Public bug reported:
SRU Justification Impact: The upstream process for stable tree updates is quite similar in scope to the Ubuntu SRU process, e.g., each patch has to demonstrably fix a bug, and each patch is vetted by upstream by originating either directly from a mainline/stable Linux tree or a minimally backported form of that patch. The following upstream stable patches should be included in the Ubuntu kernel: v5.15.164 upstream stable release from git://git.kernel.org/ gcc-plugins: Rename last_stmt() for GCC 14+ filelock: Remove locks reliably when fcntl/close race is detected ARM: 9324/1: fix get_user() broken with veneer ACPI: processor_idle: Fix invalid comparison with insertion sort for latency bpf: Fix overrunning reservations in ringbuf scsi: core: Fix a use-after-free scsi: core: alua: I/O errors for ALUA state transitions scsi: qedf: Don't process stag work during unload and recovery scsi: qedf: Wait for stag work during unload scsi: qedf: Set qed_slowpath_params to zero before use ACPI: EC: Abort address space access upon error ACPI: EC: Avoid returning AE_OK on errors in address space handler tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs wifi: mac80211: mesh: init nonpeer_pm to active by default in mesh sdata wifi: mac80211: handle tasklet frames before stopping wifi: iwlwifi: mvm: d3: fix WoWLAN command version lookup wifi: iwlwifi: mvm: Handle BIGTK cipher in kek_kck cmd wifi: iwlwifi: mvm: properly set 6 GHz channel direct probe option wifi: mac80211: fix UBSAN noise in ieee80211_prep_hw_scan() selftests/openat2: Fix build warnings on ppc64 Input: silead - Always support 10 fingers net: ipv6: rpl_iptunnel: block BH in rpl_output() and rpl_input() ila: block BH in ila_output() arm64: armv8_deprecated: Fix warning in isndep cpuhp starting process null_blk: fix validation of block size kconfig: gconf: give a proper initial state to the Save button kconfig: remove wrong expr_trans_bool() fs/file: fix the check in find_next_fd() mei: demote client disconnect warning on suspend to debug nvme: avoid double free special payload wifi: cfg80211: wext: add extra SIOCSIWSCAN data check KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group() drm/vmwgfx: Fix missing HYPERVISOR_GUEST dependency ALSA: hda/realtek: Add more codec ID to no shutup pins list mips: fix compat_sys_lseek syscall Input: elantech - fix touchpad state on resume for Lenovo N24 Input: i8042 - add Ayaneo Kun to i8042 quirk table bytcr_rt5640 : inverse jack detect for Archos 101 cesium ALSA: dmaengine: Synchronize dma channel after drop() ASoC: ti: davinci-mcasp: Set min period size using FIFO config ASoC: ti: omap-hdmi: Fix too long driver name can: kvaser_usb: fix return value for hif_usb_send_regout s390/sclp: Fix sclp_init() cleanup on failure platform/x86: wireless-hotkey: Add support for LG Airplane Button platform/x86: lg-laptop: Remove LGEX0815 hotkey handling platform/x86: lg-laptop: Change ACPI device id platform/x86: lg-laptop: Use ACPI device handle when evaluating WMAB/WMBB btrfs: qgroup: fix quota root leak after quota disable failure ALSA: hda/relatek: Enable Mute LED on HP Laptop 15-gw0xxx ALSA: dmaengine_pcm: terminate dmaengine before synchronize net: usb: qmi_wwan: add Telit FN912 compositions net: mac802154: Fix racy device stats updates by DEV_STATS_INC() and DEV_STATS_ADD() powerpc/pseries: Whitelist dtl slub object for copying to userspace powerpc/eeh: avoid possible crash when edev->pdev changes scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed Bluetooth: hci_core: cancel all works upon hci_unregister_dev() drm/radeon: check bo_va->bo is non-NULL before using it fs: better handle deep ancestor chains in is_subdir() riscv: stacktrace: fix usage of ftrace_graph_ret_addr() spi: imx: Don't expect DMA for i.MX{25,35,50,51,53} cspi devices selftests/vDSO: fix clang build errors and warnings hfsplus: fix uninit-value in copy_name spi: mux: set ctlr->bits_per_word_mask tracing: Define the is_signed_type() macro once minmax: sanity check constant bounds when clamping minmax: clamp more efficiently by avoiding extra comparison minmax: fix header inclusions minmax: allow min()/max()/clamp() if the arguments have the same signedness. minmax: allow comparisons of 'int' against 'unsigned char/short' minmax: relax check to allow comparison between unsigned arguments and signed constants mm/damon/core: merge regions aggressively when max_nr_regions is unmet wifi: mac80211: disable softirqs for queued frame handling drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq() samples: Add fs error monitoring example samples: Make fs-monitor depend on libc and headers docs: Fix formatting of literal sections in fanotify docs Add gitignore file for samples/fanotify/ subdirectory net: relax socket state check at accept time. ocfs2: add bounds checking to ocfs2_check_dir_entry() jfs: don't walk off the end of ealist fs/ntfs3: Validate ff offset ALSA: hda/realtek: Enable headset mic on Positivo SU C1400 ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy Book Pro 360 arm64: dts: qcom: msm8996: Disable SS instance in Parkmode for USB arm64: dts: qcom: sdm630: Disable SS instance in Parkmode for USB ALSA: pcm_dmaengine: Don't synchronize DMA channel when DMA is paused filelock: Fix fcntl/close race recovery compat path wifi: rt2x00: use explicitly signed or unsigned types tun: add missing verification for short frame tap: add missing verification for short frame Linux 5.15.164 UBUNTU: Upstream stable to v5.15.164 ** Affects: linux (Ubuntu) Importance: Undecided Status: Invalid ** Affects: linux (Ubuntu Jammy) Importance: Medium Assignee: Manuel Diewald (diewald) Status: In Progress ** Tags: kernel-stable-tracking-bug ** Changed in: linux (Ubuntu) Status: New => Confirmed ** Tags added: kernel-stable-tracking-bug ** Also affects: linux (Ubuntu Jammy) Importance: Undecided Status: New ** Changed in: linux (Ubuntu) Status: Confirmed => Invalid ** Changed in: linux (Ubuntu Jammy) Importance: Undecided => Medium ** Changed in: linux (Ubuntu Jammy) Status: New => In Progress ** Changed in: linux (Ubuntu Jammy) Assignee: (unassigned) => Manuel Diewald (diewald) ** Description changed: SRU Justification Impact: The upstream process for stable tree updates is quite similar in scope to the Ubuntu SRU process, e.g., each patch has to demonstrably fix a bug, and each patch is vetted by upstream by originating either directly from a mainline/stable Linux tree or a minimally backported form of that patch. The following upstream stable patches should be included in the Ubuntu kernel: v5.15.164 upstream stable release from git://git.kernel.org/ - + gcc-plugins: Rename last_stmt() for GCC 14+ + filelock: Remove locks reliably when fcntl/close race is detected + ARM: 9324/1: fix get_user() broken with veneer + ACPI: processor_idle: Fix invalid comparison with insertion sort for latency + bpf: Fix overrunning reservations in ringbuf + scsi: core: Fix a use-after-free + scsi: core: alua: I/O errors for ALUA state transitions + scsi: qedf: Don't process stag work during unload and recovery + scsi: qedf: Wait for stag work during unload + scsi: qedf: Set qed_slowpath_params to zero before use + ACPI: EC: Abort address space access upon error + ACPI: EC: Avoid returning AE_OK on errors in address space handler + tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs + wifi: mac80211: mesh: init nonpeer_pm to active by default in mesh sdata + wifi: mac80211: handle tasklet frames before stopping + wifi: iwlwifi: mvm: d3: fix WoWLAN command version lookup + wifi: iwlwifi: mvm: Handle BIGTK cipher in kek_kck cmd + wifi: iwlwifi: mvm: properly set 6 GHz channel direct probe option + wifi: mac80211: fix UBSAN noise in ieee80211_prep_hw_scan() + selftests/openat2: Fix build warnings on ppc64 + Input: silead - Always support 10 fingers + net: ipv6: rpl_iptunnel: block BH in rpl_output() and rpl_input() + ila: block BH in ila_output() + arm64: armv8_deprecated: Fix warning in isndep cpuhp starting process + null_blk: fix validation of block size + kconfig: gconf: give a proper initial state to the Save button + kconfig: remove wrong expr_trans_bool() + fs/file: fix the check in find_next_fd() + mei: demote client disconnect warning on suspend to debug + nvme: avoid double free special payload + wifi: cfg80211: wext: add extra SIOCSIWSCAN data check + KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group() + drm/vmwgfx: Fix missing HYPERVISOR_GUEST dependency + ALSA: hda/realtek: Add more codec ID to no shutup pins list + mips: fix compat_sys_lseek syscall + Input: elantech - fix touchpad state on resume for Lenovo N24 + Input: i8042 - add Ayaneo Kun to i8042 quirk table + bytcr_rt5640 : inverse jack detect for Archos 101 cesium + ALSA: dmaengine: Synchronize dma channel after drop() + ASoC: ti: davinci-mcasp: Set min period size using FIFO config + ASoC: ti: omap-hdmi: Fix too long driver name + can: kvaser_usb: fix return value for hif_usb_send_regout + s390/sclp: Fix sclp_init() cleanup on failure + platform/x86: wireless-hotkey: Add support for LG Airplane Button + platform/x86: lg-laptop: Remove LGEX0815 hotkey handling + platform/x86: lg-laptop: Change ACPI device id + platform/x86: lg-laptop: Use ACPI device handle when evaluating WMAB/WMBB + btrfs: qgroup: fix quota root leak after quota disable failure + ALSA: hda/relatek: Enable Mute LED on HP Laptop 15-gw0xxx + ALSA: dmaengine_pcm: terminate dmaengine before synchronize + net: usb: qmi_wwan: add Telit FN912 compositions + net: mac802154: Fix racy device stats updates by DEV_STATS_INC() and DEV_STATS_ADD() + powerpc/pseries: Whitelist dtl slub object for copying to userspace + powerpc/eeh: avoid possible crash when edev->pdev changes + scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed + Bluetooth: hci_core: cancel all works upon hci_unregister_dev() + drm/radeon: check bo_va->bo is non-NULL before using it + fs: better handle deep ancestor chains in is_subdir() + riscv: stacktrace: fix usage of ftrace_graph_ret_addr() + spi: imx: Don't expect DMA for i.MX{25,35,50,51,53} cspi devices + selftests/vDSO: fix clang build errors and warnings + hfsplus: fix uninit-value in copy_name + spi: mux: set ctlr->bits_per_word_mask + tracing: Define the is_signed_type() macro once + minmax: sanity check constant bounds when clamping + minmax: clamp more efficiently by avoiding extra comparison + minmax: fix header inclusions + minmax: allow min()/max()/clamp() if the arguments have the same signedness. + minmax: allow comparisons of 'int' against 'unsigned char/short' + minmax: relax check to allow comparison between unsigned arguments and signed constants + mm/damon/core: merge regions aggressively when max_nr_regions is unmet + wifi: mac80211: disable softirqs for queued frame handling + drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq() + samples: Add fs error monitoring example + samples: Make fs-monitor depend on libc and headers + docs: Fix formatting of literal sections in fanotify docs + Add gitignore file for samples/fanotify/ subdirectory + net: relax socket state check at accept time. + ocfs2: add bounds checking to ocfs2_check_dir_entry() + jfs: don't walk off the end of ealist + fs/ntfs3: Validate ff offset + ALSA: hda/realtek: Enable headset mic on Positivo SU C1400 + ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy Book Pro 360 + arm64: dts: qcom: msm8996: Disable SS instance in Parkmode for USB + arm64: dts: qcom: sdm630: Disable SS instance in Parkmode for USB + ALSA: pcm_dmaengine: Don't synchronize DMA channel when DMA is paused + filelock: Fix fcntl/close race recovery compat path + wifi: rt2x00: use explicitly signed or unsigned types + tun: add missing verification for short frame + tap: add missing verification for short frame Linux 5.15.164 - tap: add missing verification for short frame - tun: add missing verification for short frame - wifi: rt2x00: use explicitly signed or unsigned types - filelock: Fix fcntl/close race recovery compat path - ALSA: pcm_dmaengine: Don't synchronize DMA channel when DMA is paused - arm64: dts: qcom: sdm630: Disable SS instance in Parkmode for USB - arm64: dts: qcom: msm8996: Disable SS instance in Parkmode for USB - ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy Book Pro 360 - ALSA: hda/realtek: Enable headset mic on Positivo SU C1400 - fs/ntfs3: Validate ff offset - jfs: don't walk off the end of ealist - ocfs2: add bounds checking to ocfs2_check_dir_entry() - net: relax socket state check at accept time. - Add gitignore file for samples/fanotify/ subdirectory - docs: Fix formatting of literal sections in fanotify docs - samples: Make fs-monitor depend on libc and headers - samples: Add fs error monitoring example - drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq() - wifi: mac80211: disable softirqs for queued frame handling - mm/damon/core: merge regions aggressively when max_nr_regions is unmet - minmax: relax check to allow comparison between unsigned arguments and signed constants - minmax: allow comparisons of 'int' against 'unsigned char/short' - minmax: allow min()/max()/clamp() if the arguments have the same signedness. - minmax: fix header inclusions - minmax: clamp more efficiently by avoiding extra comparison - minmax: sanity check constant bounds when clamping - tracing: Define the is_signed_type() macro once - spi: mux: set ctlr->bits_per_word_mask - hfsplus: fix uninit-value in copy_name - selftests/vDSO: fix clang build errors and warnings - spi: imx: Don't expect DMA for i.MX{25,35,50,51,53} cspi devices - riscv: stacktrace: fix usage of ftrace_graph_ret_addr() - fs: better handle deep ancestor chains in is_subdir() - drm/radeon: check bo_va->bo is non-NULL before using it - Bluetooth: hci_core: cancel all works upon hci_unregister_dev() - scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed - powerpc/eeh: avoid possible crash when edev->pdev changes - powerpc/pseries: Whitelist dtl slub object for copying to userspace - net: mac802154: Fix racy device stats updates by DEV_STATS_INC() and DEV_STATS_ADD() - net: usb: qmi_wwan: add Telit FN912 compositions - ALSA: dmaengine_pcm: terminate dmaengine before synchronize - ALSA: hda/relatek: Enable Mute LED on HP Laptop 15-gw0xxx - btrfs: qgroup: fix quota root leak after quota disable failure - platform/x86: lg-laptop: Use ACPI device handle when evaluating WMAB/WMBB - platform/x86: lg-laptop: Change ACPI device id - platform/x86: lg-laptop: Remove LGEX0815 hotkey handling - platform/x86: wireless-hotkey: Add support for LG Airplane Button - s390/sclp: Fix sclp_init() cleanup on failure - can: kvaser_usb: fix return value for hif_usb_send_regout - ASoC: ti: omap-hdmi: Fix too long driver name - ASoC: ti: davinci-mcasp: Set min period size using FIFO config - ALSA: dmaengine: Synchronize dma channel after drop() - bytcr_rt5640 : inverse jack detect for Archos 101 cesium - Input: i8042 - add Ayaneo Kun to i8042 quirk table - Input: elantech - fix touchpad state on resume for Lenovo N24 - mips: fix compat_sys_lseek syscall - ALSA: hda/realtek: Add more codec ID to no shutup pins list - drm/vmwgfx: Fix missing HYPERVISOR_GUEST dependency - KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group() - wifi: cfg80211: wext: add extra SIOCSIWSCAN data check - nvme: avoid double free special payload - mei: demote client disconnect warning on suspend to debug - fs/file: fix the check in find_next_fd() - kconfig: remove wrong expr_trans_bool() - kconfig: gconf: give a proper initial state to the Save button - null_blk: fix validation of block size - arm64: armv8_deprecated: Fix warning in isndep cpuhp starting process - ila: block BH in ila_output() - net: ipv6: rpl_iptunnel: block BH in rpl_output() and rpl_input() - Input: silead - Always support 10 fingers - selftests/openat2: Fix build warnings on ppc64 - wifi: mac80211: fix UBSAN noise in ieee80211_prep_hw_scan() - wifi: iwlwifi: mvm: properly set 6 GHz channel direct probe option - wifi: iwlwifi: mvm: Handle BIGTK cipher in kek_kck cmd - wifi: iwlwifi: mvm: d3: fix WoWLAN command version lookup - wifi: mac80211: handle tasklet frames before stopping - wifi: mac80211: mesh: init nonpeer_pm to active by default in mesh sdata - tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs - ACPI: EC: Avoid returning AE_OK on errors in address space handler - ACPI: EC: Abort address space access upon error - scsi: qedf: Set qed_slowpath_params to zero before use - scsi: qedf: Wait for stag work during unload - scsi: qedf: Don't process stag work during unload and recovery - scsi: core: alua: I/O errors for ALUA state transitions - scsi: core: Fix a use-after-free - bpf: Fix overrunning reservations in ringbuf - ACPI: processor_idle: Fix invalid comparison with insertion sort for latency - ARM: 9324/1: fix get_user() broken with veneer - filelock: Remove locks reliably when fcntl/close race is detected - gcc-plugins: Rename last_stmt() for GCC 14+ + UBUNTU: Upstream stable to v5.15.164 -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/2076100 Title: Jammy update: v5.15.164 upstream stable release Status in linux package in Ubuntu: Invalid Status in linux source package in Jammy: In Progress Bug description: SRU Justification Impact: The upstream process for stable tree updates is quite similar in scope to the Ubuntu SRU process, e.g., each patch has to demonstrably fix a bug, and each patch is vetted by upstream by originating either directly from a mainline/stable Linux tree or a minimally backported form of that patch. The following upstream stable patches should be included in the Ubuntu kernel: v5.15.164 upstream stable release from git://git.kernel.org/ gcc-plugins: Rename last_stmt() for GCC 14+ filelock: Remove locks reliably when fcntl/close race is detected ARM: 9324/1: fix get_user() broken with veneer ACPI: processor_idle: Fix invalid comparison with insertion sort for latency bpf: Fix overrunning reservations in ringbuf scsi: core: Fix a use-after-free scsi: core: alua: I/O errors for ALUA state transitions scsi: qedf: Don't process stag work during unload and recovery scsi: qedf: Wait for stag work during unload scsi: qedf: Set qed_slowpath_params to zero before use ACPI: EC: Abort address space access upon error ACPI: EC: Avoid returning AE_OK on errors in address space handler tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs wifi: mac80211: mesh: init nonpeer_pm to active by default in mesh sdata wifi: mac80211: handle tasklet frames before stopping wifi: iwlwifi: mvm: d3: fix WoWLAN command version lookup wifi: iwlwifi: mvm: Handle BIGTK cipher in kek_kck cmd wifi: iwlwifi: mvm: properly set 6 GHz channel direct probe option wifi: mac80211: fix UBSAN noise in ieee80211_prep_hw_scan() selftests/openat2: Fix build warnings on ppc64 Input: silead - Always support 10 fingers net: ipv6: rpl_iptunnel: block BH in rpl_output() and rpl_input() ila: block BH in ila_output() arm64: armv8_deprecated: Fix warning in isndep cpuhp starting process null_blk: fix validation of block size kconfig: gconf: give a proper initial state to the Save button kconfig: remove wrong expr_trans_bool() fs/file: fix the check in find_next_fd() mei: demote client disconnect warning on suspend to debug nvme: avoid double free special payload wifi: cfg80211: wext: add extra SIOCSIWSCAN data check KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group() drm/vmwgfx: Fix missing HYPERVISOR_GUEST dependency ALSA: hda/realtek: Add more codec ID to no shutup pins list mips: fix compat_sys_lseek syscall Input: elantech - fix touchpad state on resume for Lenovo N24 Input: i8042 - add Ayaneo Kun to i8042 quirk table bytcr_rt5640 : inverse jack detect for Archos 101 cesium ALSA: dmaengine: Synchronize dma channel after drop() ASoC: ti: davinci-mcasp: Set min period size using FIFO config ASoC: ti: omap-hdmi: Fix too long driver name can: kvaser_usb: fix return value for hif_usb_send_regout s390/sclp: Fix sclp_init() cleanup on failure platform/x86: wireless-hotkey: Add support for LG Airplane Button platform/x86: lg-laptop: Remove LGEX0815 hotkey handling platform/x86: lg-laptop: Change ACPI device id platform/x86: lg-laptop: Use ACPI device handle when evaluating WMAB/WMBB btrfs: qgroup: fix quota root leak after quota disable failure ALSA: hda/relatek: Enable Mute LED on HP Laptop 15-gw0xxx ALSA: dmaengine_pcm: terminate dmaengine before synchronize net: usb: qmi_wwan: add Telit FN912 compositions net: mac802154: Fix racy device stats updates by DEV_STATS_INC() and DEV_STATS_ADD() powerpc/pseries: Whitelist dtl slub object for copying to userspace powerpc/eeh: avoid possible crash when edev->pdev changes scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed Bluetooth: hci_core: cancel all works upon hci_unregister_dev() drm/radeon: check bo_va->bo is non-NULL before using it fs: better handle deep ancestor chains in is_subdir() riscv: stacktrace: fix usage of ftrace_graph_ret_addr() spi: imx: Don't expect DMA for i.MX{25,35,50,51,53} cspi devices selftests/vDSO: fix clang build errors and warnings hfsplus: fix uninit-value in copy_name spi: mux: set ctlr->bits_per_word_mask tracing: Define the is_signed_type() macro once minmax: sanity check constant bounds when clamping minmax: clamp more efficiently by avoiding extra comparison minmax: fix header inclusions minmax: allow min()/max()/clamp() if the arguments have the same signedness. minmax: allow comparisons of 'int' against 'unsigned char/short' minmax: relax check to allow comparison between unsigned arguments and signed constants mm/damon/core: merge regions aggressively when max_nr_regions is unmet wifi: mac80211: disable softirqs for queued frame handling drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq() samples: Add fs error monitoring example samples: Make fs-monitor depend on libc and headers docs: Fix formatting of literal sections in fanotify docs Add gitignore file for samples/fanotify/ subdirectory net: relax socket state check at accept time. ocfs2: add bounds checking to ocfs2_check_dir_entry() jfs: don't walk off the end of ealist fs/ntfs3: Validate ff offset ALSA: hda/realtek: Enable headset mic on Positivo SU C1400 ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy Book Pro 360 arm64: dts: qcom: msm8996: Disable SS instance in Parkmode for USB arm64: dts: qcom: sdm630: Disable SS instance in Parkmode for USB ALSA: pcm_dmaengine: Don't synchronize DMA channel when DMA is paused filelock: Fix fcntl/close race recovery compat path wifi: rt2x00: use explicitly signed or unsigned types tun: add missing verification for short frame tap: add missing verification for short frame Linux 5.15.164 UBUNTU: Upstream stable to v5.15.164 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2076100/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp