From 6b3bc49af1a0c3eeea2ff4fa06ad2abacc262796 Mon Sep 17 00:00:00 2001 From: Zheng Zengkai Date: Wed, 19 Oct 2022 14:31:25 +0800 Subject: [PATCH] release 5.10.0-121.0.0 --- SOURCE | 2 +- kernel.spec | 294 +++++++++++++++++++++++++++++++++++++++++++++++++++- 2 files changed, 293 insertions(+), 3 deletions(-) diff --git a/SOURCE b/SOURCE index 47cb871..06e0893 100644 --- a/SOURCE +++ b/SOURCE @@ -1 +1 @@ -5.10.0-119.0.0 +5.10.0-121.0.0 diff --git a/kernel.spec b/kernel.spec index 1e93fc2..444323d 100644 --- a/kernel.spec +++ b/kernel.spec @@ -10,9 +10,9 @@ %global upstream_version 5.10 %global upstream_sublevel 0 -%global devel_release 119 +%global devel_release 121 %global maintenance_release .0.0 -%global pkg_release .64 +%global pkg_release .65 %define with_debuginfo 1 # Do not recompute the build-id of vmlinux in find-debuginfo.sh @@ -879,6 +879,296 @@ fi %endif %changelog +* Wed Oct 19 2022 Zheng Zengkai - 5.10.0-121.0.0.65 +- binder: fix UAF of ref->proc caused by race condition +- wifi: cfg80211: fix u8 overflow in cfg80211_update_notlisted_nontrans() +- wifi: mac80211: fix MBSSID parsing use-after-free +- fbdev: smscufx: Fix use-after-free in ufx_ops_open() +- arm64: fix oops in concurrently setting insn_emulation sysctls +- wifi: cfg80211: avoid nontransmitted BSS list corruption +- ext4: ext4_read_bh_lock() should submit IO if the buffer isn't uptodate +- ipv4: Handle attempt to delete multipath route when fib_info contains an nh reference +- HID: roccat: Fix use-after-free in roccat_read() +- wifi: cfg80211: fix BSS refcounting bugs +- mm/rmap: Fix kabi broken in anon_vma +- mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse +- kasan: check KASAN_NO_FREE_META in __kasan_metadata_size +- kasan: sanitize objects when metadata doesn't fit +- kasan: introduce set_alloc_info +- kasan: rename get_alloc/free_info +- kasan: simplify quarantine_put call site +- set hisi ptt module defconfig +- RDMA/hns: Support cqe inline in user space +- RDMA/hns: Remove enable rq inline in kernel and add compatibility handling +- RDMA/hns: Fix the problem of sge nums +- RDMA/hns: Fix ext_sge num error when post send +- RDMA/hns: Use a constant instead of sizeof operation +- crypto: hisilicon - support get algs by the capability register +- crypto: hisilicon/sec - get algorithm bitmap from registers +- crypto: hisilicon/zip - support zip capability +- crypto: hisilicon/hpre - optimize registration of ecdh +- crypto: hisilicon/hpre - support hpre capability +- crypto: hisilicon/qm - support get device irq information from hardware registers +- crypto: hisilicon/qm - get error type from hardware registers +- crypto: hisilicon/qm - add UACCE_CMD_QM_SET_QP_INFO support +- crypto: hisilicon/qm - get qp num and depth from hardware registers +- crypto: hisilicon/qm - get hardware features from hardware registers +- crypto: hisilicon/sec - delete redundant blank lines +- crypto: hisilicon/qm - return failure if vfs_num exceeds total VFs +- crypto: hisilicon/qm - fix missing put dfx access +- crypto: hisilicon/qm - check mailbox operation result +- crypto: hisilicon/qm - no judgment in the back process +- crypto: hisilicon/qm - remove unneeded data storage +- crypto: hisilicon/qm - fix missing destroy qp_idr +- crypto: hisilicon/hpre - change return type of hpre_cluster_inqry_write() +- crypto: hisilicon/zip - some misc cleanup +- crypto: hisilicon/zip - optimization for performance +- crypto: hisilicon - Remove pci_aer_clear_nonfatal_status() call +- crypto: hisilicon/zip - fix mismatch in get/set sgl_sge_nr +- add CONFIG_BLK_DEV_DUMPINFO and set it enabled in openeuler_defconfig +- add config to control detecting conflict of opening block device +- tcp: fix tcp_mtup_probe_success vs wrong snd_cwnd +- dmaengine: idxd: add missing callback function to support DMA_INTERRUPT +- zonefs: fix handling of explicit_open option on mount +- PCI: qcom: Fix pipe clock imbalance +- md/raid0: Ignore RAID0 layout if the second zone has only one device +- interconnect: Restore sync state by ignoring ipa-virt in provider count +- interconnect: qcom: sc7180: Drop IP0 interconnects +- powerpc/mm: Switch obsolete dssall to .long +- drm/atomic: Force bridge self-refresh-exit on CRTC switch +- drm/bridge: analogix_dp: Support PSR-exit to disable transition +- Input: bcm5974 - set missing URB_NO_TRANSFER_DMA_MAP urb flag +- ixgbe: fix unexpected VLAN Rx in promisc mode on VF +- ixgbe: fix bcast packets Rx on VF after promisc removal +- nfc: st21nfca: fix incorrect sizing calculations in EVT_TRANSACTION +- nfc: st21nfca: fix memory leaks in EVT_TRANSACTION handling +- nfc: st21nfca: fix incorrect validating logic in EVT_TRANSACTION +- net: phy: dp83867: retrigger SGMII AN when link change +- mmc: block: Fix CQE recovery reset success +- ata: libata-transport: fix {dma|pio|xfer}_mode sysfs files +- cifs: fix reconnect on smb3 mount types +- cifs: return errors during session setup during reconnects +- ALSA: hda/realtek: Fix for quirk to enable speaker output on the Lenovo Yoga DuetITL 2021 +- ALSA: hda/conexant - Fix loopback issue with CX20632 +- scripts/gdb: change kernel config dumping method +- vringh: Fix loop descriptors check in the indirect cases +- nodemask: Fix return values to be unsigned +- cifs: version operations for smb20 unneeded when legacy support disabled +- s390/gmap: voluntarily schedule during key setting +- jump_label,noinstr: Avoid instrumentation for JUMP_LABEL=n builds +- x86/cpu: Elide KCSAN for cpu_has() and friends +- modpost: fix undefined behavior of is_arm_mapping_symbol() +- drm/radeon: fix a possible null pointer dereference +- ceph: allow ceph.dir.rctime xattr to be updatable +- Revert "net: af_key: add check for pfkey_broadcast in function pfkey_process" +- scsi: myrb: Fix up null pointer access on myrb_cleanup() +- md: protect md_unregister_thread from reentrancy +- watchdog: wdat_wdt: Stop watchdog when rebooting the system +- kernfs: Separate kernfs_pr_cont_buf and rename_lock. +- serial: msm_serial: disable interrupts in __msm_console_write() +- staging: rtl8712: fix uninit-value in r871xu_drv_init() +- staging: rtl8712: fix uninit-value in usb_read8() and friends +- clocksource/drivers/sp804: Avoid error on multiple instances +- extcon: Modify extcon device to be created after driver data is set +- misc: rtsx: set NULL intfdata when probe fails +- usb: dwc2: gadget: don't reset gadget's driver->bus +- sysrq: do not omit current cpu when showing backtrace of all active CPUs +- USB: hcd-pci: Fully suspend across freeze/thaw cycle +- drivers: usb: host: Fix deadlock in oxu_bus_suspend() +- drivers: tty: serial: Fix deadlock in sa1100_set_termios() +- USB: host: isp116x: check return value after calling platform_get_resource() +- drivers: staging: rtl8192e: Fix deadlock in rtllib_beacons_stop() +- drivers: staging: rtl8192u: Fix deadlock in ieee80211_beacons_stop() +- tty: Fix a possible resource leak in icom_probe +- tty: synclink_gt: Fix null-pointer-dereference in slgt_clean() +- lkdtm/usercopy: Expand size of "out of frame" object +- iio: st_sensors: Add a local lock for protecting odr +- staging: rtl8712: fix a potential memory leak in r871xu_drv_init() +- iio: dummy: iio_simple_dummy: check the return value of kstrdup() +- drm: imx: fix compiler warning with gcc-12 +- net: altera: Fix refcount leak in altera_tse_mdio_create +- ip_gre: test csum_start instead of transport header +- net/mlx5: fs, fail conflicting actions +- net/mlx5: Rearm the FW tracer after each tracer event +- net: ipv6: unexport __init-annotated seg6_hmac_init() +- net: xfrm: unexport __init-annotated xfrm4_protocol_init() +- net: mdio: unexport __init-annotated mdio_bus_init() +- SUNRPC: Fix the calculation of xdr->end in xdr_get_next_encode_buffer() +- net/mlx4_en: Fix wrong return value on ioctl EEPROM query failure +- net: dsa: lantiq_gswip: Fix refcount leak in gswip_gphy_fw_list +- bpf, arm64: Clear prog->jited_len along prog->jited +- af_unix: Fix a data-race in unix_dgram_peer_wake_me(). +- xen: unexport __init-annotated xen_xlate_map_ballooned_pages() +- netfilter: nf_tables: bail out early if hardware offload is not supported +- netfilter: nf_tables: memleak flow rule from commit path +- netfilter: nf_tables: release new hooks on unsupported flowtable flags +- ata: pata_octeon_cf: Fix refcount leak in octeon_cf_probe +- netfilter: nf_tables: always initialize flowtable hook list in transaction +- powerpc/kasan: Force thread size increase with KASAN +- netfilter: nf_tables: delete flowtable hooks via transaction list +- netfilter: nat: really support inet nat without l3 address +- xprtrdma: treat all calls not a bcall when bc_serv is NULL +- video: fbdev: pxa3xx-gcu: release the resources correctly in pxa3xx_gcu_probe/remove() +- video: fbdev: hyperv_fb: Allow resolutions with size > 64 MB for Gen1 +- NFSv4: Don't hold the layoutget locks across multiple RPC calls +- dmaengine: zynqmp_dma: In struct zynqmp_dma_chan fix desc_size data type +- m68knommu: fix undefined reference to `_init_sp' +- m68knommu: set ZERO_PAGE() to the allocated zeroed page +- i2c: cadence: Increase timeout per message if necessary +- f2fs: remove WARN_ON in f2fs_is_valid_blkaddr +- iommu/arm-smmu-v3: check return value after calling platform_get_resource() +- iommu/arm-smmu: fix possible null-ptr-deref in arm_smmu_device_probe() +- tracing: Avoid adding tracer option before update_tracer_options +- tracing: Fix sleeping function called from invalid context on RT kernel +- bootconfig: Make the bootconfig.o as a normal object file +- mips: cpc: Fix refcount leak in mips_cpc_default_phys_base +- dmaengine: idxd: set DMA_INTERRUPT cap bit +- perf c2c: Fix sorting in percent_rmt_hitm_cmp() +- driver core: Fix wait_for_device_probe() & deferred_probe_timeout interaction +- tipc: check attribute length for bearer name +- scsi: sd: Fix potential NULL pointer dereference +- afs: Fix infinite loop found by xfstest generic/676 +- gpio: pca953x: use the correct register address to do regcache sync +- tcp: tcp_rtx_synack() can be called from process context +- net: sched: add barrier to fix packet stuck problem for lockless qdisc +- net/mlx5e: Update netdev features after changing XDP state +- net/mlx5: correct ECE offset in query qp output +- net/mlx5: Don't use already freed action pointer +- sfc: fix wrong tx channel offset with efx_separate_tx_channels +- sfc: fix considering that all channels have TX queues +- nfp: only report pause frame configuration for physical device +- net/smc: fixes for converting from "struct smc_cdc_tx_pend **" to "struct smc_wr_tx_pend_priv *" +- riscv: read-only pages should not be writable +- bpf: Fix probe read error in ___bpf_prog_run() +- ubi: fastmap: Fix high cpu usage of ubi_bgt by making sure wl_pool not empty +- jffs2: fix memory leak in jffs2_do_fill_super +- modpost: fix removing numeric suffixes +- net: dsa: mv88e6xxx: Fix refcount leak in mv88e6xxx_mdios_register +- net: ethernet: ti: am65-cpsw-nuss: Fix some refcount leaks +- net: ethernet: mtk_eth_soc: out of bounds read in mtk_hwlro_get_fdir_entry() +- net: sched: fixed barrier to prevent skbuff sticking in qdisc backlog +- s390/crypto: fix scatterwalk_unmap() callers in AES-GCM +- clocksource/drivers/oxnas-rps: Fix irq_of_parse_and_map() return value +- ASoC: fsl_sai: Fix FSL_SAI_xDR/xFR definition +- watchdog: ts4800_wdt: Fix refcount leak in ts4800_wdt_probe +- watchdog: rti-wdt: Fix pm_runtime_get_sync() error checking +- driver: base: fix UAF when driver_attach failed +- bus: ti-sysc: Fix warnings for unbind for serial +- firmware: dmi-sysfs: Fix memory leak in dmi_sysfs_register_handle +- serial: stm32-usart: Correct CSIZE, bits, and parity +- serial: st-asc: Sanitize CSIZE and correct PARENB for CS7 +- serial: sifive: Sanitize CSIZE and c_iflag +- serial: sh-sci: Don't allow CS5-6 +- serial: txx9: Don't allow CS5-6 +- serial: rda-uart: Don't allow CS5-6 +- serial: digicolor-usart: Don't allow CS5-6 +- serial: 8250_fintek: Check SER_RS485_RTS_* only with RS485 +- serial: meson: acquire port->lock in startup() +- rtc: mt6397: check return value after calling platform_get_resource() +- clocksource/drivers/riscv: Events are stopped during CPU suspend +- soc: rockchip: Fix refcount leak in rockchip_grf_init +- extcon: ptn5150: Add queue work sync before driver release +- coresight: cpu-debug: Replace mutex with mutex_trylock on panic notifier +- serial: sifive: Report actual baud base rather than fixed 115200 +- phy: qcom-qmp: fix pipe-clock imbalance on power-on failure +- rpmsg: qcom_smd: Fix returning 0 if irq_of_parse_and_map() fails +- iio: adc: sc27xx: Fine tune the scale calibration values +- iio: adc: sc27xx: fix read big scale voltage not right +- iio: proximity: vl53l0x: Fix return value check of wait_for_completion_timeout +- iio: adc: stmpe-adc: Fix wait_for_completion_timeout return value check +- usb: typec: mux: Check dev_set_name() return value +- firmware: stratix10-svc: fix a missing check on list iterator +- misc: fastrpc: fix an incorrect NULL check on list iterator +- usb: dwc3: pci: Fix pm_runtime_get_sync() error checking +- rpmsg: qcom_smd: Fix irq_of_parse_and_map() return value +- pwm: lp3943: Fix duty calculation in case period was clamped +- staging: fieldbus: Fix the error handling path in anybuss_host_common_probe() +- usb: musb: Fix missing of_node_put() in omap2430_probe +- USB: storage: karma: fix rio_karma_init return +- usb: usbip: add missing device lock on tweak configuration cmd +- usb: usbip: fix a refcount leak in stub_probe() +- tty: serial: fsl_lpuart: fix potential bug when using both of_alias_get_id and ida_simple_get +- tty: n_tty: Restore EOF push handling behavior +- tty: serial: owl: Fix missing clk_disable_unprepare() in owl_uart_probe +- tty: goldfish: Use tty_port_destroy() to destroy port +- lkdtm/bugs: Check for the NULL pointer after calling kmalloc +- iio: adc: ad7124: Remove shift from scan_type +- staging: greybus: codecs: fix type confusion of list iterator variable +- pcmcia: db1xxx_ss: restrict to MIPS_DB1XXX boards +- !163 ICX: EDAC driver decoder for Ice Lake +- !162 SPR: EDPC get recoveried but the PCI configuration registers value changed +- !158 Intel SPR: SGX: Backport SGX EDMM support +- init/Kconfig: Add SMP to the dependencies of QOS_SCHED +- iommu/arm-smmu-v3: Disable ECMDQ before the system is suspended +- tty: fix deadlock caused by calling printk() under tty_port->lock +- netfilter: nf_conntrack_irc: Fix forged IP logic +- ext4: fix dir corruption when ext4_dx_add_entry() fails +- ext4: fix check for block being out of directory size +- ext4: make sure ext4_append() always allocates new block +- ext4: check if directory block is within i_size +- ext4: make variable "count" signed +- iommu: Fix compliation failure caused by iommu_device_register +- ALSA: pcm: oss: Fix race at SNDCTL_DSP_SYNC +- blk-iocost: don't ignore vrate_min on QD contention +- EDAC/i10nm: Add driver decoder for Ice Lake and Tremont CPUs +- EDAC/skx_common: Make output format similar +- EDAC/skx_common: Use driver decoder first +- PCI/ERR: Retain status from error notification +- x86/sgx: Drop 'page_index' from sgx_backing +- x86/sgx: Set active memcg prior to shmem allocation +- selftests/sgx: Page removal stress test +- selftests/sgx: Test reclaiming of untouched page +- selftests/sgx: Test invalid access to removed enclave page +- selftests/sgx: Test faulty enclave behavior +- selftests/sgx: Test complete changing of page type flow +- selftests/sgx: Introduce TCS initialization enclave operation +- selftests/sgx: Introduce dynamic entry point +- selftests/sgx: Test two different SGX2 EAUG flows +- selftests/sgx: Add test for TCS page permission changes +- selftests/sgx: Add test for EPCM permission changes +- Documentation/x86: Introduce enclave runtime management section +- x86/sgx: Free up EPC pages directly to support large page ranges +- x86/sgx: Support complete page removal +- x86/sgx: Support modifying SGX page type +- x86/sgx: Tighten accessible memory range after enclave initialization +- x86/sgx: Support adding of pages to an initialized enclave +- x86/sgx: Support restricting of enclave page permissions +- x86/sgx: Support VA page allocation without reclaiming +- x86/sgx: Export sgx_encl_page_alloc() +- x86/sgx: Export sgx_encl_{grow,shrink}() +- x86/sgx: Keep record of SGX page type +- x86/sgx: Create utility to validate user provided offset and length +- x86/sgx: Make sgx_ipi_cb() available internally +- x86/sgx: Move PTE zap code to new sgx_zap_enclave_ptes() +- x86/sgx: Rename sgx_encl_ewb_cpumask() as sgx_encl_cpumask() +- x86/sgx: Export sgx_encl_ewb_cpumask() +- x86/sgx: Support loading enclave page without VMA permissions check +- x86/sgx: Add wrapper for SGX2 EAUG function +- x86/sgx: Add wrapper for SGX2 EMODT function +- x86/sgx: Add wrapper for SGX2 EMODPR function +- x86/sgx: Add short descriptions to ENCLS wrappers +- x86/sgx: Ensure no data in PCMD page after truncate +- x86/sgx: Obtain backing storage page with enclave mutex held +- x86/sgx: Disconnect backing page references from dirty status +- x86/sgx: Fix missing poison handling in reclaimer +- x86/sgx: Fix NULL pointer dereference on non-SGX systems +- x86/sgx: Add an attribute for the amount of SGX memory in a NUMA node +- x86/sgx: Fix minor documentation issues +- selftests/sgx: Add test for multiple TCS entry +- selftests/sgx: Enable multiple thread support +- selftests/sgx: Add page permission and exception test +- selftests/sgx: Rename test properties in preparation for more enclave tests +- selftests/sgx: Provide per-op parameter structs for the test enclave +- selftests/sgx: Fix corrupted cpuid macro invocation +- selftests/sgx: Add a new kselftest: Unclobbered_vdso_oversubscribed +- selftests/sgx: Move setup_test_encl() to each TEST_F() +- selftests/sgx: Encpsulate the test enclave creation +- selftests/sgx: Dump segments and /proc/self/maps only on failure +- selftests/sgx: Create a heap for the test enclave +- selftests/sgx: Make data measurement for an enclave segment optional +- selftests/sgx: Assign source for each segment +- selftests/sgx: Fix a benign linker warning + * Tue Oct 11 2022 Zheng Zengkai - 5.10.0-119.0.0.64 - crypto: hisilicon/zip - Use the bitmap API to allocate bitmaps - crypto: hisilicon/sec - fix auth key size error