Public bug reported:
SRU Justification Impact: The upstream process for stable tree updates is quite similar in scope to the Ubuntu SRU process, e.g., each patch has to demonstrably fix a bug, and each patch is vetted by upstream by originating either directly from a mainline/stable Linux tree or a minimally backported form of that patch. The following upstream stable patches should be included in the Ubuntu kernel: v5.4.276 upstream stable release from git://git.kernel.org/ dmaengine: pl330: issue_pending waits until WFP state dmaengine: Revert "dmaengine: pl330: issue_pending waits until WFP state" wifi: nl80211: don't free NULL coalescing rule pinctrl: core: delete incorrect free in pinctrl_enable() pinctrl: mediatek: Check gpio pin number and use binary search in mtk_hw_pin_field_lookup() pinctrl: mediatek: Supporting driving setting without mapping current to register value pinctrl: mediatek: Refine mtk_pinconf_get() and mtk_pinconf_set() pinctrl: mediatek: Refine mtk_pinconf_get() pinctrl: mediatek: Backward compatible to previous Mediatek's bias-pull usage pinctrl: mediatek: remove shadow variable declaration pinctrl: mediatek: paris: Fix PIN_CONFIG_BIAS_* readback pinctrl: mediatek: paris: Rework mtk_pinconf_{get,set} switch/case logic pinctrl: mediatek: paris: Rework support for PIN_CONFIG_{INPUT,OUTPUT}_ENABLE sunrpc: add a struct rpc_stats arg to rpc_create_args nfs: expose /proc/net/sunrpc/nfs in net namespaces nfs: make the rpc_stat per net namespace nfs: Handle error of rpc_proc_register() in nfs_net_init(). power: rt9455: hide unused rt9455_boost_voltage_values pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map() s390/mm: Fix storage key clearing for guest huge pages s390/mm: Fix clearing storage keys for huge pages bna: ensure the copied buf is NUL terminated nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment(). net l2tp: drop flow hash on forward net: qede: use return from qede_parse_flow_attr() for flow_spec net: dsa: mv88e6xxx: Add number of MACs in the ATU net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341 net: bridge: fix multicast-to-unicast with fraglist GSO tipc: fix a possible memleak in tipc_buf_append clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic gfs2: Fix invalid metadata access in punch_hole wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc wifi: cfg80211: fix rdev_dump_mpp() arguments order net: mark racy access on sk->sk_rcvbuf scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload ALSA: line6: Zero-initialize message buffers net: bcmgenet: Reset RBUF on first open ata: sata_gemini: Check clk_enable() result firewire: ohci: mask bus reset interrupts between ISR and bottom half tools/power turbostat: Fix added raw MSR output tools/power turbostat: Fix Bzy_MHz documentation typo btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve btrfs: always clear PERTRANS metadata during commit scsi: target: Fix SELinux error when systemd-modules loads the target module gpu: host1x: Do not setup DMA for virtual devices MIPS: scall: Save thread_info.syscall unconditionally on entry selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior fs/9p: only translate RWX permissions for plain 9P2000 fs/9p: translate O_TRUNC into OTRUNC 9p: explicitly deny setlease attempts gpio: wcove: Use -ENOTSUPP consistently gpio: crystalcove: Use -ENOTSUPP consistently clk: Don't hold prepare_lock when calling kref_put() fs/9p: drop inodes immediately on non-.L too net:usb:qmi_wwan: support Rolling modules pinctrl: mediatek: Fix fallback call path xfrm: Preserve vlan tags for transport mode software GRO tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets tcp: Use refcount_inc_not_zero() in tcp_twsk_unique(). Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation phonet: fix rtm_phonet_notify() skb allocation net: bridge: fix corrupted ethernet header on multicast-to-unicast ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() net: qede: sanitize 'rc' in qede_add_tc_flower_fltr() net: qede: use return from qede_parse_flow_attr() for flower firewire: nosy: ensure user_length is taken into account when fetching packet contents usb: gadget: composite: fix OS descriptors w_value logic usb: gadget: f_fs: Fix a race condition when processing setup packets. tipc: fix UAF in error path dyndbg: fix old BUG_ON in >control parser drm/vmwgfx: Fix invalid reads in fence signaled events net: fix out-of-bounds access in ops_init regulator: core: fix debugfs creation regression pinctrl: mediatek: Fix fallback behavior for bias_set_combo pinctrl: mediatek: Fix some off by one bugs pinctrl: mediatek: remove set but not used variable 'e' pinctrl: mediatek: paris: Fix PIN_CONFIG_INPUT_SCHMITT_ENABLE readback Linux 5.4.276 UBUNTU: Upstream stable to v5.4.276 ** Affects: linux (Ubuntu) Importance: Undecided Status: Invalid ** Affects: linux (Ubuntu Focal) Importance: Medium Assignee: Manuel Diewald (diewald) Status: In Progress ** Tags: kernel-stable-tracking-bug ** Changed in: linux (Ubuntu) Status: New => Confirmed ** Tags added: kernel-stable-tracking-bug ** Also affects: linux (Ubuntu Focal) Importance: Undecided Status: New ** Changed in: linux (Ubuntu) Status: Confirmed => Invalid ** Changed in: linux (Ubuntu Focal) Importance: Undecided => Medium ** Changed in: linux (Ubuntu Focal) Status: New => In Progress ** Changed in: linux (Ubuntu Focal) Assignee: (unassigned) => Manuel Diewald (diewald) ** Description changed: SRU Justification Impact: The upstream process for stable tree updates is quite similar in scope to the Ubuntu SRU process, e.g., each patch has to demonstrably fix a bug, and each patch is vetted by upstream by originating either directly from a mainline/stable Linux tree or a minimally backported form of that patch. The following upstream stable patches should be included in the Ubuntu kernel: v5.4.276 upstream stable release from git://git.kernel.org/ - + dmaengine: pl330: issue_pending waits until WFP state + dmaengine: Revert "dmaengine: pl330: issue_pending waits until WFP state" + wifi: nl80211: don't free NULL coalescing rule + pinctrl: core: delete incorrect free in pinctrl_enable() + pinctrl: mediatek: Check gpio pin number and use binary search in mtk_hw_pin_field_lookup() + pinctrl: mediatek: Supporting driving setting without mapping current to register value + pinctrl: mediatek: Refine mtk_pinconf_get() and mtk_pinconf_set() + pinctrl: mediatek: Refine mtk_pinconf_get() + pinctrl: mediatek: Backward compatible to previous Mediatek's bias-pull usage + pinctrl: mediatek: remove shadow variable declaration + pinctrl: mediatek: paris: Fix PIN_CONFIG_BIAS_* readback + pinctrl: mediatek: paris: Rework mtk_pinconf_{get,set} switch/case logic + pinctrl: mediatek: paris: Rework support for PIN_CONFIG_{INPUT,OUTPUT}_ENABLE + sunrpc: add a struct rpc_stats arg to rpc_create_args + nfs: expose /proc/net/sunrpc/nfs in net namespaces + nfs: make the rpc_stat per net namespace + nfs: Handle error of rpc_proc_register() in nfs_net_init(). + power: rt9455: hide unused rt9455_boost_voltage_values + pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map() + s390/mm: Fix storage key clearing for guest huge pages + s390/mm: Fix clearing storage keys for huge pages + bna: ensure the copied buf is NUL terminated + nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment(). + net l2tp: drop flow hash on forward + net: qede: use return from qede_parse_flow_attr() for flow_spec + net: dsa: mv88e6xxx: Add number of MACs in the ATU + net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341 + net: bridge: fix multicast-to-unicast with fraglist GSO + tipc: fix a possible memleak in tipc_buf_append + clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change + scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic + gfs2: Fix invalid metadata access in punch_hole + wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc + wifi: cfg80211: fix rdev_dump_mpp() arguments order + net: mark racy access on sk->sk_rcvbuf + scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload + ALSA: line6: Zero-initialize message buffers + net: bcmgenet: Reset RBUF on first open + ata: sata_gemini: Check clk_enable() result + firewire: ohci: mask bus reset interrupts between ISR and bottom half + tools/power turbostat: Fix added raw MSR output + tools/power turbostat: Fix Bzy_MHz documentation typo + btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve + btrfs: always clear PERTRANS metadata during commit + scsi: target: Fix SELinux error when systemd-modules loads the target module + gpu: host1x: Do not setup DMA for virtual devices + MIPS: scall: Save thread_info.syscall unconditionally on entry + selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior + fs/9p: only translate RWX permissions for plain 9P2000 + fs/9p: translate O_TRUNC into OTRUNC + 9p: explicitly deny setlease attempts + gpio: wcove: Use -ENOTSUPP consistently + gpio: crystalcove: Use -ENOTSUPP consistently + clk: Don't hold prepare_lock when calling kref_put() + fs/9p: drop inodes immediately on non-.L too + net:usb:qmi_wwan: support Rolling modules + pinctrl: mediatek: Fix fallback call path + xfrm: Preserve vlan tags for transport mode software GRO + tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets + tcp: Use refcount_inc_not_zero() in tcp_twsk_unique(). + Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout + Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout + rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation + phonet: fix rtm_phonet_notify() skb allocation + net: bridge: fix corrupted ethernet header on multicast-to-unicast + ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() + net: qede: sanitize 'rc' in qede_add_tc_flower_fltr() + net: qede: use return from qede_parse_flow_attr() for flower + firewire: nosy: ensure user_length is taken into account when fetching packet contents + usb: gadget: composite: fix OS descriptors w_value logic + usb: gadget: f_fs: Fix a race condition when processing setup packets. + tipc: fix UAF in error path + dyndbg: fix old BUG_ON in >control parser + drm/vmwgfx: Fix invalid reads in fence signaled events + net: fix out-of-bounds access in ops_init + regulator: core: fix debugfs creation regression + pinctrl: mediatek: Fix fallback behavior for bias_set_combo + pinctrl: mediatek: Fix some off by one bugs + pinctrl: mediatek: remove set but not used variable 'e' + pinctrl: mediatek: paris: Fix PIN_CONFIG_INPUT_SCHMITT_ENABLE readback Linux 5.4.276 - pinctrl: mediatek: paris: Fix PIN_CONFIG_INPUT_SCHMITT_ENABLE readback - pinctrl: mediatek: remove set but not used variable 'e' - pinctrl: mediatek: Fix some off by one bugs - pinctrl: mediatek: Fix fallback behavior for bias_set_combo - regulator: core: fix debugfs creation regression - net: fix out-of-bounds access in ops_init - drm/vmwgfx: Fix invalid reads in fence signaled events - dyndbg: fix old BUG_ON in >control parser - tipc: fix UAF in error path - usb: gadget: f_fs: Fix a race condition when processing setup packets. - usb: gadget: composite: fix OS descriptors w_value logic - firewire: nosy: ensure user_length is taken into account when fetching packet contents - net: qede: use return from qede_parse_flow_attr() for flower - net: qede: sanitize 'rc' in qede_add_tc_flower_fltr() - ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() - net: bridge: fix corrupted ethernet header on multicast-to-unicast - phonet: fix rtm_phonet_notify() skb allocation - rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout - tcp: Use refcount_inc_not_zero() in tcp_twsk_unique(). - tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets - xfrm: Preserve vlan tags for transport mode software GRO - pinctrl: mediatek: Fix fallback call path - net:usb:qmi_wwan: support Rolling modules - fs/9p: drop inodes immediately on non-.L too - clk: Don't hold prepare_lock when calling kref_put() - gpio: crystalcove: Use -ENOTSUPP consistently - gpio: wcove: Use -ENOTSUPP consistently - 9p: explicitly deny setlease attempts - fs/9p: translate O_TRUNC into OTRUNC - fs/9p: only translate RWX permissions for plain 9P2000 - selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior - MIPS: scall: Save thread_info.syscall unconditionally on entry - gpu: host1x: Do not setup DMA for virtual devices - scsi: target: Fix SELinux error when systemd-modules loads the target module - btrfs: always clear PERTRANS metadata during commit - btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve - tools/power turbostat: Fix Bzy_MHz documentation typo - tools/power turbostat: Fix added raw MSR output - firewire: ohci: mask bus reset interrupts between ISR and bottom half - ata: sata_gemini: Check clk_enable() result - net: bcmgenet: Reset RBUF on first open - ALSA: line6: Zero-initialize message buffers - scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload - net: mark racy access on sk->sk_rcvbuf - wifi: cfg80211: fix rdev_dump_mpp() arguments order - wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc - gfs2: Fix invalid metadata access in punch_hole - scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic - clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change - tipc: fix a possible memleak in tipc_buf_append - net: bridge: fix multicast-to-unicast with fraglist GSO - net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341 - net: dsa: mv88e6xxx: Add number of MACs in the ATU - net: qede: use return from qede_parse_flow_attr() for flow_spec - net l2tp: drop flow hash on forward - nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment(). - bna: ensure the copied buf is NUL terminated - s390/mm: Fix clearing storage keys for huge pages - s390/mm: Fix storage key clearing for guest huge pages - pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map() - power: rt9455: hide unused rt9455_boost_voltage_values - nfs: Handle error of rpc_proc_register() in nfs_net_init(). - nfs: make the rpc_stat per net namespace - nfs: expose /proc/net/sunrpc/nfs in net namespaces - sunrpc: add a struct rpc_stats arg to rpc_create_args - pinctrl: mediatek: paris: Rework support for PIN_CONFIG_{INPUT,OUTPUT}_ENABLE - pinctrl: mediatek: paris: Rework mtk_pinconf_{get,set} switch/case logic - pinctrl: mediatek: paris: Fix PIN_CONFIG_BIAS_* readback - pinctrl: mediatek: remove shadow variable declaration - pinctrl: mediatek: Backward compatible to previous Mediatek's bias-pull usage - pinctrl: mediatek: Refine mtk_pinconf_get() - pinctrl: mediatek: Refine mtk_pinconf_get() and mtk_pinconf_set() - pinctrl: mediatek: Supporting driving setting without mapping current to register value - pinctrl: mediatek: Check gpio pin number and use binary search in mtk_hw_pin_field_lookup() - pinctrl: core: delete incorrect free in pinctrl_enable() - wifi: nl80211: don't free NULL coalescing rule - dmaengine: Revert "dmaengine: pl330: issue_pending waits until WFP state" - dmaengine: pl330: issue_pending waits until WFP state + UBUNTU: Upstream stable to v5.4.276 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2069758 Title: Focal update: v5.4.276 upstream stable release To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2069758/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs