Focal update: 5.10.65 upstream stable release

Bug #1944972 reported by AceLan Kao
10
This bug affects 1 person
Affects Status Importance Assigned to Milestone
linux-oem-5.10 (Ubuntu)
Invalid
Undecided
Unassigned
Focal
Fix Released
Undecided
Unassigned

Bug Description

    SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The following upstream
       stable patches should be included in the Ubuntu kernel:

       5.10.65 upstream stable release
       from git://git.kernel.org/

Linux 5.10.65
clk: kirkwood: Fix a clocking boot regression
backlight: pwm_bl: Improve bootloader/kernel device handover
fbmem: don't allow too huge resolutions
IMA: remove the dependency on CRYPTO_MD5
IMA: remove -Wmissing-prototypes warning
fuse: flush extending writes
fuse: truncate pagecache on atomic_o_trunc
ARM: dts: at91: add pinctrl-{names, 0} for all gpios
KVM: nVMX: Unconditionally clear nested.pi_pending on nested VM-Enter
KVM: VMX: avoid running vmx_handle_exit_irqoff in case of emulation
KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted
KVM: s390: index kvm->arch.idle_mask by vcpu_idx
Revert "KVM: x86: mmu: Add guest physical address check in translate_gpa()"
x86/resctrl: Fix a maybe-uninitialized build warning treated as error
perf/x86/amd/ibs: Extend PERF_PMU_CAP_NO_EXCLUDE to IBS Op
tty: Fix data race between tiocsti() and flush_to_ldisc()
bio: fix page leak bio_add_hw_page failure
io_uring: IORING_OP_WRITE needs hash_reg_file set
time: Handle negative seconds correctly in timespec64_to_ns()
f2fs: guarantee to write dirty data when enabling checkpoint back
iwlwifi Add support for ax201 in Samsung Galaxy Book Flex2 Alpha
ASoC: rt5682: Remove unused variable in rt5682_i2c_remove()
ipv4: fix endianness issue in inet_rtm_getroute_build_skb()
octeontx2-af: Set proper errorcode for IPv4 checksum errors
octeontx2-af: Fix static code analyzer reported issues
octeontx2-af: Fix loop in free and unmap counter
net: qualcomm: fix QCA7000 checksum handling
net: sched: Fix qdisc_rate_table refcount leak when get tcf_block failed
ipv4: make exception cache less predictible
ipv6: make exception cache less predictible
brcmfmac: pcie: fix oops on failure to resume and reprobe
bcma: Fix memory leak for internally-handled cores
atlantic: Fix driver resume flow.
ath6kl: wmi: fix an error code in ath6kl_wmi_sync_point()
ice: Only lock to update netdev dev_addr
iwlwifi: skip first element in the WTAS ACPI table
iwlwifi: follow the new inclusive terminology
ASoC: wcd9335: Disable irq on slave ports in the remove function
ASoC: wcd9335: Fix a memory leak in the error handling path of the probe function
ASoC: wcd9335: Fix a double irq free in the remove function
tty: serial: fsl_lpuart: fix the wrong mapbase value
usb: bdc: Fix a resource leak in the error handling path of 'bdc_probe()'
usb: bdc: Fix an error handling path in 'bdc_probe()' when no suitable DMA config is available
usb: ehci-orion: Handle errors of clk_prepare_enable() in probe
i2c: xlp9xx: fix main IRQ check
i2c: mt65xx: fix IRQ check
CIFS: Fix a potencially linear read overflow
bpf: Fix possible out of bound write in narrow load handling
mmc: moxart: Fix issue with uninitialized dma_slave_config
mmc: dw_mmc: Fix issue with uninitialized dma_slave_config
mmc: sdhci: Fix issue with uninitialized dma_slave_config
ASoC: Intel: Skylake: Fix module resource and format selection
ASoC: Intel: Skylake: Leave data as is when invoking TLV IPCs
ASoC: Intel: kbl_da7219_max98927: Fix format selection for max98373
rsi: fix an error code in rsi_probe()
rsi: fix error code in rsi_load_9116_firmware()
gfs2: init system threads before freeze lock
i2c: hix5hd2: fix IRQ check
i2c: fix platform_get_irq.cocci warnings
i2c: s3c2410: fix IRQ check
i2c: iop3xx: fix deferred probing
Bluetooth: add timeout sanity check to hci_inquiry
lkdtm: replace SCSI_DISPATCH_CMD with SCSI_QUEUE_RQ
mm/swap: consider max pages in iomap_swapfile_add_extent
usb: gadget: mv_u3d: request_irq() after initializing UDC
firmware: raspberrypi: Fix a leak in 'rpi_firmware_get()'
firmware: raspberrypi: Keep count of all consumers
i2c: synquacer: fix deferred probing
clk: staging: correct reference to config IOMEM to config HAS_IOMEM
arm64: dts: marvell: armada-37xx: Extend PCIe MEM space
nfsd4: Fix forced-expiry locking
lockd: Fix invalid lockowner cast after vfs_test_lock
locking/local_lock: Add missing owner initialization
locking/lockdep: Mark local_lock_t
mac80211: Fix insufficient headroom issue for AMSDU
libbpf: Re-build libbpf.so when libbpf.map changes
usb: phy: tahvo: add IRQ check
usb: host: ohci-tmio: add IRQ check
PM: cpu: Make notifier chain use a raw_spinlock_t
Bluetooth: Move shutdown callback before flushing tx and rx queue
samples: pktgen: add missing IPv6 option to pktgen scripts
devlink: Clear whole devlink_flash_notify struct
selftests/bpf: Fix test_core_autosize on big-endian machines
usb: gadget: udc: renesas_usb3: Fix soc_device_match() abuse
usb: phy: twl6030: add IRQ checks
usb: phy: fsl-usb: add IRQ check
usb: gadget: udc: s3c2410: add IRQ check
usb: gadget: udc: at91: add IRQ check
usb: dwc3: qcom: add IRQ check
usb: dwc3: meson-g12a: add IRQ check
ASoC: rt5682: Properly turn off regulators if wrong device ID
ASoC: rt5682: Implement remove callback
net/mlx5: Fix unpublish devlink parameters
net/mlx5: Register to devlink ingress VLAN filter trap
drm/msm/dsi: Fix some reference counted resource leaks
Bluetooth: fix repeated calls to sco_sock_kill
ASoC: Intel: Fix platform ID matching
cgroup/cpuset: Fix violation of cpuset locking rule
cgroup/cpuset: Miscellaneous code cleanup
counter: 104-quad-8: Return error when invalid mode during ceiling_write
arm64: dts: exynos: correct GIC CPU interfaces address range on Exynos7
drm/msm/dpu: make dpu_hw_ctl_clear_all_blendstages clear necessary LMs
drm/msm/mdp4: move HW revision detection to earlier phase
drm/msm/mdp4: refactor HW revision detection into read_mdp_hw_revision
selftests/bpf: Fix bpf-iter-tcp4 test to print correctly the dest IP
PM: EM: Increase energy calculation precision
Bluetooth: increase BTNAMSIZ to 21 chars to fix potential buffer overflow
debugfs: Return error during {full/open}_proxy_open() on rmmod
soc: qcom: smsm: Fix missed interrupts if state changes while masked
bpf, samples: Add missing mprog-disable to xdp_redirect_cpu's optstring
PCI: PM: Enable PME if it can be signaled from D3cold
PCI: PM: Avoid forcing PCI_D0 for wakeup reasons inconsistently
media: venus: venc: Fix potential null pointer dereference on pointer fmt
media: em28xx-input: fix refcount bug in em28xx_usb_disconnect
leds: trigger: audio: Add an activate callback to ensure the initial brightness is set
leds: lt3593: Put fwnode in any case during ->probe()
i2c: highlander: add IRQ check
net/mlx5: Fix missing return value in mlx5_devlink_eswitch_inline_mode_set()
devlink: Break parameter notification sequence to be before/after unload/load driver
arm64: dts: renesas: hihope-rzg2-ex: Add EtherAVB internal rx delay
arm64: dts: renesas: rzg2: Convert EtherAVB to explicit delay handling
Bluetooth: mgmt: Fix wrong opcode in the response for add_adv cmd
net: cipso: fix warnings in netlbl_cipsov4_add_std
drm: mxsfb: Clear FIFO_CLEAR bit
drm: mxsfb: Increase number of outstanding requests on V4 and newer HW
drm: mxsfb: Enable recovery on underflow
cgroup/cpuset: Fix a partition bug with hotplug
net/mlx5e: Block LRO if firmware asks for tunneled LRO
net/mlx5e: Prohibit inner indir TIRs in IPoIB
ARM: dts: meson8b: ec100: Fix the pwm regulator supply properties
ARM: dts: meson8b: mxq: Fix the pwm regulator supply properties
ARM: dts: meson8b: odroidc1: Fix the pwm regulator supply properties
ARM: dts: meson8: Use a higher default GPU clock frequency
tcp: seq_file: Avoid skipping sk during tcp_seek_last_pos
drm/amdgpu/acp: Make PM domain really work
6lowpan: iphc: Fix an off-by-one check of array index
Bluetooth: sco: prevent information leak in sco_conn_defer_accept()
media: atomisp: fix the uninitialized use and rename "retvalue"
media: coda: fix frame_mem_ctrl for YUV420 and YVU420 formats
media: rockchip/rga: fix error handling in probe
media: rockchip/rga: use pm_runtime_resume_and_get()
media: go7007: remove redundant initialization
media: go7007: fix memory leak in go7007_usb_probe
media: dvb-usb: Fix error handling in dvb_usb_i2c_init
media: dvb-usb: fix uninit-value in vp702x_read_mac_addr
media: dvb-usb: fix uninit-value in dvb_usb_adapter_dvb_init
ionic: cleanly release devlink instance
driver core: Fix error return code in really_probe()
firmware: fix theoretical UAF race with firmware cache and resume
gfs2: Fix memory leak of object lsi on error return path
libbpf: Fix removal of inner map in bpf_object__create_map
soc: qcom: rpmhpd: Use corner in power_off
i40e: improve locking of mac_filter_hash
arm64: dts: renesas: r8a77995: draak: Remove bogus adv7511w properties
ARM: dts: aspeed-g6: Fix HVI3C function-group in pinctrl dtsi
libbpf: Fix the possible memory leak on error
gve: fix the wrong AdminQ buffer overflow check
drm/of: free the iterator object on failure
bpf: Fix potential memleak and UAF in the verifier.
bpf: Fix a typo of reuseport map in bpf.h.
drm/of: free the right object
media: cxd2880-spi: Fix an error handling path
soc: rockchip: ROCKCHIP_GRF should not default to y, unconditionally
leds: is31fl32xx: Fix missing error code in is31fl32xx_parse_dt()
media: TDA1997x: enable EDID support
ASoC: mediatek: mt8183: Fix Unbalanced pm_runtime_enable in mt8183_afe_pcm_dev_probe
drm/gma500: Fix end of loop tests for list_for_each_entry
drm/panfrost: Fix missing clk_disable_unprepare() on error in panfrost_clk_init()
EDAC/i10nm: Fix NVDIMM detection
spi: spi-zynq-qspi: use wait_for_completion_timeout to make zynq_qspi_exec_mem_op not interruptible
spi: sprd: Fix the wrong WDG_LOAD_VAL
regulator: vctrl: Avoid lockdep warning in enable/disable ops
regulator: vctrl: Use locked regulator_get_voltage in probe path
blk-crypto: fix check for too-large dun_bytes
spi: davinci: invoke chipselect callback
x86/mce: Defer processing of early errors
tpm: ibmvtpm: Avoid error message when process gets signal while waiting
certs: Trigger creation of RSA module signing key if it's not an RSA key
crypto: qat - use proper type for vf_mask
irqchip/gic-v3: Fix priority comparison when non-secure priorities are used
spi: coldfire-qspi: Use clk_disable_unprepare in the remove function
block: nbd: add sanity check for first_minor
clocksource/drivers/sh_cmt: Fix wrong setting if don't request IRQ for clock source channel
lib/mpi: use kcalloc in mpi_resize
irqchip/loongson-pch-pic: Improve edge triggered interrupt support
genirq/timings: Fix error return code in irq_timings_test_irqs()
spi: spi-pic32: Fix issue with uninitialized dma_slave_config
spi: spi-fsl-dspi: Fix issue with uninitialized dma_slave_config
block: return ELEVATOR_DISCARD_MERGE if possible
m68k: Fix invalid RMW_INSNS on CPUs that lack CAS
rcu: Fix stall-warning deadlock due to non-release of rcu_node ->lock
rcu: Add lockdep_assert_irqs_disabled() to rcu_sched_clock_irq() and callees
rcu: Fix to include first blocked task in stall warning
sched: Fix UCLAMP_FLAG_IDLE setting
sched/numa: Fix is_core_idle()
m68k: emu: Fix invalid free in nfeth_cleanup()
power: supply: cw2015: use dev_err_probe to allow deferred probe
s390/ap: fix state machine hang after failure to enable irq
s390/debug: fix debug area life cycle
s390/debug: keep debug data on resize
s390/pci: fix misleading rc in clp_set_pci_fn()
s390/kasan: fix large PMD pages address alignment check
udf_get_extendedattr() had no boundary checks.
fcntl: fix potential deadlock for &fasync_struct.fa_lock
crypto: qat - do not export adf_iov_putmsg()
crypto: qat - fix naming for init/shutdown VF to PF notifications
crypto: qat - fix reuse of completion variable
crypto: qat - handle both source of interrupt in VF ISR
crypto: qat - do not ignore errors from enable_vf2pf_comms()
crypto: omap - Fix inconsistent locking of device lists
libata: fix ata_host_start()
s390/zcrypt: fix wrong offset index for APKA master key valid state
s390/cio: add dev_busid sysfs entry for each subchannel
power: supply: max17042_battery: fix typo in MAx17042_TOFF
power: supply: smb347-charger: Add missing pin control activation
nvmet: pass back cntlid on successful completion
nvme-rdma: don't update queue count when failing to set io queues
nvme-tcp: don't update queue count when failing to set io queues
blk-throtl: optimize IOPS throttle for large IO scenarios
bcache: add proper error unwinding in bcache_device_init
isofs: joliet: Fix iocharset=utf8 mount option
udf: Fix iocharset=utf8 mount option
udf: Check LVID earlier
hrtimer: Ensure timerfd notification for HIGHRES=n
hrtimer: Avoid double reprogramming in __hrtimer_start_range_ns()
posix-cpu-timers: Force next expiration recalc after itimer reset
EDAC/mce_amd: Do not load edac_mce_amd module on guests
rcu/tree: Handle VM stoppage in stall detection
sched/deadline: Fix missing clock update in migrate_task_rq_dl()
crypto: omap-sham - clear dma flags only after omap_sham_update_dma_stop()
power: supply: axp288_fuel_gauge: Report register-address on readb / writeb errors
sched/deadline: Fix reset_on_fork reporting of DL tasks
crypto: mxs-dcp - Check for DMA mapping errors
regulator: tps65910: Silence deferred probe error
regmap: fix the offset of register error log
locking/mutex: Fix HANDOFF condition

CVE References

AceLan Kao (acelankao)
Changed in linux-oem-5.10 (Ubuntu):
status: New → Confirmed
tags: added: kernel-stable-tracking-bug
AceLan Kao (acelankao)
Changed in linux-oem-5.10 (Ubuntu Focal):
status: New → Fix Committed
Revision history for this message
Launchpad Janitor (janitor) wrote :
Download full text (98.0 KiB)

This bug was fixed in the package linux-oem-5.10 - 5.10.0-1050.52

---------------
linux-oem-5.10 (5.10.0-1050.52) focal; urgency=medium

  * focal/linux-oem-5.10: 5.10.0-1050.52 -proposed tracker (LP: #1944904)

  * Fix A yellow screen pops up in an instant (< 1 second) and then disappears
    before loading the system (LP: #1945932)
    - SAUCE: drm/i915: Stop force enabling pipe bottom color gammma/csc

  * CVE-2021-3759
    - memcg: enable accounting of ipc resources

  * Fix i915 warnings on skl_dram_get_channel_info() (LP: #1943923)
    - drm/i915: Nuke not needed members of dram_info
    - drm/i915/gen11+: Only load DRAM information from pcode
    - drm/i915: Rename is_16gb_dimm to wm_lv_0_adjust_needed

  * Focal update: 5.10.68 upstream stable release (LP: #1944975)
    - drm/bridge: lt9611: Fix handling of 4k panels
    - btrfs: fix upper limit for max_inline for page size 64K
    - xen: reset legacy rtc flag for PV domU
    - bnx2x: Fix enabling network interfaces without VFs
    - arm64/sve: Use correct size when reinitialising SVE state
    - PM: base: power: don't try to use non-existing RTC for storing data
    - PCI: Add AMD GPU multi-function power dependencies
    - drm/amd/amdgpu: Increase HWIP_MAX_INSTANCE to 10
    - drm/etnaviv: return context from etnaviv_iommu_context_get
    - drm/etnaviv: put submit prev MMU context when it exists
    - drm/etnaviv: stop abusing mmu_context as FE running marker
    - drm/etnaviv: keep MMU context across runtime suspend/resume
    - drm/etnaviv: exec and MMU state is lost when resetting the GPU
    - drm/etnaviv: fix MMU context leak on GPU reset
    - drm/etnaviv: reference MMU context when setting up hardware state
    - drm/etnaviv: add missing MMU context put when reaping MMU mapping
    - s390/sclp: fix Secure-IPL facility detection
    - x86/pat: Pass valid address to sanitize_phys()
    - x86/mm: Fix kern_addr_valid() to cope with existing but not present entries
    - tipc: fix an use-after-free issue in tipc_recvmsg
    - ethtool: Fix rxnfc copy to user buffer overflow
    - net/{mlx5|nfp|bnxt}: Remove unnecessary RTNL lock assert
    - net-caif: avoid user-triggerable WARN_ON(1)
    - ptp: dp83640: don't define PAGE0
    - net/l2tp: Fix reference count leak in l2tp_udp_recv_core
    - r6040: Restore MDIO clock frequency after MAC reset
    - tipc: increase timeout in tipc_sk_enqueue()
    - drm/rockchip: cdn-dp-core: Make cdn_dp_core_resume __maybe_unused
    - perf machine: Initialize srcline string member in add_location struct
    - net/mlx5: FWTrace, cancel work on alloc pd error flow
    - net/mlx5: Fix potential sleeping in atomic context
    - nvme-tcp: fix io_work priority inversion
    - events: Reuse value read using READ_ONCE instead of re-reading it
    - net: ipa: initialize all filter table slots
    - gen_compile_commands: fix missing 'sys' package
    - vhost_net: fix OoB on sendmsg() failure.
    - net/af_unix: fix a data-race in unix_dgram_poll
    - net: dsa: destroy the phylink instance on any error in dsa_slave_phy_setup
    - x86/uaccess: Fix 32-bit __get_user_asm_u64() when CC_HAS_ASM_GOTO_OUTPUT=y
    - tcp: fix tp->undo_retrans accounting in tcp_sack...

Changed in linux-oem-5.10 (Ubuntu Focal):
status: Fix Committed → Fix Released
Po-Hsu Lin (cypressyew)
Changed in linux-oem-5.10 (Ubuntu):
status: Confirmed → Invalid
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.