-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 01 Jun 2024 11:24:36 +0200 Source: linux Binary: linux-doc linux-doc-5.10 linux-headers-5.10.0-30-common linux-headers-5.10.0-30-common-rt linux-source linux-source-5.10 linux-support-5.10.0-30 Architecture: all Version: 5.10.218-1 Distribution: bullseye-security Urgency: high Maintainer: all Build Daemon (x86-grnet-02) Changed-By: Salvatore Bonaccorso Description: linux-doc - Linux kernel specific documentation (meta-package) linux-doc-5.10 - Linux kernel specific documentation for version 5.10 linux-headers-5.10.0-30-common - Common header files for Linux 5.10.0-30 linux-headers-5.10.0-30-common-rt - Common header files for Linux 5.10.0-30-rt linux-source - Linux kernel source (meta-package) linux-source-5.10 - Linux kernel source for version 5.10 with Debian patches linux-support-5.10.0-30 - Support files for Linux 5.10 Closes: 1068365 Changes: linux (5.10.218-1) bullseye-security; urgency=high . * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.217 - [arm64,armhf] dmaengine: pl330: issue_pending waits until WFP state - dmaengine: Revert "dmaengine: pl330: issue_pending waits until WFP state" - wifi: nl80211: don't free NULL coalescing rule - eeprom: at24: Use dev_err_probe for nvmem register failure - eeprom: at24: Probe for DDR3 thermal sensor in the SPD case - eeprom: at24: fix memory corruption race condition (CVE-2024-35848) - [armhf] pinctrl: pinctrl-aspeed-g6: Fix register offset for pinconf of GPIOR-T - [arm64] pinctrl/meson: fix typo in PDM's pin name - pinctrl: core: delete incorrect free in pinctrl_enable() - sunrpc: add a struct rpc_stats arg to rpc_create_args - nfs: expose /proc/net/sunrpc/nfs in net namespaces - nfs: make the rpc_stat per net namespace - nfs: Handle error of rpc_proc_register() in nfs_net_init(). - pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map() - [s390x] mm: Fix storage key clearing for guest huge pages - [s390x] mm: Fix clearing storage keys for huge pages - bna: ensure the copied buf is NUL terminated - nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment(). - net l2tp: drop flow hash on forward - [s390x] vdso: Add CFI for RA register to asm macro vdso_func - net: qede: sanitize 'rc' in qede_add_tc_flower_fltr() - net: qede: use return from qede_parse_flow_attr() for flower - net: qede: use return from qede_parse_flow_attr() for flow_spec - net: qede: use return from qede_parse_actions() - cxgb4: Properly lock TX queue for the selftest. - [arm64,armhf] net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341 - net: bridge: fix multicast-to-unicast with fraglist GSO - net: core: reject skb_copy(_expand) for fraglist GSO skbs - net: gro: add flush check in udp_gro_receive_segment - [arm64] clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change - [arm64] KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id - [arm64] KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr() - scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic - gfs2: Fix invalid metadata access in punch_hole - wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc - wifi: cfg80211: fix rdev_dump_mpp() arguments order - net: mark racy access on sk->sk_rcvbuf - scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload - btrfs: return accurate error code on open failure in open_fs_devices() - ALSA: line6: Zero-initialize message buffers - net: bcmgenet: Reset RBUF on first open - ata: sata_gemini: Check clk_enable() result - firewire: ohci: mask bus reset interrupts between ISR and bottom half - btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve - btrfs: always clear PERTRANS metadata during commit - scsi: target: Fix SELinux error when systemd-modules loads the target module - blk-iocost: avoid out of bounds shift - [arm64,armhf] gpu: host1x: Do not setup DMA for virtual devices - [mips64el,mipsel]: scall: Save thread_info.syscall unconditionally on entry (Closes: #1068365) - fs/9p: only translate RWX permissions for plain 9P2000 - fs/9p: translate O_TRUNC into OTRUNC - 9p: explicitly deny setlease attempts - gpio: wcove: Use -ENOTSUPP consistently - gpio: crystalcove: Use -ENOTSUPP consistently - clk: Don't hold prepare_lock when calling kref_put() - fs/9p: drop inodes immediately on non-.L too - drm/nouveau/dp: Don't probe eDP ports twice harder - net:usb:qmi_wwan: support Rolling modules - xfrm: Preserve vlan tags for transport mode software GRO - tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets - tcp: Use refcount_inc_not_zero() in tcp_twsk_unique(). - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (CVE-2024-27398) - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (CVE-2024-27399) - rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation - [x86] hwmon: (corsair-cpro) Use a separate buffer for sending commands - [x86] hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event() - [x86] hwmon: (corsair-cpro) Protect ccp->wait_input_report with a spinlock - phonet: fix rtm_phonet_notify() skb allocation - kcov: Remove kcov include from sched.h and move it to its users. - net: bridge: fix corrupted ethernet header on multicast-to-unicast - ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() - [arm64] net: hns3: use appropriate barrier function after setting a bit value - btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send() - firewire: nosy: ensure user_length is taken into account when fetching packet contents (CVE-2024-27401) - [arm64] dts: qcom: Fix 'interrupt-map' parent address cells - usb: typec: ucsi: Check for notifications after init - usb: typec: ucsi: Fix connector check on init - usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device - usb: ohci: Prevent missed ohci interrupts - usb: gadget: composite: fix OS descriptors w_value logic - usb: gadget: f_fs: Fix a race condition when processing setup packets. - usb: xhci-plat: Don't include xhci.h - usb: dwc3: core: Prevent phy suspend during init - ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU - iio:imu: adis16475: Fix sync mode setting - iio: accel: mxc4005: Interrupt handling fixes - net: bcmgenet: synchronize use of bcmgenet_set_rx_mode() - dyndbg: fix old BUG_ON in >control parser - mei: me: add lunar lake point M DID - drm/vmwgfx: Fix invalid reads in fence signaled events - net: fix out-of-bounds access in ops_init - regulator: core: fix debugfs creation regression - keys: Fix overwrite of key expiration on instantiation - md: fix kmemleak of rdev->serial (CVE-2024-26900) https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.218 - pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin() - [x86] xen: Drop USERGS_SYSRET64 paravirt call - [arm64] net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access - [arm64] net: bcmgenet: synchronize UMAC_CMD access - ima: fix deadlock when traversing "ima_default_rules". - netlink: annotate lockless accesses to nlk->max_recvmsg_len - [x86] KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection - firmware: arm_scmi: Harden accesses to the reset domains (CVE-2022-48655) - mptcp: ensure snd_nxt is properly initialized on connect - btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks() - drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper() (CVE-2023-52585) - usb: typec: ucsi: displayport: Fix potential deadlock - serial: kgdboc: Fix NMI-safety problems from keyboard reset code - docs: kernel_include.py: Cope with docutils 0.21 . [ Salvatore Bonaccorso ] * Bump ABI to 30 Checksums-Sha1: 6c98241bccca87f466254d4b4b5826b614a99198 30469456 linux-doc-5.10_5.10.218-1_all.deb 40ae1367c63589d1f7e007259df853dcd052d9f9 1104 linux-doc_5.10.218-1_all.deb 739ceb346a73b143baab6125317f8eb96477225a 7551628 linux-headers-5.10.0-30-common-rt_5.10.218-1_all.deb b61f0eb76fe3efb0a9473b472f53044f1db36062 9217320 linux-headers-5.10.0-30-common_5.10.218-1_all.deb 53f0d1617b31614d022db6c3c51ce36fd5896eb8 121502184 linux-source-5.10_5.10.218-1_all.deb cd07694980bcfd8f889c03450f777246da1aafc9 1100 linux-source_5.10.218-1_all.deb c17af58b866dcf114fc02d1a5ab19f460392ddf8 744228 linux-support-5.10.0-30_5.10.218-1_all.deb 599d7a2f0e44abb9bfed06840982e976ee392234 12694 linux_5.10.218-1_all-buildd.buildinfo Checksums-Sha256: e4de8ac325587dcb1d7114479571973e257788d344f4423da103111fb08e703d 30469456 linux-doc-5.10_5.10.218-1_all.deb a30fed3cff58a0ffb109665022de7fab347322009b9c422a25aad9861d282b43 1104 linux-doc_5.10.218-1_all.deb c8d4eb0305a4d1053d24ca1fd14cd8e3f76e7a59073a65dc877f6bb89818a4ef 7551628 linux-headers-5.10.0-30-common-rt_5.10.218-1_all.deb 0a673ed20a80956c2ac0037b1dc0387a53d19f9585700a1d6aa52a9157d21b99 9217320 linux-headers-5.10.0-30-common_5.10.218-1_all.deb 32458c96b86352f8366ef18c70c345c196b6272cf1cb1cbf1f142fe13398201a 121502184 linux-source-5.10_5.10.218-1_all.deb 139375805fdffb5e31b4a8497c8951fef1a48da949b4a37ed0ebde421d1234f9 1100 linux-source_5.10.218-1_all.deb bda542f7c57f3ad93cb2360e07fbcffe430c39188f4d5c6199721fb03dc5d3bd 744228 linux-support-5.10.0-30_5.10.218-1_all.deb 105c20a0c35dd81b4531a46e516acb59912a59fdd5d71b1a4d3a33bebe2e6bba 12694 linux_5.10.218-1_all-buildd.buildinfo Files: 97126e035f2a4648601b1a8aebe731f5 30469456 doc optional linux-doc-5.10_5.10.218-1_all.deb 9132edff844fed2d4b02319e994d0fdb 1104 doc optional linux-doc_5.10.218-1_all.deb ee3417046815157e1c3ee12c0fdff0a9 7551628 kernel optional linux-headers-5.10.0-30-common-rt_5.10.218-1_all.deb c052fa87b7a60a190680a6e08c76ebf0 9217320 kernel optional linux-headers-5.10.0-30-common_5.10.218-1_all.deb d463e548dbf5bf8240a8eb0f1bc65077 121502184 kernel optional linux-source-5.10_5.10.218-1_all.deb 40bcc931b66c5aa678334a846036b4cb 1100 kernel optional linux-source_5.10.218-1_all.deb c270146644254106796e49dc0e4c8878 744228 devel optional linux-support-5.10.0-30_5.10.218-1_all.deb c1d3870a2f9e7ca565e97849c9bb80e8 12694 kernel optional linux_5.10.218-1_all-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEQsM0t1ygJv2xcx3e4cagXJhOTXsFAmZa94gACgkQ4cagXJhO TXud1Q//QiGNa97BnisGbUUtothnHkpJxIpUOQbYbiOfqwjAoOchFaGrXZ0xq3hD fjvXcGVKrmOvA08tnhU9IExkIDjt6Wp9v8qDLvAEuxj87rXJprh0iqCA8ox46CSz 5IXEV2q1+AsoBQZJrLySrt98tkrOcl9OmJjjiWhDacD8cNYIQ+P6cMUSpYhwUG84 jEqbgN/onf5EizhIeq0fdL86YjvsAEIS3dJ3Q6zenHZUCM+gDO8082oXdImtmtw9 s3nsYJOinXrUcku1dHVtSwCb7Y5sFMQVeBkinWngvopIdOBhLzs2SjLc+cZHa0mp fmeq/FNw5y6P0ZB1VB6ESTXugeFgIeFp2gy2XUkilFFY1L1NWTVqCxDULHvuiYpv HMNOX+MYuwK5rKLa7j6PGMwS51lUzN+P6Iei0Hsyycl5lm7TLh8vJPgs1B3Bb3/8 LTC7LcA38l92Vny3rjumNjwuNwZHtFe/2sUD+bLw+G0tRa7jLecY2M8urLQvgqPt qEosafwAyiFil/7po3acCeWi5L/oHAtuLEs5ZkXH1tHb8Rr2OGZG7+5siMcm43fH Luh0H8TW28ldngOsUcEwir5K7an/ugsTqkrAWtniH+7KLcNsTAszCoIt8MCfn4GO RYMzN57BG1UeYHhDM8uzkLD6PBO+RpVWa9IhdZrirlJ8ftU5R2w= =k2gy -----END PGP SIGNATURE-----