This bug was fixed in the package linux - 5.8.0-45.51
---------------
linux (5.8.0-45.51) groovy; urgency=medium
* groovy/linux: 5.8.0-45.51 -proposed tracker (LP: #1916143)
* Please trust Canonical Livepatch Service kmod signing key (LP: #1898716)
- [Config] enable CONFIG_MODVERSIONS=y
- [Packaging] build canonical-certs.pem from branch/arch certs
- [Config] add Canonical Livepatch Service key to SYSTEM_TRUSTED_KEYS
- [Config] add ubuntu-drivers key to SYSTEM_TRUSTED_KEYS
- [Config] Allow ASM_MODVERSIONS and MODULE_REL_CRCS
* CVE-2021-20194
- bpf, cgroup: Fix optlen WARN_ON_ONCE toctou
- bpf, cgroup: Fix problematic bounds check
* Missing device id for Intel TGL-H ISH [8086:43fc] in intel-ish-hid driver
(LP: #1914543)
- HID: intel-ish-hid: ipc: Add Tiger Lake H PCI device ID
* Prevent thermal shutdown during boot process (LP: #1906168)
- thermal/core: Emit a warning if the thermal zone is updated without ops
- thermal/core: Add critical and hot ops
- thermal/drivers/acpi: Use hot and critical ops
- thermal/drivers/rcar: Remove notification usage
- thermal: int340x: Fix unexpected shutdown at critical temperature
- thermal: intel: pch: Fix unexpected shutdown at critical temperature
* geneve overlay network on vlan interface broken with offload enabled
(LP: #1914447)
- net/mlx5e: Fix SWP offsets when vlan inserted by driver
* Groovy update: upstream stable patchset 2021-02-11 (LP: #1915473)
- net: cdc_ncm: correct overhead in delayed_ndp_size
- net: hns3: fix the number of queues actually used by ARQ
- net: hns3: fix a phy loopback fail issue
- net: stmmac: dwmac-sun8i: Balance internal PHY resource references
- net: stmmac: dwmac-sun8i: Balance internal PHY power
- net: vlan: avoid leaks on register_vlan_dev() failures
- net/sonic: Fix some resource leaks in error handling paths
- net: ipv6: fib: flush exceptions when purging route
- tools: selftests: add test for changing routes with PTMU exceptions
- net: fix pmtu check in nopmtudisc mode
- net: ip: always refragment ip defragmented packets
- octeontx2-af: fix memory leak of lmac and lmac->name
- nexthop: Fix off-by-one error in error path
- nexthop: Unlink nexthop group entry in error path
- s390/qeth: fix L2 header access in qeth_l3_osa_features_check()
- net: dsa: lantiq_gswip: Exclude RMII from modes that report 1 GbE
- net/mlx5: Use port_num 1 instead of 0 when delete a RoCE address
- net/mlx5e: ethtool, Fix restriction of autoneg with 56G
- chtls: Fix hardware tid leak
- chtls: Remove invalid set_tcb call
- chtls: Fix panic when route to peer not configured
- chtls: Replace skb_dequeue with skb_peek
- chtls: Added a check to avoid NULL pointer dereference
- chtls: Fix chtls resources release sequence
- HID: wacom: Fix memory leakage caused by kfifo_alloc
- ARM: OMAP2+: omap_device: fix idling of devices during probe
- i2c: sprd: use a specific timeout to avoid system hang up issue
- dmaengine: dw-edma: Fix use after free in dw_edma_alloc_chunk()
- can: tcan4x5x: fix bittiming const, use common bittiming from m_can driver
- can: m_can: m_can_class_unregister(): remove erroneous m_can_clk_stop()
- can: kvaser_pciefd: select CONFIG_CRC32
- cpufreq: powernow-k8: pass policy rather than use cpufreq_cpu_get()
- spi: stm32: FIFO threshold level - fix align packet size
- i2c: i801: Fix the i2c-mux gpiod_lookup_table not being properly
terminated
- dmaengine: mediatek: mtk-hsdma: Fix a resource leak in the error handling
path of the probe function
- dmaengine: xilinx_dma: check dma_async_device_register return value
- dmaengine: xilinx_dma: fix incompatible param warning in _child_probe()
- dmaengine: xilinx_dma: fix mixed_enum_type coverity warning
- qed: select CONFIG_CRC32
- wil6210: select CONFIG_CRC32
- block: rsxx: select CONFIG_CRC32
- lightnvm: select CONFIG_CRC32
- iommu/intel: Fix memleak in intel_irq_remapping_alloc
- bpftool: Fix compilation failure for net.o with older glibc
- net/mlx5e: Fix memleak in mlx5e_create_l2_table_groups
- net/mlx5e: Fix two double free cases
- regmap: debugfs: Fix a memory leak when calling regmap_attach_dev
- wan: ds26522: select CONFIG_BITREVERSE
- regulator: qcom-rpmh-regulator: correct hfsmps515 definition
- net: mvpp2: disable force link UP during port init procedure
- KVM: arm64: Don't access PMCR_EL0 when no PMU is available
- block: fix use-after-free in disk_part_iter_next
- net: drop bogus skb with CHECKSUM_PARTIAL and offset beyond end of trimmed
packet
- regmap: debugfs: Fix a reversed if statement in regmap_debugfs_init()
- drm/panfrost: Don't corrupt the queue mutex on open/close
- scsi: ufs: Fix -Wsometimes-uninitialized warning
- btrfs: skip unnecessary searches for xattrs when logging an inode
- net: stmmac: dwmac-sun8i: Fix probe error handling
- net: stmmac: dwmac-sun8i: Balance syscon (de)initialization
- net: bareudp: add missing error handling for bareudp_link_config()
- ptp: ptp_ines: prevent build when HAS_IOMEM is not set
- chtls: Avoid unnecessary freeing of oreq pointer
- nexthop: Bounce NHA_GATEWAY in FDB nexthop groups
- net/mlx5e: In skb build skip setting mark in switchdev mode
- ionic: start queues before announcing link up
- fanotify: Fix sys_fanotify_mark() on native x86-32
- spi: spi-geni-qcom: Fix geni_spi_isr() NULL dereference in timeout case
- i2c: mediatek: Fix apdma and i2c hand-shake timeout
- interconnect: imx: Add a missing of_node_put after of_device_is_available
- dmaengine: milbeaut-xdmac: Fix a resource leak in the error handling path
of
the probe function
- arm64: mm: Fix ARCH_LOW_ADDRESS_LIMIT when !CONFIG_ZONE_DMA
- phy: dp83640: select CONFIG_CRC32
- zonefs: select CONFIG_CRC32
- iommu/vt-d: Fix misuse of ALIGN in qi_flush_piotlb()
- nvme-tcp: Fix possible race of io_work and direct send
- arm64: cpufeature: remove non-exist CONFIG_KVM_ARM_HOST
- drm/i915/dp: Track pm_qos per connector
- net: mvneta: fix error message when MTU too large for XDP
- selftests: fib_nexthops: Fix wrong mausezahn invocation
- block/rnbd-clt: avoid module unload race with close confirmation
- drm/panfrost: Remove unused variables in panfrost_job_close()
- tools headers UAPI: Sync linux/fscrypt.h with the kernel sources
* Fix the video can't output through WD19TB connected on TGL's Type-C port
during cold-boot (LP: #1913372)
- drm/dp/mst: Export drm_dp_get_vc_payload_bw()
- drm/i915: Fix the MST PBN divider calculation
* Fix regression introduced by codec PM change (LP: #1912676)
- ASoC: SOF: Intel: hda: Resume codec to do jack detection
- ASoC: SOF: Intel: hda: Modify existing helper to disable WAKEEN
- ASoC: SOF: Intel: hda: Avoid checking jack on system suspend
- ALSA: hda: Balance runtime/system PM if direct-complete is disabled
* Restore palm ejection on multi-input devices (LP: #1913520)
- HID: multitouch: Apply MT_QUIRK_CONFIDENCE quirk for multi-input devices
* intel-hid is not loaded on new Intel platform (LP: #1907160)
- platform/x86: intel-hid: add Rocket Lake ACPI device ID
* Remove scary stack trace from Realtek WiFi driver (LP: #1913263)
- rtw88: reduce the log level for failure of tx report
* Groovy update: upstream stable patchset 2021-02-05 (LP: #1914832)
- i40e: Fix Error I40E_AQ_RC_EINVAL when removing VFs
- iavf: fix double-release of rtnl_lock
- net/sched: sch_taprio: ensure to reset/destroy all child qdiscs
- net: mvpp2: Add TCAM entry to drop flow control pause frames
- net: mvpp2: prs: fix PPPoE with ipv6 packet parse
- net: systemport: set dev->max_mtu to UMAC_MAX_MTU_SIZE
- ethernet: ucc_geth: fix use-after-free in ucc_geth_remove()
- ethernet: ucc_geth: set dev->max_mtu to 1518
- ionic: account for vlan tag len in rx buffer len
- atm: idt77252: call pci_disable_device() on error path
- net: mvpp2: Fix GoP port 3 Networking Complex Control configurations
- ibmvnic: fix login buffer memory leak
- ibmvnic: continue fatal error reset after passive init
- net: ethernet: mvneta: Fix error handling in mvneta_probe
- virtio_net: Fix recursive call to cpus_read_lock()
- net/ncsi: Use real net-device for response handler
- net: ethernet: Fix memleak in ethoc_probe
- net-sysfs: take the rtnl lock when storing xps_cpus
- net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc
- net-sysfs: take the rtnl lock when storing xps_rxqs
- net-sysfs: take the rtnl lock when accessing xps_rxqs_map and num_tc
- net: ethernet: ti: cpts: fix ethtool output when no ptp_clock registered
- tun: fix return value when the number of iovs exceeds MAX_SKB_FRAGS
- bnxt_en: Check TQM rings for maximum supported value.
- net: mvpp2: fix pkt coalescing int-threshold configuration
- bnxt_en: Fix AER recovery.
- ipv4: Ignore ECN bits for fib lookups in fib_compute_spec_dst()
- net: sched: prevent invalid Scell_log shift count
- net: hns: fix return value check in __lb_other_process()
- erspan: fix version 1 check in gre_parse_header()
- net: hdlc_ppp: Fix issues when mod_timer is called while timer is running
- bareudp: set NETIF_F_LLTX flag
- bareudp: Fix use of incorrect min_headroom size
- vhost_net: fix ubuf refcount incorrectly when sendmsg fails
- r8169: work around power-saving bug on some chip versions
- net: dsa: lantiq_gswip: Enable GSWIP_MII_CFG_EN also for internal PHYs
- net: dsa: lantiq_gswip: Fix GSWIP_MII_CFG(p) register access
- CDC-NCM: remove "connected" log message
- ibmvnic: fix: NULL pointer dereference.
- net: usb: qmi_wwan: add Quectel EM160R-GL
- stmmac: intel: Add PCI IDs for TGL-H platform
- workqueue: Kick a worker based on the actual activation of delayed works
- scsi: ufs: Fix wrong print message in dev_err()
- scsi: ufs-pci: Fix restore from S4 for Intel controllers
- scsi: ufs-pci: Ensure UFS device is in PowerDown mode for suspend-to-disk
->poweroff()
- scsi: ufs-pci: Fix recovery from hibernate exit errors for Intel
controllers
- blk-mq: remove the BLK_MQ_REQ_INTERNAL flag
- scsi: block: Introduce BLK_MQ_REQ_PM
- scsi: ide: Do not set the RQF_PREEMPT flag for sense requests
- scsi: ide: Mark power management requests with RQF_PM instead of
RQF_PREEMPT
- scsi: scsi_transport_spi: Set RQF_PM for domain validation commands
- scsi: core: Only process PM requests if rpm_status != RPM_ACTIVE
- local64.h: make <asm/local64.h> mandatory
- lib/genalloc: fix the overflow when size is too big
- depmod: handle the case of /sbin/depmod without /sbin in PATH
- scsi: ufs: Clear UAC for FFU and RPMB LUNs
- kbuild: don't hardcode depmod path
- Bluetooth: revert: hci_h5: close serdev device and free hu in h5_close
- scsi: block: Remove RQF_PREEMPT and BLK_MQ_REQ_PREEMPT
- scsi: block: Do not accept any requests while suspended
- crypto: ecdh - avoid buffer overflow in ecdh_set_secret()
- crypto: asym_tpm: correct zero out potential secrets
- powerpc: Handle .text.{hot,unlikely}.* in linker script
- Staging: comedi: Return -EFAULT if copy_to_user() fails
- staging: mt7621-dma: Fix a resource leak in an error handling path
- usb: gadget: enable super speed plus
- USB: cdc-acm: blacklist another IR Droid device
- USB: cdc-wdm: Fix use after free in service_outstanding_interrupt().
- usb: dwc3: meson-g12a: disable clk on error handling path in probe
- usb: dwc3: gadget: Clear wait flag on dequeue
- usb: dwc3: ulpi: Use VStsDone to detect PHY regs access completion
- usb: dwc3: ulpi: Replace CPU-based busyloop with Protocol-based one
- usb: dwc3: ulpi: Fix USB2.0 HS/FS/LS PHY suspend regression
- usb: chipidea: ci_hdrc_imx: add missing put_device() call in
usbmisc_get_init_data()
- USB: xhci: fix U1/U2 handling for hardware with XHCI_INTEL_HOST quirk set
- usb: usbip: vhci_hcd: protect shift size
- usb: uas: Add PNY USB Portable SSD to unusual_uas
- USB: serial: iuu_phoenix: fix DMA from stack
- USB: serial: option: add LongSung M5710 module support
- USB: serial: option: add Quectel EM160R-GL
- USB: yurex: fix control-URB timeout handling
- USB: usblp: fix DMA to stack
- ALSA: usb-audio: Fix UBSAN warnings for MIDI jacks
- usb: gadget: select CONFIG_CRC32
- USB: Gadget: dummy-hcd: Fix shift-out-of-bounds bug
- usb: gadget: f_uac2: reset wMaxPacketSize
- usb: gadget: function: printer: Fix a memory leak for interface descriptor
- usb: gadget: u_ether: Fix MTU size mismatch with RX packet size
- USB: gadget: legacy: fix return error code in acm_ms_bind()
- usb: gadget: Fix spinlock lockup on usb_function_deactivate
- usb: gadget: configfs: Preserve function ordering after bind failure
- usb: gadget: configfs: Fix use-after-free issue with udc_name
- USB: serial: keyspan_pda: remove unused variable
- hwmon: (amd_energy) fix allocation of hwmon_channel_info config
- mm: make wait_on_page_writeback() wait for multiple pending writebacks
- x86/mm: Fix leak of pmd ptlock
- kvm: check tlbs_dirty directly
- task_work: cleanup notification modes
- x86/resctrl: Use an IPI instead of task_work_add() to update PQR_ASSOC MSR
- x86/resctrl: Don't move a task to the same resource group
- blk-iocost: fix NULL iocg deref from racing against initialization
- ALSA: hda/via: Fix runtime PM for Clevo W35xSS
- ALSA: hda/conexant: add a new hda codec CX11970
- ALSA: hda/realtek - Fix speaker volume control on Lenovo C940
- ALSA: hda/realtek: Add mute LED quirk for more HP laptops
- ALSA: hda/realtek: Add two "Intel Reference board" SSID in the ALC256.
- iommu/vt-d: Move intel_iommu info from struct intel_svm to struct
intel_svm_dev
- btrfs: send: fix wrong file path when there is an inode with a pending
rmdir
- Revert "device property: Keep secondary firmware node secondary by type"
- dmabuf: fix use-after-free of dmabuf's file->f_inode
- arm64: link with -z norelro for LLD or aarch64-elf
- drm/i915: clear the shadow batch
- netfilter: x_tables: Update remaining dereference to RCU
- netfilter: ipset: fix shift-out-of-bounds in htable_bits()
- netfilter: xt_RATEEST: reject non-null terminated string from userspace
- netfilter: nft_dynset: report EOPNOTSUPP on missing set feature
- dmaengine: idxd: off by one in cleanup code
- x86/mtrr: Correct the range check before performing MTRR type lookups
- KVM: x86: fix shift out of bounds reported by UBSAN
- rtlwifi: rise completion at the last step of firmware callback
* Groovy update: upstream stable patchset 2021-02-03 (LP: #1914472)
- net/sched: sch_taprio: reset child qdiscs before freeing them
- mptcp: fix security context on server socket
- ethtool: fix error paths in ethnl_set_channels()
- ethtool: fix string set id check
- md/raid10: initialize r10_bio->read_slot before use.
- drm/amd/display: Add get_dig_frontend implementation for DCEx
- io_uring: close a small race gap for files cancel
- jffs2: Allow setting rp_size to zero during remounting
- jffs2: Fix NULL pointer dereference in rp_size fs option parsing
- scsi: block: Fix a race in the runtime power management code
- mm/hugetlb: fix deadlock in hugetlb_cow error path
- mm: memmap defer init doesn't work as expected
- lib/zlib: fix inflating zlib streams on s390
- uapi: move constants from <linux/kernel.h> to <linux/const.h>
- tools headers UAPI: Sync linux/const.h with the kernel headers
- cgroup: Fix memory leak when parsing multiple source parameters
- zlib: move EXPORT_SYMBOL() and MODULE_LICENSE() out of dfltcc_syms.c
- scsi: cxgb4i: Fix TLS dependency
- Bluetooth: hci_h5: close serdev device and free hu in h5_close
- fbcon: Disable accelerated scrolling
- reiserfs: add check for an invalid ih_entry_count
- misc: vmw_vmci: fix kernel info-leak by initializing dbells in
vmci_ctx_get_chkpt_doorbells()
- media: gp8psk: initialize stats at power control logic
- f2fs: fix shift-out-of-bounds in sanity_check_raw_super()
- ALSA: seq: Use bool for snd_seq_queue internal flags
- ALSA: rawmidi: Access runtime->avail always in spinlock
- bfs: don't use WARNING: string when it's just info.
- ext4: check for invalid block size early when mounting a file system
- fcntl: Fix potential deadlock in send_sig{io, urg}()
- rtc: sun6i: Fix memleak in sun6i_rtc_clk_init
- module: set MODULE_STATE_GOING state when a module fails to load
- quota: Don't overflow quota file offsets
- rtc: pl031: fix resource leak in pl031_probe
- powerpc: sysdev: add missing iounmap() on error in mpic_msgr_probe()
- i3c master: fix missing destroy_workqueue() on error in
i3c_master_register
- NFSv4: Fix a pNFS layout related use-after-free race when freeing the
inode
- f2fs: avoid race condition for shrinker count
- module: delay kobject uevent until after module init call
- fs/namespace.c: WARN if mnt_count has become negative
- watchdog: rti-wdt: fix reference leak in rti_wdt_probe
- um: random: Register random as hwrng-core device
- um: ubd: Submit all data segments atomically
- ceph: fix inode refcount leak when ceph_fill_inode on non-I_NEW inode
fails
- drm/amd/display: updated wm table for Renoir
- tick/sched: Remove bogus boot "safety" check
- s390: always clear kernel stack backchain before calling functions
- io_uring: remove racy overflow list fast checks
- ALSA: pcm: Clear the full allocated memory at hw_params
- dm verity: skip verity work if I/O error when system is shutting down
- rtc: pcf2127: move watchdog initialisation to a separate function
- rtc: pcf2127: only use watchdog when explicitly available
- dt-bindings: rtc: add reset-source property
- kdev_t: always inline major/minor helper functions
- ALSA: hda/realtek - Modify Dell platform name
- scsi: ufs: Allow an error return value from ->device_reset()
- scsi: ufs: Re-enable WriteBooster after device reset
- RDMA/siw,rxe: Make emulated devices virtual in the device tree
- fuse: fix bad inode
- rwsem: Implement down_read_killable_nested
- rwsem: Implement down_read_interruptible
- exec: Transform exec_update_mutex into a rw_semaphore
- mwifiex: Fix possible buffer overflows in mwifiex_cmd_802_11_ad_hoc_start
-- Stefan Bader <stefan.ba...@canonical.com> Fri, 19 Feb 2021 10:59:43
+0100
** Changed in: linux (Ubuntu Groovy)
Status: Fix Committed => Fix Released
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2021-20194
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1912676
Title:
Fix regression introduced by codec PM change
Status in HWE Next:
New
Status in OEM Priority Project:
New
Status in linux package in Ubuntu:
Fix Released
Status in linux-oem-5.10 package in Ubuntu:
Invalid
Status in linux source package in Focal:
Invalid
Status in linux-oem-5.10 source package in Focal:
Fix Released
Status in linux source package in Groovy:
Fix Released
Status in linux-oem-5.10 source package in Groovy:
Invalid
Bug description:
[Impact]
After the codec PM optimization, laptops with SOF may take very long to
suspend. In addition to that, HDA may not be able to be runtim suspended
again after resume from hibernation.
[Fix]
Prevent the SOF driver touches codec during system suspend, and properly
refcount the PM usage counter.
[Test]
On an affected SOF system, it takes 5 mins to suspend.
On another affected HDA system, S4 resume causes high power consumption
becuase HDA controller can't be runtime suspended.
Both issues are gone by applying these patches.
[Where problems could occur]
If somehow any laptop depends on the old behavior to work properly, this
can break them. It's highly unlikely though.
To manage notifications about this bug go to:
https://bugs.launchpad.net/hwe-next/+bug/1912676/+subscriptions
--
Mailing list: https://launchpad.net/~kernel-packages
Post to : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help : https://help.launchpad.net/ListHelp
