-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Thu, 26 Nov 2020 21:23:20 +0100
Source: linux-signed-i386
Architecture: source
Version: 4.19.160+1
Distribution: buster-proposed-updates
Urgency: medium
Maintainer: Debian Kernel Team <debian-kernel@lists.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Changes:
linux-signed-i386 (4.19.160+1) buster; urgency=medium
.
* Sign kernel from linux 4.19.160-1
.
* New upstream stable update:
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.153
- [ppc64el] ibmveth: Switch order of ibmveth_helper calls.
- [ppc64el] ibmveth: Identify ingress large send packets.
- ipv4: Restore flowi4_oif update before call to xfrm_lookup_route
- mlx4: handle non-napi callers to napi_poll
- [armhf] net: fec: Fix phy_device lookup for phy_reset_after_clk_enable()
- [armhf] net: fec: Fix PHY init after phy_reset_after_clk_enable()
- net: fix pos incrementment in ipv6_route_seq_next
- net/smc: fix valid DMBE buffer sizes
- net: usb: qmi_wwan: add Cellient MPL200 card
- tipc: fix the skb_unshare() in tipc_buf_append()
- net/ipv4: always honour route mtu during forwarding
- r8169: fix data corruption issue on RTL8402
- [arm*] binder: fix UAF when releasing todo list (CVE-2020-0423)
- ALSA: bebob: potential info leak in hwdep_read()
- net: hdlc: In hdlc_rcv, check to make sure dev is an HDLC device
- [x86,ppc64el] net: hdlc_raw_eth: Clear the IFF_TX_SKB_SHARING flag after
calling ether_setup
- net/sched: act_tunnel_key: fix OOB write in case of IPv6 ERSPAN tunnels
- nfc: Ensure presence of NFC_ATTR_FIRMWARE_NAME attribute in
nfc_genl_fw_download()
- tcp: fix to update snd_wl1 in bulk receiver fast path
- r8169: fix operation under forced interrupt threading
- icmp: randomize the global rate limiter (CVE-2020-25705)
- ALSA: hda/realtek: Enable audio jacks of ASUS D700SA with ALC887
- cifs: remove bogus debug code
- cifs: Return the error from crypt_message when enc/dec key not found.
- [x86] KVM: x86/mmu: Commit zap of remaining invalid pages when
recovering lpages
- [x86] KVM: SVM: Initialize prev_ga_tag before use
- crypto: algif_aead - Do not set MAY_BACKLOG on the async path
- [x86] EDAC/i5100: Fix error handling order in i5100_init_one()
- [x86] fpu: Allow multiple bits in clearcpuid= parameter
- [arm64] drivers/perf: xgene_pmu: Fix uninitialized resource struct
- [x86] nmi: Fix nmi_handle() duration miscalculation
- [amd64] x86/events/amd/iommu: Fix sizeof mismatch
- crypto: algif_skcipher - EBUSY on aio should be an error
- media: tuner-simple: fix regression in simple_set_radio_freq
- media: uvcvideo: Set media controller entity functions
- media: uvcvideo: Silence shift-out-of-bounds warning
- [armhf] media: omap3isp: Fix memleak in isp_probe
- [armhf] media: ti-vpe: Fix a missing check and reference count leak
- regulator: resolve supply after creating regulator
- ath10k: provide survey info as accumulated data
- Bluetooth: hci_uart: Cancel init work before unregistering
- ath6kl: prevent potential array overflow in ath6kl_add_new_sta()
- ath9k: Fix potential out of bounds in ath9k_htc_txcompletion_cb()
- ath10k: Fix the size used in a 'dma_free_coherent()' call in an error
handling path
- [arm64] wcn36xx: Fix reported 802.11n rx_highest rate wcn3660/wcn3680
- [arm64] ASoC: qcom: lpass-platform: fix memory leak
- [arm64] ASoC: qcom: lpass-cpu: fix concurrency issue
- brcmfmac: check ndev pointer
- mwifiex: Do not use GFP_KERNEL in atomic context
- [x86] staging: rtl8192u: Do not use GFP_KERNEL in atomic context
- [x86] drm/gma500: fix error check
- scsi: qla4xxx: Fix an error handling path in 'qla4xxx_get_host_stats()'
- scsi: qla2xxx: Fix wrong return value in qla_nvme_register_hba()
- scsi: csiostor: Fix wrong return value in csio_hw_prep_fw()
- [x86] VMCI: check return value of get_user_pages_fast() for errors
- [ppc64el] tty: hvcs: Don't NULL tty->driver_data until hvcs_cleanup()
- pty: do tty_flip_buffer_push without port->lock in pty_write
- [x86] pwm: lpss: Fix off by one error in base_unit math in
pwm_lpss_prepare()
- [x86] pwm: lpss: Add range limit check for the base_unit register value
- [x86] video: fbdev: vga16fb: fix setting of pixclock because a
pass-by-value error
- video: fbdev: sis: fix null ptr dereference
- video: fbdev: radeon: Fix memleak in radeonfb_pci_register
- HID: roccat: add bounds checking in kone_sysfs_write_settings()
- [armhf] pinctrl: mcp23s08: Fix mcp23x17_regmap initialiser
- [armhf] pinctrl: mcp23s08: Fix mcp23x17 precious range
- net/mlx5: Don't call timecounter cyc2time directly from 1PPS flow
- [arm64,armhf] net: stmmac: use netif_tx_start|stop_all_queues() function
- [arm64] cpufreq: armada-37xx: Add missing MODULE_DEVICE_TABLE
- ath6kl: wmi: prevent a shift wrapping bug in
ath6kl_wmi_delete_pstream_cmd()
- [amd64] misc: mic: scif: Fix error handling path
- [arm*] usb: dwc2: Fix parameter type in function pointer prototype
- quota: clear padding in v2r1_mem2diskdqb()
- HID: hid-input: fix stylus battery reporting
- net: enic: Cure the enic api locking trainwreck
- [mips*] mfd: sm501: Fix leaks in probe()
- iwlwifi: mvm: split a print to avoid a WARNING in ROC
- usb: gadget: f_ncm: fix ncm_bitrate for SuperSpeed and above.
