Public bug reported:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
upstream stable patchset 2021-08-20
Ported from the following upstream stable releases:
v5.10.55, v5.13.7
v5.10.56, v5.13.8
from git://git.kernel.org/
tools: Allow proper CC/CXX/... override with LLVM=1 in Makefile.include
io_uring: fix link timeout refs
KVM: x86: determine if an exception has an error code only when injecting it.
af_unix: fix garbage collect vs MSG_PEEK
workqueue: fix UAF in pwq_unbound_release_workfn()
cgroup1: fix leaked context root causing sporadic NULL deref in LTP
net/802/mrp: fix memleak in mrp_request_join()
net/802/garp: fix memleak in garp_request_join()
net: annotate data race around sk_ll_usec
sctp: move 198 addresses from unusable to private scope
rcu-tasks: Don't delete holdouts within trc_inspect_reader()
rcu-tasks: Don't delete holdouts within trc_wait_for_one_reader()
ipv6: allocate enough headroom in ip6_finish_output2()
drm/ttm: add a check against null pointer dereference
hfs: add missing clean-up in hfs_fill_super
hfs: fix high memory mapping in hfs_bnode_read
hfs: add lock nesting notation to hfs_find_init
firmware: arm_scmi: Fix possible scmi_linux_errmap buffer overflow
firmware: arm_scmi: Fix range check for the maximum number of pending messages
cifs: fix the out of range assignment to bit fields in parse_server_interfaces
iomap: remove the length variable in iomap_seek_data
iomap: remove the length variable in iomap_seek_hole
ARM: dts: versatile: Fix up interrupt controller node names
ipv6: ip6_finish_output2: set sk into newly allocated nskb
nvme-pci: fix multiple races in nvme_setup_io_queues
UBUNTU: upstream stable to v5.10.55, v5.13.7
selftest: fix build error in tools/testing/selftests/vm/userfaultfd.c
io_uring: fix null-ptr-deref in io_sq_offload_start()
x86/asm: Ensure asm/proto.h can be included stand-alone
pipe: make pipe writes always wake up readers
btrfs: fix rw device counting in __btrfs_free_extra_devids
btrfs: mark compressed range uptodate only if all bio succeed
Revert "ACPI: resources: Add checks for ACPI IRQ override"
ACPI: DPTF: Fix reading of attributes
x86/kvm: fix vcpu-id indexed array sizes
KVM: add missing compat KVM_CLEAR_DIRTY_LOG
ocfs2: fix zero out valid data
ocfs2: issue zeroout to EOF blocks
can: j1939: j1939_xtp_rx_dat_one(): fix rxtimer value between consecutive TP.DT
to 750ms
can: raw: raw_setsockopt(): fix raw_rcv panic for sock UAF
can: peak_usb: pcan_usb_handle_bus_evt(): fix reading rxerr/txerr values
can: mcba_usb_start(): add missing urb->transfer_dma initialization
can: usb_8dev: fix memory leak
can: ems_usb: fix memory leak
can: esd_usb2: fix memory leak
alpha: register early reserved memory in memblock
HID: wacom: Re-enable touch by default for Cintiq 24HDT / 27QHDT
NIU: fix incorrect error return, missed in previous revert
drm/amd/display: ensure dentist display clock update finished in DCN20
drm/amdgpu: Avoid printing of stack contents on firmware load error
drm/amdgpu: Fix resource leak on probe error path
blk-iocost: fix operation ordering in iocg_wake_fn()
nfc: nfcsim: fix use after free during module unload
cfg80211: Fix possible memory leak in function cfg80211_bss_update
RDMA/bnxt_re: Fix stats counters
bpf: Fix OOB read when printing XDP link fdinfo
mac80211: fix enabling 4-address mode on a sta vif after assoc
netfilter: conntrack: adjust stop timestamp to real expiry value
netfilter: nft_nat: allow to specify layer 4 protocol NAT only
i40e: Fix logic of disabling queues
i40e: Fix firmware LLDP agent related warning
i40e: Fix queue-to-TC mapping on Tx
i40e: Fix log TC creation failure when max num of queues is exceeded
tipc: fix implicit-connect for SYN+
tipc: fix sleeping in tipc accept routine
net: Set true network header for ECN decapsulation
net: qrtr: fix memory leaks
ionic: remove intr coalesce update from napi
ionic: fix up dim accounting for tx and rx
ionic: count csum_none when offload enabled
tipc: do not write skb_shinfo frags when doing decrytion
octeontx2-pf: Fix interface down flag on error
mlx4: Fix missing error code in mlx4_load_one()
KVM: x86: Check the right feature bit for MSR_KVM_ASYNC_PF_ACK access
net: llc: fix skb_over_panic
drm/msm/dpu: Fix sm8250_mdp register length
drm/msm/dp: Initialize the INTF_CONFIG register
skmsg: Make sk_psock_destroy() static
net/mlx5: Fix flow table chaining
net/mlx5e: Fix nullptr in mlx5e_hairpin_get_mdev()
sctp: fix return value check in __sctp_rcv_asconf_lookup
tulip: windbond-840: Fix missing pci_disable_device() in probe and remove
sis900: Fix missing pci_disable_device() in probe and remove
can: hi311x: fix a signedness bug in hi3110_cmd()
bpf: Introduce BPF nospec instruction for mitigating Spectre v4
bpf: Fix leakage due to insufficient speculative store bypass mitigation
bpf: Remove superfluous aux sanitation on subprog rejection
bpf: verifier: Allocate idmap scratch in verifier env
bpf: Fix pointer arithmetic mask tightening under state pruning
SMB3: fix readpage for large swap cache
powerpc/pseries: Fix regression while building external modules
i40e: Add additional info to PHY type error
can: j1939: j1939_session_deactivate(): clarify lifetime of session object
btrfs: fix lost inode on log replay after mix of fsync, rename and inode
eviction
mm/memcg: fix NULL pointer dereference in memcg_slab_free_hook()
drm/amdgpu: Check pmops for desired suspend state
io_uring: fix io_prep_async_link locking
platform/x86: amd-pmc: Fix command completion code
platform/x86: amd-pmc: Fix SMU firmware reporting mechanism
ionic: make all rx_mode work threadsafe
drm/panel: panel-simple: Fix proper bpc for ytc700tlag_05_201c
net/mlx5: E-Switch, handle devcom events only for ports on the same device
block: delay freeing the gendisk
powerpc/vdso: Don't use r30 to avoid breaking Go lang
octeontx2-af: Remove unnecessary devm_kfree
UBUNTU: upstream stable to v5.10.56, v5.13.8
** Affects: linux (Ubuntu)
Importance: Undecided
Status: Invalid
** Affects: linux (Ubuntu Hirsute)
Importance: Medium
Assignee: Kamal Mostafa (kamalmostafa)
Status: In Progress
** Tags: kernel-stable-tracking-bug
** Changed in: linux (Ubuntu)
Status: New => Confirmed
** Tags added: kernel-stable-tracking-bug
** Also affects: linux (Ubuntu Hirsute)
Importance: Undecided
Status: New
** Changed in: linux (Ubuntu Hirsute)
Status: New => In Progress
** Changed in: linux (Ubuntu Hirsute)
Importance: Undecided => Medium
** Changed in: linux (Ubuntu Hirsute)
Assignee: (unassigned) => Kamal Mostafa (kamalmostafa)
** Changed in: linux (Ubuntu)
Status: Confirmed => Invalid
** Description changed:
+ SRU Justification
- SRU Justification
+ Impact:
+ The upstream process for stable tree updates is quite similar
+ in scope to the Ubuntu SRU process, e.g., each patch has to
+ demonstrably fix a bug, and each patch is vetted by upstream
+ by originating either directly from a mainline/stable Linux tree or
+ a minimally backported form of that patch. The following upstream
+ stable patches should be included in the Ubuntu kernel:
- Impact:
- The upstream process for stable tree updates is quite similar
- in scope to the Ubuntu SRU process, e.g., each patch has to
- demonstrably fix a bug, and each patch is vetted by upstream
- by originating either directly from a mainline/stable Linux tree or
- a minimally backported form of that patch. The following upstream
- stable patches should be included in the Ubuntu kernel:
+ upstream stable patchset 2021-08-20
- upstream stable patchset 2021-08-20
- from git://git.kernel.org/
+ Ported from the following upstream stable releases:
+ v5.10.55, v5.13.7
+ v5.10.56, v5.13.8
+
+ from git://git.kernel.org/
+
+ tools: Allow proper CC/CXX/... override with LLVM=1 in Makefile.include
+ io_uring: fix link timeout refs
+ KVM: x86: determine if an exception has an error code only when injecting it.
+ af_unix: fix garbage collect vs MSG_PEEK
+ workqueue: fix UAF in pwq_unbound_release_workfn()
+ cgroup1: fix leaked context root causing sporadic NULL deref in LTP
+ net/802/mrp: fix memleak in mrp_request_join()
+ net/802/garp: fix memleak in garp_request_join()
+ net: annotate data race around sk_ll_usec
+ sctp: move 198 addresses from unusable to private scope
+ rcu-tasks: Don't delete holdouts within trc_inspect_reader()
+ rcu-tasks: Don't delete holdouts within trc_wait_for_one_reader()
+ ipv6: allocate enough headroom in ip6_finish_output2()
+ drm/ttm: add a check against null pointer dereference
+ hfs: add missing clean-up in hfs_fill_super
+ hfs: fix high memory mapping in hfs_bnode_read
+ hfs: add lock nesting notation to hfs_find_init
+ firmware: arm_scmi: Fix possible scmi_linux_errmap buffer overflow
+ firmware: arm_scmi: Fix range check for the maximum number of pending messages
+ cifs: fix the out of range assignment to bit fields in parse_server_interfaces
+ iomap: remove the length variable in iomap_seek_data
+ iomap: remove the length variable in iomap_seek_hole
+ ARM: dts: versatile: Fix up interrupt controller node names
+ ipv6: ip6_finish_output2: set sk into newly allocated nskb
+ nvme-pci: fix multiple races in nvme_setup_io_queues
+ UBUNTU: upstream stable to v5.10.55, v5.13.7
+ selftest: fix build error in tools/testing/selftests/vm/userfaultfd.c
+ io_uring: fix null-ptr-deref in io_sq_offload_start()
+ x86/asm: Ensure asm/proto.h can be included stand-alone
+ pipe: make pipe writes always wake up readers
+ btrfs: fix rw device counting in __btrfs_free_extra_devids
+ btrfs: mark compressed range uptodate only if all bio succeed
+ Revert "ACPI: resources: Add checks for ACPI IRQ override"
+ ACPI: DPTF: Fix reading of attributes
+ x86/kvm: fix vcpu-id indexed array sizes
+ KVM: add missing compat KVM_CLEAR_DIRTY_LOG
+ ocfs2: fix zero out valid data
+ ocfs2: issue zeroout to EOF blocks
+ can: j1939: j1939_xtp_rx_dat_one(): fix rxtimer value between consecutive
TP.DT to 750ms
+ can: raw: raw_setsockopt(): fix raw_rcv panic for sock UAF
+ can: peak_usb: pcan_usb_handle_bus_evt(): fix reading rxerr/txerr values
+ can: mcba_usb_start(): add missing urb->transfer_dma initialization
+ can: usb_8dev: fix memory leak
+ can: ems_usb: fix memory leak
+ can: esd_usb2: fix memory leak
+ alpha: register early reserved memory in memblock
+ HID: wacom: Re-enable touch by default for Cintiq 24HDT / 27QHDT
+ NIU: fix incorrect error return, missed in previous revert
+ drm/amd/display: ensure dentist display clock update finished in DCN20
+ drm/amdgpu: Avoid printing of stack contents on firmware load error
+ drm/amdgpu: Fix resource leak on probe error path
+ blk-iocost: fix operation ordering in iocg_wake_fn()
+ nfc: nfcsim: fix use after free during module unload
+ cfg80211: Fix possible memory leak in function cfg80211_bss_update
+ RDMA/bnxt_re: Fix stats counters
+ bpf: Fix OOB read when printing XDP link fdinfo
+ mac80211: fix enabling 4-address mode on a sta vif after assoc
+ netfilter: conntrack: adjust stop timestamp to real expiry value
+ netfilter: nft_nat: allow to specify layer 4 protocol NAT only
+ i40e: Fix logic of disabling queues
+ i40e: Fix firmware LLDP agent related warning
+ i40e: Fix queue-to-TC mapping on Tx
+ i40e: Fix log TC creation failure when max num of queues is exceeded
+ tipc: fix implicit-connect for SYN+
+ tipc: fix sleeping in tipc accept routine
+ net: Set true network header for ECN decapsulation
+ net: qrtr: fix memory leaks
+ ionic: remove intr coalesce update from napi
+ ionic: fix up dim accounting for tx and rx
+ ionic: count csum_none when offload enabled
+ tipc: do not write skb_shinfo frags when doing decrytion
+ octeontx2-pf: Fix interface down flag on error
+ mlx4: Fix missing error code in mlx4_load_one()
+ KVM: x86: Check the right feature bit for MSR_KVM_ASYNC_PF_ACK access
+ net: llc: fix skb_over_panic
+ drm/msm/dpu: Fix sm8250_mdp register length
+ drm/msm/dp: Initialize the INTF_CONFIG register
+ skmsg: Make sk_psock_destroy() static
+ net/mlx5: Fix flow table chaining
+ net/mlx5e: Fix nullptr in mlx5e_hairpin_get_mdev()
+ sctp: fix return value check in __sctp_rcv_asconf_lookup
+ tulip: windbond-840: Fix missing pci_disable_device() in probe and remove
+ sis900: Fix missing pci_disable_device() in probe and remove
+ can: hi311x: fix a signedness bug in hi3110_cmd()
+ bpf: Introduce BPF nospec instruction for mitigating Spectre v4
+ bpf: Fix leakage due to insufficient speculative store bypass mitigation
+ bpf: Remove superfluous aux sanitation on subprog rejection
+ bpf: verifier: Allocate idmap scratch in verifier env
+ bpf: Fix pointer arithmetic mask tightening under state pruning
+ SMB3: fix readpage for large swap cache
+ powerpc/pseries: Fix regression while building external modules
+ i40e: Add additional info to PHY type error
+ can: j1939: j1939_session_deactivate(): clarify lifetime of session object
+ btrfs: fix lost inode on log replay after mix of fsync, rename and inode
eviction
+ mm/memcg: fix NULL pointer dereference in memcg_slab_free_hook()
+ drm/amdgpu: Check pmops for desired suspend state
+ io_uring: fix io_prep_async_link locking
+ platform/x86: amd-pmc: Fix command completion code
+ platform/x86: amd-pmc: Fix SMU firmware reporting mechanism
+ ionic: make all rx_mode work threadsafe
+ drm/panel: panel-simple: Fix proper bpc for ytc700tlag_05_201c
+ net/mlx5: E-Switch, handle devcom events only for ports on the same device
+ block: delay freeing the gendisk
+ powerpc/vdso: Don't use r30 to avoid breaking Go lang
+ octeontx2-af: Remove unnecessary devm_kfree
+ UBUNTU: upstream stable to v5.10.56, v5.13.8
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1940706
Title:
Hirsute update: upstream stable patchset 2021-08-20
Status in linux package in Ubuntu:
Invalid
Status in linux source package in Hirsute:
In Progress
Bug description:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
upstream stable patchset 2021-08-20
Ported from the following upstream stable releases:
v5.10.55, v5.13.7
v5.10.56, v5.13.8
from git://git.kernel.org/
tools: Allow proper CC/CXX/... override with LLVM=1 in Makefile.include
io_uring: fix link timeout refs
KVM: x86: determine if an exception has an error code only when injecting it.
af_unix: fix garbage collect vs MSG_PEEK
workqueue: fix UAF in pwq_unbound_release_workfn()
cgroup1: fix leaked context root causing sporadic NULL deref in LTP
net/802/mrp: fix memleak in mrp_request_join()
net/802/garp: fix memleak in garp_request_join()
net: annotate data race around sk_ll_usec
sctp: move 198 addresses from unusable to private scope
rcu-tasks: Don't delete holdouts within trc_inspect_reader()
rcu-tasks: Don't delete holdouts within trc_wait_for_one_reader()
ipv6: allocate enough headroom in ip6_finish_output2()
drm/ttm: add a check against null pointer dereference
hfs: add missing clean-up in hfs_fill_super
hfs: fix high memory mapping in hfs_bnode_read
hfs: add lock nesting notation to hfs_find_init
firmware: arm_scmi: Fix possible scmi_linux_errmap buffer overflow
firmware: arm_scmi: Fix range check for the maximum number of pending messages
cifs: fix the out of range assignment to bit fields in parse_server_interfaces
iomap: remove the length variable in iomap_seek_data
iomap: remove the length variable in iomap_seek_hole
ARM: dts: versatile: Fix up interrupt controller node names
ipv6: ip6_finish_output2: set sk into newly allocated nskb
nvme-pci: fix multiple races in nvme_setup_io_queues
UBUNTU: upstream stable to v5.10.55, v5.13.7
selftest: fix build error in tools/testing/selftests/vm/userfaultfd.c
io_uring: fix null-ptr-deref in io_sq_offload_start()
x86/asm: Ensure asm/proto.h can be included stand-alone
pipe: make pipe writes always wake up readers
btrfs: fix rw device counting in __btrfs_free_extra_devids
btrfs: mark compressed range uptodate only if all bio succeed
Revert "ACPI: resources: Add checks for ACPI IRQ override"
ACPI: DPTF: Fix reading of attributes
x86/kvm: fix vcpu-id indexed array sizes
KVM: add missing compat KVM_CLEAR_DIRTY_LOG
ocfs2: fix zero out valid data
ocfs2: issue zeroout to EOF blocks
can: j1939: j1939_xtp_rx_dat_one(): fix rxtimer value between consecutive
TP.DT to 750ms
can: raw: raw_setsockopt(): fix raw_rcv panic for sock UAF
can: peak_usb: pcan_usb_handle_bus_evt(): fix reading rxerr/txerr values
can: mcba_usb_start(): add missing urb->transfer_dma initialization
can: usb_8dev: fix memory leak
can: ems_usb: fix memory leak
can: esd_usb2: fix memory leak
alpha: register early reserved memory in memblock
HID: wacom: Re-enable touch by default for Cintiq 24HDT / 27QHDT
NIU: fix incorrect error return, missed in previous revert
drm/amd/display: ensure dentist display clock update finished in DCN20
drm/amdgpu: Avoid printing of stack contents on firmware load error
drm/amdgpu: Fix resource leak on probe error path
blk-iocost: fix operation ordering in iocg_wake_fn()
nfc: nfcsim: fix use after free during module unload
cfg80211: Fix possible memory leak in function cfg80211_bss_update
RDMA/bnxt_re: Fix stats counters
bpf: Fix OOB read when printing XDP link fdinfo
mac80211: fix enabling 4-address mode on a sta vif after assoc
netfilter: conntrack: adjust stop timestamp to real expiry value
netfilter: nft_nat: allow to specify layer 4 protocol NAT only
i40e: Fix logic of disabling queues
i40e: Fix firmware LLDP agent related warning
i40e: Fix queue-to-TC mapping on Tx
i40e: Fix log TC creation failure when max num of queues is exceeded
tipc: fix implicit-connect for SYN+
tipc: fix sleeping in tipc accept routine
net: Set true network header for ECN decapsulation
net: qrtr: fix memory leaks
ionic: remove intr coalesce update from napi
ionic: fix up dim accounting for tx and rx
ionic: count csum_none when offload enabled
tipc: do not write skb_shinfo frags when doing decrytion
octeontx2-pf: Fix interface down flag on error
mlx4: Fix missing error code in mlx4_load_one()
KVM: x86: Check the right feature bit for MSR_KVM_ASYNC_PF_ACK access
net: llc: fix skb_over_panic
drm/msm/dpu: Fix sm8250_mdp register length
drm/msm/dp: Initialize the INTF_CONFIG register
skmsg: Make sk_psock_destroy() static
net/mlx5: Fix flow table chaining
net/mlx5e: Fix nullptr in mlx5e_hairpin_get_mdev()
sctp: fix return value check in __sctp_rcv_asconf_lookup
tulip: windbond-840: Fix missing pci_disable_device() in probe and remove
sis900: Fix missing pci_disable_device() in probe and remove
can: hi311x: fix a signedness bug in hi3110_cmd()
bpf: Introduce BPF nospec instruction for mitigating Spectre v4
bpf: Fix leakage due to insufficient speculative store bypass mitigation
bpf: Remove superfluous aux sanitation on subprog rejection
bpf: verifier: Allocate idmap scratch in verifier env
bpf: Fix pointer arithmetic mask tightening under state pruning
SMB3: fix readpage for large swap cache
powerpc/pseries: Fix regression while building external modules
i40e: Add additional info to PHY type error
can: j1939: j1939_session_deactivate(): clarify lifetime of session object
btrfs: fix lost inode on log replay after mix of fsync, rename and inode
eviction
mm/memcg: fix NULL pointer dereference in memcg_slab_free_hook()
drm/amdgpu: Check pmops for desired suspend state
io_uring: fix io_prep_async_link locking
platform/x86: amd-pmc: Fix command completion code
platform/x86: amd-pmc: Fix SMU firmware reporting mechanism
ionic: make all rx_mode work threadsafe
drm/panel: panel-simple: Fix proper bpc for ytc700tlag_05_201c
net/mlx5: E-Switch, handle devcom events only for ports on the same device
block: delay freeing the gendisk
powerpc/vdso: Don't use r30 to avoid breaking Go lang
octeontx2-af: Remove unnecessary devm_kfree
UBUNTU: upstream stable to v5.10.56, v5.13.8
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1940706/+subscriptions
--
Mailing list: https://launchpad.net/~kernel-packages
Post to : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help : https://help.launchpad.net/ListHelp
