Accepted linux-signed-i386 5.10.148+1 (source) into proposed-updates

[Debian FTP Masters <ftpmaster@ftp-master.debian.org>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sun, 16 Oct 2022 23:18:41 +0200
Source: linux-signed-i386
Architecture: source
Version: 5.10.148+1
Distribution: bullseye-security
Urgency: high
Maintainer: Debian Kernel Team <debian-kernel@lists.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Changes:
 linux-signed-i386 (5.10.148+1) bullseye-security; urgency=high
 .
   * Sign kernel from linux 5.10.148-1
 .
   * New upstream stable update:
     https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.141
     - [s390x] mm: do not trigger write fault when vma does not allow VM_WRITE
     - kbuild: Fix include path in scripts/Makefile.modpost
     - Bluetooth: L2CAP: Fix build errors in some archs
     - HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
     - media: pvrusb2: fix memory leak in pvr_probe
     - HID: hidraw: fix memory leak in hidraw_release()
     - net: fix refcount bug in sk_psock_get (2)
     - fbdev: fb_pm2fb: Avoid potential divide by zero error
     - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace
       is dead
     - drm/amd/display: Avoid MPC infinite loop
     - drm/amd/display: For stereo keep "FLIP_ANY_FRAME"
     - drm/amd/display: clear optc underflow before turn off odm clock
     - neigh: fix possible DoS due to net iface start/stop loop
     - [s390x] hypfs: avoid error message under KVM
     - drm/amd/pm: add missing ->fini_microcode interface for Sienna Cichlid
     - drm/amd/display: Fix pixel clock programming
     - drm/amdgpu: Increase tlb flush timeout for sriov
     - netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
     - lib/vdso: Mark do_hres_timens() and do_coarse_timens() __always_inline()
     - kprobes: don't call disarm_kprobe() for disabled kprobes
     - io_uring: disable polling pollfree files
     - xfs: remove infinite loop when reserving free block pool
     - xfs: always succeed at setting the reserve pool size
     - xfs: fix overfilling of reserve pool
     - xfs: fix soft lockup via spinning in filestream ag selection loop
     - xfs: revert "xfs: actually bump warning counts when we send warnings"
     - net: neigh: don't call kfree_skb() under spin_lock_irqsave()
     https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.142
     - [arm64] drm/msm/dsi: fix the inconsistent indenting
     - [arm64] drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4
     - [arm64] drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
     - [arm64] drm/msm/dsi: Fix number of regulators for SDM660
     - [x86] platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
     - iio: adc: mcp3911: make use of the sign bit
     - bpf, cgroup: Fix kernel BUG in purge_effective_progs
     - ieee802154/adf7242: defer destroy_workqueue call
     - ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg
     - ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array
     - wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
     - Revert "xhci: turn off port power in shutdown"
     - net: sched: tbf: don't call qdisc_put() while holding tree lock
     - net/sched: fix netdevice reference leaks in attach_default_qdiscs()
     - sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
     - tcp: annotate data-race around challenge_timestamp
     - Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
     - net/smc: Remove redundant refcount increase
     - [arm64] serial: fsl_lpuart: RS485 RTS polariy is inverse
     - staging: rtl8712: fix use after free bugs
     - [powerpc*] align syscall table for ppc32
     - vt: Clear selection before changing the font
     - [arm64] tty: serial: lpuart: disable flow control while waiting for the
       transmit engine to complete
     - Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
     - iio: ad7292: Prevent regulator double disable
     - iio: adc: mcp3911: use correct formula for AD conversion
     - USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
     - [arm*] binder: fix UAF of ref->proc caused by race condition
       (CVE-2022-20421)
     - [x86] drm/i915/reg: Fix spelling mistake "Unsupport" -> "Unsupported"
     - clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
     - Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
     - clk: core: Fix runtime PM sequence in clk_core_unprepare()
     - [arm64,armhf] clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
     - [arm64,armhf] clk: bcm: rpi: Use correct order for the parameters of
       devm_kcalloc()
     - [arm64,armhf] clk: bcm: rpi: Prevent out-of-bounds access
     - [arm64,armhf] clk: bcm: rpi: Add missing newline
     - [armel,armhf] hwmon: (gpio-fan) Fix array out of bounds access
     - [arm64,armhf] gpio: pca953x: Add mutex_lock for regcache sync in PM
     - [x86] KVM: x86: Mask off unsupported and unknown bits of
       IA32_ARCH_CAPABILITIES
     - xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()
     - mm: pagewalk: Fix race between unmap and page walker
     - xen-blkback: Advertise feature-persistent as user requested
     - xen-blkfront: Advertise feature-persistent as user requested
     - [x86] thunderbolt: Use the actual buffer in tb_async_error()
     - media: mceusb: Use new usb_control_msg_*() routines
     - xhci: Add grace period after xHC start to prevent premature runtime
       suspend.
     - USB: serial: cp210x: add Decagon UCA device id
     - USB: serial: option: add support for OPPO R11 diag port
     - USB: serial: option: add Quectel EM060K modem
     - USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
     - usb: typec: altmodes/displayport: correct pin assignment for UFP
       receptacles
     - [arm*] usb: dwc2: fix wrong order of phy_power_on and phy_init
     - USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
     - usb-storage: Add ignore-residue quirk for NXP PN7462AU
     - [s390x] hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
     - [s390x] fix nospec table alignments
     - USB: core: Prevent nested device-reset calls
     - usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
     - driver core: Don't probe devices after bus_type.match() probe deferral
     - wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
     - wifi: mac80211: Fix UAF in ieee80211_scan_rx()
     - ip: fix triggering of 'icmp redirect'
     - net: Use u64_stats_fetch_begin_irq() for stats fetch.
     - net: mac802154: Fix a condition in the receive path
     - ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298
     - ALSA: seq: oss: Fix data-race for max_midi_devs access
     - ALSA: seq: Fix data-race at module auto-loading
     - [x86] drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
     - btrfs: harden identification of a stale device
     - mmc: core: Fix UHS-I SD 1.8V workaround branch
     - [arm64,armhf] usb: dwc3: fix PHY disable sequence
     - [arm64,armhf] usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
     - [arm64,armhf] usb: dwc3: disable USB core PHY management
     - USB: serial: ch341: fix lost character on LCR updates
     - USB: serial: ch341: fix disabled rx timer on older devices
     https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.143
     - NFSD: Fix verifier returned in stable WRITEs
     - xen-blkfront: Cache feature_persistent value before advertisement
     - tty: n_gsm: initialize more members at gsm_alloc_mux()
     - tty: n_gsm: avoid call of sleeping functions from atomic context
     - efi: capsule-loader: Fix use-after-free in efi_capsule_write
       (CVE-2022-40307)
     - wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in
       il4965_rs_fill_link_cmd()
     - fs: only do a memory barrier for the first set_buffer_uptodate()
     - scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX
     - scsi: megaraid_sas: Fix double kfree()
     - drm/gem: Fix GEM handle release errors
     - drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to
       psp_hw_fini
     - drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
     - drm/radeon: add a force flush to delay work when radeon
     - [arm64] cacheinfo: Fix incorrect assignment of signed error value to
       unsigned fw_level
     - net/core/skbuff: Check the return value of skb_copy_bits()
     - drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
     - ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
     - ALSA: aloop: Fix random zeros in capture data when using jiffies timer
     - ALSA: usb-audio: Fix an out-of-bounds bug in
       __snd_usb_parse_audio_interface()
     - kprobes: Prohibit probes in gate area
     - debugfs: add debugfs_lookup_and_remove()
     - nvmet: fix a use-after-free
     - [x86] drm/i915: Implement WaEdpLinkRateDataReload
     - scsi: mpt3sas: Fix use-after-free warning
     - scsi: lpfc: Add missing destroy_workqueue() in error path
     - cgroup: Elide write-locking threadgroup_rwsem when updating csses on an
       empty subtree
     - cgroup: Fix threadgroup_rwsem <-> cpus_read_lock() deadlock
     - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
     - smb3: missing inode locks in punch hole
     - regulator: core: Clean up on enable failure
     - [arm64] tee: fix compiler warning in tee_shm_register()
     - RDMA/cma: Fix arguments order in net device validation
     - [arm64] RDMA/hns: Fix supported page size
     - [arm64] RDMA/hns: Fix wrong fixed value of qp->rq.wqe_shift
     - netfilter: br_netfilter: Drop dst references before setting.
     - netfilter: nf_tables: clean up hook list when offload flags check fails
     - netfilter: nf_conntrack_irc: Fix forged IP logic (CVE-2022-2663)
     - ALSA: usb-audio: Inform the delayed registration more properly
     - ALSA: usb-audio: Register card again for iface over delayed_register
       option
     - rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
     - afs: Use the operation issue time instead of the reply time for callbacks
     - sch_sfb: Don't assume the skb is still around after enqueueing to child
     - tipc: fix shift wrapping bug in map_get()
     - ice: use bitmap_free instead of devm_kfree
     - i40e: Fix kernel crash during module removal
     - xen-netback: only remove 'hotplug-status' when the vif is actually
       destroyed
     - ipv6: sr: fix out-of-bounds read when setting HMAC data.
     - IB/core: Fix a nested dead lock as part of ODP flow
     - RDMA/mlx5: Set local port to one when accessing counters
     - nvme-tcp: fix UAF when detecting digest errors
     - nvme-tcp: fix regression that causes sporadic requests to time out
     - tcp: fix early ETIMEDOUT after spurious non-SACK RTO
     - sch_sfb: Also store skb len before calling child enqueue
     - swiotlb: avoid potential left shift overflow
     - [amd64] iommu/amd: use full 64-bit value in build_completion_wait()
     - [arm64] errata: add detection for AMEVCNTR01 incrementing incorrectly
     https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.144
     - [armhf] dts: imx: align SPI NOR node name with dtschema
     - [amd64] iommu/vt-d: Correctly calculate sagaw value of IOMMU
     - tracefs: Only clobber mode/uid/gid on remount if asked
     - Input: goodix - add support for GT1158
     - [arm64] drm/msm/rd: Fix FIFO-full deadlock
     - [amd64] hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered
       message
     - tg3: Disable tg3 device on system reboot to avoid triggering AER
     - ieee802154: cc2520: add rc code in cc2520_tx()
     - Input: iforce - add support for Boeder Force Feedback Wheel
     - nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change()
     - drm/amd/amdgpu: skip ucode loading if ucode_size == 0
     - [arm*] perf/arm_pmu_platform: fix tests for platform_get_irq() failure
     - [x86] platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot
       keymap fixes
     - mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
     - [x86] Revert "x86/ftrace: Use alternative RET encoding"
     - [x86] ibt,ftrace: Make function-graph play nice
     - [x86] ftrace: Use alternative RET encoding
     - Input: goodix - add compatible string for GT1158
     https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.145
     - [ppc64el] KVM: PPC: Book3S HV: Context tracking exit guest context before
       enabling irqs
     - [ppc64el] KVM: PPC: Tick accounting should defer vtime accounting 'til
       after IRQ handling
     - serial: 8250: Fix reporting real baudrate value in c_ospeed field
     - [powerpc*] pseries/mobility: refactor node lookup during DT update
     - [powerpc*] pseries/mobility: ignore ibm, platform-facilities updates
     - [x86] platform/x86/intel: hid: add quirk to support Surface Go 3
     - [arm64,armhf] net: dsa: mv88e6xxx: allow use of PHYs on CPU and DSA ports
     - of: fdt: fix off-by-one error in unflatten_dt_nodes()
     - [arm64] pinctrl: sunxi: Fix name for A100 R_PIO
     - NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0
     - [arm64] gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in
       mpc85xx
     - [arm64] drm/meson: Correct OSD1 global alpha value
     - [arm64] drm/meson: Fix OSD1 RGB to YCbCr coefficient
     - tracing: hold caller_addr to hardirq_{enable,disable}_ip
     - of/device: Fix up of_dma_configure_id() stub
     - cifs: revalidate mapping when doing direct writes
     - cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
     - video: fbdev: i740fb: Error out if 'pixclock' equals zero (CVE-2022-3061)
     - Revert "serial: 8250: Fix reporting real baudrate value in c_ospeed field"
     - [x86] ASoC: nau8824: Fix semaphore unbalance at error paths
     - [armhf] regulator: pfuze100: Fix the global-out-of-bounds access in
       pfuze100_regulator_probe()
     - rxrpc: Fix local destruction being repeated
     - rxrpc: Fix calc of resend age
     - wifi: mac80211_hwsim: check length for virtio packets
     - ALSA: hda/sigmatel: Keep power up while beep is enabled
     - [arm64,armhf] ALSA: hda/tegra: Align BDL entry to 4KB boundary
     - net: usb: qmi_wwan: add Quectel RM520N
     - afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
     - [misp64el,mipsel] OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
     - mksysmap: Fix the mismatch of 'L0' symbols in System.map
     - video: fbdev: pxa3xx-gcu: Fix integer overflow in pxa3xx_gcu_write
       (CVE-2022-39842)
     - cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()
     - ALSA: hda/sigmatel: Fix unused variable warning for beep power change
     https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.146
     - drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
     - drm/amdgpu: indirect register access for nv12 sriov
     - drm/amdgpu: Separate vf2pf work item init from virt data exchange
     - drm/amdgpu: make sure to init common IP before gmc
     - [arm64,armhf] usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC
       unbind
     - [arm64,armhf] usb: dwc3: Issue core soft reset before enabling run/stop
     - [arm64,armhf] usb: dwc3: gadget: Prevent repeat pullup()
     - [arm64,armhf] usb: dwc3: gadget: Refactor pullup()
     - [arm64,armhf] usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup()
     - [arm64,armhf] usb: dwc3: gadget: Avoid duplicate requests to enable
       Run/Stop
     - mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch
       failure
     - vfio/type1: Change success value of vaddr_get_pfn()
     - vfio/type1: Prepare for batched pinning with struct vfio_batch
     - vfio/type1: Unpin zero pages
     - USB: core: Fix RST error in hub.c
     - USB: serial: option: add Quectel BG95 0x0203 composition
     - USB: serial: option: add Quectel RM520N
     - ALSA: hda/tegra: set depop delay for tegra
     - ALSA: hda: add Intel 5 Series / 3400 PCI DID
     - ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
     - ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
     - ALSA: hda/realtek: Re-arrange quirk table entries
     - ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
     - ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
     - ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
     - ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
     - [amd64] iommu/vt-d: Check correct capability for sagaw determination
     - media: flexcop-usb: fix endpoint type check
     - [x86] efi: x86: Wipe setup_data on pure EFI boot
     - efi: libstub: check Shim mode using MokSBStateRT
     - gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
     - [arm64,armhf] can: flexcan: flexcan_mailbox_read() fix return value for
       drop = true
     - mm/slub: fix to return errno if kmalloc() fails
     - KVM: SEV: add cache flush to solve SEV cache incoherency issues
       (CVE-2022-0171)
     - xfs: fix up non-directory creation in SGID directories (CVE-2021-4037)
     - xfs: reorder iunlink remove operation in xfs_ifree
     - xfs: validate inode fork size against fork format
     - [arm64] dts: rockchip: Pull up wlan wake# on Gru-Bob
     - netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
     - netfilter: nf_conntrack_irc: Tighten matching on DCC message
       (CVE-2022-2663)
     - netfilter: nfnetlink_osf: fix possible bogus match in nf_osf_find()
     - iavf: Fix cached head and tail value for iavf_get_tx_pending
     - ipvlan: Fix out-of-bound bugs caused by unset skb->mac_header
     - net: let flow have same hash in two directions
     - net: core: fix flow symmetric hash
     - net: phy: aquantia: wait for the suspend/resume operations to finish
     - scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB
       region
     - scsi: mpt3sas: Fix return value check of dma_get_required_mask()
     - net: bonding: Share lacpdu_mcast_addr definition
     - net: bonding: Unsync device addresses on ndo_stop
     - net: team: Unsync device addresses on ndo_stop
     - [arm64,armhf] drm/panel: simple: Fix innolux_g121i1_l01 bus_format
     - iavf: Fix bad page state
     - iavf: Fix set max MTU size with port VLAN and jumbo frames
     - i40e: Fix VF set max MTU size
     - i40e: Fix set max_tx_rate when it is lower than 1 Mbps
     - sfc: fix TX channel offset when using legacy interrupts
     - sfc: fix null pointer dereference in efx_hard_start_xmit
     - of: mdio: Add of_node_put() when breaking out of for_each_xx
     - wireguard: ratelimiter: disable timings test by default
     - wireguard: netlink: avoid variable-sized memcpy on sockaddr
     - [arm64] net: enetc: move enetc_set_psfp() out of the common
       enetc_set_features()
     - net: socket: remove register_gifconf
     - net/sched: taprio: avoid disabling offload when it was never enabled
     - net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child
       qdiscs
     - netfilter: nf_tables: fix nft_counters_enabled underflow at
       nf_tables_addchain()
     - netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
     - netfilter: ebtables: fix memory leak when blob is malformed
     - can: gs_usb: gs_can_open(): fix race dev->can.state condition
     - net/smc: Stop the CLC flow if no link to map buffers on
     - net: sunhme: Fix packet reception for len < RX_COPY_THRESHOLD
     - net: sched: fix possible refcount leak in tc_new_tfilter()
     - drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV
     - serial: Create uart_xmit_advance()
     - [arm64,armhf] serial: tegra: Use uart_xmit_advance(), fixes icount.tx
       accounting
     - [s390x] dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
     - vfio/type1: fix vaddr_get_pfns() return in vfio_pin_page_external()
     - drm/amdgpu: Fix check for RAS support
     - cifs: use discard iterator to discard unneeded network data more
       efficiently
     - cifs: always initialize struct msghdr smb_msg completely
     - [x86] Drivers: hv: Never allocate anything besides framebuffer from
       framebuffer memory region
     - [x86] drm/gma500: Fix BUG: sleeping function called from invalid context
       errors
     - drm/amdgpu: use dirty framebuffer helper
     - drm/amd/display: Limit user regamma to a valid value
     - drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack
       usage
     - [arm64] drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
     - workqueue: don't skip lockdep work dependency in cancel_work_sync()
     - [arm64,armhf] i2c: imx: If pm_runtime_get_sync() returned 1 device access
       is possible
     - [amd64,arm64] devdax: Fix soft-reservation memory description
     - ext4: fix bug in extents parsing when eh_entries == 0 and eh_depth > 0
     - ext4: limit the number of retries after discarding preallocations blocks
     - ext4: make directory inode spreading reflect flexbg size
     https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.147
     - [x86] thunderbolt: Add support for Intel Maple Ridge
     - [x86] thunderbolt: Add support for Intel Maple Ridge single port
       controller
     - [arm64,armhf] ALSA: hda/tegra: Use clk_bulk helpers
     - [arm64,armhf] ALSA: hda/tegra: Reset hardware
     - ALSA: hda/hdmi: let new platforms assign the pcm slot dynamically
     - ALSA: hda: Fix Nvidia dp infoframe
     - btrfs: fix hang during unmount when stopping a space reclaim worker
     - [arm64,x86] usb: typec: ucsi: Remove incorrect warning
     - [x86] thunderbolt: Explicitly reset plug events delay back to USB4 spec
       value
     - net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
     - libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
     - mm/page_alloc: fix race condition between build_all_zonelists and page
       allocation
     - mm: prevent page_frag_alloc() from corrupting the memory
     - mm/migrate_device.c: flush TLB while holding PTL
     - mm: fix madivse_pageout mishandling on non-LRU page
     - swiotlb: max mapping size takes min align mask into account
     - [arm64] scsi: hisi_sas: Revert "scsi: hisi_sas: Limit max hw sectors for
       v3 HW"
     - [arm64,armhf] soc: sunxi: sram: Actually claim SRAM regions
     - [arm64,armhf] soc: sunxi: sram: Prevent the driver from being unbound
     - [arm64,armhf] soc: sunxi_sram: Make use of the helper function
       devm_platform_ioremap_resource()
     - [arm64,armhf] soc: sunxi: sram: Fix probe function ordering issues
     - [arm64,armhf] soc: sunxi: sram: Fix debugfs info for A64 SRAM C
     - [arm64,armhf] Revert "drm: bridge: analogix/dp: add panel
       prepare/unprepare in suspend/resume time"
     - usbnet: Fix memory leak in usbnet_disconnect()
     - net: sched: act_ct: fix possible refcount leak in tcf_ct_init()
     - cxgb4: fix missing unlock on ETHOFLD desc collect fail path
     - nvme: add new line after variable declatation
     - nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
     - net: stmmac: power up/down serdes in stmmac_open/release
     - [armhf] clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks
     - [x86] KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest
     - [x86] alternative: Fix race in try_get_desc()
     - ALSA: hda/hdmi: fix warning about PCM count when used with SOF
     https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.148
     - nilfs2: fix NULL pointer dereference at nilfs_bmap_lookup_at_level()
     - nilfs2: fix use-after-free bug of struct nilfs_root
     - nilfs2: fix leak of nilfs_root in case of writer thread creation failure
     - nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
     - ceph: don't truncate file in atomic_open
     - docs: update mediator information in CoC docs
     - xsk: Inherit need_wakeup flag for shared sockets
     - ALSA: pcm: oss: Fix race at SNDCTL_DSP_SYNC (CVE-2022-3303)
     - mm: gup: fix the fast GUP race against THP collapse
     - [powerpc*] 64s/radix: don't need to broadcast IPI for radix pmd collapse
       flush
     - fs: fix UAF/GPF bug in nilfs_mdt_destroy
     - compiler_attributes.h: move __compiletime_{error|warning}
     - scsi: qedf: Fix a UAF bug in __qedf_probe()
     - net/ieee802154: fix uninit value bug in dgram_sendmsg
     - ALSA: hda/hdmi: Fix the converter reuse for the silent stream
     - net: atlantic: fix potential memory leak in aq_ndev_close()
     - drm/amd/display: update gamut remap if plane has changed
     - drm/amd/display: skip audio setup when audio stream is enabled
     - mmc: core: Replace with already defined values for readability
     - mmc: core: Terminate infinite loop in SD-UHS voltage switch
     - usb: mon: make mmapped memory read only
     - USB: serial: ftdi_sio: fix 300 bps rate for SIO
     - [arm64] rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
     - Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5"
     - random: restore O_NONBLOCK support
     - random: clamp credited irq bits to maximum mixed
     - ALSA: hda: Fix position reporting on Poulsbo
     - efi: Correct Macmini DMI match in uefi cert quirk
     - scsi: stex: Properly zero out the passthrough command structure
     - USB: serial: qcserial: add new usb-id for Dell branded EM7455
     - random: avoid reading two cache lines on irq randomness
     - random: use expired timer rather than wq for mixing fast pool
     - wifi: cfg80211: fix u8 overflow in cfg80211_update_notlisted_nontrans()
       (CVE-2022-41674)
     - wifi: cfg80211/mac80211: reject bad MBSSID elements
     - wifi: cfg80211: ensure length byte is present before access
     - wifi: cfg80211: fix BSS refcounting bugs (CVE-2022-42720)
     - wifi: cfg80211: avoid nontransmitted BSS list corruption (CVE-2022-42721)
     - wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
     - wifi: mac80211: fix crash in beacon protection for P2P-device
       (CVE-2022-42722)
     - wifi: cfg80211: update hidden BSSes to avoid WARN_ON
     - Input: xpad - add supported devices as contributed on github
     - Input: xpad - fix wireless 360 controller breaking after suspend
 .
   [ Aurelien Jarno ]
   * [arm64] Add support for misalignment fixups for multiword loads from next
     branch. Enable COMPAT_ALIGNMENT_FIXUPS.
 .
   [ Salvatore Bonaccorso ]
   * [x86] drivers/edac: Enable EDAC_I10NM as module (Closes: #1019248)
   * Bump ABI to 19
   * Refresh "Export symbols needed by Android drivers"
   * [rt] Update to 5.10.140-rt73
   * io_uring/af_unix: defer registered files gc to io_uring release
     (CVE-2022-2602)
   * ext4: fix check for block being out of directory size (CVE-2022-1184)
 .
   [ Uwe Kleine-König ]
   * mac80211: mlme: find auth challenge directly
   * wifi: mac80211: don't parse mbssid in assoc response
   * wifi: mac80211: fix MBSSID parsing use-after-free (CVE-2022-42719)
Checksums-Sha1:
 868a445c47544819a8ba60a8f2771611ca4aadbd 14265 linux-signed-i386_5.10.148+1.dsc
 c4b7f28062a260301b033a60978672a4f8a58ced 3747160 linux-signed-i386_5.10.148+1.tar.xz
Checksums-Sha256:
 000775b34175443bf94f9dbf371ab9c8db6461f345a4d0a22a7bef1a8a1af12b 14265 linux-signed-i386_5.10.148+1.dsc
 3397a19cb9702b70d8e5fea8203ed220bbe1840c3dcb7fb3178c27ffb5f2ee71 3747160 linux-signed-i386_5.10.148+1.tar.xz
Files:
 d936e9a11240dc5d06a32033ad242cb2 14265 kernel optional linux-signed-i386_5.10.148+1.dsc
 5278effc915604d1707d3b83ed24e62b 3747160 kernel optional linux-signed-i386_5.10.148+1.tar.xz

-----BEGIN PGP SIGNATURE-----
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=REcK
-----END PGP SIGNATURE-----