** Changed in: linux (Ubuntu) Status: Confirmed => Invalid ** Changed in: linux (Ubuntu Focal) Status: New => In Progress
** Changed in: linux (Ubuntu Focal) Importance: Undecided => Medium ** Changed in: linux (Ubuntu Focal) Assignee: (unassigned) => Kamal Mostafa (kamalmostafa) ** Description changed: + SRU Justification - SRU Justification + Impact: + The upstream process for stable tree updates is quite similar + in scope to the Ubuntu SRU process, e.g., each patch has to + demonstrably fix a bug, and each patch is vetted by upstream + by originating either directly from a mainline/stable Linux tree or + a minimally backported form of that patch. The following upstream + stable patches should be included in the Ubuntu kernel: - Impact: - The upstream process for stable tree updates is quite similar - in scope to the Ubuntu SRU process, e.g., each patch has to - demonstrably fix a bug, and each patch is vetted by upstream - by originating either directly from a mainline/stable Linux tree or - a minimally backported form of that patch. The following upstream - stable patches should be included in the Ubuntu kernel: + v5.4.226 upstream stable release + from git://git.kernel.org/ - v5.4.226 upstream stable release - from git://git.kernel.org/ + wifi: mac80211: fix memory free error when registering wiphy fail + wifi: mac80211_hwsim: fix debugfs attribute ps with rc table support + audit: fix undefined behavior in bit shift for AUDIT_BIT + wifi: mac80211: Fix ack frame idr leak when mesh has no route + spi: stm32: fix stm32_spi_prepare_mbr() that halves spi clk for every run + drm: panel-orientation-quirks: Add quirk for Acer Switch V 10 (SW5-017) + block, bfq: fix null pointer dereference in bfq_bio_bfqg() + arm64/syscall: Include asm/ptrace.h in syscall_wrapper header. + RISC-V: vdso: Do not add missing symbols to version section in linker script + MIPS: pic32: treat port as signed integer + af_key: Fix send_acquire race with pfkey_register + ARM: dts: am335x-pcm-953: Define fixed regulators in root node + ASoC: sgtl5000: Reset the CHIP_CLK_CTRL reg on remove + regulator: core: fix kobject release warning and memory leak in regulator_register() + regulator: core: fix UAF in destroy_regulator() + bus: sunxi-rsb: Support atomic transfers + tee: optee: fix possible memory leak in optee_register_device() + ARM: dts: at91: sam9g20ek: enable udc vbus gpio pinctrl + net: liquidio: simplify if expression + nfc/nci: fix race with opening and closing + net: pch_gbe: fix potential memleak in pch_gbe_tx_queue() + 9p/fd: fix issue of list_del corruption in p9_fd_cancel() + ARM: mxs: fix memory leak in mxs_machine_init() + net/mlx4: Check retval of mlx4_bitmap_init + net/qla3xxx: fix potential memleak in ql3xxx_send() + net: pch_gbe: fix pci device refcount leak while module exiting + nfp: add port from netdev validation for EEPROM access + Drivers: hv: vmbus: fix double free in the error path of vmbus_add_channel_work() + Drivers: hv: vmbus: fix possible memory leak in vmbus_device_register() + net/mlx5: Fix FW tracer timestamp calculation + tipc: set con sock in tipc_conn_alloc + tipc: add an extra conn_get in tipc_conn_alloc + tipc: check skb_linearize() return value in tipc_disc_rcv() + xfrm: Fix ignored return value in xfrm6_init() + NFC: nci: fix memory leak in nci_rx_data_packet() + regulator: twl6030: re-add TWL6032_SUBCLASS + bnx2x: fix pci device refcount leak in bnx2x_vf_is_pcie_pending() + dccp/tcp: Reset saddr on failure after inet6?_hash_connect(). + s390/dasd: fix no record found for raw_track_access + nfc: st-nci: fix incorrect validating logic in EVT_TRANSACTION + nfc: st-nci: fix memory leaks in EVT_TRANSACTION + net: thunderx: Fix the ACPI memory leak + s390/crashdump: fix TOD programmable field size + lib/vdso: use "grep -E" instead of "egrep" + usb: dwc3: exynos: Fix remove() function + arm64: dts: rockchip: lower rk3399-puma-haikou SD controller clock frequency + iio: light: apds9960: fix wrong register for gesture gain + iio: core: Fix entry not deleted when iio_register_sw_trigger_type() fails + init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash + nios2: add FORCE for vmlinuz.gz + iio: ms5611: Simplify IO callback parameters + iio: pressure: ms5611: fixed value compensation bug + ceph: do not update snapshot context when there is no new snapshot + ceph: avoid putting the realm twice when decoding snaps fails + firmware: google: Release devices before unregistering the bus + firmware: coreboot: Register bus in module init + nilfs2: fix nilfs_sufile_mark_dirty() not set segment usage as dirty + gcov: clang: fix the buffer overflow issue + Input: synaptics - switch touchpad on HP Laptop 15-da3001TU to RMI mode + ASoC: Intel: bytcht_es8316: Add quirk for the Nanote UMPC-01 + serial: 8250: 8250_omap: Avoid RS485 RTS glitch on ->set_termios() + xen/platform-pci: add missing free_irq() in error path + platform/x86: asus-wmi: add missing pci_dev_put() in asus_wmi_set_xusb2pr() + platform/x86: acer-wmi: Enable SW_TABLET_MODE on Switch V 10 (SW5-017) + platform/x86: hp-wmi: Ignore Smart Experience App event + UBUNTU: [Config] updateconfigs for INET_TABLE_PERTURB_ORDER + tcp: configurable source port perturb table size + net: usb: qmi_wwan: add Telit 0x103a composition + dm integrity: flush the journal on suspend + binder: avoid potential data leakage when copying txn + binder: read pre-translated fds from sender buffer + binder: defer copies of pre-patched txn data + binder: fix pointer cast warning + binder: Address corner cases in deferred copy and fixup + binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0 + btrfs: free btrfs_path before copying root refs to userspace + btrfs: free btrfs_path before copying fspath to userspace + btrfs: free btrfs_path before copying subvol info to userspace + btrfs: sysfs: normalize the error handling branch in btrfs_init_sysfs() + drm/amd/dc/dce120: Fix audio register mapping, stop triggering KASAN + drm/amdgpu: always register an MMU notifier for userptr + drm/i915: fix TLB invalidation for Gen12 video and compute engines + fuse: lock inode unconditionally in fuse_fallocate() + btrfs: free btrfs_path before copying inodes to userspace + spi: spi-imx: Fix spi_bus_clk if requested clock is higher than input clock + btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker + drm/amdgpu: update drm_display_info correctly when the edid is read + drm/amdgpu: Partially revert "drm/amdgpu: update drm_display_info correctly when the edid is read" + btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit() + iio: health: afe4403: Fix oob read in afe4403_read_raw + iio: health: afe4404: Fix oob read in afe4404_[read|write]_raw + iio: light: rpr0521: add missing Kconfig dependencies + scripts/faddr2line: Fix regression in name resolution on ppc64le + hwmon: (i5500_temp) fix missing pci_disable_device() + hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails + of: property: decrement node refcount in of_fwnode_get_reference_args() + net/mlx5: Fix uninitialized variable bug in outlen_write() + net/mlx5e: Fix use-after-free when reverting termination table + can: sja1000_isa: sja1000_isa_probe(): add missing free_sja1000dev() + can: cc770: cc770_isa_probe(): add missing free_cc770dev() + qlcnic: fix sleep-in-atomic-context bugs caused by msleep + wifi: cfg80211: fix buffer overflow in elem comparison + net: phy: fix null-ptr-deref while probe() failed + net: net_netdev: Fix error handling in ntb_netdev_init_module() + net/9p: Fix a potential socket leak in p9_socket_open + net: ethernet: nixge: fix NULL dereference + dsa: lan9303: Correct stat name + net: hsr: Fix potential use-after-free + afs: Fix fileserver probe RTT handling + net: tun: Fix use-after-free in tun_detach() + packet: do not set TP_STATUS_CSUM_VALID on CHECKSUM_COMPLETE + sctp: fix memory leak in sctp_stream_outq_migrate() + net: ethernet: renesas: ravb: Fix promiscuous mode after system resumed + hwmon: (coretemp) Check for null before removing sysfs attrs + hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() + net/mlx5: DR, Fix uninitialized var warning + error-injection: Add prompt for function error injection + tools/vm/slabinfo-gnuplot: use "grep -E" instead of "egrep" + nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry() + x86/bugs: Make sure MSR_SPEC_CTRL is updated properly upon resume from S3 + pinctrl: intel: Save and restore pins in "direct IRQ" mode + mmc: mmc_test: Fix removal of debugfs file + mmc: core: Fix ambiguous TRIM and DISCARD arg + mmc: sdhci-esdhc-imx: correct CQHCI exit halt state check + mmc: sdhci-sprd: Fix no reset data and command after voltage switch + tracing: Free buffers when a used dynamic event is removed + arm64: Fix panic() when Spectre-v2 causes Spectre-BHB to re-allocate KVM vectors + arm64: errata: Fix KVM Spectre-v2 mitigation selection for Cortex-A57/A72 + mm: Fix '.data.once' orphan section warning + ASoC: ops: Fix bounds check for _sx controls + pinctrl: single: Fix potential division by zero + iommu/vt-d: Fix PCI device refcount leak in dmar_dev_scope_init() + parisc: Increase size of gcc stack frame check + xtensa: increase size of gcc stack frame check + parisc: Increase FRAME_WARN to 2048 bytes on parisc + Kconfig.debug: provide a little extra FRAME_WARN leeway when KASAN is enabled + selftests: net: add delete nexthop route warning test + selftests: net: fix nexthop warning cleanup double ip typo + ipv4: Handle attempt to delete multipath route when fib_info contains an nh reference + ipv4: Fix route deletion when nexthop info is not specified + tracing/ring-buffer: Have polling block on watermark + nvme: restrict management ioctls to admin + nvme: ensure subsystem reset is single threaded + x86/tsx: Add a feature bit for TSX control MSR support + x86/pm: Add enumeration check before spec MSRs save/restore setup + x86/ioremap: Fix page aligned size calculation in __ioremap_caller() + Revert "clocksource/drivers/riscv: Events are stopped during CPU suspend" + char: tpm: Protect tpm_pm_suspend with locks + mmc: sdhci: use FIELD_GET for preset value bit masks + mmc: sdhci: Fix voltage switch delay + proc: avoid integer type confusion in get_proc_long + proc: proc_skip_spaces() shouldn't think it is working on C strings + v4l2: don't fall back to follow_pfn() if pin_user_pages_fast() fails + ipc/sem: Fix dangling sem_array access in semtimedop race + Linux 5.4.226 + UBUNTU: Upstream stable to v5.4.226 -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/2003896 Title: Focal update: v5.4.226 upstream stable release Status in linux package in Ubuntu: Invalid Status in linux source package in Focal: In Progress Bug description: SRU Justification Impact: The upstream process for stable tree updates is quite similar in scope to the Ubuntu SRU process, e.g., each patch has to demonstrably fix a bug, and each patch is vetted by upstream by originating either directly from a mainline/stable Linux tree or a minimally backported form of that patch. The following upstream stable patches should be included in the Ubuntu kernel: v5.4.226 upstream stable release from git://git.kernel.org/ wifi: mac80211: fix memory free error when registering wiphy fail wifi: mac80211_hwsim: fix debugfs attribute ps with rc table support audit: fix undefined behavior in bit shift for AUDIT_BIT wifi: mac80211: Fix ack frame idr leak when mesh has no route spi: stm32: fix stm32_spi_prepare_mbr() that halves spi clk for every run drm: panel-orientation-quirks: Add quirk for Acer Switch V 10 (SW5-017) block, bfq: fix null pointer dereference in bfq_bio_bfqg() arm64/syscall: Include asm/ptrace.h in syscall_wrapper header. RISC-V: vdso: Do not add missing symbols to version section in linker script MIPS: pic32: treat port as signed integer af_key: Fix send_acquire race with pfkey_register ARM: dts: am335x-pcm-953: Define fixed regulators in root node ASoC: sgtl5000: Reset the CHIP_CLK_CTRL reg on remove regulator: core: fix kobject release warning and memory leak in regulator_register() regulator: core: fix UAF in destroy_regulator() bus: sunxi-rsb: Support atomic transfers tee: optee: fix possible memory leak in optee_register_device() ARM: dts: at91: sam9g20ek: enable udc vbus gpio pinctrl net: liquidio: simplify if expression nfc/nci: fix race with opening and closing net: pch_gbe: fix potential memleak in pch_gbe_tx_queue() 9p/fd: fix issue of list_del corruption in p9_fd_cancel() ARM: mxs: fix memory leak in mxs_machine_init() net/mlx4: Check retval of mlx4_bitmap_init net/qla3xxx: fix potential memleak in ql3xxx_send() net: pch_gbe: fix pci device refcount leak while module exiting nfp: add port from netdev validation for EEPROM access Drivers: hv: vmbus: fix double free in the error path of vmbus_add_channel_work() Drivers: hv: vmbus: fix possible memory leak in vmbus_device_register() net/mlx5: Fix FW tracer timestamp calculation tipc: set con sock in tipc_conn_alloc tipc: add an extra conn_get in tipc_conn_alloc tipc: check skb_linearize() return value in tipc_disc_rcv() xfrm: Fix ignored return value in xfrm6_init() NFC: nci: fix memory leak in nci_rx_data_packet() regulator: twl6030: re-add TWL6032_SUBCLASS bnx2x: fix pci device refcount leak in bnx2x_vf_is_pcie_pending() dccp/tcp: Reset saddr on failure after inet6?_hash_connect(). s390/dasd: fix no record found for raw_track_access nfc: st-nci: fix incorrect validating logic in EVT_TRANSACTION nfc: st-nci: fix memory leaks in EVT_TRANSACTION net: thunderx: Fix the ACPI memory leak s390/crashdump: fix TOD programmable field size lib/vdso: use "grep -E" instead of "egrep" usb: dwc3: exynos: Fix remove() function arm64: dts: rockchip: lower rk3399-puma-haikou SD controller clock frequency iio: light: apds9960: fix wrong register for gesture gain iio: core: Fix entry not deleted when iio_register_sw_trigger_type() fails init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash nios2: add FORCE for vmlinuz.gz iio: ms5611: Simplify IO callback parameters iio: pressure: ms5611: fixed value compensation bug ceph: do not update snapshot context when there is no new snapshot ceph: avoid putting the realm twice when decoding snaps fails firmware: google: Release devices before unregistering the bus firmware: coreboot: Register bus in module init nilfs2: fix nilfs_sufile_mark_dirty() not set segment usage as dirty gcov: clang: fix the buffer overflow issue Input: synaptics - switch touchpad on HP Laptop 15-da3001TU to RMI mode ASoC: Intel: bytcht_es8316: Add quirk for the Nanote UMPC-01 serial: 8250: 8250_omap: Avoid RS485 RTS glitch on ->set_termios() xen/platform-pci: add missing free_irq() in error path platform/x86: asus-wmi: add missing pci_dev_put() in asus_wmi_set_xusb2pr() platform/x86: acer-wmi: Enable SW_TABLET_MODE on Switch V 10 (SW5-017) platform/x86: hp-wmi: Ignore Smart Experience App event UBUNTU: [Config] updateconfigs for INET_TABLE_PERTURB_ORDER tcp: configurable source port perturb table size net: usb: qmi_wwan: add Telit 0x103a composition dm integrity: flush the journal on suspend binder: avoid potential data leakage when copying txn binder: read pre-translated fds from sender buffer binder: defer copies of pre-patched txn data binder: fix pointer cast warning binder: Address corner cases in deferred copy and fixup binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0 btrfs: free btrfs_path before copying root refs to userspace btrfs: free btrfs_path before copying fspath to userspace btrfs: free btrfs_path before copying subvol info to userspace btrfs: sysfs: normalize the error handling branch in btrfs_init_sysfs() drm/amd/dc/dce120: Fix audio register mapping, stop triggering KASAN drm/amdgpu: always register an MMU notifier for userptr drm/i915: fix TLB invalidation for Gen12 video and compute engines fuse: lock inode unconditionally in fuse_fallocate() btrfs: free btrfs_path before copying inodes to userspace spi: spi-imx: Fix spi_bus_clk if requested clock is higher than input clock btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker drm/amdgpu: update drm_display_info correctly when the edid is read drm/amdgpu: Partially revert "drm/amdgpu: update drm_display_info correctly when the edid is read" btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit() iio: health: afe4403: Fix oob read in afe4403_read_raw iio: health: afe4404: Fix oob read in afe4404_[read|write]_raw iio: light: rpr0521: add missing Kconfig dependencies scripts/faddr2line: Fix regression in name resolution on ppc64le hwmon: (i5500_temp) fix missing pci_disable_device() hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails of: property: decrement node refcount in of_fwnode_get_reference_args() net/mlx5: Fix uninitialized variable bug in outlen_write() net/mlx5e: Fix use-after-free when reverting termination table can: sja1000_isa: sja1000_isa_probe(): add missing free_sja1000dev() can: cc770: cc770_isa_probe(): add missing free_cc770dev() qlcnic: fix sleep-in-atomic-context bugs caused by msleep wifi: cfg80211: fix buffer overflow in elem comparison net: phy: fix null-ptr-deref while probe() failed net: net_netdev: Fix error handling in ntb_netdev_init_module() net/9p: Fix a potential socket leak in p9_socket_open net: ethernet: nixge: fix NULL dereference dsa: lan9303: Correct stat name net: hsr: Fix potential use-after-free afs: Fix fileserver probe RTT handling net: tun: Fix use-after-free in tun_detach() packet: do not set TP_STATUS_CSUM_VALID on CHECKSUM_COMPLETE sctp: fix memory leak in sctp_stream_outq_migrate() net: ethernet: renesas: ravb: Fix promiscuous mode after system resumed hwmon: (coretemp) Check for null before removing sysfs attrs hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() net/mlx5: DR, Fix uninitialized var warning error-injection: Add prompt for function error injection tools/vm/slabinfo-gnuplot: use "grep -E" instead of "egrep" nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry() x86/bugs: Make sure MSR_SPEC_CTRL is updated properly upon resume from S3 pinctrl: intel: Save and restore pins in "direct IRQ" mode mmc: mmc_test: Fix removal of debugfs file mmc: core: Fix ambiguous TRIM and DISCARD arg mmc: sdhci-esdhc-imx: correct CQHCI exit halt state check mmc: sdhci-sprd: Fix no reset data and command after voltage switch tracing: Free buffers when a used dynamic event is removed arm64: Fix panic() when Spectre-v2 causes Spectre-BHB to re-allocate KVM vectors arm64: errata: Fix KVM Spectre-v2 mitigation selection for Cortex-A57/A72 mm: Fix '.data.once' orphan section warning ASoC: ops: Fix bounds check for _sx controls pinctrl: single: Fix potential division by zero iommu/vt-d: Fix PCI device refcount leak in dmar_dev_scope_init() parisc: Increase size of gcc stack frame check xtensa: increase size of gcc stack frame check parisc: Increase FRAME_WARN to 2048 bytes on parisc Kconfig.debug: provide a little extra FRAME_WARN leeway when KASAN is enabled selftests: net: add delete nexthop route warning test selftests: net: fix nexthop warning cleanup double ip typo ipv4: Handle attempt to delete multipath route when fib_info contains an nh reference ipv4: Fix route deletion when nexthop info is not specified tracing/ring-buffer: Have polling block on watermark nvme: restrict management ioctls to admin nvme: ensure subsystem reset is single threaded x86/tsx: Add a feature bit for TSX control MSR support x86/pm: Add enumeration check before spec MSRs save/restore setup x86/ioremap: Fix page aligned size calculation in __ioremap_caller() Revert "clocksource/drivers/riscv: Events are stopped during CPU suspend" char: tpm: Protect tpm_pm_suspend with locks mmc: sdhci: use FIELD_GET for preset value bit masks mmc: sdhci: Fix voltage switch delay proc: avoid integer type confusion in get_proc_long proc: proc_skip_spaces() shouldn't think it is working on C strings v4l2: don't fall back to follow_pfn() if pin_user_pages_fast() fails ipc/sem: Fix dangling sem_array access in semtimedop race Linux 5.4.226 UBUNTU: Upstream stable to v5.4.226 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2003896/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp