From patchwork Tue Jan 7 18:08:19 2025 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Steve Sakoman X-Patchwork-Id: 55146 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 78914E77199 for ; Tue, 7 Jan 2025 18:08:53 +0000 (UTC) Received: from mail-pl1-f177.google.com (mail-pl1-f177.google.com [209.85.214.177]) by mx.groups.io with SMTP id smtpd.web11.96.1736273326971048099 for ; Tue, 07 Jan 2025 10:08:47 -0800 Authentication-Results: mx.groups.io; dkim=pass header.i=@sakoman-com.20230601.gappssmtp.com header.s=20230601 header.b=Lh72IPzJ; spf=softfail (domain: sakoman.com, ip: 209.85.214.177, mailfrom: steve@sakoman.com) Received: by mail-pl1-f177.google.com with SMTP id d9443c01a7336-216634dd574so154616445ad.2 for ; Tue, 07 Jan 2025 10:08:46 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sakoman-com.20230601.gappssmtp.com; s=20230601; t=1736273326; x=1736878126; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=qDjkgP5s+rb6MfiwBIso2cPOw/qF8Jf8VTVyNysdF/s=; b=Lh72IPzJfC5iJScHfhJfUFM2eDEs9TLM94L0nL5ssrVH6ngw8E/2yCaQD8tsxabdmt MKk6r7s7Vg6hX13E4U1krQ5/iuUqj4HaXBPrRapzTWv+AwmX1XjDRZY04xE21w8uUwpg eXfIiqDOxl9eXFGqNxvYndhck8BjO9ikFyNmMxdBKilDlD1VVj62l5xHFz4Cp1vPpEAa I6Ru1A7YEZAYvSmXn6VO7LMoFtJRgI9XxMHuFVbU9qwqWT2oUp3aWZMH0BdXipjI39DX AP8gZkAEw/iNjruMlntJRH4GQkrffNNWJTkkwfhcbrZ5JYuww8NdrrL0eid5GqNB0mbZ y6fg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1736273326; x=1736878126; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=qDjkgP5s+rb6MfiwBIso2cPOw/qF8Jf8VTVyNysdF/s=; b=rQ4f36dlISGU21hLMnaxE/tQnYAXgmeQ5FuT+N1VfDkVN6S+z3MbidoEkwhLT7Jcz8 bMY18vzEwGb3Hc3+ZB0XyEOLO0vDzQtEhXTJXbTlvEUADMwIZw5YcO/jT+s5aKP00YkG CeUVgOZyDnL5JUJkZv4y5elget5su9D1XRCG8WMd8fmZMCbmPmNr5+ic/knfRHfgjZsJ QYRiGiUMDygzL4hu2lc2E8GkpvDlcMkucildu5EyEhUj/cxBc+tlKzagWL2bqVExFcuS NcefR5q7zAB9tmmwpWHNkzFFam0q2dNxY8IDHJ7hpTNNgLaOiZWB5BMguIDpIGU+0AwS Tgow== X-Gm-Message-State: AOJu0YzEF3lApInD1GROslGabKXDYziWi68InFzqGTjj6ummY9yv4BMC P3k1145HFen5hZKaP0o01tzF3J7EA/YbiRMzBp7DcdphqLXHgfJpHr/WPayFW3oJH5cDfVtvSD+ IpIk= X-Gm-Gg: ASbGncsUt39YUUgGXQWvCYwC01KkmCkmLeWrSa3kBt7QgtnsnFkB9/0VF0YbBZDVh7O 6S7MRXTKqZOj6CZ0D2dFhiVVHFRWTLJxpzFOAJ6l0ou/sGfHX9pFYZF/PPLRImuh3U3HO6u27LC +S4T2+iQvL6KVQhJbwTYNJLx8/O8mXLfK21EeTOZdAYAR3NFSxPJRAyy8mrtyrR9jcSGfO6npCy uesfBwyinTIhVAfXbKRDSyUTkDsaAhmgEYt0SqTfoY55Q== X-Google-Smtp-Source: AGHT+IHyqaAitDbXxPykZ/OvsABeaIoQlPCZ5vGU2C/VsmZC2m2tjF/lrddnYosvrVRHKdQt2zY+eA== X-Received: by 2002:a17:903:2287:b0:215:5240:bb3d with SMTP id d9443c01a7336-219e6f144a4mr1008896305ad.42.1736273325902; Tue, 07 Jan 2025 10:08:45 -0800 (PST) Received: from hexa.. ([98.142.47.158]) by smtp.gmail.com with ESMTPSA id d9443c01a7336-219dc9f4413sm314166335ad.172.2025.01.07.10.08.44 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 07 Jan 2025 10:08:45 -0800 (PST) From: Steve Sakoman To: openembedded-core@lists.openembedded.org Subject: [OE-core][kirkstone 01/19] gstreamer1.0-plugins-base: Fix for multiple CVE's Date: Tue, 7 Jan 2025 10:08:19 -0800 Message-ID: X-Mailer: git-send-email 2.43.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Tue, 07 Jan 2025 18:08:53 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/209482 From: Vijay Anusuri Backport fixes for below CVE: CVE-2024-47538 CVE-2024-47541 CVE-2024-47542 CVE-2024-47600 CVE-2024-47607 CVE-2024-47615 CVE-2024-47835 Signed-off-by: Vijay Anusuri Signed-off-by: Steve Sakoman --- .../CVE-2024-47538.patch | 35 ++++ .../CVE-2024-47541-1.patch | 38 ++++ .../CVE-2024-47541-2.patch | 99 +++++++++++ .../CVE-2024-47542.patch | 64 +++++++ .../CVE-2024-47600.patch | 38 ++++ .../CVE-2024-47607.patch | 41 +++++ .../CVE-2024-47615-1.patch | 79 ++++++++ .../CVE-2024-47615-2.patch | 168 ++++++++++++++++++ .../CVE-2024-47835.patch | 39 ++++ .../gstreamer1.0-plugins-base_1.20.7.bb | 9 + 10 files changed, 610 insertions(+) create mode 100644 meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-base/CVE-2024-47538.patch create mode 100644 meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-base/CVE-2024-47541-1.patch create mode 100644 meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-base/CVE-2024-47541-2.patch create mode 100644 meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-base/CVE-2024-47542.patch create mode 100644 meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-base/CVE-2024-47600.patch create mode 100644 meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-base/CVE-2024-47607.patch create mode 100644 meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-base/CVE-2024-47615-1.patch create mode 100644 meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-base/CVE-2024-47615-2.patch create mode 100644 meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-base/CVE-2024-47835.patch diff --git a/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-base/CVE-2024-47538.patch b/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-base/CVE-2024-47538.patch new file mode 100644 index 0000000000..3e353b39fd --- /dev/null +++ b/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-base/CVE-2024-47538.patch @@ -0,0 +1,35 @@ +From 7eb26b198beffecdba4dbb64299f9cb09a9181d6 Mon Sep 17 00:00:00 2001 +From: =?UTF-8?q?Sebastian=20Dr=C3=B6ge?= +Date: Mon, 30 Sep 2024 21:35:07 +0300 +Subject: [PATCH] vorbisdec: Set at most 64 channels to NONE position + +Thanks to Antonio Morales for finding and reporting the issue. + +Fixes GHSL-2024-115 +Fixes https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3869 + +Part-of: + +Upstream-Status: Backport [https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/7eb26b198beffecdba4dbb64299f9cb09a9181d6] +CVE: CVE-2024-47538 +Signed-off-by: Vijay Anusuri +--- + subprojects/gst-plugins-base/ext/vorbis/gstvorbisdec.c | 2 +- + 1 file changed, 1 insertion(+), 1 deletion(-) + +diff --git a/subprojects/gst-plugins-base/ext/vorbis/gstvorbisdec.c b/subprojects/gst-plugins-base/ext/vorbis/gstvorbisdec.c +index 6a410ed858ca..1fc4fa883e68 100644 +--- a/ext/vorbis/gstvorbisdec.c ++++ b/ext/vorbis/gstvorbisdec.c +@@ -204,7 +204,7 @@ vorbis_handle_identification_packet (GstVorbisDec * vd) + } + default:{ + GstAudioChannelPosition position[64]; +- gint i, max_pos = MAX (vd->vi.channels, 64); ++ gint i, max_pos = MIN (vd->vi.channels, 64); + + GST_ELEMENT_WARNING (vd, STREAM, DECODE, + (NULL), ("Using NONE channel layout for more than 8 channels")); +-- +GitLab + diff --git a/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-base/CVE-2024-47541-1.patch b/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-base/CVE-2024-47541-1.patch new file mode 100644 index 0000000000..32628f323c --- /dev/null +++ b/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-base/CVE-2024-47541-1.patch @@ -0,0 +1,38 @@ +From 7108073b5be73eb2482eb8494745962b8c0571f1 Mon Sep 17 00:00:00 2001 +From: =?UTF-8?q?Sebastian=20Dr=C3=B6ge?= +Date: Mon, 30 Sep 2024 21:40:44 +0300 +Subject: [PATCH] ssaparse: Search for closing brace after opening brace + +Otherwise removing anything between the braces leads to out of bound writes if +there is a closing brace before the first opening brace. + +Thanks to Antonio Morales for finding and reporting the issue. + +Fixes GHSL-2024-228 +Fixes https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3870 + +Part-of: + +Upstream-Status: Backport [https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/7108073b5be73eb2482eb8494745962b8c0571f1] +CVE: CVE-2024-47541 +Signed-off-by: Vijay Anusuri +--- + subprojects/gst-plugins-base/gst/subparse/gstssaparse.c | 2 +- + 1 file changed, 1 insertion(+), 1 deletion(-) + +diff --git a/subprojects/gst-plugins-base/gst/subparse/gstssaparse.c b/subprojects/gst-plugins-base/gst/subparse/gstssaparse.c +index 42fbb42b99fe..37b892e92843 100644 +--- a/gst/subparse/gstssaparse.c ++++ b/gst/subparse/gstssaparse.c +@@ -238,7 +238,7 @@ gst_ssa_parse_remove_override_codes (GstSsaParse * parse, gchar * txt) + gboolean removed_any = FALSE; + + while ((t = strchr (txt, '{'))) { +- end = strchr (txt, '}'); ++ end = strchr (t, '}'); + if (end == NULL) { + GST_WARNING_OBJECT (parse, "Missing { for style override code"); + return removed_any; +-- +GitLab + diff --git a/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-base/CVE-2024-47541-2.patch b/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-base/CVE-2024-47541-2.patch new file mode 100644 index 0000000000..5d0d13a3ff --- /dev/null +++ b/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-base/CVE-2024-47541-2.patch @@ -0,0 +1,99 @@ +From b66cf81e99ab9f400b6aea79a4b597c5ddac324d Mon Sep 17 00:00:00 2001 +From: =?UTF-8?q?Sebastian=20Dr=C3=B6ge?= +Date: Mon, 30 Sep 2024 18:36:19 +0300 +Subject: [PATCH] ssaparse: Don't use strstr() on strings that are potentially + not NULL-terminated + +Part-of: + +Upstream-Status: Backport [https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/b66cf81e99ab9f400b6aea79a4b597c5ddac324d] +CVE: CVE-2024-47541 +Signed-off-by: Vijay Anusuri +--- + .../gst/subparse/gstssaparse.c | 36 ++++++++++++++++++- + subprojects/gst-plugins-base/meson.build | 1 + + 2 files changed, 36 insertions(+), 1 deletion(-) + +diff --git a/subprojects/gst-plugins-base/gst/subparse/gstssaparse.c b/subprojects/gst-plugins-base/gst/subparse/gstssaparse.c +index 37b892e92843..c162a542f581 100644 +--- a/gst/subparse/gstssaparse.c ++++ b/gst/subparse/gstssaparse.c +@@ -146,6 +146,35 @@ gst_ssa_parse_sink_event (GstPad * pad, GstObject * parent, GstEvent * event) + return res; + } + ++#ifndef HAVE_MEMMEM ++// memmem() is a GNU extension so if it's not available we'll need ++// our own implementation here. Thanks C. ++static void * ++my_memmem (const void *haystack, size_t haystacklen, const void *needle, ++ size_t needlelen) ++{ ++ const guint8 *cur, *end; ++ ++ if (needlelen > haystacklen) ++ return NULL; ++ if (needlelen == 0) ++ return (void *) haystack; ++ ++ ++ cur = haystack; ++ end = cur + haystacklen - needlelen; ++ ++ for (; cur <= end; cur++) { ++ if (memcmp (cur, needle, needlelen) == 0) ++ return (void *) cur; ++ } ++ ++ return NULL; ++} ++#else ++#define my_memmem memmem ++#endif ++ + static gboolean + gst_ssa_parse_setcaps (GstPad * sinkpad, GstCaps * caps) + { +@@ -154,6 +183,7 @@ gst_ssa_parse_setcaps (GstPad * sinkpad, GstCaps * caps) + const GValue *val; + GstStructure *s; + const guchar bom_utf8[] = { 0xEF, 0xBB, 0xBF }; ++ const guint8 header[] = "[Script Info]"; + const gchar *end; + GstBuffer *priv; + GstMapInfo map; +@@ -193,7 +223,7 @@ gst_ssa_parse_setcaps (GstPad * sinkpad, GstCaps * caps) + left -= 3; + } + +- if (!strstr (ptr, "[Script Info]")) ++ if (!my_memmem (ptr, left, header, sizeof (header) - 1)) + goto invalid_init; + + if (!g_utf8_validate (ptr, left, &end)) { +@@ -231,6 +261,10 @@ invalid_init: + } + } + ++#ifdef my_memmem ++#undef my_memmem ++#endif ++ + static gboolean + gst_ssa_parse_remove_override_codes (GstSsaParse * parse, gchar * txt) + { +diff --git a/subprojects/gst-plugins-base/meson.build b/subprojects/gst-plugins-base/meson.build +index 65c5d944d30f..91f2b77aec23 100644 +--- a/meson.build ++++ b/meson.build +@@ -197,6 +197,7 @@ check_functions = [ + ['HAVE_LRINTF', 'lrintf', '#include'], + ['HAVE_MMAP', 'mmap', '#include'], + ['HAVE_LOG2', 'log2', '#include'], ++ ['HAVE_MEMMEM', 'memmem', '#include'], + ] + + libm = cc.find_library('m', required : false) +-- +GitLab + diff --git a/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-base/CVE-2024-47542.patch b/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-base/CVE-2024-47542.patch new file mode 100644 index 0000000000..b982c04c40 --- /dev/null +++ b/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-base/CVE-2024-47542.patch @@ -0,0 +1,64 @@ +From 921d8daa00c329932616dd5d197b601a7e271e79 Mon Sep 17 00:00:00 2001 +From: =?UTF-8?q?Sebastian=20Dr=C3=B6ge?= +Date: Thu, 26 Sep 2024 13:43:06 +0300 +Subject: [PATCH] id3v2: Don't try parsing extended header if not enough data + is available + +Thanks to Antonio Morales for finding and reporting the issue. + +Fixes GHSL-2024-235 +Fixes https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3842 + +Part-of: + +Upstream-Status: Backport [https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/921d8daa00c329932616dd5d197b601a7e271e79] +CVE: CVE-2024-47542 +Signed-off-by: Vijay Anusuri +--- + subprojects/gst-plugins-base/gst-libs/gst/tag/id3v2.c | 11 ++++++++--- + 1 file changed, 8 insertions(+), 3 deletions(-) + +diff --git a/subprojects/gst-plugins-base/gst-libs/gst/tag/id3v2.c b/subprojects/gst-plugins-base/gst-libs/gst/tag/id3v2.c +index 7db2cb7e12b6..70f975d13374 100644 +--- a/gst-libs/gst/tag/id3v2.c ++++ b/gst-libs/gst/tag/id3v2.c +@@ -29,7 +29,7 @@ + + #define HANDLE_INVALID_SYNCSAFE + +-static gboolean id3v2_frames_to_tag_list (ID3TagsWorking * work, guint size); ++static gboolean id3v2_frames_to_tag_list (ID3TagsWorking * work); + + #ifndef GST_DISABLE_GST_DEBUG + +@@ -258,7 +258,7 @@ gst_tag_list_from_id3v2_tag (GstBuffer * buffer) + GST_MEMDUMP ("ID3v2 tag (un-unsyced)", uu_data, work.hdr.frame_data_size); + } + +- id3v2_frames_to_tag_list (&work, work.hdr.frame_data_size); ++ id3v2_frames_to_tag_list (&work); + + g_free (uu_data); + +@@ -440,12 +440,17 @@ id3v2_add_id3v2_frame_blob_to_taglist (ID3TagsWorking * work, + } + + static gboolean +-id3v2_frames_to_tag_list (ID3TagsWorking * work, guint size) ++id3v2_frames_to_tag_list (ID3TagsWorking * work) + { + guint frame_hdr_size; + + /* Extended header if present */ + if (work->hdr.flags & ID3V2_HDR_FLAG_EXTHDR) { ++ if (work->hdr.frame_data_size < 4) { ++ GST_DEBUG ("Tag has no extended header data. Broken tag"); ++ return FALSE; ++ } ++ + work->hdr.ext_hdr_size = id3v2_read_synch_uint (work->hdr.frame_data, 4); + + /* In id3v2.4.x the header size is the size of the *whole* +-- +GitLab + diff --git a/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-base/CVE-2024-47600.patch b/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-base/CVE-2024-47600.patch new file mode 100644 index 0000000000..04bde3e62c --- /dev/null +++ b/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-base/CVE-2024-47600.patch @@ -0,0 +1,38 @@ +From 5b205225e2c6a19ddcace350fdc18a0edf87bcb5 Mon Sep 17 00:00:00 2001 +From: =?UTF-8?q?Sebastian=20Dr=C3=B6ge?= +Date: Mon, 30 Sep 2024 18:19:30 +0300 +Subject: [PATCH] discoverer: Don't print channel layout for more than 64 + channels + +64+ channels are always unpositioned / unknown layout. + +Thanks to Antonio Morales for finding and reporting the issue. + +Fixes GHSL-2024-248 +Fixes https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3864 + +Part-of: + +Upstream-Status: Backport [https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/5b205225e2c6a19ddcace350fdc18a0edf87bcb5] +CVE: CVE-2024-47600 +Signed-off-by: Vijay Anusuri +--- + subprojects/gst-plugins-base/tools/gst-discoverer.c | 2 +- + 1 file changed, 1 insertion(+), 1 deletion(-) + +diff --git a/subprojects/gst-plugins-base/tools/gst-discoverer.c b/subprojects/gst-plugins-base/tools/gst-discoverer.c +index b042be535d15..6028fc71c9d0 100644 +--- a/tools/gst-discoverer.c ++++ b/tools/gst-discoverer.c +@@ -222,7 +222,7 @@ format_channel_mask (GstDiscovererAudioInfo * ainfo) + + channel_mask = gst_discoverer_audio_info_get_channel_mask (ainfo); + +- if (channel_mask != 0) { ++ if (channel_mask != 0 && channels <= 64) { + gst_audio_channel_positions_from_mask (channels, channel_mask, position); + + for (i = 0; i < channels; i++) { +-- +GitLab + diff --git a/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-base/CVE-2024-47607.patch b/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-base/CVE-2024-47607.patch new file mode 100644 index 0000000000..48249652d9 --- /dev/null +++ b/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-base/CVE-2024-47607.patch @@ -0,0 +1,41 @@ +From 804eca458fb547942ed70b88c021b996be9228a2 Mon Sep 17 00:00:00 2001 +From: =?UTF-8?q?Sebastian=20Dr=C3=B6ge?= +Date: Tue, 1 Oct 2024 13:22:50 +0300 +Subject: [PATCH] opusdec: Set at most 64 channels to NONE position + +Thanks to Antonio Morales for finding and reporting the issue. + +Fixes GHSL-2024-116 +Fixes https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3871 + +Part-of: + +Upstream-Status: Backport [https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/804eca458fb547942ed70b88c021b996be9228a2] +CVE: CVE-2024-47607 +Signed-off-by: Vijay Anusuri +--- + subprojects/gst-plugins-base/ext/opus/gstopusdec.c | 4 ++-- + 1 file changed, 2 insertions(+), 2 deletions(-) + +diff --git a/subprojects/gst-plugins-base/ext/opus/gstopusdec.c b/subprojects/gst-plugins-base/ext/opus/gstopusdec.c +index 99289fa7d223..d3f461d9a821 100644 +--- a/ext/opus/gstopusdec.c ++++ b/ext/opus/gstopusdec.c +@@ -440,12 +440,12 @@ gst_opus_dec_parse_header (GstOpusDec * dec, GstBuffer * buf) + posn = gst_opus_channel_positions[dec->n_channels - 1]; + break; + default:{ +- gint i; ++ guint i, max_pos = MIN (dec->n_channels, 64); + + GST_ELEMENT_WARNING (GST_ELEMENT (dec), STREAM, DECODE, + (NULL), ("Using NONE channel layout for more than 8 channels")); + +- for (i = 0; i < dec->n_channels; i++) ++ for (i = 0; i < max_pos; i++) + pos[i] = GST_AUDIO_CHANNEL_POSITION_NONE; + + posn = pos; +-- +GitLab + diff --git a/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-base/CVE-2024-47615-1.patch b/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-base/CVE-2024-47615-1.patch new file mode 100644 index 0000000000..d9619ede52 --- /dev/null +++ b/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-base/CVE-2024-47615-1.patch @@ -0,0 +1,79 @@ +From 30fa21ac45ef5dad2fef0d98f0e7130c75f0b628 Mon Sep 17 00:00:00 2001 +From: Mathieu Duponchelle +Date: Wed, 2 Oct 2024 15:16:30 +0200 +Subject: [PATCH] vorbis_parse: check writes to GstOggStream.vorbis_mode_sizes + +Thanks to Antonio Morales for finding and reporting the issue. + +Fixes GHSL-2024-117 Fixes gstreamer#3875 + +Also perform out-of-bounds check for accesses to op->packet + +Part-of: + +Upstream-Status: Backport [https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/30fa21ac45ef5dad2fef0d98f0e7130c75f0b628] +CVE: CVE-2024-47615 +Signed-off-by: Vijay Anusuri +--- + .../gst-plugins-base/ext/ogg/vorbis_parse.c | 21 +++++++++++++++++++ + 1 file changed, 21 insertions(+) + +diff --git a/subprojects/gst-plugins-base/ext/ogg/vorbis_parse.c b/subprojects/gst-plugins-base/ext/ogg/vorbis_parse.c +index 65ef463808e1..757c7cd82b8d 100644 +--- a/ext/ogg/vorbis_parse.c ++++ b/ext/ogg/vorbis_parse.c +@@ -165,6 +165,10 @@ gst_parse_vorbis_setup_packet (GstOggStream * pad, ogg_packet * op) + if (offset == 0) { + offset = 8; + current_pos -= 1; ++ ++ /* have we underrun? */ ++ if (current_pos < op->packet) ++ return -1; + } + } + +@@ -178,6 +182,10 @@ gst_parse_vorbis_setup_packet (GstOggStream * pad, ogg_packet * op) + if (offset == 7) + current_pos -= 1; + ++ /* have we underrun? */ ++ if (current_pos < op->packet + 5) ++ return -1; ++ + if (((current_pos[-5] & ~((1 << (offset + 1)) - 1)) != 0) + || + current_pos[-4] != 0 +@@ -199,9 +207,18 @@ gst_parse_vorbis_setup_packet (GstOggStream * pad, ogg_packet * op) + /* Give ourselves a chance to recover if we went back too far by using + * the size check. */ + for (ii = 0; ii < 2; ii++) { ++ + if (offset > 4) { ++ /* have we underrun? */ ++ if (current_pos < op->packet) ++ return -1; ++ + size_check = (current_pos[0] >> (offset - 5)) & 0x3F; + } else { ++ /* have we underrun? */ ++ if (current_pos < op->packet + 1) ++ return -1; ++ + /* mask part of byte from current_pos */ + size_check = (current_pos[0] & ((1 << (offset + 1)) - 1)); + /* shift to appropriate position */ +@@ -233,6 +250,10 @@ gst_parse_vorbis_setup_packet (GstOggStream * pad, ogg_packet * op) + + mode_size_ptr = pad->vorbis_mode_sizes; + ++ if (size > G_N_ELEMENTS (pad->vorbis_mode_sizes)) { ++ return -1; ++ } ++ + for (i = 0; i < size; i++) { + offset = (offset + 1) % 8; + if (offset == 0) +-- +GitLab + diff --git a/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-base/CVE-2024-47615-2.patch b/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-base/CVE-2024-47615-2.patch new file mode 100644 index 0000000000..c5f1dfbb80 --- /dev/null +++ b/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-base/CVE-2024-47615-2.patch @@ -0,0 +1,168 @@ +From c94c44ce497d285ebcfe866b9faaae9c66c81132 Mon Sep 17 00:00:00 2001 +From: Mathieu Duponchelle +Date: Wed, 2 Oct 2024 16:52:51 +0200 +Subject: [PATCH] oggstream: review and fix per-format min_packet_size + +This addresses all manually detected invalid reads in setup functions. + +Part-of: + +Upstream-Status: Backport [https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/c94c44ce497d285ebcfe866b9faaae9c66c81132] +CVE: CVE-2024-47615 +Signed-off-by: Vijay Anusuri +--- + .../gst-plugins-base/ext/ogg/gstoggstream.c | 40 ++++++------------- + 1 file changed, 12 insertions(+), 28 deletions(-) + +diff --git a/subprojects/gst-plugins-base/ext/ogg/gstoggstream.c b/subprojects/gst-plugins-base/ext/ogg/gstoggstream.c +index a8883304a5c0..ab6be238dc48 100644 +--- a/ext/ogg/gstoggstream.c ++++ b/ext/ogg/gstoggstream.c +@@ -665,11 +665,6 @@ setup_vp8_mapper (GstOggStream * pad, ogg_packet * packet) + { + gint width, height, par_n, par_d, fps_n, fps_d; + +- if (packet->bytes < 26) { +- GST_DEBUG ("Failed to parse VP8 BOS page"); +- return FALSE; +- } +- + width = GST_READ_UINT16_BE (packet->packet + 8); + height = GST_READ_UINT16_BE (packet->packet + 10); + par_n = GST_READ_UINT24_BE (packet->packet + 12); +@@ -1221,11 +1216,6 @@ setup_fishead_mapper (GstOggStream * pad, ogg_packet * packet) + gint64 prestime_n, prestime_d; + gint64 basetime_n, basetime_d; + +- if (packet->bytes < 44) { +- GST_DEBUG ("Not enough data for fishead header"); +- return FALSE; +- } +- + data = packet->packet; + + data += 8; /* header */ +@@ -1256,8 +1246,8 @@ setup_fishead_mapper (GstOggStream * pad, ogg_packet * packet) + pad->prestime = -1; + + /* Ogg Skeleton 3.3+ streams provide additional information in the header */ +- if (packet->bytes >= SKELETON_FISHEAD_3_3_MIN_SIZE && pad->skeleton_major == 3 +- && pad->skeleton_minor > 0) { ++ if (packet->bytes - 44 >= SKELETON_FISHEAD_3_3_MIN_SIZE ++ && pad->skeleton_major == 3 && pad->skeleton_minor > 0) { + gint64 firstsampletime_n, firstsampletime_d; + gint64 lastsampletime_n, lastsampletime_d; + gint64 firstsampletime, lastsampletime; +@@ -1296,7 +1286,7 @@ setup_fishead_mapper (GstOggStream * pad, ogg_packet * packet) + + GST_INFO ("skeleton fishead parsed total: %" GST_TIME_FORMAT, + GST_TIME_ARGS (pad->total_time)); +- } else if (packet->bytes >= SKELETON_FISHEAD_4_0_MIN_SIZE ++ } else if (packet->bytes - 44 >= SKELETON_FISHEAD_4_0_MIN_SIZE + && pad->skeleton_major == 4) { + guint64 segment_length, content_offset; + +@@ -1980,9 +1970,6 @@ setup_kate_mapper (GstOggStream * pad, ogg_packet * packet) + guint8 *data = packet->packet; + const char *category; + +- if (packet->bytes < 64) +- return FALSE; +- + pad->granulerate_n = GST_READ_UINT32_LE (data + 24); + pad->granulerate_d = GST_READ_UINT32_LE (data + 28); + pad->granuleshift = GST_READ_UINT8 (data + 15); +@@ -2111,9 +2098,6 @@ setup_opus_mapper (GstOggStream * pad, ogg_packet * packet) + { + GstBuffer *buffer; + +- if (packet->bytes < 19) +- return FALSE; +- + pad->granulerate_n = 48000; + pad->granulerate_d = 1; + pad->granuleshift = 0; +@@ -2394,7 +2378,7 @@ const GstOggMap mappers[] = { + NULL + }, + { +- "\001vorbis", 7, 22, ++ "\001vorbis", 7, 29, + "audio/x-vorbis", + setup_vorbis_mapper, + NULL, +@@ -2426,7 +2410,7 @@ const GstOggMap mappers[] = { + NULL + }, + { +- "PCM ", 8, 0, ++ "PCM ", 8, 28, + "audio/x-raw", + setup_pcm_mapper, + NULL, +@@ -2442,7 +2426,7 @@ const GstOggMap mappers[] = { + NULL + }, + { +- "CMML\0\0\0\0", 8, 0, ++ "CMML\0\0\0\0", 8, 29, + "text/x-cmml", + setup_cmml_mapper, + NULL, +@@ -2458,7 +2442,7 @@ const GstOggMap mappers[] = { + NULL + }, + { +- "Annodex", 7, 0, ++ "Annodex", 7, 44, + "application/x-annodex", + setup_fishead_mapper, + NULL, +@@ -2537,7 +2521,7 @@ const GstOggMap mappers[] = { + NULL + }, + { +- "CELT ", 8, 0, ++ "CELT ", 8, 60, + "audio/x-celt", + setup_celt_mapper, + NULL, +@@ -2553,7 +2537,7 @@ const GstOggMap mappers[] = { + NULL + }, + { +- "\200kate\0\0\0", 8, 0, ++ "\200kate\0\0\0", 8, 64, + "text/x-kate", + setup_kate_mapper, + NULL, +@@ -2585,7 +2569,7 @@ const GstOggMap mappers[] = { + NULL + }, + { +- "OVP80\1\1", 7, 4, ++ "OVP80\1\1", 7, 26, + "video/x-vp8", + setup_vp8_mapper, + setup_vp8_mapper_from_caps, +@@ -2601,7 +2585,7 @@ const GstOggMap mappers[] = { + update_stats_vp8 + }, + { +- "OpusHead", 8, 0, ++ "OpusHead", 8, 19, + "audio/x-opus", + setup_opus_mapper, + NULL, +@@ -2649,7 +2633,7 @@ const GstOggMap mappers[] = { + NULL + }, + { +- "\001text\0\0\0", 9, 9, ++ "\001text\0\0\0", 9, 25, + "application/x-ogm-text", + setup_ogmtext_mapper, + NULL, +-- +GitLab + diff --git a/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-base/CVE-2024-47835.patch b/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-base/CVE-2024-47835.patch new file mode 100644 index 0000000000..e5ee5d9d1d --- /dev/null +++ b/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-base/CVE-2024-47835.patch @@ -0,0 +1,39 @@ +From 1a5fdba14a1ccfe473bc4429f22ee5bbaee034eb Mon Sep 17 00:00:00 2001 +From: =?UTF-8?q?Sebastian=20Dr=C3=B6ge?= +Date: Wed, 9 Oct 2024 11:23:47 -0400 +Subject: [PATCH] subparse: Check for NULL return of strchr() when parsing LRC + subtitles + +Thanks to Antonio Morales for finding and reporting the issue. + +Fixes GHSL-2024-263 +Fixes https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3892 + +Part-of: + +Upstream-Status: Backport [https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/1a5fdba14a1ccfe473bc4429f22ee5bbaee034eb] +CVE: CVE-2024-47835 +Signed-off-by: Vijay Anusuri +--- + subprojects/gst-plugins-base/gst/subparse/gstsubparse.c | 5 +++++ + 1 file changed, 5 insertions(+) + +diff --git a/subprojects/gst-plugins-base/gst/subparse/gstsubparse.c b/subprojects/gst-plugins-base/gst/subparse/gstsubparse.c +index 994cf62d1acc..4fe43d91003f 100644 +--- a/gst/subparse/gstsubparse.c ++++ b/gst/subparse/gstsubparse.c +@@ -1066,6 +1066,11 @@ parse_lrc (ParserState * state, const gchar * line) + return NULL; + + start = strchr (line, ']'); ++ // sscanf() does not check for the trailing ] but only up to the last ++ // placeholder, so there might be no ] at the end. ++ if (!start) ++ return NULL; ++ + if (start - line == 9) + milli = 10; + else +-- +GitLab + diff --git a/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-base_1.20.7.bb b/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-base_1.20.7.bb index 368698b58b..fc9afff628 100644 --- a/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-base_1.20.7.bb +++ b/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-base_1.20.7.bb @@ -11,6 +11,15 @@ SRC_URI = "https://gstreamer.freedesktop.org/src/gst-plugins-base/gst-plugins-ba file://0003-viv-fb-Make-sure-config.h-is-included.patch \ file://0002-ssaparse-enhance-SSA-text-lines-parsing.patch \ file://CVE-2024-4453.patch \ + file://CVE-2024-47538.patch \ + file://CVE-2024-47541-1.patch \ + file://CVE-2024-47541-2.patch \ + file://CVE-2024-47542.patch \ + file://CVE-2024-47600.patch \ + file://CVE-2024-47607.patch \ + file://CVE-2024-47615-1.patch \ + file://CVE-2024-47615-2.patch \ + file://CVE-2024-47835.patch \ " SRC_URI[sha256sum] = "fde6696a91875095d82c1012b5777c28ba926047ffce08508e12c1d2c66f0057" From patchwork Tue Jan 7 18:08:20 2025 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Steve Sakoman X-Patchwork-Id: 55147 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 8AD85E7719B for ; Tue, 7 Jan 2025 18:08:53 +0000 (UTC) Received: from mail-pl1-f177.google.com (mail-pl1-f177.google.com [209.85.214.177]) by mx.groups.io with SMTP id smtpd.web10.88.1736273328286915760 for ; Tue, 07 Jan 2025 10:08:48 -0800 Authentication-Results: mx.groups.io; dkim=pass header.i=@sakoman-com.20230601.gappssmtp.com header.s=20230601 header.b=25NAbRja; spf=softfail (domain: sakoman.com, ip: 209.85.214.177, mailfrom: steve@sakoman.com) Received: by mail-pl1-f177.google.com with SMTP id d9443c01a7336-2164b662090so205926975ad.1 for ; Tue, 07 Jan 2025 10:08:48 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sakoman-com.20230601.gappssmtp.com; s=20230601; t=1736273327; x=1736878127; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=rfm+1IetAO5FbyYntngtxtsV8xI3UkPLOaXaqlCzAsg=; b=25NAbRjajq1s0w90KcMF29UFvzJr6ZOPl1q1DEsUpQTN39/zkxBPb/ru5P3ymhz8v1 VSS28K+pDU/GcMi/2g9jmua/BXXwpgvFrDfRkv+BjRYvDaqIfjTtBCbBw7FlexxfxhFq iKQSigx8eZNmkYEf9mi1+kRiC+6sCfXICrwnjEpDXtMXCqbJMy6Fln+w8I55P45AoQua eRtG+JnHxvOZI2JK3DqcLsPDCghGnp0G4HE6YLV4yp74WmU92oSmzkHLjx4Ob96XzEy6 BSXb9EK0KbfOKbg658ChV+wGdteOtwtDE9viewZYLww+uI2xtLTYkuEl7MWyM4PLMAvM grXA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1736273327; x=1736878127; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=rfm+1IetAO5FbyYntngtxtsV8xI3UkPLOaXaqlCzAsg=; b=Osfhn7s99f8a8YxJcsGLh3oQ8e7DKvEbRUyPpOLeaytqK97Kfui1xozsS2rrIrlAfY bwR1tOV8zoH9f3PbXGTsBJbpBkjTCoyWoqw7DA3vwTgYPcmgmCu/iLC5NFUUtZH5QbRE iWms3e4UGpOFxxBFDdEWqCh6rHwV0tsS2ue8v54kynB4/h457KeO/QiSn9Rlhtt9e6oz rD4ahrPq4cIfWsryjas1ts5n2tpJBwNLfjJZw5TlYE1Yp+KXntLHjx52vAIJLNTY2dPU bfm0D9I0WI6DOVAIFLM0dzBipTrg8yT66bBrAuDw3LWbzr6GfpYmiqT7iJc9H5Yuw1JG fO2Q== X-Gm-Message-State: AOJu0Yxm4+/dx0E6gCr2FuUO6gxS0xE98Nfy0nYuCT4MAs/j0cCbjfUj pyLoGzN94WivBKmCHalK/l9Zi8B2bJSMnpeIBfKQct+cu0xH+5+//ZqeqA9m8r3jx2TYvnke6Qu YzHk= X-Gm-Gg: ASbGnct4r5p8d2CxFdKwVl313cCEe71xCJfLJv1Pa4RNZpcHdT/vWOZfvsa2HB0XP6m B6WBuQ8jIg/EeSga7tQwTkYT7hCSMBCHgjKnrKfp99myVRtFEyrxGA4TyFXRGCo4L1f1zLYr2F1 4UcljtWwi/Ek3YNya1Mea9F7R6ApmMFQ/kuHcg9wP8I8sV50f3b0dXjEL5wHJpaU2gNoukNjh1w 0gff9Ib+cBkOgHkYQIXC+qXoEMbJvJPDqoZpcVz/7IySw== X-Google-Smtp-Source: AGHT+IGkrGzpURqlB157kZJKiGjEWg+aAw9SG3jV1zPLYsMazVenNpwGoDIMLrm4BU2XhqLYW0sZ3A== X-Received: by 2002:a17:903:2342:b0:212:1ebf:9a03 with SMTP id d9443c01a7336-21a83f4b0c9mr183155ad.2.1736273327539; Tue, 07 Jan 2025 10:08:47 -0800 (PST) Received: from hexa.. ([98.142.47.158]) by smtp.gmail.com with ESMTPSA id d9443c01a7336-219dc9f4413sm314166335ad.172.2025.01.07.10.08.46 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 07 Jan 2025 10:08:47 -0800 (PST) From: Steve Sakoman To: openembedded-core@lists.openembedded.org Subject: [OE-core][kirkstone 02/19] gstreamer1.0: Backport fix for CVE-2024-47606 Date: Tue, 7 Jan 2025 10:08:20 -0800 Message-ID: X-Mailer: git-send-email 2.43.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Tue, 07 Jan 2025 18:08:53 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/209483 From: Vijay Anusuri Upstream-Status: Backport [https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/72af11b248b4cb60d3dfe4e9459eec0d20052c9b] Signed-off-by: Vijay Anusuri Signed-off-by: Steve Sakoman --- .../gstreamer1.0/CVE-2024-47606.patch | 56 +++++++++++++++++++ .../gstreamer/gstreamer1.0_1.20.7.bb | 1 + 2 files changed, 57 insertions(+) create mode 100644 meta/recipes-multimedia/gstreamer/gstreamer1.0/CVE-2024-47606.patch diff --git a/meta/recipes-multimedia/gstreamer/gstreamer1.0/CVE-2024-47606.patch b/meta/recipes-multimedia/gstreamer/gstreamer1.0/CVE-2024-47606.patch new file mode 100644 index 0000000000..6334af4226 --- /dev/null +++ b/meta/recipes-multimedia/gstreamer/gstreamer1.0/CVE-2024-47606.patch @@ -0,0 +1,56 @@ +From 72af11b248b4cb60d3dfe4e9459eec0d20052c9b Mon Sep 17 00:00:00 2001 +From: =?UTF-8?q?Sebastian=20Dr=C3=B6ge?= +Date: Thu, 26 Sep 2024 22:07:22 +0300 +Subject: [PATCH] allocator: Avoid integer overflow when allocating sysmem + +Thanks to Antonio Morales for finding and reporting the issue. + +Fixes GHSL-2024-166 +Fixes https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3851 + +Part-of: + +Upstream-Status: Backport [https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/72af11b248b4cb60d3dfe4e9459eec0d20052c9b] +CVE: CVE-2024-47606 +Signed-off-by: Vijay Anusuri +--- + gst/gstallocator.c | 14 ++++++++++++++ + 1 file changed, 14 insertions(+) + +diff --git a/gst/gstallocator.c b/gst/gstallocator.c +index f3cd20e..ff6dda4 100644 +--- a/gst/gstallocator.c ++++ b/gst/gstallocator.c +@@ -430,8 +430,20 @@ _sysmem_new_block (GstMemoryFlags flags, + /* ensure configured alignment */ + align |= gst_memory_alignment; + /* allocate more to compensate for alignment */ ++ if (align > G_MAXSIZE || maxsize > G_MAXSIZE - align) { ++ GST_CAT_WARNING (GST_CAT_MEMORY, ++ "Allocating %" G_GSIZE_FORMAT " bytes with alignment %" G_GSIZE_FORMAT ++ "x overflows", maxsize, align); ++ return NULL; ++ } + maxsize += align; + /* alloc header and data in one block */ ++ if (maxsize > G_MAXSIZE - sizeof (GstMemorySystem)) { ++ GST_CAT_WARNING (GST_CAT_MEMORY, ++ "Allocating %" G_GSIZE_FORMAT " bytes with alignment %" G_GSIZE_FORMAT ++ "x overflows", maxsize, align); ++ return NULL; ++ } + slice_size = sizeof (GstMemorySystem) + maxsize; + + mem = g_slice_alloc (slice_size); +@@ -481,6 +493,8 @@ _sysmem_copy (GstMemorySystem * mem, gssize offset, gsize size) + size = mem->mem.size > offset ? mem->mem.size - offset : 0; + + copy = _sysmem_new_block (0, size, mem->mem.align, 0, size); ++ if (!copy) ++ return NULL; + GST_CAT_DEBUG (GST_CAT_PERFORMANCE, + "memcpy %" G_GSIZE_FORMAT " memory %p -> %p", size, mem, copy); + memcpy (copy->data, mem->data + mem->mem.offset + offset, size); +-- +2.25.1 + diff --git a/meta/recipes-multimedia/gstreamer/gstreamer1.0_1.20.7.bb b/meta/recipes-multimedia/gstreamer/gstreamer1.0_1.20.7.bb index cf81620833..b95c67f586 100644 --- a/meta/recipes-multimedia/gstreamer/gstreamer1.0_1.20.7.bb +++ b/meta/recipes-multimedia/gstreamer/gstreamer1.0_1.20.7.bb @@ -21,6 +21,7 @@ SRC_URI = "https://gstreamer.freedesktop.org/src/gstreamer/gstreamer-${PV}.tar.x file://0002-tests-add-support-for-install-the-tests.patch;striplevel=3 \ file://0003-tests-use-a-dictionaries-for-environment.patch;striplevel=3 \ file://0004-tests-add-helper-script-to-run-the-installed_tests.patch;striplevel=3 \ + file://CVE-2024-47606.patch \ " SRC_URI[sha256sum] = "1757184a07b9703219e8b1961f81cb1dd64320d147fc045ac8eb499efbea79be" From patchwork Tue Jan 7 18:08:21 2025 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Steve Sakoman X-Patchwork-Id: 55148 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 9AB39E7719C for ; Tue, 7 Jan 2025 18:08:53 +0000 (UTC) Received: from mail-pl1-f177.google.com (mail-pl1-f177.google.com [209.85.214.177]) by mx.groups.io with SMTP id smtpd.web11.97.1736273331159006929 for ; Tue, 07 Jan 2025 10:08:51 -0800 Authentication-Results: mx.groups.io; dkim=pass header.i=@sakoman-com.20230601.gappssmtp.com header.s=20230601 header.b=Z+8r04Tq; spf=softfail (domain: sakoman.com, ip: 209.85.214.177, mailfrom: steve@sakoman.com) Received: by mail-pl1-f177.google.com with SMTP id d9443c01a7336-21680814d42so198578645ad.2 for ; Tue, 07 Jan 2025 10:08:51 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sakoman-com.20230601.gappssmtp.com; s=20230601; t=1736273330; x=1736878130; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=pfbf2OoH6CxGS5dASm310v5MJEoKsNdBaCjm8vYsG68=; b=Z+8r04TqeJ4uVP/tvXIi+HYDq860AS8ZYcsRYd52F2LvGmXKk0gCz5TFJ2724hYzf3 2lp8AI5/hMLX9e1JMGPZKpTsq7AajhQ/CIoXLDqB6zC994B80VanQXoqbmqCy/Vzum/i 0KhngTlk6j8+FFeLM+HEUWTmhA5RNciOEJOv9sNLL67PWadft1lmIQi5qDO4qQmZjDfE XigoXaVDEHBEpNmRYHPqH7U9WzGL0nlzVNI9/NOy1PL0/kvQgbls0GG4iscpzIzCwM9E CHtX3+Xu8ker5uDYhtbmb5hHyjwwnoEIZpYROAAGHAROn6jIC8k22TRAJWHCrToqZjuc Pftw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1736273330; x=1736878130; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=pfbf2OoH6CxGS5dASm310v5MJEoKsNdBaCjm8vYsG68=; b=U2PM0oOVTiR+/CQKvQj6mRLoGXK2evOaZQWrYm+oLLnFkcwZZ+5zS86Lcu6nqXSoXj 1ZD5Itv0USgSwDajR16/hBFZpjpvlHwwJTuj0Hz9V6+sXRHzXfWqiir8nFD9STEB5JPN 20qs375UjNC9qi4KxVnVU8lCjppqbiGONyMiDYd1KhcXVzoLn6SZBgNsvNYLbY0Mk1G+ To2CEm8XVdOBpHJlhvifrrcv3af/F2z1f3+ioo5Zbz+tNfQhjhOUyiBtHJRTsU33vN9u 1zOEOlIMWZskPEH0OB2pRzVVOpACnRSLOFI8hYrsllKfNLACNwY9E8KisVL3kGmQwze0 06UQ== X-Gm-Message-State: AOJu0Ywu+BJq4wJQwfvpp8HCAfNDM3hbcTflhbjssHvTzzo9qCIbvvlt rqfHybFiwh5XvDiB4Fn7IdkNSfgPvynmSssPMtXtCoVJ2KG+sSHVP7dbyCZSyjFy/v8sAgTfs/+ Mvnw= X-Gm-Gg: ASbGncszhr5oj0QqUYWBtL+Yc4l53OYsVhNPrf0ohMmfHDiNlxzIuhBXprDFq4hkKrW 8RhhVTT8fM05FrR3M/H7sOpWY7LzhSqHDu+LCI4ydnAXvQTboTNfpUKPyJdyHpkLiF5yzDbUF8D zZ+bd/MPpFZyN7ogyfK9X4ndl0EyG9fp+S+I54/F3QaQS/87LBH+iY7CsooOoOwz+Pnl2pvMs/q NAEFR9zYFbp63dZofRZnipzzmM9+rANaB6/uxqwSLpFxA== X-Google-Smtp-Source: AGHT+IGkDrOPJX/xbBPaVSl+WkhJskUcinE8ruV1hihAZUksx1Xye3EUdV1whklmP6v88vJuY11SQA== X-Received: by 2002:a17:903:11c9:b0:216:2426:767b with SMTP id d9443c01a7336-21a83f4250cmr172675ad.10.1736273329491; Tue, 07 Jan 2025 10:08:49 -0800 (PST) Received: from hexa.. ([98.142.47.158]) by smtp.gmail.com with ESMTPSA id d9443c01a7336-219dc9f4413sm314166335ad.172.2025.01.07.10.08.48 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 07 Jan 2025 10:08:49 -0800 (PST) From: Steve Sakoman To: openembedded-core@lists.openembedded.org Subject: [OE-core][kirkstone 03/19] gstreamer1.0-plugins-good: fix several CVE's Date: Tue, 7 Jan 2025 10:08:21 -0800 Message-ID: X-Mailer: git-send-email 2.43.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Tue, 07 Jan 2025 18:08:53 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/209484 From: Vijay Anusuri Fixes for below CVEs: CVE-2024-47537 CVE-2024-47539 CVE-2024-47543 CVE-2024-47544 CVE-2024-47545 CVE-2024-47546 CVE-2024-47596 CVE-2024-47597 CVE-2024-47598 Upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8059 Signed-off-by: Vijay Anusuri Signed-off-by: Steve Sakoman --- ...7544_47545_47546_47596_47597_47598-1.patch | 64 +++ ...544_47545_47546_47596_47597_47598-10.patch | 97 ++++ ...544_47545_47546_47596_47597_47598-11.patch | 36 ++ ...544_47545_47546_47596_47597_47598-12.patch | 37 ++ ...7544_47545_47546_47596_47597_47598-2.patch | 73 +++ ...7544_47545_47546_47596_47597_47598-3.patch | 36 ++ ...7544_47545_47546_47596_47597_47598-4.patch | 63 +++ ...7544_47545_47546_47596_47597_47598-5.patch | 44 ++ ...7544_47545_47546_47596_47597_47598-6.patch | 120 +++++ ...7544_47545_47546_47596_47597_47598-7.patch | 449 ++++++++++++++++++ ...7544_47545_47546_47596_47597_47598-8.patch | 56 +++ ...7544_47545_47546_47596_47597_47598-9.patch | 49 ++ ...4_47545_47546_47596_47597_47598-pre1.patch | 127 +++++ .../gstreamer1.0-plugins-good_1.20.7.bb | 13 + 14 files changed, 1264 insertions(+) create mode 100644 meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47537_47539_47543_47544_47545_47546_47596_47597_47598-1.patch create mode 100644 meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47537_47539_47543_47544_47545_47546_47596_47597_47598-10.patch create mode 100644 meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47537_47539_47543_47544_47545_47546_47596_47597_47598-11.patch create mode 100644 meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47537_47539_47543_47544_47545_47546_47596_47597_47598-12.patch create mode 100644 meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47537_47539_47543_47544_47545_47546_47596_47597_47598-2.patch create mode 100644 meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47537_47539_47543_47544_47545_47546_47596_47597_47598-3.patch create mode 100644 meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47537_47539_47543_47544_47545_47546_47596_47597_47598-4.patch create mode 100644 meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47537_47539_47543_47544_47545_47546_47596_47597_47598-5.patch create mode 100644 meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47537_47539_47543_47544_47545_47546_47596_47597_47598-6.patch create mode 100644 meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47537_47539_47543_47544_47545_47546_47596_47597_47598-7.patch create mode 100644 meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47537_47539_47543_47544_47545_47546_47596_47597_47598-8.patch create mode 100644 meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47537_47539_47543_47544_47545_47546_47596_47597_47598-9.patch create mode 100644 meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47537_47539_47543_47544_47545_47546_47596_47597_47598-pre1.patch diff --git a/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47537_47539_47543_47544_47545_47546_47596_47597_47598-1.patch b/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47537_47539_47543_47544_47545_47546_47596_47597_47598-1.patch new file mode 100644 index 0000000000..ded7e1b1c5 --- /dev/null +++ b/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47537_47539_47543_47544_47545_47546_47596_47597_47598-1.patch @@ -0,0 +1,64 @@ +From c3a2af94c652513ac1b1858295688ac88c5cc737 Mon Sep 17 00:00:00 2001 +From: Antonio Morales +Date: Thu, 26 Sep 2024 18:39:37 +0300 +Subject: [PATCH] qtdemux: Fix integer overflow when allocating the samples + table for fragmented MP4 + +This can lead to out of bounds writes and NULL pointer dereferences. + +Fixes GHSL-2024-094, GHSL-2024-237, GHSL-2024-241 +Fixes https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3839 + +Part-of: + +Upstream-Status: Backport [https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/c3a2af94c652513ac1b1858295688ac88c5cc737] +CVE: CVE-2024-47537 CVE-2024-47539 CVE-2024-47543 CVE-2024-47544 +CVE-2024-47545 CVE-2024-47546 CVE-2024-47596 CVE-2024-47597 CVE-2024-47598 +Signed-off-by: Vijay Anusuri +--- + subprojects/gst-plugins-good/gst/isomp4/qtdemux.c | 12 ++++++------ + 1 file changed, 6 insertions(+), 6 deletions(-) + +diff --git a/subprojects/gst-plugins-good/gst/isomp4/qtdemux.c b/subprojects/gst-plugins-good/gst/isomp4/qtdemux.c +index de8fae8b02ee..2fb5b2b014db 100644 +--- a/gst/isomp4/qtdemux.c ++++ b/gst/isomp4/qtdemux.c +@@ -3364,6 +3364,7 @@ qtdemux_parse_trun (GstQTDemux * qtdemux, GstByteReader * trun, + gint i; + guint8 *data; + guint entry_size, dur_offset, size_offset, flags_offset = 0, ct_offset = 0; ++ guint new_n_samples; + QtDemuxSample *sample; + gboolean ismv = FALSE; + gint64 initial_offset; +@@ -3475,14 +3476,13 @@ qtdemux_parse_trun (GstQTDemux * qtdemux, GstByteReader * trun, + goto fail; + data = (guint8 *) gst_byte_reader_peek_data_unchecked (trun); + +- if (stream->n_samples + samples_count >= +- QTDEMUX_MAX_SAMPLE_INDEX_SIZE / sizeof (QtDemuxSample)) ++ if (!g_uint_checked_add (&new_n_samples, stream->n_samples, samples_count) || ++ new_n_samples >= QTDEMUX_MAX_SAMPLE_INDEX_SIZE / sizeof (QtDemuxSample)) + goto index_too_big; + + GST_DEBUG_OBJECT (qtdemux, "allocating n_samples %u * %u (%.2f MB)", +- stream->n_samples + samples_count, (guint) sizeof (QtDemuxSample), +- (stream->n_samples + samples_count) * +- sizeof (QtDemuxSample) / (1024.0 * 1024.0)); ++ new_n_samples, (guint) sizeof (QtDemuxSample), ++ (new_n_samples) * sizeof (QtDemuxSample) / (1024.0 * 1024.0)); + + /* create a new array of samples if it's the first sample parsed */ + if (stream->n_samples == 0) { +@@ -3491,7 +3491,7 @@ qtdemux_parse_trun (GstQTDemux * qtdemux, GstByteReader * trun, + /* or try to reallocate it with space enough to insert the new samples */ + } else + stream->samples = g_try_renew (QtDemuxSample, stream->samples, +- stream->n_samples + samples_count); ++ new_n_samples); + if (stream->samples == NULL) + goto out_of_memory; + +-- +GitLab + diff --git a/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47537_47539_47543_47544_47545_47546_47596_47597_47598-10.patch b/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47537_47539_47543_47544_47545_47546_47596_47597_47598-10.patch new file mode 100644 index 0000000000..c864deb635 --- /dev/null +++ b/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47537_47539_47543_47544_47545_47546_47596_47597_47598-10.patch @@ -0,0 +1,97 @@ +From ed254790331a3fba2f68255a8f072552d622aac1 Mon Sep 17 00:00:00 2001 +From: =?UTF-8?q?Sebastian=20Dr=C3=B6ge?= +Date: Fri, 27 Sep 2024 10:39:30 +0300 +Subject: [PATCH] qtdemux: Actually handle errors returns from various + functions instead of ignoring them + +Ignoring them might cause the element to continue as if all is fine despite the +internal state being inconsistent. This can lead to all kinds of follow-up +issues, including memory safety issues. + +Thanks to Antonio Morales for finding and reporting the issue. + +Fixes GHSL-2024-245 +Fixes https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3847 + +Part-of: + +Upstream-Status: Backport [https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/ed254790331a3fba2f68255a8f072552d622aac1] +CVE: CVE-2024-47537 CVE-2024-47539 CVE-2024-47543 CVE-2024-47544 CVE-2024-47545 CVE-2024-47546 CVE-2024-47596 CVE-2024-47597 CVE-2024-47598 +Signed-off-by: Vijay Anusuri +--- + .../gst-plugins-good/gst/isomp4/qtdemux.c | 29 +++++++++++++++---- + 1 file changed, 23 insertions(+), 6 deletions(-) + +diff --git a/subprojects/gst-plugins-good/gst/isomp4/qtdemux.c b/subprojects/gst-plugins-good/gst/isomp4/qtdemux.c +index 5277952c5ea5..1de70f184f50 100644 +--- a/gst/isomp4/qtdemux.c ++++ b/gst/isomp4/qtdemux.c +@@ -4853,10 +4853,15 @@ gst_qtdemux_loop_state_header (GstQTDemux * qtdemux) + beach: + if (ret == GST_FLOW_EOS && (qtdemux->got_moov || qtdemux->media_caps)) { + /* digested all data, show what we have */ +- qtdemux_prepare_streams (qtdemux); ++ ret = qtdemux_prepare_streams (qtdemux); ++ if (ret != GST_FLOW_OK) ++ return ret; ++ + QTDEMUX_EXPOSE_LOCK (qtdemux); + ret = qtdemux_expose_streams (qtdemux); + QTDEMUX_EXPOSE_UNLOCK (qtdemux); ++ if (ret != GST_FLOW_OK) ++ return ret; + + qtdemux->state = QTDEMUX_STATE_MOVIE; + GST_DEBUG_OBJECT (qtdemux, "switching state to STATE_MOVIE (%d)", +@@ -7552,13 +7557,21 @@ gst_qtdemux_process_adapter (GstQTDemux * demux, gboolean force) + gst_qtdemux_stream_concat (demux, + demux->old_streams, demux->active_streams); + +- qtdemux_parse_moov (demux, data, demux->neededbytes); ++ if (!qtdemux_parse_moov (demux, data, demux->neededbytes)) { ++ ret = GST_FLOW_ERROR; ++ break; ++ } + qtdemux_node_dump (demux, demux->moov_node); + qtdemux_parse_tree (demux); +- qtdemux_prepare_streams (demux); ++ ret = qtdemux_prepare_streams (demux); ++ if (ret != GST_FLOW_OK) ++ break; ++ + QTDEMUX_EXPOSE_LOCK (demux); +- qtdemux_expose_streams (demux); ++ ret = qtdemux_expose_streams (demux); + QTDEMUX_EXPOSE_UNLOCK (demux); ++ if (ret != GST_FLOW_OK) ++ break; + + demux->got_moov = TRUE; + +@@ -7649,8 +7662,10 @@ gst_qtdemux_process_adapter (GstQTDemux * demux, gboolean force) + /* in MSS we need to expose the pads after the first moof as we won't get a moov */ + if (demux->variant == VARIANT_MSS_FRAGMENTED && !demux->exposed) { + QTDEMUX_EXPOSE_LOCK (demux); +- qtdemux_expose_streams (demux); ++ ret = qtdemux_expose_streams (demux); + QTDEMUX_EXPOSE_UNLOCK (demux); ++ if (ret != GST_FLOW_OK) ++ goto done; + } + + gst_qtdemux_check_send_pending_segment (demux); +@@ -13764,8 +13779,10 @@ qtdemux_prepare_streams (GstQTDemux * qtdemux) + + /* parse the initial sample for use in setting the frame rate cap */ + while (sample_num == 0 && sample_num < stream->n_samples) { +- if (!qtdemux_parse_samples (qtdemux, stream, sample_num)) ++ if (!qtdemux_parse_samples (qtdemux, stream, sample_num)) { ++ ret = GST_FLOW_ERROR; + break; ++ } + ++sample_num; + } + } +-- +GitLab + diff --git a/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47537_47539_47543_47544_47545_47546_47596_47597_47598-11.patch b/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47537_47539_47543_47544_47545_47546_47596_47597_47598-11.patch new file mode 100644 index 0000000000..7096a75a71 --- /dev/null +++ b/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47537_47539_47543_47544_47545_47546_47596_47597_47598-11.patch @@ -0,0 +1,36 @@ +From 3153fda823cb91b1031dae69738c6c5d526fb6e1 Mon Sep 17 00:00:00 2001 +From: =?UTF-8?q?Sebastian=20Dr=C3=B6ge?= +Date: Thu, 26 Sep 2024 19:16:19 +0300 +Subject: [PATCH] qtdemux: Check for invalid atom length when extracting Closed + Caption data + +Thanks to Antonio Morales for finding and reporting the issue. + +Fixes GHSL-2024-243 +Fixes https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3849 + +Part-of: + +Upstream-Status: Backport [https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/3153fda823cb91b1031dae69738c6c5d526fb6e1] +CVE: CVE-2024-47537 CVE-2024-47539 CVE-2024-47543 CVE-2024-47544 CVE-2024-47545 CVE-2024-47546 CVE-2024-47596 CVE-2024-47597 CVE-2024-47598 +Signed-off-by: Vijay Anusuri +--- + subprojects/gst-plugins-good/gst/isomp4/qtdemux.c | 2 +- + 1 file changed, 1 insertion(+), 1 deletion(-) + +diff --git a/subprojects/gst-plugins-good/gst/isomp4/qtdemux.c b/subprojects/gst-plugins-good/gst/isomp4/qtdemux.c +index 1de70f184f50..8850d09321e8 100644 +--- a/gst/isomp4/qtdemux.c ++++ b/gst/isomp4/qtdemux.c +@@ -5827,7 +5827,7 @@ extract_cc_from_data (QtDemuxStream * stream, const guint8 * data, gsize size, + goto invalid_cdat; + atom_length = QT_UINT32 (data); + fourcc = QT_FOURCC (data + 4); +- if (G_UNLIKELY (atom_length > size || atom_length == 8)) ++ if (G_UNLIKELY (atom_length > size || atom_length <= 8)) + goto invalid_cdat; + + GST_DEBUG_OBJECT (stream->pad, "here"); +-- +GitLab + diff --git a/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47537_47539_47543_47544_47545_47546_47596_47597_47598-12.patch b/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47537_47539_47543_47544_47545_47546_47596_47597_47598-12.patch new file mode 100644 index 0000000000..b379c2f88c --- /dev/null +++ b/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47537_47539_47543_47544_47545_47546_47596_47597_47598-12.patch @@ -0,0 +1,37 @@ +From 3ce1b812a9531611288af286b5dc6631a11e3f4a Mon Sep 17 00:00:00 2001 +From: =?UTF-8?q?Sebastian=20Dr=C3=B6ge?= +Date: Fri, 27 Sep 2024 00:31:36 +0300 +Subject: [PATCH] qtdemux: Add size check for parsing SMI / SEQH atom + +Thanks to Antonio Morales for finding and reporting the issue. + +Fixes GHSL-2024-244 +Fixes https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3853 + +Part-of: + +Upstream-Status: Backport [https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/3ce1b812a9531611288af286b5dc6631a11e3f4a] +CVE: CVE-2024-47537 CVE-2024-47539 CVE-2024-47543 CVE-2024-47544 CVE-2024-47545 CVE-2024-47546 CVE-2024-47596 CVE-2024-47597 CVE-2024-47598 +Signed-off-by: Vijay Anusuri +--- + subprojects/gst-plugins-good/gst/isomp4/qtdemux.c | 3 ++- + 1 file changed, 2 insertions(+), 1 deletion(-) + +diff --git a/subprojects/gst-plugins-good/gst/isomp4/qtdemux.c b/subprojects/gst-plugins-good/gst/isomp4/qtdemux.c +index 8850d09321e8..dc70287a8a9b 100644 +--- a/gst/isomp4/qtdemux.c ++++ b/gst/isomp4/qtdemux.c +@@ -10633,8 +10633,9 @@ qtdemux_parse_svq3_stsd_data (GstQTDemux * qtdemux, + GST_WARNING_OBJECT (qtdemux, "Unexpected second SEQH SMI atom " + " found, ignoring"); + } else { ++ /* Note: The size does *not* include the fourcc and the size field itself */ + seqh_size = QT_UINT32 (data + 4); +- if (seqh_size > 0) { ++ if (seqh_size > 0 && seqh_size <= size - 8) { + _seqh = gst_buffer_new_and_alloc (seqh_size); + gst_buffer_fill (_seqh, 0, data + 8, seqh_size); + } +-- +GitLab + diff --git a/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47537_47539_47543_47544_47545_47546_47596_47597_47598-2.patch b/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47537_47539_47543_47544_47545_47546_47596_47597_47598-2.patch new file mode 100644 index 0000000000..8c17c548df --- /dev/null +++ b/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47537_47539_47543_47544_47545_47546_47596_47597_47598-2.patch @@ -0,0 +1,73 @@ +From 812f175c580a2e702581859fd481c8f51d633508 Mon Sep 17 00:00:00 2001 +From: =?UTF-8?q?Sebastian=20Dr=C3=B6ge?= +Date: Thu, 26 Sep 2024 18:40:56 +0300 +Subject: [PATCH] qtdemux: Fix debug output during trun parsing + +Various integers are unsigned so print them as such. Also print the actual +allocation size if allocation fails, not only parts of it. + +Part-of: + +Upstream-Status: Backport [https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/812f175c580a2e702581859fd481c8f51d633508] +CVE: CVE-2024-47537 CVE-2024-47539 CVE-2024-47543 CVE-2024-47544 CVE-2024-47545 CVE-2024-47546 CVE-2024-47596 CVE-2024-47597 CVE-2024-47598 +Signed-off-by: Vijay Anusuri +--- + gst/isomp4/qtdemux.c | 17 +++++++++-------- + 1 file changed, 9 insertions(+), 8 deletions(-) + +diff --git a/gst/isomp4/qtdemux.c b/gst/isomp4/qtdemux.c +index e012ce1..0111912 100644 +--- a/gst/isomp4/qtdemux.c ++++ b/gst/isomp4/qtdemux.c +@@ -3228,8 +3228,8 @@ qtdemux_parse_trun (GstQTDemux * qtdemux, GstByteReader * trun, + gint64 initial_offset; + gint32 min_ct = 0; + +- GST_LOG_OBJECT (qtdemux, "parsing trun track-id %d; " +- "default dur %d, size %d, flags 0x%x, base offset %" G_GINT64_FORMAT ", " ++ GST_LOG_OBJECT (qtdemux, "parsing trun track-id %u; " ++ "default dur %u, size %u, flags 0x%x, base offset %" G_GINT64_FORMAT ", " + "decode ts %" G_GINT64_FORMAT, stream->track_id, d_sample_duration, + d_sample_size, d_sample_flags, *base_offset, decode_ts); + +@@ -3257,7 +3257,7 @@ qtdemux_parse_trun (GstQTDemux * qtdemux, GstByteReader * trun, + /* note this is really signed */ + if (!gst_byte_reader_get_int32_be (trun, &data_offset)) + goto fail; +- GST_LOG_OBJECT (qtdemux, "trun data offset %d", data_offset); ++ GST_LOG_OBJECT (qtdemux, "trun data offset %u", data_offset); + /* default base offset = first byte of moof */ + if (*base_offset == -1) { + GST_LOG_OBJECT (qtdemux, "base_offset at moof"); +@@ -3279,7 +3279,7 @@ qtdemux_parse_trun (GstQTDemux * qtdemux, GstByteReader * trun, + + GST_LOG_OBJECT (qtdemux, "running offset now %" G_GINT64_FORMAT, + *running_offset); +- GST_LOG_OBJECT (qtdemux, "trun offset %d, flags 0x%x, entries %d", ++ GST_LOG_OBJECT (qtdemux, "trun offset %u, flags 0x%x, entries %u", + data_offset, flags, samples_count); + + if (flags & TR_FIRST_SAMPLE_FLAGS) { +@@ -3499,14 +3499,15 @@ fail: + } + out_of_memory: + { +- GST_WARNING_OBJECT (qtdemux, "failed to allocate %d samples", +- stream->n_samples); ++ GST_WARNING_OBJECT (qtdemux, "failed to allocate %u + %u samples", ++ stream->n_samples, samples_count); + return FALSE; + } + index_too_big: + { +- GST_WARNING_OBJECT (qtdemux, "not allocating index of %d samples, would " +- "be larger than %uMB (broken file?)", stream->n_samples, ++ GST_WARNING_OBJECT (qtdemux, ++ "not allocating index of %u + %u samples, would " ++ "be larger than %uMB (broken file?)", stream->n_samples, samples_count, + QTDEMUX_MAX_SAMPLE_INDEX_SIZE >> 20); + return FALSE; + } +-- +2.25.1 + diff --git a/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47537_47539_47543_47544_47545_47546_47596_47597_47598-3.patch b/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47537_47539_47543_47544_47545_47546_47596_47597_47598-3.patch new file mode 100644 index 0000000000..217387a4cd --- /dev/null +++ b/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47537_47539_47543_47544_47545_47546_47596_47597_47598-3.patch @@ -0,0 +1,36 @@ +From eb7f9331c2294bc28a549b79c9f931c3e6c6bc44 Mon Sep 17 00:00:00 2001 +From: =?UTF-8?q?Sebastian=20Dr=C3=B6ge?= +Date: Thu, 26 Sep 2024 18:41:39 +0300 +Subject: [PATCH] qtdemux: Don't iterate over all trun entries if none of the + flags are set + +Nothing would be printed anyway. + +Part-of: + +Upstream-Status: Backport [https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/eb7f9331c2294bc28a549b79c9f931c3e6c6bc44] +CVE: CVE-2024-47537 CVE-2024-47539 CVE-2024-47543 CVE-2024-47544 CVE-2024-47545 CVE-2024-47546 CVE-2024-47596 CVE-2024-47597 CVE-2024-47598 +Signed-off-by: Vijay Anusuri +--- + subprojects/gst-plugins-good/gst/isomp4/qtdemux_dump.c | 5 +++++ + 1 file changed, 5 insertions(+) + +diff --git a/subprojects/gst-plugins-good/gst/isomp4/qtdemux_dump.c b/subprojects/gst-plugins-good/gst/isomp4/qtdemux_dump.c +index 22da35e9e7ad..297b580ef038 100644 +--- a/gst/isomp4/qtdemux_dump.c ++++ b/gst/isomp4/qtdemux_dump.c +@@ -836,6 +836,11 @@ qtdemux_dump_trun (GstQTDemux * qtdemux, GstByteReader * data, int depth) + GST_LOG ("%*s first-sample-flags: %u", depth, "", first_sample_flags); + } + ++ /* Nothing to print below */ ++ if ((flags & (TR_SAMPLE_DURATION | TR_SAMPLE_SIZE | TR_SAMPLE_FLAGS | ++ TR_COMPOSITION_TIME_OFFSETS)) == 0) ++ return TRUE; ++ + for (i = 0; i < samples_count; i++) { + if (flags & TR_SAMPLE_DURATION) { + if (!gst_byte_reader_get_uint32_be (data, &sample_duration)) +-- +GitLab + diff --git a/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47537_47539_47543_47544_47545_47546_47596_47597_47598-4.patch b/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47537_47539_47543_47544_47545_47546_47596_47597_47598-4.patch new file mode 100644 index 0000000000..8b5bddbf5b --- /dev/null +++ b/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47537_47539_47543_47544_47545_47546_47596_47597_47598-4.patch @@ -0,0 +1,63 @@ +From 1def2965d8da8cc74ab0036d7f8d59e81e676cad Mon Sep 17 00:00:00 2001 +From: =?UTF-8?q?Sebastian=20Dr=C3=B6ge?= +Date: Fri, 27 Sep 2024 15:50:54 +0300 +Subject: [PATCH] qtdemux: Check sizes of stsc/stco/stts before trying to merge + entries + +Thanks to Antonio Morales for finding and reporting the issue. + +Fixes GHSL-2024-246 +Fixes https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3854 + +Part-of: + +Upstream-Status: Backport [https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/1def2965d8da8cc74ab0036d7f8d59e81e676cad] +CVE: CVE-2024-47537 CVE-2024-47539 CVE-2024-47543 CVE-2024-47544 CVE-2024-47545 CVE-2024-47546 CVE-2024-47596 CVE-2024-47597 CVE-2024-47598 +Signed-off-by: Vijay Anusuri +--- + .../gst-plugins-good/gst/isomp4/qtdemux.c | 22 +++++++++++++++++++ + 1 file changed, 22 insertions(+) + +diff --git a/subprojects/gst-plugins-good/gst/isomp4/qtdemux.c b/subprojects/gst-plugins-good/gst/isomp4/qtdemux.c +index 0996292d0789..c14d939ee3c9 100644 +--- a/gst/isomp4/qtdemux.c ++++ b/gst/isomp4/qtdemux.c +@@ -10033,6 +10033,21 @@ qtdemux_merge_sample_table (GstQTDemux * qtdemux, QtDemuxStream * stream) + return; + } + ++ if (gst_byte_reader_get_remaining (&stream->stts) < 8) { ++ GST_DEBUG_OBJECT (qtdemux, "Too small stts"); ++ return; ++ } ++ ++ if (stream->stco.size < 8) { ++ GST_DEBUG_OBJECT (qtdemux, "Too small stco"); ++ return; ++ } ++ ++ if (stream->n_samples_per_chunk == 0) { ++ GST_DEBUG_OBJECT (qtdemux, "No samples per chunk"); ++ return; ++ } ++ + /* Parse the stts to get the sample duration and number of samples */ + gst_byte_reader_skip_unchecked (&stream->stts, 4); + stts_duration = gst_byte_reader_get_uint32_be_unchecked (&stream->stts); +@@ -10044,6 +10059,13 @@ qtdemux_merge_sample_table (GstQTDemux * qtdemux, QtDemuxStream * stream) + GST_DEBUG_OBJECT (qtdemux, "sample_duration %d, num_chunks %u", stts_duration, + num_chunks); + ++ if (gst_byte_reader_get_remaining (&stream->stsc) < ++ stream->n_samples_per_chunk * 3 * 4 + ++ (stream->n_samples_per_chunk - 1) * 4) { ++ GST_DEBUG_OBJECT (qtdemux, "Too small stsc"); ++ return; ++ } ++ + /* Now parse stsc, convert chunks into single samples and generate a + * new stsc, stts and stsz from this information */ + gst_byte_writer_init (&stsc); +-- +GitLab + diff --git a/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47537_47539_47543_47544_47545_47546_47596_47597_47598-5.patch b/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47537_47539_47543_47544_47545_47546_47596_47597_47598-5.patch new file mode 100644 index 0000000000..02d9cb278c --- /dev/null +++ b/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47537_47539_47543_47544_47545_47546_47596_47597_47598-5.patch @@ -0,0 +1,44 @@ +From 314945426c7105ad90f44a188037bc43bb3b0300 Mon Sep 17 00:00:00 2001 +From: =?UTF-8?q?Sebastian=20Dr=C3=B6ge?= +Date: Thu, 26 Sep 2024 09:20:28 +0300 +Subject: [PATCH] qtdemux: Make sure only an even number of bytes is processed + when handling CEA608 data + +An odd number of bytes would lead to out of bound reads and writes, and doesn't +make any sense as CEA608 comes in byte pairs. + +Strip off any leftover bytes and assume everything before that is valid. + +Thanks to Antonio Morales for finding and reporting the issue. + +Fixes GHSL-2024-195 +Fixes https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3841 + +Part-of: + +Upstream-Status: Backport [https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/314945426c7105ad90f44a188037bc43bb3b0300] +CVE: CVE-2024-47537 CVE-2024-47539 CVE-2024-47543 CVE-2024-47544 CVE-2024-47545 CVE-2024-47546 CVE-2024-47596 CVE-2024-47597 CVE-2024-47598 +Signed-off-by: Vijay Anusuri +--- + subprojects/gst-plugins-good/gst/isomp4/qtdemux.c | 5 +++++ + 1 file changed, 5 insertions(+) + +diff --git a/subprojects/gst-plugins-good/gst/isomp4/qtdemux.c b/subprojects/gst-plugins-good/gst/isomp4/qtdemux.c +index c14d939ee3c9..b9f466991adf 100644 +--- a/gst/isomp4/qtdemux.c ++++ b/gst/isomp4/qtdemux.c +@@ -6145,6 +6145,11 @@ convert_to_s334_1a (const guint8 * ccpair, guint8 ccpair_size, guint field, + guint8 *storage; + gsize i; + ++ /* Strip off any leftover odd bytes and assume everything before is valid */ ++ if (ccpair_size % 2 != 0) { ++ ccpair_size -= 1; ++ } ++ + /* We are converting from pairs to triplets */ + *res = ccpair_size / 2 * 3; + storage = g_malloc (*res); +-- +GitLab + diff --git a/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47537_47539_47543_47544_47545_47546_47596_47597_47598-6.patch b/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47537_47539_47543_47544_47545_47546_47596_47597_47598-6.patch new file mode 100644 index 0000000000..5ff18baa7e --- /dev/null +++ b/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47537_47539_47543_47544_47545_47546_47596_47597_47598-6.patch @@ -0,0 +1,120 @@ +From 8ef08a7a41da987aa630082df355ea651aa09132 Mon Sep 17 00:00:00 2001 +From: =?UTF-8?q?Sebastian=20Dr=C3=B6ge?= +Date: Thu, 26 Sep 2024 14:17:02 +0300 +Subject: [PATCH] qtdemux: Make sure enough data is available before reading + wave header node + +Thanks to Antonio Morales for finding and reporting the issue. + +Fixes GHSL-2024-236 +Fixes https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3843 + +Part-of: + +Upstream-Status: Backport [https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/8ef08a7a41da987aa630082df355ea651aa09132] +CVE: CVE-2024-47537 CVE-2024-47539 CVE-2024-47543 CVE-2024-47544 CVE-2024-47545 CVE-2024-47546 CVE-2024-47596 CVE-2024-47597 CVE-2024-47598 +Signed-off-by: Vijay Anusuri +--- + .../gst-plugins-good/gst/isomp4/qtdemux.c | 84 ++++++++++--------- + 1 file changed, 45 insertions(+), 39 deletions(-) + +diff --git a/subprojects/gst-plugins-good/gst/isomp4/qtdemux.c b/subprojects/gst-plugins-good/gst/isomp4/qtdemux.c +index b9f466991adf..55ba59152c7a 100644 +--- a/gst/isomp4/qtdemux.c ++++ b/gst/isomp4/qtdemux.c +@@ -13697,47 +13697,53 @@ qtdemux_parse_trak (GstQTDemux * qtdemux, GNode * trak) + } else { + guint32 datalen = QT_UINT32 (stsd_entry_data + offset + 16); + const guint8 *data = stsd_entry_data + offset + 16; +- GNode *wavenode; +- GNode *waveheadernode; +- +- wavenode = g_node_new ((guint8 *) data); +- if (qtdemux_parse_node (qtdemux, wavenode, data, datalen)) { +- const guint8 *waveheader; +- guint32 headerlen; +- +- waveheadernode = qtdemux_tree_get_child_by_type (wavenode, fourcc); +- if (waveheadernode) { +- waveheader = (const guint8 *) waveheadernode->data; +- headerlen = QT_UINT32 (waveheader); +- +- if (headerlen > 8) { +- gst_riff_strf_auds *header = NULL; +- GstBuffer *headerbuf; +- GstBuffer *extra; +- +- waveheader += 8; +- headerlen -= 8; +- +- headerbuf = gst_buffer_new_and_alloc (headerlen); +- gst_buffer_fill (headerbuf, 0, waveheader, headerlen); +- +- if (gst_riff_parse_strf_auds (GST_ELEMENT_CAST (qtdemux), +- headerbuf, &header, &extra)) { +- gst_caps_unref (entry->caps); +- /* FIXME: Need to do something with the channel reorder map */ +- entry->caps = +- gst_riff_create_audio_caps (header->format, NULL, header, +- extra, NULL, NULL, NULL); +- +- if (extra) +- gst_buffer_unref (extra); +- g_free (header); ++ ++ if (len < datalen || len - datalen < offset + 16) { ++ GST_WARNING_OBJECT (qtdemux, "Not enough data for waveheadernode"); ++ } else { ++ GNode *wavenode; ++ GNode *waveheadernode; ++ ++ wavenode = g_node_new ((guint8 *) data); ++ if (qtdemux_parse_node (qtdemux, wavenode, data, datalen)) { ++ const guint8 *waveheader; ++ guint32 headerlen; ++ ++ waveheadernode = ++ qtdemux_tree_get_child_by_type (wavenode, fourcc); ++ if (waveheadernode) { ++ waveheader = (const guint8 *) waveheadernode->data; ++ headerlen = QT_UINT32 (waveheader); ++ ++ if (headerlen > 8) { ++ gst_riff_strf_auds *header = NULL; ++ GstBuffer *headerbuf; ++ GstBuffer *extra; ++ ++ waveheader += 8; ++ headerlen -= 8; ++ ++ headerbuf = gst_buffer_new_and_alloc (headerlen); ++ gst_buffer_fill (headerbuf, 0, waveheader, headerlen); ++ ++ if (gst_riff_parse_strf_auds (GST_ELEMENT_CAST (qtdemux), ++ headerbuf, &header, &extra)) { ++ gst_caps_unref (entry->caps); ++ /* FIXME: Need to do something with the channel reorder map */ ++ entry->caps = ++ gst_riff_create_audio_caps (header->format, NULL, ++ header, extra, NULL, NULL, NULL); ++ ++ if (extra) ++ gst_buffer_unref (extra); ++ g_free (header); ++ } + } +- } +- } else +- GST_DEBUG ("Didn't find waveheadernode for this codec"); ++ } else ++ GST_DEBUG ("Didn't find waveheadernode for this codec"); ++ } ++ g_node_destroy (wavenode); + } +- g_node_destroy (wavenode); + } + } else if (esds) { + gst_qtdemux_handle_esds (qtdemux, stream, entry, esds, +-- +GitLab + diff --git a/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47537_47539_47543_47544_47545_47546_47596_47597_47598-7.patch b/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47537_47539_47543_47544_47545_47546_47596_47597_47598-7.patch new file mode 100644 index 0000000000..41cf4c7d00 --- /dev/null +++ b/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47537_47539_47543_47544_47545_47546_47596_47597_47598-7.patch @@ -0,0 +1,449 @@ +From fe9d5d37234aca04fef7248184177168905a7a69 Mon Sep 17 00:00:00 2001 +From: =?UTF-8?q?Sebastian=20Dr=C3=B6ge?= +Date: Fri, 27 Sep 2024 00:12:57 +0300 +Subject: [PATCH] qtdemux: Fix length checks and offsets in stsd entry parsing + +Thanks to Antonio Morales for finding and reporting the issue. + +Fixes GHSL-2024-242 +Fixes https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3845 + +Part-of: + +Upstream-Status: Backport [https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/fe9d5d37234aca04fef7248184177168905a7a69] +CVE: CVE-2024-47537 CVE-2024-47539 CVE-2024-47543 CVE-2024-47544 CVE-2024-47545 CVE-2024-47546 CVE-2024-47596 CVE-2024-47597 CVE-2024-47598 +Signed-off-by: Vijay Anusuri +--- + .../gst-plugins-good/gst/isomp4/qtdemux.c | 218 +++++++----------- + 1 file changed, 79 insertions(+), 139 deletions(-) + +diff --git a/subprojects/gst-plugins-good/gst/isomp4/qtdemux.c b/subprojects/gst-plugins-good/gst/isomp4/qtdemux.c +index 55ba59152c7a..fb157552eb75 100644 +--- a/gst/isomp4/qtdemux.c ++++ b/gst/isomp4/qtdemux.c +@@ -12237,43 +12237,35 @@ qtdemux_parse_trak (GstQTDemux * qtdemux, GNode * trak) + case FOURCC_avc1: + case FOURCC_avc3: + { +- guint len = QT_UINT32 (stsd_entry_data); ++ guint32 len = QT_UINT32 (stsd_entry_data); + len = len <= 0x56 ? 0 : len - 0x56; + const guint8 *avc_data = stsd_entry_data + 0x56; + + /* find avcC */ +- while (len >= 0x8) { +- guint size; +- +- if (QT_UINT32 (avc_data) <= 0x8) +- size = 0; +- else if (QT_UINT32 (avc_data) <= len) +- size = QT_UINT32 (avc_data) - 0x8; +- else +- size = len - 0x8; ++ while (len >= 8) { ++ guint32 size = QT_UINT32 (avc_data); + +- /* No real data, so skip */ +- if (size < 1) { +- len -= 8; +- avc_data += 8; +- continue; +- } ++ if (size < 8 || size > len) ++ break; + +- switch (QT_FOURCC (avc_data + 0x4)) { ++ switch (QT_FOURCC (avc_data + 4)) { + case FOURCC_avcC: + { + /* parse, if found */ + GstBuffer *buf; + ++ if (size < 8 + 1) ++ break; ++ + GST_DEBUG_OBJECT (qtdemux, "found avcC codec_data in stsd"); + + /* First 4 bytes are the length of the atom, the next 4 bytes + * are the fourcc, the next 1 byte is the version, and the + * subsequent bytes are profile_tier_level structure like data. */ + gst_codec_utils_h264_caps_set_level_and_profile (entry->caps, +- avc_data + 8 + 1, size - 1); +- buf = gst_buffer_new_and_alloc (size); +- gst_buffer_fill (buf, 0, avc_data + 0x8, size); ++ avc_data + 8 + 1, size - 8 - 1); ++ buf = gst_buffer_new_and_alloc (size - 8); ++ gst_buffer_fill (buf, 0, avc_data + 8, size - 8); + gst_caps_set_simple (entry->caps, + "codec_data", GST_TYPE_BUFFER, buf, NULL); + gst_buffer_unref (buf); +@@ -12284,6 +12276,9 @@ qtdemux_parse_trak (GstQTDemux * qtdemux, GNode * trak) + { + GstBuffer *buf; + ++ if (size < 8 + 40 + 1) ++ break; ++ + GST_DEBUG_OBJECT (qtdemux, "found strf codec_data in stsd"); + + /* First 4 bytes are the length of the atom, the next 4 bytes +@@ -12291,17 +12286,14 @@ qtdemux_parse_trak (GstQTDemux * qtdemux, GNode * trak) + * next 1 byte is the version, and the + * subsequent bytes are sequence parameter set like data. */ + +- size -= 40; /* we'll be skipping BITMAPINFOHEADER */ +- if (size > 1) { +- gst_codec_utils_h264_caps_set_level_and_profile +- (entry->caps, avc_data + 8 + 40 + 1, size - 1); ++ gst_codec_utils_h264_caps_set_level_and_profile ++ (entry->caps, avc_data + 8 + 40 + 1, size - 8 - 40 - 1); + +- buf = gst_buffer_new_and_alloc (size); +- gst_buffer_fill (buf, 0, avc_data + 8 + 40, size); +- gst_caps_set_simple (entry->caps, +- "codec_data", GST_TYPE_BUFFER, buf, NULL); +- gst_buffer_unref (buf); +- } ++ buf = gst_buffer_new_and_alloc (size - 8 - 40); ++ gst_buffer_fill (buf, 0, avc_data + 8 + 40, size - 8 - 40); ++ gst_caps_set_simple (entry->caps, ++ "codec_data", GST_TYPE_BUFFER, buf, NULL); ++ gst_buffer_unref (buf); + break; + } + case FOURCC_btrt: +@@ -12309,11 +12301,11 @@ qtdemux_parse_trak (GstQTDemux * qtdemux, GNode * trak) + guint avg_bitrate, max_bitrate; + + /* bufferSizeDB, maxBitrate and avgBitrate - 4 bytes each */ +- if (size < 12) ++ if (size < 8 + 12) + break; + +- max_bitrate = QT_UINT32 (avc_data + 0xc); +- avg_bitrate = QT_UINT32 (avc_data + 0x10); ++ max_bitrate = QT_UINT32 (avc_data + 8 + 4); ++ avg_bitrate = QT_UINT32 (avc_data + 8 + 8); + + if (!max_bitrate && !avg_bitrate) + break; +@@ -12345,8 +12337,8 @@ qtdemux_parse_trak (GstQTDemux * qtdemux, GNode * trak) + break; + } + +- len -= size + 8; +- avc_data += size + 8; ++ len -= size; ++ avc_data += size; + } + + break; +@@ -12357,44 +12349,36 @@ qtdemux_parse_trak (GstQTDemux * qtdemux, GNode * trak) + case FOURCC_dvh1: + case FOURCC_dvhe: + { +- guint len = QT_UINT32 (stsd_entry_data); ++ guint32 len = QT_UINT32 (stsd_entry_data); + len = len <= 0x56 ? 0 : len - 0x56; + const guint8 *hevc_data = stsd_entry_data + 0x56; + + /* find hevc */ +- while (len >= 0x8) { +- guint size; +- +- if (QT_UINT32 (hevc_data) <= 0x8) +- size = 0; +- else if (QT_UINT32 (hevc_data) <= len) +- size = QT_UINT32 (hevc_data) - 0x8; +- else +- size = len - 0x8; ++ while (len >= 8) { ++ guint32 size = QT_UINT32 (hevc_data); + +- /* No real data, so skip */ +- if (size < 1) { +- len -= 8; +- hevc_data += 8; +- continue; +- } ++ if (size < 8 || size > len) ++ break; + +- switch (QT_FOURCC (hevc_data + 0x4)) { ++ switch (QT_FOURCC (hevc_data + 4)) { + case FOURCC_hvcC: + { + /* parse, if found */ + GstBuffer *buf; + ++ if (size < 8 + 1) ++ break; ++ + GST_DEBUG_OBJECT (qtdemux, "found hvcC codec_data in stsd"); + + /* First 4 bytes are the length of the atom, the next 4 bytes + * are the fourcc, the next 1 byte is the version, and the + * subsequent bytes are sequence parameter set like data. */ + gst_codec_utils_h265_caps_set_level_tier_and_profile +- (entry->caps, hevc_data + 8 + 1, size - 1); ++ (entry->caps, hevc_data + 8 + 1, size - 8 - 1); + +- buf = gst_buffer_new_and_alloc (size); +- gst_buffer_fill (buf, 0, hevc_data + 0x8, size); ++ buf = gst_buffer_new_and_alloc (size - 8); ++ gst_buffer_fill (buf, 0, hevc_data + 8, size - 8); + gst_caps_set_simple (entry->caps, + "codec_data", GST_TYPE_BUFFER, buf, NULL); + gst_buffer_unref (buf); +@@ -12403,8 +12387,8 @@ qtdemux_parse_trak (GstQTDemux * qtdemux, GNode * trak) + default: + break; + } +- len -= size + 8; +- hevc_data += size + 8; ++ len -= size; ++ hevc_data += size; + } + break; + } +@@ -12784,36 +12768,25 @@ qtdemux_parse_trak (GstQTDemux * qtdemux, GNode * trak) + } + case FOURCC_vc_1: + { +- guint len = QT_UINT32 (stsd_entry_data); ++ guint32 len = QT_UINT32 (stsd_entry_data); + len = len <= 0x56 ? 