Public bug reported:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
v5.15.163 upstream stable release
from git://git.kernel.org/
Compiler Attributes: Add __uninitialized macro
locking/mutex: Introduce devm_mutex_init()
drm/lima: fix shared irq handling on driver remove
media: dvb: as102-fe: Fix as10x_register_addr packing
media: dvb-usb: dib0700_devices: Add missing release_firmware()
IB/core: Implement a limit on UMAD receive List
scsi: qedf: Make qedf_execute_tmf() non-preemptible
crypto: aead,cipher - zeroize key buffer after use
drm/amdgpu: Initialize timestamp for some legacy SOCs
drm/amd/display: Check index msg_id before read or write
drm/amd/display: Check pipe offset before setting vblank
drm/amd/display: Skip finding free audio for unknown engine_id
media: dw2102: Don't translate i2c read into write
sctp: prefer struct_size over open coded arithmetic
firmware: dmi: Stop decoding on broken entry
Input: ff-core - prefer struct_size over open coded arithmetic
wifi: mt76: replace skb_put with skb_put_zero
net: dsa: mv88e6xxx: Correct check for empty list
media: dvb-frontends: tda18271c2dd: Remove casting during div
media: s2255: Use refcount_t instead of atomic_t for num_channels
media: dvb-frontends: tda10048: Fix integer overflow
i2c: i801: Annotate apanel_addr as __ro_after_init
powerpc/64: Set _IO_BASE to POISON_POINTER_DELTA not 0 for CONFIG_PCI=n
orangefs: fix out-of-bounds fsid access
kunit: Fix timeout message
powerpc/xmon: Check cpu id in commands "c#", "dp#" and "dx#"
igc: fix a log entry using uninitialized netdev
bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
jffs2: Fix potential illegal address access in jffs2_free_inode
s390/pkey: Wipe sensitive data on failure
tools/power turbostat: Remember global max_die_id
UPSTREAM: tcp: fix DSACK undo in fast recovery to call tcp_try_to_open()
tcp_metrics: validate source addr length
KVM: s390: fix LPSWEY handling
e1000e: Fix S0ix residency on corporate systems
net: allow skb_datagram_iter to be called from any context
wifi: wilc1000: fix ies_len type in connect path
riscv: kexec: Avoid deadlock in kexec crash path
netfilter: nf_tables: unconditionally flush pending work before notifier
bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
selftests: fix OOM in msg_zerocopy selftest
selftests: make order checking verbose in msg_zerocopy selftest
inet_diag: Initialize pad field in struct inet_diag_req_v2
gpiolib: of: factor out code overriding gpio line polarity
gpiolib: of: add a quirk for reset line polarity for Himax LCDs
gpiolib: of: add polarity quirk for TSC2005
Revert "igc: fix a log entry using uninitialized netdev"
nilfs2: fix inode number range checks
nilfs2: add missing check for inode numbers on directory entries
mm: optimize the redundant loop of mm_update_owner_next()
mm: avoid overflows in dirty throttling logic
btrfs: fix adding block group to a reclaim list and the unused list during
reclaim
Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
can: kvaser_usb: Explicitly initialize family in leafimx driver_info struct
fsnotify: Do not generate events for O_PATH file descriptors
Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
drm/amdgpu/atomfirmware: silence UBSAN warning
mtd: rawnand: Ensure ECC configuration is propagated to upper layers
mtd: rawnand: Bypass a couple of sanity checks during NAND identification
mtd: rawnand: rockchip: ensure NVDDR timings are rejected
bnx2x: Fix multiple UBSAN array-index-out-of-bounds
ima: Avoid blocking in RCU read-side critical section
media: dw2102: fix a potential buffer overflow
clk: qcom: gcc-sm6350: Fix gpll6* & gpll7 parents
i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
fs/ntfs3: Mark volume as dirty if xattr is broken
ALSA: hda/realtek: Enable headset mic of JP-IK LEAP W502 with ALC897
nvme-multipath: find NUMA path only for online numa-node
dma-mapping: benchmark: avoid needless copy_to_user if benchmark fails
nvme: adjust multiples of NVME_CTRL_PAGE_SIZE in offset
regmap-i2c: Subtract reg size from max_write
platform/x86: touchscreen_dmi: Add info for GlobalSpace SolT IVW 11.6" tablet
platform/x86: touchscreen_dmi: Add info for the EZpad 6s Pro
nvmet: fix a possible leak when destroy a ctrl during qp establishment
kbuild: fix short log for AS in link-vmlinux.sh
nfc/nci: Add the inconsistency check between the input data length and count
null_blk: Do not allow runt zone with zone capacity smaller then zone size
nilfs2: fix incorrect inode allocation from reserved inodes
mm: prevent derefencing NULL ptr in pfn_section_valid()
filelock: fix potential use-after-free in posix_lock_inode
fs/dcache: Re-use value stored to dentry->d_flags instead of re-reading
vfs: don't mod negative dentry count when on shrinker list
tcp: fix incorrect undo caused by DSACK of TLP retransmit
skmsg: Skip zero length skb in sk_msg_recvmsg
octeontx2-af: Fix incorrect value output on error path in
rvu_check_rsrc_availability()
net: fix rc7's __skb_datagram_iter()
i40e: Fix XDP program unloading while removing the driver
net: lantiq_etop: add blank line after declaration
net: ethernet: lantiq_etop: fix double free in detach
net: ethernet: mtk-star-emac: set mac_managed_pm when probing
ppp: reject claimed-as-LCP but actually malformed packets
ethtool: netlink: do not return SQI value if link is down
udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
s390: Mark psw in __load_psw_mask() as __unitialized
ARM: davinci: Convert comma to semicolon
octeontx2-af: replace cpt slot with lf id on reg write
octeontx2-af: update cpt lf alloc mailbox
octeontx2-af: fix a issue with cpt_lf_alloc mailbox
octeontx2-af: fix detection of IP layer
octeontx2-af: extend RSS supported offload types
octeontx2-af: fix issue with IPv6 ext match for RSS
octeontx2-af: fix issue with IPv4 match for RSS
tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
tcp: avoid too many retransmit packets
net: ks8851: Fix potential TX stall after interface reopen
USB: serial: option: add Telit generic core-dump composition
USB: serial: option: add Telit FN912 rmnet compositions
USB: serial: option: add Fibocom FM350-GL
USB: serial: option: add support for Foxconn T99W651
USB: serial: option: add Netprisma LCUK54 series modules
USB: serial: option: add Rolling RW350-GL variants
USB: serial: mos7840: fix crash on resume
USB: Add USB_QUIRK_NO_SET_INTF quirk for START BP-850k
usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
USB: core: Fix duplicate endpoint bug by clearing reserved bits in the
descriptor
hpet: Support 32-bit userspace
nvmem: rmem: Fix return value of rmem_read()
nvmem: meson-efuse: Fix return value of nvmem callbacks
nvmem: core: only change name to fram for current attribute
ALSA: hda/realtek: add quirk for Clevo V5[46]0TU
ALSA: hda/realtek: Enable Mute LED on HP 250 G7
ALSA: hda/realtek: Limit mic boost on VAIO PRO PX
Fix userfaultfd_api to return EINVAL as expected
libceph: fix race between delayed_work() and ceph_monc_stop()
wireguard: allowedips: avoid unaligned 64-bit memory accesses
wireguard: queueing: annotate intentional data race in cpu round robin
wireguard: send: annotate intentional data race in checking empty queue
ipv6: annotate data-races around cnf.disable_ipv6
bpf: Allow reads from uninit stack
nilfs2: fix kernel bug on rename operation of broken directory
i2c: rcar: bring hardware to known state when probing
i2c: mark HostNotify target address as used
i2c: rcar: Add R-Car Gen4 support
i2c: rcar: reset controller is mandatory for Gen3+
i2c: rcar: introduce Gen4 devices
i2c: rcar: ensure Gen3+ reset does not disturb local targets
i2c: testunit: avoid re-issued work after read message
i2c: rcar: clear NO_RXDMA flag after resetting
x86/entry/64: Remove obsolete comment on tracing vs. SYSRET
x86/bhi: Avoid warning in #DB handler due to BHI mitigation
kbuild: Make ld-version.sh more robust against version string changes
i2c: rcar: fix error code in probe()
Linux 5.15.163
UBUNTU: Upstream stable to v5.15.163
** Affects: linux (Ubuntu)
Importance: Undecided
Status: Invalid
** Affects: linux (Ubuntu Jammy)
Importance: Medium
Assignee: Manuel Diewald (diewald)
Status: In Progress
** Tags: kernel-stable-tracking-bug
** Changed in: linux (Ubuntu)
Status: New => Confirmed
** Tags added: kernel-stable-tracking-bug
** Also affects: linux (Ubuntu Jammy)
Importance: Undecided
Status: New
** Changed in: linux (Ubuntu)
Status: Confirmed => Invalid
** Changed in: linux (Ubuntu Jammy)
Importance: Undecided => Medium
** Changed in: linux (Ubuntu Jammy)
Status: New => In Progress
** Changed in: linux (Ubuntu Jammy)
Assignee: (unassigned) => Manuel Diewald (diewald)
** Description changed:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
v5.15.163 upstream stable release
from git://git.kernel.org/
-
+ Compiler Attributes: Add __uninitialized macro
+ locking/mutex: Introduce devm_mutex_init()
+ drm/lima: fix shared irq handling on driver remove
+ media: dvb: as102-fe: Fix as10x_register_addr packing
+ media: dvb-usb: dib0700_devices: Add missing release_firmware()
+ IB/core: Implement a limit on UMAD receive List
+ scsi: qedf: Make qedf_execute_tmf() non-preemptible
+ crypto: aead,cipher - zeroize key buffer after use
+ drm/amdgpu: Initialize timestamp for some legacy SOCs
+ drm/amd/display: Check index msg_id before read or write
+ drm/amd/display: Check pipe offset before setting vblank
+ drm/amd/display: Skip finding free audio for unknown engine_id
+ media: dw2102: Don't translate i2c read into write
+ sctp: prefer struct_size over open coded arithmetic
+ firmware: dmi: Stop decoding on broken entry
+ Input: ff-core - prefer struct_size over open coded arithmetic
+ wifi: mt76: replace skb_put with skb_put_zero
+ net: dsa: mv88e6xxx: Correct check for empty list
+ media: dvb-frontends: tda18271c2dd: Remove casting during div
+ media: s2255: Use refcount_t instead of atomic_t for num_channels
+ media: dvb-frontends: tda10048: Fix integer overflow
+ i2c: i801: Annotate apanel_addr as __ro_after_init
+ powerpc/64: Set _IO_BASE to POISON_POINTER_DELTA not 0 for CONFIG_PCI=n
+ orangefs: fix out-of-bounds fsid access
+ kunit: Fix timeout message
+ powerpc/xmon: Check cpu id in commands "c#", "dp#" and "dx#"
+ igc: fix a log entry using uninitialized netdev
+ bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
+ jffs2: Fix potential illegal address access in jffs2_free_inode
+ s390/pkey: Wipe sensitive data on failure
+ tools/power turbostat: Remember global max_die_id
+ UPSTREAM: tcp: fix DSACK undo in fast recovery to call tcp_try_to_open()
+ tcp_metrics: validate source addr length
+ KVM: s390: fix LPSWEY handling
+ e1000e: Fix S0ix residency on corporate systems
+ net: allow skb_datagram_iter to be called from any context
+ wifi: wilc1000: fix ies_len type in connect path
+ riscv: kexec: Avoid deadlock in kexec crash path
+ netfilter: nf_tables: unconditionally flush pending work before notifier
+ bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
+ selftests: fix OOM in msg_zerocopy selftest
+ selftests: make order checking verbose in msg_zerocopy selftest
+ inet_diag: Initialize pad field in struct inet_diag_req_v2
+ gpiolib: of: factor out code overriding gpio line polarity
+ gpiolib: of: add a quirk for reset line polarity for Himax LCDs
+ gpiolib: of: add polarity quirk for TSC2005
+ Revert "igc: fix a log entry using uninitialized netdev"
+ nilfs2: fix inode number range checks
+ nilfs2: add missing check for inode numbers on directory entries
+ mm: optimize the redundant loop of mm_update_owner_next()
+ mm: avoid overflows in dirty throttling logic
+ btrfs: fix adding block group to a reclaim list and the unused list during
reclaim
+ Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
+ can: kvaser_usb: Explicitly initialize family in leafimx driver_info struct
+ fsnotify: Do not generate events for O_PATH file descriptors
+ Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
+ drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
+ drm/amdgpu/atomfirmware: silence UBSAN warning
+ mtd: rawnand: Ensure ECC configuration is propagated to upper layers
+ mtd: rawnand: Bypass a couple of sanity checks during NAND identification
+ mtd: rawnand: rockchip: ensure NVDDR timings are rejected
+ bnx2x: Fix multiple UBSAN array-index-out-of-bounds
+ ima: Avoid blocking in RCU read-side critical section
+ media: dw2102: fix a potential buffer overflow
+ clk: qcom: gcc-sm6350: Fix gpll6* & gpll7 parents
+ i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
+ fs/ntfs3: Mark volume as dirty if xattr is broken
+ ALSA: hda/realtek: Enable headset mic of JP-IK LEAP W502 with ALC897
+ nvme-multipath: find NUMA path only for online numa-node
+ dma-mapping: benchmark: avoid needless copy_to_user if benchmark fails
+ nvme: adjust multiples of NVME_CTRL_PAGE_SIZE in offset
+ regmap-i2c: Subtract reg size from max_write
+ platform/x86: touchscreen_dmi: Add info for GlobalSpace SolT IVW 11.6" tablet
+ platform/x86: touchscreen_dmi: Add info for the EZpad 6s Pro
+ nvmet: fix a possible leak when destroy a ctrl during qp establishment
+ kbuild: fix short log for AS in link-vmlinux.sh
+ nfc/nci: Add the inconsistency check between the input data length and count
+ null_blk: Do not allow runt zone with zone capacity smaller then zone size
+ nilfs2: fix incorrect inode allocation from reserved inodes
+ mm: prevent derefencing NULL ptr in pfn_section_valid()
+ filelock: fix potential use-after-free in posix_lock_inode
+ fs/dcache: Re-use value stored to dentry->d_flags instead of re-reading
+ vfs: don't mod negative dentry count when on shrinker list
+ tcp: fix incorrect undo caused by DSACK of TLP retransmit
+ skmsg: Skip zero length skb in sk_msg_recvmsg
+ octeontx2-af: Fix incorrect value output on error path in
rvu_check_rsrc_availability()
+ net: fix rc7's __skb_datagram_iter()
+ i40e: Fix XDP program unloading while removing the driver
+ net: lantiq_etop: add blank line after declaration
+ net: ethernet: lantiq_etop: fix double free in detach
+ net: ethernet: mtk-star-emac: set mac_managed_pm when probing
+ ppp: reject claimed-as-LCP but actually malformed packets
+ ethtool: netlink: do not return SQI value if link is down
+ udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
+ s390: Mark psw in __load_psw_mask() as __unitialized
+ ARM: davinci: Convert comma to semicolon
+ octeontx2-af: replace cpt slot with lf id on reg write
+ octeontx2-af: update cpt lf alloc mailbox
+ octeontx2-af: fix a issue with cpt_lf_alloc mailbox
+ octeontx2-af: fix detection of IP layer
+ octeontx2-af: extend RSS supported offload types
+ octeontx2-af: fix issue with IPv6 ext match for RSS
+ octeontx2-af: fix issue with IPv4 match for RSS
+ tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
+ tcp: avoid too many retransmit packets
+ net: ks8851: Fix potential TX stall after interface reopen
+ USB: serial: option: add Telit generic core-dump composition
+ USB: serial: option: add Telit FN912 rmnet compositions
+ USB: serial: option: add Fibocom FM350-GL
+ USB: serial: option: add support for Foxconn T99W651
+ USB: serial: option: add Netprisma LCUK54 series modules
+ USB: serial: option: add Rolling RW350-GL variants
+ USB: serial: mos7840: fix crash on resume
+ USB: Add USB_QUIRK_NO_SET_INTF quirk for START BP-850k
+ usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
+ USB: core: Fix duplicate endpoint bug by clearing reserved bits in the
descriptor
+ hpet: Support 32-bit userspace
+ nvmem: rmem: Fix return value of rmem_read()
+ nvmem: meson-efuse: Fix return value of nvmem callbacks
+ nvmem: core: only change name to fram for current attribute
+ ALSA: hda/realtek: add quirk for Clevo V5[46]0TU
+ ALSA: hda/realtek: Enable Mute LED on HP 250 G7
+ ALSA: hda/realtek: Limit mic boost on VAIO PRO PX
+ Fix userfaultfd_api to return EINVAL as expected
+ libceph: fix race between delayed_work() and ceph_monc_stop()
+ wireguard: allowedips: avoid unaligned 64-bit memory accesses
+ wireguard: queueing: annotate intentional data race in cpu round robin
+ wireguard: send: annotate intentional data race in checking empty queue
+ ipv6: annotate data-races around cnf.disable_ipv6
+ bpf: Allow reads from uninit stack
+ nilfs2: fix kernel bug on rename operation of broken directory
+ i2c: rcar: bring hardware to known state when probing
+ i2c: mark HostNotify target address as used
+ i2c: rcar: Add R-Car Gen4 support
+ i2c: rcar: reset controller is mandatory for Gen3+
+ i2c: rcar: introduce Gen4 devices
+ i2c: rcar: ensure Gen3+ reset does not disturb local targets
+ i2c: testunit: avoid re-issued work after read message
+ i2c: rcar: clear NO_RXDMA flag after resetting
+ x86/entry/64: Remove obsolete comment on tracing vs. SYSRET
+ x86/bhi: Avoid warning in #DB handler due to BHI mitigation
+ kbuild: Make ld-version.sh more robust against version string changes
+ i2c: rcar: fix error code in probe()
Linux 5.15.163
- i2c: rcar: fix error code in probe()
- kbuild: Make ld-version.sh more robust against version string changes
- x86/bhi: Avoid warning in #DB handler due to BHI mitigation
- x86/entry/64: Remove obsolete comment on tracing vs. SYSRET
- i2c: rcar: clear NO_RXDMA flag after resetting
- i2c: testunit: avoid re-issued work after read message
- i2c: rcar: ensure Gen3+ reset does not disturb local targets
- i2c: rcar: introduce Gen4 devices
- i2c: rcar: reset controller is mandatory for Gen3+
- i2c: rcar: Add R-Car Gen4 support
- i2c: mark HostNotify target address as used
- i2c: rcar: bring hardware to known state when probing
- nilfs2: fix kernel bug on rename operation of broken directory
- bpf: Allow reads from uninit stack
- ipv6: prevent NULL dereference in ip6_output()
- ipv6: annotate data-races around cnf.disable_ipv6
- wireguard: send: annotate intentional data race in checking empty queue
- wireguard: queueing: annotate intentional data race in cpu round robin
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- libceph: fix race between delayed_work() and ceph_monc_stop()
- Fix userfaultfd_api to return EINVAL as expected
- ALSA: hda/realtek: Limit mic boost on VAIO PRO PX
- ALSA: hda/realtek: Enable Mute LED on HP 250 G7
- ALSA: hda/realtek: add quirk for Clevo V5[46]0TU
- nvmem: core: only change name to fram for current attribute
- nvmem: meson-efuse: Fix return value of nvmem callbacks
- nvmem: rmem: Fix return value of rmem_read()
- hpet: Support 32-bit userspace
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the
descriptor
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- USB: Add USB_QUIRK_NO_SET_INTF quirk for START BP-850k
- USB: serial: mos7840: fix crash on resume
- USB: serial: option: add Rolling RW350-GL variants
- USB: serial: option: add Netprisma LCUK54 series modules
- USB: serial: option: add support for Foxconn T99W651
- USB: serial: option: add Fibocom FM350-GL
- USB: serial: option: add Telit FN912 rmnet compositions
- USB: serial: option: add Telit generic core-dump composition
- net: ks8851: Fix potential TX stall after interface reopen
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- octeontx2-af: fix issue with IPv4 match for RSS
- octeontx2-af: fix issue with IPv6 ext match for RSS
- octeontx2-af: extend RSS supported offload types
- octeontx2-af: fix detection of IP layer
- octeontx2-af: fix a issue with cpt_lf_alloc mailbox
- octeontx2-af: update cpt lf alloc mailbox
- octeontx2-af: replace cpt slot with lf id on reg write
- ARM: davinci: Convert comma to semicolon
- s390: Mark psw in __load_psw_mask() as __unitialized
- net/sched: Fix UAF when resolving a clash
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- ethtool: netlink: do not return SQI value if link is down
- ppp: reject claimed-as-LCP but actually malformed packets
- net: ethernet: mtk-star-emac: set mac_managed_pm when probing
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- i40e: Fix XDP program unloading while removing the driver
- net: fix rc7's __skb_datagram_iter()
- octeontx2-af: Fix incorrect value output on error path in
rvu_check_rsrc_availability()
- skmsg: Skip zero length skb in sk_msg_recvmsg
- tcp: fix incorrect undo caused by DSACK of TLP retransmit
- vfs: don't mod negative dentry count when on shrinker list
- fs/dcache: Re-use value stored to dentry->d_flags instead of re-reading
- filelock: fix potential use-after-free in posix_lock_inode
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- nilfs2: fix incorrect inode allocation from reserved inodes
- null_blk: Do not allow runt zone with zone capacity smaller then zone size
- nfc/nci: Add the inconsistency check between the input data length and count
- kbuild: fix short log for AS in link-vmlinux.sh
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- platform/x86: touchscreen_dmi: Add info for the EZpad 6s Pro
- platform/x86: touchscreen_dmi: Add info for GlobalSpace SolT IVW 11.6" tablet
- regmap-i2c: Subtract reg size from max_write
- nvme: adjust multiples of NVME_CTRL_PAGE_SIZE in offset
- dma-mapping: benchmark: avoid needless copy_to_user if benchmark fails
- nvme-multipath: find NUMA path only for online numa-node
- ALSA: hda/realtek: Enable headset mic of JP-IK LEAP W502 with ALC897
- fs/ntfs3: Mark volume as dirty if xattr is broken
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- clk: qcom: gcc-sm6350: Fix gpll6* & gpll7 parents
- media: dw2102: fix a potential buffer overflow
- ima: Avoid blocking in RCU read-side critical section
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- mtd: rawnand: rockchip: ensure NVDDR timings are rejected
- mtd: rawnand: Bypass a couple of sanity checks during NAND identification
- mtd: rawnand: Ensure ECC configuration is propagated to upper layers
- drm/amdgpu/atomfirmware: silence UBSAN warning
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- fsnotify: Do not generate events for O_PATH file descriptors
- can: kvaser_usb: Explicitly initialize family in leafimx driver_info struct
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- btrfs: fix adding block group to a reclaim list and the unused list during
reclaim
- mm: avoid overflows in dirty throttling logic
- mm: optimize the redundant loop of mm_update_owner_next()
- nilfs2: add missing check for inode numbers on directory entries
- nilfs2: fix inode number range checks
- Revert "igc: fix a log entry using uninitialized netdev"
- gpiolib: of: add polarity quirk for TSC2005
- gpiolib: of: add a quirk for reset line polarity for Himax LCDs
- gpiolib: of: factor out code overriding gpio line polarity
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- selftests: make order checking verbose in msg_zerocopy selftest
- selftests: fix OOM in msg_zerocopy selftest
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- netfilter: nf_tables: unconditionally flush pending work before notifier
- riscv: kexec: Avoid deadlock in kexec crash path
- wifi: wilc1000: fix ies_len type in connect path
- net: allow skb_datagram_iter to be called from any context
- e1000e: Fix S0ix residency on corporate systems
- KVM: s390: fix LPSWEY handling
- tcp_metrics: validate source addr length
- UPSTREAM: tcp: fix DSACK undo in fast recovery to call tcp_try_to_open()
- tools/power turbostat: Remember global max_die_id
- s390/pkey: Wipe sensitive data on failure
- jffs2: Fix potential illegal address access in jffs2_free_inode
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- igc: fix a log entry using uninitialized netdev
- powerpc/xmon: Check cpu id in commands "c#", "dp#" and "dx#"
- kunit: Fix timeout message
- orangefs: fix out-of-bounds fsid access
- powerpc/64: Set _IO_BASE to POISON_POINTER_DELTA not 0 for CONFIG_PCI=n
- i2c: i801: Annotate apanel_addr as __ro_after_init
- media: dvb-frontends: tda10048: Fix integer overflow
- media: s2255: Use refcount_t instead of atomic_t for num_channels
- media: dvb-frontends: tda18271c2dd: Remove casting during div
- net: dsa: mv88e6xxx: Correct check for empty list
- wifi: mt76: replace skb_put with skb_put_zero
- Input: ff-core - prefer struct_size over open coded arithmetic
- firmware: dmi: Stop decoding on broken entry
- sctp: prefer struct_size over open coded arithmetic
- media: dw2102: Don't translate i2c read into write
- drm/amd/display: Skip finding free audio for unknown engine_id
- drm/amd/display: Check pipe offset before setting vblank
- drm/amd/display: Check index msg_id before read or write
- drm/amdgpu: Initialize timestamp for some legacy SOCs
- crypto: aead,cipher - zeroize key buffer after use
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- IB/core: Implement a limit on UMAD receive List
- media: dvb-usb: dib0700_devices: Add missing release_firmware()
- media: dvb: as102-fe: Fix as10x_register_addr packing
- drm/lima: fix shared irq handling on driver remove
- locking/mutex: Introduce devm_mutex_init()
- Compiler Attributes: Add __uninitialized macro
+ UBUNTU: Upstream stable to v5.15.163
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/2075170
Title:
Jammy update: v5.15.163 upstream stable release
Status in linux package in Ubuntu:
Invalid
Status in linux source package in Jammy:
In Progress
Bug description:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
v5.15.163 upstream stable release
from git://git.kernel.org/
Compiler Attributes: Add __uninitialized macro
locking/mutex: Introduce devm_mutex_init()
drm/lima: fix shared irq handling on driver remove
media: dvb: as102-fe: Fix as10x_register_addr packing
media: dvb-usb: dib0700_devices: Add missing release_firmware()
IB/core: Implement a limit on UMAD receive List
scsi: qedf: Make qedf_execute_tmf() non-preemptible
crypto: aead,cipher - zeroize key buffer after use
drm/amdgpu: Initialize timestamp for some legacy SOCs
drm/amd/display: Check index msg_id before read or write
drm/amd/display: Check pipe offset before setting vblank
drm/amd/display: Skip finding free audio for unknown engine_id
media: dw2102: Don't translate i2c read into write
sctp: prefer struct_size over open coded arithmetic
firmware: dmi: Stop decoding on broken entry
Input: ff-core - prefer struct_size over open coded arithmetic
wifi: mt76: replace skb_put with skb_put_zero
net: dsa: mv88e6xxx: Correct check for empty list
media: dvb-frontends: tda18271c2dd: Remove casting during div
media: s2255: Use refcount_t instead of atomic_t for num_channels
media: dvb-frontends: tda10048: Fix integer overflow
i2c: i801: Annotate apanel_addr as __ro_after_init
powerpc/64: Set _IO_BASE to POISON_POINTER_DELTA not 0 for CONFIG_PCI=n
orangefs: fix out-of-bounds fsid access
kunit: Fix timeout message
powerpc/xmon: Check cpu id in commands "c#", "dp#" and "dx#"
igc: fix a log entry using uninitialized netdev
bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
jffs2: Fix potential illegal address access in jffs2_free_inode
s390/pkey: Wipe sensitive data on failure
tools/power turbostat: Remember global max_die_id
UPSTREAM: tcp: fix DSACK undo in fast recovery to call tcp_try_to_open()
tcp_metrics: validate source addr length
KVM: s390: fix LPSWEY handling
e1000e: Fix S0ix residency on corporate systems
net: allow skb_datagram_iter to be called from any context
wifi: wilc1000: fix ies_len type in connect path
riscv: kexec: Avoid deadlock in kexec crash path
netfilter: nf_tables: unconditionally flush pending work before notifier
bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
selftests: fix OOM in msg_zerocopy selftest
selftests: make order checking verbose in msg_zerocopy selftest
inet_diag: Initialize pad field in struct inet_diag_req_v2
gpiolib: of: factor out code overriding gpio line polarity
gpiolib: of: add a quirk for reset line polarity for Himax LCDs
gpiolib: of: add polarity quirk for TSC2005
Revert "igc: fix a log entry using uninitialized netdev"
nilfs2: fix inode number range checks
nilfs2: add missing check for inode numbers on directory entries
mm: optimize the redundant loop of mm_update_owner_next()
mm: avoid overflows in dirty throttling logic
btrfs: fix adding block group to a reclaim list and the unused list during
reclaim
Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
can: kvaser_usb: Explicitly initialize family in leafimx driver_info struct
fsnotify: Do not generate events for O_PATH file descriptors
Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
drm/amdgpu/atomfirmware: silence UBSAN warning
mtd: rawnand: Ensure ECC configuration is propagated to upper layers
mtd: rawnand: Bypass a couple of sanity checks during NAND identification
mtd: rawnand: rockchip: ensure NVDDR timings are rejected
bnx2x: Fix multiple UBSAN array-index-out-of-bounds
ima: Avoid blocking in RCU read-side critical section
media: dw2102: fix a potential buffer overflow
clk: qcom: gcc-sm6350: Fix gpll6* & gpll7 parents
i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
fs/ntfs3: Mark volume as dirty if xattr is broken
ALSA: hda/realtek: Enable headset mic of JP-IK LEAP W502 with ALC897
nvme-multipath: find NUMA path only for online numa-node
dma-mapping: benchmark: avoid needless copy_to_user if benchmark fails
nvme: adjust multiples of NVME_CTRL_PAGE_SIZE in offset
regmap-i2c: Subtract reg size from max_write
platform/x86: touchscreen_dmi: Add info for GlobalSpace SolT IVW 11.6" tablet
platform/x86: touchscreen_dmi: Add info for the EZpad 6s Pro
nvmet: fix a possible leak when destroy a ctrl during qp establishment
kbuild: fix short log for AS in link-vmlinux.sh
nfc/nci: Add the inconsistency check between the input data length and count
null_blk: Do not allow runt zone with zone capacity smaller then zone size
nilfs2: fix incorrect inode allocation from reserved inodes
mm: prevent derefencing NULL ptr in pfn_section_valid()
filelock: fix potential use-after-free in posix_lock_inode
fs/dcache: Re-use value stored to dentry->d_flags instead of re-reading
vfs: don't mod negative dentry count when on shrinker list
tcp: fix incorrect undo caused by DSACK of TLP retransmit
skmsg: Skip zero length skb in sk_msg_recvmsg
octeontx2-af: Fix incorrect value output on error path in
rvu_check_rsrc_availability()
net: fix rc7's __skb_datagram_iter()
i40e: Fix XDP program unloading while removing the driver
net: lantiq_etop: add blank line after declaration
net: ethernet: lantiq_etop: fix double free in detach
net: ethernet: mtk-star-emac: set mac_managed_pm when probing
ppp: reject claimed-as-LCP but actually malformed packets
ethtool: netlink: do not return SQI value if link is down
udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
s390: Mark psw in __load_psw_mask() as __unitialized
ARM: davinci: Convert comma to semicolon
octeontx2-af: replace cpt slot with lf id on reg write
octeontx2-af: update cpt lf alloc mailbox
octeontx2-af: fix a issue with cpt_lf_alloc mailbox
octeontx2-af: fix detection of IP layer
octeontx2-af: extend RSS supported offload types
octeontx2-af: fix issue with IPv6 ext match for RSS
octeontx2-af: fix issue with IPv4 match for RSS
tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
tcp: avoid too many retransmit packets
net: ks8851: Fix potential TX stall after interface reopen
USB: serial: option: add Telit generic core-dump composition
USB: serial: option: add Telit FN912 rmnet compositions
USB: serial: option: add Fibocom FM350-GL
USB: serial: option: add support for Foxconn T99W651
USB: serial: option: add Netprisma LCUK54 series modules
USB: serial: option: add Rolling RW350-GL variants
USB: serial: mos7840: fix crash on resume
USB: Add USB_QUIRK_NO_SET_INTF quirk for START BP-850k
usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
USB: core: Fix duplicate endpoint bug by clearing reserved bits in the
descriptor
hpet: Support 32-bit userspace
nvmem: rmem: Fix return value of rmem_read()
nvmem: meson-efuse: Fix return value of nvmem callbacks
nvmem: core: only change name to fram for current attribute
ALSA: hda/realtek: add quirk for Clevo V5[46]0TU
ALSA: hda/realtek: Enable Mute LED on HP 250 G7
ALSA: hda/realtek: Limit mic boost on VAIO PRO PX
Fix userfaultfd_api to return EINVAL as expected
libceph: fix race between delayed_work() and ceph_monc_stop()
wireguard: allowedips: avoid unaligned 64-bit memory accesses
wireguard: queueing: annotate intentional data race in cpu round robin
wireguard: send: annotate intentional data race in checking empty queue
ipv6: annotate data-races around cnf.disable_ipv6
bpf: Allow reads from uninit stack
nilfs2: fix kernel bug on rename operation of broken directory
i2c: rcar: bring hardware to known state when probing
i2c: mark HostNotify target address as used
i2c: rcar: Add R-Car Gen4 support
i2c: rcar: reset controller is mandatory for Gen3+
i2c: rcar: introduce Gen4 devices
i2c: rcar: ensure Gen3+ reset does not disturb local targets
i2c: testunit: avoid re-issued work after read message
i2c: rcar: clear NO_RXDMA flag after resetting
x86/entry/64: Remove obsolete comment on tracing vs. SYSRET
x86/bhi: Avoid warning in #DB handler due to BHI mitigation
kbuild: Make ld-version.sh more robust against version string changes
i2c: rcar: fix error code in probe()
Linux 5.15.163
UBUNTU: Upstream stable to v5.15.163
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2075170/+subscriptions
--
Mailing list: https://launchpad.net/~kernel-packages
Post to : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help : https://help.launchpad.net/ListHelp
