diff --git a/SOURCE b/SOURCE index 3c4208f6293d0b85ad7e7de363faa0dc37191f87..ea20f38ae8d7c9c286adf286fe449f9f6af38e82 100644 --- a/SOURCE +++ b/SOURCE @@ -1 +1 @@ -5.10.0-60.63.0 +5.10.0-60.64.0 diff --git a/kernel.spec b/kernel.spec index 0c2a596e6730761ddfd20848fb89debd3cd3f433..608088e5a7590af74e65b4ddfe32530adcee77ab 100644 --- a/kernel.spec +++ b/kernel.spec @@ -11,8 +11,8 @@ %global upstream_version 5.10 %global upstream_sublevel 0 %global devel_release 60 -%global maintenance_release .63.0 -%global pkg_release .89 +%global maintenance_release .64.0 +%global pkg_release .90 %define with_debuginfo 1 # Do not recompute the build-id of vmlinux in find-debuginfo.sh @@ -883,6 +883,292 @@ fi %endif %changelog +* Wed Nov 02 2022 Zheng Zengkai - 5.10.0-60.64.0.90 +- fs: fix UAF/GPF bug in nilfs_mdt_destroy +- wifi: Fix potential buffer overflow in 'brcmf_fweh_event_worker' +- nilfs2: fix NULL pointer dereference at nilfs_bmap_lookup_at_level() +- mm/hugetlb: fix races when looking up a CONT-PTE/PMD size hugetlb page +- usb: mon: make mmapped memory read only +- scsi: sd: Revert "scsi: sd: Remove a local variable" +- devlink: Fix use-after-free after a failed reload +- nouveau: fix migrate_to_ram() for faulting page +- mm/memory.c: fix race when faulting a device private page +- vsock: Fix memory leak in vsock_connect() +- ext4: fix bug_on in __es_tree_search caused by bad boot loader inode +- ext4: add EXT4_IGET_BAD flag to prevent unexpected bad inode +- ext4: add helper to check quota inums +- ext4: fix bug_on in __es_tree_search caused by bad quota inode +- netfilter: nfnetlink_osf: fix possible bogus match in nf_osf_find() +- mtd: rawnand: cafe: fix drivers probe/remove methods +- nilfs2: fix leak of nilfs_root in case of writer thread creation failure +- net: mvpp2: fix mvpp2 debugfs leak +- x86/unwind/orc: Unwind ftrace trampolines with correct ORC entry +- kprobes: don't call disarm_kprobe() for disabled kprobes +- block: fix inaccurate io_ticks by set 'precise_iostat' +- arm64: fix rodata=full +- block: fix kabi broken in request_queue +- blk-mq: fix kabi broken in blk_mq_tags +- blk-mq: fix kabi broken in blk_mq_tag_set +- blk-mq: Fix blk_mq_tagset_busy_iter() for shared tags +- blk-mq-sched: Don't reference queue tagset in blk_mq_sched_tags_teardown() +- blk-mq: Optimise blk_mq_queue_tag_busy_iter() for shared tags +- blk-mq: Stop using pointers for blk_mq_tags bitmap tags +- blk-mq: Use shared tags for shared sbitmap support +- blk-mq: Always use blk_mq_is_sbitmap_shared +- blk-mq: Refactor and rename blk_mq_free_map_and_{requests->rqs}() +- blk-mq: Add blk_mq_alloc_map_and_rqs() +- blk-mq: Add blk_mq_tag_update_sched_shared_sbitmap() +- blk-mq: Don't clear driver tags own mapping +- blk-mq: Pass driver tags to blk_mq_clear_rq_mapping() +- blk-mq-sched: Rename blk_mq_sched_free_{requests -> rqs}() +- blk-mq-sched: Rename blk_mq_sched_alloc_{tags -> map_and_rqs}() +- blk-mq: Invert check in blk_mq_update_nr_requests() +- blk-mq: Relocate shared sbitmap resize in blk_mq_update_nr_requests() +- blk-mq: Change rqs check in blk_mq_free_rqs() +- Revert "blk-mq: fix kabi broken by "blk-mq: Use request queue-wide tags for tagset-wide sbitmap"" +- block: fix null-deref in percpu_ref_put +- x86: Use -mindirect-branch-cs-prefix for RETPOLINE builds +- x86/asm/32: Fix ANNOTATE_UNRET_SAFE use on 32-bit +- objtool: Fix objtool regression on x32 systems +- objtool: Fix symbol creation +- objtool: Fix type of reloc::addend +- objtool: Fix code relocs vs weak symbols +- x86/alternative: Add debug prints to apply_retpolines() +- x86/alternative: Try inline spectre_v2=retpoline,amd +- x86/alternative: Handle Jcc __x86_indirect_thunk_ eg +- x86/insn-eval: Handle return values from the decoder +- x86/pat: Fix x86_has_pat_wp() +- serial: 8250: Fix PM usage_count for console handover +- serial: pl011: UPSTAT_AUTORTS requires .throttle/unthrottle +- serial: stm32: Clear prev values before setting RTS delays +- serial: 8250: fix return error code in serial8250_request_std_resource() +- vt: fix memory overlapping when deleting chars in the buffer +- tty: serial: samsung_tty: set dma burst_size to 1 +- usb: dwc3: gadget: Fix event pending check +- usb: typec: add missing uevent when partner support PD +- USB: serial: ftdi_sio: add Belimo device ids +- signal handling: don't use BUG_ON() for debugging +- nvme-pci: phison e16 has bogus namespace ids +- Revert "can: xilinx_can: Limit CANFD brp to 2" +- ARM: dts: stm32: use the correct clock source for CEC on stm32mp151 +- soc: ixp4xx/npe: Fix unused match warning +- irqchip: or1k-pic: Undefine mask_ack for level triggered hardware +- ASoC: madera: Fix event generation for rate controls +- ASoC: madera: Fix event generation for OUT1 demux +- ASoC: cs47l15: Fix event generation for low power mux control +- ASoC: dapm: Initialise kcontrol data for mux/demux controls +- ASoC: wm5110: Fix DRE control +- ASoC: SOF: Intel: hda-loader: Clarify the cl_dsp_init() flow +- pinctrl: aspeed: Fix potential NULL dereference in aspeed_pinmux_set_mux() +- ASoC: ops: Fix off by one in range control validation +- net: sfp: fix memory leak in sfp_probe() +- nvme-tcp: always fail a request when sending it failed +- NFC: nxp-nci: don't print header length mismatch on i2c error +- net: tipc: fix possible refcount leak in tipc_sk_create() +- platform/x86: hp-wmi: Ignore Sanitization Mode event +- cpufreq: pmac32-cpufreq: Fix refcount leak bug +- scsi: hisi_sas: Limit max hw sectors for v3 HW +- netfilter: br_netfilter: do not skip all hooks with 0 priority +- virtio_mmio: Restore guest page size on resume +- virtio_mmio: Add missing PM calls to freeze/restore +- mm: sysctl: fix missing numa_stat when !CONFIG_HUGETLB_PAGE +- net/tls: Check for errors in tls_device_init +- KVM: x86: Fully initialize 'struct kvm_lapic_irq' in kvm_pv_kick_cpu_op() +- net: atlantic: remove aq_nic_deinit() when resume +- net: atlantic: remove deep parameter on suspend/resume functions +- sfc: fix kernel panic when creating VF +- seg6: bpf: fix skb checksum in bpf_push_seg6_encap() +- seg6: fix skb checksum in SRv6 End.B6 and End.B6.Encaps behaviors +- seg6: fix skb checksum evaluation in SRH encapsulation/insertion +- sfc: fix use after free when disabling sriov +- ima: Fix potential memory leak in ima_init_crypto() +- ima: force signature verification when CONFIG_KEXEC_SIG is configured +- net: ftgmac100: Hold reference returned by of_get_child_by_name() +- nexthop: Fix data-races around nexthop_compat_mode. +- ipv4: Fix data-races around sysctl_ip_dynaddr. +- raw: Fix a data-race around sysctl_raw_l3mdev_accept. +- icmp: Fix a data-race around sysctl_icmp_ratemask. +- icmp: Fix a data-race around sysctl_icmp_ratelimit. +- sysctl: Fix data-races in proc_dointvec_ms_jiffies(). +- drm/i915/gt: Serialize TLB invalidates with GT resets +- drm/i915/selftests: fix a couple IS_ERR() vs NULL tests +- ARM: dts: sunxi: Fix SPI NOR campatible on Orange Pi Zero +- ARM: dts: at91: sama5d2: Fix typo in i2s1 node +- ipv4: Fix a data-race around sysctl_fib_sync_mem. +- icmp: Fix data-races around sysctl. +- cipso: Fix data-races around sysctl. +- net: Fix data-races around sysctl_mem. +- inetpeer: Fix data-races around sysctl. +- tcp: Fix a data-race around sysctl_tcp_max_orphans. +- sysctl: Fix data races in proc_dointvec_jiffies(). +- sysctl: Fix data races in proc_doulongvec_minmax(). +- sysctl: Fix data races in proc_douintvec_minmax(). +- sysctl: Fix data races in proc_dointvec_minmax(). +- sysctl: Fix data races in proc_douintvec(). +- sysctl: Fix data races in proc_dointvec(). +- net: stmmac: dwc-qos: Disable split header for Tegra194 +- ASoC: Intel: Skylake: Correct the handling of fmt_config flexible array +- ASoC: Intel: Skylake: Correct the ssp rate discovery in skl_get_ssp_clks() +- ASoC: tas2764: Fix amp gain register offset & default +- ASoC: tas2764: Correct playback volume range +- ASoC: tas2764: Fix and extend FSYNC polarity handling +- ASoC: tas2764: Add post reset delays +- ASoC: sgtl5000: Fix noise on shutdown/remove +- ima: Fix a potential integer overflow in ima_appraise_measurement +- drm/i915: fix a possible refcount leak in intel_dp_add_mst_connector() +- net/mlx5e: Fix capability check for updating vnic env counters +- net/mlx5e: kTLS, Fix build time constant test in RX +- net/mlx5e: kTLS, Fix build time constant test in TX +- ARM: 9210/1: Mark the FDT_FIXED sections as shareable +- ARM: 9209/1: Spectre-BHB: avoid pr_info() every time a CPU comes out of idle +- spi: amd: Limit max transfer and message size +- ARM: dts: imx6qdl-ts7970: Fix ngpio typo and count +- ext4: fix race condition between ext4_write and ext4_convert_inline_data +- Revert "evm: Fix memleak in init_desc" +- sh: convert nommu io{re,un}map() to static inline functions +- nilfs2: fix incorrect masking of permission flags for symlinks +- fs/remap: constrain dedupe of EOF blocks +- drm/panfrost: Fix shrinker list corruption by madvise IOCTL +- drm/panfrost: Put mapping instead of shmem obj on panfrost_mmu_map_fault_addr() error +- btrfs: return -EAGAIN for NOWAIT dio reads/writes on compressed and inline extents +- wifi: mac80211: fix queue selection for mesh/OCB interfaces +- ARM: 9214/1: alignment: advance IT state after emulating Thumb instruction +- ARM: 9213/1: Print message about disabled Spectre workarounds only once +- ip: fix dflt addr selection for connected nexthop +- net: sock: tracing: Fix sock_exceed_buf_limit not to dereference stale pointer +- tracing/histograms: Fix memory leak problem +- mm: split huge PUD on wp_huge_pud fallback +- fix race between exit_itimers() and /proc/pid/timers +- xen/netback: avoid entering xenvif_rx_next_skb() with an empty rx queue +- ALSA: hda/realtek - Enable the headset-mic on a Xiaomi's laptop +- ALSA: hda/realtek - Fix headset mic problem for a HP machine with alc221 +- ALSA: hda/realtek - Fix headset mic problem for a HP machine with alc671 +- ALSA: hda/realtek: Fix headset mic for Acer SF313-51 +- ALSA: hda/conexant: Apply quirk for another HP ProDesk 600 G3 model +- ALSA: hda - Add fixup for Dell Latitidue E5430 +- Revert "mtd: rawnand: gpmi: Fix setting busy timeout setting" +- dmaengine: ti: Add missing put_device in ti_dra7_xbar_route_allocate +- dmaengine: ti: Fix refcount leak in ti_dra7_xbar_route_allocate +- dmaengine: at_xdma: handle errors of at_xdmac_alloc_desc() correctly +- dmaengine: pl330: Fix lockdep warning about non-static key +- ida: don't use BUG_ON() for debugging +- dt-bindings: dma: allwinner,sun50i-a64-dma: Fix min/max typo +- misc: rtsx_usb: set return value in rsp_buf alloc err path +- misc: rtsx_usb: use separate command and response buffers +- misc: rtsx_usb: fix use of dma mapped buffer for usb bulk transfer +- dmaengine: imx-sdma: Allow imx8m for imx7 FW revs +- i2c: cadence: Unregister the clk notifier in error path +- r8169: fix accessing unset transport header +- selftests: forwarding: fix error message in learning_test +- selftests: forwarding: fix learning_test when h1 supports IFF_UNICAST_FLT +- selftests: forwarding: fix flood_unicast_test when h2 supports IFF_UNICAST_FLT +- ibmvnic: Properly dispose of all skbs during a failover. +- i40e: Fix dropped jumbo frames statistics +- xsk: Clear page contiguity bit when unmapping pool +- ARM: dts: at91: sama5d2_icp: fix eeprom compatibles +- ARM: dts: at91: sam9x60ek: fix eeprom compatible and size +- ARM: at91: pm: use proper compatibles for sam9x60's rtc and rtt +- ARM: at91: pm: use proper compatible for sama5d2's rtc +- arm64: dts: qcom: msm8992-*: Fix vdd_lvs1_2-supply typo +- pinctrl: sunxi: sunxi_pconf_set: use correct offset +- arm64: dts: imx8mp-evk: correct I2C3 pad settings +- arm64: dts: imx8mp-evk: correct gpio-led pad settings +- arm64: dts: imx8mp-evk: correct the uart2 pinctl value +- arm64: dts: imx8mp-evk: correct mmc pad settings +- arm64: dts: qcom: msm8994: Fix CPU6/7 reg values +- pinctrl: sunxi: a83t: Fix NAND function name for some pins +- ARM: meson: Fix refcount leak in meson_smp_prepare_cpus +- xfs: remove incorrect ASSERT in xfs_rename +- can: kvaser_usb: kvaser_usb_leaf: fix bittiming limits +- can: kvaser_usb: kvaser_usb_leaf: fix CAN clock frequency regression +- can: kvaser_usb: replace run-time checks with struct kvaser_usb_driver_info +- powerpc/powernv: delay rng platform device creation until later in boot +- video: of_display_timing.h: include errno.h +- memregion: Fix memregion_free() fallback definition +- PM: runtime: Redefine pm_runtime_release_supplier() +- fbdev: fbmem: Fix logo center image dx issue +- iommu/vt-d: Fix PCI bus rescan device hot add +- netfilter: nft_set_pipapo: release elements in clone from abort path +- net: rose: fix UAF bug caused by rose_t0timer_expiry +- usbnet: fix memory leak in error case +- bpf: Fix insufficient bounds propagation from adjust_scalar_min_max_vals +- bpf: Fix incorrect verifier simulation around jmp32's jeq/jne +- can: gs_usb: gs_usb_open/close(): fix memory leak +- can: grcan: grcan_probe(): remove extra of_node_get() +- can: bcm: use call_rcu() instead of costly synchronize_rcu() +- ALSA: hda/realtek: Add quirk for Clevo L140PU +- clocksource/drivers/ixp4xx: remove EXPORT_SYMBOL_GPL from ixp4xx_timer_setup() +- net: usb: qmi_wwan: add Telit 0x1070 composition +- net: usb: qmi_wwan: add Telit 0x1060 composition +- selftests/rseq: Change type of rseq_offset to ptrdiff_t +- selftests/rseq: x86-32: use %gs segment selector for accessing rseq thread area +- selftests/rseq: x86-64: use %fs segment selector for accessing rseq thread area +- selftests/rseq: Fix: work-around asm goto compiler bugs +- selftests/rseq: Remove arm/mips asm goto compiler work-around +- selftests/rseq: Fix warnings about #if checks of undefined tokens +- selftests/rseq: Fix ppc32 offsets by using long rather than off_t +- selftests/rseq: Fix ppc32 missing instruction selection "u" and "x" for load/store +- selftests/rseq: Fix ppc32: wrong rseq_cs 32-bit field pointer on big endian +- selftests/rseq: Uplift rseq selftests for compatibility with glibc-2.35 +- selftests/rseq: Introduce thread pointer getters +- selftests/rseq: Introduce rseq_get_abi() helper +- selftests/rseq: Remove volatile from __rseq_abi +- selftests/rseq: Remove useless assignment to cpu variable +- selftests/rseq: introduce own copy of rseq uapi header +- selftests/rseq: remove ARRAY_SIZE define from individual tests +- hwmon: (ibmaem) don't call platform_device_del() if platform_device_add() fails +- ipv6/sit: fix ipip6_tunnel_get_prl return value +- sit: use min +- drivers: cpufreq: Add missing of_node_put() in qoriq-cpufreq.c +- xen/gntdev: Avoid blocking in unmap_grant_pages() +- tcp: add a missing nf_reset_ct() in 3WHS handling +- xfs: fix xfs_trans slab cache name +- xfs: ensure xfs_errortag_random_default matches XFS_ERRTAG_MAX +- net: tun: avoid disabling NAPI twice +- tunnels: do not assume mac header is set in skb_tunnel_check_pmtu() +- io_uring: ensure that send/sendmsg and recv/recvmsg check sqe->ioprio +- epic100: fix use after free on rmmod +- tipc: move bc link creation back to tipc_node_create +- NFC: nxp-nci: Don't issue a zero length i2c_master_read() +- nfc: nfcmrvl: Fix irq_of_parse_and_map() return value +- net: bonding: fix use-after-free after 802.3ad slave unbind +- net: bonding: fix possible NULL deref in rlb code +- net/sched: act_api: Notify user space if any actions were flushed before error +- netfilter: nft_dynset: restore set element counter when failing to update +- s390: remove unneeded 'select BUILD_BIN2C' +- PM / devfreq: exynos-ppmu: Fix refcount leak in of_get_devfreq_events +- caif_virtio: fix race between virtio_device_ready() and ndo_open() +- NFSD: restore EINVAL error translation in nfsd_commit() +- net: ipv6: unexport __init-annotated seg6_hmac_net_init() +- usbnet: fix memory allocation in helpers +- linux/dim: Fix divide by 0 in RDMA DIM +- RDMA/cm: Fix memory leak in ib_cm_insert_listen +- RDMA/qedr: Fix reporting QP timeout attribute +- net: dp83822: disable rx error interrupt +- net: dp83822: disable false carrier interrupt +- net: tun: stop NAPI when detaching queues +- net: tun: unlink NAPI from device on destruction +- net: dsa: bcm_sf2: force pause link settings +- selftests/net: pass ipv6_args to udpgso_bench's IPv6 TCP test +- virtio-net: fix race between ndo_open() and virtio_device_ready() +- net: usb: ax88179_178a: Fix packet receiving +- SUNRPC: Fix READ_PLUS crasher +- s390/archrandom: simplify back to earlier design and initialize earlier +- dm raid: fix KASAN warning in raid5_add_disks +- dm raid: fix accesses beyond end of raid member array +- powerpc/bpf: Fix use of user_pt_regs in uapi +- powerpc/book3e: Fix PUD allocation size in map_kernel_page() +- powerpc/prom_init: Fix kernel config grep +- nvdimm: Fix badblocks clear off-by-one error +- nvme-pci: add NVME_QUIRK_BOGUS_NID for ADATA XPG SX6000LNP (AKA SPECTRIX S40G) +- ipv6: take care of disable_policy when restoring routes +- drm/amdgpu: To flush tlb for MMHUB of RAVEN series +- net: mscc: ocelot: allow unregistered IP multicast flooding +- powerpc/ftrace: Remove ftrace init tramp once kernel init is complete +- tick/nohz: unexport __init-annotated tick_nohz_full_setup() +- drm: remove drm_fb_helper_modinit +- MAINTAINERS: add Amir as xfs maintainer for 5.10.y + * Thu Oct 27 2022 Zheng Zengkai - 5.10.0-60.63.0.89 - nilfs2: fix use-after-free bug of struct nilfs_root - can: j1939: j1939_session_destroy(): fix memory leak of skbs