Public bug reported:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
v5.4.283 upstream stable release
from git://git.kernel.org/
fuse: Initialize beyond-EOF page contents before setting uptodate
ALSA: usb-audio: Support Yamaha P-125 quirk entry
xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
s390/dasd: fix error recovery leading to data corruption on ESE devices
arm64: ACPI: NUMA: initialize all values of acpi_early_node_map to NUMA_NO_NODE
dm resume: don't return EINVAL when signalled
dm persistent data: fix memory allocation failure
vfs: Don't evict inode under the inode lru traversing context
bitmap: introduce generic optimized bitmap_size()
fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
selinux: fix potential counting error in avc_add_xperms_decision()
drm/amdgpu: Actually check flags for all context ops.
memcg_write_event_control(): fix a user-triggerable oops
overflow.h: Add flex_array_size() helper
overflow: Implement size_t saturating arithmetic helpers
s390/cio: rename bitmap_size() -> idset_bitmap_size()
btrfs: rename bitmap_set_bits() -> btrfs_bitmap_set_bits()
s390/uv: Panic for set and remove shared access UVC errors
net/mlx5e: Correctly report errors for ethtool rx flows
atm: idt77252: prevent use after free in dequeue_rx()
net: axienet: Fix DMA descriptor cleanup path
net: axienet: Improve DMA error handling
net: axienet: Factor out TX descriptor chain cleanup
net: axienet: Check for DMA mapping errors
net: axienet: Drop MDIO interrupt registers from ethtools dump
net: axienet: Wrap DMA pointer writes to prepare for 64 bit
net: axienet: Upgrade descriptors to hold 64-bit addresses
net: axienet: Autodetect 64-bit DMA capability
net: axienet: Fix register defines comment description
net: dsa: vsc73xx: pass value in phy_write operation
net: hns3: fix a deadlock problem when config TC during resetting
ALSA: hda/realtek: Fix noise from speakers on Lenovo IdeaPad 3 15IAU7
ssb: Fix division by zero issue in ssb_calc_clock_rate
wifi: cw1200: Avoid processing an invalid TIM IE
i2c: riic: avoid potential division by zero
media: radio-isa: use dev_name to fill in bus_info
staging: ks7010: disable bh on tx_dev_lock
binfmt_misc: cleanup on filesystem umount
scsi: spi: Fix sshdr use
gfs2: setattr_chown: Add missing initialization
wifi: iwlwifi: abort scan when rfkill on but device enabled
IB/hfi1: Fix potential deadlock on &irq_src_lock and &dd->uctxt_lock
powerpc/xics: Check return value of kasprintf in icp_native_map_one_cpu
nvmet-trace: avoid dereferencing pointer too early
ext4: do not trim the group with corrupted block bitmap
quota: Remove BUG_ON from dqget()
media: pci: cx23885: check cx23885_vdev_init() return
fs: binfmt_elf_efpic: don't use missing interpreter's properties
scsi: lpfc: Initialize status local variable in lpfc_sli4_repost_sgl_list()
net/sun3_82586: Avoid reading past buffer in debug output
drm/lima: set gp bus_stop bit before hard reset
virtiofs: forbid newlines in tags
md: clean up invalid BUG_ON in md_ioctl
x86: Increase brk randomness entropy for 64-bit systems
powerpc/boot: Handle allocation failure in simple_realloc()
powerpc/boot: Only free if realloc() succeeds
btrfs: change BUG_ON to assertion when checking for delayed_node root
btrfs: handle invalid root reference found in may_destroy_subvol()
btrfs: send: handle unexpected data in header buffer in begin_cmd()
btrfs: delete pointless BUG_ON check on quota root in
btrfs_qgroup_account_extent()
f2fs: fix to do sanity check in update_sit_entry
usb: gadget: fsl: Increase size of name buffer for endpoints
nvme: clear caller pointer on identify failure
Bluetooth: bnep: Fix out-of-bound access
nvmet-tcp: do not continue for invalid icreq
NFS: avoid infinite loop in pnfs_update_layout.
openrisc: Call setup_memory() earlier in the init sequence
s390/iucv: fix receive buffer virtual vs physical address confusion
usb: dwc3: core: Skip setting event buffers for host only controllers
irqchip/gic-v3-its: Remove BUG_ON in its_vpe_irq_domain_alloc
ext4: set the type of max_zeroout to unsigned int to avoid overflow
nvmet-rdma: fix possible bad dereference when freeing rsps
hrtimer: Prevent queuing of hrtimer without a function callback
gtp: pull network headers in gtp_dev_xmit()
block: use "unsigned long" for blk_validate_block_size().
media: solo6x10: replace max(a, min(b, c)) by clamp(b, a, c)
dm mpath: pass IO start time to path selector
dm: do not use waitqueue for request-based DM
dm suspend: return -ERESTARTSYS instead of -EINTR
Bluetooth: Make use of __check_timeout on hci_sched_le
Bluetooth: hci_core: Fix not handling link timeouts propertly
Bluetooth: hci_core: Fix LE quote calculation
tc-testing: don't access non-existent variable on exception
kcm: Serialise kcm_sendmsg() for the same socket.
netfilter: nft_counter: Synchronize nft_counter_reset() against reader.
net: dsa: mv88e6xxx: global2: Expose ATU stats register
net: dsa: mv88e6xxx: global1_atu: Add helper for get next
net: dsa: mv88e6xxx: read FID when handling ATU violations
net: dsa: mv88e6xxx: replace ATU violation prints with trace points
net: dsa: mv88e6xxx: Fix out-of-bound access
netem: fix return value if duplicate enqueue fails
ipv6: prevent UAF in ip6_send_skb()
net: xilinx: axienet: Always disable promiscuous mode
net: xilinx: axienet: Fix dangling multicast addresses
drm/msm: use drm_debug_enabled() to check for debug categories
drm/msm/dpu: don't play tricks with debug macros
mmc: mmc_test: Fix NULL dereference on allocation failure
Bluetooth: MGMT: Add error handling to pair_device()
HID: wacom: Defer calculation of resolution until resolution_code is known
HID: microsoft: Add rumble support to latest xbox controllers
cxgb4: add forgotten u64 ivlan cast before shift
mmc: dw_mmc: allow biu and ciu clocks to defer
ALSA: timer: Relax start tick time check for slave timer elements
Input: MT - limit max slots
tools: move alignment-related macros to new <linux/align.h>
pinctrl: single: fix potential NULL dereference in pcs_get_function()
wifi: mwifiex: duplicate static structs used in driver instances
drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
filelock: Correct the filelock owner in fcntl_setlk/fcntl_setlk64
media: uvcvideo: Fix integer overflow calculating timestamp
ata: libata-core: Fix null pointer dereference on error
cgroup/cpuset: Prevent UAF in proc_cpuset_show()
net:rds: Fix possible deadlock in rds_message_put
soundwire: stream: fix programming slave ports for non-continous port maps
r8152: Factor out OOB link list waits
ethtool: check device is present when getting link settings
gtp: fix a potential NULL pointer dereference
net: busy-poll: use ktime_get_ns() instead of local_clock()
nfc: pn533: Add dev_up/dev_down hooks to phy_ops
nfc: pn533: Add autopoll capability
nfc: pn533: Add poll mod list filling check
soc: qcom: cmd-db: Map shared memory as WC, not WB
cdc-acm: Add DISABLE_ECHO quirk for GE HealthCare UI Controller
USB: serial: option: add MeiG Smart SRM825L
usb: dwc3: omap: add missing depopulate in probe error path
usb: dwc3: core: Prevent USB core invalid event buffer address access
usb: dwc3: st: fix probed platform device ref count on probe error path
usb: dwc3: st: add missing depopulate in probe error path
usb: core: sysfs: Unmerge @usb3_hardware_lpm_attr_group in
remove_power_attributes()
net: dsa: mv8e6xxx: Fix stub function parameters
scsi: aacraid: Fix double-free on probe failure
Linux 5.4.283
UBUNTU: Upstream stable to v5.4.283
** Affects: linux (Ubuntu)
Importance: Undecided
Status: Invalid
** Affects: linux (Ubuntu Focal)
Importance: Medium
Assignee: Koichiro Den (koichiroden)
Status: In Progress
** Tags: kernel-stable-tracking-bug
** Changed in: linux (Ubuntu)
Status: New => Confirmed
** Tags added: kernel-stable-tracking-bug
** Also affects: linux (Ubuntu Focal)
Importance: Undecided
Status: New
** Changed in: linux (Ubuntu)
Status: Confirmed => Invalid
** Changed in: linux (Ubuntu Focal)
Importance: Undecided => Medium
** Changed in: linux (Ubuntu Focal)
Status: New => In Progress
** Changed in: linux (Ubuntu Focal)
Assignee: (unassigned) => Koichiro Den (koichiroden)
** Description changed:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
v5.4.283 upstream stable release
from git://git.kernel.org/
-
+ fuse: Initialize beyond-EOF page contents before setting uptodate
+ ALSA: usb-audio: Support Yamaha P-125 quirk entry
+ xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
+ s390/dasd: fix error recovery leading to data corruption on ESE devices
+ arm64: ACPI: NUMA: initialize all values of acpi_early_node_map to
NUMA_NO_NODE
+ dm resume: don't return EINVAL when signalled
+ dm persistent data: fix memory allocation failure
+ vfs: Don't evict inode under the inode lru traversing context
+ bitmap: introduce generic optimized bitmap_size()
+ fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
+ selinux: fix potential counting error in avc_add_xperms_decision()
+ drm/amdgpu: Actually check flags for all context ops.
+ memcg_write_event_control(): fix a user-triggerable oops
+ overflow.h: Add flex_array_size() helper
+ overflow: Implement size_t saturating arithmetic helpers
+ s390/cio: rename bitmap_size() -> idset_bitmap_size()
+ btrfs: rename bitmap_set_bits() -> btrfs_bitmap_set_bits()
+ s390/uv: Panic for set and remove shared access UVC errors
+ net/mlx5e: Correctly report errors for ethtool rx flows
+ atm: idt77252: prevent use after free in dequeue_rx()
+ net: axienet: Fix DMA descriptor cleanup path
+ net: axienet: Improve DMA error handling
+ net: axienet: Factor out TX descriptor chain cleanup
+ net: axienet: Check for DMA mapping errors
+ net: axienet: Drop MDIO interrupt registers from ethtools dump
+ net: axienet: Wrap DMA pointer writes to prepare for 64 bit
+ net: axienet: Upgrade descriptors to hold 64-bit addresses
+ net: axienet: Autodetect 64-bit DMA capability
+ net: axienet: Fix register defines comment description
+ net: dsa: vsc73xx: pass value in phy_write operation
+ net: hns3: fix a deadlock problem when config TC during resetting
+ ALSA: hda/realtek: Fix noise from speakers on Lenovo IdeaPad 3 15IAU7
+ ssb: Fix division by zero issue in ssb_calc_clock_rate
+ wifi: cw1200: Avoid processing an invalid TIM IE
+ i2c: riic: avoid potential division by zero
+ media: radio-isa: use dev_name to fill in bus_info
+ staging: ks7010: disable bh on tx_dev_lock
+ binfmt_misc: cleanup on filesystem umount
+ scsi: spi: Fix sshdr use
+ gfs2: setattr_chown: Add missing initialization
+ wifi: iwlwifi: abort scan when rfkill on but device enabled
+ IB/hfi1: Fix potential deadlock on &irq_src_lock and &dd->uctxt_lock
+ powerpc/xics: Check return value of kasprintf in icp_native_map_one_cpu
+ nvmet-trace: avoid dereferencing pointer too early
+ ext4: do not trim the group with corrupted block bitmap
+ quota: Remove BUG_ON from dqget()
+ media: pci: cx23885: check cx23885_vdev_init() return
+ fs: binfmt_elf_efpic: don't use missing interpreter's properties
+ scsi: lpfc: Initialize status local variable in lpfc_sli4_repost_sgl_list()
+ net/sun3_82586: Avoid reading past buffer in debug output
+ drm/lima: set gp bus_stop bit before hard reset
+ virtiofs: forbid newlines in tags
+ md: clean up invalid BUG_ON in md_ioctl
+ x86: Increase brk randomness entropy for 64-bit systems
+ powerpc/boot: Handle allocation failure in simple_realloc()
+ powerpc/boot: Only free if realloc() succeeds
+ btrfs: change BUG_ON to assertion when checking for delayed_node root
+ btrfs: handle invalid root reference found in may_destroy_subvol()
+ btrfs: send: handle unexpected data in header buffer in begin_cmd()
+ btrfs: delete pointless BUG_ON check on quota root in
btrfs_qgroup_account_extent()
+ f2fs: fix to do sanity check in update_sit_entry
+ usb: gadget: fsl: Increase size of name buffer for endpoints
+ nvme: clear caller pointer on identify failure
+ Bluetooth: bnep: Fix out-of-bound access
+ nvmet-tcp: do not continue for invalid icreq
+ NFS: avoid infinite loop in pnfs_update_layout.
+ openrisc: Call setup_memory() earlier in the init sequence
+ s390/iucv: fix receive buffer virtual vs physical address confusion
+ usb: dwc3: core: Skip setting event buffers for host only controllers
+ irqchip/gic-v3-its: Remove BUG_ON in its_vpe_irq_domain_alloc
+ ext4: set the type of max_zeroout to unsigned int to avoid overflow
+ nvmet-rdma: fix possible bad dereference when freeing rsps
+ hrtimer: Prevent queuing of hrtimer without a function callback
+ gtp: pull network headers in gtp_dev_xmit()
+ block: use "unsigned long" for blk_validate_block_size().
+ media: solo6x10: replace max(a, min(b, c)) by clamp(b, a, c)
+ dm mpath: pass IO start time to path selector
+ dm: do not use waitqueue for request-based DM
+ dm suspend: return -ERESTARTSYS instead of -EINTR
+ Bluetooth: Make use of __check_timeout on hci_sched_le
+ Bluetooth: hci_core: Fix not handling link timeouts propertly
+ Bluetooth: hci_core: Fix LE quote calculation
+ tc-testing: don't access non-existent variable on exception
+ kcm: Serialise kcm_sendmsg() for the same socket.
+ netfilter: nft_counter: Synchronize nft_counter_reset() against reader.
+ net: dsa: mv88e6xxx: global2: Expose ATU stats register
+ net: dsa: mv88e6xxx: global1_atu: Add helper for get next
+ net: dsa: mv88e6xxx: read FID when handling ATU violations
+ net: dsa: mv88e6xxx: replace ATU violation prints with trace points
+ net: dsa: mv88e6xxx: Fix out-of-bound access
+ netem: fix return value if duplicate enqueue fails
+ ipv6: prevent UAF in ip6_send_skb()
+ net: xilinx: axienet: Always disable promiscuous mode
+ net: xilinx: axienet: Fix dangling multicast addresses
+ drm/msm: use drm_debug_enabled() to check for debug categories
+ drm/msm/dpu: don't play tricks with debug macros
+ mmc: mmc_test: Fix NULL dereference on allocation failure
+ Bluetooth: MGMT: Add error handling to pair_device()
+ HID: wacom: Defer calculation of resolution until resolution_code is known
+ HID: microsoft: Add rumble support to latest xbox controllers
+ cxgb4: add forgotten u64 ivlan cast before shift
+ mmc: dw_mmc: allow biu and ciu clocks to defer
+ ALSA: timer: Relax start tick time check for slave timer elements
+ Input: MT - limit max slots
+ tools: move alignment-related macros to new <linux/align.h>
+ pinctrl: single: fix potential NULL dereference in pcs_get_function()
+ wifi: mwifiex: duplicate static structs used in driver instances
+ drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
+ filelock: Correct the filelock owner in fcntl_setlk/fcntl_setlk64
+ media: uvcvideo: Fix integer overflow calculating timestamp
+ ata: libata-core: Fix null pointer dereference on error
+ cgroup/cpuset: Prevent UAF in proc_cpuset_show()
+ net:rds: Fix possible deadlock in rds_message_put
+ soundwire: stream: fix programming slave ports for non-continous port maps
+ r8152: Factor out OOB link list waits
+ ethtool: check device is present when getting link settings
+ gtp: fix a potential NULL pointer dereference
+ net: busy-poll: use ktime_get_ns() instead of local_clock()
+ nfc: pn533: Add dev_up/dev_down hooks to phy_ops
+ nfc: pn533: Add autopoll capability
+ nfc: pn533: Add poll mod list filling check
+ soc: qcom: cmd-db: Map shared memory as WC, not WB
+ cdc-acm: Add DISABLE_ECHO quirk for GE HealthCare UI Controller
+ USB: serial: option: add MeiG Smart SRM825L
+ usb: dwc3: omap: add missing depopulate in probe error path
+ usb: dwc3: core: Prevent USB core invalid event buffer address access
+ usb: dwc3: st: fix probed platform device ref count on probe error path
+ usb: dwc3: st: add missing depopulate in probe error path
+ usb: core: sysfs: Unmerge @usb3_hardware_lpm_attr_group in
remove_power_attributes()
+ net: dsa: mv8e6xxx: Fix stub function parameters
+ scsi: aacraid: Fix double-free on probe failure
Linux 5.4.283
- scsi: aacraid: Fix double-free on probe failure
- net: dsa: mv8e6xxx: Fix stub function parameters
- usb: core: sysfs: Unmerge @usb3_hardware_lpm_attr_group in
remove_power_attributes()
- usb: dwc3: st: add missing depopulate in probe error path
- usb: dwc3: st: fix probed platform device ref count on probe error path
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: omap: add missing depopulate in probe error path
- USB: serial: option: add MeiG Smart SRM825L
- cdc-acm: Add DISABLE_ECHO quirk for GE HealthCare UI Controller
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- nfc: pn533: Add poll mod list filling check
- nfc: pn533: Add autopoll capability
- nfc: pn533: Add dev_up/dev_down hooks to phy_ops
- net: busy-poll: use ktime_get_ns() instead of local_clock()
- gtp: fix a potential NULL pointer dereference
- ethtool: check device is present when getting link settings
- r8152: Factor out OOB link list waits
- soundwire: stream: fix programming slave ports for non-continous port maps
- net:rds: Fix possible deadlock in rds_message_put
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- ata: libata-core: Fix null pointer dereference on error
- media: uvcvideo: Fix integer overflow calculating timestamp
- filelock: Correct the filelock owner in fcntl_setlk/fcntl_setlk64
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- ipc: replace costly bailout check in sysvipc_find_ipc()
- wifi: mwifiex: duplicate static structs used in driver instances
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
- tools: move alignment-related macros to new <linux/align.h>
- Input: MT - limit max slots
- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
- ALSA: timer: Relax start tick time check for slave timer elements
- mmc: dw_mmc: allow biu and ciu clocks to defer
- cxgb4: add forgotten u64 ivlan cast before shift
- HID: microsoft: Add rumble support to latest xbox controllers
- HID: wacom: Defer calculation of resolution until resolution_code is known
- Bluetooth: MGMT: Add error handling to pair_device()
- mmc: mmc_test: Fix NULL dereference on allocation failure
- drm/msm/dpu: don't play tricks with debug macros
- drm/msm: use drm_debug_enabled() to check for debug categories
- net: xilinx: axienet: Fix dangling multicast addresses
- net: xilinx: axienet: Always disable promiscuous mode
- ipv6: prevent UAF in ip6_send_skb()
- netem: fix return value if duplicate enqueue fails
- net: dsa: mv88e6xxx: Fix out-of-bound access
- net: dsa: mv88e6xxx: replace ATU violation prints with trace points
- net: dsa: mv88e6xxx: read FID when handling ATU violations
- net: dsa: mv88e6xxx: global1_atu: Add helper for get next
- net: dsa: mv88e6xxx: global2: Expose ATU stats register
- netfilter: nft_counter: Synchronize nft_counter_reset() against reader.
- kcm: Serialise kcm_sendmsg() for the same socket.
- tc-testing: don't access non-existent variable on exception
- Bluetooth: hci_core: Fix LE quote calculation
- Bluetooth: hci_core: Fix not handling link timeouts propertly
- Bluetooth: Make use of __check_timeout on hci_sched_le
- dm suspend: return -ERESTARTSYS instead of -EINTR
- dm: do not use waitqueue for request-based DM
- dm mpath: pass IO start time to path selector
- media: solo6x10: replace max(a, min(b, c)) by clamp(b, a, c)
- block: use "unsigned long" for blk_validate_block_size().
- gtp: pull network headers in gtp_dev_xmit()
- hrtimer: Prevent queuing of hrtimer without a function callback
- nvmet-rdma: fix possible bad dereference when freeing rsps
- ext4: set the type of max_zeroout to unsigned int to avoid overflow
- irqchip/gic-v3-its: Remove BUG_ON in its_vpe_irq_domain_alloc
- usb: dwc3: core: Skip setting event buffers for host only controllers
- s390/iucv: fix receive buffer virtual vs physical address confusion
- openrisc: Call setup_memory() earlier in the init sequence
- NFS: avoid infinite loop in pnfs_update_layout.
- nvmet-tcp: do not continue for invalid icreq
- Bluetooth: bnep: Fix out-of-bound access
- nvme: clear caller pointer on identify failure
- usb: gadget: fsl: Increase size of name buffer for endpoints
- f2fs: fix to do sanity check in update_sit_entry
- btrfs: delete pointless BUG_ON check on quota root in
btrfs_qgroup_account_extent()
- btrfs: send: handle unexpected data in header buffer in begin_cmd()
- btrfs: handle invalid root reference found in may_destroy_subvol()
- btrfs: change BUG_ON to assertion when checking for delayed_node root
- powerpc/boot: Only free if realloc() succeeds
- powerpc/boot: Handle allocation failure in simple_realloc()
- parisc: Use irq_enter_rcu() to fix warning at kernel/context_tracking.c:367
- x86: Increase brk randomness entropy for 64-bit systems
- md: clean up invalid BUG_ON in md_ioctl
- virtiofs: forbid newlines in tags
- drm/lima: set gp bus_stop bit before hard reset
- net/sun3_82586: Avoid reading past buffer in debug output
- scsi: lpfc: Initialize status local variable in lpfc_sli4_repost_sgl_list()
- fs: binfmt_elf_efpic: don't use missing interpreter's properties
- media: pci: cx23885: check cx23885_vdev_init() return
- quota: Remove BUG_ON from dqget()
- ext4: do not trim the group with corrupted block bitmap
- nvmet-trace: avoid dereferencing pointer too early
- powerpc/xics: Check return value of kasprintf in icp_native_map_one_cpu
- IB/hfi1: Fix potential deadlock on &irq_src_lock and &dd->uctxt_lock
- wifi: iwlwifi: abort scan when rfkill on but device enabled
- gfs2: setattr_chown: Add missing initialization
- scsi: spi: Fix sshdr use
- binfmt_misc: cleanup on filesystem umount
- staging: ks7010: disable bh on tx_dev_lock
- media: radio-isa: use dev_name to fill in bus_info
- i2c: riic: avoid potential division by zero
- wifi: cw1200: Avoid processing an invalid TIM IE
- ssb: Fix division by zero issue in ssb_calc_clock_rate
- ALSA: hda/realtek: Fix noise from speakers on Lenovo IdeaPad 3 15IAU7
- net: hns3: fix a deadlock problem when config TC during resetting
- net: dsa: vsc73xx: pass value in phy_write operation
- net: axienet: Fix register defines comment description
- net: axienet: Autodetect 64-bit DMA capability
- net: axienet: Upgrade descriptors to hold 64-bit addresses
- net: axienet: Wrap DMA pointer writes to prepare for 64 bit
- net: axienet: Drop MDIO interrupt registers from ethtools dump
- net: axienet: Check for DMA mapping errors
- net: axienet: Factor out TX descriptor chain cleanup
- net: axienet: Improve DMA error handling
- net: axienet: Fix DMA descriptor cleanup path
- atm: idt77252: prevent use after free in dequeue_rx()
- net/mlx5e: Correctly report errors for ethtool rx flows
- s390/uv: Panic for set and remove shared access UVC errors
- btrfs: rename bitmap_set_bits() -> btrfs_bitmap_set_bits()
- s390/cio: rename bitmap_size() -> idset_bitmap_size()
- overflow: Implement size_t saturating arithmetic helpers
- overflow.h: Add flex_array_size() helper
- memcg_write_event_control(): fix a user-triggerable oops
- drm/amdgpu: Actually check flags for all context ops.
- selinux: fix potential counting error in avc_add_xperms_decision()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- bitmap: introduce generic optimized bitmap_size()
- vfs: Don't evict inode under the inode lru traversing context
- dm persistent data: fix memory allocation failure
- dm resume: don't return EINVAL when signalled
- arm64: ACPI: NUMA: initialize all values of acpi_early_node_map to
NUMA_NO_NODE
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- ALSA: usb-audio: Support Yamaha P-125 quirk entry
- fuse: Initialize beyond-EOF page contents before setting uptodate
+ UBUNTU: Upstream stable to v5.4.283
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/2080595
Title:
Focal update: v5.4.283 upstream stable release
Status in linux package in Ubuntu:
Invalid
Status in linux source package in Focal:
In Progress
Bug description:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
v5.4.283 upstream stable release
from git://git.kernel.org/
fuse: Initialize beyond-EOF page contents before setting uptodate
ALSA: usb-audio: Support Yamaha P-125 quirk entry
xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
s390/dasd: fix error recovery leading to data corruption on ESE devices
arm64: ACPI: NUMA: initialize all values of acpi_early_node_map to
NUMA_NO_NODE
dm resume: don't return EINVAL when signalled
dm persistent data: fix memory allocation failure
vfs: Don't evict inode under the inode lru traversing context
bitmap: introduce generic optimized bitmap_size()
fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
selinux: fix potential counting error in avc_add_xperms_decision()
drm/amdgpu: Actually check flags for all context ops.
memcg_write_event_control(): fix a user-triggerable oops
overflow.h: Add flex_array_size() helper
overflow: Implement size_t saturating arithmetic helpers
s390/cio: rename bitmap_size() -> idset_bitmap_size()
btrfs: rename bitmap_set_bits() -> btrfs_bitmap_set_bits()
s390/uv: Panic for set and remove shared access UVC errors
net/mlx5e: Correctly report errors for ethtool rx flows
atm: idt77252: prevent use after free in dequeue_rx()
net: axienet: Fix DMA descriptor cleanup path
net: axienet: Improve DMA error handling
net: axienet: Factor out TX descriptor chain cleanup
net: axienet: Check for DMA mapping errors
net: axienet: Drop MDIO interrupt registers from ethtools dump
net: axienet: Wrap DMA pointer writes to prepare for 64 bit
net: axienet: Upgrade descriptors to hold 64-bit addresses
net: axienet: Autodetect 64-bit DMA capability
net: axienet: Fix register defines comment description
net: dsa: vsc73xx: pass value in phy_write operation
net: hns3: fix a deadlock problem when config TC during resetting
ALSA: hda/realtek: Fix noise from speakers on Lenovo IdeaPad 3 15IAU7
ssb: Fix division by zero issue in ssb_calc_clock_rate
wifi: cw1200: Avoid processing an invalid TIM IE
i2c: riic: avoid potential division by zero
media: radio-isa: use dev_name to fill in bus_info
staging: ks7010: disable bh on tx_dev_lock
binfmt_misc: cleanup on filesystem umount
scsi: spi: Fix sshdr use
gfs2: setattr_chown: Add missing initialization
wifi: iwlwifi: abort scan when rfkill on but device enabled
IB/hfi1: Fix potential deadlock on &irq_src_lock and &dd->uctxt_lock
powerpc/xics: Check return value of kasprintf in icp_native_map_one_cpu
nvmet-trace: avoid dereferencing pointer too early
ext4: do not trim the group with corrupted block bitmap
quota: Remove BUG_ON from dqget()
media: pci: cx23885: check cx23885_vdev_init() return
fs: binfmt_elf_efpic: don't use missing interpreter's properties
scsi: lpfc: Initialize status local variable in lpfc_sli4_repost_sgl_list()
net/sun3_82586: Avoid reading past buffer in debug output
drm/lima: set gp bus_stop bit before hard reset
virtiofs: forbid newlines in tags
md: clean up invalid BUG_ON in md_ioctl
x86: Increase brk randomness entropy for 64-bit systems
powerpc/boot: Handle allocation failure in simple_realloc()
powerpc/boot: Only free if realloc() succeeds
btrfs: change BUG_ON to assertion when checking for delayed_node root
btrfs: handle invalid root reference found in may_destroy_subvol()
btrfs: send: handle unexpected data in header buffer in begin_cmd()
btrfs: delete pointless BUG_ON check on quota root in
btrfs_qgroup_account_extent()
f2fs: fix to do sanity check in update_sit_entry
usb: gadget: fsl: Increase size of name buffer for endpoints
nvme: clear caller pointer on identify failure
Bluetooth: bnep: Fix out-of-bound access
nvmet-tcp: do not continue for invalid icreq
NFS: avoid infinite loop in pnfs_update_layout.
openrisc: Call setup_memory() earlier in the init sequence
s390/iucv: fix receive buffer virtual vs physical address confusion
usb: dwc3: core: Skip setting event buffers for host only controllers
irqchip/gic-v3-its: Remove BUG_ON in its_vpe_irq_domain_alloc
ext4: set the type of max_zeroout to unsigned int to avoid overflow
nvmet-rdma: fix possible bad dereference when freeing rsps
hrtimer: Prevent queuing of hrtimer without a function callback
gtp: pull network headers in gtp_dev_xmit()
block: use "unsigned long" for blk_validate_block_size().
media: solo6x10: replace max(a, min(b, c)) by clamp(b, a, c)
dm mpath: pass IO start time to path selector
dm: do not use waitqueue for request-based DM
dm suspend: return -ERESTARTSYS instead of -EINTR
Bluetooth: Make use of __check_timeout on hci_sched_le
Bluetooth: hci_core: Fix not handling link timeouts propertly
Bluetooth: hci_core: Fix LE quote calculation
tc-testing: don't access non-existent variable on exception
kcm: Serialise kcm_sendmsg() for the same socket.
netfilter: nft_counter: Synchronize nft_counter_reset() against reader.
net: dsa: mv88e6xxx: global2: Expose ATU stats register
net: dsa: mv88e6xxx: global1_atu: Add helper for get next
net: dsa: mv88e6xxx: read FID when handling ATU violations
net: dsa: mv88e6xxx: replace ATU violation prints with trace points
net: dsa: mv88e6xxx: Fix out-of-bound access
netem: fix return value if duplicate enqueue fails
ipv6: prevent UAF in ip6_send_skb()
net: xilinx: axienet: Always disable promiscuous mode
net: xilinx: axienet: Fix dangling multicast addresses
drm/msm: use drm_debug_enabled() to check for debug categories
drm/msm/dpu: don't play tricks with debug macros
mmc: mmc_test: Fix NULL dereference on allocation failure
Bluetooth: MGMT: Add error handling to pair_device()
HID: wacom: Defer calculation of resolution until resolution_code is known
HID: microsoft: Add rumble support to latest xbox controllers
cxgb4: add forgotten u64 ivlan cast before shift
mmc: dw_mmc: allow biu and ciu clocks to defer
ALSA: timer: Relax start tick time check for slave timer elements
Input: MT - limit max slots
tools: move alignment-related macros to new <linux/align.h>
pinctrl: single: fix potential NULL dereference in pcs_get_function()
wifi: mwifiex: duplicate static structs used in driver instances
drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
filelock: Correct the filelock owner in fcntl_setlk/fcntl_setlk64
media: uvcvideo: Fix integer overflow calculating timestamp
ata: libata-core: Fix null pointer dereference on error
cgroup/cpuset: Prevent UAF in proc_cpuset_show()
net:rds: Fix possible deadlock in rds_message_put
soundwire: stream: fix programming slave ports for non-continous port maps
r8152: Factor out OOB link list waits
ethtool: check device is present when getting link settings
gtp: fix a potential NULL pointer dereference
net: busy-poll: use ktime_get_ns() instead of local_clock()
nfc: pn533: Add dev_up/dev_down hooks to phy_ops
nfc: pn533: Add autopoll capability
nfc: pn533: Add poll mod list filling check
soc: qcom: cmd-db: Map shared memory as WC, not WB
cdc-acm: Add DISABLE_ECHO quirk for GE HealthCare UI Controller
USB: serial: option: add MeiG Smart SRM825L
usb: dwc3: omap: add missing depopulate in probe error path
usb: dwc3: core: Prevent USB core invalid event buffer address access
usb: dwc3: st: fix probed platform device ref count on probe error path
usb: dwc3: st: add missing depopulate in probe error path
usb: core: sysfs: Unmerge @usb3_hardware_lpm_attr_group in
remove_power_attributes()
net: dsa: mv8e6xxx: Fix stub function parameters
scsi: aacraid: Fix double-free on probe failure
Linux 5.4.283
UBUNTU: Upstream stable to v5.4.283
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2080595/+subscriptions
--
Mailing list: https://launchpad.net/~kernel-packages
Post to : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help : https://help.launchpad.net/ListHelp
