-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 30 Jan 2021 21:38:57 +0100 Source: linux Architecture: source Version: 5.10.12-1 Distribution: unstable Urgency: medium Maintainer: Debian Kernel Team <debian-kernel@lists.debian.org> Changed-By: Salvatore Bonaccorso <carnil@debian.org> Closes: 968181 968188 968760 977438 Changes: linux (5.10.12-1) unstable; urgency=medium . * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.10 - [x86] hyperv: Initialize clockevents after LAPIC is initialized - bpf: Fix signed_{sub,add32}_overflows type handling - nfsd4: readdirplus shouldn't return parent of export (CVE-2021-3178) - bpf: Don't leak memory in bpf getsockopt when optlen == 0 - bpf: Support PTR_TO_MEM{,_OR_NULL} register spilling - bpf: Fix helper bpf_map_peek_elem_proto pointing to wrong callback - net: fix use-after-free when UDP GRO with shared fraglist - udp: Prevent reuseport_select_sock from reading uninitialized socks - netxen_nic: fix MSI/MSI-x interrupts - net: ipv6: Validate GSO SKB before finish IPv6 processing - tipc: fix NULL deref in tipc_link_xmit() - [arm64,armhf] net: mvpp2: Remove Pause and Asym_Pause support - rndis_host: set proper input size for OID_GEN_PHYSICAL_MEDIUM request - esp: avoid unneeded kmap_atomic call - net: dcb: Validate netlink message in DCB handler - net: dcb: Accept RTM_GETDCB messages carrying set-like DCB commands - rxrpc: Call state should be read with READ_ONCE() under some circumstances - i40e: fix potential NULL pointer dereferencing - [arm64,armhf] net: stmmac: Fixed mtu channged by cache aligned - net: sit: unregister_netdevice on newlink's error path - [arm64,armhf] net: stmmac: fix taprio schedule configuration - [arm64,armhf] net: stmmac: fix taprio configuration when base_time is in the past - net: avoid 32 x truesize under-estimation for tiny skbs - net: phy: smsc: fix clk error handling - [arm64,armhf] net: dsa: clear devlink port type before unregistering slave netdevs - rxrpc: Fix handling of an unsupported token type in rxrpc_read() - [arm64,armhf] net: stmmac: use __napi_schedule() for PREEMPT_RT - [armhf] drm/panel: otm8009a: allow using non-continuous dsi clock - mac80211: do not drop tx nulldata packets on encrypted links - mac80211: check if atf has been disabled in __ieee80211_schedule_txq - [arm64,armhf] net: dsa: unbind all switches from tree when DSA master unbinds https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.11 - scsi: target: tcmu: Fix use-after-free of se_cmd->priv - [armhf] mtd: rawnand: gpmi: fix dst bit offset when extracting raw payload - mtd: rawnand: nandsim: Fix the logic when selecting Hamming soft ECC engine - [arm64,armhf] i2c: tegra: Wait for config load atomically while in ISR - [x86] platform/x86: i2c-multi-instantiate: Don't create platform device for INT3515 ACPI nodes - [x86] platform/x86: ideapad-laptop: Disable touchpad_switch for ELAN0634 - ALSA: hda/realtek - Limit int mic boost on Acer Aspire E5-575T - ALSA: hda/via: Add minimum mute flag - crypto: xor - Fix divide error in do_xor_speed() - dm crypt: fix copy and paste bug in crypt_alloc_req_aead - ACPI: scan: Make acpi_bus_get_device() clear return pointer on error - btrfs: don't get an EINTR during drop_snapshot for reloc - btrfs: do not double free backref nodes on error - btrfs: fix lockdep splat in btrfs_recover_relocation - btrfs: don't clear ret in btrfs_start_dirty_block_groups - btrfs: send: fix invalid clone operations when cloning from the same file and root - fs: fix lazytime expiration handling in __writeback_single_inode() - mmc: core: don't initialize block size from ext_csd if not present - [arm64] mmc: sdhci-xenon: fix 1.8v regulator stabilization - dm: avoid filesystem lookup in dm_get_dev_t() - dm integrity: fix a crash if "recalculate" used without "internal_hash" - dm integrity: conditionally disable "recalculate" feature - drm/atomic: put state on error path - drm/syncobj: Fix use-after-free - drm/amdgpu: remove gpu info firmware of green sardine - [x86] drm/i915/gt: Prevent use of engine->wa_ctx after error - [x86] drm/i915: Check for rq->hwsp validity after acquiring RCU lock - ASoC: rt711: mutex between calibration and power state changes - SUNRPC: Handle TCP socket sends with kernel_sendpage() again - HID: multitouch: Enable multi-input for Synaptics pointstick/touchpad device - dm integrity: select CRYPTO_SKCIPHER - [x86] hyperv: Fix kexec panic/hang issues - scsi: ufs: Relax the condition of UFSHCI_QUIRK_SKIP_MANUAL_WB_FLUSH_CTRL - scsi: ufs: Correct the LUN used in eh_device_reset_handler() callback - scsi: qedi: Correct max length of CHAP secret - scsi: scsi_debug: Fix memleak in scsi_debug_init() - scsi: sd: Suppress spurious errors when WRITE SAME is being disabled - [riscv64] Fix kernel time_init() - [riscv64] Fix sifive serial driver - [riscv64] Enable interrupts during syscalls with M-Mode - HID: logitech-dj: add the G602 receiver - HID: Ignore battery for Elan touchscreen on ASUS UX550 - [arm64,armhf] ALSA: hda/tegra: fix tegra-hda on tegra30 soc - [riscv64] cacheinfo: Fix using smp_processor_id() in preemptible - [arm64] make atomic helpers __always_inline - xen: Fix event channel callback via INTX/GSI - [x86] xen: Add xen_no_vector_callback option to test PCI INTX delivery - [x86] xen: Fix xen_hvm_smp_init() when vector callback not available - [riscv64] dts: phy: fix missing mdio device and probe failure of vsc8541-01 device - [riscv64] dts: phy: add GPIO number and active state used for phy reset - drm/amdgpu/psp: fix psp gfx ctrl cmds - HID: logitech-hidpp: Add product ID for MX Ergo in Bluetooth mode - drm/nouveau/bios: fix issue shadowing expansion ROMs - drm/nouveau/privring: ack interrupts the same way as RM - drm/nouveau/i2c/gm200: increase width of aux semaphore owner fields - drm/nouveau/mmu: fix vram heap sizing - drm/nouveau/kms/nv50-: fix case where notifier buffer is at offset 0 - io_uring: flush timeouts that should already have expired - [riscv64] Set current memblock limit - [riscv64] Fix maximum allowed phsyical memory for RV32 - nfsd: Fixes for nfsd4_encode_read_plus_data() - nfsd: Don't set eof on a truncated READ_PLUS - gpiolib: cdev: fix frame size warning in gpio_ioctl() - [armhf] pinctrl: aspeed: g6: Fix PWMG0 pinctrl setting - RDMA/ucma: Do not miss ctx destruction steps in some cases - btrfs: print the actual offset in btrfs_root_name - scsi: megaraid_sas: Fix MEGASAS_IOC_FIRMWARE regression - scsi: ufs: Fix tm request when non-fatal error happens - bpf: Prevent double bpf_prog_put call from bpf_tracing_prog_attach - [powerpc*] Use the common INIT_DATA_SECTION macro in vmlinux.lds.S - [powerpc*] Fix alignment bug within the init sections - [arm64] entry: remove redundant IRQ flag tracing - bpf: Reject too big ctx_size_in for raw_tp test run - RDMA/umem: Avoid undefined behavior of rounddown_pow_of_two() - RDMA/cma: Fix error flow in default_roce_mode_store - printk: ringbuffer: fix line counting - printk: fix kmsg_dump_get_buffer length calulations - iov_iter: fix the uaccess area in copy_compat_iovec_from_user - [mips*] i2c: octeon: check correct size of maximum RECV_LEN packet - [armel,armhf] drm/vc4: Unify PCM card's driver_name - [x86] platform/x86: intel-vbtn: Drop HP Stream x360 Convertible PC 11 from allow-list - [x86] platform/x86: hp-wmi: Don't log a warning on HPWMI_RET_UNKNOWN_COMMAND errors - ALSA: hda: Balance runtime/system PM if direct-complete is disabled - xsk: Clear pool even for inactive queues - can: dev: can_restart: fix use after free bug - can: vxcan: vxcan_xmit: fix use after free bug - can: peak_usb: fix use after free bugs - iio: common: st_sensors: fix possible infinite loop in st_sensors_irq_thread - iio: ad5504: Fix setting power-down state - drivers: iio: temperature: Add delay after the addressed reset command in mlx90632.c - [powerpc*] 64s: fix scv entry fallback flush vs interrupt - cifs: do not fail __smb_send_rqst if non-fatal signals are pending - [mips*] irqchip/mips-cpu: Set IPI domain parent chip - [x86] fpu: Add kernel_fpu_begin_mask() to selectively initialize state - [x86] topology: Make __max_die_per_package available unconditionally - [x86] mmx: Use KFPU_387 for MMX string operations - [x86] setup: don't remove E820_TYPE_RAM for pfn 0 - proc_sysctl: fix oops caused by incorrect command parameters - mm: memcg/slab: optimize objcg stock draining - mm: memcg: fix memcg file_dirty numa stat - mm: fix numa stats for thp migration - io_uring: iopoll requests should also wake task ->in_idle state - io_uring: fix SQPOLL IORING_OP_CLOSE cancelation state - io_uring: fix short read retries for non-reg files - [x86] intel_th: pci: Add Alder Lake-P support - [arm64] serial: mvebu-uart: fix tx lost characters at power off - ehci: fix EHCI host controller initialization sequence - [armhf] usb: gadget: aspeed: fix stop dma register setting. - USB: gadget: dummy-hcd: Fix errors in port-reset handling - usb: udc: core: Use lock when write to soft_connect - xhci: make sure TRB is fully written before giving it to the controller - [arm64,armhf] xhci: tegra: Delay for disabling LFPS detector - drivers core: Free dma_range_map when driver probe failed - driver core: Fix device link device name collision - driver core: Extend device_is_dependent() - [x86] drm/i915: s/intel_dp_sink_dpms/intel_dp_set_power/ - [x86] drm/i915: Only enable DFP 4:4:4->4:2:0 conversion when outputting YCbCr 4:4:4 - [x86] entry: Fix noinstr fail - [x86] cpu/amd: Set __max_die_per_package on AMD - cls_flower: call nla_ok() before nla_next() - netfilter: rpfilter: mask ecn bits before fib lookup - [x86] drm/i915/hdcp: Update CP property in update_pipe - locking/lockdep: Cure noinstr fail - [x86] ASoC: SOF: Intel: fix page fault at probe if i915 init fails - [arm64,armhf] net: dsa: mv88e6xxx: also read STU state in mv88e6250_g1_vtu_getnext - nvme-pci: refactor nvme_unmap_data - nvme-pci: fix error unwind in nvme_map_data - cachefiles: Drop superfluous readpages aops NULL check - skbuff: back tiny skbs with kmalloc() in __netdev_alloc_skb() too - tcp: fix TCP socket rehash stats mis-accounting - net_sched: gen_estimator: support large ewma log - udp: mask TOS bits in udp_v4_early_demux() - ipv6: create multicast route with RTPROT_KERNEL - net_sched: avoid shift-out-of-bounds in tcindex_set_parms() - net_sched: reject silly cell_log in qdisc_get_rtab() - ipv6: set multicast flag on the multicast route - net: Disable NETIF_F_HW_TLS_RX when RXCSUM is disabled - [armhf] net: dsa: b53: fix an off by one in checking "vlan->vid" - tcp: do not mess with cloned skbs in tcp_add_backlog() - tcp: fix TCP_USER_TIMEOUT with zero window - net: core: devlink: use right genl user_ptr when handling port param get/set - [arm64] pinctrl: qcom: Allow SoCs to specify a GPIO function that's not 0 - [arm64] pinctrl: qcom: No need to read-modify-write the interrupt status - [arm64] pinctrl: qcom: Properly clear "intr_ack_high" interrupts when unmasking - [arm64] pinctrl: qcom: Don't clear pending interrupts when enabling - tty: implement write_iter - tty: fix up hung_up_tty_write() conversion - tcp: Fix potential use-after-free due to double kfree() - [x86] ASoC: SOF: Intel: hda: Avoid checking jack on system suspend - [x86] drm/i915/hdcp: Get conn while content_type changed - bpf: Local storage helpers should check nullness of owner ptr passed - kernfs: implement ->read_iter - kernfs: implement ->write_iter - kernfs: wire up ->splice_read and ->splice_write - fs/pipe: allow sendfile() to pipe again - mm: fix initialization of struct page for holes in memory layout - Revert "mm: fix initialization of struct page for holes in memory layout" https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.12 - [arm*] gpio: mvebu: fix pwm .get_state period calculation - Revert "mm/slub: fix a memory leak in sysfs_slab_add()" - HID: wacom: Correct NULL dereference on AES pen proximity - HID: multitouch: Apply MT_QUIRK_CONFIDENCE quirk for multi-input devices - media: Revert "media: videobuf2: Fix length check for single plane dmabuf queueing" - media: v4l2-subdev.h: BIT() is not available in userspace - RDMA/vmw_pvrdma: Fix network_hdr_type reported in WC - iwlwifi: dbg: Don't touch the tlv data - kernel/io_uring: cancel io_uring before task works - io_uring: inline io_uring_attempt_task_drop() - io_uring: add warn_once for io_uring_flush() - io_uring: stop SQPOLL submit on creator's death - io_uring: fix null-deref in io_disable_sqo_submit - io_uring: do sqo disable on install_fd error - io_uring: fix false positive sqo warning on flush - io_uring: fix uring_flush in exit_files() warning - io_uring: fix skipping disabling sqo on exec - io_uring: dont kill fasync under completion_lock - io_uring: fix sleeping under spin in __io_clean_op - objtool: Don't fail on missing symbol table - mm/page_alloc: add a missing mm_page_alloc_zone_locked() tracepoint - mm: fix a race on nr_swap_pages - tools: Factor HOSTCC, HOSTLD, HOSTAR definitions - printk: fix buffer overflow potential for print_text() - printk: fix string termination for record_print_text() . [ Salvatore Bonaccorso ] * Add set of PI futex fixes (CVE-2021-3347) - futex: Ensure the correct return value from futex_lock_pi() - futex: Replace pointless printk in fixup_owner() - futex: Provide and use pi_state_update_owner() - rtmutex: Remove unused argument from rt_mutex_proxy_unlock() - futex: Use pi_state_update_owner() in put_pi_state() - futex: Simplify fixup_pi_state_owner() - futex: Handle faults correctly for PI futexes * Bump ABI to 3 * xen: Fix XenStore initialisation for XS_LOCAL * [rt] Refresh "printk: refactor kmsg_dump_get_buffer()" * [rt] Refresh "locking/rtmutex: Handle the various new futex race conditions" * [rt] Refresh "locking/rtmutex: add sleeping lock implementation" * [rt] Refresh "crypto: limit more FPU-enabled sections" * Unset CRYPTO_USER_API_ENABLE_OBSOLETE . [ Ricardo Ribalda ] * Enable USB_NET_AQC111 as module (Closes: #968760) . [ Vincent Blut ] * [arm64] Enable DRM_VC4 again. (Closes: #968181, #968188) * [arm64] Enable DRM_VC4_HDMI_CEC. (Closes: #977438) Checksums-Sha1: 1c830bc39302e5a6bbd6f94ff2a804afb51db73e 195000 linux_5.10.12-1.dsc a9dc0896d6db7db1ac0583d4a8ec28e9b90364d8 121447500 linux_5.10.12.orig.tar.xz 9147a2312c39aad80204e0589586b9a5c9288cf4 1305284 linux_5.10.12-1.debian.tar.xz ea9854fb89361857aebadb8ad2012facf3415ba0 6267 linux_5.10.12-1_source.buildinfo Checksums-Sha256: 59fd341dea562a1209250571de666f816672033d6537e828a8f8fceb7bcd850e 195000 linux_5.10.12-1.dsc 4523190b887d5c7e00cd819eedd6ed195da768fb5b41c6259d6bf1f09902ea96 121447500 linux_5.10.12.orig.tar.xz a06e76c94d1b81af03623a04ed9960bd81adffd5e478e3576535b3b3d53d6b52 1305284 linux_5.10.12-1.debian.tar.xz 0a3bdd420fc15be9240917d6272e0d069356001253d92961d9cab2925ba6368e 6267 linux_5.10.12-1_source.buildinfo Files: 336e2c77e8d165dd2c1c41adecf7de0a 195000 kernel optional linux_5.10.12-1.dsc 93fd089053e0da9b2b91d52568e5cc99 121447500 kernel optional linux_5.10.12.orig.tar.xz 86912a6cb3ba412d1fc45bd4a2927825 1305284 kernel optional linux_5.10.12-1.debian.tar.xz f7cb05c7023c9b5f30a976148e93dca6 6267 kernel optional linux_5.10.12-1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQKmBAEBCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAmAVxDhfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk ZWJpYW4ub3JnAAoJEAVMuPMTQ89ER6MQAIamobeT/LY3nxx+w1EcURFNyyxzZkOR eetcuKr7omfMy7rX+nN8Pa382bUX5e3gSdwJxAiW63wGvlxDp8mCcIU8q5my9LY8 3ii4rgbHhoMlj0BhXy8S/olAs2wraSbZIJ7Rhqr/YzL9Wm+RnX8y5QLE4zz5p2z6 lAQtGO4dF3Wem/MJBnhyqqctO8jwg79ZxlYV1ztfSz0Pn26xDJ4evl+3rVY8A3YX INL3PTVtPpmRM1CkzRNBsbtM7GB+H893x34u7TdrqANtS5ZjEa5hR6+9rhFYMD7h MGrsXc/TwZuO2DGc+AAQZWo0IISMgpdW443ywzO51QGgnp3TF56TCucuwu/LGwTi vKShC5qHshhmmeODGqqK8Pc3lOa6Q3Lu6EAyRaHngO5q4PW17zqnf3duh2ydfghy QmN1mK9iVLLsuXMVBf4P08dvEEXGx7uAm94wyYHnAbF7UbsVeE3diWTqszxs8FD0 U0cRk+GEvoQ3oJeyRhN6OZ6HMM0e78ThM+OZAqRuup1rdSFKC+6EoG5QHwT7eok6 eFq6pkyqdlSzg+RLeREmDvFT/qhafQYhmV3jr+B5sFMaSBJeRsjP356Uisi60eek RczxCn5mUsPGFeZZNspJ+ytzyEKzHJMqmO7sdqLcWP/MV4y0NNMUr7m7bBEWhgW/ rNVYWOKay11x =WalI -----END PGP SIGNATURE-----