Public bug reported: SRU Justification
Impact: The upstream process for stable tree updates is quite similar in scope to the Ubuntu SRU process, e.g., each patch has to demonstrably fix a bug, and each patch is vetted by upstream by originating either directly from a mainline/stable Linux tree or a minimally backported form of that patch. The following upstream stable patches should be included in the Ubuntu kernel: upstream stable patchset 2021-08-13 Ported from the following upstream stable releases: v4.14.241, v4.19.199, v4.19.200 from git://git.kernel.org/ ARM: dts: gemini: add device_type on pci ARM: dts: rockchip: fix pinctrl sleep nodename for rk3036-kylin and rk3288 arm64: dts: rockchip: fix pinctrl sleep nodename for rk3399.dtsi ARM: dts: rockchip: Fix the timer clocks order ARM: dts: rockchip: Fix power-controller node names for rk3288 arm64: dts: rockchip: Fix power-controller node names for rk3328 reset: ti-syscon: fix to_ti_syscon_reset_data macro ARM: brcmstb: dts: fix NAND nodes names ARM: Cygnus: dts: fix NAND nodes names ARM: NSP: dts: fix NAND nodes names ARM: dts: BCM63xx: Fix NAND nodes names ARM: dts: imx6: phyFLEX: Fix UART hardware flow control ARM: imx: pm-imx5: Fix references to imx5_cpu_suspend_info ARM: dts: stm32: fix RCC node name on stm32f429 MCU arm64: dts: juno: Update SCPI nodes as per the YAML schema arm64: dts: ls208xa: remove bus-num from dspi node thermal/core: Correct function name thermal_zone_device_unregister() kbuild: mkcompile_h: consider timestamp if KBUILD_BUILD_TIMESTAMP is set rtc: max77686: Do not enforce (incorrect) interrupt trigger type scsi: aic7xxx: Fix unintentional sign extension issue on left shift of u8 scsi: libfc: Fix array index out of bound exception sched/fair: Fix CFS bandwidth hrtimer expiry type net: ipv6: fix return value of ip6_skb_dst_mtu netfilter: ctnetlink: suspicious RCU usage in ctnetlink_dump_helpinfo net: bridge: sync fdb to new unicast-filtering ports net: bcmgenet: Ensure all TX/RX queues DMAs are disabled net: moxa: fix UAF in moxart_mac_probe net: qcom/emac: fix UAF in emac_remove net: ti: fix UAF in tlan_remove_one net: send SYNACK packet with accepted fwmark net: validate lwtstate->data before returning from skb_tunnel_info() dma-buf/sync_file: Don't leak fences on merge failure tcp: annotate data races around tp->mtu_info ipv6: tcp: drop silly ICMPv6 packet too big messages igb: Fix use-after-free error during reset ixgbe: Fix an error handling path in 'ixgbe_probe()' igb: Fix an error handling path in 'igb_probe()' fm10k: Fix an error handling path in 'fm10k_probe()' e1000e: Fix an error handling path in 'e1000_probe()' iavf: Fix an error handling path in 'iavf_probe()' igb: Check if num of q_vectors is smaller than max before array access perf probe: Fix dso->nsinfo refcounting perf lzma: Close lzma stream on exit perf test bpf: Free obj_buf perf probe-file: Delete namelist in del_events() on the error path spi: mediatek: fix fifo rx mode liquidio: Fix unintentional sign extension issue on left shift of u16 s390/bpf: Perform r1 range checking before accessing jit->seen_reg[r1] net: fix uninit-value in caif_seqpkt_sendmsg net: decnet: Fix sleeping inside in af_decnet netrom: Decrease sock refcount when sock timers expire scsi: iscsi: Fix iface sysfs attr detection scsi: target: Fix protect handling in WRITE SAME(32) spi: cadence: Correct initialisation of runtime PM again Revert "USB: quirks: ignore remote wake-up on Fibocom L850-GL LTE modem" proc: Avoid mixing integer types in mem_rw() s390/ftrace: fix ftrace_update_ftrace_func implementation ALSA: sb: Fix potential ABBA deadlock in CSP driver xhci: Fix lost USB 2 remote wake KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow usb: hub: Disable USB 3 device initiated lpm if exit latency is too high USB: usb-storage: Add LaCie Rugged USB3-FW to IGNORE_UAS usb: max-3421: Prevent corruption of freed memory usb: renesas_usbhs: Fix superfluous irqs happen after usb_pkt_pop() USB: serial: option: add support for u-blox LARA-R6 family USB: serial: cp210x: fix comments for GE CS1000 USB: serial: cp210x: add ID for CEL EM3588 USB ZigBee stick usb: dwc2: gadget: Fix sending zero length packet in DDMA mode. tracing: Fix bug in rb_per_cpu_empty() that might cause deadloop. media: ngene: Fix out-of-bounds bug in ngene_command_config_free_buf() ixgbe: Fix packet corruption due to missing DMA sync selftest: use mmap instead of posix_memalign to allocate memory drm: Return -ENOTTY for non-drm ioctls net: bcmgenet: ensure EXT_ENERGY_DET_MASK is clear iio: accel: bma180: Use explicit member assignment iio: accel: bma180: Fix BMA25x bandwidth register values btrfs: compression: don't try to compress if we don't have enough pages spi: spi-fsl-dspi: Fix a resource leak in an error handling path xhci: add xhci_get_virt_ep() helper bpftool: Properly close va_list 'ap' by va_end() on error net: ip_tunnel: fix mtu calculation for ETHER tunnel devices nvme-pci: do not call nvme_dev_remove_admin from nvme_remove perf dso: Fix memory leak in dso__new_map() net/tcp_fastopen: fix data races around tfo_active_disable_stamp nvme-pci: don't WARN_ON in nvme_reset_work if ctrl.state is not RESETTING drm/panel: raspberrypi-touchscreen: Prevent double-free KVM: do not assume PTE is writable after follow_pfn KVM: Use kvm_pfn_t for local PFN variable in hva_to_pfn_remapped() net: dsa: mv88e6xxx: use correct .stats_set_histogram() on Topaz workqueue: fix UAF in pwq_unbound_release_workfn() UBUNTU: upstream stable to v4.14.241, v4.19.200 ** Affects: linux (Ubuntu) Importance: Undecided Status: Invalid ** Affects: linux (Ubuntu Bionic) Importance: Medium Assignee: Kamal Mostafa (kamalmostafa) Status: In Progress ** Tags: kernel-stable-tracking-bug ** Changed in: linux (Ubuntu) Status: New => Confirmed ** Tags added: kernel-stable-tracking-bug ** Also affects: linux (Ubuntu Bionic) Importance: Undecided Status: New ** Changed in: linux (Ubuntu Bionic) Status: New => In Progress ** Changed in: linux (Ubuntu Bionic) Importance: Undecided => Medium ** Changed in: linux (Ubuntu Bionic) Assignee: (unassigned) => Kamal Mostafa (kamalmostafa) ** Changed in: linux (Ubuntu) Status: Confirmed => Invalid ** Description changed: + SRU Justification - SRU Justification + Impact: + The upstream process for stable tree updates is quite similar + in scope to the Ubuntu SRU process, e.g., each patch has to + demonstrably fix a bug, and each patch is vetted by upstream + by originating either directly from a mainline/stable Linux tree or + a minimally backported form of that patch. The following upstream + stable patches should be included in the Ubuntu kernel: - Impact: - The upstream process for stable tree updates is quite similar - in scope to the Ubuntu SRU process, e.g., each patch has to - demonstrably fix a bug, and each patch is vetted by upstream - by originating either directly from a mainline/stable Linux tree or - a minimally backported form of that patch. The following upstream - stable patches should be included in the Ubuntu kernel: + upstream stable patchset 2021-08-13 - upstream stable patchset 2021-08-13 - from git://git.kernel.org/ + Ported from the following upstream stable releases: + v4.14.241, v4.19.199, + v4.19.200 + + from git://git.kernel.org/ + + ARM: dts: gemini: add device_type on pci + ARM: dts: rockchip: fix pinctrl sleep nodename for rk3036-kylin and rk3288 + arm64: dts: rockchip: fix pinctrl sleep nodename for rk3399.dtsi + ARM: dts: rockchip: Fix the timer clocks order + ARM: dts: rockchip: Fix power-controller node names for rk3288 + arm64: dts: rockchip: Fix power-controller node names for rk3328 + reset: ti-syscon: fix to_ti_syscon_reset_data macro + ARM: brcmstb: dts: fix NAND nodes names + ARM: Cygnus: dts: fix NAND nodes names + ARM: NSP: dts: fix NAND nodes names + ARM: dts: BCM63xx: Fix NAND nodes names + ARM: dts: imx6: phyFLEX: Fix UART hardware flow control + ARM: imx: pm-imx5: Fix references to imx5_cpu_suspend_info + ARM: dts: stm32: fix RCC node name on stm32f429 MCU + arm64: dts: juno: Update SCPI nodes as per the YAML schema + arm64: dts: ls208xa: remove bus-num from dspi node + thermal/core: Correct function name thermal_zone_device_unregister() + kbuild: mkcompile_h: consider timestamp if KBUILD_BUILD_TIMESTAMP is set + rtc: max77686: Do not enforce (incorrect) interrupt trigger type + scsi: aic7xxx: Fix unintentional sign extension issue on left shift of u8 + scsi: libfc: Fix array index out of bound exception + sched/fair: Fix CFS bandwidth hrtimer expiry type + net: ipv6: fix return value of ip6_skb_dst_mtu + netfilter: ctnetlink: suspicious RCU usage in ctnetlink_dump_helpinfo + net: bridge: sync fdb to new unicast-filtering ports + net: bcmgenet: Ensure all TX/RX queues DMAs are disabled + net: moxa: fix UAF in moxart_mac_probe + net: qcom/emac: fix UAF in emac_remove + net: ti: fix UAF in tlan_remove_one + net: send SYNACK packet with accepted fwmark + net: validate lwtstate->data before returning from skb_tunnel_info() + dma-buf/sync_file: Don't leak fences on merge failure + tcp: annotate data races around tp->mtu_info + ipv6: tcp: drop silly ICMPv6 packet too big messages + igb: Fix use-after-free error during reset + ixgbe: Fix an error handling path in 'ixgbe_probe()' + igb: Fix an error handling path in 'igb_probe()' + fm10k: Fix an error handling path in 'fm10k_probe()' + e1000e: Fix an error handling path in 'e1000_probe()' + iavf: Fix an error handling path in 'iavf_probe()' + igb: Check if num of q_vectors is smaller than max before array access + perf probe: Fix dso->nsinfo refcounting + perf lzma: Close lzma stream on exit + perf test bpf: Free obj_buf + perf probe-file: Delete namelist in del_events() on the error path + spi: mediatek: fix fifo rx mode + liquidio: Fix unintentional sign extension issue on left shift of u16 + s390/bpf: Perform r1 range checking before accessing jit->seen_reg[r1] + net: fix uninit-value in caif_seqpkt_sendmsg + net: decnet: Fix sleeping inside in af_decnet + netrom: Decrease sock refcount when sock timers expire + scsi: iscsi: Fix iface sysfs attr detection + scsi: target: Fix protect handling in WRITE SAME(32) + spi: cadence: Correct initialisation of runtime PM again + Revert "USB: quirks: ignore remote wake-up on Fibocom L850-GL LTE modem" + proc: Avoid mixing integer types in mem_rw() + s390/ftrace: fix ftrace_update_ftrace_func implementation + ALSA: sb: Fix potential ABBA deadlock in CSP driver + xhci: Fix lost USB 2 remote wake + KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow + usb: hub: Disable USB 3 device initiated lpm if exit latency is too high + USB: usb-storage: Add LaCie Rugged USB3-FW to IGNORE_UAS + usb: max-3421: Prevent corruption of freed memory + usb: renesas_usbhs: Fix superfluous irqs happen after usb_pkt_pop() + USB: serial: option: add support for u-blox LARA-R6 family + USB: serial: cp210x: fix comments for GE CS1000 + USB: serial: cp210x: add ID for CEL EM3588 USB ZigBee stick + usb: dwc2: gadget: Fix sending zero length packet in DDMA mode. + tracing: Fix bug in rb_per_cpu_empty() that might cause deadloop. + media: ngene: Fix out-of-bounds bug in ngene_command_config_free_buf() + ixgbe: Fix packet corruption due to missing DMA sync + selftest: use mmap instead of posix_memalign to allocate memory + drm: Return -ENOTTY for non-drm ioctls + net: bcmgenet: ensure EXT_ENERGY_DET_MASK is clear + iio: accel: bma180: Use explicit member assignment + iio: accel: bma180: Fix BMA25x bandwidth register values + btrfs: compression: don't try to compress if we don't have enough pages + spi: spi-fsl-dspi: Fix a resource leak in an error handling path + xhci: add xhci_get_virt_ep() helper + bpftool: Properly close va_list 'ap' by va_end() on error + net: ip_tunnel: fix mtu calculation for ETHER tunnel devices + nvme-pci: do not call nvme_dev_remove_admin from nvme_remove + perf dso: Fix memory leak in dso__new_map() + net/tcp_fastopen: fix data races around tfo_active_disable_stamp + nvme-pci: don't WARN_ON in nvme_reset_work if ctrl.state is not RESETTING + drm/panel: raspberrypi-touchscreen: Prevent double-free + KVM: do not assume PTE is writable after follow_pfn + KVM: Use kvm_pfn_t for local PFN variable in hva_to_pfn_remapped() + net: dsa: mv88e6xxx: use correct .stats_set_histogram() on Topaz + workqueue: fix UAF in pwq_unbound_release_workfn() + UBUNTU: upstream stable to v4.14.241, v4.19.200 -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/1939913 Title: Bionic update: upstream stable patchset 2021-08-13 Status in linux package in Ubuntu: Invalid Status in linux source package in Bionic: In Progress Bug description: SRU Justification Impact: The upstream process for stable tree updates is quite similar in scope to the Ubuntu SRU process, e.g., each patch has to demonstrably fix a bug, and each patch is vetted by upstream by originating either directly from a mainline/stable Linux tree or a minimally backported form of that patch. The following upstream stable patches should be included in the Ubuntu kernel: upstream stable patchset 2021-08-13 Ported from the following upstream stable releases: v4.14.241, v4.19.199, v4.19.200 from git://git.kernel.org/ ARM: dts: gemini: add device_type on pci ARM: dts: rockchip: fix pinctrl sleep nodename for rk3036-kylin and rk3288 arm64: dts: rockchip: fix pinctrl sleep nodename for rk3399.dtsi ARM: dts: rockchip: Fix the timer clocks order ARM: dts: rockchip: Fix power-controller node names for rk3288 arm64: dts: rockchip: Fix power-controller node names for rk3328 reset: ti-syscon: fix to_ti_syscon_reset_data macro ARM: brcmstb: dts: fix NAND nodes names ARM: Cygnus: dts: fix NAND nodes names ARM: NSP: dts: fix NAND nodes names ARM: dts: BCM63xx: Fix NAND nodes names ARM: dts: imx6: phyFLEX: Fix UART hardware flow control ARM: imx: pm-imx5: Fix references to imx5_cpu_suspend_info ARM: dts: stm32: fix RCC node name on stm32f429 MCU arm64: dts: juno: Update SCPI nodes as per the YAML schema arm64: dts: ls208xa: remove bus-num from dspi node thermal/core: Correct function name thermal_zone_device_unregister() kbuild: mkcompile_h: consider timestamp if KBUILD_BUILD_TIMESTAMP is set rtc: max77686: Do not enforce (incorrect) interrupt trigger type scsi: aic7xxx: Fix unintentional sign extension issue on left shift of u8 scsi: libfc: Fix array index out of bound exception sched/fair: Fix CFS bandwidth hrtimer expiry type net: ipv6: fix return value of ip6_skb_dst_mtu netfilter: ctnetlink: suspicious RCU usage in ctnetlink_dump_helpinfo net: bridge: sync fdb to new unicast-filtering ports net: bcmgenet: Ensure all TX/RX queues DMAs are disabled net: moxa: fix UAF in moxart_mac_probe net: qcom/emac: fix UAF in emac_remove net: ti: fix UAF in tlan_remove_one net: send SYNACK packet with accepted fwmark net: validate lwtstate->data before returning from skb_tunnel_info() dma-buf/sync_file: Don't leak fences on merge failure tcp: annotate data races around tp->mtu_info ipv6: tcp: drop silly ICMPv6 packet too big messages igb: Fix use-after-free error during reset ixgbe: Fix an error handling path in 'ixgbe_probe()' igb: Fix an error handling path in 'igb_probe()' fm10k: Fix an error handling path in 'fm10k_probe()' e1000e: Fix an error handling path in 'e1000_probe()' iavf: Fix an error handling path in 'iavf_probe()' igb: Check if num of q_vectors is smaller than max before array access perf probe: Fix dso->nsinfo refcounting perf lzma: Close lzma stream on exit perf test bpf: Free obj_buf perf probe-file: Delete namelist in del_events() on the error path spi: mediatek: fix fifo rx mode liquidio: Fix unintentional sign extension issue on left shift of u16 s390/bpf: Perform r1 range checking before accessing jit->seen_reg[r1] net: fix uninit-value in caif_seqpkt_sendmsg net: decnet: Fix sleeping inside in af_decnet netrom: Decrease sock refcount when sock timers expire scsi: iscsi: Fix iface sysfs attr detection scsi: target: Fix protect handling in WRITE SAME(32) spi: cadence: Correct initialisation of runtime PM again Revert "USB: quirks: ignore remote wake-up on Fibocom L850-GL LTE modem" proc: Avoid mixing integer types in mem_rw() s390/ftrace: fix ftrace_update_ftrace_func implementation ALSA: sb: Fix potential ABBA deadlock in CSP driver xhci: Fix lost USB 2 remote wake KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow usb: hub: Disable USB 3 device initiated lpm if exit latency is too high USB: usb-storage: Add LaCie Rugged USB3-FW to IGNORE_UAS usb: max-3421: Prevent corruption of freed memory usb: renesas_usbhs: Fix superfluous irqs happen after usb_pkt_pop() USB: serial: option: add support for u-blox LARA-R6 family USB: serial: cp210x: fix comments for GE CS1000 USB: serial: cp210x: add ID for CEL EM3588 USB ZigBee stick usb: dwc2: gadget: Fix sending zero length packet in DDMA mode. tracing: Fix bug in rb_per_cpu_empty() that might cause deadloop. media: ngene: Fix out-of-bounds bug in ngene_command_config_free_buf() ixgbe: Fix packet corruption due to missing DMA sync selftest: use mmap instead of posix_memalign to allocate memory drm: Return -ENOTTY for non-drm ioctls net: bcmgenet: ensure EXT_ENERGY_DET_MASK is clear iio: accel: bma180: Use explicit member assignment iio: accel: bma180: Fix BMA25x bandwidth register values btrfs: compression: don't try to compress if we don't have enough pages spi: spi-fsl-dspi: Fix a resource leak in an error handling path xhci: add xhci_get_virt_ep() helper bpftool: Properly close va_list 'ap' by va_end() on error net: ip_tunnel: fix mtu calculation for ETHER tunnel devices nvme-pci: do not call nvme_dev_remove_admin from nvme_remove perf dso: Fix memory leak in dso__new_map() net/tcp_fastopen: fix data races around tfo_active_disable_stamp nvme-pci: don't WARN_ON in nvme_reset_work if ctrl.state is not RESETTING drm/panel: raspberrypi-touchscreen: Prevent double-free KVM: do not assume PTE is writable after follow_pfn KVM: Use kvm_pfn_t for local PFN variable in hva_to_pfn_remapped() net: dsa: mv88e6xxx: use correct .stats_set_histogram() on Topaz workqueue: fix UAF in pwq_unbound_release_workfn() UBUNTU: upstream stable to v4.14.241, v4.19.200 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1939913/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp