Public bug reported:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
v5.4.284 upstream stable release
from git://git.kernel.org/
drm: panel-orientation-quirks: Add quirk for OrangePi Neo
i2c: Fix conditional for substituting empty ACPI functions
net: usb: qmi_wwan: add MeiG Smart SRM825L
drm/amdgpu: Fix uninitialized variable warning in amdgpu_afmt_acr
drm/amdgpu: fix overflowed array index read warning
drm/amd/display: Check gpio_id before used as array index
drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]
drm/amd/display: Fix Coverity INTEGER_OVERFLOW within dal_gpio_service_create
drm/amdgpu: fix ucode out-of-bounds read warning
drm/amdgpu: fix mc_data out-of-bounds read warning
drm/amdkfd: Reconcile the definition and use of oem_id in struct
kfd_topology_device
apparmor: fix possible NULL pointer dereference
ionic: fix potential irq name truncation
usbip: Don't submit special requests twice
usb: typec: ucsi: Fix null pointer dereference in trace
smack: tcp: ipv4, fix incorrect labeling
wifi: cfg80211: make hash table duplicates more survivable
drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
media: uvcvideo: Enforce alignment of frame and interval
block: initialize integrity buffer to zero before writing it to media
net: set SOCK_RCU_FREE before inserting socket into hashtable
virtio_net: Fix napi_skb_cache_put warning
udf: Limit file size to 4TB
i2c: Use IS_REACHABLE() for substituting empty ACPI functions
sch/netem: fix use after free in netem_dequeue
ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
ALSA: hda/conexant: Add pincfg quirk to enable top speakers on Sirius devices
ata: libata: Fix memory leak for error path in ata_host_alloc()
irqchip/gic-v2m: Fix refcount leak in gicv2m_of_init()
mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K
mmc: sdhci-of-aspeed: fix module autoloading
fuse: update stats for pages in dropped aux writeback list
fuse: use unsigned type for getxattr/listxattr size truncation
reset: hi6220: Add support for AO reset controller
clk: hi6220: use CLK_OF_DECLARE_DRIVER
clk: qcom: clk-alpha-pll: Fix the pll post div mask
clk: qcom: clk-alpha-pll: Fix the trion pll postdiv set rate API
ila: call nf_unregister_net_hooks() sooner
sched: sch_cake: fix bulk flow accounting logic for host fairness
nilfs2: fix missing cleanup on rollforward recovery error
nilfs2: fix state management in error path of log writing function
ALSA: hda: Add input value sanity checks to HDMI channel map controls
smack: unix sockets: fix accept()ed socket label
irqchip/armada-370-xp: Do not allow mapping IRQ 0 and 1
af_unix: Remove put_pid()/put_cred() in copy_peercred().
netfilter: nf_conncount: fix wrong variable type
udf: Avoid excessive partition lengths
wifi: brcmsmac: advertise MFP_CAPABLE to enable WPA3
usb: uas: set host status byte on data completion error
PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
media: qcom: camss: Add check for v4l2_fwnode_endpoint_parse
pcmcia: Use resource_size function on resource object
can: bcm: Remove proc entry when dev is unregistered.
igb: Fix not clearing TimeSync interrupts for 82580
platform/x86: dell-smbios: Fix error path in dell_smbios_init()
tcp_bpf: fix return value of tcp_bpf_sendmsg()
cx82310_eth: re-enable ethernet mode after router reboot
drivers/net/usb: Remove all strcpy() uses
net: usb: don't write directly to netdev->dev_addr
usbnet: modern method to get random MAC
net: bridge: fdb: convert is_local to bitops
net: bridge: fdb: convert is_static to bitops
net: bridge: fdb: convert is_sticky to bitops
net: bridge: fdb: convert added_by_user to bitops
net: bridge: fdb: convert added_by_external_learn to use bitops
net: bridge: br_fdb_external_learn_add(): always set EXT_LEARN
net: dsa: vsc73xx: fix possible subblocks range of CAPT block
ASoC: topology: Properly initialize soc_enum values
dm init: Handle minors larger than 255
iommu/vt-d: Handle volatile descriptor status read
cgroup: Protect css->cgroup write under css_set_lock
um: line: always fill *error_out in setup_one_line()
devres: Initialize an uninitialized struct member
pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
hwmon: (adc128d818) Fix underflows seen when writing limit attributes
hwmon: (lm95234) Fix underflows seen when writing limit attributes
hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
libbpf: Add NULL checks to bpf_object__{prev_map,next_map}
wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
smp: Add missing destroy_work_on_stack() call in smp_call_on_cpu()
btrfs: replace BUG_ON with ASSERT in walk_down_proc()
btrfs: clean up our handling of refs == 0 in snapshot delete
PCI: Add missing bridge lock to pci_bus_lock()
btrfs: initialize location to fix -Wmaybe-uninitialized in btrfs_lookup_dentry()
HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
Input: uinput - reject requests with unreasonable number of slots
usbnet: ipheth: race between ipheth_close and error handling
Squashfs: sanity check symbolic link size
of/irq: Prevent device address out-of-bounds read in interrupt map walk
lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
ata: pata_macio: Use WARN instead of BUG
NFSv4: Add missing rescheduling points in nfs_client_return_marked_delegations
staging: iio: frequency: ad9834: Validate frequency parameter value
iio: buffer-dmaengine: fix releasing dma channel on error
iio: fix scale application in iio_convert_raw_to_processed_unlocked
binder: fix UAF caused by offsets overwrite
nvmem: Fix return type of devm_nvmem_device_get() in kerneldoc
uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
Drivers: hv: vmbus: Fix rescind handling in uio_hv_generic
VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
clocksource/drivers/imx-tpm: Fix return -ETIME when delta exceeds INT_MAX
clocksource/drivers/imx-tpm: Fix next event not taking effect sometime
clocksource/drivers/timer-of: Remove percpu irq related code
uprobes: Use kzalloc to allocate xol area
ring-buffer: Rename ring_buffer_read() to read_buffer_iter_advance()
tracing: Avoid possible softlockup in tracing_iter_reset()
nilfs2: replace snprintf in show functions with sysfs_emit
nilfs2: protect references to superblock parameters exposed in sysfs
ACPI: processor: Return an error if acpi_processor_get_info() fails in
processor_add()
ACPI: processor: Fix memory leaks in error paths of processor_add()
arm64: acpi: Move get_cpu_for_acpi_id() to a header
arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
nvmet-tcp: fix kernel crash if commands allocation fails
drm/i915/fence: Mark debug_fence_init_onstack() with __maybe_unused
drm/i915/fence: Mark debug_fence_free() with __maybe_unused
rtmutex: Drop rt_mutex::wait_lock before scheduling
net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
cx82310_eth: fix error return code in cx82310_bind()
Linux 5.4.284
UBUNTU: Upstream stable to v5.4.284
** Affects: linux (Ubuntu)
Importance: Undecided
Status: Invalid
** Affects: linux (Ubuntu Focal)
Importance: Medium
Assignee: Koichiro Den (koichiroden)
Status: In Progress
** Tags: kernel-stable-tracking-bug
** Changed in: linux (Ubuntu)
Status: New => Confirmed
** Tags added: kernel-stable-tracking-bug
** Also affects: linux (Ubuntu Focal)
Importance: Undecided
Status: New
** Changed in: linux (Ubuntu)
Status: Confirmed => Invalid
** Changed in: linux (Ubuntu Focal)
Importance: Undecided => Medium
** Changed in: linux (Ubuntu Focal)
Status: New => In Progress
** Changed in: linux (Ubuntu Focal)
Assignee: (unassigned) => Koichiro Den (koichiroden)
** Description changed:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
v5.4.284 upstream stable release
from git://git.kernel.org/
-
+ drm: panel-orientation-quirks: Add quirk for OrangePi Neo
+ i2c: Fix conditional for substituting empty ACPI functions
+ net: usb: qmi_wwan: add MeiG Smart SRM825L
+ drm/amdgpu: Fix uninitialized variable warning in amdgpu_afmt_acr
+ drm/amdgpu: fix overflowed array index read warning
+ drm/amd/display: Check gpio_id before used as array index
+ drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
+ drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]
+ drm/amd/display: Fix Coverity INTEGER_OVERFLOW within dal_gpio_service_create
+ drm/amdgpu: fix ucode out-of-bounds read warning
+ drm/amdgpu: fix mc_data out-of-bounds read warning
+ drm/amdkfd: Reconcile the definition and use of oem_id in struct
kfd_topology_device
+ apparmor: fix possible NULL pointer dereference
+ ionic: fix potential irq name truncation
+ usbip: Don't submit special requests twice
+ usb: typec: ucsi: Fix null pointer dereference in trace
+ smack: tcp: ipv4, fix incorrect labeling
+ wifi: cfg80211: make hash table duplicates more survivable
+ drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
+ media: uvcvideo: Enforce alignment of frame and interval
+ block: initialize integrity buffer to zero before writing it to media
+ net: set SOCK_RCU_FREE before inserting socket into hashtable
+ virtio_net: Fix napi_skb_cache_put warning
+ udf: Limit file size to 4TB
+ i2c: Use IS_REACHABLE() for substituting empty ACPI functions
+ sch/netem: fix use after free in netem_dequeue
+ ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
+ ALSA: hda/conexant: Add pincfg quirk to enable top speakers on Sirius devices
+ ata: libata: Fix memory leak for error path in ata_host_alloc()
+ irqchip/gic-v2m: Fix refcount leak in gicv2m_of_init()
+ mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K
+ mmc: sdhci-of-aspeed: fix module autoloading
+ fuse: update stats for pages in dropped aux writeback list
+ fuse: use unsigned type for getxattr/listxattr size truncation
+ reset: hi6220: Add support for AO reset controller
+ clk: hi6220: use CLK_OF_DECLARE_DRIVER
+ clk: qcom: clk-alpha-pll: Fix the pll post div mask
+ clk: qcom: clk-alpha-pll: Fix the trion pll postdiv set rate API
+ ila: call nf_unregister_net_hooks() sooner
+ sched: sch_cake: fix bulk flow accounting logic for host fairness
+ nilfs2: fix missing cleanup on rollforward recovery error
+ nilfs2: fix state management in error path of log writing function
+ ALSA: hda: Add input value sanity checks to HDMI channel map controls
+ smack: unix sockets: fix accept()ed socket label
+ irqchip/armada-370-xp: Do not allow mapping IRQ 0 and 1
+ af_unix: Remove put_pid()/put_cred() in copy_peercred().
+ netfilter: nf_conncount: fix wrong variable type
+ udf: Avoid excessive partition lengths
+ wifi: brcmsmac: advertise MFP_CAPABLE to enable WPA3
+ usb: uas: set host status byte on data completion error
+ PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
+ media: qcom: camss: Add check for v4l2_fwnode_endpoint_parse
+ pcmcia: Use resource_size function on resource object
+ can: bcm: Remove proc entry when dev is unregistered.
+ igb: Fix not clearing TimeSync interrupts for 82580
+ platform/x86: dell-smbios: Fix error path in dell_smbios_init()
+ tcp_bpf: fix return value of tcp_bpf_sendmsg()
+ cx82310_eth: re-enable ethernet mode after router reboot
+ drivers/net/usb: Remove all strcpy() uses
+ net: usb: don't write directly to netdev->dev_addr
+ usbnet: modern method to get random MAC
+ net: bridge: fdb: convert is_local to bitops
+ net: bridge: fdb: convert is_static to bitops
+ net: bridge: fdb: convert is_sticky to bitops
+ net: bridge: fdb: convert added_by_user to bitops
+ net: bridge: fdb: convert added_by_external_learn to use bitops
+ net: bridge: br_fdb_external_learn_add(): always set EXT_LEARN
+ net: dsa: vsc73xx: fix possible subblocks range of CAPT block
+ ASoC: topology: Properly initialize soc_enum values
+ dm init: Handle minors larger than 255
+ iommu/vt-d: Handle volatile descriptor status read
+ cgroup: Protect css->cgroup write under css_set_lock
+ um: line: always fill *error_out in setup_one_line()
+ devres: Initialize an uninitialized struct member
+ pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
+ hwmon: (adc128d818) Fix underflows seen when writing limit attributes
+ hwmon: (lm95234) Fix underflows seen when writing limit attributes
+ hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
+ hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
+ libbpf: Add NULL checks to bpf_object__{prev_map,next_map}
+ wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
+ smp: Add missing destroy_work_on_stack() call in smp_call_on_cpu()
+ btrfs: replace BUG_ON with ASSERT in walk_down_proc()
+ btrfs: clean up our handling of refs == 0 in snapshot delete
+ PCI: Add missing bridge lock to pci_bus_lock()
+ btrfs: initialize location to fix -Wmaybe-uninitialized in
btrfs_lookup_dentry()
+ HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
+ Input: uinput - reject requests with unreasonable number of slots
+ usbnet: ipheth: race between ipheth_close and error handling
+ Squashfs: sanity check symbolic link size
+ of/irq: Prevent device address out-of-bounds read in interrupt map walk
+ lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
+ ata: pata_macio: Use WARN instead of BUG
+ NFSv4: Add missing rescheduling points in nfs_client_return_marked_delegations
+ staging: iio: frequency: ad9834: Validate frequency parameter value
+ iio: buffer-dmaengine: fix releasing dma channel on error
+ iio: fix scale application in iio_convert_raw_to_processed_unlocked
+ binder: fix UAF caused by offsets overwrite
+ nvmem: Fix return type of devm_nvmem_device_get() in kerneldoc
+ uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
+ Drivers: hv: vmbus: Fix rescind handling in uio_hv_generic
+ VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
+ clocksource/drivers/imx-tpm: Fix return -ETIME when delta exceeds INT_MAX
+ clocksource/drivers/imx-tpm: Fix next event not taking effect sometime
+ clocksource/drivers/timer-of: Remove percpu irq related code
+ uprobes: Use kzalloc to allocate xol area
+ ring-buffer: Rename ring_buffer_read() to read_buffer_iter_advance()
+ tracing: Avoid possible softlockup in tracing_iter_reset()
+ nilfs2: replace snprintf in show functions with sysfs_emit
+ nilfs2: protect references to superblock parameters exposed in sysfs
+ ACPI: processor: Return an error if acpi_processor_get_info() fails in
processor_add()
+ ACPI: processor: Fix memory leaks in error paths of processor_add()
+ arm64: acpi: Move get_cpu_for_acpi_id() to a header
+ arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
+ nvmet-tcp: fix kernel crash if commands allocation fails
+ drm/i915/fence: Mark debug_fence_init_onstack() with __maybe_unused
+ drm/i915/fence: Mark debug_fence_free() with __maybe_unused
+ rtmutex: Drop rt_mutex::wait_lock before scheduling
+ net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
+ cx82310_eth: fix error return code in cx82310_bind()
Linux 5.4.284
- Revert "parisc: Use irq_enter_rcu() to fix warning at
kernel/context_tracking.c:367"
- cx82310_eth: fix error return code in cx82310_bind()
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
- rtmutex: Drop rt_mutex::wait_lock before scheduling
- drm/i915/fence: Mark debug_fence_free() with __maybe_unused
- drm/i915/fence: Mark debug_fence_init_onstack() with __maybe_unused
- nvmet-tcp: fix kernel crash if commands allocation fails
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- ACPI: processor: Fix memory leaks in error paths of processor_add()
- ACPI: processor: Return an error if acpi_processor_get_info() fails in
processor_add()
- nilfs2: protect references to superblock parameters exposed in sysfs
- nilfs2: replace snprintf in show functions with sysfs_emit
- tracing: Avoid possible softlockup in tracing_iter_reset()
- ring-buffer: Rename ring_buffer_read() to read_buffer_iter_advance()
- uprobes: Use kzalloc to allocate xol area
- clocksource/drivers/timer-of: Remove percpu irq related code
- clocksource/drivers/imx-tpm: Fix next event not taking effect sometime
- clocksource/drivers/imx-tpm: Fix return -ETIME when delta exceeds INT_MAX
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
- Drivers: hv: vmbus: Fix rescind handling in uio_hv_generic
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
- nvmem: Fix return type of devm_nvmem_device_get() in kerneldoc
- binder: fix UAF caused by offsets overwrite
- iio: fix scale application in iio_convert_raw_to_processed_unlocked
- iio: buffer-dmaengine: fix releasing dma channel on error
- staging: iio: frequency: ad9834: Validate frequency parameter value
- NFSv4: Add missing rescheduling points in nfs_client_return_marked_delegations
- ata: pata_macio: Use WARN instead of BUG
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
- Squashfs: sanity check symbolic link size
- usbnet: ipheth: race between ipheth_close and error handling
- Input: uinput - reject requests with unreasonable number of slots
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
- btrfs: initialize location to fix -Wmaybe-uninitialized in
btrfs_lookup_dentry()
- PCI: Add missing bridge lock to pci_bus_lock()
- btrfs: clean up our handling of refs == 0 in snapshot delete
- btrfs: replace BUG_ON with ASSERT in walk_down_proc()
- smp: Add missing destroy_work_on_stack() call in smp_call_on_cpu()
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
- libbpf: Add NULL checks to bpf_object__{prev_map,next_map}
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
- devres: Initialize an uninitialized struct member
- um: line: always fill *error_out in setup_one_line()
- cgroup: Protect css->cgroup write under css_set_lock
- iommu/vt-d: Handle volatile descriptor status read
- dm init: Handle minors larger than 255
- ASoC: topology: Properly initialize soc_enum values
- net: dsa: vsc73xx: fix possible subblocks range of CAPT block
- net: bridge: br_fdb_external_learn_add(): always set EXT_LEARN
- net: bridge: fdb: convert added_by_external_learn to use bitops
- net: bridge: fdb: convert added_by_user to bitops
- net: bridge: fdb: convert is_sticky to bitops
- net: bridge: fdb: convert is_static to bitops
- net: bridge: fdb: convert is_local to bitops
- usbnet: modern method to get random MAC
- net: usb: don't write directly to netdev->dev_addr
- drivers/net/usb: Remove all strcpy() uses
- cx82310_eth: re-enable ethernet mode after router reboot
- tcp_bpf: fix return value of tcp_bpf_sendmsg()
- platform/x86: dell-smbios: Fix error path in dell_smbios_init()
- igb: Fix not clearing TimeSync interrupts for 82580
- can: bcm: Remove proc entry when dev is unregistered.
- pcmcia: Use resource_size function on resource object
- media: qcom: camss: Add check for v4l2_fwnode_endpoint_parse
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
- usb: uas: set host status byte on data completion error
- wifi: brcmsmac: advertise MFP_CAPABLE to enable WPA3
- udf: Avoid excessive partition lengths
- netfilter: nf_conncount: fix wrong variable type
- af_unix: Remove put_pid()/put_cred() in copy_peercred().
- irqchip/armada-370-xp: Do not allow mapping IRQ 0 and 1
- smack: unix sockets: fix accept()ed socket label
- ALSA: hda: Add input value sanity checks to HDMI channel map controls
- nilfs2: fix state management in error path of log writing function
- nilfs2: fix missing cleanup on rollforward recovery error
- sched: sch_cake: fix bulk flow accounting logic for host fairness
- ila: call nf_unregister_net_hooks() sooner
- clk: qcom: clk-alpha-pll: Fix the trion pll postdiv set rate API
- clk: qcom: clk-alpha-pll: Fix the pll post div mask
- clk: hi6220: use CLK_OF_DECLARE_DRIVER
- reset: hi6220: Add support for AO reset controller
- fuse: use unsigned type for getxattr/listxattr size truncation
- fuse: update stats for pages in dropped aux writeback list
- mmc: sdhci-of-aspeed: fix module autoloading
- mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K
- irqchip/gic-v2m: Fix refcount leak in gicv2m_of_init()
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- ALSA: hda/conexant: Add pincfg quirk to enable top speakers on Sirius devices
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
- sch/netem: fix use after free in netem_dequeue
- i2c: Use IS_REACHABLE() for substituting empty ACPI functions
- udf: Limit file size to 4TB
- virtio_net: Fix napi_skb_cache_put warning
- net: set SOCK_RCU_FREE before inserting socket into hashtable
- block: initialize integrity buffer to zero before writing it to media
- media: uvcvideo: Enforce alignment of frame and interval
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- wifi: cfg80211: make hash table duplicates more survivable
- smack: tcp: ipv4, fix incorrect labeling
- usb: typec: ucsi: Fix null pointer dereference in trace
- usbip: Don't submit special requests twice
- ionic: fix potential irq name truncation
- apparmor: fix possible NULL pointer dereference
- drm/amdkfd: Reconcile the definition and use of oem_id in struct
kfd_topology_device
- drm/amdgpu: fix mc_data out-of-bounds read warning
- drm/amdgpu: fix ucode out-of-bounds read warning
- drm/amd/display: Fix Coverity INTEGER_OVERFLOW within dal_gpio_service_create
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- drm/amd/display: Check gpio_id before used as array index
- drm/amdgpu: fix overflowed array index read warning
- drm/amdgpu: Fix uninitialized variable warning in amdgpu_afmt_acr
- net: usb: qmi_wwan: add MeiG Smart SRM825L
- i2c: Fix conditional for substituting empty ACPI functions
- drm: panel-orientation-quirks: Add quirk for OrangePi Neo
+ UBUNTU: Upstream stable to v5.4.284
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/2081278
Title:
Focal update: v5.4.284 upstream stable release
Status in linux package in Ubuntu:
Invalid
Status in linux source package in Focal:
In Progress
Bug description:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
v5.4.284 upstream stable release
from git://git.kernel.org/
drm: panel-orientation-quirks: Add quirk for OrangePi Neo
i2c: Fix conditional for substituting empty ACPI functions
net: usb: qmi_wwan: add MeiG Smart SRM825L
drm/amdgpu: Fix uninitialized variable warning in amdgpu_afmt_acr
drm/amdgpu: fix overflowed array index read warning
drm/amd/display: Check gpio_id before used as array index
drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]
drm/amd/display: Fix Coverity INTEGER_OVERFLOW within dal_gpio_service_create
drm/amdgpu: fix ucode out-of-bounds read warning
drm/amdgpu: fix mc_data out-of-bounds read warning
drm/amdkfd: Reconcile the definition and use of oem_id in struct
kfd_topology_device
apparmor: fix possible NULL pointer dereference
ionic: fix potential irq name truncation
usbip: Don't submit special requests twice
usb: typec: ucsi: Fix null pointer dereference in trace
smack: tcp: ipv4, fix incorrect labeling
wifi: cfg80211: make hash table duplicates more survivable
drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
media: uvcvideo: Enforce alignment of frame and interval
block: initialize integrity buffer to zero before writing it to media
net: set SOCK_RCU_FREE before inserting socket into hashtable
virtio_net: Fix napi_skb_cache_put warning
udf: Limit file size to 4TB
i2c: Use IS_REACHABLE() for substituting empty ACPI functions
sch/netem: fix use after free in netem_dequeue
ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
ALSA: hda/conexant: Add pincfg quirk to enable top speakers on Sirius devices
ata: libata: Fix memory leak for error path in ata_host_alloc()
irqchip/gic-v2m: Fix refcount leak in gicv2m_of_init()
mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K
mmc: sdhci-of-aspeed: fix module autoloading
fuse: update stats for pages in dropped aux writeback list
fuse: use unsigned type for getxattr/listxattr size truncation
reset: hi6220: Add support for AO reset controller
clk: hi6220: use CLK_OF_DECLARE_DRIVER
clk: qcom: clk-alpha-pll: Fix the pll post div mask
clk: qcom: clk-alpha-pll: Fix the trion pll postdiv set rate API
ila: call nf_unregister_net_hooks() sooner
sched: sch_cake: fix bulk flow accounting logic for host fairness
nilfs2: fix missing cleanup on rollforward recovery error
nilfs2: fix state management in error path of log writing function
ALSA: hda: Add input value sanity checks to HDMI channel map controls
smack: unix sockets: fix accept()ed socket label
irqchip/armada-370-xp: Do not allow mapping IRQ 0 and 1
af_unix: Remove put_pid()/put_cred() in copy_peercred().
netfilter: nf_conncount: fix wrong variable type
udf: Avoid excessive partition lengths
wifi: brcmsmac: advertise MFP_CAPABLE to enable WPA3
usb: uas: set host status byte on data completion error
PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
media: qcom: camss: Add check for v4l2_fwnode_endpoint_parse
pcmcia: Use resource_size function on resource object
can: bcm: Remove proc entry when dev is unregistered.
igb: Fix not clearing TimeSync interrupts for 82580
platform/x86: dell-smbios: Fix error path in dell_smbios_init()
tcp_bpf: fix return value of tcp_bpf_sendmsg()
cx82310_eth: re-enable ethernet mode after router reboot
drivers/net/usb: Remove all strcpy() uses
net: usb: don't write directly to netdev->dev_addr
usbnet: modern method to get random MAC
net: bridge: fdb: convert is_local to bitops
net: bridge: fdb: convert is_static to bitops
net: bridge: fdb: convert is_sticky to bitops
net: bridge: fdb: convert added_by_user to bitops
net: bridge: fdb: convert added_by_external_learn to use bitops
net: bridge: br_fdb_external_learn_add(): always set EXT_LEARN
net: dsa: vsc73xx: fix possible subblocks range of CAPT block
ASoC: topology: Properly initialize soc_enum values
dm init: Handle minors larger than 255
iommu/vt-d: Handle volatile descriptor status read
cgroup: Protect css->cgroup write under css_set_lock
um: line: always fill *error_out in setup_one_line()
devres: Initialize an uninitialized struct member
pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
hwmon: (adc128d818) Fix underflows seen when writing limit attributes
hwmon: (lm95234) Fix underflows seen when writing limit attributes
hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
libbpf: Add NULL checks to bpf_object__{prev_map,next_map}
wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
smp: Add missing destroy_work_on_stack() call in smp_call_on_cpu()
btrfs: replace BUG_ON with ASSERT in walk_down_proc()
btrfs: clean up our handling of refs == 0 in snapshot delete
PCI: Add missing bridge lock to pci_bus_lock()
btrfs: initialize location to fix -Wmaybe-uninitialized in
btrfs_lookup_dentry()
HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
Input: uinput - reject requests with unreasonable number of slots
usbnet: ipheth: race between ipheth_close and error handling
Squashfs: sanity check symbolic link size
of/irq: Prevent device address out-of-bounds read in interrupt map walk
lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
ata: pata_macio: Use WARN instead of BUG
NFSv4: Add missing rescheduling points in nfs_client_return_marked_delegations
staging: iio: frequency: ad9834: Validate frequency parameter value
iio: buffer-dmaengine: fix releasing dma channel on error
iio: fix scale application in iio_convert_raw_to_processed_unlocked
binder: fix UAF caused by offsets overwrite
nvmem: Fix return type of devm_nvmem_device_get() in kerneldoc
uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
Drivers: hv: vmbus: Fix rescind handling in uio_hv_generic
VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
clocksource/drivers/imx-tpm: Fix return -ETIME when delta exceeds INT_MAX
clocksource/drivers/imx-tpm: Fix next event not taking effect sometime
clocksource/drivers/timer-of: Remove percpu irq related code
uprobes: Use kzalloc to allocate xol area
ring-buffer: Rename ring_buffer_read() to read_buffer_iter_advance()
tracing: Avoid possible softlockup in tracing_iter_reset()
nilfs2: replace snprintf in show functions with sysfs_emit
nilfs2: protect references to superblock parameters exposed in sysfs
ACPI: processor: Return an error if acpi_processor_get_info() fails in
processor_add()
ACPI: processor: Fix memory leaks in error paths of processor_add()
arm64: acpi: Move get_cpu_for_acpi_id() to a header
arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
nvmet-tcp: fix kernel crash if commands allocation fails
drm/i915/fence: Mark debug_fence_init_onstack() with __maybe_unused
drm/i915/fence: Mark debug_fence_free() with __maybe_unused
rtmutex: Drop rt_mutex::wait_lock before scheduling
net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
cx82310_eth: fix error return code in cx82310_bind()
Linux 5.4.284
UBUNTU: Upstream stable to v5.4.284
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2081278/+subscriptions
--
Mailing list: https://launchpad.net/~kernel-packages
Post to : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help : https://help.launchpad.net/ListHelp
