Public bug reported:
SRU Justification Impact: The upstream process for stable tree updates is quite similar in scope to the Ubuntu SRU process, e.g., each patch has to demonstrably fix a bug, and each patch is vetted by upstream by originating either directly from a mainline/stable Linux tree or a minimally backported form of that patch. The following upstream stable patches should be included in the Ubuntu kernel: v5.4.273 upstream stable release from git://git.kernel.org/ io_uring/unix: drop usage of io_uring socket io_uring: drop any code related to SCM_RIGHTS selftests: tls: use exact comparison in recv_partial ASoC: rt5645: Make LattePanda board DMI match more precise x86/xen: Add some null pointer checking to smp.c MIPS: Clear Cause.BD in instruction_pointer_set HID: multitouch: Add required quirk for Synaptics 0xcddc device RDMA/mlx5: Relax DEVX access upon modify commands net/iucv: fix the allocation size of iucv_path_table array parisc/ftrace: add missing CONFIG_DYNAMIC_FTRACE check block: sed-opal: handle empty atoms when parsing response dm-verity, dm-crypt: align "struct bvec_iter" correctly btrfs: fix data race at btrfs_use_block_rsv() when accessing block reserve scsi: mpt3sas: Prevent sending diag_reset when the controller is ready Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security firewire: core: use long bus reset on gap count error ASoC: Intel: bytcr_rt5640: Add an extra entry for the Chuwi Vi8 tablet Input: gpio_keys_polled - suppress deferred probe error for gpio ASoC: wm8962: Enable oscillator if selecting WM8962_FLL_OSC ASoC: wm8962: Enable both SPKOUTR_ENA and SPKOUTL_ENA in mono mode ASoC: wm8962: Fix up incorrect error message in wm8962_set_fll do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak fs/select: rework stack allocation hack for clang aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts timekeeping: Fix cross-timestamp interpolation on counter wrap timekeeping: Fix cross-timestamp interpolation corner case decision timekeeping: Fix cross-timestamp interpolation for non-x86 wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev() b43: dma: Fix use true/false for bool type variable wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled wifi: b43: Stop/wake correct queue in PIO Tx path when QoS is disabled b43: main: Fix use true/false for bool type wifi: b43: Stop correct queue in DMA worker when QoS is disabled wifi: b43: Disable QoS for bcm4331 wifi: wilc1000: fix declarations ordering wifi: wilc1000: fix RCU usage in connect path wifi: mwifiex: debugfs: Drop unnecessary error check for debugfs_create_dir() sock_diag: annotate data-races around sock_diag_handlers[family] af_unix: Annotate data-race of gc_in_progress in wait_for_unix_gc(). net: blackhole_dev: fix build warning for ethh set but not used wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer() arm64: dts: mediatek: mt7622: add missing "device_type" to memory nodes bpf: Add typecast to bpf helpers to help BTF generation bpf: Factor out bpf_spin_lock into helpers. bpf: Mark bpf_spin_{lock,unlock}() helpers with notrace correctly arm64: dts: qcom: db820c: Move non-soc entries out of /soc arm64: dts: qcom: msm8996: Use node references in db820c arm64: dts: qcom: msm8996: Move regulator consumers to db820c arm64: dts: qcom: msm8996: Pad addresses ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit() bus: tegra-aconnect: Update dependency to ARCH_TEGRA UBUNTU: [Config]: Update tegra configs iommu/amd: Mark interrupt as managed wifi: brcmsmac: avoid function pointer casts net: ena: Remove ena_select_queue ARM: dts: arm: realview: Fix development chip ROM compatible value ARM: dts: imx6dl-yapp4: Move phy reset into switch node ARM: dts: imx6dl-yapp4: Fix typo in the QCA switch register address ARM: dts: imx6dl-yapp4: Move the internal switch PHYs under the switch node ACPI: scan: Fix device check notification handling x86, relocs: Ignore relocations in .notes section SUNRPC: fix some memleaks in gssx_dec_option_array mmc: wmt-sdmmc: remove an incorrect release_mem_region() call in the .remove function igb: move PEROUT and EXTTS isr logic to separate functions igb: Fix missing time sync events Bluetooth: Remove superfluous call to hci_conn_check_pending() Bluetooth: hci_core: Fix possible buffer overflow sr9800: Add check for usbnet_get_endpoints bpf: Fix hashtab overflow check on 32-bit arches bpf: Fix stackmap overflow check on 32-bit arches ipv6: fib6_rules: flush route cache when rule is changed net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv() net: hns3: fix port duplex configure error in IMP reset tcp: fix incorrect parameter validation in the do_tcp_getsockopt() function l2tp: fix incorrect parameter validation in the pppol2tp_getsockopt() function udp: fix incorrect parameter validation in the udp_lib_getsockopt() function net: kcm: fix incorrect parameter validation in the kcm_getsockopt) function net/x25: fix incorrect parameter validation in the x25_getsockopt() function nfp: flower: handle acti_netdevs allocation failure dm raid: fix false positive for requeue needed during reshape dm: call the resume method on internal suspend drm/tegra: dsi: Add missing check for of_find_device_by_node gpu: host1x: mipi: Update tegra_mipi_request() to be node based drm/tegra: dsi: Make use of the helper function dev_err_probe() drm/tegra: dsi: Fix some error handling paths in tegra_dsi_probe() drm/tegra: dsi: Fix missing pm_runtime_disable() in the error handling path of tegra_dsi_probe() drm/tegra: output: Fix missing i2c_put_adapter() in the error handling paths of tegra_output_probe() drm/rockchip: inno_hdmi: Fix video timing drm: Don't treat 0 as -1 in drm_fixp2int_ceil drm/rockchip: lvds: do not overwrite error code dmaengine: tegra210-adma: Update dependency to ARCH_TEGRA media: tc358743: register v4l2 async device only after successful setup PCI/DPC: Print all TLP Prefixes, not just the first perf record: Fix possible incorrect free in record__switch_output() drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()' perf evsel: Fix duplicate initialization of data->id in evsel__parse_sample() media: em28xx: annotate unchecked call to media_device_register() media: v4l2-tpg: fix some memleaks in tpg_alloc media: v4l2-mem2mem: fix a memleak in v4l2_m2m_register_entity media: edia: dvbdev: fix a use-after-free clk: qcom: reset: Allow specifying custom reset delay clk: qcom: reset: support resetting multiple bits clk: qcom: reset: Commonize the de/assert functions clk: qcom: reset: Ensure write completion on reset de/assertion quota: simplify drop_dquot_ref() quota: Fix potential NULL pointer dereference quota: Fix rcu annotations of inode dquot pointers PCI: switchtec: Fix an error handling path in switchtec_pci_probe() perf thread_map: Free strlist on normal path in thread_map__new_by_tid_str() drm/radeon/ni: Fix wrong firmware size logging in ni_init_microcode() ALSA: seq: fix function cast warnings perf stat: Avoid metric-only segv media: imx: csc/scaler: fix v4l2_ctrl_handler memory leak media: go7007: add check of return value of go7007_read_addr() media: pvrusb2: remove redundant NULL check media: pvrusb2: fix pvr2_stream_callback casts clk: qcom: dispcc-sdm845: Adjust internal GDSC wait times drm/mediatek: dsi: Fix DSI RGB666 formats and definitions PCI: Mark 3ware-9650SE Root Port Extended Tags as broken clk: hisilicon: hi3519: Release the correct number of gates in hi3519_clk_unregister() drm/tegra: put drm_gem_object ref on error in tegra_fb_create mfd: syscon: Call of_node_put() only when of_parse_phandle() takes a ref mfd: altera-sysmgr: Call of_node_put() only when of_parse_phandle() takes a ref crypto: arm/sha - fix function cast warnings mtd: maps: physmap-core: fix flash size larger than 32-bit mtd: rawnand: lpc32xx_mlc: fix irq handler prototype ASoC: meson: axg-tdm-interface: fix mclk setup without mclk-fs drm/amdgpu: Fix missing break in ATOM_ARG_IMM Case of atom_get_src_int() media: pvrusb2: fix uaf in pvr2_context_set_notify media: dvb-frontends: avoid stack overflow warnings with clang media: go7007: fix a memleak in go7007_load_encoder media: v4l2-core: correctly validate video and metadata ioctls media: rename VFL_TYPE_GRABBER to _VIDEO media: media/pci: rename VFL_TYPE_GRABBER to _VIDEO media: ttpci: fix two memleaks in budget_av_attach drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip powerpc/hv-gpci: Fix the H_GET_PERF_COUNTER_INFO hcall return value checks drm/msm/dpu: add division of drm_display_mode's hskew parameter powerpc/embedded6xx: Fix no previous prototype for avr_uart_send() etc. backlight: lm3630a: Initialize backlight_properties on init backlight: lm3630a: Don't set bl->props.brightness in get_brightness backlight: da9052: Fully initialize backlight_properties during probe backlight: lm3639: Fully initialize backlight_properties during probe backlight: lp8788: Fully initialize backlight_properties during probe sparc32: Fix section mismatch in leon_pci_grpci clk: Fix clk_core_get NULL dereference ALSA: usb-audio: Stop parsing channels bits when all channels are found. scsi: csiostor: Avoid function pointer casts RDMA/device: Fix a race between mad_client and cm_client init scsi: bfa: Fix function pointer type mismatch for hcb_qe->cbfn net: sunrpc: Fix an off by one in rpc_sockaddr2uaddr() watchdog: stm32_iwdg: initialize default timeout NFS: Fix an off by one in root_nfs_cat() afs: Revert "afs: Hide silly-rename files from userspace" tty: vt: fix 20 vs 0x20 typo in EScsiignore serial: max310x: fix syntax error in IRQ error message tty: serial: samsung: fix tx_empty() to return TIOCSER_TEMT kconfig: fix infinite loop when expanding a macro at the end of file rtc: mt6397: select IRQ_DOMAIN instead of depending on it serial: 8250_exar: Don't remove GPIO device on suspend staging: greybus: fix get_channel_from_mode() failure path usb: gadget: net2272: Use irqflags in the call to net2272_probe_fin octeontx2-af: Use matching wake_up API variant in CGX command interface s390/vtime: fix average steal time calculation hsr: Fix uninit-value access in hsr_get_node() packet: annotate data-races around ignore_outgoing rds: introduce acquire/release ordering in acquire/release_in_xmit() hsr: Handle failures in module init net/bnx2x: Prevent access to a freed page in page_pool octeontx2-af: Use separate handlers for interrupts ARM: dts: sun8i-h2-plus-bananapi-m2-zero: add regulator nodes vcc-dram and vcc1v2 netfilter: nf_tables: do not compare internal table flags on updates rcu: add a helper to report consolidated flavor QS bpf: report RCU QS in cpumap kthread spi: spi-mt65xx: Fix NULL pointer access in interrupt handler regmap: Add missing map->bus check Linux 5.4.273 UBUNTU: Upstream stable to v5.4.273 ** Affects: linux (Ubuntu) Importance: Undecided Status: Invalid ** Affects: linux (Ubuntu Focal) Importance: Medium Assignee: Portia Stephens (portias) Status: In Progress ** Tags: kernel-stable-tracking-bug ** Changed in: linux (Ubuntu) Status: New => Confirmed ** Tags added: kernel-stable-tracking-bug ** Also affects: linux (Ubuntu Focal) Importance: Undecided Status: New ** Changed in: linux (Ubuntu) Status: Confirmed => Invalid ** Changed in: linux (Ubuntu Focal) Importance: Undecided => Medium ** Changed in: linux (Ubuntu Focal) Status: New => In Progress ** Changed in: linux (Ubuntu Focal) Assignee: (unassigned) => Portia Stephens (portias) ** Description changed: SRU Justification Impact: The upstream process for stable tree updates is quite similar in scope to the Ubuntu SRU process, e.g., each patch has to demonstrably fix a bug, and each patch is vetted by upstream by originating either directly from a mainline/stable Linux tree or a minimally backported form of that patch. The following upstream stable patches should be included in the Ubuntu kernel: v5.4.273 upstream stable release from git://git.kernel.org/ - + io_uring/unix: drop usage of io_uring socket + io_uring: drop any code related to SCM_RIGHTS + selftests: tls: use exact comparison in recv_partial + ASoC: rt5645: Make LattePanda board DMI match more precise + x86/xen: Add some null pointer checking to smp.c + MIPS: Clear Cause.BD in instruction_pointer_set + HID: multitouch: Add required quirk for Synaptics 0xcddc device + RDMA/mlx5: Relax DEVX access upon modify commands + net/iucv: fix the allocation size of iucv_path_table array + parisc/ftrace: add missing CONFIG_DYNAMIC_FTRACE check + block: sed-opal: handle empty atoms when parsing response + dm-verity, dm-crypt: align "struct bvec_iter" correctly + btrfs: fix data race at btrfs_use_block_rsv() when accessing block reserve + scsi: mpt3sas: Prevent sending diag_reset when the controller is ready + Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security + firewire: core: use long bus reset on gap count error + ASoC: Intel: bytcr_rt5640: Add an extra entry for the Chuwi Vi8 tablet + Input: gpio_keys_polled - suppress deferred probe error for gpio + ASoC: wm8962: Enable oscillator if selecting WM8962_FLL_OSC + ASoC: wm8962: Enable both SPKOUTR_ENA and SPKOUTL_ENA in mono mode + ASoC: wm8962: Fix up incorrect error message in wm8962_set_fll + do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak + fs/select: rework stack allocation hack for clang + aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts + timekeeping: Fix cross-timestamp interpolation on counter wrap + timekeeping: Fix cross-timestamp interpolation corner case decision + timekeeping: Fix cross-timestamp interpolation for non-x86 + wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev() + b43: dma: Fix use true/false for bool type variable + wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled + wifi: b43: Stop/wake correct queue in PIO Tx path when QoS is disabled + b43: main: Fix use true/false for bool type + wifi: b43: Stop correct queue in DMA worker when QoS is disabled + wifi: b43: Disable QoS for bcm4331 + wifi: wilc1000: fix declarations ordering + wifi: wilc1000: fix RCU usage in connect path + wifi: mwifiex: debugfs: Drop unnecessary error check for debugfs_create_dir() + sock_diag: annotate data-races around sock_diag_handlers[family] + af_unix: Annotate data-race of gc_in_progress in wait_for_unix_gc(). + net: blackhole_dev: fix build warning for ethh set but not used + wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer() + arm64: dts: mediatek: mt7622: add missing "device_type" to memory nodes + bpf: Add typecast to bpf helpers to help BTF generation + bpf: Factor out bpf_spin_lock into helpers. + bpf: Mark bpf_spin_{lock,unlock}() helpers with notrace correctly + arm64: dts: qcom: db820c: Move non-soc entries out of /soc + arm64: dts: qcom: msm8996: Use node references in db820c + arm64: dts: qcom: msm8996: Move regulator consumers to db820c + arm64: dts: qcom: msm8996: Pad addresses + ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit() + bus: tegra-aconnect: Update dependency to ARCH_TEGRA + UBUNTU: [Config]: Update tegra configs + iommu/amd: Mark interrupt as managed + wifi: brcmsmac: avoid function pointer casts + net: ena: Remove ena_select_queue + ARM: dts: arm: realview: Fix development chip ROM compatible value + ARM: dts: imx6dl-yapp4: Move phy reset into switch node + ARM: dts: imx6dl-yapp4: Fix typo in the QCA switch register address + ARM: dts: imx6dl-yapp4: Move the internal switch PHYs under the switch node + ACPI: scan: Fix device check notification handling + x86, relocs: Ignore relocations in .notes section + SUNRPC: fix some memleaks in gssx_dec_option_array + mmc: wmt-sdmmc: remove an incorrect release_mem_region() call in the .remove function + igb: move PEROUT and EXTTS isr logic to separate functions + igb: Fix missing time sync events + Bluetooth: Remove superfluous call to hci_conn_check_pending() + Bluetooth: hci_core: Fix possible buffer overflow + sr9800: Add check for usbnet_get_endpoints + bpf: Fix hashtab overflow check on 32-bit arches + bpf: Fix stackmap overflow check on 32-bit arches + ipv6: fib6_rules: flush route cache when rule is changed + net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv() + net: hns3: fix port duplex configure error in IMP reset + tcp: fix incorrect parameter validation in the do_tcp_getsockopt() function + l2tp: fix incorrect parameter validation in the pppol2tp_getsockopt() function + udp: fix incorrect parameter validation in the udp_lib_getsockopt() function + net: kcm: fix incorrect parameter validation in the kcm_getsockopt) function + net/x25: fix incorrect parameter validation in the x25_getsockopt() function + nfp: flower: handle acti_netdevs allocation failure + dm raid: fix false positive for requeue needed during reshape + dm: call the resume method on internal suspend + drm/tegra: dsi: Add missing check for of_find_device_by_node + gpu: host1x: mipi: Update tegra_mipi_request() to be node based + drm/tegra: dsi: Make use of the helper function dev_err_probe() + drm/tegra: dsi: Fix some error handling paths in tegra_dsi_probe() + drm/tegra: dsi: Fix missing pm_runtime_disable() in the error handling path of tegra_dsi_probe() + drm/tegra: output: Fix missing i2c_put_adapter() in the error handling paths of tegra_output_probe() + drm/rockchip: inno_hdmi: Fix video timing + drm: Don't treat 0 as -1 in drm_fixp2int_ceil + drm/rockchip: lvds: do not overwrite error code + dmaengine: tegra210-adma: Update dependency to ARCH_TEGRA + media: tc358743: register v4l2 async device only after successful setup + PCI/DPC: Print all TLP Prefixes, not just the first + perf record: Fix possible incorrect free in record__switch_output() + drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()' + perf evsel: Fix duplicate initialization of data->id in evsel__parse_sample() + media: em28xx: annotate unchecked call to media_device_register() + media: v4l2-tpg: fix some memleaks in tpg_alloc + media: v4l2-mem2mem: fix a memleak in v4l2_m2m_register_entity + media: edia: dvbdev: fix a use-after-free + clk: qcom: reset: Allow specifying custom reset delay + clk: qcom: reset: support resetting multiple bits + clk: qcom: reset: Commonize the de/assert functions + clk: qcom: reset: Ensure write completion on reset de/assertion + quota: simplify drop_dquot_ref() + quota: Fix potential NULL pointer dereference + quota: Fix rcu annotations of inode dquot pointers + PCI: switchtec: Fix an error handling path in switchtec_pci_probe() + perf thread_map: Free strlist on normal path in thread_map__new_by_tid_str() + drm/radeon/ni: Fix wrong firmware size logging in ni_init_microcode() + ALSA: seq: fix function cast warnings + perf stat: Avoid metric-only segv + media: imx: csc/scaler: fix v4l2_ctrl_handler memory leak + media: go7007: add check of return value of go7007_read_addr() + media: pvrusb2: remove redundant NULL check + media: pvrusb2: fix pvr2_stream_callback casts + clk: qcom: dispcc-sdm845: Adjust internal GDSC wait times + drm/mediatek: dsi: Fix DSI RGB666 formats and definitions + PCI: Mark 3ware-9650SE Root Port Extended Tags as broken + clk: hisilicon: hi3519: Release the correct number of gates in hi3519_clk_unregister() + drm/tegra: put drm_gem_object ref on error in tegra_fb_create + mfd: syscon: Call of_node_put() only when of_parse_phandle() takes a ref + mfd: altera-sysmgr: Call of_node_put() only when of_parse_phandle() takes a ref + crypto: arm/sha - fix function cast warnings + mtd: maps: physmap-core: fix flash size larger than 32-bit + mtd: rawnand: lpc32xx_mlc: fix irq handler prototype + ASoC: meson: axg-tdm-interface: fix mclk setup without mclk-fs + drm/amdgpu: Fix missing break in ATOM_ARG_IMM Case of atom_get_src_int() + media: pvrusb2: fix uaf in pvr2_context_set_notify + media: dvb-frontends: avoid stack overflow warnings with clang + media: go7007: fix a memleak in go7007_load_encoder + media: v4l2-core: correctly validate video and metadata ioctls + media: rename VFL_TYPE_GRABBER to _VIDEO + media: media/pci: rename VFL_TYPE_GRABBER to _VIDEO + media: ttpci: fix two memleaks in budget_av_attach + drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip + powerpc/hv-gpci: Fix the H_GET_PERF_COUNTER_INFO hcall return value checks + drm/msm/dpu: add division of drm_display_mode's hskew parameter + powerpc/embedded6xx: Fix no previous prototype for avr_uart_send() etc. + backlight: lm3630a: Initialize backlight_properties on init + backlight: lm3630a: Don't set bl->props.brightness in get_brightness + backlight: da9052: Fully initialize backlight_properties during probe + backlight: lm3639: Fully initialize backlight_properties during probe + backlight: lp8788: Fully initialize backlight_properties during probe + sparc32: Fix section mismatch in leon_pci_grpci + clk: Fix clk_core_get NULL dereference + ALSA: usb-audio: Stop parsing channels bits when all channels are found. + scsi: csiostor: Avoid function pointer casts + RDMA/device: Fix a race between mad_client and cm_client init + scsi: bfa: Fix function pointer type mismatch for hcb_qe->cbfn + net: sunrpc: Fix an off by one in rpc_sockaddr2uaddr() + watchdog: stm32_iwdg: initialize default timeout + NFS: Fix an off by one in root_nfs_cat() + afs: Revert "afs: Hide silly-rename files from userspace" + tty: vt: fix 20 vs 0x20 typo in EScsiignore + serial: max310x: fix syntax error in IRQ error message + tty: serial: samsung: fix tx_empty() to return TIOCSER_TEMT + kconfig: fix infinite loop when expanding a macro at the end of file + rtc: mt6397: select IRQ_DOMAIN instead of depending on it + serial: 8250_exar: Don't remove GPIO device on suspend + staging: greybus: fix get_channel_from_mode() failure path + usb: gadget: net2272: Use irqflags in the call to net2272_probe_fin + octeontx2-af: Use matching wake_up API variant in CGX command interface + s390/vtime: fix average steal time calculation + hsr: Fix uninit-value access in hsr_get_node() + packet: annotate data-races around ignore_outgoing + rds: introduce acquire/release ordering in acquire/release_in_xmit() + hsr: Handle failures in module init + net/bnx2x: Prevent access to a freed page in page_pool + octeontx2-af: Use separate handlers for interrupts + ARM: dts: sun8i-h2-plus-bananapi-m2-zero: add regulator nodes vcc-dram and vcc1v2 + netfilter: nf_tables: do not compare internal table flags on updates + rcu: add a helper to report consolidated flavor QS + bpf: report RCU QS in cpumap kthread + spi: spi-mt65xx: Fix NULL pointer access in interrupt handler + regmap: Add missing map->bus check Linux 5.4.273 - regmap: Add missing map->bus check - spi: spi-mt65xx: Fix NULL pointer access in interrupt handler - bpf: report RCU QS in cpumap kthread - rcu: add a helper to report consolidated flavor QS - netfilter: nf_tables: do not compare internal table flags on updates - ARM: dts: sun8i-h2-plus-bananapi-m2-zero: add regulator nodes vcc-dram and vcc1v2 - octeontx2-af: Use separate handlers for interrupts - net/bnx2x: Prevent access to a freed page in page_pool - hsr: Handle failures in module init - rds: introduce acquire/release ordering in acquire/release_in_xmit() - packet: annotate data-races around ignore_outgoing - hsr: Fix uninit-value access in hsr_get_node() - s390/vtime: fix average steal time calculation - octeontx2-af: Use matching wake_up API variant in CGX command interface - usb: gadget: net2272: Use irqflags in the call to net2272_probe_fin - staging: greybus: fix get_channel_from_mode() failure path - serial: 8250_exar: Don't remove GPIO device on suspend - rtc: mt6397: select IRQ_DOMAIN instead of depending on it - kconfig: fix infinite loop when expanding a macro at the end of file - tty: serial: samsung: fix tx_empty() to return TIOCSER_TEMT - serial: max310x: fix syntax error in IRQ error message - tty: vt: fix 20 vs 0x20 typo in EScsiignore - afs: Revert "afs: Hide silly-rename files from userspace" - NFS: Fix an off by one in root_nfs_cat() - watchdog: stm32_iwdg: initialize default timeout - net: sunrpc: Fix an off by one in rpc_sockaddr2uaddr() - scsi: bfa: Fix function pointer type mismatch for hcb_qe->cbfn - RDMA/device: Fix a race between mad_client and cm_client init - scsi: csiostor: Avoid function pointer casts - ALSA: usb-audio: Stop parsing channels bits when all channels are found. - clk: Fix clk_core_get NULL dereference - sparc32: Fix section mismatch in leon_pci_grpci - backlight: lp8788: Fully initialize backlight_properties during probe - backlight: lm3639: Fully initialize backlight_properties during probe - backlight: da9052: Fully initialize backlight_properties during probe - backlight: lm3630a: Don't set bl->props.brightness in get_brightness - backlight: lm3630a: Initialize backlight_properties on init - powerpc/embedded6xx: Fix no previous prototype for avr_uart_send() etc. - drm/msm/dpu: add division of drm_display_mode's hskew parameter - powerpc/hv-gpci: Fix the H_GET_PERF_COUNTER_INFO hcall return value checks - drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip - media: ttpci: fix two memleaks in budget_av_attach - media: media/pci: rename VFL_TYPE_GRABBER to _VIDEO - media: rename VFL_TYPE_GRABBER to _VIDEO - media: v4l2-core: correctly validate video and metadata ioctls - media: go7007: fix a memleak in go7007_load_encoder - media: dvb-frontends: avoid stack overflow warnings with clang - media: pvrusb2: fix uaf in pvr2_context_set_notify - drm/amdgpu: Fix missing break in ATOM_ARG_IMM Case of atom_get_src_int() - ASoC: meson: axg-tdm-interface: fix mclk setup without mclk-fs - mtd: rawnand: lpc32xx_mlc: fix irq handler prototype - mtd: maps: physmap-core: fix flash size larger than 32-bit - crypto: arm/sha - fix function cast warnings - mfd: altera-sysmgr: Call of_node_put() only when of_parse_phandle() takes a ref - mfd: syscon: Call of_node_put() only when of_parse_phandle() takes a ref - drm/tegra: put drm_gem_object ref on error in tegra_fb_create - clk: hisilicon: hi3519: Release the correct number of gates in hi3519_clk_unregister() - PCI: Mark 3ware-9650SE Root Port Extended Tags as broken - drm/mediatek: dsi: Fix DSI RGB666 formats and definitions - clk: qcom: dispcc-sdm845: Adjust internal GDSC wait times - media: pvrusb2: fix pvr2_stream_callback casts - media: pvrusb2: remove redundant NULL check - media: go7007: add check of return value of go7007_read_addr() - media: imx: csc/scaler: fix v4l2_ctrl_handler memory leak - perf stat: Avoid metric-only segv - ALSA: seq: fix function cast warnings - drm/radeon/ni: Fix wrong firmware size logging in ni_init_microcode() - perf thread_map: Free strlist on normal path in thread_map__new_by_tid_str() - PCI: switchtec: Fix an error handling path in switchtec_pci_probe() - quota: Fix rcu annotations of inode dquot pointers - quota: Fix potential NULL pointer dereference - quota: simplify drop_dquot_ref() - clk: qcom: reset: Ensure write completion on reset de/assertion - clk: qcom: reset: Commonize the de/assert functions - clk: qcom: reset: support resetting multiple bits - clk: qcom: reset: Allow specifying custom reset delay - media: edia: dvbdev: fix a use-after-free - media: v4l2-mem2mem: fix a memleak in v4l2_m2m_register_entity - media: v4l2-tpg: fix some memleaks in tpg_alloc - media: em28xx: annotate unchecked call to media_device_register() - perf evsel: Fix duplicate initialization of data->id in evsel__parse_sample() - drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()' - perf record: Fix possible incorrect free in record__switch_output() - PCI/DPC: Print all TLP Prefixes, not just the first - media: tc358743: register v4l2 async device only after successful setup - dmaengine: tegra210-adma: Update dependency to ARCH_TEGRA - drm/rockchip: lvds: do not overwrite error code - drm: Don't treat 0 as -1 in drm_fixp2int_ceil - drm/rockchip: inno_hdmi: Fix video timing - drm/tegra: output: Fix missing i2c_put_adapter() in the error handling paths of tegra_output_probe() - drm/tegra: dsi: Fix missing pm_runtime_disable() in the error handling path of tegra_dsi_probe() - drm/tegra: dsi: Fix some error handling paths in tegra_dsi_probe() - drm/tegra: dsi: Make use of the helper function dev_err_probe() - gpu: host1x: mipi: Update tegra_mipi_request() to be node based - drm/tegra: dsi: Add missing check for of_find_device_by_node - dm: call the resume method on internal suspend - dm raid: fix false positive for requeue needed during reshape - nfp: flower: handle acti_netdevs allocation failure - net/x25: fix incorrect parameter validation in the x25_getsockopt() function - net: kcm: fix incorrect parameter validation in the kcm_getsockopt) function - udp: fix incorrect parameter validation in the udp_lib_getsockopt() function - l2tp: fix incorrect parameter validation in the pppol2tp_getsockopt() function - tcp: fix incorrect parameter validation in the do_tcp_getsockopt() function - net: hns3: fix port duplex configure error in IMP reset - net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv() - ipv6: fib6_rules: flush route cache when rule is changed - bpf: Fix stackmap overflow check on 32-bit arches - bpf: Fix hashtab overflow check on 32-bit arches - sr9800: Add check for usbnet_get_endpoints - Bluetooth: hci_core: Fix possible buffer overflow - Bluetooth: Remove superfluous call to hci_conn_check_pending() - igb: Fix missing time sync events - igb: move PEROUT and EXTTS isr logic to separate functions - mmc: wmt-sdmmc: remove an incorrect release_mem_region() call in the .remove function - SUNRPC: fix some memleaks in gssx_dec_option_array - x86, relocs: Ignore relocations in .notes section - ACPI: scan: Fix device check notification handling - ARM: dts: imx6dl-yapp4: Move the internal switch PHYs under the switch node - ARM: dts: imx6dl-yapp4: Fix typo in the QCA switch register address - ARM: dts: imx6dl-yapp4: Move phy reset into switch node - ARM: dts: arm: realview: Fix development chip ROM compatible value - net: ena: Remove ena_select_queue - net: ena: cosmetic: fix line break issues - wifi: brcmsmac: avoid function pointer casts - iommu/amd: Mark interrupt as managed - bus: tegra-aconnect: Update dependency to ARCH_TEGRA - ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit() - arm64: dts: qcom: msm8996: Pad addresses - arm64: dts: qcom: msm8996: Move regulator consumers to db820c - arm64: dts: qcom: msm8996: Use node references in db820c - arm64: dts: qcom: db820c: Move non-soc entries out of /soc - bpf: Mark bpf_spin_{lock,unlock}() helpers with notrace correctly - bpf: Factor out bpf_spin_lock into helpers. - bpf: Add typecast to bpf helpers to help BTF generation - arm64: dts: mediatek: mt7622: add missing "device_type" to memory nodes - wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer() - net: blackhole_dev: fix build warning for ethh set but not used - af_unix: Annotate data-race of gc_in_progress in wait_for_unix_gc(). - sock_diag: annotate data-races around sock_diag_handlers[family] - wifi: mwifiex: debugfs: Drop unnecessary error check for debugfs_create_dir() - wifi: wilc1000: fix RCU usage in connect path - wifi: wilc1000: fix declarations ordering - wifi: b43: Disable QoS for bcm4331 - wifi: b43: Stop correct queue in DMA worker when QoS is disabled - b43: main: Fix use true/false for bool type - wifi: b43: Stop/wake correct queue in PIO Tx path when QoS is disabled - wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled - b43: dma: Fix use true/false for bool type variable - wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev() - timekeeping: Fix cross-timestamp interpolation for non-x86 - timekeeping: Fix cross-timestamp interpolation corner case decision - timekeeping: Fix cross-timestamp interpolation on counter wrap - aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts - fs/select: rework stack allocation hack for clang - nbd: null check for nla_nest_start - do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak - ASoC: wm8962: Fix up incorrect error message in wm8962_set_fll - ASoC: wm8962: Enable both SPKOUTR_ENA and SPKOUTL_ENA in mono mode - ASoC: wm8962: Enable oscillator if selecting WM8962_FLL_OSC - Input: gpio_keys_polled - suppress deferred probe error for gpio - ASoC: Intel: bytcr_rt5640: Add an extra entry for the Chuwi Vi8 tablet - firewire: core: use long bus reset on gap count error - Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security - scsi: mpt3sas: Prevent sending diag_reset when the controller is ready - btrfs: fix data race at btrfs_use_block_rsv() when accessing block reserve - dm-verity, dm-crypt: align "struct bvec_iter" correctly - block: sed-opal: handle empty atoms when parsing response - parisc/ftrace: add missing CONFIG_DYNAMIC_FTRACE check - net/iucv: fix the allocation size of iucv_path_table array - RDMA/mlx5: Relax DEVX access upon modify commands - HID: multitouch: Add required quirk for Synaptics 0xcddc device - MIPS: Clear Cause.BD in instruction_pointer_set - x86/xen: Add some null pointer checking to smp.c - ASoC: rt5645: Make LattePanda board DMI match more precise - selftests: tls: use exact comparison in recv_partial - io_uring: drop any code related to SCM_RIGHTS - io_uring/unix: drop usage of io_uring socket + UBUNTU: Upstream stable to v5.4.273 -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/2064561 Title: Focal update: v5.4.273 upstream stable release Status in linux package in Ubuntu: Invalid Status in linux source package in Focal: In Progress Bug description: SRU Justification Impact: The upstream process for stable tree updates is quite similar in scope to the Ubuntu SRU process, e.g., each patch has to demonstrably fix a bug, and each patch is vetted by upstream by originating either directly from a mainline/stable Linux tree or a minimally backported form of that patch. The following upstream stable patches should be included in the Ubuntu kernel: v5.4.273 upstream stable release from git://git.kernel.org/ io_uring/unix: drop usage of io_uring socket io_uring: drop any code related to SCM_RIGHTS selftests: tls: use exact comparison in recv_partial ASoC: rt5645: Make LattePanda board DMI match more precise x86/xen: Add some null pointer checking to smp.c MIPS: Clear Cause.BD in instruction_pointer_set HID: multitouch: Add required quirk for Synaptics 0xcddc device RDMA/mlx5: Relax DEVX access upon modify commands net/iucv: fix the allocation size of iucv_path_table array parisc/ftrace: add missing CONFIG_DYNAMIC_FTRACE check block: sed-opal: handle empty atoms when parsing response dm-verity, dm-crypt: align "struct bvec_iter" correctly btrfs: fix data race at btrfs_use_block_rsv() when accessing block reserve scsi: mpt3sas: Prevent sending diag_reset when the controller is ready Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security firewire: core: use long bus reset on gap count error ASoC: Intel: bytcr_rt5640: Add an extra entry for the Chuwi Vi8 tablet Input: gpio_keys_polled - suppress deferred probe error for gpio ASoC: wm8962: Enable oscillator if selecting WM8962_FLL_OSC ASoC: wm8962: Enable both SPKOUTR_ENA and SPKOUTL_ENA in mono mode ASoC: wm8962: Fix up incorrect error message in wm8962_set_fll do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak fs/select: rework stack allocation hack for clang aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts timekeeping: Fix cross-timestamp interpolation on counter wrap timekeeping: Fix cross-timestamp interpolation corner case decision timekeeping: Fix cross-timestamp interpolation for non-x86 wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev() b43: dma: Fix use true/false for bool type variable wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled wifi: b43: Stop/wake correct queue in PIO Tx path when QoS is disabled b43: main: Fix use true/false for bool type wifi: b43: Stop correct queue in DMA worker when QoS is disabled wifi: b43: Disable QoS for bcm4331 wifi: wilc1000: fix declarations ordering wifi: wilc1000: fix RCU usage in connect path wifi: mwifiex: debugfs: Drop unnecessary error check for debugfs_create_dir() sock_diag: annotate data-races around sock_diag_handlers[family] af_unix: Annotate data-race of gc_in_progress in wait_for_unix_gc(). net: blackhole_dev: fix build warning for ethh set but not used wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer() arm64: dts: mediatek: mt7622: add missing "device_type" to memory nodes bpf: Add typecast to bpf helpers to help BTF generation bpf: Factor out bpf_spin_lock into helpers. bpf: Mark bpf_spin_{lock,unlock}() helpers with notrace correctly arm64: dts: qcom: db820c: Move non-soc entries out of /soc arm64: dts: qcom: msm8996: Use node references in db820c arm64: dts: qcom: msm8996: Move regulator consumers to db820c arm64: dts: qcom: msm8996: Pad addresses ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit() bus: tegra-aconnect: Update dependency to ARCH_TEGRA UBUNTU: [Config]: Update tegra configs iommu/amd: Mark interrupt as managed wifi: brcmsmac: avoid function pointer casts net: ena: Remove ena_select_queue ARM: dts: arm: realview: Fix development chip ROM compatible value ARM: dts: imx6dl-yapp4: Move phy reset into switch node ARM: dts: imx6dl-yapp4: Fix typo in the QCA switch register address ARM: dts: imx6dl-yapp4: Move the internal switch PHYs under the switch node ACPI: scan: Fix device check notification handling x86, relocs: Ignore relocations in .notes section SUNRPC: fix some memleaks in gssx_dec_option_array mmc: wmt-sdmmc: remove an incorrect release_mem_region() call in the .remove function igb: move PEROUT and EXTTS isr logic to separate functions igb: Fix missing time sync events Bluetooth: Remove superfluous call to hci_conn_check_pending() Bluetooth: hci_core: Fix possible buffer overflow sr9800: Add check for usbnet_get_endpoints bpf: Fix hashtab overflow check on 32-bit arches bpf: Fix stackmap overflow check on 32-bit arches ipv6: fib6_rules: flush route cache when rule is changed net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv() net: hns3: fix port duplex configure error in IMP reset tcp: fix incorrect parameter validation in the do_tcp_getsockopt() function l2tp: fix incorrect parameter validation in the pppol2tp_getsockopt() function udp: fix incorrect parameter validation in the udp_lib_getsockopt() function net: kcm: fix incorrect parameter validation in the kcm_getsockopt) function net/x25: fix incorrect parameter validation in the x25_getsockopt() function nfp: flower: handle acti_netdevs allocation failure dm raid: fix false positive for requeue needed during reshape dm: call the resume method on internal suspend drm/tegra: dsi: Add missing check for of_find_device_by_node gpu: host1x: mipi: Update tegra_mipi_request() to be node based drm/tegra: dsi: Make use of the helper function