Public bug reported: SRU Justification
Impact: The upstream process for stable tree updates is quite similar in scope to the Ubuntu SRU process, e.g., each patch has to demonstrably fix a bug, and each patch is vetted by upstream by originating either directly from a mainline/stable Linux tree or a minimally backported form of that patch. The following upstream stable patches should be included in the Ubuntu kernel: upstream stable patchset 2021-11-10 Ported from the following upstream stable releases: v5.10.71, v5.14.10 from git://git.kernel.org/ tty: Fix out-of-bound vmalloc access in imageblit cpufreq: schedutil: Use kobject release() method to free sugov_tunables scsi: qla2xxx: Changes to support kdump kernel for NVMe BFS cpufreq: schedutil: Destroy mutex before kobject_put() frees the memory usb: cdns3: fix race condition before setting doorbell ACPI: NFIT: Use fallback node id when numa info in NFIT table is incorrect fs-verity: fix signed integer overflow with i_size near S64_MAX hwmon: (tmp421) handle I2C errors hwmon: (w83793) Fix NULL pointer dereference by removing unnecessary structure field hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary structure field hwmon: (w83791d) Fix NULL pointer dereference by removing unnecessary structure field gpio: pca953x: do not ignore i2c errors scsi: ufs: Fix illegal offset in UPIU event trace mac80211: fix use-after-free in CCMP/GCMP RX x86/kvmclock: Move this_cpu_pvti into kvmclock.h KVM: x86: Fix stack-out-of-bounds memory access from ioapic_write_indirect() KVM: x86: nSVM: don't copy virt_ext from vmcb12 KVM: nVMX: Filter out all unsupported controls when eVMCS was activated media: ir_toy: prevent device from hanging during transmit RDMA/cma: Do not change route.addr.src_addr.ss_family drm/amd/display: Pass PCI deviceid into DC drm/amdgpu: correct initial cp_hqd_quantum for gfx9 ipvs: check that ip_vs_conn_tab_bits is between 8 and 20 bpf: Handle return value of BPF_PROG_TYPE_STRUCT_OPS prog IB/cma: Do not send IGMP leaves for sendonly Multicast groups RDMA/cma: Fix listener leak in rdma_cma_listen_on_all() failure bpf, mips: Validate conditional branch offsets hwmon: (mlxreg-fan) Return non-zero value when fan current state is enforced from sysfs mac80211: Fix ieee80211_amsdu_aggregate frag_tail bug mac80211: limit injected vht mcs/nss in ieee80211_parse_tx_radiotap mac80211: mesh: fix potentially unaligned access mac80211-hwsim: fix late beacon hrtimer handling sctp: break out if skb_header_pointer returns NULL in sctp_rcv_ootb mptcp: don't return sockets in foreign netns hwmon: (tmp421) report /PVLD condition as fault hwmon: (tmp421) fix rounding for negative values net: enetc: fix the incorrect clearing of IF_MODE bits net: ipv4: Fix rtnexthop len when RTA_FLOW is present smsc95xx: fix stalled rx after link change drm/i915/request: fix early tracepoints dsa: mv88e6xxx: 6161: Use chip wide MAX MTU dsa: mv88e6xxx: Fix MTU definition dsa: mv88e6xxx: Include tagger overhead when setting MTU for DSA and CPU ports e100: fix length calculation in e100_get_regs_len e100: fix buffer overrun in e100_get_regs bpf: Exempt CAP_BPF from checks against bpf_jit_limit selftests, bpf: Fix makefile dependencies on libbpf selftests, bpf: test_lwt_ip_encap: Really disable rp_filter UBUNTU: [Config] updateconfigs for ks8851 modules net: ks8851: fix link error scsi: csiostor: Add module softdep on cxgb4 ixgbe: Fix NULL pointer dereference in ixgbe_xdp_setup net: hns3: do not allow call hns3_nic_net_open repeatedly net: hns3: fix mixed flag HCLGE_FLAG_MQPRIO_ENABLE and HCLGE_FLAG_DCB_ENABLE net: hns3: fix show wrong state when add existing uc mac address net: hns3: fix prototype warning net: hns3: reconstruct function hns3_self_test net: hns3: fix always enable rx vlan filter problem after selftest net: phy: bcm7xxx: Fixed indirect MMD operations net: sched: flower: protect fl_walk() with rcu af_unix: fix races in sk_peer_pid and sk_peer_cred accesses perf/x86/intel: Update event constraints for ICX hwmon: (pmbus/mp2975) Add missed POUT attribute for page 1 mp2975 controller nvme: add command id quirk for apple controllers elf: don't use MAP_FIXED_NOREPLACE for elf interpreter mappings debugfs: debugfs_create_file_size(): use IS_ERR to check for error ipack: ipoctal: fix stack information leak ipack: ipoctal: fix tty registration race ipack: ipoctal: fix tty-registration error handling ipack: ipoctal: fix missing allocation-failure check ipack: ipoctal: fix module reference leak ext4: fix loff_t overflow in ext4_max_bitmap_size() ext4: limit the number of blocks in one ADD_RANGE TLV ext4: fix reserved space counter leakage ext4: add error checking to ext4_ext_replay_set_iblocks() ext4: fix potential infinite loop in ext4_dx_readdir() HID: u2fzero: ignore incomplete packets without data net: udp: annotate data race around udp_sk(sk)->corkflag ASoC: dapm: use component prefix when checking widget names usb: hso: remove the bailout parameter HID: betop: fix slab-out-of-bounds Write in betop_probe netfilter: ipset: Fix oversized kvmalloc() calls mm: don't allow oversized kvmalloc() calls HID: usbhid: free raw_report buffers in usbhid_stop KVM: x86: Handle SRCU initialization failure during page track init netfilter: conntrack: serialize hash resizes and cleanups netfilter: nf_tables: Fix oversized kvmalloc() calls media: cedrus: Fix SUNXI tile size calculation media: s5p-jpeg: rename JPEG marker constants to prevent build warnings ASoC: fsl_spdif: register platform component before registering cpu dai ASoC: fsl_xcvr: register platform component before registering cpu dai ASoC: mediatek: common: handle NULL case in suspend/resume function ASoC: SOF: Fix DSP oops stack dump output contents ASoC: SOF: imx: imx8: Bar index is only valid for IRAM and SRAM types ASoC: SOF: imx: imx8m: Bar index is only valid for IRAM and SRAM types pinctrl: qcom: spmi-gpio: correct parent irqspec translation s390/qeth: Fix deadlock in remove_discipline s390/qeth: fix deadlock during failing recovery m68k: Update ->thread.esp0 before calling syscall_trace() in ret_from_signal NIOS2: fix kconfig unmet dependency warning for SERIAL_CORE_CONSOLE kasan: fix Kconfig check of CC_HAS_WORKING_NOSANITIZE_ADDRESS perf test: Fix DWARF unwind for optimized builds. watchdog/sb_watchdog: fix compilation problem due to COMPILE_TEST ALSA: firewire-motu: fix truncated bytes in message tracepoints RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests nbd: use shifts rather than multiplies drm/amd/display: initialize backlight_ramping_override to false drm/amdgpu: check tiling flags when creating FB on GFX8- RDMA/hns: Fix the size setting error when copying CQE in clean_cq() RDMA/hns: Add the check of the CQE size of the user space net: hns3: remove tc enable checking net: hns3: don't rollback when destroy mqprio fail net: hns3: disable firmware compatible features when uninstall PF hwmon: (occ) Fix P10 VRM temp sensors ext4: flush s_error_work before journal destroy in ext4_fill_super UBUNTU: upstream stable to v5.10.71, v5.14.10 ** Affects: linux (Ubuntu) Importance: Undecided Status: Invalid ** Affects: linux (Ubuntu Hirsute) Importance: Medium Assignee: Kamal Mostafa (kamalmostafa) Status: In Progress ** Tags: kernel-stable-tracking-bug ** Changed in: linux (Ubuntu) Status: New => Confirmed ** Tags added: kernel-stable-tracking-bug ** Also affects: linux (Ubuntu Hirsute) Importance: Undecided Status: New ** Changed in: linux (Ubuntu Hirsute) Status: New => In Progress ** Changed in: linux (Ubuntu Hirsute) Importance: Undecided => Medium ** Changed in: linux (Ubuntu Hirsute) Assignee: (unassigned) => Kamal Mostafa (kamalmostafa) ** Changed in: linux (Ubuntu) Status: Confirmed => Invalid ** Description changed: + SRU Justification - SRU Justification + Impact: + The upstream process for stable tree updates is quite similar + in scope to the Ubuntu SRU process, e.g., each patch has to + demonstrably fix a bug, and each patch is vetted by upstream + by originating either directly from a mainline/stable Linux tree or + a minimally backported form of that patch. The following upstream + stable patches should be included in the Ubuntu kernel: - Impact: - The upstream process for stable tree updates is quite similar - in scope to the Ubuntu SRU process, e.g., each patch has to - demonstrably fix a bug, and each patch is vetted by upstream - by originating either directly from a mainline/stable Linux tree or - a minimally backported form of that patch. The following upstream - stable patches should be included in the Ubuntu kernel: + upstream stable patchset 2021-11-10 - upstream stable patchset 2021-11-10 - from git://git.kernel.org/ + Ported from the following upstream stable releases: + v5.10.71, v5.14.10 + + from git://git.kernel.org/ + + tty: Fix out-of-bound vmalloc access in imageblit + cpufreq: schedutil: Use kobject release() method to free sugov_tunables + scsi: qla2xxx: Changes to support kdump kernel for NVMe BFS + cpufreq: schedutil: Destroy mutex before kobject_put() frees the memory + usb: cdns3: fix race condition before setting doorbell + ACPI: NFIT: Use fallback node id when numa info in NFIT table is incorrect + fs-verity: fix signed integer overflow with i_size near S64_MAX + hwmon: (tmp421) handle I2C errors + hwmon: (w83793) Fix NULL pointer dereference by removing unnecessary structure field + hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary structure field + hwmon: (w83791d) Fix NULL pointer dereference by removing unnecessary structure field + gpio: pca953x: do not ignore i2c errors + scsi: ufs: Fix illegal offset in UPIU event trace + mac80211: fix use-after-free in CCMP/GCMP RX + x86/kvmclock: Move this_cpu_pvti into kvmclock.h + KVM: x86: Fix stack-out-of-bounds memory access from ioapic_write_indirect() + KVM: x86: nSVM: don't copy virt_ext from vmcb12 + KVM: nVMX: Filter out all unsupported controls when eVMCS was activated + media: ir_toy: prevent device from hanging during transmit + RDMA/cma: Do not change route.addr.src_addr.ss_family + drm/amd/display: Pass PCI deviceid into DC + drm/amdgpu: correct initial cp_hqd_quantum for gfx9 + ipvs: check that ip_vs_conn_tab_bits is between 8 and 20 + bpf: Handle return value of BPF_PROG_TYPE_STRUCT_OPS prog + IB/cma: Do not send IGMP leaves for sendonly Multicast groups + RDMA/cma: Fix listener leak in rdma_cma_listen_on_all() failure + bpf, mips: Validate conditional branch offsets + hwmon: (mlxreg-fan) Return non-zero value when fan current state is enforced from sysfs + mac80211: Fix ieee80211_amsdu_aggregate frag_tail bug + mac80211: limit injected vht mcs/nss in ieee80211_parse_tx_radiotap + mac80211: mesh: fix potentially unaligned access + mac80211-hwsim: fix late beacon hrtimer handling + sctp: break out if skb_header_pointer returns NULL in sctp_rcv_ootb + mptcp: don't return sockets in foreign netns + hwmon: (tmp421) report /PVLD condition as fault + hwmon: (tmp421) fix rounding for negative values + net: enetc: fix the incorrect clearing of IF_MODE bits + net: ipv4: Fix rtnexthop len when RTA_FLOW is present + smsc95xx: fix stalled rx after link change + drm/i915/request: fix early tracepoints + dsa: mv88e6xxx: 6161: Use chip wide MAX MTU + dsa: mv88e6xxx: Fix MTU definition + dsa: mv88e6xxx: Include tagger overhead when setting MTU for DSA and CPU ports + e100: fix length calculation in e100_get_regs_len + e100: fix buffer overrun in e100_get_regs + bpf: Exempt CAP_BPF from checks against bpf_jit_limit + selftests, bpf: Fix makefile dependencies on libbpf + selftests, bpf: test_lwt_ip_encap: Really disable rp_filter + UBUNTU: [Config] updateconfigs for ks8851 modules + net: ks8851: fix link error + scsi: csiostor: Add module softdep on cxgb4 + ixgbe: Fix NULL pointer dereference in ixgbe_xdp_setup + net: hns3: do not allow call hns3_nic_net_open repeatedly + net: hns3: fix mixed flag HCLGE_FLAG_MQPRIO_ENABLE and HCLGE_FLAG_DCB_ENABLE + net: hns3: fix show wrong state when add existing uc mac address + net: hns3: fix prototype warning + net: hns3: reconstruct function hns3_self_test + net: hns3: fix always enable rx vlan filter problem after selftest + net: phy: bcm7xxx: Fixed indirect MMD operations + net: sched: flower: protect fl_walk() with rcu + af_unix: fix races in sk_peer_pid and sk_peer_cred accesses + perf/x86/intel: Update event constraints for ICX + hwmon: (pmbus/mp2975) Add missed POUT attribute for page 1 mp2975 controller + nvme: add command id quirk for apple controllers + elf: don't use MAP_FIXED_NOREPLACE for elf interpreter mappings + debugfs: debugfs_create_file_size(): use IS_ERR to check for error + ipack: ipoctal: fix stack information leak + ipack: ipoctal: fix tty registration race + ipack: ipoctal: fix tty-registration error handling + ipack: ipoctal: fix missing allocation-failure check + ipack: ipoctal: fix module reference leak + ext4: fix loff_t overflow in ext4_max_bitmap_size() + ext4: limit the number of blocks in one ADD_RANGE TLV + ext4: fix reserved space counter leakage + ext4: add error checking to ext4_ext_replay_set_iblocks() + ext4: fix potential infinite loop in ext4_dx_readdir() + HID: u2fzero: ignore incomplete packets without data + net: udp: annotate data race around udp_sk(sk)->corkflag + ASoC: dapm: use component prefix when checking widget names + usb: hso: remove the bailout parameter + HID: betop: fix slab-out-of-bounds Write in betop_probe + netfilter: ipset: Fix oversized kvmalloc() calls + mm: don't allow oversized kvmalloc() calls + HID: usbhid: free raw_report buffers in usbhid_stop + KVM: x86: Handle SRCU initialization failure during page track init + netfilter: conntrack: serialize hash resizes and cleanups + netfilter: nf_tables: Fix oversized kvmalloc() calls + media: cedrus: Fix SUNXI tile size calculation + media: s5p-jpeg: rename JPEG marker constants to prevent build warnings + ASoC: fsl_spdif: register platform component before registering cpu dai + ASoC: fsl_xcvr: register platform component before registering cpu dai + ASoC: mediatek: common: handle NULL case in suspend/resume function + ASoC: SOF: Fix DSP oops stack dump output contents + ASoC: SOF: imx: imx8: Bar index is only valid for IRAM and SRAM types + ASoC: SOF: imx: imx8m: Bar index is only valid for IRAM and SRAM types + pinctrl: qcom: spmi-gpio: correct parent irqspec translation + s390/qeth: Fix deadlock in remove_discipline + s390/qeth: fix deadlock during failing recovery + m68k: Update ->thread.esp0 before calling syscall_trace() in ret_from_signal + NIOS2: fix kconfig unmet dependency warning for SERIAL_CORE_CONSOLE + kasan: fix Kconfig check of CC_HAS_WORKING_NOSANITIZE_ADDRESS + perf test: Fix DWARF unwind for optimized builds. + watchdog/sb_watchdog: fix compilation problem due to COMPILE_TEST + ALSA: firewire-motu: fix truncated bytes in message tracepoints + RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests + nbd: use shifts rather than multiplies + drm/amd/display: initialize backlight_ramping_override to false + drm/amdgpu: check tiling flags when creating FB on GFX8- + RDMA/hns: Fix the size setting error when copying CQE in clean_cq() + RDMA/hns: Add the check of the CQE size of the user space + net: hns3: remove tc enable checking + net: hns3: don't rollback when destroy mqprio fail + net: hns3: disable firmware compatible features when uninstall PF + hwmon: (occ) Fix P10 VRM temp sensors + ext4: flush s_error_work before journal destroy in ext4_fill_super + UBUNTU: upstream stable to v5.10.71, v5.14.10 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1950516 Title: Hirsute update: upstream stable patchset 2021-11-10 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1950516/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs