-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 04 Jun 2021 08:23:56 +0200 Source: linux Architecture: source Version: 5.10.40-1~bpo10+1 Distribution: buster-backports Urgency: medium Maintainer: Debian Kernel Team <debian-kernel@lists.debian.org> Changed-By: Salvatore Bonaccorso <carnil@debian.org> Closes: 980539 985681 985801 985862 985956 986822 986848 986995 987019 987281 987575 987638 988005 988574 Changes: linux (5.10.40-1~bpo10+1) buster-backports; urgency=medium . * Rebuild for buster-backports: - Change ABI number to 0.bpo.7 . linux (5.10.40-1) unstable; urgency=medium . * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.39 - [x86] msr: Fix wr/rdmsr_safe_regs_on_cpu() prototypes - [x86] drm/i915/display: fix compiler warning about array overrun - airo: work around stack usage warning - usb: sl811-hcd: improve misleading indentation - cxgb4: Fix the -Wmisleading-indentation warning - isdn: capi: fix mismatched prototypes - virtio_net: Do not pull payload in skb->head - [armel,armhf] 9066/1: ftrace: pause/unpause function graph tracer in cpu_suspend() - [arm64,x86] ACPI / hotplug / PCI: Fix reference count leak in enable_slot() - [arm64] Input: elants_i2c - do not bind to i2c-hid compatible ACPI instantiated devices - NFS: NFS_INO_REVAL_PAGECACHE should mark the change attribute invalid - [armel,armhf] 9075/1: kernel: Fix interrupted SMC calls - [arm64] platform/chrome: cros_ec_typec: Add DP mode check - scsi: lpfc: Fix illegal memory access on Abort IOCBs - ceph: fix fscache invalidation - ceph: don't clobber i_snap_caps on non-I_NEW inode - ceph: don't allow access to MDS-private inodes - scsi: target: tcmu: Return from tcmu_handle_completions() if cmd_id not found - bridge: Fix possible races between assigning rx_handler_data and setting IFF_BRIDGE_PORT bit - nvmet: remove unsupported command noise - drm/amd/display: Fix two cursor duplication when using overlay - [arm64,x86] gpiolib: acpi: Add quirk to ignore EC wakeups on Dell Venue 10 Pro 5055 - net:CXGB4: fix leak if sk_buff is not used - ALSA: hda: generic: change the DAC ctl name for LO+SPK or LO+HP - block: reexpand iov_iter after read/write - net: stmmac: Do not enable RX FIFO overflow interrupts - ip6_gre: proper dev_{hold|put} in ndo_[un]init methods - sit: proper dev_{hold|put} in ndo_[un]init methods - ip6_tunnel: sit: proper dev_{hold|put} in ndo_[un]init methods - ipv6: remove extra dev_hold() for fallback tunnels - tweewide: Fix most Shebang lines - scripts: switch explicitly to Python 3 https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.40 - RDMA/core: Prevent divide-by-zero error triggered by the user - RDMA/rxe: Clear all QP fields if creation failed - scsi: ufs: core: Increase the usable queue depth - scsi: qedf: Add pointer checks in qedf_update_link_speed() - scsi: qla2xxx: Fix error return code in qla82xx_write_flash_dword() - RDMA/mlx5: Recover from fatal event in dual port mode - RDMA/core: Don't access cm_id after its destruction - nvmet: remove unused ctrl->cqs - nvmet: fix memory leak in nvmet_alloc_ctrl() - nvme-tcp: rerun io_work if req_list is not empty - nvme-fc: clear q_live at beginning of association teardown - [x86] platform/x86: intel_int0002_vgpio: Only call enable_irq_wake() when using s2idle - [x86] platform/x86: dell-smbios-wmi: Fix oops on rmmod dell_smbios - RDMA/mlx5: Fix query DCT via DEVX - RDMA/uverbs: Fix a NULL vs IS_ERR() bug - [powerpc*] pseries: Fix hcall tracing recursion in pv queued spinlocks - ptrace: make ptrace() fail if the tracee changed its pid unexpectedly - nvmet: seset ns->file when open fails - [x86] perf/x86: Avoid touching LBR_TOS MSR for Arch LBR - locking/lockdep: Correct calling tracepoints - locking/mutex: clear MUTEX_FLAGS if wait_list is empty due to signal - [powerpc*] Fix early setup to make early_ioremap() work - btrfs: avoid RCU stalls while running delayed iputs - cifs: fix memory leak in smb2_copychunk_range - misc: eeprom: at24: check suspend status before disable regulator - ALSA: dice: fix stream format for TC Electronic Konnekt Live at high sampling transfer frequency - ALSA: intel8x0: Don't update period unless prepared - ALSA: firewire-lib: fix amdtp_packet tracepoints event for packet_index field - ALSA: line6: Fix racy initialization of LINE6 MIDI - ALSA: dice: fix stream format at middle sampling rate for Alesis iO 26 - ALSA: firewire-lib: fix calculation for size of IR context payload - ALSA: usb-audio: Validate MS endpoint descriptors - ALSA: bebob/oxfw: fix Kconfig entry for Mackie d.2 Pro - ALSA: hda: fixup headset for ASUS GU502 laptop - Revert "ALSA: sb8: add a check for request_region" - ALSA: firewire-lib: fix check for the size of isochronous packet payload - ALSA: hda/realtek: reset eapd coeff to default value for alc287 - ALSA: hda/realtek: Add some CLOVE SSIDs of ALC293 - ALSA: hda/realtek: Fix silent headphone output on ASUS UX430UA - ALSA: hda/realtek: Add fixup for HP OMEN laptop - ALSA: hda/realtek: Add fixup for HP Spectre x360 15-df0xxx - [x86] uio_hv_generic: Fix a memory leak in error handling paths - [arm64] Revert "serial: mvebu-uart: Fix to avoid a potential NULL pointer dereference" - nvme-tcp: fix possible use-after-completion - drm/amdgpu: Fix GPU TLB update error when PAGE_SIZE > AMDGPU_PAGE_SIZE - drm/amdgpu: disable 3DCGCG on picasso/raven1 to avoid compute hang - drm/amdgpu: update gc golden setting for Navi12 - drm/amdgpu: update sdma golden setting for Navi12 - [powerpc*] 64s/syscall: Use pt_regs.trap to distinguish syscall ABI difference between sc and scv syscalls - [powerpc*] 64s/syscall: Fix ptrace syscall info with scv syscalls - mmc: sdhci-pci-gli: increase 1.8V regulator wait - [x86] xen-pciback: redo VF placement in the virtual topology - [x86] xen-pciback: reconfigure also from backend watch handler - ipc/mqueue, msg, sem: avoid relying on a stack reference past its expiry - dm snapshot: fix crash with transient storage and zero chunk size - Revert "video: hgafb: fix potential NULL pointer dereference" - [arm64,armhf] Revert "net: stmicro: fix a missing check of clk_prepare" - Revert "hwmon: (lm80) fix a missing check of bus read in lm80 probe" - Revert "ecryptfs: replace BUG_ON with error handling code" - Revert "rtlwifi: fix a potential NULL pointer dereference" - Revert "qlcnic: Avoid potential NULL pointer dereference" - Revert "niu: fix missing checks of niu_pci_eeprom_read" - ethernet: sun: niu: fix missing checks of niu_pci_eeprom_read() - [arm64,armhf] net: stmicro: handle clk_prepare() failure during init - net: rtlwifi: properly check for alloc_workqueue() failure - ics932s401: fix broken handling of errors when word reading fails - qlcnic: Add null check after calling netdev_alloc_skb - [x86] video: hgafb: fix potential NULL pointer dereference - vgacon: Record video mode changes with VT_RESIZEX - vt_ioctl: Revert VT_RESIZEX parameter handling removal - vt: Fix character height handling with VT_RESIZEX - tty: vt: always invoke vc->vc_sw->con_resize callback - [x86] drm/i915/gt: Disable HiZ Raw Stall Optimization on broken gen7 - [amd64] x86/Xen: swap NX determination and GDT setup on BSP - nvme-multipath: fix double initialization of ANA state - [arm64] rtc: pcf85063: fallback to parent of_node - nvmet: use new ana_log_size instead the old one - [x86] video: hgafb: correctly handle card detect failure during probe - Bluetooth: SMP: Fail if remote and local public keys are identical . [ Salvatore Bonaccorso ] * bpf: Wrap aux data inside bpf_sanitize_info container (CVE-2021-33200) * bpf: Fix mask direction swap upon off reg sign change (CVE-2021-33200) * bpf: No need to simulate speculative domain for immediates (CVE-2021-33200) * [armhf] dts: sun8i: h3: orangepi-plus: Fix ethernet phy-mode (Closes: #988574) * [rt] Refresh "ptrace: fix ptrace vs tasklist_lock race" * Deal with vc_data ABI changes in 5.10.40 . linux (5.10.38-1) unstable; urgency=medium . * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.29 - [armhf] bus: ti-sysc: Fix warning on unbind if reset is not deasserted - [x86] platform/x86: intel-hid: Support Lenovo ThinkPad X1 Tablet Gen 2 - [amd64] bpf, x86: Use kvmalloc_array instead kmalloc_array in bpf_jit_comp - net/mlx5e: Enforce minimum value check for ICOSQ size - mISDN: fix crash in fritzpci - mac80211: Check crypto_aead_encrypt for errors - mac80211: choose first enabled channel for monitor - [arm64] drm/msm/dsi_pll_7nm: Fix variable usage for pll_lockdet_rate - [arm64] drm/msm/adreno: a5xx_power: Don't apply A540 lm_setup to other GPUs - [arm64] drm/msm: Ratelimit invalid-fence message - netfilter: conntrack: Fix gre tunneling over ipv6 - netfilter: nftables: skip hook overlap logic if flowtable is stale - [x86] platform/x86: thinkpad_acpi: Allow the FnLock LED to change state - [arm64] drm/msm/disp/dpu1: icc path needs to be set before dpu runtime resume - block: clear GD_NEED_PART_SCAN later in bdev_disk_changed - [x86] platform/x86: intel_pmc_core: Ignore GBE LTR on Tiger Lake platforms - [arm64] ptp_qoriq: fix overflow in ptp_qoriq_adjfine() u64 calcalation - scsi: target: pscsi: Clean up after failure in pscsi_map_sg() - [ia64] mca: allocate early mca with GFP_ATOMIC - [ia64] fix format strings for err_inject - cifs: revalidate mapping when we open files for SMB1 POSIX - cifs: Silently ignore unknown oplock break handle - io_uring: fix timeout cancel return code - math: Export mul_u64_u64_div_u64 https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.30 - ALSA: aloop: Fix initialization of controls - ALSA: hda/realtek: Fix speaker amp setup on Acer Aspire E1 - ALSA: hda/conexant: Apply quirk for another HP ZBook G5 model - [x86] ASoC: intel: atom: Stop advertising non working S24LE support - nfc: fix refcount leak in llcp_sock_bind() (CVE-2020-25670) - nfc: fix refcount leak in llcp_sock_connect() (CVE-2020-25671) - nfc: fix memory leak in llcp_sock_connect() (CVE-2020-25672) - nfc: Avoid endless loops caused by repeated llcp_sock_connect() - selinux: make nslot handling in avtab more robust - selinux: fix cond_list corruption when changing booleans - selinux: fix race between old and new sidtab - xen/evtchn: Change irq_info lock to raw_spinlock_t - net: ipv6: check for validity before dereferencing cfg->fc_nlinfo.nlh - [x86] drm/i915: Fix invalid access to ACPI _DSM objects - [amd64] IB/hfi1: Fix probe time panic when AIP is enabled with a buggy BIOS - LOOKUP_MOUNTPOINT: we are cleaning "jumped" flag too late - [ia64] fix user_stack_pointer() for ptrace() - ocfs2: fix deadlock between setattr and dio_end_io_write - fs: direct-io: fix missing sdio->boundary - ethtool: fix incorrect datatype in set_eee ops - of: property: fw_devlink: do not link ".*,nr-gpios" - [armhf] dts: turris-omnia: configure LED[2]/INTn pin as interrupt pin - batman-adv: initialize "struct batadv_tvlv_tt_vlan_data"->reserved field - ice: Continue probe on link/PHY errors - ice: Increase control queue timeout - ice: prevent ice_open and ice_stop during reset - ice: fix memory allocation call - ice: remove DCBNL_DEVRESET bit from PF state - ice: Fix for dereference of NULL pointer - ice: Use port number instead of PF ID for WoL - ice: Cleanup fltr list in case of allocation issues - iwlwifi: pcie: properly set LTR workarounds on 22000 devices - ice: fix memory leak of aRFS after resuming from suspend - net: hso: fix null-ptr-deref during tty device unregistration - bpf: Enforce that struct_ops programs be GPL-only - bpf: link: Refuse non-O_RDWR flags in BPF_OBJ_GET - ethernet/netronome/nfp: Fix a use after free in nfp_bpf_ctrl_msg_rx - bpf: Refcount task stack in bpf_get_task_stack - bpf, sockmap: Fix sk->prot unhash op reset - bpf, sockmap: Fix incorrect fwd_alloc accounting - net: ensure mac header is set in virtio_net_hdr_to_skb() - i40e: Fix sparse warning: missing error code 'err' - i40e: Fix sparse error: 'vsi->netdev' could be null - i40e: Fix sparse error: uninitialized symbol 'ring' - i40e: Fix sparse errors in i40e_txrx.c - net: sched: sch_teql: fix null-pointer dereference - net: sched: fix action overwrite reference counting - nl80211: fix beacon head validation - nl80211: fix potential leak of ACL params - cfg80211: check S1G beacon compat element length - mac80211: fix time-is-after bug in mlme - mac80211: fix TXQ AC confusion - net-ipv6: bugfix - raw & sctp - switch to ipv6_can_nonlocal_bind() - net: let skb_orphan_partial wake-up waiters. - [x86] thunderbolt: Fix a leak in tb_retimer_add() - [x86] thunderbolt: Fix off by one in tb_port_find_retimer() - usbip: add sysfs_lock to synchronize sysfs code paths - usbip: stub-dev synchronize sysfs code paths - usbip: vudc synchronize sysfs code paths - usbip: synchronize event handler with sysfs code paths - driver core: Fix locking bug in deferred_probe_timeout_work_func() - scsi: pm80xx: Fix chip initialization failure - scsi: target: iscsi: Fix zero tag inside a trace event - percpu: make pcpu_nr_empty_pop_pages per chunk type - i2c: turn recovery error on init to debug - [x86] KVM: x86/mmu: change TDP MMU yield function returns to match cond_resched - [x86] KVM: x86/mmu: Merge flush and non-flush tdp_mmu_iter_cond_resched - [x86] KVM: x86/mmu: Rename goal_gfn to next_last_level_gfn - [x86] KVM: x86/mmu: Ensure forward progress when yielding in TDP MMU iter - [x86] KVM: x86/mmu: Yield in TDU MMU iter even if no SPTES changed - [x86] KVM: x86/mmu: Ensure TLBs are flushed when yielding during GFN range zap - [x86] KVM: x86/mmu: Ensure TLBs are flushed for TDP MMU during NX zapping - [x86] KVM: x86/mmu: Don't allow TDP MMU to yield when recovering NX pages - [x86] KVM: x86/mmu: preserve pending TLB flush across calls to kvm_tdp_mmu_zap_sp - net: sched: fix err handler in tcf_action_init() - ice: Refactor DCB related variables out of the ice_port_info struct - ice: Recognize 860 as iSCSI port in CEE mode - xfrm: interface: fix ipv4 pmtu check to honor ip header df - xfrm: Use actual socket sk instead of skb socket for xfrm_output_resume - [armhf] OMAP4: PM: update ROM return address for OSWR and OFF - net: xfrm: Localize sequence counter per network namespace - esp: delete NETIF_F_SCTP_CRC bit from features for esp offload - [x86] ASoC: SOF: Intel: HDA: fix core status verification - xfrm: Fix NULL pointer dereference on policy lookup - virtchnl: Fix layout of RSS structures - i40e: Added Asym_Pause to supported link modes - i40e: Fix kernel oops when i40e driver removes VF's - vxlan: do not modify the shared tunnel info when PMTU triggers an ICMP reply - geneve: do not modify the shared tunnel info when PMTU triggers an ICMP reply - sch_red: fix off-by-one checks in red_check_params() - drivers/net/wan/hdlc_fr: Fix a double free in pvc_xmit - xfrm: Provide private skb extensions for segmented and hw offloaded ESP packets - can: bcm/raw: fix msg_namelen values depending on CAN_REQUIRED_SIZE - can: isotp: fix msg_namelen values depending on CAN_REQUIRED_SIZE - ethernet: myri10ge: Fix a use after free in myri10ge_sw_tso - gianfar: Handle error code at MAC address change - [arm64,armhf] net: dsa: Fix type was not set for devlink port - cxgb4: avoid collecting SGE_QBASE regs during traffic - net:tipc: Fix a double free in tipc_sk_mcast_rcv - [armhf] net/ncsi: Avoid channel_monitor hrtimer deadlock - net: qrtr: Fix memory leak on qrtr_tx_wait failure - nfp: flower: ignore duplicate merge hints from FW - net: phy: broadcom: Only advertise EEE for supported modes - [armhf] ASoC: sunxi: sun4i-codec: fill ASoC card owner (Closes: #980539) - net/mlx5e: Fix mapping of ct_label zero - net/mlx5e: Fix ethtool indication of connector type - net/mlx5: Don't request more than supported EQs - net/rds: Fix a use after free in rds_message_map_pages - xdp: fix xdp_return_frame() kernel BUG throw for page_pool memory model - i40e: Fix display statistics for veb_tc - [arm64] drm/msm: Set drvdata to NULL when msm_drm_init() fails - net: udp: Add support for getsockopt(..., ..., UDP_GRO, ..., ...); - scsi: ufs: core: Fix task management request completion timeout - scsi: ufs: core: Fix wrong Task Tag used in task management request UPIUs - net: cls_api: Fix uninitialised struct field bo->unlocked_driver_cb - [arm64,riscv64] net: macb: restore cmp registers on resume path - clk: fix invalid usage of list cursor in register - clk: fix invalid usage of list cursor in unregister - workqueue: Move the position of debug_work_activate() in __queue_work() - [s390x] cpcmd: fix inline assembly register clobbering - net: openvswitch: conntrack: simplify the return expression of ovs_ct_limit_get_default_limit() - openvswitch: fix send of uninitialized stack memory in ct limit reply - i2c: designware: Adjust bus_freq_hz when refuse high speed mode set - iwlwifi: fix 11ax disabled bit in the regulatory capability flags - tipc: increment the tmp aead refcnt before attaching it - [arm64] net: hns3: clear VF down state bit before request link status - net/mlx5: Fix placement of log_max_flow_counter - net/mlx5: Fix PPLM register mapping - net/mlx5: Fix PBMC register mapping - RDMA/cxgb4: check for ipv6 address properly while destroying listener - RDMA/qedr: Fix kernel panic when trying to access recv_cq - [arm*] drm/vc4: crtc: Reduce PV fifo threshold on hvs4 - i40e: Fix parameters in aq_get_phy_register() - RDMA/addr: Be strict with gid size - [armhf] clk: socfpga: fix iomem pointer cast on 64-bit - dt-bindings: net: ethernet-controller: fix typo in NVMEM - net: sched: bump refcount for new action in ACT replace mode - gpiolib: Read "gpio-line-names" from a firmware node - cfg80211: remove WARN_ON() in cfg80211_sme_connect - net: tun: set tun->dev->addr_len during TUNSETLINK processing - drivers: net: fix memory leak in atusb_probe - drivers: net: fix memory leak in peak_usb_create_dev - net: mac802154: Fix general protection fault (CVE-2021-33033) - net: ieee802154: nl-mac: fix check on panid - net: ieee802154: fix nl802154 del llsec key - net: ieee802154: fix nl802154 del llsec dev - net: ieee802154: fix nl802154 add llsec key - net: ieee802154: fix nl802154 del llsec devkey - net: ieee802154: forbid monitor for set llsec params - net: ieee802154: forbid monitor for del llsec seclevel - net: ieee802154: stop dump llsec params for monitors - Revert "net: sched: bump refcount for new action in ACT replace mode" https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.31 - gfs2: Flag a withdraw if init_threads() fails - [arm64] KVM: Hide system instruction access to Trace registers - [arm64] KVM: Disable guest access to trace filter controls - [armhf] drm/imx: imx-ldb: fix out of bounds array access warning - gfs2: report "already frozen/thawed" errors - ftrace: Check if pages were allocated before calling free_pages() - [arm64,armhf] drm/tegra: dc: Don't set PLL clock to 0Hz - [arm64,armhf] gpu: host1x: Use different lock classes for each client - XArray: Fix splitting to non-zero orders - block: only update parent bi_status when bio fail - null_blk: fix command timeout completion handling - io_uring: don't mark S_ISBLK async work as unbounded - [riscv64] entry: fix misaligned base for excp_vect_table - block: don't ignore REQ_NOWAIT for direct IO - netfilter: x_tables: fix compat match/target pad out-of-bound write - net: sfp: relax bitrate-derived mode check - net: sfp: cope with SFPs that set both LOS normal and LOS inverted - xen/events: fix setting irq affinity https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.32 - net/sctp: fix race condition in sctp_destroy_sock - gpio: sysfs: Obey valid_mask - dmaengine: Fix a double free in dma_async_device_register - [x86] ACPI: x86: Call acpi_boot_table_init() after acpi_table_upgrade() - iwlwifi: Fix softirq/hardirq disabling in iwl_pcie_enqueue_hcmd() - xfrm: BEET mode doesn't support fragments for inner packets - ASoC: max98373: Changed amp shutdown register as volatile - ASoC: max98373: Added 30ms turn on/off time delay - [x86] gpu/xen: Fix a use after free in xen_drm_drv_init - neighbour: Disregard DEAD dst in neigh_update - [arm64] drm/msm: Fix a5xx/a6xx timestamps - scsi: scsi_transport_srp: Don't block target in SRP_PORT_LOST state - iwlwifi: add support for Qu with AX201 device - net: ieee802154: stop dump llsec keys for monitors - net: ieee802154: forbid monitor for add llsec key - net: ieee802154: forbid monitor for del llsec key - net: ieee802154: stop dump llsec devs for monitors - net: ieee802154: forbid monitor for add llsec dev - net: ieee802154: forbid monitor for del llsec dev - net: ieee802154: stop dump llsec devkeys for monitors - net: ieee802154: forbid monitor for add llsec devkey - net: ieee802154: forbid monitor for del llsec devkey - net: ieee802154: stop dump llsec seclevels for monitors - net: ieee802154: forbid monitor for add llsec seclevel - pcnet32: Use pci_resource_len to validate PCI resource - mac80211: clear sta->fast_rx when STA removed from 4-addr VLAN - Input: i8042 - fix Pegatron C15B ID entry - HID: wacom: set EV_KEY and EV_ABS only for non-HID_GENERIC type of devices - readdir: make sure to verify directory entry for legacy interfaces too - [arm64] fix inline asm in load_unaligned_zeropad() - [arm64] alternatives: Move length validation in alternative_{insn, endif} - vfio/pci: Add missing range check in vfio_pci_mmap - scsi: libsas: Reset num_scatter if libata marks qc as NODATA - ixgbe: fix unbalanced device enable/disable in suspend/resume - netfilter: flowtable: fix NAT IPv6 offload mangling - netfilter: conntrack: do not print icmpv6 as unknown via /proc - ice: Fix potential infinite loop when using u8 loop counter - libnvdimm/region: Fix nvdimm_has_flush() to handle ND_REGION_ASYNC - netfilter: bridge: add pre_exit hooks for ebtable unregistration - netfilter: arp_tables: add pre_exit hook for table unregister - [arm64,riscv64] net: macb: fix the restore of cmp registers - net/mlx5e: fix ingress_ifindex check in mlx5e_flower_parse_meta - netfilter: nft_limit: avoid possible divide error in nft_limit_init - net/mlx5e: Fix setting of RS FEC mode - net: sit: Unregister catch-all devices - net: ip6_tunnel: Unregister catch-all devices - mm: ptdump: fix build failure - net: Make tcp_allowed_congestion_control readonly in non-init netns - i40e: fix the panic when running bpf in xdpdrv mode - ethtool: pause: make sure we init driver stats - [ia64] tools: remove inclusion of ia64-specific version of errno.h header - gro: ensure frag0 meets IP header alignment - [armhf] OMAP2+: Fix warning for omap_init_time_of() - [armhf] OMAP2+: Fix uninitialized sr_inst - [arm64] dts: allwinner: Fix SD card CD GPIO for SOPine systems - [arm64] dts: allwinner: h6: beelink-gs1: Remove ext. 32 kHz osc reference - bpf: Use correct permission flag for mixed signed bounds arithmetic (CVE-2021-29155) - [x86] KVM: VMX: Convert vcpu_vmx.exit_reason to a union - [x86] KVM: VMX: Don't use vcpu->run->internal.ndata as an array index (CVE-2021-3501) - r8169: tweak max read request size for newer chips also in jumbo mtu mode - r8169: don't advertise pause in jumbo mode - bpf: Ensure off_reg has no mixed signed bounds for all types (CVE-2021-29155) - bpf: Move off_reg into sanitize_ptr_alu (CVE-2021-29155) - [armel,armhf] 9071/1: uprobes: Don't hook on thumb instructions - [arm64] mte: Ensure TIF_MTE_ASYNC_FAULT is set atomically - bpf: Rework ptr_limit into alu_limit and add common error path (CVE-2021-29155) - bpf: Improve verifier error messages for users (CVE-2021-29155) - bpf: Move sanitize_val_alu out of op switch - net: phy: marvell: fix detection of PHY on Topaz switches https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.33 - [armhf] gpio: omap: Save and restore sysconfig - [x86] pinctrl: lewisburg: Update number of pins in community - block: return -EBUSY when there are open partitions in blkdev_reread_part - pinctrl: core: Show pin numbers for the controllers with base = 0 - [arm64] dts: allwinner: Revert SD card CD GPIO for Pine64-LTS - bpf: Permits pointers on stack for helper calls - bpf: Allow variable-offset stack access - bpf: Refactor and streamline bounds check into helper (CVE-2021-29155) - bpf: Tighten speculative pointer arithmetic mask - locking/qrwlock: Fix ordering in queued_write_lock_slowpath() - [x86] perf/x86/intel/uncore: Remove uncore extra PCI dev HSWEP_PCI_PCU_3 - [x86] perf/x86/kvm: Fix Broadwell Xeon stepping in isolation_ucodes[] - HID: alps: fix error return code in alps_input_configured() - HID cp2112: fix support for multiple gpiochips - HID: wacom: Assign boolean values to a bool variable - net: geneve: check skb is large enough for IPv4/IPv6 header - [arm64,armhf] dmaengine: tegra20: Fix runtime PM imbalance on error - [s390x] entry: save the caller of psw_idle - [arm64] kprobes: Restore local irqflag if kprobes is cancelled - xen-netback: Check for hotplug-status existence before watching - [x86] crash: Fix crash_setup_memmap_entries() out-of-bounds access - net: hso: fix NULL-deref on disconnect regression - USB: CDC-ACM: fix poison/unpoison imbalance (Closes: #986995) https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.34 - iwlwifi: Fix softirq/hardirq disabling in iwl_pcie_gen2_enqueue_hcmd() - [x86] mei: me: add Alder Lake P device id. https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.35 - [mips*] Do not include hi and lo in clobber list for R6 - netfilter: conntrack: Make global sysctls readonly in non-init netns - net: usb: ax88179_178a: initialize local variables before use - igb: Enable RSS for Intel I211 Ethernet Controller - bpf: Fix masking negation logic upon negative dst register (CVE-2021-31829) - bpf: Fix leakage of uninitialized bpf stack under speculation (CVE-2021-31829) - net: qrtr: Avoid potential use after free in MHI send - perf data: Fix error return code in perf_data__create_dir() - capabilities: require CAP_SETFCAP to map uid 0 - perf ftrace: Fix access to pid in array when setting a pid filter - driver core: add a min_align_mask field to struct device_dma_parameters - swiotlb: add a IO_TLB_SIZE define - swiotlb: factor out an io_tlb_offset helper - swiotlb: factor out a nr_slots helper - swiotlb: clean up swiotlb_tbl_unmap_single - swiotlb: refactor swiotlb_tbl_map_single - swiotlb: don't modify orig_addr in swiotlb_tbl_sync_single - swiotlb: respect min_align_mask - nvme-pci: set min_align_mask - ovl: fix leaked dentry - ovl: allow upperdir inside lowerdir - ALSA: usb-audio: Add MIDI quirk for Vox ToneLab EX - USB: Add LPM quirk for Lenovo ThinkPad USB-C Dock Gen2 Ethernet - USB: Add reset-resume quirk for WD19's Realtek Hub - [x86] platform/x86: thinkpad_acpi: Correct thermal sensor allocation - perf/core: Fix unconditional security_locked_down() call - vfio: Depend on MMU https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.36 - bus: mhi: core: Fix check for syserr at power_up - bus: mhi: core: Clear configuration from channel context during reset - bus: mhi: core: Sanity check values from remote device before use - dyndbg: fix parsing file query without a line-range suffix - [s390x] disassembler: increase ebpf disasm buffer size - [s390x] zcrypt: fix zcard and zqueue hot-unplug memleak - [arm64,x86] tpm: acpi: Check eventlog signature before using it - ftrace: Handle commands when closing set_ftrace_filter file - ecryptfs: fix kernel panic with null dev_name - fs/epoll: restore waking from ep_done_scan() - mtd: spi-nor: core: Fix an issue of releasing resources during read/write - Revert "mtd: spi-nor: macronix: Add support for mx25l51245g" - erofs: add unsupported inode i_format check - [armhf] spi: stm32-qspi: fix pm_runtime usage_count counter - [armhf] spi: spi-ti-qspi: Free DMA resources - scsi: qla2xxx: Fix crash in qla2xxx_mqueuecommand() - scsi: mpt3sas: Block PCI config access from userspace during reset - mmc: sdhci: Check for reset prior to DMA address unmap - mmc: sdhci-pci: Fix initialization of some SD cards for Intel BYT-based controllers - [arm64,armhf] mmc: sdhci-tegra: Add required callbacks to set/clear CQE_EN bit - mmc: block: Update ext_csd.cache_ctrl if it was written - mmc: block: Issue a cache flush only when it's enabled - mmc: core: Do a power cycle when the CMD11 fails - mmc: core: Set read only for SD cards with permanent write protect bit - mmc: core: Fix hanging on I/O during system suspend for removable cards - [arm64,armhf] irqchip/gic-v3: Do not enable irqs when handling spurious interrups - cifs: Return correct error code from smb2_get_enc_key - cifs: fix out-of-bound memory access when calling smb3_notify() at mount point - cifs: detect dead connections only when echoes are enabled. - smb2: fix use-after-free in smb2_ioctl_query_info() - btrfs: handle remount to no compress during compression - btrfs: fix metadata extent leak after failure to create subvolume - [x86] intel_th: pci: Add Rocket Lake CPU support - btrfs: fix race between transaction aborts and fsyncs leading to use-after-free - posix-timers: Preserve return value in clock_adjtime32() - fbdev: zero-fill colormap in fbcmap.c - [armhf] bus: ti-sysc: Probe for l4_wkup and l4_cfg interconnect devices first - staging: wimax/i2400m: fix byte-order issue - bus: mhi: core: Destroy SBL devices when moving to mission mode - crypto: api - check for ERR pointers in crypto_destroy_tfm() - [x86] crypto: qat - fix unmap invalid dma address - usb: gadget: uvc: add bInterval checking for HS mode - usb: webcam: Invalid size of Processing Unit Descriptor - [x86] genirq/matrix: Prevent allocation counter corruption - usb: gadget: f_uac2: validate input parameters - usb: gadget: f_uac1: validate input parameters - [arm64,armhf] usb: dwc3: gadget: Ignore EP queue requests during bus reset - usb: xhci: Fix port minor revision - PCI: PM: Do not read power state in pci_enable_device_flags() - [arm64,armhf] soc/tegra: pmc: Fix completion of power-gate toggling - [arm64] dts: imx8mq-librem5-r3: Mark buck3 as always on - [arm64] tee: optee: do not check memref size on return from Secure World - [arm64,x86] soundwire: cadence: only prepare attached devices on clock stop - [arm*] perf/arm_pmu_platform: Use dev_err_probe() for IRQ errors - [arm*] perf/arm_pmu_platform: Fix error handling - random: initialize ChaCha20 constants with correct endianness - xhci: check port array allocation was successful before dereferencing it - xhci: check control context is valid before dereferencing it. - xhci: fix potential array out of bounds with several interrupters - bus: mhi: core: Clear context for stopped channels from remove() - [arm64] spi: qup: fix PM reference leak in spi_qup_remove() - [arm64,armhf] usb: musb: fix PM reference leak in musb_irq_work() - usb: core: hub: Fix PM reference leak in usb_port_resume() - [arm64,armhf] usb: dwc3: gadget: Check for disabled LPM quirk - tty: n_gsm: check error while registering tty devices - [x86] intel_th: Consistency and off-by-one fix - [armhf] phy: phy-twl4030-usb: Fix possible use-after-free in twl4030_usb_remove() - [arm64] crypto: sun8i-ce - Fix PM reference leak in sun8i_ce_probe() - [armhf] crypto: stm32/hash - Fix PM reference leak on stm32-hash.c - [armhf] crypto: stm32/cryp - Fix PM reference leak on stm32-cryp.c - [x86] platform/x86: intel_pmc_core: Don't use global pmcdev in quirks - spi: sync up initial chipselect state - btrfs: do proper error handling in create_reloc_root - btrfs: do proper error handling in btrfs_update_reloc_root - btrfs: convert logic BUG_ON()'s in replace_path to ASSERT()'s - drm: Added orientation quirk for OneGX1 Pro - drm/qxl: do not run release if qxl failed to init - drm/qxl: release shadow on shutdown - drm/ast: Fix invalid usage of AST_MAX_HWC_WIDTH in cursor atomic_check - drm/ast: fix memory leak when unload the driver - drm/amd/display: Check for DSC support instead of ASIC revision - drm/amdgpu/display: buffer INTERRUPT_LOW_IRQ_CONTEXT interrupt work - scsi: lpfc: Fix incorrect dbde assignment when building target abts wqe - scsi: lpfc: Fix pt2pt connection does not recover after LOGO - drm/amdgpu: Fix some unload driver issues - sched/pelt: Fix task util_est update filtering - kvfree_rcu: Use same set of GFP flags as does single-argument - scsi: target: pscsi: Fix warning in pscsi_complete_cmd() - [x86] media: ite-cir: check for receive overflow - power: supply: bq27xxx: fix power_avg for newer ICs - media: media/saa7164: fix saa7164_encoder_register() memory leak bugs - media: gspca/sq905.c: fix uninitialized variable - drm/amdgpu: mask the xgmi number of hops reported from psp to kfd - drm/amdgpu : Fix asic reset regression issue introduce by 8f211fe8ac7c4f - drm/amd/display: Fix UBSAN warning for not a valid value for type '_Bool' - scsi: qla2xxx: Always check the return value of qla24xx_get_isp_stats() - scsi: qla2xxx: Fix use after free in bsg - [arm64,armhf] mmc: sdhci-esdhc-imx: validate pinctrl before use it - mmc: sdhci-pci: Add PCI IDs for Intel LKF - ata: ahci: Disable SXS for Hisilicon Kunpeng920 - nvmet: return proper error code from discovery ctrl - scsi: smartpqi: Use host-wide tag space - scsi: smartpqi: Correct request leakage during reset operations - scsi: smartpqi: Add new PCI IDs - scsi: scsi_dh_alua: Remove check for ASC 24h in alua_rtpg() - media: em28xx: fix memory leak - media: vivid: update EDID - [arm64] drm/msm/dp: Fix incorrect NULL check kbot warnings in DP driver - [armhf] clk: socfpga: arria10: Fix memory leak of socfpga_clk on error return - media: dvb-usb: fix memory leak in dvb_usb_adapter_init - media: gscpa/stv06xx: fix memory leak - sched/fair: Ignore percpu threads for imbalance pulls - [arm64] drm/msm/mdp5: Configure PP_SYNC_HEIGHT to double the vtotal - [arm64] drm/msm/mdp5: Do not multiply vclk line count by 100 - drm/amdgpu/ttm: Fix memory leak userptr pages - drm/radeon/ttm: Fix memory leak userptr pages - drm/amd/display: Try YCbCr420 color when YCbCr444 fails - drm/amdgpu: fix NULL pointer dereference - scsi: lpfc: Fix crash when a REG_RPI mailbox fails triggering a LOGO response - scsi: lpfc: Fix error handling for mailboxes completed in MBX_POLL mode - scsi: lpfc: Remove unsupported mbox PORT_CAPABILITIES logic - mfd: intel-m10-bmc: Fix the register access range - mfd: da9063: Support SMBus and I2C mode - scsi: libfc: Fix a format specifier - perf: Rework perf_event_exit_event() - sched,fair: Alternative sched_slice() - [s390x] archrandom: add parameter check for s390_arch_random_generate - sched,psi: Handle potential task count underflow bugs more gracefully - [i386] ALSA: emu8000: Fix a use after free in snd_emu8000_create_mixer - ALSA: hda/conexant: Re-order CX5066 quirk table entries - [i386] ALSA: sb: Fix two use after free in snd_sb_qsound_build - ALSA: usb-audio: Explicitly set up the clock selector - ALSA: usb-audio: Add dB range mapping for Sennheiser Communications Headset PC 8 - ALSA: hda/realtek: fix mute/micmute LEDs for HP ProBook 445 G7 - ALSA: hda/realtek: GA503 use same quirks as GA401 - ALSA: hda/realtek: fix mic boost on Intel NUC 8 - ALSA: hda/realtek - Headset Mic issue on HP platform - ALSA: hda/realtek: fix static noise on ALC285 Lenovo laptops - ALSA: hda/realtek: Add quirk for Intel Clevo PCx0Dx - [x86] tools/power/turbostat: Fix turbostat for AMD Zen CPUs (Closes: #985681) - btrfs: fix race when picking most recent mod log operation for an old root - [arm64] vdso: Discard .note.gnu.property sections in vDSO - Makefile: Move -Wno-unused-but-set-variable out of GCC only block - fs: fix reporting supported extra file attributes for statx() - virtiofs: fix memory leak in virtio_fs_probe() - ubifs: Only check replay with inode type to judge if inode linked - f2fs: fix error handling in f2fs_end_enable_verity() - f2fs: fix to avoid out-of-bounds memory access (CVE-2021-3506) - openvswitch: fix stack OOB read while fragmenting IPv4 packets - [arm64] ACPI: GTDT: Don't corrupt interrupt mappings on watchdow probe failure - NFS: fs_context: validate UDP retrans to prevent shift out-of-bounds - NFS: Don't discard pNFS layout segments that are marked for return - NFSv4: Don't discard segments marked for return in _pnfs_return_layout() - jffs2: Fix kasan slab-out-of-bounds problem - jffs2: Hook up splice_write callback - [powerpc*] powernv: Enable HAIL (HV AIL) for ISA v3.1 processors - [powerpc*] eeh: Fix EEH handling for hugepages in ioremap space. - [x86] intel_th: pci: Add Alder Lake-M support - [arm64,x86] tpm: efi: Use local variable for calculating final log size - [arm64,x86] tpm: vtpm_proxy: Avoid reading host log when using a virtual device - [armhf] crypto: arm/curve25519 - Move '.fpu' after '.arch' - md/raid1: properly indicate failure when ending a failed write request - dm raid: fix inconclusive reshape layout on fast raid4/5/6 table reload sequences - fuse: fix write deadlock - exfat: fix erroneous discard when clear cluster bit - sfc: farch: fix TX queue lookup in TX flush done handling - sfc: farch: fix TX queue lookup in TX event handling - security: commoncap: fix -Wstringop-overread warning - Fix misc new gcc warnings - jffs2: check the validity of dstlen in jffs2_zlib_compress() - smb3: when mounting with multichannel include it in requested capabilities - smb3: do not attempt multichannel to server which does not support it - Revert 337f13046ff0 ("futex: Allow FUTEX_CLOCK_REALTIME with FUTEX_WAIT op") - futex: Do not apply time namespace adjustment on FUTEX_LOCK_PI - [x86] cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is supported - ext4: annotate data race in start_this_handle() - ext4: annotate data race in jbd2_journal_dirty_metadata() - ext4: fix check to prevent false positive report of incorrect used inodes - ext4: do not set SB_ACTIVE in ext4_orphan_cleanup() - ext4: fix error code in ext4_commit_super - ext4: fix ext4_error_err save negative errno into superblock - ext4: fix error return code in ext4_fc_perform_commit() - ext4: allow the dax flag to be set and cleared on inline directories - ext4: Fix occasional generic/418 failure - media: dvbdev: Fix memory leak in dvb_media_device_free() - media: dvb-usb: Fix use-after-free access - media: dvb-usb: Fix memory leak at error in dvb_usb_device_init() - media: v4l2-ctrls: fix reference to freed memory - [arm64] media: venus: hfi_parser: Don't initialize parser on v1 - usb: gadget: dummy_hcd: fix gpf in gadget_setup - usb: gadget: Fix double free of device descriptor pointers - usb: gadget/function/f_fs string table fix for multiple languages - [arm64,armhf] usb: dwc3: gadget: Remove FS bInterval_m1 limitation - [arm64,armhf] usb: dwc3: gadget: Fix START_TRANSFER link state check - [arm64,armhf] usb: dwc3: core: Do core softreset when switch mode - [arm*] usb: dwc2: Fix session request interrupt handler - tty: fix memory leak in vc_deallocate - [x86] tools/power turbostat: Fix offset overflow issue in index converting - tracing: Map all PIDs to command lines - tracing: Restructure trace_clock_global() to never block - dm space map common: fix division bug in sm_ll_find_free_block() - dm integrity: fix missing goto in bitmap_flush_interval error handling - dm rq: fix double free of blk_mq_tag_set in dev remove after table load fails - lib/vsprintf.c: remove leftover 'f' and 'F' cases from bstr_printf() - [arm*] thermal/drivers/cpufreq_cooling: Fix slab OOB issue - thermal/core/fair share: Lock the thermal zone while looping over instances https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.37 - Bluetooth: verify AMP hci_chan before amp_destroy (CVE-2021-33034) - bluetooth: eliminate the potential race condition when removing the HCI controller (CVE-2021-32399) - net/nfc: fix use-after-free llcp_sock_bind/connect (CVE-2021-23134) - io_uring: truncate lengths larger than MAX_RW_COUNT on provide buffers (CVE-2021-3491) - Revert "USB: cdc-acm: fix rounding error in TIOCSSERIAL" - usb: roles: Call try_module_get() from usb_role_switch_find_by_fwnode() - [amd64] tty: moxa: fix TIOCSSERIAL jiffies conversions - USB: serial: usb_wwan: fix TIOCSSERIAL jiffies conversions - USB: serial: ti_usb_3410_5052: fix TIOCSSERIAL permission check - [amd64] tty: moxa: fix TIOCSSERIAL permission check - [x86] usb: typec: tcpm: Address incorrect values of tcpm psy for fixed supply - [x86] usb: typec: tcpm: Address incorrect values of tcpm psy for pps supply - [x86] usb: typec: tcpm: update power supply once partner accepts - FDDI: defxx: Bail out gracefully with unassigned PCI resource for CSR - PCI: Allow VPD access for QLogic ISP2722 - [x86] KVM: Defer the MMU unload to the normal path on an global INVPCID - [arm64] PCI: xgene: Fix cfg resource mapping - PM / devfreq: Unlock mutex and free devfreq struct in error path - iio: inv_mpu6050: Fully validate gyro and accel scale writes - iio:accel:adis16201: Fix wrong axis assignment that prevents loading - iio:adc:ad7476: Fix remove handling - misc: lis3lv02d: Fix false-positive WARN on various HP models - [x86] misc: vmw_vmci: explicitly initialize vmci_notify_bm_set_msg struct - [x86] misc: vmw_vmci: explicitly initialize vmci_datagram payload - selinux: add proper NULL termination to the secclass_map permissions - [x86] sched: Treat Intel SNC topology as default, COD as exception - async_xor: increase src_offs when dropping destination page - md/bitmap: wait for external bitmap writes to complete during tear down - md-cluster: fix use-after-free issue when removing rdev - md: split mddev_find - md: factor out a mddev_find_locked helper from mddev_find - md: md_open returns -EBUSY when entering racing area - md: Fix missing unused status line of /proc/mdstat - ipw2x00: potential buffer overflow in libipw_wx_set_encodeext() - cfg80211: scan: drop entry from hidden_list on overflow - rtw88: Fix array overrun in rtw_get_tx_power_params() - mt76: fix potential DMA mapping leak - [amd64] drm/i915/gvt: Fix virtual display setup for BXT/APL - [amd64] drm/i915/gvt: Fix vfio_edid issue for BXT/APL - drm/qxl: use ttm bo priorities - [arm64,armhf] drm/panfrost: Clear MMU irqs before handling the fault - [arm64,armhf] drm/panfrost: Don't try to map pages that are already mapped - drm/radeon: fix copy of uninitialized variable back to userspace - drm/dp_mst: Revise broadcast msg lct & lcr - drm/dp_mst: Set CLEAR_PAYLOAD_ID_TABLE as broadcast - drm: bridge/panel: Cleanup connector on bridge detach - drm/amd/display: Reject non-zero src_y and src_x for video planes - drm/amdgpu: fix concurrent VM flushes on Vega/Navi v2 - ALSA: hda/realtek: Re-order ALC882 Acer quirk table entries - ALSA: hda/realtek: Re-order ALC882 Sony quirk table entries - ALSA: hda/realtek: Re-order ALC882 Clevo quirk table entries - ALSA: hda/realtek: Re-order ALC269 HP quirk table entries - ALSA: hda/realtek: Re-order ALC269 Acer quirk table entries - ALSA: hda/realtek: Re-order ALC269 Dell quirk table entries - ALSA: hda/realtek: Re-order ALC269 ASUS quirk table entries - ALSA: hda/realtek: Re-order ALC269 Sony quirk table entries - ALSA: hda/realtek: Re-order ALC269 Lenovo quirk table entries - ALSA: hda/realtek: Re-order remaining ALC269 quirk table entries - ALSA: hda/realtek: Re-order ALC662 quirk table entries - ALSA: hda/realtek: Remove redundant entry for ALC861 Haier/Uniwill devices - ALSA: hda/realtek: ALC285 Thinkpad jack pin quirk is unreachable - ALSA: hda/realtek: Fix speaker amp on HP Envy AiO 32 - [s390x] KVM: VSIE: correctly handle MVPG when in VSIE - [s390x] KVM: split kvm_s390_logical_to_effective - [s390x] KVM: fix guarded storage control register handling - [s390x] fix detection of vector enhancements facility 1 vs. vector packed decimal facility - [s390x] KVM: VSIE: fix MVPG handling for prefixing and MSO - [s390x] KVM: split kvm_s390_real_to_abs - [s390x] KVM: extend kvm_s390_shadow_fault to return entry pointer - [x86] KVM: x86/mmu: Alloc page for PDPTEs when shadowing 32-bit NPT with 64-bit - [x86] KVM: x86: Remove emulator's broken checks on CR0/CR3/CR4 loads - [x86] KVM: nSVM: Set the shadow root level to the TDP level for nested NPT - [x86] KVM: SVM: Don't strip the C-bit from CR2 on #PF interception - [x86] KVM: SVM: Do not allow SEV/SEV-ES initialization after vCPUs are created - [x86] KVM: SVM: Inject #GP on guest MSR_TSC_AUX accesses if RDTSCP unsupported - [x86] KVM: nVMX: Defer the MMU reload to the normal path on an EPTP switch - [x86] KVM: nVMX: Truncate bits 63:32 of VMCS field on nested check in !64-bit - [x86] KVM: nVMX: Truncate base/index GPR value on address calc in !64-bit - [arm64] KVM: arm/arm64: Fix KVM_VGIC_V3_ADDR_TYPE_REDIST read - KVM: Destroy I/O bus devices on unregister failure _after_ sync'ing SRCU - KVM: Stop looking for coalesced MMIO zones if the bus is destroyed - [arm64] KVM: Fully zero the vcpu state on reset - [arm64] KVM: arm64: Fix KVM_VGIC_V3_ADDR_TYPE_REDIST_REGION read - Revert "drivers/net/wan/hdlc_fr: Fix a double free in pvc_xmit" - Revert "i3c master: fix missing destroy_workqueue() on error in i3c_master_register" - ovl: fix missing revert_creds() on error path - Revert "drm/qxl: do not run release if qxl failed to init" - [x86] usb: gadget: pch_udc: Revert d3cb25a12138 completely - Revert "tools/power turbostat: adjust for temperature offset" - [arm64] firmware: xilinx: Fix dereferencing freed memory - [armhf] memory: gpmc: fix out of bounds read and dereference on gpmc_cs[] - [armhf] ARM: dts: exynos: correct fuel gauge interrupt trigger level on GT-I9100 - [armhf] ARM: dts: exynos: correct PMIC interrupt trigger level on SMDK5250 - [armhf] serial: stm32: fix code cleaning warnings and checks - [armhf] serial: stm32: add "_usart" prefix in functions name - [armhf] serial: stm32: fix probe and remove order for dma - [armhf] serial: stm32: Use of_device_get_match_data() - [armhf] serial: stm32: fix startup by enabling usart for reception - [armhf] serial: stm32: fix incorrect characters on console - [armhf] serial: stm32: fix TX and RX FIFO thresholds - [armhf] serial: stm32: fix a deadlock condition with wakeup event - [armhf] serial: stm32: fix wake-up flag handling - [armhf] serial: stm32: fix a deadlock in set_termios - [armhf] serial: stm32: fix tx dma completion, release channel - [armhf] serial: stm32: call stm32_transmit_chars locked - [armhf] serial: stm32: fix FIFO flush in startup and set_termios - [armhf] serial: stm32: add FIFO flush when port is closed - [armhf] serial: stm32: fix tx_empty condition - [x86] usb: typec: tps6598x: Fix return value check in tps6598x_probe() - regmap: set debugfs_name to NULL after it is freed - [arm64,armhf] spi: rockchip: avoid objtool warning - mtd: Handle possible -EPROBE_DEFER from parse_mtd_partitions() - mtd: don't lock when recursively deleting partitions - mtd: maps: fix error return code of physmap_flash_remove() - [arm64] dts: qcom: db845c: fix correct powerdown pin for WSA881x - [armhf] spi: stm32: drop devres version of spi_register_master - [armhf] spi: stm32: Fix use-after-free on unbind - [x86] microcode: Check for offline CPUs before requesting new microcode - devtmpfs: fix placement of complete() call - [x86] usb: gadget: pch_udc: Replace cpu_to_le32() by lower_32_bits() - [x86] usb: gadget: pch_udc: Check if driver is present before calling ->setup() - [x86] usb: gadget: pch_udc: Check for DMA mapping error - [x86] usb: gadget: pch_udc: Initialize device pointer before use - [x86] usb: gadget: pch_udc: Provide a GPIO line used on Intel Minnowboard (v1) - [amd64] crypto: ccp - fix command queuing to TEE ring buffer - [x86] crypto: qat - don't release uninitialized resources - [x86] crypto: qat - ADF_STATUS_PF_RUNNING should be set after adf_dev_init - dt-bindings: serial: stm32: Use 'type: object' instead of false for 'additionalProperties' - mtd: require write permissions for locking and badblock ioctls - [arm64] bus: qcom: Put child node before return - soundwire: bus: Fix device found flag correctly - NFSD: Fix sparse warning in nfs4proc.c - NFSv4.2: fix copy stateid copying for the async copy - crypto: poly1305 - fix poly1305_core_setkey() declaration - [x86] crypto: qat - fix error path in adf_isr_resource_alloc() - [armhf] usb: gadget: aspeed: fix dma map failure - [arm64] drivers: nvmem: Fix voltage settings for QTI qfprom-efuse - driver core: platform: Declare early_platform_cleanup() prototype - [armel,armhf] memory: pl353: fix mask of ECC page_size config register - soundwire: stream: fix memory leak in stream config error path - [arm64] firmware: qcom_scm: Make __qcom_scm_is_call_available() return bool - [arm64] firmware: qcom_scm: Reduce locking section for __get_convention() - [arm64] firmware: qcom_scm: Workaround lack of "is available" call on SC7180 - [arm64,armhf] irqchip/gic-v3: Fix OF_BAD_ADDR error handling - [x86] staging: rtl8192u: Fix potential infinite loop - PM / devfreq: Use more accurate returned new_freq as resume_freq - [armhf] clocksource/drivers/timer-ti-dm: Fix posted mode status check order - [armhf] clocksource/drivers/timer-ti-dm: Add missing set_state_oneshot_stopped - spi: Fix use-after-free with devm_spi_alloc_* - [arm64] soc: qcom: mdt_loader: Validate that p_filesz < p_memsz - [arm64] soc: qcom: mdt_loader: Detect truncated read of segments - PM: runtime: Replace inline function pm_runtime_callbacks_present() - [amd64,arm64] ACPI: CPPC: Replace cppc_attr with kobj_attribute - [x86] crypto: qat - Fix a double free in adf_create_ring - [arm64] cpufreq: armada-37xx: Fix setting TBG parent for load levels - [arm64] clk: mvebu: armada-37xx-periph: remove .set_parent method for CPU PM clock - [arm64] cpufreq: armada-37xx: Fix the AVS value for load L1 - [arm64] clk: mvebu: armada-37xx-periph: Fix switching CPU freq from 250 Mhz to 1 GHz - [arm64] clk: mvebu: armada-37xx-periph: Fix workaround for switching from L1 to L0 - [arm64] cpufreq: armada-37xx: Fix driver cleanup when registration failed - [arm64] cpufreq: armada-37xx: Fix determining base CPU frequency - USB: cdc-acm: fix unprivileged TIOCCSERIAL - USB: cdc-acm: fix TIOCGSERIAL implementation - tty: actually undefine superseded ASYNC flags - tty: fix return value for unsupported ioctls - tty: fix return value for unsupported termiox ioctls - serial: core: return early on unsupported ioctls - node: fix device cleanups in error handling code - crypto: chelsio - Read rxchannel-id from firmware - usbip: vudc: fix missing unlock on error in usbip_sockfd_store() - security: keys: trusted: fix TPM2 authorizations - [x86] platform/x86: pmc_atom: Match all Beckhoff Automation baytrail boards with critclk_systems DMI table - [armhf] dts: aspeed: Rainier: Fix humidity sensor bus address - [x86] Drivers: hv: vmbus: Use after free in __vmbus_open() - [x86] Drivers: hv: vmbus: Increase wait time for VMbus unload - [x86] PM: hibernate: x86: Use crc32 instead of md5 for hibernation e820 integrity check - [arm*] usb: dwc2: Fix host mode hibernation exit with remote wakeup flow. - [arm*] usb: dwc2: Fix hibernation between host and device modes. - ttyprintk: Add TTY hangup callback. - [armhf] serial: omap: don't disable rs485 if rts gpio is missing - [armhf] serial: omap: fix rs485 half-duplex filtering - xen-blkback: fix compatibility bug with single page rings - [armhf] soc: aspeed: fix a ternary sign expansion bug - [armhf] drm/tilcdc: send vblank event when disabling crtc - [armhf] drm/stm: Fix bus_flags handling - drm/amd/display: Fix off by one in hdmi_14_process_transaction() - sched/fair: Fix shift-out-of-bounds in load_balance() - afs: Fix updating of i_mode due to 3rd party change - rcu: Remove spurious instrumentation_end() in rcu_nmi_enter() - media: vivid: fix assignment of dev->fbuf_out_flags - media: saa7134: use sg_dma_len when building pgtable - media: saa7146: use sg_dma_len when building pgtable - [armhf] media: aspeed: fix clock handling logic - drm/probe-helper: Check epoch counter in output_poll_execute() - [arm64] media: venus: core: Fix some resource leaks in the error path of 'venus_probe()' - media: m88ds3103: fix return value check in m88ds3103_probe() - media: m88rs6000t: avoid potential out-of-bounds reads on arrays - [x86] kprobes: Fix to check non boostable prefixes correctly - sata_mv: add IRQ checks - ata: libahci_platform: fix IRQ check - seccomp: Fix CONFIG tests for Seccomp_filters - nvme-tcp: block BH in sk state_change sk callback - nvmet-tcp: fix incorrect locking in state_change sk callback - [armhf] clk: imx: Fix reparenting of UARTs not associated with stdout - nvme: retrigger ANA log update if group descriptor isn't found - media: v4l2-ctrls.c: fix race condition in hdl->requests list - vfio/pci: Move VGA and VF initialization to functions - vfio/pci: Re-order vfio_pci_probe() - [amd64] vfio/mdev: Do not allow a mdev_type to have a NULL parent pointer - drm/amd/display: use GFP_ATOMIC in dcn20_resource_construct - drm/radeon: Fix a missing check bug in radeon_dp_mst_detect() - scsi: pm80xx: Increase timeout for pm80xx mpi_uninit_check() - scsi: pm80xx: Fix potential infinite loop - scsi: ufs: ufshcd-pltfrm: Fix deferred probing - [amd64] scsi: hisi_sas: Fix IRQ checks - [powerpc*] scsi: ibmvfc: Fix invalid state machine BUG_ON() - nvmet-tcp: fix a segmentation fault during io parsing error - nvme-pci: don't simple map sgl when sgls are disabled - [armhf] HSI: core: fix resource leaks in hsi_add_client_from_dt() - [amd64] x86/events/amd/iommu: Fix sysfs type mismatch - [x86] perf/amd/uncore: Fix sysfs type mismatch - io_uring: fix overflows checks in provide buffers - sched/debug: Fix cgroup_path[] serialization - drivers/block/null_blk/main: Fix a double free in null_init. - xsk: Respect device's headroom and tailroom on generic xmit path - HID: plantronics: Workaround for double volume key presses - RDMA/mlx5: Fix mlx5 rates to IB rates map - [x86] KVM: x86/mmu: Retry page faults that hit an invalid memslot - Bluetooth: avoid deadlock between hci_dev->lock and socket lock - bpftool: Fix maybe-uninitialized warnings - iommu: Check dev->iommu in iommu_dev_xxx functions - [amd64] iommu/vt-d: Reject unsupported page request modes - [powerpc*] prom: Mark identical_pvr_fixup as __init - inet: use bigger hash table for IP ID generation - [arm64,armhf] pinctrl: pinctrl-single: remove unused parameter - [arm64,armhf] pinctrl: pinctrl-single: fix pcs_pin_dbg_show() when bits_per_mux is not zero - [mips64el,mipsel] loongson64: fix bug when PAGE_SIZE > 16KB - RDMA/mlx5: Fix drop packet rule in egress table - IB/isert: Fix a use after free in isert_connect_request - gpio: guard gpiochip_irqchip_add_domain() with GPIOLIB_IRQCHIP - ALSA: core: remove redundant spin_lock pair in snd_card_disconnect - net: phy: lan87xx: fix access to wrong register of LAN87xx - udp: never accept GSO_FRAGLIST packets - [powerpc*] pseries: Only register vio drivers if vio bus exists - net/tipc: fix missing destroy_workqueue() on error in tipc_crypto_start() - bug: Remove redundant condition check in report_bug - RDMA/core: Fix corrupted SL on passive side - nfc: pn533: prevent potential memory corruption - [arm64] net: hns3: Limiting the scope of vector_ring_chain variable - [amd64] iommu/vt-d: Don't set then clear private data in prq_event_thread() - iommu: Fix a boundary issue to avoid performance drop - [amd64] iommu/vt-d: Report right snoop capability when using FL for IOVA - [amd64] iommu/vt-d: Report the right page fault address - [amd64] iommu/vt-d: Preset Access/Dirty bits for IOVA over FL - [amd64] iommu/vt-d: Remove WO permissions on second-level paging entries - [amd64] iommu/vt-d: Invalidate PASID cache when root/context entry changed - ALSA: usb-audio: Add error checks for usb_driver_claim_interface() calls - HID: lenovo: Use brightness_set_blocking callback for setting LEDs brightness - HID: lenovo: Fix lenovo_led_set_tp10ubkbd() error handling - HID: lenovo: Check hid_get_drvdata() returns non NULL in lenovo_event() - HID: lenovo: Map mic-mute button to KEY_F20 instead of KEY_MICMUTE - [arm64] KVM: Initialize VCPU mdcr_el2 before loading it - [arm*] ASoC: simple-card: fix possible uninitialized single_cpu local variable - [amd64] IB/hfi1: Use kzalloc() for mmu_rb_handler allocation - [powerpc*] 64s: Fix pte update for kernel memory on radix - [powerpc*] perf: Fix PMU constraint check for EBB events - mac80211: bail out if cipher schemes are invalid - perf vendor events amd: Fix broken L2 Cache Hits from L2 HWPF metric - xfs: fix return of uninitialized value in variable error - rtw88: Fix an error code in rtw_debugfs_set_rsvd_page() - mt7601u: fix always true expression - [powerpc*] KVM: PPC: Book3S HV P9: Restore host CTRL SPR after guest exit - ovl: invalidate readdir cache on changes to dir with origin - RDMA/qedr: Fix error return code in qedr_iw_connect() - [amd64] IB/hfi1: Fix error return code in parse_platform_config() - cxgb4: Fix unintentional sign extension issues - [arm64] net: thunderx: Fix unintentional sign extension issue - RDMA/srpt: Fix error return code in srpt_cm_req_recv() - [arm64,armhf] i2c: imx: fix reference leak when pm_runtime_get_sync fails - [armhf] i2c: omap: fix reference leak when pm_runtime_get_sync fails - [armhf] i2c: stm32f7: fix reference leak when pm_runtime_get_sync fails - [powerpc*] xive: Drop check on irq_data in xive_core_debug_show() - [powerpc*] xive: Fix xmon command "dxi" - net/packet: make packet_fanout.arr size configurable up to 64K - net/packet: remove data races in fanout operations - [amd64] drm/i915/gvt: Fix error code in intel_gvt_init_device() - [amd64] iommu/amd: Put newline after closing bracket in warning - [mips64el,mipsel] pci-legacy: stop using of_pci_range_to_resource - [powerpc*] pseries: extract host bridge from pci_bus prior to bus removal - [powerpc*] smp: Reintroduce cpu_core_mask - [x86] KVM: dump_vmcs should not assume GUEST_IA32_EFER is valid - rtlwifi: 8821ae: upgrade PHY and RF parameters - [arm64,armhf] wlcore: fix overlapping snprintf arguments in debugfs - mwl8k: Fix a double Free in mwl8k_probe_hw - netfilter: nft_payload: fix C-VLAN offload support - netfilter: nftables_offload: VLAN id needs host byteorder in flow dissector - netfilter: nftables_offload: special ethertype handling for VLAN - [x86] vsock/vmci: log once the failed queue pair allocation - gro: fix napi_gro_frags() Fast GRO breakage due to IP alignment check - RDMA/cxgb4: add missing qpid increment - RDMA/i40iw: Fix error unwinding when i40iw_hmc_sd_one fails - ALSA: usb: midi: don't return -ENOMEM when usb_urb_ep_type_check fails - sfc: ef10: fix TX queue lookup in TX event handling - vsock/virtio: free queued packets when closing socket - [armhf] net: davinci_emac: Fix incorrect masking of tx and rx error channel - [amd64] crypto: ccp: Detect and reject "invalid" addresses destined for PSP - nfp: devlink: initialize the devlink port attribute "lanes" - net: stmmac: fix TSO and TBS feature enabling during driver open - RDMA/rxe: Fix a bug in rxe_fill_ip_info() - RDMA/core: Add CM to restrack after successful attachment to a device - [powerpc*] 64: Fix the definition of the fixmap area - ath9k: Fix error check in ath9k_hw_read_revisions() for PCI devices - ath10k: Fix a use after free in ath10k_htc_send_bundle - ath10k: Fix ath10k_wmi_tlv_op_pull_peer_stats_info() unlock without lock - wlcore: Fix buffer overrun by snprintf due to incorrect buffer size - [powerpc*] perf: Fix the threshold event selection for memory events in power10 - net: phy: marvell: fix m88e1011_set_downshift - net: phy: marvell: fix m88e1111_set_downshift - bnxt_en: fix ternary sign extension bug in bnxt_show_temp() - net: geneve: modify IP header check in geneve6_xmit_skb and geneve_xmit_skb - bnxt_en: Fix RX consumer index logic in the error path. - [x86] KVM: VMX: Intercept FS/GS_BASE MSR accesses for 32-bit KVM - [arm64] net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send - bpf: Fix propagation of 32 bit unsigned bounds from 64 bit bounds - net: bridge: mcast: fix broken length + header check for MRDv6 Adv. - net:nfc:digital: Fix a double free in digital_tg_recv_dep_req - perf tools: Change fields type in perf_record_time_conv - perf jit: Let convert_timestamp() to be backwards-compatible - perf session: Add swap operation for event TIME_CONV - mm/sl?b.c: remove ctor argument from kmem_cache_flags - mm: memcontrol: slab: fix obtain a reference to a freeing memcg - mm/sparse: add the missing sparse_buffer_fini() in error branch - mm/memory-failure: unnecessary amount of unmapping - afs: Fix speculative status fetches - bpf: Fix alu32 const subreg bound tracking on bitwise operations (CVE-2021-3490) - bpf, ringbuf: Deny reserve of buffers larger than ringbuf (CVE-2021-3489) - bpf: Prevent writable memory-mapping of read-only ringbuf pages - [arm64] Remove arm64_dma32_phys_limit and its uses - net: Only allow init netns to set default tcp cong to a restricted algo - smp: Fix smp_call_function_single_async prototype - Revert "net/sctp: fix race condition in sctp_destroy_sock" - sctp: delay auto_asconf init until binding the first addr (CVE-2021-23133) https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.38 - [arm64,x86] tpm: fix error return code in tpm2_get_cc_attrs_tbl() - [arm64,x86] tpm, tpm_tis: Extend locality handling to TPM2 in tpm_tis_gen_interrupt() - [arm64,x86] tpm, tpm_tis: Reserve locality in tpm_tis_resume() - [x86] KVM: x86/mmu: Remove the defunct update_pte() paging hook - [x86] KVM/VMX: Invoke NMI non-IST entry instead of IST entry - ACPI: PM: Add ACPI ID of Alder Lake Fan - PM: runtime: Fix unpaired parent child_count for force_resume - [x86] cpufreq: intel_pstate: Use HWP if enabled by platform firmware - kvm: Cap halt polling at kvm->max_halt_poll_ns - ath11k: fix thermal temperature read - fs: dlm: fix debugfs dump - fs: dlm: add errno handling to check callback - fs: dlm: check on minimum msglen size - fs: dlm: flush swork on shutdown - tipc: convert dest node's address to network order - [x86] ASoC: Intel: bytcr_rt5640: Enable jack-detect support on Asus T100TAF - net/mlx5e: Use net_prefetchw instead of prefetchw in MPWQE TX datapath - [arm64] net: stmmac: Set FIFO sizes for ipq806x - Bluetooth: Fix incorrect status handling in LE PHY UPDATE event - i2c: bail out early when RDWR parameters are wrong - ALSA: hdsp: don't disable if not enabled - ALSA: hdspm: don't disable if not enabled - ALSA: rme9652: don't disable if not enabled - ALSA: bebob: enable to deliver MIDI messages for multiple ports - Bluetooth: Set CONF_NOT_COMPLETE as l2cap_chan default - Bluetooth: initialize skb_queue_head at l2cap_chan_create() - net/sched: cls_flower: use ntohs for struct flow_dissector_key_ports - net: bridge: when suppression is enabled exclude RARP packets - Bluetooth: check for zapped sk before connecting - [powerpc] 32: Statically initialise first emergency context - [arm64] net: hns3: remediate a potential overflow risk of bd_num_list - [arm64] net: hns3: add handling for xmit skb with recursive fraglist - ip6_vti: proper dev_{hold|put} in ndo_[un]init methods - [x86] ASoC: Intel: bytcr_rt5640: Add quirk for the Chuwi Hi8 tablet - ice: handle increasing Tx or Rx ring sizes - Bluetooth: btusb: Enable quirk boolean flag for Mediatek Chip. - [x86] ASoC: rt5670: Add a quirk for the Dell Venue 10 Pro 5055 - i2c: Add I2C_AQ_NO_REP_START adapter quirk - [mips64el,mipsel] MIPS: Loongson64: Use _CACHE_UNCACHED instead of _CACHE_UNCACHED_ACCELERATED - [amd64] IB/hfi1: Correct oversized ring allocation - mac80211: clear the beacon's CRC after channel switch - [armhf] pinctrl: samsung: use 'int' for register masks in Exynos - rtw88: 8822c: add LC calibration for RTL8822C - mt76: mt76x0: disable GTK offloading - fuse: invalidate attrs when page writeback completes - virtiofs: fix userns - cuse: prevent clone - iwlwifi: pcie: make cfg vs. trans_cfg more robust - [powerpc*] mm: Add cond_resched() while removing hpte mappings - Revert "iommu/amd: Fix performance counter initialization" - [amd64] iommu/amd: Remove performance counter pre-initialization test - ALSA: hda/realtek: Add quirk for Lenovo Ideapad S740 - [x86] ASoC: Intel: sof_sdw: add quirk for new ADL-P Rvp - ALSA: hda/hdmi: fix race in handling acomp ELD notification at resume - sctp: Fix out-of-bounds warning in sctp_process_asconf_param() - flow_dissector: Fix out-of-bounds warning in __skb_flow_bpf_to_target() - [powerpc*] smp: Set numa node before updating mask - [x86] ASoC: rt286: Generalize support for ALC3263 codec - ethtool: ioctl: Fix out-of-bounds warning in store_link_ksettings_for_user() - net: sched: tapr: prevent cycle_time == 0 in parse_taprio_schedule - [powerpc*] pseries: Stop calling printk in rtas_stop_self() - wl3501_cs: Fix out-of-bounds warnings in wl3501_send_pkt - wl3501_cs: Fix out-of-bounds warnings in wl3501_mgmt_join - [powerpc*] iommu: Annotate nested lock for lockdep - iavf: remove duplicate free resources calls - kbuild: generate Module.symvers only when vmlinux exists - bnxt_en: Add PCI IDs for Hyper-V VF devices. - [ia64] module: fix symbolizer crash on fdescr - watchdog: rename __touch_watchdog() to a better descriptive name - watchdog: explicitly update timestamp when reporting softlockup - watchdog/softlockup: remove logic that tried to prevent repeated reports - watchdog: fix barriers when printing backtraces from all CPUs - [x86] ASoC: rt286: Make RT286_SET_GPIO_* readable and writable - thermal: thermal_of: Fix error return code of thermal_of_populate_bind_params() - f2fs: move ioctl interface definitions to separated file - f2fs: fix compat F2FS_IOC_{MOVE,GARBAGE_COLLECT}_RANGE - f2fs: fix to allow migrating fully valid segment - f2fs: fix panic during f2fs_resize_fs() - f2fs: fix a redundant call to f2fs_balance_fs if an error occurs - PCI: Release OF node in pci_scan_device()'s error path - [armel,armhf] 9064/1: hw_breakpoint: Do not directly check the event's overflow_handler hook - f2fs: fix to align to section for fallocate() on pinned file - f2fs: fix to update last i_size if fallocate partially succeeds - f2fs: fix to avoid touching checkpointed data in get_victim() - f2fs: fix to cover __allocate_new_section() with curseg_lock - f2fs: Fix a hungtask problem in atomic write - f2fs: fix to avoid accessing invalid fio in f2fs_allocate_data_block() - [arm64] rpmsg: qcom_glink_native: fix error return code of qcom_glink_rx_data() - NFS: nfs4_bitmask_adjust() must not change the server global bitmasks - NFS: Fix attribute bitmask in _nfs42_proc_fallocate() - NFSv4.2: Always flush out writes in nfs42_proc_fallocate() - NFS: Deal correctly with attribute generation counter overflow - pNFS/flexfiles: fix incorrect size check in decode_nfs_fh() - NFSv4.2 fix handling of sr_eof in SEEK's reply - SUNRPC: Move fault injection call sites - SUNRPC: Remove trace_xprt_transmit_queued - SUNRPC: Handle major timeout in xprt_adjust_timeout() - [arm64] thermal/drivers/tsens: Fix missing put_device error - NFSv4.x: Don't return NFS4ERR_NOMATCHING_LAYOUT if we're unmounting - nfsd: ensure new clients break delegations - SUNRPC: fix ternary sign expansion bug in tracing - xprtrdma: Avoid Receive Queue wrapping - xprtrdma: Fix cwnd update ordering - xprtrdma: rpcrdma_mr_pop() already does list_del_init() - swiotlb: Fix the type of index - ceph: fix inode leak on getattr error in __fh_to_dentry - scsi: qla2xxx: Prevent PRLI in target mode - scsi: ufs: core: Do not put UFS power into LPM if link is broken - scsi: ufs: core: Cancel rpm_dev_flush_recheck_work during system suspend - scsi: ufs: core: Narrow down fast path in system suspend path - rtc: ds1307: Fix wday settings for rx8130 - [arm64] net: hns3: fix incorrect configuration for igu_egu_hw_err - [arm64] net: hns3: initialize the message content in hclge_get_link_mode() - [arm64] net: hns3: add check for HNS3_NIC_STATE_INITED in hns3_reset_notify_up_enet() - [arm64] net: hns3: fix for vxlan gpe tx checksum bug - [arm64] net: hns3: use netif_tx_disable to stop the transmit queue - [arm64] net: hns3: disable phy loopback setting in hclge_mac_start_phy - sctp: do asoc update earlier in sctp_sf_do_dupcook_a - [riscv64] Fix error code returned by riscv_hartid_to_cpuid() - sunrpc: Fix misplaced barrier in call_decode - ethernet:enic: Fix a use after free bug in enic_hard_start_xmit - sctp: fix a SCTP_MIB_CURRESTAB leak in sctp_sf_do_dupcook_b - netfilter: xt_SECMARK: add new revision to fix structure layout - net: stmmac: Clear receive all(RA) bit when promiscuous mode is off - drm/radeon: Fix off-by-one power_state index heap overwrite - drm/radeon: Avoid power table parsing memory leaks - [arm64] entry: factor irq triage logic into macros - [arm64] entry: always set GIC_PRIO_PSR_I_SET during entry - khugepaged: fix wrong result value for trace_mm_collapse_huge_page_isolate() - mm/hugeltb: handle the error case in hugetlb_fix_reserve_counts() - mm/migrate.c: fix potential indeterminate pte entry in migrate_vma_insert_page() - ksm: fix potential missing rmap_item for stable_node - mm/gup: check every subpage of a compound page during isolation - mm/gup: return an error on migration failure - mm/gup: check for isolation errors - ethtool: fix missing NLM_F_MULTI flag when dumping - net: fix nla_strcmp to handle more then one trailing null character - smc: disallow TCP_ULP in smc_setsockopt() - netfilter: nfnetlink_osf: Fix a missing skb_header_pointer() NULL check - netfilter: nftables: Fix a memleak from userdata error path in new objects - sched: Fix out-of-bound access in uclamp - sched/fair: Fix unfairness caused by missing load decay - fs/proc/generic.c: fix incorrect pde_is_permanent check - kernel: kexec_file: fix error return code of kexec_calculate_store_digests() - kernel/resource: make walk_system_ram_res() find all busy IORESOURCE_SYSTEM_RAM resources - kernel/resource: make walk_mem_res() find all busy IORESOURCE_MEM resources - netfilter: nftables: avoid overflows in nft_hash_buckets() - i40e: fix broken XDP support - i40e: Fix use-after-free in i40e_client_subtask() - i40e: fix the restart auto-negotiation after FEC modified - i40e: Fix PHY type identifiers for 2.5G and 5G adapters - f2fs: avoid unneeded data copy in f2fs_ioc_move_range() - [powerpc*] 64s: Fix crashes when toggling stf barrier - [powerpc*] 64s: Fix crashes when toggling entry flush barrier - hfsplus: prevent corruption in shrinking truncate - squashfs: fix divide error in calculate_skip() - userfaultfd: release page in error path to avoid BUG_ON - mm/hugetlb: fix F_SEAL_FUTURE_WRITE - blk-iocost: fix weight updates of inner active iocgs - [arm64] mte: initialize RGSR_EL1.SEED in __cpu_setup - [arm64] Fix race condition on PG_dcache_clean in __sync_icache_dcache() - btrfs: fix race leading to unpersisted data and metadata on fsync - drm/radeon/dpm: Disable sclk switching on Oland when two 4K 60Hz monitors are connected - [x86] drm/i915: Avoid div-by-zero on gen2 - kvm: exit halt polling on need_resched() as well - [x86] KVM: LAPIC: Accurately guarantee busy wait for timer to expire when using hv_timer - [arm64] drm/msm/dp: initialize audio_comp when audio starts - [x86] KVM: x86: Cancel pvclock_gtod_work on module removal - [x86] KVM: x86: Prevent deadlock against tk_core.seq - dax: Add an enum for specifying dax wakup mode - dax: Add a wakeup mode parameter to put_unlocked_entry() - dax: Wake up all waiters after invalidating dax entry - [amd64] xen/unpopulated-alloc: consolidate pgmap manipulation - [amd64] xen/unpopulated-alloc: fix error return code in fill_list() - [arm64,armhf] usb: dwc3: gadget: Free gadget structure only after freeing endpoints - iio: light: gp2ap002: Fix rumtime PM imbalance on error - iio: proximity: pulsedlight: Fix rumtime PM imbalance on error - [armhf] hwmon: (occ) Fix poll rate limiting - ACPI: scan: Fix a memory leak in an error handling path - kyber: fix out of bounds access when preempted - nvmet: add lba to sect conversion helpers - nvmet: fix inline bio check for bdev-ns - nvmet-rdma: Fix NULL deref when SEND is completed with error - f2fs: compress: fix to free compress page correctly - f2fs: compress: fix race condition of overwrite vs truncate - f2fs: compress: fix to assign cc.cluster_idx correctly - nbd: Fix NULL pointer in flush_workqueue - blk-mq: plug request for shared sbitmap - blk-mq: Swap two calls in blk_mq_exit_queue() - [armhf] usb: dwc3: omap: improve extcon initialization - [arm64] usb: dwc3: pci: Enable usb2-gadget-lpm-disable for Intel Merrifield - usb: xhci: Increase timeout for HC halt - [arm*] usb: dwc2: Fix gadget DMA unmap direction - usb: core: hub: fix race condition about TRSMRCY of resume - [arm64,armhf] usb: dwc3: gadget: Enable suspend events - [arm64,armhf] usb: dwc3: gadget: Return success always for kick transfer in ep queue - [x86] usb: typec: ucsi: Retrieve all the PDOs instead of just the first 4 - [x86] usb: typec: ucsi: Put fwnode in any case during ->probe() - xhci-pci: Allow host runtime PM as default for Intel Alder Lake xHCI - xhci: Do not use GFP_KERNEL in (potentially) atomic context - xhci: Add reset resume quirk for AMD xhci controller. - iio: gyro: mpu3050: Fix reported temperature value - iio: tsl2583: Fix division by a zero lux_val - cdc-wdm: untangle a circular dependency between callback and softint - xen/gntdev: fix gntdev_mmap() error exit path - [x86] KVM: Emulate RDPID only if RDTSCP is supported - [x86] KVM: Move RDPID emulation intercept to its own enum - [x86] KVM: nVMX: Always make an attempt to map eVMCS after migration - [x86] KVM: VMX: Do not advertise RDPID if ENABLE_RDTSCP control is unsupported - [x86] KVM: VMX: Disable preemption when probing user return MSRs - Revert "iommu/vt-d: Remove WO permissions on second-level paging entries" - Revert "iommu/vt-d: Preset Access/Dirty bits for IOVA over FL" - iommu/vt-d: Preset Access/Dirty bits for IOVA over FL - iommu/vt-d: Remove WO permissions on second-level paging entries - mm: fix struct page layout on 32-bit systems - [mips*] Reinstate platform `__div64_32' handler - [mips*] Avoid DIVU in `__div64_32' is result would be zero - [mips*] Avoid handcoded DIVU in `__div64_32' altogether - [armhf] clocksource/drivers/timer-ti-dm: Prepare to handle dra7 timer wrap issue - [armhf] clocksource/drivers/timer-ti-dm: Handle dra7 timer wrap errata i940 - [armel,armhf] 9011/1: centralize phys-to-virt conversion of DT/ATAGS address - [armel,armhf] 9012/1: move device tree mapping out of linear region - [armel,armhf] 9020/1: mm: use correct section size macro to describe the FDT virtual address - [armel,armhf] 9027/1: head.S: explicitly map DT even if it lives in the first physical section - [x86] usb: typec: tcpm: Fix error while calculating PPS out values - kobject_uevent: remove warning in init_uevent_argv() - [x86] drm/i915/gt: Fix a double free in gen8_preallocate_top_level_pdp - [x86] drm/i915: Read C0DRB3/C1DRB3 as 16 bits again - [x86] drm/i915/overlay: Fix active retire callback alignment - [x86] drm/i915: Fix crash in auto_retire - debugfs: Make debugfs_allow RO after init - ext4: fix debug format string warning - nvme: do not try to reconfigure APST when the controller is not live . [ Vincent Blut ] * [x86] sound/soc/intel: Enable SND_SOC_INTEL_CATPT as module (Closes: #986822) * [x86] sound/soc/intel/boards: Enable SND_SOC_INTEL_BDW_RT5650_MACH as module * drivers/input/rmi4: Enable RMI4_F3A (Closes: #986848) * [armhf] drivers/gpio: Enable GPIO_MXC as module (Closes: #987019) * [x86] drivers/misc/mei: Enable INTEL_MEI_TXE, INTEL_MEI_HDCP as modules (Closes: #987281) . [ Uwe Kleine-König ] * [arm64] Enable more options for NXP's i.MX8 (Closes: #985862) . [ Salvatore Bonaccorso ] * vfs: move cap_convert_nscap() call into vfs_setxattr() (CVE-2021-3493) * Refresh "Makefile: Do not check for libelf when building OOT module" * Bump ABI to 7 * Refresh "tools/include/uapi: Fix <asm/errno.h>" * [rt] Update to 5.10.35-rt39 * [rt] Refresh "powerpc/mm/highmem: Switch to generic kmap atomic" * [arm64] udeb: Include mdio module for RPi4 ethernet in installer (Closes: #985956) . [ Vagrant Cascadian ] * [arm64] Disable USB type-C DisplayPort in pinebook pro device-tree. * [arm64] Enable TYPEC_FUSB302, SND_SOC_ES8316, TYPEC and TYPEC_TCPM as modules. (Closes: #987638) . [ Michal Simek ] * [arm64] Enable clock driver for Xilinx ZynqMP SoC . [ Valentin Vidic ] * [s390x] udeb: Include standard scsi-modules containing the virtio_blk module (Closes: #988005) . [ Ben Hutchings ] * kbuild: Abort build if SUBDIRS used (Closes: #987575) . linux (5.10.28-1) unstable; urgency=medium . * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.27 - mm/memcg: rename mem_cgroup_split_huge_fixup to split_page_memcg and add nr_pages argument - mm/memcg: set memcg when splitting page - mt76: fix tx skb error handling in mt76_dma_tx_queue_skb - net: stmmac: fix dma physical address of descriptor when display ring - [arm64,armhf] net: fec: ptp: avoid register access when ipg clock is disabled - [powerpc*] 4xx: Fix build errors from mfdcr() - atm: eni: dont release is never initialized - atm: lanai: dont run lanai_dev_close if not open - Revert "r8152: adjust the settings about MAC clock speed down for RTL8153" - [x86] ALSA: hda: ignore invalid NHLT table - ixgbe: Fix memleak in ixgbe_configure_clsu32 - blk-cgroup: Fix the recursive blkg rwstat - net: tehuti: fix error return code in bdx_probe() - net: intel: iavf: fix error return code of iavf_init_get_resources() - sun/niu: fix wrong RXMAC_BC_FRM_CNT_COUNT count - gianfar: fix jumbo packets+napi+rx overrun crash (CVE-2021-29264) - cifs: ask for more credit on async read/write code paths - gfs2: fix use-after-free in trans_drain - [arm64,armhf] cpufreq: blacklist Arm Vexpress platforms in cpufreq-dt-platdev - gpiolib: acpi: Add missing IRQF_ONESHOT - nfs: fix PNFS_FLEXFILE_LAYOUT Kconfig default - NFS: Correct size calculation for create reply length - [arm64] net: hisilicon: hns: fix error return code of hns_nic_clear_all_rx_fetch() - [arm64] net: enetc: set MAC RX FIFO to recommended value - atm: uPD98402: fix incorrect allocation - atm: idt77252: fix null-ptr-dereference - cifs: change noisy error message to FYI - kbuild: add image_name to no-sync-config-targets - umem: fix error return code in mm_pci_probe() - [sparc64] Fix opcode filtering in handling of no fault loads - u64_stats,lockdep: Fix u64_stats_init() vs lockdep - block: Fix REQ_OP_ZONE_RESET_ALL handling - drm/amdgpu: fb BO should be ttm_bo_type_device - drm/radeon: fix AGP dependency - nvme: simplify error logic in nvme_validate_ns() - nvme: add NVME_REQ_CANCELLED flag in nvme_cancel_request() - nvme-fc: set NVME_REQ_CANCELLED in nvme_fc_terminate_exchange() - nvme-fc: return NVME_SC_HOST_ABORTED_CMD when a command has been aborted - nvme-core: check ctrl css before setting up zns - nvme-rdma: Fix a use after free in nvmet_rdma_write_data_done - nvme-pci: add the DISABLE_WRITE_ZEROES quirk for a Samsung PM1725a - nfs: we don't support removing system.nfs4_acl - block: Suppress uevent for hidden device when removed - mm/fork: clear PASID for new mm - [ia64] fix ia64_syscall_get_set_arguments() for break-based syscalls - [ia64] fix ptrace(PTRACE_SYSCALL_INFO_EXIT) sign - static_call: Pull some static_call declarations to the type headers - [x86] static_call: Allow module use without exposing static_call_key - [x86] static_call: Fix the module key fixup - [x86] static_call: Fix static_call_set_init() - [x86] KVM: Protect userspace MSR filter with SRCU, and set atomically-ish - btrfs: fix sleep while in non-sleep context during qgroup removal - selinux: don't log MAC_POLICY_LOAD record on failed policy load - selinux: fix variable scope issue in live sidtab conversion - [arm64] netsec: restore phy power state after controller reset - [x86] platform/x86: intel-vbtn: Stop reporting SW_DOCK events - psample: Fix user API breakage - z3fold: prevent reclaim/free race for headless pages - squashfs: fix inode lookup sanity checks - squashfs: fix xattr id and id lookup sanity checks - hugetlb_cgroup: fix imbalanced css_get and css_put pair for shared mappings - [x86] ACPI: video: Add missing callback back for Sony VPCEH3U1E - ACPICA: Always create namespace nodes using acpi_ns_create_node() - [arm64] stacktrace: don't trace arch_stack_walk() - integrity: double check iint_cache was initialized - [armhf] drm/etnaviv: Use FOLL_FORCE for userptr - drm/amdgpu: Add additional Sienna Cichlid PCI ID - [x86] drm/i915: Fix the GT fence revocation runtime PM logic - dm verity: fix DM_VERITY_OPTS_MAX value - dm ioctl: fix out of bounds array access when no devices - [armhf] bus: omap_l3_noc: mark l3 irqs as IRQF_NO_THREAD - [armhf] OMAP2+: Fix smartreflex init regression after dropping legacy data - [armhf] soc: ti: omap-prm: Fix occasional abort on reset deassert for dra7 iva - veth: Store queue_mapping independently of XDP prog presence - bpf: Change inode_storage's lookup_elem return value from NULL to -EBADF - net/mlx5e: RX, Mind the MPWQE gaps when calculating offsets - net/mlx5e: When changing XDP program without reset, take refs for XSK RQs - net/mlx5e: Don't match on Geneve options in case option masks are all zero - ipv6: fix suspecious RCU usage warning - drop_monitor: Perform cleanup upon probe registration failure - macvlan: macvlan_count_rx() needs to be aware of preemption - net: sched: validate stab values - [armhf] net: dsa: bcm_sf2: Qualify phydev->dev_flags based on port - igc: reinit_locked() should be called with rtnl_lock - igc: Fix Pause Frame Advertising - igc: Fix Supported Pause Frame Link Setting - igc: Fix igc_ptp_rx_pktstamp() - e1000e: add rtnl_lock() to e1000_reset_task - e1000e: Fix error handling in e1000_set_d0_lplu_state_82571 - net/qlcnic: Fix a use after free in qlcnic_83xx_get_minidump_template - net: phy: broadcom: Add power down exit reset state delay - [armhf] ftgmac100: Restart MAC HW once - net: qrtr: fix a kernel-infoleak in qrtr_recvmsg() (CVE-2021-29647) - flow_dissector: fix byteorder of dissected ICMP ID - netfilter: ctnetlink: fix dump of the expect mask attribute - net: phylink: Fix phylink_err() function name error in phylink_major_config - tipc: better validate user input in tipc_nl_retrieve_key() (CVE-2021-29646) - tcp: relookup sock for RST+ACK packets handled by obsolete req sock - can: isotp: isotp_setsockopt(): only allow to set low level TX flags for CAN-FD - can: isotp: TX-path: ensure that CAN frame flags are initialized - can: peak_usb: add forgotten supported devices - [arm64,armhf] can: flexcan: flexcan_chip_freeze(): fix chip freeze for missing bitrate - can: c_can_pci: c_can_pci_remove(): fix use-after-free - [armhf] can: c_can: move runtime PM enable/disable to c_can_platform - mac80211: fix rate mask reset - mac80211: Allow HE operation to be longer than expected. - nfp: flower: fix unsupported pre_tunnel flows - nfp: flower: add ipv6 bit to pre_tunnel control message - nfp: flower: fix pre_tun mask id allocation - ftrace: Fix modify_ftrace_direct. - [arm64] drm/msm/dsi: fix check-before-set in the 7nm dsi_pll code - net/sched: cls_flower: fix only mask bit check in the validate_ct_state - netfilter: nftables: report EOPNOTSUPP on unsupported flowtable flags - netfilter: nftables: allow to update flowtable flags - netfilter: flowtable: Make sure GC works periodically in idle system - [armhf] dts: imx6ull: fix ubi filesystem mount failed - ipv6: weaken the v4mapped source check - net: check all name nodes in __dev_alloc_name - net: cdc-phonet: fix data-interface release on probe failure - igb: check timestamp validity - r8152: limit the RX buffer size of RTL8153A for USB 2.0 - [arm64,armhf] net: stmmac: dwmac-sun8i: Provide TX and RX fifo sizes - selinux: vsock: Set SID for socket returned by accept() - bpf: Fix umd memory leak in copy_process() (CVE-2021-29649) - can: isotp: tx-path: zero initialize outgoing CAN frames - [arm64] drm/msm: fix shutdown hook in case GPU components failed to bind - [arm64] drm/msm: Fix suspend/resume on i.MX5 - [arm64] kdump: update ppos when reading elfcorehdr - PM: runtime: Defer suspending suppliers - net/mlx5: Add back multicast stats for uplink representor - net/mlx5e: Allow to match on MPLS parameters only for MPLS over UDP - net/mlx5e: Offload tuple rewrite for non-CT flows - net/mlx5e: Fix error path for ethtool set-priv-flag - PM: EM: postpone creating the debugfs dir till fs_initcall - net: bridge: don't notify switchdev for local FDB addresses - [amd64] xen/x86: make XEN_BALLOON_MEMORY_HOTPLUG_LIMIT depend on MEMORY_HOTPLUG - RDMA/cxgb4: Fix adapter LE hash errors while destroying ipv6 listening server - bpf: Don't do bpf_cgroup_storage_set() for kuprobe/tp programs - net: Consolidate common blackhole dst ops - net, bpf: Fix ip6ip6 crash with collect_md populated skbs - igb: avoid premature Rx buffer reuse - net: phy: introduce phydev->port - net: phy: broadcom: Avoid forward for bcm54xx_config_clock_delay() - net: phy: broadcom: Set proper 1000BaseX/SGMII interface mode for BCM54616S - net: phy: broadcom: Fix RGMII delays for BCM50160 and BCM50610M - Revert "netfilter: x_tables: Switch synchronization to RCU" - netfilter: x_tables: Use correct memory barriers. (CVE-2021-29650) - dm table: Fix zoned model check and zone sectors check - mm/mmu_notifiers: ensure range_end() is paired with range_start() - Revert "netfilter: x_tables: Update remaining dereference to RCU" - ACPI: scan: Rearrange memory allocation in acpi_device_add() - ACPI: scan: Use unique number for instance_no - io_uring: fix provide_buffers sign extension - block: recalculate segment count for multi-segment discards correctly - scsi: Revert "qla2xxx: Make sure that aborted commands are freed" - scsi: qedi: Fix error return code of qedi_alloc_global_queues() - scsi: mpt3sas: Fix error return code of mpt3sas_base_attach() - smb3: fix cached file size problems in duplicate extents (reflink) - cifs: Adjust key sizes and key generation routines for AES256 encryption - locking/mutex: Fix non debug version of mutex_lock_io_nested() - mm/memcg: fix 5.10 backport of splitting page memcg - fs/cachefiles: Remove wait_bit_key layout dependency - can: dev: Move device back to init netns on owning netns delete - r8169: fix DMA being used after buffer free if WoL is enabled - [armhf] net: dsa: b53: VLAN filtering is global to all users - mac80211: fix double free in ibss_leave - ext4: add reclaim checks to xattr code - fs/ext4: fix integer overflow in s_log_groups_per_flex - [amd64] Revert "xen: fix p2m size in dom0 for disabled memory hotplug case" - Revert "net: bonding: fix error return code of bond_neigh_init()" - nvme: fix the nsid value to print in nvme_validate_or_alloc_ns - can: peak_usb: Revert "can: peak_usb: add forgotten supported devices" - xen-blkback: don't leak persistent grants from xen_blkbk_map() (CVE-2021-28688) https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.28 - [arm64] mm: correct the inside linear map range during hotplug check - bpf: Fix fexit trampoline. - virtiofs: Fail dax mount if device does not support it - ext4: shrink race window in ext4_should_retry_alloc() - ext4: fix bh ref count on error paths - rpc: fix NULL dereference on kmalloc failure - iomap: Fix negative assignment to unsigned sis->pages in iomap_swapfile_activate - [x86] ASoC: rt1015: fix i2c communication error - ASoC: rt5640: Fix dac- and adc- vol-tlv values being off by a factor of 10 - [x86] ASoC: rt5651: Fix dac- and adc- vol-tlv values being off by a factor of 10 - [armhf] ASoC: sgtl5000: set DAP_AVC_CTRL register to correct default value on probe - [x86] ASoC: es8316: Simplify adc_pga_gain_tlv table - ASoC: soc-core: Prevent warning if no DMI table is present - NFSD: fix error handling in NFSv4.0 callbacks - kernel: freezer should treat PF_IO_WORKER like PF_KTHREAD for freezing - vhost: Fix vhost_vq_reset() - io_uring: fix ->flags races by linked timeouts - scsi: st: Fix a use after free in st_open() - scsi: qla2xxx: Fix broken #endif placement - [x86] staging: comedi: cb_pcidas: fix request_irq() warn - [x86] staging: comedi: cb_pcidas64: fix request_irq() warn - ASoC: rt711: add snd_soc_component remove callback - thermal/core: Add NULL pointer check before using cooling device stats - locking/ww_mutex: Simplify use_ww_ctx & ww_ctx handling - locking/ww_mutex: Fix acquire/release imbalance in ww_acquire_init()/ww_acquire_fini() - nvmet-tcp: fix kmap leak when data digest in use - io_uring: imply MSG_NOSIGNAL for send[msg]()/recv[msg]() calls - [x86] static_call: Align static_call_is_init() patching condition - ext4: do not iput inode under running transaction in ext4_rename() - io_uring: call req_set_fail_links() on short send[msg]()/recv[msg]() with MSG_WAITALL - [arm64,armhf] net: mvpp2: fix interrupt mask/unmask skip condition - flow_dissector: fix TTL and TOS dissection on IPv4 fragments - net: introduce CAN specific pointer in the struct net_device - brcmfmac: clear EAP/association status bits on linkdown events - ath11k: add ieee80211_unregister_hw to avoid kernel crash caused by NULL pointer - rtw88: coex: 8821c: correct antenna switch function - iwlwifi: pcie: don't disable interrupts for reg_lock - ath10k: hold RCU lock when calling ieee80211_find_sta_by_ifaddr() - [amd64,arm64] net: ethernet: aquantia: Handle error cleanup of start on open - appletalk: Fix skb allocation size in loopback case - net: wan/lmc: unregister device when no matching device is found - net: 9p: advance iov on empty read - bpf: Remove MTU check in __bpf_skb_max_len - ACPI: tables: x86: Reserve memory occupied by ACPI tables - ACPI: processor: Fix CPU0 wakeup in acpi_idle_play_dead() - ALSA: usb-audio: Apply sample rate quirk to Logitech Connect - ALSA: hda: Re-add dropped snd_poewr_change_state() calls - ALSA: hda: Add missing sanity checks in PM prepare/complete callbacks - ALSA: hda/realtek: fix a determine_headset_type issue for a Dell AIO - ALSA: hda/realtek: call alc_update_headset_mode() in hp_automute_hook - ALSA: hda/realtek: fix mute/micmute LEDs for HP 640 G8 - [x86] KVM: SVM: load control fields from VMCB12 before checking them (CVE-2021-29657) - [x86] KVM: SVM: ensure that EFER.SVME is set when running nested guest or on nested vmexit - PM: runtime: Fix race getting/putting suppliers at probe - PM: runtime: Fix ordering in pm_runtime_get_suppliers() - tracing: Fix stack trace event size - [s390x] vdso: copy tod_steering_delta value to vdso_data page - [s390x] vdso: fix tod_steering_delta type - mm: fix race by making init_zero_pfn() early_initcall - drm/amdgpu: fix offset calculation in amdgpu_vm_bo_clear_mappings() - drm/amdgpu: check alignment on CPU page for bo map - reiserfs: update reiserfs_xattrs_initialized() condition - [armhf] drm/imx: fix memory leak when fails to init - [arm64,armhf] drm/tegra: dc: Restore coupling of display controllers - [arm64,armhf] drm/tegra: sor: Grab runtime PM reference across reset - [arm64,armhf] pinctrl: rockchip: fix restore error in resume - extcon: Add stubs for extcon_register_notifier_all() functions - extcon: Fix error handling in extcon_dev_register - firmware: stratix10-svc: reset COMMAND_RECONFIG_FLAG_PARTIAL to 0 - [arm64] usb: dwc3: pci: Enable dis_uX_susphy_quirk for Intel Merrifield - [x86] video: hyperv_fb: Fix a double free in hvfb_probe - firewire: nosy: Fix a use-after-free bug in nosy_ioctl() (CVE-2021-3483) - usbip: vhci_hcd fix shift out-of-bounds in vhci_hub_control() - USB: quirks: ignore remote wake-up on Fibocom L850-GL LTE modem - [arm64,armhf] usb: musb: Fix suspend with devices connected for a64 - cdc-acm: fix BREAK rx code path adding necessary calls - USB: cdc-acm: untangle a circular dependency between callback and softint - USB: cdc-acm: downgrade message to debug - USB: cdc-acm: fix double free on probe failure - USB: cdc-acm: fix use-after-free after probe failure - [i386] usb: gadget: udc: amd5536udc_pci fix null-ptr-dereference - [arm*] usb: dwc2: Fix HPRT0.PrtSusp bit setting for HiKey 960 board. - [arm*] usb: dwc2: Prevent core suspend when port connection flag is 0 - [arm64] usb: dwc3: qcom: skip interconnect init for ACPI probe - [arm64,armhf] usb: dwc3: gadget: Clear DEP flags after stop transfers in ep disable - soc: qcom-geni-se: Cleanup the code to remove proxy votes - [x86] staging: rtl8192e: Fix incorrect source in memcpy() - [x86] staging: rtl8192e: Change state information from u16 to u8 - driver core: clear deferred probe reason on probe retry - drivers: video: fbcon: fix NULL dereference in fbcon_cursor() - [riscv64] evaluate put_user() arg before enabling user access - Revert "kernel: freezer should treat PF_IO_WORKER like PF_KTHREAD for freezing" - [amd64] bpf: Use NOP_ATOMIC5 instead of emit_nops(&prog, 5) for BPF_TRAMP_F_CALL_ORIG . [ Salvatore Bonaccorso ] * [rt] Refresh "u64_stats: Disable preemption on 32bit-UP/SMP with RT during updates" * Bump ABI to 6 * [rt] Refresh "tracing: Merge irqflags + preempt counter." * bpf, x86: Validate computation of branch displacements for x86-64 (CVE-2021-29154) * bpf, x86: Validate computation of branch displacements for x86-32 (CVE-2021-29154) . linux (5.10.26-1) unstable; urgency=medium . * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.25 https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.26 - ALSA: dice: fix null pointer dereference when node is disconnected - ALSA: hda/realtek: apply pin quirk for XiaomiNotebook Pro - ALSA: hda: generic: Fix the micmute led init state - ALSA: hda/realtek: Apply headset-mic quirks for Xiaomi Redmibook Air - ALSA: hda/realtek: fix mute/micmute LEDs for HP 840 G8 - ALSA: hda/realtek: fix mute/micmute LEDs for HP 440 G8 - ALSA: hda/realtek: fix mute/micmute LEDs for HP 850 G8 - Revert "PM: runtime: Update device status before letting suppliers suspend" - [s390x] vtime: fix increased steal time accounting - [s390x] pci: refactor zpci_create_device() - [s390x] pci: remove superfluous zdev->zbus check - [s390x] pci: fix leak of PCI device structure - zonefs: Fix O_APPEND async write handling - zonefs: prevent use of seq files as swap file - zonefs: fix to update .i_wr_refcnt correctly in zonefs_open_zone() - btrfs: fix race when cloning extent buffer during rewind of an old root (CVE-2021-28964) - btrfs: fix slab cache flags for free space tree bitmap - vhost-vdpa: fix use-after-free of v->config_ctx (CVE-2021-29266) - [armhf] ASoC: fsl_ssi: Fix TDM slot setup for I2S mode - [x86] ASoC: Intel: bytcr_rt5640: Fix HP Pavilion x2 10-p0XX OVCD current threshold - [x86] ASoC: SOF: Intel: unregister DMIC device on probe error - [x86] ASoC: SOF: intel: fix wrong poll bits in dsp power down - ASoC: qcom: sdm845: Fix array out of bounds access (CVE-2021-28952) - ASoC: qcom: sdm845: Fix array out of range on rx slim channels - [arm64] ASoC: qcom: lpass-cpu: Fix lpass dai ids parse - [arm*] ASoC: simple-card-utils: Do not handle device clock - afs: Fix accessing YFS xattrs on a non-YFS server - afs: Stop listxattr() from listing "afs.*" attributes - ALSA: usb-audio: Fix unintentional sign extension issue - nvme: fix Write Zeroes limitations - nvme-tcp: fix misuse of __smp_processor_id with preemption enabled - nvme-tcp: fix possible hang when failing to set io queues - nvme-tcp: fix a NULL deref when receiving a 0-length r2t PDU - nvmet: don't check iosqes,iocqes for discovery controllers - nfsd: Don't keep looking up unhashed files in the nfsd file cache - nfsd: don't abort copies early - NFSD: Repair misuse of sv_lock in 5.10.16-rt30. - NFSD: fix dest to src mount in inter-server COPY - svcrdma: disable timeouts on rdma backchannel - sunrpc: fix refcount leak for rpc auth modules - [x86] i915/perf: Start hrtimer only if sampling the OA buffer - pstore: Fix warning in pstore_kill_sb() - io_uring: ensure that SQPOLL thread is started for exit (CVE-2021-28951) - net/qrtr: fix __netdev_alloc_skb call - cifs: fix allocation size on newly created files - scsi: lpfc: Fix some error codes in debugfs - scsi: myrs: Fix a double free in myrs_cleanup() - [riscv64] correct enum sbi_ext_rfence_fid - gpiolib: Assign fwnode to parent's if no primary one provided - nvme-rdma: fix possible hang when failing to set io queues - [armhf] tty: serial: stm32-usart: Remove set but unused 'cookie' variables - [armhf] serial: stm32: fix DMA initialization error handling - bpf: Declare __bpf_free_used_maps() unconditionally - module: merge repetitive strings in module_sig_check() - module: avoid *goto*s in module_sig_check() - module: harden ELF info handling - scsi: pm80xx: Make mpi_build_cmd locking consistent - scsi: pm80xx: Make running_req atomic - scsi: pm80xx: Fix pm8001_mpi_get_nvmd_resp() race condition - scsi: pm8001: Neaten debug logging macros and uses - scsi: libsas: Remove notifier indirection - scsi: libsas: Introduce a _gfp() variant of event notifiers - scsi: mvsas: Pass gfp_t flags to libsas event notifiers - [x86] scsi: isci: Pass gfp_t flags in isci_port_link_down() - [x86] scsi: isci: Pass gfp_t flags in isci_port_link_up() - [x86] scsi: isci: Pass gfp_t flags in isci_port_bc_change_received() - RDMA/mlx5: Allow creating all QPs even when non RDMA profile is used - [powerpc*] sstep: Fix load-store and update emulation - [powerpc*] sstep: Fix darn emulation - i40e: Fix endianness conversions - net: phy: micrel: set soft_reset callback to genphy_soft_reset for KSZ8081 - drm/amd/display: turn DPMS off on connector unplug - iwlwifi: Add a new card for MA family - io_uring: fix inconsistent lock state - [arm64,armhf] media: cedrus: h264: Support profile controls - [s390x] qeth: schedule TX NAPI on QAOB completion - io_uring: don't attempt IO reissue from the ring exit path - io_uring: clear IOCB_WAITQ for non -EIOCBQUEUED return - net: bonding: fix error return code of bond_neigh_init() - gfs2: Add common helper for holding and releasing the freeze glock - gfs2: move freeze glock outside the make_fs_rw and _ro functions - gfs2: bypass signal_our_withdraw if no journal - [powerpc*] Force inlining of cpu_has_feature() to avoid build failure - usb-storage: Add quirk to defeat Kindle's automatic unload - usbip: Fix incorrect double assignment to udc->ud.tcp_rx - usb: gadget: configfs: Fix KASAN use-after-free - [x86] usb: typec: Remove vdo[3] part of tps6598x_rx_identity_reg struct - [x86] usb: typec: tcpm: Invoke power_supply_changed for tcpm-source-psy- - [arm64,armhf] usb: dwc3: gadget: Allow runtime suspend if UDC unbinded - [arm64,armhf] usb: dwc3: gadget: Prevent EP queuing while stopping transfers - [x86] thunderbolt: Initialize HopID IDAs in tb_switch_alloc() - [x86] thunderbolt: Increase runtime PM reference count on DP tunnel discovery - iio: gyro: mpu3050: Fix error handling in mpu3050_trigger_handler - iio: adc: ad7949: fix wrong ADC result due to incorrect bit mask - iio: hid-sensor-prox: Fix scale not correct issue - iio: hid-sensor-temperature: Fix issues of timestamp channel - [powerpc*] PCI: rpadlpar: Fix potential drc_name corruption in store functions (CVE-2021-28972) - [x86] perf/x86/intel: Fix a crash caused by zero PEBS status (CVE-2021-28971) - [x86] perf/x86/intel: Fix unchecked MSR access error caused by VLBR_EVENT - [x86] ioapic: Ignore IRQ2 again - kernel, fs: Introduce and use set_restart_fn() and arch_set_restart_data() - [x86] Move TS_COMPAT back to asm/thread_info.h - [x86] Introduce TS_COMPAT_RESTART to fix get_nr_restart_syscall() - efivars: respect EFI_UNSUPPORTED return from firmware - ext4: fix error handling in ext4_end_enable_verity() - ext4: find old entry again if failed to rename whiteout - ext4: stop inode update before return - ext4: do not try to set xattr into ea_inode if value is empty - ext4: fix potential error in ext4_do_update_inode - ext4: fix rename whiteout with fast commit - static_call: Fix static_call_update() sanity check - efi: use 32-bit alignment for efi_guid_t literals - firmware/efi: Fix a use after bug in efi_mem_reserve_persistent - genirq: Disable interrupts for force threaded handlers - [x86] apic/of: Fix CPU devicetree-node lookups - cifs: Fix preauth hash corruption . [ Salvatore Bonaccorso ] * linux-image: Add Breaks: relation with old fwupdate versions (Closes: #985801) * [rt] Update to 5.10.25-rt35 * Refresh "Include package version along with kernel release in stack traces" * Refresh "firmware: Remove redundant log messages from drivers" * Refresh "MODSIGN: checking the blacklisted hash before loading a kernel module" * libsas: Avoid ABI change for removal of notifier indirection . [ Uwe Kleine-König ] * [arm64] Enable various configurations for i.MX8 (Closes: #985862) Checksums-Sha1: 39d2a889c91b09821b33b7906f7fe5a38ab9cba2 208226 linux_5.10.40-1~bpo10+1.dsc 04964546d528f077ea7af559bc1186e10ab5c2a4 1391728 linux_5.10.40-1~bpo10+1.debian.tar.xz 5710a79318acdd328a2ae33e701eaa511721c7cc 6256 linux_5.10.40-1~bpo10+1_source.buildinfo Checksums-Sha256: e5708fce4c34f8ff8b9821b68dc15243c921b71e08ef7afdf998d76179df8ce9 208226 linux_5.10.40-1~bpo10+1.dsc 6420fdbb06241b843d73ca66a02492b690516795e8f26bcac8543e046c7312b6 1391728 linux_5.10.40-1~bpo10+1.debian.tar.xz 9fd557bb0fdeb02e79db488c93509e85c72a127a61a818da4bf21669f0ca461c 6256 linux_5.10.40-1~bpo10+1_source.buildinfo Files: 0f86f1019c66269b803a36c1a56f4310 208226 kernel optional linux_5.10.40-1~bpo10+1.dsc ba322647d444c9a5a7ae0e60a64de313 1391728 kernel optional linux_5.10.40-1~bpo10+1.debian.tar.xz 73a7de84d36ce8c43b886c0d768e79cb 6256 kernel optional linux_5.10.40-1~bpo10+1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQKmBAEBCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAmC6DhNfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk ZWJpYW4ub3JnAAoJEAVMuPMTQ89EOKsP/0192D5Qsu4m+wjhLxxEASPTPusYZnT8 D43gvtlaRcjkv0GwBr4MYrgJic7dSX1llUbpd/rmlIsVBExtrzRZr+advAM/N+MP +RTNEHCQSkX4Gz9fW9fqWMiGllh+IDCtXGKzfwM+XvRyMgtsfC4OCRI9YVZP64MK IbESLxCupfCHCyy2aASQXPGDdcGHYx/DrjZ7MDpwoG5Xxs9ByWzBaG8vT/PJUuE2 8iUE2nnFSENyekOl6SxfkOkMWfZvGwV0T10joYsMu222M10b4H1vG31/RT7IYAGY vouErPZbfHu7lKbrPyWJqIEMxyJqmK263wnPJNpGpRyufdR7EuLjHTOFWuFA+QCK D8UO9o3FdVV2jTvlvVR19GFUHnf7Ja2Qmv/1u9lBVrq1oYDNDv3J/8lqZouYMV88 YmD6BQAHj1uo97qmJtJIo+Zp4h4s8G8N1jH2KciZH8oLWLOTUktXAG9FkbDZmrDx Vb0jKqXTFSTMdRjy4M8YwBYEr+ghhIZ6cQuqHuyKn3cl4YJOEHa/3vFFDIlELQjn 9I0GddFG/Nd/sqRWEYw1pVZ7sFrn23w6iK9m5UNs4s3aOP+TIsE3rJe5I3U+wGsO Sfa6Bi5f5oWa6/C5DOqTgybhO0QxLhd9/AqTgd0+uAWyh7u1K335g+pkHPosGfgs rmIxJNoygBq9 =Kntj -----END PGP SIGNATURE-----