Groovy update: v5.8.4 upstream stable release

Bug #1893048 reported by Seth Forshee
10
This bug affects 1 person
Affects Status Importance Assigned to Milestone
linux (Ubuntu)
Fix Released
Medium
Seth Forshee
Groovy
Fix Released
Medium
Seth Forshee

Bug Description

SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The following upstream
       stable patches should be included in the Ubuntu kernel:

       v5.8.4 upstream stable release
       from git://git.kernel.org/

Linux 5.8.4
Revert "drm/amd/display: Improve DisplayPort monitor interop"
KVM: arm64: Only reschedule if MMU_NOTIFIER_RANGE_BLOCKABLE is not set
KVM: Pass MMU notifier range flags to kvm_unmap_hva_range()
do_epoll_ctl(): clean the failure exits up a bit
efi/libstub: Handle unterminated cmdline
efi/libstub: Handle NULL cmdline
efi/libstub: Stop parsing arguments at "--"
efi: add missed destroy_workqueue when efisubsys_init fails
efi/x86: Mark kernel rodata non-executable for mixed mode
EDAC/{i7core,sb,pnd2,skx}: Fix error event severity
powerpc/pseries: Do not initiate shutdown when system is running on UPS
powerpc: Fix P10 PVR revision in /proc/cpuinfo for SMT4 cores
epoll: Keep a reference on files added to the check list
net: dsa: b53: check for timeout
hv_netvsc: Fix the queue_mapping in netvsc_vf_xmit()
selftests/bpf: Remove test_align leftovers
net: gemini: Fix missing free_netdev() in error path of gemini_ethernet_port_probe()
net: ena: Change WARN_ON expression in ena_del_napi_in_range()
net: ena: Prevent reset after device destruction
bonding: fix active-backup failover for current ARP slave
powerpc/pseries/hotplug-cpu: wait indefinitely for vCPU death
bpf: Use get_file_rcu() instead of get_file() for task_file iterator
powerpc/fixmap: Fix the size of the early debug area
ARM64: vdso32: Install vdso32 from vdso_install
afs: Fix NULL deref in afs_dynroot_depopulate()
kconfig: qconf: remove qInfo() to get back Qt4 support
afs: Fix key ref leak in afs_put_operation()
Revert "RDMA/hns: Reserve one sge in order to avoid local length error"
RDMA/bnxt_re: Do not add user qps to flushlist
Fix build error when CONFIG_ACPI is not set/enabled:
efi: avoid error message when booting under Xen
kconfig: qconf: fix signal connection to invalid slots
kconfig: qconf: do not limit the pop-up menu to the first row
Revert "scsi: qla2xxx: Disable T10-DIF feature with FC-NVMe during probe"
scsi: ufs: Fix interrupt error message for shared interrupts
scsi: ufs-pci: Add quirk for broken auto-hibernate for Intel EHL
scsi: ufs: Add quirk to fix abnormal ocs fatal error
scsi: ufs: Introduce UFSHCD_QUIRK_PRDT_BYTE_GRAN quirk
scsi: ufs: Add quirk to enable host controller without hce
scsi: ufs: Add quirk to disallow reset of interrupt aggregation
scsi: ufs: Add quirk to fix mishandling utrlclr/utmrlclr
scsi: ufs: ti-j721e-ufs: Fix error return in ti_j721e_ufs_probe()
kvm: x86: Toggling CR4.PKE does not load PDPTEs in PAE mode
kvm: x86: Toggling CR4.SMAP does not load PDPTEs in PAE mode
arch/ia64: Restore arch-specific pgd_offset_k implementation
vfio/type1: Add proper error unwind for vfio_iommu_replay()
vfio-pci: Avoid recursive read-lock usage
watch_queue: Limit the number of watches a user can hold
ASoC: intel: Fix memleak in sst_media_open
ASoC: msm8916-wcd-analog: fix register Interrupt offset
s390/ptrace: fix storage key handling
s390/runtime_instrumentation: fix storage key handling
ipvlan: fix device features
bonding: fix a potential double-unregister
can: j1939: add rxtimer for multipacket broadcast session
can: j1939: abort multipacket broadcast session when timeout occurs
can: j1939: cancel rxtimer on multipacket broadcast session complete
can: j1939: fix support for multipacket broadcast message
bonding: show saner speed for broadcast mode
net: fec: correct the error path for regulator disable in probe
i40e: Fix crash during removing i40e driver
i40e: Set RX_ONLY mode for unicast promiscuous on VLAN
igc: Fix PTP initialization
can: j1939: transport: add j1939_session_skb_find_by_offset() function
can: j1939: transport: j1939_simple_recv(): ignore local J1939 messages send not by J1939 stack
can: j1939: fix kernel-infoleak in j1939_sk_sock2sockaddr_can()
libbpf: Fix BTF-defined map-in-map initialization on 32-bit host arches
bpf: sock_ops sk access may stomp registers when dst_reg = src_reg
bpf: sock_ops ctx access may stomp registers in corner case
tools/bpftool: Make skeleton code C++17-friendly by dropping typeof()
ASoC: q6routing: add dummy register read/write function
ASoC: q6afe-dai: mark all widgets registers as SND_SOC_NOPM
spi: stm32: fixes suspend/resume management
netfilter: nf_tables: nft_exthdr: the presence return value should be little-endian
ext4: check journal inode extents more carefully
ext4: don't allow overlapping system zones
drm/virtio: fix missing dma_fence_put() in virtio_gpu_execbuffer_ioctl()
ext4: fix potential negative array index in do_split()
fs/signalfd.c: fix inconsistent return codes for signalfd4
fat: fix fat_ra_init() for data clusters == 0
alpha: fix annotation of io{read,write}{16,32}be()
xfs: Fix UBSAN null-ptr-deref in xfs_sysfs_init
tools/testing/selftests/cgroup/cgroup_util.c: cg_read_strcmp: fix null pointer dereference
media: camss: fix memory leaks on error handling paths in probe
virtio_ring: Avoid loop when vq is broken in virtqueue_poll
scsi: libfc: Free skb in fc_disc_gpn_id_resp() for valid cases
cpufreq: intel_pstate: Fix cpuinfo_max_freq when MSR_TURBO_RATIO_LIMIT is 0
swiotlb-xen: use vmalloc_to_page on vmalloc virt addresses
ceph: fix use-after-free for fsc->mdsc
jffs2: fix UAF problem
riscv: Fixup static_obj() fail
drm/ttm: fix offset in VMAs with a pg_offs in ttm_bo_vm_access
xfs: fix inode quota reservation checks
svcrdma: Fix another Receive buffer leak
m68knommu: fix overwriting of bits in ColdFire V3 cache control
MIPS: Fix unable to reserve memory for Crash kernel
Input: psmouse - add a newline when printing 'proto' by sysfs
f2fs: should avoid inode eviction in synchronous path
media: vpss: clean up resources in init
rtc: goldfish: Enable interrupt in set_alarm() when necessary
f2fs: fix to check page dirty status before writeback
media: coda: jpeg: add NULL check after kmalloc
media: budget-core: Improve exception handling in budget_register()
scsi: target: tcmu: Fix crash in tcmu_flush_dcache_range on ARM
scsi: ufs: Add DELAY_BEFORE_LPM quirk for Micron devices
drm/i915: Provide the perf pmu.module
drm/i915/pmu: Prefer drm_WARN_ON over WARN_ON
drm/amd/display: fix pow() crashing when given base 0
drm/amd/display: Fix DFPstate hang due to view port changed
drm/amd/display: Blank stream before destroying HDCP session
drm/amd/display: Fix EDID parsing after resume from suspend
drm/amd/display: Fix incorrect backlight register offset for DCN
drm/amdgpu/display: use GFP_ATOMIC in dcn20_validate_bandwidth_internal
drm: amdgpu: Use the correct size when allocating memory
mm/memory.c: skip spurious TLB flush for retried page fault
s390/pci: ignore stale configuration request event
s390/pci: fix PF/VF linking on hot plug
s390/pci: re-introduce zpci_remove_device()
s390/pci: fix zpci_bus_link_virtfn()
selftests: kvm: Use a shorter encoding to clear RAX
scsi: zfcp: Fix use-after-free in request timeout handlers
jbd2: add the missing unlock_buffer() in the error path of jbd2_write_superblock()
ext4: fix checking of directory entry validity for inline directories
ext4: do not block RWF_NOWAIT dio write on unallocated space
opp: Put opp table in dev_pm_opp_set_rate() if _set_opp_bw() fails
opp: Put opp table in dev_pm_opp_set_rate() for empty tables
opp: Enable resources again if they were disabled earlier
RDMA/hfi1: Correct an interlock issue for TID RDMA WRITE request
ASoC: amd: renoir: restore two more registers during resume
mm, page_alloc: fix core hung in free_pcppages_bulk()
mm: include CMA pages in lowmem_reserve at boot
squashfs: avoid bio_alloc() failure with 1Mbyte blocks
uprobes: __replace_page() avoid BUG in munlock_vma_page()
kernel/relay.c: fix memleak on destroy relay channel
romfs: fix uninitialized memory leak in romfs_dev_read()
mm/vunmap: add cond_resched() in vunmap_pmd_range
io_uring: find and cancel head link async work on files exit
spi: Prevent adding devices below an unregistering controller
can: j1939: socket: j1939_sk_bind(): make sure ml_priv is allocated
can: j1939: transport: j1939_session_tx_dat(): fix use-after-free read in j1939_tp_txtimer()
ALSA: hda/realtek: Add quirk for Samsung Galaxy Book Ion
ALSA: hda/realtek: Add quirk for Samsung Galaxy Flex Book
ALSA: hda: avoid reset of sdo_limit
khugepaged: adjust VM_BUG_ON_MM() in __khugepaged_enter()
drm/ast: Initialize DRAM type before posting GPU
drm/ast: Remove unused code paths for AST 1180
drm/panel-simple: Fix inverted V/H SYNC for Frida FRD350H54004 panel
drm/vgem: Replace opencoded version of drm_gem_dumb_map_offset()

The following patch from this stable update had already been applied:

of/address: check for invalid range.cpu_addr

CVE References

Seth Forshee (sforshee)
Changed in linux (Ubuntu):
status: New → Confirmed
tags: added: kernel-stable-tracking-bug
Changed in linux (Ubuntu Groovy):
assignee: nobody → Seth Forshee (sforshee)
importance: Undecided → Medium
status: Confirmed → In Progress
description: updated
Seth Forshee (sforshee)
Changed in linux (Ubuntu Groovy):
status: In Progress → Fix Committed
Revision history for this message
Launchpad Janitor (janitor) wrote :
Download full text (57.9 KiB)

This bug was fixed in the package linux - 5.8.0-18.19

---------------
linux (5.8.0-18.19) groovy; urgency=medium

  * groovy/linux: 5.8.0-18.19 -proposed tracker (LP: #1893047)

  * Packaging resync (LP: #1786013)
    - update dkms package versions

  * Groovy update: v5.8.4 upstream stable release (LP: #1893048)
    - drm/vgem: Replace opencoded version of drm_gem_dumb_map_offset()
    - drm/panel-simple: Fix inverted V/H SYNC for Frida FRD350H54004 panel
    - drm/ast: Remove unused code paths for AST 1180
    - drm/ast: Initialize DRAM type before posting GPU
    - khugepaged: adjust VM_BUG_ON_MM() in __khugepaged_enter()
    - ALSA: hda: avoid reset of sdo_limit
    - ALSA: hda/realtek: Add quirk for Samsung Galaxy Flex Book
    - ALSA: hda/realtek: Add quirk for Samsung Galaxy Book Ion
    - can: j1939: transport: j1939_session_tx_dat(): fix use-after-free read in
      j1939_tp_txtimer()
    - can: j1939: socket: j1939_sk_bind(): make sure ml_priv is allocated
    - spi: Prevent adding devices below an unregistering controller
    - io_uring: find and cancel head link async work on files exit
    - mm/vunmap: add cond_resched() in vunmap_pmd_range
    - romfs: fix uninitialized memory leak in romfs_dev_read()
    - kernel/relay.c: fix memleak on destroy relay channel
    - uprobes: __replace_page() avoid BUG in munlock_vma_page()
    - squashfs: avoid bio_alloc() failure with 1Mbyte blocks
    - mm: include CMA pages in lowmem_reserve at boot
    - mm, page_alloc: fix core hung in free_pcppages_bulk()
    - ASoC: amd: renoir: restore two more registers during resume
    - RDMA/hfi1: Correct an interlock issue for TID RDMA WRITE request
    - opp: Enable resources again if they were disabled earlier
    - opp: Put opp table in dev_pm_opp_set_rate() for empty tables
    - opp: Put opp table in dev_pm_opp_set_rate() if _set_opp_bw() fails
    - ext4: do not block RWF_NOWAIT dio write on unallocated space
    - ext4: fix checking of directory entry validity for inline directories
    - jbd2: add the missing unlock_buffer() in the error path of
      jbd2_write_superblock()
    - scsi: zfcp: Fix use-after-free in request timeout handlers
    - selftests: kvm: Use a shorter encoding to clear RAX
    - s390/pci: fix zpci_bus_link_virtfn()
    - s390/pci: re-introduce zpci_remove_device()
    - s390/pci: fix PF/VF linking on hot plug
    - s390/pci: ignore stale configuration request event
    - mm/memory.c: skip spurious TLB flush for retried page fault
    - drm: amdgpu: Use the correct size when allocating memory
    - drm/amdgpu/display: use GFP_ATOMIC in dcn20_validate_bandwidth_internal
    - drm/amd/display: Fix incorrect backlight register offset for DCN
    - drm/amd/display: Fix EDID parsing after resume from suspend
    - drm/amd/display: Blank stream before destroying HDCP session
    - drm/amd/display: Fix DFPstate hang due to view port changed
    - drm/amd/display: fix pow() crashing when given base 0
    - drm/i915/pmu: Prefer drm_WARN_ON over WARN_ON
    - drm/i915: Provide the perf pmu.module
    - scsi: ufs: Add DELAY_BEFORE_LPM quirk for Micron devices
    - scsi: target: tcmu: Fix crash in tcmu_flush_dcache_range on ARM
  ...

Changed in linux (Ubuntu Groovy):
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.