Accepted linux 4.9.184-1 (all source) into oldstable-proposed-updates->oldstable-new, oldstable-proposed-updates
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sat, 29 Jun 2019 09:29:10 +0200
Binary: linux-doc-4.9 linux-headers-4.9.0-10-common linux-headers-4.9.0-10-common-rt linux-manual-4.9 linux-source-4.9 linux-support-4.9.0-10
Source: linux
Architecture: all source
Version: 4.9.184-1
Distribution: stretch
Urgency: medium
Maintainer: Debian Kernel Team <debian-kernel@lists.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Closes: 866122 930904
Description:
linux-doc-4.9 - Linux kernel specific documentation for version 4.9
linux-headers-4.9.0-10-common - Common header files for Linux 4.9.0-10
linux-headers-4.9.0-10-common-rt - Common header files for Linux 4.9.0-10-rt
linux-manual-4.9 - Linux kernel API manual pages for version 4.9
linux-source-4.9 - Linux kernel source for version 4.9 with Debian patches
linux-support-4.9.0-10 - Support files for Linux 4.9
Changes:
linux (4.9.184-1) stretch; urgency=medium
.
* New upstream stable update:
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.169
- [x86] power: Fix some ordering bugs in __restore_processor_context()
- [amd64] power/64: Use struct desc_ptr for the IDT in struct saved_context
- [i386] power/32: Move SYSENTER MSR restoration to fix_processor_context()
- [x86] power: Make restore_processor_context() sane
- [ppc64el] powerpc/tm: Limit TM code inside PPC_TRANSACTIONAL_MEM
- [ppc64el] Fix invalid use of register expressions
- [ppc64el] powerpc/64s: Add barrier_nospec
- [ppc64el] powerpc/64s: Add support for ori barrier_nospec patching
- [ppc64el] Avoid code patching freed init sections
- [ppc64el] powerpc/64s: Patch barrier_nospec in modules
- [ppc64el] powerpc/64s: Enable barrier_nospec based on firmware settings
- [ppc64el] Use barrier_nospec in copy_from_user()
- [ppc64el] powerpc/64: Use barrier_nospec in syscall entry
- [ppc64el] powerpc/64s: Enhance the information in cpu_show_spectre_v1()
- [ppc64el] powerpc64s: Show ori31 availability in spectre_v1 sysfs file
not v2
- [ppc64el] powerpc/64: Disable the speculation barrier from the command
line
- [ppc64el] powerpc/64: Make stf barrier PPC_BOOK3S_64 specific.
- [ppc64el] powerpc/64: Add CONFIG_PPC_BARRIER_NOSPEC
- [ppc64el] powerpc/64: Call setup_barrier_nospec() from setup_arch()
- [ppc64el] powerpc/64: Make meltdown reporting Book3S 64 specific
- [ppc64el] asm: Add a patch_site macro & helpers for patching
instructions
- [ppc64el] powerpc/64s: Add new security feature flags for count cache
flush
- [ppc64el] powerpc/64s: Add support for software count cache flush
- [ppc64el] powerpc/pseries: Query hypervisor for count cache flush
settings
- [ppc64el] powerpc/powernv: Query firmware for count cache flush
settings
- [ppc64el] security: Fix spectre_v2 reporting
- [arm64] kaslr: Reserve size of ARM64_MEMSTART_ALIGN in linear region
- tty: ldisc: add sysctl to prevent autoloading of ldiscs
- ipv6: Fix dangling pointer when ipv6 fragment
- ipv6: sit: reset ip header pointer in ipip6_rcv
- openvswitch: fix flow actions reallocation
- qmi_wwan: add Olicard 600
- sctp: initialize _pad of sockaddr_in before copying to user memory
- tcp: Ensure DCTCP reacts to losses
- vrf: check accept_source_route on the original netdevice
- bnxt_en: Reset device on RX buffer errors.
- bnxt_en: Improve RX consumer index validity check.
- net/mlx5e: Add a lock on tir list
- netns: provide pure entropy for net_hash_mix()
- net: ethtool: not call vzalloc for zero sized memory request
- ip6_tunnel: Match to ARPHRD_TUNNEL6 for dev type
- ALSA: seq: Fix OOB-reads from strlcpy
- Btrfs: do not allow trimming when a fs is mounted with the nologreplay
option
- block: do not leak memory in bio_copy_user_iov()
- genirq: Respect IRQCHIP_SKIP_SET_WAKE in irq_chip_set_wake_parent()
- virtio: Honour 'may_reduce_num' in vring_create_virtqueue
- [arm64] futex: Fix FUTEX_WAKE_OP atomic ops with non-zero result value
- [x86] xen: Prevent buffer overflow in privcmd ioctl
- sched/fair: Do not re-read ->h_load_next during hierarchical load
calculation
- PCI: Add function 1 DMA alias quirk for Marvell 9170 SATA controller
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.170
- perf/core: Restore mmap record type correctly
- ext4: add missing brelse() in add_new_gdb_meta_bg()
- ext4: report real fs size after failed resize
- [i386] ALSA: sb8: add a check for request_region
- IB/mlx4: Fix race condition between catas error reset and aliasguid
flows
- [x86] thermal/int340x_thermal: Add additional UUIDs
- [x86] thermal/int340x_thermal: fix mode setting
- perf config: Fix an error in the config template documentation
- perf config: Fix a memory leak in collect_config()
- perf build-id: Fix memory leak in print_sdt_events()
- perf top: Fix error handling in cmd_top()
- perf hist: Add missing map__put() in error case
- perf evsel: Free evsel->counts in perf_evsel__exit()
- [arm64] irqchip/mbigen: Don't clear eventid when freeing an MSI
- [x86] hpet: Prevent potential NULL pointer dereference
- [i386] x86/cpu/cyrix: Use correct macros for Cyrix calls on Geode
processors
- [amd64] iommu/vt-d: Check capability before disabling protected memory
- [x86] hw_breakpoints: Make default case in hw_breakpoint_arch_parse()
return an error
- fix incorrect error code mapping for OBJECTID_NOT_FOUND
- ext4: prohibit fstrim in norecovery mode
- rsi: improve kernel thread handling to fix kernel panic
- 9p: do not trust pdu content for stat item size
- 9p locks: add mount option for lock retry interval
- f2fs: fix to do sanity check with current segment number
- [arm64] serial: uartps: console_setup() can't be placed to init section
- HID: i2c-hid: override HID descriptors for certain devices
- [x86] ACPI / SBS: Fix GPE storm on recent MacBookPro's
- cifs: fallback to older infolevels on findfirst queryinfo retry
- kernel: hung_task.c: disable on suspend
- [armhf] crypto: sha256/arm - fix crash bug in Thumb2 build
- [armhf] crypto: sha512/arm - fix crash bug in Thumb2 build
- [amd64] iommu/dmar: Fix buffer overflow during PCI bus notification
- [arm64,armhf] soc/tegra: pmc: Drop locking from
tegra_powergate_is_powered()
- [armel,armhf] 8839/1: kprobe: make patch_lock a raw_spinlock_t
- appletalk: Fix use-after-free in atalk_proc_exit
- lib/div64.c: off by one in shift
- include/linux/swap.h: use offsetof() instead of custom __swapoffset
macro
- [x86] tpm/tpm_crb: Avoid unaligned reads in crb_recv()
- [arm64,armhf] net: stmmac: Set dma ring length before enabling the DMA
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.171
- bonding: fix event handling for stacked bonds
- net: atm: Fix potential Spectre v1 vulnerabilities
- net: bridge: fix per-port af_packet sockets
- net: bridge: multicast: use rcu to access port list from
br_multicast_start_querier
- net: fou: do not use guehdr after iptunnel_pull_offloads in gue_udp_recv
- tcp: tcp_grow_window() needs to respect tcp_space()
- team: set slave to promisc if team is already in promisc mode
- vhost: reject zero size iova range
- ipv4: recompile ip options in ipv4_link_failure
- ipv4: ensure rcu_read_lock() in ipv4_link_failure()
- mmc: sdhci: Fix data command CRC error handling
- [x86] tpm/tpm_i2c_atmel: Return -E2BIG when the transfer is incomplete
- CIFS: keep FileInfo handle live during oplock break
- [x86] KVM: Don't clear EFER during SMM transitions for 32-bit vCPU
- [x86] iio/gyro/bmg160: Use millidegrees for temperature scale
- [x86] io: accel: kxcjk1013: restore the range after resume.
- [x86] staging: comedi: vmk80xx: Fix use of uninitialized semaphore
- [x86] staging: comedi: vmk80xx: Fix possible double-free of ->usb_rx_buf
- [x86] staging: comedi: ni_usb6501: Fix use of uninitialized mutex
- [x86] staging: comedi: ni_usb6501: Fix possible double-free of
->usb_rx_buf
- ALSA: core: Fix card races between register and disconnect
- Revert "scsi: fcoe: clear FC_RP_STARTED flags when receiving a LOGO"
- [x86] Revert "svm: Fix AVIC incomplete IPI emulation"
- [x86] crypto: x86/poly1305 - fix overflow during partial reduction
- [x86] kprobes: Verify stack frame on kretprobe
- kprobes: Mark ftrace mcount handler functions nokprobe
- kprobes: Fix error check when reusing optimized probes
- rt2x00: do not increment sequence number while re-transmitting
- mac80211: do not call driver wake_tx_queue op during reconfig
- [x86] perf/x86/amd: Add event map for AMD Family 17h
- sched/fair: Limit sched_cfs_period_timer() loop to avoid hard lockup
- device_cgroup: fix RCU imbalance in error case
- ALSA: info: Fix racy addition/deletion of nodes
- percpu: stop printing kernel addresses (CVE-2018-5995)
- [x86] i2c-hid: properly terminate i2c_hid_dmi_desc_override_table[] array
- kernel/sysctl.c: fix out-of-bounds access when setting file-max
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.172
- kbuild: simplify ld-option implementation
- cifs: do not attempt cifs operation on smb2+ rename error
- tracing: Fix a memory leak by early error exit in trace_pid_write()
- [mips*] scall64-o32: Fix indirect syscall number load
- trace: Fix preempt_enable_no_resched() abuse
- IB/rdmavt: Fix frwr memory registration
- sched/numa: Fix a possible divide-by-zero
- ceph: ensure d_name stability in ceph_dentry_hash()
- ceph: fix ci->i_head_snapc leak
- nfsd: Don't release the callback slot unless it was actually held
- sunrpc: don't mark uninitialised items as VALID.
- [arm64,armhf] drm/vc4: Fix memory leak during gpu reset.
- [arm64,armhf] drm/vc4: Fix compilation error reported by kbuild test bot
- USB: Add new USB LPM helpers
- USB: Consolidate LPM checks to avoid enabling LPM twice
- vsock/virtio: fix kernel panic from virtio_transport_reset_no_sock
- tipc: handle the err returned from cmd header function
- slip: make slhc_free() silently accept an error pointer
- [x86] intel_th: gth: Fix an off-by-one in output unassigning
- fs/proc/proc_sysctl.c: Fix a NULL pointer dereference
- NFS: Forbid setting AF_INET6 to "struct sockaddr_in"->sin_family.
- netfilter: ebtables: CONFIG_COMPAT: drop a bogus WARN_ON
- tipc: check bearer name with right length in
tipc_nl_compat_bearer_enable
- tipc: check link name with right length in tipc_nl_compat_link_set
- ipv4: add sanity checks in ipv4_link_failure()
- net/mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query
- net: rds: exchange of 8K and 1M pool
- team: fix possible recursive locking when add slaves
- [arm64,armhf] net: stmmac: move stmmac_check_ether_addr() to driver
probe
- ipv4: set the tcp_min_rtt_wlen range from 0 to one day
- ipv6: frags: fix a lockdep false positive
- net: IP defrag: encapsulate rbtree defrag code into callable functions
- ipv6: remove dependency of nf_defrag_ipv6 on ipv6 module
- net: IP6 defrag: use rbtrees for IPv6 defrag
- net: IP6 defrag: use rbtrees in nf_conntrack_reasm.c
- Documentation: Add nospectre_v1 parameter
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.173
- usbnet: ipheth: prevent TX queue timeouts when device not ready
- usbnet: ipheth: fix potential null pointer dereference in
ipheth_carrier_set
- media: vivid: check if the cec_adapter is valid
- [armhf] dts: bcm283x: Fix hdmi hpd gpio pull
- [s390x] limit brk randomization to 32MB
- qlcnic: Avoid potential NULL pointer dereference
- netfilter: nft_set_rbtree: check for inactive element after flag
mismatch
- netfilter: bridge: set skb transport_header before entering
NF_INET_PRE_ROUTING
- usb: gadget: net2280: Fix overrun of OUT messages
- usb: gadget: net2280: Fix net2280_dequeue()
- staging: rtl8712: uninitialized memory in read_bbreg_hdl()
- NFS: Fix a typo in nfs_init_timeout_values()
- scsi: qla4xxx: fix a potential NULL pointer dereference
- usb: u132-hcd: fix resource leak
- ceph: fix use-after-free on symlink traversal
- [s390x] scsi: zfcp: reduce flood of fcrscn1 trace records on
multi-element RSCN
- [x86,arm64] libata: fix using DMA buffers on stack
- gpio: of: Fix of_gpiochip_add() error path
- [amd64] vfio/type1: Limit DMA mappings per container (CVE-2019-3882)
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.174
- ALSA: line6: use dynamic buffers
- ipv4: ip_do_fragment: Preserve skb_iif during fragmentation
- ipv6/flowlabel: wait rcu grace period before put_pid()
- ipv6: invert flowlabel sharing check in process and user mode
- packet: validate msg_namelen in send directly
- bnxt_en: Improve multicast address setup logic.
- net: phy: marvell: Fix buffer overrun with stats counters
- [arm64] proc: Set PTE_NG for table entries to avoid traversing them
twice
- [arm64] mm: print out correct page table entries
- [arm64] mm: don't print out page table entries on EL0 faults
- USB: yurex: Fix protection fault after device removal
- USB: w1 ds2490: Fix bug caused by improper use of altsetting array
- [x86] usb: usbip: fix isoc packet num validation in get_pipe
- USB: core: Fix unterminated string returned by usb_string()
- USB: core: Fix bug caused by duplicate interface PM usage counter
- nvme-loop: init nvmet_ctrl fatal_err_work when allocate
- HID: logitech: check the return value of create_singlethread_workqueue
- HID: debug: fix race condition with between rdesc_show() and device
removal
- batman-adv: Reduce claim hash refcnt only for removed entry
- batman-adv: Reduce tt_local hash refcnt only for removed entry
- batman-adv: Reduce tt_global hash refcnt only for removed entry
- igb: Fix WARN_ONCE on runtime suspend
- net/mlx5: E-Switch, Fix esw manager vport indication for more vport
commands
- bonding: show full hw address in sysfs for slave entries
- [arm64,armhf] net: stmmac: don't overwrite discard_frame status
- [arm64,armhf] net: stmmac: fix dropping of multi-descriptor RX frames
- [arm64,armhf] net: stmmac: don't log oversized frames
- jffs2: fix use-after-free on symlink traversal
- debugfs: fix use-after-free on symlink traversal
- [amd64,ppc64el] vfio/pci: use correct format characters
- scsi: core: add new RDAC LENOVO/DE_Series device
- [x86] scsi: storvsc: Fix calculation of sub-channel count
- [arm64] net: hns: fix KASAN: use-after-free in hns_nic_net_xmit_hw()
- [arm64] net: hns: Use NAPI_POLL_WEIGHT for hns driver
- [arm64] net: hns: Fix WARNING when remove HNS driver with SMMU enabled
- hugetlbfs: fix memory leak for resv_map
- [armel] orion: don't use using 64-bit DMA masks
- [x86] perf/x86/amd: Update generic hardware cache events for Family 17h
- scsi: RDMA/srpt: Fix a credit leak for aborted commands
- selinux: never allow relabeling on context mounts
- [x86] mce: Improve error message when kernel cannot recover, p2
- media: v4l2: i2c: ov7670: Fix PLL bypass register values
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.175
- scsi: libsas: fix a race condition when smp task timeout
(CVE-2018-20836)
- ASoC:soc-pcm:fix a codec fixup issue in TDM case
- [amd64] IB/hfi1: Eliminate opcode tests on mr deref
- [x86] perf/x86/intel: Fix handling of wakeup_events for multi-entry PEBS
- scsi: csiostor: fix missing data copy in csio_scsi_err_handler()
- virtio-blk: limit number of hw queues by nr_cpu_ids
- [amd64] iommu/amd: Set exclusion range correctly
- mm: add 'try_get_page()' helper function
- genirq: Prevent use-after-free and work list corruption
- [arm64,armhf] usb: dwc3: Fix default lpm_nyet_threshold value
- USB: serial: f81232: fix interrupt worker not stop
- usb-storage: Set virt_boundary_mask to avoid SG overflows
- scsi: qla2xxx: Fix incorrect region-size setting in optrom SYSFS
routines
- UAS: fix alignment of scatter/gather segments
- [x86] ASoC: Intel: avoid Oops if DMA setup fails
- timer/debug: Change /proc/timer_stats from 0644 to 0600 (CVE-2017-5967)
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.176
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.177
- netfilter: compat: initialize all fields in xt_init
- bpf: fix struct htab_elem layout
- bpf: convert htab map to hlist_nulls
- [x86] platform/x86: sony-laptop: Fix unintentional fall-through
- USB: serial: fix unthrottle races
- [x86] libnvdimm/namespace: Fix a potential NULL pointer dereference
- HID: input: add mapping for Expose/Overview key
- HID: input: add mapping for keyboard Brightness Up/Down/Toggle keys
- HID: input: add mapping for "Toggle Display" key
- [x86] libnvdimm/btt: Fix a kmemdup failure check
- [s390x] dasd: Fix capacity calculation for large volumes
- mac80211: fix unaligned access in mesh table hash function
- [s390x] 3270: fix lockdep false positive on view->lock
- mISDN: Check address length before reading address family
- [x86] reboot, efi: Use EFI reboot for Acer TravelMate X514-51T
- [x86] KVM: avoid misreporting level-triggered irqs as edge-triggered in
tracing
- init: initialize jump labels before command line option parsing
- ipvs: do not schedule icmp errors from tunnels
- [s390x] ctcm: fix ctcm_new_device error return code
- [armhf] gpu: ipu-v3: dp: fix CSC handling
- rtlwifi: rtl8723ae: Fix missing break in switch statement
- md/raid5: Don't jump to compute_result state from check_result state
- bridge: Fix error path for kobject_init_and_add()
- fib_rules: return 0 directly if an exactly same rule exists when
NLM_F_EXCL not supplied
- packet: Fix error path in packet_init
- vlan: disable SIOCSHWTSTAMP in container
- vrf: sit mtu should not be updated when vrf netdev is the link
- ipv4: Fix raw socket lookup for local traffic
- bonding: fix arp_validate toggling in active-backup mode
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.178
- net: core: another layer of lists, around PF_MEMALLOC skb handling
- locking/rwsem: Prevent decrement of reader count before increment
- [amd64] PCI: hv: Fix a memory leak in hv_eject_device_work()
- [x86] speculation/mds: Revert CPU buffer clear on double fault exit
- [x86] speculation/mds: Improve CPU buffer clear documentation
- [armhf] exynos: Fix a leaked reference by adding missing of_node_put
- [arm64] compat: Reduce address limit
- [arm64] Clear OSDLR_EL1 on CPU boot
- [x86] sched/x86: Save [ER]FLAGS on context switch
- crypto: chacha20poly1305 - set cra_name correctly
- [ppc64el] crypto: vmx - fix copy-paste error in CTR mode
- crypto: crct10dif-generic - fix use via crypto_shash_digest()
- [amd64] crypto: x86/crct10dif-pcl - fix use via crypto_shash_digest()
- ALSA: usb-audio: Fix a memory leak bug
- ALSA: hda/hdmi - Read the pin sense from register when repolling
- ALSA: hda/hdmi - Consider eld_valid when reporting jack event
- ALSA: hda/realtek - EAPD turn on later
- ASoC: max98090: Fix restore of DAPM Muxes
- ASoC: RT5677-SPI: Disable 16Bit SPI Transfers
- ocfs2: fix ocfs2 read inode data panic in ocfs2_iget
- [arm64] mfd: max77620: Fix swapped FPS_PERIOD_MAX_US values
- tty/vt: fix write/write race in ioctl(KDSKBSENT) handler
- jbd2: check superblock mapped prior to committing
- ext4: actually request zeroing of inode table after grow
- ext4: fix ext4_show_options for file systems w/o journal
- Btrfs: do not start a transaction at iterate_extent_inodes()
- bcache: fix a race between cache register and cacheset unregister
- bcache: never set KEY_PTRS of journal key to 0 in journal_reclaim()
- [arm64] ipmi:ssif: compare block number correctly for multi-part return
messages
- crypto: gcm - Fix error return code in crypto_gcm_create_common()
- crypto: gcm - fix incompatibility between "gcm" and "gcm_base"
- crypto: salsa20 - don't access already-freed walk.iv
- fib_rules: fix error in backport of e9919a24d302 ("fib_rules: return
0...")
- writeback: synchronize sync(2) against cgroup writeback membership
switches
- fs/writeback.c: use rcu_barrier() to wait for inflight wb switches going
into workqueue when umount
- ext4: fix data corruption caused by overlapping unaligned and aligned IO
- [x86] ALSA: hda/realtek - Fix for Lenovo B50-70 inverted internal
microphone bug
- [x86] KVM: Skip EFER vs. guest CPUID checks for host-initiated writes
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.179
- net: avoid weird emergency message
- net/mlx4_core: Change the error print to info print
- ppp: deflate: Fix possible crash in deflate_init
- tipc: switch order of device registration to fix a crash
- vsock/virtio: free packets during the socket release
- tipc: fix modprobe tipc failed after switch order of device registration
- vsock/virtio: Initialize core virtio vsock before registering the driver
- md: add mddev->pers to avoid potential NULL pointer dereference
- [x86] intel_th: msu: Fix single mode with IOMMU
- p54: drop device reference count if fails to enable device
- cifs: fix strcat buffer overflow and reduce raciness in
smb21_set_oplock_level()
- NFS4: Fix v4.0 client state corruption when mount
- [arm64,armhf] clk: tegra: Fix PLLM programming on Tegra124+ when PMC
overrides divider
- fuse: fix writepages on 32bit
- fuse: honor RLIMIT_FSIZE in fuse_file_fallocate
- [arm64,armhf] iommu/tegra-smmu: Fix invalid ASID bits on Tegra30/114
- ceph: flush dirty inodes before proceeding with remount
- tracing: Fix partial reading of trace event's id file
- [arm64,armhf] memory: tegra: Fix integer overflow on tick value
calculation
- [x86] perf intel-pt: Fix instructions sampling rate
- [x86] perf intel-pt: Fix improved sample timestamp
- [x86] perf intel-pt: Fix sample timestamp wrt non-taken branches
- PCI: Mark Atheros AR9462 to avoid bus reset
- PCI: Work around Pericom PCIe-to-PCI bridge Retrain Link erratum
- dm delay: fix a crash when invalid device is specified
- xfrm: policy: Fix out-of-bound array accesses in __xfrm_policy_unlink
- xfrm6_tunnel: Fix potential panic when unloading xfrm6_tunnel module
- vti4: ipip tunnel deregistration fixes.
- xfrm4: Fix uninitialized memory read in _decode_session4
- mac80211: Fix kernel panic due to use of txq after free
- [arm64,armhf] KVM: arm/arm64: Ensure vcpu target is unset on reset
failure
- power: supply: sysfs: prevent endless uevent loop with
CONFIG_POWER_SUPPLY_DEBUG
- ufs: fix braino in ufs_get_inode_gid() for solaris UFS flavour
- Revert "Don't jump to compute_result state from check_result state"
- md/raid: raid5 preserve the writeback action after the parity check
- btrfs: Honour FITRIM range constraints during free space trim
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.180
- ext4: do not delete unlinked inode from orphan list on failed truncate
- [x86] KVM: fix return value for reserved EFER
- bio: fix improper use of smp_mb__before_atomic()
- Revert "scsi: sd: Keep disk read-only when re-reading partition"
- [ppc64el] crypto: vmx - CTR: always increment IV as quadword
- [x86] kvm: svm/avic: fix off-by-one in checking host APIC ID
- [x86] libnvdimm/namespace: Fix label tracking error
- [arm64] Save and restore OSDLR_EL1 across suspend/resume
- gfs2: Fix sign extension bug in gfs2_update_stats
- Btrfs: do not abort transaction at btrfs_update_root() after failure to
COW path
- Btrfs: fix race between ranged fsync and writeback of adjacent ranges
- btrfs: sysfs: don't leak memory when failing add fsid
- fbdev: fix divide error in fb_var_to_videomode
- hugetlb: use same fault hash key for shared and private mappings
- fbdev: fix WARNING in __alloc_pages_nodemask bug
- media: cpia2: Fix use-after-free in cpia2_exit
- media: vivid: use vfree() instead of kfree() for dev->bitmap_cap
- [x86,ppc64el] ssb: Fix possible NULL pointer dereference in
ssb_host_pcmcia_exit
- at76c50x-usb: Don't register led_trigger if usb_register_driver failed
- Revert "btrfs: Honour FITRIM range constraints during free space trim"
- gfs2: Fix lru_count going negative
- cxgb4: Fix error path in cxgb4_init_module
- mmc: core: Verify SD bus width
- [arm64] dmaengine: tegra210-dma: free dma controller in remove()
- [arm64,armhf] ASoC: hdmi-codec: unlock the device on startup errors
- [ppc64el] boot: Fix missing check of lseek() return value
- brcm80211: potential NULL dereference in
brcmf_cfg80211_vndr_cmds_dcmd_handler()
- [armel,armhf] vdso: Remove dependency with the arch_timer driver internals
- sched/cpufreq: Fix kobject memleak
- scsi: qla2xxx: Fix a qla24xx_enable_msix() error path
- iwlwifi: pcie: don't crash on invalid RX interrupt
- w1: fix the resume command API
- [armhf] dmaengine: pl330: _stop: clear interrupt status
- mac80211/cfg80211: update bss channel on channel switch
- mwifiex: prevent an array overflow
- [armhf] crypto: sun4i-ss - Fix invalid calculation of hash end
- bcache: return error immediately in bch_journal_replay()
- bcache: fix failure in journal relplay
- bcache: add failure check to run_cache_set() for journal replay
- [x86] build: Move _etext to actual end of .text
- smpboot: Place the __percpu annotation correctly
- [amd64] mm: Remove in_nmi() warning from 64-bit implementation of
vmalloc_fault()
- HID: logitech-hidpp: use RAP instead of FAP to get the protocol version
- media: au0828: stop video streaming only when last user stops
- audit: fix a memory leak bug
- media: au0828: Fix NULL pointer dereference in
au0828_analog_stream_enable()
- media: pvrusb2: Prevent a buffer overflow
- [ppc64el] numa: improve control of topology updates
- sched/core: Check quota and period overflow at usec to nsec conversion
- sched/core: Handle overflow in cpu_shares_write_u64
- USB: core: Don't unbind interfaces following device reset failure
- [amd64] irq: Limit IST stack overflow check to #DB stack
- i40e: don't allow changes to HW VLAN stripping on active port VLANs
- [arm64] vdso: Fix clock_getres() for CLOCK_REALTIME
- RDMA/cxgb4: Fix null pointer dereference on alloc_skb failure
- hwmon: (vt1211) Use request_muxed_region for Super-IO accesses
- [x86] hwmon: (smsc47m1) Use request_muxed_region for Super-IO accesses
- [x86] hwmon: (smsc47b397) Use request_muxed_region for Super-IO accesses
- hwmon: (pc87427) Use request_muxed_region for Super-IO accesses
- [x86] hwmon: (f71805f) Use request_muxed_region for Super-IO accesses
- scsi: libsas: Do discovery on empty PHY to update PHY info
- mmc: core: make pwrseq_emmc (partially) support sleepy GPIO controllers
- [arm64] mmc_spi: add a status check for spi_sync_locked
- PM / core: Propagate dev->power.wakeup_path when no callbacks
- rtlwifi: fix a potential NULL pointer dereference
- mwifiex: Fix mem leak in mwifiex_tm_cmd
- brcmfmac: fix missing checks for kmemdup
- brcmfmac: convert dev_init_lock mutex to completion
- brcmfmac: fix race during disconnect when USB completion is in progress
- brcmfmac: fix Oops when bringing up interface during USB disconnect
- scsi: ufs: Fix regulator load and icc-level configuration
- scsi: ufs: Avoid configuring regulator with undefined voltage range
- [arm64] cpu_ops: fix a leaked reference by adding missing of_node_put
- [x86] uaccess, signal: Fix AC=1 bloat
- [amd64] x86/ia32: Fix ia32_restore_sigcontext() AC leak
- chardev: add additional check for minor range overlap
- HID: core: move Usage Page concatenation to Main item
- [armhf] ASoC: eukrea-tlv320: fix a leaked reference by adding missing
of_node_put
- [armhf] ASoC: fsl_utils: fix a leaked reference by adding missing
of_node_put
- cxgb3/l2t: Fix undefined behaviour
- [arm64,armhf] spi: tegra114: reset controller on probe
- [armhf] media: wl128x: prevent two potential buffer overflows
- virtio_console: initialize vtermno value for ports
- [x86,ppc64el] tty: ipwireless: fix missing checks for ioremap
- [x86] mce: Fix machine_check_poll() tests for error types
- usb: core: Add PM runtime calls to usb_hcd_platform_shutdown
- scsi: qla4xxx: avoid freeing unallocated dma memory
- [arm64] dmaengine: tegra210-adma: use devm_clk_*() helpers
- media: m88ds3103: serialize reset messages in m88ds3103_set_frontend
- scsi: lpfc: Fix SLI3 commands being issued on SLI4 devices
- [i386] spi : spi-topcliff-pch: Fix to handle empty DMA buffers
- spi: Fix zero length xfer bug
- drm: Wake up next in drm_read() chain if we are forced to putback the
event
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.181
- ipv6: Consider sk_bound_dev_if when binding a raw socket to an address
- llc: fix skb leak in llc_build_and_send_ui_pkt()
- [armhf] net: fec: fix the clk mismatch in failed_reset path
- net-gro: fix use-after-free read in napi_gro_frags()
- [arm64,armhf] net: stmmac: fix reset gpio free missing
- usbnet: fix kernel crash after disconnect
- tipc: Avoid copying bytes beyond the supplied data
- bnxt_en: Fix aggregation buffer leak under OOM condition.
- ipv4/igmp: fix another memory leak in igmpv3_del_delrec()
- ipv4/igmp: fix build error if !CONFIG_IP_MULTICAST
- [armhf] net: dsa: mv88e6xxx: fix handling of upper half of
STATS_TYPE_PORT
- [armhf] net: mvneta: Fix err code path of probe
- [armhf] net: mvpp2: fix bad MVPP2_TXQ_SCHED_TOKEN_CNTR_REG queue value
- [ppc64el] crypto: vmx - ghash: do nosimd fallback manually
- xen/pciback: Don't disable PCI_COMMAND on PCI device reset.
(CVE-2015-8553)
- Revert "tipc: fix modprobe tipc failed after switch order of device
registration"
- tipc: fix modprobe tipc failed after switch order of device registration
- xhci: update bounce buffer with correct sg num
- xhci: Use %zu for printing size_t type
- xhci: Convert xhci_handshake() to use readl_poll_timeout_atomic()
- usb: xhci: avoid null pointer deref when bos field is NULL
- [x86] usbip: usbip_host: fix BUG: sleeping function called from invalid
context
- [x86] usbip: usbip_host: fix stub_dev lock context imbalance regression
- USB: Fix slab-out-of-bounds write in usb_get_bos_descriptor
- USB: sisusbvga: fix oops in error path of sisusb_probe
- USB: Add LPM quirk for Surface Dock GigE adapter
- USB: rio500: refuse more than one device at a time
- USB: rio500: fix memory leak in close after disconnect
- media: usb: siano: Fix general protection fault in smsusb
- media: usb: siano: Fix false-positive "uninitialized variable" warning
- media: smsusb: better handle optional alignment
- [s390x] scsi: zfcp: fix missing zfcp_port reference put on -EBUSY from
port_remove
- [s390x] scsi: zfcp: fix to prevent port_remove with pure auto scan LUNs
(only sdevs)
- Btrfs: fix race updating log root item during fsync
- [ppc64el] powerpc/perf: Fix MMCRA corruption by bhrb_filter
- ALSA: hda/realtek - Set default power save node to 0
- drm/nouveau/i2c: Disable i2c bus access after ->fini()
- [arm64] tty: serial: msm_serial: Fix XON/XOFF
- memcg: make it work on sparse non-0-node systems
- kernel/signal.c: trace_signal_deliver when signal_group_exit
- CIFS: cifs_read_allocate_pages: don't iterate through whole page array
on ENOMEM
- [x86] drm/vmwgfx: Don't send drm sysfs hotplug events on initial master
set
- binder: Replace "%p" with "%pK" for stable (CVE-2018-20509)
- binder: replace "%p" with "%pK" (CVE-2018-20510)
- fs: prevent page refcount overflow in pipe_buf_get (CVE-2019-11487)
- mm, gup: remove broken VM_BUG_ON_PAGE compound check for hugepages
- mm, gup: ensure real head page is ref-counted when using hugepages
- mm: prevent get_user_pages() from overflowing page refcount
(CVE-2019-11487)
- mm: make page ref count overflow check tighter and more explicit
(CVE-2019-11487)
- media: uvcvideo: Fix uvc_alloc_entity() allocation alignment
- ethtool: fix potential userspace buffer overflow
- neighbor: Call __ipv4_neigh_lookup_noref in neigh_xmit
- net/mlx4_en: ethtool, Remove unsupported SFP EEPROM high pages query
- net: rds: fix memory leak in rds_ib_flush_mr_pool
- pktgen: do not sleep with the thread lock held.
- ipv6: fix EFAULT on sendto with icmpv6 and hdrincl
- ipv6: use READ_ONCE() for inet->hdrincl as in ipv4
- Revert "fib_rules: fix error in backport of e9919a24d302 ("fib_rules:
return 0...")"
- Revert "fib_rules: return 0 directly if an exactly same rule exists when
NLM_F_EXCL not supplied"
- rcu: locking and unlocking need to always be at least barriers
- fuse: fallocate: fix return with locked inode
- [x86] power: Fix 'nosmt' vs hibernation triple fault during resume
- [ppc64el] genwqe: Prevent an integer overflow in the ioctl
- [x86] drm/gma500/cdv: Check vbt config bits when detecting lvds panels
- drm/radeon: prefer lower reference dividers
- [x86] drm/i915: Fix I915_EXEC_RING_MASK
- TTY: serial_core, add ->install
- fs: stream_open - opener for stream-like files so that read and write
can run simultaneously without deadlock
- fuse: Add FOPEN_STREAM to use stream_open()
- ipv4: Define __ipv4_neigh_lookup_noref when CONFIG_INET is disabled
- ethtool: check the return value of get_regs_len
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.182
- tcp: reduce tcp_fastretrans_alert() verbosity
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.183
- fs/fat/file.c: issue flush after the writeback of FAT
- sysctl: return -EINVAL if val violates minmax
- ipc: prevent lockup on alloc_msg and free_msg
- [armhf] prevent tracing IPI_CPU_BACKTRACE
- hugetlbfs: on restore reserve error path retain subpool reservation
- mem-hotplug: fix node spanned pages when we have a node with only
ZONE_MOVABLE
- [armhf,ppc64el] mm/cma.c: fix crash on CMA allocation if bitmap
allocation fails
- mm/slab.c: fix an infinite loop in leaks_show()
- kernel/sys.c: prctl: fix false positive in validate_prctl_map()
- [arm64] drivers: thermal: tsens: Don't print error message on
-EPROBE_DEFER
- [x86] mfd: intel-lpss: Set the device in reset state when init
- mfd: twl6040: Fix device init errors for ACCCTL register
- [x86] perf/intel: Allow PEBS multi-entry in watermark mode
- [arm64] drm/bridge: adv7511: Fix low refresh rate selection
- objtool: Don't use ignore flag for fake jumps
- [arm64] pwm: meson: Use the spin-lock only to protect register
modifications
- ntp: Allow TAI-UTC offset to be set to zero
- f2fs: fix to avoid panic in do_recover_data()
- f2fs: fix to clear dirty inode in error path of f2fs_iget()
- f2fs: fix to do sanity check on valid block count of segment
- configfs: fix possible use-after-free in configfs_register_group
- [armhf] watchdog: imx2_wdt: Fix set_timeout for big timeout values
- watchdog: fix compile time error of pretimeout governors
- [x86] iommu/vt-d: Set intel_iommu_gfx_mapped correctly
- ALSA: hda - Register irq handler after the chip initialization
- nvmem: core: fix read buffer in place
- fuse: retrieve: cap requested size to negotiated max_write
- nfsd: allow fh_want_write to be called twice
- [x86] PCI: Fix PCI IRQ routing table memory leak
- platform/chrome: cros_ec_proto: check for NULL transfer function
- [armhf] clk: rockchip: Turn on "aclk_dmac1" for suspend on rk3288
- [armhf] dts: imx6sx: Specify IMX6SX_CLK_IPG as "ahb" clock to SDMA
- [armhf] dts: imx7d: Specify IMX7D_CLK_IPG as "ipg" clock to SDMA
- [armhf] dts: imx6ul: Specify IMX6UL_CLK_IPG as "ipg" clock to SDMA
- [armhf] dts: imx6sx: Specify IMX6SX_CLK_IPG as "ipg" clock to SDMA
- [armhf] dts: imx6qdl: Specify IMX6QDL_CLK_IPG as "ipg" clock to SDMA
- [ppc64el] PCI: rpadlpar: Fix leaked device_node references in add/remove
paths
- [x86] platform: intel_pmc_ipc: adding error handling
- [x86] video: hgafb: fix potential NULL pointer dereference
- [arm64] PCI: xilinx: Check for __get_free_pages() failure
- [armhf] gpio: gpio-omap: add check for off wake capable gpios
- [x86] dmaengine: idma64: Use actual device for DMA transfers
- [armhf] pwm: tiehrpwm: Update shadow register for disabling PWMs
- [armhf] dts: exynos: Always enable necessary APIO_1V8 and ABB_1V8
regulators on Arndale Octa
- pwm: Fix deadlock warning when removing PWM device
- [armhf] exynos: Fix undefined instruction during Exynos5422 resume
- ALSA: seq: Cover unsubscribe_port() in list_mutex
- ALSA: oxfw: allow PCM capture for Stanton SCS.1m
- libata: Extend quirks for the ST1000LM024 drives with NOLPM quirk
- mm/list_lru.c: fix memory leak in __memcg_init_list_lru_node
- fs/ocfs2: fix race in ocfs2_dentry_attach_lock()
- signal/ptrace: Don't leak unitialized kernel memory with
PTRACE_PEEK_SIGINFO
- ptrace: restore smp_rmb() in __ptrace_may_access()
- media: v4l2-ioctl: clear fields in s_parm
- bcache: fix stack corruption by PRECEDING_KEY()
- cgroup: Use css_tryget() instead of css_tryget_online() in task_get_css()
- [x86] uaccess, kcov: Disable stack protector
- ALSA: seq: Fix race of get-subscription call vs port-delete ioctls
- Drivers: misc: fix out-of-bounds access in function param_set_kgdbts_var
- scsi: lpfc: add check for loss of ndlp when sending RRQ
- [arm64] mm: Inhibit huge-vmap with ptdump
- scsi: bnx2fc: fix incorrect cast to u64 on shift operation
- usbnet: ipheth: fix racing condition
- [x86] KVM: pmu: do not mask the value that is written to fixed PMUs
- [s390x] KVM: fix memory slot handling for KVM_SET_USER_MEMORY_REGION
- [x86] drm/vmwgfx: integer underflow in vmw_cmd_dx_set_shader() leading to
an invalid read
- [x86] drm/vmwgfx: NULL pointer dereference from vmw_cmd_dx_view_define()
- [arm64,armhf] usb: dwc2: Fix DMA cache alignment issues
- USB: Fix chipmunk-like voice when using Logitech C270 for recording audio.
- USB: usb-storage: Add new ID to ums-realtek
- USB: serial: pl2303: add Allied Telesis VT-Kit3
- USB: serial: option: add support for Simcom SIM7500/SIM7600 RNDIS mode
- USB: serial: option: add Telit 0x1260 and 0x1261 compositions
- [armhf] rtc: pcf8523: don't return invalid date when battery is low
- ax25: fix inconsistent lock state in ax25_destroy_timer
- be2net: Fix number of Rx queues used for flow hashing
- ipv6: flowlabel: fl6_sock_lookup() must use atomic_inc_not_zero
- lapb: fixed leak of control-blocks.
- neigh: fix use-after-free read in pneigh_get_next
- [x86] perf/intel/ds: Fix EVENT vs. UEVENT PEBS constraints
- mISDN: make sure device name is NUL terminated
- [x86] CPU/AMD: Don't force the CPB cap when running under a hypervisor
- perf/ring_buffer: Fix exposing a temporarily decreased data_head
- perf/ring_buffer: Add ordering to rb->nest increment
- i2c: dev: fix potential memory leak in i2cdev_ioctl_rdwr
- configfs: Fix use-after-free when accessing sd->s_dentry
- perf data: Fix 'strncat may truncate' build failure with recent gcc
- perf record: Fix s390 missing module symbol and warning for non-root users
- [ppc64el] KVM: Book3S: Use new mutex to synchronize access to rtas token
list
- [ppc64el] KVM: Book3S HV: Don't take kvm->lock around kvm_for_each_vcpu
- scsi: libcxgbi: add a check for NULL pointer in cxgbi_check_route()
- scsi: smartpqi: properly set both the DMA mask and the coherent DMA mask
- scsi: libsas: delete sas port if expander discover failed
- vfs: Abort file_remove_privs() for non-reg. files
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.184
- tcp: refine memory limit test in tcp_fragment() (Closes: #930904)
.
[ Salvatore Bonaccorso ]
* [x86] Disable R3964 due to lack of security support
* Refresh version.patch for context changes in 4.9.170
* [rt] Drop 0053-arm-kprobe-replace-patch_lock-to-raw-lock.patch applied in
4.9.170
* Revert "x86: stop exporting msr-index.h to userland"
* [rt] Add new signing subkey for Steven Rostedt
* [rt] Update to 4.9.178-rt131:
- futex,rt_mutex: Restructure rt_mutex_finish_proxy_lock()
- Update "kernel/hotplug: restore original cpu mask oncpu/down" to always
call arch_smt_update()
* Refresh 0058-net-ena-complete-host-info-to-match-latest-ENA-spec.patch for
context changes in 4.9.180
* Drop efi-libstub-unify-command-line-param-parsing.patch
* Refresh arm64-add-kernel-config-option-to-set-securelevel-wh.patch for
context changes in 4.9.181
.
[ Ben Hutchings ]
* Drop "kbuild: Use -nostdinc in compile tests", which is no longer needed.
* [rt] Fix build failure after "genirq: Prevent use-after-free and work
list corruption":
- kthread: Convert worker lock to raw spinlock
- kthread: add a global worker thread.
- genirq: convert affinity_notify swork to kthread
* Bump ABI to 10 and apply deferred changes:
- genirq: Avoid summation loops for /proc/stat
* [ppc64el] Disable PPC_TRANSACTIONAL_MEM (Closes: #866122)
Checksums-Sha1:
c145ba5dd017d962c11276dd98bc476bc1815f57 125180 linux_4.9.184-1.dsc
4cd28db211c497aa599950c1631dad42bb384be2 94808164 linux_4.9.184.orig.tar.xz
ba29c0163f2ec099d4f9b254c67880d6f211da9b 1245040 linux_4.9.184-1.debian.tar.xz
69ad09c30910d3cee2e0f8865e09ce412c4fc258 12515092 linux-doc-4.9_4.9.184-1_all.deb
b46101561dc2b440667b5440bdd30804bd9ef4f4 5758230 linux-headers-4.9.0-10-common-rt_4.9.184-1_all.deb
11906f48a17b1046033042b1c4e44a98b41ad615 7692126 linux-headers-4.9.0-10-common_4.9.184-1_all.deb
f1e203b8ac0280eaaeb2b9b6a91bcefe5d5c90d0 3231900 linux-manual-4.9_4.9.184-1_all.deb
54a97f142afff5d697d4dafa353935b43df51ff3 96879532 linux-source-4.9_4.9.184-1_all.deb
675fbb16547924f28ef5a5ec7bdfff3da8b3e701 693392 linux-support-4.9.0-10_4.9.184-1_all.deb
Checksums-Sha256:
bbf0086c83616e0d9d6bd5854b77eb6ceb06a672b94381fcd503926e389b6d09 125180 linux_4.9.184-1.dsc
71dcebacfec777b23e1f65d9147b21d0f20c0c909f6258b560ff2d2886920b03 94808164 linux_4.9.184.orig.tar.xz
0f32576e5a37d1012cab75a0f8a12d8311a247aa7af49fc594c79801c9628d45 1245040 linux_4.9.184-1.debian.tar.xz
d4831074bb2393bb37436c4305e6f9de4ee6da4b90ce025db5c02e68c573902f 12515092 linux-doc-4.9_4.9.184-1_all.deb
07f70033482e282e8a856e40440c867e0cba0f4a3d55120a124a989b3f5f43ef 5758230 linux-headers-4.9.0-10-common-rt_4.9.184-1_all.deb
0984b28912fea98903d9dfb7c27aca8ac6e14ce48e5922e045bee9809abcc2b3 7692126 linux-headers-4.9.0-10-common_4.9.184-1_all.deb
43dde9f1aa65b90f0a28ec59ac16b27de03fa35ef3191486a38e14b4d86001ed 3231900 linux-manual-4.9_4.9.184-1_all.deb
bacd2112b621dcbb0ceea6d25d046f747d3e4a09f093e902c7af5dfe168126ff 96879532 linux-source-4.9_4.9.184-1_all.deb
6fbc7b0d5b0c04b3b9f03f1c333a13f88356c5c143b9e5f3e8be965833becf9b 693392 linux-support-4.9.0-10_4.9.184-1_all.deb
Files:
d737dae5958a14b96d4bf05534374916 125180 kernel optional linux_4.9.184-1.dsc
a4dfd298938daa9369d4374d7314f961 94808164 kernel optional linux_4.9.184.orig.tar.xz
826d663e9a8e616c7c05c142dc885743 1245040 kernel optional linux_4.9.184-1.debian.tar.xz
982e49220443a4eb33e8cf0fbf01cd3c 12515092 doc optional linux-doc-4.9_4.9.184-1_all.deb
03037c6ba507e1ab99421d2f14d445dd 5758230 kernel optional linux-headers-4.9.0-10-common-rt_4.9.184-1_all.deb
d29e15009c3f05b3f1d333e827b67a31 7692126 kernel optional linux-headers-4.9.0-10-common_4.9.184-1_all.deb
90851cdb67f24cb98300248ec3cef3e8 3231900 doc optional linux-manual-4.9_4.9.184-1_all.deb
1e9f6eb59795b42d3a113350d49d7b6b 96879532 kernel optional linux-source-4.9_4.9.184-1_all.deb
925203c34d0c09a35044ab3d5ec1d743 693392 devel optional linux-support-4.9.0-10_4.9.184-1_all.deb
-----BEGIN PGP SIGNATURE-----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=kgQY
-----END PGP SIGNATURE-----