-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 02 Mar 2022 22:26:09 +0100 Source: linux Architecture: source Version: 5.16.11-1~bpo11+1 Distribution: bullseye-backports Urgency: medium Maintainer: Debian Kernel Team <debian-kernel@lists.debian.org> Changed-By: Ben Hutchings <benh@debian.org> Closes: 890343 947179 983757 988044 997907 998835 1001080 1001083 1001731 1002460 1002706 1004095 1004495 1005141 1005884 1006275 Changes: linux (5.16.11-1~bpo11+1) bullseye-backports; urgency=medium . * Rebuild for bullseye-backports: - Change ABI number to 0.bpo.3 . linux (5.16.11-1) unstable; urgency=medium . * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.11 - drm/nouveau/pmu/gm200-: use alternate falcon reset sequence - HID:Add support for UGTABLET WP5540 - [x86] Revert "svm: Add warning message for AVIC IPI invalid target" - mmc: block: fix read single on recovery logic - mm: don't try to NUMA-migrate COW pages that have other uses - [amd64] HID: amd_sfh: Add illuminance mask to limit ALS max value - [amd64] HID: amd_sfh: Increase sensor command timeout - [amd64] HID: amd_sfh: Correct the structure field name - [amd64] PCI: hv: Fix NUMA node assignment when kernel boots with custom NUMA topology - HID: apple: Set the tilde quirk flag on the Wellspring 5 and later - btrfs: don't hold CPU for too long when defragging a file - btrfs: send: in case of IO error log it - btrfs: defrag: don't try to defrag extents which are under writeback - [amd64] platform/x86: amd-pmc: Correct usage of SMU version - net: ieee802154: at86rf230: Stop leaking skb's - ax25: improve the incomplete fix to avoid UAF and NPD bugs - cifs: unlock chan_lock before calling cifs_put_tcp_session - vfs: make freeze_super abort when sync_filesystem returns error - vfs: make sync_filesystem return errors from ->sync_fs - quota: make dquot_quota_sync return errors from ->sync_fs - scsi: pm80xx: Fix double completion for SATA devices - scsi: core: Reallocate device's budget map on queue depth change - scsi: pm8001: Fix use-after-free for aborted TMF sas_task - scsi: pm8001: Fix use-after-free for aborted SSP/STP sas_task - drm/amd: Warn users about potential s0ix problems - nvme: fix a possible use-after-free in controller reset during load - nvme-tcp: fix possible use-after-free in transport error_recovery work - nvme-rdma: fix possible use-after-free in transport error_recovery work - drm/amd: add support to check whether the system is set to s3 - drm/amd: Only run s3 or s0ix if system is configured properly - drm/amdgpu: fix logic inversion in check - [amd64] x86/Xen: streamline (and fix) PV CPU enumeration - Revert "module, async: async_synchronize_full() on module init iff async is used" - random: wake up /dev/random writers after zap - [x86] KVM: x86/xen: Fix runstate updates to be atomic when preempting vCPU - [x86] KVM: x86: nSVM/nVMX: set nested_run_pending on VM entry which is a result of RSM - [x86] KVM: x86: SVM: don't passthrough SMAP/SMEP/PKE bits in !NPT && !gCR0.PG case - [x86] KVM: x86: nSVM: fix potential NULL derefernce on nested migration - [x86] KVM: x86: nSVM: mark vmcb01 as dirty when restoring SMM saved state - iwlwifi: remove deprecated broadcast filtering feature - iwlwifi: fix use-after-free (Closes: #1005884) - drm/radeon: Fix backlight control on iMac 12,1 - drm/atomic: Don't pollute crtc_state->mode_blob with error pointers - drm/amdgpu: skipping SDMA hw_init and hw_fini for S0ix. - [x86] drm/i915/opregion: check port number bounds for SWSCI display power state - [x86] drm/i915: Fix dbuf slice config lookup - [x86] drm/i915: Fix mbus join config lookup - vsock: remove vsock from connected table when connect is interrupted by a signal - [arm64] tee: export teedev_open() and teedev_close_context() - [arm64] optee: use driver internal tee_context for some rpc - [arm*] drm/cma-helper: Set VM_DONTEXPAND for mmap - [x86] drm/i915/gvt: Make DRM_I915_GVT depend on X86 - [x86] drm/i915/ttm: tweak priority hint selection - iwlwifi: pcie: fix locking when "HW not ready" - iwlwifi: pcie: gen2: fix locking when "HW not ready" - iwlwifi: mvm: fix condition which checks the version of rate_n_flags - iwlwifi: fix iwl_legacy_rate_to_fw_idx - iwlwifi: mvm: don't send SAR GEO command for 3160 devices - netfilter: nft_synproxy: unregister hooks on init error path - ipv4: fix data races in fib_alias_hw_flags_set - ipv6: fix data-race in fib6_info_hw_flags_set / fib6_purge_rt - ipv6: mcast: use rcu-safe version of ipv6_get_lladdr() - ipv6: per-netns exclusive flowlabel checks - Revert "net: ethernet: bgmac: Use devm_platform_ioremap_resource_byname" - mac80211: mlme: check for null after calling kmemdup - brcmfmac: firmware: Fix crash in brcm_alt_fw_path - cfg80211: fix race in netlink owner interface destruction - [arm64,armhf] net: dsa: mv88e6xxx: flush switchdev FDB workqueue before removing VLAN - ping: fix the dif and sdif check in ping_lookup - bonding: force carrier update when releasing slave - mctp: fix use after free - drop_monitor: fix data-race in dropmon_net_event / trace_napi_poll_hit - net_sched: add __rcu annotation to netdev->qdisc - crypto: af_alg - get rid of alg_memory_allocated - bonding: fix data-races around agg_select_timer - net/smc: Avoid overwriting the copies of clcsock callback functions - atl1c: fix tx timeout after link flap on Mikrotik 10/25G NIC - tipc: fix wrong publisher node address in link publications - [arm64] dpaa2-eth: Initialize mutex used in one step timestamping path - [arm64] net: mscc: ocelot: fix use-after-free in ocelot_vlan_del() - net: bridge: multicast: notify switchdev driver whenever MC processing gets disabled - [arm64] Correct wrong label in macro __init_el2_gicv3 - ALSA: usb-audio: Don't abort resume upon errors - ALSA: usb-audio: revert to IMPLICIT_FB_FIXED_DEV for M-Audio FastTrack Ultra - ALSA: memalloc: Fix dma_need_sync() checks - ALSA: memalloc: invalidate SG pages before sync - ALSA: hda/realtek: Add quirk for Legion Y9000X 2019 - ALSA: hda/realtek: Fix deadlock by COEF mutex - ALSA: hda: Fix regression on forced probe mask option - ALSA: hda: Fix missing codec probe on Shenker Dock 15 - ASoC: ops: Fix stereo change notifications in snd_soc_put_volsw() - ASoC: ops: Fix stereo change notifications in snd_soc_put_volsw_range() - ASoC: ops: Fix stereo change notifications in snd_soc_put_volsw_sx() - ASoC: ops: Fix stereo change notifications in snd_soc_put_xr_sx() - cifs: fix set of group SID via NTSD xattrs - cifs: fix confusing unneeded warning message on smb2.1 and earlier - ACPI: processor: idle: fix lockup regression on 32-bit ThinkPad T40 - [armhf] mtd: rawnand: gpmi: don't leak PM reference in error path - smb3: fix snapshot mount option - tipc: fix wrong notification node addresses - scsi: ufs: Remove dead code - scsi: ufs: Fix a deadlock in the error handler - [arm64] ASoC: qcom: Actually clear DMA interrupt register for HDMI - block/wbt: fix negative inflight counter when remove scsi device - NFS: Remove an incorrect revalidation in nfs4_update_changeattr_locked() - NFS: LOOKUP_DIRECTORY is also ok with symlinks - NFS: Do not report writeback errors in nfs_getattr() - tty: n_tty: do not look ahead for EOL character past the end of the buffer - block: fix surprise removal for drivers calling blk_set_queue_dying - mtd: phram: Prevent divide by zero bug in phram_setup() - scsi: lpfc: Fix pt2pt NVMe PRLI reject LOGO loop - EDAC: Fix calculation of returned address and next offset in edac_align_ptr() - [x86] ptrace: Fix xfpregs_set()'s incorrect xmm clearing - ucounts: Base set_cred_ucounts changes on the real user - ucounts: Handle wrapping in is_ucounts_overlimit - ucounts: Enforce RLIMIT_NPROC not RLIMIT_NPROC+1 - rlimit: Fix RLIMIT_NPROC enforcement failure caused by capability calls in set_user - ucounts: Move RLIMIT_NPROC handling after set_user - net: sched: limit TC_ACT_REPEAT loops - [armhf] dmaengine: stm32-dmamux: Fix PM disable depth imbalance in stm32_dmamux_probe - copy_process(): Move fd_install() out of sighand->siglock critical section - scsi: qedi: Fix ABBA deadlock in qedi_process_tmf_resp() and qedi_process_cmd_cleanup_resp() - ice: enable parsing IPSEC SPI headers for RSS - [arm*] i2c: brcmstb: fix support for DSL and CM variants - HID: elo: fix memory leak in elo_probe - [x86,arm64] Drivers: hv: vmbus: Fix memory leak in vmbus_add_channel_kobj - [x86] KVM: x86/pmu: Refactoring find_arch_event() to pmc_perf_hw_id() - [x86] KVM: x86/pmu: Don't truncate the PerfEvtSeln MSR when creating a perf event - [x86] KVM: x86/pmu: Use AMD64_RAW_EVENT_MASK for PERF_TYPE_RAW - [armhf] OMAP2+: hwmod: Add of_node_put() before break - [armhf] OMAP2+: adjust the location of put_device() call in omapdss_init_of - [arm*] staging: vc04_services: Fix RCU dereference check - [riscv64] irqchip/sifive-plic: Add missing thead,c900-plic match string - [x86] bug: Merge annotate_reachable() into _BUG_FLAGS() asm - netfilter: conntrack: don't refresh sctp entries in closed state - ksmbd: fix same UniqueId for dot and dotdot entries - ksmbd: don't align last entry offset in smb2 query directory - lib/iov_iter: initialize "flags" in new pipe_buffer - mm: io_uring: allow oom-killer from io_uring_setup - [x86] ACPI: PM: Revert "Only mark EC GPE for wakeup on Intel systems" - kconfig: let 'shell' return enough output for deep path names - ata: libata-core: Disable TRIM on M88V29 - [armhf] soc: aspeed: lpc-ctrl: Block error printing on probe defer cases - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create - [arm64,armhf] drm/rockchip: dw_hdmi: Do not leave clock enabled in error case - tracing: Fix tp_printk option related with tp_printk_stop_on_boot - drm/amdgpu: add utcl2_harvest to gc 10.3.1 - net: usb: qmi_wwan: Add support for Dell DW5829e - [arm64,riscv64] net: macb: Align the dma and coherent dma masks - kconfig: fix failing to generate auto.conf . [ Salvatore Bonaccorso ] * Bump ABI to 3 * cgroup-v1: Correct privileges check in release_agent writes * netfilter: xt_socket: fix a typo in socket_mt_destroy() * netfilter: xt_socket: missing ifdef CONFIG_IP6_NF_IPTABLES dependency * netfilter: nf_tables_offload: incorrect flow offload action array size (CVE-2022-25636) . [ Vincent Blut ] * drivers/hid: Enable HID_NINTENDO as module and NINTENDO_FF as built-in (Closes: #1006275) . linux (5.16.10-1) unstable; urgency=medium . * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.8 - [x86] drm/i915: Disable DSB usage for now - selinux: fix double free of cond_list on error paths - audit: improve audit queue handling when "audit=1" on cmdline - ipc/sem: do not sleep with a spin lock held - [armhf] spi: stm32-qspi: Update spi registering - ASoC: hdmi-codec: Fix OOB memory accesses - ASoC: ops: Reject out of bounds values in snd_soc_put_volsw() - ASoC: ops: Reject out of bounds values in snd_soc_put_volsw_sx() - ASoC: ops: Reject out of bounds values in snd_soc_put_xr_sx() - ALSA: usb-audio: Correct quirk for VF0770 - ALSA: hda: Fix UAF of leds class devs at unbinding - ALSA: hda: realtek: Fix race at concurrent COEF updates - ALSA: hda/realtek: Add quirk for ASUS GU603 - ALSA: hda/realtek: Add missing fixup-model entry for Gigabyte X570 ALC1220 quirks - ALSA: hda/realtek: Fix silent output on Gigabyte X570S Aorus Master (newer chipset) - ALSA: hda/realtek: Fix silent output on Gigabyte X570 Aorus Xtreme after reboot from Windows - ata: libata-core: Introduce ATA_HORKAGE_NO_LOG_DIR horkage - btrfs: don't start transaction for scrub if the fs is mounted read-only - btrfs: fix deadlock between quota disable and qgroup rescan worker - btrfs: fix use-after-free after failure to create a snapshot - Revert "fs/9p: search open fids first" - drm/nouveau: fix off by one in BIOS boundary checking - [x86] drm/i915/adlp: Fix TypeC PHY-ready status readout - drm/amdgpu: fix a potential GPU hang on cyan skillfish - drm/amd/display: Update watermark values for DCN301 - drm/amd/display: watermark latencies is not enough on DCN31 - drm/amd/display: Force link_rate as LINK_RATE_RBR2 for 2018 15" Apple Retina panels - mm/pgtable: define pte_index so that preprocessor could recognize it - mm/kmemleak: avoid scanning potential huge holes - block: bio-integrity: Advance seed correctly for larger interval sizes - cifs: fix workstation_name for multiuser mounts - dma-buf: heaps: Fix potential spectre v1 gadget - [amd64] IB/hfi1: Fix panic with larger ipoib send_queue_size - [amd64] IB/hfi1: Fix alloc failure with larger txqueuelen - [amd64] IB/hfi1: Fix AIP early init panic - Revert "fbdev: Garbage collect fbdev scrolling acceleration, part 1 (from TODO list)" - Revert "fbcon: Disable accelerated scrolling" - fbcon: Add option to enable legacy hardware acceleration - mptcp: fix msk traversal in mptcp_nl_cmd_set_flags() - [riscv64] KVM: make CY, TM, and IR counters accessible in VU mode - [arm64] KVM: arm64: Avoid consuming a stale esr value when SError occur - [arm64] KVM: arm64: Stop handle_exit() from handling HVC twice when an SError occurs - [arm64] Add Cortex-A510 CPU part definition - RDMA/cma: Use correct address when leaving multicast group - RDMA/ucma: Protect mc during concurrent multicast leaves - [amd64] IB/rdmavt: Validate remote_addr during loopback atomic tests - RDMA/mlx4: Don't continue event handler after memory allocation failure - ALSA: usb-audio: initialize variables that could ignore errors - ALSA: hda: Fix signedness of sscanf() arguments - ALSA: hda: Skip codec shutdown in case the codec is not registered - [amd64] iommu/vt-d: Fix potential memory leak in intel_setup_irq_remapping() - [amd64] iommu/amd: Fix loop timeout issue in iommu_ga_log_enable() - [arm64,armhf] spi: meson-spicc: add IRQ check in meson_spicc_probe - [amd64] IB/hfi1: Fix tstats alloc and dealloc - IB/cm: Release previously acquired reference counter in the cm_id_priv - net: ieee802154: hwsim: Ensure proper channel selection at probe time - netfilter: nft_reject_bridge: Fix for missing reply from prerouting - net: ieee802154: Return meaningful error codes from the netlink helpers - net/smc: Forward wakeup to smc socket waitqueue after fallback - net: stmmac: properly handle with runtime pm in stmmac_dvr_remove() - net: macsec: Fix offload support for NETDEV_UNREGISTER event - net: macsec: Verify that send_sci is on when setting Tx sci explicitly - net: stmmac: dump gmac4 DMA registers correctly - net, neigh: Do not trigger immediate probes on NUD_FAILED from neigh_managed_work - net: stmmac: ensure PTP time register reads are consistent - [arm64] drm: mxsfb: Fix NULL pointer dereference - [x86] drm/i915/overlay: Prevent divide by zero bugs in scaling - [x86] drm/i915: Lock timeline mutex directly in error path of eb_pin_timeline - drm/amd: avoid suspend on dGPUs w/ s2idle support when runtime PM enabled - ASoC: rt5682: Fix deadlock on resume - [arm*] ASoC: simple-card: fix probe failure on platform component - [arm64] pinctrl: sunxi: Fix H616 I2S3 pin data - [x86] pinctrl: intel: Fix a glitch when updating IRQ flags on a preconfigured line - [x86] pinctrl: intel: fix unexpected interrupt - [arm*] pinctrl: bcm2835: Fix a few error paths - btrfs: fix use of uninitialized variable at rm device ioctl - scsi: bnx2fc: Make bnx2fc_recv_frame() mp safe - nfsd: nfsd4_setclientid_confirm mistakenly expires confirmed client. - [amd64,arm64] gve: fix the wrong AdminQ buffer queue index check - bpf: Use VM_MAP instead of VM_ALLOC for ringbuf - tools/resolve_btfids: Do not print any commands when building silently - e1000e: Separate ADP board type from TGP - rtc: cmos: Evaluate century appropriate - kvm: add guest_state_{enter,exit}_irqoff() - [arm64] kvm/arm64: rework guest entry logic - perf: Copy perf_event_attr::sig_data on modification - [x86] perf/x86/intel/pt: Fix crash with stop filters in single-range mode - [x86] perf: Default set FREEZE_ON_SMI for all - [arm64] EDAC/xgene: Fix deferred probing - ext4: prevent used blocks from being allocated during fast commit replay - ext4: modify the logic of ext4_mb_new_blocks_simple - ext4: fix error handling in ext4_restore_inline_data() - ext4: fix error handling in ext4_fc_record_modified_inode() - ext4: fix incorrect type issue during replay_del_range - cgroup/cpuset: Fix "suspicious RCU usage" lockdep warning - [arm64] gpio: mpc8xxx: Fix an ignored error return from platform_get_irq() https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.9 - ata: libata-core: Fix ata_dev_config_cpr() - moxart: fix potential use-after-free on remove path (CVE-2022-0487) - [s390x] KVM: s390: Return error on SIDA memop on normal guest (CVE-2022-0516) - ksmbd: fix SMB 3.11 posix extension mount failure - crypto: api - Move cryptomgr soft dependency into algapi - tipc: improve size validations for received domain records CVE-2022-0435) https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.10 - integrity: check the return value of audit_log_start() - audit: don't deref the syscall args when checking the openat2 open_how::flags - ima: fix reference leak in asymmetric_verify() - ima: Remove ima_policy file before directory - ima: Allow template selection with ima_template[_fmt]= after ima_hash= - ima: Do not print policy rule with inactive LSM labels - [arm64] mmc: sdhci-of-esdhc: Check for error num after setting mask - mmc: core: Wait for command setting 'Power Off Notification' bit to complete - can: isotp: fix potential CAN frame reception race in isotp_rcv() - can: isotp: fix error path in isotp_sendmsg() to unlock wait queue - net: phy: marvell: Fix RGMII Tx/Rx delays setting in 88e1121-compatible PHYs - net: phy: marvell: Fix MDI-x polarity setting in 88e1118-compatible PHYs - NFS: Fix initialisation of nfs_client cl_flags field - NFSD: Fix NFSv3 SETATTR/CREATE's handling of large file sizes - NFSD: Fix ia_size underflow - NFSD: Clamp WRITE offsets - NFSD: Fix offset type in I/O trace points - NFSD: Fix the behavior of READ near OFFSET_MAX - NFS: change nfs_access_get_cached to only report the mask - NFSv4 only print the label when its queried - nfs: nfs4clinet: check the return value of kstrdup() - NFSv4.1: Fix uninitialised variable in devicenotify - NFSv4 remove zero number of fs_locations entries error check - NFSv4 store server support for fs_location attribute - NFSv4.1 query for fs_location attr on a new file system - NFSv4 expose nfs_parse_server_name function - NFSv4 handle port presence in fs_location server string - SUNRPC allow for unspecified transport time in rpc_clnt_add_xprt - net/sunrpc: fix reference count leaks in rpc_sysfs_xprt_state_change - sunrpc: Fix potential race conditions in rpc_sysfs_xprt_state_change() - [amd64] perf/x86/rapl: fix AMD event handling - [x86] perf: Avoid warning for Arch LBR without XSAVE - sched: Avoid double preemption in __cond_resched_*lock*() - [arm*] drm/vc4: Fix deadlock on DSI device attach error - drm: panel-orientation-quirks: Add quirk for the 1Netbook OneXPlayer - net: sched: Clarify error message when qdisc kind is unknown - [powerpc*] fixmap: Fix VM debug warning on unmap - [arm64] Add Cortex-X2 CPU part definition - [arm64] errata: Update ARM64_ERRATUM_[2119858|2224489] with Cortex-X2 ranges - scsi: target: iscsi: Make sure the np under each tpg is unique - scsi: qedf: Add stag_work to all the vports - scsi: qedf: Fix refcount issue when LOGO is received during TMF - scsi: qedf: Change context reset messages to ratelimited - scsi: pm8001: Fix bogus FW crash for maxcpus=1 - scsi: ufs: Use generic error code in ufshcd_set_dev_pwr_mode() - scsi: ufs: Treat link loss as fatal error - scsi: myrs: Fix crash in error case - net: stmmac: reduce unnecessary wakeups from eee sw timer - PM: hibernate: Remove register_nosave_region_late() - [arm*] usb: dwc2: gadget: don't try to disable ep0 in dwc2_hsotg_suspend - perf: Always wake the parent event - nvme-pci: add the IGNORE_DEV_SUBNQN quirk for Intel P4500/P4600 SSDs - [mips*] Fix build error due to PTR used in more places - [arm64,armhf] net: stmmac: dwmac-sun8i: use return val of readl_poll_timeout() - [arm64] errata: Add detection for TRBE ignored system register writes - [arm64] errata: Add detection for TRBE invalid prohibited states - [arm64] errata: Add detection for TRBE trace data corruption - [arm64] cpufeature: List early Cortex-A510 parts as having broken dbm - KVM: eventfd: Fix false positive RCU usage warning - [x86] KVM: nVMX: eVMCS: Filter out VM_EXIT_SAVE_VMX_PREEMPTION_TIMER - [x86] KVM: nVMX: Also filter MSR_IA32_VMX_TRUE_PINBASED_CTLS when eVMCS - [x86] KVM: SVM: Don't kill SEV guest if SMAP erratum triggers in usermode - [x86] KVM: VMX: Set vmcs.PENDING_DBG.BS on #DB in STI/MOVSS blocking shadow - [x86] KVM: x86: Report deprecated x87 features in supported CPUID - [riscv64] Fix XIP_FIXUP_FLASH_OFFSET - [riscv64] cpu-hotplug: clear cpu from numa map when teardown - [riscv64] mm: Add XIP_FIXUP for phys_ram_base - [riscv64] eliminate unreliable __builtin_frame_address(1) - gfs2: Fix gfs2_release for non-writers regression - Revert "gfs2: check context in gfs2_glock_put" - Revert "PCI/portdrv: Do not setup up IRQs if there are no users" - nvme-tcp: fix bogus request completion when failing to send AER - [arm64] ACPI/IORT: Check node revision for PMCG resources - PM: s2idle: ACPI: Fix wakeup interrupts handling - [arm64,armhf] drm/rockchip: vop: Correct RK3399 VOP register fields - [x86] drm/i915: Disable DRRS on IVB/HSW port != A - [x86] drm/i915: Allow !join_mbus cases for adlp+ dbuf configuration - [x86] drm/i915: Populate pipe dbuf slices more accurately during readout - [x86] drm/i915: Workaround broken BIOS DBUF configuration on TGL/RKL - [armhf] dts: Fix timer regression for beagleboard revision c - [arm64] tee: optee: do not check memref size on return from Secure World - [arm64] optee: add error checks in optee_ffa_do_call_with_arg() - [armhf] phy: stm32: fix a refcount leak in stm32_usbphyc_pll_enable() - usb: f_fs: Fix use-after-free for epfile - [arm64] Enable Cortex-A510 erratum 2051678 by default - [arm64,armhf] phy: dphy: Correct clk_pre parameter - NFS: Don't overfill uncached readdir pages - NFS: Don't skip directory entries when doing uncached readdir - NFS: Avoid duplicate uncached readdir calls on eof - [arm*] drm/vc4: hdmi: Allow DBLCLK modes even if horz timing is odd. - netfilter: nft_payload: don't allow th access for fragments - netfilter: ctnetlink: disable helper autoassign - [arm64] dts: meson-sm1-bananapi-m5: fix wrong GPIO domain for GPIOE_2 - ixgbevf: Require large buffers for build_skb on 82599VF - tcp: take care of mixed splice()/sendmsg(MSG_ZEROCOPY) case - [arm64] net: mscc: ocelot: fix all IP traffic getting trapped to CPU with PTP over IP - [arm64,armhf] drm/panel: simple: Assign data from panel_dpi_probe() correctly - ACPI: PM: s2idle: Cancel wakeup before dispatching EC GPE - gpiolib: Never return internal error codes to user space - [riscv64] gpio: sifive: use the correct register to read output values - fbcon: Avoid 'cap' set but not used warning - SUNRPC: lock against ->sock changing during sysfs read - [arm64,arm64] gve: Recording rx queue before sending to napi - bonding: pair enable_port with slave_arr_updates - [arm64,armhf] net: dsa: mv88e6xxx: don't use devres for mdiobus - [armhf] net: dsa: bcm_sf2: don't use devres for mdiobus - [arm64] net: dsa: felix: don't use devres for mdiobus - ipmr,ip6mr: acquire RTNL before calling ip[6]mr_free_table() on failure path - nfp: flower: fix ida_idx not being released - net: do not keep the dst cache when uncloning an skb dst and its metadata - net: fix a memleak when uncloning an skb dst and its metadata - veth: fix races around rq->rx_notify_masked - [armhf] net: mdio: aspeed: Add missing MODULE_DEVICE_TABLE - tipc: rate limit warning for received illegal binding update - [amd64,armhf] net: amd-xgbe: disable interrupts during pci removal - [amd64,armhf] net: dsa: fix panic when DSA master device unbinds on shutdown - mptcp: netlink: process IPv6 addrs in creating listening sockets - [arm64] dpaa2-eth: unregister the netdev before disconnecting from the PHY - ice: fix an error code in ice_cfg_phy_fec() - ice: fix IPIP and SIT TSO offload - ice: Avoid RTNL lock when re-creating auxiliary device - [arm64] net: mscc: ocelot: fix mutex lock error during ethtool stats read - [arm64,armhf] net: dsa: mv88e6xxx: fix use-after-free in mv88e6xxx_mdios_unregister - vt_ioctl: fix array_index_nospec in vt_setactivate - vt_ioctl: add array_index_nospec to VT_ACTIVATE - n_tty: wake up poll(POLLRDNORM) on receiving data - eeprom: ee1004: limit i2c reads to I2C_SMBUS_BLOCK_MAX - [arm*] usb: dwc2: drd: fix soft connect when gadget is unconfigured - [arm*] Revert "usb: dwc2: drd: fix soft connect when gadget is unconfigured" - net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup - [arm64,armhf] usb: ulpi: Move of_node_put to ulpi_dev_release - [arm64,armhf] usb: ulpi: Call of_node_put correctly - [arm64,armhf] usb: dwc3: gadget: Prevent core from processing stale TRBs - USB: gadget: validate interface OS descriptor requests (CVE-2022-25258) - usb: gadget: rndis: check size of RNDIS_MSG_SET command - usb: gadget: f_uac2: Define specific wTerminalType - USB: serial: ftdi_sio: add support for Brainboxes US-159/235/320 - USB: serial: option: add ZTE MF286D modem - USB: serial: ch341: add support for GW Instek USB2.0-Serial devices - USB: serial: cp210x: add NCR Retail IO box id - USB: serial: cp210x: add CPI Bulk Coin Recycler id - speakup-dectlk: Restore pitch setting - iio: buffer: Fix file related error handling in IIO_BUFFER_GET_FD_IOCTL - fs/proc: task_mmu.c: don't read mapcount for migration entry - mm: vmscan: remove deadlock due to throttling failing to make progress - mm: memcg: synchronize objcg lists with a dedicated spinlock - seccomp: Invalidate seccomp mode to catch death failures - signal: HANDLER_EXIT should clear SIGNAL_UNKILLABLE - [s390x] cio: verify the driver availability for path_event call - bus: mhi: pci_generic: Add mru_default for Foxconn SDX55 - bus: mhi: pci_generic: Add mru_default for Cinterion MV31-W - scsi: lpfc: Remove NVMe support if kernel has NVME_FC disabled - scsi: lpfc: Reduce log messages seen after firmware download - [mips64el,mipsel] octeon: Fix missed PTR->PTR_WD conversion - perf: Fix list corruption in perf_cgroup_switch() - iommu: Fix potential use-after-free during probe . [ Salvatore Bonaccorso ] * Bump ABI to 2 * [rt] Refresh "mm/memcg: Add a local_lock_t for IRQ and TASK object." * bpf: Introduce composable reg, ret and arg types. * bpf: Replace ARG_XXX_OR_NULL with ARG_XXX | PTR_MAYBE_NULL * bpf: Replace RET_XXX_OR_NULL with RET_XXX | PTR_MAYBE_NULL * bpf: Replace PTR_TO_XXX_OR_NULL with PTR_TO_XXX | PTR_MAYBE_NULL * bpf: Introduce MEM_RDONLY flag * bpf: Convert PTR_TO_MEM_OR_NULL to composable types. * bpf: Make per_cpu_ptr return rdonly PTR_TO_MEM. * bpf: Add MEM_RDONLY for helper args that are pointers to rdonly mem. * bpf/selftests: Test PTR_TO_RDONLY_MEM . [ Luca Boccassi ] * drivers/watchdog: enable CONFIG_WATCHDOG_HRTIMER_PRETIMEOUT . linux (5.16.7-2) unstable; urgency=medium . * linux-perf: Protect invocation of dpkg-divert to run only on relevant actions in maintscripts. Thanks to Guillem Jover (Closes: #1005141) . linux (5.16.7-1) unstable; urgency=medium . * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.5 - Bluetooth: refactor malicious adv data check - btrfs: fix too long loop when defragging a 1 byte file - btrfs: allow defrag to be interruptible - btrfs: defrag: fix wrong number of defragged sectors - btrfs: defrag: properly update range->start for autodefrag - btrfs: fix deadlock when reserving space during defrag - btrfs: add back missing dirty page rate limiting to defrag - btrfs: update writeback index when starting defrag - net: sfp: ignore disabled SFP node - net: stmmac: configure PTP clock source prior to PTP initialization - net: stmmac: skip only stmmac_ptp_register when resume from suspend - [armel,armhf] 9179/1: uaccess: avoid alignment faults in copy_[from|to]_kernel_nofault - [armel,armhf] 9180/1: Thumb2: align ALT_UP() sections in modules sufficiently - [arm64] KVM: arm64: vgic-v3: Restrict SEIS workaround to known broken systems - [s390x] module: fix loading modules with a lot of relocations - [s390x] hypfs: include z/VM guests with access control group set - [s390x] nmi: handle guarded storage validity failures for KVM guests - [s390x] nmi: handle vector validity failures for KVM guests - bpf: Guard against accessing NULL pt_regs in bpf_get_task_stack() - [s390x] scsi: zfcp: Fix failed recovery on gone remote port with non-NPIV FCP devices - udf: Restore i_lenAlloc when inode expansion fails - udf: Fix NULL ptr deref when converting from inline format - [x86] efi: runtime: avoid EFIv2 runtime services on Apple x86 machines - tracing: Don't inc err_log entry count if entry allocation fails - ceph: properly put ceph_string reference after async create attempt - ceph: set pool_ns in new inode layout for async creates - fsnotify: invalidate dcache before IN_DELETE event - fsnotify: fix fsnotify hooks in pseudo filesystems - Revert "KVM: SVM: avoid infinite loop on NPF from bad address" - psi: Fix uaf issue when psi trigger is destroyed while being polled - [x86] perf/x86/intel/uncore: Fix CAS_COUNT_WRITE issue for ICX - [x86] perf/x86/intel: Add a quirk for the calculation of the number of counters on Alder Lake - [arm64,armhf] drm/etnaviv: relax submit size limits - drm/atomic: Add the crtc to affected crtc only if uapi.enable = true - drm/amdgpu: filter out radeon secondary ids as well - [x86] KVM: LAPIC: Also cancel preemption timer during SET_LAPIC - [x86] KVM: SVM: Never reject emulation due to SMAP errata for !SEV guests - [x86] KVM: SVM: Don't intercept #GP for SEV guests - [x86] KVM: x86: nSVM: skip eax alignment check for non-SVM instructions - [x86] KVM: x86: Move CPUID.(EAX=0x12,ECX=1) mangling to __kvm_update_cpuid_runtime() - [x86] KVM: x86: Free kvm_cpuid_entry2 array on post-KVM_RUN KVM_SET_CPUID{,2} - [x86] KVM: x86: Forcibly leave nested virt when SMM state is toggled - [x86] KVM: x86: Check .flags in kvm_cpuid_check_equal() too - [x86] KVM: x86: Keep MSR_IA32_XSS unchanged for INIT - [x86] KVM: x86: Update vCPU's runtime CPUID on write to MSR_IA32_XSS - [x86] KVM: x86: Sync the states size with the XCR0/IA32_XSS at, any time - [powerpc*] KVM: PPC: Book3S HV Nested: Fix nested HFSCR being clobbered with multiple vCPUs - security, lsm: dentry_init_security() Handle multi LSM registration - [arm64] extable: fix load_unaligned_zeropad() reg indices - dm: revert partial fix for redundant bio-based IO accounting - block: add bio_start_io_acct_time() to control start_time - dm: properly fix redundant bio-based IO accounting - [arm*] serial: pl011: Fix incorrect rs485 RTS polarity on set_mctrl - serial: 8250: of: Fix mapped region size when using reg-offset property - [armhf] serial: stm32: fix software flow control transfer - tty: n_gsm: fix SW flow control encoding/handling - tty: Add support for Brainboxes UC cards. - usb-storage: Add unusual-devs entry for VL817 USB-SATA bridge - usb: xhci-plat: fix crash when suspend if remote wake enable - [arm64,armhf] usb: common: ulpi: Fix crash in ulpi_match() - usb: gadget: f_sourcesink: Fix isoc transfer for USB_SPEED_SUPER_PLUS - [arm64] usb: dwc3: xilinx: Skip resets and USB3 register settings for USB2.0 mode - [arm64] usb: dwc3: xilinx: Fix error handling when getting USB3 PHY - USB: core: Fix hang in usb_kill_urb by adding memory barriers - [arm64] usb: typec: tcpci: don't touch CC line if it's Vconn source - usb: typec: tcpm: Do not disconnect while receiving VBUS off - usb: typec: tcpm: Do not disconnect when receiving VSAFE0V - mt76: connac: introduce MCU_CE_CMD macro - jbd2: export jbd2_journal_[grab|put]_journal_head - ocfs2: fix a deadlock when commit trans - sched/membarrier: Fix membarrier-rseq fence command missing from query bitmask - PCI/sysfs: Find shadow ROM before static attribute initialization - [x86] MCE/AMD: Allow thresholding interface updates after init - [x86] cpu: Add Xeon Icelake-D to list of CPUs that support PPIN - i40e: Increase delay to 1 s after global EMP reset - i40e: Fix issue when maximum queues is exceeded - i40e: Fix queues reservation for XDP - i40e: Fix for failed to init adminq while VF reset - i40e: fix unsigned stat widths - scsi: bnx2fc: Flush destroy_work queue before calling bnx2fc_interface_put() - ipv6_tunnel: Rate limit warning messages - [armel,armhf] 9170/1: fix panic when kasan and kprobe are enabled - net: fix information leakage in /proc/net/ptype - hwmon: (lm90) Mark alert as broken for MAX6646/6647/6649 - hwmon: (lm90) Mark alert as broken for MAX6680 - ping: fix the sk_bound_dev_if match in ping_lookup - ipv4: avoid using shared IP generator for connected sockets - hwmon: (lm90) Reduce maximum conversion rate for G781 - NFSv4: Handle case where the lookup of a directory fails - NFSv4: nfs_atomic_open() can race when looking up a non-regular file - net-procfs: show net devices bound packet types - [arm64] drm/msm: Fix wrong size calculation - [arm64] drm/msm/dsi: Fix missing put_device() call in dsi_get_phy - [arm64] drm/msm/dsi: invalid parameter check in msm_dsi_phy_enable - ipv6: annotate accesses to fn->fn_sernum - NFS: Ensure the server has an up to date ctime before hardlinking - NFS: Ensure the server has an up to date ctime before renaming - [arm64] KVM: arm64: pkvm: Use the mm_ops indirection for cache maintenance - SUNRPC: Don't dereference xprt->snd_task if it's a cookie - netfilter: conntrack: don't increment invalid counter on NF_REPEAT - [powerpc*] 64s: Mask SRR0 before checking against the masked NIP - perf: Fix perf_event_read_local() time - sched/pelt: Relax the sync of util_sum with util_avg - net: phy: broadcom: hook up soft_reset for BCM54616S - ethtool: Fix link extended state for big endian - phylib: fix potential use-after-free - rxrpc: Adjust retransmission backoff - [arm64] efi/libstub: arm64: Fix image check alignment at entry - io_uring: fix bug in slow unregistering of nodes - block: fix memory leak in disk_register_independent_access_ranges - [x86] Drivers: hv: balloon: account for vmbus packet header in max_pkt_size - hwmon: (lm90) Re-enable interrupts after alert clears - hwmon: (lm90) Mark alert as broken for MAX6654 - hwmon: (lm90) Fix sysfs and udev notifications - hwmon: (adt7470) Prevent divide by zero in adt7470_fan_write() - ipv4: fix ip option filtering for locally generated fragments - net/smc: Transitional solution for clcsock race issue - video: hyperv_fb: Fix validation of screen resolution - hwmon: (nct6775) Fix crash in clear_caseopen - [arm64] drm/msm/hdmi: Fix missing put_device() call in msm_hdmi_get_phy - [arm64] drm/msm/dpu: invalid parameter check in dpu_setup_dspp_pcc - [arm64] drm/msm/a6xx: Add missing suspend_count increment - yam: fix a memory leak in yam_siocdevprivate() - [armhf] net: cpsw: Properly initialise struct page_pool_params - [arm64] net: hns3: handle empty unknown interrupt for VF - sch_htb: Fail on unsupported parameters when offload is requested - ceph: put the requests/sessions when it fails to alloc memory - gve: Fix GFP flags when allocing pages - Revert "ipv6: Honor all IPv6 PIO Valid Lifetime values" - net: bridge: vlan: fix single net device option dumping - ipv4: raw: lock the socket in raw_bind() - ipv4: tcp: send zero IPID in SYNACK messages - ipv4: remove sparse error in ip_neigh_gw4() - net: bridge: vlan: fix memory leak in __allowed_ingress - dt-bindings: can: tcan4x5x: fix mram-cfg RX FIFO config - perf/core: Fix cgroup event list management - [arm64] usb: dwc3: xilinx: fix uninitialized return value - [x86] KVM: nVMX: Rename vmcs_to_field_offset{,_table} - [x86] KVM: nVMX: Implement evmcs_field_offset() suitable for handle_vmread() - [x86] KVM: nVMX: Allow VMREAD when Enlightened VMCS is in use - block: Fix wrong offset in bio_truncate() https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.6 - PCI: pciehp: Fix infinite loop in IRQ handler upon power fault - [arm*] drm/vc4: hdmi: Make sure the device is powered with CEC - cgroup-v1: Require capabilities to set release_agent (CVE-2022-0492) - Revert "mm/gup: small refactoring: simplify try_grab_page()" - net: phy: Fix qca8081 with speeds lower than 2.5Gb/s - ovl: don't fail copy up if no fileattr support on upper - lockd: fix server crash on reboot of client holding lock - lockd: fix failure to cleanup client locks - net/mlx5e: TC, Reject rules with drop and modify hdr action - net/mlx5: Bridge, take rtnl lock in init error handler - net/mlx5e: Fix handling of wrong devices during bond netevent - net/mlx5: Use del_timer_sync in fw reset flow of halting poll - net/mlx5e: Fix module EEPROM query - net/mlx5e: TC, Reject rules with forward and drop actions - net/mlx5: Fix offloading with ESWITCH_IPV4_TTL_MODIFY_ENABLE - net/mlx5e: Don't treat small ceil values as unlimited in HTB offload - net/mlx5: Bridge, Fix devlink deadlock on net namespace deletion - net/mlx5e: Avoid field-overflowing memcpy() - net/mlx5e: Fix wrong calculation of header index in HW_GRO - net/mlx5e: Fix broken SKB allocation in HW-GRO - net/mlx5: E-Switch, Fix uninitialized variable modact - net/mlx5e: Avoid implicit modify hdr for decap drop rule - ipheth: fix EOVERFLOW in ipheth_rcvbulk_callback - i40e: Fix reset bw limit when DCB enabled with 1 TC - i40e: Fix reset path while removing the driver - [amd64,arm64] net: amd-xgbe: ensure to reset the tx_timer_active flag - [amd64,arm64] net: amd-xgbe: Fix skb data length underflow - fanotify: Fix stale file descriptor in copy_event_to_user() - net: sched: fix use-after-free in tc_new_tfilter() - rtnetlink: make sure to refresh master_dev/m_ops in __rtnl_newlink() - bpf: Fix possible race in inc_misses_counter - cpuset: Fix the bug that subpart_cpus updated wrongly in update_cpumask() - e1000e: Handshake with CSME starts from ADL platforms - af_packet: fix data-race in packet_setsockopt / packet_setsockopt - tcp: fix mem under-charging with zerocopy sendmsg() - tcp: add missing tcp_skb_can_collapse() test in tcp_shift_skb_data() - ovl: fix NULL pointer dereference in copy up warning https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.7 - [arm*] Revert "drm/vc4: hdmi: Make sure the device is powered with CEC" - [arm*] Revert "drm/vc4: hdmi: Make sure the device is powered with CEC" again . [ Salvatore Bonaccorso ] * Set ABI to 1 . linux (5.16.4-1~exp1) experimental; urgency=medium . * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.4 - io_uring: fix not released cached task refs - bnx2x: Utilize firmware 7.13.21.0 - bnx2x: Invalidate fastpath HSI version for VFs - memcg: better bounds on the memcg stats updates - rcu: Tighten rcu_advance_cbs_nowake() checks - select: Fix indefinitely sleeping task in poll_schedule_timeout() - [arm64] bpf: Remove 128MB limit for BPF JIT programs . * objtool: check: give big enough buffer for pv_ops (Closes: #1004495) * Refresh "firmware: Remove redundant log messages from drivers" * [rt] Refresh "mm/memcg: Protect per-CPU counter by disabling preemption on PREEMPT_RT where needed." . linux (5.16.3-1~exp1) experimental; urgency=medium . * New upstream release: https://kernelnewbies.org/Linux_5.16 * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.1 - bpf: Fix out of bounds access from invalid *_or_null type verification (CVE-2022-23222) https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.2 https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.3 - netfilter: nft_payload: do not update layer 4 checksum when mangling fragments (Closes: #1002706) . [ Helmut Grohne ] * Multiarchify python build-depends. (Closes: #983757) . [ Ben Hutchings ] * linux-perf: Fix detection of libperl and libpython in cross-build * debian/README.source: Tag signatures are automatically verified * [rt] trace: Enable OSNOISE_TRACER, TIMERLAT_TRACER, HIST_TRIGGERS * d/bin/git-tag-gpg-wrapper, debian/upstream: Use ASCII-armored keyring * d/watch: Rewrite to find all upstream versions through Git * d/bin/genorig.py, d/README.source: Only support Git as upstream * d/bin/genorig.py, d/README.source: Add support for remote upstream repos * lintian: Refresh lintian-overrides * d/copyright: Fix license name with spaces in it * d/copyright: Update for removed and renamed source files * d/tests/selftests: Use $AUTOPKGTEST_TMP instead of $ADTTMP * Fix missing user-space hardening: - d/rules.real: Define KBUILD_HOST{C,LD}FLAGS for sub-make - linux-kbuild: Build modpost with standard CPPFLAGS - cpupower: Build with standard CPPFLAGS - usbip: Build with standard CPPFLAGS - objtool: Build with standard CFLAGS and CPPFLAGS - tools/perf: Define DEBUG=0 for sub-make so libapi doesn't use wrong flags - libapi: Define _FORTIFY_SOURCE as 2, not empty - tools/perf: Fix missing LDFLAGS for some programs * d/rules: Tell blhc to ignore missing flags for perf-read-vdso* helpers * d/rules: Tell blhc to ignore kernel compilation * d/rules: Filter out -s option so that Kbuild is not silent * d/bin/gencontrol.py, d/lib/python: Use classes for build restriction formulae * d/bin/gencontrol.py, d/rules.real: Replace DEBUG variable with if_package * Introduce pkg.linux.quick build profile for quicker CI builds * d/salsa-ci.yml: Add CI config using some of the common pipeline * d/salsa-ci.yml, d/tests/python: Only run static checks in CI * d/salsa-ci.yml: Run kconfigeditor2 as kconfig static check * d/rules, d/salsa-ci.yml: Enable blhc, ignoring terse output * bpftool, objtool, usbip: Always build with V=1 so blhc can check them * d/salsa-ci.yml: Use per-release cache of orig tarballs * linux-perf: Build a single unversioned package of perf, as it is no longer necessary to match the kernel version . [ Vincent Blut ] * drivers/net/wireless/realtek/rtw89: Enable RTW89 and RTW89_8852AE as modules (Closes: #1004095) . [ Aurelien Jarno ] * [riscv64] Add support for SBI SRST extension . [ YunQiang Su ] * [mips*/generic] Change zload address for QEMU compatibility. . [ Salvatore Bonaccorso ] * [rt] Update to 5.16.2-rt18 * [rt] Update to 5.16.2-rt19 * [x86] drm/i915: Flush TLBs before releasing backing store (CVE-2022-0330) * drm/vmwgfx: Fix stale file descriptors on failed usercopy (CVE-2022-22942) . [ Bastian Blank ] * Build-depend on pahole after rename from dwarves. * Remove remaining aufs patches for good. . linux (5.16~rc8-1~exp1) experimental; urgency=medium . * New upstream release candidate . [ YunQiang Su ] * [mips*] unify installer flavors * [mips*] add generic platform and remove 5kc-malta from 32bit ports . [ Alper Nebi Yasak ] * [armhf,arm64] drivers/gpu/drm/panel: Enable DRM_PANEL_EDP as module * [arm64] Include panel-edp in fb-modules udeb . [ Noah Meyerhans ] * net: Use fq_codel as the default network qdisc (Closes: #890343) . [ Salvatore Bonaccorso ] * [rt] Update to 5.16-rc8-rt13 . linux (5.16~rc7-1~exp1) experimental; urgency=medium . * New upstream release candidate . [ Uwe Kleine-König ] * [arm64] enable DRM_VMWGFX_FBCON to get a tty to login in the absence of a graphical login manager. . [ Vincent Blut ] * [x86] drivers/platform/surface/aggregator: Enable SURFACE_AGGREGATOR as module (Closes: #1002460) * [x86] drivers/platform/surface: Enable SURFACE_3_POWER_OPREGION, SURFACE_ACPI_NOTIFY, SURFACE_AGGREGATOR_REGISTRY, SURFACE_DTX, SURFACE_GPE, SURFACE_HOTPLUG and SURFACE_PLATFORM_PROFILE as modules * [x86] drivers/hid/surface-hid: Enable SURFACE_HID and SURFACE_KBD as modules * [x86] drivers/power/supply: Enable BATTERY_SURFACE and CHARGER_SURFACE as modules . [ Salvatore Bonaccorso ] * [rt] Update to 5.16-rc6-rt12 * [x86] drivers/firmware/google: Re-enable GOOGLE_FIRMWARE (Closes: #947179) . linux (5.16~rc6-1~exp1) experimental; urgency=medium . * New upstream release candidate . [ Aurelien Jarno ] * [riscv64] Improve HiFive Unmatched support: enable INPUT_DA9063_ONKEY, MFD_DA9063, REGULATOR_DA9063, RTC_DRV_DA9063, DA9063_WATCHDOG. . [ Salvatore Bonaccorso ] * xen/blkfront: harden blkfront against event channel storms (CVE-2021-28711) * xen/netfront: harden netfront against event channel storms (CVE-2021-28712) * xen/console: harden hvc_xen against event channel storms (CVE-2021-28713) * xen/netback: fix rx queue stall detection (CVE-2021-28714) * xen/netback: don't queue unlimited number of packages (CVE-2021-28715) . linux (5.16~rc5-1~exp1) experimental; urgency=medium . * New upstream release candidate - nfsd: fix use-after-free due to delegation race (Closes: #988044) . [ Salvatore Bonaccorso ] * [rt] Update to 5.16-rc5-rt10 * Refresh "Export symbols needed by Android drivers" * net/tls: Enable TLS_DEVICE (Closes: #1001731) . linux (5.16~rc4-1~exp1) experimental; urgency=medium . * New upstream release candidate . [ Salvatore Bonaccorso ] * [rt] Update to 5.16-rc4-rt8 * Makefile: Do not quote value for CONFIG_CC_IMPLICIT_FALLTHROUGH (Closes: #1001083) * [arm64] drivers/iio/adc: Enable QCOM_SPMI_IADC, QCOM_SPMI_VADC and ROCKCHIP_SARADC as modules (Closes: #1001080) * [armhf] drivers/iio/adc: Enable ASPEED_ADC, EXYNOS_ADC, ROCKCHIP_SARADC, TI_AM335X_ADC and TWL4030_MADC as modules (Closes: #1001080) . linux (5.16~rc3-1~exp1) experimental; urgency=medium . * New upstream release candidate . [ Salvatore Bonaccorso ] * [rt] Update to 5.16-rc2-rt4 * [arm64] drivers/firmware/efi: Enable EFI_GENERIC_STUB_INITRD_CMDLINE_LOADER (Closes: #997907) * liblockdep: Remove code to build liblockdep packages * [rt] Update to 5.16-rc3-rt5 . [ Uwe Kleine-König ] * [arm*] Enable support for Raspberry Pi POE hat (PWM_RASPBERRYPI_POE) * [arm*] Enable suport for pinctrl-based I2C multiplexer (I2C_MUX_PINCTRL). These are used (among others) on the Raspberry Pi CM4 IO Board. . linux (5.16~rc1-1~exp1) experimental; urgency=medium . * New upstream release candidate . [ Salvatore Bonaccorso ] * [rt] Update to 5.16-rc1-rt2 * fs/ksmbd: Enable SMB_SERVER as module (Closes: #998835) . [ Aurelien Jarno ] * [riscv64] Enable VIRTUALIZATION and KVM. Checksums-Sha1: 7e69b11ac969f3138b8aa4e9042da1da2ca0dee1 265640 linux_5.16.11-1~bpo11+1.dsc 191e4fb02e220324f474bbbb09f2a7a23b4e71d2 1309352 linux_5.16.11-1~bpo11+1.debian.tar.xz 8aff4cd88633742739cd0896d0d0ee4908a4317c 5992 linux_5.16.11-1~bpo11+1_source.buildinfo Checksums-Sha256: 44cfaeb9f7dbf71cee1a3870fb332ae1aaf932052ea02fc9ade7a618e6798a28 265640 linux_5.16.11-1~bpo11+1.dsc 7635ff69c9b2139f76faca4b300923ee464b2a6f75c1af6737a04ae5929a8977 1309352 linux_5.16.11-1~bpo11+1.debian.tar.xz a60625152b4bf02731c31239ff08b094656a23719c083fcdd751d3ab075fa47b 5992 linux_5.16.11-1~bpo11+1_source.buildinfo Files: 5a56d38269895da5ec71dc26aef8d087 265640 kernel optional linux_5.16.11-1~bpo11+1.dsc 444b93ec0fcccafe60805bc7fbdaf18f 1309352 kernel optional linux_5.16.11-1~bpo11+1.debian.tar.xz 1cf352967384928b82ad6998b1c0da8d 5992 kernel optional linux_5.16.11-1~bpo11+1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEErCspvTSmr92z9o8157/I7JWGEQkFAmIjy/cACgkQ57/I7JWG EQmW6Q/+L710O0tMQWKJ041XW7sxMrzrlBXrwbHnTuegS3eARQDi+3Tdp5kvgJDo h/HZL47adRZaYnfyBoyYdp7TdgJ5X+LWLWqYFPYy779puxOOI57WtWIcA5f4WBmd TEoW9s+Z+QA9A7F2srO2YzU+Zkyn30HiGP+EX446+cNcY0GWtnfY65NYt0jkE/EK FcCeZJWzGwvB6qoHosrrVurR1IW4M0k9xZSFwWAOFioRPyvoU8604EyKnBc11aOz kM+Xjffz+J9klH/qF8c6t5LnhlsMg+Z3Z3xIlfzbimw4dei+2SbnThwYsVL7j5SB SM+0EO32OHcoHUyKuD5If2w7xBDYBtYeQXnDuqfdP9yB/Y+V1J6UltjidHktKvdX 6Tq8/udoZ7aLD7yD7IIsGhKBjC94Za7E7gYPaO4/KEv9PRGQcWAfzygTFzGH1z5X 0teCcmAUfm7yiKncMy4B2F36iQ5s9/uzW268PNyPnNSugVq8DjZ6p8+oN4y5jv6F lwUDq7p/l19j8H5MDXw8mT3scU87KVsOds/fnbO1R0qH8KJ54a9EvPr3cQejk44n wqewJoeA6pU7m1jc53YrN6zM4h2L+4xPhPUwr3D8DZKFisSweOpX1ijAkPqE0UD/ jB3H+tYlZ0J3vkz73mXTvtyxfxHhsMuA5vVsHngjc6OShTTdI8g= =IMDM -----END PGP SIGNATURE-----
