-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 30 Sep 2024 21:08:34 +0200 Source: linux-signed-arm64 Architecture: source Version: 6.1.112+1 Distribution: bookworm-security Urgency: high Maintainer: Debian Kernel Team Changed-By: Salvatore Bonaccorso Changes: linux-signed-arm64 (6.1.112+1) bookworm-security; urgency=high . * Sign kernel from linux 6.1.112-1 . * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.107 - tty: atmel_serial: use the correct RTS flag. - fuse: Initialize beyond-EOF page contents before setting uptodate - ALSA: usb-audio: Add delay quirk for VIVO USB-C-XE710 HEADSET - ALSA: usb-audio: Support Yamaha P-125 quirk entry - xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration - [x86] thunderbolt: Mark XDomain as unplugged when router is removed - [s390x] dasd: fix error recovery leading to data corruption on ESE devices - [arm64] ACPI: NUMA: initialize all values of acpi_early_node_map to NUMA_NO_NODE - dm resume: don't return EINVAL when signalled - dm persistent data: fix memory allocation failure - vfs: Don't evict inode under the inode lru traversing context - [s390x] cio: rename bitmap_size() -> idset_bitmap_size() - btrfs: rename bitmap_set_bits() -> btrfs_bitmap_set_bits() - bitmap: introduce generic optimized bitmap_size() - fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE - i2c: qcom-geni: Add missing geni_icc_disable in geni_i2c_runtime_resume - rtla/osnoise: Prevent NULL dereference in error handling - fs/netfs/fscache_cookie: add missing "n_accesses" check - selinux: fix potential counting error in avc_add_xperms_decision() - mm/memory-failure: use raw_spinlock_t in struct memory_failure_cpu - btrfs: zoned: properly take lock to read/update block group's zoned variables - btrfs: tree-checker: add dev extent item checks - drm/amdgpu: Actually check flags for all context ops. - memcg_write_event_control(): fix a user-triggerable oops - drm/amdgpu/jpeg2: properly set atomics vmid field - [s390x] uv: Panic for set and remove shared access UVC errors - bpf: Fix updating attached freplace prog in prog_array map - nilfs2: prevent WARNING in nilfs_dat_commit_end() - ext4, jbd2: add an optimized bmap for the journal inode - 9P FS: Fix wild-memory-access write in v9fs_get_acl - nilfs2: initialize "struct nilfs_binfo_dat"->bi_pad field - mm: khugepaged: fix kernel BUG in hpage_collapse_scan_file() - bpf: Split off basic BPF verifier log into separate file - bpf: drop unnecessary user-triggerable WARN_ONCE in verifierl log - posix-timers: Ensure timer ID search-loop limit is valid - pid: Replace struct pid 1-element array with flex-array - gfs2: Rename remaining "transaction" glock references - gfs2: Rename the {freeze,thaw}_super callbacks - gfs2: Rename gfs2_freeze_lock{ => _shared } - gfs2: Rename SDF_{FS_FROZEN => FREEZE_INITIATOR} - gfs2: Rework freeze / thaw logic - gfs2: Stop using gfs2_make_fs_ro for withdraw - Bluetooth: Fix hci_link_tx_to RCU lock usage - wifi: mac80211: take wiphy lock for MAC addr change - wifi: mac80211: fix change_address deadlock during unregister - net: sched: Print msecs when transmit queue time out - net: don't dump stack on queue timeout - jfs: fix shift-out-of-bounds in dbJoin - squashfs: squashfs_read_data need to check if the length is 0 - Squashfs: fix variable overflow triggered by sysbot - reiserfs: fix uninit-value in comp_keys - erofs: avoid debugging output for (de)compressed data - quota: Detect loops in quota tree - net:rds: Fix possible deadlock in rds_message_put - net: sctp: fix skb leak in sctp_inq_free() - pppoe: Fix memory leak in pppoe_sendmsg() - wifi: mac80211: fix and simplify unencrypted drop check for mesh - wifi: cfg80211: move A-MSDU check in ieee80211_data_to_8023_exthdr - wifi: cfg80211: factor out bridge tunnel / RFC1042 header check - wifi: mac80211: remove mesh forwarding congestion check - wifi: mac80211: fix receiving A-MSDU frames on mesh interfaces - wifi: mac80211: add a workaround for receiving non-standard mesh A-MSDU - wifi: cfg80211: check A-MSDU format more carefully (CVE-2024-35937) - docs/bpf: Document BPF_MAP_TYPE_LPM_TRIE map - bpf: Replace bpf_lpm_trie_key 0-length array with flexible array - bpf: Avoid kfree_rcu() under lock in bpf_lpm_trie. - Bluetooth: RFCOMM: Fix not validating setsockopt user input (CVE-2024-35966) - ext4: check the return value of ext4_xattr_inode_dec_ref() - ext4: fold quota accounting into ext4_xattr_inode_lookup_create() - ext4: do not create EA inode under buffer lock (CVE-2024-40972) - udf: Fix bogus checksum computation in udf_rename() - bpf, net: Use DEV_STAT_INC() - fou: remove warn in gue_gro_receive on unsupported protocol (CVE-2024-44940) - jfs: fix null ptr deref in dtInsertEntry (CVE-2024-44939) - jfs: Fix shift-out-of-bounds in dbDiscardAG (CVE-2024-44938) - ALSA: usb: Fix UBSAN warning in parse_audio_unit() - igc: Correct the launchtime offset - igc: Fix packet still tx after gate close by reducing i226 MAC retry buffer - net/mlx5e: Take state lock during tx timeout reporter - net/mlx5e: Correctly report errors for ethtool rx flows - atm: idt77252: prevent use after free in dequeue_rx() - mlxbf_gige: Remove two unused function declarations - mlxbf_gige: disable RX filters until RX path initialized - mptcp: correct MPTCP_SUBFLOW_ATTR_SSN_OFFSET reserved size - netfilter: allow ipv6 fragments to arrive on different devices - netfilter: flowtable: initialise extack before use - netfilter: nf_queue: drop packets with cloned unconfirmed conntracks (Closes: #1070685) - netfilter: nf_tables: Audit log dump reset after the fact - netfilter: nf_tables: Drop pointless memset in nf_tables_dump_obj - netfilter: nf_tables: Unconditionally allocate nft_obj_filter - netfilter: nf_tables: A better name for nft_obj_filter - netfilter: nf_tables: Carry s_idx in nft_obj_dump_ctx - netfilter: nf_tables: nft_obj_filter fits into cb->ctx - netfilter: nf_tables: Carry reset boolean in nft_obj_dump_ctx - netfilter: nf_tables: Introduce nf_tables_getobj_single - netfilter: nf_tables: Add locking for NFT_MSG_GETOBJ_RESET requests - [arm64] net: hns3: fix wrong use of semaphore up - [arm64] net: hns3: use the user's cfg after reset - [arm64] net: hns3: fix a deadlock problem when config TC during resetting - ALSA: hda/realtek: Fix noise from speakers on Lenovo IdeaPad 3 15IAU7 - drm/amd/amdgpu/imu_v11_0: Increase buffer size to ensure all possible values can be stored - ssb: Fix division by zero issue in ssb_calc_clock_rate - wifi: cfg80211: check wiphy mutex is held for wdev mutex - wifi: mac80211: fix BA session teardown race - mm: Remove kmem_valid_obj() - rcu: Dump memory object info if callback function is invalid - rcu: Eliminate rcu_gp_slow_unregister() false positive - wifi: cw1200: Avoid processing an invalid TIM IE - cgroup: Avoid extra dereference in css_populate_dir() - i2c: riic: avoid potential division by zero - RDMA/rtrs: Fix the problem of variable not initialized fully - [s390x] smp,mcck: fix early IPI handling - drm/bridge: tc358768: Attempt to fix DSI horizontal timings - media: radio-isa: use dev_name to fill in bus_info - staging: iio: resolver: ad2s1210: fix use before initialization - usb: gadget: uvc: cleanup request when not in correct state - drm/amd/display: Validate hw_points_num before using it - staging: ks7010: disable bh on tx_dev_lock - media: s5p-mfc: Fix potential deadlock on condlock - md/raid5-cache: use READ_ONCE/WRITE_ONCE for 'conf->log' - binfmt_misc: cleanup on filesystem umount - [arm64,armhf] drm/tegra: Zero-initialize iosys_map - media: qcom: venus: fix incorrect return value - scsi: spi: Fix sshdr use - gfs2: setattr_chown: Add missing initialization - wifi: iwlwifi: abort scan when rfkill on but device enabled - wifi: iwlwifi: fw: Fix debugfs command sending - clk: visconti: Add bounds-checking coverage for struct visconti_pll_provider - [amd64] IB/hfi1: Fix potential deadlock on &irq_src_lock and &dd->uctxt_lock - kbuild: rust_is_available: normalize version matching - kbuild: rust_is_available: handle failures calling `$RUSTC`/`$BINDGEN` - [arm64] Fix KASAN random tag seed initialization - block: Fix lockdep warning in blk_mq_mark_tag_wait - [arm64] drm/msm: Reduce fallout of fence signaling vs reclaim hangs - memory: tegra: Skip SID programming if SID registers aren't set - [powerpc*] xics: Check return value of kasprintf in icp_native_map_one_cpu - [x86] ASoC: SOF: ipc4: check return value of snd_sof_ipc_msg_data - [x86] hwmon: (pc87360) Bounds check data->innr usage - drm/rockchip: vop2: clear afbc en and transform bit for cluster window at linear mode - Bluetooth: hci_conn: Check non NULL function before calling for HFP offload - gfs2: Refcounting fix in gfs2_thaw_super - nvmet-trace: avoid dereferencing pointer too early - ext4: do not trim the group with corrupted block bitmap - afs: fix __afs_break_callback() / afs_drop_open_mmap() race - fuse: fix UAF in rcu pathwalks - quota: Remove BUG_ON from dqget() - kernfs: fix false-positive WARN(nr_mmapped) in kernfs_drain_open_files - media: pci: cx23885: check cx23885_vdev_init() return - fs: binfmt_elf_efpic: don't use missing interpreter's properties - scsi: lpfc: Initialize status local variable in lpfc_sli4_repost_sgl_list() - media: drivers/media/dvb-core: copy user arrays safely - net/sun3_82586: Avoid reading past buffer in debug output - drm/lima: set gp bus_stop bit before hard reset - hrtimer: Select housekeeping CPU during migration - virtiofs: forbid newlines in tags - clocksource/drivers/arm_global_timer: Guard against division by zero - netlink: hold nlk->cb_mutex longer in __netlink_dump_start() - md: clean up invalid BUG_ON in md_ioctl - [x86] Increase brk randomness entropy for 64-bit systems - memory: stm32-fmc2-ebi: check regmap_read return value - [powerpc*] boot: Handle allocation failure in simple_realloc() - [powerpc*] boot: Only free if realloc() succeeds - btrfs: delayed-inode: drop pointless BUG_ON in __btrfs_remove_delayed_item() - btrfs: change BUG_ON to assertion when checking for delayed_node root - btrfs: tests: allocate dummy fs_info and root in test_find_delalloc() - btrfs: handle invalid root reference found in may_destroy_subvol() - btrfs: send: handle unexpected data in header buffer in begin_cmd() - btrfs: change BUG_ON to assertion in tree_move_down() - btrfs: delete pointless BUG_ON check on quota root in btrfs_qgroup_account_extent() - f2fs: fix to do sanity check in update_sit_entry - usb: gadget: fsl: Increase size of name buffer for endpoints - nvme: clear caller pointer on identify failure - Bluetooth: bnep: Fix out-of-bound access - firmware: cirrus: cs_dsp: Initialize debugfs_root to invalid - rtc: nct3018y: fix possible NULL dereference - [arm64] net: hns3: add checking for vf id of mailbox - nvmet-tcp: do not continue for invalid icreq - NFS: avoid infinite loop in pnfs_update_layout. - [s390x] iucv: fix receive buffer virtual vs physical address confusion - irqchip/renesas-rzg2l: Do not set TIEN and TINT source at the same time - clocksource: Make watchdog and suspend-timing multiplication overflow safe - [x86] platform/x86: lg-laptop: fix %s null argument warning - usb: dwc3: core: Skip setting event buffers for host only controllers - fbdev: offb: replace of_node_put with __free(device_node) - irqchip/gic-v3-its: Remove BUG_ON in its_vpe_irq_domain_alloc - ext4: set the type of max_zeroout to unsigned int to avoid overflow - nvmet-rdma: fix possible bad dereference when freeing rsps - drm/amdgpu: fix dereference null return value for the function amdgpu_vm_pt_parent - hrtimer: Prevent queuing of hrtimer without a function callback - gtp: pull network headers in gtp_dev_xmit() - [arm64,armhf] i2c: tegra: allow DVC support to be compiled out - [arm64,armhf] i2c: tegra: allow VI support to be compiled out - [arm64,armhf] i2c: tegra: Do not mark ACPI devices as irq safe - dm suspend: return -ERESTARTSYS instead of -EINTR - net: mana: Fix doorbell out of order violation and avoid unnecessary doorbell rings - btrfs: replace sb::s_blocksize by fs_info::sectorsize - btrfs: send: allow cloning non-aligned extent if it ends at i_size - drm/amd/display: Adjust cursor position - platform/surface: aggregator: Fix warning when controller is destroyed in probe - Bluetooth: hci_core: Fix LE quote calculation - Bluetooth: SMP: Fix assumption of Central always being Initiator - [arm64] net: dsa: tag_ocelot: do not rely on skb_mac_header() for VLAN xmit - [arm64] net: dsa: tag_ocelot: call only the relevant portion of __skb_vlan_pop() on TX - [arm64] net: mscc: ocelot: use ocelot_xmit_get_vlan_info() also for FDMA and register injection - [arm64] net: mscc: ocelot: fix QoS class for injected packets with "ocelot-8021q" - [arm64] net: mscc: ocelot: serialize access to the injection/extraction groups - tc-testing: don't access non-existent variable on exception - tcp/dccp: bypass empty buckets in inet_twsk_purge() - tcp/dccp: do not care about families in inet_twsk_purge() - tcp: prevent concurrent execution of tcp_sk_exit_batch - net: mctp: test: Use correct skb for route input check - kcm: Serialise kcm_sendmsg() for the same socket. - netfilter: nft_counter: Disable BH in nft_counter_offload_stats(). - netfilter: nft_counter: Synchronize nft_counter_reset() against reader. - ip6_tunnel: Fix broken GRO - bonding: fix bond_ipsec_offload_ok return type - bonding: fix null pointer deref in bond_ipsec_offload_ok - bonding: fix xfrm real_dev null pointer dereference - bonding: fix xfrm state handling when clearing active slave - ice: Prepare legacy-rx for upcoming XDP multi-buffer support - ice: Add xdp_buff to ice_rx_ring struct - ice: Store page count inside ice_rx_buf - ice: Pull out next_to_clean bump out of ice_put_rx_buf() - ice: fix page reuse when PAGE_SIZE is over 8k - ice: fix ICE_LAST_OFFSET formula - dpaa2-switch: Fix error checking in dpaa2_switch_seed_bp() - net: dsa: mv88e6xxx: Fix out-of-bound access - netem: fix return value if duplicate enqueue fails - ipv6: prevent UAF in ip6_send_skb() - ipv6: fix possible UAF in ip6_finish_output2() - ipv6: prevent possible UAF in ip6_xmit() - netfilter: flowtable: validate vlan header - [arm64] drm/msm/dpu: don't play tricks with debug macros - [arm64] drm/msm/dp: fix the max supported bpp logic - [arm64] drm/msm/dp: reset the link phy params before link training - [arm64] drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails - mmc: mmc_test: Fix NULL dereference on allocation failure - Bluetooth: MGMT: Add error handling to pair_device() (CVE-2024-43884) - scsi: core: Fix the return value of scsi_logical_block_count() - ksmbd: the buffer of smb2 query dir response has at least 1 byte - drm/amdgpu: Validate TA binary size - HID: wacom: Defer calculation of resolution until resolution_code is known - HID: microsoft: Add rumble support to latest xbox controllers - Input: i8042 - add forcenorestore quirk to leave controller untouched even on s3 - Input: i8042 - use new forcenorestore quirk to replace old buggy quirk combination - cxgb4: add forgotten u64 ivlan cast before shift - [arm64] KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3 - mmc: dw_mmc: allow biu and ciu clocks to defer - pmdomain: imx: wait SSAR when i.MX93 power domain on - mptcp: pm: re-using ID of unused removed ADD_ADDR - mptcp: pm: re-using ID of unused removed subflows - mptcp: pm: re-using ID of unused flushed subflows - mptcp: pm: only decrement add_addr_accepted for MPJ req - Revert "usb: gadget: uvc: cleanup request when not in correct state" - Revert "drm/amd/display: Validate hw_points_num before using it" - tcp: do not export tcp_twsk_purge() - hwmon: (ltc2992) Fix memory leak in ltc2992_parse_dt() - ALSA: timer: Relax start tick time check for slave timer elements - mm/vmalloc: fix page mapping if vm_area_alloc_pages() with high order fallback to order 0 - mm/numa: no task_numa_fault() call if PMD is changed - mm/numa: no task_numa_fault() call if PTE is changed - nfsd: Simplify code around svc_exit_thread() call in nfsd() - nfsd: separate nfsd_last_thread() from nfsd_put() - NFSD: simplify error paths in nfsd_svc() - nfsd: call nfsd_last_thread() before final nfsd_put() - nfsd: drop the nfsd_put helper - nfsd: don't call locks_release_private() twice concurrently - nfsd: Fix a regression in nfsd_setattr() - Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO - drm/amdgpu/vcn: identify unified queue in sw init - drm/amdgpu/vcn: not pause dpg for unified queue - [x86] KVM: x86: fire timer when it is migrated and expired, and in oneshot mode - Revert "s390/dasd: Establish DMA alignment" - wifi: mac80211: add documentation for amsdu_mesh_control - wifi: mac80211: fix mesh path discovery based on unicast packets - wifi: mac80211: fix mesh forwarding - wifi: mac80211: fix flow dissection for forwarded packets - wifi: mac80211: fix receiving mesh packets in forwarding=0 networks - wifi: mac80211: drop bogus static keywords in A-MSDU rx - wifi: mac80211: fix potential null pointer dereference - wifi: cfg80211: fix receiving mesh packets without RFC1042 header - gfs2: Fix another freeze/thaw hang - gfs2: don't withdraw if init_threads() got interrupted - gfs2: Remove LM_FLAG_PRIORITY flag - gfs2: Remove freeze_go_demote_ok - udp: fix receiving fraglist GSO packets - ice: fix W=1 headers mismatch - Revert "jfs: fix shift-out-of-bounds in dbJoin" - net: change maximum number of UDP segments to 128 - selftests: net: more strict check in net_helper - Input: MT - limit max slots - tools: move alignment-related macros to new https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.108 - drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc (CVE-2024-42228) - btrfs: run delayed iputs when flushing delalloc - smb/client: avoid dereferencing rdata=NULL in smb2_new_read_req() - pinctrl: rockchip: correct RK3328 iomux width flag for GPIO2-B pins - pinctrl: single: fix potential NULL dereference in pcs_get_function() - of: Add cleanup.h based auto release via __free(device_node) markings - wifi: wfx: repair open network AP mode - wifi: mwifiex: duplicate static structs used in driver instances - net: mana: Fix race of mana_hwc_post_rx_wqe and new hwc response - mptcp: close subflow when receiving TCP+FIN - mptcp: sched: check both backup in retrans - mptcp: pm: skip connecting to already established sf - mptcp: pm: reset MPC endp ID when re-added - mptcp: pm: send ACK on an active subflow - mptcp: pm: do not remove already closed subflows - mptcp: pm: ADD_ADDR 0 is not a new address - drm/amdgpu: align pp_power_profile_mode with kernel docs - drm/amdgpu/swsmu: always force a state reprogram on init - ata: libata-core: Fix null pointer dereference on error (CVE-2024-41098) - usb: typec: fix up incorrectly backported "usb: typec: tcpm: unregister existing source caps before re-registration" - mmc: Avoid open coding by using mmc_op_tuning() - mmc: mtk-sd: receive cmd8 data when hs400 tuning fail - mptcp: unify pm get_local_id interfaces - mptcp: pm: remove mptcp_pm_remove_subflow() - mptcp: pm: only mark 'subflow' endp as available - mptcp: pm: check add_addr_accept_max before accepting new ADD_ADDR - of: Introduce for_each_*_child_of_node_scoped() to automate of_node_put() handling - thermal: of: Fix OF node leak in thermal_of_trips_init() error path - thermal: of: Fix OF node leak in of_thermal_zone_find() error paths - ASoC: amd: acp: fix module autoloading - ASoC: SOF: amd: Fix for acp init sequence - pinctrl: mediatek: common-v2: Fix broken bias-disable for PULL_PU_PD_RSEL_TYPE - btrfs: fix extent map use-after-free when adding pages to compressed bio (CVE-2024-42314) - soundwire: stream: fix programming slave ports for non-continous port maps - [arm64] phy: xilinx: add runtime PM support - [arm64] phy: xilinx: phy-zynqmp: dynamic clock support for power-save - [arm64] phy: xilinx: phy-zynqmp: Fix SGMII linkup failure on resume - [x86] dmaengine: dw: Add peripheral bus width verification - [x86] dmaengine: dw: Add memory bus width verification - Bluetooth: hci_core: Fix not handling hibernation actions - iommu: Do not return 0 from map_pages if it doesn't do anything - netfilter: nf_tables: restore IP sanity checks for netdev/egress - wifi: iwlwifi: fw: fix wgds rev 3 exact size - ethtool: check device is present when getting link settings - netfilter: nf_tables_ipv6: consider network offset in netdev/egress validation - bonding: implement xdo_dev_state_free and call it after deletion - gtp: fix a potential NULL pointer dereference - sctp: fix association labeling in the duplicate COOKIE-ECHO case - drm/amd/display: avoid using null object of framebuffer - net: busy-poll: use ktime_get_ns() instead of local_clock() - nfc: pn533: Add poll mod list filling check - [arm64] soc: qcom: cmd-db: Map shared memory as WC, not WB - cdc-acm: Add DISABLE_ECHO quirk for GE HealthCare UI Controller - USB: serial: option: add MeiG Smart SRM825L - [armhf] usb: dwc3: omap: add missing depopulate in probe error path - [arm64,armhf] usb: dwc3: core: Prevent USB core invalid event buffer address access - usb: core: sysfs: Unmerge @usb3_hardware_lpm_attr_group in remove_power_attributes() - usb: cdnsp: fix incorrect index in cdnsp_get_hw_deq function - usb: cdnsp: fix for Link TRB with TC - [arm64] phy: zynqmp: Enable reference clock correctly - igc: Fix reset adapter logics when tx mode change - igc: Fix qbv tx latency by setting gtxoffset - scsi: aacraid: Fix double-free on probe failure - apparmor: fix policy_unpack_test on big endian systems - fbdev: offb: fix up missing cleanup.h https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.109 - drm: panel-orientation-quirks: Add quirk for OrangePi Neo - scsi: ufs: core: Bypass quick recovery if force reset is needed - ALSA: hda/generic: Add a helper to mute speakers at suspend/shutdown - ALSA: hda/conexant: Mute speakers at suspend / shutdown - i2c: Fix conditional for substituting empty ACPI functions - dma-debug: avoid deadlock between dma debug vs printk and netconsole - net: usb: qmi_wwan: add MeiG Smart SRM825L - [x86] ASoC: amd: yc: Support mic on Lenovo Thinkpad E14 Gen 6 - mptcp: make pm_remove_addrs_and_subflows static - mptcp: pm: fix RM_ADDR ID for the initial subflow - PCI/MSI: Fix UAF in msi_capability_init (CVE-2024-41096) - f2fs: fix to truncate preallocated blocks in f2fs_file_open() (CVE-2024-43859) - mptcp: pm: fullmesh: select the right ID later - mptcp: pm: avoid possible UaF when selecting endp (CVE-2024-44974) - mptcp: pm: reuse ID 0 after delete and re-add - mptcp: pm: fix ID 0 endp usage after multiple re-creations - mptcp: pr_debug: add missing \n at the end - mptcp: avoid duplicated SUB_CLOSED events - drm/amdgpu: Fix uninitialized variable warning in amdgpu_afmt_acr - drm/amd/display: Assign linear_pitch_alignment even for VM - drm/amdgpu: fix overflowed array index read warning - drm/amdgpu/pm: Check the return value of smum_send_msg_to_smc - drm/amd/pm: fix uninitialized variable warning - drm/amd/pm: fix uninitialized variable warning for smu8_hwmgr - drm/amd/pm: fix warning using uninitialized value of max_vid_step - drm/amd/pm: Fix negative array index read - drm/amd/pm: fix the Out-of-bounds read warning - drm/amd/pm: fix uninitialized variable warnings for vega10_hwmgr - drm/amdgpu: avoid reading vf2pf info size from FB - drm/amd/display: Check gpio_id before used as array index - drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6 - drm/amd/display: Add array index check for hdcp ddc access - drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[] - drm/amd/display: Check msg_id before processing transcation - drm/amd/display: Fix Coverity INTEGER_OVERFLOW within dal_gpio_service_create - drm/amd/display: Spinlock before reading event - drm/amd/display: Ensure index calculation will not overflow - drm/amd/display: Skip inactive planes within ModeSupportAndSystemConfiguration - drm/amd/amdgpu: Check tbo resource pointer - drm/amd/pm: fix uninitialized variable warnings for vangogh_ppt - drm/amdgpu/pm: Fix uninitialized variable warning for smu10 - drm/amdgpu/pm: Fix uninitialized variable agc_btc_response - drm/amdgpu: Fix out-of-bounds write warning - drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number - drm/amdgpu: fix ucode out-of-bounds read warning - drm/amdgpu: fix mc_data out-of-bounds read warning - apparmor: fix possible NULL pointer dereference - wifi: ath11k: initialize 'ret' in ath11k_qmi_load_file_target_mem() - drm/amdgpu/pm: Check input value for CUSTOM profile mode setting on legacy SOCs - drm/amdgpu: fix dereference after null check - drm/amdgpu: fix the waring dereferencing hive - drm/amd/pm: check specific index for aldebaran - drm/amdgpu: the warning dereferencing obj for nbio_v7_4 - drm/amd/pm: check negtive return for table entries - wifi: rtw89: ser: avoid multiple deinit on same CAM - drm/amdgpu: update type of buf size to u32 for eeprom functions - wifi: iwlwifi: remove fw_running op - cpufreq: scmi: Avoid overflow of target_freq in fast switch - PCI: al: Check IORESOURCE_BUS existence during probe - hwspinlock: Introduce hwspin_lock_bust() - RDMA/efa: Properly handle unexpected AQ completions - ionic: fix potential irq name truncation - pwm: xilinx: Fix u32 overflow issue in 32-bit width PWM mode. - rcu/nocb: Remove buggy bypass lock contention mitigation - usbip: Don't submit special requests twice - usb: typec: ucsi: Fix null pointer dereference in trace - fsnotify: clear PARENT_WATCHED flags lazily - regmap: spi: Fix potential off-by-one when calculating reserved size - smack: tcp: ipv4, fix incorrect labeling - net/mlx5e: SHAMPO, Fix incorrect page release - [arm64] drm/meson: plane: Add error handling - [x86] hwmon: (k10temp) Check return value of amd_smn_read() - wifi: cfg80211: make hash table duplicates more survivable - driver: iio: add missing checks on iio_info's callback access - block: remove the blk_flush_integrity call in blk_integrity_unregister - drm/amd/display: added NULL check at start of dc_validate_stream - drm/amd/display: Correct the defined value for AMDGPU_DMUB_NOTIFICATION_MAX - drm/amd/display: Skip wbscl_set_scaler_filter if filter is null - media: uvcvideo: Enforce alignment of frame and interval - virtio_net: Fix napi_skb_cache_put warning (CVE-2024-43835) - Bluetooth: SCO: Fix possible circular locking dependency on sco_connect_cfm - Bluetooth: SCO: fix sco_conn related locking and validity issues - ext4: fix inode tree inconsistency caused by ENOMEM - udf: Limit file size to 4TB - ext4: reject casefold inode flag without casefold feature - ext4: handle redirtying in ext4_bio_write_page() - i2c: Use IS_REACHABLE() for substituting empty ACPI functions https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.110 - sch/netem: fix use after free in netem_dequeue - ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object - [x86] KVM: x86: Acquire kvm->srcu when handling KVM_SET_VCPU_EVENTS - [x86] KVM: SVM: fix emulation of msr reads/writes of MSR_FS_BASE and MSR_GS_BASE - [x86] KVM: SVM: Don't advertise Bus Lock Detect to guest if SVM support is missing - ALSA: hda/conexant: Add pincfg quirk to enable top speakers on Sirius devices - ALSA: hda/realtek: add patch for internal mic in Lenovo V145 - ALSA: hda/realtek: Support mute LED on HP Laptop 14-dq2xxx - ksmbd: unset the binding mark of a reused connection - ksmbd: Unlock on in ksmbd_tcp_set_interfaces() - ata: libata: Fix memory leak for error path in ata_host_alloc() - [x86] tdx: Fix data leak in mmio_read() - [x86] perf/x86/intel: Limit the period on Haswell - [arm64,armhf] irqchip/gic-v2m: Fix refcount leak in gicv2m_of_init() - [x86] kaslr: Expose and use the end of the physical memory address space - rtmutex: Drop rt_mutex::wait_lock before scheduling - nvme-pci: Add sleep quirk for Samsung 990 Evo - Revert "Bluetooth: MGMT/SMP: Fix address type when using SMP over BREDR/LE" - Bluetooth: MGMT: Ignore keys being loaded with invalid type - mmc: core: apply SD quirks earlier during probe - mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K - mmc: sdhci-of-aspeed: fix module autoloading - mmc: cqhci: Fix checking of CQHCI_HALT state - fuse: update stats for pages in dropped aux writeback list - fuse: use unsigned type for getxattr/listxattr size truncation - [arm64] clk: qcom: clk-alpha-pll: Fix the pll post div mask - [arm64] clk: qcom: clk-alpha-pll: Fix the trion pll postdiv set rate API - can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open - spi: rockchip: Resolve unbalanced runtime PM / system PM handling - tracing: Avoid possible softlockup in tracing_iter_reset() - net: mctp-serial: Fix missing escapes on transmit - [x86] fpu: Avoid writing LBR bit to IA32_XSS unless supported - Revert "drm/amdgpu: align pp_power_profile_mode with kernel docs" - tcp_bpf: fix return value of tcp_bpf_sendmsg() - ila: call nf_unregister_net_hooks() sooner - sched: sch_cake: fix bulk flow accounting logic for host fairness - nilfs2: fix missing cleanup on rollforward recovery error - nilfs2: protect references to superblock parameters exposed in sysfs - nilfs2: fix state management in error path of log writing function - ALSA: control: Apply sanity check of input values for user elements - ALSA: hda: Add input value sanity checks to HDMI channel map controls - smack: unix sockets: fix accept()ed socket label - ELF: fix kernel.randomize_va_space double read - [armhf] irqchip/armada-370-xp: Do not allow mapping IRQ 0 and 1 - af_unix: Remove put_pid()/put_cred() in copy_peercred(). - [x86] kmsan: Fix hook for unaligned accesses - netfilter: nf_conncount: fix wrong variable type - udf: Avoid excessive partition lengths - media: vivid: fix wrong sizeimage value for mplane - leds: spi-byte: Call of_node_put() on error path - wifi: brcmsmac: advertise MFP_CAPABLE to enable WPA3 - usb: uas: set host status byte on data completion error - usb: gadget: aspeed_udc: validate endpoint index for ast udc - drm/amd/display: Check HDCP returned status - drm/amdgpu: Fix smatch static checker warning - drm/amdgpu: clear RB_OVERFLOW bit when enabling interrupts - media: vivid: don't set HDMI TX controls if there are no HDMI outputs - PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0) - Input: ili210x - use kvmalloc() to allocate buffer for firmware update - media: qcom: camss: Add check for v4l2_fwnode_endpoint_parse - pcmcia: Use resource_size function on resource object - drm/amd/display: Check denominator pbn_div before used - drm/amdgpu: check for LINEAR_ALIGNED correctly in check_tiling_flags_gfx6 - can: bcm: Remove proc entry when dev is unregistered. - [arm64] can: m_can: Release irq on error in m_can_open - can: mcp251xfd: fix ring configuration when switching from CAN-CC to CAN-FD mode - cifs: Fix FALLOC_FL_ZERO_RANGE to preflush buffered part of target region - igb: Fix not clearing TimeSync interrupts for 82580 - ice: Add netif_device_attach/detach into PF reset flow - [x86] platform/x86: dell-smbios: Fix error path in dell_smbios_init() - regulator: Add of_regulator_bulk_get_all - regulator: core: Stub devm_regulator_bulk_get_const() if !CONFIG_REGULATOR - igc: Unlock on error in igc_io_resume() - ice: Use ice_max_xdp_frame_size() in ice_xdp_setup_prog() - ice: allow hot-swapping XDP programs - ice: do not bring the VSI up, if it was down before the XDP setup - usbnet: modern method to get random MAC - bareudp: Fix device stats updates. - fou: Fix null-ptr-deref in GRO. - net: bridge: br_fdb_external_learn_add(): always set EXT_LEARN - net: dsa: vsc73xx: fix possible subblocks range of CAPT block - firmware: cs_dsp: Don't allow writes to read-only controls - [arm64] phy: zynqmp: Take the phy mutex in xlate - [x86] ASoC: topology: Properly initialize soc_enum values - dm init: Handle minors larger than 255 - [amd64] iommu/vt-d: Handle volatile descriptor status read - cgroup: Protect css->cgroup write under css_set_lock - devres: Initialize an uninitialized struct member - pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv - [x86] crypto: qat - fix unintentional re-enabling of error interrupts - hwmon: (nct6775-core) Fix underflows seen when writing limit attributes - hwmon: (w83627ehf) Fix underflows seen when writing limit attributes - libbpf: Add NULL checks to bpf_object__{prev_map,next_map} - drm/amdgpu: Set no_hw_access when VF request full GPU fails - ext4: fix possible tid_t sequence overflows - dma-mapping: benchmark: Don't starve others when doing the test - wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id() - smp: Add missing destroy_work_on_stack() call in smp_call_on_cpu() - btrfs: replace BUG_ON with ASSERT in walk_down_proc() - btrfs: clean up our handling of refs == 0 in snapshot delete - btrfs: replace BUG_ON() with error handling at update_ref_for_cow() - PCI: Add missing bridge lock to pci_bus_lock() - tcp: Don't drop SYN+ACK for simultaneous connect(). - net: dpaa: avoid on-stack arrays of NR_CPUS elements - i3c: mipi-i3c-hci: Error out instead on BUG_ON() in IBI DMA setup - btrfs: initialize location to fix -Wmaybe-uninitialized in btrfs_lookup_dentry() - [s390x] vmlinux.lds.S: Move ro_after_init section behind rodata section - HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup - [amd64] HID: amd_sfh: free driver_data after destroying hid device - Input: uinput - reject requests with unreasonable number of slots - usbnet: ipheth: race between ipheth_close and error handling - Squashfs: sanity check symbolic link size - of/irq: Prevent device address out-of-bounds read in interrupt map walk - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() - [mips*] cevt-r4k: Don't call get_c0_compare_int if timer irq is installed - ata: pata_macio: Use WARN instead of BUG - NFSv4: Add missing rescheduling points in nfs_client_return_marked_delegations - io_uring/io-wq: stop setting PF_NO_SETAFFINITY on io-wq workers - io_uring/sqpoll: Do not set PF_NO_SETAFFINITY on sqpoll threads - tcp: process the 3rd ACK with sk_socket for TFO/MPTCP - iio: buffer-dmaengine: fix releasing dma channel on error - iio: fix scale application in iio_convert_raw_to_processed_unlocked - iio: adc: ad7124: fix config comparison - iio: adc: ad7606: remove frstdata check for serial mode - iio: adc: ad7124: fix chip ID mismatch - [arm64,armhf] usb: dwc3: core: update LC timer as per USB Spec V3.2 - [arm*] binder: fix UAF caused by offsets overwrite - nvmem: Fix return type of devm_nvmem_device_get() in kerneldoc - uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind - Drivers: hv: vmbus: Fix rescind handling in uio_hv_generic - VMCI: Fix use-after-free when removing resource in vmci_resource_remove() - clocksource/drivers/timer-of: Remove percpu irq related code - uprobes: Use kzalloc to allocate xol area - perf/aux: Fix AUX buffer serialization (CVE-2024-46713) - fuse: add "expire only" mode to FUSE_NOTIFY_INVAL_ENTRY - fuse: allow non-extending parallel direct writes on the same file - fuse: add request extension - fuse: fix memory leak in fuse_create_open - net: mana: Fix error handling in mana_create_txq/rxq's NAPI cleanup - workqueue: wq_watchdog_touch is always called with valid CPU - workqueue: Improve scalability of workqueue watchdog touch - ACPI: processor: Return an error if acpi_processor_get_info() fails in processor_add() - ACPI: processor: Fix memory leaks in error paths of processor_add() - [arm64] acpi: Move get_cpu_for_acpi_id() to a header - [arm64] acpi: Harden get_cpu_for_acpi_id() against missing CPU entry - can: mcp251xfd: mcp251xfd_handle_rxif_ring_uinc(): factor out in separate function - can: mcp251xfd: rx: prepare to workaround broken RX FIFO head index erratum - can: mcp251xfd: clarify the meaning of timestamp - can: mcp251xfd: rx: add workaround for erratum DS80000789E 6 of mcp2518fd - drm/amd: Add gfx12 swizzle mode defs - drm/amdgpu: handle gfx12 in amdgpu_display_verify_sizes - [powerpc*] 64e: remove unused IBM HTW code - [powerpc*] 64e: split out nohash Book3E 64-bit code - [powerpc*] 64e: Define mmu_pte_psize static - nvmet-tcp: fix kernel crash if commands allocation fails - [x86] ASoc: SOF: topology: Clear SOF link platform name upon unload - [arm64,armhf] ASoC: sunxi: sun4i-i2s: fix LRCLK polarity in i2s mode - [x86] drm/i915/fence: Mark debug_fence_init_onstack() with __maybe_unused - [x86] drm/i915/fence: Mark debug_fence_free() with __maybe_unused - [arm64,armhf] gpio: rockchip: fix OF node leak in probe() - [arm64] gpio: modepin: Enable module autoloading - [x86] mm: Fix PTI for i386 some more - btrfs: fix race between direct IO write and fsync when using same fd - bpf: Silence a warning in btf_type_id_size() - memcg: protect concurrent access to mem_cgroup_idr (CVE-2024-43892) - regulator: of: fix a NULL vs IS_ERR() check in of_regulator_bulk_get_all() - fuse: add feature flag for expire-only https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.111 - ksmbd: override fsids for share path check - ksmbd: override fsids for smb2_query_info() - usbnet: ipheth: fix carrier detection in modes 1 and 4 - net: ethernet: use ip_hdrlen() instead of bit shift - drm: panel-orientation-quirks: Add quirk for Ayn Loki Zero - drm: panel-orientation-quirks: Add quirk for Ayn Loki Max - net: phy: vitesse: repair vsc73xx autonegotiation - [powerpc*] mm: Fix boot warning with hugepages and CONFIG_DEBUG_VIRTUAL - btrfs: update target inode's ctime on unlink - Input: ads7846 - ratelimit the spi_sync error message - Input: synaptics - enable SMBus for HP Elitebook 840 G2 - HID: multitouch: Add support for GT7868Q - scripts: kconfig: merge_config: config files: add a trailing newline - [x86] platform/surface: aggregator_registry: Add Support for Surface Pro 10 - [x86] platform/surface: aggregator_registry: Add support for Surface Laptop Go 3 - [arm64] drm/msm/adreno: Fix error return if missing firmware-name - Input: i8042 - add Fujitsu Lifebook E756 to i8042 quirk table - smb/server: fix return value of smb2_open() - NFSv4: Fix clearing of layout segments in layoutreturn - NFS: Avoid unnecessary rescanning of the per-server delegation list - [x86] platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses - [x86] platform/x86: panasonic-laptop: Allocate 1 entry extra in the sinf array - mptcp: pm: Fix uaf in __timer_delete_sync - [arm64] dts: rockchip: fix eMMC/SPI corruption when audio has been used on RK3399 Puma - [arm64] dts: rockchip: override BIOS_DISABLE signal via GPIO hog on RK3399 Puma - net: tighten bad gso csum offset check in virtio_net_hdr - dm-integrity: fix a race condition when accessing recalc_sector - mm: avoid leaving partial pfn mappings around in error case - pmdomain: ti: Add a null pointer check to the omap_prm_domain_init (CVE-2024-35943) - [arm64] dts: rockchip: fix PMIC interrupt pin in pinctrl for ROCK Pi E - eeprom: digsy_mtc: Fix 93xx46 driver probe failure - cxl/core: Fix incorrect vendor debug UUID define - [armhf] hwmon: (pmbus) Conditionally clear individual status bits for pmbus rev >= 1.2 - ice: fix accounting for filters shared by multiple VSIs - igb: Always call igb_xdp_ring_update_tail() under Tx lock - net/mlx5: Update the list of the PCI supported devices - net/mlx5e: Add missing link modes to ptys2ethtool_map - net/mlx5: Explicitly set scheduling element and TSAR type - net/mlx5: Add missing masks and QoS bit masks for scheduling elements - net/mlx5: Correct TASR typo into TSAR - net/mlx5: Verify support for scheduling element and TSAR type - net/mlx5: Fix bridge mode operations when there are no VFs - fou: fix initialization of grc - netfilter: nft_socket: fix sk refcount leaks - net: dpaa: Pad packets to ETH_ZLEN - [arm64] spi: nxp-fspi: fix the KASAN report out-of-bounds bug - soundwire: stream: Revert "soundwire: stream: fix programming slave ports for non-continous port maps" - dma-buf: heaps: Fix off-by-one in CMA heap fault handler - drm/amdgpu/atomfirmware: Silence UBSAN warning - [x86] drm/i915/guc: prevent a possible int overflow in wq offsets - pinctrl: meteorlake: Add Arrow Lake-H/U ACPI ID - [arm64] ASoC: meson: axg-card: fix 'use-after-free' https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.112 - ALSA: hda/realtek - Fixed ALC256 headphone no sound - ALSA: hda/realtek - FIxed ALC285 headphone no sound - scsi: lpfc: Fix overflow build issue - [x86] hwmon: (asus-ec-sensors) remove VRM temp X570-E GAMING - [armhf] net: ftgmac100: Ensure tx descriptor updates are visible - wifi: iwlwifi: lower message level for FW buffer destination - wifi: iwlwifi: mvm: fix iwl_mvm_scan_fits() calculation - wifi: iwlwifi: mvm: pause TCM when the firmware is stopped - wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead - wifi: mac80211: free skb on error path in ieee80211_beacon_get_ap() - wifi: iwlwifi: clear trans->state earlier upon error - can: mcp251xfd: mcp251xfd_ring_init(): check TX-coalescing configuration - [x86] ASoC: Intel: soc-acpi-cht: Make Lenovo Yoga Tab 3 X90F DMI match less strict - [x86] ASoC: intel: fix module autoloading - spi: spidev: Add an entry for elgin,jg10309-01 - spi: bcm63xx: Enable module autoloading - smb: client: fix hang in wait_for_response() for negproto - [x86] hyperv: Set X86_FEATURE_TSC_KNOWN_FREQ when Hyper-V provides frequency - tools: hv: rm .*.cmd when make clean - block: Fix where bio IO priority gets set - spi: spidev: Add missing spi_device_id for jg10309-01 - ocfs2: add bounds checking to ocfs2_xattr_find_entry() - ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry() (CVE-2024-41016) - xfs: dquot shrinker doesn't check for XFS_DQFLAG_FREEING - xfs: Fix deadlock on xfs_inodegc_worker - xfs: fix extent busy updating - xfs: don't use BMBT btree split workers for IO completion - xfs: fix low space alloc deadlock - xfs: prefer free inodes at ENOSPC over chunk allocation - xfs: block reservation too large for minleft allocation - xfs: fix uninitialized variable access - xfs: quotacheck failure can race with background inode inactivation - xfs: fix BUG_ON in xfs_getbmap() - xfs: buffer pins need to hold a buffer reference - xfs: defered work could create precommits - xfs: fix AGF vs inode cluster buffer deadlock - xfs: collect errors from inodegc for unlinked inode recovery - xfs: fix ag count overflow during growfs - xfs: remove WARN when dquot cache insertion fails - xfs: fix the calculation for "end" and "length" - xfs: load uncached unlinked inodes into memory on demand - xfs: fix negative array access in xfs_getbmap - xfs: fix unlink vs cluster buffer instantiation race - xfs: correct calculation for agend and blockcount - xfs: use i_prev_unlinked to distinguish inodes that are not on the unlinked list - xfs: reload entire unlinked bucket lists - xfs: make inode unlinked bucket recovery work with quotacheck - xfs: fix reloading entire unlinked bucket lists - xfs: set bnobt/cntbt numrecs correctly when formatting new AGs - xfs: journal geometry is not properly bounds checked - netfilter: nft_socket: make cgroupsv2 matching work with namespaces - netfilter: nft_socket: Fix a NULL vs IS_ERR() bug in nft_socket_cgroup_subtree_level() - netfilter: nft_set_pipapo: walk over current view on netlink dump (CVE-2024-27017) - netfilter: nf_tables: missing iterator type in lookup walk - Revert "wifi: cfg80211: check wiphy mutex is held for wdev mutex" - gpiolib: cdev: Ignore reconfiguration without direction - gpio: prevent potential speculation leaks in gpio_device_get_desc() (CVE-2024-44931) - can: mcp251xfd: properly indent labels - can: mcp251xfd: move mcp251xfd_timestamp_start()/stop() into mcp251xfd_chip_start/stop() - btrfs: calculate the right space for delayed refs when updating global reserve - [x86] powercap: RAPL: fix invalid initialization for pl4_supported field - [x86] mm: Switch to new Intel CPU model defines - USB: serial: pl2303: add device id for Macrosilicon MS3020 - USB: usbtmc: prevent kernel-usb-infoleak . [ Salvatore Bonaccorso ] * Bump ABI to 26 * [rt] Update to 6.1.107-rt39 * [rt] Update to 6.1.111-rt42 Checksums-Sha1: fc12399b6aab1b9db89aeefff0edb8cd54bce0d3 7463 linux-signed-arm64_6.1.112+1.dsc 38fb17a7a8542579777a9664f28f50e4e5e3a348 2969024 linux-signed-arm64_6.1.112+1.tar.xz Checksums-Sha256: 7ed956d5b52004d3747939706cd002d89c302afae178c1479e255a1f4143a96c 7463 linux-signed-arm64_6.1.112+1.dsc 6bb2fef5548374d7ff18e288011596c6c7320c0c0f85f1601b546dcbf67a176e 2969024 linux-signed-arm64_6.1.112+1.tar.xz Files: 3782124371dabeed71d71a2f4910731e 7463 kernel optional linux-signed-arm64_6.1.112+1.dsc 0ec085fa1d58fdfc65592ff68e096537 2969024 kernel optional linux-signed-arm64_6.1.112+1.tar.xz -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEfKFfvHEI+gkU+E+di0FRiLdONzYFAmb77igACgkQi0FRiLdO NzaIdA/9Hu9pG6ACLP/YdKqkF05oamX3HGY5+1nazdb8EkAMm52ewTp/a+F3xwPy AEtY8/TsVfebHGxpwd9zZg6L7/fwbnuHbz2pB/WRbtVGlzw5QwQSrJ3NJz992+q/ f2j+ZbO3+RRNtE5u+kyjcwUa/RodHXb4MsfYVmS5A3VnRnHI8WXTz2+o7lkXze4m +eNdoW9sCG0yt+uhLrNDYvBNqYpA90GSe6vbl+rfY/z/jgql9VNZiJa9TQsg9H2A VMhXk2EqAh9n3KnN7bpt26srK7ozFpy5I5nH9rSCo+aBOyNipGV5cyr7YI1i3VAt SYUz3telWzacvkDVs2D7hfR7uM25Ky5Dc/6B9NjXrXHFcDWI87AWQvkICe3de0a6 VPSwhb2XmMemhb0hA7lowkrbdOxC29cyk+Yv0vxOxr5bg+yPDzTJT9JUh2/OYkX6 fWtC3vP9K5eBkKi40DYeuZHDr/9MbJqjVU602Rnj80lFAQrMseje8Bc5G2X6Mu4J bo5gyeEhyCGYfA8arka3RY3PONc7hhN+KGjh2JLhmemKYSmYR4rEbP4lAaYC3n4r dZ0VsWHGMU4Pxb6jxNRPsympWV2d+vFfbAfLKJbSlL7e3l7ex2AVt1Iy0XYW5weQ 9HLuy9hptX0ha5GzDpxpv5aOtp+g/IdY29yvBSzcwZUUstGjBKA= =UFw4 -----END PGP SIGNATURE-----