Public bug reported:

    SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The following upstream
       stable patches should be included in the Ubuntu kernel:

       v5.4.259 upstream stable release
       from git://git.kernel.org/

RDMA/cxgb4: Check skb value for failure to allocate
lib/test_meminit: fix off-by-one error in test_pages()
pwm: hibvt: Explicitly set .polarity in .get_state()
HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect
quota: Fix slow quotaoff
net: prevent address rewrite in kernel_bind()
drm: etvnaviv: fix bad backport leading to warning
drm/msm/dsi: skip the wait for video mode done if not applicable
ravb: Fix up dma_free_coherent() call in ravb_remove()
ieee802154: ca8210: Fix a potential UAF in ca8210_probe
mlxsw: fix mlxsw_sp2_nve_vxlan_learning_set() return type
xen-netback: use default TX queue size for vifs
drm/vmwgfx: fix typo of sizeof argument
ixgbe: fix crash with empty VF macvlan list
net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
nfc: nci: assert requested protocol is valid
workqueue: Override implicit ordered attribute in 
workqueue_apply_unbound_cpumask()
dmaengine: stm32-mdma: abort resume if no ongoing transfer
usb: xhci: xhci-ring: Use sysdev for mapping bounce buffer
net: usb: dm9601: fix uninitialized variable use in dm9601_mdio_read
usb: dwc3: Soft reset phy on probe for host
usb: musb: Get the musb_qh poniter after musb_giveback
usb: musb: Modify the "HWVers" register address
iio: pressure: bmp280: Fix NULL pointer exception
iio: pressure: dps310: Adjust Timeout Settings
iio: pressure: ms5611: ms5611_prom_is_valid false negative bug
mcb: remove is_added flag from mcb_device struct
libceph: use kernel_connect()
ceph: fix incorrect revoked caps assert in ceph_fill_file_size()
Input: powermate - fix use-after-free in powermate_config_complete
Input: psmouse - fix fast_reconnect function for PS/2 mode
Input: xpad - add PXN V900 support
cgroup: Remove duplicates in cgroup v1 tasks file
pinctrl: avoid unsafe code pattern in find_pinctrl()
usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
usb: gadget: ncm: Handle decoding of multiple NTB's in unwrap call
x86/cpu: Fix AMD erratum #1485 on Zen4-based CPUs
dmaengine: mediatek: Fix deadlock caused by synchronize_irq()
powerpc/8xx: Fix pte_access_permitted() for PAGE_NONE
powerpc/64e: Fix wrong test in __ptep_test_and_clear_young()
ravb: Fix use-after-free issue in ravb_tx_timeout_work()
Documentation: sysctl: align cells in second content column
usb: hub: Guard against accesses to uninitialized BOS descriptors
Bluetooth: hci_event: Ignore NULL link key
Bluetooth: Reject connection with the device which has same BD_ADDR
Bluetooth: Fix a refcnt underflow problem for hci_conn
Bluetooth: vhci: Fix race when opening vhci device
Bluetooth: hci_event: Fix coding style
Bluetooth: avoid memcmp() out of bounds warning
ice: fix over-shifted variable
nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
regmap: fix NULL deref on lookup
KVM: x86: Mask LVTPC when handling a PMI
netfilter: nft_payload: fix wrong mac header matching
qed: fix LL2 RX buffer allocation
xfrm: fix a data-race in xfrm_gen_index()
xfrm: interface: use DEV_STATS_INC()
net: ipv4: fix return value check in esp_remove_trailer
net: ipv6: fix return value check in esp_remove_trailer