- usb: gadget: u_ether: enable qmult on SuperSpeed Plus as well
- nl80211: fix non-split wiphy information
- [arm*] usb: dwc2: Fix INTR OUT transfers in DDMA mode.
- scsi: target: tcmu: Fix warning: 'page' may be used uninitialized
- scsi: be2iscsi: Fix a theoretical leak in beiscsi_create_eqs()
- mwifiex: fix double free
- ipvs: clear skb->tstamp in forwarding path
- netfilter: nf_log: missing vlan offload tag and proto
- mm/memcg: fix device private memcg accounting
- mm, oom_adj: don't loop through tasks in __set_oom_adj when not
necessary
- IB/mlx4: Fix starvation in paravirt mux/demux
- IB/mlx4: Adjust delayed work when a dup is observed
- [powerpc*] pseries: Fix missing of_node_put() in rng_init()
- [powerpc*] icp-hv: Fix missing of_node_put() in success path
- RDMA/ucma: Fix locking for ctx->events_reported
- RDMA/ucma: Add missing locking around rdma_leave_multicast()
- [powerpc*] pseries: explicitly reschedule during drmem_lmb list
traversal
- mtd: mtdoops: Don't write panic data twice
- [armel,armhf] ARM: 9007/1: l2c: fix prefetch bits init in L2X0_AUX_CTRL
using DT values
- xfs: limit entries returned when counting fsmap records
- xfs: fix high key handling in the rt allocator's query_range function
- RDMA/qedr: Fix use of uninitialized field
- RDMA/qedr: Fix inline size returned for iWARP
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.154
- [powerpc*] 64s/radix: Fix mm_cpumask trimming race vs kthread_use_mm
- RDMA/cma: Remove dead code for kernel rdmacm multicast
- RDMA/cma: Consolidate the destruction of a cma_multicast in one place
- [arm64] RDMA/hns: Set the unsupported wr opcode
- [arm64] RDMA/hns: Fix missing sq_sig_type when querying QP
- overflow: Include header file with SIZE_MAX declaration
- [powerpc*] perf: Exclude pmc5/6 from the irrelevant PMU group
constraints
- [poerpc*] cpufreq: powernv: Fix frame-size-overflow in
powernv_cpufreq_reboot_notifier
- IB/rdmavt: Fix sizeof mismatch
- f2fs: wait for sysfs kobject removal before freeing f2fs_sb_info
- lib/crc32.c: fix trivial typo in preprocessor condition
- rapidio: fix error handling path
- rapidio: fix the missed put_device() for rio_mport_add_riodev
- mailbox: avoid timer start from callback
- [arm64,armhf] clk: rockchip: Initialize hw to error to avoid undefined
behavior
- [arm*] clk: bcm2835: add missing release if devm_clk_hw_register fails
- watchdog: Fix memleak in watchdog_cdev_register
- watchdog: Use put_device on error
- svcrdma: fix bounce buffers for unaligned offsets and multiple pages
- ext4: limit entries returned when counting fsmap records
- vfio/pci: Clear token on bypass registration failure
- [amd64,arm64] vfio iommu type1: Fix memory leak in
vfio_iommu_type1_pin_pages
- SUNRPC: fix copying of multiple pages in gss_read_proxy_verf()
- [armhf] Input: omap4-keypad - fix handling of platform_get_irq() error
- [armhf] Input: twl4030_keypad - fix handling of platform_get_irq() error
- [armhf] Input: sun4i-ps2 - fix handling of platform_get_irq() error
- [x86] KVM: emulating RDPID failure shall return #UD rather than #GP
- netfilter: conntrack: connection timeout after re-register
- netfilter: nf_fwd_netdev: clear timestamp in forwarding path
- [armhf] dts: sun8i: r40: bananapi-m2-ultra: Fix dcdc1 regulator
- [armhf] memory: omap-gpmc: Fix a couple off by ones
- [powerpc*] powernv/dump: Fix race while processing OPAL dump
- nvmet: fix uninitialized work for zero kato
- [x86,arm64] i2c: core: Restore acpi_walk_dep_device_list() getting
called after registering the ACPI i2c devs
- block: ratelimit handle_bad_sector() message
- [x86] crypto: ccp - fix error handling
- media: firewire: fix memory leak
- media: ati_remote: sanity check for both endpoints
- media: media/pci: prevent memory leak in bttv_probe
- media: uvcvideo: Ensure all probed info is returned to v4l2
- mmc: sdio: Check for CISTPL_VERS_1 buffer size
- media: saa7134: avoid a shift overflow
- fs: dlm: fix configfs memory leak
- [arm64] media: venus: core: Fix runtime PM imbalance in venus_probe
- ip_gre: set dev->hard_header_len and dev->needed_headroom properly
- mac80211: handle lack of sband->bitrates in rates
- PM: hibernate: remove the bogus call to get_gendisk() in
software_resume()
- scsi: mvumi: Fix error return in mvumi_io_attach()
- scsi: target: core: Add CONTROL field for trace events
- [amd64] mic: vop: copy data to kernel space then write to io memory
- [amd64] misc: vop: add round_up(x,4) for vring_size to avoid kernel
panic
- usb: gadget: function: printer: fix use-after-free in __lock_acquire
- udf: Limit sparing table size
- udf: Avoid accessing uninitialized data on failed inode read
- USB: cdc-acm: handle broken union descriptors
- [arm64,armhf] usb: dwc3: simple: add support for Hikey 970
- [armhf] can: flexcan: flexcan_chip_stop(): add error handling and
propagate error value
- ath9k: hif_usb: fix race condition between usb_get_urb() and
usb_kill_anchored_urbs()
- misc: rtsx: Fix memory leak in rtsx_pci_probe
- reiserfs: only call unlock_new_inode() if I_NEW
- xfs: make sure the rt allocator doesn't run off the end
- usb: ohci: Default to per-port over-current protection
- Bluetooth: Only mark socket zapped after unlocking
- [ppc64el] scsi: ibmvfc: Fix error return in ibmvfc_probe()
- brcmsmac: fix memory leak in wlc_phy_attach_lcnphy
- rtl8xxxu: prevent potential memory leak
- Fix use after free in get_capset_info callback.
- scsi: qedi: Protect active command list to avoid list corruption
- scsi: qedi: Fix list_del corruption while removing active I/O
- [x86] tty: ipwireless: fix error handling
- ipvs: Fix uninit-value in do_ip_vs_set_ctl()
- reiserfs: Fix memory leak in reiserfs_parse_options()
- mwifiex: don't call del_timer_sync() on uninitialized timer
- brcm80211: fix possible memleak in brcmf_proto_msgbuf_attach
- usb: core: Solve race condition in anchor cleanup functions
- ath10k: check idx validity in __ath10k_htt_rx_ring_fill_n()
- usb: cdc-acm: add quirk to blacklist ETAS ES58X devices
- USB: cdc-wdm: Make wdm_flush() interruptible and add wdm_fsync().
- eeprom: at25: set minimum read/write access stride to 1
- usb: gadget: f_ncm: allow using NCM in SuperSpeed Plus gadgets.
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.155
- scripts/setlocalversion: make git describe output more reliable
- [arm64] Run ARCH_WORKAROUND_1 enabling code on all CPUs
- [arm64] link with -z norelro regardless of CONFIG_RELOCATABLE
- [x86,arm64,armhf] efivarfs: Replace invalid slashes with exclamation
marks in dentries.
- gtp: fix an use-before-init in gtp_newlink()
- netem: fix zero division in tabledist
- tcp: Prevent low rmem stalls with SO_RCVLOWAT.
- tipc: fix memory leak caused by tipc_buf_append()
- r8169: fix issue with forced threading in combination with shared
interrupts
- cxgb4: set up filter action after rewrites
- [x86] arch/x86/amd/ibs: Fix re-arming IBS Fetch
- [x86] xen: disable Firmware First mode for correctable memory errors
- fuse: fix page dereference after free
- bpf: Fix comment for helper bpf_current_task_under_cgroup()
- p54: avoid accessing the data mapped to streaming DMA
- [powerpc*] cxl: Rework error message for incompatible slots
- RDMA/addr: Fix race with netevent_callback()/rdma_addr_cancel()
- mtd: lpddr: Fix bad logic in print_drs_error
- [arm*] serial: pl011: Fix lockdep splat when handling magic-sysrq
interrupt
- fscrypt: return -EXDEV for incompatible rename or link into encrypted
dir
- fscrypt: clean up and improve dentry revalidation
- fscrypt: fix race allowing rename() and link() of ciphertext dentries
- fs, fscrypt: clear DCACHE_ENCRYPTED_NAME when unaliasing directory
- fscrypt: only set dentry_operations on ciphertext dentries
- fscrypt: fix race where ->lookup() marks plaintext dentry as ciphertext
- Revert "block: ratelimit handle_bad_sector() message"
- xen/events: don't use chip_data for legacy IRQs
- xen/events: avoid removing an event channel while handling it
(CVE-2020-27675)
- xen/events: add a proper barrier to 2-level uevent unmasking
(CVE-2020-27673)
- xen/events: fix race in evtchn_fifo_unmask() (CVE-2020-27673)
- xen/events: add a new "late EOI" evtchn framework (CVE-2020-27673)
- xen/blkback: use lateeoi irq binding (CVE-2020-27673)
- xen/netback: use lateeoi irq binding (CVE-2020-27673)
- xen/scsiback: use lateeoi irq binding (CVE-2020-27673)
- xen/pvcallsback: use lateeoi irq binding (CVE-2020-27673)
- xen/pciback: use lateeoi irq binding (CVE-2020-27673)
- xen/events: switch user event channels to lateeoi model (CVE-2020-27673)
- xen/events: use a common cpu hotplug hook for event channels
(CVE-2020-27673)
- xen/events: defer eoi in case of excessive number of events
(CVE-2020-27673)
- xen/events: block rogue events for some time (CVE-2020-27673)
- RDMA/qedr: Fix memory leak in iWARP CM
- ata: sata_nv: Fix retrieving of active qcs
- futex: Fix incorrect should_fail_futex() handling
- [powerpc*] powernv/smp: Fix spurious DBG() warning
- mm: fix exec activate_mm vs TLB shootdown and lazy tlb switching race
- [powerpc*] select ARCH_WANT_IRQS_OFF_ACTIVATE_MM
- f2fs: add trace exit in exception path
- f2fs: fix uninit-value in f2fs_lookup
- f2fs: fix to check segment boundary during SIT page readahead
- [armel,armhf] 8997/2: hw_breakpoint: Handle inexact watchpoint addresses
- power: supply: bq27xxx: report "not charging" on all types
- xfs: fix realtime bitmap/summary file truncation when growing rt volume
- ath10k: fix VHT NSS calculation when STBC is enabled
- media: videodev2.h: RGB BT2020 and HSV are always full range
- [x86] usb: typec: tcpm: During PR_SWAP, source caps should be sent only
after tSwapSourceStart
- media: tw5864: check status of tw5864_frameinterval_get
- mmc: via-sdmmc: Fix data race bug
- [arm64] topology: Stop using MPIDR for topology information
- media: uvcvideo: Fix dereference of out-of-bound list iterator
- USB: adutux: fix debugging
- uio: free uio id after uio file node is freed
- usb: xhci: omit duplicate actions when suspending a runtime suspended
host.
- [arm64] mm: return cpu_all_mask when node is NUMA_NO_NODE
- xfs: don't free rt blocks when we're doing a REMAP bunmapi call
- ACPI: Add out of bounds and numa_off protections to pxm_to_node()
- drivers/net/wan/hdlc_fr: Correctly handle special skb->protocol values
- btrfs: fix replace of seed device
- md/bitmap: md_bitmap_get_counter returns wrong blocks
- bnxt_en: Log unknown link speed appropriately.
- [arm64] rpmsg: glink: Use complete_all for open states
- [armhf] clk: ti: clockdomain: fix static checker warning
- net: 9p: initialize sun_server.sun_path to have addr's value only when
addr is valid
- ext4: Detect already used quota file early
- gfs2: add validation checks for size of superblock
- cifs: handle -EINTR in cifs_setattr
- [armhf] memory: emif: Remove bogus debugfs error handling
- nbd: make the config put is called before the notifying the waiter
- sgl_alloc_order: fix memory leak
- nvme-rdma: fix crash when connect rejected
- md/raid5: fix oops during stripe resizing
- [x86,arm64] mmc: sdhci-acpi: AMDI0040: Set
SDHCI_QUIRK2_PRESET_VALUE_BROKEN
- [x86] perf/x86/amd/ibs: Don't include randomized bits in
get_ibs_op_count()
- [x86] perf/x86/amd/ibs: Fix raw sample data accumulation
- media: uvcvideo: Fix uvc_ctrl_fixup_xu_info() not having any effect
- fs: Don't invalidate page buffers in block_write_full_page()
- NFS: fix nfs_path in case of a rename retry
- ACPI: button: fix handling lid state changes when input device closed
- [x86] ACPI / extlog: Check for RDMSR failure (Closes: #971058)
- [x86] ACPI: video: use ACPI backlight for HP 635 Notebook
- [x86] acpi-cpufreq: Honor _PSD table setting on new AMD CPUs
- scsi: mptfusion: Fix null pointer dereferences in mptscsih_remove()
- scsi: qla2xxx: Fix crash on session cleanup with unload
- btrfs: qgroup: fix wrong qgroup metadata reserve for delayed inode
- btrfs: improve device scanning messages
- btrfs: reschedule if necessary when logging directory items
- btrfs: send, recompute reference path after orphanization of a directory
- btrfs: use kvzalloc() to allocate clone_roots in btrfs_ioctl_send()
- btrfs: cleanup cow block on error
- btrfs: fix use-after-free on readahead extent after failure to create it
- usb: xhci: Workaround for S3 issue on AMD SNPS 3.0 xHC
- [arm64,armhf] usb: dwc3: ep0: Fix ZLP for OUT ep0 requests
- [arm64,armhf] usb: dwc3: gadget: Check MPS of the request length
- [arm64,armhf] usb: dwc3: core: add phy cleanup for probe error handling
- [arm64,armhf] usb: dwc3: core: don't trigger runtime pm when remove
driver
- usb: cdc-acm: fix cooldown mechanism
- [x86] usb: typec: tcpm: reset hard_reset_count for any disconnect
- [x86] drm/i915: Force VT'd workarounds when running as a guest OS
- vt: keyboard, simplify vt_kdgkbsent
- vt: keyboard, extend func_buf_lock to readers (CVE-2020-25656)
- HID: wacom: Avoid entering wacom_wac_pen_report for pad / battery
- udf: Fix memory leak when mounting
- [powerpc*] drmem: Make lmb_size 64 bit
- [s390x] stp: add locking to sysfs functions
- [powerpc*] rtas: Restrict RTAS requests from userspace (CVE-2020-27777)
- [powerpc*] Warn about use of smt_snooze_delay
- [powerpc*] powernv/elog: Fix race while processing OPAL error log event.
- [powerpc*] Fix undetected data corruption with P9N DD2.1 VSX CI load
emulation
- NFSv4.2: support EXCHGID4_FLAG_SUPP_FENCE_OPS 4.2 EXCHANGE_ID flag
- NFSD: Add missing NFSv2 .pc_func methods
- ubifs: dent: Fix some potential memory leaks while iterating entries
- perf python scripting: Fix printable strings in python3 scripts
- ubi: check kthread_should_stop() after the setting of task state
- [armhf] i2c: imx: Fix external abort on interrupt in exit paths
- drm/amdgpu: don't map BO in reserved region
- ceph: promote to unsigned long long before shifting
- libceph: clear con->out_msg on Policy::stateful_server faults
- 9P: Cast to loff_t before multiplying
- ring-buffer: Return 0 on success from ring_buffer_resize()
- [amd64] vringh: fix __vringh_iov() when riov and wiov are different
- ext4: fix leaking sysfs kobject after failed mount
- ext4: fix error handling code in add_new_gdb
- ext4: fix invalid inode checksum
- drm/ttm: fix eviction valuable range check.
- tty: make FONTX ioctl use the tty pointer they were actually passed
(CVE-2020-25668)
- cachefiles: Handle readpage error correctly
- device property: Keep secondary firmware node secondary by type
- device property: Don't clear secondary pointer for shared primary
firmware node
- [arm64] KVM: Fix AArch32 handling of DBGD{CCINT,SCRext} and DBGVCR
- [x86] staging: comedi: cb_pcidas: Allow 2-channel commands for AO
subdevice
- [mips*] staging: octeon: repair "fixed-link" support
- [mips*] staging: octeon: Drop on uncorrectable alignment or FCS error
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.156
- [x86] drm/i915: Break up error capture compression loops with
cond_resched()
- tipc: fix use-after-free in tipc_bcast_get_mode
- ptrace: fix task_join_group_stop() for the case when current is traced
- [arm64] cadence: force nonlinear buffers to be cloned
- net: usb: qmi_wwan: add Telit LE910Cx 0x1230 composition
- sctp: Fix COMM_LOST/CANT_STR_ASSOC err reporting on big-endian platforms
- [arm64,armhf] sfp: Fix error handing in sfp_probe()
- blktrace: fix debugfs use after free (CVE-2019-19770)
- btrfs: extent_io: Kill the forward declaration of flush_write_bio
- btrfs: extent_io: Move the BUG_ON() in flush_write_bio() one level up
- Revert "btrfs: flush write bio if we loop in extent_write_cache_pages"
- btrfs: flush write bio if we loop in extent_write_cache_pages
- btrfs: extent_io: Handle errors better in extent_write_full_page()
- btrfs: extent_io: Handle errors better in btree_write_cache_pages()
- btrfs: extent_io: add proper error handling to
lock_extent_buffer_for_io()
- Btrfs: fix unwritten extent buffers and hangs on future writeback
attempts
- btrfs: Don't submit any btree write bio if the fs has errors
(CVE-2019-19039, CVE-2019-19377)
- btrfs: Move btrfs_check_chunk_valid() to tree-check.[ch] and export it
- btrfs: tree-checker: Make chunk item checker messages more readable
- btrfs: tree-checker: Make btrfs_check_chunk_valid() return EUCLEAN
instead of EIO
- btrfs: tree-checker: Check chunk item at tree block read time
- btrfs: tree-checker: Verify dev item
- btrfs: tree-checker: Fix wrong check on max devid
- btrfs: tree-checker: Enhance chunk checker to validate chunk profile
(CVE-2019-19816)
- btrfs: tree-checker: Verify inode item
- btrfs: tree-checker: fix the error message for transid error
- Fonts: Replace discarded const qualifier
- ALSA: usb-audio: Add implicit feedback quirk for Zoom UAC-2
- ALSA: usb-audio: add usb vendor id as DSD-capable for Khadas devices
- ALSA: usb-audio: Add implicit feedback quirk for Qu-16
- ALSA: usb-audio: Add implicit feedback quirk for MODX
- mm: mempolicy: fix potential pte_unmap_unlock pte error
- kthread_worker: prevent queuing delayed work from timer_fn when it is
being canceled
- mm: always have io_remap_pfn_range() set pgprot_decrypted()
- gfs2: Wake up when sd_glock_disposal becomes zero
- ring-buffer: Fix recursion protection transitions between interrupt
context
- ftrace: Fix recursion check for NMI test
- ftrace: Handle tracing when switching between context
- tracing: Fix out of bounds write in get_trace_buf
- futex: Handle transient "ownerless" rtmutex state correctly
- [amd64] x86/kexec: Use up-to-dated screen_info copy to fill boot params
- of: Fix reserved-memory overlap detection
- blk-cgroup: Fix memleak on error path
- blk-cgroup: Pre-allocate tree node on blkg_conf_prep
- scsi: core: Don't start concurrent async scan on same host
- vsock: use ns_capable_noaudit() on socket create
- [arm*] drm/vc4: drv: Add error handding for bind
- [amd64,arm64] ACPI: NFIT: Fix comparison to '-ENXIO'
- vt: Disable KD_FONT_OP_COPY (CVE-2020-28974)
- fork: fix copy_process(CLONE_PARENT) race with the exiting ->real_parent
- USB: serial: cyberjack: fix write-URB completion race
- USB: serial: option: add Quectel EC200T module support
- USB: serial: option: add LE910Cx compositions 0x1203, 0x1230, 0x1231
- USB: serial: option: add Telit FN980 composition 0x1055
- USB: Add NO_LPM quirk for Kingston flash drive
- PM: runtime: Resume the device earlier in __device_release_driver()
- perf/core: Fix a memory leak in perf_event_parse_addr_filter()
(CVE-2020-25704)
- tools: perf: Fix build error in v4.19.y
- [arm64,armhf] net: dsa: read mac address from DT for slave device
- [arm64] dts: marvell: espressobin: Add ethernet switch aliases
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.157
- [x86] powercap: restrict energy meter to root access (CVE-2020-8694)
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.158
- regulator: defer probe when trying to get voltage from unresolved supply
- time: Prevent undefined behaviour in timespec64_to_ns()
- nbd: don't update block size after device is started
- [arm64,armhf] usb: dwc3: gadget: Continue to process pending requests
- [arm64,armhf] usb: dwc3: gadget: Reclaim extra TRBs after request
completion
- btrfs: sysfs: init devices outside of the chunk_mutex
- btrfs: reschedule when cloning lots of extents
- [x86] hv_balloon: disable warning when floor reached
- net: xfrm: fix a race condition during allocing spi
- xfs: set xefi_discard when creating a deferred agfl free log intent item
- netfilter: ipset: Update byte and packet counters regardless of whether
they match
- perf tools: Add missing swap for ino_generation
- [x86] ALSA: hda: prevent undefined shift in snd_hdac_ext_bus_get_link()
- can: rx-offload: don't call kfree_skb() from IRQ context
- can: dev: can_get_echo_skb(): prevent call to kfree_skb() in hard IRQ
context
- can: dev: __can_get_echo_skb(): fix real payload length return value for
RTR frames
- can: can_create_echo_skb(): fix echo skb generation: always use
skb_clone()
- can: peak_usb: add range checking in decode operations
- can: peak_usb: peak_usb_get_ts_time(): fix timestamp wrapping
- can: peak_canfd: pucan_handle_can_rx(): fix echo management when
loopback is on
- [armhf] can: flexcan: remove FLEXCAN_QUIRK_DISABLE_MECR quirk for
LS1021A
- xfs: flush new eof page on truncate to avoid post-eof corruption
- [arm64,x86] tpm: efi: Don't create binary_bios_measurements file for an
empty log
- Btrfs: fix missing error return if writeback for extent buffer never
started
- ath9k_htc: Use appropriate rs_datalen type
- netfilter: use actual socket sk rather than skb sk when routing harder
- gfs2: Free rd_bits later in gfs2_clear_rgrpd to fix use-after-free
- gfs2: Add missing truncate_inode_pages_final for sd_aspace
- gfs2: check for live vs. read-only file system in gfs2_fitrim
- scsi: hpsa: Fix memory leak in hpsa_init_one()
- drm/amdgpu: perform srbm soft reset always on SDMA resume
- mac80211: fix use of skb payload instead of header
- cfg80211: regulatory: Fix inconsistent format argument
- scsi: scsi_dh_alua: Avoid crash during alua_bus_detach()
- [s390x] smp: move rcu_cpu_starting() earlier
- [x86] tpm_tis: Disable interrupts on ThinkPad T490s
- tick/common: Touch watchdog in tick_unfreeze() on all CPUs
- [x86] pinctrl: intel: Set default bias in case no particular value given
- [armel,armhf] 9019/1: kprobes: Avoid fortify_panic() when copying
optprobe template
- nbd: fix a block_device refcount leak in nbd_release
- xfs: fix flags argument to rmap lookup when converting shared file rmaps
- xfs: fix rmap key and record comparison functions
- lan743x: fix "BUG: invalid wait context" when setting rx mode
- xfs: fix a missing unlock on error in xfs_fs_map_blocks
- of/address: Fix of_node memory leak in of_dma_is_coherent
- [i386] cosa: Add missing kfree in error path of cosa_write
- perf: Fix get_recursion_context()
- ext4: correctly report "not supported" for {usr,grp}jquota when
!CONFIG_QUOTA
- ext4: unlock xattr_sem properly in ext4_inline_data_truncate()
- btrfs: dev-replace: fail mount if we don't have replace item with target
device
- [x86] thunderbolt: Fix memory leak if ida_simple_get() fails in
enumerate_services()
- [x86] thunderbolt: Add the missed ida_simple_remove() in
ring_request_msix()
- uio: Fix use-after-free in uio_unregister_device()
- usb: cdc-acm: Add DISABLE_ECHO for Renesas USB Download mode
- futex: Don't enable IRQs unconditionally in put_pi_state()
- ocfs2: initialize ip_next_orphan
- btrfs: fix potential overflow in cluster_pages_for_defrag on 32bit arch
- selinux: Fix error return code in sel_ib_pkey_sid_slow()
- gpio: pcie-idio-24: Fix irq mask when masking
- gpio: pcie-idio-24: Fix IRQ Enable Register value
- gpio: pcie-idio-24: Enable PEX8311 interrupts
- don't dump the threads that had been already exiting when zapped.
- [x86] drm/gma500: Fix out-of-bounds access to struct drm_device.vblank[]
- pinctrl: amd: use higher precision for 512 RtcClk
- pinctrl: amd: fix incorrect way to disable debounce filter
- swiotlb: fix "x86: Don't panic if can not alloc buffer for swiotlb"
- IPv6: Set SIT tunnel hard_header_len to zero
- [s390x] net/af_iucv: fix null pointer dereference on shutdown
- net: Update window_clamp if SOCK_RCVBUF is set
- tipc: fix memory leak in tipc_topsrv_start()
- vrf: Fix fast path output packet handling with async Netfilter rules
- r8169: fix potential skb double free in an error path
- random32: make prandom_u32() output unpredictable
- [x86] speculation: Allow IBPB to be conditionally enabled on CPUs with
always-on STIBP
- perf/core: Fix race in the perf_mmap_close() function (CVE-2020-14351)
- Revert "kernel/reboot.c: convert simple_strtoul to kstrtoint"
- reboot: fix overflow parsing reboot cpu number
- net: sch_generic: fix the missing new qdisc assignment bug
- Convert trailing spaces and periods in path components
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.159
- [powerpc*] 64s: move some exception handlers out of line
- [powerpc*] 64s: flush L1D on kernel entry (CVE-2020-4788)
- [powerpc*] Add a framework for user access tracking
- [powerpc*] Implement user_access_begin and friends
- [powerpc*] Fix __clear_user() with KUAP enabled
- [powerpc*] uaccess: Evaluate macro arguments once, before user access is
allowed
- [powerpc*] 64s: flush L1D after user accesses (CVE-2020-4788)
- Revert "perf cs-etm: Move definition of 'traceid_list' global variable
from header file"
- Input: sunkbd - avoid use-after-free in teardown paths (CVE-2020-25669)
- mac80211: always wind down STA state
- can: proc: can_remove_proc(): silence remove_proc_entry warning
- [x86] KVM: x86: clflushopt should be treated as a no-op by emulation
- [arm64] ACPI: GED: fix -Wformat
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.160
- ah6: fix error return code in ah6_input()
- atm: nicstar: Unmap DMA on send error
- bnxt_en: read EEPROM A2h address using page 0
- devlink: Add missing genlmsg_cancel() in devlink_nl_sb_port_pool_fill()
- inet_diag: Fix error path to cancel the meseage in inet_req_diag_fill()
- lan743x: fix issue causing intermittent kernel log warnings
- lan743x: prevent entire kernel HANG on open, for some platforms
- net: b44: fix error return code in b44_init_one()
- net: bridge: add missing counters to ndo_get_stats64 callback
- [arm64,armhf] net: dsa: mv88e6xxx: Avoid VTU corruption on 6097
- net: Have netpoll bring-up DSA management interface
- net/mlx4_core: Fix init_hca fields offset
- page_frag: Recover from memory pressure
- qed: fix error return code in qed_iwarp_ll2_start()
- qlcnic: fix error return code in qlcnic_83xx_restart_hw()
- sctp: change to hold/put transport for proto_unreach_timer
- tcp: only postpone PROBE_RTT if RTT is < current min_rtt estimate
- [arm64,armhf] net/mlx5: Disable QoS when min_rates on all VFs are zero
- net: usb: qmi_wwan: Set DTR quirk for MR400
- [arm64,armhf] pinctrl: rockchip: enable gpio pclk for
rockchip_gpio_to_irq
- scsi: ufs: Fix unbalanced scsi_block_reqs_cnt caused by ufshcd_hold()
- [x86] ACPI: button: Add DMI quirk for Medion Akoya E2228T
- [arm64] psci: Avoid printing in cpu_psci_cpu_die()
- vfs: remove lockdep bogosity in __sb_start_write
- [arm64] dts: allwinner: a64: Pine64 Plus: Fix ethernet node
- [arm64] dts: allwinner: h5: OrangePi PC2: Fix ethernet node
- [armhf] dts: sun8i: r40: bananapi-m2-ultra: Fix ethernet node
- [armhf] Revert "arm: sun8i: orangepi-pc-plus: Set EMAC activity LEDs to
active high"
- [armhf] dts: sun8i: h3: orangepi-plus2e: Enable RGMII RX/TX delay on
Ethernet PHY
- [armhf] dts: sun8i: a83t: Enable both RGMII RX/TX delay on Ethernet PHY
- [arm64] dts: allwinner: a64: bananapi-m64: Enable RGMII RX/TX delay on
PHY
- [mips*] export has_transparent_hugepage() for modules
- [arm64] dts: allwinner: h5: OrangePi Prime: Fix ethernet node
- perf lock: Don't free "lock_seq_stat" if read_count isn't zero
- ip_tunnels: Set tunnel option flag when tunnel metadata is present
- can: af_can: prevent potential access of uninitialized member in
can_rcv()
- can: af_can: prevent potential access of uninitialized member in
canfd_rcv()
- can: dev: can_restart(): post buffer from the right context
- can: mcba_usb: mcba_usb_start_xmit(): first fill skb, then pass to
can_put_echo_skb()
- can: peak_usb: fix potential integer overflow on shift of a int
- [arm64] ASoC: qcom: lpass-platform: Fix memory leak
- [arm64,armhf] drm/sun4i: dw-hdmi: fix error return code in
sun8i_dw_hdmi_bind()
- can: kvaser_usb: kvaser_usb_hydra: Fix KCAN bittiming limits
- [armhf] regulator: ti-abb: Fix array out of bound read access on the
first transition
- xfs: revert "xfs: fix rmap key and record comparison functions"
- [amd64] efi/x86: Free efi_pgd with free_pages()
- libfs: fix error cast of negative value in simple_attr_write()
- speakup: Do not let the line discipline be used several times
(CVE-2020-28941)
- ALSA: firewire: Clean up a locking issue in copy_resp_to_buf()
- ALSA: usb-audio: Add delay quirk for all Logitech USB devices
- ALSA: ctl: fix error path at adding user-defined element set
- ALSA: mixart: Fix mutex deadlock
- ALSA: hda/realtek: Add some Clove SSID in the ALC293(ALC1220)
- [armhf] tty: serial: imx: keep console clocks always on
- [arm64,armhf,x86] efivarfs: fix memory leak in efivarfs_create()
- [arm64,x86] staging: rtl8723bs: Add 024c:0627 to the list of SDIO
device-ids
- ext4: fix bogus warning in ext4_update_dx_flag()
- [x86] iio: accel: kxcjk1013: Replace is_smo8500_device with an acpi_type
enum
- [x86] iio: accel: kxcjk1013: Add support for KIOX010A ACPI DSM for
setting tablet-mode
- [armhf] regulator: pfuze100: limit pfuze-support-disable-sw to
pfuze{100,200}
- regulator: fix memory leak with repeated set_machine_constraints()
- regulator: avoid resolve_supply() infinite recursion
- regulator: workaround self-referent regulators
- mac80211: minstrel: remove deferred sampling code
- mac80211: minstrel: fix tx status processing corner case
- mac80211: free sta in sta_info_insert_finish() on errors
- [s390x] cpum_sf.c: fix file permission for cpum_sfb_size
- [s390x] dasd: fix null pointer dereference for ERP requests
- ptrace: Set PF_SUPERPRIV when checking capability
- seccomp: Set PF_SUPERPRIV when checking capability
- [x86] microcode/intel: Check patch signature before saving microcode for
early loading
- mm/userfaultfd: do not access vma->vm_mm after calling
handle_userfault()
.
[ Salvatore Bonaccorso ]
* net: Enable NET_SWITCHDEV; disable on armel/marvell (Closes: #949863)
* Bump ABI to 13
* [rt] Update to 4.19.152-rt65
* [rt] Refresh "mm: Protect activate_mm() by preempt_[disable&enable]_rt()"
* [rt] Refresh "kthread: convert worker lock to raw spinlock"
* [rt] Refresh "signals: Allow rt tasks to cache one sigqueue struct"
* [rt] Refresh "tpm_tis: fix stall after iowrite*()s"
* [rt] Refresh "futex: Delay deallocation of pi_state"
* [rt] Refresh "futex: Make the futex_hash_bucket spinlock_t again"
* [rt] Update to 4.19.152-rt66
- mm/memcontrol: Disable preemption in __mod_memcg_lruvec_state()
- ptrace: fix ptrace_unfreeze_traced() race with rt-lock
* [rt] Update to 4.19.160-rt69
.
[ Noah Meyerhans ]
* Backport upstream fix for PCI bridge firmware configuration preservation
(Closes: #968623)
.
[ John L. Villalovos ]
* Backport support for USB Host Controllers with local memory to avoid
crashes. In particular the Renesas USB 3.0 controller (PD720201/PD720202)
which is used on the Ampere's Mt Jade platform which is part of their
Altra product line:
- lib/genalloc: add gen_pool_dma_zalloc() for zeroed DMA allocations
- USB: use genalloc for USB HCs with local memory
- USB: drop HCD_LOCAL_MEM flag
- usb: don't create dma pools for HCDs with a localmem_pool
- usb: add a hcd_uses_dma helper
- usb: host: ohci-sm501: init genalloc for local memory
- usb/hcd: Fix a NULL vs IS_ERR() bug in usb_hcd_setup_local_mem()
* [arm64] config/arm64/config: Set NODES_SHIFT to 4
.
[ Yves-Alexis Perez ]
* usbnet: ipheth: fix connectivity with iOS 14
Checksums-Sha1:
5029604805a88e368245bb6b99db521114cc2bc1 13506 linux-signed-i386_4.19.160+1.dsc
f532c95d305990ae93a3a9fc24c7886ec3693ccd 3451552 linux-signed-i386_4.19.160+1.tar.xz
Checksums-Sha256:
2727ffbe3df67acbe2fa93d572b03cb181e3a41bd3acdaca538cc4f69d9ccbbc 13506 linux-signed-i386_4.19.160+1.dsc
90bac98b24488c274fd7c325e4318e6b8461630abfba03f1ef7e95e226dd4ca6 3451552 linux-signed-i386_4.19.160+1.tar.xz
Files:
ab03c847bd480a0e75eb76665d3a78e7 13506 kernel optional linux-signed-i386_4.19.160+1.dsc
513e294e38da19227301bf05afde70ab 3451552 kernel optional linux-signed-i386_4.19.160+1.tar.xz
-----BEGIN PGP SIGNATURE-----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=SM57
-----END PGP SIGNATURE-----