dev_err_probe() drm/tegra: dsi: Fix some error handling paths in tegra_dsi_probe() drm/tegra: dsi: Fix missing pm_runtime_disable() in the error handling path of tegra_dsi_probe() drm/tegra: output: Fix missing i2c_put_adapter() in the error handling paths of tegra_output_probe() drm/rockchip: inno_hdmi: Fix video timing drm: Don't treat 0 as -1 in drm_fixp2int_ceil drm/rockchip: lvds: do not overwrite error code dmaengine: tegra210-adma: Update dependency to ARCH_TEGRA media: tc358743: register v4l2 async device only after successful setup PCI/DPC: Print all TLP Prefixes, not just the first perf record: Fix possible incorrect free in record__switch_output() drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()' perf evsel: Fix duplicate initialization of data->id in evsel__parse_sample() media: em28xx: annotate unchecked call to media_device_register() media: v4l2-tpg: fix some memleaks in tpg_alloc media: v4l2-mem2mem: fix a memleak in v4l2_m2m_register_entity media: edia: dvbdev: fix a use-after-free clk: qcom: reset: Allow specifying custom reset delay clk: qcom: reset: support resetting multiple bits clk: qcom: reset: Commonize the de/assert functions clk: qcom: reset: Ensure write completion on reset de/assertion quota: simplify drop_dquot_ref() quota: Fix potential NULL pointer dereference quota: Fix rcu annotations of inode dquot pointers PCI: switchtec: Fix an error handling path in switchtec_pci_probe() perf thread_map: Free strlist on normal path in thread_map__new_by_tid_str() drm/radeon/ni: Fix wrong firmware size logging in ni_init_microcode() ALSA: seq: fix function cast warnings perf stat: Avoid metric-only segv media: imx: csc/scaler: fix v4l2_ctrl_handler memory leak media: go7007: add check of return value of go7007_read_addr() media: pvrusb2: remove redundant NULL check media: pvrusb2: fix pvr2_stream_callback casts clk: qcom: dispcc-sdm845: Adjust internal GDSC wait times drm/mediatek: dsi: Fix DSI RGB666 formats and definitions PCI: Mark 3ware-9650SE Root Port Extended Tags as broken clk: hisilicon: hi3519: Release the correct number of gates in hi3519_clk_unregister() drm/tegra: put drm_gem_object ref on error in tegra_fb_create mfd: syscon: Call of_node_put() only when of_parse_phandle() takes a ref mfd: altera-sysmgr: Call of_node_put() only when of_parse_phandle() takes a ref crypto: arm/sha - fix function cast warnings mtd: maps: physmap-core: fix flash size larger than 32-bit mtd: rawnand: lpc32xx_mlc: fix irq handler prototype ASoC: meson: axg-tdm-interface: fix mclk setup without mclk-fs drm/amdgpu: Fix missing break in ATOM_ARG_IMM Case of atom_get_src_int() media: pvrusb2: fix uaf in pvr2_context_set_notify media: dvb-frontends: avoid stack overflow warnings with clang media: go7007: fix a memleak in go7007_load_encoder media: v4l2-core: correctly validate video and metadata ioctls media: rename VFL_TYPE_GRABBER to _VIDEO media: media/pci: rename VFL_TYPE_GRABBER to _VIDEO media: ttpci: fix two memleaks in budget_av_attach drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip powerpc/hv-gpci: Fix the H_GET_PERF_COUNTER_INFO hcall return value checks drm/msm/dpu: add division of drm_display_mode's hskew parameter powerpc/embedded6xx: Fix no previous prototype for avr_uart_send() etc. backlight: lm3630a: Initialize backlight_properties on init backlight: lm3630a: Don't set bl->props.brightness in get_brightness backlight: da9052: Fully initialize backlight_properties during probe backlight: lm3639: Fully initialize backlight_properties during probe backlight: lp8788: Fully initialize backlight_properties during probe sparc32: Fix section mismatch in leon_pci_grpci clk: Fix clk_core_get NULL dereference ALSA: usb-audio: Stop parsing channels bits when all channels are found. scsi: csiostor: Avoid function pointer casts RDMA/device: Fix a race between mad_client and cm_client init scsi: bfa: Fix function pointer type mismatch for hcb_qe->cbfn net: sunrpc: Fix an off by one in rpc_sockaddr2uaddr() watchdog: stm32_iwdg: initialize default timeout NFS: Fix an off by one in root_nfs_cat() afs: Revert "afs: Hide silly-rename files from userspace" tty: vt: fix 20 vs 0x20 typo in EScsiignore serial: max310x: fix syntax error in IRQ error message tty: serial: samsung: fix tx_empty() to return TIOCSER_TEMT kconfig: fix infinite loop when expanding a macro at the end of file rtc: mt6397: select IRQ_DOMAIN instead of depending on it serial: 8250_exar: Don't remove GPIO device on suspend staging: greybus: fix get_channel_from_mode() failure path usb: gadget: net2272: Use irqflags in the call to net2272_probe_fin octeontx2-af: Use matching wake_up API variant in CGX command interface s390/vtime: fix average steal time calculation hsr: Fix uninit-value access in hsr_get_node() packet: annotate data-races around ignore_outgoing rds: introduce acquire/release ordering in acquire/release_in_xmit() hsr: Handle failures in module init net/bnx2x: Prevent access to a freed page in page_pool octeontx2-af: Use separate handlers for interrupts ARM: dts: sun8i-h2-plus-bananapi-m2-zero: add regulator nodes vcc-dram and vcc1v2 netfilter: nf_tables: do not compare internal table flags on updates rcu: add a helper to report consolidated flavor QS bpf: report RCU QS in cpumap kthread spi: spi-mt65xx: Fix NULL pointer access in interrupt handler regmap: Add missing map->bus check Linux 5.4.273 UBUNTU: Upstream stable to v5.4.273 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2064561/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp