Public bug reported: SRU Justification
Impact: The upstream process for stable tree updates is quite similar in scope to the Ubuntu SRU process, e.g., each patch has to demonstrably fix a bug, and each patch is vetted by upstream by originating either directly from a mainline/stable Linux tree or a minimally backported form of that patch. The following upstream stable patches should be included in the Ubuntu kernel: v5.19.12 upstream stable release from git://git.kernel.org/ smb3: Move the flush out of smb2_copychunk_range() into its callers smb3: fix temporary data corruption in collapse range smb3: fix temporary data corruption in insert range usb: add quirks for Lenovo OneLink+ Dock usb: gadget: udc-xilinx: replace memcpy with memcpy_toio smb3: use filemap_write_and_wait_range instead of filemap_write_and_wait Revert "usb: add quirks for Lenovo OneLink+ Dock" Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio" xfrm: fix XFRMA_LASTUSED comment block: remove QUEUE_FLAG_DEAD block: stop setting the nomerges flags in blk_cleanup_queue block: simplify disk shutdown scsi: core: Fix a use-after-free drivers/base: Fix unsigned comparison to -1 in CPUMAP_FILE_MAX_BYTES USB: core: Fix RST error in hub.c USB: serial: option: add Quectel BG95 0x0203 composition USB: serial: option: add Quectel RM520N ALSA: core: Fix double-free at snd_card_new() ALSA: hda/tegra: set depop delay for tegra ALSA: hda: Fix hang at HD-audio codec unbinding due to refcount saturation ALSA: hda: Fix Nvidia dp infoframe ALSA: hda: add Intel 5 Series / 3400 PCI DID ALSA: hda/realtek: Add quirk for Huawei WRT-WX9 ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop ALSA: hda/realtek: Re-arrange quirk table entries ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack ALSA: hda/realtek: Add quirk for ASUS GA503R laptop ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop ALSA: hda/realtek: Add a quirk for HP OMEN 16 (8902) mute LED iommu/vt-d: Check correct capability for sagaw determination exfat: fix overflow for large capacity partition btrfs: fix hang during unmount when stopping block group reclaim worker btrfs: fix hang during unmount when stopping a space reclaim worker btrfs: zoned: wait for extent buffer IOs before finishing a zone libperf evlist: Fix polling of system-wide events media: flexcop-usb: fix endpoint type check usb: dwc3: core: leave default DMA if the controller does not support 64-bit DMA thunderbolt: Add support for Intel Maple Ridge single port controller efi: x86: Wipe setup_data on pure EFI boot efi: libstub: check Shim mode using MokSBStateRT wifi: mt76: fix reading current per-tid starting sequence number for aggregation gpio: mockup: fix NULL pointer dereference when removing debugfs gpio: mockup: Fix potential resource leakage when register a chip gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully riscv: fix a nasty sigreturn bug... riscv: fix RISCV_ISA_SVPBMT kconfig dependency warning drm/i915/gem: Flush contexts on driver release drm/i915/gem: Really move i915_gem_context.link under ref protection xen/xenbus: fix xenbus_setup_ring() kasan: call kasan_malloc() from __kmalloc_*track_caller() can: flexcan: flexcan_mailbox_read() fix return value for drop = true net: mana: Add rmb after checking owner bits mm/slub: fix to return errno if kmalloc() fails mm: slub: fix flush_cpu_slab()/__free_slab() invocations in task context. KVM: x86: Reinstate kvm_vcpu_arch.guest_supported_xcr0 KVM: x86: Always enable legacy FP/SSE in allowed user XFEATURES KVM: x86: Inject #UD on emulated XSETBV if XSAVES isn't enabled perf/arm-cmn: Add more bits to child node address offset field arm64: topology: fix possible overflow in amu_fie_setup() vmlinux.lds.h: CFI: Reduce alignment of jump-table to function alignment batman-adv: Fix hang up with small MTU hard-interface firmware: arm_scmi: Harden accesses to the reset domains firmware: arm_scmi: Fix the asynchronous reset requests arm64: dts: rockchip: Lower sd speed on quartz64-b arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob arm64: dts: rockchip: Fix typo in lisense text for PX30.Core drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks arm64: dts: imx8mm: Reverse CPLD_Dn GPIO label mapping on MX8Menlo arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz arm64: dts: imx8mn: remove GPU power domain reset arm64: dts: imx8ulp: add #reset-cells for pcc dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get() arm64: dts: rockchip: fix property for usb2 phy supply on rock-3a arm64: dts: rockchip: fix property for usb2 phy supply on rk3568-evb1-v10 arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma arm64: dts: rockchip: Remove 'enable-active-low' from rk3566-quartz64-a arm64: dts: imx8mm-verdin: extend pmic voltages netfilter: nf_conntrack_sip: fix ct_sip_walk_headers netfilter: nf_conntrack_irc: Tighten matching on DCC message netfilter: nfnetlink_osf: fix possible bogus match in nf_osf_find() ice: Don't double unplug aux on peer initiated reset ice: Fix crash by keep old cfg when update TCs more than queues iavf: Fix cached head and tail value for iavf_get_tx_pending ipvlan: Fix out-of-bound bugs caused by unset skb->mac_header net: core: fix flow symmetric hash wifi: iwlwifi: Mark IWLMEI as broken UBUNTU: [Config] updateconfigs for IWLMEI arm64: dts: tqma8mqml: Include phy-imx8-pcie.h header drm/mediatek: Fix wrong dither settings arm64: dts: imx8mp-venice-gw74xx: fix CAN STBY polarity arm64: dts: imx8mp-venice-gw74xx: fix ksz9477 cpu port ARM: dts: lan966x: Fix the interrupt number for internal PHYs net: phy: aquantia: wait for the suspend/resume operations to finish arm64: dts: imx8mp-venice-gw74xx: fix port/phy validation scsi: qla2xxx: Fix memory leak in __qlt_24xx_handle_abts() scsi: mpt3sas: Fix return value check of dma_get_required_mask() net: bonding: Share lacpdu_mcast_addr definition net: bonding: Unsync device addresses on ndo_stop net: team: Unsync device addresses on ndo_stop drm/panel: simple: Fix innolux_g121i1_l01 bus_format mm/slab_common: fix possible double free of kmem_cache MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko MIPS: Loongson32: Fix PHY-mode being left unspecified um: fix default console kernel parameter iavf: Fix bad page state mlxbf_gige: clear MDIO gateway lock after read i40e: Fix set max_tx_rate when it is lower than 1 Mbps netdevsim: Fix hwstats debugfs file permissions sfc: fix TX channel offset when using legacy interrupts sfc: fix null pointer dereference in efx_hard_start_xmit bnxt_en: fix flags to check for supported fw version gve: Fix GFP flags when allocing pages drm/hisilicon: Add depends on MMU of: mdio: Add of_node_put() when breaking out of for_each_xx net: ipa: properly limit modem routing table use sfc/siena: fix TX channel offset when using legacy interrupts sfc/siena: fix null pointer dereference in efx_hard_start_xmit wireguard: ratelimiter: disable timings test by default wireguard: netlink: avoid variable-sized memcpy on sockaddr net: enetc: move enetc_set_psfp() out of the common enetc_set_features() net: enetc: deny offload of tc-based TSN features on VF interfaces ipv6: Fix crash when IPv6 is administratively disabled net/sched: taprio: avoid disabling offload when it was never enabled net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs ice: config netdev tc before setting queues number ice: Fix interface being down after reset with link-down-on-close flag on netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain() netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain() netfilter: ebtables: fix memory leak when blob is malformed netfilter: nf_ct_ftp: fix deadlock when nat rewrite is needed net: ravb: Fix PHY state warning splat during system resume net: sh_eth: Fix PHY state warning splat during system resume gpio: tqmx86: fix uninitialized variable girq can: gs_usb: gs_can_open(): fix race dev->can.state condition perf stat: Fix BPF program section name perf stat: Fix cpu map index in bperf cgroup code perf jit: Include program header in ELF files perf kcore_copy: Do not check /proc/modules is unchanged perf tools: Honor namespace when synthesizing build-ids drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff() ice: Fix ice_xdp_xmit() when XDP TX queue number is not sufficient net/smc: Stop the CLC flow if no link to map buffers on net: phy: micrel: fix shared interrupt on LAN8814 bonding: fix NULL deref in bond_rr_gen_slave_id net: sunhme: Fix packet reception for len < RX_COPY_THRESHOLD net: sched: fix possible refcount leak in tc_new_tfilter() bnxt: prevent skb UAF after handing over to PTP worker selftests: forwarding: add shebang for sch_red.sh io_uring: ensure that cached task references are always put on exit serial: fsl_lpuart: Reset prior to registration serial: Create uart_xmit_advance() serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting cgroup: cgroup_get_from_id() must check the looked-up kn is a directory phy: marvell: phy-mvebu-a3700-comphy: Remove broken reset support s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup blk-mq: fix error handling in __blk_mq_alloc_disk block: call blk_mq_exit_queue from disk_release for never added disks block: Do not call blk_put_queue() if gendisk allocation fails Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region drm/gma500: Fix BUG: sleeping function called from invalid context errors drm/gma500: Fix WARN_ON(lock->magic != lock) error drm/gma500: Fix (vblank) IRQs not working after suspend/resume gpio: ixp4xx: Make irqchip immutable drm/amd/pm: disable BACO entry/exit completely on several sienna cichlid cards drm/amdgpu: change the alignment size of TMR BO to 1M drm/amdgpu: add HDP remap functionality to nbio 7.7 drm/amdgpu: Skip reset error status for psp v13_0_0 drm/amd/display: Limit user regamma to a valid value drm/amd/display: Reduce number of arguments of dml31's CalculateWatermarksAndDRAMSpeedChangeSupport() drm/amd/display: Reduce number of arguments of dml31's CalculateFlipSchedule() drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage drm/rockchip: Fix return type of cdn_dp_connector_mode_valid gpio: mt7621: Make the irqchip immutable pmem: fix a name collision fsdax: Fix infinite loop in dax_iomap_rw() workqueue: don't skip lockdep work dependency in cancel_work_sync() i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible i2c: mlxbf: incorrect base address passed during io write i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction() i2c: mlxbf: Fix frequency calculation i2c: mux: harden i2c_mux_alloc() against integer overflows drm/amdgpu: don't register a dirty callback for non-atomic certs: make system keyring depend on built-in x509 parser Makefile.debug: set -g unconditional on CONFIG_DEBUG_INFO_SPLIT Makefile.debug: re-enable debug info for .S files devdax: Fix soft-reservation memory description ext4: fix bug in extents parsing when eh_entries == 0 and eh_depth > 0 ext4: limit the number of retries after discarding preallocations blocks ext4: make mballoc try target group first even with mb_optimize_scan ext4: avoid unnecessary spreading of allocations among groups ext4: use locality group preallocation for small closed files ext4: use buckets for cr 1 block scan instead of rbtree Revert "block: freeze the queue earlier in del_gendisk" ext4: fixup possible uninitialized variable access in ext4_mb_choose_next_group_cr1() ext4: make directory inode spreading reflect flexbg size Linux 5.19.12 UBUNTU: Upstream stable to v5.19.12 ** Affects: linux (Ubuntu) Importance: Medium Assignee: Kamal Mostafa (kamalmostafa) Status: In Progress ** Affects: linux (Ubuntu Kinetic) Importance: Medium Assignee: Kamal Mostafa (kamalmostafa) Status: In Progress ** Tags: kernel-stable-tracking-bug ** Changed in: linux (Ubuntu) Status: New => Confirmed ** Tags added: kernel-stable-tracking-bug ** Also affects: linux (Ubuntu Kinetic) Importance: Undecided Status: Confirmed ** Changed in: linux (Ubuntu Kinetic) Status: Confirmed => In Progress ** Changed in: linux (Ubuntu Kinetic) Importance: Undecided => Medium ** Changed in: linux (Ubuntu Kinetic) Assignee: (unassigned) => Kamal Mostafa (kamalmostafa) ** Description changed: + SRU Justification - SRU Justification + Impact: + The upstream process for stable tree updates is quite similar + in scope to the Ubuntu SRU process, e.g., each patch has to + demonstrably fix a bug, and each patch is vetted by upstream + by originating either directly from a mainline/stable Linux tree or + a minimally backported form of that patch. The following upstream + stable patches should be included in the Ubuntu kernel: - Impact: - The upstream process for stable tree updates is quite similar - in scope to the Ubuntu SRU process, e.g., each patch has to - demonstrably fix a bug, and each patch is vetted by upstream - by originating either directly from a mainline/stable Linux tree or - a minimally backported form of that patch. The following upstream - stable patches should be included in the Ubuntu kernel: + v5.19.12 upstream stable release + from git://git.kernel.org/ - v5.19.12 upstream stable release - from git://git.kernel.org/ + smb3: Move the flush out of smb2_copychunk_range() into its callers + smb3: fix temporary data corruption in collapse range + smb3: fix temporary data corruption in insert range + usb: add quirks for Lenovo OneLink+ Dock + usb: gadget: udc-xilinx: replace memcpy with memcpy_toio + smb3: use filemap_write_and_wait_range instead of filemap_write_and_wait + Revert "usb: add quirks for Lenovo OneLink+ Dock" + Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio" + xfrm: fix XFRMA_LASTUSED comment + block: remove QUEUE_FLAG_DEAD + block: stop setting the nomerges flags in blk_cleanup_queue + block: simplify disk shutdown + scsi: core: Fix a use-after-free + drivers/base: Fix unsigned comparison to -1 in CPUMAP_FILE_MAX_BYTES + USB: core: Fix RST error in hub.c + USB: serial: option: add Quectel BG95 0x0203 composition + USB: serial: option: add Quectel RM520N + ALSA: core: Fix double-free at snd_card_new() + ALSA: hda/tegra: set depop delay for tegra + ALSA: hda: Fix hang at HD-audio codec unbinding due to refcount saturation + ALSA: hda: Fix Nvidia dp infoframe + ALSA: hda: add Intel 5 Series / 3400 PCI DID + ALSA: hda/realtek: Add quirk for Huawei WRT-WX9 + ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop + ALSA: hda/realtek: Re-arrange quirk table entries + ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack + ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack + ALSA: hda/realtek: Add quirk for ASUS GA503R laptop + ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop + ALSA: hda/realtek: Add a quirk for HP OMEN 16 (8902) mute LED + iommu/vt-d: Check correct capability for sagaw determination + exfat: fix overflow for large capacity partition + btrfs: fix hang during unmount when stopping block group reclaim worker + btrfs: fix hang during unmount when stopping a space reclaim worker + btrfs: zoned: wait for extent buffer IOs before finishing a zone + libperf evlist: Fix polling of system-wide events + media: flexcop-usb: fix endpoint type check + usb: dwc3: core: leave default DMA if the controller does not support 64-bit DMA + thunderbolt: Add support for Intel Maple Ridge single port controller + efi: x86: Wipe setup_data on pure EFI boot + efi: libstub: check Shim mode using MokSBStateRT + wifi: mt76: fix reading current per-tid starting sequence number for aggregation + gpio: mockup: fix NULL pointer dereference when removing debugfs + gpio: mockup: Fix potential resource leakage when register a chip + gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully + riscv: fix a nasty sigreturn bug... + riscv: fix RISCV_ISA_SVPBMT kconfig dependency warning + drm/i915/gem: Flush contexts on driver release + drm/i915/gem: Really move i915_gem_context.link under ref protection + xen/xenbus: fix xenbus_setup_ring() + kasan: call kasan_malloc() from __kmalloc_*track_caller() + can: flexcan: flexcan_mailbox_read() fix return value for drop = true + net: mana: Add rmb after checking owner bits + mm/slub: fix to return errno if kmalloc() fails + mm: slub: fix flush_cpu_slab()/__free_slab() invocations in task context. + KVM: x86: Reinstate kvm_vcpu_arch.guest_supported_xcr0 + KVM: x86: Always enable legacy FP/SSE in allowed user XFEATURES + KVM: x86: Inject #UD on emulated XSETBV if XSAVES isn't enabled + perf/arm-cmn: Add more bits to child node address offset field + arm64: topology: fix possible overflow in amu_fie_setup() + vmlinux.lds.h: CFI: Reduce alignment of jump-table to function alignment + batman-adv: Fix hang up with small MTU hard-interface + firmware: arm_scmi: Harden accesses to the reset domains + firmware: arm_scmi: Fix the asynchronous reset requests + arm64: dts: rockchip: Lower sd speed on quartz64-b + arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob + arm64: dts: rockchip: Fix typo in lisense text for PX30.Core + drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks + arm64: dts: imx8mm: Reverse CPLD_Dn GPIO label mapping on MX8Menlo + arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz + arm64: dts: imx8mn: remove GPU power domain reset + arm64: dts: imx8ulp: add #reset-cells for pcc + dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get() + arm64: dts: rockchip: fix property for usb2 phy supply on rock-3a + arm64: dts: rockchip: fix property for usb2 phy supply on rk3568-evb1-v10 + arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma + arm64: dts: rockchip: Remove 'enable-active-low' from rk3566-quartz64-a + arm64: dts: imx8mm-verdin: extend pmic voltages + netfilter: nf_conntrack_sip: fix ct_sip_walk_headers + netfilter: nf_conntrack_irc: Tighten matching on DCC message + netfilter: nfnetlink_osf: fix possible bogus match in nf_osf_find() + ice: Don't double unplug aux on peer initiated reset + ice: Fix crash by keep old cfg when update TCs more than queues + iavf: Fix cached head and tail value for iavf_get_tx_pending + ipvlan: Fix out-of-bound bugs caused by unset skb->mac_header + net: core: fix flow symmetric hash + wifi: iwlwifi: Mark IWLMEI as broken + UBUNTU: [Config] updateconfigs for IWLMEI + arm64: dts: tqma8mqml: Include phy-imx8-pcie.h header + drm/mediatek: Fix wrong dither settings + arm64: dts: imx8mp-venice-gw74xx: fix CAN STBY polarity + arm64: dts: imx8mp-venice-gw74xx: fix ksz9477 cpu port + ARM: dts: lan966x: Fix the interrupt number for internal PHYs + net: phy: aquantia: wait for the suspend/resume operations to finish + arm64: dts: imx8mp-venice-gw74xx: fix port/phy validation + scsi: qla2xxx: Fix memory leak in __qlt_24xx_handle_abts() + scsi: mpt3sas: Fix return value check of dma_get_required_mask() + net: bonding: Share lacpdu_mcast_addr definition + net: bonding: Unsync device addresses on ndo_stop + net: team: Unsync device addresses on ndo_stop + drm/panel: simple: Fix innolux_g121i1_l01 bus_format + mm/slab_common: fix possible double free of kmem_cache + MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko + MIPS: Loongson32: Fix PHY-mode being left unspecified + um: fix default console kernel parameter + iavf: Fix bad page state + mlxbf_gige: clear MDIO gateway lock after read + i40e: Fix set max_tx_rate when it is lower than 1 Mbps + netdevsim: Fix hwstats debugfs file permissions + sfc: fix TX channel offset when using legacy interrupts + sfc: fix null pointer dereference in efx_hard_start_xmit + bnxt_en: fix flags to check for supported fw version + gve: Fix GFP flags when allocing pages + drm/hisilicon: Add depends on MMU + of: mdio: Add of_node_put() when breaking out of for_each_xx + net: ipa: properly limit modem routing table use + sfc/siena: fix TX channel offset when using legacy interrupts + sfc/siena: fix null pointer dereference in efx_hard_start_xmit + wireguard: ratelimiter: disable timings test by default + wireguard: netlink: avoid variable-sized memcpy on sockaddr + net: enetc: move enetc_set_psfp() out of the common enetc_set_features() + net: enetc: deny offload of tc-based TSN features on VF interfaces + ipv6: Fix crash when IPv6 is administratively disabled + net/sched: taprio: avoid disabling offload when it was never enabled + net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs + ice: config netdev tc before setting queues number + ice: Fix interface being down after reset with link-down-on-close flag on + netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain() + netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain() + netfilter: ebtables: fix memory leak when blob is malformed + netfilter: nf_ct_ftp: fix deadlock when nat rewrite is needed + net: ravb: Fix PHY state warning splat during system resume + net: sh_eth: Fix PHY state warning splat during system resume + gpio: tqmx86: fix uninitialized variable girq + can: gs_usb: gs_can_open(): fix race dev->can.state condition + perf stat: Fix BPF program section name + perf stat: Fix cpu map index in bperf cgroup code + perf jit: Include program header in ELF files + perf kcore_copy: Do not check /proc/modules is unchanged + perf tools: Honor namespace when synthesizing build-ids + drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff() + ice: Fix ice_xdp_xmit() when XDP TX queue number is not sufficient + net/smc: Stop the CLC flow if no link to map buffers on + net: phy: micrel: fix shared interrupt on LAN8814 + bonding: fix NULL deref in bond_rr_gen_slave_id + net: sunhme: Fix packet reception for len < RX_COPY_THRESHOLD + net: sched: fix possible refcount leak in tc_new_tfilter() + bnxt: prevent skb UAF after handing over to PTP worker + selftests: forwarding: add shebang for sch_red.sh + io_uring: ensure that cached task references are always put on exit + serial: fsl_lpuart: Reset prior to registration + serial: Create uart_xmit_advance() + serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting + serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting + cgroup: cgroup_get_from_id() must check the looked-up kn is a directory + phy: marvell: phy-mvebu-a3700-comphy: Remove broken reset support + s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup + blk-mq: fix error handling in __blk_mq_alloc_disk + block: call blk_mq_exit_queue from disk_release for never added disks + block: Do not call blk_put_queue() if gendisk allocation fails + Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region + drm/gma500: Fix BUG: sleeping function called from invalid context errors + drm/gma500: Fix WARN_ON(lock->magic != lock) error + drm/gma500: Fix (vblank) IRQs not working after suspend/resume + gpio: ixp4xx: Make irqchip immutable + drm/amd/pm: disable BACO entry/exit completely on several sienna cichlid cards + drm/amdgpu: change the alignment size of TMR BO to 1M + drm/amdgpu: add HDP remap functionality to nbio 7.7 + drm/amdgpu: Skip reset error status for psp v13_0_0 + drm/amd/display: Limit user regamma to a valid value + drm/amd/display: Reduce number of arguments of dml31's CalculateWatermarksAndDRAMSpeedChangeSupport() + drm/amd/display: Reduce number of arguments of dml31's CalculateFlipSchedule() + drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage + drm/rockchip: Fix return type of cdn_dp_connector_mode_valid + gpio: mt7621: Make the irqchip immutable + pmem: fix a name collision + fsdax: Fix infinite loop in dax_iomap_rw() + workqueue: don't skip lockdep work dependency in cancel_work_sync() + i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible + i2c: mlxbf: incorrect base address passed during io write + i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction() + i2c: mlxbf: Fix frequency calculation + i2c: mux: harden i2c_mux_alloc() against integer overflows + drm/amdgpu: don't register a dirty callback for non-atomic + certs: make system keyring depend on built-in x509 parser + Makefile.debug: set -g unconditional on CONFIG_DEBUG_INFO_SPLIT + Makefile.debug: re-enable debug info for .S files + devdax: Fix soft-reservation memory description + ext4: fix bug in extents parsing when eh_entries == 0 and eh_depth > 0 + ext4: limit the number of retries after discarding preallocations blocks + ext4: make mballoc try target group first even with mb_optimize_scan + ext4: avoid unnecessary spreading of allocations among groups + ext4: use locality group preallocation for small closed files + ext4: use buckets for cr 1 block scan instead of rbtree + Revert "block: freeze the queue earlier in del_gendisk" + ext4: fixup possible uninitialized variable access in ext4_mb_choose_next_group_cr1() + ext4: make directory inode spreading reflect flexbg size + Linux 5.19.12 + UBUNTU: Upstream stable to v5.19.12 -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/1994074 Title: Kinetic update: v5.19.12 upstream stable release Status in linux package in Ubuntu: In Progress Status in linux source package in Kinetic: In Progress Bug description: SRU Justification Impact: The upstream process for stable tree updates is quite similar in scope to the Ubuntu SRU process, e.g., each patch has to demonstrably fix a bug, and each patch is vetted by upstream by originating either directly from a mainline/stable Linux tree or a minimally backported form of that patch. The following upstream stable patches should be included in the Ubuntu kernel: v5.19.12 upstream stable release from git://git.kernel.org/ smb3: Move the flush out of smb2_copychunk_range() into its callers smb3: fix temporary data corruption in collapse range smb3: fix temporary data corruption in insert range usb: add quirks for Lenovo OneLink+ Dock usb: gadget: udc-xilinx: replace memcpy with memcpy_toio smb3: use filemap_write_and_wait_range instead of filemap_write_and_wait Revert "usb: add quirks for Lenovo OneLink+ Dock" Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio" xfrm: fix XFRMA_LASTUSED comment block: remove QUEUE_FLAG_DEAD block: stop setting the nomerges flags in blk_cleanup_queue block: simplify disk shutdown scsi: core: Fix a use-after-free drivers/base: Fix unsigned comparison to -1 in CPUMAP_FILE_MAX_BYTES USB: core: Fix RST error in hub.c USB: serial: option: add Quectel BG95 0x0203 composition USB: serial: option: add Quectel RM520N ALSA: core: Fix double-free at snd_card_new() ALSA: hda/tegra: set depop delay for tegra ALSA: hda: Fix hang at HD-audio codec unbinding due to refcount saturation ALSA: hda: Fix Nvidia dp infoframe ALSA: hda: add Intel 5 Series / 3400 PCI DID ALSA: hda/realtek: Add quirk for Huawei WRT-WX9 ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop ALSA: hda/realtek: Re-arrange quirk table entries ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack ALSA: hda/realtek: Add quirk for ASUS GA503R laptop ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop ALSA: hda/realtek: Add a quirk for HP OMEN 16 (8902) mute LED iommu/vt-d: Check correct capability for sagaw determination exfat: fix overflow for large capacity partition btrfs: fix hang during unmount when stopping block group reclaim worker btrfs: fix hang during unmount when stopping a space reclaim worker btrfs: zoned: wait for extent buffer IOs before finishing a zone libperf evlist: Fix polling of system-wide events media: flexcop-usb: fix endpoint type check usb: dwc3: core: leave default DMA if the controller does not support 64-bit DMA thunderbolt: Add support for Intel Maple Ridge single port controller efi: x86: Wipe setup_data on pure EFI boot efi: libstub: check Shim mode using MokSBStateRT wifi: mt76: fix reading current per-tid starting sequence number for aggregation gpio: mockup: fix NULL pointer dereference when removing debugfs gpio: mockup: Fix potential resource leakage when register a chip gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully riscv: fix a nasty sigreturn bug... riscv: fix RISCV_ISA_SVPBMT kconfig dependency warning drm/i915/gem: Flush contexts on driver release drm/i915/gem: Really move i915_gem_context.link under ref protection xen/xenbus: fix xenbus_setup_ring() kasan: call kasan_malloc() from __kmalloc_*track_caller() can: flexcan: flexcan_mailbox_read() fix return value for drop = true net: mana: Add rmb after checking owner bits mm/slub: fix to return errno if kmalloc() fails mm: slub: fix flush_cpu_slab()/__free_slab() invocations in task context. KVM: x86: Reinstate kvm_vcpu_arch.guest_supported_xcr0 KVM: x86: Always enable legacy FP/SSE in allowed user XFEATURES KVM: x86: Inject #UD on emulated XSETBV if XSAVES isn't enabled perf/arm-cmn: Add more bits to child node address offset field arm64: topology: fix possible overflow in amu_fie_setup() vmlinux.lds.h: CFI: Reduce alignment of jump-table to function alignment batman-adv: Fix hang up with small MTU hard-interface firmware: arm_scmi: Harden accesses to the reset domains firmware: arm_scmi: Fix the asynchronous reset requests arm64: dts: rockchip: Lower sd speed on quartz64-b arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob arm64: dts: rockchip: Fix typo in lisense text for PX30.Core drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks arm64: dts: imx8mm: Reverse CPLD_Dn GPIO label mapping on MX8Menlo arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz arm64: dts: imx8mn: remove GPU power domain reset arm64: dts: imx8ulp: add #reset-cells for pcc dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get() arm64: dts: rockchip: fix property for usb2 phy supply on rock-3a arm64: dts: rockchip: fix property for usb2 phy supply on rk3568-evb1-v10 arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma arm64: dts: rockchip: Remove 'enable-active-low' from rk3566-quartz64-a arm64: dts: imx8mm-verdin: extend pmic voltages netfilter: nf_conntrack_sip: fix ct_sip_walk_headers netfilter: nf_conntrack_irc: Tighten matching on DCC message netfilter: nfnetlink_osf: fix possible bogus match in nf_osf_find() ice: Don't double unplug aux on peer initiated reset ice: Fix crash by keep old cfg when update TCs more than queues iavf: Fix cached head and tail value for iavf_get_tx_pending ipvlan: Fix out-of-bound bugs caused by unset skb->mac_header net: core: fix flow symmetric hash wifi: iwlwifi: Mark IWLMEI as broken UBUNTU: [Config] updateconfigs for IWLMEI arm64: dts: tqma8mqml: Include phy-imx8-pcie.h header drm/mediatek: Fix wrong dither settings arm64: dts: imx8mp-venice-gw74xx: fix CAN STBY polarity arm64: dts: imx8mp-venice-gw74xx: fix ksz9477 cpu port ARM: dts: lan966x: Fix the interrupt number for internal PHYs net: phy: aquantia: wait for the suspend/resume operations to finish arm64: dts: imx8mp-venice-gw74xx: fix port/phy validation scsi: qla2xxx: Fix memory leak in __qlt_24xx_handle_abts() scsi: mpt3sas: Fix return value check of dma_get_required_mask() net: bonding: Share lacpdu_mcast_addr definition net: bonding: Unsync device addresses on ndo_stop net: team: Unsync device addresses on ndo_stop drm/panel: simple: Fix innolux_g121i1_l01 bus_format mm/slab_common: fix possible double free of kmem_cache MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko MIPS: Loongson32: Fix PHY-mode being left unspecified um: fix default console kernel parameter iavf: Fix bad page state mlxbf_gige: clear MDIO gateway lock after read i40e: Fix set max_tx_rate when it is lower than 1 Mbps netdevsim: Fix hwstats debugfs file permissions sfc: fix TX channel offset when using legacy interrupts sfc: fix null pointer dereference in efx_hard_start_xmit bnxt_en: fix flags to check for supported fw version gve: Fix GFP flags when allocing pages drm/hisilicon: Add depends on MMU of: mdio: Add of_node_put() when breaking out of for_each_xx net: ipa: properly limit modem routing table use sfc/siena: fix TX channel offset when using legacy interrupts sfc/siena: fix null pointer dereference in efx_hard_start_xmit wireguard: ratelimiter: disable timings test by default wireguard: netlink: avoid variable-sized memcpy on sockaddr net: enetc: move enetc_set_psfp() out of the common enetc_set_features() net: enetc: deny offload of tc-based TSN features on VF interfaces ipv6: Fix crash when IPv6 is administratively disabled net/sched: taprio: avoid disabling offload when it was never enabled net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs ice: config netdev tc before setting queues number ice: Fix interface being down after reset with link-down-on-close flag on netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain() netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain() netfilter: ebtables: fix memory leak when blob is malformed netfilter: nf_ct_ftp: fix deadlock when nat rewrite is needed net: ravb: Fix PHY state warning splat during system resume net: sh_eth: Fix PHY state warning splat during system resume gpio: tqmx86: fix uninitialized variable girq can: gs_usb: gs_can_open(): fix race dev->can.state condition perf stat: Fix BPF program section name perf stat: Fix cpu map index in bperf cgroup code perf jit: Include program header in ELF files perf kcore_copy: Do not check /proc/modules is unchanged perf tools: Honor namespace when synthesizing build-ids drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff() ice: Fix ice_xdp_xmit() when XDP TX queue number is not sufficient net/smc: Stop the CLC flow if no link to map buffers on net: phy: micrel: fix shared interrupt on LAN8814 bonding: fix NULL deref in bond_rr_gen_slave_id net: sunhme: Fix packet reception for len < RX_COPY_THRESHOLD net: sched: fix possible refcount leak in tc_new_tfilter() bnxt: prevent skb UAF after handing over to PTP worker selftests: forwarding: add shebang for sch_red.sh io_uring: ensure that cached task references are always put on exit serial: fsl_lpuart: Reset prior to registration serial: Create uart_xmit_advance() serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting cgroup: cgroup_get_from_id() must check the looked-up kn is a directory phy: marvell: phy-mvebu-a3700-comphy: Remove broken reset support s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup blk-mq: fix error handling in __blk_mq_alloc_disk block: call blk_mq_exit_queue from disk_release for never added disks block: Do not call blk_put_queue() if gendisk allocation fails Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region drm/gma500: Fix BUG: sleeping function called from invalid context errors drm/gma500: Fix WARN_ON(lock->magic != lock) error drm/gma500: Fix (vblank) IRQs not working after suspend/resume gpio: ixp4xx: Make irqchip immutable drm/amd/pm: disable BACO entry/exit completely on several sienna cichlid cards drm/amdgpu: change the alignment size of TMR BO to 1M drm/amdgpu: add HDP remap functionality to nbio 7.7 drm/amdgpu: Skip reset error status for psp v13_0_0 drm/amd/display: Limit user regamma to a valid value drm/amd/display: Reduce number of arguments of dml31's CalculateWatermarksAndDRAMSpeedChangeSupport() drm/amd/display: Reduce number of arguments of dml31's CalculateFlipSchedule() drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage drm/rockchip: Fix return type of cdn_dp_connector_mode_valid gpio: mt7621: Make the irqchip immutable pmem: fix a name collision fsdax: Fix infinite loop in dax_iomap_rw() workqueue: don't skip lockdep work dependency in cancel_work_sync() i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible i2c: mlxbf: incorrect base address passed during io write i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction() i2c: mlxbf: Fix frequency calculation i2c: mux: harden i2c_mux_alloc() against integer overflows drm/amdgpu: don't register a dirty callback for non-atomic certs: make system keyring depend on built-in x509 parser Makefile.debug: set -g unconditional on CONFIG_DEBUG_INFO_SPLIT Makefile.debug: re-enable debug info for .S files devdax: Fix soft-reservation memory description ext4: fix bug in extents parsing when eh_entries == 0 and eh_depth > 0 ext4: limit the number of retries after discarding preallocations blocks ext4: make mballoc try target group first even with mb_optimize_scan ext4: avoid unnecessary spreading of allocations among groups ext4: use locality group preallocation for small closed files ext4: use buckets for cr 1 block scan instead of rbtree Revert "block: freeze the queue earlier in del_gendisk" ext4: fixup possible uninitialized variable access in ext4_mb_choose_next_group_cr1() ext4: make directory inode spreading reflect flexbg size Linux 5.19.12 UBUNTU: Upstream stable to v5.19.12 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1994074/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp