Your message dated Thu, 05 May 2022 06:17:09 +0000
with message-id <e1nmunv-000gut...@fasolo.debian.org>
and subject line Bug#1006346: fixed in linux 5.10.113-1
has caused the Debian Bug report #1006346,
regarding cloud.debian.org: bullseye AMIs don't boot on Amazon EC2 Xen
instances with Enhanced Networking
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
1006346: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1006346
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: cloud.debian.org
Severity: important
(I suspect this is actually a kernel issue, but I'm starting with
cloud.debian.org as that's where I've observed the issue and I want to rule
out cloud configuration issues.)
Amazon EC2 instance types with Enhanced Networking use the ixgbevf.ko
driver. The current AMIs successfully probe the ixgbevf driver and spawn
dhclient as expected, but dhclient appears to never receive a lease. Older
AMIs do work on this class of instance.
Working AMI:
{
"Images": [
{
"Architecture": "x86_64",
"CreationDate": "2021-12-21T01:39:18.000Z",
"ImageId": "ami-055b24b622e97e043",
"ImageLocation": "136693071363/debian-11-amd64-20211220-862",
"ImageType": "machine",
"Public": true,
"OwnerId": "136693071363",
"PlatformDetails": "Linux/UNIX",
"UsageOperation": "RunInstances",
"State": "available",
"BlockDeviceMappings": [
{
"DeviceName": "/dev/xvda",
"Ebs": {
"DeleteOnTermination": true,
"SnapshotId": "snap-0b1ec9931c8475322",
"VolumeSize": 8,
"VolumeType": "gp2",
"Encrypted": false
}
}
],
"Description": "Debian 11 (20211220-862)",
"EnaSupport": true,
"Hypervisor": "xen",
"Name": "debian-11-amd64-20211220-862",
"RootDeviceName": "/dev/xvda",
"RootDeviceType": "ebs",
"SriovNetSupport": "simple",
"VirtualizationType": "hvm"
}
]
}
Not working AMI:
{
"Images": [
{
"Architecture": "x86_64",
"CreationDate": "2022-01-21T15:02:04.000Z",
"ImageId": "ami-0d0d8694ba492c02b",
"ImageLocation": "136693071363/debian-11-amd64-20220121-894",
"ImageType": "machine",
"Public": true,
"OwnerId": "136693071363",
"PlatformDetails": "Linux/UNIX",
"UsageOperation": "RunInstances",
"State": "available",
"BlockDeviceMappings": [
{
"DeviceName": "/dev/xvda",
"Ebs": {
"DeleteOnTermination": true,
"SnapshotId": "snap-0f15c399cd68cf47c",
"VolumeSize": 8,
"VolumeType": "gp2",
"Encrypted": false
}
}
],
"Description": "Debian 11 (20220121-894)",
"EnaSupport": true,
"Hypervisor": "xen",
"Name": "debian-11-amd64-20220121-894",
"RootDeviceName": "/dev/xvda",
"RootDeviceType": "ebs",
"SriovNetSupport": "simple",
"VirtualizationType": "hvm"
}
]
}
Relevant logs from the instance boot:
Feb 23 22:04:09 debian kernel: [ 1.763348] ixgbevf 0000:00:03.0 ens3:
renamed from eth0
...
Feb 23 22:04:09 debian kernel: [ 5.283750] ixgbevf 0000:00:03.0: NIC Link is
Up 10 Gbps
Feb 23 22:04:09 debian kernel: [ 5.287656] IPv6: ADDRCONF(NETDEV_CHANGE):
ens3: link becomes ready
...
Feb 23 22:04:09 debian systemd-udevd[239]: Using default interface naming
scheme 'v247'.
Feb 23 22:04:09 debian systemd-udevd[234]: ethtool: autonegotiation is unset or
enabled, the speed and duplex are not writable.
Feb 23 22:04:09 debian systemd-udevd[239]: ethtool: autonegotiation is unset or
enabled, the speed and duplex are not writable.
...
Feb 23 22:04:09 debian cloud-ifupdown-helper: Generated configuration for ens3
...
Feb 23 22:04:09 debian systemd[1]: Found device 82599 Ethernet Controller
Virtual Function.
...
Feb 23 22:04:09 debian dhclient[345]: Internet Systems Consortium DHCP Client
4.4.1
Feb 23 22:04:09 debian dhclient[345]: Copyright 2004-2018 Internet Systems
Consortium.
Feb 23 22:04:09 debian dhclient[345]: All rights reserved.
Feb 23 22:04:09 debian dhclient[345]: For info, please visit
https://www.isc.org/software/dhcp/
Feb 23 22:04:09 debian dhclient[345]:
Feb 23 22:04:09 debian dhclient[345]: Listening on LPF/ens3/02:e0:5c:07:ed:e7
Feb 23 22:04:09 debian dhclient[345]: Sending on LPF/ens3/02:e0:5c:07:ed:e7
Feb 23 22:04:09 debian dhclient[345]: Sending on Socket/fallback
Feb 23 22:04:09 debian dhclient[345]: DHCPDISCOVER on ens3 to 255.255.255.255
port 67 interval 5
Feb 23 22:04:09 debian dhclient[345]: DHCPDISCOVER on ens3 to 255.255.255.255
port 67 interval 13
Feb 23 22:04:09 debian dhclient[345]: DHCPDISCOVER on ens3 to 255.255.255.255
port 67 interval 8
Feb 23 22:04:09 debian dhclient[345]: DHCPDISCOVER on ens3 to 255.255.255.255
port 67 interval 13
Feb 23 22:04:09 debian dhclient[345]: DHCPDISCOVER on ens3 to 255.255.255.255
port 67 interval 10
Feb 23 22:04:09 debian dhclient[345]: DHCPDISCOVER on ens3 to 255.255.255.255
port 67 interval 12
Feb 23 22:04:09 debian dhclient[345]: No DHCPOFFERS received.
Feb 23 22:04:09 debian dhclient[345]: Unable to obtain a lease on first try.
Exiting.
Feb 23 22:04:09 debian cloud-init[342]: 2022-02-23 22:01:00,593 -
util.py[WARNING]: Getting data from <class
'cloudinit.sources.DataSourceEc2.DataSourceEc2Local'> failed
Feb 23 22:04:09 debian systemd[1]: Finished Initial cloud-init job
(pre-networking).
Feb 23 22:04:09 debian systemd[1]: Reached target Network (Pre).
Feb 23 22:04:09 debian systemd[1]: Started ifup for ens3.
Feb 23 22:04:09 debian systemd[1]: Starting Raise network interfaces...
Feb 23 22:04:09 debian dhclient[372]: Internet Systems Consortium DHCP Client
4.4.1
Feb 23 22:04:09 debian sh[372]: Internet Systems Consortium DHCP Client 4.4.1
Feb 23 22:04:09 debian sh[372]: Copyright 2004-2018 Internet Systems Consortium.
Feb 23 22:04:09 debian sh[372]: All rights reserved.
Feb 23 22:04:09 debian sh[372]: For info, please visit
https://www.isc.org/software/dhcp/
Feb 23 22:04:09 debian dhclient[372]: Copyright 2004-2018 Internet Systems
Consortium.
Feb 23 22:04:09 debian dhclient[372]: All rights reserved.
Feb 23 22:04:09 debian dhclient[372]: For info, please visit
https://www.isc.org/software/dhcp/
Feb 23 22:04:09 debian dhclient[372]:
Feb 23 22:04:09 debian ifup[354]: ifup: waiting for lock on
/run/network/ifstate.ens3
Feb 23 22:04:09 debian dhclient[372]: Listening on LPF/ens3/02:e0:5c:07:ed:e7
Feb 23 22:04:09 debian sh[372]: Listening on LPF/ens3/02:e0:5c:07:ed:e7
Feb 23 22:04:09 debian sh[372]: Sending on LPF/ens3/02:e0:5c:07:ed:e7
Feb 23 22:04:09 debian sh[372]: Sending on Socket/fallback
Feb 23 22:04:09 debian sh[372]: Created duid
"\000\001\000\001)\251k\034\002\340\\\007\355\347".
Feb 23 22:04:09 debian dhclient[372]: Sending on LPF/ens3/02:e0:5c:07:ed:e7
Feb 23 22:04:09 debian sh[372]: DHCPDISCOVER on ens3 to 255.255.255.255 port 67
interval 5
Feb 23 22:04:09 debian dhclient[372]: Sending on Socket/fallback
Feb 23 22:04:09 debian dhclient[372]: Created duid
"\000\001\000\001)\251k\034\002\340\\\007\355\347".
Feb 23 22:04:09 debian dhclient[372]: DHCPDISCOVER on ens3 to 255.255.255.255
port 67 interval 5
Feb 23 22:04:09 debian dhclient[372]: DHCPDISCOVER on ens3 to 255.255.255.255
port 67 interval 11
Feb 23 22:04:09 debian sh[372]: DHCPDISCOVER on ens3 to 255.255.255.255 port 67
interval 11
Feb 23 22:04:09 debian dhclient[372]: DHCPDISCOVER on ens3 to 255.255.255.255
port 67 interval 14
Feb 23 22:04:09 debian sh[372]: DHCPDISCOVER on ens3 to 255.255.255.255 port 67
interval 14
Feb 23 22:04:09 debian dhclient[372]: DHCPDISCOVER on ens3 to 255.255.255.255
port 67 interval 15
Feb 23 22:04:09 debian sh[372]: DHCPDISCOVER on ens3 to 255.255.255.255 port 67
interval 15
Feb 23 22:04:09 debian dhclient[372]: DHCPDISCOVER on ens3 to 255.255.255.255
port 67 interval 15
Feb 23 22:04:09 debian sh[372]: DHCPDISCOVER on ens3 to 255.255.255.255 port 67
interval 15
Feb 23 22:04:09 debian dhclient[372]: DHCPDISCOVER on ens3 to 255.255.255.255
port 67 interval 1
Feb 23 22:04:09 debian sh[372]: DHCPDISCOVER on ens3 to 255.255.255.255 port 67
interval 1
Feb 23 22:04:09 debian dhclient[372]: No DHCPOFFERS received.
Feb 23 22:04:09 debian sh[372]: No DHCPOFFERS received.
Feb 23 22:04:09 debian sh[372]: No working leases in persistent database -
sleeping.
Feb 23 22:04:09 debian dhclient[372]: No working leases in persistent database
- sleeping.
Feb 23 22:04:09 debian dhclient[414]: Internet Systems Consortium DHCP Client
4.4.1
Feb 23 22:04:09 debian sh[414]: Internet Systems Consortium DHCP Client 4.4.1
Feb 23 22:04:09 debian sh[414]: Copyright 2004-2018 Internet Systems Consortium.
Feb 23 22:04:09 debian sh[414]: All rights reserved.
Feb 23 22:04:09 debian sh[414]: For info, please visit
https://www.isc.org/software/dhcp/
Feb 23 22:04:09 debian dhclient[414]: Copyright 2004-2018 Internet Systems
Consortium.
Feb 23 22:04:09 debian dhclient[414]: All rights reserved.
Feb 23 22:04:09 debian dhclient[414]: For info, please visit
https://www.isc.org/software/dhcp/
Feb 23 22:04:09 debian dhclient[414]:
Feb 23 22:04:09 debian dhclient[414]: Listening on Socket/ens3
Feb 23 22:04:09 debian sh[414]: Listening on Socket/ens3
Feb 23 22:04:09 debian sh[414]: Sending on Socket/ens3
Feb 23 22:04:09 debian sh[414]: PRC: Soliciting for leases (INIT).
Feb 23 22:04:09 debian dhclient[414]: Sending on Socket/ens3
Feb 23 22:04:09 debian sh[445]: ens3=ens3
Feb 23 22:04:09 debian systemd[1]: Finished Raise network interfaces.
By comparison, a working instance installs the DHCP configuration quickly:
Feb 23 22:48:26 ip-10-0-0-127 dhclient[346]: Internet Systems Consortium DHCP
Client 4.4.1
Feb 23 22:48:26 ip-10-0-0-127 dhclient[346]: Copyright 2004-2018 Internet
Systems Consortium.
Feb 23 22:48:26 ip-10-0-0-127 dhclient[346]: All rights reserved.
Feb 23 22:48:26 ip-10-0-0-127 dhclient[346]: For info, please visit
https://www.isc.org/software/dhcp/
Feb 23 22:48:26 ip-10-0-0-127 dhclient[346]:
Feb 23 22:48:26 ip-10-0-0-127 dhclient[346]: Listening on
LPF/ens3/02:3a:36:13:0d:db
Feb 23 22:48:26 ip-10-0-0-127 dhclient[346]: Sending on
LPF/ens3/02:3a:36:13:0d:db
Feb 23 22:48:26 ip-10-0-0-127 dhclient[346]: Sending on Socket/fallback
Feb 23 22:48:26 ip-10-0-0-127 dhclient[346]: DHCPDISCOVER on ens3 to
255.255.255.255 port 67 interval 3
Feb 23 22:48:26 ip-10-0-0-127 dhclient[346]: DHCPOFFER of 10.0.0.127 from
10.0.0.1
Feb 23 22:48:26 ip-10-0-0-127 dhclient[346]: DHCPREQUEST for 10.0.0.127 on ens3
to 255.255.255.255 port 67
Feb 23 22:48:26 ip-10-0-0-127 dhclient[346]: DHCPACK of 10.0.0.127 from 10.0.0.1
Feb 23 22:48:26 ip-10-0-0-127 dhclient[346]: bound to 10.0.0.127 -- renewal in
1515 seconds.
Feb 23 22:48:26 ip-10-0-0-127 systemd[1]: Finished Initial cloud-init job
(pre-networking).
Feb 23 22:48:26 ip-10-0-0-127 systemd[1]: Reached target Network (Pre).
Feb 23 22:48:26 ip-10-0-0-127 systemd[1]: Started ifup for ens3.
Feb 23 22:48:26 ip-10-0-0-127 systemd[1]: Starting Raise network interfaces...
Feb 23 22:48:26 ip-10-0-0-127 dhclient[383]: Internet Systems Consortium DHCP
Client 4.4.1
Feb 23 22:48:26 ip-10-0-0-127 sh[383]: Internet Systems Consortium DHCP Client
4.4.1
Feb 23 22:48:26 ip-10-0-0-127 sh[383]: Copyright 2004-2018 Internet Systems
Consortium.
Feb 23 22:48:26 ip-10-0-0-127 sh[383]: All rights reserved.
Feb 23 22:48:26 ip-10-0-0-127 sh[383]: For info, please visit
https://www.isc.org/software/dhcp/
Feb 23 22:48:26 ip-10-0-0-127 dhclient[383]: Copyright 2004-2018 Internet
Systems Consortium.
Feb 23 22:48:26 ip-10-0-0-127 dhclient[383]: All rights reserved.
Feb 23 22:48:26 ip-10-0-0-127 dhclient[383]: For info, please visit
https://www.isc.org/software/dhcp/
Feb 23 22:48:26 ip-10-0-0-127 dhclient[383]:
Feb 23 22:48:26 ip-10-0-0-127 ifup[368]: ifup: waiting for lock on
/run/network/ifstate.ens3
Feb 23 22:48:26 ip-10-0-0-127 dhclient[383]: Listening on
LPF/ens3/02:3a:36:13:0d:db
Feb 23 22:48:26 ip-10-0-0-127 sh[383]: Listening on LPF/ens3/02:3a:36:13:0d:db
Feb 23 22:48:26 ip-10-0-0-127 sh[383]: Sending on LPF/ens3/02:3a:36:13:0d:db
Feb 23 22:48:26 ip-10-0-0-127 sh[383]: Sending on Socket/fallback
Feb 23 22:48:26 ip-10-0-0-127 sh[383]: Created duid
"\000\001\000\001)\251v7\002:6\023\015\333".
Feb 23 22:48:26 ip-10-0-0-127 dhclient[383]: Sending on
LPF/ens3/02:3a:36:13:0d:db
Feb 23 22:48:26 ip-10-0-0-127 sh[383]: DHCPDISCOVER on ens3 to 255.255.255.255
port 67 interval 5
Feb 23 22:48:26 ip-10-0-0-127 dhclient[383]: Sending on Socket/fallback
Feb 23 22:48:26 ip-10-0-0-127 dhclient[383]: Created duid
"\000\001\000\001)\251v7\002:6\023\015\333".
Feb 23 22:48:26 ip-10-0-0-127 sh[383]: DHCPOFFER of 10.0.0.127 from 10.0.0.1
Feb 23 22:48:26 ip-10-0-0-127 sh[383]: DHCPREQUEST for 10.0.0.127 on ens3 to
255.255.255.255 port 67
Feb 23 22:48:26 ip-10-0-0-127 dhclient[383]: DHCPDISCOVER on ens3 to
255.255.255.255 port 67 interval 5
Feb 23 22:48:26 ip-10-0-0-127 sh[383]: DHCPACK of 10.0.0.127 from 10.0.0.1
Feb 23 22:48:26 ip-10-0-0-127 dhclient[383]: DHCPOFFER of 10.0.0.127 from
10.0.0.1
Feb 23 22:48:26 ip-10-0-0-127 dhclient[383]: DHCPREQUEST for 10.0.0.127 on ens3
to 255.255.255.255 port 67
Feb 23 22:48:26 ip-10-0-0-127 dhclient[383]: DHCPACK of 10.0.0.127 from 10.0.0.1
Feb 23 22:48:26 ip-10-0-0-127 dhclient[383]: bound to 10.0.0.127 -- renewal in
1668 seconds.
Feb 23 22:48:26 ip-10-0-0-127 sh[383]: bound to 10.0.0.127 -- renewal in 1668
seconds.
Feb 23 22:48:26 ip-10-0-0-127 dhclient[459]: Internet Systems Consortium DHCP
Client 4.4.1
Feb 23 22:48:26 ip-10-0-0-127 sh[459]: Internet Systems Consortium DHCP Client
4.4.1
Feb 23 22:48:26 ip-10-0-0-127 sh[459]: Copyright 2004-2018 Internet Systems
Consortium.
Feb 23 22:48:26 ip-10-0-0-127 sh[459]: All rights reserved.
Feb 23 22:48:26 ip-10-0-0-127 sh[459]: For info, please visit
https://www.isc.org/software/dhcp/
Feb 23 22:48:26 ip-10-0-0-127 dhclient[459]: Copyright 2004-2018 Internet
Systems Consortium.
Feb 23 22:48:26 ip-10-0-0-127 dhclient[459]: All rights reserved.
Feb 23 22:48:26 ip-10-0-0-127 dhclient[459]: For info, please visit
https://www.isc.org/software/dhcp/
Feb 23 22:48:26 ip-10-0-0-127 dhclient[459]:
Feb 23 22:48:26 ip-10-0-0-127 dhclient[459]: Listening on Socket/ens3
Feb 23 22:48:26 ip-10-0-0-127 sh[459]: Listening on Socket/ens3
Feb 23 22:48:26 ip-10-0-0-127 sh[459]: Sending on Socket/ens3
Feb 23 22:48:26 ip-10-0-0-127 sh[459]: PRC: Soliciting for leases (INIT).
Feb 23 22:48:26 ip-10-0-0-127 dhclient[459]: Sending on Socket/ens3
Feb 23 22:48:26 ip-10-0-0-127 sh[490]: ens3=ens3
Feb 23 22:48:26 ip-10-0-0-127 systemd[1]: Finished Raise network interfaces.
--- End Message ---
--- Begin Message ---
Source: linux
Source-Version: 5.10.113-1
Done: Salvatore Bonaccorso <car...@debian.org>
We believe that the bug you reported is fixed in the latest version of
linux, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 1006...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Salvatore Bonaccorso <car...@debian.org> (supplier of updated linux package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Fri, 29 Apr 2022 11:36:50 +0200
Source: linux
Architecture: source
Version: 5.10.113-1
Distribution: bullseye-security
Urgency: high
Maintainer: Debian Kernel Team <debian-kernel@lists.debian.org>
Changed-By: Salvatore Bonaccorso <car...@debian.org>
Closes: 1006346 1008299
Changes:
linux (5.10.113-1) bullseye-security; urgency=high
.
* New upstream stable update:
https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.107
- Revert "xfrm: state and policy should fail if XFRMA_IF_ID 0"
(Closes: #1008299)
- xfrm: Check if_id in xfrm_migrate
- xfrm: Fix xfrm migrate issues when address family changes
- mac80211: refuse aggregations sessions before authorized
- [mips64el,mipsel] smp: fill in sibling and core maps earlier
- [x86] atm: firestream: check the return value of ioremap() in fs_init()
- iwlwifi: don't advertise TWT support
- drm/vrr: Set VRR capable prop only if it is attached to connector
- nl80211: Update bss channel on channel switch for P2P_CLIENT
- sfc: extend the locking on mcdi->seqno
https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.108
- [arm64] crypto: qcom-rng - ensure buffer for generate is completely
filled
- ocfs2: fix crash when initialize filecheck kobj fails
- mm: swap: get rid of livelock in swapin readahead
- efi: fix return value of __setup handlers
- vsock: each transport cycles only on its own sockets
- esp6: fix check on ipv6_skip_exthdr's return value
- net: phy: marvell: Fix invalid comparison in the resume and suspend
functions
- net/packet: fix slab-out-of-bounds access in packet_recvmsg()
- atm: eni: Add check for dma_map_single
- [x86] hv_netvsc: Add check for kvmalloc_array
- [armhf] drm/imx: parallel-display: Remove bus flags check in
imx_pd_bridge_atomic_check()
- [arm64,armhf] drm/panel: simple: Fix Innolux G070Y2-L01 BPP settings
- net: handle ARPHRD_PIMREG in dev_is_mac_header_xmit()
- [arm64,armhf] net: dsa: Add missing of_node_put() in dsa_port_parse_of
- net: phy: mscc: Add MODULE_FIRMWARE macros
- bnx2x: fix built-in kernel driver load failure
- [arm64] net: bcmgenet: skip invalid partial checksums
- [arm64] net: mscc: ocelot: fix backwards compatibility with single-chain
tc-flower offload
- usb: gadget: rndis: prevent integer overflow in rndis_set_response()
- usb: gadget: Fix use-after-free bug by not setting udc->dev.driver
- usb: usbtmc: Fix bug in pipe direction for control transfers
- scsi: mpt3sas: Page fault in reply q processing
- Input: aiptek - properly check endpoint type
- perf symbols: Fix symbol size calculation condition
- net: usb: Correct PHY handling of smsc95xx
- net: usb: Correct reset handling of smsc95xx
- smsc95xx: Ignore -ENODEV errors when device is unplugged
- esp: Fix possible buffer overflow in ESP transformation (CVE-2022-27666)
https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.109
- nfc: st21nfca: Fix potential buffer overflows in EVT_TRANSACTION
(CVE-2022-26490)
- net: ipv6: fix skb_over_panic in __ip6_append_data
- exfat: avoid incorrectly releasing for root inode
- cgroup: Allocate cgroup_file_ctx for kernfs_open_file->priv
(CVE-2021-4197)
- cgroup: Use open-time cgroup namespace for process migration perm checks
(CVE-2021-4197)
- cgroup-v1: Correct privileges check in release_agent writes
- tpm: Fix error handling in async work
- llc: fix netdevice reference leaks in llc_ui_bind() (CVE-2022-28356)
- ALSA: oss: Fix PCM OSS buffer allocation overflow
- ALSA: hda/realtek: Add quirk for Clevo NP70PNJ
- ALSA: hda/realtek: Add quirk for Clevo NP50PNJ
- ALSA: hda/realtek - Fix headset mic problem for a HP machine with alc671
- ALSA: hda/realtek: Add quirk for ASUS GA402
- ALSA: pcm: Fix races among concurrent hw_params and hw_free calls
(CVE-2022-1048)
- ALSA: pcm: Fix races among concurrent read/write and buffer changes
(CVE-2022-1048)
- ALSA: pcm: Fix races among concurrent prepare and hw_params/hw_free calls
(CVE-2022-1048)
- ALSA: pcm: Fix races among concurrent prealloc proc writes
(CVE-2022-1048)
- ALSA: pcm: Add stream lock during PCM reset ioctl operations
- ALSA: usb-audio: Add mute TLV for playback volumes on RODE NT-USB
- ALSA: cmipci: Restore aux vol on suspend/resume
- ALSA: pci: fix reading of swapped values from pcmreg in AC97 codec
- [arm64] drivers: net: xgene: Fix regression in CRC stripping
- netfilter: nf_tables: initialize registers in nft_do_chain()
(CVE-2022-1016)
- [x86] ACPI / x86: Work around broken XSDT on Advantech DAC-BJ01 board
- ACPI: battery: Add device HID and quirk for Microsoft Surface Go 3
- [x86] ACPI: video: Force backlight native for Clevo NL5xRU and NL5xNU
- [x86] crypto: qat - disable registration of algorithms
- Revert "ath: add support for special 0x0 regulatory domain"
- rcu: Don't deboost before reporting expedited quiescent state
- mac80211: fix potential double free on mesh join
- tpm: use try_get_ops() in tpm-space.c
- [arm64] wcn36xx: Differentiate wcn3660 from wcn3620
- llc: only change llc->dev when bind() succeeds
https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.110
- swiotlb: fix info leak with DMA_FROM_DEVICE (CVE-2022-0854)
- USB: serial: pl2303: add IBM device IDs
- USB: serial: simple: add Nokia phone driver
- netdevice: add the case if dev is NULL
- HID: logitech-dj: add new lightspeed receiver id
- xfrm: fix tunnel model fragmentation behavior
- virtio_console: break out of buf poll on remove
- ethernet: sun: Free the coherent when failing in probing
- gpio: Revert regression in sysfs-gpio (gpiolib.c)
- spi: Fix invalid sgs value
- Revert "gpio: Revert regression in sysfs-gpio (gpiolib.c)"
- spi: Fix erroneous sgs value with min_t()
- af_key: add __GFP_ZERO flag for compose_sadb_supported in function
pfkey_register (CVE-2022-1353)
- [arm*] iommu/iova: Improve 32-bit free space estimate
- tpm: fix reference counting for struct tpm_chip
- virtio-blk: Use blk_validate_block_size() to validate block size
- USB: usb-storage: Fix use of bitfields for hardware data in ene_ub6250.c
- xhci: fix garbage USBSTS being logged in some cases
- xhci: fix runtime PM imbalance in USB2 resume
- xhci: make xhci_handshake timeout for xhci_reset() adjustable
- xhci: fix uninitialized string returned by xhci_decode_ctrl_ctx()
- [x86] mei: me: add Alder Lake N device id.
- [x86] mei: avoid iterator usage outside of list_for_each_entry
- iio: inkern: apply consumer scale on IIO_VAL_INT cases
- iio: inkern: apply consumer scale when no channel scale is available
- iio: inkern: make a best effort on offset calculation
- ptrace: Check PTRACE_O_SUSPEND_SECCOMP permission on PTRACE_SEIZE
- KEYS: fix length validation in keyctl_pkey_params_get_2()
- Documentation: add link to stable release candidate tree
- Documentation: update stable tree link
- firmware: stratix10-svc: add missing callback parameter on RSU
- SUNRPC: avoid race between mod_timer() and del_timer_sync()
- NFSD: prevent underflow in nfssvc_decode_writeargs()
- NFSD: prevent integer overflow on 32 bit systems
- f2fs: fix to unlock page correctly in error path of is_alive()
- f2fs: quota: fix loop condition at f2fs_quota_sync()
- f2fs: fix to do sanity check on .cp_pack_total_block_count
- [armhf] remoteproc: Fix count check in rproc_coredump_write()
- [armhf] pinctrl: samsung: drop pin banks references on error paths
- mtd: rawnand: protect access to rawnand devices while in suspend
- can: ems_usb: ems_usb_start_xmit(): fix double dev_kfree_skb() in error
path (CVE-2022-28390)
- jffs2: fix use-after-free in jffs2_clear_xattr_subsystem
- jffs2: fix memory leak in jffs2_do_mount_fs
- jffs2: fix memory leak in jffs2_scan_medium
- mm/pages_alloc.c: don't create ZONE_MOVABLE beyond the end of a node
- mm: invalidate hwpoison page cache page in fault path
- mempolicy: mbind_range() set_policy() after vma_merge()
- scsi: libsas: Fix sas_ata_qc_issue() handling of NCQ NON DATA commands
- qed: display VF trust config
- qed: validate and restrict untrusted VFs vlan promisc mode
- Revert "Input: clear BTN_RIGHT/MIDDLE on buttonpads"
- cifs: prevent bad output lengths in smb2_ioctl_query_info()
- cifs: fix NULL ptr dereference in smb2_ioctl_query_info()
(CVE-2022-0168)
- [i386] ALSA: cs4236: fix an incorrect NULL check on list iterator
- ALSA: hda: Avoid unsol event during RPM suspending
- ALSA: pcm: Fix potential AB/BA lock with buffer_mutex and mmap_lock
- ALSA: hda/realtek: Fix audio regression on Mi Notebook Pro 2020
- mm: madvise: skip unmapped vma holes passed to process_madvise
- mm: madvise: return correct bytes advised with process_madvise
- Revert "mm: madvise: skip unmapped vma holes passed to process_madvise"
- mm,hwpoison: unmap poisoned page before invalidation
- dm integrity: set journal entry unused when shrinking device
- drbd: fix potential silent data corruption
- can: isotp: sanitize CAN ID checks in isotp_bind()
- [powerpc*] kvm: Fix kvm_use_magic_page
- udp: call udp_encap_enable for v6 sockets when enabling encap
- [arm64] signal: nofpsimd: Do not allocate fp/simd context when not
available
- ACPI: properties: Consistently return -ENOENT if there are no more
references
- coredump: Also dump first pages of non-executable ELF libraries
- ext4: fix ext4_fc_stats trace point
- ext4: fix fs corruption when tring to remove a non-empty directory with
IO
error
- drivers: hamradio: 6pack: fix UAF bug caused by mod_timer()
(CVE-2022-1198)
- block: limit request dispatch loop duration
- block: don't merge across cgroup boundaries if blkcg is enabled
- drm/edid: check basic audio support on CEA extension block
- [armhf] dts: exynos: add missing HDMI supplies on SMDK5250
- [armhf] dts: exynos: add missing HDMI supplies on SMDK5420
- [x86] mgag200 fix memmapsl configuration in GCTL6 register
- carl9170: fix missing bit-wise or operator for tx_params
- pstore: Don't use semaphores in always-atomic-context code
- [x86] thermal: int340x: Increase bitmap size
- exec: Force single empty string when argv is empty
- crypto: rsa-pkcs1pad - only allow with rsa
- crypto: rsa-pkcs1pad - correctly get hash from source scatterlist
- crypto: rsa-pkcs1pad - restore signature length check
- crypto: rsa-pkcs1pad - fix buffer overread in pkcs1pad_verify_complete()
- bcache: fixup multiple threads crash
- DEC: Limit PMAX memory probing to R3k systems
- brcmfmac: firmware: Allocate space for default boardrev in nvram
- brcmfmac: pcie: Release firmwares in the brcmf_pcie_setup error path
- brcmfmac: pcie: Replace brcmf_pcie_copy_mem_todev with memcpy_toio
- brcmfmac: pcie: Fix crashes due to early IRQs
- [x86] drm/i915/opregion: check port number bounds for SWSCI display power
state
- [x86] drm/i915/gem: add missing boundary check in vm_access
- PCI: pciehp: Clear cmd_busy bit in polling mode
- [arm64] PCI: xgene: Revert "PCI: xgene: Fix IB window setup"
- [arm64] regulator: qcom_smd: fix for_each_child.cocci warnings
- selinux: check return value of sel_make_avc_files
- [arm64] hwrng: cavium - Check health status while reading random data
- [arm64] hwrng: cavium - HW_RANDOM_CAVIUM should depend on ARCH_THUNDER
- crypto: authenc - Fix sleep in atomic context in decrypt_tail
- [x86] thermal: int340x: Check for NULL after calling kmemdup()
- [arm64,armhf] spi: tegra114: Add missing IRQ check in tegra_spi_probe
- [arm64] mm: avoid fixmap race condition when create pud mapping
- audit: log AUDIT_TIME_* records only from rules
- spi: pxa2xx-pci: Balance reference count for PCI DMA device
- [armhf] hwmon: (pmbus) Add mutex to regulator ops
- hwmon: (sch56xx-common) Replace WDOG_ACTIVE with WDOG_HW_RUNNING
- nvme: cleanup __nvme_check_ids
- block: don't delete queue kobject before its children
- PM: hibernate: fix __setup handler error handling
- PM: suspend: fix return value of __setup handler
- [arm64] crypto: sun8i-ce - call finalize with bh disabled
- [arm64,armhf] crypto: amlogic - call finalize with bh disabled
- [armhf] clocksource/drivers/timer-ti-dm: Fix regression from errata i940
fix
- [armhf] clocksource/drivers/exynos_mct: Refactor resources allocation
- [armhf] clocksource/drivers/exynos_mct: Handle DTS with higher number of
interrupts
- clocksource/drivers/timer-of: Check return value of of_iomap in
timer_of_base_init()
- ACPI: APEI: fix return value of __setup handlers
- [x86] crypto: ccp - ccp_dmaengine_unregister release dma channels
- [arm*] amba: Make the remove callback return void
- [armhf] hwmon: (pmbus) Add Vin unit off handling
- [x86] clocksource: acpi_pm: fix return value of __setup handler
- io_uring: terminate manual loop iterator loop correctly for non-vecs
- watch_queue: Fix NULL dereference in error cleanup
- watch_queue: Actually free the watch
- f2fs: fix to enable ATGC correctly via gc_idle sysfs interface
- sched/debug: Remove mpol_get/put and task_lock/unlock from
sched_show_numa
- sched/core: Export pelt_thermal_tp
- rseq: Optimise rseq_get_rseq_cs() and clear_rseq_cs()
- rseq: Remove broken uapi field layout on 32-bit little endian
- perf/core: Fix address filter parser for multiple filters
- [x86] perf/x86/intel/pt: Fix address filter config for 32-bit kernel
- f2fs: fix missing free nid in f2fs_handle_failed_inode
- nfsd: more robust allocation failure handling in nfsd_file_cache_init
- f2fs: fix to avoid potential deadlock
- btrfs: fix unexpected error path when reflinking an inline extent
- f2fs: compress: remove unneeded read when rewrite whole cluster
- f2fs: fix compressed file start atomic write may cause data corruption
- [arm64,armhf] media: v4l2-mem2mem: Apply DST_QUEUE_OFF_BASE on MMAP
buffers across ioctls
- media: bttv: fix WARNING regression on tunerless devices
- [arm*] ASoC: generic: simple-card-utils: remove useless assignment
- [armhf] media: coda: Fix missing put_device() call in coda_get_vdoa_data
- [armhf] media: aspeed: Correct value for h-total-pixels
- video: fbdev: matroxfb: set maxvram of vbG200eW to the same as vbG200 to
avoid black screen
- video: fbdev: smscufx: Fix null-ptr-deref in ufx_usb_probe()
- video: fbdev: fbcvt.c: fix printing in fb_cvt_print_name()
- [arm64] firmware: qcom: scm: Remove reassignment to desc following
initializer
- firmware: ti_sci: Fix compilation failure when CONFIG_TI_SCI_PROTOCOL is
not defined
- [armhf] dts: imx: Add missing LVDS decoder on M53Menlo
- media: em28xx: initialize refcount before kref_get
- media: usb: go7007: s2250-board: fix leak in probe()
- [arm64,armhf] media: cedrus: H265: Fix neighbour info buffer size
- [arm64,armhf] media: cedrus: h264: Fix neighbour info buffer size
- [x86] ASoC: rt5663: check the return value of devm_kzalloc() in
rt5663_parse_dp()
- printk: fix return value of printk.devkmsg __setup handler
- [x86] ASoC: soc-compress: prevent the potentially use of null pointer
- [armhf] memory: emif: Add check for setup_interrupts
- [armhf] memory: emif: check the pointer temp in get_device_details()
- ALSA: firewire-lib: fix uninitialized flag for AV/C deferred transaction
- [arm64] dts: rockchip: Fix SDIO regulator supply properties on
rk3399-firefly
- media: stk1160: If start stream fails, return buffers with
VB2_BUF_STATE_QUEUED
- media: saa7134: convert list_for_each to entry variant
- media: saa7134: fix incorrect use to determine if list is empty
- ivtv: fix incorrect device_caps for ivtvfb
- [arm64,armhf] ASoC: rockchip: i2s: Use
devm_platform_get_and_ioremap_resource()
- [arm64,armhf] ASoC: rockchip: i2s: Fix missing clk_disable_unprepare() in
rockchip_i2s_probe
- ASoC: dmaengine: do not use a NULL prepare_slave_config() callback
- [armhf] ASoC: fsl_spdif: Disable TX clock when stop
- [armhf] ASoC: imx-es8328: Fix error return code in imx_es8328_probe()
- [arm64] drm/meson: osd_afbcd: Add an exit callback to struct
meson_afbcd_ops
- [arm64,armhf] drm/bridge: Add missing pm_runtime_disable() in
__dw_mipi_dsi_probe
- [arm64] drm: bridge: adv7511: Fix ADV7535 HPD enablement
- ath10k: fix memory overwrite of the WoWLAN wakeup packet pattern
- [arm64,armhf] drm/panfrost: Check for error num after setting mask
- Bluetooth: hci_serdev: call init_rwsem() before p->open()
- [armhf] mtd: rawnand: gpmi: fix controller timings setting
- drm/edid: Don't clear formats if using deep color
- drm/nouveau/acr: Fix undefined behavior in nvkm_acr_hsfw_load_bl()
- drm/amd/display: Fix a NULL pointer dereference in
amdgpu_dm_connector_add_common_modes()
- drm/amd/pm: return -ENOTSUPP if there is no get_dpm_ultimate_freq
function
- ath9k_htc: fix uninit value bugs
- RDMA/core: Set MR type in ib_reg_user_mr
- [powerpc*] KVM: PPC: Fix vmx/vsx mixup in mmio emulation
- i40e: don't reserve excessive XDP_PACKET_HEADROOM on XSK Rx to skb
- i40e: respect metadata on XSK Rx to skb
- [x86] ray_cs: Check ioremap return value
- [powerpc*] KVM: PPC: Book3S HV: Check return value of kvmppc_radix_init
- [powerpc*] perf: Don't use perf_hw_context for trace IMC PMU
- [arm64,armhf] net: dsa: mv88e6xxx: Enable port policy support on 6097
- [arm64] PCI: aardvark: Fix reading PCI_EXP_RTSTA_PME bit on emulated
bridge
- [arm64,armhf] drm/bridge: dw-hdmi: use safe format when first in bridge
chain
- HID: i2c-hid: fix GET/SET_REPORT for unnumbered reports
- drm/amd/pm: enable pm sysfs write for one VF mode
- drm/amd/display: Add affected crtcs to atomic state for dsc mst unplug
- IB/cma: Allow XRC INI QPs to set their local ACK timeout
- dax: make sure inodes are flushed before destroy cache
- iwlwifi: Fix -EIO error code that is never returned
- iwlwifi: mvm: Fix an error code in iwl_mvm_up()
- [arm64] drm/msm/dp: populate connector of struct dp_panel
- [arm64] drm/msm/dpu: add DSPP blocks teardown
- [arm64] drm/msm/dpu: fix dp audio condition
- scsi: pm8001: Fix command initialization in pm80XX_send_read_log()
- scsi: pm8001: Fix command initialization in pm8001_chip_ssp_tm_req()
- scsi: pm8001: Fix payload initialization in pm80xx_set_thermal_config()
- scsi: pm8001: Fix le32 values handling in
pm80xx_set_sas_protocol_timer_config()
- scsi: pm8001: Fix payload initialization in pm80xx_encrypt_update()
- scsi: pm8001: Fix le32 values handling in pm80xx_chip_ssp_io_req()
- scsi: pm8001: Fix le32 values handling in pm80xx_chip_sata_req()
- scsi: pm8001: Fix NCQ NON DATA command task initialization
- scsi: pm8001: Fix NCQ NON DATA command completion handling
- scsi: pm8001: Fix abort all task initialization
- RDMA/mlx5: Fix the flow of a miss in the allocation of a cache ODP MR
- drm/amd/display: Remove vupdate_int_entry definition
- TOMOYO: fix __setup handlers return values
- [arm64,armhf] drm/tegra: Fix reference leak in tegra_dsi_ganged_probe
- [x86] power: supply: bq24190_charger: Fix bq24190_vbus_is_enabled() wrong
false return
- [arm64] scsi: hisi_sas: Change permission of parameter prot_mask
- [arm64] bpf, arm64: Call build_prologue() first in first JIT pass
- [arm64] bpf, arm64: Feed byte-offset into bpf line info
- [arm64,armhf] gpu: host1x: Fix a memory leak in 'host1x_remove()'
- [powerpc*] mm/numa: skip NUMA_NO_NODE onlining in parse_numa_properties()
- [x86] KVM: x86: Fix emulation in writing cr8
- [x86] KVM: x86/emulator: Defer not-present segment check in
__load_segment_descriptor()
- [x86] hv_balloon: rate-limit "Unhandled message" warning
- [amd64] IB/hfi1: Allow larger MTU without AIP
- PCI: Reduce warnings on possible RW1C corruption
- [armhf] mfd: mc13xxx: Add check for mc13xxx_irq_request
- [x86] platform/x86: huawei-wmi: check the return value of
device_create_file()
- vxcan: enable local echo for sent CAN frames
- ath10k: Fix error handling in ath10k_setup_msa_resources
- [mips*] pgalloc: fix memory leak caused by pgd_free()
- RDMA/mlx5: Fix memory leak in error flow for subscribe event routine
- bpf, sockmap: Fix memleak in tcp_bpf_sendmsg while sk msg is full
- bpf, sockmap: Fix more uncharged while msg has more_data
- bpf, sockmap: Fix double uncharge the mem of sk_msg
- USB: storage: ums-realtek: fix error code in rts51x_read_mem()
- can: isotp: return -EADDRNOTAVAIL when reading from unbound socket
- can: isotp: support MSG_TRUNC flag when reading from socket
- Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed
- ipv4: Fix route lookups when handling ICMP redirects and PMTU updates
- af_netlink: Fix shift out of bounds in group mask calculation
- [arm64,armhf] i2c: meson: Fix wrong speed use from probe
- PCI: Avoid broken MSI on SB600 USB devices
- [arm64] net: bcmgenet: Use stronger register read/writes to assure
ordering
- tcp: ensure PMTU updates are processed during fastopen
- openvswitch: always update flow key after nat
- tipc: fix the timer expires after interval 100ms
- [x86] mxser: fix xmit_buf leak in activate when LSR == 0xff
- [armhf] fsi: aspeed: convert to devm_platform_ioremap_resource
- [armhf] fsi: Aspeed: Fix a potential double free
- soundwire: intel: fix wrong register name in intel_shim_wake
- iio: mma8452: Fix probe failing when an i2c_device_id is used
- [arm64,armhf] phy: dphy: Correct lpx parameter and its
derivatives(ta_{get,go,sure})
- [x86] serial: 8250_mid: Balance reference count for PCI DMA device
- [x86] serial: 8250_lpss: Balance reference count for PCI DMA device
- NFS: Use of mapping_set_error() results in spurious errors
- serial: 8250: Fix race condition in RTS-after-send handling
- NFS: Return valid errors from nfs2/3_decode_dirent()
- [arm64] clk: qcom: clk-rcg2: Update logic to calculate D value for RCG
- [arm64] clk: qcom: clk-rcg2: Update the frac table for pixel clock
- nvdimm/region: Fix default alignment for small regions
- [armhf] clk: tegra: tegra124-emc: Fix missing put_device() call in
emc_ensure_emc_driver
- NFS: remove unneeded check in decode_devicenotify_args()
- [arm64,armhf] pinctrl/rockchip: Add missing of_node_put() in
rockchip_pinctrl_probe
- [s390x] tty: hvc: fix return value of __setup handler
- serial: 8250: fix XOFF/XON sending when DMA is used
- driver core: dd: fix return value of __setup handler
- jfs: fix divide error in dbNextAG
- netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options
- NFSv4.1: don't retry BIND_CONN_TO_SESSION on session error
- kdb: Fix the putarea helper function
- clk: Initialize orphan req_rate
- [amd64] xen: fix is_xen_pmu()
- [arm64] net: enetc: report software timestamping via SO_TIMESTAMPING
- [arm64] net: hns3: fix bug when PF set the duplicate MAC address for VFs
- net: phy: broadcom: Fix brcm_fet_config_init()
- NFSv4/pNFS: Fix another issue with a list iterator pointing to the head
- [armhf] net: dsa: bcm_sf2_cfp: fix an incorrect NULL check on list
iterator
- fs: fd tables have to be multiples of BITS_PER_LONG
- fs: fix fd table size alignment properly
- LSM: general protection fault in legacy_parse_param
- block, bfq: don't move oom_bfqq
- selinux: use correct type for context length
- selinux: allow FIOCLEX and FIONCLEX with policy capability
- loop: use sysfs_emit() in the sysfs xxx show()
- Fix incorrect type in assignment of ipv6 port for audit
- fs/binfmt_elf: Fix AT_PHDR for unusual ELF files
- bfq: fix use-after-free in bfq_dispatch_request
- ACPICA: Avoid walking the ACPI Namespace if it is not there
- Revert "Revert "block, bfq: honor already-setup queue merges""
- ACPI/APEI: Limit printable size of BERT table data
- PM: core: keep irq flags in device_pm_check_callbacks()
- nvme-tcp: lockdep: annotate in-kernel sockets
- [arm64] spi: tegra20: Use of_device_get_match_data()
- ext4: correct cluster len and clusters changed accounting in
ext4_mb_mark_bb
- ext4: fix ext4_mb_mark_bb() with flex_bg with fast_commit
- ext4: don't BUG if someone dirty pages without asking ext4 first
- f2fs: fix to do sanity check on curseg->alloc_type
- NFSD: Fix nfsd_breaker_owns_lease() return values
- f2fs: compress: fix to print raw data size in error path of lz4
decompression
- video: fbdev: cirrusfb: check pixclock to avoid divide by zero
- [armel,armhf] ftrace: avoid redundant loads or clobbering IP
- video: fbdev: udlfb: replace snprintf in show functions with sysfs_emit
- ASoC: soc-core: skip zero num_dai component in searching dai name
- media: cx88-mpeg: clear interrupt status register before streaming video
- uaccess: fix type mismatch warnings from access_ok()
- media: Revert "media: em28xx: add missing em28xx_close_extension"
- media: hdpvr: initialize dev->worker at hdpvr_register_videodev
- mmc: host: Return an error when ->enable_sdio_irq() ops is missing
- ALSA: hda/realtek: Add alc256-samsung-headphone fixup
- [x86] KVM: x86/mmu: Check for present SPTE when clearing dirty bit in TDP
MMU
- [powerpc*] lib/sstep: Fix 'sthcx' instruction
- [powerpc*] lib/sstep: Fix build errors with newer binutils
- scsi: qla2xxx: Fix stuck session in gpdb
- scsi: qla2xxx: Fix scheduling while atomic
- scsi: qla2xxx: Fix wrong FDMI data for 64G adapter
- scsi: qla2xxx: Fix warning for missing error code
- scsi: qla2xxx: Fix device reconnect in loop topology
- scsi: qla2xxx: Add devids and conditionals for 28xx
- scsi: qla2xxx: Check for firmware dump already collected
- scsi: qla2xxx: Suppress a kernel complaint in qla_create_qpair()
- scsi: qla2xxx: Fix disk failure to rediscover
- scsi: qla2xxx: Fix incorrect reporting of task management failure
- scsi: qla2xxx: Fix hang due to session stuck
- scsi: qla2xxx: Fix missed DMA unmap for NVMe ls requests
- scsi: qla2xxx: Fix N2N inconsistent PLOGI
- scsi: qla2xxx: Reduce false trigger to login
- scsi: qla2xxx: Use correct feature type field during RFF_ID processing
- [arm64] platform: chrome: Split trace include file
- [x86] KVM: x86: Forbid VMM to set SYNIC/STIMER MSRs when SynIC wasn't
activated
- KVM: Prevent module exit until all VMs are freed
- [x86] KVM: x86: fix sending PV IPI
- [x86] KVM: SVM: fix panic on out-of-bounds guest IRQ
- [x86] ASoC: SOF: Intel: Fix NULL ptr dereference when ENOMEM
- ubifs: rename_whiteout: Fix double free for whiteout_ui->data
- ubifs: Fix deadlock in concurrent rename whiteout and inode writeback
- ubifs: Add missing iput if do_tmpfile() failed in rename whiteout
- ubifs: setflags: Make dirtied_ino_d 8 bytes aligned
- ubifs: Fix read out-of-bounds in ubifs_wbuf_write_nolock()
- ubifs: Fix to add refcount once page is set private
- ubifs: rename_whiteout: correct old_dir size computing
- wireguard: queueing: use CFI-safe ptr_ring cleanup function
- wireguard: socket: free skb in send6 when ipv6 is disabled
- wireguard: socket: ignore v6 endpoints when ipv6 is disabled
- XArray: Fix xas_create_range() when multi-order entry present
- can: mcba_usb: mcba_usb_start_xmit(): fix double dev_kfree_skb in error
path (CVE-2022-28389)
- can: mcba_usb: properly check endpoint type
- XArray: Update the LRU list in xas_split()
- rtc: check if __rtc_read_time was successful
- gfs2: Make sure FITRIM minlen is rounded up to fs block size
- [arm64] net: hns3: fix software vlan talbe of vlan 0 inconsistent with
hardware
- rxrpc: Fix call timer start racing with call destruction
- [arm64] mailbox: imx: fix wakeup failure from freeze mode
- watch_queue: Free the page array when watch_queue is dismantled
- pinctrl: pinconf-generic: Print arguments for bias-pull-*
- ubi: Fix race condition between ctrl_cdev_ioctl and ubi_cdev_ioctl
- [arm*] iop32x: offset IRQ numbers by 1
- io_uring: fix memory leak of uid in files registration
- [amd64,arm64] ACPI: CPPC: Avoid out of bounds access when parsing _CPC
data
- [arm64] platform/chrome: cros_ec_typec: Check for EC device
- can: isotp: restore accidentally removed MSG_PEEK feature
- proc: bootconfig: Add null pointer check
- [x86] ASoC: soc-compress: Change the check for codec_dai
- batman-adv: Check ptr for NULL before reducing its refcnt
- mm/mmap: return 1 from stack_guard_gap __setup() handler
- mm/memcontrol: return 1 from cgroup.memory __setup() handler
- mm/usercopy: return 1 from hardened_usercopy __setup() handler
- bpf: Adjust BPF stack helper functions to accommodate skip > 0
- bpf: Fix comment for helper bpf_current_task_under_cgroup()
- dt-bindings: mtd: nand-controller: Fix the reg property description
- dt-bindings: mtd: nand-controller: Fix a comment in the examples
- dt-bindings: spi: mxic: The interrupt property is not mandatory
- [x86] ASoC: topology: Allow TLV control to be either read or write
- docs: sysctl/kernel: add missing bit to panic_print
- openvswitch: Fixed nd target mask field in the flow dump.
- [x86] KVM: x86/mmu: do compare-and-exchange of gPTE via the user address
(CVE-2022-1158)
- can: usb_8dev: usb_8dev_start_xmit(): fix double dev_kfree_skb() in error
path (CVE-2022-28388)
- coredump: Snapshot the vmas in do_coredump
- coredump: Remove the WARN_ON in dump_vma_snapshot
- coredump/elf: Pass coredump_params into fill_note_info
- coredump: Use the vma snapshot in fill_files_note
- [arm64] Do not defer reserve_crashkernel() for platforms with no DMA
memory zones
- [arm64] PCI: xgene: Revert "PCI: xgene: Use inbound resources for setup"
https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.111
- ubifs: Rectify space amount budget for mkdir/tmpfile operations
- gfs2: Check for active reservation in gfs2_release
- gfs2: Fix gfs2_release for non-writers regression
- gfs2: gfs2_setattr_size error path fix
- [x86] KVM: x86/svm: Clear reserved bits written to PerfEvtSeln MSRs
- [x86] KVM: x86/emulator: Emulate RDPID only if it is enabled in guest
- drm: Add orientation quirk for GPD Win Max
- ath5k: fix OOB in ath5k_eeprom_read_pcal_info_5111
- drm/amd/display: Add signal type check when verify stream backends same
- drm/amd/amdgpu/amdgpu_cs: fix refcount leak of a dma_fence obj
- ptp: replace snprintf with sysfs_emit
- [armhf] ath11k: fix kernel panic during unload/load ath11k modules
- ath11k: mhi: use mhi_sync_power_up()
- bpf: Make dst_port field in struct bpf_sock 16-bit wide
- scsi: mvsas: Replace snprintf() with sysfs_emit()
- scsi: bfa: Replace snprintf() with sysfs_emit()
- [arm64,armhf] power: supply: axp20x_battery: properly report current when
discharging
- mt76: dma: initialize skip_unmap in mt76_dma_rx_fill
- cfg80211: don't add non transmitted BSS to 6GHz scanned channels
- ipv6: make mc_forwarding atomic
- [powerpc*] Set crashkernel offset to mid of RMA region
- drm/amdgpu: Fix recursive locking warning
- [arm64] PCI: aardvark: Fix support for MSI interrupts
- [arm64] iommu/arm-smmu-v3: fix event handling soft lockup
- usb: ehci: add pci device support for Aspeed platforms
- tcp: Don't acquire inet_listen_hashbucket::lock with disabled BH.
- PCI: pciehp: Add Qualcomm quirk for Command Completed erratum
- iwlwifi: mvm: Correctly set fragmented EBS
- ipv4: Invalidate neighbour for broadcast address upon address addition
- dm ioctl: prevent potential spectre v1 gadget
- dm: requeue IO if mapping table not yet available
- scsi: pm8001: Fix pm80xx_pci_mem_copy() interface
- scsi: pm8001: Fix pm8001_mpi_task_abort_resp()
- scsi: pm8001: Fix task leak in pm8001_send_abort_all()
- scsi: pm8001: Fix tag leaks on error
- scsi: pm8001: Fix memory leak in pm8001_chip_fw_flash_update_req()
- scsi: aha152x: Fix aha152x_setup() __setup handler return value
- [arm64] scsi: hisi_sas: Free irq vectors in order for v3 HW
- net/smc: correct settings of RMB window update limit
- macvtap: advertise link netns via netlink
- tuntap: add sanity checks about msg_controllen in sendmsg
- Bluetooth: Fix not checking for valid hdev on bt_dev_{info,warn,err,dbg}
- Bluetooth: use memset avoid memory leaks
- bnxt_en: Eliminate unintended link toggle during FW reset
- [mps64el,mipsel] fix fortify panic when copying asm exception handlers
- scsi: libfc: Fix use after free in fc_exch_abts_resp()
- can: isotp: set default value for N_As to 50 micro seconds
- net: account alternate interface name memory
- net: limit altnames to 64k total
- net: sfp: add 2500base-X quirk for Lantech SFP module
- [armhf] usb: dwc3: omap: fix "unbalanced disables for smps10_out1" on
omap5evm
- Bluetooth: Fix use after free in hci_send_acl
- netlabel: fix out-of-bounds memory accesses
- ceph: fix memory leak in ceph_readdir when note_last_dentry returns error
- init/main.c: return 1 from handled __setup() functions
- minix: fix bug when opening a file with O_DIRECT
- [arm*] staging: vchiq_core: handle NULL result of find_service_by_handle
- [arm64,armhf] phy: amlogic: meson8b-usb2: Use dev_err_probe()
- w1: w1_therm: fixes w1_seq for ds28ea00 sensors
- NFSv4.2: fix reference count leaks in _nfs42_proc_copy_notify()
- NFSv4: Protect the state recovery thread against direct reclaim
- xen: delay xen_hvm_init_time_ops() if kdump is boot on vcpu>=32
- [armhf] clk: ti: Preserve node in ti_dt_clocks_register()
- clk: Enforce that disjoints limits are invalid
- SUNRPC/call_alloc: async tasks mustn't block waiting for memory
- SUNRPC/xprt: async tasks mustn't block waiting for memory
- SUNRPC: remove scheduling boost for "SWAPPER" tasks.
- NFS: swap IO handling is slightly different for O_DIRECT IO
- NFS: swap-out must always use STABLE writes.
- [armhf] serial: samsung_tty: do not unlock port->lock for
uart_write_wakeup()
- virtio_console: eliminate anonymous module_init & module_exit
- jfs: prevent NULL deref in diFree
- SUNRPC: Fix socket waits for write buffer space
- NFS: nfsiod should not block forever in mempool_alloc()
- NFS: Avoid writeback threads getting stuck in mempool_alloc()
- mm: fix race between MADV_FREE reclaim and blkdev direct IO read
- drm/amdgpu: fix off by one in amdgpu_gfx_kiq_acquire()
- [x86] Drivers: hv: vmbus: Fix potential crash on module unload
- Revert "NFSv4: Handle the special Linux file open access mode"
- NFSv4: fix open failure with O_ACCMODE flag
- ice: Clear default forwarding VSI during VSI release
- net: ipv4: fix route with nexthop object delete warning
- net: stmmac: Fix unset max_speed difference between DT and non-DT
platforms
- [armhf] drm/imx: imx-ldb: Check for null pointer after calling kmemdup
- [armhf] drm/imx: Fix memory leak in imx_pd_connector_get_modes
- sfc: Do not free an empty page_ring
- RDMA/mlx5: Don't remove cache MRs when a delay is needed
- [amd64] IB/rdmavt: add lock to call to rvt_error_qp to prevent a race
condition
- [arm64] dpaa2-ptp: Fix refcount leak in dpaa2_ptp_probe
- ice: Set txq_teid to ICE_INVAL_TEID on ring creation
- ice: Do not skip not enabled queues in ice_vc_dis_qs_msg
- ipv6: Fix stats accounting in ip6_pkt_drop
- ice: synchronize_rcu() when terminating rings
- net: openvswitch: don't send internal clone attribute to the userspace.
- net: openvswitch: fix leak of nested actions
- rxrpc: fix a race in rxrpc_exit_net()
- qede: confirm skb is allocated before using
- bpf: Support dual-stack sockets in bpf_tcp_check_syncookie
- drbd: Fix five use after free bugs in get_initial_state
- io_uring: don't touch scm_fp_list after queueing skb
- SUNRPC: Handle ENOMEM in call_transmit_status()
- SUNRPC: Handle low memory situations in call_status()
- SUNRPC: svc_tcp_sendmsg() should handle errors from xdr_alloc_bvec()
- [armhf] iommu/omap: Fix regression in probe for NULL pointer dereference
- [arm64] Add part number for Arm Cortex-A78AE
- [arm64] Revert "mmc: sdhci-xenon: fix annoying 1.8V regulator warning"
- [arm64,armhf] mmc: mmci: stm32: correctly check all elements of sg list
- lz4: fix LZ4_decompress_safe_partial read out of bound
- mmmremap.c: avoid pointless invalidate_range_start/end on
mremap(old_size=0)
- mm/mempolicy: fix mpol_new leak in shared_policy_replace
- io_uring: fix race between timeout flush and removal (CVE-2022-29582)
- [x86] pm: Save the MSR validity status at context setup
- [x86] speculation: Restore speculation related MSRs during S3 resume
- btrfs: fix qgroup reserve overflow the qgroup limit
- btrfs: prevent subvol with swapfile from being deleted
- [arm64] patch_text: Fixup last cpu should be master
- [amd64] RDMA/hfi1: Fix use-after-free bug for mm struct
- gpio: Restrict usage of GPIO chip irq members before initialization
- [arm64] perf: qcom_l2_pmu: fix an incorrect NULL check on list iterator
- [arm64,armhf] irqchip/gic-v3: Fix GICR_CTLR.RWP polling
- drm/nouveau/pmu: Add missing callbacks for Tegra devices
- mm: don't skip swap entry even if zap_details specified
- cgroup: Use open-time credentials for process migraton perm checks
(CVE-2021-4197)
- [x86] Drivers: hv: vmbus: Replace smp_store_mb() with virt_store_mb()
- [arm64,armhf] irqchip/gic, gic-v3: Prevent GSI to SGI translations
- [powerpc*] Fix virt_addr_valid() for 64-bit Book3E & 32-bit
https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.112
- [amd64] drm/amdkfd: Use drm_priv to pass VM from KFD to amdgpu
- hamradio: defer 6pack kfree after unregister_netdev (CVE-2022-1195)
- hamradio: remove needs_free_netdev to avoid UAF (CVE-2022-1195)
- [arm64] cpuidle: PSCI: Move the `has_lpi` check to the beginning of the
function
- ACPI: processor idle: Check for architectural support for LPI
- btrfs: remove unused variable in btrfs_{start,write}_dirty_block_groups()
- [arm64] drm/msm: Add missing put_task_struct() in debugfs path
- SUNRPC: Fix the svc_deferred_event trace class
- net/sched: flower: fix parsing of ethertype following VLAN header
- veth: Ensure eth header is in skb's linear part
- gpiolib: acpi: use correct format characters
- net: mdio: Alphabetically sort header inclusion
- net/sched: fix initialization order when updating chain 0 head
- [arm64] net: dsa: felix: suppress -EPROBE_DEFER errors
- [armhf] net: ethernet: stmmac: fix altr_tse_pcs function when using a
fixed-link
- net/sched: taprio: Check if socket flags are valid
- cfg80211: hold bss_lock while updating nontrans_list
- [arm64] drm/msm: Fix range size vs end confusion
- [arm64] drm/msm/dsi: Use connector directly in
msm_dsi_manager_connector_init()
- net/smc: Fix NULL pointer dereference in smc_pnet_find_ib()
- scsi: pm80xx: Mask and unmask upper interrupt vectors 32-63
- scsi: pm80xx: Enable upper inbound, outbound queues
- scsi: iscsi: Stop queueing during ep_disconnect
- scsi: iscsi: Force immediate failure during shutdown
- scsi: iscsi: Use system_unbound_wq for destroy_work
- scsi: iscsi: Rel ref after iscsi_lookup_endpoint()
- scsi: iscsi: Fix in-kernel conn failure handling
- scsi: iscsi: Move iscsi_ep_disconnect()
- scsi: iscsi: Fix offload conn cleanup when iscsid restarts
- scsi: iscsi: Fix conn cleanup and stop race during iscsid restart
- sctp: Initialize daddr on peeled off socket
- cifs: potential buffer overflow in handling symlinks
- [arm64] net: bcmgenet: Revert "Use stronger register read/writes to
assure
ordering"
- drm/amd: Add USBC connector ID
- btrfs: fix fallocate to use file_modified to update permissions
consistently
- btrfs: do not warn for free space inode in cow_file_range
- drm/amd/display: fix audio format not updated after edid updated
- drm/amd/display: FEC check in timing validation
- drm/amd/display: Update VTEM Infopacket definition
- drm/amdkfd: Fix Incorrect VMIDs passed to HWS
- drm/amdgpu/vcn: improve vcn dpg stop procedure
- [x86] Drivers: hv: vmbus: Prevent load re-ordering when reading ring
buffer
- scsi: target: tcmu: Fix possible page UAF
- scsi: lpfc: Fix queue failures when recovering from PCI parity error
- [powerpc*] scsi: ibmvscsis: Increase INITIAL_SRP_LIMIT to 1024
- ata: libata-core: Disable READ LOG DMA EXT for Samsung 840 EVOs
- [armhf] gpu: ipu-v3: Fix dev_dbg frequency output
- [arm64] alternatives: mark patch_alternative() as `noinstr`
- tlb: hugetlb: Add more sizes to tlb_remove_huge_tlb_entry
- net: usb: aqc111: Fix out-of-bounds accesses in RX fixup
- myri10ge: fix an incorrect free for skb in myri10ge_sw_tso
- drm/amd/display: Revert FEC check in validation
- drm/amd/display: Fix allocate_mst_payload assert on resume
- scsi: mvsas: Add PCI ID of RocketRaid 2640
- scsi: megaraid_sas: Target with invalid LUN ID is deleted during scan
- drivers: net: slip: fix NPD bug in sl_tx_timeout()
- mm, page_alloc: fix build_zonerefs_node()
- mm: fix unexpected zeroed page mapping with zram swap
- [x86] KVM: x86/mmu: Resolve nx_huge_pages when kvm.ko is loaded
- ath9k: Properly clear TX status area before reporting to mac80211
- ath9k: Fix usage of driver-private space in tx_info
- btrfs: fix root ref counts in error handling in btrfs_get_root_ref
- btrfs: mark resumed async balance as writing
- ALSA: hda/realtek: Add quirk for Clevo PD50PNT
- ALSA: hda/realtek: add quirk for Lenovo Thinkpad X12 speakers
- ALSA: pcm: Test for "silence" field in struct "pcm_format_data"
- nl80211: correctly check NL80211_ATTR_REG_ALPHA2 size
- ipv6: fix panic when forwarding a pkt with no in6 dev
- drm/amd/display: don't ignore alpha property on pre-multiplied mode
- drm/amdgpu: Enable gfxoff quirk on MacBook Pro
- genirq/affinity: Consider that CPUs on nodes can be unbalanced
- tick/nohz: Use WARN_ON_ONCE() to prevent console saturation
- dm integrity: fix memory corruption when tag_size is less than digest
size
- smp: Fix offline cpu check in flush_smp_call_function_queue()
- timers: Fix warning condition in __run_timers()
- dma-direct: avoid redundant memory sync for swiotlb
- scsi: iscsi: Fix endpoint reuse regression
- scsi: iscsi: Fix unbound endpoint error handling
- ax25: add refcount in ax25_dev to avoid UAF bugs (CVE-2022-1204)
- ax25: fix reference count leaks of ax25_dev (CVE-2022-1204)
- ax25: fix UAF bugs of net_device caused by rebinding operation
(CVE-2022-1204)
- ax25: Fix refcount leaks caused by ax25_cb_del() (CVE-2022-1204)
- ax25: fix UAF bug in ax25_send_control()
- ax25: fix NPD bug in ax25_disconnect (CVE-2022-1199)
- ax25: Fix NULL pointer dereferences in ax25 timers (CVE-2022-1205)
- ax25: Fix UAF bugs in ax25 timers (CVE-2022-1205)
https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.113
- tracing: Dump stacktrace trigger to the corresponding instance
- gfs2: assign rgrp glock before compute_bitstructs
- net/sched: cls_u32: fix netns refcount changes in u32_change()
- ALSA: usb-audio: Clear MIDI port active flag after draining
- ALSA: hda/realtek: Add quirk for Clevo NP70PNP
- dm: fix mempool NULL pointer race when completing IO
- [armhf] dmaengine: imx-sdma: Fix error checking in sdma_event_remap
- esp: limit skb_page_frag_refill use to a single page
- igc: Fix infinite loop in release_swfw_sync
- igc: Fix BUG: scheduling while atomic
- rxrpc: Restore removed timer deletion
- net/smc: Fix sock leak when release after smc_shutdown()
- net/packet: fix packet_sock xmit return value checking
- ip6_gre: Avoid updating tunnel->tun_hlen in __gre6_xmit()
- ip6_gre: Fix skb_under_panic in __gre6_xmit()
- net/sched: cls_u32: fix possible leak in u32_init_knode()
- l3mdev: l3mdev_master_upper_ifindex_by_index_rcu should be using
netdev_master_upper_dev_get_rcu
- ipv6: make ip6_rt_gc_expire an atomic_t
- netlink: reset network and mac headers in netlink_dump()
- net: stmmac: Use readl_poll_timeout_atomic() in atomic state
- [arm64] mm: Remove [PUD|PMD]_TABLE_BIT from [pud|pmd]_bad()
- [arm64] mm: fix p?d_leaf()
- [x86] platform/x86: samsung-laptop: Fix an unsigned comparison which can
never be negative
- ALSA: usb-audio: Fix undefined behavior due to shift overflowing the
constant
- vxlan: fix error return code in vxlan_fdb_append
- cifs: Check the IOCB_DIRECT flag, not O_DIRECT
- [amd64,arm64] net: atlantic: Avoid out-of-bounds indexing
- mt76: Fix undefined behavior due to shift overflowing the constant
- brcmfmac: sdio: Fix undefined behavior due to shift overflowing the
constant
- [arm64] drm/msm/mdp5: check the return of kzalloc()
- [arm64] net: macb: Restart tx only if queue pointer is lagging
- scsi: qedi: Fix failed disconnect handling
- stat: fix inconsistency between struct stat and struct compat_stat
- nvme: add a quirk to disable namespace identifiers
- nvme-pci: disable namespace identifiers for Qemu controllers
- mm, hugetlb: allow for "high" userspace addresses
- oom_kill.c: futex: delay the OOM reaper to allow time for proper futex
cleanup
- mm/mmu_notifier.c: fix race in mmu_interval_notifier_remove()
- ata: pata_marvell: Check the 'bmdma_addr' beforing reading
- [amd64,arm64] net: atlantic: invert deep par in pm functions, preventing
null derefs
- openvswitch: fix OOB access in reserve_sfa_size()
- gpio: Request interrupts after IRQ is initialized
- ASoC: soc-dapm: fix two incorrect uses of list iterator
- e1000e: Fix possible overflow in LTR decoding
- [arm*] arm_pmu: Validate single/group leader events
- sched/pelt: Fix attach_entity_load_avg() corner case
- [arm64,armhf] drm/panel/raspberrypi-touchscreen: Avoid NULL deref if not
initialised
- [arm64,armhf] drm/panel/raspberrypi-touchscreen: Initialise the bridge in
prepare
- [powerpc*] KVM: PPC: Fix TCE handling for VFIO
- [arm*] drm/vc4: Use pm_runtime_resume_and_get to fix
pm_runtime_get_sync()
usage
- [powerpc*] perf: Fix power9 event alternatives
- ext4: fix fallocate to use file_modified to update permissions
consistently
- ext4: fix symlink file size not match to file content
- ext4: fix use-after-free in ext4_search_dir
- ext4: limit length to bitmap_maxbytes - blocksize in punch_hole
- ext4, doc: fix incorrect h_reserved size
- ext4: fix overhead calculation to account for the reserved gdt blocks
- ext4: force overhead calculation if the s_overhead_cluster makes no sense
- can: isotp: stop timeout monitoring when no first frame was sent
- jbd2: fix a potential race while discarding reserved buffers after an
abort
- block/compat_ioctl: fix range check in BLKGETSIZE
.
[ Salvatore Bonaccorso ]
* Bump ABI to 14
* [rt] Drop "tcp: Remove superfluous BH-disable around"
* [rt] Update "tracing: Merge irqflags + preempt counter." for upstream
changes in 5.10.113
* [x86] pci/xen: Disable PCI/MSI[-X] masking for XEN_HVM guests
(Closes: #1006346)
* floppy: disable FDRAWCMD by default
Checksums-Sha1:
45708e07c2bb06cee619d7e684f5e903f41b4a54 197238 linux_5.10.113-1.dsc
9ba9ecb7a80515260e68c000ac96389715711958 121715384 linux_5.10.113.orig.tar.xz
122c3447d60b459603f3e54ec847c5109c1dbb29 1501772 linux_5.10.113-1.debian.tar.xz
21e56fecbf808891733028edfb5ad775e5bb37a7 6498 linux_5.10.113-1_source.buildinfo
Checksums-Sha256:
cecc032cf2c4a28cc5aa07a23b84aa7c529b3a14f354f6fd301f8485d81e5b85 197238
linux_5.10.113-1.dsc
d0dfa3fa7f33ef5436b541dd8cb1dd4060bdbc85694e446838596d66f55ac558 121715384
linux_5.10.113.orig.tar.xz
c0dc070ef00d75d483334f1c6b23fb6dae47cd6a009e2a960457ebb5780b9864 1501772
linux_5.10.113-1.debian.tar.xz
593d4b1b731fff6495e523b7b653a14a9cf34f119340957502a2d46a5097bcc6 6498
linux_5.10.113-1_source.buildinfo
Files:
3c813df459a13b8bc3d7f3b202bf1bd2 197238 kernel optional linux_5.10.113-1.dsc
f2a2813f67b6be93c1b28c863ee9e36b 121715384 kernel optional
linux_5.10.113.orig.tar.xz
82a12a5ef8b4b59c7a4ae9e1a7ca7630 1501772 kernel optional
linux_5.10.113-1.debian.tar.xz
d1d2253fd028771ec058ed50fb54314a 6498 kernel optional
linux_5.10.113-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=6M07
-----END PGP SIGNATURE-----
--- End Message ---
