This bug was fixed in the package linux-azure-5.11 -
5.11.0-1028.31~20.04.2
---------------
linux-azure-5.11 (5.11.0-1028.31~20.04.2) focal; urgency=medium
* focal/linux-azure-5.11: 5.11.0-1028.31~20.04.2 -proposed tracker (LP:
#1955200)
* Re-enable DEBUG_INFO_BTF where it was disabled (LP: #1945632)
- [Config] azure-5.11: Re-enable CONFIG_DEBUG_INFO_BTF on all arches
[ Ubuntu: 5.11.0-1028.31 ]
* hirsute/linux-azure: 5.11.0-1028.31 -proposed tracker (LP: #1955201)
* Hirsute update: upstream stable patchset 2021-12-10 (LP: #1954533)
- [Config] azure: updateconfigs for ARCH_HAS_CC_PLATFORM
* hirsute:linux 5.11.0-45.49 fails to boot (LP: #1956984)
- Revert "mm: filemap: check if THP has hwpoisoned subpage for PMD page
fault"
- mm: filemap: check if THP has hwpoisoned subpage for PMD page fault
* icmp_redirect from selftests fails on F/kvm (unary operator expected)
(LP: #1938964)
- selftests: icmp_redirect: pass xfail=0 to log_test()
* Hirsute update: upstream stable patchset 2021-12-17 (LP: #1955277)
- arm64: zynqmp: Do not duplicate flash partition label property
- arm64: zynqmp: Fix serial compatible string
- ARM: dts: sunxi: Fix OPPs node name
- arm64: dts: allwinner: h5: Fix GPU thermal zone node name
- arm64: dts: allwinner: a100: Fix thermal zone node name
- staging: wfx: ensure IRQ is ready before enabling it
- ARM: dts: NSP: Fix mpcore, mmc node names
- scsi: lpfc: Fix list_add() corruption in lpfc_drain_txq()
- arm64: dts: rockchip: Disable CDN DP on Pinebook Pro
- arm64: dts: hisilicon: fix arm,sp805 compatible string
- RDMA/bnxt_re: Check if the vlan is valid before reporting
- bus: ti-sysc: Add quirk handling for reinit on context lost
- bus: ti-sysc: Use context lost quirk for otg
- usb: musb: tusb6010: check return value after calling
platform_get_resource()
- usb: typec: tipd: Remove WARN_ON in tps6598x_block_read
- ARM: dts: ux500: Skomer regulator fixes
- staging: rtl8723bs: remove possible deadlock when disconnect (v2)
- ARM: BCM53016: Specify switch ports for Meraki MR32
- arm64: dts: qcom: msm8998: Fix CPU/L2 idle state latency and residency
- arm64: dts: qcom: ipq6018: Fix qcom,controlled-remotely property
- arm64: dts: freescale: fix arm,sp805 compatible string
- ASoC: SOF: Intel: hda-dai: fix potential locking issue
- clk: imx: imx6ul: Move csi_sel mux to correct base register
- ASoC: nau8824: Add DMI quirk mechanism for active-high jack-detect
- scsi: advansys: Fix kernel pointer leak
- ALSA: intel-dsp-config: add quirk for APL/GLK/TGL devices based on ES8336
codec
- firmware_loader: fix pre-allocated buf built-in firmware use
- ARM: dts: omap: fix gpmc,mux-add-data type
- usb: host: ohci-tmio: check return value after calling
platform_get_resource()
- ARM: dts: ls1021a: move thermal-zones node out of soc/
- ARM: dts: ls1021a-tsn: use generic "jedec,spi-nor" compatible for flash
- ALSA: ISA: not for M68K
- tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc
- MIPS: sni: Fix the build
- scsi: scsi_debug: Fix out-of-bound read in resp_readcap16()
- scsi: scsi_debug: Fix out-of-bound read in resp_report_tgtpgs()
- scsi: target: Fix ordered tag handling
- scsi: target: Fix alua_tg_pt_gps_count tracking
- iio: imu: st_lsm6dsx: Avoid potential array overflow in
st_lsm6dsx_set_odr()
- powerpc/5200: dts: fix memory node unit name
- ARM: dts: qcom: fix memory and mdio nodes naming for RB3011
- ALSA: gus: fix null pointer dereference on pointer block
- powerpc/dcr: Use cmplwi instead of 3-argument cmpli
- powerpc/8xx: Fix Oops with STRICT_KERNEL_RWX without DEBUG_RODATA_TEST
- sh: check return code of request_irq
- maple: fix wrong return value of maple_bus_init().
- f2fs: fix up f2fs_lookup tracepoints
- f2fs: fix to use WHINT_MODE
- sh: fix kconfig unmet dependency warning for FRAME_POINTER
- sh: math-emu: drop unused functions
- sh: define __BIG_ENDIAN for math-emu
- f2fs: compress: disallow disabling compress on non-empty compressed file
- f2fs: fix incorrect return value in f2fs_sanity_check_ckpt()
- clk: ingenic: Fix bugs with divided dividers
- clk/ast2600: Fix soc revision for AHB
- clk: qcom: gcc-msm8996: Drop (again) gcc_aggre1_pnoc_ahb_clk
- mips: BCM63XX: ensure that CPU_SUPPORTS_32BIT_KERNEL is set
- sched/core: Mitigate race cpus_share_cache()/update_top_cache_domain()
- perf/x86/vlbr: Add c->flags to vlbr event constraints
- blkcg: Remove extra blkcg_bio_issue_init
- tracing/histogram: Do not copy the fixed-size char array field over the
field size
- perf bpf: Avoid memory leak from perf_env__insert_btf()
- perf bench futex: Fix memory leak of perf_cpu_map__new()
- perf tests: Remove bash construct from record+zstd_comp_decomp.sh
- drm/nouveau: hdmigv100.c: fix corrupted HDMI Vendor InfoFrame
- tcp: Fix uninitialized access in skb frags array for Rx 0cp.
- tracing: Add length protection to histogram string copies
- net: ipa: disable HOLB drop when updating timer
- net: bnx2x: fix variable dereferenced before check
- bnxt_en: reject indirect blk offload when hw-tc-offload is off
- tipc: only accept encrypted MSG_CRYPTO msgs
- net: reduce indentation level in sk_clone_lock()
- sock: fix /proc/net/sockstat underflow in sk_clone_lock()
- net/smc: Make sure the link_id is unique
- iavf: Fix return of set the new channel count
- iavf: check for null in iavf_fix_features
- iavf: free q_vectors before queues in iavf_disable_vf
- iavf: Fix failure to exit out from last all-multicast mode
- iavf: prevent accidental free of filter structure
- iavf: validate pointers
- iavf: Fix for the false positive ASQ/ARQ errors while issuing VF reset
- iavf: Fix for setting queues to 0
- MIPS: generic/yamon-dt: fix uninitialized variable error
- mips: bcm63xx: add support for clk_get_parent()
- mips: lantiq: add support for clk_get_parent()
- platform/x86: hp_accel: Fix an error handling path in 'lis3lv02d_probe()'
- net/mlx5e: nullify cq->dbg pointer in mlx5_debug_cq_remove()
- net/mlx5: Lag, update tracker when state change event received
- net/mlx5: E-Switch, Change mode lock from mutex to rw semaphore
- net/mlx5: E-Switch, return error if encap isn't supported
- scsi: core: sysfs: Fix hang when device state is set via sysfs
- net: sched: act_mirred: drop dst for the direction from egress to ingress
- net: dpaa2-eth: fix use-after-free in dpaa2_eth_remove
- net: virtio_net_hdr_to_skb: count transport header in UFO
- i40e: Fix correct max_pkt_size on VF RX queue
- i40e: Fix NULL ptr dereference on VSI filter sync
- i40e: Fix changing previously set num_queue_pairs for PFs
- i40e: Fix ping is lost after configuring ADq on VF
- i40e: Fix warning message and call stack during rmmod i40e driver
- i40e: Fix creation of first queue by omitting it if is not power of two
- i40e: Fix display error code in dmesg
- NFC: reorganize the functions in nci_request
- NFC: reorder the logic in nfc_{un,}register_device
- net: nfc: nci: Change the NCI close sequence
- NFC: add NCI_UNREG flag to eliminate the race
- e100: fix device suspend/resume
- KVM: PPC: Book3S HV: Use GLOBAL_TOC for kvmppc_h_set_dabr/xdabr()
- pinctrl: qcom: sdm845: Enable dual edge errata
- perf/x86/intel/uncore: Fix filter_tid mask for CHA events on Skylake
Server
- perf/x86/intel/uncore: Fix IIO event constraints for Skylake Server
- s390/kexec: fix return code handling
- net: stmmac: dwmac-rk: Fix ethernet on rk3399 based devices
- tun: fix bonding active backup with arp monitoring
- hexagon: export raw I/O routines for modules
- hexagon: clean up timer-regs.h
- tipc: check for null after calling kmemdup
- ipc: WARN if trying to remove ipc object which is absent
- mm: kmemleak: slob: respect SLAB_NOLEAKTRACE flag
- x86/hyperv: Fix NULL deref in set_hv_tscchange_cb() if Hyper-V setup fails
- powerpc/8xx: Fix pinned TLBs with CONFIG_STRICT_KERNEL_RWX
- scsi: qla2xxx: Fix mailbox direction flags in qla2xxx_get_adapter_id()
- s390/kexec: fix memory leak of ipl report buffer
- block: Check ADMIN before NICE for IOPRIO_CLASS_RT
- KVM: nVMX: don't use vcpu->arch.efer when checking host state on nested
state load
- udf: Fix crash after seekdir
- net: stmmac: socfpga: add runtime suspend/resume callback for stratix10
platform
- btrfs: fix memory ordering between normal and ordered work functions
- parisc/sticon: fix reverse colors
- cfg80211: call cfg80211_stop_ap when switch from P2P_GO type
- drm/amd/display: Update swizzle mode enums
- drm/udl: fix control-message timeout
- drm/nouveau: Add a dedicated mutex for the clients list
- drm/nouveau: use drm_dev_unplug() during device removal
- drm/nouveau: clean up all clients on device removal
- drm/i915/dp: Ensure sink rate values are always valid
- drm/amdgpu: fix set scaling mode Full/Full aspect/Center not works on vga
and dvi connectors
- scsi: ufs: core: Fix task management completion
- scsi: ufs: core: Fix task management completion timeout race
- RDMA/netlink: Add __maybe_unused to static inline in C file
- selinux: fix NULL-pointer dereference when hashtab allocation fails
- ASoC: DAPM: Cover regression by kctl change notification fix
- usb: max-3421: Use driver data instead of maintaining a list of bound
devices
- ice: Delete always true check of PF pointer
- fs: export an inode_update_time helper
- btrfs: update device path inode time instead of bd_inode
- x86/Kconfig: Fix an unused variable error in dell-smm-hwmon
- ALSA: hda: hdac_ext_stream: fix potential locking issues
- ALSA: hda: hdac_stream: fix potential locking issue in
snd_hdac_stream_assign()
- Revert "perf: Rework perf_event_exit_event()"
- clk: sunxi-ng: Unregister clocks/resets when unbinding
- ARM: dts: BCM5301X: Fix nodes names
- ARM: dts: BCM5301X: Fix MDIO mux binding
- scsi: pm80xx: Fix memory leak during rmmod
- arm64: dts: qcom: sdm845: Fix qcom,controlled-remotely property
- ALSA: usb-audio: disable implicit feedback sync for Behringer UFX1204 and
UFX1604
- scsi: smartpqi: Add controller handshake during kdump
- arm64: dts: imx8mm-kontron: Fix reset delays for ethernet PHY
- ASoC: Intel: soc-acpi: add missing quirk for TGL SDCA single amp
- ASoC: Intel: sof_sdw: add missing quirk for Dell SKU 0A45
- HID: multitouch: disable sticky fingers for UPERFECT Y
- ASoC: rt5682: fix a little pop while playback
- iommu/vt-d: Do not falsely log intel_iommu is unsupported kernel option
- scsi: lpfc: Fix use-after-free in lpfc_unreg_rpi() routine
- scsi: lpfc: Fix link down processing to address NULL pointer dereference
- memory: tegra20-emc: Add runtime dependency on devfreq governor module
- arm64: dts: qcom: Fix node name of rpm-msg-ram device nodes
- clk: at91: sama7g5: remove prescaler part of master clock
- f2fs: fix wrong condition to trigger background checkpoint correctly
- net: ipa: HOLB register sometimes must be written twice
- iavf: Restore VLAN filters after link down
- bpf: Fix toctou on read-only map's constant scalar tracking
- btrfs: make 1-bit bit-fields of scrub_page unsigned int
- net/mlx5: Update error handler for UCTX and UMEM
- riscv: fix building external modules
- powerpc: clean vdso32 and vdso64 directories
- perf/x86/intel/uncore: Fix IIO event constraints for Snowridge
- blk-cgroup: fix missing put device in error path from blkg_conf_pref()
- shm: extend forced shm destroy to support objects from several IPC nses
- kmap_local: don't assume kmap PTEs are linear arrays in memory
- [Config] updateconfigs for KMAP_LOCAL_NON_LINEAR_PTE_ARRAY
- Revert "drm/i915/tgl/dsi: Gate the ddi clocks after pll mapping"
- spi: fix use-after-free of the add_lock mutex
- Drivers: hv: balloon: Use VMBUS_RING_SIZE() wrapper for dm_ring_size
- mac80211: drop check for DONT_REORDER in __ieee80211_select_queue
- drm/amd/display: Limit max DSC target bpp for specific monitors
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
- drm/i915/dp: Ensure max link params are always valid
- drm/amd/pm: avoid duplicate powergate/ungate setting
* Hirsute update: upstream stable patchset 2021-12-16 (LP: #1955083)
- fortify: Explicitly disable Clang support
- block: Add a helper to validate the block size
- loop: Use blk_validate_block_size() to validate block size
- bootconfig: init: Fix memblock leak in xbc_make_cmdline()
- net: stmmac: add clocks management for gmac driver
- net: stmmac: platform: fix build error with !CONFIG_PM_SLEEP
- net: stmmac: fix missing unlock on error in stmmac_suspend()
- net: stmmac: fix system hang if change mac address after interface ifdown
- net: stmmac: fix issue where clk is being unprepared twice
- net: stmmac: dwmac-rk: fix unbalanced pm_runtime_enable warnings
- x86/iopl: Fake iopl(3) CLI/STI usage
- parisc/entry: fix trace test in syscall exit path
- PCI/MSI: Destroy sysfs before freeing entries
- PCI/MSI: Deal with devices lying about their MSI mask capability
- PCI: Add MSI masking quirk for Nvidia ION AHCI
- erofs: remove the occupied parameter from z_erofs_pagevec_enqueue()
- erofs: fix unsafe pagevec reuse of hooked pclusters
- scripts/lld-version.sh: Rewrite based on upstream ld-version.sh
- perf/core: Avoid put_page() when GUP fails
- thermal: Fix NULL pointer dereferences in of_thermal_ functions
- selftests/x86/iopl: Adjust to the faked iopl CLI/STI usage
- Bluetooth: btusb: Add 0x0b05:0x190e Realtek 8761BU (ASUS BT500) device.
- Bluetooth: btusb: Add support for TP-Link UB500 Adapter
- string: uninline memcpy_and_pad
- btrfs: introduce btrfs_is_data_reloc_root
- btrfs: zoned: only allow one process to add pages to a relocation inode
* CVE-2021-4090
- NFSD: Fix exposure in nfsd4_decode_bitmap()
* system crash when removing ipmi_msghandler module (LP: #1950666)
- ipmi: Move remove_work to dedicated workqueue
- ipmi: msghandler: Make symbol 'remove_work_wq' static
* zcrypt DD: Toleration for new IBM Z Crypto Hardware - (Backport to Ubuntu
20.04) (LP: #1954680)
- s390/AP: support new dynamic AP bus size limit
* [UBUNTU 20.04] KVM hardware diagnose data improvements for guest kernel -
kernel part (LP: #1953334)
- KVM: s390: add debug statement for diag 318 CPNC data
* Hirsute update: upstream stable patchset 2021-12-10 (LP: #1954533)
- xhci: Fix USB 3.1 enumeration issues by increasing roothub power-on-good
delay
- usb: xhci: Enable runtime-pm by default on AMD Yellow Carp platform
- Input: iforce - fix control-message timeout
- Input: elantench - fix misreporting trackpoint coordinates
- Input: i8042 - Add quirk for Fujitsu Lifebook T725
- libata: fix read log timeout value
- ocfs2: fix data corruption on truncate
- scsi: core: Remove command size deduction from scsi_setup_scsi_cmnd()
- scsi: qla2xxx: Fix kernel crash when accessing port_speed sysfs file
- scsi: qla2xxx: Fix use after free in eh_abort path
- mmc: mtk-sd: Add wait dma stop done flow
- mmc: dw_mmc: Dont wait for DRTO on Write RSP error
- exfat: fix incorrect loading of i_blocks for large files
- parisc: Fix set_fixmap() on PA1.x CPUs
- parisc: Fix ptrace check on syscall return
- tpm: Check for integer overflow in tpm2_map_response_body()
- firmware/psci: fix application of sizeof to pointer
- crypto: s5p-sss - Add error handling in s5p_aes_probe()
- media: rkvdec: Do not override sizeimage for output format
- media: ite-cir: IR receiver stop working after receive overflow
- media: rkvdec: Support dynamic resolution changes
- media: ir-kbd-i2c: improve responsiveness of hauppauge zilog receivers
- media: v4l2-ioctl: Fix check_ext_ctrls
- ALSA: hda/realtek: Fix mic mute LED for the HP Spectre x360 14
- ALSA: hda/realtek: Add a quirk for HP OMEN 15 mute LED
- ALSA: hda/realtek: Add quirk for Clevo PC70HS
- ALSA: hda/realtek: Headset fixup for Clevo NH77HJQ
- ALSA: hda/realtek: Add a quirk for Acer Spin SP513-54N
- ALSA: hda/realtek: Add quirk for ASUS UX550VE
- ALSA: hda/realtek: Add quirk for HP EliteBook 840 G7 mute LED
- ALSA: ua101: fix division by zero at probe
- ALSA: 6fire: fix control and bulk message timeouts
- ALSA: line6: fix control and interrupt message timeouts
- ALSA: usb-audio: Line6 HX-Stomp XL USB_ID for 48k-fixed quirk
- ALSA: usb-audio: Add registration quirk for JBL Quantum 400
- ALSA: hda: Free card instance properly at probe errors
- ALSA: synth: missing check for possible NULL after the call to kstrdup
- ALSA: timer: Fix use-after-free problem
- ALSA: timer: Unconditionally unlink slave instances, too
- ext4: fix lazy initialization next schedule time computation in more
granular unit
- ext4: ensure enough credits in ext4_ext_shift_path_extents
- ext4: refresh the ext4_ext_path struct after dropping i_data_sem.
- fuse: fix page stealing
- x86/sme: Use #define USE_EARLY_PGTABLE_L5 in mem_encrypt_identity.c
- x86/cpu: Fix migration safety with X86_BUG_NULL_SEL
- x86/irq: Ensure PI wakeup handler is unregistered before module unload
- ASoC: soc-core: fix null-ptr-deref in snd_soc_del_component_unlocked()
- ALSA: hda/realtek: Fixes HP Spectre x360 15-eb1xxx speakers
- cavium: Return negative value when pci_alloc_irq_vectors() fails
- scsi: qla2xxx: Return -ENOMEM if kzalloc() fails
- scsi: qla2xxx: Fix unmap of already freed sgl
- mISDN: Fix return values of the probe function
- cavium: Fix return values of the probe function
- sfc: Export fibre-specific supported link modes
- sfc: Don't use netif_info before net_device setup
- hyperv/vmbus: include linux/bitops.h
- ARM: dts: sun7i: A20-olinuxino-lime2: Fix ethernet phy-mode
- reset: socfpga: add empty driver allowing consumers to probe
- mmc: winbond: don't build on M68K
- drm: panel-orientation-quirks: Add quirk for Aya Neo 2021
- fcnal-test: kill hanging ping/nettest binaries on cleanup
- bpf: Define bpf_jit_alloc_exec_limit for arm64 JIT
- bpf: Prevent increasing bpf_jit_limit above max
- gpio: mlxbf2.c: Add check for bgpio_init failure
- xen/netfront: stop tx queues during live migration
- nvmet-tcp: fix a memory leak when releasing a queue
- spi: spl022: fix Microwire full duplex mode
- net: multicast: calculate csum of looped-back and forwarded packets
- watchdog: Fix OMAP watchdog early handling
- drm: panel-orientation-quirks: Add quirk for GPD Win3
- block: schedule queue restart after BLK_STS_ZONE_RESOURCE
- nvmet-tcp: fix header digest verification
- r8169: Add device 10ec:8162 to driver r8169
- vmxnet3: do not stop tx queues after netif_device_detach()
- nfp: bpf: relax prog rejection for mtu check through max_pkt_offset
- net/smc: Fix smc_link->llc_testlink_time overflow
- net/smc: Correct spelling mistake to TCPF_SYN_RECV
- btrfs: clear MISSING device status bit in btrfs_close_one_device
- btrfs: fix lost error handling when replaying directory deletes
- btrfs: call btrfs_check_rw_degradable only if there is a missing device
- KVM: VMX: Unregister posted interrupt wakeup handler on hardware unsetup
- ia64: kprobes: Fix to pass correct trampoline address to the handler
- selinux: fix race condition when computing ocontext SIDs
- hwmon: (pmbus/lm25066) Add offset coefficients
- regulator: s5m8767: do not use reset value as DVS voltage if GPIO DVS is
disabled
- regulator: dt-bindings: samsung,s5m8767: correct
s5m8767,pmic-buck-default-
dvs-idx property
- EDAC/sb_edac: Fix top-of-high-memory value for Broadwell/Haswell
- mwifiex: fix division by zero in fw download path
- ath6kl: fix division by zero in send path
- ath6kl: fix control-message timeout
- ath10k: fix control-message timeout
- ath10k: fix division by zero in send path
- PCI: Mark Atheros QCA6174 to avoid bus reset
- rtl8187: fix control-message timeouts
- evm: mark evm_fixmode as __ro_after_init
- ifb: Depend on netfilter alternatively to tc
- wcn36xx: Fix HT40 capability for 2Ghz band
- wcn36xx: Fix tx_status mechanism
- wcn36xx: Fix (QoS) null data frame bitrate/modulation
- PM: sleep: Do not let "syscore" devices runtime-suspend during system
transitions
- mwifiex: Read a PCI register after writing the TX ring write pointer
- mwifiex: Try waking the firmware until we get an interrupt
- libata: fix checking of DMA state
- wcn36xx: handle connection loss indication
- rsi: fix occasional initialisation failure with BT coex
- rsi: fix key enabled check causing unwanted encryption for vap_id > 0
- rsi: fix rate mask set leading to P2P failure
- rsi: Fix module dev_oper_mode parameter description
- perf/x86/intel/uncore: Support extra IMC channel on Ice Lake server
- perf/x86/intel/uncore: Fix Intel ICX IIO event constraints
- RDMA/qedr: Fix NULL deref for query_qp on the GSI QP
- signal: Remove the bogus sigkill_pending in ptrace_stop
- memory: renesas-rpc-if: Correct QSPI data transfer in Manual mode
- signal/mips: Update (_save|_restore)_fp_context to fail with -EFAULT
- soc: fsl: dpio: replace smp_processor_id with raw_smp_processor_id
- soc: fsl: dpio: use the combined functions to protect critical zone
- mtd: rawnand: socrates: Keep the driver compatible with on-die ECC engines
- power: supply: max17042_battery: Prevent int underflow in
set_soc_threshold
- power: supply: max17042_battery: use VFSOC for capacity when no rsns
- KVM: arm64: Extract ESR_ELx.EC only
- KVM: nVMX: Query current VMCS when determining if MSR bitmaps are in use
- can: j1939: j1939_tp_cmd_recv(): ignore abort message in the BAM transport
- can: j1939: j1939_can_recv(): ignore messages with invalid source address
- powerpc/85xx: Fix oops when mpc85xx_smp_guts_ids node cannot be found
- ring-buffer: Protect ring_buffer_reset() from reentrancy
- serial: core: Fix initializing and restoring termios speed
- ifb: fix building without CONFIG_NET_CLS_ACT
- ALSA: mixer: oss: Fix racy access to slots
- ALSA: mixer: fix deadlock in snd_mixer_oss_set_volume
- xen/balloon: add late_initcall_sync() for initial ballooning done
- ovl: fix use after free in struct ovl_aio_req
- PCI: pci-bridge-emul: Fix emulation of W1C bits
- PCI: cadence: Add cdns_plat_pcie_probe() missing return
- PCI: aardvark: Do not clear status bits of masked interrupts
- PCI: aardvark: Fix checking for link up via LTSSM state
- PCI: aardvark: Do not unmask unused interrupts
- PCI: aardvark: Fix reporting Data Link Layer Link Active
- PCI: aardvark: Fix configuring Reference clock
- PCI: aardvark: Fix return value of MSI domain .alloc() method
- PCI: aardvark: Read all 16-bits from PCIE_MSI_PAYLOAD_REG
- PCI: aardvark: Fix support for bus mastering and PCI_COMMAND on emulated
bridge
- PCI: aardvark: Fix support for PCI_BRIDGE_CTL_BUS_RESET on emulated bridge
- PCI: aardvark: Set PCI Bridge Class Code to PCI Bridge
- PCI: aardvark: Fix support for PCI_ROM_ADDRESS1 on emulated bridge
- quota: check block number when reading the block in quota file
- quota: correct error number in free_dqentry()
- pinctrl: core: fix possible memory leak in pinctrl_enable()
- coresight: cti: Correct the parameter for pm_runtime_put
- iio: dac: ad5446: Fix ad5622_write() return value
- iio: ad5770r: make devicetree property reading consistent
- USB: serial: keyspan: fix memleak on probe errors
- serial: 8250: fix racy uartclk update
- most: fix control-message timeouts
- USB: iowarrior: fix control-message timeouts
- USB: chipidea: fix interrupt deadlock
- power: supply: max17042_battery: Clear status bits in interrupt handler
- dma-buf: WARN on dmabuf release with pending attachments
- drm: panel-orientation-quirks: Update the Lenovo Ideapad D330 quirk (v2)
- drm: panel-orientation-quirks: Add quirk for KD Kurio Smart C15200 2-in-1
- drm: panel-orientation-quirks: Add quirk for the Samsung Galaxy Book 10.6
- Bluetooth: sco: Fix lock_sock() blockage by memcpy_from_msg()
- Bluetooth: fix use-after-free error in lock_sock_nested()
- drm/panel-orientation-quirks: add Valve Steam Deck
- rcutorture: Avoid problematic critical section nesting on PREEMPT_RT
- platform/x86: wmi: do not fail if disabling fails
- MIPS: lantiq: dma: add small delay after reset
- MIPS: lantiq: dma: reset correct number of channel
- locking/lockdep: Avoid RCU-induced noinstr fail
- net: sched: update default qdisc visibility after Tx queue cnt changes
- rcu-tasks: Move RTGS_WAIT_CBS to beginning of rcu_tasks_kthread() loop
- smackfs: Fix use-after-free in netlbl_catmap_walk()
- ath11k: Align bss_chan_info structure with firmware
- x86: Increase exception stack sizes
- mwifiex: Run SET_BSS_MODE when changing from P2P to STATION vif-type
- mwifiex: Properly initialize private structure on interface type changes
- fscrypt: allow 256-bit master keys with AES-256-XTS
- drm/amdgpu: Fix MMIO access page fault
- ath11k: Avoid reg rules update during firmware recovery
- ath11k: add handler for scan event WMI_SCAN_EVENT_DEQUEUED
- ath11k: Change DMA_FROM_DEVICE to DMA_TO_DEVICE when map reinjected
packets
- ath10k: high latency fixes for beacon buffer
- media: mt9p031: Fix corrupted frame after restarting stream
- media: netup_unidvb: handle interrupt properly according to the firmware
- media: atomisp: Fix error handling in probe
- media: stm32: Potential NULL pointer dereference in dcmi_irq_thread()
- media: uvcvideo: Set capability in s_param
- media: uvcvideo: Return -EIO for control errors
- media: uvcvideo: Set unique vdev name based in type
- media: s5p-mfc: fix possible null-pointer dereference in s5p_mfc_probe()
- media: s5p-mfc: Add checking to s5p_mfc_probe().
- media: imx: set a media_device bus_info string
- media: mceusb: return without resubmitting URB in case of -EPROTO error.
- ia64: don't do IA64_CMPXCHG_DEBUG without CONFIG_PRINTK
- rtw88: fix RX clock gate setting while fifo dump
- brcmfmac: Add DMI nvram filename quirk for Cyberbook T116 tablet
- media: rcar-csi2: Add checking to rcsi2_start_receiver()
- ipmi: Disable some operations during a panic
- fs/proc/uptime.c: Fix idle time reporting in /proc/uptime
- ACPICA: Avoid evaluating methods too early during system resume
- media: ipu3-imgu: imgu_fmt: Handle properly try
- media: ipu3-imgu: VIDIOC_QUERYCAP: Fix bus_info
- media: usb: dvd-usb: fix uninit-value bug in dibusb_read_eeprom_byte()
- net-sysfs: try not to restart the syscall if it will fail eventually
- tracefs: Have tracefs directories not set OTH permission bits by default
- ath: dfs_pattern_detector: Fix possible null-pointer dereference in
channel_detector_create()
- mmc: moxart: Fix reference count leaks in moxart_probe
- iov_iter: Fix iov_iter_get_pages{,_alloc} page fault return value
- ACPI: battery: Accept charges over the design capacity as full
- drm/amdkfd: fix resume error when iommu disabled in Picasso
- net: phy: micrel: make *-skew-ps check more lenient
- leaking_addresses: Always print a trailing newline
- drm/msm: prevent NULL dereference in msm_gpu_crashstate_capture()
- block: bump max plugged deferred size from 16 to 32
- md: update superblock after changing rdev flags in state_store
- memstick: r592: Fix a UAF bug when removing the driver
- lib/xz: Avoid overlapping memcpy() with invalid input with in-place
decompression
- lib/xz: Validate the value before assigning it to an enum variable
- workqueue: make sysfs of unbound kworker cpumask more clever
- tracing/cfi: Fix cmp_entries_* functions signature mismatch
- mt76: mt7915: fix an off-by-one bound check
- mwl8k: Fix use-after-free in mwl8k_fw_state_machine()
- block: remove inaccurate requeue check
- media: allegro: ignore interrupt if mailbox is not initialized
- nvmet: fix use-after-free when a port is removed
- nvmet-rdma: fix use-after-free when a port is removed
- nvmet-tcp: fix use-after-free when a port is removed
- nvme: drop scan_lock and always kick requeue list when removing namespaces
- PM: hibernate: Get block device exclusively in swsusp_check()
- selftests: kvm: fix mismatched fclose() after popen()
- selftests/bpf: Fix perf_buffer test on system with offline cpus
- iwlwifi: mvm: disable RX-diversity in powersave
- smackfs: use __GFP_NOFAIL for smk_cipso_doi()
- ARM: clang: Do not rely on lr register for stacktrace
- gre/sit: Don't generate link-local addr if addr_gen_mode is
IN6_ADDR_GEN_MODE_NONE
- gfs2: Cancel remote delete work asynchronously
- gfs2: Fix glock_hash_walk bugs
- ARM: 9136/1: ARMv7-M uses BE-8, not BE-32
- vrf: run conntrack only in context of lower/physdev for locally generated
packets
- net: annotate data-race in neigh_output()
- ACPI: AC: Quirk GK45 to skip reading _PSR
- btrfs: reflink: initialize return value to 0 in btrfs_extent_same()
- btrfs: do not take the uuid_mutex in btrfs_rm_device
- spi: bcm-qspi: Fix missing clk_disable_unprepare() on error in
bcm_qspi_probe()
- wcn36xx: Correct band/freq reporting on RX
- x86/hyperv: Protect set_hv_tscchange_cb() against getting preempted
- drm/amd/display: dcn20_resource_construct reduce scope of FPU enabled
- selftests/core: fix conflicting types compile error for close_range()
- parisc: fix warning in flush_tlb_all
- task_stack: Fix end_of_stack() for architectures with upwards-growing
stack
- erofs: don't trigger WARN() when decompression fails
- parisc/unwind: fix unwinder when CONFIG_64BIT is enabled
- parisc/kgdb: add kgdb_roundup() to make kgdb work with idle polling
- netfilter: conntrack: set on IPS_ASSURED if flows enters internal stream
state
- selftests/bpf: Fix strobemeta selftest regression
- Bluetooth: fix init and cleanup of sco_conn.timeout_work
- rcu: Fix existing exp request check in sync_sched_exp_online_cleanup()
- MIPS: lantiq: dma: fix burst length for DEU
- objtool: Add xen_start_kernel() to noreturn list
- x86/xen: Mark cpu_bringup_and_idle() as dead_end_function
- objtool: Fix static_call list generation
- drm/v3d: fix wait for TMU write combiner flush
- virtio-gpu: fix possible memory allocation failure
- lockdep: Let lock_is_held_type() detect recursive read as read
- net: net_namespace: Fix undefined member in key_remove_domain()
- cgroup: Make rebind_subsystems() disable v2 controllers all at once
- wcn36xx: Fix Antenna Diversity Switching
- wilc1000: fix possible memory leak in cfg_scan_result()
- Bluetooth: btmtkuart: fix a memleak in mtk_hci_wmt_sync
- crypto: caam - disable pkc for non-E SoCs
- rxrpc: Fix _usecs_to_jiffies() by using usecs_to_jiffies()
- net: dsa: rtl8366rb: Fix off-by-one bug
- ath11k: fix some sleeping in atomic bugs
- ath11k: Avoid race during regd updates
- ath11k: fix packet drops due to incorrect 6 GHz freq value in rx status
- ath11k: Fix memory leak in ath11k_qmi_driver_event_work
- ath10k: Fix missing frame timestamp for beacon/probe-resp
- ath10k: sdio: Add missing BH locking around napi_schdule()
- drm/ttm: stop calling tt_swapin in vm_access
- arm64: mm: update max_pfn after memory hotplug
- drm/amdgpu: fix warning for overflow check
- media: em28xx: add missing em28xx_close_extension
- media: cxd2880-spi: Fix a null pointer dereference on error handling path
- media: dvb-usb: fix ununit-value in az6027_rc_query
- media: v4l2-ioctl: S_CTRL output the right value
- media: TDA1997x: handle short reads of hdmi info frame.
- media: mtk-vpu: Fix a resource leak in the error handling path of
'mtk_vpu_probe()'
- media: radio-wl1273: Avoid card name truncation
- media: si470x: Avoid card name truncation
- media: tm6000: Avoid card name truncation
- media: cx23885: Fix snd_card_free call on null card pointer
- kprobes: Do not use local variable when creating debugfs file
- crypto: ecc - fix CRYPTO_DEFAULT_RNG dependency
- cpuidle: Fix kobject memory leaks in error paths
- media: em28xx: Don't use ops->suspend if it is NULL
- ath9k: Fix potential interrupt storm on queue reset
- PM: EM: Fix inefficient states detection
- EDAC/amd64: Handle three rank interleaving mode
- rcu: Always inline rcu_dynticks_task*_{enter,exit}()
- netfilter: nft_dynset: relax superfluous check on set updates
- media: dvb-frontends: mn88443x: Handle errors of clk_prepare_enable()
- crypto: qat - detect PFVF collision after ACK
- crypto: qat - disregard spurious PFVF interrupts
- hwrng: mtk - Force runtime pm ops for sleep ops
- b43legacy: fix a lower bounds test
- b43: fix a lower bounds test
- gve: Recover from queue stall due to missed IRQ
- mmc: sdhci-omap: Fix NULL pointer exception if regulator is not configured
- mmc: sdhci-omap: Fix context restore
- memstick: avoid out-of-range warning
- memstick: jmb38x_ms: use appropriate free function in
jmb38x_ms_alloc_host()
- net, neigh: Fix NTF_EXT_LEARNED in combination with NTF_USE
- hwmon: Fix possible memleak in __hwmon_device_register()
- hwmon: (pmbus/lm25066) Let compiler determine outer dimension of
lm25066_coeff
- ath10k: fix max antenna gain unit
- kernel/sched: Fix sched_fork() access an invalid sched_task_group
- tcp: switch orphan_count to bare per-cpu counters
- drm/msm: potential error pointer dereference in init()
- drm/msm: uninitialized variable in msm_gem_import()
- net: stream: don't purge sk_error_queue in sk_stream_kill_queues()
- media: ir_toy: assignment to be16 should be of correct type
- mmc: mxs-mmc: disable regulator on error and in the remove function
- platform/x86: thinkpad_acpi: Fix bitwise vs. logical warning
- mt76: mt7615: fix endianness warning in mt7615_mac_write_txwi
- mt76: mt76x02: fix endianness warnings in mt76x02_mac.c
- mt76: mt7915: fix possible infinite loop release semaphore
- mt76: mt7915: fix sta_rec_wtbl tag len
- mt76: mt7915: fix muar_idx in mt7915_mcu_alloc_sta_req()
- rsi: stop thread firstly in rsi_91x_init() error handling
- mwifiex: Send DELBA requests according to spec
- net: enetc: unmap DMA in enetc_send_cmd()
- phy: micrel: ksz8041nl: do not use power down mode
- nvme-rdma: fix error code in nvme_rdma_setup_ctrl
- PM: hibernate: fix sparse warnings
- clocksource/drivers/timer-ti-dm: Select TIMER_OF
- x86/sev: Fix stack type check in vc_switch_off_ist()
- drm/msm: Fix potential NULL dereference in DPU SSPP
- smackfs: use netlbl_cfg_cipsov4_del() for deleting cipso_v4_doi
- KVM: selftests: Add operand to vmsave/vmload/vmrun in svm.c
- KVM: selftests: Fix nested SVM tests when built with clang
- bpftool: Avoid leaking the JSON writer prepared for program metadata
- libbpf: Fix overflow in BTF sanity checks
- libbpf: Fix BTF header parsing checks
- s390/gmap: don't unconditionally call pte_unmap_unlock() in __gmap_zap()
- KVM: s390: pv: avoid double free of sida page
- KVM: s390: pv: avoid stalls for kvm_s390_pv_init_vm
- irq: mips: avoid nested irq_enter()
- tpm: fix Atmel TPM crash caused by too frequent queries
- tpm_tis_spi: Add missing SPI ID
- libbpf: Fix endianness detection in BPF_CORE_READ_BITFIELD_PROBED()
- tcp: don't free a FIN sk_buff in tcp_remove_empty_skb()
- spi: spi-rpc-if: Check return value of rpcif_sw_init()
- samples/kretprobes: Fix return value if register_kretprobe() failed
- KVM: s390: Fix handle_sske page fault handling
- libertas_tf: Fix possible memory leak in probe and disconnect
- libertas: Fix possible memory leak in probe and disconnect
- wcn36xx: add proper DMA memory barriers in rx path
- wcn36xx: Fix discarded frames due to wrong sequence number
- drm/amdgpu/gmc6: fix DMA mask from 44 to 40 bits
- selftests: bpf: Convert sk_lookup ctx access tests to PROG_TEST_RUN
- selftests/bpf: Fix fd cleanup in sk_lookup test
- net: amd-xgbe: Toggle PLL settings during rate change
- net: phylink: avoid mvneta warning when setting pause parameters
- crypto: pcrypt - Delay write to padata->info
- selftests/bpf: Fix fclose/pclose mismatch in test_progs
- udp6: allow SO_MARK ctrl msg to affect routing
- ibmvnic: don't stop queue in xmit
- ibmvnic: Process crqs after enabling interrupts
- cgroup: Fix rootcg cpu.stat guest double counting
- bpf: Fix propagation of bounds from 64-bit min/max into 32-bit and
var_off.
- bpf: Fix propagation of signed bounds from 64-bit min/max into 32-bit.
- of: unittest: fix EXPECT text for gpio hog errors
- iio: st_sensors: Call st_sensors_power_enable() from bus drivers
- iio: st_sensors: disable regulators after device unregistration
- RDMA/rxe: Fix wrong port_cap_flags
- ARM: dts: BCM5301X: Fix memory nodes names
- clk: mvebu: ap-cpu-clk: Fix a memory leak in error handling paths
- ARM: s3c: irq-s3c24xx: Fix return value check for s3c24xx_init_intc()
- arm64: dts: rockchip: Fix GPU register width for RK3328
- ARM: dts: qcom: msm8974: Add xo_board reference clock to DSI0 PHY
- RDMA/bnxt_re: Fix query SRQ failure
- arm64: dts: ti: k3-j721e-main: Fix "max-virtual-functions" in PCIe EP
nodes
- arm64: dts: ti: k3-j721e-main: Fix "bus-range" upto 256 bus number for
PCIe
- arm64: dts: meson-g12a: Fix the pwm regulator supply properties
- arm64: dts: meson-g12b: Fix the pwm regulator supply properties
- bus: ti-sysc: Fix timekeeping_suspended warning on resume
- ARM: dts: at91: tse850: the emac<->phy interface is rmii
- scsi: dc395: Fix error case unwinding
- MIPS: loongson64: make CPU_LOONGSON64 depends on MIPS_FP_SUPPORT
- JFS: fix memleak in jfs_mount
- arm64: dts: qcom: msm8916: Fix Secondary MI2S bit clock
- arm64: dts: renesas: beacon: Fix Ethernet PHY mode
- arm64: dts: qcom: pm8916: Remove wrong reg-names for rtc@6000
- ALSA: hda: Reduce udelay() at SKL+ position reporting
- ALSA: hda: Release controller display power during shutdown/reboot
- ALSA: hda: Fix hang during shutdown due to link reset
- ALSA: hda: Use position buffer for SKL+ again
- soundwire: debugfs: use controller id and link_id for debugfs
- scsi: pm80xx: Fix misleading log statement in pm8001_mpi_get_nvmd_resp()
- driver core: Fix possible memory leak in device_link_add()
- arm: dts: omap3-gta04a4: accelerometer irq fix
- ASoC: SOF: topology: do not power down primary core during topology
removal
- soc/tegra: Fix an error handling path in tegra_powergate_power_up()
- memory: fsl_ifc: fix leak of irq and nand_irq in fsl_ifc_ctrl_probe
- clk: at91: check pmc node status before registering syscore ops
- video: fbdev: chipsfb: use memset_io() instead of memset()
- powerpc: Fix is_kvm_guest() / kvm_para_available()
- powerpc: fix unbalanced node refcount in check_kvm_guest()
- serial: 8250_dw: Drop wrong use of ACPI_PTR()
- usb: gadget: hid: fix error code in do_config()
- power: supply: rt5033_battery: Change voltage values to µV
- power: supply: max17040: fix null-ptr-deref in max17040_probe()
- scsi: csiostor: Uninitialized data in csio_ln_vnp_read_cbfn()
- RDMA/mlx4: Return missed an error if device doesn't support steering
- usb: musb: select GENERIC_PHY instead of depending on it
- staging: most: dim2: do not double-register the same device
- staging: ks7010: select CRYPTO_HASH/CRYPTO_MICHAEL_MIC
- pinctrl: renesas: checker: Fix off-by-one bug in drive register check
- ARM: dts: stm32: Reduce DHCOR SPI NOR frequency to 50 MHz
- ARM: dts: stm32: fix SAI sub nodes register range
- ARM: dts: stm32: fix AV96 board SAI2 pin muxing on stm32mp15
- ASoC: cs42l42: Correct some register default values
- ASoC: cs42l42: Defer probe if request_threaded_irq() returns EPROBE_DEFER
- soc: qcom: rpmhpd: Make power_on actually enable the domain
- usb: typec: STUSB160X should select REGMAP_I2C
- iio: adis: do not disabe IRQs in 'adis_init()'
- scsi: ufs: ufshcd-pltfrm: Fix memory leak due to probe defer
- serial: imx: fix detach/attach of serial console
- usb: dwc2: drd: fix dwc2_force_mode call in dwc2_ovr_init
- usb: dwc2: drd: fix dwc2_drd_role_sw_set when clock could be disabled
- usb: dwc2: drd: reset current session before setting the new one
- firmware: qcom_scm: Fix error retval in __qcom_scm_is_call_available()
- soc: qcom: apr: Add of_node_put() before return
- pinctrl: equilibrium: Fix function addition in multiple groups
- phy: qcom-qusb2: Fix a memory leak on probe
- phy: ti: gmii-sel: check of_get_address() for failure
- phy: qcom-snps: Correct the FSEL_MASK
- serial: xilinx_uartps: Fix race condition causing stuck TX
- clk: at91: sam9x60-pll: use DIV_ROUND_CLOSEST_ULL
- HID: u2fzero: clarify error check and length calculations
- HID: u2fzero: properly handle timeouts in usb_submit_urb
- powerpc/44x/fsp2: add missing of_node_put
- ASoC: cs42l42: Disable regulators if probe fails
- ASoC: cs42l42: Use device_property API instead of of_property
- ASoC: cs42l42: Correct configuring of switch inversion from ts-inv
- virtio_ring: check desc == NULL when using indirect with packed
- mips: cm: Convert to bitfield API to fix out-of-bounds access
- power: supply: bq27xxx: Fix kernel crash on IRQ handler register error
- apparmor: fix error check
- rpmsg: Fix rpmsg_create_ept return when RPMSG config is not defined
- nfsd: don't alloc under spinlock in rpc_parse_scope_id
- i2c: mediatek: fixing the incorrect register offset
- NFS: Fix dentry verifier races
- pnfs/flexfiles: Fix misplaced barrier in nfs4_ff_layout_prepare_ds
- drm/plane-helper: fix uninitialized variable reference
- PCI: aardvark: Don't spam about PIO Response Status
- PCI: aardvark: Fix preserving PCI_EXP_RTCTL_CRSSVE flag on emulated bridge
- opp: Fix return in _opp_add_static_v2()
- NFS: Fix deadlocks in nfs_scan_commit_list()
- fs: orangefs: fix error return code of orangefs_revalidate_lookup()
- mtd: spi-nor: hisi-sfc: Remove excessive clk_disable_unprepare()
- PCI: uniphier: Serialize INTx masking/unmasking and fix the bit operation
- mtd: core: don't remove debugfs directory if device is in use
- remoteproc: Fix a memory leak in an error handling path in
'rproc_handle_vdev()'
- rtc: rv3032: fix error handling in rv3032_clkout_set_rate()
- dmaengine: at_xdmac: fix AT_XDMAC_CC_PERID() macro
- NFS: Fix up commit deadlocks
- NFS: Fix an Oops in pnfs_mark_request_commit()
- Fix user namespace leak
- auxdisplay: img-ascii-lcd: Fix lock-up when displaying empty string
- auxdisplay: ht16k33: Connect backlight to fbdev
- auxdisplay: ht16k33: Fix frame buffer device blanking
- soc: fsl: dpaa2-console: free buffer before returning from
dpaa2_console_read
- netfilter: nfnetlink_queue: fix OOB when mac header was cleared
- dmaengine: dmaengine_desc_callback_valid(): Check for `callback_result`
- signal/sh: Use force_sig(SIGKILL) instead of do_group_exit(SIGKILL)
- m68k: set a default value for MEMORY_RESERVE
- watchdog: f71808e_wdt: fix inaccurate report in WDIOC_GETTIMEOUT
- ar7: fix kernel builds for compiler test
- scsi: qla2xxx: Changes to support FCP2 Target
- scsi: qla2xxx: Relogin during fabric disturbance
- scsi: qla2xxx: Fix gnl list corruption
- scsi: qla2xxx: Turn off target reset during issue_lip
- NFSv4: Fix a regression in nfs_set_open_stateid_locked()
- i2c: xlr: Fix a resource leak in the error handling path of
'xlr_i2c_probe()'
- xen-pciback: Fix return in pm_ctrl_init()
- net: davinci_emac: Fix interrupt pacing disable
- ethtool: fix ethtool msg len calculation for pause stats
- openrisc: fix SMP tlb flush NULL pointer dereference
- net: vlan: fix a UAF in vlan_dev_real_dev()
- ice: Fix replacing VF hardware MAC to existing MAC filter
- ice: Fix not stopping Tx queues for VFs
- ACPI: PMIC: Fix intel_pmic_regs_handler() read accesses
- drm/nouveau/svm: Fix refcount leak bug and missing check against null bug
- net: phy: fix duplex out of sync problem while changing settings
- bonding: Fix a use-after-free problem when bond_sysfs_slave_add() failed
- mfd: core: Add missing of_node_put for loop iteration
- can: mcp251xfd: mcp251xfd_chip_start(): fix error handling for
mcp251xfd_chip_rx_int_enable()
- mm/zsmalloc.c: close race window between zs_pool_dec_isolated() and
zs_unregister_migration()
- zram: off by one in read_block_state()
- perf bpf: Add missing free to bpf_event__print_bpf_prog_info()
- llc: fix out-of-bound array index in llc_sk_dev_hash()
- nfc: pn533: Fix double free when pn533_fill_fragment_skbs() fails
- arm64: pgtable: make __pte_to_phys/__phys_to_pte_val inline functions
- bpf, sockmap: Remove unhash handler for BPF sockmap usage
- bpf: sockmap, strparser, and tls are reusing qdisc_skb_cb and colliding
- gve: Fix off by one in gve_tx_timeout()
- seq_file: fix passing wrong private data
- net/sched: sch_taprio: fix undefined behavior in ktime_mono_to_any
- net: hns3: fix kernel crash when unload VF while it is being reset
- net: hns3: allow configure ETS bandwidth of all TCs
- net: stmmac: allow a tc-taprio base-time of zero
- vsock: prevent unnecessary refcnt inc for nonblocking connect
- net/smc: fix sk_refcnt underflow on linkdown and fallback
- cxgb4: fix eeprom len when diagnostics not implemented
- selftests/net: udpgso_bench_rx: fix port argument
- ARM: 9155/1: fix early early_iounmap()
- ARM: 9156/1: drop cc-option fallbacks for architecture selection
- MIPS: Fix assembly error from MIPSr2 code used within MIPS_ISA_ARCH_LEVEL
- x86/mce: Add errata workaround for Skylake SKX37
- posix-cpu-timers: Clear task::posix_cputimers_work in copy_process()
- irqchip/sifive-plic: Fixup EOI failed when masked
- f2fs: should use GFP_NOFS for directory inodes
- net, neigh: Enable state migration between NUD_PERMANENT and NTF_USE
- 9p/net: fix missing error check in p9_check_errors
- memcg: prohibit unconditional exceeding the limit of dying tasks
- powerpc/bpf: Validate branch ranges
- powerpc/bpf: Emit stf barrier instruction sequences for BPF_NOSPEC
- mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks
- mm, oom: do not trigger out_of_memory from the #PF
- mfd: dln2: Add cell for initializing DLN2 ADC
- video: backlight: Drop maximum brightness override for brightness zero
- s390/cio: check the subchannel validity for dev_busid
- s390/tape: fix timer initialization in tape_std_assign()
- s390/ap: Fix hanging ioctl caused by orphaned replies
- s390/cio: make ccw_device_dma_* more robust
- mtd: rawnand: ams-delta: Keep the driver compatible with on-die ECC
engines
- mtd: rawnand: xway: Keep the driver compatible with on-die ECC engines
- mtd: rawnand: mpc5121: Keep the driver compatible with on-die ECC engines
- mtd: rawnand: gpio: Keep the driver compatible with on-die ECC engines
- mtd: rawnand: pasemi: Keep the driver compatible with on-die ECC engines
- mtd: rawnand: orion: Keep the driver compatible with on-die ECC engines
- mtd: rawnand: plat_nand: Keep the driver compatible with on-die ECC
engines
- mtd: rawnand: au1550nd: Keep the driver compatible with on-die ECC engines
- powerpc/powernv/prd: Unregister OPAL_MSG_PRD2 notifier during module
unload
- powerpc/85xx: fix timebase sync issue when CONFIG_HOTPLUG_CPU=n
- drm/sun4i: Fix macros in sun8i_csc.h
- PCI: Add PCI_EXP_DEVCTL_PAYLOAD_* macros
- PCI: aardvark: Fix PCIe Max Payload Size setting
- SUNRPC: Partial revert of commit 6f9f17287e78
- ath10k: fix invalid dma_addr_t token assignment
- mmc: moxart: Fix null pointer dereference on pointer host
- selftests/bpf: Fix also no-alu32 strobemeta selftest
- arch/cc: Introduce a function to check for confidential computing features
- [Config] updateconfigs for ARCH_HAS_CC_PLATFORM
- x86/sev: Add an x86 version of cc_platform_has()
- x86/sev: Make the #VC exception stacks part of the default stacks storage
- soc/tegra: pmc: Fix imbalanced clock disabling in error code path
- scsi: core: Avoid leaving shost->last_reset with stale value if EH does
not
run
- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines
- ipmi:watchdog: Set panic count to proper value on a panic
- md/raid1: only allocate write behind bio for WriteMostly device
- soc: samsung: exynos-pmu: Fix compilation when nothing selects
CONFIG_MFD_CORE
- KVM: nVMX: Handle dynamic MSR intercept toggling
- cifs: To match file servers, make sure the server hostname matches
- cifs: set a minimum of 120s for next dns resolution
- spi: Check we have a spi_device_id for each DT compatible
- drm/amd/display: Fix null pointer dereference for encoders
- media: vidtv: Fix memory leak in remove
- media: videobuf2: rework vb2_mem_ops API
- media: rcar-vin: Use user provided buffers when starting
- floppy: fix calling platform_device_unregister() on invalid drives
- locking/rwsem: Disable preemption for spinning region
- arm64: vdso32: suppress error message for 'make mrproper'
- Revert "wcn36xx: Enable firmware link monitoring"
- ftrace: do CPU checking after preemption disabled
- fbdev/efifb: Release PCI device's runtime PM ref during FB destroy
- drm/bridge: anx7625: Propagate errors from sp_tx_rst_aux()
- net: phylink: don't call netif_carrier_off() with NULL netdev
- bnxt_en: Check devlink allocation and registration status
- cfg80211: always free wiphy specific regdomain
- net: dsa: rtl8366: Fix a bug in deleting VLANs
- media: meson-ge2d: Fix rotation parameter changes detection in
'ge2d_s_ctrl()'
- media: i2c: ths8200 needs V4L2_ASYNC
- scs: Release kasan vmalloc poison in scs_free process
- ath10k: Don't always treat modem stop events as crashes
- crypto: ccree - avoid out-of-range warnings from clang
- gve: Track RX buffer allocation failures
- drm/msm: fix potential NULL dereference in cleanup
- block: ataflop: fix breakage introduced at blk-mq refactoring
- ACPI: PM: Turn off unused wakeup power resources
- ACPI: PM: Fix sharing of wakeup power resources
- mt76: mt7915: fix bit fields for HT rate idx
- mt76: mt7615: fix monitor mode tear down crash
- nbd: Fix use-after-free in pid_show
- crypto: tcrypt - fix skcipher multi-buffer tests for 1420B blocks
- libbpf: Fix memory leak in btf__dedup()
- mt76: mt7615: mt7622: fix ibss and meshpoint
- i915_vma: Rename vma_lookup to i915_vma_lookup
- mm: add vma_lookup(), update find_vma_intersection() comments
- s390/gmap: validate VMA in __gmap_zap()
- s390/mm: validate VMA in PGSTE manipulation functions
- s390/mm: fix VMA and page table handling code in storage key handling
functions
- s390/uv: fully validate the VMA before calling follow_page()
- ARM: 9142/1: kasan: work around LPAE build warning
- ath10k: fix module load regression with iram-recovery feature
- block: ataflop: more blk-mq refactoring fixes
- blk-cgroup: synchronize blkg creation against policy deactivation
- bpf: Fixes possible race in update_prog_stats() for 32bit arches
- wcn36xx: Channel list update before hardware scan
- net: bridge: fix uninitialized variables when BRIDGE_CFM is disabled
- selftests: net: bridge: update IGMP/MLD membership interval value
- arm64: dts: broadcom: bcm4908: Fix UART clock name
- iommu/mediatek: Fix out-of-range warning with clang
- iommu/dma: Fix arch_sync_dma for map
- powerpc/paravirt: correct preempt debug splat in vcpu_is_preempted()
- ARM: dts: stm32: fix STUSB1600 Type-C irq level on stm32mp15xx-dkx
- arm64: dts: qcom: sdm845: Use RPMH_CE_CLK macro directly
- arm64: dts: qcom: sdm845: Fix Qualcomm crypto engine bus clock
- ASoC: topology: Fix stub for snd_soc_tplg_component_remove()
- clk: at91: clk-master: check if div or pres is zero
- clk: at91: clk-master: fix prescaler logic
- powerpc/nohash: Fix __ptep_set_access_flags() and ptep_set_wrprotect()
- RDMA/hns: Fix initial arm_st of CQ
- RDMA/hns: Modify the value of MAX_LP_MSG_LEN to meet hardware
compatibility
- RDMA/core: Require the driver to set the IOVA correctly during rereg_mr
- mtd: rawnand: intel: Fix potential buffer overflow in probe
- NFS: Don't set NFS_INO_DATA_INVAL_DEFER and NFS_INO_INVALID_DATA
- drm/bridge/lontium-lt9611uxc: fix provided connector suport
- Input: st1232 - increase "wait ready" timeout
- dmaengine: at_xdmac: call at_xdmac_axi_config() on resume path
- dmaengine: stm32-dma: fix stm32_dma_get_max_width
- scsi: target: core: Remove from tmr_list during LUN unlink
- nvdimm/btt: do not call del_gendisk() if not needed
- block/ataflop: use the blk_cleanup_disk() helper
- block/ataflop: add registration bool before calling del_gendisk()
- block/ataflop: provide a helper for cleanup up an atari disk
- ataflop: remove ataflop_probe_lock mutex
- mfd: altera-sysmgr: Fix a mistake caused by resource_size conversion
- dmaengine: stm32-dma: fix burst in case of unaligned memory address
- net: hns3: fix ROCE base interrupt vector initialization bug
- net: marvell: mvpp2: Fix wrong SerDes reconfiguration order
- smb3: do not error on fsync when readonly
- parisc: Fix backtrace to always include init funtion names
- MIPS: fix duplicated slashes for Platform file path
- dmaengine: ti: k3-udma: Set bchan to NULL if a channel request fail
- dmaengine: ti: k3-udma: Set r/tchan or rflow to NULL if request fail
- dmaengine: bestcomm: fix system boot lockups
- mtd: rawnand: fsmc: Fix use of SM ORDER
- powerpc/pseries/mobility: ignore ibm, platform-facilities updates
- pinctrl: amd: Add irq field data
- media: videobuf2: always set buffer vb2 pointer
* Hirsute update: upstream stable patchset 2021-11-30 (LP: #1952785)
- ARM: 9132/1: Fix __get_user_check failure with ARM KASAN images
- ARM: 9133/1: mm: proc-macros: ensure *_tlb_fns are 4B aligned
- ARM: 9134/1: remove duplicate memcpy() definition
- ARM: 9138/1: fix link warning with XIP + frame-pointer
- ARM: 9139/1: kprobes: fix arch_init_kprobes() prototype
- ARM: 9141/1: only warn about XIP address when not compile testing
- ext4: fix possible UAF when remounting r/o a mmp-protected file system
- usbnet: sanity check for maxpacket
- usbnet: fix error return code in usbnet_probe()
- Revert "pinctrl: bcm: ns: support updated DT binding as syscon subnode"
- pinctrl: amd: disable and mask interrupts on probe
- ata: sata_mv: Fix the error handling of mv_chip_id()
- nfc: port100: fix using -ERRNO as command type mask
- net/tls: Fix flipped sign in tls_err_abort() calls
- mmc: vub300: fix control-message timeouts
- mmc: cqhci: clear HALT state after CQE enable
- mmc: mediatek: Move cqhci init behind ungate clock
- mmc: dw_mmc: exynos: fix the finding clock sample value
- mmc: sdhci: Map more voltage level to SDHCI_POWER_330
- mmc: sdhci-esdhc-imx: clear the buffer_read_ready to reset standard tuning
circuit
- ocfs2: fix race between searching chunks and release journal_head from
buffer_head
- nvme-tcp: fix H2CData PDU send accounting (again)
- cfg80211: scan: fix RCU in cfg80211_add_nontrans_list()
- cfg80211: fix management registrations locking
- net: lan78xx: fix division by zero in send path
- mm, thp: bail out early in collapse_file for writeback page
- drm/amdgpu: fix out of bounds write
- cgroup: Fix memory leak caused by missing cgroup_bpf_offline
- riscv, bpf: Fix potential NULL dereference
- tcp_bpf: Fix one concurrency problem in the tcp_bpf_send_verdict function
- bpf: Fix potential race in tail call compatibility check
- bpf: Fix error usage of map_fd and fdget() in generic_map_update_batch()
- IB/qib: Protect from buffer overflow in struct qib_user_sdma_pkt fields
- IB/hfi1: Fix abba locking issue with sc_disable()
- nvmet-tcp: fix data digest pointer calculation
- nvme-tcp: fix data digest pointer calculation
- nvme-tcp: fix possible req->offset corruption
- octeontx2-af: Display all enabled PF VF rsrc_alloc entries.
- RDMA/mlx5: Set user priority for DCT
- arm64: dts: allwinner: h5: NanoPI Neo 2: Fix ethernet node
- reset: brcmstb-rescal: fix incorrect polarity of status bit
- regmap: Fix possible double-free in regcache_rbtree_exit()
- net: batman-adv: fix error handling
- net-sysfs: initialize uid and gid before calling net_ns_get_ownership
- cfg80211: correct bridge/4addr mode check
- net: Prevent infinite while loop in skb_tx_hash()
- RDMA/sa_query: Use strscpy_pad instead of memcpy to copy a string
- gpio: xgs-iproc: fix parsing of ngpios property
- nios2: Make NIOS2_DTB_SOURCE_BOOL depend on !COMPILE_TEST
- mlxsw: pci: Recycle received packet upon allocation failure
- net: ethernet: microchip: lan743x: Fix driver crash when lan743x_pm_resume
fails
- net: ethernet: microchip: lan743x: Fix dma allocation failure by using
dma_set_mask_and_coherent
- net: nxp: lpc_eth.c: avoid hang when bringing interface down
- net/tls: Fix flipped sign in async_wait.err assignment
- phy: phy_ethtool_ksettings_get: Lock the phy for consistency
- phy: phy_ethtool_ksettings_set: Move after phy_start_aneg
- phy: phy_start_aneg: Add an unlocked version
- phy: phy_ethtool_ksettings_set: Lock the PHY while changing settings
- sctp: use init_tag from inithdr for ABORT chunk
- sctp: fix the processing for INIT_ACK chunk
- sctp: fix the processing for COOKIE_ECHO chunk
- sctp: add vtag check in sctp_sf_violation
- sctp: add vtag check in sctp_sf_do_8_5_1_E_sa
- sctp: add vtag check in sctp_sf_ootb
- lan743x: fix endianness when accessing descriptors
- KVM: s390: clear kicked_mask before sleeping again
- KVM: s390: preserve deliverable_mask in __airqs_kick_single_vcpu
- scsi: ufs: ufs-exynos: Correct timeout value setting registers
- riscv: fix misalgned trap vector base address
- riscv: Fix asan-stack clang build
- perf script: Check session->header.env.arch before using it
- ftrace/nds32: Update the proto for ftrace_trace_function to match
ftrace_stub
- mm: filemap: check if THP has hwpoisoned subpage for PMD page fault
- arm64: dts: imx8mm-kontron: Fix polarity of reg_rst_eth2
- arm64: dts: imx8mm-kontron: Fix CAN SPI clock frequency
- arm64: dts: imx8mm-kontron: Fix connection type for VSC8531 RGMII PHY
- arm64: dts: imx8mm-kontron: Set lower limit of VDD_SNVS to 800 mV
- arm64: dts: imx8mm-kontron: Make sure SOC and DRAM supply voltages are
correct
- mac80211: mesh: fix HE operation element length check
- drm/ttm: fix memleak in ttm_transfered_destroy
- octeontx2-af: Fix possible null pointer dereference.
- sctp: fix the processing for INIT chunk
- bpf: Use kvmalloc for map values in syscall
- KVM: SEV-ES: fix another issue with string I/O VMGEXITs
- scsi: core: Put LLD module refcnt after SCSI device is released
- Revert "io_uring: reinforce cancel on flush during exit"
- sfc: Fix reading non-legacy supported link modes
- vrf: Revert "Reset skb conntrack connection..."
- net: ethernet: microchip: lan743x: Fix skb allocation failure
- media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt()
- Revert "xhci: Set HCD flag to defer primary roothub registration"
- Revert "usb: core: hcd: Add support for deferring roothub registration"
- mm: khugepaged: skip huge page collapse for special files
- Revert "drm/ttm: fix memleak in ttm_transfered_destroy"
- ARM: 9120/1: Revert "amba: make use of -1 IRQs warn"
- Revert "wcn36xx: Disable bmps when encryption is disabled"
- ALSA: usb-audio: Add Schiit Hel device to mixer map quirk table
- ALSA: usb-audio: Add Audient iD14 to mixer map quirk table
- KVM: x86/mmu: Add helpers to do full reserved SPTE checks w/ generic MMU
- KVM: x86: avoid warning with -Wbitwise-instead-of-logical
- Revert "x86/kvm: fix vcpu-id indexed array sizes"
- usb: ehci: handshake CMD_RUN instead of STS_HALT
- usb: gadget: Mark USB_FSL_QE broken on 64-bit
- usb: musb: Balance list entry in musb_gadget_queue
- usb-storage: Add compatibility quirk flags for iODD 2531/2541
- binder: don't detect sender/target during buffer cleanup
- staging: rtl8712: fix use-after-free in rtl8712_dl_fw
- isofs: Fix out of bound access for corrupted isofs image
- comedi: dt9812: fix DMA buffers on stack
- comedi: ni_usb6501: fix NULL-deref in command paths
- comedi: vmk80xx: fix transfer-buffer overflows
- comedi: vmk80xx: fix bulk-buffer overflow
- comedi: vmk80xx: fix bulk and interrupt message timeouts
- staging: r8712u: fix control-message timeout
- staging: rtl8192u: fix control-message timeouts
- media: staging/intel-ipu3: css: Fix wrong size comparison imgu_css_fw_init
- rsi: fix control-message timeout
- ALSA: pcm: Check mmap capability of runtime dma buffer at first
- ALSA: pci: cs46xx: Fix set up buffer type properly
- binder: use euid from cred instead of using task
* Hirsute update: upstream stable patchset 2021-11-30 (LP: #1952785) //
CVE-2021-42327 was fixed by:
- drm/amdgpu: Fix even more out of bound writes from debugfs
-- Kleber Sacilotto de Souza <kleber.so...@canonical.com> Tue, 18 Jan
2022 09:09:05 +0100
** Changed in: linux-azure-5.11 (Ubuntu Focal)
Status: Confirmed => Fix Released
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2021-4090
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2021-42327
** Changed in: linux-gcp-5.11 (Ubuntu Focal)
Status: Confirmed => Fix Released
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux-hwe-5.13 in Ubuntu.
https://bugs.launchpad.net/bugs/1945632
Title:
Re-enable DEBUG_INFO_BTF where it was disabled
Status in linux package in Ubuntu:
Fix Released
Status in linux-azure-5.11 package in Ubuntu:
Invalid
Status in linux-gcp-5.11 package in Ubuntu:
Invalid
Status in linux-hwe-5.11 package in Ubuntu:
Invalid
Status in linux-hwe-5.13 package in Ubuntu:
Invalid
Status in linux-oracle-5.11 package in Ubuntu:
Invalid
Status in linux source package in Focal:
Fix Released
Status in linux-azure-5.11 source package in Focal:
Fix Released
Status in linux-gcp-5.11 source package in Focal:
Fix Released
Status in linux-hwe-5.11 source package in Focal:
Fix Released
Status in linux-hwe-5.13 source package in Focal:
Fix Released
Status in linux-oracle-5.11 source package in Focal:
Confirmed
Bug description:
[Impact]
* pahole used to segfault on 32-bit platforms, which has now been
fixed
* pahole used to be too old in focal, which is now being SRUed
* renable DEBUG_INFO_BTF in all the kernels/arches that had it
disabled, as otherwise one cannot compile/use advanced BTF features on
newer kernels.
[Test Plan]
* Check the built kernel's config that it has CONFIG_DEBUG_INFO_BTF=y
* Check build log that it contains
```
BTF .btf.vmlinux.bin.o
```
[Where problems could occur]
* In the future, kernel may require even newer version of pahole from
dwarves, making the builds fail to build again, as building BTF debug
information will now be required. Until either BTF is disabled again
or pahole is upgraded again.
[Other Info]
* Latest pahole is available from focal-proposed, hirsute-proposed, impish
release, builders-extra PPA
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1945632/+subscriptions
--
Mailing list: https://launchpad.net/~kernel-packages
Post to : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help : https://help.launchpad.net/ListHelp
