Public bug reported:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
upstream stable patchset 2020-02-05
Ported from the following upstream stable releases:
v4.19.96, v5.4.12,
v4.19.97, v5.4.13
from git://git.kernel.org/
chardev: Avoid potential use-after-free in 'chrdev_open()'
i2c: fix bus recovery stop mode timing
usb: chipidea: host: Disable port power only if previously enabled
ALSA: usb-audio: Apply the sample rate quirk for Bose Companion 5
ALSA: hda/realtek - Add new codec supported for ALCS1200A
ALSA: hda/realtek - Set EAPD control to default for ALC222
ALSA: hda/realtek - Add quirk for the bass speaker on Lenovo Yoga X1 7th gen
kernel/trace: Fix do not unregister tracepoints when register
sched_migrate_task fail
tracing: Have stack tracer compile when MCOUNT_INSN_SIZE is not defined
tracing: Change offset type to s32 in preempt/irq tracepoints
HID: Fix slab-out-of-bounds read in hid_field_extract
HID: uhid: Fix returning EPOLLOUT from uhid_char_poll
HID: hid-input: clear unmapped usages
Input: add safety guards to input_set_keycode()
Input: input_event - fix struct padding on sparc64
drm/sun4i: tcon: Set RGB DCLK min. divider based on hardware model
drm/fb-helper: Round up bits_per_pixel if possible
drm/dp_mst: correct the shifting in DP_REMOTE_I2C_READ
can: kvaser_usb: fix interface sanity check
can: gs_usb: gs_usb_probe(): use descriptors of current altsetting
can: mscan: mscan_rx_poll(): fix rx path lockup when returning from polling to
irq mode
can: can_dropped_invalid_skb(): ensure an initialized headroom in outgoing CAN
sk_buffs
gpiolib: acpi: Turn dmi_system_id table into a generic quirk table
gpiolib: acpi: Add honor_wakeup module-option + quirk mechanism
staging: vt6656: set usb_set_intfdata on driver fail.
USB: serial: option: add ZLP support for 0x1bc7/0x9010
usb: musb: fix idling for suspend after disconnect interrupt
usb: musb: Disable pullup at init
usb: musb: dma: Correct parameter passed to IRQ handler
staging: comedi: adv_pci1710: fix AI channels 16-31 for PCI-1713
staging: rtl8188eu: Add device code for TP-Link TL-WN727N v5.21
serdev: Don't claim unsupported ACPI serial devices
tty: link tty and port before configuring it as console
tty: always relink the port
mwifiex: pcie: Fix memory leak in mwifiex_pcie_alloc_cmdrsp_buf
scsi: bfa: release allocated memory in case of error
rtl8xxxu: prevent leaking urb
HID: hiddev: fix mess in hiddev_open()
USB: Fix: Don't skip endpoint descriptors with maxpacket=0
phy: cpcap-usb: Fix error path when no host driver is loaded
phy: cpcap-usb: Fix flakey host idling and enumerating of devices
netfilter: arp_tables: init netns pointer in xt_tgchk_param struct
netfilter: conntrack: dccp, sctp: handle null timeout argument
netfilter: ipset: avoid null deref when IPSET_ATTR_LINENO is present
tpm: Handle negative priv->response_len in tpm_common_read()
pstore/ram: Regularize prz label allocation lifetime
USB-PD tcpm: bad warning+size, PPS adapters
staging: vt6656: correct return of vnt_init_registers.
staging: vt6656: limit reg output to block size
arm64: Implement copy_thread_tls
arm: Implement copy_thread_tls
parisc: Implement copy_thread_tls
riscv: Implement copy_thread_tls
xtensa: Implement copy_thread_tls
um: Implement copy_thread_tls
staging: vt6656: remove bool from vnt_radio_power_on ret
rpmsg: char: release allocated memory
UBUNTU: upstream stable to v4.19.96, v5.4.12
hidraw: Return EPOLLOUT from hidraw_poll
HID: hidraw: Fix returning EPOLLOUT from hidraw_poll
HID: hidraw, uhid: Always report EPOLLOUT
ethtool: reduce stack usage with clang
fs/select: avoid clang stack usage warning
f2fs: check if file namelen exceeds max value
iwlwifi: dbg_ini: fix memory leak in alloc_sgtable
iwlwifi: pcie: fix memory leaks in iwl_pcie_ctxt_info_gen3_init
rtc: mt6397: fix alarm register overwrite
RDMA/bnxt_re: Avoid freeing MR resources if dereg fails
RDMA/bnxt_re: Fix Send Work Entry state check while polling completions
ASoC: soc-core: Set dpcm_playback / dpcm_capture
ASoC: stm32: spdifrx: fix inconsistent lock state
ASoC: stm32: spdifrx: fix race condition in irq handler
mtd: onenand: omap2: Pass correct flags for prep_dma_memcpy
gpio: zynq: Fix for bug in zynq_gpio_restore_context API
iommu: Remove device link to group on failure
gpio: Fix error message on out-of-range GPIO in lookup table
hsr: reset network header when supervision frame is created
s390/qeth: fix false reporting of VNIC CHAR config failure
s390/qeth: Fix vnicc_is_in_use if rx_bcast not set
cifs: Adjust indentation in smb2_open_file
afs: Fix missing cell comparison in afs_test_super()
drm/ttm: fix start page for huge page check in ttm_put_pages()
drm/ttm: fix incrementing the page pointer for huge pages
btrfs: simplify inode locking for RWF_NOWAIT
RDMA/mlx5: Return proper error value
RDMA/srpt: Report the SCSI residual to the initiator
scsi: enclosure: Fix stale device oops with hot replug
scsi: sd: Clear sdkp->protection_type if disk is reformatted without PI
platform/x86: asus-wmi: Fix keyboard brightness cannot be set to 0
platform/x86: GPD pocket fan: Use default values when wrong modparams are given
xprtrdma: Fix completion wait during device removal
crypto: virtio - implement missing support for output IVs
NFSv2: Fix a typo in encode_sattr()
NFSv4.x: Drop the slot if nfs4_delegreturn_prepare waits for layoutreturn
iio: imu: adis16480: assign bias value only if operation succeeded
mei: fix modalias documentation
clk: samsung: exynos5420: Preserve CPU clocks configuration during
suspend/resume
pinctl: ti: iodelay: fix error checking on pinctrl_count_index_with_args call
pinctrl: lewisburg: Update pin list according to v1.1v6
scsi: sd: enable compat ioctls for sed-opal
arm64: dts: apq8096-db820c: Increase load on l21 for SDCARD
af_unix: add compat_ioctl support
compat_ioctl: handle SIOCOUTQNSD
PCI: dwc: Fix find_next_bit() usage
PCI/PTM: Remove spurious "d" from granularity message
powerpc/powernv: Disable native PCIe port management
tty: serial: imx: use the sg count from dma_map_sg
tty: serial: pch_uart: correct usage of dma_unmap_sg
media: ov6650: Fix incorrect use of JPEG colorspace
media: ov6650: Fix some format attributes not under control
media: ov6650: Fix .get_fmt() V4L2_SUBDEV_FORMAT_TRY support
media: rcar-vin: Fix incorrect return statement in rvin_try_format()
media: v4l: cadence: Fix how unsued lanes are handled in 'csi2rx_start()'
media: exynos4-is: Fix recursive locking in isp_video_release()
iommu/mediatek: Correct the flush_iotlb_all callback
mtd: spi-nor: fix silent truncation in spi_nor_read()
mtd: spi-nor: fix silent truncation in spi_nor_read_raw()
spi: atmel: fix handling of cs_change set on non-last xfer
rtlwifi: Remove unnecessary NULL check in rtl_regd_init
f2fs: fix potential overflow
rtc: msm6242: Fix reading of 10-hour digit
rtc: brcmstb-waketimer: add missed clk_disable_unprepare
gpio: mpc8xxx: Add platform device to gpiochip->parent
scsi: libcxgbi: fix NULL pointer dereference in cxgbi_device_destroy()
selftests: firmware: Fix it to do root uid check and skip
rseq/selftests: Turn off timeout setting
mips: cacheinfo: report shared CPU map
MIPS: Prevent link failure with kcov instrumentation
drm/arm/mali: make malidp_mw_connector_helper_funcs static
dmaengine: k3dma: Avoid null pointer traversal
ioat: ioat_alloc_ring() failure handling.
hexagon: parenthesize registers in asm predicates
hexagon: work around compiler crash
ocfs2: call journal flush to mark journal as empty after journal recovery when
mount
phy: mapphone-mdm6600: Fix uninitialized status value regression
IB/hfi1: Don't cancel unused work item
netfilter: nft_flow_offload: fix underflow in flowtable reference counter
fs: move guard_bio_eod() after bio_set_op_attrs
scsi: mpt3sas: Fix double free in attach error handling
PCI: amlogic: Fix probed clock names
drm/tegra: Fix ordering of cleanup code
s390/qeth: vnicc Fix init to default
scsi: smartpqi: Update attribute name to `driver_version`
syscalls/x86: Wire up COMPAT_SYSCALL_DEFINE0
syscalls/x86: Use COMPAT_SYSCALL_DEFINE0 for IA32 (rt_)sigreturn
syscalls/x86: Fix function types in COND_SYSCALL
ASoC: rsnd: fix DALIGN register for SSIU
RDMA/hns: remove a redundant le16_to_cpu
RDMA/hns: Modify return value of restrack functions
RDMA/hns: Release qp resources when failed to destroy qp
xprtrdma: Connection becomes unstable after a reconnect
xprtrdma: Close window between waking RPC senders and posting Receives
RDMA/hns: Fix to support 64K page for srq
RDMA/hns: Bugfix for qpc/cqc timer configuration
uaccess: Add non-pagefault user-space write function
bpf: Make use of probe_user_write in probe write helper
bpf: skmsg, fix potential psock NULL pointer dereference
scsi: ufs: Give an unique ID to each ufs-bsg
crypto: hisilicon - select NEED_SG_DMA_LENGTH in qm Kconfig
crypto: geode-aes - convert to skcipher API and make thread-safe
nfsd: v4 support requires CRYPTO_SHA256
NFSv4.x: Handle bad/dead sessions correctly in nfs41_sequence_process()
affs: fix a memory leak in affs_remount
pinctrl: sh-pfc: Fix PINMUX_IPSR_PHYS() to set GPSR
pinctrl: sh-pfc: Do not use platform_get_irq() to count interrupts
PCI: pciehp: Do not disable interrupt twice on suspend
gfs2: add compat_ioctl support
PCI: aardvark: Use LTSSM state to build link training flag
PCI: aardvark: Fix PCI_EXP_RTCTL register configuration
PCI/PM: Clear PCIe PME Status even for legacy power management
tools: PCI: Fix fd leakage
MIPS: Loongson: Fix return value of loongson_hwmon_init
media: ov6650: Fix default format not applied on device probe
media: aspeed-video: Fix memory leaks in aspeed_video_probe
spi: sprd: Fix the incorrect SPI register
spi: pxa2xx: Set controller->max_transfer_size in dma mode
sch_cake: Add missing NLA policy entry TCA_CAKE_SPLIT_GSO
NFSD fixing possible null pointer derefering in copy offload
scsi: target/iblock: Fix protection error with blocks greater than 512B
media: intel-ipu3: Align struct ipu3_uapi_awb_fr_config_s to 32 bytes
UBUNTU: upstream stable to v4.19.97, v5.4.13
** Affects: linux (Ubuntu)
Importance: Undecided
Status: Confirmed
** Affects: linux (Ubuntu Disco)
Importance: Undecided
Assignee: Kamal Mostafa (kamalmostafa)
Status: In Progress
** Tags: kernel-stable-tracking-bug
** Changed in: linux (Ubuntu)
Status: New => Confirmed
** Tags added: kernel-stable-tracking-bug
** Also affects: linux (Ubuntu Disco)
Importance: Undecided
Status: New
** Changed in: linux (Ubuntu Disco)
Status: New => In Progress
** Changed in: linux (Ubuntu Disco)
Assignee: (unassigned) => Kamal Mostafa (kamalmostafa)
** Description changed:
+ SRU Justification
- SRU Justification
+ Impact:
+ The upstream process for stable tree updates is quite similar
+ in scope to the Ubuntu SRU process, e.g., each patch has to
+ demonstrably fix a bug, and each patch is vetted by upstream
+ by originating either directly from a mainline/stable Linux tree or
+ a minimally backported form of that patch. The following upstream
+ stable patches should be included in the Ubuntu kernel:
- Impact:
- The upstream process for stable tree updates is quite similar
- in scope to the Ubuntu SRU process, e.g., each patch has to
- demonstrably fix a bug, and each patch is vetted by upstream
- by originating either directly from a mainline/stable Linux tree or
- a minimally backported form of that patch. The following upstream
- stable patches should be included in the Ubuntu kernel:
+ upstream stable patchset 2020-02-05
- upstream stable patchset 2020-02-05
- from git://git.kernel.org/
+ Ported from the following upstream stable releases:
+ v4.19.96, v5.4.12,
+ v4.19.97, v5.4.13
+
+ from git://git.kernel.org/
+
+ chardev: Avoid potential use-after-free in 'chrdev_open()'
+ i2c: fix bus recovery stop mode timing
+ usb: chipidea: host: Disable port power only if previously enabled
+ ALSA: usb-audio: Apply the sample rate quirk for Bose Companion 5
+ ALSA: hda/realtek - Add new codec supported for ALCS1200A
+ ALSA: hda/realtek - Set EAPD control to default for ALC222
+ ALSA: hda/realtek - Add quirk for the bass speaker on Lenovo Yoga X1 7th gen
+ kernel/trace: Fix do not unregister tracepoints when register
sched_migrate_task fail
+ tracing: Have stack tracer compile when MCOUNT_INSN_SIZE is not defined
+ tracing: Change offset type to s32 in preempt/irq tracepoints
+ HID: Fix slab-out-of-bounds read in hid_field_extract
+ HID: uhid: Fix returning EPOLLOUT from uhid_char_poll
+ HID: hid-input: clear unmapped usages
+ Input: add safety guards to input_set_keycode()
+ Input: input_event - fix struct padding on sparc64
+ drm/sun4i: tcon: Set RGB DCLK min. divider based on hardware model
+ drm/fb-helper: Round up bits_per_pixel if possible
+ drm/dp_mst: correct the shifting in DP_REMOTE_I2C_READ
+ can: kvaser_usb: fix interface sanity check
+ can: gs_usb: gs_usb_probe(): use descriptors of current altsetting
+ can: mscan: mscan_rx_poll(): fix rx path lockup when returning from polling
to irq mode
+ can: can_dropped_invalid_skb(): ensure an initialized headroom in outgoing
CAN sk_buffs
+ gpiolib: acpi: Turn dmi_system_id table into a generic quirk table
+ gpiolib: acpi: Add honor_wakeup module-option + quirk mechanism
+ staging: vt6656: set usb_set_intfdata on driver fail.
+ USB: serial: option: add ZLP support for 0x1bc7/0x9010
+ usb: musb: fix idling for suspend after disconnect interrupt
+ usb: musb: Disable pullup at init
+ usb: musb: dma: Correct parameter passed to IRQ handler
+ staging: comedi: adv_pci1710: fix AI channels 16-31 for PCI-1713
+ staging: rtl8188eu: Add device code for TP-Link TL-WN727N v5.21
+ serdev: Don't claim unsupported ACPI serial devices
+ tty: link tty and port before configuring it as console
+ tty: always relink the port
+ mwifiex: pcie: Fix memory leak in mwifiex_pcie_alloc_cmdrsp_buf
+ scsi: bfa: release allocated memory in case of error
+ rtl8xxxu: prevent leaking urb
+ HID: hiddev: fix mess in hiddev_open()
+ USB: Fix: Don't skip endpoint descriptors with maxpacket=0
+ phy: cpcap-usb: Fix error path when no host driver is loaded
+ phy: cpcap-usb: Fix flakey host idling and enumerating of devices
+ netfilter: arp_tables: init netns pointer in xt_tgchk_param struct
+ netfilter: conntrack: dccp, sctp: handle null timeout argument
+ netfilter: ipset: avoid null deref when IPSET_ATTR_LINENO is present
+ tpm: Handle negative priv->response_len in tpm_common_read()
+ pstore/ram: Regularize prz label allocation lifetime
+ USB-PD tcpm: bad warning+size, PPS adapters
+ staging: vt6656: correct return of vnt_init_registers.
+ staging: vt6656: limit reg output to block size
+ arm64: Implement copy_thread_tls
+ arm: Implement copy_thread_tls
+ parisc: Implement copy_thread_tls
+ riscv: Implement copy_thread_tls
+ xtensa: Implement copy_thread_tls
+ um: Implement copy_thread_tls
+ staging: vt6656: remove bool from vnt_radio_power_on ret
+ rpmsg: char: release allocated memory
+ UBUNTU: upstream stable to v4.19.96, v5.4.12
+ hidraw: Return EPOLLOUT from hidraw_poll
+ HID: hidraw: Fix returning EPOLLOUT from hidraw_poll
+ HID: hidraw, uhid: Always report EPOLLOUT
+ ethtool: reduce stack usage with clang
+ fs/select: avoid clang stack usage warning
+ f2fs: check if file namelen exceeds max value
+ iwlwifi: dbg_ini: fix memory leak in alloc_sgtable
+ iwlwifi: pcie: fix memory leaks in iwl_pcie_ctxt_info_gen3_init
+ rtc: mt6397: fix alarm register overwrite
+ RDMA/bnxt_re: Avoid freeing MR resources if dereg fails
+ RDMA/bnxt_re: Fix Send Work Entry state check while polling completions
+ ASoC: soc-core: Set dpcm_playback / dpcm_capture
+ ASoC: stm32: spdifrx: fix inconsistent lock state
+ ASoC: stm32: spdifrx: fix race condition in irq handler
+ mtd: onenand: omap2: Pass correct flags for prep_dma_memcpy
+ gpio: zynq: Fix for bug in zynq_gpio_restore_context API
+ iommu: Remove device link to group on failure
+ gpio: Fix error message on out-of-range GPIO in lookup table
+ hsr: reset network header when supervision frame is created
+ s390/qeth: fix false reporting of VNIC CHAR config failure
+ s390/qeth: Fix vnicc_is_in_use if rx_bcast not set
+ cifs: Adjust indentation in smb2_open_file
+ afs: Fix missing cell comparison in afs_test_super()
+ drm/ttm: fix start page for huge page check in ttm_put_pages()
+ drm/ttm: fix incrementing the page pointer for huge pages
+ btrfs: simplify inode locking for RWF_NOWAIT
+ RDMA/mlx5: Return proper error value
+ RDMA/srpt: Report the SCSI residual to the initiator
+ scsi: enclosure: Fix stale device oops with hot replug
+ scsi: sd: Clear sdkp->protection_type if disk is reformatted without PI
+ platform/x86: asus-wmi: Fix keyboard brightness cannot be set to 0
+ platform/x86: GPD pocket fan: Use default values when wrong modparams are
given
+ xprtrdma: Fix completion wait during device removal
+ crypto: virtio - implement missing support for output IVs
+ NFSv2: Fix a typo in encode_sattr()
+ NFSv4.x: Drop the slot if nfs4_delegreturn_prepare waits for layoutreturn
+ iio: imu: adis16480: assign bias value only if operation succeeded
+ mei: fix modalias documentation
+ clk: samsung: exynos5420: Preserve CPU clocks configuration during
suspend/resume
+ pinctl: ti: iodelay: fix error checking on pinctrl_count_index_with_args call
+ pinctrl: lewisburg: Update pin list according to v1.1v6
+ scsi: sd: enable compat ioctls for sed-opal
+ arm64: dts: apq8096-db820c: Increase load on l21 for SDCARD
+ af_unix: add compat_ioctl support
+ compat_ioctl: handle SIOCOUTQNSD
+ PCI: dwc: Fix find_next_bit() usage
+ PCI/PTM: Remove spurious "d" from granularity message
+ powerpc/powernv: Disable native PCIe port management
+ tty: serial: imx: use the sg count from dma_map_sg
+ tty: serial: pch_uart: correct usage of dma_unmap_sg
+ media: ov6650: Fix incorrect use of JPEG colorspace
+ media: ov6650: Fix some format attributes not under control
+ media: ov6650: Fix .get_fmt() V4L2_SUBDEV_FORMAT_TRY support
+ media: rcar-vin: Fix incorrect return statement in rvin_try_format()
+ media: v4l: cadence: Fix how unsued lanes are handled in 'csi2rx_start()'
+ media: exynos4-is: Fix recursive locking in isp_video_release()
+ iommu/mediatek: Correct the flush_iotlb_all callback
+ mtd: spi-nor: fix silent truncation in spi_nor_read()
+ mtd: spi-nor: fix silent truncation in spi_nor_read_raw()
+ spi: atmel: fix handling of cs_change set on non-last xfer
+ rtlwifi: Remove unnecessary NULL check in rtl_regd_init
+ f2fs: fix potential overflow
+ rtc: msm6242: Fix reading of 10-hour digit
+ rtc: brcmstb-waketimer: add missed clk_disable_unprepare
+ gpio: mpc8xxx: Add platform device to gpiochip->parent
+ scsi: libcxgbi: fix NULL pointer dereference in cxgbi_device_destroy()
+ selftests: firmware: Fix it to do root uid check and skip
+ rseq/selftests: Turn off timeout setting
+ mips: cacheinfo: report shared CPU map
+ MIPS: Prevent link failure with kcov instrumentation
+ drm/arm/mali: make malidp_mw_connector_helper_funcs static
+ dmaengine: k3dma: Avoid null pointer traversal
+ ioat: ioat_alloc_ring() failure handling.
+ hexagon: parenthesize registers in asm predicates
+ hexagon: work around compiler crash
+ ocfs2: call journal flush to mark journal as empty after journal recovery
when mount
+ phy: mapphone-mdm6600: Fix uninitialized status value regression
+ IB/hfi1: Don't cancel unused work item
+ netfilter: nft_flow_offload: fix underflow in flowtable reference counter
+ fs: move guard_bio_eod() after bio_set_op_attrs
+ scsi: mpt3sas: Fix double free in attach error handling
+ PCI: amlogic: Fix probed clock names
+ drm/tegra: Fix ordering of cleanup code
+ s390/qeth: vnicc Fix init to default
+ scsi: smartpqi: Update attribute name to `driver_version`
+ syscalls/x86: Wire up COMPAT_SYSCALL_DEFINE0
+ syscalls/x86: Use COMPAT_SYSCALL_DEFINE0 for IA32 (rt_)sigreturn
+ syscalls/x86: Fix function types in COND_SYSCALL
+ ASoC: rsnd: fix DALIGN register for SSIU
+ RDMA/hns: remove a redundant le16_to_cpu
+ RDMA/hns: Modify return value of restrack functions
+ RDMA/hns: Release qp resources when failed to destroy qp
+ xprtrdma: Connection becomes unstable after a reconnect
+ xprtrdma: Close window between waking RPC senders and posting Receives
+ RDMA/hns: Fix to support 64K page for srq
+ RDMA/hns: Bugfix for qpc/cqc timer configuration
+ uaccess: Add non-pagefault user-space write function
+ bpf: Make use of probe_user_write in probe write helper
+ bpf: skmsg, fix potential psock NULL pointer dereference
+ scsi: ufs: Give an unique ID to each ufs-bsg
+ crypto: hisilicon - select NEED_SG_DMA_LENGTH in qm Kconfig
+ crypto: geode-aes - convert to skcipher API and make thread-safe
+ nfsd: v4 support requires CRYPTO_SHA256
+ NFSv4.x: Handle bad/dead sessions correctly in nfs41_sequence_process()
+ affs: fix a memory leak in affs_remount
+ pinctrl: sh-pfc: Fix PINMUX_IPSR_PHYS() to set GPSR
+ pinctrl: sh-pfc: Do not use platform_get_irq() to count interrupts
+ PCI: pciehp: Do not disable interrupt twice on suspend
+ gfs2: add compat_ioctl support
+ PCI: aardvark: Use LTSSM state to build link training flag
+ PCI: aardvark: Fix PCI_EXP_RTCTL register configuration
+ PCI/PM: Clear PCIe PME Status even for legacy power management
+ tools: PCI: Fix fd leakage
+ MIPS: Loongson: Fix return value of loongson_hwmon_init
+ media: ov6650: Fix default format not applied on device probe
+ media: aspeed-video: Fix memory leaks in aspeed_video_probe
+ spi: sprd: Fix the incorrect SPI register
+ spi: pxa2xx: Set controller->max_transfer_size in dma mode
+ sch_cake: Add missing NLA policy entry TCA_CAKE_SPLIT_GSO
+ NFSD fixing possible null pointer derefering in copy offload
+ scsi: target/iblock: Fix protection error with blocks greater than 512B
+ media: intel-ipu3: Align struct ipu3_uapi_awb_fr_config_s to 32 bytes
+ UBUNTU: upstream stable to v4.19.97, v5.4.13
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1862059
Title:
Disco update: upstream stable patchset 2020-02-05
Status in linux package in Ubuntu:
Confirmed
Status in linux source package in Disco:
In Progress
Bug description:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
upstream stable patchset 2020-02-05
Ported from the following upstream stable releases:
v4.19.96, v5.4.12,
v4.19.97, v5.4.13
from git://git.kernel.org/
chardev: Avoid potential use-after-free in 'chrdev_open()'
i2c: fix bus recovery stop mode timing
usb: chipidea: host: Disable port power only if previously enabled
ALSA: usb-audio: Apply the sample rate quirk for Bose Companion 5
ALSA: hda/realtek - Add new codec supported for ALCS1200A
ALSA: hda/realtek - Set EAPD control to default for ALC222
ALSA: hda/realtek - Add quirk for the bass speaker on Lenovo Yoga X1 7th gen
kernel/trace: Fix do not unregister tracepoints when register
sched_migrate_task fail
tracing: Have stack tracer compile when MCOUNT_INSN_SIZE is not defined
tracing: Change offset type to s32 in preempt/irq tracepoints
HID: Fix slab-out-of-bounds read in hid_field_extract
HID: uhid: Fix returning EPOLLOUT from uhid_char_poll
HID: hid-input: clear unmapped usages
Input: add safety guards to input_set_keycode()
Input: input_event - fix struct padding on sparc64
drm/sun4i: tcon: Set RGB DCLK min. divider based on hardware model
drm/fb-helper: Round up bits_per_pixel if possible
drm/dp_mst: correct the shifting in DP_REMOTE_I2C_READ
can: kvaser_usb: fix interface sanity check
can: gs_usb: gs_usb_probe(): use descriptors of current altsetting
can: mscan: mscan_rx_poll(): fix rx path lockup when returning from polling
to irq mode
can: can_dropped_invalid_skb(): ensure an initialized headroom in outgoing
CAN sk_buffs
gpiolib: acpi: Turn dmi_system_id table into a generic quirk table
gpiolib: acpi: Add honor_wakeup module-option + quirk mechanism
staging: vt6656: set usb_set_intfdata on driver fail.
USB: serial: option: add ZLP support for 0x1bc7/0x9010
usb: musb: fix idling for suspend after disconnect interrupt
usb: musb: Disable pullup at init
usb: musb: dma: Correct parameter passed to IRQ handler
staging: comedi: adv_pci1710: fix AI channels 16-31 for PCI-1713
staging: rtl8188eu: Add device code for TP-Link TL-WN727N v5.21
serdev: Don't claim unsupported ACPI serial devices
tty: link tty and port before configuring it as console
tty: always relink the port
mwifiex: pcie: Fix memory leak in mwifiex_pcie_alloc_cmdrsp_buf
scsi: bfa: release allocated memory in case of error
rtl8xxxu: prevent leaking urb
HID: hiddev: fix mess in hiddev_open()
USB: Fix: Don't skip endpoint descriptors with maxpacket=0
phy: cpcap-usb: Fix error path when no host driver is loaded
phy: cpcap-usb: Fix flakey host idling and enumerating of devices
netfilter: arp_tables: init netns pointer in xt_tgchk_param struct
netfilter: conntrack: dccp, sctp: handle null timeout argument
netfilter: ipset: avoid null deref when IPSET_ATTR_LINENO is present
tpm: Handle negative priv->response_len in tpm_common_read()
pstore/ram: Regularize prz label allocation lifetime
USB-PD tcpm: bad warning+size, PPS adapters
staging: vt6656: correct return of vnt_init_registers.
staging: vt6656: limit reg output to block size
arm64: Implement copy_thread_tls
arm: Implement copy_thread_tls
parisc: Implement copy_thread_tls
riscv: Implement copy_thread_tls
xtensa: Implement copy_thread_tls
um: Implement copy_thread_tls
staging: vt6656: remove bool from vnt_radio_power_on ret
rpmsg: char: release allocated memory
UBUNTU: upstream stable to v4.19.96, v5.4.12
hidraw: Return EPOLLOUT from hidraw_poll
HID: hidraw: Fix returning EPOLLOUT from hidraw_poll
HID: hidraw, uhid: Always report EPOLLOUT
ethtool: reduce stack usage with clang
fs/select: avoid clang stack usage warning
f2fs: check if file namelen exceeds max value
iwlwifi: dbg_ini: fix memory leak in alloc_sgtable
iwlwifi: pcie: fix memory leaks in iwl_pcie_ctxt_info_gen3_init
rtc: mt6397: fix alarm register overwrite
RDMA/bnxt_re: Avoid freeing MR resources if dereg fails
RDMA/bnxt_re: Fix Send Work Entry state check while polling completions
ASoC: soc-core: Set dpcm_playback / dpcm_capture
ASoC: stm32: spdifrx: fix inconsistent lock state
ASoC: stm32: spdifrx: fix race condition in irq handler
mtd: onenand: omap2: Pass correct flags for prep_dma_memcpy
gpio: zynq: Fix for bug in zynq_gpio_restore_context API
iommu: Remove device link to group on failure
gpio: Fix error message on out-of-range GPIO in lookup table
hsr: reset network header when supervision frame is created
s390/qeth: fix false reporting of VNIC CHAR config failure
s390/qeth: Fix vnicc_is_in_use if rx_bcast not set
cifs: Adjust indentation in smb2_open_file
afs: Fix missing cell comparison in afs_test_super()
drm/ttm: fix start page for huge page check in ttm_put_pages()
drm/ttm: fix incrementing the page pointer for huge pages
btrfs: simplify inode locking for RWF_NOWAIT
RDMA/mlx5: Return proper error value
RDMA/srpt: Report the SCSI residual to the initiator
scsi: enclosure: Fix stale device oops with hot replug
scsi: sd: Clear sdkp->protection_type if disk is reformatted without PI
platform/x86: asus-wmi: Fix keyboard brightness cannot be set to 0
platform/x86: GPD pocket fan: Use default values when wrong modparams are
given
xprtrdma: Fix completion wait during device removal
crypto: virtio - implement missing support for output IVs
NFSv2: Fix a typo in encode_sattr()
NFSv4.x: Drop the slot if nfs4_delegreturn_prepare waits for layoutreturn
iio: imu: adis16480: assign bias value only if operation succeeded
mei: fix modalias documentation
clk: samsung: exynos5420: Preserve CPU clocks configuration during
suspend/resume
pinctl: ti: iodelay: fix error checking on pinctrl_count_index_with_args call
pinctrl: lewisburg: Update pin list according to v1.1v6
scsi: sd: enable compat ioctls for sed-opal
arm64: dts: apq8096-db820c: Increase load on l21 for SDCARD
af_unix: add compat_ioctl support
compat_ioctl: handle SIOCOUTQNSD
PCI: dwc: Fix find_next_bit() usage
PCI/PTM: Remove spurious "d" from granularity message
powerpc/powernv: Disable native PCIe port management
tty: serial: imx: use the sg count from dma_map_sg
tty: serial: pch_uart: correct usage of dma_unmap_sg
media: ov6650: Fix incorrect use of JPEG colorspace
media: ov6650: Fix some format attributes not under control
media: ov6650: Fix .get_fmt() V4L2_SUBDEV_FORMAT_TRY support
media: rcar-vin: Fix incorrect return statement in rvin_try_format()
media: v4l: cadence: Fix how unsued lanes are handled in 'csi2rx_start()'
media: exynos4-is: Fix recursive locking in isp_video_release()
iommu/mediatek: Correct the flush_iotlb_all callback
mtd: spi-nor: fix silent truncation in spi_nor_read()
mtd: spi-nor: fix silent truncation in spi_nor_read_raw()
spi: atmel: fix handling of cs_change set on non-last xfer
rtlwifi: Remove unnecessary NULL check in rtl_regd_init
f2fs: fix potential overflow
rtc: msm6242: Fix reading of 10-hour digit
rtc: brcmstb-waketimer: add missed clk_disable_unprepare
gpio: mpc8xxx: Add platform device to gpiochip->parent
scsi: libcxgbi: fix NULL pointer dereference in cxgbi_device_destroy()
selftests: firmware: Fix it to do root uid check and skip
rseq/selftests: Turn off timeout setting
mips: cacheinfo: report shared CPU map
MIPS: Prevent link failure with kcov instrumentation
drm/arm/mali: make malidp_mw_connector_helper_funcs static
dmaengine: k3dma: Avoid null pointer traversal
ioat: ioat_alloc_ring() failure handling.
hexagon: parenthesize registers in asm predicates
hexagon: work around compiler crash
ocfs2: call journal flush to mark journal as empty after journal recovery
when mount
phy: mapphone-mdm6600: Fix uninitialized status value regression
IB/hfi1: Don't cancel unused work item
netfilter: nft_flow_offload: fix underflow in flowtable reference counter
fs: move guard_bio_eod() after bio_set_op_attrs
scsi: mpt3sas: Fix double free in attach error handling
PCI: amlogic: Fix probed clock names
drm/tegra: Fix ordering of cleanup code
s390/qeth: vnicc Fix init to default
scsi: smartpqi: Update attribute name to `driver_version`
syscalls/x86: Wire up COMPAT_SYSCALL_DEFINE0
syscalls/x86: Use COMPAT_SYSCALL_DEFINE0 for IA32 (rt_)sigreturn
syscalls/x86: Fix function types in COND_SYSCALL
ASoC: rsnd: fix DALIGN register for SSIU
RDMA/hns: remove a redundant le16_to_cpu
RDMA/hns: Modify return value of restrack functions
RDMA/hns: Release qp resources when failed to destroy qp
xprtrdma: Connection becomes unstable after a reconnect
xprtrdma: Close window between waking RPC senders and posting Receives
RDMA/hns: Fix to support 64K page for srq
RDMA/hns: Bugfix for qpc/cqc timer configuration
uaccess: Add non-pagefault user-space write function
bpf: Make use of probe_user_write in probe write helper
bpf: skmsg, fix potential psock NULL pointer dereference
scsi: ufs: Give an unique ID to each ufs-bsg
crypto: hisilicon - select NEED_SG_DMA_LENGTH in qm Kconfig
crypto: geode-aes - convert to skcipher API and make thread-safe
nfsd: v4 support requires CRYPTO_SHA256
NFSv4.x: Handle bad/dead sessions correctly in nfs41_sequence_process()
affs: fix a memory leak in affs_remount
pinctrl: sh-pfc: Fix PINMUX_IPSR_PHYS() to set GPSR
pinctrl: sh-pfc: Do not use platform_get_irq() to count interrupts
PCI: pciehp: Do not disable interrupt twice on suspend
gfs2: add compat_ioctl support
PCI: aardvark: Use LTSSM state to build link training flag
PCI: aardvark: Fix PCI_EXP_RTCTL register configuration
PCI/PM: Clear PCIe PME Status even for legacy power management
tools: PCI: Fix fd leakage
MIPS: Loongson: Fix return value of loongson_hwmon_init
media: ov6650: Fix default format not applied on device probe
media: aspeed-video: Fix memory leaks in aspeed_video_probe
spi: sprd: Fix the incorrect SPI register
spi: pxa2xx: Set controller->max_transfer_size in dma mode
sch_cake: Add missing NLA policy entry TCA_CAKE_SPLIT_GSO
NFSD fixing possible null pointer derefering in copy offload
scsi: target/iblock: Fix protection error with blocks greater than 512B
media: intel-ipu3: Align struct ipu3_uapi_awb_fr_config_s to 32 bytes
UBUNTU: upstream stable to v4.19.97, v5.4.13
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1862059/+subscriptions
--
Mailing list: https://launchpad.net/~kernel-packages
Post to : [email protected]
Unsubscribe : https://launchpad.net/~kernel-packages
More help : https://help.launchpad.net/ListHelp
