Public bug reported:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
v5.15.136 upstream stable release
from git://git.kernel.org/
iommu/vt-d: Avoid memory allocation in iommu_suspend()
scsi: core: Use a structure member to track the SCSI command submitter
scsi: core: Rename scsi_mq_done() into scsi_done() and export it
scsi: ib_srp: Call scsi_done() directly
RDMA/srp: Do not call scsi_done() from srp_abort()
RDMA/cxgb4: Check skb value for failure to allocate
perf/arm-cmn: Fix the unhandled overflow status of counter 4 to 7
of: overlay: Reorder struct fragment fields kerneldoc
platform/x86: think-lmi: Fix reference leak
platform/x86: hp-wmi:: Mark driver struct with __refdata to prevent section
mismatch warning
lib/test_meminit: fix off-by-one error in test_pages()
HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect
quota: Fix slow quotaoff
net: prevent address rewrite in kernel_bind()
ALSA: usb-audio: Fix microphone sound on Opencomm2 Headset
KEYS: trusted: allow use of kernel RNG for key material
KEYS: trusted: Remove redundant static calls usage
drm/msm/dp: do not reinitialize phy unless retry during link training
drm/msm/dsi: skip the wait for video mode done if not applicable
drm/msm/dsi: fix irq_of_parse_and_map() error checking
drm/msm/dpu: change _dpu_plane_calc_bw() to use u64 to avoid overflow
ravb: Fix up dma_free_coherent() call in ravb_remove()
ravb: Fix use-after-free issue in ravb_tx_timeout_work()
ieee802154: ca8210: Fix a potential UAF in ca8210_probe
mlxsw: fix mlxsw_sp2_nve_vxlan_learning_set() return type
eth: remove copies of the NAPI_POLL_WEIGHT define
xen-netback: use default TX queue size for vifs
riscv, bpf: Factor out emit_call for kernel and bpf context
riscv, bpf: Sign-extend return values
drm/vmwgfx: fix typo of sizeof argument
bpf: Fix verifier log for async callback return values
net: macsec: indicate next pn update when offloading
net: phy: mscc: macsec: reject PN update requests
ixgbe: fix crash with empty VF macvlan list
net/mlx5e: Again mutually exclude RX-FCS and RX-port-timestamp
net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
pinctrl: renesas: rzn1: Enable missing PINMUX
nfc: nci: assert requested protocol is valid
workqueue: Override implicit ordered attribute in
workqueue_apply_unbound_cpumask()
net: add sysctl accept_ra_min_rtr_lft
net: change accept_ra_min_rtr_lft to affect all RA lifetimes
net: release reference to inet6_dev pointer
media: mtk-jpeg: Fix use after free bug due to uncanceled work
dmaengine: stm32-mdma: abort resume if no ongoing transfer
xhci: Keep interrupt disabled in initialization until host is running.
usb: xhci: xhci-ring: Use sysdev for mapping bounce buffer
net: usb: dm9601: fix uninitialized variable use in dm9601_mdio_read
usb: dwc3: Soft reset phy on probe for host
usb: cdns3: Modify the return value of cdns_set_active () to void when
CONFIG_PM_SLEEP is disabled
usb: musb: Get the musb_qh poniter after musb_giveback
usb: musb: Modify the "HWVers" register address
iio: pressure: bmp280: Fix NULL pointer exception
iio: pressure: dps310: Adjust Timeout Settings
iio: pressure: ms5611: ms5611_prom_is_valid false negative bug
drm/amdgpu: add missing NULL check
drm/amd/display: Don't set dpms_off for seamless boot
ACPI: resource: Skip IRQ override on ASUS ExpertBook B1402CBA
x86/cpu: Fix AMD erratum #1485 on Zen4-based CPUs
mcb: remove is_added flag from mcb_device struct
thunderbolt: Workaround an IOMMU fault on certain systems with Intel Maple Ridge
thunderbolt: Check that lane 1 is in CL0 before enabling lane bonding
libceph: use kernel_connect()
ceph: fix incorrect revoked caps assert in ceph_fill_file_size()
ceph: fix type promotion bug on 32bit systems
Input: powermate - fix use-after-free in powermate_config_complete
Input: psmouse - fix fast_reconnect function for PS/2 mode
Input: xpad - add PXN V900 support
Input: i8042 - add Fujitsu Lifebook E5411 to i8042 quirk table
Input: goodix - ensure int GPIO is in input for gpio_count == 1 && gpio_int_idx
== 0 case
tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
cgroup: Remove duplicates in cgroup v1 tasks file
counter: microchip-tcb-capture: Fix the use of internal GCLK logic
usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
usb: gadget: ncm: Handle decoding of multiple NTB's in unwrap call
usb: cdnsp: Fixes issue with dequeuing not queued requests
x86/alternatives: Disable KASAN in apply_alternatives()
dmaengine: idxd: use spin_lock_irqsave before wait_event_lock_irq
dmaengine: mediatek: Fix deadlock caused by synchronize_irq()
powerpc/8xx: Fix pte_access_permitted() for PAGE_NONE
powerpc/64e: Fix wrong test in __ptep_test_and_clear_young()
arm64: report EL1 UNDEFs better
arm64: die(): pass 'err' as long
arm64: consistently pass ESR_ELx to die()
arm64: rework FPAC exception handling
arm64: rework BTI exception handling
arm64: allow kprobes on EL0 handlers
arm64: split EL0/EL1 UNDEF handlers
arm64: factor out EL1 SSBS emulation hook
arm64: factor insn read out of call_undef_hook()
arm64: rework EL0 MRS emulation
arm64: armv8_deprecated: fold ops into insn_emulation
arm64: armv8_deprecated move emulation functions
arm64: armv8_deprecated: move aarch32 helper earlier
arm64: armv8_deprecated: rework deprected instruction handling
arm64: armv8_deprecated: fix unused-function error
usb: hub: Guard against accesses to uninitialized BOS descriptors
eth: remove remaining copies of the NAPI_POLL_WEIGHT define
Linux 5.15.136
UBUNTU: Upstream stable to v5.15.136
** Affects: linux (Ubuntu)
Importance: Undecided
Status: Invalid
** Affects: linux (Ubuntu Jammy)
Importance: Medium
Assignee: Kamal Mostafa (kamalmostafa)
Status: In Progress
** Tags: kernel-stable-tracking-bug
** Changed in: linux (Ubuntu)
Status: New => Confirmed
** Tags added: kernel-stable-tracking-bug
** Also affects: linux (Ubuntu Jammy)
Importance: Undecided
Status: New
** Changed in: linux (Ubuntu)
Status: Confirmed => Invalid
** Changed in: linux (Ubuntu Jammy)
Status: New => In Progress
** Changed in: linux (Ubuntu Jammy)
Importance: Undecided => Medium
** Changed in: linux (Ubuntu Jammy)
Assignee: (unassigned) => Kamal Mostafa (kamalmostafa)
** Description changed:
+ SRU Justification
- SRU Justification
+ Impact:
+ The upstream process for stable tree updates is quite similar
+ in scope to the Ubuntu SRU process, e.g., each patch has to
+ demonstrably fix a bug, and each patch is vetted by upstream
+ by originating either directly from a mainline/stable Linux tree or
+ a minimally backported form of that patch. The following upstream
+ stable patches should be included in the Ubuntu kernel:
- Impact:
- The upstream process for stable tree updates is quite similar
- in scope to the Ubuntu SRU process, e.g., each patch has to
- demonstrably fix a bug, and each patch is vetted by upstream
- by originating either directly from a mainline/stable Linux tree or
- a minimally backported form of that patch. The following upstream
- stable patches should be included in the Ubuntu kernel:
+ v5.15.136 upstream stable release
+ from git://git.kernel.org/
- v5.15.136 upstream stable release
- from git://git.kernel.org/
+ iommu/vt-d: Avoid memory allocation in iommu_suspend()
+ scsi: core: Use a structure member to track the SCSI command submitter
+ scsi: core: Rename scsi_mq_done() into scsi_done() and export it
+ scsi: ib_srp: Call scsi_done() directly
+ RDMA/srp: Do not call scsi_done() from srp_abort()
+ RDMA/cxgb4: Check skb value for failure to allocate
+ perf/arm-cmn: Fix the unhandled overflow status of counter 4 to 7
+ of: overlay: Reorder struct fragment fields kerneldoc
+ platform/x86: think-lmi: Fix reference leak
+ platform/x86: hp-wmi:: Mark driver struct with __refdata to prevent section
mismatch warning
+ lib/test_meminit: fix off-by-one error in test_pages()
+ HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect
+ quota: Fix slow quotaoff
+ net: prevent address rewrite in kernel_bind()
+ ALSA: usb-audio: Fix microphone sound on Opencomm2 Headset
+ KEYS: trusted: allow use of kernel RNG for key material
+ KEYS: trusted: Remove redundant static calls usage
+ drm/msm/dp: do not reinitialize phy unless retry during link training
+ drm/msm/dsi: skip the wait for video mode done if not applicable
+ drm/msm/dsi: fix irq_of_parse_and_map() error checking
+ drm/msm/dpu: change _dpu_plane_calc_bw() to use u64 to avoid overflow
+ ravb: Fix up dma_free_coherent() call in ravb_remove()
+ ravb: Fix use-after-free issue in ravb_tx_timeout_work()
+ ieee802154: ca8210: Fix a potential UAF in ca8210_probe
+ mlxsw: fix mlxsw_sp2_nve_vxlan_learning_set() return type
+ eth: remove copies of the NAPI_POLL_WEIGHT define
+ xen-netback: use default TX queue size for vifs
+ riscv, bpf: Factor out emit_call for kernel and bpf context
+ riscv, bpf: Sign-extend return values
+ drm/vmwgfx: fix typo of sizeof argument
+ bpf: Fix verifier log for async callback return values
+ net: macsec: indicate next pn update when offloading
+ net: phy: mscc: macsec: reject PN update requests
+ ixgbe: fix crash with empty VF macvlan list
+ net/mlx5e: Again mutually exclude RX-FCS and RX-port-timestamp
+ net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
+ pinctrl: renesas: rzn1: Enable missing PINMUX
+ nfc: nci: assert requested protocol is valid
+ workqueue: Override implicit ordered attribute in
workqueue_apply_unbound_cpumask()
+ net: add sysctl accept_ra_min_rtr_lft
+ net: change accept_ra_min_rtr_lft to affect all RA lifetimes
+ net: release reference to inet6_dev pointer
+ media: mtk-jpeg: Fix use after free bug due to uncanceled work
+ dmaengine: stm32-mdma: abort resume if no ongoing transfer
+ xhci: Keep interrupt disabled in initialization until host is running.
+ usb: xhci: xhci-ring: Use sysdev for mapping bounce buffer
+ net: usb: dm9601: fix uninitialized variable use in dm9601_mdio_read
+ usb: dwc3: Soft reset phy on probe for host
+ usb: cdns3: Modify the return value of cdns_set_active () to void when
CONFIG_PM_SLEEP is disabled
+ usb: musb: Get the musb_qh poniter after musb_giveback
+ usb: musb: Modify the "HWVers" register address
+ iio: pressure: bmp280: Fix NULL pointer exception
+ iio: pressure: dps310: Adjust Timeout Settings
+ iio: pressure: ms5611: ms5611_prom_is_valid false negative bug
+ drm/amdgpu: add missing NULL check
+ drm/amd/display: Don't set dpms_off for seamless boot
+ ACPI: resource: Skip IRQ override on ASUS ExpertBook B1402CBA
+ x86/cpu: Fix AMD erratum #1485 on Zen4-based CPUs
+ mcb: remove is_added flag from mcb_device struct
+ thunderbolt: Workaround an IOMMU fault on certain systems with Intel Maple
Ridge
+ thunderbolt: Check that lane 1 is in CL0 before enabling lane bonding
+ libceph: use kernel_connect()
+ ceph: fix incorrect revoked caps assert in ceph_fill_file_size()
+ ceph: fix type promotion bug on 32bit systems
+ Input: powermate - fix use-after-free in powermate_config_complete
+ Input: psmouse - fix fast_reconnect function for PS/2 mode
+ Input: xpad - add PXN V900 support
+ Input: i8042 - add Fujitsu Lifebook E5411 to i8042 quirk table
+ Input: goodix - ensure int GPIO is in input for gpio_count == 1 &&
gpio_int_idx == 0 case
+ tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
+ cgroup: Remove duplicates in cgroup v1 tasks file
+ counter: microchip-tcb-capture: Fix the use of internal GCLK logic
+ usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
+ usb: gadget: ncm: Handle decoding of multiple NTB's in unwrap call
+ usb: cdnsp: Fixes issue with dequeuing not queued requests
+ x86/alternatives: Disable KASAN in apply_alternatives()
+ dmaengine: idxd: use spin_lock_irqsave before wait_event_lock_irq
+ dmaengine: mediatek: Fix deadlock caused by synchronize_irq()
+ powerpc/8xx: Fix pte_access_permitted() for PAGE_NONE
+ powerpc/64e: Fix wrong test in __ptep_test_and_clear_young()
+ arm64: report EL1 UNDEFs better
+ arm64: die(): pass 'err' as long
+ arm64: consistently pass ESR_ELx to die()
+ arm64: rework FPAC exception handling
+ arm64: rework BTI exception handling
+ arm64: allow kprobes on EL0 handlers
+ arm64: split EL0/EL1 UNDEF handlers
+ arm64: factor out EL1 SSBS emulation hook
+ arm64: factor insn read out of call_undef_hook()
+ arm64: rework EL0 MRS emulation
+ arm64: armv8_deprecated: fold ops into insn_emulation
+ arm64: armv8_deprecated move emulation functions
+ arm64: armv8_deprecated: move aarch32 helper earlier
+ arm64: armv8_deprecated: rework deprected instruction handling
+ arm64: armv8_deprecated: fix unused-function error
+ usb: hub: Guard against accesses to uninitialized BOS descriptors
+ eth: remove remaining copies of the NAPI_POLL_WEIGHT define
+ Linux 5.15.136
+ UBUNTU: Upstream stable to v5.15.136
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/2046008
Title:
Jammy update: v5.15.136 upstream stable release
Status in linux package in Ubuntu:
Invalid
Status in linux source package in Jammy:
In Progress
Bug description:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
v5.15.136 upstream stable release
from git://git.kernel.org/
iommu/vt-d: Avoid memory allocation in iommu_suspend()
scsi: core: Use a structure member to track the SCSI command submitter
scsi: core: Rename scsi_mq_done() into scsi_done() and export it
scsi: ib_srp: Call scsi_done() directly
RDMA/srp: Do not call scsi_done() from srp_abort()
RDMA/cxgb4: Check skb value for failure to allocate
perf/arm-cmn: Fix the unhandled overflow status of counter 4 to 7
of: overlay: Reorder struct fragment fields kerneldoc
platform/x86: think-lmi: Fix reference leak
platform/x86: hp-wmi:: Mark driver struct with __refdata to prevent section
mismatch warning
lib/test_meminit: fix off-by-one error in test_pages()
HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect
quota: Fix slow quotaoff
net: prevent address rewrite in kernel_bind()
ALSA: usb-audio: Fix microphone sound on Opencomm2 Headset
KEYS: trusted: allow use of kernel RNG for key material
KEYS: trusted: Remove redundant static calls usage
drm/msm/dp: do not reinitialize phy unless retry during link training
drm/msm/dsi: skip the wait for video mode done if not applicable
drm/msm/dsi: fix irq_of_parse_and_map() error checking
drm/msm/dpu: change _dpu_plane_calc_bw() to use u64 to avoid overflow
ravb: Fix up dma_free_coherent() call in ravb_remove()
ravb: Fix use-after-free issue in ravb_tx_timeout_work()
ieee802154: ca8210: Fix a potential UAF in ca8210_probe
mlxsw: fix mlxsw_sp2_nve_vxlan_learning_set() return type
eth: remove copies of the NAPI_POLL_WEIGHT define
xen-netback: use default TX queue size for vifs
riscv, bpf: Factor out emit_call for kernel and bpf context
riscv, bpf: Sign-extend return values
drm/vmwgfx: fix typo of sizeof argument
bpf: Fix verifier log for async callback return values
net: macsec: indicate next pn update when offloading
net: phy: mscc: macsec: reject PN update requests
ixgbe: fix crash with empty VF macvlan list
net/mlx5e: Again mutually exclude RX-FCS and RX-port-timestamp
net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
pinctrl: renesas: rzn1: Enable missing PINMUX
nfc: nci: assert requested protocol is valid
workqueue: Override implicit ordered attribute in
workqueue_apply_unbound_cpumask()
net: add sysctl accept_ra_min_rtr_lft
net: change accept_ra_min_rtr_lft to affect all RA lifetimes
net: release reference to inet6_dev pointer
media: mtk-jpeg: Fix use after free bug due to uncanceled work
dmaengine: stm32-mdma: abort resume if no ongoing transfer
xhci: Keep interrupt disabled in initialization until host is running.
usb: xhci: xhci-ring: Use sysdev for mapping bounce buffer
net: usb: dm9601: fix uninitialized variable use in dm9601_mdio_read
usb: dwc3: Soft reset phy on probe for host
usb: cdns3: Modify the return value of cdns_set_active () to void when
CONFIG_PM_SLEEP is disabled
usb: musb: Get the musb_qh poniter after musb_giveback
usb: musb: Modify the "HWVers" register address
iio: pressure: bmp280: Fix NULL pointer exception
iio: pressure: dps310: Adjust Timeout Settings
iio: pressure: ms5611: ms5611_prom_is_valid false negative bug
drm/amdgpu: add missing NULL check
drm/amd/display: Don't set dpms_off for seamless boot
ACPI: resource: Skip IRQ override on ASUS ExpertBook B1402CBA
x86/cpu: Fix AMD erratum #1485 on Zen4-based CPUs
mcb: remove is_added flag from mcb_device struct
thunderbolt: Workaround an IOMMU fault on certain systems with Intel Maple
Ridge
thunderbolt: Check that lane 1 is in CL0 before enabling lane bonding
libceph: use kernel_connect()
ceph: fix incorrect revoked caps assert in ceph_fill_file_size()
ceph: fix type promotion bug on 32bit systems
Input: powermate - fix use-after-free in powermate_config_complete
Input: psmouse - fix fast_reconnect function for PS/2 mode
Input: xpad - add PXN V900 support
Input: i8042 - add Fujitsu Lifebook E5411 to i8042 quirk table
Input: goodix - ensure int GPIO is in input for gpio_count == 1 &&
gpio_int_idx == 0 case
tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
cgroup: Remove duplicates in cgroup v1 tasks file
counter: microchip-tcb-capture: Fix the use of internal GCLK logic
usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
usb: gadget: ncm: Handle decoding of multiple NTB's in unwrap call
usb: cdnsp: Fixes issue with dequeuing not queued requests
x86/alternatives: Disable KASAN in apply_alternatives()
dmaengine: idxd: use spin_lock_irqsave before wait_event_lock_irq
dmaengine: mediatek: Fix deadlock caused by synchronize_irq()
powerpc/8xx: Fix pte_access_permitted() for PAGE_NONE
powerpc/64e: Fix wrong test in __ptep_test_and_clear_young()
arm64: report EL1 UNDEFs better
arm64: die(): pass 'err' as long
arm64: consistently pass ESR_ELx to die()
arm64: rework FPAC exception handling
arm64: rework BTI exception handling
arm64: allow kprobes on EL0 handlers
arm64: split EL0/EL1 UNDEF handlers
arm64: factor out EL1 SSBS emulation hook
arm64: factor insn read out of call_undef_hook()
arm64: rework EL0 MRS emulation
arm64: armv8_deprecated: fold ops into insn_emulation
arm64: armv8_deprecated move emulation functions
arm64: armv8_deprecated: move aarch32 helper earlier
arm64: armv8_deprecated: rework deprected instruction handling
arm64: armv8_deprecated: fix unused-function error
usb: hub: Guard against accesses to uninitialized BOS descriptors
eth: remove remaining copies of the NAPI_POLL_WEIGHT define
Linux 5.15.136
UBUNTU: Upstream stable to v5.15.136
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2046008/+subscriptions
--
Mailing list: https://launchpad.net/~kernel-packages
Post to : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help : https://help.launchpad.net/ListHelp
