Public bug reported:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
v5.4.118 upstream stable release
from git://git.kernel.org/
s390/disassembler: increase ebpf disasm buffer size
ACPI: custom_method: fix potential use-after-free issue
ACPI: custom_method: fix a possible memory leak
ftrace: Handle commands when closing set_ftrace_filter file
ARM: 9056/1: decompressor: fix BSS size calculation for LLVM ld.lld
arm64: dts: marvell: armada-37xx: add syscon compatible to NB clk node
arm64: dts: mt8173: fix property typo of 'phys' in dsi node
ecryptfs: fix kernel panic with null dev_name
mtd: spinand: core: add missing MODULE_DEVICE_TABLE()
mtd: rawnand: atmel: Update ecc_stats.corrected counter
erofs: add unsupported inode i_format check
spi: spi-ti-qspi: Free DMA resources
scsi: qla2xxx: Fix crash in qla2xxx_mqueuecommand()
scsi: mpt3sas: Block PCI config access from userspace during reset
mmc: uniphier-sd: Fix an error handling path in uniphier_sd_probe()
mmc: uniphier-sd: Fix a resource leak in the remove function
mmc: sdhci: Check for reset prior to DMA address unmap
mmc: sdhci-pci: Fix initialization of some SD cards for Intel BYT-based
controllers
mmc: block: Update ext_csd.cache_ctrl if it was written
mmc: block: Issue a cache flush only when it's enabled
mmc: core: Do a power cycle when the CMD11 fails
mmc: core: Set read only for SD cards with permanent write protect bit
mmc: core: Fix hanging on I/O during system suspend for removable cards
modules: mark ref_module static
modules: mark find_symbol static
modules: mark each_symbol_section static
modules: unexport __module_text_address
modules: unexport __module_address
modules: rename the licence field in struct symsearch to license
modules: return licensing information from find_symbol
modules: inherit TAINT_PROPRIETARY_MODULE
irqchip/gic-v3: Do not enable irqs when handling spurious interrups
cifs: Return correct error code from smb2_get_enc_key
btrfs: fix metadata extent leak after failure to create subvolume
intel_th: pci: Add Rocket Lake CPU support
posix-timers: Preserve return value in clock_adjtime32()
fbdev: zero-fill colormap in fbcmap.c
bus: ti-sysc: Probe for l4_wkup and l4_cfg interconnect devices first
staging: wimax/i2400m: fix byte-order issue
spi: ath79: always call chipselect function
spi: ath79: remove spi-master setup and cleanup assignment
crypto: api - check for ERR pointers in crypto_destroy_tfm()
crypto: qat - fix unmap invalid dma address
usb: gadget: uvc: add bInterval checking for HS mode
usb: webcam: Invalid size of Processing Unit Descriptor
genirq/matrix: Prevent allocation counter corruption
usb: gadget: f_uac2: validate input parameters
usb: gadget: f_uac1: validate input parameters
usb: dwc3: gadget: Ignore EP queue requests during bus reset
usb: xhci: Fix port minor revision
PCI: PM: Do not read power state in pci_enable_device_flags()
x86/build: Propagate $(CLANG_FLAGS) to $(REALMODE_FLAGS)
tee: optee: do not check memref size on return from Secure World
perf/arm_pmu_platform: Fix error handling
usb: xhci-mtk: support quirk to disable usb2 lpm
xhci: check control context is valid before dereferencing it.
xhci: fix potential array out of bounds with several interrupters
spi: dln2: Fix reference leak to master
spi: omap-100k: Fix reference leak to master
spi: qup: fix PM reference leak in spi_qup_remove()
usb: musb: fix PM reference leak in musb_irq_work()
usb: core: hub: Fix PM reference leak in usb_port_resume()
tty: n_gsm: check error while registering tty devices
intel_th: Consistency and off-by-one fix
phy: phy-twl4030-usb: Fix possible use-after-free in twl4030_usb_remove()
crypto: stm32/hash - Fix PM reference leak on stm32-hash.c
crypto: stm32/cryp - Fix PM reference leak on stm32-cryp.c
crypto: omap-aes - Fix PM reference leak on omap-aes.c
platform/x86: intel_pmc_core: Don't use global pmcdev in quirks
btrfs: convert logic BUG_ON()'s in replace_path to ASSERT()'s
drm: Added orientation quirk for OneGX1 Pro
drm/qxl: release shadow on shutdown
drm/amd/display: Check for DSC support instead of ASIC revision
drm/amd/display: Don't optimize bandwidth before disabling planes
scsi: lpfc: Fix incorrect dbde assignment when building target abts wqe
scsi: lpfc: Fix pt2pt connection does not recover after LOGO
scsi: target: pscsi: Fix warning in pscsi_complete_cmd()
media: ite-cir: check for receive overflow
media: drivers: media: pci: sta2x11: fix Kconfig dependency on GPIOLIB
media: imx: capture: Return -EPIPE from __capture_legacy_try_fmt()
power: supply: bq27xxx: fix power_avg for newer ICs
extcon: arizona: Fix some issues when HPDET IRQ fires after the jack has been
unplugged
extcon: arizona: Fix various races on driver unbind
media: media/saa7164: fix saa7164_encoder_register() memory leak bugs
media: gspca/sq905.c: fix uninitialized variable
power: supply: Use IRQF_ONESHOT
drm/amdgpu: mask the xgmi number of hops reported from psp to kfd
drm/amdkfd: Fix UBSAN shift-out-of-bounds warning
drm/amdgpu : Fix asic reset regression issue introduce by 8f211fe8ac7c4f
drm/amd/display: Fix UBSAN warning for not a valid value for type '_Bool'
drm/amd/display: fix dml prefetch validation
scsi: qla2xxx: Always check the return value of qla24xx_get_isp_stats()
drm/vkms: fix misuse of WARN_ON
scsi: qla2xxx: Fix use after free in bsg
mmc: sdhci-pci: Add PCI IDs for Intel LKF
ata: ahci: Disable SXS for Hisilicon Kunpeng920
scsi: smartpqi: Correct request leakage during reset operations
scsi: smartpqi: Add new PCI IDs
scsi: scsi_dh_alua: Remove check for ASC 24h in alua_rtpg()
media: em28xx: fix memory leak
media: vivid: update EDID
clk: socfpga: arria10: Fix memory leak of socfpga_clk on error return
power: supply: generic-adc-battery: fix possible use-after-free in gab_remove()
power: supply: s3c_adc_battery: fix possible use-after-free in
s3c_adc_bat_remove()
media: tc358743: fix possible use-after-free in tc358743_remove()
media: adv7604: fix possible use-after-free in adv76xx_remove()
media: i2c: adv7511-v4l2: fix possible use-after-free in adv7511_remove()
media: i2c: tda1997: Fix possible use-after-free in tda1997x_remove()
media: i2c: adv7842: fix possible use-after-free in adv7842_remove()
media: platform: sti: Fix runtime PM imbalance in regs_show
media: dvb-usb: fix memory leak in dvb_usb_adapter_init
media: gscpa/stv06xx: fix memory leak
sched/fair: Ignore percpu threads for imbalance pulls
drm/msm/mdp5: Configure PP_SYNC_HEIGHT to double the vtotal
drm/msm/mdp5: Do not multiply vclk line count by 100
drm/amdkfd: Fix cat debugfs hang_hws file causes system crash bug
amdgpu: avoid incorrect %hu format string
drm/amdgpu: fix NULL pointer dereference
scsi: lpfc: Fix crash when a REG_RPI mailbox fails triggering a LOGO response
scsi: lpfc: Fix error handling for mailboxes completed in MBX_POLL mode
scsi: lpfc: Remove unsupported mbox PORT_CAPABILITIES logic
mfd: arizona: Fix rumtime PM imbalance on error
scsi: libfc: Fix a format specifier
s390/archrandom: add parameter check for s390_arch_random_generate
ALSA: emu8000: Fix a use after free in snd_emu8000_create_mixer
ALSA: hda/conexant: Re-order CX5066 quirk table entries
ALSA: sb: Fix two use after free in snd_sb_qsound_build
ALSA: usb-audio: Explicitly set up the clock selector
ALSA: usb-audio: More constifications
ALSA: usb-audio: Add dB range mapping for Sennheiser Communications Headset PC 8
ALSA: hda/realtek: GA503 use same quirks as GA401
ALSA: hda/realtek: fix mic boost on Intel NUC 8
ALSA: hda/realtek: fix static noise on ALC285 Lenovo laptops
ALSA: hda/realtek: Add quirk for Intel Clevo PCx0Dx
btrfs: fix race when picking most recent mod log operation for an old root
arm64/vdso: Discard .note.gnu.property sections in vDSO
Makefile: Move -Wno-unused-but-set-variable out of GCC only block
virtiofs: fix memory leak in virtio_fs_probe()
ubifs: Only check replay with inode type to judge if inode linked
f2fs: fix to avoid out-of-bounds memory access
mlxsw: spectrum_mr: Update egress RIF list before route's action
openvswitch: fix stack OOB read while fragmenting IPv4 packets
ACPI: GTDT: Don't corrupt interrupt mappings on watchdow probe failure
NFS: Don't discard pNFS layout segments that are marked for return
NFSv4: Don't discard segments marked for return in _pnfs_return_layout()
Input: ili210x - add missing negation for touch indication on ili210x
jffs2: Fix kasan slab-out-of-bounds problem
powerpc/eeh: Fix EEH handling for hugepages in ioremap space.
powerpc: fix EDEADLOCK redefinition error in uapi/asm/errno.h
intel_th: pci: Add Alder Lake-M support
tpm: efi: Use local variable for calculating final log size
tpm: vtpm_proxy: Avoid reading host log when using a virtual device
crypto: rng - fix crypto_rng_reset() refcounting when !CRYPTO_STATS
md/raid1: properly indicate failure when ending a failed write request
dm raid: fix inconclusive reshape layout on fast raid4/5/6 table reload
sequences
fuse: fix write deadlock
security: commoncap: fix -Wstringop-overread warning
Fix misc new gcc warnings
jffs2: check the validity of dstlen in jffs2_zlib_compress()
Revert 337f13046ff0 ("futex: Allow FUTEX_CLOCK_REALTIME with FUTEX_WAIT op")
x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is supported
kbuild: update config_data.gz only when the content of .config is changed
ext4: fix check to prevent false positive report of incorrect used inodes
ext4: do not set SB_ACTIVE in ext4_orphan_cleanup()
ext4: fix error code in ext4_commit_super
media: dvbdev: Fix memory leak in dvb_media_device_free()
media: dvb-usb: Fix use-after-free access
media: dvb-usb: Fix memory leak at error in dvb_usb_device_init()
media: staging/intel-ipu3: Fix memory leak in imu_fmt
media: staging/intel-ipu3: Fix set_fmt error handling
media: staging/intel-ipu3: Fix race condition during set_fmt
usb: gadget: dummy_hcd: fix gpf in gadget_setup
usb: gadget: Fix double free of device descriptor pointers
usb: gadget/function/f_fs string table fix for multiple languages
usb: dwc3: gadget: Fix START_TRANSFER link state check
usb: dwc2: Fix session request interrupt handler
tty: fix memory leak in vc_deallocate
rsi: Use resume_noirq for SDIO
tracing: Map all PIDs to command lines
tracing: Restructure trace_clock_global() to never block
dm persistent data: packed struct should have an aligned() attribute too
dm space map common: fix division bug in sm_ll_find_free_block()
dm integrity: fix missing goto in bitmap_flush_interval error handling
dm rq: fix double free of blk_mq_tag_set in dev remove after table load fails
Linux 5.4.118
UBUNTU: upstream stable to v5.4.118
** Affects: linux (Ubuntu)
Importance: Undecided
Status: Invalid
** Affects: linux (Ubuntu Focal)
Importance: Medium
Assignee: Kamal Mostafa (kamalmostafa)
Status: In Progress
** Tags: kernel-stable-tracking-bug
** Changed in: linux (Ubuntu)
Status: New => Confirmed
** Tags added: kernel-stable-tracking-bug
** Also affects: linux (Ubuntu Focal)
Importance: Undecided
Status: New
** Changed in: linux (Ubuntu Focal)
Status: New => In Progress
** Changed in: linux (Ubuntu Focal)
Importance: Undecided => Medium
** Changed in: linux (Ubuntu Focal)
Assignee: (unassigned) => Kamal Mostafa (kamalmostafa)
** Changed in: linux (Ubuntu)
Status: Confirmed => Invalid
** Description changed:
+ SRU Justification
- SRU Justification
+ Impact:
+ The upstream process for stable tree updates is quite similar
+ in scope to the Ubuntu SRU process, e.g., each patch has to
+ demonstrably fix a bug, and each patch is vetted by upstream
+ by originating either directly from a mainline/stable Linux tree or
+ a minimally backported form of that patch. The following upstream
+ stable patches should be included in the Ubuntu kernel:
- Impact:
- The upstream process for stable tree updates is quite similar
- in scope to the Ubuntu SRU process, e.g., each patch has to
- demonstrably fix a bug, and each patch is vetted by upstream
- by originating either directly from a mainline/stable Linux tree or
- a minimally backported form of that patch. The following upstream
- stable patches should be included in the Ubuntu kernel:
+ v5.4.118 upstream stable release
+ from git://git.kernel.org/
- v5.4.118 upstream stable release
- from git://git.kernel.org/
+ s390/disassembler: increase ebpf disasm buffer size
+ ACPI: custom_method: fix potential use-after-free issue
+ ACPI: custom_method: fix a possible memory leak
+ ftrace: Handle commands when closing set_ftrace_filter file
+ ARM: 9056/1: decompressor: fix BSS size calculation for LLVM ld.lld
+ arm64: dts: marvell: armada-37xx: add syscon compatible to NB clk node
+ arm64: dts: mt8173: fix property typo of 'phys' in dsi node
+ ecryptfs: fix kernel panic with null dev_name
+ mtd: spinand: core: add missing MODULE_DEVICE_TABLE()
+ mtd: rawnand: atmel: Update ecc_stats.corrected counter
+ erofs: add unsupported inode i_format check
+ spi: spi-ti-qspi: Free DMA resources
+ scsi: qla2xxx: Fix crash in qla2xxx_mqueuecommand()
+ scsi: mpt3sas: Block PCI config access from userspace during reset
+ mmc: uniphier-sd: Fix an error handling path in uniphier_sd_probe()
+ mmc: uniphier-sd: Fix a resource leak in the remove function
+ mmc: sdhci: Check for reset prior to DMA address unmap
+ mmc: sdhci-pci: Fix initialization of some SD cards for Intel BYT-based
controllers
+ mmc: block: Update ext_csd.cache_ctrl if it was written
+ mmc: block: Issue a cache flush only when it's enabled
+ mmc: core: Do a power cycle when the CMD11 fails
+ mmc: core: Set read only for SD cards with permanent write protect bit
+ mmc: core: Fix hanging on I/O during system suspend for removable cards
+ modules: mark ref_module static
+ modules: mark find_symbol static
+ modules: mark each_symbol_section static
+ modules: unexport __module_text_address
+ modules: unexport __module_address
+ modules: rename the licence field in struct symsearch to license
+ modules: return licensing information from find_symbol
+ modules: inherit TAINT_PROPRIETARY_MODULE
+ irqchip/gic-v3: Do not enable irqs when handling spurious interrups
+ cifs: Return correct error code from smb2_get_enc_key
+ btrfs: fix metadata extent leak after failure to create subvolume
+ intel_th: pci: Add Rocket Lake CPU support
+ posix-timers: Preserve return value in clock_adjtime32()
+ fbdev: zero-fill colormap in fbcmap.c
+ bus: ti-sysc: Probe for l4_wkup and l4_cfg interconnect devices first
+ staging: wimax/i2400m: fix byte-order issue
+ spi: ath79: always call chipselect function
+ spi: ath79: remove spi-master setup and cleanup assignment
+ crypto: api - check for ERR pointers in crypto_destroy_tfm()
+ crypto: qat - fix unmap invalid dma address
+ usb: gadget: uvc: add bInterval checking for HS mode
+ usb: webcam: Invalid size of Processing Unit Descriptor
+ genirq/matrix: Prevent allocation counter corruption
+ usb: gadget: f_uac2: validate input parameters
+ usb: gadget: f_uac1: validate input parameters
+ usb: dwc3: gadget: Ignore EP queue requests during bus reset
+ usb: xhci: Fix port minor revision
+ PCI: PM: Do not read power state in pci_enable_device_flags()
+ x86/build: Propagate $(CLANG_FLAGS) to $(REALMODE_FLAGS)
+ tee: optee: do not check memref size on return from Secure World
+ perf/arm_pmu_platform: Fix error handling
+ usb: xhci-mtk: support quirk to disable usb2 lpm
+ xhci: check control context is valid before dereferencing it.
+ xhci: fix potential array out of bounds with several interrupters
+ spi: dln2: Fix reference leak to master
+ spi: omap-100k: Fix reference leak to master
+ spi: qup: fix PM reference leak in spi_qup_remove()
+ usb: musb: fix PM reference leak in musb_irq_work()
+ usb: core: hub: Fix PM reference leak in usb_port_resume()
+ tty: n_gsm: check error while registering tty devices
+ intel_th: Consistency and off-by-one fix
+ phy: phy-twl4030-usb: Fix possible use-after-free in twl4030_usb_remove()
+ crypto: stm32/hash - Fix PM reference leak on stm32-hash.c
+ crypto: stm32/cryp - Fix PM reference leak on stm32-cryp.c
+ crypto: omap-aes - Fix PM reference leak on omap-aes.c
+ platform/x86: intel_pmc_core: Don't use global pmcdev in quirks
+ btrfs: convert logic BUG_ON()'s in replace_path to ASSERT()'s
+ drm: Added orientation quirk for OneGX1 Pro
+ drm/qxl: release shadow on shutdown
+ drm/amd/display: Check for DSC support instead of ASIC revision
+ drm/amd/display: Don't optimize bandwidth before disabling planes
+ scsi: lpfc: Fix incorrect dbde assignment when building target abts wqe
+ scsi: lpfc: Fix pt2pt connection does not recover after LOGO
+ scsi: target: pscsi: Fix warning in pscsi_complete_cmd()
+ media: ite-cir: check for receive overflow
+ media: drivers: media: pci: sta2x11: fix Kconfig dependency on GPIOLIB
+ media: imx: capture: Return -EPIPE from __capture_legacy_try_fmt()
+ power: supply: bq27xxx: fix power_avg for newer ICs
+ extcon: arizona: Fix some issues when HPDET IRQ fires after the jack has been
unplugged
+ extcon: arizona: Fix various races on driver unbind
+ media: media/saa7164: fix saa7164_encoder_register() memory leak bugs
+ media: gspca/sq905.c: fix uninitialized variable
+ power: supply: Use IRQF_ONESHOT
+ drm/amdgpu: mask the xgmi number of hops reported from psp to kfd
+ drm/amdkfd: Fix UBSAN shift-out-of-bounds warning
+ drm/amdgpu : Fix asic reset regression issue introduce by 8f211fe8ac7c4f
+ drm/amd/display: Fix UBSAN warning for not a valid value for type '_Bool'
+ drm/amd/display: fix dml prefetch validation
+ scsi: qla2xxx: Always check the return value of qla24xx_get_isp_stats()
+ drm/vkms: fix misuse of WARN_ON
+ scsi: qla2xxx: Fix use after free in bsg
+ mmc: sdhci-pci: Add PCI IDs for Intel LKF
+ ata: ahci: Disable SXS for Hisilicon Kunpeng920
+ scsi: smartpqi: Correct request leakage during reset operations
+ scsi: smartpqi: Add new PCI IDs
+ scsi: scsi_dh_alua: Remove check for ASC 24h in alua_rtpg()
+ media: em28xx: fix memory leak
+ media: vivid: update EDID
+ clk: socfpga: arria10: Fix memory leak of socfpga_clk on error return
+ power: supply: generic-adc-battery: fix possible use-after-free in
gab_remove()
+ power: supply: s3c_adc_battery: fix possible use-after-free in
s3c_adc_bat_remove()
+ media: tc358743: fix possible use-after-free in tc358743_remove()
+ media: adv7604: fix possible use-after-free in adv76xx_remove()
+ media: i2c: adv7511-v4l2: fix possible use-after-free in adv7511_remove()
+ media: i2c: tda1997: Fix possible use-after-free in tda1997x_remove()
+ media: i2c: adv7842: fix possible use-after-free in adv7842_remove()
+ media: platform: sti: Fix runtime PM imbalance in regs_show
+ media: dvb-usb: fix memory leak in dvb_usb_adapter_init
+ media: gscpa/stv06xx: fix memory leak
+ sched/fair: Ignore percpu threads for imbalance pulls
+ drm/msm/mdp5: Configure PP_SYNC_HEIGHT to double the vtotal
+ drm/msm/mdp5: Do not multiply vclk line count by 100
+ drm/amdkfd: Fix cat debugfs hang_hws file causes system crash bug
+ amdgpu: avoid incorrect %hu format string
+ drm/amdgpu: fix NULL pointer dereference
+ scsi: lpfc: Fix crash when a REG_RPI mailbox fails triggering a LOGO response
+ scsi: lpfc: Fix error handling for mailboxes completed in MBX_POLL mode
+ scsi: lpfc: Remove unsupported mbox PORT_CAPABILITIES logic
+ mfd: arizona: Fix rumtime PM imbalance on error
+ scsi: libfc: Fix a format specifier
+ s390/archrandom: add parameter check for s390_arch_random_generate
+ ALSA: emu8000: Fix a use after free in snd_emu8000_create_mixer
+ ALSA: hda/conexant: Re-order CX5066 quirk table entries
+ ALSA: sb: Fix two use after free in snd_sb_qsound_build
+ ALSA: usb-audio: Explicitly set up the clock selector
+ ALSA: usb-audio: More constifications
+ ALSA: usb-audio: Add dB range mapping for Sennheiser Communications Headset
PC 8
+ ALSA: hda/realtek: GA503 use same quirks as GA401
+ ALSA: hda/realtek: fix mic boost on Intel NUC 8
+ ALSA: hda/realtek: fix static noise on ALC285 Lenovo laptops
+ ALSA: hda/realtek: Add quirk for Intel Clevo PCx0Dx
+ btrfs: fix race when picking most recent mod log operation for an old root
+ arm64/vdso: Discard .note.gnu.property sections in vDSO
+ Makefile: Move -Wno-unused-but-set-variable out of GCC only block
+ virtiofs: fix memory leak in virtio_fs_probe()
+ ubifs: Only check replay with inode type to judge if inode linked
+ f2fs: fix to avoid out-of-bounds memory access
+ mlxsw: spectrum_mr: Update egress RIF list before route's action
+ openvswitch: fix stack OOB read while fragmenting IPv4 packets
+ ACPI: GTDT: Don't corrupt interrupt mappings on watchdow probe failure
+ NFS: Don't discard pNFS layout segments that are marked for return
+ NFSv4: Don't discard segments marked for return in _pnfs_return_layout()
+ Input: ili210x - add missing negation for touch indication on ili210x
+ jffs2: Fix kasan slab-out-of-bounds problem
+ powerpc/eeh: Fix EEH handling for hugepages in ioremap space.
+ powerpc: fix EDEADLOCK redefinition error in uapi/asm/errno.h
+ intel_th: pci: Add Alder Lake-M support
+ tpm: efi: Use local variable for calculating final log size
+ tpm: vtpm_proxy: Avoid reading host log when using a virtual device
+ crypto: rng - fix crypto_rng_reset() refcounting when !CRYPTO_STATS
+ md/raid1: properly indicate failure when ending a failed write request
+ dm raid: fix inconclusive reshape layout on fast raid4/5/6 table reload
sequences
+ fuse: fix write deadlock
+ security: commoncap: fix -Wstringop-overread warning
+ Fix misc new gcc warnings
+ jffs2: check the validity of dstlen in jffs2_zlib_compress()
+ Revert 337f13046ff0 ("futex: Allow FUTEX_CLOCK_REALTIME with FUTEX_WAIT op")
+ x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is supported
+ kbuild: update config_data.gz only when the content of .config is changed
+ ext4: fix check to prevent false positive report of incorrect used inodes
+ ext4: do not set SB_ACTIVE in ext4_orphan_cleanup()
+ ext4: fix error code in ext4_commit_super
+ media: dvbdev: Fix memory leak in dvb_media_device_free()
+ media: dvb-usb: Fix use-after-free access
+ media: dvb-usb: Fix memory leak at error in dvb_usb_device_init()
+ media: staging/intel-ipu3: Fix memory leak in imu_fmt
+ media: staging/intel-ipu3: Fix set_fmt error handling
+ media: staging/intel-ipu3: Fix race condition during set_fmt
+ usb: gadget: dummy_hcd: fix gpf in gadget_setup
+ usb: gadget: Fix double free of device descriptor pointers
+ usb: gadget/function/f_fs string table fix for multiple languages
+ usb: dwc3: gadget: Fix START_TRANSFER link state check
+ usb: dwc2: Fix session request interrupt handler
+ tty: fix memory leak in vc_deallocate
+ rsi: Use resume_noirq for SDIO
+ tracing: Map all PIDs to command lines
+ tracing: Restructure trace_clock_global() to never block
+ dm persistent data: packed struct should have an aligned() attribute too
+ dm space map common: fix division bug in sm_ll_find_free_block()
+ dm integrity: fix missing goto in bitmap_flush_interval error handling
+ dm rq: fix double free of blk_mq_tag_set in dev remove after table load fails
+ Linux 5.4.118
+ UBUNTU: upstream stable to v5.4.118
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1928825
Title:
Focal update: v5.4.118 upstream stable release
Status in linux package in Ubuntu:
Invalid
Status in linux source package in Focal:
In Progress
Bug description:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
v5.4.118 upstream stable release
from git://git.kernel.org/
s390/disassembler: increase ebpf disasm buffer size
ACPI: custom_method: fix potential use-after-free issue
ACPI: custom_method: fix a possible memory leak
ftrace: Handle commands when closing set_ftrace_filter file
ARM: 9056/1: decompressor: fix BSS size calculation for LLVM ld.lld
arm64: dts: marvell: armada-37xx: add syscon compatible to NB clk node
arm64: dts: mt8173: fix property typo of 'phys' in dsi node
ecryptfs: fix kernel panic with null dev_name
mtd: spinand: core: add missing MODULE_DEVICE_TABLE()
mtd: rawnand: atmel: Update ecc_stats.corrected counter
erofs: add unsupported inode i_format check
spi: spi-ti-qspi: Free DMA resources
scsi: qla2xxx: Fix crash in qla2xxx_mqueuecommand()
scsi: mpt3sas: Block PCI config access from userspace during reset
mmc: uniphier-sd: Fix an error handling path in uniphier_sd_probe()
mmc: uniphier-sd: Fix a resource leak in the remove function
mmc: sdhci: Check for reset prior to DMA address unmap
mmc: sdhci-pci: Fix initialization of some SD cards for Intel BYT-based
controllers
mmc: block: Update ext_csd.cache_ctrl if it was written
mmc: block: Issue a cache flush only when it's enabled
mmc: core: Do a power cycle when the CMD11 fails
mmc: core: Set read only for SD cards with permanent write protect bit
mmc: core: Fix hanging on I/O during system suspend for removable cards
modules: mark ref_module static
modules: mark find_symbol static
modules: mark each_symbol_section static
modules: unexport __module_text_address
modules: unexport __module_address
modules: rename the licence field in struct symsearch to license
modules: return licensing information from find_symbol
modules: inherit TAINT_PROPRIETARY_MODULE
irqchip/gic-v3: Do not enable irqs when handling spurious interrups
cifs: Return correct error code from smb2_get_enc_key
btrfs: fix metadata extent leak after failure to create subvolume
intel_th: pci: Add Rocket Lake CPU support
posix-timers: Preserve return value in clock_adjtime32()
fbdev: zero-fill colormap in fbcmap.c
bus: ti-sysc: Probe for l4_wkup and l4_cfg interconnect devices first
staging: wimax/i2400m: fix byte-order issue
spi: ath79: always call chipselect function
spi: ath79: remove spi-master setup and cleanup assignment
crypto: api - check for ERR pointers in crypto_destroy_tfm()
crypto: qat - fix unmap invalid dma address
usb: gadget: uvc: add bInterval checking for HS mode
usb: webcam: Invalid size of Processing Unit Descriptor
genirq/matrix: Prevent allocation counter corruption
usb: gadget: f_uac2: validate input parameters
usb: gadget: f_uac1: validate input parameters
usb: dwc3: gadget: Ignore EP queue requests during bus reset
usb: xhci: Fix port minor revision
PCI: PM: Do not read power state in pci_enable_device_flags()
x86/build: Propagate $(CLANG_FLAGS) to $(REALMODE_FLAGS)
tee: optee: do not check memref size on return from Secure World
perf/arm_pmu_platform: Fix error handling
usb: xhci-mtk: support quirk to disable usb2 lpm
xhci: check control context is valid before dereferencing it.
xhci: fix potential array out of bounds with several interrupters
spi: dln2: Fix reference leak to master
spi: omap-100k: Fix reference leak to master
spi: qup: fix PM reference leak in spi_qup_remove()
usb: musb: fix PM reference leak in musb_irq_work()
usb: core: hub: Fix PM reference leak in usb_port_resume()
tty: n_gsm: check error while registering tty devices
intel_th: Consistency and off-by-one fix
phy: phy-twl4030-usb: Fix possible use-after-free in twl4030_usb_remove()
crypto: stm32/hash - Fix PM reference leak on stm32-hash.c
crypto: stm32/cryp - Fix PM reference leak on stm32-cryp.c
crypto: omap-aes - Fix PM reference leak on omap-aes.c
platform/x86: intel_pmc_core: Don't use global pmcdev in quirks
btrfs: convert logic BUG_ON()'s in replace_path to ASSERT()'s
drm: Added orientation quirk for OneGX1 Pro
drm/qxl: release shadow on shutdown
drm/amd/display: Check for DSC support instead of ASIC revision
drm/amd/display: Don't optimize bandwidth before disabling planes
scsi: lpfc: Fix incorrect dbde assignment when building target abts wqe
scsi: lpfc: Fix pt2pt connection does not recover after LOGO
scsi: target: pscsi: Fix warning in pscsi_complete_cmd()
media: ite-cir: check for receive overflow
media: drivers: media: pci: sta2x11: fix Kconfig dependency on GPIOLIB
media: imx: capture: Return -EPIPE from __capture_legacy_try_fmt()
power: supply: bq27xxx: fix power_avg for newer ICs
extcon: arizona: Fix some issues when HPDET IRQ fires after the jack has been
unplugged
extcon: arizona: Fix various races on driver unbind
media: media/saa7164: fix saa7164_encoder_register() memory leak bugs
media: gspca/sq905.c: fix uninitialized variable
power: supply: Use IRQF_ONESHOT
drm/amdgpu: mask the xgmi number of hops reported from psp to kfd
drm/amdkfd: Fix UBSAN shift-out-of-bounds warning
drm/amdgpu : Fix asic reset regression issue introduce by 8f211fe8ac7c4f
drm/amd/display: Fix UBSAN warning for not a valid value for type '_Bool'
drm/amd/display: fix dml prefetch validation
scsi: qla2xxx: Always check the return value of qla24xx_get_isp_stats()
drm/vkms: fix misuse of WARN_ON
scsi: qla2xxx: Fix use after free in bsg
mmc: sdhci-pci: Add PCI IDs for Intel LKF
ata: ahci: Disable SXS for Hisilicon Kunpeng920
scsi: smartpqi: Correct request leakage during reset operations
scsi: smartpqi: Add new PCI IDs
scsi: scsi_dh_alua: Remove check for ASC 24h in alua_rtpg()
media: em28xx: fix memory leak
media: vivid: update EDID
clk: socfpga: arria10: Fix memory leak of socfpga_clk on error return
power: supply: generic-adc-battery: fix possible use-after-free in
gab_remove()
power: supply: s3c_adc_battery: fix possible use-after-free in
s3c_adc_bat_remove()
media: tc358743: fix possible use-after-free in tc358743_remove()
media: adv7604: fix possible use-after-free in adv76xx_remove()
media: i2c: adv7511-v4l2: fix possible use-after-free in adv7511_remove()
media: i2c: tda1997: Fix possible use-after-free in tda1997x_remove()
media: i2c: adv7842: fix possible use-after-free in adv7842_remove()
media: platform: sti: Fix runtime PM imbalance in regs_show
media: dvb-usb: fix memory leak in dvb_usb_adapter_init
media: gscpa/stv06xx: fix memory leak
sched/fair: Ignore percpu threads for imbalance pulls
drm/msm/mdp5: Configure PP_SYNC_HEIGHT to double the vtotal
drm/msm/mdp5: Do not multiply vclk line count by 100
drm/amdkfd: Fix cat debugfs hang_hws file causes system crash bug
amdgpu: avoid incorrect %hu format string
drm/amdgpu: fix NULL pointer dereference
scsi: lpfc: Fix crash when a REG_RPI mailbox fails triggering a LOGO response
scsi: lpfc: Fix error handling for mailboxes completed in MBX_POLL mode
scsi: lpfc: Remove unsupported mbox PORT_CAPABILITIES logic
mfd: arizona: Fix rumtime PM imbalance on error
scsi: libfc: Fix a format specifier
s390/archrandom: add parameter check for s390_arch_random_generate
ALSA: emu8000: Fix a use after free in snd_emu8000_create_mixer
ALSA: hda/conexant: Re-order CX5066 quirk table entries
ALSA: sb: Fix two use after free in snd_sb_qsound_build
ALSA: usb-audio: Explicitly set up the clock selector
ALSA: usb-audio: More constifications
ALSA: usb-audio: Add dB range mapping for Sennheiser Communications Headset
PC 8
ALSA: hda/realtek: GA503 use same quirks as GA401
ALSA: hda/realtek: fix mic boost on Intel NUC 8
ALSA: hda/realtek: fix static noise on ALC285 Lenovo laptops
ALSA: hda/realtek: Add quirk for Intel Clevo PCx0Dx
btrfs: fix race when picking most recent mod log operation for an old root
arm64/vdso: Discard .note.gnu.property sections in vDSO
Makefile: Move -Wno-unused-but-set-variable out of GCC only block
virtiofs: fix memory leak in virtio_fs_probe()
ubifs: Only check replay with inode type to judge if inode linked
f2fs: fix to avoid out-of-bounds memory access
mlxsw: spectrum_mr: Update egress RIF list before route's action
openvswitch: fix stack OOB read while fragmenting IPv4 packets
ACPI: GTDT: Don't corrupt interrupt mappings on watchdow probe failure
NFS: Don't discard pNFS layout segments that are marked for return
NFSv4: Don't discard segments marked for return in _pnfs_return_layout()
Input: ili210x - add missing negation for touch indication on ili210x
jffs2: Fix kasan slab-out-of-bounds problem
powerpc/eeh: Fix EEH handling for hugepages in ioremap space.
powerpc: fix EDEADLOCK redefinition error in uapi/asm/errno.h
intel_th: pci: Add Alder Lake-M support
tpm: efi: Use local variable for calculating final log size
tpm: vtpm_proxy: Avoid reading host log when using a virtual device
crypto: rng - fix crypto_rng_reset() refcounting when !CRYPTO_STATS
md/raid1: properly indicate failure when ending a failed write request
dm raid: fix inconclusive reshape layout on fast raid4/5/6 table reload
sequences
fuse: fix write deadlock
security: commoncap: fix -Wstringop-overread warning
Fix misc new gcc warnings
jffs2: check the validity of dstlen in jffs2_zlib_compress()
Revert 337f13046ff0 ("futex: Allow FUTEX_CLOCK_REALTIME with FUTEX_WAIT op")
x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is supported
kbuild: update config_data.gz only when the content of .config is changed
ext4: fix check to prevent false positive report of incorrect used inodes
ext4: do not set SB_ACTIVE in ext4_orphan_cleanup()
ext4: fix error code in ext4_commit_super
media: dvbdev: Fix memory leak in dvb_media_device_free()
media: dvb-usb: Fix use-after-free access
media: dvb-usb: Fix memory leak at error in dvb_usb_device_init()
media: staging/intel-ipu3: Fix memory leak in imu_fmt
media: staging/intel-ipu3: Fix set_fmt error handling
media: staging/intel-ipu3: Fix race condition during set_fmt
usb: gadget: dummy_hcd: fix gpf in gadget_setup
usb: gadget: Fix double free of device descriptor pointers
usb: gadget/function/f_fs string table fix for multiple languages
usb: dwc3: gadget: Fix START_TRANSFER link state check
usb: dwc2: Fix session request interrupt handler
tty: fix memory leak in vc_deallocate
rsi: Use resume_noirq for SDIO
tracing: Map all PIDs to command lines
tracing: Restructure trace_clock_global() to never block
dm persistent data: packed struct should have an aligned() attribute too
dm space map common: fix division bug in sm_ll_find_free_block()
dm integrity: fix missing goto in bitmap_flush_interval error handling
dm rq: fix double free of blk_mq_tag_set in dev remove after table load fails
Linux 5.4.118
UBUNTU: upstream stable to v5.4.118
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1928825/+subscriptions
--
Mailing list: https://launchpad.net/~kernel-packages
Post to : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help : https://help.launchpad.net/ListHelp
