Public bug reported:
SRU Justification Impact: The upstream process for stable tree updates is quite similar in scope to the Ubuntu SRU process, e.g., each patch has to demonstrably fix a bug, and each patch is vetted by upstream by originating either directly from a mainline/stable Linux tree or a minimally backported form of that patch. The following upstream stable patches should be included in the Ubuntu kernel: v5.10.30 upstream stable release from git://git.kernel.org/ Linux 5.10.30 Revert "net: sched: bump refcount for new action in ACT replace mode" net: ieee802154: stop dump llsec params for monitors net: ieee802154: forbid monitor for del llsec seclevel net: ieee802154: forbid monitor for set llsec params net: ieee802154: fix nl802154 del llsec devkey net: ieee802154: fix nl802154 add llsec key net: ieee802154: fix nl802154 del llsec dev net: ieee802154: fix nl802154 del llsec key net: ieee802154: nl-mac: fix check on panid net: mac802154: Fix general protection fault drivers: net: fix memory leak in peak_usb_create_dev drivers: net: fix memory leak in atusb_probe net: tun: set tun->dev->addr_len during TUNSETLINK processing cfg80211: remove WARN_ON() in cfg80211_sme_connect gpiolib: Read "gpio-line-names" from a firmware node net: sched: bump refcount for new action in ACT replace mode dt-bindings: net: ethernet-controller: fix typo in NVMEM lockdep: Address clang -Wformat warning printing for %hd clk: socfpga: fix iomem pointer cast on 64-bit RAS/CEC: Correct ce_add_elem()'s returned values vdpa/mlx5: Fix wrong use of bit numbers vdpa/mlx5: should exclude header length and fcs from mtu RDMA/addr: Be strict with gid size i40e: Fix parameters in aq_get_phy_register() drm/vc4: crtc: Reduce PV fifo threshold on hvs4 RDMA/qedr: Fix kernel panic when trying to access recv_cq perf report: Fix wrong LBR block sorting RDMA/cxgb4: check for ipv6 address properly while destroying listener net/mlx5: Fix PBMC register mapping net/mlx5: Fix PPLM register mapping net/mlx5: Fix placement of log_max_flow_counter net: hns3: clear VF down state bit before request link status tipc: increment the tmp aead refcnt before attaching it can: mcp251x: fix support for half duplex SPI host controllers iwlwifi: fix 11ax disabled bit in the regulatory capability flags i2c: designware: Adjust bus_freq_hz when refuse high speed mode set openvswitch: fix send of uninitialized stack memory in ct limit reply net: openvswitch: conntrack: simplify the return expression of ovs_ct_limit_get_default_limit() perf inject: Fix repipe usage s390/cpcmd: fix inline assembly register clobbering workqueue: Move the position of debug_work_activate() in __queue_work() clk: fix invalid usage of list cursor in unregister clk: fix invalid usage of list cursor in register net: macb: restore cmp registers on resume path net: cls_api: Fix uninitialised struct field bo->unlocked_driver_cb scsi: ufs: core: Fix wrong Task Tag used in task management request UPIUs scsi: ufs: core: Fix task management request completion timeout mptcp: forbit mcast-related sockopt on MPTCP sockets net: udp: Add support for getsockopt(..., ..., UDP_GRO, ..., ...); drm/msm: Set drvdata to NULL when msm_drm_init() fails RDMA/rtrs-clt: Close rtrs client conn before destroying rtrs clt session files i40e: Fix display statistics for veb_tc soc/fsl: qbman: fix conflicting alignment attributes xdp: fix xdp_return_frame() kernel BUG throw for page_pool memory model net/rds: Fix a use after free in rds_message_map_pages net/mlx5: Don't request more than supported EQs net/mlx5e: Fix ethtool indication of connector type net/mlx5e: Fix mapping of ct_label zero ASoC: sunxi: sun4i-codec: fill ASoC card owner I2C: JZ4780: Fix bug for Ingenic X1000. net: phy: broadcom: Only advertise EEE for supported modes nfp: flower: ignore duplicate merge hints from FW net: qrtr: Fix memory leak on qrtr_tx_wait failure net/ncsi: Avoid channel_monitor hrtimer deadlock ARM: dts: imx6: pbab01: Set vmmc supply for both SD interfaces net:tipc: Fix a double free in tipc_sk_mcast_rcv cxgb4: avoid collecting SGE_QBASE regs during traffic net: dsa: Fix type was not set for devlink port gianfar: Handle error code at MAC address change ethernet: myri10ge: Fix a use after free in myri10ge_sw_tso mlxsw: spectrum: Fix ECN marking in tunnel decapsulation can: isotp: fix msg_namelen values depending on CAN_REQUIRED_SIZE can: bcm/raw: fix msg_namelen values depending on CAN_REQUIRED_SIZE xfrm: Provide private skb extensions for segmented and hw offloaded ESP packets arm64: dts: imx8mm/q: Fix pad control of SD1_DATA0 drivers/net/wan/hdlc_fr: Fix a double free in pvc_xmit sch_red: fix off-by-one checks in red_check_params() geneve: do not modify the shared tunnel info when PMTU triggers an ICMP reply vxlan: do not modify the shared tunnel info when PMTU triggers an ICMP reply amd-xgbe: Update DMA coherency values hostfs: fix memory handling in follow_link() i40e: Fix kernel oops when i40e driver removes VF's i40e: Added Asym_Pause to supported link modes virtchnl: Fix layout of RSS structures xfrm: Fix NULL pointer dereference on policy lookup ASoC: wm8960: Fix wrong bclk and lrclk with pll enabled for some chips ASoC: SOF: Intel: HDA: fix core status verification esp: delete NETIF_F_SCTP_CRC bit from features for esp offload net: xfrm: Localize sequence counter per network namespace ARM: OMAP4: PM: update ROM return address for OSWR and OFF ARM: OMAP4: Fix PMIC voltage domains for bionic regulator: bd9571mwv: Fix AVS and DVFS voltage range remoteproc: qcom: pil_info: avoid 64-bit division xfrm: Use actual socket sk instead of skb socket for xfrm_output_resume xfrm: interface: fix ipv4 pmtu check to honor ip header df ice: Recognize 860 as iSCSI port in CEE mode ice: Refactor DCB related variables out of the ice_port_info struct net: sched: fix err handler in tcf_action_init() KVM: x86/mmu: preserve pending TLB flush across calls to kvm_tdp_mmu_zap_sp KVM: x86/mmu: Don't allow TDP MMU to yield when recovering NX pages KVM: x86/mmu: Ensure TLBs are flushed for TDP MMU during NX zapping KVM: x86/mmu: Ensure TLBs are flushed when yielding during GFN range zap KVM: x86/mmu: Yield in TDU MMU iter even if no SPTES changed KVM: x86/mmu: Ensure forward progress when yielding in TDP MMU iter KVM: x86/mmu: Rename goal_gfn to next_last_level_gfn KVM: x86/mmu: Merge flush and non-flush tdp_mmu_iter_cond_resched KVM: x86/mmu: change TDP MMU yield function returns to match cond_resched i2c: turn recovery error on init to debug percpu: make pcpu_nr_empty_pop_pages per chunk type scsi: target: iscsi: Fix zero tag inside a trace event scsi: pm80xx: Fix chip initialization failure driver core: Fix locking bug in deferred_probe_timeout_work_func() usbip: synchronize event handler with sysfs code paths usbip: vudc synchronize sysfs code paths usbip: stub-dev synchronize sysfs code paths usbip: add sysfs_lock to synchronize sysfs code paths thunderbolt: Fix off by one in tb_port_find_retimer() thunderbolt: Fix a leak in tb_retimer_add() net: let skb_orphan_partial wake-up waiters. net-ipv6: bugfix - raw & sctp - switch to ipv6_can_nonlocal_bind() net: hsr: Reset MAC header for Tx path mac80211: fix TXQ AC confusion mac80211: fix time-is-after bug in mlme cfg80211: check S1G beacon compat element length nl80211: fix potential leak of ACL params nl80211: fix beacon head validation net: sched: fix action overwrite reference counting net: sched: sch_teql: fix null-pointer dereference vdpa/mlx5: Fix suspend/resume index restoration i40e: Fix sparse errors in i40e_txrx.c i40e: Fix sparse error: uninitialized symbol 'ring' i40e: Fix sparse error: 'vsi->netdev' could be null i40e: Fix sparse warning: missing error code 'err' net: ensure mac header is set in virtio_net_hdr_to_skb() bpf, sockmap: Fix incorrect fwd_alloc accounting bpf, sockmap: Fix sk->prot unhash op reset bpf: Refcount task stack in bpf_get_task_stack libbpf: Only create rx and tx XDP rings when necessary libbpf: Restore umem state after socket create failure libbpf: Ensure umem pointer is non-NULL before dereferencing ethernet/netronome/nfp: Fix a use after free in nfp_bpf_ctrl_msg_rx bpf: link: Refuse non-O_RDWR flags in BPF_OBJ_GET bpf: Enforce that struct_ops programs be GPL-only libbpf: Fix bail out from 'ringbuf_process_ring()' on error net: hso: fix null-ptr-deref during tty device unregistration ice: fix memory leak of aRFS after resuming from suspend iwlwifi: pcie: properly set LTR workarounds on 22000 devices ice: Cleanup fltr list in case of allocation issues ice: Use port number instead of PF ID for WoL ice: Fix for dereference of NULL pointer ice: remove DCBNL_DEVRESET bit from PF state ice: fix memory allocation call ice: prevent ice_open and ice_stop during reset ice: Increase control queue timeout ice: Continue probe on link/PHY errors batman-adv: initialize "struct batadv_tvlv_tt_vlan_data"->reserved field ARM: dts: turris-omnia: configure LED[2]/INTn pin as interrupt pin parisc: avoid a warning on u8 cast for cmpxchg on u8 pointers parisc: parisc-agp requires SBA IOMMU driver of: property: fw_devlink: do not link ".*,nr-gpios" ethtool: fix incorrect datatype in set_eee ops fs: direct-io: fix missing sdio->boundary ocfs2: fix deadlock between setattr and dio_end_io_write nds32: flush_dcache_page: use page_mapping_file to avoid races with swapoff ia64: fix user_stack_pointer() for ptrace() gcov: re-fix clang-11+ support LOOKUP_MOUNTPOINT: we are cleaning "jumped" flag too late IB/hfi1: Fix probe time panic when AIP is enabled with a buggy BIOS ACPI: processor: Fix build when CONFIG_ACPI_PROCESSOR=m drm/i915: Fix invalid access to ACPI _DSM objects net: dsa: lantiq_gswip: Configure all remaining GSWIP_MII_CFG bits net: dsa: lantiq_gswip: Don't use PHY auto polling net: dsa: lantiq_gswip: Let GSWIP automatically set the xMII clock net: ipv6: check for validity before dereferencing cfg->fc_nlinfo.nlh xen/evtchn: Change irq_info lock to raw_spinlock_t selinux: fix race between old and new sidtab selinux: fix cond_list corruption when changing booleans selinux: make nslot handling in avtab more robust nfc: Avoid endless loops caused by repeated llcp_sock_connect() nfc: fix memory leak in llcp_sock_connect() nfc: fix refcount leak in llcp_sock_connect() nfc: fix refcount leak in llcp_sock_bind() ASoC: intel: atom: Stop advertising non working S24LE support ALSA: hda/conexant: Apply quirk for another HP ZBook G5 model ALSA: hda/realtek: Fix speaker amp setup on Acer Aspire E1 ALSA: aloop: Fix initialization of controls xfrm/compat: Cleanup WARN()s that can be user-triggered ** Affects: linux-oem-5.10 (Ubuntu) Importance: Undecided Status: Confirmed ** Affects: linux-oem-5.10 (Ubuntu Focal) Importance: Undecided Status: New ** Tags: kernel-stable-tracking-bug ** Changed in: linux-oem-5.10 (Ubuntu) Status: New => Confirmed ** Tags added: kernel-stable-tracking-bug ** Also affects: linux-oem-5.10 (Ubuntu Focal) Importance: Undecided Status: New -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1925145 Title: Focal update: v5.10.30 upstream stable release To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux-oem-5.10/+bug/1925145/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs