Public bug reported:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
v5.15.171 upstream stable release
from git://git.kernel.org/
selftests/mm: fix incorrect buffer->mirror size in hmm2 double_map test
ksmbd: fix user-after-free from session log off
ACPI: PRM: Remove unnecessary blank lines
ACPI: PRM: Change handler_addr type to void pointer
ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
cgroup: Fix potential overflow issue when checking max_depth
mac80211: MAC80211_MESSAGE_TRACING should depend on TRACING
wifi: mac80211: skip non-uploaded keys in ieee80211_iter_keys
wifi: brcm80211: BRCM_TRACING should depend on TRACING
RDMA/cxgb4: Dump vendor specific QP details
RDMA/mlx5: Round max_rd_atomic/max_dest_rd_atomic up instead of down
RDMA/bnxt_re: synchronize the qp-handle table array
mac80211: do drv_reconfig_complete() before restarting all
mac80211: Add support to trigger sta disconnect on hardware restart
wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
ASoC: cs42l51: Fix some error handling paths in cs42l51_probe()
net: stmmac: TSO: Fix unbalanced DMA map/unmap for non-paged SKB data
ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_init_flow()
gtp: allow -1 to be specified as file description from userspace
net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
netdevsim: Add trailing zero to terminate the string in
nsim_nexthop_bucket_activity_write()
bpf: Fix out-of-bounds write in trie_get_next_key()
netfilter: Fix use-after-free in get_info()
net: skip offload for NETIF_F_IPV6_CSUM if ipv6 header contains extension
netfilter: nft_payload: sanitize offset and length before calling skb_checksum()
firmware: arm_sdei: Fix the input parameter of cpuhp_remove_state()
ACPI: CPPC: Make rmw_lock a raw_spin_lock
fs/ntfs3: Check if more than chunk-size bytes are written
fs/ntfs3: Fix warning possible deadlock in ntfs_set_state
fs/ntfs3: Fix possible deadlock in mi_read
fs/ntfs3: Additional check in ni_clear()
scsi: scsi_transport_fc: Allow setting rport state to current state
net: amd: mvme147: Fix probe banner message
NFS: remove revoked delegation from server's delegation list
misc: sgi-gru: Don't disable preemption in GRU driver
usbip: tools: Fix detach_port() invalid port error path
usb: phy: Fix API devm_usb_put_phy() can not release the phy
usb: typec: fix unreleased fwnode_handle in typec_port_register_altmodes()
xhci: Fix Link TRB DMA in command ring stopped completion event
xhci: Use pm_runtime_get to prevent RPM on unsupported systems
Revert "driver core: Fix uevent_show() vs driver detach race"
wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
wifi: ath10k: Fix memory leak in management tx
wifi: iwlegacy: Clear stale interrupts before resuming device
staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
iio: adc: ad7124: fix division by zero in ad7124_set_channel_odr()
iio: light: veml6030: fix microlux value calculation
nilfs2: fix potential deadlock with newly created symlinks
riscv: vdso: Prevent the compiler from inserting calls to memset()
riscv: efi: Set NX compat flag in PE/COFF header
riscv: Use '%u' to format the output of 'cpu'
riscv: Remove unused GENERATING_ASM_OFFSETS
riscv: Remove duplicated GET_RM
mm/page_alloc: call check_new_pages() while zone spinlock is not held
mm/page_alloc: fix tracepoint mm_page_alloc_zone_locked()
mm/page_alloc: split out buddy removal code from rmqueue into separate helper
mm/page_alloc: rename ALLOC_HIGH to ALLOC_MIN_RESERVE
mm/page_alloc: treat RT tasks similar to __GFP_HIGH
mm/page_alloc: explicitly record high-order atomic allocations in alloc_flags
mm/page_alloc: explicitly define what alloc flags deplete min reserves
mm/page_alloc: explicitly define how __GFP_HIGH non-blocking allocations
accesses reserves
mm/page_alloc: let GFP_ATOMIC order-0 allocs access highatomic reserves
ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
x86/bugs: Use code segment selector for VERW operand
nilfs2: fix kernel bug due to missing clearing of checked flag
wifi: iwlwifi: mvm: fix 6 GHz scan construction
mm: shmem: fix data-race in shmem_getattr()
Revert "drm/mipi-dsi: Set the fwnode for mipi_dsi_device"
drm/i915: Fix potential context UAFs
vt: prevent kernel-infoleak in con_font_get()
mac80211: always have ieee80211_sta_restart()
Linux 5.15.171
UBUNTU: Upstream stable to v5.15.171
** Affects: linux (Ubuntu)
Importance: Undecided
Status: Invalid
** Affects: linux (Ubuntu Jammy)
Importance: Medium
Assignee: Manuel Diewald (diewald)
Status: In Progress
** Tags: kernel-stable-tracking-bug
** Changed in: linux (Ubuntu)
Status: New => Confirmed
** Tags added: kernel-stable-tracking-bug
** Also affects: linux (Ubuntu Jammy)
Importance: Undecided
Status: New
** Changed in: linux (Ubuntu)
Status: Confirmed => Invalid
** Changed in: linux (Ubuntu Jammy)
Importance: Undecided => Medium
** Changed in: linux (Ubuntu Jammy)
Status: New => In Progress
** Changed in: linux (Ubuntu Jammy)
Assignee: (unassigned) => Manuel Diewald (diewald)
** Description changed:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
v5.15.171 upstream stable release
from git://git.kernel.org/
-
+ selftests/mm: fix incorrect buffer->mirror size in hmm2 double_map test
+ ksmbd: fix user-after-free from session log off
+ ACPI: PRM: Remove unnecessary blank lines
+ ACPI: PRM: Change handler_addr type to void pointer
+ ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
+ cgroup: Fix potential overflow issue when checking max_depth
+ mac80211: MAC80211_MESSAGE_TRACING should depend on TRACING
+ wifi: mac80211: skip non-uploaded keys in ieee80211_iter_keys
+ wifi: brcm80211: BRCM_TRACING should depend on TRACING
+ RDMA/cxgb4: Dump vendor specific QP details
+ RDMA/mlx5: Round max_rd_atomic/max_dest_rd_atomic up instead of down
+ RDMA/bnxt_re: synchronize the qp-handle table array
+ mac80211: do drv_reconfig_complete() before restarting all
+ mac80211: Add support to trigger sta disconnect on hardware restart
+ wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
+ wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
+ ASoC: cs42l51: Fix some error handling paths in cs42l51_probe()
+ net: stmmac: TSO: Fix unbalanced DMA map/unmap for non-paged SKB data
+ ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_init_flow()
+ gtp: allow -1 to be specified as file description from userspace
+ net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
+ netdevsim: Add trailing zero to terminate the string in
nsim_nexthop_bucket_activity_write()
+ bpf: Fix out-of-bounds write in trie_get_next_key()
+ netfilter: Fix use-after-free in get_info()
+ net: skip offload for NETIF_F_IPV6_CSUM if ipv6 header contains extension
+ netfilter: nft_payload: sanitize offset and length before calling
skb_checksum()
+ firmware: arm_sdei: Fix the input parameter of cpuhp_remove_state()
+ ACPI: CPPC: Make rmw_lock a raw_spin_lock
+ fs/ntfs3: Check if more than chunk-size bytes are written
+ fs/ntfs3: Fix warning possible deadlock in ntfs_set_state
+ fs/ntfs3: Fix possible deadlock in mi_read
+ fs/ntfs3: Additional check in ni_clear()
+ scsi: scsi_transport_fc: Allow setting rport state to current state
+ net: amd: mvme147: Fix probe banner message
+ NFS: remove revoked delegation from server's delegation list
+ misc: sgi-gru: Don't disable preemption in GRU driver
+ usbip: tools: Fix detach_port() invalid port error path
+ usb: phy: Fix API devm_usb_put_phy() can not release the phy
+ usb: typec: fix unreleased fwnode_handle in typec_port_register_altmodes()
+ xhci: Fix Link TRB DMA in command ring stopped completion event
+ xhci: Use pm_runtime_get to prevent RPM on unsupported systems
+ Revert "driver core: Fix uevent_show() vs driver detach race"
+ wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
+ wifi: ath10k: Fix memory leak in management tx
+ wifi: iwlegacy: Clear stale interrupts before resuming device
+ staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
+ iio: adc: ad7124: fix division by zero in ad7124_set_channel_odr()
+ iio: light: veml6030: fix microlux value calculation
+ nilfs2: fix potential deadlock with newly created symlinks
+ riscv: vdso: Prevent the compiler from inserting calls to memset()
+ riscv: efi: Set NX compat flag in PE/COFF header
+ riscv: Use '%u' to format the output of 'cpu'
+ riscv: Remove unused GENERATING_ASM_OFFSETS
+ riscv: Remove duplicated GET_RM
+ mm/page_alloc: call check_new_pages() while zone spinlock is not held
+ mm/page_alloc: fix tracepoint mm_page_alloc_zone_locked()
+ mm/page_alloc: split out buddy removal code from rmqueue into separate helper
+ mm/page_alloc: rename ALLOC_HIGH to ALLOC_MIN_RESERVE
+ mm/page_alloc: treat RT tasks similar to __GFP_HIGH
+ mm/page_alloc: explicitly record high-order atomic allocations in alloc_flags
+ mm/page_alloc: explicitly define what alloc flags deplete min reserves
+ mm/page_alloc: explicitly define how __GFP_HIGH non-blocking allocations
accesses reserves
+ mm/page_alloc: let GFP_ATOMIC order-0 allocs access highatomic reserves
+ ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
+ x86/bugs: Use code segment selector for VERW operand
+ nilfs2: fix kernel bug due to missing clearing of checked flag
+ wifi: iwlwifi: mvm: fix 6 GHz scan construction
+ mm: shmem: fix data-race in shmem_getattr()
+ Revert "drm/mipi-dsi: Set the fwnode for mipi_dsi_device"
+ drm/i915: Fix potential context UAFs
+ vt: prevent kernel-infoleak in con_font_get()
+ mac80211: always have ieee80211_sta_restart()
Linux 5.15.171
- mac80211: always have ieee80211_sta_restart()
- vt: prevent kernel-infoleak in con_font_get()
- drm/i915: Fix potential context UAFs
- Revert "drm/mipi-dsi: Set the fwnode for mipi_dsi_device"
- mm: shmem: fix data-race in shmem_getattr()
- wifi: iwlwifi: mvm: fix 6 GHz scan construction
- nilfs2: fix kernel bug due to missing clearing of checked flag
- x86/bugs: Use code segment selector for VERW operand
- ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
- mm/page_alloc: let GFP_ATOMIC order-0 allocs access highatomic reserves
- mm/page_alloc: explicitly define how __GFP_HIGH non-blocking allocations
accesses reserves
- mm/page_alloc: explicitly define what alloc flags deplete min reserves
- mm/page_alloc: explicitly record high-order atomic allocations in alloc_flags
- mm/page_alloc: treat RT tasks similar to __GFP_HIGH
- mm/page_alloc: rename ALLOC_HIGH to ALLOC_MIN_RESERVE
- mm/page_alloc: split out buddy removal code from rmqueue into separate helper
- mm/page_alloc: fix tracepoint mm_page_alloc_zone_locked()
- mm/page_alloc: call check_new_pages() while zone spinlock is not held
- riscv: Remove duplicated GET_RM
- riscv: Remove unused GENERATING_ASM_OFFSETS
- riscv: Use '%u' to format the output of 'cpu'
- riscv: efi: Set NX compat flag in PE/COFF header
- riscv: vdso: Prevent the compiler from inserting calls to memset()
- nilfs2: fix potential deadlock with newly created symlinks
- iio: light: veml6030: fix microlux value calculation
- iio: adc: ad7124: fix division by zero in ad7124_set_channel_odr()
- staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- wifi: iwlegacy: Clear stale interrupts before resuming device
- wifi: ath10k: Fix memory leak in management tx
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
- Revert "driver core: Fix uevent_show() vs driver detach race"
- xhci: Use pm_runtime_get to prevent RPM on unsupported systems
- xhci: Fix Link TRB DMA in command ring stopped completion event
- usb: typec: fix unreleased fwnode_handle in typec_port_register_altmodes()
- usb: phy: Fix API devm_usb_put_phy() can not release the phy
- usbip: tools: Fix detach_port() invalid port error path
- misc: sgi-gru: Don't disable preemption in GRU driver
- NFS: remove revoked delegation from server's delegation list
- net: amd: mvme147: Fix probe banner message
- scsi: scsi_transport_fc: Allow setting rport state to current state
- fs/ntfs3: Additional check in ni_clear()
- fs/ntfs3: Fix possible deadlock in mi_read
- fs/ntfs3: Fix warning possible deadlock in ntfs_set_state
- fs/ntfs3: Check if more than chunk-size bytes are written
- ACPI: CPPC: Make rmw_lock a raw_spin_lock
- firmware: arm_sdei: Fix the input parameter of cpuhp_remove_state()
- netfilter: nft_payload: sanitize offset and length before calling
skb_checksum()
- net: skip offload for NETIF_F_IPV6_CSUM if ipv6 header contains extension
- netfilter: Fix use-after-free in get_info()
- bpf: Fix out-of-bounds write in trie_get_next_key()
- netdevsim: Add trailing zero to terminate the string in
nsim_nexthop_bucket_activity_write()
- net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
- gtp: allow -1 to be specified as file description from userspace
- ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_init_flow()
- net: stmmac: TSO: Fix unbalanced DMA map/unmap for non-paged SKB data
- ASoC: cs42l51: Fix some error handling paths in cs42l51_probe()
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- mac80211: Add support to trigger sta disconnect on hardware restart
- mac80211: do drv_reconfig_complete() before restarting all
- RDMA/bnxt_re: synchronize the qp-handle table array
- RDMA/mlx5: Round max_rd_atomic/max_dest_rd_atomic up instead of down
- RDMA/cxgb4: Dump vendor specific QP details
- wifi: brcm80211: BRCM_TRACING should depend on TRACING
- wifi: mac80211: skip non-uploaded keys in ieee80211_iter_keys
- mac80211: MAC80211_MESSAGE_TRACING should depend on TRACING
- cgroup: Fix potential overflow issue when checking max_depth
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- ACPI: PRM: Change handler_addr type to void pointer
- ACPI: PRM: Remove unnecessary blank lines
- ksmbd: fix user-after-free from session log off
- selftests/mm: fix incorrect buffer->mirror size in hmm2 double_map test
+ UBUNTU: Upstream stable to v5.15.171
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/2089405
Title:
Jammy update: v5.15.171 upstream stable release
Status in linux package in Ubuntu:
Invalid
Status in linux source package in Jammy:
In Progress
Bug description:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
v5.15.171 upstream stable release
from git://git.kernel.org/
selftests/mm: fix incorrect buffer->mirror size in hmm2 double_map test
ksmbd: fix user-after-free from session log off
ACPI: PRM: Remove unnecessary blank lines
ACPI: PRM: Change handler_addr type to void pointer
ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
cgroup: Fix potential overflow issue when checking max_depth
mac80211: MAC80211_MESSAGE_TRACING should depend on TRACING
wifi: mac80211: skip non-uploaded keys in ieee80211_iter_keys
wifi: brcm80211: BRCM_TRACING should depend on TRACING
RDMA/cxgb4: Dump vendor specific QP details
RDMA/mlx5: Round max_rd_atomic/max_dest_rd_atomic up instead of down
RDMA/bnxt_re: synchronize the qp-handle table array
mac80211: do drv_reconfig_complete() before restarting all
mac80211: Add support to trigger sta disconnect on hardware restart
wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
ASoC: cs42l51: Fix some error handling paths in cs42l51_probe()
net: stmmac: TSO: Fix unbalanced DMA map/unmap for non-paged SKB data
ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_init_flow()
gtp: allow -1 to be specified as file description from userspace
net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
netdevsim: Add trailing zero to terminate the string in
nsim_nexthop_bucket_activity_write()
bpf: Fix out-of-bounds write in trie_get_next_key()
netfilter: Fix use-after-free in get_info()
net: skip offload for NETIF_F_IPV6_CSUM if ipv6 header contains extension
netfilter: nft_payload: sanitize offset and length before calling
skb_checksum()
firmware: arm_sdei: Fix the input parameter of cpuhp_remove_state()
ACPI: CPPC: Make rmw_lock a raw_spin_lock
fs/ntfs3: Check if more than chunk-size bytes are written
fs/ntfs3: Fix warning possible deadlock in ntfs_set_state
fs/ntfs3: Fix possible deadlock in mi_read
fs/ntfs3: Additional check in ni_clear()
scsi: scsi_transport_fc: Allow setting rport state to current state
net: amd: mvme147: Fix probe banner message
NFS: remove revoked delegation from server's delegation list
misc: sgi-gru: Don't disable preemption in GRU driver
usbip: tools: Fix detach_port() invalid port error path
usb: phy: Fix API devm_usb_put_phy() can not release the phy
usb: typec: fix unreleased fwnode_handle in typec_port_register_altmodes()
xhci: Fix Link TRB DMA in command ring stopped completion event
xhci: Use pm_runtime_get to prevent RPM on unsupported systems
Revert "driver core: Fix uevent_show() vs driver detach race"
wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
wifi: ath10k: Fix memory leak in management tx
wifi: iwlegacy: Clear stale interrupts before resuming device
staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
iio: adc: ad7124: fix division by zero in ad7124_set_channel_odr()
iio: light: veml6030: fix microlux value calculation
nilfs2: fix potential deadlock with newly created symlinks
riscv: vdso: Prevent the compiler from inserting calls to memset()
riscv: efi: Set NX compat flag in PE/COFF header
riscv: Use '%u' to format the output of 'cpu'
riscv: Remove unused GENERATING_ASM_OFFSETS
riscv: Remove duplicated GET_RM
mm/page_alloc: call check_new_pages() while zone spinlock is not held
mm/page_alloc: fix tracepoint mm_page_alloc_zone_locked()
mm/page_alloc: split out buddy removal code from rmqueue into separate helper
mm/page_alloc: rename ALLOC_HIGH to ALLOC_MIN_RESERVE
mm/page_alloc: treat RT tasks similar to __GFP_HIGH
mm/page_alloc: explicitly record high-order atomic allocations in alloc_flags
mm/page_alloc: explicitly define what alloc flags deplete min reserves
mm/page_alloc: explicitly define how __GFP_HIGH non-blocking allocations
accesses reserves
mm/page_alloc: let GFP_ATOMIC order-0 allocs access highatomic reserves
ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
x86/bugs: Use code segment selector for VERW operand
nilfs2: fix kernel bug due to missing clearing of checked flag
wifi: iwlwifi: mvm: fix 6 GHz scan construction
mm: shmem: fix data-race in shmem_getattr()
Revert "drm/mipi-dsi: Set the fwnode for mipi_dsi_device"
drm/i915: Fix potential context UAFs
vt: prevent kernel-infoleak in con_font_get()
mac80211: always have ieee80211_sta_restart()
Linux 5.15.171
UBUNTU: Upstream stable to v5.15.171
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2089405/+subscriptions
--
Mailing list: https://launchpad.net/~kernel-packages
Post to : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help : https://help.launchpad.net/ListHelp
