-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 29 Jun 2019 09:29:10 +0200 Binary: linux-doc-4.9 linux-headers-4.9.0-10-common linux-headers-4.9.0-10-common-rt linux-manual-4.9 linux-source-4.9 linux-support-4.9.0-10 Source: linux Architecture: all source Version: 4.9.184-1 Distribution: stretch Urgency: medium Maintainer: Debian Kernel Team <debian-kernel@lists.debian.org> Changed-By: Salvatore Bonaccorso <carnil@debian.org> Closes: 866122 930904 Description: linux-doc-4.9 - Linux kernel specific documentation for version 4.9 linux-headers-4.9.0-10-common - Common header files for Linux 4.9.0-10 linux-headers-4.9.0-10-common-rt - Common header files for Linux 4.9.0-10-rt linux-manual-4.9 - Linux kernel API manual pages for version 4.9 linux-source-4.9 - Linux kernel source for version 4.9 with Debian patches linux-support-4.9.0-10 - Support files for Linux 4.9 Changes: linux (4.9.184-1) stretch; urgency=medium . * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.169 - [x86] power: Fix some ordering bugs in __restore_processor_context() - [amd64] power/64: Use struct desc_ptr for the IDT in struct saved_context - [i386] power/32: Move SYSENTER MSR restoration to fix_processor_context() - [x86] power: Make restore_processor_context() sane - [ppc64el] powerpc/tm: Limit TM code inside PPC_TRANSACTIONAL_MEM - [ppc64el] Fix invalid use of register expressions - [ppc64el] powerpc/64s: Add barrier_nospec - [ppc64el] powerpc/64s: Add support for ori barrier_nospec patching - [ppc64el] Avoid code patching freed init sections - [ppc64el] powerpc/64s: Patch barrier_nospec in modules - [ppc64el] powerpc/64s: Enable barrier_nospec based on firmware settings - [ppc64el] Use barrier_nospec in copy_from_user() - [ppc64el] powerpc/64: Use barrier_nospec in syscall entry - [ppc64el] powerpc/64s: Enhance the information in cpu_show_spectre_v1() - [ppc64el] powerpc64s: Show ori31 availability in spectre_v1 sysfs file not v2 - [ppc64el] powerpc/64: Disable the speculation barrier from the command line - [ppc64el] powerpc/64: Make stf barrier PPC_BOOK3S_64 specific. - [ppc64el] powerpc/64: Add CONFIG_PPC_BARRIER_NOSPEC - [ppc64el] powerpc/64: Call setup_barrier_nospec() from setup_arch() - [ppc64el] powerpc/64: Make meltdown reporting Book3S 64 specific - [ppc64el] asm: Add a patch_site macro & helpers for patching instructions - [ppc64el] powerpc/64s: Add new security feature flags for count cache flush - [ppc64el] powerpc/64s: Add support for software count cache flush - [ppc64el] powerpc/pseries: Query hypervisor for count cache flush settings - [ppc64el] powerpc/powernv: Query firmware for count cache flush settings - [ppc64el] security: Fix spectre_v2 reporting - [arm64] kaslr: Reserve size of ARM64_MEMSTART_ALIGN in linear region - tty: ldisc: add sysctl to prevent autoloading of ldiscs - ipv6: Fix dangling pointer when ipv6 fragment - ipv6: sit: reset ip header pointer in ipip6_rcv - openvswitch: fix flow actions reallocation - qmi_wwan: add Olicard 600 - sctp: initialize _pad of sockaddr_in before copying to user memory - tcp: Ensure DCTCP reacts to losses - vrf: check accept_source_route on the original netdevice - bnxt_en: Reset device on RX buffer errors. - bnxt_en: Improve RX consumer index validity check. - net/mlx5e: Add a lock on tir list - netns: provide pure entropy for net_hash_mix() - net: ethtool: not call vzalloc for zero sized memory request - ip6_tunnel: Match to ARPHRD_TUNNEL6 for dev type - ALSA: seq: Fix OOB-reads from strlcpy - Btrfs: do not allow trimming when a fs is mounted with the nologreplay option - block: do not leak memory in bio_copy_user_iov() - genirq: Respect IRQCHIP_SKIP_SET_WAKE in irq_chip_set_wake_parent() - virtio: Honour 'may_reduce_num' in vring_create_virtqueue - [arm64] futex: Fix FUTEX_WAKE_OP atomic ops with non-zero result value - [x86] xen: Prevent buffer overflow in privcmd ioctl - sched/fair: Do not re-read ->h_load_next during hierarchical load calculation - PCI: Add function 1 DMA alias quirk for Marvell 9170 SATA controller https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.170 - perf/core: Restore mmap record type correctly - ext4: add missing brelse() in add_new_gdb_meta_bg() - ext4: report real fs size after failed resize - [i386] ALSA: sb8: add a check for request_region - IB/mlx4: Fix race condition between catas error reset and aliasguid flows - [x86] thermal/int340x_thermal: Add additional UUIDs - [x86] thermal/int340x_thermal: fix mode setting - perf config: Fix an error in the config template documentation - perf config: Fix a memory leak in collect_config() - perf build-id: Fix memory leak in print_sdt_events() - perf top: Fix error handling in cmd_top() - perf hist: Add missing map__put() in error case - perf evsel: Free evsel->counts in perf_evsel__exit() - [arm64] irqchip/mbigen: Don't clear eventid when freeing an MSI - [x86] hpet: Prevent potential NULL pointer dereference - [i386] x86/cpu/cyrix: Use correct macros for Cyrix calls on Geode processors - [amd64] iommu/vt-d: Check capability before disabling protected memory - [x86] hw_breakpoints: Make default case in hw_breakpoint_arch_parse() return an error - fix incorrect error code mapping for OBJECTID_NOT_FOUND - ext4: prohibit fstrim in norecovery mode - rsi: improve kernel thread handling to fix kernel panic - 9p: do not trust pdu content for stat item size - 9p locks: add mount option for lock retry interval - f2fs: fix to do sanity check with current segment number - [arm64] serial: uartps: console_setup() can't be placed to init section - HID: i2c-hid: override HID descriptors for certain devices - [x86] ACPI / SBS: Fix GPE storm on recent MacBookPro's - cifs: fallback to older infolevels on findfirst queryinfo retry - kernel: hung_task.c: disable on suspend - [armhf] crypto: sha256/arm - fix crash bug in Thumb2 build - [armhf] crypto: sha512/arm - fix crash bug in Thumb2 build - [amd64] iommu/dmar: Fix buffer overflow during PCI bus notification - [arm64,armhf] soc/tegra: pmc: Drop locking from tegra_powergate_is_powered() - [armel,armhf] 8839/1: kprobe: make patch_lock a raw_spinlock_t - appletalk: Fix use-after-free in atalk_proc_exit - lib/div64.c: off by one in shift - include/linux/swap.h: use offsetof() instead of custom __swapoffset macro - [x86] tpm/tpm_crb: Avoid unaligned reads in crb_recv() - [arm64,armhf] net: stmmac: Set dma ring length before enabling the DMA https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.171 - bonding: fix event handling for stacked bonds - net: atm: Fix potential Spectre v1 vulnerabilities - net: bridge: fix per-port af_packet sockets - net: bridge: multicast: use rcu to access port list from br_multicast_start_querier - net: fou: do not use guehdr after iptunnel_pull_offloads in gue_udp_recv - tcp: tcp_grow_window() needs to respect tcp_space() - team: set slave to promisc if team is already in promisc mode - vhost: reject zero size iova range - ipv4: recompile ip options in ipv4_link_failure - ipv4: ensure rcu_read_lock() in ipv4_link_failure() - mmc: sdhci: Fix data command CRC error handling - [x86] tpm/tpm_i2c_atmel: Return -E2BIG when the transfer is incomplete - CIFS: keep FileInfo handle live during oplock break - [x86] KVM: Don't clear EFER during SMM transitions for 32-bit vCPU - [x86] iio/gyro/bmg160: Use millidegrees for temperature scale - [x86] io: accel: kxcjk1013: restore the range after resume. - [x86] staging: comedi: vmk80xx: Fix use of uninitialized semaphore - [x86] staging: comedi: vmk80xx: Fix possible double-free of ->usb_rx_buf - [x86] staging: comedi: ni_usb6501: Fix use of uninitialized mutex - [x86] staging: comedi: ni_usb6501: Fix possible double-free of ->usb_rx_buf - ALSA: core: Fix card races between register and disconnect - Revert "scsi: fcoe: clear FC_RP_STARTED flags when receiving a LOGO" - [x86] Revert "svm: Fix AVIC incomplete IPI emulation" - [x86] crypto: x86/poly1305 - fix overflow during partial reduction - [x86] kprobes: Verify stack frame on kretprobe - kprobes: Mark ftrace mcount handler functions nokprobe - kprobes: Fix error check when reusing optimized probes - rt2x00: do not increment sequence number while re-transmitting - mac80211: do not call driver wake_tx_queue op during reconfig - [x86] perf/x86/amd: Add event map for AMD Family 17h - sched/fair: Limit sched_cfs_period_timer() loop to avoid hard lockup - device_cgroup: fix RCU imbalance in error case - ALSA: info: Fix racy addition/deletion of nodes - percpu: stop printing kernel addresses (CVE-2018-5995) - [x86] i2c-hid: properly terminate i2c_hid_dmi_desc_override_table[] array - kernel/sysctl.c: fix out-of-bounds access when setting file-max https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.172 - kbuild: simplify ld-option implementation - cifs: do not attempt cifs operation on smb2+ rename error - tracing: Fix a memory leak by early error exit in trace_pid_write() - [mips*] scall64-o32: Fix indirect syscall number load - trace: Fix preempt_enable_no_resched() abuse - IB/rdmavt: Fix frwr memory registration - sched/numa: Fix a possible divide-by-zero - ceph: ensure d_name stability in ceph_dentry_hash() - ceph: fix ci->i_head_snapc leak - nfsd: Don't release the callback slot unless it was actually held - sunrpc: don't mark uninitialised items as VALID. - [arm64,armhf] drm/vc4: Fix memory leak during gpu reset. - [arm64,armhf] drm/vc4: Fix compilation error reported by kbuild test bot - USB: Add new USB LPM helpers - USB: Consolidate LPM checks to avoid enabling LPM twice - vsock/virtio: fix kernel panic from virtio_transport_reset_no_sock - tipc: handle the err returned from cmd header function - slip: make slhc_free() silently accept an error pointer - [x86] intel_th: gth: Fix an off-by-one in output unassigning - fs/proc/proc_sysctl.c: Fix a NULL pointer dereference - NFS: Forbid setting AF_INET6 to "struct sockaddr_in"->sin_family. - netfilter: ebtables: CONFIG_COMPAT: drop a bogus WARN_ON - tipc: check bearer name with right length in tipc_nl_compat_bearer_enable - tipc: check link name with right length in tipc_nl_compat_link_set - ipv4: add sanity checks in ipv4_link_failure() - net/mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query - net: rds: exchange of 8K and 1M pool - team: fix possible recursive locking when add slaves - [arm64,armhf] net: stmmac: move stmmac_check_ether_addr() to driver probe - ipv4: set the tcp_min_rtt_wlen range from 0 to one day - ipv6: frags: fix a lockdep false positive - net: IP defrag: encapsulate rbtree defrag code into callable functions - ipv6: remove dependency of nf_defrag_ipv6 on ipv6 module - net: IP6 defrag: use rbtrees for IPv6 defrag - net: IP6 defrag: use rbtrees in nf_conntrack_reasm.c - Documentation: Add nospectre_v1 parameter https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.173 - usbnet: ipheth: prevent TX queue timeouts when device not ready - usbnet: ipheth: fix potential null pointer dereference in ipheth_carrier_set - media: vivid: check if the cec_adapter is valid - [armhf] dts: bcm283x: Fix hdmi hpd gpio pull - [s390x] limit brk randomization to 32MB - qlcnic: Avoid potential NULL pointer dereference - netfilter: nft_set_rbtree: check for inactive element after flag mismatch - netfilter: bridge: set skb transport_header before entering NF_INET_PRE_ROUTING - usb: gadget: net2280: Fix overrun of OUT messages - usb: gadget: net2280: Fix net2280_dequeue() - staging: rtl8712: uninitialized memory in read_bbreg_hdl() - NFS: Fix a typo in nfs_init_timeout_values() - scsi: qla4xxx: fix a potential NULL pointer dereference - usb: u132-hcd: fix resource leak - ceph: fix use-after-free on symlink traversal - [s390x] scsi: zfcp: reduce flood of fcrscn1 trace records on multi-element RSCN - [x86,arm64] libata: fix using DMA buffers on stack - gpio: of: Fix of_gpiochip_add() error path - [amd64] vfio/type1: Limit DMA mappings per container (CVE-2019-3882) https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.174 - ALSA: line6: use dynamic buffers - ipv4: ip_do_fragment: Preserve skb_iif during fragmentation - ipv6/flowlabel: wait rcu grace period before put_pid() - ipv6: invert flowlabel sharing check in process and user mode - packet: validate msg_namelen in send directly - bnxt_en: Improve multicast address setup logic. - net: phy: marvell: Fix buffer overrun with stats counters - [arm64] proc: Set PTE_NG for table entries to avoid traversing them twice - [arm64] mm: print out correct page table entries - [arm64] mm: don't print out page table entries on EL0 faults - USB: yurex: Fix protection fault after device removal - USB: w1 ds2490: Fix bug caused by improper use of altsetting array - [x86] usb: usbip: fix isoc packet num validation in get_pipe - USB: core: Fix unterminated string returned by usb_string() - USB: core: Fix bug caused by duplicate interface PM usage counter - nvme-loop: init nvmet_ctrl fatal_err_work when allocate - HID: logitech: check the return value of create_singlethread_workqueue - HID: debug: fix race condition with between rdesc_show() and device removal - batman-adv: Reduce claim hash refcnt only for removed entry - batman-adv: Reduce tt_local hash refcnt only for removed entry - batman-adv: Reduce tt_global hash refcnt only for removed entry - igb: Fix WARN_ONCE on runtime suspend - net/mlx5: E-Switch, Fix esw manager vport indication for more vport commands - bonding: show full hw address in sysfs for slave entries - [arm64,armhf] net: stmmac: don't overwrite discard_frame status - [arm64,armhf] net: stmmac: fix dropping of multi-descriptor RX frames - [arm64,armhf] net: stmmac: don't log oversized frames - jffs2: fix use-after-free on symlink traversal - debugfs: fix use-after-free on symlink traversal - [amd64,ppc64el] vfio/pci: use correct format characters - scsi: core: add new RDAC LENOVO/DE_Series device - [x86] scsi: storvsc: Fix calculation of sub-channel count - [arm64] net: hns: fix KASAN: use-after-free in hns_nic_net_xmit_hw() - [arm64] net: hns: Use NAPI_POLL_WEIGHT for hns driver - [arm64] net: hns: Fix WARNING when remove HNS driver with SMMU enabled - hugetlbfs: fix memory leak for resv_map - [armel] orion: don't use using 64-bit DMA masks - [x86] perf/x86/amd: Update generic hardware cache events for Family 17h - scsi: RDMA/srpt: Fix a credit leak for aborted commands - selinux: never allow relabeling on context mounts - [x86] mce: Improve error message when kernel cannot recover, p2 - media: v4l2: i2c: ov7670: Fix PLL bypass register values https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.175 - scsi: libsas: fix a race condition when smp task timeout (CVE-2018-20836) - ASoC:soc-pcm:fix a codec fixup issue in TDM case - [amd64] IB/hfi1: Eliminate opcode tests on mr deref - [x86] perf/x86/intel: Fix handling of wakeup_events for multi-entry PEBS - scsi: csiostor: fix missing data copy in csio_scsi_err_handler() - virtio-blk: limit number of hw queues by nr_cpu_ids - [amd64] iommu/amd: Set exclusion range correctly - mm: add 'try_get_page()' helper function - genirq: Prevent use-after-free and work list corruption - [arm64,armhf] usb: dwc3: Fix default lpm_nyet_threshold value - USB: serial: f81232: fix interrupt worker not stop - usb-storage: Set virt_boundary_mask to avoid SG overflows - scsi: qla2xxx: Fix incorrect region-size setting in optrom SYSFS routines - UAS: fix alignment of scatter/gather segments - [x86] ASoC: Intel: avoid Oops if DMA setup fails - timer/debug: Change /proc/timer_stats from 0644 to 0600 (CVE-2017-5967) https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.176 https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.177 - netfilter: compat: initialize all fields in xt_init - bpf: fix struct htab_elem layout - bpf: convert htab map to hlist_nulls - [x86] platform/x86: sony-laptop: Fix unintentional fall-through - USB: serial: fix unthrottle races - [x86] libnvdimm/namespace: Fix a potential NULL pointer dereference - HID: input: add mapping for Expose/Overview key - HID: input: add mapping for keyboard Brightness Up/Down/Toggle keys - HID: input: add mapping for "Toggle Display" key - [x86] libnvdimm/btt: Fix a kmemdup failure check - [s390x] dasd: Fix capacity calculation for large volumes - mac80211: fix unaligned access in mesh table hash function - [s390x] 3270: fix lockdep false positive on view->lock - mISDN: Check address length before reading address family - [x86] reboot, efi: Use EFI reboot for Acer TravelMate X514-51T - [x86] KVM: avoid misreporting level-triggered irqs as edge-triggered in tracing - init: initialize jump labels before command line option parsing - ipvs: do not schedule icmp errors from tunnels - [s390x] ctcm: fix ctcm_new_device error return code - [armhf] gpu: ipu-v3: dp: fix CSC handling - rtlwifi: rtl8723ae: Fix missing break in switch statement - md/raid5: Don't jump to compute_result state from check_result state - bridge: Fix error path for kobject_init_and_add() - fib_rules: return 0 directly if an exactly same rule exists when NLM_F_EXCL not supplied - packet: Fix error path in packet_init - vlan: disable SIOCSHWTSTAMP in container - vrf: sit mtu should not be updated when vrf netdev is the link - ipv4: Fix raw socket lookup for local traffic - bonding: fix arp_validate toggling in active-backup mode https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.178 - net: core: another layer of lists, around PF_MEMALLOC skb handling - locking/rwsem: Prevent decrement of reader count before increment - [amd64] PCI: hv: Fix a memory leak in hv_eject_device_work() - [x86] speculation/mds: Revert CPU buffer clear on double fault exit - [x86] speculation/mds: Improve CPU buffer clear documentation - [armhf] exynos: Fix a leaked reference by adding missing of_node_put - [arm64] compat: Reduce address limit - [arm64] Clear OSDLR_EL1 on CPU boot - [x86] sched/x86: Save [ER]FLAGS on context switch - crypto: chacha20poly1305 - set cra_name correctly - [ppc64el] crypto: vmx - fix copy-paste error in CTR mode - crypto: crct10dif-generic - fix use via crypto_shash_digest() - [amd64] crypto: x86/crct10dif-pcl - fix use via crypto_shash_digest() - ALSA: usb-audio: Fix a memory leak bug - ALSA: hda/hdmi - Read the pin sense from register when repolling - ALSA: hda/hdmi - Consider eld_valid when reporting jack event - ALSA: hda/realtek - EAPD turn on later - ASoC: max98090: Fix restore of DAPM Muxes - ASoC: RT5677-SPI: Disable 16Bit SPI Transfers - ocfs2: fix ocfs2 read inode data panic in ocfs2_iget - [arm64] mfd: max77620: Fix swapped FPS_PERIOD_MAX_US values - tty/vt: fix write/write race in ioctl(KDSKBSENT) handler - jbd2: check superblock mapped prior to committing - ext4: actually request zeroing of inode table after grow - ext4: fix ext4_show_options for file systems w/o journal - Btrfs: do not start a transaction at iterate_extent_inodes() - bcache: fix a race between cache register and cacheset unregister - bcache: never set KEY_PTRS of journal key to 0 in journal_reclaim() - [arm64] ipmi:ssif: compare block number correctly for multi-part return messages - crypto: gcm - Fix error return code in crypto_gcm_create_common() - crypto: gcm - fix incompatibility between "gcm" and "gcm_base" - crypto: salsa20 - don't access already-freed walk.iv - fib_rules: fix error in backport of e9919a24d302 ("fib_rules: return 0...") - writeback: synchronize sync(2) against cgroup writeback membership switches - fs/writeback.c: use rcu_barrier() to wait for inflight wb switches going into workqueue when umount - ext4: fix data corruption caused by overlapping unaligned and aligned IO - [x86] ALSA: hda/realtek - Fix for Lenovo B50-70 inverted internal microphone bug - [x86] KVM: Skip EFER vs. guest CPUID checks for host-initiated writes https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.179 - net: avoid weird emergency message - net/mlx4_core: Change the error print to info print - ppp: deflate: Fix possible crash in deflate_init - tipc: switch order of device registration to fix a crash - vsock/virtio: free packets during the socket release - tipc: fix modprobe tipc failed after switch order of device registration - vsock/virtio: Initialize core virtio vsock before registering the driver - md: add mddev->pers to avoid potential NULL pointer dereference - [x86] intel_th: msu: Fix single mode with IOMMU - p54: drop device reference count if fails to enable device - cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level() - NFS4: Fix v4.0 client state corruption when mount - [arm64,armhf] clk: tegra: Fix PLLM programming on Tegra124+ when PMC overrides divider - fuse: fix writepages on 32bit - fuse: honor RLIMIT_FSIZE in fuse_file_fallocate - [arm64,armhf] iommu/tegra-smmu: Fix invalid ASID bits on Tegra30/114 - ceph: flush dirty inodes before proceeding with remount - tracing: Fix partial reading of trace event's id file - [arm64,armhf] memory: tegra: Fix integer overflow on tick value calculation - [x86] perf intel-pt: Fix instructions sampling rate - [x86] perf intel-pt: Fix improved sample timestamp - [x86] perf intel-pt: Fix sample timestamp wrt non-taken branches - PCI: Mark Atheros AR9462 to avoid bus reset - PCI: Work around Pericom PCIe-to-PCI bridge Retrain Link erratum - dm delay: fix a crash when invalid device is specified - xfrm: policy: Fix out-of-bound array accesses in __xfrm_policy_unlink - xfrm6_tunnel: Fix potential panic when unloading xfrm6_tunnel module - vti4: ipip tunnel deregistration fixes. - xfrm4: Fix uninitialized memory read in _decode_session4 - mac80211: Fix kernel panic due to use of txq after free - [arm64,armhf] KVM: arm/arm64: Ensure vcpu target is unset on reset failure - power: supply: sysfs: prevent endless uevent loop with CONFIG_POWER_SUPPLY_DEBUG - ufs: fix braino in ufs_get_inode_gid() for solaris UFS flavour - Revert "Don't jump to compute_result state from check_result state" - md/raid: raid5 preserve the writeback action after the parity check - btrfs: Honour FITRIM range constraints during free space trim https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.180 - ext4: do not delete unlinked inode from orphan list on failed truncate - [x86] KVM: fix return value for reserved EFER - bio: fix improper use of smp_mb__before_atomic() - Revert "scsi: sd: Keep disk read-only when re-reading partition" - [ppc64el] crypto: vmx - CTR: always increment IV as quadword - [x86] kvm: svm/avic: fix off-by-one in checking host APIC ID - [x86] libnvdimm/namespace: Fix label tracking error - [arm64] Save and restore OSDLR_EL1 across suspend/resume - gfs2: Fix sign extension bug in gfs2_update_stats - Btrfs: do not abort transaction at btrfs_update_root() after failure to COW path - Btrfs: fix race between ranged fsync and writeback of adjacent ranges - btrfs: sysfs: don't leak memory when failing add fsid - fbdev: fix divide error in fb_var_to_videomode - hugetlb: use same fault hash key for shared and private mappings - fbdev: fix WARNING in __alloc_pages_nodemask bug - media: cpia2: Fix use-after-free in cpia2_exit - media: vivid: use vfree() instead of kfree() for dev->bitmap_cap - [x86,ppc64el] ssb: Fix possible NULL pointer dereference in ssb_host_pcmcia_exit - at76c50x-usb: Don't register led_trigger if usb_register_driver failed - Revert "btrfs: Honour FITRIM range constraints during free space trim" - gfs2: Fix lru_count going negative - cxgb4: Fix error path in cxgb4_init_module - mmc: core: Verify SD bus width - [arm64] dmaengine: tegra210-dma: free dma controller in remove() - [arm64,armhf] ASoC: hdmi-codec: unlock the device on startup errors - [ppc64el] boot: Fix missing check of lseek() return value - brcm80211: potential NULL dereference in brcmf_cfg80211_vndr_cmds_dcmd_handler() - [armel,armhf] vdso: Remove dependency with the arch_timer driver internals - sched/cpufreq: Fix kobject memleak - scsi: qla2xxx: Fix a qla24xx_enable_msix() error path - iwlwifi: pcie: don't crash on invalid RX interrupt - w1: fix the resume command API - [armhf] dmaengine: pl330: _stop: clear interrupt status - mac80211/cfg80211: update bss channel on channel switch - mwifiex: prevent an array overflow - [armhf] crypto: sun4i-ss - Fix invalid calculation of hash end - bcache: return error immediately in bch_journal_replay() - bcache: fix failure in journal relplay - bcache: add failure check to run_cache_set() for journal replay - [x86] build: Move _etext to actual end of .text - smpboot: Place the __percpu annotation correctly - [amd64] mm: Remove in_nmi() warning from 64-bit implementation of vmalloc_fault() - HID: logitech-hidpp: use RAP instead of FAP to get the protocol version - media: au0828: stop video streaming only when last user stops - audit: fix a memory leak bug - media: au0828: Fix NULL pointer dereference in au0828_analog_stream_enable() - media: pvrusb2: Prevent a buffer overflow - [ppc64el] numa: improve control of topology updates - sched/core: Check quota and period overflow at usec to nsec conversion - sched/core: Handle overflow in cpu_shares_write_u64 - USB: core: Don't unbind interfaces following device reset failure - [amd64] irq: Limit IST stack overflow check to #DB stack - i40e: don't allow changes to HW VLAN stripping on active port VLANs - [arm64] vdso: Fix clock_getres() for CLOCK_REALTIME - RDMA/cxgb4: Fix null pointer dereference on alloc_skb failure - hwmon: (vt1211) Use request_muxed_region for Super-IO accesses - [x86] hwmon: (smsc47m1) Use request_muxed_region for Super-IO accesses - [x86] hwmon: (smsc47b397) Use request_muxed_region for Super-IO accesses - hwmon: (pc87427) Use request_muxed_region for Super-IO accesses - [x86] hwmon: (f71805f) Use request_muxed_region for Super-IO accesses - scsi: libsas: Do discovery on empty PHY to update PHY info - mmc: core: make pwrseq_emmc (partially) support sleepy GPIO controllers - [arm64] mmc_spi: add a status check for spi_sync_locked - PM / core: Propagate dev->power.wakeup_path when no callbacks - rtlwifi: fix a potential NULL pointer dereference - mwifiex: Fix mem leak in mwifiex_tm_cmd - brcmfmac: fix missing checks for kmemdup - brcmfmac: convert dev_init_lock mutex to completion - brcmfmac: fix race during disconnect when USB completion is in progress - brcmfmac: fix Oops when bringing up interface during USB disconnect - scsi: ufs: Fix regulator load and icc-level configuration - scsi: ufs: Avoid configuring regulator with undefined voltage range - [arm64] cpu_ops: fix a leaked reference by adding missing of_node_put - [x86] uaccess, signal: Fix AC=1 bloat - [amd64] x86/ia32: Fix ia32_restore_sigcontext() AC leak - chardev: add additional check for minor range overlap - HID: core: move Usage Page concatenation to Main item - [armhf] ASoC: eukrea-tlv320: fix a leaked reference by adding missing of_node_put - [armhf] ASoC: fsl_utils: fix a leaked reference by adding missing of_node_put - cxgb3/l2t: Fix undefined behaviour - [arm64,armhf] spi: tegra114: reset controller on probe - [armhf] media: wl128x: prevent two potential buffer overflows - virtio_console: initialize vtermno value for ports - [x86,ppc64el] tty: ipwireless: fix missing checks for ioremap - [x86] mce: Fix machine_check_poll() tests for error types - usb: core: Add PM runtime calls to usb_hcd_platform_shutdown - scsi: qla4xxx: avoid freeing unallocated dma memory - [arm64] dmaengine: tegra210-adma: use devm_clk_*() helpers - media: m88ds3103: serialize reset messages in m88ds3103_set_frontend - scsi: lpfc: Fix SLI3 commands being issued on SLI4 devices - [i386] spi : spi-topcliff-pch: Fix to handle empty DMA buffers - spi: Fix zero length xfer bug - drm: Wake up next in drm_read() chain if we are forced to putback the event https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.181 - ipv6: Consider sk_bound_dev_if when binding a raw socket to an address - llc: fix skb leak in llc_build_and_send_ui_pkt() - [armhf] net: fec: fix the clk mismatch in failed_reset path - net-gro: fix use-after-free read in napi_gro_frags() - [arm64,armhf] net: stmmac: fix reset gpio free missing - usbnet: fix kernel crash after disconnect - tipc: Avoid copying bytes beyond the supplied data - bnxt_en: Fix aggregation buffer leak under OOM condition. - ipv4/igmp: fix another memory leak in igmpv3_del_delrec() - ipv4/igmp: fix build error if !CONFIG_IP_MULTICAST - [armhf] net: dsa: mv88e6xxx: fix handling of upper half of STATS_TYPE_PORT - [armhf] net: mvneta: Fix err code path of probe - [armhf] net: mvpp2: fix bad MVPP2_TXQ_SCHED_TOKEN_CNTR_REG queue value - [ppc64el] crypto: vmx - ghash: do nosimd fallback manually - xen/pciback: Don't disable PCI_COMMAND on PCI device reset. (CVE-2015-8553) - Revert "tipc: fix modprobe tipc failed after switch order of device registration" - tipc: fix modprobe tipc failed after switch order of device registration - xhci: update bounce buffer with correct sg num - xhci: Use %zu for printing size_t type - xhci: Convert xhci_handshake() to use readl_poll_timeout_atomic() - usb: xhci: avoid null pointer deref when bos field is NULL - [x86] usbip: usbip_host: fix BUG: sleeping function called from invalid context - [x86] usbip: usbip_host: fix stub_dev lock context imbalance regression - USB: Fix slab-out-of-bounds write in usb_get_bos_descriptor - USB: sisusbvga: fix oops in error path of sisusb_probe - USB: Add LPM quirk for Surface Dock GigE adapter - USB: rio500: refuse more than one device at a time - USB: rio500: fix memory leak in close after disconnect - media: usb: siano: Fix general protection fault in smsusb - media: usb: siano: Fix false-positive "uninitialized variable" warning - media: smsusb: better handle optional alignment - [s390x] scsi: zfcp: fix missing zfcp_port reference put on -EBUSY from port_remove - [s390x] scsi: zfcp: fix to prevent port_remove with pure auto scan LUNs (only sdevs) - Btrfs: fix race updating log root item during fsync - [ppc64el] powerpc/perf: Fix MMCRA corruption by bhrb_filter - ALSA: hda/realtek - Set default power save node to 0 - drm/nouveau/i2c: Disable i2c bus access after ->fini() - [arm64] tty: serial: msm_serial: Fix XON/XOFF - memcg: make it work on sparse non-0-node systems - kernel/signal.c: trace_signal_deliver when signal_group_exit - CIFS: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM - [x86] drm/vmwgfx: Don't send drm sysfs hotplug events on initial master set - binder: Replace "%p" with "%pK" for stable (CVE-2018-20509) - binder: replace "%p" with "%pK" (CVE-2018-20510) - fs: prevent page refcount overflow in pipe_buf_get (CVE-2019-11487) - mm, gup: remove broken VM_BUG_ON_PAGE compound check for hugepages - mm, gup: ensure real head page is ref-counted when using hugepages - mm: prevent get_user_pages() from overflowing page refcount (CVE-2019-11487) - mm: make page ref count overflow check tighter and more explicit (CVE-2019-11487) - media: uvcvideo: Fix uvc_alloc_entity() allocation alignment - ethtool: fix potential userspace buffer overflow - neighbor: Call __ipv4_neigh_lookup_noref in neigh_xmit - net/mlx4_en: ethtool, Remove unsupported SFP EEPROM high pages query - net: rds: fix memory leak in rds_ib_flush_mr_pool - pktgen: do not sleep with the thread lock held. - ipv6: fix EFAULT on sendto with icmpv6 and hdrincl - ipv6: use READ_ONCE() for inet->hdrincl as in ipv4 - Revert "fib_rules: fix error in backport of e9919a24d302 ("fib_rules: return 0...")" - Revert "fib_rules: return 0 directly if an exactly same rule exists when NLM_F_EXCL not supplied" - rcu: locking and unlocking need to always be at least barriers - fuse: fallocate: fix return with locked inode - [x86] power: Fix 'nosmt' vs hibernation triple fault during resume - [ppc64el] genwqe: Prevent an integer overflow in the ioctl - [x86] drm/gma500/cdv: Check vbt config bits when detecting lvds panels - drm/radeon: prefer lower reference dividers - [x86] drm/i915: Fix I915_EXEC_RING_MASK - TTY: serial_core, add ->install - fs: stream_open - opener for stream-like files so that read and write can run simultaneously without deadlock - fuse: Add FOPEN_STREAM to use stream_open() - ipv4: Define __ipv4_neigh_lookup_noref when CONFIG_INET is disabled - ethtool: check the return value of get_regs_len https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.182 - tcp: reduce tcp_fastretrans_alert() verbosity https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.183 - fs/fat/file.c: issue flush after the writeback of FAT - sysctl: return -EINVAL if val violates minmax - ipc: prevent lockup on alloc_msg and free_msg - [armhf] prevent tracing IPI_CPU_BACKTRACE - hugetlbfs: on restore reserve error path retain subpool reservation - mem-hotplug: fix node spanned pages when we have a node with only ZONE_MOVABLE - [armhf,ppc64el] mm/cma.c: fix crash on CMA allocation if bitmap allocation fails - mm/slab.c: fix an infinite loop in leaks_show() - kernel/sys.c: prctl: fix false positive in validate_prctl_map() - [arm64] drivers: thermal: tsens: Don't print error message on -EPROBE_DEFER - [x86] mfd: intel-lpss: Set the device in reset state when init - mfd: twl6040: Fix device init errors for ACCCTL register - [x86] perf/intel: Allow PEBS multi-entry in watermark mode - [arm64] drm/bridge: adv7511: Fix low refresh rate selection - objtool: Don't use ignore flag for fake jumps - [arm64] pwm: meson: Use the spin-lock only to protect register modifications - ntp: Allow TAI-UTC offset to be set to zero - f2fs: fix to avoid panic in do_recover_data() - f2fs: fix to clear dirty inode in error path of f2fs_iget() - f2fs: fix to do sanity check on valid block count of segment - configfs: fix possible use-after-free in configfs_register_group - [armhf] watchdog: imx2_wdt: Fix set_timeout for big timeout values - watchdog: fix compile time error of pretimeout governors - [x86] iommu/vt-d: Set intel_iommu_gfx_mapped correctly - ALSA: hda - Register irq handler after the chip initialization - nvmem: core: fix read buffer in place - fuse: retrieve: cap requested size to negotiated max_write - nfsd: allow fh_want_write to be called twice - [x86] PCI: Fix PCI IRQ routing table memory leak - platform/chrome: cros_ec_proto: check for NULL transfer function - [armhf] clk: rockchip: Turn on "aclk_dmac1" for suspend on rk3288 - [armhf] dts: imx6sx: Specify IMX6SX_CLK_IPG as "ahb" clock to SDMA - [armhf] dts: imx7d: Specify IMX7D_CLK_IPG as "ipg" clock to SDMA - [armhf] dts: imx6ul: Specify IMX6UL_CLK_IPG as "ipg" clock to SDMA - [armhf] dts: imx6sx: Specify IMX6SX_CLK_IPG as "ipg" clock to SDMA - [armhf] dts: imx6qdl: Specify IMX6QDL_CLK_IPG as "ipg" clock to SDMA - [ppc64el] PCI: rpadlpar: Fix leaked device_node references in add/remove paths - [x86] platform: intel_pmc_ipc: adding error handling - [x86] video: hgafb: fix potential NULL pointer dereference - [arm64] PCI: xilinx: Check for __get_free_pages() failure - [armhf] gpio: gpio-omap: add check for off wake capable gpios - [x86] dmaengine: idma64: Use actual device for DMA transfers - [armhf] pwm: tiehrpwm: Update shadow register for disabling PWMs - [armhf] dts: exynos: Always enable necessary APIO_1V8 and ABB_1V8 regulators on Arndale Octa - pwm: Fix deadlock warning when removing PWM device - [armhf] exynos: Fix undefined instruction during Exynos5422 resume - ALSA: seq: Cover unsubscribe_port() in list_mutex - ALSA: oxfw: allow PCM capture for Stanton SCS.1m - libata: Extend quirks for the ST1000LM024 drives with NOLPM quirk - mm/list_lru.c: fix memory leak in __memcg_init_list_lru_node - fs/ocfs2: fix race in ocfs2_dentry_attach_lock() - signal/ptrace: Don't leak unitialized kernel memory with PTRACE_PEEK_SIGINFO - ptrace: restore smp_rmb() in __ptrace_may_access() - media: v4l2-ioctl: clear fields in s_parm - bcache: fix stack corruption by PRECEDING_KEY() - cgroup: Use css_tryget() instead of css_tryget_online() in task_get_css() - [x86] uaccess, kcov: Disable stack protector - ALSA: seq: Fix race of get-subscription call vs port-delete ioctls - Drivers: misc: fix out-of-bounds access in function param_set_kgdbts_var - scsi: lpfc: add check for loss of ndlp when sending RRQ - [arm64] mm: Inhibit huge-vmap with ptdump - scsi: bnx2fc: fix incorrect cast to u64 on shift operation - usbnet: ipheth: fix racing condition - [x86] KVM: pmu: do not mask the value that is written to fixed PMUs - [s390x] KVM: fix memory slot handling for KVM_SET_USER_MEMORY_REGION - [x86] drm/vmwgfx: integer underflow in vmw_cmd_dx_set_shader() leading to an invalid read - [x86] drm/vmwgfx: NULL pointer dereference from vmw_cmd_dx_view_define() - [arm64,armhf] usb: dwc2: Fix DMA cache alignment issues - USB: Fix chipmunk-like voice when using Logitech C270 for recording audio. - USB: usb-storage: Add new ID to ums-realtek - USB: serial: pl2303: add Allied Telesis VT-Kit3 - USB: serial: option: add support for Simcom SIM7500/SIM7600 RNDIS mode - USB: serial: option: add Telit 0x1260 and 0x1261 compositions - [armhf] rtc: pcf8523: don't return invalid date when battery is low - ax25: fix inconsistent lock state in ax25_destroy_timer - be2net: Fix number of Rx queues used for flow hashing - ipv6: flowlabel: fl6_sock_lookup() must use atomic_inc_not_zero - lapb: fixed leak of control-blocks. - neigh: fix use-after-free read in pneigh_get_next - [x86] perf/intel/ds: Fix EVENT vs. UEVENT PEBS constraints - mISDN: make sure device name is NUL terminated - [x86] CPU/AMD: Don't force the CPB cap when running under a hypervisor - perf/ring_buffer: Fix exposing a temporarily decreased data_head - perf/ring_buffer: Add ordering to rb->nest increment - i2c: dev: fix potential memory leak in i2cdev_ioctl_rdwr - configfs: Fix use-after-free when accessing sd->s_dentry - perf data: Fix 'strncat may truncate' build failure with recent gcc - perf record: Fix s390 missing module symbol and warning for non-root users - [ppc64el] KVM: Book3S: Use new mutex to synchronize access to rtas token list - [ppc64el] KVM: Book3S HV: Don't take kvm->lock around kvm_for_each_vcpu - scsi: libcxgbi: add a check for NULL pointer in cxgbi_check_route() - scsi: smartpqi: properly set both the DMA mask and the coherent DMA mask - scsi: libsas: delete sas port if expander discover failed - vfs: Abort file_remove_privs() for non-reg. files https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.184 - tcp: refine memory limit test in tcp_fragment() (Closes: #930904) . [ Salvatore Bonaccorso ] * [x86] Disable R3964 due to lack of security support * Refresh version.patch for context changes in 4.9.170 * [rt] Drop 0053-arm-kprobe-replace-patch_lock-to-raw-lock.patch applied in 4.9.170 * Revert "x86: stop exporting msr-index.h to userland" * [rt] Add new signing subkey for Steven Rostedt * [rt] Update to 4.9.178-rt131: - futex,rt_mutex: Restructure rt_mutex_finish_proxy_lock() - Update "kernel/hotplug: restore original cpu mask oncpu/down" to always call arch_smt_update() * Refresh 0058-net-ena-complete-host-info-to-match-latest-ENA-spec.patch for context changes in 4.9.180 * Drop efi-libstub-unify-command-line-param-parsing.patch * Refresh arm64-add-kernel-config-option-to-set-securelevel-wh.patch for context changes in 4.9.181 . [ Ben Hutchings ] * Drop "kbuild: Use -nostdinc in compile tests", which is no longer needed. * [rt] Fix build failure after "genirq: Prevent use-after-free and work list corruption": - kthread: Convert worker lock to raw spinlock - kthread: add a global worker thread. - genirq: convert affinity_notify swork to kthread * Bump ABI to 10 and apply deferred changes: - genirq: Avoid summation loops for /proc/stat * [ppc64el] Disable PPC_TRANSACTIONAL_MEM (Closes: #866122) Checksums-Sha1: c145ba5dd017d962c11276dd98bc476bc1815f57 125180 linux_4.9.184-1.dsc 4cd28db211c497aa599950c1631dad42bb384be2 94808164 linux_4.9.184.orig.tar.xz ba29c0163f2ec099d4f9b254c67880d6f211da9b 1245040 linux_4.9.184-1.debian.tar.xz 69ad09c30910d3cee2e0f8865e09ce412c4fc258 12515092 linux-doc-4.9_4.9.184-1_all.deb b46101561dc2b440667b5440bdd30804bd9ef4f4 5758230 linux-headers-4.9.0-10-common-rt_4.9.184-1_all.deb 11906f48a17b1046033042b1c4e44a98b41ad615 7692126 linux-headers-4.9.0-10-common_4.9.184-1_all.deb f1e203b8ac0280eaaeb2b9b6a91bcefe5d5c90d0 3231900 linux-manual-4.9_4.9.184-1_all.deb 54a97f142afff5d697d4dafa353935b43df51ff3 96879532 linux-source-4.9_4.9.184-1_all.deb 675fbb16547924f28ef5a5ec7bdfff3da8b3e701 693392 linux-support-4.9.0-10_4.9.184-1_all.deb Checksums-Sha256: bbf0086c83616e0d9d6bd5854b77eb6ceb06a672b94381fcd503926e389b6d09 125180 linux_4.9.184-1.dsc 71dcebacfec777b23e1f65d9147b21d0f20c0c909f6258b560ff2d2886920b03 94808164 linux_4.9.184.orig.tar.xz 0f32576e5a37d1012cab75a0f8a12d8311a247aa7af49fc594c79801c9628d45 1245040 linux_4.9.184-1.debian.tar.xz d4831074bb2393bb37436c4305e6f9de4ee6da4b90ce025db5c02e68c573902f 12515092 linux-doc-4.9_4.9.184-1_all.deb 07f70033482e282e8a856e40440c867e0cba0f4a3d55120a124a989b3f5f43ef 5758230 linux-headers-4.9.0-10-common-rt_4.9.184-1_all.deb 0984b28912fea98903d9dfb7c27aca8ac6e14ce48e5922e045bee9809abcc2b3 7692126 linux-headers-4.9.0-10-common_4.9.184-1_all.deb 43dde9f1aa65b90f0a28ec59ac16b27de03fa35ef3191486a38e14b4d86001ed 3231900 linux-manual-4.9_4.9.184-1_all.deb bacd2112b621dcbb0ceea6d25d046f747d3e4a09f093e902c7af5dfe168126ff 96879532 linux-source-4.9_4.9.184-1_all.deb 6fbc7b0d5b0c04b3b9f03f1c333a13f88356c5c143b9e5f3e8be965833becf9b 693392 linux-support-4.9.0-10_4.9.184-1_all.deb Files: d737dae5958a14b96d4bf05534374916 125180 kernel optional linux_4.9.184-1.dsc a4dfd298938daa9369d4374d7314f961 94808164 kernel optional linux_4.9.184.orig.tar.xz 826d663e9a8e616c7c05c142dc885743 1245040 kernel optional linux_4.9.184-1.debian.tar.xz 982e49220443a4eb33e8cf0fbf01cd3c 12515092 doc optional linux-doc-4.9_4.9.184-1_all.deb 03037c6ba507e1ab99421d2f14d445dd 5758230 kernel optional linux-headers-4.9.0-10-common-rt_4.9.184-1_all.deb d29e15009c3f05b3f1d333e827b67a31 7692126 kernel optional linux-headers-4.9.0-10-common_4.9.184-1_all.deb 90851cdb67f24cb98300248ec3cef3e8 3231900 doc optional linux-manual-4.9_4.9.184-1_all.deb 1e9f6eb59795b42d3a113350d49d7b6b 96879532 kernel optional linux-source-4.9_4.9.184-1_all.deb 925203c34d0c09a35044ab3d5ec1d743 693392 devel optional linux-support-4.9.0-10_4.9.184-1_all.deb -----BEGIN PGP SIGNATURE----- iQKmBAEBCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAl0XQ6VfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk ZWJpYW4ub3JnAAoJEAVMuPMTQ89EdFUP/1itnzy3azFjRZsQ0WIYcUttL038LCVf 5dvb7I74zMhrMPNrmlgGuYv1chVJUULYlKGv+L8rXW/ve8z1+/Xgau585waKqtH3 1kENCyyLl//BnECLvhdSm1ZEuIn1UKFz+nZcd3vIJx5UirKdS/Ns1e+TAsoRUYxp 3s7IbEOvFKIu3BD8EsHtPAa9YABc9SYS8jsyVJDGhHMPWymheICL62ZITSQ0W/o4 07U4H4iWPYWZRulIko5dtZ9Wkpuk/FLThJi+XFSpSZZQbPKvFx0bsHkCCo+5Rn2m ZRrVTfP9VdrWSodkd25v2TwyGhqLUQD76RDMc8KblA1JBHq88OyjEnx5zY2uXKab uvRorf3cx4vQPnTLwMHG5VI1b9g91wy8amSUpkqLAD7N7KksqAu3XJHjP9EuI6Sk l2Q7T5RQXS5MdYNE8q3BFqLGhjxNL7prUmq7p9jGeZQAVA0rPyFGsxAR/sRyt/kt OP0c762BwIU0WJd+swf2bppuF41nG1tBYhqbvKM0wwclkgIz/gtPTYuhfRnC4EPS orxQ0ggO5Lt7DcgMwKLGsNmjHs9PE4vfACrZSPsuvFQcAWUKBuirExPlDKIN8G+s d46Jr0u4HoMTEF5wwXPXGgGm0tccnjwVUq2yrGb2J71X/fWA1KhEnAkt5y+u41O/ 2/pDit1IvEFR =kgQY -----END PGP SIGNATURE-----
