Public bug reported:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
v5.4.280 upstream stable release
from git://git.kernel.org/
Compiler Attributes: Add __uninitialized macro
drm/lima: fix shared irq handling on driver remove
media: dvb: as102-fe: Fix as10x_register_addr packing
media: dvb-usb: dib0700_devices: Add missing release_firmware()
IB/core: Implement a limit on UMAD receive List
scsi: qedf: Make qedf_execute_tmf() non-preemptible
drm/amdgpu: Initialize timestamp for some legacy SOCs
drm/amd/display: Skip finding free audio for unknown engine_id
media: dw2102: Don't translate i2c read into write
sctp: prefer struct_size over open coded arithmetic
firmware: dmi: Stop decoding on broken entry
Input: ff-core - prefer struct_size over open coded arithmetic
net: dsa: mv88e6xxx: Correct check for empty list
media: dvb-frontends: tda18271c2dd: Remove casting during div
media: s2255: Use refcount_t instead of atomic_t for num_channels
media: dvb-frontends: tda10048: Fix integer overflow
i2c: i801: Annotate apanel_addr as __ro_after_init
powerpc/64: Set _IO_BASE to POISON_POINTER_DELTA not 0 for CONFIG_PCI=n
orangefs: fix out-of-bounds fsid access
powerpc/xmon: Check cpu id in commands "c#", "dp#" and "dx#"
jffs2: Fix potential illegal address access in jffs2_free_inode
s390/pkey: Wipe sensitive data on failure
tcp: tcp_mark_head_lost is only valid for sack-tcp
tcp: add ece_ack flag to reno sack functions
net: tcp better handling of reordering then loss cases
UPSTREAM: tcp: fix DSACK undo in fast recovery to call tcp_try_to_open()
tcp_metrics: validate source addr length
wifi: wilc1000: fix ies_len type in connect path
bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
selftests: fix OOM in msg_zerocopy selftest
selftests: make order checking verbose in msg_zerocopy selftest
inet_diag: Initialize pad field in struct inet_diag_req_v2
nilfs2: fix inode number range checks
nilfs2: add missing check for inode numbers on directory entries
mm: optimize the redundant loop of mm_update_owner_next()
can: kvaser_usb: Explicitly initialize family in leafimx driver_info struct
fsnotify: Do not generate events for O_PATH file descriptors
Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
drm/amdgpu/atomfirmware: silence UBSAN warning
bnx2x: Fix multiple UBSAN array-index-out-of-bounds
media: dw2102: fix a potential buffer overflow
i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
ALSA: hda/realtek: Enable headset mic of JP-IK LEAP W502 with ALC897
nvme-multipath: find NUMA path only for online numa-node
nilfs2: fix incorrect inode allocation from reserved inodes
filelock: fix potential use-after-free in posix_lock_inode
fs/dcache: Re-use value stored to dentry->d_flags instead of re-reading
vfs: don't mod negative dentry count when on shrinker list
tcp: add TCP_INFO status for failed client TFO
tcp: fix incorrect undo caused by DSACK of TLP retransmit
octeontx2-af: Fix incorrect value output on error path in
rvu_check_rsrc_availability()
net: lantiq_etop: add blank line after declaration
net: ethernet: lantiq_etop: fix double free in detach
ppp: reject claimed-as-LCP but actually malformed packets
udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
s390: Mark psw in __load_psw_mask() as __unitialized
ARM: davinci: Convert comma to semicolon
octeontx2-af: fix detection of IP layer
USB: serial: option: add Telit generic core-dump composition
USB: serial: option: add Telit FN912 rmnet compositions
USB: serial: option: add Fibocom FM350-GL
USB: serial: option: add support for Foxconn T99W651
USB: serial: option: add Netprisma LCUK54 series modules
USB: serial: option: add Rolling RW350-GL variants
USB: Add USB_QUIRK_NO_SET_INTF quirk for START BP-850k
usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
USB: core: Fix duplicate endpoint bug by clearing reserved bits in the
descriptor
hpet: Support 32-bit userspace
nvmem: meson-efuse: Fix return value of nvmem callbacks
ALSA: hda/realtek: Limit mic boost on VAIO PRO PX
libceph: fix race between delayed_work() and ceph_monc_stop()
SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
tcp: refactor tcp_retransmit_timer()
net: tcp: fix unexcepted socket die when snd_wnd is 0
tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
tcp: avoid too many retransmit packets
nilfs2: fix kernel bug on rename operation of broken directory
i2c: rcar: bring hardware to known state when probing
Linux 5.4.280
UBUNTU: Upstream stable to v5.4.280
** Affects: linux (Ubuntu)
Importance: Undecided
Status: Invalid
** Affects: linux (Ubuntu Focal)
Importance: Medium
Assignee: Manuel Diewald (diewald)
Status: In Progress
** Tags: kernel-stable-tracking-bug
** Changed in: linux (Ubuntu)
Status: New => Confirmed
** Tags added: kernel-stable-tracking-bug
** Also affects: linux (Ubuntu Focal)
Importance: Undecided
Status: New
** Changed in: linux (Ubuntu)
Status: Confirmed => Invalid
** Changed in: linux (Ubuntu Focal)
Importance: Undecided => Medium
** Changed in: linux (Ubuntu Focal)
Status: New => In Progress
** Changed in: linux (Ubuntu Focal)
Assignee: (unassigned) => Manuel Diewald (diewald)
** Description changed:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
v5.4.280 upstream stable release
from git://git.kernel.org/
-
+ Compiler Attributes: Add __uninitialized macro
+ drm/lima: fix shared irq handling on driver remove
+ media: dvb: as102-fe: Fix as10x_register_addr packing
+ media: dvb-usb: dib0700_devices: Add missing release_firmware()
+ IB/core: Implement a limit on UMAD receive List
+ scsi: qedf: Make qedf_execute_tmf() non-preemptible
+ drm/amdgpu: Initialize timestamp for some legacy SOCs
+ drm/amd/display: Skip finding free audio for unknown engine_id
+ media: dw2102: Don't translate i2c read into write
+ sctp: prefer struct_size over open coded arithmetic
+ firmware: dmi: Stop decoding on broken entry
+ Input: ff-core - prefer struct_size over open coded arithmetic
+ net: dsa: mv88e6xxx: Correct check for empty list
+ media: dvb-frontends: tda18271c2dd: Remove casting during div
+ media: s2255: Use refcount_t instead of atomic_t for num_channels
+ media: dvb-frontends: tda10048: Fix integer overflow
+ i2c: i801: Annotate apanel_addr as __ro_after_init
+ powerpc/64: Set _IO_BASE to POISON_POINTER_DELTA not 0 for CONFIG_PCI=n
+ orangefs: fix out-of-bounds fsid access
+ powerpc/xmon: Check cpu id in commands "c#", "dp#" and "dx#"
+ jffs2: Fix potential illegal address access in jffs2_free_inode
+ s390/pkey: Wipe sensitive data on failure
+ tcp: tcp_mark_head_lost is only valid for sack-tcp
+ tcp: add ece_ack flag to reno sack functions
+ net: tcp better handling of reordering then loss cases
+ UPSTREAM: tcp: fix DSACK undo in fast recovery to call tcp_try_to_open()
+ tcp_metrics: validate source addr length
+ wifi: wilc1000: fix ies_len type in connect path
+ bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
+ selftests: fix OOM in msg_zerocopy selftest
+ selftests: make order checking verbose in msg_zerocopy selftest
+ inet_diag: Initialize pad field in struct inet_diag_req_v2
+ nilfs2: fix inode number range checks
+ nilfs2: add missing check for inode numbers on directory entries
+ mm: optimize the redundant loop of mm_update_owner_next()
+ can: kvaser_usb: Explicitly initialize family in leafimx driver_info struct
+ fsnotify: Do not generate events for O_PATH file descriptors
+ Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
+ drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
+ drm/amdgpu/atomfirmware: silence UBSAN warning
+ bnx2x: Fix multiple UBSAN array-index-out-of-bounds
+ media: dw2102: fix a potential buffer overflow
+ i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
+ ALSA: hda/realtek: Enable headset mic of JP-IK LEAP W502 with ALC897
+ nvme-multipath: find NUMA path only for online numa-node
+ nilfs2: fix incorrect inode allocation from reserved inodes
+ filelock: fix potential use-after-free in posix_lock_inode
+ fs/dcache: Re-use value stored to dentry->d_flags instead of re-reading
+ vfs: don't mod negative dentry count when on shrinker list
+ tcp: add TCP_INFO status for failed client TFO
+ tcp: fix incorrect undo caused by DSACK of TLP retransmit
+ octeontx2-af: Fix incorrect value output on error path in
rvu_check_rsrc_availability()
+ net: lantiq_etop: add blank line after declaration
+ net: ethernet: lantiq_etop: fix double free in detach
+ ppp: reject claimed-as-LCP but actually malformed packets
+ udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
+ s390: Mark psw in __load_psw_mask() as __unitialized
+ ARM: davinci: Convert comma to semicolon
+ octeontx2-af: fix detection of IP layer
+ USB: serial: option: add Telit generic core-dump composition
+ USB: serial: option: add Telit FN912 rmnet compositions
+ USB: serial: option: add Fibocom FM350-GL
+ USB: serial: option: add support for Foxconn T99W651
+ USB: serial: option: add Netprisma LCUK54 series modules
+ USB: serial: option: add Rolling RW350-GL variants
+ USB: Add USB_QUIRK_NO_SET_INTF quirk for START BP-850k
+ usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
+ USB: core: Fix duplicate endpoint bug by clearing reserved bits in the
descriptor
+ hpet: Support 32-bit userspace
+ nvmem: meson-efuse: Fix return value of nvmem callbacks
+ ALSA: hda/realtek: Limit mic boost on VAIO PRO PX
+ libceph: fix race between delayed_work() and ceph_monc_stop()
+ SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
+ tcp: refactor tcp_retransmit_timer()
+ net: tcp: fix unexcepted socket die when snd_wnd is 0
+ tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
+ tcp: avoid too many retransmit packets
+ nilfs2: fix kernel bug on rename operation of broken directory
+ i2c: rcar: bring hardware to known state when probing
Linux 5.4.280
- i2c: rcar: bring hardware to known state when probing
- nilfs2: fix kernel bug on rename operation of broken directory
- tcp: avoid too many retransmit packets
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- net: tcp: fix unexcepted socket die when snd_wnd is 0
- tcp: refactor tcp_retransmit_timer()
- SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
- libceph: fix race between delayed_work() and ceph_monc_stop()
- ALSA: hda/realtek: Limit mic boost on VAIO PRO PX
- nvmem: meson-efuse: Fix return value of nvmem callbacks
- hpet: Support 32-bit userspace
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the
descriptor
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- USB: Add USB_QUIRK_NO_SET_INTF quirk for START BP-850k
- USB: serial: option: add Rolling RW350-GL variants
- USB: serial: option: add Netprisma LCUK54 series modules
- USB: serial: option: add support for Foxconn T99W651
- USB: serial: option: add Fibocom FM350-GL
- USB: serial: option: add Telit FN912 rmnet compositions
- USB: serial: option: add Telit generic core-dump composition
- octeontx2-af: fix detection of IP layer
- ARM: davinci: Convert comma to semicolon
- s390: Mark psw in __load_psw_mask() as __unitialized
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- ppp: reject claimed-as-LCP but actually malformed packets
- net: ethernet: lantiq_etop: fix double free in detach
- net: lantiq_etop: add blank line after declaration
- octeontx2-af: Fix incorrect value output on error path in
rvu_check_rsrc_availability()
- tcp: fix incorrect undo caused by DSACK of TLP retransmit
- tcp: add TCP_INFO status for failed client TFO
- vfs: don't mod negative dentry count when on shrinker list
- fs/dcache: Re-use value stored to dentry->d_flags instead of re-reading
- filelock: fix potential use-after-free in posix_lock_inode
- nilfs2: fix incorrect inode allocation from reserved inodes
- nvme-multipath: find NUMA path only for online numa-node
- ALSA: hda/realtek: Enable headset mic of JP-IK LEAP W502 with ALC897
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- media: dw2102: fix a potential buffer overflow
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
- drm/amdgpu/atomfirmware: silence UBSAN warning
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
- fsnotify: Do not generate events for O_PATH file descriptors
- can: kvaser_usb: Explicitly initialize family in leafimx driver_info struct
- mm: optimize the redundant loop of mm_update_owner_next()
- nilfs2: add missing check for inode numbers on directory entries
- nilfs2: fix inode number range checks
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- selftests: make order checking verbose in msg_zerocopy selftest
- selftests: fix OOM in msg_zerocopy selftest
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- wifi: wilc1000: fix ies_len type in connect path
- tcp_metrics: validate source addr length
- UPSTREAM: tcp: fix DSACK undo in fast recovery to call tcp_try_to_open()
- net: tcp better handling of reordering then loss cases
- tcp: add ece_ack flag to reno sack functions
- tcp: tcp_mark_head_lost is only valid for sack-tcp
- s390/pkey: Wipe sensitive data on failure
- jffs2: Fix potential illegal address access in jffs2_free_inode
- powerpc/xmon: Check cpu id in commands "c#", "dp#" and "dx#"
- orangefs: fix out-of-bounds fsid access
- powerpc/64: Set _IO_BASE to POISON_POINTER_DELTA not 0 for CONFIG_PCI=n
- i2c: i801: Annotate apanel_addr as __ro_after_init
- media: dvb-frontends: tda10048: Fix integer overflow
- media: s2255: Use refcount_t instead of atomic_t for num_channels
- media: dvb-frontends: tda18271c2dd: Remove casting during div
- net: dsa: mv88e6xxx: Correct check for empty list
- Input: ff-core - prefer struct_size over open coded arithmetic
- firmware: dmi: Stop decoding on broken entry
- sctp: prefer struct_size over open coded arithmetic
- media: dw2102: Don't translate i2c read into write
- drm/amd/display: Skip finding free audio for unknown engine_id
- drm/amdgpu: Initialize timestamp for some legacy SOCs
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- IB/core: Implement a limit on UMAD receive List
- media: dvb-usb: dib0700_devices: Add missing release_firmware()
- media: dvb: as102-fe: Fix as10x_register_addr packing
- drm/lima: fix shared irq handling on driver remove
- Compiler Attributes: Add __uninitialized macro
+ UBUNTU: Upstream stable to v5.4.280
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2075175
Title:
Focal update: v5.4.280 upstream stable release
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2075175/+subscriptions
--
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
