Public bug reported:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
v5.15.192 upstream stable release
from git://git.kernel.org/
Linux 5.15.192
dmaengine: mediatek: Fix a flag reuse error in mtk_cqdma_tx_status()
spi: tegra114: Use value to check for invalid delays
clk: qcom: gdsc: Set retain_ff before moving to HW CTRL
perf bpf-event: Fix use-after-free in synthesis
drm/bridge: ti-sn65dsi86: fix REFCLK setting
spi: spi-fsl-lpspi: Reset FIFO and disable module on transfer abort
spi: spi-fsl-lpspi: Set correct chip-select polarity bit
spi: spi-fsl-lpspi: Fix transmissions when using CONT
pcmcia: Add error handling for add_interval() in do_validate_mem()
ALSA: hda/hdmi: Add pin fix for another HP EliteDesk 800 G4 model
mm/slub: avoid accessing metadata when pointer is invalid in object_err()
randstruct: gcc-plugin: Fix attribute addition
randstruct: gcc-plugin: Remove bogus void member
arm64: dts: marvell: uDPU: define pinctrl state for alarm LEDs
vmxnet3: update MTU after device quiesce
net: dsa: microchip: linearize skb for tail-tagging switches
net: dsa: microchip: update tag_ksz masks for KSZ9477 family
dmaengine: mediatek: Fix a possible deadlock error in mtk_cqdma_tx_status()
dma-buf: insert memory barrier before updating num_fences
gpio: pca953x: fix IRQ storm on system wake up
iio: light: opt3001: fix deadlock due to concurrent flag access
iio: chemical: pms7003: use aligned_s64 for timestamp
spi: tegra114: Don't fail set_cs_timing when delays are zero
spi: tegra114: Remove unnecessary NULL-pointer checks
KVM: x86: Take irqfds.lock when adding/deleting IRQ bypass producer
cpufreq/sched: Explicitly synchronize limits_changed flag handling
mm/khugepaged: fix ->anon_vma race
e1000e: fix heap overflow in e1000_set_eeprom
batman-adv: fix OOB read/write in network-coding decode
scsi: lpfc: Fix buffer free/clear order in deferred receive path
drm/amdgpu: drop hw access in non-DC audio fini
wifi: mwifiex: Initialize the chan_stats array to zero
mm: move page table sync declarations to linux/pgtable.h
x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings()
pcmcia: Fix a NULL pointer dereference in __iodyn_find_io_region()
ALSA: usb-audio: Add mute TLV for playback volumes on some devices
phy: mscc: Stop taking ts_lock for tx_queue and use its own lock
net: phy: mscc: Fix memory leak when using one step timestamping
ptp: Add generic PTP is_sync() function
ppp: fix memory leak in pad_compress_skb
net: atm: fix memory leak in atm_register_sysfs when device_register fail
ax25: properly unshare skbs in ax25_kiss_rcv()
ipv4: Fix NULL vs error pointer check in inet_blackhole_dev_init()
net: thunder_bgx: decrement cleanup index before use
net: thunder_bgx: add a missing of_node_put
wifi: libertas: cap SSID len in lbs_associate()
wifi: cw1200: cap SSID length in cw1200_do_join()
net: ethernet: mtk_eth_soc: fix tx vlan tag for llc packets
i40e: Fix potential invalid access when MAC list is empty
icmp: fix icmp_ndo_send address translation for reply direction
mISDN: Fix memory leak in dsp_hwec_enable()
xirc2ps_cs: fix register access when enabling FullDuplex
Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen()
netfilter: conntrack: helper: Replace -EEXIST by -EBUSY
netfilter: br_netfilter: do not check confirmed bit in br_nf_local_in() after
confirm
wifi: cfg80211: fix use-after-free in cmp_bss()
arm64: dts: rockchip: Add vcc-supply to SPI flash on rk3399-pinebook-pro
tee: fix NULL pointer dereference in tee_shm_put
fs: writeback: fix use-after-free in __mark_inode_dirty()
drm/amd/display: Don't warn when missing DCE encoder caps
bpf: Fix oob access in cgroup local storage
bpf: Move bpf map owner out of common struct
bpf: Move cgroup iterator helpers to bpf.h
bpf: Add cookie object to bpf maps
** Affects: linux (Ubuntu)
Importance: Undecided
Status: Confirmed
** Affects: linux (Ubuntu Jammy)
Importance: Undecided
Status: New
** Tags: kernel-stable-tracking-bug
** Changed in: linux (Ubuntu)
Status: New => Confirmed
** Tags added: kernel-stable-tracking-bug
** Also affects: linux (Ubuntu Jammy)
Importance: Undecided
Status: New
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/2126781
Title:
Jammy update: v5.15.192 upstream stable release
Status in linux package in Ubuntu:
Confirmed
Status in linux source package in Jammy:
New
Bug description:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
v5.15.192 upstream stable release
from git://git.kernel.org/
Linux 5.15.192
dmaengine: mediatek: Fix a flag reuse error in mtk_cqdma_tx_status()
spi: tegra114: Use value to check for invalid delays
clk: qcom: gdsc: Set retain_ff before moving to HW CTRL
perf bpf-event: Fix use-after-free in synthesis
drm/bridge: ti-sn65dsi86: fix REFCLK setting
spi: spi-fsl-lpspi: Reset FIFO and disable module on transfer abort
spi: spi-fsl-lpspi: Set correct chip-select polarity bit
spi: spi-fsl-lpspi: Fix transmissions when using CONT
pcmcia: Add error handling for add_interval() in do_validate_mem()
ALSA: hda/hdmi: Add pin fix for another HP EliteDesk 800 G4 model
mm/slub: avoid accessing metadata when pointer is invalid in object_err()
randstruct: gcc-plugin: Fix attribute addition
randstruct: gcc-plugin: Remove bogus void member
arm64: dts: marvell: uDPU: define pinctrl state for alarm LEDs
vmxnet3: update MTU after device quiesce
net: dsa: microchip: linearize skb for tail-tagging switches
net: dsa: microchip: update tag_ksz masks for KSZ9477 family
dmaengine: mediatek: Fix a possible deadlock error in mtk_cqdma_tx_status()
dma-buf: insert memory barrier before updating num_fences
gpio: pca953x: fix IRQ storm on system wake up
iio: light: opt3001: fix deadlock due to concurrent flag access
iio: chemical: pms7003: use aligned_s64 for timestamp
spi: tegra114: Don't fail set_cs_timing when delays are zero
spi: tegra114: Remove unnecessary NULL-pointer checks
KVM: x86: Take irqfds.lock when adding/deleting IRQ bypass producer
cpufreq/sched: Explicitly synchronize limits_changed flag handling
mm/khugepaged: fix ->anon_vma race
e1000e: fix heap overflow in e1000_set_eeprom
batman-adv: fix OOB read/write in network-coding decode
scsi: lpfc: Fix buffer free/clear order in deferred receive path
drm/amdgpu: drop hw access in non-DC audio fini
wifi: mwifiex: Initialize the chan_stats array to zero
mm: move page table sync declarations to linux/pgtable.h
x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings()
pcmcia: Fix a NULL pointer dereference in __iodyn_find_io_region()
ALSA: usb-audio: Add mute TLV for playback volumes on some devices
phy: mscc: Stop taking ts_lock for tx_queue and use its own lock
net: phy: mscc: Fix memory leak when using one step timestamping
ptp: Add generic PTP is_sync() function
ppp: fix memory leak in pad_compress_skb
net: atm: fix memory leak in atm_register_sysfs when device_register fail
ax25: properly unshare skbs in ax25_kiss_rcv()
ipv4: Fix NULL vs error pointer check in inet_blackhole_dev_init()
net: thunder_bgx: decrement cleanup index before use
net: thunder_bgx: add a missing of_node_put
wifi: libertas: cap SSID len in lbs_associate()
wifi: cw1200: cap SSID length in cw1200_do_join()
net: ethernet: mtk_eth_soc: fix tx vlan tag for llc packets
i40e: Fix potential invalid access when MAC list is empty
icmp: fix icmp_ndo_send address translation for reply direction
mISDN: Fix memory leak in dsp_hwec_enable()
xirc2ps_cs: fix register access when enabling FullDuplex
Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen()
netfilter: conntrack: helper: Replace -EEXIST by -EBUSY
netfilter: br_netfilter: do not check confirmed bit in br_nf_local_in() after
confirm
wifi: cfg80211: fix use-after-free in cmp_bss()
arm64: dts: rockchip: Add vcc-supply to SPI flash on rk3399-pinebook-pro
tee: fix NULL pointer dereference in tee_shm_put
fs: writeback: fix use-after-free in __mark_inode_dirty()
drm/amd/display: Don't warn when missing DCE encoder caps
bpf: Fix oob access in cgroup local storage
bpf: Move bpf map owner out of common struct
bpf: Move cgroup iterator helpers to bpf.h
bpf: Add cookie object to bpf maps
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2126781/+subscriptions
--
Mailing list: https://launchpad.net/~kernel-packages
Post to : [email protected]
Unsubscribe : https://launchpad.net/~kernel-packages
More help : https://help.launchpad.net/ListHelp
