-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Tue, 25 Jul 2023 01:50:13 +0200
Source: linux
Architecture: source
Version: 4.19.289-1
Distribution: buster-security
Urgency: high
Maintainer: Debian Kernel Team <debian-kernel@lists.debian.org>
Changed-By: Ben Hutchings <benh@debian.org>
Changes:
linux (4.19.289-1) buster-security; urgency=high
.
* New upstream stable update:
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.283
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
(CVE-2023-1380)
- bluetooth: Perform careful capability checks in hci_sock_ioctl()
(CVE-2023-2002)
- USB: serial: option: add UNISOC vendor and TOZED LT70C product
- [x86] ASoC: Intel: bytcr_rt5640: Add quirk for the Acer Iconia One 7
B1-750
- [arm*] stmmac: debugfs entry name is not be changed when udev rename
device name.
- [arm*] USB: dwc3: fix runtime pm imbalance on unbind
- debugfs: regset32: Add Runtime PM support
- xhci: fix debugfs register accesses while suspended
- [arm*] pwm: meson: Fix axg ao mux parents
- ring-buffer: Sync IRQ works before buffer destruction
- reiserfs: Add security prefix to xattr name in reiserfs_security_write()
- [x86] KVM: nVMX: Emulate NOPs in L2, and PAUSE if it's not intercepted
- [armhf] i2c: omap: Fix standard mode false ACK readings
- Revert "ubifs: dirty_cow_znode: Fix memleak in error handling path"
(regression in 4.19.276)
- ubifs: Fix memleak when insert_old_idx() failed
- ubi: Fix return value overwrite issue in try_write_vid_and_data()
- ubifs: Free memory for tmpfile name
- [arm*] drm/rockchip: Drop unbalanced obj unref
- drm/vgem: add missing mutex_destroy
- drm/probe-helper: Cancel previous job before starting new one
- [amd64] EDAC, skx: Move debugfs node under EDAC's hierarchy
- [amd64] EDAC/skx: Fix overflows on the DRAM row address mapping arrays
- media: av7110: prevent underflow in write_ts_to_decoder()
- [arm64] firmware: qcom_scm: Clear download bit during reboot
- [arm64] drm/msm/adreno: Defer enabling runpm until hw_init()
- [arm64] drm/msm/adreno: drop bogus pm_runtime_set_active()
- [x86] apic: Fix atomic update of offset in reserve_eilvt_offset()
- media: dm1105: Fix use after free bug in dm1105_remove due to race
condition (CVE-2023-35824)
- media: saa7134: fix use after free bug in saa7134_finidev due to race
condition (CVE-2023-35823)
- [armhf] media: rc: gpio-ir-recv: Fix support for wake-up
- [x86] ioapic: Don't return 0 from arch_dynirq_lower_bound()
- wifi: ath9k: hif_usb: fix memory leak of remain_skbs
- wifi: ath5k: fix an off by one check in ath5k_eeprom_read_freq_list()
- wifi: ath6kl: reduce WARN to dev_dbg() in callback
- scm: fix MSG_CTRUNC setting condition for SO_PASSSEC
- vlan: partially enable SIOCSHWTSTAMP in container
- net/packet: convert po->origdev to an atomic flag
- net/packet: convert po->auxdata to an atomic flag
- scsi: target: iscsit: Fix TAS handling during conn cleanup (regression in
4.19.161)
- scsi: megaraid: Fix mega_cmd_done() CMDID_INT_CMDS
- rtlwifi: rtl_pci: Fix memory leak when hardware init fails
- wifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_rfreg()
- wifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_reg()
- crypto: drbg - make drbg_prepare_hrng() handle jent instantiation errors
- crypto: drbg - Only fail when jent is unavailable in FIPS mode
- md/raid10: fix leak of 'r10bio->remaining' for recovery
- md/raid10: fix memleak for 'conf->bio_split'
- md: update the optimal I/O size on reshape
- md/raid10: fix memleak of md thread
- wifi: iwlwifi: make the loop for card preparation effective
- wifi: iwlwifi: mvm: check firmware response size
- ixgbe: Allow flow hash to be set via ethtool
- ixgbe: Enable setting RSS table to default values
- netfilter: nf_tables: don't write table validation state without mutex
- ipv4: Fix potential uninit variable access bug in __ip_make_skb()
- Revert "Bluetooth: btsdio: fix use after free bug in btsdio_remove due to
unfinished work" (regression in 4.19.280)
- netlink: Use copy_to_user() for optval in netlink_getsockopt().
- [x86] net: amd: Fix link leak when verifying config failed
- tcp/udp: Fix memleaks of sk and zerocopy skbs with TX timestamp.
- pstore: Revert pmsg_lock back to a normal mutex (regression in 4.19.270)
- [arm64] spi: qup: fix PM reference leak in spi_qup_remove()
- [arm64] spi: qup: Don't skip cleanup in remove's error path
- [x86] vmci_host: fix a race condition in vmci_host_poll() causing GPF
- [arm*] of: Fix modalias string generation
- [arm*] usb: chipidea: fix missing goto in `ci_hdrc_probe`
- serial: 8250: Add missing wakeup event reporting
- [x86] staging: rtl8192e: Fix W_DISABLE# does not work after stop/start
- [arm64] spmi: Add a check for remove callback when removing a SPMI driver
- perf/core: Fix hardlockup failure caused by perf throttle
- RDMA/mlx4: Prevent shift wrapping in set_user_sq_size()
- clk: add missing of_node_put() in "assigned-clocks" property parsing
- [amd64] IB/hfi1: Fix SDMA mmu_rb_node not being evicted in LRU order
- NFSv4.1: Always send a RECLAIM_COMPLETE after establishing lease
- SUNRPC: remove the maximum number of retries in call_bind_status
- RDMA/mlx5: Use correct device num_ports when modify DC
- [arm*] phy: tegra: xusb: Add missing tegra_xusb_port_unregister for
usb2_port and ulpi_port
- nilfs2: do not write dirty data after degenerating to read-only
- nilfs2: fix infinite loop in nilfs_mdt_get_block()
- md/raid10: fix null-ptr-deref in raid10_sync_request
- wifi: rtl8xxxu: RTL8192EU always needs full init
- [arm*] clk: rockchip: rk3399: allow clk_cifout to force clk_cifout_src to
reparent
- btrfs: scrub: reject unsupported scrub flags
- dm integrity: call kmem_cache_destroy() in dm_integrity_init() error path
- dm flakey: fix a crash with invalid table line
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern
(CVE-2023-2269)
- perf auxtrace: Fix address filter entire kernel size
- netfilter: nf_tables: deactivate anonymous set from preparation phase
(CVE-2023-32233)
- ipmi: Fix SSIF flag requests
- ipmi: Fix how the lower layers are told to watch for messages
- ipmi_ssif: Rename idle state and check
- ipmi: fix SSIF not responding under certain cond.
- dm verity: skip redundant verity_handle_err() on I/O errors
- dm verity: fix error handling for check_at_most_once on FEC
- kernel/relay.c: fix read_pos error when multiple readers
- relayfs: fix out-of-bounds access in relay_file_read (CVE-2023-3268)
- sit: update dev->needed_headroom in ipip6_tunnel_bind_dev()
- [arm*] net: dsa: mv88e6xxx: Add missing watchdog ops for 6320 family
- [arm*] net: dsa: mv88e6xxx: add mv88e6321 rsvd2cpu
- net/sched: act_mirred: Add carrier check
- rxrpc: Fix hard call timeout units
- af_packet: Don't send zero-byte data in packet_sendmsg_spkt().
- drm/amdgpu: Add amdgpu_gfx_off_ctrl function
- drm/amdgpu: Put enable gfx off feature to a delay thread
- drm/amdgpu: Add command to override the context priority.
- drm/amdgpu: add a missing lock for AMDGPU_SCHED
- ALSA: caiaq: input: Add error handling for unsupported input methods in
`snd_usb_caiaq_input_init`
- virtio_net: split free_unused_bufs()
- virtio_net: suppress cpu stall when free_unused_bufs
- perf map: Delete two variable initialisations before null pointer checks
in sort__sym_from_cmp()
- perf symbols: Fix return incorrect build_id size in elf_read_build_id()
- btrfs: fix btrfs_prev_leaf() to not return the same key twice
- btrfs: print-tree: parent bytenr must be aligned to sector size
- cifs: fix pcchunk length type in smb2_copychunk_range
- [x86] platform/x86: touchscreen_dmi: Add info for the Dexp Ursus KX210i
- [armhf] dts: exynos: fix WM8960 clock name in Itop Elite
- HID: wacom: Set a default resolution for older tablets
- ext4: fix WARNING in mb_find_extent
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
(CVE-2023-34256)
- ext4: improve error recovery code paths in __ext4_remount()
- ext4: add bounds checking in get_max_inline_xattr_value_size()
- ext4: bail out of ext4_xattr_ibody_get() fails for any reason
- ext4: remove a BUG_ON in ext4_mb_release_group_pa()
- ext4: fix invalid free tracking in ext4_xattr_move_to_block()
- tty: Prevent writing chars during tcsetattr TCSADRAIN/FLUSH
- serial: 8250: Fix serial8250_tx_empty() race with DMA Tx
- drbd: correctly submit flush bio on barrier
- PCI: pciehp: Fix AB-BA deadlock between reset_lock and device_lock
- mm/page_alloc: fix potential deadlock on zonelist_update_seq seqlock
(regression in 4.19.261)
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.284
- net: Fix load-tearing on sk->sk_stamp in sock_recv_cmsgs().
- netlink: annotate accesses to nlk->cb_running
- net: annotate sk->sk_err write from do_recvmmsg()
- tcp: reduce POLLOUT events caused by TCP_NOTSENT_LOWAT
- tcp: return EPOLLOUT from tcp_poll only when notsent_bytes is half the
limit
- tcp: factor out __tcp_close() helper
- tcp: add annotations around sk->sk_shutdown accesses
- ipvlan:Fix out-of-bounds caused by unclear skb->cb (CVE-2023-3090)
- net: datagram: fix data-races in datagram_poll()
- af_unix: Fix a data race of sk->sk_receive_queue->qlen.
- af_unix: Fix data races around sk->sk_shutdown.
- fs: hfsplus: remove WARN_ON() from hfsplus_cat_{read,write}_inode()
- drm/amd/display: Use DC_LOG_DC in the trasform pixel function
- regmap: cache: Return error in cache sync operations for REGCACHE_NONE
- memstick: r592: Fix UAF bug in r592_remove due to race condition
(CVE-2023-3141)
- ACPI: EC: Fix oops when removing custom query handlers
- ACPICA: ACPICA: check null return of ACPI_ALLOCATE_ZEROED in
acpi_db_display_objects
- wifi: brcmfmac: cfg80211: Pass the PMK in binary instead of hex
- net: Catch invalid index in XPS mapping
- lib: cpu_rmap: Avoid use after free on rmap->obj array entries
- [x86] scsi: message: mptlan: Fix use after free bug in mptlan_remove()
due to race condition
- gfs2: Fix inode height consistency check
- ext4: set goal start correctly in ext4_mb_normalize_request
- ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()
- f2fs: fix to drop all dirty pages during umount() if cp_error is set
- wifi: iwlwifi: dvm: Fix memcpy: detected field-spanning write backtrace
- Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp
- HID: logitech-hidpp: Don't use the USB serial for USB devices
- HID: logitech-hidpp: Reconcile USB and Unifying serials
- [armhf] spi: spi-imx: fix MX51_ECSPI_* macros when cs > 3
- HID: wacom: generic: Set battery quirk only when we see battery data
- [x86] usb: typec: tcpm: fix multiple times discover svids error
- serial: 8250: Reinit port->pm on port specific driver unbind
- btrfs: replace calls to btrfs_find_free_ino with btrfs_find_free_objectid
- btrfs: fix space cache inconsistency after error loading it from disk
- [x86] cpupower: Make TSC read per CPU for Mperf monitor
- af_key: Reject optional tunnel/BEET mode templates in outbound policies
- [armhf] net: fec: Better handle pm_runtime_get() failing in .remove()
- vsock: avoid to close connected socket after the timeout
- [armhf] serial: arc_uart: fix of_iomap leak in `arc_serial_probe`
- ip6_gre: Fix skb_under_panic in __gre6_xmit()
- ip6_gre: Make o_seqno start from 0 in native mode
- ip_gre, ip6_gre: Fix race condition on o_seqno in collect_md mode
- erspan: get the proto with the md version for collect_md
- media: netup_unidvb: fix use-after-free at del_timer()
- net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
- igb: fix bit_shift to be in [1..8] range
- vlan: fix a potential uninit-value in vlan_dev_hard_start_xmit()
- usb-storage: fix deadlock when a scsi command timeouts more than once
- ALSA: hda: Fix Oops by 9.1 surround channel names
- ALSA: hda: Add NVIDIA codec IDs a3 through a7 to patch table
- statfs: enforce statfs[64] structure initialization
- serial: Add support for Advantech PCI-1611U card
- ceph: force updating the msg pointer in non-split case
- [x86] tpm/tpm_tis: Disable interrupts for more Lenovo devices
- nilfs2: fix use-after-free bug of nilfs_root in nilfs_evict_inode()
- netfilter: nftables: add nft_parse_register_load() and use it
- netfilter: nftables: add nft_parse_register_store() and use it
- netfilter: nftables: statify nft_parse_register()
- netfilter: nf_tables: validate registers coming from userspace.
- netfilter: nf_tables: add nft_setelem_parse_key()
- netfilter: nf_tables: allow up to 64 bytes in the set element data area
- netfilter: nf_tables: stricter validation of element data
- netfilter: nf_tables: validate NFTA_SET_ELEM_OBJREF based on
NFT_SET_OBJECT flag
- netfilter: nf_tables: do not allow RULE_ID to refer to another chain
- HID: wacom: Force pen out of prox if no events have been received in a
while
- [x86] Add Acer Aspire Ethos 8951G model quirk
- [x86]ALSA: hda/realtek - Add Headset Mic supported for HP cPC
- [x86] ALSA: hda/realtek - Enable headset mic of Acer X2660G with ALC662
- [x86] ALSA: hda/realtek - Enable the headset of Acer N50-600 with ALC662
- [x86] ALSA: hda/realtek - The front Mic on a HP machine doesn't work
- [x86] ALSA: hda/realtek: Fix the mic type detection issue for ASUS G551JW
- [x86] ALSA: hda/realtek - Add headset Mic support for Lenovo ALC897
platform
- ALSA: hda/realtek - ALC897 headset MIC no sound
- [x86] ALSA: hda/realtek: Add a quirk for HP EliteDesk 805
- usb: gadget: u_ether: Convert prints to device prints
- usb: gadget: u_ether: Fix host MAC address case
- vc_screen: rewrite vcs_size to accept vc, not inode
- vc_screen: reload load of struct vc_data pointer in vcs_write() to avoid
UAF
- [x86] ALSA: hda/ca0132: add quirk for EVGA X299 DARK
- btrfs: use nofs when cleaning up aborted transactions
- [x86] mm: Avoid incomplete Global INVLPG flushes
- ALSA: hda/realtek - Fixed one of HP ALC671 platform Headset Mic supported
- [x86] ALSA: hda/realtek - Fix inverted bass GPIO pin on Acer 8951G
- udplite: Fix NULL pointer dereference in __sk_mem_raise_allocated().
- USB: sisusbvga: Add endpoint checks
- media: radio-shark: Add endpoint checks
- net: fix skb leak in __skb_tstamp_tx()
- bpf: Fix mask generation for 32-bit narrow loads of 64-bit fields
- ipv6: Fix out-of-bounds access in ipv6_find_tlv()
- power: supply: leds: Fix blink to LED on transition
- power: supply: bq27xxx: Fix bq27xxx_battery_update() race condition
- power: supply: bq27xxx: Fix poll_interval handling and races on remove
- [x86] show_trace_log_lvl: Ensure stack pointer is aligned, again
- [x86] forcedeth: Fix an error handling path in nv_probe()
- [x86] 3c589_cs: Fix an error handling path in tc589_probe()
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.285
- cdc_ncm: Implement the 32-bit version of NCM Transfer Block
- net: cdc_ncm: Deal with too low values of dwNtbOutMaxSize
- power: supply: bq27xxx: After charger plug in/out wait 0.5s for things to
stabilize
- power: supply: core: Refactor
power_supply_set_input_current_limit_from_supplier()
- [x86] power: supply: bq24190: Call power_supply_changed() after updating
input current
- bluetooth: Add cmd validity checks at the start of hci_sock_ioctl()
- ipv{4,6}/raw: fix output xfrm lookup wrt protocol
- netfilter: ctnetlink: Support offloaded conntrack entry deletion
- net/mlx5: fw_tracer, Fix event handling
- [x86] netrom: fix info-leak in nr_write_internal()
- af_packet: Fix data-races of pkt_sk(sk)->num.
- amd-xgbe: fix the false linkup in xgbe_phy_status
- af_packet: do not use READ_ONCE() in packet_bind()
- tcp: deny tcp_disconnect() when threads are waiting
- tcp: Return user_mss for TCP_MAXSEG in CLOSE/LISTEN state if user_mss set
- net/sched: sch_ingress: Only create under TC_H_INGRESS
- net/sched: sch_clsact: Only create under TC_H_CLSACT
- net/sched: Reserve TC_H_INGRESS (TC_H_CLSACT) for ingress (clsact) Qdiscs
- net/sched: Prohibit regrafting ingress or clsact Qdiscs
- net: sched: fix NULL pointer dereference in mq_attach
- ocfs2/dlm: move BITS_TO_BYTES() to bitops.h for wider use
- net/netlink: fix NETLINK_LIST_MEMBERSHIPS length report
- udp6: Fix race condition in udp6_sendmsg & connect
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
(CVE-2023-35788)
- [arm*] net: dsa: mv88e6xxx: Increase wait after reset deactivation
- fbdev: modedb: Add 1920x1080 at 60 Hz video mode
- nbd: Fix debugfs_create_dir error checking
- xfrm: Check if_id in inbound policy/secpath match
- media: dvb-usb: az6027: fix three null-ptr-deref in az6027_i2c_xfer()
- media: dvb-usb-v2: ec168: fix null-ptr-deref in ec168_i2c_xfer()
- media: dvb-usb-v2: ce6230: fix null-ptr-deref in ce6230_i2c_master_xfer()
- media: dvb-usb-v2: rtl28xxu: fix null-ptr-deref in rtl28xxu_i2c_xfer
- media: dvb-usb: digitv: fix null-ptr-deref in digitv_i2c_xfer()
- media: dvb-usb: dw2102: fix uninit-value in su3000_read_mac_address
- media: netup_unidvb: fix irq init by register it at the end of probe
- media: dvb_ca_en50221: fix a size write bug
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
- media: dvb-core: Fix use-after-free due on race condition at dvb_net
- media: dvb-core: Fix kernel WARNING for blocking operation in
wait_event*() (CVE-2023-31084)
- media: dvb-core: Fix use-after-free due to race condition at
dvb_ca_en50221
- wifi: rtl8xxxu: fix authentication timeout due to incorrect RCR value
- scsi: core: Decrease scsi_device's iorequest_cnt if dispatch failed
- HID: wacom: avoid integer overflow in wacom_intuos_inout()
- net: usb: qmi_wwan: Set DTR quirk for BroadMobi BM818
- usb: gadget: f_fs: Add unbind event before functionfs_unbind (regression
in 4.19.272)
- ata: libata-scsi: Use correct device no in ata_find_dev()
- mmc: vub300: fix invalid response handling
- fbcon: Fix null-ptr-deref in soft_cursor
- regmap: Account for register length when chunking
- [x86] scsi: dpt_i2o: Remove broken pass-through ioctl (I2OUSERCMD)
(CVE-2023-2007)
- [x86] scsi: dpt_i2o: Do not process completions with invalid addresses
- wifi: rtlwifi: 8192de: correct checking of IQK reload
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.286
- [arm64] spi: qup: Request DMA before enabling clocks
- Bluetooth: Fix l2cap_disconnect_req deadlock (regression in 4.19.281)
- Bluetooth: L2CAP: Add missing checks for invalid DCID
- rfs: annotate lockless accesses to sk->sk_rxhash
- rfs: annotate lockless accesses to RFS sock flow table
- net: sched: move rtm_tca_policy declaration to include file
- net: sched: fix possible refcount leak in tc_chain_tmplt_add()
- lib: cpu_rmap: Fix potential use-after-free in irq_cpu_rmap_release()
- batman-adv: Broken sync while rescheduling delayed work
- [x86] Input: xpad - delete a Razer DeathAdder mouse VID/PID entry
- Input: psmouse - fix OOB access in Elantech protocol
- drm/amdgpu: fix xclk freq on CHIP_STONEY
- ceph: fix use-after-free bug for inodes when flushing capsnaps
- Bluetooth: Fix use-after-free in hci_remove_ltk/hci_remove_irk
- [arm64] pinctrl: meson-axg: add missing GPIOA_18 gpio group
- ext4: only check dquot_initialize_needed() when debugging
- btrfs: check return value of btrfs_commit_transaction in relocation
- btrfs: unset reloc control if transaction commit fails in
prepare_to_relocate() (CVE-2023-3111)
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.287
- power: supply: bq27xxx: Use mod_delayed_work() instead of cancel() +
schedule()
- [armhf] dts: vexpress: add missing cache properties
- power: supply: Ratelimit no data debug output
- regulator: Fix error checking for debugfs_create_dir
- [arm64] irqchip/meson-gpio: Mark OF related data as maybe unused
- power: supply: Fix logic checking if system is running from battery
- xen/blkfront: Only check REQ_FUA for writes
- ocfs2: fix use-after-free when unmounting read-only filesystem
- ocfs2: check new file size on fallocate call
- nilfs2: fix incomplete buffer cleanup in nilfs_btnode_abort_change_key()
- nilfs2: fix possible out-of-bounds segment allocation in resize ioctl
- kexec: support purgatories with .text.hot sections
- nouveau: fix client work fence deletion race
- RDMA/uverbs: Restrict usage of privileged QKEYs
- net: usb: qmi_wwan: add support for Compal RXM-G1
- Remove DECnet support from kernel (CVE-2023-3338)
- USB: serial: option: add Quectel EM061KGL series
- [arm*] usb: dwc3: gadget: Reset num TRBs before giving back the request
- usb: gadget: f_ncm: Add OS descriptor support
- usb: gadget: f_ncm: Fix NTP-32 support
- netfilter: nfnetlink: skip error delivery on batch in case of ENOMEM
- ping6: Fix send to link-local addresses with VRF.
- RDMA/rxe: Remove the unused variable obj
- RDMA/rxe: Removed unused name from rxe_task struct
- RDMA/rxe: Fix the use-before-initialization error of resp_pkts
- IB/uverbs: Fix to consider event queue closing also upon non-blocking mode
- IB/isert: Fix dead lock in ib_isert
- IB/isert: Fix possible list corruption in CMA handler
- IB/isert: Fix incorrect release of isert connection
- sctp: fix an error code in sctp_sf_eat_auth()
- igb: fix nvm.ops.read() error handling
- drm/nouveau/dp: check for NULL nv_connector->native_mode
- drm/nouveau/kms: Don't change EDID when it hasn't actually changed
- drm/nouveau: add nv_encoder pointer check for NULL
- net: tipc: resize nlattr array to correct size
- neighbour: Remove unused inline function neigh_key_eq16()
- net: Remove unused inline function dst_hold_and_use()
- neighbour: delete neigh_lookup_nodev as not used
- drm/nouveau/kms: Fix NULL pointer dereference in
nouveau_connector_detect_depth
- mmc: block: ensure error propagation for non-blk
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.288
- nilfs2: reject devices with insufficient block count
- ipmi: Make the smi watcher be disabled immediately when not needed
- ipmi: move message error checking to avoid deadlock
- nilfs2: fix buffer corruption due to concurrent device reads
- [x86] Drivers: hv: vmbus: Fix vmbus_wait_for_unload() to scan present
CPUs
- [amd64] PCI: hv: Fix a race condition bug in hv_pci_query_relations()
- cgroup: Do not corrupt task iteration when rebinding subsystem
- nilfs2: prevent general protection fault in nilfs_clear_dirty_page()
- rcu: Upgrade rcu_swap_protected() to rcu_replace_pointer()
- ieee802154: hwsim: Fix possible memory leaks
- xfrm: Linearize the skb after offloading if needed.
- [armhf] mmc: mvsdio: convert to devm_platform_ioremap_resource
- [armhf] mmc: mvsdio: fix deferred probing
- [armhf] mmc: omap: fix deferred probing
- [armhf] mmc: omap_hsmmc: fix deferred probing
- mmc: sdhci-acpi: fix deferred probing
- be2net: Extend xmit workaround to BE3 chip
- netfilter: nf_tables: disallow element updates of bound anonymous sets
- netfilter: nfnetlink_osf: fix module autoload
- sch_netem: acquire qdisc lock in netem_change()
- scsi: target: iscsi: Prevent login threads from racing between each other
- HID: wacom: Add error check to wacom_parse_and_register()
- media: cec: core: don't set last_initiator if tx in progress
- nfcsim.c: Fix error checking for debugfs_create_dir
- [i386] usb: gadget: udc: fix NULL dereference in remove()
- [x86] ASoC: nau8824: Add quirk to active-high jack-detect
- drm/radeon: fix race condition UAF in radeon_gem_set_domain_ioctl
- [x86] apic: Fix kernel panic when booting with intremap=off and
x2apic_phys
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.289
- [x86] microcode/AMD: Load late on both threads too
- [x86] cpu/amd: Move the errata checking functionality up
- [x86] cpu/amd: Add a Zenbleed fix (CVE-2023-20593)
.
[ Ben Hutchings ]
* Bump ABI to 25
* [rt] Update to 4.19.284-rt125:
- debugobjects: Check CONFIG_PREEMPT_RT_FULL instead of CONFIG_PREEMPT_RT
* [x86] debug: Disable FUNCTION_ERROR_INJECTION
Checksums-Sha1:
caba7dd6494f409f015fa37bcaf5305fc9c27d10 191175 linux_4.19.289-1.dsc
fa6fec01928ece49ca2289c95ab9ada289cac3d0 107654512 linux_4.19.289.orig.tar.xz
14fbec2f7218048b678bc9bdfe8bd72810cd490f 1589484 linux_4.19.289-1.debian.tar.xz
48892e8be3ec49a0dad52a8a5ec11cc84f63aaab 47714 linux_4.19.289-1_source.buildinfo
Checksums-Sha256:
815e3d4d78fa0f24f3ddea073d43a0dc09d12b8fe63b17d3bf2293a3076648c6 191175 linux_4.19.289-1.dsc
8ce9eda34863c308c12b0b1025d87efb2ea7267f6fd920eaea2a41e0beed4db5 107654512 linux_4.19.289.orig.tar.xz
9bc62a0ced6133de33d5fcda3a8e02e028edf9e4a08dbc31a9aa8a2fa7a9991f 1589484 linux_4.19.289-1.debian.tar.xz
314a31326048ac3a04c3fa861932d74d26fa8bd0c045339b9dfa401a0bffbb47 47714 linux_4.19.289-1_source.buildinfo
Files:
bbbe3397b8029940103916711aa57d40 191175 kernel optional linux_4.19.289-1.dsc
046e8f4b4706e396981550b49a574f61 107654512 kernel optional linux_4.19.289.orig.tar.xz
ec53686dffd0f74ea924a7d23cb2313b 1589484 kernel optional linux_4.19.289-1.debian.tar.xz
4337ddb1c86cfed88f6815fadbec4622 47714 kernel optional linux_4.19.289-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=unBC
-----END PGP SIGNATURE-----
