Public bug reported:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
upstream stable patchset 2019-11-22
Ported from the following upstream stable releases:
v4.19.84, v5.3.11
from git://git.kernel.org/
bonding: fix state transition issue in link monitoring
CDC-NCM: handle incomplete transfer of MTU
ipv4: Fix table id reference in fib_sync_down_addr
net: ethernet: octeon_mgmt: Account for second possible VLAN header
net: fix data-race in neigh_event_send()
net: qualcomm: rmnet: Fix potential UAF when unregistering
net: usb: qmi_wwan: add support for DW5821e with eSIM support
NFC: fdp: fix incorrect free object
nfc: netlink: fix double device reference drop
NFC: st21nfca: fix double free
qede: fix NULL pointer deref in __qede_remove()
net: mscc: ocelot: don't handle netdev events for other netdevs
net: mscc: ocelot: fix NULL pointer on LAG slave removal
ipv6: fixes rt6_probe() and fib6_nh->last_probe init
net: hns: Fix the stray netpoll locks causing deadlock in NAPI path
ALSA: timer: Fix incorrectly assigned timer instance
ALSA: bebob: fix to detect configured source of sampling clock for Focusrite
Saffire Pro i/o series
ALSA: hda/ca0132 - Fix possible workqueue stall
mm: memcontrol: fix network errors from failing __GFP_ATOMIC charges
mm, meminit: recalculate pcpu batch and high limits after init completes
mm: thp: handle page cache THP correctly in PageTransCompoundMap
mm, vmstat: hide /proc/pagetypeinfo from normal users
dump_stack: avoid the livelock of the dump_lock
tools: gpio: Use !building_out_of_srctree to determine srctree
perf tools: Fix time sorting
drm/radeon: fix si_enable_smc_cac() failed issue
HID: wacom: generic: Treat serial number and related fields as unsigned
soundwire: depend on ACPI
soundwire: bus: set initial value to port_status
arm64: Do not mask out PTE_RDONLY in pte_same()
ceph: fix use-after-free in __ceph_remove_cap()
ceph: add missing check in d_revalidate snapdir handling
iio: adc: stm32-adc: fix stopping dma
iio: imu: adis16480: make sure provided frequency is positive
iio: srf04: fix wrong limitation in distance measuring
ARM: sunxi: Fix CPU powerdown on A83T
netfilter: nf_tables: Align nft_expr private data to 64-bit
netfilter: ipset: Fix an error code in ip_set_sockfn_get()
intel_th: pci: Add Comet Lake PCH support
intel_th: pci: Add Jasper Lake PCH support
x86/apic/32: Avoid bogus LDR warnings
SMB3: Fix persistent handles reconnect
can: usb_8dev: fix use-after-free on disconnect
can: flexcan: disable completely the ECC mechanism
can: c_can: c_can_poll(): only read status register after status IRQ
can: peak_usb: fix a potential out-of-sync while decoding packets
can: rx-offload: can_rx_offload_queue_sorted(): fix error handling, avoid skb
mem leak
can: gs_usb: gs_can_open(): prevent memory leak
can: dev: add missing of_node_put() after calling of_get_child_by_name()
can: mcba_usb: fix use-after-free on disconnect
can: peak_usb: fix slab info leak
configfs: stash the data we need into configfs_buffer at open time
configfs_register_group() shouldn't be (and isn't) called in rmdirable parts
configfs: new object reprsenting tree fragments
configfs: provide exclusion between IO and removals
configfs: fix a deadlock in configfs_symlink()
ALSA: usb-audio: More validations of descriptor units
ALSA: usb-audio: Simplify parse_audio_unit()
ALSA: usb-audio: Unify the release of usb_mixer_elem_info objects
ALSA: usb-audio: Remove superfluous bLength checks
ALSA: usb-audio: Clean up check_input_term()
ALSA: usb-audio: Fix possible NULL dereference at create_yamaha_midi_quirk()
ALSA: usb-audio: remove some dead code
ALSA: usb-audio: Fix copy&paste error in the validator
usbip: Fix vhci_urb_enqueue() URB null transfer buffer error path
usbip: Implement SG support to vhci-hcd and stub driver
PCI: tegra: Enable Relaxed Ordering only for Tegra20 & Tegra30
HID: google: add magnemite/masterball USB ids
dmaengine: xilinx_dma: Fix control reg update in vdma_channel_set_config
dmaengine: sprd: Fix the possible memory leak issue
HID: intel-ish-hid: fix wrong error handling in ishtp_cl_alloc_tx_ring()
RDMA/mlx5: Clear old rate limit when closing QP
iw_cxgb4: fix ECN check on the passive accept
RDMA/qedr: Fix reported firmware version
net/mlx5e: TX, Fix consumer index of error cqe dump
net/mlx5: prevent memory leak in mlx5_fpga_conn_create_cq
scsi: qla2xxx: fixup incorrect usage of host_byte
RDMA/uverbs: Prevent potential underflow
net: openvswitch: free vport unless register_netdevice() succeeds
scsi: lpfc: Honor module parameter lpfc_use_adisc
scsi: qla2xxx: Initialized mailbox to prevent driver load failure
netfilter: nf_flow_table: set timeout before insertion into hashes
ipvs: don't ignore errors in case refcounting ip_vs module fails
ipvs: move old_secure_tcp into struct netns_ipvs
bonding: fix unexpected IFF_BONDING bit unset
macsec: fix refcnt leak in module exit routine
usb: fsl: Check memory resource before releasing it
usb: gadget: udc: atmel: Fix interrupt storm in FIFO mode.
usb: gadget: composite: Fix possible double free memory bug
usb: dwc3: pci: prevent memory leak in dwc3_pci_probe
usb: gadget: configfs: fix concurrent issue between composite APIs
usb: dwc3: remove the call trace of USBx_GFLADJ
perf/x86/amd/ibs: Fix reading of the IBS OpData register and thus precise RIP
validity
perf/x86/amd/ibs: Handle erratum #420 only on the affected CPU family (10h)
perf/x86/uncore: Fix event group support
USB: Skip endpoints with 0 maxpacket length
USB: ldusb: use unsigned size format specifiers
usbip: tools: Fix read_usb_vudc_device() error path handling
RDMA/iw_cxgb4: Avoid freeing skb twice in arp failure case
RDMA/hns: Prevent memory leaks of eq->buf_list
scsi: qla2xxx: stop timer in shutdown path
nvme-multipath: fix possible io hang after ctrl reconnect
fjes: Handle workqueue allocation failure
net: hisilicon: Fix "Trying to free already-free IRQ"
net: mscc: ocelot: fix vlan_filtering when enslaving to bridge before link is up
net: mscc: ocelot: refuse to overwrite the port's native vlan
iommu/amd: Apply the same IVRS IOAPIC workaround to Acer Aspire A315-41
drm/amdgpu: If amdgpu_ib_schedule fails return back the error.
drm/amd/display: Passive DP->HDMI dongle detection fix
hv_netvsc: Fix error handling in netvsc_attach()
usb: dwc3: gadget: fix race when disabling ep with cancelled xfers
NFSv4: Don't allow a cached open with a revoked delegation
net: ethernet: arc: add the missed clk_disable_unprepare
igb: Fix constant media auto sense switching when no cable is connected
e1000: fix memory leaks
pinctrl: intel: Avoid potential glitches if pin is in GPIO mode
ocfs2: protect extent tree in ocfs2_prepare_inode_for_write()
pinctrl: cherryview: Fix irq_valid_mask calculation
blkcg: make blkcg_print_stat() print stats only for online blkgs
iio: imu: mpu6050: Add support for the ICM 20602 IMU
iio: imu: inv_mpu6050: fix no data on MPU6050
mm/filemap.c: don't initiate writeback if mapping has no dirty pages
cgroup,writeback: don't switch wbs immediately on dead wbs if the memcg is dead
usbip: Fix free of unallocated memory in vhci tx
netfilter: ipset: Copy the right MAC address in hash:ip,mac IPv6 sets
net: prevent load/store tearing on sk->sk_stamp
iio: imu: mpu6050: Fix FIFO layout for ICM20602
vsock/virtio: fix sock refcnt holding during the shutdown
x86/speculation/taa: Fix printing of TAA_MSG_SMT on IBRS_ALL CPUs
x86/cpu: Add Tremont to the cpu vulnerability whitelist
Documentation: Add ITLB_MULTIHIT documentation
net/tls: fix sk_msg trim on fallback to copy mode
net/tls: add a TX lock
selftests/tls: add test for concurrent recv and send
net/smc: fix ethernet interface refcounting
perf map: Use zalloc for map_groups
soundwire: depend on ACPI || OF
ASoC: rsnd: dma: fix SSI9 4/5/6/7 busif dma address
ceph: fix RCU case handling in ceph_d_revalidate()
ceph: don't try to handle hashed dentries in non-O_CREAT atomic_open
ceph: don't allow copy_file_range when stripe_count != 1
cpufreq: intel_pstate: Fix invalid EPB setting
dmaengine: sprd: Fix the link-list pointer register configuration issue
dmaengine: xilinx_dma: Fix 64-bit simple AXIDMA transfer
net/mlx5e: Tx, Fix assumption of single WQEBB of NOP in cleanup flow
scsi: ufs-bsg: Wake the device before sending raw upiu commands
bpf: Fix use after free in subprog's jited symbol removal
bpf: Fix use after free in bpf_get_prog_name
xsk: Fix registration of Rx-only sockets
net: phy: smsc: LAN8740: add PHY_RST_AFTER_CLK_EN flag
virt_wifi: fix refcnt leak in module exit routine
hwmon: (ina3221) Fix read timeout issue
sched/topology: Don't try to build empty sched domains
sched/topology: Allow sched_asym_cpucapacity to be disabled
mt76: dma: fix buffer unmap with non-linear skbs
drm/amd/display: do not synchronize "drr" displays
SUNRPC: The RDMA back channel mustn't disappear while requests are outstanding
efi: libstub/arm: Account for firmware reserved memory at the base of RAM
x86, efi: Never relocate kernel below lowest acceptable address
arm64: cpufeature: Enable Qualcomm Falkor errata 1009 for Kryo
arm64: apply ARM64_ERRATUM_845719 workaround for Brahma-B53 core
arm64: Brahma-B53 is SSB and spectre v2 safe
arm64: apply ARM64_ERRATUM_843419 workaround for Brahma-B53 core
arm64: errata: Update stale comment
net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run
UBUNTU: upstream stable to v4.19.84, v5.3.11
** Affects: linux (Ubuntu)
Importance: Undecided
Status: Confirmed
** Affects: linux (Ubuntu Disco)
Importance: Undecided
Assignee: Kamal Mostafa (kamalmostafa)
Status: In Progress
** Tags: kernel-stable-tracking-bug
** Changed in: linux (Ubuntu)
Status: New => Confirmed
** Tags added: kernel-stable-tracking-bug
** Also affects: linux (Ubuntu Disco)
Importance: Undecided
Status: New
** Changed in: linux (Ubuntu Disco)
Status: New => In Progress
** Changed in: linux (Ubuntu Disco)
Assignee: (unassigned) => Kamal Mostafa (kamalmostafa)
** Description changed:
+ SRU Justification
- SRU Justification
+ Impact:
+ The upstream process for stable tree updates is quite similar
+ in scope to the Ubuntu SRU process, e.g., each patch has to
+ demonstrably fix a bug, and each patch is vetted by upstream
+ by originating either directly from a mainline/stable Linux tree or
+ a minimally backported form of that patch. The following upstream
+ stable patches should be included in the Ubuntu kernel:
- Impact:
- The upstream process for stable tree updates is quite similar
- in scope to the Ubuntu SRU process, e.g., each patch has to
- demonstrably fix a bug, and each patch is vetted by upstream
- by originating either directly from a mainline/stable Linux tree or
- a minimally backported form of that patch. The following upstream
- stable patches should be included in the Ubuntu kernel:
+ upstream stable patchset 2019-11-22
- upstream stable patchset 2019-11-22
- from git://git.kernel.org/
+ Ported from the following upstream stable releases:
+ v4.19.84, v5.3.11
+
+ from git://git.kernel.org/
+
+ bonding: fix state transition issue in link monitoring
+ CDC-NCM: handle incomplete transfer of MTU
+ ipv4: Fix table id reference in fib_sync_down_addr
+ net: ethernet: octeon_mgmt: Account for second possible VLAN header
+ net: fix data-race in neigh_event_send()
+ net: qualcomm: rmnet: Fix potential UAF when unregistering
+ net: usb: qmi_wwan: add support for DW5821e with eSIM support
+ NFC: fdp: fix incorrect free object
+ nfc: netlink: fix double device reference drop
+ NFC: st21nfca: fix double free
+ qede: fix NULL pointer deref in __qede_remove()
+ net: mscc: ocelot: don't handle netdev events for other netdevs
+ net: mscc: ocelot: fix NULL pointer on LAG slave removal
+ ipv6: fixes rt6_probe() and fib6_nh->last_probe init
+ net: hns: Fix the stray netpoll locks causing deadlock in NAPI path
+ ALSA: timer: Fix incorrectly assigned timer instance
+ ALSA: bebob: fix to detect configured source of sampling clock for Focusrite
Saffire Pro i/o series
+ ALSA: hda/ca0132 - Fix possible workqueue stall
+ mm: memcontrol: fix network errors from failing __GFP_ATOMIC charges
+ mm, meminit: recalculate pcpu batch and high limits after init completes
+ mm: thp: handle page cache THP correctly in PageTransCompoundMap
+ mm, vmstat: hide /proc/pagetypeinfo from normal users
+ dump_stack: avoid the livelock of the dump_lock
+ tools: gpio: Use !building_out_of_srctree to determine srctree
+ perf tools: Fix time sorting
+ drm/radeon: fix si_enable_smc_cac() failed issue
+ HID: wacom: generic: Treat serial number and related fields as unsigned
+ soundwire: depend on ACPI
+ soundwire: bus: set initial value to port_status
+ arm64: Do not mask out PTE_RDONLY in pte_same()
+ ceph: fix use-after-free in __ceph_remove_cap()
+ ceph: add missing check in d_revalidate snapdir handling
+ iio: adc: stm32-adc: fix stopping dma
+ iio: imu: adis16480: make sure provided frequency is positive
+ iio: srf04: fix wrong limitation in distance measuring
+ ARM: sunxi: Fix CPU powerdown on A83T
+ netfilter: nf_tables: Align nft_expr private data to 64-bit
+ netfilter: ipset: Fix an error code in ip_set_sockfn_get()
+ intel_th: pci: Add Comet Lake PCH support
+ intel_th: pci: Add Jasper Lake PCH support
+ x86/apic/32: Avoid bogus LDR warnings
+ SMB3: Fix persistent handles reconnect
+ can: usb_8dev: fix use-after-free on disconnect
+ can: flexcan: disable completely the ECC mechanism
+ can: c_can: c_can_poll(): only read status register after status IRQ
+ can: peak_usb: fix a potential out-of-sync while decoding packets
+ can: rx-offload: can_rx_offload_queue_sorted(): fix error handling, avoid skb
mem leak
+ can: gs_usb: gs_can_open(): prevent memory leak
+ can: dev: add missing of_node_put() after calling of_get_child_by_name()
+ can: mcba_usb: fix use-after-free on disconnect
+ can: peak_usb: fix slab info leak
+ configfs: stash the data we need into configfs_buffer at open time
+ configfs_register_group() shouldn't be (and isn't) called in rmdirable parts
+ configfs: new object reprsenting tree fragments
+ configfs: provide exclusion between IO and removals
+ configfs: fix a deadlock in configfs_symlink()
+ ALSA: usb-audio: More validations of descriptor units
+ ALSA: usb-audio: Simplify parse_audio_unit()
+ ALSA: usb-audio: Unify the release of usb_mixer_elem_info objects
+ ALSA: usb-audio: Remove superfluous bLength checks
+ ALSA: usb-audio: Clean up check_input_term()
+ ALSA: usb-audio: Fix possible NULL dereference at create_yamaha_midi_quirk()
+ ALSA: usb-audio: remove some dead code
+ ALSA: usb-audio: Fix copy&paste error in the validator
+ usbip: Fix vhci_urb_enqueue() URB null transfer buffer error path
+ usbip: Implement SG support to vhci-hcd and stub driver
+ PCI: tegra: Enable Relaxed Ordering only for Tegra20 & Tegra30
+ HID: google: add magnemite/masterball USB ids
+ dmaengine: xilinx_dma: Fix control reg update in vdma_channel_set_config
+ dmaengine: sprd: Fix the possible memory leak issue
+ HID: intel-ish-hid: fix wrong error handling in ishtp_cl_alloc_tx_ring()
+ RDMA/mlx5: Clear old rate limit when closing QP
+ iw_cxgb4: fix ECN check on the passive accept
+ RDMA/qedr: Fix reported firmware version
+ net/mlx5e: TX, Fix consumer index of error cqe dump
+ net/mlx5: prevent memory leak in mlx5_fpga_conn_create_cq
+ scsi: qla2xxx: fixup incorrect usage of host_byte
+ RDMA/uverbs: Prevent potential underflow
+ net: openvswitch: free vport unless register_netdevice() succeeds
+ scsi: lpfc: Honor module parameter lpfc_use_adisc
+ scsi: qla2xxx: Initialized mailbox to prevent driver load failure
+ netfilter: nf_flow_table: set timeout before insertion into hashes
+ ipvs: don't ignore errors in case refcounting ip_vs module fails
+ ipvs: move old_secure_tcp into struct netns_ipvs
+ bonding: fix unexpected IFF_BONDING bit unset
+ macsec: fix refcnt leak in module exit routine
+ usb: fsl: Check memory resource before releasing it
+ usb: gadget: udc: atmel: Fix interrupt storm in FIFO mode.
+ usb: gadget: composite: Fix possible double free memory bug
+ usb: dwc3: pci: prevent memory leak in dwc3_pci_probe
+ usb: gadget: configfs: fix concurrent issue between composite APIs
+ usb: dwc3: remove the call trace of USBx_GFLADJ
+ perf/x86/amd/ibs: Fix reading of the IBS OpData register and thus precise RIP
validity
+ perf/x86/amd/ibs: Handle erratum #420 only on the affected CPU family (10h)
+ perf/x86/uncore: Fix event group support
+ USB: Skip endpoints with 0 maxpacket length
+ USB: ldusb: use unsigned size format specifiers
+ usbip: tools: Fix read_usb_vudc_device() error path handling
+ RDMA/iw_cxgb4: Avoid freeing skb twice in arp failure case
+ RDMA/hns: Prevent memory leaks of eq->buf_list
+ scsi: qla2xxx: stop timer in shutdown path
+ nvme-multipath: fix possible io hang after ctrl reconnect
+ fjes: Handle workqueue allocation failure
+ net: hisilicon: Fix "Trying to free already-free IRQ"
+ net: mscc: ocelot: fix vlan_filtering when enslaving to bridge before link is
up
+ net: mscc: ocelot: refuse to overwrite the port's native vlan
+ iommu/amd: Apply the same IVRS IOAPIC workaround to Acer Aspire A315-41
+ drm/amdgpu: If amdgpu_ib_schedule fails return back the error.
+ drm/amd/display: Passive DP->HDMI dongle detection fix
+ hv_netvsc: Fix error handling in netvsc_attach()
+ usb: dwc3: gadget: fix race when disabling ep with cancelled xfers
+ NFSv4: Don't allow a cached open with a revoked delegation
+ net: ethernet: arc: add the missed clk_disable_unprepare
+ igb: Fix constant media auto sense switching when no cable is connected
+ e1000: fix memory leaks
+ pinctrl: intel: Avoid potential glitches if pin is in GPIO mode
+ ocfs2: protect extent tree in ocfs2_prepare_inode_for_write()
+ pinctrl: cherryview: Fix irq_valid_mask calculation
+ blkcg: make blkcg_print_stat() print stats only for online blkgs
+ iio: imu: mpu6050: Add support for the ICM 20602 IMU
+ iio: imu: inv_mpu6050: fix no data on MPU6050
+ mm/filemap.c: don't initiate writeback if mapping has no dirty pages
+ cgroup,writeback: don't switch wbs immediately on dead wbs if the memcg is
dead
+ usbip: Fix free of unallocated memory in vhci tx
+ netfilter: ipset: Copy the right MAC address in hash:ip,mac IPv6 sets
+ net: prevent load/store tearing on sk->sk_stamp
+ iio: imu: mpu6050: Fix FIFO layout for ICM20602
+ vsock/virtio: fix sock refcnt holding during the shutdown
+ x86/speculation/taa: Fix printing of TAA_MSG_SMT on IBRS_ALL CPUs
+ x86/cpu: Add Tremont to the cpu vulnerability whitelist
+ Documentation: Add ITLB_MULTIHIT documentation
+ net/tls: fix sk_msg trim on fallback to copy mode
+ net/tls: add a TX lock
+ selftests/tls: add test for concurrent recv and send
+ net/smc: fix ethernet interface refcounting
+ perf map: Use zalloc for map_groups
+ soundwire: depend on ACPI || OF
+ ASoC: rsnd: dma: fix SSI9 4/5/6/7 busif dma address
+ ceph: fix RCU case handling in ceph_d_revalidate()
+ ceph: don't try to handle hashed dentries in non-O_CREAT atomic_open
+ ceph: don't allow copy_file_range when stripe_count != 1
+ cpufreq: intel_pstate: Fix invalid EPB setting
+ dmaengine: sprd: Fix the link-list pointer register configuration issue
+ dmaengine: xilinx_dma: Fix 64-bit simple AXIDMA transfer
+ net/mlx5e: Tx, Fix assumption of single WQEBB of NOP in cleanup flow
+ scsi: ufs-bsg: Wake the device before sending raw upiu commands
+ bpf: Fix use after free in subprog's jited symbol removal
+ bpf: Fix use after free in bpf_get_prog_name
+ xsk: Fix registration of Rx-only sockets
+ net: phy: smsc: LAN8740: add PHY_RST_AFTER_CLK_EN flag
+ virt_wifi: fix refcnt leak in module exit routine
+ hwmon: (ina3221) Fix read timeout issue
+ sched/topology: Don't try to build empty sched domains
+ sched/topology: Allow sched_asym_cpucapacity to be disabled
+ mt76: dma: fix buffer unmap with non-linear skbs
+ drm/amd/display: do not synchronize "drr" displays
+ SUNRPC: The RDMA back channel mustn't disappear while requests are outstanding
+ efi: libstub/arm: Account for firmware reserved memory at the base of RAM
+ x86, efi: Never relocate kernel below lowest acceptable address
+ arm64: cpufeature: Enable Qualcomm Falkor errata 1009 for Kryo
+ arm64: apply ARM64_ERRATUM_845719 workaround for Brahma-B53 core
+ arm64: Brahma-B53 is SSB and spectre v2 safe
+ arm64: apply ARM64_ERRATUM_843419 workaround for Brahma-B53 core
+ arm64: errata: Update stale comment
+ net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run
+ UBUNTU: upstream stable to v4.19.84, v5.3.11
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1853659
Title:
Disco update: upstream stable patchset 2019-11-22
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1853659/+subscriptions
--
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
