Public bug reported:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
upstream stable patchset 2023-10-11
Ported from the following upstream stable releases:
v6.1.47, v6.4.12
from git://git.kernel.org/
selftests: forwarding: tc_actions: cleanup temporary files when test is aborted
net/smc: replace mutex rmbs_lock and sndbufs_lock with rw_semaphore
net: phy: at803x: Use devm_regulator_get_enable_optional()
net: phy: at803x: fix the wol setting functions
drm/amdgpu: fix calltrace warning in amddrm_buddy_fini
drm/amdgpu: Fix integer overflow in amdgpu_cs_pass1
drm/amdgpu: fix memory leak in mes self test
ASoC: Intel: sof_sdw: add quirk for MTL RVP
ASoC: Intel: sof_sdw: add quirk for LNL RVP
PCI: tegra194: Fix possible array out of bounds access
ASoC: SOF: amd: Add pci revision id check
drm/stm: ltdc: fix late dereference check
drm: rcar-du: remove R-Car H3 ES1.* workarounds
ASoC: amd: vangogh: Add check for acp config flags in vangogh platform
ARM: dts: imx6dl: prtrvt, prtvt7, prti6q, prtwd2: fix USB related warnings
ASoC: Intel: sof_sdw_rt_sdca_jack_common: test SOF_JACK_JDSRC in _exit
ASoC: Intel: sof_sdw: Add support for Rex soundwire
iopoll: Call cpu_relax() in busy loops
ASoC: SOF: Intel: fix SoundWire/HDaudio mutual exclusion
dma-remap: use kvmalloc_array/kvfree for larger dma memory remap
accel/habanalabs: add pci health check during heartbeat
HID: logitech-hidpp: Add USB and Bluetooth IDs for the Logitech G915 TKL
Keyboard
iommu/amd: Introduce Disable IRTE Caching Support
drm/amdgpu: install stub fence into potential unused fence pointers
drm/amd/display: Apply 60us prefetch for DCFCLK <= 300Mhz
RDMA/mlx5: Return the firmware result upon destroying QP/RQ
drm/amd/display: Skip DPP DTO update if root clock is gated
drm/amd/display: Enable dcn314 DPP RCO
ASoC: SOF: core: Free the firmware trace before calling snd_sof_shutdown()
HID: intel-ish-hid: ipc: Add Arrow Lake PCI device ID
ALSA: hda/realtek: Add quirks for ROG ALLY CS35l41 audio
smb: client: fix warning in cifs_smb3_do_mount()
cifs: fix session state check in reconnect to avoid use-after-free issue
serial: stm32: Ignore return value of uart_remove_one_port() in .remove()
led: qcom-lpg: Fix resource leaks in for_each_available_child_of_node() loops
media: v4l2-mem2mem: add lock to protect parameter num_rdy
media: camss: set VFE bpl_alignment to 16 for sdm845 and sm8250
usb: gadget: u_serial: Avoid spinlock recursion in __gs_console_push
usb: gadget: uvc: queue empty isoc requests if no video buffer is available
media: platform: mediatek: vpu: fix NULL ptr dereference
thunderbolt: Read retimer NVM authentication status prior
tb_retimer_set_inbound_sbtx()
usb: chipidea: imx: don't request QoS for imx8ulp
usb: chipidea: imx: add missing USB PHY DPDM wakeup setting
gfs2: Fix possible data races in gfs2_show_options()
pcmcia: rsrc_nonstatic: Fix memory leak in nonstatic_release_resource_db()
thunderbolt: Add Intel Barlow Ridge PCI ID
thunderbolt: Limit Intel Barlow Ridge USB3 bandwidth
firewire: net: fix use after free in fwnet_finish_incoming_packet()
watchdog: sp5100_tco: support Hygon FCH/SCH (Server Controller Hub)
Bluetooth: L2CAP: Fix use-after-free
Bluetooth: btusb: Add MT7922 bluetooth ID for the Asus Ally
ceph: try to dump the msgs when decoding fails
drm/amdgpu: Fix potential fence use-after-free v2
fs/ntfs3: Enhance sanity check while generating attr_list
fs: ntfs3: Fix possible null-pointer dereferences in mi_read()
fs/ntfs3: Mark ntfs dirty when on-disk struct is corrupted
ALSA: hda/realtek: Add quirks for Unis H3C Desktop B760 & Q760
ALSA: hda: fix a possible null-pointer dereference due to data race in
snd_hdac_regmap_sync()
ALSA: hda/realtek: Add quirk for ASUS ROG GX650P
ALSA: hda/realtek: Add quirk for ASUS ROG GA402X
ALSA: hda/realtek: Add quirk for ASUS ROG GZ301V
powerpc/kasan: Disable KCOV in KASAN code
Bluetooth: MGMT: Use correct address for memcpy()
ring-buffer: Do not swap cpu_buffer during resize process
igc: read before write to SRRCTL register
drm/amd/display: save restore hdcp state when display is unplugged from mst hub
drm/amd/display: phase3 mst hdcp for multiple displays
drm/amd/display: fix access hdcp_workqueue assert
fbdev/hyperv-fb: Do not set struct fb_info.apertures
btrfs: move out now unused BG from the reclaim list
btrfs: fix use-after-free of new block group that became unused
virtio-mmio: don't break lifecycle of vm_dev
vduse: Use proper spinlock for IRQ injection
vdpa/mlx5: Fix mr->initialized semantics
vdpa/mlx5: Delete control vq iotlb in destroy_mr only when necessary
cifs: fix potential oops in cifs_oplock_break
i2c: bcm-iproc: Fix bcm_iproc_i2c_isr deadlock issue
i2c: hisi: Only handle the interrupt of the driver's transfer
i2c: tegra: Fix i2c-tegra DMA config option processing
fbdev: mmp: fix value check in mmphw_probe()
powerpc/rtas_flash: allow user copy to flash block cache objects
vdpa: Add features attr to vdpa_nl_policy for nlattr length check
vdpa: Add queue index attr to vdpa_nl_policy for nlattr length check
vdpa: Add max vqp attr to vdpa_nl_policy for nlattr length check
vdpa: Enable strict validation for netlinks ops
tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
tty: serial: fsl_lpuart: Clear the error flags by writing 1 for lpuart32
platforms
btrfs: fix incorrect splitting in btrfs_drop_extent_map_range
btrfs: fix BUG_ON condition in btrfs_cancel_balance
i2c: designware: Correct length byte validation logic
i2c: designware: Handle invalid SMBus block data response length value
net: xfrm: Fix xfrm_address_filter OOB read
net: af_key: fix sadb_x_filter validation
net: xfrm: Amend XFRMA_SEC_CTX nla_policy structure
xfrm: fix slab-use-after-free in decode_session6
ip6_vti: fix slab-use-after-free in decode_session6
ip_vti: fix potential slab-use-after-free in decode_session6
xfrm: add forgotten nla_policy for XFRMA_MTIMER_THRESH
virtio_net: notify MAC address change on device initialization
virtio-net: set queues after driver_ok
net: pcs: Add missing put_device call in miic_create
net: phy: fix IRQ-based wake-on-lan over hibernate / power off
selftests: mirror_gre_changes: Tighten up the TTL test match
drm/panel: simple: Fix AUO G121EAN01 panel timings according to the docs
net: macb: In ZynqMP resume always configure PS GTR for non-wakeup source
octeon_ep: cancel tx_timeout_task later in remove sequence
netfilter: nf_tables: fix false-positive lockdep splat
ipvs: fix racy memcpy in proc_do_sync_threshold
net: phy: broadcom: stub c45 read/write for 54810
team: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
net: openvswitch: reject negative ifindex
iavf: fix FDIR rule fields masks validation
i40e: fix misleading debug logs
net: dsa: mv88e6xxx: Wait for EEPROM done before HW reset
sfc: don't unregister flow_indr if it was never registered
sock: Fix misuse of sk_under_memory_pressure()
net: do not allow gso_size to be set to GSO_BY_FRAGS
qede: fix firmware halt over suspend and resume
ice: Block switchdev mode when ADQ is active and vice versa
bus: ti-sysc: Flush posted write on enable before reset
arm64: dts: qcom: qrb5165-rb5: fix thermal zone conflict
arm64: dts: rockchip: Disable HS400 for eMMC on ROCK Pi 4
arm64: dts: rockchip: Disable HS400 for eMMC on ROCK 4C+
ARM: dts: imx: align LED node names with dtschema
ARM: dts: imx6: phytec: fix RTC interrupt level
arm64: dts: imx8mm: Drop CSI1 PHY reference clock configuration
ARM: dts: imx: Set default tuning step for imx6sx usdhc
arm64: dts: imx93: Fix anatop node size
ASoC: rt5665: add missed regulator_bulk_disable
ASoC: meson: axg-tdm-formatter: fix channel slot allocation
ALSA: hda/realtek: Add quirks for HP G11 Laptops
soc: aspeed: uart-routing: Use __sysfs_match_string
soc: aspeed: socinfo: Add kfree for kstrdup
ALSA: hda/realtek - Remodified 3k pull low procedure
riscv: uaccess: Return the number of bytes effectively not copied
serial: 8250: Fix oops for port->pm on uart_change_pm()
ALSA: usb-audio: Add support for Mythware XA001AU capture and playback
interfaces.
cifs: Release folio lock on fscache read hit.
virtio-net: Zero max_tx_vq field for VIRTIO_NET_CTRL_MQ_HASH_CONFIG case
arm64: dts: rockchip: Fix Wifi/Bluetooth on ROCK Pi 4 boards
blk-crypto: dynamically allocate fallback profile
mmc: wbsd: fix double mmc_free_host() in wbsd_init()
mmc: block: Fix in_flight[issue_type] value error
drm/qxl: fix UAF on handle creation
drm/i915/sdvo: fix panel_type initialization
drm/amdgpu/pm: fix throttle_status for other than MP1 11.0.7
ASoC: amd: vangogh: select CONFIG_SND_AMD_ACP_CONFIG
drm/amd/display: disable RCO for DCN314
zsmalloc: allow only one active pool compaction context
sched/fair: unlink misfit task from cpu overutilized
sched/fair: Remove capacity inversion detection
drm/amd/display: Implement workaround for writing to OTG_PIXEL_RATE_DIV register
netfilter: set default timeout to 3 secs for sctp shutdown send and recv state
arm64/ptrace: Ensure that SME is set up for target when writing SSVE state
drm/amdgpu: keep irq count in amdgpu_irq_disable_all
drm/nouveau/disp: fix use-after-free in error handling of
nouveau_connector_create
net: fix the RTO timer retransmitting skb every 1ms if linear option is enabled
mmc: f-sdh30: fix order of function calls in sdhci_f_sdh30_remove
rust: macros: vtable: fix `HAS_*` redefinition (`gen_const_name`)
media: mtk-jpeg: Set platform driver data earlier
xfrm: delete offloaded policy
xfrm: don't skip free of empty state in acquire policy
ARM: dts: imx: Set default tuning step for imx7d usdhc
smb: client: fix null auth
mmc: sunplus: fix return value check of mmc_add_host()
UBUNTU: Upstream stable to v6.1.47, v6.4.12
** Affects: linux (Ubuntu)
Importance: Undecided
Status: Invalid
** Affects: linux (Ubuntu Lunar)
Importance: Medium
Assignee: Kamal Mostafa (kamalmostafa)
Status: In Progress
** Tags: kernel-stable-tracking-bug
** Changed in: linux (Ubuntu)
Status: New => Confirmed
** Tags added: kernel-stable-tracking-bug
** Also affects: linux (Ubuntu Lunar)
Importance: Undecided
Status: New
** Changed in: linux (Ubuntu)
Status: Confirmed => Invalid
** Changed in: linux (Ubuntu Lunar)
Status: New => Invalid
** Changed in: linux (Ubuntu Lunar)
Status: Invalid => In Progress
** Changed in: linux (Ubuntu Lunar)
Importance: Undecided => Medium
** Changed in: linux (Ubuntu Lunar)
Assignee: (unassigned) => Kamal Mostafa (kamalmostafa)
** Description changed:
+ SRU Justification
- SRU Justification
+ Impact:
+ The upstream process for stable tree updates is quite similar
+ in scope to the Ubuntu SRU process, e.g., each patch has to
+ demonstrably fix a bug, and each patch is vetted by upstream
+ by originating either directly from a mainline/stable Linux tree or
+ a minimally backported form of that patch. The following upstream
+ stable patches should be included in the Ubuntu kernel:
- Impact:
- The upstream process for stable tree updates is quite similar
- in scope to the Ubuntu SRU process, e.g., each patch has to
- demonstrably fix a bug, and each patch is vetted by upstream
- by originating either directly from a mainline/stable Linux tree or
- a minimally backported form of that patch. The following upstream
- stable patches should be included in the Ubuntu kernel:
+ upstream stable patchset 2023-10-11
- upstream stable patchset 2023-10-11
- from git://git.kernel.org/
+ Ported from the following upstream stable releases:
+ v6.1.47, v6.4.12
+
+ from git://git.kernel.org/
+
+ selftests: forwarding: tc_actions: cleanup temporary files when test is
aborted
+ net/smc: replace mutex rmbs_lock and sndbufs_lock with rw_semaphore
+ net: phy: at803x: Use devm_regulator_get_enable_optional()
+ net: phy: at803x: fix the wol setting functions
+ drm/amdgpu: fix calltrace warning in amddrm_buddy_fini
+ drm/amdgpu: Fix integer overflow in amdgpu_cs_pass1
+ drm/amdgpu: fix memory leak in mes self test
+ ASoC: Intel: sof_sdw: add quirk for MTL RVP
+ ASoC: Intel: sof_sdw: add quirk for LNL RVP
+ PCI: tegra194: Fix possible array out of bounds access
+ ASoC: SOF: amd: Add pci revision id check
+ drm/stm: ltdc: fix late dereference check
+ drm: rcar-du: remove R-Car H3 ES1.* workarounds
+ ASoC: amd: vangogh: Add check for acp config flags in vangogh platform
+ ARM: dts: imx6dl: prtrvt, prtvt7, prti6q, prtwd2: fix USB related warnings
+ ASoC: Intel: sof_sdw_rt_sdca_jack_common: test SOF_JACK_JDSRC in _exit
+ ASoC: Intel: sof_sdw: Add support for Rex soundwire
+ iopoll: Call cpu_relax() in busy loops
+ ASoC: SOF: Intel: fix SoundWire/HDaudio mutual exclusion
+ dma-remap: use kvmalloc_array/kvfree for larger dma memory remap
+ accel/habanalabs: add pci health check during heartbeat
+ HID: logitech-hidpp: Add USB and Bluetooth IDs for the Logitech G915 TKL
Keyboard
+ iommu/amd: Introduce Disable IRTE Caching Support
+ drm/amdgpu: install stub fence into potential unused fence pointers
+ drm/amd/display: Apply 60us prefetch for DCFCLK <= 300Mhz
+ RDMA/mlx5: Return the firmware result upon destroying QP/RQ
+ drm/amd/display: Skip DPP DTO update if root clock is gated
+ drm/amd/display: Enable dcn314 DPP RCO
+ ASoC: SOF: core: Free the firmware trace before calling snd_sof_shutdown()
+ HID: intel-ish-hid: ipc: Add Arrow Lake PCI device ID
+ ALSA: hda/realtek: Add quirks for ROG ALLY CS35l41 audio
+ smb: client: fix warning in cifs_smb3_do_mount()
+ cifs: fix session state check in reconnect to avoid use-after-free issue
+ serial: stm32: Ignore return value of uart_remove_one_port() in .remove()
+ led: qcom-lpg: Fix resource leaks in for_each_available_child_of_node() loops
+ media: v4l2-mem2mem: add lock to protect parameter num_rdy
+ media: camss: set VFE bpl_alignment to 16 for sdm845 and sm8250
+ usb: gadget: u_serial: Avoid spinlock recursion in __gs_console_push
+ usb: gadget: uvc: queue empty isoc requests if no video buffer is available
+ media: platform: mediatek: vpu: fix NULL ptr dereference
+ thunderbolt: Read retimer NVM authentication status prior
tb_retimer_set_inbound_sbtx()
+ usb: chipidea: imx: don't request QoS for imx8ulp
+ usb: chipidea: imx: add missing USB PHY DPDM wakeup setting
+ gfs2: Fix possible data races in gfs2_show_options()
+ pcmcia: rsrc_nonstatic: Fix memory leak in nonstatic_release_resource_db()
+ thunderbolt: Add Intel Barlow Ridge PCI ID
+ thunderbolt: Limit Intel Barlow Ridge USB3 bandwidth
+ firewire: net: fix use after free in fwnet_finish_incoming_packet()
+ watchdog: sp5100_tco: support Hygon FCH/SCH (Server Controller Hub)
+ Bluetooth: L2CAP: Fix use-after-free
+ Bluetooth: btusb: Add MT7922 bluetooth ID for the Asus Ally
+ ceph: try to dump the msgs when decoding fails
+ drm/amdgpu: Fix potential fence use-after-free v2
+ fs/ntfs3: Enhance sanity check while generating attr_list
+ fs: ntfs3: Fix possible null-pointer dereferences in mi_read()
+ fs/ntfs3: Mark ntfs dirty when on-disk struct is corrupted
+ ALSA: hda/realtek: Add quirks for Unis H3C Desktop B760 & Q760
+ ALSA: hda: fix a possible null-pointer dereference due to data race in
snd_hdac_regmap_sync()
+ ALSA: hda/realtek: Add quirk for ASUS ROG GX650P
+ ALSA: hda/realtek: Add quirk for ASUS ROG GA402X
+ ALSA: hda/realtek: Add quirk for ASUS ROG GZ301V
+ powerpc/kasan: Disable KCOV in KASAN code
+ Bluetooth: MGMT: Use correct address for memcpy()
+ ring-buffer: Do not swap cpu_buffer during resize process
+ igc: read before write to SRRCTL register
+ drm/amd/display: save restore hdcp state when display is unplugged from mst
hub
+ drm/amd/display: phase3 mst hdcp for multiple displays
+ drm/amd/display: fix access hdcp_workqueue assert
+ fbdev/hyperv-fb: Do not set struct fb_info.apertures
+ btrfs: move out now unused BG from the reclaim list
+ btrfs: fix use-after-free of new block group that became unused
+ virtio-mmio: don't break lifecycle of vm_dev
+ vduse: Use proper spinlock for IRQ injection
+ vdpa/mlx5: Fix mr->initialized semantics
+ vdpa/mlx5: Delete control vq iotlb in destroy_mr only when necessary
+ cifs: fix potential oops in cifs_oplock_break
+ i2c: bcm-iproc: Fix bcm_iproc_i2c_isr deadlock issue
+ i2c: hisi: Only handle the interrupt of the driver's transfer
+ i2c: tegra: Fix i2c-tegra DMA config option processing
+ fbdev: mmp: fix value check in mmphw_probe()
+ powerpc/rtas_flash: allow user copy to flash block cache objects
+ vdpa: Add features attr to vdpa_nl_policy for nlattr length check
+ vdpa: Add queue index attr to vdpa_nl_policy for nlattr length check
+ vdpa: Add max vqp attr to vdpa_nl_policy for nlattr length check
+ vdpa: Enable strict validation for netlinks ops
+ tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
+ tty: serial: fsl_lpuart: Clear the error flags by writing 1 for lpuart32
platforms
+ btrfs: fix incorrect splitting in btrfs_drop_extent_map_range
+ btrfs: fix BUG_ON condition in btrfs_cancel_balance
+ i2c: designware: Correct length byte validation logic
+ i2c: designware: Handle invalid SMBus block data response length value
+ net: xfrm: Fix xfrm_address_filter OOB read
+ net: af_key: fix sadb_x_filter validation
+ net: xfrm: Amend XFRMA_SEC_CTX nla_policy structure
+ xfrm: fix slab-use-after-free in decode_session6
+ ip6_vti: fix slab-use-after-free in decode_session6
+ ip_vti: fix potential slab-use-after-free in decode_session6
+ xfrm: add forgotten nla_policy for XFRMA_MTIMER_THRESH
+ virtio_net: notify MAC address change on device initialization
+ virtio-net: set queues after driver_ok
+ net: pcs: Add missing put_device call in miic_create
+ net: phy: fix IRQ-based wake-on-lan over hibernate / power off
+ selftests: mirror_gre_changes: Tighten up the TTL test match
+ drm/panel: simple: Fix AUO G121EAN01 panel timings according to the docs
+ net: macb: In ZynqMP resume always configure PS GTR for non-wakeup source
+ octeon_ep: cancel tx_timeout_task later in remove sequence
+ netfilter: nf_tables: fix false-positive lockdep splat
+ ipvs: fix racy memcpy in proc_do_sync_threshold
+ net: phy: broadcom: stub c45 read/write for 54810
+ team: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
+ net: openvswitch: reject negative ifindex
+ iavf: fix FDIR rule fields masks validation
+ i40e: fix misleading debug logs
+ net: dsa: mv88e6xxx: Wait for EEPROM done before HW reset
+ sfc: don't unregister flow_indr if it was never registered
+ sock: Fix misuse of sk_under_memory_pressure()
+ net: do not allow gso_size to be set to GSO_BY_FRAGS
+ qede: fix firmware halt over suspend and resume
+ ice: Block switchdev mode when ADQ is active and vice versa
+ bus: ti-sysc: Flush posted write on enable before reset
+ arm64: dts: qcom: qrb5165-rb5: fix thermal zone conflict
+ arm64: dts: rockchip: Disable HS400 for eMMC on ROCK Pi 4
+ arm64: dts: rockchip: Disable HS400 for eMMC on ROCK 4C+
+ ARM: dts: imx: align LED node names with dtschema
+ ARM: dts: imx6: phytec: fix RTC interrupt level
+ arm64: dts: imx8mm: Drop CSI1 PHY reference clock configuration
+ ARM: dts: imx: Set default tuning step for imx6sx usdhc
+ arm64: dts: imx93: Fix anatop node size
+ ASoC: rt5665: add missed regulator_bulk_disable
+ ASoC: meson: axg-tdm-formatter: fix channel slot allocation
+ ALSA: hda/realtek: Add quirks for HP G11 Laptops
+ soc: aspeed: uart-routing: Use __sysfs_match_string
+ soc: aspeed: socinfo: Add kfree for kstrdup
+ ALSA: hda/realtek - Remodified 3k pull low procedure
+ riscv: uaccess: Return the number of bytes effectively not copied
+ serial: 8250: Fix oops for port->pm on uart_change_pm()
+ ALSA: usb-audio: Add support for Mythware XA001AU capture and playback
interfaces.
+ cifs: Release folio lock on fscache read hit.
+ virtio-net: Zero max_tx_vq field for VIRTIO_NET_CTRL_MQ_HASH_CONFIG case
+ arm64: dts: rockchip: Fix Wifi/Bluetooth on ROCK Pi 4 boards
+ blk-crypto: dynamically allocate fallback profile
+ mmc: wbsd: fix double mmc_free_host() in wbsd_init()
+ mmc: block: Fix in_flight[issue_type] value error
+ drm/qxl: fix UAF on handle creation
+ drm/i915/sdvo: fix panel_type initialization
+ drm/amdgpu/pm: fix throttle_status for other than MP1 11.0.7
+ ASoC: amd: vangogh: select CONFIG_SND_AMD_ACP_CONFIG
+ drm/amd/display: disable RCO for DCN314
+ zsmalloc: allow only one active pool compaction context
+ sched/fair: unlink misfit task from cpu overutilized
+ sched/fair: Remove capacity inversion detection
+ drm/amd/display: Implement workaround for writing to OTG_PIXEL_RATE_DIV
register
+ netfilter: set default timeout to 3 secs for sctp shutdown send and recv state
+ arm64/ptrace: Ensure that SME is set up for target when writing SSVE state
+ drm/amdgpu: keep irq count in amdgpu_irq_disable_all
+ drm/nouveau/disp: fix use-after-free in error handling of
nouveau_connector_create
+ net: fix the RTO timer retransmitting skb every 1ms if linear option is
enabled
+ mmc: f-sdh30: fix order of function calls in sdhci_f_sdh30_remove
+ rust: macros: vtable: fix `HAS_*` redefinition (`gen_const_name`)
+ media: mtk-jpeg: Set platform driver data earlier
+ xfrm: delete offloaded policy
+ xfrm: don't skip free of empty state in acquire policy
+ ARM: dts: imx: Set default tuning step for imx7d usdhc
+ smb: client: fix null auth
+ mmc: sunplus: fix return value check of mmc_add_host()
+ UBUNTU: Upstream stable to v6.1.47, v6.4.12
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/2039110
Title:
Lunar update: upstream stable patchset 2023-10-11
Status in linux package in Ubuntu:
Invalid
Status in linux source package in Lunar:
In Progress
Bug description:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
upstream stable patchset 2023-10-11
Ported from the following upstream stable releases:
v6.1.47, v6.4.12
from git://git.kernel.org/
selftests: forwarding: tc_actions: cleanup temporary files when test is
aborted
net/smc: replace mutex rmbs_lock and sndbufs_lock with rw_semaphore
net: phy: at803x: Use devm_regulator_get_enable_optional()
net: phy: at803x: fix the wol setting functions
drm/amdgpu: fix calltrace warning in amddrm_buddy_fini
drm/amdgpu: Fix integer overflow in amdgpu_cs_pass1
drm/amdgpu: fix memory leak in mes self test
ASoC: Intel: sof_sdw: add quirk for MTL RVP
ASoC: Intel: sof_sdw: add quirk for LNL RVP
PCI: tegra194: Fix possible array out of bounds access
ASoC: SOF: amd: Add pci revision id check
drm/stm: ltdc: fix late dereference check
drm: rcar-du: remove R-Car H3 ES1.* workarounds
ASoC: amd: vangogh: Add check for acp config flags in vangogh platform
ARM: dts: imx6dl: prtrvt, prtvt7, prti6q, prtwd2: fix USB related warnings
ASoC: Intel: sof_sdw_rt_sdca_jack_common: test SOF_JACK_JDSRC in _exit
ASoC: Intel: sof_sdw: Add support for Rex soundwire
iopoll: Call cpu_relax() in busy loops
ASoC: SOF: Intel: fix SoundWire/HDaudio mutual exclusion
dma-remap: use kvmalloc_array/kvfree for larger dma memory remap
accel/habanalabs: add pci health check during heartbeat
HID: logitech-hidpp: Add USB and Bluetooth IDs for the Logitech G915 TKL
Keyboard
iommu/amd: Introduce Disable IRTE Caching Support
drm/amdgpu: install stub fence into potential unused fence pointers
drm/amd/display: Apply 60us prefetch for DCFCLK <= 300Mhz
RDMA/mlx5: Return the firmware result upon destroying QP/RQ
drm/amd/display: Skip DPP DTO update if root clock is gated
drm/amd/display: Enable dcn314 DPP RCO
ASoC: SOF: core: Free the firmware trace before calling snd_sof_shutdown()
HID: intel-ish-hid: ipc: Add Arrow Lake PCI device ID
ALSA: hda/realtek: Add quirks for ROG ALLY CS35l41 audio
smb: client: fix warning in cifs_smb3_do_mount()
cifs: fix session state check in reconnect to avoid use-after-free issue
serial: stm32: Ignore return value of uart_remove_one_port() in .remove()
led: qcom-lpg: Fix resource leaks in for_each_available_child_of_node() loops
media: v4l2-mem2mem: add lock to protect parameter num_rdy
media: camss: set VFE bpl_alignment to 16 for sdm845 and sm8250
usb: gadget: u_serial: Avoid spinlock recursion in __gs_console_push
usb: gadget: uvc: queue empty isoc requests if no video buffer is available
media: platform: mediatek: vpu: fix NULL ptr dereference
thunderbolt: Read retimer NVM authentication status prior
tb_retimer_set_inbound_sbtx()
usb: chipidea: imx: don't request QoS for imx8ulp
usb: chipidea: imx: add missing USB PHY DPDM wakeup setting
gfs2: Fix possible data races in gfs2_show_options()
pcmcia: rsrc_nonstatic: Fix memory leak in nonstatic_release_resource_db()
thunderbolt: Add Intel Barlow Ridge PCI ID
thunderbolt: Limit Intel Barlow Ridge USB3 bandwidth
firewire: net: fix use after free in fwnet_finish_incoming_packet()
watchdog: sp5100_tco: support Hygon FCH/SCH (Server Controller Hub)
Bluetooth: L2CAP: Fix use-after-free
Bluetooth: btusb: Add MT7922 bluetooth ID for the Asus Ally
ceph: try to dump the msgs when decoding fails
drm/amdgpu: Fix potential fence use-after-free v2
fs/ntfs3: Enhance sanity check while generating attr_list
fs: ntfs3: Fix possible null-pointer dereferences in mi_read()
fs/ntfs3: Mark ntfs dirty when on-disk struct is corrupted
ALSA: hda/realtek: Add quirks for Unis H3C Desktop B760 & Q760
ALSA: hda: fix a possible null-pointer dereference due to data race in
snd_hdac_regmap_sync()
ALSA: hda/realtek: Add quirk for ASUS ROG GX650P
ALSA: hda/realtek: Add quirk for ASUS ROG GA402X
ALSA: hda/realtek: Add quirk for ASUS ROG GZ301V
powerpc/kasan: Disable KCOV in KASAN code
Bluetooth: MGMT: Use correct address for memcpy()
ring-buffer: Do not swap cpu_buffer during resize process
igc: read before write to SRRCTL register
drm/amd/display: save restore hdcp state when display is unplugged from mst
hub
drm/amd/display: phase3 mst hdcp for multiple displays
drm/amd/display: fix access hdcp_workqueue assert
fbdev/hyperv-fb: Do not set struct fb_info.apertures
btrfs: move out now unused BG from the reclaim list
btrfs: fix use-after-free of new block group that became unused
virtio-mmio: don't break lifecycle of vm_dev
vduse: Use proper spinlock for IRQ injection
vdpa/mlx5: Fix mr->initialized semantics
vdpa/mlx5: Delete control vq iotlb in destroy_mr only when necessary
cifs: fix potential oops in cifs_oplock_break
i2c: bcm-iproc: Fix bcm_iproc_i2c_isr deadlock issue
i2c: hisi: Only handle the interrupt of the driver's transfer
i2c: tegra: Fix i2c-tegra DMA config option processing
fbdev: mmp: fix value check in mmphw_probe()
powerpc/rtas_flash: allow user copy to flash block cache objects
vdpa: Add features attr to vdpa_nl_policy for nlattr length check
vdpa: Add queue index attr to vdpa_nl_policy for nlattr length check
vdpa: Add max vqp attr to vdpa_nl_policy for nlattr length check
vdpa: Enable strict validation for netlinks ops
tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
tty: serial: fsl_lpuart: Clear the error flags by writing 1 for lpuart32
platforms
btrfs: fix incorrect splitting in btrfs_drop_extent_map_range
btrfs: fix BUG_ON condition in btrfs_cancel_balance
i2c: designware: Correct length byte validation logic
i2c: designware: Handle invalid SMBus block data response length value
net: xfrm: Fix xfrm_address_filter OOB read
net: af_key: fix sadb_x_filter validation
net: xfrm: Amend XFRMA_SEC_CTX nla_policy structure
xfrm: fix slab-use-after-free in decode_session6
ip6_vti: fix slab-use-after-free in decode_session6
ip_vti: fix potential slab-use-after-free in decode_session6
xfrm: add forgotten nla_policy for XFRMA_MTIMER_THRESH
virtio_net: notify MAC address change on device initialization
virtio-net: set queues after driver_ok
net: pcs: Add missing put_device call in miic_create
net: phy: fix IRQ-based wake-on-lan over hibernate / power off
selftests: mirror_gre_changes: Tighten up the TTL test match
drm/panel: simple: Fix AUO G121EAN01 panel timings according to the docs
net: macb: In ZynqMP resume always configure PS GTR for non-wakeup source
octeon_ep: cancel tx_timeout_task later in remove sequence
netfilter: nf_tables: fix false-positive lockdep splat
ipvs: fix racy memcpy in proc_do_sync_threshold
net: phy: broadcom: stub c45 read/write for 54810
team: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
net: openvswitch: reject negative ifindex
iavf: fix FDIR rule fields masks validation
i40e: fix misleading debug logs
net: dsa: mv88e6xxx: Wait for EEPROM done before HW reset
sfc: don't unregister flow_indr if it was never registered
sock: Fix misuse of sk_under_memory_pressure()
net: do not allow gso_size to be set to GSO_BY_FRAGS
qede: fix firmware halt over suspend and resume
ice: Block switchdev mode when ADQ is active and vice versa
bus: ti-sysc: Flush posted write on enable before reset
arm64: dts: qcom: qrb5165-rb5: fix thermal zone conflict
arm64: dts: rockchip: Disable HS400 for eMMC on ROCK Pi 4
arm64: dts: rockchip: Disable HS400 for eMMC on ROCK 4C+
ARM: dts: imx: align LED node names with dtschema
ARM: dts: imx6: phytec: fix RTC interrupt level
arm64: dts: imx8mm: Drop CSI1 PHY reference clock configuration
ARM: dts: imx: Set default tuning step for imx6sx usdhc
arm64: dts: imx93: Fix anatop node size
ASoC: rt5665: add missed regulator_bulk_disable
ASoC: meson: axg-tdm-formatter: fix channel slot allocation
ALSA: hda/realtek: Add quirks for HP G11 Laptops
soc: aspeed: uart-routing: Use __sysfs_match_string
soc: aspeed: socinfo: Add kfree for kstrdup
ALSA: hda/realtek - Remodified 3k pull low procedure
riscv: uaccess: Return the number of bytes effectively not copied
serial: 8250: Fix oops for port->pm on uart_change_pm()
ALSA: usb-audio: Add support for Mythware XA001AU capture and playback
interfaces.
cifs: Release folio lock on fscache read hit.
virtio-net: Zero max_tx_vq field for VIRTIO_NET_CTRL_MQ_HASH_CONFIG case
arm64: dts: rockchip: Fix Wifi/Bluetooth on ROCK Pi 4 boards
blk-crypto: dynamically allocate fallback profile
mmc: wbsd: fix double mmc_free_host() in wbsd_init()
mmc: block: Fix in_flight[issue_type] value error
drm/qxl: fix UAF on handle creation
drm/i915/sdvo: fix panel_type initialization
drm/amdgpu/pm: fix throttle_status for other than MP1 11.0.7
ASoC: amd: vangogh: select CONFIG_SND_AMD_ACP_CONFIG
drm/amd/display: disable RCO for DCN314
zsmalloc: allow only one active pool compaction context
sched/fair: unlink misfit task from cpu overutilized
sched/fair: Remove capacity inversion detection
drm/amd/display: Implement workaround for writing to OTG_PIXEL_RATE_DIV
register
netfilter: set default timeout to 3 secs for sctp shutdown send and recv state
arm64/ptrace: Ensure that SME is set up for target when writing SSVE state
drm/amdgpu: keep irq count in amdgpu_irq_disable_all
drm/nouveau/disp: fix use-after-free in error handling of
nouveau_connector_create
net: fix the RTO timer retransmitting skb every 1ms if linear option is
enabled
mmc: f-sdh30: fix order of function calls in sdhci_f_sdh30_remove
rust: macros: vtable: fix `HAS_*` redefinition (`gen_const_name`)
media: mtk-jpeg: Set platform driver data earlier
xfrm: delete offloaded policy
xfrm: don't skip free of empty state in acquire policy
ARM: dts: imx: Set default tuning step for imx7d usdhc
smb: client: fix null auth
mmc: sunplus: fix return value check of mmc_add_host()
UBUNTU: Upstream stable to v6.1.47, v6.4.12
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2039110/+subscriptions
--
Mailing list: https://launchpad.net/~kernel-packages
Post to : [email protected]
Unsubscribe : https://launchpad.net/~kernel-packages
More help : https://help.launchpad.net/ListHelp
