Public bug reported:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
v5.15.189 upstream stable release
from git://git.kernel.org/
drm/exynos: exynos7_drm_decon: add vblank check in IRQ handling
ASoC: fsl_asrc: use internal measured ratio for non-ideal ratio mode
perf: Revert to requiring CAP_SYS_ADMIN for uprobes
fix proc_sys_compare() handling of in-lookup dentries
netlink: Fix wraparounds of sk->sk_rmem_alloc.
tipc: Fix use-after-free in tipc_conn_close().
vsock: Fix transport_{g2h,h2g} TOCTOU
vsock: Fix transport_* TOCTOU
vsock: Fix IOCTL_VM_SOCKETS_GET_LOCAL_CID to check also `transport_local`
net: phy: smsc: Fix Auto-MDIX configuration when disabled by strap
net: phy: smsc: Fix link failure in forced mode with Auto-MDIX
atm: clip: Fix potential null-ptr-deref in to_atmarpd().
atm: clip: Fix memory leak of struct clip_vcc.
atm: clip: Fix infinite recursive call of clip_push().
atm: clip: Fix NULL pointer dereference in vcc_sendmsg()
net/sched: Abort __tc_modify_qdisc if parent class does not exist
fs/proc: do_task_stat: use __for_each_thread()
ice: safer stats processing
rxrpc: Fix oops due to non-existence of prealloc backlog struct
bpf: fix precision backtracking instruction iteration
thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
aoe: avoid potential deadlock at set_capacity
bpf, sockmap: Fix skb refcnt race after locking changes
jfs: fix null ptr deref in dtInsertEntry
xen: replace xen_remap() with memremap()
x86/mce/amd: Fix threshold limit reset
x86/mce: Don't remove sysfs if thresholding sysfs init fails
x86/mce: Make sure CMCI banks are cleared during shutdown on Intel
gre: Fix IPv6 multicast route creation.
pinctrl: qcom: msm: mark certain pins as invalid for interrupts
drm/sched: Increment job count before swapping tail spsc queue
drm/gem: Fix race in drm_gem_handle_create_tail()
usb: gadget: u_serial: Fix race condition in TTY wakeup
Revert "ACPI: battery: negate current when discharging"
btrfs: propagate last_unlink_trans earlier when doing a rmdir
btrfs: use btrfs_record_snapshot_destroy() during rmdir
RDMA/mlx5: Fix vport loopback for MPV device
pwm: mediatek: Ensure to disable clocks in error path
netlink: Fix rmem check in netlink_broadcast_deliver().
netlink: make sure we allow at least one dump skb
virtio-net: ensure the received length does not exceed allocated size
xhci: Allow RPM on the USB controller (1022:43f7) by default
usb: xhci: quirk for data loss in ISOC transfers
xhci: Disable stream for xHC controller with XHCI_BROKEN_STREAMS
Input: xpad - support Acer NGR 200 Controller
usb:cdnsp: remove TRB_FLUSH_ENDPOINT command
usb: cdnsp: Replace snprintf() with the safer scnprintf() variant
usb: cdnsp: Fix issue with CV Bad Descriptor test
usb: dwc3: Abort suspend on soft disconnect failure
dma-buf: add dma_resv_for_each_fence_unlocked v8
dma-buf: use new iterator in dma_resv_wait_timeout
dma-buf: fix timeout handling in dma_resv_wait_timeout v2
wifi: zd1211rw: Fix potential NULL pointer dereference in zd_mac_tx_to_dev()
md/raid1: Fix stack memory use after return in raid1_reshape
raid10: cleanup memleak at raid10_make_request
nbd: fix uaf in nbd_genl_connect() error path
smb: server: make use of rdma_destroy_qp()
ksmbd: fix a mount write count leak in ksmbd_vfs_kern_path_locked()
netfilter: flowtable: account for Ethernet header in nf_flow_pppoe_proto()
net: appletalk: Fix device refcount leak in atrtr_create()
net: phy: microchip: limit 100M workaround to link-down events on LAN88xx
can: m_can: m_can_handle_lost_msg(): downgrade msg lost in rx message to debug
level
net: ll_temac: Fix missing tx_pending check in ethtools_set_ringparam()
bnxt_en: Fix DCB ETS validation
bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT
atm: idt77252: Add missing `dma_map_error()`
um: vector: Reduce stack usage in vector_eth_configure()
net: usb: qmi_wwan: add SIMCom 8230C composition
HID: lenovo: Add support for ThinkPad X1 Tablet Thin Keyboard Gen2
vt: add missing notification when switching back to text mode
HID: Add IGNORE quirk for SMARTLINKTECHNOLOGY
HID: quirks: Add quirk for 2 Chicony Electronics HP 5MP Cameras
Input: atkbd - do not skip atkbd_deactivate() when skipping ATKBD_CMD_GETID
vhost-scsi: protect vq->log_used with vq->mutex
x86/mm: Disable hugetlb page table sharing on 32-bit
rseq: Fix segfault on registration when rseq_cs is non-zero
Linux 5.15.189
UBUNTU: Upstream stable to v5.15.189
** Affects: linux (Ubuntu)
Importance: Undecided
Status: Invalid
** Affects: linux (Ubuntu Jammy)
Importance: Medium
Assignee: Manuel Diewald (diewald)
Status: In Progress
** Tags: kernel-stable-tracking-bug
** Changed in: linux (Ubuntu)
Status: New => Confirmed
** Tags added: kernel-stable-tracking-bug
** Also affects: linux (Ubuntu Jammy)
Importance: Undecided
Status: New
** Changed in: linux (Ubuntu)
Status: Confirmed => Invalid
** Changed in: linux (Ubuntu Jammy)
Importance: Undecided => Medium
** Changed in: linux (Ubuntu Jammy)
Status: New => In Progress
** Changed in: linux (Ubuntu Jammy)
Assignee: (unassigned) => Manuel Diewald (diewald)
** Description changed:
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
v5.15.189 upstream stable release
from git://git.kernel.org/
-
+ drm/exynos: exynos7_drm_decon: add vblank check in IRQ handling
+ ASoC: fsl_asrc: use internal measured ratio for non-ideal ratio mode
+ perf: Revert to requiring CAP_SYS_ADMIN for uprobes
+ fix proc_sys_compare() handling of in-lookup dentries
+ netlink: Fix wraparounds of sk->sk_rmem_alloc.
+ tipc: Fix use-after-free in tipc_conn_close().
+ vsock: Fix transport_{g2h,h2g} TOCTOU
+ vsock: Fix transport_* TOCTOU
+ vsock: Fix IOCTL_VM_SOCKETS_GET_LOCAL_CID to check also `transport_local`
+ net: phy: smsc: Fix Auto-MDIX configuration when disabled by strap
+ net: phy: smsc: Fix link failure in forced mode with Auto-MDIX
+ atm: clip: Fix potential null-ptr-deref in to_atmarpd().
+ atm: clip: Fix memory leak of struct clip_vcc.
+ atm: clip: Fix infinite recursive call of clip_push().
+ atm: clip: Fix NULL pointer dereference in vcc_sendmsg()
+ net/sched: Abort __tc_modify_qdisc if parent class does not exist
+ fs/proc: do_task_stat: use __for_each_thread()
+ ice: safer stats processing
+ rxrpc: Fix oops due to non-existence of prealloc backlog struct
+ bpf: fix precision backtracking instruction iteration
+ thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
+ aoe: avoid potential deadlock at set_capacity
+ bpf, sockmap: Fix skb refcnt race after locking changes
+ jfs: fix null ptr deref in dtInsertEntry
+ xen: replace xen_remap() with memremap()
+ x86/mce/amd: Fix threshold limit reset
+ x86/mce: Don't remove sysfs if thresholding sysfs init fails
+ x86/mce: Make sure CMCI banks are cleared during shutdown on Intel
+ gre: Fix IPv6 multicast route creation.
+ pinctrl: qcom: msm: mark certain pins as invalid for interrupts
+ drm/sched: Increment job count before swapping tail spsc queue
+ drm/gem: Fix race in drm_gem_handle_create_tail()
+ usb: gadget: u_serial: Fix race condition in TTY wakeup
+ Revert "ACPI: battery: negate current when discharging"
+ btrfs: propagate last_unlink_trans earlier when doing a rmdir
+ btrfs: use btrfs_record_snapshot_destroy() during rmdir
+ RDMA/mlx5: Fix vport loopback for MPV device
+ pwm: mediatek: Ensure to disable clocks in error path
+ netlink: Fix rmem check in netlink_broadcast_deliver().
+ netlink: make sure we allow at least one dump skb
+ virtio-net: ensure the received length does not exceed allocated size
+ xhci: Allow RPM on the USB controller (1022:43f7) by default
+ usb: xhci: quirk for data loss in ISOC transfers
+ xhci: Disable stream for xHC controller with XHCI_BROKEN_STREAMS
+ Input: xpad - support Acer NGR 200 Controller
+ usb:cdnsp: remove TRB_FLUSH_ENDPOINT command
+ usb: cdnsp: Replace snprintf() with the safer scnprintf() variant
+ usb: cdnsp: Fix issue with CV Bad Descriptor test
+ usb: dwc3: Abort suspend on soft disconnect failure
+ dma-buf: add dma_resv_for_each_fence_unlocked v8
+ dma-buf: use new iterator in dma_resv_wait_timeout
+ dma-buf: fix timeout handling in dma_resv_wait_timeout v2
+ wifi: zd1211rw: Fix potential NULL pointer dereference in zd_mac_tx_to_dev()
+ md/raid1: Fix stack memory use after return in raid1_reshape
+ raid10: cleanup memleak at raid10_make_request
+ nbd: fix uaf in nbd_genl_connect() error path
+ smb: server: make use of rdma_destroy_qp()
+ ksmbd: fix a mount write count leak in ksmbd_vfs_kern_path_locked()
+ netfilter: flowtable: account for Ethernet header in nf_flow_pppoe_proto()
+ net: appletalk: Fix device refcount leak in atrtr_create()
+ net: phy: microchip: limit 100M workaround to link-down events on LAN88xx
+ can: m_can: m_can_handle_lost_msg(): downgrade msg lost in rx message to
debug level
+ net: ll_temac: Fix missing tx_pending check in ethtools_set_ringparam()
+ bnxt_en: Fix DCB ETS validation
+ bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT
+ atm: idt77252: Add missing `dma_map_error()`
+ um: vector: Reduce stack usage in vector_eth_configure()
+ net: usb: qmi_wwan: add SIMCom 8230C composition
+ HID: lenovo: Add support for ThinkPad X1 Tablet Thin Keyboard Gen2
+ vt: add missing notification when switching back to text mode
+ HID: Add IGNORE quirk for SMARTLINKTECHNOLOGY
+ HID: quirks: Add quirk for 2 Chicony Electronics HP 5MP Cameras
+ Input: atkbd - do not skip atkbd_deactivate() when skipping ATKBD_CMD_GETID
+ vhost-scsi: protect vq->log_used with vq->mutex
+ x86/mm: Disable hugetlb page table sharing on 32-bit
+ rseq: Fix segfault on registration when rseq_cs is non-zero
Linux 5.15.189
- rseq: Fix segfault on registration when rseq_cs is non-zero
- x86: Fix X86_FEATURE_VERW_CLEAR definition
- x86/mm: Disable hugetlb page table sharing on 32-bit
- vhost-scsi: protect vq->log_used with vq->mutex
- Input: atkbd - do not skip atkbd_deactivate() when skipping ATKBD_CMD_GETID
- HID: quirks: Add quirk for 2 Chicony Electronics HP 5MP Cameras
- HID: Add IGNORE quirk for SMARTLINKTECHNOLOGY
- vt: add missing notification when switching back to text mode
- HID: lenovo: Add support for ThinkPad X1 Tablet Thin Keyboard Gen2
- net: usb: qmi_wwan: add SIMCom 8230C composition
- um: vector: Reduce stack usage in vector_eth_configure()
- atm: idt77252: Add missing `dma_map_error()`
- bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT
- bnxt_en: Fix DCB ETS validation
- net: ll_temac: Fix missing tx_pending check in ethtools_set_ringparam()
- can: m_can: m_can_handle_lost_msg(): downgrade msg lost in rx message to
debug level
- net: phy: microchip: limit 100M workaround to link-down events on LAN88xx
- net: appletalk: Fix device refcount leak in atrtr_create()
- netfilter: flowtable: account for Ethernet header in nf_flow_pppoe_proto()
- ksmbd: fix a mount write count leak in ksmbd_vfs_kern_path_locked()
- smb: server: make use of rdma_destroy_qp()
- nbd: fix uaf in nbd_genl_connect() error path
- raid10: cleanup memleak at raid10_make_request
- md/raid1: Fix stack memory use after return in raid1_reshape
- wifi: zd1211rw: Fix potential NULL pointer dereference in zd_mac_tx_to_dev()
- dma-buf: fix timeout handling in dma_resv_wait_timeout v2
- dma-buf: use new iterator in dma_resv_wait_timeout
- dma-buf: add dma_resv_for_each_fence_unlocked v8
- usb: dwc3: Abort suspend on soft disconnect failure
- usb: cdnsp: Fix issue with CV Bad Descriptor test
- usb: cdnsp: Replace snprintf() with the safer scnprintf() variant
- usb:cdnsp: remove TRB_FLUSH_ENDPOINT command
- Input: xpad - support Acer NGR 200 Controller
- xhci: Disable stream for xHC controller with XHCI_BROKEN_STREAMS
- usb: xhci: quirk for data loss in ISOC transfers
- xhci: Allow RPM on the USB controller (1022:43f7) by default
- virtio-net: ensure the received length does not exceed allocated size
- netlink: make sure we allow at least one dump skb
- netlink: Fix rmem check in netlink_broadcast_deliver().
- pwm: mediatek: Ensure to disable clocks in error path
- RDMA/mlx5: Fix vport loopback for MPV device
- btrfs: use btrfs_record_snapshot_destroy() during rmdir
- btrfs: propagate last_unlink_trans earlier when doing a rmdir
- Revert "ACPI: battery: negate current when discharging"
- usb: gadget: u_serial: Fix race condition in TTY wakeup
- drm/gem: Fix race in drm_gem_handle_create_tail()
- drm/sched: Increment job count before swapping tail spsc queue
- pinctrl: qcom: msm: mark certain pins as invalid for interrupts
- gre: Fix IPv6 multicast route creation.
- x86/mce: Make sure CMCI banks are cleared during shutdown on Intel
- x86/mce: Don't remove sysfs if thresholding sysfs init fails
- x86/mce/amd: Fix threshold limit reset
- xen: replace xen_remap() with memremap()
- jfs: fix null ptr deref in dtInsertEntry
- bpf, sockmap: Fix skb refcnt race after locking changes
- aoe: avoid potential deadlock at set_capacity
- thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR
- bpf: fix precision backtracking instruction iteration
- rxrpc: Fix oops due to non-existence of prealloc backlog struct
- ice: safer stats processing
- fs/proc: do_task_stat: use __for_each_thread()
- net/sched: Abort __tc_modify_qdisc if parent class does not exist
- atm: clip: Fix NULL pointer dereference in vcc_sendmsg()
- atm: clip: Fix infinite recursive call of clip_push().
- atm: clip: Fix memory leak of struct clip_vcc.
- atm: clip: Fix potential null-ptr-deref in to_atmarpd().
- net: phy: smsc: Fix link failure in forced mode with Auto-MDIX
- net: phy: smsc: Fix Auto-MDIX configuration when disabled by strap
- vsock: Fix IOCTL_VM_SOCKETS_GET_LOCAL_CID to check also `transport_local`
- vsock: Fix transport_* TOCTOU
- vsock: Fix transport_{g2h,h2g} TOCTOU
- tipc: Fix use-after-free in tipc_conn_close().
- netlink: Fix wraparounds of sk->sk_rmem_alloc.
- fix proc_sys_compare() handling of in-lookup dentries
- perf: Revert to requiring CAP_SYS_ADMIN for uprobes
- ASoC: fsl_asrc: use internal measured ratio for non-ideal ratio mode
- drm/exynos: exynos7_drm_decon: add vblank check in IRQ handling
+ UBUNTU: Upstream stable to v5.15.189
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2118995
Title:
Jammy update: v5.15.189 upstream stable release
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2118995/+subscriptions
--
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
