What’s New

Linux Kernel 5.15.212

5.15.212longterm
Fixed
  • perf/x86/amd/core: Always use the NMI latency mitigation
  • ALSA: seq: Fix uninitialised heap leak in snd_seq_event_dup()
  • iio: imu: inv_icm42600: fix timestamp clock period by using lower value
  • ALSA: seq: Check UMP support for midi_version change
  • ALSA: seq: Skip event type filtering for UMP events
  • iio: invensense: fix odr switching to same value
  • iio: imu: inv_mpu6050: fix frequency setting when chip is off
  • ALSA: seq: Avoid confusion of aligned read size
  • Bluetooth: L2CAP: Fix regressions caused by reusing ident
  • posix-cpu-timers: Use u64 multiplication in update_rlimit_cpu()
  • regulator: scmi: fix of_node refcount leak in scmi_regulator_probe()
  • audit: fix potential integer overflow in audit_log_n_hex()
  • btrfs: fix incorrect buffered IO fallback for append direct writes
  • crypto: qat - validate RSA CRT component lengths
  • btrfs: fix false IO failure after falling back to buffered write
  • crypto: qat - fix restarting state leak on allocation failure
  • X.509: Fix validation of ASN.1 certificate header
Security
  • staging: rtl8723bs: fix heap buffer overflow in rtw_cfg80211_set_wpa_ie()
  • staging: rtl8723bs: fix OOB reads in rtw_get_sec_ie(), rtw_get_wapi_ie(), and rtw_get_wps_attr()

The 120 most recent commits in this release — the full changelog is longer:

