This bug was fixed in the package linux - 5.19.0-38.39
---------------
linux (5.19.0-38.39) kinetic; urgency=medium
* kinetic/linux: 5.19.0-38.39 -proposed tracker (LP: #2012088)
* NFS deathlock with last Kernel 5.4.0-144.161 and 5.15.0-67.74 (LP: #2009325)
- NFS: Correct timing for assigning access cache timestamp
linux (5.19.0-37.38) kinetic; urgency=medium
* kinetic/linux: 5.19.0-37.38 -proposed tracker (LP: #2008305)
* XPS 9320 screen flicker on UHD panel 3840x2400 (LP: #2007516)
- SAUCE: drm/i915/display/psr: Disable PSR2 sel fetch on panel SHP 5457
* Fix speaker mute hotkey doesn't work on Dell G16 series (LP: #2003161)
- platform/x86: dell-wmi: Add a keymap for KEY_MUTE in type 0x0010 table
* net:cmsg_ipv6.sh from ubuntu_kernel_selftests failed with K-5.19
(LP: #2000709)
- selftest: net: Improve IPV6_TCLASS/IPV6_HOPLIMIT tests apparmor
compatibility
* rtcpie in timers from ubuntu_kernel_selftests randomly failing
(LP: #1814234)
- SAUCE: selftest: rtcpie: Force passing unreliable subtest
* CVE-2023-0469
- io_uring/filetable: fix file reference underflow
* Improve arp_ndisc_evict_nocarrier.sh test result processing (LP: #2006546)
- selftests: net: return non-zero for failures reported in
arp_ndisc_evict_nocarrier
* Make cm32181 sensor work after system suspend (LP: #1981773)
- iio: light: cm32181: Add PM support
* Fix Thunderbolt device hotplug fail when connect via thunderbolt dock
(LP: #1991366)
- PCI: Fix used_buses calculation in pci_scan_child_bus_extend()
- PCI: Pass available buses even if the bridge is already configured
- PCI: Move pci_assign_unassigned_root_bus_resources()
- PCI: Fix whitespace and indentation
- PCI: Fix typo in pci_scan_child_bus_extend()
* arp_ndisc_evict_nocarrier.sh in net from ubuntu_kernel_selftests failed on
J-oem-5.17 / K (LP: #1968310)
- selftests: net: fix cleanup_v6() for arp_ndisc_evict_nocarrier
* Screen freeze after resuming from suspend (nvme0: I/O timeout)
(LP: #1996048)
- PCI: vmd: Disable MSI remapping after suspend
* RaptorLake: Fix the Screen is shaking by onboard HDMI port in mirror mode
(LP: #1993561)
- drm/i915/display: Drop check for doublescan mode in modevalid
- drm/i915/display: Prune Interlace modes for Display >=12
* udpgro_frglist.sh in net from ubuntu_kernel_selftests failed with K-5.19
(Missing nat6to4 helper) (LP: #2000708)
- selftests/net: mv bpf/nat6to4.c to net folder
* selftests/.../nat6to4 breaks the selftests build (LP: #1996536)
- selftests: net: Add cross-compilation support for BPF programs
- selftests: net: Fix O=dir builds
* CVE-2023-0266 // CVE-2023-0266 was assigned for this issue.
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF
* CVE-2022-4382
- USB: gadgetfs: Fix race between mounting and unmounting
* CVE-2022-2196
- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS
* ubuntu_kernel_selftests: net:udpgso_bench.sh failed (LP: #1951447)
- selftests: net: udpgso_bench: Fix racing bug between the rx/tx programs
* Kinetic update: upstream stable patchset 2023-02-02 (LP: #2004602)
- clk: generalize devm_clk_get() a bit
- clk: Provide new devm_clk helpers for prepared and enabled clocks
- mmc: mtk-sd: Fix missing clk_disable_unprepare in msdc_of_clock_parse()
- arm64: dts: rockchip: keep I2S1 disabled for GPIO function on ROCK Pi 4
series
- arm: dts: rockchip: fix node name for hym8563 rtc
- arm: dts: rockchip: remove clock-frequency from rtc
- ARM: dts: rockchip: fix ir-receiver node names
- arm64: dts: rockchip: fix ir-receiver node names
- ARM: dts: rockchip: rk3188: fix lcdc1-rgb24 node name
- fs: use acquire ordering in __fget_light()
- ARM: 9251/1: perf: Fix stacktraces for tracepoint events in THUMB2 kernels
- ARM: 9266/1: mm: fix no-MMU ZERO_PAGE() implementation
- ASoC: wm8962: Wait for updated value of WM8962_CLOCKING1 register
- spi: mediatek: Fix DEVAPC Violation at KO Remove
- ARM: dts: rockchip: disable arm_global_timer on rk3066 and rk3188
- ASoC: rt711-sdca: fix the latency time of clock stop prepare state machine
transitions
- 9p/fd: Use P9_HDRSZ for header size
- regulator: slg51000: Wait after asserting CS pin
- ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event
- btrfs: send: avoid unaligned encoded writes when attempting to clone range
- ASoC: soc-pcm: Add NULL check in BE reparenting
- regulator: twl6030: fix get status of twl6032 regulators
- fbcon: Use kzalloc() in fbcon_prepare_logo()
- usb: dwc3: gadget: Disable GUSB2PHYCFG.SUSPHY for End Transfer
- 9p/xen: check logical size for buffer size
- net: usb: qmi_wwan: add u-blox 0x1342 composition
- mm/khugepaged: take the right locks for page table retraction
- mm/khugepaged: fix GUP-fast interaction by sending IPI
- mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths
- cifs: fix use-after-free caused by invalid pointer `hostname`
- xen/netback: do some code cleanup
- xen/netback: don't call kfree_skb() with interrupts disabled
- media: videobuf2-core: take mmap_lock in vb2_get_unmapped_area()
- soundwire: intel: Initialize clock stop timeout
- media: v4l2-dv-timings.c: fix too strict blanking sanity checks
- memcg: fix possible use-after-free in memcg_write_event_control()
- mm/gup: fix gup_pud_range() for dax
- Bluetooth: btusb: Add debug message for CSR controllers
- Bluetooth: Fix crash when replugging CSR fake controllers
- net: mana: Fix race on per-CQ variable napi work_done
- KVM: s390: vsie: Fix the initialization of the epoch extension (epdx)
field
- drm/vmwgfx: Don't use screen objects when SEV is active
- drm/amdgpu/sdma_v4_0: turn off SDMA ring buffer in the s2idle suspend
- drm/shmem-helper: Remove errant put in error path
- drm/shmem-helper: Avoid vm_open error paths
- net: dsa: sja1105: avoid out of bounds access in
sja1105_init_l2_policing()
- HID: usbhid: Add ALWAYS_POLL quirk for some mice
- HID: hid-lg4ff: Add check for empty lbuf
- HID: core: fix shift-out-of-bounds in hid_report_raw_event
- HID: ite: Enable QUIRK_TOUCHPAD_ON_OFF_REPORT on Acer Aspire Switch V 10
- can: af_can: fix NULL pointer dereference in can_rcv_filter
- clk: Fix pointer casting to prevent oops in devm_clk_release()
- gpiolib: fix memory leak in gpiochip_setup_dev()
- netfilter: nft_set_pipapo: Actually validate intervals in fields after the
first one
- drm/vmwgfx: Fix race issue calling pin_user_pages
- ieee802154: cc2520: Fix error return code in cc2520_hw_init()
- ca8210: Fix crash by zero initializing data
- netfilter: ctnetlink: fix compilation warning after data race fixes in ct
mark
- drm/bridge: ti-sn65dsi86: Fix output polarity setting bug
- gpio: amd8111: Fix PCI device reference count leak
- e1000e: Fix TX dispatch condition
- igb: Allocate MSI-X vector when testing
- net: broadcom: Add PTP_1588_CLOCK_OPTIONAL dependency for BCMGENET under
ARCH_BCM2835
- drm: bridge: dw_hdmi: fix preference of RGB modes over YUV420
- af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- vmxnet3: correctly report encapsulated LRO packet
- vmxnet3: use correct intrConf reference when using extended queues
- Bluetooth: 6LoWPAN: add missing hci_dev_put() in get_l2cap_conn()
- Bluetooth: Fix not cleanup led when bt_init fails
- net: dsa: ksz: Check return value
- net: dsa: hellcreek: Check return value
- net: dsa: sja1105: Check return value
- selftests: rtnetlink: correct xfrm policy rule in kci_test_ipsec_offload
- mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add()
- net: encx24j600: Add parentheses to fix precedence
- net: encx24j600: Fix invalid logic in reading of MISTAT register
- net: mdiobus: fwnode_mdiobus_register_phy() rework error handling
- net: mdiobus: fix double put fwnode in the error path
- octeontx2-pf: Fix potential memory leak in otx2_init_tc()
- xen-netfront: Fix NULL sring after live migration
- net: mvneta: Prevent out of bounds read in mvneta_config_rss()
- i40e: Fix not setting default xps_cpus after reset
- i40e: Fix for VF MAC address 0
- i40e: Disallow ip4 and ip6 l4_4_bytes
- NFC: nci: Bounds check struct nfc_target arrays
- nvme initialize core quirks before calling nvme_init_subsystem
- gpio/rockchip: fix refcount leak in rockchip_gpiolib_register()
- net: stmmac: fix "snps,axi-config" node property parsing
- ip_gre: do not report erspan version on GRE interface
- net: microchip: sparx5: Fix missing destroy_workqueue of mact_queue
- net: thunderx: Fix missing destroy_workqueue of nicvf_rx_mode_wq
- net: hisilicon: Fix potential use-after-free in hisi_femac_rx()
- net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- net: hisilicon: Fix potential use-after-free in hix5hd2_rx()
- tipc: Fix potential OOB in tipc_link_proto_rcv()
- ipv4: Fix incorrect route flushing when source address is deleted
- ipv4: Fix incorrect route flushing when table ID 0 is used
- net: dsa: sja1105: fix memory leak in sja1105_setup_devlink_regions()
- tipc: call tipc_lxc_xmit without holding node_read_lock
- ethernet: aeroflex: fix potential skb leak in greth_init_rings()
- dpaa2-switch: Fix memory leak in dpaa2_switch_acl_entry_add() and
dpaa2_switch_acl_entry_remove()
- net: phy: mxl-gpy: fix version reporting
- net: plip: don't call kfree_skb/dev_kfree_skb() under spin_lock_irq()
- ipv6: avoid use-after-free in ip6_fragment()
- net: thunderbolt: fix memory leak in tbnet_open()
- net: mvneta: Fix an out of bounds check
- macsec: add missing attribute validation for offload
- s390/qeth: fix use-after-free in hsci
- can: esd_usb: Allow REC and TEC to return to zero
- io_uring: Fix a null-ptr-deref in io_tctx_exit_cb()
- madvise: use zap_page_range_single for madvise dontneed
- drm/i915: Remove non-existent pipes from bigjoiner pipe mask
- arm64: dts: rockchip: Fix gmac failure of rgmii-id from rk3566-roc-pc
- arm64: dts: rockchip: Fix i2c3 pinctrl on rk3566-roc-pc
- arm64: dts: rockchip: remove i2c5 from rk3566-roc-pc
- arm64: dts: rockchip: fix node name for hym8563 rtc
- ARM: dts: rockchip: fix adc-keys sub node names
- arm64: dts: rockchip: fix adc-keys sub node names
- LoongArch: Makefile: Use "grep -E" instead of "egrep"
- LoongArch: Combine acpi_boot_table_init() and acpi_boot_init()
- LoongArch: Set _PAGE_DIRTY only if _PAGE_MODIFIED is set in
{pmd,pte}_mkwrite()
- net/mlx5: Lag, avoid lockdep warnings
- hugetlb: don't delete vma_lock in hugetlb MADV_DONTNEED processing
- crypto: ccp - Add a quirk to firmware update
- soundwire: dmi-quirks: add remapping for HP Omen 16-k0005TX
- platform/x86: asus-wmi: Adjust tablet/lidflip handling to use enum
- platform/x86: asus-wmi: Add support for ROG X13 tablet mode
- fscache: Fix oops due to race with cookie_lru and use_cookie
- tmpfs: fix data loss from failed fallocate
- selftests/tls: Fix tls selftests dependency to correct algorithm
- drm/amd/display: fix array index out of bound error in DCN32 DML
- HID: uclogic: Add HID_QUIRK_HIDINPUT_FORCE quirk
- ARM: 9278/1: kfence: only handle translation faults
- netfilter: conntrack: fix using __this_cpu_add in preemptible
- net: ethernet: ti: am65-cpsw: Fix RGMII configuration at SPEED_10
- inet: ping: use hlist_nulls rcu iterator during lookup
- Bluetooth: Remove codec id field in vendor codec definition
- Bluetooth: Fix support for Read Local Supported Codecs V2
- nfp: correct desc type when header dma len is 4096
- net: microchip: sparx5: correctly free skb in xmit
- net: wwan: iosm: fix memory leak in ipc_mux_init()
- ravb: Fix potential use-after-free in ravb_rx_gbeth()
- bonding: get correct NA dest address
- net: dsa: mv88e6xxx: accept phy-mode = "internal" for internal PHY ports
- drm/amdgpu/vcn: update vcn4 fw shared data structure
- x86/vdso: Conditionally export __vdso_sgx_enter_enclave()
- ASoC: fsl_micfil: explicitly clear software reset bit
- ASoC: fsl_micfil: explicitly clear CHnF flags
- ASoC: ops: Check bounds for second channel in snd_soc_put_volsw_sx()
- libbpf: Use page size as max_entries when probing ring buffer map
- pinctrl: meditatek: Startup with the IRQs disabled
- can: sja1000: fix size of OCR_MODE_MASK define
- can: mcba_usb: Fix termination command argument
- net: fec: don't reset irq coalesce settings to defaults on "ip link up"
- ASoC: cs42l51: Correct PGA Volume minimum value
- perf: Fix perf_pending_task() UaF
- nvme-pci: clear the prp2 field when not used
- ASoC: ops: Correct bounds check for second channel on SX controls
- net: fec: properly guard irq coalesce setup
- libbpf: Fix uninitialized warning in btf_dump_dump_type_data
- udf: Discard preallocation before extending file with a hole
- udf: Fix preallocation discarding at indirect extent boundary
- udf: Do not bother looking for prealloc extents if i_lenExtents matches
i_size
- udf: Fix extending file within last block
- usb: gadget: uvc: Prevent buffer overflow in setup handler
- USB: serial: option: add Quectel EM05-G modem
- USB: serial: cp210x: add Kamstrup RF sniffer PIDs
- USB: serial: f81232: fix division by zero on line-speed change
- USB: serial: f81534: fix division by zero on line-speed change
- xhci: Apply XHCI_RESET_TO_DEFAULT quirk to ADL-N
- igb: Initialize mailbox message for VF reset
- usb: dwc3: pci: Update PCIe device ID for USB3 controller on CPU
sub-system
for Raptor Lake
- selftests: net: Use "grep -E" instead of "egrep"
- net: loopback: use NET_NAME_PREDICTABLE for name_assign_type
- PCI: mt7621: Add sentinel to quirks table
- kallsyms: Make module_kallsyms_on_each_symbol generally available
- ftrace: Add support to resolve module symbols in ftrace_lookup_symbols
- bpf: Rename __bpf_kprobe_multi_cookie_cmp to bpf_kprobe_multi_addrs_cmp
- bpf: Take module reference on kprobe_multi link
- selftests/bpf: Add load_kallsyms_refresh function
- selftests/bpf: Add bpf_testmod_fentry_* functions
- selftests/bpf: Add kprobe_multi check to module attach test
- selftests/bpf: Add kprobe_multi kmod attach api tests
- usb: typec: ucsi: Resume in separate work
- KEYS: encrypted: fix key instantiation with user-provided data
* Kinetic update: upstream stable patchset 2023-02-02 (LP: #2004602) //
net:fcnal-test.sh 'nettest' command not found on F/K (LP: #2006391)
- selftests/net: Find nettest in current directory
* CVE-2023-23559
- wifi: rndis_wlan: Prevent buffer overflow in rndis_query_oid
* CVE-2023-0045
- x86/bugs: Flush IBP in ib_prctl_set()
-- Luke Nowakowski-Krijger <luke.nowakowskikrij...@canonical.com> Fri,
17 Mar 2023 10:12:45 -0700
** Changed in: linux (Ubuntu Kinetic)
Status: Fix Committed => Fix Released
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2022-2196
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2022-4382
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2023-0266
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2023-0469
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2023-23559
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux-oem-5.17 in Ubuntu.
https://bugs.launchpad.net/bugs/2006546
Title:
Improve arp_ndisc_evict_nocarrier.sh test result processing
Status in linux package in Ubuntu:
Fix Released
Status in linux-oem-5.17 package in Ubuntu:
Invalid
Status in linux source package in Jammy:
Invalid
Status in linux-oem-5.17 source package in Jammy:
Fix Released
Status in linux source package in Kinetic:
Fix Released
Status in linux-oem-5.17 source package in Kinetic:
Invalid
Status in linux source package in Lunar:
Fix Released
Status in linux-oem-5.17 source package in Lunar:
Invalid
Bug description:
[Impact]
The arp_ndisc_evict_nocarrier.sh in selftests/net didn't pass a proper return
value for failed test cases. Thus we might get false negatives if the last
command runs successfully.
[Fix]
* 1856628baa selftests: net: return non-zero for failures reported in
arp_ndisc_evict_nocarrier
This patch can be cherry-picked into affected kernels. Lunar has been
patched already. J-hwe-5.17 will be deprecated thus it will be
skipped.
[Test]
Run the patched test, this should not cause any regression as sub tests are
good with our kernels (except there is a cleanup issue in bug 1968310)
One can deliberately fail a test by hijacking the if statement for the return
value check to make sure this patch is working as expected.
[Where problems could occur]
This patch improves the result interpretation, we might see new failures
being reported.
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2006546/+subscriptions
--
Mailing list: https://launchpad.net/~kernel-packages
Post to : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help : https://help.launchpad.net/ListHelp
