Public bug reported:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
v5.15.54 upstream stable release
from git://git.kernel.org/
mm/slub: add missing TID updates on slab deactivation
mm/filemap: fix UAF in find_lock_entries
Revert "selftests/bpf: Add test for bpf_timer overwriting crash"
ALSA: usb-audio: Workarounds for Behringer UMC 204/404 HD
ALSA: hda/realtek: Add quirk for Clevo L140PU
ALSA: cs46xx: Fix missing snd_card_free() call at probe error
can: bcm: use call_rcu() instead of costly synchronize_rcu()
can: grcan: grcan_probe(): remove extra of_node_get()
can: gs_usb: gs_usb_open/close(): fix memory leak
can: m_can: m_can_chip_config(): actually enable internal timestamping
can: m_can: m_can_{read_fifo,echo_tx_event}(): shift timestamp to full 32 bits
can: mcp251xfd: mcp251xfd_regmap_crc_read(): improve workaround handling for
mcp2517fd
can: mcp251xfd: mcp251xfd_regmap_crc_read(): update workaround broken CRC on
TBC register
bpf: Fix incorrect verifier simulation around jmp32's jeq/jne
bpf: Fix insufficient bounds propagation from adjust_scalar_min_max_vals
usbnet: fix memory leak in error case
net: rose: fix UAF bug caused by rose_t0timer_expiry
netfilter: nft_set_pipapo: release elements in clone from abort path
btrfs: rename btrfs_alloc_chunk to btrfs_create_chunk
btrfs: add additional parameters to btrfs_init_tree_ref/btrfs_init_data_ref
btrfs: fix invalid delayed ref after subvolume creation failure
btrfs: fix warning when freeing leaf after subvolume creation failure
Input: cpcap-pwrbutton - handle errors from platform_get_irq()
Input: goodix - change goodix_i2c_write() len parameter type to int
Input: goodix - add a goodix.h header file
Input: goodix - refactor reset handling
Input: goodix - try not to touch the reset-pin on x86/ACPI devices
dma-buf/poll: Get a file reference for outstanding fence callbacks
btrfs: fix deadlock between chunk allocation and chunk btree modifications
drm/i915: Disable bonding on gen12+ platforms
drm/i915/gt: Register the migrate contexts with their engines
drm/i915: Replace the unconditional clflush with drm_clflush_virt_range()
media: ir_toy: prevent device from hanging during transmit
memory: renesas-rpc-if: Avoid unaligned bus access for HyperFlash
ath11k: add hw_param for wakeup_mhi
qed: Improve the stack space of filter_config()
platform/x86: wmi: introduce helper to convert driver to WMI driver
platform/x86: wmi: Replace read_takes_no_args with a flags field
platform/x86: wmi: Fix driver->notify() vs ->probe() race
mt76: mt7921: get rid of mt7921_mac_set_beacon_filter
mt76: mt7921: introduce mt7921_mcu_set_beacon_filter utility routine
mt76: mt7921: fix a possible race enabling/disabling runtime-pm
bpf: Stop caching subprog index in the bpf_pseudo_func insn
bpf, arm64: Use emit_addr_mov_i64() for BPF_PSEUDO_FUNC
riscv: defconfig: enable DRM_NOUVEAU
RISC-V: defconfigs: Set CONFIG_FB=y, for FB console
net/mlx5e: Check action fwd/drop flag exists also for nic flows
net/mlx5e: Split actions_match_supported() into a sub function
net/mlx5e: TC, Reject rules with drop and modify hdr action
net/mlx5e: TC, Reject rules with forward and drop actions
ASoC: rt5682: Avoid the unexpected IRQ event during going to suspend
ASoC: rt5682: Re-detect the combo jack after resuming
ASoC: rt5682: Fix deadlock on resume
netfilter: nf_tables: convert pktinfo->tprot_set to flags field
netfilter: nft_payload: support for inner header matching / mangling
netfilter: nft_payload: don't allow th access for fragments
s390/boot: allocate amode31 section in decompressor
s390/setup: use physical pointers for memblock_reserve()
s390/setup: preserve memory at OLDMEM_BASE and OLDMEM_SIZE
ibmvnic: init init_done_rc earlier
ibmvnic: clear fop when retrying probe
ibmvnic: Allow queueing resets during probe
virtio-blk: avoid preallocating big SGL for data
io_uring: ensure that fsnotify is always called
block: use bdev_get_queue() in bio.c
block: only mark bio as tracked if it really is tracked
block: fix rq-qos breakage from skipping rq_qos_done_bio()
stddef: Introduce struct_group() helper macro
media: omap3isp: Use struct_group() for memcpy() region
media: davinci: vpif: fix use-after-free on driver unbind
mt76: mt76_connac: fix MCU_CE_CMD_SET_ROC definition error
mt76: mt7921: do not always disable fw runtime-pm
cxl/port: Hold port reference until decoder release
clk: renesas: r9a07g044: Update multiplier and divider values for PLL2/3
KVM: x86/mmu: Use yield-safe TDP MMU root iter in MMU notifier unmapping
KVM: x86/mmu: Use common TDP MMU zap helper for MMU notifier unmap hook
scsi: qla2xxx: Move heartbeat handling from DPC thread to workqueue
scsi: qla2xxx: Fix laggy FC remote port session recovery
scsi: qla2xxx: edif: Replace list_for_each_safe with list_for_each_entry_safe
scsi: qla2xxx: Fix crash during module load unload test
gfs2: Fix gfs2_file_buffered_write endless loop workaround
vdpa/mlx5: Avoid processing works if workqueue was destroyed
btrfs: handle device lookup with btrfs_dev_lookup_args
btrfs: add a btrfs_get_dev_args_from_path helper
btrfs: use btrfs_get_dev_args_from_path in dev removal ioctls
btrfs: remove device item and update super block in the same transaction
drbd: add error handling support for add_disk()
drbd: Fix double free problem in drbd_create_device
drbd: fix an invalid memory access caused by incorrect use of list iterator
drm/amd/display: Set min dcfclk if pipe count is 0
drm/amd/display: Fix by adding FPU protection for dcn30_internal_validate_bw
NFSD: De-duplicate net_generic(nf->nf_net, nfsd_net_id)
NFSD: COMMIT operations must not return NFS?ERR_INVAL
riscv/mm: Add XIP_FIXUP for riscv_pfn_base
iio: accel: mma8452: use the correct logic to get mma8452_data
batman-adv: Use netif_rx().
mtd: spi-nor: Skip erase logic when SPI_NOR_NO_ERASE is set
Compiler Attributes: add __alloc_size() for better bounds checking
mm: vmalloc: introduce array allocation functions
KVM: use __vcalloc for very large allocations
btrfs: don't access possibly stale fs_info data in device_list_add
KVM: s390x: fix SCK locking
scsi: qla2xxx: Fix loss of NVMe namespaces after driver reload test
powerpc/32: Don't use lmw/stmw for saving/restoring non volatile regs
powerpc: flexible GPR range save/restore macros
powerpc/tm: Fix more userspace r13 corruption
serial: sc16is7xx: Clear RS485 bits in the shutdown
bus: mhi: core: Use correctly sized arguments for bit field
bus: mhi: Fix pm_state conversion to string
stddef: Introduce DECLARE_FLEX_ARRAY() helper
uapi/linux/stddef.h: Add include guards
ASoC: rt5682: move clk related code to rt5682_i2c_probe
ASoC: rt5682: fix an incorrect NULL check on list iterator
drm/amd/vcn: fix an error msg on vcn 3.0
KVM: Don't create VM debugfs files outside of the VM directory
tty: n_gsm: Modify CR,PF bit when config requester
tty: n_gsm: Save dlci address open status when config requester
tty: n_gsm: fix frame reception handling
ALSA: usb-audio: add mapping for MSI MPG X570S Carbon Max Wifi.
ALSA: usb-audio: add mapping for MSI MAG X570S Torpedo MAX.
tty: n_gsm: fix missing update of modem controls after DLCI open
btrfs: zoned: encapsulate inode locking for zoned relocation
btrfs: zoned: use dedicated lock for data relocation
KVM: Initialize debugfs_dentry when a VM is created to avoid NULL deref
mm/hwpoison: mf_mutex for soft offline and unpoison
mm/hwpoison: avoid the impact of hwpoison_filter() return value on mce handler
mm/memory-failure.c: fix race with changing page compound again
mm/hwpoison: fix race between hugetlb free/demotion and memory_failure_hugetlb()
tty: n_gsm: fix invalid use of MSC in advanced option
tty: n_gsm: fix sometimes uninitialized warning in gsm_dlci_modem_output()
serial: 8250_mtk: Make sure to select the right FEATURE_SEL
tty: n_gsm: fix invalid gsmtty_write_room() result
drm/i915: Fix a race between vma / object destruction and unbinding
drm/mediatek: Use mailbox rx_callback instead of cmdq_task_cb
drm/mediatek: Remove the pointer of struct cmdq_client
drm/mediatek: Detect CMDQ execution timeout
drm/mediatek: Add cmdq_handle in mtk_crtc
drm/mediatek: Add vblank register/unregister callback functions
Bluetooth: protect le accept and resolv lists with hdev->lock
Bluetooth: btmtksdio: fix use-after-free at btmtksdio_recv_event
io_uring: avoid io-wq -EAGAIN looping for !IOPOLL
irqchip/gic-v3: Ensure pseudo-NMIs have an ISB between ack and handling
irqchip/gic-v3: Refactor ISB + EOIR at ack time
rxrpc: Fix locking issue
dt-bindings: soc: qcom: smd-rpm: Add compatible for MSM8953 SoC
dt-bindings: soc: qcom: smd-rpm: Fix missing MSM8936 compatible
module: change to print useful messages from elf_validity_check()
module: fix [e_shstrndx].sh_size=0 OOB access
iommu/vt-d: Fix PCI bus rescan device hot add
fbdev: fbmem: Fix logo center image dx issue
PM: runtime: Redefine pm_runtime_release_supplier()
memregion: Fix memregion_free() fallback definition
video: of_display_timing.h: include errno.h
powerpc/powernv: delay rng platform device creation until later in boot
net: dsa: qca8k: reset cpu port on MTU change
can: kvaser_usb: replace run-time checks with struct kvaser_usb_driver_info
can: kvaser_usb: kvaser_usb_leaf: fix CAN clock frequency regression
can: kvaser_usb: kvaser_usb_leaf: fix bittiming limits
xfs: remove incorrect ASSERT in xfs_rename
Revert "serial: sc16is7xx: Clear RS485 bits in the shutdown"
btrfs: fix error pointer dereference in btrfs_ioctl_rm_dev_v2()
virtio-blk: modify the value type of num in virtio_queue_rq()
btrfs: fix use of uninitialized variable at rm device ioctl
tty: n_gsm: fix encoding of command/response bit
ARM: meson: Fix refcount leak in meson_smp_prepare_cpus
pinctrl: sunxi: a83t: Fix NAND function name for some pins
ASoC: rt711: Add endianness flag in snd_soc_component_driver
ASoC: rt711-sdca: Add endianness flag in snd_soc_component_driver
ASoC: codecs: rt700/rt711/rt711-sdca: resume bus/codec in .set_jack_detect
arm64: dts: qcom: msm8994: Fix CPU6/7 reg values
arm64: dts: qcom: sdm845: use dispcc AHB clock for mdss node
ARM: mxs_defconfig: Enable the framebuffer
arm64: dts: imx8mp-evk: correct mmc pad settings
arm64: dts: imx8mp-evk: correct the uart2 pinctl value
arm64: dts: imx8mp-evk: correct gpio-led pad settings
arm64: dts: imx8mp-evk: correct vbus pad settings
arm64: dts: imx8mp-evk: correct eqos pad settings
arm64: dts: imx8mp-evk: correct I2C1 pad settings
arm64: dts: imx8mp-evk: correct I2C3 pad settings
arm64: dts: imx8mp-phyboard-pollux-rdk: correct uart pad settings
arm64: dts: imx8mp-phyboard-pollux-rdk: correct eqos pad settings
arm64: dts: imx8mp-phyboard-pollux-rdk: correct i2c2 & mmc settings
pinctrl: sunxi: sunxi_pconf_set: use correct offset
arm64: dts: qcom: msm8992-*: Fix vdd_lvs1_2-supply typo
ARM: at91: pm: use proper compatible for sama5d2's rtc
ARM: at91: pm: use proper compatibles for sam9x60's rtc and rtt
ARM: at91: pm: use proper compatibles for sama7g5's rtc and rtt
ARM: dts: at91: sam9x60ek: fix eeprom compatible and size
ARM: dts: at91: sama5d2_icp: fix eeprom compatibles
ARM: at91: fix soc detection for SAM9X60 SiPs
xsk: Clear page contiguity bit when unmapping pool
i2c: piix4: Fix a memory leak in the EFCH MMIO support
i40e: Fix dropped jumbo frames statistics
i40e: Fix VF's MAC Address change on VM
ARM: dts: stm32: use usbphyc ck_usbo_48m as USBH OHCI clock on stm32mp151
ARM: dts: stm32: add missing usbh clock and fix clk order on stm32mp15
ibmvnic: Properly dispose of all skbs during a failover.
selftests: forwarding: fix flood_unicast_test when h2 supports IFF_UNICAST_FLT
selftests: forwarding: fix learning_test when h1 supports IFF_UNICAST_FLT
selftests: forwarding: fix error message in learning_test
r8169: fix accessing unset transport header
i2c: cadence: Unregister the clk notifier in error path
dmaengine: imx-sdma: Allow imx8m for imx7 FW revs
misc: rtsx_usb: fix use of dma mapped buffer for usb bulk transfer
misc: rtsx_usb: use separate command and response buffers
misc: rtsx_usb: set return value in rsp_buf alloc err path
Revert "mm/memory-failure.c: fix race with changing page compound again"
Revert "serial: 8250_mtk: Make sure to select the right FEATURE_SEL"
dt-bindings: dma: allwinner,sun50i-a64-dma: Fix min/max typo
ida: don't use BUG_ON() for debugging
dmaengine: pl330: Fix lockdep warning about non-static key
dmaengine: lgm: Fix an error handling path in intel_ldma_probe()
dmaengine: at_xdma: handle errors of at_xdmac_alloc_desc() correctly
dmaengine: ti: Fix refcount leak in ti_dra7_xbar_route_allocate
dmaengine: qcom: bam_dma: fix runtime PM underflow
dmaengine: ti: Add missing put_device in ti_dra7_xbar_route_allocate
dmaengine: idxd: force wq context cleanup on device disable path
selftests/net: fix section name when using xdp_dummy.o
Linux 5.15.54
UBUNTU: Upstream stable to v5.15.54
** Affects: linux (Ubuntu)
Importance: Undecided
Status: Invalid
** Affects: linux (Ubuntu Jammy)
Importance: Medium
Assignee: Kamal Mostafa (kamalmostafa)
Status: In Progress
** Tags: kernel-stable-tracking-bug
** Changed in: linux (Ubuntu)
Status: New => Confirmed
** Tags added: kernel-stable-tracking-bug
** Also affects: linux (Ubuntu Jammy)
Importance: Undecided
Status: New
** Changed in: linux (Ubuntu)
Status: Confirmed => Invalid
** Changed in: linux (Ubuntu Jammy)
Status: New => In Progress
** Changed in: linux (Ubuntu Jammy)
Importance: Undecided => Medium
** Changed in: linux (Ubuntu Jammy)
Assignee: (unassigned) => Kamal Mostafa (kamalmostafa)
** Description changed:
+ SRU Justification
- SRU Justification
+ Impact:
+ The upstream process for stable tree updates is quite similar
+ in scope to the Ubuntu SRU process, e.g., each patch has to
+ demonstrably fix a bug, and each patch is vetted by upstream
+ by originating either directly from a mainline/stable Linux tree or
+ a minimally backported form of that patch. The following upstream
+ stable patches should be included in the Ubuntu kernel:
- Impact:
- The upstream process for stable tree updates is quite similar
- in scope to the Ubuntu SRU process, e.g., each patch has to
- demonstrably fix a bug, and each patch is vetted by upstream
- by originating either directly from a mainline/stable Linux tree or
- a minimally backported form of that patch. The following upstream
- stable patches should be included in the Ubuntu kernel:
+ v5.15.54 upstream stable release
+ from git://git.kernel.org/
- v5.15.54 upstream stable release
- from git://git.kernel.org/
+ mm/slub: add missing TID updates on slab deactivation
+ mm/filemap: fix UAF in find_lock_entries
+ Revert "selftests/bpf: Add test for bpf_timer overwriting crash"
+ ALSA: usb-audio: Workarounds for Behringer UMC 204/404 HD
+ ALSA: hda/realtek: Add quirk for Clevo L140PU
+ ALSA: cs46xx: Fix missing snd_card_free() call at probe error
+ can: bcm: use call_rcu() instead of costly synchronize_rcu()
+ can: grcan: grcan_probe(): remove extra of_node_get()
+ can: gs_usb: gs_usb_open/close(): fix memory leak
+ can: m_can: m_can_chip_config(): actually enable internal timestamping
+ can: m_can: m_can_{read_fifo,echo_tx_event}(): shift timestamp to full 32 bits
+ can: mcp251xfd: mcp251xfd_regmap_crc_read(): improve workaround handling for
mcp2517fd
+ can: mcp251xfd: mcp251xfd_regmap_crc_read(): update workaround broken CRC on
TBC register
+ bpf: Fix incorrect verifier simulation around jmp32's jeq/jne
+ bpf: Fix insufficient bounds propagation from adjust_scalar_min_max_vals
+ usbnet: fix memory leak in error case
+ net: rose: fix UAF bug caused by rose_t0timer_expiry
+ netfilter: nft_set_pipapo: release elements in clone from abort path
+ btrfs: rename btrfs_alloc_chunk to btrfs_create_chunk
+ btrfs: add additional parameters to btrfs_init_tree_ref/btrfs_init_data_ref
+ btrfs: fix invalid delayed ref after subvolume creation failure
+ btrfs: fix warning when freeing leaf after subvolume creation failure
+ Input: cpcap-pwrbutton - handle errors from platform_get_irq()
+ Input: goodix - change goodix_i2c_write() len parameter type to int
+ Input: goodix - add a goodix.h header file
+ Input: goodix - refactor reset handling
+ Input: goodix - try not to touch the reset-pin on x86/ACPI devices
+ dma-buf/poll: Get a file reference for outstanding fence callbacks
+ btrfs: fix deadlock between chunk allocation and chunk btree modifications
+ drm/i915: Disable bonding on gen12+ platforms
+ drm/i915/gt: Register the migrate contexts with their engines
+ drm/i915: Replace the unconditional clflush with drm_clflush_virt_range()
+ media: ir_toy: prevent device from hanging during transmit
+ memory: renesas-rpc-if: Avoid unaligned bus access for HyperFlash
+ ath11k: add hw_param for wakeup_mhi
+ qed: Improve the stack space of filter_config()
+ platform/x86: wmi: introduce helper to convert driver to WMI driver
+ platform/x86: wmi: Replace read_takes_no_args with a flags field
+ platform/x86: wmi: Fix driver->notify() vs ->probe() race
+ mt76: mt7921: get rid of mt7921_mac_set_beacon_filter
+ mt76: mt7921: introduce mt7921_mcu_set_beacon_filter utility routine
+ mt76: mt7921: fix a possible race enabling/disabling runtime-pm
+ bpf: Stop caching subprog index in the bpf_pseudo_func insn
+ bpf, arm64: Use emit_addr_mov_i64() for BPF_PSEUDO_FUNC
+ riscv: defconfig: enable DRM_NOUVEAU
+ RISC-V: defconfigs: Set CONFIG_FB=y, for FB console
+ net/mlx5e: Check action fwd/drop flag exists also for nic flows
+ net/mlx5e: Split actions_match_supported() into a sub function
+ net/mlx5e: TC, Reject rules with drop and modify hdr action
+ net/mlx5e: TC, Reject rules with forward and drop actions
+ ASoC: rt5682: Avoid the unexpected IRQ event during going to suspend
+ ASoC: rt5682: Re-detect the combo jack after resuming
+ ASoC: rt5682: Fix deadlock on resume
+ netfilter: nf_tables: convert pktinfo->tprot_set to flags field
+ netfilter: nft_payload: support for inner header matching / mangling
+ netfilter: nft_payload: don't allow th access for fragments
+ s390/boot: allocate amode31 section in decompressor
+ s390/setup: use physical pointers for memblock_reserve()
+ s390/setup: preserve memory at OLDMEM_BASE and OLDMEM_SIZE
+ ibmvnic: init init_done_rc earlier
+ ibmvnic: clear fop when retrying probe
+ ibmvnic: Allow queueing resets during probe
+ virtio-blk: avoid preallocating big SGL for data
+ io_uring: ensure that fsnotify is always called
+ block: use bdev_get_queue() in bio.c
+ block: only mark bio as tracked if it really is tracked
+ block: fix rq-qos breakage from skipping rq_qos_done_bio()
+ stddef: Introduce struct_group() helper macro
+ media: omap3isp: Use struct_group() for memcpy() region
+ media: davinci: vpif: fix use-after-free on driver unbind
+ mt76: mt76_connac: fix MCU_CE_CMD_SET_ROC definition error
+ mt76: mt7921: do not always disable fw runtime-pm
+ cxl/port: Hold port reference until decoder release
+ clk: renesas: r9a07g044: Update multiplier and divider values for PLL2/3
+ KVM: x86/mmu: Use yield-safe TDP MMU root iter in MMU notifier unmapping
+ KVM: x86/mmu: Use common TDP MMU zap helper for MMU notifier unmap hook
+ scsi: qla2xxx: Move heartbeat handling from DPC thread to workqueue
+ scsi: qla2xxx: Fix laggy FC remote port session recovery
+ scsi: qla2xxx: edif: Replace list_for_each_safe with list_for_each_entry_safe
+ scsi: qla2xxx: Fix crash during module load unload test
+ gfs2: Fix gfs2_file_buffered_write endless loop workaround
+ vdpa/mlx5: Avoid processing works if workqueue was destroyed
+ btrfs: handle device lookup with btrfs_dev_lookup_args
+ btrfs: add a btrfs_get_dev_args_from_path helper
+ btrfs: use btrfs_get_dev_args_from_path in dev removal ioctls
+ btrfs: remove device item and update super block in the same transaction
+ drbd: add error handling support for add_disk()
+ drbd: Fix double free problem in drbd_create_device
+ drbd: fix an invalid memory access caused by incorrect use of list iterator
+ drm/amd/display: Set min dcfclk if pipe count is 0
+ drm/amd/display: Fix by adding FPU protection for dcn30_internal_validate_bw
+ NFSD: De-duplicate net_generic(nf->nf_net, nfsd_net_id)
+ NFSD: COMMIT operations must not return NFS?ERR_INVAL
+ riscv/mm: Add XIP_FIXUP for riscv_pfn_base
+ iio: accel: mma8452: use the correct logic to get mma8452_data
+ batman-adv: Use netif_rx().
+ mtd: spi-nor: Skip erase logic when SPI_NOR_NO_ERASE is set
+ Compiler Attributes: add __alloc_size() for better bounds checking
+ mm: vmalloc: introduce array allocation functions
+ KVM: use __vcalloc for very large allocations
+ btrfs: don't access possibly stale fs_info data in device_list_add
+ KVM: s390x: fix SCK locking
+ scsi: qla2xxx: Fix loss of NVMe namespaces after driver reload test
+ powerpc/32: Don't use lmw/stmw for saving/restoring non volatile regs
+ powerpc: flexible GPR range save/restore macros
+ powerpc/tm: Fix more userspace r13 corruption
+ serial: sc16is7xx: Clear RS485 bits in the shutdown
+ bus: mhi: core: Use correctly sized arguments for bit field
+ bus: mhi: Fix pm_state conversion to string
+ stddef: Introduce DECLARE_FLEX_ARRAY() helper
+ uapi/linux/stddef.h: Add include guards
+ ASoC: rt5682: move clk related code to rt5682_i2c_probe
+ ASoC: rt5682: fix an incorrect NULL check on list iterator
+ drm/amd/vcn: fix an error msg on vcn 3.0
+ KVM: Don't create VM debugfs files outside of the VM directory
+ tty: n_gsm: Modify CR,PF bit when config requester
+ tty: n_gsm: Save dlci address open status when config requester
+ tty: n_gsm: fix frame reception handling
+ ALSA: usb-audio: add mapping for MSI MPG X570S Carbon Max Wifi.
+ ALSA: usb-audio: add mapping for MSI MAG X570S Torpedo MAX.
+ tty: n_gsm: fix missing update of modem controls after DLCI open
+ btrfs: zoned: encapsulate inode locking for zoned relocation
+ btrfs: zoned: use dedicated lock for data relocation
+ KVM: Initialize debugfs_dentry when a VM is created to avoid NULL deref
+ mm/hwpoison: mf_mutex for soft offline and unpoison
+ mm/hwpoison: avoid the impact of hwpoison_filter() return value on mce handler
+ mm/memory-failure.c: fix race with changing page compound again
+ mm/hwpoison: fix race between hugetlb free/demotion and
memory_failure_hugetlb()
+ tty: n_gsm: fix invalid use of MSC in advanced option
+ tty: n_gsm: fix sometimes uninitialized warning in gsm_dlci_modem_output()
+ serial: 8250_mtk: Make sure to select the right FEATURE_SEL
+ tty: n_gsm: fix invalid gsmtty_write_room() result
+ drm/i915: Fix a race between vma / object destruction and unbinding
+ drm/mediatek: Use mailbox rx_callback instead of cmdq_task_cb
+ drm/mediatek: Remove the pointer of struct cmdq_client
+ drm/mediatek: Detect CMDQ execution timeout
+ drm/mediatek: Add cmdq_handle in mtk_crtc
+ drm/mediatek: Add vblank register/unregister callback functions
+ Bluetooth: protect le accept and resolv lists with hdev->lock
+ Bluetooth: btmtksdio: fix use-after-free at btmtksdio_recv_event
+ io_uring: avoid io-wq -EAGAIN looping for !IOPOLL
+ irqchip/gic-v3: Ensure pseudo-NMIs have an ISB between ack and handling
+ irqchip/gic-v3: Refactor ISB + EOIR at ack time
+ rxrpc: Fix locking issue
+ dt-bindings: soc: qcom: smd-rpm: Add compatible for MSM8953 SoC
+ dt-bindings: soc: qcom: smd-rpm: Fix missing MSM8936 compatible
+ module: change to print useful messages from elf_validity_check()
+ module: fix [e_shstrndx].sh_size=0 OOB access
+ iommu/vt-d: Fix PCI bus rescan device hot add
+ fbdev: fbmem: Fix logo center image dx issue
+ PM: runtime: Redefine pm_runtime_release_supplier()
+ memregion: Fix memregion_free() fallback definition
+ video: of_display_timing.h: include errno.h
+ powerpc/powernv: delay rng platform device creation until later in boot
+ net: dsa: qca8k: reset cpu port on MTU change
+ can: kvaser_usb: replace run-time checks with struct kvaser_usb_driver_info
+ can: kvaser_usb: kvaser_usb_leaf: fix CAN clock frequency regression
+ can: kvaser_usb: kvaser_usb_leaf: fix bittiming limits
+ xfs: remove incorrect ASSERT in xfs_rename
+ Revert "serial: sc16is7xx: Clear RS485 bits in the shutdown"
+ btrfs: fix error pointer dereference in btrfs_ioctl_rm_dev_v2()
+ virtio-blk: modify the value type of num in virtio_queue_rq()
+ btrfs: fix use of uninitialized variable at rm device ioctl
+ tty: n_gsm: fix encoding of command/response bit
+ ARM: meson: Fix refcount leak in meson_smp_prepare_cpus
+ pinctrl: sunxi: a83t: Fix NAND function name for some pins
+ ASoC: rt711: Add endianness flag in snd_soc_component_driver
+ ASoC: rt711-sdca: Add endianness flag in snd_soc_component_driver
+ ASoC: codecs: rt700/rt711/rt711-sdca: resume bus/codec in .set_jack_detect
+ arm64: dts: qcom: msm8994: Fix CPU6/7 reg values
+ arm64: dts: qcom: sdm845: use dispcc AHB clock for mdss node
+ ARM: mxs_defconfig: Enable the framebuffer
+ arm64: dts: imx8mp-evk: correct mmc pad settings
+ arm64: dts: imx8mp-evk: correct the uart2 pinctl value
+ arm64: dts: imx8mp-evk: correct gpio-led pad settings
+ arm64: dts: imx8mp-evk: correct vbus pad settings
+ arm64: dts: imx8mp-evk: correct eqos pad settings
+ arm64: dts: imx8mp-evk: correct I2C1 pad settings
+ arm64: dts: imx8mp-evk: correct I2C3 pad settings
+ arm64: dts: imx8mp-phyboard-pollux-rdk: correct uart pad settings
+ arm64: dts: imx8mp-phyboard-pollux-rdk: correct eqos pad settings
+ arm64: dts: imx8mp-phyboard-pollux-rdk: correct i2c2 & mmc settings
+ pinctrl: sunxi: sunxi_pconf_set: use correct offset
+ arm64: dts: qcom: msm8992-*: Fix vdd_lvs1_2-supply typo
+ ARM: at91: pm: use proper compatible for sama5d2's rtc
+ ARM: at91: pm: use proper compatibles for sam9x60's rtc and rtt
+ ARM: at91: pm: use proper compatibles for sama7g5's rtc and rtt
+ ARM: dts: at91: sam9x60ek: fix eeprom compatible and size
+ ARM: dts: at91: sama5d2_icp: fix eeprom compatibles
+ ARM: at91: fix soc detection for SAM9X60 SiPs
+ xsk: Clear page contiguity bit when unmapping pool
+ i2c: piix4: Fix a memory leak in the EFCH MMIO support
+ i40e: Fix dropped jumbo frames statistics
+ i40e: Fix VF's MAC Address change on VM
+ ARM: dts: stm32: use usbphyc ck_usbo_48m as USBH OHCI clock on stm32mp151
+ ARM: dts: stm32: add missing usbh clock and fix clk order on stm32mp15
+ ibmvnic: Properly dispose of all skbs during a failover.
+ selftests: forwarding: fix flood_unicast_test when h2 supports IFF_UNICAST_FLT
+ selftests: forwarding: fix learning_test when h1 supports IFF_UNICAST_FLT
+ selftests: forwarding: fix error message in learning_test
+ r8169: fix accessing unset transport header
+ i2c: cadence: Unregister the clk notifier in error path
+ dmaengine: imx-sdma: Allow imx8m for imx7 FW revs
+ misc: rtsx_usb: fix use of dma mapped buffer for usb bulk transfer
+ misc: rtsx_usb: use separate command and response buffers
+ misc: rtsx_usb: set return value in rsp_buf alloc err path
+ Revert "mm/memory-failure.c: fix race with changing page compound again"
+ Revert "serial: 8250_mtk: Make sure to select the right FEATURE_SEL"
+ dt-bindings: dma: allwinner,sun50i-a64-dma: Fix min/max typo
+ ida: don't use BUG_ON() for debugging
+ dmaengine: pl330: Fix lockdep warning about non-static key
+ dmaengine: lgm: Fix an error handling path in intel_ldma_probe()
+ dmaengine: at_xdma: handle errors of at_xdmac_alloc_desc() correctly
+ dmaengine: ti: Fix refcount leak in ti_dra7_xbar_route_allocate
+ dmaengine: qcom: bam_dma: fix runtime PM underflow
+ dmaengine: ti: Add missing put_device in ti_dra7_xbar_route_allocate
+ dmaengine: idxd: force wq context cleanup on device disable path
+ selftests/net: fix section name when using xdp_dummy.o
+ Linux 5.15.54
+ UBUNTU: Upstream stable to v5.15.54
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1987451
Title:
Jammy update: v5.15.54 upstream stable release
Status in linux package in Ubuntu:
Invalid
Status in linux source package in Jammy:
In Progress
Bug description:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
v5.15.54 upstream stable release
from git://git.kernel.org/
mm/slub: add missing TID updates on slab deactivation
mm/filemap: fix UAF in find_lock_entries
Revert "selftests/bpf: Add test for bpf_timer overwriting crash"
ALSA: usb-audio: Workarounds for Behringer UMC 204/404 HD
ALSA: hda/realtek: Add quirk for Clevo L140PU
ALSA: cs46xx: Fix missing snd_card_free() call at probe error
can: bcm: use call_rcu() instead of costly synchronize_rcu()
can: grcan: grcan_probe(): remove extra of_node_get()
can: gs_usb: gs_usb_open/close(): fix memory leak
can: m_can: m_can_chip_config(): actually enable internal timestamping
can: m_can: m_can_{read_fifo,echo_tx_event}(): shift timestamp to full 32 bits
can: mcp251xfd: mcp251xfd_regmap_crc_read(): improve workaround handling for
mcp2517fd
can: mcp251xfd: mcp251xfd_regmap_crc_read(): update workaround broken CRC on
TBC register
bpf: Fix incorrect verifier simulation around jmp32's jeq/jne
bpf: Fix insufficient bounds propagation from adjust_scalar_min_max_vals
usbnet: fix memory leak in error case
net: rose: fix UAF bug caused by rose_t0timer_expiry
netfilter: nft_set_pipapo: release elements in clone from abort path
btrfs: rename btrfs_alloc_chunk to btrfs_create_chunk
btrfs: add additional parameters to btrfs_init_tree_ref/btrfs_init_data_ref
btrfs: fix invalid delayed ref after subvolume creation failure
btrfs: fix warning when freeing leaf after subvolume creation failure
Input: cpcap-pwrbutton - handle errors from platform_get_irq()
Input: goodix - change goodix_i2c_write() len parameter type to int
Input: goodix - add a goodix.h header file
Input: goodix - refactor reset handling
Input: goodix - try not to touch the reset-pin on x86/ACPI devices
dma-buf/poll: Get a file reference for outstanding fence callbacks
btrfs: fix deadlock between chunk allocation and chunk btree modifications
drm/i915: Disable bonding on gen12+ platforms
drm/i915/gt: Register the migrate contexts with their engines
drm/i915: Replace the unconditional clflush with drm_clflush_virt_range()
media: ir_toy: prevent device from hanging during transmit
memory: renesas-rpc-if: Avoid unaligned bus access for HyperFlash
ath11k: add hw_param for wakeup_mhi
qed: Improve the stack space of filter_config()
platform/x86: wmi: introduce helper to convert driver to WMI driver
platform/x86: wmi: Replace read_takes_no_args with a flags field
platform/x86: wmi: Fix driver->notify() vs ->probe() race
mt76: mt7921: get rid of mt7921_mac_set_beacon_filter
mt76: mt7921: introduce mt7921_mcu_set_beacon_filter utility routine
mt76: mt7921: fix a possible race enabling/disabling runtime-pm
bpf: Stop caching subprog index in the bpf_pseudo_func insn
bpf, arm64: Use emit_addr_mov_i64() for BPF_PSEUDO_FUNC
riscv: defconfig: enable DRM_NOUVEAU
RISC-V: defconfigs: Set CONFIG_FB=y, for FB console
net/mlx5e: Check action fwd/drop flag exists also for nic flows
net/mlx5e: Split actions_match_supported() into a sub function
net/mlx5e: TC, Reject rules with drop and modify hdr action
net/mlx5e: TC, Reject rules with forward and drop actions
ASoC: rt5682: Avoid the unexpected IRQ event during going to suspend
ASoC: rt5682: Re-detect the combo jack after resuming
ASoC: rt5682: Fix deadlock on resume
netfilter: nf_tables: convert pktinfo->tprot_set to flags field
netfilter: nft_payload: support for inner header matching / mangling
netfilter: nft_payload: don't allow th access for fragments
s390/boot: allocate amode31 section in decompressor
s390/setup: use physical pointers for memblock_reserve()
s390/setup: preserve memory at OLDMEM_BASE and OLDMEM_SIZE
ibmvnic: init init_done_rc earlier
ibmvnic: clear fop when retrying probe
ibmvnic: Allow queueing resets during probe
virtio-blk: avoid preallocating big SGL for data
io_uring: ensure that fsnotify is always called
block: use bdev_get_queue() in bio.c
block: only mark bio as tracked if it really is tracked
block: fix rq-qos breakage from skipping rq_qos_done_bio()
stddef: Introduce struct_group() helper macro
media: omap3isp: Use struct_group() for memcpy() region
media: davinci: vpif: fix use-after-free on driver unbind
mt76: mt76_connac: fix MCU_CE_CMD_SET_ROC definition error
mt76: mt7921: do not always disable fw runtime-pm
cxl/port: Hold port reference until decoder release
clk: renesas: r9a07g044: Update multiplier and divider values for PLL2/3
KVM: x86/mmu: Use yield-safe TDP MMU root iter in MMU notifier unmapping
KVM: x86/mmu: Use common TDP MMU zap helper for MMU notifier unmap hook
scsi: qla2xxx: Move heartbeat handling from DPC thread to workqueue
scsi: qla2xxx: Fix laggy FC remote port session recovery
scsi: qla2xxx: edif: Replace list_for_each_safe with list_for_each_entry_safe
scsi: qla2xxx: Fix crash during module load unload test
gfs2: Fix gfs2_file_buffered_write endless loop workaround
vdpa/mlx5: Avoid processing works if workqueue was destroyed
btrfs: handle device lookup with btrfs_dev_lookup_args
btrfs: add a btrfs_get_dev_args_from_path helper
btrfs: use btrfs_get_dev_args_from_path in dev removal ioctls
btrfs: remove device item and update super block in the same transaction
drbd: add error handling support for add_disk()
drbd: Fix double free problem in drbd_create_device
drbd: fix an invalid memory access caused by incorrect use of list iterator
drm/amd/display: Set min dcfclk if pipe count is 0
drm/amd/display: Fix by adding FPU protection for dcn30_internal_validate_bw
NFSD: De-duplicate net_generic(nf->nf_net, nfsd_net_id)
NFSD: COMMIT operations must not return NFS?ERR_INVAL
riscv/mm: Add XIP_FIXUP for riscv_pfn_base
iio: accel: mma8452: use the correct logic to get mma8452_data
batman-adv: Use netif_rx().
mtd: spi-nor: Skip erase logic when SPI_NOR_NO_ERASE is set
Compiler Attributes: add __alloc_size() for better bounds checking
mm: vmalloc: introduce array allocation functions
KVM: use __vcalloc for very large allocations
btrfs: don't access possibly stale fs_info data in device_list_add
KVM: s390x: fix SCK locking
scsi: qla2xxx: Fix loss of NVMe namespaces after driver reload test
powerpc/32: Don't use lmw/stmw for saving/restoring non volatile regs
powerpc: flexible GPR range save/restore macros
powerpc/tm: Fix more userspace r13 corruption
serial: sc16is7xx: Clear RS485 bits in the shutdown
bus: mhi: core: Use correctly sized arguments for bit field
bus: mhi: Fix pm_state conversion to string
stddef: Introduce DECLARE_FLEX_ARRAY() helper
uapi/linux/stddef.h: Add include guards
ASoC: rt5682: move clk related code to rt5682_i2c_probe
ASoC: rt5682: fix an incorrect NULL check on list iterator
drm/amd/vcn: fix an error msg on vcn 3.0
KVM: Don't create VM debugfs files outside of the VM directory
tty: n_gsm: Modify CR,PF bit when config requester
tty: n_gsm: Save dlci address open status when config requester
tty: n_gsm: fix frame reception handling
ALSA: usb-audio: add mapping for MSI MPG X570S Carbon Max Wifi.
ALSA: usb-audio: add mapping for MSI MAG X570S Torpedo MAX.
tty: n_gsm: fix missing update of modem controls after DLCI open
btrfs: zoned: encapsulate inode locking for zoned relocation
btrfs: zoned: use dedicated lock for data relocation
KVM: Initialize debugfs_dentry when a VM is created to avoid NULL deref
mm/hwpoison: mf_mutex for soft offline and unpoison
mm/hwpoison: avoid the impact of hwpoison_filter() return value on mce handler
mm/memory-failure.c: fix race with changing page compound again
mm/hwpoison: fix race between hugetlb free/demotion and
memory_failure_hugetlb()
tty: n_gsm: fix invalid use of MSC in advanced option
tty: n_gsm: fix sometimes uninitialized warning in gsm_dlci_modem_output()
serial: 8250_mtk: Make sure to select the right FEATURE_SEL
tty: n_gsm: fix invalid gsmtty_write_room() result
drm/i915: Fix a race between vma / object destruction and unbinding
drm/mediatek: Use mailbox rx_callback instead of cmdq_task_cb
drm/mediatek: Remove the pointer of struct cmdq_client
drm/mediatek: Detect CMDQ execution timeout
drm/mediatek: Add cmdq_handle in mtk_crtc
drm/mediatek: Add vblank register/unregister callback functions
Bluetooth: protect le accept and resolv lists with hdev->lock
Bluetooth: btmtksdio: fix use-after-free at btmtksdio_recv_event
io_uring: avoid io-wq -EAGAIN looping for !IOPOLL
irqchip/gic-v3: Ensure pseudo-NMIs have an ISB between ack and handling
irqchip/gic-v3: Refactor ISB + EOIR at ack time
rxrpc: Fix locking issue
dt-bindings: soc: qcom: smd-rpm: Add compatible for MSM8953 SoC
dt-bindings: soc: qcom: smd-rpm: Fix missing MSM8936 compatible
module: change to print useful messages from elf_validity_check()
module: fix [e_shstrndx].sh_size=0 OOB access
iommu/vt-d: Fix PCI bus rescan device hot add
fbdev: fbmem: Fix logo center image dx issue
PM: runtime: Redefine pm_runtime_release_supplier()
memregion: Fix memregion_free() fallback definition
video: of_display_timing.h: include errno.h
powerpc/powernv: delay rng platform device creation until later in boot
net: dsa: qca8k: reset cpu port on MTU change
can: kvaser_usb: replace run-time checks with struct kvaser_usb_driver_info
can: kvaser_usb: kvaser_usb_leaf: fix CAN clock frequency regression
can: kvaser_usb: kvaser_usb_leaf: fix bittiming limits
xfs: remove incorrect ASSERT in xfs_rename
Revert "serial: sc16is7xx: Clear RS485 bits in the shutdown"
btrfs: fix error pointer dereference in btrfs_ioctl_rm_dev_v2()
virtio-blk: modify the value type of num in virtio_queue_rq()
btrfs: fix use of uninitialized variable at rm device ioctl
tty: n_gsm: fix encoding of command/response bit
ARM: meson: Fix refcount leak in meson_smp_prepare_cpus
pinctrl: sunxi: a83t: Fix NAND function name for some pins
ASoC: rt711: Add endianness flag in snd_soc_component_driver
ASoC: rt711-sdca: Add endianness flag in snd_soc_component_driver
ASoC: codecs: rt700/rt711/rt711-sdca: resume bus/codec in .set_jack_detect
arm64: dts: qcom: msm8994: Fix CPU6/7 reg values
arm64: dts: qcom: sdm845: use dispcc AHB clock for mdss node
ARM: mxs_defconfig: Enable the framebuffer
arm64: dts: imx8mp-evk: correct mmc pad settings
arm64: dts: imx8mp-evk: correct the uart2 pinctl value
arm64: dts: imx8mp-evk: correct gpio-led pad settings
arm64: dts: imx8mp-evk: correct vbus pad settings
arm64: dts: imx8mp-evk: correct eqos pad settings
arm64: dts: imx8mp-evk: correct I2C1 pad settings
arm64: dts: imx8mp-evk: correct I2C3 pad settings
arm64: dts: imx8mp-phyboard-pollux-rdk: correct uart pad settings
arm64: dts: imx8mp-phyboard-pollux-rdk: correct eqos pad settings
arm64: dts: imx8mp-phyboard-pollux-rdk: correct i2c2 & mmc settings
pinctrl: sunxi: sunxi_pconf_set: use correct offset
arm64: dts: qcom: msm8992-*: Fix vdd_lvs1_2-supply typo
ARM: at91: pm: use proper compatible for sama5d2's rtc
ARM: at91: pm: use proper compatibles for sam9x60's rtc and rtt
ARM: at91: pm: use proper compatibles for sama7g5's rtc and rtt
ARM: dts: at91: sam9x60ek: fix eeprom compatible and size
ARM: dts: at91: sama5d2_icp: fix eeprom compatibles
ARM: at91: fix soc detection for SAM9X60 SiPs
xsk: Clear page contiguity bit when unmapping pool
i2c: piix4: Fix a memory leak in the EFCH MMIO support
i40e: Fix dropped jumbo frames statistics
i40e: Fix VF's MAC Address change on VM
ARM: dts: stm32: use usbphyc ck_usbo_48m as USBH OHCI clock on stm32mp151
ARM: dts: stm32: add missing usbh clock and fix clk order on stm32mp15
ibmvnic: Properly dispose of all skbs during a failover.
selftests: forwarding: fix flood_unicast_test when h2 supports IFF_UNICAST_FLT
selftests: forwarding: fix learning_test when h1 supports IFF_UNICAST_FLT
selftests: forwarding: fix error message in learning_test
r8169: fix accessing unset transport header
i2c: cadence: Unregister the clk notifier in error path
dmaengine: imx-sdma: Allow imx8m for imx7 FW revs
misc: rtsx_usb: fix use of dma mapped buffer for usb bulk transfer
misc: rtsx_usb: use separate command and response buffers
misc: rtsx_usb: set return value in rsp_buf alloc err path
Revert "mm/memory-failure.c: fix race with changing page compound again"
Revert "serial: 8250_mtk: Make sure to select the right FEATURE_SEL"
dt-bindings: dma: allwinner,sun50i-a64-dma: Fix min/max typo
ida: don't use BUG_ON() for debugging
dmaengine: pl330: Fix lockdep warning about non-static key
dmaengine: lgm: Fix an error handling path in intel_ldma_probe()
dmaengine: at_xdma: handle errors of at_xdmac_alloc_desc() correctly
dmaengine: ti: Fix refcount leak in ti_dra7_xbar_route_allocate
dmaengine: qcom: bam_dma: fix runtime PM underflow
dmaengine: ti: Add missing put_device in ti_dra7_xbar_route_allocate
dmaengine: idxd: force wq context cleanup on device disable path
selftests/net: fix section name when using xdp_dummy.o
Linux 5.15.54
UBUNTU: Upstream stable to v5.15.54
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1987451/+subscriptions
--
Mailing list: https://launchpad.net/~kernel-packages
Post to : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help : https://help.launchpad.net/ListHelp