  • Linux 5.15.212
  • perf/x86/amd/core: Always use the NMI latency mitigation
  • ALSA: seq: Fix uninitialised heap leak in snd_seq_event_dup()
  • iio: imu: inv_icm42600: fix timestamp clock period by using lower value
  • ALSA: seq: Check UMP support for midi_version change
  • ALSA: seq: Skip event type filtering for UMP events
  • iio: invensense: fix odr switching to same value
  • iio: imu: inv_mpu6050: fix frequency setting when chip is off
  • ALSA: seq: Avoid confusion of aligned read size
  • Bluetooth: L2CAP: Fix regressions caused by reusing ident
  • KVM: Move kvm_io_bus_get_dev() locking responsibilities to callers
  • posix-cpu-timers: Use u64 multiplication in update_rlimit_cpu()
  • regulator: scmi: fix of_node refcount leak in scmi_regulator_probe()
  • audit: fix potential integer overflow in audit_log_n_hex()
  • audit: add audit_log_nf_skb helper function
  • btrfs: fix incorrect buffered IO fallback for append direct writes
  • crypto: qat - validate RSA CRT component lengths
  • btrfs: fix false IO failure after falling back to buffered write
  • crypto: qat - fix restarting state leak on allocation failure
  • btrfs: do not trim a device which is not writeable
  • usb: gadget: f_fs: Tie read_buffer lifetime to ffs_epfile
  • crypto: atmel-sha204a - drop hwrng quality reduction for ATSHA204A
  • crypto: atmel - Drop explicit initialization of struct i2c_device_id::driver_data to 0
  • crypto: atmel-sha204a - Mark OF related data as maybe unused
  • usb: gadget: f_fs: initialize reset_work at allocation time
  • usb: typec: tcpm: Fix VDM type for Enter Mode commands
  • usb: atm: ueagle-atm: wait for pre-firmware load in .disconnect()
  • usb: typec: ucsi: ccg: Fix use-after-free of ucsi on remove
  • gpio: pca953x: Make platform teardown callback return void
  • leds: lm3601x: Improve error reporting for problems during .remove()
  • leds: lm3697: Remove duplicated error reporting in .remove()
  • drm/i2c/sil164: Drop no-op remove function
  • usb: iowarrior: remove inherent race with minor number
  • bpf: Allow LPM map access from sleepable BPF programs
  • bpf: Consistently use bpf_rcu_lock_held() everywhere
  • bpf: Convert lpm_trie.c to rqspinlock
  • bpf: Reject fragmented frames in devmap
  • xdp: introduce flags field in xdp_buff/xdp_frame
  • hfs/hfsplus: fix u32 overflow in check_and_correct_requested_length
  • hfs/hfsplus: prevent getting negative values of offset/length
  • xfs: use null daddr for unset first bad log block
  • xfs: Remove dead code
  • xfs: Remove redundant assignment of mp
  • serial: 8250_mid: Disable DMA for selected platforms
  • serial: 8250_mid: Remove 8250_pci usage
  • HID: appleir: fix UAF on pending key_up_timer in remove()
  • treewide: Switch/rename to timer_delete_sync
  • proc: protect ptrace_may_access() with exec_update_lock (part 1)
  • HID: multitouch: fix out-of-bounds bit access on mt_io_flags
  • HID: add haptics page defines
  • proc: protect ptrace_may_access() with exec_update_lock (FD links)
  • proc: rename proc_setattr to proc_nochmod_setattr
  • proc: Move fdinfo PTRACE_MODE_READ check into the inode .permission operation
  • proc: use generic setattr() for /proc/$PID/net
  • X.509: Fix validation of ASN.1 certificate header
  • ksmbd: track the connection owning a byte-range lock
  • ksmbd: centralize ksmbd_conn final release to plug transport leak
  • ksmbd: destroy async_ida in ksmbd_conn_free()
  • ksmbd: fix mechToken leak when SPNEGO decode fails after token alloc
  • ksmbd: fix use-after-free in __ksmbd_close_fd() via durable scavenger
  • smb: client: harden POSIX SID length parsing
  • smb: client: use unaligned reads in parse_posix_ctxt()
  • smb: client: mask server-provided mode to 07777 in modefromsid
  • smb: client: resolve SWN tcon from live registrations
  • cifs: Add tracing for the cifs_tcon struct refcounting
  • smb: client: Fix next buffer leak in receive_encrypted_standard()
  • Bluetooth: L2CAP: cancel pending_rx_work before taking conn->lock
  • Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del()
  • Bluetooth: L2CAP: Fix not tracking outstanding TX ident
  • netfilter: ebtables: zero chainstack array
  • netfilter: ebtables: Use vmalloc_array() to improve code
  • gpio: sch: use raw_spinlock_t in the irq startup path
  • gpio: sch: use new GPIO line value setter callbacks
  • coresight: etb10: restore atomic_t for shared reading state
  • PCI: Skip Resizable BAR restore on read error
  • PCI: Move Resizable BAR code to rebar.c
  • PCI: Add kerneldoc for pci_resize_resource()
  • PCI: Fix restoring BARs on BAR resize rollback path
  • PCI: Free saved list without holding pci_bus_sem
  • PCI: Prevent resource tree corruption when BAR resize fails
  • crypto: qat - fix VF2PF work teardown race in adf_disable_sriov()
  • staging: rtl8723bs: fix OOB reads in rtw_get_sec_ie(), rtw_get_wapi_ie(), and rtw_get_wps_attr()
  • staging: rtl8723bs: fix spaces around binary operators
  • staging: rtl8723bs: core: move constants to right side in comparison
  • staging: rtl8723bs: remove redundant braces in if statements
  • staging: rtl8723bs: Remove redundant else branches.
  • PCI: mediatek: Fix IRQ domain leak when port fails to enable
  • PCI: mediatek: Convert bool to single quirks entry and bitmap
  • PCI: controller: Use dev_fwnode() instead of of_fwnode_handle()
  • staging: rtl8723bs: fix heap buffer overflow in rtw_cfg80211_set_wpa_ie()
  • staging: rtl8723bs: Fix space issues
  • staging: rtl8723bs: Fix indentation issues
  • PCI: imx6: Fix IMX6SX_GPR12_PCIE_TEST_POWERDOWN handling
  • smb: client: restrict implied bcc[0] exemption to responses without data area
  • cifs: remove unused server parameter from calc_smb_size()
  • smb2: small refactor in smb2_check_message()
  • cifs: remove check of list iterator against head past the loop body
  • cifs: Create a new shared file holding smb2 pdu definitions
  • PCI: altera: Fix resource leaks on probe failure
  • vfio/pci: Release the VGA arbiter client on register_device() failure
  • ALSA: aoa: check snd_ctl_new1() return value
  • iio: common: st_sensors: honour channel endianness in read_axis_data
  • bitops: make BYTES_TO_BITS() treewide-available
  • iio: imu: inv_icm42600: fix timestamping by limiting FIFO reading
  • iio: imu: inv_icm42600: stabilized timestamp in interrupt
  • iio: invensense: fix timestamp glitches when switching frequency
  • iio: invensense: remove redundant initialization of variable period
  • iio: imu: inv_mpu6050: use the common inv_sensors timestamp module
  • iio: make invensense timestamp module generic
  • iio: move inv_icm42600 timestamp module in common
  • iio: imu: inv_icm42600: make timestamp module chip independent
  • iio: hid-sensor-rotation: Fix stale or zero output when reading raw values
  • iio: imu: adis: add IRQF_NO_THREAD to non-FIFO trigger IRQ
  • ACPI: NFIT: core: Fix acpi_nfit_init() error cleanup
  • ACPI: CPPC: Suppress UBSAN warning caused by field misuse
  • mtd: rawnand: lpc32xx_slc: fail DMA transfer on completion timeout
  • mtd: rawnand: lpc32xx_mlc: fail DMA transfers on timeout
  • mtd: rawnand: fsl_ifc: return errors for failed page reads
  • mmc: vub300: defer reset until cmd_mutex is unlocked
  • mt
View original