net: rfkill: gpio: prevent value glitch during probe
tcp: fix excessive TLP and RACK timeouts from HZ rounding
tcp: tsq: relax tcp_small_queue_check() when rtx queue contains a single skb
tun: prevent negative ifindex
ipv4: fib: annotate races around nh->nh_saddr_genid and nh->nh_saddr
net: usb: smsc95xx: Fix an error code in smsc95xx_reset()
i40e: prevent crash on probe if hw registers have invalid values
net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve
neighbor: tracing: Move pin6 inside CONFIG_IPV6=y section
netfilter: nft_set_rbtree: .deactivate fails if element has expired
net: pktgen: Fix interface flags printing
resource: Add irqresource_disabled()
ACPI: Drop acpi_dev_irqresource_disabled()
ACPI: resource: Skip IRQ override on Asus Vivobook S5602ZA
ACPI: resource: Add Asus ExpertBook B2502 to Asus quirks
ACPI: resource: Skip IRQ override on Asus Expertbook B2402CBA
ACPI: resource: Skip IRQ override on ASUS ExpertBook B1502CBA
ACPI: resource: Skip IRQ override on ASUS ExpertBook B1402CBA
ARM: dts: ti: omap: Fix noisy serial with overrun-throttle-ms for mapphone
btrfs: return -EUCLEAN for delayed tree ref with a ref count not equals to 1
btrfs: initialize start_slot in btrfs_log_prealloc_extents
i2c: mux: Avoid potential false error message in i2c_mux_add_adapter
overlayfs: set ctime when setting mtime and atime
gpio: timberdale: Fix potential deadlock on &tgpio->lock
ata: libata-eh: Fix compilation warning in ata_eh_link_report()
tracing: relax trace_event_eval_update() execution with cond_resched()
HID: holtek: fix slab-out-of-bounds Write in holtek_kbd_input_event
Bluetooth: Avoid redundant authentication
Bluetooth: hci_core: Fix build warnings
wifi: mac80211: allow transmitting EAPOL frames with tainted key
wifi: cfg80211: avoid leaking stack data into trace
regulator/core: Revert "fix kobject release warning and memory leak in 
regulator_register()"
sky2: Make sure there is at least one frag_addr available
drm: panel-orientation-quirks: Add quirk for One Mix 2S
btrfs: fix some -Wmaybe-uninitialized warnings in ioctl.c
HID: multitouch: Add required quirk for Synaptics 0xcd7e device
Bluetooth: hci_event: Fix using memcmp when comparing keys
mtd: rawnand: qcom: Unmap the right resource upon probe failure
mtd: spinand: micron: correct bitmask for ecc status
mtd: physmap-core: Restore map_rom fallback
mmc: core: sdio: hold retuning if sdio in 1-bit mode
mmc: core: Capture correct oemid-bits for eMMC cards
Revert "pinctrl: avoid unsafe code pattern in find_pinctrl()"
ACPI: irq: Fix incorrect return value in acpi_register_gsi()
USB: serial: option: add Telit LE910C4-WWX 0x1035 composition
USB: serial: option: add entry for Sierra EM9191 with new firmware
USB: serial: option: add Fibocom to DELL custom modem FM101R-GL
s390/pci: fix iommu bitmap allocation
gpio: vf610: set value before the direction to avoid a glitch
ASoC: pxa: fix a memory leak in probe()
phy: mapphone-mdm6600: Fix runtime disable on probe
phy: mapphone-mdm6600: Fix runtime PM for remove
phy: mapphone-mdm6600: Fix pinctrl_pm handling for sleep pins
Bluetooth: hci_sock: fix slab oob read in create_monitor_event
Bluetooth: hci_sock: Correctly bounds check and pad HCI_MON_NEW_INDEX name
xfrm6: fix inet6_dev refcount underflow problem
Linux 5.4.259
UBUNTU: Upstream stable to v5.4.259

** Affects: linux (Ubuntu)
     Importance: Undecided
         Status: Confirmed

** Affects: linux (Ubuntu Focal)
     Importance: Undecided
         Status: New


** Tags: kernel-stable-tracking-bug

** Changed in: linux (Ubuntu)
       Status: New => Confirmed

** Tags added: kernel-stable-tracking-bug

** Also affects: linux (Ubuntu Focal)
   Importance: Undecided
       Status: New

** Description changed:

  
      SRU Justification
  
      Impact:
         The upstream process for stable tree updates is quite similar
         in scope to the Ubuntu SRU process, e.g., each patch has to
         demonstrably fix a bug, and each patch is vetted by upstream
         by originating either directly from a mainline/stable Linux tree or
         a minimally backported form of that patch. The following upstream
         stable patches should be included in the Ubuntu kernel:
  
         v5.4.259 upstream stable release
         from git://git.kernel.org/
  
-             
+ RDMA/cxgb4: Check skb value for failure to allocate
+ lib/test_meminit: fix off-by-one error in test_pages()
+ pwm: hibvt: Explicitly set .polarity in .get_state()
+ HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect
+ quota: Fix slow quotaoff
+ net: prevent address rewrite in kernel_bind()
+ drm: etvnaviv: fix bad backport leading to warning
+ drm/msm/dsi: skip the wait for video mode done if not applicable
+ ravb: Fix up dma_free_coherent() call in ravb_remove()
+ ieee802154: ca8210: Fix a potential UAF in ca8210_probe
+ mlxsw: fix mlxsw_sp2_nve_vxlan_learning_set() return type
+ xen-netback: use default TX queue size for vifs
+ drm/vmwgfx: fix typo of sizeof argument
+ ixgbe: fix crash with empty VF macvlan list
+ net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
+ nfc: nci: assert requested protocol is valid
+ workqueue: Override implicit ordered attribute in 
workqueue_apply_unbound_cpumask()
+ dmaengine: stm32-mdma: abort resume if no ongoing transfer
+ usb: xhci: xhci-ring: Use sysdev for mapping bounce buffer
+ net: usb: dm9601: fix uninitialized variable use in dm9601_mdio_read
+ usb: dwc3: Soft reset phy on probe for host
+ usb: musb: Get the musb_qh poniter after musb_giveback
+ usb: musb: Modify the "HWVers" register address
+ iio: pressure: bmp280: Fix NULL pointer exception
+ iio: pressure: dps310: Adjust Timeout Settings
+ iio: pressure: ms5611: ms5611_prom_is_valid false negative bug
+ mcb: remove is_added flag from mcb_device struct
+ libceph: use kernel_connect()
+ ceph: fix incorrect revoked caps assert in ceph_fill_file_size()
+ Input: powermate - fix use-after-free in powermate_config_complete
+ Input: psmouse - fix fast_reconnect function for PS/2 mode
+ Input: xpad - add PXN V900 support
+ cgroup: Remove duplicates in cgroup v1 tasks file
+ pinctrl: avoid unsafe code pattern in find_pinctrl()
+ usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
+ usb: gadget: ncm: Handle decoding of multiple NTB's in unwrap call
+ x86/cpu: Fix AMD erratum #1485 on Zen4-based CPUs
+ dmaengine: mediatek: Fix deadlock caused by synchronize_irq()
+ powerpc/8xx: Fix pte_access_permitted() for PAGE_NONE
+ powerpc/64e: Fix wrong test in __ptep_test_and_clear_young()
+ ravb: Fix use-after-free issue in ravb_tx_timeout_work()
+ Documentation: sysctl: align cells in second content column
+ usb: hub: Guard against accesses to uninitialized BOS descriptors
+ Bluetooth: hci_event: Ignore NULL link key
+ Bluetooth: Reject connection with the device which has same BD_ADDR
+ Bluetooth: Fix a refcnt underflow problem for hci_conn
+ Bluetooth: vhci: Fix race when opening vhci device
+ Bluetooth: hci_event: Fix coding style
+ Bluetooth: avoid memcmp() out of bounds warning
+ ice: fix over-shifted variable
+ nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
+ regmap: fix NULL deref on lookup
+ KVM: x86: Mask LVTPC when handling a PMI
+ netfilter: nft_payload: fix wrong mac header matching
+ qed: fix LL2 RX buffer allocation
+ xfrm: fix a data-race in xfrm_gen_index()
+ xfrm: interface: use DEV_STATS_INC()
+ net: ipv4: fix return value check in esp_remove_trailer
+ net: ipv6: fix return value check in esp_remove_trailer
+ net: rfkill: gpio: prevent value glitch during probe
+ tcp: fix excessive TLP and RACK timeouts from HZ rounding
+ tcp: tsq: relax tcp_small_queue_check() when rtx queue contains a single skb
+ tun: prevent negative ifindex
+ ipv4: fib: annotate races around nh->nh_saddr_genid and nh->nh_saddr
+ net: usb: smsc95xx: Fix an error code in smsc95xx_reset()
+ i40e: prevent crash on probe if hw registers have invalid values
+ net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve
+ neighbor: tracing: Move pin6 inside CONFIG_IPV6=y section
+ netfilter: nft_set_rbtree: .deactivate fails if element has expired
+ net: pktgen: Fix interface flags printing
+ resource: Add irqresource_disabled()
+ ACPI: Drop acpi_dev_irqresource_disabled()
+ ACPI: resource: Skip IRQ override on Asus Vivobook S5602ZA
+ ACPI: resource: Add Asus ExpertBook B2502 to Asus quirks
+ ACPI: resource: Skip IRQ override on Asus Expertbook B2402CBA
+ ACPI: resource: Skip IRQ override on ASUS ExpertBook B1502CBA
+ ACPI: resource: Skip IRQ override on ASUS ExpertBook B1402CBA
+ ARM: dts: ti: omap: Fix noisy serial with overrun-throttle-ms for mapphone
+ btrfs: return -EUCLEAN for delayed tree ref with a ref count not equals to 1
+ btrfs: initialize start_slot in btrfs_log_prealloc_extents
+ i2c: mux: Avoid potential false error message in i2c_mux_add_adapter
+ overlayfs: set ctime when setting mtime and atime
+ gpio: timberdale: Fix potential deadlock on &tgpio->lock
+ ata: libata-eh: Fix compilation warning in ata_eh_link_report()
+ tracing: relax trace_event_eval_update() execution with cond_resched()
+ HID: holtek: fix slab-out-of-bounds Write in holtek_kbd_input_event
+ Bluetooth: Avoid redundant authentication
+ Bluetooth: hci_core: Fix build warnings
+ wifi: mac80211: allow transmitting EAPOL frames with tainted key
+ wifi: cfg80211: avoid leaking stack data into trace
+ regulator/core: Revert "fix kobject release warning and memory leak in 
regulator_register()"
+ sky2: Make sure there is at least one frag_addr available
+ drm: panel-orientation-quirks: Add quirk for One Mix 2S
+ btrfs: fix some -Wmaybe-uninitialized warnings in ioctl.c
+ HID: multitouch: Add required quirk for Synaptics 0xcd7e device
+ Bluetooth: hci_event: Fix using memcmp when comparing keys
+ mtd: rawnand: qcom: Unmap the right resource upon probe failure
+ mtd: spinand: micron: correct bitmask for ecc status
+ mtd: physmap-core: Restore map_rom fallback
+ mmc: core: sdio: hold retuning if sdio in 1-bit mode
+ mmc: core: Capture correct oemid-bits for eMMC cards
+ Revert "pinctrl: avoid unsafe code pattern in find_pinctrl()"
+ ACPI: irq: Fix incorrect return value in acpi_register_gsi()
+ USB: serial: option: add Telit LE910C4-WWX 0x1035 composition
+ USB: serial: option: add entry for Sierra EM9191 with new firmware
+ USB: serial: option: add Fibocom to DELL custom modem FM101R-GL
+ s390/pci: fix iommu bitmap allocation
+ gpio: vf610: set value before the direction to avoid a glitch
+ ASoC: pxa: fix a memory leak in probe()
+ phy: mapphone-mdm6600: Fix runtime disable on probe
+ phy: mapphone-mdm6600: Fix runtime PM for remove
+ phy: mapphone-mdm6600: Fix pinctrl_pm handling for sleep pins
+ Bluetooth: hci_sock: fix slab oob read in create_monitor_event
+ Bluetooth: hci_sock: Correctly bounds check and pad HCI_MON_NEW_INDEX name
+ xfrm6: fix inet6_dev refcount underflow problem
  Linux 5.4.259
- xfrm6: fix inet6_dev refcount underflow problem
- Bluetooth: hci_sock: Correctly bounds check and pad HCI_MON_NEW_INDEX name
- Bluetooth: hci_sock: fix slab oob read in create_monitor_event
- phy: mapphone-mdm6600: Fix pinctrl_pm handling for sleep pins
- phy: mapphone-mdm6600: Fix runtime PM for remove
- phy: mapphone-mdm6600: Fix runtime disable on probe
- ASoC: pxa: fix a memory leak in probe()
- gpio: vf610: set value before the direction to avoid a glitch
- s390/pci: fix iommu bitmap allocation
- perf: Disallow mis-matched inherited group reads
- USB: serial: option: add Fibocom to DELL custom modem FM101R-GL
- USB: serial: option: add entry for Sierra EM9191 with new firmware
- USB: serial: option: add Telit LE910C4-WWX 0x1035 composition
- ACPI: irq: Fix incorrect return value in acpi_register_gsi()
- Revert "pinctrl: avoid unsafe code pattern in find_pinctrl()"
- mmc: core: Capture correct oemid-bits for eMMC cards
- mmc: core: sdio: hold retuning if sdio in 1-bit mode
- mtd: physmap-core: Restore map_rom fallback
- mtd: spinand: micron: correct bitmask for ecc status
- mtd: rawnand: qcom: Unmap the right resource upon probe failure
- Bluetooth: hci_event: Fix using memcmp when comparing keys
- HID: multitouch: Add required quirk for Synaptics 0xcd7e device
- btrfs: fix some -Wmaybe-uninitialized warnings in ioctl.c
- drm: panel-orientation-quirks: Add quirk for One Mix 2S
- sky2: Make sure there is at least one frag_addr available
- regulator/core: Revert "fix kobject release warning and memory leak in 
regulator_register()"
- wifi: cfg80211: avoid leaking stack data into trace
- wifi: mac80211: allow transmitting EAPOL frames with tainted key
- Bluetooth: hci_core: Fix build warnings
- Bluetooth: Avoid redundant authentication
- HID: holtek: fix slab-out-of-bounds Write in holtek_kbd_input_event
- tracing: relax trace_event_eval_update() execution with cond_resched()
- ata: libata-eh: Fix compilation warning in ata_eh_link_report()
- gpio: timberdale: Fix potential deadlock on &tgpio->lock
- overlayfs: set ctime when setting mtime and atime
- i2c: mux: Avoid potential false error message in i2c_mux_add_adapter
- btrfs: initialize start_slot in btrfs_log_prealloc_extents
- btrfs: return -EUCLEAN for delayed tree ref with a ref count not equals to 1
- ARM: dts: ti: omap: Fix noisy serial with overrun-throttle-ms for mapphone
- ACPI: resource: Skip IRQ override on ASUS ExpertBook B1402CBA
- ACPI: resource: Skip IRQ override on ASUS ExpertBook B1502CBA
- ACPI: resource: Skip IRQ override on Asus Expertbook B2402CBA
- ACPI: resource: Add Asus ExpertBook B2502 to Asus quirks
- ACPI: resource: Skip IRQ override on Asus Vivobook S5602ZA
- ACPI: resource: Add ASUS model S5402ZA to quirks
- ACPI: resource: Skip IRQ override on Asus Vivobook K3402ZA/K3502ZA
- ACPI: resources: Add DMI-based legacy IRQ override quirk
- ACPI: Drop acpi_dev_irqresource_disabled()
- resource: Add irqresource_disabled()
- net: pktgen: Fix interface flags printing
- netfilter: nft_set_rbtree: .deactivate fails if element has expired
- neighbor: tracing: Move pin6 inside CONFIG_IPV6=y section
- net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve
- i40e: prevent crash on probe if hw registers have invalid values
- net: usb: smsc95xx: Fix an error code in smsc95xx_reset()
- ipv4: fib: annotate races around nh->nh_saddr_genid and nh->nh_saddr
- tun: prevent negative ifindex
- tcp: tsq: relax tcp_small_queue_check() when rtx queue contains a single skb
- tcp: fix excessive TLP and RACK timeouts from HZ rounding
- net: rfkill: gpio: prevent value glitch during probe
- net: ipv6: fix return value check in esp_remove_trailer
- net: ipv4: fix return value check in esp_remove_trailer
- xfrm: interface: use DEV_STATS_INC()
- xfrm: fix a data-race in xfrm_gen_index()
- qed: fix LL2 RX buffer allocation
- netfilter: nft_payload: fix wrong mac header matching
- KVM: x86: Mask LVTPC when handling a PMI
- regmap: fix NULL deref on lookup
- nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
- ice: fix over-shifted variable
- Bluetooth: avoid memcmp() out of bounds warning
- Bluetooth: hci_event: Fix coding style
- Bluetooth: vhci: Fix race when opening vhci device
- Bluetooth: Fix a refcnt underflow problem for hci_conn
- Bluetooth: Reject connection with the device which has same BD_ADDR
- Bluetooth: hci_event: Ignore NULL link key
- usb: hub: Guard against accesses to uninitialized BOS descriptors
- Documentation: sysctl: align cells in second content column
- dev_forward_skb: do not scrub skb mark within the same name space
- ravb: Fix use-after-free issue in ravb_tx_timeout_work()
- powerpc/64e: Fix wrong test in __ptep_test_and_clear_young()
- powerpc/8xx: Fix pte_access_permitted() for PAGE_NONE
- dmaengine: mediatek: Fix deadlock caused by synchronize_irq()
- x86/cpu: Fix AMD erratum #1485 on Zen4-based CPUs
- usb: gadget: ncm: Handle decoding of multiple NTB's in unwrap call
- usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
- pinctrl: avoid unsafe code pattern in find_pinctrl()
- cgroup: Remove duplicates in cgroup v1 tasks file
- Input: xpad - add PXN V900 support
- Input: psmouse - fix fast_reconnect function for PS/2 mode
- Input: powermate - fix use-after-free in powermate_config_complete
- ceph: fix incorrect revoked caps assert in ceph_fill_file_size()
- libceph: use kernel_connect()
- mcb: remove is_added flag from mcb_device struct
- iio: pressure: ms5611: ms5611_prom_is_valid false negative bug
- iio: pressure: dps310: Adjust Timeout Settings
- iio: pressure: bmp280: Fix NULL pointer exception
- usb: musb: Modify the "HWVers" register address
- usb: musb: Get the musb_qh poniter after musb_giveback
- usb: dwc3: Soft reset phy on probe for host
- net: usb: dm9601: fix uninitialized variable use in dm9601_mdio_read
- usb: xhci: xhci-ring: Use sysdev for mapping bounce buffer
- dmaengine: stm32-mdma: abort resume if no ongoing transfer
- workqueue: Override implicit ordered attribute in 
workqueue_apply_unbound_cpumask()
- nfc: nci: assert requested protocol is valid
- net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
- ixgbe: fix crash with empty VF macvlan list
- drm/vmwgfx: fix typo of sizeof argument
- xen-netback: use default TX queue size for vifs
- mlxsw: fix mlxsw_sp2_nve_vxlan_learning_set() return type
- ieee802154: ca8210: Fix a potential UAF in ca8210_probe
- ravb: Fix up dma_free_coherent() call in ravb_remove()
- drm/msm/dsi: skip the wait for video mode done if not applicable
- drm: etvnaviv: fix bad backport leading to warning
- net: prevent address rewrite in kernel_bind()
- quota: Fix slow quotaoff
- HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect
- pwm: hibvt: Explicitly set .polarity in .get_state()
- lib/test_meminit: fix off-by-one error in test_pages()
- RDMA/cxgb4: Check skb value for failure to allocate
+ UBUNTU: Upstream stable to v5.4.259

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/2043724

Title:
  Focal update: v5.4.259 upstream stable release

Status in linux package in Ubuntu:
  Confirmed
Status in linux source package in Focal:
  New

Bug description:
  
      SRU Justification

      Impact:
         The upstream process for stable tree updates is quite similar
         in scope to the Ubuntu SRU process, e.g., each patch has to
         demonstrably fix a bug, and each patch is vetted by upstream
         by originating either directly from a mainline/stable Linux tree or
         a minimally backported form of that patch. The following upstream
         stable patches should be included in the Ubuntu kernel:

         v5.4.259 upstream stable release
         from git://git.kernel.org/

  RDMA/cxgb4: Check skb value for failure to allocate
  lib/test_meminit: fix off-by-one error in test_pages()
  pwm: hibvt: Explicitly set .polarity in .get_state()
  HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect
  quota: Fix slow quotaoff
  net: prevent address rewrite in kernel_bind()
  drm: etvnaviv: fix bad backport leading to warning
  drm/msm/dsi: skip the wait for video mode done if not applicable
  ravb: Fix up dma_free_coherent() call in ravb_remove()
  ieee802154: ca8210: Fix a potential UAF in ca8210_probe
  mlxsw: fix mlxsw_sp2_nve_vxlan_learning_set() return type
  xen-netback: use default TX queue size for vifs
  drm/vmwgfx: fix typo of sizeof argument
  ixgbe: fix crash with empty VF macvlan list
  net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
  nfc: nci: assert requested protocol is valid
  workqueue: Override implicit ordered attribute in 
workqueue_apply_unbound_cpumask()
  dmaengine: stm32-mdma: abort resume if no ongoing transfer
  usb: xhci: xhci-ring: Use sysdev for mapping bounce buffer
  net: usb: dm9601: fix uninitialized variable use in dm9601_mdio_read
  usb: dwc3: Soft reset phy on probe for host
  usb: musb: Get the musb_qh poniter after musb_giveback
  usb: musb: Modify the "HWVers" register address
  iio: pressure: bmp280: Fix NULL pointer exception
  iio: pressure: dps310: Adjust Timeout Settings
  iio: pressure: ms5611: ms5611_prom_is_valid false negative bug
  mcb: remove is_added flag from mcb_device struct
  libceph: use kernel_connect()
  ceph: fix incorrect revoked caps assert in ceph_fill_file_size()
  Input: powermate - fix use-after-free in powermate_config_complete
  Input: psmouse - fix fast_reconnect function for PS/2 mode
  Input: xpad - add PXN V900 support
  cgroup: Remove duplicates in cgroup v1 tasks file
  pinctrl: avoid unsafe code pattern in find_pinctrl()
  usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
  usb: gadget: ncm: Handle decoding of multiple NTB's in unwrap call
  x86/cpu: Fix AMD erratum #1485 on Zen4-based CPUs
  dmaengine: mediatek: Fix deadlock caused by synchronize_irq()
  powerpc/8xx: Fix pte_access_permitted() for PAGE_NONE
  powerpc/64e: Fix wrong test in __ptep_test_and_clear_young()
  ravb: Fix use-after-free issue in ravb_tx_timeout_work()
  Documentation: sysctl: align cells in second content column
  usb: hub: Guard against accesses to uninitialized BOS descriptors
  Bluetooth: hci_event: Ignore NULL link key
  Bluetooth: Reject connection with the device which has same BD_ADDR
  Bluetooth: Fix a refcnt underflow problem for hci_conn
  Bluetooth: vhci: Fix race when opening vhci device
  Bluetooth: hci_event: Fix coding style
  Bluetooth: avoid memcmp() out of bounds warning
  ice: fix over-shifted variable
  nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
  regmap: fix NULL deref on lookup
  KVM: x86: Mask LVTPC when handling a PMI
  netfilter: nft_payload: fix wrong mac header matching
  qed: fix LL2 RX buffer allocation
  xfrm: fix a data-race in xfrm_gen_index()
  xfrm: interface: use DEV_STATS_INC()
  net: ipv4: fix return value check in esp_remove_trailer
  net: ipv6: fix return value check in esp_remove_trailer
  net: rfkill: gpio: prevent value glitch during probe
  tcp: fix excessive TLP and RACK timeouts from HZ rounding
  tcp: tsq: relax tcp_small_queue_check() when rtx queue contains a single skb
  tun: prevent negative ifindex
  ipv4: fib: annotate races around nh->nh_saddr_genid and nh->nh_saddr
  net: usb: smsc95xx: Fix an error code in smsc95xx_reset()
  i40e: prevent crash on probe if hw registers have invalid values
  net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve
  neighbor: tracing: Move pin6 inside CONFIG_IPV6=y section
  netfilter: nft_set_rbtree: .deactivate fails if element has expired
  net: pktgen: Fix interface flags printing
  resource: Add irqresource_disabled()
  ACPI: Drop acpi_dev_irqresource_disabled()
  ACPI: resource: Skip IRQ override on Asus Vivobook S5602ZA
  ACPI: resource: Add Asus ExpertBook B2502 to Asus quirks
  ACPI: resource: Skip IRQ override on Asus Expertbook B2402CBA
  ACPI: resource: Skip IRQ override on ASUS ExpertBook B1502CBA
  ACPI: resource: Skip IRQ override on ASUS ExpertBook B1402CBA
  ARM: dts: ti: omap: Fix noisy serial with overrun-throttle-ms for mapphone
  btrfs: return -EUCLEAN for delayed tree ref with a ref count not equals to 1
  btrfs: initialize start_slot in btrfs_log_prealloc_extents
  i2c: mux: Avoid potential false error message in i2c_mux_add_adapter
  overlayfs: set ctime when setting mtime and atime
  gpio: timberdale: Fix potential deadlock on &tgpio->lock
  ata: libata-eh: Fix compilation warning in ata_eh_link_report()
  tracing: relax trace_event_eval_update() execution with cond_resched()
  HID: holtek: fix slab-out-of-bounds Write in holtek_kbd_input_event
  Bluetooth: Avoid redundant authentication
  Bluetooth: hci_core: Fix build warnings
  wifi: mac80211: allow transmitting EAPOL frames with tainted key
  wifi: cfg80211: avoid leaking stack data into trace
  regulator/core: Revert "fix kobject release warning and memory leak in 
regulator_register()"
  sky2: Make sure there is at least one frag_addr available
  drm: panel-orientation-quirks: Add quirk for One Mix 2S
  btrfs: fix some -Wmaybe-uninitialized warnings in ioctl.c
  HID: multitouch: Add required quirk for Synaptics 0xcd7e device
  Bluetooth: hci_event: Fix using memcmp when comparing keys
  mtd: rawnand: qcom: Unmap the right resource upon probe failure
  mtd: spinand: micron: correct bitmask for ecc status
  mtd: physmap-core: Restore map_rom fallback
  mmc: core: sdio: hold retuning if sdio in 1-bit mode
  mmc: core: Capture correct oemid-bits for eMMC cards
  Revert "pinctrl: avoid unsafe code pattern in find_pinctrl()"
  ACPI: irq: Fix incorrect return value in acpi_register_gsi()
  USB: serial: option: add Telit LE910C4-WWX 0x1035 composition
  USB: serial: option: add entry for Sierra EM9191 with new firmware
  USB: serial: option: add Fibocom to DELL custom modem FM101R-GL
  s390/pci: fix iommu bitmap allocation
  gpio: vf610: set value before the direction to avoid a glitch
  ASoC: pxa: fix a memory leak in probe()
  phy: mapphone-mdm6600: Fix runtime disable on probe
  phy: mapphone-mdm6600: Fix runtime PM for remove
  phy: mapphone-mdm6600: Fix pinctrl_pm handling for sleep pins
  Bluetooth: hci_sock: fix slab oob read in create_monitor_event
  Bluetooth: hci_sock: Correctly bounds check and pad HCI_MON_NEW_INDEX name
  xfrm6: fix inet6_dev refcount underflow problem
  Linux 5.4.259
  UBUNTU: Upstream stable to v5.4.259

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2043724/+subscriptions


-- 
Mailing list: https://launchpad.net/~kernel-packages
Post to     : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to