Public bug reported:

SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The following upstream
       stable patches should be included in the Ubuntu kernel:

       v5.19.12 upstream stable release
       from git://git.kernel.org/

smb3: Move the flush out of smb2_copychunk_range() into its callers
smb3: fix temporary data corruption in collapse range
smb3: fix temporary data corruption in insert range
usb: add quirks for Lenovo OneLink+ Dock
usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
smb3: use filemap_write_and_wait_range instead of filemap_write_and_wait
Revert "usb: add quirks for Lenovo OneLink+ Dock"
Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
xfrm: fix XFRMA_LASTUSED comment
block: remove QUEUE_FLAG_DEAD
block: stop setting the nomerges flags in blk_cleanup_queue
block: simplify disk shutdown
scsi: core: Fix a use-after-free
drivers/base: Fix unsigned comparison to -1 in CPUMAP_FILE_MAX_BYTES
USB: core: Fix RST error in hub.c
USB: serial: option: add Quectel BG95 0x0203 composition
USB: serial: option: add Quectel RM520N
ALSA: core: Fix double-free at snd_card_new()
ALSA: hda/tegra: set depop delay for tegra
ALSA: hda: Fix hang at HD-audio codec unbinding due to refcount saturation
ALSA: hda: Fix Nvidia dp infoframe
ALSA: hda: add Intel 5 Series / 3400 PCI DID
ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
ALSA: hda/realtek: Re-arrange quirk table entries
ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
ALSA: hda/realtek: Add a quirk for HP OMEN 16 (8902) mute LED
iommu/vt-d: Check correct capability for sagaw determination
exfat: fix overflow for large capacity partition
btrfs: fix hang during unmount when stopping block group reclaim worker
btrfs: fix hang during unmount when stopping a space reclaim worker
btrfs: zoned: wait for extent buffer IOs before finishing a zone
libperf evlist: Fix polling of system-wide events
media: flexcop-usb: fix endpoint type check
usb: dwc3: core: leave default DMA if the controller does not support 64-bit DMA
thunderbolt: Add support for Intel Maple Ridge single port controller
efi: x86: Wipe setup_data on pure EFI boot
efi: libstub: check Shim mode using MokSBStateRT
wifi: mt76: fix reading current per-tid starting sequence number for aggregation
gpio: mockup: fix NULL pointer dereference when removing debugfs
gpio: mockup: Fix potential resource leakage when register a chip
gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
riscv: fix a nasty sigreturn bug...
riscv: fix RISCV_ISA_SVPBMT kconfig dependency warning
drm/i915/gem: Flush contexts on driver release
drm/i915/gem: Really move i915_gem_context.link under ref protection
xen/xenbus: fix xenbus_setup_ring()
kasan: call kasan_malloc() from __kmalloc_*track_caller()
can: flexcan: flexcan_mailbox_read() fix return value for drop = true
net: mana: Add rmb after checking owner bits
mm/slub: fix to return errno if kmalloc() fails
mm: slub: fix flush_cpu_slab()/__free_slab() invocations in task context.
KVM: x86: Reinstate kvm_vcpu_arch.guest_supported_xcr0
KVM: x86: Always enable legacy FP/SSE in allowed user XFEATURES
KVM: x86: Inject #UD on emulated XSETBV if XSAVES isn't enabled
perf/arm-cmn: Add more bits to child node address offset field
arm64: topology: fix possible overflow in amu_fie_setup()
vmlinux.lds.h: CFI: Reduce alignment of jump-table to function alignment
batman-adv: Fix hang up with small MTU hard-interface
firmware: arm_scmi: Harden accesses to the reset domains
firmware: arm_scmi: Fix the asynchronous reset requests
arm64: dts: rockchip: Lower sd speed on quartz64-b
arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
arm64: dts: rockchip: Fix typo in lisense text for PX30.Core
drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
arm64: dts: imx8mm: Reverse CPLD_Dn GPIO label mapping on MX8Menlo
arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
arm64: dts: imx8mn: remove GPU power domain reset
arm64: dts: imx8ulp: add #reset-cells for pcc
dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
arm64: dts: rockchip: fix property for usb2 phy supply on rock-3a
arm64: dts: rockchip: fix property for usb2 phy supply on rk3568-evb1-v10
arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
arm64: dts: rockchip: Remove 'enable-active-low' from rk3566-quartz64-a
arm64: dts: imx8mm-verdin: extend pmic voltages
netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
netfilter: nf_conntrack_irc: Tighten matching on DCC message
netfilter: nfnetlink_osf: fix possible bogus match in nf_osf_find()
ice: Don't double unplug aux on peer initiated reset
ice: Fix crash by keep old cfg when update TCs more than queues
iavf: Fix cached head and tail value for iavf_get_tx_pending
ipvlan: Fix out-of-bound bugs caused by unset skb->mac_header
net: core: fix flow symmetric hash
wifi: iwlwifi: Mark IWLMEI as broken
UBUNTU: [Config] updateconfigs for IWLMEI
arm64: dts: tqma8mqml: Include phy-imx8-pcie.h header
drm/mediatek: Fix wrong dither settings
arm64: dts: imx8mp-venice-gw74xx: fix CAN STBY polarity
arm64: dts: imx8mp-venice-gw74xx: fix ksz9477 cpu port
ARM: dts: lan966x: Fix the interrupt number for internal PHYs
net: phy: aquantia: wait for the suspend/resume operations to finish
arm64: dts: imx8mp-venice-gw74xx: fix port/phy validation
scsi: qla2xxx: Fix memory leak in __qlt_24xx_handle_abts()
scsi: mpt3sas: Fix return value check of dma_get_required_mask()
net: bonding: Share lacpdu_mcast_addr definition
net: bonding: Unsync device addresses on ndo_stop
net: team: Unsync device addresses on ndo_stop
drm/panel: simple: Fix innolux_g121i1_l01 bus_format
mm/slab_common: fix possible double free of kmem_cache
MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
MIPS: Loongson32: Fix PHY-mode being left unspecified
um: fix default console kernel parameter
iavf: Fix bad page state
mlxbf_gige: clear MDIO gateway lock after read
i40e: Fix set max_tx_rate when it is lower than 1 Mbps
netdevsim: Fix hwstats debugfs file permissions
sfc: fix TX channel offset when using legacy interrupts
sfc: fix null pointer dereference in efx_hard_start_xmit
bnxt_en: fix flags to check for supported fw version
gve: Fix GFP flags when allocing pages
drm/hisilicon: Add depends on MMU
of: mdio: Add of_node_put() when breaking out of for_each_xx
net: ipa: properly limit modem routing table use
sfc/siena: fix TX channel offset when using legacy interrupts
sfc/siena: fix null pointer dereference in efx_hard_start_xmit
wireguard: ratelimiter: disable timings test by default
wireguard: netlink: avoid variable-sized memcpy on sockaddr
net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
net: enetc: deny offload of tc-based TSN features on VF interfaces
ipv6: Fix crash when IPv6 is administratively disabled
net/sched: taprio: avoid disabling offload when it was never enabled
net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs
ice: config netdev tc before setting queues number
ice: Fix interface being down after reset with link-down-on-close flag on
netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
netfilter: ebtables: fix memory leak when blob is malformed
netfilter: nf_ct_ftp: fix deadlock when nat rewrite is needed
net: ravb: Fix PHY state warning splat during system resume
net: sh_eth: Fix PHY state warning splat during system resume
gpio: tqmx86: fix uninitialized variable girq
can: gs_usb: gs_can_open(): fix race dev->can.state condition
perf stat: Fix BPF program section name
perf stat: Fix cpu map index in bperf cgroup code
perf jit: Include program header in ELF files
perf kcore_copy: Do not check /proc/modules is unchanged
perf tools: Honor namespace when synthesizing build-ids
drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
ice: Fix ice_xdp_xmit() when XDP TX queue number is not sufficient
net/smc: Stop the CLC flow if no link to map buffers on
net: phy: micrel: fix shared interrupt on LAN8814
bonding: fix NULL deref in bond_rr_gen_slave_id
net: sunhme: Fix packet reception for len < RX_COPY_THRESHOLD
net: sched: fix possible refcount leak in tc_new_tfilter()
bnxt: prevent skb UAF after handing over to PTP worker
selftests: forwarding: add shebang for sch_red.sh
io_uring: ensure that cached task references are always put on exit
serial: fsl_lpuart: Reset prior to registration
serial: Create uart_xmit_advance()
serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
cgroup: cgroup_get_from_id() must check the looked-up kn is a directory
phy: marvell: phy-mvebu-a3700-comphy: Remove broken reset support
s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
blk-mq: fix error handling in __blk_mq_alloc_disk
block: call blk_mq_exit_queue from disk_release for never added disks
block: Do not call blk_put_queue() if gendisk allocation fails
Drivers: hv: Never allocate anything besides framebuffer from framebuffer 
memory region
drm/gma500: Fix BUG: sleeping function called from invalid context errors
drm/gma500: Fix WARN_ON(lock->magic != lock) error
drm/gma500: Fix (vblank) IRQs not working after suspend/resume
gpio: ixp4xx: Make irqchip immutable
drm/amd/pm: disable BACO entry/exit completely on several sienna cichlid cards
drm/amdgpu: change the alignment size of TMR BO to 1M
drm/amdgpu: add HDP remap functionality to nbio 7.7
drm/amdgpu: Skip reset error status for psp v13_0_0
drm/amd/display: Limit user regamma to a valid value
drm/amd/display: Reduce number of arguments of dml31's 
CalculateWatermarksAndDRAMSpeedChangeSupport()
drm/amd/display: Reduce number of arguments of dml31's CalculateFlipSchedule()
drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
gpio: mt7621: Make the irqchip immutable
pmem: fix a name collision
fsdax: Fix infinite loop in dax_iomap_rw()
workqueue: don't skip lockdep work dependency in cancel_work_sync()
i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
i2c: mlxbf: incorrect base address passed during io write
i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
i2c: mlxbf: Fix frequency calculation
i2c: mux: harden i2c_mux_alloc() against integer overflows
drm/amdgpu: don't register a dirty callback for non-atomic
certs: make system keyring depend on built-in x509 parser
Makefile.debug: set -g unconditional on CONFIG_DEBUG_INFO_SPLIT
Makefile.debug: re-enable debug info for .S files
devdax: Fix soft-reservation memory description
ext4: fix bug in extents parsing when eh_entries == 0 and eh_depth > 0
ext4: limit the number of retries after discarding preallocations blocks
ext4: make mballoc try target group first even with mb_optimize_scan
ext4: avoid unnecessary spreading of allocations among groups
ext4: use locality group preallocation for small closed files
ext4: use buckets for cr 1 block scan instead of rbtree
Revert "block: freeze the queue earlier in del_gendisk"
ext4: fixup possible uninitialized variable access in 
ext4_mb_choose_next_group_cr1()
ext4: make directory inode spreading reflect flexbg size
Linux 5.19.12
UBUNTU: Upstream stable to v5.19.12

** Affects: linux (Ubuntu)
     Importance: Medium
     Assignee: Kamal Mostafa (kamalmostafa)
         Status: In Progress

** Affects: linux (Ubuntu Kinetic)
     Importance: Medium
     Assignee: Kamal Mostafa (kamalmostafa)
         Status: In Progress


** Tags: kernel-stable-tracking-bug

** Changed in: linux (Ubuntu)
       Status: New => Confirmed

** Tags added: kernel-stable-tracking-bug

** Also affects: linux (Ubuntu Kinetic)
   Importance: Undecided
       Status: Confirmed

** Changed in: linux (Ubuntu Kinetic)
       Status: Confirmed => In Progress

** Changed in: linux (Ubuntu Kinetic)
   Importance: Undecided => Medium

** Changed in: linux (Ubuntu Kinetic)
     Assignee: (unassigned) => Kamal Mostafa (kamalmostafa)

** Description changed:

+ SRU Justification
  
-     SRU Justification
+     Impact:
+        The upstream process for stable tree updates is quite similar
+        in scope to the Ubuntu SRU process, e.g., each patch has to
+        demonstrably fix a bug, and each patch is vetted by upstream
+        by originating either directly from a mainline/stable Linux tree or
+        a minimally backported form of that patch. The following upstream
+        stable patches should be included in the Ubuntu kernel:
  
-     Impact:
-        The upstream process for stable tree updates is quite similar
-        in scope to the Ubuntu SRU process, e.g., each patch has to
-        demonstrably fix a bug, and each patch is vetted by upstream
-        by originating either directly from a mainline/stable Linux tree or
-        a minimally backported form of that patch. The following upstream
-        stable patches should be included in the Ubuntu kernel:
+        v5.19.12 upstream stable release
+        from git://git.kernel.org/
  
-        v5.19.12 upstream stable release
-        from git://git.kernel.org/
+ smb3: Move the flush out of smb2_copychunk_range() into its callers
+ smb3: fix temporary data corruption in collapse range
+ smb3: fix temporary data corruption in insert range
+ usb: add quirks for Lenovo OneLink+ Dock
+ usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
+ smb3: use filemap_write_and_wait_range instead of filemap_write_and_wait
+ Revert "usb: add quirks for Lenovo OneLink+ Dock"
+ Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
+ xfrm: fix XFRMA_LASTUSED comment
+ block: remove QUEUE_FLAG_DEAD
+ block: stop setting the nomerges flags in blk_cleanup_queue
+ block: simplify disk shutdown
+ scsi: core: Fix a use-after-free
+ drivers/base: Fix unsigned comparison to -1 in CPUMAP_FILE_MAX_BYTES
+ USB: core: Fix RST error in hub.c
+ USB: serial: option: add Quectel BG95 0x0203 composition
+ USB: serial: option: add Quectel RM520N
+ ALSA: core: Fix double-free at snd_card_new()
+ ALSA: hda/tegra: set depop delay for tegra
+ ALSA: hda: Fix hang at HD-audio codec unbinding due to refcount saturation
+ ALSA: hda: Fix Nvidia dp infoframe
+ ALSA: hda: add Intel 5 Series / 3400 PCI DID
+ ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
+ ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
+ ALSA: hda/realtek: Re-arrange quirk table entries
+ ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
+ ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
+ ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
+ ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
+ ALSA: hda/realtek: Add a quirk for HP OMEN 16 (8902) mute LED
+ iommu/vt-d: Check correct capability for sagaw determination
+ exfat: fix overflow for large capacity partition
+ btrfs: fix hang during unmount when stopping block group reclaim worker
+ btrfs: fix hang during unmount when stopping a space reclaim worker
+ btrfs: zoned: wait for extent buffer IOs before finishing a zone
+ libperf evlist: Fix polling of system-wide events
+ media: flexcop-usb: fix endpoint type check
+ usb: dwc3: core: leave default DMA if the controller does not support 64-bit 
DMA
+ thunderbolt: Add support for Intel Maple Ridge single port controller
+ efi: x86: Wipe setup_data on pure EFI boot
+ efi: libstub: check Shim mode using MokSBStateRT
+ wifi: mt76: fix reading current per-tid starting sequence number for 
aggregation
+ gpio: mockup: fix NULL pointer dereference when removing debugfs
+ gpio: mockup: Fix potential resource leakage when register a chip
+ gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
+ riscv: fix a nasty sigreturn bug...
+ riscv: fix RISCV_ISA_SVPBMT kconfig dependency warning
+ drm/i915/gem: Flush contexts on driver release
+ drm/i915/gem: Really move i915_gem_context.link under ref protection
+ xen/xenbus: fix xenbus_setup_ring()
+ kasan: call kasan_malloc() from __kmalloc_*track_caller()
+ can: flexcan: flexcan_mailbox_read() fix return value for drop = true
+ net: mana: Add rmb after checking owner bits
+ mm/slub: fix to return errno if kmalloc() fails
+ mm: slub: fix flush_cpu_slab()/__free_slab() invocations in task context.
+ KVM: x86: Reinstate kvm_vcpu_arch.guest_supported_xcr0
+ KVM: x86: Always enable legacy FP/SSE in allowed user XFEATURES
+ KVM: x86: Inject #UD on emulated XSETBV if XSAVES isn't enabled
+ perf/arm-cmn: Add more bits to child node address offset field
+ arm64: topology: fix possible overflow in amu_fie_setup()
+ vmlinux.lds.h: CFI: Reduce alignment of jump-table to function alignment
+ batman-adv: Fix hang up with small MTU hard-interface
+ firmware: arm_scmi: Harden accesses to the reset domains
+ firmware: arm_scmi: Fix the asynchronous reset requests
+ arm64: dts: rockchip: Lower sd speed on quartz64-b
+ arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
+ arm64: dts: rockchip: Fix typo in lisense text for PX30.Core
+ drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
+ arm64: dts: imx8mm: Reverse CPLD_Dn GPIO label mapping on MX8Menlo
+ arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
+ arm64: dts: imx8mn: remove GPU power domain reset
+ arm64: dts: imx8ulp: add #reset-cells for pcc
+ dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
+ arm64: dts: rockchip: fix property for usb2 phy supply on rock-3a
+ arm64: dts: rockchip: fix property for usb2 phy supply on rk3568-evb1-v10
+ arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
+ arm64: dts: rockchip: Remove 'enable-active-low' from rk3566-quartz64-a
+ arm64: dts: imx8mm-verdin: extend pmic voltages
+ netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
+ netfilter: nf_conntrack_irc: Tighten matching on DCC message
+ netfilter: nfnetlink_osf: fix possible bogus match in nf_osf_find()
+ ice: Don't double unplug aux on peer initiated reset
+ ice: Fix crash by keep old cfg when update TCs more than queues
+ iavf: Fix cached head and tail value for iavf_get_tx_pending
+ ipvlan: Fix out-of-bound bugs caused by unset skb->mac_header
+ net: core: fix flow symmetric hash
+ wifi: iwlwifi: Mark IWLMEI as broken
+ UBUNTU: [Config] updateconfigs for IWLMEI
+ arm64: dts: tqma8mqml: Include phy-imx8-pcie.h header
+ drm/mediatek: Fix wrong dither settings
+ arm64: dts: imx8mp-venice-gw74xx: fix CAN STBY polarity
+ arm64: dts: imx8mp-venice-gw74xx: fix ksz9477 cpu port
+ ARM: dts: lan966x: Fix the interrupt number for internal PHYs
+ net: phy: aquantia: wait for the suspend/resume operations to finish
+ arm64: dts: imx8mp-venice-gw74xx: fix port/phy validation
+ scsi: qla2xxx: Fix memory leak in __qlt_24xx_handle_abts()
+ scsi: mpt3sas: Fix return value check of dma_get_required_mask()
+ net: bonding: Share lacpdu_mcast_addr definition
+ net: bonding: Unsync device addresses on ndo_stop
+ net: team: Unsync device addresses on ndo_stop
+ drm/panel: simple: Fix innolux_g121i1_l01 bus_format
+ mm/slab_common: fix possible double free of kmem_cache
+ MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
+ MIPS: Loongson32: Fix PHY-mode being left unspecified
+ um: fix default console kernel parameter
+ iavf: Fix bad page state
+ mlxbf_gige: clear MDIO gateway lock after read
+ i40e: Fix set max_tx_rate when it is lower than 1 Mbps
+ netdevsim: Fix hwstats debugfs file permissions
+ sfc: fix TX channel offset when using legacy interrupts
+ sfc: fix null pointer dereference in efx_hard_start_xmit
+ bnxt_en: fix flags to check for supported fw version
+ gve: Fix GFP flags when allocing pages
+ drm/hisilicon: Add depends on MMU
+ of: mdio: Add of_node_put() when breaking out of for_each_xx
+ net: ipa: properly limit modem routing table use
+ sfc/siena: fix TX channel offset when using legacy interrupts
+ sfc/siena: fix null pointer dereference in efx_hard_start_xmit
+ wireguard: ratelimiter: disable timings test by default
+ wireguard: netlink: avoid variable-sized memcpy on sockaddr
+ net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
+ net: enetc: deny offload of tc-based TSN features on VF interfaces
+ ipv6: Fix crash when IPv6 is administratively disabled
+ net/sched: taprio: avoid disabling offload when it was never enabled
+ net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child 
qdiscs
+ ice: config netdev tc before setting queues number
+ ice: Fix interface being down after reset with link-down-on-close flag on
+ netfilter: nf_tables: fix nft_counters_enabled underflow at 
nf_tables_addchain()
+ netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
+ netfilter: ebtables: fix memory leak when blob is malformed
+ netfilter: nf_ct_ftp: fix deadlock when nat rewrite is needed
+ net: ravb: Fix PHY state warning splat during system resume
+ net: sh_eth: Fix PHY state warning splat during system resume
+ gpio: tqmx86: fix uninitialized variable girq
+ can: gs_usb: gs_can_open(): fix race dev->can.state condition
+ perf stat: Fix BPF program section name
+ perf stat: Fix cpu map index in bperf cgroup code
+ perf jit: Include program header in ELF files
+ perf kcore_copy: Do not check /proc/modules is unchanged
+ perf tools: Honor namespace when synthesizing build-ids
+ drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
+ ice: Fix ice_xdp_xmit() when XDP TX queue number is not sufficient
+ net/smc: Stop the CLC flow if no link to map buffers on
+ net: phy: micrel: fix shared interrupt on LAN8814
+ bonding: fix NULL deref in bond_rr_gen_slave_id
+ net: sunhme: Fix packet reception for len < RX_COPY_THRESHOLD
+ net: sched: fix possible refcount leak in tc_new_tfilter()
+ bnxt: prevent skb UAF after handing over to PTP worker
+ selftests: forwarding: add shebang for sch_red.sh
+ io_uring: ensure that cached task references are always put on exit
+ serial: fsl_lpuart: Reset prior to registration
+ serial: Create uart_xmit_advance()
+ serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
+ serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
+ cgroup: cgroup_get_from_id() must check the looked-up kn is a directory
+ phy: marvell: phy-mvebu-a3700-comphy: Remove broken reset support
+ s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
+ blk-mq: fix error handling in __blk_mq_alloc_disk
+ block: call blk_mq_exit_queue from disk_release for never added disks
+ block: Do not call blk_put_queue() if gendisk allocation fails
+ Drivers: hv: Never allocate anything besides framebuffer from framebuffer 
memory region
+ drm/gma500: Fix BUG: sleeping function called from invalid context errors
+ drm/gma500: Fix WARN_ON(lock->magic != lock) error
+ drm/gma500: Fix (vblank) IRQs not working after suspend/resume
+ gpio: ixp4xx: Make irqchip immutable
+ drm/amd/pm: disable BACO entry/exit completely on several sienna cichlid cards
+ drm/amdgpu: change the alignment size of TMR BO to 1M
+ drm/amdgpu: add HDP remap functionality to nbio 7.7
+ drm/amdgpu: Skip reset error status for psp v13_0_0
+ drm/amd/display: Limit user regamma to a valid value
+ drm/amd/display: Reduce number of arguments of dml31's 
CalculateWatermarksAndDRAMSpeedChangeSupport()
+ drm/amd/display: Reduce number of arguments of dml31's CalculateFlipSchedule()
+ drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
+ drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
+ gpio: mt7621: Make the irqchip immutable
+ pmem: fix a name collision
+ fsdax: Fix infinite loop in dax_iomap_rw()
+ workqueue: don't skip lockdep work dependency in cancel_work_sync()
+ i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
+ i2c: mlxbf: incorrect base address passed during io write
+ i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
+ i2c: mlxbf: Fix frequency calculation
+ i2c: mux: harden i2c_mux_alloc() against integer overflows
+ drm/amdgpu: don't register a dirty callback for non-atomic
+ certs: make system keyring depend on built-in x509 parser
+ Makefile.debug: set -g unconditional on CONFIG_DEBUG_INFO_SPLIT
+ Makefile.debug: re-enable debug info for .S files
+ devdax: Fix soft-reservation memory description
+ ext4: fix bug in extents parsing when eh_entries == 0 and eh_depth > 0
+ ext4: limit the number of retries after discarding preallocations blocks
+ ext4: make mballoc try target group first even with mb_optimize_scan
+ ext4: avoid unnecessary spreading of allocations among groups
+ ext4: use locality group preallocation for small closed files
+ ext4: use buckets for cr 1 block scan instead of rbtree
+ Revert "block: freeze the queue earlier in del_gendisk"
+ ext4: fixup possible uninitialized variable access in 
ext4_mb_choose_next_group_cr1()
+ ext4: make directory inode spreading reflect flexbg size
+ Linux 5.19.12
+ UBUNTU: Upstream stable to v5.19.12

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1994074

Title:
  Kinetic update: v5.19.12 upstream stable release

Status in linux package in Ubuntu:
  In Progress
Status in linux source package in Kinetic:
  In Progress

Bug description:
  SRU Justification

      Impact:
         The upstream process for stable tree updates is quite similar
         in scope to the Ubuntu SRU process, e.g., each patch has to
         demonstrably fix a bug, and each patch is vetted by upstream
         by originating either directly from a mainline/stable Linux tree or
         a minimally backported form of that patch. The following upstream
         stable patches should be included in the Ubuntu kernel:

         v5.19.12 upstream stable release
         from git://git.kernel.org/

  smb3: Move the flush out of smb2_copychunk_range() into its callers
  smb3: fix temporary data corruption in collapse range
  smb3: fix temporary data corruption in insert range
  usb: add quirks for Lenovo OneLink+ Dock
  usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
  smb3: use filemap_write_and_wait_range instead of filemap_write_and_wait
  Revert "usb: add quirks for Lenovo OneLink+ Dock"
  Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio"
  xfrm: fix XFRMA_LASTUSED comment
  block: remove QUEUE_FLAG_DEAD
  block: stop setting the nomerges flags in blk_cleanup_queue
  block: simplify disk shutdown
  scsi: core: Fix a use-after-free
  drivers/base: Fix unsigned comparison to -1 in CPUMAP_FILE_MAX_BYTES
  USB: core: Fix RST error in hub.c
  USB: serial: option: add Quectel BG95 0x0203 composition
  USB: serial: option: add Quectel RM520N
  ALSA: core: Fix double-free at snd_card_new()
  ALSA: hda/tegra: set depop delay for tegra
  ALSA: hda: Fix hang at HD-audio codec unbinding due to refcount saturation
  ALSA: hda: Fix Nvidia dp infoframe
  ALSA: hda: add Intel 5 Series / 3400 PCI DID
  ALSA: hda/realtek: Add quirk for Huawei WRT-WX9
  ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop
  ALSA: hda/realtek: Re-arrange quirk table entries
  ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack
  ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack
  ALSA: hda/realtek: Add quirk for ASUS GA503R laptop
  ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
  ALSA: hda/realtek: Add a quirk for HP OMEN 16 (8902) mute LED
  iommu/vt-d: Check correct capability for sagaw determination
  exfat: fix overflow for large capacity partition
  btrfs: fix hang during unmount when stopping block group reclaim worker
  btrfs: fix hang during unmount when stopping a space reclaim worker
  btrfs: zoned: wait for extent buffer IOs before finishing a zone
  libperf evlist: Fix polling of system-wide events
  media: flexcop-usb: fix endpoint type check
  usb: dwc3: core: leave default DMA if the controller does not support 64-bit 
DMA
  thunderbolt: Add support for Intel Maple Ridge single port controller
  efi: x86: Wipe setup_data on pure EFI boot
  efi: libstub: check Shim mode using MokSBStateRT
  wifi: mt76: fix reading current per-tid starting sequence number for 
aggregation
  gpio: mockup: fix NULL pointer dereference when removing debugfs
  gpio: mockup: Fix potential resource leakage when register a chip
  gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
  riscv: fix a nasty sigreturn bug...
  riscv: fix RISCV_ISA_SVPBMT kconfig dependency warning
  drm/i915/gem: Flush contexts on driver release
  drm/i915/gem: Really move i915_gem_context.link under ref protection
  xen/xenbus: fix xenbus_setup_ring()
  kasan: call kasan_malloc() from __kmalloc_*track_caller()
  can: flexcan: flexcan_mailbox_read() fix return value for drop = true
  net: mana: Add rmb after checking owner bits
  mm/slub: fix to return errno if kmalloc() fails
  mm: slub: fix flush_cpu_slab()/__free_slab() invocations in task context.
  KVM: x86: Reinstate kvm_vcpu_arch.guest_supported_xcr0
  KVM: x86: Always enable legacy FP/SSE in allowed user XFEATURES
  KVM: x86: Inject #UD on emulated XSETBV if XSAVES isn't enabled
  perf/arm-cmn: Add more bits to child node address offset field
  arm64: topology: fix possible overflow in amu_fie_setup()
  vmlinux.lds.h: CFI: Reduce alignment of jump-table to function alignment
  batman-adv: Fix hang up with small MTU hard-interface
  firmware: arm_scmi: Harden accesses to the reset domains
  firmware: arm_scmi: Fix the asynchronous reset requests
  arm64: dts: rockchip: Lower sd speed on quartz64-b
  arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob
  arm64: dts: rockchip: Fix typo in lisense text for PX30.Core
  drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks
  arm64: dts: imx8mm: Reverse CPLD_Dn GPIO label mapping on MX8Menlo
  arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
  arm64: dts: imx8mn: remove GPU power domain reset
  arm64: dts: imx8ulp: add #reset-cells for pcc
  dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
  arm64: dts: rockchip: fix property for usb2 phy supply on rock-3a
  arm64: dts: rockchip: fix property for usb2 phy supply on rk3568-evb1-v10
  arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
  arm64: dts: rockchip: Remove 'enable-active-low' from rk3566-quartz64-a
  arm64: dts: imx8mm-verdin: extend pmic voltages
  netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
  netfilter: nf_conntrack_irc: Tighten matching on DCC message
  netfilter: nfnetlink_osf: fix possible bogus match in nf_osf_find()
  ice: Don't double unplug aux on peer initiated reset
  ice: Fix crash by keep old cfg when update TCs more than queues
  iavf: Fix cached head and tail value for iavf_get_tx_pending
  ipvlan: Fix out-of-bound bugs caused by unset skb->mac_header
  net: core: fix flow symmetric hash
  wifi: iwlwifi: Mark IWLMEI as broken
  UBUNTU: [Config] updateconfigs for IWLMEI
  arm64: dts: tqma8mqml: Include phy-imx8-pcie.h header
  drm/mediatek: Fix wrong dither settings
  arm64: dts: imx8mp-venice-gw74xx: fix CAN STBY polarity
  arm64: dts: imx8mp-venice-gw74xx: fix ksz9477 cpu port
  ARM: dts: lan966x: Fix the interrupt number for internal PHYs
  net: phy: aquantia: wait for the suspend/resume operations to finish
  arm64: dts: imx8mp-venice-gw74xx: fix port/phy validation
  scsi: qla2xxx: Fix memory leak in __qlt_24xx_handle_abts()
  scsi: mpt3sas: Fix return value check of dma_get_required_mask()
  net: bonding: Share lacpdu_mcast_addr definition
  net: bonding: Unsync device addresses on ndo_stop
  net: team: Unsync device addresses on ndo_stop
  drm/panel: simple: Fix innolux_g121i1_l01 bus_format
  mm/slab_common: fix possible double free of kmem_cache
  MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
  MIPS: Loongson32: Fix PHY-mode being left unspecified
  um: fix default console kernel parameter
  iavf: Fix bad page state
  mlxbf_gige: clear MDIO gateway lock after read
  i40e: Fix set max_tx_rate when it is lower than 1 Mbps
  netdevsim: Fix hwstats debugfs file permissions
  sfc: fix TX channel offset when using legacy interrupts
  sfc: fix null pointer dereference in efx_hard_start_xmit
  bnxt_en: fix flags to check for supported fw version
  gve: Fix GFP flags when allocing pages
  drm/hisilicon: Add depends on MMU
  of: mdio: Add of_node_put() when breaking out of for_each_xx
  net: ipa: properly limit modem routing table use
  sfc/siena: fix TX channel offset when using legacy interrupts
  sfc/siena: fix null pointer dereference in efx_hard_start_xmit
  wireguard: ratelimiter: disable timings test by default
  wireguard: netlink: avoid variable-sized memcpy on sockaddr
  net: enetc: move enetc_set_psfp() out of the common enetc_set_features()
  net: enetc: deny offload of tc-based TSN features on VF interfaces
  ipv6: Fix crash when IPv6 is administratively disabled
  net/sched: taprio: avoid disabling offload when it was never enabled
  net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child 
qdiscs
  ice: config netdev tc before setting queues number
  ice: Fix interface being down after reset with link-down-on-close flag on
  netfilter: nf_tables: fix nft_counters_enabled underflow at 
nf_tables_addchain()
  netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
  netfilter: ebtables: fix memory leak when blob is malformed
  netfilter: nf_ct_ftp: fix deadlock when nat rewrite is needed
  net: ravb: Fix PHY state warning splat during system resume
  net: sh_eth: Fix PHY state warning splat during system resume
  gpio: tqmx86: fix uninitialized variable girq
  can: gs_usb: gs_can_open(): fix race dev->can.state condition
  perf stat: Fix BPF program section name
  perf stat: Fix cpu map index in bperf cgroup code
  perf jit: Include program header in ELF files
  perf kcore_copy: Do not check /proc/modules is unchanged
  perf tools: Honor namespace when synthesizing build-ids
  drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff()
  ice: Fix ice_xdp_xmit() when XDP TX queue number is not sufficient
  net/smc: Stop the CLC flow if no link to map buffers on
  net: phy: micrel: fix shared interrupt on LAN8814
  bonding: fix NULL deref in bond_rr_gen_slave_id
  net: sunhme: Fix packet reception for len < RX_COPY_THRESHOLD
  net: sched: fix possible refcount leak in tc_new_tfilter()
  bnxt: prevent skb UAF after handing over to PTP worker
  selftests: forwarding: add shebang for sch_red.sh
  io_uring: ensure that cached task references are always put on exit
  serial: fsl_lpuart: Reset prior to registration
  serial: Create uart_xmit_advance()
  serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
  serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting
  cgroup: cgroup_get_from_id() must check the looked-up kn is a directory
  phy: marvell: phy-mvebu-a3700-comphy: Remove broken reset support
  s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
  blk-mq: fix error handling in __blk_mq_alloc_disk
  block: call blk_mq_exit_queue from disk_release for never added disks
  block: Do not call blk_put_queue() if gendisk allocation fails
  Drivers: hv: Never allocate anything besides framebuffer from framebuffer 
memory region
  drm/gma500: Fix BUG: sleeping function called from invalid context errors
  drm/gma500: Fix WARN_ON(lock->magic != lock) error
  drm/gma500: Fix (vblank) IRQs not working after suspend/resume
  gpio: ixp4xx: Make irqchip immutable
  drm/amd/pm: disable BACO entry/exit completely on several sienna cichlid cards
  drm/amdgpu: change the alignment size of TMR BO to 1M
  drm/amdgpu: add HDP remap functionality to nbio 7.7
  drm/amdgpu: Skip reset error status for psp v13_0_0
  drm/amd/display: Limit user regamma to a valid value
  drm/amd/display: Reduce number of arguments of dml31's 
CalculateWatermarksAndDRAMSpeedChangeSupport()
  drm/amd/display: Reduce number of arguments of dml31's CalculateFlipSchedule()
  drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage
  drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
  gpio: mt7621: Make the irqchip immutable
  pmem: fix a name collision
  fsdax: Fix infinite loop in dax_iomap_rw()
  workqueue: don't skip lockdep work dependency in cancel_work_sync()
  i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible
  i2c: mlxbf: incorrect base address passed during io write
  i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
  i2c: mlxbf: Fix frequency calculation
  i2c: mux: harden i2c_mux_alloc() against integer overflows
  drm/amdgpu: don't register a dirty callback for non-atomic
  certs: make system keyring depend on built-in x509 parser
  Makefile.debug: set -g unconditional on CONFIG_DEBUG_INFO_SPLIT
  Makefile.debug: re-enable debug info for .S files
  devdax: Fix soft-reservation memory description
  ext4: fix bug in extents parsing when eh_entries == 0 and eh_depth > 0
  ext4: limit the number of retries after discarding preallocations blocks
  ext4: make mballoc try target group first even with mb_optimize_scan
  ext4: avoid unnecessary spreading of allocations among groups
  ext4: use locality group preallocation for small closed files
  ext4: use buckets for cr 1 block scan instead of rbtree
  Revert "block: freeze the queue earlier in del_gendisk"
  ext4: fixup possible uninitialized variable access in 
ext4_mb_choose_next_group_cr1()
  ext4: make directory inode spreading reflect flexbg size
  Linux 5.19.12
  UBUNTU: Upstream stable to v5.19.12

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1994074/+subscriptions


-- 
Mailing list: https://launchpad.net/~kernel-packages
Post to     : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to