linux (5.15.5-1) unstable; urgency=medium

linux (5.15.5-1) unstable; urgency=medium

  * New upstream stable update:
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.4
    - string: uninline memcpy_and_pad
    - [x86] KVM: Fix steal time asm constraints
    - btrfs: introduce btrfs_is_data_reloc_root
    - btrfs: zoned: add a dedicated data relocation block group
    - btrfs: zoned: only allow one process to add pages to a relocation inode
    - btrfs: zoned: use regular writes for relocation
    - btrfs: check for relocation inodes on zoned btrfs in should_nocow
    - btrfs: zoned: allow preallocation for relocation inodes
    - block: Add a helper to validate the block size
    - loop: Use blk_validate_block_size() to validate block size
    - Bluetooth: btusb: Add support for TP-Link UB500 Adapter
    - PCI/MSI: Deal with devices lying about their MSI mask capability
    - PCI: Add MSI masking quirk for Nvidia ION AHCI
    - perf/core: Avoid put_page() when GUP fails
    - thermal: Fix NULL pointer dereferences in of_thermal_ functions
    - Revert "ACPI: scan: Release PM resources blocked by unused objects"
    https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.5
    - [arm64] zynqmp: Do not duplicate flash partition label property
    - [arm64] zynqmp: Fix serial compatible string
    - [arm64,armhf] clk: sunxi-ng: Unregister clocks/resets when unbinding
    - scsi: pm80xx: Fix memory leak during rmmod
    - scsi: lpfc: Fix list_add() corruption in lpfc_drain_txq()
    - [armhf] bus: ti-sysc: Add quirk handling for reinit on context lost
    - [armhf] bus: ti-sysc: Use context lost quirk for otg
    - [armhf] usb: musb: tusb6010: check return value after calling
      platform_get_resource()
    - [x86] usb: typec: tipd: Remove WARN_ON in tps6598x_block_read
    - staging: rtl8723bs: remove possible deadlock when disconnect (v2)
    - staging: rtl8723bs: remove a second possible deadlock
    - staging: rtl8723bs: remove a third possible deadlock
    - [arm64] dts: ls1012a: Add serial alias for ls1012a-rdb
    - RDMA/rxe: Separate HW and SW l/rkeys
    - [x86] ASoC: SOF: Intel: hda-dai: fix potential locking issue
    - scsi: core: Fix scsi_mode_sense() buffer length handling
    - ALSA: usb-audio: disable implicit feedback sync for Behringer UFX1204 and
      UFX1604
    - [armhf] clk: imx: imx6ul: Move csi_sel mux to correct base register
    - ASoC: es8316: Use IRQF_NO_AUTOEN when requesting the IRQ
    - [x86] ASoC: rt5651: Use IRQF_NO_AUTOEN when requesting the IRQ
    - [x86] ASoC: nau8824: Add DMI quirk mechanism for active-high jack-detect
    - scsi: advansys: Fix kernel pointer leak
    - scsi: smartpqi: Add controller handshake during kdump
    - [arm64] dts: imx8mm-kontron: Fix reset delays for ethernet PHY
    - ALSA: intel-dsp-config: add quirk for APL/GLK/TGL devices based on ES8336
      codec
    - [x86] ASoC: Intel: soc-acpi: add missing quirk for TGL SDCA single amp
    - [x86] ASoC: Intel: sof_sdw: add missing quirk for Dell SKU 0A45
    - firmware_loader: fix pre-allocated buf built-in firmware use
    - HID: multitouch: disable sticky fingers for UPERFECT Y
    - ALSA: usb-audio: Add support for the Pioneer DJM 750MK2 Mixer/Soundcard
    - ASoC: rt5682: fix a little pop while playback
    - [amd64] iommu/vt-d: Do not falsely log intel_iommu is unsupported kernel
      option
    - tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc
    - scsi: scsi_debug: Fix out-of-bound read in resp_readcap16()
    - scsi: scsi_debug: Fix out-of-bound read in resp_report_tgtpgs()
    - scsi: target: Fix ordered tag handling
    - scsi: target: Fix alua_tg_pt_gps_count tracking
    - iio: imu: st_lsm6dsx: Avoid potential array overflow in
      st_lsm6dsx_set_odr()
    - RDMA/core: Use kvzalloc when allocating the struct ib_port
    - scsi: lpfc: Fix use-after-free in lpfc_unreg_rpi() routine
    - scsi: lpfc: Fix link down processing to address NULL pointer dereference
    - scsi: lpfc: Allow fabric node recovery if recovery is in progress before
      devloss
    - [i386] ALSA: gus: fix null pointer dereference on pointer block
    - ALSA: usb-audio: fix null pointer dereference on pointer cs_desc
    - f2fs: fix up f2fs_lookup tracepoints
    - f2fs: fix to use WHINT_MODE
    - f2fs: fix wrong condition to trigger background checkpoint correctly
    - f2fs: compress: disallow disabling compress on non-empty compressed file
    - f2fs: fix incorrect return value in f2fs_sanity_check_ckpt()
    - [armhf] clk/ast2600: Fix soc revision for AHB
    - [arm64] clk: qcom: gcc-msm8996: Drop (again) gcc_aggre1_pnoc_ahb_clk
    - [arm64] KVM: arm64: Fix host stage-2 finalization
    - sched/core: Mitigate race cpus_share_cache()/update_top_cache_domain()
    - sched/fair: Prevent dead task groups from regaining cfs_rq's
    - [x86] perf/x86/vlbr: Add c->flags to vlbr event constraints
    - blkcg: Remove extra blkcg_bio_issue_init
    - drm/nouveau: hdmigv100.c: fix corrupted HDMI Vendor InfoFrame
    - bpf: Fix inner map state pruning regression.
    - tcp: Fix uninitialized access in skb frags array for Rx 0cp.
    - tracing: Add length protection to histogram string copies
    - nl80211: fix radio statistics in survey dump
    - mac80211: fix monitor_sdata RCU/locking assertions
    - net: bnx2x: fix variable dereferenced before check
    - bnxt_en: reject indirect blk offload when hw-tc-offload is off
    - tipc: only accept encrypted MSG_CRYPTO msgs
    - sock: fix /proc/net/sockstat underflow in sk_clone_lock()
    - net/smc: Make sure the link_id is unique
    - NFSD: Fix exposure in nfsd4_decode_bitmap()
    - iavf: Fix return of set the new channel count
    - iavf: check for null in iavf_fix_features
    - iavf: free q_vectors before queues in iavf_disable_vf
    - iavf: don't clear a lock we don't hold
    - iavf: Fix failure to exit out from last all-multicast mode
    - iavf: prevent accidental free of filter structure
    - iavf: validate pointers
    - iavf: Fix for the false positive ASQ/ARQ errors while issuing VF reset
    - iavf: Fix for setting queues to 0
    - iavf: Restore VLAN filters after link down
    - bpf: Fix toctou on read-only map's constant scalar tracking
      (CVE-2021-4001)
    - [x86] platform/x86: hp_accel: Fix an error handling path in
      'lis3lv02d_probe()'
    - udp: Validate checksum in udp_read_sock()
    - btrfs: make 1-bit bit-fields of scrub_page unsigned int
    - RDMA/core: Set send and receive CQ before forwarding to the driver
    - net/mlx5e: Wait for concurrent flow deletion during neigh/fib events
    - net/mlx5: E-Switch, Fix resetting of encap mode when entering switchdev
    - net/mlx5e: nullify cq->dbg pointer in mlx5_debug_cq_remove()
    - net/mlx5: Update error handler for UCTX and UMEM
    - net/mlx5: E-Switch, rebuild lag only when needed
    - net/mlx5e: CT, Fix multiple allocations and memleak of mod acts
    - net/mlx5: Lag, update tracker when state change event received
    - net/mlx5: E-Switch, return error if encap isn't supported
    - scsi: ufs: core: Improve SCSI abort handling
    - scsi: core: sysfs: Fix hang when device state is set via sysfs
    - scsi: ufs: core: Fix task management completion timeout race
    - scsi: ufs: core: Fix another task management completion race
    - [arm*] net: mvmdio: fix compilation warning
    - net: sched: act_mirred: drop dst for the direction from egress to ingress
    - [arm64] net: dpaa2-eth: fix use-after-free in dpaa2_eth_remove
    - net: virtio_net_hdr_to_skb: count transport header in UFO
    - i40e: Fix correct max_pkt_size on VF RX queue
    - i40e: Fix NULL ptr dereference on VSI filter sync
    - i40e: Fix changing previously set num_queue_pairs for PFs
    - i40e: Fix ping is lost after configuring ADq on VF
    - RDMA/mlx4: Do not fail the registration on port stats
    - i40e: Fix warning message and call stack during rmmod i40e driver
    - i40e: Fix creation of first queue by omitting it if is not power of two
    - i40e: Fix display error code in dmesg
    - e100: fix device suspend/resume (Closes: #995927)
    - [powerpc*] KVM: PPC: Book3S HV: Use GLOBAL_TOC for
      kvmppc_h_set_dabr/xdabr()
    - [powerpc*] pseries: rename numa_dist_table to form2_distances
    - [powerpc*] pseries: Fix numa FORM2 parsing fallback code
    - [x86] perf/x86/intel/uncore: Fix filter_tid mask for CHA events on Skylake
      Server
    - [x86] perf/x86/intel/uncore: Fix IIO event constraints for Skylake Server
    - [x86] perf/x86/intel/uncore: Fix IIO event constraints for Snowridge
    - [s390x] kexec: fix return code handling
    - blk-cgroup: fix missing put device in error path from blkg_conf_pref()
    - tun: fix bonding active backup with arp monitoring
    - tipc: check for null after calling kmemdup
    - ipc: WARN if trying to remove ipc object which is absent
    - shm: extend forced shm destroy to support objects from several IPC nses
    - hugetlb, userfaultfd: fix reservation restore on userfaultfd error
    - [x86] boot: Pull up cmdline preparation and early param parsing
    - [x86] hyperv: Fix NULL deref in set_hv_tscchange_cb() if Hyper-V setup
      fails
    - [x86] KVM: x86: Assume a 64-bit hypercall for guests with protected state
    - [x86] KVM: x86: Fix uninitialized eoi_exit_bitmap usage in
      vcpu_load_eoi_exitmap()
    - [x86] KVM: x86/mmu: include EFER.LMA in extended mmu role
    - [x86] KVM: x86/xen: Fix get_attr of KVM_XEN_ATTR_TYPE_SHARED_INFO
    - [powerpc*] xive: Change IRQ domain to a tree domain
    - [x86] Revert "drm/i915/tgl/dsi: Gate the ddi clocks after pll mapping"
    - ata: libata: improve ata_read_log_page() error message
    - ata: libata: add missing ata_identify_page_supported() calls
    - scsi: qla2xxx: Fix mailbox direction flags in qla2xxx_get_adapter_id()
    - [s390x] setup: avoid reserving memory above identity mapping
    - [s390x] boot: simplify and fix kernel memory layout setup
    - [s390x] vdso: filter out -mstack-guard and -mstack-size
    - [s390x] dump: fix copying to user-space of swapped kdump oldmem
    - block: Check ADMIN before NICE for IOPRIO_CLASS_RT
    - fbdev: Prevent probing generic drivers if a FB is already registered
    - [x86] KVM: SEV: Disallow COPY_ENC_CONTEXT_FROM if target has created vCPUs
    - [x86] KVM: nVMX: don't use vcpu->arch.efer when checking host state on
      nested state load
    - drm/cma-helper: Release non-coherent memory with dma_free_noncoherent()
    - printk: restore flushing of NMI buffers on remote CPUs after NMI
      backtraces
    - udf: Fix crash after seekdir
    - spi: fix use-after-free of the add_lock mutex
    - [armhf] net: stmmac: socfpga: add runtime suspend/resume callback for
      stratix10 platform
    - [x86] Drivers: hv: balloon: Use VMBUS_RING_SIZE() wrapper for dm_ring_size
    - btrfs: fix memory ordering between normal and ordered work functions
    - fs: handle circular mappings correctly
    - net: stmmac: Fix signed/unsigned wreckage
    - cfg80211: call cfg80211_stop_ap when switch from P2P_GO type
    - mac80211: drop check for DONT_REORDER in __ieee80211_select_queue
    - drm/amd/display: Update swizzle mode enums
    - drm/amd/display: Limit max DSC target bpp for specific monitors
    - [x86] drm/i915/guc: Fix outstanding G2H accounting
    - [x86] drm/i915/guc: Don't enable scheduling on a banned context, guc_id
      invalid, not registered
    - [x86] drm/i915/guc: Workaround reset G2H is received after schedule done
      G2H
    - [x86] drm/i915/guc: Don't drop ce->guc_active.lock when unwinding context
    - [x86] drm/i915/guc: Unwind context requests in reverse order
    - drm/udl: fix control-message timeout
    - drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap
    - drm/nouveau: Add a dedicated mutex for the clients list (CVE-2020-27820)
    - drm/nouveau: use drm_dev_unplug() during device removal (CVE-2020-27820)
    - drm/nouveau: clean up all clients on device removal (CVE-2020-27820)
    - [x86] drm/i915/dp: Ensure sink rate values are always valid
    - [x86] drm/i915/dp: Ensure max link params are always valid
    - [x86] drm/i915: Fix type1 DVI DP dual mode adapter heuristic for modern
      platforms
    - drm/amdgpu: fix set scaling mode Full/Full aspect/Center not works on vga
      and dvi connectors
    - drm/amd/pm: avoid duplicate powergate/ungate setting
    - signal: Implement force_fatal_sig
    - exit/syscall_user_dispatch: Send ordinary signals on failure
    - [powerpc*] signal/powerpc: On swapcontext failure force SIGSEGV
    - [s390x] signal/s390: Use force_sigsegv in default_trap_handler
    - [x86] signal/x86: In emulate_vsyscall force a signal instead of calling
      do_exit
    - signal: Replace force_sigsegv(SIGSEGV) with force_fatal_sig(SIGSEGV)
    - signal: Don't always set SA_IMMUTABLE for forced signals
    - signal: Replace force_fatal_sig with force_exit_sig when in doubt
    - hugetlbfs: flush TLBs correctly after huge_pmd_unshare (CVE-2021-4002)
    - RDMA/netlink: Add __maybe_unused to static inline in C file
    - bpf: Forbid bpf_ktime_get_coarse_ns and bpf_timer_* in tracing progs
    - selinux: fix NULL-pointer dereference when hashtab allocation fails
    - ASoC: DAPM: Cover regression by kctl change notification fix
    - ice: Fix VF true promiscuous mode
    - ice: Delete always true check of PF pointer
    - fs: export an inode_update_time helper
    - btrfs: update device path inode time instead of bd_inode
    - net: add and use skb_unclone_keeptruesize() helper
    - [x86] ALSA: hda: hdac_ext_stream: fix potential locking issues
    - ALSA: hda: hdac_stream: fix potential locking issue in
      snd_hdac_stream_assign()

  [ Salvatore Bonaccorso ]
  * [rt] Update to 5.15.3-rt21
  * Drop "arm64: dts: rockchip: disable USB type-c DisplayPort"
  * [rt] Refresh "printk: move console printing to kthreads"
  * [rt] Refresh "printk: remove deferred printing"
  * Bump ABI to 2
  * fuse: release pipe buf after last use (Closes: #1000504)

[dgit import unpatched linux 5.15.5-1]