Public bug reported:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
upstream stable patchset 2021-07-14
Ported from the following upstream stable releases:
v4.14.237, v4.19.195
v4.14.238, v4.19.196
from git://git.kernel.org/
Revert "UBUNTU: SAUCE: Revert "proc: Check /proc/$pid/attr/ writes against file
opener""
proc: Track /proc/$pid/attr/ opener mm_struct
net/nfc/rawsock.c: fix a permission check bug
ASoC: sti-sas: add missing MODULE_DEVICE_TABLE
isdn: mISDN: netjet: Fix crash in nj_probe:
bonding: init notify_work earlier to avoid uninitialized use
netlink: disable IRQs for netlink_lock_table()
net: mdiobus: get rid of a BUG_ON()
cgroup: disable controllers at parse time
wq: handle VM suspension in stall detection
net/qla3xxx: fix schedule while atomic in ql_sem_spinlock
scsi: vmw_pvscsi: Set correct residual data length
scsi: target: qla2xxx: Wait for stop_phase1 at WWN removal
net: macb: ensure the device is available before accessing GEMGXL control
registers
net: appletalk: cops: Fix data race in cops_probe1
MIPS: Fix kernel hang under FUNCTION_GRAPH_TRACER and PREEMPT_TRACER
bnx2x: Fix missing error code in bnx2x_iov_init_one()
powerpc/fsl: set fsl,i2c-erratum-a004447 flag for P2041 i2c controllers
powerpc/fsl: set fsl,i2c-erratum-a004447 flag for P1010 i2c controllers
i2c: mpc: Make use of i2c_recover_bus()
i2c: mpc: implement erratum A-004447 workaround
drm: Fix use-after-free read in drm_getunique()
drm: Lock pointer access in drm_master_release()
kvm: avoid speculation-based attacks from out-of-range memslot accesses
staging: rtl8723bs: Fix uninitialized variables
btrfs: return value from btrfs_mark_extent_written() in case of error
cgroup1: don't allow '\n' in renaming
USB: f_ncm: ncm_bitrate (speed) is unsigned
usb: dwc3: ep0: fix NULL pointer exception
usb: typec: ucsi: Clear PPM capability data in ucsi_init() error path
usb: gadget: f_fs: Ensure io_completion_wq is idle during unbind
USB: serial: ftdi_sio: add NovaTech OrionMX product ID
USB: serial: omninet: add device id for Zyxel Omni 56K Plus
USB: serial: quatech2: fix control-request directions
usb: gadget: eem: fix wrong eem header operation
usb: fix various gadgets null ptr deref on 10gbps cabling.
usb: fix various gadget panics on 10gbps cabling
regulator: core: resolve supply for boot-on/always-on regulators
regulator: max77620: Use device_set_of_node_from_dev()
perf: Fix data race between pin_count increment/decrement
NFS: Fix a potential NULL dereference in nfs_get_client()
perf session: Correct buffer copying when peeking events
kvm: fix previous commit for 32-bit builds
NFS: Fix use-after-free in nfs4_init_client()
NFSv4: nfs4_proc_set_acl needs to restore NFS_CAP_UIDGID_NOMAP on error.
scsi: core: Fix error handling of scsi_host_alloc()
scsi: core: Put .shost_dev in failure path if host state changes to RUNNING
scsi: core: Only put parent device if host state differs from SHOST_CREATED
ftrace: Do not blindly read the ip address in ftrace_bug()
tracing: Correct the length check which causes memory corruption
proc: only require mm_struct for writing
scsi: bnx2fc: Return failure if io_req is already in ABTS processing
ARM: dts: imx6qdl-sabresd: Assign corresponding power supply for LDOs
usb: f_ncm: only first packet of aggregate needs to start timer
usb: pd: Set PD_T_SINK_WAIT_CAP to 310ms
RDMA/mlx4: Do not map the core_clock page to user space unless enabled
vmlinux.lds.h: Avoid orphan section with !SMP
sched/fair: Make sure to update tg contrib for blocked load
UBUNTU: upstream stable to v4.14.237, v4.19.195
net: ieee802154: fix null deref in parse dev addr
HID: hid-sensor-hub: Return error for hid_set_field() failure
HID: Add BUS_VIRTUAL to hid_connect logging
HID: usbhid: fix info leak in hid_submit_ctrl
ARM: OMAP2+: Fix build warning when mmc_omap is not built
HID: gt683r: add missing MODULE_DEVICE_TABLE
gfs2: Fix use-after-free in gfs2_glock_shrink_scan
scsi: target: core: Fix warning on realtime kernels
ethernet: myri10ge: Fix missing error code in myri10ge_probe()
nvme-loop: reset queue count to 1 in nvme_loop_destroy_io_queues()
nvme-loop: clear NVME_LOOP_Q_LIVE when nvme_loop_configure_admin_queue() fails
nvme-loop: check for NVME_LOOP_Q_LIVE in nvme_loop_destroy_admin_queue()
net: ipconfig: Don't override command-line hostnames or domains
rtnetlink: Fix missing error code in rtnl_bridge_notify()
net/x25: Return the correct errno code
net: Return the correct errno code
fib: Return the correct errno code
dmaengine: ALTERA_MSGDMA depends on HAS_IOMEM
dmaengine: QCOM_HIDMA_MGMT depends on HAS_IOMEM
dmaengine: stedma40: add missing iounmap() on error in d40_probe()
mm/memory-failure: make sure wait for page writeback in memory_failure
batman-adv: Avoid WARN_ON timing related checks
net: ipv4: fix memory leak in netlbl_cipsov4_add_std
net: rds: fix memory leak in rds_recvmsg
udp: fix race between close() and udp_abort()
rtnetlink: Fix regression in bridge VLAN configuration
netfilter: synproxy: Fix out of bounds when parsing TCP options
alx: Fix an error handling path in 'alx_probe()'
net: stmmac: dwmac1000: Fix extended MAC address registers definition
qlcnic: Fix an error handling path in 'qlcnic_probe()'
netxen_nic: Fix an error handling path in 'netxen_nic_probe()'
net: cdc_ncm: switch to eth%d interface naming
net: usb: fix possible use-after-free in smsc75xx_bind
net: ipv4: fix memory leak in ip_mc_add1_src
net/af_unix: fix a data-race in unix_dgram_sendmsg / unix_release_sock
be2net: Fix an error handling path in 'be_probe()'
net: hamradio: fix memory leak in mkiss_close
net: cdc_eem: fix tx fixup skb leak
icmp: don't send out ICMP messages with a source address of 0.0.0.0
net: ethernet: fix potential use-after-free in ec_bhf_remove
radeon: use memcpy_to/fromio for UVD fw upload
hwmon: (scpi-hwmon) shows the negative temperature properly
can: bcm: fix infoleak in struct bcm_msg_head
can: mcba_usb: fix memory leak in mcba_usb
usb: core: hub: Disable autosuspend for Cypress CY7C65632
tracing: Do not stop recording cmdlines when tracing is off
tracing: Do not stop recording comms if the trace file is being read
tracing: Do no increment trace_clock_global() by one
PCI: Mark TI C667X to avoid bus reset
PCI: Mark some NVIDIA GPUs to avoid bus reset
PCI: Add ACS quirk for Broadcom BCM57414 NIC
PCI: Work around Huawei Intelligent NIC VF FLR erratum
ARCv2: save ABI registers across signal handling
dmaengine: pl330: fix wrong usage of spinlock flags in dma_cyclc
net: bridge: fix vlan tunnel dst null pointer dereference
net: bridge: fix vlan tunnel dst refcnt when egressing
mm/slub.c: include swab.h
net: fec_ptp: add clock rate zero check
can: bcm/raw/isotp: use per module netdevice notifier
inet: use bigger hash table for IP ID generation
usb: dwc3: core: fix kernel panic when do reboot
kernfs: deal with kernfs_fill_super() failures
unfuck sysfs_mount()
x86/fpu: Reset state for all signal restore failures
drm/nouveau: wait for moving fence after pinning v2
drm/radeon: wait for moving fence after pinning
ARM: 9081/1: fix gcc-10 thumb2-kernel regression
Makefile: Move -Wno-unused-but-set-variable out of GCC only block
MIPS: generic: Update node names to avoid unit addresses
Revert "PCI: PM: Do not read power state in pci_enable_device_flags()"
mac80211: remove warning in ieee80211_get_sband()
cfg80211: call cfg80211_leave_ocb when switching away from OCB
mac80211: drop multicast fragments
ping: Check return value of function 'ping_queue_rcv_skb'
inet: annotate date races around sk->sk_txhash
net: caif: fix memory leak in ldisc_open
net/packet: annotate accesses to po->bind
net/packet: annotate accesses to po->ifindex
r8152: Avoid memcpy() over-reading of ETH_SS_STATS
sh_eth: Avoid memcpy() over-reading of ETH_SS_STATS
r8169: Avoid memcpy() over-reading of ETH_SS_STATS
net: qed: Fix memcpy() overflow of qed_dcbx_params()
net: ll_temac: Avoid ndo_start_xmit returning NETDEV_TX_BUSY
pinctrl: stm32: fix the reported number of GPIO lines per bank
nilfs2: fix memory leak in nilfs_sysfs_delete_device_group
i2c: robotfuzz-osif: fix control-request directions
scsi: scsi_devinfo: Add blacklist entry for HPE OPEN-V
net/mlx5e: Remove dependency in IPsec initialization flows
net: add documentation to socket.c
net: make get_net_ns return error if NET_NS is disabled
net: qrtr: fix OOB Read in qrtr_endpoint_post
ptp: ptp_clock: Publish scaled_ppm_to_ppb
ptp: improve max_adj check against unreasonable values
net: fec_ptp: fix issue caused by refactor the fec_devtype
ASoC: rt5659: Fix the lost powers for the HDA header
cfg80211: make certificate generation more robust
mm/slub: clarify verification reporting
net: ethtool: clear heap allocations for ethtool function
PCI: Add AMD RS690 quirk to enable 64-bit DMA
UBUNTU: upstream stable to v4.14.238, v4.19.196
** Affects: linux (Ubuntu)
Importance: Undecided
Status: Invalid
** Affects: linux (Ubuntu Bionic)
Importance: Medium
Assignee: Kamal Mostafa (kamalmostafa)
Status: In Progress
** Tags: kernel-stable-tracking-bug
** Changed in: linux (Ubuntu)
Status: New => Confirmed
** Tags added: kernel-stable-tracking-bug
** Also affects: linux (Ubuntu Bionic)
Importance: Undecided
Status: New
** Changed in: linux (Ubuntu Bionic)
Status: New => In Progress
** Changed in: linux (Ubuntu Bionic)
Importance: Undecided => Medium
** Changed in: linux (Ubuntu Bionic)
Assignee: (unassigned) => Kamal Mostafa (kamalmostafa)
** Changed in: linux (Ubuntu)
Status: Confirmed => Invalid
** Description changed:
+ SRU Justification
- SRU Justification
+ Impact:
+ The upstream process for stable tree updates is quite similar
+ in scope to the Ubuntu SRU process, e.g., each patch has to
+ demonstrably fix a bug, and each patch is vetted by upstream
+ by originating either directly from a mainline/stable Linux tree or
+ a minimally backported form of that patch. The following upstream
+ stable patches should be included in the Ubuntu kernel:
- Impact:
- The upstream process for stable tree updates is quite similar
- in scope to the Ubuntu SRU process, e.g., each patch has to
- demonstrably fix a bug, and each patch is vetted by upstream
- by originating either directly from a mainline/stable Linux tree or
- a minimally backported form of that patch. The following upstream
- stable patches should be included in the Ubuntu kernel:
+ upstream stable patchset 2021-07-14
+ from git://git.kernel.org/
- upstream stable patchset 2021-07-14
- from git://git.kernel.org/
+ Revert "UBUNTU: SAUCE: Revert "proc: Check /proc/$pid/attr/ writes against
file opener""
+ proc: Track /proc/$pid/attr/ opener mm_struct
+ net/nfc/rawsock.c: fix a permission check bug
+ ASoC: sti-sas: add missing MODULE_DEVICE_TABLE
+ isdn: mISDN: netjet: Fix crash in nj_probe:
+ bonding: init notify_work earlier to avoid uninitialized use
+ netlink: disable IRQs for netlink_lock_table()
+ net: mdiobus: get rid of a BUG_ON()
+ cgroup: disable controllers at parse time
+ wq: handle VM suspension in stall detection
+ net/qla3xxx: fix schedule while atomic in ql_sem_spinlock
+ scsi: vmw_pvscsi: Set correct residual data length
+ scsi: target: qla2xxx: Wait for stop_phase1 at WWN removal
+ net: macb: ensure the device is available before accessing GEMGXL control
registers
+ net: appletalk: cops: Fix data race in cops_probe1
+ MIPS: Fix kernel hang under FUNCTION_GRAPH_TRACER and PREEMPT_TRACER
+ bnx2x: Fix missing error code in bnx2x_iov_init_one()
+ powerpc/fsl: set fsl,i2c-erratum-a004447 flag for P2041 i2c controllers
+ powerpc/fsl: set fsl,i2c-erratum-a004447 flag for P1010 i2c controllers
+ i2c: mpc: Make use of i2c_recover_bus()
+ i2c: mpc: implement erratum A-004447 workaround
+ drm: Fix use-after-free read in drm_getunique()
+ drm: Lock pointer access in drm_master_release()
+ kvm: avoid speculation-based attacks from out-of-range memslot accesses
+ staging: rtl8723bs: Fix uninitialized variables
+ btrfs: return value from btrfs_mark_extent_written() in case of error
+ cgroup1: don't allow '\n' in renaming
+ USB: f_ncm: ncm_bitrate (speed) is unsigned
+ usb: dwc3: ep0: fix NULL pointer exception
+ usb: typec: ucsi: Clear PPM capability data in ucsi_init() error path
+ usb: gadget: f_fs: Ensure io_completion_wq is idle during unbind
+ USB: serial: ftdi_sio: add NovaTech OrionMX product ID
+ USB: serial: omninet: add device id for Zyxel Omni 56K Plus
+ USB: serial: quatech2: fix control-request directions
+ usb: gadget: eem: fix wrong eem header operation
+ usb: fix various gadgets null ptr deref on 10gbps cabling.
+ usb: fix various gadget panics on 10gbps cabling
+ regulator: core: resolve supply for boot-on/always-on regulators
+ regulator: max77620: Use device_set_of_node_from_dev()
+ perf: Fix data race between pin_count increment/decrement
+ NFS: Fix a potential NULL dereference in nfs_get_client()
+ perf session: Correct buffer copying when peeking events
+ kvm: fix previous commit for 32-bit builds
+ NFS: Fix use-after-free in nfs4_init_client()
+ NFSv4: nfs4_proc_set_acl needs to restore NFS_CAP_UIDGID_NOMAP on error.
