Public bug reported:
SRU Justification Impact: The upstream process for stable tree updates is quite similar in scope to the Ubuntu SRU process, e.g., each patch has to demonstrably fix a bug, and each patch is vetted by upstream by originating either directly from a mainline/stable Linux tree or a minimally backported form of that patch. The following upstream stable patches should be included in the Ubuntu kernel: v5.4.278 upstream stable release from git://git.kernel.org/ x86/tsc: Trust initial offset in architectural TSC-adjust MSRs speakup: Fix sizeof() vs ARRAY_SIZE() bug ring-buffer: Fix a race between readers and resize checks net: smc91x: Fix m68k kernel compilation for ColdFire CPU nilfs2: fix unexpected freezing of nilfs_segctor_sync() nilfs2: fix potential hang in nilfs_detach_log_writer() wifi: cfg80211: fix the order of arguments for trace events of the tx_rx_evt class net: usb: qmi_wwan: add Telit FN920C04 compositions drm/amd/display: Set color_mgmt_changed to true on unsuspend ASoC: rt5645: Fix the electric noise due to the CBJ contacts floating ASoC: dt-bindings: rt5645: add cbj sleeve gpio property ASoC: da7219-aad: fix usage of device_get_named_child_node() drm/amdkfd: Flush the process wq before creating a kfd_process nvme: find numa distance only if controller has valid numa id openpromfs: finish conversion to the new mount API crypto: bcm - Fix pointer arithmetic firmware: raspberrypi: Use correct device for DMA mappings ecryptfs: Fix buffer size for tag 66 packet nilfs2: fix out-of-range warning parisc: add missing export of __cmpxchg_u8() crypto: ccp - drop platform ifdef checks s390/cio: fix tracepoint subchannel type field jffs2: prevent xattr node from overflowing the eraseblock null_blk: Fix missing mutex_destroy() at module removal md: fix resync softlockup when bitmap size is less than array size wifi: ath10k: poll service ready message before failing x86/boot: Ignore relocations in .notes sections in walk_relocs() too qed: avoid truncating work queue length scsi: ufs: qcom: Perform read back after writing reset bit scsi: ufs: cdns-pltfrm: Perform read back after writing HCLKDIV scsi: ufs: core: Perform read back after disabling interrupts scsi: ufs: core: Perform read back after disabling UIC_COMMAND_COMPL irqchip/alpine-msi: Fix off-by-one in allocation error path ACPI: disable -Wstringop-truncation cpufreq: Reorganize checks in cpufreq_offline() cpufreq: Split cpufreq_offline() cpufreq: Rearrange locking in cpufreq_remove_dev() cpufreq: exit() callback is optional scsi: libsas: Fix the failure of adding phy with zero-address to port scsi: hpsa: Fix allocation size for Scsi_Host private data x86/purgatory: Switch to the position-independent small code model wifi: ath10k: Fix an error code problem in ath10k_dbg_sta_write_peer_debug_trigger() wifi: ath10k: populate board data for WCN3990 tcp: minor optimization in tcp_add_backlog() tcp: fix a signed-integer-overflow bug in tcp_add_backlog() tcp: avoid premature drops in tcp_add_backlog() macintosh/via-macii: Fix "BUG: sleeping function called from invalid context" wifi: carl9170: add a proper sanity check for endpoints wifi: ar5523: enable proper endpoint verification sh: kprobes: Merge arch_copy_kprobe() into arch_prepare_kprobe() Revert "sh: Handle calling csum_partial with misaligned data" HID: intel-ish-hid: ipc: Add check for pci_alloc_irq_vectors scsi: bfa: Ensure the copied buf is NUL terminated scsi: qedf: Ensure the copied buf is NUL terminated wifi: mwl8k: initialize cmd->addr[] properly usb: aqc111: stop lying about skb->truesize net: usb: sr9700: stop lying about skb->truesize m68k: Fix spinlock race in kernel thread creation m68k: mac: Fix reboot hang on Mac IIci net: ethernet: cortina: Locking fixes af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg net: usb: smsc95xx: stop lying about skb->truesize net: openvswitch: fix overwriting ct original tuple for ICMPv6 ipv6: sr: add missing seg6_local_exit ipv6: sr: fix incorrect unregister order ipv6: sr: fix invalid unregister error path drm/amd/display: Fix potential index out of bounds in color transformation function mtd: rawnand: hynix: fixed typo fbdev: shmobile: fix snprintf truncation drm/mediatek: Add 0 size check to mtk_drm_gem_obj powerpc/fsl-soc: hide unused const variable fbdev: sisfb: hide unused variables media: ngene: Add dvb_ca_en50221_init return value check media: radio-shark2: Avoid led_names truncations platform/x86: wmi: Make two functions static fbdev: sh7760fb: allow modular build drm/arm/malidp: fix a possible null pointer dereference ASoC: tracing: Export SND_SOC_DAPM_DIR_OUT to its value drm/panel: simple: Add missing Innolux G121X1-L03 format, flags, connector RDMA/hns: Use complete parentheses in macros x86/insn: Fix PUSH instruction in x86 instruction decoder opcode map ext4: avoid excessive credit estimate in ext4_tmpfile() sunrpc: removed redundant procp check SUNRPC: Fix gss_free_in_token_pages() selftests/kcmp: Make the test output consistent and clear selftests/kcmp: remove unused open mode RDMA/IPoIB: Fix format truncation compilation errors netrom: fix possible dead-lock in nr_rt_ioctl() af_packet: do not call packet_read_pending() from tpacket_destruct_skb() sched/topology: Don't set SD_BALANCE_WAKE on cpuset domain relax sched/fair: Allow disabling sched_balance_newidle with sched_relax_domain_level greybus: lights: check return of get_channel_from_mode soundwire: cadence/intel: simplify PDI/port mapping soundwire: intel: don't filter out PDI0/1 soundwire: cadence_master: improve PDI allocation soundwire: cadence: fix invalid PDI offset dmaengine: idma64: Add check for dma_set_max_seg_size firmware: dmi-id: add a release callback function serial: max3100: Lock port->lock when calling uart_handle_cts_change() serial: max3100: Update uart_driver_registered on driver removal serial: max3100: Fix bitwise types greybus: arche-ctrl: move device table to its right location iio: pressure: dps310: support negative temperature values microblaze: Remove gcc flag for non existing early_printk.c file microblaze: Remove early printk call from cpuinfo-static.c usb: gadget: u_audio: Clear uac pointer when freed. stm class: Fix a double free in stm_register_device() ppdev: Remove usage of the deprecated ida_simple_xx() API ppdev: Add an error check in register_device extcon: max8997: select IRQ_DOMAIN instead of depending on it f2fs: fix to release node block count in error path of f2fs_new_node_page() serial: sh-sci: protect invalidating RXDMA on shutdown libsubcmd: Fix parse-options memory leak Input: ims-pcu - fix printf string overflow Input: pm8xxx-vibrator - correct VIB_MAX_LEVELS calculation drm/msm/dpu: Always flush the slave INTF on the CTL um: Fix return value in ubd_init() um: Add winch to winch_handlers before registering winch IRQ media: stk1160: fix bounds checking in stk1160_copy_video() scsi: qla2xxx: Replace all non-returning strlcpy() with strscpy() powerpc/pseries: Add failure related checks for h_get_mpp and h_get_ppp um: Fix the -Wmissing-prototypes warning for __switch_mm media: cec: cec-adap: always cancel work in cec_transmit_msg_fh media: cec: cec-api: add locking in cec_release() null_blk: Fix the WARNING: modpost: missing MODULE_DESCRIPTION() x86/kconfig: Select ARCH_WANT_FRAME_POINTERS again when UNWINDER_FRAME_POINTER=y UBUNTU: [Config] Update CONFIG_ARCH_WANT_FRAME_POINTERS nfc: nci: Fix uninit-value in nci_rx_work sunrpc: fix NFSACL RPC retry on soft mount ipv6: sr: fix memleak in seg6_hmac_init_algo params: lift param_set_uint_minmax to common code tcp: Fix shift-out-of-bounds in dctcp_update_alpha(). openvswitch: Set the skbuff pkt_type for proper pmtud support. arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY virtio: delete vq in vp_find_vqs_msix() when request_irq() fails net: fec: avoid lock evasion when reading pps_enable nfc: nci: Fix kcov check in nci_rx_work() nfc: nci: Fix handling of zero-length payload packets in nci_rx_work() netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() spi: Don't mark message DMA mapped when no transfer in it is nvmet: fix ns enable/disable possible hang net/mlx5e: Use rx_missed_errors instead of rx_dropped for reporting buffer exhaustion dma-buf/sw-sync: don't enable IRQ from sync_print_obj() enic: Validate length of nl attributes in enic_set_vf_port smsc95xx: remove redundant function arguments smsc95xx: use usbnet->driver_priv net: usb: smsc95xx: fix changing LED_SEL bit value updated from EEPROM net:fec: Add fec_enet_deinit() netfilter: tproxy: bail out if IP has been disabled on the device kconfig: fix comparison to constant symbols, 'm', 'n' spi: stm32: Don't warn about spurious interrupts ipvlan: Dont Use skb->sk in ipvlan_process_v{4,6}_outbound ALSA: timer: Set lower bound of start tick time genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline SUNRPC: Fix loop termination condition in gss_free_in_token_pages() binder: fix max_thread type inconsistency mmc: core: Do not force a retune before RPMB switch io_uring: fail NOP if non-zero op flags is passed in afs: Don't cross .backup mountpoint from backup volume nilfs2: fix use-after-free of timer for log writer thread vxlan: Fix regression when dropping packets due to invalid src addresses x86/mm: Remove broken vsyscall emulation code from the page fault code f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode() media: lgdt3306a: Add a check against null-pointer-def drm/amdgpu: add error handle to avoid out-of-bounds ata: pata_legacy: make legacy_exit() work again ACPI: resource: Do IRQ override on TongFang GXxHRXx and GMxHGxx arm64: tegra: Correct Tegra132 I2C alias md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING wifi: rtl8xxxu: Fix the TX power of RTL8192CU, RTL8723AU arm64: dts: hi3798cv200: fix the size of GICR media: mc: mark the media devnode as registered from the, start media: mxl5xx: Move xpt structures off stack media: v4l2-core: hold videodev_lock until dev reg, finishes fbdev: savage: Handle err return when savagefb_check_var failed KVM: arm64: Allow AArch32 PSTATE.M to be restored as System mode crypto: ecrdsa - Fix module auto-load on add_key crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak net/ipv6: Fix route deleting failure when metric equals 0 net/9p: fix uninit-value in p9_client_rpc() intel_th: pci: Add Meteor Lake-S CPU support sparc64: Fix number of online CPUs kdb: Fix buffer overflow during tab-complete kdb: Use format-strings rather than '\0' injection in kdb_read() kdb: Fix console handling when editing and tab-completing commands kdb: Merge identical case statements in kdb_read() kdb: Use format-specifiers rather than memset() for padding in kdb_read() net: fix __dst_negative_advice() race xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING sparc: move struct termio to asm/termios.h ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() s390/ap: Fix crash in AP internal function modify_bitmap() nfs: fix undefined behavior in nfs_block_bits() Linux 5.4.278 UBUNTU: Upstream stable to v5.4.278 ** Affects: linux (Ubuntu) Importance: Undecided Status: Invalid ** Affects: linux (Ubuntu Focal) Importance: Medium Assignee: Portia Stephens (portias) Status: In Progress ** Tags: kernel-stable-tracking-bug ** Changed in: linux (Ubuntu) Status: New => Confirmed ** Tags added: kernel-stable-tracking-bug ** Also affects: linux (Ubuntu Focal) Importance: Undecided Status: New ** Changed in: linux (Ubuntu) Status: Confirmed => Invalid ** Changed in: linux (Ubuntu Focal) Importance: Undecided => Medium ** Changed in: linux (Ubuntu Focal) Status: New => In Progress ** Changed in: linux (Ubuntu Focal) Assignee: (unassigned) => Portia Stephens (portias) ** Description changed: SRU Justification Impact: The upstream process for stable tree updates is quite similar in scope to the Ubuntu SRU process, e.g., each patch has to demonstrably fix a bug, and each patch is vetted by upstream by originating either directly from a mainline/stable Linux tree or a minimally backported form of that patch. The following upstream stable patches should be included in the Ubuntu kernel: v5.4.278 upstream stable release from git://git.kernel.org/ - + x86/tsc: Trust initial offset in architectural TSC-adjust MSRs + speakup: Fix sizeof() vs ARRAY_SIZE() bug + ring-buffer: Fix a race between readers and resize checks + net: smc91x: Fix m68k kernel compilation for ColdFire CPU + nilfs2: fix unexpected freezing of nilfs_segctor_sync() + nilfs2: fix potential hang in nilfs_detach_log_writer() + wifi: cfg80211: fix the order of arguments for trace events of the tx_rx_evt class + net: usb: qmi_wwan: add Telit FN920C04 compositions + drm/amd/display: Set color_mgmt_changed to true on unsuspend + ASoC: rt5645: Fix the electric noise due to the CBJ contacts floating + ASoC: dt-bindings: rt5645: add cbj sleeve gpio property + ASoC: da7219-aad: fix usage of device_get_named_child_node() + drm/amdkfd: Flush the process wq before creating a kfd_process + nvme: find numa distance only if controller has valid numa id + openpromfs: finish conversion to the new mount API + crypto: bcm - Fix pointer arithmetic + firmware: raspberrypi: Use correct device for DMA mappings + ecryptfs: Fix buffer size for tag 66 packet + nilfs2: fix out-of-range warning + parisc: add missing export of __cmpxchg_u8() + crypto: ccp - drop platform ifdef checks + s390/cio: fix tracepoint subchannel type field + jffs2: prevent xattr node from overflowing the eraseblock + null_blk: Fix missing mutex_destroy() at module removal + md: fix resync softlockup when bitmap size is less than array size + wifi: ath10k: poll service ready message before failing + x86/boot: Ignore relocations in .notes sections in walk_relocs() too + qed: avoid truncating work queue length + scsi: ufs: qcom: Perform read back after writing reset bit + scsi: ufs: cdns-pltfrm: Perform read back after writing HCLKDIV + scsi: ufs: core: Perform read back after disabling interrupts + scsi: ufs: core: Perform read back after disabling UIC_COMMAND_COMPL + irqchip/alpine-msi: Fix off-by-one in allocation error path + ACPI: disable -Wstringop-truncation + cpufreq: Reorganize checks in cpufreq_offline() + cpufreq: Split cpufreq_offline() + cpufreq: Rearrange locking in cpufreq_remove_dev() + cpufreq: exit() callback is optional + scsi: libsas: Fix the failure of adding phy with zero-address to port + scsi: hpsa: Fix allocation size for Scsi_Host private data + x86/purgatory: Switch to the position-independent small code model + wifi: ath10k: Fix an error code problem in ath10k_dbg_sta_write_peer_debug_trigger() + wifi: ath10k: populate board data for WCN3990 + tcp: minor optimization in tcp_add_backlog() + tcp: fix a signed-integer-overflow bug in tcp_add_backlog() + tcp: avoid premature drops in tcp_add_backlog() + macintosh/via-macii: Fix "BUG: sleeping function called from invalid context" + wifi: carl9170: add a proper sanity check for endpoints + wifi: ar5523: enable proper endpoint verification + sh: kprobes: Merge arch_copy_kprobe() into arch_prepare_kprobe() + Revert "sh: Handle calling csum_partial with misaligned data" + HID: intel-ish-hid: ipc: Add check for pci_alloc_irq_vectors + scsi: bfa: Ensure the copied buf is NUL terminated + scsi: qedf: Ensure the copied buf is NUL terminated + wifi: mwl8k: initialize cmd->addr[] properly + usb: aqc111: stop lying about skb->truesize + net: usb: sr9700: stop lying about skb->truesize + m68k: Fix spinlock race in kernel thread creation + m68k: mac: Fix reboot hang on Mac IIci + net: ethernet: cortina: Locking fixes + af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg + net: usb: smsc95xx: stop lying about skb->truesize + net: openvswitch: fix overwriting ct original tuple for ICMPv6 + ipv6: sr: add missing seg6_local_exit + ipv6: sr: fix incorrect unregister order + ipv6: sr: fix invalid unregister error path + drm/amd/display: Fix potential index out of bounds in color transformation function + mtd: rawnand: hynix: fixed typo + fbdev: shmobile: fix snprintf truncation + drm/mediatek: Add 0 size check to mtk_drm_gem_obj + powerpc/fsl-soc: hide unused const variable + fbdev: sisfb: hide unused variables + media: ngene: Add dvb_ca_en50221_init return value check + media: radio-shark2: Avoid led_names truncations + platform/x86: wmi: Make two functions static + fbdev: sh7760fb: allow modular build + drm/arm/malidp: fix a possible null pointer dereference + ASoC: tracing: Export SND_SOC_DAPM_DIR_OUT to its value + drm/panel: simple: Add missing Innolux G121X1-L03 format, flags, connector + RDMA/hns: Use complete parentheses in macros + x86/insn: Fix PUSH instruction in x86 instruction decoder opcode map + ext4: avoid excessive credit estimate in ext4_tmpfile() + sunrpc: removed redundant procp check + SUNRPC: Fix gss_free_in_token_pages() + selftests/kcmp: Make the test output consistent and clear + selftests/kcmp: remove unused open mode + RDMA/IPoIB: Fix format truncation compilation errors + netrom: fix possible dead-lock in nr_rt_ioctl() + af_packet: do not call packet_read_pending() from tpacket_destruct_skb() + sched/topology: Don't set SD_BALANCE_WAKE on cpuset domain relax + sched/fair: Allow disabling sched_balance_newidle with sched_relax_domain_level + greybus: lights: check return of get_channel_from_mode + soundwire: cadence/intel: simplify PDI/port mapping + soundwire: intel: don't filter out PDI0/1 + soundwire: cadence_master: improve PDI allocation + soundwire: cadence: fix invalid PDI offset + dmaengine: idma64: Add check for dma_set_max_seg_size + firmware: dmi-id: add a release callback function + serial: max3100: Lock port->lock when calling uart_handle_cts_change() + serial: max3100: Update uart_driver_registered on driver removal + serial: max3100: Fix bitwise types + greybus: arche-ctrl: move device table to its right location + iio: pressure: dps310: support negative temperature values + microblaze: Remove gcc flag for non existing early_printk.c file + microblaze: Remove early printk call from cpuinfo-static.c + usb: gadget: u_audio: Clear uac pointer when freed. + stm class: Fix a double free in stm_register_device() + ppdev: Remove usage of the deprecated ida_simple_xx() API + ppdev: Add an error check in register_device + extcon: max8997: select IRQ_DOMAIN instead of depending on it + f2fs: fix to release node block count in error path of f2fs_new_node_page() + serial: sh-sci: protect invalidating RXDMA on shutdown + libsubcmd: Fix parse-options memory leak + Input: ims-pcu - fix printf string overflow + Input: pm8xxx-vibrator - correct VIB_MAX_LEVELS calculation + drm/msm/dpu: Always flush the slave INTF on the CTL + um: Fix return value in ubd_init() + um: Add winch to winch_handlers before registering winch IRQ + media: stk1160: fix bounds checking in stk1160_copy_video() + scsi: qla2xxx: Replace all non-returning strlcpy() with strscpy() + powerpc/pseries: Add failure related checks for h_get_mpp and h_get_ppp + um: Fix the -Wmissing-prototypes warning for __switch_mm + media: cec: cec-adap: always cancel work in cec_transmit_msg_fh + media: cec: cec-api: add locking in cec_release() + null_blk: Fix the WARNING: modpost: missing MODULE_DESCRIPTION() + x86/kconfig: Select ARCH_WANT_FRAME_POINTERS again when UNWINDER_FRAME_POINTER=y + UBUNTU: [Config] Update CONFIG_ARCH_WANT_FRAME_POINTERS + nfc: nci: Fix uninit-value in nci_rx_work + sunrpc: fix NFSACL RPC retry on soft mount + ipv6: sr: fix memleak in seg6_hmac_init_algo + params: lift param_set_uint_minmax to common code + tcp: Fix shift-out-of-bounds in dctcp_update_alpha(). + openvswitch: Set the skbuff pkt_type for proper pmtud support. + arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY + virtio: delete vq in vp_find_vqs_msix() when request_irq() fails + net: fec: avoid lock evasion when reading pps_enable + nfc: nci: Fix kcov check in nci_rx_work() + nfc: nci: Fix handling of zero-length payload packets in nci_rx_work() + netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() + spi: Don't mark message DMA mapped when no transfer in it is + nvmet: fix ns enable/disable possible hang + net/mlx5e: Use rx_missed_errors instead of rx_dropped for reporting buffer exhaustion + dma-buf/sw-sync: don't enable IRQ from sync_print_obj() + enic: Validate length of nl attributes in enic_set_vf_port + smsc95xx: remove redundant function arguments + smsc95xx: use usbnet->driver_priv + net: usb: smsc95xx: fix changing LED_SEL bit value updated from EEPROM + net:fec: Add fec_enet_deinit() + netfilter: tproxy: bail out if IP has been disabled on the device + kconfig: fix comparison to constant symbols, 'm', 'n' + spi: stm32: Don't warn about spurious interrupts + ipvlan: Dont Use skb->sk in ipvlan_process_v{4,6}_outbound + ALSA: timer: Set lower bound of start tick time + genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline + SUNRPC: Fix loop termination condition in gss_free_in_token_pages() + binder: fix max_thread type inconsistency + mmc: core: Do not force a retune before RPMB switch + io_uring: fail NOP if non-zero op flags is passed in + afs: Don't cross .backup mountpoint from backup volume + nilfs2: fix use-after-free of timer for log writer thread + vxlan: Fix regression when dropping packets due to invalid src addresses + x86/mm: Remove broken vsyscall emulation code from the page fault code + f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode() + media: lgdt3306a: Add a check against null-pointer-def + drm/amdgpu: add error handle to avoid out-of-bounds + ata: pata_legacy: make legacy_exit() work again + ACPI: resource: Do IRQ override on TongFang GXxHRXx and GMxHGxx + arm64: tegra: Correct Tegra132 I2C alias + md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING + wifi: rtl8xxxu: Fix the TX power of RTL8192CU, RTL8723AU + arm64: dts: hi3798cv200: fix the size of GICR + media: mc: mark the media devnode as registered from the, start + media: mxl5xx: Move xpt structures off stack + media: v4l2-core: hold videodev_lock until dev reg, finishes + fbdev: savage: Handle err return when savagefb_check_var failed + KVM: arm64: Allow AArch32 PSTATE.M to be restored as System mode + crypto: ecrdsa - Fix module auto-load on add_key + crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak + net/ipv6: Fix route deleting failure when metric equals 0 + net/9p: fix uninit-value in p9_client_rpc() + intel_th: pci: Add Meteor Lake-S CPU support + sparc64: Fix number of online CPUs + kdb: Fix buffer overflow during tab-complete + kdb: Use format-strings rather than '\0' injection in kdb_read() + kdb: Fix console handling when editing and tab-completing commands + kdb: Merge identical case statements in kdb_read() + kdb: Use format-specifiers rather than memset() for padding in kdb_read() + net: fix __dst_negative_advice() race + xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING + sparc: move struct termio to asm/termios.h + ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() + s390/ap: Fix crash in AP internal function modify_bitmap() + nfs: fix undefined behavior in nfs_block_bits() Linux 5.4.278 - nfs: fix undefined behavior in nfs_block_bits() - s390/ap: Fix crash in AP internal function modify_bitmap() - ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() - sparc: move struct termio to asm/termios.h - xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING - net: fix __dst_negative_advice() race - kdb: Use format-specifiers rather than memset() for padding in kdb_read() - kdb: Merge identical case statements in kdb_read() - kdb: Fix console handling when editing and tab-completing commands - kdb: Use format-strings rather than '\0' injection in kdb_read() - kdb: Fix buffer overflow during tab-complete - sparc64: Fix number of online CPUs - intel_th: pci: Add Meteor Lake-S CPU support - net/9p: fix uninit-value in p9_client_rpc() - net/ipv6: Fix route deleting failure when metric equals 0 - crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak - crypto: ecrdsa - Fix module auto-load on add_key - KVM: arm64: Allow AArch32 PSTATE.M to be restored as System mode - fbdev: savage: Handle err return when savagefb_check_var failed - media: v4l2-core: hold videodev_lock until dev reg, finishes - media: mxl5xx: Move xpt structures off stack - media: mc: mark the media devnode as registered from the, start - arm64: dts: hi3798cv200: fix the size of GICR - wifi: rtl8xxxu: Fix the TX power of RTL8192CU, RTL8723AU - md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING - arm64: tegra: Correct Tegra132 I2C alias - ACPI: resource: Do IRQ override on TongFang GXxHRXx and GMxHGxx - ata: pata_legacy: make legacy_exit() work again - drm/amdgpu: add error handle to avoid out-of-bounds - media: lgdt3306a: Add a check against null-pointer-def - f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode() - x86/mm: Remove broken vsyscall emulation code from the page fault code - vxlan: Fix regression when dropping packets due to invalid src addresses - nilfs2: fix use-after-free of timer for log writer thread - afs: Don't cross .backup mountpoint from backup volume - io_uring: fail NOP if non-zero op flags is passed in - mmc: core: Do not force a retune before RPMB switch - binder: fix max_thread type inconsistency - SUNRPC: Fix loop termination condition in gss_free_in_token_pages() - genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline - ALSA: timer: Set lower bound of start tick time - ipvlan: Dont Use skb->sk in ipvlan_process_v{4,6}_outbound - spi: stm32: Don't warn about spurious interrupts - kconfig: fix comparison to constant symbols, 'm', 'n' - netfilter: tproxy: bail out if IP has been disabled on the device - net:fec: Add fec_enet_deinit() - net: usb: smsc95xx: fix changing LED_SEL bit value updated from EEPROM - smsc95xx: use usbnet->driver_priv - smsc95xx: remove redundant function arguments - enic: Validate length of nl attributes in enic_set_vf_port - dma-buf/sw-sync: don't enable IRQ from sync_print_obj() - net/mlx5e: Use rx_missed_errors instead of rx_dropped for reporting buffer exhaustion - nvmet: fix ns enable/disable possible hang - spi: Don't mark message DMA mapped when no transfer in it is - netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() - nfc: nci: Fix handling of zero-length payload packets in nci_rx_work() - nfc: nci: Fix kcov check in nci_rx_work() - net: fec: avoid lock evasion when reading pps_enable - virtio: delete vq in vp_find_vqs_msix() when request_irq() fails - arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY - openvswitch: Set the skbuff pkt_type for proper pmtud support. - tcp: Fix shift-out-of-bounds in dctcp_update_alpha(). - params: lift param_set_uint_minmax to common code - ipv6: sr: fix memleak in seg6_hmac_init_algo - sunrpc: fix NFSACL RPC retry on soft mount - nfc: nci: Fix uninit-value in nci_rx_work - x86/kconfig: Select ARCH_WANT_FRAME_POINTERS again when UNWINDER_FRAME_POINTER=y - null_blk: Fix the WARNING: modpost: missing MODULE_DESCRIPTION() - media: cec: cec-api: add locking in cec_release() - media: cec: cec-adap: always cancel work in cec_transmit_msg_fh - um: Fix the -Wmissing-prototypes warning for __switch_mm - powerpc/pseries: Add failure related checks for h_get_mpp and h_get_ppp - scsi: qla2xxx: Replace all non-returning strlcpy() with strscpy() - media: stk1160: fix bounds checking in stk1160_copy_video() - um: Add winch to winch_handlers before registering winch IRQ - um: Fix return value in ubd_init() - drm/msm/dpu: Always flush the slave INTF on the CTL - Input: pm8xxx-vibrator - correct VIB_MAX_LEVELS calculation - Input: ims-pcu - fix printf string overflow - libsubcmd: Fix parse-options memory leak - serial: sh-sci: protect invalidating RXDMA on shutdown - f2fs: fix to release node block count in error path of f2fs_new_node_page() - extcon: max8997: select IRQ_DOMAIN instead of depending on it - ppdev: Add an error check in register_device - ppdev: Remove usage of the deprecated ida_simple_xx() API - stm class: Fix a double free in stm_register_device() - usb: gadget: u_audio: Clear uac pointer when freed. - microblaze: Remove early printk call from cpuinfo-static.c - microblaze: Remove gcc flag for non existing early_printk.c file - iio: pressure: dps310: support negative temperature values - greybus: arche-ctrl: move device table to its right location - serial: max3100: Fix bitwise types - serial: max3100: Update uart_driver_registered on driver removal - serial: max3100: Lock port->lock when calling uart_handle_cts_change() - firmware: dmi-id: add a release callback function - dmaengine: idma64: Add check for dma_set_max_seg_size - soundwire: cadence: fix invalid PDI offset - soundwire: cadence_master: improve PDI allocation - soundwire: intel: don't filter out PDI0/1 - soundwire: cadence/intel: simplify PDI/port mapping - greybus: lights: check return of get_channel_from_mode - sched/fair: Allow disabling sched_balance_newidle with sched_relax_domain_level - sched/topology: Don't set SD_BALANCE_WAKE on cpuset domain relax - af_packet: do not call packet_read_pending() from tpacket_destruct_skb() - netrom: fix possible dead-lock in nr_rt_ioctl() - RDMA/IPoIB: Fix format truncation compilation errors - selftests/kcmp: remove unused open mode - selftests/kcmp: Make the test output consistent and clear - SUNRPC: Fix gss_free_in_token_pages() - sunrpc: removed redundant procp check - ext4: avoid excessive credit estimate in ext4_tmpfile() - x86/insn: Fix PUSH instruction in x86 instruction decoder opcode map - RDMA/hns: Use complete parentheses in macros - drm/panel: simple: Add missing Innolux G121X1-L03 format, flags, connector - ASoC: tracing: Export SND_SOC_DAPM_DIR_OUT to its value - drm/arm/malidp: fix a possible null pointer dereference - fbdev: sh7760fb: allow modular build - platform/x86: wmi: Make two functions static - media: radio-shark2: Avoid led_names truncations - media: ngene: Add dvb_ca_en50221_init return value check - fbdev: sisfb: hide unused variables - powerpc/fsl-soc: hide unused const variable - drm/mediatek: Add 0 size check to mtk_drm_gem_obj - fbdev: shmobile: fix snprintf truncation - mtd: rawnand: hynix: fixed typo - drm/amd/display: Fix potential index out of bounds in color transformation function - ipv6: sr: fix invalid unregister error path - ipv6: sr: fix incorrect unregister order - ipv6: sr: add missing seg6_local_exit - net: openvswitch: fix overwriting ct original tuple for ICMPv6 - net: usb: smsc95xx: stop lying about skb->truesize - af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg - net: ethernet: cortina: Locking fixes - m68k: mac: Fix reboot hang on Mac IIci - m68k: Fix spinlock race in kernel thread creation - net: usb: sr9700: stop lying about skb->truesize - usb: aqc111: stop lying about skb->truesize - wifi: mwl8k: initialize cmd->addr[] properly - scsi: qedf: Ensure the copied buf is NUL terminated - scsi: bfa: Ensure the copied buf is NUL terminated - HID: intel-ish-hid: ipc: Add check for pci_alloc_irq_vectors - Revert "sh: Handle calling csum_partial with misaligned data" - sh: kprobes: Merge arch_copy_kprobe() into arch_prepare_kprobe() - wifi: ar5523: enable proper endpoint verification - wifi: carl9170: add a proper sanity check for endpoints - macintosh/via-macii: Fix "BUG: sleeping function called from invalid context" - tcp: avoid premature drops in tcp_add_backlog() - tcp: fix a signed-integer-overflow bug in tcp_add_backlog() - tcp: minor optimization in tcp_add_backlog() - wifi: ath10k: populate board data for WCN3990 - wifi: ath10k: Fix an error code problem in ath10k_dbg_sta_write_peer_debug_trigger() - x86/purgatory: Switch to the position-independent small code model - scsi: hpsa: Fix allocation size for Scsi_Host private data - scsi: libsas: Fix the failure of adding phy with zero-address to port - cpufreq: exit() callback is optional - cpufreq: Rearrange locking in cpufreq_remove_dev() - cpufreq: Split cpufreq_offline() - cpufreq: Reorganize checks in cpufreq_offline() - ACPI: disable -Wstringop-truncation - irqchip/alpine-msi: Fix off-by-one in allocation error path - scsi: ufs: core: Perform read back after disabling UIC_COMMAND_COMPL - scsi: ufs: core: Perform read back after disabling interrupts - scsi: ufs: cdns-pltfrm: Perform read back after writing HCLKDIV - scsi: ufs: qcom: Perform read back after writing reset bit - qed: avoid truncating work queue length - x86/boot: Ignore relocations in .notes sections in walk_relocs() too - wifi: ath10k: poll service ready message before failing - md: fix resync softlockup when bitmap size is less than array size - null_blk: Fix missing mutex_destroy() at module removal - jffs2: prevent xattr node from overflowing the eraseblock - s390/cio: fix tracepoint subchannel type field - crypto: ccp - drop platform ifdef checks - parisc: add missing export of __cmpxchg_u8() - nilfs2: fix out-of-range warning - ecryptfs: Fix buffer size for tag 66 packet - firmware: raspberrypi: Use correct device for DMA mappings - crypto: bcm - Fix pointer arithmetic - openpromfs: finish conversion to the new mount API - nvme: find numa distance only if controller has valid numa id - drm/amdkfd: Flush the process wq before creating a kfd_process - ASoC: da7219-aad: fix usage of device_get_named_child_node() - ASoC: dt-bindings: rt5645: add cbj sleeve gpio property - ASoC: rt5645: Fix the electric noise due to the CBJ contacts floating - drm/amd/display: Set color_mgmt_changed to true on unsuspend - net: usb: qmi_wwan: add Telit FN920C04 compositions - wifi: cfg80211: fix the order of arguments for trace events of the tx_rx_evt class - nilfs2: fix potential hang in nilfs_detach_log_writer() - nilfs2: fix unexpected freezing of nilfs_segctor_sync() - net: smc91x: Fix m68k kernel compilation for ColdFire CPU - ring-buffer: Fix a race between readers and resize checks - speakup: Fix sizeof() vs ARRAY_SIZE() bug - tty: n_gsm: fix possible out-of-bounds in gsm0_receive() - x86/tsc: Trust initial offset in architectural TSC-adjust MSRs + UBUNTU: Upstream stable to v5.4.278 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2071668 Title: Focal update: v5.4.278 upstream stable release To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2071668/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs