This bug was fixed in the package linux - 5.13.0-21.21
---------------
linux (5.13.0-21.21) impish; urgency=medium
* impish/linux: 5.13.0-21.21 -proposed tracker (LP: #1947347)
* It hangs while booting up with AMD W6800 [1002:73A3] (LP: #1945553)
- drm/amdgpu: Rename flag which prevents HW access
- drm/amd/pm: Fix a bug communicating with the SMU (v5)
- drm/amd/pm: Fix a bug in semaphore double-lock
* Add final-checks to check certificates (LP: #1947174)
- [Packaging] Add system trusted and revocation keys final check
* No sound on Lenovo laptop models Legion 15IMHG05, Yoga 7 14ITL5, and 13s
Gen2 (LP: #1939052)
- ALSA: hda/realtek: Quirks to enable speaker output for Lenovo Legion 7i
15IMHG05, Yoga 7i 14ITL5/15ITL5, and 13s Gen2 laptops.
- ALSA: hda/realtek: Fix for quirk to enable speaker output on the Lenovo
13s
Gen2
* Check for changes relevant for security certifications (LP: #1945989)
- [Packaging] Add a new fips-checks script
- [Packaging] Add fips-checks as part of finalchecks
* BCM57800 SRIOV bug causes interfaces to disappear (LP: #1945707)
- bnx2x: Fix enabling network interfaces without VFs
* CVE-2021-3759
- memcg: enable accounting of ipc resources
* [impish] Remove the downstream xr-usb-uart driver (LP: #1945938)
- SAUCE: xr-usb-serial: remove driver
- [Config] update modules list
* Fix A yellow screen pops up in an instant (< 1 second) and then disappears
before loading the system (LP: #1945932)
- drm/i915: Stop force enabling pipe bottom color gammma/csc
* Impish update: v5.13.18 upstream stable release (LP: #1946249)
- Linux 5.13.18
* Impish update: v5.13.17 upstream stable release (LP: #1946247)
- locking/mutex: Fix HANDOFF condition
- regmap: fix the offset of register error log
- regulator: tps65910: Silence deferred probe error
- crypto: mxs-dcp - Check for DMA mapping errors
- sched/deadline: Fix reset_on_fork reporting of DL tasks
- power: supply: axp288_fuel_gauge: Report register-address on readb /
writeb
errors
- crypto: omap-sham - clear dma flags only after omap_sham_update_dma_stop()
- sched/deadline: Fix missing clock update in migrate_task_rq_dl()
- rcu/tree: Handle VM stoppage in stall detection
- EDAC/mce_amd: Do not load edac_mce_amd module on guests
- hrtimer: Avoid double reprogramming in __hrtimer_start_range_ns()
- hrtimer: Ensure timerfd notification for HIGHRES=n
- udf: Check LVID earlier
- udf: Fix iocharset=utf8 mount option
- isofs: joliet: Fix iocharset=utf8 mount option
- bcache: add proper error unwinding in bcache_device_init
- nbd: add the check to prevent overflow in __nbd_ioctl()
- blk-throtl: optimize IOPS throttle for large IO scenarios
- nvme-tcp: don't update queue count when failing to set io queues
- nvme-rdma: don't update queue count when failing to set io queues
- nvmet: pass back cntlid on successful completion
- power: supply: smb347-charger: Add missing pin control activation
- power: supply: max17042_battery: fix typo in MAx17042_TOFF
- s390/cio: add dev_busid sysfs entry for each subchannel
- s390/zcrypt: fix wrong offset index for APKA master key valid state
- libata: fix ata_host_start()
- sched/topology: Skip updating masks for non-online nodes
- crypto: omap - Fix inconsistent locking of device lists
- crypto: qat - do not ignore errors from enable_vf2pf_comms()
- crypto: qat - handle both source of interrupt in VF ISR
- crypto: qat - fix reuse of completion variable
- crypto: qat - fix naming for init/shutdown VF to PF notifications
- crypto: qat - do not export adf_iov_putmsg()
- crypto: hisilicon/sec - fix the abnormal exiting process
- crypto: hisilicon/sec - modify the hardware endian configuration
- crypto: tcrypt - Fix missing return value check
- fcntl: fix potential deadlocks for &fown_struct.lock
- fcntl: fix potential deadlock for &fasync_struct.fa_lock
- udf_get_extendedattr() had no boundary checks.
- io-wq: remove GFP_ATOMIC allocation off schedule out path
- s390/kasan: fix large PMD pages address alignment check
- s390/pci: fix misleading rc in clp_set_pci_fn()
- s390/debug: keep debug data on resize
- s390/debug: fix debug area life cycle
- s390/ap: fix state machine hang after failure to enable irq
- sched/debug: Don't update sched_domain debug directories before
sched_debug_init()
- power: supply: cw2015: use dev_err_probe to allow deferred probe
- m68k: emu: Fix invalid free in nfeth_cleanup()
- crypto: x86/aes-ni - add missing error checks in XTS code
- crypto: ecc - handle unaligned input buffer in ecc_swap_digits
- sched/numa: Fix is_core_idle()
- sched: Fix UCLAMP_FLAG_IDLE setting
- rcu: Fix to include first blocked task in stall warning
- rcu: Fix stall-warning deadlock due to non-release of rcu_node ->lock
- m68k: Fix invalid RMW_INSNS on CPUs that lack CAS
- block: return ELEVATOR_DISCARD_MERGE if possible
- spi: spi-fsl-dspi: Fix issue with uninitialized dma_slave_config
- spi: spi-pic32: Fix issue with uninitialized dma_slave_config
- genirq/timings: Fix error return code in irq_timings_test_irqs()
- irqchip/loongson-pch-pic: Improve edge triggered interrupt support
- lib/mpi: use kcalloc in mpi_resize
- clocksource/drivers/sh_cmt: Fix wrong setting if don't request IRQ for
clock
source channel
- block: nbd: add sanity check for first_minor
- spi: coldfire-qspi: Use clk_disable_unprepare in the remove function
- irqchip/apple-aic: Fix irq_disable from within irq handlers
- irqchip/gic-v3: Fix priority comparison when non-secure priorities are
used
- crypto: qat - use proper type for vf_mask
- certs: Trigger creation of RSA module signing key if it's not an RSA key
- tpm: ibmvtpm: Avoid error message when process gets signal while waiting
- io_uring: refactor io_submit_flush_completions()
- x86/mce: Defer processing of early errors
- spi: davinci: invoke chipselect callback
- blk-crypto: fix check for too-large dun_bytes
- regulator: vctrl: Use locked regulator_get_voltage in probe path
- regulator: vctrl: Avoid lockdep warning in enable/disable ops
- spi: sprd: Fix the wrong WDG_LOAD_VAL
- spi: spi-zynq-qspi: use wait_for_completion_timeout to make
zynq_qspi_exec_mem_op not interruptible
- crypto: rmd320 - remove rmd320 in Makefile
- EDAC/i10nm: Fix NVDIMM detection
- drm/panfrost: Fix missing clk_disable_unprepare() on error in
panfrost_clk_init()
- drm/gma500: Fix end of loop tests for list_for_each_entry
- ASoC: mediatek: mt8192:Fix Unbalanced pm_runtime_enable in
mt8192_afe_pcm_dev_probe
- ASoC: mediatek: mt8183: Fix Unbalanced pm_runtime_enable in
mt8183_afe_pcm_dev_probe
- media: TDA1997x: enable EDID support
- leds: is31fl32xx: Fix missing error code in is31fl32xx_parse_dt()
- soc: rockchip: ROCKCHIP_GRF should not default to y, unconditionally
- media: cxd2880-spi: Fix an error handling path
- drm/of: free the right object
- bpf: Fix a typo of reuseport map in bpf.h.
- bpf: Fix potential memleak and UAF in the verifier.
- drm/of: free the iterator object on failure
- gve: fix the wrong AdminQ buffer overflow check
- libbpf: Fix the possible memory leak on error
- ARM: dts: aspeed-g6: Fix HVI3C function-group in pinctrl dtsi
- arm64: dts: renesas: r8a77995: draak: Remove bogus adv7511w properties
- i40e: improve locking of mac_filter_hash
- arm64: dts: qcom: sc7180: Set adau wakeup delay to 80 ms
- soc: qcom: rpmhpd: Use corner in power_off
- libbpf: Fix removal of inner map in bpf_object__create_map
- gfs2: Fix memory leak of object lsi on error return path
- arm64: dts: qcom: sm8250: fix usb2 qmp phy node
- bpf, selftests: Fix test_maps now that sockmap supports UDP
- firmware: fix theoretical UAF race with firmware cache and resume
- driver core: Fix error return code in really_probe()
- ionic: cleanly release devlink instance
- media: dvb-usb: fix uninit-value in dvb_usb_adapter_dvb_init
- media: dvb-usb: fix uninit-value in vp702x_read_mac_addr
- media: dvb-usb: Fix error handling in dvb_usb_i2c_init
- media: go7007: fix memory leak in go7007_usb_probe
- media: go7007: remove redundant initialization
- media: rockchip/rga: use pm_runtime_resume_and_get()
- media: rockchip/rga: fix error handling in probe
- media: coda: fix frame_mem_ctrl for YUV420 and YVU420 formats
- media: atomisp: fix the uninitialized use and rename "retvalue"
- Bluetooth: sco: prevent information leak in sco_conn_defer_accept()
- Bluetooth: btusb: Fix a unspported condition to set available debug
features
- 6lowpan: iphc: Fix an off-by-one check of array index
- tcp: seq_file: Avoid skipping sk during tcp_seek_last_pos
- ARM: dts: meson8: Use a higher default GPU clock frequency
- ARM: dts: meson8b: odroidc1: Fix the pwm regulator supply properties
- ARM: dts: meson8b: mxq: Fix the pwm regulator supply properties
- ARM: dts: meson8b: ec100: Fix the pwm regulator supply properties
- net/mlx5e: Prohibit inner indir TIRs in IPoIB
- net/mlx5e: Block LRO if firmware asks for tunneled LRO
- cgroup/cpuset: Fix a partition bug with hotplug
- drm: mxsfb: Enable recovery on underflow
- drm: mxsfb: Increase number of outstanding requests on V4 and newer HW
- drm: mxsfb: Clear FIFO_CLEAR bit
- net: cipso: fix warnings in netlbl_cipsov4_add_std
- net: ti: am65-cpsw-nuss: fix wrong devlink release order
- drm: rcar-du: Don't put reference to drm_device in rcar_du_remove()
- Bluetooth: mgmt: Fix wrong opcode in the response for add_adv cmd
- tools: Free BTF objects at various locations
- arm64: dts: renesas: hihope-rzg2-ex: Add EtherAVB internal rx delay
- devlink: Break parameter notification sequence to be before/after
unload/load driver
- net/mlx5: Fix missing return value in
mlx5_devlink_eswitch_inline_mode_set()
- i2c: highlander: add IRQ check
- leds: lgm-sso: Put fwnode in any case during ->probe()
- leds: lgm-sso: Don't spam logs when probe is deferred
- leds: lt3593: Put fwnode in any case during ->probe()
- leds: rt8515: Put fwnode in any case during ->probe()
- leds: trigger: audio: Add an activate callback to ensure the initial
brightness is set
- media: em28xx-input: fix refcount bug in em28xx_usb_disconnect
- media: omap3isp: Fix missing unlock in isp_subdev_notifier_complete()
- media: venus: hfi: fix return value check in sys_get_prop_image_version()
- media: venus: venc: Fix potential null pointer dereference on pointer fmt
- media: venus: helper: do not set constrained parameters for UBWC
- soc: mmsys: mediatek: add mask to mmsys routes
- PCI: PM: Avoid forcing PCI_D0 for wakeup reasons inconsistently
- PCI: PM: Enable PME if it can be signaled from D3cold
- bpf, samples: Add missing mprog-disable to xdp_redirect_cpu's optstring
- soc: qcom: smsm: Fix missed interrupts if state changes while masked
- debugfs: Return error during {full/open}_proxy_open() on rmmod
- Bluetooth: increase BTNAMSIZ to 21 chars to fix potential buffer overflow
- net: ti: am65-cpsw-nuss: fix RX IRQ state after .ndo_stop()
- net: dsa: stop syncing the bridge mcast_router attribute at join time
- net: dsa: mt7530: remove the .port_set_mrouter implementation
- net: dsa: don't disable multicast flooding to the CPU even without an IGMP
querier
- PM: EM: Increase energy calculation precision
- selftests/bpf: Fix bpf-iter-tcp4 test to print correctly the dest IP
- leds: lgm-sso: Propagate error codes from callee to caller
- drm/msm/mdp4: refactor HW revision detection into read_mdp_hw_revision
- drm/msm/mdp4: move HW revision detection to earlier phase
- drm/msm/dp: update is_connected status base on sink count at
dp_pm_resume()
- drm/msm/dpu: make dpu_hw_ctl_clear_all_blendstages clear necessary LMs
- arm64: dts: exynos: correct GIC CPU interfaces address range on Exynos7
- counter: 104-quad-8: Return error when invalid mode during ceiling_write
- cgroup/cpuset: Miscellaneous code cleanup
- cgroup/cpuset: Fix violation of cpuset locking rule
- ASoC: Intel: Fix platform ID matching
- Bluetooth: fix repeated calls to sco_sock_kill
- drm/msm/dsi: Fix some reference counted resource leaks
- drm/msm/dp: replug event is converted into an unplug followed by an plug
events
- net/mlx5: Fix unpublish devlink parameters
- ASoC: rt5682: Implement remove callback
- ASoC: rt5682: Properly turn off regulators if wrong device ID
- usb: dwc3: meson-g12a: add IRQ check
- usb: dwc3: qcom: add IRQ check
- usb: gadget: udc: at91: add IRQ check
- usb: gadget: udc: s3c2410: add IRQ check
- usb: misc: brcmstb-usb-pinmap: add IRQ check
- usb: phy: fsl-usb: add IRQ check
- usb: phy: twl6030: add IRQ checks
- usb: gadget: udc: renesas_usb3: Fix soc_device_match() abuse
- selftests/bpf: Fix test_core_autosize on big-endian machines
- devlink: Clear whole devlink_flash_notify struct
- samples: pktgen: add missing IPv6 option to pktgen scripts
- net: stmmac: fix INTR TBU status affecting irq count statistic
- PM: cpu: Make notifier chain use a raw_spinlock_t
- usb: host: ohci-tmio: add IRQ check
- usb: phy: tahvo: add IRQ check
- libbpf: Re-build libbpf.so when libbpf.map changes
- mac80211: Fix insufficient headroom issue for AMSDU
- locking/local_lock: Add missing owner initialization
- lockd: Fix invalid lockowner cast after vfs_test_lock
- SUNRPC: Fix a NULL pointer deref in trace_svc_stats_latency()
- nfsd4: Fix forced-expiry locking
- arm64: dts: marvell: armada-37xx: Extend PCIe MEM space
- clk: staging: correct reference to config IOMEM to config HAS_IOMEM
- [Config] updateconfigs for COMMON_CLK_XLNX_CLKWZRD
- i2c: synquacer: fix deferred probing
- hwmon: (pmbus/bpa-rs600) Don't use rated limits as warn limits
- hwmon: remove amd_energy driver in Makefile
- ASoC: fsl_rpmsg: Check -EPROBE_DEFER for getting clocks
- firmware: raspberrypi: Fix a leak in 'rpi_firmware_get()'
- usb: gadget: mv_u3d: request_irq() after initializing UDC
- mm/swap: consider max pages in iomap_swapfile_add_extent
- lkdtm: replace SCSI_DISPATCH_CMD with SCSI_QUEUE_RQ
- Bluetooth: add timeout sanity check to hci_inquiry
- i2c: iop3xx: fix deferred probing
- i2c: s3c2410: fix IRQ check
- i2c: hix5hd2: fix IRQ check
- gfs2: init system threads before freeze lock
- rsi: fix error code in rsi_load_9116_firmware()
- rsi: fix an error code in rsi_probe()
- octeontx2-af: cn10k: Fix SDP base channel number
- octeontx2-pf: send correct vlan priority mask to npc_install_flow_req
- octeontx2-pf: Don't install VLAN offload rule if netdev is down
- octeontx2-pf: Fix algorithm index in MCAM rules with RSS action
- m68k: coldfire: return success for clk_enable(NULL)
- ASoC: Intel: kbl_da7219_max98927: Fix format selection for max98373
- ASoC: Intel: Skylake: Leave data as is when invoking TLV IPCs
- ASoC: Intel: Skylake: Fix module resource and format selection
- mmc: sdhci: Fix issue with uninitialized dma_slave_config
- mmc: dw_mmc: Fix issue with uninitialized dma_slave_config
- mmc: moxart: Fix issue with uninitialized dma_slave_config
- bpf: Fix possible out of bound write in narrow load handling
- CIFS: Fix a potencially linear read overflow
- i2c: mt65xx: fix IRQ check
- i2c: xlp9xx: fix main IRQ check
- octeontx2-pf: cn10k: Fix error return code in otx2_set_flowkey_cfg()
- usb: ehci-orion: Handle errors of clk_prepare_enable() in probe
- usb: bdc: Fix an error handling path in 'bdc_probe()' when no suitable DMA
config is available
- usb: bdc: Fix a resource leak in the error handling path of 'bdc_probe()'
- tty: serial: fsl_lpuart: fix the wrong mapbase value
- ASoC: wcd9335: Fix a double irq free in the remove function
- ASoC: wcd9335: Fix a memory leak in the error handling path of the probe
function
- ASoC: wcd9335: Disable irq on slave ports in the remove function
- iwlwifi: skip first element in the WTAS ACPI table
- net/mlx5: Remove all auxiliary devices at the unregister event
- net/mlx5e: Fix possible use-after-free deleting fdb rule
- net/mlx5: E-Switch, Set vhca id valid flag when creating indir fwd group
- net/mlx5e: Use correct eswitch for stack devices with lag
- ice: Only lock to update netdev dev_addr
- net: phy: marvell10g: fix broken PHY interrupts for anyone after us in the
driver probe list
- ath6kl: wmi: fix an error code in ath6kl_wmi_sync_point()
- atlantic: Fix driver resume flow.
- bcma: Fix memory leak for internally-handled cores
- brcmfmac: pcie: fix oops on failure to resume and reprobe
- ipv6: make exception cache less predictible
- ipv4: make exception cache less predictible
- net: qrtr: make checks in qrtr_endpoint_post() stricter
- sch_htb: Fix inconsistency when leaf qdisc creation fails
- net: sched: Fix qdisc_rate_table refcount leak when get tcf_block failed
- net: qualcomm: fix QCA7000 checksum handling
- octeontx2-af: Fix loop in free and unmap counter
- octeontx2-af: Fix mailbox errors in nix_rss_flowkey_cfg
- octeontx2-af: Fix static code analyzer reported issues
- octeontx2-af: Set proper errorcode for IPv4 checksum errors
- ipv4: fix endianness issue in inet_rtm_getroute_build_skb()
- amdgpu/pm: add extra info to SMU msg pre-check failed message
- ASoC: rt5682: Remove unused variable in rt5682_i2c_remove()
- iwlwifi Add support for ax201 in Samsung Galaxy Book Flex2 Alpha
- f2fs: guarantee to write dirty data when enabling checkpoint back
- auxdisplay: hd44780: Fix oops on module unloading
- io_uring: limit fixed table size by RLIMIT_NOFILE
- io_uring: IORING_OP_WRITE needs hash_reg_file set
- io_uring: io_uring_complete() trace should take an integer
- bio: fix page leak bio_add_hw_page failure
- raid1: ensure write behind bio has less than BIO_MAX_VECS sectors
- cifs: Do not leak EDEADLK to dgetents64 for STATUS_USER_SESSION_DELETED
- smb3: fix posix extensions mount option
- tty: Fix data race between tiocsti() and flush_to_ldisc()
- x86/efi: Restore Firmware IDT before calling ExitBootServices()
- perf/x86/amd/ibs: Extend PERF_PMU_CAP_NO_EXCLUDE to IBS Op
- x86/resctrl: Fix a maybe-uninitialized build warning treated as error
- Revert "KVM: x86: mmu: Add guest physical address check in
translate_gpa()"
- KVM: s390: index kvm->arch.idle_mask by vcpu_idx
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is
adjusted
- KVM: x86: clamp host mapping level to max_level in
kvm_mmu_max_mapping_level
- KVM: x86/mmu: Avoid collision with !PRESENT SPTEs in TDP MMU lpage stats
- KVM: VMX: avoid running vmx_handle_exit_irqoff in case of emulation
- KVM: nVMX: Unconditionally clear nested.pi_pending on nested VM-Enter
- KVM: arm64: Unregister HYP sections from kmemleak in protected mode
- ARM: dts: at91: add pinctrl-{names, 0} for all gpios
- io-wq: check max_worker limits if a worker transitions bound state
- md/raid10: Remove unnecessary rcu_dereference in raid10_handle_discard
- char: tpm: Kconfig: remove bad i2c cr50 select
- fuse: truncate pagecache on atomic_o_trunc
- fuse: flush extending writes
- fuse: wait for writepages in syncfs
- IMA: remove -Wmissing-prototypes warning
- IMA: remove the dependency on CRYPTO_MD5
- fbmem: don't allow too huge resolutions
- RDMA/mlx5: Fix number of allocated XLT entries
- backlight: pwm_bl: Improve bootloader/kernel device handover
- clk: kirkwood: Fix a clocking boot regression
- Linux 5.13.17
* AMD A8-7680 (amdgpu): broken Xorg acceleration and hibernation
(LP: #1920674) // Impish update: v5.13.17 upstream stable release
(LP: #1946247)
- drm/amdgpu/acp: Make PM domain really work
* Impish update: v5.13.16 upstream stable release (LP: #1946245)
- firmware: dmi: Move product_sku info to the end of the modalias
- igmp: Add ip_mc_list lock in ip_check_mc_rcu
- net: ll_temac: Remove left-over debug message
- Revert "r8169: avoid link-up interrupt issue on RTL8106e if user enables
ASPM"
- blk-mq: fix kernel panic during iterating over flush request
- blk-mq: fix is_flush_rq
- blk-mq: clearing flush request reference in tags->rqs[]
- ALSA: usb-audio: Add registration quirk for JBL Quantum 800
- Bluetooth: Add additional Bluetooth part for Realtek 8852AE
- Bluetooth: btusb: Make the CSR clone chip force-suspend workaround more
generic
- usb: host: xhci-rcar: Don't reload firmware after the completion
- usb: xhci-mtk: fix issue of out-of-bounds array access
- usb: cdnsp: fix the wrong mult value for HS isoc or intr
- usb: gadget: tegra-xudc: fix the wrong mult value for HS isoc or intr
- usb: mtu3: restore HS function when set SS/SSP
- usb: mtu3: use @mult for HS isoc or intr
- usb: mtu3: fix the wrong HS mult value
- xhci: fix even more unsafe memory usage in xhci tracing
- xhci: fix unsafe memory usage in xhci tracing
- xhci: Fix failure to give back some cached cancelled URBs.
- x86/reboot: Limit Dell Optiplex 990 quirk to early BIOS versions
- PCI: Call Max Payload Size-related fixup quirks early
- Linux 5.13.16
* Impish update: v5.13.15 upstream stable release (LP: #1946242)
- ext4: fix e2fsprogs checksum failure for mounted filesystem
- gpu: ipu-v3: Fix i.MX IPU-v3 offset calculations for (semi)planar U/V
formats
- reset: reset-zynqmp: Fixed the argument data type
- qed: Fix the VF msix vectors flow
- net: dsa: mv88e6xxx: Update mv88e6393x serdes errata
- riscv: dts: microchip: Use 'local-mac-address' for emac1
- riscv: dts: microchip: Add ethernet0 to the aliases node
- net: macb: Add a NULL check on desc_ptp
- qede: Fix memset corruption
- perf/x86/intel/pt: Fix mask of num_address_ranges
- ceph: fix possible null-pointer dereference in ceph_mdsmap_decode()
- perf/x86/amd/ibs: Work around erratum #1197
- perf/x86/amd/power: Assign pmu.module
- cryptoloop: add a deprecation warning
- xtensa: fix kconfig unmet dependency warning for HAVE_FUTEX_CMPXCHG
- USB: serial: pl2303: fix GL type detection
- USB: serial: cp210x: fix control-characters error handling
- USB: serial: cp210x: fix flow-control error handling
- ALSA: hda/realtek: Quirk for HP Spectre x360 14 amp setup
- ALSA: usb-audio: Fix regression on Sony WALKMAN NW-A45 DAC
- ALSA: hda/realtek: Workaround for conflicting SSID on ASUS ROG Strix G17
- ALSA: pcm: fix divide error in snd_pcm_lib_ioctl
- media: stkwebcam: fix memory leak in stk_camera_probe
- Linux 5.13.15
* Re-enable DEBUG_INFO_BTF where it was dissabled (LP: #1945632)
- [Config] Re-enable CONFIG_DEBUG_INFO_BTF=y on armhf
* Fix missing HDMI audio on Intel RKL (LP: #1945556)
- drm/i915/audio: Use BIOS provided value for RKL HDA link
* USB Type-C hotplug event not handled properly in TGL-H system during s2idle
(LP: #1931072)
- drm/i915: Force a TypeC PHY disconnect during suspend/shutdown
* Packaging resync (LP: #1786013)
- [Packaging] update Ubuntu.md
-- Stefan Bader <stefan.ba...@canonical.com> Tue, 19 Oct 2021 10:41:30
+0200
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1947174
Title:
Add final-checks to check certificates
Status in linux package in Ubuntu:
Fix Committed
Status in linux source package in Bionic:
Fix Released
Status in linux source package in Focal:
Fix Released
Status in linux source package in Hirsute:
Fix Released
Status in linux source package in Impish:
Fix Released
Bug description:
[Impact]
* As part of landing builtin revocation certificates work
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1932029 it has
been identified that many kernels do not correct enforce newly enfoced
keys in the derivative flavours. I.e. due to annotations not importing
parent annotations, due to not having do_enforce_all, or using older
formats of annotations files.
* As part fips validation work final-checks got added to check and
assert that correct things are turned on.
* It has been agreed that having a final-check for builtin system
trusted & revocation certificates would be a good thing. If packaging
declares that certain certificates should be built-in trusted or
revoked, the kernel must be configured pointing at the packaging
generated .pem bundle in the config.
[Test Plan]
* Kernel should build
* If trusted or revocation are configured in packaging but the config option
is misconfigured (i.e. typo or not set), the kernel build and cranky close
should fail
[Where problems could occur]
* This is a packaging change only, thus may result in valid kernels
ftbfs but should be easy to rectify.
[Other Info]
* Also see
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1932029
and kernels that derived from a primary kernel that had that fixed,
and the subsequently failed boot testing due to not enabling those
options.
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1947174/+subscriptions
--
Mailing list: https://launchpad.net/~kernel-packages
Post to : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help : https://help.launchpad.net/ListHelp
