-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 12 May 2023 06:08:40 +0200 Source: linux-signed-i386 Architecture: source Version: 5.10.179+1 Distribution: bullseye-security Urgency: high Maintainer: Debian Kernel Team Changed-By: Salvatore Bonaccorso Changes: linux-signed-i386 (5.10.179+1) bullseye-security; urgency=high . * Sign kernel from linux 5.10.179-1 . * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.179 - [arm64] dts: qcom: ipq8074-hk01: enable QMP device, not the PHY node - netfilter: br_netfilter: fix recent physdev match breakage - [arm64,armhf] regulator: fan53555: Explicitly include bits header - net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg (CVE-2023-31436) - virtio_net: bugfix overflow inside xdp_linearize_page() - sfc: Split STATE_READY in to STATE_NET_DOWN and STATE_NET_UP. - sfc: Fix use-after-free due to selftest_work - netfilter: nf_tables: fix ifdef to also consider nf_tables=m - i40e: fix accessing vsi->active_filters without holding lock - i40e: fix i40e_setup_misc_vector() error handling - mlxfw: fix null-ptr-deref in mlxfw_mfa2_tlv_next() - net: rpl: fix rpl header size calculation - bpf: Fix incorrect verifier pruning due to missing register precision taints - e1000e: Disable TSO on i219-LM card to increase speed - f2fs: Fix f2fs_truncate_partial_nodes ftrace event - Input: i8042 - add quirk for Fujitsu Lifebook A574/H - scsi: megaraid_sas: Fix fw_crash_buffer_show() - scsi: core: Improve scsi_vpd_inquiry() checks - [s390x] ptrace: fix PTRACE_GET_LAST_BREAK error handling - nvme-tcp: fix a possible UAF when failing to allocate an io queue - xen/netback: use same error messages for same errors - xfs: drop submit side trans alloc for append ioends - iio: light: tsl2772: fix reading proximity-diodes from device tree - nilfs2: initialize unused bytes in segment summary blocks - memstick: fix memory leak if card device is never registered - kernel/sys.c: fix and improve control flow in __sys_setres[ug]id() - mm/khugepaged: check again on anon uffd-wp during isolation - sched/uclamp: Make task_fits_capacity() use util_fits_cpu() - sched/uclamp: Fix fits_capacity() check in feec() - sched/uclamp: Make select_idle_capacity() use util_fits_cpu() - sched/uclamp: Make asym_fits_capacity() use util_fits_cpu() - sched/uclamp: Make cpu_overutilized() use util_fits_cpu() - sched/uclamp: Cater for uclamp in find_energy_efficient_cpu()'s early exit condition - sched/fair: Detect capacity inversion - sched/fair: Consider capacity inversion in util_fits_cpu() - sched/uclamp: Fix a uninitialized variable warnings - sched/fair: Fixes for capacity inversion detection - virtiofs: clean up error handling in virtio_fs_get_tree() - virtiofs: split requests that exceed virtqueue size - fuse: check s_root when destroying sb - fuse: fix attr version comparison in fuse_read_update_size() - fuse: always revalidate rename target dentry - fuse: fix deadlock between atomic O_TRUNC and page invalidation - Revert "ext4: fix use-after-free in ext4_xattr_set_entry" - ext4: remove duplicate definition of ext4_xattr_ibody_inline_set() - ext4: fix use-after-free in ext4_xattr_set_entry - udp: Call inet6_destroy_sock() in setsockopt(IPV6_ADDRFORM). - tcp/udp: Call inet6_destroy_sock() in IPv6 sk->sk_destruct(). - inet6: Remove inet6_destroy_sock() in sk->sk_prot->destroy(). - dccp: Call inet6_destroy_sock() via sk->sk_destruct(). - sctp: Call inet6_destroy_sock() via sk->sk_destruct(). - [arm64,armhf] pwm: meson: Explicitly set .polarity in .get_state() - ASN.1: Fix check for strdup() success . [ Salvatore Bonaccorso ] * netfilter: nf_tables: deactivate anonymous set from preparation phase (CVE-2023-32233) * [rt] Refresh "sched/hotplug: Ensure only per-cpu kthreads run during hotplug" * Bump ABI to 23 * ovl: fail on invalid uid/gid mapping at copy up (CVE-2023-0386) * [x86] KVM: x86: hyper-v: Avoid calling kvm_make_vcpus_request_mask() with vcpu_mask==NULL (Closes: #1035779) Checksums-Sha1: 92d86eaca8d7ec1244a0bd3bb0b3a89720571e1c 14265 linux-signed-i386_5.10.179+1.dsc a647d6146960cea5a7bcb4e56ffa64eed5d4cbea 3792864 linux-signed-i386_5.10.179+1.tar.xz Checksums-Sha256: 91e76ff8836d95ee5819a01f7b4c6c2c3069d9f6c7c18db3d2b5ab1dfd7f92d5 14265 linux-signed-i386_5.10.179+1.dsc 859f8a5437f6445e54408ec07b8433fd78940cf0e936fad5db8f83ca72432d41 3792864 linux-signed-i386_5.10.179+1.tar.xz Files: 5660fda6be652f985d995afe31cce832 14265 kernel optional linux-signed-i386_5.10.179+1.dsc 9bd6dd9cd19850428b76df1a187826e7 3792864 kernel optional linux-signed-i386_5.10.179+1.tar.xz -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEfKFfvHEI+gkU+E+di0FRiLdONzYFAmRe7m8ACgkQi0FRiLdO NzbboQ/+JP+A45e1OSbWF5/PQenbUVLWcSgHTLmRw7XDja+smQ/X5i2C87GEqQe9 Ad/LwHYuIxAh0XkgWuuHUNOXWjnjaj57mYYsybWemQC5OM6zfGFMDZtDpAPT2QZX 8o9Rf6btzKVR9xzdJDkCKuwbI0jZTH5hTMbvopWCbT+4vBtYmQZq3HaxBxBe9Fnx YnsQBMGEwoUHE9eTaQZhrw353J6qRmSKak4wYXOV64moTpwLTd+rk4uwzWbne9bC +VNd4WerdoWBRj7g25Qmgen5qch5zPYNF0ARLTt15zV+pzcp2f2TiMJ1pgKLKlMm 0K5KwgA9tn+IHi0Zc72qiUDq40NnBk13telR1tF1NUosPDKu3HEP1LZ5nAtZ2nP1 7MZhOCCdMe4UYc952qRX4AURGzhDNHD8hMZIc8SsrtFBw1TB7uIhWM3LEuFIq8qP J7MvnBDSBKUqQJbPfMH1ZQMBq1/BMEZpdKi18u6xhhy3P+Kh0vIa3B7ps+Z0PhA0 5zrW+jVnpeQIavxK8kXb626fdk2s/XwsJheWaKMqXqtATa01sqfgpaWWs/bN+icD jg/tG9wiUfQpJFKh7Scy8ijGXOvl2xcrYK2XdUFr9kH6TbtWKQQ4AQ5f/nfGRCVj 7pn0aju1si1GWj9K8T+78QMTvXdLFBaWRjC5MJKtz7sVpclmYdA= =qfko -----END PGP SIGNATURE-----