Public bug reported:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
v5.15.87 upstream stable release
from git://git.kernel.org/
usb: dwc3: qcom: Fix memory leak in dwc3_qcom_interconnect_init
cifs: fix oops during encryption
nvme-pci: fix doorbell buffer value endianness
nvme-pci: fix mempool alloc size
nvme-pci: fix page size checks
ACPI: resource: do IRQ override on LENOVO IdeaPad
ACPI: resource: do IRQ override on XMG Core 15
ACPI: resource: do IRQ override on Lenovo 14ALC7
block, bfq: fix uaf for bfqq in bfq_exit_icq_bfqq
ata: ahci: Fix PCS quirk application for suspend
nvme: fix the NVME_CMD_EFFECTS_CSE_MASK definition
nvmet: don't defer passthrough commands with trivial effects to the workqueue
fs/ntfs3: Validate BOOT record_size
fs/ntfs3: Add overflow check for attribute size
fs/ntfs3: Validate data run offset
fs/ntfs3: Add null pointer check to attr_load_runs_vcn
fs/ntfs3: Fix memory leak on ntfs_fill_super() error path
fs/ntfs3: Add null pointer check for inode operations
fs/ntfs3: Validate attribute name offset
fs/ntfs3: Validate buffer length while parsing index
fs/ntfs3: Validate resident attribute name
fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
soundwire: dmi-quirks: add quirk variant for LAPBC710 NUC15
fs/ntfs3: Validate index root when initialize NTFS security
fs/ntfs3: Use __GFP_NOWARN allocation at wnd_init()
fs/ntfs3: Use __GFP_NOWARN allocation at ntfs_fill_super()
fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
fs/ntfs3: Fix slab-out-of-bounds in r_page
objtool: Fix SEGFAULT
powerpc/rtas: avoid device tree lookups in rtas_os_term()
powerpc/rtas: avoid scheduling in rtas_os_term()
HID: multitouch: fix Asus ExpertBook P2 P2451FA trackpoint
HID: plantronics: Additional PIDs for double volume key presses quirk
pstore: Properly assign mem_type property
pstore/zone: Use GFP_ATOMIC to allocate zone buffer
hfsplus: fix bug causing custom uid and gid being unable to be assigned with
mount
binfmt: Fix error return code in load_elf_fdpic_binary()
ovl: Use ovl mounter's fsuid and fsgid in ovl_link()
ALSA: line6: correct midi status byte when receiving data from podxt
ALSA: line6: fix stack overflow in line6_midi_transmit
pnode: terminate at peers of source
mfd: mt6360: Add bounds checking in Regmap read/write call-backs
md: fix a crash in mempool_free
mm, compaction: fix fast_isolate_around() to stay within boundaries
f2fs: should put a page when checking the summary info
f2fs: allow to read node block after shutdown
mmc: vub300: fix warning - do not call blocking ops when !TASK_RUNNING
tpm: acpi: Call acpi_put_table() to fix memory leak
tpm: tpm_crb: Add the missed acpi_put_table() to fix memory leak
tpm: tpm_tis: Add the missed acpi_put_table() to fix memory leak
SUNRPC: Don't leak netobj memory when gss_read_proxy_verf() fails
kcsan: Instrument memcpy/memset/memmove with newer Clang
ASoC: Intel/SOF: use set_stream() instead of set_tdm_slots() for HDAudio
ASoC/SoundWire: dai: expand 'stream' concept beyond SoundWire
rcu-tasks: Simplify trc_read_check_handler() atomic operations
net/af_packet: add VLAN support for AF_PACKET SOCK_RAW GSO
net/af_packet: make sure to pull mac header
media: stv0288: use explicitly signed char
soc: qcom: Select REMAP_MMIO for LLCC driver
kest.pl: Fix grub2 menu handling for rebooting
ktest.pl minconfig: Unset configs instead of just removing them
jbd2: use the correct print format
perf/x86/intel/uncore: Disable I/O stacks to PMU mapping on ICX-D
perf/x86/intel/uncore: Clear attr_update properly
arm64: dts: qcom: sdm845-db845c: correct SPI2 pins drive strength
mmc: sdhci-sprd: Disable CLK_AUTO when the clock is less than 400K
btrfs: fix resolving backrefs for inline extent followed by prealloc
ARM: ux500: do not directly dereference __iomem
arm64: dts: qcom: sdm850-lenovo-yoga-c630: correct I2C12 pins drive strength
selftests: Use optional USERCFLAGS and USERLDFLAGS
PM/devfreq: governor: Add a private governor_data for governor
cpufreq: Init completion before kobject_init_and_add()
ALSA: patch_realtek: Fix Dell Inspiron Plus 16
ALSA: hda/realtek: Apply dual codec fixup for Dell Latitude laptops
fs: dlm: fix sock release if listen fails
fs: dlm: retry accept() until -EAGAIN or error returns
mptcp: mark ops structures as ro_after_init
mptcp: remove MPTCP 'ifdef' in TCP SYN cookies
dm cache: Fix ABBA deadlock between shrink_slab and dm_cache_metadata_abort
dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata
dm thin: Use last transaction's pmd->root when commit failed
dm thin: resume even if in FAIL mode
dm thin: Fix UAF in run_timer_softirq()
dm integrity: Fix UAF in dm_integrity_dtr()
dm clone: Fix UAF in clone_dtr()
dm cache: Fix UAF in destroy()
dm cache: set needs_check flag after aborting metadata
tracing/hist: Fix out-of-bound write on 'action_data.var_ref_idx'
perf/core: Call LSM hook after copying perf_event_attr
of/kexec: Fix reading 32-bit "linux,initrd-{start,end}" values
KVM: VMX: Resume guest immediately when injecting #GP on ECREATE
KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
KVM: nVMX: Properly expose ENABLE_USR_WAIT_PAUSE control to L1
x86/microcode/intel: Do not retry microcode reloading on the APs
ftrace/x86: Add back ftrace_expected for ftrace bug reports
x86/kprobes: Fix kprobes instruction boudary check with CONFIG_RETHUNK
x86/kprobes: Fix optprobe optimization check with CONFIG_RETHUNK
tracing: Fix race where eprobes can be called before the event
tracing: Fix complicated dependency of CONFIG_TRACER_MAX_TRACE
tracing/hist: Fix wrong return value in parse_action_params()
tracing/probes: Handle system names with hyphens
tracing: Fix infinite loop in tracing_read_pipe on overflowed print_trace_line
staging: media: tegra-video: fix chan->mipi value on error
staging: media: tegra-video: fix device_node use after free
ARM: 9256/1: NWFPE: avoid compiler-generated __aeabi_uldivmod
media: dvb-core: Fix double free in dvb_register_device()
media: dvb-core: Fix UAF due to refcount races at releasing
cifs: fix confusing debug message
cifs: fix missing display of three mount options
rtc: ds1347: fix value written to century register
block: mq-deadline: Do not break sequential write streams to zoned HDDs
md/bitmap: Fix bitmap chunk size overflow issues
efi: Add iMac Pro 2017 to uefi skip cert quirk
wifi: wilc1000: sdio: fix module autoloading
ASoC: jz4740-i2s: Handle independent FIFO flush bits
ipu3-imgu: Fix NULL pointer dereference in imgu_subdev_set_selection()
ipmi: fix long wait in unload when IPMI disconnect
mtd: spi-nor: Check for zero erase size in spi_nor_find_best_erase_type()
ima: Fix a potential NULL pointer access in ima_restore_measurement_list
ipmi: fix use after free in _ipmi_destroy_user()
PCI: Fix pci_device_is_present() for VFs by checking PF
PCI/sysfs: Fix double free in error path
riscv: stacktrace: Fixup ftrace_graph_ret_addr retp argument
riscv: mm: notify remote harts about mmu cache updates
crypto: n2 - add missing hash statesize
driver core: Fix bus_type.match() error handling in __driver_attach()
phy: qcom-qmp-combo: fix sc8180x reset
iommu/amd: Fix ivrs_acpihid cmdline parsing code
remoteproc: core: Do pm_relax when in RPROC_OFFLINE state
parisc: led: Fix potential null-ptr-deref in start_task()
device_cgroup: Roll back to original exceptions after copy failure
drm/connector: send hotplug uevent on connector cleanup
drm/vmwgfx: Validate the box size for the snooped cursor
drm/i915/dsi: fix VBT send packet port selection for dual link DSI
drm/ingenic: Fix missing platform_driver_unregister() call in ingenic_drm_init()
ext4: silence the warning when evicting inode with dioread_nolock
ext4: add inode table check in __ext4_get_inode_loc to aovid possible infinite
loop
ext4: remove trailing newline from ext4_msg() message
fs: ext4: initialize fsdata in pagecache_write()
ext4: fix use-after-free in ext4_orphan_cleanup
ext4: fix undefined behavior in bit shift for ext4_check_flag_values
ext4: add EXT4_IGET_BAD flag to prevent unexpected bad inode
ext4: add helper to check quota inums
ext4: fix bug_on in __es_tree_search caused by bad quota inode
ext4: fix reserved cluster accounting in __es_remove_extent()
ext4: check and assert if marking an no_delete evicting inode dirty
ext4: fix bug_on in __es_tree_search caused by bad boot loader inode
ext4: fix leaking uninitialized memory in fast-commit journal
ext4: fix uninititialized value in 'ext4_evict_inode'
ext4: init quota for 'old.inode' in 'ext4_rename'
ext4: fix delayed allocation bug in ext4_clu_mapped for bigalloc + inline
ext4: fix error code return to user-space in ext4_get_branch()
ext4: avoid BUG_ON when creating xattrs
ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
ext4: fix inode leak in ext4_xattr_inode_create() on an error path
ext4: initialize quota before expanding inode in setproject ioctl
ext4: avoid unaccounted block allocation when expanding inode
ext4: allocate extended attribute value in vmalloc area
drm/amdgpu: handle polaris10/11 overlap asics (v2)
block: mq-deadline: Fix dd_finish_request() for zoned devices
tracing: Fix issue of missing one synthetic field
ext4: remove unused enum EXT4_FC_COMMIT_FAILED
ext4: use ext4_debug() instead of jbd_debug()
ext4: introduce EXT4_FC_TAG_BASE_LEN helper
ext4: factor out ext4_fc_get_tl()
ext4: fix potential out of bound read in ext4_fc_replay_scan()
ext4: disable fast-commit of encrypted dir operations
ext4: don't set up encryption key during jbd2 transaction
ext4: add missing validation of fast-commit record lengths
ext4: fix unaligned memory access in ext4_fc_reserve_space()
ext4: fix off-by-one errors in fast-commit block filling
ARM: renumber bits related to _TIF_WORK_MASK
phy: qcom-qmp-combo: fix out-of-bounds clock access
btrfs: replace strncpy() with strscpy()
btrfs: move missing device handling in a dedicate function
btrfs: fix extent map use-after-free when handling missing device in
read_one_chunk
x86/mce: Get rid of msr_ops
x86/MCE/AMD: Clear DFR errors found in THR handler
media: s5p-mfc: Fix to handle reference queue during finishing
media: s5p-mfc: Clear workbit to handle error condition
media: s5p-mfc: Fix in register read and write for H264
perf probe: Use dwarf_attr_integrate as generic DWARF attr accessor
perf probe: Fix to get the DW_AT_decl_file and DW_AT_call_file as unsinged data
ravb: Fix "failed to switch device to config mode" message during unbind
ext4: goto right label 'failed_mount3a'
ext4: correct inconsistent error msg in nojournal mode
mbcache: automatically delete entries from cache on freeing
ext4: fix deadlock due to mbcache entry corruption
drm/i915/migrate: don't check the scratch page
drm/i915/migrate: fix offset calculation
drm/i915/migrate: fix length calculation
SUNRPC: ensure the matching upcall is in-flight upon downcall
btrfs: fix an error handling path in btrfs_defrag_leaves()
bpf: pull before calling skb_postpull_rcsum()
drm/panfrost: Fix GEM handle creation ref-counting
netfilter: nf_tables: consolidate set description
netfilter: nf_tables: add function to create set stateful expressions
netfilter: nf_tables: perform type checking for existing sets
vmxnet3: correctly report csum_level for encapsulated packet
netfilter: nf_tables: honor set timeout and garbage collection updates
veth: Fix race with AF_XDP exposing old or uninitialized descriptors
nfsd: shut down the NFSv4 state objects before the filecache
net: hns3: add interrupts re-initialization while doing VF FLR
net: hns3: refactor hns3_nic_reuse_page()
net: hns3: extract macro to simplify ring stats update code
net: hns3: fix miss L3E checking for rx packet
net: hns3: fix VF promisc mode not update when mac table full
net: sched: fix memory leak in tcindex_set_parms
qlcnic: prevent ->dcb use-after-free on qlcnic_dcb_enable() failure
net: dsa: mv88e6xxx: depend on PTP conditionally
nfc: Fix potential resource leaks
vdpa_sim: fix possible memory leak in vdpasim_net_init() and vdpasim_blk_init()
vhost/vsock: Fix error handling in vhost_vsock_init()
vringh: fix range used in iotlb_translate()
vhost: fix range used in translate_desc()
vdpa_sim: fix vringh initialization in vdpasim_queue_ready()
net/mlx5: E-Switch, properly handle ingress tagged packets on VST
net/mlx5: Add forgotten cleanup calls into mlx5_init_once() error path
net/mlx5: Avoid recovery in probe flows
net/mlx5e: IPoIB, Don't allow CQE compression to be turned on by default
net/mlx5e: TC, Refactor mlx5e_tc_add_flow_mod_hdr() to get flow attr
net/mlx5e: Always clear dest encap in neigh-update-del
net/mlx5e: Fix hw mtu initializing at XDP SQ allocation
net: amd-xgbe: add missed tasklet_kill
net: ena: Fix toeplitz initial hash value
net: ena: Don't register memory info on XDP exchange
net: ena: Account for the number of processed bytes in XDP
net: ena: Use bitmask to indicate packet redirection
net: ena: Fix rx_copybreak value update
net: ena: Set default value for RX interrupt moderation
net: ena: Update NUMA TPH hint register upon NUMA node update
net: phy: xgmiitorgmii: Fix refcount leak in xgmiitorgmii_probe
RDMA/mlx5: Fix mlx5_ib_get_hw_stats when used for device
RDMA/mlx5: Fix validation of max_rd_atomic caps for DC
drm/meson: Reduce the FIFO lines held when AFBC is not used
filelock: new helper: vfs_inode_has_locks
ceph: switch to vfs_inode_has_locks() to fix file lock bug
gpio: sifive: Fix refcount leak in sifive_gpio_probe
net: sched: atm: dont intepret cls results when asked to drop
net: sched: cbq: dont intepret cls results when asked to drop
net: sparx5: Fix reading of the MAC address
netfilter: ipset: fix hash:net,port,net hang with /0 subnet
netfilter: ipset: Rework long task execution when adding/deleting entries
perf tools: Fix resources leak in perf_data__open_dir()
drm/imx: ipuv3-plane: Fix overlay plane width
fs/ntfs3: don't hold ni_lock when calling truncate_setsize()
drivers/net/bonding/bond_3ad: return when there's no aggregator
octeontx2-pf: Fix lmtst ID used in aura free
usb: rndis_host: Secure rndis_query check against int overflow
perf stat: Fix handling of --for-each-cgroup with --bpf-counters to match non
BPF mode
drm/i915: unpin on error in intel_vgpu_shadow_mm_pin()
caif: fix memory leak in cfctrl_linkup_request()
udf: Fix extension of the last extent in the file
ASoC: Intel: bytcr_rt5640: Add quirk for the Advantech MICA-071 tablet
nvme: fix multipath crash caused by flush request when blktrace is enabled
io_uring: check for valid register opcode earlier
nvmet: use NVME_CMD_EFFECTS_CSUPP instead of open coding it
nvme: also return I/O command effects from nvme_command_effects
btrfs: check superblock to ensure the fs was not modified at thaw time
x86/kexec: Fix double-free of elf header buffer
nfsd: fix handling of readdir in v4root vs. mount upcall timeout
fbdev: matroxfb: G200eW: Increase max memory from 1 MB to 16 MB
block: don't allow splitting of a REQ_NOWAIT bio
io_uring: fix CQ waiting timeout handling
thermal: int340x: Add missing attribute for data rate base
riscv: uaccess: fix type of 0 variable on error in get_user()
riscv, kprobes: Stricter c.jr/c.jalr decoding
drm/i915/gvt: fix gvt debugfs destroy
drm/i915/gvt: fix vgpu debugfs clean in remove
hfs/hfsplus: use WARN_ON for sanity check
hfs/hfsplus: avoid WARN_ON() for sanity check, use proper error handling
ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in
ksmbd_decode_ntlmssp_auth_blob
Revert "ACPI: PM: Add support for upcoming AMD uPEP HID AMDI007"
mptcp: dedicated request sock for subflow in v6
mptcp: use proper req destructor for IPv6
ext4: don't allow journal inode to have encrypt flag
selftests: set the BUILD variable to absolute path
btrfs: make thaw time super block check to also verify checksum
net: hns3: fix return value check bug of rx copybreak
mbcache: Avoid nesting of cache->c_list_lock under bit locks
efi: random: combine bootloader provided RNG seed with RNG protocol output
io_uring: Fix unsigned 'res' comparison with zero in io_fixup_rw_res()
drm/mgag200: Fix PLL setup for G200_SE_A rev >=4
Linux 5.15.87
UBUNTU: Upstream stable to v5.15.87
** Affects: linux (Ubuntu)
Importance: Undecided
Status: Invalid
** Affects: linux (Ubuntu Jammy)
Importance: Medium
Assignee: Kamal Mostafa (kamalmostafa)
Status: In Progress
** Tags: kernel-stable-tracking-bug
** Changed in: linux (Ubuntu)
Status: New => Confirmed
** Tags added: kernel-stable-tracking-bug
** Also affects: linux (Ubuntu Jammy)
Importance: Undecided
Status: New
** Description changed:
+ SRU Justification
- SRU Justification
+ Impact:
+ The upstream process for stable tree updates is quite similar
+ in scope to the Ubuntu SRU process, e.g., each patch has to
+ demonstrably fix a bug, and each patch is vetted by upstream
+ by originating either directly from a mainline/stable Linux tree or
+ a minimally backported form of that patch. The following upstream
+ stable patches should be included in the Ubuntu kernel:
- Impact:
- The upstream process for stable tree updates is quite similar
- in scope to the Ubuntu SRU process, e.g., each patch has to
- demonstrably fix a bug, and each patch is vetted by upstream
- by originating either directly from a mainline/stable Linux tree or
- a minimally backported form of that patch. The following upstream
- stable patches should be included in the Ubuntu kernel:
+ v5.15.87 upstream stable release
+ from git://git.kernel.org/
- v5.15.87 upstream stable release
- from git://git.kernel.org/
+ usb: dwc3: qcom: Fix memory leak in dwc3_qcom_interconnect_init
+ cifs: fix oops during encryption
+ nvme-pci: fix doorbell buffer value endianness
+ nvme-pci: fix mempool alloc size
+ nvme-pci: fix page size checks
+ ACPI: resource: do IRQ override on LENOVO IdeaPad
+ ACPI: resource: do IRQ override on XMG Core 15
+ ACPI: resource: do IRQ override on Lenovo 14ALC7
+ block, bfq: fix uaf for bfqq in bfq_exit_icq_bfqq
+ ata: ahci: Fix PCS quirk application for suspend
+ nvme: fix the NVME_CMD_EFFECTS_CSE_MASK definition
+ nvmet: don't defer passthrough commands with trivial effects to the workqueue
+ fs/ntfs3: Validate BOOT record_size
+ fs/ntfs3: Add overflow check for attribute size
+ fs/ntfs3: Validate data run offset
+ fs/ntfs3: Add null pointer check to attr_load_runs_vcn
+ fs/ntfs3: Fix memory leak on ntfs_fill_super() error path
+ fs/ntfs3: Add null pointer check for inode operations
+ fs/ntfs3: Validate attribute name offset
+ fs/ntfs3: Validate buffer length while parsing index
+ fs/ntfs3: Validate resident attribute name
+ fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
+ soundwire: dmi-quirks: add quirk variant for LAPBC710 NUC15
+ fs/ntfs3: Validate index root when initialize NTFS security
+ fs/ntfs3: Use __GFP_NOWARN allocation at wnd_init()
+ fs/ntfs3: Use __GFP_NOWARN allocation at ntfs_fill_super()
+ fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
+ fs/ntfs3: Fix slab-out-of-bounds in r_page
+ objtool: Fix SEGFAULT
+ powerpc/rtas: avoid device tree lookups in rtas_os_term()
+ powerpc/rtas: avoid scheduling in rtas_os_term()
+ HID: multitouch: fix Asus ExpertBook P2 P2451FA trackpoint
+ HID: plantronics: Additional PIDs for double volume key presses quirk
+ pstore: Properly assign mem_type property
+ pstore/zone: Use GFP_ATOMIC to allocate zone buffer
+ hfsplus: fix bug causing custom uid and gid being unable to be assigned with
mount
+ binfmt: Fix error return code in load_elf_fdpic_binary()
+ ovl: Use ovl mounter's fsuid and fsgid in ovl_link()
+ ALSA: line6: correct midi status byte when receiving data from podxt
+ ALSA: line6: fix stack overflow in line6_midi_transmit
+ pnode: terminate at peers of source
+ mfd: mt6360: Add bounds checking in Regmap read/write call-backs
+ md: fix a crash in mempool_free
+ mm, compaction: fix fast_isolate_around() to stay within boundaries
+ f2fs: should put a page when checking the summary info
+ f2fs: allow to read node block after shutdown
+ mmc: vub300: fix warning - do not call blocking ops when !TASK_RUNNING
+ tpm: acpi: Call acpi_put_table() to fix memory leak
+ tpm: tpm_crb: Add the missed acpi_put_table() to fix memory leak
+ tpm: tpm_tis: Add the missed acpi_put_table() to fix memory leak
+ SUNRPC: Don't leak netobj memory when gss_read_proxy_verf() fails
+ kcsan: Instrument memcpy/memset/memmove with newer Clang
+ ASoC: Intel/SOF: use set_stream() instead of set_tdm_slots() for HDAudio
+ ASoC/SoundWire: dai: expand 'stream' concept beyond SoundWire
+ rcu-tasks: Simplify trc_read_check_handler() atomic operations
+ net/af_packet: add VLAN support for AF_PACKET SOCK_RAW GSO
+ net/af_packet: make sure to pull mac header
+ media: stv0288: use explicitly signed char
+ soc: qcom: Select REMAP_MMIO for LLCC driver
+ kest.pl: Fix grub2 menu handling for rebooting
+ ktest.pl minconfig: Unset configs instead of just removing them
+ jbd2: use the correct print format
+ perf/x86/intel/uncore: Disable I/O stacks to PMU mapping on ICX-D
+ perf/x86/intel/uncore: Clear attr_update properly
+ arm64: dts: qcom: sdm845-db845c: correct SPI2 pins drive strength
+ mmc: sdhci-sprd: Disable CLK_AUTO when the clock is less than 400K
+ btrfs: fix resolving backrefs for inline extent followed by prealloc
+ ARM: ux500: do not directly dereference __iomem
+ arm64: dts: qcom: sdm850-lenovo-yoga-c630: correct I2C12 pins drive strength
+ selftests: Use optional USERCFLAGS and USERLDFLAGS
+ PM/devfreq: governor: Add a private governor_data for governor
+ cpufreq: Init completion before kobject_init_and_add()
+ ALSA: patch_realtek: Fix Dell Inspiron Plus 16
+ ALSA: hda/realtek: Apply dual codec fixup for Dell Latitude laptops
+ fs: dlm: fix sock release if listen fails
+ fs: dlm: retry accept() until -EAGAIN or error returns
+ mptcp: mark ops structures as ro_after_init
+ mptcp: remove MPTCP 'ifdef' in TCP SYN cookies
+ dm cache: Fix ABBA deadlock between shrink_slab and dm_cache_metadata_abort
+ dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata
+ dm thin: Use last transaction's pmd->root when commit failed
+ dm thin: resume even if in FAIL mode
+ dm thin: Fix UAF in run_timer_softirq()
+ dm integrity: Fix UAF in dm_integrity_dtr()
+ dm clone: Fix UAF in clone_dtr()
+ dm cache: Fix UAF in destroy()
+ dm cache: set needs_check flag after aborting metadata
+ tracing/hist: Fix out-of-bound write on 'action_data.var_ref_idx'
+ perf/core: Call LSM hook after copying perf_event_attr
+ of/kexec: Fix reading 32-bit "linux,initrd-{start,end}" values
+ KVM: VMX: Resume guest immediately when injecting #GP on ECREATE
+ KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
+ KVM: nVMX: Properly expose ENABLE_USR_WAIT_PAUSE control to L1
+ x86/microcode/intel: Do not retry microcode reloading on the APs
+ ftrace/x86: Add back ftrace_expected for ftrace bug reports
+ x86/kprobes: Fix kprobes instruction boudary check with CONFIG_RETHUNK
+ x86/kprobes: Fix optprobe optimization check with CONFIG_RETHUNK
+ tracing: Fix race where eprobes can be called before the event
+ tracing: Fix complicated dependency of CONFIG_TRACER_MAX_TRACE
+ tracing/hist: Fix wrong return value in parse_action_params()
+ tracing/probes: Handle system names with hyphens
+ tracing: Fix infinite loop in tracing_read_pipe on overflowed print_trace_line
+ staging: media: tegra-video: fix chan->mipi value on error
+ staging: media: tegra-video: fix device_node use after free
+ ARM: 9256/1: NWFPE: avoid compiler-generated __aeabi_uldivmod
+ media: dvb-core: Fix double free in dvb_register_device()
+ media: dvb-core: Fix UAF due to refcount races at releasing
+ cifs: fix confusing debug message
+ cifs: fix missing display of three mount options
+ rtc: ds1347: fix value written to century register
+ block: mq-deadline: Do not break sequential write streams to zoned HDDs
+ md/bitmap: Fix bitmap chunk size overflow issues
+ efi: Add iMac Pro 2017 to uefi skip cert quirk
+ wifi: wilc1000: sdio: fix module autoloading
+ ASoC: jz4740-i2s: Handle independent FIFO flush bits
+ ipu3-imgu: Fix NULL pointer dereference in imgu_subdev_set_selection()
+ ipmi: fix long wait in unload when IPMI disconnect
+ mtd: spi-nor: Check for zero erase size in spi_nor_find_best_erase_type()
+ ima: Fix a potential NULL pointer access in ima_restore_measurement_list
+ ipmi: fix use after free in _ipmi_destroy_user()
+ PCI: Fix pci_device_is_present() for VFs by checking PF
+ PCI/sysfs: Fix double free in error path
+ riscv: stacktrace: Fixup ftrace_graph_ret_addr retp argument
+ riscv: mm: notify remote harts about mmu cache updates
+ crypto: n2 - add missing hash statesize
+ driver core: Fix bus_type.match() error handling in __driver_attach()
+ phy: qcom-qmp-combo: fix sc8180x reset
+ iommu/amd: Fix ivrs_acpihid cmdline parsing code
+ remoteproc: core: Do pm_relax when in RPROC_OFFLINE state
+ parisc: led: Fix potential null-ptr-deref in start_task()
+ device_cgroup: Roll back to original exceptions after copy failure
+ drm/connector: send hotplug uevent on connector cleanup
+ drm/vmwgfx: Validate the box size for the snooped cursor
+ drm/i915/dsi: fix VBT send packet port selection for dual link DSI
+ drm/ingenic: Fix missing platform_driver_unregister() call in
ingenic_drm_init()
+ ext4: silence the warning when evicting inode with dioread_nolock
+ ext4: add inode table check in __ext4_get_inode_loc to aovid possible
infinite loop
+ ext4: remove trailing newline from ext4_msg() message
+ fs: ext4: initialize fsdata in pagecache_write()
+ ext4: fix use-after-free in ext4_orphan_cleanup
+ ext4: fix undefined behavior in bit shift for ext4_check_flag_values
+ ext4: add EXT4_IGET_BAD flag to prevent unexpected bad inode
+ ext4: add helper to check quota inums
+ ext4: fix bug_on in __es_tree_search caused by bad quota inode
+ ext4: fix reserved cluster accounting in __es_remove_extent()
+ ext4: check and assert if marking an no_delete evicting inode dirty
+ ext4: fix bug_on in __es_tree_search caused by bad boot loader inode
+ ext4: fix leaking uninitialized memory in fast-commit journal
+ ext4: fix uninititialized value in 'ext4_evict_inode'
+ ext4: init quota for 'old.inode' in 'ext4_rename'
+ ext4: fix delayed allocation bug in ext4_clu_mapped for bigalloc + inline
+ ext4: fix error code return to user-space in ext4_get_branch()
+ ext4: avoid BUG_ON when creating xattrs
+ ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
+ ext4: fix inode leak in ext4_xattr_inode_create() on an error path
+ ext4: initialize quota before expanding inode in setproject ioctl
+ ext4: avoid unaccounted block allocation when expanding inode
+ ext4: allocate extended attribute value in vmalloc area
+ drm/amdgpu: handle polaris10/11 overlap asics (v2)
+ block: mq-deadline: Fix dd_finish_request() for zoned devices
+ tracing: Fix issue of missing one synthetic field
+ ext4: remove unused enum EXT4_FC_COMMIT_FAILED
+ ext4: use ext4_debug() instead of jbd_debug()
+ ext4: introduce EXT4_FC_TAG_BASE_LEN helper
+ ext4: factor out ext4_fc_get_tl()
+ ext4: fix potential out of bound read in ext4_fc_replay_scan()
+ ext4: disable fast-commit of encrypted dir operations
+ ext4: don't set up encryption key during jbd2 transaction
+ ext4: add missing validation of fast-commit record lengths
+ ext4: fix unaligned memory access in ext4_fc_reserve_space()
+ ext4: fix off-by-one errors in fast-commit block filling
+ ARM: renumber bits related to _TIF_WORK_MASK
+ phy: qcom-qmp-combo: fix out-of-bounds clock access
+ btrfs: replace strncpy() with strscpy()
+ btrfs: move missing device handling in a dedicate function
+ btrfs: fix extent map use-after-free when handling missing device in
read_one_chunk
+ x86/mce: Get rid of msr_ops
+ x86/MCE/AMD: Clear DFR errors found in THR handler
+ media: s5p-mfc: Fix to handle reference queue during finishing
+ media: s5p-mfc: Clear workbit to handle error condition
+ media: s5p-mfc: Fix in register read and write for H264
+ perf probe: Use dwarf_attr_integrate as generic DWARF attr accessor
+ perf probe: Fix to get the DW_AT_decl_file and DW_AT_call_file as unsinged
data
+ ravb: Fix "failed to switch device to config mode" message during unbind
+ ext4: goto right label 'failed_mount3a'
+ ext4: correct inconsistent error msg in nojournal mode
+ mbcache: automatically delete entries from cache on freeing
+ ext4: fix deadlock due to mbcache entry corruption
+ drm/i915/migrate: don't check the scratch page
+ drm/i915/migrate: fix offset calculation
+ drm/i915/migrate: fix length calculation
+ SUNRPC: ensure the matching upcall is in-flight upon downcall
+ btrfs: fix an error handling path in btrfs_defrag_leaves()
+ bpf: pull before calling skb_postpull_rcsum()
+ drm/panfrost: Fix GEM handle creation ref-counting
+ netfilter: nf_tables: consolidate set description
+ netfilter: nf_tables: add function to create set stateful expressions
+ netfilter: nf_tables: perform type checking for existing sets
+ vmxnet3: correctly report csum_level for encapsulated packet
+ netfilter: nf_tables: honor set timeout and garbage collection updates
+ veth: Fix race with AF_XDP exposing old or uninitialized descriptors
+ nfsd: shut down the NFSv4 state objects before the filecache
+ net: hns3: add interrupts re-initialization while doing VF FLR
+ net: hns3: refactor hns3_nic_reuse_page()
+ net: hns3: extract macro to simplify ring stats update code
+ net: hns3: fix miss L3E checking for rx packet
+ net: hns3: fix VF promisc mode not update when mac table full
+ net: sched: fix memory leak in tcindex_set_parms
+ qlcnic: prevent ->dcb use-after-free on qlcnic_dcb_enable() failure
+ net: dsa: mv88e6xxx: depend on PTP conditionally
+ nfc: Fix potential resource leaks
+ vdpa_sim: fix possible memory leak in vdpasim_net_init() and
vdpasim_blk_init()
+ vhost/vsock: Fix error handling in vhost_vsock_init()
+ vringh: fix range used in iotlb_translate()
+ vhost: fix range used in translate_desc()
+ vdpa_sim: fix vringh initialization in vdpasim_queue_ready()
+ net/mlx5: E-Switch, properly handle ingress tagged packets on VST
+ net/mlx5: Add forgotten cleanup calls into mlx5_init_once() error path
+ net/mlx5: Avoid recovery in probe flows
+ net/mlx5e: IPoIB, Don't allow CQE compression to be turned on by default
+ net/mlx5e: TC, Refactor mlx5e_tc_add_flow_mod_hdr() to get flow attr
+ net/mlx5e: Always clear dest encap in neigh-update-del
+ net/mlx5e: Fix hw mtu initializing at XDP SQ allocation
+ net: amd-xgbe: add missed tasklet_kill
+ net: ena: Fix toeplitz initial hash value
+ net: ena: Don't register memory info on XDP exchange
+ net: ena: Account for the number of processed bytes in XDP
+ net: ena: Use bitmask to indicate packet redirection
+ net: ena: Fix rx_copybreak value update
+ net: ena: Set default value for RX interrupt moderation
+ net: ena: Update NUMA TPH hint register upon NUMA node update
+ net: phy: xgmiitorgmii: Fix refcount leak in xgmiitorgmii_probe
+ RDMA/mlx5: Fix mlx5_ib_get_hw_stats when used for device
+ RDMA/mlx5: Fix validation of max_rd_atomic caps for DC
+ drm/meson: Reduce the FIFO lines held when AFBC is not used
+ filelock: new helper: vfs_inode_has_locks
+ ceph: switch to vfs_inode_has_locks() to fix file lock bug
+ gpio: sifive: Fix refcount leak in sifive_gpio_probe
+ net: sched: atm: dont intepret cls results when asked to drop
+ net: sched: cbq: dont intepret cls results when asked to drop
+ net: sparx5: Fix reading of the MAC address
+ netfilter: ipset: fix hash:net,port,net hang with /0 subnet
+ netfilter: ipset: Rework long task execution when adding/deleting entries
+ perf tools: Fix resources leak in perf_data__open_dir()
+ drm/imx: ipuv3-plane: Fix overlay plane width
+ fs/ntfs3: don't hold ni_lock when calling truncate_setsize()
+ drivers/net/bonding/bond_3ad: return when there's no aggregator
+ octeontx2-pf: Fix lmtst ID used in aura free
+ usb: rndis_host: Secure rndis_query check against int overflow
+ perf stat: Fix handling of --for-each-cgroup with --bpf-counters to match non
BPF mode
+ drm/i915: unpin on error in intel_vgpu_shadow_mm_pin()
+ caif: fix memory leak in cfctrl_linkup_request()
+ udf: Fix extension of the last extent in the file
+ ASoC: Intel: bytcr_rt5640: Add quirk for the Advantech MICA-071 tablet
+ nvme: fix multipath crash caused by flush request when blktrace is enabled
+ io_uring: check for valid register opcode earlier
+ nvmet: use NVME_CMD_EFFECTS_CSUPP instead of open coding it
+ nvme: also return I/O command effects from nvme_command_effects
+ btrfs: check superblock to ensure the fs was not modified at thaw time
+ x86/kexec: Fix double-free of elf header buffer
+ nfsd: fix handling of readdir in v4root vs. mount upcall timeout
+ fbdev: matroxfb: G200eW: Increase max memory from 1 MB to 16 MB
+ block: don't allow splitting of a REQ_NOWAIT bio
+ io_uring: fix CQ waiting timeout handling
+ thermal: int340x: Add missing attribute for data rate base
+ riscv: uaccess: fix type of 0 variable on error in get_user()
+ riscv, kprobes: Stricter c.jr/c.jalr decoding
+ drm/i915/gvt: fix gvt debugfs destroy
+ drm/i915/gvt: fix vgpu debugfs clean in remove
+ hfs/hfsplus: use WARN_ON for sanity check
+ hfs/hfsplus: avoid WARN_ON() for sanity check, use proper error handling
+ ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
+ ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in
ksmbd_decode_ntlmssp_auth_blob
+ Revert "ACPI: PM: Add support for upcoming AMD uPEP HID AMDI007"
+ mptcp: dedicated request sock for subflow in v6
+ mptcp: use proper req destructor for IPv6
+ ext4: don't allow journal inode to have encrypt flag
+ selftests: set the BUILD variable to absolute path
+ btrfs: make thaw time super block check to also verify checksum
+ net: hns3: fix return value check bug of rx copybreak
+ mbcache: Avoid nesting of cache->c_list_lock under bit locks
+ efi: random: combine bootloader provided RNG seed with RNG protocol output
+ io_uring: Fix unsigned 'res' comparison with zero in io_fixup_rw_res()
+ drm/mgag200: Fix PLL setup for G200_SE_A rev >=4
+ Linux 5.15.87
+ UBUNTU: Upstream stable to v5.15.87
** Changed in: linux (Ubuntu)
Status: Confirmed => Invalid
** Changed in: linux (Ubuntu Jammy)
Status: New => In Progress
** Changed in: linux (Ubuntu Jammy)
Importance: Undecided => Medium
** Changed in: linux (Ubuntu Jammy)
Assignee: (unassigned) => Kamal Mostafa (kamalmostafa)
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/2007441
Title:
Jammy update: v5.15.87 upstream stable release
Status in linux package in Ubuntu:
Invalid
Status in linux source package in Jammy:
In Progress
Bug description:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
v5.15.87 upstream stable release
from git://git.kernel.org/
usb: dwc3: qcom: Fix memory leak in dwc3_qcom_interconnect_init
cifs: fix oops during encryption
nvme-pci: fix doorbell buffer value endianness
nvme-pci: fix mempool alloc size
nvme-pci: fix page size checks
ACPI: resource: do IRQ override on LENOVO IdeaPad
ACPI: resource: do IRQ override on XMG Core 15
ACPI: resource: do IRQ override on Lenovo 14ALC7
block, bfq: fix uaf for bfqq in bfq_exit_icq_bfqq
ata: ahci: Fix PCS quirk application for suspend
nvme: fix the NVME_CMD_EFFECTS_CSE_MASK definition
nvmet: don't defer passthrough commands with trivial effects to the workqueue
fs/ntfs3: Validate BOOT record_size
fs/ntfs3: Add overflow check for attribute size
fs/ntfs3: Validate data run offset
fs/ntfs3: Add null pointer check to attr_load_runs_vcn
fs/ntfs3: Fix memory leak on ntfs_fill_super() error path
fs/ntfs3: Add null pointer check for inode operations
fs/ntfs3: Validate attribute name offset
fs/ntfs3: Validate buffer length while parsing index
fs/ntfs3: Validate resident attribute name
fs/ntfs3: Fix slab-out-of-bounds read in run_unpack
soundwire: dmi-quirks: add quirk variant for LAPBC710 NUC15
fs/ntfs3: Validate index root when initialize NTFS security
fs/ntfs3: Use __GFP_NOWARN allocation at wnd_init()
fs/ntfs3: Use __GFP_NOWARN allocation at ntfs_fill_super()
fs/ntfs3: Delete duplicate condition in ntfs_read_mft()
fs/ntfs3: Fix slab-out-of-bounds in r_page
objtool: Fix SEGFAULT
powerpc/rtas: avoid device tree lookups in rtas_os_term()
powerpc/rtas: avoid scheduling in rtas_os_term()
HID: multitouch: fix Asus ExpertBook P2 P2451FA trackpoint
HID: plantronics: Additional PIDs for double volume key presses quirk
pstore: Properly assign mem_type property
pstore/zone: Use GFP_ATOMIC to allocate zone buffer
hfsplus: fix bug causing custom uid and gid being unable to be assigned with
mount
binfmt: Fix error return code in load_elf_fdpic_binary()
ovl: Use ovl mounter's fsuid and fsgid in ovl_link()
ALSA: line6: correct midi status byte when receiving data from podxt
ALSA: line6: fix stack overflow in line6_midi_transmit
pnode: terminate at peers of source
mfd: mt6360: Add bounds checking in Regmap read/write call-backs
md: fix a crash in mempool_free
mm, compaction: fix fast_isolate_around() to stay within boundaries
f2fs: should put a page when checking the summary info
f2fs: allow to read node block after shutdown
mmc: vub300: fix warning - do not call blocking ops when !TASK_RUNNING
tpm: acpi: Call acpi_put_table() to fix memory leak
tpm: tpm_crb: Add the missed acpi_put_table() to fix memory leak
tpm: tpm_tis: Add the missed acpi_put_table() to fix memory leak
SUNRPC: Don't leak netobj memory when gss_read_proxy_verf() fails
kcsan: Instrument memcpy/memset/memmove with newer Clang
ASoC: Intel/SOF: use set_stream() instead of set_tdm_slots() for HDAudio
ASoC/SoundWire: dai: expand 'stream' concept beyond SoundWire
rcu-tasks: Simplify trc_read_check_handler() atomic operations
net/af_packet: add VLAN support for AF_PACKET SOCK_RAW GSO
net/af_packet: make sure to pull mac header
media: stv0288: use explicitly signed char
soc: qcom: Select REMAP_MMIO for LLCC driver
kest.pl: Fix grub2 menu handling for rebooting
ktest.pl minconfig: Unset configs instead of just removing them
jbd2: use the correct print format
perf/x86/intel/uncore: Disable I/O stacks to PMU mapping on ICX-D
perf/x86/intel/uncore: Clear attr_update properly
arm64: dts: qcom: sdm845-db845c: correct SPI2 pins drive strength
mmc: sdhci-sprd: Disable CLK_AUTO when the clock is less than 400K
btrfs: fix resolving backrefs for inline extent followed by prealloc
ARM: ux500: do not directly dereference __iomem
arm64: dts: qcom: sdm850-lenovo-yoga-c630: correct I2C12 pins drive strength
selftests: Use optional USERCFLAGS and USERLDFLAGS
PM/devfreq: governor: Add a private governor_data for governor
cpufreq: Init completion before kobject_init_and_add()
ALSA: patch_realtek: Fix Dell Inspiron Plus 16
ALSA: hda/realtek: Apply dual codec fixup for Dell Latitude laptops
fs: dlm: fix sock release if listen fails
fs: dlm: retry accept() until -EAGAIN or error returns
mptcp: mark ops structures as ro_after_init
mptcp: remove MPTCP 'ifdef' in TCP SYN cookies
dm cache: Fix ABBA deadlock between shrink_slab and dm_cache_metadata_abort
dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata
dm thin: Use last transaction's pmd->root when commit failed
dm thin: resume even if in FAIL mode
dm thin: Fix UAF in run_timer_softirq()
dm integrity: Fix UAF in dm_integrity_dtr()
dm clone: Fix UAF in clone_dtr()
dm cache: Fix UAF in destroy()
dm cache: set needs_check flag after aborting metadata
tracing/hist: Fix out-of-bound write on 'action_data.var_ref_idx'
perf/core: Call LSM hook after copying perf_event_attr
of/kexec: Fix reading 32-bit "linux,initrd-{start,end}" values
KVM: VMX: Resume guest immediately when injecting #GP on ECREATE
KVM: nVMX: Inject #GP, not #UD, if "generic" VMXON CR0/CR4 check fails
KVM: nVMX: Properly expose ENABLE_USR_WAIT_PAUSE control to L1
x86/microcode/intel: Do not retry microcode reloading on the APs
ftrace/x86: Add back ftrace_expected for ftrace bug reports
x86/kprobes: Fix kprobes instruction boudary check with CONFIG_RETHUNK
x86/kprobes: Fix optprobe optimization check with CONFIG_RETHUNK
tracing: Fix race where eprobes can be called before the event
tracing: Fix complicated dependency of CONFIG_TRACER_MAX_TRACE
tracing/hist: Fix wrong return value in parse_action_params()
tracing/probes: Handle system names with hyphens
tracing: Fix infinite loop in tracing_read_pipe on overflowed print_trace_line
staging: media: tegra-video: fix chan->mipi value on error
staging: media: tegra-video: fix device_node use after free
ARM: 9256/1: NWFPE: avoid compiler-generated __aeabi_uldivmod
media: dvb-core: Fix double free in dvb_register_device()
media: dvb-core: Fix UAF due to refcount races at releasing
cifs: fix confusing debug message
cifs: fix missing display of three mount options
rtc: ds1347: fix value written to century register
block: mq-deadline: Do not break sequential write streams to zoned HDDs
md/bitmap: Fix bitmap chunk size overflow issues
efi: Add iMac Pro 2017 to uefi skip cert quirk
wifi: wilc1000: sdio: fix module autoloading
ASoC: jz4740-i2s: Handle independent FIFO flush bits
ipu3-imgu: Fix NULL pointer dereference in imgu_subdev_set_selection()
ipmi: fix long wait in unload when IPMI disconnect
mtd: spi-nor: Check for zero erase size in spi_nor_find_best_erase_type()
ima: Fix a potential NULL pointer access in ima_restore_measurement_list
ipmi: fix use after free in _ipmi_destroy_user()
PCI: Fix pci_device_is_present() for VFs by checking PF
PCI/sysfs: Fix double free in error path
riscv: stacktrace: Fixup ftrace_graph_ret_addr retp argument
riscv: mm: notify remote harts about mmu cache updates
crypto: n2 - add missing hash statesize
driver core: Fix bus_type.match() error handling in __driver_attach()
phy: qcom-qmp-combo: fix sc8180x reset
iommu/amd: Fix ivrs_acpihid cmdline parsing code
remoteproc: core: Do pm_relax when in RPROC_OFFLINE state
parisc: led: Fix potential null-ptr-deref in start_task()
device_cgroup: Roll back to original exceptions after copy failure
drm/connector: send hotplug uevent on connector cleanup
drm/vmwgfx: Validate the box size for the snooped cursor
drm/i915/dsi: fix VBT send packet port selection for dual link DSI
drm/ingenic: Fix missing platform_driver_unregister() call in
ingenic_drm_init()
ext4: silence the warning when evicting inode with dioread_nolock
ext4: add inode table check in __ext4_get_inode_loc to aovid possible
infinite loop
ext4: remove trailing newline from ext4_msg() message
fs: ext4: initialize fsdata in pagecache_write()
ext4: fix use-after-free in ext4_orphan_cleanup
ext4: fix undefined behavior in bit shift for ext4_check_flag_values
ext4: add EXT4_IGET_BAD flag to prevent unexpected bad inode
ext4: add helper to check quota inums
ext4: fix bug_on in __es_tree_search caused by bad quota inode
ext4: fix reserved cluster accounting in __es_remove_extent()
ext4: check and assert if marking an no_delete evicting inode dirty
ext4: fix bug_on in __es_tree_search caused by bad boot loader inode
ext4: fix leaking uninitialized memory in fast-commit journal
ext4: fix uninititialized value in 'ext4_evict_inode'
ext4: init quota for 'old.inode' in 'ext4_rename'
ext4: fix delayed allocation bug in ext4_clu_mapped for bigalloc + inline
ext4: fix error code return to user-space in ext4_get_branch()
ext4: avoid BUG_ON when creating xattrs
ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
ext4: fix inode leak in ext4_xattr_inode_create() on an error path
ext4: initialize quota before expanding inode in setproject ioctl
ext4: avoid unaccounted block allocation when expanding inode
ext4: allocate extended attribute value in vmalloc area
drm/amdgpu: handle polaris10/11 overlap asics (v2)
block: mq-deadline: Fix dd_finish_request() for zoned devices
tracing: Fix issue of missing one synthetic field
ext4: remove unused enum EXT4_FC_COMMIT_FAILED
ext4: use ext4_debug() instead of jbd_debug()
ext4: introduce EXT4_FC_TAG_BASE_LEN helper
ext4: factor out ext4_fc_get_tl()
ext4: fix potential out of bound read in ext4_fc_replay_scan()
ext4: disable fast-commit of encrypted dir operations
ext4: don't set up encryption key during jbd2 transaction
ext4: add missing validation of fast-commit record lengths
ext4: fix unaligned memory access in ext4_fc_reserve_space()
ext4: fix off-by-one errors in fast-commit block filling
ARM: renumber bits related to _TIF_WORK_MASK
phy: qcom-qmp-combo: fix out-of-bounds clock access
btrfs: replace strncpy() with strscpy()
btrfs: move missing device handling in a dedicate function
btrfs: fix extent map use-after-free when handling missing device in
read_one_chunk
x86/mce: Get rid of msr_ops
x86/MCE/AMD: Clear DFR errors found in THR handler
media: s5p-mfc: Fix to handle reference queue during finishing
media: s5p-mfc: Clear workbit to handle error condition
media: s5p-mfc: Fix in register read and write for H264
perf probe: Use dwarf_attr_integrate as generic DWARF attr accessor
perf probe: Fix to get the DW_AT_decl_file and DW_AT_call_file as unsinged
data
ravb: Fix "failed to switch device to config mode" message during unbind
ext4: goto right label 'failed_mount3a'
ext4: correct inconsistent error msg in nojournal mode
mbcache: automatically delete entries from cache on freeing
ext4: fix deadlock due to mbcache entry corruption
drm/i915/migrate: don't check the scratch page
drm/i915/migrate: fix offset calculation
drm/i915/migrate: fix length calculation
SUNRPC: ensure the matching upcall is in-flight upon downcall
btrfs: fix an error handling path in btrfs_defrag_leaves()
bpf: pull before calling skb_postpull_rcsum()
drm/panfrost: Fix GEM handle creation ref-counting
netfilter: nf_tables: consolidate set description
netfilter: nf_tables: add function to create set stateful expressions
netfilter: nf_tables: perform type checking for existing sets
vmxnet3: correctly report csum_level for encapsulated packet
netfilter: nf_tables: honor set timeout and garbage collection updates
veth: Fix race with AF_XDP exposing old or uninitialized descriptors
nfsd: shut down the NFSv4 state objects before the filecache
net: hns3: add interrupts re-initialization while doing VF FLR
net: hns3: refactor hns3_nic_reuse_page()
net: hns3: extract macro to simplify ring stats update code
net: hns3: fix miss L3E checking for rx packet
net: hns3: fix VF promisc mode not update when mac table full
net: sched: fix memory leak in tcindex_set_parms
qlcnic: prevent ->dcb use-after-free on qlcnic_dcb_enable() failure
net: dsa: mv88e6xxx: depend on PTP conditionally
nfc: Fix potential resource leaks
vdpa_sim: fix possible memory leak in vdpasim_net_init() and
vdpasim_blk_init()
vhost/vsock: Fix error handling in vhost_vsock_init()
vringh: fix range used in iotlb_translate()
vhost: fix range used in translate_desc()
vdpa_sim: fix vringh initialization in vdpasim_queue_ready()
net/mlx5: E-Switch, properly handle ingress tagged packets on VST
net/mlx5: Add forgotten cleanup calls into mlx5_init_once() error path
net/mlx5: Avoid recovery in probe flows
net/mlx5e: IPoIB, Don't allow CQE compression to be turned on by default
net/mlx5e: TC, Refactor mlx5e_tc_add_flow_mod_hdr() to get flow attr
net/mlx5e: Always clear dest encap in neigh-update-del
net/mlx5e: Fix hw mtu initializing at XDP SQ allocation
net: amd-xgbe: add missed tasklet_kill
net: ena: Fix toeplitz initial hash value
net: ena: Don't register memory info on XDP exchange
net: ena: Account for the number of processed bytes in XDP
net: ena: Use bitmask to indicate packet redirection
net: ena: Fix rx_copybreak value update
net: ena: Set default value for RX interrupt moderation
net: ena: Update NUMA TPH hint register upon NUMA node update
net: phy: xgmiitorgmii: Fix refcount leak in xgmiitorgmii_probe
RDMA/mlx5: Fix mlx5_ib_get_hw_stats when used for device
RDMA/mlx5: Fix validation of max_rd_atomic caps for DC
drm/meson: Reduce the FIFO lines held when AFBC is not used
filelock: new helper: vfs_inode_has_locks
ceph: switch to vfs_inode_has_locks() to fix file lock bug
gpio: sifive: Fix refcount leak in sifive_gpio_probe
net: sched: atm: dont intepret cls results when asked to drop
net: sched: cbq: dont intepret cls results when asked to drop
net: sparx5: Fix reading of the MAC address
netfilter: ipset: fix hash:net,port,net hang with /0 subnet
netfilter: ipset: Rework long task execution when adding/deleting entries
perf tools: Fix resources leak in perf_data__open_dir()
drm/imx: ipuv3-plane: Fix overlay plane width
fs/ntfs3: don't hold ni_lock when calling truncate_setsize()
drivers/net/bonding/bond_3ad: return when there's no aggregator
octeontx2-pf: Fix lmtst ID used in aura free
usb: rndis_host: Secure rndis_query check against int overflow
perf stat: Fix handling of --for-each-cgroup with --bpf-counters to match non
BPF mode
drm/i915: unpin on error in intel_vgpu_shadow_mm_pin()
caif: fix memory leak in cfctrl_linkup_request()
udf: Fix extension of the last extent in the file
ASoC: Intel: bytcr_rt5640: Add quirk for the Advantech MICA-071 tablet
nvme: fix multipath crash caused by flush request when blktrace is enabled
io_uring: check for valid register opcode earlier
nvmet: use NVME_CMD_EFFECTS_CSUPP instead of open coding it
nvme: also return I/O command effects from nvme_command_effects
btrfs: check superblock to ensure the fs was not modified at thaw time
x86/kexec: Fix double-free of elf header buffer
nfsd: fix handling of readdir in v4root vs. mount upcall timeout
fbdev: matroxfb: G200eW: Increase max memory from 1 MB to 16 MB
block: don't allow splitting of a REQ_NOWAIT bio
io_uring: fix CQ waiting timeout handling
thermal: int340x: Add missing attribute for data rate base
riscv: uaccess: fix type of 0 variable on error in get_user()
riscv, kprobes: Stricter c.jr/c.jalr decoding
drm/i915/gvt: fix gvt debugfs destroy
drm/i915/gvt: fix vgpu debugfs clean in remove
hfs/hfsplus: use WARN_ON for sanity check
hfs/hfsplus: avoid WARN_ON() for sanity check, use proper error handling
ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in
ksmbd_decode_ntlmssp_auth_blob
Revert "ACPI: PM: Add support for upcoming AMD uPEP HID AMDI007"
mptcp: dedicated request sock for subflow in v6
mptcp: use proper req destructor for IPv6
ext4: don't allow journal inode to have encrypt flag
selftests: set the BUILD variable to absolute path
btrfs: make thaw time super block check to also verify checksum
net: hns3: fix return value check bug of rx copybreak
mbcache: Avoid nesting of cache->c_list_lock under bit locks
efi: random: combine bootloader provided RNG seed with RNG protocol output
io_uring: Fix unsigned 'res' comparison with zero in io_fixup_rw_res()
drm/mgag200: Fix PLL setup for G200_SE_A rev >=4
Linux 5.15.87
UBUNTU: Upstream stable to v5.15.87
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2007441/+subscriptions
--
Mailing list: https://launchpad.net/~kernel-packages
Post to : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help : https://help.launchpad.net/ListHelp
