Public bug reported:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
v5.4.213 upstream stable release
from git://git.kernel.org/
efi: capsule-loader: Fix use-after-free in efi_capsule_write
wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in
il4965_rs_fill_link_cmd()
fs: only do a memory barrier for the first set_buffer_uptodate()
Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
net: dp83822: disable false carrier interrupt
drm/msm/dsi: fix the inconsistent indenting
drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
iio: adc: mcp3911: make use of the sign bit
ieee802154/adf7242: defer destroy_workqueue call
wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
Revert "xhci: turn off port power in shutdown"
net: sched: tbf: don't call qdisc_put() while holding tree lock
ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
kcm: fix strp_init() order and cleanup
sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
tcp: annotate data-race around challenge_timestamp
Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
net/smc: Remove redundant refcount increase
serial: fsl_lpuart: RS485 RTS polariy is inverse
staging: rtl8712: fix use after free bugs
powerpc: align syscall table for ppc32
vt: Clear selection before changing the font
tty: serial: lpuart: disable flow control while waiting for the transmit engine
to complete
Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
iio: adc: mcp3911: use correct formula for AD conversion
misc: fastrpc: fix memory corruption on probe
misc: fastrpc: fix memory corruption on open
USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
binder: fix UAF of ref->proc caused by race condition
usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
drm/i915/reg: Fix spelling mistake "Unsupport" -> "Unsupported"
clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
clk: core: Fix runtime PM sequence in clk_core_unprepare()
Input: rk805-pwrkey - fix module autoloading
clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
hwmon: (gpio-fan) Fix array out of bounds access
gpio: pca953x: Add mutex_lock for regcache sync in PM
thunderbolt: Use the actual buffer in tb_async_error()
xhci: Add grace period after xHC start to prevent premature runtime suspend.
USB: serial: cp210x: add Decagon UCA device id
USB: serial: option: add support for OPPO R11 diag port
USB: serial: option: add Quectel EM060K modem
USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
usb: dwc2: fix wrong order of phy_power_on and phy_init
USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
usb-storage: Add ignore-residue quirk for NXP PN7462AU
s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
s390: fix nospec table alignments
USB: core: Prevent nested device-reset calls
usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
driver core: Don't probe devices after bus_type.match() probe deferral
wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
net: mac802154: Fix a condition in the receive path
ALSA: seq: oss: Fix data-race for max_midi_devs access
ALSA: seq: Fix data-race at module auto-loading
drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
btrfs: harden identification of a stale device
usb: dwc3: fix PHY disable sequence
usb: dwc3: disable USB core PHY management
USB: serial: ch341: fix lost character on LCR updates
USB: serial: ch341: fix disabled rx timer on older devices
scsi: megaraid_sas: Fix double kfree()
drm/gem: Fix GEM handle release errors
drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
drm/radeon: add a force flush to delay work when radeon
parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned
fw_level
fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
ALSA: aloop: Fix random zeros in capture data when using jiffies timer
ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
kprobes: Prohibit probes in gate area
debugfs: add debugfs_lookup_and_remove()
nvmet: fix a use-after-free
scsi: mpt3sas: Fix use-after-free warning
scsi: lpfc: Add missing destroy_workqueue() in error path
cgroup: Optimize single thread migration
cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty
subtree
cgroup: Fix threadgroup_rwsem <-> cpus_read_lock() deadlock
smb3: missing inode locks in punch hole
ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
regulator: core: Clean up on enable failure
RDMA/cma: Fix arguments order in net device validation
soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
RDMA/hns: Fix supported page size
netfilter: br_netfilter: Drop dst references before setting.
netfilter: nf_conntrack_irc: Fix forged IP logic
rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
afs: Use the operation issue time instead of the reply time for callbacks
sch_sfb: Don't assume the skb is still around after enqueueing to child
tipc: fix shift wrapping bug in map_get()
i40e: Fix kernel crash during module removal
RDMA/siw: Pass a pointer to virt_to_page()
ipv6: sr: fix out-of-bounds read when setting HMAC data.
RDMA/mlx5: Set local port to one when accessing counters
nvme-tcp: fix UAF when detecting digest errors
tcp: fix early ETIMEDOUT after spurious non-SACK RTO
sch_sfb: Also store skb len before calling child enqueue
x86/nospec: Fix i386 RSB stuffing
MIPS: loongson32: ls1c: Fix hang during startup
Linux 5.4.213
UBUNTU: Upstream stable to v5.4.213
** Affects: linux (Ubuntu)
Importance: Undecided
Status: Invalid
** Affects: linux (Ubuntu Focal)
Importance: Medium
Assignee: Kamal Mostafa (kamalmostafa)
Status: In Progress
** Tags: kernel-stable-tracking-bug
** Changed in: linux (Ubuntu)
Status: New => Confirmed
** Tags added: kernel-stable-tracking-bug
** Also affects: linux (Ubuntu Focal)
Importance: Undecided
Status: New
** Description changed:
+ SRU Justification
- SRU Justification
+ Impact:
+ The upstream process for stable tree updates is quite similar
+ in scope to the Ubuntu SRU process, e.g., each patch has to
+ demonstrably fix a bug, and each patch is vetted by upstream
+ by originating either directly from a mainline/stable Linux tree or
+ a minimally backported form of that patch. The following upstream
+ stable patches should be included in the Ubuntu kernel:
- Impact:
- The upstream process for stable tree updates is quite similar
- in scope to the Ubuntu SRU process, e.g., each patch has to
- demonstrably fix a bug, and each patch is vetted by upstream
- by originating either directly from a mainline/stable Linux tree or
- a minimally backported form of that patch. The following upstream
- stable patches should be included in the Ubuntu kernel:
+ v5.4.213 upstream stable release
+ from git://git.kernel.org/
- v5.4.213 upstream stable release
- from git://git.kernel.org/
+ efi: capsule-loader: Fix use-after-free in efi_capsule_write
+ wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in
il4965_rs_fill_link_cmd()
+ fs: only do a memory barrier for the first set_buffer_uptodate()
+ Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
+ net: dp83822: disable false carrier interrupt
+ drm/msm/dsi: fix the inconsistent indenting
+ drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
+ platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
+ iio: adc: mcp3911: make use of the sign bit
+ ieee802154/adf7242: defer destroy_workqueue call
+ wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
+ Revert "xhci: turn off port power in shutdown"
+ net: sched: tbf: don't call qdisc_put() while holding tree lock
+ ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
+ kcm: fix strp_init() order and cleanup
+ sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
+ tcp: annotate data-race around challenge_timestamp
+ Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
+ net/smc: Remove redundant refcount increase
+ serial: fsl_lpuart: RS485 RTS polariy is inverse
+ staging: rtl8712: fix use after free bugs
+ powerpc: align syscall table for ppc32
+ vt: Clear selection before changing the font
+ tty: serial: lpuart: disable flow control while waiting for the transmit
engine to complete
+ Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
+ iio: adc: mcp3911: use correct formula for AD conversion
+ misc: fastrpc: fix memory corruption on probe
+ misc: fastrpc: fix memory corruption on open
+ USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
+ binder: fix UAF of ref->proc caused by race condition
+ usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
+ drm/i915/reg: Fix spelling mistake "Unsupport" -> "Unsupported"
+ clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
+ Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
+ clk: core: Fix runtime PM sequence in clk_core_unprepare()
+ Input: rk805-pwrkey - fix module autoloading
+ clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
+ hwmon: (gpio-fan) Fix array out of bounds access
+ gpio: pca953x: Add mutex_lock for regcache sync in PM
+ thunderbolt: Use the actual buffer in tb_async_error()
+ xhci: Add grace period after xHC start to prevent premature runtime suspend.
