https://source.android.com/security/bulletin/2021-09-01
CVE-2021-0695
Merge 4.19.206 into android-4.19-q
Changes in 4.19.206
net: qrtr: fix another OOB Read in qrtr_endpoint_post
bpf: Do not use ax register in interpreter on div/mod
bpf: Fix 32 bit src register truncation on div/mod
bpf: Fix truncation handling for mod32 dst reg wrt zero
ARC: Fix CONFIG_STACKDEPOT
netfilter: conntrack: collect all entries in one cycle
once: Fix panic when module unload
can: usb: esd_usb2: esd_usb2_rx_event(): fix the interchange of the CAN RX and TX error counters
Revert "USB: serial: ch341: fix character loss at high transfer rates"
USB: serial: option: add new VID/PID to support Fibocom FG150
usb: dwc3: gadget: Fix dwc3_calc_trbs_left()
usb: dwc3: gadget: Stop EP0 transfers during pullup disable
IB/hfi1: Fix possible null-pointer dereference in _extend_sdma_tx_descs()
e1000e: Fix the max snoop/no-snoop latency for 10M
ip_gre: add validation for csum_start
xgene-v2: Fix a resource leak in the error handling path of 'xge_probe()'
net: marvell: fix MVNETA_TX_IN_PRGRS bit number
net: hns3: fix get wrong pfc_en when query PFC configuration
usb: gadget: u_audio: fix race condition on endpoint stop
opp: remove WARN when no valid OPPs remain
virtio: Improve vq->broken access to avoid any compiler optimization
virtio_pci: Support surprise removal of virtio pci device
vringh: Use wiov->used to check for read/write desc order
qed: qed ll2 race condition fixes
qed: Fix null-pointer dereference in qed_rdma_create_qp()
drm: Copy drm_wait_vblank to user before returning
drm/nouveau/disp: power down unused DP links during init
net/rds: dma_map_sg is entitled to merge entries
vt_kdsetmode: extend console locking
fbmem: add margin check to fb_check_caps()
KVM: x86/mmu: Treat NX as used (not reserved) for all !TDP shadow MMUs
Revert "floppy: reintroduce O_NDELAY fix"
net: don't unconditionally copy_from_user a struct ifreq for socket ioctls
Linux 4.19.206
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>
Change-Id: I920a12a5532bfe6e3211f14b70b757ae2258c73e
