Public bug reported:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
v5.4.50 upstream stable release
from git://git.kernel.org/
block/bio-integrity: don't free 'buf' if bio_integrity_add_page() failed
enetc: Fix tx rings bitmap iteration range, irq handling
geneve: allow changing DF behavior after creation
ibmveth: Fix max MTU limit
mld: fix memory leak in ipv6_mc_destroy_dev()
mvpp2: ethtool rxtx stats fix
net: bridge: enfore alignment for ethernet address
net: core: reduce recursion limit value
net: Do not clear the sock TX queue in sk_set_socket()
net: fix memleak in register_netdevice()
net: Fix the arp error in some cases
net: increment xmit_recursion level in dev_direct_xmit()
net: usb: ax88179_178a: fix packet alignment padding
openvswitch: take into account de-fragmentation/gso_size in
execute_check_pkt_len
rocker: fix incorrect error handling in dma_rings_init
rxrpc: Fix notification call on completion of discarded calls
sctp: Don't advertise IPv4 addresses if ipv6only is set on the socket
tcp: don't ignore ECN CWR on pure ACK
tcp: grow window for OOO packets only for SACK flows
tg3: driver sleeps indefinitely when EEH errors exceed eeh_max_freezes
ip6_gre: fix use-after-free in ip6gre_tunnel_lookup()
net: phy: Check harder for errors in get_phy_id()
ip_tunnel: fix use-after-free in ip_tunnel_lookup()
sch_cake: don't try to reallocate or unshare skb unconditionally
sch_cake: don't call diffserv parsing code when it is not needed
sch_cake: fix a few style nits
tcp_cubic: fix spurious HYSTART_DELAY exit upon drop in min RTT
Revert "i2c: tegra: Fix suspending in active runtime PM state"
btrfs: fix a block group ref counter leak after failure to remove block group
net: sched: export __netdev_watchdog_up()
fix a braino in "sparc32: fix register window handling in genregs32_[gs]et()"
ALSA: usb-audio: Fix potential use-after-free of streams
binder: fix null deref of proc->context
USB: ohci-sm501: Add missed iounmap() in remove
usb: dwc2: Postponed gadget registration to the udc class driver
usb: add USB_QUIRK_DELAY_INIT for Logitech C922
USB: ehci: reopen solution for Synopsys HC bug
usb: host: xhci-mtk: avoid runtime suspend when removing hcd
xhci: Poll for U0 after disabling USB2 LPM
usb: host: ehci-exynos: Fix error check in exynos_ehci_probe()
usb: typec: tcpci_rt1711h: avoid screaming irq causing boot hangs
ALSA: usb-audio: Add implicit feedback quirk for SSL2+.
ALSA: usb-audio: add quirk for Denon DCD-1500RE
ALSA: usb-audio: add quirk for Samsung USBC Headset (AKG)
ALSA: usb-audio: Fix OOB access of mixer element list
usb: cdns3: trace: using correct dir value
usb: cdns3: ep0: fix the test mode set incorrectly
usb: cdns3: ep0: add spinlock for cdns3_check_new_setup
scsi: qla2xxx: Keep initiator ports after RSCN
scsi: zfcp: Fix panic on ERP timeout for previously dismissed ERP action
cifs: Fix cached_fid refcnt leak in open_shroot
cifs/smb3: Fix data inconsistent when punch hole
cifs/smb3: Fix data inconsistent when zero file range
xhci: Fix incorrect EP_STATE_MASK
xhci: Fix enumeration issue when setting max packet size for FS devices.
xhci: Return if xHCI doesn't support LPM
cdc-acm: Add DISABLE_ECHO quirk for Microchip/SMSC chip
loop: replace kill_bdev with invalidate_bdev
IB/mad: Fix use after free when destroying MAD agent
IB/hfi1: Fix module use count flaw due to leftover module put calls
bus: ti-sysc: Flush posted write on enable and disable
bus: ti-sysc: Ignore clockactivity unless specified as a quirk
ARM: OMAP2+: Fix legacy mode dss_reset
xfrm: Fix double ESP trailer insertion in IPsec crypto offload.
ASoC: q6asm: handle EOS correctly
efi/tpm: Verify event log header before parsing
efi/esrt: Fix reference count leak in esre_create_sysfs_entry.
ASoc: q6afe: add support to get port direction
ASoC: qcom: common: set correct directions for dailinks
regualtor: pfuze100: correct sw1a/sw2 on pfuze3000
RDMA/siw: Fix pointer-to-int-cast warning in siw_rx_pbl()
ASoC: fsl_ssi: Fix bclk calculation for mono channel
samples/bpf: xdp_redirect_cpu: Set MAX_CPUS according to NR_CPUS
bpf, xdp, samples: Fix null pointer dereference in *_user code
ARM: dts: am335x-pocketbeagle: Fix mmc0 Write Protect
ARM: dts: Fix duovero smsc interrupt for suspend
x86/resctrl: Fix a NULL vs IS_ERR() static checker warning in rdt_cdp_peer_get()
regmap: Fix memory leak from regmap_register_patch
devmap: Use bpf_map_area_alloc() for allocating hash buckets
bpf: Don't return EINVAL from {get,set}sockopt when optlen > PAGE_SIZE
ARM: dts: NSP: Correct FA2 mailbox node
rxrpc: Fix handling of rwind from an ACK packet
RDMA/rvt: Fix potential memory leak caused by rvt_alloc_rq
RDMA/qedr: Fix KASAN: use-after-free in ucma_event_handler+0x532
RDMA/cma: Protect bind_list and listen_list while finding matching cm id
ASoC: rockchip: Fix a reference count leak.
s390/qeth: fix error handling for isolation mode cmds
RDMA/mad: Fix possible memory leak in ib_mad_post_receive_mads()
selftests/net: report etf errors correctly
iommu/vt-d: Enable PCI ACS for platform opt in hint
iommu/vt-d: Update scalable mode paging structure coherency
net: qed: fix left elements count calculation
net: qed: fix async event callbacks unregistering
net: qede: stop adding events on an already destroyed workqueue
net: qed: fix NVMe login fails over VFs
net: qed: fix excessive QM ILT lines consumption
net: qede: fix PTP initialization on recovery
net: qede: fix use-after-free on recovery and AER handling
cxgb4: move handling L2T ARP failures to caller
ARM: imx5: add missing put_device() call in imx_suspend_alloc_ocram()
scsi: lpfc: Avoid another null dereference in lpfc_sli4_hba_unset()
usb: gadget: udc: Potential Oops in error handling code
usb: renesas_usbhs: getting residue from callback_result
nvme: don't protect ns mutation with ns->head->lock
netfilter: ipset: fix unaligned atomic access
net: bcmgenet: use hardware padding of runt frames
clk: sifive: allocate sufficient memory for struct __prci_data
i2c: fsi: Fix the port number field in status register
i2c: core: check returned size of emulated smbus block read
afs: Fix storage of cell names
sched/deadline: Initialize ->dl_boosted
sched/core: Fix PI boosting between RT and DEADLINE tasks
sata_rcar: handle pm_runtime_get_sync failure cases
ata/libata: Fix usage of page address by page_address in
ata_scsi_mode_select_xlat function
drm/amd/display: Use kfree() to free rgb_user in calculate_user_regamma_ramp()
riscv/atomic: Fix sign extension for RV64I
hwrng: ks-sa - Fix runtime PM imbalance on error
ibmvnic: Harden device login requests
net: alx: fix race condition in alx_remove
test_objagg: Fix potential memory leak in error handling
pinctrl: qcom: spmi-gpio: fix warning about irq chip reusage
pinctrl: tegra: Use noirq suspend/resume callbacks
s390/ptrace: pass invalid syscall numbers to tracing
s390/ptrace: fix setting syscall number
s390/vdso: Use $(LD) instead of $(CC) to link vDSO
s390/vdso: fix vDSO clock_getres()
arm64: sve: Fix build failure when ARM64_SVE=y and SYSCTL=n
kbuild: improve cc-option to clean up all temporary files
recordmcount: support >64k sections
kprobes: Suppress the suspicious RCU warning on kprobes
blktrace: break out of blktrace setup on concurrent calls
block: update hctx map when use multiple maps
RISC-V: Don't allow write+exec only page mapping request in mmap
ALSA: hda: Add NVIDIA codec IDs 9a & 9d through a0 to patch table
ALSA: hda/realtek - Add quirk for MSI GE63 laptop
ACPI: sysfs: Fix pm_profile_attr type
erofs: fix partially uninitialized misuse in z_erofs_onlinepage_fixup
KVM: X86: Fix MSR range of APIC registers in X2APIC mode
KVM: nVMX: Plumb L2 GPA through to PML emulation
KVM: VMX: Stop context switching MSR_IA32_UMWAIT_CONTROL
x86/cpu: Use pinning mask for CR4 bits needing to be 0
x86/asm/64: Align start of __clear_user() loop to 16-bytes
btrfs: fix bytes_may_use underflow when running balance and scrub in parallel
btrfs: fix data block group relocation failure due to concurrent scrub
btrfs: check if a log root exists before locking the log_mutex on unlink
btrfs: fix failure of RWF_NOWAIT write into prealloc extent beyond eof
mm/slab: use memzero_explicit() in kzfree()
ocfs2: avoid inode removal while nfsd is accessing it
ocfs2: load global_inode_alloc
ocfs2: fix value of OCFS2_INVALID_SLOT
ocfs2: fix panic on nfs server over ocfs2
mm/memcontrol.c: add missed css_put()
arm64: perf: Report the PC value in REGS_ABI_32 mode
arm64: dts: imx8mm-evk: correct ldo1/ldo2 voltage range
arm64: dts: imx8mn-ddr4-evk: correct ldo1/ldo2 voltage range
tracing: Fix event trigger to accept redundant spaces
ring-buffer: Zero out time extend if it is nested and not absolute
drm/amd: fix potential memleak in err branch
drm: rcar-du: Fix build error
drm/radeon: fix fb_div check in ni_init_smc_spll_table()
drm/amdgpu: add fw release for sdma v5_0
Staging: rtl8723bs: prevent buffer overflow in update_sta_support_rate()
sunrpc: fixed rollback in rpc_gssd_dummy_populate()
SUNRPC: Properly set the @subbuf parameter of xdr_buf_subsegment()
pNFS/flexfiles: Fix list corruption if the mirror count changes
NFSv4 fix CLOSE not waiting for direct IO compeletion
xprtrdma: Fix handling of RDMA_ERROR replies
dm writecache: correct uncommitted_block when discarding uncommitted entry
dm writecache: add cond_resched to loop in persistent_memory_claim()
xfs: add agf freeblocks verify in xfs_agf_verify
Revert "tty: hvc: Fix data abort due to race in hvc_open"
Linux 5.4.50
UBUNTU: upstream stable to v5.4.50
** Affects: linux (Ubuntu)
Importance: Undecided
Status: Confirmed
** Affects: linux (Ubuntu Focal)
Importance: Undecided
Assignee: Kamal Mostafa (kamalmostafa)
Status: In Progress
** Tags: kernel-stable-tracking-bug
** Changed in: linux (Ubuntu)
Status: New => Confirmed
** Tags added: kernel-stable-tracking-bug
** Also affects: linux (Ubuntu Focal)
Importance: Undecided
Status: New
** Changed in: linux (Ubuntu Focal)
Status: New => In Progress
** Changed in: linux (Ubuntu Focal)
Assignee: (unassigned) => Kamal Mostafa (kamalmostafa)
** Description changed:
+ SRU Justification
- SRU Justification
+ Impact:
+ The upstream process for stable tree updates is quite similar
+ in scope to the Ubuntu SRU process, e.g., each patch has to
+ demonstrably fix a bug, and each patch is vetted by upstream
+ by originating either directly from a mainline/stable Linux tree or
+ a minimally backported form of that patch. The following upstream
+ stable patches should be included in the Ubuntu kernel:
- Impact:
- The upstream process for stable tree updates is quite similar
- in scope to the Ubuntu SRU process, e.g., each patch has to
- demonstrably fix a bug, and each patch is vetted by upstream
- by originating either directly from a mainline/stable Linux tree or
- a minimally backported form of that patch. The following upstream
- stable patches should be included in the Ubuntu kernel:
+ v5.4.50 upstream stable release
+ from git://git.kernel.org/
- v5.4.50 upstream stable release
- from git://git.kernel.org/
+ block/bio-integrity: don't free 'buf' if bio_integrity_add_page() failed
+ enetc: Fix tx rings bitmap iteration range, irq handling
+ geneve: allow changing DF behavior after creation
+ ibmveth: Fix max MTU limit
+ mld: fix memory leak in ipv6_mc_destroy_dev()
+ mvpp2: ethtool rxtx stats fix
+ net: bridge: enfore alignment for ethernet address
+ net: core: reduce recursion limit value
+ net: Do not clear the sock TX queue in sk_set_socket()
+ net: fix memleak in register_netdevice()
+ net: Fix the arp error in some cases
+ net: increment xmit_recursion level in dev_direct_xmit()
+ net: usb: ax88179_178a: fix packet alignment padding
+ openvswitch: take into account de-fragmentation/gso_size in
execute_check_pkt_len
+ rocker: fix incorrect error handling in dma_rings_init
+ rxrpc: Fix notification call on completion of discarded calls
+ sctp: Don't advertise IPv4 addresses if ipv6only is set on the socket
+ tcp: don't ignore ECN CWR on pure ACK
+ tcp: grow window for OOO packets only for SACK flows
+ tg3: driver sleeps indefinitely when EEH errors exceed eeh_max_freezes
+ ip6_gre: fix use-after-free in ip6gre_tunnel_lookup()
+ net: phy: Check harder for errors in get_phy_id()
+ ip_tunnel: fix use-after-free in ip_tunnel_lookup()
+ sch_cake: don't try to reallocate or unshare skb unconditionally
+ sch_cake: don't call diffserv parsing code when it is not needed
+ sch_cake: fix a few style nits
+ tcp_cubic: fix spurious HYSTART_DELAY exit upon drop in min RTT
+ Revert "i2c: tegra: Fix suspending in active runtime PM state"
+ btrfs: fix a block group ref counter leak after failure to remove block group
+ net: sched: export __netdev_watchdog_up()
+ fix a braino in "sparc32: fix register window handling in genregs32_[gs]et()"
+ ALSA: usb-audio: Fix potential use-after-free of streams
+ binder: fix null deref of proc->context
+ USB: ohci-sm501: Add missed iounmap() in remove
+ usb: dwc2: Postponed gadget registration to the udc class driver
+ usb: add USB_QUIRK_DELAY_INIT for Logitech C922
+ USB: ehci: reopen solution for Synopsys HC bug
+ usb: host: xhci-mtk: avoid runtime suspend when removing hcd
+ xhci: Poll for U0 after disabling USB2 LPM
+ usb: host: ehci-exynos: Fix error check in exynos_ehci_probe()
+ usb: typec: tcpci_rt1711h: avoid screaming irq causing boot hangs
+ ALSA: usb-audio: Add implicit feedback quirk for SSL2+.
+ ALSA: usb-audio: add quirk for Denon DCD-1500RE
+ ALSA: usb-audio: add quirk for Samsung USBC Headset (AKG)
+ ALSA: usb-audio: Fix OOB access of mixer element list
+ usb: cdns3: trace: using correct dir value
+ usb: cdns3: ep0: fix the test mode set incorrectly
+ usb: cdns3: ep0: add spinlock for cdns3_check_new_setup
+ scsi: qla2xxx: Keep initiator ports after RSCN
+ scsi: zfcp: Fix panic on ERP timeout for previously dismissed ERP action
+ cifs: Fix cached_fid refcnt leak in open_shroot
+ cifs/smb3: Fix data inconsistent when punch hole
+ cifs/smb3: Fix data inconsistent when zero file range
+ xhci: Fix incorrect EP_STATE_MASK
+ xhci: Fix enumeration issue when setting max packet size for FS devices.
+ xhci: Return if xHCI doesn't support LPM
+ cdc-acm: Add DISABLE_ECHO quirk for Microchip/SMSC chip
+ loop: replace kill_bdev with invalidate_bdev
+ IB/mad: Fix use after free when destroying MAD agent
+ IB/hfi1: Fix module use count flaw due to leftover module put calls
+ bus: ti-sysc: Flush posted write on enable and disable
+ bus: ti-sysc: Ignore clockactivity unless specified as a quirk
+ ARM: OMAP2+: Fix legacy mode dss_reset
+ xfrm: Fix double ESP trailer insertion in IPsec crypto offload.
+ ASoC: q6asm: handle EOS correctly
+ efi/tpm: Verify event log header before parsing
+ efi/esrt: Fix reference count leak in esre_create_sysfs_entry.
+ ASoc: q6afe: add support to get port direction
+ ASoC: qcom: common: set correct directions for dailinks
+ regualtor: pfuze100: correct sw1a/sw2 on pfuze3000
+ RDMA/siw: Fix pointer-to-int-cast warning in siw_rx_pbl()
+ ASoC: fsl_ssi: Fix bclk calculation for mono channel
+ samples/bpf: xdp_redirect_cpu: Set MAX_CPUS according to NR_CPUS
+ bpf, xdp, samples: Fix null pointer dereference in *_user code
+ ARM: dts: am335x-pocketbeagle: Fix mmc0 Write Protect
+ ARM: dts: Fix duovero smsc interrupt for suspend
+ x86/resctrl: Fix a NULL vs IS_ERR() static checker warning in
rdt_cdp_peer_get()
+ regmap: Fix memory leak from regmap_register_patch
+ devmap: Use bpf_map_area_alloc() for allocating hash buckets
+ bpf: Don't return EINVAL from {get,set}sockopt when optlen > PAGE_SIZE
+ ARM: dts: NSP: Correct FA2 mailbox node
+ rxrpc: Fix handling of rwind from an ACK packet
+ RDMA/rvt: Fix potential memory leak caused by rvt_alloc_rq
+ RDMA/qedr: Fix KASAN: use-after-free in ucma_event_handler+0x532
+ RDMA/cma: Protect bind_list and listen_list while finding matching cm id
+ ASoC: rockchip: Fix a reference count leak.
+ s390/qeth: fix error handling for isolation mode cmds
+ RDMA/mad: Fix possible memory leak in ib_mad_post_receive_mads()
+ selftests/net: report etf errors correctly
+ iommu/vt-d: Enable PCI ACS for platform opt in hint
+ iommu/vt-d: Update scalable mode paging structure coherency
+ net: qed: fix left elements count calculation
+ net: qed: fix async event callbacks unregistering
+ net: qede: stop adding events on an already destroyed workqueue
+ net: qed: fix NVMe login fails over VFs
+ net: qed: fix excessive QM ILT lines consumption
+ net: qede: fix PTP initialization on recovery
+ net: qede: fix use-after-free on recovery and AER handling
+ cxgb4: move handling L2T ARP failures to caller
+ ARM: imx5: add missing put_device() call in imx_suspend_alloc_ocram()
+ scsi: lpfc: Avoid another null dereference in lpfc_sli4_hba_unset()
+ usb: gadget: udc: Potential Oops in error handling code
+ usb: renesas_usbhs: getting residue from callback_result
+ nvme: don't protect ns mutation with ns->head->lock
+ netfilter: ipset: fix unaligned atomic access
+ net: bcmgenet: use hardware padding of runt frames
+ clk: sifive: allocate sufficient memory for struct __prci_data
+ i2c: fsi: Fix the port number field in status register
+ i2c: core: check returned size of emulated smbus block read
+ afs: Fix storage of cell names
+ sched/deadline: Initialize ->dl_boosted
+ sched/core: Fix PI boosting between RT and DEADLINE tasks
+ sata_rcar: handle pm_runtime_get_sync failure cases
+ ata/libata: Fix usage of page address by page_address in
ata_scsi_mode_select_xlat function
+ drm/amd/display: Use kfree() to free rgb_user in calculate_user_regamma_ramp()
+ riscv/atomic: Fix sign extension for RV64I
+ hwrng: ks-sa - Fix runtime PM imbalance on error
+ ibmvnic: Harden device login requests
+ net: alx: fix race condition in alx_remove
+ test_objagg: Fix potential memory leak in error handling
+ pinctrl: qcom: spmi-gpio: fix warning about irq chip reusage
+ pinctrl: tegra: Use noirq suspend/resume callbacks
+ s390/ptrace: pass invalid syscall numbers to tracing
+ s390/ptrace: fix setting syscall number
+ s390/vdso: Use $(LD) instead of $(CC) to link vDSO
+ s390/vdso: fix vDSO clock_getres()
+ arm64: sve: Fix build failure when ARM64_SVE=y and SYSCTL=n
+ kbuild: improve cc-option to clean up all temporary files
+ recordmcount: support >64k sections
+ kprobes: Suppress the suspicious RCU warning on kprobes
+ blktrace: break out of blktrace setup on concurrent calls
+ block: update hctx map when use multiple maps
+ RISC-V: Don't allow write+exec only page mapping request in mmap
+ ALSA: hda: Add NVIDIA codec IDs 9a & 9d through a0 to patch table
+ ALSA: hda/realtek - Add quirk for MSI GE63 laptop
+ ACPI: sysfs: Fix pm_profile_attr type
+ erofs: fix partially uninitialized misuse in z_erofs_onlinepage_fixup
+ KVM: X86: Fix MSR range of APIC registers in X2APIC mode
+ KVM: nVMX: Plumb L2 GPA through to PML emulation
+ KVM: VMX: Stop context switching MSR_IA32_UMWAIT_CONTROL
+ x86/cpu: Use pinning mask for CR4 bits needing to be 0
+ x86/asm/64: Align start of __clear_user() loop to 16-bytes
+ btrfs: fix bytes_may_use underflow when running balance and scrub in parallel
+ btrfs: fix data block group relocation failure due to concurrent scrub
+ btrfs: check if a log root exists before locking the log_mutex on unlink
+ btrfs: fix failure of RWF_NOWAIT write into prealloc extent beyond eof
+ mm/slab: use memzero_explicit() in kzfree()
+ ocfs2: avoid inode removal while nfsd is accessing it
+ ocfs2: load global_inode_alloc
+ ocfs2: fix value of OCFS2_INVALID_SLOT
+ ocfs2: fix panic on nfs server over ocfs2
+ mm/memcontrol.c: add missed css_put()
+ arm64: perf: Report the PC value in REGS_ABI_32 mode
+ arm64: dts: imx8mm-evk: correct ldo1/ldo2 voltage range
+ arm64: dts: imx8mn-ddr4-evk: correct ldo1/ldo2 voltage range
+ tracing: Fix event trigger to accept redundant spaces
+ ring-buffer: Zero out time extend if it is nested and not absolute
+ drm/amd: fix potential memleak in err branch
+ drm: rcar-du: Fix build error
+ drm/radeon: fix fb_div check in ni_init_smc_spll_table()
+ drm/amdgpu: add fw release for sdma v5_0
+ Staging: rtl8723bs: prevent buffer overflow in update_sta_support_rate()
+ sunrpc: fixed rollback in rpc_gssd_dummy_populate()
+ SUNRPC: Properly set the @subbuf parameter of xdr_buf_subsegment()
+ pNFS/flexfiles: Fix list corruption if the mirror count changes
+ NFSv4 fix CLOSE not waiting for direct IO compeletion
+ xprtrdma: Fix handling of RDMA_ERROR replies
+ dm writecache: correct uncommitted_block when discarding uncommitted entry
+ dm writecache: add cond_resched to loop in persistent_memory_claim()
+ xfs: add agf freeblocks verify in xfs_agf_verify
+ Revert "tty: hvc: Fix data abort due to race in hvc_open"
+ Linux 5.4.50
+ UBUNTU: upstream stable to v5.4.50
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1885942
Title:
Focal update: v5.4.50 upstream stable release
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1885942/+subscriptions
--
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
