** Description changed: + SRU Justification - SRU Justification + Impact: + The upstream process for stable tree updates is quite similar + in scope to the Ubuntu SRU process, e.g., each patch has to + demonstrably fix a bug, and each patch is vetted by upstream + by originating either directly from a mainline/stable Linux tree or + a minimally backported form of that patch. The following upstream + stable patches should be included in the Ubuntu kernel: - Impact: - The upstream process for stable tree updates is quite similar - in scope to the Ubuntu SRU process, e.g., each patch has to - demonstrably fix a bug, and each patch is vetted by upstream - by originating either directly from a mainline/stable Linux tree or - a minimally backported form of that patch. The following upstream - stable patches should be included in the Ubuntu kernel: + v5.19.9 upstream stable release + from git://git.kernel.org/ - v5.19.10 upstream stable release - from git://git.kernel.org/ + drm/msm/dp: make eDP panel as the first connected connector + drm/msm/dsi: fix the inconsistent indenting + drm/msm/dpu: populate wb or intf before reset_intf_cfg + drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4 + drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg + drm/msm/dsi: Fix number of regulators for SDM660 + platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask + platform/x86: x86-android-tablets: Fix broken touchscreen on Chuwi Hi8 with Windows BIOS + xsk: Fix corrupted packets for XDP_SHARED_UMEM + drm/msm/gpu: Drop qos request if devm_devfreq_add_device() fails + peci: aspeed: fix error check return value of platform_get_irq() + iio: adc: mcp3911: make use of the sign bit + skmsg: Fix wrong last sg check in sk_msg_recvmsg() + bpf: Restrict bpf_sys_bpf to CAP_PERFMON + ip_tunnel: Respect tunnel key's "flow_flags" in IP tunnels + bpf, cgroup: Fix kernel BUG in purge_effective_progs + drm/i915/gvt: Fix Comet Lake + ieee802154/adf7242: defer destroy_workqueue call + bpf: Fix a data-race around bpf_jit_limit. + drm/i915/ttm: fix CCS handling + drm/i915/display: avoid warnings when registering dual panel backlight + ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array + wifi: cfg80211: debugfs: fix return type in ht40allow_map_read() + xhci: Fix null pointer dereference in remove if xHC has only one roothub + Revert "xhci: turn off port power in shutdown" + bpf: Allow helpers to accept pointers with a fixed size + bpf: Tidy up verifier check_func_arg() + bpf: Do mark_chain_precision for ARG_CONST_ALLOC_SIZE_OR_ZERO + Bluetooth: hci_event: Fix vendor (unknown) opcode status handling + Bluetooth: hci_sync: Fix suspend performance regression + Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt + Bluetooth: hci_sync: hold hdev->lock when cleanup hci_conn + net: sparx5: fix handling uneven length packets in manual extraction + net: smsc911x: Stop and start PHY during suspend and resume + openvswitch: fix memory leak at failed datapath creation + nfp: flower: fix ingress police using matchall filter + net: dsa: xrs700x: Use irqsave variant for u64 stats update + net: sched: tbf: don't call qdisc_put() while holding tree lock + net/sched: fix netdevice reference leaks in attach_default_qdiscs() + net: phy: micrel: Make the GPIO to be non-exclusive + net: lan966x: improve error handle in lan966x_fdma_rx_get_frame() + ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler + cachefiles: fix error return code in cachefiles_ondemand_copen() + cachefiles: make on-demand request distribution fairer + mlxbf_gige: compute MDIO period based on i1clk + kcm: fix strp_init() order and cleanup + sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb + tcp: annotate data-race around challenge_timestamp + Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb" + net/smc: Remove redundant refcount increase + soundwire: qcom: fix device status array range + mm/slab_common: Deleting kobject in kmem_cache_destroy() without holding slab_mutex/cpu_hotplug_lock + platform/mellanox: mlxreg-lc: Fix coverity warning + platform/mellanox: mlxreg-lc: Fix locking issue + serial: fsl_lpuart: RS485 RTS polariy is inverse + tty: serial: atmel: Preserve previous USART mode if RS485 disabled + staging: rtl8712: fix use after free bugs + staging: r8188eu: Add Rosewill USB-N150 Nano to device tables + staging: r8188eu: add firmware dependency + Revert "powerpc: Remove unused FW_FEATURE_NATIVE references" + powerpc: align syscall table for ppc32 + powerpc/rtas: Fix RTAS MSR[HV] handling for Cell + vt: Clear selection before changing the font + musb: fix USB_MUSB_TUSB6010 dependency + tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete + Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag + iio: light: cm3605: Fix an error handling path in cm3605_probe() + iio: ad7292: Prevent regulator double disable + iio: adc: mcp3911: correct "microchip,device-addr" property + iio: adc: mcp3911: use correct formula for AD conversion + misc: fastrpc: fix memory corruption on probe + misc: fastrpc: fix memory corruption on open + firmware_loader: Fix use-after-free during unregister + firmware_loader: Fix memory leak in firmware upload + USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id + landlock: Fix file reparenting without explicit LANDLOCK_ACCESS_FS_REFER + mmc: core: Fix UHS-I SD 1.8V workaround branch + mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure + binder: fix UAF of ref->proc caused by race condition + binder: fix alloc->vma_vm_mm null-ptr dereference + cifs: fix small mempool leak in SMB2_negotiate() + KVM: VMX: Heed the 'msr' argument in msr_write_intercepted() + riscv: kvm: move extern sbi_ext declarations to a header + clk: ti: Fix missing of_node_get() ti_find_clock_provider() + drm/i915/reg: Fix spelling mistake "Unsupport" -> "Unsupported" + clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops + Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops" + clk: core: Fix runtime PM sequence in clk_core_unprepare() + Input: rk805-pwrkey - fix module autoloading + powerpc/papr_scm: Fix nvdimm event mappings + clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate + clk: bcm: rpi: Prevent out-of-bounds access + clk: bcm: rpi: Add missing newline + hwmon: (gpio-fan) Fix array out of bounds access + gpio: pca953x: Add mutex_lock for regcache sync in PM + gpio: realtek-otto: switch to 32-bit I/O + KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES + powerpc/papr_scm: Ensure rc is always initialized in papr_scm_pmu_register() + xen/grants: prevent integer overflow in gnttab_dma_alloc_pages() + mm: pagewalk: Fix race between unmap and page walker + xen-blkback: Advertise feature-persistent as user requested + xen-blkfront: Advertise feature-persistent as user requested + xen-blkfront: Cache feature_persistent value before advertisement + thunderbolt: Use the actual buffer in tb_async_error() + thunderbolt: Check router generation before connecting xHCI + usb: dwc3: pci: Add support for Intel Raptor Lake + media: mceusb: Use new usb_control_msg_*() routines + xhci: Add grace period after xHC start to prevent premature runtime suspend. + usb: dwc3: disable USB core PHY management + usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop + usb: dwc3: fix PHY disable sequence + USB: serial: ch341: fix lost character on LCR updates + USB: serial: ch341: fix disabled rx timer on older devices + USB: serial: cp210x: add Decagon UCA device id + USB: serial: option: add support for OPPO R11 diag port + USB: serial: option: add Quectel EM060K modem + USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode + Revert "usb: typec: ucsi: add a common function ucsi_unregister_connectors()" + usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles + usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device + usb: typec: tcpm: Return ENOTSUPP for power supply prop writes + usb: dwc2: fix wrong order of phy_power_on and phy_init + usb: cdns3: fix issue with rearming ISO OUT endpoint + usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer + USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020) + usb-storage: Add ignore-residue quirk for NXP PN7462AU + s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages + s390: fix nospec table alignments + USB: core: Prevent nested device-reset calls + usb: xhci-mtk: relax TT periodic bandwidth allocation + usb: xhci-mtk: fix bandwidth release issue + usb: gadget: f_uac2: fix superspeed transfer + usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS + USB: gadget: Fix obscure lockdep violation for udc_mutex + dma-buf/dma-resv: check if the new fence is really later + arm64/kexec: Fix missing extra range for crashkres_low. + driver core: Don't probe devices after bus_type.match() probe deferral + wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected + wifi: mac80211: Fix UAF in ieee80211_scan_rx() + ip: fix triggering of 'icmp redirect' + net: Use u64_stats_fetch_begin_irq() for stats fetch. + net: mac802154: Fix a condition in the receive path + ALSA: memalloc: Revive x86-specific WC page allocations again + ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298 + ALSA: seq: oss: Fix data-race for max_midi_devs access + ALSA: seq: Fix data-race at module auto-loading + drm/i915/backlight: Disable pps power hook for aux based backlight + drm/i915/guc: clear stalled request after a reset + drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk + drm/i915: Skip wm/ddb readout for disabled pipes + tty: n_gsm: add sanity check for gsm->receive in gsm_receive_buf() + tty: n_gsm: initialize more members at gsm_alloc_mux() + tty: n_gsm: replace kicktimer with delayed_work + tty: n_gsm: avoid call of sleeping functions from atomic context + Linux 5.19.8 + UBUNTU: Upstream stable to v5.19.8
** Summary changed: - Kinetic update: v5.19.10 upstream stable release + Kinetic update: v5.19.9 upstream stable release ** Changed in: linux (Ubuntu Kinetic) Status: Confirmed => In Progress ** Changed in: linux (Ubuntu Kinetic) Importance: Undecided => Medium ** Changed in: linux (Ubuntu Kinetic) Assignee: (unassigned) => Kamal Mostafa (kamalmostafa) ** Description changed: SRU Justification Impact: The upstream process for stable tree updates is quite similar in scope to the Ubuntu SRU process, e.g., each patch has to demonstrably fix a bug, and each patch is vetted by upstream by originating either directly from a mainline/stable Linux tree or a minimally backported form of that patch. The following upstream stable patches should be included in the Ubuntu kernel: v5.19.9 upstream stable release from git://git.kernel.org/ - drm/msm/dp: make eDP panel as the first connected connector - drm/msm/dsi: fix the inconsistent indenting - drm/msm/dpu: populate wb or intf before reset_intf_cfg - drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4 - drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg - drm/msm/dsi: Fix number of regulators for SDM660 - platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask - platform/x86: x86-android-tablets: Fix broken touchscreen on Chuwi Hi8 with Windows BIOS - xsk: Fix corrupted packets for XDP_SHARED_UMEM - drm/msm/gpu: Drop qos request if devm_devfreq_add_device() fails - peci: aspeed: fix error check return value of platform_get_irq() - iio: adc: mcp3911: make use of the sign bit - skmsg: Fix wrong last sg check in sk_msg_recvmsg() - bpf: Restrict bpf_sys_bpf to CAP_PERFMON - ip_tunnel: Respect tunnel key's "flow_flags" in IP tunnels - bpf, cgroup: Fix kernel BUG in purge_effective_progs - drm/i915/gvt: Fix Comet Lake - ieee802154/adf7242: defer destroy_workqueue call - bpf: Fix a data-race around bpf_jit_limit. - drm/i915/ttm: fix CCS handling - drm/i915/display: avoid warnings when registering dual panel backlight - ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array - wifi: cfg80211: debugfs: fix return type in ht40allow_map_read() - xhci: Fix null pointer dereference in remove if xHC has only one roothub - Revert "xhci: turn off port power in shutdown" - bpf: Allow helpers to accept pointers with a fixed size - bpf: Tidy up verifier check_func_arg() - bpf: Do mark_chain_precision for ARG_CONST_ALLOC_SIZE_OR_ZERO - Bluetooth: hci_event: Fix vendor (unknown) opcode status handling - Bluetooth: hci_sync: Fix suspend performance regression - Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt - Bluetooth: hci_sync: hold hdev->lock when cleanup hci_conn - net: sparx5: fix handling uneven length packets in manual extraction - net: smsc911x: Stop and start PHY during suspend and resume - openvswitch: fix memory leak at failed datapath creation - nfp: flower: fix ingress police using matchall filter - net: dsa: xrs700x: Use irqsave variant for u64 stats update - net: sched: tbf: don't call qdisc_put() while holding tree lock - net/sched: fix netdevice reference leaks in attach_default_qdiscs() - net: phy: micrel: Make the GPIO to be non-exclusive - net: lan966x: improve error handle in lan966x_fdma_rx_get_frame() - ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler - cachefiles: fix error return code in cachefiles_ondemand_copen() - cachefiles: make on-demand request distribution fairer - mlxbf_gige: compute MDIO period based on i1clk - kcm: fix strp_init() order and cleanup - sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb - tcp: annotate data-race around challenge_timestamp - Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb" - net/smc: Remove redundant refcount increase - soundwire: qcom: fix device status array range - mm/slab_common: Deleting kobject in kmem_cache_destroy() without holding slab_mutex/cpu_hotplug_lock - platform/mellanox: mlxreg-lc: Fix coverity warning - platform/mellanox: mlxreg-lc: Fix locking issue - serial: fsl_lpuart: RS485 RTS polariy is inverse - tty: serial: atmel: Preserve previous USART mode if RS485 disabled - staging: rtl8712: fix use after free bugs - staging: r8188eu: Add Rosewill USB-N150 Nano to device tables - staging: r8188eu: add firmware dependency - Revert "powerpc: Remove unused FW_FEATURE_NATIVE references" - powerpc: align syscall table for ppc32 - powerpc/rtas: Fix RTAS MSR[HV] handling for Cell - vt: Clear selection before changing the font - musb: fix USB_MUSB_TUSB6010 dependency - tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete - Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag - iio: light: cm3605: Fix an error handling path in cm3605_probe() - iio: ad7292: Prevent regulator double disable - iio: adc: mcp3911: correct "microchip,device-addr" property - iio: adc: mcp3911: use correct formula for AD conversion - misc: fastrpc: fix memory corruption on probe - misc: fastrpc: fix memory corruption on open - firmware_loader: Fix use-after-free during unregister - firmware_loader: Fix memory leak in firmware upload - USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id - landlock: Fix file reparenting without explicit LANDLOCK_ACCESS_FS_REFER - mmc: core: Fix UHS-I SD 1.8V workaround branch - mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure - binder: fix UAF of ref->proc caused by race condition - binder: fix alloc->vma_vm_mm null-ptr dereference - cifs: fix small mempool leak in SMB2_negotiate() - KVM: VMX: Heed the 'msr' argument in msr_write_intercepted() - riscv: kvm: move extern sbi_ext declarations to a header - clk: ti: Fix missing of_node_get() ti_find_clock_provider() - drm/i915/reg: Fix spelling mistake "Unsupport" -> "Unsupported" - clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops - Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops" - clk: core: Fix runtime PM sequence in clk_core_unprepare() - Input: rk805-pwrkey - fix module autoloading - powerpc/papr_scm: Fix nvdimm event mappings - clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate - clk: bcm: rpi: Prevent out-of-bounds access - clk: bcm: rpi: Add missing newline - hwmon: (gpio-fan) Fix array out of bounds access - gpio: pca953x: Add mutex_lock for regcache sync in PM - gpio: realtek-otto: switch to 32-bit I/O - KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES - powerpc/papr_scm: Ensure rc is always initialized in papr_scm_pmu_register() - xen/grants: prevent integer overflow in gnttab_dma_alloc_pages() - mm: pagewalk: Fix race between unmap and page walker - xen-blkback: Advertise feature-persistent as user requested - xen-blkfront: Advertise feature-persistent as user requested - xen-blkfront: Cache feature_persistent value before advertisement - thunderbolt: Use the actual buffer in tb_async_error() - thunderbolt: Check router generation before connecting xHCI - usb: dwc3: pci: Add support for Intel Raptor Lake - media: mceusb: Use new usb_control_msg_*() routines - xhci: Add grace period after xHC start to prevent premature runtime suspend. - usb: dwc3: disable USB core PHY management - usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop - usb: dwc3: fix PHY disable sequence - USB: serial: ch341: fix lost character on LCR updates - USB: serial: ch341: fix disabled rx timer on older devices - USB: serial: cp210x: add Decagon UCA device id - USB: serial: option: add support for OPPO R11 diag port - USB: serial: option: add Quectel EM060K modem - USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode - Revert "usb: typec: ucsi: add a common function ucsi_unregister_connectors()" - usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles - usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device - usb: typec: tcpm: Return ENOTSUPP for power supply prop writes - usb: dwc2: fix wrong order of phy_power_on and phy_init - usb: cdns3: fix issue with rearming ISO OUT endpoint - usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer - USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020) - usb-storage: Add ignore-residue quirk for NXP PN7462AU - s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages - s390: fix nospec table alignments - USB: core: Prevent nested device-reset calls - usb: xhci-mtk: relax TT periodic bandwidth allocation - usb: xhci-mtk: fix bandwidth release issue - usb: gadget: f_uac2: fix superspeed transfer - usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS - USB: gadget: Fix obscure lockdep violation for udc_mutex - dma-buf/dma-resv: check if the new fence is really later - arm64/kexec: Fix missing extra range for crashkres_low. - driver core: Don't probe devices after bus_type.match() probe deferral - wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected - wifi: mac80211: Fix UAF in ieee80211_scan_rx() - ip: fix triggering of 'icmp redirect' - net: Use u64_stats_fetch_begin_irq() for stats fetch. - net: mac802154: Fix a condition in the receive path - ALSA: memalloc: Revive x86-specific WC page allocations again - ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298 - ALSA: seq: oss: Fix data-race for max_midi_devs access - ALSA: seq: Fix data-race at module auto-loading - drm/i915/backlight: Disable pps power hook for aux based backlight - drm/i915/guc: clear stalled request after a reset - drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk - drm/i915: Skip wm/ddb readout for disabled pipes - tty: n_gsm: add sanity check for gsm->receive in gsm_receive_buf() - tty: n_gsm: initialize more members at gsm_alloc_mux() - tty: n_gsm: replace kicktimer with delayed_work - tty: n_gsm: avoid call of sleeping functions from atomic context - Linux 5.19.8 - UBUNTU: Upstream stable to v5.19.8 + efi: libstub: Disable struct randomization + efi: capsule-loader: Fix use-after-free in efi_capsule_write + wifi: mt76: mt7921e: fix crash in chip reset fail + wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd() + fs: only do a memory barrier for the first set_buffer_uptodate() + soc: fsl: select FSL_GUTS driver for DPIO + Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()" + scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX + scsi: core: Allow the ALUA transitioning state enough time + scsi: megaraid_sas: Fix double kfree() + drm/gem: Fix GEM handle release errors + drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini + drm/amdgpu: fix hive reference leak when adding xgmi device + drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup. + drm/amdgpu: Remove the additional kfd pre reset call for sriov + drm/radeon: add a force flush to delay work when radeon + scsi: ufs: core: Reduce the power mode change timeout + Revert "parisc: Show error if wrong 32/64-bit compiler is being used" + parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources() + parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines + UBUNTU: [Config] updateconfigs for ARM64_ERRATUM_2457168 + arm64: errata: add detection for AMEVCNTR01 incrementing incorrectly + netfilter: conntrack: work around exceeded receive window + thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR + cpufreq: check only freq_table in __resolve_freq() + net/core/skbuff: Check the return value of skb_copy_bits() + md: Flush workqueue md_rdev_misc_wq in md_alloc() + fbdev: omapfb: Fix tests for platform_get_irq() failure + fbdev: fbcon: Destroy mutex on freeing struct fb_info + fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init() + x86/sev: Mark snp_abort() noreturn + drm/amdgpu: add sdma instance check for gfx11 CGCG + drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly + ALSA: pcm: oss: Fix race at SNDCTL_DSP_SYNC + ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc() + ALSA: hda: Once again fix regression of page allocations with IOMMU + ALSA: aloop: Fix random zeros in capture data when using jiffies timer + ALSA: usb-audio: Clear fixed clock rate at closing EP + ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface() + tracefs: Only clobber mode/uid/gid on remount if asked + tracing: hold caller_addr to hardirq_{enable,disable}_ip + tracing: Fix to check event_mutex is held while accessing trigger list + btrfs: zoned: set pseudo max append zone limit in zone emulation mode + btrfs: zoned: fix API misuse of zone finish waiting + vfio/type1: Unpin zero pages + kprobes: Prohibit probes in gate area + perf: RISC-V: fix access beyond allocated array + debugfs: add debugfs_lookup_and_remove() + sched/debug: fix dentry leak in update_sched_domain_debugfs + drm/amd/display: fix memory leak when using debugfs_lookup() + driver core: fix driver_set_override() issue with empty strings + nvmet: fix a use-after-free + drm/i915/bios: Copy the whole MIPI sequence block + drm/i915/slpc: Let's fix the PCODE min freq table setup for SLPC + scsi: mpt3sas: Fix use-after-free warning + scsi: lpfc: Add missing destroy_workqueue() in error path + cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree + cgroup: Fix threadgroup_rwsem <-> cpus_read_lock() deadlock + cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() + smb3: missing inode locks in zero range + spi: bitbang: Fix lsb-first Rx + ASoC: cs42l42: Only report button state if there was a button interrupt + Revert "soc: imx: imx8m-blk-ctrl: set power device name" + arm64: dts: imx8mm-verdin: update CAN clock to 40MHz + arm64: dts: imx8mm-verdin: use level interrupt for mcp251xfd + ASoC: qcom: sm8250: add missing module owner + regmap: spi: Reserve space for register address/padding + arm64: dts: imx8mp-venice-gw74xx: fix sai2 pin settings + arm64: dts: imx8mq-tqma8mq: Remove superfluous interrupt-names + RDMA/rtrs-clt: Use the right sg_cnt after ib_dma_map_sg + RDMA/rtrs-srv: Pass the correct number of entries for dma mapped SGL + ARM: dts: imx6qdl-vicut1.dtsi: Fix node name backlight_led + ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node + ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible + arm64: dts: ls1028a-qds-65bb: don't use in-band autoneg for 2500base-x + soc: imx: gpcv2: Assert reset before ungating clock + arm64: dts: verdin-imx8mm: add otg2 pd to usbphy + arm64: dts: imx8mm-venice-gw7901: fix port/phy validation + arm64: dts: freescale: verdin-imx8mm: fix atmel_mxt_ts reset polarity + arm64: dts: freescale: verdin-imx8mp: fix atmel_mxt_ts reset polarity + regulator: core: Clean up on enable failure + ASoC: SOF: Kconfig: Make IPC_FLOOD_TEST depend on SND_SOC_SOF + ASoC: SOF: Kconfig: Make IPC_MESSAGE_INJECTOR depend on SND_SOC_SOF + tee: fix compiler warning in tee_shm_register() + RDMA/irdma: Fix drain SQ hang with no completion + arm64: dts: renesas: r8a779g0: Fix HSCIF0 interrupt number + RDMA/cma: Fix arguments order in net device validation + soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs + RDMA/hns: Fix supported page size + RDMA/hns: Fix wrong fixed value of qp->rq.wqe_shift + RDMA/hns: Remove the num_qpc_timer variable + wifi: wilc1000: fix DMA on stack objects + ARM: at91: pm: fix self-refresh for sama7g5 + ARM: at91: pm: fix DDR recalibration when resuming from backup and self-refresh + ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges + ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges + ARM: dts: at91: sama7g5ek: specify proper regulator output ranges + ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time + ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time + netfilter: br_netfilter: Drop dst references before setting. + netfilter: nf_tables: clean up hook list when offload flags check fails + riscv: dts: microchip: use an mpfs specific l2 compatible + netfilter: nf_conntrack_irc: Fix forged IP logic + RDMA/srp: Set scmnd->result only when scmnd is not NULL + ALSA: usb-audio: Inform the delayed registration more properly + ALSA: usb-audio: Register card again for iface over delayed_register option + rxrpc: Fix ICMP/ICMP6 error handling + rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2() + afs: Use the operation issue time instead of the reply time for callbacks + kunit: fix assert_type for comparison macros + Revert "net: phy: meson-gxl: improve link-up behavior" + sch_sfb: Don't assume the skb is still around after enqueueing to child + tipc: fix shift wrapping bug in map_get() + net: introduce __skb_fill_page_desc_noacc + tcp: TX zerocopy should not sense pfmemalloc status + ice: Fix DMA mappings leak + ice: use bitmap_free instead of devm_kfree + i40e: Fix kernel crash during module removal + iavf: Detach device during reset task + xen-netback: only remove 'hotplug-status' when the vif is actually destroyed + block: don't add partitions if GD_SUPPRESS_PART_SCAN is set + RDMA/siw: Pass a pointer to virt_to_page() + bonding: use unspecified address if no available link local address + bonding: add all node mcast address when slave up + ipv6: sr: fix out-of-bounds read when setting HMAC data. + IB/core: Fix a nested dead lock as part of ODP flow + RDMA/mlx5: Set local port to one when accessing counters + btrfs: zoned: fix mounting with conventional zones + erofs: fix error return code in erofs_fscache_{meta_,}read_folio + erofs: fix pcluster use-after-free on UP platforms + nvme-tcp: fix UAF when detecting digest errors + nvme-tcp: fix regression that causes sporadic requests to time out + tcp: fix early ETIMEDOUT after spurious non-SACK RTO + btrfs: fix the max chunk size and stripe length calculation + nvmet: fix mar and mor off-by-one errors + RDMA/irdma: Report the correct max cqes from query device + RDMA/irdma: Return error on MR deregister CQP failure + RDMA/irdma: Return correct WC error for bind operation failure + RDMA/irdma: Report RNR NAK generation in device caps + net: dsa: felix: disable cut-through forwarding for frames oversized for tc-taprio + net: dsa: felix: access QSYS_TAG_CONFIG under tas_lock in vsc9959_sched_speed_set + net: ethernet: mtk_eth_soc: fix typo in __mtk_foe_entry_clear + net: ethernet: mtk_eth_soc: check max allowed hash in mtk_ppe_check_skb + net/smc: Fix possible access to freed memory in link clear + io_uring: recycle kbuf recycle on tw requeue + net: phy: lan87xx: change interrupt src of link_up to comm_ready + sch_sfb: Also store skb len before calling child enqueue + libperf evlist: Fix per-thread mmaps for multi-threaded targets + perf dlfilter dlfilter-show-cycles: Fix types for print format + perf script: Fix Cannot print 'iregs' field for hybrid systems + perf record: Fix synthesis failure warnings + hwmon: (tps23861) fix byte order in resistance register + ASoC: mchp-spdiftx: remove references to mchp_i2s_caps + ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion + MIPS: loongson32: ls1c: Fix hang during startup + kbuild: disable header exports for UML in a straightforward way + i40e: Refactor tc mqprio checks + i40e: Fix ADQ rate limiting for PF + net: bonding: replace dev_trans_start() with the jiffies of the last ARP/NS + bonding: accept unsolicited NA message + swiotlb: avoid potential left shift overflow + iommu/amd: use full 64-bit value in build_completion_wait() + s390/boot: fix absolute zero lowcore corruption on boot + time64.h: consolidate uses of PSEC_PER_NSEC + net: dsa: felix: tc-taprio intervals smaller than MTU should send at least one packet + hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined + hwmon: (mr75203) update pvt->v_num and vm_num to the actual number of used sensors + hwmon: (mr75203) fix voltage equation for negative source input + hwmon: (mr75203) fix multi-channel voltage reading + hwmon: (mr75203) enable polling for all VM channels + perf evlist: Always use arch_evlist__add_default_attrs() + perf stat: Fix L2 Topdown metrics disappear for raw events + Revert "arm64: kasan: Revert "arm64: mte: reset the page tag in page->flags"" + hwmon: (asus-ec-sensors) add support for Strix Z690-a D4 + hwmon: (asus-ec-sensors) add support for Maximus XI Hero + hwmon: (asus-ec-sensors) add missing sensors for X570-I GAMING + hwmon: (asus-ec-sensors) add definitions for ROG ZENITH II EXTREME + hwmon: (asus-ec-sensors) autoload module via DMI data + arm64/bti: Disable in kernel BTI when cross section thunks are broken + UBUNTU: [Config] updateconfigs for ARM64_BTI_KERNEL + iommu/vt-d: Correctly calculate sagaw value of IOMMU + iommu/virtio: Fix interaction with VFIO + iommu: Fix false ownership failure on AMD systems with PASID activated + drm/amd/display: Add SMU logging code + drm/amd/display: Removing assert statements for Linux + Linux 5.19.9 + UBUNTU: Upstream stable to v5.19.9 -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/1994068 Title: Kinetic update: v5.19.9 upstream stable release Status in linux package in Ubuntu: In Progress Status in linux source package in Kinetic: In Progress Bug description: SRU Justification Impact: The upstream process for stable tree updates is quite similar in scope to the Ubuntu SRU process, e.g., each patch has to demonstrably fix a bug, and each patch is vetted by upstream by originating either directly from a mainline/stable Linux tree or a minimally backported form of that patch. The following upstream stable patches should be included in the Ubuntu kernel: v5.19.9 upstream stable release from git://git.kernel.org/ efi: libstub: Disable struct randomization efi: capsule-loader: Fix use-after-free in efi_capsule_write wifi: mt76: mt7921e: fix crash in chip reset fail wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd() fs: only do a memory barrier for the first set_buffer_uptodate() soc: fsl: select FSL_GUTS driver for DPIO Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()" scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX scsi: core: Allow the ALUA transitioning state enough time scsi: megaraid_sas: Fix double kfree() drm/gem: Fix GEM handle release errors drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini drm/amdgpu: fix hive reference leak when adding xgmi device drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup. drm/amdgpu: Remove the additional kfd pre reset call for sriov drm/radeon: add a force flush to delay work when radeon scsi: ufs: core: Reduce the power mode change timeout Revert "parisc: Show error if wrong 32/64-bit compiler is being used" parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources() parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines UBUNTU: [Config] updateconfigs for ARM64_ERRATUM_2457168 arm64: errata: add detection for AMEVCNTR01 incrementing incorrectly netfilter: conntrack: work around exceeded receive window thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR cpufreq: check only freq_table in __resolve_freq() net/core/skbuff: Check the return value of skb_copy_bits() md: Flush workqueue md_rdev_misc_wq in md_alloc() fbdev: omapfb: Fix tests for platform_get_irq() failure fbdev: fbcon: Destroy mutex on freeing struct fb_info fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init() x86/sev: Mark snp_abort() noreturn drm/amdgpu: add sdma instance check for gfx11 CGCG drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly ALSA: pcm: oss: Fix race at SNDCTL_DSP_SYNC ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc() ALSA: hda: Once again fix regression of page allocations with IOMMU ALSA: aloop: Fix random zeros in capture data when using jiffies timer ALSA: usb-audio: Clear fixed clock rate at closing EP ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface() tracefs: Only clobber mode/uid/gid on remount if asked tracing: hold caller_addr to hardirq_{enable,disable}_ip tracing: Fix to check event_mutex is held while accessing trigger list btrfs: zoned: set pseudo max append zone limit in zone emulation mode btrfs: zoned: fix API misuse of zone finish waiting vfio/type1: Unpin zero pages kprobes: Prohibit probes in gate area perf: RISC-V: fix access beyond allocated array debugfs: add debugfs_lookup_and_remove() sched/debug: fix dentry leak in update_sched_domain_debugfs drm/amd/display: fix memory leak when using debugfs_lookup() driver core: fix driver_set_override() issue with empty strings nvmet: fix a use-after-free drm/i915/bios: Copy the whole MIPI sequence block drm/i915/slpc: Let's fix the PCODE min freq table setup for SLPC scsi: mpt3sas: Fix use-after-free warning scsi: lpfc: Add missing destroy_workqueue() in error path cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree cgroup: Fix threadgroup_rwsem <-> cpus_read_lock() deadlock cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() smb3: missing inode locks in zero range spi: bitbang: Fix lsb-first Rx ASoC: cs42l42: Only report button state if there was a button interrupt Revert "soc: imx: imx8m-blk-ctrl: set power device name" arm64: dts: imx8mm-verdin: update CAN clock to 40MHz arm64: dts: imx8mm-verdin: use level interrupt for mcp251xfd ASoC: qcom: sm8250: add missing module owner regmap: spi: Reserve space for register address/padding arm64: dts: imx8mp-venice-gw74xx: fix sai2 pin settings arm64: dts: imx8mq-tqma8mq: Remove superfluous interrupt-names RDMA/rtrs-clt: Use the right sg_cnt after ib_dma_map_sg RDMA/rtrs-srv: Pass the correct number of entries for dma mapped SGL ARM: dts: imx6qdl-vicut1.dtsi: Fix node name backlight_led ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible arm64: dts: ls1028a-qds-65bb: don't use in-band autoneg for 2500base-x soc: imx: gpcv2: Assert reset before ungating clock arm64: dts: verdin-imx8mm: add otg2 pd to usbphy arm64: dts: imx8mm-venice-gw7901: fix port/phy validation arm64: dts: freescale: verdin-imx8mm: fix atmel_mxt_ts reset polarity arm64: dts: freescale: verdin-imx8mp: fix atmel_mxt_ts reset polarity regulator: core: Clean up on enable failure ASoC: SOF: Kconfig: Make IPC_FLOOD_TEST depend on SND_SOC_SOF ASoC: SOF: Kconfig: Make IPC_MESSAGE_INJECTOR depend on SND_SOC_SOF tee: fix compiler warning in tee_shm_register() RDMA/irdma: Fix drain SQ hang with no completion arm64: dts: renesas: r8a779g0: Fix HSCIF0 interrupt number RDMA/cma: Fix arguments order in net device validation soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs RDMA/hns: Fix supported page size RDMA/hns: Fix wrong fixed value of qp->rq.wqe_shift RDMA/hns: Remove the num_qpc_timer variable wifi: wilc1000: fix DMA on stack objects ARM: at91: pm: fix self-refresh for sama7g5 ARM: at91: pm: fix DDR recalibration when resuming from backup and self-refresh ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges ARM: dts: at91: sama7g5ek: specify proper regulator output ranges ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time netfilter: br_netfilter: Drop dst references before setting. netfilter: nf_tables: clean up hook list when offload flags check fails riscv: dts: microchip: use an mpfs specific l2 compatible netfilter: nf_conntrack_irc: Fix forged IP logic RDMA/srp: Set scmnd->result only when scmnd is not NULL ALSA: usb-audio: Inform the delayed registration more properly ALSA: usb-audio: Register card again for iface over delayed_register option rxrpc: Fix ICMP/ICMP6 error handling rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2() afs: Use the operation issue time instead of the reply time for callbacks kunit: fix assert_type for comparison macros Revert "net: phy: meson-gxl: improve link-up behavior" sch_sfb: Don't assume the skb is still around after enqueueing to child tipc: fix shift wrapping bug in map_get() net: introduce __skb_fill_page_desc_noacc tcp: TX zerocopy should not sense pfmemalloc status ice: Fix DMA mappings leak ice: use bitmap_free instead of devm_kfree i40e: Fix kernel crash during module removal iavf: Detach device during reset task xen-netback: only remove 'hotplug-status' when the vif is actually destroyed block: don't add partitions if GD_SUPPRESS_PART_SCAN is set RDMA/siw: Pass a pointer to virt_to_page() bonding: use unspecified address if no available link local address bonding: add all node mcast address when slave up ipv6: sr: fix out-of-bounds read when setting HMAC data. IB/core: Fix a nested dead lock as part of ODP flow RDMA/mlx5: Set local port to one when accessing counters btrfs: zoned: fix mounting with conventional zones erofs: fix error return code in erofs_fscache_{meta_,}read_folio erofs: fix pcluster use-after-free on UP platforms nvme-tcp: fix UAF when detecting digest errors nvme-tcp: fix regression that causes sporadic requests to time out tcp: fix early ETIMEDOUT after spurious non-SACK RTO btrfs: fix the max chunk size and stripe length calculation nvmet: fix mar and mor off-by-one errors RDMA/irdma: Report the correct max cqes from query device RDMA/irdma: Return error on MR deregister CQP failure RDMA/irdma: Return correct WC error for bind operation failure RDMA/irdma: Report RNR NAK generation in device caps net: dsa: felix: disable cut-through forwarding for frames oversized for tc-taprio net: dsa: felix: access QSYS_TAG_CONFIG under tas_lock in vsc9959_sched_speed_set net: ethernet: mtk_eth_soc: fix typo in __mtk_foe_entry_clear net: ethernet: mtk_eth_soc: check max allowed hash in mtk_ppe_check_skb net/smc: Fix possible access to freed memory in link clear io_uring: recycle kbuf recycle on tw requeue net: phy: lan87xx: change interrupt src of link_up to comm_ready sch_sfb: Also store skb len before calling child enqueue libperf evlist: Fix per-thread mmaps for multi-threaded targets perf dlfilter dlfilter-show-cycles: Fix types for print format perf script: Fix Cannot print 'iregs' field for hybrid systems perf record: Fix synthesis failure warnings hwmon: (tps23861) fix byte order in resistance register ASoC: mchp-spdiftx: remove references to mchp_i2s_caps ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion MIPS: loongson32: ls1c: Fix hang during startup kbuild: disable header exports for UML in a straightforward way i40e: Refactor tc mqprio checks i40e: Fix ADQ rate limiting for PF net: bonding: replace dev_trans_start() with the jiffies of the last ARP/NS bonding: accept unsolicited NA message swiotlb: avoid potential left shift overflow iommu/amd: use full 64-bit value in build_completion_wait() s390/boot: fix absolute zero lowcore corruption on boot time64.h: consolidate uses of PSEC_PER_NSEC net: dsa: felix: tc-taprio intervals smaller than MTU should send at least one packet hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined hwmon: (mr75203) update pvt->v_num and vm_num to the actual number of used sensors hwmon: (mr75203) fix voltage equation for negative source input hwmon: (mr75203) fix multi-channel voltage reading hwmon: (mr75203) enable polling for all VM channels perf evlist: Always use arch_evlist__add_default_attrs() perf stat: Fix L2 Topdown metrics disappear for raw events Revert "arm64: kasan: Revert "arm64: mte: reset the page tag in page->flags"" hwmon: (asus-ec-sensors) add support for Strix Z690-a D4 hwmon: (asus-ec-sensors) add support for Maximus XI Hero hwmon: (asus-ec-sensors) add missing sensors for X570-I GAMING hwmon: (asus-ec-sensors) add definitions for ROG ZENITH II EXTREME hwmon: (asus-ec-sensors) autoload module via DMI data arm64/bti: Disable in kernel BTI when cross section thunks are broken UBUNTU: [Config] updateconfigs for ARM64_BTI_KERNEL iommu/vt-d: Correctly calculate sagaw value of IOMMU iommu/virtio: Fix interaction with VFIO iommu: Fix false ownership failure on AMD systems with PASID activated drm/amd/display: Add SMU logging code drm/amd/display: Removing assert statements for Linux Linux 5.19.9 UBUNTU: Upstream stable to v5.19.9 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1994068/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp