-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Tue, 15 Mar 2022 07:54:31 +0100
Source: linux
Architecture: source
Version: 5.16.14-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Kernel Team <debian-kernel@lists.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Changes:
linux (5.16.14-1) unstable; urgency=medium
.
* New upstream stable update:
https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.13
- mac80211_hwsim: report NOACK frames in tx_status
- mac80211_hwsim: initialize ieee80211_tx_info at hw_scan_work
- [arm*] i2c: bcm2835: Avoid clock stretching timeouts
- [x86] ASoC: rt5682s: do not block workqueue if card is unbound
- ASoC: rt5682: do not block workqueue if card is unbound
- regulator: core: fix false positive in regulator_late_cleanup()
- Input: clear BTN_RIGHT/MIDDLE on buttonpads
- btrfs: get rid of warning on transaction commit when using flushoncommit
- [arm64] KVM: arm64: vgic: Read HW interrupt pending state from the HW
- block: loop:use kstatfs.f_bsize of backing file to set discard granularity
- tipc: fix a bit overflow in tipc_crypto_key_rcv()
- cifs: do not use uninitialized data in the owner/group sid
- cifs: fix double free race when mount fails in cifs_get_root()
- [amd64] HID: amd_sfh: Handle amd_sfh work buffer in PM ops
- [amd64] HID: amd_sfh: Add functionality to clear interrupts
- [amd64] HID: amd_sfh: Add interrupt handler to process interrupts
- cifs: modefromsids must add an ACE for authenticated users
- drm/amd/pm: correct UMD pstate clocks for Dimgrey Cavefish and Beige Goby
- net: usb: cdc_mbim: avoid altsetting toggling for Telit FN990
- block-map: add __GFP_ZERO flag for alloc_page in function bio_copy_kern
- usb: gadget: don't release an existing dev->buf (CVE-2022-24958)
- usb: gadget: clear related members when goto fail (CVE-2022-24958)
- exfat: reuse exfat_inode_info variable instead of calling EXFAT_I()
- exfat: fix i_blocks for files truncated over 4 GiB
- tracing: Add test for user space strings when filtering on string pointers
- [arm64] Mark start_backtrace() notrace and NOKPROBE_SYMBOL
- [armhf] serial: stm32: prevent TDR register overwrite when sending x_char
- [arm64] KVM: arm64: Workaround Cortex-A510's single-step and PAC trap
errata
- ext4: drop ineligible txn start stop APIs
- ext4: simplify updating of fast commit stats
- ext4: fast commit may not fallback for ineligible commit
- ext4: fast commit may miss file actions
- sched/fair: Fix fault in reweight_entity
- [x86] KVM: x86: Add KVM_CAP_ENABLE_CAP to x86
- ata: pata_hpt37x: fix PCI clock detection
- drm/amdgpu: check vm ready by amdgpu_vm->evicting flag
- tracing: Add ustring operation to filtering string pointers
- ipv6: fix skb drops in igmp6_event_query() and igmp6_event_report()
(CVE-2022-0742)
- btrfs: defrag: bring back the old file extent search behavior
- btrfs: defrag: don't use merged extent map for their generation check
- [x86] ALSA: intel_hdmi: Fix reference to PCM buffer address
- ucounts: Fix systemd LimitNPROC with private users regression
- binfmt_elf: Avoid total_mapping_size for ET_EXEC
- ASoC: ops: Shift tested values in snd_soc_put_volsw() by +min
- [amd64] iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
- [amd64] iommu/amd: Recover from event log overflow
- [x86] drm/i915: s/JSP2/ICP2/ PCH
- drm/amd/display: Reduce dmesg error to a debug print
- xen/netfront: destroy queues before real_num_tx_queues is zeroed
- mac80211: fix EAPoL rekey fail in 802.3 rx path
- blktrace: fix use after free for struct blk_trace
- mm: Consider __GFP_NOWARN flag for oversized kvmalloc() calls
- xfrm: fix MTU regression
- netfilter: fix use-after-free in __nf_register_net_hook()
- bpf, sockmap: Do not ignore orig_len parameter
- xfrm: fix the if_id check in changelink
- xfrm: enforce validity of offload input flags
- e1000e: Correct NVM checksum verification flow
- net: fix up skbs delta_truesize in UDP GRO frag_list
- netfilter: nf_queue: don't assume sk is full socket
- netfilter: nf_queue: fix possible use-after-free
- netfilter: nf_queue: handle socket prefetch
- batman-adv: Request iflink once in batadv-on-batadv check
- batman-adv: Request iflink once in batadv_get_real_netdevice
- batman-adv: Don't expect inter-netns unique iflink indices
- net: ipv6: ensure we call ipv6_mc_down() at most once
- net: dcb: flush lingering app table entries for unregistered devices
- net/smc: fix connection leak
- net/smc: fix unexpected SMC_CLC_DECL_ERR_REGRMB error generated by client
- net/smc: fix unexpected SMC_CLC_DECL_ERR_REGRMB error cause by server
- btrfs: fix ENOSPC failure when attempting direct IO write into NOCOW range
- [amd64] platform/x86: amd-pmc: Set QOS during suspend on CZN w/ timer
wakeup
- mac80211: fix forwarded mesh frames AC & queue selection
- net: stmmac: fix return value of __setup handler
- mac80211: treat some SAE auth steps as final
- iavf: Fix missing check for running netdev
- net: arcnet: com20020: Fix null-ptr-deref in com20020pci_probe()
- ixgbe: xsk: change !netif_carrier_ok() handling in ixgbe_xmit_zc()
- iavf: Fix deadlock in iavf_reset_task
- efivars: Respect "block" flag in efivar_entry_set_safe()
- [armhf] firmware: arm_scmi: Remove space in MODULE_ALIAS name
- can: gs_usb: change active_channels's type from atomic_t to u8
- [arm64,armhf] iommu/tegra-smmu: Fix missing put_device() call in
tegra_smmu_find
- igc: igc_read_phy_reg_gpy: drop premature return
- [mips*] setup: fix setnocoherentio() boolean setting
- [armel,armhf] 9182/1: mmu: fix returns from early_param() and __setup()
functions
- mptcp: Correctly set DATA_FIN timeout when number of retransmits is large
- [arm64,armhf] pinctrl: sunxi: Use unique lockdep classes for IRQs
- igc: igc_write_phy_reg_gpy: drop premature return
- memfd: fix F_SEAL_WRITE after shmem huge page allocated
- [s390x] setup: preserve memory at OLDMEM_BASE and OLDMEM_SIZE
- [s390x] extable: fix exception table sorting
- sched: Fix yet more sched_fork() races
- [arm64] dts: rockchip: fix Quartz64-A ddr regulator voltage
- [amd64] iommu/amd: Fix I/O page table memory leak
- [armhf] dts: switch timer config to common devkit8000 devicetree
- [armhf] dts: Use 32KiHz oscillator on devkit8000
- [arm64] soc: fsl: guts: Revert commit 3c0d64e867ed
- [arm64] soc: fsl: guts: Add a missing memory allocation failure check
- [arm64] soc: imx: gpcv2: Fix clock disabling imbalance in error path
- netfilter: nf_tables: prefer kfree_rcu(ptr, rcu) variant
- [armhf] tegra: Move panels to AUX bus
- Bluetooth: Fix bt_skb_sendmmsg not allocating partial chunks
- net: stmmac: enhance XDP ZC driver level switching performance
- net: stmmac: only enable DMA interrupts when ready
- net: chelsio: cxgb3: check the return value of pci_find_capability()
- iavf: Add trace while removing device
- iavf: Rework mutexes for better synchronisation
- iavf: Add waiting so the port is initialized in remove
- iavf: Fix init state closure on remove
- iavf: Fix locking for VIRTCHNL_OP_GET_OFFLOAD_VLAN_V2_CAPS
- iavf: Fix race in init state
- iavf: Fix __IAVF_RESETTING state usage
- [x86] drm/i915/guc/slpc: Correct the param count for unset param
- e1000e: Fix possible HW unit hang after an s0ix exit
- nl80211: Handle nla_memdup failures in handle_nan_filter
- ptp: ocp: Add ptp_ocp_adjtime_coarse for large adjustments
- drm/amdgpu: fix suspend/resume hang regression
- net: dcb: disable softirqs in dcbnl_flush_dev()
- net: stmmac: perserve TX and RX coalesce value during XDP setup
- Input: elan_i2c - move regulator_[en|dis]able() out of
elan_[en|dis]able_power()
- Input: elan_i2c - fix regulator enable count imbalance after
suspend/resume
- HID: add mapping for KEY_DICTATE
- HID: add mapping for KEY_ALL_APPLICATIONS
- tracing/histogram: Fix sorting on old "cpu" value
- tracing: Fix return value of __setup handlers
- btrfs: fix lost prealloc extents beyond eof after full fsync
- btrfs: fix relocation crash due to premature return from
btrfs_commit_transaction()
- btrfs: subpage: fix a wrong check on subpage->writers
- btrfs: do not WARN_ON() if we have PageError set
- btrfs: qgroup: fix deadlock between rescan worker and remove qgroup
- btrfs: add missing run of delayed items after unlink during log replay
- btrfs: fallback to blocking mode when doing async dio over multiple
extents
- btrfs: do not start relocation until in progress drops are done
- Revert "xfrm: xfrm_state_mtu should return at least 1280 for ipv6"
- proc: fix documentation and description of pagemap
- [x86] kvmclock: Fix Hyper-V Isolated VM's boot issue when vCPUs > 64
- [s390x] ftrace: fix arch_ftrace_get_regs implementation
- [s390x] ftrace: fix ftrace_caller/ftrace_regs_caller generation
- [x86] KVM: x86/mmu: Passing up the error state of mmu_alloc_shadow_roots()
https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.14
- [armhf] report Spectre v2 status through sysfs
- [armel,armhf] early traps initialisation
- [armel,armhf] use LOADADDR() to get load address of sections
- [armel,armhf] Spectre-BHB workaround
- [armhf] include unprivileged BPF status in Spectre V2 reporting
- [arm64] add ID_AA64ISAR2_EL1 sys register
- [arm64] cpufeature: add HWCAP for FEAT_AFP
- [arm64] cpufeature: add HWCAP for FEAT_RPRES
- [arm64] entry.S: Add ventry overflow sanity checks
- [arm64] spectre: Rename spectre_v4_patch_fw_mitigation_conduit
- [arm64] KVM: arm64: Allow indirect vectors to be used without SPECTRE_V3A
- [arm64] entry: Make the trampoline cleanup optional
- [arm64] entry: Free up another register on kpti's tramp_exit path
- [arm64] entry: Move the trampoline data page before the text page
- [arm64] entry: Allow tramp_alias to access symbols after the 4K boundary
- [arm64] entry: Don't assume tramp_vectors is the start of the vectors
- [arm64] entry: Move trampoline macros out of ifdef'd section
- [arm64] entry: Make the kpti trampoline's kpti sequence optional
- [arm64] entry: Allow the trampoline text to occupy multiple pages
- [arm64] entry: Add non-kpti __bp_harden_el1_vectors for mitigations
- [arm64] entry: Add vectors that have the bhb mitigation sequences
- [arm64] entry: Add macro for reading symbol addresses from the trampoline
- [arm64] Add percpu vectors for EL1
- [arm64] proton-pack: Report Spectre-BHB vulnerabilities as part of
Spectre-v2
- [arm64] Mitigate spectre style branch history side channels
- [arm64] KVM: arm64: Allow SMCCC_ARCH_WORKAROUND_3 to be discovered and
migrated
- [arm64] Use the clearbhb instruction in mitigations
- [arm64] proton-pack: Include unprivileged eBPF status in Spectre v2
mitigation reporting
- [armel,armhf] fix co-processor register typo
- [armel,armhf] Do not use NOCROSSREFS directive with ld.lld
- [arm64] Do not include __READ_ONCE() block in assembly files
- [armhf] fix build warning in proc-v7-bugs.c
- xen/xenbus: don't let xenbus_grant_ring() remove grants in error case
(CVE-2022-23040, XSA-396)
- xen/grant-table: add gnttab_try_end_foreign_access() (CVE-2022-23036,
CVE-2022-23038, XSA-396)
- xen/blkfront: don't use gnttab_query_foreign_access() for mapped status
(CVE-2022-23036, XSA-396)
- xen/netfront: don't use gnttab_query_foreign_access() for mapped status
(CVE-2022-23037, XSA-396)
- xen/scsifront: don't use gnttab_query_foreign_access() for mapped status
(CVE-2022-23038, XSA-396)
- xen/gntalloc: don't use gnttab_query_foreign_access() (CVE-2022-23039,
XSA-396)
- xen: remove gnttab_query_foreign_access()
- xen/9p: use alloc/free_pages_exact() (CVE-2022-23041, XSA-396)
- xen/pvcalls: use alloc/free_pages_exact() (CVE-2022-23041, XSA-396)
- xen/gnttab: fix gnttab_end_foreign_access() without page specified
(CVE-2022-23041, XSA-396)
- xen/netfront: react properly to failing gnttab_end_foreign_access_ref()
(CVE-2022-23042, XSA-396)
- Revert "ACPI: PM: s2idle: Cancel wakeup before dispatching EC GPE"
.
[ Bastian Blank ]
* [arm64] Enable hyperv-daemons package.
.
[ Salvatore Bonaccorso ]
* Bump ABI to 5
Checksums-Sha1:
5831b2f6848c2255902c11a2a78be6f87daaace5 248967 linux_5.16.14-1.dsc
d84600d611d263b1fc4f373f2791e09987498ac0 129244464 linux_5.16.14.orig.tar.xz
0c1fbe1cc7913245cb035f57caaf8427d09d6c8e 1312352 linux_5.16.14-1.debian.tar.xz
533e228fb3a69b8673a0d87b41bb3814a95a1b50 6456 linux_5.16.14-1_source.buildinfo
Checksums-Sha256:
023cca47041eaa0ea8dd8bf07aa2affed542135fad80232eb308f59989aaf63c 248967 linux_5.16.14-1.dsc
5d579c804608a3c743061f02d483b1772440339a1f3f3cf58570b3b77563e7e5 129244464 linux_5.16.14.orig.tar.xz
a4de10537addbc94120974e7f046b60cbd9d41f0c3e16c355d6a158bc543ea9f 1312352 linux_5.16.14-1.debian.tar.xz
ee96710c53ff8a207e0ea0a5b5d9fdd7b5fade8678e32a55dc1903085d72b30d 6456 linux_5.16.14-1_source.buildinfo
Files:
49f2e8043aed7503bfb9ef16ac92ed7d 248967 kernel optional linux_5.16.14-1.dsc
1f6cf2a32ad24fe872eda1b3733648ab 129244464 kernel optional linux_5.16.14.orig.tar.xz
07cb4d53922411b7096399602bbe85aa 1312352 kernel optional linux_5.16.14-1.debian.tar.xz
113133a10b91b5619cfc2549567da01f 6456 kernel optional linux_5.16.14-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=JHuK
-----END PGP SIGNATURE-----
