Public bug reported:
SRU Justification Impact: The upstream process for stable tree updates is quite similar in scope to the Ubuntu SRU process, e.g., each patch has to demonstrably fix a bug, and each patch is vetted by upstream by originating either directly from a mainline/stable Linux tree or a minimally backported form of that patch. The following upstream stable patches should be included in the Ubuntu kernel: v5.2.9 upstream stable release from git://git.kernel.org/ Linux 5.2.9 iwlwifi: mvm: fix version check for GEO_TX_POWER_LIMIT support iwlwifi: mvm: don't send GEO_TX_POWER_LIMIT on version < 41 iwlwifi: mvm: fix a use-after-free bug in iwl_mvm_tx_tso_segment iwlwifi: mvm: fix an out-of-bound access iwlwifi: don't unmap as page memory that was mapped as single mwifiex: fix 802.11n/WPA detection KVM: arm/arm64: Sync ICH_VMCR_EL2 back when about to block KVM: Fix leak vCPU's VMCS value into other pCPU NFSv4: Fix an Oops in nfs4_do_setattr NFSv4: Check the return value of update_open_stateid() NFSv4: Fix delegation state recovery smb3: send CAP_DFS capability during session setup SMB3: Fix deadlock in validate negotiate hits reconnect dax: dax_layout_busy_page() should not unmap cow pages mac80211: don't WARN on short WMM parameters from AP ALSA: hda - Workaround for crackled sound on AMD controller (1022:1457) ALSA: hda - Don't override global PCM hw info flag ALSA: hiface: fix multiple memory leak bugs ALSA: firewire: fix a memory leak bug drm/i915: Fix wrong escape clock divisor init for GLK hwmon: (lm75) Fixup tmp75b clr_mask hwmon: (nct7802) Fix wrong detection of in4 presence can: peak_usb: pcan_usb_fd: Fix info-leaks to USB devices can: peak_usb: pcan_usb_pro: Fix info-leaks to USB devices KVM/nSVM: properly map nested VMCB ALSA: usb-audio: fix a memory leak bug HID: sony: Fix race condition between rumble and device remove. gen_compile_commands: lower the entry count threshold s390/dma: provide proper ARCH_ZONE_DMA_BITS value perf/core: Fix creating kernel counters for PMUs that override event->cpu perf/x86: Apply more accurate check on hypervisor platform perf/x86/intel: Fix invalid Bit 13 for Icelake MSR_OFFCORE_RSP_x register perf/x86/intel: Fix SLOTS PEBS event constraint tty/ldsem, locking/rwsem: Add missing ACQUIRE to read_failed sleep loop test_firmware: fix a memory leak bug scsi: scsi_dh_alua: always use a 2 second delay before retrying RTPG scsi: ibmvfc: fix WARN_ON during event pool release scsi: megaraid_sas: fix panic on loading firmware crashdump ARM: dts: bcm: bcm47094: add missing #cells for mdio-bus-mux ARM: davinci: fix sleep.S build error on ARMv4 nvme: fix memory leak caused by incorrect subsystem free nvme: ignore subnqn for ADATA SX6000LNP ACPI/IORT: Fix off-by-one check in iort_dev_find_its_id() drbd: dynamically allocate shash descriptor perf probe: Avoid calling freeing routine multiple times for same pointer perf session: Fix loading of compressed data split across adjacent records perf stat: Fix segfault for event group in repeat mode perf tools: Fix proper buffer size for feature processing perf script: Fix off by one in brstackinsn IPC computation ALSA: compress: Be more restrictive about when a drain is allowed ALSA: compress: Don't allow paritial drain operations on capture streams ALSA: compress: Prevent bypasses of set_params ALSA: compress: Fix regression on compressed capture streams s390/qdio: add sanity checks to the fast-requeue path cpufreq/pasemi: fix use-after-free in pas_cpufreq_cpu_init() arm64: dts: imx8mq: fix SAI compatible arm64: dts: imx8mm: Correct SAI3 RXC/TXFS pin's mux option #1 drm: silence variable 'conn' set but not used drm/msm/dpu: Correct dpu encoder spinlock initialization iommu/vt-d: Check if domain->pgd was allocated arm64: entry: SP Alignment Fault doesn't write to FAR_EL1 arm64: Force SSBS on context switch powerpc/papr_scm: Force a scm-unbind if initial scm-bind fails ARM: dts: imx6ul: fix clock frequency property name of I2C buses hwmon: (nct6775) Fix register address and added missed tolerance for nct6106 hwmon: (occ) Fix division by zero issue allocate_flower_entry: should check for null deref mac80211: don't warn about CW params when not using them mac80211: fix possible memory leak in ieee80211_assign_beacon nl80211: fix NL80211_HE_MAX_CAPABILITY_LEN iscsi_ibft: make ISCSI_IBFT dependson ACPI instead of ISCSI_IBFT_FIND drm/amd/display: Increase size of audios array drm/amd/display: Only enable audio if speaker allocation exists drm/amd/display: Fix dc_create failure handling and 666 color depths drm/amd/display: allocate 4 ddc engines for RV2 drm/amd/display: put back front end initialization sequence drm/amd/display: use encoder's engine id to find matched free audio device drm/amd/display: fix DMCU hang when going into Modern Standby drm/amd/display: Wait for backlight programming completion in set backlight level drm/amd/display: Clock does not lower in Updateplanes drm/amd/display: No audio endpoint for Dell MST display netfilter: nf_tables: Support auto-loading for inet nat rq-qos: use a mb for got_token rq-qos: set ourself TASK_UNINTERRUPTIBLE after we schedule rq-qos: don't reset has_sleepers on spurious wakeups scripts/sphinx-pre-install: fix latexmk dependencies scripts/sphinx-pre-install: don't use LaTeX with CentOS 7 scripts/sphinx-pre-install: fix script for RHEL/CentOS netfilter: nft_hash: fix symhash with modulus one netfilter: conntrack: always store window size un-scaled netfilter: nf_tables: fix module autoload for redir netfilter: Fix rpfilter dropping vrf packets by mistake vfio-ccw: Don't call cp_free if we are processing a channel program vfio-ccw: Set pa_nr to 0 if memory allocation fails for pa_iova_pfn netfilter: nfnetlink: avoid deadlock due to synchronous request_module powerpc: fix off by one in max_zone_pfn initialization for ZONE_DMA can: peak_usb: fix potential double kfree_skb() can: flexcan: fix an use-after-free in flexcan_setup_stop_mode() can: flexcan: fix stop mode acknowledgment can: rcar_canfd: fix possible IRQ storm on high load usb: typec: tcpm: Ignore unsupported/unknown alternate mode requests usb: typec: tcpm: Add NULL check before dereferencing config usb: typec: tcpm: remove tcpm dir if no children usb: typec: tcpm: free log buf memory when remove debug file usb: typec: ucsi: ccg: Fix uninitilized symbol error usb: yurex: Fix use-after-free in yurex_delete usb: host: xhci-rcar: Fix timeout in xhci_suspend() gfs2: gfs2_walk_metadata fix genirq/affinity: Create affinity mask for single vector x86/purgatory: Use CFLAGS_REMOVE rather than reset KBUILD_CFLAGS x86/purgatory: Do not use __builtin_memcpy and __builtin_memset perf record: Fix module size on s390 perf db-export: Fix thread__exec_comm() perf annotate: Fix s390 gap between kernel end and module start coresight: Fix DEBUG_LOCKS_WARN_ON for uninitialized attribute mm/vmalloc: Sync unmappings in __purge_vmap_area_lazy() x86/mm: Sync also unmappings in vmalloc_sync_all() x86/mm: Check for pfn instead of page in vmalloc_sync_one() Input: synaptics - enable RMI mode for HP Spectre X360 Input: elantech - enable SMBus on new (2018+) systems Input: usbtouchscreen - initialize PM mutex before using it bdev: Fixup error handling in blkdev_get() loop: set PF_MEMALLOC_NOIO for the worker thread mmc: cavium: Add the missing dma unmap when the dma has finished. mmc: cavium: Set the correct dma max segment size for mmc_host sound: fix a memory leak bug usb: iowarrior: fix deadlock on disconnect Revert "USB: rio500: simplify locking" usb: usbfs: fix double-free of usb memory upon submiturb error driver core: platform: return -ENXIO for missing GpioInt crypto: ccp - Ignore tag length when decrypting GCM ciphertext crypto: ccp - Add support for valid authsize values less than 16 crypto: ccp - Fix oops by properly managing allocated structures Staging: fbtft: Fix reset assertion when using gpio descriptor Staging: fbtft: Fix probing of gpio descriptor staging: android: ion: Bail out upon SIGKILL when allocating memory. staging: wilc1000: flush the workqueue before deinit the host staging: gasket: apex: fix copy-paste typo iio: adc: max9611: Fix misuse of GENMASK macro iio: adc: gyroadc: fix uninitialized return code iio: imu: mpu6050: add missing available scan masks iio: cros_ec_accel_legacy: Fix incorrect channel setting IIO: Ingenic JZ47xx: Set clock divider on probe Revert "PCI: Add missing link delays required by the PCIe spec" ** Affects: linux (Ubuntu) Importance: Undecided Status: Confirmed ** Affects: linux (Ubuntu Eoan) Importance: Undecided Status: Confirmed ** Tags: kernel-stable-tracking-bug ** Changed in: linux (Ubuntu) Status: New => Confirmed ** Tags added: kernel-stable-tracking-bug ** Also affects: linux (Ubuntu Eoan) Importance: Undecided Status: Confirmed -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/1841110 Title: Eoan update: v5.2.9 upstream stable release Status in linux package in Ubuntu: Confirmed Status in linux source package in Eoan: Confirmed Bug description: SRU Justification Impact: The upstream process for stable tree updates is quite similar in scope to the Ubuntu SRU process, e.g., each patch has to demonstrably fix a bug, and each patch is vetted by upstream by originating either directly from a mainline/stable Linux tree or a minimally backported form of that patch. The following upstream stable patches should be included in the Ubuntu kernel: v5.2.9 upstream stable release from git://git.kernel.org/ Linux 5.2.9 iwlwifi: mvm: fix version check for GEO_TX_POWER_LIMIT support iwlwifi: mvm: don't send GEO_TX_POWER_LIMIT on version < 41 iwlwifi: mvm: fix a use-after-free bug in iwl_mvm_tx_tso_segment iwlwifi: mvm: fix an out-of-bound access iwlwifi: don't unmap as page memory that was mapped as single mwifiex: fix 802.11n/WPA detection KVM: arm/arm64: Sync ICH_VMCR_EL2 back when about to block KVM: Fix leak vCPU's VMCS value into other pCPU NFSv4: Fix an Oops in nfs4_do_setattr NFSv4: Check the return value of update_open_stateid() NFSv4: Fix delegation state recovery smb3: send CAP_DFS capability during session setup SMB3: Fix deadlock in validate negotiate hits reconnect dax: dax_layout_busy_page() should not unmap cow pages mac80211: don't WARN on short WMM parameters from AP ALSA: hda - Workaround for crackled sound on AMD controller (1022:1457) ALSA: hda - Don't override global PCM hw info flag ALSA: hiface: fix multiple memory leak bugs ALSA: firewire: fix a memory leak bug drm/i915: Fix wrong escape clock divisor init for GLK hwmon: (lm75) Fixup tmp75b clr_mask hwmon: (nct7802) Fix wrong detection of in4 presence can: peak_usb: pcan_usb_fd: Fix info-leaks to USB devices can: peak_usb: pcan_usb_pro: Fix info-leaks to USB devices KVM/nSVM: properly map nested VMCB ALSA: usb-audio: fix a memory leak bug HID: sony: Fix race condition between rumble and device remove. gen_compile_commands: lower the entry count threshold s390/dma: provide proper ARCH_ZONE_DMA_BITS value perf/core: Fix creating kernel counters for PMUs that override event->cpu perf/x86: Apply more accurate check on hypervisor platform perf/x86/intel: Fix invalid Bit 13 for Icelake MSR_OFFCORE_RSP_x register perf/x86/intel: Fix SLOTS PEBS event constraint tty/ldsem, locking/rwsem: Add missing ACQUIRE to read_failed sleep loop test_firmware: fix a memory leak bug scsi: scsi_dh_alua: always use a 2 second delay before retrying RTPG scsi: ibmvfc: fix WARN_ON during event pool release scsi: megaraid_sas: fix panic on loading firmware crashdump ARM: dts: bcm: bcm47094: add missing #cells for mdio-bus-mux ARM: davinci: fix sleep.S build error on ARMv4 nvme: fix memory leak caused by incorrect subsystem free nvme: ignore subnqn for ADATA SX6000LNP ACPI/IORT: Fix off-by-one check in iort_dev_find_its_id() drbd: dynamically allocate shash descriptor perf probe: Avoid calling freeing routine multiple times for same pointer perf session: Fix loading of compressed data split across adjacent records perf stat: Fix segfault for event group in repeat mode perf tools: Fix proper buffer size for feature processing perf script: Fix off by one in brstackinsn IPC computation ALSA: compress: Be more restrictive about when a drain is allowed ALSA: compress: Don't allow paritial drain operations on capture streams ALSA: compress: Prevent bypasses of set_params ALSA: compress: Fix regression on compressed capture streams s390/qdio: add sanity checks to the fast-requeue path cpufreq/pasemi: fix use-after-free in pas_cpufreq_cpu_init() arm64: dts: imx8mq: fix SAI compatible arm64: dts: imx8mm: Correct SAI3 RXC/TXFS pin's mux option #1 drm: silence variable 'conn' set but not used drm/msm/dpu: Correct dpu encoder spinlock initialization iommu/vt-d: Check if domain->pgd was allocated arm64: entry: SP Alignment Fault doesn't write to FAR_EL1 arm64: Force SSBS on context switch powerpc/papr_scm: Force a scm-unbind if initial scm-bind fails ARM: dts: imx6ul: fix clock frequency property name of I2C buses hwmon: (nct6775) Fix register address and added missed tolerance for nct6106 hwmon: (occ) Fix division by zero issue allocate_flower_entry: should check for null deref mac80211: don't warn about CW params when not using them mac80211: fix possible memory leak in ieee80211_assign_beacon nl80211: fix NL80211_HE_MAX_CAPABILITY_LEN iscsi_ibft: make ISCSI_IBFT dependson ACPI instead of ISCSI_IBFT_FIND drm/amd/display: Increase size of audios array drm/amd/display: Only enable audio if speaker allocation exists drm/amd/display: Fix dc_create failure handling and 666 color depths drm/amd/display: allocate 4 ddc engines for RV2 drm/amd/display: put back front end initialization sequence drm/amd/display: use encoder's engine id to find matched free audio device drm/amd/display: fix DMCU hang when going into Modern Standby drm/amd/display: Wait for backlight programming completion in set backlight level drm/amd/display: Clock does not lower in Updateplanes drm/amd/display: No audio endpoint for Dell MST display netfilter: nf_tables: Support auto-loading for inet nat rq-qos: use a mb for got_token rq-qos: set ourself TASK_UNINTERRUPTIBLE after we schedule rq-qos: don't reset has_sleepers on spurious wakeups scripts/sphinx-pre-install: fix latexmk dependencies scripts/sphinx-pre-install: don't use LaTeX with CentOS 7 scripts/sphinx-pre-install: fix script for RHEL/CentOS netfilter: nft_hash: fix symhash with modulus one netfilter: conntrack: always store window size un-scaled netfilter: nf_tables: fix module autoload for redir netfilter: Fix rpfilter dropping vrf packets by mistake vfio-ccw: Don't call cp_free if we are processing a channel program vfio-ccw: Set pa_nr to 0 if memory allocation fails for pa_iova_pfn netfilter: nfnetlink: avoid deadlock due to synchronous request_module powerpc: fix off by one in max_zone_pfn initialization for ZONE_DMA can: peak_usb: fix potential double kfree_skb() can: flexcan: fix an use-after-free in flexcan_setup_stop_mode() can: flexcan: fix stop mode acknowledgment can: rcar_canfd: fix possible IRQ storm on high load usb: typec: tcpm: Ignore unsupported/unknown alternate mode requests usb: typec: tcpm: Add NULL check before dereferencing config usb: typec: tcpm: remove tcpm dir if no children usb: typec: tcpm: free log buf memory when remove debug file usb: typec: ucsi: ccg: Fix uninitilized symbol error usb: yurex: Fix use-after-free in yurex_delete usb: host: xhci-rcar: Fix timeout in xhci_suspend() gfs2: gfs2_walk_metadata fix genirq/affinity: Create affinity mask for single vector x86/purgatory: Use CFLAGS_REMOVE rather than reset KBUILD_CFLAGS x86/purgatory: Do not use __builtin_memcpy and __builtin_memset perf record: Fix module size on s390 perf db-export: Fix thread__exec_comm() perf annotate: Fix s390 gap between kernel end and module start coresight: Fix DEBUG_LOCKS_WARN_ON for uninitialized attribute mm/vmalloc: Sync unmappings in __purge_vmap_area_lazy() x86/mm: Sync also unmappings in vmalloc_sync_all() x86/mm: Check for pfn instead of page in vmalloc_sync_one() Input: synaptics - enable RMI mode for HP Spectre X360 Input: elantech - enable SMBus on new (2018+) systems Input: usbtouchscreen - initialize PM mutex before using it bdev: Fixup error handling in blkdev_get() loop: set PF_MEMALLOC_NOIO for the worker thread mmc: cavium: Add the missing dma unmap when the dma has finished. mmc: cavium: Set the correct dma max segment size for mmc_host sound: fix a memory leak bug usb: iowarrior: fix deadlock on disconnect Revert "USB: rio500: simplify locking" usb: usbfs: fix double-free of usb memory upon submiturb error driver core: platform: return -ENXIO for missing GpioInt crypto: ccp - Ignore tag length when decrypting GCM ciphertext crypto: ccp - Add support for valid authsize values less than 16 crypto: ccp - Fix oops by properly managing allocated structures Staging: fbtft: Fix reset assertion when using gpio descriptor Staging: fbtft: Fix probing of gpio descriptor staging: android: ion: Bail out upon SIGKILL when allocating memory. staging: wilc1000: flush the workqueue before deinit the host staging: gasket: apex: fix copy-paste typo iio: adc: max9611: Fix misuse of GENMASK macro iio: adc: gyroadc: fix uninitialized return code iio: imu: mpu6050: add missing available scan masks iio: cros_ec_accel_legacy: Fix incorrect channel setting IIO: Ingenic JZ47xx: Set clock divider on probe Revert "PCI: Add missing link delays required by the PCIe spec" To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1841110/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp