Public bug reported:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
upstream stable patchset 2021-08-13
Ported from the following upstream stable releases:
v4.14.241, v4.19.199,
v4.19.200
from git://git.kernel.org/
ARM: dts: gemini: add device_type on pci
ARM: dts: rockchip: fix pinctrl sleep nodename for rk3036-kylin and rk3288
arm64: dts: rockchip: fix pinctrl sleep nodename for rk3399.dtsi
ARM: dts: rockchip: Fix the timer clocks order
ARM: dts: rockchip: Fix power-controller node names for rk3288
arm64: dts: rockchip: Fix power-controller node names for rk3328
reset: ti-syscon: fix to_ti_syscon_reset_data macro
ARM: brcmstb: dts: fix NAND nodes names
ARM: Cygnus: dts: fix NAND nodes names
ARM: NSP: dts: fix NAND nodes names
ARM: dts: BCM63xx: Fix NAND nodes names
ARM: dts: imx6: phyFLEX: Fix UART hardware flow control
ARM: imx: pm-imx5: Fix references to imx5_cpu_suspend_info
ARM: dts: stm32: fix RCC node name on stm32f429 MCU
arm64: dts: juno: Update SCPI nodes as per the YAML schema
arm64: dts: ls208xa: remove bus-num from dspi node
thermal/core: Correct function name thermal_zone_device_unregister()
kbuild: mkcompile_h: consider timestamp if KBUILD_BUILD_TIMESTAMP is set
rtc: max77686: Do not enforce (incorrect) interrupt trigger type
scsi: aic7xxx: Fix unintentional sign extension issue on left shift of u8
scsi: libfc: Fix array index out of bound exception
sched/fair: Fix CFS bandwidth hrtimer expiry type
net: ipv6: fix return value of ip6_skb_dst_mtu
netfilter: ctnetlink: suspicious RCU usage in ctnetlink_dump_helpinfo
net: bridge: sync fdb to new unicast-filtering ports
net: bcmgenet: Ensure all TX/RX queues DMAs are disabled
net: moxa: fix UAF in moxart_mac_probe
net: qcom/emac: fix UAF in emac_remove
net: ti: fix UAF in tlan_remove_one
net: send SYNACK packet with accepted fwmark
net: validate lwtstate->data before returning from skb_tunnel_info()
dma-buf/sync_file: Don't leak fences on merge failure
tcp: annotate data races around tp->mtu_info
ipv6: tcp: drop silly ICMPv6 packet too big messages
igb: Fix use-after-free error during reset
ixgbe: Fix an error handling path in 'ixgbe_probe()'
igb: Fix an error handling path in 'igb_probe()'
fm10k: Fix an error handling path in 'fm10k_probe()'
e1000e: Fix an error handling path in 'e1000_probe()'
iavf: Fix an error handling path in 'iavf_probe()'
igb: Check if num of q_vectors is smaller than max before array access
perf probe: Fix dso->nsinfo refcounting
perf lzma: Close lzma stream on exit
perf test bpf: Free obj_buf
perf probe-file: Delete namelist in del_events() on the error path
spi: mediatek: fix fifo rx mode
liquidio: Fix unintentional sign extension issue on left shift of u16
s390/bpf: Perform r1 range checking before accessing jit->seen_reg[r1]
net: fix uninit-value in caif_seqpkt_sendmsg
net: decnet: Fix sleeping inside in af_decnet
netrom: Decrease sock refcount when sock timers expire
scsi: iscsi: Fix iface sysfs attr detection
scsi: target: Fix protect handling in WRITE SAME(32)
spi: cadence: Correct initialisation of runtime PM again
Revert "USB: quirks: ignore remote wake-up on Fibocom L850-GL LTE modem"
proc: Avoid mixing integer types in mem_rw()
s390/ftrace: fix ftrace_update_ftrace_func implementation
ALSA: sb: Fix potential ABBA deadlock in CSP driver
xhci: Fix lost USB 2 remote wake
KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow
usb: hub: Disable USB 3 device initiated lpm if exit latency is too high
USB: usb-storage: Add LaCie Rugged USB3-FW to IGNORE_UAS
usb: max-3421: Prevent corruption of freed memory
usb: renesas_usbhs: Fix superfluous irqs happen after usb_pkt_pop()
USB: serial: option: add support for u-blox LARA-R6 family
USB: serial: cp210x: fix comments for GE CS1000
USB: serial: cp210x: add ID for CEL EM3588 USB ZigBee stick
usb: dwc2: gadget: Fix sending zero length packet in DDMA mode.
tracing: Fix bug in rb_per_cpu_empty() that might cause deadloop.
media: ngene: Fix out-of-bounds bug in ngene_command_config_free_buf()
ixgbe: Fix packet corruption due to missing DMA sync
selftest: use mmap instead of posix_memalign to allocate memory
drm: Return -ENOTTY for non-drm ioctls
net: bcmgenet: ensure EXT_ENERGY_DET_MASK is clear
iio: accel: bma180: Use explicit member assignment
iio: accel: bma180: Fix BMA25x bandwidth register values
btrfs: compression: don't try to compress if we don't have enough pages
spi: spi-fsl-dspi: Fix a resource leak in an error handling path
xhci: add xhci_get_virt_ep() helper
bpftool: Properly close va_list 'ap' by va_end() on error
net: ip_tunnel: fix mtu calculation for ETHER tunnel devices
nvme-pci: do not call nvme_dev_remove_admin from nvme_remove
perf dso: Fix memory leak in dso__new_map()
net/tcp_fastopen: fix data races around tfo_active_disable_stamp
nvme-pci: don't WARN_ON in nvme_reset_work if ctrl.state is not RESETTING
drm/panel: raspberrypi-touchscreen: Prevent double-free
KVM: do not assume PTE is writable after follow_pfn
KVM: Use kvm_pfn_t for local PFN variable in hva_to_pfn_remapped()
net: dsa: mv88e6xxx: use correct .stats_set_histogram() on Topaz
workqueue: fix UAF in pwq_unbound_release_workfn()
UBUNTU: upstream stable to v4.14.241, v4.19.200
** Affects: linux (Ubuntu)
Importance: Undecided
Status: Invalid
** Affects: linux (Ubuntu Bionic)
Importance: Medium
Assignee: Kamal Mostafa (kamalmostafa)
Status: In Progress
** Tags: kernel-stable-tracking-bug
** Changed in: linux (Ubuntu)
Status: New => Confirmed
** Tags added: kernel-stable-tracking-bug
** Also affects: linux (Ubuntu Bionic)
Importance: Undecided
Status: New
** Changed in: linux (Ubuntu Bionic)
Status: New => In Progress
** Changed in: linux (Ubuntu Bionic)
Importance: Undecided => Medium
** Changed in: linux (Ubuntu Bionic)
Assignee: (unassigned) => Kamal Mostafa (kamalmostafa)
** Changed in: linux (Ubuntu)
Status: Confirmed => Invalid
** Description changed:
+ SRU Justification
- SRU Justification
+ Impact:
+ The upstream process for stable tree updates is quite similar
+ in scope to the Ubuntu SRU process, e.g., each patch has to
+ demonstrably fix a bug, and each patch is vetted by upstream
+ by originating either directly from a mainline/stable Linux tree or
+ a minimally backported form of that patch. The following upstream
+ stable patches should be included in the Ubuntu kernel:
- Impact:
- The upstream process for stable tree updates is quite similar
- in scope to the Ubuntu SRU process, e.g., each patch has to
- demonstrably fix a bug, and each patch is vetted by upstream
- by originating either directly from a mainline/stable Linux tree or
- a minimally backported form of that patch. The following upstream
- stable patches should be included in the Ubuntu kernel:
+ upstream stable patchset 2021-08-13
- upstream stable patchset 2021-08-13
- from git://git.kernel.org/
+ Ported from the following upstream stable releases:
+ v4.14.241, v4.19.199,
+ v4.19.200
+
+ from git://git.kernel.org/
+
+ ARM: dts: gemini: add device_type on pci
+ ARM: dts: rockchip: fix pinctrl sleep nodename for rk3036-kylin and rk3288
+ arm64: dts: rockchip: fix pinctrl sleep nodename for rk3399.dtsi
+ ARM: dts: rockchip: Fix the timer clocks order
+ ARM: dts: rockchip: Fix power-controller node names for rk3288
+ arm64: dts: rockchip: Fix power-controller node names for rk3328
+ reset: ti-syscon: fix to_ti_syscon_reset_data macro
+ ARM: brcmstb: dts: fix NAND nodes names
+ ARM: Cygnus: dts: fix NAND nodes names
+ ARM: NSP: dts: fix NAND nodes names
+ ARM: dts: BCM63xx: Fix NAND nodes names
+ ARM: dts: imx6: phyFLEX: Fix UART hardware flow control
+ ARM: imx: pm-imx5: Fix references to imx5_cpu_suspend_info
+ ARM: dts: stm32: fix RCC node name on stm32f429 MCU
+ arm64: dts: juno: Update SCPI nodes as per the YAML schema
+ arm64: dts: ls208xa: remove bus-num from dspi node
+ thermal/core: Correct function name thermal_zone_device_unregister()
+ kbuild: mkcompile_h: consider timestamp if KBUILD_BUILD_TIMESTAMP is set
+ rtc: max77686: Do not enforce (incorrect) interrupt trigger type
+ scsi: aic7xxx: Fix unintentional sign extension issue on left shift of u8
+ scsi: libfc: Fix array index out of bound exception
+ sched/fair: Fix CFS bandwidth hrtimer expiry type
+ net: ipv6: fix return value of ip6_skb_dst_mtu
+ netfilter: ctnetlink: suspicious RCU usage in ctnetlink_dump_helpinfo
+ net: bridge: sync fdb to new unicast-filtering ports
+ net: bcmgenet: Ensure all TX/RX queues DMAs are disabled
+ net: moxa: fix UAF in moxart_mac_probe
+ net: qcom/emac: fix UAF in emac_remove
+ net: ti: fix UAF in tlan_remove_one
+ net: send SYNACK packet with accepted fwmark
+ net: validate lwtstate->data before returning from skb_tunnel_info()
+ dma-buf/sync_file: Don't leak fences on merge failure
+ tcp: annotate data races around tp->mtu_info
+ ipv6: tcp: drop silly ICMPv6 packet too big messages
+ igb: Fix use-after-free error during reset
+ ixgbe: Fix an error handling path in 'ixgbe_probe()'
+ igb: Fix an error handling path in 'igb_probe()'
+ fm10k: Fix an error handling path in 'fm10k_probe()'
+ e1000e: Fix an error handling path in 'e1000_probe()'
+ iavf: Fix an error handling path in 'iavf_probe()'
+ igb: Check if num of q_vectors is smaller than max before array access
+ perf probe: Fix dso->nsinfo refcounting
+ perf lzma: Close lzma stream on exit
+ perf test bpf: Free obj_buf
+ perf probe-file: Delete namelist in del_events() on the error path
+ spi: mediatek: fix fifo rx mode
+ liquidio: Fix unintentional sign extension issue on left shift of u16
+ s390/bpf: Perform r1 range checking before accessing jit->seen_reg[r1]
+ net: fix uninit-value in caif_seqpkt_sendmsg
+ net: decnet: Fix sleeping inside in af_decnet
+ netrom: Decrease sock refcount when sock timers expire
+ scsi: iscsi: Fix iface sysfs attr detection
+ scsi: target: Fix protect handling in WRITE SAME(32)
+ spi: cadence: Correct initialisation of runtime PM again
+ Revert "USB: quirks: ignore remote wake-up on Fibocom L850-GL LTE modem"
+ proc: Avoid mixing integer types in mem_rw()
+ s390/ftrace: fix ftrace_update_ftrace_func implementation
+ ALSA: sb: Fix potential ABBA deadlock in CSP driver
+ xhci: Fix lost USB 2 remote wake
+ KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow
+ usb: hub: Disable USB 3 device initiated lpm if exit latency is too high
+ USB: usb-storage: Add LaCie Rugged USB3-FW to IGNORE_UAS
+ usb: max-3421: Prevent corruption of freed memory
+ usb: renesas_usbhs: Fix superfluous irqs happen after usb_pkt_pop()
+ USB: serial: option: add support for u-blox LARA-R6 family
+ USB: serial: cp210x: fix comments for GE CS1000
+ USB: serial: cp210x: add ID for CEL EM3588 USB ZigBee stick
+ usb: dwc2: gadget: Fix sending zero length packet in DDMA mode.
+ tracing: Fix bug in rb_per_cpu_empty() that might cause deadloop.
+ media: ngene: Fix out-of-bounds bug in ngene_command_config_free_buf()
+ ixgbe: Fix packet corruption due to missing DMA sync
+ selftest: use mmap instead of posix_memalign to allocate memory
+ drm: Return -ENOTTY for non-drm ioctls
+ net: bcmgenet: ensure EXT_ENERGY_DET_MASK is clear
+ iio: accel: bma180: Use explicit member assignment
+ iio: accel: bma180: Fix BMA25x bandwidth register values
+ btrfs: compression: don't try to compress if we don't have enough pages
+ spi: spi-fsl-dspi: Fix a resource leak in an error handling path
+ xhci: add xhci_get_virt_ep() helper
+ bpftool: Properly close va_list 'ap' by va_end() on error
+ net: ip_tunnel: fix mtu calculation for ETHER tunnel devices
+ nvme-pci: do not call nvme_dev_remove_admin from nvme_remove
+ perf dso: Fix memory leak in dso__new_map()
+ net/tcp_fastopen: fix data races around tfo_active_disable_stamp
+ nvme-pci: don't WARN_ON in nvme_reset_work if ctrl.state is not RESETTING
+ drm/panel: raspberrypi-touchscreen: Prevent double-free
+ KVM: do not assume PTE is writable after follow_pfn
+ KVM: Use kvm_pfn_t for local PFN variable in hva_to_pfn_remapped()
+ net: dsa: mv88e6xxx: use correct .stats_set_histogram() on Topaz
+ workqueue: fix UAF in pwq_unbound_release_workfn()
+ UBUNTU: upstream stable to v4.14.241, v4.19.200
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1939913
Title:
Bionic update: upstream stable patchset 2021-08-13
Status in linux package in Ubuntu:
Invalid
Status in linux source package in Bionic:
In Progress
Bug description:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
upstream stable patchset 2021-08-13
Ported from the following upstream stable releases:
v4.14.241, v4.19.199,
v4.19.200
from git://git.kernel.org/
ARM: dts: gemini: add device_type on pci
ARM: dts: rockchip: fix pinctrl sleep nodename for rk3036-kylin and rk3288
arm64: dts: rockchip: fix pinctrl sleep nodename for rk3399.dtsi
ARM: dts: rockchip: Fix the timer clocks order
ARM: dts: rockchip: Fix power-controller node names for rk3288
arm64: dts: rockchip: Fix power-controller node names for rk3328
reset: ti-syscon: fix to_ti_syscon_reset_data macro
ARM: brcmstb: dts: fix NAND nodes names
ARM: Cygnus: dts: fix NAND nodes names
ARM: NSP: dts: fix NAND nodes names
ARM: dts: BCM63xx: Fix NAND nodes names
ARM: dts: imx6: phyFLEX: Fix UART hardware flow control
ARM: imx: pm-imx5: Fix references to imx5_cpu_suspend_info
ARM: dts: stm32: fix RCC node name on stm32f429 MCU
arm64: dts: juno: Update SCPI nodes as per the YAML schema
arm64: dts: ls208xa: remove bus-num from dspi node
thermal/core: Correct function name thermal_zone_device_unregister()
kbuild: mkcompile_h: consider timestamp if KBUILD_BUILD_TIMESTAMP is set
rtc: max77686: Do not enforce (incorrect) interrupt trigger type
scsi: aic7xxx: Fix unintentional sign extension issue on left shift of u8
scsi: libfc: Fix array index out of bound exception
sched/fair: Fix CFS bandwidth hrtimer expiry type
net: ipv6: fix return value of ip6_skb_dst_mtu
netfilter: ctnetlink: suspicious RCU usage in ctnetlink_dump_helpinfo
net: bridge: sync fdb to new unicast-filtering ports
net: bcmgenet: Ensure all TX/RX queues DMAs are disabled
net: moxa: fix UAF in moxart_mac_probe
net: qcom/emac: fix UAF in emac_remove
net: ti: fix UAF in tlan_remove_one
net: send SYNACK packet with accepted fwmark
net: validate lwtstate->data before returning from skb_tunnel_info()
dma-buf/sync_file: Don't leak fences on merge failure
tcp: annotate data races around tp->mtu_info
ipv6: tcp: drop silly ICMPv6 packet too big messages
igb: Fix use-after-free error during reset
ixgbe: Fix an error handling path in 'ixgbe_probe()'
igb: Fix an error handling path in 'igb_probe()'
fm10k: Fix an error handling path in 'fm10k_probe()'
e1000e: Fix an error handling path in 'e1000_probe()'
iavf: Fix an error handling path in 'iavf_probe()'
igb: Check if num of q_vectors is smaller than max before array access
perf probe: Fix dso->nsinfo refcounting
perf lzma: Close lzma stream on exit
perf test bpf: Free obj_buf
perf probe-file: Delete namelist in del_events() on the error path
spi: mediatek: fix fifo rx mode
liquidio: Fix unintentional sign extension issue on left shift of u16
s390/bpf: Perform r1 range checking before accessing jit->seen_reg[r1]
net: fix uninit-value in caif_seqpkt_sendmsg
net: decnet: Fix sleeping inside in af_decnet
netrom: Decrease sock refcount when sock timers expire
scsi: iscsi: Fix iface sysfs attr detection
scsi: target: Fix protect handling in WRITE SAME(32)
spi: cadence: Correct initialisation of runtime PM again
Revert "USB: quirks: ignore remote wake-up on Fibocom L850-GL LTE modem"
proc: Avoid mixing integer types in mem_rw()
s390/ftrace: fix ftrace_update_ftrace_func implementation
ALSA: sb: Fix potential ABBA deadlock in CSP driver
xhci: Fix lost USB 2 remote wake
KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow
usb: hub: Disable USB 3 device initiated lpm if exit latency is too high
USB: usb-storage: Add LaCie Rugged USB3-FW to IGNORE_UAS
usb: max-3421: Prevent corruption of freed memory
usb: renesas_usbhs: Fix superfluous irqs happen after usb_pkt_pop()
USB: serial: option: add support for u-blox LARA-R6 family
USB: serial: cp210x: fix comments for GE CS1000
USB: serial: cp210x: add ID for CEL EM3588 USB ZigBee stick
usb: dwc2: gadget: Fix sending zero length packet in DDMA mode.
tracing: Fix bug in rb_per_cpu_empty() that might cause deadloop.
media: ngene: Fix out-of-bounds bug in ngene_command_config_free_buf()
ixgbe: Fix packet corruption due to missing DMA sync
selftest: use mmap instead of posix_memalign to allocate memory
drm: Return -ENOTTY for non-drm ioctls
net: bcmgenet: ensure EXT_ENERGY_DET_MASK is clear
iio: accel: bma180: Use explicit member assignment
iio: accel: bma180: Fix BMA25x bandwidth register values
btrfs: compression: don't try to compress if we don't have enough pages
spi: spi-fsl-dspi: Fix a resource leak in an error handling path
xhci: add xhci_get_virt_ep() helper
bpftool: Properly close va_list 'ap' by va_end() on error
net: ip_tunnel: fix mtu calculation for ETHER tunnel devices
nvme-pci: do not call nvme_dev_remove_admin from nvme_remove
perf dso: Fix memory leak in dso__new_map()
net/tcp_fastopen: fix data races around tfo_active_disable_stamp
nvme-pci: don't WARN_ON in nvme_reset_work if ctrl.state is not RESETTING
drm/panel: raspberrypi-touchscreen: Prevent double-free
KVM: do not assume PTE is writable after follow_pfn
KVM: Use kvm_pfn_t for local PFN variable in hva_to_pfn_remapped()
net: dsa: mv88e6xxx: use correct .stats_set_histogram() on Topaz
workqueue: fix UAF in pwq_unbound_release_workfn()
UBUNTU: upstream stable to v4.14.241, v4.19.200
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1939913/+subscriptions
--
Mailing list: https://launchpad.net/~kernel-packages
Post to : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help : https://help.launchpad.net/ListHelp
