Commit graph

504 commits

Author SHA1 Message Date
Mikhail Novosyolov
713ed8654b upd: 5.4.40 -> 5.4.58 (Fixed CVE-2020-0543) 2020-08-17 14:41:06 +03:00
Mikhail Novosyolov
8961886c24 patch: allow to off modules signature check dynamically 2020-08-10 10:44:43 +03:00
Mikhail Novosyolov
af147a725c Build binary modules for rosa-test-suite 2020-08-07 17:54:54 +03:00
Mikhail Novosyolov
cc1584c70a By default disallow loading non-signed modules in certified distros 2020-08-06 14:44:29 +03:00
Mikhail Novosyolov
4b6a6b3dc4 Enable disk-based swap even in certified distros due to necessity to install system in non-certificatable ways 2020-08-06 14:32:27 +03:00
Mikhail Novosyolov
4c7232ab3e patch: support loading GOST-signed modules 2020-08-06 14:30:23 +03:00
Mikhail Novosyolov
0f1ce67516 Fix scriptlet 2020-08-06 14:25:04 +03:00
Mikhail Novosyolov
7ab3248ed4 Do not pull devel part from the main kernel package 2020-08-06 14:25:00 +03:00
Mikhail Novosyolov
3e4f00ba01 Add sysctl to disable disk-based swap 2020-08-01 14:10:48 +03:00
Mikhail Novosyolov
ed3d48040b Add ccache switch, useful for local rebuilds 2020-07-29 11:00:42 +03:00
Mikhail Novosyolov
2812a67ad1 Ship binary kernel modules 2020-07-29 11:00:23 +03:00
Mikhail Novosyolov
e4843eed84 Revert "Build ROSA kernel shredder inside the kernel tree to ship a signed kernel module"
This reverts commit 742804747a.
2020-07-22 23:16:41 +03:00
Mikhail Novosyolov
742804747a Build ROSA kernel shredder inside the kernel tree to ship a signed kernel module
This is a hack, it is needed to make it possible to build signed external kernel modules outside of the kernel tree
2020-07-15 22:55:26 +03:00
Mikhail Novosyolov
b021593695 Enable -fstack-protector(-strong)
It is a rather low cost (in performance terms) additional security
and is useful for e.g. certified systems.
As the performance difference is not expected to be even measurable well enough,
let's enable is everywhere. We do not need to support GCC 5 any more.

https://lwn.net/Articles/584225/
https://zatoichi-engineer.github.io/2017/10/04/stack-smashing-protection.html
2020-06-23 12:48:16 +03:00
Mikhail Novosyolov
4469ade4db off dwz to w/a its bug 2020-06-20 11:10:39 +03:00
Mikhail Novosyolov
0ded474ae8 w/a illegal characters in RPM Provides 2020-06-18 18:38:30 +03:00
Mikhail Novosyolov
60b939028a Disable python byte compiling to avoid dealing with that python2 tries to byte compile python3 code in rosa2019.05, conditional files in spec and other problems 2020-05-11 09:35:25 +03:00
Mikhail Novosyolov
a651473a58 Versionize python shebang 2020-05-11 09:33:18 +03:00
Mikhail Novosyolov
946c2bd154 Fix building with binutils 2.34 2020-05-11 02:31:08 +03:00
Mikhail Novosyolov
9f4773fc0d upd: 5.4.32 -> 5.4.40
```
$ for i in ChangeLog-5.4.* ; do echo $i | sed -e 's,ChangeLog-,Linux ,g' ; cat $i | grep ^commit -A4 | grep -v 'Linux 5\.4\.' | grep -E '^[[:space:]]' | sort -u; done

Linux 5.4.33
    ACPICA: Allow acpi_any_gpe_status_set() to skip one GPE
    ACPI: EC: Do not clear boot_ec_is_ecdt in acpi_ec_add()
    ACPI: PM: s2idle: Refine active GPEs check
    acpi/x86: ignore unspecified bit positions in the ACPI global lock field
    ALSA: doc: Document PC Beep Hidden Register on Realtek ALC256
    ALSA: hda: Add driver blacklist
    ALSA: hda: Fix potential access overflow in beep helper
    ALSA: hda/realtek - Add quirk for Lenovo Carbon X1 8th gen
    ALSA: hda/realtek - Add quirk for MSI GL63
    ALSA: hda/realtek - a fake key event is triggered by running shutup
    ALSA: hda/realtek: Enable mute LED on an HP system
    ALSA: hda/realtek - Remove now-unnecessary XPS 13 headphone noise fixups
    ALSA: hda/realtek - Set principled PC Beep configuration for ALC256
    ALSA: ice1724: Fix invalid access for enumerated ctl items
    ALSA: pcm: oss: Fix regression by buffer overflow fix
    ALSA: usb-audio: Add mixer workaround for TRX40 and co
    arm64: Always force a branch protection mode when the compiler has one
    arm64: armv8_deprecated: Fix undef_hook mask for thumb setend
    arm64: dts: allwinner: h5: Fix PMU compatible
    arm64: dts: allwinner: h6: Fix PMU compatible
    arm64: dts: ti: k3-am65: Add clocks to dwc3 nodes
    ARM: dts: exynos: Fix polarity of the LCD SPI bus on UniversalC210 board
    ARM: dts: Fix dm814x Ethernet by changing to use rgmii-id mode
    ARM: dts: sun8i-a83t-tbs-a711: HM5065 doesn't like such a high voltage
    ASoC: dapm: connect virtual mux with default value
    ASoC: dpcm: allow start or stop during pause for backend
    ASoC: fix regwmask
    ASoC: stm32: sai: Add missing cleanup
    ASoC: topology: use name_prefix for new kcontrol
    ath9k: Handle txpower changes even when TPC is disabled
    block, bfq: fix use-after-free in bfq_idle_slice_timer_body
    block, bfq: move forward the getting of an extra ref in bfq_bfqq_move
    block: Fix use-after-free issue accessing struct io_cq
    block: keep bdi->io_pages in sync with max_sectors_kb for stacked devices
    bpf: Fix deadlock with rq_lock in bpf_send_signal()
    bpf: Fix tnum constraints for 32-bit comparisons
    btrfs: Don't submit any btree write bio if the fs has errors
    btrfs: drop block from cache on error in relocation
    Btrfs: fix crash during unmount due to race with delayed inode workers
    btrfs: fix missing file extent item for hole after ranged fsync
    btrfs: fix missing semaphore unlock in btrfs_sync_file
    btrfs: qgroup: ensure qgroup_rescan_running is only set when the worker is at least queued
    btrfs: reloc: clean dirty subvols if we fail to start a transaction
    btrfs: remove a BUG_ON() from merge_reloc_roots()
    btrfs: restart relocate_tree_blocks properly
    btrfs: set update the uuid generation as soon as possible
    btrfs: track reloc roots based on their commit root bytenr
    btrfs: unset reloc control if we fail to recover
    btrfs: use nofs allocations for running delayed items
    bus: sunxi-rsb: Return correct data when mixing 16-bit and 8-bit reads
    cfg80211: Do not warn on same channel at the end of CSA
    CIFS: Fix bug which the return value by asynchronous read is error
    clk: ingenic/jz4770: Exit with error if CGU init failed
    clk: ingenic/TCU: Fix round_rate returning error
    cpufreq: imx6q: fix error handling
    cpufreq: imx6q: Fixes unwanted cpu overclocking on i.MX6ULL
    cpufreq: powernv: Fix use-after-free
    cpu/hotplug: Ignore pm_wakeup_pending() for disable_nonboot_cpus()
    crypto: caam/qi2 - fix chacha20 data size error
    crypto: caam - update xts sector size for large input length
    crypto: ccree - dec auth tag size from cryptlen map
    crypto: ccree - only try to map auth tag if needed
    crypto: ccree - protect against empty or NULL scatterlists
    crypto: mxs-dcp - fix scatterlist linearization for hash
    crypto: rng - Fix a refcounting bug in crypto_rng_reset()
    cxgb4/ptp: pass the sign of offset delta in FW CMD
    debugfs: Check module state before warning in {full/open}_proxy_open()
    dma-mapping: Fix dma_pgprot() for unencrypted coherent pages
    dm clone: Add missing casts to prevent overflows and data corruption
    dm clone: Add overflow check for number of regions
    dm clone: Fix handling of partial region discards
    dm clone metadata: Fix return type of dm_clone_nr_of_hydrated_regions()
    dm clone: replace spin_lock_irqsave with spin_lock_irq
    dm integrity: fix a crash with unusually large tag size
    dm verity fec: fix memory leak in verity_fec_dtr
    dm writecache: add cond_resched to avoid CPU hangs
    dm zoned: remove duplicate nr_rnd_zones increase in dmz_init_zone()
    drm/amdgpu: fix gfx hang during suspend with video playback (v2)
    drm/amdgpu/powerplay: using the FCLK DPM table to set the MCLK
    drm/amdgpu: unify fw_write_wait for new gfx9 asics
    drm/dp_mst: Fix clearing payload state on topology disable
    drm/etnaviv: rework perfmon query infrastructure
    drm/i915/gem: Flush all the reloc_gpu batch
    drm/i915/icl+: Don't enable DDI IO power on a TypeC port in TBT mode
    drm: Remove PageReserved manipulation from drm_pci_alloc
    drm/scheduler: fix rare NULL ptr race
    efi/x86: Add TPM related EFI tables to unencrypted mapping checks
    efi/x86: Fix the deletion of variables in mixed mode
    efi/x86: Ignore the memory attributes table on i386
    erofs: correct the remaining shrink objects
    ext4: fix a data race at inode->i_blocks
    firmware: arm_sdei: fix double-lock on hibernate with shared events
    firmware: fix a double abort case with fw_load_sysfs_fallback
    fs/filesystems.c: downgrade user-reachable WARN_ONCE() to pr_warn_once()
    ftrace/kprobe: Show the maxactive number on kprobe_events
    genirq/debugfs: Add missing sanity checks to interrupt injection
    genirq/irqdomain: Check pointer in irq_domain_alloc_irqs_hierarchy()
    gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty
    gfs2: Don't demote a glock until its revokes are written
    hfsplus: fix crash and filesystem corruption when deleting files
    hinic: fix a bug of waitting for IO stopped
    hinic: fix out-of-order excution in arm cpu
    hinic: fix the bug of clearing event queue
    hinic: fix wrong para of wait_for_completion_timeout
    hinic: fix wrong value of MIN_SKB_LEN
    i2c: pca-platform: Use platform_irq_get_optional
    i2c: st: fix missing struct parameter description
    Input: i8042 - add Acer Aspire 5738z to nomux list
    Input: tm2-touchkey - add support for Coreriver TC360 variant
    io_uring: honor original task RLIMIT_FSIZE
    io_uring: remove bogus RLIMIT_NOFILE check in file registration
    ipmi: fix hung processes in __get_guid()
    irqchip/gic-v4: Provide irq_retrigger to avoid circular locking dependency
    irqchip/versatile-fpga: Apply clear-mask earlier
    irqchip/versatile-fpga: Handle chained IRQs properly
    iwlwifi: mvm: Fix rate scale NSS configuration
    KEYS: reaching the keys quotas correctly
    kmod: make request_module() return an error when autoloading is disabled
    KVM: nVMX: Properly handle userspace interrupt window request
    KVM: s390: vsie: Fix delivery of addressing exceptions
    KVM: s390: vsie: Fix region 1 ASCE sanity shadow address checks
    KVM: VMX: Add a trampoline to fix VMREAD error handling
    KVM: VMX: Always VMCLEAR in-use VMCSes during crash with kexec support
    KVM: VMX: fix crash cleanup when KVM wasn't used
    KVM: x86: Allocate new rmap and large page tracking when moving memslot
    KVM: x86: Gracefully handle __vmalloc() failure during VM allocation
    libata: Remove extra scsi_host_put() in ata_scsi_add_hosts()
    libata: Return correct status in sata_pmp_eh_recover_pm() when ATA_DFLAG_DETACH is set
    locking/lockdep: Avoid recursion in lockdep_count_{for,back}ward_deps()
    md: check arrays is suspended in mddev_detach before call quiesce operations
    media: allegro: fix type of gop_length in channel_create message
    media: hantro: Read be32 words starting at every fourth byte
    media: i2c: ov5695: Fix power on and off sequences
    media: i2c: video-i2c: fix build errors due to 'imply hwmon'
    media: imx: imx7-media-csi: Fix video field handling
    media: imx: imx7_mipi_csis: Power off the source when stopping streaming
    media: rc: add keymap for Videostrong KII Pro
    media: ti-vpe: cal: fix a kernel oops when unloading module
    media: ti-vpe: cal: fix disable_irqs to only the intended target
    media: venus: firmware: Ignore secure call error on first resume
    media: venus: hfi_parser: Ignore HEVC encoding for V1
    mfd: dln2: Fix sanity checking for endpoints
    MIPS: OCTEON: irq: Fix potential NULL pointer dereference
    MIPS/tlbex: Fix LDDIR usage in setup_pw() for Loongson-3
    mmc: sdhci: Convert sdhci_set_timeout_irq() to non-static
    mmc: sdhci-of-esdhc: fix esdhc_reset() for different controller versions
    mmc: sdhci: Refactor sdhci_set_timeout()
    mm, memcg: do not high throttle allocators based on wraparound
    mtd: spinand: Do not erase the block before writing a bad block marker
    mtd: spinand: Stop using spinand->oobbuf for buffering bad block markers
    net: qualcomm: rmnet: Allow configuration updates to existing devices
    net: stmmac: platform: Fix misleading interrupt error msg
    net: vxge: fix wrong __VA_ARGS__ usage
    nfsd: fsnotify on rmdir under nfsd/clients/
    NFS: Fix a page leak in nfs_destroy_unlinked_subrequests()
    NFS: Fix use-after-free issues in nfs_pageio_add_request()
    null_blk: fix spurious IO errors after failed past-wp access
    null_blk: Fix the null_add_dev() error path
    null_blk: Handle null_add_dev() failures properly
    nvme-fc: Revert "add module to ops template to allow module references"
    nvmet-tcp: fix maxh2cdata icresp parameter
    ocfs2: no need try to truncate file beyond i_size
    PCI: Add boot interrupt quirk mechanism for Xeon chipsets
    PCI/ASPM: Clear the correct bits when enabling L1 substates
    PCI: endpoint: Fix for concurrent memory allocation in OB address region
    PCI: pciehp: Fix indefinite wait on sysfs requests
    PCI: qcom: Fix the fixup of PCI_VENDOR_ID_QCOM
    PCI/switchtec: Fix init_completion race condition with poll_wait()
    perf tools: Support Python 3.8+ in Makefile
    platform/x86: asus-wmi: Support laptops where the first battery is named BATT
    PM / Domains: Allow no domain-idle-states DT property in genpd when parsing
    PM: sleep: wakeup: Skip wakeup_source_sysfs_remove() if device is not there
    powerpc/64: Prevent stack protection in early boot
    powerpc/64: Setup a paca before parsing device tree etc.
    powerpc/64/tm: Don't let userspace set regs->trap via sigreturn
    powerpc/fsl_booke: Avoid creating duplicate tlb1 entry
    powerpc/hash64/devmap: Use H_PAGE_THP_HUGE when setting up huge devmap PTE entries
    powerpc/kasan: Fix kasan_remap_early_shadow_ro()
    powerpc/kprobes: Ignore traps that happened in real mode
    powerpc: Make setjmp/longjmp signature standard
    powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable
    powerpc/pseries: Drop pointless static qualifier in vpa_debugfs_init()
    powerpc/xive: Fix xmon support on the PowerNV platform
    powerpc/xive: Use XIVE_BAD_IRQ instead of zero to catch non configured IPIs
    pstore/platform: fix potential mem leak if pstore_init_fs failed
    pstore: pstore_ftrace_seq_next should increase position index
    qlcnic: Fix bad kzalloc null test
    remoteproc: Fix NULL pointer dereference in rproc_virtio_notify
    remoteproc: qcom_q6v5_mss: Don't reassign mpss region on shutdown
    remoteproc: qcom_q6v5_mss: Reload the mba region on coredump
    Revert "drm/dp_mst: Remove VCPI while disabling topology mgr"
    rxrpc: Abstract out the calculation of whether there's Tx space
    rxrpc: Fix call interruptibility handling
    s390/diag: fix display of diagnose call statistics
    sched: Avoid scale real weight down to zero
    sched/core: Remove duplicate assignment in sched_tick_remote()
    sched/fair: Fix enqueue_task_fair warning
    scsi: lpfc: Add registration for CPU Offline/Online events
    scsi: lpfc: Fix broken Credit Recovery after driver load
    scsi: lpfc: Fix configuration of BB credit recovery in service parameters
    scsi: lpfc: Fix Fabric hostname registration if system hostname changes
    scsi: lpfc: fix inlining of lpfc_sli4_cleanup_poll_list()
    scsi: lpfc: Fix lpfc_io_buf resource leak in lpfc_get_scsi_buf_s4 error path
    scsi: mpt3sas: Fix kernel panic observed on soft HBA unplug
    scsi: ufs: fix Auto-Hibern8 error detection
    scsi: zfcp: fix missing erp_lock in port recovery trigger for point-to-point
    seccomp: Add missing compat_ioctl for notify
    selftests/net: add definition for SOL_DCCP to fix compilation errors for old libc
    selftests/powerpc: Add tlbie_test in .gitignore
    selftests: vm: drop dependencies on page flags from mlock2 tests
    selftests/vm: fix map_hugetlb length used for testing read and write
    selftests/x86/ptrace_syscall_32: Fix no-vDSO segfault
    signal: Extend exec_id to 64bits
    smb3: fix performance regression with setting mtime
    soc: fsl: dpio: register dpio irq handlers after dpio create
    spi: spi-fsl-dspi: Replace interruptible wait queue with a simple completion
    staging: wilc1000: avoid double unlocking of 'wilc->hif_cs' mutex
    thermal: devfreq_cooling: inline all stubs for CONFIG_DEVFREQ_THERMAL=n
    time/sched_clock: Expire timer in hardirq context
    tools: gpio: Fix out-of-tree build regression
    tpm: Don't make log failures fatal
    tpm: tpm1_bios_measurements_next should increase position index
    tpm: tpm2_bios_measurements_next should increase position index
    usb: dwc3: core: add support for disabling SS instances in park mode
    usb: gadget: composite: Inform controller driver of self-powered
    usb: gadget: f_fs: Fix use after free issue as part of queue failure
    vfio: platform: Switch to platform_get_irq_optional()
    x86/boot: Use unsigned comparison for addresses
    x86: Don't let pgprot_modify() change the page encryption bit
    x86/entry/32: Add missing ASM_CLAC to general_protection entry
    x86/tsc_msr: Fix MSR_FSB_FREQ mask for Cherry Trail devices
    x86/tsc_msr: Make MSR derived TSC frequency more accurate
    x86/tsc_msr: Use named struct initializers
    xarray: Fix early termination of xas_for_each_marked
    XArray: Fix xas_pause for large multi-index entries
    xen/blkfront: fix memory allocation flags in blkfront_setup_indirect()
    xhci: bail out early if driver can't accress host in resume
Linux 5.4.34
    acpi/nfit: improve bounds checking for 'func'
    ALSA: hda/realtek - Enable the headset mic on Asus FX505DT
    ALSA: usb-audio: Check mapping at creating connector controls, too
    ALSA: usb-audio: Don't create jack controls for PCM terminals
    ALSA: usb-audio: Don't override ignore_ctl_error value from the map
    ALSA: usb-audio: Filter error from connector kctl ops, too
    amd-xgbe: Use __napi_schedule() in BH context
    arm64: dts: librem5-devkit: add a vbus supply to usb0
    arm64: vdso: don't free unallocated pages
    ARM: dts: imx7-colibri: fix muxing of usbc_det pin
    ASoC: Intel: mrfld: fix incorrect check on p->sink
    ASoC: Intel: mrfld: return error codes when an error occurs
    btrfs: check commit root generation in should_ignore_root
    clk: at91: sam9x60: fix usb clock parents
    clk: at91: usb: use proper usbs_mask
    drm/amdgpu: fix the hw hang during perform system reboot and reset
    drm/amd/powerplay: force the trim of the mclk dpm_levels if OD is enabled
    ext4: do not zeroout extents beyond i_disksize
    ext4: fix incorrect group count in ext4_fill_super error message
    ext4: fix incorrect inodes per group in error message
    hsr: check protocol version in hsr_newlink()
    i2c: designware: platdrv: Remove DPM_FLAG_SMART_SUSPEND flag on BYT and CHT
    irqchip/ti-sci-inta: Fix processing of masked irqs
    jbd2: improve comments about freeing data buffers whose page mapping is NULL
    keys: Fix proc_keys_next to increase position index
    l2tp: Allow management of tunnels and session in user namespace
    mac80211: fix race in ieee80211_register_hw()
    mac80211_hwsim: Use kstrndup() in place of kasprintf()
    net/bpfilter: remove superfluous testing message
    net: dsa: mt7530: fix tagged frames pass-through in VLAN-unaware mode
    net: dsa: mt7530: move mt7623 settings out off the mt7530
    net: ethernet: mediatek: move mt7623 settings out off the mt7530
    net: ipv4: devinet: Fix crash when add/del multicast IP with autojoin
    net: ipv6: do not consider routes via gateways for anycast address check
    net/mlx5e: Add missing release firmware call
    net/mlx5e: Encapsulate updating netdev queues into a function
    net/mlx5e: Fix nest_level for vlan pop action
    net/mlx5e: Fix pfnum in devlink port attribute
    net/mlx5e: Rename hw_modify to preactivate
    net/mlx5e: Use preactivate hook to set the indirection table
    net/mlx5: Fix frequent ioread PCI access during recovery
    net: phy: micrel: use genphy_read_status for KSZ9131
    net: qrtr: send msgs from local of same id as broadcast
    net: revert default NAPI poll timeout to 2 jiffies
    net: stmmac: dwmac-sunxi: Provide TX and RX fifo sizes
    net: tun: record RX queue in skb before do_xdp_generic()
    nl80211: fix NL80211_ATTR_FTM_RESPONDER policy
    ovl: fix value of i_ino for lower hardlink corner case
    perf report: Fix no branch type statistics report issue
    platform/chrome: cros_ec_rpmsg: Fix race with host event
    pwm: pca9685: Fix PWM/GPIO inter-operation
    Revert "ACPI: EC: Do not clear boot_ec_is_ecdt in acpi_ec_add()"
    scsi: target: fix hang when multiple threads try to destroy the same iscsi session
    scsi: target: remove boilerplate code
    scsi: ufs: Fix ufshcd_hold() caused scheduling while atomic
    tracing: Fix the race between registering 'snapshot' event trigger and triggering 'snapshot' operation
    usb: dwc3: gadget: Don't clear flags before transfer ended
    x86/microcode/AMD: Increase microcode PATCH_MAX_SIZE
    x86/resctrl: Fix invalid attempt at removing the default resource group
    x86/resctrl: Preserve CDP enable over CPU hotplug
Linux 5.4.35
    ACPICA: Fixes for acpiExec namespace init file
    afs: Fix afs_d_validate() to set the right directory version
    afs: Fix decoding of inline abort codes from version 1 status records
    afs: Fix missing XDR advance in xdr_decode_{AFS,YFS}FSFetchStatus()
    afs: Fix race between post-modification dir edit and readdir/d_revalidate
    afs: Fix rename operation status delivery
    ALSA: hda: Don't release card at firmware loading error
    ALSA: hda: Honor PM disablement in PM freeze and thaw_noirq ops
    arm64: dts: allwinner: a64: Fix display clock register range
    arm64: dts: clearfog-gt-8k: set gigabit PHY reset deassert delay
    arm64: tegra: Add PCIe endpoint controllers nodes for Tegra194
    arm64: tegra: Fix Tegra194 PCIe compatible string
    arm, bpf: Fix bugs with ALU64 {RSH, ARSH} BPF_K shift by 0
    arm, bpf: Fix offset overflow for BPF_MEM BPF_DW
    ARM: dts: imx6: Use gpc for FEC interrupt controller to fix wake on LAN.
    ARM: dts: rockchip: fix lvds-encoder ports subnode for rk3188-bqedison2qc
    ARM: dts: rockchip: fix vqmmc-supply property name for rk3188-bqedison2qc
    ARM: dts: sunxi: Fix DE2 clocks register range
    block, bfq: invoke flush_idle_tree after reparent_active_queues in pd_offline
    block, bfq: make reparent_leaf_entity actually work only on leaf entities
    block, bfq: turn put_queue into release_process_ref in __bfq_bic_change_cgroup
    bpf: fix buggy r0 retval refinement for tracing helpers
    bpf: Test_progs, add test to catch retval refine error handling
    bpf: Test_verifier, bpf_get_stack return value add <0
    bpf, test_verifier: switch bpf_get_stack's 0 s> r8 test
    btrfs: add RCU locks around block group initialization
    cifs: Allocate encryption header through kmalloc
    clk: at91: usb: continue if clk_hw_round_rate() return zero
    clk: Don't cache errors from clk_ops::get_phase()
    clk: tegra: Fix Tegra PMC clock out parents
    compiler.h: fix error in BUILD_BUG_ON() reporting
    csky: Fixup cpu speculative execution to IO area
    csky: Fixup get wrong psr value from phyical reg
    csky: Fixup init_fpu compile warning with __init
    dma-coherent: fix integer overflow in the reserved-memory dma allocation
    dma-debug: fix displaying of dma allocation type
    docs: Fix path to MTD command line partition parser
    drm/amdkfd: kfree the wrong pointer
    drm/nouveau/gr/gp107,gp108: implement workaround for HW hanging during init
    drm/nouveau/svm: check for SVM initialized before migrating
    drm/nouveau/svm: fix vma range check for migration
    drm/nouveau: workaround runpm fail by disabling PCI power management on certain intel bridges
    drm/ttm: flush the fence on the bo after we individualize the reservation object
    drm/vc4: Fix HDMI mode validation
    ext2: fix debug reference to ext2_xattr_cache
    ext2: fix empty body warnings when -Wextra is used
    ext4: do not commit super on read-only bdev
    ext4: use non-movable memory for superblock readahead
    f2fs: Add a new CP flag to help fsck fix resize SPO issues
    f2fs: Fix mount failure due to SPO after a successful online resize FS
    f2fs: fix NULL pointer dereference in f2fs_write_begin()
    f2fs: fix the panic in do_checkpoint()
    f2fs: fix to show norecovery mount option
    f2fs: fix to wait all node page writeback
    fbdev: potential information leak in do_fb_ioctl()
    fbmem: Adjust indentation in fb_prepare_logo and fb_blank
    hibernate: Allow uswsusp to write to swap
    iio: si1133: read 24-bit signed integer for measurement
    include/linux/swapops.h: correct guards for non_swap_entry()
    iommu/amd: Fix the configuration of GCR3 table root pointer
    iommu/virtio: Fix freeing of incomplete domains
    iommu/vt-d: Fix mm reference leak
    iommu/vt-d: Fix page request descriptor size
    iommu/vt-d: Silence RCU-list debugging warning in dmar_find_atsr()
    irqchip/mbigen: Free msi_desc on device teardown
    kbuild, btf: Fix dependencies for DEBUG_INFO_BTF
    KEYS: Don't write out to userspace while holding key semaphore
    KVM: PPC: Book3S HV: Fix H_CEDE return code for nested guests
    KVM: s390: vsie: Fix possible race when shadowing region 3 tables
    leds: core: Fix warning message when init_data
    libnvdimm: Out of bounds read in __nd_ioctl()
    locktorture: Print ratio of acquisitions, not failures
    mm/hugetlb: fix build failure with HUGETLB_PAGE but not HUGEBTLBFS
    mtd: lpddr: Fix a double free in probe()
    mtd: phram: fix a double free issue in error path
    mtd: rawnand: free the nand_device object
    mtd: spinand: Explicitly use MTD_OPS_RAW to write the bad block marker to OOB
    net: dsa: bcm_sf2: Fix overflow checks
    netfilter: nf_tables: report EOPNOTSUPP on unsupported flags/object type
    net/mlx5e: Enforce setting of a single FEC mode
    NFS: alloc_nfs_open_context() must use the file cred when available
    NFS: direct.c: Fix memory leak of dreq when nfs_get_lock_context fails
    NFS: Fix memory leaks in nfs_pageio_stop_mirroring()
    NFSv4.2: error out when relink swapfile
    NFSv4/pnfs: Return valid stateids in nfs_layout_find_inode_by_stateid()
    objtool: Fix switch table detection in .text.unlikely
    of: overlay: kmemleak in dup_and_fixup_symbol_prop()
    of: unittest: kmemleak in of_unittest_overlay_high_level()
    of: unittest: kmemleak in of_unittest_platform_populate()
    of: unittest: kmemleak on changeset destroy
    percpu_counter: fix a data race at vm_committed_as
    phy: uniphier-usb3ss: Add Pro5 support
    powerpc/maple: Fix declaration made after definition
    powerpc/prom_init: Pass the "os-term" message to hypervisor
    power: supply: axp288_fuel_gauge: Broaden vendor check for Intel Compute Sticks.
    power: supply: bq27xxx_battery: Silence deferred-probe error
    rbd: avoid a deadlock on header_rwsem when flushing notifies
    rbd: call rbd_dev_unprobe() after unwatching and flushing notifies
    rtc: 88pm860x: fix possible race condition
    s390/cpuinfo: fix wrong output when CPU0 is offline
    s390/cpum_sf: Fix wrong page count in error message
    scsi: sg: add sg_remove_request in sg_common_write
    soc: imx: gpc: fix power up sequencing
    sunrpc: Fix gss_unwrap_resp_integ() again
    SUNRPC: fix krb5p mount to provide large enough buffer in rq_rcvsize
    tty: evh_bytechan: Fix out of bounds accesses
    um: falloc.h needs to be directly included for older libc
    um: ubd: Prevent buffer overrun on command completion
    watchdog: sp805: fix restart handler
    x86: ACPI: fix CPU hotplug deadlock
    x86/Hyper-V: Free hv_panic_page when fail to register kmsg dump
    x86/Hyper-V: Report crash data in die() when panic_on_oops is set
    x86/Hyper-V: Report crash register data or kmsg before running crash kernel
    x86/Hyper-V: Report crash register data when sysctl_record_panic_msg is not set
    x86/Hyper-V: Trigger crash enlightenment only once during system crash.
    x86/Hyper-V: Unload vmbus channel in hv panic callback
    xsk: Add missing check on user supplied headroom size
    xsk: Fix out of boundary write in __xsk_rcv_memcpy
Linux 5.4.36
    ALSA: hda/hdmi: Add module option to disable audio component binding
    ALSA: hda/realtek - Add new codec supported for ALC245
    ALSA: hda/realtek - Fix unexpected init_amp override
    ALSA: hda: Remove ASUS ROG Zenith from the blacklist
    ALSA: usb-audio: Add connector notifier delegation
    ALSA: usb-audio: Add Pioneer DJ DJM-250MK2 quirk
    ALSA: usb-audio: Add static mapping table for ALC1220-VB-based mobos
    ALSA: usb-audio: Filter out unsupported sample rates on Focusrite devices
    ALSA: usb-audio: Fix usb audio refcnt leak when getting spdif
    ALSA: usx2y: Fix potential NULL dereference
    arm64: compat: Workaround Neoverse-N1 #1542419 for compat user-space
    arm64: errata: Hide CTR_EL0.DIC on systems affected by Neoverse-N1 #1542419
    arm64: Fake the IminLine size on systems affected by Neoverse-N1 #1542419
    arm64: Silence clang warning on mismatched value/register sizes
    ARM: imx: provide v7_cpu_resume() only on ARM_CPU_SUSPEND=y
    ASoC: dapm: fixup dapm kcontrol widget
    ASoC: Intel: atom: Take the drv->lock mutex before calling sst_send_slot_map()
    ASoC: Intel: bytcr_rt5640: Add quirk for MPMAN MPWIN895CL tablet
    ASoC: SOF: trace: fix unconditional free in trace release
    audit: check the length of userspace generated audit records
    cdc-acm: close race betrween suspend() and acm_softint
    cdc-acm: introduce a cool down
    ceph: don't skip updating wanted caps when cap is stale
    ceph: return ceph_mdsc_do_request() errors from __get_parent()
    cifs: fix uninitialised lease_key in open_shroot()
    compat: ARM64: always include asm-generic/compat.h
    coredump: fix null pointer dereference on coredump
    cxgb4: fix adapter crash due to wrong MC size
    cxgb4: fix large delays in PTP synchronization
    dma-direct: fix data truncation in dma_direct_get_required_mask()
    drm/amd/display: Calculate scaling ratios on every medium/full update
    drm/amd/display: Not doing optimize bandwidth if flip pending.
    drm/amd/display: Update stream adjust in dc_stream_adjust_vmin_vmax
    ext4: fix extent_status fragmentation for plain files
    f2fs: fix to avoid memory leakage in f2fs_listxattr
    fpga: dfl: pci: fix return value of cci_pci_sriov_configure
    geneve: use the correct nlattr array in NL_SET_ERR_MSG_ATTR
    iio: adc: stm32-adc: fix sleep in atomic context
    iio: adc: ti-ads8344: properly byte swap value
    iio: core: remove extra semi-colon from devm_iio_device_register() macro
    iio: st_sensors: rely on odr mask to know if odr can be set
    iio: xilinx-xadc: Fix ADC-B powerdown
    iio: xilinx-xadc: Fix clearing interrupt when enabling trigger
    iio: xilinx-xadc: Fix sequencer configuration for aux channels in simultaneous mode
    iio: xilinx-xadc: Make sure not exceed maximum samplerate
    ipc/util.c: sysvipc_find_ipc() should increase position index
    ipv4: Update fib_select_default to handle nexthop objects
    ipv6: fix restrict IPV6_ADDRFORM operation
    iwlwifi: mvm: beacon statistics shouldn't go backwards
    iwlwifi: mvm: Do not declare support for ACK Enabled Aggregation
    iwlwifi: mvm: fix inactive TID removal return value usage
    iwlwifi: mvm: limit maximum queue appropriately
    iwlwifi: pcie: actually release queue memory in TVQM
    kconfig: qconf: Fix a few alignment issues
    kernel/gcov/fs.c: gcov_seq_next() should increase position index
    KEYS: Avoid false positive ENOMEM error on key read
    KVM: Check validity of resolved slot when searching memslots
    KVM: s390: Return last valid slot if approx index is out-of-bounds
    KVM: VMX: Enable machine check support for 32bit targets
    libbpf: Fix readelf output parsing on powerpc with recent binutils
    lib/raid6/test: fix build on distros whose /bin/sh is not bash
    loop: Better discard support for block devices
    mac80211: populate debugfs only after cfg80211 init
    macsec: avoid to set wrong mtu
    macvlan: fix null dereference in macvlan_device_event()
    mlxsw: Fix some IS_ERR() vs NULL bugs
    mm/hugetlb: fix a addressing exception caused by huge_pte_offset
    mm/ksm: fix NULL pointer dereference when KSM zero page is enabled
    net: bcmgenet: correct per TX/RX ring statistics
    net: dsa: b53: b53_arl_rw_op() needs to select IVL or SVL
    net: dsa: b53: Fix ARL register definitions
    net: dsa: b53: Fix valid setting for MDB entries
    net: dsa: b53: Lookup VID in ARL searches when VLAN is enabled
    net: dsa: b53: Rework ARL bin logic
    net, ip_tunnel: fix interface lookup with no key
    net/mlx4_en: avoid indirect call in TX completion
    net: netrom: Fix potential nr_neigh refcnt leak in nr_add_node
    net: openvswitch: ovs_ct_exit to be done under ovs_lock
    net: stmmac: dwmac-meson8b: Add missing boundary to RGMII TX clock array
    net/x25: Fix x25_neigh refcnt leak when receiving frame
    nvme: fix compat address handling in several ioctls
    nvme: fix deadlock caused by ANA update wrong locking
    nvme-tcp: fix possible crash in write_zeroes processing
    PCI/ASPM: Allow re-enabling Clock PM
    PCI: pciehp: Prevent deadlock on disconnect
    PCI/PM: Add missing link delays required by the PCIe spec
    PCI/PM: Add pcie_wait_for_link_delay()
    perf/core: Disable page faults when getting phys address
    powerpc/kuap: PPC_KUAP_DEBUG should depend on PPC_KUAP
    powerpc/mm: Fix CONFIG_PPC_KUAP_DEBUG on PPC32
    powerpc/pseries: Fix MCE handling on pseries
    powerpc/setup_64: Set cache-line-size based on cache-block-size
    pwm: bcm2835: Dynamically allocate base
    pwm: rcar: Fix late Runtime PM enablement
    pwm: renesas-tpu: Fix late Runtime PM enablement
    Revert "powerpc/64: irq_work avoid interrupt when called with hardware irqs enabled"
    Revert "serial: uartps: Change uart ID port allocation"
    Revert "serial: uartps: Do not allow use aliases >= MAX_UART_INSTANCES"
    Revert "serial: uartps: Fix error path when alloc failed"
    Revert "serial: uartps: Fix uartps_major handling"
    Revert "serial: uartps: Move Port ID to device data structure"
    Revert "serial: uartps: Register own uart console and driver structures"
    Revert "serial: uartps: Use the same dynamic major number for all ports"
    s390/cio: avoid duplicated 'ADD' uevents
    s390/cio: generate delayed uevent for vfio-ccw subchannels
    s390/mm: fix page table upgrade vs 2ndary address mode accesses
    sched: etf: do not assume all sockets are full blown
    scsi: iscsi: Report unbind session event when the target has been removed
    scsi: libfc: If PRLI rejected, move rport to PLOGI state
    scsi: lpfc: Fix crash after handling a pci error
    scsi: lpfc: Fix crash in target side cable pulls hitting WAIT_FOR_UNREG
    scsi: lpfc: Fix kasan slab-out-of-bounds error in lpfc_unreg_login
    scsi: smartpqi: fix call trace in device discovery
    scsi: smartpqi: fix controller lockup observed during force reboot
    scsi: smartpqi: fix problem with unique ID for physical device
    selftests: Fix suppress test in fib_tests.sh
    selftests: kmod: fix handling test numbers above 9
    serial: sh-sci: Make sure status register SCxSR is read in correct sequence
    signal: Avoid corrupting si_pid and si_uid in do_notify_parent
    staging: comedi: dt2815: fix writing hi byte of analog output
    staging: comedi: Fix comedi_device refcnt leak in comedi_open
    staging: gasket: Fix incongruency in handling of sysfs entries creation
    staging: vt6656: Don't set RCR_MULTICAST or RCR_BROADCAST by default.
    staging: vt6656: Fix calling conditions of vnt_set_bss_mode
    staging: vt6656: Fix drivers TBTT timing counter.
    staging: vt6656: Fix pairwise key entry save.
    staging: vt6656: Power save stop wake_up_count wrap around.
    SUNRPC: Fix backchannel RPC soft lockups
    tcp: cache line align MAX_TCP_HEADER
    team: fix hang in team_mode_get()
    tools/testing/nvdimm: Fix compilation failure without CONFIG_DEV_DAX_PMEM_COMPAT
    tools/test/nvdimm: Fix out of tree build
    tools/vm: fix cross-compile build
    tpm: fix wrong return value in tpm_pcr_extend
    tpm: ibmvtpm: retry on H_CLOSED in tpm_ibmvtpm_send()
    tpm/tpm_tis: Free IRQ if probing fails
    tracing/selftests: Turn off timeout setting
    tty: hvc: fix buffer overflow during hvc_alloc().
    tty: rocket, avoid OOB access
    tty: serial: owl: add "much needed" clk_prepare_enable()
    UAS: fix deadlock in error handling and PM flushing work
    UAS: no use logging any details in case of ENODEV
    USB: Add USB_QUIRK_DELAY_CTRL_MSG and USB_QUIRK_DELAY_INIT for Corsair K70 RGB RAPIDFIRE
    USB: core: Fix free-while-in-use bug in the USB S-Glibrary
    usb: dwc3: gadget: Fix request completion check
    USB: early: Handle AMD's spec-compliant identifiers, too
    usb: f_fs: Clear OS Extended descriptor counts to zero in ffs_data_reset()
    USB: hub: Fix handling of connect changes during sleep
    USB: hub: Revert commit bd0e6c9614b9 ("usb: hub: try old enumeration scheme first for high speed devices")
    USB: sisusbvga: Change port variable from signed to unsigned
    usb-storage: Add unusual_devs entry for JMicron JMS566
    usb: typec: altmode: Fix typec_altmode_get_partner sometimes returning an invalid pointer
    usb: typec: tcpm: Ignore CC and vbus changes in PORT_RESET change
    virtio-blk: improve virtqueue error to BLK_STS
    vmalloc: fix remap_vmalloc_range() bounds checks
    vrf: Check skb for XFRM_TRANSFORMED flag
    vrf: Fix IPv6 with qdisc and xfrm
    vt: don't hardcode the mem allocation upper bound
    vt: don't use kmalloc() for the unicode screen buffer
    vxlan: use the correct nlattr array in NL_SET_ERR_MSG_ATTR
    watchdog: reset last_hw_keepalive time at start
    xfrm: Always set XFRM_TRANSFORMED in xfrm{4,6}_output_finish
    xhci: Don't clear hub TT buffer on ep0 protocol stall
    xhci: Ensure link state is U3 after setting USB_SS_PORT_LS_U3
    xhci: Finetune host initiated USB3 rootport link suspend and resume
    xhci: Fix handling halted endpoint even if endpoint ring appears empty
    xhci: prevent bus suspend if a roothub port detected a over-current condition
    xhci: Wait until link state trainsits to U0 after setting USB_SS_PORT_LS_U0
Linux 5.4.37
    afs: Fix length of dump of bad YFSFetchStatus record
    afs: Fix to actually set AFS_SERVER_FL_HAVE_EPOCH
    afs: Make record checking use TASK_UNINTERRUPTIBLE when appropriate
    ALSA: hda: call runtime_allow() for all hda controllers
    ALSA: hda: Explicitly permit using autosuspend if runtime PM is supported
    ALSA: hda: Keep the controller initialization even if no codecs found
    ALSA: hda: Release resources at error in delayed probe
    arm64: Delete the space separator in __emit_inst
    ARM: dts: bcm283x: Disable dsi0 node
    ASoC: meson: axg-card: fix codec-to-codec link setup
    ASoC: q6dsp6: q6afe-dai: add missing channels to MI2S DAIs
    ASoC: soc-core: disable route checks for legacy devices
    ASoC: stm32: sai: fix sai probe
    ASoC: stm32: spdifrx: fix regmap status check
    ASoC: tas571x: disable regulators on failed probe
    ASoC: wm8960: Fix wrong clock after suspend & resume
    blk-iocost: Fix error on iocost_ioc_vrate_adj
    blk-mq: Put driver tag in blk_mq_dispatch_rq_list() when no budget
    bpf: Forbid XADD on spilled pointers for unprivileged users
    bpf, x86_32: Fix clobbering of dst for BPF_JSET
    bpf, x86_32: Fix incorrect encoding in BPF_LDX zero-extension
    bpf, x86_32: Fix logic error in BPF_LDX zero-extension
    bpf, x86: Fix encoding for lower 8-bit registers in BPF_STX BPF_B
    counter: 104-quad-8: Add lock guards - generic interface
    cpumap: Avoid warning when CONFIG_DEBUG_PER_CPU_MAPS is enabled
    Crypto: chelsio - Fixes a hang issue during driver registration
    drivers: soc: xilinx: fix firmware driver Kconfig dependency
    ext4: check for non-zero journal inum in ext4_calculate_overhead
    ext4: convert BUG_ON's to WARN_ON's in mballoc.c
    ext4: increase wait time needed before reuse of deleted inode numbers
    ext4: use matching invalidatepage in ext4_writepage
    hwmon: (jc42) Fix name to have no illegal characters
    i2c: altera: use proper variable to hold errno
    iio:ad7797: Use correct attribute_group
    kbuild: fix DT binding schema rule again to avoid needless rebuilds
    libbpf: Initialize *nl_pid so gcc 10 is happy
    mac80211: fix channel switch trigger from unknown mesh peer
    mm: shmem: disable interrupt when acquiring info->lock in userfaultfd_copy path
    net/cxgb4: Check the return from t4_query_params properly
    net: fec: set GPR bit on suspend by DT configuration.
    netfilter: nat: fix error handling upon registering inet hook
    net/mlx5e: Don't trigger IRQ multiple times on XSK wakeup to avoid WQ overruns
    net/mlx5e: Get the latest values from counters in switchdev mode
    net/mlx5: Fix failing fw tracer allocation on s390
    net: stmmac: socfpga: Allow all RGMII modes
    net: use indirect call wrappers for skb_copy_datagram_iter()
    nfsd: memory corruption in nfsd4_lock()
    objtool: Fix CONFIG_UBSAN_TRAP unreachable warnings
    objtool: Support Clang non-section symbols in ORC dump
    PCI: Add ACS quirk for Zhaoxin multi-function devices
    PCI: Add ACS quirk for Zhaoxin Root/Downstream Ports
    PCI: Add Zhaoxin Vendor ID
    PCI: Avoid ASMedia XHCI USB PME# from D0 defect
    PCI: Make ACS quirk implementations more uniform
    PCI: Move Apex Edge TPU class quirk to fix BAR assignment
    PCI: Unify ACS quirk desired vs provided checking
    perf/core: fix parent pid/tid in task exit events
    PM: sleep: core: Switch back to async_schedule_dev()
    printk: queue wake_up_klogd irq_work only if per-CPU areas are ready
    propagate_one(): mnt_set_mountpoint() needs mount_lock
    qed: Fix race condition between scheduling and destroying the slowpath workqueue
    qed: Fix use after free in qed_chain_free
    remoteproc: Fix wrong rvring index computation
    rxrpc: Fix DATA Tx to disable nofrag for UDP on AF_INET6 socket
    s390/ftrace: fix potential crashes when switching tracers
    s390/pci: do not set affinity for floating irqs
    sched/core: Fix reset-on-fork from RT with uclamp
    scsi: target: fix PR IN / READ FULL STATUS for FC
    scsi: target: tcmu: reset_ring should reset TCMU_DEV_BIT_BROKEN
    signal: check sig before setting info in kill_pid_usb_asyncio
    svcrdma: Fix leak of svc_rdma_recv_ctxt objects
    svcrdma: Fix trace point use-after-free race
    taprio: do not use BIT() in TCA_TAPRIO_ATTR_FLAG_* definitions
    ubifs: Fix ubifs_tnc_lookup() usage in do_kill_orphans()
    um: ensure `make ARCH=um mrproper` removes arch/$(SUBARCH)/include/generated/
    usb: dwc3: gadget: Do link recovery for SS and SSP
    usb: gadget: udc: atmel: Fix vbus disconnect handling
    usb: gadget: udc: bdc: Remove unnecessary NULL checks in bdc_req_complete
    x86: hyperv: report value of misc_features
    xen/xenbus: ensure xenbus_map_ring_valloc() returns proper grant status
    xfs: acquire superblock freeze protection on eofblocks scans
    xfs: clear PF_MEMALLOC before exiting xfsaild thread
    xfs: fix partially uninitialized structure in xfs_reflink_remap_extent
Linux 5.4.38
    Revert "ASoC: meson: axg-card: fix codec-to-codec link setup"
Linux 5.4.39
    ALSA: hda/hdmi: fix without unlocked before return
    ALSA: hda/realtek - Two front mics on a Lenovo ThinkCenter
    ALSA: line6: Fix POD HD500 audio playback
    ALSA: opti9xx: shut up gcc-10 range warning
    ALSA: pcm: oss: Place the plugin buffer overflow checks correctly
    ALSA: usb-audio: Correct a typo of NuPrime DAC-10 USB ID
    arm64: vdso: Add -fasynchronous-unwind-tables to cflags
    ARM: dts: imx6qdl-sr-som-ti: indicate powering off wifi is safe
    btrfs: fix block group leak when removing fails
    btrfs: fix partial loss of prealloc extent past i_size after fsync
    btrfs: fix transaction leak in btrfs_recover_relocation
    btrfs: transaction: Avoid deadlock due to bad initialization timing of fs_info::journal_info
    crypto: caam - fix the address of the last entry of S/G
    dlmfs_file_write(): fix the bogosity in handling non-zero *ppos
    dma-buf: Fix SET_NAME ioctl uapi
    dmaengine: dmatest: Fix iteration non-stop logic
    dmaengine: dmatest: Fix process hang when reading 'wait' parameter
    dm multipath: use updated MPATHF_QUEUE_IO on mapping for bio-based mpath
    dm verity fec: fix hash block number in verity_fec_decode
    dm writecache: fix data corruption when reloading the target
    Drivers: hv: vmbus: Fix Suspend-to-Idle for Generation-2 VM
    drm/amd/display: Fix green screen issue after suspend
    drm/edid: Fix off-by-one in DispID DTD pixel clock
    drm/qxl: qxl_release leak in qxl_draw_dirty_fb()
    drm/qxl: qxl_release leak in qxl_hw_surface_alloc()
    drm/qxl: qxl_release use after free
    Fix use after free in get_tree_bdev()
    i2c: amd-mp2-pci: Fix Oops in amd_mp2_pci_init() error handling
    i2c: aspeed: Avoid i2c interrupt status clear race condition.
    i2c: iproc: generate stop event for slave writes
    IB/rdmavt: Always return ERR_PTR from rvt_create_mmap_info()
    iommu/amd: Fix legacy interrupt remapping for x2APIC-enabled system
    iommu/qcom: Fix local_base status check
    mmc: cqhci: Avoid false "cqhci: CQE stuck on" by not open-coding timeout loop
    mmc: meson-mx-sdio: remove the broken ->card_busy() op
    mmc: meson-mx-sdio: Set MMC_CAP_WAIT_WHILE_BUSY
    mmc: sdhci-msm: Enable host capabilities pertains to R1b response
    mmc: sdhci-pci: Fix eMMC driver strength for BYT-based controllers
    mmc: sdhci-xenon: fix annoying 1.8V regulator warning
    nfs: Fix potential posix_acl refcnt leak in nfs3_set_acl
    NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION
    nvme: prevent double free in nvme_alloc_ns() error handling
    PM: ACPI: Output correct message on target power state
    PM: hibernate: Freeze kernel threads in software_resume()
    RDMA/cm: Fix an error check in cm_alloc_id_priv()
    RDMA/cm: Fix ordering of xa_alloc_cyclic() in ib_create_cm_id()
    RDMA/core: Fix race between destroy and release FD object
    RDMA/core: Prevent mixed use of FDs between shared ufiles
    RDMA/mlx4: Initialize ib_spec on the stack
    RDMA/mlx5: Set GRH fields in query QP on RoCE
    RDMA/siw: Fix potential siw_mem refcnt leak in siw_fastreg_mr()
    scsi: qla2xxx: check UNLOADING before posting async work
    scsi: qla2xxx: set UNLOADING before waiting for session deletion
    scsi: target/iblock: fix WRITE SAME zeroing
    selinux: properly handle multiple messages in selinux_netlink_send()
    vfio: avoid possible overflow in vfio_iommu_type1_pin_pages
    vfio/type1: Fix VA->PA translation for PFNMAP VMAs in vaddr_get_pfn()
Linux 5.4.40
    ACPI: PM: s2idle: Fix comment in acpi_s2idle_prepare_late()
    ALSA: hda: Match both PCI ID and SSID for driver blacklist
    ASoC: codecs: hdac_hdmi: Fix incorrect use of list_for_each_entry
    ASoC: rsnd: Don't treat master SSI in multi SSI setup as parent
    ASoC: rsnd: Fix HDMI channel mapping for multi-SSI mode
    ASoC: rsnd: Fix parent SSI start/stop in multi-SSI mode
    ASoC: rsnd: Fix "status check failed" spam for multi-SSI
    ASoC: sgtl5000: Fix VAG power-on handling
    ASoC: topology: Check return value of pcm_new_ver
    ASoC: topology: Check return value of soc_tplg_*_create
    ASoC: topology: Check return value of soc_tplg_create_tlv
    ASoC: topology: Check return value of soc_tplg_dai_config
    ASoC: topology: Check soc_tplg_add_route return value
    ASoC: topology: Fix endianness issue
    cgroup, netclassid: remove double cond_resched
    cifs: do not share tcons with DFS
    cifs: protect updating server->dstaddr with a spinlock
    drm/amdgpu: Correctly initialize thermal controller for GPUs with Powerplay table v0 (e.g Hawaii)
    drm/amdgpu: Fix oops when pp_funcs is unset in ACPI event
    drm/bridge: analogix_dp: Split bind() into probe() and real bind()
    drm/i915: Extend WaDisableDARBFClkGating to icl,ehl,tgl
    hexagon: clean up ioremap
    hexagon: define ioremap_uc
    libbpf: Fix readelf output parsing for Fedora
    lib: devres: add a helper function for ioremap_uc
    lib/mpi: Fix building for powerpc with clang
    mac80211: add ieee80211_is_any_nullfunc()
    mac80211: sta_info: Add lockdep condition for RCU list usage
    mfd: intel-lpss: Use devm_ioremap_uc for MMIO
    mm/mremap: Add comment explaining the untagging behaviour of mremap()
    net: bcmgenet: suppress warnings on failed Rx SKB allocations
    net: stmmac: fix enabling socfpga's ptp_ref_clock
    net: stmmac: Fix sub-second increment
    net: systemport: suppress warnings on failed Rx SKB allocations
    platform/x86: GPD pocket fan: Fix error message when temp-limits are out of range
    PM / devfreq: Add missing locking while setting suspend_freq
    remoteproc: qcom_q6v5_mss: fix a bug in q6v5_probe()
    Revert "drm/amd/display: setting the DIG_MODE to the correct value."
    Revert "software node: Simplify software_node_release() function"
    scripts/config: allow colons in option strings for sed
    sctp: Fix SHUTDOWN CTSN Ack in the peer restart case
    selftests/ipc: Fix test failure seen after initial test run
    tools headers UAPI: Sync copy of arm64's asm/unistd.h with the kernel sources
    tracing: Fix memory leaks in trace_events_hist.c
    udp: document udp_rcv_segment special case for looped packets
    usb: dwc3: gadget: Properly set maxpacket limit
    vhost: vsock: kick send_pkt worker once device is started
    wimax/i2400m: Fix potential urb refcnt leak
    x86/kvm: fix a missing-prototypes "vmread_error"
```
2020-05-10 18:40:30 +03:00
survolog (Andrey Grigorev)
652659439a upd: 5.4.31 -> 5.4.32 2020-04-16 12:14:48 +03:00
Mikhail Novosyolov
1f7ef747c8 Provide kernel-release-headers to satisfy BRs of glibc-devel in rosa2019.1 (OMV style) 2020-04-14 22:03:16 +03:00
survolog (Andrey Grigorev)
fcb8f610b3 upd: 5.4.28 -> 5.4.31 2020-04-11 14:46:07 +03:00
Mikhail Novosyolov
66a5846b35 Sign modules with GOST in Nickel
LibreSSL has been built with this patch:
https://github.com/GostCrypt/libressl-openbsd/commit/6baa93
2020-03-29 01:07:43 +03:00
Mikhail Novosyolov
1bca216017 upd: 5.4.26 -> 5.4.28 2020-03-26 09:54:28 +03:00
Mikhail Novosyolov
99814859cf Disable too much debug
Example from dmesg:
[Сб мар 21 13:23:34 2020] segments[0]: cf931495c0607220
[Сб мар 21 13:23:34 2020] consider slot 0 [ix=0 type=2]
[Сб мар 21 13:23:34 2020] <--assoc_array_walk() = terminal_node
[Сб мар 21 13:23:34 2020] -->assoc_array_insert()
[Сб мар 21 13:23:34 2020] -->assoc_array_walk()
[Сб мар 21 13:23:34 2020] -->assoc_array_insert_in_empty_tree()
[Сб мар 21 13:23:34 2020] <--assoc_array_insert_in_empty_tree() = ok [no root]
[Сб мар 21 13:23:34 2020] -->assoc_array_walk()
[Сб мар 21 13:23:34 2020] -->assoc_array_apply_edit()
[Сб мар 21 13:23:34 2020] -->assoc_array_rcu_cleanup()
[Сб мар 21 13:23:34 2020] -->assoc_array_destroy_subtree()
[Сб мар 21 13:23:34 2020] [-1] node
[Сб мар 21 13:23:34 2020] Node 00000000b4f58682 [back=00000000227b36db]
[Сб мар 21 13:23:34 2020] [0] free leaf
[Сб мар 21 13:23:34 2020] free node
2020-03-21 13:28:01 +03:00
Mikhail Novosyolov
9c1eeea866 Fix files without build_headers 2020-03-21 13:12:04 +03:00
Mikhail Novosyolov
dc7438574d New keys with fixed email (vasya@pupkin.ru -> support@rosalinux.ru) 2020-03-21 03:37:29 +03:00
Mikhail Novosyolov
0a2ca7545c fix typo 2020-03-21 03:17:06 +03:00
Mikhail Novosyolov
3a194d0fc5 Make headers of this kernel not default for rosa2016.1 (kernel-4.15 is default) 2020-03-21 03:02:08 +03:00
Mikhail Novosyolov
a5891fe088 upd: 5.4.25 -> 5.4.26 2020-03-20 21:43:16 +03:00
Mikhail Novosyolov
0148cd5423 Fix loading RSA keys in UML by making CRYPTO_SHA512 built in 2020-03-20 21:28:35 +03:00
Mikhail Novosyolov
945975bc28 Add built-in GOST public keys for potential use in the future 2020-03-20 21:20:38 +03:00
Mikhail Novosyolov
7eac40b463 Fix typo 2020-03-20 11:27:35 +03:00
Mikhail Novosyolov
104da23e60 minor: delete some odd empty lines 2020-03-19 00:48:01 +03:00
Mikhail Novosyolov
4e695cf30c Replace patch for sign-file.c with the one sent to upstream. CONFIG_MODULE_SIG_STREEBOG* does not make sense now as there is no tool to properly sign with a GOST algo 2020-03-19 00:42:46 +03:00
Mikhail Novosyolov
784b256f80 Always generate a random GOST key for the kernel keyring (later add preinstalled trusted GOST keys) 2020-03-18 23:53:18 +03:00
Mikhail Novosyolov
3148180250 Prepare to have the same kernel in Fresh/RED and certified distros:
- rename nrj-desktop to generic because nowadays there are no nrjQL patches
- keep nickel flavour for certified distros
- add uml and uml-modules subpackages
- fix description of uml package - it is stripped
- always enable enhanced_security
- disable CONFIG_INIT_ON_FREE_DEFAULT_ON on non-certified distros for best performance
- in scriptlets, check that dkms is installed and make actions if it is installed
- do not depend from the dkms package to avoid pulling it even if someone wants to completely remove it
2020-03-18 22:26:13 +03:00
Mikhail Novosyolov
0313188174 delete incorrect patch
AltHa/RestrScript: file /bin/dmesg is allowed to run by f_path \xc0l2r\xe3\xa0\xff\xff
2020-03-17 11:51:43 +03:00
Mikhail Novosyolov
2854a5a0a7 AltHa: add logging of allowed interpreters
kernel.altha.rstrscript.debug_log=1 now allows to log interpreters
which were allowed to run and log the path to them which was seen by the kernel.

It should easify debugging issues like https://bugzilla.altlinux.org/show_bug.cgi?id=38225
where it is not clear why a binary was allowed to run.
2020-03-17 00:31:54 +03:00
Mikhail Novosyolov
5f08ed1263 Add AltHa LSM Module
TODO: https://bugzilla.altlinux.org/show_bug.cgi?id=38225 has to be resolved
2020-03-16 23:58:42 +03:00
Mikhail Novosyolov
88e63d63e7 Fix building UML on 32 bit (copy hack from non-UML) 2020-03-16 19:38:59 +03:00
Mikhail Novosyolov
6b48b8dafb Disable GOST signing for now due to impossibility to make a correct signature untill libressl or openssl-gost-engine support GOST CMS 2020-03-15 20:26:01 +03:00
Mikhail Novosyolov
c98134ffc6 Revert "Mix non-GOST RSA keys with GOST buildtime key in the kernel keyring"
The 1st certificate from PEM - GOST - is loaded correctly, others (RSA) are not

Loaded X.509 cert 'ROSA rpmbuild: Build time autogenerated kernel key: bb12e555ee1aa3718c7cbff4033d6f08ddc514af'
Loaded X.509 cert 'ROSA rpmbuild: Build time autogenerated kernel key: bb12e555ee1aa3718c7cbff4033d6f08ddc514af'

Thread 1 "linux-uml-5.4.2" hit Breakpoint 1, pkcs1pad_verify (req=0x6197a600) at crypto/rsa-pkcs1pad.c:538
538		if (WARN_ON(req->dst) ||
(gdb) n
539		    WARN_ON(!req->dst_len) ||
(gdb) n
------------[ cut here ]------------
WARNING: CPU: 0 PID: 1 at crypto/rsa-pkcs1pad.c:539 pkcs1pad_verify+0x4e/0x146
Modules linked in:
CPU: 0 PID: 1 Comm: swapper Not tainted 5.4.0 #1
Stack:
 6182b9e0 602e6a39 00000009 00000000
 00000000 61969580 6182b9f0 602e6a7e
 6182ba30 60037f79 00000200 61981409
Call Trace:
 [<600677ed>] ? printk+0x0/0x94
 [<601e1d29>] ? sg_set_buf+0x0/0x92
 [<6001d383>] show_stack+0x13b/0x155
 [<602e6a39>] ? dump_stack_print_info+0xe2/0xeb
 [<602e6a7e>] dump_stack+0x2a/0x2c
 [<60037f79>] __warn+0xed/0x116
 [<60038431>] warn_slowpath_fmt+0xd1/0xdf
 [<601dab29>] ? rsa_free_mpi_key+0x0/0x44
 [<601dab29>] ? rsa_free_mpi_key+0x0/0x44
 [<60211d2c>] ? mpi_read_raw_data+0x0/0x105
 [<601dad3e>] ? rsa_set_pub_key+0xb9/0xe7
 [<60038360>] ? warn_slowpath_fmt+0x0/0xdf
 [<601db6d3>] pkcs1pad_verify+0x4e/0x146
 [<601e2667>] public_key_verify_signature+0x2ae/0x366
 [<601d3a45>] ? crypto_find_alg+0x0/0x2a
 [<6002eebe>] ? set_signals+0x30/0x36
 [<6002eebe>] ? set_signals+0x30/0x36
 [<600d082f>] ? __kmalloc+0xa6/0xd0
 [<600d10ee>] ? kfree+0x0/0x65
 [<601e37ea>] x509_check_for_self_signed+0xd9/0xff
 [<600d10ee>] ? kfree+0x0/0x65
 [<601e2e48>] x509_cert_parse+0x1ed/0x22d
 [<601e33de>] x509_key_preparse+0x28/0x20a
 [<601e0e66>] asymmetric_key_preparse+0x4a/0x87
 [<601ca333>] ? key_type_lookup+0x5a/0x97
 [<601ca509>] key_create_or_update+0x199/0x43a
 [<600677ed>] ? printk+0x0/0x94
 [<6000a549>] load_system_certificate_list+0xc2/0x134
 [<6000a487>] ? load_system_certificate_list+0x0/0x134
 [<6001aa19>] do_one_initcall+0x8e/0x1d0
 [<6001a98b>] ? do_one_initcall+0x0/0x1d0
 [<6001a98b>] ? do_one_initcall+0x0/0x1d0
 [<60001e26>] kernel_init_freeable+0x18c/0x254
 [<600677ed>] ? printk+0x0/0x94
 [<602f55bd>] kernel_init+0x27/0x136
 [<6001c1b5>] new_thread_handler+0x81/0xb2

---[ end trace 9cd4d0bf1a354d26 ]---
public_key_verify_signature (pkey=0x61969580, sig=<optimized out>) at crypto/asymmetric_keys/public_key.c:309
309		ret = crypto_wait_req(crypto_akcipher_verify(req), &cwait);
(gdb) p req
$1 = (struct akcipher_request *) 0x6197a600
(gdb) p &req
Address requested for identifier "req" which is in register $rbx
(gdb) p $req
$2 = void
(gdb) p req->src_len
$3 = 512
(gdb) p ctx->key_size
No symbol "ctx" in current context.
(gdb)

Problems happen here:

static int pkcs1pad_verify(struct akcipher_request *req)
{
	struct crypto_akcipher *tfm = crypto_akcipher_reqtfm(req);
	struct pkcs1pad_ctx *ctx = akcipher_tfm_ctx(tfm);
	struct pkcs1pad_request *req_ctx = akcipher_request_ctx(req);
	int err;

	if (WARN_ON(req->dst) ||
	    WARN_ON(!req->dst_len) ||
	    !ctx->key_size || req->src_len < ctx->key_size)
		return -EINVAL;

For now let's just disable this and debug this later if I have wish and time.

This reverts commit 89974eea5f.
2020-03-15 17:08:18 +03:00
Mikhail Novosyolov
89974eea5f Mix non-GOST RSA keys with GOST buildtime key in the kernel keyring 2020-03-15 14:55:26 +03:00
Mikhail Novosyolov
582758eb22 CRYPTO_ECRDSA must be built in to load kernel keyring and modules 2020-03-15 13:16:34 +03:00
Mikhail Novosyolov
663de86aea decode future CONFIG_SYSTEM_TRUSTED_KEYS 2020-03-14 22:02:48 +03:00
Evgenii Shatokhin
ad889a101f Do not package include/Kbuild
Starting from fcbb8461fd23 "kbuild: remove header compile test",
include/Kbuild is no longer provided. Do not expect it to be present.
2020-03-14 20:51:32 +03:00
Evgenii Shatokhin
caad8bc737 Fix objtool-related errors in 'make prepare' for devel packages
Signed-off-by: Evgenii Shatokhin <eshatokhin@virtuozzo.com>
Signed-off-by: Mikhail Novosyolov <m.novosyolov@rosalinux.ru>
2020-03-14 20:51:15 +03:00
Mikhail Novosyolov
974fbb224c More verbosity 2020-03-14 15:06:19 +03:00