Public bug reported: SRU Justification
Impact: The upstream process for stable tree updates is quite similar in scope to the Ubuntu SRU process, e.g., each patch has to demonstrably fix a bug, and each patch is vetted by upstream by originating either directly from a mainline/stable Linux tree or a minimally backported form of that patch. The following upstream stable patches should be included in the Ubuntu kernel: upstream stable patchset 2021-11-02 Ported from the following upstream stable releases: v4.14.249, v4.19.209 from git://git.kernel.org/ ocfs2: drop acl cache for directories too usb: gadget: r8a66597: fix a loop in set_feature() usb: musb: tusb6010: uninitialized data in tusb_fifo_write_unaligned() cifs: fix incorrect check for null pointer in header_assemble xen/x86: fix PV trap handling on secondary processors usb-storage: Add quirk for ScanLogic SL11R-IDE older than 2.6c USB: serial: cp210x: add ID for GW Instek GDM-834x Digital Multimeter staging: greybus: uart: fix tty use after free Re-enable UAS for LaCie Rugged USB3-FW with fk quirk USB: serial: mos7840: remove duplicated 0xac24 device ID USB: serial: option: add Telit LN920 compositions USB: serial: option: remove duplicate USB device ID USB: serial: option: add device id for Foxconn T99W265 mcb: fix error handling in mcb_alloc_bus() serial: mvebu-uart: fix driver's tx_empty callback net: hso: fix muxed tty registration bnxt_en: Fix TX timeout when TX ring size is set to the smallest net/mlx4_en: Don't allow aRFS for encapsulated packets scsi: iscsi: Adjust iface sysfs attr detection thermal/core: Potential buffer overflow in thermal_build_list_of_policies() irqchip/gic-v3-its: Fix potential VPE leak on error md: fix a lock order reversal in md_alloc blktrace: Fix uaf in blk_trace access after removing by sysfs net: macb: fix use after free on rmmod net: stmmac: allow CSR clock of 300MHz m68k: Double cast io functions to unsigned long xen/balloon: use a kernel thread instead a workqueue compiler.h: Introduce absolute_pointer macro net: i825xx: Use absolute_pointer for memcpy from fixed memory location sparc: avoid stringop-overread errors qnx4: avoid stringop-overread errors parisc: Use absolute_pointer() to define PAGE0 arm64: Mark __stack_chk_guard as __ro_after_init alpha: Declare virt_to_phys and virt_to_bus parameter as pointer to volatile net: 6pack: Fix tx timeout and slot time spi: Fix tegra20 build with CONFIG_PM=n arm64: dts: marvell: armada-37xx: Extend PCIe MEM space PCI: aardvark: Fix checking for PIO Non-posted Request PCI: aardvark: Fix checking for PIO status xen/balloon: fix balloon kthread freezing qnx4: work around gcc false positive warning bug tty: Fix out-of-bound vmalloc access in imageblit cpufreq: schedutil: Use kobject release() method to free sugov_tunables cpufreq: schedutil: Destroy mutex before kobject_put() frees the memory mac80211: fix use-after-free in CCMP/GCMP RX ipvs: check that ip_vs_conn_tab_bits is between 8 and 20 mac80211: Fix ieee80211_amsdu_aggregate frag_tail bug mac80211: limit injected vht mcs/nss in ieee80211_parse_tx_radiotap sctp: break out if skb_header_pointer returns NULL in sctp_rcv_ootb hwmon: (tmp421) fix rounding for negative values e100: fix length calculation in e100_get_regs_len e100: fix buffer overrun in e100_get_regs scsi: csiostor: Add module softdep on cxgb4 af_unix: fix races in sk_peer_pid and sk_peer_cred accesses ipack: ipoctal: fix stack information leak ipack: ipoctal: fix tty registration race ipack: ipoctal: fix tty-registration error handling ipack: ipoctal: fix missing allocation-failure check ipack: ipoctal: fix module reference leak ext4: fix potential infinite loop in ext4_dx_readdir() net: udp: annotate data race around udp_sk(sk)->corkflag EDAC/synopsys: Fix wrong value type assignment for edac_mode ARM: 9077/1: PLT: Move struct plt_entries definition to header ARM: 9078/1: Add warn suppress parameter to arm_gen_branch_link() ARM: 9079/1: ftrace: Add MODULE_PLTS support ARM: 9098/1: ftrace: MODULE_PLT: Fix build problem without DYNAMIC_FTRACE arm64: Extend workaround for erratum 1024718 to all versions of Cortex-A55 hso: fix bailout in error case of probe usb: hso: fix error handling code of hso_create_net_device usb: hso: remove the bailout parameter crypto: ccp - fix resource leaks in ccp_run_aes_gcm_cmd() HID: betop: fix slab-out-of-bounds Write in betop_probe netfilter: ipset: Fix oversized kvmalloc() calls HID: usbhid: free raw_report buffers in usbhid_stop cred: allow get_cred() and put_cred() to be given NULL. gpio: uniphier: Fix void functions to remove return value tty: synclink_gt, drop unneeded forward declarations tty: synclink_gt: rename a conflicting function name drm/amd/display: Pass PCI deviceid into DC hwmon: (tmp421) Replace S_<PERMS> with octal values hwmon: (tmp421) report /PVLD condition as fault UBUNTU: upstream stable to v4.14.249, v4.19.209 ** Affects: linux (Ubuntu) Importance: Undecided Status: Invalid ** Affects: linux (Ubuntu Bionic) Importance: Medium Assignee: Kamal Mostafa (kamalmostafa) Status: In Progress ** Tags: kernel-stable-tracking-bug ** Changed in: linux (Ubuntu) Status: New => Confirmed ** Tags added: kernel-stable-tracking-bug ** Also affects: linux (Ubuntu Bionic) Importance: Undecided Status: New ** Changed in: linux (Ubuntu Bionic) Status: New => In Progress ** Changed in: linux (Ubuntu Bionic) Importance: Undecided => Medium ** Changed in: linux (Ubuntu Bionic) Assignee: (unassigned) => Kamal Mostafa (kamalmostafa) ** Changed in: linux (Ubuntu) Status: Confirmed => Invalid ** Description changed: + SRU Justification - SRU Justification + Impact: + The upstream process for stable tree updates is quite similar + in scope to the Ubuntu SRU process, e.g., each patch has to + demonstrably fix a bug, and each patch is vetted by upstream + by originating either directly from a mainline/stable Linux tree or + a minimally backported form of that patch. The following upstream + stable patches should be included in the Ubuntu kernel: - Impact: - The upstream process for stable tree updates is quite similar - in scope to the Ubuntu SRU process, e.g., each patch has to - demonstrably fix a bug, and each patch is vetted by upstream - by originating either directly from a mainline/stable Linux tree or - a minimally backported form of that patch. The following upstream - stable patches should be included in the Ubuntu kernel: + upstream stable patchset 2021-11-02 - upstream stable patchset 2021-11-02 - from git://git.kernel.org/ + Ported from the following upstream stable releases: + v4.14.249, v4.19.209 + + from git://git.kernel.org/ + + ocfs2: drop acl cache for directories too + usb: gadget: r8a66597: fix a loop in set_feature() + usb: musb: tusb6010: uninitialized data in tusb_fifo_write_unaligned() + cifs: fix incorrect check for null pointer in header_assemble + xen/x86: fix PV trap handling on secondary processors + usb-storage: Add quirk for ScanLogic SL11R-IDE older than 2.6c + USB: serial: cp210x: add ID for GW Instek GDM-834x Digital Multimeter + staging: greybus: uart: fix tty use after free + Re-enable UAS for LaCie Rugged USB3-FW with fk quirk + USB: serial: mos7840: remove duplicated 0xac24 device ID + USB: serial: option: add Telit LN920 compositions + USB: serial: option: remove duplicate USB device ID + USB: serial: option: add device id for Foxconn T99W265 + mcb: fix error handling in mcb_alloc_bus() + serial: mvebu-uart: fix driver's tx_empty callback + net: hso: fix muxed tty registration + bnxt_en: Fix TX timeout when TX ring size is set to the smallest + net/mlx4_en: Don't allow aRFS for encapsulated packets + scsi: iscsi: Adjust iface sysfs attr detection + thermal/core: Potential buffer overflow in thermal_build_list_of_policies() + irqchip/gic-v3-its: Fix potential VPE leak on error + md: fix a lock order reversal in md_alloc + blktrace: Fix uaf in blk_trace access after removing by sysfs + net: macb: fix use after free on rmmod + net: stmmac: allow CSR clock of 300MHz + m68k: Double cast io functions to unsigned long + xen/balloon: use a kernel thread instead a workqueue + compiler.h: Introduce absolute_pointer macro + net: i825xx: Use absolute_pointer for memcpy from fixed memory location + sparc: avoid stringop-overread errors + qnx4: avoid stringop-overread errors + parisc: Use absolute_pointer() to define PAGE0 + arm64: Mark __stack_chk_guard as __ro_after_init + alpha: Declare virt_to_phys and virt_to_bus parameter as pointer to volatile + net: 6pack: Fix tx timeout and slot time + spi: Fix tegra20 build with CONFIG_PM=n + arm64: dts: marvell: armada-37xx: Extend PCIe MEM space + PCI: aardvark: Fix checking for PIO Non-posted Request + PCI: aardvark: Fix checking for PIO status + xen/balloon: fix balloon kthread freezing + qnx4: work around gcc false positive warning bug + tty: Fix out-of-bound vmalloc access in imageblit + cpufreq: schedutil: Use kobject release() method to free sugov_tunables + cpufreq: schedutil: Destroy mutex before kobject_put() frees the memory + mac80211: fix use-after-free in CCMP/GCMP RX + ipvs: check that ip_vs_conn_tab_bits is between 8 and 20 + mac80211: Fix ieee80211_amsdu_aggregate frag_tail bug + mac80211: limit injected vht mcs/nss in ieee80211_parse_tx_radiotap + sctp: break out if skb_header_pointer returns NULL in sctp_rcv_ootb + hwmon: (tmp421) fix rounding for negative values + e100: fix length calculation in e100_get_regs_len + e100: fix buffer overrun in e100_get_regs + scsi: csiostor: Add module softdep on cxgb4 + af_unix: fix races in sk_peer_pid and sk_peer_cred accesses + ipack: ipoctal: fix stack information leak + ipack: ipoctal: fix tty registration race + ipack: ipoctal: fix tty-registration error handling + ipack: ipoctal: fix missing allocation-failure check + ipack: ipoctal: fix module reference leak + ext4: fix potential infinite loop in ext4_dx_readdir() + net: udp: annotate data race around udp_sk(sk)->corkflag + EDAC/synopsys: Fix wrong value type assignment for edac_mode + ARM: 9077/1: PLT: Move struct plt_entries definition to header + ARM: 9078/1: Add warn suppress parameter to arm_gen_branch_link() + ARM: 9079/1: ftrace: Add MODULE_PLTS support + ARM: 9098/1: ftrace: MODULE_PLT: Fix build problem without DYNAMIC_FTRACE + arm64: Extend workaround for erratum 1024718 to all versions of Cortex-A55 + hso: fix bailout in error case of probe + usb: hso: fix error handling code of hso_create_net_device + usb: hso: remove the bailout parameter + crypto: ccp - fix resource leaks in ccp_run_aes_gcm_cmd() + HID: betop: fix slab-out-of-bounds Write in betop_probe + netfilter: ipset: Fix oversized kvmalloc() calls + HID: usbhid: free raw_report buffers in usbhid_stop + cred: allow get_cred() and put_cred() to be given NULL. + gpio: uniphier: Fix void functions to remove return value + tty: synclink_gt, drop unneeded forward declarations + tty: synclink_gt: rename a conflicting function name + drm/amd/display: Pass PCI deviceid into DC + hwmon: (tmp421) Replace S_<PERMS> with octal values + hwmon: (tmp421) report /PVLD condition as fault + UBUNTU: upstream stable to v4.14.249, v4.19.209 -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/1949512 Title: Bionic update: upstream stable patchset 2021-11-02 Status in linux package in Ubuntu: Invalid Status in linux source package in Bionic: In Progress Bug description: SRU Justification Impact: The upstream process for stable tree updates is quite similar in scope to the Ubuntu SRU process, e.g., each patch has to demonstrably fix a bug, and each patch is vetted by upstream by originating either directly from a mainline/stable Linux tree or a minimally backported form of that patch. The following upstream stable patches should be included in the Ubuntu kernel: upstream stable patchset 2021-11-02 Ported from the following upstream stable releases: v4.14.249, v4.19.209 from git://git.kernel.org/ ocfs2: drop acl cache for directories too usb: gadget: r8a66597: fix a loop in set_feature() usb: musb: tusb6010: uninitialized data in tusb_fifo_write_unaligned() cifs: fix incorrect check for null pointer in header_assemble xen/x86: fix PV trap handling on secondary processors usb-storage: Add quirk for ScanLogic SL11R-IDE older than 2.6c USB: serial: cp210x: add ID for GW Instek GDM-834x Digital Multimeter staging: greybus: uart: fix tty use after free Re-enable UAS for LaCie Rugged USB3-FW with fk quirk USB: serial: mos7840: remove duplicated 0xac24 device ID USB: serial: option: add Telit LN920 compositions USB: serial: option: remove duplicate USB device ID USB: serial: option: add device id for Foxconn T99W265 mcb: fix error handling in mcb_alloc_bus() serial: mvebu-uart: fix driver's tx_empty callback net: hso: fix muxed tty registration bnxt_en: Fix TX timeout when TX ring size is set to the smallest net/mlx4_en: Don't allow aRFS for encapsulated packets scsi: iscsi: Adjust iface sysfs attr detection thermal/core: Potential buffer overflow in thermal_build_list_of_policies() irqchip/gic-v3-its: Fix potential VPE leak on error md: fix a lock order reversal in md_alloc blktrace: Fix uaf in blk_trace access after removing by sysfs net: macb: fix use after free on rmmod net: stmmac: allow CSR clock of 300MHz m68k: Double cast io functions to unsigned long xen/balloon: use a kernel thread instead a workqueue compiler.h: Introduce absolute_pointer macro net: i825xx: Use absolute_pointer for memcpy from fixed memory location sparc: avoid stringop-overread errors qnx4: avoid stringop-overread errors parisc: Use absolute_pointer() to define PAGE0 arm64: Mark __stack_chk_guard as __ro_after_init alpha: Declare virt_to_phys and virt_to_bus parameter as pointer to volatile net: 6pack: Fix tx timeout and slot time spi: Fix tegra20 build with CONFIG_PM=n arm64: dts: marvell: armada-37xx: Extend PCIe MEM space PCI: aardvark: Fix checking for PIO Non-posted Request PCI: aardvark: Fix checking for PIO status xen/balloon: fix balloon kthread freezing qnx4: work around gcc false positive warning bug tty: Fix out-of-bound vmalloc access in imageblit cpufreq: schedutil: Use kobject release() method to free sugov_tunables cpufreq: schedutil: Destroy mutex before kobject_put() frees the memory mac80211: fix use-after-free in CCMP/GCMP RX ipvs: check that ip_vs_conn_tab_bits is between 8 and 20 mac80211: Fix ieee80211_amsdu_aggregate frag_tail bug mac80211: limit injected vht mcs/nss in ieee80211_parse_tx_radiotap sctp: break out if skb_header_pointer returns NULL in sctp_rcv_ootb hwmon: (tmp421) fix rounding for negative values e100: fix length calculation in e100_get_regs_len e100: fix buffer overrun in e100_get_regs scsi: csiostor: Add module softdep on cxgb4 af_unix: fix races in sk_peer_pid and sk_peer_cred accesses ipack: ipoctal: fix stack information leak ipack: ipoctal: fix tty registration race ipack: ipoctal: fix tty-registration error handling ipack: ipoctal: fix missing allocation-failure check ipack: ipoctal: fix module reference leak ext4: fix potential infinite loop in ext4_dx_readdir() net: udp: annotate data race around udp_sk(sk)->corkflag EDAC/synopsys: Fix wrong value type assignment for edac_mode ARM: 9077/1: PLT: Move struct plt_entries definition to header ARM: 9078/1: Add warn suppress parameter to arm_gen_branch_link() ARM: 9079/1: ftrace: Add MODULE_PLTS support ARM: 9098/1: ftrace: MODULE_PLT: Fix build problem without DYNAMIC_FTRACE arm64: Extend workaround for erratum 1024718 to all versions of Cortex-A55 hso: fix bailout in error case of probe usb: hso: fix error handling code of hso_create_net_device usb: hso: remove the bailout parameter crypto: ccp - fix resource leaks in ccp_run_aes_gcm_cmd() HID: betop: fix slab-out-of-bounds Write in betop_probe netfilter: ipset: Fix oversized kvmalloc() calls HID: usbhid: free raw_report buffers in usbhid_stop cred: allow get_cred() and put_cred() to be given NULL. gpio: uniphier: Fix void functions to remove return value tty: synclink_gt, drop unneeded forward declarations tty: synclink_gt: rename a conflicting function name drm/amd/display: Pass PCI deviceid into DC hwmon: (tmp421) Replace S_<PERMS> with octal values hwmon: (tmp421) report /PVLD condition as fault UBUNTU: upstream stable to v4.14.249, v4.19.209 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1949512/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp