Public bug reported:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
v5.4.220 upstream stable release
from git://git.kernel.org/
ALSA: oss: Fix potential deadlock at unregistration
ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
ALSA: usb-audio: Fix potential memory leaks
ALSA: usb-audio: Fix NULL dererence at error path
ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
ALSA: hda/realtek: Correct pin configs for ASUS G533Z
ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
mtd: rawnand: atmel: Unmap streaming DMA mappings
cifs: destage dirty pages before re-reading them for cache=none
cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
iio: dac: ad5593r: Fix i2c read protocol requirements
iio: pressure: dps310: Refactor startup procedure
iio: pressure: dps310: Reset chip after timeout
usb: add quirks for Lenovo OneLink+ Dock
can: kvaser_usb: Fix use of uninitialized completion
can: kvaser_usb_leaf: Fix overread with an invalid command
can: kvaser_usb_leaf: Fix TX queue out of sync after restart
can: kvaser_usb_leaf: Fix CAN state after restart
mmc: sdhci-sprd: Fix minimum clock limit
fs: dlm: fix race between test_bit() and queue_work()
fs: dlm: handle -EBUSY first in lock arg validation
HID: multitouch: Add memory barriers
quota: Check next/prev free block number after reading from quota file
ASoC: wcd9335: fix order of Slimbus unprepare/disable
regulator: qcom_rpm: Fix circular deferral regression
RISC-V: Make port I/O string accessors actually work
parisc: fbdev/stifb: Align graphics memory size to 4MB
riscv: Allow PROT_WRITE-only mmap()
riscv: Pass -mno-relax only on lld < 15.0.0
UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
powerpc/boot: Explicitly disable usage of SPE instructions
fbdev: smscufx: Fix use-after-free in ufx_ops_open()
btrfs: fix race between quota enable and quota rescan ioctl
f2fs: increase the limit for reserve_root
f2fs: fix to do sanity check on destination blkaddr during recovery
f2fs: fix to do sanity check on summary info
nilfs2: fix use-after-free bug of struct nilfs_root
jbd2: wake up journal waiters in FIFO order, not LIFO
ext4: avoid crash when inline data creation follows DIO write
ext4: fix null-ptr-deref in ext4_write_info
ext4: make ext4_lazyinit_thread freezable
ext4: place buffer head allocation before handle start
livepatch: fix race between fork and KLP transition
ftrace: Properly unset FTRACE_HASH_FL_MOD
ring-buffer: Allow splice to read previous partially read pages
ring-buffer: Have the shortest_full queue be the shortest not longest
ring-buffer: Check pending waiters when doing wake ups as well
ring-buffer: Fix race between reset page and reading page
media: cedrus: Set the platform driver data earlier
KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
gcov: support GCC 12.1 and newer compilers
drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
selinux: use "grep -E" instead of "egrep"
tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
userfaultfd: open userfaultfds with O_RDONLY
sh: machvec: Use char[] for section boundaries
ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
nfsd: Fix a memory leak in an error handling path
wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
wifi: mac80211: allow bw change during channel switch in mesh
bpftool: Fix a wrong type cast in btf_dumper_int
x86/resctrl: Fix to restore to original value when re-enabling hardware
prefetch register
wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
spi: qup: add missing clk_disable_unprepare on error in
spi_qup_pm_resume_runtime()
wifi: rtl8xxxu: Fix skb misuse in TX queue selection
bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
net: fs_enet: Fix wrong check in do_pd_setup
bpf: Ensure correct locking around vulnerable function find_vpid()
x86/microcode/AMD: Track patch allocation size explicitly
spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
netfilter: nft_fib: Fix for rpath check with VRF devices
spi: s3c64xx: Fix large transfers with DMA
vhost/vsock: Use kvmalloc/kvfree for larger packets.
mISDN: fix use-after-free bugs in l1oip timer handlers
sctp: handle the error returned from sctp_auth_asoc_init_active_key
tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
net: rds: don't hold sock lock when cancelling work from
rds_tcp_reset_callbacks()
bnx2x: fix potential memory leak in bnx2x_tpa_stop()
net/ieee802154: reject zero-sized raw_sendmsg()
once: add DO_ONCE_SLOW() for sleepable contexts
net: mvpp2: fix mvpp2 debugfs leak
drm: bridge: adv7511: fix CEC power down control register offset
drm/mipi-dsi: Detach devices when removing the host
platform/chrome: fix double-free in chromeos_laptop_prepare()
platform/chrome: fix memory corruption in ioctl
platform/x86: msi-laptop: Fix old-ec check for backlight registering
platform/x86: msi-laptop: Fix resource cleanup
drm: fix drm_mipi_dbi build errors
drm/bridge: megachips: Fix a null pointer dereference bug
ASoC: rsnd: Add check for rsnd_mod_power_on
ALSA: hda: beep: Simplify keep-power-at-enable behavior
drm/omap: dss: Fix refcount leak bugs
mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
drm/msm/dpu: index dpu_kms->hw_vbif using vbif_idx
ALSA: dmaengine: increment buffer pointer atomically
mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
ALSA: hda/hdmi: Don't skip notification handling during PM operation
memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
memory: of: Fix refcount leak bug in of_get_ddr_timings()
soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
soc: qcom: smem_state: Add refcounting for the 'state->of_node'
ARM: dts: turris-omnia: Fix mpp26 pin name and comment
ARM: dts: kirkwood: lsxl: fix serial line
ARM: dts: kirkwood: lsxl: remove first ethernet port
ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
ARM: Drop CMDLINE_* dependency on ATAGS
ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
iio: adc: at91-sama5d2_adc: check return status for pressure and touch
iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
iio: inkern: only release the device node when done with it
iio: ABI: Fix wrong format of differential capacitance channel ABI.
clk: meson: Hold reference returned by of_get_parent()
clk: oxnas: Hold reference returned by of_get_parent()
clk: berlin: Add of_node_put() for of_get_parent()
clk: tegra: Fix refcount leak in tegra210_clock_init
clk: tegra: Fix refcount leak in tegra114_clock_init
clk: tegra20: Fix refcount leak in tegra20_clock_init
HSI: omap_ssi: Fix refcount leak in ssi_probe
HSI: omap_ssi_port: Fix dma_map_sg error check
media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
tty: xilinx_uartps: Fix the ignore_status
media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
RDMA/rxe: Fix "kernel NULL pointer dereference" error
RDMA/rxe: Fix the error caused by qp->sk
misc: ocxl: fix possible refcount leak in afu_ioctl()
dyndbg: fix module.dyndbg handling
dyndbg: let query-modname override actual module name
mtd: devices: docg3: check the return value of devm_ioremap() in the probe
RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
ata: fix ata_id_has_devslp()
ata: fix ata_id_has_ncq_autosense()
ata: fix ata_id_has_dipm()
mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
md/raid5: Ensure stripe_fill happens on non-read IO with journal
xhci: Don't show warning for reinit on known broken suspend
usb: gadget: function: fix dangling pnp_string in f_printer.c
drivers: serial: jsm: fix some leaks in probe
tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
phy: qualcomm: call clk_disable_unprepare in the error handling
staging: vt6655: fix some erroneous memory clean-up loops
firmware: google: Test spinlock on panic path to avoid lockups
serial: 8250: Fix restoring termios speed after suspend
scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
fsi: core: Check error number after calling ida_simple_get
mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
mfd: lp8788: Fix an error handling path in lp8788_probe()
mfd: lp8788: Fix an error handling path in lp8788_irq_init() and
lp8788_irq_init()
mfd: fsl-imx25: Fix check for platform_get_irq() errors
mfd: sm501: Add check for platform_driver_register()
clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
spmi: pmic-arb: correct duplicate APID to PPID mapping logic
clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
clk: ast2600: BCLK comes from EPLL
mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
powerpc/math_emu/efp: Include module.h
powerpc/sysdev/fsl_msi: Add missing of_node_put()
powerpc/pci_dn: Add missing of_node_put()
powerpc/powernv: add missing of_node_put() in opal_export_attrs()
x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
powerpc: Fix SPE Power ISA properties for e500v1 platforms
cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
iommu/omap: Fix buffer overflow in debugfs
crypto: akcipher - default implementation for setting a private key
crypto: ccp - Release dma channels before dmaengine unrgister
iommu/iova: Fix module config properly
kbuild: remove the target in signal traps when interrupted
crypto: cavium - prevent integer overflow loading firmware
f2fs: fix race condition on setting FI_NO_EXTENT flag
ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
MIPS: BCM47XX: Cast memcmp() of function to (void *)
powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid
crash
NFSD: Return nfserr_serverfault if splice_ok but buf->pages have data
wifi: brcmfmac: fix invalid address access when enabling SCAN log level
bpftool: Clear errno after libcap's checks
openvswitch: Fix double reporting of drops in dropwatch
openvswitch: Fix overreporting of drops in dropwatch
tcp: annotate data-race around tcp_md5sig_pool_populated
wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
xfrm: Update ipcomp_scratches with NULL when freed
wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
can: bcm: check the result of can_send() in bcm_can_tx()
wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
wifi: rt2x00: set VGC gain for both chains of MT7620
wifi: rt2x00: set SoC wmac clock register
wifi: rt2x00: correctly set BBP register 86 for MT7620
net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
Bluetooth: L2CAP: Fix user-after-free
r8152: Rate limit overflow messages
drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
drm: Use size_t type for len variable in drm_copy_field()
drm: Prevent drm_copy_field() to attempt copying a NULL pointer
drm/amd/display: fix overflow on MIN_I64 definition
drm/vc4: vec: Fix timings for VEC modes
drm: panel-orientation-quirks: Add quirk for Anbernic Win600
platform/x86: msi-laptop: Change DMI match / alias strings to fix module
autoloading
drm/amdgpu: fix initial connector audio value
mmc: sdhci-msm: add compatible string check for sdm670
ARM: dts: imx7d-sdb: config the max pressure for tsc2046
ARM: dts: imx6q: add missing properties for sram
ARM: dts: imx6dl: add missing properties for sram
ARM: dts: imx6qp: add missing properties for sram
ARM: dts: imx6sl: add missing properties for sram
ARM: dts: imx6sll: add missing properties for sram
ARM: dts: imx6sx: add missing properties for sram
btrfs: scrub: try to fix super block errors
clk: zynqmp: Fix stack-out-of-bounds in strncpy`
media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
scsi: 3w-9xxx: Avoid disabling device if failing to enable it
nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
staging: vt6655: fix potential memory leak
ata: libahci_platform: Sanity check the DT child nodes number
bcache: fix set_at_max_writeback_rate() for multiple attached devices
HID: roccat: Fix use-after-free in roccat_read()
md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
usb: musb: Fix musb_gadget.c rxstate overflow bug
Revert "usb: storage: Add quirk for Samsung Fit flash"
staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
nvme: copy firmware_rev on each init
nvmet-tcp: add bounds check on Transfer Tag
usb: idmouse: fix an uninit-value in idmouse_open
clk: bcm2835: Make peripheral PLLC critical
perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
net: ieee802154: return -EINVAL for unknown addr type
Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
net/ieee802154: don't warn zero-sized raw_sendmsg()
ext4: continue to expand file system when the target size doesn't reach
efi: libstub: drop pointless get_memory_map() call
inet: fully convert sk->sk_rx_dst to RCU rules
thermal: intel_powerclamp: Use first online CPU as control_cpu
Linux 5.4.220
UBUNTU: Upstream stable to v5.4.220
** Affects: linux (Ubuntu)
Importance: Undecided
Status: Invalid
** Affects: linux (Ubuntu Focal)
Importance: Medium
Assignee: Kamal Mostafa (kamalmostafa)
Status: In Progress
** Tags: kernel-stable-tracking-bug
** Changed in: linux (Ubuntu)
Status: New => Confirmed
** Tags added: kernel-stable-tracking-bug
** Also affects: linux (Ubuntu Focal)
Importance: Undecided
Status: New
** Changed in: linux (Ubuntu)
Status: Confirmed => Won't Fix
** Changed in: linux (Ubuntu)
Status: Won't Fix => Invalid
** Changed in: linux (Ubuntu Focal)
Status: New => Invalid
** Changed in: linux (Ubuntu Focal)
Status: Invalid => In Progress
** Changed in: linux (Ubuntu Focal)
Importance: Undecided => Medium
** Changed in: linux (Ubuntu Focal)
Assignee: (unassigned) => Kamal Mostafa (kamalmostafa)
** Description changed:
+ SRU Justification
- SRU Justification
+ Impact:
+ The upstream process for stable tree updates is quite similar
+ in scope to the Ubuntu SRU process, e.g., each patch has to
+ demonstrably fix a bug, and each patch is vetted by upstream
+ by originating either directly from a mainline/stable Linux tree or
+ a minimally backported form of that patch. The following upstream
+ stable patches should be included in the Ubuntu kernel:
- Impact:
- The upstream process for stable tree updates is quite similar
- in scope to the Ubuntu SRU process, e.g., each patch has to
- demonstrably fix a bug, and each patch is vetted by upstream
- by originating either directly from a mainline/stable Linux tree or
- a minimally backported form of that patch. The following upstream
- stable patches should be included in the Ubuntu kernel:
+ v5.4.220 upstream stable release
+ from git://git.kernel.org/
- v5.4.220 upstream stable release
- from git://git.kernel.org/
+ ALSA: oss: Fix potential deadlock at unregistration
+ ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
+ ALSA: usb-audio: Fix potential memory leaks
+ ALSA: usb-audio: Fix NULL dererence at error path
+ ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
+ ALSA: hda/realtek: Correct pin configs for ASUS G533Z
+ ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
+ ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
+ mtd: rawnand: atmel: Unmap streaming DMA mappings
+ cifs: destage dirty pages before re-reading them for cache=none
+ cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
+ iio: dac: ad5593r: Fix i2c read protocol requirements
+ iio: pressure: dps310: Refactor startup procedure
+ iio: pressure: dps310: Reset chip after timeout
+ usb: add quirks for Lenovo OneLink+ Dock
+ can: kvaser_usb: Fix use of uninitialized completion
+ can: kvaser_usb_leaf: Fix overread with an invalid command
+ can: kvaser_usb_leaf: Fix TX queue out of sync after restart
+ can: kvaser_usb_leaf: Fix CAN state after restart
+ mmc: sdhci-sprd: Fix minimum clock limit
+ fs: dlm: fix race between test_bit() and queue_work()
+ fs: dlm: handle -EBUSY first in lock arg validation
+ HID: multitouch: Add memory barriers
+ quota: Check next/prev free block number after reading from quota file
+ ASoC: wcd9335: fix order of Slimbus unprepare/disable
+ regulator: qcom_rpm: Fix circular deferral regression
+ RISC-V: Make port I/O string accessors actually work
+ parisc: fbdev/stifb: Align graphics memory size to 4MB
+ riscv: Allow PROT_WRITE-only mmap()
+ riscv: Pass -mno-relax only on lld < 15.0.0
+ UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
+ PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
+ powerpc/boot: Explicitly disable usage of SPE instructions
+ fbdev: smscufx: Fix use-after-free in ufx_ops_open()
+ btrfs: fix race between quota enable and quota rescan ioctl
+ f2fs: increase the limit for reserve_root
+ f2fs: fix to do sanity check on destination blkaddr during recovery
+ f2fs: fix to do sanity check on summary info
+ nilfs2: fix use-after-free bug of struct nilfs_root
+ jbd2: wake up journal waiters in FIFO order, not LIFO
+ ext4: avoid crash when inline data creation follows DIO write
+ ext4: fix null-ptr-deref in ext4_write_info
+ ext4: make ext4_lazyinit_thread freezable
+ ext4: place buffer head allocation before handle start
+ livepatch: fix race between fork and KLP transition
+ ftrace: Properly unset FTRACE_HASH_FL_MOD
+ ring-buffer: Allow splice to read previous partially read pages
+ ring-buffer: Have the shortest_full queue be the shortest not longest
+ ring-buffer: Check pending waiters when doing wake ups as well
+ ring-buffer: Fix race between reset page and reading page
+ media: cedrus: Set the platform driver data earlier
+ KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
+ KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
+ KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
+ gcov: support GCC 12.1 and newer compilers
+ drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
+ selinux: use "grep -E" instead of "egrep"
+ tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
+ userfaultfd: open userfaultfds with O_RDONLY
+ sh: machvec: Use char[] for section boundaries
+ ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
+ nfsd: Fix a memory leak in an error handling path
+ wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
+ wifi: mac80211: allow bw change during channel switch in mesh
+ bpftool: Fix a wrong type cast in btf_dumper_int
+ x86/resctrl: Fix to restore to original value when re-enabling hardware
prefetch register
+ wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
+ spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
+ spi: qup: add missing clk_disable_unprepare on error in
spi_qup_pm_resume_runtime()
+ wifi: rtl8xxxu: Fix skb misuse in TX queue selection
+ bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
+ wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
+ net: fs_enet: Fix wrong check in do_pd_setup
+ bpf: Ensure correct locking around vulnerable function find_vpid()
+ x86/microcode/AMD: Track patch allocation size explicitly
+ spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
+ netfilter: nft_fib: Fix for rpath check with VRF devices
+ spi: s3c64xx: Fix large transfers with DMA
+ vhost/vsock: Use kvmalloc/kvfree for larger packets.
+ mISDN: fix use-after-free bugs in l1oip timer handlers
+ sctp: handle the error returned from sctp_auth_asoc_init_active_key
+ tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
+ net: rds: don't hold sock lock when cancelling work from
rds_tcp_reset_callbacks()
+ bnx2x: fix potential memory leak in bnx2x_tpa_stop()
+ net/ieee802154: reject zero-sized raw_sendmsg()
+ once: add DO_ONCE_SLOW() for sleepable contexts
+ net: mvpp2: fix mvpp2 debugfs leak
+ drm: bridge: adv7511: fix CEC power down control register offset
+ drm/mipi-dsi: Detach devices when removing the host
+ platform/chrome: fix double-free in chromeos_laptop_prepare()
+ platform/chrome: fix memory corruption in ioctl
+ platform/x86: msi-laptop: Fix old-ec check for backlight registering
+ platform/x86: msi-laptop: Fix resource cleanup
+ drm: fix drm_mipi_dbi build errors
+ drm/bridge: megachips: Fix a null pointer dereference bug
+ ASoC: rsnd: Add check for rsnd_mod_power_on
+ ALSA: hda: beep: Simplify keep-power-at-enable behavior
+ drm/omap: dss: Fix refcount leak bugs
+ mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
+ ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
+ drm/msm/dpu: index dpu_kms->hw_vbif using vbif_idx
+ ALSA: dmaengine: increment buffer pointer atomically
+ mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
+ ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
+ ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
+ ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
+ ALSA: hda/hdmi: Don't skip notification handling during PM operation
+ memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
+ memory: of: Fix refcount leak bug in of_get_ddr_timings()
+ soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
+ soc: qcom: smem_state: Add refcounting for the 'state->of_node'
+ ARM: dts: turris-omnia: Fix mpp26 pin name and comment
+ ARM: dts: kirkwood: lsxl: fix serial line
+ ARM: dts: kirkwood: lsxl: remove first ethernet port
+ ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
+ ARM: Drop CMDLINE_* dependency on ATAGS
+ ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
+ iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
+ iio: adc: at91-sama5d2_adc: check return status for pressure and touch
+ iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
+ iio: inkern: only release the device node when done with it
+ iio: ABI: Fix wrong format of differential capacitance channel ABI.
+ clk: meson: Hold reference returned by of_get_parent()
+ clk: oxnas: Hold reference returned by of_get_parent()
+ clk: berlin: Add of_node_put() for of_get_parent()
+ clk: tegra: Fix refcount leak in tegra210_clock_init
+ clk: tegra: Fix refcount leak in tegra114_clock_init
+ clk: tegra20: Fix refcount leak in tegra20_clock_init
+ HSI: omap_ssi: Fix refcount leak in ssi_probe
+ HSI: omap_ssi_port: Fix dma_map_sg error check
+ media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
+ tty: xilinx_uartps: Fix the ignore_status
+ media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
+ RDMA/rxe: Fix "kernel NULL pointer dereference" error
+ RDMA/rxe: Fix the error caused by qp->sk
+ misc: ocxl: fix possible refcount leak in afu_ioctl()
+ dyndbg: fix module.dyndbg handling
+ dyndbg: let query-modname override actual module name
+ mtd: devices: docg3: check the return value of devm_ioremap() in the probe
+ RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
+ ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
+ ata: fix ata_id_has_devslp()
+ ata: fix ata_id_has_ncq_autosense()
+ ata: fix ata_id_has_dipm()
+ mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
+ md/raid5: Ensure stripe_fill happens on non-read IO with journal
+ xhci: Don't show warning for reinit on known broken suspend
+ usb: gadget: function: fix dangling pnp_string in f_printer.c
+ drivers: serial: jsm: fix some leaks in probe
+ tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
+ phy: qualcomm: call clk_disable_unprepare in the error handling
+ staging: vt6655: fix some erroneous memory clean-up loops
+ firmware: google: Test spinlock on panic path to avoid lockups
+ serial: 8250: Fix restoring termios speed after suspend
+ scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
+ fsi: core: Check error number after calling ida_simple_get
+ mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
+ mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
+ mfd: lp8788: Fix an error handling path in lp8788_probe()
+ mfd: lp8788: Fix an error handling path in lp8788_irq_init() and
lp8788_irq_init()
+ mfd: fsl-imx25: Fix check for platform_get_irq() errors
+ mfd: sm501: Add check for platform_driver_register()
+ clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
+ dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
+ spmi: pmic-arb: correct duplicate APID to PPID mapping logic
+ clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
+ clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
+ clk: ast2600: BCLK comes from EPLL
+ mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
+ powerpc/math_emu/efp: Include module.h
+ powerpc/sysdev/fsl_msi: Add missing of_node_put()
+ powerpc/pci_dn: Add missing of_node_put()
+ powerpc/powernv: add missing of_node_put() in opal_export_attrs()
+ x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
+ powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
+ powerpc: Fix SPE Power ISA properties for e500v1 platforms
+ cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
+ iommu/omap: Fix buffer overflow in debugfs
+ crypto: akcipher - default implementation for setting a private key
+ crypto: ccp - Release dma channels before dmaengine unrgister
+ iommu/iova: Fix module config properly
+ kbuild: remove the target in signal traps when interrupted
+ crypto: cavium - prevent integer overflow loading firmware
+ f2fs: fix race condition on setting FI_NO_EXTENT flag
+ ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
+ MIPS: BCM47XX: Cast memcmp() of function to (void *)
+ powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
+ thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to
avoid crash
+ NFSD: Return nfserr_serverfault if splice_ok but buf->pages have data
+ wifi: brcmfmac: fix invalid address access when enabling SCAN log level
+ bpftool: Clear errno after libcap's checks
+ openvswitch: Fix double reporting of drops in dropwatch
+ openvswitch: Fix overreporting of drops in dropwatch
+ tcp: annotate data-race around tcp_md5sig_pool_populated
+ wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
+ xfrm: Update ipcomp_scratches with NULL when freed
+ wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
+ Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
+ Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
+ can: bcm: check the result of can_send() in bcm_can_tx()
+ wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
+ wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
+ wifi: rt2x00: set VGC gain for both chains of MT7620
+ wifi: rt2x00: set SoC wmac clock register
+ wifi: rt2x00: correctly set BBP register 86 for MT7620
+ net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
+ Bluetooth: L2CAP: Fix user-after-free
+ r8152: Rate limit overflow messages
+ drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
+ drm: Use size_t type for len variable in drm_copy_field()
+ drm: Prevent drm_copy_field() to attempt copying a NULL pointer
+ drm/amd/display: fix overflow on MIN_I64 definition
+ drm/vc4: vec: Fix timings for VEC modes
+ drm: panel-orientation-quirks: Add quirk for Anbernic Win600
+ platform/x86: msi-laptop: Change DMI match / alias strings to fix module
autoloading
+ drm/amdgpu: fix initial connector audio value
+ mmc: sdhci-msm: add compatible string check for sdm670
+ ARM: dts: imx7d-sdb: config the max pressure for tsc2046
+ ARM: dts: imx6q: add missing properties for sram
+ ARM: dts: imx6dl: add missing properties for sram
+ ARM: dts: imx6qp: add missing properties for sram
+ ARM: dts: imx6sl: add missing properties for sram
+ ARM: dts: imx6sll: add missing properties for sram
+ ARM: dts: imx6sx: add missing properties for sram
+ btrfs: scrub: try to fix super block errors
+ clk: zynqmp: Fix stack-out-of-bounds in strncpy`
+ media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
+ clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
+ scsi: 3w-9xxx: Avoid disabling device if failing to enable it
+ nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
+ power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
+ staging: vt6655: fix potential memory leak
+ ata: libahci_platform: Sanity check the DT child nodes number
+ bcache: fix set_at_max_writeback_rate() for multiple attached devices
+ HID: roccat: Fix use-after-free in roccat_read()
+ md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
+ usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
+ usb: musb: Fix musb_gadget.c rxstate overflow bug
+ Revert "usb: storage: Add quirk for Samsung Fit flash"
+ staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
+ nvme: copy firmware_rev on each init
+ nvmet-tcp: add bounds check on Transfer Tag
+ usb: idmouse: fix an uninit-value in idmouse_open
+ clk: bcm2835: Make peripheral PLLC critical
+ perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
+ net: ieee802154: return -EINVAL for unknown addr type
+ Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
+ net/ieee802154: don't warn zero-sized raw_sendmsg()
+ ext4: continue to expand file system when the target size doesn't reach
+ efi: libstub: drop pointless get_memory_map() call
+ inet: fully convert sk->sk_rx_dst to RCU rules
+ thermal: intel_powerclamp: Use first online CPU as control_cpu
+ Linux 5.4.220
+ UBUNTU: Upstream stable to v5.4.220
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1996812
Title:
Focal update: v5.4.220 upstream stable release
Status in linux package in Ubuntu:
Invalid
Status in linux source package in Focal:
In Progress
Bug description:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
v5.4.220 upstream stable release
from git://git.kernel.org/
ALSA: oss: Fix potential deadlock at unregistration
ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
ALSA: usb-audio: Fix potential memory leaks
ALSA: usb-audio: Fix NULL dererence at error path
ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
ALSA: hda/realtek: Correct pin configs for ASUS G533Z
ALSA: hda/realtek: Add quirk for ASUS GV601R laptop
ALSA: hda/realtek: Add Intel Reference SSID to support headset keys
mtd: rawnand: atmel: Unmap streaming DMA mappings
cifs: destage dirty pages before re-reading them for cache=none
cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
iio: dac: ad5593r: Fix i2c read protocol requirements
iio: pressure: dps310: Refactor startup procedure
iio: pressure: dps310: Reset chip after timeout
usb: add quirks for Lenovo OneLink+ Dock
can: kvaser_usb: Fix use of uninitialized completion
can: kvaser_usb_leaf: Fix overread with an invalid command
can: kvaser_usb_leaf: Fix TX queue out of sync after restart
can: kvaser_usb_leaf: Fix CAN state after restart
mmc: sdhci-sprd: Fix minimum clock limit
fs: dlm: fix race between test_bit() and queue_work()
fs: dlm: handle -EBUSY first in lock arg validation
HID: multitouch: Add memory barriers
quota: Check next/prev free block number after reading from quota file
ASoC: wcd9335: fix order of Slimbus unprepare/disable
regulator: qcom_rpm: Fix circular deferral regression
RISC-V: Make port I/O string accessors actually work
parisc: fbdev/stifb: Align graphics memory size to 4MB
riscv: Allow PROT_WRITE-only mmap()
riscv: Pass -mno-relax only on lld < 15.0.0
UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
powerpc/boot: Explicitly disable usage of SPE instructions
fbdev: smscufx: Fix use-after-free in ufx_ops_open()
btrfs: fix race between quota enable and quota rescan ioctl
f2fs: increase the limit for reserve_root
f2fs: fix to do sanity check on destination blkaddr during recovery
f2fs: fix to do sanity check on summary info
nilfs2: fix use-after-free bug of struct nilfs_root
jbd2: wake up journal waiters in FIFO order, not LIFO
ext4: avoid crash when inline data creation follows DIO write
ext4: fix null-ptr-deref in ext4_write_info
ext4: make ext4_lazyinit_thread freezable
ext4: place buffer head allocation before handle start
livepatch: fix race between fork and KLP transition
ftrace: Properly unset FTRACE_HASH_FL_MOD
ring-buffer: Allow splice to read previous partially read pages
ring-buffer: Have the shortest_full queue be the shortest not longest
ring-buffer: Check pending waiters when doing wake ups as well
ring-buffer: Fix race between reset page and reading page
media: cedrus: Set the platform driver data earlier
KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS
gcov: support GCC 12.1 and newer compilers
drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table()
selinux: use "grep -E" instead of "egrep"
tracing: Disable interrupt or preemption before acquiring arch_spinlock_t
userfaultfd: open userfaultfds with O_RDONLY
sh: machvec: Use char[] for section boundaries
ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE
nfsd: Fix a memory leak in an error handling path
wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
wifi: mac80211: allow bw change during channel switch in mesh
bpftool: Fix a wrong type cast in btf_dumper_int
x86/resctrl: Fix to restore to original value when re-enabling hardware
prefetch register
wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
spi: qup: add missing clk_disable_unprepare on error in
spi_qup_pm_resume_runtime()
wifi: rtl8xxxu: Fix skb misuse in TX queue selection
bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
net: fs_enet: Fix wrong check in do_pd_setup
bpf: Ensure correct locking around vulnerable function find_vpid()
x86/microcode/AMD: Track patch allocation size explicitly
spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
netfilter: nft_fib: Fix for rpath check with VRF devices
spi: s3c64xx: Fix large transfers with DMA
vhost/vsock: Use kvmalloc/kvfree for larger packets.
mISDN: fix use-after-free bugs in l1oip timer handlers
sctp: handle the error returned from sctp_auth_asoc_init_active_key
tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
net: rds: don't hold sock lock when cancelling work from
rds_tcp_reset_callbacks()
bnx2x: fix potential memory leak in bnx2x_tpa_stop()
net/ieee802154: reject zero-sized raw_sendmsg()
once: add DO_ONCE_SLOW() for sleepable contexts
net: mvpp2: fix mvpp2 debugfs leak
drm: bridge: adv7511: fix CEC power down control register offset
drm/mipi-dsi: Detach devices when removing the host
platform/chrome: fix double-free in chromeos_laptop_prepare()
platform/chrome: fix memory corruption in ioctl
platform/x86: msi-laptop: Fix old-ec check for backlight registering
platform/x86: msi-laptop: Fix resource cleanup
drm: fix drm_mipi_dbi build errors
drm/bridge: megachips: Fix a null pointer dereference bug
ASoC: rsnd: Add check for rsnd_mod_power_on
ALSA: hda: beep: Simplify keep-power-at-enable behavior
drm/omap: dss: Fix refcount leak bugs
mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
drm/msm/dpu: index dpu_kms->hw_vbif using vbif_idx
ALSA: dmaengine: increment buffer pointer atomically
mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
ALSA: hda/hdmi: Don't skip notification handling during PM operation
memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe()
memory: of: Fix refcount leak bug in of_get_ddr_timings()
soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
soc: qcom: smem_state: Add refcounting for the 'state->of_node'
ARM: dts: turris-omnia: Fix mpp26 pin name and comment
ARM: dts: kirkwood: lsxl: fix serial line
ARM: dts: kirkwood: lsxl: remove first ethernet port
ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
ARM: Drop CMDLINE_* dependency on ATAGS
ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
iio: adc: at91-sama5d2_adc: check return status for pressure and touch
iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq
iio: inkern: only release the device node when done with it
iio: ABI: Fix wrong format of differential capacitance channel ABI.
clk: meson: Hold reference returned by of_get_parent()
clk: oxnas: Hold reference returned by of_get_parent()
clk: berlin: Add of_node_put() for of_get_parent()
clk: tegra: Fix refcount leak in tegra210_clock_init
clk: tegra: Fix refcount leak in tegra114_clock_init
clk: tegra20: Fix refcount leak in tegra20_clock_init
HSI: omap_ssi: Fix refcount leak in ssi_probe
HSI: omap_ssi_port: Fix dma_map_sg error check
media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
tty: xilinx_uartps: Fix the ignore_status
media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
RDMA/rxe: Fix "kernel NULL pointer dereference" error
RDMA/rxe: Fix the error caused by qp->sk
misc: ocxl: fix possible refcount leak in afu_ioctl()
dyndbg: fix module.dyndbg handling
dyndbg: let query-modname override actual module name
mtd: devices: docg3: check the return value of devm_ioremap() in the probe
RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall.
ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
ata: fix ata_id_has_devslp()
ata: fix ata_id_has_ncq_autosense()
ata: fix ata_id_has_dipm()
mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct()
md/raid5: Ensure stripe_fill happens on non-read IO with journal
xhci: Don't show warning for reinit on known broken suspend
usb: gadget: function: fix dangling pnp_string in f_printer.c
drivers: serial: jsm: fix some leaks in probe
tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown
phy: qualcomm: call clk_disable_unprepare in the error handling
staging: vt6655: fix some erroneous memory clean-up loops
firmware: google: Test spinlock on panic path to avoid lockups
serial: 8250: Fix restoring termios speed after suspend
scsi: libsas: Fix use-after-free bug in smp_execute_task_sg()
fsi: core: Check error number after calling ida_simple_get
mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
mfd: lp8788: Fix an error handling path in lp8788_probe()
mfd: lp8788: Fix an error handling path in lp8788_irq_init() and
lp8788_irq_init()
mfd: fsl-imx25: Fix check for platform_get_irq() errors
mfd: sm501: Add check for platform_driver_register()
clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent
dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
spmi: pmic-arb: correct duplicate APID to PPID mapping logic
clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
clk: ast2600: BCLK comes from EPLL
mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
powerpc/math_emu/efp: Include module.h
powerpc/sysdev/fsl_msi: Add missing of_node_put()
powerpc/pci_dn: Add missing of_node_put()
powerpc/powernv: add missing of_node_put() in opal_export_attrs()
x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
powerpc: Fix SPE Power ISA properties for e500v1 platforms
cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset
iommu/omap: Fix buffer overflow in debugfs
crypto: akcipher - default implementation for setting a private key
crypto: ccp - Release dma channels before dmaengine unrgister
iommu/iova: Fix module config properly
kbuild: remove the target in signal traps when interrupted
crypto: cavium - prevent integer overflow loading firmware
f2fs: fix race condition on setting FI_NO_EXTENT flag
ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
MIPS: BCM47XX: Cast memcmp() of function to (void *)
powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to
avoid crash
NFSD: Return nfserr_serverfault if splice_ok but buf->pages have data
wifi: brcmfmac: fix invalid address access when enabling SCAN log level
bpftool: Clear errno after libcap's checks
openvswitch: Fix double reporting of drops in dropwatch
openvswitch: Fix overreporting of drops in dropwatch
tcp: annotate data-race around tcp_md5sig_pool_populated
wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
xfrm: Update ipcomp_scratches with NULL when freed
wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
can: bcm: check the result of can_send() in bcm_can_tx()
wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
wifi: rt2x00: set VGC gain for both chains of MT7620
wifi: rt2x00: set SoC wmac clock register
wifi: rt2x00: correctly set BBP register 86 for MT7620
net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
Bluetooth: L2CAP: Fix user-after-free
r8152: Rate limit overflow messages
drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc()
drm: Use size_t type for len variable in drm_copy_field()
drm: Prevent drm_copy_field() to attempt copying a NULL pointer
drm/amd/display: fix overflow on MIN_I64 definition
drm/vc4: vec: Fix timings for VEC modes
drm: panel-orientation-quirks: Add quirk for Anbernic Win600
platform/x86: msi-laptop: Change DMI match / alias strings to fix module
autoloading
drm/amdgpu: fix initial connector audio value
mmc: sdhci-msm: add compatible string check for sdm670
ARM: dts: imx7d-sdb: config the max pressure for tsc2046
ARM: dts: imx6q: add missing properties for sram
ARM: dts: imx6dl: add missing properties for sram
ARM: dts: imx6qp: add missing properties for sram
ARM: dts: imx6sl: add missing properties for sram
ARM: dts: imx6sll: add missing properties for sram
ARM: dts: imx6sx: add missing properties for sram
btrfs: scrub: try to fix super block errors
clk: zynqmp: Fix stack-out-of-bounds in strncpy`
media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate
scsi: 3w-9xxx: Avoid disabling device if failing to enable it
nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
staging: vt6655: fix potential memory leak
ata: libahci_platform: Sanity check the DT child nodes number
bcache: fix set_at_max_writeback_rate() for multiple attached devices
HID: roccat: Fix use-after-free in roccat_read()
md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
usb: musb: Fix musb_gadget.c rxstate overflow bug
Revert "usb: storage: Add quirk for Samsung Fit flash"
staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()
nvme: copy firmware_rev on each init
nvmet-tcp: add bounds check on Transfer Tag
usb: idmouse: fix an uninit-value in idmouse_open
clk: bcm2835: Make peripheral PLLC critical
perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
net: ieee802154: return -EINVAL for unknown addr type
Revert "net/ieee802154: reject zero-sized raw_sendmsg()"
net/ieee802154: don't warn zero-sized raw_sendmsg()
ext4: continue to expand file system when the target size doesn't reach
efi: libstub: drop pointless get_memory_map() call
inet: fully convert sk->sk_rx_dst to RCU rules
thermal: intel_powerclamp: Use first online CPU as control_cpu
Linux 5.4.220
UBUNTU: Upstream stable to v5.4.220
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1996812/+subscriptions
--
Mailing list: https://launchpad.net/~kernel-packages
Post to : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help : https://help.launchpad.net/ListHelp
