-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 24 Jun 2021 14:11:37 +0200 Source: linux Architecture: source Version: 5.10.46-1 Distribution: unstable Urgency: medium Maintainer: Debian Kernel Team <debian-kernel@lists.debian.org> Changed-By: Salvatore Bonaccorso <carnil@debian.org> Closes: 982270 987361 987365 989451 990008 Changes: linux (5.10.46-1) unstable; urgency=medium . * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.41 - context_tracking: Move guest exit context tracking to separate helpers - context_tracking: Move guest exit vtime accounting to separate helpers - [x86] KVM: Defer vtime accounting 'til after IRQ handling https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.42 - ALSA: hda/realtek: the bass speaker can't output sound on Yoga 9i - ALSA: hda/realtek: Headphone volume is controlled by Front mixer - ALSA: hda/realtek: Chain in pop reduction fixup for ThinkStation P340 - ALSA: hda/realtek: fix mute/micmute LEDs for HP 855 G8 - ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP Zbook G8 - ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP Zbook Fury 15 G8 - ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP Zbook Fury 17 G8 - ALSA: usb-audio: scarlett2: Fix device hang with ehci-pci - ALSA: usb-audio: scarlett2: Improve driver startup messages - cifs: set server->cipher_type to AES-128-CCM for SMB3.0 - NFSv4: Fix a NULL pointer dereference in pnfs_mark_matching_lsegs_return() - iommu/vt-d: Fix sysfs leak in alloc_iommu() - proc: Check /proc/$pid/attr/ writes against file opener - net: hso: fix control-request directions - net/sched: fq_pie: re-factor fix for fq_pie endless loop - net/sched: fq_pie: fix OOB access in the traffic path - netfilter: nft_set_pipapo_avx2: Add irq_fpu_usable() check, fallback to non-AVX2 version - mac80211: assure all fragments are encrypted (CVE-2020-26147) - mac80211: prevent mixed key and fragment cache attacks (CVE-2020-24586, CVE-2020-24587) - mac80211: properly handle A-MSDUs that start with an RFC 1042 header - cfg80211: mitigate A-MSDU aggregation attacks (CVE-2020-24588) - mac80211: drop A-MSDUs on old ciphers (CVE-2020-24588) - mac80211: add fragment cache to sta_info - mac80211: check defrag PN against current frame - mac80211: prevent attacks on TKIP/WEP as well - mac80211: do not accept/forward invalid EAPOL frames (CVE-2020-26139) - mac80211: extend protection against mixed key and fragment cache attacks (CVE-2020-24586, CVE-2020-24587) - ath10k: add CCMP PN replay protection for fragmented frames for PCIe - ath10k: drop fragments with multicast DA for PCIe (CVE-2020-26145) - ath10k: drop fragments with multicast DA for SDIO (CVE-2020-26145) - ath10k: drop MPDU which has discard flag set by firmware for SDIO (CVE-2020-24588) - ath10k: Fix TKIP Michael MIC verification for PCIe (CVE-2020-26141) - ath10k: Validate first subframe of A-MSDU before processing the list - ath11k: Clear the fragment cache during key install (CVE-2020-24587) - dm snapshot: properly fix a crash when an origin has no snapshots - drm/amdgpu/vcn1: add cancel_delayed_work_sync before power gate - [amd64] drm/amdkfd: correct sienna_cichlid SDMA RLC register offset error - drm/amdgpu/vcn2.0: add cancel_delayed_work_sync before power gate - drm/amdgpu/vcn2.5: add cancel_delayed_work_sync before power gate - drm/amdgpu/jpeg2.0: add cancel_delayed_work_sync before power gate - Documentation: seccomp: Fix user notification documentation - seccomp: Refactor notification handler to prepare for new semantics - serial: core: fix suspicious security_locked_down() call - misc/uss720: fix memory leak in uss720_probe - [x86] thunderbolt: usb4: Fix NVM read buffer bounds and offset issue - [x86] thunderbolt: dma_port: Fix NVM read buffer bounds and offset issue - [x86] KVM: Fix vCPU preempted state from guest's point of view - [arm64] KVM: Prevent mixed-width VM creation - [x86] mei: request autosuspend after sending rx flow control - iio: gyro: fxas21002c: balance runtime power in error path - iio: dac: ad5770r: Put fwnode in error case during ->probe() - iio: adc: ad7768-1: Fix too small buffer passed to iio_push_to_buffers_with_timestamp() - iio: adc: ad7124: Fix missbalanced regulator enable / disable on error. - iio: adc: ad7124: Fix potential overflow due to non sequential channel numbers - iio: adc: ad7923: Fix undersized rx buffer. - iio: adc: ad7793: Add missing error code in ad7793_setup() - iio: adc: ad7192: Avoid disabling a clock that was never enabled. - iio: adc: ad7192: handle regulator voltage error first - serial: 8250: Add UART_BUG_TXRACE workaround for Aspeed VUART - serial: 8250_dw: Add device HID for new AMD UART controller - serial: 8250_pci: Add support for new HPE serial device - serial: 8250_pci: handle FL_NOIRQ board flag - USB: trancevibrator: fix control-request direction - Revert "irqbypass: do not start cons/prod when failed connect" - USB: usbfs: Don't WARN about excessively large memory allocations - drivers: base: Fix device link removal - [arm64,armhf] serial: tegra: Fix a mask operation that is always true - serial: rp2: use 'request_firmware' instead of 'request_firmware_nowait' - USB: serial: ti_usb_3410_5052: add startech.com device id - USB: serial: option: add Telit LE910-S1 compositions 0x7010, 0x7011 - USB: serial: ftdi_sio: add IDs for IDS GmbH Products - USB: serial: pl2303: add device id for ADLINK ND-6530 GC - [x86] thermal/drivers/intel: Initialize RW trip to THERMAL_TEMP_INVALID - [arm64,armhf] usb: dwc3: gadget: Properly track pending and queued SG - [arm64,x86] usb: typec: mux: Fix matching with typec_altmode_desc - net: usb: fix memory leak in smsc75xx_bind - Bluetooth: cmtp: fix file refcount when cmtp_attach_device fails - fs/nfs: Use fatal_signal_pending instead of signal_pending - NFS: fix an incorrect limit in filelayout_decode_layout() - NFS: Fix an Oopsable condition in __nfs_pageio_add_request() - NFS: Don't corrupt the value of pg_bytes_written in nfs_do_recoalesce() - NFSv4: Fix v4.0/v4.1 SEEK_DATA return -ENOTSUPP when set NFS_V4_2 config - [arm64] drm/meson: fix shutdown crash when component not probed - net/mlx5e: reset XPS on error flow if netdev isn't registered yet - net/mlx5e: Fix multipath lag activation - net/mlx5e: Fix error path of updating netdev queues - {net,vdpa}/mlx5: Configure interface MAC into mpfs L2 table - net/mlx5e: Fix nullptr in add_vlan_push_action() - net/mlx5: Set reformat action when needed for termination rules - net/mlx5e: Fix null deref accessing lag dev - net/mlx4: Fix EEPROM dump support - net/mlx5: Set term table as an unmanaged flow table - SUNRPC in case of backlog, hand free slots directly to waiting task - Revert "net:tipc: Fix a double free in tipc_sk_mcast_rcv" - tipc: wait and exit until all work queues are done - tipc: skb_linearize the head skb when reassembling msgs - [arm64] spi: spi-fsl-dspi: Fix a resource leak in an error handling path - netfilter: flowtable: Remove redundant hw refresh bit - [arm64,armhf] net: dsa: fix a crash if ->get_sset_count() fails - [armhf] i2c: s3c2410: fix possible NULL pointer deref on read message after write - [x86] i2c: i801: Don't generate an interrupt on bus reset - afs: Fix the nlink handling of dir-over-dir rename - nvmet-tcp: fix inline data size comparison in nvmet_tcp_queue_response - [x86] platform/x86: hp_accel: Avoid invoking _INI to speed up resume - [arm64] Revert "crypto: cavium/nitrox - add an error message to explain the failure of pci_request_mem_regions" - Revert "media: usb: gspca: add a missed check for goto_low_power" - [i386] Revert "ALSA: sb: fix a missing check of snd_ctl_add" - Revert "net: fujitsu: fix a potential NULL pointer dereference" - net: fujitsu: fix potential null-ptr-deref - Revert "net/smc: fix a NULL pointer dereference" - net/smc: properly handle workqueue allocation failure - [x86] Revert "char: hpet: fix a missing check of ioremap" - [x86] char: hpet: add checks after calling ioremap - [i386] Revert "ALSA: gus: add a check of the status of snd_ctl_add" - Revert "isdn: mISDNinfineon: fix potential NULL pointer dereference" - isdn: mISDNinfineon: check/cleanup ioremap failure correctly in setup_io - Revert "ath6kl: return error code in ath6kl_wmi_set_roam_lrssi_cmd()" - ath6kl: return error code in ath6kl_wmi_set_roam_lrssi_cmd() - Revert "isdn: mISDN: Fix potential NULL pointer dereference of kzalloc" - isdn: mISDN: correctly handle ph_info allocation failure in hfcsusb_ph_info - [arm64] Revert "dmaengine: qcom_hidma: Check for driver register failure" - [arm64] dmaengine: qcom_hidma: comment platform_driver_register call - Revert "libertas: add checks for the return value of sysfs_create_group" - libertas: register sysfs groups properly - Revert "media: dvb: Add check on sp8870_readreg" - media: dvb: Add check on sp8870_readreg return - Revert "media: gspca: mt9m111: Check write_bridge for timeout" - media: gspca: mt9m111: Check write_bridge for timeout - Revert "media: gspca: Check the return value of write_bridge for timeout" - media: gspca: properly check for errors in po1030_probe() - Revert "net: liquidio: fix a NULL pointer dereference" - net: liquidio: Add missing null pointer checks - Revert "brcmfmac: add a check for the status of usb_register" - brcmfmac: properly check for bus register errors - btrfs: return whole extents in fiemap - [powerpc,x86] scsi: BusLogic: Fix 64-bit system enumeration error for Buslogic - scsi: pm80xx: Fix drives missing during rmmod/insmod loop - btrfs: release path before starting transaction when cloning inline extent - btrfs: do not BUG_ON in link_to_fixup_dir - [x86] platform/x86: hp-wireless: add AMD's hardware id to the supported list - SMB3: incorrect file id in requests compounded with open - drm/amd/amdgpu: fix refcount leak - drm/amdgpu: Fix a use-after-free - drm/amd/amdgpu: fix a potential deadlock in gpu reset - drm/amdgpu: stop touching sched.ready in the backend - block: fix a race between del_gendisk and BLKRRPART - linux/bits.h: fix compilation error with GENMASK - [arm64,armhf] net: dsa: fix error code getting shifted with 4 in dsa_slave_get_sset_count - net: stmmac: Fix MAC WoL not working if PHY does not support WoL - spi: Assume GPIO CS active high in ACPI case - net: really orphan skbs tied to closing sk - net: packetmmap: fix only tx timestamp on request - [arm64,armhf] net: fec: fix the potential memory leak in fec_enet_init() - [arm64] net: mdio: thunder: Fix a double free issue in the .remove function - [mips64el,mipsel] net: mdio: octeon: Fix some double free issues - cxgb4/ch_ktls: Clear resources when pf4 device is removed - openvswitch: meter: fix race when getting now_ms. - net: sched: fix packet stuck problem for lockless qdisc - net: sched: fix tx action rescheduling issue during deactivation - net: sched: fix tx action reschedule issue with stopped queue - net: hso: check for allocation failure in hso_create_bulk_serial_device() - net: bnx2: Fix error return code in bnx2_init_board() - bnxt_en: Include new P5 HV definition in VF check. - bnxt_en: Fix context memory setup for 64K page size. - mld: fix panic in mld_newpack() - net/smc: remove device from smcd_dev_list after failed device_add() - [amd64] gve: Check TX QPL was actually assigned - [amd64] gve: Update mgmt_msix_idx if num_ntfy changes - [amd64] gve: Add NULL pointer checks when freeing irqs. - [amd64] gve: Upgrade memory barrier in poll routine - [amd64] gve: Correct SKB queue index validation. - [arm64] net: hns3: fix incorrect resp_msg issue - [arm64] net: hns3: put off calling register_netdev() until client initialize complete - [amd64] iommu/vt-d: Use user privilege for RID2PASID translation - cxgb4: avoid accessing registers when clearing filters - bpf, offload: Reorder offload callback 'prepare' in verifier - bpf: Set mac_len in bpf_skb_change_head - ixgbe: fix large MTU request from VF - [arm64] ASoC: qcom: lpass-cpu: Use optional clk APIs - scsi: libsas: Use _safe() loop in sas_resume_port() - ipv6: record frag_max_size in atomic fragments in input path - ALSA: usb-audio: scarlett2: snd_scarlett_gen2_controls_create() can be static - sch_dsmark: fix a NULL deref in qdisc_reset() - net: zero-initialize tc skb extension on allocation - [arm64,armhf] net: mvpp2: add buffer header handling in RX - [x86] i915: fix build warning in intel_dp_get_link_status() - [arm64] net: hns3: check the return of skb_checksum_help() - bpftool: Add sock_release help info for cgroup attach/prog load command - SUNRPC: More fixes for backlog congestion - net: hso: bail out on interrupt URB allocation failure - neighbour: Prevent Race condition in neighbour subsytem - usb: core: reduce power-on-good delay time of root hub https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.43 - btrfs: tree-checker: do not error out if extent ref hash doesn't match - net: usb: cdc_ncm: don't spew notifications (Closes: #989451) - [x86] hwmon: (dell-smm-hwmon) Fix index values - netfilter: conntrack: unregister ipv4 sockopts on error unwind - efi/fdt: fix panic when no valid fdt found - efi: Allow EFI_MEMORY_XP and EFI_MEMORY_RO both to be cleared - efi/libstub: prevent read overflow in find_file_option() - [arm64,x86] efi: cper: fix snprintf() use in cper_dimm_err_location() - vfio/pci: Fix error return code in vfio_ecap_init() - ipvs: ignore IP_VS_SVC_F_HASHED flag when adding service - HID: logitech-hidpp: initialize level variable - HID: pidff: fix error return code in hid_pidff_init() - [arm64,x86] HID: i2c-hid: fix format string mismatch - devlink: Correct VIRTUAL port to not have phys_port attributes - net/sched: act_ct: Offload connections with commit action - net/sched: act_ct: Fix ct template allocation for zone 0 - nvme-rdma: fix in-casule data send for chained sgls - ACPICA: Clean up context mutex during object deletion - perf probe: Fix NULL pointer dereference in convert_variable_location() - net: sock: fix in-kernel mark setting - net/mlx5e: Fix incompatible casting - net/mlx5: Check firmware sync reset requested is set before trying to abort it - net/mlx5e: Check for needed capability for cvlan matching - net/mlx5: DR, Create multi-destination flow table with level less than 64 - nvmet: fix freeing unallocated p2pmem - netfilter: nft_ct: skip expectations for confirmed conntrack - netfilter: nfnetlink_cthelper: hit EBUSY on updates if size mismatches - bpf: Simplify cases in bpf_base_func_proto - bpf, lockdown, audit: Fix buggy SELinux lockdown permission checks - ieee802154: fix error return code in ieee802154_add_iface() - ieee802154: fix error return code in ieee802154_llsec_getparams() - igb: add correct exception tracing for XDP - ixgbevf: add correct exception tracing for XDP - cxgb4: fix regression with HASH tc prio value update - ipv6: Fix KASAN: slab-out-of-bounds Read in fib6_nh_flush_exceptions - ice: Fix allowing VF to request more/less queues via virtchnl - ice: Fix VFR issues for AVF drivers that expect ATQLEN cleared - ice: handle the VF VSI rebuild failure - ice: report supported and advertised autoneg using PHY capabilities - ice: Allow all LLDP packets from PF to Tx - cxgb4: avoid link re-train during TC-MQPRIO configuration - i40e: optimize for XDP_REDIRECT in xsk path - i40e: add correct exception tracing for XDP - ice: simplify ice_run_xdp - ice: optimize for XDP_REDIRECT in xsk path - ice: add correct exception tracing for XDP - ixgbe: optimize for XDP_REDIRECT in xsk path - ixgbe: add correct exception tracing for XDP - [arm64] optee: use export_uuid() to copy client UUID - [armhf] bus: ti-sysc: Fix am335x resume hang for usb otg module - [arm64] dts: freescale: sl28: var4: fix RGMII clock and voltage - [armhf] bus: ti-sysc: Fix flakey idling of uarts and stop using swsup_sidle_act - tipc: add extack messages for bearer/media failure - tipc: fix unique bearer names sanity check - [armhf] serial: stm32: fix threaded interrupt handling - io_uring: fix link timeout refs - io_uring: use better types for cflags - drm/amdgpu/vcn3: add cancel_delayed_work_sync before power gate - drm/amdgpu/jpeg2.5: add cancel_delayed_work_sync before power gate - drm/amdgpu/jpeg3: add cancel_delayed_work_sync before power gate - Bluetooth: fix the erroneous flush_work() order (CVE-2021-3564) - Bluetooth: use correct lock to prevent UAF of hdev object (CVE-2021-3573) - wireguard: do not use -O3 - wireguard: peer: allocate in kmem_cache - wireguard: use synchronize_net rather than synchronize_rcu - wireguard: allowedips: initialize list head in selftest - wireguard: allowedips: remove nodes in O(1) - wireguard: allowedips: allocate nodes in kmem_cache - wireguard: allowedips: free empty intermediate nodes when removing single node - [arm64,x86] HID: i2c-hid: Skip ELAN power-on command after reset - HID: magicmouse: fix NULL-deref on disconnect - HID: multitouch: require Finger field to mark Win8 reports as MT - gfs2: fix scheduling while atomic bug in glocks - ALSA: timer: Fix master timer notification - ALSA: hda: Fix for mute key LED for HP Pavilion 15-CK0xx - ALSA: hda: update the power_state during the direct-complete - ext4: fix memory leak in ext4_fill_super - ext4: fix bug on in ext4_es_cache_extent as ext4_split_extent_at failed - ext4: fix fast commit alignment issues - ext4: fix memory leak in ext4_mb_init_backend on error path. - ext4: fix accessing uninit percpu counter variable with fast_commit - [arm*] usb: dwc2: Fix build in periphal-only mode - pid: take a reference when initializing `cad_pid` - ocfs2: fix data corruption by fallocate - mm/page_alloc: fix counting of free pages after take off from buddy - [x86] cpufeatures: Force disable X86_FEATURE_ENQCMD and remove update_pasid() - nfc: fix NULL ptr dereference in llcp_sock_getname() after failed connect (CVE-2021-3587) - drm/amdgpu: Don't query CE and UE errors - drm/amdgpu: make sure we unpin the UVD BO - [x86] apic: Mark _all_ legacy interrupts when IO/APIC is missing - [powerpc] kprobes: Fix validation of prefixed instructions across page boundary - btrfs: mark ordered extent and inode with error if we fail to finish - btrfs: fix error handling in btrfs_del_csums - btrfs: return errors from btrfs_del_csums in cleanup_ref_head - btrfs: fixup error handling in fixup_inode_link_counts - btrfs: abort in rename_exchange if we fail to insert the second ref - btrfs: fix deadlock when cloning inline extents and low on available space - mm, hugetlb: fix simple resv_huge_pages underflow on UFFDIO_COPY - [arm64] drm/msm/dpu: always use mdp device to scale bandwidth - btrfs: fix unmountable seed device after fstrim - [x86] KVM: SVM: Truncate GPR value for DR and CR accesses in !64-bit mode - [arm64] KVM: Fix debug register indexing - [x86] kvm: Teardown PV features on boot CPU as well - [x86] kvm: Disable kvmclock on all CPUs on shutdown - [x86] kvm: Disable all PV features on crash - lib/lz4: explicitly support in-place decompression - netfilter: nf_tables: missing error reporting for not selected expressions - xen-netback: take a reference to the RX task thread (CVE-2021-28691) - neighbour: allow NUD_NOARP entries to be forced GCed https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.44 - proc: Track /proc/$pid/attr/ opener mm_struct - [amd64] ASoC: amd: fix for pcm_read() error - spi: Fix spi device unregister flow - bpf: Forbid trampoline attach for functions with variable arguments - net/nfc/rawsock.c: fix a permission check bug - [x86] ASoC: Intel: bytcr_rt5640: Add quirk for the Glavey TM800A550L tablet - [x86] ASoC: Intel: bytcr_rt5640: Add quirk for the Lenovo Miix 3-830 tablet - [arm64,armhf] usb: chipidea: udc: assign interrupt number to USB gadget structure - bonding: init notify_work earlier to avoid uninitialized use - netlink: disable IRQs for netlink_lock_table() - net: mdiobus: get rid of a BUG_ON() - cgroup: disable controllers at parse time - wq: handle VM suspension in stall detection - net/qla3xxx: fix schedule while atomic in ql_sem_spinlock - RDS tcp loopback connection can hang - net:sfc: fix non-freed irq in legacy irq mode - scsi: bnx2fc: Return failure if io_req is already in ABTS processing - [x86] scsi: vmw_pvscsi: Set correct residual data length - [arm64] scsi: hisi_sas: Drop free_irq() of devm_request_irq() allocated irq - scsi: target: qla2xxx: Wait for stop_phase1 at WWN removal - net: macb: ensure the device is available before accessing GEMGXL control registers - nvme-fabrics: decode host pathing error for connect - dm verity: fix require_signatures module_param permissions - bnx2x: Fix missing error code in bnx2x_iov_init_one() - nvmet: fix false keep-alive timeout when a controller is torn down - spi: Don't have controller clean up spi device before driver unbind - spi: Cleanup on failure of initial setup - [powerpc] i2c: mpc: Make use of i2c_recover_bus() - [powerpc] i2c: mpc: implement erratum A-004447 workaround - ALSA: seq: Fix race of snd_seq_timer_open() - ALSA: firewire-lib: fix the context to call snd_pcm_stop_xrun() - ALSA: hda/realtek: headphone and mic don't work on an Acer laptop - ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP Elite Dragonfly G2 - ALSA: hda/realtek: fix mute/micmute LEDs and speaker for HP EliteBook x360 1040 G8 - ALSA: hda/realtek: fix mute/micmute LEDs for HP EliteBook 840 Aero G8 - ALSA: hda/realtek: fix mute/micmute LEDs for HP ZBook Power G8 - [arm*] spi: bcm2835: Fix out-of-bounds access with more than 4 slaves - Revert "ACPI: sleep: Put the FACS table after using it" - drm: Fix use-after-free read in drm_getunique() - drm: Lock pointer access in drm_master_release() - [x86] perf/x86/intel/uncore: Fix M2M event umask for Ice Lake server - [x86] KVM: X86: MMU: Use the correct inherited permissions to get shadow page - kvm: avoid speculation-based attacks from out-of-range memslot accesses - [arm64,x86] staging: rtl8723bs: Fix uninitialized variables - async_xor: check src_offs is not NULL before updating it - btrfs: return value from btrfs_mark_extent_written() in case of error - btrfs: promote debugging asserts to full-fledged checks in validate_super - cgroup1: don't allow '\n' in renaming - ftrace: Do not blindly read the ip address in ftrace_bug() - USB: f_ncm: ncm_bitrate (speed) is unsigned - usb: f_ncm: only first packet of aggregate needs to start timer - usb: pd: Set PD_T_SINK_WAIT_CAP to 310ms - [arm64,armhf] usb: dwc3-meson-g12a: fix usb2 PHY glue init when phy0 is disabled - [arm64,armhf] usb: dwc3: meson-g12a: Disable the regulator in the error handling path of the probe - [arm64,armhf] usb: dwc3: gadget: Bail from dwc3_gadget_exit() if dwc->gadget is NULL - [arm64,armhf] usb: dwc3: ep0: fix NULL pointer exception - [arm64,armhf] usb: musb: fix MUSB_QUIRK_B_DISCONNECT_99 handling - usb: typec: ucsi: Clear PPM capability data in ucsi_init() error path - usb: gadget: f_fs: Ensure io_completion_wq is idle during unbind - USB: serial: ftdi_sio: add NovaTech OrionMX product ID - USB: serial: omninet: add device id for Zyxel Omni 56K Plus - USB: serial: quatech2: fix control-request directions - USB: serial: cp210x: fix alternate function for CP2102N QFN20 - usb: gadget: eem: fix wrong eem header operation - usb: fix various gadgets null ptr deref on 10gbps cabling. - usb: fix various gadget panics on 10gbps cabling - usb: typec: tcpm: cancel vdm and state machine hrtimer when unregister tcpm port - usb: typec: tcpm: cancel frs hrtimer when unregister tcpm port - regulator: core: resolve supply for boot-on/always-on regulators - [arm64] regulator: max77620: Use device_set_of_node_from_dev() - regulator: bd71828: Fix .n_voltages settings - [arm64,armhf] usb: dwc3: gadget: Disable gadget IRQ during pullup disable - usb: typec: mux: Fix copy-paste mistake in typec_mux_match - [arm64] drm/msm/a6xx: fix incorrectly set uavflagprd_inv field for A650 - [arm64] drm/msm/a6xx: update/fix CP_PROTECT initialization - [arm64] drm/msm/a6xx: avoid shadow NULL reference in failure path - RDMA/ipoib: Fix warning caused by destroying non-initial netns - RDMA/mlx4: Do not map the core_clock page to user space unless enabled - ASoC: core: Fix Null-point-dereference in fmt_single_name() - perf: Fix data race between pin_count increment/decrement - sched/fair: Keep load_avg and load_sum synced - sched/fair: Make sure to update tg contrib for blocked load - sched/fair: Fix util_est UTIL_AVG_UNCHANGED handling - [x86] nmi_watchdog: Fix old-style NMI watchdog regression on old Intel CPUs - [x86] KVM: x86: Ensure liveliness of nested VM-Enter fail tracepoint message - IB/mlx5: Fix initializing CQ fragments buffer - NFS: Fix a potential NULL dereference in nfs_get_client() - NFSv4: Fix deadlock between nfs4_evict_inode() and nfs4_opendata_get_inode() - kvm: fix previous commit for 32-bit builds - NFS: Fix use-after-free in nfs4_init_client() - NFSv4: Fix second deadlock in nfs4_evict_inode() - NFSv4: nfs4_proc_set_acl needs to restore NFS_CAP_UIDGID_NOMAP on error. - scsi: core: Fix error handling of scsi_host_alloc() - scsi: core: Fix failure handling of scsi_add_host_with_dma() - scsi: core: Put .shost_dev in failure path if host state changes to RUNNING - scsi: core: Only put parent device if host state differs from SHOST_CREATED - tracing: Correct the length check which causes memory corruption - proc: only require mm_struct for writing https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.45 - net: ieee802154: fix null deref in parse dev addr - HID: quirks: Set INCREMENT_USAGE_ON_DUPLICATE for Saitek X65 - HID: a4tech: use A4_2WHEEL_MOUSE_HACK_B8 for A4TECH NB-95 - HID: hid-input: add mapping for emoji picker key - HID: hid-sensor-hub: Return error for hid_set_field() failure - HID: quirks: Add quirk for Lenovo optical mouse - HID: multitouch: set Stylus suffix for Stylus-application devices, too - HID: Add BUS_VIRTUAL to hid_connect logging - HID: usbhid: fix info leak in hid_submit_ctrl - [arm64,armhf] drm/tegra: sor: Do not leak runtime PM reference - [arm64,armhf] gpu: host1x: Split up client initalization and registration - [arm64,armhf] drm/tegra: sor: Fully initialize SOR before registration - gfs2: Prevent direct-I/O write fallback errors from getting lost - gfs2: fix a deadlock on withdraw-during-mount - HID: gt683r: add missing MODULE_DEVICE_TABLE - gfs2: Fix use-after-free in gfs2_glock_shrink_scan - scsi: target: core: Fix warning on realtime kernels - ethernet: myri10ge: Fix missing error code in myri10ge_probe() - scsi: qedf: Do not put host in qedf_vport_create() unconditionally - Bluetooth: Add a new USB ID for RTL8822CE - scsi: scsi_devinfo: Add blacklist entry for HPE OPEN-V - net: ipconfig: Don't override command-line hostnames or domains - drm/amd/display: Allow bandwidth validation for 0 streams. - drm/amdgpu: refine amdgpu_fru_get_product_info - drm/amd/display: Fix potential memory leak in DMUB hw_init - drm/amd/amdgpu:save psp ring wptr to avoid attack - rtnetlink: Fix missing error code in rtnl_bridge_notify() - net: Return the correct errno code - fib: Return the correct errno code https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.46 - afs: Fix an IS_ERR() vs NULL check - mm/memory-failure: make sure wait for page writeback in memory_failure - [x86] kvm: LAPIC: Restore guard to prevent illegal APIC register access - fanotify: fix copy_event_to_user() fid error clean up - batman-adv: Avoid WARN_ON timing related checks - mac80211: fix skb length check in ieee80211_scan_rx() - net: ipv4: fix memory leak in netlbl_cipsov4_add_std - vrf: fix maximum MTU - net: rds: fix memory leak in rds_recvmsg - [arm64] net: dsa: felix: re-enable TX flow control in ocelot_port_flush() - netfilter: nft_fib_ipv6: skip ipv6 packets from any to link-local - ice: add ndo_bpf callback for safe mode netdev ops - ice: parameterize functions responsible for Tx ring management - udp: fix race between close() and udp_abort() - rtnetlink: Fix regression in bridge VLAN configuration - net/sched: act_ct: handle DNAT tuple collision - net/mlx5e: Fix page reclaim for dead peer hairpin - net/mlx5: Consider RoCE cap before init RDMA resources - net/mlx5: DR, Allow SW steering for sw_owner_v2 devices - net/mlx5: DR, Don't use SW steering when RoCE is not supported - net/mlx5e: Block offload of outer header csum for UDP tunnels - netfilter: synproxy: Fix out of bounds when parsing TCP options - sch_cake: Fix out of bounds when parsing TCP options and header - alx: Fix an error handling path in 'alx_probe()' - cxgb4: fix endianness when flashing boot image - cxgb4: fix sleep in atomic when flashing PHY firmware - cxgb4: halt chip before flashing PHY firmware image - net: make get_net_ns return error if NET_NS is disabled - ethtool: strset: fix message length calculation - qlcnic: Fix an error handling path in 'qlcnic_probe()' - netxen_nic: Fix an error handling path in 'netxen_nic_probe()' - cxgb4: fix wrong ethtool n-tuple rule lookup - ipv4: Fix device used for dst_alloc with local routes - net: qrtr: fix OOB Read in qrtr_endpoint_post - bpf: Fix leakage under speculation on mispredicted branches (CVE-2021-33624) - ptp: improve max_adj check against unreasonable values - net: cdc_ncm: switch to eth%d interface naming - net: usb: fix possible use-after-free in smsc75xx_bind - [arm64,armhf] net: fec_ptp: fix issue caused by refactor the fec_devtype - net: ipv4: fix memory leak in ip_mc_add1_src - net/af_unix: fix a data-race in unix_dgram_sendmsg / unix_release_sock - net/mlx5: E-Switch, Read PF mac address - net/mlx5: E-Switch, Allow setting GUID for host PF vport - net/mlx5: Reset mkey index on creation - be2net: Fix an error handling path in 'be_probe()' - net: hamradio: fix memory leak in mkiss_close - net: cdc_eem: fix tx fixup skb leak - cxgb4: fix wrong shift. - bnxt_en: Rediscover PHY capabilities after firmware reset - bnxt_en: Fix TQM fastpath ring backing store computation - bnxt_en: Call bnxt_ethtool_free() in bnxt_init_one() error path - icmp: don't send out ICMP messages with a source address of 0.0.0.0 - [x86] platform/x86: thinkpad_acpi: Add X1 Carbon Gen 9 second fan support - sched/pelt: Ensure that *_sum is always synced with *_avg - [armhf] spi: stm32-qspi: Always wait BUSY bit to be cleared in stm32_qspi_wait_cmd() - ASoC: rt5682: Fix the fast discharge for headset unplugging in soundwire mode - [arm64,armhf] drm/sun4i: dw-hdmi: Make HDMI PHY into a platform device - [arm64] ASoC: qcom: lpass-cpu: Fix pop noise during audio capture begin - radeon: use memcpy_to/fromio for UVD fw upload - mm: relocate 'write_protect_seq' in struct mm_struct - [arm64,armhf] irqchip/gic-v3: Workaround inconsistent PMR setting on NMI entry - bpf: Inherit expanded/patched seen count from old aux data (CVE-2021-33624) - bpf: Do not mark insn as seen under speculative path verification (CVE-2021-33624) - can: bcm: fix infoleak in struct bcm_msg_head (CVE-2021-34693) - can: bcm/raw/isotp: use per module netdevice notifier - can: j1939: fix Use-after-Free, hold skb ref while in use - can: mcba_usb: fix memory leak in mcba_usb - usb: core: hub: Disable autosuspend for Cypress CY7C65632 - [arm64,armhf] usb: chipidea: imx: Fix Battery Charger 1.2 CDP detection - tracing: Do not stop recording cmdlines when tracing is off - tracing: Do not stop recording comms if the trace file is being read - tracing: Do no increment trace_clock_global() by one - PCI: Mark TI C667X to avoid bus reset - PCI: Mark some NVIDIA GPUs to avoid bus reset - [arm64] PCI: aardvark: Fix kernel panic during PIO transfer - PCI: Add ACS quirk for Broadcom BCM57414 NIC - PCI: Work around Huawei Intelligent NIC VF FLR erratum - [x86] KVM: x86: Immediately reset the MMU context when the SMM flag is cleared - [x86] KVM: x86/mmu: Calculate and check "full" mmu_role for nested MMU - [x86] KVM: X86: Fix x86_emulator slab cache leak - [s390x] mcck: fix calculation of SIE critical section size - [s390x] ap: Fix hanging ioctl caused by wrong msg counter - [amd64] x86/mm: Avoid truncating memblocks for SGX memory - [x86] process: Check PF_KTHREAD and not current->mm for kernel threads - [x86] ioremap: Map EFI-reserved memory as encrypted for SEV - [x86] pkru: Write hardware init value to PKRU when xstate is init - [x86] fpu: Prevent state corruption in __fpu__restore_sig() - [x86] fpu: Invalidate FPU state after a failed XRSTOR from a user buffer - [x86] fpu: Reset state for all signal restore failures - crash_core, vmcoreinfo: append 'SECTION_SIZE_BITS' to vmcoreinfo - [arm64,armhf] dmaengine: pl330: fix wrong usage of spinlock flags in dma_cyclc - mac80211: Fix NULL ptr deref for injected rate info - cfg80211: avoid double free of PMSR request - drm/amdgpu/gfx10: enlarge CP_MEC_DOORBELL_RANGE_UPPER to cover full doorbell. - drm/amdgpu/gfx9: fix the doorbell missing when in CGPG issue. - net: ll_temac: Fix TX BD buffer overwrite - net: bridge: fix vlan tunnel dst null pointer dereference - net: bridge: fix vlan tunnel dst refcnt when egressing - mm/swap: fix pte_same_as_swp() not removing uffd-wp bit when compare - mm/slub: clarify verification reporting - mm/slub: fix redzoning for small allocations - mm/slub: actually fix freelist pointer vs redzoning - mm/slub.c: include swab.h - net: stmmac: disable clocks in stmmac_remove_config_dt() - [arm64,armhf] net: fec_ptp: add clock rate zero check - [arm64,armhf] usb: dwc3: debugfs: Add and remove endpoint dirs dynamically - [arm64,armhf] usb: dwc3: core: fix kernel panic when do reboot . [ Josua Mayer ] * [armhf] drivers/bluetooth: Enable BT_HCIUART as a module, with support for all features already enabled in the generic config. (Closes: #987361) * [armhf] enable i.MX6 MIPI-CSI video capture device. (Closes: #987365) - drivers/mux: Enable MUX_MMIO as a module. - drivers/media/platform: Enable VIDEO_MUX as a module. - drivers/staging/media/imx: Enable VIDEO_IMX_MEDIA and VIDEO_IMX_CSI as modules. . [ Uwe Kleine-König ] * [arm64] Update device tree for Kobol's helios64 from next . [ Salvatore Bonaccorso ] * [rt] Refresh "net/Qdisc: use a seqlock instead seqcount" * Ignore some ABI changes that should not affect OOT modules * Bump ABI to 8 * [rt] Refresh "tracing: Merge irqflags + preempt counter" * can: bcm: delay release of struct bcm_op after synchronize_rcu() (CVE-2021-3609) * Revert "PCI: PM: Do not read power state in pci_enable_device_flags()" (Closes: #990008) . [ Vagrant Cascadian ] * [arm64] Add pwm-rockchip to fb-modules udeb. * [arm64] Add fusb302, tcpm and typec to usb-modules udeb. * [armhf] Add gpio-mxc to kernel-image udeb. Thanks to Rick Thomas. (Closes: #982270) Checksums-Sha1: 2227aff8de5c4ae5b73feb27f3ea8667609cef40 195000 linux_5.10.46-1.dsc 28d0ba1a26c98af40cd304a2dbbb9e7c03f2d172 121572512 linux_5.10.46.orig.tar.xz d798e9f96a5e8b825ba50e280736d5d0e1fe61d3 1399644 linux_5.10.46-1.debian.tar.xz b638745054c030cd7d25ff17c550989e95a4e36c 6224 linux_5.10.46-1_source.buildinfo Checksums-Sha256: 85495415070e7a7446b30170fde71920555b60ed136cd0349581b7a29820d349 195000 linux_5.10.46-1.dsc bcd8edcbc6ed21d93dc138a754b1ac08329452c2ea509ae2a4071cd521da38a3 121572512 linux_5.10.46.orig.tar.xz 7af4de8d3f250fd822ecf820ffa46650520b6953264b97db242a301a0991e983 1399644 linux_5.10.46-1.debian.tar.xz e270a4870488f9756605b00e6cf584cc4acf957c37193b09ab8171774174882a 6224 linux_5.10.46-1_source.buildinfo Files: 9e6f0b1c9b0b775bdd7d03af61822161 195000 kernel optional linux_5.10.46-1.dsc 20074caf4bbf7773920f6e5f08beb771 121572512 kernel optional linux_5.10.46.orig.tar.xz d99ef592e7e874a6d3c6a12168f4b6ce 1399644 kernel optional linux_5.10.46-1.debian.tar.xz 3eac5007ad9818339a6e697b13495c98 6224 kernel optional linux_5.10.46-1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQKmBAEBCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAmDUfPJfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk ZWJpYW4ub3JnAAoJEAVMuPMTQ89E6vUP/RDvlFXdCT6mURkuIzzA+vLLsPDTGOWV hqcXJnNQ1fy4OcpaYc7cRUVPnr7iSSR+xpp3pYkT8pJMX0W1ul2aZLEJNPjprfQO os1/vy9lzN9M1tJWFTRCS3z1RtrG/nme8VTIGlb/te6WKnjP3IbvileOVD77JJ6H PosWkhM5o8Jqc/nNchq+un55LpzjvXQmoTAUKUcTE8FaGkt84cuVv5xRIQjtETY6 DSfaHoFv9iVh8DpSpo0rIhQM+AZRAz0Dd2OpHLVAc9p6SPL8/f8dPS02hEOfPYoR hEMO6Fr+sGhsvTKegwh00gIp2vHEnDgF66Pjdwcw+Y9HDZnADWpPWyEg35L7AILX tQ9EFr0lFTkXy6eSr6u1bpBT2r4vNcBpYOsEgwWQseeg3PmQiZnbyRY67o3G97IZ mHBSFT7vaCs6o0eiUKmWeVZJscWwEOdbqLoBGu8Q1vlVKgvDx+z3P1CovqsfCEQE wPjhXHP5wIpriql/vlPZS+9ipGXZ5rt+03ilsQBc3GThG6W7Mubxn/S5AR87z9/w KZz5ld9UyT8oNmOOwwZ+02glIoqKZnEeGkBsJOVNWQT5ZxnuVr8gStxO5OS8RsNC VPhj3UamlOHbK5GYMe8uZHzLM67mLhTmhWohEDXI4+pMebEGc1IVOA5IH7TwYDYc AbpQlM77jfOe =83NZ -----END PGP SIGNATURE-----
