Public bug reported:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
v5.4.69 upstream stable release
from git://git.kernel.org/
kernel/sysctl-test: Add null pointer test for sysctl.c:proc_dointvec()
selinux: allow labeling before policy is loaded
media: mc-device.c: fix memleak in media_device_register_entity
drm/amd/display: Do not double-buffer DTO adjustments
drm/amdkfd: Fix race in gfx10 context restore handler
dma-fence: Serialise signal enabling (dma_fence_enable_sw_signaling)
scsi: qla2xxx: Add error handling for PLOGI ELS passthrough
ath10k: fix array out-of-bounds access
ath10k: fix memory leak for tpc_stats_final
PCI/IOV: Serialize sysfs sriov_numvfs reads vs writes
mm: fix double page fault on arm64 if PTE_AF is cleared
scsi: aacraid: fix illegal IO beyond last LBA
m68k: q40: Fix info-leak in rtc_ioctl
xfs: fix inode fork extent count overflow
gma/gma500: fix a memory disclosure bug due to uninitialized bytes
ASoC: kirkwood: fix IRQ error handling
soundwire: intel/cadence: fix startup sequence
media: smiapp: Fix error handling at NVM reading
drm/amd/display: Free gamma after calculating legacy transfer function
xfs: properly serialise fallocate against AIO+DIO
leds: mlxreg: Fix possible buffer overflow
dm table: do not allow request-based DM to stack on partitions
PM / devfreq: tegra30: Fix integer overflow on CPU's freq max out
scsi: fnic: fix use after free
powerpc/64s: Always disable branch profiling for prom_init.o
net: silence data-races on sk_backlog.tail
dax: Fix alloc_dax_region() compile warning
iomap: Fix overflow in iomap_page_mkwrite
f2fs: avoid kernel panic on corruption test
clk/ti/adpll: allocate room for terminating null
drm/amdgpu/powerplay: fix AVFS handling with custom powerplay table
ice: Fix to change Rx/Tx ring descriptor size via ethtool with DCBx
mtd: cfi_cmdset_0002: don't free cfi->cfiq in error path of cfi_amdstd_setup()
mfd: mfd-core: Protect against NULL call-back function pointer
drm/amdgpu/powerplay/smu7: fix AVFS handling with custom powerplay table
tpm_crb: fix fTPM on AMD Zen+ CPUs
tracing: Verify if trace array exists before destroying it.
tracing: Adding NULL checks for trace_array descriptor pointer
bcache: fix a lost wake-up problem caused by mca_cannibalize_lock
dmaengine: mediatek: hsdma_probe: fixed a memory leak when devm_request_irq
fails
x86/kdump: Always reserve the low 1M when the crashkernel option is specified
RDMA/qedr: Fix potential use after free
RDMA/i40iw: Fix potential use after free
PCI: Avoid double hpmemsize MMIO window assignment
fix dget_parent() fastpath race
xfs: fix attr leaf header freemap.size underflow
RDMA/iw_cgxb4: Fix an error handling path in 'c4iw_connect()'
ubi: Fix producing anchor PEBs
mmc: core: Fix size overflow for mmc partitions
gfs2: clean up iopen glock mess in gfs2_create_inode
scsi: pm80xx: Cleanup command when a reset times out
mt76: do not use devm API for led classdev
mt76: add missing locking around ampdu action
debugfs: Fix !DEBUG_FS debugfs_create_automount
SUNRPC: Capture completion of all RPC tasks
CIFS: Use common error handling code in smb2_ioctl_query_info()
CIFS: Properly process SMB3 lease breaks
f2fs: stop GC when the victim becomes fully valid
ASoC: max98090: remove msleep in PLL unlocked workaround
xtensa: fix system_call interaction with ptrace
s390: avoid misusing CALL_ON_STACK for task stack setup
xfs: fix realtime file data space leak
drm/amdgpu: fix calltrace during kmd unload(v3)
arm64: insn: consistently handle exit text
selftests/bpf: De-flake test_tcpbpf
kernel/notifier.c: intercept duplicate registrations to avoid infinite loops
kernel/sys.c: avoid copying possible padding bytes in copy_to_user
KVM: arm/arm64: vgic: Fix potential double free dist->spis in
__kvm_vgic_destroy()
module: Remove accidental change of module_enable_x()
xfs: fix log reservation overflows when allocating large rt extents
ALSA: hda: enable regmap internal locking
tipc: fix link overflow issue at socket shutdown
vcc_seq_next should increase position index
neigh_stat_seq_next() should increase position index
rt_cpu_seq_next should increase position index
ipv6_route_seq_next should increase position index
drm/mcde: Handle pending vblank while disabling display
seqlock: Require WRITE_ONCE surrounding raw_seqcount_barrier
drm/scheduler: Avoid accessing freed bad job.
media: ti-vpe: cal: Restrict DMA to avoid memory corruption
opp: Replace list_kref with a local counter
scsi: qla2xxx: Fix stuck session in GNL
sctp: move trace_sctp_probe_path into sctp_outq_sack
ACPI: EC: Reference count query handlers under lock
scsi: ufs: Make ufshcd_add_command_trace() easier to read
scsi: ufs: Fix a race condition in the tracing code
drm/amd/display: Initialize DSC PPS variables to 0
i2c: tegra: Prevent interrupt triggering after transfer timeout
btrfs: tree-checker: Check leaf chunk item size
dmaengine: zynqmp_dma: fix burst length configuration
s390/cpum_sf: Use kzalloc and minor changes
nfsd: Fix a soft lockup race in nfsd_file_mark_find_or_create()
powerpc/eeh: Only dump stack once if an MMIO loop is detected
Bluetooth: btrtl: Use kvmalloc for FW allocations
tracing: Set kernel_stack's caller size properly
ARM: 8948/1: Prevent OOB access in stacktrace
ar5523: Add USB ID of SMCWUSBT-G2 wireless adapter
ceph: ensure we have a new cap before continuing in fill_inode
selftests/ftrace: fix glob selftest
tools/power/x86/intel_pstate_tracer: changes for python 3 compatibility
Bluetooth: Fix refcount use-after-free issue
mm/swapfile.c: swap_next should increase position index
mm: pagewalk: fix termination condition in walk_pte_range()
Bluetooth: prefetch channel before killing sock
ALSA: hda: Clear RIRB status before reading WP
skbuff: fix a data race in skb_queue_len()
nfsd: Fix a perf warning
drm/amd/display: fix workaround for incorrect double buffer register for DLG
ADL and TTU
audit: CONFIG_CHANGE don't log internal bookkeeping as an event
selinux: sel_avc_get_stat_idx should increase position index
drm/omap: fix possible object reference leak
locking/lockdep: Decrement IRQ context counters when removing lock chain
clk: stratix10: use do_div() for 64-bit calculation
crypto: chelsio - This fixes the kernel panic which occurs during a libkcapi
test
mt76: clear skb pointers from rx aggregation reorder buffer during cleanup
mt76: fix handling full tx queues in mt76_dma_tx_queue_skb_raw
ALSA: usb-audio: Don't create a mixer element with bogus volume range
perf test: Fix test trace+probe_vfs_getname.sh on s390
RDMA/rxe: Fix configuration of atomic queue pair attributes
KVM: x86: fix incorrect comparison in trace event
KVM: nVMX: Hold KVM's srcu lock when syncing vmcs12->shadow
dmaengine: stm32-mdma: use vchan_terminate_vdesc() in .terminate_all
media: staging/imx: Missing assignment in imx_media_capture_device_register()
x86/pkeys: Add check for pkey "overflow"
bpf: Remove recursion prevention from rcu free callback
dmaengine: stm32-dma: use vchan_terminate_vdesc() in .terminate_all
dmaengine: tegra-apb: Prevent race conditions on channel's freeing
soundwire: bus: disable pm_runtime in sdw_slave_delete
drm/amd/display: dal_ddc_i2c_payloads_create can fail causing panic
drm/omap: dss: Cleanup DSS ports on initialisation failure
iavf: use tc_cls_can_offload_and_chain0() instead of chain check
firmware: arm_sdei: Use cpus_read_lock() to avoid races with cpuhp
random: fix data races at timer_rand_state
bus: hisi_lpc: Fixup IO ports addresses to avoid use-after-free in host removal
ASoC: SOF: ipc: check ipc return value before data copy
media: go7007: Fix URB type for interrupt handling
Bluetooth: guard against controllers sending zero'd events
timekeeping: Prevent 32bit truncation in scale64_check_overflow()
powerpc/book3s64: Fix error handling in mm_iommu_do_alloc()
drm/amd/display: fix image corruption with ODM 2:1 DSC 2 slice
ext4: fix a data race at inode->i_disksize
perf jevents: Fix leak of mapfile memory
mm: avoid data corruption on CoW fault into PFN-mapped VMA
drm/amdgpu: increase atombios cmd timeout
ARM: OMAP2+: Handle errors for cpu_pm
clk: imx: Fix division by zero warning on pfdv2
cpu-topology: Fix the potential data corruption
s390/irq: replace setup_irq() by request_irq()
perf cs-etm: Swap packets for instruction samples
perf cs-etm: Correct synthesizing instruction samples
ath10k: use kzalloc to read for ath10k_sdio_hif_diag_read
scsi: aacraid: Disabling TM path and only processing IOP reset
Bluetooth: L2CAP: handle l2cap config request during open state
media: tda10071: fix unsigned sign extension overflow
tty: sifive: Finish transmission before changing the clock
xfs: don't ever return a stale pointer from __xfs_dir3_free_read
xfs: mark dir corrupt when lookup-by-hash fails
ext4: mark block bitmap corrupted when found instead of BUGON
tpm: ibmvtpm: Wait for buffer to be set before proceeding
rtc: sa1100: fix possible race condition
rtc: ds1374: fix possible race condition
nfsd: Don't add locks to closed or closing open stateids
RDMA/cm: Remove a race freeing timewait_info
intel_th: Disallow multi mode on devices where it's broken
KVM: PPC: Book3S HV: Treat TM-related invalid form instructions on P9 like the
valid ones
drm/msm: fix leaks if initialization fails
drm/msm/a5xx: Always set an OPP supported hardware value
tracing: Use address-of operator on section symbols
thermal: rcar_thermal: Handle probe error gracefully
KVM: LAPIC: Mark hrtimer for period or oneshot mode to expire in hard interrupt
context
perf parse-events: Fix 3 use after frees found with clang ASAN
btrfs: do not init a reloc root if we aren't relocating
btrfs: free the reloc_control in a consistent way
r8169: improve RTL8168b FIFO overflow workaround
serial: 8250_port: Don't service RX FIFO if throttled
serial: 8250_omap: Fix sleeping function called from invalid context during
probe
serial: 8250: 8250_omap: Terminate DMA before pushing data on RX timeout
perf cpumap: Fix snprintf overflow check
net: axienet: Convert DMA error handler to a work queue
net: axienet: Propagate failure of DMA descriptor setup
cpufreq: powernv: Fix frame-size-overflow in powernv_cpufreq_work_fn
tools: gpio-hammer: Avoid potential overflow in main
exec: Add exec_update_mutex to replace cred_guard_mutex
exec: Fix a deadlock in strace
selftests/ptrace: add test cases for dead-locks
kernel/kcmp.c: Use new infrastructure to fix deadlocks in execve
proc: Use new infrastructure to fix deadlocks in execve
proc: io_accounting: Use new infrastructure to fix deadlocks in execve
perf: Use new infrastructure to fix deadlocks in execve
nvme-multipath: do not reset on unknown status
nvme: Fix ctrl use-after-free during sysfs deletion
nvme: Fix controller creation races with teardown flow
brcmfmac: Fix double freeing in the fmac usb data path
xfs: prohibit fs freezing when using empty transactions
RDMA/rxe: Set sys_image_guid to be aligned with HW IB devices
IB/iser: Always check sig MR before putting it to the free pool
scsi: hpsa: correct race condition in offload enabled
SUNRPC: Fix a potential buffer overflow in 'svc_print_xprts()'
svcrdma: Fix leak of transport addresses
netfilter: nf_tables: silence a RCU-list warning in nft_table_lookup()
PCI: Use ioremap(), not phys_to_virt() for platform ROM
ubifs: ubifs_jnl_write_inode: Fix a memory leak bug
ubifs: ubifs_add_orphan: Fix a memory leak bug
ubifs: Fix out-of-bounds memory access caused by abnormal value of node_len
ALSA: usb-audio: Fix case when USB MIDI interface has more than one extra
endpoint descriptor
PCI: pciehp: Fix MSI interrupt race
NFS: Fix races nfs_page_group_destroy() vs nfs_destroy_unlinked_subrequests()
drm/amdgpu/vcn2.0: stall DPG when WPTR/RPTR reset
powerpc/perf: Implement a global lock to avoid races between trace, core and
thread imc events.
mm/kmemleak.c: use address-of operator on section symbols
mm/filemap.c: clear page error before actual read
mm/swapfile: fix data races in try_to_unuse()
mm/vmscan.c: fix data races using kswapd_classzone_idx
SUNRPC: Don't start a timer on an already queued rpc task
nvmet-rdma: fix double free of rdma queue
workqueue: Remove the warning in wq_worker_sleeping()
drm/amdgpu/sriov add amdgpu_amdkfd_pre_reset in gpu reset
mm/mmap.c: initialize align_offset explicitly for vm_unmapped_area
ALSA: hda: Skip controller resume if not needed
scsi: qedi: Fix termination timeouts in session logout
serial: uartps: Wait for tx_empty in console setup
btrfs: fix setting last_trans for reloc roots
KVM: Remove CREATE_IRQCHIP/SET_PIT2 race
perf stat: Force error in fallback on :k events
bdev: Reduce time holding bd_mutex in sync in blkdev_close()
drivers: char: tlclk.c: Avoid data race between init and interrupt handler
KVM: arm64: vgic-v3: Retire all pending LPIs on vcpu destroy
KVM: arm64: vgic-its: Fix memory leak on the error path of vgic_add_lpi()
net: openvswitch: use u64 for meter bucket
scsi: aacraid: Fix error handling paths in aac_probe_one()
staging:r8188eu: avoid skb_clone for amsdu to msdu conversion
sparc64: vcc: Fix error return code in vcc_probe()
arm64: cpufeature: Relax checks for AArch32 support at EL[0-2]
sched/fair: Eliminate bandwidth race between throttling and distribution
dpaa2-eth: fix error return code in setup_dpni()
dt-bindings: sound: wm8994: Correct required supplies based on actual
implementaion
devlink: Fix reporter's recovery condition
atm: fix a memory leak of vcc->user_back
media: venus: vdec: Init registered list unconditionally
perf mem2node: Avoid double free related to realloc
mm/slub: fix incorrect interpretation of s->offset
i2c: tegra: Restore pinmux on system resume
power: supply: max17040: Correct voltage reading
phy: samsung: s5pv210-usb2: Add delay after reset
Bluetooth: Handle Inquiry Cancel error after Inquiry Complete
USB: EHCI: ehci-mv: fix error handling in mv_ehci_probe()
KVM: x86: handle wrap around 32-bit address space
tipc: fix memory leak in service subscripting
tty: serial: samsung: Correct clock selection logic
ALSA: hda: Fix potential race in unsol event handler
drm/exynos: dsi: Remove bridge node reference in error handling path in probe
function
ipmi:bt-bmc: Fix error handling and status check
powerpc/traps: Make unrecoverable NMIs die instead of panic
svcrdma: Fix backchannel return code
fuse: don't check refcount after stealing page
fuse: update attr_version counter on fuse_notify_inval_inode()
USB: EHCI: ehci-mv: fix less than zero comparison of an unsigned int
coresight: etm4x: Fix use-after-free of per-cpu etm drvdata
arm64: acpi: Make apei_claim_sea() synchronise with APEI's irq work
scsi: cxlflash: Fix error return code in cxlflash_probe()
arm64/cpufeature: Drop TraceFilt feature exposure from ID_DFR0 register
drm/amdkfd: fix restore worker race condition
e1000: Do not perform reset in reset_task if we are already down
drm/nouveau/debugfs: fix runtime pm imbalance on error
drm/nouveau: fix runtime pm imbalance on error
drm/nouveau/dispnv50: fix runtime pm imbalance on error
printk: handle blank console arguments passed in.
usb: dwc3: Increase timeout for CmdAct cleared by device controller
btrfs: don't force read-only after error in drop snapshot
btrfs: fix double __endio_write_update_ordered in direct I/O
gpio: rcar: Fix runtime PM imbalance on error
vfio/pci: fix memory leaks of eventfd ctx
KVM: PPC: Book3S HV: Close race with page faults around memslot flushes
perf evsel: Fix 2 memory leaks
perf trace: Fix the selection for architectures to generate the errno name
tables
perf stat: Fix duration_time value for higher intervals
perf util: Fix memory leak of prefix_if_not_in
perf metricgroup: Free metric_events on error
perf kcore_copy: Fix module map when there are no modules loaded
PCI: tegra194: Fix runtime PM imbalance on error
ASoC: img-i2s-out: Fix runtime PM imbalance on error
wlcore: fix runtime pm imbalance in wl1271_tx_work
wlcore: fix runtime pm imbalance in wlcore_regdomain_config
mtd: rawnand: gpmi: Fix runtime PM imbalance on error
mtd: rawnand: omap_elm: Fix runtime PM imbalance on error
PCI: tegra: Fix runtime PM imbalance on error
ceph: fix potential race in ceph_check_caps
mm/swap_state: fix a data race in swapin_nr_pages
mm: memcontrol: fix stat-corrupting race in charge moving
rapidio: avoid data race between file operation callbacks and mport_cdev_add().
mtd: parser: cmdline: Support MTD names containing one or more colons
x86/speculation/mds: Mark mds_user_clear_cpu_buffers() __always_inline
NFS: nfs_xdr_status should record the procedure name
vfio/pci: Clear error and request eventfd ctx after releasing
cifs: Fix double add page to memcg when cifs_readpages
nvme: fix possible deadlock when I/O is blocked
mac80211: skip mpath lookup also for control port tx
scsi: libfc: Handling of extra kref
scsi: libfc: Skip additional kref updating work event
selftests/x86/syscall_nt: Clear weird flags after each test
vfio/pci: fix racy on error and request eventfd ctx
btrfs: qgroup: fix data leak caused by race between writeback and truncate
perf tests: Fix test 68 zstd compression for s390
scsi: qla2xxx: Retry PLOGI on FC-NVMe PRLI failure
ubi: fastmap: Free unused fastmap anchor peb during detach
mt76: fix LED link time failure
opp: Increase parsed_static_opps in _of_add_opp_table_v1()
perf parse-events: Use strcmp() to compare the PMU name
ALSA: hda: Always use jackpoll helper for jack update after resume
ALSA: hda: Workaround for spurious wakeups on some Intel platforms
net: openvswitch: use div_u64() for 64-by-32 divisions
nvme: explicitly update mpath disk capacity on revalidation
device_cgroup: Fix RCU list debugging warning
ASoC: pcm3168a: ignore 0 Hz settings
ASoC: wm8994: Skip setting of the WM8994_MICBIAS register for WM1811
ASoC: wm8994: Ensure the device is resumed in wm89xx_mic_detect functions
ASoC: Intel: bytcr_rt5640: Add quirk for MPMAN Converter9 2-in-1
RISC-V: Take text_mutex in ftrace_init_nop()
i2c: aspeed: Mask IRQ status to relevant bits
s390/init: add missing __init annotations
lockdep: fix order in trace_hardirqs_off_caller()
EDAC/ghes: Check whether the driver is on the safe list correctly
drm/amdkfd: fix a memory leak issue
drm/amd/display: update nv1x stutter latencies
drm/amdgpu/dc: Require primary plane to be enabled whenever the CRTC is
objtool: Fix noreturn detection for ignored functions
ieee802154: fix one possible memleak in ca8210_dev_com_init
ieee802154/adf7242: check status of adf7242_read_reg
clocksource/drivers/h8300_timer8: Fix wrong return value in h8300_8timer_init()
batman-adv: bla: fix type misuse for backbone_gw hash indexing
atm: eni: fix the missed pci_disable_device() for eni_init_one()
batman-adv: mcast/TT: fix wrongly dropped or rerouted packets
netfilter: conntrack: nf_conncount_init is failing with IPv6 disabled
mac802154: tx: fix use-after-free
bpf: Fix clobbering of r2 in bpf_gen_ld_abs
drm/vc4/vc4_hdmi: fill ASoC card owner
net: qed: Disable aRFS for NPAR and 100G
net: qede: Disable aRFS for NPAR and 100G
net: qed: RDMA personality shouldn't fail VF load
drm/sun4i: sun8i-csc: Secondary CSC register correction
batman-adv: Add missing include for in_interrupt()
nvme-tcp: fix kconfig dependency warning when !CRYPTO
batman-adv: mcast: fix duplicate mcast packets in BLA backbone from LAN
batman-adv: mcast: fix duplicate mcast packets in BLA backbone from mesh
batman-adv: mcast: fix duplicate mcast packets from BLA backbone to mesh
bpf: Fix a rcu warning for bpffs map pretty-print
lib80211: fix unmet direct dependendices config warning when !CRYPTO
ALSA: asihpi: fix iounmap in error handler
regmap: fix page selection for noinc reads
regmap: fix page selection for noinc writes
MIPS: Add the missing 'CPU_1074K' into __get_cpu_type()
regulator: axp20x: fix LDO2/4 description
KVM: x86: Reset MMU context if guest toggles CR4.SMAP or CR4.PKE
KVM: SVM: Add a dedicated INVD intercept routine
mm: validate pmd after splitting
arch/x86/lib/usercopy_64.c: fix __copy_user_flushcache() cache writeback
x86/ioapic: Unbreak check_timer()
scsi: lpfc: Fix initial FLOGI failure due to BBSCN not supported
ALSA: usb-audio: Add delay quirk for H570e USB headsets
ALSA: hda/realtek - Couldn't detect Mic if booting with headset plugged
ALSA: hda/realtek: Enable front panel headset LED on Lenovo ThinkStation P520
lib/string.c: implement stpcpy
tracing: fix double free
s390/dasd: Fix zero write for FBA devices
kprobes: Fix to check probe enabled before disarm_kprobe_ftrace()
kprobes: tracing/kprobes: Fix to kill kprobes on initmem after boot
btrfs: fix overflow when copying corrupt csums for a message
dmabuf: fix NULL pointer dereference in dma_buf_release()
mm, THP, swap: fix allocating cluster for swapfile by mistake
mm/gup: fix gup_fast with dynamic page table folding
s390/zcrypt: Fix ZCRYPT_PERDEV_REQCNT ioctl
KVM: arm64: Assume write fault on S1PTW permission fault on instruction fetch
dm: fix bio splitting and its bio completion order for regular IO
ata: define AC_ERR_OK
ata: make qc_prep return ata_completion_errors
ata: sata_mv, avoid trigerrable BUG_ON
Linux 5.4.69
UBUNTU: upstream stable to v5.4.69
** Affects: linux (Ubuntu)
Importance: Undecided
Status: Confirmed
** Affects: linux (Ubuntu Focal)
Importance: Undecided
Assignee: Kamal Mostafa (kamalmostafa)
Status: In Progress
** Tags: kernel-stable-tracking-bug
** Changed in: linux (Ubuntu)
Status: New => Confirmed
** Tags added: kernel-stable-tracking-bug
** Also affects: linux (Ubuntu Focal)
Importance: Undecided
Status: New
** Changed in: linux (Ubuntu Focal)
Status: New => In Progress
** Changed in: linux (Ubuntu Focal)
Assignee: (unassigned) => Kamal Mostafa (kamalmostafa)
** Description changed:
+ SRU Justification
- SRU Justification
+ Impact:
+ The upstream process for stable tree updates is quite similar
+ in scope to the Ubuntu SRU process, e.g., each patch has to
+ demonstrably fix a bug, and each patch is vetted by upstream
+ by originating either directly from a mainline/stable Linux tree or
+ a minimally backported form of that patch. The following upstream
+ stable patches should be included in the Ubuntu kernel:
- Impact:
- The upstream process for stable tree updates is quite similar
- in scope to the Ubuntu SRU process, e.g., each patch has to
- demonstrably fix a bug, and each patch is vetted by upstream
- by originating either directly from a mainline/stable Linux tree or
- a minimally backported form of that patch. The following upstream
- stable patches should be included in the Ubuntu kernel:
+ v5.4.69 upstream stable release
+ from git://git.kernel.org/
- v5.4.69 upstream stable release
- from git://git.kernel.org/
+ kernel/sysctl-test: Add null pointer test for sysctl.c:proc_dointvec()
+ selinux: allow labeling before policy is loaded
+ media: mc-device.c: fix memleak in media_device_register_entity
+ drm/amd/display: Do not double-buffer DTO adjustments
+ drm/amdkfd: Fix race in gfx10 context restore handler
+ dma-fence: Serialise signal enabling (dma_fence_enable_sw_signaling)
+ scsi: qla2xxx: Add error handling for PLOGI ELS passthrough
+ ath10k: fix array out-of-bounds access
+ ath10k: fix memory leak for tpc_stats_final
+ PCI/IOV: Serialize sysfs sriov_numvfs reads vs writes
+ mm: fix double page fault on arm64 if PTE_AF is cleared
+ scsi: aacraid: fix illegal IO beyond last LBA
+ m68k: q40: Fix info-leak in rtc_ioctl
+ xfs: fix inode fork extent count overflow
+ gma/gma500: fix a memory disclosure bug due to uninitialized bytes
+ ASoC: kirkwood: fix IRQ error handling
+ soundwire: intel/cadence: fix startup sequence
+ media: smiapp: Fix error handling at NVM reading
+ drm/amd/display: Free gamma after calculating legacy transfer function
+ xfs: properly serialise fallocate against AIO+DIO
+ leds: mlxreg: Fix possible buffer overflow
+ dm table: do not allow request-based DM to stack on partitions
+ PM / devfreq: tegra30: Fix integer overflow on CPU's freq max out
+ scsi: fnic: fix use after free
+ powerpc/64s: Always disable branch profiling for prom_init.o
+ net: silence data-races on sk_backlog.tail
+ dax: Fix alloc_dax_region() compile warning
+ iomap: Fix overflow in iomap_page_mkwrite
+ f2fs: avoid kernel panic on corruption test
+ clk/ti/adpll: allocate room for terminating null
+ drm/amdgpu/powerplay: fix AVFS handling with custom powerplay table
+ ice: Fix to change Rx/Tx ring descriptor size via ethtool with DCBx
+ mtd: cfi_cmdset_0002: don't free cfi->cfiq in error path of cfi_amdstd_setup()
+ mfd: mfd-core: Protect against NULL call-back function pointer
+ drm/amdgpu/powerplay/smu7: fix AVFS handling with custom powerplay table
+ tpm_crb: fix fTPM on AMD Zen+ CPUs
+ tracing: Verify if trace array exists before destroying it.
+ tracing: Adding NULL checks for trace_array descriptor pointer
+ bcache: fix a lost wake-up problem caused by mca_cannibalize_lock
+ dmaengine: mediatek: hsdma_probe: fixed a memory leak when devm_request_irq
fails
+ x86/kdump: Always reserve the low 1M when the crashkernel option is specified
+ RDMA/qedr: Fix potential use after free
+ RDMA/i40iw: Fix potential use after free
+ PCI: Avoid double hpmemsize MMIO window assignment
+ fix dget_parent() fastpath race
+ xfs: fix attr leaf header freemap.size underflow
+ RDMA/iw_cgxb4: Fix an error handling path in 'c4iw_connect()'
+ ubi: Fix producing anchor PEBs
+ mmc: core: Fix size overflow for mmc partitions
+ gfs2: clean up iopen glock mess in gfs2_create_inode
+ scsi: pm80xx: Cleanup command when a reset times out
+ mt76: do not use devm API for led classdev
+ mt76: add missing locking around ampdu action
+ debugfs: Fix !DEBUG_FS debugfs_create_automount
+ SUNRPC: Capture completion of all RPC tasks
+ CIFS: Use common error handling code in smb2_ioctl_query_info()
+ CIFS: Properly process SMB3 lease breaks
+ f2fs: stop GC when the victim becomes fully valid
+ ASoC: max98090: remove msleep in PLL unlocked workaround
+ xtensa: fix system_call interaction with ptrace
+ s390: avoid misusing CALL_ON_STACK for task stack setup
+ xfs: fix realtime file data space leak
+ drm/amdgpu: fix calltrace during kmd unload(v3)
+ arm64: insn: consistently handle exit text
+ selftests/bpf: De-flake test_tcpbpf
+ kernel/notifier.c: intercept duplicate registrations to avoid infinite loops
+ kernel/sys.c: avoid copying possible padding bytes in copy_to_user
+ KVM: arm/arm64: vgic: Fix potential double free dist->spis in
__kvm_vgic_destroy()
+ module: Remove accidental change of module_enable_x()
+ xfs: fix log reservation overflows when allocating large rt extents
+ ALSA: hda: enable regmap internal locking
+ tipc: fix link overflow issue at socket shutdown
+ vcc_seq_next should increase position index
+ neigh_stat_seq_next() should increase position index
+ rt_cpu_seq_next should increase position index
+ ipv6_route_seq_next should increase position index
+ drm/mcde: Handle pending vblank while disabling display
+ seqlock: Require WRITE_ONCE surrounding raw_seqcount_barrier
+ drm/scheduler: Avoid accessing freed bad job.
+ media: ti-vpe: cal: Restrict DMA to avoid memory corruption
+ opp: Replace list_kref with a local counter
+ scsi: qla2xxx: Fix stuck session in GNL
+ sctp: move trace_sctp_probe_path into sctp_outq_sack
+ ACPI: EC: Reference count query handlers under lock
+ scsi: ufs: Make ufshcd_add_command_trace() easier to read
+ scsi: ufs: Fix a race condition in the tracing code
+ drm/amd/display: Initialize DSC PPS variables to 0
+ i2c: tegra: Prevent interrupt triggering after transfer timeout
+ btrfs: tree-checker: Check leaf chunk item size
+ dmaengine: zynqmp_dma: fix burst length configuration
+ s390/cpum_sf: Use kzalloc and minor changes
+ nfsd: Fix a soft lockup race in nfsd_file_mark_find_or_create()
+ powerpc/eeh: Only dump stack once if an MMIO loop is detected
+ Bluetooth: btrtl: Use kvmalloc for FW allocations
+ tracing: Set kernel_stack's caller size properly
+ ARM: 8948/1: Prevent OOB access in stacktrace
+ ar5523: Add USB ID of SMCWUSBT-G2 wireless adapter
+ ceph: ensure we have a new cap before continuing in fill_inode
+ selftests/ftrace: fix glob selftest
+ tools/power/x86/intel_pstate_tracer: changes for python 3 compatibility
+ Bluetooth: Fix refcount use-after-free issue
+ mm/swapfile.c: swap_next should increase position index
+ mm: pagewalk: fix termination condition in walk_pte_range()
+ Bluetooth: prefetch channel before killing sock
+ ALSA: hda: Clear RIRB status before reading WP
+ skbuff: fix a data race in skb_queue_len()
+ nfsd: Fix a perf warning
+ drm/amd/display: fix workaround for incorrect double buffer register for DLG
ADL and TTU
+ audit: CONFIG_CHANGE don't log internal bookkeeping as an event
+ selinux: sel_avc_get_stat_idx should increase position index
+ drm/omap: fix possible object reference leak
+ locking/lockdep: Decrement IRQ context counters when removing lock chain
+ clk: stratix10: use do_div() for 64-bit calculation
+ crypto: chelsio - This fixes the kernel panic which occurs during a libkcapi
test
+ mt76: clear skb pointers from rx aggregation reorder buffer during cleanup
+ mt76: fix handling full tx queues in mt76_dma_tx_queue_skb_raw
+ ALSA: usb-audio: Don't create a mixer element with bogus volume range
+ perf test: Fix test trace+probe_vfs_getname.sh on s390
+ RDMA/rxe: Fix configuration of atomic queue pair attributes
+ KVM: x86: fix incorrect comparison in trace event
+ KVM: nVMX: Hold KVM's srcu lock when syncing vmcs12->shadow
+ dmaengine: stm32-mdma: use vchan_terminate_vdesc() in .terminate_all
+ media: staging/imx: Missing assignment in imx_media_capture_device_register()
+ x86/pkeys: Add check for pkey "overflow"
+ bpf: Remove recursion prevention from rcu free callback
+ dmaengine: stm32-dma: use vchan_terminate_vdesc() in .terminate_all
+ dmaengine: tegra-apb: Prevent race conditions on channel's freeing
+ soundwire: bus: disable pm_runtime in sdw_slave_delete
+ drm/amd/display: dal_ddc_i2c_payloads_create can fail causing panic
+ drm/omap: dss: Cleanup DSS ports on initialisation failure
+ iavf: use tc_cls_can_offload_and_chain0() instead of chain check
+ firmware: arm_sdei: Use cpus_read_lock() to avoid races with cpuhp
+ random: fix data races at timer_rand_state
+ bus: hisi_lpc: Fixup IO ports addresses to avoid use-after-free in host
removal
+ ASoC: SOF: ipc: check ipc return value before data copy
+ media: go7007: Fix URB type for interrupt handling
+ Bluetooth: guard against controllers sending zero'd events
+ timekeeping: Prevent 32bit truncation in scale64_check_overflow()
+ powerpc/book3s64: Fix error handling in mm_iommu_do_alloc()
+ drm/amd/display: fix image corruption with ODM 2:1 DSC 2 slice
+ ext4: fix a data race at inode->i_disksize
+ perf jevents: Fix leak of mapfile memory
+ mm: avoid data corruption on CoW fault into PFN-mapped VMA
+ drm/amdgpu: increase atombios cmd timeout
+ ARM: OMAP2+: Handle errors for cpu_pm
+ clk: imx: Fix division by zero warning on pfdv2
+ cpu-topology: Fix the potential data corruption
+ s390/irq: replace setup_irq() by request_irq()
+ perf cs-etm: Swap packets for instruction samples
+ perf cs-etm: Correct synthesizing instruction samples
+ ath10k: use kzalloc to read for ath10k_sdio_hif_diag_read
+ scsi: aacraid: Disabling TM path and only processing IOP reset
+ Bluetooth: L2CAP: handle l2cap config request during open state
+ media: tda10071: fix unsigned sign extension overflow
+ tty: sifive: Finish transmission before changing the clock
+ xfs: don't ever return a stale pointer from __xfs_dir3_free_read
+ xfs: mark dir corrupt when lookup-by-hash fails
+ ext4: mark block bitmap corrupted when found instead of BUGON
+ tpm: ibmvtpm: Wait for buffer to be set before proceeding
+ rtc: sa1100: fix possible race condition
+ rtc: ds1374: fix possible race condition
+ nfsd: Don't add locks to closed or closing open stateids
+ RDMA/cm: Remove a race freeing timewait_info
+ intel_th: Disallow multi mode on devices where it's broken
+ KVM: PPC: Book3S HV: Treat TM-related invalid form instructions on P9 like
the valid ones
+ drm/msm: fix leaks if initialization fails
+ drm/msm/a5xx: Always set an OPP supported hardware value
+ tracing: Use address-of operator on section symbols
+ thermal: rcar_thermal: Handle probe error gracefully
+ KVM: LAPIC: Mark hrtimer for period or oneshot mode to expire in hard
interrupt context
+ perf parse-events: Fix 3 use after frees found with clang ASAN
+ btrfs: do not init a reloc root if we aren't relocating
+ btrfs: free the reloc_control in a consistent way
+ r8169: improve RTL8168b FIFO overflow workaround
+ serial: 8250_port: Don't service RX FIFO if throttled
+ serial: 8250_omap: Fix sleeping function called from invalid context during
probe
+ serial: 8250: 8250_omap: Terminate DMA before pushing data on RX timeout
+ perf cpumap: Fix snprintf overflow check
+ net: axienet: Convert DMA error handler to a work queue
+ net: axienet: Propagate failure of DMA descriptor setup
+ cpufreq: powernv: Fix frame-size-overflow in powernv_cpufreq_work_fn
+ tools: gpio-hammer: Avoid potential overflow in main
+ exec: Add exec_update_mutex to replace cred_guard_mutex
+ exec: Fix a deadlock in strace
+ selftests/ptrace: add test cases for dead-locks
+ kernel/kcmp.c: Use new infrastructure to fix deadlocks in execve
+ proc: Use new infrastructure to fix deadlocks in execve
+ proc: io_accounting: Use new infrastructure to fix deadlocks in execve
+ perf: Use new infrastructure to fix deadlocks in execve
+ nvme-multipath: do not reset on unknown status
+ nvme: Fix ctrl use-after-free during sysfs deletion
+ nvme: Fix controller creation races with teardown flow
+ brcmfmac: Fix double freeing in the fmac usb data path
+ xfs: prohibit fs freezing when using empty transactions
+ RDMA/rxe: Set sys_image_guid to be aligned with HW IB devices
+ IB/iser: Always check sig MR before putting it to the free pool
+ scsi: hpsa: correct race condition in offload enabled
+ SUNRPC: Fix a potential buffer overflow in 'svc_print_xprts()'
+ svcrdma: Fix leak of transport addresses
+ netfilter: nf_tables: silence a RCU-list warning in nft_table_lookup()
+ PCI: Use ioremap(), not phys_to_virt() for platform ROM
+ ubifs: ubifs_jnl_write_inode: Fix a memory leak bug
+ ubifs: ubifs_add_orphan: Fix a memory leak bug
+ ubifs: Fix out-of-bounds memory access caused by abnormal value of node_len
+ ALSA: usb-audio: Fix case when USB MIDI interface has more than one extra
endpoint descriptor
+ PCI: pciehp: Fix MSI interrupt race
+ NFS: Fix races nfs_page_group_destroy() vs nfs_destroy_unlinked_subrequests()
+ drm/amdgpu/vcn2.0: stall DPG when WPTR/RPTR reset
+ powerpc/perf: Implement a global lock to avoid races between trace, core and
thread imc events.
+ mm/kmemleak.c: use address-of operator on section symbols
+ mm/filemap.c: clear page error before actual read
+ mm/swapfile: fix data races in try_to_unuse()
+ mm/vmscan.c: fix data races using kswapd_classzone_idx
+ SUNRPC: Don't start a timer on an already queued rpc task
+ nvmet-rdma: fix double free of rdma queue
+ workqueue: Remove the warning in wq_worker_sleeping()
+ drm/amdgpu/sriov add amdgpu_amdkfd_pre_reset in gpu reset
+ mm/mmap.c: initialize align_offset explicitly for vm_unmapped_area
+ ALSA: hda: Skip controller resume if not needed
+ scsi: qedi: Fix termination timeouts in session logout
+ serial: uartps: Wait for tx_empty in console setup
+ btrfs: fix setting last_trans for reloc roots
+ KVM: Remove CREATE_IRQCHIP/SET_PIT2 race
+ perf stat: Force error in fallback on :k events
+ bdev: Reduce time holding bd_mutex in sync in blkdev_close()
+ drivers: char: tlclk.c: Avoid data race between init and interrupt handler
+ KVM: arm64: vgic-v3: Retire all pending LPIs on vcpu destroy
+ KVM: arm64: vgic-its: Fix memory leak on the error path of vgic_add_lpi()
+ net: openvswitch: use u64 for meter bucket
+ scsi: aacraid: Fix error handling paths in aac_probe_one()
+ staging:r8188eu: avoid skb_clone for amsdu to msdu conversion
+ sparc64: vcc: Fix error return code in vcc_probe()
+ arm64: cpufeature: Relax checks for AArch32 support at EL[0-2]
+ sched/fair: Eliminate bandwidth race between throttling and distribution
+ dpaa2-eth: fix error return code in setup_dpni()
+ dt-bindings: sound: wm8994: Correct required supplies based on actual
implementaion
+ devlink: Fix reporter's recovery condition
+ atm: fix a memory leak of vcc->user_back
+ media: venus: vdec: Init registered list unconditionally
+ perf mem2node: Avoid double free related to realloc
+ mm/slub: fix incorrect interpretation of s->offset
+ i2c: tegra: Restore pinmux on system resume
+ power: supply: max17040: Correct voltage reading
+ phy: samsung: s5pv210-usb2: Add delay after reset
+ Bluetooth: Handle Inquiry Cancel error after Inquiry Complete
+ USB: EHCI: ehci-mv: fix error handling in mv_ehci_probe()
+ KVM: x86: handle wrap around 32-bit address space
+ tipc: fix memory leak in service subscripting
+ tty: serial: samsung: Correct clock selection logic
+ ALSA: hda: Fix potential race in unsol event handler
+ drm/exynos: dsi: Remove bridge node reference in error handling path in probe
function
+ ipmi:bt-bmc: Fix error handling and status check
+ powerpc/traps: Make unrecoverable NMIs die instead of panic
+ svcrdma: Fix backchannel return code
+ fuse: don't check refcount after stealing page
+ fuse: update attr_version counter on fuse_notify_inval_inode()
+ USB: EHCI: ehci-mv: fix less than zero comparison of an unsigned int
+ coresight: etm4x: Fix use-after-free of per-cpu etm drvdata
+ arm64: acpi: Make apei_claim_sea() synchronise with APEI's irq work
+ scsi: cxlflash: Fix error return code in cxlflash_probe()
+ arm64/cpufeature: Drop TraceFilt feature exposure from ID_DFR0 register
+ drm/amdkfd: fix restore worker race condition
+ e1000: Do not perform reset in reset_task if we are already down
+ drm/nouveau/debugfs: fix runtime pm imbalance on error
+ drm/nouveau: fix runtime pm imbalance on error
+ drm/nouveau/dispnv50: fix runtime pm imbalance on error
+ printk: handle blank console arguments passed in.
+ usb: dwc3: Increase timeout for CmdAct cleared by device controller
+ btrfs: don't force read-only after error in drop snapshot
+ btrfs: fix double __endio_write_update_ordered in direct I/O
+ gpio: rcar: Fix runtime PM imbalance on error
+ vfio/pci: fix memory leaks of eventfd ctx
+ KVM: PPC: Book3S HV: Close race with page faults around memslot flushes
+ perf evsel: Fix 2 memory leaks
+ perf trace: Fix the selection for architectures to generate the errno name
tables
+ perf stat: Fix duration_time value for higher intervals
+ perf util: Fix memory leak of prefix_if_not_in
+ perf metricgroup: Free metric_events on error
+ perf kcore_copy: Fix module map when there are no modules loaded
+ PCI: tegra194: Fix runtime PM imbalance on error
+ ASoC: img-i2s-out: Fix runtime PM imbalance on error
+ wlcore: fix runtime pm imbalance in wl1271_tx_work
+ wlcore: fix runtime pm imbalance in wlcore_regdomain_config
+ mtd: rawnand: gpmi: Fix runtime PM imbalance on error
+ mtd: rawnand: omap_elm: Fix runtime PM imbalance on error
+ PCI: tegra: Fix runtime PM imbalance on error
+ ceph: fix potential race in ceph_check_caps
+ mm/swap_state: fix a data race in swapin_nr_pages
+ mm: memcontrol: fix stat-corrupting race in charge moving
+ rapidio: avoid data race between file operation callbacks and
mport_cdev_add().
+ mtd: parser: cmdline: Support MTD names containing one or more colons
+ x86/speculation/mds: Mark mds_user_clear_cpu_buffers() __always_inline
+ NFS: nfs_xdr_status should record the procedure name
+ vfio/pci: Clear error and request eventfd ctx after releasing
+ cifs: Fix double add page to memcg when cifs_readpages
+ nvme: fix possible deadlock when I/O is blocked
+ mac80211: skip mpath lookup also for control port tx
+ scsi: libfc: Handling of extra kref
+ scsi: libfc: Skip additional kref updating work event
+ selftests/x86/syscall_nt: Clear weird flags after each test
+ vfio/pci: fix racy on error and request eventfd ctx
+ btrfs: qgroup: fix data leak caused by race between writeback and truncate
+ perf tests: Fix test 68 zstd compression for s390
+ scsi: qla2xxx: Retry PLOGI on FC-NVMe PRLI failure
+ ubi: fastmap: Free unused fastmap anchor peb during detach
+ mt76: fix LED link time failure
+ opp: Increase parsed_static_opps in _of_add_opp_table_v1()
+ perf parse-events: Use strcmp() to compare the PMU name
+ ALSA: hda: Always use jackpoll helper for jack update after resume
+ ALSA: hda: Workaround for spurious wakeups on some Intel platforms
+ net: openvswitch: use div_u64() for 64-by-32 divisions
+ nvme: explicitly update mpath disk capacity on revalidation
+ device_cgroup: Fix RCU list debugging warning
+ ASoC: pcm3168a: ignore 0 Hz settings
+ ASoC: wm8994: Skip setting of the WM8994_MICBIAS register for WM1811
+ ASoC: wm8994: Ensure the device is resumed in wm89xx_mic_detect functions
+ ASoC: Intel: bytcr_rt5640: Add quirk for MPMAN Converter9 2-in-1
+ RISC-V: Take text_mutex in ftrace_init_nop()
+ i2c: aspeed: Mask IRQ status to relevant bits
+ s390/init: add missing __init annotations
+ lockdep: fix order in trace_hardirqs_off_caller()
+ EDAC/ghes: Check whether the driver is on the safe list correctly
+ drm/amdkfd: fix a memory leak issue
+ drm/amd/display: update nv1x stutter latencies
+ drm/amdgpu/dc: Require primary plane to be enabled whenever the CRTC is
+ objtool: Fix noreturn detection for ignored functions
+ ieee802154: fix one possible memleak in ca8210_dev_com_init
+ ieee802154/adf7242: check status of adf7242_read_reg
+ clocksource/drivers/h8300_timer8: Fix wrong return value in
h8300_8timer_init()
+ batman-adv: bla: fix type misuse for backbone_gw hash indexing
+ atm: eni: fix the missed pci_disable_device() for eni_init_one()
+ batman-adv: mcast/TT: fix wrongly dropped or rerouted packets
+ netfilter: conntrack: nf_conncount_init is failing with IPv6 disabled
+ mac802154: tx: fix use-after-free
+ bpf: Fix clobbering of r2 in bpf_gen_ld_abs
+ drm/vc4/vc4_hdmi: fill ASoC card owner
+ net: qed: Disable aRFS for NPAR and 100G
+ net: qede: Disable aRFS for NPAR and 100G
+ net: qed: RDMA personality shouldn't fail VF load
+ drm/sun4i: sun8i-csc: Secondary CSC register correction
+ batman-adv: Add missing include for in_interrupt()
+ nvme-tcp: fix kconfig dependency warning when !CRYPTO
+ batman-adv: mcast: fix duplicate mcast packets in BLA backbone from LAN
+ batman-adv: mcast: fix duplicate mcast packets in BLA backbone from mesh
+ batman-adv: mcast: fix duplicate mcast packets from BLA backbone to mesh
+ bpf: Fix a rcu warning for bpffs map pretty-print
+ lib80211: fix unmet direct dependendices config warning when !CRYPTO
+ ALSA: asihpi: fix iounmap in error handler
+ regmap: fix page selection for noinc reads
+ regmap: fix page selection for noinc writes
+ MIPS: Add the missing 'CPU_1074K' into __get_cpu_type()
+ regulator: axp20x: fix LDO2/4 description
+ KVM: x86: Reset MMU context if guest toggles CR4.SMAP or CR4.PKE
+ KVM: SVM: Add a dedicated INVD intercept routine
+ mm: validate pmd after splitting
+ arch/x86/lib/usercopy_64.c: fix __copy_user_flushcache() cache writeback
+ x86/ioapic: Unbreak check_timer()
+ scsi: lpfc: Fix initial FLOGI failure due to BBSCN not supported
+ ALSA: usb-audio: Add delay quirk for H570e USB headsets
+ ALSA: hda/realtek - Couldn't detect Mic if booting with headset plugged
+ ALSA: hda/realtek: Enable front panel headset LED on Lenovo ThinkStation P520
+ lib/string.c: implement stpcpy
+ tracing: fix double free
+ s390/dasd: Fix zero write for FBA devices
+ kprobes: Fix to check probe enabled before disarm_kprobe_ftrace()
+ kprobes: tracing/kprobes: Fix to kill kprobes on initmem after boot
+ btrfs: fix overflow when copying corrupt csums for a message
+ dmabuf: fix NULL pointer dereference in dma_buf_release()
+ mm, THP, swap: fix allocating cluster for swapfile by mistake
+ mm/gup: fix gup_fast with dynamic page table folding
+ s390/zcrypt: Fix ZCRYPT_PERDEV_REQCNT ioctl
+ KVM: arm64: Assume write fault on S1PTW permission fault on instruction fetch
+ dm: fix bio splitting and its bio completion order for regular IO
+ ata: define AC_ERR_OK
+ ata: make qc_prep return ata_completion_errors
+ ata: sata_mv, avoid trigerrable BUG_ON
+ Linux 5.4.69
+ UBUNTU: upstream stable to v5.4.69
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1900624
Title:
Focal update: v5.4.69 upstream stable release
Status in linux package in Ubuntu:
Confirmed
Status in linux source package in Focal:
In Progress
Bug description:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
v5.4.69 upstream stable release
from git://git.kernel.org/
kernel/sysctl-test: Add null pointer test for sysctl.c:proc_dointvec()
selinux: allow labeling before policy is loaded
media: mc-device.c: fix memleak in media_device_register_entity
drm/amd/display: Do not double-buffer DTO adjustments
drm/amdkfd: Fix race in gfx10 context restore handler
dma-fence: Serialise signal enabling (dma_fence_enable_sw_signaling)
scsi: qla2xxx: Add error handling for PLOGI ELS passthrough
ath10k: fix array out-of-bounds access
ath10k: fix memory leak for tpc_stats_final
PCI/IOV: Serialize sysfs sriov_numvfs reads vs writes
mm: fix double page fault on arm64 if PTE_AF is cleared
scsi: aacraid: fix illegal IO beyond last LBA
m68k: q40: Fix info-leak in rtc_ioctl
xfs: fix inode fork extent count overflow
gma/gma500: fix a memory disclosure bug due to uninitialized bytes
ASoC: kirkwood: fix IRQ error handling
soundwire: intel/cadence: fix startup sequence
media: smiapp: Fix error handling at NVM reading
drm/amd/display: Free gamma after calculating legacy transfer function
xfs: properly serialise fallocate against AIO+DIO
leds: mlxreg: Fix possible buffer overflow
dm table: do not allow request-based DM to stack on partitions
PM / devfreq: tegra30: Fix integer overflow on CPU's freq max out
scsi: fnic: fix use after free
powerpc/64s: Always disable branch profiling for prom_init.o
net: silence data-races on sk_backlog.tail
dax: Fix alloc_dax_region() compile warning
iomap: Fix overflow in iomap_page_mkwrite
f2fs: avoid kernel panic on corruption test
clk/ti/adpll: allocate room for terminating null
drm/amdgpu/powerplay: fix AVFS handling with custom powerplay table
ice: Fix to change Rx/Tx ring descriptor size via ethtool with DCBx
mtd: cfi_cmdset_0002: don't free cfi->cfiq in error path of cfi_amdstd_setup()
mfd: mfd-core: Protect against NULL call-back function pointer
drm/amdgpu/powerplay/smu7: fix AVFS handling with custom powerplay table
tpm_crb: fix fTPM on AMD Zen+ CPUs
tracing: Verify if trace array exists before destroying it.
tracing: Adding NULL checks for trace_array descriptor pointer
bcache: fix a lost wake-up problem caused by mca_cannibalize_lock
dmaengine: mediatek: hsdma_probe: fixed a memory leak when devm_request_irq
fails
x86/kdump: Always reserve the low 1M when the crashkernel option is specified
RDMA/qedr: Fix potential use after free
RDMA/i40iw: Fix potential use after free
PCI: Avoid double hpmemsize MMIO window assignment
fix dget_parent() fastpath race
xfs: fix attr leaf header freemap.size underflow
RDMA/iw_cgxb4: Fix an error handling path in 'c4iw_connect()'
ubi: Fix producing anchor PEBs
mmc: core: Fix size overflow for mmc partitions
gfs2: clean up iopen glock mess in gfs2_create_inode
scsi: pm80xx: Cleanup command when a reset times out
mt76: do not use devm API for led classdev
mt76: add missing locking around ampdu action
debugfs: Fix !DEBUG_FS debugfs_create_automount
SUNRPC: Capture completion of all RPC tasks
CIFS: Use common error handling code in smb2_ioctl_query_info()
CIFS: Properly process SMB3 lease breaks
f2fs: stop GC when the victim becomes fully valid
ASoC: max98090: remove msleep in PLL unlocked workaround
xtensa: fix system_call interaction with ptrace
s390: avoid misusing CALL_ON_STACK for task stack setup
xfs: fix realtime file data space leak
drm/amdgpu: fix calltrace during kmd unload(v3)
arm64: insn: consistently handle exit text
selftests/bpf: De-flake test_tcpbpf
kernel/notifier.c: intercept duplicate registrations to avoid infinite loops
kernel/sys.c: avoid copying possible padding bytes in copy_to_user
KVM: arm/arm64: vgic: Fix potential double free dist->spis in
__kvm_vgic_destroy()
module: Remove accidental change of module_enable_x()
xfs: fix log reservation overflows when allocating large rt extents
ALSA: hda: enable regmap internal locking
tipc: fix link overflow issue at socket shutdown
vcc_seq_next should increase position index
neigh_stat_seq_next() should increase position index
rt_cpu_seq_next should increase position index
ipv6_route_seq_next should increase position index
drm/mcde: Handle pending vblank while disabling display
seqlock: Require WRITE_ONCE surrounding raw_seqcount_barrier
drm/scheduler: Avoid accessing freed bad job.
media: ti-vpe: cal: Restrict DMA to avoid memory corruption
opp: Replace list_kref with a local counter
scsi: qla2xxx: Fix stuck session in GNL
sctp: move trace_sctp_probe_path into sctp_outq_sack
ACPI: EC: Reference count query handlers under lock
scsi: ufs: Make ufshcd_add_command_trace() easier to read
scsi: ufs: Fix a race condition in the tracing code
drm/amd/display: Initialize DSC PPS variables to 0
i2c: tegra: Prevent interrupt triggering after transfer timeout
btrfs: tree-checker: Check leaf chunk item size
dmaengine: zynqmp_dma: fix burst length configuration
s390/cpum_sf: Use kzalloc and minor changes
nfsd: Fix a soft lockup race in nfsd_file_mark_find_or_create()
powerpc/eeh: Only dump stack once if an MMIO loop is detected
Bluetooth: btrtl: Use kvmalloc for FW allocations
tracing: Set kernel_stack's caller size properly
ARM: 8948/1: Prevent OOB access in stacktrace
ar5523: Add USB ID of SMCWUSBT-G2 wireless adapter
ceph: ensure we have a new cap before continuing in fill_inode
selftests/ftrace: fix glob selftest
tools/power/x86/intel_pstate_tracer: changes for python 3 compatibility
Bluetooth: Fix refcount use-after-free issue
mm/swapfile.c: swap_next should increase position index
mm: pagewalk: fix termination condition in walk_pte_range()
Bluetooth: prefetch channel before killing sock
ALSA: hda: Clear RIRB status before reading WP
skbuff: fix a data race in skb_queue_len()
nfsd: Fix a perf warning
drm/amd/display: fix workaround for incorrect double buffer register for DLG
ADL and TTU
audit: CONFIG_CHANGE don't log internal bookkeeping as an event
selinux: sel_avc_get_stat_idx should increase position index
drm/omap: fix possible object reference leak
locking/lockdep: Decrement IRQ context counters when removing lock chain
clk: stratix10: use do_div() for 64-bit calculation
crypto: chelsio - This fixes the kernel panic which occurs during a libkcapi
test
mt76: clear skb pointers from rx aggregation reorder buffer during cleanup
mt76: fix handling full tx queues in mt76_dma_tx_queue_skb_raw
ALSA: usb-audio: Don't create a mixer element with bogus volume range
perf test: Fix test trace+probe_vfs_getname.sh on s390
RDMA/rxe: Fix configuration of atomic queue pair attributes
KVM: x86: fix incorrect comparison in trace event
KVM: nVMX: Hold KVM's srcu lock when syncing vmcs12->shadow
dmaengine: stm32-mdma: use vchan_terminate_vdesc() in .terminate_all
media: staging/imx: Missing assignment in imx_media_capture_device_register()
x86/pkeys: Add check for pkey "overflow"
bpf: Remove recursion prevention from rcu free callback
dmaengine: stm32-dma: use vchan_terminate_vdesc() in .terminate_all
dmaengine: tegra-apb: Prevent race conditions on channel's freeing
soundwire: bus: disable pm_runtime in sdw_slave_delete
drm/amd/display: dal_ddc_i2c_payloads_create can fail causing panic
drm/omap: dss: Cleanup DSS ports on initialisation failure
iavf: use tc_cls_can_offload_and_chain0() instead of chain check
firmware: arm_sdei: Use cpus_read_lock() to avoid races with cpuhp
random: fix data races at timer_rand_state
bus: hisi_lpc: Fixup IO ports addresses to avoid use-after-free in host
removal
ASoC: SOF: ipc: check ipc return value before data copy
media: go7007: Fix URB type for interrupt handling
Bluetooth: guard against controllers sending zero'd events
timekeeping: Prevent 32bit truncation in scale64_check_overflow()
powerpc/book3s64: Fix error handling in mm_iommu_do_alloc()
drm/amd/display: fix image corruption with ODM 2:1 DSC 2 slice
ext4: fix a data race at inode->i_disksize
perf jevents: Fix leak of mapfile memory
mm: avoid data corruption on CoW fault into PFN-mapped VMA
drm/amdgpu: increase atombios cmd timeout
ARM: OMAP2+: Handle errors for cpu_pm
clk: imx: Fix division by zero warning on pfdv2
cpu-topology: Fix the potential data corruption
s390/irq: replace setup_irq() by request_irq()
perf cs-etm: Swap packets for instruction samples
perf cs-etm: Correct synthesizing instruction samples
ath10k: use kzalloc to read for ath10k_sdio_hif_diag_read
scsi: aacraid: Disabling TM path and only processing IOP reset
Bluetooth: L2CAP: handle l2cap config request during open state
media: tda10071: fix unsigned sign extension overflow
tty: sifive: Finish transmission before changing the clock
xfs: don't ever return a stale pointer from __xfs_dir3_free_read
xfs: mark dir corrupt when lookup-by-hash fails
ext4: mark block bitmap corrupted when found instead of BUGON
tpm: ibmvtpm: Wait for buffer to be set before proceeding
rtc: sa1100: fix possible race condition
rtc: ds1374: fix possible race condition
nfsd: Don't add locks to closed or closing open stateids
RDMA/cm: Remove a race freeing timewait_info
intel_th: Disallow multi mode on devices where it's broken
KVM: PPC: Book3S HV: Treat TM-related invalid form instructions on P9 like
the valid ones
drm/msm: fix leaks if initialization fails
drm/msm/a5xx: Always set an OPP supported hardware value
tracing: Use address-of operator on section symbols
thermal: rcar_thermal: Handle probe error gracefully
KVM: LAPIC: Mark hrtimer for period or oneshot mode to expire in hard
interrupt context
perf parse-events: Fix 3 use after frees found with clang ASAN
btrfs: do not init a reloc root if we aren't relocating
btrfs: free the reloc_control in a consistent way
r8169: improve RTL8168b FIFO overflow workaround
serial: 8250_port: Don't service RX FIFO if throttled
serial: 8250_omap: Fix sleeping function called from invalid context during
probe
serial: 8250: 8250_omap: Terminate DMA before pushing data on RX timeout
perf cpumap: Fix snprintf overflow check
net: axienet: Convert DMA error handler to a work queue
net: axienet: Propagate failure of DMA descriptor setup
cpufreq: powernv: Fix frame-size-overflow in powernv_cpufreq_work_fn
tools: gpio-hammer: Avoid potential overflow in main
exec: Add exec_update_mutex to replace cred_guard_mutex
exec: Fix a deadlock in strace
selftests/ptrace: add test cases for dead-locks
kernel/kcmp.c: Use new infrastructure to fix deadlocks in execve
proc: Use new infrastructure to fix deadlocks in execve
proc: io_accounting: Use new infrastructure to fix deadlocks in execve
perf: Use new infrastructure to fix deadlocks in execve
nvme-multipath: do not reset on unknown status
nvme: Fix ctrl use-after-free during sysfs deletion
nvme: Fix controller creation races with teardown flow
brcmfmac: Fix double freeing in the fmac usb data path
xfs: prohibit fs freezing when using empty transactions
RDMA/rxe: Set sys_image_guid to be aligned with HW IB devices
IB/iser: Always check sig MR before putting it to the free pool
scsi: hpsa: correct race condition in offload enabled
SUNRPC: Fix a potential buffer overflow in 'svc_print_xprts()'
svcrdma: Fix leak of transport addresses
netfilter: nf_tables: silence a RCU-list warning in nft_table_lookup()
PCI: Use ioremap(), not phys_to_virt() for platform ROM
ubifs: ubifs_jnl_write_inode: Fix a memory leak bug
ubifs: ubifs_add_orphan: Fix a memory leak bug
ubifs: Fix out-of-bounds memory access caused by abnormal value of node_len
ALSA: usb-audio: Fix case when USB MIDI interface has more than one extra
endpoint descriptor
PCI: pciehp: Fix MSI interrupt race
NFS: Fix races nfs_page_group_destroy() vs nfs_destroy_unlinked_subrequests()
drm/amdgpu/vcn2.0: stall DPG when WPTR/RPTR reset
powerpc/perf: Implement a global lock to avoid races between trace, core and
thread imc events.
mm/kmemleak.c: use address-of operator on section symbols
mm/filemap.c: clear page error before actual read
mm/swapfile: fix data races in try_to_unuse()
mm/vmscan.c: fix data races using kswapd_classzone_idx
SUNRPC: Don't start a timer on an already queued rpc task
nvmet-rdma: fix double free of rdma queue
workqueue: Remove the warning in wq_worker_sleeping()
drm/amdgpu/sriov add amdgpu_amdkfd_pre_reset in gpu reset
mm/mmap.c: initialize align_offset explicitly for vm_unmapped_area
ALSA: hda: Skip controller resume if not needed
scsi: qedi: Fix termination timeouts in session logout
serial: uartps: Wait for tx_empty in console setup
btrfs: fix setting last_trans for reloc roots
KVM: Remove CREATE_IRQCHIP/SET_PIT2 race
perf stat: Force error in fallback on :k events
bdev: Reduce time holding bd_mutex in sync in blkdev_close()
drivers: char: tlclk.c: Avoid data race between init and interrupt handler
KVM: arm64: vgic-v3: Retire all pending LPIs on vcpu destroy
KVM: arm64: vgic-its: Fix memory leak on the error path of vgic_add_lpi()
net: openvswitch: use u64 for meter bucket
scsi: aacraid: Fix error handling paths in aac_probe_one()
staging:r8188eu: avoid skb_clone for amsdu to msdu conversion
sparc64: vcc: Fix error return code in vcc_probe()
arm64: cpufeature: Relax checks for AArch32 support at EL[0-2]
sched/fair: Eliminate bandwidth race between throttling and distribution
dpaa2-eth: fix error return code in setup_dpni()
dt-bindings: sound: wm8994: Correct required supplies based on actual
implementaion
devlink: Fix reporter's recovery condition
atm: fix a memory leak of vcc->user_back
media: venus: vdec: Init registered list unconditionally
perf mem2node: Avoid double free related to realloc
mm/slub: fix incorrect interpretation of s->offset
i2c: tegra: Restore pinmux on system resume
power: supply: max17040: Correct voltage reading
phy: samsung: s5pv210-usb2: Add delay after reset
Bluetooth: Handle Inquiry Cancel error after Inquiry Complete
USB: EHCI: ehci-mv: fix error handling in mv_ehci_probe()
KVM: x86: handle wrap around 32-bit address space
tipc: fix memory leak in service subscripting
tty: serial: samsung: Correct clock selection logic
ALSA: hda: Fix potential race in unsol event handler
drm/exynos: dsi: Remove bridge node reference in error handling path in probe
function
ipmi:bt-bmc: Fix error handling and status check
powerpc/traps: Make unrecoverable NMIs die instead of panic
svcrdma: Fix backchannel return code
fuse: don't check refcount after stealing page
fuse: update attr_version counter on fuse_notify_inval_inode()
USB: EHCI: ehci-mv: fix less than zero comparison of an unsigned int
coresight: etm4x: Fix use-after-free of per-cpu etm drvdata
arm64: acpi: Make apei_claim_sea() synchronise with APEI's irq work
scsi: cxlflash: Fix error return code in cxlflash_probe()
arm64/cpufeature: Drop TraceFilt feature exposure from ID_DFR0 register
drm/amdkfd: fix restore worker race condition
e1000: Do not perform reset in reset_task if we are already down
drm/nouveau/debugfs: fix runtime pm imbalance on error
drm/nouveau: fix runtime pm imbalance on error
drm/nouveau/dispnv50: fix runtime pm imbalance on error
printk: handle blank console arguments passed in.
usb: dwc3: Increase timeout for CmdAct cleared by device controller
btrfs: don't force read-only after error in drop snapshot
btrfs: fix double __endio_write_update_ordered in direct I/O
gpio: rcar: Fix runtime PM imbalance on error
vfio/pci: fix memory leaks of eventfd ctx
KVM: PPC: Book3S HV: Close race with page faults around memslot flushes
perf evsel: Fix 2 memory leaks
perf trace: Fix the selection for architectures to generate the errno name
tables
perf stat: Fix duration_time value for higher intervals
perf util: Fix memory leak of prefix_if_not_in
perf metricgroup: Free metric_events on error
perf kcore_copy: Fix module map when there are no modules loaded
PCI: tegra194: Fix runtime PM imbalance on error
ASoC: img-i2s-out: Fix runtime PM imbalance on error
wlcore: fix runtime pm imbalance in wl1271_tx_work
wlcore: fix runtime pm imbalance in wlcore_regdomain_config
mtd: rawnand: gpmi: Fix runtime PM imbalance on error
mtd: rawnand: omap_elm: Fix runtime PM imbalance on error
PCI: tegra: Fix runtime PM imbalance on error
ceph: fix potential race in ceph_check_caps
mm/swap_state: fix a data race in swapin_nr_pages
mm: memcontrol: fix stat-corrupting race in charge moving
rapidio: avoid data race between file operation callbacks and
mport_cdev_add().
mtd: parser: cmdline: Support MTD names containing one or more colons
x86/speculation/mds: Mark mds_user_clear_cpu_buffers() __always_inline
NFS: nfs_xdr_status should record the procedure name
vfio/pci: Clear error and request eventfd ctx after releasing
cifs: Fix double add page to memcg when cifs_readpages
nvme: fix possible deadlock when I/O is blocked
mac80211: skip mpath lookup also for control port tx
scsi: libfc: Handling of extra kref
scsi: libfc: Skip additional kref updating work event
selftests/x86/syscall_nt: Clear weird flags after each test
vfio/pci: fix racy on error and request eventfd ctx
btrfs: qgroup: fix data leak caused by race between writeback and truncate
perf tests: Fix test 68 zstd compression for s390
scsi: qla2xxx: Retry PLOGI on FC-NVMe PRLI failure
ubi: fastmap: Free unused fastmap anchor peb during detach
mt76: fix LED link time failure
opp: Increase parsed_static_opps in _of_add_opp_table_v1()
perf parse-events: Use strcmp() to compare the PMU name
ALSA: hda: Always use jackpoll helper for jack update after resume
ALSA: hda: Workaround for spurious wakeups on some Intel platforms
net: openvswitch: use div_u64() for 64-by-32 divisions
nvme: explicitly update mpath disk capacity on revalidation
device_cgroup: Fix RCU list debugging warning
ASoC: pcm3168a: ignore 0 Hz settings
ASoC: wm8994: Skip setting of the WM8994_MICBIAS register for WM1811
ASoC: wm8994: Ensure the device is resumed in wm89xx_mic_detect functions
ASoC: Intel: bytcr_rt5640: Add quirk for MPMAN Converter9 2-in-1
RISC-V: Take text_mutex in ftrace_init_nop()
i2c: aspeed: Mask IRQ status to relevant bits
s390/init: add missing __init annotations
lockdep: fix order in trace_hardirqs_off_caller()
EDAC/ghes: Check whether the driver is on the safe list correctly
drm/amdkfd: fix a memory leak issue
drm/amd/display: update nv1x stutter latencies
drm/amdgpu/dc: Require primary plane to be enabled whenever the CRTC is
objtool: Fix noreturn detection for ignored functions
ieee802154: fix one possible memleak in ca8210_dev_com_init
ieee802154/adf7242: check status of adf7242_read_reg
clocksource/drivers/h8300_timer8: Fix wrong return value in
h8300_8timer_init()
batman-adv: bla: fix type misuse for backbone_gw hash indexing
atm: eni: fix the missed pci_disable_device() for eni_init_one()
batman-adv: mcast/TT: fix wrongly dropped or rerouted packets
netfilter: conntrack: nf_conncount_init is failing with IPv6 disabled
mac802154: tx: fix use-after-free
bpf: Fix clobbering of r2 in bpf_gen_ld_abs
drm/vc4/vc4_hdmi: fill ASoC card owner
net: qed: Disable aRFS for NPAR and 100G
net: qede: Disable aRFS for NPAR and 100G
net: qed: RDMA personality shouldn't fail VF load
drm/sun4i: sun8i-csc: Secondary CSC register correction
batman-adv: Add missing include for in_interrupt()
nvme-tcp: fix kconfig dependency warning when !CRYPTO
batman-adv: mcast: fix duplicate mcast packets in BLA backbone from LAN
batman-adv: mcast: fix duplicate mcast packets in BLA backbone from mesh
batman-adv: mcast: fix duplicate mcast packets from BLA backbone to mesh
bpf: Fix a rcu warning for bpffs map pretty-print
lib80211: fix unmet direct dependendices config warning when !CRYPTO
ALSA: asihpi: fix iounmap in error handler
regmap: fix page selection for noinc reads
regmap: fix page selection for noinc writes
MIPS: Add the missing 'CPU_1074K' into __get_cpu_type()
regulator: axp20x: fix LDO2/4 description
KVM: x86: Reset MMU context if guest toggles CR4.SMAP or CR4.PKE
KVM: SVM: Add a dedicated INVD intercept routine
mm: validate pmd after splitting
arch/x86/lib/usercopy_64.c: fix __copy_user_flushcache() cache writeback
x86/ioapic: Unbreak check_timer()
scsi: lpfc: Fix initial FLOGI failure due to BBSCN not supported
ALSA: usb-audio: Add delay quirk for H570e USB headsets
ALSA: hda/realtek - Couldn't detect Mic if booting with headset plugged
ALSA: hda/realtek: Enable front panel headset LED on Lenovo ThinkStation P520
lib/string.c: implement stpcpy
tracing: fix double free
s390/dasd: Fix zero write for FBA devices
kprobes: Fix to check probe enabled before disarm_kprobe_ftrace()
kprobes: tracing/kprobes: Fix to kill kprobes on initmem after boot
btrfs: fix overflow when copying corrupt csums for a message
dmabuf: fix NULL pointer dereference in dma_buf_release()
mm, THP, swap: fix allocating cluster for swapfile by mistake
mm/gup: fix gup_fast with dynamic page table folding
s390/zcrypt: Fix ZCRYPT_PERDEV_REQCNT ioctl
KVM: arm64: Assume write fault on S1PTW permission fault on instruction fetch
dm: fix bio splitting and its bio completion order for regular IO
ata: define AC_ERR_OK
ata: make qc_prep return ata_completion_errors
ata: sata_mv, avoid trigerrable BUG_ON
Linux 5.4.69
UBUNTU: upstream stable to v5.4.69
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1900624/+subscriptions
--
Mailing list: https://launchpad.net/~kernel-packages
Post to : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help : https://help.launchpad.net/ListHelp
