Focal update: 5.10.54 upstream stable release

[AceLan Kao]

    SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The following upstream
       stable patches should be included in the Ubuntu kernel:

       5.10.54 upstream stable release
       from git://git.kernel.org/

Linux 5.10.54
skbuff: Fix build with SKB extensions disabled
xhci: add xhci_get_virt_ep() helper
sfc: ensure correct number of XDP queues
drm/i915/gvt: Clear d3_entered on elsp cmd submission.
usb: ehci: Prevent missed ehci interrupts with edge-triggered MSI
perf inject: Close inject.output on exit
Documentation: Fix intiramfs script name
skbuff: Release nfct refcount on napi stolen or re-used skbs
bonding: fix build issue
PCI: Mark AMD Navi14 GPU ATS as broken
net: dsa: mv88e6xxx: enable SerDes PCS register dump via ethtool -d on Topaz
net: dsa: mv88e6xxx: enable SerDes RX stats for Topaz
drm/amdgpu: update golden setting for sienna_cichlid
drm: Return -ENOTTY for non-drm ioctls
driver core: Prevent warning when removing a device link from unregistered consumer
nds32: fix up stack guard gap
misc: eeprom: at24: Always append device id even if label property is set.
rbd: always kick acquire on "acquired" and "released" notifications
rbd: don't hold lock_rwsem while running_list is being drained
hugetlbfs: fix mount mode command line processing
memblock: make for_each_mem_range() traverse MEMBLOCK_HOTPLUG regions
userfaultfd: do not untag user pointers
io_uring: remove double poll entry on arm failure
io_uring: explicitly count entries for poll reqs
selftest: use mmap instead of posix_memalign to allocate memory
posix-cpu-timers: Fix rearm racing against process tick
bus: mhi: core: Validate channel ID when processing command completions
ixgbe: Fix packet corruption due to missing DMA sync
media: ngene: Fix out-of-bounds bug in ngene_command_config_free_buf()
btrfs: check for missing device in btrfs_trim_fs
tracing: Synthetic event field_pos is an index not a boolean
tracing: Fix bug in rb_per_cpu_empty() that might cause deadloop.
tracing/histogram: Rename "cpu" to "common_cpu"
tracepoints: Update static_call before tp_funcs when adding a tracepoint
firmware/efi: Tell memblock about EFI iomem reservations
usb: typec: stusb160x: register role switch before interrupt registration
usb: dwc2: gadget: Fix sending zero length packet in DDMA mode.
usb: dwc2: gadget: Fix GOUTNAK flow for Slave mode.
usb: gadget: Fix Unbalanced pm_runtime_enable in tegra_xudc_probe
USB: serial: cp210x: add ID for CEL EM3588 USB ZigBee stick
USB: serial: cp210x: fix comments for GE CS1000
USB: serial: option: add support for u-blox LARA-R6 family
usb: renesas_usbhs: Fix superfluous irqs happen after usb_pkt_pop()
usb: max-3421: Prevent corruption of freed memory
USB: usb-storage: Add LaCie Rugged USB3-FW to IGNORE_UAS
usb: hub: Fix link power management max exit latency (MEL) calculations
usb: hub: Disable USB 3 device initiated lpm if exit latency is too high
KVM: PPC: Book3S HV Nested: Sanitise H_ENTER_NESTED TM state
KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow
xhci: Fix lost USB 2 remote wake
usb: xhci: avoid renesas_usb_fw.mem when it's unusable
Revert "usb: renesas-xhci: Fix handling of unknown ROM state"
ALSA: pcm: Fix mmap capability check
ALSA: pcm: Call substream ack() method upon compat mmap commit
ALSA: hdmi: Expose all pins on MSI MS-7C94 board
ALSA: hda/realtek: Fix pop noise and 2 Front Mic issues on a machine
ALSA: sb: Fix potential ABBA deadlock in CSP driver
ALSA: usb-audio: Add registration quirk for JBL Quantum headsets
ALSA: usb-audio: Add missing proc text entry for BESPOKEN type
s390/boot: fix use of expolines in the DMA code
s390/ftrace: fix ftrace_update_ftrace_func implementation
mmc: core: Don't allocate IDA for OF aliases
proc: Avoid mixing integer types in mem_rw()
cifs: fix fallocate when trying to allocate a hole.
cifs: only write 64kb at a time when fallocating a small region of a file
drm/panel: raspberrypi-touchscreen: Prevent double-free
net: sched: cls_api: Fix the the wrong parameter
net: dsa: sja1105: make VID 4095 a bridge VLAN too
tcp: disable TFO blackhole logic by default
sctp: update active_key for asoc when old key is being replaced
nvme: set the PRACT bit when using Write Zeroes with T10 PI
r8169: Avoid duplicate sysfs entry creation error
afs: Fix tracepoint string placement with built-in AFS
Revert "USB: quirks: ignore remote wake-up on Fibocom L850-GL LTE modem"
nvme-pci: don't WARN_ON in nvme_reset_work if ctrl.state is not RESETTING
ceph: don't WARN if we're still opening a session to an MDS
ipv6: fix another slab-out-of-bounds in fib6_nh_flush_exceptions
net/sched: act_skbmod: Skip non-Ethernet packets
spi: spi-bcm2835: Fix deadlock
net: hns3: fix rx VLAN offload state inconsistent issue
net: hns3: fix possible mismatches resp of mailbox
ALSA: hda: intel-dsp-cfg: add missing ElkhartLake PCI ID
net/tcp_fastopen: fix data races around tfo_active_disable_stamp
net: hisilicon: rename CACHE_LINE_MASK to avoid redefinition
bnxt_en: Check abort error state in bnxt_half_open_nic()
bnxt_en: Validate vlan protocol ID on RX packets
bnxt_en: Add missing check for BNXT_STATE_ABORT_ERR in bnxt_fw_rset_task()
bnxt_en: Refresh RoCE capabilities in bnxt_ulp_probe()
bnxt_en: don't disable an already disabled PCI device
ACPI: Kconfig: Fix table override from built-in initrd
spi: cadence: Correct initialisation of runtime PM again
scsi: target: Fix protect handling in WRITE SAME(32)
scsi: iscsi: Fix iface sysfs attr detection
netrom: Decrease sock refcount when sock timers expire
sctp: trim optlen when it's a huge value in sctp_setsockopt
net: sched: fix memory leak in tcindex_partial_destroy_work
KVM: PPC: Fix kvm_arch_vcpu_ioctl vcpu_load leak
KVM: PPC: Book3S: Fix CONFIG_TRANSACTIONAL_MEM=n crash
net: decnet: Fix sleeping inside in af_decnet
efi/tpm: Differentiate missing and invalid final event log table.
dma-mapping: handle vmalloc addresses in dma_common_{mmap,get_sgtable}
usb: hso: fix error handling code of hso_create_net_device
net: fix uninit-value in caif_seqpkt_sendmsg
bpftool: Check malloc return value in mount_bpffs_for_pin
bpf, sockmap, udp: sk_prot needs inuse_idx set for proc stats
bpf, sockmap, tcp: sk_prot needs inuse_idx set for proc stats
bpf, sockmap: Fix potential memory leak on unlikely error case
s390/bpf: Perform r1 range checking before accessing jit->seen_reg[r1]
liquidio: Fix unintentional sign extension issue on left shift of u16
timers: Fix get_next_timer_interrupt() with no timers pending
xdp, net: Fix use-after-free in bpf_xdp_link_release
bpf: Fix tail_call_reachable rejection for interpreter when jit failed
bpf, test: fix NULL pointer dereference on invalid expected_attach_type
ASoC: rt5631: Fix regcache sync errors on resume
spi: mediatek: fix fifo rx mode
regulator: hi6421: Fix getting wrong drvdata
regulator: hi6421: Use correct variable type for regmap api val argument
spi: stm32: fixes pm_runtime calls in probe/remove
spi: imx: add a check for speed_hz before calculating the clock
ASoC: wm_adsp: Correct wm_coeff_tlv_get handling
perf sched: Fix record failure when CONFIG_SCHEDSTATS is not set
perf data: Close all files in close_dir()
perf probe-file: Delete namelist in del_events() on the error path
perf lzma: Close lzma stream on exit
perf script: Fix memory 'threads' and 'cpus' leaks on exit
perf report: Free generated help strings for sort option
perf env: Fix memory leak of cpu_pmu_caps
perf test maps__merge_in: Fix memory leak of maps
perf dso: Fix memory leak in dso__new_map()
perf test event_update: Fix memory leak of evlist
perf test session_topology: Delete session->evlist
perf env: Fix sibling_dies memory leak
perf probe: Fix dso->nsinfo refcounting
perf map: Fix dso->nsinfo refcounting
perf inject: Fix dso->nsinfo refcounting
KVM: x86/pmu: Clear anythread deprecated bit when 0xa leaf is unsupported on the SVM
nvme-pci: do not call nvme_dev_remove_admin from nvme_remove
mptcp: fix warning in __skb_flow_dissect() when do syn cookie for subflow join
cxgb4: fix IRQ free race during driver unload
pwm: sprd: Ensure configuring period and duty_cycle isn't wrongly skipped
selftests: icmp_redirect: IPv6 PMTU info should be cleared after redirect
selftests: icmp_redirect: remove from checking for IPv6 route get
stmmac: platform: Fix signedness bug in stmmac_probe_config_dt()
ipv6: fix 'disable_policy' for fwd packets
bonding: fix incorrect return value of bond_ipsec_offload_ok()
bonding: fix suspicious RCU usage in bond_ipsec_offload_ok()
bonding: Add struct bond_ipesc to manage SA
bonding: disallow setting nested bonding + ipsec offload
bonding: fix suspicious RCU usage in bond_ipsec_del_sa()
ixgbevf: use xso.real_dev instead of xso.dev in callback functions of struct xfrmdev_ops
bonding: fix null dereference in bond_ipsec_add_sa()
bonding: fix suspicious RCU usage in bond_ipsec_add_sa()
net: add kcov handle to skb extensions
gve: Fix an error handling path in 'gve_probe()'
igb: Fix position of assignment to *ring
igb: Check if num of q_vectors is smaller than max before array access
iavf: Fix an error handling path in 'iavf_probe()'
e1000e: Fix an error handling path in 'e1000_probe()'
fm10k: Fix an error handling path in 'fm10k_probe()'
igb: Fix an error handling path in 'igb_probe()'
igc: Fix an error handling path in 'igc_probe()'
ixgbe: Fix an error handling path in 'ixgbe_probe()'
igc: change default return of igc_read_phy_reg()
igb: Fix use-after-free error during reset
igc: Fix use-after-free error during reset

[Launchpad Janitor (janitor)]

This bug was fixed in the package linux-oem-5.10 - 5.10.0-1050.52

---------------
linux-oem-5.10 (5.10.0-1050.52) focal; urgency=medium

  * focal/linux-oem-5.10: 5.10.0-1050.52 -proposed tracker (LP: #1944904)

  * Fix A yellow screen pops up in an instant (< 1 second) and then disappears
    before loading the system (LP: #1945932)
    - SAUCE: drm/i915: Stop force enabling pipe bottom color gammma/csc

  * CVE-2021-3759
    - memcg: enable accounting of ipc resources

  * Fix i915 warnings on skl_dram_get_channel_info() (LP: #1943923)
    - drm/i915: Nuke not needed members of dram_info
    - drm/i915/gen11+: Only load DRAM information from pcode
    - drm/i915: Rename is_16gb_dimm to wm_lv_0_adjust_needed

  * Focal update: 5.10.68 upstream stable release (LP: #1944975)
    - drm/bridge: lt9611: Fix handling of 4k panels
    - btrfs: fix upper limit for max_inline for page size 64K
    - xen: reset legacy rtc flag for PV domU
    - bnx2x: Fix enabling network interfaces without VFs
    - arm64/sve: Use correct size when reinitialising SVE state
    - PM: base: power: don't try to use non-existing RTC for storing data
    - PCI: Add AMD GPU multi-function power dependencies
    - drm/amd/amdgpu: Increase HWIP_MAX_INSTANCE to 10
    - drm/etnaviv: return context from etnaviv_iommu_context_get
    - drm/etnaviv: put submit prev MMU context when it exists
    - drm/etnaviv: stop abusing mmu_context as FE running marker
    - drm/etnaviv: keep MMU context across runtime suspend/resume
    - drm/etnaviv: exec and MMU state is lost when resetting the GPU
    - drm/etnaviv: fix MMU context leak on GPU reset
    - drm/etnaviv: reference MMU context when setting up hardware state
    - drm/etnaviv: add missing MMU context put when reaping MMU mapping
    - s390/sclp: fix Secure-IPL facility detection
    - x86/pat: Pass valid address to sanitize_phys()
    - x86/mm: Fix kern_addr_valid() to cope with existing but not present entries
    - tipc: fix an use-after-free issue in tipc_recvmsg
    - ethtool: Fix rxnfc copy to user buffer overflow
    - net/{mlx5|nfp|bnxt}: Remove unnecessary RTNL lock assert
    - net-caif: avoid user-triggerable WARN_ON(1)
    - ptp: dp83640: don't define PAGE0
    - net/l2tp: Fix reference count leak in l2tp_udp_recv_core
    - r6040: Restore MDIO clock frequency after MAC reset
    - tipc: increase timeout in tipc_sk_enqueue()
    - drm/rockchip: cdn-dp-core: Make cdn_dp_core_resume __maybe_unused
    - perf machine: Initialize srcline string member in add_location struct
    - net/mlx5: FWTrace, cancel work on alloc pd error flow
    - net/mlx5: Fix potential sleeping in atomic context
    - nvme-tcp: fix io_work priority inversion
    - events: Reuse value read using READ_ONCE instead of re-reading it
    - net: ipa: initialize all filter table slots
    - gen_compile_commands: fix missing 'sys' package
    - vhost_net: fix OoB on sendmsg() failure.
    - net/af_unix: fix a data-race in unix_dgram_poll
    - net: dsa: destroy the phylink instance on any error in dsa_slave_phy_setup
    - x86/uaccess: Fix 32-bit __get_user_asm_u64() when CC_HAS_ASM_GOTO_OUTPUT=y
    - tcp: fix tp->undo_retrans accounting in tcp_sack...