This bug was fixed in the package linux-azure-cvm - 5.4.0-1063.66+cvm2
---------------
linux-azure-cvm (5.4.0-1063.66+cvm2) focal; urgency=medium
* focal/linux-azure-cvm: 5.4.0-1063.66+cvm2 -proposed tracker (LP:
#1947232)
* linux-azure-cvm: Create a 5.4 based kernel (LP: #1948057)
- Revert "UBUNTU: [Packaging] linux-azure-cvm: Disable UEFI signed kernel
image"
* Backport commits required for confidential VMs (LP: #1915146)
- SAUCE: x86/hyperv: Load/save the Isolation Configuration leaf
- SAUCE: x86/Hyper-V: Add visibility parameter for vmbus_establish_gpadl()
- SAUCE: x86/Hyper-V: Add new hvcall guest address host visibility support
- SAUCE: HV: Get Hyper-V Isolated VM capability
- SAUCE: HV: Add Write/Read MSR registers via ghcb
- SAUCE: HV: Add ghcb hvcall support for SNP VM
- SAUCE: HV/Vmbus: Add SNP support for VMbus channel initiate message
- SAUCE: hv/vmbus: Initialize VMbus ring buffer for Isolated VM
- SAUCE: x86/Hyper-V: Initialize bounce buffer page cache and list
- SAUCE: x86/Hyper-V: Add new parameter for
vmbus_sendpacket_pagebuffer()/mpb_desc()
- SAUCE: x86/Hyper-V: Copy data from/to bounce buffer during IO operation.
- SAUCE: HV/Netvsc: Add SNP support for netvsc driver
- SAUCE: HV/Storvsc: Add bounce buffer support for Storvsc
- hv_netvsc: Remove unnecessary round_up for recv_completion_cnt
- hv_netvsc: Add validation for untrusted Hyper-V values
- drivers: hv: vmbus: Introduce latency testing
- Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
- scsi: storvsc: Use vmbus_requestor to generate transaction IDs for VMBus
hardening
- hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus
hardening
- SAUCE: Drivers: hv: vmbus: Copy packets sent by Hyper-V out of the ring
buffer
- SAUCE: hv_utils: Add validation for untrusted Hyper-V values
- SAUCE: Drivers: hv: vmbus: Initialize memory to be sent to the host
- Drivers: hv: copy from message page only what's needed
- Drivers: hv: check VMBus messages lengths
- Drivers: hv: allocate the exact needed memory for messages
- SAUCE: Drivers: hv: vmbus: Reduce number of references to message in
vmbus_on_msg_dpc()
- Drivers: hv: make sure that 'struct vmbus_channel_message_header' compiles
correctly
- SAUCE: Drivers: hv: vmbus: Resolve race condition in
vmbus_onoffer_rescind()
- SAUCE: scsi: storvsc: Fix max_outstanding_req_per_channel for Win8 and
newer
- SAUCE: scsi: storvsc: Resolve data race in storvsc_probe()
- SAUCE: scsi: storvsc: Validate length of incoming packet in
storvsc_on_channel_callback()
- SAUCE: hv_netvsc: Add (more) validation for untrusted Hyper-V values
- Drivers: hv: vmbus: Introduce table of VMBus protocol versions
- Drivers: hv: vmbus: Enable VMBus protocol versions 4.1, 5.1 and 5.2
- SAUCE: Drivers: hv: vmbus: Restrict vmbus_devices on isolated guests
- SAUCE: Drivers: hv: vmbus: Enforce 'VMBus version >= 5.2' on isolated
guests
- SAUCE: hv_netvsc: Restrict configurations on isolated guests
- SAUCE: hv_netvsc: Copy packets sent by Hyper-V out of the receive buffer
- SAUCE: HV/Bounce buffer: Add SMP support in the bounce buffer code
- SAUCE: HV/IVM: Disable interrupt when read ghcb
- SAUCE: HV/Netvsc: Unmap recv_buf and send buf in extra address space
- SAUCE: HV: Set gpadl buffer not visible to host when return buffer back to
system
- SAUCE: Stovsc: Reserve bounce buffer for storvsc subchannel
- hv_netvsc: Validate number of allocated sub-channels
- SAUCE: Drivers: hv: vmbus: Copy the hv_message in vmbus_on_msg_dpc()
- SAUCE: hv_netvsc: Allocate the recv_buf buffers after
NVSP_MSG1_TYPE_SEND_RECV_BUF
- SAUCE: hv_netvsc: Load and store the proper (NBL_HASH_INFO) per-packet
info
- SAUCE: HV/Netvsc: Fix dropping package during high network throughput
- SAUCE: Netvsc: Fix race condition with skb
- SAUCE: HV/IVM: Add support for new AMD GHCB spec
- [Config] azure: CONFIG_HYPERV_TESTING=y
- Drivers: hv: vmbus: Use after free in __vmbus_open()
- hv_netvsc: Cache the current data path to avoid duplicate call and message
- hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
- Drivers: hv: vmbus: Drop error message when 'No request id available'
- SAUCE: Revert "UBUNTU: SAUCE: Drivers: hv: vmbus: Copy packets sent by
Hyper-V out of the ring buffer"
- SAUCE: Drivers: hv: vmbus: Copy packets sent by Hyper-V out of the ring
buffer
- SAUCE: scsi: storvsc: Use blk_mq_unique_tag() to generate requestIDs
- SAUCE: HV/Storvsc: Adjust bounce buffer in on_channel_callback
- SAUCE: move hv_init_channel_ivm before vmbus_device_register
- SAUCE: vmbus: Fix reserve bounce buffer isn't released during unloading
driver
- SAUCE: scsi: storvsc: Fix validation for unsolicited incoming packets
[ Ubuntu: 5.4.0-1063.66 ]
* focal/linux-azure: 5.4.0-1063.66 -proposed tracker (LP: #1947235)
* focal/linux: 5.4.0-90.101 -proposed tracker (LP: #1947260)
* Packaging resync (LP: #1786013)
- debian/dkms-versions -- update from kernel-versions (main/2021.10.18)
* Add final-checks to check certificates (LP: #1947174)
- [Packaging] Add system trusted and revocation keys final check
* No sound on Lenovo laptop models Legion 15IMHG05, Yoga 7 14ITL5, and 13s
Gen2 (LP: #1939052)
- ALSA: hda/realtek: Quirks to enable speaker output for Lenovo Legion 7i
15IMHG05, Yoga 7i 14ITL5/15ITL5, and 13s Gen2 laptops.
- ALSA: hda/realtek: Fix for quirk to enable speaker output on the Lenovo
13s
Gen2
* CVE-2020-36385
- RDMA/cma: Add missing locking to rdma_accept()
- RDMA/ucma: Fix the locking of ctx->file
- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy
* Focal update: v5.4.148 upstream stable release (LP: #1946802)
- rtc: tps65910: Correct driver module alias
- btrfs: wake up async_delalloc_pages waiters after submit
- btrfs: reset replace target device to allocation state on close
- blk-zoned: allow zone management send operations without CAP_SYS_ADMIN
- blk-zoned: allow BLKREPORTZONE without CAP_SYS_ADMIN
- PCI/MSI: Skip masking MSI-X on Xen PV
- powerpc/perf/hv-gpci: Fix counter value parsing
- xen: fix setting of max_pfn in shared_info
- include/linux/list.h: add a macro to test if entry is pointing to the head
- 9p/xen: Fix end of loop tests for list_for_each_entry
- tools/thermal/tmon: Add cross compiling support
- pinctrl: stmfx: Fix hazardous u8[] to unsigned long cast
- pinctrl: ingenic: Fix incorrect pull up/down info
- soc: qcom: aoss: Fix the out of bound usage of cooling_devs
- soc: aspeed: lpc-ctrl: Fix boundary check for mmap
- soc: aspeed: p2a-ctrl: Fix boundary check for mmap
- arm64: head: avoid over-mapping in map_memory
- crypto: public_key: fix overflow during implicit conversion
- block: bfq: fix bfq_set_next_ioprio_data()
- power: supply: max17042: handle fails of reading status register
- dm crypt: Avoid percpu_counter spinlock contention in crypt_page_alloc()
- VMCI: fix NULL pointer dereference when unmapping queue pair
- media: uvc: don't do DMA on stack
- media: rc-loopback: return number of emitters rather than error
- Revert "dmaengine: imx-sdma: refine to load context only once"
- dmaengine: imx-sdma: remove duplicated sdma_load_context
- libata: add ATA_HORKAGE_NO_NCQ_TRIM for Samsung 860 and 870 SSDs
- ARM: 9105/1: atags_to_fdt: don't warn about stack size
- PCI/portdrv: Enable Bandwidth Notification only if port supports it
- PCI: Restrict ASMedia ASM1062 SATA Max Payload Size Supported
- PCI: Return ~0 data on pciconfig_read() CAP_SYS_ADMIN failure
- PCI: xilinx-nwl: Enable the clock through CCF
- PCI: aardvark: Fix checking for PIO status
- PCI: aardvark: Increase polling delay to 1.5s while waiting for PIO
response
- PCI: aardvark: Fix masking and unmasking legacy INTx interrupts
- HID: input: do not report stylus battery state as "full"
- f2fs: quota: fix potential deadlock
- scsi: bsg: Remove support for SCSI_IOCTL_SEND_COMMAND
- IB/hfi1: Adjust pkey entry in index 0
- RDMA/iwcm: Release resources if iw_cm module initialization fails
- docs: Fix infiniband uverbs minor number
- pinctrl: samsung: Fix pinctrl bank pin count
- vfio: Use config not menuconfig for VFIO_NOIOMMU
- powerpc/stacktrace: Include linux/delay.h
- RDMA/efa: Remove double QP type assignment
- f2fs: show f2fs instance in printk_ratelimited
- f2fs: reduce the scope of setting fsck tag when de->name_len is zero
- openrisc: don't printk() unconditionally
- dma-debug: fix debugfs initialization order
- SUNRPC: Fix potential memory corruption
- scsi: fdomain: Fix error return code in fdomain_probe()
- pinctrl: single: Fix error return code in
pcs_parse_bits_in_pinctrl_entry()
- scsi: smartpqi: Fix an error code in pqi_get_raid_map()
- scsi: qedi: Fix error codes in qedi_alloc_global_queues()
- scsi: qedf: Fix error codes in qedf_alloc_global_queues()
- powerpc/config: Renable MTD_PHYSMAP_OF
- scsi: target: avoid per-loop XCOPY buffer allocations
- HID: i2c-hid: Fix Elan touchpad regression
- KVM: PPC: Book3S HV Nested: Reflect guest PMU in-use to L0 when guest SPRs
are live
- platform/x86: dell-smbios-wmi: Add missing kfree in error-exit from
run_smbios_call
- fscache: Fix cookie key hashing
- clk: at91: sam9x60: Don't use audio PLL
- clk: at91: clk-generated: pass the id of changeable parent at registration
- clk: at91: clk-generated: Limit the requested rate to our range
- KVM: PPC: Fix clearing never mapped TCEs in realmode
- f2fs: fix to account missing .skipped_gc_rwsem
- f2fs: fix unexpected ENOENT comes from f2fs_map_blocks()
- f2fs: fix to unmap pages from userspace process in punch_hole()
- MIPS: Malta: fix alignment of the devicetree buffer
- kbuild: Fix 'no symbols' warning when CONFIG_TRIM_UNUSD_KSYMS=y
- userfaultfd: prevent concurrent API initialization
- drm/amdgpu: Fix amdgpu_ras_eeprom_init()
- ASoC: atmel: ATMEL drivers don't need HAS_DMA
- media: dib8000: rewrite the init prbs logic
- crypto: mxs-dcp - Use sg_mapping_iter to copy data
- PCI: Use pci_update_current_state() in pci_enable_device_flags()
- tipc: keep the skb in rcv queue until the whole data is read
- iio: dac: ad5624r: Fix incorrect handling of an optional regulator.
- iavf: do not override the adapter state in the watchdog task
- iavf: fix locking of critical sections
- ARM: dts: qcom: apq8064: correct clock names
- video: fbdev: kyro: fix a DoS bug by restricting user input
- netlink: Deal with ESRCH error in nlmsg_notify()
- Smack: Fix wrong semantics in smk_access_entry()
- drm: avoid blocking in drm_clients_info's rcu section
- igc: Check if num of q_vectors is smaller than max before array access
- usb: host: fotg210: fix the endpoint's transactional opportunities
calculation
- usb: host: fotg210: fix the actual_length of an iso packet
- usb: gadget: u_ether: fix a potential null pointer dereference
- USB: EHCI: ehci-mv: improve error handling in mv_ehci_enable()
- usb: gadget: composite: Allow bMaxPower=0 if self-powered
- staging: board: Fix uninitialized spinlock when attaching genpd
- tty: serial: jsm: hold port lock when reporting modem line changes
- drm/amd/display: Fix timer_per_pixel unit error
- drm/amd/amdgpu: Update debugfs link_settings output link_rate field in hex
- bpf/tests: Fix copy-and-paste error in double word test
- bpf/tests: Do not PASS tests without actually testing the result
- video: fbdev: asiliantfb: Error out if 'pixclock' equals zero
- video: fbdev: kyro: Error out if 'pixclock' equals zero
- video: fbdev: riva: Error out if 'pixclock' equals zero
- ipv4: ip_output.c: Fix out-of-bounds warning in ip_copy_addrs()
- flow_dissector: Fix out-of-bounds warnings
- s390/jump_label: print real address in a case of a jump label bug
- s390: make PCI mio support a machine flag
- serial: 8250: Define RX trigger levels for OxSemi 950 devices
- xtensa: ISS: don't panic in rs_init
- hvsi: don't panic on tty_register_driver failure
- serial: 8250_pci: make setup_port() parameters explicitly unsigned
- staging: ks7010: Fix the initialization of the 'sleep_status' structure
- samples: bpf: Fix tracex7 error raised on the missing argument
- ata: sata_dwc_460ex: No need to call phy_exit() befre phy_init()
- Bluetooth: skip invalid hci_sync_conn_complete_evt
- workqueue: Fix possible memory leaks in wq_numa_init()
- bonding: 3ad: fix the concurrency between __bond_release_one() and
bond_3ad_state_machine_handler()
- arm64: tegra: Fix Tegra194 PCIe EP compatible string
- ASoC: Intel: bytcr_rt5640: Move "Platform Clock" routes to the maps for
the
matching in-/output
- media: imx258: Rectify mismatch of VTS value
- media: imx258: Limit the max analogue gain to 480
- media: v4l2-dv-timings.c: fix wrong condition in two for-loops
- media: TDA1997x: fix tda1997x_query_dv_timings() return value
- media: tegra-cec: Handle errors of clk_prepare_enable()
- ARM: dts: imx53-ppd: Fix ACHC entry
- arm64: dts: qcom: sdm660: use reg value for memory node
- net: ethernet: stmmac: Do not use unreachable() in ipq806x_gmac_probe()
- drm/msm: mdp4: drop vblank get/put from prepare/complete_commit
- selftests/bpf: Fix xdp_tx.c prog section name
- Bluetooth: schedule SCO timeouts with delayed_work
- Bluetooth: avoid circular locks in sco_sock_connect
- net/mlx5: Fix variable type to match 64bit
- gpu: drm: amd: amdgpu: amdgpu_i2c: fix possible uninitialized-variable
access in amdgpu_i2c_router_select_ddc_port()
- drm/display: fix possible null-pointer dereference in dcn10_set_clock()
- mac80211: Fix monitor MTU limit so that A-MSDUs get through
- ARM: tegra: tamonten: Fix UART pad setting
- arm64: tegra: Fix compatible string for Tegra132 CPUs
- arm64: dts: ls1046a: fix eeprom entries
- nvme-tcp: don't check blk_mq_tag_to_rq when receiving pdu data
- Bluetooth: Fix handling of LE Enhanced Connection Complete
- opp: Don't print an error if required-opps is missing
- serial: sh-sci: fix break handling for sysrq
- tcp: enable data-less, empty-cookie SYN with TFO_SERVER_COOKIE_NOT_REQD
- rpc: fix gss_svc_init cleanup on failure
- staging: rts5208: Fix get_ms_information() heap buffer size
- gfs2: Don't call dlm after protocol is unmounted
- usb: chipidea: host: fix port index underflow and UBSAN complains
- lockd: lockd server-side shouldn't set fl_ops
- drm/exynos: Always initialize mapping in exynos_drm_register_dma()
- m68knommu: only set CONFIG_ISA_DMA_API for ColdFire sub-arch
- btrfs: tree-log: check btrfs_lookup_data_extent return value
- ASoC: Intel: Skylake: Fix module configuration for KPB and MIXER
- ASoC: Intel: Skylake: Fix passing loadable flag for module
- of: Don't allow __of_attached_node_sysfs() without CONFIG_SYSFS
- mmc: sdhci-of-arasan: Check return value of non-void funtions
- mmc: rtsx_pci: Fix long reads when clock is prescaled
- selftests/bpf: Enlarge select() timeout for test_maps
- mmc: core: Return correct emmc response in case of ioctl error
- cifs: fix wrong release in sess_alloc_buffer() failed path
- Revert "USB: xhci: fix U1/U2 handling for hardware with XHCI_INTEL_HOST
quirk set"
- usb: musb: musb_dsps: request_irq() after initializing musb
- usbip: give back URBs for unsent unlink requests during cleanup
- usbip:vhci_hcd USB port can get stuck in the disabled state
- ASoC: rockchip: i2s: Fix regmap_ops hang
- ASoC: rockchip: i2s: Fixup config for DAIFMT_DSP_A/B
- drm/amdkfd: Account for SH/SE count when setting up cu masks.
- iwlwifi: mvm: fix a memory leak in iwl_mvm_mac_ctxt_beacon_changed
- iwlwifi: mvm: avoid static queue number aliasing
- iwlwifi: mvm: fix access to BSS elements
- net/mlx5: DR, Enable QP retransmission
- parport: remove non-zero check on count
- ath9k: fix OOB read ar9300_eeprom_restore_internal
- ath9k: fix sleeping in atomic context
- net: fix NULL pointer reference in cipso_v4_doi_free
- fix array-index-out-of-bounds in taprio_change
- net: w5100: check return value after calling platform_get_resource()
- parisc: fix crash with signals and alloca
- ovl: fix BUG_ON() in may_delete() when called from ovl_cleanup()
- scsi: BusLogic: Fix missing pr_cont() use
- scsi: qla2xxx: Changes to support kdump kernel
- scsi: qla2xxx: Sync queue idx with queue_pair_map idx
- cpufreq: powernv: Fix init_chip_info initialization in numa=off
- s390/pv: fix the forcing of the swiotlb
- mm/hugetlb: initialize hugetlb_usage in mm_init
- mm,vmscan: fix divide by zero in get_scan_count
- memcg: enable accounting for pids in nested pid namespaces
- platform/chrome: cros_ec_proto: Send command again when timeout occurs
- lib/test_stackinit: Fix static initializer test
- net: dsa: lantiq_gswip: fix maximum frame length
- drm/msi/mdp4: populate priv->kms in mdp4_kms_init
- drm/amdgpu: Fix BUG_ON assert
- drm/panfrost: Simplify lock_region calculation
- drm/panfrost: Use u64 for size in lock_region
- drm/panfrost: Clamp lock region to Bifrost minimum
- btrfs: fix upper limit for max_inline for page size 64K
- xen: reset legacy rtc flag for PV domU
- bnx2x: Fix enabling network interfaces without VFs
- arm64/sve: Use correct size when reinitialising SVE state
- PM: base: power: don't try to use non-existing RTC for storing data
- PCI: Add AMD GPU multi-function power dependencies
- drm/amd/amdgpu: Increase HWIP_MAX_INSTANCE to 10
- drm/etnaviv: return context from etnaviv_iommu_context_get
- drm/etnaviv: put submit prev MMU context when it exists
- drm/etnaviv: stop abusing mmu_context as FE running marker
- drm/etnaviv: keep MMU context across runtime suspend/resume
- drm/etnaviv: exec and MMU state is lost when resetting the GPU
- drm/etnaviv: fix MMU context leak on GPU reset
- drm/etnaviv: reference MMU context when setting up hardware state
- drm/etnaviv: add missing MMU context put when reaping MMU mapping
- s390/sclp: fix Secure-IPL facility detection
- x86/mm: Fix kern_addr_valid() to cope with existing but not present
entries
- tipc: fix an use-after-free issue in tipc_recvmsg
- net-caif: avoid user-triggerable WARN_ON(1)
- ptp: dp83640: don't define PAGE0
- net/l2tp: Fix reference count leak in l2tp_udp_recv_core
- r6040: Restore MDIO clock frequency after MAC reset
- tipc: increase timeout in tipc_sk_enqueue()
- perf machine: Initialize srcline string member in add_location struct
- net/mlx5: FWTrace, cancel work on alloc pd error flow
- net/mlx5: Fix potential sleeping in atomic context
- events: Reuse value read using READ_ONCE instead of re-reading it
- vhost_net: fix OoB on sendmsg() failure.
- net/af_unix: fix a data-race in unix_dgram_poll
- net: dsa: destroy the phylink instance on any error in dsa_slave_phy_setup
- tcp: fix tp->undo_retrans accounting in tcp_sacktag_one()
- qed: Handle management FW error
- dt-bindings: arm: Fix Toradex compatible typo
- ibmvnic: check failover_pending in login response
- KVM: PPC: Book3S HV: Tolerate treclaim. in fake-suspend mode changing
registers
- net: hns3: pad the short tunnel frame before sending to hardware
- net: hns3: change affinity_mask to numa node range
- net: hns3: disable mac in flr process
- net: hns3: fix the timing issue of VF clearing interrupt sources
- mm/memory_hotplug: use "unsigned long" for PFN in zone_for_pfn_range()
- dt-bindings: mtd: gpmc: Fix the ECC bytes vs. OOB bytes equation
- mfd: db8500-prcmu: Adjust map to reality
- PCI: Add ACS quirks for NXP LX2xx0 and LX2xx2 platforms
- fuse: fix use after free in fuse_read_interrupt()
- mfd: Don't use irq_create_mapping() to resolve a mapping
- tracing/probes: Reject events which have the same name of existing one
- PCI: Add ACS quirks for Cavium multi-function devices
- Set fc_nlinfo in nh_create_ipv4, nh_create_ipv6
- net: usb: cdc_mbim: avoid altsetting toggling for Telit LN920
- PCI: ibmphp: Fix double unmap of io_mem
- ethtool: Fix an error code in cxgb2.c
- NTB: Fix an error code in ntb_msit_probe()
- NTB: perf: Fix an error code in perf_setup_inbuf()
- mfd: axp20x: Update AXP288 volatile ranges
- PCI: Fix pci_dev_str_match_path() alloc while atomic bug
- mfd: tqmx86: Clear GPIO IRQ resource when no IRQ is set
- KVM: arm64: Handle PSCI resets before userspace touches vCPU state
- PCI: Sync __pci_register_driver() stub for CONFIG_PCI=n
- mtd: rawnand: cafe: Fix a resource leak in the error handling path of
'cafe_nand_probe()'
- ARC: export clear_user_page() for modules
- perf unwind: Do not overwrite
FEATURE_CHECK_LDFLAGS-libunwind-{x86,aarch64}
- net: dsa: b53: Fix calculating number of switch ports
- netfilter: socket: icmp6: fix use-after-scope
- fq_codel: reject silly quantum parameters
- qlcnic: Remove redundant unlock in qlcnic_pinit_from_rom
- ip_gre: validate csum_start only on pull
- net: renesas: sh_eth: Fix freeing wrong tx descriptor
- Linux 5.4.148
* Focal update: v5.4.147 upstream stable release (LP: #1946795)
- Linux 5.4.147
- upstream stable to v5.4.147
* CVE-2021-3428
- ext4: save the error code which triggered an ext4_error() in the
superblock
- ext4: simulate various I/O and checksum errors when reading metadata
- ext4: save all error info in save_error_info() and drop ext4_set_errno()
- ext4: check journal inode extents more carefully
* ip6gretap / erspan / ip6erspan in rtnetlink.sh from net of
ubuntu_kernel_selftests failed on B-5.4-aws / B-5.4-gke / B-5.4-oracle /
B-5.4-azure / B-5.4 (LP: #1896448)
- SAUCE: selftests: rtnetlink: fixes for older iproute2
* CVE-2019-19449
- f2fs: fix wrong total_sections check and fsmeta check
- f2fs: fix to do sanity check on segment/section count
* kernel bug found when disconnecting one fiber channel interface on Cisco
Chassis with fnic DRV_VERSION "1.6.0.47" (LP: #1944586)
- scsi: fnic: Do not call 'scsi_done()' for unhandled commands
* memfd from ubuntu_kernel_selftests failed to build on B-5.4 (unknown type
name ‘__u64’) (LP: #1944613)
- SAUCE: selftests/memfd: fix __u64 not defined build issue
* Medion Notebook Keyboard not working (LP: #1909814)
- ACPI: resources: Add DMI-based legacy IRQ override quirk
* vrf: fix refcnt leak with vxlan slaves (LP: #1945180)
- ipv4: Fix device used for dst_alloc with local routes
* Check for changes relevant for security certifications (LP: #1945989)
- [Packaging] Add a new fips-checks script
- [Packaging] Add fips-checks as part of finalchecks
* Fix cold plugged USB device on certain PCIe USB cards (LP: #1945211)
- Revert "UBUNTU: SAUCE: Revert "usb: core: reduce power-on-good delay time
of
root hub""
- usb: core: hcd: Add support for deferring roothub registration
- xhci: Set HCD flag to defer primary roothub registration
- usb: core: hcd: Modularize HCD stop configuration in usb_stop_hcd()
* CVE-2021-3759
- memcg: enable accounting of ipc resources
* Focal update: v5.4.146 upstream stable release (LP: #1946024)
- locking/mutex: Fix HANDOFF condition
- regmap: fix the offset of register error log
- crypto: mxs-dcp - Check for DMA mapping errors
- sched/deadline: Fix reset_on_fork reporting of DL tasks
- power: supply: axp288_fuel_gauge: Report register-address on readb /
writeb
errors
- crypto: omap-sham - clear dma flags only after omap_sham_update_dma_stop()
- sched/deadline: Fix missing clock update in migrate_task_rq_dl()
- rcu/tree: Handle VM stoppage in stall detection
- hrtimer: Avoid double reprogramming in __hrtimer_start_range_ns()
- hrtimer: Ensure timerfd notification for HIGHRES=n
- udf: Check LVID earlier
- udf: Fix iocharset=utf8 mount option
- isofs: joliet: Fix iocharset=utf8 mount option
- bcache: add proper error unwinding in bcache_device_init
- nvme-tcp: don't update queue count when failing to set io queues
- nvme-rdma: don't update queue count when failing to set io queues
- nvmet: pass back cntlid on successful completion
- power: supply: max17042_battery: fix typo in MAx17042_TOFF
- s390/cio: add dev_busid sysfs entry for each subchannel
- libata: fix ata_host_start()
- crypto: qat - do not ignore errors from enable_vf2pf_comms()
- crypto: qat - handle both source of interrupt in VF ISR
- crypto: qat - fix reuse of completion variable
- crypto: qat - fix naming for init/shutdown VF to PF notifications
- crypto: qat - do not export adf_iov_putmsg()
- fcntl: fix potential deadlock for &fasync_struct.fa_lock
- udf_get_extendedattr() had no boundary checks.
- s390/kasan: fix large PMD pages address alignment check
- s390/debug: fix debug area life cycle
- m68k: emu: Fix invalid free in nfeth_cleanup()
- sched: Fix UCLAMP_FLAG_IDLE setting
- spi: spi-fsl-dspi: Fix issue with uninitialized dma_slave_config
- spi: spi-pic32: Fix issue with uninitialized dma_slave_config
- genirq/timings: Fix error return code in irq_timings_test_irqs()
- lib/mpi: use kcalloc in mpi_resize
- clocksource/drivers/sh_cmt: Fix wrong setting if don't request IRQ for
clock
source channel
- crypto: qat - use proper type for vf_mask
- certs: Trigger creation of RSA module signing key if it's not an RSA key
- regulator: vctrl: Use locked regulator_get_voltage in probe path
- regulator: vctrl: Avoid lockdep warning in enable/disable ops
- spi: sprd: Fix the wrong WDG_LOAD_VAL
- spi: spi-zynq-qspi: use wait_for_completion_timeout to make
zynq_qspi_exec_mem_op not interruptible
- EDAC/i10nm: Fix NVDIMM detection
- drm/panfrost: Fix missing clk_disable_unprepare() on error in
panfrost_clk_init()
- media: TDA1997x: enable EDID support
- soc: rockchip: ROCKCHIP_GRF should not default to y, unconditionally
- media: cxd2880-spi: Fix an error handling path
- bpf: Fix a typo of reuseport map in bpf.h.
- bpf: Fix potential memleak and UAF in the verifier.
- ARM: dts: aspeed-g6: Fix HVI3C function-group in pinctrl dtsi
- arm64: dts: renesas: r8a77995: draak: Remove bogus adv7511w properties
- soc: qcom: rpmhpd: Use corner in power_off
- media: dvb-usb: fix uninit-value in dvb_usb_adapter_dvb_init
- media: dvb-usb: fix uninit-value in vp702x_read_mac_addr
- media: dvb-usb: Fix error handling in dvb_usb_i2c_init
- media: go7007: remove redundant initialization
- media: coda: fix frame_mem_ctrl for YUV420 and YVU420 formats
- Bluetooth: sco: prevent information leak in sco_conn_defer_accept()
- 6lowpan: iphc: Fix an off-by-one check of array index
- netns: protect netns ID lookups with RCU
- tcp: seq_file: Avoid skipping sk during tcp_seek_last_pos
- ARM: dts: meson8: Use a higher default GPU clock frequency
- ARM: dts: meson8b: odroidc1: Fix the pwm regulator supply properties
- ARM: dts: meson8b: mxq: Fix the pwm regulator supply properties
- ARM: dts: meson8b: ec100: Fix the pwm regulator supply properties
- net/mlx5e: Prohibit inner indir TIRs in IPoIB
- cgroup/cpuset: Fix a partition bug with hotplug
- net: cipso: fix warnings in netlbl_cipsov4_add_std
- i2c: highlander: add IRQ check
- leds: lt3593: Put fwnode in any case during ->probe()
- leds: trigger: audio: Add an activate callback to ensure the initial
brightness is set
- media: em28xx-input: fix refcount bug in em28xx_usb_disconnect
- media: venus: venc: Fix potential null pointer dereference on pointer fmt
- PCI: PM: Avoid forcing PCI_D0 for wakeup reasons inconsistently
- PCI: PM: Enable PME if it can be signaled from D3cold
- soc: qcom: smsm: Fix missed interrupts if state changes while masked
- debugfs: Return error during {full/open}_proxy_open() on rmmod
- Bluetooth: increase BTNAMSIZ to 21 chars to fix potential buffer overflow
- PM: EM: Increase energy calculation precision
- drm/msm/dpu: make dpu_hw_ctl_clear_all_blendstages clear necessary LMs
- arm64: dts: exynos: correct GIC CPU interfaces address range on Exynos7
- counter: 104-quad-8: Return error when invalid mode during ceiling_write
- Bluetooth: fix repeated calls to sco_sock_kill
- drm/msm/dsi: Fix some reference counted resource leaks
- usb: gadget: udc: at91: add IRQ check
- usb: phy: fsl-usb: add IRQ check
- usb: phy: twl6030: add IRQ checks
- usb: gadget: udc: renesas_usb3: Fix soc_device_match() abuse
- usb: host: ohci-tmio: add IRQ check
- usb: phy: tahvo: add IRQ check
- mac80211: Fix insufficient headroom issue for AMSDU
- lockd: Fix invalid lockowner cast after vfs_test_lock
- nfsd4: Fix forced-expiry locking
- usb: gadget: mv_u3d: request_irq() after initializing UDC
- mm/swap: consider max pages in iomap_swapfile_add_extent
- Bluetooth: add timeout sanity check to hci_inquiry
- i2c: iop3xx: fix deferred probing
- i2c: s3c2410: fix IRQ check
- rsi: fix error code in rsi_load_9116_firmware()
- rsi: fix an error code in rsi_probe()
- ASoC: Intel: Skylake: Leave data as is when invoking TLV IPCs
- ASoC: Intel: Skylake: Fix module resource and format selection
- mmc: dw_mmc: Fix issue with uninitialized dma_slave_config
- mmc: moxart: Fix issue with uninitialized dma_slave_config
- bpf: Fix possible out of bound write in narrow load handling
- CIFS: Fix a potencially linear read overflow
- i2c: mt65xx: fix IRQ check
- usb: ehci-orion: Handle errors of clk_prepare_enable() in probe
- usb: bdc: Fix an error handling path in 'bdc_probe()' when no suitable DMA
config is available
- tty: serial: fsl_lpuart: fix the wrong mapbase value
- ASoC: wcd9335: Fix a double irq free in the remove function
- ASoC: wcd9335: Fix a memory leak in the error handling path of the probe
function
- ASoC: wcd9335: Disable irq on slave ports in the remove function
- ath6kl: wmi: fix an error code in ath6kl_wmi_sync_point()
- bcma: Fix memory leak for internally-handled cores
- brcmfmac: pcie: fix oops on failure to resume and reprobe
- ipv6: make exception cache less predictible
- ipv4: make exception cache less predictible
- net: sched: Fix qdisc_rate_table refcount leak when get tcf_block failed
- net: qualcomm: fix QCA7000 checksum handling
- octeontx2-af: Fix loop in free and unmap counter
- ipv4: fix endianness issue in inet_rtm_getroute_build_skb()
- bpf: Introduce BPF nospec instruction for mitigating Spectre v4
- bpf: Fix leakage due to insufficient speculative store bypass mitigation
- bpf: verifier: Allocate idmap scratch in verifier env
- bpf: Fix pointer arithmetic mask tightening under state pruning
- tty: Fix data race between tiocsti() and flush_to_ldisc()
- perf/x86/amd/ibs: Extend PERF_PMU_CAP_NO_EXCLUDE to IBS Op
- x86/resctrl: Fix a maybe-uninitialized build warning treated as error
- KVM: s390: index kvm->arch.idle_mask by vcpu_idx
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is
adjusted
- KVM: nVMX: Unconditionally clear nested.pi_pending on nested VM-Enter
- fuse: truncate pagecache on atomic_o_trunc
- fuse: flush extending writes
- IMA: remove -Wmissing-prototypes warning
- IMA: remove the dependency on CRYPTO_MD5
- fbmem: don't allow too huge resolutions
- backlight: pwm_bl: Improve bootloader/kernel device handover
- clk: kirkwood: Fix a clocking boot regression
- Linux 5.4.146
* AMD A8-7680 (amdgpu): broken Xorg acceleration and hibernation
(LP: #1920674) // Focal update: v5.4.146 upstream stable release
(LP: #1946024)
- drm/amdgpu/acp: Make PM domain really work
* Focal update: v5.4.145 upstream stable release (LP: #1945517)
- fscrypt: add fscrypt_symlink_getattr() for computing st_size
- ext4: report correct st_size for encrypted symlinks
- f2fs: report correct st_size for encrypted symlinks
- ubifs: report correct st_size for encrypted symlinks
- kthread: Fix PF_KTHREAD vs to_kthread() race
- xtensa: fix kconfig unmet dependency warning for HAVE_FUTEX_CMPXCHG
- gpu: ipu-v3: Fix i.MX IPU-v3 offset calculations for (semi)planar U/V
formats
- reset: reset-zynqmp: Fixed the argument data type
- qed: Fix the VF msix vectors flow
- net: macb: Add a NULL check on desc_ptp
- qede: Fix memset corruption
- perf/x86/intel/pt: Fix mask of num_address_ranges
- perf/x86/amd/ibs: Work around erratum #1197
- perf/x86/amd/power: Assign pmu.module
- cryptoloop: add a deprecation warning
- ARM: 8918/2: only build return_address() if needed
- ALSA: hda/realtek: Workaround for conflicting SSID on ASUS ROG Strix G17
- ALSA: pcm: fix divide error in snd_pcm_lib_ioctl
- ARC: wireup clone3 syscall
- media: stkwebcam: fix memory leak in stk_camera_probe
- igmp: Add ip_mc_list lock in ip_check_mc_rcu
- USB: serial: mos7720: improve OOM-handling in read_mos_reg()
- ipv4/icmp: l3mdev: Perform icmp error route lookup on source device
routing
table (v2)
- powerpc/boot: Delete unneeded .globl _zimage_start
- net: ll_temac: Remove left-over debug message
- mm/page_alloc: speed up the iteration of max_order
- Revert "r8169: avoid link-up interrupt issue on RTL8106e if user enables
ASPM"
- x86/events/amd/iommu: Fix invalid Perf result due to IOMMU PMC
power-gating
- Revert "btrfs: compression: don't try to compress if we don't have enough
pages"
- ALSA: usb-audio: Add registration quirk for JBL Quantum 800
- usb: host: xhci-rcar: Don't reload firmware after the completion
- usb: mtu3: use @mult for HS isoc or intr
- usb: mtu3: fix the wrong HS mult value
- xhci: fix unsafe memory usage in xhci tracing
- x86/reboot: Limit Dell Optiplex 990 quirk to early BIOS versions
- PCI: Call Max Payload Size-related fixup quirks early
- Linux 5.4.145
* Focal update: v5.4.144 upstream stable release (LP: #1944756)
- net: qrtr: fix another OOB Read in qrtr_endpoint_post
- ARC: Fix CONFIG_STACKDEPOT
- netfilter: conntrack: collect all entries in one cycle
- once: Fix panic when module unload
- ovl: fix uninitialized pointer read in ovl_lookup_real_one()
- mmc: sdhci-msm: Update the software timeout value for sdhc
- mm, oom: make the calculation of oom badness more accurate
- can: usb: esd_usb2: esd_usb2_rx_event(): fix the interchange of the CAN RX
and TX error counters
- Revert "USB: serial: ch341: fix character loss at high transfer rates"
- USB: serial: option: add new VID/PID to support Fibocom FG150
- usb: dwc3: gadget: Fix dwc3_calc_trbs_left()
- usb: dwc3: gadget: Stop EP0 transfers during pullup disable
- scsi: core: Fix hang of freezing queue between blocking and running device
- RDMA/bnxt_re: Add missing spin lock initialization
- IB/hfi1: Fix possible null-pointer dereference in _extend_sdma_tx_descs()
- e1000e: Fix the max snoop/no-snoop latency for 10M
- RDMA/efa: Free IRQ vectors on error flow
- ip_gre: add validation for csum_start
- xgene-v2: Fix a resource leak in the error handling path of 'xge_probe()'
- net: marvell: fix MVNETA_TX_IN_PRGRS bit number
- rtnetlink: Return correct error on changing device netns
- net: hns3: clear hardware resource when loading driver
- net: hns3: fix duplicate node in VLAN list
- net: hns3: fix get wrong pfc_en when query PFC configuration
- drm/i915: Fix syncmap memory leak
- usb: gadget: u_audio: fix race condition on endpoint stop
- perf/x86/intel/uncore: Fix integer overflow on 23 bit left shift of a u32
- opp: remove WARN when no valid OPPs remain
- virtio: Improve vq->broken access to avoid any compiler optimization
- virtio_pci: Support surprise removal of virtio pci device
- vringh: Use wiov->used to check for read/write desc order
- qed: qed ll2 race condition fixes
- qed: Fix null-pointer dereference in qed_rdma_create_qp()
- drm: Copy drm_wait_vblank to user before returning
- drm/nouveau/disp: power down unused DP links during init
- net/rds: dma_map_sg is entitled to merge entries
- btrfs: fix race between marking inode needs to be logged and log syncing
- vt_kdsetmode: extend console locking
- bpf: Track contents of read-only maps as scalars
- bpf: Fix cast to pointer from integer of different size warning
- net: dsa: mt7530: fix VLAN traffic leaks again
- KVM: x86/mmu: Treat NX as used (not reserved) for all !TDP shadow MMUs
- arm64: dts: qcom: msm8994-angler: Fix gpio-reserved-ranges 85-88
- btrfs: fix NULL pointer dereference when deleting device by invalid id
- Revert "floppy: reintroduce O_NDELAY fix"
- Revert "parisc: Add assembly implementations for memset, strlen, strcpy,
strncpy and strcat"
- net: don't unconditionally copy_from_user a struct ifreq for socket ioctls
- audit: move put_tree() to avoid trim_trees refcount underflow and UAF
- Linux 5.4.144
linux-azure-cvm (5.4.0-1062.65+cvm1) focal; urgency=medium
* focal/linux-azure: 5.4.0-1062.65 -proposed tracker (LP: #1946370)
* Packaging resync (LP: #1786013)
- [Packaging] update variants
- [Packaging] update Ubuntu.md
- [Packaging] update update.conf
* linux-azure-cvm: Create a 5.4 based kernel (LP: #1948057)
- [Packaging] linux-azure-cvm: Initial packaging
- [Packaging] linux-azure-cvm: Update getabis
- [Packaging] linux-azure-cvm: Introduce copy-files and local-mangle
- [Packaging] linux-azure-cvm: Automatically sync with linux-azure
- [Packaging] linux-azure-cvm: Update the kernel flavour
- [Packaging] linux-azure-cvm: Use +fips as custom version suffix
- [Packaging] linux-azure-cvm: Add support for custom configs
- [Packaging] linux-azure-cvm: Disable UEFI signed kernel image
[ Ubuntu: 5.4.0-1062.65 ]
* focal/linux-azure: 5.4.0-1062.65 -proposed tracker (LP: #1946370)
* focal/linux: 5.4.0-89.100 -proposed tracker (LP: #1944901)
* Packaging resync (LP: #1786013)
- debian/dkms-versions -- update from kernel-versions (main/2021.09.27)
* ext4 journal recovery fails w/ data=journal + mmap (LP: #1847340)
- jbd2: introduce/export functions
jbd2_journal_submit|finish_inode_data_buffers()
- jbd2, ext4, ocfs2: introduce/use journal callbacks
j_submit|finish_inode_data_buffers()
- ext4: data=journal: fixes for ext4_page_mkwrite()
- ext4: data=journal: write-protect pages on j_submit_inode_data_buffers()
- ext4: fix mmap write protection for data=journal mode
* CVE-2021-40490
- ext4: fix race writing to an inline_data file while its xattrs are
changing
* Obsolete patch "UBUNTU: SAUCE: ext4: fix directory index node split
corruption" (LP: #1942902)
- Revert "UBUNTU: SAUCE: ext4: fix directory index node split corruption"
* psock_snd.sh in net from ubuntu_kernel_selftests ADT failure with
focal/groovy/hirsute/impish (LP: #1892213)
- selftests/net: remove min gso test in packet_snd
* Focal update: v5.4.143 upstream stable release (LP: #1944212)
- ext4: fix EXT4_MAX_LOGICAL_BLOCK macro
- x86/fpu: Make init_fpstate correct with optimized XSAVE
- ath: Use safer key clearing with key cache entries
- ath9k: Clear key cache explicitly on disabling hardware
- ath: Export ath_hw_keysetmac()
- ath: Modify ath_key_delete() to not need full key entry
- ath9k: Postpone key cache entry deletion for TXQ frames reference it
- mtd: cfi_cmdset_0002: fix crash when erasing/writing AMD cards
- media: zr364xx: propagate errors from zr364xx_start_readpipe()
- media: zr364xx: fix memory leaks in probe()
- media: drivers/media/usb: fix memory leak in zr364xx_probe
- USB: core: Avoid WARNings for 0-length descriptor requests
- dmaengine: xilinx_dma: Fix read-after-free bug when terminating transfers
- dmaengine: usb-dmac: Fix PM reference leak in usb_dmac_probe()
- ARM: dts: am43x-epos-evm: Reduce i2c0 bus speed for tps65218
- dmaengine: of-dma: router_xlate to return -EPROBE_DEFER if controller is
not
yet available
- scsi: megaraid_mm: Fix end of loop tests for list_for_each_entry()
- scsi: scsi_dh_rdac: Avoid crash during rdac_bus_attach()
- scsi: core: Avoid printing an error if target_alloc() returns -ENXIO
- scsi: core: Fix capacity set to zero after offlinining device
- ARM: dts: nomadik: Fix up interrupt controller node names
- net: usb: lan78xx: don't modify phy_device state concurrently
- drm/amd/display: Fix Dynamic bpp issue with 8K30 with Navi 1X
- Bluetooth: hidp: use correct wait queue when removing ctrl_wait
- iommu: Check if group is NULL before remove device
- cpufreq: armada-37xx: forbid cpufreq for 1.2 GHz variant
- dccp: add do-while-0 stubs for dccp_pr_debug macros
- virtio: Protect vqs list access
- vhost: Fix the calculation in vhost_overflow()
- bpf: Clear zext_dst of dead insns
- bnxt: don't lock the tx queue from napi poll
- bnxt: disable napi before canceling DIM
- net: 6pack: fix slab-out-of-bounds in decode_data
- ptp_pch: Restore dependency on PCI
- bnxt_en: Add missing DMA memory barriers
- vrf: Reset skb conntrack connection on VRF rcv
- virtio-net: support XDP when not more queues
- virtio-net: use NETIF_F_GRO_HW instead of NETIF_F_LRO
- net: qlcnic: add missed unlock in qlcnic_83xx_flash_read32
- net: mdio-mux: Don't ignore memory allocation errors
- net: mdio-mux: Handle -EPROBE_DEFER correctly
- ovs: clear skb->tstamp in forwarding path
- i40e: Fix ATR queue selection
- iavf: Fix ping is lost after untrusted VF had tried to change MAC
- ovl: add splice file read write helper
- mmc: dw_mmc: Fix hang on data CRC error
- ALSA: hda - fix the 'Capture Switch' value change notifications
- tracing / histogram: Fix NULL pointer dereference on strcmp() on NULL
event
name
- slimbus: messaging: start transaction ids from 1 instead of zero
- slimbus: messaging: check for valid transaction id
- slimbus: ngd: reset dma setup during runtime pm
- ipack: tpci200: fix many double free issues in tpci200_pci_probe
- ipack: tpci200: fix memory leak in the tpci200_register
- btrfs: prevent rename2 from exchanging a subvol with a directory from
different parents
- PCI: Increase D3 delay for AMD Renoir/Cezanne XHCI
- ASoC: intel: atom: Fix breakage for PCM buffer address setup
- mm, memcg: avoid stale protection values when cgroup is above protection
- mm: memcontrol: fix occasional OOMs due to proportional memory.low reclaim
- fs: warn about impending deprecation of mandatory locks
- netfilter: nft_exthdr: fix endianness of tcp option cast
- Linux 5.4.143
* Focal update: v5.4.142 upstream stable release (LP: #1944202)
- iio: adc: ti-ads7950: Ensure CS is deasserted after reading channels
- iio: humidity: hdc100x: Add margin to the conversion time
- iio: adc: Fix incorrect exit of for-loop
- ASoC: xilinx: Fix reference to PCM buffer address
- ASoC: intel: atom: Fix reference to PCM buffer address
- i2c: dev: zero out array used for i2c reads from userspace
- ceph: reduce contention in ceph_check_delayed_caps()
- ACPI: NFIT: Fix support for virtual SPA ranges
- libnvdimm/region: Fix label activation vs errors
- ieee802154: hwsim: fix GPF in hwsim_set_edge_lqi
- ieee802154: hwsim: fix GPF in hwsim_new_edge_nl
- ASoC: cs42l42: Correct definition of ADC Volume control
- ASoC: cs42l42: Don't allow SND_SOC_DAIFMT_LEFT_J
- ASoC: cs42l42: Fix inversion of ADC Notch Switch control
- ASoC: cs42l42: Remove duplicate control for WNF filter frequency
- netfilter: nf_conntrack_bridge: Fix memory leak when error
- ASoC: cs42l42: Fix LRCLK frame start edge
- net: dsa: mt7530: add the missing RxUnicast MIB counter
- platform/x86: pcengines-apuv2: revert wiring up simswitch GPIO as LED
- platform/x86: pcengines-apuv2: Add missing terminating entries to gpio-
lookup tables
- net: phy: micrel: Fix link detection on ksz87xx switch"
- ppp: Fix generating ifname when empty IFLA_IFNAME is specified
- net: sched: act_mirred: Reset ct info when mirror/redirect skb
- iavf: Set RSS LUT and key in reset handle path
- psample: Add a fwd declaration for skbuff
- net/mlx5: Fix return value from tracer initialization
- drm/meson: fix colour distortion from HDR set during vendor u-boot
- net: dsa: microchip: Fix ksz_read64()
- net: Fix memory leak in ieee802154_raw_deliver
- net: igmp: fix data-race in igmp_ifc_timer_expire()
- net: dsa: lan9303: fix broken backpressure in .port_fdb_dump
- net: dsa: lantiq: fix broken backpressure in .port_fdb_dump
- net: dsa: sja1105: fix broken backpressure in .port_fdb_dump
- net: bridge: fix memleak in br_add_if()
- net: linkwatch: fix failure to restore device state across suspend/resume
- tcp_bbr: fix u32 wrap bug in round logic if bbr_init() called after 2B
packets
- net: igmp: increase size of mr_ifc_count
- xen/events: Fix race in set_evtchn_to_irq
- vsock/virtio: avoid potential deadlock when vsock device remove
- nbd: Aovid double completion of a request
- powerpc/kprobes: Fix kprobe Oops happens in booke
- x86/tools: Fix objdump version check again
- genirq: Provide IRQCHIP_AFFINITY_PRE_STARTUP
- x86/msi: Force affinity setup before startup
- x86/ioapic: Force affinity setup before startup
- x86/resctrl: Fix default monitoring groups reporting
- genirq/msi: Ensure deactivation on teardown
- genirq/timings: Prevent potential array overflow in __irq_timings_store()
- PCI/MSI: Enable and mask MSI-X early
- PCI/MSI: Mask all unused MSI-X entries
- PCI/MSI: Enforce that MSI-X table entry is masked for update
- PCI/MSI: Enforce MSI[X] entry updates to be visible
- PCI/MSI: Do not set invalid bits in MSI mask
- PCI/MSI: Correct misleading comments
- PCI/MSI: Use msi_mask_irq() in pci_msi_shutdown()
- PCI/MSI: Protect msi_desc::masked for multi-MSI
- KVM: VMX: Use current VMCS to query WAITPKG support for MSR emulation
- ceph: add some lockdep assertions around snaprealm handling
- ceph: clean up locking annotation for ceph_get_snap_realm and
__lookup_snap_realm
- ceph: take snap_empty_lock atomically with snaprealm refcount change
- vmlinux.lds.h: Handle clang's module.{c,d}tor sections
- iommu/vt-d: Fix agaw for a supported 48 bit guest address width
- Linux 5.4.142
* Focal update: v5.4.141 upstream stable release (LP: #1943484)
- KVM: SVM: Fix off-by-one indexing when nullifying last used SEV VMCB
- tee: Correct inappropriate usage of TEE_SHM_DMA_BUF flag
- media: v4l2-mem2mem: always consider OUTPUT queue during poll
- tracing: Reject string operand in the histogram expression
- usb: dwc3: Stop active transfers before halting the controller
- usb: dwc3: gadget: Allow runtime suspend if UDC unbinded
- usb: dwc3: gadget: Restart DWC3 gadget when enabling pullup
- usb: dwc3: gadget: Prevent EP queuing while stopping transfers
- usb: dwc3: gadget: Clear DEP flags after stop transfers in ep disable
- usb: dwc3: gadget: Disable gadget IRQ during pullup disable
- usb: dwc3: gadget: Avoid runtime resume if disabling pullup
- KVM: X86: MMU: Use the correct inherited permissions to get shadow page
- USB:ehci:fix Kunpeng920 ehci hardware problem
- ALSA: hda: Add quirk for ASUS Flow x13
- ppp: Fix generating ppp unit id when ifname is not specified
- ovl: prevent private clone if bind mount is not allowed
- btrfs: make qgroup_free_reserved_data take btrfs_inode
- btrfs: make btrfs_qgroup_reserve_data take btrfs_inode
- btrfs: qgroup: allow to unreserve range without releasing other ranges
- btrfs: qgroup: try to flush qgroup space when we get -EDQUOT
- btrfs: transaction: Cleanup unused TRANS_STATE_BLOCKED
- btrfs: qgroup: remove ASYNC_COMMIT mechanism in favor of reserve retry-
after-EDQUOT
- btrfs: fix lockdep splat when enabling and disabling qgroups
- net: xilinx_emaclite: Do not print real IOMEM pointer
- btrfs: qgroup: don't commit transaction when we already hold the handle
- btrfs: export and rename qgroup_reserve_meta
- btrfs: don't flush from btrfs_delayed_inode_reserve_metadata
- Linux 5.4.141
* focal/linux: 5.4.0-88.99 -proposed tracker (LP: #1944747)
* Packaging resync (LP: #1786013)
- debian/dkms-versions -- update from kernel-versions (main/2021.09.06)
* please drop virtualbox-guest-dkms virtualbox-guest-source (LP: #1933248)
- Revert "UBUNTU: [Config] Disable virtualbox dkms build"
* please drop virtualbox-guest-dkms virtualbox-guest-source (LP: #1933248)
- [Config] Disable virtualbox dkms build
* Packaging resync (LP: #1786013)
- debian/dkms-versions -- update from kernel-versions (main/2021.09.06)
* LRMv5: switch primary version handling to kernel-versions data set
(LP: #1928921)
- [Packaging] switch to kernel-versions
* disable “CONFIG_HISI_DMA” config for ubuntu version (LP: #1936771)
- Disable CONFIG_HISI_DMA
- [Config] Record hisi_dma no longer built for arm64
* memory leaking when removing a profile (LP: #1939915)
- apparmor: Fix memory leak of profile proxy
* CryptoExpress EP11 cards are going offline (LP: #1939618)
- s390/zcrypt: Support for CCA protected key block version 2
- s390: Replace zero-length array with flexible-array member
- s390/zcrypt: Use scnprintf() for avoiding potential buffer overflow
- s390/zcrypt: replace snprintf/sprintf with scnprintf
- s390/ap: Remove ap device suspend and resume callbacks
- s390/zcrypt: use fallthrough;
- s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc
- s390/ap: remove power management code from ap bus and drivers
- s390/ap: introduce new ap function ap_get_qdev()
- s390/zcrypt: use kzalloc
- s390/zcrypt: fix smatch warnings
- s390/zcrypt: code beautification and struct field renames
- s390/zcrypt: split ioctl function into smaller code units
- s390/ap: rename and clarify ap state machine related stuff
- s390/zcrypt: provide cex4 cca sysfs attributes for cex3
- s390/ap: rework crypto config info and default domain code
- s390/zcrypt: simplify cca_findcard2 loop code
- s390/zcrypt: remove set_fs() invocation in zcrypt device driver
- s390/ap: remove unnecessary spin_lock_init()
- s390/zcrypt: Support for CCA APKA master keys
- s390/zcrypt: introduce msg tracking in zcrypt functions
- s390/ap: split ap queue state machine state from device state
- s390/ap: add error response code field for ap queue devices
- s390/ap: add card/queue deconfig state
- s390/sclp: Add support for SCLP AP adapter config/deconfig
- s390/ap: Support AP card SCLP config and deconfig operations
- s390/ap/zcrypt: revisit ap and zcrypt error handling
- s390/zcrypt: move ap_msg param one level up the call chain
- s390/zcrypt: Introduce Failure Injection feature
- s390/zcrypt: fix wrong format specifications
- s390/ap: fix ap devices reference counting
- s390/zcrypt: return EIO when msg retry limit reached
- s390/zcrypt: fix zcard and zqueue hot-unplug memleak
- s390/ap: Fix hanging ioctl caused by wrong msg counter
* memfd from ubuntu_kernel_selftests failed to build on B-5.4 (LP: #1926142)
- SAUCE: selftests/memfd: fix build when F_SEAL_FUTURE_WRITE is not defined
* [SRU] Ice driver causes the kernel to crash with Ubuntu 20.04.2 with ethtool
specific register commands (LP: #1939855)
- ice: Fix bad register reads
* ubunut_kernel_selftests: memory-hotplug: avoid spamming logs with
dump_page() (LP: #1941829)
- selftests: memory-hotplug: avoid spamming logs with dump_page(), ratio
limit
hot-remove error test
* e1000e blocks the boot process when it tried to write checksum to its NVM
(LP: #1936998)
- e1000e: Do not take care about recovery NVM checksum
* Focal update: v5.4.140 upstream stable release (LP: #1941798)
- Revert "ACPICA: Fix memory leak caused by _CID repair function"
- ALSA: seq: Fix racy deletion of subscriber
- arm64: dts: ls1028a: fix node name for the sysclk
- ARM: imx: add missing iounmap()
- ARM: imx: add missing clk_disable_unprepare()
- ARM: dts: imx6qdl-sr-som: Increase the PHY reset duration to 10ms
- ARM: dts: colibri-imx6ull: limit SDIO clock to 25MHz
- ARM: imx: fix missing 3rd argument in macro imx_mmdc_perf_init
- ARM: dts: imx: Swap M53Menlo pinctrl_power_button/pinctrl_power_out pins
- arm64: dts: armada-3720-turris-mox: remove mrvl,i2c-fast-mode
- ALSA: usb-audio: fix incorrect clock source setting
- clk: stm32f4: fix post divisor setup for I2S/SAI PLLs
- ARM: dts: am437x-l4: fix typo in can@0 node
- omap5-board-common: remove not physically existing vdds_1v8_main fixed-
regulator
- spi: imx: mx51-ecspi: Reinstate low-speed CONFIGREG delay
- spi: imx: mx51-ecspi: Fix low-speed CONFIGREG delay calculation
- scsi: sr: Return correct event when media event code is 3
- media: videobuf2-core: dequeue if start_streaming fails
- dmaengine: imx-dma: configure the generic DMA type to make it work
- net, gro: Set inner transport header offset in tcp/udp GRO hook
- net: dsa: sja1105: overwrite dynamic FDB entries with static ones in
.port_fdb_add
- net: dsa: sja1105: invalidate dynamic FDB entries learned concurrently
with
statically added ones
- net: phy: micrel: Fix detection of ksz87xx switch
- net: natsemi: Fix missing pci_disable_device() in probe and remove
- gpio: tqmx86: really make IRQ optional
- sctp: move the active_key update after sh_keys is added
- nfp: update ethtool reporting of pauseframe control
- net: ipv6: fix returned variable type in ip6_skb_dst_mtu
- mips: Fix non-POSIX regexp
- bnx2x: fix an error code in bnx2x_nic_load()
- net: pegasus: fix uninit-value in get_interrupt_interval
- net: fec: fix use-after-free in fec_drv_remove
- net: vxge: fix use-after-free in vxge_device_unregister
- blk-iolatency: error out if blk_get_queue() failed in
iolatency_set_limit()
- Bluetooth: defer cleanup of resources in hci_unregister_dev()
- USB: usbtmc: Fix RCU stall warning
- USB: serial: option: add Telit FD980 composition 0x1056
- USB: serial: ch341: fix character loss at high transfer rates
- USB: serial: ftdi_sio: add device ID for Auto-M3 OP-COM v2
- firmware_loader: use -ETIMEDOUT instead of -EAGAIN in
fw_load_sysfs_fallback
- firmware_loader: fix use-after-free in firmware_fallback_sysfs
- ALSA: hda/realtek: add mic quirk for Acer SF314-42
- ALSA: usb-audio: Add registration quirk for JBL Quantum 600
- usb: cdns3: Fixed incorrect gadget state
- usb: gadget: f_hid: added GET_IDLE and SET_IDLE handlers
- usb: gadget: f_hid: fixed NULL pointer dereference
- usb: gadget: f_hid: idle uses the highest byte for duration
- usb: otg-fsm: Fix hrtimer list corruption
- clk: fix leak on devm_clk_bulk_get_all() unwind
- scripts/tracing: fix the bug that can't parse raw_trace_func
- tracing / histogram: Give calculation hist_fields a size
- optee: Clear stale cache entries during initialization
- tee: add tee_shm_alloc_kernel_buf()
- optee: Fix memory leak when failing to register shm pages
- tpm_ftpm_tee: Free and unregister TEE shared memory during kexec
- staging: rtl8723bs: Fix a resource leak in sd_int_dpc
- staging: rtl8712: get rid of flush_scheduled_work
- media: rtl28xxu: fix zero-length control request
- pipe: increase minimum default pipe size to 2 pages
- ext4: fix potential htree corruption when growing large_dir directories
- serial: tegra: Only print FIFO error message when an error occurs
- serial: 8250_mtk: fix uart corruption issue when rx power off
- serial: 8250: Mask out floating 16/32-bit bus bits
- MIPS: Malta: Do not byte-swap accesses to the CBUS UART
- serial: 8250_pci: Enumerate Elkhart Lake UARTs via dedicated driver
- serial: 8250_pci: Avoid irq sharing for MSI(-X) interrupts.
- timers: Move clearing of base::timer_running under base:: Lock
- pcmcia: i82092: fix a null pointer dereference bug
- md/raid10: properly indicate failure when ending a failed write request
- KVM: x86: accept userspace interrupt only if no event is injected
- KVM: Do not leak memory for duplicate debugfs directories
- KVM: x86/mmu: Fix per-cpu counter corruption on 32-bit builds
- arm64: vdso: Avoid ISB after reading from cntvct_el0
- soc: ixp4xx: fix printing resources
- spi: meson-spicc: fix memory leak in meson_spicc_remove
- soc: ixp4xx/qmgr: fix invalid __iomem access
- perf/x86/amd: Don't touch the AMD64_EVENTSEL_HOSTONLY bit inside the guest
- bpf, selftests: Adjust few selftest result_unpriv outcomes
- libata: fix ata_pio_sector for CONFIG_HIGHMEM
- reiserfs: add check for root_inode in reiserfs_fill_super
- reiserfs: check directory items on read from disk
- virt_wifi: fix error on connect
- alpha: Send stop IPI to send to online CPUs
- net/qla3xxx: fix schedule while atomic in ql_wait_for_drvr_lock and
ql_adapter_reset
- arm64: fix compat syscall return truncation
- Linux 5.4.140
* Focal update: v5.4.139 upstream stable release (LP: #1941796)
- btrfs: delete duplicated words + other fixes in comments
- btrfs: do not commit logs and transactions during link and rename
operations
- btrfs: fix race causing unnecessary inode logging during link and rename
- btrfs: fix lost inode on log replay after mix of fsync, rename and inode
eviction
- regulator: rt5033: Fix n_voltages settings for BUCK and LDO
- spi: stm32h7: fix full duplex irq handler handling
- ASoC: tlv320aic31xx: fix reversed bclk/wclk master bits
- r8152: Fix potential PM refcount imbalance
- qed: fix possible unpaired spin_{un}lock_bh in _qed_mcp_cmd_and_union()
- net: Fix zero-copy head len calculation.
- nvme: fix nvme_setup_command metadata trace event
- ACPI: fix NULL pointer dereference
- Revert "Bluetooth: Shutdown controller after workqueues are flushed or
cancelled"
- firmware: arm_scmi: Ensure drivers provide a probe function
- firmware: arm_scmi: Add delayed response status check
- bpf: Inherit expanded/patched seen count from old aux data
- bpf: Do not mark insn as seen under speculative path verification
- bpf: Fix leakage under speculation on mispredicted branches
- bpf: Test_verifier, add alu32 bounds tracking tests
- bpf, selftests: Add a verifier test for assigning 32bit reg states to
64bit
ones
- bpf, selftests: Adjust few selftest outcomes wrt unreachable code
- spi: mediatek: Fix fifo transfer
- Linux 5.4.139
* Focal update: v5.4.138 upstream stable release (LP: #1940559)
- net_sched: check error pointer in tcf_dump_walker()
- x86/asm: Ensure asm/proto.h can be included stand-alone
- btrfs: fix rw device counting in __btrfs_free_extra_devids
- btrfs: mark compressed range uptodate only if all bio succeed
- x86/kvm: fix vcpu-id indexed array sizes
- KVM: add missing compat KVM_CLEAR_DIRTY_LOG
- ocfs2: fix zero out valid data
- ocfs2: issue zeroout to EOF blocks
- can: j1939: j1939_xtp_rx_dat_one(): fix rxtimer value between consecutive
TP.DT to 750ms
- can: raw: raw_setsockopt(): fix raw_rcv panic for sock UAF
- can: mcba_usb_start(): add missing urb->transfer_dma initialization
- can: usb_8dev: fix memory leak
- can: ems_usb: fix memory leak
- can: esd_usb2: fix memory leak
- HID: wacom: Re-enable touch by default for Cintiq 24HDT / 27QHDT
- NIU: fix incorrect error return, missed in previous revert
- nfc: nfcsim: fix use after free during module unload
- cfg80211: Fix possible memory leak in function cfg80211_bss_update
- netfilter: conntrack: adjust stop timestamp to real expiry value
- netfilter: nft_nat: allow to specify layer 4 protocol NAT only
- i40e: Fix logic of disabling queues
- i40e: Fix firmware LLDP agent related warning
- i40e: Fix queue-to-TC mapping on Tx
- i40e: Fix log TC creation failure when max num of queues is exceeded
- tipc: fix sleeping in tipc accept routine
- net: Set true network header for ECN decapsulation
- mlx4: Fix missing error code in mlx4_load_one()
- net: llc: fix skb_over_panic
- net/mlx5: Fix flow table chaining
- net/mlx5e: Fix nullptr in mlx5e_hairpin_get_mdev()
- sctp: fix return value check in __sctp_rcv_asconf_lookup
- tulip: windbond-840: Fix missing pci_disable_device() in probe and remove
- sis900: Fix missing pci_disable_device() in probe and remove
- can: hi311x: fix a signedness bug in hi3110_cmd()
- PCI: mvebu: Setup BAR0 in order to fix MSI
- powerpc/pseries: Fix regression while building external modules
- i40e: Add additional info to PHY type error
- can: j1939: j1939_session_deactivate(): clarify lifetime of session object
- Linux 5.4.138
* Focal update: v5.4.137 upstream stable release (LP: #1940557)
- selftest: fix build error in tools/testing/selftests/vm/userfaultfd.c
- tools: Allow proper CC/CXX/... override with LLVM=1 in Makefile.include
- KVM: x86: determine if an exception has an error code only when injecting
it.
- af_unix: fix garbage collect vs MSG_PEEK
- workqueue: fix UAF in pwq_unbound_release_workfn()
- cgroup1: fix leaked context root causing sporadic NULL deref in LTP
- net/802/mrp: fix memleak in mrp_request_join()
- net/802/garp: fix memleak in garp_request_join()
- net: annotate data race around sk_ll_usec
- sctp: move 198 addresses from unusable to private scope
- ipv6: allocate enough headroom in ip6_finish_output2()
- hfs: add missing clean-up in hfs_fill_super
- hfs: fix high memory mapping in hfs_bnode_read
- hfs: add lock nesting notation to hfs_find_init
- firmware: arm_scmi: Fix possible scmi_linux_errmap buffer overflow
- firmware: arm_scmi: Fix range check for the maximum number of pending
messages
- cifs: fix the out of range assignment to bit fields in
parse_server_interfaces
- iomap: remove the length variable in iomap_seek_data
- iomap: remove the length variable in iomap_seek_hole
- ARM: dts: versatile: Fix up interrupt controller node names
- ipv6: ip6_finish_output2: set sk into newly allocated nskb
- Linux 5.4.137
* Focal update: v5.4.136 upstream stable release (LP: #1939899)
- igc: Fix use-after-free error during reset
- igb: Fix use-after-free error during reset
- igc: change default return of igc_read_phy_reg()
- ixgbe: Fix an error handling path in 'ixgbe_probe()'
- igc: Prefer to use the pci_release_mem_regions method
- igc: Fix an error handling path in 'igc_probe()'
- igb: Fix an error handling path in 'igb_probe()'
- fm10k: Fix an error handling path in 'fm10k_probe()'
- e1000e: Fix an error handling path in 'e1000_probe()'
- iavf: Fix an error handling path in 'iavf_probe()'
- igb: Check if num of q_vectors is smaller than max before array access
- igb: Fix position of assignment to *ring
- gve: Fix an error handling path in 'gve_probe()'
- ipv6: fix 'disable_policy' for fwd packets
- selftests: icmp_redirect: remove from checking for IPv6 route get
- selftests: icmp_redirect: IPv6 PMTU info should be cleared after redirect
- pwm: sprd: Ensure configuring period and duty_cycle isn't wrongly skipped
- cxgb4: fix IRQ free race during driver unload
- nvme-pci: do not call nvme_dev_remove_admin from nvme_remove
- perf probe: Fix dso->nsinfo refcounting
- perf env: Fix sibling_dies memory leak
- perf test session_topology: Delete session->evlist
- perf test event_update: Fix memory leak of evlist
- perf dso: Fix memory leak in dso__new_map()
- perf script: Fix memory 'threads' and 'cpus' leaks on exit
- perf lzma: Close lzma stream on exit
- perf probe-file: Delete namelist in del_events() on the error path
- perf data: Close all files in close_dir()
- spi: imx: add a check for speed_hz before calculating the clock
- spi: stm32: Use dma_request_chan() instead dma_request_slave_channel()
- spi: stm32: fixes pm_runtime calls in probe/remove
- regulator: hi6421: Use correct variable type for regmap api val argument
- regulator: hi6421: Fix getting wrong drvdata
- spi: mediatek: fix fifo rx mode
- ASoC: rt5631: Fix regcache sync errors on resume
- liquidio: Fix unintentional sign extension issue on left shift of u16
- s390/bpf: Perform r1 range checking before accessing jit->seen_reg[r1]
- bpf, sockmap, tcp: sk_prot needs inuse_idx set for proc stats
- bpftool: Check malloc return value in mount_bpffs_for_pin
- net: fix uninit-value in caif_seqpkt_sendmsg
- efi/tpm: Differentiate missing and invalid final event log table.
- net: decnet: Fix sleeping inside in af_decnet
- KVM: PPC: Book3S: Fix CONFIG_TRANSACTIONAL_MEM=n crash
- KVM: PPC: Fix kvm_arch_vcpu_ioctl vcpu_load leak
- net: sched: fix memory leak in tcindex_partial_destroy_work
- netrom: Decrease sock refcount when sock timers expire
- scsi: iscsi: Fix iface sysfs attr detection
- scsi: target: Fix protect handling in WRITE SAME(32)
- spi: cadence: Correct initialisation of runtime PM again
- bnxt_en: Improve bnxt_ulp_stop()/bnxt_ulp_start() call sequence.
- bnxt_en: Refresh RoCE capabilities in bnxt_ulp_probe()
- bnxt_en: Add missing check for BNXT_STATE_ABORT_ERR in bnxt_fw_rset_task()
- bnxt_en: Check abort error state in bnxt_half_open_nic()
- net: hisilicon: rename CACHE_LINE_MASK to avoid redefinition
- net/tcp_fastopen: fix data races around tfo_active_disable_stamp
- net: hns3: fix rx VLAN offload state inconsistent issue
- net/sched: act_skbmod: Skip non-Ethernet packets
- ipv6: fix another slab-out-of-bounds in fib6_nh_flush_exceptions
- nvme-pci: don't WARN_ON in nvme_reset_work if ctrl.state is not RESETTING
- Revert "USB: quirks: ignore remote wake-up on Fibocom L850-GL LTE modem"
- afs: Fix tracepoint string placement with built-in AFS
- r8169: Avoid duplicate sysfs entry creation error
- nvme: set the PRACT bit when using Write Zeroes with T10 PI
- sctp: update active_key for asoc when old key is being replaced
- net: sched: cls_api: Fix the the wrong parameter
- drm/panel: raspberrypi-touchscreen: Prevent double-free
- proc: Avoid mixing integer types in mem_rw()
- s390/ftrace: fix ftrace_update_ftrace_func implementation
- s390/boot: fix use of expolines in the DMA code
- ALSA: usb-audio: Add missing proc text entry for BESPOKEN type
- ALSA: usb-audio: Add registration quirk for JBL Quantum headsets
- ALSA: sb: Fix potential ABBA deadlock in CSP driver
- ALSA: hdmi: Expose all pins on MSI MS-7C94 board
- xhci: Fix lost USB 2 remote wake
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow
- KVM: PPC: Book3S HV Nested: Sanitise H_ENTER_NESTED TM state
- usb: hub: Disable USB 3 device initiated lpm if exit latency is too high
- usb: hub: Fix link power management max exit latency (MEL) calculations
- USB: usb-storage: Add LaCie Rugged USB3-FW to IGNORE_UAS
- usb: max-3421: Prevent corruption of freed memory
- usb: renesas_usbhs: Fix superfluous irqs happen after usb_pkt_pop()
- USB: serial: option: add support for u-blox LARA-R6 family
- USB: serial: cp210x: fix comments for GE CS1000
- USB: serial: cp210x: add ID for CEL EM3588 USB ZigBee stick
- usb: dwc2: gadget: Fix sending zero length packet in DDMA mode.
- firmware/efi: Tell memblock about EFI iomem reservations
- tracing/histogram: Rename "cpu" to "common_cpu"
- tracing: Fix bug in rb_per_cpu_empty() that might cause deadloop.
- btrfs: check for missing device in btrfs_trim_fs
- media: ngene: Fix out-of-bounds bug in ngene_command_config_free_buf()
- ixgbe: Fix packet corruption due to missing DMA sync
- selftest: use mmap instead of posix_memalign to allocate memory
- userfaultfd: do not untag user pointers
- hugetlbfs: fix mount mode command line processing
- rbd: don't hold lock_rwsem while running_list is being drained
- rbd: always kick acquire on "acquired" and "released" notifications
- nds32: fix up stack guard gap
- drm: Return -ENOTTY for non-drm ioctls
- net: dsa: mv88e6xxx: use correct .stats_set_histogram() on Topaz
- net: bcmgenet: ensure EXT_ENERGY_DET_MASK is clear
- iio: accel: bma180: Use explicit member assignment
- iio: accel: bma180: Fix BMA25x bandwidth register values
- btrfs: compression: don't try to compress if we don't have enough pages
- PCI: Mark AMD Navi14 GPU ATS as broken
- perf inject: Close inject.output on exit
- xhci: add xhci_get_virt_ep() helper
- Linux 5.4.136
* Focal update: v5.4.135 upstream stable release (LP: #1939442)
- ARM: dts: gemini: rename mdio to the right name
- ARM: dts: gemini: add device_type on pci
- ARM: dts: rockchip: fix pinctrl sleep nodename for rk3036-kylin and rk3288
- arm64: dts: rockchip: fix pinctrl sleep nodename for rk3399.dtsi
- ARM: dts: rockchip: Fix the timer clocks order
- ARM: dts: rockchip: Fix IOMMU nodes properties on rk322x
- ARM: dts: rockchip: Fix power-controller node names for rk3066a
- ARM: dts: rockchip: Fix power-controller node names for rk3188
- ARM: dts: rockchip: Fix power-controller node names for rk3288
- arm64: dts: rockchip: Fix power-controller node names for px30
- arm64: dts: rockchip: Fix power-controller node names for rk3328
- reset: ti-syscon: fix to_ti_syscon_reset_data macro
- ARM: brcmstb: dts: fix NAND nodes names
- ARM: Cygnus: dts: fix NAND nodes names
- ARM: NSP: dts: fix NAND nodes names
- ARM: dts: BCM63xx: Fix NAND nodes names
- ARM: dts: Hurricane 2: Fix NAND nodes names
- ARM: dts: imx6: phyFLEX: Fix UART hardware flow control
- ARM: imx: pm-imx5: Fix references to imx5_cpu_suspend_info
- rtc: mxc_v2: add missing MODULE_DEVICE_TABLE
- kbuild: sink stdout from cmd for silent build
- ARM: dts: am57xx-cl-som-am57x: fix ti,no-reset-on-init flag for gpios
- ARM: dts: am437x-gp-evm: fix ti,no-reset-on-init flag for gpios
- ARM: dts: stm32: fix gpio-keys node on STM32 MCU boards
- ARM: dts: stm32: fix RCC node name on stm32f429 MCU
- ARM: dts: stm32: fix timer nodes on STM32 MCU to prevent warnings
- arm64: dts: juno: Update SCPI nodes as per the YAML schema
- ARM: dts: rockchip: fix supply properties in io-domains nodes
- ARM: dts: stm32: fix i2c node name on stm32f746 to prevent warnings
- ARM: dts: stm32: move stmmac axi config in ethernet node on stm32mp15
- soc/tegra: fuse: Fix Tegra234-only builds
- firmware: tegra: bpmp: Fix Tegra234-only builds
- arm64: dts: ls208xa: remove bus-num from dspi node
- arm64: dts: imx8mq: assign PCIe clocks
- thermal/core: Correct function name thermal_zone_device_unregister()
- kbuild: mkcompile_h: consider timestamp if KBUILD_BUILD_TIMESTAMP is set
- rtc: max77686: Do not enforce (incorrect) interrupt trigger type
- scsi: aic7xxx: Fix unintentional sign extension issue on left shift of u8
- scsi: libsas: Add LUN number check in .slave_alloc callback
- scsi: libfc: Fix array index out of bound exception
- scsi: qedf: Add check to synchronize abort and flush
- sched/fair: Fix CFS bandwidth hrtimer expiry type
- s390: introduce proper type handling call_on_stack() macro
- cifs: prevent NULL deref in cifs_compose_mount_options()
- arm64: dts: armada-3720-turris-mox: add firmware node
- firmware: turris-mox-rwtm: add marvell,armada-3700-rwtm-firmware
compatible
string
- arm64: dts: marvell: armada-37xx: move firmware node to generic dtsi file
- f2fs: Show casefolding support only when supported
- usb: cdns3: Enable TDL_CHK only for OUT ep
- Revert "UBUNTU: SAUCE: Revert "mm: memcg/slab: fix memory leak at non-root
kmem_cache destroy""
- mm: slab: fix kmem_cache_create failed when sysfs node not destroyed
- dm writecache: return the exact table values that were set
- net: dsa: mv88e6xxx: enable .port_set_policy() on Topaz
- net: dsa: mv88e6xxx: enable .rmu_disable() on Topaz
- net: ipv6: fix return value of ip6_skb_dst_mtu
- netfilter: ctnetlink: suspicious RCU usage in ctnetlink_dump_helpinfo
- net/sched: act_ct: fix err check for nf_conntrack_confirm
- net: bridge: sync fdb to new unicast-filtering ports
- net: bcmgenet: Ensure all TX/RX queues DMAs are disabled
- net: ip_tunnel: fix mtu calculation for ETHER tunnel devices
- net: moxa: fix UAF in moxart_mac_probe
- net: qcom/emac: fix UAF in emac_remove
- net: ti: fix UAF in tlan_remove_one
- net: send SYNACK packet with accepted fwmark
- net: validate lwtstate->data before returning from skb_tunnel_info()
- net: fddi: fix UAF in fza_probe
- dma-buf/sync_file: Don't leak fences on merge failure
- tcp: annotate data races around tp->mtu_info
- ipv6: tcp: drop silly ICMPv6 packet too big messages
- bpftool: Properly close va_list 'ap' by va_end() on error
- perf test bpf: Free obj_buf
- udp: annotate data races around unix_sk(sk)->gso_size
- Linux 5.4.135
* Focal update: v5.4.134 upstream stable release (LP: #1939440)
- KVM: mmio: Fix use-after-free Read in
kvm_vm_ioctl_unregister_coalesced_mmio
- KVM: x86: Use guest MAXPHYADDR from CPUID.0x8000_0008 iff TDP is enabled
- KVM: X86: Disable hardware breakpoints unconditionally before
kvm_x86->run()
- scsi: core: Fix bad pointer dereference when ehandler kthread is invalid
- tracing: Do not reference char * as a string in histograms
- cgroup: verify that source is a string
- fbmem: Do not delete the mode that is still in use
- net: moxa: Use devm_platform_get_and_ioremap_resource()
- dmaengine: fsl-qdma: check dma_set_mask return value
- srcu: Fix broken node geometry after early ssp init
- tty: serial: fsl_lpuart: fix the potential risk of division or modulo by
zero
- misc/libmasm/module: Fix two use after free in ibmasm_init_one
- misc: alcor_pci: fix null-ptr-deref when there is no PCI bridge
- iio: gyro: fxa21002c: Balance runtime pm + use
pm_runtime_resume_and_get().
- iio: magn: bmc150: Balance runtime pm + use pm_runtime_resume_and_get()
- ALSA: usx2y: Don't call free_pages_exact() with NULL address
- Revert "ALSA: bebob/oxfw: fix Kconfig entry for Mackie d.2 Pro"
- w1: ds2438: fixing bug that would always get page0
- scsi: hisi_sas: Propagate errors in interrupt_init_v1_hw()
- scsi: lpfc: Fix "Unexpected timeout" error in direct attach topology
- scsi: lpfc: Fix crash when lpfc_sli4_hba_setup() fails to initialize the
SGLs
- scsi: core: Cap scsi_host cmd_per_lun at can_queue
- ALSA: ac97: fix PM reference leak in ac97_bus_remove()
- tty: serial: 8250: serial_cs: Fix a memory leak in error handling path
- scsi: scsi_dh_alua: Check for negative result value
- fs/jfs: Fix missing error code in lmLogInit()
- scsi: megaraid_sas: Fix resource leak in case of probe failure
- scsi: megaraid_sas: Early detection of VD deletion through RaidMap update
- scsi: megaraid_sas: Handle missing interrupts while re-enabling IRQs
- scsi: iscsi: Add iscsi_cls_conn refcount helpers
- scsi: iscsi: Fix conn use after free during resets
- scsi: iscsi: Fix shost->max_id use
- scsi: qedi: Fix null ref during abort handling
- mfd: da9052/stmpe: Add and modify MODULE_DEVICE_TABLE
- mfd: cpcap: Fix cpcap dmamask not set warnings
- ASoC: img: Fix PM reference leak in img_i2s_in_probe()
- serial: tty: uartlite: fix console setup
- s390/sclp_vt220: fix console name to match device
- ALSA: sb: Fix potential double-free of CSP mixer elements
- powerpc/ps3: Add dma_mask to ps3_dma_region
- iommu/arm-smmu: Fix arm_smmu_device refcount leak when arm_smmu_rpm_get
fails
- iommu/arm-smmu: Fix arm_smmu_device refcount leak in address translation
- gpio: zynq: Check return value of pm_runtime_get_sync
- ALSA: ppc: fix error return code in snd_pmac_probe()
- selftests/powerpc: Fix "no_handler" EBB selftest
- gpio: pca953x: Add support for the On Semi pca9655
- ASoC: soc-core: Fix the error return code in
snd_soc_of_parse_audio_routing()
- s390/processor: always inline stap() and __load_psw_mask()
- s390/ipl_parm: fix program check new psw handling
- s390/mem_detect: fix diag260() program check new psw handling
- s390/mem_detect: fix tprot() program check new psw handling
- Input: hideep - fix the uninitialized use in hideep_nvm_unlock()
- ALSA: bebob: add support for ToneWeal FW66
- ALSA: usb-audio: scarlett2: Fix 18i8 Gen 2 PCM Input count
- ALSA: usb-audio: scarlett2: Fix data_mutex lock
- ALSA: usb-audio: scarlett2: Fix scarlett2_*_ctl_put() return values
- usb: gadget: f_hid: fix endianness issue with descriptors
- usb: gadget: hid: fix error return code in hid_bind()
- powerpc/boot: Fixup device-tree on little endian
- ASoC: Intel: kbl_da7219_max98357a: shrink platform_id below 20 characters
- backlight: lm3630a: Fix return code of .update_status() callback
- ALSA: hda: Add IRQ check for platform_get_irq()
- ALSA: usb-audio: scarlett2: Fix 6i6 Gen 2 line out descriptions
- staging: rtl8723bs: fix macro value for 2.4Ghz only device
- intel_th: Wait until port is in reset before programming it
- i2c: core: Disable client irq on reboot/shutdown
- power: supply: sc27xx: Add missing MODULE_DEVICE_TABLE
- power: supply: sc2731_charger: Add missing MODULE_DEVICE_TABLE
- pwm: spear: Don't modify HW state in .remove callback
- power: supply: ab8500: Avoid NULL pointers
- power: supply: max17042: Do not enforce (incorrect) interrupt trigger type
- power: reset: gpio-poweroff: add missing MODULE_DEVICE_TABLE
- ARM: 9087/1: kprobes: test-thumb: fix for LLVM_IAS=1
- PCI/P2PDMA: Avoid pci_get_slot(), which may sleep
- watchdog: Fix possible use-after-free in wdt_startup()
- watchdog: sc520_wdt: Fix possible use-after-free in wdt_turnoff()
- watchdog: Fix possible use-after-free by calling del_timer_sync()
- watchdog: imx_sc_wdt: fix pretimeout
- x86/fpu: Return proper error codes from user access functions
- PCI: tegra: Add missing MODULE_DEVICE_TABLE
- orangefs: fix orangefs df output.
- ceph: remove bogus checks and WARN_ONs from ceph_set_page_dirty
- NFS: nfs_find_open_context() may only select open files
- power: supply: charger-manager: add missing MODULE_DEVICE_TABLE
- power: supply: ab8500: add missing MODULE_DEVICE_TABLE
- pwm: img: Fix PM reference leak in img_pwm_enable()
- pwm: tegra: Don't modify HW state in .remove callback
- ACPI: AMBA: Fix resource name in /proc/iomem
- ACPI: video: Add quirk for the Dell Vostro 3350
- virtio-blk: Fix memory leak among suspend/resume procedure
- virtio_net: Fix error handling in virtnet_restore()
- virtio_console: Assure used length from device is limited
- x86/signal: Detect and prevent an alternate signal stack overflow
- f2fs: add MODULE_SOFTDEP to ensure crc32 is included in the initramfs
- PCI/sysfs: Fix dsm_label_utf16s_to_utf8s() buffer overrun
- power: supply: rt5033_battery: Fix device tree enumeration
- NFSv4: Initialise connection to the server in nfs4_alloc_client()
- um: fix error return code in slip_open()
- um: fix error return code in winch_tramp()
- watchdog: aspeed: fix hardware timeout calculation
- nfs: fix acl memory leak of posix_acl_create()
- ubifs: Set/Clear I_LINKABLE under i_lock for whiteout inode
- PCI: iproc: Fix multi-MSI base vector number allocation
- PCI: iproc: Support multi-MSI only on uniprocessor kernel
- x86/fpu: Limit xstate copy size in xstateregs_set()
- pwm: imx1: Don't disable clocks at device remove time
- virtio_net: move tx vq operation under tx queue lock
- nvme-tcp: can't set sk_user_data without write_lock
- ALSA: isa: Fix error return code in snd_cmi8330_probe()
- NFSv4/pNFS: Don't call _nfs4_pnfs_v3_ds_connect multiple times
- hexagon: use common DISCARDS macro
- ARM: dts: gemini-rut1xx: remove duplicate ethernet node
- reset: a10sr: add missing of_match_table reference
- ARM: exynos: add missing of_node_put for loop iteration
- ARM: dts: exynos: fix PWM LED max brightness on Odroid XU/XU3
- ARM: dts: exynos: fix PWM LED max brightness on Odroid HC1
- ARM: dts: exynos: fix PWM LED max brightness on Odroid XU4
- memory: atmel-ebi: add missing of_node_put for loop iteration
- reset: brcmstb: Add missing MODULE_DEVICE_TABLE
- memory: pl353: Fix error return code in pl353_smc_probe()
- rtc: fix snprintf() checking in is_rtc_hctosys()
- arm64: dts: renesas: v3msk: Fix memory size
- ARM: dts: r8a7779, marzen: Fix DU clock names
- firmware: tegra: Fix error return code in tegra210_bpmp_init()
- firmware: arm_scmi: Reset Rx buffer to max size during async commands
- ARM: dts: BCM5301X: Fixup SPI binding
- reset: bail if try_module_get() fails
- memory: fsl_ifc: fix leak of IO mapping on probe failure
- memory: fsl_ifc: fix leak of private memory on probe failure
- ARM: dts: am335x: align ti,pindir-d0-out-d1-in property with dt-shema
- ARM: dts: am437x: align ti,pindir-d0-out-d1-in property with dt-shema
- ARM: dts: imx6q-dhcom: Fix ethernet reset time properties
- ARM: dts: imx6q-dhcom: Fix ethernet plugin detection problems
- ARM: dts: imx6q-dhcom: Add gpios pinctrl for i2c bus recovery
- thermal/drivers/rcar_gen3_thermal: Fix coefficient calculations
- firmware: turris-mox-rwtm: fix reply status decoding function
- firmware: turris-mox-rwtm: report failures better
- firmware: turris-mox-rwtm: fail probing when firmware does not support
hwrng
- scsi: be2iscsi: Fix an error handling path in beiscsi_dev_probe()
- mips: always link byteswap helpers into decompressor
- mips: disable branch profiling in boot/decompress.o
- MIPS: vdso: Invalid GIC access through VDSO
- scsi: scsi_dh_alua: Fix signedness bug in alua_rtpg()
- misc: alcor_pci: fix inverted branch condition
- Linux 5.4.134
* s390x BPF JIT vulnerabilities (LP: #1943960)
- SAUCE: s390/bpf: Fix 64-bit subtraction of the -0x80000000 constant
- SAUCE: s390/bpf: Fix optimizing out zero-extensions
-- Marcelo Henrique Cerri <marcelo.ce...@canonical.com> Fri, 22 Oct
2021 17:25:12 -0300
** Changed in: linux-azure-cvm (Ubuntu Focal)
Status: Fix Committed => Fix Released
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2019-19449
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2020-36385
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2021-3428
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2021-3759
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2021-40490
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1915146
Title:
Backport commits required for confidential VMs
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux-azure-cvm/+bug/1915146/+subscriptions
--
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
