Public bug reported:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
v5.15.12 upstream stable release
from git://git.kernel.org/
Linux 5.15.12
phonet/pep: refuse to enable an unbound pipe
tun: avoid double free in tun_free_netdev
hamradio: improve the incomplete fix to avoid NPD
hamradio: defer ax25 kfree after unregister_netdev
ax25: NPD bug when detaching AX25 device
r8152: sync ocp base
hwmon: (lm90) Do not report 'busy' status bit as alarm
hwmom: (lm90) Fix citical alarm status for MAX6680/MAX6681
pinctrl: mediatek: fix global-out-of-bounds issue
ASoC: rt5682: fix the wrong jack type detected
ASoC: SOF: Intel: pci-tgl: add ADL-N support
ASoC: SOF: Intel: pci-tgl: add new ADL-P variant
ASoC: tas2770: Fix setting of high sample rates
Input: goodix - add id->model mapping for the "9111" model
Input: elants_i2c - do not check Remark ID on eKTH3900/eKTH5312
Input: iqs626a - prohibit inlining of channel parsing functions
kfence: fix memory leak when cat kfence objects
arm64: dts: lx2160a: fix scl-gpios property name
KVM: VMX: Fix stale docs for kvm-intel.emulate_invalid_guest_state
netfs: fix parameter of cleanup()
f2fs: fix to do sanity check on last xattr entry in __f2fs_setxattr()
tee: optee: Fix incorrect page free bug
mm/damon/dbgfs: protect targets destructions with kdamond_lock
mm/hwpoison: clear MF_COUNT_INCREASED before retrying get_any_page()
mm, hwpoison: fix condition in free hugetlb page path
mm: mempolicy: fix THP allocations escaping mempolicy restrictions
mac80211: fix locking in ieee80211_start_ap error path
ksmbd: disable SMB2_GLOBAL_CAP_ENCRYPTION for SMB 3.1.1
ksmbd: fix uninitialized symbol 'pntsd_size'
ksmbd: fix error code in ndr_read_int32()
ARM: 9169/1: entry: fix Thumb2 bug in iWMMXt exception handling
mmc: mmci: stm32: clear DLYB_CR after sending tuning command
mmc: core: Disable card detect during shutdown
mmc: meson-mx-sdhc: Set MANUAL_STOP for multi-block SDIO commands
mmc: sdhci-tegra: Fix switch to HS400ES mode
gpio: dln2: Fix interrupts when replugging the device
pinctrl: stm32: consider the GPIO offset to expose all the GPIO lines
KVM: VMX: Wake vCPU when delivering posted IRQ even if vCPU == this vCPU
KVM: VMX: Always clear vmx->fail on emulation_required
KVM: nVMX: Synthesize TRIPLE_FAULT for L2 if emulation is required
KVM: x86/mmu: Don't advance iterator after restart due to yielding
KVM: x86: Always set kvm_run->if_flag
platform/x86: intel_pmc_core: fix memleak on registration failure
platform/x86: amd-pmc: only use callbacks for suspend
x86/pkey: Fix undefined behaviour with PKRU_WD_BIT
tee: handle lookup of shm with reference count 0
parisc: Fix mask used to select futex spinlock
parisc: Correct completer in lws start
ipmi: fix initialization when workqueue allocation fails
ipmi: ssif: initialize ssif_info->client early
ipmi: bail out if init_srcu_struct fails
Input: atmel_mxt_ts - fix double free in mxt_read_info_block
ASoC: tegra: Restore headphones jack name on Nyan Big
ASoC: tegra: Add DAPM switches for headphones and mic jack
ASoC: meson: aiu: Move AIU_I2S_MISC hold setting to aiu-fifo-i2s
ALSA: hda/realtek: Fix quirk for Clevo NJ51CU
ALSA: hda/realtek: fix mute/micmute LEDs for a HP ProBook
ALSA: hda/realtek: Add new alc285-hp-amp-init model
ALSA: hda/realtek: Amp init fixup for HP ZBook 15 G6
ALSA: hda/hdmi: Disable silent stream on GLK
ALSA: rawmidi - fix the uninitalized user_pversion
ALSA: drivers: opl3: Fix incorrect use of vp->state
ALSA: jack: Check the return value of kstrdup()
x86/boot: Move EFI range reservation after cmdline parsing
Revert "x86/boot: Pull up cmdline preparation and early param parsing"
kernel/crash_core: suppress unknown crashkernel parameter warning
platform/x86/intel: Remove X86_PLATFORM_DRIVERS_INTEL
compiler.h: Fix annotation macro misplacement with Clang
uapi: Fix undefined __always_inline on non-glibc systems
ARM: 9160/1: NOMMU: Reload __secondary_data after PROCINFO_INITFUNC
hwmon: (lm90) Drop critical attribute support for MAX6654
hwmon: (lm90) Add basic support for TI TMP461
hwmon: (lm90) Introduce flag indicating extended temperature support
hwmon: (lm90) Prevent integer overflow/underflow in hysteresis calculations
hwmon: (lm90) Fix usage of CONFIG2 register in detect function
pinctrl: bcm2835: Change init order for gpio hogs
Input: elantech - fix stack out of bound access in elantech_change_report_id()
net: stmmac: dwmac-visconti: Fix value of ETHER_CLK_SEL_FREQ_SEL_2P5M
r8152: fix the force speed doesn't work for RTL8156
net: bridge: fix ioctl old_deviceless bridge argument
net: bridge: Use array_size() helper in copy_to_user()
net: stmmac: ptp: fix potentially overflowing expression
veth: ensure skb entering GRO are not cloned.
io_uring: zero iocb->ki_pos for stream file types
asix: fix wrong return value in asix_check_host_enable()
asix: fix uninit-value in asix_mdio_read()
sfc: falcon: Check null pointer of rx_queue->page_ring
sfc: Check null pointer of rx_queue->page_ring
net: ks8851: Check for error irq
drivers: net: smc911x: Check for error irq
fjes: Check for error irq
bonding: fix ad_actor_system option setting to default
gpio: virtio: remove timeout
ipmi: Fix UAF when uninstall ipmi_si and ipmi_msghandler module
igb: fix deadlock caused by taking RTNL in RPM resume path
net: skip virtio_net_hdr_set_proto if protocol already set
net: accept UFOv6 packages in virtio_net_hdr_to_skb
inet: fully convert sk->sk_rx_dst to RCU rules
ipv6: move inet6_sk(sk)->rx_dst_cookie to sk->sk_rx_dst_cookie
tcp: move inet->rx_dst_ifindex to sk->sk_rx_dst_ifindex
qlcnic: potential dereference null pointer of rx_queue->page_ring
net: marvell: prestera: fix incorrect structure access
net: marvell: prestera: fix incorrect return of port_find
ice: xsk: return xsk buffers back to pool when cleaning the ring
ice: Use xdp_buf instead of rx_buf for xsk zero-copy
ARM: dts: imx6qdl-wandboard: Fix Ethernet support
netfilter: fix regression in looped (broad|multi)cast's MAC handling
netfilter: nf_tables: fix use-after-free in nft_set_catchall_destroy()
RDMA/hns: Replace kfree() with kvfree()
IB/qib: Fix memory leak in qib_user_sdma_queue_pkts()
RDMA/hns: Fix RNR retransmission issue for HIP08
ASoC: meson: aiu: fifo: Add missing dma_coerce_mask_and_coherent()
drm/mediatek: hdmi: Perform NULL pointer check for mtk_hdmi_conf
ucounts: Fix rlimit max values check
spi: change clk_disable_unprepare to clk_unprepare
bus: sunxi-rsb: Fix shutdown
arm64: dts: allwinner: orangepi-zero-plus: fix PHY mode
PM: sleep: Fix error handling in dpm_prepare()
NFSD: Fix READDIR buffer overflow
HID: potential dereference of null pointer
HID: holtek: fix mouse probing
selftests: KVM: Fix non-x86 compiling
ext4: check for inconsistent extents between index and leaf block
ext4: check for out-of-order index extents in ext4_valid_extent_entries()
ext4: prevent partial update of the extent blocks
net: usb: lan78xx: add Allied Telesis AT29M2-AF
arm64: vdso32: require CROSS_COMPILE_COMPAT for gcc+bfd
** Affects: linux (Ubuntu)
Importance: Undecided
Status: Confirmed
** Affects: linux (Ubuntu Jammy)
Importance: Undecided
Status: Confirmed
** Tags: kernel-stable-tracking-bug
** Changed in: linux (Ubuntu)
Status: New => Confirmed
** Tags added: kernel-stable-tracking-bug
** Also affects: linux (Ubuntu Jammy)
Importance: Undecided
Status: Confirmed
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1956305
Title:
Jammy update: v5.15.12 upstream stable release
Status in linux package in Ubuntu:
Confirmed
Status in linux source package in Jammy:
Confirmed
Bug description:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
v5.15.12 upstream stable release
from git://git.kernel.org/
Linux 5.15.12
phonet/pep: refuse to enable an unbound pipe
tun: avoid double free in tun_free_netdev
hamradio: improve the incomplete fix to avoid NPD
hamradio: defer ax25 kfree after unregister_netdev
ax25: NPD bug when detaching AX25 device
r8152: sync ocp base
hwmon: (lm90) Do not report 'busy' status bit as alarm
hwmom: (lm90) Fix citical alarm status for MAX6680/MAX6681
pinctrl: mediatek: fix global-out-of-bounds issue
ASoC: rt5682: fix the wrong jack type detected
ASoC: SOF: Intel: pci-tgl: add ADL-N support
ASoC: SOF: Intel: pci-tgl: add new ADL-P variant
ASoC: tas2770: Fix setting of high sample rates
Input: goodix - add id->model mapping for the "9111" model
Input: elants_i2c - do not check Remark ID on eKTH3900/eKTH5312
Input: iqs626a - prohibit inlining of channel parsing functions
kfence: fix memory leak when cat kfence objects
arm64: dts: lx2160a: fix scl-gpios property name
KVM: VMX: Fix stale docs for kvm-intel.emulate_invalid_guest_state
netfs: fix parameter of cleanup()
f2fs: fix to do sanity check on last xattr entry in __f2fs_setxattr()
tee: optee: Fix incorrect page free bug
mm/damon/dbgfs: protect targets destructions with kdamond_lock
mm/hwpoison: clear MF_COUNT_INCREASED before retrying get_any_page()
mm, hwpoison: fix condition in free hugetlb page path
mm: mempolicy: fix THP allocations escaping mempolicy restrictions
mac80211: fix locking in ieee80211_start_ap error path
ksmbd: disable SMB2_GLOBAL_CAP_ENCRYPTION for SMB 3.1.1
ksmbd: fix uninitialized symbol 'pntsd_size'
ksmbd: fix error code in ndr_read_int32()
ARM: 9169/1: entry: fix Thumb2 bug in iWMMXt exception handling
mmc: mmci: stm32: clear DLYB_CR after sending tuning command
mmc: core: Disable card detect during shutdown
mmc: meson-mx-sdhc: Set MANUAL_STOP for multi-block SDIO commands
mmc: sdhci-tegra: Fix switch to HS400ES mode
gpio: dln2: Fix interrupts when replugging the device
pinctrl: stm32: consider the GPIO offset to expose all the GPIO lines
KVM: VMX: Wake vCPU when delivering posted IRQ even if vCPU == this vCPU
KVM: VMX: Always clear vmx->fail on emulation_required
KVM: nVMX: Synthesize TRIPLE_FAULT for L2 if emulation is required
KVM: x86/mmu: Don't advance iterator after restart due to yielding
KVM: x86: Always set kvm_run->if_flag
platform/x86: intel_pmc_core: fix memleak on registration failure
platform/x86: amd-pmc: only use callbacks for suspend
x86/pkey: Fix undefined behaviour with PKRU_WD_BIT
tee: handle lookup of shm with reference count 0
parisc: Fix mask used to select futex spinlock
parisc: Correct completer in lws start
ipmi: fix initialization when workqueue allocation fails
ipmi: ssif: initialize ssif_info->client early
ipmi: bail out if init_srcu_struct fails
Input: atmel_mxt_ts - fix double free in mxt_read_info_block
ASoC: tegra: Restore headphones jack name on Nyan Big
ASoC: tegra: Add DAPM switches for headphones and mic jack
ASoC: meson: aiu: Move AIU_I2S_MISC hold setting to aiu-fifo-i2s
ALSA: hda/realtek: Fix quirk for Clevo NJ51CU
ALSA: hda/realtek: fix mute/micmute LEDs for a HP ProBook
ALSA: hda/realtek: Add new alc285-hp-amp-init model
ALSA: hda/realtek: Amp init fixup for HP ZBook 15 G6
ALSA: hda/hdmi: Disable silent stream on GLK
ALSA: rawmidi - fix the uninitalized user_pversion
ALSA: drivers: opl3: Fix incorrect use of vp->state
ALSA: jack: Check the return value of kstrdup()
x86/boot: Move EFI range reservation after cmdline parsing
Revert "x86/boot: Pull up cmdline preparation and early param parsing"
kernel/crash_core: suppress unknown crashkernel parameter warning
platform/x86/intel: Remove X86_PLATFORM_DRIVERS_INTEL
compiler.h: Fix annotation macro misplacement with Clang
uapi: Fix undefined __always_inline on non-glibc systems
ARM: 9160/1: NOMMU: Reload __secondary_data after PROCINFO_INITFUNC
hwmon: (lm90) Drop critical attribute support for MAX6654
hwmon: (lm90) Add basic support for TI TMP461
hwmon: (lm90) Introduce flag indicating extended temperature support
hwmon: (lm90) Prevent integer overflow/underflow in hysteresis calculations
hwmon: (lm90) Fix usage of CONFIG2 register in detect function
pinctrl: bcm2835: Change init order for gpio hogs
Input: elantech - fix stack out of bound access in elantech_change_report_id()
net: stmmac: dwmac-visconti: Fix value of ETHER_CLK_SEL_FREQ_SEL_2P5M
r8152: fix the force speed doesn't work for RTL8156
net: bridge: fix ioctl old_deviceless bridge argument
net: bridge: Use array_size() helper in copy_to_user()
net: stmmac: ptp: fix potentially overflowing expression
veth: ensure skb entering GRO are not cloned.
io_uring: zero iocb->ki_pos for stream file types
asix: fix wrong return value in asix_check_host_enable()
asix: fix uninit-value in asix_mdio_read()
sfc: falcon: Check null pointer of rx_queue->page_ring
sfc: Check null pointer of rx_queue->page_ring
net: ks8851: Check for error irq
drivers: net: smc911x: Check for error irq
fjes: Check for error irq
bonding: fix ad_actor_system option setting to default
gpio: virtio: remove timeout
ipmi: Fix UAF when uninstall ipmi_si and ipmi_msghandler module
igb: fix deadlock caused by taking RTNL in RPM resume path
net: skip virtio_net_hdr_set_proto if protocol already set
net: accept UFOv6 packages in virtio_net_hdr_to_skb
inet: fully convert sk->sk_rx_dst to RCU rules
ipv6: move inet6_sk(sk)->rx_dst_cookie to sk->sk_rx_dst_cookie
tcp: move inet->rx_dst_ifindex to sk->sk_rx_dst_ifindex
qlcnic: potential dereference null pointer of rx_queue->page_ring
net: marvell: prestera: fix incorrect structure access
net: marvell: prestera: fix incorrect return of port_find
ice: xsk: return xsk buffers back to pool when cleaning the ring
ice: Use xdp_buf instead of rx_buf for xsk zero-copy
ARM: dts: imx6qdl-wandboard: Fix Ethernet support
netfilter: fix regression in looped (broad|multi)cast's MAC handling
netfilter: nf_tables: fix use-after-free in nft_set_catchall_destroy()
RDMA/hns: Replace kfree() with kvfree()
IB/qib: Fix memory leak in qib_user_sdma_queue_pkts()
RDMA/hns: Fix RNR retransmission issue for HIP08
ASoC: meson: aiu: fifo: Add missing dma_coerce_mask_and_coherent()
drm/mediatek: hdmi: Perform NULL pointer check for mtk_hdmi_conf
ucounts: Fix rlimit max values check
spi: change clk_disable_unprepare to clk_unprepare
bus: sunxi-rsb: Fix shutdown
arm64: dts: allwinner: orangepi-zero-plus: fix PHY mode
PM: sleep: Fix error handling in dpm_prepare()
NFSD: Fix READDIR buffer overflow
HID: potential dereference of null pointer
HID: holtek: fix mouse probing
selftests: KVM: Fix non-x86 compiling
ext4: check for inconsistent extents between index and leaf block
ext4: check for out-of-order index extents in ext4_valid_extent_entries()
ext4: prevent partial update of the extent blocks
net: usb: lan78xx: add Allied Telesis AT29M2-AF
arm64: vdso32: require CROSS_COMPILE_COMPAT for gcc+bfd
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1956305/+subscriptions
--
Mailing list: https://launchpad.net/~kernel-packages
Post to : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help : https://help.launchpad.net/ListHelp
