-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 02 Jan 2022 04:45:50 +0100 Source: linux Architecture: source Version: 5.15.5-2~bpo11+1 Distribution: bullseye-backports Urgency: medium Maintainer: Debian Kernel Team <debian-kernel@lists.debian.org> Changed-By: Ben Hutchings <benh@debian.org> Closes: 804857 911815 919807 971892 977575 988044 989285 991921 992184 993453 993902 994050 994535 995276 995407 995466 995927 996175 996672 996951 996962 999638 999748 1000504 1001128 Changes: linux (5.15.5-2~bpo11+1) bullseye-backports; urgency=medium . * Rebuild for bullseye-backports: - Change ABI number to 0.bpo.2 - Revert "Compile with gcc-11 on all architectures" - perf: Disable use of libopencsd, as bullseye's version is too old . linux (5.15.5-2) unstable; urgency=medium . * atlantic: Fix OOB read and write in hw_atl_utils_fw_rpc_wait (CVE-2021-43975) * fget: check that the fd still exists after getting a ref to it (CVE-2021-4083) * USB: gadget: detect too-big endpoint 0 requests (CVE-2021-39685) * USB: gadget: zero allocate endpoint 0 buffers (CVE-2021-39685) * [x86] Revert "drm/i915: Implement Wa_1508744258" (Closes: #1001128) * nfsd: fix use-after-free due to delegation race (Closes: #988044) * bpf: Fix kernel address leakage in atomic fetch * bpf: Fix signed bounds propagation after mov32 * bpf: Make 32->64 bounds propagation slightly more robust * bpf: Fix kernel address leakage in atomic cmpxchg's r0 aux reg . linux (5.15.5-1) unstable; urgency=medium . * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.4 - string: uninline memcpy_and_pad - [x86] KVM: Fix steal time asm constraints - btrfs: introduce btrfs_is_data_reloc_root - btrfs: zoned: add a dedicated data relocation block group - btrfs: zoned: only allow one process to add pages to a relocation inode - btrfs: zoned: use regular writes for relocation - btrfs: check for relocation inodes on zoned btrfs in should_nocow - btrfs: zoned: allow preallocation for relocation inodes - block: Add a helper to validate the block size - loop: Use blk_validate_block_size() to validate block size - Bluetooth: btusb: Add support for TP-Link UB500 Adapter - PCI/MSI: Deal with devices lying about their MSI mask capability - PCI: Add MSI masking quirk for Nvidia ION AHCI - perf/core: Avoid put_page() when GUP fails - thermal: Fix NULL pointer dereferences in of_thermal_ functions - Revert "ACPI: scan: Release PM resources blocked by unused objects" https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.5 - [arm64] zynqmp: Do not duplicate flash partition label property - [arm64] zynqmp: Fix serial compatible string - [arm64,armhf] clk: sunxi-ng: Unregister clocks/resets when unbinding - scsi: pm80xx: Fix memory leak during rmmod - scsi: lpfc: Fix list_add() corruption in lpfc_drain_txq() - [armhf] bus: ti-sysc: Add quirk handling for reinit on context lost - [armhf] bus: ti-sysc: Use context lost quirk for otg - [armhf] usb: musb: tusb6010: check return value after calling platform_get_resource() - [x86] usb: typec: tipd: Remove WARN_ON in tps6598x_block_read - staging: rtl8723bs: remove possible deadlock when disconnect (v2) - staging: rtl8723bs: remove a second possible deadlock - staging: rtl8723bs: remove a third possible deadlock - [arm64] dts: ls1012a: Add serial alias for ls1012a-rdb - RDMA/rxe: Separate HW and SW l/rkeys - [x86] ASoC: SOF: Intel: hda-dai: fix potential locking issue - scsi: core: Fix scsi_mode_sense() buffer length handling - ALSA: usb-audio: disable implicit feedback sync for Behringer UFX1204 and UFX1604 - [armhf] clk: imx: imx6ul: Move csi_sel mux to correct base register - ASoC: es8316: Use IRQF_NO_AUTOEN when requesting the IRQ - [x86] ASoC: rt5651: Use IRQF_NO_AUTOEN when requesting the IRQ - [x86] ASoC: nau8824: Add DMI quirk mechanism for active-high jack-detect - scsi: advansys: Fix kernel pointer leak - scsi: smartpqi: Add controller handshake during kdump - [arm64] dts: imx8mm-kontron: Fix reset delays for ethernet PHY - ALSA: intel-dsp-config: add quirk for APL/GLK/TGL devices based on ES8336 codec - [x86] ASoC: Intel: soc-acpi: add missing quirk for TGL SDCA single amp - [x86] ASoC: Intel: sof_sdw: add missing quirk for Dell SKU 0A45 - firmware_loader: fix pre-allocated buf built-in firmware use - HID: multitouch: disable sticky fingers for UPERFECT Y - ALSA: usb-audio: Add support for the Pioneer DJM 750MK2 Mixer/Soundcard - ASoC: rt5682: fix a little pop while playback - [amd64] iommu/vt-d: Do not falsely log intel_iommu is unsupported kernel option - tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc - scsi: scsi_debug: Fix out-of-bound read in resp_readcap16() - scsi: scsi_debug: Fix out-of-bound read in resp_report_tgtpgs() - scsi: target: Fix ordered tag handling - scsi: target: Fix alua_tg_pt_gps_count tracking - iio: imu: st_lsm6dsx: Avoid potential array overflow in st_lsm6dsx_set_odr() - RDMA/core: Use kvzalloc when allocating the struct ib_port - scsi: lpfc: Fix use-after-free in lpfc_unreg_rpi() routine - scsi: lpfc: Fix link down processing to address NULL pointer dereference - scsi: lpfc: Allow fabric node recovery if recovery is in progress before devloss - [i386] ALSA: gus: fix null pointer dereference on pointer block - ALSA: usb-audio: fix null pointer dereference on pointer cs_desc - f2fs: fix up f2fs_lookup tracepoints - f2fs: fix to use WHINT_MODE - f2fs: fix wrong condition to trigger background checkpoint correctly - f2fs: compress: disallow disabling compress on non-empty compressed file - f2fs: fix incorrect return value in f2fs_sanity_check_ckpt() - [armhf] clk/ast2600: Fix soc revision for AHB - [arm64] clk: qcom: gcc-msm8996: Drop (again) gcc_aggre1_pnoc_ahb_clk - [arm64] KVM: arm64: Fix host stage-2 finalization - sched/core: Mitigate race cpus_share_cache()/update_top_cache_domain() - sched/fair: Prevent dead task groups from regaining cfs_rq's - [x86] perf/x86/vlbr: Add c->flags to vlbr event constraints - blkcg: Remove extra blkcg_bio_issue_init - drm/nouveau: hdmigv100.c: fix corrupted HDMI Vendor InfoFrame - bpf: Fix inner map state pruning regression. - tcp: Fix uninitialized access in skb frags array for Rx 0cp. - tracing: Add length protection to histogram string copies - nl80211: fix radio statistics in survey dump - mac80211: fix monitor_sdata RCU/locking assertions - net: bnx2x: fix variable dereferenced before check - bnxt_en: reject indirect blk offload when hw-tc-offload is off - tipc: only accept encrypted MSG_CRYPTO msgs - sock: fix /proc/net/sockstat underflow in sk_clone_lock() - net/smc: Make sure the link_id is unique - NFSD: Fix exposure in nfsd4_decode_bitmap() - iavf: Fix return of set the new channel count - iavf: check for null in iavf_fix_features - iavf: free q_vectors before queues in iavf_disable_vf - iavf: don't clear a lock we don't hold - iavf: Fix failure to exit out from last all-multicast mode - iavf: prevent accidental free of filter structure - iavf: validate pointers - iavf: Fix for the false positive ASQ/ARQ errors while issuing VF reset - iavf: Fix for setting queues to 0 - iavf: Restore VLAN filters after link down - bpf: Fix toctou on read-only map's constant scalar tracking (CVE-2021-4001) - [x86] platform/x86: hp_accel: Fix an error handling path in 'lis3lv02d_probe()' - udp: Validate checksum in udp_read_sock() - btrfs: make 1-bit bit-fields of scrub_page unsigned int - RDMA/core: Set send and receive CQ before forwarding to the driver - net/mlx5e: Wait for concurrent flow deletion during neigh/fib events - net/mlx5: E-Switch, Fix resetting of encap mode when entering switchdev - net/mlx5e: nullify cq->dbg pointer in mlx5_debug_cq_remove() - net/mlx5: Update error handler for UCTX and UMEM - net/mlx5: E-Switch, rebuild lag only when needed - net/mlx5e: CT, Fix multiple allocations and memleak of mod acts - net/mlx5: Lag, update tracker when state change event received - net/mlx5: E-Switch, return error if encap isn't supported - scsi: ufs: core: Improve SCSI abort handling - scsi: core: sysfs: Fix hang when device state is set via sysfs - scsi: ufs: core: Fix task management completion timeout race - scsi: ufs: core: Fix another task management completion race - [arm*] net: mvmdio: fix compilation warning - net: sched: act_mirred: drop dst for the direction from egress to ingress - [arm64] net: dpaa2-eth: fix use-after-free in dpaa2_eth_remove - net: virtio_net_hdr_to_skb: count transport header in UFO - i40e: Fix correct max_pkt_size on VF RX queue - i40e: Fix NULL ptr dereference on VSI filter sync - i40e: Fix changing previously set num_queue_pairs for PFs - i40e: Fix ping is lost after configuring ADq on VF - RDMA/mlx4: Do not fail the registration on port stats - i40e: Fix warning message and call stack during rmmod i40e driver - i40e: Fix creation of first queue by omitting it if is not power of two - i40e: Fix display error code in dmesg - e100: fix device suspend/resume (Closes: #995927) - [powerpc*] KVM: PPC: Book3S HV: Use GLOBAL_TOC for kvmppc_h_set_dabr/xdabr() - [powerpc*] pseries: rename numa_dist_table to form2_distances - [powerpc*] pseries: Fix numa FORM2 parsing fallback code - [x86] perf/x86/intel/uncore: Fix filter_tid mask for CHA events on Skylake Server - [x86] perf/x86/intel/uncore: Fix IIO event constraints for Skylake Server - [x86] perf/x86/intel/uncore: Fix IIO event constraints for Snowridge - [s390x] kexec: fix return code handling - blk-cgroup: fix missing put device in error path from blkg_conf_pref() - tun: fix bonding active backup with arp monitoring - tipc: check for null after calling kmemdup - ipc: WARN if trying to remove ipc object which is absent - shm: extend forced shm destroy to support objects from several IPC nses - hugetlb, userfaultfd: fix reservation restore on userfaultfd error - [x86] boot: Pull up cmdline preparation and early param parsing - [x86] hyperv: Fix NULL deref in set_hv_tscchange_cb() if Hyper-V setup fails - [x86] KVM: x86: Assume a 64-bit hypercall for guests with protected state - [x86] KVM: x86: Fix uninitialized eoi_exit_bitmap usage in vcpu_load_eoi_exitmap() - [x86] KVM: x86/mmu: include EFER.LMA in extended mmu role - [x86] KVM: x86/xen: Fix get_attr of KVM_XEN_ATTR_TYPE_SHARED_INFO - [powerpc*] xive: Change IRQ domain to a tree domain - [x86] Revert "drm/i915/tgl/dsi: Gate the ddi clocks after pll mapping" - ata: libata: improve ata_read_log_page() error message - ata: libata: add missing ata_identify_page_supported() calls - scsi: qla2xxx: Fix mailbox direction flags in qla2xxx_get_adapter_id() - [s390x] setup: avoid reserving memory above identity mapping - [s390x] boot: simplify and fix kernel memory layout setup - [s390x] vdso: filter out -mstack-guard and -mstack-size - [s390x] dump: fix copying to user-space of swapped kdump oldmem - block: Check ADMIN before NICE for IOPRIO_CLASS_RT - fbdev: Prevent probing generic drivers if a FB is already registered - [x86] KVM: SEV: Disallow COPY_ENC_CONTEXT_FROM if target has created vCPUs - [x86] KVM: nVMX: don't use vcpu->arch.efer when checking host state on nested state load - drm/cma-helper: Release non-coherent memory with dma_free_noncoherent() - printk: restore flushing of NMI buffers on remote CPUs after NMI backtraces - udf: Fix crash after seekdir - spi: fix use-after-free of the add_lock mutex - [armhf] net: stmmac: socfpga: add runtime suspend/resume callback for stratix10 platform - [x86] Drivers: hv: balloon: Use VMBUS_RING_SIZE() wrapper for dm_ring_size - btrfs: fix memory ordering between normal and ordered work functions - fs: handle circular mappings correctly - net: stmmac: Fix signed/unsigned wreckage - cfg80211: call cfg80211_stop_ap when switch from P2P_GO type - mac80211: drop check for DONT_REORDER in __ieee80211_select_queue - drm/amd/display: Update swizzle mode enums - drm/amd/display: Limit max DSC target bpp for specific monitors - [x86] drm/i915/guc: Fix outstanding G2H accounting - [x86] drm/i915/guc: Don't enable scheduling on a banned context, guc_id invalid, not registered - [x86] drm/i915/guc: Workaround reset G2H is received after schedule done G2H - [x86] drm/i915/guc: Don't drop ce->guc_active.lock when unwinding context - [x86] drm/i915/guc: Unwind context requests in reverse order - drm/udl: fix control-message timeout - drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap - drm/nouveau: Add a dedicated mutex for the clients list (CVE-2020-27820) - drm/nouveau: use drm_dev_unplug() during device removal (CVE-2020-27820) - drm/nouveau: clean up all clients on device removal (CVE-2020-27820) - [x86] drm/i915/dp: Ensure sink rate values are always valid - [x86] drm/i915/dp: Ensure max link params are always valid - [x86] drm/i915: Fix type1 DVI DP dual mode adapter heuristic for modern platforms - drm/amdgpu: fix set scaling mode Full/Full aspect/Center not works on vga and dvi connectors - drm/amd/pm: avoid duplicate powergate/ungate setting - signal: Implement force_fatal_sig - exit/syscall_user_dispatch: Send ordinary signals on failure - [powerpc*] signal/powerpc: On swapcontext failure force SIGSEGV - [s390x] signal/s390: Use force_sigsegv in default_trap_handler - [x86] signal/x86: In emulate_vsyscall force a signal instead of calling do_exit - signal: Replace force_sigsegv(SIGSEGV) with force_fatal_sig(SIGSEGV) - signal: Don't always set SA_IMMUTABLE for forced signals - signal: Replace force_fatal_sig with force_exit_sig when in doubt - hugetlbfs: flush TLBs correctly after huge_pmd_unshare (CVE-2021-4002) - RDMA/netlink: Add __maybe_unused to static inline in C file - bpf: Forbid bpf_ktime_get_coarse_ns and bpf_timer_* in tracing progs - selinux: fix NULL-pointer dereference when hashtab allocation fails - ASoC: DAPM: Cover regression by kctl change notification fix - ice: Fix VF true promiscuous mode - ice: Delete always true check of PF pointer - fs: export an inode_update_time helper - btrfs: update device path inode time instead of bd_inode - net: add and use skb_unclone_keeptruesize() helper - [x86] ALSA: hda: hdac_ext_stream: fix potential locking issues - ALSA: hda: hdac_stream: fix potential locking issue in snd_hdac_stream_assign() . [ Salvatore Bonaccorso ] * [rt] Update to 5.15.3-rt21 * Drop "arm64: dts: rockchip: disable USB type-c DisplayPort" * [rt] Refresh "printk: move console printing to kthreads" * [rt] Refresh "printk: remove deferred printing" * Bump ABI to 2 * fuse: release pipe buf after last use (Closes: #1000504) . linux (5.15.3-1) unstable; urgency=medium . * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.3 - Bluetooth: sco: Fix lock_sock() blockage by memcpy_from_msg() (CVE-2021-3640) . [ Vincent Blut ] * [arm64] sound/soc/meson: Enable SND_MESON_AXG_SOUND_CARD as module (Closes: #999638) * [arm64,armhf] sound/soc/meson: Enable SND_MESON_GX_SOUND_CARD as module * drivers/bluetooth: Enable BT_HCIBTUSB_MTK (Closes: #999748) . [ Salvatore Bonaccorso ] * mac80211: fix radiotap header generation * [rt] Update to 5.15.2-rt20 * [rt] Refresh "printk: introduce kernel sync mode" * [rt] Refresh "printk: move console printing to kthreads" * [rt] Drop "rcutorture: Avoid problematic critical section nesting on PREEMPT_RT" * [rt] Drop "lockdep: Let lock_is_held_type() detect recursive read as read" * [rt] Refresh "x86/softirq: Disable softirq stacks on PREEMPT_RT" * [rt] Refresh "POWERPC: Allow to enable RT" * Set ABI to 1 . linux (5.15.2-1~exp1) experimental; urgency=medium . * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.2 . [ Salvatore Bonaccorso ] * [rt] Update to 5.15-rt17 and reenable (Closes: #995466) * perf srcline: Use long-running addr2line per DSO (Closes: #911815) * Refresh "Export symbols needed by Android drivers" * [rt] Update to 5.15.2-rt19 * Input: elantench - fix misreporting trackpoint coordinates (Closes: #989285) * kernel/time: Enable NO_HZ_FULL (Closes: #804857) * io-wq: serialize hash clear with wakeup (Closes: #996951) . [ Vincent Blut ] * [x86] drivers/ptp: Enable PTP_1588_CLOCK_VMW as module * drivers/ptp: Enable PTP_1588_CLOCK_DTE, PTP_1588_CLOCK_IDT82P33, PTP_1588_CLOCK_IDTCM, PTP_1588_CLOCK_OCP as modules * drivers/ptp, net: Enable DP83640_PHY, PTP_1588_CLOCK_INES, NET_PTP_CLASSIFY, NETWORK_PHY_TIMESTAMPING . linux (5.15.1-1~exp1) experimental; urgency=medium . * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.1 . [ Salvatore Bonaccorso ] * [arm*] drop cc-option fallbacks for architecture selection * net/tls: Enable TLS as module (Closes: #919807) . [ Diederik de Haas ] * [x86] drivers/hwmon: Enable SENSORS_CORSAIR_PSU as module * [arm64] drivers/hwmon: Enable SENSORS_GPIO_FAN as module . linux (5.15-1~exp1) experimental; urgency=medium . * New upstream release candidate . [ Diederik de Haas ] * [arm*] drivers/led/trigger: Make LEDS_TRIGGER_HEARTBEAT builtin (Closes: #992184) * [arm64] sound/soc/codecs: Enable SND_SOC_SPDIF as module * [armel/rpi] Enable RPi's clock framework and CPU Freq scaling * [armel/rpi] Change default governor to 'ondemand' for RPi 0/0w/1 (Closes: #991921) * [arm64] sound/soc/rockchip: Enable SND_SOC_ROCKCHIP_PDM as module * [armel] Make explicit that -rpi kernel variant is for RPi 0/0w/1, not the others . [ Nathan Schulte ] * [arm64] drivers/staging/media/hantro: Enable VIDEO_HANTRO as module * [arm64] drivers/staging/media/rkvdec: Enable VIDEO_ROCKCHIP_VDEC as module (Closes: #993902) . [ Vincent Blut ] * [arm] arch/arm/crypto: Enable CRYPTO_BLAKE2S_ARM, CRYPTO_SHA256_ARM and CRYPTO_SHA512_ARM as modules * [armhf] arch/arm/crypto: Enable most NEON based implementation of cryptographic algorithms as modules * [arm] Move CRYPTO_NHPOLY1305_NEON in armhf config file * [arm64] drivers/gpu/drm/vmwgfx: Enable DRM_VMWGFX as module (Closes: #995276) * [armhf] sound/soc/sunxi: Enable SND_SUN4I_I2S as module (Closes: #971892) * [armhf] drivers/gpu/drm/bridge/synopsys: Enable DRM_DW_HDMI_I2S_AUDIO as module * drivers/usb/serial: Enable USB_SERIAL_XR as module (Closes: #996962) * drivers/bus/mhi: Enable MHI_BUS, MHI_BUS_PCI_GENERIC as modules (Closes: #995407) * drivers/net: Enable MHI_NET as module * drivers/net/wwan: Enable WWAN, MHI_WWAN_CTRL as modules . [ YunQiang Su ] * [mipsel,mips64el/loongson-3] linux-image: Recommend pmon-update . [ Salvatore Bonaccorso ] * Compile with gcc-11 on all architectures * [arm64] drivers/net: Enable VMXNET3 as module . [ Uwe Kleine-König ] * [arm64] Enable various symbols for the librem5 devkit and iMX8MN Variscite Symphony (Patches by Guido Günther and Ariel D'Alessandro) * [armhf,arm64] Cherrypick fix for snvs_pwrkey to prevent a machine hang. . [ Heiko Thiery ] * [arm64] drivers/mtd/spi-nor: enable MTD_SPI_NOR as module * [arm64] drivers/net/can/spi: enable CAN_MCP251X as module * [arm64] drivers/net/phy: enable MICROSEMI_PHY as module * [arm64] drivers/net/usb: enable USB_NET_SMSC95XX as module . [ Ryutaroh Matsumoto ] * [arm64] Enable TOUCHSCREEN_RASPBERRYPI_FW and REGULATOR_RASPBERRYPI_TOUCHSCREEN_ATTINY (Closes: #977575) . [ Ariel D'Alessandro ] * [arm64] drivers/regulator: Enable REGULATOR_BD718XX as module . [ Lubomir Rintel ] * [armhf] Add support for Marvell MMP3 * [armhf] Enable SND_MMP_SOC_SSPA, COMMON_CLK_MMP2_AUDIO, PHY_MMP3_USB, MFD_ENE_KB3930 and LEDS_ARIEL as modules. . [ Sean McAvoy ] * [armel] marvell: Enable CONFIG_SENSORS_LM63 as a module. . [ Dan Stefura ] * [arm64] enable i6300esb watchdog kernel module . [ Thore Sommer ] * drivers/md: Enable DM_VERITY_FEC . [ Aurelien Jarno ] * [riscv64] Enable NUMA (Closes: #993453) . linux (5.14.16-1) unstable; urgency=medium . * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.13 - ext4: check and update i_disksize properly - ext4: correct the error path of ext4_write_inline_data_end() - [x86] ASoC: Intel: sof_sdw: tag SoundWire BEs as non-atomic - ALSA: oxfw: fix transmission method for Loud models based on OXFW971 - ALSA: usb-audio: Unify mixer resume and reset_resume procedure - HID: apple: Fix logical maximum and usage maximum of Magic Keyboard JIS - netfilter: ip6_tables: zero-initialize fragment offset - HID: wacom: Add new Intuos BT (CTL-4100WL/CTL-6100WL) device IDs - [x86] ASoC: SOF: loader: release_firmware() on load failure to avoid batching - netfilter: nf_nat_masquerade: make async masq_inet6_event handling generic - netfilter: nf_nat_masquerade: defer conntrack walk to work queue - mac80211: Drop frames from invalid MAC address in ad-hoc mode - [m68k] Handle arrivals of multiple signals correctly - net: prevent user from passing illegal stab size - mac80211: check return value of rhashtable_init - [x86] vboxfs: fix broken legacy mount signature checking - drm/amdgpu: fix gart.bo pin_count leak - scsi: ses: Fix unsigned comparison with less than zero - scsi: virtio_scsi: Fix spelling mistake "Unsupport" -> "Unsupported" - scsi: qla2xxx: Fix excessive messages during device logout - perf/core: fix userpage->time_enabled of inactive events - sched: Always inline is_percpu_thread() - io_uring: kill fasync - [armhf] hwmon: (pmbus/ibm-cffps) max_power_out swap changes https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.14 - ALSA: usb-audio: Add quirk for VF0770 - ALSA: pcm: Workaround for a wrong offset in SYNC_PTR compat ioctl - ALSA: usb-audio: Fix a missing error check in scarlett gen2 mixer - ALSA: seq: Fix a potential UAF by wrong private_free call order - ALSA: hda/realtek: Enable 4-speaker output for Dell Precision 5560 laptop - ALSA: hda - Enable headphone mic on Dell Latitude laptops with ALC3254 - ALSA: hda/realtek: Complete partial device name to avoid ambiguity - ALSA: hda/realtek: Add quirk for Clevo X170KM-G - ALSA: hda/realtek - ALC236 headset MIC recording issue - ALSA: hda/realtek: Add quirk for TongFang PHxTxX1 - ALSA: hda/realtek: Fix for quirk to enable speaker output on the Lenovo 13s Gen2 - ALSA: hda/realtek: Fix the mic type detection issue for ASUS G551JW - [amd64] platform/x86: amd-pmc: Add alternative acpi id for PMC controller - dm: fix mempool NULL pointer race when completing IO - [x86] ACPI: PM: Include alternate AMDI0005 id in special behaviour - dm rq: don't queue request to blk-mq during DM suspend - [s390x] fix strrchr() implementation - drm/fbdev: Clamp fbdev surface size if too large - [arm64] hugetlb: fix CMA gigantic page order for non-4K PAGE_SIZE - drm/nouveau/fifo: Reinstate the correct engine bit programming - [arm64] drm/msm: Do not run snapshot on non-DPU devices - [arm64] drm/msm: Avoid potential overflow in timeout_to_jiffies() - btrfs: unlock newly allocated extent buffer after error - btrfs: deal with errors when replaying dir entry during log replay - btrfs: deal with errors when adding inode reference during log replay - btrfs: check for error when looking up inode during dir entry replay - btrfs: update refs for any root except tree log roots - btrfs: fix abort logic in btrfs_replace_file_extents - [x86] resctrl: Free the ctrlval arrays when domain_setup_mon_state() fails - [x86] mei: me: add Ice Lake-N device id. - [x86] mei: hbm: drop hbm responses on early shutdown - xhci: guard accesses to ep_state in xhci_endpoint_reset() - xhci: add quirk for host controllers that don't update endpoint DCS - xhci: Fix command ring pointer corruption while aborting a command - xhci: Enable trust tx length quirk for Fresco FL11 USB controller - cb710: avoid NULL pointer subtraction - [arm64,x86] efi/cper: use stack buffer for error record decoding - efi: Change down_interruptible() in virt_efi_reset_system() to down_trylock() - [armhf] usb: musb: dsps: Fix the probe error path - Input: xpad - add support for another USB ID of Nacon GC-100 - USB: serial: qcserial: add EM9191 QDL support - USB: serial: option: add Quectel EC200S-CN module support - USB: serial: option: add Telit LE910Cx composition 0x1204 - USB: serial: option: add prod. id for Quectel EG91 - virtio: write back F_VERSION_1 before validate - nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells - virtio-blk: remove unneeded "likely" statements - Revert "virtio-blk: Add validation for block size in config space" - [x86] fpu: Mask out the invalid MXCSR bits properly - [x86] Kconfig: Do not enable AMD_MEM_ENCRYPT_ACTIVE_BY_DEFAULT automatically - [powerpc*] xive: Discard disabled interrupts in get_irqchip_state() - [armhf] drivers: bus: simple-pm-bus: Add support for probing simple bus only devices - driver core: Reject pointless SYNC_STATE_ONLY device links - iio: adc: ad7192: Add IRQ flag - iio: adc: ad7780: Fix IRQ flag - iio: adc: ad7793: Fix IRQ flag - iio: adis16480: fix devices that do not support sleep mode - iio: adc128s052: Fix the error handling path of 'adc128_probe()' - iio: adc: max1027: Fix wrong shift with 12-bit devices - iio: adis16475: fix deadlock on frequency set - iio: light: opt3001: Fixed timeout error when 0 lux - iio: adc: max1027: Fix the number of max1X31 channels - eeprom: at25: Add SPI ID table - iio: dac: ti-dac5571: fix an error code in probe() - [arm64] tee: optee: Fix missing devices unregister during optee_remove - [armel,armhf] dts: bcm2711-rpi-4-b: Fix usb's unit address - [armel,armhf] dts: bcm2711-rpi-4-b: fix sd_io_1v8_reg regulator states - [armel,armhf] dts: bcm2711-rpi-4-b: Fix pcie0's unit address formatting - nvme-pci: Fix abort command id - sctp: account stream padding length for reconf chunk - [arm64,armhf] gpio: pca953x: Improve bias setting - net/smc: improved fix wait on already cleared link - net/mlx5e: Fix memory leak in mlx5_core_destroy_cq() error path - net/mlx5e: Mutually exclude RX-FCS and RX-port-timestamp - net/mlx5e: Switchdev representors are not vlan challenged - net: stmmac: fix get_hw_feature() on old hardware - net: phy: Do not shutdown PHYs in READY state - [arm64,armhf] net: dsa: mv88e6xxx: don't use PHY_DETECT on internal PHY's - [arm64,armhf] net: dsa: fix spurious error message when unoffloaded port leaves bridge - ethernet: s2io: fix setting mac address during resume - nfc: fix error handling of nfc_proto_register() - NFC: digital: fix possible memory leak in digital_tg_listen_mdaa() - NFC: digital: fix possible memory leak in digital_in_send_sdd_req() - pata_legacy: fix a couple uninitialized variable bugs - ata: ahci_platform: fix null-ptr-deref in ahci_platform_enable_regulators() - spi: spidev: Add SPI ID table - drm/edid: In connector_bad_edid() cap num_of_ext by num_blocks read - [arm64] drm/msm: Fix null pointer dereference on pointer edp - [arm64] drm/msm/mdp5: fix cursor-related warnings - [arm64] drm/msm/submit: fix overflow check on 64-bit architectures - [arm64] drm/msm/a6xx: Track current ctx by seqno - [arm64] drm/msm/a4xx: fix error handling in a4xx_gpu_init() - [arm64] drm/msm/a3xx: fix error handling in a3xx_gpu_init() - [arm64] drm/msm/dsi: dsi_phy_14nm: Take ready-bit into account in poll_for_ready - [arm64] drm/msm/dsi: Fix an error code in msm_dsi_modeset_init() - [arm64] drm/msm/dsi: fix off by one in dsi_bus_clk_enable error handling - [arm64] acpi/arm64: fix next_platform_timer() section mismatch error - [x86] platform/x86: intel_scu_ipc: Fix busy loop expiry time - mqprio: Correct stats in mqprio_dump_class_stats(). - mptcp: fix possible stall on recvmsg() - qed: Fix missing error code in qed_slowpath_start() - ice: fix locking for Tx timestamp tracking flush - nfp: flow_offload: move flow_indr_dev_register from app init to app start - [arm64] net: mscc: ocelot: make use of all 63 PTP timestamp identifiers - [arm64] net: mscc: ocelot: avoid overflowing the PTP timestamp FIFO - [arm64] net: mscc: ocelot: warn when a PTP IRQ is raised for an unknown skb - [arm64] net: mscc: ocelot: deny TX timestamping of non-PTP packets - [arm64] net: mscc: ocelot: cross-check the sequence id from the timestamp FIFO with the skb PTP header - [arm64] net: dsa: felix: break at first CPU port during init and teardown https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.15 - [armhf] dts: vexpress-v2p-ca9: Fix the SMB unit-address - block: decode QUEUE_FLAG_HCTX_ACTIVE in debugfs output - [x86] xen/x86: prevent PVH type from getting clobbered - r8152: avoid to resubmit rx immediately - drm/amdgpu: init iommu after amdkfd device init - NFSD: Keep existing listeners on portlist error - [powerpc*] powerpc/lib: Add helper to check if offset is within conditional branch range - [powerpc*] powerpc/bpf: Validate branch ranges - [powerpc*] powerpc/security: Add a helper to query stf_barrier type - [powerpc*] powerpc/bpf: Emit stf barrier instruction sequences for BPF_NOSPEC - [arm64] KVM: arm64: Fix host stage-2 PGD refcount - [arm64] KVM: arm64: Release mmap_lock when using VM_SHARED with MTE - netfilter: xt_IDLETIMER: fix panic that occurs when timer_type has garbage value - netfilter: nf_tables: skip netdev events generated on netns removal - ice: Fix failure to re-add LAN/RDMA Tx queues - ice: Avoid crash from unnecessary IDA free - ice: fix getting UDP tunnel entry - ice: Print the api_patch as part of the fw.mgmt.api - netfilter: ip6t_rt: fix rt0_hdr parsing in rt_mt6 - netfilter: ipvs: make global sysctl readonly in non-init netns - sctp: fix transport encap_port update in sctp_vtag_verify - tcp: md5: Fix overlap between vrf and non-vrf keys - ipv6: When forwarding count rx stats on the orig netdev - hamradio: baycom_epp: fix build for UML - net/sched: act_ct: Fix byte count on fragmented packets - [arm64,armhf] net: dsa: Fix an error handling path in 'dsa_switch_parse_ports_of()' - [powerpc*] smp: do not decrement idle task preempt count in CPU offline - [arm64] net: hns3: Add configuration of TM QCN error event - [arm64] net: hns3: reset DWRR of unused tc to zero - [arm64] net: hns3: add limit ets dwrr bandwidth cannot be 0 - [arm64] net: hns3: schedule the polling again when allocation fails - [arm64] net: hns3: fix vf reset workqueue cannot exit - [arm64] net: hns3: disable sriov before unload hclge layer - net: stmmac: Fix E2E delay mechanism - ptp: Fix possible memory leak in ptp_clock_register() - e1000e: Fix packet loss on Tiger Lake and later - igc: Update I226_K device ID - ice: Add missing E810 device ids - net/mlx5e: IPsec: Fix a misuse of the software parser's fields - net/mlx5e: IPsec: Fix work queue entry ethernet segment checksum flags - [arm64] net: enetc: fix ethtool counter name for PM0_TERR - [arm64] net: enetc: make sure all traffic classes can send large frames - can: peak_usb: pcan_usb_fd_decode_status(): fix back to ERROR_ACTIVE state notification - can: peak_pci: peak_pci_remove(): fix UAF - can: isotp: isotp_sendmsg(): fix return error on FC timeout on TX path - can: isotp: isotp_sendmsg(): add result check for wait_event_interruptible() - can: isotp: isotp_sendmsg(): fix TX buffer concurrent access in isotp_sendmsg() - can: j1939: j1939_tp_rxtimer(): fix errant alert in j1939_tp_rxtimer - can: j1939: j1939_netdev_start(): fix UAF for rx_kref of j1939_priv - can: j1939: j1939_xtp_rx_dat_one(): cancel session if receive TP.DT with error length - can: j1939: j1939_xtp_rx_rts_session_new(): abort TP less than 9 bytes - ceph: skip existing superblocks that are blocklisted or shut down when mounting - ceph: fix handling of "meta" errors - tracing: Have all levels of checks prevent recursion - ocfs2: fix data corruption after conversion from inline format - ocfs2: mount fails with buffer overflow in strlen - userfaultfd: fix a race between writeprotect and exit_mmap() - mm/mempolicy: do not allow illegal MPOL_F_NUMA_BALANCING | MPOL_LOCAL in mbind() - vfs: check fd has read access in kernel_read_file_from_fd() - ALSA: usb-audio: Provide quirk for Sennheiser GSP670 Headset - ALSA: hda/realtek: Add quirk for Clevo PC50HS - ASoC: DAPM: Fix missing kctl change notifications - [x86] ASoC: nau8824: Fix headphone vs headset, button-press detection no longer working - blk-cgroup: blk_cgroup_bio_start() should use irq-safe operations on blkg->iostat_cpu - audit: fix possible null-pointer dereference in audit_filter_rules - ucounts: Move get_ucounts from cred_alloc_blank to key_change_session_keyring - ucounts: Pair inc_rlimit_ucounts with dec_rlimit_ucoutns in commit_creds - ucounts: Proper error handling in set_cred_ucounts - ucounts: Fix signal ucount refcounting - [powerpc*] KVM: PPC: Book3S HV: Fix stack handling in idle_kvm_start_guest() - [powerpc*] KVM: PPC: Book3S HV: Make idle_kvm_start_guest() return 0 if it went to guest (CVE-2021-43056) - [powerpc*] idle: Don't corrupt back chain when going idle - mm, slub: fix mismatch between reconstructed freelist depth and cnt - mm, slub: fix potential memoryleak in kmem_cache_open() - mm, slub: fix potential use-after-free in slab_debugfs_fops - mm, slub: fix incorrect memcg slab count for bulk free - [x86] KVM: nVMX: promptly process interrupts delivered while in guest mode - [x86] KVM: SEV: Flush cache on non-coherent systems before RECEIVE_UPDATE_DATA - [x86] KVM: SEV-ES: rename guest_ins_data to sev_pio_data - [x86] KVM: SEV-ES: clean up kvm_sev_es_ins/outs - [x86] KVM: SEV-ES: keep INS functions together - [x86] KVM: SEV-ES: fix length of string I/O - [x86] KVM: SEV-ES: go over the sev_pio_data buffer in multiple passes if needed - [x86] KVM: SEV-ES: reduce ghcb_sa_len to 32 bits - [x86] KVM: x86: leave vcpu->arch.pio.count alone in emulator_pio_in_out - [x86] KVM: x86: check for interrupts before deciding whether to exit the fast path - [x86] KVM: x86: split the two parts of emulator_pio_in - [x86] KVM: x86: remove unnecessary arguments from complete_emulator_pio_in - nfc: nci: fix the UAF of rf_conn_info object (CVE-2021-3760) - isdn: cpai: check ctr->cnr to avoid array index out of bound (CVE-2021-3896) - [sh4] net: bridge: mcast: use multicast_membership_interval for IGMPv3 - [x86] KVM: SEV-ES: Set guest_state_protected after VMSA update - [arm64] net: hns3: fix the max tx size according to user manual - [x86] KVM: MMU: Reset mmu->pkru_mask to avoid stale data - [arm64] drm/msm/a6xx: Serialize GMU communication - ALSA: hda: intel: Allow repeatedly probing on codec configuration errors - btrfs: deal with errors when checking if a dir entry exists during log replay - net: stmmac: add support for dwmac 3.40a - [x86] platform/x86: intel_scu_ipc: Increase virtual timeout to 10s - [x86] platform/x86: intel_scu_ipc: Update timeout value in comment - ALSA: hda: avoid write to STATESTS if controller is in reset - spi: Fix deadlock when adding SPI controllers on SPI buses - spi-mux: Fix false-positive lockdep splats - [x86] perf/x86/msr: Add Sapphire Rapids CPU support - scsi: iscsi: Fix set_param() handling - [x86] scsi: storvsc: Fix validation for unsolicited incoming packets - scsi: qla2xxx: Fix a memory leak in an error path of qla2x00_process_els() - mm/thp: decrease nr_thps in file's mapping on THP split - sched/scs: Reset the shadow stack when idle_task_exit - [arm64] net: hns3: fix for miscalculation of rx unused desc - net/mlx5: Lag, move lag destruction to a workqueue - net/mlx5: Lag, change multipath and bonding to be mutually exclusive - autofs: fix wait name hash calculation in autofs_wait() - scsi: core: Fix shost->cmd_per_lun calculation in scsi_add_host_with_dma() - [s390x] pci: cleanup resources only if necessary - [s390x] pci: fix zpci_zdev_put() on reserve - net: mdiobus: Fix memory leak in __mdiobus_register - e1000e: Separate TGP board type from SPT - [armhf] pinctrl: stm32: use valid pin identifier in stm32_pinctrl_resume() https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.16 - [armel,armhf] 9134/1: remove duplicate memcpy() definition - [armel,armhf] 9139/1: kprobes: fix arch_init_kprobes() prototype - [armel,armhf] 9148/1: handle CONFIG_CPU_ENDIAN_BE32 in arch/arm/kernel/head.S - usbnet: sanity check for maxpacket - usbnet: fix error return code in usbnet_probe() - pinctrl: amd: disable and mask interrupts on probe - ata: sata_mv: Fix the error handling of mv_chip_id() - tipc: fix size validations for the MSG_CRYPTO type (CVE-2021-43267) - nfc: port100: fix using -ERRNO as command type mask - Revert "net: mdiobus: Fix memory leak in __mdiobus_register" - mmc: vub300: fix control-message timeouts - mmc: cqhci: clear HALT state after CQE enable - [armhf] mmc: dw_mmc: exynos: fix the finding clock sample value - mmc: sdhci: Map more voltage level to SDHCI_POWER_330 - mmc: sdhci-pci: Read card detect from ACPI for Intel Merrifield - [arm64,armhf] mmc: sdhci-esdhc-imx: clear the buffer_read_ready to reset standard tuning circuit - block: Fix partition check for host-aware zoned block devices - ocfs2: fix race between searching chunks and release journal_head from buffer_head - nvme-tcp: fix H2CData PDU send accounting (again) - cfg80211: scan: fix RCU in cfg80211_add_nontrans_list() - cfg80211: fix management registrations locking - net: lan78xx: fix division by zero in send path - mm: hwpoison: remove the unnecessary THP check - mm: filemap: check if THP has hwpoisoned subpage for PMD page fault - mm, thp: bail out early in collapse_file for writeback page - mm: khugepaged: skip huge page collapse for special files - [arm64] dts: imx8mm-kontron: Fix polarity of reg_rst_eth2 - [arm64] dts: imx8mm-kontron: Fix CAN SPI clock frequency - [arm64] dts: imx8mm-kontron: Fix connection type for VSC8531 RGMII PHY - [arm64] dts: imx8mm-kontron: Set lower limit of VDD_SNVS to 800 mV - [arm64] dts: imx8mm-kontron: Make sure SOC and DRAM supply voltages are correct - mac80211: mesh: fix HE operation element length check - drm/ttm: fix memleak in ttm_transfered_destroy - [x86] drm/i915: Convert unconditional clflush to drm_clflush_virt_range() - [x86] drm/i915: Catch yet another unconditioal clflush - [x86] drm/i915/dp: Skip the HW readout of DPCD on disabled encoders - drm/amdgpu: Fix even more out of bound writes from debugfs - drm/amdgpu: fix out of bounds write (CVE-2021-42327) - drm/amdgpu: support B0&B1 external revision id for yellow carp - drm/amd/display: Limit display scaling to up to true 4k for DCN 3.1 - drm/amd/display: Fix prefetch bandwidth calculation for DCN3.1 - drm/amd/display: increase Z9 latency to workaround underflow in Z9 - drm/amd/display: Increase watermark latencies for DCN3.1 - drm/amd/display: Moved dccg init to after bios golden init - drm/amd/display: Fallback to clocks which meet requested voltage on DCN31 - drm/amd/display: Fix deadlock when falling back to v2 from v3 - Revert "watchdog: iTCO_wdt: Account for rebooting on second timeout" - cgroup: Fix memory leak caused by missing cgroup_bpf_offline - [riscv64] riscv, bpf: Fix potential NULL dereference - tcp_bpf: Fix one concurrency problem in the tcp_bpf_send_verdict function - bpf: Fix potential race in tail call compatibility check - bpf: Fix error usage of map_fd and fdget() in generic_map_update_batch() - [amd64] IB/qib: Protect from buffer overflow in struct qib_user_sdma_pkt fields - [amd64] IB/hfi1: Fix abba locking issue with sc_disable() - nvmet-tcp: fix data digest pointer calculation - nvme-tcp: fix data digest pointer calculation - nvme-tcp: fix possible req->offset corruption - ice: Respond to a NETDEV_UNREGISTER event for LAG - RDMA/mlx5: Set user priority for DCT - ice: check whether PTP is initialized in ice_ptp_release() - [arm64] dts: allwinner: h5: NanoPI Neo 2: Fix ethernet node - regmap: Fix possible double-free in regcache_rbtree_exit() - net: batman-adv: fix error handling - net-sysfs: initialize uid and gid before calling net_ns_get_ownership - cfg80211: correct bridge/4addr mode check - net: Prevent infinite while loop in skb_tx_hash() - RDMA/mlx5: Initialize the ODP xarray when creating an ODP MR - RDMA/sa_query: Use strscpy_pad instead of memcpy to copy a string - net: ethernet: microchip: lan743x: Fix driver crash when lan743x_pm_resume fails - net: ethernet: microchip: lan743x: Fix dma allocation failure by using dma_set_mask_and_coherent - [arm64] net: hns3: fix pause config problem after autoneg disabled - [arm64] net: hns3: fix data endian problem of some functions of debugfs - net: ethernet: microchip: lan743x: Fix skb allocation failure - phy: phy_ethtool_ksettings_get: Lock the phy for consistency - phy: phy_ethtool_ksettings_set: Move after phy_start_aneg - phy: phy_start_aneg: Add an unlocked version - phy: phy_ethtool_ksettings_set: Lock the PHY while changing settings - sctp: use init_tag from inithdr for ABORT chunk (CVE-2021-3772) - sctp: fix the processing for INIT chunk (CVE-2021-3772) - sctp: fix the processing for INIT_ACK chunk (CVE-2021-3772) - sctp: fix the processing for COOKIE_ECHO chunk (CVE-2021-3772) - sctp: add vtag check in sctp_sf_violation (CVE-2021-3772) - sctp: add vtag check in sctp_sf_do_8_5_1_E_sa (CVE-2021-3772) - sctp: add vtag check in sctp_sf_ootb (CVE-2021-3772) - bpf: Use kvmalloc for map values in syscall - [arm64] watchdog: sbsa: only use 32-bit accessors - bpf: Move BPF_MAP_TYPE for INODE_STORAGE and TASK_STORAGE outside of CONFIG_NET - [arm64] net: hns3: add more string spaces for dumping packets number of queue info in debugfs - [arm64] net: hns3: expand buffer len for some debugfs command - virtio-ring: fix DMA metadata flags - [s390x] KVM: s390: clear kicked_mask before sleeping again - [s390x] KVM: s390: preserve deliverable_mask in __airqs_kick_single_vcpu - [powerpc*] scsi: ibmvfc: Fix up duplicate response detection - [riscv64] fix misalgned trap vector base address - [x86] KVM: switch pvclock_gtod_sync_lock to a raw spinlock - [x86] KVM: SEV-ES: fix another issue with string I/O VMGEXITs - [x86] KVM: Take srcu lock in post_kvm_run_save() . [ Salvatore Bonaccorso ] * Revert "[amd64] Unset AMD_MEM_ENCRYPT_ACTIVE_BY_DEFAULT" * Bump ABI to 4 * media: ir-kbd-i2c: improve responsiveness of hauppauge zilog receivers (Closes: #994050) * [x86] media: ite-cir: IR receiver stop working after receive overflow (Closes: #996672) * scsi: core: Put LLD module refcnt after SCSI device is released * sfc: Fix reading non-legacy supported link modes * vrf: Revert "Reset skb conntrack connection..." * media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (CVE-2021-42739) . linux (5.14.12-1) unstable; urgency=medium . * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.10 - [arm64,armhf] media: cedrus: Fix SUNXI tile size calculation - [arm64] ASoC: fsl_sai: register platform component before registering cpu dai - [armhf] ASoC: fsl_spdif: register platform component before registering cpu dai - [x86] ASoC: SOF: Fix DSP oops stack dump output contents - [arm64] pinctrl: qcom: spmi-gpio: correct parent irqspec translation - net/mlx4_en: Resolve bad operstate value - [s390x] qeth: Fix deadlock in remove_discipline - [s390x] qeth: fix deadlock during failing recovery - [x86] crypto: ccp - fix resource leaks in ccp_run_aes_gcm_cmd() (CVE-2021-3744, CVE-2021-3764) - [m68k] Update ->thread.esp0 before calling syscall_trace() in ret_from_signal - [amd64] HID: amd_sfh: Fix potential NULL pointer dereference - tty: Fix out-of-bound vmalloc access in imageblit - cpufreq: schedutil: Use kobject release() method to free sugov_tunables - scsi: qla2xxx: Changes to support kdump kernel for NVMe BFS - drm/amdgpu: adjust fence driver enable sequence - drm/amdgpu: avoid over-handle of fence driver fini in s3 test (v2) - drm/amdgpu: stop scheduler when calling hw_fini (v2) - cpufreq: schedutil: Destroy mutex before kobject_put() frees the memory - scsi: ufs: ufs-pci: Fix Intel LKF link stability - ALSA: rawmidi: introduce SNDRV_RAWMIDI_IOCTL_USER_PVERSION - ALSA: firewire-motu: fix truncated bytes in message tracepoints - ALSA: hda/realtek: Quirks to enable speaker output for Lenovo Legion 7i 15IMHG05, Yoga 7i 14ITL5/15ITL5, and 13s Gen2 laptops. - [amd64,arm64] ACPI: NFIT: Use fallback node id when numa info in NFIT table is incorrect - fs-verity: fix signed integer overflow with i_size near S64_MAX - hwmon: (tmp421) handle I2C errors - hwmon: (w83793) Fix NULL pointer dereference by removing unnecessary structure field - hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary structure field - hwmon: (w83791d) Fix NULL pointer dereference by removing unnecessary structure field - [arm64,armhf] gpio: pca953x: do not ignore i2c errors - scsi: ufs: Fix illegal offset in UPIU event trace - mac80211: fix use-after-free in CCMP/GCMP RX - [x86] platform/x86/intel: hid: Add DMI switches allow list - [x86] kvmclock: Move this_cpu_pvti into kvmclock.h - [x86] ptp: Fix ptp_kvm_getcrosststamp issue for x86 ptp_kvm - [x86] KVM: x86: Fix stack-out-of-bounds memory access from ioapic_write_indirect() - [x86] KVM: x86: nSVM: don't copy virt_ext from vmcb12 - [x86] KVM: x86: Clear KVM's cached guest CR3 at RESET/INIT - [x86] KVM: x86: Swap order of CPUID entry "index" vs. "significant flag" checks - [x86] KVM: nVMX: Filter out all unsupported controls when eVMCS was activated - [x86] KVM: SEV: Update svm_vm_copy_asid_from for SEV-ES - [x86] KVM: SEV: Pin guest memory for write for RECEIVE_UPDATE_DATA - [x86] KVM: SEV: Acquire vcpu mutex when updating VMSA - [x86] KVM: SEV: Allow some commands for mirror VM - [x86] KVM: SVM: fix missing sev_decommission in sev_receive_start - [x86] KVM: nVMX: Fix nested bus lock VM exit - [x86] KVM: VMX: Fix a TSX_CTRL_CPUID_CLEAR field mask issue - RDMA/cma: Do not change route.addr.src_addr.ss_family - RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests - nbd: use shifts rather than multiplies - drm/amd/display: initialize backlight_ramping_override to false - drm/amd/display: Pass PCI deviceid into DC - drm/amd/display: Fix Display Flicker on embedded panels - drm/amdgpu: force exit gfxoff on sdma resume for rmb s0ix - drm/amdgpu: check tiling flags when creating FB on GFX8- - drm/amdgpu: correct initial cp_hqd_quantum for gfx9 - [amd64] drm/i915/gvt: fix the usage of ww lock in gvt scheduler. - ipvs: check that ip_vs_conn_tab_bits is between 8 and 20 - bpf: Handle return value of BPF_PROG_TYPE_STRUCT_OPS prog - IB/cma: Do not send IGMP leaves for sendonly Multicast groups - RDMA/cma: Fix listener leak in rdma_cma_listen_on_all() failure - netfilter: nf_tables: unlink table before deleting it - netfilter: log: work around missing softdep backend module - Revert "mac80211: do not use low data rates for data frames with no ack flag" - mac80211: Fix ieee80211_amsdu_aggregate frag_tail bug - mac80211: limit injected vht mcs/nss in ieee80211_parse_tx_radiotap - mac80211: mesh: fix potentially unaligned access - mac80211-hwsim: fix late beacon hrtimer handling - driver core: fw_devlink: Add support for FWNODE_FLAG_NEEDS_CHILD_BOUND_ON_ADD - net: mdiobus: Set FWNODE_FLAG_NEEDS_CHILD_BOUND_ON_ADD for mdiobus parents - sctp: break out if skb_header_pointer returns NULL in sctp_rcv_ootb - mptcp: don't return sockets in foreign netns - mptcp: allow changing the 'backup' bit when no sockets are open - [arm64] RDMA/hns: Work around broken constant propagation in gcc 8 - hwmon: (tmp421) report /PVLD condition as fault - hwmon: (tmp421) fix rounding for negative values - [arm64] net: enetc: fix the incorrect clearing of IF_MODE bits - net: ipv4: Fix rtnexthop len when RTA_FLOW is present - smsc95xx: fix stalled rx after link change - [x86] drm/i915/request: fix early tracepoints - [x86] drm/i915: Remove warning from the rps worker - [arm64,armhf] dsa: mv88e6xxx: 6161: Use chip wide MAX MTU - [arm64,armhf] dsa: mv88e6xxx: Fix MTU definition - [arm64,armhf] dsa: mv88e6xxx: Include tagger overhead when setting MTU for DSA and CPU ports - e100: fix length calculation in e100_get_regs_len - e100: fix buffer overrun in e100_get_regs - [amd64] RDMA/hfi1: Fix kernel pointer leak - [arm64] RDMA/hns: Fix the size setting error when copying CQE in clean_cq() - [arm64] RDMA/hns: Add the check of the CQE size of the user space - bpf: Exempt CAP_BPF from checks against bpf_jit_limit - [amd64] bpf, x86: Fix bpf mapping of atomic fetch implementation - Revert "block, bfq: honor already-setup queue merges" - scsi: csiostor: Add module softdep on cxgb4 - ixgbe: Fix NULL pointer dereference in ixgbe_xdp_setup - [arm64] net: hns3: do not allow call hns3_nic_net_open repeatedly - [arm64] net: hns3: remove tc enable checking - [arm64] net: hns3: don't rollback when destroy mqprio fail - [arm64] net: hns3: fix mixed flag HCLGE_FLAG_MQPRIO_ENABLE and HCLGE_FLAG_DCB_ENABLE - [arm64] net: hns3: fix show wrong state when add existing uc mac address - [arm64] net: hns3: reconstruct function hns3_self_test - [arm64] net: hns3: fix always enable rx vlan filter problem after selftest - [arm64] net: hns3: disable firmware compatible features when uninstall PF - [arm64,armhf] net: phy: bcm7xxx: Fixed indirect MMD operations - net: sched: flower: protect fl_walk() with rcu - net: stmmac: fix EEE init issue when paired with EEE capable PHYs - af_unix: fix races in sk_peer_pid and sk_peer_cred accesses - [x86] perf/x86/intel: Update event constraints for ICX - sched/fair: Add ancestors of unthrottled undecayed cfs_rq - sched/fair: Null terminate buffer when updating tunable_scaling - [armhf] hwmon: (occ) Fix P10 VRM temp sensors - [x86] kvm: fix objtool relocation warning - nvme: add command id quirk for apple controllers - elf: don't use MAP_FIXED_NOREPLACE for elf interpreter mappings - driver core: fw_devlink: Improve handling of cyclic dependencies - debugfs: debugfs_create_file_size(): use IS_ERR to check for error - ext4: fix loff_t overflow in ext4_max_bitmap_size() - ext4: fix reserved space counter leakage - ext4: add error checking to ext4_ext_replay_set_iblocks() - ext4: fix potential infinite loop in ext4_dx_readdir() - ext4: flush s_error_work before journal destroy in ext4_fill_super - HID: u2fzero: ignore incomplete packets without data (Closes: #994535) - net: udp: annotate data race around udp_sk(sk)->corkflag - usb: hso: remove the bailout parameter - HID: betop: fix slab-out-of-bounds Write in betop_probe - netfilter: ipset: Fix oversized kvmalloc() calls - mm: don't allow oversized kvmalloc() calls - HID: usbhid: free raw_report buffers in usbhid_stop - [x86] crypto: aesni - xts_crypt() return if walk.nbytes is 0 - [x86] KVM: x86: Handle SRCU initialization failure during page track init - netfilter: conntrack: serialize hash resizes and cleanups - netfilter: nf_tables: Fix oversized kvmalloc() calls - [amd64] HID: amd_sfh: Fix potential NULL pointer dereference - take 2 https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.11 - [arm64,armhf] spi: rockchip: handle zero length transfers without timing out - afs: Add missing vnode validation checks - nfsd: back channel stuck in SEQ4_STATUS_CB_PATH_DOWN - btrfs: replace BUG_ON() in btrfs_csum_one_bio() with proper error handling - btrfs: fix mount failure due to past and transient device flush error - net: mdio: introduce a shutdown method to mdio device drivers - xen-netback: correct success/error reporting for the SKB-with-fraglist case - [sparc64] fix pci_iounmap() when CONFIG_PCI is not set - scsi: sd: Free scsi_disk device via put_device() - [arm*] usb: dwc2: check return value after calling platform_get_resource() - Xen/gntdev: don't ignore kernel unmapping error - swiotlb-xen: ensure to issue well-formed XENMEM_exchange requests - nvme-fc: update hardware queues before using them - nvme-fc: avoid race between time out and tear down - [arm64] thermal/drivers/tsens: Fix wrong check for tzd in irq handlers - scsi: ses: Retry failed Send/Receive Diagnostic commands - [arm64,armhf] irqchip/gic: Work around broken Renesas integration - smb3: correct smb3 ACL security descriptor - [x86] insn, tools/x86: Fix undefined behavior due to potential unaligned accesses - io_uring: allow conditional reschedule for intensive iterators - block: don't call rq_qos_ops->done_bio if the bio isn't tracked - KVM: do not shrink halt_poll_ns below grow_start - [x86] KVM: x86: reset pdptrs_from_userspace when exiting smm - [x86] kvm: x86: Add AMD PMU MSRs to msrs_to_save_all[] - [x86] KVM: x86: nSVM: restore int_vector in svm_clear_vintr - [x86] perf/x86: Reset destroy callback on event init failure - libata: Add ATA_HORKAGE_NO_NCQ_ON_ATI for Samsung 860 and 870 SSD. - Revert "brcmfmac: use ISO3166 country code and 0 rev as fallback" - [armhf] Revert "ARM: imx6q: drop of_platform_default_populate() from init_machine" https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.12 - usb: cdc-wdm: Fix check for WWAN - [arm64,armhf] usb: chipidea: ci_hdrc_imx: Also search for 'phys' phandle - usb: gadget: f_uac2: fixed EP-IN wMaxPacketSize - USB: cdc-acm: fix racy tty buffer accesses - USB: cdc-acm: fix break reporting - usb: typec: tcpm: handle SRC_STARTUP state if cc changes - [x86] usb: typec: tipd: Remove dependency on "connector" child fwnode - drm/amdgpu: During s0ix don't wait to signal GFXOFF - drm/nouveau/kms/tu102-: delay enabling cursor until after assign_windows - drm/nouveau/ga102-: support ttm buffer moves via copy engine - [x86] drm/i915: Fix runtime pm handling in i915_gem_shrink - [x86] drm/i915: Extend the async flip VT-d w/a to skl/bxt - xen/privcmd: fix error handling in mmap-resource processing - [arm64] mmc: meson-gx: do not use memcpy_to/fromio for dram-access-quirk - ovl: fix missing negative dentry check in ovl_rename() - ovl: fix IOCB_DIRECT if underlying fs doesn't support direct IO - nfsd: fix error handling of register_pernet_subsys() in init_nfsd() - nfsd4: Handle the NFSv4 READDIR 'dircount' hint being zero - SUNRPC: fix sign error causing rpcsec_gss drops - xen/balloon: fix cancelled balloon action - [armhf] dts: omap3430-sdp: Fix NAND device node - scsi: ufs: core: Fix task management completion - [riscv64] Flush current cpu icache before other cpus - [armhf] bus: ti-sysc: Add break in switch statement in sysc_init_soc() - iwlwifi: mvm: Fix possible NULL dereference - [arm64] soc: qcom: mdt_loader: Drop PT_LOAD check on hash segment - [armhf] dts: imx: Add missing pinctrl-names for panel on M53Menlo - [armhf] dts: imx: Fix USB host power regulator polarity on M53Menlo - [amd64] PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus - iwlwifi: pcie: add configuration of a Wi-Fi adapter on Dell XPS 15 - netfilter: conntrack: fix boot failure with nf_conntrack.enable_hooks=1 - netfilter: nf_tables: add position handle in event notification - netfilter: nf_tables: reverse order in rule replacement expansion - [armel,armhf] bpf, arm: Fix register clobbering in div/mod implementation - [armhf] soc: ti: omap-prm: Fix external abort for am335x pruss - bpf: Fix integer overflow in prealloc_elems_and_freelist() (CVE-2021-41864) - net/mlx5e: IPSEC RX, enable checksum complete - net/mlx5e: Keep the value for maximum number of channels in-sync - net/mlx5: E-Switch, Fix double allocation of acl flow counter - net/mlx5: Force round second at 1PPS out start time - net/mlx5: Avoid generating event after PPS out in Real time mode - net/mlx5: Fix length of irq_index in chars - net/mlx5: Fix setting number of EQs of SFs - net/mlx5e: Fix the presented RQ index in PTP stats - phy: mdio: fix memory leak - net_sched: fix NULL deref in fifo_set_limit() - [arm64] net: mscc: ocelot: fix VCAP filters remaining active after being deleted - [arm64,armhf] net: stmmac: dwmac-rk: Fix ethernet on rk3399 based devices - [mips*] Revert "add support for buggy MT7621S core detection" - netfilter: nf_tables: honor NLM_F_CREATE and NLM_F_EXCL in event notification - [i386] ptp_pch: Load module automatically if ID matches - [armhf] dts: imx: change the spi-nor tx - [arm64] dts: imx8: change the spi-nor tx - [armhf] imx6: disable the GIC CPU interface before calling stby-poweroff sequence - [x86] drm/i915/audio: Use BIOS provided value for RKL HDA link - [x86] drm/i915/jsl: Add W/A 1409054076 for JSL - [x86] drm/i915/tc: Fix TypeC port init/resume time sanitization - [x86] drm/i915/bdb: Fix version check - netfs: Fix READ/WRITE confusion when calling iov_iter_xarray() - afs: Fix afs_launder_page() to set correct start file position - net: bridge: use nla_total_size_64bit() in br_get_linkxstats_size() - net: bridge: fix under estimation in br_get_linkxstats_size() - net/sched: sch_taprio: properly cancel timer from taprio_destroy() - net: sfp: Fix typo in state machine debug string - net: pcs: xpcs: fix incorrect CL37 AN sequence - netlink: annotate data races around nlk->bound - drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume - [armhf] bus: ti-sysc: Use CLKDM_NOAUTO for dra7 dcan1 for errata i893 - [arm64,armhf] drm/sun4i: dw-hdmi: Fix HDMI PHY clock setup - drm/nouveau: avoid a use-after-free when BO init fails - drm/nouveau/kms/nv50-: fix file release memory leak - drm/nouveau/debugfs: fix file release memory leak - net: pcs: xpcs: fix incorrect steps on disable EEE - net: stmmac: trigger PCS EEE to turn off on link down - [amd64,arm64] gve: Correct available tx qpl check - [amd64,arm64] gve: Avoid freeing NULL pointer - [amd64,arm64] gve: Properly handle errors in gve_assign_qpl - rtnetlink: fix if_nlmsg_stats_size() under estimation - [amd64,arm64] gve: fix gve_get_stats() - [amd64,arm64] gve: report 64bit tx_bytes counter from gve_handle_report_stats() - i40e: fix endless loop under rtnl - i40e: Fix freeing of uninitialized misc IRQ vector - iavf: fix double unlock of crit_lock - net: prefer socket bound to interface when not in VRF - [powerpc*] iommu: Report the correct most efficient DMA mask for PCI devices - i2c: acpi: fix resource leak in reconfiguration device addition - [riscv64] explicitly use symbol offsets for VDSO - [riscv64] vdso: Refactor asm/vdso.h - [riscv64] vdso: Move vdso data page up front - [riscv64] vdso: make arch_setup_additional_pages wait for mmap_sem for write killable - [s390x] bpf, s390: Fix potential memory leak about jit_data - [riscv64] Include clone3() on rv32 - scsi: iscsi: Fix iscsi_task use after free - [powerpc*] bpf: Fix BPF_MOD when imm == 1 - [powerpc*] bpf: Fix BPF_SUB when imm == 0x80000000 - [powerpc*] 64s: fix program check interrupt emergency stack path - [powerpc*] traps: do not enable irqs in _exception - [powerpc*] 64s: Fix unrecoverable MCE calling async handler from NMI - [powerpc*] pseries/eeh: Fix the kdump kernel crash during eeh_pseries_init - [i386] x86/platform/olpc: Correct ifdef symbol to intended CONFIG_OLPC_XO15_SCI - [x86] fpu: Restore the masking out of reserved MXCSR bits - [x86] entry: Correct reference to intended CONFIG_64_BIT - [x86] hpet: Use another crystalball to evaluate HPET usability - [arm64,armhf] dsa: tag_dsa: Fix mask for trunked packets . [ Ben Hutchings ] * debian/.gitignore: Ignore debian/tests/control again * integrity: Drop "MODSIGN: load blacklist from MOKx" as redundant after 5.13 * tools/perf: Fix warning introduced by "tools/perf: pmu-events: Fix reproducibility" * debian/rules.real: Stop invoking obsolete headers_check target * libcpupower: Update symbols file for changes in 5.13.9-1~exp1 . [ John Paul Adrian Glaubitz ] * [alpha] Re-enable CONFIG_EISA which was disabled upstream by accident . [ Salvatore Bonaccorso ] * Bump ABI to 3 * mm/secretmem: Fix NULL page->mapping dereference in page_is_secretmem() (Closes: #996175) . [ Aurelien Jarno ] * [riscv64] Improve HiFive Unmatched support: enable SENSORS_LM90. Checksums-Sha1: ceef25b2b4e4ea41d72c68e10412d9df2e645fa0 207353 linux_5.15.5-2~bpo11+1.dsc 562ad1a9902ff0e907fe9a9e90e95d1318a23fe5 1296300 linux_5.15.5-2~bpo11+1.debian.tar.xz f0928dd4513a5ba181bafd87807665037367fce0 5924 linux_5.15.5-2~bpo11+1_source.buildinfo Checksums-Sha256: 238e122442f2d1c8402a2305d7003a545b9e0a36dae1f0b3584905cdaba6b83c 207353 linux_5.15.5-2~bpo11+1.dsc e581657ffe232e98dd9a28ec3d823e0b96f4b7b0c1a654b95234ab707229664e 1296300 linux_5.15.5-2~bpo11+1.debian.tar.xz 2e4279bcf72d39f3069c8e5a594f0b7f5d2aa75d03232bee51ace15e479e97df 5924 linux_5.15.5-2~bpo11+1_source.buildinfo Files: 18f858602fc772aa0e8344bee247c121 207353 kernel optional linux_5.15.5-2~bpo11+1.dsc b912049d821284876e00b3d52dec190d 1296300 kernel optional linux_5.15.5-2~bpo11+1.debian.tar.xz 894be248ca4599a70b165b5b1da5d92e 5924 kernel optional linux_5.15.5-2~bpo11+1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEErCspvTSmr92z9o8157/I7JWGEQkFAmHRyUkACgkQ57/I7JWG EQmJLxAAur/fY3LlT49Sd6hx4/HVeoy6e/npegS2PF00M6Nxg6MZc7lskXAf/Qt0 IMYSCmzd3+Av3MOlWUEPG9MYizikUT6oed+kontk27eT+I4EXC6iN3lu40of/8Fp oVkoohCF8PZ2qPp9qPt8/U8eDhOPr0XRBf+VvvgqwQaHmCoOAWd4TpdkP1Bm1eSM RwIFXGGJYbjQMVlgSgqG+HVkvFegK8IF4HLGSNjV+7XgjpPD59R4pBgVXpwEglqC uny3S8lpSH2EypDXkKn0LN0zNjPQCbUk1nTvGZd2Hwiah1Z8AqEIp3e4awNHxGin HBzYCudjdg7ZsJ58fof91Lj4yPLoHC4c9qk86BUruntps+HRju9bLXV187bgaqXy jx/16t0TwS0lO+XxA9oeMuPLfOv0svPjF8GQTbzqz8meA6JRa5AMO9FNQ30SlvfW DvbMd66Ofq0Qul/Y7Ee2/0S4uZURX9K5FdRqVmIFbsg9Qtdb8SKfBEw//19C1gZz nx1CnbqZaUN90lE6Etu/cWMfqRLOM7VxFDQiitkafSorAVawgIhxZUlbWowRRhvC xGbILYWehF1zPNF0mrJaywTJEgqRdrlPD6u0Qu2DfvPV2qfiPC7p6N3HanNDBarm ywk30zhTMCpN5E2IHREMSCRSs3j9eTk/tQUc1GOV8pLyMi3Ryuo= =wQr8 -----END PGP SIGNATURE-----