Public bug reported:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
v5.15.176 upstream stable release
from git://git.kernel.org/
ALSA: usb: Fix UBSAN warning in parse_audio_unit()
usb: cdns3: Add quirk flag to enable suspend residency
ASoC: Intel: sof_sdw: fix jack detection on ADL-N variant RVP
PCI: vmd: Create domain symlink before pci_bus_add_devices()
PCI: Add ACS quirk for Broadcom BCM5760X NIC
MIPS: Loongson64: DTS: Fix msi node for ls7a
usb: dwc2: gadget: Don't write invalid mapped sg entries into dma_desc with
iommu enabled
i2c: pnx: Fix timeout in wait functions
erofs: fix incorrect symlink detection in fast symlink
net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
net/smc: check smcd_v2_ext_offset when receiving proposal msg
net/smc: check return value of sock_recvmsg when draining clc data
netdevsim: prevent bad user input in nsim_dev_health_break_write()
ionic: Fix netdev notifier unregister on failure
ionic: use ee->offset when returning sprom data
net: hinic: Fix cleanup in create_rxqs/txqs()
net: ethernet: bgmac-platform: fix an OF node reference leak
netfilter: ipset: Fix for recursive locking warning
net: mdiobus: fix an OF node reference leak
mmc: sdhci-tegra: Remove SDHCI_QUIRK_BROKEN_ADMA_ZEROLEN_DESC quirk
chelsio/chtls: prevent potential integer overflow on 32bit
i2c: riic: Always round-up when calculating bus period
efivarfs: Fix error on non-existent file
USB: serial: option: add TCL IK512 MBIM & ECM
USB: serial: option: add MeiG Smart SLM770A
USB: serial: option: add Netprisma LCUK54 modules for WWAN Ready
USB: serial: option: add MediaTek T7XX compositions
USB: serial: option: add Telit FE910C04 rmnet compositions
drm/modes: Avoid divide by zero harder in drm_mode_vrefresh()
hwmon: (tmp513) Don't use "proxy" headers
hwmon: (tmp513) Simplify with dev_err_probe()
hwmon: (tmp513) Use SI constants from units.h
hwmon: (tmp513) Fix interpretation of values of Shunt Voltage and Limit
Registers
hwmon: (tmp513) Fix Current Register value interpretation
hwmon: (tmp513) Fix interpretation of values of Temperature Result and Limit
Registers
hwmon: (tmp513) Fix division of negative numbers
sh: clk: Fix clk_enable() to return 0 on NULL clk
zram: refuse to use zero sized block device as backing device
btrfs: tree-checker: reject inline extent items with 0 ref count
Drivers: hv: util: Avoid accessing a ringbuffer not initialized yet
KVM: x86: Play nice with protected guests in complete_hypercall_exit()
tracing: Fix test_event_printk() to process entire print argument
tracing: Add missing helper functions in event pointer dereference check
tracing: Add "%s" check in test_event_printk()
NFS/pnfs: Fix a live lock between recalled layouts and layoutget
of/irq: Fix using uninitialized variable @addr_len in API of_irq_parse_one()
nilfs2: prevent use of deleted inode
udmabuf: also check for F_SEAL_FUTURE_WRITE
of: Fix error path in of_parse_phandle_with_args_map()
of: Fix refcount leakage for OF node returned by __of_get_dma_parent()
ceph: validate snapdirname option length when mounting
epoll: Add synchronous wakeup support for ep_poll_callback
drm/amdgpu: Handle NULL bo->tbo.resource (again) in amdgpu_vm_bo_update
media: dvb-frontends: dib3000mb: fix uninit-value in dib3000_write_reg
mm/vmstat: fix a W=1 clang compiler warning
tcp_bpf: Charge receive socket buffer in bpf_tcp_ingress()
tcp_bpf: Add sk_rmem_alloc related logic for tcp_bpf ingress redirection
bpf: Check negative offsets in __bpf_skb_min_len()
nfsd: restore callback functionality for NFSv4.0
mtd: diskonchip: Cast an operand to prevent potential overflow
mtd: rawnand: arasan: Fix double assertion of chip-select
mtd: rawnand: arasan: Fix missing de-registration of NAND
phy: core: Fix an OF node refcount leakage in _of_phy_get()
phy: core: Fix an OF node refcount leakage in of_phy_provider_lookup()
phy: core: Fix that API devm_phy_put() fails to release the phy
phy: core: Fix that API devm_of_phy_provider_unregister() fails to unregister
the phy provider
phy: core: Fix that API devm_phy_destroy() fails to destroy the phy
dmaengine: mv_xor: fix child node refcount handling in early exit
dmaengine: dw: Select only supported masters for ACPI devices
dmaengine: at_xdmac: avoid null_prt_deref in at_xdmac_prep_dma_memset
mtd: rawnand: fix double free in atmel_pmecc_create_user()
tracing/kprobe: Make trace_kprobe's module callback called after jump_label
update
watchdog: it87_wdt: add PWRGD enable quirk for Qotom QCML04
scsi: qla1280: Fix hw revision numbering for ISP1020/1040
scsi: megaraid_sas: Fix for a potential deadlock
ALSA: hda/conexant: fix Z60MR100 startup pop issue
regmap: Use correct format specifier for logging range errors
platform/x86: asus-nb-wmi: Ignore unknown event 0xCF
scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load
time
scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as
an error
virtio-blk: don't keep queue frozen during system suspend
vmalloc: fix accounting with i915
MIPS: Probe toolchain support of -msym32
bpf: Check validity of link->type in bpf_link_show_fdinfo()
drm/dp_mst: Fix MST sideband message body length check
ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
arm64: mm: Rename asid2idx() to ctxid2asid()
arm64: Ensure bits ASID[15:8] are masked out when the kernel uses 8-bit ASIDs
drm/dp_mst: Verify request type in the corresponding down message reply
lib: stackinit: hide never-taken branch from compiler
ksmbd: fix racy issue from session lookup and expire
tracing: Constify string literal data member in struct trace_event_call
tracing: Prevent bad count for tracing_cpumask_write
power: supply: gpio-charger: Fix set charge current limits
btrfs: avoid monopolizing a core when activating a swap file
nfsd: cancel nfsd_shrinker_work using sync mode in nfs4_state_shutdown_net
net: dsa: improve shutdown sequence
x86/hyperv: Fix hv tsc page based sched_clock for hibernation
selinux: ignore unknown extended permissions
tracing: Have process_string() also allow arrays
thunderbolt: Add support for Intel Raptor Lake
thunderbolt: Add support for Intel Meteor Lake
thunderbolt: Add Intel Barlow Ridge PCI ID
thunderbolt: Add support for Intel Lunar Lake
thunderbolt: Add support for Intel Panther Lake-M/P
xhci: retry Stop Endpoint on buggy NEC controllers
usb: xhci: Limit Stop Endpoint retries
xhci: Turn NEC specific quirk for handling Stop Endpoint errors generic
RDMA/mlx5: Enforce same type port association for multiport RoCE
RDMA/bnxt_re: Add check for path mtu in modify_qp
RDMA/bnxt_re: Fix reporting hw_ver in query_device
RDMA/bnxt_re: Fix max_qp_wrs reported
RDMA/bnxt_re: Fix the locking while accessing the QP table
drm/bridge: adv7511_audio: Update Audio InfoFrame properly
RDMA/hns: Remove redundant 'attr_mask' in modify_qp_init_to_init()
RDMA/hns: Remove redundant 'bt_level' for hem_list_alloc_item()
RDMA/hns: Fix mapping error of zero-hop WQE buffer
RDMA/hns: Fix warning storm caused by invalid input in IO path
RDMA/hns: Fix missing flush CQE for DWQE
net: stmmac: platform: provide devm_stmmac_probe_config_dt()
net: stmmac: don't create a MDIO bus if unnecessary
net: stmmac: restructure the error path of stmmac_probe_config_dt()
net: fix memory leak in tcp_conn_request()
netrom: check buffer length before accessing it
drm/i915/dg1: Fix power gate sequence.
net: llc: reset skb->transport_header
ALSA: usb-audio: US16x08: Initialize array before use
eth: bcmsysport: fix call balance of priv->clk handling routines
net: mv643xx_eth: fix an OF node reference leak
RDMA/rtrs: Ensure 'ib_sge list' is accessible
net: restrict SO_REUSEPORT to inet sockets
net: wwan: iosm: Properly check for valid exec stage in ipc_mmio_init()
af_packet: fix vlan_get_tci() vs MSG_PEEK
af_packet: fix vlan_get_protocol_dgram() vs MSG_PEEK
ila: serialize calls to nf_register_net_hooks()
btrfs: rename and export __btrfs_cow_block()
btrfs: fix use-after-free when COWing tree bock and tracing is enabled
btrfs: sysfs: convert scnprintf and snprintf to sysfs_emit
btrfs: sysfs: fix direct super block member reads
wifi: mac80211: wake the queues in case of failure in resume
drm/amdkfd: Correct the migration DMA map direction
btrfs: flush delalloc workers queue before stopping cleaner kthread during
unmount
sound: usb: enable DSD output for ddHiFi TC44C
sound: usb: format: don't warn that raw DSD is unsupported
bpf: fix potential error return
net: usb: qmi_wwan: add Telit FE910C04 compositions
irqchip/gic: Correct declaration of *percpu_base pointer in union gic_base
ARC: build: Try to guess GCC variant of cross compiler
usb: xhci: Avoid queuing redundant Stop Endpoint commands
modpost: fix input MODULE_DEVICE_TABLE() built for 64-bit on 32-bit host
modpost: fix the missed iteration for the max bit in do_input()
kcov: mark in_softirq_really() as __always_inline
RDMA/uverbs: Prevent integer overflow issue
pinctrl: mcp23s08: Fix sleeping in atomic context due to regmap locking
sky2: Add device ID 11ab:4373 for Marvell 88E8075
net/sctp: Prevent autoclose integer overflow in sctp_association_init()
drm: adv7511: Drop dsi single lane support
dt-bindings: display: adi,adv7533: Drop single lane support
mm: vmscan: account for free pages to prevent infinite Loop in
throttle_direct_reclaim()
Linux 5.15.176
UBUNTU: Upstream stable to v5.15.176
** Affects: linux (Ubuntu)
Importance: Undecided
Status: Invalid
** Affects: linux (Ubuntu Jammy)
Importance: Medium
Assignee: Koichiro Den (koichiroden)
Status: In Progress
** Tags: kernel-stable-tracking-bug
** Changed in: linux (Ubuntu)
Status: New => Confirmed
** Tags added: kernel-stable-tracking-bug
** Also affects: linux (Ubuntu Jammy)
Importance: Undecided
Status: New
** Changed in: linux (Ubuntu)
Status: Confirmed => Invalid
** Changed in: linux (Ubuntu Jammy)
Importance: Undecided => Medium
** Changed in: linux (Ubuntu Jammy)
Status: New => In Progress
** Changed in: linux (Ubuntu Jammy)
Assignee: (unassigned) => Koichiro Den (koichiroden)
** Description changed:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
v5.15.176 upstream stable release
from git://git.kernel.org/
-
+ ALSA: usb: Fix UBSAN warning in parse_audio_unit()
+ usb: cdns3: Add quirk flag to enable suspend residency
+ ASoC: Intel: sof_sdw: fix jack detection on ADL-N variant RVP
+ PCI: vmd: Create domain symlink before pci_bus_add_devices()
+ PCI: Add ACS quirk for Broadcom BCM5760X NIC
+ MIPS: Loongson64: DTS: Fix msi node for ls7a
+ usb: dwc2: gadget: Don't write invalid mapped sg entries into dma_desc with
iommu enabled
+ i2c: pnx: Fix timeout in wait functions
+ erofs: fix incorrect symlink detection in fast symlink
+ net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
+ net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
+ net/smc: check smcd_v2_ext_offset when receiving proposal msg
+ net/smc: check return value of sock_recvmsg when draining clc data
+ netdevsim: prevent bad user input in nsim_dev_health_break_write()
+ ionic: Fix netdev notifier unregister on failure
+ ionic: use ee->offset when returning sprom data
+ net: hinic: Fix cleanup in create_rxqs/txqs()
+ net: ethernet: bgmac-platform: fix an OF node reference leak
+ netfilter: ipset: Fix for recursive locking warning
+ net: mdiobus: fix an OF node reference leak
+ mmc: sdhci-tegra: Remove SDHCI_QUIRK_BROKEN_ADMA_ZEROLEN_DESC quirk
+ chelsio/chtls: prevent potential integer overflow on 32bit
+ i2c: riic: Always round-up when calculating bus period
+ efivarfs: Fix error on non-existent file
+ USB: serial: option: add TCL IK512 MBIM & ECM
+ USB: serial: option: add MeiG Smart SLM770A
+ USB: serial: option: add Netprisma LCUK54 modules for WWAN Ready
+ USB: serial: option: add MediaTek T7XX compositions
+ USB: serial: option: add Telit FE910C04 rmnet compositions
+ drm/modes: Avoid divide by zero harder in drm_mode_vrefresh()
+ hwmon: (tmp513) Don't use "proxy" headers
+ hwmon: (tmp513) Simplify with dev_err_probe()
+ hwmon: (tmp513) Use SI constants from units.h
+ hwmon: (tmp513) Fix interpretation of values of Shunt Voltage and Limit
Registers
+ hwmon: (tmp513) Fix Current Register value interpretation
+ hwmon: (tmp513) Fix interpretation of values of Temperature Result and Limit
Registers
+ hwmon: (tmp513) Fix division of negative numbers
+ sh: clk: Fix clk_enable() to return 0 on NULL clk
+ zram: refuse to use zero sized block device as backing device
+ btrfs: tree-checker: reject inline extent items with 0 ref count
+ Drivers: hv: util: Avoid accessing a ringbuffer not initialized yet
+ KVM: x86: Play nice with protected guests in complete_hypercall_exit()
+ tracing: Fix test_event_printk() to process entire print argument
+ tracing: Add missing helper functions in event pointer dereference check
+ tracing: Add "%s" check in test_event_printk()
+ NFS/pnfs: Fix a live lock between recalled layouts and layoutget
+ of/irq: Fix using uninitialized variable @addr_len in API of_irq_parse_one()
+ nilfs2: prevent use of deleted inode
+ udmabuf: also check for F_SEAL_FUTURE_WRITE
+ of: Fix error path in of_parse_phandle_with_args_map()
+ of: Fix refcount leakage for OF node returned by __of_get_dma_parent()
+ ceph: validate snapdirname option length when mounting
+ epoll: Add synchronous wakeup support for ep_poll_callback
+ drm/amdgpu: Handle NULL bo->tbo.resource (again) in amdgpu_vm_bo_update
+ media: dvb-frontends: dib3000mb: fix uninit-value in dib3000_write_reg
+ mm/vmstat: fix a W=1 clang compiler warning
+ tcp_bpf: Charge receive socket buffer in bpf_tcp_ingress()
+ tcp_bpf: Add sk_rmem_alloc related logic for tcp_bpf ingress redirection
+ bpf: Check negative offsets in __bpf_skb_min_len()
+ nfsd: restore callback functionality for NFSv4.0
+ mtd: diskonchip: Cast an operand to prevent potential overflow
+ mtd: rawnand: arasan: Fix double assertion of chip-select
+ mtd: rawnand: arasan: Fix missing de-registration of NAND
+ phy: core: Fix an OF node refcount leakage in _of_phy_get()
+ phy: core: Fix an OF node refcount leakage in of_phy_provider_lookup()
+ phy: core: Fix that API devm_phy_put() fails to release the phy
+ phy: core: Fix that API devm_of_phy_provider_unregister() fails to unregister
the phy provider
+ phy: core: Fix that API devm_phy_destroy() fails to destroy the phy
+ dmaengine: mv_xor: fix child node refcount handling in early exit
+ dmaengine: dw: Select only supported masters for ACPI devices
+ dmaengine: at_xdmac: avoid null_prt_deref in at_xdmac_prep_dma_memset
+ mtd: rawnand: fix double free in atmel_pmecc_create_user()
+ tracing/kprobe: Make trace_kprobe's module callback called after jump_label
update
+ watchdog: it87_wdt: add PWRGD enable quirk for Qotom QCML04
+ scsi: qla1280: Fix hw revision numbering for ISP1020/1040
+ scsi: megaraid_sas: Fix for a potential deadlock
+ ALSA: hda/conexant: fix Z60MR100 startup pop issue
+ regmap: Use correct format specifier for logging range errors
+ platform/x86: asus-nb-wmi: Ignore unknown event 0xCF
+ scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load
time
+ scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN
as an error
+ virtio-blk: don't keep queue frozen during system suspend
+ vmalloc: fix accounting with i915
+ MIPS: Probe toolchain support of -msym32
+ bpf: Check validity of link->type in bpf_link_show_fdinfo()
+ drm/dp_mst: Fix MST sideband message body length check
+ ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
+ ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
+ arm64: mm: Rename asid2idx() to ctxid2asid()
+ arm64: Ensure bits ASID[15:8] are masked out when the kernel uses 8-bit ASIDs
+ drm/dp_mst: Verify request type in the corresponding down message reply
+ lib: stackinit: hide never-taken branch from compiler
+ ksmbd: fix racy issue from session lookup and expire
+ tracing: Constify string literal data member in struct trace_event_call
+ tracing: Prevent bad count for tracing_cpumask_write
+ power: supply: gpio-charger: Fix set charge current limits
+ btrfs: avoid monopolizing a core when activating a swap file
+ nfsd: cancel nfsd_shrinker_work using sync mode in nfs4_state_shutdown_net
+ net: dsa: improve shutdown sequence
+ x86/hyperv: Fix hv tsc page based sched_clock for hibernation
+ selinux: ignore unknown extended permissions
+ tracing: Have process_string() also allow arrays
+ thunderbolt: Add support for Intel Raptor Lake
+ thunderbolt: Add support for Intel Meteor Lake
+ thunderbolt: Add Intel Barlow Ridge PCI ID
+ thunderbolt: Add support for Intel Lunar Lake
+ thunderbolt: Add support for Intel Panther Lake-M/P
+ xhci: retry Stop Endpoint on buggy NEC controllers
+ usb: xhci: Limit Stop Endpoint retries
+ xhci: Turn NEC specific quirk for handling Stop Endpoint errors generic
+ RDMA/mlx5: Enforce same type port association for multiport RoCE
+ RDMA/bnxt_re: Add check for path mtu in modify_qp
+ RDMA/bnxt_re: Fix reporting hw_ver in query_device
+ RDMA/bnxt_re: Fix max_qp_wrs reported
+ RDMA/bnxt_re: Fix the locking while accessing the QP table
+ drm/bridge: adv7511_audio: Update Audio InfoFrame properly
+ RDMA/hns: Remove redundant 'attr_mask' in modify_qp_init_to_init()
+ RDMA/hns: Remove redundant 'bt_level' for hem_list_alloc_item()
+ RDMA/hns: Fix mapping error of zero-hop WQE buffer
+ RDMA/hns: Fix warning storm caused by invalid input in IO path
+ RDMA/hns: Fix missing flush CQE for DWQE
+ net: stmmac: platform: provide devm_stmmac_probe_config_dt()
+ net: stmmac: don't create a MDIO bus if unnecessary
+ net: stmmac: restructure the error path of stmmac_probe_config_dt()
+ net: fix memory leak in tcp_conn_request()
+ netrom: check buffer length before accessing it
+ drm/i915/dg1: Fix power gate sequence.
+ net: llc: reset skb->transport_header
+ ALSA: usb-audio: US16x08: Initialize array before use
+ eth: bcmsysport: fix call balance of priv->clk handling routines
+ net: mv643xx_eth: fix an OF node reference leak
+ RDMA/rtrs: Ensure 'ib_sge list' is accessible
+ net: restrict SO_REUSEPORT to inet sockets
+ net: wwan: iosm: Properly check for valid exec stage in ipc_mmio_init()
+ af_packet: fix vlan_get_tci() vs MSG_PEEK
+ af_packet: fix vlan_get_protocol_dgram() vs MSG_PEEK
+ ila: serialize calls to nf_register_net_hooks()
+ btrfs: rename and export __btrfs_cow_block()
+ btrfs: fix use-after-free when COWing tree bock and tracing is enabled
+ btrfs: sysfs: convert scnprintf and snprintf to sysfs_emit
+ btrfs: sysfs: fix direct super block member reads
+ wifi: mac80211: wake the queues in case of failure in resume
+ drm/amdkfd: Correct the migration DMA map direction
+ btrfs: flush delalloc workers queue before stopping cleaner kthread during
unmount
+ sound: usb: enable DSD output for ddHiFi TC44C
+ sound: usb: format: don't warn that raw DSD is unsupported
+ bpf: fix potential error return
+ net: usb: qmi_wwan: add Telit FE910C04 compositions
+ irqchip/gic: Correct declaration of *percpu_base pointer in union gic_base
+ ARC: build: Try to guess GCC variant of cross compiler
+ usb: xhci: Avoid queuing redundant Stop Endpoint commands
+ modpost: fix input MODULE_DEVICE_TABLE() built for 64-bit on 32-bit host
+ modpost: fix the missed iteration for the max bit in do_input()
+ kcov: mark in_softirq_really() as __always_inline
+ RDMA/uverbs: Prevent integer overflow issue
+ pinctrl: mcp23s08: Fix sleeping in atomic context due to regmap locking
+ sky2: Add device ID 11ab:4373 for Marvell 88E8075
+ net/sctp: Prevent autoclose integer overflow in sctp_association_init()
+ drm: adv7511: Drop dsi single lane support
+ dt-bindings: display: adi,adv7533: Drop single lane support
+ mm: vmscan: account for free pages to prevent infinite Loop in
throttle_direct_reclaim()
Linux 5.15.176
- mm: vmscan: account for free pages to prevent infinite Loop in
throttle_direct_reclaim()
- dt-bindings: display: adi,adv7533: Drop single lane support
- drm: adv7511: Drop dsi single lane support
- net/sctp: Prevent autoclose integer overflow in sctp_association_init()
- sky2: Add device ID 11ab:4373 for Marvell 88E8075
- pinctrl: mcp23s08: Fix sleeping in atomic context due to regmap locking
- RDMA/uverbs: Prevent integer overflow issue
- kcov: mark in_softirq_really() as __always_inline
- modpost: fix the missed iteration for the max bit in do_input()
- modpost: fix input MODULE_DEVICE_TABLE() built for 64-bit on 32-bit host
- usb: xhci: Avoid queuing redundant Stop Endpoint commands
- ARC: build: Try to guess GCC variant of cross compiler
- irqchip/gic: Correct declaration of *percpu_base pointer in union gic_base
- net: usb: qmi_wwan: add Telit FE910C04 compositions
- bpf: fix potential error return
- sound: usb: format: don't warn that raw DSD is unsupported
- sound: usb: enable DSD output for ddHiFi TC44C
- btrfs: flush delalloc workers queue before stopping cleaner kthread during
unmount
- drm/amdkfd: Correct the migration DMA map direction
- wifi: mac80211: wake the queues in case of failure in resume
- btrfs: sysfs: fix direct super block member reads
- btrfs: sysfs: convert scnprintf and snprintf to sysfs_emit
- btrfs: fix use-after-free when COWing tree bock and tracing is enabled
- btrfs: rename and export __btrfs_cow_block()
- ila: serialize calls to nf_register_net_hooks()
- af_packet: fix vlan_get_protocol_dgram() vs MSG_PEEK
- af_packet: fix vlan_get_tci() vs MSG_PEEK
- net: wwan: iosm: Properly check for valid exec stage in ipc_mmio_init()
- net: restrict SO_REUSEPORT to inet sockets
- RDMA/rtrs: Ensure 'ib_sge list' is accessible
- net: mv643xx_eth: fix an OF node reference leak
- eth: bcmsysport: fix call balance of priv->clk handling routines
- ALSA: usb-audio: US16x08: Initialize array before use
- net: llc: reset skb->transport_header
- netfilter: nft_set_hash: unaligned atomic read on struct nft_set_ext
- drm/i915/dg1: Fix power gate sequence.
- netrom: check buffer length before accessing it
- net: fix memory leak in tcp_conn_request()
- net: stmmac: restructure the error path of stmmac_probe_config_dt()
- net: stmmac: don't create a MDIO bus if unnecessary
- net: stmmac: platform: provide devm_stmmac_probe_config_dt()
- RDMA/hns: Fix missing flush CQE for DWQE
- RDMA/hns: Fix warning storm caused by invalid input in IO path
- RDMA/hns: Fix mapping error of zero-hop WQE buffer
- RDMA/hns: Remove redundant 'bt_level' for hem_list_alloc_item()
- RDMA/hns: Remove redundant 'attr_mask' in modify_qp_init_to_init()
- drm/bridge: adv7511_audio: Update Audio InfoFrame properly
- RDMA/bnxt_re: Fix the locking while accessing the QP table
- RDMA/bnxt_re: Fix max_qp_wrs reported
- RDMA/bnxt_re: Fix reporting hw_ver in query_device
- RDMA/bnxt_re: Add check for path mtu in modify_qp
- RDMA/mlx5: Enforce same type port association for multiport RoCE
- xhci: Turn NEC specific quirk for handling Stop Endpoint errors generic
- usb: xhci: Limit Stop Endpoint retries
- xhci: retry Stop Endpoint on buggy NEC controllers
- thunderbolt: Add support for Intel Panther Lake-M/P
- thunderbolt: Add support for Intel Lunar Lake
- thunderbolt: Add Intel Barlow Ridge PCI ID
- thunderbolt: Add support for Intel Meteor Lake
- thunderbolt: Add support for Intel Raptor Lake
- tracing: Have process_string() also allow arrays
- selinux: ignore unknown extended permissions
- x86/hyperv: Fix hv tsc page based sched_clock for hibernation
- net: dsa: improve shutdown sequence
- nfsd: cancel nfsd_shrinker_work using sync mode in nfs4_state_shutdown_net
- btrfs: avoid monopolizing a core when activating a swap file
- power: supply: gpio-charger: Fix set charge current limits
- tracing: Prevent bad count for tracing_cpumask_write
- tracing: Constify string literal data member in struct trace_event_call
- ksmbd: fix racy issue from session lookup and expire
- lib: stackinit: hide never-taken branch from compiler
- drm/dp_mst: Verify request type in the corresponding down message reply
- arm64: Ensure bits ASID[15:8] are masked out when the kernel uses 8-bit ASIDs
- arm64: mm: Rename asid2idx() to ctxid2asid()
- ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
- ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
- drm/dp_mst: Fix MST sideband message body length check
- bpf: Check validity of link->type in bpf_link_show_fdinfo()
- MIPS: Probe toolchain support of -msym32
- vmalloc: fix accounting with i915
- virtio-blk: don't keep queue frozen during system suspend
- scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN
as an error
- scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load
time
- platform/x86: asus-nb-wmi: Ignore unknown event 0xCF
- regmap: Use correct format specifier for logging range errors
- ALSA: hda/conexant: fix Z60MR100 startup pop issue
- scsi: megaraid_sas: Fix for a potential deadlock
- scsi: qla1280: Fix hw revision numbering for ISP1020/1040
- watchdog: it87_wdt: add PWRGD enable quirk for Qotom QCML04
- tracing/kprobe: Make trace_kprobe's module callback called after jump_label
update
- mtd: rawnand: fix double free in atmel_pmecc_create_user()
- dmaengine: at_xdmac: avoid null_prt_deref in at_xdmac_prep_dma_memset
- dmaengine: dw: Select only supported masters for ACPI devices
- dmaengine: mv_xor: fix child node refcount handling in early exit
- phy: core: Fix that API devm_phy_destroy() fails to destroy the phy
- phy: core: Fix that API devm_of_phy_provider_unregister() fails to unregister
the phy provider
- phy: core: Fix that API devm_phy_put() fails to release the phy
- phy: core: Fix an OF node refcount leakage in of_phy_provider_lookup()
- phy: core: Fix an OF node refcount leakage in _of_phy_get()
- mtd: rawnand: arasan: Fix missing de-registration of NAND
- mtd: rawnand: arasan: Fix double assertion of chip-select
- mtd: diskonchip: Cast an operand to prevent potential overflow
- nfsd: restore callback functionality for NFSv4.0
- bpf: Check negative offsets in __bpf_skb_min_len()
- tcp_bpf: Add sk_rmem_alloc related logic for tcp_bpf ingress redirection
- tcp_bpf: Charge receive socket buffer in bpf_tcp_ingress()
- mm/vmstat: fix a W=1 clang compiler warning
- media: dvb-frontends: dib3000mb: fix uninit-value in dib3000_write_reg
- drm/amdgpu: Handle NULL bo->tbo.resource (again) in amdgpu_vm_bo_update
- epoll: Add synchronous wakeup support for ep_poll_callback
- ceph: validate snapdirname option length when mounting
- of: Fix refcount leakage for OF node returned by __of_get_dma_parent()
- of: Fix error path in of_parse_phandle_with_args_map()
- udmabuf: also check for F_SEAL_FUTURE_WRITE
- nilfs2: prevent use of deleted inode
- of/irq: Fix using uninitialized variable @addr_len in API of_irq_parse_one()
- NFS/pnfs: Fix a live lock between recalled layouts and layoutget
- tracing: Add "%s" check in test_event_printk()
- tracing: Add missing helper functions in event pointer dereference check
- tracing: Fix test_event_printk() to process entire print argument
- KVM: x86: Play nice with protected guests in complete_hypercall_exit()
- Drivers: hv: util: Avoid accessing a ringbuffer not initialized yet
- btrfs: tree-checker: reject inline extent items with 0 ref count
- zram: refuse to use zero sized block device as backing device
- sh: clk: Fix clk_enable() to return 0 on NULL clk
- hwmon: (tmp513) Fix interpretation of values of Temperature Result and Limit
Registers
- hwmon: (tmp513) Fix Current Register value interpretation
- hwmon: (tmp513) Fix interpretation of values of Shunt Voltage and Limit
Registers
- hwmon: (tmp513) Use SI constants from units.h
- hwmon: (tmp513) Simplify with dev_err_probe()
- hwmon: (tmp513) Don't use "proxy" headers
- drm/modes: Avoid divide by zero harder in drm_mode_vrefresh()
- USB: serial: option: add Telit FE910C04 rmnet compositions
- USB: serial: option: add MediaTek T7XX compositions
- USB: serial: option: add Netprisma LCUK54 modules for WWAN Ready
- USB: serial: option: add MeiG Smart SLM770A
- USB: serial: option: add TCL IK512 MBIM & ECM
- efivarfs: Fix error on non-existent file
- i2c: riic: Always round-up when calculating bus period
- chelsio/chtls: prevent potential integer overflow on 32bit
- mmc: sdhci-tegra: Remove SDHCI_QUIRK_BROKEN_ADMA_ZEROLEN_DESC quirk
- net: mdiobus: fix an OF node reference leak
- netfilter: ipset: Fix for recursive locking warning
- net: ethernet: bgmac-platform: fix an OF node reference leak
- net: hinic: Fix cleanup in create_rxqs/txqs()
- ionic: use ee->offset when returning sprom data
- ionic: Fix netdev notifier unregister on failure
- netdevsim: prevent bad user input in nsim_dev_health_break_write()
- net/smc: check return value of sock_recvmsg when draining clc data
- net/smc: check smcd_v2_ext_offset when receiving proposal msg
- net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
- net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
- erofs: fix incorrect symlink detection in fast symlink
- i2c: pnx: Fix timeout in wait functions
- usb: dwc2: gadget: Don't write invalid mapped sg entries into dma_desc with
iommu enabled
- MIPS: Loongson64: DTS: Fix msi node for ls7a
- PCI: Add ACS quirk for Broadcom BCM5760X NIC
- PCI: vmd: Create domain symlink before pci_bus_add_devices()
- ASoC: Intel: sof_sdw: fix jack detection on ADL-N variant RVP
- usb: cdns3: Add quirk flag to enable suspend residency
- ALSA: usb: Fix UBSAN warning in parse_audio_unit()
- PCI/AER: Disable AER service on suspend
- PCI: Use preserve_config in place of pci_flags
- net: sched: fix ordering of qlen adjustment
+ UBUNTU: Upstream stable to v5.15.176
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/2095327
Title:
Jammy update: v5.15.176 upstream stable release
Status in linux package in Ubuntu:
Invalid
Status in linux source package in Jammy:
In Progress
Bug description:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
v5.15.176 upstream stable release
from git://git.kernel.org/
ALSA: usb: Fix UBSAN warning in parse_audio_unit()
usb: cdns3: Add quirk flag to enable suspend residency
ASoC: Intel: sof_sdw: fix jack detection on ADL-N variant RVP
PCI: vmd: Create domain symlink before pci_bus_add_devices()
PCI: Add ACS quirk for Broadcom BCM5760X NIC
MIPS: Loongson64: DTS: Fix msi node for ls7a
usb: dwc2: gadget: Don't write invalid mapped sg entries into dma_desc with
iommu enabled
i2c: pnx: Fix timeout in wait functions
erofs: fix incorrect symlink detection in fast symlink
net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg
net/smc: check smcd_v2_ext_offset when receiving proposal msg
net/smc: check return value of sock_recvmsg when draining clc data
netdevsim: prevent bad user input in nsim_dev_health_break_write()
ionic: Fix netdev notifier unregister on failure
ionic: use ee->offset when returning sprom data
net: hinic: Fix cleanup in create_rxqs/txqs()
net: ethernet: bgmac-platform: fix an OF node reference leak
netfilter: ipset: Fix for recursive locking warning
net: mdiobus: fix an OF node reference leak
mmc: sdhci-tegra: Remove SDHCI_QUIRK_BROKEN_ADMA_ZEROLEN_DESC quirk
chelsio/chtls: prevent potential integer overflow on 32bit
i2c: riic: Always round-up when calculating bus period
efivarfs: Fix error on non-existent file
USB: serial: option: add TCL IK512 MBIM & ECM
USB: serial: option: add MeiG Smart SLM770A
USB: serial: option: add Netprisma LCUK54 modules for WWAN Ready
USB: serial: option: add MediaTek T7XX compositions
USB: serial: option: add Telit FE910C04 rmnet compositions
drm/modes: Avoid divide by zero harder in drm_mode_vrefresh()
hwmon: (tmp513) Don't use "proxy" headers
hwmon: (tmp513) Simplify with dev_err_probe()
hwmon: (tmp513) Use SI constants from units.h
hwmon: (tmp513) Fix interpretation of values of Shunt Voltage and Limit
Registers
hwmon: (tmp513) Fix Current Register value interpretation
hwmon: (tmp513) Fix interpretation of values of Temperature Result and Limit
Registers
hwmon: (tmp513) Fix division of negative numbers
sh: clk: Fix clk_enable() to return 0 on NULL clk
zram: refuse to use zero sized block device as backing device
btrfs: tree-checker: reject inline extent items with 0 ref count
Drivers: hv: util: Avoid accessing a ringbuffer not initialized yet
KVM: x86: Play nice with protected guests in complete_hypercall_exit()
tracing: Fix test_event_printk() to process entire print argument
tracing: Add missing helper functions in event pointer dereference check
tracing: Add "%s" check in test_event_printk()
NFS/pnfs: Fix a live lock between recalled layouts and layoutget
of/irq: Fix using uninitialized variable @addr_len in API of_irq_parse_one()
nilfs2: prevent use of deleted inode
udmabuf: also check for F_SEAL_FUTURE_WRITE
of: Fix error path in of_parse_phandle_with_args_map()
of: Fix refcount leakage for OF node returned by __of_get_dma_parent()
ceph: validate snapdirname option length when mounting
epoll: Add synchronous wakeup support for ep_poll_callback
drm/amdgpu: Handle NULL bo->tbo.resource (again) in amdgpu_vm_bo_update
media: dvb-frontends: dib3000mb: fix uninit-value in dib3000_write_reg
mm/vmstat: fix a W=1 clang compiler warning
tcp_bpf: Charge receive socket buffer in bpf_tcp_ingress()
tcp_bpf: Add sk_rmem_alloc related logic for tcp_bpf ingress redirection
bpf: Check negative offsets in __bpf_skb_min_len()
nfsd: restore callback functionality for NFSv4.0
mtd: diskonchip: Cast an operand to prevent potential overflow
mtd: rawnand: arasan: Fix double assertion of chip-select
mtd: rawnand: arasan: Fix missing de-registration of NAND
phy: core: Fix an OF node refcount leakage in _of_phy_get()
phy: core: Fix an OF node refcount leakage in of_phy_provider_lookup()
phy: core: Fix that API devm_phy_put() fails to release the phy
phy: core: Fix that API devm_of_phy_provider_unregister() fails to unregister
the phy provider
phy: core: Fix that API devm_phy_destroy() fails to destroy the phy
dmaengine: mv_xor: fix child node refcount handling in early exit
dmaengine: dw: Select only supported masters for ACPI devices
dmaengine: at_xdmac: avoid null_prt_deref in at_xdmac_prep_dma_memset
mtd: rawnand: fix double free in atmel_pmecc_create_user()
tracing/kprobe: Make trace_kprobe's module callback called after jump_label
update
watchdog: it87_wdt: add PWRGD enable quirk for Qotom QCML04
scsi: qla1280: Fix hw revision numbering for ISP1020/1040
scsi: megaraid_sas: Fix for a potential deadlock
ALSA: hda/conexant: fix Z60MR100 startup pop issue
regmap: Use correct format specifier for logging range errors
platform/x86: asus-nb-wmi: Ignore unknown event 0xCF
scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load
time
scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN
as an error
virtio-blk: don't keep queue frozen during system suspend
vmalloc: fix accounting with i915
MIPS: Probe toolchain support of -msym32
bpf: Check validity of link->type in bpf_link_show_fdinfo()
drm/dp_mst: Fix MST sideband message body length check
ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
arm64: mm: Rename asid2idx() to ctxid2asid()
arm64: Ensure bits ASID[15:8] are masked out when the kernel uses 8-bit ASIDs
drm/dp_mst: Verify request type in the corresponding down message reply
lib: stackinit: hide never-taken branch from compiler
ksmbd: fix racy issue from session lookup and expire
tracing: Constify string literal data member in struct trace_event_call
tracing: Prevent bad count for tracing_cpumask_write
power: supply: gpio-charger: Fix set charge current limits
btrfs: avoid monopolizing a core when activating a swap file
nfsd: cancel nfsd_shrinker_work using sync mode in nfs4_state_shutdown_net
net: dsa: improve shutdown sequence
x86/hyperv: Fix hv tsc page based sched_clock for hibernation
selinux: ignore unknown extended permissions
tracing: Have process_string() also allow arrays
thunderbolt: Add support for Intel Raptor Lake
thunderbolt: Add support for Intel Meteor Lake
thunderbolt: Add Intel Barlow Ridge PCI ID
thunderbolt: Add support for Intel Lunar Lake
thunderbolt: Add support for Intel Panther Lake-M/P
xhci: retry Stop Endpoint on buggy NEC controllers
usb: xhci: Limit Stop Endpoint retries
xhci: Turn NEC specific quirk for handling Stop Endpoint errors generic
RDMA/mlx5: Enforce same type port association for multiport RoCE
RDMA/bnxt_re: Add check for path mtu in modify_qp
RDMA/bnxt_re: Fix reporting hw_ver in query_device
RDMA/bnxt_re: Fix max_qp_wrs reported
RDMA/bnxt_re: Fix the locking while accessing the QP table
drm/bridge: adv7511_audio: Update Audio InfoFrame properly
RDMA/hns: Remove redundant 'attr_mask' in modify_qp_init_to_init()
RDMA/hns: Remove redundant 'bt_level' for hem_list_alloc_item()
RDMA/hns: Fix mapping error of zero-hop WQE buffer
RDMA/hns: Fix warning storm caused by invalid input in IO path
RDMA/hns: Fix missing flush CQE for DWQE
net: stmmac: platform: provide devm_stmmac_probe_config_dt()
net: stmmac: don't create a MDIO bus if unnecessary
net: stmmac: restructure the error path of stmmac_probe_config_dt()
net: fix memory leak in tcp_conn_request()
netrom: check buffer length before accessing it
drm/i915/dg1: Fix power gate sequence.
net: llc: reset skb->transport_header
ALSA: usb-audio: US16x08: Initialize array before use
eth: bcmsysport: fix call balance of priv->clk handling routines
net: mv643xx_eth: fix an OF node reference leak
RDMA/rtrs: Ensure 'ib_sge list' is accessible
net: restrict SO_REUSEPORT to inet sockets
net: wwan: iosm: Properly check for valid exec stage in ipc_mmio_init()
af_packet: fix vlan_get_tci() vs MSG_PEEK
af_packet: fix vlan_get_protocol_dgram() vs MSG_PEEK
ila: serialize calls to nf_register_net_hooks()
btrfs: rename and export __btrfs_cow_block()
btrfs: fix use-after-free when COWing tree bock and tracing is enabled
btrfs: sysfs: convert scnprintf and snprintf to sysfs_emit
btrfs: sysfs: fix direct super block member reads
wifi: mac80211: wake the queues in case of failure in resume
drm/amdkfd: Correct the migration DMA map direction
btrfs: flush delalloc workers queue before stopping cleaner kthread during
unmount
sound: usb: enable DSD output for ddHiFi TC44C
sound: usb: format: don't warn that raw DSD is unsupported
bpf: fix potential error return
net: usb: qmi_wwan: add Telit FE910C04 compositions
irqchip/gic: Correct declaration of *percpu_base pointer in union gic_base
ARC: build: Try to guess GCC variant of cross compiler
usb: xhci: Avoid queuing redundant Stop Endpoint commands
modpost: fix input MODULE_DEVICE_TABLE() built for 64-bit on 32-bit host
modpost: fix the missed iteration for the max bit in do_input()
kcov: mark in_softirq_really() as __always_inline
RDMA/uverbs: Prevent integer overflow issue
pinctrl: mcp23s08: Fix sleeping in atomic context due to regmap locking
sky2: Add device ID 11ab:4373 for Marvell 88E8075
net/sctp: Prevent autoclose integer overflow in sctp_association_init()
drm: adv7511: Drop dsi single lane support
dt-bindings: display: adi,adv7533: Drop single lane support
mm: vmscan: account for free pages to prevent infinite Loop in
throttle_direct_reclaim()
Linux 5.15.176
UBUNTU: Upstream stable to v5.15.176
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2095327/+subscriptions
--
Mailing list: https://launchpad.net/~kernel-packages
Post to : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help : https://help.launchpad.net/ListHelp
