aboutsummaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAge
...
* dnsmasq: Backport 2 upstream patchesHauke Mehrtens2024-03-20
| | | | | | | These two patches are fixing minor problems with DNSSEC found shortly after the dnsmasq 2.90 release. Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* ath11k-firmware: update IPQ6018 to 2.5.0.1-03982Dirk Buchwalder2024-03-19
| | | | | | | | That new version seems to work more stable including mesh. On version 2.4.0.1-01746 rproc was immediately crashing if mesh was active. Signed-off-by: Dirk Buchwalder <buchwalder@posteo.de>
* kernel: bump 6.1 to 6.1.82John Audia2024-03-19
| | | | | | | | | | | | Changelog: https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.82 All patches automatically rebased. Build system: x86/64 Build-tested: x86/64/AMD Cezanne, ramips/tplink_archer-a6-v3 Run-tested: x86/64/AMD Cezanne, ramips/tplink_archer-a6-v3 Signed-off-by: John Audia <therealgraysky@proton.me>
* kernel: config: add symbol introduced with 6.1.82John Audia2024-03-19
| | | | | | | | Add CONFIG_MITIGATION_RFDS=y to the default config[1] 1. https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/diff/arch/x86/Kconfig?id=v6.1.82&id2=v6.1.81 Signed-off-by: John Audia <therealgraysky@proton.me>
* linux-firmware: Update Intel wifi firmwareHauke Mehrtens2024-03-18
| | | | | | | Update Intel wifi firmware to most recent versions supported by the iwlwifi driver from kernel 6.6. Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* generic: kernel: fix libata ledtrig support in 6.6Pawel Dembicki2024-03-18
| | | | | | | | | | Upstream commit e298d8a38b23 [0] changed method how to blink delays are pased to function. Downstream commit must follow it. [0] https://lore.kernel.org/r/20230510162234.291439-2-hdegoede@redhat.com Reported-by: Mieczyslaw Nalewaj <namiltd@yahoo.com> Signed-off-by: Pawel Dembicki <paweldembicki@gmail.com>
* qualcommax: ipq807x: Fix MAC addresses usage for RAX120v2Paweł Owoc2024-03-18
| | | | | | | | | | | | | | Currently, 6 MAC addresses are read from the "boarddata1" partition and set for network interfaces in sequence. This partition only contains 3 MAC addresses: 1. lan mac 2. wan mac 3. wlan5g mac As result only lan2, lan3 and lan4 have correct (OUI) MAC addresses. lan1, lan5 and wan interfaces get MAC addresses with incorrect OUI from random data on "boarddata1" partition. This commit fix this and use first MAC for lan and second MAC for wan interfaces. Signed-off-by: Paweł Owoc <frut3k7@gmail.com>
* qualcommax: ipq60xx: set PHY mode to psgmii for port 5Chukun Pan2024-03-18
| | | | | | | | The port 5 of most ipq60xx devices is connected to qca8075, a few are connected to qca8081. So assume that the default connection is qca8075 and set the phy mode to psgmii. Signed-off-by: Chukun Pan <amadeus@jmu.edu.cn>
* qualcommax: set phy-mode to sgmii for QCA8081Chukun Pan2024-03-18
| | | | | | | The dp5 node uses psgmii by default, corrected the phy-mode to sgmii for the qca8081 phy. Signed-off-by: Chukun Pan <amadeus@jmu.edu.cn>
* qualcommax: dts: cleanup whitespaceChukun Pan2024-03-18
| | | | | | | Replace blanks with tabs, remove extra blank lines. Also add new lines as appropriate. Signed-off-by: Chukun Pan <amadeus@jmu.edu.cn>
* mt76: update to Git HEAD (2024-03-18)Felix Fietkau2024-03-18
| | | | | | | | | | | | | | | | | | | | a903d3169193 wifi: mt76: mt7921: fix a potential association failure upon resuming eb0d0ce344f3 wifi: mt76: mt7921: fix suspend issue on MediaTek COB platform 841bf82e9958 wifi: mt76: fix the issue of missing txpwr settings from ch153 to ch177 ce7ccc540168 wifi: mt76: Remove redundant assignment to variable tidno a238df940d6f wifi: mt76: mt7915: initialize rssi on adding stations 46c7d1849dbd wifi: mt76: replace skb_put with skb_put_zero b5640b3153c7 wifi: mt76: fix tx packet loss when scanning on DBDC 7b054e5cb3af wifi: mt76: mt7915: fix mcu command format for mt7915 tx stats 3f27a64a8010 wifi: mt76: mt7915: fix bogus Tx/Rx airtime duration values 4f681a8fbc91 wifi: mt76: mt7915: fix HE PHY capabilities IE for station mode 8ede229eb8b5 wifi: mt76: mt7915: only set MT76_MCU_RESET for the main phy 2330781b8c5f wifi: mt76: mt7996: only set MT76_MCU_RESET for the main phy e5fb6995e7eb wifi: mt76: mt7915: add support for disabling in-band discovery b4a917417c85 wifi: mt76: mt7915: add mt7986, mt7916 and mt7981 pre-calibration 2135e201e7a9 mt76: mt7915: add fallback in case of missing precal data Signed-off-by: Felix Fietkau <nbd@nbd.name>
* kernel: modules: package driver for MediaTek T7xx PCIe 5G modemDaniel Golle2024-03-17
| | | | | | | Build and package driver for MediaTek PCIe 5G WWAN modem T7xx device available in Linux 6.1 and 6.6 as kmod-mtk-t7xx. Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* kernel: backport some useful LED_FUNCTION_* defines for DTRafał Miłecki2024-03-17
| | | | Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
* kernel: bump 6.6 to 6.6.22John Audia2024-03-17
| | | | | | | | | | | | Changelog: https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.22 Affected Patch automatically rebased. Build system: x86/64 Build-tested: x86/64/AMD Cezanne, flogic/xiaomi_redmi-router-ax6000-ubootmod, flogic/glinet_gl-mt6000, ramips/tplink_archer-a6-v3 Run-tested: x86/64/AMD Cezanne, flogic/xiaomi_redmi-router-ax6000-ubootmod, flogic/glinet_gl-mt6000, ramips/tplink_archer-a6-v3 Signed-off-by: John Audia <therealgraysky@proton.me>
* kernel: bump 6.6 to 6.6.21John Audia2024-03-17
| | | | | | | | Changelog: https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.21 All patches automatically rebased. Signed-off-by: John Audia <therealgraysky@proton.me>
* mvebu: enable thermal zone polling for IEI Puzzle devicesDaniel Golle2024-03-17
| | | | | | | | | | Marvell's thermal sensors do not support interrupts, so we need to poll them. Reading temperature every second should be enough to control the fan. While at it, also make sure fan speed is reduced again if temperature goes down. Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* uci: fix variable declarationPaul Spooren2024-03-17
| | | | | | | | | Using := doesn't fly well when including other variables. In fact this would cause the variable to be empty and break cloning of the git repo. Fix: "c354c069b3 uci: fix Makefile formatting" Signed-off-by: Paul Spooren <mail@aparcar.org>
* qualcommax: ipq807x: fix LEDs on Buffalo WXR-5950AX12INAGAKI Hiroshi2024-03-17
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | On Buffalo WXR-5590AX12, some LEDs don't have "function" property and only "color" property is available for the newer binding of LED on Linux Kernel. 2e659930d3 ("qualcommax: drop redundant label with new LED color/function format") removes "label" property from LEDs, then, multiple "<color>:" (ex.: "white:"/"red:") will be appeared as LED names and renamed to "<color>:_<num>" ("ex.: "white:_1", "green:_2", ...) by kernel. logs: [ 5.372863] leds-gpio leds: Led white: renamed to white:_1 due to name collision [ 5.375796] leds-gpio leds: Led red: renamed to red:_1 due to name collision /sys/class/leds: root@OpenWrt:/# ls /sys/class/leds/ red: red:power white: white:power red:_1 red:wlan white:_1 white:wlan Fix this issue by adding missing "function" property to LEDs on Buffalo WXR-5950AX12. Note: there are no appropriate functions in dt-bindings/leds/common.h for some LEDs, so use the hardcoded strings for them instead. Fixes: 2e659930d3 ("qualcommax: drop redundant label with new LED color/function format") Signed-off-by: INAGAKI Hiroshi <musashino.open@gmail.com>
* qualcommax: ipq807x: fix LEDs on QNAP QHora-301WINAGAKI Hiroshi2024-03-17
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | On QNAP QHora-301W, all LEDs don't have "function" property and only "color" property is available for the newer binding of LED on Linux Kernel. 2e659930d3 ("qualcommax: drop redundant label with new LED color/function format") removes "label" property from LEDs, then, multiple "<color>:" (ex.: "amber:"/"green:"/"red:") will be appeared as LED names and renamed to "<color>:_<num>" ("ex.: "green:_1", "green:_2", ...) by kernel. logs: [ 4.246494] leds-gpio leds: Led green: renamed to green:_1 due to name collision [ 4.248978] leds-gpio leds: Led green: renamed to green:_2 due to name collision [ 4.256345] leds-gpio leds: Led green: renamed to green:_3 due to name collision [ 4.263770] leds-gpio leds: Led green: renamed to green:_4 due to name collision [ 4.271105] leds-gpio leds: Led amber: renamed to amber:_1 due to name collision [ 4.278487] leds-gpio leds: Led green: renamed to green:_5 due to name collision [ 4.285856] leds-gpio leds: Led amber: renamed to amber:_2 due to name collision [ 4.293257] leds-gpio leds: Led green: renamed to green:_6 due to name collision [ 4.300616] leds-gpio leds: Led amber: renamed to amber:_3 due to name collision [ 4.308002] leds-gpio leds: Led green: renamed to green:_7 due to name collision [ 4.315384] leds-gpio leds: Led amber: renamed to amber:_4 due to name collision [ 4.322760] leds-gpio leds: Led green: renamed to green:_8 due to name collision [ 4.330135] leds-gpio leds: Led amber: renamed to amber:_5 due to name collision /sys/class/leds: amber: amber:_4 green:_2 green:_6 amber:_1 green:_5 green:_3 green:_7 amber:_2 green: green:_4 green:_8 amber:_3 green:_1 green:_5 red: Fix this issue by adding missing "function" (and "function-enumerator") property to LEDs on QNAP QHora-301W. Note: there are no appropriate functions in dt-bindings/leds/common.h for some LEDs, so use the hardcoded strings for them instead. Fixes: 2e659930d3 ("qualcommax: drop redundant label with new LED color/function format") Signed-off-by: INAGAKI Hiroshi <musashino.open@gmail.com>
* archs38: add 6.1 as testing kernelRobert Marko2024-03-17
| | | | | | Allow selecting 6.1 as testing kernel on archs38. Signed-off-by: Robert Marko <robimarko@gmail.com>
* archs38: 6.1: refresh kernel configRobert Marko2024-03-17
| | | | | | Refresh kernel config by running kernel_menuconfig. Signed-off-by: Robert Marko <robimarko@gmail.com>
* kernel/archs38: Restore kernel files for v5.15Robert Marko2024-03-17
| | | | | | This is an automatically generated commit and is needed to outsmart git. Signed-off-by: Robert Marko <robimarko@gmail.com>
* kernel/archs38: Create kernel files for v6.1 (from v5.15)Robert Marko2024-03-17
| | | | | | | | This is an automatically generated commit. During a `git bisect` session, `git bisect --skip` is needed recommended. Signed-off-by: Robert Marko <robimarko@gmail.com>
* kirkwood: add support for Netgear Stora (MS2000/2110) NASZoltan HERPAI2024-03-17
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Dual-slot NAS based on Marvell Kirkwood. Specifications: - Marvell 88F6281 @1GHz - 128Mb RAM - 256Mb NAND - 1x GbE LAN (Marvell 88E1116) - 1x USB 2.0 - 2x SATA - PCF8563 RTC - LM75 sensor - TC654 PWM fan controller - Serial on J2 (115200,8n1) - Newer bootROM so kwboot-ing via serial is possible Installation: 1. Serial console - Connect your levelshifter to the serial console on J2 (refer to the wiki page for pinout) 2. Update u-boot - Download the u-boot.kwb image for the device - Powercycle the NAS - Run "kwboot -b ./u-boot.kwb /dev/ttyUSB0 -p" - Connect to the serial console with minicom - tftp 0x0800000 netgear_stora-u-boot.kwb - nand erase 0x0 100000 - nand write 0x0800000 0x0 0x100000 - reset 3. Install OpenWrt - Boot up the initramfs image - tftpboot 0x800000 openwrt-kirkwood-netgear_stora-initramfs-uImage; bootm 0x800000 - Download the sysupgrade image and perform sysupgrade The fan is controlled in 3 stages by a script running every minute from cron, measuring the CPU temperature. Snippets taken from bodhi <mibodhi@gmail.com> Signed-off-by: Zoltan HERPAI <wigyori@uid0.hu>
* hwmon: add TC654 fan-controller supportZoltan HERPAI2024-03-17
| | | | | | Add support for the Microchip TC654 PWM fan-controller. Signed-off-by: Zoltan HERPAI <wigyori@uid0.hu>
* mac80211: fix a crash triggered by sta disconnect with per-sta VLANsFelix Fietkau2024-03-16
| | | | | Reported-by: ranygh@riseup.net Signed-off-by: Felix Fietkau <nbd@nbd.name>
* kernel: xt_FLOWOFFLOAD: fix use of uninitialized dir variableQingfang Deng2024-03-16
| | | | | | | | The dir variable has been used uninitialized since the port to 5.10, and somehow this remains undetected by GCC. Fixes: b10d6044599d ("kernel: add linux 5.10 support") Signed-off-by: Qingfang Deng <qingfang.deng@siflower.com.cn>
* mediatek: mt7622: simplify 02_networkChukun Pan2024-03-16
| | | | | | | | | Most mt7622 devices use the mt7531 switch, which have been switched to dsa driver for a long time. So use dsa as the default configuration and configure these rtl8367s devices separately. This reduces the amount of code. Signed-off-by: Chukun Pan <amadeus@jmu.edu.cn>
* mediatek: fix build failure of mt7623/mt7629 using kernel 6.6Weijie Gao2024-03-16
| | | | | | | | | | In kernel 6.6, dts files for mediatek arm target are moved into arch/arm/boot/dts/mediatek instead of legacy path arch/arm/boot/dts. To avoid dts compile failure, change DTS_DIR to the mediatek subfolder for kernel 6.6. Signed-off-by: Weijie Gao <hackpascal@gmail.com>
* ds-lite: Add support for IPIP6(RFC2473) tunnelArayuki Mago2024-03-16
| | | | | | | Add Generic Packet Tunneling in IPv6 Specification (RFC 2473) support. Signed-off-by: Arayuki Mago <ms@missing233.com> Signed-off-by: Chuanhong Guo <gch981213@gmail.com>
* mac80211: fix another regression in the broadcast AQL patchFelix Fietkau2024-03-15
| | | | | | | | | | Add a separate bit in struct ieee80211_tx_info to indicate airtime tracked as broadcast/multicast. This avoids a race condition where airtime from stations that were just removed wasn't getting subtracted from the total PHY airtime. Fixes: 95e633efbd1b ("mac80211: add AQL support for broadcast/multicast packets") Signed-off-by: Felix Fietkau <nbd@nbd.name>
* generic: 6.6: backport support for SDX75-based MHI 5G modemsDaniel Golle2024-03-15
| | | | | | | Also backport most recent MHI modem additions to Linux 6.6. Adds support for generic SDX75-based modems. Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* generic: 6.1: backport support for various MHI 5G modemsDaniel Golle2024-03-15
| | | | | | | | | | | | | | * Dell DW5932e * Foxconn T99W175 (HP variant) * Foxconn T99W510 * Generic SDX75-based * Quectel EM160R-GL (newer variants) * Quectel RM520 * Quectel RM520N-GL (Lenovo variant) * SC8280XP Compute Reference Design * Telit FE990 Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* kernel: modules: video: select drm-exec and drm-suballoc-helper for AMDGPURobert Marko2024-03-15
| | | | | | | | drm-amdgpu and drm-radeon require drm-exec and/or drm-suballoc-helper in 6.6, so since we have them packaged separately include them when required. Fixes: 5b08b5600720 ("kernel: modules: video: adapt for kernel 6.6") Signed-off-by: Robert Marko <robimarko@gmail.com>
* kernel: modules: video: package DRM suballocation helperRobert Marko2024-03-15
| | | | | | | | | | Linux 6.4 has split out the previously AMDGPU specific suballocation helper into a generic one and it has its own symbol now. So, lets package it as a separate helper as AMDGPU still requires it for 6.6. Signed-off-by: Robert Marko <robimarko@gmail.com>
* kernel: modules: video: package DRM EXECRobert Marko2024-03-15
| | | | | | | Linux 6.6 has added DRM EXEC as a separate symbol, so package it separately as AMDGPU requires it. Signed-off-by: Robert Marko <robimarko@gmail.com>
* kernel: modules: video: drm: remove DRM_EXEC and DRM_SUBALLOC_HELPERRobert Marko2024-03-15
| | | | | | | | | | | | | As part of adding kernel 6.6 support, DRM_EXEC and DRM_SUBALLOC_HELPER were added to the kmod-drm, however these are only used by drm-amdgpu and drm-radeon which are only supported on x86. So, lets start fixing building of other targets by removing these from the main kmod-drm, in follow-up commits they will be packaged separately and selected when required. Fixes: 5b08b5600720 ("kernel: modules: video: adapt for kernel 6.6") Signed-off-by: Robert Marko <robimarko@gmail.com>
* ath11k-firmware: update IPQ8074 and QCN9074 to 2.9.0.1-01977Robert Marko2024-03-15
| | | | | | | | | After a long time QCA has pushed an updated release of 2.9.0.1 firmware for IPQ8074 and QCN9074, so lets update to 2.9.0.1-01977. Sadly, still nothing new for IPQ6018. Signed-off-by: Robert Marko <robimarko@gmail.com>
* mediatek: mt7988: add missing clock for PCIe portsDaniel Golle2024-03-15
| | | | | | | Add missing CLK_TOP_PEXTP_Px_SEL clock for each of the 4 PCIe interfaces of the MT7988 SoC. Without that clock PCIe doesn't work reliable. Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* qualcommax: ipq60xx: mango-dvk: fix QCA8081 reset timingsMantas Pucka2024-03-15
| | | | | | | Add missing reset delay properties for QCA8081 PHY. Without delays PHY operation is unreliable. Signed-off-by: Mantas Pucka <mantas@8devices.com>
* kernel: Activate CONFIG_NET_VENDOR_DAVICOMHauke Mehrtens2024-03-14
| | | | | | | | CONFIG_NET_VENDOR_DAVICOM is needed to activate the CONFIG_DM9000 option which builds the kmod-dm9000. This fixes the following warning: logs/package/kernel/linux/compile.txt:WARNING: kmod-dm9000 is not available in the kernel config - generating empty package Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* kernel: kmod-hwmon-coretemp: Depend on x86Hauke Mehrtens2024-03-14
| | | | | | This kernel module depends on x86, it works only on some Intel CPUs. Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* kernel: kmod-video-cpia2: Depend on kernel 5.15Hauke Mehrtens2024-03-14
| | | | | | | | | | | This driver was moved to staging in kernel 6.1 and then removed in kernel 6.3, see these commits: https://git.kernel.org/linus/be8cebc46d9d38166a1b3fda22a018ae52b0928e https://git.kernel.org/linus/9ea8a9c72a9b4d24e6045ee25f5e465dc22f9f55 Build it only on older kernel versions. Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* kernel: kmod-can: Fix build of can driversHauke Mehrtens2024-03-14
| | | | | | | | | | | | | | | | | | | | | Many can kernel modules are now gated by the newly introduced CONFIG_CAN_NETLINK configuration option. Activate it to build the can drivers again. This was changed in this upstream Linux commit: https://git.kernel.org/linus/df6ad5dd838e0fa543ca28ca6154901fa65a9443 This should fix these warnings with kernel 6.1 and 6.6: logs/package/kernel/linux/compile.txt:WARNING: kmod-can-c-can is not available in the kernel config - generating empty package logs/package/kernel/linux/compile.txt:WARNING: kmod-can-c-can-pci is not available in the kernel config - generating empty package logs/package/kernel/linux/compile.txt:WARNING: kmod-can-c-can-platform is not available in the kernel config - generating empty package logs/package/kernel/linux/compile.txt:WARNING: kmod-can-mcp251x is not available in the kernel config - generating empty package logs/package/kernel/linux/compile.txt:WARNING: kmod-can-slcan is not available in the kernel config - generating empty package logs/package/kernel/linux/compile.txt:WARNING: kmod-can-usb-8dev is not available in the kernel config - generating empty package logs/package/kernel/linux/compile.txt:WARNING: kmod-can-usb-ems is not available in the kernel config - generating empty package logs/package/kernel/linux/compile.txt:WARNING: kmod-can-usb-kvaser is not available in the kernel config - generating empty package logs/package/kernel/linux/compile.txt:WARNING: kmod-can-usb-peak is not available in the kernel config - generating empty package Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* kernel: kmod-can-flexcan: Fix flexcan.ko locationHauke Mehrtens2024-03-14
| | | | | | | | | The flexcan.ko file was moved in upstream Linux: https://git.kernel.org/linus/bfd00e021cf162049946a9e0047b0997d2b35fec This fixes the build with kernel >= 5.17. This module was never build with kernel 6.1 before. Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* kernel: kmod-can-slcan: Fix can-slcan.ko locationHauke Mehrtens2024-03-14
| | | | | | | | | The slcan.ko file was moved in upstream Linux: https://git.kernel.org/linus/98b12064591d635db86da4957b547067dc6897cc This fixes the build with kernel >= 6.0. This module was never build with kernel 6.1 before. Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* kernel: kmod-crypto-gf128: Fix build with kernel 6.6Hauke Mehrtens2024-03-14
| | | | | | | The gf128mul.ko module was moved in kernel 6.2: https://git.kernel.org/linus/61c581a46a9668747d355436bd4b2505594539bd Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* kernel: kmod-crypto-user: Add missing dependencyHauke Mehrtens2024-03-14
| | | | | | | The algif_rng.ko kernel module depends on the rng.ko kernel module with kernel 6.6 when compiling for MIPS malta. Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* firmware: intel-microcode: update to 20240312Christian Lamparter2024-03-14
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Debian changelog: intel-microcode (3.20240312.1) unstable; urgency=medium * New upstream microcode datafile 20240312 (closes: #1066108) - Mitigations for INTEL-SA-INTEL-SA-00972 (CVE-2023-39368): Protection mechanism failure of bus lock regulator for some Intel Processors may allow an unauthenticated user to potentially enable denial of service via network access. - Mitigations for INTEL-SA-INTEL-SA-00982 (CVE-2023-38575): Non-transparent sharing of return predictor targets between contexts in some Intel Processors may allow an authorized user to potentially enable information disclosure via local access. Affects SGX as well. - Mitigations for INTEL-SA-INTEL-SA-00898 (CVE-2023-28746), aka RFDS: Information exposure through microarchitectural state after transient execution from some register files for some Intel Atom Processors and E-cores of Intel Core Processors may allow an authenticated user to potentially enable information disclosure via local access. Enhances VERW instruction to clear stale register buffers. Affects SGX as well. Requires kernel update to be effective. - Mitigations for INTEL-SA-INTEL-SA-00960 (CVE-2023-22655), aka TECRA: Protection mechanism failure in some 3rd and 4th Generation Intel Xeon Processors when using Intel SGX or Intel TDX may allow a privileged user to potentially enable escalation of privilege via local access. NOTE: effective only when loaded by firmware. Allows SMM firmware to attack SGX/TDX. - Mitigations for INTEL-SA-INTEL-SA-01045 (CVE-2023-43490): Incorrect calculation in microcode keying mechanism for some Intel Xeon D Processors with Intel SGX may allow a privileged user to potentially enable information disclosure via local access. * Fixes for other unspecified functional issues on many processors * Updated microcodes: sig 0x00050653, pf_mask 0x97, 2023-07-28, rev 0x1000191, size 36864 sig 0x00050656, pf_mask 0xbf, 2023-07-28, rev 0x4003605, size 38912 sig 0x00050657, pf_mask 0xbf, 2023-07-28, rev 0x5003605, size 37888 sig 0x0005065b, pf_mask 0xbf, 2023-08-03, rev 0x7002802, size 30720 sig 0x00050665, pf_mask 0x10, 2023-08-03, rev 0xe000015, size 23552 sig 0x000506f1, pf_mask 0x01, 2023-10-05, rev 0x003e, size 11264 sig 0x000606a6, pf_mask 0x87, 2023-09-14, rev 0xd0003d1, size 307200 sig 0x000606c1, pf_mask 0x10, 2023-12-05, rev 0x1000290, size 299008 sig 0x000706a1, pf_mask 0x01, 2023-08-25, rev 0x0040, size 76800 sig 0x000706a8, pf_mask 0x01, 2023-08-25, rev 0x0024, size 76800 sig 0x000706e5, pf_mask 0x80, 2023-09-14, rev 0x00c4, size 114688 sig 0x000806c1, pf_mask 0x80, 2023-09-13, rev 0x00b6, size 111616 sig 0x000806c2, pf_mask 0xc2, 2023-09-13, rev 0x0036, size 98304 sig 0x000806d1, pf_mask 0xc2, 2023-09-13, rev 0x0050, size 104448 sig 0x000806ec, pf_mask 0x94, 2023-07-16, rev 0x00fa, size 106496 sig 0x000806f8, pf_mask 0x87, 2024-01-03, rev 0x2b000590, size 579584 sig 0x000806f7, pf_mask 0x87, 2024-01-03, rev 0x2b000590 sig 0x000806f6, pf_mask 0x87, 2024-01-03, rev 0x2b000590 sig 0x000806f5, pf_mask 0x87, 2024-01-03, rev 0x2b000590 sig 0x000806f4, pf_mask 0x87, 2024-01-03, rev 0x2b000590 sig 0x00090661, pf_mask 0x01, 2023-09-26, rev 0x0019, size 20480 sig 0x00090672, pf_mask 0x07, 2023-09-19, rev 0x0034, size 224256 sig 0x00090675, pf_mask 0x07, 2023-09-19, rev 0x0034 sig 0x000b06f2, pf_mask 0x07, 2023-09-19, rev 0x0034 sig 0x000b06f5, pf_mask 0x07, 2023-09-19, rev 0x0034 sig 0x000906a3, pf_mask 0x80, 2023-09-19, rev 0x0432, size 222208 sig 0x000906a4, pf_mask 0x80, 2023-09-19, rev 0x0432 sig 0x000906c0, pf_mask 0x01, 2023-09-26, rev 0x24000026, size 20480 sig 0x000906e9, pf_mask 0x2a, 2023-09-28, rev 0x00f8, size 108544 sig 0x000906ea, pf_mask 0x22, 2023-07-26, rev 0x00f6, size 105472 sig 0x000906ec, pf_mask 0x22, 2023-07-26, rev 0x00f6, size 106496 sig 0x000906ed, pf_mask 0x22, 2023-07-27, rev 0x00fc, size 106496 sig 0x000a0652, pf_mask 0x20, 2023-07-16, rev 0x00fa, size 97280 sig 0x000a0653, pf_mask 0x22, 2023-07-16, rev 0x00fa, size 97280 sig 0x000a0655, pf_mask 0x22, 2023-07-16, rev 0x00fa, size 97280 sig 0x000a0660, pf_mask 0x80, 2023-07-16, rev 0x00fa, size 97280 sig 0x000a0661, pf_mask 0x80, 2023-07-16, rev 0x00fa, size 96256 sig 0x000a0671, pf_mask 0x02, 2023-09-14, rev 0x005e, size 108544 sig 0x000b0671, pf_mask 0x32, 2023-12-14, rev 0x0122, size 215040 sig 0x000b06a2, pf_mask 0xe0, 2023-12-07, rev 0x4121, size 220160 sig 0x000b06a3, pf_mask 0xe0, 2023-12-07, rev 0x4121 sig 0x000b06e0, pf_mask 0x11, 2023-09-25, rev 0x0015, size 138240 * New microcodes: sig 0x000a06a4, pf_mask 0xe6, 2024-01-03, rev 0x001c, size 136192 sig 0x000b06a8, pf_mask 0xe0, 2023-12-07, rev 0x4121, size 220160 sig 0x000c06f2, pf_mask 0x87, 2023-11-20, rev 0x21000200, size 549888 sig 0x000c06f1, pf_mask 0x87, 2023-11-20, rev 0x21000200 * source: update symlinks to reflect id of the latest release, 20240312 * changelog, debian/changelog: fix typos -- Henrique de Moraes Holschuh <hmh@debian.org> Tue, 12 Mar 2024 20:28:17 -0300 Signed-off-by: Christian Lamparter <chunkeey@gmail.com>
* mxs: switch default kernel to 6.1Zoltan HERPAI2024-03-14
| | | | | | | The testing kernel has been available since Jul/2023, let's switch to it by default. Signed-off-by: Zoltan HERPAI <wigyori@uid0.hu>
Powered by cgit, Themed by Ted Yin.