Public bug reported:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
v5.4.198 upstream stable release
from git://git.kernel.org/
binfmt_flat: do not stop relocating GOT entries prematurely on riscv
ALSA: hda/realtek - Fix microphone noise on ASUS TUF B550M-PLUS
USB: serial: option: add Quectel BG95 modem
USB: new quirk for Dell Gen 2 devices
perf/x86/intel: Fix event constraints for ICL
ptrace/um: Replace PT_DTRACE with TIF_SINGLESTEP
ptrace/xtensa: Replace PT_SINGLESTEP with TIF_SINGLESTEP
ptrace: Reimplement PTRACE_KILL by always sending SIGKILL
btrfs: add "0x" prefix for unsupported optional features
btrfs: repair super block num_devices automatically
drm/virtio: fix NULL pointer dereference in virtio_gpu_conn_get_modes
mwifiex: add mutex lock for call in mwifiex_dfs_chan_sw_work_queue
b43legacy: Fix assigning negative value to unsigned variable
b43: Fix assigning negative value to unsigned variable
ipw2x00: Fix potential NULL dereference in libipw_xmit()
ipv6: fix locking issues with loops over idev->addr_list
fbcon: Consistently protect deferred_takeover with console_lock()
ACPICA: Avoid cache flush inside virtual machines
drm/komeda: return early if drm_universal_plane_init() fails.
ALSA: jack: Access input_dev under mutex
spi: spi-rspi: Remove setting {src,dst}_{addr,addr_width} based on DMA direction
tools/power turbostat: fix ICX DRAM power numbers
drm/amd/pm: fix double free in si_parse_power_table()
ath9k: fix QCA9561 PA bias level
media: venus: hfi: avoid null dereference in deinit
media: pci: cx23885: Fix the error handling in cx23885_initdev()
media: cx25821: Fix the warning when removing the module
md/bitmap: don't set sb values if can't pass sanity check
mmc: jz4740: Apply DMA engine limits to maximum segment size
scsi: megaraid: Fix error check return value of register_chrdev()
drm/plane: Move range check for format_count earlier
drm/amd/pm: fix the compile warning
arm64: compat: Do not treat syscall number as ESR_ELx for a bad syscall
drm: msm: fix error check return value of irq_of_parse_and_map()
ipv6: Don't send rs packets to the interface of ARPHRD_TUNNEL
net/mlx5: fs, delete the FTE when there are no rules attached to it
ASoC: dapm: Don't fold register value changes into notifications
mlxsw: spectrum_dcb: Do not warn about priority changes
drm/amdgpu/ucode: Remove firmware load type check in amdgpu_ucode_free_bo
HID: bigben: fix slab-out-of-bounds Write in bigben_probe
ASoC: tscs454: Add endianness flag in snd_soc_component_driver
s390/preempt: disable __preempt_count_add() optimization for
PROFILE_ALL_BRANCHES
spi: stm32-qspi: Fix wait_cmd timeout in APM mode
dma-debug: change allocation mode from GFP_NOWAIT to GFP_ATIOMIC
ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default
ipmi:ssif: Check for NULL msg when handling events and messages
ipmi: Fix pr_fmt to avoid compilation issues
rtlwifi: Use pr_warn instead of WARN_ONCE
media: coda: limit frame interval enumeration to supported encoder frame sizes
media: cec-adap.c: fix is_configuring state
openrisc: start CPU timer early in boot
nvme-pci: fix a NULL pointer dereference in nvme_alloc_admin_tags
ASoC: rt5645: Fix errorenous cleanup order
nbd: Fix hung on disconnect request if socket is closed before
net: phy: micrel: Allow probing without .driver_data
media: exynos4-is: Fix compile warning
ASoC: max98357a: remove dependency on GPIOLIB
rxrpc: Return an error to sendmsg if call failed
eth: tg3: silence the GCC 12 array-bounds warning
selftests/bpf: fix btf_dump/btf_dump due to recent clang change
IB/rdmavt: add missing locks in rvt_ruc_loopback
ARM: dts: ox820: align interrupt controller node name with dtschema
PM / devfreq: rk3399_dmc: Disable edev on remove()
fs: jfs: fix possible NULL pointer dereference in dbFree()
ARM: OMAP1: clock: Fix UART rate reporting algorithm
powerpc/fadump: Fix fadump to work with a different endian capture kernel
fat: add ratelimit to fat*_ent_bread()
ARM: versatile: Add missing of_node_put in dcscb_init
ARM: dts: exynos: add atmel,24c128 fallback to Samsung EEPROM
ARM: hisi: Add missing of_node_put after of_find_compatible_node
PCI: Avoid pci_dev_lock() AB/BA deadlock with sriov_numvfs_store()
tracing: incorrect isolate_mote_t cast in mm_vmscan_lru_isolate
powerpc/xics: fix refcount leak in icp_opal_init()
powerpc/powernv: fix missing of_node_put in uv_init()
macintosh/via-pmu: Fix build failure when CONFIG_INPUT is disabled
powerpc/iommu: Add missing of_node_put in iommu_init_early_dart
RDMA/hfi1: Prevent panic when SDMA is disabled
drm: fix EDID struct for old ARM OABI format
ath9k: fix ar9003_get_eepmisc
drm/edid: fix invalid EDID extension block filtering
drm/bridge: adv7511: clean up CEC adapter when probe fails
ASoC: mediatek: Fix error handling in mt8173_max98090_dev_probe
ASoC: mediatek: Fix missing of_node_put in mt2701_wm8960_machine_probe
x86/delay: Fix the wrong asm constraint in delay_loop()
drm/mediatek: Fix mtk_cec_mask()
drm/vc4: txp: Don't set TXP_VSTART_AT_EOF
drm/vc4: txp: Force alpha to be 0xff if it's disabled
bpf: Fix excessive memory allocation in stack_map_alloc()
nl80211: show SSID for P2P_GO interfaces
drm/komeda: Fix an undefined behavior bug in komeda_plane_add()
drm: mali-dp: potential dereference of null pointer
spi: spi-ti-qspi: Fix return value handling of wait_for_completion_timeout
NFC: NULL out the dev->rfkill to prevent UAF
efi: Add missing prototype for efi_capsule_setup_info
drbd: fix duplicate array initializer
HID: hid-led: fix maximum brightness for Dream Cheeky
HID: elan: Fix potential double free in elan_input_configured
drm/bridge: Fix error handling in analogix_dp_probe
sched/fair: Fix cfs_rq_clock_pelt() for throttled cfs_rq
spi: img-spfi: Fix pm_runtime_get_sync() error checking
cpufreq: Fix possible race in cpufreq online error path
ath9k_htc: fix potential out of bounds access with invalid rxstatus->rs_keyix
inotify: show inotify mask flags in proc fdinfo
fsnotify: fix wrong lockdep annotations
of: overlay: do not break notify on NOTIFY_{OK|STOP}
scsi: ufs: core: Exclude UECxx from SFR dump list
x86/pm: Fix false positive kmemleak report in msr_build_context()
x86/speculation: Add missing prototype for unpriv_ebpf_notify()
ASoC: rk3328: fix disabling mclk on pclk probe failure
perf tools: Add missing headers needed by util/data.h
drm/msm/disp/dpu1: set vbif hw config to NULL to avoid use after memory free
during pm runtime resume
drm/msm/dsi: fix error checks and return values for DSI xmit functions
drm/msm/hdmi: check return value after calling platform_get_resource_byname()
drm/msm/hdmi: fix error check return value of irq_of_parse_and_map()
drm/rockchip: vop: fix possible null-ptr-deref in vop_bind()
virtio_blk: fix the discard_granularity and discard_alignment queue limits
x86: Fix return value of __setup handlers
irqchip/exiu: Fix acknowledgment of edge triggered interrupts
irqchip/aspeed-i2c-ic: Fix irq_of_parse_and_map() return value
x86/mm: Cleanup the control_va_addr_alignment() __setup handler
regulator: core: Fix enable_count imbalance with EXCLUSIVE_GET
drm/msm/mdp5: Return error code in mdp5_pipe_release when deadlock is detected
drm/msm/mdp5: Return error code in mdp5_mixer_release when deadlock is detected
drm/msm: return an error pointer in msm_gem_prime_get_sg_table()
media: uvcvideo: Fix missing check to determine if element is found in list
iomap: iomap_write_failed fix
Revert "cpufreq: Fix possible race in cpufreq online error path"
perf/amd/ibs: Use interrupt regs ip for stack unwinding
ASoC: fsl: Fix refcount leak in imx_sgtl5000_probe
ASoC: mxs-saif: Fix refcount leak in mxs_saif_probe
regulator: pfuze100: Fix refcount leak in pfuze_parse_regulators_dt
scripts/faddr2line: Fix overlapping text section failures
media: aspeed: Fix an error handling path in aspeed_video_probe()
media: st-delta: Fix PM disable depth imbalance in delta_probe
media: exynos4-is: Change clk_disable to clk_disable_unprepare
media: pvrusb2: fix array-index-out-of-bounds in pvr2_i2c_core_init
media: vsp1: Fix offset calculation for plane cropping
Bluetooth: fix dangling sco_conn and use-after-free in sco_sock_timeout
m68k: math-emu: Fix dependencies of math emulation support
sctp: read sk->sk_bound_dev_if once in sctp_rcv()
media: ov7670: remove ov7670_power_off from ov7670_remove
ext4: reject the 'commit' option on ext2 filesystems
drm/msm/a6xx: Fix refcount leak in a6xx_gpu_init
drm: msm: fix possible memory leak in mdp5_crtc_cursor_set()
thermal/drivers/broadcom: Fix potential NULL dereference in sr_thermal_probe
ASoC: wm2000: fix missing clk_disable_unprepare() on error in
wm2000_anc_transition()
NFC: hci: fix sleep in atomic context bugs in nfc_hci_hcp_message_tx
rxrpc: Fix listen() setting the bar too high for the prealloc rings
rxrpc: Don't try to resend the request if we're receiving the reply
rxrpc: Fix overlapping ACK accounting
rxrpc: Don't let ack.previousPacket regress
rxrpc: Fix decision on when to generate an IDLE ACK
net/smc: postpone sk_refcnt increment in connect()
arm64: dts: rockchip: Move drive-impedance-ohm to emmc phy on rk3399
ARM: dts: suniv: F1C100: fix watchdog compatible
soc: qcom: smp2p: Fix missing of_node_put() in smp2p_parse_ipc
soc: qcom: smsm: Fix missing of_node_put() in smsm_parse_ipc
PCI: cadence: Fix find_first_zero_bit() limit
PCI: rockchip: Fix find_first_zero_bit() limit
KVM: nVMX: Leave most VM-Exit info fields unmodified on failed VM-Entry
can: xilinx_can: mark bit timing constants as const
ARM: dts: bcm2835-rpi-zero-w: Fix GPIO line name for Wifi/BT
ARM: dts: bcm2837-rpi-cm3-io3: Fix GPIO line names for SMPS I2C
ARM: dts: bcm2837-rpi-3-b-plus: Fix GPIO line name of power LED
ARM: dts: bcm2835-rpi-b: Fix GPIO line names
misc: ocxl: fix possible double free in ocxl_file_register_afu
crypto: marvell/cesa - ECB does not IV
arm: mediatek: select arch timer for mt7629
powerpc/fadump: fix PT_LOAD segment for boot memory area
mfd: ipaq-micro: Fix error check return value of platform_get_irq()
scsi: fcoe: Fix Wstringop-overflow warnings in fcoe_wwn_from_mac()
firmware: arm_scmi: Fix list protocols enumeration in the base protocol
nvdimm: Allow overwrite in the presence of disabled dimms
pinctrl: mvebu: Fix irq_of_parse_and_map() return value
drivers/base/node.c: fix compaction sysfs file leak
dax: fix cache flush on PMD-mapped pages
powerpc/8xx: export 'cpm_setbrg' for modules
powerpc/idle: Fix return value of __setup() handler
powerpc/4xx/cpm: Fix return value of __setup() handler
proc: fix dentry/inode overinstantiating under /proc/${pid}/net
ipc/mqueue: use get_tree_nodev() in mqueue_get_tree()
PCI: imx6: Fix PERST# start-up sequence
tty: fix deadlock caused by calling printk() under tty_port->lock
crypto: cryptd - Protect per-CPU resource by disabling BH.
Input: sparcspkr - fix refcount leak in bbc_beep_probe
powerpc/64: Only WARN if __pa()/__va() called with bad addresses
powerpc/perf: Fix the threshold compare group constraint for power9
macintosh: via-pmu and via-cuda need RTC_LIB
powerpc/fsl_rio: Fix refcount leak in fsl_rio_setup
mfd: davinci_voicecodec: Fix possible null-ptr-deref davinci_vc_probe()
mailbox: forward the hrtimer if not queued and under a lock
RDMA/hfi1: Prevent use of lock before it is initialized
Input: stmfts - do not leave device disabled in stmfts_input_open
f2fs: fix dereference of stale list iterator after loop body
iommu/mediatek: Add list_del in mtk_iommu_remove
i2c: at91: use dma safe buffers
i2c: at91: Initialize dma_buf in at91_twi_xfer()
NFS: Do not report EINTR/ERESTARTSYS as mapping errors
NFS: Do not report flush errors in nfs_write_end()
NFS: Don't report errors from nfs_pageio_complete() more than once
NFSv4/pNFS: Do not fail I/O when we fail to allocate the pNFS layout
video: fbdev: clcdfb: Fix refcount leak in clcdfb_of_vram_setup
dmaengine: stm32-mdma: remove GISR1 register
iommu/amd: Increase timeout waiting for GA log enablement
perf c2c: Use stdio interface if slang is not supported
perf jevents: Fix event syntax error caused by ExtSel
f2fs: fix to avoid f2fs_bug_on() in dec_valid_node_count()
f2fs: fix to do sanity check on block address in f2fs_do_zero_range()
f2fs: fix to clear dirty inode in f2fs_evict_inode()
f2fs: fix deadloop in foreground GC
f2fs: don't need inode lock for system hidden quota
f2fs: fix fallocate to use file_modified to update permissions consistently
wifi: mac80211: fix use-after-free in chanctx code
iwlwifi: mvm: fix assert 1F04 upon reconfig
fs-writeback: writeback_sb_inodes：Recalculate 'wrote' according skipped pages
efi: Do not import certificates from UEFI Secure Boot for T2 Macs
bfq: Split shared queues on move between cgroups
bfq: Update cgroup information before merging bio
bfq: Track whether bfq_group is still online
ext4: fix use-after-free in ext4_rename_dir_prepare
ext4: fix warning in ext4_handle_inode_extension
ext4: fix bug_on in ext4_writepages
ext4: verify dir block before splitting it
ext4: avoid cycles in directory h-tree
ACPI: property: Release subnode properties with data nodes
tracing: Fix potential double free in create_var_ref()
PCI/PM: Fix bridge_d3_blacklist[] Elo i2 overwrite of Gigabyte X299
PCI: qcom: Fix runtime PM imbalance on probe errors
PCI: qcom: Fix unbalanced PHY init on probe errors
mm, compaction: fast_find_migrateblock() should return pfn in the target zone
dlm: fix plock invalid read
dlm: fix missing lkb refcount handling
ocfs2: dlmfs: fix error handling of user_dlm_destroy_lock
scsi: dc395x: Fix a missing check on list iterator
scsi: ufs: qcom: Add a readl() to make sure ref_clk gets enabled
drm/amdgpu/cs: make commands with 0 chunks illegal behaviour.
drm/etnaviv: check for reaped mapping in etnaviv_iommu_unmap_gem
drm/nouveau/clk: Fix an incorrect NULL check on list iterator
drm/bridge: analogix_dp: Grab runtime PM reference for DP-AUX
md: fix an incorrect NULL check in does_sb_need_changing
md: fix an incorrect NULL check in md_reload_sb
mtd: cfi_cmdset_0002: Move and rename chip_check/chip_ready/chip_good_for_write
media: coda: Fix reported H264 profile
media: coda: Add more H264 levels for CODA960
Kconfig: Add option for asm goto w/ tied outputs to workaround clang-13 bug
RDMA/hfi1: Fix potential integer multiplication overflow errors
irqchip/armada-370-xp: Do not touch Performance Counter Overflow on A375, A38x,
A39x
irqchip: irq-xtensa-mx: fix initial IRQ affinity
mac80211: upgrade passive scan to active scan on DFS channels after beacon rx
um: chan_user: Fix winch_tramp() return value
um: Fix out-of-bounds read in LDT setup
iommu/msm: Fix an incorrect NULL check on list iterator
nodemask.h: fix compilation error with GCC12
hugetlb: fix huge_pmd_unshare address update
rtl818x: Prevent using not initialized queues
ASoC: rt5514: Fix event generation for "DSP Voice Wake Up" control
carl9170: tx: fix an incorrect use of list iterator
serial: pch: don't overwrite xmit->buf[0] by x_char
tilcdc: tilcdc_external: fix an incorrect NULL check on list iterator
gma500: fix an incorrect NULL check on list iterator
arm64: dts: qcom: ipq8074: fix the sleep clock frequency
phy: qcom-qmp: fix struct clk leak on probe errors
ARM: pxa: maybe fix gpio lookup tables
docs/conf.py: Cope with removal of language=None in Sphinx 5.0.0
dt-bindings: gpio: altera: correct interrupt-cells
blk-iolatency: Fix inflight count imbalances and IO hangs on offline
phy: qcom-qmp: fix reset-controller leak on probe errors
Kconfig: add config option for asm goto w/ outputs
RDMA/rxe: Generate a completion for unsupported/invalid opcode
MIPS: IP27: Remove incorrect `cpu_has_fpu' override
bfq: Avoid merging queues with different parents
bfq: Drop pointless unlock-lock pair
bfq: Remove pointless bfq_init_rq() calls
bfq: Get rid of __bio_blkcg() usage
bfq: Make sure bfqg for which we are queueing requests is online
block: fix bio_clone_blkg_association() to associate with proper blkcg_gq
md: bcache: check the return value of kzalloc() in detached_dev_do_request()
pcmcia: db1xxx_ss: restrict to MIPS_DB1XXX boards
staging: greybus: codecs: fix type confusion of list iterator variable
iio: adc: ad7124: Remove shift from scan_type
tty: goldfish: Use tty_port_destroy() to destroy port
tty: serial: owl: Fix missing clk_disable_unprepare() in owl_uart_probe
tty: serial: fsl_lpuart: fix potential bug when using both of_alias_get_id and
ida_simple_get
usb: usbip: fix a refcount leak in stub_probe()
usb: usbip: add missing device lock on tweak configuration cmd
USB: storage: karma: fix rio_karma_init return
usb: musb: Fix missing of_node_put() in omap2430_probe
staging: fieldbus: Fix the error handling path in anybuss_host_common_probe()
pwm: lp3943: Fix duty calculation in case period was clamped
rpmsg: qcom_smd: Fix irq_of_parse_and_map() return value
usb: dwc3: pci: Fix pm_runtime_get_sync() error checking
firmware: stratix10-svc: fix a missing check on list iterator
iio: adc: stmpe-adc: Fix wait_for_completion_timeout return value check
iio: adc: sc27xx: fix read big scale voltage not right
iio: adc: sc27xx: Fine tune the scale calibration values
rpmsg: qcom_smd: Fix returning 0 if irq_of_parse_and_map() fails
phy: qcom-qmp: fix pipe-clock imbalance on power-on failure
serial: sifive: Report actual baud base rather than fixed 115200
coresight: cpu-debug: Replace mutex with mutex_trylock on panic notifier
soc: rockchip: Fix refcount leak in rockchip_grf_init
clocksource/drivers/riscv: Events are stopped during CPU suspend
rtc: mt6397: check return value after calling platform_get_resource()
serial: meson: acquire port->lock in startup()
serial: 8250_fintek: Check SER_RS485_RTS_* only with RS485
serial: digicolor-usart: Don't allow CS5-6
serial: rda-uart: Don't allow CS5-6
serial: txx9: Don't allow CS5-6
serial: sh-sci: Don't allow CS5-6
serial: sifive: Sanitize CSIZE and c_iflag
serial: st-asc: Sanitize CSIZE and correct PARENB for CS7
serial: stm32-usart: Correct CSIZE, bits, and parity
firmware: dmi-sysfs: Fix memory leak in dmi_sysfs_register_handle
bus: ti-sysc: Fix warnings for unbind for serial
driver: base: fix UAF when driver_attach failed
driver core: fix deadlock in __device_attach
watchdog: ts4800_wdt: Fix refcount leak in ts4800_wdt_probe
ASoC: fsl_sai: Fix FSL_SAI_xDR/xFR definition
clocksource/drivers/oxnas-rps: Fix irq_of_parse_and_map() return value
s390/crypto: fix scatterwalk_unmap() callers in AES-GCM
net: sched: fixed barrier to prevent skbuff sticking in qdisc backlog
net: ethernet: mtk_eth_soc: out of bounds read in mtk_hwlro_get_fdir_entry()
net: dsa: mv88e6xxx: Fix refcount leak in mv88e6xxx_mdios_register
modpost: fix removing numeric suffixes
jffs2: fix memory leak in jffs2_do_fill_super
ubi: ubi_create_volume: Fix use-after-free when volume creation failed
nfp: only report pause frame configuration for physical device
net/mlx5: Don't use already freed action pointer
net/mlx5e: Update netdev features after changing XDP state
net: sched: add barrier to fix packet stuck problem for lockless qdisc
tcp: tcp_rtx_synack() can be called from process context
afs: Fix infinite loop found by xfstest generic/676
tipc: check attribute length for bearer name
perf c2c: Fix sorting in percent_rmt_hitm_cmp()
mips: cpc: Fix refcount leak in mips_cpc_default_phys_base
tracing: Fix sleeping function called from invalid context on RT kernel
tracing: Avoid adding tracer option before update_tracer_options
f2fs: remove WARN_ON in f2fs_is_valid_blkaddr
i2c: cadence: Increase timeout per message if necessary
m68knommu: set ZERO_PAGE() to the allocated zeroed page
m68knommu: fix undefined reference to `_init_sp'
dmaengine: zynqmp_dma: In struct zynqmp_dma_chan fix desc_size data type
NFSv4: Don't hold the layoutget locks across multiple RPC calls
video: fbdev: pxa3xx-gcu: release the resources correctly in
pxa3xx_gcu_probe/remove()
xprtrdma: treat all calls not a bcall when bc_serv is NULL
netfilter: nat: really support inet nat without l3 address
ata: pata_octeon_cf: Fix refcount leak in octeon_cf_probe
netfilter: nf_tables: memleak flow rule from commit path
xen: unexport __init-annotated xen_xlate_map_ballooned_pages()
af_unix: Fix a data-race in unix_dgram_peer_wake_me().
bpf, arm64: Clear prog->jited_len along prog->jited
net: dsa: lantiq_gswip: Fix refcount leak in gswip_gphy_fw_list
net/mlx4_en: Fix wrong return value on ioctl EEPROM query failure
SUNRPC: Fix the calculation of xdr->end in xdr_get_next_encode_buffer()
net: mdio: unexport __init-annotated mdio_bus_init()
net: xfrm: unexport __init-annotated xfrm4_protocol_init()
net: ipv6: unexport __init-annotated seg6_hmac_init()
net/mlx5: Rearm the FW tracer after each tracer event
net/mlx5: fs, fail conflicting actions
ip_gre: test csum_start instead of transport header
net: altera: Fix refcount leak in altera_tse_mdio_create
drm: imx: fix compiler warning with gcc-12
iio: dummy: iio_simple_dummy: check the return value of kstrdup()
iio: st_sensors: Add a local lock for protecting odr
lkdtm/usercopy: Expand size of "out of frame" object
tty: synclink_gt: Fix null-pointer-dereference in slgt_clean()
tty: Fix a possible resource leak in icom_probe
drivers: staging: rtl8192u: Fix deadlock in ieee80211_beacons_stop()
drivers: staging: rtl8192e: Fix deadlock in rtllib_beacons_stop()
USB: host: isp116x: check return value after calling platform_get_resource()
drivers: tty: serial: Fix deadlock in sa1100_set_termios()
drivers: usb: host: Fix deadlock in oxu_bus_suspend()
USB: hcd-pci: Fully suspend across freeze/thaw cycle
usb: dwc2: gadget: don't reset gadget's driver->bus
misc: rtsx: set NULL intfdata when probe fails
extcon: Modify extcon device to be created after driver data is set
clocksource/drivers/sp804: Avoid error on multiple instances
staging: rtl8712: fix uninit-value in usb_read8() and friends
staging: rtl8712: fix uninit-value in r871xu_drv_init()
serial: msm_serial: disable interrupts in __msm_console_write()
kernfs: Separate kernfs_pr_cont_buf and rename_lock.
watchdog: wdat_wdt: Stop watchdog when rebooting the system
md: protect md_unregister_thread from reentrancy
scsi: myrb: Fix up null pointer access on myrb_cleanup()
ceph: allow ceph.dir.rctime xattr to be updatable
drm/radeon: fix a possible null pointer dereference
modpost: fix undefined behavior of is_arm_mapping_symbol()
x86/cpu: Elide KCSAN for cpu_has() and friends
nbd: call genl_unregister_family() first in nbd_cleanup()
nbd: fix race between nbd_alloc_config() and module removal
nbd: fix io hung while disconnecting device
cifs: version operations for smb20 unneeded when legacy support disabled
nodemask: Fix return values to be unsigned
vringh: Fix loop descriptors check in the indirect cases
scripts/gdb: change kernel config dumping method
ALSA: hda/conexant - Fix loopback issue with CX20632
cifs: return errors during session setup during reconnects
ata: libata-transport: fix {dma|pio|xfer}_mode sysfs files
mmc: block: Fix CQE recovery reset success
nfc: st21nfca: fix incorrect validating logic in EVT_TRANSACTION
nfc: st21nfca: fix memory leaks in EVT_TRANSACTION handling
ixgbe: fix bcast packets Rx on VF after promisc removal
ixgbe: fix unexpected VLAN Rx in promisc mode on VF
Input: bcm5974 - set missing URB_NO_TRANSFER_DMA_MAP urb flag
powerpc/32: Fix overread/overwrite of thread_struct via ptrace
md/raid0: Ignore RAID0 layout if the second zone has only one device
mtd: cfi_cmdset_0002: Use chip_ready() for write on S29GL064N
tcp: fix tcp_mtup_probe_success vs wrong snd_cwnd
Linux 5.4.198
UBUNTU: Upstream stable to v5.4.198
** Affects: linux (Ubuntu)
Importance: Undecided
Status: Invalid
** Affects: linux (Ubuntu Focal)
Importance: Medium
Assignee: Kamal Mostafa (kamalmostafa)
Status: In Progress
** Tags: kernel-stable-tracking-bug
** Changed in: linux (Ubuntu)
Status: New => Confirmed
** Tags added: kernel-stable-tracking-bug
** Also affects: linux (Ubuntu Focal)
Importance: Undecided
Status: New
** Changed in: linux (Ubuntu)
Status: Confirmed => Invalid
** Changed in: linux (Ubuntu Focal)
Status: New => In Progress
** Changed in: linux (Ubuntu Focal)
Importance: Undecided => Medium
** Changed in: linux (Ubuntu Focal)
Assignee: (unassigned) => Kamal Mostafa (kamalmostafa)
** Description changed:
+ SRU Justification
- SRU Justification
+ Impact:
+ The upstream process for stable tree updates is quite similar
+ in scope to the Ubuntu SRU process, e.g., each patch has to
+ demonstrably fix a bug, and each patch is vetted by upstream
+ by originating either directly from a mainline/stable Linux tree or
+ a minimally backported form of that patch. The following upstream
+ stable patches should be included in the Ubuntu kernel:
- Impact:
- The upstream process for stable tree updates is quite similar
- in scope to the Ubuntu SRU process, e.g., each patch has to
- demonstrably fix a bug, and each patch is vetted by upstream
- by originating either directly from a mainline/stable Linux tree or
- a minimally backported form of that patch. The following upstream
- stable patches should be included in the Ubuntu kernel:
+ v5.4.198 upstream stable release
+ from git://git.kernel.org/
- v5.4.198 upstream stable release
- from git://git.kernel.org/
+ binfmt_flat: do not stop relocating GOT entries prematurely on riscv
+ ALSA: hda/realtek - Fix microphone noise on ASUS TUF B550M-PLUS
+ USB: serial: option: add Quectel BG95 modem
+ USB: new quirk for Dell Gen 2 devices
+ perf/x86/intel: Fix event constraints for ICL
+ ptrace/um: Replace PT_DTRACE with TIF_SINGLESTEP
+ ptrace/xtensa: Replace PT_SINGLESTEP with TIF_SINGLESTEP
+ ptrace: Reimplement PTRACE_KILL by always sending SIGKILL
+ btrfs: add "0x" prefix for unsupported optional features
+ btrfs: repair super block num_devices automatically
+ drm/virtio: fix NULL pointer dereference in virtio_gpu_conn_get_modes
+ mwifiex: add mutex lock for call in mwifiex_dfs_chan_sw_work_queue
+ b43legacy: Fix assigning negative value to unsigned variable
+ b43: Fix assigning negative value to unsigned variable
+ ipw2x00: Fix potential NULL dereference in libipw_xmit()
+ ipv6: fix locking issues with loops over idev->addr_list
+ fbcon: Consistently protect deferred_takeover with console_lock()
+ ACPICA: Avoid cache flush inside virtual machines
+ drm/komeda: return early if drm_universal_plane_init() fails.
+ ALSA: jack: Access input_dev under mutex
+ spi: spi-rspi: Remove setting {src,dst}_{addr,addr_width} based on DMA
direction
+ tools/power turbostat: fix ICX DRAM power numbers
+ drm/amd/pm: fix double free in si_parse_power_table()
+ ath9k: fix QCA9561 PA bias level
+ media: venus: hfi: avoid null dereference in deinit
+ media: pci: cx23885: Fix the error handling in cx23885_initdev()
+ media: cx25821: Fix the warning when removing the module
+ md/bitmap: don't set sb values if can't pass sanity check
+ mmc: jz4740: Apply DMA engine limits to maximum segment size
+ scsi: megaraid: Fix error check return value of register_chrdev()
+ drm/plane: Move range check for format_count earlier
+ drm/amd/pm: fix the compile warning
+ arm64: compat: Do not treat syscall number as ESR_ELx for a bad syscall
+ drm: msm: fix error check return value of irq_of_parse_and_map()
+ ipv6: Don't send rs packets to the interface of ARPHRD_TUNNEL
+ net/mlx5: fs, delete the FTE when there are no rules attached to it
+ ASoC: dapm: Don't fold register value changes into notifications
+ mlxsw: spectrum_dcb: Do not warn about priority changes
+ drm/amdgpu/ucode: Remove firmware load type check in amdgpu_ucode_free_bo
+ HID: bigben: fix slab-out-of-bounds Write in bigben_probe
+ ASoC: tscs454: Add endianness flag in snd_soc_component_driver
+ s390/preempt: disable __preempt_count_add() optimization for
PROFILE_ALL_BRANCHES
+ spi: stm32-qspi: Fix wait_cmd timeout in APM mode
+ dma-debug: change allocation mode from GFP_NOWAIT to GFP_ATIOMIC
+ ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default
+ ipmi:ssif: Check for NULL msg when handling events and messages
+ ipmi: Fix pr_fmt to avoid compilation issues
+ rtlwifi: Use pr_warn instead of WARN_ONCE
+ media: coda: limit frame interval enumeration to supported encoder frame sizes
+ media: cec-adap.c: fix is_configuring state
+ openrisc: start CPU timer early in boot
+ nvme-pci: fix a NULL pointer dereference in nvme_alloc_admin_tags
+ ASoC: rt5645: Fix errorenous cleanup order
+ nbd: Fix hung on disconnect request if socket is closed before
+ net: phy: micrel: Allow probing without .driver_data
+ media: exynos4-is: Fix compile warning
+ ASoC: max98357a: remove dependency on GPIOLIB
+ rxrpc: Return an error to sendmsg if call failed
+ eth: tg3: silence the GCC 12 array-bounds warning
+ selftests/bpf: fix btf_dump/btf_dump due to recent clang change
+ IB/rdmavt: add missing locks in rvt_ruc_loopback
+ ARM: dts: ox820: align interrupt controller node name with dtschema
+ PM / devfreq: rk3399_dmc: Disable edev on remove()
+ fs: jfs: fix possible NULL pointer dereference in dbFree()
+ ARM: OMAP1: clock: Fix UART rate reporting algorithm
+ powerpc/fadump: Fix fadump to work with a different endian capture kernel
+ fat: add ratelimit to fat*_ent_bread()
+ ARM: versatile: Add missing of_node_put in dcscb_init
+ ARM: dts: exynos: add atmel,24c128 fallback to Samsung EEPROM
+ ARM: hisi: Add missing of_node_put after of_find_compatible_node
+ PCI: Avoid pci_dev_lock() AB/BA deadlock with sriov_numvfs_store()
+ tracing: incorrect isolate_mote_t cast in mm_vmscan_lru_isolate
+ powerpc/xics: fix refcount leak in icp_opal_init()
+ powerpc/powernv: fix missing of_node_put in uv_init()
+ macintosh/via-pmu: Fix build failure when CONFIG_INPUT is disabled
+ powerpc/iommu: Add missing of_node_put in iommu_init_early_dart
+ RDMA/hfi1: Prevent panic when SDMA is disabled
+ drm: fix EDID struct for old ARM OABI format
+ ath9k: fix ar9003_get_eepmisc
+ drm/edid: fix invalid EDID extension block filtering
+ drm/bridge: adv7511: clean up CEC adapter when probe fails
+ ASoC: mediatek: Fix error handling in mt8173_max98090_dev_probe
+ ASoC: mediatek: Fix missing of_node_put in mt2701_wm8960_machine_probe
+ x86/delay: Fix the wrong asm constraint in delay_loop()
+ drm/mediatek: Fix mtk_cec_mask()
+ drm/vc4: txp: Don't set TXP_VSTART_AT_EOF
+ drm/vc4: txp: Force alpha to be 0xff if it's disabled
+ bpf: Fix excessive memory allocation in stack_map_alloc()
+ nl80211: show SSID for P2P_GO interfaces
+ drm/komeda: Fix an undefined behavior bug in komeda_plane_add()
+ drm: mali-dp: potential dereference of null pointer
+ spi: spi-ti-qspi: Fix return value handling of wait_for_completion_timeout
+ NFC: NULL out the dev->rfkill to prevent UAF
+ efi: Add missing prototype for efi_capsule_setup_info
+ drbd: fix duplicate array initializer
+ HID: hid-led: fix maximum brightness for Dream Cheeky
+ HID: elan: Fix potential double free in elan_input_configured
+ drm/bridge: Fix error handling in analogix_dp_probe
+ sched/fair: Fix cfs_rq_clock_pelt() for throttled cfs_rq
+ spi: img-spfi: Fix pm_runtime_get_sync() error checking
+ cpufreq: Fix possible race in cpufreq online error path
+ ath9k_htc: fix potential out of bounds access with invalid rxstatus->rs_keyix
+ inotify: show inotify mask flags in proc fdinfo
+ fsnotify: fix wrong lockdep annotations
+ of: overlay: do not break notify on NOTIFY_{OK|STOP}
+ scsi: ufs: core: Exclude UECxx from SFR dump list
+ x86/pm: Fix false positive kmemleak report in msr_build_context()
+ x86/speculation: Add missing prototype for unpriv_ebpf_notify()
+ ASoC: rk3328: fix disabling mclk on pclk probe failure
+ perf tools: Add missing headers needed by util/data.h
+ drm/msm/disp/dpu1: set vbif hw config to NULL to avoid use after memory free
during pm runtime resume
+ drm/msm/dsi: fix error checks and return values for DSI xmit functions
+ drm/msm/hdmi: check return value after calling platform_get_resource_byname()
+ drm/msm/hdmi: fix error check return value of irq_of_parse_and_map()
+ drm/rockchip: vop: fix possible null-ptr-deref in vop_bind()
+ virtio_blk: fix the discard_granularity and discard_alignment queue limits
+ x86: Fix return value of __setup handlers
+ irqchip/exiu: Fix acknowledgment of edge triggered interrupts
+ irqchip/aspeed-i2c-ic: Fix irq_of_parse_and_map() return value
+ x86/mm: Cleanup the control_va_addr_alignment() __setup handler
+ regulator: core: Fix enable_count imbalance with EXCLUSIVE_GET
+ drm/msm/mdp5: Return error code in mdp5_pipe_release when deadlock is detected
+ drm/msm/mdp5: Return error code in mdp5_mixer_release when deadlock is
detected
+ drm/msm: return an error pointer in msm_gem_prime_get_sg_table()
+ media: uvcvideo: Fix missing check to determine if element is found in list
+ iomap: iomap_write_failed fix
+ Revert "cpufreq: Fix possible race in cpufreq online error path"
+ perf/amd/ibs: Use interrupt regs ip for stack unwinding
+ ASoC: fsl: Fix refcount leak in imx_sgtl5000_probe
+ ASoC: mxs-saif: Fix refcount leak in mxs_saif_probe
+ regulator: pfuze100: Fix refcount leak in pfuze_parse_regulators_dt
+ scripts/faddr2line: Fix overlapping text section failures
+ media: aspeed: Fix an error handling path in aspeed_video_probe()
+ media: st-delta: Fix PM disable depth imbalance in delta_probe
+ media: exynos4-is: Change clk_disable to clk_disable_unprepare
+ media: pvrusb2: fix array-index-out-of-bounds in pvr2_i2c_core_init
+ media: vsp1: Fix offset calculation for plane cropping
+ Bluetooth: fix dangling sco_conn and use-after-free in sco_sock_timeout
+ m68k: math-emu: Fix dependencies of math emulation support
+ sctp: read sk->sk_bound_dev_if once in sctp_rcv()
+ media: ov7670: remove ov7670_power_off from ov7670_remove
+ ext4: reject the 'commit' option on ext2 filesystems
+ drm/msm/a6xx: Fix refcount leak in a6xx_gpu_init
+ drm: msm: fix possible memory leak in mdp5_crtc_cursor_set()
+ thermal/drivers/broadcom: Fix potential NULL dereference in sr_thermal_probe
+ ASoC: wm2000: fix missing clk_disable_unprepare() on error in
wm2000_anc_transition()
+ NFC: hci: fix sleep in atomic context bugs in nfc_hci_hcp_message_tx
+ rxrpc: Fix listen() setting the bar too high for the prealloc rings
+ rxrpc: Don't try to resend the request if we're receiving the reply
+ rxrpc: Fix overlapping ACK accounting
+ rxrpc: Don't let ack.previousPacket regress
+ rxrpc: Fix decision on when to generate an IDLE ACK
+ net/smc: postpone sk_refcnt increment in connect()
+ arm64: dts: rockchip: Move drive-impedance-ohm to emmc phy on rk3399
+ ARM: dts: suniv: F1C100: fix watchdog compatible
+ soc: qcom: smp2p: Fix missing of_node_put() in smp2p_parse_ipc
+ soc: qcom: smsm: Fix missing of_node_put() in smsm_parse_ipc
+ PCI: cadence: Fix find_first_zero_bit() limit
+ PCI: rockchip: Fix find_first_zero_bit() limit
+ KVM: nVMX: Leave most VM-Exit info fields unmodified on failed VM-Entry
+ can: xilinx_can: mark bit timing constants as const
+ ARM: dts: bcm2835-rpi-zero-w: Fix GPIO line name for Wifi/BT
+ ARM: dts: bcm2837-rpi-cm3-io3: Fix GPIO line names for SMPS I2C
+ ARM: dts: bcm2837-rpi-3-b-plus: Fix GPIO line name of power LED
+ ARM: dts: bcm2835-rpi-b: Fix GPIO line names
+ misc: ocxl: fix possible double free in ocxl_file_register_afu
+ crypto: marvell/cesa - ECB does not IV
+ arm: mediatek: select arch timer for mt7629
+ powerpc/fadump: fix PT_LOAD segment for boot memory area
+ mfd: ipaq-micro: Fix error check return value of platform_get_irq()
+ scsi: fcoe: Fix Wstringop-overflow warnings in fcoe_wwn_from_mac()
+ firmware: arm_scmi: Fix list protocols enumeration in the base protocol
+ nvdimm: Allow overwrite in the presence of disabled dimms
+ pinctrl: mvebu: Fix irq_of_parse_and_map() return value
+ drivers/base/node.c: fix compaction sysfs file leak
+ dax: fix cache flush on PMD-mapped pages
+ powerpc/8xx: export 'cpm_setbrg' for modules
+ powerpc/idle: Fix return value of __setup() handler
+ powerpc/4xx/cpm: Fix return value of __setup() handler
+ proc: fix dentry/inode overinstantiating under /proc/${pid}/net
+ ipc/mqueue: use get_tree_nodev() in mqueue_get_tree()
+ PCI: imx6: Fix PERST# start-up sequence
+ tty: fix deadlock caused by calling printk() under tty_port->lock
+ crypto: cryptd - Protect per-CPU resource by disabling BH.
+ Input: sparcspkr - fix refcount leak in bbc_beep_probe
+ powerpc/64: Only WARN if __pa()/__va() called with bad addresses
+ powerpc/perf: Fix the threshold compare group constraint for power9
+ macintosh: via-pmu and via-cuda need RTC_LIB
+ powerpc/fsl_rio: Fix refcount leak in fsl_rio_setup
+ mfd: davinci_voicecodec: Fix possible null-ptr-deref davinci_vc_probe()
+ mailbox: forward the hrtimer if not queued and under a lock
+ RDMA/hfi1: Prevent use of lock before it is initialized
+ Input: stmfts - do not leave device disabled in stmfts_input_open
+ f2fs: fix dereference of stale list iterator after loop body
+ iommu/mediatek: Add list_del in mtk_iommu_remove
+ i2c: at91: use dma safe buffers
+ i2c: at91: Initialize dma_buf in at91_twi_xfer()
+ NFS: Do not report EINTR/ERESTARTSYS as mapping errors
+ NFS: Do not report flush errors in nfs_write_end()
+ NFS: Don't report errors from nfs_pageio_complete() more than once
+ NFSv4/pNFS: Do not fail I/O when we fail to allocate the pNFS layout
+ video: fbdev: clcdfb: Fix refcount leak in clcdfb_of_vram_setup
+ dmaengine: stm32-mdma: remove GISR1 register
+ iommu/amd: Increase timeout waiting for GA log enablement
+ perf c2c: Use stdio interface if slang is not supported
+ perf jevents: Fix event syntax error caused by ExtSel
+ f2fs: fix to avoid f2fs_bug_on() in dec_valid_node_count()
+ f2fs: fix to do sanity check on block address in f2fs_do_zero_range()
+ f2fs: fix to clear dirty inode in f2fs_evict_inode()
+ f2fs: fix deadloop in foreground GC
+ f2fs: don't need inode lock for system hidden quota
+ f2fs: fix fallocate to use file_modified to update permissions consistently
+ wifi: mac80211: fix use-after-free in chanctx code
+ iwlwifi: mvm: fix assert 1F04 upon reconfig
+ fs-writeback: writeback_sb_inodes：Recalculate 'wrote' according skipped pages
+ efi: Do not import certificates from UEFI Secure Boot for T2 Macs
+ bfq: Split shared queues on move between cgroups
+ bfq: Update cgroup information before merging bio
+ bfq: Track whether bfq_group is still online
+ ext4: fix use-after-free in ext4_rename_dir_prepare
+ ext4: fix warning in ext4_handle_inode_extension
+ ext4: fix bug_on in ext4_writepages
+ ext4: verify dir block before splitting it
+ ext4: avoid cycles in directory h-tree
+ ACPI: property: Release subnode properties with data nodes
+ tracing: Fix potential double free in create_var_ref()
+ PCI/PM: Fix bridge_d3_blacklist[] Elo i2 overwrite of Gigabyte X299
+ PCI: qcom: Fix runtime PM imbalance on probe errors
+ PCI: qcom: Fix unbalanced PHY init on probe errors
+ mm, compaction: fast_find_migrateblock() should return pfn in the target zone
+ dlm: fix plock invalid read
+ dlm: fix missing lkb refcount handling
+ ocfs2: dlmfs: fix error handling of user_dlm_destroy_lock
+ scsi: dc395x: Fix a missing check on list iterator
+ scsi: ufs: qcom: Add a readl() to make sure ref_clk gets enabled
+ drm/amdgpu/cs: make commands with 0 chunks illegal behaviour.
+ drm/etnaviv: check for reaped mapping in etnaviv_iommu_unmap_gem
+ drm/nouveau/clk: Fix an incorrect NULL check on list iterator
+ drm/bridge: analogix_dp: Grab runtime PM reference for DP-AUX
+ md: fix an incorrect NULL check in does_sb_need_changing
+ md: fix an incorrect NULL check in md_reload_sb
+ mtd: cfi_cmdset_0002: Move and rename
chip_check/chip_ready/chip_good_for_write
+ media: coda: Fix reported H264 profile
+ media: coda: Add more H264 levels for CODA960
+ Kconfig: Add option for asm goto w/ tied outputs to workaround clang-13 bug
+ RDMA/hfi1: Fix potential integer multiplication overflow errors
+ irqchip/armada-370-xp: Do not touch Performance Counter Overflow on A375,
A38x, A39x
+ irqchip: irq-xtensa-mx: fix initial IRQ affinity
+ mac80211: upgrade passive scan to active scan on DFS channels after beacon rx
+ um: chan_user: Fix winch_tramp() return value
+ um: Fix out-of-bounds read in LDT setup
+ iommu/msm: Fix an incorrect NULL check on list iterator
+ nodemask.h: fix compilation error with GCC12
+ hugetlb: fix huge_pmd_unshare address update
+ rtl818x: Prevent using not initialized queues
+ ASoC: rt5514: Fix event generation for "DSP Voice Wake Up" control
+ carl9170: tx: fix an incorrect use of list iterator
+ serial: pch: don't overwrite xmit->buf[0] by x_char
+ tilcdc: tilcdc_external: fix an incorrect NULL check on list iterator
+ gma500: fix an incorrect NULL check on list iterator
+ arm64: dts: qcom: ipq8074: fix the sleep clock frequency
+ phy: qcom-qmp: fix struct clk leak on probe errors
+ ARM: pxa: maybe fix gpio lookup tables
+ docs/conf.py: Cope with removal of language=None in Sphinx 5.0.0
+ dt-bindings: gpio: altera: correct interrupt-cells
+ blk-iolatency: Fix inflight count imbalances and IO hangs on offline
+ phy: qcom-qmp: fix reset-controller leak on probe errors
+ Kconfig: add config option for asm goto w/ outputs
+ RDMA/rxe: Generate a completion for unsupported/invalid opcode
+ MIPS: IP27: Remove incorrect `cpu_has_fpu' override
+ bfq: Avoid merging queues with different parents
+ bfq: Drop pointless unlock-lock pair
+ bfq: Remove pointless bfq_init_rq() calls
+ bfq: Get rid of __bio_blkcg() usage
+ bfq: Make sure bfqg for which we are queueing requests is online
+ block: fix bio_clone_blkg_association() to associate with proper blkcg_gq
+ md: bcache: check the return value of kzalloc() in detached_dev_do_request()
+ pcmcia: db1xxx_ss: restrict to MIPS_DB1XXX boards
+ staging: greybus: codecs: fix type confusion of list iterator variable
+ iio: adc: ad7124: Remove shift from scan_type
+ tty: goldfish: Use tty_port_destroy() to destroy port
+ tty: serial: owl: Fix missing clk_disable_unprepare() in owl_uart_probe
+ tty: serial: fsl_lpuart: fix potential bug when using both of_alias_get_id
and ida_simple_get
+ usb: usbip: fix a refcount leak in stub_probe()
+ usb: usbip: add missing device lock on tweak configuration cmd
+ USB: storage: karma: fix rio_karma_init return
+ usb: musb: Fix missing of_node_put() in omap2430_probe
+ staging: fieldbus: Fix the error handling path in anybuss_host_common_probe()
+ pwm: lp3943: Fix duty calculation in case period was clamped
+ rpmsg: qcom_smd: Fix irq_of_parse_and_map() return value
+ usb: dwc3: pci: Fix pm_runtime_get_sync() error checking
+ firmware: stratix10-svc: fix a missing check on list iterator
+ iio: adc: stmpe-adc: Fix wait_for_completion_timeout return value check
+ iio: adc: sc27xx: fix read big scale voltage not right
+ iio: adc: sc27xx: Fine tune the scale calibration values
+ rpmsg: qcom_smd: Fix returning 0 if irq_of_parse_and_map() fails
+ phy: qcom-qmp: fix pipe-clock imbalance on power-on failure
+ serial: sifive: Report actual baud base rather than fixed 115200
+ coresight: cpu-debug: Replace mutex with mutex_trylock on panic notifier
+ soc: rockchip: Fix refcount leak in rockchip_grf_init
+ clocksource/drivers/riscv: Events are stopped during CPU suspend
+ rtc: mt6397: check return value after calling platform_get_resource()
+ serial: meson: acquire port->lock in startup()
+ serial: 8250_fintek: Check SER_RS485_RTS_* only with RS485
+ serial: digicolor-usart: Don't allow CS5-6
+ serial: rda-uart: Don't allow CS5-6
+ serial: txx9: Don't allow CS5-6
+ serial: sh-sci: Don't allow CS5-6
+ serial: sifive: Sanitize CSIZE and c_iflag
+ serial: st-asc: Sanitize CSIZE and correct PARENB for CS7
+ serial: stm32-usart: Correct CSIZE, bits, and parity
+ firmware: dmi-sysfs: Fix memory leak in dmi_sysfs_register_handle
+ bus: ti-sysc: Fix warnings for unbind for serial
+ driver: base: fix UAF when driver_attach failed
+ driver core: fix deadlock in __device_attach
+ watchdog: ts4800_wdt: Fix refcount leak in ts4800_wdt_probe
+ ASoC: fsl_sai: Fix FSL_SAI_xDR/xFR definition
+ clocksource/drivers/oxnas-rps: Fix irq_of_parse_and_map() return value
+ s390/crypto: fix scatterwalk_unmap() callers in AES-GCM
+ net: sched: fixed barrier to prevent skbuff sticking in qdisc backlog
+ net: ethernet: mtk_eth_soc: out of bounds read in mtk_hwlro_get_fdir_entry()
+ net: dsa: mv88e6xxx: Fix refcount leak in mv88e6xxx_mdios_register
+ modpost: fix removing numeric suffixes
+ jffs2: fix memory leak in jffs2_do_fill_super
+ ubi: ubi_create_volume: Fix use-after-free when volume creation failed
+ nfp: only report pause frame configuration for physical device
+ net/mlx5: Don't use already freed action pointer
+ net/mlx5e: Update netdev features after changing XDP state
+ net: sched: add barrier to fix packet stuck problem for lockless qdisc
+ tcp: tcp_rtx_synack() can be called from process context
+ afs: Fix infinite loop found by xfstest generic/676
+ tipc: check attribute length for bearer name
+ perf c2c: Fix sorting in percent_rmt_hitm_cmp()
+ mips: cpc: Fix refcount leak in mips_cpc_default_phys_base
+ tracing: Fix sleeping function called from invalid context on RT kernel
+ tracing: Avoid adding tracer option before update_tracer_options
+ f2fs: remove WARN_ON in f2fs_is_valid_blkaddr
+ i2c: cadence: Increase timeout per message if necessary
+ m68knommu: set ZERO_PAGE() to the allocated zeroed page
+ m68knommu: fix undefined reference to `_init_sp'
+ dmaengine: zynqmp_dma: In struct zynqmp_dma_chan fix desc_size data type
+ NFSv4: Don't hold the layoutget locks across multiple RPC calls
+ video: fbdev: pxa3xx-gcu: release the resources correctly in
pxa3xx_gcu_probe/remove()
+ xprtrdma: treat all calls not a bcall when bc_serv is NULL
+ netfilter: nat: really support inet nat without l3 address
+ ata: pata_octeon_cf: Fix refcount leak in octeon_cf_probe
+ netfilter: nf_tables: memleak flow rule from commit path
+ xen: unexport __init-annotated xen_xlate_map_ballooned_pages()
+ af_unix: Fix a data-race in unix_dgram_peer_wake_me().
+ bpf, arm64: Clear prog->jited_len along prog->jited
+ net: dsa: lantiq_gswip: Fix refcount leak in gswip_gphy_fw_list
+ net/mlx4_en: Fix wrong return value on ioctl EEPROM query failure
+ SUNRPC: Fix the calculation of xdr->end in xdr_get_next_encode_buffer()
+ net: mdio: unexport __init-annotated mdio_bus_init()
+ net: xfrm: unexport __init-annotated xfrm4_protocol_init()
+ net: ipv6: unexport __init-annotated seg6_hmac_init()
+ net/mlx5: Rearm the FW tracer after each tracer event
+ net/mlx5: fs, fail conflicting actions
+ ip_gre: test csum_start instead of transport header
+ net: altera: Fix refcount leak in altera_tse_mdio_create
+ drm: imx: fix compiler warning with gcc-12
+ iio: dummy: iio_simple_dummy: check the return value of kstrdup()
+ iio: st_sensors: Add a local lock for protecting odr
+ lkdtm/usercopy: Expand size of "out of frame" object
+ tty: synclink_gt: Fix null-pointer-dereference in slgt_clean()
+ tty: Fix a possible resource leak in icom_probe
+ drivers: staging: rtl8192u: Fix deadlock in ieee80211_beacons_stop()
+ drivers: staging: rtl8192e: Fix deadlock in rtllib_beacons_stop()
+ USB: host: isp116x: check return value after calling platform_get_resource()
+ drivers: tty: serial: Fix deadlock in sa1100_set_termios()
+ drivers: usb: host: Fix deadlock in oxu_bus_suspend()
+ USB: hcd-pci: Fully suspend across freeze/thaw cycle
+ usb: dwc2: gadget: don't reset gadget's driver->bus
+ misc: rtsx: set NULL intfdata when probe fails
+ extcon: Modify extcon device to be created after driver data is set
+ clocksource/drivers/sp804: Avoid error on multiple instances
+ staging: rtl8712: fix uninit-value in usb_read8() and friends
+ staging: rtl8712: fix uninit-value in r871xu_drv_init()
+ serial: msm_serial: disable interrupts in __msm_console_write()
+ kernfs: Separate kernfs_pr_cont_buf and rename_lock.
+ watchdog: wdat_wdt: Stop watchdog when rebooting the system
+ md: protect md_unregister_thread from reentrancy
+ scsi: myrb: Fix up null pointer access on myrb_cleanup()
+ ceph: allow ceph.dir.rctime xattr to be updatable
+ drm/radeon: fix a possible null pointer dereference
+ modpost: fix undefined behavior of is_arm_mapping_symbol()
+ x86/cpu: Elide KCSAN for cpu_has() and friends
+ nbd: call genl_unregister_family() first in nbd_cleanup()
+ nbd: fix race between nbd_alloc_config() and module removal
+ nbd: fix io hung while disconnecting device
+ cifs: version operations for smb20 unneeded when legacy support disabled
+ nodemask: Fix return values to be unsigned
+ vringh: Fix loop descriptors check in the indirect cases
+ scripts/gdb: change kernel config dumping method
+ ALSA: hda/conexant - Fix loopback issue with CX20632
+ cifs: return errors during session setup during reconnects
+ ata: libata-transport: fix {dma|pio|xfer}_mode sysfs files
+ mmc: block: Fix CQE recovery reset success
+ nfc: st21nfca: fix incorrect validating logic in EVT_TRANSACTION
+ nfc: st21nfca: fix memory leaks in EVT_TRANSACTION handling
+ ixgbe: fix bcast packets Rx on VF after promisc removal
+ ixgbe: fix unexpected VLAN Rx in promisc mode on VF
+ Input: bcm5974 - set missing URB_NO_TRANSFER_DMA_MAP urb flag
+ powerpc/32: Fix overread/overwrite of thread_struct via ptrace
+ md/raid0: Ignore RAID0 layout if the second zone has only one device
+ mtd: cfi_cmdset_0002: Use chip_ready() for write on S29GL064N
+ tcp: fix tcp_mtup_probe_success vs wrong snd_cwnd
+ Linux 5.4.198
+ UBUNTU: Upstream stable to v5.4.198
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1982409
Title:
Focal update: v5.4.198 upstream stable release
Status in linux package in Ubuntu:
Invalid
Status in linux source package in Focal:
In Progress
Bug description:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
v5.4.198 upstream stable release
from git://git.kernel.org/
binfmt_flat: do not stop relocating GOT entries prematurely on riscv
ALSA: hda/realtek - Fix microphone noise on ASUS TUF B550M-PLUS
USB: serial: option: add Quectel BG95 modem
USB: new quirk for Dell Gen 2 devices
perf/x86/intel: Fix event constraints for ICL
ptrace/um: Replace PT_DTRACE with TIF_SINGLESTEP
ptrace/xtensa: Replace PT_SINGLESTEP with TIF_SINGLESTEP
ptrace: Reimplement PTRACE_KILL by always sending SIGKILL
btrfs: add "0x" prefix for unsupported optional features
btrfs: repair super block num_devices automatically
drm/virtio: fix NULL pointer dereference in virtio_gpu_conn_get_modes
mwifiex: add mutex lock for call in mwifiex_dfs_chan_sw_work_queue
b43legacy: Fix assigning negative value to unsigned variable
b43: Fix assigning negative value to unsigned variable
ipw2x00: Fix potential NULL dereference in libipw_xmit()
ipv6: fix locking issues with loops over idev->addr_list
fbcon: Consistently protect deferred_takeover with console_lock()
ACPICA: Avoid cache flush inside virtual machines
drm/komeda: return early if drm_universal_plane_init() fails.
ALSA: jack: Access input_dev under mutex
spi: spi-rspi: Remove setting {src,dst}_{addr,addr_width} based on DMA
direction
tools/power turbostat: fix ICX DRAM power numbers
drm/amd/pm: fix double free in si_parse_power_table()
ath9k: fix QCA9561 PA bias level
media: venus: hfi: avoid null dereference in deinit
media: pci: cx23885: Fix the error handling in cx23885_initdev()
media: cx25821: Fix the warning when removing the module
md/bitmap: don't set sb values if can't pass sanity check
mmc: jz4740: Apply DMA engine limits to maximum segment size
scsi: megaraid: Fix error check return value of register_chrdev()
drm/plane: Move range check for format_count earlier
drm/amd/pm: fix the compile warning
arm64: compat: Do not treat syscall number as ESR_ELx for a bad syscall
drm: msm: fix error check return value of irq_of_parse_and_map()
ipv6: Don't send rs packets to the interface of ARPHRD_TUNNEL
net/mlx5: fs, delete the FTE when there are no rules attached to it
ASoC: dapm: Don't fold register value changes into notifications
mlxsw: spectrum_dcb: Do not warn about priority changes
drm/amdgpu/ucode: Remove firmware load type check in amdgpu_ucode_free_bo
HID: bigben: fix slab-out-of-bounds Write in bigben_probe
ASoC: tscs454: Add endianness flag in snd_soc_component_driver
s390/preempt: disable __preempt_count_add() optimization for
PROFILE_ALL_BRANCHES
spi: stm32-qspi: Fix wait_cmd timeout in APM mode
dma-debug: change allocation mode from GFP_NOWAIT to GFP_ATIOMIC
ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default
ipmi:ssif: Check for NULL msg when handling events and messages
ipmi: Fix pr_fmt to avoid compilation issues
rtlwifi: Use pr_warn instead of WARN_ONCE
media: coda: limit frame interval enumeration to supported encoder frame sizes
media: cec-adap.c: fix is_configuring state
openrisc: start CPU timer early in boot
nvme-pci: fix a NULL pointer dereference in nvme_alloc_admin_tags
ASoC: rt5645: Fix errorenous cleanup order
nbd: Fix hung on disconnect request if socket is closed before
net: phy: micrel: Allow probing without .driver_data
media: exynos4-is: Fix compile warning
ASoC: max98357a: remove dependency on GPIOLIB
rxrpc: Return an error to sendmsg if call failed
eth: tg3: silence the GCC 12 array-bounds warning
selftests/bpf: fix btf_dump/btf_dump due to recent clang change
IB/rdmavt: add missing locks in rvt_ruc_loopback
ARM: dts: ox820: align interrupt controller node name with dtschema
PM / devfreq: rk3399_dmc: Disable edev on remove()
fs: jfs: fix possible NULL pointer dereference in dbFree()
ARM: OMAP1: clock: Fix UART rate reporting algorithm
powerpc/fadump: Fix fadump to work with a different endian capture kernel
fat: add ratelimit to fat*_ent_bread()
ARM: versatile: Add missing of_node_put in dcscb_init
ARM: dts: exynos: add atmel,24c128 fallback to Samsung EEPROM
ARM: hisi: Add missing of_node_put after of_find_compatible_node
PCI: Avoid pci_dev_lock() AB/BA deadlock with sriov_numvfs_store()
tracing: incorrect isolate_mote_t cast in mm_vmscan_lru_isolate
powerpc/xics: fix refcount leak in icp_opal_init()
powerpc/powernv: fix missing of_node_put in uv_init()
macintosh/via-pmu: Fix build failure when CONFIG_INPUT is disabled
powerpc/iommu: Add missing of_node_put in iommu_init_early_dart
RDMA/hfi1: Prevent panic when SDMA is disabled
drm: fix EDID struct for old ARM OABI format
ath9k: fix ar9003_get_eepmisc
drm/edid: fix invalid EDID extension block filtering
drm/bridge: adv7511: clean up CEC adapter when probe fails
ASoC: mediatek: Fix error handling in mt8173_max98090_dev_probe
ASoC: mediatek: Fix missing of_node_put in mt2701_wm8960_machine_probe
x86/delay: Fix the wrong asm constraint in delay_loop()
drm/mediatek: Fix mtk_cec_mask()
drm/vc4: txp: Don't set TXP_VSTART_AT_EOF
drm/vc4: txp: Force alpha to be 0xff if it's disabled
bpf: Fix excessive memory allocation in stack_map_alloc()
nl80211: show SSID for P2P_GO interfaces
drm/komeda: Fix an undefined behavior bug in komeda_plane_add()
drm: mali-dp: potential dereference of null pointer
spi: spi-ti-qspi: Fix return value handling of wait_for_completion_timeout
NFC: NULL out the dev->rfkill to prevent UAF
efi: Add missing prototype for efi_capsule_setup_info
drbd: fix duplicate array initializer
HID: hid-led: fix maximum brightness for Dream Cheeky
HID: elan: Fix potential double free in elan_input_configured
drm/bridge: Fix error handling in analogix_dp_probe
sched/fair: Fix cfs_rq_clock_pelt() for throttled cfs_rq
spi: img-spfi: Fix pm_runtime_get_sync() error checking
cpufreq: Fix possible race in cpufreq online error path
ath9k_htc: fix potential out of bounds access with invalid rxstatus->rs_keyix
inotify: show inotify mask flags in proc fdinfo
fsnotify: fix wrong lockdep annotations
of: overlay: do not break notify on NOTIFY_{OK|STOP}
scsi: ufs: core: Exclude UECxx from SFR dump list
x86/pm: Fix false positive kmemleak report in msr_build_context()
x86/speculation: Add missing prototype for unpriv_ebpf_notify()
ASoC: rk3328: fix disabling mclk on pclk probe failure
perf tools: Add missing headers needed by util/data.h
drm/msm/disp/dpu1: set vbif hw config to NULL to avoid use after memory free
during pm runtime resume
drm/msm/dsi: fix error checks and return values for DSI xmit functions
drm/msm/hdmi: check return value after calling platform_get_resource_byname()
drm/msm/hdmi: fix error check return value of irq_of_parse_and_map()
drm/rockchip: vop: fix possible null-ptr-deref in vop_bind()
virtio_blk: fix the discard_granularity and discard_alignment queue limits
x86: Fix return value of __setup handlers
irqchip/exiu: Fix acknowledgment of edge triggered interrupts
irqchip/aspeed-i2c-ic: Fix irq_of_parse_and_map() return value
x86/mm: Cleanup the control_va_addr_alignment() __setup handler
regulator: core: Fix enable_count imbalance with EXCLUSIVE_GET
drm/msm/mdp5: Return error code in mdp5_pipe_release when deadlock is detected
drm/msm/mdp5: Return error code in mdp5_mixer_release when deadlock is
detected
drm/msm: return an error pointer in msm_gem_prime_get_sg_table()
media: uvcvideo: Fix missing check to determine if element is found in list
iomap: iomap_write_failed fix
Revert "cpufreq: Fix possible race in cpufreq online error path"
perf/amd/ibs: Use interrupt regs ip for stack unwinding
ASoC: fsl: Fix refcount leak in imx_sgtl5000_probe
ASoC: mxs-saif: Fix refcount leak in mxs_saif_probe
regulator: pfuze100: Fix refcount leak in pfuze_parse_regulators_dt
scripts/faddr2line: Fix overlapping text section failures
media: aspeed: Fix an error handling path in aspeed_video_probe()
media: st-delta: Fix PM disable depth imbalance in delta_probe
media: exynos4-is: Change clk_disable to clk_disable_unprepare
media: pvrusb2: fix array-index-out-of-bounds in pvr2_i2c_core_init
media: vsp1: Fix offset calculation for plane cropping
Bluetooth: fix dangling sco_conn and use-after-free in sco_sock_timeout
m68k: math-emu: Fix dependencies of math emulation support
sctp: read sk->sk_bound_dev_if once in sctp_rcv()
media: ov7670: remove ov7670_power_off from ov7670_remove
ext4: reject the 'commit' option on ext2 filesystems
drm/msm/a6xx: Fix refcount leak in a6xx_gpu_init
drm: msm: fix possible memory leak in mdp5_crtc_cursor_set()
thermal/drivers/broadcom: Fix potential NULL dereference in sr_thermal_probe
ASoC: wm2000: fix missing clk_disable_unprepare() on error in
wm2000_anc_transition()
NFC: hci: fix sleep in atomic context bugs in nfc_hci_hcp_message_tx
rxrpc: Fix listen() setting the bar too high for the prealloc rings
rxrpc: Don't try to resend the request if we're receiving the reply
rxrpc: Fix overlapping ACK accounting
rxrpc: Don't let ack.previousPacket regress
rxrpc: Fix decision on when to generate an IDLE ACK
net/smc: postpone sk_refcnt increment in connect()
arm64: dts: rockchip: Move drive-impedance-ohm to emmc phy on rk3399
ARM: dts: suniv: F1C100: fix watchdog compatible
soc: qcom: smp2p: Fix missing of_node_put() in smp2p_parse_ipc
soc: qcom: smsm: Fix missing of_node_put() in smsm_parse_ipc
PCI: cadence: Fix find_first_zero_bit() limit
PCI: rockchip: Fix find_first_zero_bit() limit
KVM: nVMX: Leave most VM-Exit info fields unmodified on failed VM-Entry
can: xilinx_can: mark bit timing constants as const
ARM: dts: bcm2835-rpi-zero-w: Fix GPIO line name for Wifi/BT
ARM: dts: bcm2837-rpi-cm3-io3: Fix GPIO line names for SMPS I2C
ARM: dts: bcm2837-rpi-3-b-plus: Fix GPIO line name of power LED
ARM: dts: bcm2835-rpi-b: Fix GPIO line names
misc: ocxl: fix possible double free in ocxl_file_register_afu
crypto: marvell/cesa - ECB does not IV
arm: mediatek: select arch timer for mt7629
powerpc/fadump: fix PT_LOAD segment for boot memory area
mfd: ipaq-micro: Fix error check return value of platform_get_irq()
scsi: fcoe: Fix Wstringop-overflow warnings in fcoe_wwn_from_mac()
firmware: arm_scmi: Fix list protocols enumeration in the base protocol
nvdimm: Allow overwrite in the presence of disabled dimms
pinctrl: mvebu: Fix irq_of_parse_and_map() return value
drivers/base/node.c: fix compaction sysfs file leak
dax: fix cache flush on PMD-mapped pages
powerpc/8xx: export 'cpm_setbrg' for modules
powerpc/idle: Fix return value of __setup() handler
powerpc/4xx/cpm: Fix return value of __setup() handler
proc: fix dentry/inode overinstantiating under /proc/${pid}/net
ipc/mqueue: use get_tree_nodev() in mqueue_get_tree()
PCI: imx6: Fix PERST# start-up sequence
tty: fix deadlock caused by calling printk() under tty_port->lock
crypto: cryptd - Protect per-CPU resource by disabling BH.
Input: sparcspkr - fix refcount leak in bbc_beep_probe
powerpc/64: Only WARN if __pa()/__va() called with bad addresses
powerpc/perf: Fix the threshold compare group constraint for power9
macintosh: via-pmu and via-cuda need RTC_LIB
powerpc/fsl_rio: Fix refcount leak in fsl_rio_setup
mfd: davinci_voicecodec: Fix possible null-ptr-deref davinci_vc_probe()
mailbox: forward the hrtimer if not queued and under a lock
RDMA/hfi1: Prevent use of lock before it is initialized
Input: stmfts - do not leave device disabled in stmfts_input_open
f2fs: fix dereference of stale list iterator after loop body
iommu/mediatek: Add list_del in mtk_iommu_remove
i2c: at91: use dma safe buffers
i2c: at91: Initialize dma_buf in at91_twi_xfer()
NFS: Do not report EINTR/ERESTARTSYS as mapping errors
NFS: Do not report flush errors in nfs_write_end()
NFS: Don't report errors from nfs_pageio_complete() more than once
NFSv4/pNFS: Do not fail I/O when we fail to allocate the pNFS layout
video: fbdev: clcdfb: Fix refcount leak in clcdfb_of_vram_setup
dmaengine: stm32-mdma: remove GISR1 register
iommu/amd: Increase timeout waiting for GA log enablement
perf c2c: Use stdio interface if slang is not supported
perf jevents: Fix event syntax error caused by ExtSel
f2fs: fix to avoid f2fs_bug_on() in dec_valid_node_count()
f2fs: fix to do sanity check on block address in f2fs_do_zero_range()
f2fs: fix to clear dirty inode in f2fs_evict_inode()
f2fs: fix deadloop in foreground GC
f2fs: don't need inode lock for system hidden quota
f2fs: fix fallocate to use file_modified to update permissions consistently
wifi: mac80211: fix use-after-free in chanctx code
iwlwifi: mvm: fix assert 1F04 upon reconfig
fs-writeback: writeback_sb_inodes：Recalculate 'wrote' according skipped pages
efi: Do not import certificates from UEFI Secure Boot for T2 Macs
bfq: Split shared queues on move between cgroups
bfq: Update cgroup information before merging bio
bfq: Track whether bfq_group is still online
ext4: fix use-after-free in ext4_rename_dir_prepare
ext4: fix warning in ext4_handle_inode_extension
ext4: fix bug_on in ext4_writepages
ext4: verify dir block before splitting it
ext4: avoid cycles in directory h-tree
ACPI: property: Release subnode properties with data nodes
tracing: Fix potential double free in create_var_ref()
PCI/PM: Fix bridge_d3_blacklist[] Elo i2 overwrite of Gigabyte X299
PCI: qcom: Fix runtime PM imbalance on probe errors
PCI: qcom: Fix unbalanced PHY init on probe errors
mm, compaction: fast_find_migrateblock() should return pfn in the target zone
dlm: fix plock invalid read
dlm: fix missing lkb refcount handling
ocfs2: dlmfs: fix error handling of user_dlm_destroy_lock
scsi: dc395x: Fix a missing check on list iterator
scsi: ufs: qcom: Add a readl() to make sure ref_clk gets enabled
drm/amdgpu/cs: make commands with 0 chunks illegal behaviour.
drm/etnaviv: check for reaped mapping in etnaviv_iommu_unmap_gem
drm/nouveau/clk: Fix an incorrect NULL check on list iterator
drm/bridge: analogix_dp: Grab runtime PM reference for DP-AUX
md: fix an incorrect NULL check in does_sb_need_changing
md: fix an incorrect NULL check in md_reload_sb
mtd: cfi_cmdset_0002: Move and rename
chip_check/chip_ready/chip_good_for_write
media: coda: Fix reported H264 profile
media: coda: Add more H264 levels for CODA960
Kconfig: Add option for asm goto w/ tied outputs to workaround clang-13 bug
RDMA/hfi1: Fix potential integer multiplication overflow errors
irqchip/armada-370-xp: Do not touch Performance Counter Overflow on A375,
A38x, A39x
irqchip: irq-xtensa-mx: fix initial IRQ affinity
mac80211: upgrade passive scan to active scan on DFS channels after beacon rx
um: chan_user: Fix winch_tramp() return value
um: Fix out-of-bounds read in LDT setup
iommu/msm: Fix an incorrect NULL check on list iterator
nodemask.h: fix compilation error with GCC12
hugetlb: fix huge_pmd_unshare address update
rtl818x: Prevent using not initialized queues
ASoC: rt5514: Fix event generation for "DSP Voice Wake Up" control
carl9170: tx: fix an incorrect use of list iterator
serial: pch: don't overwrite xmit->buf[0] by x_char
tilcdc: tilcdc_external: fix an incorrect NULL check on list iterator
gma500: fix an incorrect NULL check on list iterator
arm64: dts: qcom: ipq8074: fix the sleep clock frequency
phy: qcom-qmp: fix struct clk leak on probe errors
ARM: pxa: maybe fix gpio lookup tables
docs/conf.py: Cope with removal of language=None in Sphinx 5.0.0
dt-bindings: gpio: altera: correct interrupt-cells
blk-iolatency: Fix inflight count imbalances and IO hangs on offline
phy: qcom-qmp: fix reset-controller leak on probe errors
Kconfig: add config option for asm goto w/ outputs
RDMA/rxe: Generate a completion for unsupported/invalid opcode
MIPS: IP27: Remove incorrect `cpu_has_fpu' override
bfq: Avoid merging queues with different parents
bfq: Drop pointless unlock-lock pair
bfq: Remove pointless bfq_init_rq() calls
bfq: Get rid of __bio_blkcg() usage
bfq: Make sure bfqg for which we are queueing requests is online
block: fix bio_clone_blkg_association() to associate with proper blkcg_gq
md: bcache: check the return value of kzalloc() in detached_dev_do_request()
pcmcia: db1xxx_ss: restrict to MIPS_DB1XXX boards
staging: greybus: codecs: fix type confusion of list iterator variable
iio: adc: ad7124: Remove shift from scan_type
tty: goldfish: Use tty_port_destroy() to destroy port
tty: serial: owl: Fix missing clk_disable_unprepare() in owl_uart_probe
tty: serial: fsl_lpuart: fix potential bug when using both of_alias_get_id
and ida_simple_get
usb: usbip: fix a refcount leak in stub_probe()
usb: usbip: add missing device lock on tweak configuration cmd
USB: storage: karma: fix rio_karma_init return
usb: musb: Fix missing of_node_put() in omap2430_probe
staging: fieldbus: Fix the error handling path in anybuss_host_common_probe()
pwm: lp3943: Fix duty calculation in case period was clamped
rpmsg: qcom_smd: Fix irq_of_parse_and_map() return value
usb: dwc3: pci: Fix pm_runtime_get_sync() error checking
firmware: stratix10-svc: fix a missing check on list iterator
iio: adc: stmpe-adc: Fix wait_for_completion_timeout return value check
iio: adc: sc27xx: fix read big scale voltage not right
iio: adc: sc27xx: Fine tune the scale calibration values
rpmsg: qcom_smd: Fix returning 0 if irq_of_parse_and_map() fails
phy: qcom-qmp: fix pipe-clock imbalance on power-on failure
serial: sifive: Report actual baud base rather than fixed 115200
coresight: cpu-debug: Replace mutex with mutex_trylock on panic notifier
soc: rockchip: Fix refcount leak in rockchip_grf_init
clocksource/drivers/riscv: Events are stopped during CPU suspend
rtc: mt6397: check return value after calling platform_get_resource()
serial: meson: acquire port->lock in startup()
serial: 8250_fintek: Check SER_RS485_RTS_* only with RS485
serial: digicolor-usart: Don't allow CS5-6
serial: rda-uart: Don't allow CS5-6
serial: txx9: Don't allow CS5-6
serial: sh-sci: Don't allow CS5-6
serial: sifive: Sanitize CSIZE and c_iflag
serial: st-asc: Sanitize CSIZE and correct PARENB for CS7
serial: stm32-usart: Correct CSIZE, bits, and parity
firmware: dmi-sysfs: Fix memory leak in dmi_sysfs_register_handle
bus: ti-sysc: Fix warnings for unbind for serial
driver: base: fix UAF when driver_attach failed
driver core: fix deadlock in __device_attach
watchdog: ts4800_wdt: Fix refcount leak in ts4800_wdt_probe
ASoC: fsl_sai: Fix FSL_SAI_xDR/xFR definition
clocksource/drivers/oxnas-rps: Fix irq_of_parse_and_map() return value
s390/crypto: fix scatterwalk_unmap() callers in AES-GCM
net: sched: fixed barrier to prevent skbuff sticking in qdisc backlog
net: ethernet: mtk_eth_soc: out of bounds read in mtk_hwlro_get_fdir_entry()
net: dsa: mv88e6xxx: Fix refcount leak in mv88e6xxx_mdios_register
modpost: fix removing numeric suffixes
jffs2: fix memory leak in jffs2_do_fill_super
ubi: ubi_create_volume: Fix use-after-free when volume creation failed
nfp: only report pause frame configuration for physical device
net/mlx5: Don't use already freed action pointer
net/mlx5e: Update netdev features after changing XDP state
net: sched: add barrier to fix packet stuck problem for lockless qdisc
tcp: tcp_rtx_synack() can be called from process context
afs: Fix infinite loop found by xfstest generic/676
tipc: check attribute length for bearer name
perf c2c: Fix sorting in percent_rmt_hitm_cmp()
mips: cpc: Fix refcount leak in mips_cpc_default_phys_base
tracing: Fix sleeping function called from invalid context on RT kernel
tracing: Avoid adding tracer option before update_tracer_options
f2fs: remove WARN_ON in f2fs_is_valid_blkaddr
i2c: cadence: Increase timeout per message if necessary
m68knommu: set ZERO_PAGE() to the allocated zeroed page
m68knommu: fix undefined reference to `_init_sp'
dmaengine: zynqmp_dma: In struct zynqmp_dma_chan fix desc_size data type
NFSv4: Don't hold the layoutget locks across multiple RPC calls
video: fbdev: pxa3xx-gcu: release the resources correctly in
pxa3xx_gcu_probe/remove()
xprtrdma: treat all calls not a bcall when bc_serv is NULL
netfilter: nat: really support inet nat without l3 address
ata: pata_octeon_cf: Fix refcount leak in octeon_cf_probe
netfilter: nf_tables: memleak flow rule from commit path
xen: unexport __init-annotated xen_xlate_map_ballooned_pages()
af_unix: Fix a data-race in unix_dgram_peer_wake_me().
bpf, arm64: Clear prog->jited_len along prog->jited
net: dsa: lantiq_gswip: Fix refcount leak in gswip_gphy_fw_list
net/mlx4_en: Fix wrong return value on ioctl EEPROM query failure
SUNRPC: Fix the calculation of xdr->end in xdr_get_next_encode_buffer()
net: mdio: unexport __init-annotated mdio_bus_init()
net: xfrm: unexport __init-annotated xfrm4_protocol_init()
net: ipv6: unexport __init-annotated seg6_hmac_init()
net/mlx5: Rearm the FW tracer after each tracer event
net/mlx5: fs, fail conflicting actions
ip_gre: test csum_start instead of transport header
net: altera: Fix refcount leak in altera_tse_mdio_create
drm: imx: fix compiler warning with gcc-12
iio: dummy: iio_simple_dummy: check the return value of kstrdup()
iio: st_sensors: Add a local lock for protecting odr
lkdtm/usercopy: Expand size of "out of frame" object
tty: synclink_gt: Fix null-pointer-dereference in slgt_clean()
tty: Fix a possible resource leak in icom_probe
drivers: staging: rtl8192u: Fix deadlock in ieee80211_beacons_stop()
drivers: staging: rtl8192e: Fix deadlock in rtllib_beacons_stop()
USB: host: isp116x: check return value after calling platform_get_resource()
drivers: tty: serial: Fix deadlock in sa1100_set_termios()
drivers: usb: host: Fix deadlock in oxu_bus_suspend()
USB: hcd-pci: Fully suspend across freeze/thaw cycle
usb: dwc2: gadget: don't reset gadget's driver->bus
misc: rtsx: set NULL intfdata when probe fails
extcon: Modify extcon device to be created after driver data is set
clocksource/drivers/sp804: Avoid error on multiple instances
staging: rtl8712: fix uninit-value in usb_read8() and friends
staging: rtl8712: fix uninit-value in r871xu_drv_init()
serial: msm_serial: disable interrupts in __msm_console_write()
kernfs: Separate kernfs_pr_cont_buf and rename_lock.
watchdog: wdat_wdt: Stop watchdog when rebooting the system
md: protect md_unregister_thread from reentrancy
scsi: myrb: Fix up null pointer access on myrb_cleanup()
ceph: allow ceph.dir.rctime xattr to be updatable
drm/radeon: fix a possible null pointer dereference
modpost: fix undefined behavior of is_arm_mapping_symbol()
x86/cpu: Elide KCSAN for cpu_has() and friends
nbd: call genl_unregister_family() first in nbd_cleanup()
nbd: fix race between nbd_alloc_config() and module removal
nbd: fix io hung while disconnecting device
cifs: version operations for smb20 unneeded when legacy support disabled
nodemask: Fix return values to be unsigned
vringh: Fix loop descriptors check in the indirect cases
scripts/gdb: change kernel config dumping method
ALSA: hda/conexant - Fix loopback issue with CX20632
cifs: return errors during session setup during reconnects
ata: libata-transport: fix {dma|pio|xfer}_mode sysfs files
mmc: block: Fix CQE recovery reset success
nfc: st21nfca: fix incorrect validating logic in EVT_TRANSACTION
nfc: st21nfca: fix memory leaks in EVT_TRANSACTION handling
ixgbe: fix bcast packets Rx on VF after promisc removal
ixgbe: fix unexpected VLAN Rx in promisc mode on VF
Input: bcm5974 - set missing URB_NO_TRANSFER_DMA_MAP urb flag
powerpc/32: Fix overread/overwrite of thread_struct via ptrace
md/raid0: Ignore RAID0 layout if the second zone has only one device
mtd: cfi_cmdset_0002: Use chip_ready() for write on S29GL064N
tcp: fix tcp_mtup_probe_success vs wrong snd_cwnd
Linux 5.4.198
UBUNTU: Upstream stable to v5.4.198
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1982409/+subscriptions
--
Mailing list: https://launchpad.net/~kernel-packages
Post to : [email protected]
Unsubscribe : https://launchpad.net/~kernel-packages
More help : https://help.launchpad.net/ListHelp
