Public bug reported: SRU Justification
Impact: The upstream process for stable tree updates is quite similar in scope to the Ubuntu SRU process, e.g., each patch has to demonstrably fix a bug, and each patch is vetted by upstream by originating either directly from a mainline/stable Linux tree or a minimally backported form of that patch. The following upstream stable patches should be included in the Ubuntu kernel: v5.6.16 upstream stable release from git://git.kernel.org/ ax25: fix setsockopt(SO_BINDTODEVICE) dpaa_eth: fix usage as DSA master, try 3 ethtool: count header size in reply size estimate felix: Fix initialization of ioremap resources net: don't return invalid table id error when we fall back to PF_UNSPEC net: dsa: mt7530: fix roaming from DSA user ports net: ethernet: ti: cpsw: fix ASSERT_RTNL() warning during suspend __netif_receive_skb_core: pass skb by reference net: inet_csk: Fix so_reuseport bind-address cache in tb->fast* net: ipip: fix wrong address family in init error path net/mlx5: Add command entry handling completion net: mvpp2: fix RX hashing for non-10G ports net: nlmsg_cancel() if put fails for nhmsg net: qrtr: Fix passing invalid reference to qrtr_local_enqueue() net: revert "net: get rid of an signed integer overflow in ip_idents_reserve()" net sched: fix reporting the first-time use timestamp net/tls: fix race condition causing kernel panic nexthop: Fix attribute checking for groups r8152: support additional Microsoft Surface Ethernet Adapter variant sctp: Don't add the shutdown timer if its already been added sctp: Start shutdown on association restart if in SHUTDOWN-SENT state and socket is closed tipc: block BH before using dst_cache net/mlx5e: kTLS, Destroy key object after destroying the TIS net/mlx5e: Fix inner tirs handling net/mlx5: Fix memory leak in mlx5_events_init net/mlx5e: Update netdev txq on completions during closure net/mlx5: Fix error flow in case of function_setup failure wireguard: noise: read preshared key while taking lock wireguard: queueing: preserve flow hash across packet scrubbing wireguard: noise: separate receive counter from send counter r8169: fix OCP access on RTL8117 net/mlx5: Fix a race when moving command interface to events mode net/mlx5: Fix cleaning unmanaged flow tables Revert "virtio-balloon: Revert "virtio-balloon: Switch back to OOM handler for VIRTIO_BALLOON_F_DEFLATE_ON_OOM"" net/mlx5: Avoid processing commands before cmdif is ready net/mlx5: Annotate mutex destroy for root ns net/tls: fix encryption error checking net/tls: free record only on encryption error net: sun: fix missing release regions in cas_init_one(). net/mlx4_core: fix a memory leak bug. net: sgi: ioc3-eth: Fix return value check in ioc3eth_probe() mlxsw: spectrum: Fix use-after-free of split/unsplit/type_set in case reload fails net: mscc: ocelot: fix address ageing time (again) arm64: dts: qcom: db820c: fix audio configuration ARM: dts: rockchip: fix phy nodename for rk3228-evb ARM: dts: rockchip: fix phy nodename for rk3229-xms6 arm64: dts: rockchip: fix status for &gmac2phy in rk3328-evb.dts arm64: dts: rockchip: swap interrupts interrupt-names rk3399 gpu node ARM: dts: rockchip: swap clock-names of gpu nodes ARM: dts: rockchip: fix pinctrl sub nodename for spi in rk322x.dtsi gpio: tegra: mask GPIO IRQs during IRQ shutdown ALSA: usb-audio: add mapping for ASRock TRX40 Creator ARM: dts: omap4-droid4: Fix flakey wlan by disabling internal pull for gpio ARM: dts: omap4-droid4: Fix occasional lost wakeirq for uart1 net: microchip: encx24j600: add missed kthread_stop kselftests: dmabuf-heaps: Fix confused return value on expected error testing gfs2: move privileged user check to gfs2_quota_lock_check gfs2: Grab glock reference sooner in gfs2_add_revoke drm/amdgpu: drop unnecessary cancel_delayed_work_sync on PG ungate drm/amd/powerplay: perform PG ungate prior to CG ungate drm/amdgpu: Use GEM obj reference for KFD BOs cachefiles: Fix race between read_waiter and read_copier involving op->to_do usb: dwc3: pci: Enable extcon driver for Intel Merrifield usb: phy: twl6030-usb: Fix a resource leak in an error handling path in 'twl6030_usb_probe()' usb: gadget: legacy: fix redundant initialization warnings net: freescale: select CONFIG_FIXED_PHY where needed drm/amd/amdgpu: Update update_config() logic IB/i40iw: Remove bogus call to netdev_master_upper_dev_get() riscv: Fix unmet direct dependencies built based on SOC_VIRT riscv: stacktrace: Fix undefined reference to `walk_stackframe' riscv: Add pgprot_writecombine/device and PAGE_SHARED defination if NOMMU clk: ti: am33xx: fix RTC clock parent csky: Fixup msa highest 3 bits mask csky: Fixup perf callchain unwind csky: Fixup remove duplicate irq_disable drm/meson: pm resume add return errno branch hwmon: (nct7904) Fix incorrect range of temperature limit registers riscv: pgtable: Fix __kernel_map_pages build error if NOMMU cifs: Fix null pointer check in cifs_read csky: Fixup raw_copy_from_user() samples: bpf: Fix build error drivers: net: hamradio: Fix suspicious RCU usage warning in bpqether.c Input: usbtouchscreen - add support for BonXeon TP Input: evdev - call input_flush_device() on release(), not flush() Input: xpad - add custom init packet for Xbox One S controllers Input: dlink-dir685-touchkeys - fix a typo in driver name gpio: mvebu: Fix probing for chips without PWM Input: i8042 - add ThinkPad S230u to i8042 reset list Input: synaptics-rmi4 - really fix attn_data use-after-free Input: synaptics-rmi4 - fix error return code in rmi_driver_probe() ARM: 8970/1: decompressor: increase tag size ARM: uaccess: consolidate uaccess asm to asm/uaccess-asm.h ARM: uaccess: integrate uaccess_save and uaccess_restore ARM: uaccess: fix DACR mismatch with nested exceptions gpio: exar: Fix bad handling for ida_simple_get error path arm64: dts: mt8173: fix vcodec-enc clock soc: mediatek: cmdq: return send msg error code gpu/drm: ingenic: Fix bogus crtc_atomic_check callback gpu/drm: Ingenic: Fix opaque pointer casted to wrong type IB/qib: Call kobject_put() when kobject_init_and_add() fails ARM: dts/imx6q-bx50v3: Set display interface clock parents ARM: dts: bcm2835-rpi-zero-w: Fix led polarity ARM: dts: bcm: HR2: Fix PPI interrupt types ARM: dts: mmp3: Use the MMP3 compatible string for /clocks ARM: dts: mmp3-dell-ariel: Fix the SPI devices ARM: dts: mmp3: Drop usb-nop-xceiv from HSIC phy RDMA/mlx5: Fix NULL pointer dereference in destroy_prefetch_work mmc: block: Fix use-after-free issue for rpmb gpio: pxa: Fix return value of pxa_gpio_probe() gpio: bcm-kona: Fix return value of bcm_kona_gpio_probe() RDMA/pvrdma: Fix missing pci disable in pvrdma_pci_probe() ALSA: hwdep: fix a left shifting 1 by 31 UB bug ALSA: hda/realtek - Add a model for Thinkpad T570 without DAC workaround ALSA: usb-audio: mixer: volume quirk for ESS Technology Asus USB DAC exec: Always set cap_ambient in cap_bprm_set_creds clk: qcom: gcc: Fix parent for gpll0_out_even ALSA: usb-audio: Quirks for Gigabyte TRX40 Aorus Master onboard audio ALSA: hda/realtek - Add new codec supported for ALC287 libceph: ignore pool overlay and cache logic on redirects ceph: flush release queue when handling caps for unknown inode RDMA/core: Fix double destruction of uobject drm/amd/display: drop cursor position check in atomic test drm/amd/display: Split program front end part that occur outside lock drm/amd/display: Indicate dsc updates explicitly drm/amd/display: Added locking for atomic update stream and update planes drm/amd/display: Use cursor locking to prevent flip delays drm/amd/display: Defer cursor lock until after VUPDATE drm/amd/display: Fix potential integer wraparound resulting in a hang IB/ipoib: Fix double free of skb in case of multicast traffic in CM mode mm,thp: stop leaking unreleased file pages mm: remove VM_BUG_ON(PageSlab()) from page_mapcount() fs/binfmt_elf.c: allocate initialized memory in fill_thread_core_info() include/asm-generic/topology.h: guard cpumask_of_node() macro argument Revert "block: end bio with BLK_STS_AGAIN in case of non-mq devs and REQ_NOWAIT" gpio: fix locking open drain IRQ lines iommu: Fix reference count leak in iommu_group_alloc. parisc: Fix kernel panic in mem_init() cfg80211: fix debugfs rename crash mac80211: mesh: fix discovery timer re-arming issue / crash x86/dma: Fix max PFN arithmetic overflow on 32 bit systems copy_xstate_to_kernel(): don't leave parts of destination uninitialized xfrm: allow to accept packets with ipv6 NEXTHDR_HOP in xfrm_input xfrm: do pskb_pull properly in __xfrm_transport_prep xfrm: remove the xfrm_state_put call becofe going to out_reset xfrm: espintcp: save and call old ->sk_destruct xfrm: call xfrm_output_gso when inner_protocol is set in xfrm_output xfrm interface: fix oops when deleting a x-netns interface xfrm: fix a warning in xfrm_policy_insert_list xfrm: fix a NULL-ptr deref in xfrm_local_error xfrm: fix error in comment ip_vti: receive ipip packet by calling ip_tunnel_rcv netfilter: nft_reject_bridge: enable reject with bridge vlan netfilter: ipset: Fix subcounter update skip netfilter: conntrack: make conntrack userspace helpers work again netfilter: nfnetlink_cthelper: unbreak userspace helper support netfilter: nf_conntrack_pptp: prevent buffer overflows in debug code esp6: get the right proto for transport mode in esp6_gso_encap bnxt_en: Fix accumulation of bp->net_stats_prev. bnxt_en: fix firmware message length endianness ieee80211: Fix incorrect mask for default PE duration x86/ioperm: Prevent a memory leak when fork fails xsk: Add overflow check for u64 division, stored into u32 qlcnic: fix missing release in qlcnic_83xx_interrupt_test. crypto: chelsio/chtls: properly set tp->lsndtime nexthops: Move code from remove_nexthop_from_groups to remove_nh_grp_entry nexthops: don't modify published nexthop groups nexthop: Expand nexthop_is_multipath in a few places ipv4: nexthop version of fib_info_nh_uses_dev net: dsa: declare lockless TX feature for slave ports bonding: Fix reference count leak in bond_sysfs_slave_add. powerpc/bpf: Enable bpf_probe_read{, str}() on powerpc again netfilter: conntrack: comparison of unsigned in cthelper confirmation netfilter: conntrack: Pass value of ctinfo to __nf_conntrack_update netfilter: nf_conntrack_pptp: fix compilation warning with W=1 build Linux 5.6.16 UBUNTU: upstream stable to v5.6.16 ** Affects: linux-oem-5.6 (Ubuntu) Importance: Undecided Status: Confirmed ** Affects: linux-oem-5.6 (Ubuntu Focal) Importance: Undecided Assignee: Kamal Mostafa (kamalmostafa) Status: Fix Committed ** Tags: kernel-stable-tracking-bug ** Changed in: linux-oem-5.6 (Ubuntu) Status: New => Confirmed ** Tags added: kernel-stable-tracking-bug ** Also affects: linux-oem-5.6 (Ubuntu Focal) Importance: Undecided Status: New ** Changed in: linux-oem-5.6 (Ubuntu Focal) Status: New => In Progress ** Changed in: linux-oem-5.6 (Ubuntu Focal) Assignee: (unassigned) => Kamal Mostafa (kamalmostafa) ** Description changed: + SRU Justification - SRU Justification + Impact: + The upstream process for stable tree updates is quite similar + in scope to the Ubuntu SRU process, e.g., each patch has to + demonstrably fix a bug, and each patch is vetted by upstream + by originating either directly from a mainline/stable Linux tree or + a minimally backported form of that patch. The following upstream + stable patches should be included in the Ubuntu kernel: - Impact: - The upstream process for stable tree updates is quite similar - in scope to the Ubuntu SRU process, e.g., each patch has to - demonstrably fix a bug, and each patch is vetted by upstream - by originating either directly from a mainline/stable Linux tree or - a minimally backported form of that patch. The following upstream - stable patches should be included in the Ubuntu kernel: + v5.6.16 upstream stable release + from git://git.kernel.org/ - v5.6.16 upstream stable release - from git://git.kernel.org/ + ax25: fix setsockopt(SO_BINDTODEVICE) + dpaa_eth: fix usage as DSA master, try 3 + ethtool: count header size in reply size estimate + felix: Fix initialization of ioremap resources + net: don't return invalid table id error when we fall back to PF_UNSPEC + net: dsa: mt7530: fix roaming from DSA user ports + net: ethernet: ti: cpsw: fix ASSERT_RTNL() warning during suspend + __netif_receive_skb_core: pass skb by reference + net: inet_csk: Fix so_reuseport bind-address cache in tb->fast* + net: ipip: fix wrong address family in init error path + net/mlx5: Add command entry handling completion + net: mvpp2: fix RX hashing for non-10G ports + net: nlmsg_cancel() if put fails for nhmsg + net: qrtr: Fix passing invalid reference to qrtr_local_enqueue() + net: revert "net: get rid of an signed integer overflow in ip_idents_reserve()" + net sched: fix reporting the first-time use timestamp + net/tls: fix race condition causing kernel panic + nexthop: Fix attribute checking for groups + r8152: support additional Microsoft Surface Ethernet Adapter variant + sctp: Don't add the shutdown timer if its already been added + sctp: Start shutdown on association restart if in SHUTDOWN-SENT state and socket is closed + tipc: block BH before using dst_cache + net/mlx5e: kTLS, Destroy key object after destroying the TIS + net/mlx5e: Fix inner tirs handling + net/mlx5: Fix memory leak in mlx5_events_init + net/mlx5e: Update netdev txq on completions during closure + net/mlx5: Fix error flow in case of function_setup failure + wireguard: noise: read preshared key while taking lock + wireguard: queueing: preserve flow hash across packet scrubbing + wireguard: noise: separate receive counter from send counter + r8169: fix OCP access on RTL8117 + net/mlx5: Fix a race when moving command interface to events mode + net/mlx5: Fix cleaning unmanaged flow tables + Revert "virtio-balloon: Revert "virtio-balloon: Switch back to OOM handler for VIRTIO_BALLOON_F_DEFLATE_ON_OOM"" + net/mlx5: Avoid processing commands before cmdif is ready + net/mlx5: Annotate mutex destroy for root ns + net/tls: fix encryption error checking + net/tls: free record only on encryption error + net: sun: fix missing release regions in cas_init_one(). + net/mlx4_core: fix a memory leak bug. + net: sgi: ioc3-eth: Fix return value check in ioc3eth_probe() + mlxsw: spectrum: Fix use-after-free of split/unsplit/type_set in case reload fails + net: mscc: ocelot: fix address ageing time (again) + arm64: dts: qcom: db820c: fix audio configuration + ARM: dts: rockchip: fix phy nodename for rk3228-evb + ARM: dts: rockchip: fix phy nodename for rk3229-xms6 + arm64: dts: rockchip: fix status for &gmac2phy in rk3328-evb.dts + arm64: dts: rockchip: swap interrupts interrupt-names rk3399 gpu node + ARM: dts: rockchip: swap clock-names of gpu nodes + ARM: dts: rockchip: fix pinctrl sub nodename for spi in rk322x.dtsi + gpio: tegra: mask GPIO IRQs during IRQ shutdown + ALSA: usb-audio: add mapping for ASRock TRX40 Creator + ARM: dts: omap4-droid4: Fix flakey wlan by disabling internal pull for gpio + ARM: dts: omap4-droid4: Fix occasional lost wakeirq for uart1 + net: microchip: encx24j600: add missed kthread_stop + kselftests: dmabuf-heaps: Fix confused return value on expected error testing + gfs2: move privileged user check to gfs2_quota_lock_check + gfs2: Grab glock reference sooner in gfs2_add_revoke + drm/amdgpu: drop unnecessary cancel_delayed_work_sync on PG ungate + drm/amd/powerplay: perform PG ungate prior to CG ungate + drm/amdgpu: Use GEM obj reference for KFD BOs + cachefiles: Fix race between read_waiter and read_copier involving op->to_do + usb: dwc3: pci: Enable extcon driver for Intel Merrifield + usb: phy: twl6030-usb: Fix a resource leak in an error handling path in 'twl6030_usb_probe()' + usb: gadget: legacy: fix redundant initialization warnings + net: freescale: select CONFIG_FIXED_PHY where needed + drm/amd/amdgpu: Update update_config() logic + IB/i40iw: Remove bogus call to netdev_master_upper_dev_get() + riscv: Fix unmet direct dependencies built based on SOC_VIRT + riscv: stacktrace: Fix undefined reference to `walk_stackframe' + riscv: Add pgprot_writecombine/device and PAGE_SHARED defination if NOMMU + clk: ti: am33xx: fix RTC clock parent + csky: Fixup msa highest 3 bits mask + csky: Fixup perf callchain unwind + csky: Fixup remove duplicate irq_disable + drm/meson: pm resume add return errno branch + hwmon: (nct7904) Fix incorrect range of temperature limit registers + riscv: pgtable: Fix __kernel_map_pages build error if NOMMU + cifs: Fix null pointer check in cifs_read + csky: Fixup raw_copy_from_user() + samples: bpf: Fix build error + drivers: net: hamradio: Fix suspicious RCU usage warning in bpqether.c + Input: usbtouchscreen - add support for BonXeon TP + Input: evdev - call input_flush_device() on release(), not flush() + Input: xpad - add custom init packet for Xbox One S controllers + Input: dlink-dir685-touchkeys - fix a typo in driver name + gpio: mvebu: Fix probing for chips without PWM + Input: i8042 - add ThinkPad S230u to i8042 reset list + Input: synaptics-rmi4 - really fix attn_data use-after-free + Input: synaptics-rmi4 - fix error return code in rmi_driver_probe() + ARM: 8970/1: decompressor: increase tag size + ARM: uaccess: consolidate uaccess asm to asm/uaccess-asm.h + ARM: uaccess: integrate uaccess_save and uaccess_restore + ARM: uaccess: fix DACR mismatch with nested exceptions + gpio: exar: Fix bad handling for ida_simple_get error path + arm64: dts: mt8173: fix vcodec-enc clock + soc: mediatek: cmdq: return send msg error code + gpu/drm: ingenic: Fix bogus crtc_atomic_check callback + gpu/drm: Ingenic: Fix opaque pointer casted to wrong type + IB/qib: Call kobject_put() when kobject_init_and_add() fails + ARM: dts/imx6q-bx50v3: Set display interface clock parents + ARM: dts: bcm2835-rpi-zero-w: Fix led polarity + ARM: dts: bcm: HR2: Fix PPI interrupt types + ARM: dts: mmp3: Use the MMP3 compatible string for /clocks + ARM: dts: mmp3-dell-ariel: Fix the SPI devices + ARM: dts: mmp3: Drop usb-nop-xceiv from HSIC phy + RDMA/mlx5: Fix NULL pointer dereference in destroy_prefetch_work + mmc: block: Fix use-after-free issue for rpmb + gpio: pxa: Fix return value of pxa_gpio_probe() + gpio: bcm-kona: Fix return value of bcm_kona_gpio_probe() + RDMA/pvrdma: Fix missing pci disable in pvrdma_pci_probe() + ALSA: hwdep: fix a left shifting 1 by 31 UB bug + ALSA: hda/realtek - Add a model for Thinkpad T570 without DAC workaround + ALSA: usb-audio: mixer: volume quirk for ESS Technology Asus USB DAC + exec: Always set cap_ambient in cap_bprm_set_creds + clk: qcom: gcc: Fix parent for gpll0_out_even + ALSA: usb-audio: Quirks for Gigabyte TRX40 Aorus Master onboard audio + ALSA: hda/realtek - Add new codec supported for ALC287 + libceph: ignore pool overlay and cache logic on redirects + ceph: flush release queue when handling caps for unknown inode + RDMA/core: Fix double destruction of uobject + drm/amd/display: drop cursor position check in atomic test + drm/amd/display: Split program front end part that occur outside lock + drm/amd/display: Indicate dsc updates explicitly + drm/amd/display: Added locking for atomic update stream and update planes + drm/amd/display: Use cursor locking to prevent flip delays + drm/amd/display: Defer cursor lock until after VUPDATE + drm/amd/display: Fix potential integer wraparound resulting in a hang + IB/ipoib: Fix double free of skb in case of multicast traffic in CM mode + mm,thp: stop leaking unreleased file pages + mm: remove VM_BUG_ON(PageSlab()) from page_mapcount() + fs/binfmt_elf.c: allocate initialized memory in fill_thread_core_info() + include/asm-generic/topology.h: guard cpumask_of_node() macro argument + Revert "block: end bio with BLK_STS_AGAIN in case of non-mq devs and REQ_NOWAIT" + gpio: fix locking open drain IRQ lines + iommu: Fix reference count leak in iommu_group_alloc. + parisc: Fix kernel panic in mem_init() + cfg80211: fix debugfs rename crash + mac80211: mesh: fix discovery timer re-arming issue / crash + x86/dma: Fix max PFN arithmetic overflow on 32 bit systems + copy_xstate_to_kernel(): don't leave parts of destination uninitialized + xfrm: allow to accept packets with ipv6 NEXTHDR_HOP in xfrm_input + xfrm: do pskb_pull properly in __xfrm_transport_prep + xfrm: remove the xfrm_state_put call becofe going to out_reset + xfrm: espintcp: save and call old ->sk_destruct + xfrm: call xfrm_output_gso when inner_protocol is set in xfrm_output + xfrm interface: fix oops when deleting a x-netns interface + xfrm: fix a warning in xfrm_policy_insert_list + xfrm: fix a NULL-ptr deref in xfrm_local_error + xfrm: fix error in comment + ip_vti: receive ipip packet by calling ip_tunnel_rcv + netfilter: nft_reject_bridge: enable reject with bridge vlan + netfilter: ipset: Fix subcounter update skip + netfilter: conntrack: make conntrack userspace helpers work again + netfilter: nfnetlink_cthelper: unbreak userspace helper support + netfilter: nf_conntrack_pptp: prevent buffer overflows in debug code + esp6: get the right proto for transport mode in esp6_gso_encap + bnxt_en: Fix accumulation of bp->net_stats_prev. + bnxt_en: fix firmware message length endianness + ieee80211: Fix incorrect mask for default PE duration + x86/ioperm: Prevent a memory leak when fork fails + xsk: Add overflow check for u64 division, stored into u32 + qlcnic: fix missing release in qlcnic_83xx_interrupt_test. + crypto: chelsio/chtls: properly set tp->lsndtime + nexthops: Move code from remove_nexthop_from_groups to remove_nh_grp_entry + nexthops: don't modify published nexthop groups + nexthop: Expand nexthop_is_multipath in a few places + ipv4: nexthop version of fib_info_nh_uses_dev + net: dsa: declare lockless TX feature for slave ports + bonding: Fix reference count leak in bond_sysfs_slave_add. + powerpc/bpf: Enable bpf_probe_read{, str}() on powerpc again + netfilter: conntrack: comparison of unsigned in cthelper confirmation + netfilter: conntrack: Pass value of ctinfo to __nf_conntrack_update + netfilter: nf_conntrack_pptp: fix compilation warning with W=1 build + Linux 5.6.16 + UBUNTU: upstream stable to v5.6.16 ** Changed in: linux-oem-5.6 (Ubuntu Focal) Status: In Progress => Fix Committed -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1881931 Title: Focal update: v5.6.16 upstream stable release To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux-oem-5.6/+bug/1881931/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs