diff --git a/debian/changelog b/debian/changelog index 44210482b..ae4b5c03f 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,4 +1,4 @@ -linux (4.19.84-1) UNRELEASED; urgency=medium +linux (4.19.85-1) UNRELEASED; urgency=medium * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.68 @@ -1521,6 +1521,402 @@ linux (4.19.84-1) UNRELEASED; urgency=medium - [x86] iio: imu: mpu6050: Fix FIFO layout for ICM20602 - vsock/virtio: fix sock refcnt holding during the shutdown - x86/cpu: Add Tremont to the cpu vulnerability whitelist + https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.85 + - scsi: core: Handle drivers which set sg_tablesize to zero + - ax88172a: fix information leak on short answers + - ipmr: Fix skb headroom in ipmr_get_route(). + - net: gemini: add missed free_netdev + - net: usb: qmi_wwan: add support for Foxconn T77W968 LTE modules + - slip: Fix memory leak in slip_open error path + - ALSA: usb-audio: Fix missing error check at mixer resolution test + - ALSA: usb-audio: not submit urb for stopped endpoint + - ALSA: usb-audio: Fix incorrect NULL check in create_yamaha_midi_quirk() + - ALSA: usb-audio: Fix incorrect size check for processing/extension units + - Btrfs: fix log context list corruption after rename exchange operation + - Input: ff-memless - kill timer in destroy() + - Input: synaptics-rmi4 - fix video buffer size + - Input: synaptics-rmi4 - disable the relative position IRQ in the F12 driver + - Input: synaptics-rmi4 - do not consume more data than we have (F11, F12) + - Input: synaptics-rmi4 - clear IRQ enables for F54 + - Input: synaptics-rmi4 - destroy F54 poller workqueue when removing + - IB/hfi1: Ensure full Gen3 speed in a Gen4 system + - IB/hfi1: Use a common pad buffer for 9B and 16B packets + - i2c: acpi: Force bus speed to 400KHz if a Silead touchscreen is present + - ecryptfs_lookup_interpose(): lower_dentry->d_inode is not stable + - ecryptfs_lookup_interpose(): lower_dentry->d_parent is not stable either + - [armhf] net: ethernet: dwmac-sun8i: Use the correct function in exit path + - [x86] iommu/vt-d: Fix QI_DEV_IOTLB_PFSID and QI_DEV_EIOTLB_PFSID macros + - mm: mempolicy: fix the wrong return value and potential pages leak of mbind + - mm: memcg: switch to css_tryget() in get_mem_cgroup_from_mm() + - mm: hugetlb: switch to css_tryget() in hugetlb_cgroup_charge_cgroup() + - iio: adc: max9611: explicitly cast gain_selectors + - tee: optee: take DT status property into account + - ath10k: fix kernel panic by moving pci flush after napi_disable + - clk: sunxi-ng: h6: fix PWM gate/reset offset + - soundwire: Initialize completion for defer messages + - [x86] soundwire: intel: Fix uninitialized adev deref + - [arm64] dts: allwinner: a64: Orange Pi Win: Fix SD card node + - [arm64] dts: allwinner: a64: Olinuxino: fix DRAM voltage + - [arm64] dts: allwinner: a64: NanoPi-A64: Fix DCDC1 voltage + - ALSA: pcm: signedness bug in snd_pcm_plug_alloc() + - [arm64] soc/tegra: pmc: Fix pad voltage configuration for Tegra186 + - [arm64] dts: tegra210-p2180: Correct sdmmc4 vqmmc-supply + - y2038: make do_gettimeofday() and get_seconds() inline + - rtc: sysfs: fix NULL check in rtc_add_groups() + - remoteproc/davinci: Use %zx for formating size_t + - extcon: cht-wc: Return from default case to avoid warnings + - cfg80211: Avoid regulatory restore when COUNTRY_IE_IGNORE is set + - ALSA: seq: Do error checks at creating system ports + - ath10k: skip resetting rx filter for WCN3990 + - ath9k: fix tx99 with monitor mode interface + - wil6210: drop Rx multicast packets that are looped-back to STA + - wil6210: set edma variables only for Talyn-MB devices + - wil6210: prevent usage of tx ring 0 for eDMA + - wil6210: fix invalid memory access for rx_buff_mgmt debugfs + - ath10k: limit available channels via DT ieee80211-freq-limit + - ice: Update request resource command to latest specification + - ice: Prevent control queue operations during reset + - gfs2: Don't set GFS2_RDF_UPTODATE when the lvb is updated + - ice: Fix and update driver version string + - ASoC: dapm: Don't fail creating new DAPM control on NULL pinctrl + - ASoC: dpcm: Properly initialise hw->rate_max + - ASoC: meson: axg-fifo: report interrupt request failure + - ASoC: AMD: Change MCLK to 48Mhz + - pinctrl: ingenic: Probe driver at subsys_initcall + - [armhf] dts: exynos: Use i2c-gpio for HDMI-DDC on Arndale + - [armhf] dts: exynos: Fix HDMI-HPD line handling on Arndale + - [armhf] dts: exynos: Fix sound in Snow-rev5 Chromebook + - liquidio: fix race condition in instruction completion processing + - [arm64] dts: stratix10: i2c clock running out of spec + - [armhf] dts: exynos: Fix regulators configuration on Peach Pi/Pit Chromebooks + - i40evf: Validate the number of queues a PF sends + - i40e: use correct length for strncpy + - i40evf: set IFF_UNICAST_FLT flag for the VF + - i40e: Check and correct speed values for link on open + - i40evf: Don't enable vlan stripping when rx offload is turned on + - i40e: hold the rtnl lock on clearing interrupt scheme + - i40evf: cancel workqueue sync for adminq when a VF is removed + - i40e: Prevent deleting MAC address from VF when set by PF + - IB/rxe: avoid back-to-back retries + - IB/rxe: fixes for rdma read retry + - iwlwifi: drop packets with bad status in CD + - iwlwifi: don't WARN on trying to dump dead firmware + - iwlwifi: mvm: avoid sending too many BARs + - media: vicodec: fix out-of-range values when decoding + - media: i2c: Fix pm_runtime_get_if_in_use() usage in sensor drivers + - media: ov772x: Disable clk on error path + - rtl8187: Fix warning generated when strncpy() destination length matches the sixe argument + - mwifiex: do no submit URB in suspended state + - mwifex: free rx_cmd skb in suspended state + - brcmfmac: fix wrong strnchr usage + - mt76: Fix comparisons with invalid hardware key index + - soc: imx: gpc: fix PDN delay + - ASoC: rsnd: ssi: Fix issue in dma data address assignment + - net: hns3: Fix for multicast failure + - net: hns3: Fix error of checking used vlan id + - net: hns3: Fix for loopback selftest failed problem + - net: hns3: Change the dst mac addr of loopback packet + - net/mlx5: Fix atomic_mode enum values + - net: phy: mscc: read 'vsc8531,vddmac' as an u32 + - net: phy: mscc: read 'vsc8531, edge-slowdown' as an u32 + - [armhf] dts: meson8: fix the clock controller register size + - [armhf] dts: meson8b: fix the clock controller register size + - mtd: rawnand: marvell: use regmap_update_bits() for syscon access + - mtd: rawnand: fsl_ifc: check result of SRAM initialization + - mtd: rawnand: fsl_ifc: fixup SRAM init for newer ctrl versions + - mtd: rawnand: qcom: don't include dma-direct.h + - IB/mlx5: Change TX affinity assignment in RoCE LAG mode + - qxl: fix null-pointer crash during suspend + - mac80211: fix saving a few HE values + - cfg80211: validate wmm rule when setting + - f2fs: avoid wrong decrypted data from disk + - net: lan78xx: Bail out if lan78xx_get_endpoints fails + - rtnetlink: move type calculation out of loop + - ASoC: sgtl5000: avoid division by zero if lo_vag is zero + - ath10k: avoid possible memory access violation + - [armhf] dts: exynos: Disable pull control for S5M8767 PMIC + - ath10k: wmi: disable softirq's while calling ieee80211_rx + - i2c: mediatek: Use DMA safe buffers for i2c transactions + - IB/mlx5: Don't hold spin lock while checking device state + - IB/ipoib: Ensure that MTU isn't less than minimum permitted + - RDMA/core: Rate limit MAD error messages + - RDMA/core: Follow correct unregister order between sysfs and cgroup + - udf: Fix crash during mount + - ASoC: dapm: Avoid uninitialised variable warning + - [x86] ASoC: Intel: hdac_hdmi: Limit sampling rates at dai creation + - ata: Disable AHCI ALPM feature for Ampere Computing eMAG SATA + - [powerpc] make PowerMac cache node search conditional on CONFIG_PPC_PMAC + - [armhf] dts: omap3-gta04: give spi_lcd node a label so that we can overwrite in other DTS files + - [armhf] dts: omap3-gta04: fixes for tvout / venc + - [armhf] dts: omap3-gta04: tvout: enable as display1 alias + - [armhf] dts: omap3-gta04: fix touchscreen tsc2007 + - [armhf] dts: omap3-gta04: make NAND partitions compatible with recent U-Boot + - [armhf] dts: omap3-gta04: keep vpll2 always on + - f2fs: submit bio after shutdown + - failover: Fix error return code in net_failover_create + - sched/debug: Explicitly cast sched_feat() to bool + - sched/debug: Use symbolic names for task state constants + - firmware: arm_scmi: use strlcpy to ensure NULL-terminated strings + - [arm64] dts: rockchip: Fix VCC5V0_HOST_EN on rk3399-sapphire + - [armhf] dts: exynos: Disable pull control for PMIC IRQ line on Artik5 board + - usb: mtu3: disable vbus rise/fall interrupts of ltssm + - EDAC, sb_edac: Return early on ADDRV bit and address type test + - [armhf] rtc: pl030: fix possible race condition + - ath9k: add back support for using active monitor interfaces for tx99 + - dmaengine: at_xdmac: remove a stray bottom half unlock + - RDMA/hns: Fix an error code in hns_roce_v2_init_eq_table() + - IB/hfi1: Missing return value in error path for user sdma + - signal: Always ignore SIGKILL and SIGSTOP sent to the global init + - signal: Properly deliver SIGILL from uprobes + - signal: Properly deliver SIGSEGV from x86 uprobes + - f2fs: fix memory leak of write_io in fill_super() + - f2fs: fix memory leak of percpu counter in fill_super() + - f2fs: fix setattr project check upon fssetxattr ioctl + - scsi: qla2xxx: Use correct qpair for ABTS/CMD + - scsi: qla2xxx: Fix iIDMA error + - scsi: qla2xxx: Defer chip reset until target mode is enabled + - scsi: qla2xxx: Terminate Plogi/PRLI if WWN is 0 + - scsi: qla2xxx: Fix deadlock between ATIO and HW lock + - scsi: qla2xxx: Increase abort timeout value + - scsi: qla2xxx: Check for Register disconnect + - scsi: qla2xxx: Fix port speed display on chip reset + - scsi: qla2xxx: Fix dropped srb resource. + - scsi: qla2xxx: Fix duplicate switch's Nport ID entries + - scsi: lpfc: Fix GFT_ID and PRLI logic for RSCN + - scsi: lpfc: Correct invalid EQ doorbell write on if_type=6 + - scsi: lpfc: Fix errors in log messages. + - scsi: sym53c8xx: fix NULL pointer dereference panic in sym_int_sir() + - [armhf] imx6: register pm_power_off handler if "fsl,pmic-stby-poweroff" is set + - scsi: pm80xx: Corrected dma_unmap_sg() parameter + - scsi: pm80xx: Fixed system hang issue during kexec boot + - kprobes: Don't call BUG_ON() if there is a kprobe in use on free list + - net: aquantia: fix hw_atl_utils_fw_upload_dwords + - Drivers: hv: vmbus: Fix synic per-cpu context initialization + - nvmem: core: return error code instead of NULL from nvmem_device_get + - media: dt-bindings: adv748x: Fix decimal unit addresses + - [x86] ALSA: hda: Fix implicit definition of pci_iomap() on SH + - media: fix: media: pci: meye: validate offset to avoid arbitrary access + - media: dvb: fix compat ioctl translation + - net: bcmgenet: Fix speed selection for reverse MII + - [arm64] dts: meson: libretech: update board model + - [arm64] dts: meson-axg: use the proper compatible for ethmac + - [x86] ALSA: intel8x0m: Register irq handler after register initializations + - [arm64] dts: renesas: salvator-common: adv748x: Override secondary addresses + - [arm64] dts: renesas: r8a77965: Attach the SYS-DMAC to the IPMMU + - [arm64] dts: renesas: r8a77965: Fix HS-USB compatible + - [arm64] dts: renesas: r8a77965: Fix clock/reset for usb2_phy1 + - pinctrl: at91-pio4: fix has_config check in atmel_pctl_dt_subnode_to_map() + - llc: avoid blocking in llc_sap_close() + - [armhf] dts: qcom: ipq4019: fix cpu0's qcom,saw2 reg value + - soc: qcom: geni: Don't ignore clk_round_rate() errors in geni_se_clk_tbl_get() + - soc: qcom: geni: geni_se_clk_freq_match() should always accept multiples + - soc: qcom: wcnss_ctrl: Avoid string overflow + - soc: qcom: apr: Avoid string overflow + - drivers: qcom: rpmh-rsc: clear wait_for_compl after use + - [arm64] dts: broadcom: Fix I2C and SPI bus warnings + - [armhf] dts: bcm: Fix SPI bus warnings + - [armhf] dts: aspeed: Fix I2C bus warnings + - [ppc64el,powerpc*] powerpc/vdso: Correct call frame information + - [armhf] dts: socfpga: Fix I2C bus unit-address error + - [armhf] dts: sunxi: Fix I2C bus warnings + - [armhf] dts: sun9i: Fix I2C bus warnings + - android: binder: no outgoing transaction when thread todo has transaction + - cxgb4: Fix endianness issue in t4_fwcache() + - [arm64] fix for bad_mode() handler to always result in panic + - block, bfq: inject other-queue I/O into seeky idle queues on NCQ flash + - blok, bfq: do not plug I/O if all queues are weight-raised + - [arm64] dts: meson: Fix erroneous SPI bus warnings + - power: supply: ab8500_fg: silence uninitialized variable warnings + - component: fix loop condition to call unbind() if bind() fails + - kernfs: Fix range checks in kernfs_get_target_path + - ip_gre: fix parsing gre header in ipgre_err + - scsi: ufshcd: Fix NULL pointer dereference for in ufshcd_init + - [armhf] dts: rockchip: Fix erroneous SPI bus dtc warnings on rk3036 + - [arm64] dts: rockchip: Fix I2C bus unit-address error on rk3399-puma-haikou + - [x86] ACPI / LPSS: Exclude I2C busses shared with PUNIT from pmc_atom_d3_mask + - netfilter: nf_tables: avoid BUG_ON usage + - ath9k: Fix a locking bug in ath9k_add_interface() + - [s390x] qeth: uninstall IRQ handler on device removal + - [s390x] qeth: invoke softirqs after napi_schedule() + - media: vsp1: Fix vsp1_regs.h license header + - media: vsp1: Fix YCbCr planar formats pitch calculation + - media: ov2680: don't register the v4l2 subdevice before checking chip ID + - PCI/ACPI: Correct error message for ASPM disabling + - net: socionext: Fix two sleep-in-atomic-context bugs in ave_rxfifo_reset() + - PCI: mediatek: Fix unchecked return value + - [armhf] dts: xilinx: Fix I2C and SPI bus warnings + - serial: uartps: Fix suspend functionality + - serial: samsung: Enable baud clock for UART reset procedure in resume + - serial: mxs-auart: Fix potential infinite loop + - tty: serial: qcom_geni_serial: Fix serial when not used as console + - [arm64] dts: ti: k3-am65: Change #address-cells and #size-cells of interconnect to 2 + - samples/bpf: fix a compilation failure + - spi: mediatek: Don't modify spi_transfer when transfer. + - ASoC: rt5682: Fix the boost volume at the begining of playback + - ipmi_si_pci: fix NULL device in ipmi_si error message + - ipmi_si: fix potential integer overflow on large shift + - ipmi:dmi: Ignore IPMI SMBIOS entries with a zero base address + - ipmi: fix return value of ipmi_set_my_LUN + - net: hns3: fix return type of ndo_start_xmit function + - net: cavium: fix return type of ndo_start_xmit function + - net: ibm: fix return type of ndo_start_xmit function + - [ppc64el,powerpc*] iommu: Avoid derefence before pointer check + - [ppc64el,powerpc*] selftests: Do not fail with reschedule + - [ppc64el,powerpc64] hash: Fix stab_rr off by one initialization + - [ppc64el,powerpc64] pseries/memory-hotplug: Only update DT once per memory DLPAR request + - [ppc64el,powerpc64] pseries: Disable CPU hotplug across migrations + - [ppc64el,powerpc*] Fix duplicate const clang warning in user access code + - RDMA/i40iw: Fix incorrect iterator type + - OPP: Protect dev_list with opp_table lock + - of/unittest: Fix I2C bus unit-address error + - libfdt: Ensure INT_MAX is defined in libfdt_env.h + - power: supply: twl4030_charger: fix charging current out-of-bounds + - power: supply: twl4030_charger: disable eoc interrupt on linear charge + - net: mvpp2: fix the number of queues per cpu for PPv2.2 + - net: marvell: fix return type of ndo_start_xmit function + - net: toshiba: fix return type of ndo_start_xmit function + - net: xilinx: fix return type of ndo_start_xmit function + - net: broadcom: fix return type of ndo_start_xmit function + - net: amd: fix return type of ndo_start_xmit function + - net: sun: fix return type of ndo_start_xmit function + - net: hns3: Fix for setting speed for phy failed problem + - net: hns3: Fix cmdq registers initialization issue for vf + - net: hns3: Clear client pointer when initialize client failed or unintialize finished + - net: hns3: Fix client initialize state issue when roce client initialize failed + - net: hns3: Fix parameter type for q_id in hclge_tm_q_to_qs_map_cfg() + - nfp: provide a better warning when ring allocation fails + - usb: chipidea: imx: enable OTG overcurrent in case USB subsystem is already started + - usb: chipidea: Fix otg event handler + - usb: usbtmc: Fix ioctl USBTMC_IOCTL_ABORT_BULK_OUT + - [s390x] zcrypt: enable AP bus scan without a valid default domain + - [s390x] vdso: avoid 64-bit vdso mapping for compat tasks + - [s390x] vdso: correct CFI annotations of vDSO functions + - brcmfmac: increase buffer for obtaining firmware capabilities + - brcmsmac: Use kvmalloc() for ucode allocations + - mlxsw: spectrum: Init shaper for TCs 8..15 + - PCI: portdrv: Initialize service drivers directly + - [armhf] dts: am335x-evm: fix number of cpsw + - [armhf] dts: ti: Fix SPI and I2C bus warnings + - f2fs: avoid infinite loop in f2fs_alloc_nid + - f2fs: fix to recover inode's uid/gid during POR + - [armhf] dts: ux500: Correct SCU unit address + - [armhf] dts: ux500: Fix LCDA clock line muxing + - [armhf] dts: ste: Fix SPI controller node names + - spi: pic32: Use proper enum in dmaengine_prep_slave_rg + - crypto: chacha20 - Fix chacha20_block() keystream alignment (again) + - cpufeature: avoid warning when compiling with clang + - [armhf] crypto: crc32 - avoid warning when compiling with Clang + - [armel] dts: marvell: Fix SPI and I2C bus warnings + - [x86] mce-inject: Reset injection struct after injection + - [armhf,arm64] dts: clearfog: fix sdhci supply property name + - bnx2x: Ignore bandwidth attention in single function mode + - PCI/AER: Take reference on error devices + - PCI/AER: Don't read upstream ports below fatal errors + - PCI/ERR: Use slot reset if available + - samples/bpf: fix compilation failure + - net: phy: mdio-bcm-unimac: Allow configuring MDIO clock divider + - net: micrel: fix return type of ndo_start_xmit function + - net: freescale: fix return type of ndo_start_xmit function + - [x86] CPU: Use correct macros for Cyrix calls + - [x86] CPU: Change query logic so CPUID is enabled before testing + - EDAC: Correct DIMM capacity unit symbol + - [mips*] kexec: Relax memory restriction + - [arm64] dts: rockchip: Fix microSD in rk3399 sapphire board + - mlxsw: Make MLXSW_SP1_FWREV_MINOR a hard requirement + - media: imx: work around false-positive warning, again + - media: pci: ivtv: Fix a sleep-in-atomic-context bug in ivtv_yuv_init() + - media: au0828: Fix incorrect error messages + - media: davinci: Fix implicit enum conversion warning + - [armhf] dts: rockchip: explicitly set vcc_sd0 pin to gpio on rk3188-radxarock + - usb: gadget: uvc: configfs: Drop leaked references to config items + - usb: gadget: uvc: configfs: Prevent format changes after linking header + - usb: gadget: uvc: configfs: Sort frame intervals upon writing + - [armhf] dts: exynos: Correct audio subsystem parent clock on Peach Chromebooks + - i2c: aspeed: fix invalid clock parameters for very large divisors + - gpiolib: Fix gpio_direction_* for single direction GPIOs + - phy: brcm-sata: allow PHY_BRCM_SATA driver to be built for DSL SoCs + - phy: renesas: rcar-gen3-usb2: fix vbus_ctrl for role sysfs + - phy: phy-twl4030-usb: fix denied runtime access + - [armhf] dts: imx6ull: update vdd_soc voltage for 900MHz operating point + - usb: gadget: uvc: Factor out video USB request queueing + - usb: gadget: uvc: Only halt video streaming endpoint in bulk mode + - coresight: Use ERR_CAST instead of ERR_PTR + - coresight: Fix handling of sinks + - coresight: perf: Fix per cpu path management + - coresight: perf: Disable trace path upon source error + - coresight: tmc-etr: Handle driver mode specific ETR buffers + - coresight: etm4x: Configure EL2 exception level when kernel is running in HYP + - coresight: tmc: Fix byte-address alignment for RRP + - coresight: dynamic-replicator: Handle multiple connections + - slimbus: ngd: register ngd driver only once. + - slimbus: ngd: return proper error code instead of zero + - silmbus: ngd: register controller after power up. + - misc: kgdbts: Fix restrict error + - misc: genwqe: should return proper error value. + - vmbus: keep pointer to ring buffer page + - vfio/pci: Fix potential memory leak in vfio_msi_cap_len + - vfio/pci: Mask buggy SR-IOV VF INTx support + - iw_cxgb4: Use proper enumerated type in c4iw_bar2_addrs + - scsi: libsas: always unregister the old device if going to discover new + - f2fs: fix remount problem of option io_bits + - phy: lantiq: Fix compile warning + - [arm64] dts: fsl: Fix I2C and SPI bus warnings + - [armhf] dts: imx51-zii-rdu1: Fix the rtc compatible string + - [arm64] tegra: I2C on Tegra194 is not compatible with Tegra114 + - [armhf] dts: tegra30: fix xcvr-setup-use-fuses + - [armhf] dts: tegra20: restore address order + - [armhf] tegra: apalis_t30: fix mmc1 cmd pull-up + - [armhf] tegra: apalis_t30: fix mcp2515 can controller interrupt polarity + - [armhf] tegra: colibri_t30: fix mcp2515 can controller interrupt polarity + - [armhf] dts: paz00: fix wakeup gpio keycode + - net: smsc: fix return type of ndo_start_xmit function + - net: faraday: fix return type of ndo_start_xmit function + - PCI/ERR: Run error recovery callbacks for all affected devices + - f2fs: update i_size after DIO completion + - f2fs: fix to recover inode's project id during POR + - f2fs: mark inode dirty explicitly in recover_inode() + - RDMA: Fix dependencies for rdma_user_mmap_io + - EDAC: Raise the maximum number of memory controllers + - firmware: dell_rbu: Make payload memory uncachable + - Bluetooth: hci_serdev: clear HCI_UART_PROTO_READY to avoid closing proto races + - Bluetooth: L2CAP: Detect if remote is not able to use the whole MPS + - Bluetooth: btrsi: fix bt tx timeout issue + - [x86] hyperv: Suppress "PCI: Fatal: No config space access function found" + - crypto: s5p-sss: Fix race in error handling + - crypto: s5p-sss: Fix Fix argument list alignment + - crypto: fix a memory leak in rsa-kcs1pad's encryption mode + - iwlwifi: dbg: don't crash if the firmware crashes in the middle of a debug dump + - iwlwifi: fix non_shared_ant for 22000 devices + - iwlwifi: pcie: read correct prph address for newer devices + - iwlwifi: api: annotate compressed BA notif array sizes + - iwlwifi: pcie: gen2: build A-MSDU only for GSO + - iwlwifi: pcie: fit reclaim msg to MAX_MSG_LEN + - iwlwifi: mvm: use correct FIFO length + - iwlwifi: mvm: Allow TKIP for AP mode + - scsi: NCR5380: Clear all unissued commands on host reset + - scsi: NCR5380: Have NCR5380_select() return a bool + - scsi: NCR5380: Withhold disconnect privilege for REQUEST SENSE + - scsi: NCR5380: Use DRIVER_SENSE to indicate valid sense data + - scsi: NCR5380: Check for invalid reselection target + - scsi: NCR5380: Don't clear busy flag when abort fails + - scsi: NCR5380: Don't call dsprintk() following reselection interrupt + - scsi: NCR5380: Handle BUS FREE during reselection + - scsi: NCR5380: Check for bus reset + - [arm64] dts: amd: Fix SPI bus warnings + - [arm64] dts: lg: Fix SPI controller node names + - rtc: isl1208: avoid possible sysfs race + - rtc: tx4939: fixup nvmem name and register size + - rtc: armada38x: fix possible race condition + - netfilter: masquerade: don't flush all conntracks if only one address deleted on device + - usb: xhci-mtk: fix ISOC error when interval is zero + - usb: usbtmc: uninitialized symbol 'actual' in usbtmc_ioctl_clear + - fuse: use READ_ONCE on congestion_threshold and max_background + - IB/iser: Fix possible NULL deref at iser_inv_desc() + - media: ov2680: fix null dereference at power on + - [s390x] vdso: correct vdso mapping for compat tasks + - net: phy: mdio-bcm-unimac: mark PM functions as __maybe_unused + - memfd: Use radix_tree_deref_slot_protected to avoid the warning. + - slcan: Fix memory leak in error path [ Romain Perier ] * [armel/rpi] Enable CONFIG_BRCMFMAC_SDIO (Closes: #940530) diff --git a/debian/patches/bugfix/x86/KVM-x86-introduce-is_pae_paging.patch b/debian/patches/bugfix/x86/KVM-x86-introduce-is_pae_paging.patch deleted file mode 100644 index 5f593cf5e..000000000 --- a/debian/patches/bugfix/x86/KVM-x86-introduce-is_pae_paging.patch +++ /dev/null @@ -1,113 +0,0 @@ -From: Paolo Bonzini -Date: Thu, 6 Jun 2019 18:52:44 +0200 -Subject: KVM: x86: introduce is_pae_paging -Origin: https://git.kernel.org/linus/bf03d4f9334728bf7c8ffc7de787df48abd6340e -Bug: https://bugzilla.kernel.org/show_bug.cgi?id=205441 -Bug: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1851709 -Bug: https://lore.kernel.org/lkml/68d02406-b9cc-2fc1-848c-5d272d9a3350@proxmox.com/ - -Checking for 32-bit PAE is quite common around code that fiddles with -the PDPTRs. Add a function to compress all checks into a single -invocation. - -Moving to the common helper also fixes a subtle bug in kvm_set_cr3() -where it fails to check is_long_mode() and results in KVM incorrectly -attempting to load PDPTRs for a 64-bit guest. - -Reviewed-by: Sean Christopherson -Signed-off-by: Paolo Bonzini -[sean: backport to 4.x; handle vmx.c split in 5.x, call out the bugfix] -Signed-off-by: Sean Christopherson -Acked-by: Paolo Bonzini -Tested-by: Thomas Lamprecht -Signed-off-by: Sasha Levin ---- - arch/x86/kvm/vmx.c | 7 +++---- - arch/x86/kvm/x86.c | 8 ++++---- - arch/x86/kvm/x86.h | 5 +++++ - 3 files changed, 12 insertions(+), 8 deletions(-) - -diff --git a/arch/x86/kvm/vmx.c b/arch/x86/kvm/vmx.c -index 4eda2a9c234a..1ab4bb3d6a04 100644 ---- a/arch/x86/kvm/vmx.c -+++ b/arch/x86/kvm/vmx.c -@@ -5173,7 +5173,7 @@ static void ept_load_pdptrs(struct kvm_vcpu *vcpu) - (unsigned long *)&vcpu->arch.regs_dirty)) - return; - -- if (is_paging(vcpu) && is_pae(vcpu) && !is_long_mode(vcpu)) { -+ if (is_pae_paging(vcpu)) { - vmcs_write64(GUEST_PDPTR0, mmu->pdptrs[0]); - vmcs_write64(GUEST_PDPTR1, mmu->pdptrs[1]); - vmcs_write64(GUEST_PDPTR2, mmu->pdptrs[2]); -@@ -5185,7 +5185,7 @@ static void ept_save_pdptrs(struct kvm_vcpu *vcpu) - { - struct kvm_mmu *mmu = vcpu->arch.walk_mmu; - -- if (is_paging(vcpu) && is_pae(vcpu) && !is_long_mode(vcpu)) { -+ if (is_pae_paging(vcpu)) { - mmu->pdptrs[0] = vmcs_read64(GUEST_PDPTR0); - mmu->pdptrs[1] = vmcs_read64(GUEST_PDPTR1); - mmu->pdptrs[2] = vmcs_read64(GUEST_PDPTR2); -@@ -12013,8 +12013,7 @@ static int nested_vmx_load_cr3(struct kvm_vcpu *vcpu, unsigned long cr3, bool ne - * If PAE paging and EPT are both on, CR3 is not used by the CPU and - * must not be dereferenced. - */ -- if (!is_long_mode(vcpu) && is_pae(vcpu) && is_paging(vcpu) && -- !nested_ept) { -+ if (is_pae_paging(vcpu) && !nested_ept) { - if (!load_pdptrs(vcpu, vcpu->arch.walk_mmu, cr3)) { - *entry_failure_code = ENTRY_FAIL_PDPTE; - return 1; -diff --git a/arch/x86/kvm/x86.c b/arch/x86/kvm/x86.c -index e536503ac788..6cf8af022b21 100644 ---- a/arch/x86/kvm/x86.c -+++ b/arch/x86/kvm/x86.c -@@ -634,7 +634,7 @@ bool pdptrs_changed(struct kvm_vcpu *vcpu) - gfn_t gfn; - int r; - -- if (is_long_mode(vcpu) || !is_pae(vcpu) || !is_paging(vcpu)) -+ if (!is_pae_paging(vcpu)) - return false; - - if (!test_bit(VCPU_EXREG_PDPTR, -@@ -885,8 +885,8 @@ int kvm_set_cr3(struct kvm_vcpu *vcpu, unsigned long cr3) - if (is_long_mode(vcpu) && - (cr3 & rsvd_bits(cpuid_maxphyaddr(vcpu), 63))) - return 1; -- else if (is_pae(vcpu) && is_paging(vcpu) && -- !load_pdptrs(vcpu, vcpu->arch.walk_mmu, cr3)) -+ else if (is_pae_paging(vcpu) && -+ !load_pdptrs(vcpu, vcpu->arch.walk_mmu, cr3)) - return 1; - - kvm_mmu_new_cr3(vcpu, cr3, skip_tlb_flush); -@@ -8348,7 +8348,7 @@ static int __set_sregs(struct kvm_vcpu *vcpu, struct kvm_sregs *sregs) - kvm_update_cpuid(vcpu); - - idx = srcu_read_lock(&vcpu->kvm->srcu); -- if (!is_long_mode(vcpu) && is_pae(vcpu) && is_paging(vcpu)) { -+ if (is_pae_paging(vcpu)) { - load_pdptrs(vcpu, vcpu->arch.walk_mmu, kvm_read_cr3(vcpu)); - mmu_reset_needed = 1; - } -diff --git a/arch/x86/kvm/x86.h b/arch/x86/kvm/x86.h -index 3a91ea760f07..608e5f8c5d0a 100644 ---- a/arch/x86/kvm/x86.h -+++ b/arch/x86/kvm/x86.h -@@ -139,6 +139,11 @@ static inline int is_paging(struct kvm_vcpu *vcpu) - return likely(kvm_read_cr0_bits(vcpu, X86_CR0_PG)); - } - -+static inline bool is_pae_paging(struct kvm_vcpu *vcpu) -+{ -+ return !is_long_mode(vcpu) && is_pae(vcpu) && is_paging(vcpu); -+} -+ - static inline u32 bit(int bitno) - { - return 1 << (bitno & 31); --- -2.20.1 - diff --git a/debian/patches/series b/debian/patches/series index c456f5a48..74f9b104b 100644 --- a/debian/patches/series +++ b/debian/patches/series @@ -80,7 +80,6 @@ bugfix/arm/ARM-dts-sun8i-h3-add-sy8106a-to-orange-pi-plus.patch bugfix/arm64/arm64-dts-allwinner-a64-Enable-A64-timer-workaround.patch bugfix/mips/MIPS-Loongson-Introduce-and-use-loongson_llsc_mb.patch bugfix/powerpc/powerpc-vdso-make-vdso32-installation-conditional-in.patch -bugfix/x86/KVM-x86-introduce-is_pae_paging.patch # Arch features features/mips/MIPS-increase-MAX-PHYSMEM-BITS-on-Loongson-3-only.patch