Public bug reported:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
v5.4.289 upstream stable release
from git://git.kernel.org/
usb: dwc2: gadget: Don't write invalid mapped sg entries into dma_desc with
iommu enabled
PCI/AER: Disable AER service on suspend
ALSA: usb: Fix UBSAN warning in parse_audio_unit()
PCI: Add ACS quirk for Broadcom BCM5760X NIC
i2c: pnx: Fix timeout in wait functions
drm/i915: Fix memory leak by correcting cache object name in error handler
erofs: fix order >= MAX_ORDER warning due to crafted negative i_size
erofs: fix incorrect symlink detection in fast symlink
net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
ionic: use ee->offset when returning sprom data
net: hinic: Fix cleanup in create_rxqs/txqs()
net: ethernet: bgmac-platform: fix an OF node reference leak
netfilter: ipset: Fix for recursive locking warning
mmc: sdhci-tegra: Remove SDHCI_QUIRK_BROKEN_ADMA_ZEROLEN_DESC quirk
chelsio/chtls: prevent potential integer overflow on 32bit
i2c: riic: Always round-up when calculating bus period
efivarfs: Fix error on non-existent file
USB: serial: option: add TCL IK512 MBIM & ECM
USB: serial: option: add MeiG Smart SLM770A
USB: serial: option: add Netprisma LCUK54 modules for WWAN Ready
USB: serial: option: add MediaTek T7XX compositions
USB: serial: option: add Telit FE910C04 rmnet compositions
sh: clk: Fix clk_enable() to return 0 on NULL clk
zram: refuse to use zero sized block device as backing device
btrfs: tree-checker: reject inline extent items with 0 ref count
NFS/pnfs: Fix a live lock between recalled layouts and layoutget
of/irq: Fix using uninitialized variable @addr_len in API of_irq_parse_one()
nilfs2: prevent use of deleted inode
udmabuf: also check for F_SEAL_FUTURE_WRITE
of: Fix error path in of_parse_phandle_with_args_map()
of: Fix refcount leakage for OF node returned by __of_get_dma_parent()
media: dvb-frontends: dib3000mb: fix uninit-value in dib3000_write_reg
bpf: Check negative offsets in __bpf_skb_min_len()
nfsd: restore callback functionality for NFSv4.0
mtd: diskonchip: Cast an operand to prevent potential overflow
phy: core: Fix an OF node refcount leakage in _of_phy_get()
phy: core: Fix an OF node refcount leakage in of_phy_provider_lookup()
phy: core: Fix that API devm_phy_put() fails to release the phy
phy: core: Fix that API devm_phy_destroy() fails to destroy the phy
dmaengine: mv_xor: fix child node refcount handling in early exit
dmaengine: at_xdmac: avoid null_prt_deref in at_xdmac_prep_dma_memset
mtd: rawnand: fix double free in atmel_pmecc_create_user()
tracing/kprobe: Make trace_kprobe's module callback called after jump_label
update
scsi: qla1280: Fix hw revision numbering for ISP1020/1040
scsi: megaraid_sas: Fix for a potential deadlock
regmap: Use correct format specifier for logging range errors
platform/x86: asus-nb-wmi: Ignore unknown event 0xCF
scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load
time
virtio-blk: don't keep queue frozen during system suspend
epoll: Add synchronous wakeup support for ep_poll_callback
MIPS: Probe toolchain support of -msym32
ipv6: use skb_expand_head in ip6_finish_output2
ipv6: use skb_expand_head in ip6_xmit
ipv6: fix possible UAF in ip6_finish_output2()
bpf: fix recursive lock when verdict program return SK_PASS
tracing: Constify string literal data member in struct trace_event_call
btrfs: avoid monopolizing a core when activating a swap file
ipv6: prevent possible UAF in ip6_xmit()
selinux: ignore unknown extended permissions
Drivers: hv: util: Avoid accessing a ringbuffer not initialized yet
IB/mlx5: Introduce and use mlx5_core_is_vf()
net/mlx5: Make API mlx5_core_is_ecpf accept const pointer
RDMA/mlx5: Enforce same type port association for multiport RoCE
RDMA/bnxt_re: Add check for path mtu in modify_qp
RDMA/bnxt_re: Fix reporting hw_ver in query_device
RDMA/bnxt_re: Fix max_qp_wrs reported
drm: bridge: adv7511: Enable SPDIF DAI
drm/bridge: adv7511_audio: Update Audio InfoFrame properly
netrom: check buffer length before accessing it
netfilter: Replace zero-length array with flexible-array member
netfilter: nft_set_hash: unaligned atomic read on struct nft_set_ext
net: llc: reset skb->transport_header
ALSA: usb-audio: US16x08: Initialize array before use
af_packet: fix vlan_get_tci() vs MSG_PEEK
af_packet: fix vlan_get_protocol_dgram() vs MSG_PEEK
ila: serialize calls to nf_register_net_hooks()
wifi: mac80211: wake the queues in case of failure in resume
sound: usb: format: don't warn that raw DSD is unsupported
bpf: fix potential error return
net: usb: qmi_wwan: add Telit FE910C04 compositions
irqchip/gic: Correct declaration of *percpu_base pointer in union gic_base
ARC: build: Try to guess GCC variant of cross compiler
modpost: fix input MODULE_DEVICE_TABLE() built for 64-bit on 32-bit host
modpost: fix the missed iteration for the max bit in do_input()
RDMA/uverbs: Prevent integer overflow issue
pinctrl: mcp23s08: Fix sleeping in atomic context due to regmap locking
sky2: Add device ID 11ab:4373 for Marvell 88E8075
net/sctp: Prevent autoclose integer overflow in sctp_association_init()
drm: adv7511: Drop dsi single lane support
mm: vmscan: account for free pages to prevent infinite Loop in
throttle_direct_reclaim()
ftrace: Fix possible use-after-free issue in ftrace_location()
ftrace: use preempt_enable/disable notrace macros to avoid double fault
Linux 5.4.289
UBUNTU: Upstream stable to v5.4.289
** Affects: linux (Ubuntu)
Importance: Undecided
Status: Invalid
** Affects: linux (Ubuntu Focal)
Importance: Medium
Assignee: Noah Wager (nwager)
Status: In Progress
** Tags: kernel-stable-tracking-bug
** Changed in: linux (Ubuntu)
Status: New => Confirmed
** Tags added: kernel-stable-tracking-bug
** Also affects: linux (Ubuntu Focal)
Importance: Undecided
Status: New
** Changed in: linux (Ubuntu)
Status: Confirmed => Invalid
** Changed in: linux (Ubuntu Focal)
Importance: Undecided => Medium
** Changed in: linux (Ubuntu Focal)
Status: New => In Progress
** Changed in: linux (Ubuntu Focal)
Assignee: (unassigned) => Noah Wager (nwager)
** Description changed:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
v5.4.289 upstream stable release
from git://git.kernel.org/
-
+ usb: dwc2: gadget: Don't write invalid mapped sg entries into dma_desc with
iommu enabled
+ PCI/AER: Disable AER service on suspend
+ ALSA: usb: Fix UBSAN warning in parse_audio_unit()
+ PCI: Add ACS quirk for Broadcom BCM5760X NIC
+ i2c: pnx: Fix timeout in wait functions
+ drm/i915: Fix memory leak by correcting cache object name in error handler
+ erofs: fix order >= MAX_ORDER warning due to crafted negative i_size
+ erofs: fix incorrect symlink detection in fast symlink
+ net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
+ ionic: use ee->offset when returning sprom data
+ net: hinic: Fix cleanup in create_rxqs/txqs()
+ net: ethernet: bgmac-platform: fix an OF node reference leak
+ netfilter: ipset: Fix for recursive locking warning
+ mmc: sdhci-tegra: Remove SDHCI_QUIRK_BROKEN_ADMA_ZEROLEN_DESC quirk
+ chelsio/chtls: prevent potential integer overflow on 32bit
+ i2c: riic: Always round-up when calculating bus period
+ efivarfs: Fix error on non-existent file
+ USB: serial: option: add TCL IK512 MBIM & ECM
+ USB: serial: option: add MeiG Smart SLM770A
+ USB: serial: option: add Netprisma LCUK54 modules for WWAN Ready
+ USB: serial: option: add MediaTek T7XX compositions
+ USB: serial: option: add Telit FE910C04 rmnet compositions
+ sh: clk: Fix clk_enable() to return 0 on NULL clk
+ zram: refuse to use zero sized block device as backing device
+ btrfs: tree-checker: reject inline extent items with 0 ref count
+ NFS/pnfs: Fix a live lock between recalled layouts and layoutget
+ of/irq: Fix using uninitialized variable @addr_len in API of_irq_parse_one()
+ nilfs2: prevent use of deleted inode
+ udmabuf: also check for F_SEAL_FUTURE_WRITE
+ of: Fix error path in of_parse_phandle_with_args_map()
+ of: Fix refcount leakage for OF node returned by __of_get_dma_parent()
+ media: dvb-frontends: dib3000mb: fix uninit-value in dib3000_write_reg
+ bpf: Check negative offsets in __bpf_skb_min_len()
+ nfsd: restore callback functionality for NFSv4.0
+ mtd: diskonchip: Cast an operand to prevent potential overflow
+ phy: core: Fix an OF node refcount leakage in _of_phy_get()
+ phy: core: Fix an OF node refcount leakage in of_phy_provider_lookup()
+ phy: core: Fix that API devm_phy_put() fails to release the phy
+ phy: core: Fix that API devm_phy_destroy() fails to destroy the phy
+ dmaengine: mv_xor: fix child node refcount handling in early exit
+ dmaengine: at_xdmac: avoid null_prt_deref in at_xdmac_prep_dma_memset
+ mtd: rawnand: fix double free in atmel_pmecc_create_user()
+ tracing/kprobe: Make trace_kprobe's module callback called after jump_label
update
+ scsi: qla1280: Fix hw revision numbering for ISP1020/1040
+ scsi: megaraid_sas: Fix for a potential deadlock
+ regmap: Use correct format specifier for logging range errors
+ platform/x86: asus-nb-wmi: Ignore unknown event 0xCF
+ scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load
time
+ virtio-blk: don't keep queue frozen during system suspend
+ epoll: Add synchronous wakeup support for ep_poll_callback
+ MIPS: Probe toolchain support of -msym32
+ ipv6: use skb_expand_head in ip6_finish_output2
+ ipv6: use skb_expand_head in ip6_xmit
+ ipv6: fix possible UAF in ip6_finish_output2()
+ bpf: fix recursive lock when verdict program return SK_PASS
+ tracing: Constify string literal data member in struct trace_event_call
+ btrfs: avoid monopolizing a core when activating a swap file
+ ipv6: prevent possible UAF in ip6_xmit()
+ selinux: ignore unknown extended permissions
+ Drivers: hv: util: Avoid accessing a ringbuffer not initialized yet
+ IB/mlx5: Introduce and use mlx5_core_is_vf()
+ net/mlx5: Make API mlx5_core_is_ecpf accept const pointer
+ RDMA/mlx5: Enforce same type port association for multiport RoCE
+ RDMA/bnxt_re: Add check for path mtu in modify_qp
+ RDMA/bnxt_re: Fix reporting hw_ver in query_device
+ RDMA/bnxt_re: Fix max_qp_wrs reported
+ drm: bridge: adv7511: Enable SPDIF DAI
+ drm/bridge: adv7511_audio: Update Audio InfoFrame properly
+ netrom: check buffer length before accessing it
+ netfilter: Replace zero-length array with flexible-array member
+ netfilter: nft_set_hash: unaligned atomic read on struct nft_set_ext
+ net: llc: reset skb->transport_header
+ ALSA: usb-audio: US16x08: Initialize array before use
+ af_packet: fix vlan_get_tci() vs MSG_PEEK
+ af_packet: fix vlan_get_protocol_dgram() vs MSG_PEEK
+ ila: serialize calls to nf_register_net_hooks()
+ wifi: mac80211: wake the queues in case of failure in resume
+ sound: usb: format: don't warn that raw DSD is unsupported
+ bpf: fix potential error return
+ net: usb: qmi_wwan: add Telit FE910C04 compositions
+ irqchip/gic: Correct declaration of *percpu_base pointer in union gic_base
+ ARC: build: Try to guess GCC variant of cross compiler
+ modpost: fix input MODULE_DEVICE_TABLE() built for 64-bit on 32-bit host
+ modpost: fix the missed iteration for the max bit in do_input()
+ RDMA/uverbs: Prevent integer overflow issue
+ pinctrl: mcp23s08: Fix sleeping in atomic context due to regmap locking
+ sky2: Add device ID 11ab:4373 for Marvell 88E8075
+ net/sctp: Prevent autoclose integer overflow in sctp_association_init()
+ drm: adv7511: Drop dsi single lane support
+ mm: vmscan: account for free pages to prevent infinite Loop in
throttle_direct_reclaim()
+ ftrace: Fix possible use-after-free issue in ftrace_location()
+ ftrace: use preempt_enable/disable notrace macros to avoid double fault
Linux 5.4.289
- ftrace: use preempt_enable/disable notrace macros to avoid double fault
- mm: vmscan: account for free pages to prevent infinite Loop in
throttle_direct_reclaim()
- drm: adv7511: Drop dsi single lane support
- net/sctp: Prevent autoclose integer overflow in sctp_association_init()
- sky2: Add device ID 11ab:4373 for Marvell 88E8075
- pinctrl: mcp23s08: Fix sleeping in atomic context due to regmap locking
- RDMA/uverbs: Prevent integer overflow issue
- modpost: fix the missed iteration for the max bit in do_input()
- modpost: fix input MODULE_DEVICE_TABLE() built for 64-bit on 32-bit host
- ARC: build: Try to guess GCC variant of cross compiler
- irqchip/gic: Correct declaration of *percpu_base pointer in union gic_base
- net: usb: qmi_wwan: add Telit FE910C04 compositions
- bpf: fix potential error return
- sound: usb: format: don't warn that raw DSD is unsupported
- wifi: mac80211: wake the queues in case of failure in resume
- ila: serialize calls to nf_register_net_hooks()
- af_packet: fix vlan_get_protocol_dgram() vs MSG_PEEK
- af_packet: fix vlan_get_tci() vs MSG_PEEK
- ALSA: usb-audio: US16x08: Initialize array before use
- net: llc: reset skb->transport_header
- netfilter: nft_set_hash: unaligned atomic read on struct nft_set_ext
- netfilter: Replace zero-length array with flexible-array member
- netrom: check buffer length before accessing it
- drm/bridge: adv7511_audio: Update Audio InfoFrame properly
- drm: bridge: adv7511: Enable SPDIF DAI
- RDMA/bnxt_re: Fix max_qp_wrs reported
- RDMA/bnxt_re: Fix reporting hw_ver in query_device
- RDMA/bnxt_re: Add check for path mtu in modify_qp
- RDMA/mlx5: Enforce same type port association for multiport RoCE
- net/mlx5: Make API mlx5_core_is_ecpf accept const pointer
- IB/mlx5: Introduce and use mlx5_core_is_vf()
- Drivers: hv: util: Avoid accessing a ringbuffer not initialized yet
- selinux: ignore unknown extended permissions
- ipv6: prevent possible UAF in ip6_xmit()
- skb_expand_head() adjust skb->truesize incorrectly
- btrfs: avoid monopolizing a core when activating a swap file
- tracing: Constify string literal data member in struct trace_event_call
- bpf: fix recursive lock when verdict program return SK_PASS
- ipv6: fix possible UAF in ip6_finish_output2()
- ipv6: use skb_expand_head in ip6_xmit
- ipv6: use skb_expand_head in ip6_finish_output2
- skbuff: introduce skb_expand_head()
- MIPS: Probe toolchain support of -msym32
- epoll: Add synchronous wakeup support for ep_poll_callback
- virtio-blk: don't keep queue frozen during system suspend
- scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load
time
- platform/x86: asus-nb-wmi: Ignore unknown event 0xCF
- regmap: Use correct format specifier for logging range errors
- scsi: megaraid_sas: Fix for a potential deadlock
- scsi: qla1280: Fix hw revision numbering for ISP1020/1040
- tracing/kprobe: Make trace_kprobe's module callback called after jump_label
update
- mtd: rawnand: fix double free in atmel_pmecc_create_user()
- dmaengine: at_xdmac: avoid null_prt_deref in at_xdmac_prep_dma_memset
- dmaengine: mv_xor: fix child node refcount handling in early exit
- phy: core: Fix that API devm_phy_destroy() fails to destroy the phy
- phy: core: Fix that API devm_phy_put() fails to release the phy
- phy: core: Fix an OF node refcount leakage in of_phy_provider_lookup()
- phy: core: Fix an OF node refcount leakage in _of_phy_get()
- mtd: diskonchip: Cast an operand to prevent potential overflow
- nfsd: restore callback functionality for NFSv4.0
- bpf: Check negative offsets in __bpf_skb_min_len()
- media: dvb-frontends: dib3000mb: fix uninit-value in dib3000_write_reg
- of: Fix refcount leakage for OF node returned by __of_get_dma_parent()
- of: Fix error path in of_parse_phandle_with_args_map()
- udmabuf: also check for F_SEAL_FUTURE_WRITE
- nilfs2: prevent use of deleted inode
- of/irq: Fix using uninitialized variable @addr_len in API of_irq_parse_one()
- NFS/pnfs: Fix a live lock between recalled layouts and layoutget
- btrfs: tree-checker: reject inline extent items with 0 ref count
- zram: refuse to use zero sized block device as backing device
- sh: clk: Fix clk_enable() to return 0 on NULL clk
- USB: serial: option: add Telit FE910C04 rmnet compositions
- USB: serial: option: add MediaTek T7XX compositions
- USB: serial: option: add Netprisma LCUK54 modules for WWAN Ready
- USB: serial: option: add MeiG Smart SLM770A
- USB: serial: option: add TCL IK512 MBIM & ECM
- efivarfs: Fix error on non-existent file
- i2c: riic: Always round-up when calculating bus period
- chelsio/chtls: prevent potential integer overflow on 32bit
- mmc: sdhci-tegra: Remove SDHCI_QUIRK_BROKEN_ADMA_ZEROLEN_DESC quirk
- netfilter: ipset: Fix for recursive locking warning
- net: ethernet: bgmac-platform: fix an OF node reference leak
- net: hinic: Fix cleanup in create_rxqs/txqs()
- ionic: use ee->offset when returning sprom data
- net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
- erofs: fix incorrect symlink detection in fast symlink
- erofs: fix order >= MAX_ORDER warning due to crafted negative i_size
- drm/i915: Fix memory leak by correcting cache object name in error handler
- i2c: pnx: Fix timeout in wait functions
- PCI: Add ACS quirk for Broadcom BCM5760X NIC
- ALSA: usb: Fix UBSAN warning in parse_audio_unit()
- PCI/AER: Disable AER service on suspend
- usb: dwc2: gadget: Don't write invalid mapped sg entries into dma_desc with
iommu enabled
- net: sched: fix ordering of qlen adjustment
+ UBUNTU: Upstream stable to v5.4.289
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2095437
Title:
Focal update: v5.4.289 upstream stable release
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2095437/+subscriptions
--
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
