Public bug reported: SRU Justification
Impact: The upstream process for stable tree updates is quite similar in scope to the Ubuntu SRU process, e.g., each patch has to demonstrably fix a bug, and each patch is vetted by upstream by originating either directly from a mainline/stable Linux tree or a minimally backported form of that patch. The following upstream stable patches should be included in the Ubuntu kernel: v5.15.63 upstream stable release from git://git.kernel.org/ ALSA: info: Fix llseek return value when using callback ALSA: hda/realtek: Add quirk for Clevo NS50PU, NS70PU KVM: Unconditionally get a ref to /dev/kvm module when creating a VM x86/mm: Use proper mask when setting PUD mapping rds: add missing barrier to release_refill locking/atomic: Make test_and_*_bit() ordered on failure drm/nouveau: recognise GA103 drm/ttm: Fix dummy res NULL ptr deref bug drm/amd/display: Check correct bounds for stream encoder instances for DCN303 ata: libata-eh: Add missing command name mmc: pxamci: Fix another error handling path in pxamci_probe() mmc: pxamci: Fix an error handling path in pxamci_probe() mmc: meson-gx: Fix an error handling path in meson_mmc_probe() btrfs: unset reloc control if transaction commit fails in prepare_to_relocate() btrfs: reset RO counter on block group if we fail to relocate btrfs: fix lost error handling when looking up extended ref on log replay cifs: Fix memory leak on the deferred close x86/kprobes: Fix JNG/JNLE emulation tracing/eprobes: Do not allow eprobes to use $stack, or % for regs tracing/eprobes: Do not hardcode $comm as a string tracing/eprobes: Have event probes be consistent with kprobes and uprobes tracing/probes: Have kprobes and uprobes use $COMM too tracing: Have filter accept "common_cpu" to be consistent ALSA: usb-audio: More comprehensive mixer map for ASUS ROG Zenith II dt-bindings: usb: mtk-xhci: Allow wakeup interrupt-names to be optional can: ems_usb: fix clang's -Wunaligned-access warning apparmor: fix quiet_denied for file rules Revert "UBUNTU: SAUCE: apparmor: drop prefixing abs root labels with '='" apparmor: fix absroot causing audited secids to begin with = apparmor: Fix failed mount permission check error message apparmor: fix aa_label_asxprint return check apparmor: fix setting unconfined mode on a loaded profile apparmor: fix overlapping attachment computation apparmor: fix reference count leak in aa_pivotroot() apparmor: Fix memleak in aa_simple_write_to_buffer() Documentation: ACPI: EINJ: Fix obsolete example NFSv4.1: Don't decrease the value of seq_nr_highest_sent NFSv4.1: Handle NFS4ERR_DELAY replies to OP_SEQUENCE correctly NFSv4: Fix races in the legacy idmapper upcall NFSv4.1: RECLAIM_COMPLETE must handle EACCES NFSv4/pnfs: Fix a use-after-free bug in open BPF: Fix potential bad pointer dereference in bpf_sys_bpf() bpf: Don't reinit map value in prealloc_lru_pop bpf: Acquire map uref in .init_seq_private for array map iterator bpf: Acquire map uref in .init_seq_private for hash map iterator bpf: Acquire map uref in .init_seq_private for sock local storage map iterator bpf: Acquire map uref in .init_seq_private for sock{map,hash} iterator bpf: Check the validity of max_rdwr_access for sock local storage map iterator can: mcp251x: Fix race condition on receive interrupt can: j1939: j1939_session_destroy(): fix memory leak of skbs net: atlantic: fix aq_vec index out of range error m68k: coldfire/device.c: protect FLEXCAN blocks sunrpc: fix expiry of auth creds SUNRPC: Fix xdr_encode_bool() SUNRPC: Reinitialise the backchannel request buffers before reuse virtio_net: fix memory leak inside XPD_TX with mergeable devlink: Fix use-after-free after a failed reload net: phy: Warn about incorrect mdio_bus_phy_resume() state net: bcmgenet: Indicate MAC is in charge of PHY PM net: bgmac: Fix a BUG triggered by wrong bytes_compl selftests: forwarding: Fix failing tests with old libnet dt-bindings: arm: qcom: fix Alcatel OneTouch Idol 3 compatibles pinctrl: nomadik: Fix refcount leak in nmk_pinctrl_dt_subnode_to_map pinctrl: qcom: msm8916: Allow CAMSS GP clocks to be muxed pinctrl: amd: Don't save/restore interrupt status and wake status bits pinctrl: sunxi: Add I/O bias setting for H6 R-PIO pinctrl: qcom: sm8250: Fix PDC map Input: exc3000 - fix return value check of wait_for_completion_timeout octeontx2-pf: Fix NIX_AF_TL3_TL2X_LINKX_CFG register configuration octeontx2-af: Apply tx nibble fixup always octeontx2-af: suppress external profile loading warning octeontx2-af: Fix mcam entry resource leak octeontx2-af: Fix key checking for source mac ACPI: property: Return type of acpi_add_nondev_subnodes() should be bool geneve: do not use RT_TOS for IPv6 flowlabel mlx5: do not use RT_TOS for IPv6 flowlabel ipv6: do not use RT_TOS for IPv6 flowlabel plip: avoid rcu debug splat vsock: Fix memory leak in vsock_connect() vsock: Set socket state back to SS_UNCONNECTED in vsock_connect_timeout() dt-bindings: gpio: zynq: Add missing compatible strings dt-bindings: arm: qcom: fix Longcheer L8150 compatibles dt-bindings: arm: qcom: fix MSM8916 MTP compatibles dt-bindings: arm: qcom: fix MSM8994 boards compatibles dt-bindings: clock: qcom,gcc-msm8996: add more GCC clock sources spi: dt-bindings: cadence: add missing 'required' spi: dt-bindings: zynqmp-qspi: add missing 'required' ceph: use correct index when encoding client supported features tools/vm/slabinfo: use alphabetic order when two values are equal ceph: don't leak snap_rwsem in handle_cap_grant kbuild: dummy-tools: avoid tmpdir leak in dummy gcc tools build: Switch to new openssl API for test-libcrypto NTB: ntb_tool: uninitialized heap data in tool_fn_write() nfp: ethtool: fix the display error of `ethtool -m DEVNAME` xen/xenbus: fix return type in xenbus_file_read() atm: idt77252: fix use-after-free bugs caused by tst_timer geneve: fix TOS inheriting for ipv4 perf probe: Fix an error handling path in 'parse_perf_probe_command()' perf parse-events: Fix segfault when event parser gets an error perf tests: Fix Track with sched_switch test for hybrid case dpaa2-eth: trace the allocated address instead of page struct fs/ntfs3: Fix using uninitialized value n when calling indx_read fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr fs/ntfs3: Don't clear upper bits accidentally in log_replay() fs/ntfs3: Fix double free on remount fs/ntfs3: Do not change mode if ntfs_set_ea failed fs/ntfs3: Fix missing i_op in ntfs_read_mft nios2: page fault et.al. are *not* restartable syscalls... nios2: don't leave NULLs in sys_call_table[] nios2: traced syscall does need to check the syscall number nios2: fix syscall restart checks nios2: restarts apply only to the first sigframe we build... nios2: add force_successful_syscall_return() iavf: Fix adminq error handling iavf: Fix reset error handling ASoC: SOF: debug: Fix potential buffer overflow by snprintf() ASoC: tas2770: Set correct FSYNC polarity ASoC: tas2770: Allow mono streams ASoC: tas2770: Drop conflicting set_bias_level power setting ASoC: tas2770: Fix handling of mute/unmute ASoC: codec: tlv320aic32x4: fix mono playback via I2S netfilter: nf_tables: use READ_ONCE and WRITE_ONCE for shared generation id access fs/ntfs3: uninitialized variable in ntfs_set_acl_ex() netfilter: nf_tables: disallow NFTA_SET_ELEM_KEY_END with NFT_SET_ELEM_INTERVAL_END flag netfilter: nf_tables: possible module reference underflow in error path netfilter: nf_tables: really skip inactive sets when allocating name netfilter: nf_tables: validate NFTA_SET_ELEM_OBJREF based on NFT_SET_OBJECT flag netfilter: nf_tables: NFTA_SET_ELEM_KEY_END requires concat and interval flags netfilter: nf_tables: disallow NFT_SET_ELEM_CATCHALL and NFT_SET_ELEM_INTERVAL_END netfilter: nf_tables: check NFT_SET_CONCAT flag if field_count is specified powerpc/pci: Fix get_phb_number() locking spi: meson-spicc: add local pow2 clock ops to preserve rate between messages net/sunrpc: fix potential memory leaks in rpc_sysfs_xprt_state_change() net: dsa: mv88e6060: prevent crash on an unused port mlxsw: spectrum: Clear PTP configuration after unregistering the netdevice net: moxa: pass pdev instead of ndev to DMA functions net: fix potential refcount leak in ndisc_router_discovery() net: dsa: microchip: ksz9477: fix fdb_dump last invalid entry net: dsa: felix: fix ethtool 256-511 and 512-1023 TX packet counters net: genl: fix error path memory leak in policy dumping net: dsa: don't warn in dsa_port_set_state_now() when driver doesn't support it net: dsa: sja1105: fix buffer overflow in sja1105_setup_devlink_regions() ice: Ignore EEXIST when setting promisc mode i2c: imx: Make sure to unregister adapter on remove() regulator: pca9450: Remove restrictions for regulator-name i40e: Fix to stop tx_timeout recovery if GLOBR fails fec: Fix timer capture timing in `fec_ptp_enable_pps()` stmmac: intel: Add a missing clk_disable_unprepare() call in intel_eth_pci_remove() igb: Add lock to avoid data race kbuild: fix the modules order between drivers and libs gcc-plugins: Undefine LATENT_ENTROPY_PLUGIN when plugin disabled for a file tracing/eprobes: Fix reading of string fields drm/imx/dcss: get rid of HPD warning message ASoC: SOF: Intel: hda: Define rom_status_reg in sof_intel_dsp_desc ASoC: SOF: Intel: hda: Fix potential buffer overflow by snprintf() drm/meson: Fix refcount bugs in meson_vpu_has_available_connectors() drm/sun4i: dsi: Prevent underflow when computing packet sizes net: qrtr: start MHI channel after endpoit creation KVM: arm64: Treat PMCR_EL1.LC as RES1 on asymmetric systems KVM: arm64: Reject 32bit user PSTATE on asymmetric systems HID: multitouch: new device class fix Lenovo X12 trackpad sticky PCI: Add ACS quirk for Broadcom BCM5750x NICs platform/chrome: cros_ec_proto: don't show MKBP version if unsupported usb: cdns3 fix use-after-free at workaround 2 usb: cdns3: fix random warning message when driver load usb: gadget: uvc: calculate the number of request depending on framesize usb: gadget: uvc: call uvc uvcg_warn on completed status instead of uvcg_info PCI: aardvark: Fix reporting Slot capabilities on emulated bridge irqchip/tegra: Fix overflow implicit truncation warnings drm/meson: Fix overflow implicit truncation warnings clk: ti: Stop using legacy clkctrl names for omap4 and 5 scsi: ufs: ufs-mediatek: Fix the timing of configuring device regulators usb: host: ohci-ppc-of: Fix refcount leak bug usb: renesas: Fix refcount leak bug usb: dwc2: gadget: remove D+ pull-up while no vbus with usb-role-switch vboxguest: Do not use devm for irq clk: qcom: ipq8074: dont disable gcc_sleep_clk_src uacce: Handle parent device removal or parent driver module rmmod zram: do not lookup algorithm in backends table clk: qcom: clk-alpha-pll: fix clk_trion_pll_configure description scsi: lpfc: Prevent buffer overflow crashes in debugfs with malformed user input scsi: lpfc: Fix possible memory leak when failing to issue CMF WQE gadgetfs: ep_io - wait until IRQ finishes coresight: etm4x: avoid build failure with unrolled loops habanalabs/gaudi: fix shift out of bounds habanalabs/gaudi: mask constant value before cast mmc: tmio: avoid glitches when resetting pinctrl: intel: Check against matching data instead of ACPI companion cxl: Fix a memory leak in an error handling path PCI/ACPI: Guard ARM64-specific mcfg_quirks um: add "noreboot" command line option for PANIC_TIMEOUT=-1 setups dmaengine: dw-axi-dmac: do not print NULL LLI during error dmaengine: dw-axi-dmac: ignore interrupt if no descriptor RDMA/rxe: Limit the number of calls to each tasklet csky/kprobe: reclaim insn_slot on kprobe unregistration selftests/kprobe: Do not test for GRP/ without event failures dmaengine: sprd: Cleanup in .remove() after pm_runtime_get_sync() failed openrisc: io: Define iounmap argument as volatile phy: samsung: phy-exynos-pcie: sanitize init/power_on callbacks md: Notify sysfs sync_completed in md_reap_sync_thread() nvmet-tcp: fix lockdep complaint on nvmet_tcp_wq flush during queue teardown drivers:md:fix a potential use-after-free bug ext4: avoid remove directory when directory is corrupted ext4: avoid resizing to a partial cluster size lib/list_debug.c: Detect uninitialized lists tty: serial: Fix refcount leak bug in ucc_uart.c KVM: PPC: Book3S HV: Fix "rm_exit" entry in debugfs timings vfio: Clear the caps->buf to NULL after free mips: cavium-octeon: Fix missing of_node_put() in octeon2_usb_clocks_start iommu/io-pgtable-arm-v7s: Add a quirk to allow pgtable PA up to 35bit modules: Ensure natural alignment for .altinstructions and __bug_table sections ASoC: rsnd: care default case on rsnd_ssiu_busif_err_irq_ctrl() riscv: dts: sifive: Add fu740 topology information riscv: dts: canaan: Add k210 topology information riscv: mmap with PROT_WRITE but no PROT_READ is invalid RISC-V: Add fast call path of crash_kexec() watchdog: export lockup_detector_reconfigure powerpc/32: Set an IBAT covering up to _einittext during init powerpc/32: Don't always pass -mcpu=powerpc to the compiler ovl: warn if trusted xattr creation fails powerpc/ioda/iommu/debugfs: Generate unique debugfs entries ALSA: core: Add async signal helpers ALSA: timer: Use deferred fasync helper ALSA: control: Use deferred fasync helper f2fs: fix to avoid use f2fs_bug_on() in f2fs_new_node_page() f2fs: fix to do sanity check on segment type in build_sit_entries() smb3: check xattr value length earlier powerpc/64: Init jump labels before parse_early_param() venus: pm_helpers: Fix warning in OPP during probe video: fbdev: i740fb: Check the argument of i740_calc_vclk() MIPS: tlbex: Explicitly compare _PAGE_NO_EXEC against 0 can: j1939: j1939_sk_queue_activate_next_locked(): replace WARN_ON_ONCE with netdev_warn_once() scsi: ufs: ufs-mediatek: Fix build error and type mismatch xfs: flush inodegc workqueue tasks before cancel xfs: reserve quota for dir expansion when linking/unlinking files xfs: reserve quota for target dir expansion when renaming files xfs: remove infinite loop when reserving free block pool xfs: always succeed at setting the reserve pool size xfs: fix overfilling of reserve pool xfs: fix soft lockup via spinning in filestream ag selection loop xfs: revert "xfs: actually bump warning counts when we send warnings" xfs: reject crazy array sizes being fed to XFS_IOC_GETBMAP* Linux 5.15.63 UBUNTU: Upstream stable to v5.15.63 ** Affects: linux (Ubuntu) Importance: Undecided Status: Invalid ** Affects: linux (Ubuntu Jammy) Importance: Medium Assignee: Kamal Mostafa (kamalmostafa) Status: In Progress ** Tags: kernel-stable-tracking-bug ** Changed in: linux (Ubuntu) Status: New => Confirmed ** Tags added: kernel-stable-tracking-bug ** Also affects: linux (Ubuntu Jammy) Importance: Undecided Status: New ** Changed in: linux (Ubuntu) Status: Confirmed => Invalid ** Changed in: linux (Ubuntu Jammy) Status: New => Invalid ** Changed in: linux (Ubuntu Jammy) Importance: Undecided => Medium ** Changed in: linux (Ubuntu Jammy) Assignee: (unassigned) => Kamal Mostafa (kamalmostafa) ** Description changed: + SRU Justification - SRU Justification + Impact: + The upstream process for stable tree updates is quite similar + in scope to the Ubuntu SRU process, e.g., each patch has to + demonstrably fix a bug, and each patch is vetted by upstream + by originating either directly from a mainline/stable Linux tree or + a minimally backported form of that patch. The following upstream + stable patches should be included in the Ubuntu kernel: - Impact: - The upstream process for stable tree updates is quite similar - in scope to the Ubuntu SRU process, e.g., each patch has to - demonstrably fix a bug, and each patch is vetted by upstream - by originating either directly from a mainline/stable Linux tree or - a minimally backported form of that patch. The following upstream - stable patches should be included in the Ubuntu kernel: + v5.15.63 upstream stable release + from git://git.kernel.org/ - v5.15.63 upstream stable release - from git://git.kernel.org/ + ALSA: info: Fix llseek return value when using callback + ALSA: hda/realtek: Add quirk for Clevo NS50PU, NS70PU + KVM: Unconditionally get a ref to /dev/kvm module when creating a VM + x86/mm: Use proper mask when setting PUD mapping + rds: add missing barrier to release_refill + locking/atomic: Make test_and_*_bit() ordered on failure + drm/nouveau: recognise GA103 + drm/ttm: Fix dummy res NULL ptr deref bug + drm/amd/display: Check correct bounds for stream encoder instances for DCN303 + ata: libata-eh: Add missing command name + mmc: pxamci: Fix another error handling path in pxamci_probe() + mmc: pxamci: Fix an error handling path in pxamci_probe() + mmc: meson-gx: Fix an error handling path in meson_mmc_probe() + btrfs: unset reloc control if transaction commit fails in prepare_to_relocate() + btrfs: reset RO counter on block group if we fail to relocate + btrfs: fix lost error handling when looking up extended ref on log replay + cifs: Fix memory leak on the deferred close + x86/kprobes: Fix JNG/JNLE emulation + tracing/eprobes: Do not allow eprobes to use $stack, or % for regs + tracing/eprobes: Do not hardcode $comm as a string + tracing/eprobes: Have event probes be consistent with kprobes and uprobes + tracing/probes: Have kprobes and uprobes use $COMM too + tracing: Have filter accept "common_cpu" to be consistent + ALSA: usb-audio: More comprehensive mixer map for ASUS ROG Zenith II + dt-bindings: usb: mtk-xhci: Allow wakeup interrupt-names to be optional + can: ems_usb: fix clang's -Wunaligned-access warning + apparmor: fix quiet_denied for file rules + Revert "UBUNTU: SAUCE: apparmor: drop prefixing abs root labels with '='" + apparmor: fix absroot causing audited secids to begin with = + apparmor: Fix failed mount permission check error message + apparmor: fix aa_label_asxprint return check + apparmor: fix setting unconfined mode on a loaded profile + apparmor: fix overlapping attachment computation + apparmor: fix reference count leak in aa_pivotroot() + apparmor: Fix memleak in aa_simple_write_to_buffer() + Documentation: ACPI: EINJ: Fix obsolete example + NFSv4.1: Don't decrease the value of seq_nr_highest_sent + NFSv4.1: Handle NFS4ERR_DELAY replies to OP_SEQUENCE correctly + NFSv4: Fix races in the legacy idmapper upcall + NFSv4.1: RECLAIM_COMPLETE must handle EACCES + NFSv4/pnfs: Fix a use-after-free bug in open + BPF: Fix potential bad pointer dereference in bpf_sys_bpf() + bpf: Don't reinit map value in prealloc_lru_pop + bpf: Acquire map uref in .init_seq_private for array map iterator + bpf: Acquire map uref in .init_seq_private for hash map iterator + bpf: Acquire map uref in .init_seq_private for sock local storage map iterator + bpf: Acquire map uref in .init_seq_private for sock{map,hash} iterator + bpf: Check the validity of max_rdwr_access for sock local storage map iterator + can: mcp251x: Fix race condition on receive interrupt + can: j1939: j1939_session_destroy(): fix memory leak of skbs + net: atlantic: fix aq_vec index out of range error + m68k: coldfire/device.c: protect FLEXCAN blocks + sunrpc: fix expiry of auth creds + SUNRPC: Fix xdr_encode_bool() + SUNRPC: Reinitialise the backchannel request buffers before reuse + virtio_net: fix memory leak inside XPD_TX with mergeable + devlink: Fix use-after-free after a failed reload + net: phy: Warn about incorrect mdio_bus_phy_resume() state + net: bcmgenet: Indicate MAC is in charge of PHY PM + net: bgmac: Fix a BUG triggered by wrong bytes_compl + selftests: forwarding: Fix failing tests with old libnet + dt-bindings: arm: qcom: fix Alcatel OneTouch Idol 3 compatibles + pinctrl: nomadik: Fix refcount leak in nmk_pinctrl_dt_subnode_to_map + pinctrl: qcom: msm8916: Allow CAMSS GP clocks to be muxed + pinctrl: amd: Don't save/restore interrupt status and wake status bits + pinctrl: sunxi: Add I/O bias setting for H6 R-PIO + pinctrl: qcom: sm8250: Fix PDC map + Input: exc3000 - fix return value check of wait_for_completion_timeout + octeontx2-pf: Fix NIX_AF_TL3_TL2X_LINKX_CFG register configuration + octeontx2-af: Apply tx nibble fixup always + octeontx2-af: suppress external profile loading warning + octeontx2-af: Fix mcam entry resource leak + octeontx2-af: Fix key checking for source mac + ACPI: property: Return type of acpi_add_nondev_subnodes() should be bool + geneve: do not use RT_TOS for IPv6 flowlabel + mlx5: do not use RT_TOS for IPv6 flowlabel + ipv6: do not use RT_TOS for IPv6 flowlabel + plip: avoid rcu debug splat + vsock: Fix memory leak in vsock_connect() + vsock: Set socket state back to SS_UNCONNECTED in vsock_connect_timeout() + dt-bindings: gpio: zynq: Add missing compatible strings + dt-bindings: arm: qcom: fix Longcheer L8150 compatibles + dt-bindings: arm: qcom: fix MSM8916 MTP compatibles + dt-bindings: arm: qcom: fix MSM8994 boards compatibles + dt-bindings: clock: qcom,gcc-msm8996: add more GCC clock sources + spi: dt-bindings: cadence: add missing 'required' + spi: dt-bindings: zynqmp-qspi: add missing 'required' + ceph: use correct index when encoding client supported features + tools/vm/slabinfo: use alphabetic order when two values are equal + ceph: don't leak snap_rwsem in handle_cap_grant + kbuild: dummy-tools: avoid tmpdir leak in dummy gcc + tools build: Switch to new openssl API for test-libcrypto + NTB: ntb_tool: uninitialized heap data in tool_fn_write() + nfp: ethtool: fix the display error of `ethtool -m DEVNAME` + xen/xenbus: fix return type in xenbus_file_read() + atm: idt77252: fix use-after-free bugs caused by tst_timer + geneve: fix TOS inheriting for ipv4 + perf probe: Fix an error handling path in 'parse_perf_probe_command()' + perf parse-events: Fix segfault when event parser gets an error + perf tests: Fix Track with sched_switch test for hybrid case + dpaa2-eth: trace the allocated address instead of page struct + fs/ntfs3: Fix using uninitialized value n when calling indx_read + fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr + fs/ntfs3: Don't clear upper bits accidentally in log_replay() + fs/ntfs3: Fix double free on remount + fs/ntfs3: Do not change mode if ntfs_set_ea failed + fs/ntfs3: Fix missing i_op in ntfs_read_mft + nios2: page fault et.al. are *not* restartable syscalls... + nios2: don't leave NULLs in sys_call_table[] + nios2: traced syscall does need to check the syscall number + nios2: fix syscall restart checks + nios2: restarts apply only to the first sigframe we build... + nios2: add force_successful_syscall_return() + iavf: Fix adminq error handling + iavf: Fix reset error handling + ASoC: SOF: debug: Fix potential buffer overflow by snprintf() + ASoC: tas2770: Set correct FSYNC polarity + ASoC: tas2770: Allow mono streams + ASoC: tas2770: Drop conflicting set_bias_level power setting + ASoC: tas2770: Fix handling of mute/unmute + ASoC: codec: tlv320aic32x4: fix mono playback via I2S + netfilter: nf_tables: use READ_ONCE and WRITE_ONCE for shared generation id access + fs/ntfs3: uninitialized variable in ntfs_set_acl_ex() + netfilter: nf_tables: disallow NFTA_SET_ELEM_KEY_END with NFT_SET_ELEM_INTERVAL_END flag + netfilter: nf_tables: possible module reference underflow in error path + netfilter: nf_tables: really skip inactive sets when allocating name + netfilter: nf_tables: validate NFTA_SET_ELEM_OBJREF based on NFT_SET_OBJECT flag + netfilter: nf_tables: NFTA_SET_ELEM_KEY_END requires concat and interval flags + netfilter: nf_tables: disallow NFT_SET_ELEM_CATCHALL and NFT_SET_ELEM_INTERVAL_END + netfilter: nf_tables: check NFT_SET_CONCAT flag if field_count is specified + powerpc/pci: Fix get_phb_number() locking + spi: meson-spicc: add local pow2 clock ops to preserve rate between messages + net/sunrpc: fix potential memory leaks in rpc_sysfs_xprt_state_change() + net: dsa: mv88e6060: prevent crash on an unused port + mlxsw: spectrum: Clear PTP configuration after unregistering the netdevice + net: moxa: pass pdev instead of ndev to DMA functions + net: fix potential refcount leak in ndisc_router_discovery() + net: dsa: microchip: ksz9477: fix fdb_dump last invalid entry + net: dsa: felix: fix ethtool 256-511 and 512-1023 TX packet counters + net: genl: fix error path memory leak in policy dumping + net: dsa: don't warn in dsa_port_set_state_now() when driver doesn't support it + net: dsa: sja1105: fix buffer overflow in sja1105_setup_devlink_regions() + ice: Ignore EEXIST when setting promisc mode + i2c: imx: Make sure to unregister adapter on remove() + regulator: pca9450: Remove restrictions for regulator-name + i40e: Fix to stop tx_timeout recovery if GLOBR fails + fec: Fix timer capture timing in `fec_ptp_enable_pps()` + stmmac: intel: Add a missing clk_disable_unprepare() call in intel_eth_pci_remove() + igb: Add lock to avoid data race + kbuild: fix the modules order between drivers and libs + gcc-plugins: Undefine LATENT_ENTROPY_PLUGIN when plugin disabled for a file + tracing/eprobes: Fix reading of string fields + drm/imx/dcss: get rid of HPD warning message + ASoC: SOF: Intel: hda: Define rom_status_reg in sof_intel_dsp_desc + ASoC: SOF: Intel: hda: Fix potential buffer overflow by snprintf() + drm/meson: Fix refcount bugs in meson_vpu_has_available_connectors() + drm/sun4i: dsi: Prevent underflow when computing packet sizes + net: qrtr: start MHI channel after endpoit creation + KVM: arm64: Treat PMCR_EL1.LC as RES1 on asymmetric systems + KVM: arm64: Reject 32bit user PSTATE on asymmetric systems + HID: multitouch: new device class fix Lenovo X12 trackpad sticky + PCI: Add ACS quirk for Broadcom BCM5750x NICs + platform/chrome: cros_ec_proto: don't show MKBP version if unsupported + usb: cdns3 fix use-after-free at workaround 2 + usb: cdns3: fix random warning message when driver load + usb: gadget: uvc: calculate the number of request depending on framesize + usb: gadget: uvc: call uvc uvcg_warn on completed status instead of uvcg_info + PCI: aardvark: Fix reporting Slot capabilities on emulated bridge + irqchip/tegra: Fix overflow implicit truncation warnings + drm/meson: Fix overflow implicit truncation warnings + clk: ti: Stop using legacy clkctrl names for omap4 and 5 + scsi: ufs: ufs-mediatek: Fix the timing of configuring device regulators + usb: host: ohci-ppc-of: Fix refcount leak bug + usb: renesas: Fix refcount leak bug + usb: dwc2: gadget: remove D+ pull-up while no vbus with usb-role-switch + vboxguest: Do not use devm for irq + clk: qcom: ipq8074: dont disable gcc_sleep_clk_src + uacce: Handle parent device removal or parent driver module rmmod + zram: do not lookup algorithm in backends table + clk: qcom: clk-alpha-pll: fix clk_trion_pll_configure description + scsi: lpfc: Prevent buffer overflow crashes in debugfs with malformed user input + scsi: lpfc: Fix possible memory leak when failing to issue CMF WQE + gadgetfs: ep_io - wait until IRQ finishes + coresight: etm4x: avoid build failure with unrolled loops + habanalabs/gaudi: fix shift out of bounds + habanalabs/gaudi: mask constant value before cast + mmc: tmio: avoid glitches when resetting + pinctrl: intel: Check against matching data instead of ACPI companion + cxl: Fix a memory leak in an error handling path + PCI/ACPI: Guard ARM64-specific mcfg_quirks + um: add "noreboot" command line option for PANIC_TIMEOUT=-1 setups + dmaengine: dw-axi-dmac: do not print NULL LLI during error + dmaengine: dw-axi-dmac: ignore interrupt if no descriptor + RDMA/rxe: Limit the number of calls to each tasklet + csky/kprobe: reclaim insn_slot on kprobe unregistration + selftests/kprobe: Do not test for GRP/ without event failures + dmaengine: sprd: Cleanup in .remove() after pm_runtime_get_sync() failed + openrisc: io: Define iounmap argument as volatile + phy: samsung: phy-exynos-pcie: sanitize init/power_on callbacks + md: Notify sysfs sync_completed in md_reap_sync_thread() + nvmet-tcp: fix lockdep complaint on nvmet_tcp_wq flush during queue teardown + drivers:md:fix a potential use-after-free bug + ext4: avoid remove directory when directory is corrupted + ext4: avoid resizing to a partial cluster size + lib/list_debug.c: Detect uninitialized lists + tty: serial: Fix refcount leak bug in ucc_uart.c + KVM: PPC: Book3S HV: Fix "rm_exit" entry in debugfs timings + vfio: Clear the caps->buf to NULL after free + mips: cavium-octeon: Fix missing of_node_put() in octeon2_usb_clocks_start + iommu/io-pgtable-arm-v7s: Add a quirk to allow pgtable PA up to 35bit + modules: Ensure natural alignment for .altinstructions and __bug_table sections + ASoC: rsnd: care default case on rsnd_ssiu_busif_err_irq_ctrl() + riscv: dts: sifive: Add fu740 topology information + riscv: dts: canaan: Add k210 topology information + riscv: mmap with PROT_WRITE but no PROT_READ is invalid + RISC-V: Add fast call path of crash_kexec() + watchdog: export lockup_detector_reconfigure + powerpc/32: Set an IBAT covering up to _einittext during init + powerpc/32: Don't always pass -mcpu=powerpc to the compiler + ovl: warn if trusted xattr creation fails + powerpc/ioda/iommu/debugfs: Generate unique debugfs entries + ALSA: core: Add async signal helpers + ALSA: timer: Use deferred fasync helper + ALSA: control: Use deferred fasync helper + f2fs: fix to avoid use f2fs_bug_on() in f2fs_new_node_page() + f2fs: fix to do sanity check on segment type in build_sit_entries() + smb3: check xattr value length earlier + powerpc/64: Init jump labels before parse_early_param() + venus: pm_helpers: Fix warning in OPP during probe + video: fbdev: i740fb: Check the argument of i740_calc_vclk() + MIPS: tlbex: Explicitly compare _PAGE_NO_EXEC against 0 + can: j1939: j1939_sk_queue_activate_next_locked(): replace WARN_ON_ONCE with netdev_warn_once() + scsi: ufs: ufs-mediatek: Fix build error and type mismatch + xfs: flush inodegc workqueue tasks before cancel + xfs: reserve quota for dir expansion when linking/unlinking files + xfs: reserve quota for target dir expansion when renaming files + xfs: remove infinite loop when reserving free block pool + xfs: always succeed at setting the reserve pool size + xfs: fix overfilling of reserve pool + xfs: fix soft lockup via spinning in filestream ag selection loop + xfs: revert "xfs: actually bump warning counts when we send warnings" + xfs: reject crazy array sizes being fed to XFS_IOC_GETBMAP* + Linux 5.15.63 + UBUNTU: Upstream stable to v5.15.63 ** Changed in: linux (Ubuntu Jammy) Status: Invalid => In Progress -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/1990564 Title: Jammy update: v5.15.63 upstream stable release Status in linux package in Ubuntu: Invalid Status in linux source package in Jammy: In Progress Bug description: SRU Justification Impact: The upstream process for stable tree updates is quite similar in scope to the Ubuntu SRU process, e.g., each patch has to demonstrably fix a bug, and each patch is vetted by upstream by originating either directly from a mainline/stable Linux tree or a minimally backported form of that patch. The following upstream stable patches should be included in the Ubuntu kernel: v5.15.63 upstream stable release from git://git.kernel.org/ ALSA: info: Fix llseek return value when using callback ALSA: hda/realtek: Add quirk for Clevo NS50PU, NS70PU KVM: Unconditionally get a ref to /dev/kvm module when creating a VM x86/mm: Use proper mask when setting PUD mapping rds: add missing barrier to release_refill locking/atomic: Make test_and_*_bit() ordered on failure drm/nouveau: recognise GA103 drm/ttm: Fix dummy res NULL ptr deref bug drm/amd/display: Check correct bounds for stream encoder instances for DCN303 ata: libata-eh: Add missing command name mmc: pxamci: Fix another error handling path in pxamci_probe() mmc: pxamci: Fix an error handling path in pxamci_probe() mmc: meson-gx: Fix an error handling path in meson_mmc_probe() btrfs: unset reloc control if transaction commit fails in prepare_to_relocate() btrfs: reset RO counter on block group if we fail to relocate btrfs: fix lost error handling when looking up extended ref on log replay cifs: Fix memory leak on the deferred close x86/kprobes: Fix JNG/JNLE emulation tracing/eprobes: Do not allow eprobes to use $stack, or % for regs tracing/eprobes: Do not hardcode $comm as a string tracing/eprobes: Have event probes be consistent with kprobes and uprobes tracing/probes: Have kprobes and uprobes use $COMM too tracing: Have filter accept "common_cpu" to be consistent ALSA: usb-audio: More comprehensive mixer map for ASUS ROG Zenith II dt-bindings: usb: mtk-xhci: Allow wakeup interrupt-names to be optional can: ems_usb: fix clang's -Wunaligned-access warning apparmor: fix quiet_denied for file rules Revert "UBUNTU: SAUCE: apparmor: drop prefixing abs root labels with '='" apparmor: fix absroot causing audited secids to begin with = apparmor: Fix failed mount permission check error message apparmor: fix aa_label_asxprint return check apparmor: fix setting unconfined mode on a loaded profile apparmor: fix overlapping attachment computation apparmor: fix reference count leak in aa_pivotroot() apparmor: Fix memleak in aa_simple_write_to_buffer() Documentation: ACPI: EINJ: Fix obsolete example NFSv4.1: Don't decrease the value of seq_nr_highest_sent NFSv4.1: Handle NFS4ERR_DELAY replies to OP_SEQUENCE correctly NFSv4: Fix races in the legacy idmapper upcall NFSv4.1: RECLAIM_COMPLETE must handle EACCES NFSv4/pnfs: Fix a use-after-free bug in open BPF: Fix potential bad pointer dereference in bpf_sys_bpf() bpf: Don't reinit map value in prealloc_lru_pop bpf: Acquire map uref in .init_seq_private for array map iterator bpf: Acquire map uref in .init_seq_private for hash map iterator bpf: Acquire map uref in .init_seq_private for sock local storage map iterator bpf: Acquire map uref in .init_seq_private for sock{map,hash} iterator bpf: Check the validity of max_rdwr_access for sock local storage map iterator can: mcp251x: Fix race condition on receive interrupt can: j1939: j1939_session_destroy(): fix memory leak of skbs net: atlantic: fix aq_vec index out of range error m68k: coldfire/device.c: protect FLEXCAN blocks sunrpc: fix expiry of auth creds SUNRPC: Fix xdr_encode_bool() SUNRPC: Reinitialise the backchannel request buffers before reuse virtio_net: fix memory leak inside XPD_TX with mergeable devlink: Fix use-after-free after a failed reload net: phy: Warn about incorrect mdio_bus_phy_resume() state net: bcmgenet: Indicate MAC is in charge of PHY PM net: bgmac: Fix a BUG triggered by wrong bytes_compl selftests: forwarding: Fix failing tests with old libnet dt-bindings: arm: qcom: fix Alcatel OneTouch Idol 3 compatibles pinctrl: nomadik: Fix refcount leak in nmk_pinctrl_dt_subnode_to_map pinctrl: qcom: msm8916: Allow CAMSS GP clocks to be muxed pinctrl: amd: Don't save/restore interrupt status and wake status bits pinctrl: sunxi: Add I/O bias setting for H6 R-PIO pinctrl: qcom: sm8250: Fix PDC map Input: exc3000 - fix return value check of wait_for_completion_timeout octeontx2-pf: Fix NIX_AF_TL3_TL2X_LINKX_CFG register configuration octeontx2-af: Apply tx nibble fixup always octeontx2-af: suppress external profile loading warning octeontx2-af: Fix mcam entry resource leak octeontx2-af: Fix key checking for source mac ACPI: property: Return type of acpi_add_nondev_subnodes() should be bool geneve: do not use RT_TOS for IPv6 flowlabel mlx5: do not use RT_TOS for IPv6 flowlabel ipv6: do not use RT_TOS for IPv6 flowlabel plip: avoid rcu debug splat vsock: Fix memory leak in vsock_connect() vsock: Set socket state back to SS_UNCONNECTED in vsock_connect_timeout() dt-bindings: gpio: zynq: Add missing compatible strings dt-bindings: arm: qcom: fix Longcheer L8150 compatibles dt-bindings: arm: qcom: fix MSM8916 MTP compatibles dt-bindings: arm: qcom: fix MSM8994 boards compatibles dt-bindings: clock: qcom,gcc-msm8996: add more GCC clock sources spi: dt-bindings: cadence: add missing 'required' spi: dt-bindings: zynqmp-qspi: add missing 'required' ceph: use correct index when encoding client supported features tools/vm/slabinfo: use alphabetic order when two values are equal ceph: don't leak snap_rwsem in handle_cap_grant kbuild: dummy-tools: avoid tmpdir leak in dummy gcc tools build: Switch to new openssl API for test-libcrypto NTB: ntb_tool: uninitialized heap data in tool_fn_write() nfp: ethtool: fix the display error of `ethtool -m DEVNAME` xen/xenbus: fix return type in xenbus_file_read() atm: idt77252: fix use-after-free bugs caused by tst_timer geneve: fix TOS inheriting for ipv4 perf probe: Fix an error handling path in 'parse_perf_probe_command()' perf parse-events: Fix segfault when event parser gets an error perf tests: Fix Track with sched_switch test for hybrid case dpaa2-eth: trace the allocated address instead of page struct fs/ntfs3: Fix using uninitialized value n when calling indx_read fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr fs/ntfs3: Don't clear upper bits accidentally in log_replay() fs/ntfs3: Fix double free on remount fs/ntfs3: Do not change mode if ntfs_set_ea failed fs/ntfs3: Fix missing i_op in ntfs_read_mft nios2: page fault et.al. are *not* restartable syscalls... nios2: don't leave NULLs in sys_call_table[] nios2: traced syscall does need to check the syscall number nios2: fix syscall restart checks nios2: restarts apply only to the first sigframe we build... nios2: add force_successful_syscall_return() iavf: Fix adminq error handling iavf: Fix reset error handling ASoC: SOF: debug: Fix potential buffer overflow by snprintf() ASoC: tas2770: Set correct FSYNC polarity ASoC: tas2770: Allow mono streams ASoC: tas2770: Drop conflicting set_bias_level power setting ASoC: tas2770: Fix handling of mute/unmute ASoC: codec: tlv320aic32x4: fix mono playback via I2S netfilter: nf_tables: use READ_ONCE and WRITE_ONCE for shared generation id access fs/ntfs3: uninitialized variable in ntfs_set_acl_ex() netfilter: nf_tables: disallow NFTA_SET_ELEM_KEY_END with NFT_SET_ELEM_INTERVAL_END flag netfilter: nf_tables: possible module reference underflow in error path netfilter: nf_tables: really skip inactive sets when allocating name netfilter: nf_tables: validate NFTA_SET_ELEM_OBJREF based on NFT_SET_OBJECT flag netfilter: nf_tables: NFTA_SET_ELEM_KEY_END requires concat and interval flags netfilter: nf_tables: disallow NFT_SET_ELEM_CATCHALL and NFT_SET_ELEM_INTERVAL_END netfilter: nf_tables: check NFT_SET_CONCAT flag if field_count is specified powerpc/pci: Fix get_phb_number() locking spi: meson-spicc: add local pow2 clock ops to preserve rate between messages net/sunrpc: fix potential memory leaks in rpc_sysfs_xprt_state_change() net: dsa: mv88e6060: prevent crash on an unused port mlxsw: spectrum: Clear PTP configuration after unregistering the netdevice net: moxa: pass pdev instead of ndev to DMA functions net: fix potential refcount leak in ndisc_router_discovery() net: dsa: microchip: ksz9477: fix fdb_dump last invalid entry net: dsa: felix: fix ethtool 256-511 and 512-1023 TX packet counters net: genl: fix error path memory leak in policy dumping net: dsa: don't warn in dsa_port_set_state_now() when driver doesn't support it net: dsa: sja1105: fix buffer overflow in sja1105_setup_devlink_regions() ice: Ignore EEXIST when setting promisc mode i2c: imx: Make sure to unregister adapter on remove() regulator: pca9450: Remove restrictions for regulator-name i40e: Fix to stop tx_timeout recovery if GLOBR fails fec: Fix timer capture timing in `fec_ptp_enable_pps()` stmmac: intel: Add a missing clk_disable_unprepare() call in intel_eth_pci_remove() igb: Add lock to avoid data race kbuild: fix the modules order between drivers and libs gcc-plugins: Undefine LATENT_ENTROPY_PLUGIN when plugin disabled for a file tracing/eprobes: Fix reading of string fields drm/imx/dcss: get rid of HPD warning message ASoC: SOF: Intel: hda: Define rom_status_reg in sof_intel_dsp_desc ASoC: SOF: Intel: hda: Fix potential buffer overflow by snprintf() drm/meson: Fix refcount bugs in meson_vpu_has_available_connectors() drm/sun4i: dsi: Prevent underflow when computing packet sizes net: qrtr: start MHI channel after endpoit creation KVM: arm64: Treat PMCR_EL1.LC as RES1 on asymmetric systems KVM: arm64: Reject 32bit user PSTATE on asymmetric systems HID: multitouch: new device class fix Lenovo X12 trackpad sticky PCI: Add ACS quirk for Broadcom BCM5750x NICs platform/chrome: cros_ec_proto: don't show MKBP version if unsupported usb: cdns3 fix use-after-free at workaround 2 usb: cdns3: fix random warning message when driver load usb: gadget: uvc: calculate the number of request depending on framesize usb: gadget: uvc: call uvc uvcg_warn on completed status instead of uvcg_info PCI: aardvark: Fix reporting Slot capabilities on emulated bridge irqchip/tegra: Fix overflow implicit truncation warnings drm/meson: Fix overflow implicit truncation warnings clk: ti: Stop using legacy clkctrl names for omap4 and 5 scsi: ufs: ufs-mediatek: Fix the timing of configuring device regulators usb: host: ohci-ppc-of: Fix refcount leak bug usb: renesas: Fix refcount leak bug usb: dwc2: gadget: remove D+ pull-up while no vbus with usb-role-switch vboxguest: Do not use devm for irq clk: qcom: ipq8074: dont disable gcc_sleep_clk_src uacce: Handle parent device removal or parent driver module rmmod zram: do not lookup algorithm in backends table clk: qcom: clk-alpha-pll: fix clk_trion_pll_configure description scsi: lpfc: Prevent buffer overflow crashes in debugfs with malformed user input scsi: lpfc: Fix possible memory leak when failing to issue CMF WQE gadgetfs: ep_io - wait until IRQ finishes coresight: etm4x: avoid build failure with unrolled loops habanalabs/gaudi: fix shift out of bounds habanalabs/gaudi: mask constant value before cast mmc: tmio: avoid glitches when resetting pinctrl: intel: Check against matching data instead of ACPI companion cxl: Fix a memory leak in an error handling path PCI/ACPI: Guard ARM64-specific mcfg_quirks um: add "noreboot" command line option for PANIC_TIMEOUT=-1 setups dmaengine: dw-axi-dmac: do not print NULL LLI during error dmaengine: dw-axi-dmac: ignore interrupt if no descriptor RDMA/rxe: Limit the number of calls to each tasklet csky/kprobe: reclaim insn_slot on kprobe unregistration selftests/kprobe: Do not test for GRP/ without event failures dmaengine: sprd: Cleanup in .remove() after pm_runtime_get_sync() failed openrisc: io: Define iounmap argument as volatile phy: samsung: phy-exynos-pcie: sanitize init/power_on callbacks md: Notify sysfs sync_completed in md_reap_sync_thread() nvmet-tcp: fix lockdep complaint on nvmet_tcp_wq flush during queue teardown drivers:md:fix a potential use-after-free bug ext4: avoid remove directory when directory is corrupted ext4: avoid resizing to a partial cluster size lib/list_debug.c: Detect uninitialized lists tty: serial: Fix refcount leak bug in ucc_uart.c KVM: PPC: Book3S HV: Fix "rm_exit" entry in debugfs timings vfio: Clear the caps->buf to NULL after free mips: cavium-octeon: Fix missing of_node_put() in octeon2_usb_clocks_start iommu/io-pgtable-arm-v7s: Add a quirk to allow pgtable PA up to 35bit modules: Ensure natural alignment for .altinstructions and __bug_table sections ASoC: rsnd: care default case on rsnd_ssiu_busif_err_irq_ctrl() riscv: dts: sifive: Add fu740 topology information riscv: dts: canaan: Add k210 topology information riscv: mmap with PROT_WRITE but no PROT_READ is invalid RISC-V: Add fast call path of crash_kexec() watchdog: export lockup_detector_reconfigure powerpc/32: Set an IBAT covering up to _einittext during init powerpc/32: Don't always pass -mcpu=powerpc to the compiler ovl: warn if trusted xattr creation fails powerpc/ioda/iommu/debugfs: Generate unique debugfs entries ALSA: core: Add async signal helpers ALSA: timer: Use deferred fasync helper ALSA: control: Use deferred fasync helper f2fs: fix to avoid use f2fs_bug_on() in f2fs_new_node_page() f2fs: fix to do sanity check on segment type in build_sit_entries() smb3: check xattr value length earlier powerpc/64: Init jump labels before parse_early_param() venus: pm_helpers: Fix warning in OPP during probe video: fbdev: i740fb: Check the argument of i740_calc_vclk() MIPS: tlbex: Explicitly compare _PAGE_NO_EXEC against 0 can: j1939: j1939_sk_queue_activate_next_locked(): replace WARN_ON_ONCE with netdev_warn_once() scsi: ufs: ufs-mediatek: Fix build error and type mismatch xfs: flush inodegc workqueue tasks before cancel xfs: reserve quota for dir expansion when linking/unlinking files xfs: reserve quota for target dir expansion when renaming files xfs: remove infinite loop when reserving free block pool xfs: always succeed at setting the reserve pool size xfs: fix overfilling of reserve pool xfs: fix soft lockup via spinning in filestream ag selection loop xfs: revert "xfs: actually bump warning counts when we send warnings" xfs: reject crazy array sizes being fed to XFS_IOC_GETBMAP* Linux 5.15.63 UBUNTU: Upstream stable to v5.15.63 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1990564/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp