Public bug reported:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
upstream stable patchset 2022-12-15
from git://git.kernel.org/
serial: ar933x: Deassert Transmit Enable on ->rs485_config()
KVM: x86: Trace re-injected exceptions
RDMA/cma: Use output interface for net_dev check
IB/hfi1: Correctly move list in sc_disable()
RDMA/hns: Disable local invalidate operation
NFSv4: Fix a potential state reclaim deadlock
NFSv4.1: Handle RECLAIM_COMPLETE trunking errors
NFSv4.1: We must always send RECLAIM_COMPLETE after a reboot
SUNRPC: Fix null-ptr-deref when xps sysfs alloc failed
NFSv4.2: Fixup CLONE dest file size for zero-length count
nfs4: Fix kmemleak when allocate slot failed
net: dsa: Fix possible memory leaks in dsa_loop_init()
RDMA/core: Fix null-ptr-deref in ib_core_cleanup()
RDMA/qedr: clean up work queue on failure in qedr_alloc_resources()
net: dsa: fall back to default tagger if we can't load the one from DT
nfc: fdp: Fix potential memory leak in fdp_nci_send()
nfc: nxp-nci: Fix potential memory leak in nxp_nci_send()
nfc: s3fwrn5: Fix potential memory leak in s3fwrn5_nci_send()
nfc: nfcmrvl: Fix potential memory leak in nfcmrvl_i2c_nci_send()
net: fec: fix improper use of NETDEV_TX_BUSY
ata: pata_legacy: fix pdc20230_set_piomode()
net: sched: Fix use after free in red_enqueue()
net: tun: fix bugs for oversize packet when napi frags enabled
netfilter: nf_tables: netlink notifier might race to release objects
netfilter: nf_tables: release flow rule object from commit path
ipvs: use explicitly signed chars
ipvs: fix WARNING in __ip_vs_cleanup_batch()
ipvs: fix WARNING in ip_vs_app_net_cleanup()
rose: Fix NULL pointer dereference in rose_send_frame()
mISDN: fix possible memory leak in mISDN_register_device()
isdn: mISDN: netjet: fix wrong check of device registration
btrfs: fix inode list leak during backref walking at resolve_indirect_refs()
btrfs: fix inode list leak during backref walking at find_parent_nodes()
btrfs: fix ulist leaks in error paths of qgroup self tests
netfilter: ipset: enforce documented limit to prevent allocating huge memory
Bluetooth: virtio_bt: Use skb_put to set length
Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
Bluetooth: L2CAP: Fix memory leak in vhci_write
net: mdio: fix undefined behavior in bit shift for __mdiobus_register
ibmvnic: Free rwi on reset success
stmmac: dwmac-loongson: fix invalid mdio_node
net/smc: Fix possible leaked pernet namespace in smc_init()
net, neigh: Fix null-ptr-deref in neigh_table_clear()
ipv6: fix WARNING in ip6_route_net_exit_late()
vsock: fix possible infinite sleep in vsock_connectible_wait_data()
media: rkisp1: Don't pass the quantization to rkisp1_csm_config()
media: rkisp1: Initialize color space on resizer sink and source pads
media: rkisp1: Use correct macro for gradient registers
media: rkisp1: Zero v4l2_subdev_format fields in when validating links
media: s5p_cec: limit msg.len to CEC_MAX_MSG_SIZE
media: cros-ec-cec: limit msg.len to CEC_MAX_MSG_SIZE
media: dvb-frontends/drxk: initialize err to 0
media: meson: vdec: fix possible refcount leak in vdec_probe()
media: v4l: subdev: Fail graciously when getting try data for NULL state
ACPI: APEI: Fix integer overflow in ghes_estatus_pool_init()
scsi: core: Restrict legal sdev_state transitions via sysfs
HID: saitek: add madcatz variant of MMO7 mouse device ID
drm/amdgpu: set vm_update_mode=0 as default for Sienna Cichlid in SRIOV case
i2c: xiic: Add platform module alias
efi/tpm: Pass correct address to memblock_reserve
clk: qcom: Update the force mem core bit for GPU clocks
ARM: dts: imx6qdl-gw59{10,13}: fix user pushbutton GPIO offset
arm64: dts: imx8: correct clock order
arm64: dts: lx2160a: specify clock frequencies for the MDIO controllers
arm64: dts: ls1088a: specify clock frequencies for the MDIO controllers
arm64: dts: ls208xa: specify clock frequencies for the MDIO controllers
block: Fix possible memory leak for rq_wb on add_disk failure
firmware: arm_scmi: Suppress the driver's bind attributes
firmware: arm_scmi: Make Rx chan_setup fail on memory errors
firmware: arm_scmi: Fix devres allocation device in virtio transport
arm64: dts: juno: Add thermal critical trip points
i2c: piix4: Fix adapter not be removed in piix4_remove()
Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM
Bluetooth: L2CAP: Fix attempting to access uninitialized memory
fscrypt: stop using keyrings subsystem for fscrypt_master_key
fscrypt: fix keyring memory leak on mount failure
btrfs: fix lost file sync on direct IO write with nowait and dsync iocb
btrfs: fix tree mod log mishandling of reallocated nodes
btrfs: fix type of parameter generation in btrfs_get_dentry
ftrace: Fix use-after-free for dynamic ftrace_ops
tracing: kprobe: Fix memory leak in test_gen_kprobe/kretprobe_cmd()
kprobe: reverse kp->flags when arm_kprobe failed
ring-buffer: Check for NULL cpu_buffer in ring_buffer_wake_waiters()
tools/nolibc/string: Fix memcmp() implementation
tracing/histogram: Update document for KEYS_MAX size
capabilities: fix potential memleak on error path from vfs_getxattr_alloc()
fuse: add file_modified() to fallocate
efi: random: reduce seed size to 32 bytes
efi: random: Use 'ACPI reclaim' memory for random seed
arm64: entry: avoid kprobe recursion
perf/x86/intel: Fix pebs event constraints for ICL
perf/x86/intel: Add Cooper Lake stepping to isolation_ucodes[]
perf/x86/intel: Fix pebs event constraints for SPR
parisc: Make 8250_gsc driver dependend on CONFIG_PARISC
parisc: Export iosapic_serial_irq() symbol for serial port driver
parisc: Avoid printing the hardware path twice
ext4: fix warning in 'ext4_da_release_space'
ext4: fix BUG_ON() when directory entry has invalid rec_len
x86/syscall: Include asm/ptrace.h in syscall_wrapper header
KVM: x86: Mask off reserved bits in CPUID.80000006H
KVM: x86: Mask off reserved bits in CPUID.8000001AH
KVM: x86: Mask off reserved bits in CPUID.80000008H
KVM: x86: Mask off reserved bits in CPUID.80000001H
KVM: x86: Mask off reserved bits in CPUID.8000001FH
KVM: VMX: fully disable SGX if SECONDARY_EXEC_ENCLS_EXITING unavailable
KVM: arm64: Fix bad dereference on MTE-enabled systems
KVM: x86: emulator: em_sysexit should update ctxt->mode
KVM: x86: emulator: introduce emulator_recalc_and_set_mode
KVM: x86: emulator: update the emulation mode after rsm
KVM: x86: emulator: update the emulation mode after CR0 write
tee: Fix tee_shm_register() for kernel TEE drivers
ext4,f2fs: fix readahead of verity data
cifs: fix regression in very old smb1 mounts
drm/rockchip: dsi: Clean up 'usage_mode' when failing to attach
drm/rockchip: dsi: Force synchronous probe
drm/i915/sdvo: Filter out invalid outputs more sensibly
drm/i915/sdvo: Setup DDC fully before output init
wifi: brcmfmac: Fix potential buffer overflow in brcmf_fweh_event_worker()
usb: dwc3: gadget: Don't delay End Transfer on delayed_status
RDMA/hns: Fix NULL pointer problem in free_mr_init()
docs/process/howto: Replace C89 with C11
RDMA/rxe: Fix mr leak in RESPST_ERR_RNR
tools/nolibc: Fix missing strlen() definition and infinite loop with gcc-12
ata: palmld: fix return value check in palmld_pata_probe()
net: lan966x: Fix the MTU calculation
net: lan966x: Adjust maximum frame size when vlan is enabled/disabled
net: lan966x: Fix FDMA when MTU is changed
net: lan966x: Fix unmapping of received frames using FDMA
bridge: Fix flushing of dynamic FDB entries
iio: adc: stm32-adc: fix channel sampling time init
drm/vc4: hdmi: Check the HSM rate at runtime_resume
hwrng: bcm2835 - use hwrng_msleep() instead of cpu_relax()
drm/amdkfd: Fix type of reset_type parameter in hqd_destroy() callback
drm/amdgpu: Program GC registers through RLCG interface in gfx_v11/gmc_v11
nvme-pci: disable write zeroes on various Kingston SSD
bio: safeguard REQ_ALLOC_CACHE bio put
clk: rs9: Fix I2C accessors
arm64: dts: imx8mm: Enable CPLD_Dn pull down resistor on MX8Menlo
clk: renesas: r8a779g0: Fix HSCIF parent clocks
arm64: dts: verdin-imx8mp: fix ctrl_sleep_moci
arm64: dts: imx8mm: remove otg1/2 power domain dependency on hsio
arm64: dts: imx8mm: correct usb power domains
arm64: dts: imx8mn: remove otg1 power domain dependency on hsio
arm64: dts: imx8mn: Correct the usb power domain
drm/rockchip: dw_hdmi: filter regulator -EPROBE_DEFER error messages
drm/rockchip: fix fbdev on non-IOMMU devices
drm/i915: stop abusing swiotlb_max_segment
blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
firmware: arm_scmi: Fix deferred_tx_wq release on error paths
clk: renesas: r8a779g0: Add SASYNCPER clocks
btrfs: fix a memory allocation failure test in btrfs_submit_direct
ACPI: NUMA: Add CXL CFMWS 'nodes' to the possible nodes set
tracing/fprobe: Fix to check whether fprobe is registered correctly
fprobe: Check rethook_alloc() return in rethook initialization
fuse: fix readdir cache race
net/ulp: remove SOCK_SUPPORT_ZC from tls sockets
ARM: dts: imx6dl-yapp4: Do not allow PM to switch PU regulator off on Q/QP
net: remove SOCK_SUPPORT_ZC from sockmap
net: also flag accepted sockets supporting msghdr originated zerocopy
ext4: update the backup superblock's at the end of the online resize
x86/tdx: Prepare for using "INFO" call for a second purpose
x86/tdx: Panic on bad configs that #VE on "private" memory access
KVM: VMX: Fold vmx_supported_debugctl() into vcpu_supported_debugctl()
KVM: VMX: Ignore guest CPUID for host userspace writes to DEBUGCTL
KVM: Initialize gfn_to_pfn_cache locks in dedicated helper
KVM: Reject attempts to consume or refresh inactive gfn_to_pfn_cache
KVM: arm64: Fix SMPRI_EL1/TPIDR2_EL0 trapping on VHE
drm/amdgpu: disable GFXOFF during compute for GFX11
UBUNTU: Upstream stable to v5.15.78, v6.0.8
** Affects: linux (Ubuntu)
Importance: Undecided
Status: Invalid
** Affects: linux (Ubuntu Kinetic)
Importance: Medium
Assignee: Kamal Mostafa (kamalmostafa)
Status: In Progress
** Tags: kernel-stable-tracking-bug
** Changed in: linux (Ubuntu)
Status: New => Confirmed
** Tags added: kernel-stable-tracking-bug
** Also affects: linux (Ubuntu Kinetic)
Importance: Undecided
Status: New
** Changed in: linux (Ubuntu)
Status: Confirmed => Invalid
** Changed in: linux (Ubuntu Kinetic)
Status: New => In Progress
** Changed in: linux (Ubuntu Kinetic)
Importance: Undecided => Medium
** Changed in: linux (Ubuntu Kinetic)
Assignee: (unassigned) => Kamal Mostafa (kamalmostafa)
** Description changed:
+ SRU Justification
- SRU Justification
+ Impact:
+ The upstream process for stable tree updates is quite similar
+ in scope to the Ubuntu SRU process, e.g., each patch has to
+ demonstrably fix a bug, and each patch is vetted by upstream
+ by originating either directly from a mainline/stable Linux tree or
+ a minimally backported form of that patch. The following upstream
+ stable patches should be included in the Ubuntu kernel:
- Impact:
- The upstream process for stable tree updates is quite similar
- in scope to the Ubuntu SRU process, e.g., each patch has to
- demonstrably fix a bug, and each patch is vetted by upstream
- by originating either directly from a mainline/stable Linux tree or
- a minimally backported form of that patch. The following upstream
- stable patches should be included in the Ubuntu kernel:
+ upstream stable patchset 2022-12-15
+ from git://git.kernel.org/
- upstream stable patchset 2022-12-15
- from git://git.kernel.org/
+ serial: ar933x: Deassert Transmit Enable on ->rs485_config()
+ KVM: x86: Trace re-injected exceptions
+ RDMA/cma: Use output interface for net_dev check
+ IB/hfi1: Correctly move list in sc_disable()
+ RDMA/hns: Disable local invalidate operation
+ NFSv4: Fix a potential state reclaim deadlock
+ NFSv4.1: Handle RECLAIM_COMPLETE trunking errors
+ NFSv4.1: We must always send RECLAIM_COMPLETE after a reboot
+ SUNRPC: Fix null-ptr-deref when xps sysfs alloc failed
+ NFSv4.2: Fixup CLONE dest file size for zero-length count
+ nfs4: Fix kmemleak when allocate slot failed
+ net: dsa: Fix possible memory leaks in dsa_loop_init()
+ RDMA/core: Fix null-ptr-deref in ib_core_cleanup()
+ RDMA/qedr: clean up work queue on failure in qedr_alloc_resources()
+ net: dsa: fall back to default tagger if we can't load the one from DT
+ nfc: fdp: Fix potential memory leak in fdp_nci_send()
+ nfc: nxp-nci: Fix potential memory leak in nxp_nci_send()
+ nfc: s3fwrn5: Fix potential memory leak in s3fwrn5_nci_send()
+ nfc: nfcmrvl: Fix potential memory leak in nfcmrvl_i2c_nci_send()
+ net: fec: fix improper use of NETDEV_TX_BUSY
+ ata: pata_legacy: fix pdc20230_set_piomode()
+ net: sched: Fix use after free in red_enqueue()
+ net: tun: fix bugs for oversize packet when napi frags enabled
+ netfilter: nf_tables: netlink notifier might race to release objects
+ netfilter: nf_tables: release flow rule object from commit path
+ ipvs: use explicitly signed chars
+ ipvs: fix WARNING in __ip_vs_cleanup_batch()
+ ipvs: fix WARNING in ip_vs_app_net_cleanup()
+ rose: Fix NULL pointer dereference in rose_send_frame()
+ mISDN: fix possible memory leak in mISDN_register_device()
+ isdn: mISDN: netjet: fix wrong check of device registration
+ btrfs: fix inode list leak during backref walking at resolve_indirect_refs()
+ btrfs: fix inode list leak during backref walking at find_parent_nodes()
+ btrfs: fix ulist leaks in error paths of qgroup self tests
+ netfilter: ipset: enforce documented limit to prevent allocating huge memory
+ Bluetooth: virtio_bt: Use skb_put to set length
+ Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
+ Bluetooth: L2CAP: Fix memory leak in vhci_write
+ net: mdio: fix undefined behavior in bit shift for __mdiobus_register
+ ibmvnic: Free rwi on reset success
+ stmmac: dwmac-loongson: fix invalid mdio_node
+ net/smc: Fix possible leaked pernet namespace in smc_init()
+ net, neigh: Fix null-ptr-deref in neigh_table_clear()
+ ipv6: fix WARNING in ip6_route_net_exit_late()
+ vsock: fix possible infinite sleep in vsock_connectible_wait_data()
+ media: rkisp1: Don't pass the quantization to rkisp1_csm_config()
+ media: rkisp1: Initialize color space on resizer sink and source pads
+ media: rkisp1: Use correct macro for gradient registers
+ media: rkisp1: Zero v4l2_subdev_format fields in when validating links
+ media: s5p_cec: limit msg.len to CEC_MAX_MSG_SIZE
+ media: cros-ec-cec: limit msg.len to CEC_MAX_MSG_SIZE
+ media: dvb-frontends/drxk: initialize err to 0
+ media: meson: vdec: fix possible refcount leak in vdec_probe()
+ media: v4l: subdev: Fail graciously when getting try data for NULL state
+ ACPI: APEI: Fix integer overflow in ghes_estatus_pool_init()
+ scsi: core: Restrict legal sdev_state transitions via sysfs
+ HID: saitek: add madcatz variant of MMO7 mouse device ID
+ drm/amdgpu: set vm_update_mode=0 as default for Sienna Cichlid in SRIOV case
+ i2c: xiic: Add platform module alias
+ efi/tpm: Pass correct address to memblock_reserve
+ clk: qcom: Update the force mem core bit for GPU clocks
+ ARM: dts: imx6qdl-gw59{10,13}: fix user pushbutton GPIO offset
+ arm64: dts: imx8: correct clock order
+ arm64: dts: lx2160a: specify clock frequencies for the MDIO controllers
+ arm64: dts: ls1088a: specify clock frequencies for the MDIO controllers
+ arm64: dts: ls208xa: specify clock frequencies for the MDIO controllers
+ block: Fix possible memory leak for rq_wb on add_disk failure
+ firmware: arm_scmi: Suppress the driver's bind attributes
+ firmware: arm_scmi: Make Rx chan_setup fail on memory errors
+ firmware: arm_scmi: Fix devres allocation device in virtio transport
+ arm64: dts: juno: Add thermal critical trip points
+ i2c: piix4: Fix adapter not be removed in piix4_remove()
+ Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM
+ Bluetooth: L2CAP: Fix attempting to access uninitialized memory
+ fscrypt: stop using keyrings subsystem for fscrypt_master_key
+ fscrypt: fix keyring memory leak on mount failure
+ btrfs: fix lost file sync on direct IO write with nowait and dsync iocb
+ btrfs: fix tree mod log mishandling of reallocated nodes
+ btrfs: fix type of parameter generation in btrfs_get_dentry
+ ftrace: Fix use-after-free for dynamic ftrace_ops
+ tracing: kprobe: Fix memory leak in test_gen_kprobe/kretprobe_cmd()
+ kprobe: reverse kp->flags when arm_kprobe failed
+ ring-buffer: Check for NULL cpu_buffer in ring_buffer_wake_waiters()
+ tools/nolibc/string: Fix memcmp() implementation
+ tracing/histogram: Update document for KEYS_MAX size
+ capabilities: fix potential memleak on error path from vfs_getxattr_alloc()
+ fuse: add file_modified() to fallocate
+ efi: random: reduce seed size to 32 bytes
+ efi: random: Use 'ACPI reclaim' memory for random seed
+ arm64: entry: avoid kprobe recursion
+ perf/x86/intel: Fix pebs event constraints for ICL
+ perf/x86/intel: Add Cooper Lake stepping to isolation_ucodes[]
+ perf/x86/intel: Fix pebs event constraints for SPR
+ parisc: Make 8250_gsc driver dependend on CONFIG_PARISC
+ parisc: Export iosapic_serial_irq() symbol for serial port driver
+ parisc: Avoid printing the hardware path twice
+ ext4: fix warning in 'ext4_da_release_space'
+ ext4: fix BUG_ON() when directory entry has invalid rec_len
+ x86/syscall: Include asm/ptrace.h in syscall_wrapper header
+ KVM: x86: Mask off reserved bits in CPUID.80000006H
+ KVM: x86: Mask off reserved bits in CPUID.8000001AH
+ KVM: x86: Mask off reserved bits in CPUID.80000008H
+ KVM: x86: Mask off reserved bits in CPUID.80000001H
+ KVM: x86: Mask off reserved bits in CPUID.8000001FH
+ KVM: VMX: fully disable SGX if SECONDARY_EXEC_ENCLS_EXITING unavailable
+ KVM: arm64: Fix bad dereference on MTE-enabled systems
+ KVM: x86: emulator: em_sysexit should update ctxt->mode
+ KVM: x86: emulator: introduce emulator_recalc_and_set_mode
+ KVM: x86: emulator: update the emulation mode after rsm
+ KVM: x86: emulator: update the emulation mode after CR0 write
+ tee: Fix tee_shm_register() for kernel TEE drivers
+ ext4,f2fs: fix readahead of verity data
+ cifs: fix regression in very old smb1 mounts
+ drm/rockchip: dsi: Clean up 'usage_mode' when failing to attach
+ drm/rockchip: dsi: Force synchronous probe
+ drm/i915/sdvo: Filter out invalid outputs more sensibly
+ drm/i915/sdvo: Setup DDC fully before output init
+ wifi: brcmfmac: Fix potential buffer overflow in brcmf_fweh_event_worker()
+ usb: dwc3: gadget: Don't delay End Transfer on delayed_status
+ RDMA/hns: Fix NULL pointer problem in free_mr_init()
+ docs/process/howto: Replace C89 with C11
+ RDMA/rxe: Fix mr leak in RESPST_ERR_RNR
+ tools/nolibc: Fix missing strlen() definition and infinite loop with gcc-12
+ ata: palmld: fix return value check in palmld_pata_probe()
+ net: lan966x: Fix the MTU calculation
+ net: lan966x: Adjust maximum frame size when vlan is enabled/disabled
+ net: lan966x: Fix FDMA when MTU is changed
+ net: lan966x: Fix unmapping of received frames using FDMA
+ bridge: Fix flushing of dynamic FDB entries
+ iio: adc: stm32-adc: fix channel sampling time init
+ drm/vc4: hdmi: Check the HSM rate at runtime_resume
+ hwrng: bcm2835 - use hwrng_msleep() instead of cpu_relax()
+ drm/amdkfd: Fix type of reset_type parameter in hqd_destroy() callback
+ drm/amdgpu: Program GC registers through RLCG interface in gfx_v11/gmc_v11
+ nvme-pci: disable write zeroes on various Kingston SSD
+ bio: safeguard REQ_ALLOC_CACHE bio put
+ clk: rs9: Fix I2C accessors
+ arm64: dts: imx8mm: Enable CPLD_Dn pull down resistor on MX8Menlo
+ clk: renesas: r8a779g0: Fix HSCIF parent clocks
+ arm64: dts: verdin-imx8mp: fix ctrl_sleep_moci
+ arm64: dts: imx8mm: remove otg1/2 power domain dependency on hsio
+ arm64: dts: imx8mm: correct usb power domains
+ arm64: dts: imx8mn: remove otg1 power domain dependency on hsio
+ arm64: dts: imx8mn: Correct the usb power domain
+ drm/rockchip: dw_hdmi: filter regulator -EPROBE_DEFER error messages
+ drm/rockchip: fix fbdev on non-IOMMU devices
+ drm/i915: stop abusing swiotlb_max_segment
+ blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
+ firmware: arm_scmi: Fix deferred_tx_wq release on error paths
+ clk: renesas: r8a779g0: Add SASYNCPER clocks
+ btrfs: fix a memory allocation failure test in btrfs_submit_direct
+ ACPI: NUMA: Add CXL CFMWS 'nodes' to the possible nodes set
+ tracing/fprobe: Fix to check whether fprobe is registered correctly
+ fprobe: Check rethook_alloc() return in rethook initialization
+ fuse: fix readdir cache race
+ net/ulp: remove SOCK_SUPPORT_ZC from tls sockets
+ ARM: dts: imx6dl-yapp4: Do not allow PM to switch PU regulator off on Q/QP
+ net: remove SOCK_SUPPORT_ZC from sockmap
+ net: also flag accepted sockets supporting msghdr originated zerocopy
+ ext4: update the backup superblock's at the end of the online resize
+ x86/tdx: Prepare for using "INFO" call for a second purpose
+ x86/tdx: Panic on bad configs that #VE on "private" memory access
+ KVM: VMX: Fold vmx_supported_debugctl() into vcpu_supported_debugctl()
+ KVM: VMX: Ignore guest CPUID for host userspace writes to DEBUGCTL
+ KVM: Initialize gfn_to_pfn_cache locks in dedicated helper
+ KVM: Reject attempts to consume or refresh inactive gfn_to_pfn_cache
+ KVM: arm64: Fix SMPRI_EL1/TPIDR2_EL0 trapping on VHE
+ drm/amdgpu: disable GFXOFF during compute for GFX11
+ UBUNTU: Upstream stable to v5.15.78, v6.0.8
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1999828
Title:
Kinetic update: upstream stable patchset 2022-12-15
Status in linux package in Ubuntu:
Invalid
Status in linux source package in Kinetic:
In Progress
Bug description:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
upstream stable patchset 2022-12-15
from git://git.kernel.org/
serial: ar933x: Deassert Transmit Enable on ->rs485_config()
KVM: x86: Trace re-injected exceptions
RDMA/cma: Use output interface for net_dev check
IB/hfi1: Correctly move list in sc_disable()
RDMA/hns: Disable local invalidate operation
NFSv4: Fix a potential state reclaim deadlock
NFSv4.1: Handle RECLAIM_COMPLETE trunking errors
NFSv4.1: We must always send RECLAIM_COMPLETE after a reboot
SUNRPC: Fix null-ptr-deref when xps sysfs alloc failed
NFSv4.2: Fixup CLONE dest file size for zero-length count
nfs4: Fix kmemleak when allocate slot failed
net: dsa: Fix possible memory leaks in dsa_loop_init()
RDMA/core: Fix null-ptr-deref in ib_core_cleanup()
RDMA/qedr: clean up work queue on failure in qedr_alloc_resources()
net: dsa: fall back to default tagger if we can't load the one from DT
nfc: fdp: Fix potential memory leak in fdp_nci_send()
nfc: nxp-nci: Fix potential memory leak in nxp_nci_send()
nfc: s3fwrn5: Fix potential memory leak in s3fwrn5_nci_send()
nfc: nfcmrvl: Fix potential memory leak in nfcmrvl_i2c_nci_send()
net: fec: fix improper use of NETDEV_TX_BUSY
ata: pata_legacy: fix pdc20230_set_piomode()
net: sched: Fix use after free in red_enqueue()
net: tun: fix bugs for oversize packet when napi frags enabled
netfilter: nf_tables: netlink notifier might race to release objects
netfilter: nf_tables: release flow rule object from commit path
ipvs: use explicitly signed chars
ipvs: fix WARNING in __ip_vs_cleanup_batch()
ipvs: fix WARNING in ip_vs_app_net_cleanup()
rose: Fix NULL pointer dereference in rose_send_frame()
mISDN: fix possible memory leak in mISDN_register_device()
isdn: mISDN: netjet: fix wrong check of device registration
btrfs: fix inode list leak during backref walking at resolve_indirect_refs()
btrfs: fix inode list leak during backref walking at find_parent_nodes()
btrfs: fix ulist leaks in error paths of qgroup self tests
netfilter: ipset: enforce documented limit to prevent allocating huge memory
Bluetooth: virtio_bt: Use skb_put to set length
Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
Bluetooth: L2CAP: Fix memory leak in vhci_write
net: mdio: fix undefined behavior in bit shift for __mdiobus_register
ibmvnic: Free rwi on reset success
stmmac: dwmac-loongson: fix invalid mdio_node
net/smc: Fix possible leaked pernet namespace in smc_init()
net, neigh: Fix null-ptr-deref in neigh_table_clear()
ipv6: fix WARNING in ip6_route_net_exit_late()
vsock: fix possible infinite sleep in vsock_connectible_wait_data()
media: rkisp1: Don't pass the quantization to rkisp1_csm_config()
media: rkisp1: Initialize color space on resizer sink and source pads
media: rkisp1: Use correct macro for gradient registers
media: rkisp1: Zero v4l2_subdev_format fields in when validating links
media: s5p_cec: limit msg.len to CEC_MAX_MSG_SIZE
media: cros-ec-cec: limit msg.len to CEC_MAX_MSG_SIZE
media: dvb-frontends/drxk: initialize err to 0
media: meson: vdec: fix possible refcount leak in vdec_probe()
media: v4l: subdev: Fail graciously when getting try data for NULL state
ACPI: APEI: Fix integer overflow in ghes_estatus_pool_init()
scsi: core: Restrict legal sdev_state transitions via sysfs
HID: saitek: add madcatz variant of MMO7 mouse device ID
drm/amdgpu: set vm_update_mode=0 as default for Sienna Cichlid in SRIOV case
i2c: xiic: Add platform module alias
efi/tpm: Pass correct address to memblock_reserve
clk: qcom: Update the force mem core bit for GPU clocks
ARM: dts: imx6qdl-gw59{10,13}: fix user pushbutton GPIO offset
arm64: dts: imx8: correct clock order
arm64: dts: lx2160a: specify clock frequencies for the MDIO controllers
arm64: dts: ls1088a: specify clock frequencies for the MDIO controllers
arm64: dts: ls208xa: specify clock frequencies for the MDIO controllers
block: Fix possible memory leak for rq_wb on add_disk failure
firmware: arm_scmi: Suppress the driver's bind attributes
firmware: arm_scmi: Make Rx chan_setup fail on memory errors
firmware: arm_scmi: Fix devres allocation device in virtio transport
arm64: dts: juno: Add thermal critical trip points
i2c: piix4: Fix adapter not be removed in piix4_remove()
Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM
Bluetooth: L2CAP: Fix attempting to access uninitialized memory
fscrypt: stop using keyrings subsystem for fscrypt_master_key
fscrypt: fix keyring memory leak on mount failure
btrfs: fix lost file sync on direct IO write with nowait and dsync iocb
btrfs: fix tree mod log mishandling of reallocated nodes
btrfs: fix type of parameter generation in btrfs_get_dentry
ftrace: Fix use-after-free for dynamic ftrace_ops
tracing: kprobe: Fix memory leak in test_gen_kprobe/kretprobe_cmd()
kprobe: reverse kp->flags when arm_kprobe failed
ring-buffer: Check for NULL cpu_buffer in ring_buffer_wake_waiters()
tools/nolibc/string: Fix memcmp() implementation
tracing/histogram: Update document for KEYS_MAX size
capabilities: fix potential memleak on error path from vfs_getxattr_alloc()
fuse: add file_modified() to fallocate
efi: random: reduce seed size to 32 bytes
efi: random: Use 'ACPI reclaim' memory for random seed
arm64: entry: avoid kprobe recursion
perf/x86/intel: Fix pebs event constraints for ICL
perf/x86/intel: Add Cooper Lake stepping to isolation_ucodes[]
perf/x86/intel: Fix pebs event constraints for SPR
parisc: Make 8250_gsc driver dependend on CONFIG_PARISC
parisc: Export iosapic_serial_irq() symbol for serial port driver
parisc: Avoid printing the hardware path twice
ext4: fix warning in 'ext4_da_release_space'
ext4: fix BUG_ON() when directory entry has invalid rec_len
x86/syscall: Include asm/ptrace.h in syscall_wrapper header
KVM: x86: Mask off reserved bits in CPUID.80000006H
KVM: x86: Mask off reserved bits in CPUID.8000001AH
KVM: x86: Mask off reserved bits in CPUID.80000008H
KVM: x86: Mask off reserved bits in CPUID.80000001H
KVM: x86: Mask off reserved bits in CPUID.8000001FH
KVM: VMX: fully disable SGX if SECONDARY_EXEC_ENCLS_EXITING unavailable
KVM: arm64: Fix bad dereference on MTE-enabled systems
KVM: x86: emulator: em_sysexit should update ctxt->mode
KVM: x86: emulator: introduce emulator_recalc_and_set_mode
KVM: x86: emulator: update the emulation mode after rsm
KVM: x86: emulator: update the emulation mode after CR0 write
tee: Fix tee_shm_register() for kernel TEE drivers
ext4,f2fs: fix readahead of verity data
cifs: fix regression in very old smb1 mounts
drm/rockchip: dsi: Clean up 'usage_mode' when failing to attach
drm/rockchip: dsi: Force synchronous probe
drm/i915/sdvo: Filter out invalid outputs more sensibly
drm/i915/sdvo: Setup DDC fully before output init
wifi: brcmfmac: Fix potential buffer overflow in brcmf_fweh_event_worker()
usb: dwc3: gadget: Don't delay End Transfer on delayed_status
RDMA/hns: Fix NULL pointer problem in free_mr_init()
docs/process/howto: Replace C89 with C11
RDMA/rxe: Fix mr leak in RESPST_ERR_RNR
tools/nolibc: Fix missing strlen() definition and infinite loop with gcc-12
ata: palmld: fix return value check in palmld_pata_probe()
net: lan966x: Fix the MTU calculation
net: lan966x: Adjust maximum frame size when vlan is enabled/disabled
net: lan966x: Fix FDMA when MTU is changed
net: lan966x: Fix unmapping of received frames using FDMA
bridge: Fix flushing of dynamic FDB entries
iio: adc: stm32-adc: fix channel sampling time init
drm/vc4: hdmi: Check the HSM rate at runtime_resume
hwrng: bcm2835 - use hwrng_msleep() instead of cpu_relax()
drm/amdkfd: Fix type of reset_type parameter in hqd_destroy() callback
drm/amdgpu: Program GC registers through RLCG interface in gfx_v11/gmc_v11
nvme-pci: disable write zeroes on various Kingston SSD
bio: safeguard REQ_ALLOC_CACHE bio put
clk: rs9: Fix I2C accessors
arm64: dts: imx8mm: Enable CPLD_Dn pull down resistor on MX8Menlo
clk: renesas: r8a779g0: Fix HSCIF parent clocks
arm64: dts: verdin-imx8mp: fix ctrl_sleep_moci
arm64: dts: imx8mm: remove otg1/2 power domain dependency on hsio
arm64: dts: imx8mm: correct usb power domains
arm64: dts: imx8mn: remove otg1 power domain dependency on hsio
arm64: dts: imx8mn: Correct the usb power domain
drm/rockchip: dw_hdmi: filter regulator -EPROBE_DEFER error messages
drm/rockchip: fix fbdev on non-IOMMU devices
drm/i915: stop abusing swiotlb_max_segment
blk-mq: Fix kmemleak in blk_mq_init_allocated_queue
firmware: arm_scmi: Fix deferred_tx_wq release on error paths
clk: renesas: r8a779g0: Add SASYNCPER clocks
btrfs: fix a memory allocation failure test in btrfs_submit_direct
ACPI: NUMA: Add CXL CFMWS 'nodes' to the possible nodes set
tracing/fprobe: Fix to check whether fprobe is registered correctly
fprobe: Check rethook_alloc() return in rethook initialization
fuse: fix readdir cache race
net/ulp: remove SOCK_SUPPORT_ZC from tls sockets
ARM: dts: imx6dl-yapp4: Do not allow PM to switch PU regulator off on Q/QP
net: remove SOCK_SUPPORT_ZC from sockmap
net: also flag accepted sockets supporting msghdr originated zerocopy
ext4: update the backup superblock's at the end of the online resize
x86/tdx: Prepare for using "INFO" call for a second purpose
x86/tdx: Panic on bad configs that #VE on "private" memory access
KVM: VMX: Fold vmx_supported_debugctl() into vcpu_supported_debugctl()
KVM: VMX: Ignore guest CPUID for host userspace writes to DEBUGCTL
KVM: Initialize gfn_to_pfn_cache locks in dedicated helper
KVM: Reject attempts to consume or refresh inactive gfn_to_pfn_cache
KVM: arm64: Fix SMPRI_EL1/TPIDR2_EL0 trapping on VHE
drm/amdgpu: disable GFXOFF during compute for GFX11
UBUNTU: Upstream stable to v5.15.78, v6.0.8
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1999828/+subscriptions
--
Mailing list: https://launchpad.net/~kernel-packages
Post to : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help : https://help.launchpad.net/ListHelp
