** Tags removed: verification-needed-jammy

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1987451

Title:
  Jammy update: v5.15.54 upstream stable release

Status in linux package in Ubuntu:
  Invalid
Status in linux source package in Jammy:
  Fix Released

Bug description:
  SRU Justification

      Impact:
         The upstream process for stable tree updates is quite similar
         in scope to the Ubuntu SRU process, e.g., each patch has to
         demonstrably fix a bug, and each patch is vetted by upstream
         by originating either directly from a mainline/stable Linux tree or
         a minimally backported form of that patch. The following upstream
         stable patches should be included in the Ubuntu kernel:

         v5.15.54 upstream stable release
         from git://git.kernel.org/

  mm/slub: add missing TID updates on slab deactivation
  mm/filemap: fix UAF in find_lock_entries
  Revert "selftests/bpf: Add test for bpf_timer overwriting crash"
  ALSA: usb-audio: Workarounds for Behringer UMC 204/404 HD
  ALSA: hda/realtek: Add quirk for Clevo L140PU
  ALSA: cs46xx: Fix missing snd_card_free() call at probe error
  can: bcm: use call_rcu() instead of costly synchronize_rcu()
  can: grcan: grcan_probe(): remove extra of_node_get()
  can: gs_usb: gs_usb_open/close(): fix memory leak
  can: m_can: m_can_chip_config(): actually enable internal timestamping
  can: m_can: m_can_{read_fifo,echo_tx_event}(): shift timestamp to full 32 bits
  can: mcp251xfd: mcp251xfd_regmap_crc_read(): improve workaround handling for 
mcp2517fd
  can: mcp251xfd: mcp251xfd_regmap_crc_read(): update workaround broken CRC on 
TBC register
  bpf: Fix incorrect verifier simulation around jmp32's jeq/jne
  bpf: Fix insufficient bounds propagation from adjust_scalar_min_max_vals
  usbnet: fix memory leak in error case
  net: rose: fix UAF bug caused by rose_t0timer_expiry
  netfilter: nft_set_pipapo: release elements in clone from abort path
  btrfs: rename btrfs_alloc_chunk to btrfs_create_chunk
  btrfs: add additional parameters to btrfs_init_tree_ref/btrfs_init_data_ref
  btrfs: fix invalid delayed ref after subvolume creation failure
  btrfs: fix warning when freeing leaf after subvolume creation failure
  Input: cpcap-pwrbutton - handle errors from platform_get_irq()
  Input: goodix - change goodix_i2c_write() len parameter type to int
  Input: goodix - add a goodix.h header file
  Input: goodix - refactor reset handling
  Input: goodix - try not to touch the reset-pin on x86/ACPI devices
  dma-buf/poll: Get a file reference for outstanding fence callbacks
  btrfs: fix deadlock between chunk allocation and chunk btree modifications
  drm/i915: Disable bonding on gen12+ platforms
  drm/i915/gt: Register the migrate contexts with their engines
  drm/i915: Replace the unconditional clflush with drm_clflush_virt_range()
  media: ir_toy: prevent device from hanging during transmit
  memory: renesas-rpc-if: Avoid unaligned bus access for HyperFlash
  ath11k: add hw_param for wakeup_mhi
  qed: Improve the stack space of filter_config()
  platform/x86: wmi: introduce helper to convert driver to WMI driver
  platform/x86: wmi: Replace read_takes_no_args with a flags field
  platform/x86: wmi: Fix driver->notify() vs ->probe() race
  mt76: mt7921: get rid of mt7921_mac_set_beacon_filter
  mt76: mt7921: introduce mt7921_mcu_set_beacon_filter utility routine
  mt76: mt7921: fix a possible race enabling/disabling runtime-pm
  bpf: Stop caching subprog index in the bpf_pseudo_func insn
  bpf, arm64: Use emit_addr_mov_i64() for BPF_PSEUDO_FUNC
  riscv: defconfig: enable DRM_NOUVEAU
  RISC-V: defconfigs: Set CONFIG_FB=y, for FB console
  net/mlx5e: Check action fwd/drop flag exists also for nic flows
  net/mlx5e: Split actions_match_supported() into a sub function
  net/mlx5e: TC, Reject rules with drop and modify hdr action
  net/mlx5e: TC, Reject rules with forward and drop actions
  ASoC: rt5682: Avoid the unexpected IRQ event during going to suspend
  ASoC: rt5682: Re-detect the combo jack after resuming
  ASoC: rt5682: Fix deadlock on resume
  netfilter: nf_tables: convert pktinfo->tprot_set to flags field
  netfilter: nft_payload: support for inner header matching / mangling
  netfilter: nft_payload: don't allow th access for fragments
  s390/boot: allocate amode31 section in decompressor
  s390/setup: use physical pointers for memblock_reserve()
  s390/setup: preserve memory at OLDMEM_BASE and OLDMEM_SIZE
  ibmvnic: init init_done_rc earlier
  ibmvnic: clear fop when retrying probe
  ibmvnic: Allow queueing resets during probe
  virtio-blk: avoid preallocating big SGL for data
  io_uring: ensure that fsnotify is always called
  block: use bdev_get_queue() in bio.c
  block: only mark bio as tracked if it really is tracked
  block: fix rq-qos breakage from skipping rq_qos_done_bio()
  stddef: Introduce struct_group() helper macro
  media: omap3isp: Use struct_group() for memcpy() region
  media: davinci: vpif: fix use-after-free on driver unbind
  mt76: mt76_connac: fix MCU_CE_CMD_SET_ROC definition error
  mt76: mt7921: do not always disable fw runtime-pm
  cxl/port: Hold port reference until decoder release
  clk: renesas: r9a07g044: Update multiplier and divider values for PLL2/3
  KVM: x86/mmu: Use yield-safe TDP MMU root iter in MMU notifier unmapping
  KVM: x86/mmu: Use common TDP MMU zap helper for MMU notifier unmap hook
  scsi: qla2xxx: Move heartbeat handling from DPC thread to workqueue
  scsi: qla2xxx: Fix laggy FC remote port session recovery
  scsi: qla2xxx: edif: Replace list_for_each_safe with list_for_each_entry_safe
  scsi: qla2xxx: Fix crash during module load unload test
  gfs2: Fix gfs2_file_buffered_write endless loop workaround
  vdpa/mlx5: Avoid processing works if workqueue was destroyed
  btrfs: handle device lookup with btrfs_dev_lookup_args
  btrfs: add a btrfs_get_dev_args_from_path helper
  btrfs: use btrfs_get_dev_args_from_path in dev removal ioctls
  btrfs: remove device item and update super block in the same transaction
  drbd: add error handling support for add_disk()
  drbd: Fix double free problem in drbd_create_device
  drbd: fix an invalid memory access caused by incorrect use of list iterator
  drm/amd/display: Set min dcfclk if pipe count is 0
  drm/amd/display: Fix by adding FPU protection for dcn30_internal_validate_bw
  NFSD: De-duplicate net_generic(nf->nf_net, nfsd_net_id)
  NFSD: COMMIT operations must not return NFS?ERR_INVAL
  riscv/mm: Add XIP_FIXUP for riscv_pfn_base
  iio: accel: mma8452: use the correct logic to get mma8452_data
  batman-adv: Use netif_rx().
  mtd: spi-nor: Skip erase logic when SPI_NOR_NO_ERASE is set
  Compiler Attributes: add __alloc_size() for better bounds checking
  mm: vmalloc: introduce array allocation functions
  KVM: use __vcalloc for very large allocations
  btrfs: don't access possibly stale fs_info data in device_list_add
  KVM: s390x: fix SCK locking
  scsi: qla2xxx: Fix loss of NVMe namespaces after driver reload test
  powerpc/32: Don't use lmw/stmw for saving/restoring non volatile regs
  powerpc: flexible GPR range save/restore macros
  powerpc/tm: Fix more userspace r13 corruption
  serial: sc16is7xx: Clear RS485 bits in the shutdown
  bus: mhi: core: Use correctly sized arguments for bit field
  bus: mhi: Fix pm_state conversion to string
  stddef: Introduce DECLARE_FLEX_ARRAY() helper
  uapi/linux/stddef.h: Add include guards
  ASoC: rt5682: move clk related code to rt5682_i2c_probe
  ASoC: rt5682: fix an incorrect NULL check on list iterator
  drm/amd/vcn: fix an error msg on vcn 3.0
  KVM: Don't create VM debugfs files outside of the VM directory
  tty: n_gsm: Modify CR,PF bit when config requester
  tty: n_gsm: Save dlci address open status when config requester
  tty: n_gsm: fix frame reception handling
  ALSA: usb-audio: add mapping for MSI MPG X570S Carbon Max Wifi.
  ALSA: usb-audio: add mapping for MSI MAG X570S Torpedo MAX.
  tty: n_gsm: fix missing update of modem controls after DLCI open
  btrfs: zoned: encapsulate inode locking for zoned relocation
  btrfs: zoned: use dedicated lock for data relocation
  KVM: Initialize debugfs_dentry when a VM is created to avoid NULL deref
  mm/hwpoison: mf_mutex for soft offline and unpoison
  mm/hwpoison: avoid the impact of hwpoison_filter() return value on mce handler
  mm/memory-failure.c: fix race with changing page compound again
  mm/hwpoison: fix race between hugetlb free/demotion and 
memory_failure_hugetlb()
  tty: n_gsm: fix invalid use of MSC in advanced option
  tty: n_gsm: fix sometimes uninitialized warning in gsm_dlci_modem_output()
  serial: 8250_mtk: Make sure to select the right FEATURE_SEL
  tty: n_gsm: fix invalid gsmtty_write_room() result
  drm/i915: Fix a race between vma / object destruction and unbinding
  drm/mediatek: Use mailbox rx_callback instead of cmdq_task_cb
  drm/mediatek: Remove the pointer of struct cmdq_client
  drm/mediatek: Detect CMDQ execution timeout
  drm/mediatek: Add cmdq_handle in mtk_crtc
  drm/mediatek: Add vblank register/unregister callback functions
  Bluetooth: protect le accept and resolv lists with hdev->lock
  Bluetooth: btmtksdio: fix use-after-free at btmtksdio_recv_event
  io_uring: avoid io-wq -EAGAIN looping for !IOPOLL
  irqchip/gic-v3: Ensure pseudo-NMIs have an ISB between ack and handling
  irqchip/gic-v3: Refactor ISB + EOIR at ack time
  rxrpc: Fix locking issue
  dt-bindings: soc: qcom: smd-rpm: Add compatible for MSM8953 SoC
  dt-bindings: soc: qcom: smd-rpm: Fix missing MSM8936 compatible
  module: change to print useful messages from elf_validity_check()
  module: fix [e_shstrndx].sh_size=0 OOB access
  iommu/vt-d: Fix PCI bus rescan device hot add
  fbdev: fbmem: Fix logo center image dx issue
  PM: runtime: Redefine pm_runtime_release_supplier()
  memregion: Fix memregion_free() fallback definition
  video: of_display_timing.h: include errno.h
  powerpc/powernv: delay rng platform device creation until later in boot
  net: dsa: qca8k: reset cpu port on MTU change
  can: kvaser_usb: replace run-time checks with struct kvaser_usb_driver_info
  can: kvaser_usb: kvaser_usb_leaf: fix CAN clock frequency regression
  can: kvaser_usb: kvaser_usb_leaf: fix bittiming limits
  xfs: remove incorrect ASSERT in xfs_rename
  Revert "serial: sc16is7xx: Clear RS485 bits in the shutdown"
  btrfs: fix error pointer dereference in btrfs_ioctl_rm_dev_v2()
  virtio-blk: modify the value type of num in virtio_queue_rq()
  btrfs: fix use of uninitialized variable at rm device ioctl
  tty: n_gsm: fix encoding of command/response bit
  ARM: meson: Fix refcount leak in meson_smp_prepare_cpus
  pinctrl: sunxi: a83t: Fix NAND function name for some pins
  ASoC: rt711: Add endianness flag in snd_soc_component_driver
  ASoC: rt711-sdca: Add endianness flag in snd_soc_component_driver
  ASoC: codecs: rt700/rt711/rt711-sdca: resume bus/codec in .set_jack_detect
  arm64: dts: qcom: msm8994: Fix CPU6/7 reg values
  arm64: dts: qcom: sdm845: use dispcc AHB clock for mdss node
  ARM: mxs_defconfig: Enable the framebuffer
  arm64: dts: imx8mp-evk: correct mmc pad settings
  arm64: dts: imx8mp-evk: correct the uart2 pinctl value
  arm64: dts: imx8mp-evk: correct gpio-led pad settings
  arm64: dts: imx8mp-evk: correct vbus pad settings
  arm64: dts: imx8mp-evk: correct eqos pad settings
  arm64: dts: imx8mp-evk: correct I2C1 pad settings
  arm64: dts: imx8mp-evk: correct I2C3 pad settings
  arm64: dts: imx8mp-phyboard-pollux-rdk: correct uart pad settings
  arm64: dts: imx8mp-phyboard-pollux-rdk: correct eqos pad settings
  arm64: dts: imx8mp-phyboard-pollux-rdk: correct i2c2 & mmc settings
  pinctrl: sunxi: sunxi_pconf_set: use correct offset
  arm64: dts: qcom: msm8992-*: Fix vdd_lvs1_2-supply typo
  ARM: at91: pm: use proper compatible for sama5d2's rtc
  ARM: at91: pm: use proper compatibles for sam9x60's rtc and rtt
  ARM: at91: pm: use proper compatibles for sama7g5's rtc and rtt
  ARM: dts: at91: sam9x60ek: fix eeprom compatible and size
  ARM: dts: at91: sama5d2_icp: fix eeprom compatibles
  ARM: at91: fix soc detection for SAM9X60 SiPs
  xsk: Clear page contiguity bit when unmapping pool
  i2c: piix4: Fix a memory leak in the EFCH MMIO support
  i40e: Fix dropped jumbo frames statistics
  i40e: Fix VF's MAC Address change on VM
  ARM: dts: stm32: use usbphyc ck_usbo_48m as USBH OHCI clock on stm32mp151
  ARM: dts: stm32: add missing usbh clock and fix clk order on stm32mp15
  ibmvnic: Properly dispose of all skbs during a failover.
  selftests: forwarding: fix flood_unicast_test when h2 supports IFF_UNICAST_FLT
  selftests: forwarding: fix learning_test when h1 supports IFF_UNICAST_FLT
  selftests: forwarding: fix error message in learning_test
  r8169: fix accessing unset transport header
  i2c: cadence: Unregister the clk notifier in error path
  dmaengine: imx-sdma: Allow imx8m for imx7 FW revs
  misc: rtsx_usb: fix use of dma mapped buffer for usb bulk transfer
  misc: rtsx_usb: use separate command and response buffers
  misc: rtsx_usb: set return value in rsp_buf alloc err path
  Revert "mm/memory-failure.c: fix race with changing page compound again"
  Revert "serial: 8250_mtk: Make sure to select the right FEATURE_SEL"
  dt-bindings: dma: allwinner,sun50i-a64-dma: Fix min/max typo
  ida: don't use BUG_ON() for debugging
  dmaengine: pl330: Fix lockdep warning about non-static key
  dmaengine: lgm: Fix an error handling path in intel_ldma_probe()
  dmaengine: at_xdma: handle errors of at_xdmac_alloc_desc() correctly
  dmaengine: ti: Fix refcount leak in ti_dra7_xbar_route_allocate
  dmaengine: qcom: bam_dma: fix runtime PM underflow
  dmaengine: ti: Add missing put_device in ti_dra7_xbar_route_allocate
  dmaengine: idxd: force wq context cleanup on device disable path
  selftests/net: fix section name when using xdp_dummy.o
  Linux 5.15.54
  UBUNTU: Upstream stable to v5.15.54

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1987451/+subscriptions


-- 
Mailing list: https://launchpad.net/~kernel-packages
Post to     : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to