Public bug reported:
SRU Justification Impact: The upstream process for stable tree updates is quite similar in scope to the Ubuntu SRU process, e.g., each patch has to demonstrably fix a bug, and each patch is vetted by upstream by originating either directly from a mainline/stable Linux tree or a minimally backported form of that patch. The following upstream stable patches should be included in the Ubuntu kernel: v5.17.10 upstream stable release from git://git.kernel.org/ Linux 5.17.10 afs: Fix afs_getattr() to refetch file status if callback break occurred i2c: mt7621: fix missing clk_disable_unprepare() on error in mtk_i2c_probe() dt-bindings: pinctrl: aspeed-g6: remove FWQSPID group Input: ili210x - fix reset timing arm64: Enable repeat tlbi workaround on KRYO4XX gold CPUs net: atlantic: verify hw_head_ lies within TX buffer ring net: atlantic: add check for MAX_SKB_FRAGS net: atlantic: reduce scope of is_rsc_complete net: atlantic: fix "frag[0] not initialized" net: stmmac: fix missing pci_disable_device() on error in stmmac_pci_probe() ethernet: tulip: fix missing pci_disable_device() on error in tulip_init_one() nl80211: fix locking in nl80211_set_tx_bitrate_mask() net: fix wrong network header length drm/amd/display: undo clearing of z10 related function pointers platform/surface: gpe: Add support for Surface Pro 8 platform/x86/intel: Fix 'rmmod pmt_telemetry' panic platform/x86: thinkpad_acpi: Correct dual fan probe platform/x86: thinkpad_acpi: Convert btusb DMI list to quirks fbdev: Prevent possible use-after-free in fb_release() Revert "fbdev: Make fb_release() return -ENODEV if fbdev was unregistered" selftests: add ping test with ping_group_range tuned cfg80211: retrieve S1G operating channel number nl80211: validate S1G channel width mac80211: fix rx reordering with non explicit / psmp ack policy scsi: qla2xxx: Fix missed DMA unmap for aborted commands scsi: scsi_dh_alua: Properly handle the ALUA transitioning state perf test bpf: Skip test if clang is not present perf bench numa: Address compiler error on s390 perf regs x86: Fix arch__intr_reg_mask() for the hybrid platform perf test: Fix "all PMU test" to skip hv_24x7/hv_gpci tests on powerpc gpio: mvebu/pwm: Refuse requests with inverted polarity gpio: gpio-vf610: do not touch other bits when set the target bit perf stat: Fix and validate CPU map inputs in synthetic PERF_RECORD_STAT events perf build: Fix check for btf__load_from_kernel_by_id() in libbpf kvm: x86/pmu: Fix the compare function used by the pmu event filter scsi: ufs: core: Fix referencing invalid rsp field riscv: dts: sifive: fu540-c000: align dma node name with dtschema net: bridge: Clear offload_fwd_mark when passing frame up bridge interface. vdpa/mlx5: Use consistent RQT size netfilter: flowtable: move dst_check to packet path netfilter: flowtable: pass flowtable to nf_flow_table_iterate() netfilter: flowtable: fix TCP flow teardown igb: skip phy status check where unavailable mptcp: fix checksum byte order lockdown: also lock down previous kgdb use ARM: 9197/1: spectre-bhb: fix loop8 sequence for Thumb2 ARM: 9196/1: spectre-bhb: enable for Cortex-A15 net: af_key: add check for pfkey_broadcast in function pfkey_process net/mlx5: Drain fw_reset when removing device net/mlx5e: Remove HW-GRO from reported features net/mlx5e: Properly block HW GRO when XDP is enabled net/mlx5e: Properly block LRO when XDP is enabled net/mlx5e: Block rx-gro-hw feature in switchdev mode net/mlx5: DR, Ignore modify TTL on RX if device doesn't support it net/mlx5: Initialize flow steering during driver probe net/mlx5: DR, Fix missing flow_source when creating multi-destination FW table NFC: nci: fix sleep in atomic context bugs caused by nci_skb_alloc net/qla3xxx: Fix a test in ql_reset_work() clk: at91: generated: consider range when calculating best rate ice: Fix interrupt moderation settings getting cleared ice: fix possible under reporting of ethtool Tx and Rx statistics ice: fix crash when writing timestamp on RX rings arm64: kexec: load from kimage prior to clobbering net: vmxnet3: fix possible NULL pointer dereference in vmxnet3_rq_cleanup() net: vmxnet3: fix possible use-after-free bugs in vmxnet3_rq_alloc_rx_buf() net: systemport: Fix an error handling path in bcm_sysport_probe() net: lan966x: Fix assignment of the MAC address Revert "PCI: aardvark: Rewrite IRQ code to chained IRQ handler" ptp: ocp: have adjtime handle negative delta_ns correctly netfilter: nft_flow_offload: fix offload with pppoe + vlan net: fix dev_fill_forward_path with pppoe + bridge netfilter: nft_flow_offload: skip dst neigh lookup for ppp devices netfilter: flowtable: fix excessive hw offload attempts after failure net/sched: act_pedit: sanitize shift argument before usage xfrm: fix "disable_policy" flag use when arriving from different devices xfrm: rework default policy structure i915/guc/reset: Make __guc_reset_context aware of guilty engines net: macb: Increment rx bd head after allocating skb and buffer mptcp: fix subflow accounting on close block/mq-deadline: Set the fifo_time member also if inserting at head net: ipa: record proper RX transaction count net: ipa: certain dropped packets aren't accounted for ALSA: hda - fix unused Realtek function when PM is not enabled pinctrl: mediatek: mt8365: fix IES control pins pinctrl: ocelot: Fix for lan966x alt mode ARM: dts: aspeed: Add video engine to g6 ARM: dts: aspeed-g6: fix SPI1/SPI2 quad pin group pinctrl: pinctrl-aspeed-g6: remove FWQSPID group in pinctrl ARM: dts: aspeed-g6: remove FWQSPID group in pinctrl dtsi arm64: dts: qcom: sm8250: don't enable rx/tx macro by default dma-buf: ensure unique directory name for dmabuf stats dma-buf: fix use of DMA_BUF_SET_NAME_{A,B} in userspace drm/dp/mst: fix a possible memory leak in fetch_monitor_name() drm/i915/dmc: Add MMIO range restrictions drm/amd: Don't reset dGPUs if the system is going to s2idle libceph: fix potential use-after-free on linger ping and resends mmc: core: Fix busy polling for MMC_SEND_OP_COND again crypto: qcom-rng - fix infinite loop on requests not multiple of WORD_SZ arm64: mte: Ensure the cleared tags are visible before setting the PTE arm64: paravirt: Use RCU read locks to guard stolen_time KVM: Free new dirty bitmap if creating a new memslot fails KVM: x86/mmu: Update number of zapped pages even if page list is stable KVM: arm64: vgic-v3: Consistently populate ID_AA64PFR0_EL1.GIC Revert "can: m_can: pci: use custom bit timings for Elkhart Lake" PCI/PM: Avoid putting Elo i2 PCIe Ports in D3cold Fix double fget() in vhost_net_set_backend() audit,io_uring,io-wq: call __audit_uring_exit for dummy contexts selinux: fix bad cleanup on error in hashtab_duplicate() perf: Fix sys_perf_event_open() race against self ALSA: hda/realtek: Add quirk for TongFang devices with pop noise ALSA: wavefront: Proper check of get_user() error ALSA: usb-audio: Restore Rane SL-1 quirk nilfs2: fix lockdep warnings during disk space reclamation nilfs2: fix lockdep warnings in page operations for btree nodes ARM: 9191/1: arm/stacktrace, kasan: Silence KASAN warnings in unwind_frame() platform/chrome: cros_ec_debugfs: detach log reader wq from devm drbd: remove usage of list iterator variable after loop MIPS: lantiq: check the return value of kzalloc() fs: fix an infinite loop in iomap_fiemap rtc: mc146818-lib: Fix the AltCentury for AMD platforms nvme-multipath: fix hang when disk goes live over reconnect nvmet: use a private workqueue instead of the system workqueue smb3: cleanup and clarify status of tree connections tools/virtio: compile with -pthread vhost_vdpa: don't setup irq offloading when irq_num < 0 s390/pci: improve zpci_dev reference counting s390/traps: improve panic message for translation-specification exception ALSA: hda/realtek: Enable headset mic on Lenovo P360 crypto: x86/chacha20 - Avoid spurious jumps to other functions crypto: stm32 - fix reference leak in stm32_crc_remove rtc: sun6i: Fix time overflow handling gfs2: Disable page faults during lockless buffered reads nvme-pci: add quirks for Samsung X5 SSDs Input: stmfts - fix reference leak in stmfts_input_open Input: add bounds checking to input_set_capability() um: Cleanup syscall_handler_t definition/cast, fix warning kconfig: add fflush() before ferror() check rtc: pcf2127: fix bug when reading alarm registers rtc: fix use-after-free on device removal gfs2: Switch lock order of inode and iopen glock gfs2: cancel timed-out glock requests Revert "drm/i915/opregion: check port number bounds for SWSCI display power state" Watchdog: sp5100_tco: Enable Family 17h+ CPUs Watchdog: sp5100_tco: Add initialization using EFCH MMIO Watchdog: sp5100_tco: Refactor MMIO base address initialization Watchdog: sp5100_tco: Move timer initialization into function i2c: piix4: Enable EFCH MMIO for Family 17h+ i2c: piix4: Add EFCH MMIO support for SMBus port select i2c: piix4: Add EFCH MMIO support to SMBus base address detect i2c: piix4: Add EFCH MMIO support to region request and release i2c: piix4: Move SMBus port selection into function i2c: piix4: Move SMBus controller base address detect into function i2c: piix4: Move port I/O region request/release code into functions i2c: piix4: Replace hardcoded memory map size with a #define kernel/resource: Introduce request_mem_region_muxed() floppy: use a statically allocated error counter usb: gadget: fix race when gadget driver register via ioctl ** Affects: linux (Ubuntu) Importance: Undecided Status: Confirmed ** Affects: linux (Ubuntu Jammy) Importance: Undecided Status: New ** Tags: kernel-stable-tracking-bug ** Changed in: linux (Ubuntu) Status: New => Confirmed ** Tags added: kernel-stable-tracking-bug ** Also affects: linux (Ubuntu Jammy) Importance: Undecided Status: New -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/1975807 Title: Jammy update: v5.17.10 upstream stable release Status in linux package in Ubuntu: Confirmed Status in linux source package in Jammy: New Bug description: SRU Justification Impact: The upstream process for stable tree updates is quite similar in scope to the Ubuntu SRU process, e.g., each patch has to demonstrably fix a bug, and each patch is vetted by upstream by originating either directly from a mainline/stable Linux tree or a minimally backported form of that patch. The following upstream stable patches should be included in the Ubuntu kernel: v5.17.10 upstream stable release from git://git.kernel.org/ Linux 5.17.10 afs: Fix afs_getattr() to refetch file status if callback break occurred i2c: mt7621: fix missing clk_disable_unprepare() on error in mtk_i2c_probe() dt-bindings: pinctrl: aspeed-g6: remove FWQSPID group Input: ili210x - fix reset timing arm64: Enable repeat tlbi workaround on KRYO4XX gold CPUs net: atlantic: verify hw_head_ lies within TX buffer ring net: atlantic: add check for MAX_SKB_FRAGS net: atlantic: reduce scope of is_rsc_complete net: atlantic: fix "frag[0] not initialized" net: stmmac: fix missing pci_disable_device() on error in stmmac_pci_probe() ethernet: tulip: fix missing pci_disable_device() on error in tulip_init_one() nl80211: fix locking in nl80211_set_tx_bitrate_mask() net: fix wrong network header length drm/amd/display: undo clearing of z10 related function pointers platform/surface: gpe: Add support for Surface Pro 8 platform/x86/intel: Fix 'rmmod pmt_telemetry' panic platform/x86: thinkpad_acpi: Correct dual fan probe platform/x86: thinkpad_acpi: Convert btusb DMI list to quirks fbdev: Prevent possible use-after-free in fb_release() Revert "fbdev: Make fb_release() return -ENODEV if fbdev was unregistered" selftests: add ping test with ping_group_range tuned cfg80211: retrieve S1G operating channel number nl80211: validate S1G channel width mac80211: fix rx reordering with non explicit / psmp ack policy scsi: qla2xxx: Fix missed DMA unmap for aborted commands scsi: scsi_dh_alua: Properly handle the ALUA transitioning state perf test bpf: Skip test if clang is not present perf bench numa: Address compiler error on s390 perf regs x86: Fix arch__intr_reg_mask() for the hybrid platform perf test: Fix "all PMU test" to skip hv_24x7/hv_gpci tests on powerpc gpio: mvebu/pwm: Refuse requests with inverted polarity gpio: gpio-vf610: do not touch other bits when set the target bit perf stat: Fix and validate CPU map inputs in synthetic PERF_RECORD_STAT events perf build: Fix check for btf__load_from_kernel_by_id() in libbpf kvm: x86/pmu: Fix the compare function used by the pmu event filter scsi: ufs: core: Fix referencing invalid rsp field riscv: dts: sifive: fu540-c000: align dma node name with dtschema net: bridge: Clear offload_fwd_mark when passing frame up bridge interface. vdpa/mlx5: Use consistent RQT size netfilter: flowtable: move dst_check to packet path netfilter: flowtable: pass flowtable to nf_flow_table_iterate() netfilter: flowtable: fix TCP flow teardown igb: skip phy status check where unavailable mptcp: fix checksum byte order lockdown: also lock down previous kgdb use ARM: 9197/1: spectre-bhb: fix loop8 sequence for Thumb2 ARM: 9196/1: spectre-bhb: enable for Cortex-A15 net: af_key: add check for pfkey_broadcast in function pfkey_process net/mlx5: Drain fw_reset when removing device net/mlx5e: Remove HW-GRO from reported features net/mlx5e: Properly block HW GRO when XDP is enabled net/mlx5e: Properly block LRO when XDP is enabled net/mlx5e: Block rx-gro-hw feature in switchdev mode net/mlx5: DR, Ignore modify TTL on RX if device doesn't support it net/mlx5: Initialize flow steering during driver probe net/mlx5: DR, Fix missing flow_source when creating multi-destination FW table NFC: nci: fix sleep in atomic context bugs caused by nci_skb_alloc net/qla3xxx: Fix a test in ql_reset_work() clk: at91: generated: consider range when calculating best rate ice: Fix interrupt moderation settings getting cleared ice: fix possible under reporting of ethtool Tx and Rx statistics ice: fix crash when writing timestamp on RX rings arm64: kexec: load from kimage prior to clobbering net: vmxnet3: fix possible NULL pointer dereference in vmxnet3_rq_cleanup() net: vmxnet3: fix possible use-after-free bugs in vmxnet3_rq_alloc_rx_buf() net: systemport: Fix an error handling path in bcm_sysport_probe() net: lan966x: Fix assignment of the MAC address Revert "PCI: aardvark: Rewrite IRQ code to chained IRQ handler" ptp: ocp: have adjtime handle negative delta_ns correctly netfilter: nft_flow_offload: fix offload with pppoe + vlan net: fix dev_fill_forward_path with pppoe + bridge netfilter: nft_flow_offload: skip dst neigh lookup for ppp devices netfilter: flowtable: fix excessive hw offload attempts after failure net/sched: act_pedit: sanitize shift argument before usage xfrm: fix "disable_policy" flag use when arriving from different devices xfrm: rework default policy structure i915/guc/reset: Make __guc_reset_context aware of guilty engines net: macb: Increment rx bd head after allocating skb and buffer mptcp: fix subflow accounting on close block/mq-deadline: Set the fifo_time member also if inserting at head net: ipa: record proper RX transaction count net: ipa: certain dropped packets aren't accounted for ALSA: hda - fix unused Realtek function when PM is not enabled pinctrl: mediatek: mt8365: fix IES control pins pinctrl: ocelot: Fix for lan966x alt mode ARM: dts: aspeed: Add video engine to g6 ARM: dts: aspeed-g6: fix SPI1/SPI2 quad pin group pinctrl: pinctrl-aspeed-g6: remove FWQSPID group in pinctrl ARM: dts: aspeed-g6: remove FWQSPID group in pinctrl dtsi arm64: dts: qcom: sm8250: don't enable rx/tx macro by default dma-buf: ensure unique directory name for dmabuf stats dma-buf: fix use of DMA_BUF_SET_NAME_{A,B} in userspace drm/dp/mst: fix a possible memory leak in fetch_monitor_name() drm/i915/dmc: Add MMIO range restrictions drm/amd: Don't reset dGPUs if the system is going to s2idle libceph: fix potential use-after-free on linger ping and resends mmc: core: Fix busy polling for MMC_SEND_OP_COND again crypto: qcom-rng - fix infinite loop on requests not multiple of WORD_SZ arm64: mte: Ensure the cleared tags are visible before setting the PTE arm64: paravirt: Use RCU read locks to guard stolen_time KVM: Free new dirty bitmap if creating a new memslot fails KVM: x86/mmu: Update number of zapped pages even if page list is stable KVM: arm64: vgic-v3: Consistently populate ID_AA64PFR0_EL1.GIC Revert "can: m_can: pci: use custom bit timings for Elkhart Lake" PCI/PM: Avoid putting Elo i2 PCIe Ports in D3cold Fix double fget() in vhost_net_set_backend() audit,io_uring,io-wq: call __audit_uring_exit for dummy contexts selinux: fix bad cleanup on error in hashtab_duplicate() perf: Fix sys_perf_event_open() race against self ALSA: hda/realtek: Add quirk for TongFang devices with pop noise ALSA: wavefront: Proper check of get_user() error ALSA: usb-audio: Restore Rane SL-1 quirk nilfs2: fix lockdep warnings during disk space reclamation nilfs2: fix lockdep warnings in page operations for btree nodes ARM: 9191/1: arm/stacktrace, kasan: Silence KASAN warnings in unwind_frame() platform/chrome: cros_ec_debugfs: detach log reader wq from devm drbd: remove usage of list iterator variable after loop MIPS: lantiq: check the return value of kzalloc() fs: fix an infinite loop in iomap_fiemap rtc: mc146818-lib: Fix the AltCentury for AMD platforms nvme-multipath: fix hang when disk goes live over reconnect nvmet: use a private workqueue instead of the system workqueue smb3: cleanup and clarify status of tree connections tools/virtio: compile with -pthread vhost_vdpa: don't setup irq offloading when irq_num < 0 s390/pci: improve zpci_dev reference counting s390/traps: improve panic message for translation-specification exception ALSA: hda/realtek: Enable headset mic on Lenovo P360 crypto: x86/chacha20 - Avoid spurious jumps to other functions crypto: stm32 - fix reference leak in stm32_crc_remove rtc: sun6i: Fix time overflow handling gfs2: Disable page faults during lockless buffered reads nvme-pci: add quirks for Samsung X5 SSDs Input: stmfts - fix reference leak in stmfts_input_open Input: add bounds checking to input_set_capability() um: Cleanup syscall_handler_t definition/cast, fix warning kconfig: add fflush() before ferror() check rtc: pcf2127: fix bug when reading alarm registers rtc: fix use-after-free on device removal gfs2: Switch lock order of inode and iopen glock gfs2: cancel timed-out glock requests Revert "drm/i915/opregion: check port number bounds for SWSCI display power state" Watchdog: sp5100_tco: Enable Family 17h+ CPUs Watchdog: sp5100_tco: Add initialization using EFCH MMIO Watchdog: sp5100_tco: Refactor MMIO base address initialization Watchdog: sp5100_tco: Move timer initialization into function i2c: piix4: Enable EFCH MMIO for Family 17h+ i2c: piix4: Add EFCH MMIO support for SMBus port select i2c: piix4: Add EFCH MMIO support to SMBus base address detect i2c: piix4: Add EFCH MMIO support to region request and release i2c: piix4: Move SMBus port selection into function i2c: piix4: Move SMBus controller base address detect into function i2c: piix4: Move port I/O region request/release code into functions i2c: piix4: Replace hardcoded memory map size with a #define kernel/resource: Introduce request_mem_region_muxed() floppy: use a statically allocated error counter usb: gadget: fix race when gadget driver register via ioctl To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1975807/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp