Changelog
linux (5.10.84-1) bullseye; urgency=medium
* New upstream stable update:
https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.71
- tty: Fix out-of-bound vmalloc access in imageblit
- cpufreq: schedutil: Use kobject release() method to free sugov_tunables
- scsi: qla2xxx: Changes to support kdump kernel for NVMe BFS
- cpufreq: schedutil: Destroy mutex before kobject_put() frees the memory
- ALSA: hda/realtek: Quirks to enable speaker output for Lenovo Legion 7i
15IMHG05, Yoga 7i 14ITL5/15ITL5, and 13s Gen2 laptops.
- [amd64,arm64] ACPI: NFIT: Use fallback node id when numa info in NFIT
table is incorrect
- fs-verity: fix signed integer overflow with i_size near S64_MAX
- hwmon: (tmp421) handle I2C errors
- hwmon: (w83793) Fix NULL pointer dereference by removing unnecessary
structure field
- hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary
structure field
- hwmon: (w83791d) Fix NULL pointer dereference by removing unnecessary
structure field
- [arm64,armhf] gpio: pca953x: do not ignore i2c errors
- scsi: ufs: Fix illegal offset in UPIU event trace
- mac80211: fix use-after-free in CCMP/GCMP RX
- [x86] kvmclock: Move this_cpu_pvti into kvmclock.h
- [x86] KVM: x86: Fix stack-out-of-bounds memory access from
ioapic_write_indirect()
- [x86] KVM: x86: nSVM: don't copy virt_ext from vmcb12
- [x86] KVM: nVMX: Filter out all unsupported controls when eVMCS was
activated
- KVM: rseq: Update rseq when processing NOTIFY_RESUME on xfer to KVM guest
- RDMA/cma: Do not change route.addr.src_addr.ss_family
- drm/amd/display: Pass PCI deviceid into DC
- drm/amdgpu: correct initial cp_hqd_quantum for gfx9
- ipvs: check that ip_vs_conn_tab_bits is between 8 and 20
- bpf: Handle return value of BPF_PROG_TYPE_STRUCT_OPS prog
- IB/cma: Do not send IGMP leaves for sendonly Multicast groups
- RDMA/cma: Fix listener leak in rdma_cma_listen_on_all() failure
- mac80211: Fix ieee80211_amsdu_aggregate frag_tail bug
- mac80211: limit injected vht mcs/nss in ieee80211_parse_tx_radiotap
- mac80211: mesh: fix potentially unaligned access
- mac80211-hwsim: fix late beacon hrtimer handling
- sctp: break out if skb_header_pointer returns NULL in sctp_rcv_ootb
- hwmon: (tmp421) report /PVLD condition as fault
- hwmon: (tmp421) fix rounding for negative values
- [arm64] net: enetc: fix the incorrect clearing of IF_MODE bits
- net: ipv4: Fix rtnexthop len when RTA_FLOW is present
- smsc95xx: fix stalled rx after link change
- [x86] drm/i915/request: fix early tracepoints
- [arm64,armhf] dsa: mv88e6xxx: 6161: Use chip wide MAX MTU
- [arm64,armhf] dsa: mv88e6xxx: Fix MTU definition
- [arm64,armhf] dsa: mv88e6xxx: Include tagger overhead when setting MTU for
DSA and CPU ports
- e100: fix length calculation in e100_get_regs_len
- e100: fix buffer overrun in e100_get_regs
- [arm64] RDMA/hns: Fix inaccurate prints
- bpf: Exempt CAP_BPF from checks against bpf_jit_limit
- Revert "block, bfq: honor already-setup queue merges"
- scsi: csiostor: Add module softdep on cxgb4
- ixgbe: Fix NULL pointer dereference in ixgbe_xdp_setup
- [arm64] net: hns3: do not allow call hns3_nic_net_open repeatedly
- [arm64] net: hns3: keep MAC pause mode when multiple TCs are enabled
- [arm64] net: hns3: fix mixed flag HCLGE_FLAG_MQPRIO_ENABLE and
HCLGE_FLAG_DCB_ENABLE
- [arm64] net: hns3: fix show wrong state when add existing uc mac address
- [arm64] net: hns3: fix prototype warning
- [arm64] net: hns3: reconstruct function hns3_self_test
- [arm64] net: hns3: fix always enable rx vlan filter problem after selftest
- [arm64,armhf] net: phy: bcm7xxx: Fixed indirect MMD operations
- net: sched: flower: protect fl_walk() with rcu
- af_unix: fix races in sk_peer_pid and sk_peer_cred accesses
- [x86] perf/x86/intel: Update event constraints for ICX
- nvme: add command id quirk for apple controllers
- elf: don't use MAP_FIXED_NOREPLACE for elf interpreter mappings
- debugfs: debugfs_create_file_size(): use IS_ERR to check for error
- ext4: fix loff_t overflow in ext4_max_bitmap_size()
- ext4: limit the number of blocks in one ADD_RANGE TLV (Closes: #995425)
- ext4: fix reserved space counter leakage
- ext4: add error checking to ext4_ext_replay_set_iblocks()
- ext4: fix potential infinite loop in ext4_dx_readdir()
- HID: u2fzero: ignore incomplete packets without data
- net: udp: annotate data race around udp_sk(sk)->corkflag
- ASoC: dapm: use component prefix when checking widget names
- usb: hso: remove the bailout parameter
- [x86] crypto: ccp - fix resource leaks in ccp_run_aes_gcm_cmd()
(CVE-2021-3744, CVE-2021-3764)
- HID: betop: fix slab-out-of-bounds Write in betop_probe
- netfilter: ipset: Fix oversized kvmalloc() calls
- mm: don't allow oversized kvmalloc() calls
- HID: usbhid: free raw_report buffers in usbhid_stop
- [x86] KVM: x86: Handle SRCU initialization failure during page track init
- netfilter: conntrack: serialize hash resizes and cleanups
- netfilter: nf_tables: Fix oversized kvmalloc() calls
https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.72
- [arm64,armhf] spi: rockchip: handle zero length transfers without timing
out
- nfsd: back channel stuck in SEQ4_STATUS_CB_PATH_DOWN
- btrfs: replace BUG_ON() in btrfs_csum_one_bio() with proper error handling
- btrfs: fix mount failure due to past and transient device flush error
- net: mdio: introduce a shutdown method to mdio device drivers
- xen-netback: correct success/error reporting for the SKB-with-fraglist
case
- scsi: sd: Free scsi_disk device via put_device()
- [arm*] usb: dwc2: check return value after calling platform_get_resource()
- nvme-fc: update hardware queues before using them
- nvme-fc: avoid race between time out and tear down
- [arm64] thermal/drivers/tsens: Fix wrong check for tzd in irq handlers
- scsi: ses: Retry failed Send/Receive Diagnostic commands
- [arm64,armhf] irqchip/gic: Work around broken Renesas integration
- smb3: correct smb3 ACL security descriptor
- KVM: do not shrink halt_poll_ns below grow_start
- [x86] kvm: Add AMD PMU MSRs to msrs_to_save_all[]
- [x86] KVM: nSVM: restore int_vector in svm_clear_vintr
- [x86] perf/x86: Reset destroy callback on event init failure
- libata: Add ATA_HORKAGE_NO_NCQ_ON_ATI for Samsung 860 and 870 SSD.
https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.73
- [arm64,armhf] usb: chipidea: ci_hdrc_imx: Also search for 'phys' phandle
- USB: cdc-acm: fix racy tty buffer accesses
- USB: cdc-acm: fix break reporting
- usb: typec: tcpm: handle SRC_STARTUP state if cc changes
- drm/nouveau/kms/tu102-: delay enabling cursor until after assign_windows
- xen/privcmd: fix error handling in mmap-resource processing
- [arm64] mmc: meson-gx: do not use memcpy_to/fromio for dram-access-quirk
- ovl: fix missing negative dentry check in ovl_rename() (CVE-2021-20321)
- ovl: fix IOCB_DIRECT if underlying fs doesn't support direct IO
- nfsd: fix error handling of register_pernet_subsys() in init_nfsd()
- nfsd4: Handle the NFSv4 READDIR 'dircount' hint being zero
- SUNRPC: fix sign error causing rpcsec_gss drops
- xen/balloon: fix cancelled balloon action
- [armhf] dts: omap3430-sdp: Fix NAND device node
- [armhf] bus: ti-sysc: Add break in switch statement in sysc_init_soc()
- [arm64] soc: qcom: mdt_loader: Drop PT_LOAD check on hash segment
- [armhf] dts: imx: Add missing pinctrl-names for panel on M53Menlo
- [armhf] dts: imx: Fix USB host power regulator polarity on M53Menlo
- [amd64] PCI: hv: Fix sleep while in non-sleep context when removing child
devices from the bus
- iwlwifi: pcie: add configuration of a Wi-Fi adapter on Dell XPS 15
- [armel,armhf] bpf, arm: Fix register clobbering in div/mod implementation
- [armhf] soc: ti: omap-prm: Fix external abort for am335x pruss
- bpf: Fix integer overflow in prealloc_elems_and_freelist()
(CVE-2021-41864)
- net/mlx5e: IPSEC RX, enable checksum complete
- net/mlx5: E-Switch, Fix double allocation of acl flow counter
- phy: mdio: fix memory leak
- net_sched: fix NULL deref in fifo_set_limit()
- [i386] ptp_pch: Load module automatically if ID matches
- [armhf] imx6: disable the GIC CPU interface before calling stby-poweroff
sequence
- net: bridge: use nla_total_size_64bit() in br_get_linkxstats_size()
- net: bridge: fix under estimation in br_get_linkxstats_size()
- net/sched: sch_taprio: properly cancel timer from taprio_destroy()
- net: sfp: Fix typo in state machine debug string
- netlink: annotate data races around nlk->bound
- perf jevents: Tidy error handling
- [armhf] bus: ti-sysc: Use CLKDM_NOAUTO for dra7 dcan1 for errata i893
- [arm64,armhf] drm/sun4i: dw-hdmi: Fix HDMI PHY clock setup
- drm/nouveau: avoid a use-after-free when BO init fails
- drm/nouveau/kms/nv50-: fix file release memory leak
- drm/nouveau/debugfs: fix file release memory leak
- [amd64] gve: Correct available tx qpl check
- [amd64] gve: Avoid freeing NULL pointer
- rtnetlink: fix if_nlmsg_stats_size() under estimation
- [amd64] gve: fix gve_get_stats()
- [amd64] gve: report 64bit tx_bytes counter from gve_handle_report_stats()
- i40e: fix endless loop under rtnl
- i40e: Fix freeing of uninitialized misc IRQ vector
- net: prefer socket bound to interface when not in VRF
- [powerpc*] iommu: Report the correct most efficient DMA mask for PCI
devices
- i2c: acpi: fix resource leak in reconfiguration device addition
- [s390x] bpf, s390: Fix potential memory leak about jit_data
- [powerpc*] bpf: Fix BPF_SUB when imm == 0x80000000
- [powerpc*] pseries/eeh: Fix the kdump kernel crash during eeh_pseries_init
- [i386] x86/platform/olpc: Correct ifdef symbol to intended
CONFIG_OLPC_XO15_SCI
- [x86] entry: Correct reference to intended CONFIG_64_BIT
- [x86] hpet: Use another crystalball to evaluate HPET usability
https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.74
- ext4: check and update i_disksize properly
- ext4: correct the error path of ext4_write_inline_data_end()
- [x86] ASoC: Intel: sof_sdw: tag SoundWire BEs as non-atomic
- HID: apple: Fix logical maximum and usage maximum of Magic Keyboard JIS
- netfilter: ip6_tables: zero-initialize fragment offset
- HID: wacom: Add new Intuos BT (CTL-4100WL/CTL-6100WL) device IDs
- [x86] ASoC: SOF: loader: release_firmware() on load failure to avoid
batching
- netfilter: nf_nat_masquerade: make async masq_inet6_event handling generic
- netfilter: nf_nat_masquerade: defer conntrack walk to work queue
- mac80211: Drop frames from invalid MAC address in ad-hoc mode
- net: prevent user from passing illegal stab size
- mac80211: check return value of rhashtable_init
- [x86] vboxfs: fix broken legacy mount signature checking
- drm/amdgpu: fix gart.bo pin_count leak
- scsi: ses: Fix unsigned comparison with less than zero
- scsi: virtio_scsi: Fix spelling mistake "Unsupport" -> "Unsupported"
- perf/core: fix userpage->time_enabled of inactive events
- sched: Always inline is_percpu_thread()
- [armhf] hwmon: (pmbus/ibm-cffps) max_power_out swap changes
https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.75
- ALSA: usb-audio: Add quirk for VF0770
- ALSA: pcm: Workaround for a wrong offset in SYNC_PTR compat ioctl
- ALSA: seq: Fix a potential UAF by wrong private_free call order
- ALSA: hda/realtek: Enable 4-speaker output for Dell Precision 5560 laptop
- ALSA: hda - Enable headphone mic on Dell Latitude laptops with ALC3254
- ALSA: hda/realtek: Complete partial device name to avoid ambiguity
- ALSA: hda/realtek: Add quirk for Clevo X170KM-G
- ALSA: hda/realtek - ALC236 headset MIC recording issue
- ALSA: hda/realtek: Add quirk for TongFang PHxTxX1
- ALSA: hda/realtek: Fix for quirk to enable speaker output on the Lenovo
13s Gen2
- ALSA: hda/realtek: Fix the mic type detection issue for ASUS G551JW
- [s390x] fix strrchr() implementation
- [arm64] hugetlb: fix CMA gigantic page order for non-4K PAGE_SIZE
- drm/msm: Avoid potential overflow in timeout_to_jiffies()
- btrfs: unlock newly allocated extent buffer after error
- btrfs: deal with errors when replaying dir entry during log replay
- btrfs: deal with errors when adding inode reference during log replay
- btrfs: check for error when looking up inode during dir entry replay
- btrfs: update refs for any root except tree log roots
- btrfs: fix abort logic in btrfs_replace_file_extents
- [x86] resctrl: Free the ctrlval arrays when domain_setup_mon_state() fails
- [x86] mei: me: add Ice Lake-N device id.
- xhci: guard accesses to ep_state in xhci_endpoint_reset()
- xhci: Fix command ring pointer corruption while aborting a command
- xhci: Enable trust tx length quirk for Fresco FL11 USB controller
- cb710: avoid NULL pointer subtraction
- [arm64,x86] efi/cper: use stack buffer for error record decoding
- efi: Change down_interruptible() in virt_efi_reset_system() to
down_trylock()
- [armhf] usb: musb: dsps: Fix the probe error path (Closes: 1000900)
- Input: xpad - add support for another USB ID of Nacon GC-100
- USB: serial: qcserial: add EM9191 QDL support
- USB: serial: option: add Quectel EC200S-CN module support
- USB: serial: option: add Telit LE910Cx composition 0x1204
- USB: serial: option: add prod. id for Quectel EG91
- virtio: write back F_VERSION_1 before validate
- nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells
- [powerpc*] xive: Discard disabled interrupts in get_irqchip_state()
- driver core: Reject pointless SYNC_STATE_ONLY device links
- iio: adc: ad7192: Add IRQ flag
- iio: adc: ad7780: Fix IRQ flag
- iio: adc: ad7793: Fix IRQ flag
- iio: adc128s052: Fix the error handling path of 'adc128_probe()'
- iio: adc: max1027: Fix wrong shift with 12-bit devices
- iio: light: opt3001: Fixed timeout error when 0 lux
- iio: adc: max1027: Fix the number of max1X31 channels
- iio: dac: ti-dac5571: fix an error code in probe()
- [arm64] tee: optee: Fix missing devices unregister during optee_remove
- [armel,armhf] dts: bcm2711-rpi-4-b: Fix usb's unit address
- [armel,armhf] dts: bcm2711-rpi-4-b: fix sd_io_1v8_reg regulator states
- [armel,armhf] dts: bcm2711-rpi-4-b: Fix pcie0's unit address formatting
- nvme-pci: Fix abort command id
- sctp: account stream padding length for reconf chunk
- [arm64,armhf] gpio: pca953x: Improve bias setting
- net/mlx5e: Fix memory leak in mlx5_core_destroy_cq() error path
- net/mlx5e: Mutually exclude RX-FCS and RX-port-timestamp
- net: stmmac: fix get_hw_feature() on old hardware
- ethernet: s2io: fix setting mac address during resume
- nfc: fix error handling of nfc_proto_register()
- NFC: digital: fix possible memory leak in digital_tg_listen_mdaa()
- NFC: digital: fix possible memory leak in digital_in_send_sdd_req()
- [i386] pata_legacy: fix a couple uninitialized variable bugs
- ata: ahci_platform: fix null-ptr-deref in
ahci_platform_enable_regulators()
- drm/edid: In connector_bad_edid() cap num_of_ext by num_blocks read
- [arm64] drm/msm: Fix null pointer dereference on pointer edp
- [arm64] drm/msm/mdp5: fix cursor-related warnings
- [arm64] drm/msm/a6xx: Track current ctx by seqno
- [arm64] drm/msm/dsi: Fix an error code in msm_dsi_modeset_init()
- [arm64] drm/msm/dsi: fix off by one in dsi_bus_clk_enable error handling
- [arm64] acpi/arm64: fix next_platform_timer() section mismatch error
- [x86] platform/x86: intel_scu_ipc: Fix busy loop expiry time
- mqprio: Correct stats in mqprio_dump_class_stats().
- qed: Fix missing error code in qed_slowpath_start()
- nfp: flow_offload: move flow_indr_dev_register from app init to app start
- [arm64] net: mscc: ocelot: warn when a PTP IRQ is raised for an unknown
skb
- [arm64,armhf] net: dsa: mv88e6xxx: don't use PHY_DETECT on internal PHY's
https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.76
- xhci: add quirk for host controllers that don't update endpoint DCS
- io_uring: fix splice_fd_in checks backport typo
- [armhf] dts: vexpress-v2p-ca9: Fix the SMB unit-address
- block: decode QUEUE_FLAG_HCTX_ACTIVE in debugfs output
- [x86] xen/x86: prevent PVH type from getting clobbered
- NFSD: Keep existing listeners on portlist error
- netfilter: xt_IDLETIMER: fix panic that occurs when timer_type has garbage
value
- ice: fix getting UDP tunnel entry
- netfilter: ip6t_rt: fix rt0_hdr parsing in rt_mt6
- netfilter: ipvs: make global sysctl readonly in non-init netns
- tcp: md5: Fix overlap between vrf and non-vrf keys
- ipv6: When forwarding count rx stats on the orig netdev
- [powerpc*] smp: do not decrement idle task preempt count in CPU offline
- [arm64] net: hns3: reset DWRR of unused tc to zero
- [arm64] net: hns3: add limit ets dwrr bandwidth cannot be 0
- [arm64] net: hns3: schedule the polling again when allocation fails
- [arm64] net: hns3: fix vf reset workqueue cannot exit
- [arm64] net: hns3: disable sriov before unload hclge layer
- net: stmmac: Fix E2E delay mechanism
- e1000e: Fix packet loss on Tiger Lake and later
- ice: Add missing E810 device ids
- [arm64] net: enetc: fix ethtool counter name for PM0_TERR
- can: peak_usb: pcan_usb_fd_decode_status(): fix back to ERROR_ACTIVE state
notification
- can: peak_pci: peak_pci_remove(): fix UAF
- can: isotp: isotp_sendmsg(): fix return error on FC timeout on TX path
- can: isotp: isotp_sendmsg(): add result check for
wait_event_interruptible()
- can: j1939: j1939_tp_rxtimer(): fix errant alert in j1939_tp_rxtimer
- can: j1939: j1939_netdev_start(): fix UAF for rx_kref of j1939_priv
- can: j1939: j1939_xtp_rx_dat_one(): cancel session if receive TP.DT with
error length
- can: j1939: j1939_xtp_rx_rts_session_new(): abort TP less than 9 bytes
- ceph: skip existing superblocks that are blocklisted or shut down when
mounting
- ceph: fix handling of "meta" errors
- ocfs2: fix data corruption after conversion from inline format
- ocfs2: mount fails with buffer overflow in strlen
- userfaultfd: fix a race between writeprotect and exit_mmap()
- vfs: check fd has read access in kernel_read_file_from_fd()
- ALSA: usb-audio: Provide quirk for Sennheiser GSP670 Headset
- ALSA: hda/realtek: Add quirk for Clevo PC50HS
- ASoC: DAPM: Fix missing kctl change notifications
- audit: fix possible null-pointer dereference in audit_filter_rules
- [powerpc*] powerpc64/idle: Fix SP offsets when saving GPRs
- [powerpc*] KVM: PPC: Book3S HV: Fix stack handling in
idle_kvm_start_guest()
- [powerpc*] KVM: PPC: Book3S HV: Make idle_kvm_start_guest() return 0 if it
went to guest (CVE-2021-43056)
- [powerpc*] idle: Don't corrupt back chain when going idle
- mm, slub: fix mismatch between reconstructed freelist depth and cnt
- mm, slub: fix potential memoryleak in kmem_cache_open()
- mm, slub: fix incorrect memcg slab count for bulk free
- [x86] KVM: nVMX: promptly process interrupts delivered while in guest mode
- nfc: nci: fix the UAF of rf_conn_info object (CVE-2021-3760)
- isdn: cpai: check ctr->cnr to avoid array index out of bound
(CVE-2021-43389)
- [arm64] net: hns3: fix the max tx size according to user manual
- ALSA: hda: intel: Allow repeatedly probing on codec configuration errors
- btrfs: deal with errors when checking if a dir entry exists during log
replay
- net: stmmac: add support for dwmac 3.40a
- isdn: mISDN: Fix sleeping function called from invalid context
- [x86] platform/x86: intel_scu_ipc: Update timeout value in comment
- ALSA: hda: avoid write to STATESTS if controller is in reset
- [x86] perf/x86/msr: Add Sapphire Rapids CPU support
- scsi: iscsi: Fix set_param() handling
- scsi: qla2xxx: Fix a memory leak in an error path of qla2x00_process_els()
- sched/scs: Reset the shadow stack when idle_task_exit
- [arm64] net: hns3: fix for miscalculation of rx unused desc
- scsi: core: Fix shost->cmd_per_lun calculation in scsi_add_host_with_dma()
- can: isotp: isotp_sendmsg(): fix TX buffer concurrent access in
isotp_sendmsg()
- [s390x] pci: fix zpci_zdev_put() on reserve
- net: mdiobus: Fix memory leak in __mdiobus_register
- tracing: Have all levels of checks prevent recursion
- e1000e: Separate TGP board type from SPT
- [armhf] pinctrl: stm32: use valid pin identifier in stm32_pinctrl_resume()
https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.77
- [armel,armhf] 9139/1: kprobes: fix arch_init_kprobes() prototype
- io_uring: don't take uring_lock during iowq cancel
- [powerpc*] bpf: Fix BPF_MOD when imm == 1
- [arm64] Avoid premature usercopy failure
- ext4: fix possible UAF when remounting r/o a mmp-protected file system
- usbnet: sanity check for maxpacket
- usbnet: fix error return code in usbnet_probe()
- pinctrl: amd: disable and mask interrupts on probe
- ata: sata_mv: Fix the error handling of mv_chip_id()
- tipc: fix size validations for the MSG_CRYPTO type (CVE-2021-43267)
- nfc: port100: fix using -ERRNO as command type mask
- Revert "net: mdiobus: Fix memory leak in __mdiobus_register"
- mmc: vub300: fix control-message timeouts
- mmc: cqhci: clear HALT state after CQE enable
- [armhf] mmc: dw_mmc: exynos: fix the finding clock sample value
- mmc: sdhci: Map more voltage level to SDHCI_POWER_330
- [arm64,armhf] mmc: sdhci-esdhc-imx: clear the buffer_read_ready to reset
standard tuning circuit
- ocfs2: fix race between searching chunks and release journal_head from
buffer_head
- nvme-tcp: fix H2CData PDU send accounting (again)
- cfg80211: scan: fix RCU in cfg80211_add_nontrans_list()
- cfg80211: fix management registrations locking
- net: lan78xx: fix division by zero in send path
- mm, thp: bail out early in collapse_file for writeback page
- drm/ttm: fix memleak in ttm_transfered_destroy
- drm/amdgpu: fix out of bounds write (CVE-2021-42327)
- cgroup: Fix memory leak caused by missing cgroup_bpf_offline
- tcp_bpf: Fix one concurrency problem in the tcp_bpf_send_verdict function
- bpf: Fix potential race in tail call compatibility check
- bpf: Fix error usage of map_fd and fdget() in generic_map_update_batch()
- [amd64] IB/qib: Protect from buffer overflow in struct qib_user_sdma_pkt
fields
- [amd64] IB/hfi1: Fix abba locking issue with sc_disable()
- nvmet-tcp: fix data digest pointer calculation
- nvme-tcp: fix data digest pointer calculation
- nvme-tcp: fix possible req->offset corruption
- RDMA/mlx5: Set user priority for DCT
- [arm64] dts: allwinner: h5: NanoPI Neo 2: Fix ethernet node
- regmap: Fix possible double-free in regcache_rbtree_exit()
- net: batman-adv: fix error handling
- net-sysfs: initialize uid and gid before calling net_ns_get_ownership
- cfg80211: correct bridge/4addr mode check
- net: Prevent infinite while loop in skb_tx_hash()
- RDMA/sa_query: Use strscpy_pad instead of memcpy to copy a string
- net: ethernet: microchip: lan743x: Fix driver crash when lan743x_pm_resume
fails
- net: ethernet: microchip: lan743x: Fix dma allocation failure by using
dma_set_mask_and_coherent
- phy: phy_ethtool_ksettings_get: Lock the phy for consistency
- phy: phy_ethtool_ksettings_set: Move after phy_start_aneg
- phy: phy_start_aneg: Add an unlocked version
- phy: phy_ethtool_ksettings_set: Lock the PHY while changing settings
- sctp: use init_tag from inithdr for ABORT chunk (CVE-2021-3772)
- sctp: fix the processing for INIT_ACK chunk (CVE-2021-3772)
- sctp: fix the processing for COOKIE_ECHO chunk (CVE-2021-3772)
- sctp: add vtag check in sctp_sf_violation (CVE-2021-3772)
- sctp: add vtag check in sctp_sf_do_8_5_1_E_sa (CVE-2021-3772)
- sctp: add vtag check in sctp_sf_ootb (CVE-2021-3772)
- lan743x: fix endianness when accessing descriptors
- [s390x] KVM: clear kicked_mask before sleeping again
- [s390x] KVM: preserve deliverable_mask in __airqs_kick_single_vcpu
https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.78
- scsi: core: Put LLD module refcnt after SCSI device is released
- Revert "io_uring: reinforce cancel on flush during exit"
- sfc: Fix reading non-legacy supported link modes
- vrf: Revert "Reset skb conntrack connection..."
- net: ethernet: microchip: lan743x: Fix skb allocation failure
- media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt()
(CVE-2021-42739)
- Revert "xhci: Set HCD flag to defer primary roothub registration"
- Revert "usb: core: hcd: Add support for deferring roothub registration"
- mm: khugepaged: skip huge page collapse for special files
- Revert "drm/ttm: fix memleak in ttm_transfered_destroy"
- [arm*] 9120/1: Revert "amba: make use of -1 IRQs warn"
- [arm64] Revert "wcn36xx: Disable bmps when encryption is disabled"
- ALSA: usb-audio: Add Schiit Hel device to mixer map quirk table
- ALSA: usb-audio: Add Audient iD14 to mixer map quirk table
https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.79
- [x86] Revert "x86/kvm: fix vcpu-id indexed array sizes"
- [arm64,armhf] usb: musb: Balance list entry in musb_gadget_queue
- usb-storage: Add compatibility quirk flags for iODD 2531/2541
- [arm*] binder: don't detect sender/target during buffer cleanup
- printk/console: Allow to disable console output by using console="" or
console=null
- staging: rtl8712: fix use-after-free in rtl8712_dl_fw
- isofs: Fix out of bound access for corrupted isofs image
- [x86] comedi: dt9812: fix DMA buffers on stack
- [x86] comedi: ni_usb6501: fix NULL-deref in command paths
- [x86] comedi: vmk80xx: fix transfer-buffer overflows
- [x86] comedi: vmk80xx: fix bulk-buffer overflow
- [x86] comedi: vmk80xx: fix bulk and interrupt message timeouts
- staging: r8712u: fix control-message timeout
- [x86] staging: rtl8192u: fix control-message timeouts
- rsi: fix control-message timeout
https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.80
- xhci: Fix USB 3.1 enumeration issues by increasing roothub power-on-good
delay
- usb: xhci: Enable runtime-pm by default on AMD Yellow Carp platform
- [arm*] binder: use euid from cred instead of using task
- [arm*] binder: use cred instead of task for selinux checks
- [arm*] binder: use cred instead of task for getsecid
- Input: iforce - fix control-message timeout
- Input: elantench - fix misreporting trackpoint coordinates
(Closes: #989285)
- libata: fix read log timeout value
- ocfs2: fix data corruption on truncate
- scsi: core: Remove command size deduction from scsi_setup_scsi_cmnd()
- scsi: qla2xxx: Fix kernel crash when accessing port_speed sysfs file
- scsi: qla2xxx: Fix use after free in eh_abort path
- [arm64,armhf] mmc: dw_mmc: Dont wait for DRTO on Write RSP error
- exfat: fix incorrect loading of i_blocks for large files
- tpm: Check for integer overflow in tpm2_map_response_body()
- media: ite-cir: IR receiver stop working after receive overflow
(Closes: #996672)
- media: ir-kbd-i2c: improve responsiveness of hauppauge zilog receivers
(Closes: #994050)
- media: v4l2-ioctl: Fix check_ext_ctrls
- ALSA: hda/realtek: Fix mic mute LED for the HP Spectre x360 14
- ALSA: hda/realtek: Add a quirk for HP OMEN 15 mute LED
- ALSA: hda/realtek: Add quirk for Clevo PC70HS
- ALSA: hda/realtek: Headset fixup for Clevo NH77HJQ
- ALSA: hda/realtek: Add a quirk for Acer Spin SP513-54N
- ALSA: hda/realtek: Add quirk for ASUS UX550VE
- ALSA: hda/realtek: Add quirk for HP EliteBook 840 G7 mute LED
- ALSA: ua101: fix division by zero at probe
- ALSA: 6fire: fix control and bulk message timeouts
- ALSA: line6: fix control and interrupt message timeouts
- ALSA: usb-audio: Line6 HX-Stomp XL USB_ID for 48k-fixed quirk
- ALSA: usb-audio: Add registration quirk for JBL Quantum 400
- ALSA: hda: Free card instance properly at probe errors
- ALSA: synth: missing check for possible NULL after the call to kstrdup
- ALSA: timer: Fix use-after-free problem
- ALSA: timer: Unconditionally unlink slave instances, too
- ext4: fix lazy initialization next schedule time computation in more
granular unit
- ext4: ensure enough credits in ext4_ext_shift_path_extents
- ext4: refresh the ext4_ext_path struct after dropping i_data_sem.
- fuse: fix page stealing
- [x86] cpu: Fix migration safety with X86_BUG_NULL_SEL
- [x86] irq: Ensure PI wakeup handler is unregistered before module unload
- ASoC: soc-core: fix null-ptr-deref in snd_soc_del_component_unlocked()
- ALSA: hda/realtek: Fixes HP Spectre x360 15-eb1xxx speakers
- [arm64] cavium: Return negative value when pci_alloc_irq_vectors() fails
- scsi: qla2xxx: Return -ENOMEM if kzalloc() fails
- scsi: qla2xxx: Fix unmap of already freed sgl
- mISDN: Fix return values of the probe function
- [arm64] cavium: Fix return values of the probe function
- sfc: Export fibre-specific supported link modes
- sfc: Don't use netif_info before net_device setup
- [armhf] reset: socfpga: add empty driver allowing consumers to probe
- drm: panel-orientation-quirks: Add quirk for Aya Neo 2021
- bpf: Define bpf_jit_alloc_exec_limit for arm64 JIT
- bpf: Prevent increasing bpf_jit_limit above max
- xen/netfront: stop tx queues during live migration
- nvmet-tcp: fix a memory leak when releasing a queue
- [armhf] spi: spl022: fix Microwire full duplex mode
- net: multicast: calculate csum of looped-back and forwarded packets
- [armhf] watchdog: Fix OMAP watchdog early handling
- drm: panel-orientation-quirks: Add quirk for GPD Win3
- block: schedule queue restart after BLK_STS_ZONE_RESOURCE
- nvmet-tcp: fix header digest verification
- r8169: Add device 10ec:8162 to driver r8169
- [x86] vmxnet3: do not stop tx queues after netif_device_detach()
- nfp: bpf: relax prog rejection for mtu check through max_pkt_offset
- net/smc: Fix smc_link->llc_testlink_time overflow
- net/smc: Correct spelling mistake to TCPF_SYN_RECV
- rds: stop using dmapool
- btrfs: clear MISSING device status bit in btrfs_close_one_device
- btrfs: fix lost error handling when replaying directory deletes
- btrfs: call btrfs_check_rw_degradable only if there is a missing device
- [x86] KVM: VMX: Unregister posted interrupt wakeup handler on hardware
unsetup
- selinux: fix race condition when computing ocontext SIDs
- [armhf] regulator: s5m8767: do not use reset value as DVS voltage if GPIO
DVS is disabled
- [amd64] EDAC/sb_edac: Fix top-of-high-memory value for Broadwell/Haswell
- [x86] mwifiex: fix division by zero in fw download path
- ath6kl: fix division by zero in send path
- ath6kl: fix control-message timeout
- ath10k: fix control-message timeout
- ath10k: fix division by zero in send path
- PCI: Mark Atheros QCA6174 to avoid bus reset
- rtl8187: fix control-message timeouts
- [arm64] wcn36xx: Fix HT40 capability for 2Ghz band
- [arm64] wcn36xx: Fix tx_status mechanism
- [arm64] wcn36xx: Fix (QoS) null data frame bitrate/modulation
- PM: sleep: Do not let "syscore" devices runtime-suspend during system
transitions
- mwifiex: Read a PCI register after writing the TX ring write pointer
- mwifiex: Try waking the firmware until we get an interrupt
- libata: fix checking of DMA state
- [arm64] wcn36xx: handle connection loss indication
- rsi: fix occasional initialisation failure with BT coex
- rsi: fix key enabled check causing unwanted encryption for vap_id > 0
- rsi: fix rate mask set leading to P2P failure
- rsi: Fix module dev_oper_mode parameter description
- [x86] perf/x86/intel/uncore: Support extra IMC channel on Ice Lake server
- [x86] perf/x86/intel/uncore: Fix Intel ICX IIO event constraints
- RDMA/qedr: Fix NULL deref for query_qp on the GSI QP
- signal: Remove the bogus sigkill_pending in ptrace_stop
- [mips*] signal/mips: Update (_save|_restore)_fp_context to fail with
-EFAULT
- [arm64] soc: fsl: dpio: replace smp_processor_id with raw_smp_processor_id
- [arm64] soc: fsl: dpio: use the combined functions to protect critical
zone
- [x86] power: supply: max17042_battery: Prevent int underflow in
set_soc_threshold
- [x86] power: supply: max17042_battery: use VFSOC for capacity when no rsns
- [arm64] KVM: arm64: Extract ESR_ELx.EC only
- [x86] KVM: nVMX: Query current VMCS when determining if MSR bitmaps are in
use
- can: j1939: j1939_tp_cmd_recv(): ignore abort message in the BAM transport
- can: j1939: j1939_can_recv(): ignore messages with invalid source address
- ring-buffer: Protect ring_buffer_reset() from reentrancy
- serial: core: Fix initializing and restoring termios speed
- ifb: fix building without CONFIG_NET_CLS_ACT
- ALSA: mixer: oss: Fix racy access to slots
- ALSA: mixer: fix deadlock in snd_mixer_oss_set_volume
- xen/balloon: add late_initcall_sync() for initial ballooning done
- ovl: fix use after free in struct ovl_aio_req
- [arm*] PCI: pci-bridge-emul: Fix emulation of W1C bits
- [arm64] PCI: aardvark: Do not clear status bits of masked interrupts
- [arm64] PCI: aardvark: Fix checking for link up via LTSSM state
- [arm64] PCI: aardvark: Do not unmask unused interrupts
- [arm64] PCI: aardvark: Fix reporting Data Link Layer Link Active
- [arm64] PCI: aardvark: Fix configuring Reference clock
- [arm64] PCI: aardvark: Fix return value of MSI domain .alloc() method
- [arm64] PCI: aardvark: Read all 16-bits from PCIE_MSI_PAYLOAD_REG
- [arm64] PCI: aardvark: Fix support for bus mastering and PCI_COMMAND on
emulated bridge
- [arm64] PCI: aardvark: Fix support for PCI_BRIDGE_CTL_BUS_RESET on
emulated bridge
- [arm64] PCI: aardvark: Set PCI Bridge Class Code to PCI Bridge
- [arm64] PCI: aardvark: Fix support for PCI_ROM_ADDRESS1 on emulated bridge
- quota: check block number when reading the block in quota file
- quota: correct error number in free_dqentry()
- pinctrl: core: fix possible memory leak in pinctrl_enable()
- iio: dac: ad5446: Fix ad5622_write() return value
- iio: ad5770r: make devicetree property reading consistent
- USB: serial: keyspan: fix memleak on probe errors
- serial: 8250: fix racy uartclk update
- USB: iowarrior: fix control-message timeouts
- [arm64,armhf] USB: chipidea: fix interrupt deadlock
- [x86] power: supply: max17042_battery: Clear status bits in interrupt
handler
- dma-buf: WARN on dmabuf release with pending attachments
- drm: panel-orientation-quirks: Update the Lenovo Ideapad D330 quirk (v2)
- drm: panel-orientation-quirks: Add quirk for KD Kurio Smart C15200 2-in-1
- drm: panel-orientation-quirks: Add quirk for the Samsung Galaxy Book 10.6
- Bluetooth: sco: Fix lock_sock() blockage by memcpy_from_msg()
(CVE-2021-3640)
- Bluetooth: fix use-after-free error in lock_sock_nested()
- drm/panel-orientation-quirks: add Valve Steam Deck
- [x86] platform/x86: wmi: do not fail if disabling fails
- locking/lockdep: Avoid RCU-induced noinstr fail
- net: sched: update default qdisc visibility after Tx queue cnt changes
- rcu-tasks: Move RTGS_WAIT_CBS to beginning of rcu_tasks_kthread() loop
- ath11k: Align bss_chan_info structure with firmware
- [x86] Increase exception stack sizes
- mwifiex: Run SET_BSS_MODE when changing from P2P to STATION vif-type
- mwifiex: Properly initialize private structure on interface type changes
- fscrypt: allow 256-bit master keys with AES-256-XTS
- drm/amdgpu: Fix MMIO access page fault
- ath11k: Avoid reg rules update during firmware recovery
- ath11k: add handler for scan event WMI_SCAN_EVENT_DEQUEUED
- ath11k: Change DMA_FROM_DEVICE to DMA_TO_DEVICE when map reinjected
packets
- ath10k: high latency fixes for beacon buffer
- media: netup_unidvb: handle interrupt properly according to the firmware
- media: uvcvideo: Set capability in s_param
- media: uvcvideo: Return -EIO for control errors
- media: uvcvideo: Set unique vdev name based in type
- [armhf] media: imx: set a media_device bus_info string
- media: mceusb: return without resubmitting URB in case of -EPROTO error.
- rtw88: fix RX clock gate setting while fifo dump
- brcmfmac: Add DMI nvram filename quirk for Cyberbook T116 tablet
- ipmi: Disable some operations during a panic
- fs/proc/uptime.c: Fix idle time reporting in /proc/uptime
- ACPICA: Avoid evaluating methods too early during system resume
- media: usb: dvd-usb: fix uninit-value bug in dibusb_read_eeprom_byte()
- net-sysfs: try not to restart the syscall if it will fail eventually
- tracefs: Have tracefs directories not set OTH permission bits by default
- ath: dfs_pattern_detector: Fix possible null-pointer dereference in
channel_detector_create()
- iov_iter: Fix iov_iter_get_pages{,_alloc} page fault return value
- ACPI: battery: Accept charges over the design capacity as full
- net: phy: micrel: make *-skew-ps check more lenient
- [arm64] drm/msm: prevent NULL dereference in msm_gpu_crashstate_capture()
- block: bump max plugged deferred size from 16 to 32
- md: update superblock after changing rdev flags in state_store
- memstick: r592: Fix a UAF bug when removing the driver
- lib/xz: Avoid overlapping memcpy() with invalid input with in-place
decompression
- lib/xz: Validate the value before assigning it to an enum variable
- workqueue: make sysfs of unbound kworker cpumask more clever
- mwl8k: Fix use-after-free in mwl8k_fw_state_machine()
- block: remove inaccurate requeue check
- nvmet: fix use-after-free when a port is removed
- nvmet-rdma: fix use-after-free when a port is removed
- nvmet-tcp: fix use-after-free when a port is removed
- nvme: drop scan_lock and always kick requeue list when removing namespaces
- PM: hibernate: Get block device exclusively in swsusp_check()
- iwlwifi: mvm: disable RX-diversity in powersave
- gre/sit: Don't generate link-local addr if addr_gen_mode is
IN6_ADDR_GEN_MODE_NONE
- gfs2: Cancel remote delete work asynchronously
- gfs2: Fix glock_hash_walk bugs
- vrf: run conntrack only in context of lower/physdev for locally generated
packets
- net: annotate data-race in neigh_output()
- ACPI: AC: Quirk GK45 to skip reading _PSR
- btrfs: reflink: initialize return value to 0 in btrfs_extent_same()
- btrfs: do not take the uuid_mutex in btrfs_rm_device
- [arm64] wcn36xx: Correct band/freq reporting on RX
- [x86] hyperv: Protect set_hv_tscchange_cb() against getting preempted
- drm/amd/display: dcn20_resource_construct reduce scope of FPU enabled
- task_stack: Fix end_of_stack() for architectures with upwards-growing
stack
- erofs: don't trigger WARN() when decompression fails
- netfilter: conntrack: set on IPS_ASSURED if flows enters internal stream
state
- Bluetooth: fix init and cleanup of sco_conn.timeout_work
- rcu: Fix existing exp request check in sync_sched_exp_online_cleanup()
- objtool: Add xen_start_kernel() to noreturn list
- [x86] xen: Mark cpu_bringup_and_idle() as dead_end_function
- objtool: Fix static_call list generation
- virtio-gpu: fix possible memory allocation failure
- lockdep: Let lock_is_held_type() detect recursive read as read
- net: net_namespace: Fix undefined member in key_remove_domain()
- cgroup: Make rebind_subsystems() disable v2 controllers all at once
- [arm64] wcn36xx: Fix Antenna Diversity Switching
- Bluetooth: btmtkuart: fix a memleak in mtk_hci_wmt_sync
- [arm64] crypto: caam - disable pkc for non-E SoCs
- rxrpc: Fix _usecs_to_jiffies() by using usecs_to_jiffies()
- ath11k: fix some sleeping in atomic bugs
- ath11k: Avoid race during regd updates
- ath11k: fix packet drops due to incorrect 6 GHz freq value in rx status
- ath11k: Fix memory leak in ath11k_qmi_driver_event_work
- ath10k: Fix missing frame timestamp for beacon/probe-resp
- ath10k: sdio: Add missing BH locking around napi_schdule()
- drm/ttm: stop calling tt_swapin in vm_access
- [arm64] mm: update max_pfn after memory hotplug
- drm/amdgpu: fix warning for overflow check
- media: em28xx: add missing em28xx_close_extension
- media: dvb-usb: fix ununit-value in az6027_rc_query
- media: v4l2-ioctl: S_CTRL output the right value
- media: si470x: Avoid card name truncation
- [x86] media: tm6000: Avoid card name truncation
- media: cx23885: Fix snd_card_free call on null card pointer
- kprobes: Do not use local variable when creating debugfs file
- cpuidle: Fix kobject memory leaks in error paths
- media: em28xx: Don't use ops->suspend if it is NULL
- ath9k: Fix potential interrupt storm on queue reset
- PM: EM: Fix inefficient states detection
- [amd64] EDAC/amd64: Handle three rank interleaving mode
- rcu: Always inline rcu_dynticks_task*_{enter,exit}()
- netfilter: nft_dynset: relax superfluous check on set updates
- [x86] crypto: qat - detect PFVF collision after ACK
- [x86] crypto: qat - disregard spurious PFVF interrupts
- b43legacy: fix a lower bounds test
- b43: fix a lower bounds test
- [amd64] gve: Recover from queue stall due to missed IRQ
- [armhf] mmc: sdhci-omap: Fix NULL pointer exception if regulator is not
configured
- [armhf] mmc: sdhci-omap: Fix context restore
- memstick: jmb38x_ms: use appropriate free function in
jmb38x_ms_alloc_host()
- net, neigh: Fix NTF_EXT_LEARNED in combination with NTF_USE
- hwmon: Fix possible memleak in __hwmon_device_register()
- ath10k: fix max antenna gain unit
- kernel/sched: Fix sched_fork() access an invalid sched_task_group
- tcp: switch orphan_count to bare per-cpu counters
- [arm64] drm/msm: potential error pointer dereference in init()
- [arm64] drm/msm: uninitialized variable in msm_gem_import()
- net: stream: don't purge sk_error_queue in sk_stream_kill_queues()
- [x86] platform/x86: thinkpad_acpi: Fix bitwise vs. logical warning
- mt76: mt76x02: fix endianness warnings in mt76x02_mac.c
- rsi: stop thread firstly in rsi_91x_init() error handling
- mwifiex: Send DELBA requests according to spec
- [arm64] net: enetc: unmap DMA in enetc_send_cmd()
- phy: micrel: ksz8041nl: do not use power down mode
- nvme-rdma: fix error code in nvme_rdma_setup_ctrl
- PM: hibernate: fix sparse warnings
- [arm64] drm/msm: Fix potential NULL dereference in DPU SSPP
- bpftool: Avoid leaking the JSON writer prepared for program metadata
- [s390x] gmap: don't unconditionally call pte_unmap_unlock() in
__gmap_zap()
- [s390x] KVM: pv: avoid double free of sida page
- [s390x] KVM: pv: avoid stalls for kvm_s390_pv_init_vm
- tpm: fix Atmel TPM crash caused by too frequent queries
- tpm_tis_spi: Add missing SPI ID
- tcp: don't free a FIN sk_buff in tcp_remove_empty_skb()
- [s390x] KVM: Fix handle_sske page fault handling
- libertas_tf: Fix possible memory leak in probe and disconnect
- libertas: Fix possible memory leak in probe and disconnect
- [arm64] wcn36xx: add proper DMA memory barriers in rx path
- [arm64] wcn36xx: Fix discarded frames due to wrong sequence number
- drm/amdgpu/gmc6: fix DMA mask from 44 to 40 bits
- [amd64,arm64] net: amd-xgbe: Toggle PLL settings during rate change
- net: phylink: avoid mvneta warning when setting pause parameters
- crypto: pcrypt - Delay write to padata->info
- udp6: allow SO_MARK ctrl msg to affect routing
- cgroup: Fix rootcg cpu.stat guest double counting
- bpf: Fix propagation of bounds from 64-bit min/max into 32-bit and
var_off.
- bpf: Fix propagation of signed bounds from 64-bit min/max into 32-bit.
- iio: st_sensors: Call st_sensors_power_enable() from bus drivers
- iio: st_sensors: disable regulators after device unregistration
- RDMA/bnxt_re: Fix query SRQ failure
- [arm64] dts: meson-g12a: Fix the pwm regulator supply properties
- [armhf] bus: ti-sysc: Fix timekeeping_suspended warning on resume
- scsi: dc395: Fix error case unwinding
- JFS: fix memleak in jfs_mount
- ALSA: hda: Reduce udelay() at SKL+ position reporting
- ALSA: hda: Release controller display power during shutdown/reboot
- ALSA: hda: Fix hang during shutdown due to link reset
- ALSA: hda: Use position buffer for SKL+ again
- soundwire: debugfs: use controller id and link_id for debugfs
- scsi: pm80xx: Fix misleading log statement in pm8001_mpi_get_nvmd_resp()
- driver core: Fix possible memory leak in device_link_add()
- [x86] ASoC: SOF: topology: do not power down primary core during topology
removal
- [arm64,armhf] soc/tegra: Fix an error handling path in
tegra_powergate_power_up()
- [powerpc*] Refactor is_kvm_guest() declaration to new header
- [powerpc*] Rename is_kvm_guest() to check_kvm_guest()
- [powerpc*] Reintroduce is_kvm_guest() as a fast-path check
- [powerpc*] Fix is_kvm_guest() / kvm_para_available()
- [powerpc*] fix unbalanced node refcount in check_kvm_guest()
- serial: 8250_dw: Drop wrong use of ACPI_PTR()
- scsi: csiostor: Uninitialized data in csio_ln_vnp_read_cbfn()
- RDMA/mlx4: Return missed an error if device doesn't support steering
- iio: adis: do not disabe IRQs in 'adis_init()'
- scsi: ufs: Refactor ufshcd_setup_clocks() to remove skip_ref_clk
- [arm64,armhf] serial: imx: fix detach/attach of serial console
- [arm*] usb: dwc2: drd: fix dwc2_force_mode call in dwc2_ovr_init
- [arm*] usb: dwc2: drd: fix dwc2_drd_role_sw_set when clock could be
disabled
- [arm*] usb: dwc2: drd: reset current session before setting the new one
- [arm64] firmware: qcom_scm: Fix error retval in
__qcom_scm_is_call_available()
- [arm64] phy: qcom-qusb2: Fix a memory leak on probe
- [armhf] phy: ti: gmii-sel: check of_get_address() for failure
- [arm64] serial: xilinx_uartps: Fix race condition causing stuck TX
- HID: u2fzero: clarify error check and length calculations
- HID: u2fzero: properly handle timeouts in usb_submit_urb
- virtio_ring: check desc == NULL when using indirect with packed
- [mips*] cm: Convert to bitfield API to fix out-of-bounds access
- apparmor: fix error check
- rpmsg: Fix rpmsg_create_ept return when RPMSG config is not defined
- nfsd: don't alloc under spinlock in rpc_parse_scope_id
- NFS: Fix dentry verifier races
- pnfs/flexfiles: Fix misplaced barrier in nfs4_ff_layout_prepare_ds
- drm/plane-helper: fix uninitialized variable reference
- [arm64] PCI: aardvark: Don't spam about PIO Response Status
- [arm64] PCI: aardvark: Fix preserving PCI_EXP_RTCTL_CRSSVE flag on
emulated bridge
- opp: Fix return in _opp_add_static_v2()
- NFS: Fix deadlocks in nfs_scan_commit_list()
- fs: orangefs: fix error return code of orangefs_revalidate_lookup()
- [arm64] mtd: spi-nor: hisi-sfc: Remove excessive clk_disable_unprepare()
- mtd: core: don't remove debugfs directory if device is in use
- [armhf] remoteproc: Fix a memory leak in an error handling path in
'rproc_handle_vdev()'
- NFS: Fix up commit deadlocks
- NFS: Fix an Oops in pnfs_mark_request_commit()
- Fix user namespace leak
- [arm64] soc: fsl: dpaa2-console: free buffer before returning from
dpaa2_console_read
- netfilter: nfnetlink_queue: fix OOB when mac header was cleared
- [x86] watchdog: f71808e_wdt: fix inaccurate report in WDIOC_GETTIMEOUT
- scsi: qla2xxx: Changes to support FCP2 Target
- scsi: qla2xxx: Relogin during fabric disturbance
- scsi: qla2xxx: Fix gnl list corruption
- scsi: qla2xxx: Turn off target reset during issue_lip
- NFSv4: Fix a regression in nfs_set_open_stateid_locked()
- xen-pciback: Fix return in pm_ctrl_init()
- [armhf] net: davinci_emac: Fix interrupt pacing disable
- ethtool: fix ethtool msg len calculation for pause stats
- net: vlan: fix a UAF in vlan_dev_real_dev()
- ice: Fix replacing VF hardware MAC to existing MAC filter
- ice: Fix not stopping Tx queues for VFs
- [x86] ACPI: PMIC: Fix intel_pmic_regs_handler() read accesses
- net: phy: fix duplex out of sync problem while changing settings
- bonding: Fix a use-after-free problem when bond_sysfs_slave_add() failed
- mfd: core: Add missing of_node_put for loop iteration
- mm/zsmalloc.c: close race window between zs_pool_dec_isolated() and
zs_unregister_migration()
- zram: off by one in read_block_state()
- llc: fix out-of-bound array index in llc_sk_dev_hash()
- nfc: pn533: Fix double free when pn533_fill_fragment_skbs() fails
- [arm64] pgtable: make __pte_to_phys/__phys_to_pte_val inline functions
- bpf, sockmap: Remove unhash handler for BPF sockmap usage
- bpf: sockmap, strparser, and tls are reusing qdisc_skb_cb and colliding
- [amd64] gve: Fix off by one in gve_tx_timeout()
- seq_file: fix passing wrong private data
- net/sched: sch_taprio: fix undefined behavior in ktime_mono_to_any
- [arm64] net: hns3: fix kernel crash when unload VF while it is being reset
- [arm64] net: hns3: allow configure ETS bandwidth of all TCs
- net: stmmac: allow a tc-taprio base-time of zero
- vsock: prevent unnecessary refcnt inc for nonblocking connect
- net/smc: fix sk_refcnt underflow on linkdown and fallback
- cxgb4: fix eeprom len when diagnostics not implemented
- [armel,armhf] 9155/1: fix early early_iounmap()
- [armhf] 9156/1: drop cc-option fallbacks for architecture selection
- [x86] mce: Add errata workaround for Skylake SKX37
- posix-cpu-timers: Clear task::posix_cputimers_work in copy_process()
- f2fs: should use GFP_NOFS for directory inodes
- net, neigh: Enable state migration between NUD_PERMANENT and NTF_USE
- 9p/net: fix missing error check in p9_check_errors
- memcg: prohibit unconditional exceeding the limit of dying tasks
- [powerpc*] lib: Add helper to check if offset is within conditional branch
range
- [powerpc*] bpf: Validate branch ranges
- [powerpc*] security: Add a helper to query stf_barrier type
- [powerpc*] bpf: Emit stf barrier instruction sequences for BPF_NOSPEC
- mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks
- mm, oom: do not trigger out_of_memory from the #PF
- video: backlight: Drop maximum brightness override for brightness zero
- [s390x] cio: check the subchannel validity for dev_busid
- [s390x] tape: fix timer initialization in tape_std_assign()
- [s390x] ap: Fix hanging ioctl caused by orphaned replies
- [s390x] cio: make ccw_device_dma_* more robust
- [powerpc*] powernv/prd: Unregister OPAL_MSG_PRD2 notifier during module
unload
- [arm64,armhf] drm/sun4i: Fix macros in sun8i_csc.h
- PCI: Add PCI_EXP_DEVCTL_PAYLOAD_* macros
- [arm64] PCI: aardvark: Fix PCIe Max Payload Size setting
- SUNRPC: Partial revert of commit 6f9f17287e78
- ath10k: fix invalid dma_addr_t token assignment
- arch/cc: Introduce a function to check for confidential computing features
- [arm64,armhf] soc/tegra: pmc: Fix imbalanced clock disabling in error code
path
https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.81
- block: Add a helper to validate the block size
- loop: Use blk_validate_block_size() to validate block size
- bootconfig: init: Fix memblock leak in xbc_make_cmdline()
- net: stmmac: add clocks management for gmac driver
- net: stmmac: fix missing unlock on error in stmmac_suspend()
- net: stmmac: fix system hang if change mac address after interface ifdown
- net: stmmac: fix issue where clk is being unprepared twice
- [arm64,armhf] net: stmmac: dwmac-rk: fix unbalanced pm_runtime_enable
warnings
- [x86] iopl: Fake iopl(3) CLI/STI usage
- PCI/MSI: Destroy sysfs before freeing entries
- PCI/MSI: Deal with devices lying about their MSI mask capability
- PCI: Add MSI masking quirk for Nvidia ION AHCI
- erofs: remove the occupied parameter from z_erofs_pagevec_enqueue()
- erofs: fix unsafe pagevec reuse of hooked pclusters
- scripts/lld-version.sh: Rewrite based on upstream ld-version.sh
- perf/core: Avoid put_page() when GUP fails
- thermal: Fix NULL pointer dereferences in of_thermal_ functions
https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.82
- [arm64] zynqmp: Do not duplicate flash partition label property
- [arm64] zynqmp: Fix serial compatible string
- scsi: lpfc: Fix list_add() corruption in lpfc_drain_txq()
- [armhf] bus: ti-sysc: Add quirk handling for reinit on context lost
- [armhf] bus: ti-sysc: Use context lost quirk for otg
- [armhf] usb: musb: tusb6010: check return value after calling
platform_get_resource()
- [x86] usb: typec: tipd: Remove WARN_ON in tps6598x_block_read
- staging: rtl8723bs: remove possible deadlock when disconnect (v2)
- [x86] ASoC: SOF: Intel: hda-dai: fix potential locking issue
- [armhf] clk: imx: imx6ul: Move csi_sel mux to correct base register
- [x86] ASoC: nau8824: Add DMI quirk mechanism for active-high jack-detect
- scsi: advansys: Fix kernel pointer leak
- ALSA: intel-dsp-config: add quirk for APL/GLK/TGL devices based on ES8336
codec
- firmware_loader: fix pre-allocated buf built-in firmware use
- tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc
- scsi: scsi_debug: Fix out-of-bound read in resp_readcap16()
- scsi: scsi_debug: Fix out-of-bound read in resp_report_tgtpgs()
- scsi: target: Fix ordered tag handling
- scsi: target: Fix alua_tg_pt_gps_count tracking
- iio: imu: st_lsm6dsx: Avoid potential array overflow in
st_lsm6dsx_set_odr()
- [i386] ALSA: gus: fix null pointer dereference on pointer block
- maple: fix wrong return value of maple_bus_init().
- f2fs: fix up f2fs_lookup tracepoints
- f2fs: fix to use WHINT_MODE
- f2fs: compress: disallow disabling compress on non-empty compressed file
- f2fs: fix incorrect return value in f2fs_sanity_check_ckpt()
- [armhf] clk/ast2600: Fix soc revision for AHB
- [arm64] clk: qcom: gcc-msm8996: Drop (again) gcc_aggre1_pnoc_ahb_clk
- sched/core: Mitigate race cpus_share_cache()/update_top_cache_domain()
- [x86] perf/x86/vlbr: Add c->flags to vlbr event constraints
- blkcg: Remove extra blkcg_bio_issue_init
- perf bpf: Avoid memory leak from perf_env__insert_btf()
- perf bench futex: Fix memory leak of perf_cpu_map__new()
- perf tests: Remove bash construct from record+zstd_comp_decomp.sh
- drm/nouveau: hdmigv100.c: fix corrupted HDMI Vendor InfoFrame
- net-zerocopy: Copy straggler unaligned data for TCP Rx. zerocopy.
- net-zerocopy: Refactor skb frag fast-forward op.
- tcp: Fix uninitialized access in skb frags array for Rx 0cp.
- tracing: Add length protection to histogram string copies
- bnxt_en: reject indirect blk offload when hw-tc-offload is off
- tipc: only accept encrypted MSG_CRYPTO msgs
- net: reduce indentation level in sk_clone_lock()
- sock: fix /proc/net/sockstat underflow in sk_clone_lock()
- net/smc: Make sure the link_id is unique
- iavf: Fix return of set the new channel count
- iavf: check for null in iavf_fix_features
- iavf: free q_vectors before queues in iavf_disable_vf
- iavf: Fix failure to exit out from last all-multicast mode
- iavf: prevent accidental free of filter structure
- iavf: validate pointers
- iavf: Fix for the false positive ASQ/ARQ errors while issuing VF reset
- iavf: Fix for setting queues to 0
- [x86] platform/x86: hp_accel: Fix an error handling path in
'lis3lv02d_probe()'
- net/mlx5e: nullify cq->dbg pointer in mlx5_debug_cq_remove()
- net/mlx5: Lag, update tracker when state change event received
- net/mlx5: E-Switch, Change mode lock from mutex to rw semaphore
- net/mlx5: E-Switch, return error if encap isn't supported
- scsi: core: sysfs: Fix hang when device state is set via sysfs
- net: sched: act_mirred: drop dst for the direction from egress to ingress
- [arm64] net: dpaa2-eth: fix use-after-free in dpaa2_eth_remove
- net: virtio_net_hdr_to_skb: count transport header in UFO
- i40e: Fix correct max_pkt_size on VF RX queue
- i40e: Fix NULL ptr dereference on VSI filter sync
- i40e: Fix changing previously set num_queue_pairs for PFs
- i40e: Fix ping is lost after configuring ADq on VF
- i40e: Fix warning message and call stack during rmmod i40e driver
- i40e: Fix creation of first queue by omitting it if is not power of two
- i40e: Fix display error code in dmesg
- e100: fix device suspend/resume (Closes: #995927)
- [powerpc*] KVM: PPC: Book3S HV: Use GLOBAL_TOC for
kvmppc_h_set_dabr/xdabr()
- [x86] perf/x86/intel/uncore: Fix filter_tid mask for CHA events on Skylake
Server
- [x86] perf/x86/intel/uncore: Fix IIO event constraints for Skylake Server
- [s390x] kexec: fix return code handling
- [arm64,armhf] net: stmmac: dwmac-rk: Fix ethernet on rk3399 based devices
- tun: fix bonding active backup with arp monitoring
- tipc: check for null after calling kmemdup
- ipc: WARN if trying to remove ipc object which is absent
- [x86] hyperv: Fix NULL deref in set_hv_tscchange_cb() if Hyper-V setup
fails
- scsi: qla2xxx: Fix mailbox direction flags in qla2xxx_get_adapter_id()
- [s390x] kexec: fix memory leak of ipl report buffer
- block: Check ADMIN before NICE for IOPRIO_CLASS_RT
- [x86] KVM: nVMX: don't use vcpu->arch.efer when checking host state on
nested state load
- udf: Fix crash after seekdir
- [armhf] net: stmmac: socfpga: add runtime suspend/resume callback for
stratix10 platform
- btrfs: fix memory ordering between normal and ordered work functions
- cfg80211: call cfg80211_stop_ap when switch from P2P_GO type
- drm/udl: fix control-message timeout
- drm/nouveau: Add a dedicated mutex for the clients list (CVE-2020-27820)
- drm/nouveau: use drm_dev_unplug() during device removal (CVE-2020-27820)
- drm/nouveau: clean up all clients on device removal (CVE-2020-27820)
- [x86] drm/i915/dp: Ensure sink rate values are always valid
- drm/amdgpu: fix set scaling mode Full/Full aspect/Center not works on vga
and dvi connectors
- scsi: ufs: core: Fix task management completion
- scsi: ufs: core: Fix task management completion timeout race
- hugetlbfs: flush TLBs correctly after huge_pmd_unshare (CVE-2021-4002)
- RDMA/netlink: Add __maybe_unused to static inline in C file
- selinux: fix NULL-pointer dereference when hashtab allocation fails
- ASoC: DAPM: Cover regression by kctl change notification fix
- ice: Delete always true check of PF pointer
- fs: export an inode_update_time helper
- btrfs: update device path inode time instead of bd_inode
- [x86] ALSA: hda: hdac_ext_stream: fix potential locking issues
- ALSA: hda: hdac_stream: fix potential locking issue in
snd_hdac_stream_assign()
- Revert "perf: Rework perf_event_exit_event()"
https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.83
- bpf: Fix toctou on read-only map's constant scalar tracking
(CVE-2021-4001)
- ACPI: Get acpi_device's parent from the parent field
- USB: serial: option: add Telit LE910S1 0x9200 composition
- USB: serial: option: add Fibocom FM101-GL variants
- [arm*] usb: dwc2: gadget: Fix ISOC flow for elapsed frames
- [arm*] usb: dwc2: hcd_queue: Fix use of floating point literal
- [arm64,armhf] usb: dwc3: gadget: Ignore NoStream after End Transfer
- [arm64,armhf] usb: dwc3: gadget: Check for L1/L2/U3 for Start Transfer
- [arm64,armhf] usb: dwc3: gadget: Fix null pointer exception
- net: nexthop: fix null pointer dereference when IPv6 is not enabled
- [arm64,armhf] usb: chipidea: ci_hdrc_imx: fix potential error pointer
dereference in probe
- usb: typec: fusb302: Fix masking of comparator and bc_lvl interrupts
- usb: hub: Fix usb enumeration issue due to address0 race
- usb: hub: Fix locking issues with address0_mutex
- [arm*] binder: fix test regression due to sender_euid change
- ALSA: ctxfi: Fix out-of-range access
- ALSA: hda/realtek: Add quirk for ASRock NUC Box 1100
- ALSA: hda/realtek: Fix LED on HP ProBook 435 G7
- media: cec: copy sequence field for the reply
- HID: wacom: Use "Confidence" flag to prevent reporting invalid contacts
- [x86] staging: rtl8192e: Fix use after free in _rtl92e_pci_disconnect()
- fuse: release pipe buf after last use
- xen: don't continue xenstore initialization in case of errors
- xen: detect uninitialized xenbus in xenbus_init
- [powerpc*] KVM: PPC: Book3S HV: Prevent POWER7/8 TLB flush flushing SLB
- tracing/uprobe: Fix uprobe_perf_open probes iteration
- tracing: Fix pid filtering when triggers are attached
- [arm64,armhf] mmc: sdhci-esdhc-imx: disable CMDQ support
- mmc: sdhci: Fix ADMA for PAGE_SIZE >= 64KiB
- [armhf] mdio: aspeed: Fix "Link is Down" issue
- [arm64] PCI: aardvark: Deduplicate code in advk_pcie_rd_conf()
- [arm64] PCI: aardvark: Update comment about disabling link training
- [arm64] PCI: aardvark: Implement re-issuing config requests on CRS
response
- [arm64] PCI: aardvark: Simplify initialization of rootcap on virtual
bridge
- [arm64] PCI: aardvark: Fix link training
- proc/vmcore: fix clearing user buffer by properly using clear_user()
- netfilter: ctnetlink: fix filtering with CTA_TUPLE_REPLY
- netfilter: ctnetlink: do not erase error code with EINVAL
- netfilter: ipvs: Fix reuse connection if RS weight is 0
- netfilter: flowtable: fix IPv6 tunnel addr match
- [x86] ASoC: topology: Add missing rwsem around snd_ctl_remove() calls
- net: ieee802154: handle iftypes as u32
- NFSv42: Don't fail clone() unless the OP_CLONE operation failed
- [armhf] socfpga: Fix crash with CONFIG_FORTIRY_SOURCE
- drm/nouveau/acr: fix a couple NULL vs IS_ERR() checks
- scsi: mpt3sas: Fix kernel panic during drive powercycle test
- [arm*] drm/vc4: fix error code in vc4_create_object()
- iavf: Prevent changing static ITR values if adaptive moderation is on
- ALSA: intel-dsp-config: add quirk for JSL devices based on ES8336 codec
- [arm64,armhf] firmware: smccc: Fix check for ARCH_SOC_ID not implemented
- ipv6: fix typos in __ip6_finish_output()
- nfp: checking parameter process for rx-usecs/tx-usecs is invalid
- net: stmmac: fix system hang caused by eee_ctrl_timer during
suspend/resume
- net: stmmac: retain PTP clock time during SIOCSHWTSTAMP ioctls
- net: ipv6: add fib6_nh_release_dsts stub
- net: nexthop: release IPv6 per-cpu dsts when replacing a nexthop group
- ice: fix vsi->txq_map sizing
- ice: avoid bpf_prog refcount underflow
- scsi: core: sysfs: Fix setting device state to SDEV_RUNNING
- scsi: scsi_debug: Zero clear zones at reset write pointer
- erofs: fix deadlock when shrink erofs slab
- net/smc: Ensure the active closing peer first closes clcsock
- [arm64,armhf] net: marvell: mvpp2: increase MTU limit when XDP enabled
- nvmet-tcp: fix incomplete data digest send
- [armhf] net/ncsi : Add payload to be 32-bit aligned to fix dropped packets
- PM: hibernate: use correct mode for swsusp_close()
- drm/amd/display: Set plane update flags for all planes in reset
- tcp_cubic: fix spurious Hystart ACK train detections for not-cwnd-limited
flows
- lan743x: fix deadlock in lan743x_phy_link_status_change()
- net: phylink: Force link down and retrigger resolve on interface change
- net: phylink: Force retrigger in case of latched link-fail indicator
- net/smc: Fix NULL pointer dereferencing in smc_vlan_by_tcpsk()
- net/smc: Fix loop in smc_listen
- nvmet: use IOCB_NOWAIT only if the filesystem supports it
- igb: fix netpoll exit with traffic
- [mips*] loongson64: fix FTLB configuration
- [mips*] use 3-level pgtable for 64KB page size on MIPS_VA_BITS_48
- net/sched: sch_ets: don't peek at classes beyond 'nbands'
- net: vlan: fix underflow for the real_dev refcnt
- net/smc: Don't call clcsock shutdown twice when smc shutdown
- [arm64] net: hns3: fix VF RSS failed problem after PF enable multi-TCs
- [arm64] net: mscc: ocelot: don't downgrade timestamping RX filters in
SIOCSHWTSTAMP
- [arm64] net: mscc: ocelot: correctly report the timestamping RX filters in
ethtool
- tcp: correctly handle increased zerocopy args struct size
- sched/scs: Reset task stack state in bringup_cpu()
- f2fs: set SBI_NEED_FSCK flag when inconsistent node block found
- ceph: properly handle statfs on multifs setups
- smb3: do not error on fsync when readonly
- [amd64] iommu/amd: Clarify AMD IOMMUv2 initialization messages
- vhost/vsock: fix incorrect used length reported to the guest
- tracing: Check pid filtering when creating events
- xen: sync include/xen/interface/io/ring.h with Xen's newest version
- xen/blkfront: read response from backend only once
- xen/blkfront: don't take local copy of a request from the ring page
- xen/blkfront: don't trust the backend response data blindly
- xen/netfront: read response from backend only once
- xen/netfront: don't read data from request on the ring page
- xen/netfront: disentangle tx_skb_freelist
- xen/netfront: don't trust the backend response data blindly
- tty: hvc: replace BUG_ON() with negative return value
- [s390x] mm: validate VMA in PGSTE manipulation functions
- shm: extend forced shm destroy to support objects from several IPC nses
- net: stmmac: platform: fix build warning when with !CONFIG_PM_SLEEP
- drm/amdgpu/gfx9: switch to golden tsc registers for renoir+
https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.84
- NFSv42: Fix pagecache invalidation after COPY/CLONE
- can: j1939: j1939_tp_cmd_recv(): check the dst address of TP.CM_BAM
- ovl: simplify file splice
- ovl: fix deadlock in splice write
- gfs2: release iopen glock early in evict
- gfs2: Fix length of holes reported at end-of-file
- [powerpc*] pseries/ddw: Revert "Extend upper limit for huge DMA window for
persistent memory"
- mac80211: do not access the IV when it was stripped
- net/smc: Transfer remaining wait queue entries during fallback
- [amd64,arm64] atlantic: Fix OOB read and write in hw_atl_utils_fw_rpc_wait
(CVE-2021-43975)
- net: return correct error code
- [x86] platform/x86: thinkpad_acpi: Add support for dual fan control
- [x86] platform/x86: thinkpad_acpi: Fix WWAN device disabled issue after S3
deep
- [s390x] setup: avoid using memblock_enforce_memory_limit
- btrfs: check-integrity: fix a warning on write caching disabled disk
- thermal: core: Reset previous low and high trip during thermal zone init
- scsi: iscsi: Unblock session then wake up error handler
- drm/amd/amdgpu: fix potential memleak
- ata: ahci: Add Green Sardine vendor ID as board_ahci_mobile
- [arm64] ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array
overflow in hns_dsaf_ge_srst_by_port()
- ipv6: check return value of ipv6_skip_exthdr
- net/smc: Avoid warning of possible recursive locking
- ACPI: Add stubs for wakeup handler functions
- vrf: Reset IPCB/IP6CB when processing outbound pkts in vrf dev xmit
- kprobes: Limit max data_size of the kretprobe instances
- rt2x00: do not mark device gone on EPROTO errors during start
- ipmi: Move remove_work to dedicated workqueue
- cpufreq: Fix get_cpu_device() failure in add_cpu_dev_symlink()
- [s390x] pci: move pseudo-MMIO to prevent MIO overlap
- fget: check that the fd still exists after getting a ref to it
- ipv6: fix memory leak in fib6_rule_suppress
- drm/amd/display: Allow DSC on supported MST branch devices
- KVM: Disallow user memslot with size that exceeds "unsigned long"
- [x86] KVM: nVMX: Flush current VPID (L1 vs. L2) for
KVM_REQ_TLB_FLUSH_GUEST
- [x86] KVM: x86: Use a stable condition around all VT-d PI paths
- [arm64] KVM: arm64: Avoid setting the upper 32 bits of TCR_EL2 and
CPTR_EL2 to 1
- [x86] KVM: X86: Use vcpu->arch.walk_mmu for kvm_mmu_invlpg()
- wireguard: allowedips: add missing __rcu annotation to satisfy sparse
- wireguard: device: reset peer src endpoint when netns exits
- wireguard: receive: use ring buffer for incoming handshakes
- wireguard: receive: drop handshakes if queue lock is contended
- wireguard: ratelimiter: use kvcalloc() instead of kvzalloc()
- [armhf] i2c: stm32f7: flush TX FIFO upon transfer errors
- [armhf] i2c: stm32f7: recover the bus on access timeout
- [armhf] i2c: stm32f7: stop dma transfer in case of NACK
- tcp: fix page frag corruption on page fault
- net: qlogic: qlcnic: Fix a NULL pointer dereference in
qlcnic_83xx_add_rings()
- net: mpls: Fix notifications when deleting a device
- siphash: use _unaligned version by default
- [arm64] ftrace: add missing BTIs
- net/mlx4_en: Fix an use-after-free bug in mlx4_en_try_alloc_resources()
- rxrpc: Fix rxrpc_peer leak in rxrpc_look_up_bundle()
- rxrpc: Fix rxrpc_local leak in rxrpc_lookup_peer()
- ALSA: intel-dsp-config: add quirk for CML devices based on ES8336 codec
- net: usb: lan78xx: lan78xx_phy_init(): use PHY_POLL instead of "0" if no
IRQ is available
- [arm64,armhf] net: marvell: mvpp2: Fix the computation of shared CPUs
- [arm64] dpaa2-eth: destroy workqueue at the end of remove function
- net: annotate data-races on txq->xmit_lock_owner
- ipv4: convert fib_num_tclassid_users to atomic_t
- net/smc: fix wrong list_del in smc_lgr_cleanup_early
- net/rds: correct socket tunable error in rds_tcp_tune()
- net/smc: Keep smc_close_final rc during active close
- [arm64] drm/msm/a6xx: Allocate enough space for GMU registers
- [arm64] drm/msm: Do hw_init() before capturing GPU state
- [amd64,arm64] atlantic: Increase delay for fw transactions
- [amd64,arm64] atlatnic: enable Nbase-t speeds with base-t
- [amd64,arm64] atlantic: Fix to display FW bundle version instead of FW mac
version.
- [amd64,arm64] atlantic: Add missing DIDs and fix 115c.
- [amd64,arm64] Remove Half duplex mode speed capabilities.
- [amd64,arm64] atlantic: Fix statistics logic for production hardware
- [amd64,arm64] atlantic: Remove warn trace message.
- [x86] KVM: x86/pmu: Fix reserved bits for AMD PerfEvtSeln register
- [x86] KVM: VMX: Set failure code in prepare_vmcs02()
- [x86] entry: Use the correct fence macro after swapgs in kernel CR3
- [x86] xen: Add xenpv_restore_regs_and_return_to_usermode()
- sched/uclamp: Fix rq->uclamp_max not set on first enqueue
- [x86] pv: Switch SWAPGS to ALTERNATIVE
- [x86] entry: Add a fence for kernel entry SWAPGS in paranoid_entry()
- vgacon: Propagate console boot parameters before calling `vc_resize'
- xhci: Fix commad ring abort, write all 64 bits to CRCR register.
- USB: NO_LPM quirk Lenovo Powered USB-C Travel Hub
- usb: typec: tcpm: Wait in SNK_DEBOUNCED until disconnect
- [x86] tsc: Add a timer to make sure TSC_adjust is always checked
- [x86] tsc: Disable clocksource watchdog for TSC on qualified platorms
- [x86] 64/mm: Map all kernel memory into trampoline_pgd
- [arm64] tty: serial: msm_serial: Deactivate RX DMA for polling support
- [arm*] serial: pl011: Add ACPI SBSA UART match id
- [arm64,armhf] serial: tegra: Change lower tolerance baud rate limit for
tegra20 and tegra30
- serial: core: fix transmit-buffer reset and memleak
- serial: 8250_pci: Fix ACCES entries in pci_serial_quirks array
- serial: 8250_pci: rewrite pericom_do_set_divisor()
- serial: 8250: Fix RTS modem control while in rs485 mode
- iwlwifi: mvm: retry init flow if failed
- ipmi: msghandler: Make symbol 'remove_work_wq' static
[ Salvatore Bonaccorso ]
* integrity: Drop "MODSIGN: load blacklist from MOKx" as redundant after
5.10.47.
* Bump ABI to 10
* Refresh "tools/perf: pmu-events: Fix reproducibility"
* [rt] Update to 5.10.73-rt54
* [rt] Refresh "tracing: Merge irqflags + preempt counter."
* Refresh "Export symbols needed by Android drivers"
* [rt] Refresh "printk: introduce kernel sync mode"
* [rt] Refresh "printk: move console printing to kthreads"
* [rt] Drop "rcutorture: Avoid problematic critical section nesting on RT"
* [rt] Add new signing key for Luis Claudio R. Goncalves
* [rt] Update to 5.10.83-rt58
[ Ben Hutchings ]
* tools/perf: Fix warning introduced by "tools/perf: pmu-events: Fix
reproducibility"
-- Salvatore Bonaccorso <email address hidden> Wed, 08 Dec 2021 17:21:12 +0100