0 : len - 0x56; + const guint8 *vc1_data = stsd_entry_data + 0x56; + + /* find dvc1 */ + while (len >= 8) { +- guint size; +- +- if (QT_UINT32 (vc1_data) <= 8) +- size = 0; +- else if (QT_UINT32 (vc1_data) <= len) +- size = QT_UINT32 (vc1_data) - 8; +- else +- size = len - 8; ++ guint32 size = QT_UINT32 (vc1_data); + +- /* No real data, so skip */ +- if (size < 1) { +- len -= 8; +- vc1_data += 8; +- continue; +- } ++ if (size < 8 || size > len) ++ break; + +- switch (QT_FOURCC (vc1_data + 0x4)) { ++ switch (QT_FOURCC (vc1_data + 4)) { + case GST_MAKE_FOURCC ('d', 'v', 'c', '1'): + { + GstBuffer *buf; + + GST_DEBUG_OBJECT (qtdemux, "found dvc1 codec_data in stsd"); +- buf = gst_buffer_new_and_alloc (size); +- gst_buffer_fill (buf, 0, vc1_data + 8, size); ++ buf = gst_buffer_new_and_alloc (size - 8); ++ gst_buffer_fill (buf, 0, vc1_data + 8, size - 8); + gst_caps_set_simple (entry->caps, + "codec_data", GST_TYPE_BUFFER, buf, NULL); + gst_buffer_unref (buf); +@@ -12822,36 +12795,25 @@ qtdemux_parse_trak (GstQTDemux * qtdemux, GNode * trak) + default: + break; + } +- len -= size + 8; +- vc1_data += size + 8; ++ len -= size; ++ vc1_data += size; + } + break; + } + case FOURCC_av01: + { +- guint len = QT_UINT32 (stsd_entry_data); ++ guint32 len = QT_UINT32 (stsd_entry_data); + len = len <= 0x56 ? 0 : len - 0x56; + const guint8 *av1_data = stsd_entry_data + 0x56; + + /* find av1C */ +- while (len >= 0x8) { +- guint size; +- +- if (QT_UINT32 (av1_data) <= 0x8) +- size = 0; +- else if (QT_UINT32 (av1_data) <= len) +- size = QT_UINT32 (av1_data) - 0x8; +- else +- size = len - 0x8; ++ while (len >= 8) { ++ guint32 size = QT_UINT32 (av1_data); + +- /* No real data, so skip */ +- if (size < 1) { +- len -= 8; +- av1_data += 8; +- continue; +- } ++ if (size < 8 || size > len) ++ break; + +- switch (QT_FOURCC (av1_data + 0x4)) { ++ switch (QT_FOURCC (av1_data + 4)) { + case FOURCC_av1C: + { + /* parse, if found */ +@@ -12861,7 +12823,7 @@ qtdemux_parse_trak (GstQTDemux * qtdemux, GNode * trak) + "found av1C codec_data in stsd of size %d", size); + + /* not enough data, just ignore and hope for the best */ +- if (size < 4) ++ if (size < 8 + 4) + break; + + /* Content is: +@@ -12910,9 +12872,9 @@ qtdemux_parse_trak (GstQTDemux * qtdemux, GNode * trak) + (gint) (pres_delay_field & 0x0F) + 1, NULL); + } + +- buf = gst_buffer_new_and_alloc (size); ++ buf = gst_buffer_new_and_alloc (size - 8); + GST_BUFFER_FLAG_SET (buf, GST_BUFFER_FLAG_HEADER); +- gst_buffer_fill (buf, 0, av1_data + 8, size); ++ gst_buffer_fill (buf, 0, av1_data + 8, size - 8); + gst_caps_set_simple (entry->caps, + "codec_data", GST_TYPE_BUFFER, buf, NULL); + gst_buffer_unref (buf); +@@ -12930,8 +12892,8 @@ qtdemux_parse_trak (GstQTDemux * qtdemux, GNode * trak) + break; + } + +- len -= size + 8; +- av1_data += size + 8; ++ len -= size; ++ av1_data += size; + } + + break; +@@ -12942,29 +12904,18 @@ qtdemux_parse_trak (GstQTDemux * qtdemux, GNode * trak) + * vp08, vp09, and vp10 fourcc. */ + case FOURCC_vp09: + { +- guint len = QT_UINT32 (stsd_entry_data); ++ guint32 len = QT_UINT32 (stsd_entry_data); + len = len <= 0x56 ? 0 : len - 0x56; + const guint8 *vpcc_data = stsd_entry_data + 0x56; + + /* find vpcC */ +- while (len >= 0x8) { +- guint size; +- +- if (QT_UINT32 (vpcc_data) <= 0x8) +- size = 0; +- else if (QT_UINT32 (vpcc_data) <= len) +- size = QT_UINT32 (vpcc_data) - 0x8; +- else +- size = len - 0x8; ++ while (len >= 8) { ++ guint32 size = QT_UINT32 (vpcc_data); + +- /* No real data, so skip */ +- if (size < 1) { +- len -= 8; +- vpcc_data += 8; +- continue; +- } ++ if (size < 8 || size > len) ++ break; + +- switch (QT_FOURCC (vpcc_data + 0x4)) { ++ switch (QT_FOURCC (vpcc_data + 4)) { + case FOURCC_vpcC: + { + const gchar *profile_str = NULL; +@@ -12980,7 +12931,7 @@ qtdemux_parse_trak (GstQTDemux * qtdemux, GNode * trak) + + /* the meaning of "size" is length of the atom body, excluding + * atom length and fourcc fields */ +- if (size < 12) ++ if (size < 8 + 12) + break; + + /* Content is: +@@ -13086,8 +13037,8 @@ qtdemux_parse_trak (GstQTDemux * qtdemux, GNode * trak) + break; + } + +- len -= size + 8; +- vpcc_data += size + 8; ++ len -= size; ++ vpcc_data += size; + } + + break; +@@ -13428,7 +13379,7 @@ qtdemux_parse_trak (GstQTDemux * qtdemux, GNode * trak) + } + case FOURCC_wma_: + { +- guint len = QT_UINT32 (stsd_entry_data); ++ guint32 len = QT_UINT32 (stsd_entry_data); + len = len <= offset ? 0 : len - offset; + const guint8 *wfex_data = stsd_entry_data + offset; + const gchar *codec_name = NULL; +@@ -13453,21 +13404,10 @@ qtdemux_parse_trak (GstQTDemux * qtdemux, GNode * trak) + + /* find wfex */ + while (len >= 8) { +- guint size; ++ guint32 size = QT_UINT32 (wfex_data); + +- if (QT_UINT32 (wfex_data) <= 0x8) +- size = 0; +- else if (QT_UINT32 (wfex_data) <= len) +- size = QT_UINT32 (wfex_data) - 8; +- else +- size = len - 8; +- +- /* No real data, so skip */ +- if (size < 1) { +- len -= 8; +- wfex_data += 8; +- continue; +- } ++ if (size < 8 || size > len) ++ break; + + switch (QT_FOURCC (wfex_data + 4)) { + case GST_MAKE_FOURCC ('w', 'f', 'e', 'x'): +@@ -13512,12 +13452,12 @@ qtdemux_parse_trak (GstQTDemux * qtdemux, GNode * trak) + "width", G_TYPE_INT, wfex.wBitsPerSample, + "depth", G_TYPE_INT, wfex.wBitsPerSample, NULL); + +- if (size > wfex.cbSize) { ++ if (size > 8 + wfex.cbSize) { + GstBuffer *buf; + +- buf = gst_buffer_new_and_alloc (size - wfex.cbSize); ++ buf = gst_buffer_new_and_alloc (size - 8 - wfex.cbSize); + gst_buffer_fill (buf, 0, wfex_data + 8 + wfex.cbSize, +- size - wfex.cbSize); ++ size - 8 - wfex.cbSize); + gst_caps_set_simple (entry->caps, + "codec_data", GST_TYPE_BUFFER, buf, NULL); + gst_buffer_unref (buf); +@@ -13534,8 +13474,8 @@ qtdemux_parse_trak (GstQTDemux * qtdemux, GNode * trak) + default: + break; + } +- len -= size + 8; +- wfex_data += size + 8; ++ len -= size; ++ wfex_data += size; + } + break; + } +-- +GitLab + diff --git a/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47537_47539_47543_47544_47545_47546_47596_47597_47598-8.patch b/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47537_47539_47543_47544_47545_47546_47596_47597_47598-8.patch new file mode 100644 index 0000000000..a84575199e --- /dev/null +++ b/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47537_47539_47543_47544_47545_47546_47596_47597_47598-8.patch @@ -0,0 +1,56 @@ +From da3b4e903ae990193988a873368bdd1865350521 Mon Sep 17 00:00:00 2001 +From: =?UTF-8?q?Sebastian=20Dr=C3=B6ge?= +Date: Fri, 27 Sep 2024 09:47:50 +0300 +Subject: [PATCH] qtdemux: Fix error handling when parsing cenc sample groups + fails + +Thanks to Antonio Morales for finding and reporting the issue. + +Fixes GHSL-2024-238, GHSL-2024-239, GHSL-2024-240 +Fixes https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3846 + +Part-of: + +Upstream-Status: Backport [https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/da3b4e903ae990193988a873368bdd1865350521] +CVE: CVE-2024-47537 CVE-2024-47539 CVE-2024-47543 CVE-2024-47544 CVE-2024-47545 CVE-2024-47546 CVE-2024-47596 CVE-2024-47597 CVE-2024-47598 +Signed-off-by: Vijay Anusuri +--- + subprojects/gst-plugins-good/gst/isomp4/qtdemux.c | 9 +++++++-- + 1 file changed, 7 insertions(+), 2 deletions(-) + +diff --git a/subprojects/gst-plugins-good/gst/isomp4/qtdemux.c b/subprojects/gst-plugins-good/gst/isomp4/qtdemux.c +index 94ce75b2d42d..e7a79be45b29 100644 +--- a/gst/isomp4/qtdemux.c ++++ b/gst/isomp4/qtdemux.c +@@ -11404,12 +11404,15 @@ qtdemux_parse_trak (GstQTDemux * qtdemux, GNode * trak) + if (stream->subtype != FOURCC_soun) { + GST_ERROR_OBJECT (qtdemux, + "Unexpeced stsd type 'aavd' outside 'soun' track"); ++ goto corrupt_file; + } else { + /* encrypted audio with sound sample description v0 */ + GNode *enc = qtdemux_tree_get_child_by_type (stsd, fourcc); + stream->protected = TRUE; +- if (!qtdemux_parse_protection_aavd (qtdemux, stream, enc, &fourcc)) ++ if (!qtdemux_parse_protection_aavd (qtdemux, stream, enc, &fourcc)) { + GST_ERROR_OBJECT (qtdemux, "Failed to parse protection scheme info"); ++ goto corrupt_file; ++ } + } + } + +@@ -11418,8 +11421,10 @@ qtdemux_parse_trak (GstQTDemux * qtdemux, GNode * trak) + * with the same type */ + GNode *enc = qtdemux_tree_get_child_by_type (stsd, fourcc); + stream->protected = TRUE; +- if (!qtdemux_parse_protection_scheme_info (qtdemux, stream, enc, &fourcc)) ++ if (!qtdemux_parse_protection_scheme_info (qtdemux, stream, enc, &fourcc)) { + GST_ERROR_OBJECT (qtdemux, "Failed to parse protection scheme info"); ++ goto corrupt_file; ++ } + } + + if (stream->subtype == FOURCC_vide) { +-- +GitLab + diff --git a/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47537_47539_47543_47544_47545_47546_47596_47597_47598-9.patch b/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47537_47539_47543_47544_47545_47546_47596_47597_47598-9.patch new file mode 100644 index 0000000000..af0d1ed633 --- /dev/null +++ b/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47537_47539_47543_47544_47545_47546_47596_47597_47598-9.patch @@ -0,0 +1,49 @@ +From 20503e5dd90e21ef170488b2a8b8529ae8a4cab9 Mon Sep 17 00:00:00 2001 +From: =?UTF-8?q?Sebastian=20Dr=C3=B6ge?= +Date: Fri, 27 Sep 2024 10:38:50 +0300 +Subject: [PATCH] qtdemux: Make sure there are enough offsets to read when + parsing samples + +While this specific case is also caught when initializing co_chunk, the error +is ignored in various places and calling into the function would lead to out of +bounds reads if the error message doesn't cause the pipeline to be shut down +fast enough. + +To avoid this, no matter what, make sure enough offsets are available when +parsing them. While this is potentially slower, the same is already done in the +non-chunks_are_samples case. + +Thanks to Antonio Morales for finding and reporting the issue. + +Fixes GHSL-2024-245 +Fixes https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3847 + +Part-of: + +Upstream-Status: Backport [https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/20503e5dd90e21ef170488b2a8b8529ae8a4cab9] +CVE: CVE-2024-47537 CVE-2024-47539 CVE-2024-47543 CVE-2024-47544 CVE-2024-47545 CVE-2024-47546 CVE-2024-47596 CVE-2024-47597 CVE-2024-47598 +Signed-off-by: Vijay Anusuri +--- + subprojects/gst-plugins-good/gst/isomp4/qtdemux.c | 6 +++--- + 1 file changed, 3 insertions(+), 3 deletions(-) + +diff --git a/subprojects/gst-plugins-good/gst/isomp4/qtdemux.c b/subprojects/gst-plugins-good/gst/isomp4/qtdemux.c +index e7a79be45b29..5277952c5ea5 100644 +--- a/gst/isomp4/qtdemux.c ++++ b/gst/isomp4/qtdemux.c +@@ -10070,9 +10070,9 @@ qtdemux_parse_samples (GstQTDemux * qtdemux, QtDemuxStream * stream, guint32 n) + goto done; + } + +- cur->offset = +- qt_atom_parser_get_offset_unchecked (&stream->co_chunk, +- stream->co_size); ++ if (!qt_atom_parser_get_offset (&stream->co_chunk, ++ stream->co_size, &cur->offset)) ++ goto corrupt_file; + + GST_LOG_OBJECT (qtdemux, "Created entry %d with offset " + "%" G_GUINT64_FORMAT, j, cur->offset); +-- +GitLab + diff --git a/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47537_47539_47543_47544_47545_47546_47596_47597_47598-pre1.patch b/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47537_47539_47543_47544_47545_47546_47596_47597_47598-pre1.patch new file mode 100644 index 0000000000..8238498d38 --- /dev/null +++ b/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47537_47539_47543_47544_47545_47546_47596_47597_47598-pre1.patch @@ -0,0 +1,127 @@ +From d4bab55077c6a77bd80cb12a8b0d28020ef412a9 Mon Sep 17 00:00:00 2001 +From: =?UTF-8?q?Sebastian=20Dr=C3=B6ge?= +Date: Tue, 24 Sep 2024 09:50:34 +0300 +Subject: [PATCH] qtdemux: Skip zero-sized boxes instead of stopping to look at + further boxes + +A zero-sized box is not really a problem and can be skipped to look at any +possibly following ones. + +BMD ATEM devices specifically write a zero-sized bmdc box in the sample +description, followed by the avcC box in case of h264. Previously the avcC box +would simply not be read at all and the file would be unplayable. + +Part-of: + +Upstream-Status: Backport [https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/d4bab55077c6a77bd80cb12a8b0d28020ef412a9] +CVE: CVE-2024-47537 CVE-2024-47539 CVE-2024-47543 CVE-2024-47544 +CVE-2024-47545 CVE-2024-47546 CVE-2024-47596 CVE-2024-47597 +CVE-2024-47598 #Dependency Patch +Signed-off-by: Vijay Anusuri +--- + .../gst-plugins-good/gst/isomp4/qtdemux.c | 54 ++++++++++++------- + 1 file changed, 36 insertions(+), 18 deletions(-) + +diff --git a/subprojects/gst-plugins-good/gst/isomp4/qtdemux.c b/subprojects/gst-plugins-good/gst/isomp4/qtdemux.c +index 32df6eeb85c1..5e5c21758058 100644 +--- a/gst/isomp4/qtdemux.c ++++ b/gst/isomp4/qtdemux.c +@@ -12226,9 +12226,12 @@ qtdemux_parse_trak (GstQTDemux * qtdemux, GNode * trak) + else + size = len - 0x8; + +- if (size < 1) +- /* No real data, so break out */ +- break; ++ /* No real data, so skip */ ++ if (size < 1) { ++ len -= 8; ++ avc_data += 8; ++ continue; ++ } + + switch (QT_FOURCC (avc_data + 0x4)) { + case FOURCC_avcC: +@@ -12343,9 +12346,12 @@ qtdemux_parse_trak (GstQTDemux * qtdemux, GNode * trak) + else + size = len - 0x8; + +- if (size < 1) +- /* No real data, so break out */ +- break; ++ /* No real data, so skip */ ++ if (size < 1) { ++ len -= 8; ++ hevc_data += 8; ++ continue; ++ } + + switch (QT_FOURCC (hevc_data + 0x4)) { + case FOURCC_hvcC: +@@ -12767,9 +12773,12 @@ qtdemux_parse_trak (GstQTDemux * qtdemux, GNode * trak) + else + size = len - 8; + +- if (size < 1) +- /* No real data, so break out */ +- break; ++ /* No real data, so skip */ ++ if (size < 1) { ++ len -= 8; ++ vc1_data += 8; ++ continue; ++ } + + switch (QT_FOURCC (vc1_data + 0x4)) { + case GST_MAKE_FOURCC ('d', 'v', 'c', '1'): +@@ -12809,9 +12818,12 @@ qtdemux_parse_trak (GstQTDemux * qtdemux, GNode * trak) + else + size = len - 0x8; + +- if (size < 1) +- /* No real data, so break out */ +- break; ++ /* No real data, so skip */ ++ if (size < 1) { ++ len -= 8; ++ av1_data += 8; ++ continue; ++ } + + switch (QT_FOURCC (av1_data + 0x4)) { + case FOURCC_av1C: +@@ -12919,9 +12931,12 @@ qtdemux_parse_trak (GstQTDemux * qtdemux, GNode * trak) + else + size = len - 0x8; + +- if (size < 1) +- /* No real data, so break out */ +- break; ++ /* No real data, so skip */ ++ if (size < 1) { ++ len -= 8; ++ vpcc_data += 8; ++ continue; ++ } + + switch (QT_FOURCC (vpcc_data + 0x4)) { + case FOURCC_vpcC: +@@ -13421,9 +13436,12 @@ qtdemux_parse_trak (GstQTDemux * qtdemux, GNode * trak) + else + size = len - 8; + +- if (size < 1) +- /* No real data, so break out */ +- break; ++ /* No real data, so skip */ ++ if (size < 1) { ++ len -= 8; ++ wfex_data += 8; ++ continue; ++ } + + switch (QT_FOURCC (wfex_data + 4)) { + case GST_MAKE_FOURCC ('w', 'f', 'e', 'x'): +-- +GitLab + diff --git a/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good_1.20.7.bb b/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good_1.20.7.bb index dfb0c0f342..98cef84081 100644 --- a/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good_1.20.7.bb +++ b/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good_1.20.7.bb @@ -6,6 +6,19 @@ BUGTRACKER = "https://gitlab.freedesktop.org/gstreamer/gst-plugins-good/-/issues SRC_URI = "https://gstreamer.freedesktop.org/src/gst-plugins-good/gst-plugins-good-${PV}.tar.xz \ file://0001-qt-include-ext-qt-gstqtgl.h-instead-of-gst-gl-gstglf.patch \ + file://CVE-2024-47537_47539_47543_47544_47545_47546_47596_47597_47598-pre1.patch \ + file://CVE-2024-47537_47539_47543_47544_47545_47546_47596_47597_47598-1.patch \ + file://CVE-2024-47537_47539_47543_47544_47545_47546_47596_47597_47598-2.patch \ + file://CVE-2024-47537_47539_47543_47544_47545_47546_47596_47597_47598-3.patch \ + file://CVE-2024-47537_47539_47543_47544_47545_47546_47596_47597_47598-4.patch \ + file://CVE-2024-47537_47539_47543_47544_47545_47546_47596_47597_47598-5.patch \ + file://CVE-2024-47537_47539_47543_47544_47545_47546_47596_47597_47598-6.patch \ + file://CVE-2024-47537_47539_47543_47544_47545_47546_47596_47597_47598-7.patch \ + file://CVE-2024-47537_47539_47543_47544_47545_47546_47596_47597_47598-8.patch \ + file://CVE-2024-47537_47539_47543_47544_47545_47546_47596_47597_47598-9.patch \ + file://CVE-2024-47537_47539_47543_47544_47545_47546_47596_47597_47598-10.patch \ + file://CVE-2024-47537_47539_47543_47544_47545_47546_47596_47597_47598-11.patch \ + file://CVE-2024-47537_47539_47543_47544_47545_47546_47596_47597_47598-12.patch \ " SRC_URI[sha256sum] = "599f093cc833a1e346939ab6e78a3f8046855b6da13520aae80dd385434f4ab2" From patchwork Tue Jan 7 18:08:22 2025 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Steve Sakoman X-Patchwork-Id: 55144 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 74D50E77197 for ; Tue, 7 Jan 2025 18:08:53 +0000 (UTC) Received: from mail-pj1-f51.google.com (mail-pj1-f51.google.com [209.85.216.51]) by mx.groups.io with SMTP id smtpd.web10.90.1736273332058159535 for ; Tue, 07 Jan 2025 10:08:52 -0800 Authentication-Results: mx.groups.io; dkim=pass header.i=@sakoman-com.20230601.gappssmtp.com header.s=20230601 header.b=uCSN+2eA; spf=softfail (domain: sakoman.com, ip: 209.85.216.51, mailfrom: steve@sakoman.com) Received: by mail-pj1-f51.google.com with SMTP id 98e67ed59e1d1-2f441904a42so23612638a91.1 for ; Tue, 07 Jan 2025 10:08:52 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sakoman-com.20230601.gappssmtp.com; s=20230601; t=1736273331; x=1736878131; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=fGonQZ90AysuJYBXCz29QFaLNxOQ8xzL21uchY0agTg=; b=uCSN+2eAA1MuQvG2uGRYdU8r+csS0GZQuMPPEA5PVnwy8cZ/CAJz0YdruRrzWydlvf lEqwZJujn6u+RC/nbUV8g1GLfoXJG1I22i2uY9uz7yoPyinKob7HPyGKHhGvytC58NQ3 OixBh+1TazhvXTKj9EVwXa3JD6dVv7tdi0+lGYklVZ073t+5vepooTxlfdhQovIoM0CJ WwEdHA3VaLBtinY5mgV6GpVUgvtp2jQYVwTQNlewrZn23jMGWCKW1zjDmeukg/8xYNNP TslNF/lczdNLalpOnLi3OGhxaD5Z/mgrYFHCgo+pQYHEvKlvhVCrPgtUy9JTpbIVw1qD ZB2A== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1736273331; x=1736878131; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=fGonQZ90AysuJYBXCz29QFaLNxOQ8xzL21uchY0agTg=; b=QZO8qtEQXqr3THEvlGYk7QINiEkkQity8Yig/NHx4I1SVellE4F1lEBm89lfKc8iFD MbJObAj6kJ7XclqOv3ayuNGzJD/S2RkXsT2d9Vd98/x/Y/lIBDQmp1pX1k6uUxsrk6yw jRpCoD6Q0nh/xlfAoj+OFPCSCWPKny9pz7m4Lx7HlvYcqLw3amsv9xHZIPnh902C5S6R TepNf/06tqg/67fzeX1g2MuLAhVb4xhe7BcIncXMhJKK/TK7AlGYwjTMfzzbEH7jn95y LDxV9HLXwOKAMtjLXPo7lKVDmcGNOHy24a3YBR6WVMtkKHqucpD74U5o/S/BEF+9jMra WHNw== X-Gm-Message-State: AOJu0YzMzEci/9ZFWgN9ZQackCmgtkXvdjeV7oiGJ7uVkkUxM6CAO29d swaQeQy8XzdsIfsKbkspJF21jLcIQRfdg56w8ij3g8P+Y65/LeTko+EWIdxlFVMKFo0W0lG97fB FG3g= X-Gm-Gg: ASbGncsidIrY8PqOWez6vr+U/Bu8ABjx9EcJCdVit0CG8Y7izA+2TZUPbH7mhQfmDqH bLKlA9u9aa2utKIIsW0nAbtargiAqgCTYEwCghPiiVijFq/2vpyxHvq2VBiJ3CRvadLAPljRtpI HUdHXjHFYDdSaYHEcaIm4QXTVizLgBrDNNPKa7j1AWCuzy50xBFj3EtwRh75xsJGmzQ8uJljcNO li8uHWOBXDTPbTUkGEXmMLDipu/xpZ3K9FF9gvxUPtiww== X-Google-Smtp-Source: AGHT+IHzRU3wYT1OF7Mm6R6uU/9ApPiAEKGWuDvw8EN+3oYod9LYvxLyh7cny4CaVNxSdqxaSscPrA== X-Received: by 2002:a17:90b:5484:b0:2ee:d63f:d77 with SMTP id 98e67ed59e1d1-2f452e1c26fmr94883876a91.9.1736273331295; Tue, 07 Jan 2025 10:08:51 -0800 (PST) Received: from hexa.. ([98.142.47.158]) by smtp.gmail.com with ESMTPSA id d9443c01a7336-219dc9f4413sm314166335ad.172.2025.01.07.10.08.50 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 07 Jan 2025 10:08:50 -0800 (PST) From: Steve Sakoman To: openembedded-core@lists.openembedded.org Subject: [OE-core][kirkstone 04/19] gstreamer1.0-plugins-good: Fix for CVE-2024-47599 Date: Tue, 7 Jan 2025 10:08:22 -0800 Message-ID: <2fe3b2846bd65a44e4823f04693a4579a71a862a.1736273200.git.steve@sakoman.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Tue, 07 Jan 2025 18:08:53 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/209485 From: Vijay Anusuri Upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8040 Signed-off-by: Vijay Anusuri Signed-off-by: Steve Sakoman --- .../CVE-2024-47599.patch | 99 +++++++++++++++++++ .../gstreamer1.0-plugins-good_1.20.7.bb | 1 + 2 files changed, 100 insertions(+) create mode 100644 meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47599.patch diff --git a/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47599.patch b/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47599.patch new file mode 100644 index 0000000000..8dde992bcb --- /dev/null +++ b/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47599.patch @@ -0,0 +1,99 @@ +From 3cdf206f4fc5a9860bfe1437ed3d01e7d23c6c3e Mon Sep 17 00:00:00 2001 +From: =?UTF-8?q?Sebastian=20Dr=C3=B6ge?= +Date: Mon, 30 Sep 2024 16:22:19 +0300 +Subject: [PATCH] jpegdec: Directly error out on negotiation failures + +Thanks to Antonio Morales for finding and reporting the issue. + +Fixes GHSL-2024-247 +Fixes https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3862 + +Part-of: + +Upstream-Status: Backport [https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/3cdf206f4fc5a9860bfe1437ed3d01e7d23c6c3e] +CVE: CVE-2024-47599 +Signed-off-by: Vijay Anusuri +--- + .../gst-plugins-good/ext/jpeg/gstjpegdec.c | 22 ++++++++++++++----- + 1 file changed, 17 insertions(+), 5 deletions(-) + +diff --git a/subprojects/gst-plugins-good/ext/jpeg/gstjpegdec.c b/subprojects/gst-plugins-good/ext/jpeg/gstjpegdec.c +index 51bc2d14bf0e..7523419835ee 100644 +--- a/ext/jpeg/gstjpegdec.c ++++ b/ext/jpeg/gstjpegdec.c +@@ -1068,13 +1068,14 @@ gst_jpeg_turbo_parse_ext_fmt_convert (GstJpegDec * dec, gint * clrspc) + } + #endif + +-static void ++static gboolean + gst_jpeg_dec_negotiate (GstJpegDec * dec, gint width, gint height, gint clrspc, + gboolean interlaced) + { + GstVideoCodecState *outstate; + GstVideoInfo *info; + GstVideoFormat format; ++ gboolean res; + + #ifdef JCS_EXTENSIONS + if (dec->format_convert) { +@@ -1104,7 +1105,7 @@ gst_jpeg_dec_negotiate (GstJpegDec * dec, gint width, gint height, gint clrspc, + height == GST_VIDEO_INFO_HEIGHT (info) && + format == GST_VIDEO_INFO_FORMAT (info)) { + gst_video_codec_state_unref (outstate); +- return; ++ return TRUE; + } + gst_video_codec_state_unref (outstate); + } +@@ -1118,6 +1119,8 @@ gst_jpeg_dec_negotiate (GstJpegDec * dec, gint width, gint height, gint clrspc, + outstate = + gst_video_decoder_set_output_state (GST_VIDEO_DECODER (dec), format, + width, height, dec->input_state); ++ if (!outstate) ++ return FALSE; + + switch (clrspc) { + case JCS_RGB: +@@ -1142,10 +1145,12 @@ gst_jpeg_dec_negotiate (GstJpegDec * dec, gint width, gint height, gint clrspc, + + gst_video_codec_state_unref (outstate); + +- gst_video_decoder_negotiate (GST_VIDEO_DECODER (dec)); ++ res = gst_video_decoder_negotiate (GST_VIDEO_DECODER (dec)); + + GST_DEBUG_OBJECT (dec, "max_v_samp_factor=%d", dec->cinfo.max_v_samp_factor); + GST_DEBUG_OBJECT (dec, "max_h_samp_factor=%d", dec->cinfo.max_h_samp_factor); ++ ++ return res; + } + + static GstFlowReturn +@@ -1425,8 +1430,9 @@ gst_jpeg_dec_handle_frame (GstVideoDecoder * bdec, GstVideoCodecFrame * frame) + num_fields = 1; + } + +- gst_jpeg_dec_negotiate (dec, width, output_height, +- dec->cinfo.jpeg_color_space, num_fields == 2); ++ if (!gst_jpeg_dec_negotiate (dec, width, output_height, ++ dec->cinfo.jpeg_color_space, num_fields == 2)) ++ goto negotiation_failed; + + state = gst_video_decoder_get_output_state (bdec); + ret = gst_video_decoder_allocate_output_frame (bdec, frame); +@@ -1558,6 +1564,12 @@ map_failed: + ret = GST_FLOW_ERROR; + goto exit; + } ++negotiation_failed: ++ { ++ GST_ELEMENT_ERROR (dec, CORE, NEGOTIATION, (NULL), ("failed to negotiate")); ++ ret = GST_FLOW_NOT_NEGOTIATED; ++ goto exit; ++ } + decode_error: + { + gchar err_msg[JMSG_LENGTH_MAX]; +-- +GitLab + diff --git a/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good_1.20.7.bb b/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good_1.20.7.bb index 98cef84081..0daae0b519 100644 --- a/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good_1.20.7.bb +++ b/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good_1.20.7.bb @@ -19,6 +19,7 @@ SRC_URI = "https://gstreamer.freedesktop.org/src/gst-plugins-good/gst-plugins-go file://CVE-2024-47537_47539_47543_47544_47545_47546_47596_47597_47598-10.patch \ file://CVE-2024-47537_47539_47543_47544_47545_47546_47596_47597_47598-11.patch \ file://CVE-2024-47537_47539_47543_47544_47545_47546_47596_47597_47598-12.patch \ + file://CVE-2024-47599.patch \ " SRC_URI[sha256sum] = "599f093cc833a1e346939ab6e78a3f8046855b6da13520aae80dd385434f4ab2" From patchwork Tue Jan 7 18:08:23 2025 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Steve Sakoman X-Patchwork-Id: 55152 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 8DD36E77197 for ; Tue, 7 Jan 2025 18:09:03 +0000 (UTC) Received: from mail-pl1-f170.google.com (mail-pl1-f170.google.com [209.85.214.170]) by mx.groups.io with SMTP id smtpd.web11.100.1736273334173479746 for ; Tue, 07 Jan 2025 10:08:54 -0800 Authentication-Results: mx.groups.io; dkim=pass header.i=@sakoman-com.20230601.gappssmtp.com header.s=20230601 header.b=GI+20rF6; spf=softfail (domain: sakoman.com, ip: 209.85.214.170, mailfrom: steve@sakoman.com) Received: by mail-pl1-f170.google.com with SMTP id d9443c01a7336-21649a7bcdcso226266575ad.1 for ; Tue, 07 Jan 2025 10:08:54 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sakoman-com.20230601.gappssmtp.com; s=20230601; t=1736273333; x=1736878133; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=+sMd6YPSebHpsizVsi+N4gjXcQM7puB0zSLpyEWAdmI=; b=GI+20rF6pv/aWWg251Pr6TuQvFEA4G1Yxqdaw3bkaPs7cPpsJS3bhdi/Dak30Y2yu2 tFtnzXpDzGrnsvyuIiJGPujvD2zeoE+2vCcDXDktHEGPUN714l2kjjvvgYS4e1tMjPYg v/fKHU7Xu+axrtEXb5+UWr4h+y2XMn0WinrXxvKpbj04Km8IpZPlLBGTT8mpAJEWXqGj DQxaqM4NzHpYS8I73KQ9ao3IiCKIZibKG8YWGjL9/cbhmBkJK3QWllrfWZottPgykZ1X zO4DpWVinmryM+zkt0WdBD6o/bynvSP+Rv1glo20e+PykL8gQgjheFOrRY/oOb2KS02m 0vkg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1736273333; x=1736878133; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=+sMd6YPSebHpsizVsi+N4gjXcQM7puB0zSLpyEWAdmI=; b=mQsm2p3PIfyyD+/BGeCDhQHy/vI8AiHoQOyEuzYwhsU0wBULrGJfszAY4Q+hfox+N+ bwkrOVN2Xuo0f3xabAa3VYQYoxAqOdbBscWk5QjjLt4s263BjyO2rz5r6CmWFWf8demj jsKt7+RBE4PNSZ4URg1nSQm85eZ7HjgOvEtfuxQXbJWzhUYhvmp8vNgeIHYfWx0rnsTY 2W5Iiuk17OjY3Qj7wyJrmQp5Na8TAvSmWJ2ZI/sJtu9VHiyZCYzBELxduYshHfzrsGpq Ftta0qqSEJy+IxOrgJFPc7jTlnZZygcArtbERL5ElEPfHOCjOP6FoVFQOKduOWSMHp/c INkQ== X-Gm-Message-State: AOJu0YyMXg6lLNPxEys27fsgfA7X2GSpPrT2/C6VFc1rLlt1dVsVYW6h sqlPShNvG0urcWsZmKTLJgXCwb9VhCpAkUh4l57NMeY1UpsvuHrlzecRy4XOlNorgz6Hegx5HqT gaps= X-Gm-Gg: ASbGncuUf10yLbiEZse3A+A1vzTuf6sOgO+/nUYi7UB//KLX+usLewIoRu8YIUjuaA+ MSRJTHa1lHTdf1Z4BmDjld4phWjCIfyZD3/qcDS64uqdLje5GjQJhjY0yQc5WGqU9mHJ84h36Bt 71S75duXdENs5ZSnRvbuaG+E8vuKrV7DRDpnFE0TdHjXCn7qbPqYAD1moWZvoCQW8X6B/jsAGA/ uLVcPqLJGyXP3EXGsJ/vkL/bBtpU+Y3fFdz3bg0ZAWVPw== X-Google-Smtp-Source: AGHT+IEuSnaHubLDHJon6Z5mBDU8gBPxNn5dluK7J2viX6uMffV//pgnvJR/89+qeFWVJSOn7IVQoA== X-Received: by 2002:a17:903:2b10:b0:216:325f:6f2b with SMTP id d9443c01a7336-21a83f54ef1mr110275ad.21.1736273333294; Tue, 07 Jan 2025 10:08:53 -0800 (PST) Received: from hexa.. ([98.142.47.158]) by smtp.gmail.com with ESMTPSA id d9443c01a7336-219dc9f4413sm314166335ad.172.2025.01.07.10.08.52 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 07 Jan 2025 10:08:52 -0800 (PST) From: Steve Sakoman To: openembedded-core@lists.openembedded.org Subject: [OE-core][kirkstone 05/19] gstreamer1.0-plugins-good: Fix multiple CVEs Date: Tue, 7 Jan 2025 10:08:23 -0800 Message-ID: <867db6984551f5026034fddd11421e76a844ebc5.1736273200.git.steve@sakoman.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Tue, 07 Jan 2025 18:09:03 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/209486 From: Vijay Anusuri Fixes for below CVEs: CVE-2024-47540 CVE-2024-47601 CVE-2024-47602 CVE-2024-47603 CVE-2024-47834 Upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8057 Signed-off-by: Vijay Anusuri Signed-off-by: Steve Sakoman --- ...2024-47540_47601_47602_47603_47834-1.patch | 56 +++++++++++++++++++ ...2024-47540_47601_47602_47603_47834-2.patch | 31 ++++++++++ ...2024-47540_47601_47602_47603_47834-3.patch | 39 +++++++++++++ ...2024-47540_47601_47602_47603_47834-4.patch | 47 ++++++++++++++++ ...2024-47540_47601_47602_47603_47834-5.patch | 48 ++++++++++++++++ ...2024-47540_47601_47602_47603_47834-6.patch | 39 +++++++++++++ ...2024-47540_47601_47602_47603_47834-7.patch | 40 +++++++++++++ .../gstreamer1.0-plugins-good_1.20.7.bb | 7 +++ 8 files changed, 307 insertions(+) create mode 100644 meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47540_47601_47602_47603_47834-1.patch create mode 100644 meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47540_47601_47602_47603_47834-2.patch create mode 100644 meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47540_47601_47602_47603_47834-3.patch create mode 100644 meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47540_47601_47602_47603_47834-4.patch create mode 100644 meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47540_47601_47602_47603_47834-5.patch create mode 100644 meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47540_47601_47602_47603_47834-6.patch create mode 100644 meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47540_47601_47602_47603_47834-7.patch diff --git a/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47540_47601_47602_47603_47834-1.patch b/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47540_47601_47602_47603_47834-1.patch new file mode 100644 index 0000000000..865759916f --- /dev/null +++ b/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47540_47601_47602_47603_47834-1.patch @@ -0,0 +1,56 @@ +From 008f0d52408f57f0704d5639b72db2f330b8f003 Mon Sep 17 00:00:00 2001 +From: =?UTF-8?q?Sebastian=20Dr=C3=B6ge?= +Date: Mon, 30 Sep 2024 16:32:48 +0300 +Subject: [PATCH] matroskademux: Only unmap GstMapInfo in WavPack header + extraction error paths if previously mapped + +Thanks to Antonio Morales for finding and reporting the issue. + +Fixes GHSL-2024-197 +Fixes https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3863 + +Part-of: + +Upstream-Status: Backport [https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/008f0d52408f57f0704d5639b72db2f330b8f003] +CVE: CVE-2024-47540 CVE-2024-47601 CVE-2024-47602 CVE-2024-47603 CVE-2024-47834 +Signed-off-by: Vijay Anusuri +--- + subprojects/gst-plugins-good/gst/matroska/matroska-demux.c | 4 ++-- + 1 file changed, 2 insertions(+), 2 deletions(-) + +diff --git a/subprojects/gst-plugins-good/gst/matroska/matroska-demux.c b/subprojects/gst-plugins-good/gst/matroska/matroska-demux.c +index 9b3cf83adb87..35e60b71470d 100644 +--- a/gst/matroska/matroska-demux.c ++++ b/gst/matroska/matroska-demux.c +@@ -3885,7 +3885,6 @@ gst_matroska_demux_add_wvpk_header (GstElement * element, + GstMatroskaTrackAudioContext *audiocontext = + (GstMatroskaTrackAudioContext *) stream; + GstBuffer *newbuf = NULL; +- GstMapInfo map, outmap; + guint8 *buf_data, *data; + Wavpack4Header wvh; + +@@ -3902,11 +3901,11 @@ gst_matroska_demux_add_wvpk_header (GstElement * element, + + if (audiocontext->channels <= 2) { + guint32 block_samples, tmp; ++ GstMapInfo outmap; + gsize size = gst_buffer_get_size (*buf); + + if (size < 4) { + GST_ERROR_OBJECT (element, "Too small wavpack buffer"); +- gst_buffer_unmap (*buf, &map); + return GST_FLOW_ERROR; + } + +@@ -3944,6 +3943,7 @@ gst_matroska_demux_add_wvpk_header (GstElement * element, + *buf = newbuf; + audiocontext->wvpk_block_index += block_samples; + } else { ++ GstMapInfo map, outmap; + guint8 *outdata = NULL; + gsize buf_size, size; + guint32 block_samples, flags, crc; +-- +GitLab + diff --git a/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47540_47601_47602_47603_47834-2.patch b/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47540_47601_47602_47603_47834-2.patch new file mode 100644 index 0000000000..04e3a9168a --- /dev/null +++ b/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47540_47601_47602_47603_47834-2.patch @@ -0,0 +1,31 @@ +From b7e1b13af70b7c042f29674f5482b502af82d829 Mon Sep 17 00:00:00 2001 +From: =?UTF-8?q?Sebastian=20Dr=C3=B6ge?= +Date: Mon, 30 Sep 2024 16:33:39 +0300 +Subject: [PATCH] matroskademux: Fix off-by-one when parsing multi-channel + WavPack + +Part-of: + +Upstream-Status: Backport [https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/b7e1b13af70b7c042f29674f5482b502af82d829] +CVE: CVE-2024-47540 CVE-2024-47601 CVE-2024-47602 CVE-2024-47603 CVE-2024-47834 +Signed-off-by: Vijay Anusuri +--- + subprojects/gst-plugins-good/gst/matroska/matroska-demux.c | 2 +- + 1 file changed, 1 insertion(+), 1 deletion(-) + +diff --git a/subprojects/gst-plugins-good/gst/matroska/matroska-demux.c b/subprojects/gst-plugins-good/gst/matroska/matroska-demux.c +index 35e60b71470d..583fbbe6e695 100644 +--- a/gst/matroska/matroska-demux.c ++++ b/gst/matroska/matroska-demux.c +@@ -3970,7 +3970,7 @@ gst_matroska_demux_add_wvpk_header (GstElement * element, + data += 4; + size -= 4; + +- while (size > 12) { ++ while (size >= 12) { + flags = GST_READ_UINT32_LE (data); + data += 4; + size -= 4; +-- +GitLab + diff --git a/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47540_47601_47602_47603_47834-3.patch b/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47540_47601_47602_47603_47834-3.patch new file mode 100644 index 0000000000..de2bdc13cb --- /dev/null +++ b/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47540_47601_47602_47603_47834-3.patch @@ -0,0 +1,39 @@ +From 455393ef0f2bb0a49c5bf32ef208af914c44e806 Mon Sep 17 00:00:00 2001 +From: =?UTF-8?q?Sebastian=20Dr=C3=B6ge?= +Date: Mon, 30 Sep 2024 18:25:53 +0300 +Subject: [PATCH] matroskademux: Check for big enough WavPack codec private + data before accessing it + +Thanks to Antonio Morales for finding and reporting the issue. + +Fixes GHSL-2024-250 +Fixes https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3866 + +Part-of: + +Upstream-Status: Backport [https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/455393ef0f2bb0a49c5bf32ef208af914c44e806] +CVE: CVE-2024-47540 CVE-2024-47601 CVE-2024-47602 CVE-2024-47603 CVE-2024-47834 +Signed-off-by: Vijay Anusuri +--- + subprojects/gst-plugins-good/gst/matroska/matroska-demux.c | 5 +++++ + 1 file changed, 5 insertions(+) + +diff --git a/subprojects/gst-plugins-good/gst/matroska/matroska-demux.c b/subprojects/gst-plugins-good/gst/matroska/matroska-demux.c +index 583fbbe6e695..91e66fefc36a 100644 +--- a/gst/matroska/matroska-demux.c ++++ b/gst/matroska/matroska-demux.c +@@ -3888,6 +3888,11 @@ gst_matroska_demux_add_wvpk_header (GstElement * element, + guint8 *buf_data, *data; + Wavpack4Header wvh; + ++ if (!stream->codec_priv || stream->codec_priv_size < 2) { ++ GST_ERROR_OBJECT (element, "No or too small wavpack codec private data"); ++ return GST_FLOW_ERROR; ++ } ++ + wvh.ck_id[0] = 'w'; + wvh.ck_id[1] = 'v'; + wvh.ck_id[2] = 'p'; +-- +GitLab + diff --git a/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47540_47601_47602_47603_47834-4.patch b/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47540_47601_47602_47603_47834-4.patch new file mode 100644 index 0000000000..9bfbd07e1b --- /dev/null +++ b/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47540_47601_47602_47603_47834-4.patch @@ -0,0 +1,47 @@ +From be0ac3f40949cb951d5f0761f4a3bd597a94947f Mon Sep 17 00:00:00 2001 +From: =?UTF-8?q?Sebastian=20Dr=C3=B6ge?= +Date: Mon, 30 Sep 2024 19:04:51 +0300 +Subject: [PATCH] matroskademux: Don't take data out of an empty adapter when + processing WavPack frames + +Thanks to Antonio Morales for finding and reporting the issue. + +Fixes GHSL-2024-249 +Fixes https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3865 + +Part-of: + +Upstream-Status: Backport [https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/be0ac3f40949cb951d5f0761f4a3bd597a94947f] +CVE: CVE-2024-47540 CVE-2024-47601 CVE-2024-47602 CVE-2024-47603 CVE-2024-47834 +Signed-off-by: Vijay Anusuri +--- + .../gst-plugins-good/gst/matroska/matroska-demux.c | 11 ++++++++--- + 1 file changed, 8 insertions(+), 3 deletions(-) + +diff --git a/subprojects/gst-plugins-good/gst/matroska/matroska-demux.c b/subprojects/gst-plugins-good/gst/matroska/matroska-demux.c +index 91e66fefc36a..98ed51e86a58 100644 +--- a/gst/matroska/matroska-demux.c ++++ b/gst/matroska/matroska-demux.c +@@ -4036,11 +4036,16 @@ gst_matroska_demux_add_wvpk_header (GstElement * element, + } + gst_buffer_unmap (*buf, &map); + +- newbuf = gst_adapter_take_buffer (adapter, gst_adapter_available (adapter)); ++ size = gst_adapter_available (adapter); ++ if (size > 0) { ++ newbuf = gst_adapter_take_buffer (adapter, size); ++ gst_buffer_copy_into (newbuf, *buf, ++ GST_BUFFER_COPY_TIMESTAMPS | GST_BUFFER_COPY_FLAGS, 0, -1); ++ } else { ++ newbuf = NULL; ++ } + g_object_unref (adapter); + +- gst_buffer_copy_into (newbuf, *buf, +- GST_BUFFER_COPY_TIMESTAMPS | GST_BUFFER_COPY_FLAGS, 0, -1); + gst_buffer_unref (*buf); + *buf = newbuf; + +-- +GitLab + diff --git a/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47540_47601_47602_47603_47834-5.patch b/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47540_47601_47602_47603_47834-5.patch new file mode 100644 index 0000000000..0e13b8a1ca --- /dev/null +++ b/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47540_47601_47602_47603_47834-5.patch @@ -0,0 +1,48 @@ +From effbbfd771487cc06c79d5a7e447a849884cc6cf Mon Sep 17 00:00:00 2001 +From: =?UTF-8?q?Sebastian=20Dr=C3=B6ge?= +Date: Mon, 30 Sep 2024 19:06:03 +0300 +Subject: [PATCH] matroskademux: Skip over laces directly when postprocessing + the frame fails + +Otherwise NULL buffers might be handled afterwards. + +Thanks to Antonio Morales for finding and reporting the issue. + +Fixes GHSL-2024-249 +Fixes https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3865 + +Part-of: + +Upstream-Status: Backport [https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/effbbfd771487cc06c79d5a7e447a849884cc6cf] +CVE: CVE-2024-47540 CVE-2024-47601 CVE-2024-47602 CVE-2024-47603 CVE-2024-47834 +Signed-off-by: Vijay Anusuri +--- + .../gst-plugins-good/gst/matroska/matroska-demux.c | 12 ++++++++++++ + 1 file changed, 12 insertions(+) + +diff --git a/subprojects/gst-plugins-good/gst/matroska/matroska-demux.c b/subprojects/gst-plugins-good/gst/matroska/matroska-demux.c +index 98ed51e86a58..e0a4405dcefa 100644 +--- a/gst/matroska/matroska-demux.c ++++ b/gst/matroska/matroska-demux.c +@@ -4982,6 +4982,18 @@ gst_matroska_demux_parse_blockgroup_or_simpleblock (GstMatroskaDemux * demux, + if (stream->postprocess_frame) { + GST_LOG_OBJECT (demux, "running post process"); + ret = stream->postprocess_frame (GST_ELEMENT (demux), stream, &sub); ++ if (ret != GST_FLOW_OK) { ++ gst_clear_buffer (&sub); ++ goto next_lace; ++ } ++ ++ if (sub == NULL) { ++ GST_WARNING_OBJECT (demux, ++ "Postprocessing buffer with timestamp %" GST_TIME_FORMAT ++ " for stream %d failed", GST_TIME_ARGS (buffer_timestamp), ++ stream_num); ++ goto next_lace; ++ } + } + + /* At this point, we have a sub-buffer pointing at data within a larger +-- +GitLab + diff --git a/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47540_47601_47602_47603_47834-6.patch b/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47540_47601_47602_47603_47834-6.patch new file mode 100644 index 0000000000..3c661e92f7 --- /dev/null +++ b/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47540_47601_47602_47603_47834-6.patch @@ -0,0 +1,39 @@ +From ed7b46bac3fa14f95422cc4bb4655d041df51454 Mon Sep 17 00:00:00 2001 +From: =?UTF-8?q?Sebastian=20Dr=C3=B6ge?= +Date: Mon, 30 Sep 2024 19:19:42 +0300 +Subject: [PATCH] matroskademux: Skip over zero-sized Xiph stream headers + +Thanks to Antonio Morales for finding and reporting the issue. + +Fixes GHSL-2024-251 +Fixes https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3867 + +Part-of: + +Upstream-Status: Backport [https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/ed7b46bac3fa14f95422cc4bb4655d041df51454] +CVE: CVE-2024-47540 CVE-2024-47601 CVE-2024-47602 CVE-2024-47603 CVE-2024-47834 +Signed-off-by: Vijay Anusuri +--- + subprojects/gst-plugins-good/gst/matroska/matroska-ids.c | 6 ++++-- + 1 file changed, 4 insertions(+), 2 deletions(-) + +diff --git a/subprojects/gst-plugins-good/gst/matroska/matroska-ids.c b/subprojects/gst-plugins-good/gst/matroska/matroska-ids.c +index f11b7c2ce31f..ba645f7306d9 100644 +--- a/gst/matroska/matroska-ids.c ++++ b/gst/matroska/matroska-ids.c +@@ -189,8 +189,10 @@ gst_matroska_parse_xiph_stream_headers (gpointer codec_data, + if (offset + length[i] > codec_data_size) + goto error; + +- hdr = gst_buffer_new_memdup (p + offset, length[i]); +- gst_buffer_list_add (list, hdr); ++ if (length[i] > 0) { ++ hdr = gst_buffer_new_memdup (p + offset, length[i]); ++ gst_buffer_list_add (list, hdr); ++ } + + offset += length[i]; + } +-- +GitLab + diff --git a/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47540_47601_47602_47603_47834-7.patch b/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47540_47601_47602_47603_47834-7.patch new file mode 100644 index 0000000000..1341491873 --- /dev/null +++ b/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47540_47601_47602_47603_47834-7.patch @@ -0,0 +1,40 @@ +From 98e4356be7afa869373f96b4e8ca792c5f9707ee Mon Sep 17 00:00:00 2001 +From: =?UTF-8?q?Sebastian=20Dr=C3=B6ge?= +Date: Wed, 9 Oct 2024 11:52:52 -0400 +Subject: [PATCH] matroskademux: Put a copy of the codec data into the A_MS/ACM + caps + +The original codec data buffer is owned by matroskademux and does not +necessarily live as long as the caps. + +Thanks to Antonio Morales for finding and reporting the issue. + +Fixes GHSL-2024-280 +Fixes https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3894 + +Part-of: + +Upstream-Status: Backport [https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/98e4356be7afa869373f96b4e8ca792c5f9707ee] +CVE: CVE-2024-47540 CVE-2024-47601 CVE-2024-47602 CVE-2024-47603 CVE-2024-47834 +Signed-off-by: Vijay Anusuri +--- + subprojects/gst-plugins-good/gst/matroska/matroska-demux.c | 3 +-- + 1 file changed, 1 insertion(+), 2 deletions(-) + +diff --git a/subprojects/gst-plugins-good/gst/matroska/matroska-demux.c b/subprojects/gst-plugins-good/gst/matroska/matroska-demux.c +index e0a4405dcefa..80da30673120 100644 +--- a/gst/matroska/matroska-demux.c ++++ b/gst/matroska/matroska-demux.c +@@ -7165,8 +7165,7 @@ gst_matroska_demux_audio_caps (GstMatroskaTrackAudioContext * + + /* 18 is the waveformatex size */ + if (size > 18) { +- codec_data = gst_buffer_new_wrapped_full (GST_MEMORY_FLAG_READONLY, +- data + 18, size - 18, 0, size - 18, NULL, NULL); ++ codec_data = gst_buffer_new_memdup (data + 18, size - 18); + } + + if (riff_audio_fmt) +-- +GitLab + diff --git a/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good_1.20.7.bb b/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good_1.20.7.bb index 0daae0b519..f57797d236 100644 --- a/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good_1.20.7.bb +++ b/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good_1.20.7.bb @@ -20,6 +20,13 @@ SRC_URI = "https://gstreamer.freedesktop.org/src/gst-plugins-good/gst-plugins-go file://CVE-2024-47537_47539_47543_47544_47545_47546_47596_47597_47598-11.patch \ file://CVE-2024-47537_47539_47543_47544_47545_47546_47596_47597_47598-12.patch \ file://CVE-2024-47599.patch \ + file://CVE-2024-47540_47601_47602_47603_47834-1.patch \ + file://CVE-2024-47540_47601_47602_47603_47834-2.patch \ + file://CVE-2024-47540_47601_47602_47603_47834-3.patch \ + file://CVE-2024-47540_47601_47602_47603_47834-4.patch \ + file://CVE-2024-47540_47601_47602_47603_47834-5.patch \ + file://CVE-2024-47540_47601_47602_47603_47834-6.patch \ + file://CVE-2024-47540_47601_47602_47603_47834-7.patch \ " SRC_URI[sha256sum] = "599f093cc833a1e346939ab6e78a3f8046855b6da13520aae80dd385434f4ab2" From patchwork Tue Jan 7 18:08:24 2025 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Steve Sakoman X-Patchwork-Id: 55153 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 92D6CE77198 for ; Tue, 7 Jan 2025 18:09:03 +0000 (UTC) Received: from mail-pj1-f43.google.com (mail-pj1-f43.google.com [209.85.216.43]) by mx.groups.io with SMTP id smtpd.web10.91.1736273335438336843 for ; Tue, 07 Jan 2025 10:08:55 -0800 Authentication-Results: mx.groups.io; dkim=pass header.i=@sakoman-com.20230601.gappssmtp.com header.s=20230601 header.b=kHfg6Xiq; spf=softfail (domain: sakoman.com, ip: 209.85.216.43, mailfrom: steve@sakoman.com) Received: by mail-pj1-f43.google.com with SMTP id 98e67ed59e1d1-2ee8aa26415so23236230a91.1 for ; Tue, 07 Jan 2025 10:08:55 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sakoman-com.20230601.gappssmtp.com; s=20230601; t=1736273335; x=1736878135; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=Ses48oObRa/xC0inmVs0sVNcKOLmiM/3m76WwOoKMec=; b=kHfg6XiqkD7AJ3SeXnsMHHrlj4q/cNfOMYsAhMaIWV/IXXt2EDScHPpLNcPXmMpU5R uB9yQ/pUGC5pnoq9VvxrrMfNzQlfsqyq7yZs502K1g75mZjXLBiXHcqbSK8eS0DnNkGC yznFPVSHeHA+TNHA6SIYUqwQ3Op8BHl/jtg3i017HCI07jaO4zHwVYsPI9rqoCkeQVJK w+7Ph+l08i2aaLGU3fJOpnsIumnmHj7y58WT3oh9GM8dpf/gHaNoqSCjTEr6n7MohZPu atyPGRQMNMvkS8o+SsJe5LAMHX86T7qFxk1iZrDX1MrKAUVcMPX07BxK8ZGtTuISm5qo 3kMQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1736273335; x=1736878135; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=Ses48oObRa/xC0inmVs0sVNcKOLmiM/3m76WwOoKMec=; b=U4kyIuSmtraiIL+RJjbKSorXTkbjOHRXQfKHETKGgRB2zugQ+2g2AnMPHZs/F+DSV0 mdqGgyvWK3njLElElJB+OsQgvwHjVdHusXfE1ZqFfJw/xMPay3L/aHW5uvaxkgyk3egd iZNNkXU6SqOxMKzvILZiKkhxp4bQCzI1cWC9A8mOEXdnbEk1M4G0nuM+Mmw4lltYU6KJ wWh0YsI2P83yDd1I1tSdVbaFQVTufhZearYOtnv/se4fgsoAr6uT+x76KalDUhS/lO6q 6NZaAgIl7g5lyyRt3paxmnYJk7ywd8Q7YiDXjYh2CMDs3tv99JCPM8MIthobgkSTKIv1 7w0Q== X-Gm-Message-State: AOJu0Yy3bzjG0gMIpI0AdrDe5mfuQ1hmja7/jxJOls8yzCAvjUy71e2v X5m3UcuKNq/CHPYKGh9w0a+mBk34nolpgG+K2f3IWwPWwWrabqaLxp4p9+w8/k1oi6KMLASzlUZ LGvo= X-Gm-Gg: ASbGncuyl8iNnv+EIdMDB6r11T9QZ3sPH4R4sBg2dTrShl55hKmnBbJZdLDNmA+4l6r 2VU6EIhMcfnDQeL8mW+64o92z1nE+BlJ+vXeCBT6NeUGS2c5xsTUqXUMfCXO0X1fwhhzkFbFyI5 uORjfOl6bmz1h2WH/o1/Lsrm/F0nzI52wSQv5fbbG4Y9xEyNbKz4R/HBbv/WqGkBakg1DJhKHiA FuVGd08ysg9Uhx5NVQBlfcO47NnaILH/8OnD5NX4qdmOw== X-Google-Smtp-Source: AGHT+IF3zjp7mBcq8BzdsAo4BN7b1e8EWWhFfhx7M+nJULDym+CeP4d9hB6IPPWZay+SbOh+2GO/5g== X-Received: by 2002:a17:90b:5208:b0:2ee:dcf6:1c8f with SMTP id 98e67ed59e1d1-2f452e1814bmr99016954a91.16.1736273334716; Tue, 07 Jan 2025 10:08:54 -0800 (PST) Received: from hexa.. ([98.142.47.158]) by smtp.gmail.com with ESMTPSA id d9443c01a7336-219dc9f4413sm314166335ad.172.2025.01.07.10.08.54 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 07 Jan 2025 10:08:54 -0800 (PST) From: Steve Sakoman To: openembedded-core@lists.openembedded.org Subject: [OE-core][kirkstone 06/19] gstreamer1.0-plugins-good: Fix CVE-2024-47606 Date: Tue, 7 Jan 2025 10:08:24 -0800 Message-ID: <4c138c3c04f856b100ce2c8e8e96025edde4c841.1736273200.git.steve@sakoman.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Tue, 07 Jan 2025 18:09:03 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/209487 From: Vijay Anusuri Upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8032 Signed-off-by: Vijay Anusuri Signed-off-by: Steve Sakoman --- .../CVE-2024-47606.patch | 44 +++++++++++++++++++ .../gstreamer1.0-plugins-good_1.20.7.bb | 1 + 2 files changed, 45 insertions(+) create mode 100644 meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47606.patch diff --git a/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47606.patch b/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47606.patch new file mode 100644 index 0000000000..fe4bdc8802 --- /dev/null +++ b/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47606.patch @@ -0,0 +1,44 @@ +From f8e398c46fc074f266edb3f20479c0ca31b52448 Mon Sep 17 00:00:00 2001 +From: =?UTF-8?q?Sebastian=20Dr=C3=B6ge?= +Date: Thu, 26 Sep 2024 22:16:06 +0300 +Subject: [PATCH] qtdemux: Avoid integer overflow when parsing Theora extension + +Thanks to Antonio Morales for finding and reporting the issue. + +Fixes GHSL-2024-166 +Fixes https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3851 + +Part-of: + +Upstream-Status: Backport [https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/f8e398c46fc074f266edb3f20479c0ca31b52448] +CVE: CVE-2024-47606 +Signed-off-by: Vijay Anusuri +--- + subprojects/gst-plugins-good/gst/isomp4/qtdemux.c | 4 ++-- + 1 file changed, 2 insertions(+), 2 deletions(-) + +diff --git a/subprojects/gst-plugins-good/gst/isomp4/qtdemux.c b/subprojects/gst-plugins-good/gst/isomp4/qtdemux.c +index 5e3cb1b9e699..c2d8b5e0f134 100644 +--- a/gst/isomp4/qtdemux.c ++++ b/gst/isomp4/qtdemux.c +@@ -8822,7 +8822,7 @@ qtdemux_parse_theora_extension (GstQTDemux * qtdemux, QtDemuxStream * stream, + end -= 8; + + while (buf < end) { +- gint size; ++ guint32 size; + guint32 type; + + size = QT_UINT32 (buf); +@@ -8830,7 +8830,7 @@ qtdemux_parse_theora_extension (GstQTDemux * qtdemux, QtDemuxStream * stream, + + GST_LOG_OBJECT (qtdemux, "%p %p", buf, end); + +- if (buf + size > end || size <= 0) ++ if (end - buf < size || size < 8) + break; + + buf += 8; +-- +GitLab + diff --git a/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good_1.20.7.bb b/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good_1.20.7.bb index f57797d236..ab14dea58d 100644 --- a/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good_1.20.7.bb +++ b/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good_1.20.7.bb @@ -27,6 +27,7 @@ SRC_URI = "https://gstreamer.freedesktop.org/src/gst-plugins-good/gst-plugins-go file://CVE-2024-47540_47601_47602_47603_47834-5.patch \ file://CVE-2024-47540_47601_47602_47603_47834-6.patch \ file://CVE-2024-47540_47601_47602_47603_47834-7.patch \ + file://CVE-2024-47606.patch \ " SRC_URI[sha256sum] = "599f093cc833a1e346939ab6e78a3f8046855b6da13520aae80dd385434f4ab2" From patchwork Tue Jan 7 18:08:25 2025 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Steve Sakoman X-Patchwork-Id: 55150 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id A1F3DE7719B for ; Tue, 7 Jan 2025 18:09:03 +0000 (UTC) Received: from mail-pl1-f180.google.com (mail-pl1-f180.google.com [209.85.214.180]) by mx.groups.io with SMTP id smtpd.web10.92.1736273336886841226 for ; Tue, 07 Jan 2025 10:08:56 -0800 Authentication-Results: mx.groups.io; dkim=pass header.i=@sakoman-com.20230601.gappssmtp.com header.s=20230601 header.b=iPjXGrJI; spf=softfail (domain: sakoman.com, ip: 209.85.214.180, mailfrom: steve@sakoman.com) Received: by mail-pl1-f180.google.com with SMTP id d9443c01a7336-2166022c5caso207777535ad.2 for ; Tue, 07 Jan 2025 10:08:56 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sakoman-com.20230601.gappssmtp.com; s=20230601; t=1736273336; x=1736878136; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=rHI/fqvyL1pEegyyTmiOaQx9hhJoYj/z8r/QORDmHGs=; b=iPjXGrJIpUF3Rkmm7L1rlQXUPk60xc/LqJvdatWK4bZi9ZKVosvl9QrGwsWhgVxwhL jUnxIeR1VbwAYa8s7umAfIbbIDOpvk9/YCHjre5KgRR2AeF/KKE37GDa0ep4G0n2T+uO 9yXuC9wEAE+yuaQUAfah5Oy87CrC9nceoBfgNDM0XE1PXgxkblj6SdMzJhfJyCovCKWG 0+0eRzBVd/worXTNfL10VHiKOZQ/WiEH7IzeasMe8QHf3lCBUZDwXQ5nNm66yqtiFOd3 YTVsl+rQhOYD+bVrl0sijnCxiOMimCOKqYaEUVd9F9ZW8QSoXJFW1TG4dt8H3J37WR2J +Q8A== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1736273336; x=1736878136; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=rHI/fqvyL1pEegyyTmiOaQx9hhJoYj/z8r/QORDmHGs=; b=NagREO2UNg8KZ4uxbx1aHx8Vwxfl41Ij4LjD1pGAv/de/xOluIoHWUTVw3ydiBL5Zv M+t3UOarM+QX/HCjdo3h15zJBi4VzRqBB5cVhG484/Nrm3ExQzuMz3mu0BngE34SNcFR P9rJmVgkSclln/Bb8Npz5z3ufIw/r6H2S0GnxiT1p35rNNJvQtPtlMKQao/laV+TR+xG ZFYaIw6nfOrpkos5e5fRZ3iT+fF0sQiuD+G9yEWPXoHmdAh3J/GY8+bdZGfVT2lLOb6n 8JNYmIBtP7lVozYNSHstJUcpRi+/Afy50vKPszlhCnbKkcWmQtlevMCCgqnlm2vOPUY2 wr1g== X-Gm-Message-State: AOJu0YyPWXBJuNaum/znmanxMGZs0eif/mpGHhBqWXMs+ywiYTm4x/02 8HH3L+vcEtzKG9btKlqw1Q67q9VLCpX8KIQoM4w1StTgE7xWrHuwYS/hi1zwqlBTA/m1hNr9t4F Ee20= X-Gm-Gg: ASbGncuzJcIWm822EIWm0IL6tqOvEKL9GPo7dJsA3cyiUI0CO+EfmvAd1zpWj2qo1og e9dwSSP3IX335HghceP5w9qh4GoISGoGS0ncaHZSxGBJOVLZRmLTfixCG5KUGWOSmid0bq8rBWk UGLuOc0hbK/rpzTJ9t88AxTftOuOdLQHjvf+sGt3ICPfd4Ugb2JxCKdI2NOJqTDC1S8alTY1/IN lFeW6sAoPUh1SwJWocSKtavPf16qjtHi78wmCW6An0HlQ== X-Google-Smtp-Source: AGHT+IExh6NIWixhOTGAQZXvvErZ1YPVlF/Mw311i20/jUsmD8PElGeqLB227K62djVEfXPStBNU/A== X-Received: by 2002:a17:902:f54b:b0:216:386e:dbf with SMTP id d9443c01a7336-21a83f5514cmr101105ad.20.1736273336117; Tue, 07 Jan 2025 10:08:56 -0800 (PST) Received: from hexa.. ([98.142.47.158]) by smtp.gmail.com with ESMTPSA id d9443c01a7336-219dc9f4413sm314166335ad.172.2025.01.07.10.08.55 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 07 Jan 2025 10:08:55 -0800 (PST) From: Steve Sakoman To: openembedded-core@lists.openembedded.org Subject: [OE-core][kirkstone 07/19] gstreamer1.0-plugins-good: Fix CVE-2024-47613 Date: Tue, 7 Jan 2025 10:08:25 -0800 Message-ID: X-Mailer: git-send-email 2.43.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Tue, 07 Jan 2025 18:09:03 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/209488 From: Vijay Anusuri Upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8041 Signed-off-by: Vijay Anusuri Signed-off-by: Steve Sakoman --- .../CVE-2024-47613.patch | 53 +++++++++++++++++++ .../gstreamer1.0-plugins-good_1.20.7.bb | 1 + 2 files changed, 54 insertions(+) create mode 100644 meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47613.patch diff --git a/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47613.patch b/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47613.patch new file mode 100644 index 0000000000..d60086deb4 --- /dev/null +++ b/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47613.patch @@ -0,0 +1,53 @@ +From 1d1c9d63be51d85f9b80f0c227d4b3469fee2534 Mon Sep 17 00:00:00 2001 +From: =?UTF-8?q?Sebastian=20Dr=C3=B6ge?= +Date: Wed, 2 Oct 2024 14:44:21 +0300 +Subject: [PATCH] gdkpixbufdec: Check if initializing the video info actually + succeeded + +Otherwise a 0-byte buffer would be allocated, which gives NULL memory when +mapped. + +Thanks to Antonio Morales for finding and reporting the issue. + +Fixes GHSL-2024-118 +Fixes https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3876 + +Part-of: + +Upstream-Status: Backport [https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/1d1c9d63be51d85f9b80f0c227d4b3469fee2534] +CVE: CVE-2024-47613 +Signed-off-by: Vijay Anusuri +--- + .../gst-plugins-good/ext/gdk_pixbuf/gstgdkpixbufdec.c | 9 ++++++++- + 1 file changed, 8 insertions(+), 1 deletion(-) + +diff --git a/subprojects/gst-plugins-good/ext/gdk_pixbuf/gstgdkpixbufdec.c b/subprojects/gst-plugins-good/ext/gdk_pixbuf/gstgdkpixbufdec.c +index 5482998c0d60..de5f05496466 100644 +--- a/ext/gdk_pixbuf/gstgdkpixbufdec.c ++++ b/ext/gdk_pixbuf/gstgdkpixbufdec.c +@@ -322,7 +322,8 @@ gst_gdk_pixbuf_dec_flush (GstGdkPixbufDec * filter) + + + gst_video_info_init (&info); +- gst_video_info_set_format (&info, fmt, width, height); ++ if (!gst_video_info_set_format (&info, fmt, width, height)) ++ goto format_not_supported; + info.fps_n = filter->in_fps_n; + info.fps_d = filter->in_fps_d; + caps = gst_video_info_to_caps (&info); +@@ -384,6 +385,12 @@ channels_not_supported: + ("%d channels not supported", n_channels)); + return GST_FLOW_ERROR; + } ++format_not_supported: ++ { ++ GST_ELEMENT_ERROR (filter, STREAM, DECODE, (NULL), ++ ("%d channels with %dx%d not supported", n_channels, width, height)); ++ return GST_FLOW_ERROR; ++ } + no_buffer: + { + GST_DEBUG ("Failed to create outbuffer - %s", gst_flow_get_name (ret)); +-- +GitLab + diff --git a/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good_1.20.7.bb b/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good_1.20.7.bb index ab14dea58d..828b5f1083 100644 --- a/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good_1.20.7.bb +++ b/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good_1.20.7.bb @@ -28,6 +28,7 @@ SRC_URI = "https://gstreamer.freedesktop.org/src/gst-plugins-good/gst-plugins-go file://CVE-2024-47540_47601_47602_47603_47834-6.patch \ file://CVE-2024-47540_47601_47602_47603_47834-7.patch \ file://CVE-2024-47606.patch \ + file://CVE-2024-47613.patch \ " SRC_URI[sha256sum] = "599f093cc833a1e346939ab6e78a3f8046855b6da13520aae80dd385434f4ab2" From patchwork Tue Jan 7 18:08:26 2025 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Steve Sakoman X-Patchwork-Id: 55151 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id B1B5AE7719A for ; Tue, 7 Jan 2025 18:09:03 +0000 (UTC) Received: from mail-pl1-f177.google.com (mail-pl1-f177.google.com [209.85.214.177]) by mx.groups.io with SMTP id smtpd.web10.95.1736273338219459046 for ; Tue, 07 Jan 2025 10:08:58 -0800 Authentication-Results: mx.groups.io; dkim=pass header.i=@sakoman-com.20230601.gappssmtp.com header.s=20230601 header.b=RS5xav4D; spf=softfail (domain: sakoman.com, ip: 209.85.214.177, mailfrom: steve@sakoman.com) Received: by mail-pl1-f177.google.com with SMTP id d9443c01a7336-216426b0865so228634475ad.0 for ; Tue, 07 Jan 2025 10:08:58 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sakoman-com.20230601.gappssmtp.com; s=20230601; t=1736273337; x=1736878137; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=dW7cVUTCc/OzACXG5Ytep7M2Ak6WQbqeWDrsSFIEmkI=; b=RS5xav4DhSrcYFxR4fmGMB5be6CfFAJ4ZcCL21qEqCjqymE1ttnMiGNA0LSwndqEfQ jOeP8LRO/FjjcXkqY2c01LMus1QMq7QUYTeSYJg0LPVL0o1cIUm3NeXw6nYGcQMJBpS9 /cg1xiqqvPRqedwjhWdJ1FhYnYMU0lA2g2Tiq/V5qMGtgHJ7UK+lOgO8ooCkx4TVApGw 1mksFUKx/+f6wN38PLUgy5k9MFdtTv2vDs6q1QcsRer8wcf1wQUD/2qArbDZGR0eOIVM 779PqgcOXfj+OptJD24BN+fiydKBrJ1MIRExmhMrlwVa66HGhVUr6xYQ1s7r2Gwxdm6/ rxUQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1736273337; x=1736878137; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=dW7cVUTCc/OzACXG5Ytep7M2Ak6WQbqeWDrsSFIEmkI=; b=XJHAOQLWtOlFJe6aRS8pd7s43WgQmzmhtvM9qDJCGGFYsfQNDo2UA+k/N8z8RvhGXR cWwXkjElhiZsYJglz9yCXhecB6SWMb+9Fo+1D5a2CE4Ce1/czRa0GiDowa8/YEkHSn4J 82htsmwck0JBzJfRflSCAB3gT+M6DuKwgi2MEZm1KVUGJ1jcNIXV9jKk9Q8hC8UVT4f3 H8vHXe5l1+o3yClSIszPJV9OBMFk0eJKp+vND/WN1BRxaYPFcsRX3C3PsGsx5apc7cGj r6BxZRL18G6qpeF5lA0ro3vofxo7A4rPnCbG3gaTjGtjSi5AYV4hKKCRiBpGq/D0KD+7 pscw== X-Gm-Message-State: AOJu0Yw3JAK3u4Y0TTGDInCoUaazS/x6j2ZlZc9WLRJSg6wBlNXeZCp7 UcWZmZP7HnQph6CEC1X1+/t3m9vqDFYxUTLzVxXj/0NaeUB7mP6NmjoKpeI9bRBKQFFEexps/72 l/vg= X-Gm-Gg: ASbGncu28hoRIlsLq4/Sf100AZtysDs31k2MrhHNnPLcKjjaNOLdsYuOJ9aZYp2TZTR 6RHeDy8PTnkf3/UEOe2RpU+OWchwVRTE+qvo0e5F7jiPZpCVxG6hg7xWsDDuOUVRhoahwgO4G+u JB0JztruCl7FwnnvGSX1U3lW/QCFS5AX2aRqVbj35ABMQx/4fcKRgLbJM7DB7dFiH2pu0B+3d0a lY8Qj/d3q7dtXa1E8n81/0yID4F/QlSkiNveTeMaU8peQ== X-Google-Smtp-Source: AGHT+IHb2Xo5xGmqewkdGIau1RgcWlXkGMjABd6lzgdSyf/XLtoDtBXV933jAb7kp2ksc0ogkD5D1w== X-Received: by 2002:a17:902:d4cc:b0:216:2426:768c with SMTP id d9443c01a7336-21a83f4e8f2mr137515ad.16.1736273337405; Tue, 07 Jan 2025 10:08:57 -0800 (PST) Received: from hexa.. ([98.142.47.158]) by smtp.gmail.com with ESMTPSA id d9443c01a7336-219dc9f4413sm314166335ad.172.2025.01.07.10.08.56 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 07 Jan 2025 10:08:57 -0800 (PST) From: Steve Sakoman To: openembedded-core@lists.openembedded.org Subject: [OE-core][kirkstone 08/19] gstreamer1.0-plugins-good: Fix CVE-2024-47774 Date: Tue, 7 Jan 2025 10:08:26 -0800 Message-ID: <7b1943c6b00d5e94f72bcce0eefdfdb7f091af5d.1736273200.git.steve@sakoman.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Tue, 07 Jan 2025 18:09:03 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/209489 From: Vijay Anusuri Upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8043 Signed-off-by: Vijay Anusuri Signed-off-by: Steve Sakoman --- .../CVE-2024-47774.patch | 46 +++++++++++++++++++ .../gstreamer1.0-plugins-good_1.20.7.bb | 1 + 2 files changed, 47 insertions(+) create mode 100644 meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47774.patch diff --git a/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47774.patch b/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47774.patch new file mode 100644 index 0000000000..b9624a148c --- /dev/null +++ b/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47774.patch @@ -0,0 +1,46 @@ +From 0870e87c7c02e28e22a09a7de0c5b1e5bed68c14 Mon Sep 17 00:00:00 2001 +From: =?UTF-8?q?Sebastian=20Dr=C3=B6ge?= +Date: Fri, 4 Oct 2024 14:04:03 +0300 +Subject: [PATCH] avisubtitle: Fix size checks and avoid overflows when + checking sizes + +Thanks to Antonio Morales for finding and reporting the issue. + +Fixes GHSL-2024-262 +Fixes https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3890 + +Part-of: + +Upstream-Status: Backport [https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/0870e87c7c02e28e22a09a7de0c5b1e5bed68c14] +CVE: CVE-2024-47774 +Signed-off-by: Vijay Anusuri +--- + subprojects/gst-plugins-good/gst/avi/gstavisubtitle.c | 5 +++-- + 1 file changed, 3 insertions(+), 2 deletions(-) + +diff --git a/subprojects/gst-plugins-good/gst/avi/gstavisubtitle.c b/subprojects/gst-plugins-good/gst/avi/gstavisubtitle.c +index efc5f0405186..c816934da61c 100644 +--- a/gst/avi/gstavisubtitle.c ++++ b/gst/avi/gstavisubtitle.c +@@ -196,7 +196,7 @@ gst_avi_subtitle_parse_gab2_chunk (GstAviSubtitle * sub, GstBuffer * buf) + /* read 'name' of subtitle */ + name_length = GST_READ_UINT32_LE (map.data + 5 + 2); + GST_LOG_OBJECT (sub, "length of name: %u", name_length); +- if (map.size <= 17 + name_length) ++ if (G_MAXUINT32 - 17 < name_length || map.size < 17 + name_length) + goto wrong_name_length; + + name_utf8 = +@@ -216,7 +216,8 @@ gst_avi_subtitle_parse_gab2_chunk (GstAviSubtitle * sub, GstBuffer * buf) + file_length = GST_READ_UINT32_LE (map.data + 13 + name_length); + GST_LOG_OBJECT (sub, "length srt/ssa file: %u", file_length); + +- if (map.size < (17 + name_length + file_length)) ++ if (G_MAXUINT32 - 17 - name_length < file_length ++ || map.size < 17 + name_length + file_length) + goto wrong_total_length; + + /* store this, so we can send it again after a seek; note that we shouldn't +-- +GitLab + diff --git a/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good_1.20.7.bb b/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good_1.20.7.bb index 828b5f1083..8cf08c5088 100644 --- a/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good_1.20.7.bb +++ b/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good_1.20.7.bb @@ -29,6 +29,7 @@ SRC_URI = "https://gstreamer.freedesktop.org/src/gst-plugins-good/gst-plugins-go file://CVE-2024-47540_47601_47602_47603_47834-7.patch \ file://CVE-2024-47606.patch \ file://CVE-2024-47613.patch \ + file://CVE-2024-47774.patch \ " SRC_URI[sha256sum] = "599f093cc833a1e346939ab6e78a3f8046855b6da13520aae80dd385434f4ab2" From patchwork Tue Jan 7 18:08:27 2025 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Steve Sakoman X-Patchwork-Id: 55154 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 92F6FC3DA4A for ; Tue, 7 Jan 2025 18:09:03 +0000 (UTC) Received: from mail-pl1-f176.google.com (mail-pl1-f176.google.com [209.85.214.176]) by mx.groups.io with SMTP id smtpd.web11.106.1736273339969905101 for ; Tue, 07 Jan 2025 10:09:00 -0800 Authentication-Results: mx.groups.io; dkim=pass header.i=@sakoman-com.20230601.gappssmtp.com header.s=20230601 header.b=THQGGQaW; spf=softfail (domain: sakoman.com, ip: 209.85.214.176, mailfrom: steve@sakoman.com) Received: by mail-pl1-f176.google.com with SMTP id d9443c01a7336-21669fd5c7cso237585875ad.3 for ; Tue, 07 Jan 2025 10:08:59 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sakoman-com.20230601.gappssmtp.com; s=20230601; t=1736273339; x=1736878139; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=+JImGOG54ajpW94OTXSQOFxmK5lW/EuQFVnEgHzbV34=; b=THQGGQaWHFFMf6i3FiKkbRYUsnw9pU7ouR++bwYWc4WfeiYBQK1xtzABHFBO86oxhe DEizGwccwFMHiRDL8Ez13dYlLuH706Ba+yYULmuNwQkMMa1tTLyXGtUy69D3eT4rHbmm SmG5sXsjmh3EPW3IjCSo9ZRYcG4TFK/q1nw9mu1O2jPNUPY96sFv+tKBHPVQnQ8qFsIH ii86ZVFgOzSvfaPmE62DZaJV/zMkiI+YsEucpqBR5mqP2GRs58S4b9udxpOoQ5eVSADH g82cuprMG3ZVj6+jTuoPM6fz4QkFIIdk6VWzTIGhESsHCITYh0r8rDWTmQOmWZamgxG3 sAvw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1736273339; x=1736878139; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=+JImGOG54ajpW94OTXSQOFxmK5lW/EuQFVnEgHzbV34=; b=hSn7qMEE2fICJnN4ZJjsGQEdB9eE8p81TDvglt6fTQpCvGOfhoacppDaEC7sOc0C+y /4vHcgz75BZAnRTrgWc1Qof15gk1RsLVc57yEj6hvAUotf8dNsZ0985OXiptSrP2e6XV zEoAqpJ7euAjSXeTj73sr6mwMI4JMf/yioEQW86nc7/Lto2D53A5pZc9Nfyo56cLNpWN SIJjqV0S1mYH9+QBD/MxocZJsv2rBEgVp6JhlRyrJFdF5uZbCIehmaiCgkEqkpxqLhPq aFaRPypdaHAOQZwo3j14PMjz9CNQiqxGQXEQaFyHLctjQdw0bwKauJhgSckE7b+Wa6j6 O8fg== X-Gm-Message-State: AOJu0YyctXqwR5PWouvfMU1c0lfUX0Kyv6205R3kaczFKhsrNe3jiAvS eNV90iKCVtLBrkEWETfU4CK90cB7m+j48aVYiAMQIU+uBDVE+Tn1Q2TN3FTGXOggUOcMZFhhRpl MXgM= X-Gm-Gg: ASbGncvFS/td6D5vgm5Bp97dltGcvqRXT72hOtPwzoqGaEfji8d44bXWzASa8x3hjaA gc1NIuyOzjcReSmYBMk5Y9BFKUZC00q9RxOOvUGZnkJtwebHa5U43XWb7gi+WKQ/cwXoitMTtsk nxTLFuZkEMA3NjuH84TnjFQnSR6FkihIlZDGBQyJlm3Fcf3bkoU7IfTcwdPv22hF6oCiIoWgxJt RDHLqGeMvnbiIn3dxtrMSKERdHLBg3zvVAwviAo7nUSww== X-Google-Smtp-Source: AGHT+IFZp87qMSMvP7ZYDPxEk3HvhOtfQZ/4foCBqZU95QXAoOAyr7EoIIOyWmceEtT8FokHH4n5AA== X-Received: by 2002:a17:902:e5c2:b0:215:b33b:e26d with SMTP id d9443c01a7336-21a83f55103mr113395ad.21.1736273338902; Tue, 07 Jan 2025 10:08:58 -0800 (PST) Received: from hexa.. ([98.142.47.158]) by smtp.gmail.com with ESMTPSA id d9443c01a7336-219dc9f4413sm314166335ad.172.2025.01.07.10.08.58 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 07 Jan 2025 10:08:58 -0800 (PST) From: Steve Sakoman To: openembedded-core@lists.openembedded.org Subject: [OE-core][kirkstone 09/19] gstreamer1.0-plugins-good: Fix multiple CVE's Date: Tue, 7 Jan 2025 10:08:27 -0800 Message-ID: <9c228198644da3ebed0a25051633676158161f26.1736273200.git.steve@sakoman.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Tue, 07 Jan 2025 18:09:03 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/209490 From: Vijay Anusuri Fixes for below CVEs: CVE-2024-47775 CVE-2024-47776 CVE-2024-47777 CVE-2024-47778 Upstream: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8042 Signed-off-by: Vijay Anusuri Signed-off-by: Steve Sakoman --- .../CVE-2024-47775_47776_47777_47778-1.patch | 171 ++++++++++++++++++ .../CVE-2024-47775_47776_47777_47778-2.patch | 38 ++++ .../CVE-2024-47775_47776_47777_47778-3.patch | 62 +++++++ .../CVE-2024-47775_47776_47777_47778-4.patch | 34 ++++ .../CVE-2024-47775_47776_47777_47778-5.patch | 37 ++++ .../CVE-2024-47775_47776_47777_47778-6.patch | 44 +++++ .../CVE-2024-47775_47776_47777_47778-7.patch | 38 ++++ .../gstreamer1.0-plugins-good_1.20.7.bb | 7 + 8 files changed, 431 insertions(+) create mode 100644 meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47775_47776_47777_47778-1.patch create mode 100644 meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47775_47776_47777_47778-2.patch create mode 100644 meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47775_47776_47777_47778-3.patch create mode 100644 meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47775_47776_47777_47778-4.patch create mode 100644 meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47775_47776_47777_47778-5.patch create mode 100644 meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47775_47776_47777_47778-6.patch create mode 100644 meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47775_47776_47777_47778-7.patch diff --git a/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47775_47776_47777_47778-1.patch b/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47775_47776_47777_47778-1.patch new file mode 100644 index 0000000000..2eaef45f41 --- /dev/null +++ b/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47775_47776_47777_47778-1.patch @@ -0,0 +1,171 @@ +From 13b48016b3ef1e822c393c2871b0a561ce19ecb3 Mon Sep 17 00:00:00 2001 +From: =?UTF-8?q?Sebastian=20Dr=C3=B6ge?= +Date: Fri, 4 Oct 2024 13:00:57 +0300 +Subject: [PATCH] wavparse: Check for short reads when parsing headers in pull + mode + +And also return the actual flow return to the caller instead of always returning +GST_FLOW_ERROR. + +Thanks to Antonio Morales for finding and reporting the issue. + +Fixes GHSL-2024-258, GHSL-2024-260 +Fixes https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3886 +Fixes https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3888 + +Part-of: + +Upstream-Status: Backport [https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/13b48016b3ef1e822c393c2871b0a561ce19ecb3] +CVE: CVE-2024-47775 CVE-2024-47776 CVE-2024-47777 CVE-2024-47778 +Signed-off-by: Vijay Anusuri +--- + .../gst/wavparse/gstwavparse.c | 63 ++++++++++++++----- + 1 file changed, 46 insertions(+), 17 deletions(-) + +diff --git a/subprojects/gst-plugins-good/gst/wavparse/gstwavparse.c b/subprojects/gst-plugins-good/gst/wavparse/gstwavparse.c +index d074f273c501..97d5591fae8f 100644 +--- a/gst/wavparse/gstwavparse.c ++++ b/gst/wavparse/gstwavparse.c +@@ -1097,6 +1097,24 @@ parse_ds64 (GstWavParse * wav, GstBuffer * buf) + return TRUE; + } + ++static GstFlowReturn ++gst_wavparse_pull_range_exact (GstWavParse * wav, guint64 offset, guint size, ++ GstBuffer ** buffer) ++{ ++ GstFlowReturn res; ++ ++ res = gst_pad_pull_range (wav->sinkpad, offset, size, buffer); ++ if (res != GST_FLOW_OK) ++ return res; ++ ++ if (gst_buffer_get_size (*buffer) < size) { ++ gst_clear_buffer (buffer); ++ return GST_FLOW_EOS; ++ } ++ ++ return res; ++} ++ + static GstFlowReturn + gst_wavparse_stream_headers (GstWavParse * wav) + { +@@ -1292,9 +1310,9 @@ gst_wavparse_stream_headers (GstWavParse * wav) + + buf = NULL; + if ((res = +- gst_pad_pull_range (wav->sinkpad, wav->offset, 8, ++ gst_wavparse_pull_range_exact (wav, wav->offset, 8, + &buf)) != GST_FLOW_OK) +- goto header_read_error; ++ goto header_pull_error; + gst_buffer_map (buf, &map, GST_MAP_READ); + tag = GST_READ_UINT32_LE (map.data); + size = GST_READ_UINT32_LE (map.data + 4); +@@ -1397,9 +1415,9 @@ gst_wavparse_stream_headers (GstWavParse * wav) + gst_buffer_unref (buf); + buf = NULL; + if ((res = +- gst_pad_pull_range (wav->sinkpad, wav->offset + 8, ++ gst_wavparse_pull_range_exact (wav, wav->offset + 8, + data_size, &buf)) != GST_FLOW_OK) +- goto header_read_error; ++ goto header_pull_error; + gst_buffer_extract (buf, 0, &wav->fact, 4); + wav->fact = GUINT32_FROM_LE (wav->fact); + gst_buffer_unref (buf); +@@ -1444,9 +1462,9 @@ gst_wavparse_stream_headers (GstWavParse * wav) + gst_buffer_unref (buf); + buf = NULL; + if ((res = +- gst_pad_pull_range (wav->sinkpad, wav->offset + 8, +- size, &buf)) != GST_FLOW_OK) +- goto header_read_error; ++ gst_wavparse_pull_range_exact (wav, wav->offset + 8, size, ++ &buf)) != GST_FLOW_OK) ++ goto header_pull_error; + gst_buffer_map (buf, &map, GST_MAP_READ); + acid = (const gst_riff_acid *) map.data; + tempo = acid->tempo; +@@ -1484,9 +1502,9 @@ gst_wavparse_stream_headers (GstWavParse * wav) + gst_buffer_unref (buf); + buf = NULL; + if ((res = +- gst_pad_pull_range (wav->sinkpad, wav->offset, 12, ++ gst_wavparse_pull_range_exact (wav, wav->offset, 12, + &buf)) != GST_FLOW_OK) +- goto header_read_error; ++ goto header_pull_error; + gst_buffer_extract (buf, 8, <ag, 4); + ltag = GUINT32_FROM_LE (ltag); + } +@@ -1513,9 +1531,9 @@ gst_wavparse_stream_headers (GstWavParse * wav) + buf = NULL; + if (data_size > 0) { + if ((res = +- gst_pad_pull_range (wav->sinkpad, wav->offset, ++ gst_wavparse_pull_range_exact (wav, wav->offset, + data_size, &buf)) != GST_FLOW_OK) +- goto header_read_error; ++ goto header_pull_error; + } + } + if (data_size > 0) { +@@ -1553,9 +1571,9 @@ gst_wavparse_stream_headers (GstWavParse * wav) + buf = NULL; + wav->offset += 12; + if ((res = +- gst_pad_pull_range (wav->sinkpad, wav->offset, ++ gst_wavparse_pull_range_exact (wav, wav->offset, + data_size, &buf)) != GST_FLOW_OK) +- goto header_read_error; ++ goto header_pull_error; + gst_buffer_map (buf, &map, GST_MAP_READ); + gst_wavparse_adtl_chunk (wav, (const guint8 *) map.data, + data_size); +@@ -1599,9 +1617,9 @@ gst_wavparse_stream_headers (GstWavParse * wav) + gst_buffer_unref (buf); + buf = NULL; + if ((res = +- gst_pad_pull_range (wav->sinkpad, wav->offset, ++ gst_wavparse_pull_range_exact (wav, wav->offset, + data_size, &buf)) != GST_FLOW_OK) +- goto header_read_error; ++ goto header_pull_error; + gst_buffer_map (buf, &map, GST_MAP_READ); + if (!gst_wavparse_cue_chunk (wav, (const guint8 *) map.data, + data_size)) { +@@ -1643,9 +1661,9 @@ gst_wavparse_stream_headers (GstWavParse * wav) + gst_buffer_unref (buf); + buf = NULL; + if ((res = +- gst_pad_pull_range (wav->sinkpad, wav->offset, ++ gst_wavparse_pull_range_exact (wav, wav->offset, + data_size, &buf)) != GST_FLOW_OK) +- goto header_read_error; ++ goto header_pull_error; + gst_buffer_map (buf, &map, GST_MAP_READ); + if (!gst_wavparse_smpl_chunk (wav, (const guint8 *) map.data, + data_size)) { +@@ -1797,6 +1815,17 @@ header_read_error: + ("Couldn't read in header %d (%s)", res, gst_flow_get_name (res))); + goto fail; + } ++header_pull_error: ++ { ++ if (res == GST_FLOW_EOS) { ++ GST_WARNING_OBJECT (wav, "Couldn't pull header %d (%s)", res, ++ gst_flow_get_name (res)); ++ } else { ++ GST_ELEMENT_ERROR (wav, STREAM, DEMUX, (NULL), ++ ("Couldn't pull header %d (%s)", res, gst_flow_get_name (res))); ++ } ++ goto exit; ++ } + } + + /* +-- +GitLab + diff --git a/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47775_47776_47777_47778-2.patch b/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47775_47776_47777_47778-2.patch new file mode 100644 index 0000000000..3df27b62bc --- /dev/null +++ b/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47775_47776_47777_47778-2.patch @@ -0,0 +1,38 @@ +From 4c198f4891cfabde868944d55ff98925e7beb757 Mon Sep 17 00:00:00 2001 +From: =?UTF-8?q?Sebastian=20Dr=C3=B6ge?= +Date: Fri, 4 Oct 2024 13:09:43 +0300 +Subject: [PATCH] wavparse: Make sure enough data for the tag list tag is + available before parsing + +Thanks to Antonio Morales for finding and reporting the issue. + +Fixes GHSL-2024-258 +Fixes https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3886 + +Part-of: + +Upstream-Status: Backport [https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/4c198f4891cfabde868944d55ff98925e7beb757] +CVE: CVE-2024-47775 CVE-2024-47776 CVE-2024-47777 CVE-2024-47778 +Signed-off-by: Vijay Anusuri +--- + subprojects/gst-plugins-good/gst/wavparse/gstwavparse.c | 4 ++++ + 1 file changed, 4 insertions(+) + +diff --git a/subprojects/gst-plugins-good/gst/wavparse/gstwavparse.c b/subprojects/gst-plugins-good/gst/wavparse/gstwavparse.c +index 97d5591fae8f..21cb48c07eb3 100644 +--- a/gst/wavparse/gstwavparse.c ++++ b/gst/wavparse/gstwavparse.c +@@ -1489,6 +1489,10 @@ gst_wavparse_stream_headers (GstWavParse * wav) + case GST_RIFF_TAG_LIST:{ + guint32 ltag; + ++ /* Need at least the ltag */ ++ if (size < 4) ++ goto exit; ++ + if (wav->streaming) { + const guint8 *data = NULL; + +-- +GitLab + diff --git a/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47775_47776_47777_47778-3.patch b/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47775_47776_47777_47778-3.patch new file mode 100644 index 0000000000..010041aa4e --- /dev/null +++ b/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47775_47776_47777_47778-3.patch @@ -0,0 +1,62 @@ +From 296e17b4ea81e5c228bb853f6037b654fdca7d47 Mon Sep 17 00:00:00 2001 +From: =?UTF-8?q?Sebastian=20Dr=C3=B6ge?= +Date: Fri, 4 Oct 2024 13:15:27 +0300 +Subject: [PATCH] wavparse: Fix parsing of acid chunk + +Simply casting the bytes to a struct can lead to crashes because of unaligned +reads, and is also missing the endianness swapping that is necessary on big +endian architectures. + +Part-of: + +Upstream-Status: Backport [https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/296e17b4ea81e5c228bb853f6037b654fdca7d47] +CVE: CVE-2024-47775 CVE-2024-47776 CVE-2024-47777 CVE-2024-47778 +Signed-off-by: Vijay Anusuri +--- + .../gst-plugins-good/gst/wavparse/gstwavparse.c | 12 +++++------- + 1 file changed, 5 insertions(+), 7 deletions(-) + +diff --git a/subprojects/gst-plugins-good/gst/wavparse/gstwavparse.c b/subprojects/gst-plugins-good/gst/wavparse/gstwavparse.c +index 21cb48c07eb3..6a0c44638ea2 100644 +--- a/gst/wavparse/gstwavparse.c ++++ b/gst/wavparse/gstwavparse.c +@@ -1434,8 +1434,7 @@ gst_wavparse_stream_headers (GstWavParse * wav) + break; + } + case GST_RIFF_TAG_acid:{ +- const gst_riff_acid *acid = NULL; +- const guint data_size = sizeof (gst_riff_acid); ++ const guint data_size = 24; + gfloat tempo; + + GST_INFO_OBJECT (wav, "Have acid chunk"); +@@ -1449,13 +1448,13 @@ gst_wavparse_stream_headers (GstWavParse * wav) + break; + } + if (wav->streaming) { ++ const guint8 *data; + if (!gst_wavparse_peek_chunk (wav, &tag, &size)) { + goto exit; + } + gst_adapter_flush (wav->adapter, 8); +- acid = (const gst_riff_acid *) gst_adapter_map (wav->adapter, +- data_size); +- tempo = acid->tempo; ++ data = gst_adapter_map (wav->adapter, data_size); ++ tempo = GST_READ_FLOAT_LE (data + 20); + gst_adapter_unmap (wav->adapter); + } else { + GstMapInfo map; +@@ -1466,8 +1465,7 @@ gst_wavparse_stream_headers (GstWavParse * wav) + &buf)) != GST_FLOW_OK) + goto header_pull_error; + gst_buffer_map (buf, &map, GST_MAP_READ); +- acid = (const gst_riff_acid *) map.data; +- tempo = acid->tempo; ++ tempo = GST_READ_FLOAT_LE (map.data + 20); + gst_buffer_unmap (buf, &map); + } + /* send data as tags */ +-- +GitLab + diff --git a/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47775_47776_47777_47778-4.patch b/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47775_47776_47777_47778-4.patch new file mode 100644 index 0000000000..c7c3dbed46 --- /dev/null +++ b/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47775_47776_47777_47778-4.patch @@ -0,0 +1,34 @@ +From c72025cabdfcb2fe30d24eda7bb9d1d01a1b6555 Mon Sep 17 00:00:00 2001 +From: =?UTF-8?q?Sebastian=20Dr=C3=B6ge?= +Date: Fri, 4 Oct 2024 13:21:44 +0300 +Subject: [PATCH] wavparse: Check that at least 4 bytes are available before + parsing cue chunks + +Part-of: + +Upstream-Status: Backport [https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/c72025cabdfcb2fe30d24eda7bb9d1d01a1b6555] +CVE: CVE-2024-47775 CVE-2024-47776 CVE-2024-47777 CVE-2024-47778 +Signed-off-by: Vijay Anusuri +--- + subprojects/gst-plugins-good/gst/wavparse/gstwavparse.c | 5 +++++ + 1 file changed, 5 insertions(+) + +diff --git a/subprojects/gst-plugins-good/gst/wavparse/gstwavparse.c b/subprojects/gst-plugins-good/gst/wavparse/gstwavparse.c +index 6a0c44638ea2..5655ee3825ca 100644 +--- a/gst/wavparse/gstwavparse.c ++++ b/gst/wavparse/gstwavparse.c +@@ -790,6 +790,11 @@ gst_wavparse_cue_chunk (GstWavParse * wav, const guint8 * data, guint32 size) + return TRUE; + } + ++ if (size < 4) { ++ GST_WARNING_OBJECT (wav, "broken file %d", size); ++ return FALSE; ++ } ++ + ncues = GST_READ_UINT32_LE (data); + + if (size < 4 + ncues * 24) { +-- +GitLab + diff --git a/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47775_47776_47777_47778-5.patch b/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47775_47776_47777_47778-5.patch new file mode 100644 index 0000000000..89b240998a --- /dev/null +++ b/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47775_47776_47777_47778-5.patch @@ -0,0 +1,37 @@ +From 93d79c22a82604adc5512557c1238f72f41188c4 Mon Sep 17 00:00:00 2001 +From: =?UTF-8?q?Sebastian=20Dr=C3=B6ge?= +Date: Fri, 4 Oct 2024 13:22:02 +0300 +Subject: [PATCH] wavparse: Check that at least 32 bytes are available before + parsing smpl chunks + +Thanks to Antonio Morales for finding and reporting the issue. + +Fixes GHSL-2024-259 +Fixes https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3887 + +Part-of: + +Upstream-Status: Backport [https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/93d79c22a82604adc5512557c1238f72f41188c4] +CVE: CVE-2024-47775 CVE-2024-47776 CVE-2024-47777 CVE-2024-47778 +Signed-off-by: Vijay Anusuri +--- + subprojects/gst-plugins-good/gst/wavparse/gstwavparse.c | 3 +++ + 1 file changed, 3 insertions(+) + +diff --git a/subprojects/gst-plugins-good/gst/wavparse/gstwavparse.c b/subprojects/gst-plugins-good/gst/wavparse/gstwavparse.c +index 5655ee3825ca..8a04805ed427 100644 +--- a/gst/wavparse/gstwavparse.c ++++ b/gst/wavparse/gstwavparse.c +@@ -894,6 +894,9 @@ gst_wavparse_smpl_chunk (GstWavParse * wav, const guint8 * data, guint32 size) + { + guint32 note_number; + ++ if (size < 32) ++ return FALSE; ++ + /* + manufacturer_id = GST_READ_UINT32_LE (data); + product_id = GST_READ_UINT32_LE (data + 4); +-- +GitLab + diff --git a/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47775_47776_47777_47778-6.patch b/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47775_47776_47777_47778-6.patch new file mode 100644 index 0000000000..0ad2592bc9 --- /dev/null +++ b/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47775_47776_47777_47778-6.patch @@ -0,0 +1,44 @@ +From 526d0eef0d850c8f2fa1bf0aef15a836797f1a67 Mon Sep 17 00:00:00 2001 +From: =?UTF-8?q?Sebastian=20Dr=C3=B6ge?= +Date: Fri, 4 Oct 2024 13:27:27 +0300 +Subject: [PATCH] wavparse: Fix clipping of size to the file size + +The size does not include the 8 bytes tag and length, so an additional 8 bytes +must be removed here. 8 bytes are always available at this point because +otherwise the parsing of the tag and length right above would've failed. + +Thanks to Antonio Morales for finding and reporting the issue. + +Fixes GHSL-2024-260 +Fixes https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3888 + +Part-of: + +Upstream-Status: Backport [https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/526d0eef0d850c8f2fa1bf0aef15a836797f1a67] +CVE: CVE-2024-47775 CVE-2024-47776 CVE-2024-47777 CVE-2024-47778 +Signed-off-by: Vijay Anusuri +--- + subprojects/gst-plugins-good/gst/wavparse/gstwavparse.c | 5 +++-- + 1 file changed, 3 insertions(+), 2 deletions(-) + +diff --git a/subprojects/gst-plugins-good/gst/wavparse/gstwavparse.c b/subprojects/gst-plugins-good/gst/wavparse/gstwavparse.c +index 8a04805ed427..998cbb276dbf 100644 +--- a/gst/wavparse/gstwavparse.c ++++ b/gst/wavparse/gstwavparse.c +@@ -1338,10 +1338,11 @@ gst_wavparse_stream_headers (GstWavParse * wav) + } + + /* Clip to upstream size if known */ +- if (upstream_size > 0 && size + wav->offset > upstream_size) { ++ if (upstream_size > 0 && size + 8 + wav->offset > upstream_size) { + GST_WARNING_OBJECT (wav, "Clipping chunk size to file size"); + g_assert (upstream_size >= wav->offset); +- size = upstream_size - wav->offset; ++ g_assert (upstream_size - wav->offset >= 8); ++ size = upstream_size - wav->offset - 8; + } + + /* wav is a st00pid format, we don't know for sure where data starts. +-- +GitLab + diff --git a/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47775_47776_47777_47778-7.patch b/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47775_47776_47777_47778-7.patch new file mode 100644 index 0000000000..d73359f375 --- /dev/null +++ b/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good/CVE-2024-47775_47776_47777_47778-7.patch @@ -0,0 +1,38 @@ +From 4f381d15014471b026020d0990a5f5a9f420a22b Mon Sep 17 00:00:00 2001 +From: =?UTF-8?q?Sebastian=20Dr=C3=B6ge?= +Date: Fri, 4 Oct 2024 13:51:00 +0300 +Subject: [PATCH] wavparse: Check size before reading ds64 chunk + +Thanks to Antonio Morales for finding and reporting the issue. + +Fixes GHSL-2024-261 +Fixes https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3889 + +Part-of: + +Upstream-Status: Backport [https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/4f381d15014471b026020d0990a5f5a9f420a22b] +CVE: CVE-2024-47775 CVE-2024-47776 CVE-2024-47777 CVE-2024-47778 +Signed-off-by: Vijay Anusuri +--- + subprojects/gst-plugins-good/gst/wavparse/gstwavparse.c | 5 +++++ + 1 file changed, 5 insertions(+) + +diff --git a/subprojects/gst-plugins-good/gst/wavparse/gstwavparse.c b/subprojects/gst-plugins-good/gst/wavparse/gstwavparse.c +index 998cbb276dbf..958868de6d9e 100644 +--- a/gst/wavparse/gstwavparse.c ++++ b/gst/wavparse/gstwavparse.c +@@ -1088,6 +1088,11 @@ parse_ds64 (GstWavParse * wav, GstBuffer * buf) + guint32 sampleCountLow, sampleCountHigh; + + gst_buffer_map (buf, &map, GST_MAP_READ); ++ if (map.size < 6 * 4) { ++ GST_WARNING_OBJECT (wav, "Too small ds64 chunk (%" G_GSIZE_FORMAT ")", ++ map.size); ++ return FALSE; ++ } + dataSizeLow = GST_READ_UINT32_LE (map.data + 2 * 4); + dataSizeHigh = GST_READ_UINT32_LE (map.data + 3 * 4); + sampleCountLow = GST_READ_UINT32_LE (map.data + 4 * 4); +-- +GitLab + diff --git a/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good_1.20.7.bb b/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good_1.20.7.bb index 8cf08c5088..e82473086e 100644 --- a/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good_1.20.7.bb +++ b/meta/recipes-multimedia/gstreamer/gstreamer1.0-plugins-good_1.20.7.bb @@ -30,6 +30,13 @@ SRC_URI = "https://gstreamer.freedesktop.org/src/gst-plugins-good/gst-plugins-go file://CVE-2024-47606.patch \ file://CVE-2024-47613.patch \ file://CVE-2024-47774.patch \ + file://CVE-2024-47775_47776_47777_47778-1.patch \ + file://CVE-2024-47775_47776_47777_47778-2.patch \ + file://CVE-2024-47775_47776_47777_47778-3.patch \ + file://CVE-2024-47775_47776_47777_47778-4.patch \ + file://CVE-2024-47775_47776_47777_47778-5.patch \ + file://CVE-2024-47775_47776_47777_47778-6.patch \ + file://CVE-2024-47775_47776_47777_47778-7.patch \ " SRC_URI[sha256sum] = "599f093cc833a1e346939ab6e78a3f8046855b6da13520aae80dd385434f4ab2" From patchwork Tue Jan 7 18:08:28 2025 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Steve Sakoman X-Patchwork-Id: 55149 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 9E847E77199 for ; Tue, 7 Jan 2025 18:09:03 +0000 (UTC) Received: from mail-pl1-f177.google.com (mail-pl1-f177.google.com [209.85.214.177]) by mx.groups.io with SMTP id smtpd.web11.112.1736273342288338808 for ; Tue, 07 Jan 2025 10:09:02 -0800 Authentication-Results: mx.groups.io; dkim=pass header.i=@sakoman-com.20230601.gappssmtp.com header.s=20230601 header.b=u1qy7XCR; spf=softfail (domain: sakoman.com, ip: 209.85.214.177, mailfrom: steve@sakoman.com) Received: by mail-pl1-f177.google.com with SMTP id d9443c01a7336-2163b0c09afso232370485ad.0 for ; Tue, 07 Jan 2025 10:09:02 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sakoman-com.20230601.gappssmtp.com; s=20230601; t=1736273341; x=1736878141; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=LRWM4tVEIl9oAclRTawlgWTBP0pJjVXD8d2BQ//0ua0=; b=u1qy7XCR6Cl7ZSHRqD8/aBo8+b5hAQPNk7mt/SHtXYAJHksyra4SMx2ZXsMN5HBehz JMnSSS9f0AChDcQbybdCydcEwMoWkw64mDX/LtR5os6llEBmtbuCv7ofzAlceeGdH30J Wcad0K8jq+C9sqRrhAMgyA9qSdrO5afkBw9MHyifd8jo5seIvRTMyht81jx7spszLgpW L4xNxraNC16/40fllo0t8MRm/JHdi56twkadLn96rbGypbEYFPb/2gfV18qUs0cFQumS jveFf0WKeq9VhA5pEEaoDnMxs/D+jUs85a8gIVJVDpYR7ho19ArxNBjUC7va0SS3cubG URUg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1736273341; x=1736878141; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=LRWM4tVEIl9oAclRTawlgWTBP0pJjVXD8d2BQ//0ua0=; b=ljfYsg0gugTB/62uccPo0xWtXSef10c+vdjY70iRdGzB0OyCI0GChwQHkM76W52D7f FWWtjbHWRgkxQvCrtbq+Uy1ilcuJz/5CXWNy9otFpZezJr2axUqcq27KSw/noJ3QSzgn pTDBMY32bYCsPyhLW5bQtTDqT2aL+cdz6FzWa84lcp8sR3VYePUKZodeGjrbWM/alubo c/crhwpNySCwEfr5urhr9YJtnONgxZQJyBDwGFJ9PrpthdppWF8453ab2952pjgECPcx MGeKxDDNk69eZyV7UzeGnOm/wvM2+SHjG2xt2hz3M/2XVZbwhsAQfha4AMhLC/f+T9Nh RP7g== X-Gm-Message-State: AOJu0YzllpFfrkNidV8m3KE8oaQine7zpHrIAnHu1hYU+wOIE8OmxYFU 0iuQqCDrlmqsULTU3mR1cwN6U6hdcCpF2BueyCzI/cgfK+N0rmPzTGUmxiqoSPRuFPtT7ChcD0c m+q0= X-Gm-Gg: ASbGncv5b4UQpg3n2+uB7lfClfSwmmFFeLB/PuGoBSg3L2aPxnKUK0Vm0xVwlZybH86 DGgQtjL4gBPgSQJpxbVHKOzj5z0uG8EcNzj9oQud6awxwWifelGub7Led2oDy/ToW3YQL+Y1BdN ItPG54e/wmONJC2yKpt47WUfq1K9diaHphxQekQW8Q7J+EOzoylT6njhnnuei15KIx22hQLrXjx OQgtXs7S4Ybqsw4jvI0yxrSvLNaCOBqOQLr86/Bd/9xHQ== X-Google-Smtp-Source: AGHT+IGiU8K8lEPUBXEJ024ofqM1KDMNc6y1vJ/02mKnjd8zGG/bh5OIifdtMrI9VO1dGNYWgQwGUw== X-Received: by 2002:a17:902:d2cc:b0:216:70b6:8723 with SMTP id d9443c01a7336-219e6f1090dmr865281685ad.44.1736273340817; Tue, 07 Jan 2025 10:09:00 -0800 (PST) Received: from hexa.. ([98.142.47.158]) by smtp.gmail.com with ESMTPSA id d9443c01a7336-219dc9f4413sm314166335ad.172.2025.01.07.10.08.59 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 07 Jan 2025 10:09:00 -0800 (PST) From: Steve Sakoman To: openembedded-core@lists.openembedded.org Subject: [OE-core][kirkstone 10/19] linux-yocto/5.15: update to v5.15.167 Date: Tue, 7 Jan 2025 10:08:28 -0800 Message-ID: <69ec31c3eb83c4e0bdea1f748366c4ad2746f28d.1736273200.git.steve@sakoman.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Tue, 07 Jan 2025 18:09:03 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/209491 From: Bruce Ashfield Updating linux-yocto/5.15 to the latest korg -stable release that comprises the following commits: 3a5928702e71 Linux 5.15.167 d7037dc85112 udp: fix receiving fraglist GSO packets e6cc9ff2ac0b memcg: protect concurrent access to mem_cgroup_idr d116a0b0e02f btrfs: fix race between direct IO write and fsync when using same fd 5d8254e01299 net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket ba2af6448fd1 x86/mm: Fix PTI for i386 some more 413e785a89f8 net: drop bad gso csum_start and offset in virtio_net_hdr c60a555f4949 gso: fix dodgy bit handling for GSO_UDP_L4 5c3e0ed81058 net: change maximum number of UDP segments to 128 ed3f2af02268 net: more strict VIRTIO_NET_HDR_GSO_UDP_L4 validation fdc567c05fce gpio: rockchip: fix OF node leak in probe() ae9363987319 drm/i915/fence: Mark debug_fence_free() with __maybe_unused fb1104bb2ae3 drm/i915/fence: Mark debug_fence_init_onstack() with __maybe_unused 6958e0df8c9c ASoC: sunxi: sun4i-i2s: fix LRCLK polarity in i2s mode 91dad30c5607 nvmet-tcp: fix kernel crash if commands allocation fails 945be49f4e83 arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry 1f12c0e470c8 arm64: acpi: Move get_cpu_for_acpi_id() to a header f44c27d12485 ACPI: processor: Fix memory leaks in error paths of processor_add() b77a7a5ac6bc ACPI: processor: Return an error if acpi_processor_get_info() fails in processor_add() 9d08fce64dd7 workqueue: Improve scalability of workqueue watchdog touch f67401f3857f workqueue: wq_watchdog_touch is always called with valid CPU b14e7260bb69 nilfs2: protect references to superblock parameters exposed in sysfs dbcc19de2d83 nilfs2: replace snprintf in show functions with sysfs_emit 3fd8473d73fd ksmbd: Unlock on in ksmbd_tcp_set_interfaces() 9914f1bd61d5 ksmbd: unset the binding mark of a reused connection 52d13d224fdf perf/aux: Fix AUX buffer serialization 9fadd335df31 uprobes: Use kzalloc to allocate xol area 2c78dd75dd0a clocksource/drivers/timer-of: Remove percpu irq related code a5f2703f7550 clocksource/drivers/imx-tpm: Fix next event not taking effect sometime 0746401d759a clocksource/drivers/imx-tpm: Fix return -ETIME when delta exceeds INT_MAX ef5f4d0c5ee2 VMCI: Fix use-after-free when removing resource in vmci_resource_remove() c36c826ad3e6 Drivers: hv: vmbus: Fix rescind handling in uio_hv_generic 3005091cd537 uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind 7d1d48eb100a nvmem: Fix return type of devm_nvmem_device_get() in kerneldoc eef79854a04f binder: fix UAF caused by offsets overwrite 9b9651f70856 usb: dwc3: core: update LC timer as per USB Spec V3.2 0fd0ef7cf09b iio: adc: ad7124: fix chip ID mismatch 4dcc19009b40 iio: adc: ad7124: fix config comparison 3be69c24936f iio: fix scale application in iio_convert_raw_to_processed_unlocked 3d2d5c74004e iio: buffer-dmaengine: fix releasing dma channel on error d8b09a5edc4a staging: iio: frequency: ad9834: Validate frequency parameter value d990692bea3d cifs: Check the lease context if we actually got a lease b5c7121ec14d NFSv4: Add missing rescheduling points in nfs_client_return_marked_delegations 802c7eb7e52b ata: pata_macio: Use WARN instead of BUG e6cd871627ab MIPS: cevt-r4k: Don't call get_c0_compare_int if timer irq is installed ad5ee9feebc2 lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() baaf26723bea of/irq: Prevent device address out-of-bounds read in interrupt map walk 087f25b2d36a Squashfs: sanity check symbolic link size 0914c26262f4 usbnet: ipheth: race between ipheth_close and error handling 9719687398de Input: uinput - reject requests with unreasonable number of slots 86b4f5cf91ca HID: amd_sfh: free driver_data after destroying hid device 890dde6001b6 HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup 945b12960fe6 s390/vmlinux.lds.S: Move ro_after_init section behind rodata section f1757142c50a btrfs: initialize location to fix -Wmaybe-uninitialized in btrfs_lookup_dentry() 18e65173fe99 kselftests: dmabuf-heaps: Ensure the driver name is null-terminated cacb76df247a i3c: mipi-i3c-hci: Error out instead on BUG_ON() in IBI DMA setup 289d0822be95 net: dpaa: avoid on-stack arrays of NR_CPUS elements 04e85a3285b0 PCI: Add missing bridge lock to pci_bus_lock() 197f7a2e24a5 riscv: set trap vector earlier b50857b96429 btrfs: replace BUG_ON() with error handling at update_ref_for_cow() 728d4d045b62 btrfs: clean up our handling of refs == 0 in snapshot delete 3cf21d00d3ee btrfs: replace BUG_ON with ASSERT in walk_down_proc() b7b1be372155 fs/ntfs3: Check more cases when directory is corrupted e8665ac40072 smp: Add missing destroy_work_on_stack() call in smp_call_on_cpu() cb67b2e51b75 wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id() 68a04c30cb63 dma-mapping: benchmark: Don't starve others when doing the test 4ac7b43e4e84 ext4: fix possible tid_t sequence overflows 15101f16dec9 drm/amdgpu: Set no_hw_access when VF request full GPU fails bc152bd3c9c0 libbpf: Add NULL checks to bpf_object__{prev_map,next_map} cc4be794c8d8 hwmon: (w83627ehf) Fix underflows seen when writing limit attributes 02bb3b4c7d56 hwmon: (nct6775-core) Fix underflows seen when writing limit attributes 0fc27747633a hwmon: (lm95234) Fix underflows seen when writing limit attributes 019ef2d39636 hwmon: (adc128d818) Fix underflows seen when writing limit attributes c0d8094dc740 pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv 0977a0a3ba65 devres: Initialize an uninitialized struct member 43f782c27907 um: line: always fill *error_out in setup_one_line() f386359d1b32 cgroup: Protect css->cgroup write under css_set_lock df6e78ba22ed iommu/vt-d: Handle volatile descriptor status read 8ab1d1fed7f0 dm init: Handle minors larger than 255 2aa4bacbff44 ASoC: topology: Properly initialize soc_enum values ebe29eedb1b5 net: dsa: vsc73xx: fix possible subblocks range of CAPT block 4e777199c057 net: bridge: br_fdb_external_learn_add(): always set EXT_LEARN 4494bccb52ff fou: Fix null-ptr-deref in GRO. 3bcdbf9002a8 gro: remove rcu_read_lock/rcu_read_unlock from gro_complete handlers 8d84e1a87a32 gro: remove rcu_read_lock/rcu_read_unlock from gro_receive handlers 5ccc2e5d074b bareudp: Fix device stats updates. f12886ff7b5d usbnet: modern method to get random MAC 010038823be2 net: usb: don't write directly to netdev->dev_addr fa797f4e30b2 ice: check ICE_VSI_DOWN under rtnl_lock when preparing for reset 84508c370337 igc: Unlock on error in igc_io_resume() 78bb38d9c5a3 tcp_bpf: fix return value of tcp_bpf_sendmsg() cff3cbba73d5 platform/x86: dell-smbios: Fix error path in dell_smbios_init() a4792648475f igb: Fix not clearing TimeSync interrupts for 82580 508b52aa958e can: m_can: Release irq on error in m_can_open 10bfacbd5e8d can: bcm: Remove proc entry when dev is unregistered. 51d57093340a drm/amdgpu: check for LINEAR_ALIGNED correctly in check_tiling_flags_gfx6 8decfd84e67d pcmcia: Use resource_size function on resource object 0e5a3d5fdff5 media: qcom: camss: Add check for v4l2_fwnode_endpoint_parse 135843c351c0 PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0) a1659ed3f966 media: vivid: don't set HDMI TX controls if there are no HDMI outputs 32fca3bb5fc1 drm/amd/display: Check HDCP returned status dc74386c67aa usb: uas: set host status byte on data completion error 0186d0d1af80 wifi: brcmsmac: advertise MFP_CAPABLE to enable WPA3 36e2bc79af36 leds: spi-byte: Call of_node_put() on error path 5a884b46324e media: vivid: fix wrong sizeimage value for mplane 2ddf83145135 udf: Avoid excessive partition lengths 8d63b70d2f25 netfilter: nf_conncount: fix wrong variable type 3e2ea7d682a0 iommu: sun50i: clear bypass register 683c0b103934 af_unix: Remove put_pid()/put_cred() in copy_peercred(). 3f56c976b047 irqchip/armada-370-xp: Do not allow mapping IRQ 0 and 1 09e89a5e1173 smack: unix sockets: fix accept()ed socket label 22d3b037ddc5 ALSA: hda: Add input value sanity checks to HDMI channel map controls c6877abcdb25 mptcp: pm: send ACK on an active subflow fd5364b22fc1 mptcp: pr_debug: add missing \n at the end c743fd11891a mptcp: pm: skip connecting to already established sf 058f8d980e4d mptcp: pm: do not remove already closed subflows 592dd6f8b658 mptcp: pm: ADD_ADDR 0 is not a new address 38cdf2f1b33e mptcp: close subflow when receiving TCP+FIN 01264bdde5f7 mptcp: avoid duplicated SUB_CLOSED events f2c865e9e3ca mptcp: pm: avoid possible UaF when selecting endp 8e73f8d6a455 mptcp: constify a bunch of of helpers aef351c58a9b mptcp: pm: fullmesh: select the right ID later 4d4e3a29e701 mptcp: pm: check add_addr_accept_max before accepting new ADD_ADDR 35b31f5549ed mptcp: pm: only decrement add_addr_accepted for MPJ req 32ba711800a3 mptcp: pm: re-using ID of unused flushed subflows 3e349d7191f0 nilfs2: fix state management in error path of log writing function 8e2d1e9d93c4 nilfs2: fix missing cleanup on rollforward recovery error cde71a567797 sched: sch_cake: fix bulk flow accounting logic for host fairness bda4d84ac0d5 ila: call nf_unregister_net_hooks() sooner 3816867d2fc4 tracing: Avoid possible softlockup in tracing_iter_reset() 513c8fc189b5 can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open 3172376d26e4 clk: qcom: clk-alpha-pll: Fix the trion pll postdiv set rate API 5dd47383ceaf clk: qcom: clk-alpha-pll: Fix the pll post div mask e24c19c6e3c6 fuse: use unsigned type for getxattr/listxattr size truncation 811016d5a390 fuse: update stats for pages in dropped aux writeback list c0f43b1f1f7d mmc: cqhci: Fix checking of CQHCI_HALT state e89943fc4cbe mmc: sdhci-of-aspeed: fix module autoloading 9d715a234dd8 mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K 57b6ead5719e Bluetooth: MGMT: Ignore keys being loaded with invalid type d98304eaacc6 Revert "Bluetooth: MGMT/SMP: Fix address type when using SMP over BREDR/LE" 0bfa0fa207b4 nvme-pci: Add sleep quirk for Samsung 990 Evo 93f44655472d rtmutex: Drop rt_mutex::wait_lock before scheduling b322a385c09a irqchip/gic-v2m: Fix refcount leak in gicv2m_of_init() 9bbc71fa3d56 ata: libata: Fix memory leak for error path in ata_host_alloc() c03d9115c5ca ALSA: hda/realtek: Support mute LED on HP Laptop 14-dq2xxx 326303f886a9 ALSA: hda/realtek: add patch for internal mic in Lenovo V145 172359315301 ALSA: hda/conexant: Add pincfg quirk to enable top speakers on Sirius devices d1f7a12c2b2e KVM: SVM: Don't advertise Bus Lock Detect to guest if SVM support is missing e3e0cb027173 KVM: SVM: fix emulation of msr reads/writes of MSR_FS_BASE and MSR_GS_BASE 3033ed903b4f ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object 14f91ab8d391 sch/netem: fix use after free in netem_dequeue 366a1e578201 i2c: Use IS_REACHABLE() for substituting empty ACPI functions be1443518365 ext4: handle redirtying in ext4_bio_write_page() 64022ce8e99d udf: Limit file size to 4TB 1464cb82a489 ext4: reject casefold inode flag without casefold feature af7b560c88fb rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow cc7340f18e45 virtio_net: Fix napi_skb_cache_put warning 0fa11f9df962 drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr 68a772884b83 media: uvcvideo: Enforce alignment of frame and interval 6d94c05a13fa drm/amd/display: Skip wbscl_set_scaler_filter if filter is null 6980861e039d block: remove the blk_flush_integrity call in blk_integrity_unregister 1339615aca2c wifi: cfg80211: make hash table duplicates more survivable adc5674c23b8 drm/bridge: tc358767: Check if fully initialized before signalling HPD event via IRQ c9431980407b drm/meson: plane: Add error handling 0aea09e82eaf smack: tcp: ipv4, fix incorrect labeling f9a48bc3dd90 fsnotify: clear PARENT_WATCHED flags lazily 3aa56313b0de usb: typec: ucsi: Fix null pointer dereference in trace e1c92f66f62d usbip: Don't submit special requests twice 34255103ff75 rcu/nocb: Remove buggy bypass lock contention mitigation f8b96d4e8257 ionic: fix potential irq name truncation b8105982c286 RDMA/efa: Properly handle unexpected AQ completions 2da121e397ba hwspinlock: Introduce hwspin_lock_bust() 56af1b0f07e5 PCI: al: Check IORESOURCE_BUS existence during probe 29f45f2588ed cpufreq: scmi: Avoid overflow of target_freq in fast switch ec4cb72a9b95 wifi: iwlwifi: remove fw_running op 36a77159b43a drm/amdgpu: update type of buf size to u32 for eeprom functions 2700dbd10aaa drm/amd/pm: check negtive return for table entries d04ded1e73f1 drm/amdgpu: the warning dereferencing obj for nbio_v7_4 acff7a94720a drm/amd/pm: check specific index for aldebaran f20d1d5cbb39 drm/amdgpu: fix the waring dereferencing hive bda7de66a9de drm/amdgpu/pm: Check input value for CUSTOM profile mode setting on legacy SOCs e3c7d23f7a5c apparmor: fix possible NULL pointer dereference 6cc5011865dd drm/amdkfd: Reconcile the definition and use of oem_id in struct kfd_topology_device 345bd3ad387f drm/amdgpu: fix mc_data out-of-bounds read warning 0bef65e069d8 drm/amdgpu: fix ucode out-of-bounds read warning 45f7b02afc46 drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number 919f9bf9997b drm/amdgpu: Fix out-of-bounds write warning 0fcc24121423 drm/amdgpu/pm: Fix uninitialized variable agc_btc_response 80ce7edcd45d drm/amdgpu/pm: Fix uninitialized variable warning for smu10 e55e3904ffea drm/amd/amdgpu: Check tbo resource pointer f37d6aa3df5f drm/amd/display: Fix Coverity INTEGER_OVERFLOW within dal_gpio_service_create fe63daf7b102 drm/amd/display: Check msg_id before processing transcation c4a7f7c0062f drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[] 0ee4387c5a4b drm/amd/display: Add array index check for hdcp ddc access 21bbb39863f1 drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6 0184cca30cad drm/amd/display: Check gpio_id before used as array index 0c445d98ef98 drm/amdgpu: avoid reading vf2pf info size from FB c5635fe6dca4 drm/amd/pm: fix uninitialized variable warnings for vega10_hwmgr f801292764be drm/amdgpu: fix uninitialized scalar variable warning 3317966efcdc drm/amd/pm: fix the Out-of-bounds read warning bcd00d0dbf00 drm/amd/pm: fix warning using uninitialized value of max_vid_step 6277aa2965de drm/amd/pm: fix uninitialized variable warning for smu8_hwmgr d16713773b65 drm/amdgpu/pm: Check the return value of smum_send_msg_to_smc 54528b614398 drm/amdgpu: fix overflowed array index read warning 4bd7710f2fec drm/amd/display: Assign linear_pitch_alignment even for VM a42ba93641bf drm/amdgpu: Fix uninitialized variable warning in amdgpu_afmt_acr 3ea66eddf54d net: usb: qmi_wwan: add MeiG Smart SRM825L 488702d1be32 dma-debug: avoid deadlock between dma debug vs printk and netconsole 8da2de41e66d i2c: Fix conditional for substituting empty ACPI functions 7abc0b4409aa ALSA: hda/conexant: Mute speakers at suspend / shutdown 2fd3143b2588 ALSA: hda/generic: Add a helper to mute speakers at suspend/shutdown 24a63d85bd49 drm: panel-orientation-quirks: Add quirk for OrangePi Neo 6f0605db50e2 clk: imx: Add check for kcalloc 5b837b9e1543 bpf: Fix the indention issue in grow_stack_state() 42b62697634d cifs: Fix the calling of smb_version_operations::calc_smb_size() b14acf729e9d f2fs: Add inline to f2fs_build_fault_attr() stub 7c317bec311f f2fs: check validation of fault attrs in f2fs_build_fault_attr() 81c12119c23f bpf: Fix accesses to uninit stack slots [ Upstream commit 6b4a64bafd107e521c01eec3453ce94a3fb38529 ] c4fa05422d87 smb: client: fix potential OOB in smb2_dump_detail() 299ef3b5b00b of: module: add buffer overflow check in of_modalias() b8086c3c1548 reiserfs: Avoid touching renamed directory if parent does not change ea091017ef62 ipv6: Fix data races around sk->sk_prot. ff8710da80ee ipv6: annotate some data-races around sk->sk_prot e8c2eafaaa6a tcp: Fix data races around icsk->icsk_af_ops. 8d1bab770956 locking/rwsem: Disable preemption while trying for rwsem lock 7c82dac02886 block, loop: support partitions without scanning 45f504f301d4 bpftool: Fix pretty print dump for maps without BTF loaded 1f24338cb789 jbd2: Drop the merge conflicted hunk e1d0e3c51bde tpm: tis_i2c: Limit write bursts to I2C_SMBUS_BLOCK_MAX (32) bytes 1abe841fe331 tpm: tis_i2c: Limit read bursts to I2C_SMBUS_BLOCK_MAX (32) bytes 6224acfc1d56 tpm: Add flag to use default cancellation policy 1cd19d48fb90 tpm: tis_i2c: Fix sanity check interrupt enable mask a883da132fa8 tpm: Add tpm_tis_i2c backend for tpm_tis_core a742ac8a1c51 tpm: Add tpm_tis_verify_crc to the tpm_tis_phy_ops protocol layer ef495c5f45f2 tpm: Remove read16/read32/write32 calls from tpm_tis_phy_ops 1f3be2e23aa6 gcc-plugins: Reorganize gimple includes for GCC 13 24615a3b932a ata: ahci: fix enum constants for gcc-13 5d6cb145541a net: stmmac: Enable mac_managed_pm phylink config fd93aabb4287 tools/resolve_btfids: Use pkg-config to locate libelf 130f9da78406 tools/resolve_btfids: Build with host flags 00f2f1a782f9 tools/resolve_btfids: Support cross-building the kernel with clang 17776a4ba9c2 tools/resolve_btfids: Install libbpf headers when building 7c9808380d70 libbpf: Make libbpf_version.h non-auto-generated 37ae1ba791ac libbpf: Add LIBBPF_DEPRECATED_SINCE macro for scheduling API deprecations a2667e6d7314 drm/radeon: free iio for atombios when driver shutdown f100c753aa1f powerpc: Fix reschedule bug in KUAP-unlocked user copy da5513f30187 libbpf: Fix build warning on ref_ctr_off 4c5a089621a8 perf python: Account for multiple words in CC 1c5699ee85d4 fs: move S_ISGID stripping into the vfs_*() helpers 838f5d0701d8 fs: add mode_strip_sgid() helper d97172683641 squashfs: provide backing_dev_info in order to disable read-ahead ed037d7be40c irq_work: use kasan_record_aux_stack_noalloc() record callstack 1363bd7dbde3 ixgbevf: add disable link state e5601ae2bd24 ixgbe: add improvement for MDD response functionality caa57cd80575 ixgbe: add the ability for the PF to disable VF link state 16a77bfcc7df Check /dev/console using init_stat() 04574fd5579a tracing/arm: Have max stack tracer handle the case of return address after data 0e51e5717018 gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully 1e6b7da6ddba drivers/base: Fix unsigned comparison to -1 in CPUMAP_FILE_MAX_BYTES 493160901320 mtd_blkdevs: add mtd_table_mutex lock back to blktrans_{open, release} to avoid race condition 04224f725aa3 irqchip/gic-v3-its: Skip HP notifier when no ITS is registered 6f6c2996a81c irqchip/gic-v3-its: Postpone LPI pending table freeing and memreserve 1fa94473423f irqchip/gic-v3-its: Give the percpu rdist struct its own flags field 6013d1ae5feb cert host tools: Stop complaining about deprecated OpenSSL functions efe20512212b init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash a40d2daf2795 pnmtologo: use relocatable file name 3b40d5b41155 of: configfs: remove unused variable overlay_lock 6c085baf1838 tools: use basename to identify file in gen-mach-types 2fca0fd71981 lib/build_OID_registry: fix reproducibility issues 0f586f4ee8ad vt/conmakehash: improve reproducibility a75774679f28 OF: DT-Overlay configfs interface (v8) d179c639b30b x86/boot: Wrap literal addresses in absolute_pointer() 856ec356cf91 ACPI: thermal: drop an always true check 7614af249993 xfs: Fix -Werror=dangling-pointer work-around for older GCC 41470215f97e xfs: Work around GCC 12 -Werror=dangling-pointer for xfs_attr_remote.o 44a445c1922d virtio-pci: Remove wrong address verification in vp_del_vqs() 77aa9e489eaf bpf: Disallow unprivileged bpf by default ebfb1822e9f9 fs/aufs: fixup 5.15.36 fixups 4eba9348d3e2 Revert "Revert "fbdev: Hot-unplug firmware fb devices on forced removal"" 5df6d1b00f95 jbd2: fix use-after-free of transaction_t race 2d83e8196487 jbd2: refactor wait logic for transaction updates into a common function 07a63f760793 netfilter: conntrack: avoid useless indirection during conntrack destruction 4e7122625996 Revert "fbdev: Hot-unplug firmware fb devices on forced removal" 7ba4cb36fd4f rcu: Avoid alloc_pages() when recording stack f78574dee71e kasan: test: silence intentional read overflow warnings d313cb89b6b1 kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC 5e279d5647cc arm64: support page mapping percpu first chunk allocator e5bf16752dca vmalloc: choose a better start address in vm_area_register_early() 660b3d21b46f kasan: test: bypass __alloc_size checks 00aa7573e53a kasan: test: add memcpy test that avoids out-of-bounds write 67becf0b1bd4 kasan: fix tag for large allocations when using CONFIG_SLAB bedf1e033213 workqueue, kasan: avoid alloc_pages() when recording stack 7195b67ce69b kasan: generic: introduce kasan_record_aux_stack_noalloc() bdff763f0e29 kasan: common: provide can_alloc in kasan_save_stack() 51423ebb36ad lib/stackdepot: introduce __stack_depot_save() 85373e66d847 lib/stackdepot: remove unused function argument 5b6cc9b251f3 lib/stackdepot: include gfp.h c9f3902d8069 aufs: reduce overhead for "code present but disabled" use case. b98d189df02c aufs: bugfix, umount passes NULL to ->parse_monolithic() 13b883cbbbd9 aufs standalone: cosmetic, missing copyright sentence 21f8b0d81898 aufs: 5.15.5-20220117 ---> 5.15.5-20220221 6199fd896645 aufs: tiny, headers after fs_context 8ddb40e31c29 aufs: fs_context 7/7, finally remount 69035f71c6fd aufs: fs_context 6/7, now mount bc841b970697 aufs: fs_context 5/7, parse all other mount options 435188053da2 aufs: fs_context 4/7, parse xino options 9af1f1825cbd aufs: fs_context 3/7, parse the branch-management options 1c05eb767f8c aufs: fs_context 2/7, parse "br" mount option a8488f603134 aufs: fs_context 1/7, skelton of the new shceme 8e32e0015564 aufs: pre fs_context, convert a static flag to a macro f90cb4144aec aufs: pre fs_context, support the incomplete sb and sbinfo case 948762ef859c aufs: pre fs_context, convert the type of alloc_sbinfo() 77151a08776b aufs: 5.15.5-20211129 ---> 5.15.5-20220117 2539adbbbe1e aufs: 5.14-20211018 ---> 5.15.5-20211129 7d32b25193c4 aufs: for v5.15-rc1, sync_inode() is gone 66ec0c509225 aufs: for v5.15-rc1, new param 'rcu' for ->get_acl() 69709dc518cd aufs: for v5.15-rc1, no mand-lock anymore ada8fe9543e5 aufs: 5.14-20210906 ---> 5.14-20211018 b77f7f3f394a Revert "aufs: adjust to v5.15 fs changes" 81bdce5b5876 tick/nohz: WARN_ON --> WARN_ON_ONCE to prevent console saturation 97c963889222 sched/isolation: really align nohz_full with rcu_nocbs 871f23ad3627 Revert "ARM: defconfig: Enable ax88796c driver for Exynos boards" ffad0783dd5b ARM: config: multi v7: Regenerate defconifg 5c1e1a1ff2d3 ARM: config: multi v7: Add renamed symbols badaf96564fe ARM: config: multi v7: Clean up enabled by default options 34996040fc9b ARM: config: multi v7: Drop unavailable options 7f685244afb3 powerpc/mm: Switch obsolete dssall to .long 20301aeb1a64 riscv: fix build with binutils 2.38 9df58d070506 powerpc/lib/sstep: fix 'ptesync' build error 720b61fc400b x86_64_defconfig: Fix warnings 02bf23d26bc4 arm64: defconfig: cleanup config options 05914e2c87e5 arm: defconfig: drop unused POWER_AVS option ffb532fa19b9 aufs5: fix build against v5.15.3+ a4b3abf4d96d qemux86: add configuration symbol to select values fee94ee09154 clear_warn_once: add a clear_warn_once= boot parameter 3d8762d900d9 clear_warn_once: bind a timer to written reset value 95faacac47e8 clear_warn_once: expand debugfs to include read support de20c4240018 perf: perf can not parser the backtrace of app in the 32bit system and 64bit kernel. 0e4aacead9c1 perf: x86-32: explicitly include 9ad92c11468e perf: mips64: Convert __u64 to unsigned long long 09e7efe3e68a perf: fix bench numa compilation e79becc44fa6 perf: add SLANG_INC for slang.h b1033b588681 perf: add sgidefs.h to for mips builds cf9db484ac0b perf: change --root to --prefix for python install 7fd052c2c562 perf: add 'libperl not found' warning 27a437cdd469 perf: force include of 3b99d21bec2f fat: don't use obsolete random32 call in namei_vfat a7e9293b506b FAT: Added FAT_NO_83NAME 6fd0e71d9e5c FAT: Add CONFIG_VFAT_NO_CREATE_WITH_LONGNAMES option c379b0d324ae FAT: Add CONFIG_VFAT_FS_NO_DUALNAMES option 538be0fdb124 aufs: adjust to v5.15 fs changes f45da75c8759 aufs5: core 047f57e07e01 aufs5: standalone 029fc15574c8 aufs5: mmap 610d0192ee94 aufs5: base d4e428d0ec5f aufs5: kbuild eb067eca251a yaffs: replace IS_ERR with IS_ERR_OR_NULL to check both ERR and NULL 286af18d0875 yaffs: fix -Wstringop-overread compile warning in yaffs_fix_null_name 24d59a4e26a6 yaffs2: v5.12+ build fixups (not runtime tested) 22c73536d5d7 yaffs: include blkdev.h 506b7251bfb8 yaffs: fix misplaced variable declaration a0e26ff364dc yaffs2: v5.6 build fixups b10b1b2d169e yaffs2: fix memory leak when /proc/yaffs is read ad9adccbb214 yaffs: add strict check when call yaffs_internal_read_super 2e3c3aec8279 yaffs: repair yaffs_get_mtd_device d662538516a7 yaffs: Fix build failure by handling inode i_version with proper atomic API 70a6113ee2c7 yaffs2: fix memory leak in mount/umount 3378e4a9e404 yaffs: Avoid setting any ACL releated xattr ec2284edddef Yaffs:check oob size before auto selecting Yaffs1 c2a49874051c fs: yaffs2: replace CURRENT_TIME by other appropriate apis e9a5105a3e73 yaffs2: adjust to proper location of MS_RDONLY 608807406f13 yaffs2: import git revision b4ce1bb (jan, 2020) 89e660ece42c initramfs: allow an optional wrapper script around initramfs generation b179dbc9aa10 iwlwifi: select MAC80211_LEDS conditionally 3fd5ca3673d0 net/dccp: make it depend on CONFIG_BROKEN (CVE-2020-16119) d1f6edbf0188 arm64/perf: Fix wrong cast that may cause wrong truncation d202fb2caf33 defconfigs: drop obselete options 9a27e3b5f4e7 arm64/perf: fix backtrace for AAPCS with FP enabled e20d8cf019b4 linux-yocto: Handle /bin/awk issues b6d2a3dbbd3a uvesafb: provide option to specify timeout for task completion adb40f1e6a1a uvesafb: print error message when task timeout occurs f280a1ed0962 compiler.h: Undef before redefining __attribute_const__ 4352732f268c vmware: include jiffies.h 7954a677968d Resolve jiffies wrapping about arp 5f28a1035d95 nfs: Allow default io size to be configured. 0d7260ad7106 check console device file on fs when booting 900a12e37e0a mount_root: clarify error messages for when no rootfs found 7b878cbea726 menuconfig,mconf-cfg: Allow specification of ncurses location 6604fc1763b3 modpost: mask trivial warnings 0d294adb09cb kbuild: exclude meta directory from distclean processing a097cdd95a9e powerpc: serialize image targets 5db6ec39a0a3 arm: serialize build targets cbabca27905e crtsavres: fixups for 5.4+ 7fc7656ed403 powerpc/ptrace: Disable array-bounds warning with gcc8 a5faac5a19a2 powerpc: Disable attribute-alias warnings from gcc8 186c54665b67 powerpc: add crtsavres.o to archprepare for kbuild d1ea862964ca powerpc: kexec fix for powerpc64 2ac35b89a0f9 powerpc: Add unwind information for SPE registers of E500 core 2e1c348a28bb mips: vdso: fix 'jalr $t9' crash in vdso code ec57870b303a mips: Kconfig: add QEMUMIPS64 option 6a81b3c08107 4kc cache tlb hazard: tlbp cache coherency 74e3b2a21e54 malta uhci quirks: make allowance for slow 4k(e)c 22e65b63d3b4 arm/Makefile: Fix systemtap b7f1ab59f19e vexpress: Pass LOADADDR to Makefile ce2800c73bf7 arm: ARM EABI socketcall 019d142fd956 ARM: LPAE: Invalidate the TLB for module addresses during translation fault Signed-off-by: Bruce Ashfield Signed-off-by: Steve Sakoman --- .../linux/linux-yocto-rt_5.15.bb | 6 ++--- .../linux/linux-yocto-tiny_5.15.bb | 6 ++--- meta/recipes-kernel/linux/linux-yocto_5.15.bb | 26 +++++++++---------- 3 files changed, 19 insertions(+), 19 deletions(-) diff --git a/meta/recipes-kernel/linux/linux-yocto-rt_5.15.bb b/meta/recipes-kernel/linux/linux-yocto-rt_5.15.bb index 9a616c6580..ee39aabbac 100644 --- a/meta/recipes-kernel/linux/linux-yocto-rt_5.15.bb +++ b/meta/recipes-kernel/linux/linux-yocto-rt_5.15.bb @@ -11,13 +11,13 @@ python () { raise bb.parse.SkipRecipe("Set PREFERRED_PROVIDER_virtual/kernel to linux-yocto-rt to enable it") } -SRCREV_machine ?= "66fb50de38a98582ec630efde6e48779cf1ad8a9" -SRCREV_meta ?= "567f0adb9d6462279d2e024153d0a8c3a3ff0551" +SRCREV_machine ?= "282f09eae637932615463274dd0c76a862a7c3d8" +SRCREV_meta ?= "150b4c5d88b91e848d757c8cad9d841b91163b75" SRC_URI = "git://git.yoctoproject.org/linux-yocto.git;branch=${KBRANCH};name=machine \ git://git.yoctoproject.org/yocto-kernel-cache;type=kmeta;name=meta;branch=yocto-5.15;destsuffix=${KMETA}" -LINUX_VERSION ?= "5.15.166" +LINUX_VERSION ?= "5.15.167" LIC_FILES_CHKSUM = "file://COPYING;md5=6bc538ed5bd9a7fc9398086aedcd7e46" diff --git a/meta/recipes-kernel/linux/linux-yocto-tiny_5.15.bb b/meta/recipes-kernel/linux/linux-yocto-tiny_5.15.bb index bb64fc455d..7d3a73d109 100644 --- a/meta/recipes-kernel/linux/linux-yocto-tiny_5.15.bb +++ b/meta/recipes-kernel/linux/linux-yocto-tiny_5.15.bb @@ -5,7 +5,7 @@ KCONFIG_MODE = "--allnoconfig" require recipes-kernel/linux/linux-yocto.inc -LINUX_VERSION ?= "5.15.166" +LINUX_VERSION ?= "5.15.167" LIC_FILES_CHKSUM = "file://COPYING;md5=6bc538ed5bd9a7fc9398086aedcd7e46" DEPENDS += "${@bb.utils.contains('ARCH', 'x86', 'elfutils-native', '', d)}" @@ -14,8 +14,8 @@ DEPENDS += "openssl-native util-linux-native" KMETA = "kernel-meta" KCONF_BSP_AUDIT_LEVEL = "2" -SRCREV_machine ?= "38da3ed27e665b67bab0063860ee41eb65d77a37" -SRCREV_meta ?= "567f0adb9d6462279d2e024153d0a8c3a3ff0551" +SRCREV_machine ?= "f280216b8c5a4795f402e24a31689a6d492d078e" +SRCREV_meta ?= "150b4c5d88b91e848d757c8cad9d841b91163b75" PV = "${LINUX_VERSION}+git${SRCPV}" diff --git a/meta/recipes-kernel/linux/linux-yocto_5.15.bb b/meta/recipes-kernel/linux/linux-yocto_5.15.bb index 377ae22e80..9ac3e8368d 100644 --- a/meta/recipes-kernel/linux/linux-yocto_5.15.bb +++ b/meta/recipes-kernel/linux/linux-yocto_5.15.bb @@ -14,24 +14,24 @@ KBRANCH:qemux86 ?= "v5.15/standard/base" KBRANCH:qemux86-64 ?= "v5.15/standard/base" KBRANCH:qemumips64 ?= "v5.15/standard/mti-malta64" -SRCREV_machine:qemuarm ?= "b289f21c7b9243734e00379101f3c95ebb141a5b" -SRCREV_machine:qemuarm64 ?= "37bacb1a9110a39a0e993b74136209f78706a803" -SRCREV_machine:qemumips ?= "c94b9753f5b0c765642d735b691247d2c1fb839d" -SRCREV_machine:qemuppc ?= "c8834e0bad0de37a2d70a07fdc52e7460d685611" -SRCREV_machine:qemuriscv64 ?= "a78a1043113066981d74825afce38bca3063664f" -SRCREV_machine:qemuriscv32 ?= "a78a1043113066981d74825afce38bca3063664f" -SRCREV_machine:qemux86 ?= "a78a1043113066981d74825afce38bca3063664f" -SRCREV_machine:qemux86-64 ?= "a78a1043113066981d74825afce38bca3063664f" -SRCREV_machine:qemumips64 ?= "28da2017909cb5a715a71c53654cc098e61821cd" -SRCREV_machine ?= "a78a1043113066981d74825afce38bca3063664f" -SRCREV_meta ?= "567f0adb9d6462279d2e024153d0a8c3a3ff0551" +SRCREV_machine:qemuarm ?= "6eac800fa7a11f4de7a74b578efa0bba47360ded" +SRCREV_machine:qemuarm64 ?= "866724b5bb6c32f16adb648e4b251227b711ea07" +SRCREV_machine:qemumips ?= "bbb3f06bae8f8954e6725a75fd693512d91c5f29" +SRCREV_machine:qemuppc ?= "3e7fae8f2bf9a92ae8c0f7036a070c1e6c5da47c" +SRCREV_machine:qemuriscv64 ?= "52f5ff9f0af8d552aa6307143e74659e1e21fe6d" +SRCREV_machine:qemuriscv32 ?= "52f5ff9f0af8d552aa6307143e74659e1e21fe6d" +SRCREV_machine:qemux86 ?= "52f5ff9f0af8d552aa6307143e74659e1e21fe6d" +SRCREV_machine:qemux86-64 ?= "52f5ff9f0af8d552aa6307143e74659e1e21fe6d" +SRCREV_machine:qemumips64 ?= "b8b0a5ddb82108f0cf62676b91a757d233f6fec8" +SRCREV_machine ?= "52f5ff9f0af8d552aa6307143e74659e1e21fe6d" +SRCREV_meta ?= "150b4c5d88b91e848d757c8cad9d841b91163b75" # set your preferred provider of linux-yocto to 'linux-yocto-upstream', and you'll # get the /base branch, which is pure upstream -stable, and the same # meta SRCREV as the linux-yocto-standard builds. Select your version using the # normal PREFERRED_VERSION settings. BBCLASSEXTEND = "devupstream:target" -SRCREV_machine:class-devupstream ?= "14e468424d3edcf23167133d6ee2f3e3c6c5a022" +SRCREV_machine:class-devupstream ?= "3a5928702e7120f83f703fd566082bfb59f1a57e" PN:class-devupstream = "linux-yocto-upstream" KBRANCH:class-devupstream = "v5.15/base" @@ -39,7 +39,7 @@ SRC_URI = "git://git.yoctoproject.org/linux-yocto.git;name=machine;branch=${KBRA git://git.yoctoproject.org/yocto-kernel-cache;type=kmeta;name=meta;branch=yocto-5.15;destsuffix=${KMETA}" LIC_FILES_CHKSUM = "file://COPYING;md5=6bc538ed5bd9a7fc9398086aedcd7e46" -LINUX_VERSION ?= "5.15.166" +LINUX_VERSION ?= "5.15.167" DEPENDS += "${@bb.utils.contains('ARCH', 'x86', 'elfutils-native', '', d)}" DEPENDS += "openssl-native util-linux-native" From patchwork Tue Jan 7 18:08:29 2025 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Steve Sakoman X-Patchwork-Id: 55156 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id B619EE77198 for ; Tue, 7 Jan 2025 18:09:13 +0000 (UTC) Received: from mail-pl1-f170.google.com (mail-pl1-f170.google.com [209.85.214.170]) by mx.groups.io with SMTP id smtpd.web10.98.1736273344921390318 for ; Tue, 07 Jan 2025 10:09:05 -0800 Authentication-Results: mx.groups.io; dkim=pass header.i=@sakoman-com.20230601.gappssmtp.com header.s=20230601 header.b=HHeVZJay; spf=softfail (domain: sakoman.com, ip: 209.85.214.170, mailfrom: steve@sakoman.com) Received: by mail-pl1-f170.google.com with SMTP id d9443c01a7336-2166f1e589cso15668425ad.3 for ; Tue, 07 Jan 2025 10:09:04 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sakoman-com.20230601.gappssmtp.com; s=20230601; t=1736273344; x=1736878144; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=NHmIALMvZfolv/EMRu1IYo4L7bFLrCysuCzo6GnUWIk=; b=HHeVZJayiuzoSr2KpLwZjaMfNWxzXhkn3blz67QSsFqKfODmZmcSliZCykHe98FKqk 8Vp8nQMO4Vy9BhIuZ4B3zW6LtQvNdXnf60zYDBZxskllcJOLFCczkmW57UR740ZWnitC pcyjSkmVQXzplk1bJPNySiIPA5enjQyPAlvIOe9sQ7T26DTKZre5MSX3dgy+XPQ/SdbY 5+7/tGzz7WtmrrQnJNLKNHy3znhnYy97kOaic4opdiT0x13bXD7mt658WA8gOrA1kwIV vhxOVl0xWN70D2FzlAXEYAjRpYNI/km6sB8HgzQz4y/wXc6v7Lq2u/dGG8QcVM1B7kkl tM1Q== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1736273344; x=1736878144; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=NHmIALMvZfolv/EMRu1IYo4L7bFLrCysuCzo6GnUWIk=; b=FdYhpkwznjP84oNYYsGcccg51nq+GzXP4v3Ae5Fpr7m0Z4DadlXo+xuQwJ/D60wZpD LSyAW4p+P6/+4cZ7EPzrrg35coUjlqnB/NmIv6dYN4yk3LpgkrNRGXurQUyFLH1LpW6X ++FIWhFTz40F4O1/zqK80O4zibxlqF4/4ALO22oeEPAyqUJi4sCpoHmjtpxLjC4iFVU+ WvGZZ0iplZlQ5OzTyd4bSIrJdSE1MMbLkrqoeUddIN2fAAX9Y+MQpJoHiMQMHt2n61tN xXt7XSiwZPKnk9fSSDlfGOb2YJN5pAEl8Fw8cD4xHNLxeB88MyKaI7Zn4ZgXTQNgwIjz OoUw== X-Gm-Message-State: AOJu0YwjT21bTci2kT/TkiDIvpTDHwaaL848B8K1S+567x7Gshx2IR0I pLZd5qd5d/jkAUuibVqJqyrdfL4NBaofnOHgLUJE2hiZvToJsimAgGEEz8altajOoeC2Kd3Aak8 pHvk= X-Gm-Gg: ASbGncvE8E1XHIqdMABIEHYJ8ebt4tAJUXTG7kg0Lup6TEkcVlAgn1SIZJmur7Hd0/c 19/B3LpjRLaMZmcFaGrLAzQ4z3f3LCVvHMCCNeXC9NiyTWado5mROmbMuFp03Q4jrRdwlmMEXFY lOUcjVMK1lEVfqcQO4KQwKD9jrtUy296mSFZKJwNapyk7/sw2hA8D2hKVRJi52FxgrKN2cx4y49 ElKhg2cu7X6UiBxELnrYLhdnvqdtBtJYdLwN/Kz3ZOxRQ== X-Google-Smtp-Source: AGHT+IFZN6yQ6CkKAnv+LLdzfVSM9hM5wv91g0VAvd3QdoT8u44cDtWCTESUg/8dCsaksQbltzRrKw== X-Received: by 2002:a17:90b:2f07:b0:2ea:9ccb:d1f4 with SMTP id 98e67ed59e1d1-2f452d32b5fmr110568417a91.0.1736273343084; Tue, 07 Jan 2025 10:09:03 -0800 (PST) Received: from hexa.. ([98.142.47.158]) by smtp.gmail.com with ESMTPSA id d9443c01a7336-219dc9f4413sm314166335ad.172.2025.01.07.10.09.02 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 07 Jan 2025 10:09:02 -0800 (PST) From: Steve Sakoman To: openembedded-core@lists.openembedded.org Subject: [OE-core][kirkstone 11/19] linux-yocto/5.10: update to v5.10.226 Date: Tue, 7 Jan 2025 10:08:29 -0800 Message-ID: X-Mailer: git-send-email 2.43.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Tue, 07 Jan 2025 18:09:13 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/209492 From: Bruce Ashfield Updating linux-yocto/5.10 to the latest korg -stable release that comprises the following commits: ceb091e2c4cc Linux 5.10.226 912736a0435e memcg: protect concurrent access to mem_cgroup_idr 02ee1976edb2 net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket dad75cf2c313 x86/mm: Fix PTI for i386 some more 1401da1486dc rtmutex: Drop rt_mutex::wait_lock before scheduling c6bd80f58522 mmc: cqhci: Fix checking of CQHCI_HALT state b35d3c8181c5 drm/i915/fence: Mark debug_fence_free() with __maybe_unused b8dfa35f008e drm/i915/fence: Mark debug_fence_init_onstack() with __maybe_unused 50632b877ce5 nvmet-tcp: fix kernel crash if commands allocation fails 4c3b21204abb arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry ccb95b37e957 arm64: acpi: Move get_cpu_for_acpi_id() to a header 3658388cd354 ACPI: processor: Fix memory leaks in error paths of processor_add() 5dac987d1bf9 ACPI: processor: Return an error if acpi_processor_get_info() fails in processor_add() 157c0d94b4c4 nilfs2: protect references to superblock parameters exposed in sysfs 0630e3d435c5 nilfs2: replace snprintf in show functions with sysfs_emit 7882923f1cb8 perf/aux: Fix AUX buffer serialization 0f511f2840cd uprobes: Use kzalloc to allocate xol area 0af6b80dace1 clocksource/drivers/timer-of: Remove percpu irq related code 3ded318cf06f clocksource/drivers/imx-tpm: Fix next event not taking effect sometime cf6ffb16884f clocksource/drivers/imx-tpm: Fix return -ETIME when delta exceeds INT_MAX 6c563a29857a VMCI: Fix use-after-free when removing resource in vmci_resource_remove() 359ea5edc919 Drivers: hv: vmbus: Fix rescind handling in uio_hv_generic 1d8e020e51ab uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind 38cd8bde8ace nvmem: Fix return type of devm_nvmem_device_get() in kerneldoc 3a8154bb4ab4 binder: fix UAF caused by offsets overwrite d0d3edb56e26 iio: adc: ad7124: fix chip ID mismatch 1719ebc8e303 iio: fix scale application in iio_convert_raw_to_processed_unlocked f3a54c27bacd iio: buffer-dmaengine: fix releasing dma channel on error 41cc91e3138f staging: iio: frequency: ad9834: Validate frequency parameter value d8a61e69f810 NFSv4: Add missing rescheduling points in nfs_client_return_marked_delegations 6fb7b7f5baaa ata: pata_macio: Use WARN instead of BUG d3ff0f98a52f MIPS: cevt-r4k: Don't call get_c0_compare_int if timer irq is installed 99418ec776a3 lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() 9d1e9f0876b0 of/irq: Prevent device address out-of-bounds read in interrupt map walk 5c8906de98d0 Squashfs: sanity check symbolic link size 2f14160d9fe2 usbnet: ipheth: race between ipheth_close and error handling 51fa08edd800 Input: uinput - reject requests with unreasonable number of slots 34185de73d74 HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup 3206e4a4b062 s390/vmlinux.lds.S: Move ro_after_init section behind rodata section 912bcdc51b3f btrfs: initialize location to fix -Wmaybe-uninitialized in btrfs_lookup_dentry() 3eaad59258cc kselftests: dmabuf-heaps: Ensure the driver name is null-terminated e6f3008de81c net: dpaa: avoid on-stack arrays of NR_CPUS elements e2355d513b89 PCI: Add missing bridge lock to pci_bus_lock() c60676b81fab btrfs: clean up our handling of refs == 0 in snapshot delete ed1b61398c4e btrfs: replace BUG_ON with ASSERT in walk_down_proc() 8780129cbcc9 smp: Add missing destroy_work_on_stack() call in smp_call_on_cpu() 9813770f2585 wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id() fb2257089a3a libbpf: Add NULL checks to bpf_object__{prev_map,next_map} 56cfdeb2c772 hwmon: (w83627ehf) Fix underflows seen when writing limit attributes 8a1e958e2664 hwmon: (nct6775-core) Fix underflows seen when writing limit attributes 59c1fb9874a0 hwmon: (lm95234) Fix underflows seen when writing limit attributes 2a3add62f183 hwmon: (adc128d818) Fix underflows seen when writing limit attributes bc1faed19db9 pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv 9b884bdc29e9 devres: Initialize an uninitialized struct member c8944d449fda um: line: always fill *error_out in setup_one_line() 1434b72a2d12 cgroup: Protect css->cgroup write under css_set_lock 70854bf00326 iommu/vt-d: Handle volatile descriptor status read 8a7ef20bf738 dm init: Handle minors larger than 255 583b5d2d4380 ASoC: topology: Properly initialize soc_enum values 43b442c97243 net: dsa: vsc73xx: fix possible subblocks range of CAPT block 19af8a23a1d5 net: bridge: br_fdb_external_learn_add(): always set EXT_LEARN 231c235d2f7a fou: Fix null-ptr-deref in GRO. 0ea3f2798d15 gro: remove rcu_read_lock/rcu_read_unlock from gro_complete handlers 77ad44ee337e gro: remove rcu_read_lock/rcu_read_unlock from gro_receive handlers bc18f3c80667 fou: remove sparse errors 3c0cedc22c97 bareudp: Fix device stats updates. 32cbafeebfc1 usbnet: modern method to get random MAC 594cc1dba09b net: usb: don't write directly to netdev->dev_addr 98a4cabf8762 drivers/net/usb: Remove all strcpy() uses acd298513760 igc: Unlock on error in igc_io_resume() 3efe53eb221a tcp_bpf: fix return value of tcp_bpf_sendmsg() ee1c2ecf7bbc platform/x86: dell-smbios: Fix error path in dell_smbios_init() 45c0c747dfb5 svcrdma: Catch another Reply chunk overflow case 449d70b16b84 igb: Fix not clearing TimeSync interrupts for 82580 aec92dbebdbe can: bcm: Remove proc entry when dev is unregistered. ee50abebdc0b pcmcia: Use resource_size function on resource object 9380fe33ab23 media: qcom: camss: Add check for v4l2_fwnode_endpoint_parse ebbdbbc580c1 PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0) 1fa40e0d2784 media: vivid: don't set HDMI TX controls if there are no HDMI outputs 44a595f89762 usb: uas: set host status byte on data completion error 3ab3ee4125ac wifi: brcmsmac: advertise MFP_CAPABLE to enable WPA3 9e28a1df185d leds: spi-byte: Call of_node_put() on error path e73b63f1388e media: vivid: fix wrong sizeimage value for mplane 551966371e17 udf: Avoid excessive partition lengths 66234da64d47 netfilter: nf_conncount: fix wrong variable type f56089a1806f iommu: sun50i: clear bypass register 1c5bad90e035 af_unix: Remove put_pid()/put_cred() in copy_peercred(). ec08e3008241 irqchip/armada-370-xp: Do not allow mapping IRQ 0 and 1 500e4bf67387 smack: unix sockets: fix accept()ed socket label 414736fcb76d ALSA: hda: Add input value sanity checks to HDMI channel map controls 751777a79a5c nfsd: make svc_stat per-network namespace instead of global f8219c4b8075 nfsd: remove nfsd_stats, make th_cnt a global counter f2fe1ec906d4 nfsd: make all of the nfsd stats per-network namespace 554549696663 nfsd: expose /proc/net/sunrpc/nfsd in net namespaces fec6561e75d6 nfsd: rename NFSD_NET_* to NFSD_STATS_* 9eb5d44b8fb1 sunrpc: use the struct net as the svc proc private e0fba78ab9b0 sunrpc: remove ->pg_stats from svc_program 7f2476914e98 sunrpc: pass in the sv_stats struct through svc_create_pooled d06254ae7d6a nfsd: stop setting ->pg_stats for unused stats 2197b23eda2b sunrpc: don't change ->sv_stats if it doesn't exist d47c660e8cb6 NFSD: Fix frame size warning in svc_export_parse() a8aaffc0c140 NFSD: Rewrite synopsis of nfsd_percpu_counters_init() c5322742027d NFSD: simplify error paths in nfsd_svc() ebfce8dd7e3f NFSD: Refactor the duplicate reply cache shrinker 895807268a4d NFSD: Replace nfsd_prune_bucket() a02f9d6ea3c0 NFSD: Rename nfsd_reply_cache_alloc() 73b72f4b3b3f NFSD: Refactor nfsd_reply_cache_free_locked() 3025d489f9c8 nfsd: move init of percpu reply_cache_stats counters back to nfsd_init_net 4e18b58b106e nfsd: move reply cache initialization into nfsd startup ddee5b4b6a1c mptcp: pm: avoid possible UaF when selecting endp 91fb0512a05c mptcp: pr_debug: add missing \n at the end 7e4c72dbaf62 btrfs: fix use-after-free after failure to create a snapshot efdde00d4a1e nilfs2: fix state management in error path of log writing function 07e4dc2fe000 nilfs2: fix missing cleanup on rollforward recovery error 7725152b54d2 sched: sch_cake: fix bulk flow accounting logic for host fairness 93ee345ba349 ila: call nf_unregister_net_hooks() sooner e3ad85c47777 tracing: Avoid possible softlockup in tracing_iter_reset() 3a49b6b1caf5 can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open 6949a97f6d40 clk: qcom: clk-alpha-pll: Fix the trion pll postdiv set rate API f540bc71d582 clk: qcom: clk-alpha-pll: Fix the pll post div mask 0811d57384b8 fuse: use unsigned type for getxattr/listxattr size truncation 9d38c704b425 fuse: update stats for pages in dropped aux writeback list 4be36d9d1871 mmc: sdhci-of-aspeed: fix module autoloading 2793f4238935 mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K b2ead0948988 Bluetooth: MGMT: Ignore keys being loaded with invalid type 029e462bb4f5 Revert "Bluetooth: MGMT/SMP: Fix address type when using SMP over BREDR/LE" cb27399b3d48 irqchip/gic-v2m: Fix refcount leak in gicv2m_of_init() e0b122a8f6dd ata: libata: Fix memory leak for error path in ata_host_alloc() 0f27b8c07e9a ALSA: hda/realtek: Support mute LED on HP Laptop 14-dq2xxx 2ef683b0585b ALSA: hda/realtek: add patch for internal mic in Lenovo V145 adc688a5054d ALSA: hda/conexant: Add pincfg quirk to enable top speakers on Sirius devices 8ca21e7a27c6 ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object 98c75d761879 sch/netem: fix use after free in netem_dequeue 06e7be693413 bpf, cgroup: Assign cgroup in cgroup_sk_alloc when called from interrupt b1400745609d i2c: Use IS_REACHABLE() for substituting empty ACPI functions dfc8eb4d7e3b ext4: handle redirtying in ext4_bio_write_page() 5895541d7389 udf: Limit file size to 4TB 17c43211d45f rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow 842a97b5e44f virtio_net: Fix napi_skb_cache_put warning c8e5439b5b6a net: set SOCK_RCU_FREE before inserting socket into hashtable cf002be3b8d9 bpf, cgroups: Fix cgroup v2 fallback on v1/v2 mixed mode 2ac9deb7e087 drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr 3fd11fe4f207 block: initialize integrity buffer to zero before writing it to media 0623c9f37118 media: uvcvideo: Enforce alignment of frame and interval c083c8be6bdd drm/amd/display: Skip wbscl_set_scaler_filter if filter is null 5eb04f989484 block: remove the blk_flush_integrity call in blk_integrity_unregister 0305a885ccea wifi: cfg80211: make hash table duplicates more survivable d24bc270b7db drm/meson: plane: Add error handling a948ec993541 smack: tcp: ipv4, fix incorrect labeling 3f3ef1d9f66b fsnotify: clear PARENT_WATCHED flags lazily 7e64cabe81c3 usb: typec: ucsi: Fix null pointer dereference in trace bd13c1119a96 usbip: Don't submit special requests twice c7975f09ae26 ionic: fix potential irq name truncation e85cf9a5a41b hwspinlock: Introduce hwspin_lock_bust() 7eb7888021ba PCI: al: Check IORESOURCE_BUS existence during probe 9aa7dd5e3189 wifi: iwlwifi: remove fw_running op ed7e9ed9738e drm/amd/pm: check negtive return for table entries 614564a5b289 drm/amdgpu: the warning dereferencing obj for nbio_v7_4 008933832a31 drm/amdgpu/pm: Check input value for CUSTOM profile mode setting on legacy SOCs 52338a3aa772 apparmor: fix possible NULL pointer dereference 0842db679dc0 drm/amdkfd: Reconcile the definition and use of oem_id in struct kfd_topology_device 310b9d8363b8 drm/amdgpu: fix mc_data out-of-bounds read warning 5f09fa5e0ad4 drm/amdgpu: fix ucode out-of-bounds read warning 725b728cc0c8 drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number c253b87c7c37 drm/amdgpu: Fix out-of-bounds write warning 60097df93854 drm/amdgpu/pm: Fix uninitialized variable agc_btc_response 74c5d8b057cd drm/amd/display: Fix Coverity INTEGER_OVERFLOW within dal_gpio_service_create 916083054670 drm/amd/display: Check msg_id before processing transcation 7c47dd2e9234 drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[] 2a63c90c7a90 drm/amd/display: Add array index check for hdcp ddc access 754321ed63f0 drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6 40c2e8bc117c drm/amd/display: Check gpio_id before used as array index e24fa827299e drm/amdgpu: avoid reading vf2pf info size from FB 1d0c85d0fcb2 drm/amd/pm: fix uninitialized variable warnings for vega10_hwmgr 59ac791297e2 drm/amdgpu: fix uninitialized scalar variable warning 38e32a0d8374 drm/amd/pm: fix the Out-of-bounds read warning d592768c1750 drm/amd/pm: fix warning using uninitialized value of max_vid_step a601129c785b drm/amd/pm: fix uninitialized variable warning for smu8_hwmgr 774bae3b8dcd drm/amdgpu: fix overflowed array index read warning 28b539bbccee drm/amdgpu: Fix uninitialized variable warning in amdgpu_afmt_acr 40d0fedacfdf net: usb: qmi_wwan: add MeiG Smart SRM825L ff5af3f9b510 dma-debug: avoid deadlock between dma debug vs printk and netconsole 712921d2abf4 i2c: Fix conditional for substituting empty ACPI functions 0e69cf9b657f ALSA: hda/conexant: Mute speakers at suspend / shutdown 221ebded43cb ALSA: hda/generic: Add a helper to mute speakers at suspend/shutdown e78bc7099c8d drm: panel-orientation-quirks: Add quirk for OrangePi Neo 03a85a51f33a fix vfsub build error b57d01c66f40 Linux 5.10.225 7e8bad2cf393 apparmor: fix policy_unpack_test on big endian systems 9e96dea7eff6 scsi: aacraid: Fix double-free on probe failure 4538335cc23d usb: core: sysfs: Unmerge @usb3_hardware_lpm_attr_group in remove_power_attributes() 59579a627adb usb: dwc3: st: add missing depopulate in probe error path 6aee4c5635d8 usb: dwc3: st: fix probed platform device ref count on probe error path b72da4d89b97 usb: dwc3: core: Prevent USB core invalid event buffer address access 16cc6114c981 usb: dwc3: omap: add missing depopulate in probe error path f84d5dccc855 USB: serial: option: add MeiG Smart SRM825L 612843f842ad cdc-acm: Add DISABLE_ECHO quirk for GE HealthCare UI Controller f5a5a5a0e95f soc: qcom: cmd-db: Map shared memory as WC, not WB 8ddaea033de0 nfc: pn533: Add poll mod list filling check 7e5d5c4ae707 net: busy-poll: use ktime_get_ns() instead of local_clock() 8bbb9e4e0e66 gtp: fix a potential NULL pointer dereference 842a40c7273b ethtool: check device is present when getting link settings 2e8e93dea04d dmaengine: dw: Add memory bus width verification 9cfe7c53fef1 dmaengine: dw: Add peripheral bus width verification f8e1c92868ad soundwire: stream: fix programming slave ports for non-continous port maps acddd7c6b782 ovl: do not fail because of O_NOATIME 338a3ba30c5e net:rds: Fix possible deadlock in rds_message_put 688325078a8b cgroup/cpuset: Prevent UAF in proc_cpuset_show() e83405e75d90 ata: libata-core: Fix null pointer dereference on error f2b6cd1335d2 Revert "Input: ioc3kbd - convert to platform remove callback returning void" 777d9c223e83 media: uvcvideo: Fix integer overflow calculating timestamp f7276cdc1912 drm/amdkfd: don't allow mapping the MMIO HDP page with large pages 0365c9029ad9 ipc: replace costly bailout check in sysvipc_find_ipc() 2933b4f8a6b3 mptcp: sched: check both backup in retrans 1388df72dc14 wifi: mwifiex: duplicate static structs used in driver instances 4e9436375fcc pinctrl: single: fix potential NULL dereference in pcs_get_function() d57e6298cca3 pinctrl: rockchip: correct RK3328 iomux width flag for GPIO2-B pins a45ee4c98da0 KVM: arm64: Don't use cbz/adr with external symbols df02642c21c9 drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc 239b1cacceec tools: move alignment-related macros to new 05dd9aabd04f Input: MT - limit max slots 56b82e6ff3f5 Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO 93000b294952 nfsd: Don't call freezable_schedule_timeout() after each successful page allocation in svc_alloc_arg(). b009444700d9 ALSA: timer: Relax start tick time check for slave timer elements b891438bc39b Revert "drm/amd/display: Validate hw_points_num before using it" 92915fa734ab mmc: dw_mmc: allow biu and ciu clocks to defer 15818af2f7aa KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3 65e79c943750 cxgb4: add forgotten u64 ivlan cast before shift d1623e7b43d5 HID: microsoft: Add rumble support to latest xbox controllers 8c0a21d37d04 HID: wacom: Defer calculation of resolution until resolution_code is known fc73103a94e3 MIPS: Loongson64: Set timer mode in cpu-probe 7fd3a5926870 binfmt_misc: pass binfmt_misc flags to the interpreter 9df9783bd856 Bluetooth: MGMT: Add error handling to pair_device() 9b9ba386d7bf mmc: mmc_test: Fix NULL dereference on allocation failure 4370448fca3a drm/msm/dp: reset the link phy params before link training e54b08275237 drm/msm/dpu: don't play tricks with debug macros ff6607a4777c net: xilinx: axienet: Fix dangling multicast addresses 2884e73978f6 net: xilinx: axienet: Always disable promiscuous mode cb5880a0de12 ipv6: prevent UAF in ip6_send_skb() c414000da1c2 netem: fix return value if duplicate enqueue fails 050e7274ab21 net: dsa: mv88e6xxx: Fix out-of-bound access 5885217d6663 net: dsa: mv88e6xxx: replace ATU violation prints with trace points 5d8aed3ca688 net: dsa: mv88e6xxx: read FID when handling ATU violations 544571911bc6 ice: fix ICE_LAST_OFFSET formula 5c144835448a bonding: fix xfrm state handling when clearing active slave 21816b696c17 bonding: fix xfrm real_dev null pointer dereference 81216b9352be bonding: fix null pointer deref in bond_ipsec_offload_ok e8c85f2ff369 bonding: fix bond_ipsec_offload_ok return type 6e630e1d7740 ip6_tunnel: Fix broken GRO 4d42a2257ba6 netfilter: nft_counter: Synchronize nft_counter_reset() against reader. eb06c8d3022c kcm: Serialise kcm_sendmsg() for the same socket. f4b762cf7ef0 tc-testing: don't access non-existent variable on exception 095a1f19d452 Bluetooth: SMP: Fix assumption of Central always being Initiator 7a4e7a0c6b0b Bluetooth: hci_core: Fix LE quote calculation ce70b0915009 dm suspend: return -ERESTARTSYS instead of -EINTR 0ba340177782 media: solo6x10: replace max(a, min(b, c)) by clamp(b, a, c) d1bd8e0a11ea block: use "unsigned long" for blk_validate_block_size(). cbb9a969fc19 gtp: pull network headers in gtp_dev_xmit() 5970a540daad hrtimer: Prevent queuing of hrtimer without a function callback b09a5ec8de14 nvmet-rdma: fix possible bad dereference when freeing rsps 2143cba14381 ext4: set the type of max_zeroout to unsigned int to avoid overflow f14cd61826d1 irqchip/gic-v3-its: Remove BUG_ON in its_vpe_irq_domain_alloc 9e1c4d0d6ae9 usb: dwc3: core: Skip setting event buffers for host only controllers 1b8e318f9960 s390/iucv: fix receive buffer virtual vs physical address confusion d0414f5436bc openrisc: Call setup_memory() earlier in the init sequence e5272645a038 NFS: avoid infinite loop in pnfs_update_layout. 9e0414220bc2 nvmet-tcp: do not continue for invalid icreq 5ee7495ac278 net: hns3: add checking for vf id of mailbox c7c43a784fdf Bluetooth: bnep: Fix out-of-bound access bf2f79970b6f usb: gadget: fsl: Increase size of name buffer for endpoints bf0c603ab4ed f2fs: fix to do sanity check in update_sit_entry 8ec052c544f4 btrfs: delete pointless BUG_ON check on quota root in btrfs_qgroup_account_extent() 0c1d7b960fd7 btrfs: send: handle unexpected data in header buffer in begin_cmd() 94a7dff229b9 btrfs: handle invalid root reference found in may_destroy_subvol() 3dd13074e75e btrfs: change BUG_ON to assertion when checking for delayed_node root e21448a49b8b powerpc/boot: Only free if realloc() succeeds 486fb5ebd5d6 powerpc/boot: Handle allocation failure in simple_realloc() 05c21f285d9f parisc: Use irq_enter_rcu() to fix warning at kernel/context_tracking.c:367 4e5464005bd3 memory: stm32-fmc2-ebi: check regmap_read return value 25d31baf922c x86: Increase brk randomness entropy for 64-bit systems 76ec27b70983 md: clean up invalid BUG_ON in md_ioctl 95e49b925812 netlink: hold nlk->cb_mutex longer in __netlink_dump_start() 316bf51edd3e virtiofs: forbid newlines in tags be49c4f2a15e drm/lima: set gp bus_stop bit before hard reset aa469c3d2854 net/sun3_82586: Avoid reading past buffer in debug output 5fb0cbf84b18 scsi: lpfc: Initialize status local variable in lpfc_sli4_repost_sgl_list() a441ce39adf3 fs: binfmt_elf_efpic: don't use missing interpreter's properties e7385510e255 media: pci: cx23885: check cx23885_vdev_init() return 00d4f971fa3c quota: Remove BUG_ON from dqget() 239c5e988ec1 ext4: do not trim the group with corrupted block bitmap 0f6425d90d0f nvmet-trace: avoid dereferencing pointer too early 5380f1b2b9ab powerpc/xics: Check return value of kasprintf in icp_native_map_one_cpu 372928e8bef0 IB/hfi1: Fix potential deadlock on &irq_src_lock and &dd->uctxt_lock 7138c598562b wifi: iwlwifi: abort scan when rfkill on but device enabled d483de53d4cf gfs2: setattr_chown: Add missing initialization 80456d39f08f scsi: spi: Fix sshdr use 3663e78fab9f media: qcom: venus: fix incorrect return value a43edc7abc4f binfmt_misc: cleanup on filesystem umount c13541c5eff9 staging: ks7010: disable bh on tx_dev_lock db3b679f66f1 drm/amd/display: Validate hw_points_num before using it cc49ee343351 staging: iio: resolver: ad2s1210: fix use before initialization 01fa4415c3cc media: radio-isa: use dev_name to fill in bus_info 0f83d7792630 s390/smp,mcck: fix early IPI handling aeda7043c4db RDMA/rtrs: Fix the problem of variable not initialized fully bbb662d0c23d i2c: riic: avoid potential division by zero 5335c7f8db45 wifi: cw1200: Avoid processing an invalid TIM IE 11b0c7323c28 wifi: mac80211: fix BA session teardown race 5fe7bdbe4f53 ssb: Fix division by zero issue in ssb_calc_clock_rate dfa894f7ea37 ALSA: hda/realtek: Fix noise from speakers on Lenovo IdeaPad 3 15IAU7 fc250eca15bd net: hns3: fix a deadlock problem when config TC during resetting dbdbadec8a39 net: hns3: fix wrong use of semaphore up e5ceff2196dc netfilter: flowtable: initialise extack before use 50c914b0e6fc mptcp: correct MPTCP_SUBFLOW_ATTR_SSN_OFFSET reserved size 8e8d306f3b58 net: dsa: vsc73xx: check busy flag in MDIO operations 351ad72c50d7 net: dsa: vsc73xx: use read_poll_timeout instead delay loop 665a4caa9c8d net: dsa: vsc73xx: pass value in phy_write operation aa9ce4193cba net: axienet: Fix register defines comment description 1cece837e387 atm: idt77252: prevent use after free in dequeue_rx() 4b730a147566 net/mlx5e: Correctly report errors for ethtool rx flows 8e0e6b15ab49 s390/uv: Panic for set and remove shared access UVC errors 6bcd0f95b899 btrfs: rename bitmap_set_bits() -> btrfs_bitmap_set_bits() c10ac31a72de s390/cio: rename bitmap_size() -> idset_bitmap_size() e24625310c61 drm/amdgpu/jpeg2: properly set atomics vmid field ad149f558534 memcg_write_event_control(): fix a user-triggerable oops 0452e15e7fe1 drm/amdgpu: Actually check flags for all context ops. d88083916fc6 btrfs: tree-checker: add dev extent item checks bbcdda4b0d04 selinux: fix potential counting error in avc_add_xperms_decision() fe5bf1488170 fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE de7be1940c34 bitmap: introduce generic optimized bitmap_size() 03880af02a78 vfs: Don't evict inode under the inode lru traversing context ee030e4ffa9b dm persistent data: fix memory allocation failure 63fd38af880b dm resume: don't return EINVAL when signalled 1b21a791afc9 arm64: ACPI: NUMA: initialize all values of acpi_early_node_map to NUMA_NO_NODE e245a18281c2 s390/dasd: fix error recovery leading to data corruption on ESE devices 747bc154577d thunderbolt: Mark XDomain as unplugged when router is removed 0f0654318e25 xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration 4905e56f7bac ALSA: usb-audio: Support Yamaha P-125 quirk entry 4690e2171f65 fuse: Initialize beyond-EOF page contents before setting uptodate b2add7c50b5b Linux 5.10.224 2de18b5cc38e media: Revert "media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()" e1ee1c4198c7 ARM: dts: imx6qdl-kontron-samx6i: fix phy-mode 80ac0cc9c0be wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values a563f1243092 vhost-vdpa: switch to use vmf_insert_pfn() in the fault handler 06e9e6ac59fe vdpa: Make use of PFN_PHYS/PFN_UP/PFN_DOWN helper macro b21ea49e6e69 nvme/pci: Add APST quirk for Lenovo N60z laptop 15469d46ba34 exec: Fix ToCToU between perm check and set-uid/gid usage d39e0f582b43 media: uvcvideo: Use entity get_cur in uvc_ctrl_set ec54634f9123 arm64: cpufeature: Fix the visibility of compat hwcaps fb6675db04c4 powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt. 50111a8098fb drm/i915/gem: Fix Virtual Memory mapping boundaries calculation 31c35f9f89ef netfilter: nf_tables: prefer nft_chain_validate d5f87c11114b netfilter: nf_tables: allow clone callbacks to sleep 7b17de2a71e5 netfilter: nf_tables: use timestamp to check for set element timeout 191fc4439524 netfilter: nf_tables: set element extended ACK reporting support c52f9e1a9eb4 PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal 7e62564d5e43 Fix gcc 4.9 build issue in 5.10.y 329eae03d0f9 Add gitignore file for samples/fanotify/ subdirectory 9bdf0624bdbc samples: Make fs-monitor depend on libc and headers 5b9f49cc86bd samples: Add fs error monitoring example 3f84b37abb8f mptcp: pm: fix backup support in signal endpoints 44165604dd6e mptcp: export local_address 9b9a64ef9a1a mptcp: mib: count MPJ with backup flag 96f3c8a85021 mptcp: fix NL PM announced address accounting 1008f2bcbc8e mptcp: distinguish rcv vs sent backup flag in requests 381cad7a0873 mptcp: sched: check both directions for backup 32b133fb7833 drm/mgag200: Set DDC timeout in milliseconds fd65cf86ca3c drm/bridge: analogix_dp: properly handle zero sized AUX transactions 450b6b22acda x86/mtrr: Check if fixed MTRRs exist before saving them ab8b397d5997 padata: Fix possible divide-by-0 panic in padata_mt_helper() eb223bf01e68 tracing: Fix overflow in get_free_elt() ca2ea2dec107 power: supply: axp288_charger: Round constant_charge_voltage writes down 51e8360d94b4 power: supply: axp288_charger: Fix constant_charge_voltage writes a26bcfeea300 genirq/irqdesc: Honor caller provided affinity in alloc_desc() db959cdfe67b irqchip/xilinx: Fix shift out of bounds 52b138f10211 serial: core: check uartclk for zero to avoid divide by zero 227d455e6cec irqchip/meson-gpio: Convert meson_gpio_irq_controller::lock to 'raw_spinlock_t' 7dddf560e238 irqchip/meson-gpio: support more than 8 channels gpio irq 5f1aa8ce6452 scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES 8f209716ea5e scsi: mpt3sas: Remove scsi_dma_map() error messages f3405f4997b0 ntp: Safeguard against time_constant overflow f098e8fc7227 driver core: Fix uevent_show() vs driver detach race dc335b92e5f1 ntp: Clamp maxerror and esterror to operating range 668c6c4a7e9e tick/broadcast: Move per CPU pointer access into the atomic section 005c318981bc scsi: ufs: core: Fix hba->last_dme_cmd_tstamp timestamp updating logic ef1b208ca813 usb: gadget: u_serial: Set start_delayed during suspend 7cc9ebcfe58b usb: gadget: core: Check for unset descriptor f1205a5aad68 USB: serial: debug: do not echo input by default 4dacdb9720aa usb: vhci-hcd: Do not drop references before new references are gained d993cb25efb1 ALSA: hda/hdmi: Yet more pin fix for HP EliteDesk 800 G4 c7c1ca6e258d ALSA: hda: Add HP MP9 G4 Retail System AMS to force connect list e7e7d2b180d8 ALSA: line6: Fix racy access to midibuf 5291d4f73452 drm/client: fix null pointer dereference in drm_client_modeset_probe 44e11ae8f942 ALSA: usb-audio: Re-add ScratchAmp quirk entries c9c11ece5ad9 spi: spi-fsl-lpspi: Fix scldiv calculation c6ba514732e9 kprobes: Fix to check symbol prefixes correctly 9ddd5e7835c6 bpf: kprobe: remove unused declaring of bpf_kprobe_override 455769ebb60f i2c: smbus: Send alert notifications to all devices if source not found 56f106d2c476 ASoC: codecs: wsa881x: Correct Soundwire ports mask 5605992ad425 i2c: smbus: Improve handling of stuck alerts 706f18a8fa43 arm64: errata: Expand speculative SSBS workaround (again) f261c5d8d0f8 arm64: cputype: Add Cortex-A725 definitions bdae104b0949 arm64: cputype: Add Cortex-X1C definitions 4a500d4bdcec arm64: errata: Expand speculative SSBS workaround bf0d247dfbda arm64: errata: Unify speculative SSBS errata logic 17ff37fe453f arm64: cputype: Add Cortex-X925 definitions 77741cdc254d arm64: cputype: Add Cortex-A720 definitions b8d683f5b538 arm64: cputype: Add Cortex-X3 definitions 9f7ba0078249 arm64: errata: Add workaround for Arm errata 3194386 and 3312417 d8029a49c8af arm64: cputype: Add Neoverse-V3 definitions c46b7570c9d5 arm64: cputype: Add Cortex-X4 definitions 55920e407a7e arm64: Add Neoverse-V2 part 5b9ae6bb3360 arm64: cpufeature: Force HWCAP to be based on the sysreg visible to user-space 69299a4282a3 ext4: fix wrong unit use in ext4_mb_find_by_goal 1d21d4175054 sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime 3b2b169fadd8 SUNRPC: Fix a race to wake a sync task a3e52a4c22c8 s390/sclp: Prevent release of buffer in I/O 1a6b4240b0b9 jbd2: avoid memleak in jbd2_journal_write_metadata_buffer e48a901ce65f media: uvcvideo: Fix the bandwdith quirk on USB 3.x de305abd36eb media: uvcvideo: Ignore empty TS packets c1749313f35b drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules d81c1eeb333d drm/amdgpu: Fix the null pointer dereference to ras_manager 1d4e65fa6239 btrfs: fix bitmap leak when loading free space cache on duplicate entry 29ce18d7672f wifi: nl80211: don't give key data to userspace 934f815345c0 udf: prevent integer overflow in udf_bitmap_free_blocks() 65b982b9af54 PCI: Add Edimax Vendor ID to pci_ids.h 55985e3aa15a selftests/bpf: Fix send_signal test with nested CONFIG_PARAVIRT 8e665ccc5262 ACPI: SBS: manage alarm sysfs attribute through psy core 85d8fe79a3ce ACPI: battery: create alarm sysfs attribute atomically 64ac0c02352b clocksource/drivers/sh_cmt: Address race condition for clock events c384dd4f1fb3 md/raid5: avoid BUG_ON() while continue reshape after reassembling 5ccf99545c71 md: do not delete safemode_timer in mddev_suspend 464d242868a8 rcutorture: Fix rcu_torture_fwd_cb_cr() data race adc491f3e73d net: fec: Stop PPS on driver remove 865948628a42 l2tp: fix lockdep splat b7b8d9f5e679 net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register() 01150020c071 Bluetooth: l2cap: always unlock channel in l2cap_conless_channel() 085fb116c4ad net: linkwatch: use system_unbound_wq e87f52225e04 net: usb: qmi_wwan: fix memory leak for not ip packets 52319d9d2f52 sctp: Fix null-ptr-deref in reuseport_add_sock(). 17a93a820196 sctp: move hlist_node and hashent out of sctp_ep_common ba4e59f34c64 x86/mm: Fix pti_clone_entry_text() for i386 d00c9b4bbc44 x86/mm: Fix pti_clone_pgtable() alignment assumption 75880302cf3a irqchip/mbigen: Fix mbigen node address layout c476c5c7bb8d genirq: Allow irq_chip registration functions to take a const irq_chip 12fa9934332d netfilter: ipset: Add list flush to cancel_gc e93fa44f0714 mptcp: fix duplicate data handling 3deac6f6860d r8169: don't increment tx_dropped in case of NETDEV_TX_BUSY 646e9e907138 net: usb: sr9700: fix uninitialized variable use in sr_mdio_read 8b0a5709ac6e ALSA: hda/realtek: Add quirk for Acer Aspire E5-574G 7b745257ff39 ALSA: usb-audio: Correct surround channels in UAC1 channel map 08775b3d6ed1 protect the fetch of ->fd[fd] in do_dup2() from mispredictions e4b2b0306b6b HID: wacom: Modify pen IDs b12a67976b12 platform/chrome: cros_ec_proto: Lock device when updating MKBP version 59be4a167782 riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error() 7d72f5195109 ipv6: fix ndisc_is_useropt() handling for PIO 8e97cc828d5f net/mlx5e: Add a check for the return value from mlx5_port_set_eth_ptys c65f72eec60a net/iucv: fix use after free in iucv_sock_close() 7c03ab555eb1 sched: act_ct: take care of padding in struct zones_ht_key b17eeed7cd09 drm/vmwgfx: Fix overlay when using Screen Targets 906372e753c5 drm/nouveau: prime: fix refcount underflow 6b50462b473f remoteproc: imx_rproc: Skip over memory region when node value is NULL 5991ef8e7a90 remoteproc: imx_rproc: Fix ignoring mapping vdev regions a4ed3286a5c6 remoteproc: imx_rproc: ignore mapping vdev regions 3a2884a44e5c irqchip/imx-irqsteer: Handle runtime power management correctly 0548b54d0a26 irqchip/imx-irqsteer: Add runtime PM support 06a93b720351 irqchip/imx-irqsteer: Constify irq_chip struct 652e7b4d7300 genirq: Allow the PM device to originate from irq domain ef56dcdca8f2 devres: Fix memory leakage caused by driver API devm_free_percpu() 81484ab2858b driver core: Cast to (void *) with __force for __percpu pointer 6bb9cc6e2594 drivers: soc: xilinx: check return status of get_api_version() 79ec4cde1d8a soc: xilinx: move PM_INIT_FINALIZE to zynqmp_pm_domains driver 58b07286aef1 ext4: check the extent status again before inserting delalloc block 4b6d9a0fe743 ext4: factor out a common helper to query extent map b2591c89a6e2 sysctl: always initialize i_uid/i_gid 88f053a1dd34 fuse: verify {g,u}id mount options correctly 997d3c9cbed6 fuse: name fs_context consistently 2fa82af6fd04 powerpc/configs: Update defconfig with now user-visible CONFIG_FSL_IFC d28869a145cf fs: don't allow non-init s_user_ns for filesystems without FS_USERNS_MOUNT be23ae63080e nvme-pci: add missing condition check for existence of mapped data ce90f30157eb nvme: split command copy into a helper b59013d264b6 ceph: fix incorrect kmalloc size of pagevec mempool eb1b7575fe52 ASoC: Intel: use soc_intel_is_byt_cr() only when IOSF_MBI is reachable 3ff431695351 lirc: rc_dev_get_from_fd(): fix file leak ea72a8881007 powerpc: fix a file leak in kvm_vcpu_ioctl_enable_cap() 347dcb84a487 apparmor: Fix null pointer deref when receiving skb during sock creation 9460ac3dd1ae mISDN: Fix a use after free in hfcmulti_tx() dda518dea60d bpf: Fix a segment issue when downgrading gso_size 5cc4d71dda2d net: nexthop: Initialize all fields in dumped nexthops dc2a655437c4 net: stmmac: Correct byte order of perfect_match aa38bf74899d tipc: Return non-zero value from tipc_udp_addr2str() on error cf791b98fe0c netfilter: nft_set_pipapo_avx2: disable softinterrupts c8ae5939f40e net: bonding: correctly annotate RCU in bond_should_notify_peers() 3bf09eab401e ipv4: Fix incorrect source address in Record Route option f62a9cc0c2f7 MIPS: SMP-CPS: Fix address for GCR_ACCESS register for CM3 and later 257193083e8f dma: fix call order in dmam_free_coherent 641b7a8920f4 libbpf: Fix no-args func prototype BTF dumping syntax ff2387553f6a f2fs: fix start segno of large section 721190921a87 um: time-travel: fix time-travel-start option 538a27c8048f jfs: Fix array-index-out-of-bounds in diFree 1c089efe763d kdb: Use the passed prompt in kdb_position_cursor() f0ad62559f05 kdb: address -Wformat-security warnings 65dba3c9ce75 kernel: rerun task_work while freezing in get_signal() b839175c06da io_uring/io-wq: limit retrying worker initialisation 5f0a6800b8ae nilfs2: handle inconsistent state in nilfs_btnode_create_block() 9fa8eca2598a Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x13d3:0x3591 4d3eb40ccd1b Bluetooth: btusb: Add RTL8852BE device 0489:e125 to device tables 1fccae3fd7ae rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings 52d8d27fd6d3 rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait 76b62f303508 drm/panfrost: Mark simple_ondemand governor as softdep 77411a2d2252 MIPS: Loongson64: env: Hook up Loongsson-2K 636163de03cc MIPS: ip30: ip30-console: Add missing include 4e8f70d3cc5e rbd: don't assume rbd_is_lock_owner() for exclusive mappings 24933a55bfaf selftests/sigaltstack: Fix ppc64 GCC build 94ee7ff99b87 RDMA/iwcm: Fix a use-after-free related to destroying CM IDs 9667d46f8a77 platform: mips: cpu_hwmon: Disable driver on unsupported hardware 19f108b3d1ca watchdog/perf: properly initialize the turbo mode timestamp and rearm counter 9cba1ec637f3 rtc: isl1208: Fix return value of nvmem callbacks a49321257f62 perf/x86/intel/pt: Fix a topa_entry base address calculation 3b8e1b7d26d6 perf/x86/intel/pt: Fix topa_entry base length a3ab508a4853 scsi: qla2xxx: validate nvme_local_port correctly 57ba75637122 scsi: qla2xxx: Complete command early within lock b0c39dcbd8a5 scsi: qla2xxx: Fix flash read failure 87db8d7b7520 scsi: qla2xxx: Fix for possible memory corruption e5ed6a26ffde scsi: qla2xxx: During vport delete send async logout explicitly 2fcd485289c8 rtc: cmos: Fix return value of nvmem callbacks d4d814159f53 devres: Fix devm_krealloc() wasting memory 648d5490460d kobject_uevent: Fix OOB access within zap_modalias_env() 41dd9636414b kbuild: Fix '-S -c' in x86 stack protector scripts 0730ea850270 decompress_bunzip2: fix rare decompression failure bed9580165d5 ubi: eba: properly rollback inside self_check_eba ae99754cd86b clk: davinci: da8xx-cfgchip: Initialize clk_init_data before use 54bc4e88447e f2fs: fix to don't dirty inode for readonly filesystem b848b40794ba scsi: qla2xxx: Return ENOBUFS if sg_cnt is more than one for ELS cmds a44f88f7576b dev/parport: fix the array out-of-bounds risk 388ee7a4d330 binder: fix hang of unregistered readers ac2459460ce7 PCI: rockchip: Use GPIOD_OUT_LOW flag while requesting ep_gpio e5bae95306f7 PCI: hv: Return zero, not garbage, when reading PCI_INTERRUPT_PIN af1d27f88ec9 hwrng: amd - Convert PCIBIOS_* return codes to errnos 43aab4483daa tools/memory-model: Fix bug in lock.cat 9d289ce917f8 KVM: VMX: Split out the non-virtualization part of vmx_interrupt_blocked() cdbcb4e9f69b jbd2: make jbd2_journal_get_max_txn_bufs() internal 6d5223be13f2 leds: ss4200: Convert PCIBIOS_* return codes to errnos 35f8c9ac0cd3 wifi: mwifiex: Fix interface type change de2a011a13a4 ext4: make sure the first directory block is not a hole 42d420517072 ext4: check dot and dotdot of dx_root before making dir indexed 38463947850c m68k: amiga: Turn off Warp1260 interrupts during boot 2199e157a465 udf: Avoid using corrupted block bitmap buffer 5c59cb8dd954 task_work: Introduce task_work_cancel() again 1fd27cc6f0a5 task_work: s/task_work_cancel()/task_work_cancel_func()/ 973155ca67fe apparmor: use kvfree_sensitive to free data->data eb46367187a4 sched/fair: Use all little CPUs for CPU-bound workloads 9ce89824ff04 drm/amd/display: Check for NULL pointer 748e9ad7c0c2 scsi: qla2xxx: Fix optrom version displayed in FDMI 6735d02ead7d drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes b6ac46a00188 drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes 86f4ca8b3b6e ext2: Verify bitmap and itable block numbers before using them 10f7163bfb5f hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode() 4c9d235630d3 media: venus: fix use after free in vdec_close e65cccfae729 char: tpm: Fix possible memory leak in tpm_bios_measurements_open() cf0c713c6946 sched/fair: set_load_weight() must also call reweight_task() for SCHED_IDLE tasks 5c5b02d48946 ipv6: take care of scope when choosing the src addr 83e2dfadcb62 af_packet: Handle outgoing VLAN packets without hardware offloading 7e36a3c701b4 net: netconsole: Disable target before netpoll cleanup 9ef719022814 tick/broadcast: Make takeover of broadcast hrtimer reliable f2c2c4cc5af7 dt-bindings: thermal: correct thermal zone node name limit 14083dc69ba6 rtc: interface: Add RTC offset to alarm after fix-up 84ffa27eb04c nilfs2: avoid undefined behavior in nilfs_cnt32_ge macro 9d6571b1c4b6 fs/nilfs2: remove some unused macros to tame gcc 3c6fa67023bc fs/proc/task_mmu: indicate PM_FILE for PMD-mapped file THP 21a15d52bc22 pinctrl: freescale: mxs: Fix refcount of child d2de7746e5e9 pinctrl: ti: ti-iodelay: fix possible memory leak when pinctrl_enable() fails 73303a4a8fd7 pinctrl: ti: ti-iodelay: Drop if block with always false condition 15014206f90d pinctrl: single: fix possible memory leak when pinctrl_enable() fails 8c3bef7ca88a pinctrl: core: fix possible memory leak when pinctrl_enable() fails 53f2d5bce177 pinctrl: rockchip: update rk3308 iomux routes 01c0341e9846 net: dsa: b53: Limit chip-wide jumbo frame config to CPU ports ef6af2994261 net: dsa: mv88e6xxx: Limit chip-wide frame size config to CPU ports eb4ca1a97e08 netfilter: ctnetlink: use helper function to calculate expect ID 9118c408ee09 bnxt_re: Fix imm_data endianness edc2dee07ab4 RDMA/hns: Fix missing pagesize and alignment check in FRMR 29723ad94817 macintosh/therm_windtunnel: fix module unload. 445ffbccd05a powerpc/xmon: Fix disassembly CPU feature checks 38a7e4b8bfea MIPS: Octeron: remove source file executable bit 3009d371a2ef Input: elan_i2c - do not leave interrupt disabled on suspend failure 37a484f771ed RDMA/device: Return error earlier if port in not valid 695d70c60bdb mtd: make mtd_test.c a separate module ab2114f6ffc8 ASoC: max98088: Check for clk_prepare_enable() error 771f129bed4d RDMA/rxe: Don't set BTH_ACK_MASK for UC or UD QPs 506e71b0e10d RDMA/mlx4: Fix truncated output warning in alias_GUID.c 6bf3cf61f35a RDMA/mlx4: Fix truncated output warning in mad.c 26b6512d5d20 Input: qt1050 - handle CHIP_ID reading error 2be7e24056d7 coresight: Fix ref leak when of_coresight_parse_endpoint() fails 3d1c4bf57db8 PCI: Fix resource double counting on remove & rescan 8105318210a4 SUNRPC: Fixup gss_status tracepoint error output 8f1dc3f33f2a sparc64: Fix incorrect function signature and add prototype for prom_cif_init 3d096f2a99eb ext4: avoid writing unitialized memory to disk in EA inodes 91c22df70138 SUNRPC: avoid soft lockup when transmitting UDP to reachable server. 84edcf61bd41 xprtrdma: Fix rpcrdma_reqs_reset() 974294806baf xprtrdma: Rename frwr_release_mr() cf9141d2f778 mfd: omap-usb-tll: Use struct_size to allocate tll 72ac78ec1a35 media: venus: flush all buffers in output plane streamoff 5ed0496e383c ext4: fix infinite loop when replaying fast_commit c9106ad5ea2a Revert "leds: led-core: Fix refcount leak in of_led_get()" 4e87f592a46b drm/qxl: Add check for drm_cvt_mode cd105977b1f8 drm/etnaviv: fix DMA direction handling for cached RW buffers 6ef4f1e98154 perf report: Fix condition in sort__sym_cmp() 09c1583f0e10 leds: trigger: Unregister sysfs attributes before calling deactivate() 3c9071a87105 media: renesas: vsp1: Store RPF partition configuration per RPF instance 3944484005d6 media: renesas: vsp1: Fix _irqsave and _irq mix 9459f3317562 media: uvcvideo: Override default flags 115d814d6acd media: uvcvideo: Allow entity-defined get_info and get_cur e470e95616bf saa7134: Unchecked i2c_transfer function result fixed f3968b3d3cfb media: imon: Fix race getting ictx->lock bcc963f591b9 media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control() 7aaa368c684c drm/panel: boe-tv101wum-nl6: Check for errors on the NOP in prepare() fb20da833874 drm/panel: boe-tv101wum-nl6: If prepare fails, disable GPIO before regulators be9d08ff102d xdp: fix invalid wait context of page_pool_destroy() 96178b12c881 selftests: forwarding: devlink_lib: Wait for udev events after reloading 859bc763747c bpf: Eliminate remaining "make W=1" warnings in kernel/bpf/btf.o 6ce46045f9b9 bna: adjust 'name' buf size of bna_tcb and bna_ccb structures 28c8fce2078a bpf: annotate BTF show functions with __printf 1ccb1399bd51 selftests/bpf: Close fd in error path in drop_on_reuseport be53b70fc081 wifi: virt_wifi: don't use strlen() in const context f851ff5c6e0e gss_krb5: Fix the error handling path for crypto_sync_skcipher_setkey 05c4488a0e44 wifi: virt_wifi: avoid reporting connection success with wrong SSID b33dd4508640 qed: Improve the stack space of filter_config() 7f132aca1820 perf: Prevent passing zero nr_pages to rb_alloc_aux() a2450206c092 perf: Fix perf_aux_size() for greater-than 32-bit size a497a6b72b29 perf/x86/intel/pt: Fix pt_topa_entry_for_page() address calculation d4f4188ecfe5 netfilter: nf_tables: rise cap on SELinux secmark context 0d08015beedb ipvs: Avoid unnecessary calls to skb_is_gso_sctp 2912a0d136ee net: fec: Fix FEC_ECR_EN1588 being cleared on link-down 29254059a1f8 net: fec: Refactor: #define magic constants 2e201b3d162c wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he() 72e470089fc4 wifi: cfg80211: fix typo in cfg80211_calculate_bitrate_he() 4055275ca3e0 wifi: ath11k: fix wrong handling of CCMP256 and GCMP ciphers 2aa1739334d0 ath11k: dp: stop rx pktlog before suspend dae1ab70406e mlxsw: spectrum_acl: Fix ACL scale regression and firmware errors aa98eb074051 mlxsw: spectrum_acl_bloom_filter: Make mlxsw_sp_acl_bf_key_encode() more flexible 36a9996e020d mlxsw: spectrum_acl_erp: Fix object nesting warning 22ae17a267f4 lib: objagg: Fix general protection fault ada0c319253a selftests/bpf: Check length of recv in test_sockmap 249adb30cbc7 net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined 15c2ec7c284d net/smc: Allow SMC-D 1MB DMB allocations 8d0d50a8b738 net: esp: cleanup esp_output_tail_tcp() in case of unsupported ESPINTCP 2f5738bdd6f6 selftests/bpf: Fix prog numbers in test_sockmap 1302433dc664 wifi: brcmsmac: LCN PHY code is used for BCM4313 2G-only device 1eb5751e2369 firmware: turris-mox-rwtm: Initialize completion before mailbox 085dc942897c firmware: turris-mox-rwtm: Fix checking return value of wait_for_completion_timeout() 6f3cb1fd6b42 ARM: spitz: fix GPIO assignment for backlight 7b7d06a310e2 ARM: pxa: spitz: use gpio descriptors for audio 3ae2ec97d8e9 m68k: cmpxchg: Fix return value for default case in __arch_xchg() ba1d2ecfcf1b x86/xen: Convert comma to semicolon 4a49ce2d63d5 m68k: atari: Fix TT bootup freeze / unexpected (SCU) interrupt messages e04654f42577 arm64: dts: amlogic: gx: correct hdmi clocks 4745535fce11 arm64: dts: mediatek: mt7622: fix "emmc" pinctrl mux be5ca4064751 arm64: dts: mediatek: mt8183-kukui: Drop bogus output-enable property b1e9396ac410 ARM: dts: imx6qdl-kontron-samx6i: fix PCIe reset polarity a992c88fbb8c ARM: dts: imx6qdl-kontron-samx6i: fix SPI0 chip selects c79a7cad4115 ARM: dts: imx6qdl-kontron-samx6i: fix board reset efd89b5db5be ARM: dts: imx6qdl-kontron-samx6i: fix PHY reset bbfa9a71ae4a ARM: dts: imx6qdl-kontron-samx6i: move phy reset into phy-node 31a9a0958b15 arm64: dts: rockchip: Increase VOP clk rate on RK3328 5cc525351b0c soc: qcom: pdr: fix parsing of domains lists eab05737ee22 soc: qcom: pdr: protect locator_addr with the main mutex a584e5d3f7d9 arm64: dts: qcom: msm8996: specify UFS core_clk frequencies eedd9fd98641 soc: qcom: rpmh-rsc: Ensure irqs aren't disabled by rpmh_rsc_send_data() callers 39f4cb508ebf arm64: dts: qcom: sdm845: add power-domain to UFS PHY d3e6b30c9cf5 hwmon: (max6697) Fix swapped temp{1,8} critical alarms 15770a147692 hwmon: (max6697) Fix underflow when writing limit attributes ae8bd075a921 pwm: stm32: Always do lazy disabling d8571b9a83d1 hwmon: (adt7475) Fix default duty on fan is disabled 685976438b64 x86/platform/iosf_mbi: Convert PCIBIOS_* return codes to errnos 010441f08347 x86/pci/xen: Fix PCIBIOS_* return code handling c995bea85e2e x86/pci/intel_mid_pci: Fix PCIBIOS_* return code handling e2fdf7b79f08 x86/of: Return consistent error type from x86_of_pci_irq_enable() 97795f23a8ab hfsplus: fix to avoid false alarm of circular locking c0748b7684a9 platform/chrome: cros_ec_debugfs: fix wrong EC message version 3070e8160916 EDAC, i10nm: make skx_common.o a separate module 9bff9479e143 EDAC/skx_common: Add new ADXL components for 2-level memory 12594a0e7118 sock_map: avoid race between sock_map_close and sk_psock_put 7a346798c1e1 sock_map: Fix a potential use-after-free in sock_map_close() 843556a46e16 bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself 4af417c06d37 of: module: add buffer overflow check in of_modalias() b29e4b50c556 scripts/gdb: fix SB_* constants parsing 02fd398f5e2b bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS 2bba1cb1487b loop: Select I/O scheduler 'none' from inside add_disk() 027f4dd7c993 blk-mq: Introduce the BLK_MQ_F_NO_SCHED_BY_DEFAULT flag 2214ded26c86 tpm: tis_i2c: Limit write bursts to I2C_SMBUS_BLOCK_MAX (32) bytes 44494049e815 tpm: tis_i2c: Limit read bursts to I2C_SMBUS_BLOCK_MAX (32) bytes 0d7c23009d82 tpm: Add flag to use default cancellation policy 07914bef4e16 tpm: tis_i2c: Fix sanity check interrupt enable mask 35f85f04bd69 tpm: Add tpm_tis_i2c backend for tpm_tis_core 7b04c6c08107 tpm: Add tpm_tis_verify_crc to the tpm_tis_phy_ops protocol layer 4790cb2d1283 tpm: Remove read16/read32/write32 calls from tpm_tis_phy_ops 50f74deaf308 hwmon: Add driver for Texas Instruments TMP464 and TMP468 a4e6e4b7bb08 dt-bindings: hwmon: add tmp464.yaml e0ed2149d7b5 drm/amdkfd: Check for null pointer after calling kmemdup c6ddded89322 ARM: renumber bits related to _TIF_WORK_MASK 35b96a325c1e arm64: make _TIF_WORK_MASK bits contiguous f5a8f06aa595 arm64: uaccess: remove vestigal UAO support 3a330b569301 arm64: uaccess: remove redundant PAN toggling 9cbbb016d6e7 arm64: uaccess: remove addr_limit_user_check() fd83411f5e08 arm64: uaccess: remove set_fs() 15a6dc2f4b53 arm64: uaccess cleanup macro naming 912a6ab683a4 arm64: uaccess: split user/kernel routines d004ab02dae2 arm64: uaccess: refactor __{get,put}_user e1941a8b459e arm64: uaccess: simplify __copy_user_flushcache() dfae822b4c59 arm64: uaccess: rename privileged uaccess routines 1efdb8f0a0c7 arm64: sdei: explicitly simulate PAN/UAO entry b35fec69554c arm64: sdei: move uaccess logic to arch/arm64/ b5a28033fe7b arm64: head.S: always initialize PSTATE 243eb8553513 arm64: head.S: cleanup SCTLR_ELx initialization 74a00405d97f arm64: head.S: rename el2_setup -> init_kernel_el 73c5f386d175 arm64: add C wrappers for SET_PSTATE_*() e17fb7543df1 arm64: ensure ERET from kthread is illegal eff6289cc53b ixgbevf: add disable link state 262595681381 ixgbe: add improvement for MDD response functionality b9d78b06dea8 ixgbe: add the ability for the PF to disable VF link state d829911485da Documentation: arm64: Document PMU counters access from userspace fe5d29bfce20 arm64: perf: Enable PMU counter userspace access for perf event 15ce6d04ed6a arm64: perf: Add userspace counter access disable switch 4f288acbeed8 perf: Add a counter for number of user access events in context 354ba4a8c4b8 x86: perf: Move RDPMC event flag to a common definition d29cec94c49b libperf xyarray: Add bounds checks to xyarray__entry() 8264d2b91841 libperf: Add support for user space counter access 7fd81b678b5f libperf tests: Add support for verbose printing 6029ff53a48f libperf: Add evsel mmap support 28b0c8956369 tools include: Add an initial math64.h 492e532d20f1 perf record: Improve 'Workload failed' message printing events + what was exec'ed d0a1fc61733e perf evlist: Add a method to return the list of evsels as a string 81a77b39be0a perf annotate: Fix sample events lost in stdio mode 2883e69e202d pnmtologo: use relocatable file name 80f5207b5abd tools: use basename to identify file in gen-mach-types 4d201ec392f1 vt/conmakehash: improve reproducibility ae24d013888f lib/build_OID_registry: fix reproducibility issues 5d72da88dbb4 x86/boot: Wrap literal addresses in absolute_pointer() dc0bd7aa2319 ACPI: thermal: drop an always true check 0c4288cceef5 xfs: Fix -Werror=dangling-pointer work-around for older GCC 5509050b3392 xfs: Work around GCC 12 -Werror=dangling-pointer for xfs_attr_remote.o 669827c6e293 virtio-pci: Remove wrong address verification in vp_del_vqs() 1c80d994d3db regulator: consumer: Add missing stubs to regulator/consumer.h 3303d0e2aeff ipv6: Fix stats accounting in ip6_pkt_drop c56e60f665e7 memcg: enable accounting of ipc resources e6c8ebd210a2 tick/nohz: WARN_ON --> WARN_ON_ONCE to prevent console saturation 1655ee30e684 sched/isolation: really align nohz_full with rcu_nocbs 253c752ed120 pstore/ftrace: Add and use ftrace_test_recursion_trylock_safe 356e8a12bd66 pstore/ftrace: Add recursion protection to the ftrace callback 334706a1e873 ftrace: Add ftrace_test_recursion_trylock() helper function 78c260d7f60b ftrace: Move the recursion testing into global headers c0b313d988a1 powerpc/mm: Switch obsolete dssall to .long 1bd813fe8d0e riscv: fix build with binutils 2.38 835a2d1b24c6 powerpc/lib/sstep: fix 'ptesync' build error fd84b99a8ccb drm/amd/display: Don't allow partial copy_from_user 024f4ff63d55 drm/amdgpu: Fix even more out of bound writes from debugfs 0c0ad634e899 e1000e: Serialize TGP e1000e PM ops add88b0536fa e1000e: Make mei_me active when e1000e is in use a8f317c1a17e yaffs: replace IS_ERR with IS_ERR_OR_NULL to check both ERR and NULL c8400a2cbe1f iommu/arm-smmu-v3: Ratelimit event dump b8ec7e43e95e regmap: teach regmap to use raw spinlocks if requested in the config 4b7fa7684be7 OF: DT-Overlay configfs interface (v7) d515a5c0e9a9 net: xilinx_emaclite: Do not print real IOMEM pointer 11329e49959b drivers: net: xilinx_emaclite: remove arch limitation 29dc69bf2a07 drivers: net: xilinx_emaclite: Add COMPILE_TEST support ff106eff01f6 drivers: net: xilinx_emaclite: Fix -Wpointer-to-int-cast warnings with W=1 c27462391070 serial: 8250: 8250_omap: Fix possible array out of bounds access 16976d8e307f perf intel-pt: Use aux_watermark d421a2346946 perf: Cap allocation order at aux_watermark 6da8d5f29481 timers: Fix get_next_timer_interrupt() with no timers pending af141841735a eventfd: Enlarge recursion limit to allow vhost to work a125a6102808 iwlwifi: select MAC80211_LEDS conditionally 139fe7d68413 rcu: Fix stall-warning deadlock due to non-release of rcu_node ->lock 8d0c79931235 console: Fix build when CONFIG_BLK_DEV_INITRD is disabled. ea777841e8ea yaffs: fix -Wstringop-overread compile warning in yaffs_fix_null_name ab49d2db98bd cgroup1: fix leaked context root causing sporadic NULL deref in LTP bdda1b6cf99b aufs5: aufs-core 2fa276071d07 aufs5: aufs-standalone 06ed4d532456 aufs5: aufs-mmap 372857834999 aufs5: aufs-kbuild fd68c9840693 aufs5: aufs-base a673c127156c Revert "aufs5: core" cf62bfcde384 Revert "aufs5: aufs5-base" a644419ec785 Revert "aufs5: aufs5-mmap" b893f9a999bb Revert "aufs5: aufs5-standalone" c60db0819480 Revert "aufs: initial port to v5.10" c66a5900f139 Revert "Revert "aufs: initial port to v5.10"" 1320cf58f5dd Revert "aufs: linux-v5.10-rc1, no more set_fs()" 02349d7738ff Revert "for aufs: linux-v5.10-rc1, no more vfs_(read|write)f_t" f01dab74750c Revert "aufs: linux-v5.10-rc1, no more f_op->read() and ->write()" 3d5de709b676 Revert "aufs5: aufs5-kbuild" a97f1329edf7 tracing/arm: Have max stack tracer handle the case of return address after data 5c54112a05ab net: Treat __napi_schedule_irqoff() as __napi_schedule() on PREEMPT_RT ddac76981cb3 sched/isolation: reconcile rcu_nocbs= and nohz_full= 56fd8c36614e net/dccp: make it depend on CONFIG_BROKEN (CVE-2020-16119) a8808e541750 aufs: linux-v5.10-rc1, no more f_op->read() and ->write() cb1c41dac775 for aufs: linux-v5.10-rc1, no more vfs_(read|write)f_t a5805df6583f aufs: linux-v5.10-rc1, no more set_fs() 64e145dcca8c Revert "aufs: initial port to v5.10" d6e20b2257ec defconfig: add dependency for CONFIG_ACPI_APEI_PCIEAER b237d48208d0 arm64/mm: Drop THP conditionality from FORCE_MAX_ZONEORDER 1209195ed0f7 driver: adc: ltc2497: return directly after reading the adc conversion value a60fe3fcf113 Revert "mfd: syscon: Don't free allocated name for regmap_config" 13d68767aa4a rcutorture: Use "all" and "N" in "nohz_full" and "rcu_nocbs" 54e69571a97d rcu: deprecate "all" option to rcu_nocbs= a605b9d20447 lib: test_bitmap: add tests for "N" alias 8c22517f444e lib: bitmap: support "N" as an alias for size of bitmap 88187167e63a lib: bitmap: move ERANGE check from set_region to check_region ca5429633613 lib: bitmap: fold nbits into region struct 9381134cea8a lib: test_bitmap: add more start-end:offset/len tests c825800730ab lib: test_bitmap: add tests to trigger ERANGE case. 8cc8264dca3f lib: test_bitmap: clearly separate ERANGE from EINVAL tests. 470da7b7f2ff Revert "cpumask: Un-inline cpulist_parse for SMP; prepare for ascii helpers" 28dc1d37602d Revert "cpumask: Make "all" alias global and not just RCU" dbfe0b183fca Revert "cpumask: Add a "none" alias to complement "all"" a57711fcff30 Revert "cpumask: Add "last" alias for cpu list specifications" 34523d7c8476 qemux86: add configuration symbol to select values cdca78778415 objtool: Fix seg fault with Clang non-section symbols d3287798bd88 x86/entry: Emit a symbol for register restoring thunk 2ad99ddaac78 cpumask: Add "last" alias for cpu list specifications c10e9481810b cpumask: Add a "none" alias to complement "all" b00ceed9d388 cpumask: Make "all" alias global and not just RCU 8b215206e797 cpumask: Un-inline cpulist_parse for SMP; prepare for ascii helpers 1b5024caeda8 clear_warn_once: add a clear_warn_once= boot parameter fc0dd76cce0e clear_warn_once: bind a timer to written reset value d64fc2d2b14a clear_warn_once: expand debugfs to include read support 77592e956cc9 perf: perf can not parser the backtrace of app in the 32bit system and 64bit kernel. 6e022759f727 perf: x86-32: explicitly include 22d6bbb947d4 perf: mips64: Convert __u64 to unsigned long long c35f9150001c perf: fix bench numa compilation c4caef513eb1 perf: add SLANG_INC for slang.h 07dfbf9405dd perf: add sgidefs.h to for mips builds 42c5431ad2cf perf: change --root to --prefix for python install af79bfe90143 perf: add 'libperl not found' warning ddfbd9e75f08 perf: force include of 0f34e6305176 fat: don't use obsolete random32 call in namei_vfat b5b55eaad1df FAT: Added FAT_NO_83NAME 756b13bfab6e FAT: Add CONFIG_VFAT_NO_CREATE_WITH_LONGNAMES option fabad71cb2b5 FAT: Add CONFIG_VFAT_FS_NO_DUALNAMES option 06fd68d75bd1 aufs: initial port to v5.10 c9126877d1f5 aufs5: core f5150173c643 aufs5: aufs5-standalone b57d26b072d9 aufs5: aufs5-mmap 78f128c4b8e5 aufs5: aufs5-base 47aa35171d08 aufs5: aufs5-kbuild 35c480a23c66 yaffs: include blkdev.h 2c64c43540a5 yaffs: fix misplaced variable declaration bde410ee9f59 yaffs2: v5.6 build fixups 414c8e866931 yaffs2: fix memory leak when /proc/yaffs is read c99c1990cf7c yaffs: add strict check when call yaffs_internal_read_super 498f5fafe50a yaffs: repair yaffs_get_mtd_device 7ca3c08ebbf9 yaffs: Fix build failure by handling inode i_version with proper atomic API 0ba47e881bb8 yaffs2: fix memory leak in mount/umount 39a5406665dd yaffs: Avoid setting any ACL releated xattr ca5b43ddc6fd Yaffs:check oob size before auto selecting Yaffs1 c2619c05a53e fs: yaffs2: replace CURRENT_TIME by other appropriate apis 5e08fb7b8ee0 yaffs2: adjust to proper location of MS_RDONLY 5f1a1a9678a8 yaffs2: import git revision b4ce1bb (jan, 2020) fc21f09ae369 initramfs: allow an optional wrapper script around initramfs generation 73887fca03be arm64/perf: Fix wrong cast that may cause wrong truncation a267cafaac44 defconfigs: drop obselete options eb5d1bc00c3f arm64/perf: fix backtrace for AAPCS with FP enabled 062b2c98c087 linux-yocto: Handle /bin/awk issues d3beb253ae71 uvesafb: provide option to specify timeout for task completion 75ccbf377a51 uvesafb: print error message when task timeout occurs 18ffa2e88024 compiler.h: Undef before redefining __attribute_const__ 3ed931201746 vmware: include jiffies.h 938942859596 Resolve jiffies wrapping about arp 069a883d837c nfs: Allow default io size to be configured. 3b568edcd3e9 check console device file on fs when booting 77ec93228920 mount_root: clarify error messages for when no rootfs found 17a15e0f7536 menuconfig,mconf-cfg: Allow specification of ncurses location 8f13b1349a74 modpost: mask trivial warnings b6c9e0fa24e8 kbuild: exclude meta directory from distclean processing 62dbbdbec60a powerpc: serialize image targets 27b8dec5dbb3 arm: serialize build targets fc365512e4c4 Revert "platform/x86: wmi: Destroy on cleanup rather than unregister" 9a6e91d2e691 crtsavres: fixups for 5.4+ 7dbc3cd0398f powerpc/ptrace: Disable array-bounds warning with gcc8 ebe3bcb89cb0 powerpc: Disable attribute-alias warnings from gcc8 65ba0e7de081 powerpc: add crtsavres.o to archprepare for kbuild 6bd3efdce5a9 powerpc: kexec fix for powerpc64 41671522c159 powerpc: Add unwind information for SPE registers of E500 core 8851006b0109 mips: vdso: fix 'jalr $t9' crash in vdso code ed5db62477e8 mips: Kconfig: add QEMUMIPS64 option 2a7ca094fc42 4kc cache tlb hazard: tlbp cache coherency b742d60d3f70 malta uhci quirks: make allowance for slow 4k(e)c 8a160fc86eb6 arm/Makefile: Fix systemtap b9805882353c vexpress: Pass LOADADDR to Makefile 332e618aa7ae arm: ARM EABI socketcall 1ec682cb85f8 ARM: LPAE: Invalidate the TLB for module addresses during translation fault Signed-off-by: Bruce Ashfield Signed-off-by: Steve Sakoman --- .../linux/linux-yocto-rt_5.10.bb | 4 ++-- .../linux/linux-yocto-tiny_5.10.bb | 6 ++--- meta/recipes-kernel/linux/linux-yocto_5.10.bb | 22 +++++++++---------- 3 files changed, 16 insertions(+), 16 deletions(-) diff --git a/meta/recipes-kernel/linux/linux-yocto-rt_5.10.bb b/meta/recipes-kernel/linux/linux-yocto-rt_5.10.bb index 268b5d1ec1..8a60bebcba 100644 --- a/meta/recipes-kernel/linux/linux-yocto-rt_5.10.bb +++ b/meta/recipes-kernel/linux/linux-yocto-rt_5.10.bb @@ -11,13 +11,13 @@ python () { raise bb.parse.SkipRecipe("Set PREFERRED_PROVIDER_virtual/kernel to linux-yocto-rt to enable it") } -SRCREV_machine ?= "3a31ff0840cedf5e78ef3490e604a9f66f9b1f1f" +SRCREV_machine ?= "7b4e7ae2a10c124e48fd4cce93fcc93f15750d86" SRCREV_meta ?= "a26c1def6dceccb96ab9a707072d22e75888eda9" SRC_URI = "git://git.yoctoproject.org/linux-yocto.git;branch=${KBRANCH};name=machine \ git://git.yoctoproject.org/yocto-kernel-cache;type=kmeta;name=meta;branch=yocto-5.10;destsuffix=${KMETA}" -LINUX_VERSION ?= "5.10.223" +LINUX_VERSION ?= "5.10.226" LIC_FILES_CHKSUM = "file://COPYING;md5=6bc538ed5bd9a7fc9398086aedcd7e46" diff --git a/meta/recipes-kernel/linux/linux-yocto-tiny_5.10.bb b/meta/recipes-kernel/linux/linux-yocto-tiny_5.10.bb index d35ac04135..b1c644db57 100644 --- a/meta/recipes-kernel/linux/linux-yocto-tiny_5.10.bb +++ b/meta/recipes-kernel/linux/linux-yocto-tiny_5.10.bb @@ -6,7 +6,7 @@ KCONFIG_MODE = "--allnoconfig" require recipes-kernel/linux/linux-yocto.inc -LINUX_VERSION ?= "5.10.223" +LINUX_VERSION ?= "5.10.226" LIC_FILES_CHKSUM = "file://COPYING;md5=6bc538ed5bd9a7fc9398086aedcd7e46" DEPENDS += "${@bb.utils.contains('ARCH', 'x86', 'elfutils-native', '', d)}" @@ -15,8 +15,8 @@ DEPENDS += "openssl-native util-linux-native" KMETA = "kernel-meta" KCONF_BSP_AUDIT_LEVEL = "2" -SRCREV_machine:qemuarm ?= "fe7f23b30d73333007fe54c96cdb579a31da43bf" -SRCREV_machine ?= "ca19be2d9d77072cfdde806553e729752b0d9241" +SRCREV_machine:qemuarm ?= "30ae83f5cb6ff45d30bf47958f1585d3275740b3" +SRCREV_machine ?= "b61c15e2143de80c4ae22605a8346023383f653a" SRCREV_meta ?= "a26c1def6dceccb96ab9a707072d22e75888eda9" PV = "${LINUX_VERSION}+git${SRCPV}" diff --git a/meta/recipes-kernel/linux/linux-yocto_5.10.bb b/meta/recipes-kernel/linux/linux-yocto_5.10.bb index f20804e7fc..e6d8787395 100644 --- a/meta/recipes-kernel/linux/linux-yocto_5.10.bb +++ b/meta/recipes-kernel/linux/linux-yocto_5.10.bb @@ -14,23 +14,23 @@ KBRANCH:qemux86 ?= "v5.10/standard/base" KBRANCH:qemux86-64 ?= "v5.10/standard/base" KBRANCH:qemumips64 ?= "v5.10/standard/mti-malta64" -SRCREV_machine:qemuarm ?= "2524a39d1d5f16980df4f15ef9a7ac2e148795c0" -SRCREV_machine:qemuarm64 ?= "57e9463c04f9b211dcedd7b92e32cac9b198bccb" -SRCREV_machine:qemumips ?= "e8d524ff4ca12d884df488db504b35b97f394b78" -SRCREV_machine:qemuppc ?= "0f0b7bfda26ff5ea9790d648fd82777486b181c7" -SRCREV_machine:qemuriscv64 ?= "03a85a51f33ae656439b764cd94e795a055e665e" -SRCREV_machine:qemuriscv32 ?= "03a85a51f33ae656439b764cd94e795a055e665e" -SRCREV_machine:qemux86 ?= "03a85a51f33ae656439b764cd94e795a055e665e" -SRCREV_machine:qemux86-64 ?= "03a85a51f33ae656439b764cd94e795a055e665e" -SRCREV_machine:qemumips64 ?= "6e5d351f2d183cf91d030fc78b4b176338bcb141" -SRCREV_machine ?= "03a85a51f33ae656439b764cd94e795a055e665e" +SRCREV_machine:qemuarm ?= "15bb053d77debfc3e5bf7388d6a99c2f766f0450" +SRCREV_machine:qemuarm64 ?= "24b6c64975625da3c82321fbe888edbf540361f5" +SRCREV_machine:qemumips ?= "bdd2635646d4b6508287a3037fef5caafe74f1bd" +SRCREV_machine:qemuppc ?= "cfdef5fc7631d32ff3dd05852f15c0c544273b47" +SRCREV_machine:qemuriscv64 ?= "ab15dae067f713bc506e8e8ad435e5e9f98263fd" +SRCREV_machine:qemuriscv32 ?= "ab15dae067f713bc506e8e8ad435e5e9f98263fd" +SRCREV_machine:qemux86 ?= "ab15dae067f713bc506e8e8ad435e5e9f98263fd" +SRCREV_machine:qemux86-64 ?= "ab15dae067f713bc506e8e8ad435e5e9f98263fd" +SRCREV_machine:qemumips64 ?= "d42c39f3a3588754fb0347054f27c818f8873d76" +SRCREV_machine ?= "ab15dae067f713bc506e8e8ad435e5e9f98263fd" SRCREV_meta ?= "a26c1def6dceccb96ab9a707072d22e75888eda9" SRC_URI = "git://git.yoctoproject.org/linux-yocto.git;name=machine;branch=${KBRANCH}; \ git://git.yoctoproject.org/yocto-kernel-cache;type=kmeta;name=meta;branch=yocto-5.10;destsuffix=${KMETA}" LIC_FILES_CHKSUM = "file://COPYING;md5=6bc538ed5bd9a7fc9398086aedcd7e46" -LINUX_VERSION ?= "5.10.223" +LINUX_VERSION ?= "5.10.226" DEPENDS += "${@bb.utils.contains('ARCH', 'x86', 'elfutils-native', '', d)}" DEPENDS += "openssl-native util-linux-native" From patchwork Tue Jan 7 18:08:30 2025 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Steve Sakoman X-Patchwork-Id: 55158 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id BAFB6E7719A for ; Tue, 7 Jan 2025 18:09:13 +0000 (UTC) Received: from mail-pl1-f179.google.com (mail-pl1-f179.google.com [209.85.214.179]) by mx.groups.io with SMTP id smtpd.web11.117.1736273347154982470 for ; Tue, 07 Jan 2025 10:09:07 -0800 Authentication-Results: mx.groups.io; dkim=pass header.i=@sakoman-com.20230601.gappssmtp.com header.s=20230601 header.b=D0DAAs9E; spf=softfail (domain: sakoman.com, ip: 209.85.214.179, mailfrom: steve@sakoman.com) Received: by mail-pl1-f179.google.com with SMTP id d9443c01a7336-2163b0c09afso232372155ad.0 for ; Tue, 07 Jan 2025 10:09:07 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sakoman-com.20230601.gappssmtp.com; s=20230601; t=1736273346; x=1736878146; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=toJSAzELntD2UouU3SyO3pNFKRQ2f/iniGeOjLpZcvY=; b=D0DAAs9ELfFK/UXEB5Z1FyIo1rnbbuskeCl7wtKXNp5gL6t4bGKR+OgH3yCCPuasF3 vZURZzbQZ5qYcmNmVUE1y0E9idjB0Q8LsFVmIdZbRhuBDhSYUPzg0ZWxxyZt6xQ9Ek/q Bnozlq+3wLIrijW6buDfbxAY3EewURzJ6DMmc+AHQ81PG/LrNL4eU3JqYnYaFDoIBWyv 7DYWfFQK2x/L4WuH/DfTr7JmhfSecQzvmURGyxkDl0BVTdAzcbS0gzY5nzHJ/wXvM6n7 w6xvEXrwGtl2R+amb36UsTuGFhQk4chPRW1s3m8pgajRu7oIYlNi2UjkfTFKi+hTWVHu nKlw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1736273346; x=1736878146; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=toJSAzELntD2UouU3SyO3pNFKRQ2f/iniGeOjLpZcvY=; b=qIjlsWxnK28OB6KFKCFQUdUVRsSnNcNHZIpsVczLWEUgijZS6APHkCDlvC+akbO1to fNrhTREl4EG49N6yuzRbm1KpCNH6vbwP4+4e/bYQK40UDsqjWs9481XPr/zryISI9tEL KSavoA3mM9H3PyDOAMg9CB7w+1FQeFn7+kYdp7Rhkah/Oka9qAGtTLdwBL5vwAaiU+1S z6xt13MEEd+L640olfp2w76uWO2hg2IlXBPlbcTpBNW+R9jiYM1pz6JGvBe+E+UP532o AWNeH5fBGz0/RjShxXrDL+kinGjA18RnwdUB+t+thMp4KISMuMMeMtFmK/LplKeltZYG ZPrQ== X-Gm-Message-State: AOJu0YzQ387rBL5Y3NSVaq86tqTQ0n5fsvnAanQVXDApwCXleLXAncnf 1TACuwvVLwv2GKIdrS3kxVSsLgMpBD+j2wPVK89FGN62J4QXRA+6KOnj0I3+nYNdf2gs61Qig1c bpHg= X-Gm-Gg: ASbGncuRCMiVARyGQzO14VSymvdeRXq1yhd3warL6goRahFSZUb6WHJYwzEYFgmRKqL 8vHWXQUOSeJkmx0yT4q6Lx3+w5UMqzJ2zAGdcM8yiGDDUeYSpt7xiq9x9kZ6ynbFbXSivRhS9tY VwMh0MuzgpwrOgp5cFCYicdkh4frCIlOKDsGc1DPe1jsZ6xKrPqcxD9ngE3FphZm/pBNEhmtcZC cTlgSHMLYLYY3e+DrDjhrPa2AFmSbgPOE28r25aDbncHw== X-Google-Smtp-Source: AGHT+IFX6JPDhhIO1tzTRhF+qbpyvFehDRd55BgZ4oxpwpSq9C37JpoHvNbSO6OidTE1C6IyMQkLCg== X-Received: by 2002:a17:902:e74b:b0:216:725c:a122 with SMTP id d9443c01a7336-21a83f4c07bmr128725ad.19.1736273345506; Tue, 07 Jan 2025 10:09:05 -0800 (PST) Received: from hexa.. ([98.142.47.158]) by smtp.gmail.com with ESMTPSA id d9443c01a7336-219dc9f4413sm314166335ad.172.2025.01.07.10.09.04 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 07 Jan 2025 10:09:05 -0800 (PST) From: Steve Sakoman To: openembedded-core@lists.openembedded.org Subject: [OE-core][kirkstone 12/19] linux-yocto/5.10: update to v5.10.227 Date: Tue, 7 Jan 2025 10:08:30 -0800 Message-ID: <7618300a2120bc07af59e083b0d88c22033bac2e.1736273200.git.steve@sakoman.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Tue, 07 Jan 2025 18:09:13 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/209493 From: Bruce Ashfield Updating linux-yocto/5.10 to the latest korg -stable release that comprises the following commits: eac1c5bfc13c Linux 5.10.227 9350016415b6 net: dsa: microchip: fix build warning 9f76a9d1849d RDMA/hns: Fix uninitialized variable 4911610c7a1f ext4: fix warning in ext4_dio_write_end_io() 05cc42d601e7 netfilter: ip6t_rpfilter: Fix regression with VRF interfaces 95f62e5a783d net: vrf: determine the dst using the original ifindex for multicast 3adb1be04f6c net: seg6: fix seg6_lookup_any_nexthop() to handle VRFs using flowi_l3mdev ab6c9463b137 net: Handle l3mdev in ip_tunnel_init_flow 0825c5ff246c xfrm: Pass flowi_oif or l3mdev as oif to xfrm_dst_lookup 4bf1bd3ffff6 net: geneve: add missing netlink policy and size for IFLA_GENEVE_INNER_PROTO_INHERIT 73f75d2b5aee nouveau/dmem: Fix vulnerability in migrate_to_ram upon copy error 548d0102dc5c net: dsa: lan9303: ensure chip reset and wait for READY status 68ad5da6ca63 net: Fix an unsafe loop on the list fcda074c98de hid: intel-ish-hid: Fix uninitialized variable 'rv' in ish_fw_xfer_direct_dma e7a1d51b3910 usb: storage: ignore bogus device raised by JieLi BR21 USB sound chip 1d7fc802a725 usb: xhci: Fix problem with xhci resume from suspend f8dea2fede79 usb: dwc3: core: Stop processing of pending events if controller is halted a7564b160692 Revert "usb: yurex: Replace snprintf() with the safer scnprintf() variant" 8669bca53fe6 HID: plantronics: Workaround for an unexcepted opposite volume key 799a06ca7f6a hwmon: (adm9240) Add missing dependency on REGMAP_I2C ab6bc15e99d7 hwmon: (tmp513) Add missing dependency on REGMAP_I2C 1d5f85f1b7db resource: fix region_intersects() vs add_memory_driver_managed() 36b054324d18 slip: make slhc_remember() more robust against malicious packets 30d91a478d58 ppp: fix ppp_async_encode() illegal access 3502b1a29720 netfilter: fib: check correct rtable in vrf setups 037145e2a214 netfilter: rpfilter/fib: Set ->flowic_uid correctly for user namespaces. d98558fe2699 netfilter: rpfilter/fib: Populate flowic_l3mdev field 740de1987766 net: Add l3mdev index to flow struct and avoid oif reset for port devices 265bf63e2471 sctp: ensure sk_state is set to CLOSED if hashing fails in sctp_listen_start 23e139f90b25 net: ibm: emac: mal: fix wrong goto adbc3eef43fc net/sched: accept TCA_STAB only for root qdisc d79af3af2f49 igb: Do not bring the device up after non-fatal error c70e05b929b4 gpio: aspeed: Use devm_clk api to manage clock source 36fd66cb5178 gpio: aspeed: Add the flush write to ensure the write complete. 0e91c4b48445 net: dsa: b53: fix jumbo frames on 10/100 ports a7c9402bbc4a net: dsa: b53: allow lower MTUs on BCM5325/5365 9f3407aa6cba net: dsa: b53: fix max MTU for BCM5325/BCM5365 0109267c1ec4 net: dsa: b53: fix max MTU for 1g switches a625acf221c1 net: dsa: b53: fix jumbo frame mtu check e13ffbf5fdf5 net: phy: bcm84881: Fix some error handling paths ef44274dae9b Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change cce8419b8168 netfilter: br_netfilter: fix panic with metadata_dst skb 8a517d184549 tcp: fix tcp_enter_recovery() to zero retrans_stamp when it's safe fe238ddf8576 tcp: fix to allow timestamp undo if no retransmits were sent 21b5af7f0c99 net: phy: dp83869: fix memory corruption when enabling fiber f892165c564e NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies() 64f1b4922b6e SUNRPC: Fix integer overflow in decode_rc_list() 1fc13f6a4166 ice: fix VLAN replay after reset 993ce09fe622 NFSD: Mark filecache "down" if init fails de5a059e3665 RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt 252f147b1826 fbdev: sisfb: Fix strbuf array overflow f4149eec9601 drm/amd/display: Check null pointer before dereferencing se 56452dbc0a2c driver core: bus: Return -EIO instead of 0 when show/store invalid bus attribute d8ac7378bc79 tools/iio: Add memory allocation failure check for trigger_name 4ce662fe4be6 virtio_pmem: Check device status before requesting flush 30ea38665dbf usb: dwc2: Adjust the timing of USB Driver Interrupt Registration in the Crashkernel Scenario 4c83143fc65c usb: chipidea: udc: enable suspend interrupt after usb reset b677b94a9193 clk: imx: Remove CLK_SET_PARENT_GATE for DRAM mux for i.MX7D 37c181e389f0 media: videobuf2-core: clear memory related fields in __vb2_plane_dmabuf_put() b65018968782 ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition 63047187a516 PCI: Mark Creative Labs EMU20k2 INTx masking as broken a28703d4d406 i2c: i801: Use a different adapter-name for IDF adapters e4f218455cef PCI: Add ACS quirk for Qualcomm SA8775P f3e0a8b7d4a5 clk: bcm: bcm53573: fix OF node leak in init b10c1ca941c2 PCI: Add function 0 DMA alias quirk for Glenfly Arise chip 713adaf0ecfc RDMA/mad: Improve handling of timed out WRs of mad agent 24318116c485 ktest.pl: Avoid false positives with grub2 skip regex 345d3c0bf2bd s390/cpum_sf: Remove WARN_ON_ONCE statements c2097d5efb19 ext4: nested locking for xattr inode dced2c9d661e s390/mm: Add cond_resched() to cmm_alloc/free_pages() 1cd197813eb8 s390/facility: Disable compile time optimization for decompressor code 029aa36ba332 bpf: Check percpu map value size first 4f4a6d70d78e Input: synaptics-rmi4 - fix UAF of IRQ domain on driver removal 546fb43a2e4b tracing/kprobes: Fix symbol counting logic by looking at modules as well 90a6a070a80a tracing/kprobes: Return EADDRNOTAVAIL when func matches several symbols 2622c805abe7 kallsyms: Make module_kallsyms_on_each_symbol generally available 2aa861ec7290 kallsyms: Make kallsyms_on_each_symbol generally available 9b82d737d261 virtio_console: fix misc probe bugs f2fd1a9597d6 tracing: Have saved_cmdlines arrays all in one allocation 25b00216206b s390/zcore: release dump save area on restart or power down 0b4dc46f87c3 s390/zcore: no need to check return value of debugfs_create functions 421795b06430 drm/crtc: fix uninitialized variable use even harder a009e88cc976 tracing: Remove precision vsnprintf() check from print event 6063d72b61ca net: ethernet: cortina: Drop TSO support 39fffca57284 unicode: Don't special case ignorable code points 6592347f06e2 vhost/scsi: null-ptr-dereference in vhost_scsi_get_req() 2f6da71e9de8 ext4: fix inode tree inconsistency caused by ENOMEM da964de4c181 ACPI: battery: Fix possible crash when unregistering a battery hook 20557232c91a ACPI: battery: Simplify battery hook locking 991e8b0bab66 r8169: add tally counter fields added with RTL8125 238d5c541e7f r8169: Fix spelling mistake: "tx_underun" -> "tx_underrun" 281edfa1cdef clk: qcom: dispcc-sm8250: use CLK_SET_RATE_PARENT for branch clocks 570e257621be drm/rockchip: vop: clear DMA stop bit on RK3066 411e2e1d0132 drm/rockchip: support gamma control on RK3399 1aeaa7e8d859 drm/rockchip: define gamma registers for RK3399 f561b48d633a uprobes: fix kernel info leak via "[uprobes]" vma 24afda0421af arm64: errata: Expand speculative SSBS workaround once more 9df353ca1301 arm64: cputype: Add Neoverse-N3 definitions c45edd5942cc arm64: Add Cortex-715 CPU part definition f8a7c342326f ext4: dax: fix overflowing extents beyond inode size when partially writing dde4c1e1663b ext4: properly sync file size update after O_SYNC direct IO 6ff56ef7f724 i2c: xiic: Fix pm_runtime_set_suspended() with runtime pm enabled d223126bb0ac i2c: xiic: Use devm_clk_get_enabled() 9bd3443e34e6 i2c: xiic: Simplify with dev_err_probe() 8b55076b7bd4 kconfig: qconf: fix buffer overflow in debug links bfab5fbc12c5 drm/sched: Add locking to drm_sched_entity_modify_sched c54aa7d75055 gpio: davinci: fix lazy disable 70b60c8d9b42 btrfs: wait for fixup workers before stopping cleaner kthread during umount d73d48acf36f btrfs: fix a NULL pointer dereference when failed to start a new trasacntion 67db431b8520 ACPI: resource: Add Asus ExpertBook B2502CVA to irq1_level_low_skip_override[] 1a819c7f857e ACPI: resource: Add Asus Vivobook X1704VAP to irq1_level_low_skip_override[] f976d964a64c Input: adp5589-keys - fix adp5589_gpio_get_value() bf8363e46fba rtc: at91sam9: fix OF node leak in probe() error path e33fe25b1efe net: stmmac: Fix zero-division error when disabling tc cbs 68e579316cbf tomoyo: fallback to realpath if symlink's pathname does not exist 68c77a70e33c iio: magnetometer: ak8975: Fix reading for ak099xx sensors 1d108095d5e5 clk: qcom: gcc-sm8250: Do not turn off PCIe GDSCs during gdsc_disable() 60b6968341a6 media: venus: fix use after free bug in venus_remove due to race condition 4445bc6e9f2b clk: qcom: clk-rpmh: Fix overflow in BCM vote 3f73da56af91 media: uapi/linux/cec.h: cec_msg_set_reply_to: zero flags 5443e70fb7fc media: sun4i_csi: Implement link validate for sun4i_csi subdev ed0d5103f9ef clk: rockchip: fix error for unknown clocks f63461af2c1a aoe: fix the potential use-after-free problem in more places 7ae7ada29a6f NFSD: Fix NFSv4's PUTPUBFH operation 0ea4333c679f nfsd: map the EBADMSG to nfserr_io to avoid warning 96cad5da791e nfsd: fix delegation_blocked() to block correctly for at least 30 seconds f692160d3e1e exfat: fix memory leak in exfat_load_bitmap() e01e9ae43e64 riscv: define ILLEGAL_POINTER_VALUE for 64bit 61b84013e560 ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate bf605ae98dab ocfs2: fix null-ptr-deref when journal load failed. 3f1ca6ba5452 ocfs2: remove unreasonable unlock in ocfs2_read_blocks 14114d8148db ocfs2: cancel dqi_sync_work before freeing oinfo aac31d654a0a ocfs2: reserve space for inline xattr before attaching reflink tree 8e3bf366368e ocfs2: fix uninit-value in ocfs2_get_block() ff1500fe2649 ocfs2: fix the la space leak when unmounting an ocfs2 volume a54378585624 mm: krealloc: consider spare memory for __GFP_ZERO 7fabacb337f0 jbd2: correctly compare tids with tid_geq function in jbd2_fc_begin_commit 481e8f18a290 jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error 2bda89735199 drm: omapdrm: Add missing check for alloc_ordered_workqueue 3e8862875f8b of/irq: Support #msi-cells=<0> in of_msi_get_domain a63fdf20cc26 parisc: Fix stack start for ADDR_NO_RANDOMIZE personality ea7dead20420 parisc: Fix 64-bit userspace syscall path 25ec5c873c45 ext4: fix incorrect tid assumption in ext4_wait_for_tail_page_commit() 6766937d0327 ext4: update orig_path in ext4_find_extent() b6c29c8f3d7c ext4: fix double brelse() the buffer of the extents path 5e811066c5ab ext4: aovid use-after-free in ext4_ext_insert_extent() 8c26d9e53e5f ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free 4286a0418369 ext4: fix incorrect tid assumption in __jbd2_log_wait_for_space() 7bcdef04d071 ext4: propagate errors from ext4_find_extent() in ext4_insert_range() e52f933598b7 ext4: fix slab-use-after-free in ext4_split_extent_at() 133ff0d78f1b ext4: no need to continue when the number of entries is 1 2c08dfc99fc4 ALSA: hda/realtek: Add quirk for Huawei MateBook 13 KLV-WX9 c36ff6948c00 ALSA: line6: add hw monitor volume control to POD HD500X 64d315aeec57 ALSA: core: add isascii() check to card ID generator b078a7eee12c drm: Consistently use struct drm_mode_rect for FB_DAMAGE_CLIPS afa999052393 parisc: Fix itlb miss handler for 64-bit programs d6b22a2d5563 perf/core: Fix small negative period being ignored 8ab638bb498a spi: bcm63xx: Fix module autoloading f53c2b55d0e2 firmware: tegra: bpmp: Drop unused mbox_client_to_bpmp() 2c1effc2255c i2c: xiic: Wait for TX empty to avoid missed TX NAKs 46c72b01397f i2c: qcom-geni: Use IRQF_NO_AUTOEN flag in request_irq() 9b8bc33ad641 i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume 10dde0c1fb1b selftests/mm: fix charge_reserved_hugetlb.sh test e45803c71fc4 selftests: vDSO: fix vDSO symbols lookup for powerpc64 76242231557f selftests: breakpoints: use remaining time to check if suspend succeed eda94fc74b84 spi: s3c64xx: fix timeout counters in flush_fifo e3b57186f457 spi: spi-imx: Fix pm_runtime_set_suspended() with runtime pm enabled 53b1999cfd2c ext4: fix i_data_sem unlock order in ext4_ind_migrate() b0cb4561fc42 ext4: avoid use-after-free in ext4_ext_show_leaf() a34416ec269e ext4: ext4_search_dir should return a proper error e82df17e5f32 of/irq: Refer to actual buffer size in of_irq_parse_one() 29f388945770 drm/amd/pm: ensure the fw_info is not null before using it 0a377fcacefd drm/radeon/r100: Handle unknown family in r100_cp_init_microcode() aec72bfbc198 scsi: aacraid: Rearrange order of struct aac_srb_unit cf387300b819 drm/printer: Allow NULL data in devcoredump printer f921335123f6 drm/amd/display: Initialize get_bytes_per_element's default to 1 7ab69af56a23 drm/amd/display: Fix index out of bounds in DCN30 color transformation c130a3c09e37 drm/amd/display: Fix index out of bounds in degamma hardware format translation ad89f83343a5 drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation 0167d570f6a0 drm/amd/display: Check stream before comparing them e2743d0a03b2 platform/x86: touchscreen_dmi: add nanote-next quirk 831e8a816e09 drm/amdgpu: enable gfxoff quirk on HP 705G4 e407715e7a8d drm/amdgpu: add raven1 gfxoff quirk 8b1dcf25c26d jfs: Fix uninit-value access of new_ea in ea_buffer 2451e5917c56 jfs: check if leafidx greater than num leaves per dmap tree fd026b6b6758 jfs: Fix uaf in dbFreeBits f9db7bb112c4 jfs: UBSAN: shift-out-of-bounds in dbFindBits 8d54001f8dcc drm/amd/display: Check null pointers before using dc->clk_mgr 49ded709540b ata: sata_sil: Rename sil_blacklist to sil_quirks 1ebfa6663807 drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream de9e7f687625 iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count 5652c448da39 iommu/vt-d: Always reserve a domain ID for identity setup 9e493f002d52 power: reset: brcmstb: Do not go into infinite loop if reset fails d9245b9296fd iommu/arm-smmu-qcom: hide last LPASS SMMU context bank from linux ceff6f5e7173 rcuscale: Provide clear error when async specified without primitives e6897e299f57 fbdev: pxafb: Fix possible use after free in pxafb_task() 79681036a336 x86/syscall: Avoid memcpy() for ia32 syscall_get_arguments() 98111af33849 ALSA: hdsp: Break infinite MIDI input flush loop 219587bca267 ALSA: asihpi: Fix potential OOB array access e2b200c50230 ALSA: usb-audio: Add logitech Audio profile quirk 35733d1a6057 ALSA: usb-audio: Define macros for quirk table entries 6ee6835f8288 signal: Replace BUG_ON()s aa4e9056dfbc nfp: Use IRQF_NO_AUTOEN flag in request_irq() 1756918f51e9 wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext() 47be40b698b9 proc: add config & param to block forcing mem writes 02c1725eb2ad ACPICA: iasl: handle empty connection_node 95a91802e4ef tcp: avoid reusing FIN_WAIT2 when trying to find port in connect() process b7cbdd6b1bcd net: atlantic: Avoid warning about potential string truncation a479b653d5e4 ipv4: Mask upper DSCP bits and ECN bits in NETLINK_FIB_LOOKUP family 669d337aa1f6 ipv4: Check !in_dev earlier for ioctl(SIOCSIFADDR). bf60b4f58796 net: mvpp2: Increase size of queue_name buffer e2b2558971e0 tipc: guard against string buffer overrun cbb67e245dac ACPICA: check null return of ACPI_ALLOCATE_ZEROED() in acpi_db_convert_to_package() a40e7a2b805e ACPI: EC: Do not release locks during operation region accesses 7cd004102b7d wifi: rtw88: select WANT_DEV_COREDUMP 0f26f2694403 wifi: ath11k: fix array out-of-bound access in SoC stats 1f61d509257d blk_iocost: fix more out of bound shifts 62b8a46ba8bb net: sched: consistently use rcu_replace_pointer() in taprio_change() 74c63fd016bc ACPICA: Fix memory leak if acpi_ps_get_next_field() fails 30cd2158f249 ACPICA: Fix memory leak if acpi_ps_get_next_namepath() fails 4440bac6f0ca net: hisilicon: hns_mdio: fix OF node leak in probe() 124554285680 net: hisilicon: hns_dsaf_mac: fix OF node leak in hns_mac_get_info() ac6e862b8deb net: hisilicon: hip04: fix OF node leak in probe() a7f0073fcd12 net/xen-netback: prevent UAF in xenvif_flush_hash() ed418cad8386 ice: Adjust over allocation of memory in ice_sched_add_root_node() and ice_sched_add_node() b02eb7c86ff2 wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit 2171e1d75001 wifi: ath9k: fix possible integer overflow in ath9k_get_et_stats() 000bab8753ae f2fs: Require FMODE_WRITE for atomic write ioctls b820cb910f98 ALSA: hda/conexant: Fix conflicting quirk for System76 Pangolin f7785c449868 ALSA: hda/generic: Unconditionally prefer preferred_dacs pairs f10d29b108bd ALSA: hda/realtek: Fix the push button function for the ALC257 7c93044298a4 ALSA: mixer_oss: Remove some incorrect kfree_const() usages f13b04cf65a8 Bluetooth: L2CAP: Fix not validating setsockopt user input 4ec4641df57c media: usbtv: Remove useless locks in usbtv_video_free() a73d99643621 i2c: xiic: Try re-initialization on bus busy timeout c9668503e4e1 i2c: xiic: improve error message when transfer fails to start 2d320d9de7d3 i2c: xiic: xiic_xfer(): Fix runtime PM leak on error path 148fdc3c7df3 i2c: xiic: Fix RX IRQ busy check 30def367fa20 i2c: xiic: Switch from waitqueue to completion 6da4bbeb16cf i2c: xiic: Fix broken locking on tx_msg dd70c8a89ef9 sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start 16b66c46b69b ipv4: ip_gre: Fix drops of small packets in ipgre_xmit 566a931a1436 net: add more sanity checks to qdisc_pkt_len_init() ba26060a29d3 net: avoid potential underflow in qdisc_pkt_len_init() with UFO 185df159843d net: ethernet: lantiq_etop: fix memory disclosure c8bb4e2d5fae Bluetooth: btmrvl: Use IRQF_NO_AUTOEN flag in request_irq() 531754952f5d netfilter: nf_tables: prevent nf_skb_duplicated corruption 7675fe977be5 net: ieee802154: mcr20a: Use IRQF_NO_AUTOEN flag in request_irq() 181fbbdd46c0 netfilter: uapi: NFTA_FLOWTABLE_HOOK is NLA_NESTED cdd86fb75f1f net/mlx5: Added cond_resched() to crdump collection ca36d6c1a49b net/mlx5: Fix error path in multi-packet WQE transmit fd7fcd802edb ieee802154: Fix build error f55e003d261b ceph: remove the incorrect Fw reference check when dirtying pages 32ee78823dea mailbox: bcm2835: Fix timeout during suspend mode 3948c73c9295 mailbox: rockchip: fix a typo in module autoloading 6b9a551b836e spi: lpspi: Simplify some error message 767b71f29207 usb: yurex: Fix inconsistent locking bug in yurex_read() 9f1c4edee8c8 i2c: isch: Add missed 'else' 742a1b69c003 i2c: aspeed: Update the stop sw state when the bus recovery occurs 52f7cab29039 mm: only enforce minimum stack gap size if it's sensible 1472dd897fab lockdep: fix deadlock issue between lockdep and rcu 118a0c3e55e3 xhci: Set quirky xHC PCI hosts to D3 _after_ stopping and freeing them. cc1de44135ca usb: renesas-xhci: Remove renesas_xhci_pci_exit() 0f8e74a061cf pps: add an error check in parport_attach 0e508348148a pps: remove usage of the deprecated ida_simple_xx() API 47a632e5c6a1 USB: misc: yurex: fix race between read and write bf509ca62fea usb: yurex: Replace snprintf() with the safer scnprintf() variant 6ea76e19d6df soc: versatile: realview: fix soc_dev leak during device remove 6b3b25311d3e soc: versatile: realview: fix memory leak during device remove 263d04df0644 PCI: xilinx-nwl: Fix off-by-one in INTx IRQ handler 6dacc0b667a9 PCI: xilinx-nwl: Use irq_data_get_irq_chip_data() 46c4079460f4 padata: use integer wrap around to prevent deadlock on seq_nr overflow 7d0079d64442 nfs: fix memory leak in error path of nfs4_do_reclaim a239ff33c512 fs: Fix file_set_fowner LSM hook inconsistencies 47a68c75052a vfs: fix race between evice_inodes() and find_inode()&iput() 0eecd2ee23af arm64: dts: rockchip: Correct the Pinebook Pro battery design capacity b2cb101b9b72 arm64: dts: rockchip: Raise Pinebook Pro's panel backlight PWM frequency d41d66534637 hwrng: cctrng - Add missing clk_disable_unprepare in cctrng_resume 1b2137f6c9bd hwrng: mtk - Use devm_pm_runtime_enable cef1056ee6fc f2fs: avoid potential int overflow in sanity_check_area_boundary() 85c2f7bd573d f2fs: prevent possible int overflow in dir_block_index() 5e3a031dfa5a debugobjects: Fix conditions in fill_pool() dbffe7be554c wifi: rtw88: 8822c: Fix reported RX band width 44f18167492b perf/x86/intel/pt: Fix sampling synchronization f76b69ab9cf0 efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption 45a765f4ba4c ACPI: resource: Add another DMI match for the TongFang GMxXGxx 4b081991c436 ACPI: sysfs: validate return type of _STR method 2e20b69b86c8 drbd: Add NULL check for net_conf to prevent dereference in state validation 62720f2daab9 drbd: Fix atomicity violation in drbd_uuid_set_bm() a295fa38dcbb crypto: ccp - Properly unregister /dev/sev on sev PLATFORM_STATUS failure c7148bf45da1 tty: rp2: Fix reset with non forgiving PCIe host bridges c30558e6c5c9 firmware_loader: Block path traversal e89f925093a3 bus: integrator-lm: fix OF node leak in probe() 61c12c72b1ab USB: class: CDC-ACM: fix race between get_serial and set_serial fa83e1df43f1 USB: misc: cypress_cy7c63: check for short transfer 1c5cd41b4b50 USB: appledisplay: close race between probe and completion handler 84f4d44703d9 drm/amd/display: Round calculated vtotal 60aadf84bef0 Input: i8042 - add another board name for TUXEDO Stellaris Gen5 AMD line 13175be789b5 Input: i8042 - add TUXEDO Stellaris 15 Slim Gen6 AMD to i8042 quirk table bf3f1affba62 Input: i8042 - add TUXEDO Stellaris 16 Gen5 AMD to i8042 quirk table cb9897b94608 soc: versatile: integrator: fix OF node leak in probe() error path c55ebcb21656 ASoC: rt5682: Return devm_of_clk_add_hw_provider to transfer the error aaaf3cd0a734 Remove *.orig pattern from .gitignore f291dc4cbc65 mptcp: fix sometimes-uninitialized warning 2dbc4b7bac60 selinux,smack: don't bypass permissions check in inode_setsecctx hook 4b81a9f92b36 bpf: Fix DEVMAP_HASH overflow check on 32-bit arches 0e6378dd9bbc Revert "bpf: Eliminate rlimit-based memory accounting for devmap maps" bfe249c15122 Revert "bpf: Fix DEVMAP_HASH overflow check on 32-bit arches" 892620144757 x86/mm: Switch to new Intel CPU model defines 089aece01a10 powercap: RAPL: fix invalid initialization for pl4_supported field ba624f656a8b Input: goodix - use the new soc_intel_is_byt() helper 50460579fe87 drm/amd/display: Fix Synaptics Cascaded Panamera DSC Determination e0dbda9f26e2 netfilter: ctnetlink: compile ctnetlink_label_size with CONFIG_NF_CONNTRACK_EVENTS db9c5f08eea3 netfilter: nf_tables: Keep deleted flowtable hooks until after RCU 6c36857fe564 net: qrtr: Update packets cloning when broadcasting ec31cf42fc4e tcp: check skb is non-NULL in tcp_rto_delta_us() 98d14164c0a7 net: ipv6: select DST_CACHE from IPV6_RPL_LWTUNNEL 338a0582b28e net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition dcf48ab3ca2c netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() 1429a9260fed Revert "dm: requeue IO if mapping table not yet available" 0c170b1e918b vhost_vdpa: assign irq bypass producer token correctly 10348fb6feae vdpa: Add eventfd for the vdpa callback 64add9aaf78a interconnect: qcom: sm8250: Enable sync_state d4951dd16e9f coresight: tmc: sg: Do not leak sg_table cf0674248ddb iio: adc: ad7606: fix standby gpio state to match the documentation 1ea56cd9a651 iio: adc: ad7606: fix oversampling gpio array b7413dbc6341 spi: spi-fsl-lpspi: Undo runtime PM changes at driver exit time 0ed35dd547ec spi: lpspi: release requested DMA channels d612d419a579 spi: lpspi: Silence error message upon deferred probe 6f2eeba7c3e4 f2fs: reduce expensive checkpoint trigger frequency 3dc483f0e6d0 f2fs: remove unneeded check condition in __f2fs_setxattr() 87aceb1ce66a f2fs: fix to update i_ctime in __f2fs_setxattr() db930da94792 f2fs: fix typo 7b5476f06154 f2fs: enhance to update i_mode and acl atomically in f2fs_setattr() 0f1d007bbea3 nfsd: return -EINVAL when namelen is 0 9f03f0016ff7 nfsd: call cache_put if xdr_reserve_space returns NULL 40d578735499 ntb_perf: Fix printk format ef7e34237e26 ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir() dd598ac57dca RDMA/cxgb4: Added NULL check for lookup_atid 502dac909ee9 riscv: Fix fp alignment bug in perf_callchain_user() 322911a2e666 RDMA/hns: Optimize hem allocation performance 07f0f643d7e5 RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled 1e6195dc7aca RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range() 6258c4fb8d33 RDMA/hns: Refactor root BT allocation for MTR d06fbe0b8703 RDMA/hns: Add mapped page count checking for MTR 2a2894e90cec watchdog: imx_sc_wdt: Don't disable WDT in suspend 5353f8ec59f7 pinctrl: mvebu: Fix devinit_dove_pinctrl_probe function d8c75b8a91fd pinctrl: mvebu: Use devm_platform_get_and_ioremap_resource() 600735914369 nfsd: fix refcount leak when file is unhashed after being found 6fcb4bbbecb4 nfsd: remove unneeded EEXIST error check in nfsd_do_file_acquire 0ce9d89343c2 clk: ti: dra7-atl: Fix leak of of_nodes 88ba7cd9f482 pinctrl: single: fix missing error code in pcs_probe() 2efe8da2ddbf RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency f29951897a30 PCI: xilinx-nwl: Fix register misspelling c289903b7a21 PCI: keystone: Fix if-statement expression in ks_pcie_quirk() badbd736e664 drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error 6ae3b9aee426 drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error 45f826f6c827 clk: rockchip: Set parent rate for DCLK_VOP clock on RK3228 ca34aa37820a clk: imx: imx8mp: fix clock tree update of TF-A managed clocks 11396ba4f820 perf time-utils: Fix 32-bit nsec parsing a10a7d6d171b perf sched timehist: Fixed timestamp error when unable to confirm event sched_in time 727660723ea7 perf sched timehist: Fix missing free of session in perf_sched__timehist() ea837ae511aa bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit d20674f31626 nilfs2: fix potential oob read in nilfs_btree_check_delete() e2290906bb24 nilfs2: determine empty node blocks as corrupted 24bf40740a3d nilfs2: fix potential null-ptr-deref in nilfs_btree_insert() 7fc22c3b3ffc ext4: avoid OOB when system.data xattr changes underneath the filesystem e65f698736b0 ext4: return error on ext4_find_inline_entry 2e073a579f71 ext4: avoid negative min_clusters in find_group_orlov() 22d591d916b4 ext4: avoid potential buffer_head leak in __ext4_new_inode() 08c63b79624c ext4: avoid buffer_head leak in ext4_mark_inode_used() c4227a38ab88 smackfs: Use rcu_assign_pointer() to ensure safe assignment in smk_set_cipso 4766ba108b83 ext4: clear EXT4_GROUP_INFO_WAS_TRIMMED_BIT even mount with discard 3a1a31a38fcc kthread: fix task state in kthread worker if being frozen 28fbbd0ce7ab kthread: add kthread_work tracepoints dd417529c063 xz: cleanup CRC32 edits from 2018 4e1c8c12cac1 selftests/bpf: Fix C++ compile error from missing _Bool type 9374068b3690 selftests/bpf: Fix error compiling test_lru_map.c c2db6acd8cc3 selftests/bpf: Fix errors compiling cg_storage_multi.h with musl libc 3467a9412610 selftests/bpf: Fix compiling tcp_rtt.c with musl-libc 5ad69f5a0458 selftests/bpf: Fix compiling flow_dissector.c with musl-libc 306efef84bbf selftests/bpf: Fix compiling kfree_skb.c with musl-libc cc52d5282a14 selftests/bpf: Fix missing ARRAY_SIZE() definition in bench.c 04eb60af431d selftests/bpf: Fix compile error from rlim_t in sk_storage_map.c 2c9b228938e9 tpm: Clean up TPM space after command failure a0a8b7bebe1b xen/swiotlb: add alignment check for dma buffers cb9134aa0998 xen: use correct end address of kernel for conflict checking 86da3c79b889 drivers:drm:exynos_drm_gsc:Fix wrong assignment in gsc_bind() 02657ced604d drm/msm: fix %s null argument error 72fa5f700e76 ipmi: docs: don't advertise deprecated sysfs entries e9e482e1e5da drm/msm/a5xx: workaround early ring-buffer emptiness check d041301f304c drm/msm: Drop priv->lastctx 9dffbbd7b84f drm/msm: Add priv->mm_lock to protect active/inactive lists 5ce4075ddea0 drm/msm/a5xx: fix races in preemption evaluation stage cfca8b26a9f5 drm/msm/a5xx: properly clear preemption records on resume fe93cd663518 drm/msm/a5xx: disable preemption in submits by default 14531e3b82ce drm/msm: Fix incorrect file name output in adreno_request_fw() 0338e66cba27 jfs: fix out-of-bounds in dbNextAG() and diAlloc() 36820265a009 drm/radeon/evergreen_cs: fix int overflow errors in cs track offsets 6b38aedfdcd9 drm/rockchip: dw_hdmi: Fix reading EDID when using a forced mode 5f37e8c41526 drm/rockchip: vop: Allow 4096px width scaling e37fead06a45 drm/radeon: properly handle vbios fake edid sizing af2fb608e95f drm/radeon: Replace one-element array with flexible-array member 5f943045ecd0 drm/amdgpu: properly handle vbios fake edid sizing cd8810561601 drm/amdgpu: Replace one-element array with flexible-array member 65f9be03482a drm/stm: Fix an error handling path in stm_drm_platform_probe() 278ec2595281 mtd: powernv: Add check devm_kasprintf() returned value 7661e90a60fb fbdev: hpfb: Fix an error handling path in hpfb_dio_probe() 9fb482fdf3a9 power: supply: max17042_battery: Fix SOC threshold calc w/ no current sense 5c1997f7ad4e power: supply: axp20x_battery: Remove design from min and max voltage c59f57f3f1bd power: supply: axp20x_battery: allow disabling battery charging 8202306e9fc1 hwmon: (ntc_thermistor) fix module autoloading 9efa58381ae1 mtd: slram: insert break after errors in parsing the map d7a7dd2966d5 hwmon: (max16065) Fix alarm attributes 932559f25a7c hwmon: (max16065) Remove use of i2c_match_id() 514a1508c3fe i2c: Add i2c_get_match_data() 167e4371ef92 device property: Add const qualifier to device_get_match_data() parameter aeed49dd2b89 hwmon: (max16065) Fix overflows seen when writing limits cdb20b703e0e m68k: Fix kernel_clone_args.flags in m68k_clone() 42a9899e56de clocksource/drivers/qcom: Add missing iounmap() on errors in msm_dt_timer_init() 97586fbd6998 reset: berlin: fix OF node leak in probe() error path ad0b53e4b5d0 ARM: versatile: fix OF node leak in CPUs prepare 06ceed8eff02 ARM: dts: imx7d-zii-rmu2: fix Ethernet PHY pinctrl property fb3cd974fb82 ARM: dts: microchip: sam9x60: Fix rtc/rtt clocks 5f19060ab0ac spi: ppc4xx: Avoid returning 0 when failed to parse and map IRQ 63c7417ad463 spi: ppc4xx: handle irq_of_parse_and_map() errors 4bc4272e2506 block: fix potential invalid pointer dereference in blk_add_partition 4d2760df0f3d block: print symbolic error name instead of error code 3630a18846c7 block, bfq: don't break merge chain in bfq_split_bfqq() a819a496d2f2 block, bfq: choose the last bfqq from merge chain in bfq_setup_cooperator() e1277ae780cc block, bfq: fix possible UAF for bfqq->bic with merge chain cab9ff7fe83f net: tipc: avoid possible garbage value 207503742caf net: ipv6: rpl_iptunnel: Fix memory leak in rpl_input 3df68f37c567 r8169: disable ALDPS per default for RTL8125 5755eabda22c net: enetc: Use IRQF_NO_AUTOEN flag in request_irq() e296245ca85a bareudp: Pull inner IP header on xmit. b48fae6788b3 geneve: Fix incorrect inner network header offset when innerprotoinherit is set 3b84799ea26e net: geneve: support IPv4/IPv6 as inner protocol 76851c70a5cf bareudp: Pull inner IP header in bareudp_udp_encap_recv(). cb1f7ef1f415 bareudp: allow redirecting bareudp packets to eth devices 2accdb38c1c1 Bluetooth: btusb: Fix not handling ZPL/short-transfer 3703e18a910f can: m_can: m_can_close(): stop clocks after device has been shut down b6dce5b5a823 can: m_can: Add support for transceiver as phy 5cc00913c1fd can: bcm: Clear bo->bcm_proc_read after remove_proc_entry(). 1a11a1a53255 sock_map: Add a cond_resched() in sock_hash_free() 557418e17046 wifi: wilc1000: fix potential RCU dereference issue in wilc_parse_join_bss_param f232916fab67 wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop() 793e01f99666 wifi: cfg80211: fix two more possible UBSAN-detected off-by-one errors f8e0ca304996 wifi: mt76: mt7915: fix rx filter setting for bfee functionality 635ccdcd9840 wifi: cfg80211: fix UBSAN noise in cfg80211_wext_siwscan() 7b0724f7a927 cpufreq: ti-cpufreq: Introduce quirks to handle syscon fails appropriately 0723ddb2d161 netfilter: nf_tables: reject expiration higher than timeout 39c1012f5f78 netfilter: nf_tables: reject element expiration with no timeout 1c0c097ded94 netfilter: nf_tables: elements with timeout below CONFIG_HZ never expire 4bb459040d3d can: j1939: use correct function name in comment b0947eca2a5f padata: Honor the caller's alignment in case of chunk_size 0 60da25076f38 mount: handle OOM on mnt_warn_timestamp_expiry f0a39ba6e05e fs/namespace: fnic: Switch to use %ptTd 396e9c5cbf8f mount: warn only once about timestamp range expiration 9722aa53fa23 fs: explicitly unregister per-superblock BDIs 005dcd6bc4b4 ACPI: PMIC: Remove unneeded check in tps68470_pmic_opregion_probe() a0c1e2da652c wifi: rtw88: always wait for both firmware loading attempts 16e0ab9ed3ae USB: usbtmc: prevent kernel-usb-infoleak 50cff34deed4 USB: serial: pl2303: add device id for Macrosilicon MS3020 31292316c5fe usb: dwc3: Fix a typo in field name 4abf1841680f cgroup: Move rcu_head up near the top of cgroup_root 65fd90e354c7 gpiolib: cdev: Ignore reconfiguration without direction 1880a324af1c ftrace: Fix possible use-after-free issue in ftrace_location() e6be2e1ebc77 x86/ibt,ftrace: Search for __fentry__ location 9705f447bf9a inet: inet_defrag: prevent sk release while still in use 0e7814b028cd mptcp: pm: Fix uaf in __timer_delete_sync 6a53e5def7a8 mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer a684b45a7770 mptcp: export lookup_anno_list_by_saddr 9d682e89c44b gpio: prevent potential speculation leaks in gpio_device_get_desc() 5badd0ae8b7d netfilter: nf_tables: missing iterator type in lookup walk ff89db14c63a netfilter: nft_set_pipapo: walk over current view on netlink dump 45a81667e0e8 cgroup: Make operations on the cgroup root_list RCU safe 57a3d89831fc ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry() 34759b7e4493 ocfs2: add bounds checking to ocfs2_xattr_find_entry() d5624db2326c x86/hyperv: Set X86_FEATURE_TSC_KNOWN_FREQ when Hyper-V provides frequency bbd11db41be6 spi: bcm63xx: Enable module autoloading 040511d9f282 drm: komeda: Fix an issue related to normalized zpos 3d39061b7b92 ASoC: tda7419: fix module autoloading 9c6d4649f2dc ASoC: intel: fix module autoloading de46b1d24f5f wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead db81677f4b6c wifi: iwlwifi: lower message level for FW buffer destination dd34ef88d58c net: ftgmac100: Ensure tx descriptor updates are visible 1a8e85289e29 microblaze: don't treat zero reserved memory regions as error 2e5052143c28 pinctrl: at91: make it work with current gpiolib 9f08d024eda5 ALSA: hda/realtek - FIxed ALC285 headphone no sound fff183aa3c83 ALSA: hda/realtek - Fixed ALC256 headphone no sound 0f4da063a1c6 ASoC: allow module autoloading for table db1200_pids 007180fcb6cc dma-buf: heaps: Fix off-by-one in CMA heap fault handler 5a2cc2bb8139 ASoC: meson: axg-card: fix 'use-after-free' ae96b02b9deb soundwire: stream: Revert "soundwire: stream: fix programming slave ports for non-continous port maps" 609260542cf8 spi: nxp-fspi: fix the KASAN report out-of-bounds bug 1f31f51bfc82 net: dpaa: Pad packets to ETH_ZLEN f2b13ec20854 net: ftgmac100: Enable TX interrupt to avoid TX timeout 392f6a97fcbe fou: fix initialization of grc b9063702a048 net/mlx5e: Add missing link modes to ptys2ethtool_map 097cc80396b7 net/mlx5: Update the list of the PCI supported devices e7a9cca35ead ice: fix accounting for filters shared by multiple VSIs a38c552abfa9 hwmon: (pmbus) Conditionally clear individual status bits for pmbus rev >= 1.2 b9d15b50b279 hwmon: (pmbus) Introduce and use write_byte_data callback e829dbaf7669 minmax: reduce min/max macro expansion in atomisp driver 78078862f0a8 arm64: dts: rockchip: override BIOS_DISABLE signal via GPIO hog on RK3399 Puma 14341f28a3a9 NFS: Avoid unnecessary rescanning of the per-server delegation list 4f0e491644b7 Input: i8042 - add Fujitsu Lifebook E756 to i8042 quirk table 00d54431b0ed drm/msm/adreno: Fix error return if missing firmware-name 44eb665889e3 scripts: kconfig: merge_config: config files: add a trailing newline 9deecde63714 Input: synaptics - enable SMBus for HP Elitebook 840 G2 3f7183e28fa3 Input: ads7846 - ratelimit the spi_sync error message f08589057f32 btrfs: update target inode's ctime on unlink 43662ba6ca86 powerpc/mm: Fix boot warning with hugepages and CONFIG_DEBUG_VIRTUAL acb4baa4846d net: phy: vitesse: repair vsc73xx autonegotiation 3b9ca0230077 net: ethernet: use ip_hdrlen() instead of bit shift b06bb81ef940 usbnet: ipheth: fix carrier detection in modes 1 and 4 8a30bee7f534 usb: dwc3: core: update LC timer as per USB Spec V3.2 1ac066765826 usb: dwc3: core: Enable GUCTL1 bit 10 for fixing termination error after resume bug 6b3af2ad53cf usb: dwc3: Decouple USB 2.0 L1 & L2 events 03a85a51f33a fix vfsub build error 12594a0e7118 sock_map: avoid race between sock_map_close and sk_psock_put 7a346798c1e1 sock_map: Fix a potential use-after-free in sock_map_close() 843556a46e16 bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself 4af417c06d37 of: module: add buffer overflow check in of_modalias() b29e4b50c556 scripts/gdb: fix SB_* constants parsing 02fd398f5e2b bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS 2bba1cb1487b loop: Select I/O scheduler 'none' from inside add_disk() 027f4dd7c993 blk-mq: Introduce the BLK_MQ_F_NO_SCHED_BY_DEFAULT flag 2214ded26c86 tpm: tis_i2c: Limit write bursts to I2C_SMBUS_BLOCK_MAX (32) bytes 44494049e815 tpm: tis_i2c: Limit read bursts to I2C_SMBUS_BLOCK_MAX (32) bytes 0d7c23009d82 tpm: Add flag to use default cancellation policy 07914bef4e16 tpm: tis_i2c: Fix sanity check interrupt enable mask 35f85f04bd69 tpm: Add tpm_tis_i2c backend for tpm_tis_core 7b04c6c08107 tpm: Add tpm_tis_verify_crc to the tpm_tis_phy_ops protocol layer 4790cb2d1283 tpm: Remove read16/read32/write32 calls from tpm_tis_phy_ops 50f74deaf308 hwmon: Add driver for Texas Instruments TMP464 and TMP468 a4e6e4b7bb08 dt-bindings: hwmon: add tmp464.yaml e0ed2149d7b5 drm/amdkfd: Check for null pointer after calling kmemdup c6ddded89322 ARM: renumber bits related to _TIF_WORK_MASK 35b96a325c1e arm64: make _TIF_WORK_MASK bits contiguous f5a8f06aa595 arm64: uaccess: remove vestigal UAO support 3a330b569301 arm64: uaccess: remove redundant PAN toggling 9cbbb016d6e7 arm64: uaccess: remove addr_limit_user_check() fd83411f5e08 arm64: uaccess: remove set_fs() 15a6dc2f4b53 arm64: uaccess cleanup macro naming 912a6ab683a4 arm64: uaccess: split user/kernel routines d004ab02dae2 arm64: uaccess: refactor __{get,put}_user e1941a8b459e arm64: uaccess: simplify __copy_user_flushcache() dfae822b4c59 arm64: uaccess: rename privileged uaccess routines 1efdb8f0a0c7 arm64: sdei: explicitly simulate PAN/UAO entry b35fec69554c arm64: sdei: move uaccess logic to arch/arm64/ b5a28033fe7b arm64: head.S: always initialize PSTATE 243eb8553513 arm64: head.S: cleanup SCTLR_ELx initialization 74a00405d97f arm64: head.S: rename el2_setup -> init_kernel_el 73c5f386d175 arm64: add C wrappers for SET_PSTATE_*() e17fb7543df1 arm64: ensure ERET from kthread is illegal eff6289cc53b ixgbevf: add disable link state 262595681381 ixgbe: add improvement for MDD response functionality b9d78b06dea8 ixgbe: add the ability for the PF to disable VF link state d829911485da Documentation: arm64: Document PMU counters access from userspace fe5d29bfce20 arm64: perf: Enable PMU counter userspace access for perf event 15ce6d04ed6a arm64: perf: Add userspace counter access disable switch 4f288acbeed8 perf: Add a counter for number of user access events in context 354ba4a8c4b8 x86: perf: Move RDPMC event flag to a common definition d29cec94c49b libperf xyarray: Add bounds checks to xyarray__entry() 8264d2b91841 libperf: Add support for user space counter access 7fd81b678b5f libperf tests: Add support for verbose printing 6029ff53a48f libperf: Add evsel mmap support 28b0c8956369 tools include: Add an initial math64.h 492e532d20f1 perf record: Improve 'Workload failed' message printing events + what was exec'ed d0a1fc61733e perf evlist: Add a method to return the list of evsels as a string 81a77b39be0a perf annotate: Fix sample events lost in stdio mode 2883e69e202d pnmtologo: use relocatable file name 80f5207b5abd tools: use basename to identify file in gen-mach-types 4d201ec392f1 vt/conmakehash: improve reproducibility ae24d013888f lib/build_OID_registry: fix reproducibility issues 5d72da88dbb4 x86/boot: Wrap literal addresses in absolute_pointer() dc0bd7aa2319 ACPI: thermal: drop an always true check 0c4288cceef5 xfs: Fix -Werror=dangling-pointer work-around for older GCC 5509050b3392 xfs: Work around GCC 12 -Werror=dangling-pointer for xfs_attr_remote.o 669827c6e293 virtio-pci: Remove wrong address verification in vp_del_vqs() 1c80d994d3db regulator: consumer: Add missing stubs to regulator/consumer.h 3303d0e2aeff ipv6: Fix stats accounting in ip6_pkt_drop c56e60f665e7 memcg: enable accounting of ipc resources e6c8ebd210a2 tick/nohz: WARN_ON --> WARN_ON_ONCE to prevent console saturation 1655ee30e684 sched/isolation: really align nohz_full with rcu_nocbs 253c752ed120 pstore/ftrace: Add and use ftrace_test_recursion_trylock_safe 356e8a12bd66 pstore/ftrace: Add recursion protection to the ftrace callback 334706a1e873 ftrace: Add ftrace_test_recursion_trylock() helper function 78c260d7f60b ftrace: Move the recursion testing into global headers c0b313d988a1 powerpc/mm: Switch obsolete dssall to .long 1bd813fe8d0e riscv: fix build with binutils 2.38 835a2d1b24c6 powerpc/lib/sstep: fix 'ptesync' build error fd84b99a8ccb drm/amd/display: Don't allow partial copy_from_user 024f4ff63d55 drm/amdgpu: Fix even more out of bound writes from debugfs 0c0ad634e899 e1000e: Serialize TGP e1000e PM ops add88b0536fa e1000e: Make mei_me active when e1000e is in use a8f317c1a17e yaffs: replace IS_ERR with IS_ERR_OR_NULL to check both ERR and NULL c8400a2cbe1f iommu/arm-smmu-v3: Ratelimit event dump b8ec7e43e95e regmap: teach regmap to use raw spinlocks if requested in the config 4b7fa7684be7 OF: DT-Overlay configfs interface (v7) d515a5c0e9a9 net: xilinx_emaclite: Do not print real IOMEM pointer 11329e49959b drivers: net: xilinx_emaclite: remove arch limitation 29dc69bf2a07 drivers: net: xilinx_emaclite: Add COMPILE_TEST support ff106eff01f6 drivers: net: xilinx_emaclite: Fix -Wpointer-to-int-cast warnings with W=1 c27462391070 serial: 8250: 8250_omap: Fix possible array out of bounds access 16976d8e307f perf intel-pt: Use aux_watermark d421a2346946 perf: Cap allocation order at aux_watermark 6da8d5f29481 timers: Fix get_next_timer_interrupt() with no timers pending af141841735a eventfd: Enlarge recursion limit to allow vhost to work a125a6102808 iwlwifi: select MAC80211_LEDS conditionally 139fe7d68413 rcu: Fix stall-warning deadlock due to non-release of rcu_node ->lock 8d0c79931235 console: Fix build when CONFIG_BLK_DEV_INITRD is disabled. ea777841e8ea yaffs: fix -Wstringop-overread compile warning in yaffs_fix_null_name ab49d2db98bd cgroup1: fix leaked context root causing sporadic NULL deref in LTP bdda1b6cf99b aufs5: aufs-core 2fa276071d07 aufs5: aufs-standalone 06ed4d532456 aufs5: aufs-mmap 372857834999 aufs5: aufs-kbuild fd68c9840693 aufs5: aufs-base a673c127156c Revert "aufs5: core" cf62bfcde384 Revert "aufs5: aufs5-base" a644419ec785 Revert "aufs5: aufs5-mmap" b893f9a999bb Revert "aufs5: aufs5-standalone" c60db0819480 Revert "aufs: initial port to v5.10" c66a5900f139 Revert "Revert "aufs: initial port to v5.10"" 1320cf58f5dd Revert "aufs: linux-v5.10-rc1, no more set_fs()" 02349d7738ff Revert "for aufs: linux-v5.10-rc1, no more vfs_(read|write)f_t" f01dab74750c Revert "aufs: linux-v5.10-rc1, no more f_op->read() and ->write()" 3d5de709b676 Revert "aufs5: aufs5-kbuild" a97f1329edf7 tracing/arm: Have max stack tracer handle the case of return address after data 5c54112a05ab net: Treat __napi_schedule_irqoff() as __napi_schedule() on PREEMPT_RT ddac76981cb3 sched/isolation: reconcile rcu_nocbs= and nohz_full= 56fd8c36614e net/dccp: make it depend on CONFIG_BROKEN (CVE-2020-16119) a8808e541750 aufs: linux-v5.10-rc1, no more f_op->read() and ->write() cb1c41dac775 for aufs: linux-v5.10-rc1, no more vfs_(read|write)f_t a5805df6583f aufs: linux-v5.10-rc1, no more set_fs() 64e145dcca8c Revert "aufs: initial port to v5.10" d6e20b2257ec defconfig: add dependency for CONFIG_ACPI_APEI_PCIEAER b237d48208d0 arm64/mm: Drop THP conditionality from FORCE_MAX_ZONEORDER 1209195ed0f7 driver: adc: ltc2497: return directly after reading the adc conversion value a60fe3fcf113 Revert "mfd: syscon: Don't free allocated name for regmap_config" 13d68767aa4a rcutorture: Use "all" and "N" in "nohz_full" and "rcu_nocbs" 54e69571a97d rcu: deprecate "all" option to rcu_nocbs= a605b9d20447 lib: test_bitmap: add tests for "N" alias 8c22517f444e lib: bitmap: support "N" as an alias for size of bitmap 88187167e63a lib: bitmap: move ERANGE check from set_region to check_region ca5429633613 lib: bitmap: fold nbits into region struct 9381134cea8a lib: test_bitmap: add more start-end:offset/len tests c825800730ab lib: test_bitmap: add tests to trigger ERANGE case. 8cc8264dca3f lib: test_bitmap: clearly separate ERANGE from EINVAL tests. 470da7b7f2ff Revert "cpumask: Un-inline cpulist_parse for SMP; prepare for ascii helpers" 28dc1d37602d Revert "cpumask: Make "all" alias global and not just RCU" dbfe0b183fca Revert "cpumask: Add a "none" alias to complement "all"" a57711fcff30 Revert "cpumask: Add "last" alias for cpu list specifications" 34523d7c8476 qemux86: add configuration symbol to select values cdca78778415 objtool: Fix seg fault with Clang non-section symbols d3287798bd88 x86/entry: Emit a symbol for register restoring thunk 2ad99ddaac78 cpumask: Add "last" alias for cpu list specifications c10e9481810b cpumask: Add a "none" alias to complement "all" b00ceed9d388 cpumask: Make "all" alias global and not just RCU 8b215206e797 cpumask: Un-inline cpulist_parse for SMP; prepare for ascii helpers 1b5024caeda8 clear_warn_once: add a clear_warn_once= boot parameter fc0dd76cce0e clear_warn_once: bind a timer to written reset value d64fc2d2b14a clear_warn_once: expand debugfs to include read support 77592e956cc9 perf: perf can not parser the backtrace of app in the 32bit system and 64bit kernel. 6e022759f727 perf: x86-32: explicitly include 22d6bbb947d4 perf: mips64: Convert __u64 to unsigned long long c35f9150001c perf: fix bench numa compilation c4caef513eb1 perf: add SLANG_INC for slang.h 07dfbf9405dd perf: add sgidefs.h to for mips builds 42c5431ad2cf perf: change --root to --prefix for python install af79bfe90143 perf: add 'libperl not found' warning ddfbd9e75f08 perf: force include of 0f34e6305176 fat: don't use obsolete random32 call in namei_vfat b5b55eaad1df FAT: Added FAT_NO_83NAME 756b13bfab6e FAT: Add CONFIG_VFAT_NO_CREATE_WITH_LONGNAMES option fabad71cb2b5 FAT: Add CONFIG_VFAT_FS_NO_DUALNAMES option 06fd68d75bd1 aufs: initial port to v5.10 c9126877d1f5 aufs5: core f5150173c643 aufs5: aufs5-standalone b57d26b072d9 aufs5: aufs5-mmap 78f128c4b8e5 aufs5: aufs5-base 47aa35171d08 aufs5: aufs5-kbuild 35c480a23c66 yaffs: include blkdev.h 2c64c43540a5 yaffs: fix misplaced variable declaration bde410ee9f59 yaffs2: v5.6 build fixups 414c8e866931 yaffs2: fix memory leak when /proc/yaffs is read c99c1990cf7c yaffs: add strict check when call yaffs_internal_read_super 498f5fafe50a yaffs: repair yaffs_get_mtd_device 7ca3c08ebbf9 yaffs: Fix build failure by handling inode i_version with proper atomic API 0ba47e881bb8 yaffs2: fix memory leak in mount/umount 39a5406665dd yaffs: Avoid setting any ACL releated xattr ca5b43ddc6fd Yaffs:check oob size before auto selecting Yaffs1 c2619c05a53e fs: yaffs2: replace CURRENT_TIME by other appropriate apis 5e08fb7b8ee0 yaffs2: adjust to proper location of MS_RDONLY 5f1a1a9678a8 yaffs2: import git revision b4ce1bb (jan, 2020) fc21f09ae369 initramfs: allow an optional wrapper script around initramfs generation 73887fca03be arm64/perf: Fix wrong cast that may cause wrong truncation a267cafaac44 defconfigs: drop obselete options eb5d1bc00c3f arm64/perf: fix backtrace for AAPCS with FP enabled 062b2c98c087 linux-yocto: Handle /bin/awk issues d3beb253ae71 uvesafb: provide option to specify timeout for task completion 75ccbf377a51 uvesafb: print error message when task timeout occurs 18ffa2e88024 compiler.h: Undef before redefining __attribute_const__ 3ed931201746 vmware: include jiffies.h 938942859596 Resolve jiffies wrapping about arp 069a883d837c nfs: Allow default io size to be configured. 3b568edcd3e9 check console device file on fs when booting 77ec93228920 mount_root: clarify error messages for when no rootfs found 17a15e0f7536 menuconfig,mconf-cfg: Allow specification of ncurses location 8f13b1349a74 modpost: mask trivial warnings b6c9e0fa24e8 kbuild: exclude meta directory from distclean processing 62dbbdbec60a powerpc: serialize image targets 27b8dec5dbb3 arm: serialize build targets fc365512e4c4 Revert "platform/x86: wmi: Destroy on cleanup rather than unregister" 9a6e91d2e691 crtsavres: fixups for 5.4+ 7dbc3cd0398f powerpc/ptrace: Disable array-bounds warning with gcc8 ebe3bcb89cb0 powerpc: Disable attribute-alias warnings from gcc8 65ba0e7de081 powerpc: add crtsavres.o to archprepare for kbuild 6bd3efdce5a9 powerpc: kexec fix for powerpc64 41671522c159 powerpc: Add unwind information for SPE registers of E500 core 8851006b0109 mips: vdso: fix 'jalr $t9' crash in vdso code ed5db62477e8 mips: Kconfig: add QEMUMIPS64 option 2a7ca094fc42 4kc cache tlb hazard: tlbp cache coherency b742d60d3f70 malta uhci quirks: make allowance for slow 4k(e)c 8a160fc86eb6 arm/Makefile: Fix systemtap b9805882353c vexpress: Pass LOADADDR to Makefile 332e618aa7ae arm: ARM EABI socketcall 1ec682cb85f8 ARM: LPAE: Invalidate the TLB for module addresses during translation fault Signed-off-by: Bruce Ashfield Signed-off-by: Steve Sakoman --- .../linux/linux-yocto-rt_5.10.bb | 6 ++--- .../linux/linux-yocto-tiny_5.10.bb | 8 +++---- meta/recipes-kernel/linux/linux-yocto_5.10.bb | 24 +++++++++---------- 3 files changed, 19 insertions(+), 19 deletions(-) diff --git a/meta/recipes-kernel/linux/linux-yocto-rt_5.10.bb b/meta/recipes-kernel/linux/linux-yocto-rt_5.10.bb index 8a60bebcba..629a59a9b7 100644 --- a/meta/recipes-kernel/linux/linux-yocto-rt_5.10.bb +++ b/meta/recipes-kernel/linux/linux-yocto-rt_5.10.bb @@ -11,13 +11,13 @@ python () { raise bb.parse.SkipRecipe("Set PREFERRED_PROVIDER_virtual/kernel to linux-yocto-rt to enable it") } -SRCREV_machine ?= "7b4e7ae2a10c124e48fd4cce93fcc93f15750d86" -SRCREV_meta ?= "a26c1def6dceccb96ab9a707072d22e75888eda9" +SRCREV_machine ?= "2ae1270a98b8e62cfecf36a485731a99ff0ab6a8" +SRCREV_meta ?= "f5f141c395405345203f11703ca4bf609fef3fc2" SRC_URI = "git://git.yoctoproject.org/linux-yocto.git;branch=${KBRANCH};name=machine \ git://git.yoctoproject.org/yocto-kernel-cache;type=kmeta;name=meta;branch=yocto-5.10;destsuffix=${KMETA}" -LINUX_VERSION ?= "5.10.226" +LINUX_VERSION ?= "5.10.227" LIC_FILES_CHKSUM = "file://COPYING;md5=6bc538ed5bd9a7fc9398086aedcd7e46" diff --git a/meta/recipes-kernel/linux/linux-yocto-tiny_5.10.bb b/meta/recipes-kernel/linux/linux-yocto-tiny_5.10.bb index b1c644db57..eacd59014e 100644 --- a/meta/recipes-kernel/linux/linux-yocto-tiny_5.10.bb +++ b/meta/recipes-kernel/linux/linux-yocto-tiny_5.10.bb @@ -6,7 +6,7 @@ KCONFIG_MODE = "--allnoconfig" require recipes-kernel/linux/linux-yocto.inc -LINUX_VERSION ?= "5.10.226" +LINUX_VERSION ?= "5.10.227" LIC_FILES_CHKSUM = "file://COPYING;md5=6bc538ed5bd9a7fc9398086aedcd7e46" DEPENDS += "${@bb.utils.contains('ARCH', 'x86', 'elfutils-native', '', d)}" @@ -15,9 +15,9 @@ DEPENDS += "openssl-native util-linux-native" KMETA = "kernel-meta" KCONF_BSP_AUDIT_LEVEL = "2" -SRCREV_machine:qemuarm ?= "30ae83f5cb6ff45d30bf47958f1585d3275740b3" -SRCREV_machine ?= "b61c15e2143de80c4ae22605a8346023383f653a" -SRCREV_meta ?= "a26c1def6dceccb96ab9a707072d22e75888eda9" +SRCREV_machine:qemuarm ?= "5bb97dac8754ff70fb2ccdef76702bc9a96ce3f7" +SRCREV_machine ?= "42d448fa7ff4633abcbf0a7a02ce0b2509df44a9" +SRCREV_meta ?= "f5f141c395405345203f11703ca4bf609fef3fc2" PV = "${LINUX_VERSION}+git${SRCPV}" diff --git a/meta/recipes-kernel/linux/linux-yocto_5.10.bb b/meta/recipes-kernel/linux/linux-yocto_5.10.bb index e6d8787395..29091261c4 100644 --- a/meta/recipes-kernel/linux/linux-yocto_5.10.bb +++ b/meta/recipes-kernel/linux/linux-yocto_5.10.bb @@ -14,23 +14,23 @@ KBRANCH:qemux86 ?= "v5.10/standard/base" KBRANCH:qemux86-64 ?= "v5.10/standard/base" KBRANCH:qemumips64 ?= "v5.10/standard/mti-malta64" -SRCREV_machine:qemuarm ?= "15bb053d77debfc3e5bf7388d6a99c2f766f0450" -SRCREV_machine:qemuarm64 ?= "24b6c64975625da3c82321fbe888edbf540361f5" -SRCREV_machine:qemumips ?= "bdd2635646d4b6508287a3037fef5caafe74f1bd" -SRCREV_machine:qemuppc ?= "cfdef5fc7631d32ff3dd05852f15c0c544273b47" -SRCREV_machine:qemuriscv64 ?= "ab15dae067f713bc506e8e8ad435e5e9f98263fd" -SRCREV_machine:qemuriscv32 ?= "ab15dae067f713bc506e8e8ad435e5e9f98263fd" -SRCREV_machine:qemux86 ?= "ab15dae067f713bc506e8e8ad435e5e9f98263fd" -SRCREV_machine:qemux86-64 ?= "ab15dae067f713bc506e8e8ad435e5e9f98263fd" -SRCREV_machine:qemumips64 ?= "d42c39f3a3588754fb0347054f27c818f8873d76" -SRCREV_machine ?= "ab15dae067f713bc506e8e8ad435e5e9f98263fd" -SRCREV_meta ?= "a26c1def6dceccb96ab9a707072d22e75888eda9" +SRCREV_machine:qemuarm ?= "b08a4f767c2ecd86d0272a65f9e3cd98f1a06e66" +SRCREV_machine:qemuarm64 ?= "77acdf2e0c5738d3e6c766ff55c0ba1ebe43bd56" +SRCREV_machine:qemumips ?= "1e873174e49fe04bfa47306c92f2e761f23abe40" +SRCREV_machine:qemuppc ?= "393a202ffe7f28b0158df1e97ce0b24edaf59ff9" +SRCREV_machine:qemuriscv64 ?= "cfcd5579a447eb3768773c3be44e59a4addcf85a" +SRCREV_machine:qemuriscv32 ?= "cfcd5579a447eb3768773c3be44e59a4addcf85a" +SRCREV_machine:qemux86 ?= "cfcd5579a447eb3768773c3be44e59a4addcf85a" +SRCREV_machine:qemux86-64 ?= "cfcd5579a447eb3768773c3be44e59a4addcf85a" +SRCREV_machine:qemumips64 ?= "4f1163b1c00922dbf33f5ff55807584d3e287430" +SRCREV_machine ?= "cfcd5579a447eb3768773c3be44e59a4addcf85a" +SRCREV_meta ?= "f5f141c395405345203f11703ca4bf609fef3fc2" SRC_URI = "git://git.yoctoproject.org/linux-yocto.git;name=machine;branch=${KBRANCH}; \ git://git.yoctoproject.org/yocto-kernel-cache;type=kmeta;name=meta;branch=yocto-5.10;destsuffix=${KMETA}" LIC_FILES_CHKSUM = "file://COPYING;md5=6bc538ed5bd9a7fc9398086aedcd7e46" -LINUX_VERSION ?= "5.10.226" +LINUX_VERSION ?= "5.10.227" DEPENDS += "${@bb.utils.contains('ARCH', 'x86', 'elfutils-native', '', d)}" DEPENDS += "openssl-native util-linux-native" From patchwork Tue Jan 7 18:08:31 2025 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Steve Sakoman X-Patchwork-Id: 55159 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id C3BC0E77199 for ; Tue, 7 Jan 2025 18:09:13 +0000 (UTC) Received: from mail-pl1-f178.google.com (mail-pl1-f178.google.com [209.85.214.178]) by mx.groups.io with SMTP id smtpd.web10.100.1736273349247996938 for ; Tue, 07 Jan 2025 10:09:09 -0800 Authentication-Results: mx.groups.io; dkim=pass header.i=@sakoman-com.20230601.gappssmtp.com header.s=20230601 header.b=J/vyQwFB; spf=softfail (domain: sakoman.com, ip: 209.85.214.178, mailfrom: steve@sakoman.com) Received: by mail-pl1-f178.google.com with SMTP id d9443c01a7336-2164b662090so205932615ad.1 for ; Tue, 07 Jan 2025 10:09:09 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sakoman-com.20230601.gappssmtp.com; s=20230601; t=1736273348; x=1736878148; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=NaiNjXSgtUKjAXQfOl0iu2CW5NuKcu18eT6UK4AyQes=; b=J/vyQwFB3QE0Jg3NZkD8FB8bit7fc87GrIdyPuBacckcUgdm8TSfBmfOBKiXi+BsHx 9nx365sjKe640jfTZOzfrKAF75uOcFljOgUBe2WNbhEnEojWYQp/CLeJQ4vwIvpBzoKh efd03VVwolln5LkdDsK3Acc0SWlipSX1cw/AFSYXQ+jhAWbDV1lVl3moZLP/MQhV1gds sW70d5PGQiVefCUhFHGBdV16FLJnObmNMcHE805T95mdvF1DXGmCFFUErz9JtbMPjFR+ A3qdV4oQnwNLhw0M8uX1GnZhZFoKmR3fHgLE0BA6qo5nUXZTiZ0x1fqNJfoyAGbc/jae mqRg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1736273348; x=1736878148; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=NaiNjXSgtUKjAXQfOl0iu2CW5NuKcu18eT6UK4AyQes=; b=paac1SRjbInWyLMaNF/Bomd1PKf22UlTAdJVnUGtb364QjnNyOyoAnFdcw4/3ajsdN WsXpiyx2QUTCmqKTopR+LPSrcrXSXmWpPHi7IRUP881Bmr3fXDBKEHpqdesSq8OUZ5eW pnG+ROMQtwFYYAYvgW/3W5y8USdCUCi4FquUUsbSc9fg/zMfue6RgGYUilSHAvNEfuOE woAqSuAySFjSwv/zIZshW3oOYp2PraiWH+Hdxrvs6HymvWzg1A6DmxnsmyRvWcw2mR6M 63uaEzESSmlRaL6W+8myp2NeUSehg2zm1XuPxJVt07QKoHKkwAn7GZYBw9cuLOwQay9r PtiA== X-Gm-Message-State: AOJu0Yz9jZqm+ObGl+2HJNIXjqvnX8A6CgVPWwcgttlOGGLwHOOUE2oh u3prHI0sDwVvuVJOdPJV6NtW0+Eas5Bee+TazIAKaOFu1Q9SMEmJVE2/8mAiFjNB3Wp+KeMM5zd lQ94= X-Gm-Gg: ASbGnct1xOEBtpWGwoRhDm5cCGvCSAJv5N5UBX5XFDhra1YMF4ATIwLPWxY4F75t580 NWVG02DYQh8QcbdsCRTRdHihn+0E8UD+l4ywlLgzLJpu2HRhPtLJwL3MY4DAiEAUUzSgcj2mjFX zfNhDQXI/FlrLGZzXOy8fvcrgGMqJ4i98AKbogtYiXHpPX52sGFz7VJxbYmS8gPYcQhrhc9uUXI +kBSu++eLIqXYrwe8d2Bw6VVPs1zRJnw3M6IwItIk1HsQ== X-Google-Smtp-Source: AGHT+IE/N6gE4wNwxV/Pb4Lx02aNfP2xQGE5i6Z/gsPMDW9zITw6JLtYuldF7Usq08obYEKIGPwhxw== X-Received: by 2002:a17:902:ecc5:b0:216:57a6:2887 with SMTP id d9443c01a7336-21a83f5db98mr139285ad.21.1736273347551; Tue, 07 Jan 2025 10:09:07 -0800 (PST) Received: from hexa.. ([98.142.47.158]) by smtp.gmail.com with ESMTPSA id d9443c01a7336-219dc9f4413sm314166335ad.172.2025.01.07.10.09.06 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 07 Jan 2025 10:09:07 -0800 (PST) From: Steve Sakoman To: openembedded-core@lists.openembedded.org Subject: [OE-core][kirkstone 13/19] linux-yocto/5.15: update to v5.15.168 Date: Tue, 7 Jan 2025 10:08:31 -0800 Message-ID: <6e52b8bdf3dd48240c7a37a5dfc30a21cb3a792a.1736273200.git.steve@sakoman.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Tue, 07 Jan 2025 18:09:13 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/209494 From: Bruce Ashfield Updating linux-yocto/5.15 to the latest korg -stable release that comprises the following commits: 584a40a22cb9 Linux 5.15.168 1b62ef7f23c3 net: xilinx: axienet: Schedule NAPI in two steps 56d5ca2ef0d7 selftests: net: more strict check in net_helper 7ef0ff59324a net: axienet: start napi before enabling Rx/Tx a97eacadb096 ext4: fix warning in ext4_dio_write_end_io() 8fcd1021b260 netfilter: ip6t_rpfilter: Fix regression with VRF interfaces 83948838e1c7 net: vrf: determine the dst using the original ifindex for multicast 70247cc8ddb4 net: seg6: fix seg6_lookup_any_nexthop() to handle VRFs using flowi_l3mdev 760852df5707 net: Handle l3mdev in ip_tunnel_init_flow 9476ecd7f7b8 xfrm: Pass flowi_oif or l3mdev as oif to xfrm_dst_lookup 78f4daf715e8 net: geneve: add missing netlink policy and size for IFLA_GENEVE_INNER_PROTO_INHERIT 7db54f3ba8cf i2c: smbus: Check for parent device before dereference 63a07379fdb6 block, bfq: fix uaf for accessing waker_bfqq after splitting 40a6e660d2a3 kthread: unpark only parked kthread 8c3de9282dde nouveau/dmem: Fix vulnerability in migrate_to_ram upon copy error cda875cd1506 mptcp: pm: do not remove closing subflows d8435f584031 net: dsa: lan9303: ensure chip reset and wait for READY status 1cdec792b245 net: Fix an unsafe loop on the list daf462ff3cde net: explicitly clear the sk pointer, when pf->create fails 24ab54a066d2 drm/v3d: Stop the active perfmon before being destroyed dd2bac3d6339 hid: intel-ish-hid: Fix uninitialized variable 'rv' in ish_fw_xfer_direct_dma 1c4da771257e usb: storage: ignore bogus device raised by JieLi BR21 USB sound chip e31942147bf5 usb: xhci: Fix problem with xhci resume from suspend 254ef45afea5 usb: dwc3: core: Stop processing of pending events if controller is halted 34354210968f Revert "usb: yurex: Replace snprintf() with the safer scnprintf() variant" d246ee018569 HID: plantronics: Workaround for an unexcepted opposite volume key 8a6fef7d22a1 resource: fix region_intersects() vs add_memory_driver_managed() 8c6ad37e5882 HID: amd_sfh: Switch to device-managed dmam_alloc_coherent() a77e1d1ae962 hwmon: (adt7470) Add missing dependency on REGMAP_I2C 36b8e8dee2d5 hwmon: (adm9240) Add missing dependency on REGMAP_I2C b5a3a65f2907 hwmon: (tmp513) Add missing dependency on REGMAP_I2C 1fdc3bab3073 x86/fpu: Avoid writing LBR bit to IA32_XSS unless supported 330c825e66ef RDMA/hns: Fix UAF for cq async event 5e336384cc9b slip: make slhc_remember() more robust against malicious packets fadf8fdb3110 ppp: fix ppp_async_encode() illegal access c9abdd07f52f mctp: Handle error of rtnl_register_module(). 947acd1b09b0 rtnetlink: Add bulk registration helpers for rtnetlink message handlers. 21d30b12695a net: rtnetlink: add msg kind names 95ad7ee0faee netfilter: fib: check correct rtable in vrf setups 66464a439e61 netfilter: rpfilter/fib: Set ->flowic_uid correctly for user namespaces. 5c6cb7ab36e7 netfilter: rpfilter/fib: Populate flowic_l3mdev field 5bcde9b43021 net: Add l3mdev index to flow struct and avoid oif reset for port devices 85ff9a0f793c netfilter: xtables: avoid NFPROTO_UNSPEC where needed f30ea678a21e sctp: ensure sk_state is set to CLOSED if hashing fails in sctp_listen_start b5d662f49701 net: ibm: emac: mal: fix wrong goto 8fb6503592d3 net/sched: accept TCA_STAB only for root qdisc 0a94079e3841 igb: Do not bring the device up after non-fatal error 9db6ce9e2738 i40e: Fix macvlan leak by synchronizing access to mac_filter_hash 394ded964ec9 ice: Fix netif_is_ice() in Safe Mode dcd9bf6d4eb2 gpio: aspeed: Use devm_clk api to manage clock source a82f6a31b1cb gpio: aspeed: Add the flush write to ensure the write complete. 043b681d7613 net: dsa: b53: fix jumbo frames on 10/100 ports 6bc26a82b6df net: dsa: b53: allow lower MTUs on BCM5325/5365 94a40349914b net: dsa: b53: fix max MTU for BCM5325/BCM5365 7b444a8d8f4b net: dsa: b53: fix max MTU for 1g switches def87a33e062 net: dsa: b53: fix jumbo frame mtu check 8403021b6f32 thermal: intel: int340x: processor: Fix warning during module unload 2ba1af0c9f99 thermal: int340x: processor_thermal: Set feature mask before proc_thermal_add 5f14a2d06a8a net: phy: bcm84881: Fix some error handling paths 496b2ab0fd10 Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change 95c0cff5a1a5 netfilter: br_netfilter: fix panic with metadata_dst skb 7134b01bdb6a tcp: fix tcp_enter_recovery() to zero retrans_stamp when it's safe ffdcd3bd2b42 tcp: fix to allow timestamp undo if no retransmits were sent ad0d76b8ee5d net: phy: dp83869: fix memory corruption when enabling fiber 584c019baedd NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies() 91b9a4c5cfca SUNRPC: Fix integer overflow in decode_rc_list() 8a2023730850 ice: fix VLAN replay after reset ca5b42375bb8 NFSD: Mark filecache "down" if init fails e0e14dd35d42 RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt 41cf6f26abe4 fbdev: sisfb: Fix strbuf array overflow c643ef59390e drm/amd/display: Check null pointer before dereferencing se 57551835ce41 driver core: bus: Return -EIO instead of 0 when show/store invalid bus attribute 59eba86b811b tools/iio: Add memory allocation failure check for trigger_name 9a2bc9b6f929 virtio_pmem: Check device status before requesting flush 6515b7b11757 comedi: ni_routing: tools: Check when the file could not be opened 98d5873ee063 usb: dwc2: Adjust the timing of USB Driver Interrupt Registration in the Crashkernel Scenario 7ad71deb9bb7 usb: chipidea: udc: enable suspend interrupt after usb reset d18dc8e14b9c clk: imx: Remove CLK_SET_PARENT_GATE for DRAM mux for i.MX7D 64f2ca5ce971 remoteproc: imx_rproc: Use imx specific hook for find_loaded_rsc_table 52f8c06eb34d media: videobuf2-core: clear memory related fields in __vb2_plane_dmabuf_put() 92728fceefda ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition f1c9b8dc7693 PCI: Mark Creative Labs EMU20k2 INTx masking as broken 28ad4ed09378 i2c: i801: Use a different adapter-name for IDF adapters 351a97d9f8e7 PCI: Add ACS quirk for Qualcomm SA8775P 3e11b8de964d clk: bcm: bcm53573: fix OF node leak in init 394b2f4d5e01 RDMA/rtrs-srv: Avoid null pointer deref during path establishment eb54979471aa PCI: Add function 0 DMA alias quirk for Glenfly Arise chip 7022a517bf1c RDMA/mad: Improve handling of timed out WRs of mad agent ee603aae244e ktest.pl: Avoid false positives with grub2 skip regex b85e6e461b6d s390/cpum_sf: Remove WARN_ON_ONCE statements 4f5768a31cf7 ext4: nested locking for xattr inode fbb177bc1d64 ext4: don't set SB_RDONLY after filesystem errors 11cd5f6e3578 bpf, x64: Fix a jit convergence issue 02e5e382885c s390/mm: Add cond_resched() to cmm_alloc/free_pages() 4a749c14fa2b s390/facility: Disable compile time optimization for decompressor code 297c326c3e21 bpf: Check percpu map value size first 40364194698d Input: synaptics-rmi4 - fix UAF of IRQ domain on driver removal 1ce2632ebc30 virtio_console: fix misc probe bugs 54b946e6518f fs/ntfs3: Refactor enum_rstbl to suppress static checker 9d7e3c9fd6f5 selftests: net: Remove executable bits from library scripts 5174a2aa22f0 selftests/net: synchronize udpgro tests' tx and rx connection fc1ec829bdf6 selftests/net: give more time to udpgro bg processes to complete startup 084435dbd1f1 tracing: Have saved_cmdlines arrays all in one allocation 455df76f48b1 drm/crtc: fix uninitialized variable use even harder daceb147b072 tracing: Remove precision vsnprintf() check from print event 5320baa12de3 net: ethernet: cortina: Drop TSO support 651b954cd8d5 unicode: Don't special case ignorable code points f57204edc107 ALSA: usb-audio: Fix possible NULL pointer dereference in snd_usb_pcm_has_fixed_rate() a71677981775 perf report: Fix segfault when 'sym' sort key is not used 46128370a72c vhost/scsi: null-ptr-dereference in vhost_scsi_get_req() 3bb6763a8319 9p: add missing locking around taking dentry fid list 8b4920bd66e1 ext4: fix inode tree inconsistency caused by ENOMEM 5292eafa1b78 Revert "arm64: dts: qcom: sm8250: switch UFS QMP PHY to new style of bindings" 07b98400cb02 ACPI: battery: Fix possible crash when unregistering a battery hook eb7924f88f8a ACPI: battery: Simplify battery hook locking a1a37348195b clk: qcom: gcc-sc8180x: Add GPLL9 support 21950321ad33 r8169: add tally counter fields added with RTL8125 e36d8907f321 r8169: Fix spelling mistake: "tx_underun" -> "tx_underrun" befa8b1f466e dt-bindings: clock: qcom: Add GPLL9 support on gcc-sc8180x f691f2b5b0f9 dt-bindings: clock: qcom: Add missing UFS QREF clocks a0c5a9b910c7 media: imx335: Fix reset-gpio handling 846a78f7a1cb media: i2c: imx335: Enable regulator supplies e1b0752da800 drm/rockchip: vop: clear DMA stop bit on RK3066 5e889e72de58 drm/rockchip: support gamma control on RK3399 a8ade6a33ba9 drm/rockchip: define gamma registers for RK3399 8fa2b6817a95 lib/buildid: harden build ID parsing logic 91fdcb0d609c build-id: require program headers to be right after ELF header feca60173e0f drm/amd/display: Allow backlight to go below `AMDGPU_DM_DEFAULT_MIN_BACKLIGHT` 21cb47db1ec9 uprobes: fix kernel info leak via "[uprobes]" vma 9707c7895c05 arm64: errata: Expand speculative SSBS workaround once more f76454cf0fc1 arm64: cputype: Add Neoverse-N3 definitions 66f6e22dbcad arm64: Add Cortex-715 CPU part definition 8c30a9a8610c ext4: dax: fix overflowing extents beyond inode size when partially writing bb990db7baca ext4: properly sync file size update after O_SYNC direct IO d1c3c8a543a7 spi: bcm63xx: Fix missing pm_runtime_disable() 676546ba317e i2c: xiic: Fix pm_runtime_set_suspended() with runtime pm enabled 01eb21aff7f3 i2c: xiic: Use devm_clk_get_enabled() 65677e96e958 i2c: core: Lock address during client device instantiation 0e8926abfd7a i2c: create debugfs entry per adapter 19e9b89c2c7a i2c: smbus: Use device_*() functions instead of of_*() c15e2ab4fed9 device property: Add fwnode_irq_get_byname bf36521e559e device property: Add fwnode_iomap() 3d5bce8a9f6f kconfig: qconf: fix buffer overflow in debug links eb9329cd882a drm/amd/display: Fix system hang while resume with TBT monitor 622bc6472350 drm/sched: Add locking to drm_sched_entity_modify_sched 7e9d945af0b5 close_range(): fix the logics in descriptor table trimming 322920b53dc1 tracing/timerlat: Fix a race during cpuhp processing 5b8d9e4998ef tracing/hwlat: Fix a race during cpuhp processing 4764c8206a0c gpio: davinci: fix lazy disable 4c98fe0dfa2a btrfs: wait for fixup workers before stopping cleaner kthread during umount 37fee9c220b9 btrfs: fix a NULL pointer dereference when failed to start a new trasacntion 5ec5d4dddcd2 ACPI: resource: Add Asus ExpertBook B2502CVA to irq1_level_low_skip_override[] d32f7a43468f ACPI: resource: Add Asus Vivobook X1704VAP to irq1_level_low_skip_override[] 95555f9f844d Input: adp5589-keys - fix adp5589_gpio_get_value() 4449fedb8a71 Input: adp5589-keys - fix NULL pointer dereference fc65bc81884a rtc: at91sam9: fix OF node leak in probe() error path b0da9504a528 net: stmmac: Fix zero-division error when disabling tc cbs 84a9d1356e76 tomoyo: fallback to realpath if symlink's pathname does not exist 14bf8400bc47 iio: magnetometer: ak8975: Fix reading for ak099xx sensors ab727ca020e6 clk: qcom: gcc-sc8180x: Fix the sdcc2 and sdcc4 clocks freq table c02e3ab7ec6c clk: qcom: gcc-sm8250: Do not turn off PCIe GDSCs during gdsc_disable() bf6be32e2d39 media: venus: fix use after free bug in venus_remove due to race condition 248e516937c4 clk: qcom: gcc-sm8150: De-register gcc_cpuss_ahb_clk_src ed17f3177153 clk: qcom: clk-rpmh: Fix overflow in BCM vote 5c78477386bf media: uapi/linux/cec.h: cec_msg_set_reply_to: zero flags 862ab6b7c733 media: sun4i_csi: Implement link validate for sun4i_csi subdev 595f3a4c6541 clk: qcom: dispcc-sm8250: use CLK_SET_RATE_PARENT for branch clocks 6be85772b0aa clk: rockchip: fix error for unknown clocks 07b418d50ccb aoe: fix the potential use-after-free problem in more places 2f8f226f4d56 NFSD: Fix NFSv4's PUTPUBFH operation 825789ca9460 nfsd: map the EBADMSG to nfserr_io to avoid warning c5f73b371622 nfsd: fix delegation_blocked() to block correctly for at least 30 seconds fdb6429ae356 perf hist: Update hist symbol when updating maps ddf704c2ce3b exfat: fix memory leak in exfat_load_bitmap() f47b1d5e596a riscv: define ILLEGAL_POINTER_VALUE for 64bit aab0032d416e ext4: mark fc as ineligible using an handle in ext4_xattr_set() b4eff7c777df ext4: use handle to mark fc as ineligible in __track_dentry_update() 4e66fc1d8c2b ext4: fix fast commit inode enqueueing during a full journal commit 13e4a67f9508 ext4: fix incorrect tid assumption in jbd2_journal_shrink_checkpoint_list() 3c1777a490ac ext4: fix incorrect tid assumption in ext4_wait_for_tail_page_commit() a9fcb1717d75 ext4: update orig_path in ext4_find_extent() 32bbb59e3f18 ext4: fix double brelse() the buffer of the extents path 9df59009dfc6 ext4: aovid use-after-free in ext4_ext_insert_extent() a34bed978364 ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free 02cb2cb02aa7 ext4: fix incorrect tid assumption in __jbd2_log_wait_for_space() a11cfe5eed24 ext4: propagate errors from ext4_find_extent() in ext4_insert_range() cafcc1bd6293 ext4: fix slab-use-after-free in ext4_split_extent_at() a1f71afb4f14 ext4: correct encrypted dentry name hash when not casefolded aca593e6070e ext4: no need to continue when the number of entries is 1 c25c05b22a4a ALSA: hda/realtek: Add quirk for Huawei MateBook 13 KLV-WX9 6d62d3ef0844 ALSA: line6: add hw monitor volume control to POD HD500X 5276f42f9aaf ALSA: usb-audio: Add native DSD support for Luxman D-08u cac2df1c0207 ALSA: usb-audio: Add delay quirk for VIVO USB-C HEADSET c82ee0462f60 ALSA: core: add isascii() check to card ID generator 90e8f0bee38d drm: Consistently use struct drm_mode_rect for FB_DAMAGE_CLIPS 2d158286932e parisc: Fix itlb miss handler for 64-bit programs 1905a87cf6f4 perf/core: Fix small negative period being ignored 0c9655647ca9 power: supply: hwmon: Fix missing temp1_max_alarm attribute 5199bc715fb1 spi: bcm63xx: Fix module autoloading 35f7af9ba77e firmware: tegra: bpmp: Drop unused mbox_client_to_bpmp() 438e11739cb3 i2c: xiic: Wait for TX empty to avoid missed TX NAKs b261af5668cd i2c: qcom-geni: Use IRQF_NO_AUTOEN flag in request_irq() 1883cad2cc62 i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume 1973c4d8ee07 platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug b8219d9dd128 selftests: vDSO: fix vdso_config for s390 2d07646df487 selftests: vDSO: fix ELF hash table entry size for s390x 0fc61eef8a46 selftests/mm: fix charge_reserved_hugetlb.sh test 4862f6653c68 selftests: vDSO: fix vDSO symbols lookup for powerpc64 cd7bd2afa30f selftests: vDSO: fix vdso_config for powerpc e6b63652b991 selftests: vDSO: fix vDSO name for powerpc d9663682ec6b selftests: breakpoints: use remaining time to check if suspend succeed ed11dd795817 spi: s3c64xx: fix timeout counters in flush_fifo 0e2d6c17afb4 spi: spi-imx: Fix pm_runtime_set_suspended() with runtime pm enabled 2a07e6f0ad8a usb: typec: tcpm: Check for port partner validity before consuming it 09e829b39b43 blk-integrity: register sysfs attributes on struct device 6356f2d2fc73 blk-integrity: convert to struct device_attribute 71246997b749 blk-integrity: use sysfs_emit ef05572da0c0 ext4: fix i_data_sem unlock order in ext4_ind_migrate() 4999fed877bb ext4: avoid use-after-free in ext4_ext_show_leaf() 69fe6502aba1 ext4: ext4_search_dir should return a proper error ee6b6fa14592 of/irq: Refer to actual buffer size in of_irq_parse_one() 9550d8d6f19f drm/amd/pm: ensure the fw_info is not null before using it c8c095856c1f drm/radeon/r100: Handle unknown family in r100_cp_init_microcode() eb9a4b6fcb1c scsi: aacraid: Rearrange order of struct aac_srb_unit 6aeb160ec5bd drm/printer: Allow NULL data in devcoredump printer 1f9f8186e239 drm/amd/display: Initialize get_bytes_per_element's default to 1 c13f9c62015c drm/amd/display: Fix index out of bounds in DCN30 color transformation c6979719012a drm/amd/display: Fix index out of bounds in degamma hardware format translation de6ee4f9e6b1 drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation 14db8692afe1 drm/amd/display: Check stream before comparing them 0af53bc5d13b platform/x86: touchscreen_dmi: add nanote-next quirk 3217b83e1b80 HID: multitouch: Add support for Thinkpad X12 Gen 2 Kbd Portfolio f38b68a6b31d drm/amdgpu: enable gfxoff quirk on HP 705G4 0000f7b4da60 drm/amdgpu: add raven1 gfxoff quirk d7444f91a9f9 jfs: Fix uninit-value access of new_ea in ea_buffer 48edb1f7c288 scsi: smartpqi: correct stream detection 25d2a3ff02f2 jfs: check if leafidx greater than num leaves per dmap tree e7ae14f7ee76 jfs: Fix uaf in dbFreeBits 89257ecbc0f6 jfs: UBSAN: shift-out-of-bounds in dbFindBits a545a9403e04 drm/amd/display: Check null pointers before using dc->clk_mgr 6a6045adeb59 ata: sata_sil: Rename sil_blacklist to sil_quirks 8ab59527852a drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream 8840dc73ac9e iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count 4a96abcc0a2a iommu/vt-d: Always reserve a domain ID for identity setup d9e19f1b20ee power: reset: brcmstb: Do not go into infinite loop if reset fails f4ff7eb5fa74 iommu/arm-smmu-qcom: hide last LPASS SMMU context bank from linux afb940c929c2 rcuscale: Provide clear error when async specified without primitives 4cda484e584b fbdev: pxafb: Fix possible use after free in pxafb_task() 1af86293f12d x86/syscall: Avoid memcpy() for ia32 syscall_get_arguments() 6c4194f385ce ALSA: hdsp: Break infinite MIDI input flush loop 36ee4021bcc3 ALSA: asihpi: Fix potential OOB array access dacec3a3248f tools/x86/kcpuid: Protect against faulty "max subleaf" values d6a62fcfd494 ALSA: usb-audio: Add logitech Audio profile quirk 8659f67f1e41 ALSA: usb-audio: Define macros for quirk table entries e479cb835fee x86/ioapic: Handle allocation failures gracefully 8af3e93c5a95 ALSA: usb-audio: Add input value sanity checks for standard types 4631445ce633 signal: Replace BUG_ON()s c50c8946e975 nfp: Use IRQF_NO_AUTOEN flag in request_irq() e59bdb1ba594 wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext() 0f722fb45973 wifi: mt76: mt7915: hold dev->mt76.mutex while disabling tx worker 4a55880fa909 proc: add config & param to block forcing mem writes 0a898bec6c22 ACPICA: iasl: handle empty connection_node 34478851da8d tcp: avoid reusing FIN_WAIT2 when trying to find port in connect() process f7a05d5d9987 net: atlantic: Avoid warning about potential string truncation fb55f3d88fe1 ipv4: Mask upper DSCP bits and ECN bits in NETLINK_FIB_LOOKUP family babfc87445bf ipv4: Check !in_dev earlier for ioctl(SIOCSIFADDR). 4fd17b6152a4 net: mvpp2: Increase size of queue_name buffer 54dae0e9063e tipc: guard against string buffer overrun 1c9b8775062f ACPICA: check null return of ACPI_ALLOCATE_ZEROED() in acpi_db_convert_to_package() d6e279a09158 ACPI: EC: Do not release locks during operation region accesses 7df619575dc5 wifi: rtw88: select WANT_DEV_COREDUMP 4dd732893bd3 wifi: ath11k: fix array out-of-bound access in SoC stats a37a6976e475 nvme-pci: qdepth 1 quirk f4ef9bef023d blk_iocost: fix more out of bound shifts d1e08ebca617 net: sched: consistently use rcu_replace_pointer() in taprio_change() 5ee8ee672aa7 ACPICA: Fix memory leak if acpi_ps_get_next_field() fails bcf5c9306707 ACPICA: Fix memory leak if acpi_ps_get_next_namepath() fails 92e5661b7d07 ACPI: PAD: fix crash in exit_round_robin() 1163b7a18d0f net: hisilicon: hns_mdio: fix OF node leak in probe() 36622aa3c48e net: hisilicon: hns_dsaf_mac: fix OF node leak in hns_mac_get_info() 3d055e845339 net: hisilicon: hip04: fix OF node leak in probe() a0465723b858 net/xen-netback: prevent UAF in xenvif_flush_hash() d107d63e6635 ice: Adjust over allocation of memory in ice_sched_add_root_node() and ice_sched_add_node() 012ae530afa0 wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit 08a24438fa13 wifi: ath9k: fix possible integer overflow in ath9k_get_et_stats() 88ff021e1fea f2fs: Require FMODE_WRITE for atomic write ioctls a37b50143d26 ALSA: hda/conexant: Fix conflicting quirk for System76 Pangolin 472b5fc6f8f1 ASoC: imx-card: Set card.owner to avoid a warning calltrace if SND=m e142b12f11cd ALSA: hda/generic: Unconditionally prefer preferred_dacs pairs 6eac1b151d8e ALSA: hda/realtek: Fix the push button function for the ALC257 2bded581f00a ALSA: mixer_oss: Remove some incorrect kfree_const() usages d5ed208d04ac media: usbtv: Remove useless locks in usbtv_video_free() fa593e9cd2b3 i2c: xiic: Try re-initialization on bus busy timeout 5ffff2b57d8f i2c: xiic: improve error message when transfer fails to start 72cb227a368c i2c: xiic: xiic_xfer(): Fix runtime PM leak on error path a50c8564ab82 i2c: xiic: Fix RX IRQ busy check c7ed4ddaa5a2 i2c: xiic: Switch from waitqueue to completion 574d8d0fe424 i2c: xiic: Fix broken locking on tx_msg e7a8442195e8 sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start 176dd41e8c2b ppp: do not assume bh is held in ppp_channel_bridge_input() 97b1f515816d ipv4: ip_gre: Fix drops of small packets in ipgre_xmit 105a292189f6 net: stmmac: dwmac4: extend timeout for VLAN Tag register busy bit check a785cbc8da30 net: stmmac: Disable automatic FCS/Pad stripping e255383aff9f stmmac_pci: Fix underflow size in stmmac_rx 2415f465730e net: add more sanity checks to qdisc_pkt_len_init() 939c88cbdc66 net: avoid potential underflow in qdisc_pkt_len_init() with UFO 469856f76f48 net: ethernet: lantiq_etop: fix memory disclosure 62a4567e3e10 Bluetooth: btmrvl: Use IRQF_NO_AUTOEN flag in request_irq() 38e3fd0c4a26 netfilter: nf_tables: prevent nf_skb_duplicated corruption 3ed462d05807 net: ieee802154: mcr20a: Use IRQF_NO_AUTOEN flag in request_irq() 62ac553b834f netfilter: uapi: NFTA_FLOWTABLE_HOOK is NLA_NESTED 4655456a64a0 net/mlx5e: Fix NULL deref in mlx5e_tir_builder_alloc() 201ce2f738f4 net/mlx5: Added cond_resched() to crdump collection ce828b347cf1 net/mlx5: Fix error path in multi-packet WQE transmit ee57897c7f65 ieee802154: Fix build error f863bfd0a2c6 ceph: remove the incorrect Fw reference check when dirtying pages df293ea78740 mailbox: bcm2835: Fix timeout during suspend mode 6bd8e9effadc mailbox: rockchip: fix a typo in module autoloading bc9356513d56 static_call: Replace pointless WARN_ON() in static_call_module_notify() ed4c8ce0f307 static_call: Handle module init failure correctly in static_call_del_module() 894ac00deb84 spi: lpspi: Simplify some error message 1e0417dc346a usb: yurex: Fix inconsistent locking bug in yurex_read() 84554d42ff53 i2c: isch: Add missed 'else' a2146b6150bc i2c: aspeed: Update the stop sw state when the bus recovery occurs 8ce4b0d44083 mm: only enforce minimum stack gap size if it's sensible e59cd4b1a72d lockdep: fix deadlock issue between lockdep and rcu cc59ee9b8a4c bpf: lsm: Set bpf_lsm_blob_sizes.lbs_task to 0 9186293c610d x86/entry: Remove unwanted instrumentation in common_interrupt() c86f5a9dfd24 x86/idtentry: Incorporate definitions/declarations of the FRED entries 3a69dcccd0ca pps: add an error check in parport_attach ec22387afb26 pps: remove usage of the deprecated ida_simple_xx() API 009a2f6cc031 usb: xhci: fix loss of data on Cadence xHC 112625ec8319 xhci: Add a quirk for writing ERST in high-low order cfe314e969d4 xhci: Preserve RsvdP bits in ERSTBA register correctly d2e4da8704e6 xhci: Refactor interrupter code for initial multi interrupter support. f2ae6fd0c38b xhci: remove xhci_test_trb_in_td_math early development check a646b4e59613 xhci: fix event ring segment table related masks and variables in header 0bf337c41c5b USB: misc: yurex: fix race between read and write 979687509d75 usb: yurex: Replace snprintf() with the safer scnprintf() variant 23c84724aee7 soc: versatile: realview: fix soc_dev leak during device remove 5eae90b24f28 soc: versatile: realview: fix memory leak during device remove 72164d5b6489 padata: use integer wrap around to prevent deadlock on seq_nr overflow c3dfec3c05b6 EDAC/igen6: Fix conversion of system address to physical memory address 62356668d855 nfs: fix memory leak in error path of nfs4_do_reclaim 394584185c76 fs: Fix file_set_fowner LSM hook inconsistencies 3721a6940329 vfs: fix race between evice_inodes() and find_inode()&iput() 3eb0143d9cff arm64: dts: rockchip: Correct the Pinebook Pro battery design capacity 04afbac8c6ac arm64: dts: rockchip: Raise Pinebook Pro's panel backlight PWM frequency beb14f6068c6 hwrng: cctrng - Add missing clk_disable_unprepare in cctrng_resume 07f76feca097 hwrng: bcm2835 - Add missing clk_disable_unprepare in bcm2835_rng_init 8bdb39831bf4 hwrng: mtk - Use devm_pm_runtime_enable dc9a23d3b4ee f2fs: avoid potential int overflow in sanity_check_area_boundary() afb5da22a7fa f2fs: prevent possible int overflow in dir_block_index() 21f055191ea5 debugobjects: Fix conditions in fill_pool() f5056adc042f wifi: mt76: mt7615: check devm_kasprintf() returned value 44f94356e6a4 wifi: rtw88: 8822c: Fix reported RX band width 5ebb243e68c3 perf/x86/intel/pt: Fix sampling synchronization 11690d7e7684 efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption 43f5d026da0b ACPI: resource: Add another DMI match for the TongFang GMxXGxx 0cdfb9178a3b ACPI: sysfs: validate return type of _STR method 90ed958acfd1 drbd: Add NULL check for net_conf to prevent dereference in state validation c9ae82e4871d drbd: Fix atomicity violation in drbd_uuid_set_bm() 3e425c8a48d0 crypto: ccp - Properly unregister /dev/sev on sev PLATFORM_STATUS failure 7ddf551c4d31 xhci: Set quirky xHC PCI hosts to D3 _after_ stopping and freeing them. bfdddc20d270 tty: rp2: Fix reset with non forgiving PCIe host bridges a77fc4acfd49 firmware_loader: Block path traversal 4d6e61d7113a bus: integrator-lm: fix OF node leak in probe() 2682248bdcfb usb: dwc2: drd: fix clock gating on USB role switch ff359dadecb0 usb: cdnsp: Fix incorrect usb_request status 92f9e6c8b993 USB: class: CDC-ACM: fix race between get_serial and set_serial cde120f5870f USB: misc: cypress_cy7c63: check for short transfer 39c22ede7739 USB: appledisplay: close race between probe and completion handler b80aacfea6e8 usbnet: fix cyclical race on disconnect with work queue 75349cb4b00d scsi: mac_scsi: Disallow bus errors during PDMA send aa4d228b1e0a scsi: mac_scsi: Refactor polling loop 3fe6d2a707df scsi: mac_scsi: Revise printk(KERN_DEBUG ...) messages 9113f60bce80 drm/amd/display: Validate backlight caps are sane 458c54c6f947 drm/amd/display: Round calculated vtotal a2c1d68a4ab5 Input: i8042 - add another board name for TUXEDO Stellaris Gen5 AMD line 7874e99b4ebf Input: i8042 - add TUXEDO Stellaris 15 Slim Gen6 AMD to i8042 quirk table 87d6eabb2322 Input: i8042 - add TUXEDO Stellaris 16 Gen5 AMD to i8042 quirk table c3b04fe1bb8e Revert "media: tuners: fix error return code of hybrid_tuner_request_state()" d738f1dc8b48 soc: versatile: integrator: fix OF node leak in probe() error path 49006a92c7c9 ASoC: rt5682: Return devm_of_clk_add_hw_provider to transfer the error 65038f8c6b10 PCI: xilinx-nwl: Fix off-by-one in INTx IRQ handler fdceebc86a5a Remove *.orig pattern from .gitignore fe0cd5379111 selinux,smack: don't bypass permissions check in inode_setsecctx hook a6d810554d7d vfio/pci: fix potential memory leak in vfio_intx_enable() a1630bd15f23 x86/mm: Switch to new Intel CPU model defines 3088bb7aadf6 powercap: RAPL: fix invalid initialization for pl4_supported field 9a4be35d9c53 Input: goodix - use the new soc_intel_is_byt() helper 714426520846 drm/amd/display: Fix Synaptics Cascaded Panamera DSC Determination 5d72a13dcc25 netfilter: ctnetlink: compile ctnetlink_label_size with CONFIG_NF_CONNTRACK_EVENTS 39696868a24a netfilter: nf_tables: Keep deleted flowtable hooks until after RCU c1be35e774f8 bonding: Fix unnecessary warnings and logs from bond_xdp_get_xmit_slave() 0066d4bac5d9 net: qrtr: Update packets cloning when broadcasting 5c4c03288a4a tcp: check skb is non-NULL in tcp_rto_delta_us() a3e83a402a73 net: ipv6: select DST_CACHE from IPV6_RPL_LWTUNNEL 822c7bb1f6f8 net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition fbff87d682e5 netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() d1c98c68d0dd net: xilinx: axienet: Fix packet counting fac3629829ec net: axienet: Switch to 64-bit RX/TX statistics 15d2b2bf096e net: axienet: Use NAPI for TX completion path e09deb71fb91 net: axienet: Be more careful about updating tx_bd_tail 0493a5d80b4b net: axienet: add coalesce timer ethtool configuration 72e135bace88 net: axienet: reduce default RX interrupt threshold to 1 3b4b8afd9083 net: axienet: implement NAPI and GRO receive 635e766e602f net: axienet: don't set IRQ timer when IRQ delay not used 50a2ed164f59 net: axienet: Clean up DMA start/stop and error handling 9384262ad810 net: axienet: Clean up device used for DMA calls 043dc922cd47 Revert "dm: requeue IO if mapping table not yet available" 927a2580208e vhost_vdpa: assign irq bypass producer token correctly 4d10104d987a vdpa: Add eventfd for the vdpa callback b22db5572fcc interconnect: qcom: sm8250: Enable sync_state 4a6e221019e6 coresight: tmc: sg: Do not leak sg_table 01a2e65598a2 iio: adc: ad7606: fix standby gpio state to match the documentation 2abf0fa4f4b2 iio: adc: ad7606: fix oversampling gpio array 7553f7a85cb9 spi: spi-fsl-lpspi: Undo runtime PM changes at driver exit time 00148baf8f53 spi: lpspi: release requested DMA channels 41324fd0a823 spi: lpspi: Silence error message upon deferred probe e8d64f598eeb f2fs: get rid of online repaire on corrupted directory e2d39a5981cf f2fs: clean up w/ dotdot_name 0cab715836db f2fs: introduce F2FS_IPU_HONOR_OPU_WRITE ipu policy de5561be4a68 f2fs: fix to wait page writeback before setting gcing flag 520ff47fc61f f2fs: optimize error handling in redirty_blocks 2e580f42d175 f2fs: reduce expensive checkpoint trigger frequency 500d362dab97 f2fs: remove unneeded check condition in __f2fs_setxattr() 6eacbf58e410 f2fs: fix to update i_ctime in __f2fs_setxattr() 9c58cd07a9f1 f2fs: fix typo b7b7a8df41ef nfsd: return -EINVAL when namelen is 0 9803ab882d56 nfsd: call cache_put if xdr_reserve_space returns NULL 85a84de8e360 ntb_perf: Fix printk format a429158f2e0a ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir() 35c8e66e7952 RDMA/irdma: fix error message in irdma_modify_qp_roce() b11318dc8a1e RDMA/cxgb4: Added NULL check for lookup_atid 208dba182ee6 riscv: Fix fp alignment bug in perf_callchain_user() 16eda7c0ce5c RDMA/hns: Optimize hem allocation performance 3e5a43da4984 RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler 4685b6802258 RDMA/hns: Refactor the abnormal interrupt handler function 254b52a2d7e5 RDMA/hns: Fix the wrong type of return value of the interrupt handler 55f98f48ee17 RDMA/hns: Remove unused abnormal interrupt of type RAS 29c0f546d3fd RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled b79ddb93ec67 RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range() 15bcd2dc26d7 RDMA/hns: Don't modify rq next block addr in HIP09 QPC bd5f76ccc079 watchdog: imx_sc_wdt: Don't disable WDT in suspend 1730d47d1865 IB/core: Fix ib_cache_setup_one error flow cleanup 70ce36ada30b pinctrl: mvebu: Fix devinit_dove_pinctrl_probe function 255527b8d416 pinctrl: mvebu: Use devm_platform_get_and_ioremap_resource() bef565d739cf nfsd: fix refcount leak when file is unhashed after being found 0b5bc6d1f25f nfsd: remove unneeded EEXIST error check in nfsd_do_file_acquire e69b5883ae03 clk: ti: dra7-atl: Fix leak of of_nodes 0429a4e97208 RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds c84af5f5f2ea RDMA/rtrs: Reset hb_missed_cnt after receiving other traffic from peer 8e5612295811 pinctrl: single: fix missing error code in pcs_probe() da0392698c62 RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency 9cf0b13a19c8 PCI: xilinx-nwl: Clean up clock on probe failure/removal 5bbcac07d7e0 PCI: xilinx-nwl: Fix register misspelling dc5aeba07395 PCI: keystone: Fix if-statement expression in ks_pcie_quirk() 86d920d2600c drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error a879b6cdd481 drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error 9a2d7636af44 Input: ilitek_ts_i2c - add report id message validation f448eb55b7ee Input: ilitek_ts_i2c - avoid wrong input subsystem sync 821332430624 clk: rockchip: Set parent rate for DCLK_VOP clock on RK3228 7d214562057d remoteproc: imx_rproc: Initialize workqueue earlier 070d45027c58 remoteproc: imx_rproc: Correct ddr alias for i.MX8M 30efd7590912 clk: imx: imx8qxp: Parent should be initialized earlier than the clock f1046dd07456 clk: imx: imx8qxp: Register dc0_bypass0_clk before disp clk 03b2049e76f9 clk: imx: imx8mp: fix clock tree update of TF-A managed clocks 47a121d9d0bd perf time-utils: Fix 32-bit nsec parsing dcdbb13ef3b4 perf sched timehist: Fixed timestamp error when unable to confirm event sched_in time f73fc46d0816 perf sched timehist: Fix missing free of session in perf_sched__timehist() f666eb1bb8a2 perf mem: Free the allocated sort string, fixing a leak 9dada37c9739 bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit c4f8554996e8 nilfs2: fix potential oob read in nilfs_btree_check_delete() 42d44163d41b nilfs2: determine empty node blocks as corrupted 73d23ecf234b nilfs2: fix potential null-ptr-deref in nilfs_btree_insert() be2e9b111e27 ext4: avoid OOB when system.data xattr changes underneath the filesystem 299d996f1031 ext4: return error on ext4_find_inline_entry bf4cabdf3a86 ext4: avoid negative min_clusters in find_group_orlov() a2037e06b8dc ext4: avoid potential buffer_head leak in __ext4_new_inode() 9b638bcfff8f ext4: avoid buffer_head leak in ext4_mark_inode_used() 86964b59b506 smackfs: Use rcu_assign_pointer() to ensure safe assignment in smk_set_cipso 38c0090658e0 ext4: clear EXT4_GROUP_INFO_WAS_TRIMMED_BIT even mount with discard a75b4f3a3dee kthread: fix task state in kthread worker if being frozen c37bf4ded344 xz: cleanup CRC32 edits from 2018 bfea0441a692 selftests/bpf: Fix C++ compile error from missing _Bool type aa02db40963b selftests/bpf: Fix error compiling test_lru_map.c f40796cda0e6 selftests/bpf: Fix errors compiling cg_storage_multi.h with musl libc bf5988a40e10 selftests/bpf: Fix compiling core_reloc.c with musl-libc e0fcf564cb6c selftests/bpf: Fix compiling tcp_rtt.c with musl-libc a445d939a91c selftests/bpf: Fix compiling flow_dissector.c with musl-libc 9b548bff0206 selftests/bpf: Fix compiling kfree_skb.c with musl-libc 0193a67cfb38 selftests/bpf: Fix missing ARRAY_SIZE() definition in bench.c ea960f62a3c4 selftests/bpf: Fix error compiling bpf_iter_setsockopt.c with musl libc c9a6207a064e selftests/bpf: Fix compile error from rlim_t in sk_storage_map.c ebc4e1f4492d tpm: Clean up TPM space after command failure 07c9cccc4c3f xen/swiotlb: add alignment check for dma buffers ed3e8cc9159a xen: use correct end address of kernel for conflict checking a8906615f7c8 drivers:drm:exynos_drm_gsc:Fix wrong assignment in gsc_bind() 0220a2d7d07f drm/msm: fix %s null argument error 72782ec6f3a1 ipmi: docs: don't advertise deprecated sysfs entries 9963b910411b drm/msm/a5xx: workaround early ring-buffer emptiness check 1058abdcfbbc drm/msm: Drop priv->lastctx d183881468ce drm/msm/a5xx: fix races in preemption evaluation stage b43f548e7593 drm/msm/a5xx: properly clear preemption records on resume 1dae34bd7529 drm/msm/a5xx: disable preemption in submits by default 071e6751e828 drm/msm: Fix incorrect file name output in adreno_request_fw() 18f0b0b16251 powerpc/8xx: Fix kernel vs user address comparison a078336d0c67 powerpc/8xx: Fix initial memory mapping 6f790377ef43 powerpc/32: Remove 'noltlbs' kernel parameter 1c0e359a5bdf powerpc/32: Remove the 'nobats' kernel parameter 46184cbbae1e drm/mediatek: Use spin_lock_irqsave() for CRTC event lock ead825332785 jfs: fix out-of-bounds in dbNextAG() and diAlloc() 16a570f07d87 scsi: elx: libefc: Fix potential use after free in efc_nport_vport_del() 791b3d66d2ef drm/bridge: lontium-lt8912b: Validate mode in drm_bridge_funcs::mode_valid() e8a4a2e45ddf drm/radeon/evergreen_cs: fix int overflow errors in cs track offsets 4d871e3e8dfe drm/rockchip: dw_hdmi: Fix reading EDID when using a forced mode b4cb296e6b89 drm/rockchip: vop: Allow 4096px width scaling 036ab40a0af4 scsi: NCR5380: Check for phase match during PDMA fixup c63e92842790 scsi: NCR5380: Add SCp members to struct NCR5380_cmd b95955dc8b6d drm/radeon: properly handle vbios fake edid sizing 26819a5b69b0 drm/radeon: Replace one-element array with flexible-array member 92734d5e4000 drm/amdgpu: properly handle vbios fake edid sizing a1f0111fcf18 drm/amdgpu: Replace one-element array with flexible-array member 44948d3cb943 drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func 2948bb2951fe drm/stm: Fix an error handling path in stm_drm_platform_probe() 1d43adec2ed3 pmdomain: core: Harden inter-column space in debug summary 962c92e46a52 mtd: powernv: Add check devm_kasprintf() returned value 21d445fd2d6a fbdev: hpfb: Fix an error handling path in hpfb_dio_probe() 5f54a8669ff0 power: supply: max17042_battery: Fix SOC threshold calc w/ no current sense eac72ef92fec power: supply: axp20x_battery: Remove design from min and max voltage bb58bae2fd32 hwmon: (ntc_thermistor) fix module autoloading a2cb89bb9054 mtd: slram: insert break after errors in parsing the map d5c43b103987 hwmon: (max16065) Fix alarm attributes d522354ca1c8 hwmon: (max16065) Remove use of i2c_match_id() 41fe2205aae6 i2c: Add i2c_get_match_data() 302bb15d87ad hwmon: (max16065) Fix overflows seen when writing limits 365384c3f078 m68k: Fix kernel_clone_args.flags in m68k_clone() d681dae5ecdf clocksource/drivers/qcom: Add missing iounmap() on errors in msm_dt_timer_init() 4a60b539f70f reset: k210: fix OF node leak in probe() error path aaeadde77e4b reset: berlin: fix OF node leak in probe() error path dcf11d388fbd ARM: versatile: fix OF node leak in CPUs prepare d8539f136c58 ARM: dts: imx7d-zii-rmu2: fix Ethernet PHY pinctrl property bb55d5e7f0e9 ARM: dts: microchip: sam9x60: Fix rtc/rtt clocks 412a519da455 arm64: dts: renesas: r9a07g044: Correct GICD and GICR sizes db323e084748 spi: ppc4xx: Avoid returning 0 when failed to parse and map IRQ 89008d5e4b2f spi: ppc4xx: handle irq_of_parse_and_map() errors cc4d21d9492d block: fix potential invalid pointer dereference in blk_add_partition a894cf7efda0 block: print symbolic error name instead of error code e0c20d88b7dc block, bfq: don't break merge chain in bfq_split_bfqq() 3883a6873b92 block, bfq: choose the last bfqq from merge chain in bfq_setup_cooperator() 8aa9de02a4be block, bfq: fix possible UAF for bfqq->bic with merge chain 67adffd35dda net: tipc: avoid possible garbage value 1ee3ffd8600a net: ipv6: rpl_iptunnel: Fix memory leak in rpl_input 613dad98a8c8 r8169: disable ALDPS per default for RTL8125 ad0af1890919 net: enetc: Use IRQF_NO_AUTOEN flag in request_irq() 64ad2aac64c8 bareudp: Pull inner IP header on xmit. b293c9d81473 geneve: Fix incorrect inner network header offset when innerprotoinherit is set 446f84d3a74d net: geneve: support IPv4/IPv6 as inner protocol 2099b709b546 bareudp: Pull inner IP header in bareudp_udp_encap_recv(). b614fde13162 Bluetooth: btusb: Fix not handling ZPL/short-transfer 2b3164186e77 can: m_can: m_can_close(): stop clocks after device has been shut down 9550baada4c8 can: bcm: Clear bo->bcm_proc_read after remove_proc_entry(). 