+ scsi: core: Fix error handling of scsi_host_alloc()
+ scsi: core: Put .shost_dev in failure path if host state changes to RUNNING
+ scsi: core: Only put parent device if host state differs from SHOST_CREATED
+ ftrace: Do not blindly read the ip address in ftrace_bug()
+ tracing: Correct the length check which causes memory corruption
+ proc: only require mm_struct for writing
+ scsi: bnx2fc: Return failure if io_req is already in ABTS processing
+ ARM: dts: imx6qdl-sabresd: Assign corresponding power supply for LDOs
+ usb: f_ncm: only first packet of aggregate needs to start timer
+ usb: pd: Set PD_T_SINK_WAIT_CAP to 310ms
+ RDMA/mlx4: Do not map the core_clock page to user space unless enabled
+ vmlinux.lds.h: Avoid orphan section with !SMP
+ sched/fair: Make sure to update tg contrib for blocked load
+ UBUNTU: upstream stable to v4.14.237, v4.19.195
+ net: ieee802154: fix null deref in parse dev addr
+ HID: hid-sensor-hub: Return error for hid_set_field() failure
+ HID: Add BUS_VIRTUAL to hid_connect logging
+ HID: usbhid: fix info leak in hid_submit_ctrl
+ ARM: OMAP2+: Fix build warning when mmc_omap is not built
+ HID: gt683r: add missing MODULE_DEVICE_TABLE
+ gfs2: Fix use-after-free in gfs2_glock_shrink_scan
+ scsi: target: core: Fix warning on realtime kernels
+ ethernet: myri10ge: Fix missing error code in myri10ge_probe()
+ nvme-loop: reset queue count to 1 in nvme_loop_destroy_io_queues()
+ nvme-loop: clear NVME_LOOP_Q_LIVE when nvme_loop_configure_admin_queue() fails
+ nvme-loop: check for NVME_LOOP_Q_LIVE in nvme_loop_destroy_admin_queue()
+ net: ipconfig: Don't override command-line hostnames or domains
+ rtnetlink: Fix missing error code in rtnl_bridge_notify()
+ net/x25: Return the correct errno code
+ net: Return the correct errno code
+ fib: Return the correct errno code
+ dmaengine: ALTERA_MSGDMA depends on HAS_IOMEM
+ dmaengine: QCOM_HIDMA_MGMT depends on HAS_IOMEM
+ dmaengine: stedma40: add missing iounmap() on error in d40_probe()
+ mm/memory-failure: make sure wait for page writeback in memory_failure
+ batman-adv: Avoid WARN_ON timing related checks
+ net: ipv4: fix memory leak in netlbl_cipsov4_add_std
+ net: rds: fix memory leak in rds_recvmsg
+ udp: fix race between close() and udp_abort()
+ rtnetlink: Fix regression in bridge VLAN configuration
+ netfilter: synproxy: Fix out of bounds when parsing TCP options
+ alx: Fix an error handling path in 'alx_probe()'
+ net: stmmac: dwmac1000: Fix extended MAC address registers definition
+ qlcnic: Fix an error handling path in 'qlcnic_probe()'
+ netxen_nic: Fix an error handling path in 'netxen_nic_probe()'
+ net: cdc_ncm: switch to eth%d interface naming
+ net: usb: fix possible use-after-free in smsc75xx_bind
+ net: ipv4: fix memory leak in ip_mc_add1_src
+ net/af_unix: fix a data-race in unix_dgram_sendmsg / unix_release_sock
+ be2net: Fix an error handling path in 'be_probe()'
+ net: hamradio: fix memory leak in mkiss_close
+ net: cdc_eem: fix tx fixup skb leak
+ icmp: don't send out ICMP messages with a source address of 0.0.0.0
+ net: ethernet: fix potential use-after-free in ec_bhf_remove
+ radeon: use memcpy_to/fromio for UVD fw upload
+ hwmon: (scpi-hwmon) shows the negative temperature properly
+ can: bcm: fix infoleak in struct bcm_msg_head
+ can: mcba_usb: fix memory leak in mcba_usb
+ usb: core: hub: Disable autosuspend for Cypress CY7C65632
+ tracing: Do not stop recording cmdlines when tracing is off
+ tracing: Do not stop recording comms if the trace file is being read
+ tracing: Do no increment trace_clock_global() by one
+ PCI: Mark TI C667X to avoid bus reset
+ PCI: Mark some NVIDIA GPUs to avoid bus reset
+ PCI: Add ACS quirk for Broadcom BCM57414 NIC
+ PCI: Work around Huawei Intelligent NIC VF FLR erratum
+ ARCv2: save ABI registers across signal handling
+ dmaengine: pl330: fix wrong usage of spinlock flags in dma_cyclc
+ net: bridge: fix vlan tunnel dst null pointer dereference
+ net: bridge: fix vlan tunnel dst refcnt when egressing
+ mm/slub.c: include swab.h
+ net: fec_ptp: add clock rate zero check
+ can: bcm/raw/isotp: use per module netdevice notifier
+ inet: use bigger hash table for IP ID generation
+ usb: dwc3: core: fix kernel panic when do reboot
+ kernfs: deal with kernfs_fill_super() failures
+ unfuck sysfs_mount()
+ x86/fpu: Reset state for all signal restore failures
+ drm/nouveau: wait for moving fence after pinning v2
+ drm/radeon: wait for moving fence after pinning
+ ARM: 9081/1: fix gcc-10 thumb2-kernel regression
+ Makefile: Move -Wno-unused-but-set-variable out of GCC only block
+ MIPS: generic: Update node names to avoid unit addresses
+ Revert "PCI: PM: Do not read power state in pci_enable_device_flags()"
+ mac80211: remove warning in ieee80211_get_sband()
+ cfg80211: call cfg80211_leave_ocb when switching away from OCB
+ mac80211: drop multicast fragments
+ ping: Check return value of function 'ping_queue_rcv_skb'
+ inet: annotate date races around sk->sk_txhash
+ net: caif: fix memory leak in ldisc_open
+ net/packet: annotate accesses to po->bind
+ net/packet: annotate accesses to po->ifindex
+ r8152: Avoid memcpy() over-reading of ETH_SS_STATS
+ sh_eth: Avoid memcpy() over-reading of ETH_SS_STATS
+ r8169: Avoid memcpy() over-reading of ETH_SS_STATS
+ net: qed: Fix memcpy() overflow of qed_dcbx_params()
+ net: ll_temac: Avoid ndo_start_xmit returning NETDEV_TX_BUSY
+ pinctrl: stm32: fix the reported number of GPIO lines per bank
+ nilfs2: fix memory leak in nilfs_sysfs_delete_device_group
+ i2c: robotfuzz-osif: fix control-request directions
+ scsi: scsi_devinfo: Add blacklist entry for HPE OPEN-V
+ net/mlx5e: Remove dependency in IPsec initialization flows
+ net: add documentation to socket.c
+ net: make get_net_ns return error if NET_NS is disabled
+ net: qrtr: fix OOB Read in qrtr_endpoint_post
+ ptp: ptp_clock: Publish scaled_ppm_to_ppb
+ ptp: improve max_adj check against unreasonable values
+ net: fec_ptp: fix issue caused by refactor the fec_devtype
+ ASoC: rt5659: Fix the lost powers for the HDA header
+ cfg80211: make certificate generation more robust
+ mm/slub: clarify verification reporting
+ net: ethtool: clear heap allocations for ethtool function
+ PCI: Add AMD RS690 quirk to enable 64-bit DMA
+ UBUNTU: upstream stable to v4.14.238, v4.19.196
** Description changed:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
upstream stable patchset 2021-07-14
+
+ Ported from the following upstream stable releases:
+ v4.14.237, v4.19.195
+ v4.14.238, v4.19.196
+
from git://git.kernel.org/
Revert "UBUNTU: SAUCE: Revert "proc: Check /proc/$pid/attr/ writes against
file opener""
proc: Track /proc/$pid/attr/ opener mm_struct
net/nfc/rawsock.c: fix a permission check bug
ASoC: sti-sas: add missing MODULE_DEVICE_TABLE
isdn: mISDN: netjet: Fix crash in nj_probe:
bonding: init notify_work earlier to avoid uninitialized use
netlink: disable IRQs for netlink_lock_table()
net: mdiobus: get rid of a BUG_ON()
cgroup: disable controllers at parse time
wq: handle VM suspension in stall detection
net/qla3xxx: fix schedule while atomic in ql_sem_spinlock
scsi: vmw_pvscsi: Set correct residual data length
scsi: target: qla2xxx: Wait for stop_phase1 at WWN removal
net: macb: ensure the device is available before accessing GEMGXL control
registers
net: appletalk: cops: Fix data race in cops_probe1
MIPS: Fix kernel hang under FUNCTION_GRAPH_TRACER and PREEMPT_TRACER
bnx2x: Fix missing error code in bnx2x_iov_init_one()
powerpc/fsl: set fsl,i2c-erratum-a004447 flag for P2041 i2c controllers
powerpc/fsl: set fsl,i2c-erratum-a004447 flag for P1010 i2c controllers
i2c: mpc: Make use of i2c_recover_bus()
i2c: mpc: implement erratum A-004447 workaround
drm: Fix use-after-free read in drm_getunique()
drm: Lock pointer access in drm_master_release()
kvm: avoid speculation-based attacks from out-of-range memslot accesses
staging: rtl8723bs: Fix uninitialized variables
btrfs: return value from btrfs_mark_extent_written() in case of error
cgroup1: don't allow '\n' in renaming
USB: f_ncm: ncm_bitrate (speed) is unsigned
usb: dwc3: ep0: fix NULL pointer exception
usb: typec: ucsi: Clear PPM capability data in ucsi_init() error path
usb: gadget: f_fs: Ensure io_completion_wq is idle during unbind
USB: serial: ftdi_sio: add NovaTech OrionMX product ID
USB: serial: omninet: add device id for Zyxel Omni 56K Plus
USB: serial: quatech2: fix control-request directions
usb: gadget: eem: fix wrong eem header operation
usb: fix various gadgets null ptr deref on 10gbps cabling.
usb: fix various gadget panics on 10gbps cabling
regulator: core: resolve supply for boot-on/always-on regulators
regulator: max77620: Use device_set_of_node_from_dev()
perf: Fix data race between pin_count increment/decrement
NFS: Fix a potential NULL dereference in nfs_get_client()
perf session: Correct buffer copying when peeking events
kvm: fix previous commit for 32-bit builds
NFS: Fix use-after-free in nfs4_init_client()
NFSv4: nfs4_proc_set_acl needs to restore NFS_CAP_UIDGID_NOMAP on error.
scsi: core: Fix error handling of scsi_host_alloc()
scsi: core: Put .shost_dev in failure path if host state changes to RUNNING
scsi: core: Only put parent device if host state differs from SHOST_CREATED
ftrace: Do not blindly read the ip address in ftrace_bug()
tracing: Correct the length check which causes memory corruption
proc: only require mm_struct for writing
scsi: bnx2fc: Return failure if io_req is already in ABTS processing
ARM: dts: imx6qdl-sabresd: Assign corresponding power supply for LDOs
usb: f_ncm: only first packet of aggregate needs to start timer
usb: pd: Set PD_T_SINK_WAIT_CAP to 310ms
RDMA/mlx4: Do not map the core_clock page to user space unless enabled
vmlinux.lds.h: Avoid orphan section with !SMP
sched/fair: Make sure to update tg contrib for blocked load
UBUNTU: upstream stable to v4.14.237, v4.19.195
net: ieee802154: fix null deref in parse dev addr
HID: hid-sensor-hub: Return error for hid_set_field() failure
HID: Add BUS_VIRTUAL to hid_connect logging
HID: usbhid: fix info leak in hid_submit_ctrl
ARM: OMAP2+: Fix build warning when mmc_omap is not built
HID: gt683r: add missing MODULE_DEVICE_TABLE
gfs2: Fix use-after-free in gfs2_glock_shrink_scan
scsi: target: core: Fix warning on realtime kernels
ethernet: myri10ge: Fix missing error code in myri10ge_probe()
nvme-loop: reset queue count to 1 in nvme_loop_destroy_io_queues()
nvme-loop: clear NVME_LOOP_Q_LIVE when nvme_loop_configure_admin_queue() fails
nvme-loop: check for NVME_LOOP_Q_LIVE in nvme_loop_destroy_admin_queue()
net: ipconfig: Don't override command-line hostnames or domains
rtnetlink: Fix missing error code in rtnl_bridge_notify()
net/x25: Return the correct errno code
net: Return the correct errno code
fib: Return the correct errno code
dmaengine: ALTERA_MSGDMA depends on HAS_IOMEM
dmaengine: QCOM_HIDMA_MGMT depends on HAS_IOMEM
dmaengine: stedma40: add missing iounmap() on error in d40_probe()
mm/memory-failure: make sure wait for page writeback in memory_failure
batman-adv: Avoid WARN_ON timing related checks
net: ipv4: fix memory leak in netlbl_cipsov4_add_std
net: rds: fix memory leak in rds_recvmsg
udp: fix race between close() and udp_abort()
rtnetlink: Fix regression in bridge VLAN configuration
netfilter: synproxy: Fix out of bounds when parsing TCP options
alx: Fix an error handling path in 'alx_probe()'
net: stmmac: dwmac1000: Fix extended MAC address registers definition
qlcnic: Fix an error handling path in 'qlcnic_probe()'
netxen_nic: Fix an error handling path in 'netxen_nic_probe()'
net: cdc_ncm: switch to eth%d interface naming
net: usb: fix possible use-after-free in smsc75xx_bind
net: ipv4: fix memory leak in ip_mc_add1_src
net/af_unix: fix a data-race in unix_dgram_sendmsg / unix_release_sock
be2net: Fix an error handling path in 'be_probe()'
net: hamradio: fix memory leak in mkiss_close
net: cdc_eem: fix tx fixup skb leak
icmp: don't send out ICMP messages with a source address of 0.0.0.0
net: ethernet: fix potential use-after-free in ec_bhf_remove
radeon: use memcpy_to/fromio for UVD fw upload
hwmon: (scpi-hwmon) shows the negative temperature properly
can: bcm: fix infoleak in struct bcm_msg_head
can: mcba_usb: fix memory leak in mcba_usb
usb: core: hub: Disable autosuspend for Cypress CY7C65632
tracing: Do not stop recording cmdlines when tracing is off
tracing: Do not stop recording comms if the trace file is being read
tracing: Do no increment trace_clock_global() by one
PCI: Mark TI C667X to avoid bus reset
PCI: Mark some NVIDIA GPUs to avoid bus reset
PCI: Add ACS quirk for Broadcom BCM57414 NIC
PCI: Work around Huawei Intelligent NIC VF FLR erratum
ARCv2: save ABI registers across signal handling
dmaengine: pl330: fix wrong usage of spinlock flags in dma_cyclc
net: bridge: fix vlan tunnel dst null pointer dereference
net: bridge: fix vlan tunnel dst refcnt when egressing
mm/slub.c: include swab.h
net: fec_ptp: add clock rate zero check
can: bcm/raw/isotp: use per module netdevice notifier
inet: use bigger hash table for IP ID generation
usb: dwc3: core: fix kernel panic when do reboot
kernfs: deal with kernfs_fill_super() failures
unfuck sysfs_mount()
x86/fpu: Reset state for all signal restore failures
drm/nouveau: wait for moving fence after pinning v2
drm/radeon: wait for moving fence after pinning
ARM: 9081/1: fix gcc-10 thumb2-kernel regression
Makefile: Move -Wno-unused-but-set-variable out of GCC only block
MIPS: generic: Update node names to avoid unit addresses
Revert "PCI: PM: Do not read power state in pci_enable_device_flags()"
mac80211: remove warning in ieee80211_get_sband()
cfg80211: call cfg80211_leave_ocb when switching away from OCB
mac80211: drop multicast fragments
ping: Check return value of function 'ping_queue_rcv_skb'
inet: annotate date races around sk->sk_txhash
net: caif: fix memory leak in ldisc_open
net/packet: annotate accesses to po->bind
net/packet: annotate accesses to po->ifindex
r8152: Avoid memcpy() over-reading of ETH_SS_STATS
sh_eth: Avoid memcpy() over-reading of ETH_SS_STATS
r8169: Avoid memcpy() over-reading of ETH_SS_STATS
net: qed: Fix memcpy() overflow of qed_dcbx_params()
net: ll_temac: Avoid ndo_start_xmit returning NETDEV_TX_BUSY
pinctrl: stm32: fix the reported number of GPIO lines per bank
nilfs2: fix memory leak in nilfs_sysfs_delete_device_group
i2c: robotfuzz-osif: fix control-request directions
scsi: scsi_devinfo: Add blacklist entry for HPE OPEN-V
net/mlx5e: Remove dependency in IPsec initialization flows
net: add documentation to socket.c
net: make get_net_ns return error if NET_NS is disabled
net: qrtr: fix OOB Read in qrtr_endpoint_post
ptp: ptp_clock: Publish scaled_ppm_to_ppb
ptp: improve max_adj check against unreasonable values
net: fec_ptp: fix issue caused by refactor the fec_devtype
ASoC: rt5659: Fix the lost powers for the HDA header
cfg80211: make certificate generation more robust
mm/slub: clarify verification reporting
net: ethtool: clear heap allocations for ethtool function
PCI: Add AMD RS690 quirk to enable 64-bit DMA
UBUNTU: upstream stable to v4.14.238, v4.19.196
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1936231
Title:
Bionic update: upstream stable patchset 2021-07-14
Status in linux package in Ubuntu:
Invalid
Status in linux source package in Bionic:
In Progress
Bug description:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
upstream stable patchset 2021-07-14
Ported from the following upstream stable releases:
v4.14.237, v4.19.195
v4.14.238, v4.19.196
from git://git.kernel.org/
Revert "UBUNTU: SAUCE: Revert "proc: Check /proc/$pid/attr/ writes against
file opener""
proc: Track /proc/$pid/attr/ opener mm_struct
net/nfc/rawsock.c: fix a permission check bug
ASoC: sti-sas: add missing MODULE_DEVICE_TABLE
isdn: mISDN: netjet: Fix crash in nj_probe:
bonding: init notify_work earlier to avoid uninitialized use
netlink: disable IRQs for netlink_lock_table()
net: mdiobus: get rid of a BUG_ON()
cgroup: disable controllers at parse time
wq: handle VM suspension in stall detection
net/qla3xxx: fix schedule while atomic in ql_sem_spinlock
scsi: vmw_pvscsi: Set correct residual data length
scsi: target: qla2xxx: Wait for stop_phase1 at WWN removal
net: macb: ensure the device is available before accessing GEMGXL control
registers
net: appletalk: cops: Fix data race in cops_probe1
MIPS: Fix kernel hang under FUNCTION_GRAPH_TRACER and PREEMPT_TRACER
bnx2x: Fix missing error code in bnx2x_iov_init_one()
powerpc/fsl: set fsl,i2c-erratum-a004447 flag for P2041 i2c controllers
powerpc/fsl: set fsl,i2c-erratum-a004447 flag for P1010 i2c controllers
i2c: mpc: Make use of i2c_recover_bus()
i2c: mpc: implement erratum A-004447 workaround
drm: Fix use-after-free read in drm_getunique()
drm: Lock pointer access in drm_master_release()
kvm: avoid speculation-based attacks from out-of-range memslot accesses
staging: rtl8723bs: Fix uninitialized variables
btrfs: return value from btrfs_mark_extent_written() in case of error
cgroup1: don't allow '\n' in renaming
USB: f_ncm: ncm_bitrate (speed) is unsigned
usb: dwc3: ep0: fix NULL pointer exception
usb: typec: ucsi: Clear PPM capability data in ucsi_init() error path
usb: gadget: f_fs: Ensure io_completion_wq is idle during unbind
USB: serial: ftdi_sio: add NovaTech OrionMX product ID
USB: serial: omninet: add device id for Zyxel Omni 56K Plus
USB: serial: quatech2: fix control-request directions
usb: gadget: eem: fix wrong eem header operation
usb: fix various gadgets null ptr deref on 10gbps cabling.
usb: fix various gadget panics on 10gbps cabling
regulator: core: resolve supply for boot-on/always-on regulators
regulator: max77620: Use device_set_of_node_from_dev()
perf: Fix data race between pin_count increment/decrement
NFS: Fix a potential NULL dereference in nfs_get_client()
perf session: Correct buffer copying when peeking events
kvm: fix previous commit for 32-bit builds
NFS: Fix use-after-free in nfs4_init_client()
NFSv4: nfs4_proc_set_acl needs to restore NFS_CAP_UIDGID_NOMAP on error.
scsi: core: Fix error handling of scsi_host_alloc()
scsi: core: Put .shost_dev in failure path if host state changes to RUNNING
scsi: core: Only put parent device if host state differs from SHOST_CREATED
ftrace: Do not blindly read the ip address in ftrace_bug()
tracing: Correct the length check which causes memory corruption
proc: only require mm_struct for writing
scsi: bnx2fc: Return failure if io_req is already in ABTS processing
ARM: dts: imx6qdl-sabresd: Assign corresponding power supply for LDOs
usb: f_ncm: only first packet of aggregate needs to start timer
usb: pd: Set PD_T_SINK_WAIT_CAP to 310ms
RDMA/mlx4: Do not map the core_clock page to user space unless enabled
vmlinux.lds.h: Avoid orphan section with !SMP
sched/fair: Make sure to update tg contrib for blocked load
UBUNTU: upstream stable to v4.14.237, v4.19.195
net: ieee802154: fix null deref in parse dev addr
HID: hid-sensor-hub: Return error for hid_set_field() failure
HID: Add BUS_VIRTUAL to hid_connect logging
HID: usbhid: fix info leak in hid_submit_ctrl
ARM: OMAP2+: Fix build warning when mmc_omap is not built
HID: gt683r: add missing MODULE_DEVICE_TABLE
gfs2: Fix use-after-free in gfs2_glock_shrink_scan
scsi: target: core: Fix warning on realtime kernels
ethernet: myri10ge: Fix missing error code in myri10ge_probe()
nvme-loop: reset queue count to 1 in nvme_loop_destroy_io_queues()
nvme-loop: clear NVME_LOOP_Q_LIVE when nvme_loop_configure_admin_queue() fails
nvme-loop: check for NVME_LOOP_Q_LIVE in nvme_loop_destroy_admin_queue()
net: ipconfig: Don't override command-line hostnames or domains
rtnetlink: Fix missing error code in rtnl_bridge_notify()
net/x25: Return the correct errno code
net: Return the correct errno code
fib: Return the correct errno code
dmaengine: ALTERA_MSGDMA depends on HAS_IOMEM
dmaengine: QCOM_HIDMA_MGMT depends on HAS_IOMEM
dmaengine: stedma40: add missing iounmap() on error in d40_probe()
mm/memory-failure: make sure wait for page writeback in memory_failure
batman-adv: Avoid WARN_ON timing related checks
net: ipv4: fix memory leak in netlbl_cipsov4_add_std
net: rds: fix memory leak in rds_recvmsg
udp: fix race between close() and udp_abort()
rtnetlink: Fix regression in bridge VLAN configuration
netfilter: synproxy: Fix out of bounds when parsing TCP options
alx: Fix an error handling path in 'alx_probe()'
net: stmmac: dwmac1000: Fix extended MAC address registers definition
qlcnic: Fix an error handling path in 'qlcnic_probe()'
netxen_nic: Fix an error handling path in 'netxen_nic_probe()'
net: cdc_ncm: switch to eth%d interface naming
net: usb: fix possible use-after-free in smsc75xx_bind
net: ipv4: fix memory leak in ip_mc_add1_src
net/af_unix: fix a data-race in unix_dgram_sendmsg / unix_release_sock
be2net: Fix an error handling path in 'be_probe()'
net: hamradio: fix memory leak in mkiss_close
net: cdc_eem: fix tx fixup skb leak
icmp: don't send out ICMP messages with a source address of 0.0.0.0
net: ethernet: fix potential use-after-free in ec_bhf_remove
radeon: use memcpy_to/fromio for UVD fw upload
hwmon: (scpi-hwmon) shows the negative temperature properly
can: bcm: fix infoleak in struct bcm_msg_head
can: mcba_usb: fix memory leak in mcba_usb
usb: core: hub: Disable autosuspend for Cypress CY7C65632
tracing: Do not stop recording cmdlines when tracing is off
tracing: Do not stop recording comms if the trace file is being read
tracing: Do no increment trace_clock_global() by one
PCI: Mark TI C667X to avoid bus reset
PCI: Mark some NVIDIA GPUs to avoid bus reset
PCI: Add ACS quirk for Broadcom BCM57414 NIC
PCI: Work around Huawei Intelligent NIC VF FLR erratum
ARCv2: save ABI registers across signal handling
dmaengine: pl330: fix wrong usage of spinlock flags in dma_cyclc
net: bridge: fix vlan tunnel dst null pointer dereference
net: bridge: fix vlan tunnel dst refcnt when egressing
mm/slub.c: include swab.h
net: fec_ptp: add clock rate zero check
can: bcm/raw/isotp: use per module netdevice notifier
inet: use bigger hash table for IP ID generation
usb: dwc3: core: fix kernel panic when do reboot
kernfs: deal with kernfs_fill_super() failures
unfuck sysfs_mount()
x86/fpu: Reset state for all signal restore failures
drm/nouveau: wait for moving fence after pinning v2
drm/radeon: wait for moving fence after pinning
ARM: 9081/1: fix gcc-10 thumb2-kernel regression
Makefile: Move -Wno-unused-but-set-variable out of GCC only block
MIPS: generic: Update node names to avoid unit addresses
Revert "PCI: PM: Do not read power state in pci_enable_device_flags()"
mac80211: remove warning in ieee80211_get_sband()
cfg80211: call cfg80211_leave_ocb when switching away from OCB
mac80211: drop multicast fragments
ping: Check return value of function 'ping_queue_rcv_skb'
inet: annotate date races around sk->sk_txhash
net: caif: fix memory leak in ldisc_open
net/packet: annotate accesses to po->bind
net/packet: annotate accesses to po->ifindex
r8152: Avoid memcpy() over-reading of ETH_SS_STATS
sh_eth: Avoid memcpy() over-reading of ETH_SS_STATS
r8169: Avoid memcpy() over-reading of ETH_SS_STATS
net: qed: Fix memcpy() overflow of qed_dcbx_params()
net: ll_temac: Avoid ndo_start_xmit returning NETDEV_TX_BUSY
pinctrl: stm32: fix the reported number of GPIO lines per bank
nilfs2: fix memory leak in nilfs_sysfs_delete_device_group
i2c: robotfuzz-osif: fix control-request directions
scsi: scsi_devinfo: Add blacklist entry for HPE OPEN-V
net/mlx5e: Remove dependency in IPsec initialization flows
net: add documentation to socket.c
net: make get_net_ns return error if NET_NS is disabled
net: qrtr: fix OOB Read in qrtr_endpoint_post
ptp: ptp_clock: Publish scaled_ppm_to_ppb
ptp: improve max_adj check against unreasonable values
net: fec_ptp: fix issue caused by refactor the fec_devtype
ASoC: rt5659: Fix the lost powers for the HDA header
cfg80211: make certificate generation more robust
mm/slub: clarify verification reporting
net: ethtool: clear heap allocations for ethtool function
PCI: Add AMD RS690 quirk to enable 64-bit DMA
UBUNTU: upstream stable to v4.14.238, v4.19.196
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1936231/+subscriptions
--
Mailing list: https://launchpad.net/~kernel-packages
Post to : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help : https://help.launchpad.net/ListHelp
