** Changed in: linux (Ubuntu Hirsute)
       Status: In Progress => Fix Committed

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1938340

Title:
  Hirsute update: upstream stable patchset 2021-07-28

Status in linux package in Ubuntu:
  Invalid
Status in linux source package in Hirsute:
  Fix Committed

Bug description:
  SRU Justification

      Impact:
         The upstream process for stable tree updates is quite similar
         in scope to the Ubuntu SRU process, e.g., each patch has to
         demonstrably fix a bug, and each patch is vetted by upstream
         by originating either directly from a mainline/stable Linux tree or
         a minimally backported form of that patch. The following upstream
         stable patches should be included in the Ubuntu kernel:

         upstream stable patchset 2021-07-28

                  Ported from the following upstream stable releases:
                          v5.10.50, v5.12.17

         from git://git.kernel.org/

  Bluetooth: hci_qca: fix potential GPF
  Bluetooth: btqca: Don't modify firmware contents in-place
  Bluetooth: Remove spurious error message
  ALSA: usb-audio: fix rate on Ozone Z90 USB headset
  ALSA: usb-audio: Fix OOB access at proc output
  ALSA: firewire-motu: fix stream format for MOTU 8pre FireWire
  ALSA: usb-audio: scarlett2: Fix wrong resume call
  ALSA: intel8x0: Fix breakage at ac97 clock measurement
  ALSA: hda/realtek: Add another ALC236 variant support
  ALSA: hda/realtek: Improve fixup for HP Spectre x360 15-df0xxx
  ALSA: hda/realtek: Fix bass speaker DAC mapping for Asus UM431D
  ALSA: hda/realtek: Apply LED fixup for HP Dragonfly G1, too
  media: dvb-usb: fix wrong definition
  Input: usbtouchscreen - fix control-request directions
  net: can: ems_usb: fix use-after-free in ems_usb_disconnect()
  usb: gadget: eem: fix echo command packet response issue
  USB: cdc-acm: blacklist Heimann USB Appset device
  usb: dwc3: Fix debugfs creation flow
  usb: typec: Add the missed altmode_id_remove() in typec_register_altmode()
  xhci: solve a double free problem while doing s4
  gfs2: Fix underflow in gfs2_page_mkwrite
  gfs2: Fix error handling in init_statfs
  ntfs: fix validity check for file name attribute
  selftests/lkdtm: Avoid needing explicit sub-shell
  copy_page_to_iter(): fix ITER_DISCARD case
  iov_iter_fault_in_readable() should do nothing in xarray case
  Input: joydev - prevent use of not validated data in JSIOCSBTNMAP ioctl
  crypto: nx - Fix memcpy() over-reading in nonce
  crypto: ccp - Annotate SEV Firmware file names
  arm_pmu: Fix write counter incorrect in ARMv7 big-endian mode
  ARM: dts: ux500: Fix LED probing
  ARM: dts: at91: sama5d4: fix pinctrl muxing
  btrfs: send: fix invalid path for unlink operations after parent orphanization
  btrfs: compression: don't try to compress if we don't have enough pages
  btrfs: clear defrag status of a root if starting transaction fails
  ext4: cleanup in-core orphan list if ext4_truncate() failed to get a 
transaction handle
  ext4: fix kernel infoleak via ext4_extent_header
  ext4: fix overflow in ext4_iomap_alloc()
  ext4: return error code when ext4_fill_flex_info() fails
  ext4: correct the cache_nr in tracepoint ext4_es_shrink_exit
  ext4: remove check for zero nr_to_scan in ext4_es_scan()
  ext4: fix avefreec in find_group_orlov
  ext4: use ext4_grp_locked_error in mb_find_extent
  can: bcm: delay release of struct bcm_op after synchronize_rcu()
  can: gw: synchronize rcu operations before removing gw job entry
  can: isotp: isotp_release(): omit unintended hrtimer restart on socket release
  Revert "UBUNTU: SAUCE: can: j1939: delay release of j1939_priv after 
synchronize_rcu"
  can: j1939: j1939_sk_init(): set SOCK_RCU_FREE to call sk_destruct() after 
RCU is done
  can: peak_pciefd: pucan_handle_status(): fix a potential starvation issue in 
TX path
  mac80211: remove iwlwifi specific workaround that broke sta NDP tx
  SUNRPC: Fix the batch tasks count wraparound.
  SUNRPC: Should wake up the privileged task firstly.
  bus: mhi: Wait for M2 state during system resume
  mm/gup: fix try_grab_compound_head() race with split_huge_page()
  perf/smmuv3: Don't trample existing events with global filter
  KVM: nVMX: Handle split-lock #AC exceptions that happen in L2
  KVM: PPC: Book3S HV: Workaround high stack usage with clang
  KVM: x86/mmu: Treat NX as used (not reserved) for all !TDP shadow MMUs
  KVM: x86/mmu: Use MMU's role to detect CR4.SMEP value in nested NPT walk
  s390/cio: dont call css_wait_for_slow_path() inside a lock
  s390: mm: Fix secure storage access exception handling
  f2fs: Prevent swap file in LFS mode
  clk: agilex/stratix10/n5x: fix how the bypass_reg is handled
  clk: agilex/stratix10: remove noc_clk
  clk: agilex/stratix10: fix bypass representation
  rtc: stm32: Fix unbalanced clk_disable_unprepare() on probe error path
  iio: frequency: adf4350: disable reg and clk on error in adf4350_probe()
  iio: light: tcs3472: do not free unallocated IRQ
  iio: ltr501: mark register holding upper 8 bits of ALS_DATA{0,1} and PS_DATA 
as volatile, too
  iio: ltr501: ltr559: fix initialization of LTR501_ALS_CONTR
  iio: ltr501: ltr501_read_ps(): add missing endianness conversion
  iio: accel: bma180: Fix BMA25x bandwidth register values
  serial: mvebu-uart: fix calculation of clock divisor
  serial: sh-sci: Stop dmaengine transfer in sci_stop_tx()
  serial_cs: Add Option International GSM-Ready 56K/ISDN modem
  serial_cs: remove wrong GLOBETROTTER.cis entry
  ath9k: Fix kernel NULL pointer dereference during ath_reset_internal()
  ssb: sdio: Don't overwrite const buffer if block_write fails
  rsi: Assign beacon rate settings to the correct rate_info descriptor field
  rsi: fix AP mode with WPA failure due to encrypted EAPOL
  tracing/histograms: Fix parsing of "sym-offset" modifier
  tracepoint: Add tracepoint_probe_register_may_exist() for BPF tracing
  seq_buf: Make trace_seq_putmem_hex() support data longer than 8
  powerpc/stacktrace: Fix spurious "stale" traces in raise_backtrace_ipi()
  loop: Fix missing discard support when using LOOP_CONFIGURE
  evm: Execute evm_inode_init_security() only when an HMAC key is loaded
  evm: Refuse EVM_ALLOW_METADATA_WRITES only if an HMAC key is loaded
  fuse: Fix crash in fuse_dentry_automount() error path
  fuse: Fix crash if superblock of submount gets killed early
  fuse: Fix infinite loop in sget_fc()
  fuse: ignore PG_workingset after stealing
  fuse: check connected before queueing on fpq->io
  fuse: reject internal errno
  thermal/cpufreq_cooling: Update offline CPUs per-cpu thermal_pressure
  spi: Make of_register_spi_device also set the fwnode
  Add a reference to ucounts for each cred
  staging: media: rkvdec: fix pm_runtime_get_sync() usage count
  media: marvel-ccic: fix some issues when getting pm_runtime
  media: mdk-mdp: fix pm_runtime_get_sync() usage count
  media: s5p: fix pm_runtime_get_sync() usage count
  media: am437x: fix pm_runtime_get_sync() usage count
  media: sh_vou: fix pm_runtime_get_sync() usage count
  media: mtk-vcodec: fix PM runtime get logic
  media: s5p-jpeg: fix pm_runtime_get_sync() usage count
  media: sunxi: fix pm_runtime_get_sync() usage count
  media: sti/bdisp: fix pm_runtime_get_sync() usage count
  media: exynos4-is: fix pm_runtime_get_sync() usage count
  media: exynos-gsc: fix pm_runtime_get_sync() usage count
  spi: spi-loopback-test: Fix 'tx_buf' might be 'rx_buf'
  spi: spi-topcliff-pch: Fix potential double free in pch_spi_process_messages()
  spi: omap-100k: Fix the length judgment problem
  regulator: uniphier: Add missing MODULE_DEVICE_TABLE
  sched/core: Initialize the idle task with preemption disabled
  hwrng: exynos - Fix runtime PM imbalance on error
  crypto: nx - add missing MODULE_DEVICE_TABLE
  media: sti: fix obj-$(config) targets
  media: cpia2: fix memory leak in cpia2_usb_probe
  media: cobalt: fix race condition in setting HPD
  media: hevc: Fix dependent slice segment flags
  media: pvrusb2: fix warning in pvr2_i2c_core_done
  media: imx: imx7_mipi_csis: Fix logging of only error event counters
  crypto: qat - check return code of qat_hal_rd_rel_reg()
  crypto: qat - remove unused macro in FW loader
  crypto: qce: skcipher: Fix incorrect sg count for dma transfers
  arm64: perf: Convert snprintf to sysfs_emit
  sched/fair: Fix ascii art by relpacing tabs
  media: i2c: ov2659: Use clk_{prepare_enable,disable_unprepare}() to set xvclk 
on/off
  media: bt878: do not schedule tasklet when it is not setup
  media: em28xx: Fix possible memory leak of em28xx struct
  media: hantro: Fix .buf_prepare
  media: cedrus: Fix .buf_prepare
  media: v4l2-core: Avoid the dangling pointer in v4l2_fh_release
  media: bt8xx: Fix a missing check bug in bt878_probe
  media: st-hva: Fix potential NULL pointer dereferences
  crypto: hisilicon/sec - fixup 3des minimum key size declaration
  Makefile: fix GDB warning with CONFIG_RELR
  media: dvd_usb: memory leak in cinergyt2_fe_attach
  memstick: rtsx_usb_ms: fix UAF
  mmc: sdhci-sprd: use sdhci_sprd_writew
  mmc: via-sdmmc: add a check against NULL pointer dereference
  spi: meson-spicc: fix a wrong goto jump for avoiding memory leak.
  spi: meson-spicc: fix memory leak in meson_spicc_probe
  crypto: shash - avoid comparing pointers to exported functions under CFI
  media: dvb_net: avoid speculation from net slot
  media: siano: fix device register error path
  media: imx-csi: Skip first few frames from a BT.656 source
  hwmon: (max31790) Report correct current pwm duty cycles
  hwmon: (max31790) Fix pwmX_enable attributes
  drivers/perf: fix the missed ida_simple_remove() in ddr_perf_probe()
  KVM: PPC: Book3S HV: Fix TLB management on SMT8 POWER9 and POWER10 processors
  btrfs: fix error handling in __btrfs_update_delayed_inode
  btrfs: abort transaction if we fail to update the delayed inode
  btrfs: sysfs: fix format string for some discard stats
  btrfs: don't clear page extent mapped if we're not invalidating the full page
  btrfs: disable build on platforms having page size 256K
  locking/lockdep: Fix the dep path printing for backwards BFS
  lockding/lockdep: Avoid to find wrong lock dep path in check_irq_usage()
  KVM: s390: get rid of register asm usage
  regulator: mt6358: Fix vdram2 .vsel_mask
  regulator: da9052: Ensure enough delay time for .set_voltage_time_sel
  media: Fix Media Controller API config checks
  ACPI: video: use native backlight for GA401/GA502/GA503
  HID: do not use down_interruptible() when unbinding devices
  EDAC/ti: Add missing MODULE_DEVICE_TABLE
  ACPI: processor idle: Fix up C-state latency if not ordered
  hv_utils: Fix passing zero to 'PTR_ERR' warning
  lib: vsprintf: Fix handling of number field widths in vsscanf
  Input: goodix - platform/x86: touchscreen_dmi - Move upside down quirks to 
touchscreen_dmi.c
  platform/x86: touchscreen_dmi: Add an extra entry for the upside down Goodix 
touchscreen on Teclast X89 tablets
  platform/x86: touchscreen_dmi: Add info for the Goodix GT912 panel of 
TM800A550L tablets
  ACPI: EC: Make more Asus laptops use ECDT _GPE
  block_dump: remove block_dump feature in mark_inode_dirty()
  blk-mq: grab rq->refcount before calling ->fn in blk_mq_tagset_busy_iter
  blk-mq: clear stale request in tags->rq[] before freeing one request pool
  fs: dlm: cancel work sync othercon
  random32: Fix implicit truncation warning in prandom_seed_state()
  open: don't silently ignore unknown O-flags in openat2()
  drivers: hv: Fix missing error code in vmbus_connect()
  fs: dlm: fix memory leak when fenced
  ACPICA: Fix memory leak caused by _CID repair function
  ACPI: bus: Call kobject_put() in acpi_init() error path
  ACPI: resources: Add checks for ACPI IRQ override
  block: fix race between adding/removing rq qos and normal IO
  platform/x86: asus-nb-wmi: Revert "Drop duplicate DMI quirk structures"
  platform/x86: asus-nb-wmi: Revert "add support for ASUS ROG Zephyrus G14 and 
G15"
  platform/x86: toshiba_acpi: Fix missing error code in 
toshiba_acpi_setup_keyboard()
  nvme-pci: fix var. type for increasing cq_head
  nvmet-fc: do not check for invalid target port in nvmet_fc_handle_fcp_rqst()
  EDAC/Intel: Do not load EDAC driver when running as a guest
  PCI: hv: Add check for hyperv_initialized in init_hv_pci_drv()
  cifs: improve fallocate emulation
  ACPI: EC: trust DSDT GPE for certain HP laptop
  clocksource: Retry clock read if long delays detected
  clocksource: Check per-CPU clock synchronization when marked unstable
  tpm_tis_spi: add missing SPI device ID entries
  ACPI: tables: Add custom DSDT file as makefile prerequisite
  HID: wacom: Correct base usage for capacitive ExpressKey status bits
  cifs: fix missing spinlock around update to ses->status
  mailbox: qcom: Use PLATFORM_DEVID_AUTO to register platform device
  block: fix discard request merge
  kthread_worker: fix return value when kthread_mod_delayed_work() races with 
kthread_cancel_delayed_work_sync()
  ia64: mca_drv: fix incorrect array size calculation
  writeback, cgroup: increment isw_nr_in_flight before grabbing an inode
  spi: Allow to have all native CSs in use along with GPIOs
  spi: Avoid undefined behaviour when counting unused native CSs
  media: venus: Rework error fail recover logic
  media: s5p_cec: decrement usage count if disabled
  media: hantro: do a PM resume earlier
  crypto: ixp4xx - dma_unmap the correct address
  crypto: ixp4xx - update IV after requests
  crypto: ux500 - Fix error return code in hash_hw_final()
  sata_highbank: fix deferred probing
  pata_rb532_cf: fix deferred probing
  media: I2C: change 'RST' to "RSET" to fix multiple build errors
  sched/uclamp: Fix wrong implementation of cpu.uclamp.min
  sched/uclamp: Fix locking around cpu_util_update_eff()
  kbuild: Fix objtool dependency for 'OBJECT_FILES_NON_STANDARD_<obj> := n'
  pata_octeon_cf: avoid WARN_ON() in ata_host_activate()
  evm: fix writing <securityfs>/evm overflow
  x86/elf: Use _BITUL() macro in UAPI headers
  crypto: sa2ul - Fix leaks on failure paths with sa_dma_init()
  crypto: sa2ul - Fix pm_runtime enable in sa_ul_probe()
  crypto: ccp - Fix a resource leak in an error handling path
  media: rc: i2c: Fix an error message
  pata_ep93xx: fix deferred probing
  locking/lockdep: Reduce LOCKDEP dependency list
  media: rkvdec: Fix .buf_prepare
  media: exynos4-is: Fix a use after free in isp_video_release
  media: au0828: fix a NULL vs IS_ERR() check
  media: tc358743: Fix error return code in tc358743_probe_of()
  media: gspca/gl860: fix zero-length control requests
  m68k: atari: Fix ATARI_KBD_CORE kconfig unmet dependency warning
  media: siano: Fix out-of-bounds warnings in smscore_load_firmware_family2()
  regulator: fan53880: Fix vsel_mask setting for FAN53880_BUCK
  crypto: nitrox - fix unchecked variable in nitrox_register_interrupts
  crypto: omap-sham - Fix PM reference leak in omap sham ops
  crypto: x86/curve25519 - fix cpu feature checking logic in mod_exit
  crypto: sm2 - fix a memory leak in sm2
  mmc: usdhi6rol0: fix error return code in usdhi6_probe()
  arm64/mm: Fix ttbr0 values stored in struct thread_info for software-pan
  media: subdev: remove VIDIOC_DQEVENT_TIME32 handling
  media: s5p-g2d: Fix a memory leak on ctx->fh.m2m_ctx
  hwmon: (lm70) Use device_get_match_data()
  hwmon: (lm70) Revert "hwmon: (lm70) Add support for ACPI"
  hwmon: (max31722) Remove non-standard ACPI device IDs
  hwmon: (max31790) Fix fan speed reporting for fan7..12
  KVM: nVMX: Sync all PGDs on nested transition with shadow paging
  KVM: nVMX: Ensure 64-bit shift when checking VMFUNC bitmap
  KVM: nVMX: Don't clobber nested MMU's A/D status on EPTP switch
  KVM: x86/mmu: Fix return value in tdp_mmu_map_handle_target_level()
  perf/arm-cmn: Fix invalid pointer when access dtc object sharing the same IRQ 
number
  KVM: arm64: Don't zero the cycle count register when PMCR_EL0.P is set
  regulator: hi655x: Fix pass wrong pointer to config.driver_data
  btrfs: clear log tree recovering status if starting transaction fails
  x86/sev: Make sure IRQs are disabled while GHCB is active
  x86/sev: Split up runtime #VC handler for correct state tracking
  sched/rt: Fix RT utilization tracking during policy change
  sched/rt: Fix Deadline utilization tracking during policy change
  sched/uclamp: Fix uclamp_tg_restrict()
  lockdep: Fix wait-type for empty stack
  lockdep/selftests: Fix selftests vs PROVE_RAW_LOCK_NESTING
  spi: spi-sun6i: Fix chipselect/clock bug
  crypto: nx - Fix RCU warning in nx842_OF_upd_status
  psi: Fix race between psi_trigger_create/destroy
  media: v4l2-async: Clean v4l2_async_notifier_add_fwnode_remote_subdev
  media: video-mux: Skip dangling endpoints
  PM / devfreq: Add missing error code in devfreq_add_device()
  ACPI: PM / fan: Put fan device IDs into separate header file
  block: avoid double io accounting for flush request
  nvme-pci: look for StorageD3Enable on companion ACPI device instead
  ACPI: sysfs: Fix a buffer overrun problem with description_show()
  mark pstore-blk as broken
  UBUNTU: updateconfigs for PSTORE_BLK (BROKEN)
  clocksource/drivers/timer-ti-dm: Save and restore timer TIOCP_CFG
  extcon: extcon-max8997: Fix IRQ freeing at error path
  ACPI: APEI: fix synchronous external aborts in user-mode
  blk-wbt: introduce a new disable state to prevent false positive by 
rwb_enabled()
  blk-wbt: make sure throttle is enabled properly
  ACPI: Use DEVICE_ATTR_<RW|RO|WO> macros
  ACPI: bgrt: Fix CFI violation
  cpufreq: Make cpufreq_online() call driver->offline() on errors
  blk-mq: update hctx->dispatch_busy in case of real scheduler
  ocfs2: fix snprintf() checking
  dax: fix ENOMEM handling in grab_mapping_entry()
  mm/debug_vm_pgtable/basic: add validation for dirtiness after write protect
  mm/debug_vm_pgtable/basic: iterate over entire protection_map[]
  mm/debug_vm_pgtable: ensure THP availability via has_transparent_hugepage()
  mm: memcg/slab: properly set up gfp flags for objcg pointer array
  mm/page_alloc: fix counting of managed_pages
  xfrm: xfrm_state_mtu should return at least 1280 for ipv6
  drm/bridge/sii8620: fix dependency on extcon
  drm/bridge: Fix the stop condition of drm_bridge_chain_pre_enable()
  drm/amd/dc: Fix a missing check bug in dm_dp_mst_detect()
  drm/ast: Fix missing conversions to managed API
  video: fbdev: imxfb: Fix an error message
  net: mvpp2: Put fwnode in error case during ->probe()
  net: pch_gbe: Propagate error from devm_gpio_request_one()
  pinctrl: renesas: r8a7796: Add missing bias for PRESET# pin
  pinctrl: renesas: r8a77990: JTAG pins do not have pull-down capabilities
  drm/vmwgfx: Mark a surface gpu-dirty after the SVGA3dCmdDXGenMips command
  drm/vmwgfx: Fix cpu updates of coherent multisample surfaces
  net: qrtr: ns: Fix error return code in qrtr_ns_init()
  clk: meson: g12a: fix gp0 and hifi ranges
  net: ftgmac100: add missing error return code in ftgmac100_probe()
  drm: rockchip: set alpha_en to 0 if it is not used
  drm/rockchip: cdn-dp-core: add missing clk_disable_unprepare() on error in 
cdn_dp_grf_write()
  drm/rockchip: dsi: move all lane config except LCDC mux to bind()
  drm/rockchip: lvds: Fix an error handling path
  drm/rockchip: cdn-dp: fix sign extension on an int multiply for a u64 result
  mptcp: fix pr_debug in mptcp_token_new_connect
  mptcp: generate subflow hmac after mptcp_finish_join()
  RDMA/srp: Fix a recently introduced memory leak
  RDMA/rtrs-clt: Check state of the rtrs_clt_sess before reading its stats
  RDMA/rtrs: Do not reset hb_missed_max after re-connection
  RDMA/rtrs-srv: Fix memory leak of unfreed rtrs_srv_stats object
  RDMA/rtrs-srv: Fix memory leak when having multiple sessions
  RDMA/rtrs-clt: Check if the queue_depth has changed during a reconnection
  RDMA/rtrs-clt: Fix memory leak of not-freed sess->stats and stats->pcpu_stats
  ehea: fix error return code in ehea_restart_qps()
  clk: tegra30: Use 300MHz for video decoder by default
  xfrm: remove the fragment check for ipv6 beet mode
  net/sched: act_vlan: Fix modify to allow 0
  RDMA/core: Sanitize WQ state received from the userspace
  drm/pl111: depend on CONFIG_VEXPRESS_CONFIG
  RDMA/rxe: Fix failure during driver load
  drm/pl111: Actually fix CONFIG_VEXPRESS_CONFIG depends
  drm/vc4: hdmi: Fix error path of hpd-gpios
  clk: vc5: fix output disabling when enabling a FOD
  drm: qxl: ensure surf.data is ininitialized
  tools/bpftool: Fix error return code in do_batch()
  ath10k: go to path err_unsupported when chip id is not supported
  ath10k: add missing error return code in ath10k_pci_probe()
  wireless: carl9170: fix LEDS build errors & warnings
  ieee802154: hwsim: Fix possible memory leak in hwsim_subscribe_all_others
  clk: imx8mq: remove SYS PLL 1/2 clock gates
  wcn36xx: Move hal_buf allocation to devm_kmalloc in probe
  ssb: Fix error return code in ssb_bus_scan()
  brcmfmac: fix setting of station info chains bitmask
  brcmfmac: correctly report average RSSI in station info
  brcmfmac: Fix a double-free in brcmf_sdio_bus_reset
  brcmsmac: mac80211_if: Fix a resource leak in an error handling path
  cw1200: Revert unnecessary patches that fix unreal use-after-free bugs
  ath11k: Fix an error handling path in ath11k_core_fetch_board_data_api_n()
  ath10k: Fix an error code in ath10k_add_interface()
  ath11k: send beacon template after vdev_start/restart during csa
  netlabel: Fix memory leak in netlbl_mgmt_add_common
  RDMA/mlx5: Don't add slave port to unaffiliated list
  netfilter: nft_exthdr: check for IPv6 packet before further processing
  netfilter: nft_osf: check for TCP packet before further processing
  netfilter: nft_tproxy: restrict support to TCP and UDP transport protocols
  RDMA/rxe: Fix qp reference counting for atomic ops
  selftests/bpf: Whitelist test_progs.h from .gitignore
  xsk: Fix missing validation for skb and unaligned mode
  xsk: Fix broken Tx ring validation
  bpf: Fix libelf endian handling in resolv_btfids
  RDMA/rtrs-srv: Set minimal max_send_wr and max_recv_wr
  samples/bpf: Fix Segmentation fault for xdp_redirect command
  samples/bpf: Fix the error return code of xdp_redirect's main()
  mt76: fix possible NULL pointer dereference in mt76_tx
  mt76: mt7615: fix NULL pointer dereference in tx_prepare_skb()
  net: ethernet: aeroflex: fix UAF in greth_of_remove
  net: ethernet: ezchip: fix UAF in nps_enet_remove
  net: ethernet: ezchip: fix error handling
  vrf: do not push non-ND strict packets with a source LLA through packet taps 
again
  net: sched: add barrier to ensure correct ordering for lockless qdisc
  tls: prevent oversized sendfile() hangs by ignoring MSG_MORE
  netfilter: nf_tables_offload: check FLOW_DISSECTOR_KEY_BASIC in VLAN transfer 
logic
  pkt_sched: sch_qfq: fix qfq_change_class() error path
  xfrm: Fix xfrm offload fallback fail case
  iwlwifi: increase PNVM load timeout
  rtw88: 8822c: fix lc calibration timing
  vxlan: add missing rcu_read_lock() in neigh_reduce()
  ip6_tunnel: fix GRE6 segmentation
  net/ipv4: swap flow ports when validating source
  net: ti: am65-cpsw-nuss: Fix crash when changing number of TX queues
  tc-testing: fix list handling
  ieee802154: hwsim: Fix memory leak in hwsim_add_one
  ieee802154: hwsim: avoid possible crash in hwsim_del_edge_nl()
  bpf: Fix null ptr deref with mixed tail calls and subprogs
  drm/msm: Fix error return code in msm_drm_init()
  drm/msm/dpu: Fix error return code in dpu_mdss_init()
  mac80211: remove iwlwifi specific workaround NDPs of null_response
  net: bcmgenet: Fix attaching to PYH failed on RPi 4B
  ipv6: exthdrs: do not blindly use init_net
  can: j1939: j1939_sk_setsockopt(): prevent allocation of j1939 filter for 
optlen == 0
  bpf: Do not change gso_size during bpf_skb_change_proto()
  i40e: Fix error handling in i40e_vsi_open
  i40e: Fix autoneg disabling for non-10GBaseT links
  i40e: Fix missing rtnl locking when setting up pf switch
  Revert "ibmvnic: remove duplicate napi_schedule call in open function"
  ibmvnic: set ltb->buff to NULL after freeing
  ibmvnic: free tx_pool if tso_pool alloc fails
  RDMA/cma: Protect RMW with qp_mutex
  net: macsec: fix the length used to copy the key for offloading
  net: phy: mscc: fix macsec key length
  net: atlantic: fix the macsec key length
  ipv6: fix out-of-bound access in ip6_parse_tlv()
  e1000e: Check the PCIm state
  net: dsa: sja1105: fix NULL pointer dereference in sja1105_reload_cbs()
  bpfilter: Specify the log level for the kmsg message
  RDMA/cma: Fix incorrect Packet Lifetime calculation
  gve: Fix swapped vars when fetching max queues
  Revert "be2net: disable bh with spin_lock in be_process_mcc"
  Bluetooth: mgmt: Fix slab-out-of-bounds in tlv_data_is_valid
  Bluetooth: Fix Set Extended (Scan Response) Data
  Bluetooth: Fix handling of HCI_LE_Advertising_Set_Terminated event
  clk: actions: Fix UART clock dividers on Owl S500 SoC
  clk: actions: Fix SD clocks factor table on Owl S500 SoC
  clk: actions: Fix bisp_factor_table based clocks on Owl S500 SoC
  clk: actions: Fix AHPPREDIV-H-AHB clock chain on Owl S500 SoC
  clk: qcom: clk-alpha-pll: fix CAL_L write in alpha_pll_fabia_prepare
  clk: si5341: Wait for DEVICE_READY on startup
  clk: si5341: Avoid divide errors due to bogus register contents
  clk: si5341: Check for input clock presence and PLL lock on startup
  clk: si5341: Update initialization magic
  writeback: fix obtain a reference to a freeing memcg css
  net: lwtunnel: handle MTU calculation in forwading
  net: sched: fix warning in tcindex_alloc_perfect_hash
  net: tipc: fix FB_MTU eat two pages
  RDMA/mlx5: Don't access NULL-cleared mpi pointer
  RDMA/core: Always release restrack object
  MIPS: Fix PKMAP with 32-bit MIPS huge page support
  staging: fbtft: Rectify GPIO handling
  staging: fbtft: Don't spam logs when probe is deferred
  ASoC: rt5682: Disable irq on shutdown
  rcu: Invoke rcu_spawn_core_kthreads() from rcu_spawn_gp_kthread()
  serial: fsl_lpuart: don't modify arbitrary data on lpuart32
  serial: fsl_lpuart: remove RTSCTS handling from get_mctrl()
  serial: 8250_omap: fix a timeout loop condition
  tty: nozomi: Fix a resource leak in an error handling function
  mwifiex: re-fix for unaligned accesses
  iio: adis_buffer: do not return ints in irq handlers
  iio: adis16400: do not return ints in irq handlers
  iio: adis16475: do not return ints in irq handlers
  iio: accel: bma180: Fix buffer alignment in 
iio_push_to_buffers_with_timestamp()
  iio: accel: bma220: Fix buffer alignment in 
iio_push_to_buffers_with_timestamp()
  iio: accel: hid: Fix buffer alignment in iio_push_to_buffers_with_timestamp()
  iio: accel: kxcjk-1013: Fix buffer alignment in 
iio_push_to_buffers_with_timestamp()
  iio: accel: mxc4005: Fix overread of data and alignment issue.
  iio: accel: stk8312: Fix buffer alignment in 
iio_push_to_buffers_with_timestamp()
  iio: accel: stk8ba50: Fix buffer alignment in 
iio_push_to_buffers_with_timestamp()
  iio: adc: ti-ads1015: Fix buffer alignment in 
iio_push_to_buffers_with_timestamp()
  iio: adc: vf610: Fix buffer alignment in iio_push_to_buffers_with_timestamp()
  iio: gyro: bmg160: Fix buffer alignment in 
iio_push_to_buffers_with_timestamp()
  iio: humidity: am2315: Fix buffer alignment in 
iio_push_to_buffers_with_timestamp()
  iio: prox: srf08: Fix buffer alignment in iio_push_to_buffers_with_timestamp()
  iio: prox: pulsed-light: Fix buffer alignment in 
iio_push_to_buffers_with_timestamp()
  iio: prox: as3935: Fix buffer alignment in 
iio_push_to_buffers_with_timestamp()
  iio: magn: hmc5843: Fix buffer alignment in 
iio_push_to_buffers_with_timestamp()
  iio: magn: bmc150: Fix buffer alignment in 
iio_push_to_buffers_with_timestamp()
  iio: light: isl29125: Fix buffer alignment in 
iio_push_to_buffers_with_timestamp()
  iio: light: tcs3414: Fix buffer alignment in 
iio_push_to_buffers_with_timestamp()
  iio: light: tcs3472: Fix buffer alignment in 
iio_push_to_buffers_with_timestamp()
  iio: chemical: atlas: Fix buffer alignment in 
iio_push_to_buffers_with_timestamp()
  iio: cros_ec_sensors: Fix alignment of buffer in 
iio_push_to_buffers_with_timestamp()
  iio: potentiostat: lmp91000: Fix alignment of buffer in 
iio_push_to_buffers_with_timestamp()
  ASoC: rk3328: fix missing clk_disable_unprepare() on error in 
rk3328_platform_probe()
  ASoC: hisilicon: fix missing clk_disable_unprepare() on error in 
hi6210_i2s_startup()
  backlight: lm3630a_bl: Put fwnode in error case during ->probe()
  ASoC: rsnd: tidyup loop on rsnd_adg_clk_query()
  Input: hil_kbd - fix error return code in hil_dev_connect()
  perf scripting python: Fix tuple_set_u64()
  mtd: partitions: redboot: seek fis-index-block in the right node
  mtd: rawnand: arasan: Ensure proper configuration for the asserted target
  staging: mmal-vchiq: Fix incorrect static vchiq_instance.
  char: pcmcia: error out if 'num_bytes_read' is greater than 4 in 
set_protocol()
  firmware: stratix10-svc: Fix a resource leak in an error handling path
  tty: nozomi: Fix the error handling path of 'nozomi_card_init()'
  leds: class: The -ENOTSUPP should never be seen by user space
  leds: lm3532: select regmap I2C API
  leds: lm36274: Put fwnode in error case during ->probe()
  leds: lm3692x: Put fwnode in any case during ->probe()
  leds: lm3697: Don't spam logs when probe is deferred
  leds: lp50xx: Put fwnode in error case during ->probe()
  scsi: FlashPoint: Rename si_flags field
  scsi: iscsi: Flush block work before unblock
  mfd: mp2629: Select MFD_CORE to fix build error
  mfd: rn5t618: Fix IRQ trigger by changing it to level mode
  fsi: core: Fix return of error values on failures
  fsi: scom: Reset the FSI2PIB engine for any error
  fsi: occ: Don't accept response from un-initialized OCC
  fsi/sbefifo: Clean up correct FIFO when receiving reset request from SBE
  fsi/sbefifo: Fix reset timeout
  visorbus: fix error return code in visorchipset_init()
  iommu/amd: Fix extended features logging
  s390: enable HAVE_IOREMAP_PROT
  s390: appldata depends on PROC_SYSCTL
  selftests: splice: Adjust for handler fallback removal
  iommu/dma: Fix IOVA reserve dma ranges
  ASoC: max98373-sdw: use first_hw_init flag on resume
  ASoC: rt1308-sdw: use first_hw_init flag on resume
  ASoC: rt5682-sdw: use first_hw_init flag on resume
  ASoC: rt700-sdw: use first_hw_init flag on resume
  ASoC: rt711-sdw: use first_hw_init flag on resume
  ASoC: rt715-sdw: use first_hw_init flag on resume
  ASoC: rt5682: fix getting the wrong device id when the suspend_stress_test
  ASoC: rt5682-sdw: set regcache_cache_only false before reading 
RT5682_DEVICE_ID
  ASoC: mediatek: mtk-btcvsd: Fix an error handling path in 
'mtk_btcvsd_snd_probe()'
  usb: gadget: f_fs: Fix setting of device and driver data cross-references
  usb: dwc2: Don't reset the core after setting turnaround time
  eeprom: idt_89hpesx: Put fwnode in matching case during ->probe()
  eeprom: idt_89hpesx: Restore printing the unsupported fwnode name
  thunderbolt: Bond lanes only when dual_link_port != NULL in 
alloc_dev_default()
  iio: adc: at91-sama5d2: Fix buffer alignment in 
iio_push_to_buffers_with_timestamp()
  iio: adc: hx711: Fix buffer alignment in iio_push_to_buffers_with_timestamp()
  iio: adc: mxs-lradc: Fix buffer alignment in 
iio_push_to_buffers_with_timestamp()
  iio: adc: ti-ads8688: Fix alignment of buffer in 
iio_push_to_buffers_with_timestamp()
  iio: magn: rm3100: Fix alignment of buffer in 
iio_push_to_buffers_with_timestamp()
  iio: light: vcnl4000: Fix buffer alignment in 
iio_push_to_buffers_with_timestamp()
  ASoC: fsl_spdif: Fix error handler with pm_runtime_enable
  staging: gdm724x: check for buffer overflow in gdm_lte_multi_sdu_pkt()
  staging: gdm724x: check for overflow in gdm_lte_netif_rx()
  staging: rtl8712: fix error handling in r871xu_drv_init
  staging: rtl8712: fix memory leak in rtl871x_load_fw_cb
  coresight: core: Fix use of uninitialized pointer
  staging: mt7621-dts: fix pci address for PCI memory range
  serial: 8250: Actually allow UPF_MAGIC_MULTIPLIER baud rates
  iio: light: vcnl4035: Fix buffer alignment in 
iio_push_to_buffers_with_timestamp()
  iio: prox: isl29501: Fix buffer alignment in 
iio_push_to_buffers_with_timestamp()
  ASoC: cs42l42: Correct definition of CS42L42_ADC_PDN_MASK
  of: Fix truncation of memory sizes on 32-bit platforms
  mtd: rawnand: marvell: add missing clk_disable_unprepare() on error in 
marvell_nfc_resume()
  habanalabs: Fix an error handling path in 'hl_pci_probe()'
  scsi: mpt3sas: Fix error return value in _scsih_expander_add()
  soundwire: stream: Fix test for DP prepare complete
  phy: uniphier-pcie: Fix updating phy parameters
  phy: ti: dm816x: Fix the error handling path in 'dm816x_usb_phy_probe()
  extcon: sm5502: Drop invalid register write in sm5502_reg_data
  extcon: max8997: Add missing modalias string
  powerpc/powernv: Fix machine check reporting of async store errors
  ASoC: atmel-i2s: Fix usage of capture and playback at the same time
  configfs: fix memleak in configfs_release_bin_file
  ASoC: Intel: sof_sdw: add SOF_RT715_DAI_ID_FIX for AlderLake
  ASoC: fsl_spdif: Fix unexpected interrupt after suspend
  leds: as3645a: Fix error return code in as3645a_parse_node()
  leds: ktd2692: Fix an error handling path
  serial: 8250: 8250_omap: Fix possible interrupt storm on K3 SoCs
  powerpc: Offline CPU in stop_this_cpu()
  powerpc/papr_scm: Properly handle UUID types and API
  powerpc/64s: Fix copy-paste data exposure into newly created tasks
  powerpc/papr_scm: Make 'perf_stats' invisible if perf-stats unavailable
  ALSA: firewire-lib: Fix 'amdtp_domain_start()' when no AMDTP_OUT_STREAM 
stream is found
  serial: mvebu-uart: do not allow changing baudrate when uartclk is not 
available
  serial: mvebu-uart: correctly calculate minimal possible baudrate
  arm64: dts: marvell: armada-37xx: Fix reg for standard variant of UART
  vfio/pci: Handle concurrent vma faults
  mm/pmem: avoid inserting hugepage PTE entry with fsdax if hugepage support is 
disabled
  mm/huge_memory.c: remove dedicated macro HPAGE_CACHE_INDEX_MASK
  mm/huge_memory.c: add missing read-only THP checking in 
transparent_hugepage_enabled()
  mm/huge_memory.c: don't discard hugepage if other processes are mapping it
  mm/hugetlb: use helper huge_page_order and pages_per_huge_page
  mm/hugetlb: remove redundant check in preparing and destroying gigantic page
  hugetlb: remove prep_compound_huge_page cleanup
  mm/z3fold: fix potential memory leak in z3fold_destroy_pool()
  mm/z3fold: use release_z3fold_page_locked() to release locked z3fold page
  lib/math/rational.c: fix divide by zero
  selftests/vm/pkeys: fix alloc_random_pkey() to make it really, really random
  selftests/vm/pkeys: handle negative sys_pkey_alloc() return code
  selftests/vm/pkeys: refill shadow register after implicit kernel write
  perf llvm: Return -ENOMEM when asprintf() fails
  csky: fix syscache.c fallthrough warning
  csky: syscache: Fixup duplicate cache flush
  exfat: handle wrong stream entry size in exfat_readdir()
  scsi: fc: Correct RHBA attributes length
  scsi: target: cxgbit: Unmap DMA buffer before calling target_execute_cmd()
  mailbox: qcom-ipcc: Fix IPCC mbox channel exhaustion
  fscrypt: don't ignore minor_hash when hash is 0
  fscrypt: fix derivation of SipHash keys on big endian CPUs
  tpm: Replace WARN_ONCE() with dev_err_once() in tpm_tis_status()
  erofs: fix error return code in erofs_read_superblock()
  block: return the correct bvec when checking for gaps
  io_uring: fix blocking inline submission
  mmc: block: Disable CMDQ on the ioctl path
  mmc: vub3000: fix control-request direction
  media: exynos4-is: remove a now unused integer
  scsi: core: Retry I/O for Notify (Enable Spinup) Required error
  crypto: qce - fix error return code in qce_skcipher_async_req_handle()
  s390: preempt: Fix preempt_count initialization
  cred: add missing return error code when set_cred_ucounts() failed
  iommu/dma: Fix compile warning in 32-bit builds
  powerpc/preempt: Don't touch the idle task's preempt_count during hotplug
  KVM: x86: Properly reset MMU context at vCPU RESET/INIT
  sched: Make the idle task quack like a per-CPU kthread
  ima: Don't remove security.ima if file must not be appraised
  media: dvbdev: fix error logic at dvb_register_device()
  sched/fair: Take thermal pressure into account while estimating energy
  KVM: arm64: Restore PMU configuration on first run
  btrfs: always abort the transaction if we abort a trans handle
  ACPI: PM: s2idle: Add missing LPS0 functions for AMD
  fs: dlm: reconnect if socket error report occurs
  fs: dlm: fix lowcomms_start error case
  HID: hid-input: add Surface Go battery quirk
  HID: sony: fix freeze when inserting ghlive ps3/wii dongles
  tools/power/x86/intel-speed-select: Fix uncore memory frequency display
  cifs: fix check of dfs interlinks
  smb3: fix uninitialized value for port in witness protocol move
  mm: define default MAX_PTRS_PER_* in include/pgtable.h
  media: i2c: ccs-core: return the right error code at suspend
  block: fix trace completion for chained bio
  swap: fix do_swap_page() race with swapoff
  drm/amd/display: fix potential gpu reset deadlock
  drm/amd/display: Avoid HPD IRQ in GPU reset state
  net: pxa168_eth: Fix a potential data race in pxa168_eth_remove
  selftests: tls: clean up uninitialized warnings
  scsi: iscsi: Stop queueing during ep_disconnect
  scsi: iscsi: Force immediate failure during shutdown
  scsi: iscsi: Use system_unbound_wq for destroy_work
  scsi: iscsi: Rel ref after iscsi_lookup_endpoint()
  ASoC: atmel-i2s: Set symmetric sample bits
  scsi: megaraid_sas: Send all non-RW I/Os for TYPE_ENCLOSURE device through 
firmware
  UBUNTU: upstream stable to v5.10.50, v5.12.17

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1938340/+subscriptions


-- 
Mailing list: https://launchpad.net/~kernel-packages
Post to     : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to