Public bug reported:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
v6.0.19 upstream stable release
from git://git.kernel.org/
Linux 6.0.19
drm/mgag200: Fix PLL setup for G200_SE_A rev >=4
efi: random: combine bootloader provided RNG seed with RNG protocol output
btrfs: make thaw time super block check to also verify checksum
ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in
ksmbd_decode_ntlmssp_auth_blob
ksmbd: send proper error response in smb2_tree_connect()
ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
btrfs: handle case when repair happens with dev-replace
virtio_blk: Fix signedness bug in virtblk_prep_rq()
virtio-blk: use a helper to handle request queuing errors
drm/i915/gvt: fix vgpu debugfs clean in remove
drm/i915/gvt: fix gvt debugfs destroy
drm/amdkfd: Fix kernel warning during topology setup
of/fdt: run soc memory setup when early_init_dt_scan_memory fails
riscv, kprobes: Stricter c.jr/c.jalr decoding
riscv: uaccess: fix type of 0 variable on error in get_user()
thermal: int340x: Add missing attribute for data rate base
vhost_vdpa: fix the crash in unmap a large memory
io_uring: fix CQ waiting timeout handling
block: don't allow splitting of a REQ_NOWAIT bio
net: dsa: tag_qca: fix wrong MGMT_DATA2 size
net: dsa: qca8k: fix wrong length value for mgmt eth packet
Revert "net: dsa: qca8k: cache lo and hi for mdio write"
Revert "drm/amd/display: Enable Freesync Video Mode by default"
bpf: Fix panic due to wrong pageattr of im->image
fbdev: matroxfb: G200eW: Increase max memory from 1 MB to 16 MB
nfsd: fix handling of readdir in v4root vs. mount upcall timeout
x86/bugs: Flush IBP in ib_prctl_set()
x86/kexec: Fix double-free of elf header buffer
btrfs: fix compat_ro checks against remount
btrfs: relax block-group-tree feature dependency checks
btrfs: separate BLOCK_GROUP_TREE compat RO flag from EXTENT_TREE_V2
btrfs: don't save block group root into super block
btrfs: check superblock to ensure the fs was not modified at thaw time
ASoC: SOF: Intel: pci-tgl: unblock S5 entry if DMA stop has failed"
nvme: also return I/O command effects from nvme_command_effects
nvmet: use NVME_CMD_EFFECTS_CSUPP instead of open coding it
io_uring: check for valid register opcode earlier
nvme: fix multipath crash caused by flush request when blktrace is enabled
drm/amdkfd: Fix double release compute pasid
drm/amdkfd: Fix kfd_process_device_init_vm error handling
drm/amdgpu: Fix size validation for non-exclusive domains (v4)
ASoC: SOF: mediatek: initialize panic_info to zero
ASoC: Intel: bytcr_rt5640: Add quirk for the Advantech MICA-071 tablet
9p/client: fix data race on req->status
ASoC: SOF: Revert: "core: unregister clients and machine drivers in .shutdown"
hfs/hfsplus: avoid WARN_ON() for sanity check, use proper error handling
usb: dwc3: xilinx: include linux/gpio/consumer.h
udf: Fix extension of the last extent in the file
caif: fix memory leak in cfctrl_linkup_request()
net/ulp: prevent ULP without clone op from entering the LISTEN status
qed: allow sleep in qed_mcp_trace_dump()
ublk: honor IO_URING_F_NONBLOCK for handling control command
drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
drm/i915: unpin on error in intel_vgpu_shadow_mm_pin()
perf stat: Fix handling of --for-each-cgroup with --bpf-counters to match non
BPF mode
perf stat: Fix handling of unsupported cgroup events when using BPF counters
perf lock contention: Fix core dump related to not finding the
"__sched_text_end" symbol on s/390
usb: rndis_host: Secure rndis_query check against int overflow
octeontx2-pf: Fix lmtst ID used in aura free
drivers/net/bonding/bond_3ad: return when there's no aggregator
fs/ntfs3: don't hold ni_lock when calling truncate_setsize()
drm/imx: ipuv3-plane: Fix overlay plane width
perf tools: Fix resources leak in perf_data__open_dir()
netfilter: ipset: Rework long task execution when adding/deleting entries
netfilter: ipset: fix hash:net,port,net hang with /0 subnet
net: sparx5: Fix reading of the MAC address
vxlan: Fix memory leaks in error path
net: sched: cbq: dont intepret cls results when asked to drop
net: sched: atm: dont intepret cls results when asked to drop
gpio: sifive: Fix refcount leak in sifive_gpio_probe
ceph: switch to vfs_inode_has_locks() to fix file lock bug
filelock: new helper: vfs_inode_has_locks
drm/meson: Reduce the FIFO lines held when AFBC is not used
selftests: net: return non-zero for failures reported in
arp_ndisc_evict_nocarrier
selftests: net: fix cleanup_v6() for arp_ndisc_evict_nocarrier
RDMA/mlx5: Fix validation of max_rd_atomic caps for DC
RDMA/mlx5: Fix mlx5_ib_get_hw_stats when used for device
net: phy: xgmiitorgmii: Fix refcount leak in xgmiitorgmii_probe
net: ena: Update NUMA TPH hint register upon NUMA node update
net: ena: Set default value for RX interrupt moderation
net: ena: Fix rx_copybreak value update
net: ena: Use bitmask to indicate packet redirection
net: ena: Account for the number of processed bytes in XDP
net: ena: Don't register memory info on XDP exchange
net: ena: Fix toeplitz initial hash value
net: amd-xgbe: add missed tasklet_kill
net: hns3: refine the handling for VF heartbeat
net: hns3: refactor function hclge_mbx_handler()
net/mlx5: Lag, fix failure to cancel delayed bond work
net/mlx5e: Set geneve_tlv_option_0_exist when matching on geneve option
net/mlx5e: Fix hw mtu initializing at XDP SQ allocation
net/mlx5e: Always clear dest encap in neigh-update-del
net/mlx5e: CT: Fix ct debugfs folder name
net/mlx5e: IPoIB, Don't allow CQE compression to be turned on by default
net/mlx5: Fix RoCE setting at HCA level
net/mlx5: Avoid recovery in probe flows
net/mlx5: Fix io_eq_size and event_eq_size params validation
net/mlx5: Add forgotten cleanup calls into mlx5_init_once() error path
net/mlx5: E-Switch, properly handle ingress tagged packets on VST
vdpasim: fix memory leak when freeing IOTLBs
vdpa/vp_vdpa: fix kfree a wrong pointer in vp_vdpa_remove
virtio-crypto: fix memory leak in virtio_crypto_alg_skcipher_close_session()
vdpa_sim: fix vringh initialization in vdpasim_queue_ready()
vhost-vdpa: fix an iotlb memory leak
vhost: fix range used in translate_desc()
vringh: fix range used in iotlb_translate()
vhost/vsock: Fix error handling in vhost_vsock_init()
vdpa_sim: fix possible memory leak in vdpasim_net_init() and vdpasim_blk_init()
vdpa/mlx5: Fix wrong mac address deletion
vdpa/mlx5: Fix rule forwarding VLAN to TIR
bnxt_en: Fix HDS and jumbo thresholds for RX packets
bnxt_en: Fix first buffer size calculations for XDP multi-buffer
bnxt_en: Fix XDP RX path
bnxt_en: Simplify bnxt_xdp_buff_init()
nfc: Fix potential resource leaks
net: dsa: mv88e6xxx: depend on PTP conditionally
qlcnic: prevent ->dcb use-after-free on qlcnic_dcb_enable() failure
net: sched: fix memory leak in tcindex_set_parms
net: hns3: fix VF promisc mode not update when mac table full
net: hns3: fix miss L3E checking for rx packet
net: hns3: add interrupts re-initialization while doing VF FLR
nfsd: shut down the NFSv4 state objects before the filecache
veth: Fix race with AF_XDP exposing old or uninitialized descriptors
net: lan966x: Fix configuration of the PCS
bonding: fix lockdep splat in bond_miimon_commit()
netfilter: nf_tables: honor set timeout and garbage collection updates
mptcp: fix lockdep false positive
vmxnet3: correctly report csum_level for encapsulated packet
net: vrf: determine the dst using the original ifindex for multicast
ice: xsk: do not use xdp_return_frame() on tx_buf->raw_buf
netfilter: nf_tables: perform type checking for existing sets
netfilter: nf_tables: add function to create set stateful expressions
netfilter: nf_tables: consolidate set description
drm/panfrost: Fix GEM handle creation ref-counting
bpf: pull before calling skb_postpull_rcsum()
wifi: ath9k: use proper statements in conditionals
btrfs: fix an error handling path in btrfs_defrag_leaves()
SUNRPC: ensure the matching upcall is in-flight upon downcall
ext4: correct inconsistent error msg in nojournal mode
ext4: goto right label 'failed_mount3a'
phy: qcom-qmp-combo: fix broken power on
perf probe: Fix to get the DW_AT_decl_file and DW_AT_call_file as unsinged data
perf probe: Use dwarf_attr_integrate as generic DWARF attr accessor
usb: dwc3: gadget: Ignore End Transfer delay on teardown
cifs: refcount only the selected iface during interface update
cifs: fix interface count calculation during refresh
btrfs: replace strncpy() with strscpy()
ARM: renumber bits related to _TIF_WORK_MASK
** Affects: linux-oem-6.0 (Ubuntu)
Importance: Undecided
Status: Confirmed
** Affects: linux-oem-6.0 (Ubuntu Jammy)
Importance: Undecided
Status: New
** Tags: kernel-stable-tracking-bug
** Changed in: linux-oem-6.0 (Ubuntu)
Status: New => Confirmed
** Tags added: kernel-stable-tracking-bug
** Also affects: linux-oem-6.0 (Ubuntu Jammy)
Importance: Undecided
Status: New
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux-oem-6.0 in Ubuntu.
https://bugs.launchpad.net/bugs/2002678
Title:
Jammy update: v6.0.19 upstream stable release
Status in linux-oem-6.0 package in Ubuntu:
Confirmed
Status in linux-oem-6.0 source package in Jammy:
New
Bug description:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
v6.0.19 upstream stable release
from git://git.kernel.org/
Linux 6.0.19
drm/mgag200: Fix PLL setup for G200_SE_A rev >=4
efi: random: combine bootloader provided RNG seed with RNG protocol output
btrfs: make thaw time super block check to also verify checksum
ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in
ksmbd_decode_ntlmssp_auth_blob
ksmbd: send proper error response in smb2_tree_connect()
ksmbd: fix infinite loop in ksmbd_conn_handler_loop()
btrfs: handle case when repair happens with dev-replace
virtio_blk: Fix signedness bug in virtblk_prep_rq()
virtio-blk: use a helper to handle request queuing errors
drm/i915/gvt: fix vgpu debugfs clean in remove
drm/i915/gvt: fix gvt debugfs destroy
drm/amdkfd: Fix kernel warning during topology setup
of/fdt: run soc memory setup when early_init_dt_scan_memory fails
riscv, kprobes: Stricter c.jr/c.jalr decoding
riscv: uaccess: fix type of 0 variable on error in get_user()
thermal: int340x: Add missing attribute for data rate base
vhost_vdpa: fix the crash in unmap a large memory
io_uring: fix CQ waiting timeout handling
block: don't allow splitting of a REQ_NOWAIT bio
net: dsa: tag_qca: fix wrong MGMT_DATA2 size
net: dsa: qca8k: fix wrong length value for mgmt eth packet
Revert "net: dsa: qca8k: cache lo and hi for mdio write"
Revert "drm/amd/display: Enable Freesync Video Mode by default"
bpf: Fix panic due to wrong pageattr of im->image
fbdev: matroxfb: G200eW: Increase max memory from 1 MB to 16 MB
nfsd: fix handling of readdir in v4root vs. mount upcall timeout
x86/bugs: Flush IBP in ib_prctl_set()
x86/kexec: Fix double-free of elf header buffer
btrfs: fix compat_ro checks against remount
btrfs: relax block-group-tree feature dependency checks
btrfs: separate BLOCK_GROUP_TREE compat RO flag from EXTENT_TREE_V2
btrfs: don't save block group root into super block
btrfs: check superblock to ensure the fs was not modified at thaw time
ASoC: SOF: Intel: pci-tgl: unblock S5 entry if DMA stop has failed"
nvme: also return I/O command effects from nvme_command_effects
nvmet: use NVME_CMD_EFFECTS_CSUPP instead of open coding it
io_uring: check for valid register opcode earlier
nvme: fix multipath crash caused by flush request when blktrace is enabled
drm/amdkfd: Fix double release compute pasid
drm/amdkfd: Fix kfd_process_device_init_vm error handling
drm/amdgpu: Fix size validation for non-exclusive domains (v4)
ASoC: SOF: mediatek: initialize panic_info to zero
ASoC: Intel: bytcr_rt5640: Add quirk for the Advantech MICA-071 tablet
9p/client: fix data race on req->status
ASoC: SOF: Revert: "core: unregister clients and machine drivers in .shutdown"
hfs/hfsplus: avoid WARN_ON() for sanity check, use proper error handling
usb: dwc3: xilinx: include linux/gpio/consumer.h
udf: Fix extension of the last extent in the file
caif: fix memory leak in cfctrl_linkup_request()
net/ulp: prevent ULP without clone op from entering the LISTEN status
qed: allow sleep in qed_mcp_trace_dump()
ublk: honor IO_URING_F_NONBLOCK for handling control command
drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
drm/i915: unpin on error in intel_vgpu_shadow_mm_pin()
perf stat: Fix handling of --for-each-cgroup with --bpf-counters to match non
BPF mode
perf stat: Fix handling of unsupported cgroup events when using BPF counters
perf lock contention: Fix core dump related to not finding the
"__sched_text_end" symbol on s/390
usb: rndis_host: Secure rndis_query check against int overflow
octeontx2-pf: Fix lmtst ID used in aura free
drivers/net/bonding/bond_3ad: return when there's no aggregator
fs/ntfs3: don't hold ni_lock when calling truncate_setsize()
drm/imx: ipuv3-plane: Fix overlay plane width
perf tools: Fix resources leak in perf_data__open_dir()
netfilter: ipset: Rework long task execution when adding/deleting entries
netfilter: ipset: fix hash:net,port,net hang with /0 subnet
net: sparx5: Fix reading of the MAC address
vxlan: Fix memory leaks in error path
net: sched: cbq: dont intepret cls results when asked to drop
net: sched: atm: dont intepret cls results when asked to drop
gpio: sifive: Fix refcount leak in sifive_gpio_probe
ceph: switch to vfs_inode_has_locks() to fix file lock bug
filelock: new helper: vfs_inode_has_locks
drm/meson: Reduce the FIFO lines held when AFBC is not used
selftests: net: return non-zero for failures reported in
arp_ndisc_evict_nocarrier
selftests: net: fix cleanup_v6() for arp_ndisc_evict_nocarrier
RDMA/mlx5: Fix validation of max_rd_atomic caps for DC
RDMA/mlx5: Fix mlx5_ib_get_hw_stats when used for device
net: phy: xgmiitorgmii: Fix refcount leak in xgmiitorgmii_probe
net: ena: Update NUMA TPH hint register upon NUMA node update
net: ena: Set default value for RX interrupt moderation
net: ena: Fix rx_copybreak value update
net: ena: Use bitmask to indicate packet redirection
net: ena: Account for the number of processed bytes in XDP
net: ena: Don't register memory info on XDP exchange
net: ena: Fix toeplitz initial hash value
net: amd-xgbe: add missed tasklet_kill
net: hns3: refine the handling for VF heartbeat
net: hns3: refactor function hclge_mbx_handler()
net/mlx5: Lag, fix failure to cancel delayed bond work
net/mlx5e: Set geneve_tlv_option_0_exist when matching on geneve option
net/mlx5e: Fix hw mtu initializing at XDP SQ allocation
net/mlx5e: Always clear dest encap in neigh-update-del
net/mlx5e: CT: Fix ct debugfs folder name
net/mlx5e: IPoIB, Don't allow CQE compression to be turned on by default
net/mlx5: Fix RoCE setting at HCA level
net/mlx5: Avoid recovery in probe flows
net/mlx5: Fix io_eq_size and event_eq_size params validation
net/mlx5: Add forgotten cleanup calls into mlx5_init_once() error path
net/mlx5: E-Switch, properly handle ingress tagged packets on VST
vdpasim: fix memory leak when freeing IOTLBs
vdpa/vp_vdpa: fix kfree a wrong pointer in vp_vdpa_remove
virtio-crypto: fix memory leak in virtio_crypto_alg_skcipher_close_session()
vdpa_sim: fix vringh initialization in vdpasim_queue_ready()
vhost-vdpa: fix an iotlb memory leak
vhost: fix range used in translate_desc()
vringh: fix range used in iotlb_translate()
vhost/vsock: Fix error handling in vhost_vsock_init()
vdpa_sim: fix possible memory leak in vdpasim_net_init() and
vdpasim_blk_init()
vdpa/mlx5: Fix wrong mac address deletion
vdpa/mlx5: Fix rule forwarding VLAN to TIR
bnxt_en: Fix HDS and jumbo thresholds for RX packets
bnxt_en: Fix first buffer size calculations for XDP multi-buffer
bnxt_en: Fix XDP RX path
bnxt_en: Simplify bnxt_xdp_buff_init()
nfc: Fix potential resource leaks
net: dsa: mv88e6xxx: depend on PTP conditionally
qlcnic: prevent ->dcb use-after-free on qlcnic_dcb_enable() failure
net: sched: fix memory leak in tcindex_set_parms
net: hns3: fix VF promisc mode not update when mac table full
net: hns3: fix miss L3E checking for rx packet
net: hns3: add interrupts re-initialization while doing VF FLR
nfsd: shut down the NFSv4 state objects before the filecache
veth: Fix race with AF_XDP exposing old or uninitialized descriptors
net: lan966x: Fix configuration of the PCS
bonding: fix lockdep splat in bond_miimon_commit()
netfilter: nf_tables: honor set timeout and garbage collection updates
mptcp: fix lockdep false positive
vmxnet3: correctly report csum_level for encapsulated packet
net: vrf: determine the dst using the original ifindex for multicast
ice: xsk: do not use xdp_return_frame() on tx_buf->raw_buf
netfilter: nf_tables: perform type checking for existing sets
netfilter: nf_tables: add function to create set stateful expressions
netfilter: nf_tables: consolidate set description
drm/panfrost: Fix GEM handle creation ref-counting
bpf: pull before calling skb_postpull_rcsum()
wifi: ath9k: use proper statements in conditionals
btrfs: fix an error handling path in btrfs_defrag_leaves()
SUNRPC: ensure the matching upcall is in-flight upon downcall
ext4: correct inconsistent error msg in nojournal mode
ext4: goto right label 'failed_mount3a'
phy: qcom-qmp-combo: fix broken power on
perf probe: Fix to get the DW_AT_decl_file and DW_AT_call_file as unsinged
data
perf probe: Use dwarf_attr_integrate as generic DWARF attr accessor
usb: dwc3: gadget: Ignore End Transfer delay on teardown
cifs: refcount only the selected iface during interface update
cifs: fix interface count calculation during refresh
btrfs: replace strncpy() with strscpy()
ARM: renumber bits related to _TIF_WORK_MASK
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux-oem-6.0/+bug/2002678/+subscriptions
--
Mailing list: https://launchpad.net/~kernel-packages
Post to : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help : https://help.launchpad.net/ListHelp