984648aac87a sock_map: Add a cond_resched() in sock_hash_free() bf090f4fe935 wifi: wilc1000: fix potential RCU dereference issue in wilc_parse_join_bss_param acb53a716e49 wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop() 439353e50cb9 wifi: cfg80211: fix two more possible UBSAN-detected off-by-one errors 95f2c90b826a wifi: mt76: mt7915: fix rx filter setting for bfee functionality c8d744549f37 wifi: cfg80211: fix UBSAN noise in cfg80211_wext_siwscan() 40fb64257dab x86/sgx: Fix deadlock in SGX NUMA node search b6e1cdf2d625 cpufreq: ti-cpufreq: Introduce quirks to handle syscon fails appropriately 3e2b7c9d5ec8 netfilter: nf_tables: remove annotation to access set timeout while holding lock b5f97550839d netfilter: nf_tables: reject expiration higher than timeout b987e863cfd9 netfilter: nf_tables: reject element expiration with no timeout 616aa2873969 netfilter: nf_tables: elements with timeout below CONFIG_HZ never expire 94e8c988468d ACPI: CPPC: Fix MASK_VAL() usage 895885122cf3 ACPI: bus: Avoid using CPPC if not supported by firmware b48ba8089d26 can: j1939: use correct function name in comment e53934e36549 padata: Honor the caller's alignment in case of chunk_size 0 b48560a5c3c2 wifi: iwlwifi: mvm: increase the time between ranging measurements d5ecaf72fd26 mount: handle OOM on mnt_warn_timestamp_expiry 33e460b424b8 fs/namespace: fnic: Switch to use %ptTd a6e8d2a06368 mount: warn only once about timestamp range expiration b6a9b12e8c72 fs: explicitly unregister per-superblock BDIs 66663a9d672f wifi: rtw88: remove CPT execution branch never used d19865d5f17d net: stmmac: dwmac-loongson: Init ref and PTP clocks rate 43df8109c701 wifi: ath9k: Remove error checks when creating debugfs entries 49d8d8e0190a wifi: ath9k: fix parameter check in ath9k_init_debug() 9dd0cb484cfa ACPI: PMIC: Remove unneeded check in tps68470_pmic_opregion_probe() 435ec96011f5 crypto: xor - fix template benchmarking ceaab3fb64d6 wifi: rtw88: always wait for both firmware loading attempts 7367e0fea5e6 EDAC/synopsys: Fix error injection on Zynq UltraScale+ 12ee2b3a4fe4 EDAC/synopsys: Fix ECC status and IRQ control race condition 7e1cf435de0b EDAC/synopsys: Re-enable the error interrupts on v3 hw 9a9187f364ad EDAC/synopsys: Use the correct register to disable the error interrupt on v3 hw 28ccc0418205 EDAC/synopsys: Add support for version 3 of the Synopsys EDAC DDR 0c927dfc0b9b USB: usbtmc: prevent kernel-usb-infoleak 86b4954483fc USB: serial: pl2303: add device id for Macrosilicon MS3020 9405d778a49a cgroup: Move rcu_head up near the top of cgroup_root c218058f075a gpiolib: cdev: Ignore reconfiguration without direction 4318608dc28e inet: inet_defrag: prevent sk release while still in use c65ab97efcd4 gpio: prevent potential speculation leaks in gpio_device_get_desc() e0f67494957f Revert "wifi: cfg80211: check wiphy mutex is held for wdev mutex" ded5376ee34b netfilter: nf_tables: missing iterator type in lookup walk ce9fef54c5ec netfilter: nft_set_pipapo: walk over current view on netlink dump de77545c72c4 cgroup: Make operations on the cgroup root_list RCU safe c031d286eceb ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry() 5bbe51eaf01a ocfs2: add bounds checking to ocfs2_xattr_find_entry() ad98e04b53bb spi: spidev: Add missing spi_device_id for jg10309-01 4e1b1fceaa1a x86/hyperv: Set X86_FEATURE_TSC_KNOWN_FREQ when Hyper-V provides frequency bba8f3393116 spi: bcm63xx: Enable module autoloading 534f63c5fdcf drm: komeda: Fix an issue related to normalized zpos 82ead539fb8b spi: spidev: Add an entry for elgin,jg10309-01 b77954625a03 ASoC: tda7419: fix module autoloading f2f5918c7347 ASoC: intel: fix module autoloading 6a9e652ecb9a wifi: iwlwifi: clear trans->state earlier upon error 1afed66cb271 wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead a15df5f37fa3 wifi: iwlwifi: mvm: pause TCM when the firmware is stopped 8f03a04b619a wifi: iwlwifi: mvm: fix iwl_mvm_scan_fits() calculation 6f19780d1f7d wifi: iwlwifi: lower message level for FW buffer destination 8e46e6d38e73 net: ftgmac100: Ensure tx descriptor updates are visible 6f8366122015 microblaze: don't treat zero reserved memory regions as error befc2d67f7b8 pinctrl: at91: make it work with current gpiolib e69c0100a461 scsi: lpfc: Fix overflow build issue 04eb0c4957fa ALSA: hda/realtek - FIxed ALC285 headphone no sound fe0401442a39 ALSA: hda/realtek - Fixed ALC256 headphone no sound 2208c2520eb6 ASoC: allow module autoloading for table db1200_pids fb0530025d50 ASoC: meson: axg-card: fix 'use-after-free' 79cce5e81d20 dma-buf: heaps: Fix off-by-one in CMA heap fault handler 16b3e7addd5b soundwire: stream: Revert "soundwire: stream: fix programming slave ports for non-continous port maps" 491f9646f7ac spi: nxp-fspi: fix the KASAN report out-of-bounds bug 38f5db5587c0 net: dpaa: Pad packets to ETH_ZLEN ddc7c423c4a5 netfilter: nft_socket: fix sk refcount leaks e259f8aabbcc net: ftgmac100: Enable TX interrupt to avoid TX timeout 8fa298172438 octeontx2-af: Modify SMQ flush sequence to drop packets e216ded408f8 octeontx2-af: Set XOFF on other child transmit schedulers during SMQ flush 16ff08952830 fou: fix initialization of grc b503f0045f31 net/mlx5: Add missing masks and QoS bit masks for scheduling elements 63991ecfe864 net/mlx5: Add IFC bits and enums for flow meter 0a596903425f net/mlx5: Add support to create match definer 636de1029485 net/mlx5: Explicitly set scheduling element and TSAR type 3f8d4d9bffe7 net/mlx5e: Add missing link modes to ptys2ethtool_map 61964f36349d igb: Always call igb_xdp_ring_update_tail() under Tx lock 25cf67f8ff2f ice: fix accounting for filters shared by multiple VSIs 3f796b4d9527 hwmon: (pmbus) Conditionally clear individual status bits for pmbus rev >= 1.2 7e40afcc6989 hwmon: (pmbus) Introduce and use write_byte_data callback 87bd31cb7e7a selftests/bpf: Support SOCK_STREAM in unix_inet_redir_to_connected() 47c5117ac526 eeprom: digsy_mtc: Fix 93xx46 driver probe failure f7bfeb689041 arm64: dts: rockchip: fix PMIC interrupt pin in pinctrl for ROCK Pi E 8fd28e6beb86 fs/ntfs3: Use kvfree to free memory allocated by kvmalloc 5b2c8b34f6d7 mm: avoid leaving partial pfn mappings around in error case b6e5727d262a net: tighten bad gso csum offset check in virtio_net_hdr 235af50e7cf6 minmax: reduce min/max macro expansion in atomisp driver 73103e803400 arm64: dts: rockchip: override BIOS_DISABLE signal via GPIO hog on RK3399 Puma 3554482f4691 mptcp: pm: Fix uaf in __timer_delete_sync 190b8a6486eb platform/x86: panasonic-laptop: Allocate 1 entry extra in the sinf array b7c2f692307f platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses 3666a2574efa NFS: Avoid unnecessary rescanning of the per-server delegation list e796a3db5768 NFSv4: Fix clearing of layout segments in layoutreturn 2fb6f8948e4d Input: i8042 - add Fujitsu Lifebook E756 to i8042 quirk table 156ea0823d3c drm/msm/adreno: Fix error return if missing firmware-name da69c01768da platform/surface: aggregator_registry: Add support for Surface Laptop Go 3 18576c701e85 scripts: kconfig: merge_config: config files: add a trailing newline 7d91a0b2151a HID: multitouch: Add support for GT7868Q 10c111760128 Input: synaptics - enable SMBus for HP Elitebook 840 G2 39de55eddf73 Input: ads7846 - ratelimit the spi_sync error message f5a73abe62ac btrfs: update target inode's ctime on unlink 00ef1de6d646 powerpc/mm: Fix boot warning with hugepages and CONFIG_DEBUG_VIRTUAL be4e5f5bdc19 net: phy: vitesse: repair vsc73xx autonegotiation 9ef29b75f5f9 net: ethernet: use ip_hdrlen() instead of bit shift d71c5e8cbcf9 usbnet: ipheth: fix carrier detection in modes 1 and 4 df944dc46d06 ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate ff55291fb367 ocfs2: fix null-ptr-deref when journal load failed. f55a33fe0fb5 ocfs2: remove unreasonable unlock in ocfs2_read_blocks 4173d1277c00 ocfs2: cancel dqi_sync_work before freeing oinfo 020f5c53c17f ocfs2: reserve space for inline xattr before attaching reflink tree 077182694e87 ocfs2: fix uninit-value in ocfs2_get_block() ff8875e5f6e9 ocfs2: fix the la space leak when unmounting an ocfs2 volume 44f79667fefd mm: krealloc: consider spare memory for __GFP_ZERO 70fee3689ace jbd2: correctly compare tids with tid_geq function in jbd2_fc_begin_commit ec7f8337c98a jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error e60b0d3b5aa2 drm: omapdrm: Add missing check for alloc_ordered_workqueue 4515773394f9 of/irq: Support #msi-cells=<0> in of_msi_get_domain e18d233efa82 parisc: Fix stack start for ADDR_NO_RANDOMIZE personality cb94678485d7 parisc: Fix 64-bit userspace syscall path 6f0605db50e2 clk: imx: Add check for kcalloc 5b837b9e1543 bpf: Fix the indention issue in grow_stack_state() 42b62697634d cifs: Fix the calling of smb_version_operations::calc_smb_size() b14acf729e9d f2fs: Add inline to f2fs_build_fault_attr() stub 7c317bec311f f2fs: check validation of fault attrs in f2fs_build_fault_attr() 81c12119c23f bpf: Fix accesses to uninit stack slots [ Upstream commit 6b4a64bafd107e521c01eec3453ce94a3fb38529 ] c4fa05422d87 smb: client: fix potential OOB in smb2_dump_detail() 299ef3b5b00b of: module: add buffer overflow check in of_modalias() b8086c3c1548 reiserfs: Avoid touching renamed directory if parent does not change ea091017ef62 ipv6: Fix data races around sk->sk_prot. ff8710da80ee ipv6: annotate some data-races around sk->sk_prot e8c2eafaaa6a tcp: Fix data races around icsk->icsk_af_ops. 8d1bab770956 locking/rwsem: Disable preemption while trying for rwsem lock 7c82dac02886 block, loop: support partitions without scanning 45f504f301d4 bpftool: Fix pretty print dump for maps without BTF loaded 1f24338cb789 jbd2: Drop the merge conflicted hunk e1d0e3c51bde tpm: tis_i2c: Limit write bursts to I2C_SMBUS_BLOCK_MAX (32) bytes 1abe841fe331 tpm: tis_i2c: Limit read bursts to I2C_SMBUS_BLOCK_MAX (32) bytes 6224acfc1d56 tpm: Add flag to use default cancellation policy 1cd19d48fb90 tpm: tis_i2c: Fix sanity check interrupt enable mask a883da132fa8 tpm: Add tpm_tis_i2c backend for tpm_tis_core a742ac8a1c51 tpm: Add tpm_tis_verify_crc to the tpm_tis_phy_ops protocol layer ef495c5f45f2 tpm: Remove read16/read32/write32 calls from tpm_tis_phy_ops 1f3be2e23aa6 gcc-plugins: Reorganize gimple includes for GCC 13 24615a3b932a ata: ahci: fix enum constants for gcc-13 5d6cb145541a net: stmmac: Enable mac_managed_pm phylink config fd93aabb4287 tools/resolve_btfids: Use pkg-config to locate libelf 130f9da78406 tools/resolve_btfids: Build with host flags 00f2f1a782f9 tools/resolve_btfids: Support cross-building the kernel with clang 17776a4ba9c2 tools/resolve_btfids: Install libbpf headers when building 7c9808380d70 libbpf: Make libbpf_version.h non-auto-generated 37ae1ba791ac libbpf: Add LIBBPF_DEPRECATED_SINCE macro for scheduling API deprecations a2667e6d7314 drm/radeon: free iio for atombios when driver shutdown f100c753aa1f powerpc: Fix reschedule bug in KUAP-unlocked user copy da5513f30187 libbpf: Fix build warning on ref_ctr_off 4c5a089621a8 perf python: Account for multiple words in CC 1c5699ee85d4 fs: move S_ISGID stripping into the vfs_*() helpers 838f5d0701d8 fs: add mode_strip_sgid() helper d97172683641 squashfs: provide backing_dev_info in order to disable read-ahead ed037d7be40c irq_work: use kasan_record_aux_stack_noalloc() record callstack 1363bd7dbde3 ixgbevf: add disable link state e5601ae2bd24 ixgbe: add improvement for MDD response functionality caa57cd80575 ixgbe: add the ability for the PF to disable VF link state 16a77bfcc7df Check /dev/console using init_stat() 04574fd5579a tracing/arm: Have max stack tracer handle the case of return address after data 0e51e5717018 gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully 1e6b7da6ddba drivers/base: Fix unsigned comparison to -1 in CPUMAP_FILE_MAX_BYTES 493160901320 mtd_blkdevs: add mtd_table_mutex lock back to blktrans_{open, release} to avoid race condition 04224f725aa3 irqchip/gic-v3-its: Skip HP notifier when no ITS is registered 6f6c2996a81c irqchip/gic-v3-its: Postpone LPI pending table freeing and memreserve 1fa94473423f irqchip/gic-v3-its: Give the percpu rdist struct its own flags field 6013d1ae5feb cert host tools: Stop complaining about deprecated OpenSSL functions efe20512212b init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash a40d2daf2795 pnmtologo: use relocatable file name 3b40d5b41155 of: configfs: remove unused variable overlay_lock 6c085baf1838 tools: use basename to identify file in gen-mach-types 2fca0fd71981 lib/build_OID_registry: fix reproducibility issues 0f586f4ee8ad vt/conmakehash: improve reproducibility a75774679f28 OF: DT-Overlay configfs interface (v8) d179c639b30b x86/boot: Wrap literal addresses in absolute_pointer() 856ec356cf91 ACPI: thermal: drop an always true check 7614af249993 xfs: Fix -Werror=dangling-pointer work-around for older GCC 41470215f97e xfs: Work around GCC 12 -Werror=dangling-pointer for xfs_attr_remote.o 44a445c1922d virtio-pci: Remove wrong address verification in vp_del_vqs() 77aa9e489eaf bpf: Disallow unprivileged bpf by default ebfb1822e9f9 fs/aufs: fixup 5.15.36 fixups 4eba9348d3e2 Revert "Revert "fbdev: Hot-unplug firmware fb devices on forced removal"" 5df6d1b00f95 jbd2: fix use-after-free of transaction_t race 2d83e8196487 jbd2: refactor wait logic for transaction updates into a common function 07a63f760793 netfilter: conntrack: avoid useless indirection during conntrack destruction 4e7122625996 Revert "fbdev: Hot-unplug firmware fb devices on forced removal" 7ba4cb36fd4f rcu: Avoid alloc_pages() when recording stack f78574dee71e kasan: test: silence intentional read overflow warnings d313cb89b6b1 kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC 5e279d5647cc arm64: support page mapping percpu first chunk allocator e5bf16752dca vmalloc: choose a better start address in vm_area_register_early() 660b3d21b46f kasan: test: bypass __alloc_size checks 00aa7573e53a kasan: test: add memcpy test that avoids out-of-bounds write 67becf0b1bd4 kasan: fix tag for large allocations when using CONFIG_SLAB bedf1e033213 workqueue, kasan: avoid alloc_pages() when recording stack 7195b67ce69b kasan: generic: introduce kasan_record_aux_stack_noalloc() bdff763f0e29 kasan: common: provide can_alloc in kasan_save_stack() 51423ebb36ad lib/stackdepot: introduce __stack_depot_save() 85373e66d847 lib/stackdepot: remove unused function argument 5b6cc9b251f3 lib/stackdepot: include gfp.h c9f3902d8069 aufs: reduce overhead for "code present but disabled" use case. b98d189df02c aufs: bugfix, umount passes NULL to ->parse_monolithic() 13b883cbbbd9 aufs standalone: cosmetic, missing copyright sentence 21f8b0d81898 aufs: 5.15.5-20220117 ---> 5.15.5-20220221 6199fd896645 aufs: tiny, headers after fs_context 8ddb40e31c29 aufs: fs_context 7/7, finally remount 69035f71c6fd aufs: fs_context 6/7, now mount bc841b970697 aufs: fs_context 5/7, parse all other mount options 435188053da2 aufs: fs_context 4/7, parse xino options 9af1f1825cbd aufs: fs_context 3/7, parse the branch-management options 1c05eb767f8c aufs: fs_context 2/7, parse "br" mount option a8488f603134 aufs: fs_context 1/7, skelton of the new shceme 8e32e0015564 aufs: pre fs_context, convert a static flag to a macro f90cb4144aec aufs: pre fs_context, support the incomplete sb and sbinfo case 948762ef859c aufs: pre fs_context, convert the type of alloc_sbinfo() 77151a08776b aufs: 5.15.5-20211129 ---> 5.15.5-20220117 2539adbbbe1e aufs: 5.14-20211018 ---> 5.15.5-20211129 7d32b25193c4 aufs: for v5.15-rc1, sync_inode() is gone 66ec0c509225 aufs: for v5.15-rc1, new param 'rcu' for ->get_acl() 69709dc518cd aufs: for v5.15-rc1, no mand-lock anymore ada8fe9543e5 aufs: 5.14-20210906 ---> 5.14-20211018 b77f7f3f394a Revert "aufs: adjust to v5.15 fs changes" 81bdce5b5876 tick/nohz: WARN_ON --> WARN_ON_ONCE to prevent console saturation 97c963889222 sched/isolation: really align nohz_full with rcu_nocbs 871f23ad3627 Revert "ARM: defconfig: Enable ax88796c driver for Exynos boards" ffad0783dd5b ARM: config: multi v7: Regenerate defconifg 5c1e1a1ff2d3 ARM: config: multi v7: Add renamed symbols badaf96564fe ARM: config: multi v7: Clean up enabled by default options 34996040fc9b ARM: config: multi v7: Drop unavailable options 7f685244afb3 powerpc/mm: Switch obsolete dssall to .long 20301aeb1a64 riscv: fix build with binutils 2.38 9df58d070506 powerpc/lib/sstep: fix 'ptesync' build error 720b61fc400b x86_64_defconfig: Fix warnings 02bf23d26bc4 arm64: defconfig: cleanup config options 05914e2c87e5 arm: defconfig: drop unused POWER_AVS option ffb532fa19b9 aufs5: fix build against v5.15.3+ a4b3abf4d96d qemux86: add configuration symbol to select values fee94ee09154 clear_warn_once: add a clear_warn_once= boot parameter 3d8762d900d9 clear_warn_once: bind a timer to written reset value 95faacac47e8 clear_warn_once: expand debugfs to include read support de20c4240018 perf: perf can not parser the backtrace of app in the 32bit system and 64bit kernel. 0e4aacead9c1 perf: x86-32: explicitly include 9ad92c11468e perf: mips64: Convert __u64 to unsigned long long 09e7efe3e68a perf: fix bench numa compilation e79becc44fa6 perf: add SLANG_INC for slang.h b1033b588681 perf: add sgidefs.h to for mips builds cf9db484ac0b perf: change --root to --prefix for python install 7fd052c2c562 perf: add 'libperl not found' warning 27a437cdd469 perf: force include of 3b99d21bec2f fat: don't use obsolete random32 call in namei_vfat a7e9293b506b FAT: Added FAT_NO_83NAME 6fd0e71d9e5c FAT: Add CONFIG_VFAT_NO_CREATE_WITH_LONGNAMES option c379b0d324ae FAT: Add CONFIG_VFAT_FS_NO_DUALNAMES option 538be0fdb124 aufs: adjust to v5.15 fs changes f45da75c8759 aufs5: core 047f57e07e01 aufs5: standalone 029fc15574c8 aufs5: mmap 610d0192ee94 aufs5: base d4e428d0ec5f aufs5: kbuild eb067eca251a yaffs: replace IS_ERR with IS_ERR_OR_NULL to check both ERR and NULL 286af18d0875 yaffs: fix -Wstringop-overread compile warning in yaffs_fix_null_name 24d59a4e26a6 yaffs2: v5.12+ build fixups (not runtime tested) 22c73536d5d7 yaffs: include blkdev.h 506b7251bfb8 yaffs: fix misplaced variable declaration a0e26ff364dc yaffs2: v5.6 build fixups b10b1b2d169e yaffs2: fix memory leak when /proc/yaffs is read ad9adccbb214 yaffs: add strict check when call yaffs_internal_read_super 2e3c3aec8279 yaffs: repair yaffs_get_mtd_device d662538516a7 yaffs: Fix build failure by handling inode i_version with proper atomic API 70a6113ee2c7 yaffs2: fix memory leak in mount/umount 3378e4a9e404 yaffs: Avoid setting any ACL releated xattr ec2284edddef Yaffs:check oob size before auto selecting Yaffs1 c2a49874051c fs: yaffs2: replace CURRENT_TIME by other appropriate apis e9a5105a3e73 yaffs2: adjust to proper location of MS_RDONLY 608807406f13 yaffs2: import git revision b4ce1bb (jan, 2020) 89e660ece42c initramfs: allow an optional wrapper script around initramfs generation b179dbc9aa10 iwlwifi: select MAC80211_LEDS conditionally 3fd5ca3673d0 net/dccp: make it depend on CONFIG_BROKEN (CVE-2020-16119) d1f6edbf0188 arm64/perf: Fix wrong cast that may cause wrong truncation d202fb2caf33 defconfigs: drop obselete options 9a27e3b5f4e7 arm64/perf: fix backtrace for AAPCS with FP enabled e20d8cf019b4 linux-yocto: Handle /bin/awk issues b6d2a3dbbd3a uvesafb: provide option to specify timeout for task completion adb40f1e6a1a uvesafb: print error message when task timeout occurs f280a1ed0962 compiler.h: Undef before redefining __attribute_const__ 4352732f268c vmware: include jiffies.h 7954a677968d Resolve jiffies wrapping about arp 5f28a1035d95 nfs: Allow default io size to be configured. 0d7260ad7106 check console device file on fs when booting 900a12e37e0a mount_root: clarify error messages for when no rootfs found 7b878cbea726 menuconfig,mconf-cfg: Allow specification of ncurses location 6604fc1763b3 modpost: mask trivial warnings 0d294adb09cb kbuild: exclude meta directory from distclean processing a097cdd95a9e powerpc: serialize image targets 5db6ec39a0a3 arm: serialize build targets cbabca27905e crtsavres: fixups for 5.4+ 7fc7656ed403 powerpc/ptrace: Disable array-bounds warning with gcc8 a5faac5a19a2 powerpc: Disable attribute-alias warnings from gcc8 186c54665b67 powerpc: add crtsavres.o to archprepare for kbuild d1ea862964ca powerpc: kexec fix for powerpc64 2ac35b89a0f9 powerpc: Add unwind information for SPE registers of E500 core 2e1c348a28bb mips: vdso: fix 'jalr $t9' crash in vdso code ec57870b303a mips: Kconfig: add QEMUMIPS64 option 6a81b3c08107 4kc cache tlb hazard: tlbp cache coherency 74e3b2a21e54 malta uhci quirks: make allowance for slow 4k(e)c 22e65b63d3b4 arm/Makefile: Fix systemtap b7f1ab59f19e vexpress: Pass LOADADDR to Makefile ce2800c73bf7 arm: ARM EABI socketcall 019d142fd956 ARM: LPAE: Invalidate the TLB for module addresses during translation fault Signed-off-by: Bruce Ashfield Signed-off-by: Steve Sakoman --- .../linux/linux-yocto-rt_5.15.bb | 6 ++--- .../linux/linux-yocto-tiny_5.15.bb | 6 ++--- meta/recipes-kernel/linux/linux-yocto_5.15.bb | 26 +++++++++---------- 3 files changed, 19 insertions(+), 19 deletions(-) diff --git a/meta/recipes-kernel/linux/linux-yocto-rt_5.15.bb b/meta/recipes-kernel/linux/linux-yocto-rt_5.15.bb index ee39aabbac..92c0ff13ad 100644 --- a/meta/recipes-kernel/linux/linux-yocto-rt_5.15.bb +++ b/meta/recipes-kernel/linux/linux-yocto-rt_5.15.bb @@ -11,13 +11,13 @@ python () { raise bb.parse.SkipRecipe("Set PREFERRED_PROVIDER_virtual/kernel to linux-yocto-rt to enable it") } -SRCREV_machine ?= "282f09eae637932615463274dd0c76a862a7c3d8" -SRCREV_meta ?= "150b4c5d88b91e848d757c8cad9d841b91163b75" +SRCREV_machine ?= "c2d5627be67a346327ef3db5cb181b319378819b" +SRCREV_meta ?= "12ed2d0695e6be3eaa055a0fd776d09093397335" SRC_URI = "git://git.yoctoproject.org/linux-yocto.git;branch=${KBRANCH};name=machine \ git://git.yoctoproject.org/yocto-kernel-cache;type=kmeta;name=meta;branch=yocto-5.15;destsuffix=${KMETA}" -LINUX_VERSION ?= "5.15.167" +LINUX_VERSION ?= "5.15.168" LIC_FILES_CHKSUM = "file://COPYING;md5=6bc538ed5bd9a7fc9398086aedcd7e46" diff --git a/meta/recipes-kernel/linux/linux-yocto-tiny_5.15.bb b/meta/recipes-kernel/linux/linux-yocto-tiny_5.15.bb index 7d3a73d109..ff0d482314 100644 --- a/meta/recipes-kernel/linux/linux-yocto-tiny_5.15.bb +++ b/meta/recipes-kernel/linux/linux-yocto-tiny_5.15.bb @@ -5,7 +5,7 @@ KCONFIG_MODE = "--allnoconfig" require recipes-kernel/linux/linux-yocto.inc -LINUX_VERSION ?= "5.15.167" +LINUX_VERSION ?= "5.15.168" LIC_FILES_CHKSUM = "file://COPYING;md5=6bc538ed5bd9a7fc9398086aedcd7e46" DEPENDS += "${@bb.utils.contains('ARCH', 'x86', 'elfutils-native', '', d)}" @@ -14,8 +14,8 @@ DEPENDS += "openssl-native util-linux-native" KMETA = "kernel-meta" KCONF_BSP_AUDIT_LEVEL = "2" -SRCREV_machine ?= "f280216b8c5a4795f402e24a31689a6d492d078e" -SRCREV_meta ?= "150b4c5d88b91e848d757c8cad9d841b91163b75" +SRCREV_machine ?= "a8680c3f127af3ad9c867eb1a41ae69b39f9628c" +SRCREV_meta ?= "12ed2d0695e6be3eaa055a0fd776d09093397335" PV = "${LINUX_VERSION}+git${SRCPV}" diff --git a/meta/recipes-kernel/linux/linux-yocto_5.15.bb b/meta/recipes-kernel/linux/linux-yocto_5.15.bb index 9ac3e8368d..c0e976f45c 100644 --- a/meta/recipes-kernel/linux/linux-yocto_5.15.bb +++ b/meta/recipes-kernel/linux/linux-yocto_5.15.bb @@ -14,24 +14,24 @@ KBRANCH:qemux86 ?= "v5.15/standard/base" KBRANCH:qemux86-64 ?= "v5.15/standard/base" KBRANCH:qemumips64 ?= "v5.15/standard/mti-malta64" -SRCREV_machine:qemuarm ?= "6eac800fa7a11f4de7a74b578efa0bba47360ded" -SRCREV_machine:qemuarm64 ?= "866724b5bb6c32f16adb648e4b251227b711ea07" -SRCREV_machine:qemumips ?= "bbb3f06bae8f8954e6725a75fd693512d91c5f29" -SRCREV_machine:qemuppc ?= "3e7fae8f2bf9a92ae8c0f7036a070c1e6c5da47c" -SRCREV_machine:qemuriscv64 ?= "52f5ff9f0af8d552aa6307143e74659e1e21fe6d" -SRCREV_machine:qemuriscv32 ?= "52f5ff9f0af8d552aa6307143e74659e1e21fe6d" -SRCREV_machine:qemux86 ?= "52f5ff9f0af8d552aa6307143e74659e1e21fe6d" -SRCREV_machine:qemux86-64 ?= "52f5ff9f0af8d552aa6307143e74659e1e21fe6d" -SRCREV_machine:qemumips64 ?= "b8b0a5ddb82108f0cf62676b91a757d233f6fec8" -SRCREV_machine ?= "52f5ff9f0af8d552aa6307143e74659e1e21fe6d" -SRCREV_meta ?= "150b4c5d88b91e848d757c8cad9d841b91163b75" +SRCREV_machine:qemuarm ?= "37475ce625ab568d93acf13a10538ba991e8a6a8" +SRCREV_machine:qemuarm64 ?= "f01353910df23af6b3be9d6a7108234183c682c2" +SRCREV_machine:qemumips ?= "65a9ceffd440c955ced497fc6ffa2d2819e617d5" +SRCREV_machine:qemuppc ?= "49c62f329fc9603c407533587bd5c822f0380e4b" +SRCREV_machine:qemuriscv64 ?= "d918322631e0d79969629d5479b34cde7a38b284" +SRCREV_machine:qemuriscv32 ?= "d918322631e0d79969629d5479b34cde7a38b284" +SRCREV_machine:qemux86 ?= "d918322631e0d79969629d5479b34cde7a38b284" +SRCREV_machine:qemux86-64 ?= "d918322631e0d79969629d5479b34cde7a38b284" +SRCREV_machine:qemumips64 ?= "3ece68fdfb8a074a78d7fe6d4f855d5504a87b60" +SRCREV_machine ?= "d918322631e0d79969629d5479b34cde7a38b284" +SRCREV_meta ?= "12ed2d0695e6be3eaa055a0fd776d09093397335" # set your preferred provider of linux-yocto to 'linux-yocto-upstream', and you'll # get the /base branch, which is pure upstream -stable, and the same # meta SRCREV as the linux-yocto-standard builds. Select your version using the # normal PREFERRED_VERSION settings. BBCLASSEXTEND = "devupstream:target" -SRCREV_machine:class-devupstream ?= "3a5928702e7120f83f703fd566082bfb59f1a57e" +SRCREV_machine:class-devupstream ?= "584a40a22cb9bf5a03135869f11c3106b6200453" PN:class-devupstream = "linux-yocto-upstream" KBRANCH:class-devupstream = "v5.15/base" @@ -39,7 +39,7 @@ SRC_URI = "git://git.yoctoproject.org/linux-yocto.git;name=machine;branch=${KBRA git://git.yoctoproject.org/yocto-kernel-cache;type=kmeta;name=meta;branch=yocto-5.15;destsuffix=${KMETA}" LIC_FILES_CHKSUM = "file://COPYING;md5=6bc538ed5bd9a7fc9398086aedcd7e46" -LINUX_VERSION ?= "5.15.167" +LINUX_VERSION ?= "5.15.168" DEPENDS += "${@bb.utils.contains('ARCH', 'x86', 'elfutils-native', '', d)}" DEPENDS += "openssl-native util-linux-native" From patchwork Tue Jan 7 18:08:32 2025 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Steve Sakoman X-Patchwork-Id: 55157 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id CBF94E7719C for ; Tue, 7 Jan 2025 18:09:13 +0000 (UTC) Received: from mail-pl1-f177.google.com (mail-pl1-f177.google.com [209.85.214.177]) by mx.groups.io with SMTP id smtpd.web10.103.1736273350674485241 for ; Tue, 07 Jan 2025 10:09:10 -0800 Authentication-Results: mx.groups.io; dkim=pass header.i=@sakoman-com.20230601.gappssmtp.com header.s=20230601 header.b=uTWju7t1; spf=softfail (domain: sakoman.com, ip: 209.85.214.177, mailfrom: steve@sakoman.com) Received: by mail-pl1-f177.google.com with SMTP id d9443c01a7336-2161eb94cceso165000645ad.2 for ; Tue, 07 Jan 2025 10:09:10 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sakoman-com.20230601.gappssmtp.com; s=20230601; t=1736273350; x=1736878150; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=OKD3ka97rsxPK1VA4i9uQtUImfZ5rbY7nmthsR5Kby0=; b=uTWju7t19rjdaphdtK+kM8eGkAcPwY+hD8XEYWROU8GK/oyZ2TJ00KoDKgLczIPsDj q1GPvM+a8ouAZVEtMe97HlG8jRNfZ168MYl2Ptf/Crp1yvWDYiCHpRa88zQQG3PkfULQ oNmMHXOvXy36CIGTD/tK0Vl6/b83l4/y0TXV3NhBYt17aX/xYYK6gI91fmR7rlK0uy1x KZxuumErE74e31Yvej+EiVE5pwuMb6flGLOzNMCtGRb7fFiHgcrtd04QvMKRDBIt7GJX ytaXGlpI39G1JPc0j1X/1rx7ObYIfld30lLo4OwHvDjnQuztl3z9HsLSZjcYBOipzIii 8eTA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1736273350; x=1736878150; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=OKD3ka97rsxPK1VA4i9uQtUImfZ5rbY7nmthsR5Kby0=; b=cuqPZQcEK77vSY1uasAFtdM8FpYFic69C8m4uhlU3QlY7cwHje40kaxz63JGj+Y7vd 4vMOTSXzszHVFup41H9VFNUpKqCNCSvW72GcncOYKlHnMR/tmNXAfMxylzEKiqmyJurL r1uwg4j4vRTBxNA2GxalQU8lszb5Q3ULlAbH/LXCinGx87kG47amATsFmr10ixXDyZjp ofNZ351/hh9igPfgQB5Yj9kD/Zu7e7eBHSDXkmO3mFolIojLaj6ZpdPI2dVlT6OWKAqW UBmm5d6HtOZnupETTiRxiS8//Y19fHTYG8RDfQHMYme//Xs8KXtytH38r1dK2V5WejlQ 9VmQ== X-Gm-Message-State: AOJu0Yyz0UspLDaRdipYh1MO7reiivH6ONZKqtYxbI9ZmO5UWpuCRLmE 8GEjTMzTojSlKGcQX9n0YMBrqsG30/YtYhLQMhdqzjQwNUKBO3LaZ4jjq3QfoyAsh6aAzg0Mjg/ G6Qc= X-Gm-Gg: ASbGncuRwP7s+gPmfhE548vmX79lUvuP8A+MEyXAPIFj60UiyVc1EpwYQ4Auxbj6voP yPkGNRU3vN5ryqxSe7NsPiOYKP2aWZITz8e6mCmKXmv+UboN9blJ89i/qKQ1IzZU7sC3we12yP8 JgpW1LTwarxXXWgd1jgJzW2IdSYraxVTMzMmvYEpb/bLG1H6xfWK7xhdXxj7CIQIznXVf0so3sH zt0gFv79ZhVU9n4AR6yt54tDPtbR2MAgEZiuYyZ40BjeA== X-Google-Smtp-Source: AGHT+IGWpfjB17y5DRw1f93XqmdTsLXE7sO3vsQJ3T0UZzxgY2VaVvkkG+6XgDIKi/+gSQdYSNL7Iw== X-Received: by 2002:a17:903:2342:b0:212:1ebf:9a03 with SMTP id d9443c01a7336-21a83f4b0c9mr201665ad.2.1736273349398; Tue, 07 Jan 2025 10:09:09 -0800 (PST) Received: from hexa.. ([98.142.47.158]) by smtp.gmail.com with ESMTPSA id d9443c01a7336-219dc9f4413sm314166335ad.172.2025.01.07.10.09.08 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 07 Jan 2025 10:09:09 -0800 (PST) From: Steve Sakoman To: openembedded-core@lists.openembedded.org Subject: [OE-core][kirkstone 14/19] linux-yocto/5.15: update to v5.15.169 Date: Tue, 7 Jan 2025 10:08:32 -0800 Message-ID: <092d66eca7a7d473b5650818952527f377881136.1736273200.git.steve@sakoman.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Tue, 07 Jan 2025 18:09:13 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/209495 From: Bruce Ashfield Updating linux-yocto/5.15 to the latest korg -stable release that comprises the following commits: 74cdd62cb470 Linux 5.15.169 f74847722133 ALSA: hda/conexant - Use cached pin control for Node 0x1d on HP EliteOne 1000 G2 eb817fe255e1 powerpc/mm: Always update max/min_low_pfn in mem_topology_setup() edf814605726 nilfs2: propagate directory read errors from nilfs_find_entry() 5b88612ea5de mptcp: prevent MPC handshake on port-based signal endpoints 353016364391 mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow 2b1281f9fd01 mptcp: fallback when MPTCP opts are dropped after 1st data 9729010a0ac5 tcp: fix mptcp DSS corruption due to large pmtu xmit 12c1676d598e mptcp: handle consistently DSS corruption 6654efe264b0 mptcp: track and update contiguous data status 755b9532c885 irqchip/gic-v4: Don't allow a VMOVP on a dying VPE 655f5d4662b9 pinctrl: ocelot: fix system hang on level based interrupts b6400eb0b347 x86/entry_32: Clear CPU buffers after register restore in NMI return a6f4701f8dcf x86/entry_32: Do not clobber user EFLAGS.ZF 12dd888f4845 x86/apic: Always explicitly disarm TSC-deadline timer 7861ca27f6bd x86/resctrl: Annotate get_mem_config() functions as __init 440311903231 parport: Proper fix for array out-of-bounds access 88a892071d22 USB: serial: option: add Telit FN920C04 MBIM compositions d062bbc58f85 USB: serial: option: add support for Quectel EG916Q-GL b6ae69ec6002 xhci: Mitigate failed set dequeue pointer commands dca9429c307b xhci: Fix incorrect stream context type macro 7c270acfc8ec Bluetooth: btusb: Fix regression with fake CSR controllers 0a12:0001 04bba4714f26 Bluetooth: Remove debugfs directory on module init failure bb76a6ecf1b9 iio: adc: ti-ads124s08: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig 7db9bcb846d1 iio: proximity: mb1232: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig c202eadbf9cc iio: light: opt3001: add missing full-scale range value 50039aec43a8 iio: light: veml6030: fix IIO device retrieval from embedded device cf95ce2cff8d iio: light: veml6030: fix ALS sensor resolution 3cf71f6f21b2 iio: hid-sensors: Fix an error handling path in _hid_sensor_set_report_latency() 37be5d0d5443 iio: adc: ti-ads8688: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig e209a51ad215 iio: dac: stm32-dac-core: add missing select REGMAP_MMIO in Kconfig 51a9a143448a iio: dac: ltc1660: add missing select REGMAP_SPI in Kconfig 605c0d55dcf7 iio: dac: ad5770r: add missing select REGMAP_SPI in Kconfig 572006a05eaa drm/vmwgfx: Handle surface check failure correctly fda5dc80121b drm/radeon: Fix encoder->possible_clones e8dd801362b3 io_uring/sqpoll: close race on waiting for sqring entries 455a469758e5 blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race 0b263c2086ef x86/bugs: Do not use UNTRAIN_RET with IBPB on entry 0cced32e21ef x86/bugs: Skip RSB fill at VMEXIT e421c6839f69 x86/entry: Have entry_ibpb() invalidate return predictions 1e0398acb650 x86/cpufeatures: Add a IBPB_NO_RET BUG flag 43bdd2ea738e x86/cpufeatures: Define X86_FEATURE_AMD_IBPB_RET dad88f266f30 KVM: s390: Change virtual to physical address access in diag 0x258 handler 41693253973e s390/sclp_vt220: Convert newlines to CRLF instead of LFCR 0bd9a30c22af iommu/vt-d: Fix incorrect pci_for_each_dma_alias() for non-PCI devices 07efbee2214c io_uring/sqpoll: do not put cpumask on stack 939007d2a9fa io_uring/sqpoll: retain test for whether the CPU is valid 592e7864e44c io_uring/sqpoll: do not allow pinning outside of cpuset 3ae63a8c1685 drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE) 82bd728a06e5 KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin() b825e0f9d68c dm-crypt, dm-verity: disable tasklets e8a834eb09bb wifi: mac80211: fix potential key use-after-free d0ae6ffa1aeb secretmem: disable memfd_secret() if arch cannot set direct map e41710f5a61a mm/swapfile: skip HugeTLB pages for unuse_vma cc1102b5473e fat: fix uninitialized variable 1043b6453914 irqchip/gic-v3-its: Fix VSYNC referencing an unmapped VPE on GIC v4.1 c81dcaa9cd0b net: macb: Avoid 20s boot delay by skipping MDIO bus registration for fixed-link PHY 659fae608501 arm64: probes: Fix simulate_ldr*_literal() ad4bc35a6d22 arm64: probes: Remove broken LDR (literal) uprobe support c8789fbe2bbf posix-clock: Fix missing timespec64 check in pc_clock_settime() dcc7207483b2 net: enetc: add missing static descriptor and inline keyword 6430aaaee5b0 net: enetc: remove xdp_drops statistic from enetc_xdp_drop() 9c439311c13f udf: Fix bogus checksum computation in udf_rename() 4a1d95fc9706 udf: Don't return bh from udf_expand_dir_adinicb() dfb34bb97d4b udf: Handle error when expanding directory cb2b0325b76c udf: Remove old directory iteration code 0003d349614d udf: Convert udf_link() to new directory iteration code 25815ac67179 udf: Convert udf_mkdir() to new directory iteration code feeb42a744f2 udf: Convert udf_add_nondir() to new directory iteration f3c2fe1dfcee udf: Implement adding of dir entries using new iteration code 55b445b2fccb udf: Convert udf_unlink() to new directory iteration code 8c32b93e7879 udf: Convert udf_rmdir() to new directory iteration code 6decbe20362e udf: Convert empty_dir() to new directory iteration code dd74f6d3ed6a udf: Convert udf_get_parent() to new directory iteration code 8cd380c6dd90 udf: Convert udf_lookup() to use new directory iteration code 39d52a113ef8 udf: Convert udf_readdir() to new directory iteration 626860c470ff udf: Convert udf_rename() to new directory iteration code e6355892ca87 udf: Provide function to mark entry as deleted using new directory iteration code a48e84cc50e6 udf: Implement searching for directory entry using new iteration code 7add383ba57d udf: Move udf_expand_dir_adinicb() to its callsite 311192441cc8 udf: Convert udf_expand_dir_adinicb() to new directory iteration de268ec62a15 udf: New directory iteration code 46dcafa90dff ALSA: hda/conexant - Fix audio routing for HP EliteOne 1000 G2 6f0605db50e2 clk: imx: Add check for kcalloc 5b837b9e1543 bpf: Fix the indention issue in grow_stack_state() 42b62697634d cifs: Fix the calling of smb_version_operations::calc_smb_size() b14acf729e9d f2fs: Add inline to f2fs_build_fault_attr() stub 7c317bec311f f2fs: check validation of fault attrs in f2fs_build_fault_attr() 81c12119c23f bpf: Fix accesses to uninit stack slots [ Upstream commit 6b4a64bafd107e521c01eec3453ce94a3fb38529 ] c4fa05422d87 smb: client: fix potential OOB in smb2_dump_detail() 299ef3b5b00b of: module: add buffer overflow check in of_modalias() b8086c3c1548 reiserfs: Avoid touching renamed directory if parent does not change ea091017ef62 ipv6: Fix data races around sk->sk_prot. ff8710da80ee ipv6: annotate some data-races around sk->sk_prot e8c2eafaaa6a tcp: Fix data races around icsk->icsk_af_ops. 8d1bab770956 locking/rwsem: Disable preemption while trying for rwsem lock 7c82dac02886 block, loop: support partitions without scanning 45f504f301d4 bpftool: Fix pretty print dump for maps without BTF loaded 1f24338cb789 jbd2: Drop the merge conflicted hunk e1d0e3c51bde tpm: tis_i2c: Limit write bursts to I2C_SMBUS_BLOCK_MAX (32) bytes 1abe841fe331 tpm: tis_i2c: Limit read bursts to I2C_SMBUS_BLOCK_MAX (32) bytes 6224acfc1d56 tpm: Add flag to use default cancellation policy 1cd19d48fb90 tpm: tis_i2c: Fix sanity check interrupt enable mask a883da132fa8 tpm: Add tpm_tis_i2c backend for tpm_tis_core a742ac8a1c51 tpm: Add tpm_tis_verify_crc to the tpm_tis_phy_ops protocol layer ef495c5f45f2 tpm: Remove read16/read32/write32 calls from tpm_tis_phy_ops 1f3be2e23aa6 gcc-plugins: Reorganize gimple includes for GCC 13 24615a3b932a ata: ahci: fix enum constants for gcc-13 5d6cb145541a net: stmmac: Enable mac_managed_pm phylink config fd93aabb4287 tools/resolve_btfids: Use pkg-config to locate libelf 130f9da78406 tools/resolve_btfids: Build with host flags 00f2f1a782f9 tools/resolve_btfids: Support cross-building the kernel with clang 17776a4ba9c2 tools/resolve_btfids: Install libbpf headers when building 7c9808380d70 libbpf: Make libbpf_version.h non-auto-generated 37ae1ba791ac libbpf: Add LIBBPF_DEPRECATED_SINCE macro for scheduling API deprecations a2667e6d7314 drm/radeon: free iio for atombios when driver shutdown f100c753aa1f powerpc: Fix reschedule bug in KUAP-unlocked user copy da5513f30187 libbpf: Fix build warning on ref_ctr_off 4c5a089621a8 perf python: Account for multiple words in CC 1c5699ee85d4 fs: move S_ISGID stripping into the vfs_*() helpers 838f5d0701d8 fs: add mode_strip_sgid() helper d97172683641 squashfs: provide backing_dev_info in order to disable read-ahead ed037d7be40c irq_work: use kasan_record_aux_stack_noalloc() record callstack 1363bd7dbde3 ixgbevf: add disable link state e5601ae2bd24 ixgbe: add improvement for MDD response functionality caa57cd80575 ixgbe: add the ability for the PF to disable VF link state 16a77bfcc7df Check /dev/console using init_stat() 04574fd5579a tracing/arm: Have max stack tracer handle the case of return address after data 0e51e5717018 gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully 1e6b7da6ddba drivers/base: Fix unsigned comparison to -1 in CPUMAP_FILE_MAX_BYTES 493160901320 mtd_blkdevs: add mtd_table_mutex lock back to blktrans_{open, release} to avoid race condition 04224f725aa3 irqchip/gic-v3-its: Skip HP notifier when no ITS is registered 6f6c2996a81c irqchip/gic-v3-its: Postpone LPI pending table freeing and memreserve 1fa94473423f irqchip/gic-v3-its: Give the percpu rdist struct its own flags field 6013d1ae5feb cert host tools: Stop complaining about deprecated OpenSSL functions efe20512212b init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash a40d2daf2795 pnmtologo: use relocatable file name 3b40d5b41155 of: configfs: remove unused variable overlay_lock 6c085baf1838 tools: use basename to identify file in gen-mach-types 2fca0fd71981 lib/build_OID_registry: fix reproducibility issues 0f586f4ee8ad vt/conmakehash: improve reproducibility a75774679f28 OF: DT-Overlay configfs interface (v8) d179c639b30b x86/boot: Wrap literal addresses in absolute_pointer() 856ec356cf91 ACPI: thermal: drop an always true check 7614af249993 xfs: Fix -Werror=dangling-pointer work-around for older GCC 41470215f97e xfs: Work around GCC 12 -Werror=dangling-pointer for xfs_attr_remote.o 44a445c1922d virtio-pci: Remove wrong address verification in vp_del_vqs() 77aa9e489eaf bpf: Disallow unprivileged bpf by default ebfb1822e9f9 fs/aufs: fixup 5.15.36 fixups 4eba9348d3e2 Revert "Revert "fbdev: Hot-unplug firmware fb devices on forced removal"" 5df6d1b00f95 jbd2: fix use-after-free of transaction_t race 2d83e8196487 jbd2: refactor wait logic for transaction updates into a common function 07a63f760793 netfilter: conntrack: avoid useless indirection during conntrack destruction 4e7122625996 Revert "fbdev: Hot-unplug firmware fb devices on forced removal" 7ba4cb36fd4f rcu: Avoid alloc_pages() when recording stack f78574dee71e kasan: test: silence intentional read overflow warnings d313cb89b6b1 kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC 5e279d5647cc arm64: support page mapping percpu first chunk allocator e5bf16752dca vmalloc: choose a better start address in vm_area_register_early() 660b3d21b46f kasan: test: bypass __alloc_size checks 00aa7573e53a kasan: test: add memcpy test that avoids out-of-bounds write 67becf0b1bd4 kasan: fix tag for large allocations when using CONFIG_SLAB bedf1e033213 workqueue, kasan: avoid alloc_pages() when recording stack 7195b67ce69b kasan: generic: introduce kasan_record_aux_stack_noalloc() bdff763f0e29 kasan: common: provide can_alloc in kasan_save_stack() 51423ebb36ad lib/stackdepot: introduce __stack_depot_save() 85373e66d847 lib/stackdepot: remove unused function argument 5b6cc9b251f3 lib/stackdepot: include gfp.h c9f3902d8069 aufs: reduce overhead for "code present but disabled" use case. b98d189df02c aufs: bugfix, umount passes NULL to ->parse_monolithic() 13b883cbbbd9 aufs standalone: cosmetic, missing copyright sentence 21f8b0d81898 aufs: 5.15.5-20220117 ---> 5.15.5-20220221 6199fd896645 aufs: tiny, headers after fs_context 8ddb40e31c29 aufs: fs_context 7/7, finally remount 69035f71c6fd aufs: fs_context 6/7, now mount bc841b970697 aufs: fs_context 5/7, parse all other mount options 435188053da2 aufs: fs_context 4/7, parse xino options 9af1f1825cbd aufs: fs_context 3/7, parse the branch-management options 1c05eb767f8c aufs: fs_context 2/7, parse "br" mount option a8488f603134 aufs: fs_context 1/7, skelton of the new shceme 8e32e0015564 aufs: pre fs_context, convert a static flag to a macro f90cb4144aec aufs: pre fs_context, support the incomplete sb and sbinfo case 948762ef859c aufs: pre fs_context, convert the type of alloc_sbinfo() 77151a08776b aufs: 5.15.5-20211129 ---> 5.15.5-20220117 2539adbbbe1e aufs: 5.14-20211018 ---> 5.15.5-20211129 7d32b25193c4 aufs: for v5.15-rc1, sync_inode() is gone 66ec0c509225 aufs: for v5.15-rc1, new param 'rcu' for ->get_acl() 69709dc518cd aufs: for v5.15-rc1, no mand-lock anymore ada8fe9543e5 aufs: 5.14-20210906 ---> 5.14-20211018 b77f7f3f394a Revert "aufs: adjust to v5.15 fs changes" 81bdce5b5876 tick/nohz: WARN_ON --> WARN_ON_ONCE to prevent console saturation 97c963889222 sched/isolation: really align nohz_full with rcu_nocbs 871f23ad3627 Revert "ARM: defconfig: Enable ax88796c driver for Exynos boards" ffad0783dd5b ARM: config: multi v7: Regenerate defconifg 5c1e1a1ff2d3 ARM: config: multi v7: Add renamed symbols badaf96564fe ARM: config: multi v7: Clean up enabled by default options 34996040fc9b ARM: config: multi v7: Drop unavailable options 7f685244afb3 powerpc/mm: Switch obsolete dssall to .long 20301aeb1a64 riscv: fix build with binutils 2.38 9df58d070506 powerpc/lib/sstep: fix 'ptesync' build error 720b61fc400b x86_64_defconfig: Fix warnings 02bf23d26bc4 arm64: defconfig: cleanup config options 05914e2c87e5 arm: defconfig: drop unused POWER_AVS option ffb532fa19b9 aufs5: fix build against v5.15.3+ a4b3abf4d96d qemux86: add configuration symbol to select values fee94ee09154 clear_warn_once: add a clear_warn_once= boot parameter 3d8762d900d9 clear_warn_once: bind a timer to written reset value 95faacac47e8 clear_warn_once: expand debugfs to include read support de20c4240018 perf: perf can not parser the backtrace of app in the 32bit system and 64bit kernel. 0e4aacead9c1 perf: x86-32: explicitly include 9ad92c11468e perf: mips64: Convert __u64 to unsigned long long 09e7efe3e68a perf: fix bench numa compilation e79becc44fa6 perf: add SLANG_INC for slang.h b1033b588681 perf: add sgidefs.h to for mips builds cf9db484ac0b perf: change --root to --prefix for python install 7fd052c2c562 perf: add 'libperl not found' warning 27a437cdd469 perf: force include of 3b99d21bec2f fat: don't use obsolete random32 call in namei_vfat a7e9293b506b FAT: Added FAT_NO_83NAME 6fd0e71d9e5c FAT: Add CONFIG_VFAT_NO_CREATE_WITH_LONGNAMES option c379b0d324ae FAT: Add CONFIG_VFAT_FS_NO_DUALNAMES option 538be0fdb124 aufs: adjust to v5.15 fs changes f45da75c8759 aufs5: core 047f57e07e01 aufs5: standalone 029fc15574c8 aufs5: mmap 610d0192ee94 aufs5: base d4e428d0ec5f aufs5: kbuild eb067eca251a yaffs: replace IS_ERR with IS_ERR_OR_NULL to check both ERR and NULL 286af18d0875 yaffs: fix -Wstringop-overread compile warning in yaffs_fix_null_name 24d59a4e26a6 yaffs2: v5.12+ build fixups (not runtime tested) 22c73536d5d7 yaffs: include blkdev.h 506b7251bfb8 yaffs: fix misplaced variable declaration a0e26ff364dc yaffs2: v5.6 build fixups b10b1b2d169e yaffs2: fix memory leak when /proc/yaffs is read ad9adccbb214 yaffs: add strict check when call yaffs_internal_read_super 2e3c3aec8279 yaffs: repair yaffs_get_mtd_device d662538516a7 yaffs: Fix build failure by handling inode i_version with proper atomic API 70a6113ee2c7 yaffs2: fix memory leak in mount/umount 3378e4a9e404 yaffs: Avoid setting any ACL releated xattr ec2284edddef Yaffs:check oob size before auto selecting Yaffs1 c2a49874051c fs: yaffs2: replace CURRENT_TIME by other appropriate apis e9a5105a3e73 yaffs2: adjust to proper location of MS_RDONLY 608807406f13 yaffs2: import git revision b4ce1bb (jan, 2020) 89e660ece42c initramfs: allow an optional wrapper script around initramfs generation b179dbc9aa10 iwlwifi: select MAC80211_LEDS conditionally 3fd5ca3673d0 net/dccp: make it depend on CONFIG_BROKEN (CVE-2020-16119) d1f6edbf0188 arm64/perf: Fix wrong cast that may cause wrong truncation d202fb2caf33 defconfigs: drop obselete options 9a27e3b5f4e7 arm64/perf: fix backtrace for AAPCS with FP enabled e20d8cf019b4 linux-yocto: Handle /bin/awk issues b6d2a3dbbd3a uvesafb: provide option to specify timeout for task completion adb40f1e6a1a uvesafb: print error message when task timeout occurs f280a1ed0962 compiler.h: Undef before redefining __attribute_const__ 4352732f268c vmware: include jiffies.h 7954a677968d Resolve jiffies wrapping about arp 5f28a1035d95 nfs: Allow default io size to be configured. 0d7260ad7106 check console device file on fs when booting 900a12e37e0a mount_root: clarify error messages for when no rootfs found 7b878cbea726 menuconfig,mconf-cfg: Allow specification of ncurses location 6604fc1763b3 modpost: mask trivial warnings 0d294adb09cb kbuild: exclude meta directory from distclean processing a097cdd95a9e powerpc: serialize image targets 5db6ec39a0a3 arm: serialize build targets cbabca27905e crtsavres: fixups for 5.4+ 7fc7656ed403 powerpc/ptrace: Disable array-bounds warning with gcc8 a5faac5a19a2 powerpc: Disable attribute-alias warnings from gcc8 186c54665b67 powerpc: add crtsavres.o to archprepare for kbuild d1ea862964ca powerpc: kexec fix for powerpc64 2ac35b89a0f9 powerpc: Add unwind information for SPE registers of E500 core 2e1c348a28bb mips: vdso: fix 'jalr $t9' crash in vdso code ec57870b303a mips: Kconfig: add QEMUMIPS64 option 6a81b3c08107 4kc cache tlb hazard: tlbp cache coherency 74e3b2a21e54 malta uhci quirks: make allowance for slow 4k(e)c 22e65b63d3b4 arm/Makefile: Fix systemtap b7f1ab59f19e vexpress: Pass LOADADDR to Makefile ce2800c73bf7 arm: ARM EABI socketcall 019d142fd956 ARM: LPAE: Invalidate the TLB for module addresses during translation fault Signed-off-by: Bruce Ashfield Signed-off-by: Steve Sakoman --- .../linux/linux-yocto-rt_5.15.bb | 6 ++--- .../linux/linux-yocto-tiny_5.15.bb | 6 ++--- meta/recipes-kernel/linux/linux-yocto_5.15.bb | 26 +++++++++---------- 3 files changed, 19 insertions(+), 19 deletions(-) diff --git a/meta/recipes-kernel/linux/linux-yocto-rt_5.15.bb b/meta/recipes-kernel/linux/linux-yocto-rt_5.15.bb index 92c0ff13ad..33c0f370b8 100644 --- a/meta/recipes-kernel/linux/linux-yocto-rt_5.15.bb +++ b/meta/recipes-kernel/linux/linux-yocto-rt_5.15.bb @@ -11,13 +11,13 @@ python () { raise bb.parse.SkipRecipe("Set PREFERRED_PROVIDER_virtual/kernel to linux-yocto-rt to enable it") } -SRCREV_machine ?= "c2d5627be67a346327ef3db5cb181b319378819b" -SRCREV_meta ?= "12ed2d0695e6be3eaa055a0fd776d09093397335" +SRCREV_machine ?= "dd3566c7afbdb325c7ba6e56c0eb525fcc7bc15c" +SRCREV_meta ?= "b4c09f5abf1e9649877da3f82eeb4bde6185fe3a" SRC_URI = "git://git.yoctoproject.org/linux-yocto.git;branch=${KBRANCH};name=machine \ git://git.yoctoproject.org/yocto-kernel-cache;type=kmeta;name=meta;branch=yocto-5.15;destsuffix=${KMETA}" -LINUX_VERSION ?= "5.15.168" +LINUX_VERSION ?= "5.15.169" LIC_FILES_CHKSUM = "file://COPYING;md5=6bc538ed5bd9a7fc9398086aedcd7e46" diff --git a/meta/recipes-kernel/linux/linux-yocto-tiny_5.15.bb b/meta/recipes-kernel/linux/linux-yocto-tiny_5.15.bb index ff0d482314..b0e2166303 100644 --- a/meta/recipes-kernel/linux/linux-yocto-tiny_5.15.bb +++ b/meta/recipes-kernel/linux/linux-yocto-tiny_5.15.bb @@ -5,7 +5,7 @@ KCONFIG_MODE = "--allnoconfig" require recipes-kernel/linux/linux-yocto.inc -LINUX_VERSION ?= "5.15.168" +LINUX_VERSION ?= "5.15.169" LIC_FILES_CHKSUM = "file://COPYING;md5=6bc538ed5bd9a7fc9398086aedcd7e46" DEPENDS += "${@bb.utils.contains('ARCH', 'x86', 'elfutils-native', '', d)}" @@ -14,8 +14,8 @@ DEPENDS += "openssl-native util-linux-native" KMETA = "kernel-meta" KCONF_BSP_AUDIT_LEVEL = "2" -SRCREV_machine ?= "a8680c3f127af3ad9c867eb1a41ae69b39f9628c" -SRCREV_meta ?= "12ed2d0695e6be3eaa055a0fd776d09093397335" +SRCREV_machine ?= "10a43570e7f45db6a1b55e2fd27eaab50311b5de" +SRCREV_meta ?= "b4c09f5abf1e9649877da3f82eeb4bde6185fe3a" PV = "${LINUX_VERSION}+git${SRCPV}" diff --git a/meta/recipes-kernel/linux/linux-yocto_5.15.bb b/meta/recipes-kernel/linux/linux-yocto_5.15.bb index c0e976f45c..5d65cc54d5 100644 --- a/meta/recipes-kernel/linux/linux-yocto_5.15.bb +++ b/meta/recipes-kernel/linux/linux-yocto_5.15.bb @@ -14,24 +14,24 @@ KBRANCH:qemux86 ?= "v5.15/standard/base" KBRANCH:qemux86-64 ?= "v5.15/standard/base" KBRANCH:qemumips64 ?= "v5.15/standard/mti-malta64" -SRCREV_machine:qemuarm ?= "37475ce625ab568d93acf13a10538ba991e8a6a8" -SRCREV_machine:qemuarm64 ?= "f01353910df23af6b3be9d6a7108234183c682c2" -SRCREV_machine:qemumips ?= "65a9ceffd440c955ced497fc6ffa2d2819e617d5" -SRCREV_machine:qemuppc ?= "49c62f329fc9603c407533587bd5c822f0380e4b" -SRCREV_machine:qemuriscv64 ?= "d918322631e0d79969629d5479b34cde7a38b284" -SRCREV_machine:qemuriscv32 ?= "d918322631e0d79969629d5479b34cde7a38b284" -SRCREV_machine:qemux86 ?= "d918322631e0d79969629d5479b34cde7a38b284" -SRCREV_machine:qemux86-64 ?= "d918322631e0d79969629d5479b34cde7a38b284" -SRCREV_machine:qemumips64 ?= "3ece68fdfb8a074a78d7fe6d4f855d5504a87b60" -SRCREV_machine ?= "d918322631e0d79969629d5479b34cde7a38b284" -SRCREV_meta ?= "12ed2d0695e6be3eaa055a0fd776d09093397335" +SRCREV_machine:qemuarm ?= "a472fcdac80b8eb15a87a9d712117fe2f04869f7" +SRCREV_machine:qemuarm64 ?= "b83b88fa0e5648e98e16a831391445d6bdd01f0d" +SRCREV_machine:qemumips ?= "d4729075919ae27ec8e67d770419a1fb944a02dd" +SRCREV_machine:qemuppc ?= "65d972cfcaa4e97be8ab1a0895a0f72865bb57b7" +SRCREV_machine:qemuriscv64 ?= "46b573689f8e5146ae5e17702497b8e6e43950c7" +SRCREV_machine:qemuriscv32 ?= "46b573689f8e5146ae5e17702497b8e6e43950c7" +SRCREV_machine:qemux86 ?= "46b573689f8e5146ae5e17702497b8e6e43950c7" +SRCREV_machine:qemux86-64 ?= "46b573689f8e5146ae5e17702497b8e6e43950c7" +SRCREV_machine:qemumips64 ?= "9e2f401868a1af4f4e8d6bd8feb9e49e6405dec1" +SRCREV_machine ?= "46b573689f8e5146ae5e17702497b8e6e43950c7" +SRCREV_meta ?= "b4c09f5abf1e9649877da3f82eeb4bde6185fe3a" # set your preferred provider of linux-yocto to 'linux-yocto-upstream', and you'll # get the /base branch, which is pure upstream -stable, and the same # meta SRCREV as the linux-yocto-standard builds. Select your version using the # normal PREFERRED_VERSION settings. BBCLASSEXTEND = "devupstream:target" -SRCREV_machine:class-devupstream ?= "584a40a22cb9bf5a03135869f11c3106b6200453" +SRCREV_machine:class-devupstream ?= "74cdd62cb4706515b454ce5bacb73b566c1d1bcf" PN:class-devupstream = "linux-yocto-upstream" KBRANCH:class-devupstream = "v5.15/base" @@ -39,7 +39,7 @@ SRC_URI = "git://git.yoctoproject.org/linux-yocto.git;name=machine;branch=${KBRA git://git.yoctoproject.org/yocto-kernel-cache;type=kmeta;name=meta;branch=yocto-5.15;destsuffix=${KMETA}" LIC_FILES_CHKSUM = "file://COPYING;md5=6bc538ed5bd9a7fc9398086aedcd7e46" -LINUX_VERSION ?= "5.15.168" +LINUX_VERSION ?= "5.15.169" DEPENDS += "${@bb.utils.contains('ARCH', 'x86', 'elfutils-native', '', d)}" DEPENDS += "openssl-native util-linux-native" From patchwork Tue Jan 7 18:08:33 2025 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Steve Sakoman X-Patchwork-Id: 55155 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id A9276E77197 for ; Tue, 7 Jan 2025 18:09:13 +0000 (UTC) Received: from mail-pl1-f177.google.com (mail-pl1-f177.google.com [209.85.214.177]) by mx.groups.io with SMTP id smtpd.web11.119.1736273352136330594 for ; Tue, 07 Jan 2025 10:09:12 -0800 Authentication-Results: mx.groups.io; dkim=pass header.i=@sakoman-com.20230601.gappssmtp.com header.s=20230601 header.b=KIXOSEe9; spf=softfail (domain: sakoman.com, ip: 209.85.214.177, mailfrom: steve@sakoman.com) Received: by mail-pl1-f177.google.com with SMTP id d9443c01a7336-216426b0865so228637615ad.0 for ; Tue, 07 Jan 2025 10:09:12 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sakoman-com.20230601.gappssmtp.com; s=20230601; t=1736273351; x=1736878151; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=l8eVNPtj+4r1Zr6Ph95VI5v2QkS8+LAn6dh2mPd18Q8=; b=KIXOSEe99S0nzpEFoZ9s1SxRZV7A5vOwJj1+Cmp6vxjHU0fRFzfdqCCeGmw4+4toUt a5eHZ9SAVnWAKqhhxD9JhY5qge7sGOvE4+q+gcXZBcwbusNTGEe3djZIuPzLCJ7+itEd W0ny+0cQwKp2oxruCkB5PrsB+lz2DVOk8owGqFGTmQdZk6QRIlvPsbYI8s2eY9nn4YDz CYycgNy89LUM+ECeBAhPyxH2VXfqTXgEV2TxTofukEgChmSW5z5w4ZPKZYQ+IPmdZhO8 8JUBmKnEn6HRet9m+pVk1njLqdyLtuwqoBmMiPdCzo+getqxqlTnOHnbJHcGlkJAinJe 5seA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1736273351; x=1736878151; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=l8eVNPtj+4r1Zr6Ph95VI5v2QkS8+LAn6dh2mPd18Q8=; b=fbjMCiE7nuU9VIJ3aKE1uHd/tfpxjTskaYwtRjTvLipdd6vANnbt1+sFJQLvEdIDP9 tq6/534ccAG0f9ZfKsL5zsDP0c++NwX+3nawnTbIfMWpDGMOv05KytK2rKYeZfeISp/O 79XRksMAtrYS8VGklhPgMbTcecdKASxAy+KOJxExPmFkjjgdv337G7by9LKqtSXsGkOs l0ukiZEGk86AaWZLzWMNqa7Bi0wTSURtBGDmo+E3xW5/moSLKhSgZ/va/Enikh2YecQl Jknw3J8iUuScs4yVdOnekNi/U5hJnOKMsqsxZfGeBt3PJpg57Pm3LE59k2R4qV3SFU85 oofA== X-Gm-Message-State: AOJu0YyOoXw1eSYoj/1NzhvjzLqkCT9pBwNyKf3ndFJ4iXurK55R3u+i rhHKuooESAYF/6bUY9ekFeTmNfzWY4LNzkIYB6sZq48MT0A57UEQyNWKEVEfi2kWE/0YOC8oKkY 6tYM= X-Gm-Gg: ASbGncvSmLwAL+WuzAAqfvJajngS6nuWvedqMCqO+pKUan6zOkgPk6zqGquHY6xqTSC 7C4VdMPMj0M1NEMx/4WeolxdDHNNBunynwIBqYxgQFLpI3ptE67Yu39A893s/9rnQSw0dwFwuyD DufaI1m8cI5SMP1Z/mpIZT2uUPP5b1MJ+ifcR89RR6D3fqdey+mjfBSerXkROTTlYW+rbu+zQGp s1C7WcdIJ3FgY5j4hKc+FzVS1LIMwsDtwmL0UwUTWvdPA== X-Google-Smtp-Source: AGHT+IFPsHN37wCQxtTfTcCPNKxUIvsygK8pYnBfQ6QOMB4JlohqwTpl+M9+fNQLJi1IilsX8Rb9Hw== X-Received: by 2002:a17:903:2287:b0:215:5240:bb3d with SMTP id d9443c01a7336-219e6f144a4mr1008921045ad.42.1736273350949; Tue, 07 Jan 2025 10:09:10 -0800 (PST) Received: from hexa.. ([98.142.47.158]) by smtp.gmail.com with ESMTPSA id d9443c01a7336-219dc9f4413sm314166335ad.172.2025.01.07.10.09.10 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 07 Jan 2025 10:09:10 -0800 (PST) From: Steve Sakoman To: openembedded-core@lists.openembedded.org Subject: [OE-core][kirkstone 15/19] linux-yocto/5.15: update to v5.15.170 Date: Tue, 7 Jan 2025 10:08:33 -0800 Message-ID: X-Mailer: git-send-email 2.43.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Tue, 07 Jan 2025 18:09:13 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/209496 From: Bruce Ashfield Updating linux-yocto/5.15 to the latest korg -stable release that comprises the following commits: 72244eab0dad8 Linux 5.15.170 2d08a6c31c65f xfrm: validate new SA's prefixlen using SA family when sel.family is unset a8e691fe1894c ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe() b5cd035ebb9b7 net: phy: dp83822: Fix reset pin definitions 399927f0f875b serial: protect uart_port_dtr_rts() in uart_shutdown() too fcfc61f63fbe9 selinux: improve error checking in sel_write_load() b7a396f76ada2 hv_netvsc: Fix VF namespace also in synthetic NIC NETDEV_REGISTER event 610d4cea9b442 xfrm: fix one more kernel-infoleak in algo dumping 385e2f3e0d83d ALSA: hda/realtek: Add subwoofer quirk for Acer Predator G9-593 58cb697d80e66 KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory dc39799f0cc2f openat2: explicitly return -E2BIG for (usize > PAGE_SIZE) 822203f6355f4 nilfs2: fix kernel bug due to missing clearing of buffer delay flag 681c99175bb87 ACPI: button: Add DMI quirk for Samsung Galaxy Book2 to fix initial lid detection issue c5a3aaa377134 ACPI: resource: Add LG 16T90SP to irq1_level_low_skip_override[] 6032287747f87 drm/amd: Guard against bad data for ATIF ACPI method df75b21af7920 btrfs: zoned: fix zone unusable accounting for freed reserved extent 6c6774cd760df ALSA: hda/realtek: Update default depop procedure 7d4eb9e22131e ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size() b4007d5fe3862 bpf,perf: Fix perf_event_detach_bpf_prog error handling e56e0ec1b79f5 posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime() b96eff3d83408 r8169: avoid unsolicited interrupts 999612996df28 net: sched: fix use-after-free in taprio_change() cc1c98da1338d net: usb: usbnet: fix name regression c9a0aed519771 net: wwan: fix global oob in wwan_rtnl_policy 90baa455aa7e0 netfilter: xtables: fix typo causing some targets not to load on IPv6 7dbd5b9ff0676 net: dsa: mv88e6xxx: Fix error when setting port policy on mv88e6393x 38eb596656434 net: plip: fix break; causing plip to never transmit 919ab6e237028 be2net: fix potential memory leak in be_xmit() 9c6ce55e6f0bd net/sun3_82586: fix potential memory leak in sun3_82586_send_packet() 45cb99c5b95eb xfrm: respect ip protocols rules criteria when performing dst lookups 253843ec0c0a4 xfrm: extract dst lookup parameters into a struct b86b0d6eea204 tracing: Consider the NULL character when validating the event length cdf3ab1cf811c jfs: Fix sanity check in dbMount f9e6e1f00fcd1 platform/x86: dell-sysman: add support for alienware products 4b520c11d0f3d ASoC: qcom: sm8250: add qrb4210-rb2-sndcard compatible string 0e13fe4298a35 arm64/uprobes: change the uprobe_opcode_t typedef to fix the sparse warning e1ce098ea047c platform/x86: dell-wmi: Ignore suspend notifications 4fc0d8660e391 udf: fix uninit-value use in udf_get_fileshortad f952a33478b7e arm64: Force position-independent veneers 11db74f6a293a ASoC: fsl_sai: Enable 'FIFO continue on error' FCONT bit 0bb2cb789349b ASoC: codecs: lpass-rx-macro: add missing CDC_RX_BCL_VBAT_RF_PROC2 to default regs values 34a422274b693 drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA b723f96407a0a exec: don't WARN for racy path_noexec check dd5db4078d120 block, bfq: fix procress reference leakage for bfqq in merge chain 073530898ebf4 usb: dwc3: core: Fix system suspend on TI AM62 platforms 81213d2058ec8 XHCI: Separate PORT and CAPs macros into dedicated file c3f3926854b12 usb: gadget: Add function wakeup support 6a5de8753c70d KVM: s390: gaccess: Check if guest address is in memslot cbb31278711d5 KVM: s390: gaccess: Cleanup access to guest pages 567e7bcb10ccc KVM: s390: gaccess: Refactor access address range check 1f1c1ccdcb50e KVM: s390: gaccess: Refactor gpa and length calculation cf60d19d40184 arm64: probes: Fix uprobes for big-endian kernels acfb32d42a31d arm64:uprobe fix the uprobe SWBP_INSN in big-endian fa58e23ea1359 Bluetooth: bnep: fix wild-memory-access in proto_unregister 42d83e5fed3e1 s390: Initialize psw mask in perf_arch_fetch_caller_regs() 8747440605689 usb: typec: altmode should keep reference to parent e07d05b7f5ad9 smb: client: fix OOBs when building SMB2_IOCTL request 39e02fa903232 scsi: target: core: Fix null-ptr-deref in target_alloc_device() 03ca631c07f34 genetlink: hold RCU in genlmsg_mcast() 8459d61fbf249 tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). 5febfc5453898 net: systemport: fix potential memory leak in bcm_sysport_xmit() 9e006c176f84f net: xilinx: axienet: fix potential memory leak in axienet_start_xmit() 2311451931755 net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid 1eaa58198c646 net: ethernet: aeroflex: fix potential memory leak in greth_start_xmit_gbit() 09839c24769fe macsec: don't increment counters for an unrelated SA 75df8b53800ce octeontx2-af: Fix potential integer overflows on integer shifts 213d1ff6c4917 net: usb: usbnet: fix race in probe failure b340df7458673 drm/msm: Allocate memory for disp snapshot with kvzalloc() 42cf045086fea drm/msm: Avoid NULL dereference in msm_disp_state_print_regs() d125fbf1e128d drm/msm/dsi: fix 32-bit signed integer extension in pclk_rate calculation de5857fa7bcc9 RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages e810e6d464039 RDMA/bnxt_re: Return more meaningful error ca83bc311ab04 ipv4: give an IPv4 dev to blackhole_netdev 6a0c627cd76ea RDMA/irdma: Fix misspelling of "accept*" 2e78ecb1220a0 RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP 4e19aca8db696 ALSA: hda/cs8409: Fix possible NULL dereference 208d3edea1106 ARM: dts: bcm2837-rpi-cm3-io3: Fix HDMI hpd-gpio pin e8143c0699320 x86/resctrl: Avoid overflow in MB settings in bw_validate() 322a19baaaa25 RDMA/bnxt_re: Add a check for memory allocation 0a2430b146d67 RDMA/bnxt_re: Fix incorrect AVID type in WQE structure fe068afb86866 bpf: devmap: provide rxq after redirect 4e1e428533845 bpf: Make sure internal and UAPI bpf_redirect flags don't overlap 6f0605db50e2c clk: imx: Add check for kcalloc 5b837b9e1543e bpf: Fix the indention issue in grow_stack_state() 42b62697634d1 cifs: Fix the calling of smb_version_operations::calc_smb_size() b14acf729e9dc f2fs: Add inline to f2fs_build_fault_attr() stub 7c317bec311f8 f2fs: check validation of fault attrs in f2fs_build_fault_attr() 81c12119c23f8 bpf: Fix accesses to uninit stack slots [ Upstream commit 6b4a64bafd107e521c01eec3453ce94a3fb38529 ] c4fa05422d87c smb: client: fix potential OOB in smb2_dump_detail() 299ef3b5b00bf of: module: add buffer overflow check in of_modalias() b8086c3c1548b reiserfs: Avoid touching renamed directory if parent does not change ea091017ef62c ipv6: Fix data races around sk->sk_prot. ff8710da80ee6 ipv6: annotate some data-races around sk->sk_prot e8c2eafaaa6ac tcp: Fix data races around icsk->icsk_af_ops. 8d1bab7709564 locking/rwsem: Disable preemption while trying for rwsem lock 7c82dac028864 block, loop: support partitions without scanning 45f504f301d41 bpftool: Fix pretty print dump for maps without BTF loaded 1f24338cb789e jbd2: Drop the merge conflicted hunk e1d0e3c51bde6 tpm: tis_i2c: Limit write bursts to I2C_SMBUS_BLOCK_MAX (32) bytes 1abe841fe331a tpm: tis_i2c: Limit read bursts to I2C_SMBUS_BLOCK_MAX (32) bytes 6224acfc1d56b tpm: Add flag to use default cancellation policy 1cd19d48fb909 tpm: tis_i2c: Fix sanity check interrupt enable mask a883da132fa82 tpm: Add tpm_tis_i2c backend for tpm_tis_core a742ac8a1c511 tpm: Add tpm_tis_verify_crc to the tpm_tis_phy_ops protocol layer ef495c5f45f2e tpm: Remove read16/read32/write32 calls from tpm_tis_phy_ops 1f3be2e23aa6d gcc-plugins: Reorganize gimple includes for GCC 13 24615a3b932aa ata: ahci: fix enum constants for gcc-13 5d6cb145541aa net: stmmac: Enable mac_managed_pm phylink config fd93aabb42872 tools/resolve_btfids: Use pkg-config to locate libelf 130f9da784063 tools/resolve_btfids: Build with host flags 00f2f1a782f9b tools/resolve_btfids: Support cross-building the kernel with clang 17776a4ba9c20 tools/resolve_btfids: Install libbpf headers when building 7c9808380d70c libbpf: Make libbpf_version.h non-auto-generated 37ae1ba791ac7 libbpf: Add LIBBPF_DEPRECATED_SINCE macro for scheduling API deprecations a2667e6d7314d drm/radeon: free iio for atombios when driver shutdown f100c753aa1f9 powerpc: Fix reschedule bug in KUAP-unlocked user copy da5513f301871 libbpf: Fix build warning on ref_ctr_off 4c5a089621a8f perf python: Account for multiple words in CC 1c5699ee85d4f fs: move S_ISGID stripping into the vfs_*() helpers 838f5d0701d89 fs: add mode_strip_sgid() helper d971726836412 squashfs: provide backing_dev_info in order to disable read-ahead ed037d7be40c3 irq_work: use kasan_record_aux_stack_noalloc() record callstack 1363bd7dbde39 ixgbevf: add disable link state e5601ae2bd249 ixgbe: add improvement for MDD response functionality caa57cd80575d ixgbe: add the ability for the PF to disable VF link state 16a77bfcc7df1 Check /dev/console using init_stat() 04574fd5579a4 tracing/arm: Have max stack tracer handle the case of return address after data 0e51e57170184 gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully 1e6b7da6ddba7 drivers/base: Fix unsigned comparison to -1 in CPUMAP_FILE_MAX_BYTES 4931609013207 mtd_blkdevs: add mtd_table_mutex lock back to blktrans_{open, release} to avoid race condition 04224f725aa36 irqchip/gic-v3-its: Skip HP notifier when no ITS is registered 6f6c2996a81c1 irqchip/gic-v3-its: Postpone LPI pending table freeing and memreserve 1fa94473423ff irqchip/gic-v3-its: Give the percpu rdist struct its own flags field 6013d1ae5feb1 cert host tools: Stop complaining about deprecated OpenSSL functions efe20512212b0 init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash a40d2daf2795d pnmtologo: use relocatable file name 3b40d5b41155f of: configfs: remove unused variable overlay_lock 6c085baf18386 tools: use basename to identify file in gen-mach-types 2fca0fd719812 lib/build_OID_registry: fix reproducibility issues 0f586f4ee8ada vt/conmakehash: improve reproducibility a75774679f28c OF: DT-Overlay configfs interface (v8) d179c639b30ba x86/boot: Wrap literal addresses in absolute_pointer() 856ec356cf91e ACPI: thermal: drop an always true check 7614af249993e xfs: Fix -Werror=dangling-pointer work-around for older GCC 41470215f97ee xfs: Work around GCC 12 -Werror=dangling-pointer for xfs_attr_remote.o 44a445c1922dc virtio-pci: Remove wrong address verification in vp_del_vqs() 77aa9e489eafd bpf: Disallow unprivileged bpf by default ebfb1822e9f97 fs/aufs: fixup 5.15.36 fixups 4eba9348d3e2e Revert "Revert "fbdev: Hot-unplug firmware fb devices on forced removal"" 5df6d1b00f95b jbd2: fix use-after-free of transaction_t race 2d83e8196487f jbd2: refactor wait logic for transaction updates into a common function 07a63f760793c netfilter: conntrack: avoid useless indirection during conntrack destruction 4e71226259962 Revert "fbdev: Hot-unplug firmware fb devices on forced removal" 7ba4cb36fd4f3 rcu: Avoid alloc_pages() when recording stack f78574dee71e4 kasan: test: silence intentional read overflow warnings d313cb89b6b1f kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC 5e279d5647ccf arm64: support page mapping percpu first chunk allocator e5bf16752dcac vmalloc: choose a better start address in vm_area_register_early() 660b3d21b46f3 kasan: test: bypass __alloc_size checks 00aa7573e53a2 kasan: test: add memcpy test that avoids out-of-bounds write 67becf0b1bd44 kasan: fix tag for large allocations when using CONFIG_SLAB bedf1e033213c workqueue, kasan: avoid alloc_pages() when recording stack 7195b67ce69b3 kasan: generic: introduce kasan_record_aux_stack_noalloc() bdff763f0e295 kasan: common: provide can_alloc in kasan_save_stack() 51423ebb36adb lib/stackdepot: introduce __stack_depot_save() 85373e66d8474 lib/stackdepot: remove unused function argument 5b6cc9b251f32 lib/stackdepot: include gfp.h c9f3902d8069e aufs: reduce overhead for "code present but disabled" use case. b98d189df02cc aufs: bugfix, umount passes NULL to ->parse_monolithic() 13b883cbbbd9f aufs standalone: cosmetic, missing copyright sentence 21f8b0d81898e aufs: 5.15.5-20220117 ---> 5.15.5-20220221 6199fd8966450 aufs: tiny, headers after fs_context 8ddb40e31c29b aufs: fs_context 7/7, finally remount 69035f71c6fd1 aufs: fs_context 6/7, now mount bc841b9706977 aufs: fs_context 5/7, parse all other mount options 435188053da29 aufs: fs_context 4/7, parse xino options 9af1f1825cbd7 aufs: fs_context 3/7, parse the branch-management options 1c05eb767f8c3 aufs: fs_context 2/7, parse "br" mount option a8488f603134a aufs: fs_context 1/7, skelton of the new shceme 8e32e0015564e aufs: pre fs_context, convert a static flag to a macro f90cb4144aec4 aufs: pre fs_context, support the incomplete sb and sbinfo case 948762ef859c2 aufs: pre fs_context, convert the type of alloc_sbinfo() 77151a08776b1 aufs: 5.15.5-20211129 ---> 5.15.5-20220117 2539adbbbe1e4 aufs: 5.14-20211018 ---> 5.15.5-20211129 7d32b25193c4c aufs: for v5.15-rc1, sync_inode() is gone 66ec0c509225d aufs: for v5.15-rc1, new param 'rcu' for ->get_acl() 69709dc518cd8 aufs: for v5.15-rc1, no mand-lock anymore ada8fe9543e50 aufs: 5.14-20210906 ---> 5.14-20211018 b77f7f3f394ad Revert "aufs: adjust to v5.15 fs changes" 81bdce5b58765 tick/nohz: WARN_ON --> WARN_ON_ONCE to prevent console saturation 97c9638892228 sched/isolation: really align nohz_full with rcu_nocbs 871f23ad36271 Revert "ARM: defconfig: Enable ax88796c driver for Exynos boards" ffad0783dd5b2 ARM: config: multi v7: Regenerate defconifg 5c1e1a1ff2d39 ARM: config: multi v7: Add renamed symbols badaf96564fe1 ARM: config: multi v7: Clean up enabled by default options 34996040fc9bd ARM: config: multi v7: Drop unavailable options 7f685244afb3a powerpc/mm: Switch obsolete dssall to .long 20301aeb1a641 riscv: fix build with binutils 2.38 9df58d0705069 powerpc/lib/sstep: fix 'ptesync' build error 720b61fc400b5 x86_64_defconfig: Fix warnings 02bf23d26bc4c arm64: defconfig: cleanup config options 05914e2c87e51 arm: defconfig: drop unused POWER_AVS option ffb532fa19b90 aufs5: fix build against v5.15.3+ a4b3abf4d96d7 qemux86: add configuration symbol to select values fee94ee091541 clear_warn_once: add a clear_warn_once= boot parameter 3d8762d900d93 clear_warn_once: bind a timer to written reset value 95faacac47e8d clear_warn_once: expand debugfs to include read support de20c4240018c perf: perf can not parser the backtrace of app in the 32bit system and 64bit kernel. 0e4aacead9c15 perf: x86-32: explicitly include 9ad92c11468e2 perf: mips64: Convert __u64 to unsigned long long 09e7efe3e68a0 perf: fix bench numa compilation e79becc44fa6b perf: add SLANG_INC for slang.h b1033b5886819 perf: add sgidefs.h to for mips builds cf9db484ac0b4 perf: change --root to --prefix for python install 7fd052c2c5624 perf: add 'libperl not found' warning 27a437cdd4691 perf: force include of 3b99d21bec2f6 fat: don't use obsolete random32 call in namei_vfat a7e9293b506bb FAT: Added FAT_NO_83NAME 6fd0e71d9e5c1 FAT: Add CONFIG_VFAT_NO_CREATE_WITH_LONGNAMES option c379b0d324aeb FAT: Add CONFIG_VFAT_FS_NO_DUALNAMES option 538be0fdb124f aufs: adjust to v5.15 fs changes f45da75c8759b aufs5: core 047f57e07e01b aufs5: standalone 029fc15574c88 aufs5: mmap 610d0192ee94d aufs5: base d4e428d0ec5f4 aufs5: kbuild eb067eca251ab yaffs: replace IS_ERR with IS_ERR_OR_NULL to check both ERR and NULL 286af18d0875e yaffs: fix -Wstringop-overread compile warning in yaffs_fix_null_name 24d59a4e26a67 yaffs2: v5.12+ build fixups (not runtime tested) 22c73536d5d7e yaffs: include blkdev.h 506b7251bfb81 yaffs: fix misplaced variable declaration a0e26ff364dcc yaffs2: v5.6 build fixups b10b1b2d169ef yaffs2: fix memory leak when /proc/yaffs is read ad9adccbb2147 yaffs: add strict check when call yaffs_internal_read_super 2e3c3aec8279b yaffs: repair yaffs_get_mtd_device d662538516a7c yaffs: Fix build failure by handling inode i_version with proper atomic API 70a6113ee2c7c yaffs2: fix memory leak in mount/umount 3378e4a9e4043 yaffs: Avoid setting any ACL releated xattr ec2284edddef1 Yaffs:check oob size before auto selecting Yaffs1 c2a49874051cd fs: yaffs2: replace CURRENT_TIME by other appropriate apis e9a5105a3e735 yaffs2: adjust to proper location of MS_RDONLY 608807406f138 yaffs2: import git revision b4ce1bb (jan, 2020) 89e660ece42c8 initramfs: allow an optional wrapper script around initramfs generation b179dbc9aa109 iwlwifi: select MAC80211_LEDS conditionally 3fd5ca3673d03 net/dccp: make it depend on CONFIG_BROKEN (CVE-2020-16119) d1f6edbf01883 arm64/perf: Fix wrong cast that may cause wrong truncation d202fb2caf337 defconfigs: drop obselete options 9a27e3b5f4e73 arm64/perf: fix backtrace for AAPCS with FP enabled e20d8cf019b42 linux-yocto: Handle /bin/awk issues b6d2a3dbbd3a3 uvesafb: provide option to specify timeout for task completion adb40f1e6a1a5 uvesafb: print error message when task timeout occurs f280a1ed09626 compiler.h: Undef before redefining __attribute_const__ 4352732f268c1 vmware: include jiffies.h 7954a677968dc Resolve jiffies wrapping about arp 5f28a1035d950 nfs: Allow default io size to be configured. 0d7260ad71066 check console device file on fs when booting 900a12e37e0a2 mount_root: clarify error messages for when no rootfs found 7b878cbea7261 menuconfig,mconf-cfg: Allow specification of ncurses location 6604fc1763b3d modpost: mask trivial warnings 0d294adb09cbc kbuild: exclude meta directory from distclean processing a097cdd95a9ef powerpc: serialize image targets 5db6ec39a0a3e arm: serialize build targets cbabca27905e2 crtsavres: fixups for 5.4+ 7fc7656ed403e powerpc/ptrace: Disable array-bounds warning with gcc8 a5faac5a19a2e powerpc: Disable attribute-alias warnings from gcc8 186c54665b676 powerpc: add crtsavres.o to archprepare for kbuild d1ea862964cae powerpc: kexec fix for powerpc64 2ac35b89a0f90 powerpc: Add unwind information for SPE registers of E500 core 2e1c348a28bbc mips: vdso: fix 'jalr $t9' crash in vdso code ec57870b303a8 mips: Kconfig: add QEMUMIPS64 option 6a81b3c081078 4kc cache tlb hazard: tlbp cache coherency 74e3b2a21e542 malta uhci quirks: make allowance for slow 4k(e)c 22e65b63d3b4c arm/Makefile: Fix systemtap b7f1ab59f19e5 vexpress: Pass LOADADDR to Makefile ce2800c73bf7e arm: ARM EABI socketcall 019d142fd956a ARM: LPAE: Invalidate the TLB for module addresses during translation fault Signed-off-by: Bruce Ashfield Signed-off-by: Steve Sakoman --- .../linux/linux-yocto-rt_5.15.bb | 6 ++--- .../linux/linux-yocto-tiny_5.15.bb | 6 ++--- meta/recipes-kernel/linux/linux-yocto_5.15.bb | 26 +++++++++---------- 3 files changed, 19 insertions(+), 19 deletions(-) diff --git a/meta/recipes-kernel/linux/linux-yocto-rt_5.15.bb b/meta/recipes-kernel/linux/linux-yocto-rt_5.15.bb index 33c0f370b8..77d4da1177 100644 --- a/meta/recipes-kernel/linux/linux-yocto-rt_5.15.bb +++ b/meta/recipes-kernel/linux/linux-yocto-rt_5.15.bb @@ -11,13 +11,13 @@ python () { raise bb.parse.SkipRecipe("Set PREFERRED_PROVIDER_virtual/kernel to linux-yocto-rt to enable it") } -SRCREV_machine ?= "dd3566c7afbdb325c7ba6e56c0eb525fcc7bc15c" -SRCREV_meta ?= "b4c09f5abf1e9649877da3f82eeb4bde6185fe3a" +SRCREV_machine ?= "09550c3a9a6b51fe9dd73e9b90e9d85959f1fb91" +SRCREV_meta ?= "39edeb3fefcf8e3b5c20240e92bfd5167c9da7aa" SRC_URI = "git://git.yoctoproject.org/linux-yocto.git;branch=${KBRANCH};name=machine \ git://git.yoctoproject.org/yocto-kernel-cache;type=kmeta;name=meta;branch=yocto-5.15;destsuffix=${KMETA}" -LINUX_VERSION ?= "5.15.169" +LINUX_VERSION ?= "5.15.170" LIC_FILES_CHKSUM = "file://COPYING;md5=6bc538ed5bd9a7fc9398086aedcd7e46" diff --git a/meta/recipes-kernel/linux/linux-yocto-tiny_5.15.bb b/meta/recipes-kernel/linux/linux-yocto-tiny_5.15.bb index b0e2166303..9f51a99034 100644 --- a/meta/recipes-kernel/linux/linux-yocto-tiny_5.15.bb +++ b/meta/recipes-kernel/linux/linux-yocto-tiny_5.15.bb @@ -5,7 +5,7 @@ KCONFIG_MODE = "--allnoconfig" require recipes-kernel/linux/linux-yocto.inc -LINUX_VERSION ?= "5.15.169" +LINUX_VERSION ?= "5.15.170" LIC_FILES_CHKSUM = "file://COPYING;md5=6bc538ed5bd9a7fc9398086aedcd7e46" DEPENDS += "${@bb.utils.contains('ARCH', 'x86', 'elfutils-native', '', d)}" @@ -14,8 +14,8 @@ DEPENDS += "openssl-native util-linux-native" KMETA = "kernel-meta" KCONF_BSP_AUDIT_LEVEL = "2" -SRCREV_machine ?= "10a43570e7f45db6a1b55e2fd27eaab50311b5de" -SRCREV_meta ?= "b4c09f5abf1e9649877da3f82eeb4bde6185fe3a" +SRCREV_machine ?= "5d9057298bcdc677c2d2a46a88663fb335322944" +SRCREV_meta ?= "39edeb3fefcf8e3b5c20240e92bfd5167c9da7aa" PV = "${LINUX_VERSION}+git${SRCPV}" diff --git a/meta/recipes-kernel/linux/linux-yocto_5.15.bb b/meta/recipes-kernel/linux/linux-yocto_5.15.bb index 5d65cc54d5..9657690710 100644 --- a/meta/recipes-kernel/linux/linux-yocto_5.15.bb +++ b/meta/recipes-kernel/linux/linux-yocto_5.15.bb @@ -14,24 +14,24 @@ KBRANCH:qemux86 ?= "v5.15/standard/base" KBRANCH:qemux86-64 ?= "v5.15/standard/base" KBRANCH:qemumips64 ?= "v5.15/standard/mti-malta64" -SRCREV_machine:qemuarm ?= "a472fcdac80b8eb15a87a9d712117fe2f04869f7" -SRCREV_machine:qemuarm64 ?= "b83b88fa0e5648e98e16a831391445d6bdd01f0d" -SRCREV_machine:qemumips ?= "d4729075919ae27ec8e67d770419a1fb944a02dd" -SRCREV_machine:qemuppc ?= "65d972cfcaa4e97be8ab1a0895a0f72865bb57b7" -SRCREV_machine:qemuriscv64 ?= "46b573689f8e5146ae5e17702497b8e6e43950c7" -SRCREV_machine:qemuriscv32 ?= "46b573689f8e5146ae5e17702497b8e6e43950c7" -SRCREV_machine:qemux86 ?= "46b573689f8e5146ae5e17702497b8e6e43950c7" -SRCREV_machine:qemux86-64 ?= "46b573689f8e5146ae5e17702497b8e6e43950c7" -SRCREV_machine:qemumips64 ?= "9e2f401868a1af4f4e8d6bd8feb9e49e6405dec1" -SRCREV_machine ?= "46b573689f8e5146ae5e17702497b8e6e43950c7" -SRCREV_meta ?= "b4c09f5abf1e9649877da3f82eeb4bde6185fe3a" +SRCREV_machine:qemuarm ?= "6d182fb48883e5f487a1b1a9d918cfe329c72bd6" +SRCREV_machine:qemuarm64 ?= "ecf807800df1e4838974f3d63b16ef31b32e839f" +SRCREV_machine:qemumips ?= "058d1c05bb16832886391922e078657d433a87e7" +SRCREV_machine:qemuppc ?= "4cbe8a9197f047838e67af6b6b6b8f339b5883c2" +SRCREV_machine:qemuriscv64 ?= "66794a3919629bf7e842cf506aca8a6be34b31e2" +SRCREV_machine:qemuriscv32 ?= "66794a3919629bf7e842cf506aca8a6be34b31e2" +SRCREV_machine:qemux86 ?= "66794a3919629bf7e842cf506aca8a6be34b31e2" +SRCREV_machine:qemux86-64 ?= "66794a3919629bf7e842cf506aca8a6be34b31e2" +SRCREV_machine:qemumips64 ?= "e17660fecfd0ada315d045f4478ba455f8f3f627" +SRCREV_machine ?= "66794a3919629bf7e842cf506aca8a6be34b31e2" +SRCREV_meta ?= "39edeb3fefcf8e3b5c20240e92bfd5167c9da7aa" # set your preferred provider of linux-yocto to 'linux-yocto-upstream', and you'll # get the /base branch, which is pure upstream -stable, and the same # meta SRCREV as the linux-yocto-standard builds. Select your version using the # normal PREFERRED_VERSION settings. BBCLASSEXTEND = "devupstream:target" -SRCREV_machine:class-devupstream ?= "74cdd62cb4706515b454ce5bacb73b566c1d1bcf" +SRCREV_machine:class-devupstream ?= "72244eab0dad81e1553d4f5e105ffadc412885cb" PN:class-devupstream = "linux-yocto-upstream" KBRANCH:class-devupstream = "v5.15/base" @@ -39,7 +39,7 @@ SRC_URI = "git://git.yoctoproject.org/linux-yocto.git;name=machine;branch=${KBRA git://git.yoctoproject.org/yocto-kernel-cache;type=kmeta;name=meta;branch=yocto-5.15;destsuffix=${KMETA}" LIC_FILES_CHKSUM = "file://COPYING;md5=6bc538ed5bd9a7fc9398086aedcd7e46" -LINUX_VERSION ?= "5.15.169" +LINUX_VERSION ?= "5.15.170" DEPENDS += "${@bb.utils.contains('ARCH', 'x86', 'elfutils-native', '', d)}" DEPENDS += "openssl-native util-linux-native" From patchwork Tue Jan 7 18:08:34 2025 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Steve Sakoman X-Patchwork-Id: 55161 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id CF71BE7719C for ; Tue, 7 Jan 2025 18:09:23 +0000 (UTC) Received: from mail-pl1-f180.google.com (mail-pl1-f180.google.com [209.85.214.180]) by mx.groups.io with SMTP id smtpd.web11.123.1736273358370929862 for ; Tue, 07 Jan 2025 10:09:18 -0800 Authentication-Results: mx.groups.io; dkim=pass header.i=@sakoman-com.20230601.gappssmtp.com header.s=20230601 header.b=iQCqNNRT; spf=softfail (domain: sakoman.com, ip: 209.85.214.180, mailfrom: steve@sakoman.com) Received: by mail-pl1-f180.google.com with SMTP id d9443c01a7336-2166651f752so39211785ad.3 for ; Tue, 07 Jan 2025 10:09:18 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sakoman-com.20230601.gappssmtp.com; s=20230601; t=1736273353; x=1736878153; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=msgV9Y6/s9a89a2VCGHp9fxtXRkvmLloY0lMOKB2UBY=; b=iQCqNNRTwTsdPkDPXqPJ4LAK/6X5aSWfGoAR6/QsfAUtLOwAgt9p4xMDl1nY99Daub qZ9nk4Mf5nk3GVd76JJXRW2lcM3sgmA7OV1CT2TAYfQKoY5afZGgcLWE0c/V311wQzTo gtLvDop+3+IZDUQpMGcI1HO8I5tS0WYB7yC8ZucRATzg3oesyHRZhs45pNlJ+Waidjsu 65J0+E3KakuC3s50KjA60cAIVaqh1oyhwnTHfLwdwqeGNztgKXFI1WJ4yglIyY7WsZYW ITT+inrnVL9VrUsFNDeIqmcaSOmZZonyQVb62z6fu07csNitbLD5LD0FEln0Kc3GzD4J 7YOw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1736273353; x=1736878153; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=msgV9Y6/s9a89a2VCGHp9fxtXRkvmLloY0lMOKB2UBY=; b=cIR/qZDAKGXEp2MGgt0bCUf67KKpvb6O4/d1/fb9exG/7Cu6uSWjs3DOxxi8gZycnz VjKgp02IHmTG6Oj2Q4HskwOFHpU03sUxh/8VUABzxty/O/Gh48FsyOOLTXtuRwjm3mJf GKJcOQwkk2gCsDx8s01jJrFaYzhC56BLspsBbJSYjko8lXI0Y18CG1DppRZrxmOfJwYF TiFWCOtEa+TKAlBZ1UxN/V5kSKhtqq2dFmXMQWIRWkWnqZK1ewitvN6udFrcDGSMyMrF lR5wfwPWaX8XOESbVjAF/Cf0fHZL6R+YVMYHq4yKV12qJBEYkRJOOmJJ+p+HAjLWpIoR XXfw== X-Gm-Message-State: AOJu0YzXOoY/5a3JA/UH4wQc7Np8D5ERswjOQ1q3qdX70KSh2gXpQtKR vymtG18pwIsAn45yiw7IM3xFqDBWki/yu6F7XrdevWeL33ZOnN6dS4URPI6LF8qDESXPm16Y3p5 glSY= X-Gm-Gg: ASbGncs78HVEoUH/H1vjVef2oo9MuJtQctBClotckjr/E45J2niVMyV7tM35Q/a9mke cP5a539mclNxZCEaKPBvsGLz7+h9MjymB0TbNrtPogMqouFc8pvRK7sHuzP6Jo0yL/p98cz7KAr 38b0Nzw777zpRQI0n4ieDOl6GyqNJ4Rfh18LemzTXrzrw9WYx1CpWiasdPfZ/6yWNet9OfuGThA HtLXEtO+B++PeRZjeoEocAqxEBHT3tqE9SH/DNF66ocdw== X-Google-Smtp-Source: AGHT+IELGrNUtISfntuwOoQa7v15mMYR9OyBrIiAHA7bs0pGYJNPoRNSxfW2a5jq+hML0+tiw+NHBg== X-Received: by 2002:a17:903:98e:b0:212:63db:bb15 with SMTP id d9443c01a7336-219e6f14f81mr993904915ad.38.1736273352461; Tue, 07 Jan 2025 10:09:12 -0800 (PST) Received: from hexa.. ([98.142.47.158]) by smtp.gmail.com with ESMTPSA id d9443c01a7336-219dc9f4413sm314166335ad.172.2025.01.07.10.09.11 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 07 Jan 2025 10:09:12 -0800 (PST) From: Steve Sakoman To: openembedded-core@lists.openembedded.org Subject: [OE-core][kirkstone 16/19] linux-yocto/5.15: update to v5.15.171 Date: Tue, 7 Jan 2025 10:08:34 -0800 Message-ID: <298c992af738519963a1aab42ea666649e8fdc6c.1736273200.git.steve@sakoman.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Tue, 07 Jan 2025 18:09:23 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/209499 From: Bruce Ashfield Updating linux-yocto/5.15 to the latest korg -stable release that comprises the following commits: 3c17fc4839052 Linux 5.15.171 3d88f7c32432f mac80211: always have ieee80211_sta_restart() b3959d5eca136 vt: prevent kernel-infoleak in con_font_get() ae27888719311 drm/i915: Fix potential context UAFs 5a31d94fc0161 Revert "drm/mipi-dsi: Set the fwnode for mipi_dsi_device" 3d9528484480e mm: shmem: fix data-race in shmem_getattr() 2ac15e5a8f42f wifi: iwlwifi: mvm: fix 6 GHz scan construction f05dbebb8ee34 nilfs2: fix kernel bug due to missing clearing of checked flag ada431c6c31a2 x86/bugs: Use code segment selector for VERW operand ecd62f684386f ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow 4c4e238d3adad mm/page_alloc: let GFP_ATOMIC order-0 allocs access highatomic reserves 85f58ee33c6c9 mm/page_alloc: explicitly define how __GFP_HIGH non-blocking allocations accesses reserves c1b8856c5a7dc mm/page_alloc: explicitly define what alloc flags deplete min reserves 17dedfd6de69a mm/page_alloc: explicitly record high-order atomic allocations in alloc_flags 9da195a2d35b7 mm/page_alloc: treat RT tasks similar to __GFP_HIGH 92e52ff398b55 mm/page_alloc: rename ALLOC_HIGH to ALLOC_MIN_RESERVE ca8527f257369 mm/page_alloc: split out buddy removal code from rmqueue into separate helper 28e7a507196fe mm/page_alloc: fix tracepoint mm_page_alloc_zone_locked() 6036719c23a90 mm/page_alloc: call check_new_pages() while zone spinlock is not held 0d0d55b3ee030 riscv: Remove duplicated GET_RM 6ad44aa8e11cd riscv: Remove unused GENERATING_ASM_OFFSETS f6070925f4695 riscv: Use '%u' to format the output of 'cpu' ddb04c81d129a riscv: efi: Set NX compat flag in PE/COFF header 1c54b0b0d72c7 riscv: vdso: Prevent the compiler from inserting calls to memset() 69548bb663fcb nilfs2: fix potential deadlock with newly created symlinks 7a59817f68e79 iio: light: veml6030: fix microlux value calculation 4f588fffc307a iio: adc: ad7124: fix division by zero in ad7124_set_channel_odr() 2f39548f45693 staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg() 8ac22fe1e2b10 wifi: iwlegacy: Clear stale interrupts before resuming device 705be2dc45c7f wifi: ath10k: Fix memory leak in management tx b2bcbe5450b20 wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower 4749d336170db Revert "driver core: Fix uevent_show() vs driver detach race" c4f90f09713fe xhci: Use pm_runtime_get to prevent RPM on unsupported systems 78a6caa022de4 xhci: Fix Link TRB DMA in command ring stopped completion event 391884630fba2 usb: typec: fix unreleased fwnode_handle in typec_port_register_altmodes() 14d1e39269a82 usb: phy: Fix API devm_usb_put_phy() can not release the phy f9889e5f7c7fb usbip: tools: Fix detach_port() invalid port error path 057b5b9716664 misc: sgi-gru: Don't disable preemption in GRU driver 9ce8e1d7ef459 NFS: remove revoked delegation from server's delegation list cb1711e65bff0 net: amd: mvme147: Fix probe banner message e1d57c29e4733 scsi: scsi_transport_fc: Allow setting rport state to current state 60fb94ef46c23 fs/ntfs3: Additional check in ni_clear() 47e8a17491e37 fs/ntfs3: Fix possible deadlock in mi_read 759016b1f0335 fs/ntfs3: Fix warning possible deadlock in ntfs_set_state e5ae785900868 fs/ntfs3: Check if more than chunk-size bytes are written c46d6b0258800 ACPI: CPPC: Make rmw_lock a raw_spin_lock 564caf173b867 firmware: arm_sdei: Fix the input parameter of cpuhp_remove_state() b1d2de8a669fa netfilter: nft_payload: sanitize offset and length before calling skb_checksum() 9f605135a5c0f net: skip offload for NETIF_F_IPV6_CSUM if ipv6 header contains extension ba22ea0134838 netfilter: Fix use-after-free in get_info() 86c8ebe02d880 bpf: Fix out-of-bounds write in trie_get_next_key() c2150f666c6fc netdevsim: Add trailing zero to terminate the string in nsim_nexthop_bucket_activity_write() 05df1b1dff8f1 net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT 86833e4e6131d gtp: allow -1 to be specified as file description from userspace 5edcb3fdb12c3 ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_init_flow() ece593fc9c007 net: stmmac: TSO: Fix unbalanced DMA map/unmap for non-paged SKB data 720be854fb6ef ASoC: cs42l51: Fix some error handling paths in cs42l51_probe() 3f45d590ccbae wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd() daa426f19aad7 wifi: iwlwifi: mvm: disconnect station vifs if recovery failed 120d8ce610734 mac80211: Add support to trigger sta disconnect on hardware restart 41c8acb337927 mac80211: do drv_reconfig_complete() before restarting all 730dc0818fb88 RDMA/bnxt_re: synchronize the qp-handle table array adf37466c3837 RDMA/mlx5: Round max_rd_atomic/max_dest_rd_atomic up instead of down 15d3b1735ea42 RDMA/cxgb4: Dump vendor specific QP details 1c3beef555271 wifi: brcm80211: BRCM_TRACING should depend on TRACING e97b59cda228f wifi: mac80211: skip non-uploaded keys in ieee80211_iter_keys 52f47de448205 mac80211: MAC80211_MESSAGE_TRACING should depend on TRACING a69d18e8029d7 cgroup: Fix potential overflow issue when checking max_depth 8df5292953083 ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context 6ef99e50be2fe ACPI: PRM: Change handler_addr type to void pointer 0a1b0b04aecd6 ACPI: PRM: Remove unnecessary blank lines 0f62358ce85b2 ksmbd: fix user-after-free from session log off 7bed977305af8 selftests/mm: fix incorrect buffer->mirror size in hmm2 double_map test 6f0605db50e2c clk: imx: Add check for kcalloc 5b837b9e1543e bpf: Fix the indention issue in grow_stack_state() 42b62697634d1 cifs: Fix the calling of smb_version_operations::calc_smb_size() b14acf729e9dc f2fs: Add inline to f2fs_build_fault_attr() stub 7c317bec311f8 f2fs: check validation of fault attrs in f2fs_build_fault_attr() 81c12119c23f8 bpf: Fix accesses to uninit stack slots [ Upstream commit 6b4a64bafd107e521c01eec3453ce94a3fb38529 ] c4fa05422d87c smb: client: fix potential OOB in smb2_dump_detail() 299ef3b5b00bf of: module: add buffer overflow check in of_modalias() b8086c3c1548b reiserfs: Avoid touching renamed directory if parent does not change ea091017ef62c ipv6: Fix data races around sk->sk_prot. ff8710da80ee6 ipv6: annotate some data-races around sk->sk_prot e8c2eafaaa6ac tcp: Fix data races around icsk->icsk_af_ops. 8d1bab7709564 locking/rwsem: Disable preemption while trying for rwsem lock 7c82dac028864 block, loop: support partitions without scanning 45f504f301d41 bpftool: Fix pretty print dump for maps without BTF loaded 1f24338cb789e jbd2: Drop the merge conflicted hunk e1d0e3c51bde6 tpm: tis_i2c: Limit write bursts to I2C_SMBUS_BLOCK_MAX (32) bytes 1abe841fe331a tpm: tis_i2c: Limit read bursts to I2C_SMBUS_BLOCK_MAX (32) bytes 6224acfc1d56b tpm: Add flag to use default cancellation policy 1cd19d48fb909 tpm: tis_i2c: Fix sanity check interrupt enable mask a883da132fa82 tpm: Add tpm_tis_i2c backend for tpm_tis_core a742ac8a1c511 tpm: Add tpm_tis_verify_crc to the tpm_tis_phy_ops protocol layer ef495c5f45f2e tpm: Remove read16/read32/write32 calls from tpm_tis_phy_ops 1f3be2e23aa6d gcc-plugins: Reorganize gimple includes for GCC 13 24615a3b932aa ata: ahci: fix enum constants for gcc-13 5d6cb145541aa net: stmmac: Enable mac_managed_pm phylink config fd93aabb42872 tools/resolve_btfids: Use pkg-config to locate libelf 130f9da784063 tools/resolve_btfids: Build with host flags 00f2f1a782f9b tools/resolve_btfids: Support cross-building the kernel with clang 17776a4ba9c20 tools/resolve_btfids: Install libbpf headers when building 7c9808380d70c libbpf: Make libbpf_version.h non-auto-generated 37ae1ba791ac7 libbpf: Add LIBBPF_DEPRECATED_SINCE macro for scheduling API deprecations a2667e6d7314d drm/radeon: free iio for atombios when driver shutdown f100c753aa1f9 powerpc: Fix reschedule bug in KUAP-unlocked user copy da5513f301871 libbpf: Fix build warning on ref_ctr_off 4c5a089621a8f perf python: Account for multiple words in CC 1c5699ee85d4f fs: move S_ISGID stripping into the vfs_*() helpers 838f5d0701d89 fs: add mode_strip_sgid() helper d971726836412 squashfs: provide backing_dev_info in order to disable read-ahead ed037d7be40c3 irq_work: use kasan_record_aux_stack_noalloc() record callstack 1363bd7dbde39 ixgbevf: add disable link state e5601ae2bd249 ixgbe: add improvement for MDD response functionality caa57cd80575d ixgbe: add the ability for the PF to disable VF link state 16a77bfcc7df1 Check /dev/console using init_stat() 04574fd5579a4 tracing/arm: Have max stack tracer handle the case of return address after data 0e51e57170184 gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully 1e6b7da6ddba7 drivers/base: Fix unsigned comparison to -1 in CPUMAP_FILE_MAX_BYTES 4931609013207 mtd_blkdevs: add mtd_table_mutex lock back to blktrans_{open, release} to avoid race condition 04224f725aa36 irqchip/gic-v3-its: Skip HP notifier when no ITS is registered 6f6c2996a81c1 irqchip/gic-v3-its: Postpone LPI pending table freeing and memreserve 1fa94473423ff irqchip/gic-v3-its: Give the percpu rdist struct its own flags field 6013d1ae5feb1 cert host tools: Stop complaining about deprecated OpenSSL functions efe20512212b0 init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash a40d2daf2795d pnmtologo: use relocatable file name 3b40d5b41155f of: configfs: remove unused variable overlay_lock 6c085baf18386 tools: use basename to identify file in gen-mach-types 2fca0fd719812 lib/build_OID_registry: fix reproducibility issues 0f586f4ee8ada vt/conmakehash: improve reproducibility a75774679f28c OF: DT-Overlay configfs interface (v8) d179c639b30ba x86/boot: Wrap literal addresses in absolute_pointer() 856ec356cf91e ACPI: thermal: drop an always true check 7614af249993e xfs: Fix -Werror=dangling-pointer work-around for older GCC 41470215f97ee xfs: Work around GCC 12 -Werror=dangling-pointer for xfs_attr_remote.o 44a445c1922dc virtio-pci: Remove wrong address verification in vp_del_vqs() 77aa9e489eafd bpf: Disallow unprivileged bpf by default ebfb1822e9f97 fs/aufs: fixup 5.15.36 fixups 4eba9348d3e2e Revert "Revert "fbdev: Hot-unplug firmware fb devices on forced removal"" 5df6d1b00f95b jbd2: fix use-after-free of transaction_t race 2d83e8196487f jbd2: refactor wait logic for transaction updates into a common function 07a63f760793c netfilter: conntrack: avoid useless indirection during conntrack destruction 4e71226259962 Revert "fbdev: Hot-unplug firmware fb devices on forced removal" 7ba4cb36fd4f3 rcu: Avoid alloc_pages() when recording stack f78574dee71e4 kasan: test: silence intentional read overflow warnings d313cb89b6b1f kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC 5e279d5647ccf arm64: support page mapping percpu first chunk allocator e5bf16752dcac vmalloc: choose a better start address in vm_area_register_early() 660b3d21b46f3 kasan: test: bypass __alloc_size checks 00aa7573e53a2 kasan: test: add memcpy test that avoids out-of-bounds write 67becf0b1bd44 kasan: fix tag for large allocations when using CONFIG_SLAB bedf1e033213c workqueue, kasan: avoid alloc_pages() when recording stack 7195b67ce69b3 kasan: generic: introduce kasan_record_aux_stack_noalloc() bdff763f0e295 kasan: common: provide can_alloc in kasan_save_stack() 51423ebb36adb lib/stackdepot: introduce __stack_depot_save() 85373e66d8474 lib/stackdepot: remove unused function argument 5b6cc9b251f32 lib/stackdepot: include gfp.h c9f3902d8069e aufs: reduce overhead for "code present but disabled" use case. b98d189df02cc aufs: bugfix, umount passes NULL to ->parse_monolithic() 13b883cbbbd9f aufs standalone: cosmetic, missing copyright sentence 21f8b0d81898e aufs: 5.15.5-20220117 ---> 5.15.5-20220221 6199fd8966450 aufs: tiny, headers after fs_context 8ddb40e31c29b aufs: fs_context 7/7, finally remount 69035f71c6fd1 aufs: fs_context 6/7, now mount bc841b9706977 aufs: fs_context 5/7, parse all other mount options 435188053da29 aufs: fs_context 4/7, parse xino options 9af1f1825cbd7 aufs: fs_context 3/7, parse the branch-management options 1c05eb767f8c3 aufs: fs_context 2/7, parse "br" mount option a8488f603134a aufs: fs_context 1/7, skelton of the new shceme 8e32e0015564e aufs: pre fs_context, convert a static flag to a macro f90cb4144aec4 aufs: pre fs_context, support the incomplete sb and sbinfo case 948762ef859c2 aufs: pre fs_context, convert the type of alloc_sbinfo() 77151a08776b1 aufs: 5.15.5-20211129 ---> 5.15.5-20220117 2539adbbbe1e4 aufs: 5.14-20211018 ---> 5.15.5-20211129 7d32b25193c4c aufs: for v5.15-rc1, sync_inode() is gone 66ec0c509225d aufs: for v5.15-rc1, new param 'rcu' for ->get_acl() 69709dc518cd8 aufs: for v5.15-rc1, no mand-lock anymore ada8fe9543e50 aufs: 5.14-20210906 ---> 5.14-20211018 b77f7f3f394ad Revert "aufs: adjust to v5.15 fs changes" 81bdce5b58765 tick/nohz: WARN_ON --> WARN_ON_ONCE to prevent console saturation 97c9638892228 sched/isolation: really align nohz_full with rcu_nocbs 871f23ad36271 Revert "ARM: defconfig: Enable ax88796c driver for Exynos boards" ffad0783dd5b2 ARM: config: multi v7: Regenerate defconifg 5c1e1a1ff2d39 ARM: config: multi v7: Add renamed symbols badaf96564fe1 ARM: config: multi v7: Clean up enabled by default options 34996040fc9bd ARM: config: multi v7: Drop unavailable options 7f685244afb3a powerpc/mm: Switch obsolete dssall to .long 20301aeb1a641 riscv: fix build with binutils 2.38 9df58d0705069 powerpc/lib/sstep: fix 'ptesync' build error 720b61fc400b5 x86_64_defconfig: Fix warnings 02bf23d26bc4c arm64: defconfig: cleanup config options 05914e2c87e51 arm: defconfig: drop unused POWER_AVS option ffb532fa19b90 aufs5: fix build against v5.15.3+ a4b3abf4d96d7 qemux86: add configuration symbol to select values fee94ee091541 clear_warn_once: add a clear_warn_once= boot parameter 3d8762d900d93 clear_warn_once: bind a timer to written reset value 95faacac47e8d clear_warn_once: expand debugfs to include read support de20c4240018c perf: perf can not parser the backtrace of app in the 32bit system and 64bit kernel. 0e4aacead9c15 perf: x86-32: explicitly include 9ad92c11468e2 perf: mips64: Convert __u64 to unsigned long long 09e7efe3e68a0 perf: fix bench numa compilation e79becc44fa6b perf: add SLANG_INC for slang.h b1033b5886819 perf: add sgidefs.h to for mips builds cf9db484ac0b4 perf: change --root to --prefix for python install 7fd052c2c5624 perf: add 'libperl not found' warning 27a437cdd4691 perf: force include of 3b99d21bec2f6 fat: don't use obsolete random32 call in namei_vfat a7e9293b506bb FAT: Added FAT_NO_83NAME 6fd0e71d9e5c1 FAT: Add CONFIG_VFAT_NO_CREATE_WITH_LONGNAMES option c379b0d324aeb FAT: Add CONFIG_VFAT_FS_NO_DUALNAMES option 538be0fdb124f aufs: adjust to v5.15 fs changes f45da75c8759b aufs5: core 047f57e07e01b aufs5: standalone 029fc15574c88 aufs5: mmap 610d0192ee94d aufs5: base d4e428d0ec5f4 aufs5: kbuild eb067eca251ab yaffs: replace IS_ERR with IS_ERR_OR_NULL to check both ERR and NULL 286af18d0875e yaffs: fix -Wstringop-overread compile warning in yaffs_fix_null_name 24d59a4e26a67 yaffs2: v5.12+ build fixups (not runtime tested) 22c73536d5d7e yaffs: include blkdev.h 506b7251bfb81 yaffs: fix misplaced variable declaration a0e26ff364dcc yaffs2: v5.6 build fixups b10b1b2d169ef yaffs2: fix memory leak when /proc/yaffs is read ad9adccbb2147 yaffs: add strict check when call yaffs_internal_read_super 2e3c3aec8279b yaffs: repair yaffs_get_mtd_device d662538516a7c yaffs: Fix build failure by handling inode i_version with proper atomic API 70a6113ee2c7c yaffs2: fix memory leak in mount/umount 3378e4a9e4043 yaffs: Avoid setting any ACL releated xattr ec2284edddef1 Yaffs:check oob size before auto selecting Yaffs1 c2a49874051cd fs: yaffs2: replace CURRENT_TIME by other appropriate apis e9a5105a3e735 yaffs2: adjust to proper location of MS_RDONLY 608807406f138 yaffs2: import git revision b4ce1bb (jan, 2020) 89e660ece42c8 initramfs: allow an optional wrapper script around initramfs generation b179dbc9aa109 iwlwifi: select MAC80211_LEDS conditionally 3fd5ca3673d03 net/dccp: make it depend on CONFIG_BROKEN (CVE-2020-16119) d1f6edbf01883 arm64/perf: Fix wrong cast that may cause wrong truncation d202fb2caf337 defconfigs: drop obselete options 9a27e3b5f4e73 arm64/perf: fix backtrace for AAPCS with FP enabled e20d8cf019b42 linux-yocto: Handle /bin/awk issues b6d2a3dbbd3a3 uvesafb: provide option to specify timeout for task completion adb40f1e6a1a5 uvesafb: print error message when task timeout occurs f280a1ed09626 compiler.h: Undef before redefining __attribute_const__ 4352732f268c1 vmware: include jiffies.h 7954a677968dc Resolve jiffies wrapping about arp 5f28a1035d950 nfs: Allow default io size to be configured. 0d7260ad71066 check console device file on fs when booting 900a12e37e0a2 mount_root: clarify error messages for when no rootfs found 7b878cbea7261 menuconfig,mconf-cfg: Allow specification of ncurses location 6604fc1763b3d modpost: mask trivial warnings 0d294adb09cbc kbuild: exclude meta directory from distclean processing a097cdd95a9ef powerpc: serialize image targets 5db6ec39a0a3e arm: serialize build targets cbabca27905e2 crtsavres: fixups for 5.4+ 7fc7656ed403e powerpc/ptrace: Disable array-bounds warning with gcc8 a5faac5a19a2e powerpc: Disable attribute-alias warnings from gcc8 186c54665b676 powerpc: add crtsavres.o to archprepare for kbuild d1ea862964cae powerpc: kexec fix for powerpc64 2ac35b89a0f90 powerpc: Add unwind information for SPE registers of E500 core 2e1c348a28bbc mips: vdso: fix 'jalr $t9' crash in vdso code ec57870b303a8 mips: Kconfig: add QEMUMIPS64 option 6a81b3c081078 4kc cache tlb hazard: tlbp cache coherency 74e3b2a21e542 malta uhci quirks: make allowance for slow 4k(e)c 22e65b63d3b4c arm/Makefile: Fix systemtap b7f1ab59f19e5 vexpress: Pass LOADADDR to Makefile ce2800c73bf7e arm: ARM EABI socketcall 019d142fd956a ARM: LPAE: Invalidate the TLB for module addresses during translation fault Signed-off-by: Bruce Ashfield Signed-off-by: Steve Sakoman --- .../linux/linux-yocto-rt_5.15.bb | 6 ++--- .../linux/linux-yocto-tiny_5.15.bb | 6 ++--- meta/recipes-kernel/linux/linux-yocto_5.15.bb | 26 +++++++++---------- 3 files changed, 19 insertions(+), 19 deletions(-) diff --git a/meta/recipes-kernel/linux/linux-yocto-rt_5.15.bb b/meta/recipes-kernel/linux/linux-yocto-rt_5.15.bb index 77d4da1177..2638f15279 100644 --- a/meta/recipes-kernel/linux/linux-yocto-rt_5.15.bb +++ b/meta/recipes-kernel/linux/linux-yocto-rt_5.15.bb @@ -11,13 +11,13 @@ python () { raise bb.parse.SkipRecipe("Set PREFERRED_PROVIDER_virtual/kernel to linux-yocto-rt to enable it") } -SRCREV_machine ?= "09550c3a9a6b51fe9dd73e9b90e9d85959f1fb91" -SRCREV_meta ?= "39edeb3fefcf8e3b5c20240e92bfd5167c9da7aa" +SRCREV_machine ?= "98041125dd21bf5eca755b97ecd285d6ade81570" +SRCREV_meta ?= "165341e88c9b35945d8b392825aa317ba33bfb57" SRC_URI = "git://git.yoctoproject.org/linux-yocto.git;branch=${KBRANCH};name=machine \ git://git.yoctoproject.org/yocto-kernel-cache;type=kmeta;name=meta;branch=yocto-5.15;destsuffix=${KMETA}" -LINUX_VERSION ?= "5.15.170" +LINUX_VERSION ?= "5.15.171" LIC_FILES_CHKSUM = "file://COPYING;md5=6bc538ed5bd9a7fc9398086aedcd7e46" diff --git a/meta/recipes-kernel/linux/linux-yocto-tiny_5.15.bb b/meta/recipes-kernel/linux/linux-yocto-tiny_5.15.bb index 9f51a99034..d7e3c46073 100644 --- a/meta/recipes-kernel/linux/linux-yocto-tiny_5.15.bb +++ b/meta/recipes-kernel/linux/linux-yocto-tiny_5.15.bb @@ -5,7 +5,7 @@ KCONFIG_MODE = "--allnoconfig" require recipes-kernel/linux/linux-yocto.inc -LINUX_VERSION ?= "5.15.170" +LINUX_VERSION ?= "5.15.171" LIC_FILES_CHKSUM = "file://COPYING;md5=6bc538ed5bd9a7fc9398086aedcd7e46" DEPENDS += "${@bb.utils.contains('ARCH', 'x86', 'elfutils-native', '', d)}" @@ -14,8 +14,8 @@ DEPENDS += "openssl-native util-linux-native" KMETA = "kernel-meta" KCONF_BSP_AUDIT_LEVEL = "2" -SRCREV_machine ?= "5d9057298bcdc677c2d2a46a88663fb335322944" -SRCREV_meta ?= "39edeb3fefcf8e3b5c20240e92bfd5167c9da7aa" +SRCREV_machine ?= "0d8a5525fe6e85f1158929bb79b7ce071056206c" +SRCREV_meta ?= "165341e88c9b35945d8b392825aa317ba33bfb57" PV = "${LINUX_VERSION}+git${SRCPV}" diff --git a/meta/recipes-kernel/linux/linux-yocto_5.15.bb b/meta/recipes-kernel/linux/linux-yocto_5.15.bb index 9657690710..82a83ca2c2 100644 --- a/meta/recipes-kernel/linux/linux-yocto_5.15.bb +++ b/meta/recipes-kernel/linux/linux-yocto_5.15.bb @@ -14,24 +14,24 @@ KBRANCH:qemux86 ?= "v5.15/standard/base" KBRANCH:qemux86-64 ?= "v5.15/standard/base" KBRANCH:qemumips64 ?= "v5.15/standard/mti-malta64" -SRCREV_machine:qemuarm ?= "6d182fb48883e5f487a1b1a9d918cfe329c72bd6" -SRCREV_machine:qemuarm64 ?= "ecf807800df1e4838974f3d63b16ef31b32e839f" -SRCREV_machine:qemumips ?= "058d1c05bb16832886391922e078657d433a87e7" -SRCREV_machine:qemuppc ?= "4cbe8a9197f047838e67af6b6b6b8f339b5883c2" -SRCREV_machine:qemuriscv64 ?= "66794a3919629bf7e842cf506aca8a6be34b31e2" -SRCREV_machine:qemuriscv32 ?= "66794a3919629bf7e842cf506aca8a6be34b31e2" -SRCREV_machine:qemux86 ?= "66794a3919629bf7e842cf506aca8a6be34b31e2" -SRCREV_machine:qemux86-64 ?= "66794a3919629bf7e842cf506aca8a6be34b31e2" -SRCREV_machine:qemumips64 ?= "e17660fecfd0ada315d045f4478ba455f8f3f627" -SRCREV_machine ?= "66794a3919629bf7e842cf506aca8a6be34b31e2" -SRCREV_meta ?= "39edeb3fefcf8e3b5c20240e92bfd5167c9da7aa" +SRCREV_machine:qemuarm ?= "d19efb158e281347f46478971d8d43a821326205" +SRCREV_machine:qemuarm64 ?= "4feb3e5fa76487c2eed871931fd27cd63348dd45" +SRCREV_machine:qemumips ?= "61edb2ce1098c9efd69607801e783569952f86e9" +SRCREV_machine:qemuppc ?= "7adca69e582fde94bec62ddfe6711fac80488892" +SRCREV_machine:qemuriscv64 ?= "6190c0086a4a6def5c3cbc6958348cbdd9370b7d" +SRCREV_machine:qemuriscv32 ?= "6190c0086a4a6def5c3cbc6958348cbdd9370b7d" +SRCREV_machine:qemux86 ?= "6190c0086a4a6def5c3cbc6958348cbdd9370b7d" +SRCREV_machine:qemux86-64 ?= "6190c0086a4a6def5c3cbc6958348cbdd9370b7d" +SRCREV_machine:qemumips64 ?= "5370d58e55c5229e60ff358d88139bf9e67507fb" +SRCREV_machine ?= "6190c0086a4a6def5c3cbc6958348cbdd9370b7d" +SRCREV_meta ?= "165341e88c9b35945d8b392825aa317ba33bfb57" # set your preferred provider of linux-yocto to 'linux-yocto-upstream', and you'll # get the /base branch, which is pure upstream -stable, and the same # meta SRCREV as the linux-yocto-standard builds. Select your version using the # normal PREFERRED_VERSION settings. BBCLASSEXTEND = "devupstream:target" -SRCREV_machine:class-devupstream ?= "72244eab0dad81e1553d4f5e105ffadc412885cb" +SRCREV_machine:class-devupstream ?= "3c17fc4839052076b9f27f22551d0d0bd8557822" PN:class-devupstream = "linux-yocto-upstream" KBRANCH:class-devupstream = "v5.15/base" @@ -39,7 +39,7 @@ SRC_URI = "git://git.yoctoproject.org/linux-yocto.git;name=machine;branch=${KBRA git://git.yoctoproject.org/yocto-kernel-cache;type=kmeta;name=meta;branch=yocto-5.15;destsuffix=${KMETA}" LIC_FILES_CHKSUM = "file://COPYING;md5=6bc538ed5bd9a7fc9398086aedcd7e46" -LINUX_VERSION ?= "5.15.170" +LINUX_VERSION ?= "5.15.171" DEPENDS += "${@bb.utils.contains('ARCH', 'x86', 'elfutils-native', '', d)}" DEPENDS += "openssl-native util-linux-native" From patchwork Tue Jan 7 18:08:35 2025 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Steve Sakoman X-Patchwork-Id: 55162 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id C3272E77198 for ; Tue, 7 Jan 2025 18:09:23 +0000 (UTC) Received: from mail-pl1-f172.google.com (mail-pl1-f172.google.com [209.85.214.172]) by mx.groups.io with SMTP id smtpd.web10.107.1736273355020510111 for ; Tue, 07 Jan 2025 10:09:15 -0800 Authentication-Results: mx.groups.io; dkim=pass header.i=@sakoman-com.20230601.gappssmtp.com header.s=20230601 header.b=1gBtRzKn; spf=softfail (domain: sakoman.com, ip: 209.85.214.172, mailfrom: steve@sakoman.com) Received: by mail-pl1-f172.google.com with SMTP id d9443c01a7336-21669fd5c7cso237589775ad.3 for ; Tue, 07 Jan 2025 10:09:14 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sakoman-com.20230601.gappssmtp.com; s=20230601; t=1736273354; x=1736878154; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=zlfLb0Q1kpnBlGfIgcUUH0nXhEJPYzfrskeykiSciM8=; b=1gBtRzKnEE4yB0KcLPyW4DS0baBhaUmHxk4atZofL7y7ALb2qBE93y/RAGXpa0Nqqq UcWI+3lYBhjHUYFyLnBnXnNHMJ87uV2WJKQato4wVDvtmRc96YLJctC301qXTzPXfPWi AVoJa9v+SxSLJqYWV17JOsC797YdNZwVIG3BpmXdB+pVcWeLkf9dq9eyJDr7H4dO1zeT jrw1D6kHis6EZY6hHnd8BA/5E2eYTHawAgieKHIBdaib5WUcYzpTMtW1W+Sho+LDHkjD SEHr/EMI8Kk9+0RkBH7b42pucW9VS7cS48+CvfKn1w39tuk34O4LTRycrZHiXJSSCrcb ZcgA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1736273354; x=1736878154; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=zlfLb0Q1kpnBlGfIgcUUH0nXhEJPYzfrskeykiSciM8=; b=YUrdqPtUm4T1GqgWDz5avzNorvHHLvuO6Fi0iCvDro8E5fWOenXjBe6ZIyC2H/vM9X gldx1s6756SAunTwYzyGR61X2hE9/GZ68boy9oSjbNw5qVNwu2lsYiYiYveJdQXamLaw sR9uVchcG1UycCdGA8FwonP2So2uEUgkGy4xEICTGv0iK03rcIWYExqm4DVGcidi1BFs R1f3SmDJEMi9+Ce3CA4kGHrg3x7xFsEDsKj/GL+gmuOvgsH02NXSgYXln0j71cAmCPGY KuK5exkBF+qAmT9t4/TxRRS9plt6Z/hD6UwZXoRLm/RBf7Xx4BuLBzPzacIuLwiuncZm jfmQ== X-Gm-Message-State: AOJu0YyIgodYVPxb4wEnZXlkc5fLTLGGARVLS3rhAh3bZiuMORlbpqdX A0asTJ81ZTneZUqLtHT4LjrDuX1cq/DZ/RAUKesQNZgvhkCqPjOFiFkHGuRYtG9ce3oYK4Lhr7X S+68= X-Gm-Gg: ASbGncvJeQs5+Qt+LZAbPaazdpi/8N6xsVJ3S3UJgOXa+JiR0UxYg1bRR6aMIHk81Wo PjvytLMx0rzJgpZSClf3iXLrZRJ1Yi7QoPmBD908z7ZFUTfi6orcMojEs3d45tpwMbnSTC8dkyT w2AYR0pvPqF8Y7uHncKKwknQb4cOKef8yx1AoNHGCQKR+ONkJPzhgFWKTVMCYGSWCLBMtCphk+H dKOCPL18IpSfSnmhhwqbztyozn+FYL0iqtlWQe14GX+ug== X-Google-Smtp-Source: AGHT+IExjAkK4FeY9AFrO66D9x7mYE4b6fR4OQTaENwv4ryQGAiyYcbHnwSeBF/LojgYpDqM8OGINA== X-Received: by 2002:a17:903:68e:b0:216:36ff:ba33 with SMTP id d9443c01a7336-21a83f69627mr56855ad.26.1736273353994; Tue, 07 Jan 2025 10:09:13 -0800 (PST) Received: from hexa.. ([98.142.47.158]) by smtp.gmail.com with ESMTPSA id d9443c01a7336-219dc9f4413sm314166335ad.172.2025.01.07.10.09.13 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 07 Jan 2025 10:09:13 -0800 (PST) From: Steve Sakoman To: openembedded-core@lists.openembedded.org Subject: [OE-core][kirkstone 17/19] linux-yocto/5.15: update to v5.15.173 Date: Tue, 7 Jan 2025 10:08:35 -0800 Message-ID: X-Mailer: git-send-email 2.43.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Tue, 07 Jan 2025 18:09:23 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/209497 From: Bruce Ashfield Updating linux-yocto/5.15 to the latest korg -stable release that comprises the following commits: 0a51d2d4527b Linux 5.15.173 e2eb1b3c807b 9p: fix slab cache name creation for real 8b1d55e43cee udf: Avoid directory type conversion failure due to ENOMEM 5ea4b73e268b udf: Allocate name buffer in directory iterator on heap a5ee9fe48fa5 mm/memory: add non-anonymous page check in the copy_present_page() d43f1430d47c mm: krealloc: Fix MTE false alarm in __do_krealloc 97ed7ff58de6 io_uring: fix possible deadlock in io_register_iowq_max_workers() 1f4fd53ffb7c md/raid10: improve code of mrdev in raid10_sync_request a3d8f121a12a net: usb: qmi_wwan: add Fibocom FG132 0x0112 composition ae8516232db7 HID: lenovo: Add support for Thinkpad X1 Tablet Gen 3 keyboard 86c48496bcd7 HID: multitouch: Add quirk for Logitech Bolt receiver w/ Casa touchpad b3e612bd8f64 fs: Fix uninitialized value issue in from_kuid and from_kgid 8004122bf90e vDPA/ifcvf: Fix pci_read_config_byte() return code handling 79c12f418ece powerpc/powernv: Free name on error in opal_event_init() 4c3dcbb14e57 drm/vmwgfx: Limit display layout ioctl array size to VMWGFX_NUM_DISPLAY_UNITS d46e6a0c83e8 sound: Make CONFIG_SND depend on INDIRECT_IOMEM instead of UML 5c02e1b5760f crypto: marvell/cesa - Disable hash algorithms 01b7ded8042e bpf: use kvzmalloc to allocate BPF verifier environment e781120e8e39 HID: multitouch: Add quirk for HONOR MagicBook Art 14 touchpad 6711f40490df HID: multitouch: Add support for B2402FVA track point f8b7e56b7555 block: Fix elevator_get_default() checking for NULL q->tag_set eb94e4a0db42 irqchip/ocelot: Fix trigger register address 826cbda55820 9p: Avoid creating multiple slab caches with the same name d98fd109f827 Linux 5.15.172 ab812669f191 ALSA: usb-audio: Add endianness annotations 2a6a4e69f255 vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans 7cf259878203 hv_sock: Initializing vsk->trans to NULL to prevent a dangling pointer d810c7c7d42d ACPI: PRM: Clean up guid type in struct prm_handler_info da66f4821e6e ALSA: usb-audio: Add quirks for Dell WD19 dock 7ea07b808bd5 ALSA: usb-audio: Support jack detection on Dell dock e3cd170b998f ucounts: fix counter leak in inc_rlimit_get_ucounts() dcc8fe8c8314 ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove() 2e1546ff199b irqchip/gic-v3: Force propagation of the active state with a read-back 679c414993b5 USB: serial: option: add Quectel RG650V 8031b262bb32 USB: serial: option: add Fibocom FG132 0x0112 composition 2fa7d209f071 USB: serial: qcserial: add support for Sierra Wireless EM86xx 44fff2c16c5a USB: serial: io_edgeport: fix use after free in debug printk 8f47984b35f3 usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd() d9e65d461a9d usb: dwc3: fix fault at system suspend if device was already runtime suspended 63559ba8077c usb: musb: sunxi: Fix accessing an released usb phy 51bc11244a30 fs/proc: fix compile warning about variable 'vmcore_mmap_ops' 467d84dc78c9 media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format e3915f028b1f net: do not delay dst_entries_add() in dst_release() e81b674ead8e ice: Add a per-VF limit on number of FDIR filters c964429ef53f net: bridge: xmit: make sure we have at least eth header len bytes c24fa427fc0a btrfs: reinitialize delayed ref list after deleting it from the list 9b453e8b108a nfs: Fix KMSAN warning in decode_getfattr_attrs() 4e24041ba86d io_uring/rw: fix missing NOWAIT check for O_DIRECT start write a44e81249b8c io_uring: use kiocb_{start,end}_write() helpers 9386396a43ef fs: create kiocb_{start,end}_write() helpers 00334fb35d40 io_uring: rename kiocb_end_write() local helper e70ec8ab9fd3 posix-cpu-timers: Clear TICK_DEP_BIT_POSIX_TIMER on clone 5510496be244 ALSA: usb-audio: Add quirk for HP 320 FHD Webcam cd6a370d395a dm-unstriped: cast an operand to sector_t to prevent potential uint32_t overflow fdef3b94dfeb dm cache: fix potential out-of-bounds access on the first resume 01c4e15a45bb dm cache: optimize dirty bit checking with find_next_bit when resizing ff1dd8a04c30 dm cache: fix out-of-bounds access to the dirty bitset when resizing 850c31160f6e dm cache: correct the number of origin blocks to match the target length 71014a53f20a thermal/drivers/qcom/lmh: Remove false lockdep backtrace 27fc29b53769 drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported aaf6160a4b7f drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read() 4596c0e4f762 drm/amdgpu: Adjust debugfs eviction and IB access permissions 51488ee3562c pwm: imx-tpm: Use correct MODULO value for EPWM mode 282ad7124652 media: v4l2-ctrls-api: fix error handling for v4l2_g_ctrl() a749c15dccc5 media: v4l2-tpg: prevent the risk of a division by zero 190cd7728408 media: pulse8-cec: fix data timestamp at pulse8_setup() f2b4f277c41d media: cx24116: prevent overflows on SNR calculus a930cddfd153 media: s5p-jpeg: prevent buffer overflows 0d75f887aabd ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove a511f9bd9871 ALSA: firewire-lib: fix return value on fail in amdtp_tscm_init() 98e88750df64 scsi: sd_zbc: Use kvzalloc() to allocate REPORT ZONES buffer 7db74a57cca3 media: adv7604: prevent underflow condition when reporting colorspace 719112022425 media: dvb_frontend: don't play tricks with underflow values 5f76f7df1486 media: dvbdev: prevent the risk of out of memory access 2de476e842c9 media: stb0899_algo: initialize cfr before using it e4f6765679e1 Revert "ALSA: hda/conexant: Mute speakers at suspend / shutdown" 3898393b5483 net: arc: fix the device for dma_map_single/dma_unmap_single 1654d4888d24 net: stmmac: Fix unbalanced IRQ wake disable warning on single irq case 3fc95c9771cc net: phy: ti: add PHY_RST_AFTER_CLK_EN flag e36482b222e0 net: hns3: fix kernel crash when uninstalling driver 262dc6ea5f1e i40e: fix race condition by adding filter's intermediate sync state e8e35dc97c81 can: c_can: fix {rx,tx}_errors statistics a758aa6a773b sctp: properly validate chunk size in sctp_sf_ootb() 5c8eb37f626a net: enetc: set MAC address to the VF net_device 199c20fb7499 security/keys: fix slab-out-of-bounds in key_task_permission 4a8cab88ce77 nfs: avoid i_lock contention in nfs_clear_invalid_mapping dbfdfb2eb7f2 NFSv3: handle out-of-order write replies. 80ca099223ab NFS: Add a tracepoint to show the results of nfs_set_cache_invalid() c4be3004fdb1 NFSv3: only use NFS timeout for MOUNT when protocols are compatible 05ade5d43378 HID: core: zero-initialize the report buffer 2a8e8ebe9df9 ARM: dts: rockchip: Fix the realtek audio codec on rk3036-kylin ea5efbcf0859 ARM: dts: rockchip: Fix the spi controller on rk3036 7e99abbcc1b1 ARM: dts: rockchip: drop grf reference from rk3036 hdmi fc144c295ab7 ARM: dts: rockchip: fix rk3036 acodec node 98745ce735dc arm64: dts: imx8mp: correct sdhc ipg clk 17bbedc1347b arm64: dts: rockchip: Fix LED triggers on rk3308-roc-cc f2a54c100ebe arm64: dts: rockchip: Remove #cooling-cells from fan on Theobroma lion 611f304c6b5c arm64: dts: rockchip: Fix bluetooth properties on Rock960 boards c74f7c0a2c3a arm64: dts: rockchip: Remove hdmi's 2nd interrupt on rk3328 3168342c3883 arm64: dts: rockchip: Fix rt5651 compatible value on rk3399-sapphire-excavator 6f0605db50e2 clk: imx: Add check for kcalloc 5b837b9e1543 bpf: Fix the indention issue in grow_stack_state() 42b62697634d cifs: Fix the calling of smb_version_operations::calc_smb_size() b14acf729e9d f2fs: Add inline to f2fs_build_fault_attr() stub 7c317bec311f f2fs: check validation of fault attrs in f2fs_build_fault_attr() 81c12119c23f bpf: Fix accesses to uninit stack slots [ Upstream commit 6b4a64bafd107e521c01eec3453ce94a3fb38529 ] c4fa05422d87 smb: client: fix potential OOB in smb2_dump_detail() 299ef3b5b00b of: module: add buffer overflow check in of_modalias() b8086c3c1548 reiserfs: Avoid touching renamed directory if parent does not change ea091017ef62 ipv6: Fix data races around sk->sk_prot. ff8710da80ee ipv6: annotate some data-races around sk->sk_prot e8c2eafaaa6a tcp: Fix data races around icsk->icsk_af_ops. 8d1bab770956 locking/rwsem: Disable preemption while trying for rwsem lock 7c82dac02886 block, loop: support partitions without scanning 45f504f301d4 bpftool: Fix pretty print dump for maps without BTF loaded 1f24338cb789 jbd2: Drop the merge conflicted hunk e1d0e3c51bde tpm: tis_i2c: Limit write bursts to I2C_SMBUS_BLOCK_MAX (32) bytes 1abe841fe331 tpm: tis_i2c: Limit read bursts to I2C_SMBUS_BLOCK_MAX (32) bytes 6224acfc1d56 tpm: Add flag to use default cancellation policy 1cd19d48fb90 tpm: tis_i2c: Fix sanity check interrupt enable mask a883da132fa8 tpm: Add tpm_tis_i2c backend for tpm_tis_core a742ac8a1c51 tpm: Add tpm_tis_verify_crc to the tpm_tis_phy_ops protocol layer ef495c5f45f2 tpm: Remove read16/read32/write32 calls from tpm_tis_phy_ops 1f3be2e23aa6 gcc-plugins: Reorganize gimple includes for GCC 13 24615a3b932a ata: ahci: fix enum constants for gcc-13 5d6cb145541a net: stmmac: Enable mac_managed_pm phylink config fd93aabb4287 tools/resolve_btfids: Use pkg-config to locate libelf 130f9da78406 tools/resolve_btfids: Build with host flags 00f2f1a782f9 tools/resolve_btfids: Support cross-building the kernel with clang 17776a4ba9c2 tools/resolve_btfids: Install libbpf headers when building 7c9808380d70 libbpf: Make libbpf_version.h non-auto-generated 37ae1ba791ac libbpf: Add LIBBPF_DEPRECATED_SINCE macro for scheduling API deprecations a2667e6d7314 drm/radeon: free iio for atombios when driver shutdown f100c753aa1f powerpc: Fix reschedule bug in KUAP-unlocked user copy da5513f30187 libbpf: Fix build warning on ref_ctr_off 4c5a089621a8 perf python: Account for multiple words in CC 1c5699ee85d4 fs: move S_ISGID stripping into the vfs_*() helpers 838f5d0701d8 fs: add mode_strip_sgid() helper d97172683641 squashfs: provide backing_dev_info in order to disable read-ahead ed037d7be40c irq_work: use kasan_record_aux_stack_noalloc() record callstack 1363bd7dbde3 ixgbevf: add disable link state e5601ae2bd24 ixgbe: add improvement for MDD response functionality caa57cd80575 ixgbe: add the ability for the PF to disable VF link state 16a77bfcc7df Check /dev/console using init_stat() 04574fd5579a tracing/arm: Have max stack tracer handle the case of return address after data 0e51e5717018 gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully 1e6b7da6ddba drivers/base: Fix unsigned comparison to -1 in CPUMAP_FILE_MAX_BYTES 493160901320 mtd_blkdevs: add mtd_table_mutex lock back to blktrans_{open, release} to avoid race condition 04224f725aa3 irqchip/gic-v3-its: Skip HP notifier when no ITS is registered 6f6c2996a81c irqchip/gic-v3-its: Postpone LPI pending table freeing and memreserve 1fa94473423f irqchip/gic-v3-its: Give the percpu rdist struct its own flags field 6013d1ae5feb cert host tools: Stop complaining about deprecated OpenSSL functions efe20512212b init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash a40d2daf2795 pnmtologo: use relocatable file name 3b40d5b41155 of: configfs: remove unused variable overlay_lock 6c085baf1838 tools: use basename to identify file in gen-mach-types 2fca0fd71981 lib/build_OID_registry: fix reproducibility issues 0f586f4ee8ad vt/conmakehash: improve reproducibility a75774679f28 OF: DT-Overlay configfs interface (v8) d179c639b30b x86/boot: Wrap literal addresses in absolute_pointer() 856ec356cf91 ACPI: thermal: drop an always true check 7614af249993 xfs: Fix -Werror=dangling-pointer work-around for older GCC 41470215f97e xfs: Work around GCC 12 -Werror=dangling-pointer for xfs_attr_remote.o 44a445c1922d virtio-pci: Remove wrong address verification in vp_del_vqs() 77aa9e489eaf bpf: Disallow unprivileged bpf by default ebfb1822e9f9 fs/aufs: fixup 5.15.36 fixups 4eba9348d3e2 Revert "Revert "fbdev: Hot-unplug firmware fb devices on forced removal"" 5df6d1b00f95 jbd2: fix use-after-free of transaction_t race 2d83e8196487 jbd2: refactor wait logic for transaction updates into a common function 07a63f760793 netfilter: conntrack: avoid useless indirection during conntrack destruction 4e7122625996 Revert "fbdev: Hot-unplug firmware fb devices on forced removal" 7ba4cb36fd4f rcu: Avoid alloc_pages() when recording stack f78574dee71e kasan: test: silence intentional read overflow warnings d313cb89b6b1 kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC 5e279d5647cc arm64: support page mapping percpu first chunk allocator e5bf16752dca vmalloc: choose a better start address in vm_area_register_early() 660b3d21b46f kasan: test: bypass __alloc_size checks 00aa7573e53a kasan: test: add memcpy test that avoids out-of-bounds write 67becf0b1bd4 kasan: fix tag for large allocations when using CONFIG_SLAB bedf1e033213 workqueue, kasan: avoid alloc_pages() when recording stack 7195b67ce69b kasan: generic: introduce kasan_record_aux_stack_noalloc() bdff763f0e29 kasan: common: provide can_alloc in kasan_save_stack() 51423ebb36ad lib/stackdepot: introduce __stack_depot_save() 85373e66d847 lib/stackdepot: remove unused function argument 5b6cc9b251f3 lib/stackdepot: include gfp.h c9f3902d8069 aufs: reduce overhead for "code present but disabled" use case. b98d189df02c aufs: bugfix, umount passes NULL to ->parse_monolithic() 13b883cbbbd9 aufs standalone: cosmetic, missing copyright sentence 21f8b0d81898 aufs: 5.15.5-20220117 ---> 5.15.5-20220221 6199fd896645 aufs: tiny, headers after fs_context 8ddb40e31c29 aufs: fs_context 7/7, finally remount 69035f71c6fd aufs: fs_context 6/7, now mount bc841b970697 aufs: fs_context 5/7, parse all other mount options 435188053da2 aufs: fs_context 4/7, parse xino options 9af1f1825cbd aufs: fs_context 3/7, parse the branch-management options 1c05eb767f8c aufs: fs_context 2/7, parse "br" mount option a8488f603134 aufs: fs_context 1/7, skelton of the new shceme 8e32e0015564 aufs: pre fs_context, convert a static flag to a macro f90cb4144aec aufs: pre fs_context, support the incomplete sb and sbinfo case 948762ef859c aufs: pre fs_context, convert the type of alloc_sbinfo() 77151a08776b aufs: 5.15.5-20211129 ---> 5.15.5-20220117 2539adbbbe1e aufs: 5.14-20211018 ---> 5.15.5-20211129 7d32b25193c4 aufs: for v5.15-rc1, sync_inode() is gone 66ec0c509225 aufs: for v5.15-rc1, new param 'rcu' for ->get_acl() 69709dc518cd aufs: for v5.15-rc1, no mand-lock anymore ada8fe9543e5 aufs: 5.14-20210906 ---> 5.14-20211018 b77f7f3f394a Revert "aufs: adjust to v5.15 fs changes" 81bdce5b5876 tick/nohz: WARN_ON --> WARN_ON_ONCE to prevent console saturation 97c963889222 sched/isolation: really align nohz_full with rcu_nocbs 871f23ad3627 Revert "ARM: defconfig: Enable ax88796c driver for Exynos boards" ffad0783dd5b ARM: config: multi v7: Regenerate defconifg 5c1e1a1ff2d3 ARM: config: multi v7: Add renamed symbols badaf96564fe ARM: config: multi v7: Clean up enabled by default options 34996040fc9b ARM: config: multi v7: Drop unavailable options 7f685244afb3 powerpc/mm: Switch obsolete dssall to .long 20301aeb1a64 riscv: fix build with binutils 2.38 9df58d070506 powerpc/lib/sstep: fix 'ptesync' build error 720b61fc400b x86_64_defconfig: Fix warnings 02bf23d26bc4 arm64: defconfig: cleanup config options 05914e2c87e5 arm: defconfig: drop unused POWER_AVS option ffb532fa19b9 aufs5: fix build against v5.15.3+ a4b3abf4d96d qemux86: add configuration symbol to select values fee94ee09154 clear_warn_once: add a clear_warn_once= boot parameter 3d8762d900d9 clear_warn_once: bind a timer to written reset value 95faacac47e8 clear_warn_once: expand debugfs to include read support de20c4240018 perf: perf can not parser the backtrace of app in the 32bit system and 64bit kernel. 0e4aacead9c1 perf: x86-32: explicitly include 9ad92c11468e perf: mips64: Convert __u64 to unsigned long long 09e7efe3e68a perf: fix bench numa compilation e79becc44fa6 perf: add SLANG_INC for slang.h b1033b588681 perf: add sgidefs.h to for mips builds cf9db484ac0b perf: change --root to --prefix for python install 7fd052c2c562 perf: add 'libperl not found' warning 27a437cdd469 perf: force include of 3b99d21bec2f fat: don't use obsolete random32 call in namei_vfat a7e9293b506b FAT: Added FAT_NO_83NAME 6fd0e71d9e5c FAT: Add CONFIG_VFAT_NO_CREATE_WITH_LONGNAMES option c379b0d324ae FAT: Add CONFIG_VFAT_FS_NO_DUALNAMES option 538be0fdb124 aufs: adjust to v5.15 fs changes f45da75c8759 aufs5: core 047f57e07e01 aufs5: standalone 029fc15574c8 aufs5: mmap 610d0192ee94 aufs5: base d4e428d0ec5f aufs5: kbuild eb067eca251a yaffs: replace IS_ERR with IS_ERR_OR_NULL to check both ERR and NULL 286af18d0875 yaffs: fix -Wstringop-overread compile warning in yaffs_fix_null_name 24d59a4e26a6 yaffs2: v5.12+ build fixups (not runtime tested) 22c73536d5d7 yaffs: include blkdev.h 506b7251bfb8 yaffs: fix misplaced variable declaration a0e26ff364dc yaffs2: v5.6 build fixups b10b1b2d169e yaffs2: fix memory leak when /proc/yaffs is read ad9adccbb214 yaffs: add strict check when call yaffs_internal_read_super 2e3c3aec8279 yaffs: repair yaffs_get_mtd_device d662538516a7 yaffs: Fix build failure by handling inode i_version with proper atomic API 70a6113ee2c7 yaffs2: fix memory leak in mount/umount 3378e4a9e404 yaffs: Avoid setting any ACL releated xattr ec2284edddef Yaffs:check oob size before auto selecting Yaffs1 c2a49874051c fs: yaffs2: replace CURRENT_TIME by other appropriate apis e9a5105a3e73 yaffs2: adjust to proper location of MS_RDONLY 608807406f13 yaffs2: import git revision b4ce1bb (jan, 2020) 89e660ece42c initramfs: allow an optional wrapper script around initramfs generation b179dbc9aa10 iwlwifi: select MAC80211_LEDS conditionally 3fd5ca3673d0 net/dccp: make it depend on CONFIG_BROKEN (CVE-2020-16119) d1f6edbf0188 arm64/perf: Fix wrong cast that may cause wrong truncation d202fb2caf33 defconfigs: drop obselete options 9a27e3b5f4e7 arm64/perf: fix backtrace for AAPCS with FP enabled e20d8cf019b4 linux-yocto: Handle /bin/awk issues b6d2a3dbbd3a uvesafb: provide option to specify timeout for task completion adb40f1e6a1a uvesafb: print error message when task timeout occurs f280a1ed0962 compiler.h: Undef before redefining __attribute_const__ 4352732f268c vmware: include jiffies.h 7954a677968d Resolve jiffies wrapping about arp 5f28a1035d95 nfs: Allow default io size to be configured. 0d7260ad7106 check console device file on fs when booting 900a12e37e0a mount_root: clarify error messages for when no rootfs found 7b878cbea726 menuconfig,mconf-cfg: Allow specification of ncurses location 6604fc1763b3 modpost: mask trivial warnings 0d294adb09cb kbuild: exclude meta directory from distclean processing a097cdd95a9e powerpc: serialize image targets 5db6ec39a0a3 arm: serialize build targets cbabca27905e crtsavres: fixups for 5.4+ 7fc7656ed403 powerpc/ptrace: Disable array-bounds warning with gcc8 a5faac5a19a2 powerpc: Disable attribute-alias warnings from gcc8 186c54665b67 powerpc: add crtsavres.o to archprepare for kbuild d1ea862964ca powerpc: kexec fix for powerpc64 2ac35b89a0f9 powerpc: Add unwind information for SPE registers of E500 core 2e1c348a28bb mips: vdso: fix 'jalr $t9' crash in vdso code ec57870b303a mips: Kconfig: add QEMUMIPS64 option 6a81b3c08107 4kc cache tlb hazard: tlbp cache coherency 74e3b2a21e54 malta uhci quirks: make allowance for slow 4k(e)c 22e65b63d3b4 arm/Makefile: Fix systemtap b7f1ab59f19e vexpress: Pass LOADADDR to Makefile ce2800c73bf7 arm: ARM EABI socketcall 019d142fd956 ARM: LPAE: Invalidate the TLB for module addresses during translation fault Signed-off-by: Bruce Ashfield Signed-off-by: Steve Sakoman --- .../linux/linux-yocto-rt_5.15.bb | 6 ++--- .../linux/linux-yocto-tiny_5.15.bb | 6 ++--- meta/recipes-kernel/linux/linux-yocto_5.15.bb | 26 +++++++++---------- 3 files changed, 19 insertions(+), 19 deletions(-) diff --git a/meta/recipes-kernel/linux/linux-yocto-rt_5.15.bb b/meta/recipes-kernel/linux/linux-yocto-rt_5.15.bb index 2638f15279..489da2cbc3 100644 --- a/meta/recipes-kernel/linux/linux-yocto-rt_5.15.bb +++ b/meta/recipes-kernel/linux/linux-yocto-rt_5.15.bb @@ -11,13 +11,13 @@ python () { raise bb.parse.SkipRecipe("Set PREFERRED_PROVIDER_virtual/kernel to linux-yocto-rt to enable it") } -SRCREV_machine ?= "98041125dd21bf5eca755b97ecd285d6ade81570" -SRCREV_meta ?= "165341e88c9b35945d8b392825aa317ba33bfb57" +SRCREV_machine ?= "1d8830fba57e4ac3d213ca9c94dc68ac46369d43" +SRCREV_meta ?= "c20b08deed1bb069e2489413e54e7498dba70057" SRC_URI = "git://git.yoctoproject.org/linux-yocto.git;branch=${KBRANCH};name=machine \ git://git.yoctoproject.org/yocto-kernel-cache;type=kmeta;name=meta;branch=yocto-5.15;destsuffix=${KMETA}" -LINUX_VERSION ?= "5.15.171" +LINUX_VERSION ?= "5.15.173" LIC_FILES_CHKSUM = "file://COPYING;md5=6bc538ed5bd9a7fc9398086aedcd7e46" diff --git a/meta/recipes-kernel/linux/linux-yocto-tiny_5.15.bb b/meta/recipes-kernel/linux/linux-yocto-tiny_5.15.bb index d7e3c46073..1816b47dfe 100644 --- a/meta/recipes-kernel/linux/linux-yocto-tiny_5.15.bb +++ b/meta/recipes-kernel/linux/linux-yocto-tiny_5.15.bb @@ -5,7 +5,7 @@ KCONFIG_MODE = "--allnoconfig" require recipes-kernel/linux/linux-yocto.inc -LINUX_VERSION ?= "5.15.171" +LINUX_VERSION ?= "5.15.173" LIC_FILES_CHKSUM = "file://COPYING;md5=6bc538ed5bd9a7fc9398086aedcd7e46" DEPENDS += "${@bb.utils.contains('ARCH', 'x86', 'elfutils-native', '', d)}" @@ -14,8 +14,8 @@ DEPENDS += "openssl-native util-linux-native" KMETA = "kernel-meta" KCONF_BSP_AUDIT_LEVEL = "2" -SRCREV_machine ?= "0d8a5525fe6e85f1158929bb79b7ce071056206c" -SRCREV_meta ?= "165341e88c9b35945d8b392825aa317ba33bfb57" +SRCREV_machine ?= "0d6b798bb6a1e1ed73032fa5c45f1d599593d21e" +SRCREV_meta ?= "c20b08deed1bb069e2489413e54e7498dba70057" PV = "${LINUX_VERSION}+git${SRCPV}" diff --git a/meta/recipes-kernel/linux/linux-yocto_5.15.bb b/meta/recipes-kernel/linux/linux-yocto_5.15.bb index 82a83ca2c2..9e5c21f407 100644 --- a/meta/recipes-kernel/linux/linux-yocto_5.15.bb +++ b/meta/recipes-kernel/linux/linux-yocto_5.15.bb @@ -14,24 +14,24 @@ KBRANCH:qemux86 ?= "v5.15/standard/base" KBRANCH:qemux86-64 ?= "v5.15/standard/base" KBRANCH:qemumips64 ?= "v5.15/standard/mti-malta64" -SRCREV_machine:qemuarm ?= "d19efb158e281347f46478971d8d43a821326205" -SRCREV_machine:qemuarm64 ?= "4feb3e5fa76487c2eed871931fd27cd63348dd45" -SRCREV_machine:qemumips ?= "61edb2ce1098c9efd69607801e783569952f86e9" -SRCREV_machine:qemuppc ?= "7adca69e582fde94bec62ddfe6711fac80488892" -SRCREV_machine:qemuriscv64 ?= "6190c0086a4a6def5c3cbc6958348cbdd9370b7d" -SRCREV_machine:qemuriscv32 ?= "6190c0086a4a6def5c3cbc6958348cbdd9370b7d" -SRCREV_machine:qemux86 ?= "6190c0086a4a6def5c3cbc6958348cbdd9370b7d" -SRCREV_machine:qemux86-64 ?= "6190c0086a4a6def5c3cbc6958348cbdd9370b7d" -SRCREV_machine:qemumips64 ?= "5370d58e55c5229e60ff358d88139bf9e67507fb" -SRCREV_machine ?= "6190c0086a4a6def5c3cbc6958348cbdd9370b7d" -SRCREV_meta ?= "165341e88c9b35945d8b392825aa317ba33bfb57" +SRCREV_machine:qemuarm ?= "c1028e815302012e33e3249ebea99560d27fb35d" +SRCREV_machine:qemuarm64 ?= "2dc4d24d695ca843b072af76d0b256d0b20c490b" +SRCREV_machine:qemumips ?= "a325e8ea9f13e35d9685d4efb5361973532c52cb" +SRCREV_machine:qemuppc ?= "3c68be3fd502a5d9772f734c61e8325c47bbe8cb" +SRCREV_machine:qemuriscv64 ?= "3ac5c02a471d41782f960090c5d5caab80dc6cdc" +SRCREV_machine:qemuriscv32 ?= "3ac5c02a471d41782f960090c5d5caab80dc6cdc" +SRCREV_machine:qemux86 ?= "3ac5c02a471d41782f960090c5d5caab80dc6cdc" +SRCREV_machine:qemux86-64 ?= "3ac5c02a471d41782f960090c5d5caab80dc6cdc" +SRCREV_machine:qemumips64 ?= "e5704819da97878c8f22425f8f7b271449935894" +SRCREV_machine ?= "3ac5c02a471d41782f960090c5d5caab80dc6cdc" +SRCREV_meta ?= "c20b08deed1bb069e2489413e54e7498dba70057" # set your preferred provider of linux-yocto to 'linux-yocto-upstream', and you'll # get the /base branch, which is pure upstream -stable, and the same # meta SRCREV as the linux-yocto-standard builds. Select your version using the # normal PREFERRED_VERSION settings. BBCLASSEXTEND = "devupstream:target" -SRCREV_machine:class-devupstream ?= "3c17fc4839052076b9f27f22551d0d0bd8557822" +SRCREV_machine:class-devupstream ?= "0a51d2d4527b43c5e467ffa6897deefeaf499358" PN:class-devupstream = "linux-yocto-upstream" KBRANCH:class-devupstream = "v5.15/base" @@ -39,7 +39,7 @@ SRC_URI = "git://git.yoctoproject.org/linux-yocto.git;name=machine;branch=${KBRA git://git.yoctoproject.org/yocto-kernel-cache;type=kmeta;name=meta;branch=yocto-5.15;destsuffix=${KMETA}" LIC_FILES_CHKSUM = "file://COPYING;md5=6bc538ed5bd9a7fc9398086aedcd7e46" -LINUX_VERSION ?= "5.15.171" +LINUX_VERSION ?= "5.15.173" DEPENDS += "${@bb.utils.contains('ARCH', 'x86', 'elfutils-native', '', d)}" DEPENDS += "openssl-native util-linux-native" From patchwork Tue Jan 7 18:08:36 2025 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Patchwork-Submitter: Steve Sakoman X-Patchwork-Id: 55163 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id CF748E7719D for ; Tue, 7 Jan 2025 18:09:23 +0000 (UTC) Received: from mail-pj1-f54.google.com (mail-pj1-f54.google.com [209.85.216.54]) by mx.groups.io with SMTP id smtpd.web10.108.1736273357379032963 for ; Tue, 07 Jan 2025 10:09:17 -0800 Authentication-Results: mx.groups.io; dkim=pass header.i=@sakoman-com.20230601.gappssmtp.com header.s=20230601 header.b=ACdVHLWA; spf=softfail (domain: sakoman.com, ip: 209.85.216.54, mailfrom: steve@sakoman.com) Received: by mail-pj1-f54.google.com with SMTP id 98e67ed59e1d1-2ee8e8e29f6so18839020a91.0 for ; Tue, 07 Jan 2025 10:09:17 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sakoman-com.20230601.gappssmtp.com; s=20230601; t=1736273356; x=1736878156; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=sl9mEZqkrNJQkNyiucGWvPUrzufwdJgscmBvOYIqc1E=; b=ACdVHLWAZBTv4WrL4dQ3A/0BGX86P5Q8Zqbx5SI1B+HgyadfRI5Dq7yECqwNHIutDy 6bGcRTgMWIBNUEafwGOnMoedsVzDdb2CxVEMYS0BYRMdr24JxUIIUa780Fvsn5ouMUNw Sjj8C87TwdedZsh8q/VmtDXWdk0L8yT99Mz1EJfAZr7YuJWzzqykistct3IQtmHqrGY6 nzXCJHQuZdB38WTrT4YJNKpGnMcEQOHTYI04vZN8Vkafkn/FjMXiUDA0FTYSOpiQu+Wm eHggH4WJbhTEPiVKDHCe0DRO5kzlSuwTLEP1/ahK3VuL0H0hOSluQ5jwRttcwF3O66Gh RyTQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1736273356; x=1736878156; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=sl9mEZqkrNJQkNyiucGWvPUrzufwdJgscmBvOYIqc1E=; b=QWPsC4/JLb1h+qsc/V1Iu6QsLfKRgU6qdbd0lQqziOnbBtNLqjblEqM0VhLvDBR36x cOIo6qlAkkkM9q6KznNMQkBhBCoofU+xWeWPtoFBxrSJgyDDb5vJnJfpjf+gBI/d4gvz pZwSUiImFV7w66seFIr2SHZH/8m79WGa1ScXcmcVEVGEKOBAUKO/xozTDAYa9MpG2TGK F/+UKdLRGg/+Kozw55RDPv/dYg9tkIJ307ZutsRixHbVi0gT3SMaRrFichZIliYeUMxG T6ibsqBJBcnfF0eosW4f09bPxWcU20+1KTfsHLOwGUOx3eK970tHoFPg4MG5awasDsXz E+Cg== X-Gm-Message-State: AOJu0YzlY0kCnpw5GRNdUIzKcIy0sg22I92Jg5PTot3TIi7MbpGG47Nv 0NIlO+2/hIWt2DSegbJK+yKSERuOWN1OWj6RPZhVUsSy3AeFwWFl551cofsjjxqDxhMNHa7O2hr VpMo= X-Gm-Gg: ASbGncux/tbnd75G/+e2HvWwLrupCoT8mPwQvJruigcJL25bLbKMjXZd+3m2ymaadwL VaYl3byKGYDl4usbsG2pbRg6T8e6KhRcRupm7HyvwNnT2h1DWIXhyYA8SmnoIQDtOzCtJeWzgLl 0QN4fOlrA65Wab3mu8g/Os5PC04IQfsO5QEEw2U9JbnxErFGnYOO7l8MCmmU+X+BXPNvo2Bk1ZX oxq0Z8cXeawtzsWfvD/knpThK8ViTdMDZbEm543rV7NVQ== X-Google-Smtp-Source: AGHT+IESmheKT0XOWzThS1W5CE4H+6937TU/ln6SWwG/t+fpcw6qEp7wkkUDB7Tr56sNDMr8ezj0/w== X-Received: by 2002:a17:90b:2c85:b0:2ee:90a1:5d42 with SMTP id 98e67ed59e1d1-2f452d2fc15mr108952578a91.0.1736273355698; Tue, 07 Jan 2025 10:09:15 -0800 (PST) Received: from hexa.. ([98.142.47.158]) by smtp.gmail.com with ESMTPSA id d9443c01a7336-219dc9f4413sm314166335ad.172.2025.01.07.10.09.14 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 07 Jan 2025 10:09:15 -0800 (PST) From: Steve Sakoman To: openembedded-core@lists.openembedded.org Subject: [OE-core][kirkstone 18/19] linux-yocto/5.15: update to v5.15.174 Date: Tue, 7 Jan 2025 10:08:36 -0800 Message-ID: X-Mailer: git-send-email 2.43.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Tue, 07 Jan 2025 18:09:23 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/209498 From: Bruce Ashfield Updating linux-yocto/5.15 to the latest korg -stable release that comprises the following commits: 963e654022cc Linux 5.15.174 2e29116c4596 Bluetooth: hci_core: Fix calling mgmt_device_connected 5e71985e855c net/smc: Fix af_ops of child socket pointing to released memory 5cedfe8aaf18 media: venus: vdec: fixed possible memory leak issue d3717cf6baa4 serial: amba-pl011: fix build regression d897650c5897 drm/amdgpu: rework resume handling for display (v2) e1896f381d27 drm/amd/display: Correct the defined value for AMDGPU_DMUB_NOTIFICATION_MAX 9760b0c61e53 net: dsa: microchip: correct KSZ8795 static MAC table access 686e05c9dbd6 Bluetooth: L2CAP: Fix uaf in l2cap_connect 522328e80acf arm64: smccc: Remove broken support for SMCCCv1.3 SVE discard hint 51d3d80a6dc3 arm64/sve: Discard stale CPU state when handling SVE traps 221a2c898962 gve: Fixes for napi_poll when budget is 0 154cf95664de scsi: core: Fix scsi_mode_select() buffer length handling 7bdecbd49a5d Revert "drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read()" b1453a5616c7 fou: remove warn in gue_gro_receive on unsupported protocol 0b31e28fbd77 ima: Fix use-after-free on a dentry's dname.name 801d64177faa crypto: hisilicon/qm - inject error before stopping queue 1b5691014f30 ocfs2: Revert "ocfs2: fix the la space leak when unmounting an ocfs2 volume" c5cb98554c4c drm/amd/display: Check BIOS images before it is used b3cdb9b9f815 mmc: mtk-sd: Fix error handle of probe function 85e50b4f9896 xhci: dbc: Fix STALL transfer event handling fbab85323192 mm/damon/vaddr: fix issue in damon_va_evenly_split_region() 9a351255db26 mm/damon/vaddr-test: split a test function having >1024 bytes frame size a3eca3037e70 jffs2: Fix rtime decompressor bd384b04ad19 jffs2: Prevent rtime decompress memory corruption a0e0f67f2fc1 KVM: arm64: vgic-its: Clear ITE when DISCARD frees an ITE fd92260b7f68 KVM: arm64: vgic-its: Clear DTE when MAPD unmaps a device 065e075d438f KVM: arm64: vgic-its: Add a data length check in vgic_its_save_* 9e9f343615c0 Revert "unicode: Don't special case ignorable code points" d7e6934eb736 tracing/eprobe: Fix to release eprobe when failed to add dyn_event 968757f1f45b btrfs: fix missing snapshot drew unlock when root is dead during swap activation 38a4826f1bdf sched/core: Prevent wakeup of ksoftirqd during idle load balance 6aeeac48fc1b sched/fair: Check idle_cpu() before need_resched() to detect ilb CPU turning busy d071dba5ddd2 sched/fair: Add NOHZ balancer flag for nohz.next_balance updates 25fc82f3a868 sched/core: Remove the unnecessary need_resched() check in nohz_csd_func() 7ff5af6bdb1e modpost: Add .irqentry.text to OTHER_SECTIONS 973cfc7ea3f6 modpost: Include '.text.*' in TEXT_SECTIONS d0f2889ec52b misc: eeprom: eeprom_93cx6: Add quirk for extra read clock cycle ee68554d2c03 powerpc/prom_init: Fixup missing powermac #size-cells a7fd78075031 MIPS: Loongson64: DTS: Really fix PCIe port nodes for ls7a da4809b05b65 usb: chipidea: udc: handle USB Error Interrupt if IOC not set 2d98fa2a50b8 i3c: Use i3cdev->desc->info instead of calling i3c_device_get_info() to avoid deadlock a436e75678bf PCI: Add ACS quirk for Wangxun FF5xxx NICs ade2062d5b53 PCI: Add 'reset_subordinate' to reset hierarchy below bridge 67416562ae0d PCI: Detect and trust built-in Thunderbolt chips a6cddf68b340 i3c: mipi-i3c-hci: Mask ring interrupts before ring stop request a365de2fbfbe f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode. c710201af655 nvdimm: rectify the illogical code within nd_dax_probe() ff11b66cf848 pinctrl: qcom-pmic-gpio: add support for PM8937 f7b0fc4b570a scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset bbb47c06f011 scsi: st: Don't modify unknown block number in MTIOCGET b8283d52ed15 leds: class: Protect brightness_show() with led_cdev->led_access mutex 2174bbc235f7 scsi: hisi_sas: Add cond_resched() for no forced preemption model 02cef9720550 tracing: Use atomic64_inc_return() in trace_clock_counter() 7ba51688437b pinctrl: freescale: fix COMPILE_TEST error with PINCTRL_IMX_SCU 8a4534483e02 netpoll: Use rcu_access_pointer() in __netpoll_setup a7b8f71c7a29 net/neighbor: clear error in case strict check is not set 4e83046d2bc9 rocker: fix link status detection in rocker_carrier_init() 565dca66578a ASoC: hdmi-codec: reorder channel allocation list 219960a48771 Bluetooth: hci_core: Fix not checking skb length on hci_acldata_packet dfb3f9d3f602 wifi: brcmfmac: Fix oops due to NULL pointer dereference in brcmf_sdiod_sglist_rw() 0824dcc63580 wifi: ipw2x00: libipw_rx_any(): fix bad alignment 76581147b05c drm/amdgpu: set the right AMDGPU sg segment limitation 53b03a43a881 drm/amdgpu: skip amdgpu_device_cache_pci_state under sriov a3d408870bc1 jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree 9efe72eefd4c jfs: fix array-index-out-of-bounds in jfs_readdir 6676034aa753 jfs: fix shift-out-of-bounds in dbSplit 823d573f5450 jfs: array-index-out-of-bounds fix in dtReadFirst efe1b9bbf356 dma-debug: fix a possible deadlock on radix_lock 081bc4fe23f9 drm/amdgpu: refine error handling in amdgpu_ttm_tt_pin_userptr 905dc479b648 drm/amdgpu: Dereference the ATCS ACPI buffer 80aa90210a7a drm/amdgpu: clear RB_OVERFLOW bit when enabling interrupts for vega20_ih 1d42b11b7bb7 drm/panel: simple: Add Microchip AC69T88A LVDS Display panel b92521c314d2 wifi: ath5k: add PCI ID for Arcadyan devices 61f1b977949b wifi: ath5k: add PCI ID for SX76X 276a473c956f net: inet6: do not leave a dangling sk pointer in inet6_create() 3e8258070b0f net: inet: do not leave a dangling sk pointer in inet_create() 2b46994a6e76 net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() 1fe625f12d09 net: af_can: do not leave a dangling sk pointer in can_create() a8677028dd51 Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create() 132e615bb1d7 af_packet: avoid erroring out after sock_init_data() in packet_create() 3cc92d542384 net/sched: cbs: Fix integer overflow in cbs_set_port_rate() 9681a5217b02 net: ethernet: fs_enet: Use %pa to format resource_size_t 52637f8b7c42 net: fec_mpc52xx_phy: Use %pa to format resource_size_t 8e9f76ddc20c samples/bpf: Fix a resource leak 3caa244323a6 r8169: don't apply UDP padding quirk on RTL8126A 6078d3ca132b drm/radeon/r600_cs: Fix possible int overflow in r600_packet3_check() f632b3be8ee8 drm/mcde: Enable module autoloading 8c715f966406 drm: panel-orientation-quirks: Add quirk for AYA NEO 2 model c9c2cf983dc8 drm/vc4: hvs: Set AXI panic modes for the HVS e497edb8f31e soc: imx8m: Probe the SoC driver as platform driver 0b16b2aa2242 media: cx231xx: Add support for Dexatek USB Video Grabber 1d19:6108 afdfebd9bbe7 media: uvcvideo: Add a quirk for the Kaiweets KTI-W02 infrared camera ea6588abcc15 kcsan: Turn report_filterlist_lock into a raw_spinlock 86680f33461a kselftest/arm64: Don't leak pipe fds in pac.exec_sign_all() d476931a6bbc btrfs: avoid unnecessary device path update for the same device 06a92f810df8 s390/cpum_sf: Handle CPU hotplug remove during sampling ac98b8c10346 epoll: annotate racy check dc02407ea952 iommu/arm-smmu: Defer probe of clients after smmu device bound a9e371e03f08 ocfs2: update seq_file index in ocfs2_dlm_seq_next 951c53931a91 mmc: core: Further prevent card detect during shutdown 47de5d1bf378 mmc: sdhci-pci: Add DMI quirk for missing CD GPIO on Vexia Edu Atla 10 tablet f373a1898175 regmap: detach regmap from dev on regmap_exit 4d03f705e9d7 xsk: fix OOB map writes when deleting elements f9f50a5792a6 dma-buf: fix dma_fence_array_signaled v4 ad34306ac683 bpf: fix OOB devmap writes when deleting elements fb5fee35bdd1 bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again 48eb6e740494 nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry() 87bf3ea841a5 scsi: ufs: core: sysfs: Prevent div by zero 694598a7828d scsi: qla2xxx: Remove check req_sg_cnt should be equal to rsp_sg_cnt ca36d9d53745 scsi: qla2xxx: Fix use after free on unload 1f1cf3940a36 scsi: qla2xxx: Supported speed displayed incorrectly for VPorts 66618696bcbb scsi: qla2xxx: Fix NVMe and NPIV connect issue 7d9f66082b84 scsi: qla2xxx: Fix abort in bsg timeout 1cc00b106611 ALSA: hda/realtek: Add support for Samsung Galaxy Book3 360 (NP730QFG) b89de14c9c80 ALSA: hda/realtek: Enable mute and micmute LED on HP ProBook 430 G8 023ee962a690 ALSA: usb-audio: add mixer mapping for Corsair HS80 1c176f5155ee arm64: ptrace: fix partial SETREGSET for NT_ARM_TAGGED_ADDR_CTRL dbcdadade0c2 tracing: Fix cmp_entries_dup() to respect sort() comparison rules faa0a1975a6f can: dev: can_set_termination(): allow sleeping GPIOs fb17d710c7a4 watchdog: rti: of: honor timeout-sec property 2ed3e3a3ac06 HID: wacom: fix when get product name maybe null pointer eb6a5262ec66 bpf: Fix exact match conditions in trie_get_next_key() 6155fac6d9ae bpf: Handle BPF_EXIST and BPF_NOEXIST for LPM trie c5327720a465 ocfs2: free inode when ocfs2_get_init_inode() fails c8504c0f1f80 drm/v3d: Enable Performance Counters before clearing them cd5106c77d6d spi: mpc52xx: Add cancel_work_sync before module remove 2c84d183a448 tools: Override makefile ARCH variable if defined, but empty 9bc69d38e3b8 ALSA: usb-audio: Notify xrun for low-latency mode 9b9b61c5d0a2 ALSA: pcm: Avoid reference to status->state f0294f444afc ALSA: pcm: Add more disconnection checks at file ops 0d6cd1151e26 tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg ece859aac1d3 drm/sti: Add __iomem for mixer_dbg_mxn's parameter 2bd350f0e74c bpftool: fix potential NULL pointer dereferencing in prog_dump() ca906853f6c7 bpftool: Remove asserts from JIT disassembler 3cbde9287469 serial: amba-pl011: Fix RX stall when DMA is used e3769d2b62d0 serial: amba-pl011: Use port lock wrappers 9f0ce8feecb9 dt-bindings: serial: rs485: Fix rs485-rts-delay property e9583ac84945 dt_bindings: rs485: Correct delay values ad4dfa7ea7f5 gpio: grgpio: Add NULL check in grgpio_probe 7546c60a3786 gpio: grgpio: use a helper variable to store the address of ofdev->dev b65958284401 geneve: do not assume mac header is set in geneve_xmit_skb() c20f91bd9395 ethtool: Fix wrong mod state in case of verbose and no_mask bitset 59a59da8de47 netfilter: nft_set_hash: skip duplicated elements pending gc run 0e67805e805c netfilter: ipset: Hold module reference while requesting a module c7d644f76949 net: sched: fix erspan_opt settings in cls_flower 4fe517643f52 igb: Fix potential invalid memory access in igb_init_module() d7804000d8b9 net/qed: allow old cards not supporting "num_images" to work f502a88fdd41 net/smc: fix LGR and link use-after-free issue ebfee3e153f6 net/smc: Limit backlog connections d2a4894f2385 tipc: Fix use-after-free of kernel socket in cleanup_bearer(). bc3d4423def1 dccp: Fix memory leak in dccp_feat_change_recv 0b8903e6c881 net/ipv6: release expired exception dst cached in socket 4199dd78a598 can: j1939: j1939_session_new(): fix skb reference counting c6e778901d00 net: hsr: avoid potential out-of-bound access in fill_frame_info() f0f627fd6af2 net/sched: tbf: correct backlog statistic for GSO packets fb09c0cc058b ptp: Add error handling for adjfine callback in ptp_clock_adjtime 36a9d94dac28 netfilter: x_tables: fix LED ID check in led_tg_check() d6e1776f51c9 ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() 6e2c9e417ef7 can: ems_usb: ems_usb_rx_err(): fix {rx,tx}_errors statistics 1ed979b833df can: sun4i_can: sun4i_can_err(): fix {rx,tx}_errors statistics c56112f3e709 can: ifi_canfd: ifi_canfd_handle_lec_err(): fix {rx,tx}_errors statistics dd3ef4edcc89 can: m_can: m_can_handle_lec_err(): fix {rx,tx}_errors statistics 46e062d62674 can: sun4i_can: sun4i_can_err(): call can_change_state() even if cf is NULL 48d8223ff178 can: c_can: c_can_handle_bus_err(): update statistics if skb allocation fails f1977d763c9c can: do not increase rx statistics when generating a CAN rx error message frame f503436c5e3b can: peak_usb: CANFD: store 64-bits hw timestamps c90279de2b99 watchdog: mediatek: Make sure system reset gets asserted in mtk_wdt_restart() 2663884d248d iTCO_wdt: mask NMI_NOW bit for update_no_reboot_bit() call be085075cf2c drm/etnaviv: flush shader L1 cache after user commandstream e98ff67f5a68 drm/sti: avoid potential dereference of error pointers f5804567cf96 drm/sti: avoid potential dereference of error pointers in sti_gdp_atomic_check 31c857e7496d drm/sti: avoid potential dereference of error pointers in sti_hqvdp_atomic_check 6a0648f96c3c btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc() 0ab0a3ad24e9 nfsd: fix nfs4_openowner leak when concurrent nfsd4_open occur 6cefcadd34e3 nfsd: make sure exp active before svc_export_show d63f0926b9a7 PCI: rockchip-ep: Fix address translation unit programming 9f3ea5db09b0 dm thin: Add missing destroy_work_on_stack() 23af63a55bf5 ovl: properly handle large files in ovl_security_fileattr b0c349a65c16 PCI: keystone: Add link up check to ks_pcie_other_map_bus() 0cb21f1ea3a2 i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs() a32d0e136664 scsi: ufs: exynos: Fix hibern8 notify callbacks 7bb9fa6fe600 util_macros.h: fix/rework find_closest() macros ca687fdce5b9 s390/entry: Mark IRQ entries to fix stack depot warnings 68e79b848196 ad7780: fix division by zero in ad7780_write_raw() d2b85ce0561f btrfs: ref-verify: fix use-after-free after invalid ref action c71d114ef68c btrfs: add a sanity check for btrfs root in btrfs_search_slot() 6e2ac5f585a0 btrfs: add might_sleep() annotations ab6cfcf8ed2c quota: flush quota_release_work upon quota writeback 7320429e48cd xfs: remove unknown compat feature check in superblock write validation bac5a74c31c2 xfs: fix log recovery when unknown rocompat bits are set 584754f983d3 ASoC: fsl_micfil: fix the naming style for mask definition c3f4f4547fb2 sh: intc: Fix use-after-free bug in register_intc_controller() fe6cbf0b2ac3 sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport f211501cfc2b SUNRPC: Replace internal use of SOCKWQ_ASYNC_NOSPACE 197b613c9080 sunrpc: remove unnecessary test in rpc_task_set_client() 7338c4377742 nfs: ignore SB_RDONLY when mounting nfs 14d02aec5898 modpost: remove incorrect code in do_eisa_entry() 60658fdb6540 rtc: ab-eoz9: don't fail temperature reads on undervoltage notification 4950408793b1 9p/xen: fix release of IRQ db94e06c24cd 9p/xen: fix init sequence df2a7aa342f1 block: return unsigned int from bdev_io_min b7836529e059 jffs2: fix use of uninitialized variable 4d9807048b85 ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit b1ee0aa4945c ubi: fastmap: Fix duplicate slab cache names while attaching 2b19d2fd58be ubifs: Correct the total block count by deducting journal reservation 246f621d3639 rtc: check if __rtc_read_time was successful in rtc_timer_do_work() 7c6098bdb62a rtc: abx80x: Fix WDT bit position of the status register 3b28fb1376aa rtc: st-lpc: Use IRQF_NO_AUTOEN flag in request_irq() 2ab9639f16b0 NFSv4.0: Fix a use-after-free problem in the asynchronous open() fcf32ea8193f um: Always dump trace for specified task in show_stack a6294d601075 um: Fix the return value of elf_core_copy_task_fpregs 1bd118c5f887 um: Fix potential integer overflow during physmem setup f5872a2a84ec rpmsg: glink: Propagate TX failures in intentless mode as well c7dac3af57e3 SUNRPC: make sure cache entry active before cache_show 842f1c27a1ae NFSD: Prevent a potential integer overflow f78318f70e3c lib: string_helpers: silence snprintf() output truncation warning 0247da93bf62 usb: dwc3: gadget: Fix looping of queued SG entries 893f9ea3f6f1 usb: dwc3: gadget: Fix checking for number of TRBs left bc3c34362bef ALSA: hda/realtek: Apply quirk for Medion E15433 0ac6cd6133a1 ALSA: hda/realtek: Fix Internal Speaker and Mic boost of Infinix Y4 Max ad78a3a11e66 ALSA: hda/realtek: Set PCBeep to default value for ALC274 8c50311d8ab0 ALSA: hda/realtek: Update ALC225 depop procedure 8799f4332a9f ALSA: pcm: Add sanity NULL check for the default mmap fault handler 150dff3e1bf7 media: v4l2-core: v4l2-dv-timings: check cvt/gtf result 41979fbb7ced soc: fsl: rcpm: fix missing of_node_put() in copy_ippdexpcr1_setting() ed228b74d8a5 media: wl128x: Fix atomicity violation in fmc_send_cmd() 20082e2e8b79 HID: wacom: Interpret tilt data from Intuos Pro BT as signed values bb2f15b5222f block: fix ordering between checking BLK_MQ_S_STOPPED request adding 5d2e9a42b1fd arm64: tls: Fix context-switching of tpidrro_el0 when kpti is enabled e2b91997db28 sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK bef9a2835011 um: vector: Do not use drvdata in release c52effe58215 serial: 8250: omap: Move pm_runtime_get_sync 1635d9a0ff1b um: net: Do not use drvdata in release 5727343348f3 um: ubd: Do not use drvdata in release 3b22047378ef ubi: wl: Put source PEB into correct list if trying locking LEB failed a162b111ff1a platform/chrome: cros_ec_typec: fix missing fwnode reference decrement bc846c0be8a4 cpufreq: mediatek-hw: Fix wrong return value in mtk_cpufreq_get_cpu_power() e6e42c57cee9 mtd: spi-nor: core: replace dummy buswidth from addr to data 6827966f6953 spi: Fix acpi deferred irq probe e67471437ae9 netfilter: ipset: add missing range check in bitmap_ip_uadt 9f2d8f3e813d gpio: exar: set value when external pull-up or pull-down is present 283211911b42 Revert "serial: sh-sci: Clean sci_ports[0] after at earlycon exit" 4b14ac9e73bf serial: sh-sci: Clean sci_ports[0] after at earlycon exit e2e286306b67 Revert "usb: gadget: composite: fix OS descriptors w_value logic" 479795371221 driver core: bus: Fix double free in driver API bus_register() 3a0c02f550c5 usb: xhci: Fix TD invalidation under pending Set TR Dequeue 2e891a42e75e Bluetooth: Fix type of len in rfcomm_sock_getsockopt{,_old}() 1d1e618c1706 exfat: fix uninit-value in __exfat_get_dentry_set 48c335245371 locking/lockdep: Avoid creating new name string literals in lockdep_set_subclass() 6bdb3907d50d tty: ldsic: fix tty_ldisc_autoload sysctl's proc_handler 5354599855a9 apparmor: test: Fix memory leak for aa_unpack_strdup() 8797b7712de7 comedi: Flush partial mappings in error case 1484fdc59e04 fsnotify: fix sending inotify event with unexpected filename 41bbb1eb996b PCI: Fix use-after-free of slot->bus on hot remove 227fde8a27f7 KVM: arm64: Ignore PMCNTENSET_EL0 while checking for overflow status 4fe0d9228226 powerpc/pseries: Fix KVM guest detection for disabling hardlockup detector a304c1412210 crypto: x86/aegis128 - access 32-bit arguments as 32-bit dc0c28b7f98f perf/x86/intel/pt: Fix buffer full but size is 0 case f00012d5bf0c ASoC: codecs: Fix atomicity violation in snd_soc_component_get_drvdata() 27a93c45e16a jfs: xattr: check invalid xattr size more strictly 8d72b5c93360 ext4: fix FS_IOC_GETFSMAP handling 519320ef836b ext4: supress data-race warnings in ext4_free_inodes_{count,set}() 9887d859cd60 ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices ca0d15ee5a68 soc: qcom: socinfo: fix revision check in qcom_socinfo_probe() 9b26540820e5 ASoC: Intel: sst: Fix used of uninitialized ctx to log an error 13327d78229f Revert "drivers: clk: zynqmp: update divider round rate logic" 3504696ecfb6 usb: ehci-spear: fix call balance of sehci clk handling routines ab011f7439d9 ALSA: usb-audio: Fix out of bounds reads when finding clock sources e8823e6ff313 xen: Fix the issue of resource not being properly released in xenbus_dev_probe() cb645064e081 ksmbd: fix slab-use-after-free in smb3_preauth_hash_rsp dadac97f066a parisc: fix a possible DMA corruption 487b128f07b8 apparmor: fix 'Do simple duplicate message elimination' 3c7355690f37 ALSA: hda/realtek: Update ALC256 depop procedure d148c0956954 counter: stm32-timer-cnt: Add check for clk_enable() 098480edee1b misc: apds990x: Fix missing pm_runtime_disable() f45e6fc02435 USB: chaoskey: Fix possible deadlock chaoskey_list_lock 4fb1375d830d USB: chaoskey: fail open after removal 5f6c28cbd995 usb: yurex: make waiting on yurex_write interruptible dc26c8db0837 usb: using mutex lock and supporting O_NONBLOCK flag in iowarrior_read() bc2dbad38537 iio: light: al3010: Fix an error handling path in al3010_probe() 2dcc86fefe09 tcp: Fix use-after-free of nreq in reqsk_timer_handler(). dcacfcfe20cc bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down 16aa78edf6dd net: hsr: fix hsr_init_sk() vs network/transport headers. d24b2fa24789 spi: atmel-quadspi: Fix register name in verbose logging function c33db53e40e1 octeontx2-af: RPM: Fix mismatch in lmac type 0be9f9c52e29 net: stmmac: dwmac-socfpga: Set RX watchdog interrupt as broken c3c572dd294d marvell: pxa168_eth: fix call balance of pep->clk handling routines 0659c6de7b98 net: mdio-ipq4019: add missing error check bbc697882231 net: usb: lan78xx: Fix refcounting and autosuspend on invalid WoL configuration 28d185df039a tg3: Set coherent DMA mask bits to 31 for BCM57766 chipsets d211ad1209bc net: usb: lan78xx: Fix memory leak on device unplug by freeing PHY device 3317641dac2d power: supply: bq27xxx: Fix registers of bq27426 a2cd5d322d22 power: supply: core: Remove might_sleep() from power_supply_put() bd87598c6c5b fs_parser: update mount_api doc to match function signature 9567bd34aa3b vfio/pci: Properly hide first-in-list PCIe extended capability dc2144cfefff selftests/mount_setattr: Fix failures on 64K PAGE_SIZE kernels 6293d3df287d vdpa/mlx5: Fix suboptimal range on iotlb iteration fb71f1788624 hwmon: (tps23861) Fix reporting of negative temperatures b6a394fe4c6b NFSD: Fix nfsd4_shutdown_copy() a12c897adf40 svcrdma: fix miss destroy percpu_counter in svc_rdma_proc_init() 57dee363185b sunrpc: simplify two-level sysctl registration for svcrdma_parm_table d7892d68ee3c NFSD: Cap the number of bytes copied by nfs4_reset_recoverydir() c5d90f930274 NFSD: Prevent NULL dereference in nfsd4_process_cb_update() 74b5756de732 remoteproc: qcom_q6v5_mss: Re-order writes to the IMEM region 3dbb7e68669d rpmsg: glink: use only lower 16-bits of param2 for CMD_OPEN name length 04fcb57ac0fe rpmsg: glink: Fix GLINK command prefix e74022642291 rpmsg: glink: Send READ_NOTIFY command in FIFO full case d2e0ae595a3a rpmsg: glink: Add TX_DATA_CONT command while sending 5f77ee6fd99d perf trace: Avoid garbage when not printing a syscall's arguments e3d8ded16712 perf trace: Do not lose last events in a race 21e1cf688fb0 svcrdma: Address an integer overflow 3ffaa3205380 m68k: coldfire/device.c: only build FEC when HW macros are defined 8d4dcba03745 m68k: mcfgpio: Fix incorrect register offset for CONFIG_M5441x 8f61c0161f8e perf trace: avoid garbage when not printing a trace event's arguments 4bd3d783be92 f2fs: check curseg->inited before write_sum_page in change_curseg a76172963ea2 f2fs: remove the unused flush argument to change_curseg 6bd8aa76978d f2fs: open code allocate_segment_by_default 634ffe866196 f2fs: remove struct segment_allocation default_salloc_ops 3fd2fc9282dc f2fs: fix the wrong f2fs_bug_on condition in f2fs_do_replace_block b5cf7ba111c2 PCI: cpqphp: Fix PCIBIOS_* return value confusion 48597c484b82 PCI: cpqphp: Use PCI_POSSIBLE_ERROR() to check config reads 1784ec80bd1c perf probe: Correct demangled symbols in C++ program 24e19b5f3511 perf probe: Fix libdw memory leak 403efb4457c0 PCI: Fix reset_method_store() memory leak 656af7b3dcf1 perf cs-etm: Don't flush when packet_queue fills up 8ac9fbe43789 mailbox: arm_mhuv2: clean up loop in get_irq_chan_comb() 246896417a0e pinctrl: k210: Undef K210_PC_DEFAULT 1b26918fd849 clk: clk-axi-clkgen: make sure to enable the AXI bus clock 5a254ffef286 dt-bindings: clock: axi-clkgen: include AXI clk f4fbd70e15fa fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem() 038e1d56b252 fbdev/sh7760fb: Alloc DMA memory from hardware device 7f5355199d21 powerpc/kexec: Fix return of uninitialized variable 17248fdbe3ca powerpc/sstep: make emulate_vsx_load and emulate_vsx_store static 8c966150d5ab ocfs2: fix uninitialized value in ocfs2_file_read_iter() 35f5b68f63aa RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg() ef0613269a4f RDMA/hns: Fix out-of-order issue of requester when setting FENCE bb8b45883eb0 scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb() 64654bf5efb3 scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb() 59a4088829bc scsi: fusion: Remove unused variable 'rc' e76181a5be90 scsi: bfa: Fix use-after-free in bfad_im_module_exit() 94c5f05270df mfd: rt5033: Fix missing regmap_del_irq_chip() 3e4ff2af1b0a clk: imx: clk-scu: fix clk enable state save and restore 55eb217f8f80 clk: imx: lpcg-scu: SW workaround for errata (e10858) 6ce29bc3bb9f RDMA/bnxt_re: Check cqe flags to know imm_data vs inv_irkey f6ec13366875 powerpc/pseries: Fix dtl_access_lock to be a rw_semaphore e0a470b5733c powerpc/mm/fault: Fix kfence page fault reporting 5fe7709251e3 mtd: rawnand: atmel: Fix possible memory leak b2073db65ab3 cpufreq: loongson2: Unregister platform_driver on failure bb6642d4b313 mfd: intel_soc_pmic_bxtwc: Use IRQ domain for PMIC devices da498e02c92e mfd: intel_soc_pmic_bxtwc: Use IRQ domain for TMU device 23230ac3c5ca mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device 91cee88255a3 mfd: intel_soc_pmic_bxtwc: Use dev_err_probe() a82dbec6e882 mfd: da9052-spi: Change read-mask to write-mask cac4995c03fe mfd: tps65010: Use IRQF_NO_AUTOEN flag in request_irq() to fix race af36ccb8f82d powerpc/vdso: Flag VDSO64 entry points as functions 45b1d10ce84f pinctrl: zynqmp: drop excess struct member description aba170f58f64 trace/trace_event_perf: remove duplicate samples on the first tracepoint event 6694f7acd625 bpf: fix recursive lock when verdict program return SK_PASS 0d2ad72d100f wireguard: selftests: load nf_conntrack if not present d425e975c161 netpoll: Use rcu_access_pointer() in netpoll_poll_lock a9584c897d1c Bluetooth: fix use-after-free in device_for_each_child() 86bd0ba393a3 driver core: Introduce device_find_any_child() helper b889a7d68d7e ALSA: 6fire: Release resources at card release cadf1d8e9ddc ALSA: caiaq: Use snd_card_free_when_closed() at disconnection 9a48bd2184b1 ALSA: us122l: Use snd_card_free_when_closed() at disconnection befcca177752 ALSA: usx2y: Use snd_card_free_when_closed() at disconnection 8772cba76574 net: rfkill: gpio: Add check for clk_enable() 1bda953ed5bc drm/amdkfd: Fix wrong usage of INIT_WORK() 1d63ab86e155 selftests: net: really check for bg process completion 46087de50376 bpf, sockmap: Fix sk_msg_reset_curr e1f54c61c4c9 bpf, sockmap: Several fixes to bpf_msg_pop_data 0f8db9b36930 bpf, sockmap: Several fixes to bpf_msg_push_data 7073d9004fff selftests/bpf: Add push/pop checking for msg_verify_data in test_sockmap 145edbd2ff19 selftests/bpf: Fix total_bytes in msg_loop_rx in test_sockmap 8468e42e5bc2 selftests, bpf: Add one test for sockmap with strparser d0e5847929a2 selftests/bpf: Fix SENDPAGE data logic in test_sockmap 72fb93bb48b4 selftests/bpf: Add txmsg_pass to pull/push/pop in test_sockmap c99fd5911e27 netlink: typographical error in nlmsg_type constants definition 43950c95ef8d netfilter: nf_tables: must hold rcu read lock while iterating object type list 7ffeda67d366 netfilter: nf_tables: skip transaction if update object is not implemented 65aec8dc425d drm/msm/dpu: cast crtc_clk calculation to u64 in _dpu_core_perf_calc_clk() 46b8e788c49d wifi: wfx: Fix error handling in wfx_core_init() 940389e96d99 drm/etnaviv: hold GPU lock across perfmon sampling d4ce36476c65 drm/etnaviv: fix power register offset on GC300 bef66f303ed8 drm/etnaviv: Request pages from DMA32 zone on addressing_limited ac378560f90a drm/msm/adreno: Use IRQF_NO_AUTOEN flag in request_irq() 584fb280f30d drm/panfrost: Remove unused id_mask from struct panfrost_model a374e7e79fbd octeontx2-pf: handle otx2_mbox_get_rsp errors in cn10k.c 55c41b97001a octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c 785c6758ea32 octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_common.c dd54e632bed9 drm: fsl-dcu: enable PIXCLK on LS1021A 581261b2d6fd wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan() 7f23fb2e0a15 selftests/bpf: Fix txmsg_redir of test_txmsg_pull in test_sockmap f1116a9d236e selftests/bpf: Fix msg_verify_data in test_sockmap 18f1c9fd9376 drm/bridge: tc358767: Fix link properties discovery e69c5ebfb900 netdevsim: copy addresses for both in and out paths 08c307552119 netdevsim: rely on XFRM state direction instead of flags 7f6afb1b33fd xfrm: store and rely on direction to construct offload flags e4426baa9aa3 xfrm: rename xfrm_state_offload struct to allow reuse ded61e552767 libbpf: fix sym_is_subprog() logic for weak global subprogs a6fee1be65aa bpf: Fix the xdp_adjust_tail sample prog issue 4e0e9e7af5f7 libbpf: Fix output .symtab byte-order during linking 441bbc0cf7fb drm/bridge: anx7625: Drop EDID cache on bridge power off 363e427097c7 ASoC: dt-bindings: mt6359: Update generic node name and dmic-mode f5558e6b5cbe ASoC: fsl_micfil: fix regmap_write_bits usage 0832e6e657a1 ASoC: fsl_micfil: use GENMASK to define register bit fields 6869a23070c9 ASoC: fsl_micfil: do not define SHIFT/MASK for single bits a20141b2a4f8 ASoC: fsl_micfil: Drop unnecessary register read ffa8a4e83c5d dt-bindings: vendor-prefixes: Add NeoFidelity, Inc 26af2cca4179 wifi: ath10k: fix invalid VHT parameters in supported_vht_mcs_rate_nss2 4b92467725dc wifi: ath10k: fix invalid VHT parameters in supported_vht_mcs_rate_nss1 6887f9f41267 drm/v3d: Address race-condition in MMU flush 89267ef694d0 drm/imx/ipuv3: Use IRQF_NO_AUTOEN flag in request_irq() 2277397e711a drm/imx/dcss: Use IRQF_NO_AUTOEN flag in request_irq() 28e6151ccec4 wifi: mwifiex: Use IRQF_NO_AUTOEN flag in request_irq() 4f5e6866acfe wifi: p54: Use IRQF_NO_AUTOEN flag in request_irq() 4e3931ffa904 drm/omap: Fix locking in omap_gem_new_dmabuf() 53e1ad912a64 drm/omap: Fix possible NULL dereference 8965db7fe2e9 wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service() 6a806399e4f5 drm/mm: Mark drm_mm_interval_tree*() functions with __maybe_unused 38c3f8acde76 platform/x86: panasonic-laptop: Return errno correctly in show callback 0f7f31aaf613 platform/x86: panasonic-laptop: Replace snprintf in show functions with sysfs_emit 4676e5044404 media: atomisp: Add check for rgby_data memory allocation failure 6f8f96ab93f7 media: atomisp: remove #ifdef HAS_NO_HMEM 8aa2da2fd911 media: venus: provide ctx queue lock for ioctl synchronization 9c704cd7e318 venus: venc: add handling for VIDIOC_ENCODER_CMD 06ad3f4b0bed media: venus : Addition of support for VIDIOC_TRY_ENCODER_CMD f7edaca4f66a media: venus : Addition of EOS Event support for Encoder 745e6d8bbe6a media: venus: vdec: decoded picture buffer handling during reconfig sequence b75d87df0f31 media: venus: venc: Use pmruntime autosuspend 2a5b8de6fcb9 firmware: arm_scpi: Check the DVFS OPP count returned by the firmware ec0b5a3454fe selftests/resctrl: Protect against array overrun during iMC config parsing d9f878fd8b99 arm64: dts: mediatek: mt8183-kukui-jacuzzi: Add supplies for fixed regulators 65816651d9c4 arm64: dts: mediatek: mt8183-kukui-jacuzzi: Fix DP bridge supply names c84daf3b325b arm64: dts: mt8183: jacuzzi: Move panel under aux-bus 03dd02b207dd arm64: dts: mt8183: jacuzzi: remove unused ddc-i2c-bus 7de5804460c3 regmap: irq: Set lockdep class for hierarchical IRQ domains c4908741911d spi: zynqmp-gqspi: Undo runtime PM changes at driver exit time​ 5f116d12c0ef spi: tegra210-quad: Avoid shift-out-of-bounds 6a6908aa03c9 pmdomain: ti-sci: Add missing of_node_put() for args.np 4869448ba8cc ARM: dts: cubieboard4: Fix DCDC5 regulator constraints 504ee6496d11 pwm: imx27: Workaround of the pwm output bug when decrease the duty cycle 189227d2d8ff arm64: dts: mt8183: Damu: add i2c2's i2c-scl-internal-delay-ns 3b16dcf7241f arm64: dts: mt8183: burnet: add i2c2's i2c-scl-internal-delay-ns ec8b64d666a3 arm64: dts: mt8183: fennel: add i2c2's i2c-scl-internal-delay-ns 973c859752cb cgroup/bpf: only cgroup v2 can be attached by bpf programs d4cc5a87c24d Revert "cgroup: Fix memory leak caused by missing cgroup_bpf_offline" f275bbe332f7 arm64: dts: mediatek: mt8173-elm-hana: Add vdd-supply to second source trackpad 50497379f82a arm64: dts: mt8183: kukui: Fix the address of eeprom at i2c4 be613fc3c24d arm64: dts: mt8183: krane: Fix the address of eeprom at i2c4 8d1e8505859f tpm: fix signed/unsigned bug when checking event logs 2d88cf062b86 mmc: mmc_spi: drop buggy snprintf() f4b7bf5a50f1 soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get() f34d172307f9 soc: ti: smartreflex: Use IRQF_NO_AUTOEN flag in request_irq() 9f5a2db6be13 spi: spi-fsl-lpspi: Use IRQF_NO_AUTOEN flag in request_irq() 97e793af8715 spi: spi-fsl-lpspi: downgrade log level for pio mode cd1c59275de4 clocksource/drivers:sp804: Make user selectable ede7084c9071 kcsan, seqlock: Fix incorrect assumption in read_seqbegin() 730eb858dff7 kcsan, seqlock: Support seqcount_latch_t 2f7e3eac5fee seqlock/latch: Provide raw_read_seqcount_latch_retry() 6c1edccbc980 timekeeping: Consolidate fast timekeeper cee8f85696a8 time: Fix references to _msecs_to_jiffies() handling of values da7e49db34c5 crypto: cavium - Fix an error handling path in cpt_ucode_load_fw() 4ea3e3b761e3 crypto: bcm - add error check in the ahash_hmac_init function 5e959bf234d0 crypto: caam - add error check to caam_rsa_set_priv_key_form c5c64ff34a9d ACPI: CPPC: Fix _CPC register setting issue 029ac07bb92d EDAC/igen6: Avoid segmentation fault on module unload d465ea267167 crypto: cavium - Fix the if condition to exit loop after timeout 96001f52ae8c crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY d3008b4ea1d9 EDAC/fsl_ddr: Fix bad bit shift operations 20c2fe56889b thermal: core: Initialize thermal zones before registering them 06de6e9bc818 crypto: qat - remove faulty arbiter config reset 4ad7033de109 EDAC/bluefield: Fix potential integer overflow 945c76cad892 firmware: google: Unregister driver_info on failure 6187727e57ae crypto: caam - Fix the pointer passed to caam_qi_shutdown() 06cbfbb13ac8 hfsplus: don't query the device logical block size multiple times b5d785fb2000 s390/syscalls: Avoid creation of arch/arch/ directory 578b3297aca6 acpi/arm64: Adjust error handling procedure in gtdt_parse_timer_block() 9529c7a62042 arm64: fix .data.rel.ro size assertion when CONFIG_LTO_CLANG 4fb897945111 m68k: mvme147: Reinstate early console c7bf342937fa m68k: mvme16x: Add and use "mvme16x.h" e2097596d34f m68k: mvme147: Fix SCSI controller IRQ numbers 869cf50b9c9d nvme-pci: fix freeing of the HMB descriptor table 6983b8ac787b initramfs: avoid filename buffer overrun 2be0ca62b8e2 mips: asm: fix warning when disabling MIPS_FP_SUPPORT 41219c147df8 brd: defer automatic disk creation until module initialization succeeds 60f89db56246 brd: remove brd_devices_mutex mutex c5979734eda3 s390/cio: Do not unregister the subchannel based on DNV d7a08f5f80ff kselftest/arm64: mte: fix printf type warnings about longs 38002ab1bd42 x86/barrier: Do not serialize MSR accesses on AMD 061479ca14af nvme: fix metadata handling in nvme-passthrough 01cdddde39b0 cifs: Fix buffer overflow when parsing NFS reparse points b661948bac86 rcu-tasks: Idle tasks on offline CPUs are in quiescent states 7251463f4bd0 ipmr: Fix access to mfc_cache_list without lock held 07df4a754746 ARM: 9420/1: smp: Fix SMP for xip kernels 2b55ec8d9c49 ALSA: usb-audio: Fix Yamaha P-125 Quirk Entry affd04aaef11 proc/softirqs: replace seq_printf with seq_put_decimal_ull_width 3727c0bf74eb ASoC: stm: Prevent potential division by zero in stm32_sai_get_clk_div() 80c35a870ea3 ASoC: stm: Prevent potential division by zero in stm32_sai_mclk_round_rate() 3849d29eef43 can: j1939: fix error in J1939 documentation. ba20a72c5a5f platform/x86: dell-wmi-base: Handle META key Lock/Unlock events 224f87efa087 platform/x86: dell-smbios-base: Extends support to Alienware products 10987691701a regulator: rk808: Add apply_bit for BUCK3 on RK809 cba0338d1831 soc: qcom: Add check devm_kasprintf() returned value d9b04bbae6c0 net: usb: qmi_wwan: add Quectel RG650V 6bdf34883e65 x86/amd_nb: Fix compile-testing without CONFIG_AMD_NB 5e958ced670f ALSA: hda/realtek: Add subwoofer quirk for Infinix ZERO BOOK 13 f78ccffd9eb7 selftests/watchdog-test: Fix system accidentally reset after watchdog-test 8ba9e834ff95 usb: add support for new USB device ID 0x17EF:0x3098 for the r8152 driver 8f6ef43aed11 mac80211: fix user-power when emulating chanctx 069e1d600bdc wifi: iwlwifi: mvm: Use the sync timepoint API in suspend 0b9a2fb8bb27 ASoC: Intel: sst: Support LPE0F28 ACPI HID 96b04a80541e ASoC: Intel: bytcr_rt5640: Add DMI quirk for Vexia Edu Atla 10 tablet 84e961ad2a16 ASoC: Intel: bytcr_rt5640: Add support for non ACPI instantiated codec 31545f4b7cdb NFS: nfs_async_write_reschedule_io must not recurse into the writeback code 44f48eb9a605 mm: resolve faulty mmap_region() error path behaviour 679d3a53eb02 mm: refactor arch_calc_vm_flag_bits() and arm64 MTE handling a08241812f21 mm: unconditionally close VMAs on error 105d04c88e5c mm: avoid unsafe VMA hook invocation when error arises on mmap hook d3f9d88c2c03 mm: revert "mm: shmem: fix data-race in shmem_getattr()" 0a9a182ea5c7 mptcp: cope racing subflow creation in mptcp_rcv_space_adjust 9467c49437e9 NFSD: Never decrement pending_async_copies on error 7267625baf36 NFSD: Initialize struct nfsd4_copy earlier 43e46ee5efc0 NFSD: Limit the number of concurrent async COPY operations 34f200d66c1b NFSD: Async COPY result needs to return a write verifier 24ab9e0cc554 NFSD: initialize copy->cp_clp early in nfsd4_copy for use by trace point ef1e1954d784 media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set 659191444d99 lib/buildid: Fix build ID parsing logic 7a514335cf41 mmc: sunxi-mmc: Fix A100 compatible description 43f79bfcfb09 mmc: sunxi-mmc: Add D1 MMC variant 69434d929adf drm/bridge: tc358768: Fix DSI command tx f701eb601470 Revert "mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K" d904e4d845aa nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint 647f416d31ac ocfs2: fix UBSAN warning in ocfs2_verify_volume() 19c71cdd7797 nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint b8a1d572478b KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN 8fbac997556b KVM: nVMX: Treat vpid01 as current if L2 is active, but with VPID disabled 63a47139dd96 vdpa/mlx5: Fix PA offset with unaligned starting iotlb map 0e04746db2ec ocfs2: uncache inode which has failed entering the group 903d896448c2 mm: fix NULL pointer dereference in alloc_pages_bulk_noprof 6ec06379b8de x86/mm: Fix a kdump kernel failure on SME system when CONFIG_IMA_KEXEC=y a1e3ba952956 ARM: 9419/1: mm: Fix kernel memory mapping for xip kernels 0b99de8bbffc samples: pktgen: correct dev to DEV 882f392d9e36 net/mlx5e: CT: Fix null-ptr-deref in add rule err flow c7b97f9e794d net/mlx5e: kTLS, Fix incorrect page refcounting 5b47c2f47c2f net/mlx5: fs, lock FTE when checking if active 4e47b99a7764 drm/rockchip: vop: Fix a dereferenced before check warning d2fab3d66cc1 netlink: terminate outstanding dump on socket close 7b4ec178bf38 clk: qcom: gcc-qcs404: fix initial rate of GPLL3 c80499741610 leds: lp55xx: Remove redundant test for invalid channel number 03c863749bab iommu/io-pgtable-arm: Fix stage-2 map/unmap for concatenated tables b4f3288f9530 vmstat: call fold_vm_zone_numa_events() before show per zone NUMA event 885109aa0c70 ftrace: Fix regression with module command in stack_trace_filter 749eac5a6687 ovl: Filter invalid inodes with missing lookup function 72ed66623953 media: uvcvideo: Require entities to have a non-zero unique ID 1895f0928d80 media: uvcvideo: Stop stream during unregister 64f72a738864 media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal() 944303ecc9b5 media: gspca: ov534-ov772x: Fix off-by-one error in set_frame_rate() 1cfc844ee3d9 media: venus: Fix pm_runtime_set_suspended() with runtime pm enabled b6208d1567f9 media: ts2020: fix null-ptr-deref in ts2020_probe() f3c4e088ec01 media: imx-jpeg: Ensure power suppliers be suspended before detach them 815d14147068 media: i2c: tc358743: Fix crash in the probe error path when using polling f68bb1210fbe media: imx-jpeg: Set video drvdata before register video device ba57d800592b arm64: dts: allwinner: pinephone: Add mount matrix to accelerometer b5d500042eb3 usb: hcd-pci: remove the action of faking interrupt request 6f0605db50e2 clk: imx: Add check for kcalloc 5b837b9e1543 bpf: Fix the indention issue in grow_stack_state() 42b62697634d cifs: Fix the calling of smb_version_operations::calc_smb_size() b14acf729e9d f2fs: Add inline to f2fs_build_fault_attr() stub 7c317bec311f f2fs: check validation of fault attrs in f2fs_build_fault_attr() 81c12119c23f bpf: Fix accesses to uninit stack slots [ Upstream commit 6b4a64bafd107e521c01eec3453ce94a3fb38529 ] c4fa05422d87 smb: client: fix potential OOB in smb2_dump_detail() 299ef3b5b00b of: module: add buffer overflow check in of_modalias() b8086c3c1548 reiserfs: Avoid touching renamed directory if parent does not change ea091017ef62 ipv6: Fix data races around sk->sk_prot. ff8710da80ee ipv6: annotate some data-races around sk->sk_prot e8c2eafaaa6a tcp: Fix data races around icsk->icsk_af_ops. 8d1bab770956 locking/rwsem: Disable preemption while trying for rwsem lock 7c82dac02886 block, loop: support partitions without scanning 45f504f301d4 bpftool: Fix pretty print dump for maps without BTF loaded 1f24338cb789 jbd2: Drop the merge conflicted hunk e1d0e3c51bde tpm: tis_i2c: Limit write bursts to I2C_SMBUS_BLOCK_MAX (32) bytes 1abe841fe331 tpm: tis_i2c: Limit read bursts to I2C_SMBUS_BLOCK_MAX (32) bytes 6224acfc1d56 tpm: Add flag to use default cancellation policy 1cd19d48fb90 tpm: tis_i2c: Fix sanity check interrupt enable mask a883da132fa8 tpm: Add tpm_tis_i2c backend for tpm_tis_core a742ac8a1c51 tpm: Add tpm_tis_verify_crc to the tpm_tis_phy_ops protocol layer ef495c5f45f2 tpm: Remove read16/read32/write32 calls from tpm_tis_phy_ops 1f3be2e23aa6 gcc-plugins: Reorganize gimple includes for GCC 13 24615a3b932a ata: ahci: fix enum constants for gcc-13 5d6cb145541a net: stmmac: Enable mac_managed_pm phylink config fd93aabb4287 tools/resolve_btfids: Use pkg-config to locate libelf 130f9da78406 tools/resolve_btfids: Build with host flags 00f2f1a782f9 tools/resolve_btfids: Support cross-building the kernel with clang 17776a4ba9c2 tools/resolve_btfids: Install libbpf headers when building 7c9808380d70 libbpf: Make libbpf_version.h non-auto-generated 37ae1ba791ac libbpf: Add LIBBPF_DEPRECATED_SINCE macro for scheduling API deprecations a2667e6d7314 drm/radeon: free iio for atombios when driver shutdown f100c753aa1f powerpc: Fix reschedule bug in KUAP-unlocked user copy da5513f30187 libbpf: Fix build warning on ref_ctr_off 4c5a089621a8 perf python: Account for multiple words in CC 1c5699ee85d4 fs: move S_ISGID stripping into the vfs_*() helpers 838f5d0701d8 fs: add mode_strip_sgid() helper d97172683641 squashfs: provide backing_dev_info in order to disable read-ahead ed037d7be40c irq_work: use kasan_record_aux_stack_noalloc() record callstack 1363bd7dbde3 ixgbevf: add disable link state e5601ae2bd24 ixgbe: add improvement for MDD response functionality caa57cd80575 ixgbe: add the ability for the PF to disable VF link state 16a77bfcc7df Check /dev/console using init_stat() 04574fd5579a tracing/arm: Have max stack tracer handle the case of return address after data 0e51e5717018 gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully 1e6b7da6ddba drivers/base: Fix unsigned comparison to -1 in CPUMAP_FILE_MAX_BYTES 493160901320 mtd_blkdevs: add mtd_table_mutex lock back to blktrans_{open, release} to avoid race condition 04224f725aa3 irqchip/gic-v3-its: Skip HP notifier when no ITS is registered 6f6c2996a81c irqchip/gic-v3-its: Postpone LPI pending table freeing and memreserve 1fa94473423f irqchip/gic-v3-its: Give the percpu rdist struct its own flags field 6013d1ae5feb cert host tools: Stop complaining about deprecated OpenSSL functions efe20512212b init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash a40d2daf2795 pnmtologo: use relocatable file name 3b40d5b41155 of: configfs: remove unused variable overlay_lock 6c085baf1838 tools: use basename to identify file in gen-mach-types 2fca0fd71981 lib/build_OID_registry: fix reproducibility issues 0f586f4ee8ad vt/conmakehash: improve reproducibility a75774679f28 OF: DT-Overlay configfs interface (v8) d179c639b30b x86/boot: Wrap literal addresses in absolute_pointer() 856ec356cf91 ACPI: thermal: drop an always true check 7614af249993 xfs: Fix -Werror=dangling-pointer work-around for older GCC 41470215f97e xfs: Work around GCC 12 -Werror=dangling-pointer for xfs_attr_remote.o 44a445c1922d virtio-pci: Remove wrong address verification in vp_del_vqs() 77aa9e489eaf bpf: Disallow unprivileged bpf by default ebfb1822e9f9 fs/aufs: fixup 5.15.36 fixups 4eba9348d3e2 Revert "Revert "fbdev: Hot-unplug firmware fb devices on forced removal"" 5df6d1b00f95 jbd2: fix use-after-free of transaction_t race 2d83e8196487 jbd2: refactor wait logic for transaction updates into a common function 07a63f760793 netfilter: conntrack: avoid useless indirection during conntrack destruction 4e7122625996 Revert "fbdev: Hot-unplug firmware fb devices on forced removal" 7ba4cb36fd4f rcu: Avoid alloc_pages() when recording stack f78574dee71e kasan: test: silence intentional read overflow warnings d313cb89b6b1 kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC 5e279d5647cc arm64: support page mapping percpu first chunk allocator e5bf16752dca vmalloc: choose a better start address in vm_area_register_early() 660b3d21b46f kasan: test: bypass __alloc_size checks 00aa7573e53a kasan: test: add memcpy test that avoids out-of-bounds write 67becf0b1bd4 kasan: fix tag for large allocations when using CONFIG_SLAB bedf1e033213 workqueue, kasan: avoid alloc_pages() when recording stack 7195b67ce69b kasan: generic: introduce kasan_record_aux_stack_noalloc() bdff763f0e29 kasan: common: provide can_alloc in kasan_save_stack() 51423ebb36ad lib/stackdepot: introduce __stack_depot_save() 85373e66d847 lib/stackdepot: remove unused function argument 5b6cc9b251f3 lib/stackdepot: include gfp.h c9f3902d8069 aufs: reduce overhead for "code present but disabled" use case. b98d189df02c aufs: bugfix, umount passes NULL to ->parse_monolithic() 13b883cbbbd9 aufs standalone: cosmetic, missing copyright sentence 21f8b0d81898 aufs: 5.15.5-20220117 ---> 5.15.5-20220221 6199fd896645 aufs: tiny, headers after fs_context 8ddb40e31c29 aufs: fs_context 7/7, finally remount 69035f71c6fd aufs: fs_context 6/7, now mount bc841b970697 aufs: fs_context 5/7, parse all other mount options 435188053da2 aufs: fs_context 4/7, parse xino options 9af1f1825cbd aufs: fs_context 3/7, parse the branch-management options 1c05eb767f8c aufs: fs_context 2/7, parse "br" mount option a8488f603134 aufs: fs_context 1/7, skelton of the new shceme 8e32e0015564 aufs: pre fs_context, convert a static flag to a macro f90cb4144aec aufs: pre fs_context, support the incomplete sb and sbinfo case 948762ef859c aufs: pre fs_context, convert the type of alloc_sbinfo() 77151a08776b aufs: 5.15.5-20211129 ---> 5.15.5-20220117 2539adbbbe1e aufs: 5.14-20211018 ---> 5.15.5-20211129 7d32b25193c4 aufs: for v5.15-rc1, sync_inode() is gone 66ec0c509225 aufs: for v5.15-rc1, new param 'rcu' for ->get_acl() 69709dc518cd aufs: for v5.15-rc1, no mand-lock anymore ada8fe9543e5 aufs: 5.14-20210906 ---> 5.14-20211018 b77f7f3f394a Revert "aufs: adjust to v5.15 fs changes" 81bdce5b5876 tick/nohz: WARN_ON --> WARN_ON_ONCE to prevent console saturation 97c963889222 sched/isolation: really align nohz_full with rcu_nocbs 871f23ad3627 Revert "ARM: defconfig: Enable ax88796c driver for Exynos boards" ffad0783dd5b ARM: config: multi v7: Regenerate defconifg 5c1e1a1ff2d3 ARM: config: multi v7: Add renamed symbols badaf96564fe ARM: config: multi v7: Clean up enabled by default options 34996040fc9b ARM: config: multi v7: Drop unavailable options 7f685244afb3 powerpc/mm: Switch obsolete dssall to .long 20301aeb1a64 riscv: fix build with binutils 2.38 9df58d070506 powerpc/lib/sstep: fix 'ptesync' build error 720b61fc400b x86_64_defconfig: Fix warnings 02bf23d26bc4 arm64: defconfig: cleanup config options 05914e2c87e5 arm: defconfig: drop unused POWER_AVS option ffb532fa19b9 aufs5: fix build against v5.15.3+ a4b3abf4d96d qemux86: add configuration symbol to select values fee94ee09154 clear_warn_once: add a clear_warn_once= boot parameter 3d8762d900d9 clear_warn_once: bind a timer to written reset value 95faacac47e8 clear_warn_once: expand debugfs to include read support de20c4240018 perf: perf can not parser the backtrace of app in the 32bit system and 64bit kernel. 0e4aacead9c1 perf: x86-32: explicitly include 9ad92c11468e perf: mips64: Convert __u64 to unsigned long long 09e7efe3e68a perf: fix bench numa compilation e79becc44fa6 perf: add SLANG_INC for slang.h b1033b588681 perf: add sgidefs.h to for mips builds cf9db484ac0b perf: change --root to --prefix for python install 7fd052c2c562 perf: add 'libperl not found' warning 27a437cdd469 perf: force include of 3b99d21bec2f fat: don't use obsolete random32 call in namei_vfat a7e9293b506b FAT: Added FAT_NO_83NAME 6fd0e71d9e5c FAT: Add CONFIG_VFAT_NO_CREATE_WITH_LONGNAMES option c379b0d324ae FAT: Add CONFIG_VFAT_FS_NO_DUALNAMES option 538be0fdb124 aufs: adjust to v5.15 fs changes f45da75c8759 aufs5: core 047f57e07e01 aufs5: standalone 029fc15574c8 aufs5: mmap 610d0192ee94 aufs5: base d4e428d0ec5f aufs5: kbuild eb067eca251a yaffs: replace IS_ERR with IS_ERR_OR_NULL to check both ERR and NULL 286af18d0875 yaffs: fix -Wstringop-overread compile warning in yaffs_fix_null_name 24d59a4e26a6 yaffs2: v5.12+ build fixups (not runtime tested) 22c73536d5d7 yaffs: include blkdev.h 506b7251bfb8 yaffs: fix misplaced variable declaration a0e26ff364dc yaffs2: v5.6 build fixups b10b1b2d169e yaffs2: fix memory leak when /proc/yaffs is read ad9adccbb214 yaffs: add strict check when call yaffs_internal_read_super 2e3c3aec8279 yaffs: repair yaffs_get_mtd_device d662538516a7 yaffs: Fix build failure by handling inode i_version with proper atomic API 70a6113ee2c7 yaffs2: fix memory leak in mount/umount 3378e4a9e404 yaffs: Avoid setting any ACL releated xattr ec2284edddef Yaffs:check oob size before auto selecting Yaffs1 c2a49874051c fs: yaffs2: replace CURRENT_TIME by other appropriate apis e9a5105a3e73 yaffs2: adjust to proper location of MS_RDONLY 608807406f13 yaffs2: import git revision b4ce1bb (jan, 2020) 89e660ece42c initramfs: allow an optional wrapper script around initramfs generation b179dbc9aa10 iwlwifi: select MAC80211_LEDS conditionally 3fd5ca3673d0 net/dccp: make it depend on CONFIG_BROKEN (CVE-2020-16119) d1f6edbf0188 arm64/perf: Fix wrong cast that may cause wrong truncation d202fb2caf33 defconfigs: drop obselete options 9a27e3b5f4e7 arm64/perf: fix backtrace for AAPCS with FP enabled e20d8cf019b4 linux-yocto: Handle /bin/awk issues b6d2a3dbbd3a uvesafb: provide option to specify timeout for task completion adb40f1e6a1a uvesafb: print error message when task timeout occurs f280a1ed0962 compiler.h: Undef before redefining __attribute_const__ 4352732f268c vmware: include jiffies.h 7954a677968d Resolve jiffies wrapping about arp 5f28a1035d95 nfs: Allow default io size to be configured. 0d7260ad7106 check console device file on fs when booting 900a12e37e0a mount_root: clarify error messages for when no rootfs found 7b878cbea726 menuconfig,mconf-cfg: Allow specification of ncurses location 6604fc1763b3 modpost: mask trivial warnings 0d294adb09cb kbuild: exclude meta directory from distclean processing a097cdd95a9e powerpc: serialize image targets 5db6ec39a0a3 arm: serialize build targets cbabca27905e crtsavres: fixups for 5.4+ 7fc7656ed403 powerpc/ptrace: Disable array-bounds warning with gcc8 a5faac5a19a2 powerpc: Disable attribute-alias warnings from gcc8 186c54665b67 powerpc: add crtsavres.o to archprepare for kbuild d1ea862964ca powerpc: kexec fix for powerpc64 2ac35b89a0f9 powerpc: Add unwind information for SPE registers of E500 core 2e1c348a28bb mips: vdso: fix 'jalr $t9' crash in vdso code ec57870b303a mips: Kconfig: add QEMUMIPS64 option 6a81b3c08107 4kc cache tlb hazard: tlbp cache coherency 74e3b2a21e54 malta uhci quirks: make allowance for slow 4k(e)c 22e65b63d3b4 arm/Makefile: Fix systemtap b7f1ab59f19e vexpress: Pass LOADADDR to Makefile ce2800c73bf7 arm: ARM EABI socketcall 019d142fd956 ARM: LPAE: Invalidate the TLB for module addresses during translation fault Signed-off-by: Bruce Ashfield Signed-off-by: Steve Sakoman --- .../linux/linux-yocto-rt_5.15.bb | 6 ++--- .../linux/linux-yocto-tiny_5.15.bb | 6 ++--- meta/recipes-kernel/linux/linux-yocto_5.15.bb | 26 +++++++++---------- 3 files changed, 19 insertions(+), 19 deletions(-) diff --git a/meta/recipes-kernel/linux/linux-yocto-rt_5.15.bb b/meta/recipes-kernel/linux/linux-yocto-rt_5.15.bb index 489da2cbc3..00dc8a9c3c 100644 --- a/meta/recipes-kernel/linux/linux-yocto-rt_5.15.bb +++ b/meta/recipes-kernel/linux/linux-yocto-rt_5.15.bb @@ -11,13 +11,13 @@ python () { raise bb.parse.SkipRecipe("Set PREFERRED_PROVIDER_virtual/kernel to linux-yocto-rt to enable it") } -SRCREV_machine ?= "1d8830fba57e4ac3d213ca9c94dc68ac46369d43" -SRCREV_meta ?= "c20b08deed1bb069e2489413e54e7498dba70057" +SRCREV_machine ?= "bc2b7af6f78a15623836fb37d6ff80691e06c199" +SRCREV_meta ?= "65cd92b42128e83bbe4920be8d58d2f44fa0245a" SRC_URI = "git://git.yoctoproject.org/linux-yocto.git;branch=${KBRANCH};name=machine \ git://git.yoctoproject.org/yocto-kernel-cache;type=kmeta;name=meta;branch=yocto-5.15;destsuffix=${KMETA}" -LINUX_VERSION ?= "5.15.173" +LINUX_VERSION ?= "5.15.174" LIC_FILES_CHKSUM = "file://COPYING;md5=6bc538ed5bd9a7fc9398086aedcd7e46" diff --git a/meta/recipes-kernel/linux/linux-yocto-tiny_5.15.bb b/meta/recipes-kernel/linux/linux-yocto-tiny_5.15.bb index 1816b47dfe..e99edda2c3 100644 --- a/meta/recipes-kernel/linux/linux-yocto-tiny_5.15.bb +++ b/meta/recipes-kernel/linux/linux-yocto-tiny_5.15.bb @@ -5,7 +5,7 @@ KCONFIG_MODE = "--allnoconfig" require recipes-kernel/linux/linux-yocto.inc -LINUX_VERSION ?= "5.15.173" +LINUX_VERSION ?= "5.15.174" LIC_FILES_CHKSUM = "file://COPYING;md5=6bc538ed5bd9a7fc9398086aedcd7e46" DEPENDS += "${@bb.utils.contains('ARCH', 'x86', 'elfutils-native', '', d)}" @@ -14,8 +14,8 @@ DEPENDS += "openssl-native util-linux-native" KMETA = "kernel-meta" KCONF_BSP_AUDIT_LEVEL = "2" -SRCREV_machine ?= "0d6b798bb6a1e1ed73032fa5c45f1d599593d21e" -SRCREV_meta ?= "c20b08deed1bb069e2489413e54e7498dba70057" +SRCREV_machine ?= "ea64fb5c8f628c8c5aa1cbc817999eb53994e949" +SRCREV_meta ?= "65cd92b42128e83bbe4920be8d58d2f44fa0245a" PV = "${LINUX_VERSION}+git${SRCPV}" diff --git a/meta/recipes-kernel/linux/linux-yocto_5.15.bb b/meta/recipes-kernel/linux/linux-yocto_5.15.bb index 9e5c21f407..1e725b77af 100644 --- a/meta/recipes-kernel/linux/linux-yocto_5.15.bb +++ b/meta/recipes-kernel/linux/linux-yocto_5.15.bb @@ -14,24 +14,24 @@ KBRANCH:qemux86 ?= "v5.15/standard/base" KBRANCH:qemux86-64 ?= "v5.15/standard/base" KBRANCH:qemumips64 ?= "v5.15/standard/mti-malta64" -SRCREV_machine:qemuarm ?= "c1028e815302012e33e3249ebea99560d27fb35d" -SRCREV_machine:qemuarm64 ?= "2dc4d24d695ca843b072af76d0b256d0b20c490b" -SRCREV_machine:qemumips ?= "a325e8ea9f13e35d9685d4efb5361973532c52cb" -SRCREV_machine:qemuppc ?= "3c68be3fd502a5d9772f734c61e8325c47bbe8cb" -SRCREV_machine:qemuriscv64 ?= "3ac5c02a471d41782f960090c5d5caab80dc6cdc" -SRCREV_machine:qemuriscv32 ?= "3ac5c02a471d41782f960090c5d5caab80dc6cdc" -SRCREV_machine:qemux86 ?= "3ac5c02a471d41782f960090c5d5caab80dc6cdc" -SRCREV_machine:qemux86-64 ?= "3ac5c02a471d41782f960090c5d5caab80dc6cdc" -SRCREV_machine:qemumips64 ?= "e5704819da97878c8f22425f8f7b271449935894" -SRCREV_machine ?= "3ac5c02a471d41782f960090c5d5caab80dc6cdc" -SRCREV_meta ?= "c20b08deed1bb069e2489413e54e7498dba70057" +SRCREV_machine:qemuarm ?= "2747d1f29f22840b70fddd943e1911e8c5352001" +SRCREV_machine:qemuarm64 ?= "78975933bbeb0646ca0d105d60f85d38714f25f7" +SRCREV_machine:qemumips ?= "f26a7a4c9172032ef25c456022f0cc6ca4312ea2" +SRCREV_machine:qemuppc ?= "0ad1f117d7b6e1c3c35c454fa50b9904f7b72e9d" +SRCREV_machine:qemuriscv64 ?= "a340a82f59d3e1ea79ae5e9935387b7ff3bcbe28" +SRCREV_machine:qemuriscv32 ?= "a340a82f59d3e1ea79ae5e9935387b7ff3bcbe28" +SRCREV_machine:qemux86 ?= "a340a82f59d3e1ea79ae5e9935387b7ff3bcbe28" +SRCREV_machine:qemux86-64 ?= "a340a82f59d3e1ea79ae5e9935387b7ff3bcbe28" +SRCREV_machine:qemumips64 ?= "e8b960dc22b8aa3eaf9621091e14d84e25c15b6a" +SRCREV_machine ?= "a340a82f59d3e1ea79ae5e9935387b7ff3bcbe28" +SRCREV_meta ?= "65cd92b42128e83bbe4920be8d58d2f44fa0245a" # set your preferred provider of linux-yocto to 'linux-yocto-upstream', and you'll # get the /base branch, which is pure upstream -stable, and the same # meta SRCREV as the linux-yocto-standard builds. Select your version using the # normal PREFERRED_VERSION settings. BBCLASSEXTEND = "devupstream:target" -SRCREV_machine:class-devupstream ?= "0a51d2d4527b43c5e467ffa6897deefeaf499358" +SRCREV_machine:class-devupstream ?= "963e654022cc32d72c184b4ab86a76226b3e3b8d" PN:class-devupstream = "linux-yocto-upstream" KBRANCH:class-devupstream = "v5.15/base" @@ -39,7 +39,7 @@ SRC_URI = "git://git.yoctoproject.org/linux-yocto.git;name=machine;branch=${KBRA git://git.yoctoproject.org/yocto-kernel-cache;type=kmeta;name=meta;branch=yocto-5.15;destsuffix=${KMETA}" LIC_FILES_CHKSUM = "file://COPYING;md5=6bc538ed5bd9a7fc9398086aedcd7e46" -LINUX_VERSION ?= "5.15.173" +LINUX_VERSION ?= "5.15.174" DEPENDS += "${@bb.utils.contains('ARCH', 'x86', 'elfutils-native', '', d)}" DEPENDS += "openssl-native util-linux-native" From patchwork Tue Jan 7 18:08:37 2025 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Steve Sakoman X-Patchwork-Id: 55160 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id D2DD7E7719B for ; Tue, 7 Jan 2025 18:09:23 +0000 (UTC) Received: from mail-pl1-f174.google.com (mail-pl1-f174.google.com [209.85.214.174]) by mx.groups.io with SMTP id smtpd.web10.110.1736273358693696825 for ; Tue, 07 Jan 2025 10:09:18 -0800 Authentication-Results: mx.groups.io; dkim=pass header.i=@sakoman-com.20230601.gappssmtp.com header.s=20230601 header.b=Z9te9qux; spf=softfail (domain: sakoman.com, ip: 209.85.214.174, mailfrom: steve@sakoman.com) Received: by mail-pl1-f174.google.com with SMTP id d9443c01a7336-21636268e43so55986295ad.2 for ; Tue, 07 Jan 2025 10:09:18 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sakoman-com.20230601.gappssmtp.com; s=20230601; t=1736273358; x=1736878158; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to; bh=eVcjNqQOHNKmeyoyfp3hkJFvaeuP6mRTocnaHXuM+hw=; b=Z9te9qux8xjPG1Vs3MGfLbKRU4LVE/R015TfH3ioQMCdTr5NCDTN456DyhbSegynFv 1u7SNPo1OMYtD+o8FMWQG0pz0Mqc0ZNQupZjnMRqS4PTd4ZCd1jpwSaw9wgeUm6+xmkf 01H8gimq4eiTmMzI1Oohar586ig02gKeA6P9Z1JnnISNXdhkFK5iztptu4PT8sMRUTat a5gsK5uddQUqad6DxzOH2e4/o/NRtf1gKXsnU558UGxJ8AsBtR8PkNmayf33YpTtU+2u UpQwECW9M0OJCRap/gLh4NSTB+bvWpekIcxpEQJwJrGXtWBdP+3Alxxwunvr9Z0NzF3f M7+A== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1736273358; x=1736878158; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=eVcjNqQOHNKmeyoyfp3hkJFvaeuP6mRTocnaHXuM+hw=; b=w7QyhxBTqO4hRhRw6RLFUFMFbKH2youmWAmH5W6PqKss/enjwMjiYFJV3Zz6Lzvumg ub5HdgGy1lzwYUobOSxcGiQzqCukHx5QuXmXDUccbD4h87lOL89aJvkn4UwqHlRdrk0l +EN5BCy4ZeOZX1ZOwrNTlerHxMG5t5n0gNLw+Cdg0y9WEv4yOl9urRMW180TyKGAWgIk Gtxy+X0gu6kfXNwaIjwV24jcdSksEUbzc8k7Agxe4sARwh1HjOt/MywB17y8bHJqLieG UQQSbUMcG41SBQOz2tVkGcvY0f6DXQ6tPHBj1Uht/nqnPXW6lbXi34K7zXXizmCH2Zdy lEWQ== X-Gm-Message-State: AOJu0YxANz0nRv2UuaaIzpMde+CQ0kzfSYVQzsrhW7JhvkZOKdQ5KK2o mFNc5THn1uw2EsZ87bxdRKkDfEjTR5zPRRfWhObk0W1dKW0HMwsOwQkk7P1FLRKbbPWgdO7gAvC CNDE= X-Gm-Gg: ASbGncsoLbLWQ88XjiLSp4P+3QKJwSf5V/bsO7Kid1S/LKWPRCRNVtmqtmB3aOlulZn MuwH96VTP61MTx9yq9/tOCQrGIxZzlZ2H0zSgYp2XiStn1iMv1bkk997sol0oDBOTt+LT6AFsQ0 0m7a6f0ixkqabwK3ICcje9APAs1kvc1MfrjCeHuTZ+r8Qxgx4KMUuAUHz/tL7TNtGrq8fO/+ys+ uGZPEj2Uy3qnFUPNUIb/V3TD+xWEdQtI/jfUCLFtAvmYw== X-Google-Smtp-Source: AGHT+IHHF371cluCTk5Lz7/XssrdyLHHg1Knxvk7cal8BeT4lJDawQP+TrhbdUSdmmMlkoGhQh4MPA== X-Received: by 2002:a17:902:db07:b0:216:56c7:98a7 with SMTP id d9443c01a7336-219e6f277bcmr898419825ad.53.1736273357439; Tue, 07 Jan 2025 10:09:17 -0800 (PST) Received: from hexa.. ([98.142.47.158]) by smtp.gmail.com with ESMTPSA id d9443c01a7336-219dc9f4413sm314166335ad.172.2025.01.07.10.09.16 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 07 Jan 2025 10:09:16 -0800 (PST) From: Steve Sakoman To: openembedded-core@lists.openembedded.org Subject: [OE-core][kirkstone 19/19] linux-yocto/5.15: update to v5.15.175 Date: Tue, 7 Jan 2025 10:08:37 -0800 Message-ID: X-Mailer: git-send-email 2.43.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Tue, 07 Jan 2025 18:09:23 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/209500 From: Bruce Ashfield Updating linux-yocto/5.15 to the latest korg -stable release that comprises the following commits: 91786f140358 Linux 5.15.175 fb8c76c7604a x86/static-call: fix 32-bit build 4e54dc4bbc60 ALSA: usb-audio: Fix a DMA to stack memory bug ae7c1c523323 x86/xen: remove hypercall page 1ef790d6bf55 x86/xen: use new hypercall functions instead of hypercall page a501b4dbedb4 x86/xen: add central hypercall functions c7b4cfa6213a x86/xen: don't do PV iret hypercall through hypercall page 8abab99114f1 x86/static-call: provide a way to do very early static-call updates 1c50e8da50b0 objtool/x86: allow syscall instruction 8f2c179b1d3c x86: make get_cpu_vendor() accessible from Xen code 2657ba851fa3 xen/netfront: fix crash when removing device 3dfd8991ad33 Revert "parisc: fix a possible DMA corruption" f585c5793aca tracing/kprobes: Skip symbol counting logic for module symbols in create_local_trace_kprobe() b57ac2d92c1f bpf: sync_linked_regs() must preserve subreg_def 4749f9f9b050 blk-iocost: Avoid using clamp() on inuse in __propagate_weights() 56b9f3df5ac0 ACPICA: events/evxfregn: don't release the ContextMutex that was never acquired bd85ca6cf9a4 team: Fix feature propagation of NETIF_F_GSO_ENCAP_ALL 2f780d4c3b64 bonding: Fix feature propagation of NETIF_F_GSO_ENCAP_ALL c2047b0e216c net/sched: netem: account for backlog updates from child qdisc beffa32a21e6 Documentation: PM: Clarify pm_runtime_resume_and_get() return value 3561951e53f2 qca_spi: Make driver probing reliable 4f488db386c2 qca_spi: Fix clock speed for multiple QCA7000 d45e3e1a77fd cxgb4: use port number to set mac addr 78079fda4829 ACPI: resource: Fix memory resource type union access 9f82e8ace7d5 net: sparx5: fix the maximum frame length register 6cedf276444d net: sparx5: fix FDMA performance issue c21c7c1c00bc net: lapb: increase LAPB_HEADER_LEN 22a94e0530b5 ptp: kvm: x86: Return EOPNOTSUPP instead of ENODEV from kvm_arch_ptp_init() 143304277ffd ptp: kvm: Use decrypted memory in confidential guest on x86 80a0c4dc6641 selftests: mlxsw: sharedbuffer: Remove duplicate test cases b4eb6df5bc26 selftests: mlxsw: sharedbuffer: Remove h1 ingress test case 07b569eda6fe tipc: fix NULL deref in cleanup_bearer() a864e2e1ceda batman-adv: Do not let TT changes list grows indefinitely b0b2157b3c27 batman-adv: Remove uninitialized data in full table TT response 437529aa7d01 batman-adv: Do not send uninitialized TT changes bbdb3307f609 acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl c052f775ee6c exfat: fix potential deadlock on __exfat_get_dentry_set 4310902c766e virtio/vsock: Fix accept_queue memory leak 43e76736b4bf bpf, sockmap: Fix update element with same 3560e2028374 xfs: fix scrub tracepoints when inode-rooted btrees are involved 58d71a547717 xfs: return from xfs_symlink_verify early on V4 filesystems 5ff4d29a675f xfs: don't drop errno values when we fail to ficlone the entire range fd157244902a xfs: update btree keys correctly when _insrec splits an inode root block 85128462d348 drm/i915: Fix memory leak by correcting cache object name in error handler 1247e1df086a usb: gadget: u_serial: Fix the issue that gs_start_io crashed due to accessing null pointer e450c9e8f398 usb: ehci-hcd: fix call balance of clocks handling routines 6c6d2e9d197a usb: dwc2: Fix HCD port connection race 38fa1f443a3c usb: dwc2: hcd: Fix GetPortStatus & SetPortFeature 55320f5cdd9d usb: dwc2: Fix HCD resume 11cbaff06356 ata: sata_highbank: fix OF node reference leak in highbank_initialize_phys() e75054ff9cab usb: host: max3421-hcd: Correctly abort a USB request. 98b76329bd63 ALSA: usb-audio: Add implicit feedback quirk for Yamaha THR5 11c9e383d410 tcp: check space before adding MPTCP SYN options b5d500042eb3 usb: hcd-pci: remove the action of faking interrupt request 6f0605db50e2 clk: imx: Add check for kcalloc 5b837b9e1543 bpf: Fix the indention issue in grow_stack_state() 42b62697634d cifs: Fix the calling of smb_version_operations::calc_smb_size() b14acf729e9d f2fs: Add inline to f2fs_build_fault_attr() stub 7c317bec311f f2fs: check validation of fault attrs in f2fs_build_fault_attr() 81c12119c23f bpf: Fix accesses to uninit stack slots [ Upstream commit 6b4a64bafd107e521c01eec3453ce94a3fb38529 ] c4fa05422d87 smb: client: fix potential OOB in smb2_dump_detail() 299ef3b5b00b of: module: add buffer overflow check in of_modalias() b8086c3c1548 reiserfs: Avoid touching renamed directory if parent does not change ea091017ef62 ipv6: Fix data races around sk->sk_prot. ff8710da80ee ipv6: annotate some data-races around sk->sk_prot e8c2eafaaa6a tcp: Fix data races around icsk->icsk_af_ops. 8d1bab770956 locking/rwsem: Disable preemption while trying for rwsem lock 7c82dac02886 block, loop: support partitions without scanning 45f504f301d4 bpftool: Fix pretty print dump for maps without BTF loaded 1f24338cb789 jbd2: Drop the merge conflicted hunk e1d0e3c51bde tpm: tis_i2c: Limit write bursts to I2C_SMBUS_BLOCK_MAX (32) bytes 1abe841fe331 tpm: tis_i2c: Limit read bursts to I2C_SMBUS_BLOCK_MAX (32) bytes 6224acfc1d56 tpm: Add flag to use default cancellation policy 1cd19d48fb90 tpm: tis_i2c: Fix sanity check interrupt enable mask a883da132fa8 tpm: Add tpm_tis_i2c backend for tpm_tis_core a742ac8a1c51 tpm: Add tpm_tis_verify_crc to the tpm_tis_phy_ops protocol layer ef495c5f45f2 tpm: Remove read16/read32/write32 calls from tpm_tis_phy_ops 1f3be2e23aa6 gcc-plugins: Reorganize gimple includes for GCC 13 24615a3b932a ata: ahci: fix enum constants for gcc-13 5d6cb145541a net: stmmac: Enable mac_managed_pm phylink config fd93aabb4287 tools/resolve_btfids: Use pkg-config to locate libelf 130f9da78406 tools/resolve_btfids: Build with host flags 00f2f1a782f9 tools/resolve_btfids: Support cross-building the kernel with clang 17776a4ba9c2 tools/resolve_btfids: Install libbpf headers when building 7c9808380d70 libbpf: Make libbpf_version.h non-auto-generated 37ae1ba791ac libbpf: Add LIBBPF_DEPRECATED_SINCE macro for scheduling API deprecations a2667e6d7314 drm/radeon: free iio for atombios when driver shutdown f100c753aa1f powerpc: Fix reschedule bug in KUAP-unlocked user copy da5513f30187 libbpf: Fix build warning on ref_ctr_off 4c5a089621a8 perf python: Account for multiple words in CC 1c5699ee85d4 fs: move S_ISGID stripping into the vfs_*() helpers 838f5d0701d8 fs: add mode_strip_sgid() helper d97172683641 squashfs: provide backing_dev_info in order to disable read-ahead ed037d7be40c irq_work: use kasan_record_aux_stack_noalloc() record callstack 1363bd7dbde3 ixgbevf: add disable link state e5601ae2bd24 ixgbe: add improvement for MDD response functionality caa57cd80575 ixgbe: add the ability for the PF to disable VF link state 16a77bfcc7df Check /dev/console using init_stat() 04574fd5579a tracing/arm: Have max stack tracer handle the case of return address after data 0e51e5717018 gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully 1e6b7da6ddba drivers/base: Fix unsigned comparison to -1 in CPUMAP_FILE_MAX_BYTES 493160901320 mtd_blkdevs: add mtd_table_mutex lock back to blktrans_{open, release} to avoid race condition 04224f725aa3 irqchip/gic-v3-its: Skip HP notifier when no ITS is registered 6f6c2996a81c irqchip/gic-v3-its: Postpone LPI pending table freeing and memreserve 1fa94473423f irqchip/gic-v3-its: Give the percpu rdist struct its own flags field 6013d1ae5feb cert host tools: Stop complaining about deprecated OpenSSL functions efe20512212b init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash a40d2daf2795 pnmtologo: use relocatable file name 3b40d5b41155 of: configfs: remove unused variable overlay_lock 6c085baf1838 tools: use basename to identify file in gen-mach-types 2fca0fd71981 lib/build_OID_registry: fix reproducibility issues 0f586f4ee8ad vt/conmakehash: improve reproducibility a75774679f28 OF: DT-Overlay configfs interface (v8) d179c639b30b x86/boot: Wrap literal addresses in absolute_pointer() 856ec356cf91 ACPI: thermal: drop an always true check 7614af249993 xfs: Fix -Werror=dangling-pointer work-around for older GCC 41470215f97e xfs: Work around GCC 12 -Werror=dangling-pointer for xfs_attr_remote.o 44a445c1922d virtio-pci: Remove wrong address verification in vp_del_vqs() 77aa9e489eaf bpf: Disallow unprivileged bpf by default ebfb1822e9f9 fs/aufs: fixup 5.15.36 fixups 4eba9348d3e2 Revert "Revert "fbdev: Hot-unplug firmware fb devices on forced removal"" 5df6d1b00f95 jbd2: fix use-after-free of transaction_t race 2d83e8196487 jbd2: refactor wait logic for transaction updates into a common function 07a63f760793 netfilter: conntrack: avoid useless indirection during conntrack destruction 4e7122625996 Revert "fbdev: Hot-unplug firmware fb devices on forced removal" 7ba4cb36fd4f rcu: Avoid alloc_pages() when recording stack f78574dee71e kasan: test: silence intentional read overflow warnings d313cb89b6b1 kasan: arm64: fix pcpu_page_first_chunk crash with KASAN_VMALLOC 5e279d5647cc arm64: support page mapping percpu first chunk allocator e5bf16752dca vmalloc: choose a better start address in vm_area_register_early() 660b3d21b46f kasan: test: bypass __alloc_size checks 00aa7573e53a kasan: test: add memcpy test that avoids out-of-bounds write 67becf0b1bd4 kasan: fix tag for large allocations when using CONFIG_SLAB bedf1e033213 workqueue, kasan: avoid alloc_pages() when recording stack 7195b67ce69b kasan: generic: introduce kasan_record_aux_stack_noalloc() bdff763f0e29 kasan: common: provide can_alloc in kasan_save_stack() 51423ebb36ad lib/stackdepot: introduce __stack_depot_save() 85373e66d847 lib/stackdepot: remove unused function argument 5b6cc9b251f3 lib/stackdepot: include gfp.h c9f3902d8069 aufs: reduce overhead for "code present but disabled" use case. b98d189df02c aufs: bugfix, umount passes NULL to ->parse_monolithic() 13b883cbbbd9 aufs standalone: cosmetic, missing copyright sentence 21f8b0d81898 aufs: 5.15.5-20220117 ---> 5.15.5-20220221 6199fd896645 aufs: tiny, headers after fs_context 8ddb40e31c29 aufs: fs_context 7/7, finally remount 69035f71c6fd aufs: fs_context 6/7, now mount bc841b970697 aufs: fs_context 5/7, parse all other mount options 435188053da2 aufs: fs_context 4/7, parse xino options 9af1f1825cbd aufs: fs_context 3/7, parse the branch-management options 1c05eb767f8c aufs: fs_context 2/7, parse "br" mount option a8488f603134 aufs: fs_context 1/7, skelton of the new shceme 8e32e0015564 aufs: pre fs_context, convert a static flag to a macro f90cb4144aec aufs: pre fs_context, support the incomplete sb and sbinfo case 948762ef859c aufs: pre fs_context, convert the type of alloc_sbinfo() 77151a08776b aufs: 5.15.5-20211129 ---> 5.15.5-20220117 2539adbbbe1e aufs: 5.14-20211018 ---> 5.15.5-20211129 7d32b25193c4 aufs: for v5.15-rc1, sync_inode() is gone 66ec0c509225 aufs: for v5.15-rc1, new param 'rcu' for ->get_acl() 69709dc518cd aufs: for v5.15-rc1, no mand-lock anymore ada8fe9543e5 aufs: 5.14-20210906 ---> 5.14-20211018 b77f7f3f394a Revert "aufs: adjust to v5.15 fs changes" 81bdce5b5876 tick/nohz: WARN_ON --> WARN_ON_ONCE to prevent console saturation 97c963889222 sched/isolation: really align nohz_full with rcu_nocbs 871f23ad3627 Revert "ARM: defconfig: Enable ax88796c driver for Exynos boards" ffad0783dd5b ARM: config: multi v7: Regenerate defconifg 5c1e1a1ff2d3 ARM: config: multi v7: Add renamed symbols badaf96564fe ARM: config: multi v7: Clean up enabled by default options 34996040fc9b ARM: config: multi v7: Drop unavailable options 7f685244afb3 powerpc/mm: Switch obsolete dssall to .long 20301aeb1a64 riscv: fix build with binutils 2.38 9df58d070506 powerpc/lib/sstep: fix 'ptesync' build error 720b61fc400b x86_64_defconfig: Fix warnings 02bf23d26bc4 arm64: defconfig: cleanup config options 05914e2c87e5 arm: defconfig: drop unused POWER_AVS option ffb532fa19b9 aufs5: fix build against v5.15.3+ a4b3abf4d96d qemux86: add configuration symbol to select values fee94ee09154 clear_warn_once: add a clear_warn_once= boot parameter 3d8762d900d9 clear_warn_once: bind a timer to written reset value 95faacac47e8 clear_warn_once: expand debugfs to include read support de20c4240018 perf: perf can not parser the backtrace of app in the 32bit system and 64bit kernel. 0e4aacead9c1 perf: x86-32: explicitly include 9ad92c11468e perf: mips64: Convert __u64 to unsigned long long 09e7efe3e68a perf: fix bench numa compilation e79becc44fa6 perf: add SLANG_INC for slang.h b1033b588681 perf: add sgidefs.h to for mips builds cf9db484ac0b perf: change --root to --prefix for python install 7fd052c2c562 perf: add 'libperl not found' warning 27a437cdd469 perf: force include of 3b99d21bec2f fat: don't use obsolete random32 call in namei_vfat a7e9293b506b FAT: Added FAT_NO_83NAME 6fd0e71d9e5c FAT: Add CONFIG_VFAT_NO_CREATE_WITH_LONGNAMES option c379b0d324ae FAT: Add CONFIG_VFAT_FS_NO_DUALNAMES option 538be0fdb124 aufs: adjust to v5.15 fs changes f45da75c8759 aufs5: core 047f57e07e01 aufs5: standalone 029fc15574c8 aufs5: mmap 610d0192ee94 aufs5: base d4e428d0ec5f aufs5: kbuild eb067eca251a yaffs: replace IS_ERR with IS_ERR_OR_NULL to check both ERR and NULL 286af18d0875 yaffs: fix -Wstringop-overread compile warning in yaffs_fix_null_name 24d59a4e26a6 yaffs2: v5.12+ build fixups (not runtime tested) 22c73536d5d7 yaffs: include blkdev.h 506b7251bfb8 yaffs: fix misplaced variable declaration a0e26ff364dc yaffs2: v5.6 build fixups b10b1b2d169e yaffs2: fix memory leak when /proc/yaffs is read ad9adccbb214 yaffs: add strict check when call yaffs_internal_read_super 2e3c3aec8279 yaffs: repair yaffs_get_mtd_device d662538516a7 yaffs: Fix build failure by handling inode i_version with proper atomic API 70a6113ee2c7 yaffs2: fix memory leak in mount/umount 3378e4a9e404 yaffs: Avoid setting any ACL releated xattr ec2284edddef Yaffs:check oob size before auto selecting Yaffs1 c2a49874051c fs: yaffs2: replace CURRENT_TIME by other appropriate apis e9a5105a3e73 yaffs2: adjust to proper location of MS_RDONLY 608807406f13 yaffs2: import git revision b4ce1bb (jan, 2020) 89e660ece42c initramfs: allow an optional wrapper script around initramfs generation b179dbc9aa10 iwlwifi: select MAC80211_LEDS conditionally 3fd5ca3673d0 net/dccp: make it depend on CONFIG_BROKEN (CVE-2020-16119) d1f6edbf0188 arm64/perf: Fix wrong cast that may cause wrong truncation d202fb2caf33 defconfigs: drop obselete options 9a27e3b5f4e7 arm64/perf: fix backtrace for AAPCS with FP enabled e20d8cf019b4 linux-yocto: Handle /bin/awk issues b6d2a3dbbd3a uvesafb: provide option to specify timeout for task completion adb40f1e6a1a uvesafb: print error message when task timeout occurs f280a1ed0962 compiler.h: Undef before redefining __attribute_const__ 4352732f268c vmware: include jiffies.h 7954a677968d Resolve jiffies wrapping about arp 5f28a1035d95 nfs: Allow default io size to be configured. 0d7260ad7106 check console device file on fs when booting 900a12e37e0a mount_root: clarify error messages for when no rootfs found 7b878cbea726 menuconfig,mconf-cfg: Allow specification of ncurses location 6604fc1763b3 modpost: mask trivial warnings 0d294adb09cb kbuild: exclude meta directory from distclean processing a097cdd95a9e powerpc: serialize image targets 5db6ec39a0a3 arm: serialize build targets cbabca27905e crtsavres: fixups for 5.4+ 7fc7656ed403 powerpc/ptrace: Disable array-bounds warning with gcc8 a5faac5a19a2 powerpc: Disable attribute-alias warnings from gcc8 186c54665b67 powerpc: add crtsavres.o to archprepare for kbuild d1ea862964ca powerpc: kexec fix for powerpc64 2ac35b89a0f9 powerpc: Add unwind information for SPE registers of E500 core 2e1c348a28bb mips: vdso: fix 'jalr $t9' crash in vdso code ec57870b303a mips: Kconfig: add QEMUMIPS64 option 6a81b3c08107 4kc cache tlb hazard: tlbp cache coherency 74e3b2a21e54 malta uhci quirks: make allowance for slow 4k(e)c 22e65b63d3b4 arm/Makefile: Fix systemtap b7f1ab59f19e vexpress: Pass LOADADDR to Makefile ce2800c73bf7 arm: ARM EABI socketcall 019d142fd956 ARM: LPAE: Invalidate the TLB for module addresses during translation fault Signed-off-by: Bruce Ashfield Signed-off-by: Steve Sakoman --- .../linux/linux-yocto-rt_5.15.bb | 6 ++--- .../linux/linux-yocto-tiny_5.15.bb | 6 ++--- meta/recipes-kernel/linux/linux-yocto_5.15.bb | 26 +++++++++---------- 3 files changed, 19 insertions(+), 19 deletions(-) diff --git a/meta/recipes-kernel/linux/linux-yocto-rt_5.15.bb b/meta/recipes-kernel/linux/linux-yocto-rt_5.15.bb index 00dc8a9c3c..74f9bb9a44 100644 --- a/meta/recipes-kernel/linux/linux-yocto-rt_5.15.bb +++ b/meta/recipes-kernel/linux/linux-yocto-rt_5.15.bb @@ -11,13 +11,13 @@ python () { raise bb.parse.SkipRecipe("Set PREFERRED_PROVIDER_virtual/kernel to linux-yocto-rt to enable it") } -SRCREV_machine ?= "bc2b7af6f78a15623836fb37d6ff80691e06c199" -SRCREV_meta ?= "65cd92b42128e83bbe4920be8d58d2f44fa0245a" +SRCREV_machine ?= "e44a864642ca01372ce3bc73985ae5c15039239d" +SRCREV_meta ?= "d76891c15fa8b0734c3fd9513594ed6e5b9f620d" SRC_URI = "git://git.yoctoproject.org/linux-yocto.git;branch=${KBRANCH};name=machine \ git://git.yoctoproject.org/yocto-kernel-cache;type=kmeta;name=meta;branch=yocto-5.15;destsuffix=${KMETA}" -LINUX_VERSION ?= "5.15.174" +LINUX_VERSION ?= "5.15.175" LIC_FILES_CHKSUM = "file://COPYING;md5=6bc538ed5bd9a7fc9398086aedcd7e46" diff --git a/meta/recipes-kernel/linux/linux-yocto-tiny_5.15.bb b/meta/recipes-kernel/linux/linux-yocto-tiny_5.15.bb index e99edda2c3..e7fb427843 100644 --- a/meta/recipes-kernel/linux/linux-yocto-tiny_5.15.bb +++ b/meta/recipes-kernel/linux/linux-yocto-tiny_5.15.bb @@ -5,7 +5,7 @@ KCONFIG_MODE = "--allnoconfig" require recipes-kernel/linux/linux-yocto.inc -LINUX_VERSION ?= "5.15.174" +LINUX_VERSION ?= "5.15.175" LIC_FILES_CHKSUM = "file://COPYING;md5=6bc538ed5bd9a7fc9398086aedcd7e46" DEPENDS += "${@bb.utils.contains('ARCH', 'x86', 'elfutils-native', '', d)}" @@ -14,8 +14,8 @@ DEPENDS += "openssl-native util-linux-native" KMETA = "kernel-meta" KCONF_BSP_AUDIT_LEVEL = "2" -SRCREV_machine ?= "ea64fb5c8f628c8c5aa1cbc817999eb53994e949" -SRCREV_meta ?= "65cd92b42128e83bbe4920be8d58d2f44fa0245a" +SRCREV_machine ?= "21359d0259838662bde27fc0164bdc5b0786a01f" +SRCREV_meta ?= "d76891c15fa8b0734c3fd9513594ed6e5b9f620d" PV = "${LINUX_VERSION}+git${SRCPV}" diff --git a/meta/recipes-kernel/linux/linux-yocto_5.15.bb b/meta/recipes-kernel/linux/linux-yocto_5.15.bb index 1e725b77af..2c7c392ef3 100644 --- a/meta/recipes-kernel/linux/linux-yocto_5.15.bb +++ b/meta/recipes-kernel/linux/linux-yocto_5.15.bb @@ -14,24 +14,24 @@ KBRANCH:qemux86 ?= "v5.15/standard/base" KBRANCH:qemux86-64 ?= "v5.15/standard/base" KBRANCH:qemumips64 ?= "v5.15/standard/mti-malta64" -SRCREV_machine:qemuarm ?= "2747d1f29f22840b70fddd943e1911e8c5352001" -SRCREV_machine:qemuarm64 ?= "78975933bbeb0646ca0d105d60f85d38714f25f7" -SRCREV_machine:qemumips ?= "f26a7a4c9172032ef25c456022f0cc6ca4312ea2" -SRCREV_machine:qemuppc ?= "0ad1f117d7b6e1c3c35c454fa50b9904f7b72e9d" -SRCREV_machine:qemuriscv64 ?= "a340a82f59d3e1ea79ae5e9935387b7ff3bcbe28" -SRCREV_machine:qemuriscv32 ?= "a340a82f59d3e1ea79ae5e9935387b7ff3bcbe28" -SRCREV_machine:qemux86 ?= "a340a82f59d3e1ea79ae5e9935387b7ff3bcbe28" -SRCREV_machine:qemux86-64 ?= "a340a82f59d3e1ea79ae5e9935387b7ff3bcbe28" -SRCREV_machine:qemumips64 ?= "e8b960dc22b8aa3eaf9621091e14d84e25c15b6a" -SRCREV_machine ?= "a340a82f59d3e1ea79ae5e9935387b7ff3bcbe28" -SRCREV_meta ?= "65cd92b42128e83bbe4920be8d58d2f44fa0245a" +SRCREV_machine:qemuarm ?= "71b7c06f25df2a8971d00ca9240fdc657ca12e14" +SRCREV_machine:qemuarm64 ?= "d8355f2c75c6135afbf2e7af95beeb164c0f90a6" +SRCREV_machine:qemumips ?= "06d279ec8ff88a1335d5545acb7e89cb779fd5d1" +SRCREV_machine:qemuppc ?= "54de5d312356aabbccb7e7cbf9d2775792818755" +SRCREV_machine:qemuriscv64 ?= "b516538c454980b6dea36a7163a3c182b41d45a2" +SRCREV_machine:qemuriscv32 ?= "b516538c454980b6dea36a7163a3c182b41d45a2" +SRCREV_machine:qemux86 ?= "b516538c454980b6dea36a7163a3c182b41d45a2" +SRCREV_machine:qemux86-64 ?= "b516538c454980b6dea36a7163a3c182b41d45a2" +SRCREV_machine:qemumips64 ?= "67003ffdcc2b524e27729b1734aad8f5ca9fa7b2" +SRCREV_machine ?= "b516538c454980b6dea36a7163a3c182b41d45a2" +SRCREV_meta ?= "d76891c15fa8b0734c3fd9513594ed6e5b9f620d" # set your preferred provider of linux-yocto to 'linux-yocto-upstream', and you'll # get the /base branch, which is pure upstream -stable, and the same # meta SRCREV as the linux-yocto-standard builds. Select your version using the # normal PREFERRED_VERSION settings. BBCLASSEXTEND = "devupstream:target" -SRCREV_machine:class-devupstream ?= "963e654022cc32d72c184b4ab86a76226b3e3b8d" +SRCREV_machine:class-devupstream ?= "91786f140358b1e56efdb0feccb337ce3a59c031" PN:class-devupstream = "linux-yocto-upstream" KBRANCH:class-devupstream = "v5.15/base" @@ -39,7 +39,7 @@ SRC_URI = "git://git.yoctoproject.org/linux-yocto.git;name=machine;branch=${KBRA git://git.yoctoproject.org/yocto-kernel-cache;type=kmeta;name=meta;branch=yocto-5.15;destsuffix=${KMETA}" LIC_FILES_CHKSUM = "file://COPYING;md5=6bc538ed5bd9a7fc9398086aedcd7e46" -LINUX_VERSION ?= "5.15.174" +LINUX_VERSION ?= "5.15.175" DEPENDS += "${@bb.utils.contains('ARCH', 'x86', 'elfutils-native', '', d)}" DEPENDS += "openssl-native util-linux-native"