Public bug reported:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
v5.14.10 upstream stable release
from git://git.kernel.org/
Linux 5.14.10
HID: amd_sfh: Fix potential NULL pointer dereference - take 2
objtool: print out the symbol type when complaining about it
drivers: net: mhi: fix error path in mhi_net_newlink
netfilter: nf_tables: Fix oversized kvmalloc() calls
netfilter: conntrack: serialize hash resizes and cleanups
KVM: x86: Handle SRCU initialization failure during page track init
crypto: aesni - xts_crypt() return if walk.nbytes is 0
HID: usbhid: free raw_report buffers in usbhid_stop
mm: don't allow oversized kvmalloc() calls
netfilter: ipset: Fix oversized kvmalloc() calls
HID: betop: fix slab-out-of-bounds Write in betop_probe
usb: hso: remove the bailout parameter
NIOS2: setup.c: drop unused variable 'dram_start'
net: udp: annotate data race around udp_sk(sk)->corkflag
HID: u2fzero: ignore incomplete packets without data
ext4: flush s_error_work before journal destroy in ext4_fill_super
ext4: fix potential infinite loop in ext4_dx_readdir()
ext4: add error checking to ext4_ext_replay_set_iblocks()
ext4: fix reserved space counter leakage
ext4: limit the number of blocks in one ADD_RANGE TLV
ext4: fix loff_t overflow in ext4_max_bitmap_size()
ipack: ipoctal: fix module reference leak
ipack: ipoctal: fix missing allocation-failure check
ipack: ipoctal: fix tty-registration error handling
ipack: ipoctal: fix tty registration race
ipack: ipoctal: fix stack information leak
debugfs: debugfs_create_file_size(): use IS_ERR to check for error
driver core: fw_devlink: Improve handling of cyclic dependencies
elf: don't use MAP_FIXED_NOREPLACE for elf interpreter mappings
nvme: add command id quirk for apple controllers
kvm: fix objtool relocation warning
hwmon: (pmbus/mp2975) Add missed POUT attribute for page 1 mp2975 controller
hwmon: (occ) Fix P10 VRM temp sensors
sched/fair: Null terminate buffer when updating tunable_scaling
sched/fair: Add ancestors of unthrottled undecayed cfs_rq
perf/x86/intel: Update event constraints for ICX
objtool: Teach get_alt_entry() about more relocation types
af_unix: fix races in sk_peer_pid and sk_peer_cred accesses
net: stmmac: fix EEE init issue when paired with EEE capable PHYs
net: sched: flower: protect fl_walk() with rcu
net: phy: bcm7xxx: Fixed indirect MMD operations
net: hns3: disable firmware compatible features when uninstall PF
net: hns3: fix always enable rx vlan filter problem after selftest
net: hns3: reconstruct function hns3_self_test
net: hns3: fix show wrong state when add existing uc mac address
net: hns3: fix mixed flag HCLGE_FLAG_MQPRIO_ENABLE and HCLGE_FLAG_DCB_ENABLE
net: hns3: don't rollback when destroy mqprio fail
net: hns3: remove tc enable checking
net: hns3: do not allow call hns3_nic_net_open repeatedly
ixgbe: Fix NULL pointer dereference in ixgbe_xdp_setup
scsi: csiostor: Add module softdep on cxgb4
Revert "block, bfq: honor already-setup queue merges"
ionic: fix gathering of debug stats
net: ks8851: fix link error
bpf, x86: Fix bpf mapping of atomic fetch implementation
selftests, bpf: test_lwt_ip_encap: Really disable rp_filter
selftests, bpf: Fix makefile dependencies on libbpf
libbpf: Fix segfault in static linker for objects without BTF
bpf: Exempt CAP_BPF from checks against bpf_jit_limit
RDMA/hns: Add the check of the CQE size of the user space
RDMA/hns: Fix the size setting error when copying CQE in clean_cq()
RDMA/hfi1: Fix kernel pointer leak
e100: fix buffer overrun in e100_get_regs
e100: fix length calculation in e100_get_regs_len
dsa: mv88e6xxx: Include tagger overhead when setting MTU for DSA and CPU ports
dsa: mv88e6xxx: Fix MTU definition
dsa: mv88e6xxx: 6161: Use chip wide MAX MTU
drm/i915: Remove warning from the rps worker
drm/i915/request: fix early tracepoints
smsc95xx: fix stalled rx after link change
net: ipv4: Fix rtnexthop len when RTA_FLOW is present
net: enetc: fix the incorrect clearing of IF_MODE bits
hwmon: (tmp421) fix rounding for negative values
hwmon: (tmp421) report /PVLD condition as fault
RDMA/hns: Work around broken constant propagation in gcc 8
mptcp: allow changing the 'backup' bit when no sockets are open
mptcp: don't return sockets in foreign netns
sctp: break out if skb_header_pointer returns NULL in sctp_rcv_ootb
net: mdiobus: Set FWNODE_FLAG_NEEDS_CHILD_BOUND_ON_ADD for mdiobus parents
driver core: fw_devlink: Add support for FWNODE_FLAG_NEEDS_CHILD_BOUND_ON_ADD
mac80211-hwsim: fix late beacon hrtimer handling
mac80211: mesh: fix potentially unaligned access
mac80211: limit injected vht mcs/nss in ieee80211_parse_tx_radiotap
mac80211: Fix ieee80211_amsdu_aggregate frag_tail bug
Revert "mac80211: do not use low data rates for data frames with no ack flag"
netfilter: log: work around missing softdep backend module
netfilter: nf_tables: unlink table before deleting it
RDMA/irdma: Report correct WC error when there are MW bind errors
RDMA/irdma: Report correct WC error when transport retry counter is exceeded
RDMA/irdma: Validate number of CQ entries on create CQ
RDMA/irdma: Skip CQP ring during a reset
hwmon: (mlxreg-fan) Return non-zero value when fan current state is enforced
from sysfs
bpf, mips: Validate conditional branch offsets
RDMA/cma: Fix listener leak in rdma_cma_listen_on_all() failure
IB/cma: Do not send IGMP leaves for sendonly Multicast groups
bpf: Handle return value of BPF_PROG_TYPE_STRUCT_OPS prog
ipvs: check that ip_vs_conn_tab_bits is between 8 and 20
drm/i915/gvt: fix the usage of ww lock in gvt scheduler.
interconnect: qcom: sdm660: Correct NOC_QOS_PRIORITY shift and mask
interconnect: qcom: sdm660: Fix id of slv_cnoc_mnoc_cfg
drm/amdgpu: correct initial cp_hqd_quantum for gfx9
drm/amdgpu: check tiling flags when creating FB on GFX8-
drm/amdgpu: force exit gfxoff on sdma resume for rmb s0ix
drm/amd/display: Fix Display Flicker on embedded panels
drm/amd/display: Pass PCI deviceid into DC
drm/amd/display: initialize backlight_ramping_override to false
nbd: use shifts rather than multiplies
RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
RDMA/cma: Do not change route.addr.src_addr.ss_family
media: ir_toy: prevent device from hanging during transmit
mmc: renesas_sdhi: fix regression with hard reset on old SDHIs
KVM: VMX: Fix a TSX_CTRL_CPUID_CLEAR field mask issue
KVM: nVMX: Fix nested bus lock VM exit
KVM: SVM: fix missing sev_decommission in sev_receive_start
KVM: SEV: Allow some commands for mirror VM
KVM: SEV: Acquire vcpu mutex when updating VMSA
KVM: SEV: Pin guest memory for write for RECEIVE_UPDATE_DATA
KVM: SEV: Update svm_vm_copy_asid_from for SEV-ES
KVM: nVMX: Filter out all unsupported controls when eVMCS was activated
KVM: x86: Swap order of CPUID entry "index" vs. "significant flag" checks
KVM: x86: Clear KVM's cached guest CR3 at RESET/INIT
KVM: x86: nSVM: don't copy virt_ext from vmcb12
KVM: x86: Fix stack-out-of-bounds memory access from ioapic_write_indirect()
ptp: Fix ptp_kvm_getcrosststamp issue for x86 ptp_kvm
x86/kvmclock: Move this_cpu_pvti into kvmclock.h
platform/x86/intel: hid: Add DMI switches allow list
mac80211: fix use-after-free in CCMP/GCMP RX
scsi: ufs: Fix illegal offset in UPIU event trace
gpio: pca953x: do not ignore i2c errors
hwmon: (w83791d) Fix NULL pointer dereference by removing unnecessary structure
field
hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary structure
field
hwmon: (w83793) Fix NULL pointer dereference by removing unnecessary structure
field
hwmon: (tmp421) handle I2C errors
fs-verity: fix signed integer overflow with i_size near S64_MAX
ACPI: NFIT: Use fallback node id when numa info in NFIT table is incorrect
ALSA: hda/realtek: Quirks to enable speaker output for Lenovo Legion 7i
15IMHG05, Yoga 7i 14ITL5/15ITL5, and 13s Gen2 laptops.
ALSA: firewire-motu: fix truncated bytes in message tracepoints
ALSA: rawmidi: introduce SNDRV_RAWMIDI_IOCTL_USER_PVERSION
scsi: ufs: ufs-pci: Fix Intel LKF link stability
cpufreq: schedutil: Destroy mutex before kobject_put() frees the memory
drm/amdgpu: stop scheduler when calling hw_fini (v2)
drm/amdgpu: avoid over-handle of fence driver fini in s3 test (v2)
drm/amdgpu: adjust fence driver enable sequence
scsi: qla2xxx: Changes to support kdump kernel for NVMe BFS
cpufreq: schedutil: Use kobject release() method to free sugov_tunables
tty: Fix out-of-bound vmalloc access in imageblit
watchdog/sb_watchdog: fix compilation problem due to COMPILE_TEST
perf iostat: Fix Segmentation fault from NULL 'struct perf_counts_values *'
perf iostat: Use system-wide mode if the target cpu_list is unspecified
perf test: Fix DWARF unwind for optimized builds.
HID: amd_sfh: Fix potential NULL pointer dereference
kasan: fix Kconfig check of CC_HAS_WORKING_NOSANITIZE_ADDRESS
NIOS2: fix kconfig unmet dependency warning for SERIAL_CORE_CONSOLE
m68k: Update ->thread.esp0 before calling syscall_trace() in ret_from_signal
crypto: ccp - fix resource leaks in ccp_run_aes_gcm_cmd()
s390/qeth: fix deadlock during failing recovery
s390/qeth: Fix deadlock in remove_discipline
net/mlx4_en: Resolve bad operstate value
pinctrl: qcom: spmi-gpio: correct parent irqspec translation
ASoC: SOF: imx: imx8m: Bar index is only valid for IRAM and SRAM types
ASoC: SOF: imx: imx8: Bar index is only valid for IRAM and SRAM types
ASoC: SOF: Fix DSP oops stack dump output contents
scsi: elx: efct: Fix void-pointer-to-enum-cast warning for efc_nport_topology
ASoC: mediatek: common: handle NULL case in suspend/resume function
ASoC: fsl_xcvr: register platform component before registering cpu dai
ASoC: fsl_spdif: register platform component before registering cpu dai
ASoC: fsl_micfil: register platform component before registering cpu dai
ASoC: fsl_esai: register platform component before registering cpu dai
ASoC: fsl_sai: register platform component before registering cpu dai
media: s5p-jpeg: rename JPEG marker constants to prevent build warnings
media: cedrus: Fix SUNXI tile size calculation
media: hantro: Fix check for single irq
** Affects: linux-oem-5.14 (Ubuntu)
Importance: Undecided
Status: Confirmed
** Affects: linux-oem-5.14 (Ubuntu Focal)
Importance: Undecided
Status: New
** Tags: kernel-stable-tracking-bug
** Changed in: linux-oem-5.14 (Ubuntu)
Status: New => Confirmed
** Tags added: kernel-stable-tracking-bug
** Also affects: linux-oem-5.14 (Ubuntu Focal)
Importance: Undecided
Status: New
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux-oem-5.14 in Ubuntu.
https://bugs.launchpad.net/bugs/1947153
Title:
Focal update: v5.14.10 upstream stable release
Status in linux-oem-5.14 package in Ubuntu:
Confirmed
Status in linux-oem-5.14 source package in Focal:
New
Bug description:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
v5.14.10 upstream stable release
from git://git.kernel.org/
Linux 5.14.10
HID: amd_sfh: Fix potential NULL pointer dereference - take 2
objtool: print out the symbol type when complaining about it
drivers: net: mhi: fix error path in mhi_net_newlink
netfilter: nf_tables: Fix oversized kvmalloc() calls
netfilter: conntrack: serialize hash resizes and cleanups
KVM: x86: Handle SRCU initialization failure during page track init
crypto: aesni - xts_crypt() return if walk.nbytes is 0
HID: usbhid: free raw_report buffers in usbhid_stop
mm: don't allow oversized kvmalloc() calls
netfilter: ipset: Fix oversized kvmalloc() calls
HID: betop: fix slab-out-of-bounds Write in betop_probe
usb: hso: remove the bailout parameter
NIOS2: setup.c: drop unused variable 'dram_start'
net: udp: annotate data race around udp_sk(sk)->corkflag
HID: u2fzero: ignore incomplete packets without data
ext4: flush s_error_work before journal destroy in ext4_fill_super
ext4: fix potential infinite loop in ext4_dx_readdir()
ext4: add error checking to ext4_ext_replay_set_iblocks()
ext4: fix reserved space counter leakage
ext4: limit the number of blocks in one ADD_RANGE TLV
ext4: fix loff_t overflow in ext4_max_bitmap_size()
ipack: ipoctal: fix module reference leak
ipack: ipoctal: fix missing allocation-failure check
ipack: ipoctal: fix tty-registration error handling
ipack: ipoctal: fix tty registration race
ipack: ipoctal: fix stack information leak
debugfs: debugfs_create_file_size(): use IS_ERR to check for error
driver core: fw_devlink: Improve handling of cyclic dependencies
elf: don't use MAP_FIXED_NOREPLACE for elf interpreter mappings
nvme: add command id quirk for apple controllers
kvm: fix objtool relocation warning
hwmon: (pmbus/mp2975) Add missed POUT attribute for page 1 mp2975 controller
hwmon: (occ) Fix P10 VRM temp sensors
sched/fair: Null terminate buffer when updating tunable_scaling
sched/fair: Add ancestors of unthrottled undecayed cfs_rq
perf/x86/intel: Update event constraints for ICX
objtool: Teach get_alt_entry() about more relocation types
af_unix: fix races in sk_peer_pid and sk_peer_cred accesses
net: stmmac: fix EEE init issue when paired with EEE capable PHYs
net: sched: flower: protect fl_walk() with rcu
net: phy: bcm7xxx: Fixed indirect MMD operations
net: hns3: disable firmware compatible features when uninstall PF
net: hns3: fix always enable rx vlan filter problem after selftest
net: hns3: reconstruct function hns3_self_test
net: hns3: fix show wrong state when add existing uc mac address
net: hns3: fix mixed flag HCLGE_FLAG_MQPRIO_ENABLE and HCLGE_FLAG_DCB_ENABLE
net: hns3: don't rollback when destroy mqprio fail
net: hns3: remove tc enable checking
net: hns3: do not allow call hns3_nic_net_open repeatedly
ixgbe: Fix NULL pointer dereference in ixgbe_xdp_setup
scsi: csiostor: Add module softdep on cxgb4
Revert "block, bfq: honor already-setup queue merges"
ionic: fix gathering of debug stats
net: ks8851: fix link error
bpf, x86: Fix bpf mapping of atomic fetch implementation
selftests, bpf: test_lwt_ip_encap: Really disable rp_filter
selftests, bpf: Fix makefile dependencies on libbpf
libbpf: Fix segfault in static linker for objects without BTF
bpf: Exempt CAP_BPF from checks against bpf_jit_limit
RDMA/hns: Add the check of the CQE size of the user space
RDMA/hns: Fix the size setting error when copying CQE in clean_cq()
RDMA/hfi1: Fix kernel pointer leak
e100: fix buffer overrun in e100_get_regs
e100: fix length calculation in e100_get_regs_len
dsa: mv88e6xxx: Include tagger overhead when setting MTU for DSA and CPU ports
dsa: mv88e6xxx: Fix MTU definition
dsa: mv88e6xxx: 6161: Use chip wide MAX MTU
drm/i915: Remove warning from the rps worker
drm/i915/request: fix early tracepoints
smsc95xx: fix stalled rx after link change
net: ipv4: Fix rtnexthop len when RTA_FLOW is present
net: enetc: fix the incorrect clearing of IF_MODE bits
hwmon: (tmp421) fix rounding for negative values
hwmon: (tmp421) report /PVLD condition as fault
RDMA/hns: Work around broken constant propagation in gcc 8
mptcp: allow changing the 'backup' bit when no sockets are open
mptcp: don't return sockets in foreign netns
sctp: break out if skb_header_pointer returns NULL in sctp_rcv_ootb
net: mdiobus: Set FWNODE_FLAG_NEEDS_CHILD_BOUND_ON_ADD for mdiobus parents
driver core: fw_devlink: Add support for FWNODE_FLAG_NEEDS_CHILD_BOUND_ON_ADD
mac80211-hwsim: fix late beacon hrtimer handling
mac80211: mesh: fix potentially unaligned access
mac80211: limit injected vht mcs/nss in ieee80211_parse_tx_radiotap
mac80211: Fix ieee80211_amsdu_aggregate frag_tail bug
Revert "mac80211: do not use low data rates for data frames with no ack flag"
netfilter: log: work around missing softdep backend module
netfilter: nf_tables: unlink table before deleting it
RDMA/irdma: Report correct WC error when there are MW bind errors
RDMA/irdma: Report correct WC error when transport retry counter is exceeded
RDMA/irdma: Validate number of CQ entries on create CQ
RDMA/irdma: Skip CQP ring during a reset
hwmon: (mlxreg-fan) Return non-zero value when fan current state is enforced
from sysfs
bpf, mips: Validate conditional branch offsets
RDMA/cma: Fix listener leak in rdma_cma_listen_on_all() failure
IB/cma: Do not send IGMP leaves for sendonly Multicast groups
bpf: Handle return value of BPF_PROG_TYPE_STRUCT_OPS prog
ipvs: check that ip_vs_conn_tab_bits is between 8 and 20
drm/i915/gvt: fix the usage of ww lock in gvt scheduler.
interconnect: qcom: sdm660: Correct NOC_QOS_PRIORITY shift and mask
interconnect: qcom: sdm660: Fix id of slv_cnoc_mnoc_cfg
drm/amdgpu: correct initial cp_hqd_quantum for gfx9
drm/amdgpu: check tiling flags when creating FB on GFX8-
drm/amdgpu: force exit gfxoff on sdma resume for rmb s0ix
drm/amd/display: Fix Display Flicker on embedded panels
drm/amd/display: Pass PCI deviceid into DC
drm/amd/display: initialize backlight_ramping_override to false
nbd: use shifts rather than multiplies
RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests
RDMA/cma: Do not change route.addr.src_addr.ss_family
media: ir_toy: prevent device from hanging during transmit
mmc: renesas_sdhi: fix regression with hard reset on old SDHIs
KVM: VMX: Fix a TSX_CTRL_CPUID_CLEAR field mask issue
KVM: nVMX: Fix nested bus lock VM exit
KVM: SVM: fix missing sev_decommission in sev_receive_start
KVM: SEV: Allow some commands for mirror VM
KVM: SEV: Acquire vcpu mutex when updating VMSA
KVM: SEV: Pin guest memory for write for RECEIVE_UPDATE_DATA
KVM: SEV: Update svm_vm_copy_asid_from for SEV-ES
KVM: nVMX: Filter out all unsupported controls when eVMCS was activated
KVM: x86: Swap order of CPUID entry "index" vs. "significant flag" checks
KVM: x86: Clear KVM's cached guest CR3 at RESET/INIT
KVM: x86: nSVM: don't copy virt_ext from vmcb12
KVM: x86: Fix stack-out-of-bounds memory access from ioapic_write_indirect()
ptp: Fix ptp_kvm_getcrosststamp issue for x86 ptp_kvm
x86/kvmclock: Move this_cpu_pvti into kvmclock.h
platform/x86/intel: hid: Add DMI switches allow list
mac80211: fix use-after-free in CCMP/GCMP RX
scsi: ufs: Fix illegal offset in UPIU event trace
gpio: pca953x: do not ignore i2c errors
hwmon: (w83791d) Fix NULL pointer dereference by removing unnecessary
structure field
hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary
structure field
hwmon: (w83793) Fix NULL pointer dereference by removing unnecessary
structure field
hwmon: (tmp421) handle I2C errors
fs-verity: fix signed integer overflow with i_size near S64_MAX
ACPI: NFIT: Use fallback node id when numa info in NFIT table is incorrect
ALSA: hda/realtek: Quirks to enable speaker output for Lenovo Legion 7i
15IMHG05, Yoga 7i 14ITL5/15ITL5, and 13s Gen2 laptops.
ALSA: firewire-motu: fix truncated bytes in message tracepoints
ALSA: rawmidi: introduce SNDRV_RAWMIDI_IOCTL_USER_PVERSION
scsi: ufs: ufs-pci: Fix Intel LKF link stability
cpufreq: schedutil: Destroy mutex before kobject_put() frees the memory
drm/amdgpu: stop scheduler when calling hw_fini (v2)
drm/amdgpu: avoid over-handle of fence driver fini in s3 test (v2)
drm/amdgpu: adjust fence driver enable sequence
scsi: qla2xxx: Changes to support kdump kernel for NVMe BFS
cpufreq: schedutil: Use kobject release() method to free sugov_tunables
tty: Fix out-of-bound vmalloc access in imageblit
watchdog/sb_watchdog: fix compilation problem due to COMPILE_TEST
perf iostat: Fix Segmentation fault from NULL 'struct perf_counts_values *'
perf iostat: Use system-wide mode if the target cpu_list is unspecified
perf test: Fix DWARF unwind for optimized builds.
HID: amd_sfh: Fix potential NULL pointer dereference
kasan: fix Kconfig check of CC_HAS_WORKING_NOSANITIZE_ADDRESS
NIOS2: fix kconfig unmet dependency warning for SERIAL_CORE_CONSOLE
m68k: Update ->thread.esp0 before calling syscall_trace() in ret_from_signal
crypto: ccp - fix resource leaks in ccp_run_aes_gcm_cmd()
s390/qeth: fix deadlock during failing recovery
s390/qeth: Fix deadlock in remove_discipline
net/mlx4_en: Resolve bad operstate value
pinctrl: qcom: spmi-gpio: correct parent irqspec translation
ASoC: SOF: imx: imx8m: Bar index is only valid for IRAM and SRAM types
ASoC: SOF: imx: imx8: Bar index is only valid for IRAM and SRAM types
ASoC: SOF: Fix DSP oops stack dump output contents
scsi: elx: efct: Fix void-pointer-to-enum-cast warning for efc_nport_topology
ASoC: mediatek: common: handle NULL case in suspend/resume function
ASoC: fsl_xcvr: register platform component before registering cpu dai
ASoC: fsl_spdif: register platform component before registering cpu dai
ASoC: fsl_micfil: register platform component before registering cpu dai
ASoC: fsl_esai: register platform component before registering cpu dai
ASoC: fsl_sai: register platform component before registering cpu dai
media: s5p-jpeg: rename JPEG marker constants to prevent build warnings
media: cedrus: Fix SUNXI tile size calculation
media: hantro: Fix check for single irq
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux-oem-5.14/+bug/1947153/+subscriptions
--
Mailing list: https://launchpad.net/~kernel-packages
Post to : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help : https://help.launchpad.net/ListHelp
