate function for CP2102N QFN20
- usb: gadget: eem: fix wrong eem header operation
- usb: fix various gadgets null ptr deref on 10gbps cabling.
- usb: fix various gadget panics on 10gbps cabling
- usb: typec: tcpm: cancel vdm and state machine hrtimer when unregister
tcpm port
- usb: typec: tcpm: cancel frs hrtimer when unregister tcpm port
- regulator: core: resolve supply for boot-on/always-on regulators
- [arm64] regulator: max77620: Use device_set_of_node_from_dev()
- regulator: bd71828: Fix .n_voltages settings
- [arm64,armhf] usb: dwc3: gadget: Disable gadget IRQ during pullup disable
- usb: typec: mux: Fix copy-paste mistake in typec_mux_match
- [arm64] drm/msm/a6xx: fix incorrectly set uavflagprd_inv field for A650
- [arm64] drm/msm/a6xx: update/fix CP_PROTECT initialization
- [arm64] drm/msm/a6xx: avoid shadow NULL reference in failure path
- RDMA/ipoib: Fix warning caused by destroying non-initial netns
- RDMA/mlx4: Do not map the core_clock page to user space unless enabled
- ASoC: core: Fix Null-point-dereference in fmt_single_name()
- perf: Fix data race between pin_count increment/decrement
- sched/fair: Keep load_avg and load_sum synced
- sched/fair: Make sure to update tg contrib for blocked load
- sched/fair: Fix util_est UTIL_AVG_UNCHANGED handling
- [x86] nmi_watchdog: Fix old-style NMI watchdog regression on old Intel
CPUs
- [x86] KVM: x86: Ensure liveliness of nested VM-Enter fail tracepoint
message
- IB/mlx5: Fix initializing CQ fragments buffer
- NFS: Fix a potential NULL dereference in nfs_get_client()
- NFSv4: Fix deadlock between nfs4_evict_inode() and
nfs4_opendata_get_inode()
- kvm: fix previous commit for 32-bit builds
- NFS: Fix use-after-free in nfs4_init_client()
- NFSv4: Fix second deadlock in nfs4_evict_inode()
- NFSv4: nfs4_proc_set_acl needs to restore NFS_CAP_UIDGID_NOMAP on error.
- scsi: core: Fix error handling of scsi_host_alloc()
- scsi: core: Fix failure handling of scsi_add_host_with_dma()
- scsi: core: Put .shost_dev in failure path if host state changes to
RUNNING
- scsi: core: Only put parent device if host state differs from
SHOST_CREATED
- tracing: Correct the length check which causes memory corruption
- proc: only require mm_struct for writing
https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.45
- net: ieee802154: fix null deref in parse dev addr
- HID: quirks: Set INCREMENT_USAGE_ON_DUPLICATE for Saitek X65
- HID: a4tech: use A4_2WHEEL_MOUSE_HACK_B8 for A4TECH NB-95
- HID: hid-input: add mapping for emoji picker key
- HID: hid-sensor-hub: Return error for hid_set_field() failure
- HID: quirks: Add quirk for Lenovo optical mouse
- HID: multitouch: set Stylus suffix for Stylus-application devices, too
- HID: Add BUS_VIRTUAL to hid_connect logging
- HID: usbhid: fix info leak in hid_submit_ctrl
- [arm64,armhf] drm/tegra: sor: Do not leak runtime PM reference
- [arm64,armhf] gpu: host1x: Split up client initalization and registration
- [arm64,armhf] drm/tegra: sor: Fully initialize SOR before registration
- gfs2: Prevent direct-I/O write fallback errors from getting lost
- gfs2: fix a deadlock on withdraw-during-mount
- HID: gt683r: add missing MODULE_DEVICE_TABLE
- gfs2: Fix use-after-free in gfs2_glock_shrink_scan
- scsi: target: core: Fix warning on realtime kernels
- ethernet: myri10ge: Fix missing error code in myri10ge_probe()
- scsi: qedf: Do not put host in qedf_vport_create() unconditionally
- Bluetooth: Add a new USB ID for RTL8822CE
- scsi: scsi_devinfo: Add blacklist entry for HPE OPEN-V
- net: ipconfig: Don't override command-line hostnames or domains
- drm/amd/display: Allow bandwidth validation for 0 streams.
- drm/amdgpu: refine amdgpu_fru_get_product_info
- drm/amd/display: Fix potential memory leak in DMUB hw_init
- drm/amd/amdgpu:save psp ring wptr to avoid attack
- rtnetlink: Fix missing error code in rtnl_bridge_notify()
- net: Return the correct errno code
- fib: Return the correct errno code
https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.46
- afs: Fix an IS_ERR() vs NULL check
- mm/memory-failure: make sure wait for page writeback in memory_failure
- [x86] kvm: LAPIC: Restore guard to prevent illegal APIC register access
- fanotify: fix copy_event_to_user() fid error clean up
- batman-adv: Avoid WARN_ON timing related checks
- mac80211: fix skb length check in ieee80211_scan_rx()
- net: ipv4: fix memory leak in netlbl_cipsov4_add_std
- vrf: fix maximum MTU
- net: rds: fix memory leak in rds_recvmsg
- [arm64] net: dsa: felix: re-enable TX flow control in ocelot_port_flush()
- netfilter: nft_fib_ipv6: skip ipv6 packets from any to link-local
- ice: add ndo_bpf callback for safe mode netdev ops
- ice: parameterize functions responsible for Tx ring management
- udp: fix race between close() and udp_abort()
- rtnetlink: Fix regression in bridge VLAN configuration
- net/sched: act_ct: handle DNAT tuple collision
- net/mlx5e: Fix page reclaim for dead peer hairpin
- net/mlx5: Consider RoCE cap before init RDMA resources
- net/mlx5: DR, Allow SW steering for sw_owner_v2 devices
- net/mlx5: DR, Don't use SW steering when RoCE is not supported
- net/mlx5e: Block offload of outer header csum for UDP tunnels
- netfilter: synproxy: Fix out of bounds when parsing TCP options
- sch_cake: Fix out of bounds when parsing TCP options and header
- alx: Fix an error handling path in 'alx_probe()'
- cxgb4: fix endianness when flashing boot image
- cxgb4: fix sleep in atomic when flashing PHY firmware
- cxgb4: halt chip before flashing PHY firmware image
- net: make get_net_ns return error if NET_NS is disabled
- ethtool: strset: fix message length calculation
- qlcnic: Fix an error handling path in 'qlcnic_probe()'
- netxen_nic: Fix an error handling path in 'netxen_nic_probe()'
- cxgb4: fix wrong ethtool n-tuple rule lookup
- ipv4: Fix device used for dst_alloc with local routes
- net: qrtr: fix OOB Read in qrtr_endpoint_post
- bpf: Fix leakage under speculation on mispredicted branches
(CVE-2021-33624)
- ptp: improve max_adj check against unreasonable values
- net: cdc_ncm: switch to eth%d interface naming
- net: usb: fix possible use-after-free in smsc75xx_bind
- [arm64,armhf] net: fec_ptp: fix issue caused by refactor the fec_devtype
- net: ipv4: fix memory leak in ip_mc_add1_src
- net/af_unix: fix a data-race in unix_dgram_sendmsg / unix_release_sock
- net/mlx5: E-Switch, Read PF mac address
- net/mlx5: E-Switch, Allow setting GUID for host PF vport
- net/mlx5: Reset mkey index on creation
- be2net: Fix an error handling path in 'be_probe()'
- net: hamradio: fix memory leak in mkiss_close
- net: cdc_eem: fix tx fixup skb leak
- cxgb4: fix wrong shift.
- bnxt_en: Rediscover PHY capabilities after firmware reset
- bnxt_en: Fix TQM fastpath ring backing store computation
- bnxt_en: Call bnxt_ethtool_free() in bnxt_init_one() error path
- icmp: don't send out ICMP messages with a source address of 0.0.0.0
- [x86] platform/x86: thinkpad_acpi: Add X1 Carbon Gen 9 second fan support
- sched/pelt: Ensure that *_sum is always synced with *_avg
- [armhf] spi: stm32-qspi: Always wait BUSY bit to be cleared in
stm32_qspi_wait_cmd()
- ASoC: rt5682: Fix the fast discharge for headset unplugging in soundwire
mode
- [arm64,armhf] drm/sun4i: dw-hdmi: Make HDMI PHY into a platform device
- [arm64] ASoC: qcom: lpass-cpu: Fix pop noise during audio capture begin
- radeon: use memcpy_to/fromio for UVD fw upload
- mm: relocate 'write_protect_seq' in struct mm_struct
- [arm64,armhf] irqchip/gic-v3: Workaround inconsistent PMR setting on NMI
entry
- bpf: Inherit expanded/patched seen count from old aux data
(CVE-2021-33624)
- bpf: Do not mark insn as seen under speculative path verification
(CVE-2021-33624)
- can: bcm: fix infoleak in struct bcm_msg_head (CVE-2021-34693)
- can: bcm/raw/isotp: use per module netdevice notifier
- can: j1939: fix Use-after-Free, hold skb ref while in use
- can: mcba_usb: fix memory leak in mcba_usb
- usb: core: hub: Disable autosuspend for Cypress CY7C65632
- [arm64,armhf] usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection
- tracing: Do not stop recording cmdlines when tracing is off
- tracing: Do not stop recording comms if the trace file is being read
- tracing: Do no increment trace_clock_global() by one
- PCI: Mark TI C667X to avoid bus reset
- PCI: Mark some NVIDIA GPUs to avoid bus reset
- [arm64] PCI: aardvark: Fix kernel panic during PIO transfer
- PCI: Add ACS quirk for Broadcom BCM57414 NIC
- PCI: Work around Huawei Intelligent NIC VF FLR erratum
- [x86] KVM: x86: Immediately reset the MMU context when the SMM flag is
cleared
- [x86] KVM: x86/mmu: Calculate and check "full" mmu_role for nested MMU
- [x86] KVM: X86: Fix x86_emulator slab cache leak
- [s390x] mcck: fix calculation of SIE critical section size
- [s390x] ap: Fix hanging ioctl caused by wrong msg counter
- [amd64] x86/mm: Avoid truncating memblocks for SGX memory
- [x86] process: Check PF_KTHREAD and not current->mm for kernel threads
- [x86] ioremap: Map EFI-reserved memory as encrypted for SEV
- [x86] pkru: Write hardware init value to PKRU when xstate is init
- [x86] fpu: Prevent state corruption in __fpu__restore_sig()
- [x86] fpu: Invalidate FPU state after a failed XRSTOR from a user buffer
- [x86] fpu: Reset state for all signal restore failures
- crash_core, vmcoreinfo: append 'SECTION_SIZE_BITS' to vmcoreinfo
- [arm64,armhf] dmaengine: pl330: fix wrong usage of spinlock flags in
dma_cyclc
- mac80211: Fix NULL ptr deref for injected rate info
- cfg80211: avoid double free of PMSR request
- drm/amdgpu/gfx10: enlarge CP_MEC_DOORBELL_RANGE_UPPER to cover full
doorbell.
- drm/amdgpu/gfx9: fix the doorbell missing when in CGPG issue.
- net: ll_temac: Fix TX BD buffer overwrite
- net: bridge: fix vlan tunnel dst null pointer dereference
- net: bridge: fix vlan tunnel dst refcnt when egressing
- mm/swap: fix pte_same_as_swp() not removing uffd-wp bit when compare
- mm/slub: clarify verification reporting
- mm/slub: fix redzoning for small allocations
- mm/slub: actually fix freelist pointer vs redzoning
- mm/slub.c: include swab.h
- net: stmmac: disable clocks in stmmac_remove_config_dt()
- [arm64,armhf] net: fec_ptp: add clock rate zero check
- [arm64,armhf] usb: dwc3: debugfs: Add and remove endpoint dirs dynamically
- [arm64,armhf] usb: dwc3: core: fix kernel panic when do reboot
.
[ Josua Mayer ]
* [armhf] drivers/bluetooth: Enable BT_HCIUART as a module, with support
for all features already enabled in the generic config. (Closes: #987361)
* [armhf] enable i.MX6 MIPI-CSI video capture device. (Closes: #987365)
- drivers/mux: Enable MUX_MMIO as a module.
- drivers/media/platform: Enable VIDEO_MUX as a module.
- drivers/staging/media/imx: Enable VIDEO_IMX_MEDIA and VIDEO_IMX_CSI as
modules.
.
[ Uwe Kleine-König ]
* [arm64] Update device tree for Kobol's helios64 from next
.
[ Salvatore Bonaccorso ]
* [rt] Refresh "net/Qdisc: use a seqlock instead seqcount"
* Ignore some ABI changes that should not affect OOT modules
* Bump ABI to 8
* [rt] Refresh "tracing: Merge irqflags + preempt counter"
* can: bcm: delay release of struct bcm_op after synchronize_rcu()
(CVE-2021-3609)
* Revert "PCI: PM: Do not read power state in pci_enable_device_flags()"
(Closes: #990008)
.
[ Vagrant Cascadian ]
* [arm64] Add pwm-rockchip to fb-modules udeb.
* [arm64] Add fusb302, tcpm and typec to usb-modules udeb.
* [armhf] Add gpio-mxc to kernel-image udeb. Thanks to Rick Thomas.
(Closes: #982270)
Checksums-Sha1:
2227aff8de5c4ae5b73feb27f3ea8667609cef40 195000 linux_5.10.46-1.dsc
28d0ba1a26c98af40cd304a2dbbb9e7c03f2d172 121572512 linux_5.10.46.orig.tar.xz
d798e9f96a5e8b825ba50e280736d5d0e1fe61d3 1399644 linux_5.10.46-1.debian.tar.xz
b638745054c030cd7d25ff17c550989e95a4e36c 6224 linux_5.10.46-1_source.buildinfo
Checksums-Sha256:
85495415070e7a7446b30170fde71920555b60ed136cd0349581b7a29820d349 195000 linux_5.10.46-1.dsc
bcd8edcbc6ed21d93dc138a754b1ac08329452c2ea509ae2a4071cd521da38a3 121572512 linux_5.10.46.orig.tar.xz
7af4de8d3f250fd822ecf820ffa46650520b6953264b97db242a301a0991e983 1399644 linux_5.10.46-1.debian.tar.xz
e270a4870488f9756605b00e6cf584cc4acf957c37193b09ab8171774174882a 6224 linux_5.10.46-1_source.buildinfo
Files:
9e6f0b1c9b0b775bdd7d03af61822161 195000 kernel optional linux_5.10.46-1.dsc
20074caf4bbf7773920f6e5f08beb771 121572512 kernel optional linux_5.10.46.orig.tar.xz
d99ef592e7e874a6d3c6a12168f4b6ce 1399644 kernel optional linux_5.10.46-1.debian.tar.xz
3eac5007ad9818339a6e697b13495c98 6224 kernel optional linux_5.10.46-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=83NZ
-----END PGP SIGNATURE-----
--- End Message ---