+ USB: serial: cp210x: add Decagon UCA device id
+ USB: serial: option: add support for OPPO R11 diag port
+ USB: serial: option: add Quectel EM060K modem
+ USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
+ usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
+ usb: dwc2: fix wrong order of phy_power_on and phy_init
+ USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
+ usb-storage: Add ignore-residue quirk for NXP PN7462AU
+ s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
+ s390: fix nospec table alignments
+ USB: core: Prevent nested device-reset calls
+ usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
+ driver core: Don't probe devices after bus_type.match() probe deferral
+ wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
+ net: mac802154: Fix a condition in the receive path
+ ALSA: seq: oss: Fix data-race for max_midi_devs access
+ ALSA: seq: Fix data-race at module auto-loading
+ drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
+ btrfs: harden identification of a stale device
+ usb: dwc3: fix PHY disable sequence
+ usb: dwc3: disable USB core PHY management
+ USB: serial: ch341: fix lost character on LCR updates
+ USB: serial: ch341: fix disabled rx timer on older devices
+ scsi: megaraid_sas: Fix double kfree()
+ drm/gem: Fix GEM handle release errors
+ drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
+ drm/radeon: add a force flush to delay work when radeon
+ parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
+ parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
+ arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned
fw_level
+ fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
+ drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
+ ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
+ ALSA: aloop: Fix random zeros in capture data when using jiffies timer
+ ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
+ kprobes: Prohibit probes in gate area
+ debugfs: add debugfs_lookup_and_remove()
+ nvmet: fix a use-after-free
+ scsi: mpt3sas: Fix use-after-free warning
+ scsi: lpfc: Add missing destroy_workqueue() in error path
+ cgroup: Optimize single thread migration
+ cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty
subtree
+ cgroup: Fix threadgroup_rwsem <-> cpus_read_lock() deadlock
+ smb3: missing inode locks in punch hole
+ ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
+ regulator: core: Clean up on enable failure
+ RDMA/cma: Fix arguments order in net device validation
+ soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
+ RDMA/hns: Fix supported page size
+ netfilter: br_netfilter: Drop dst references before setting.
+ netfilter: nf_conntrack_irc: Fix forged IP logic
+ rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
+ afs: Use the operation issue time instead of the reply time for callbacks
+ sch_sfb: Don't assume the skb is still around after enqueueing to child
+ tipc: fix shift wrapping bug in map_get()
+ i40e: Fix kernel crash during module removal
+ RDMA/siw: Pass a pointer to virt_to_page()
+ ipv6: sr: fix out-of-bounds read when setting HMAC data.
+ RDMA/mlx5: Set local port to one when accessing counters
+ nvme-tcp: fix UAF when detecting digest errors
+ tcp: fix early ETIMEDOUT after spurious non-SACK RTO
+ sch_sfb: Also store skb len before calling child enqueue
+ x86/nospec: Fix i386 RSB stuffing
+ MIPS: loongson32: ls1c: Fix hang during startup
+ Linux 5.4.213
+ UBUNTU: Upstream stable to v5.4.213
** Changed in: linux (Ubuntu)
Status: Confirmed => Invalid
** Changed in: linux (Ubuntu Focal)
Status: New => In Progress
** Changed in: linux (Ubuntu Focal)
Importance: Undecided => Medium
** Changed in: linux (Ubuntu Focal)
Assignee: (unassigned) => Kamal Mostafa (kamalmostafa)
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1992211
Title:
Focal update: v5.4.213 upstream stable release
Status in linux package in Ubuntu:
Invalid
Status in linux source package in Focal:
In Progress
Bug description:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
v5.4.213 upstream stable release
from git://git.kernel.org/
efi: capsule-loader: Fix use-after-free in efi_capsule_write
wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in
il4965_rs_fill_link_cmd()
fs: only do a memory barrier for the first set_buffer_uptodate()
Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
net: dp83822: disable false carrier interrupt
drm/msm/dsi: fix the inconsistent indenting
drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
iio: adc: mcp3911: make use of the sign bit
ieee802154/adf7242: defer destroy_workqueue call
wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
Revert "xhci: turn off port power in shutdown"
net: sched: tbf: don't call qdisc_put() while holding tree lock
ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
kcm: fix strp_init() order and cleanup
sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
tcp: annotate data-race around challenge_timestamp
Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
net/smc: Remove redundant refcount increase
serial: fsl_lpuart: RS485 RTS polariy is inverse
staging: rtl8712: fix use after free bugs
powerpc: align syscall table for ppc32
vt: Clear selection before changing the font
tty: serial: lpuart: disable flow control while waiting for the transmit
engine to complete
Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag
iio: adc: mcp3911: use correct formula for AD conversion
misc: fastrpc: fix memory corruption on probe
misc: fastrpc: fix memory corruption on open
USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
binder: fix UAF of ref->proc caused by race condition
usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
drm/i915/reg: Fix spelling mistake "Unsupport" -> "Unsupported"
clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
clk: core: Fix runtime PM sequence in clk_core_unprepare()
Input: rk805-pwrkey - fix module autoloading
clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate
hwmon: (gpio-fan) Fix array out of bounds access
gpio: pca953x: Add mutex_lock for regcache sync in PM
thunderbolt: Use the actual buffer in tb_async_error()
xhci: Add grace period after xHC start to prevent premature runtime suspend.
USB: serial: cp210x: add Decagon UCA device id
USB: serial: option: add support for OPPO R11 diag port
USB: serial: option: add Quectel EM060K modem
USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
usb: dwc2: fix wrong order of phy_power_on and phy_init
USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
usb-storage: Add ignore-residue quirk for NXP PN7462AU
s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
s390: fix nospec table alignments
USB: core: Prevent nested device-reset calls
usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
driver core: Don't probe devices after bus_type.match() probe deferral
wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
net: mac802154: Fix a condition in the receive path
ALSA: seq: oss: Fix data-race for max_midi_devs access
ALSA: seq: Fix data-race at module auto-loading
drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk
btrfs: harden identification of a stale device
usb: dwc3: fix PHY disable sequence
usb: dwc3: disable USB core PHY management
USB: serial: ch341: fix lost character on LCR updates
USB: serial: ch341: fix disabled rx timer on older devices
scsi: megaraid_sas: Fix double kfree()
drm/gem: Fix GEM handle release errors
drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
drm/radeon: add a force flush to delay work when radeon
parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned
fw_level
fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
ALSA: aloop: Fix random zeros in capture data when using jiffies timer
ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
kprobes: Prohibit probes in gate area
debugfs: add debugfs_lookup_and_remove()
nvmet: fix a use-after-free
scsi: mpt3sas: Fix use-after-free warning
scsi: lpfc: Add missing destroy_workqueue() in error path
cgroup: Optimize single thread migration
cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty
subtree
cgroup: Fix threadgroup_rwsem <-> cpus_read_lock() deadlock
smb3: missing inode locks in punch hole
ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node
regulator: core: Clean up on enable failure
RDMA/cma: Fix arguments order in net device validation
soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
RDMA/hns: Fix supported page size
netfilter: br_netfilter: Drop dst references before setting.
netfilter: nf_conntrack_irc: Fix forged IP logic
rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2()
afs: Use the operation issue time instead of the reply time for callbacks
sch_sfb: Don't assume the skb is still around after enqueueing to child
tipc: fix shift wrapping bug in map_get()
i40e: Fix kernel crash during module removal
RDMA/siw: Pass a pointer to virt_to_page()
ipv6: sr: fix out-of-bounds read when setting HMAC data.
RDMA/mlx5: Set local port to one when accessing counters
nvme-tcp: fix UAF when detecting digest errors
tcp: fix early ETIMEDOUT after spurious non-SACK RTO
sch_sfb: Also store skb len before calling child enqueue
x86/nospec: Fix i386 RSB stuffing
MIPS: loongson32: ls1c: Fix hang during startup
Linux 5.4.213
UBUNTU: Upstream stable to v5.4.213
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1992211/+subscriptions
--
Mailing list: https://launchpad.net/~kernel-packages
Post to : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help : https://help.launchpad.net/ListHelp
