Public bug reported:
SRU Justification Impact: The upstream process for stable tree updates is quite similar in scope to the Ubuntu SRU process, e.g., each patch has to demonstrably fix a bug, and each patch is vetted by upstream by originating either directly from a mainline/stable Linux tree or a minimally backported form of that patch. The following upstream stable patches should be included in the Ubuntu kernel: v5.4.290 upstream stable release from git://git.kernel.org/ jbd2: flush filesystem device before updating tail sequence dm array: fix releasing a faulty array block twice in dm_array_cursor_end dm array: fix unreleased btree blocks on closing a faulty array cursor dm array: fix cursor index when skipping across block boundaries ieee802154: ca8210: Add missing check for kfifo_alloc() in ca8210_probe() net: 802: LLC+SNAP OID:PID lookup on start of skb data tcp/dccp: complete lockless accesses to sk->sk_max_ack_backlog tcp/dccp: allow a connection when sk_max_ack_backlog is zero net_sched: cls_flow: validate TCA_FLOW_RSHIFT attribute tls: Fix tls_sw_sendmsg error handling dm thin: make get_first_thin use rcu-safe list first function sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy sctp: sysctl: auth_enable: avoid using current->nsproxy drm/amd/display: Add check for granularity in dml ceil/floor helpers ACPI: resource: Add TongFang GM5HG0A to irq1_edge_low_force_override[] ACPI: resource: Add Asus Vivobook X1504VAP to irq1_level_low_skip_override[] drm/amd/display: increase MAX_SURFACES to the value supported by hw USB: serial: option: add MeiG Smart SRM815 USB: serial: option: add Neoway N723-EA support staging: iio: ad9834: Correct phase range check staging: iio: ad9832: Correct phase range check usb-storage: Add max sectors quirk for Nokia 208 USB: serial: cp210x: add Phoenix Contact UPS Device usb: gadget: u_serial: Disable ep before setting port to null to fix the crash caused by port being null USB: usblp: return error when setting unsupported protocol USB: core: Disable LPM only for non-suspended ports usb: fix reference leak in usb_new_device() usb: gadget: f_fs: Remove WARN_ON in functionfs_bind iio: pressure: zpa2326: fix information leak in triggered buffer iio: dummy: iio_simply_dummy_buffer: fix information leak in triggered buffer iio: light: vcnl4035: fix information leak in triggered buffer iio: imu: kmx61: fix information leak in triggered buffer iio: adc: ti-ads8688: fix information leak in triggered buffer iio: gyro: fxas21002c: Fix missing data update in trigger handler iio: adc: ti-ads124s08: Use gpiod_set_value_cansleep() iio: adc: at91: call input_free_device() on allocated iio_dev iio: inkern: call iio_device_put() only on mapped devices arm64: dts: rockchip: fix defines in pd_vio node for rk3399 arm64: dts: rockchip: fix pd_tcpc0 and pd_tcpc1 node position on rk3399 arm64: dts: rockchip: add #power-domain-cells to power domain nodes arm64: dts: rockchip: add hevc power domain clock to rk3328 phy: core: fix code style in devm_of_phy_provider_unregister phy: core: Fix that API devm_of_phy_provider_unregister() fails to unregister the phy provider ocfs2: correct return value of ocfs2_local_free_info() ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv sctp: sysctl: rto_min/max: avoid using current->nsproxy net: ethernet: ti: cpsw_ale: Fix cpsw_ale_get_field() net: net_namespace: Optimize the code net: add exit_batch_rtnl() method gtp: use exit_batch_rtnl() method gtp: Use for_each_netdev_rcu() in gtp_genl_dump_pdp(). gtp: Destroy device along with udp socket's netns dismantle. nfp: bpf: prevent integer overflow in nfp_bpf_event_output() drm/v3d: Ensure job pointer is set to NULL after job completion i2c: mux: demux-pinctrl: check initial mux selection, too mac802154: check local interfaces before deleting sdata list hfs: Sanity check the root record kheaders: Ignore silly-rename files poll_wait: add mb() to fix theoretical race between waitqueue_active() and .poll() nvmet: propagate npwg topology net: ethernet: xgbe: re-add aneg to supported features in PHY quirks fs/proc: fix softlockup in __read_vmcore (part 2) irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly hrtimers: Handle CPU state correctly on hotplug ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev() scsi: sg: Fix slab-use-after-free read in sg_release() net: fix data-races around sk->sk_forward_alloc ASoC: wm8994: Add depends on MFD core scsi: iscsi: Fix redundant response for ISCSI_UEVENT_GET_HOST_STATS request irqchip/sunxi-nmi: Add missing SKIP_WAKE flag gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag m68k: Update ->thread.esp0 before calling syscall_trace() in ret_from_signal m68k: Add missing mmap_read_lock() to sys_cacheflush() signal/m68k: Use force_sigsegv(SIGSEGV) in fpsp040_die net: xen-netback: hash.c: Use built-in RCU list checking net/xen-netback: prevent UAF in xenvif_flush_hash() vfio/platform: check the bounds of read/write syscalls ext4: avoid ext4_error()'s caused by ENOMEM in the truncate path ext4: fix slab-use-after-free in ext4_split_extent_at() USB: serial: quatech2: fix null-ptr-deref in qt2_process_read_urb() Revert "usb: gadget: u_serial: Disable ep before setting port to null to fix the crash caused by port being null" Input: atkbd - map F23 key to support default copilot shortcut Input: xpad - add unofficial Xbox 360 wireless receiver clone Input: xpad - add support for wooting two he (arm) drm/v3d: Assign job pointer to NULL before signaling the fence xhci: use pm_ptr() instead of #ifdef for CONFIG_PM conditionals Partial revert of xhci: use pm_ptr() instead #ifdef for CONFIG_PM conditionals Linux 5.4.290 UBUNTU: Upstream stable to v5.4.290 ** Affects: linux (Ubuntu) Importance: Undecided Status: Invalid ** Affects: linux (Ubuntu Focal) Importance: Medium Assignee: Noah Wager (nwager) Status: In Progress ** Tags: kernel-stable-tracking-bug ** Changed in: linux (Ubuntu) Status: New => Confirmed ** Tags added: kernel-stable-tracking-bug ** Also affects: linux (Ubuntu Focal) Importance: Undecided Status: New ** Changed in: linux (Ubuntu) Status: Confirmed => Invalid ** Changed in: linux (Ubuntu Focal) Importance: Undecided => Medium ** Changed in: linux (Ubuntu Focal) Status: New => In Progress ** Changed in: linux (Ubuntu Focal) Assignee: (unassigned) => Noah Wager (nwager) ** Description changed: SRU Justification Impact: The upstream process for stable tree updates is quite similar in scope to the Ubuntu SRU process, e.g., each patch has to demonstrably fix a bug, and each patch is vetted by upstream by originating either directly from a mainline/stable Linux tree or a minimally backported form of that patch. The following upstream stable patches should be included in the Ubuntu kernel: v5.4.290 upstream stable release from git://git.kernel.org/ - + jbd2: flush filesystem device before updating tail sequence + dm array: fix releasing a faulty array block twice in dm_array_cursor_end + dm array: fix unreleased btree blocks on closing a faulty array cursor + dm array: fix cursor index when skipping across block boundaries + ieee802154: ca8210: Add missing check for kfifo_alloc() in ca8210_probe() + net: 802: LLC+SNAP OID:PID lookup on start of skb data + tcp/dccp: complete lockless accesses to sk->sk_max_ack_backlog + tcp/dccp: allow a connection when sk_max_ack_backlog is zero + net_sched: cls_flow: validate TCA_FLOW_RSHIFT attribute + tls: Fix tls_sw_sendmsg error handling + dm thin: make get_first_thin use rcu-safe list first function + sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy + sctp: sysctl: auth_enable: avoid using current->nsproxy + drm/amd/display: Add check for granularity in dml ceil/floor helpers + ACPI: resource: Add TongFang GM5HG0A to irq1_edge_low_force_override[] + ACPI: resource: Add Asus Vivobook X1504VAP to irq1_level_low_skip_override[] + drm/amd/display: increase MAX_SURFACES to the value supported by hw + USB: serial: option: add MeiG Smart SRM815 + USB: serial: option: add Neoway N723-EA support + staging: iio: ad9834: Correct phase range check + staging: iio: ad9832: Correct phase range check + usb-storage: Add max sectors quirk for Nokia 208 + USB: serial: cp210x: add Phoenix Contact UPS Device + usb: gadget: u_serial: Disable ep before setting port to null to fix the crash caused by port being null + USB: usblp: return error when setting unsupported protocol + USB: core: Disable LPM only for non-suspended ports + usb: fix reference leak in usb_new_device() + usb: gadget: f_fs: Remove WARN_ON in functionfs_bind + iio: pressure: zpa2326: fix information leak in triggered buffer + iio: dummy: iio_simply_dummy_buffer: fix information leak in triggered buffer + iio: light: vcnl4035: fix information leak in triggered buffer + iio: imu: kmx61: fix information leak in triggered buffer + iio: adc: ti-ads8688: fix information leak in triggered buffer + iio: gyro: fxas21002c: Fix missing data update in trigger handler + iio: adc: ti-ads124s08: Use gpiod_set_value_cansleep() + iio: adc: at91: call input_free_device() on allocated iio_dev + iio: inkern: call iio_device_put() only on mapped devices + arm64: dts: rockchip: fix defines in pd_vio node for rk3399 + arm64: dts: rockchip: fix pd_tcpc0 and pd_tcpc1 node position on rk3399 + arm64: dts: rockchip: add #power-domain-cells to power domain nodes + arm64: dts: rockchip: add hevc power domain clock to rk3328 + phy: core: fix code style in devm_of_phy_provider_unregister + phy: core: Fix that API devm_of_phy_provider_unregister() fails to unregister the phy provider + ocfs2: correct return value of ocfs2_local_free_info() + ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv + sctp: sysctl: rto_min/max: avoid using current->nsproxy + net: ethernet: ti: cpsw_ale: Fix cpsw_ale_get_field() + net: net_namespace: Optimize the code + net: add exit_batch_rtnl() method + gtp: use exit_batch_rtnl() method + gtp: Use for_each_netdev_rcu() in gtp_genl_dump_pdp(). + gtp: Destroy device along with udp socket's netns dismantle. + nfp: bpf: prevent integer overflow in nfp_bpf_event_output() + drm/v3d: Ensure job pointer is set to NULL after job completion + i2c: mux: demux-pinctrl: check initial mux selection, too + mac802154: check local interfaces before deleting sdata list + hfs: Sanity check the root record + kheaders: Ignore silly-rename files + poll_wait: add mb() to fix theoretical race between waitqueue_active() and .poll() + nvmet: propagate npwg topology + net: ethernet: xgbe: re-add aneg to supported features in PHY quirks + fs/proc: fix softlockup in __read_vmcore (part 2) + irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly + hrtimers: Handle CPU state correctly on hotplug + ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev() + scsi: sg: Fix slab-use-after-free read in sg_release() + net: fix data-races around sk->sk_forward_alloc + ASoC: wm8994: Add depends on MFD core + scsi: iscsi: Fix redundant response for ISCSI_UEVENT_GET_HOST_STATS request + irqchip/sunxi-nmi: Add missing SKIP_WAKE flag + gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag + m68k: Update ->thread.esp0 before calling syscall_trace() in ret_from_signal + m68k: Add missing mmap_read_lock() to sys_cacheflush() + signal/m68k: Use force_sigsegv(SIGSEGV) in fpsp040_die + net: xen-netback: hash.c: Use built-in RCU list checking + net/xen-netback: prevent UAF in xenvif_flush_hash() + vfio/platform: check the bounds of read/write syscalls + ext4: avoid ext4_error()'s caused by ENOMEM in the truncate path + ext4: fix slab-use-after-free in ext4_split_extent_at() + USB: serial: quatech2: fix null-ptr-deref in qt2_process_read_urb() + Revert "usb: gadget: u_serial: Disable ep before setting port to null to fix the crash caused by port being null" + Input: atkbd - map F23 key to support default copilot shortcut + Input: xpad - add unofficial Xbox 360 wireless receiver clone + Input: xpad - add support for wooting two he (arm) + drm/v3d: Assign job pointer to NULL before signaling the fence + xhci: use pm_ptr() instead of #ifdef for CONFIG_PM conditionals + Partial revert of xhci: use pm_ptr() instead #ifdef for CONFIG_PM conditionals Linux 5.4.290 - Partial revert of xhci: use pm_ptr() instead #ifdef for CONFIG_PM conditionals - xhci: use pm_ptr() instead of #ifdef for CONFIG_PM conditionals - drm/v3d: Assign job pointer to NULL before signaling the fence - Input: xpad - add support for wooting two he (arm) - Input: xpad - add unofficial Xbox 360 wireless receiver clone - Input: atkbd - map F23 key to support default copilot shortcut - Revert "usb: gadget: u_serial: Disable ep before setting port to null to fix the crash caused by port being null" - USB: serial: quatech2: fix null-ptr-deref in qt2_process_read_urb() - ext4: fix slab-use-after-free in ext4_split_extent_at() - ext4: avoid ext4_error()'s caused by ENOMEM in the truncate path - vfio/platform: check the bounds of read/write syscalls - net/xen-netback: prevent UAF in xenvif_flush_hash() - net: xen-netback: hash.c: Use built-in RCU list checking - signal/m68k: Use force_sigsegv(SIGSEGV) in fpsp040_die - m68k: Add missing mmap_read_lock() to sys_cacheflush() - m68k: Update ->thread.esp0 before calling syscall_trace() in ret_from_signal - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag - irqchip/sunxi-nmi: Add missing SKIP_WAKE flag - scsi: iscsi: Fix redundant response for ISCSI_UEVENT_GET_HOST_STATS request - ASoC: wm8994: Add depends on MFD core - net: fix data-races around sk->sk_forward_alloc - scsi: sg: Fix slab-use-after-free read in sg_release() - ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev() - hrtimers: Handle CPU state correctly on hotplug - irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly - fs/proc: fix softlockup in __read_vmcore (part 2) - net: ethernet: xgbe: re-add aneg to supported features in PHY quirks - nvmet: propagate npwg topology - poll_wait: add mb() to fix theoretical race between waitqueue_active() and .poll() - kheaders: Ignore silly-rename files - hfs: Sanity check the root record - mac802154: check local interfaces before deleting sdata list - i2c: mux: demux-pinctrl: check initial mux selection, too - drm/v3d: Ensure job pointer is set to NULL after job completion - nfp: bpf: prevent integer overflow in nfp_bpf_event_output() - gtp: Destroy device along with udp socket's netns dismantle. - gtp: Use for_each_netdev_rcu() in gtp_genl_dump_pdp(). - gtp: use exit_batch_rtnl() method - net: add exit_batch_rtnl() method - net: net_namespace: Optimize the code - net: ethernet: ti: cpsw_ale: Fix cpsw_ale_get_field() - sctp: sysctl: rto_min/max: avoid using current->nsproxy - ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv - ocfs2: correct return value of ocfs2_local_free_info() - phy: core: Fix that API devm_of_phy_provider_unregister() fails to unregister the phy provider - phy: core: fix code style in devm_of_phy_provider_unregister - arm64: dts: rockchip: add hevc power domain clock to rk3328 - arm64: dts: rockchip: add #power-domain-cells to power domain nodes - arm64: dts: rockchip: fix pd_tcpc0 and pd_tcpc1 node position on rk3399 - arm64: dts: rockchip: fix defines in pd_vio node for rk3399 - iio: inkern: call iio_device_put() only on mapped devices - iio: adc: at91: call input_free_device() on allocated iio_dev - iio: adc: ti-ads124s08: Use gpiod_set_value_cansleep() - iio: gyro: fxas21002c: Fix missing data update in trigger handler - iio: adc: ti-ads8688: fix information leak in triggered buffer - iio: imu: kmx61: fix information leak in triggered buffer - iio: light: vcnl4035: fix information leak in triggered buffer - iio: dummy: iio_simply_dummy_buffer: fix information leak in triggered buffer - iio: pressure: zpa2326: fix information leak in triggered buffer - usb: gadget: f_fs: Remove WARN_ON in functionfs_bind - usb: fix reference leak in usb_new_device() - USB: core: Disable LPM only for non-suspended ports - USB: usblp: return error when setting unsupported protocol - usb: gadget: u_serial: Disable ep before setting port to null to fix the crash caused by port being null - USB: serial: cp210x: add Phoenix Contact UPS Device - usb-storage: Add max sectors quirk for Nokia 208 - staging: iio: ad9832: Correct phase range check - staging: iio: ad9834: Correct phase range check - USB: serial: option: add Neoway N723-EA support - USB: serial: option: add MeiG Smart SRM815 - drm/amd/display: increase MAX_SURFACES to the value supported by hw - ACPI: resource: Add Asus Vivobook X1504VAP to irq1_level_low_skip_override[] - ACPI: resource: Add TongFang GM5HG0A to irq1_edge_low_force_override[] - drm/amd/display: Add check for granularity in dml ceil/floor helpers - sctp: sysctl: auth_enable: avoid using current->nsproxy - sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy - dm thin: make get_first_thin use rcu-safe list first function - tls: Fix tls_sw_sendmsg error handling - net_sched: cls_flow: validate TCA_FLOW_RSHIFT attribute - tcp/dccp: allow a connection when sk_max_ack_backlog is zero - tcp/dccp: complete lockless accesses to sk->sk_max_ack_backlog - net: 802: LLC+SNAP OID:PID lookup on start of skb data - ieee802154: ca8210: Add missing check for kfifo_alloc() in ca8210_probe() - dm array: fix cursor index when skipping across block boundaries - dm array: fix unreleased btree blocks on closing a faulty array cursor - dm array: fix releasing a faulty array block twice in dm_array_cursor_end - jbd2: flush filesystem device before updating tail sequence + UBUNTU: Upstream stable to v5.4.290 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2098439 Title: Focal update: v5.4.290 upstream stable release To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2098439/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs