Hirsute update: v5.11.11 upstream stable release

Bug #1922601 reported by Seth Forshee
10
This bug affects 1 person
Affects Status Importance Assigned to Milestone
linux (Ubuntu)
Fix Released
Undecided
Seth Forshee
Hirsute
Fix Released
Undecided
Seth Forshee

Bug Description

    SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The following upstream
       stable patches should be included in the Ubuntu kernel:

       v5.11.11 upstream stable release
       from git://git.kernel.org/

Linux 5.11.11
xen-blkback: don't leak persistent grants from xen_blkbk_map()
selftest/bpf: Add a test to check trampoline freeing logic.
can: peak_usb: Revert "can: peak_usb: add forgotten supported devices"
nvme: fix the nsid value to print in nvme_validate_or_alloc_ns
Revert "xen: fix p2m size in dom0 for disabled memory hotplug case"
fs/ext4: fix integer overflow in s_log_groups_per_flex
ext4: add reclaim checks to xattr code
mac80211: fix double free in ibss_leave
net: dsa: b53: VLAN filtering is global to all users
r8169: fix DMA being used after buffer free if WoL is enabled
can: dev: Move device back to init netns on owning netns delete
ch_ktls: fix enum-conversion warning
fs/cachefiles: Remove wait_bit_key layout dependency
x86/mem_encrypt: Correct physical address calculation in __set_clr_pte_enc()
locking/mutex: Fix non debug version of mutex_lock_io_nested()
cifs: Adjust key sizes and key generation routines for AES256 encryption
smb3: fix cached file size problems in duplicate extents (reflink)
scsi: mpt3sas: Fix error return code of mpt3sas_base_attach()
scsi: qedi: Fix error return code of qedi_alloc_global_queues()
scsi: Revert "qla2xxx: Make sure that aborted commands are freed"
block: recalculate segment count for multi-segment discards correctly
io_uring: fix provide_buffers sign extension
perf synthetic events: Avoid write of uninitialized memory when generating PERF_RECORD_MMAP* records
perf auxtrace: Fix auxtrace queue conflict
ACPI: scan: Use unique number for instance_no
ACPI: scan: Rearrange memory allocation in acpi_device_add()
Revert "netfilter: x_tables: Update remaining dereference to RCU"
mm/mmu_notifiers: ensure range_end() is paired with range_start()
dm table: Fix zoned model check and zone sectors check
platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files()
bpf: Use NOP_ATOMIC5 instead of emit_nops(&prog, 5) for BPF_TRAMP_F_CALL_ORIG
bpf: Fix fexit trampoline.
netfilter: x_tables: Use correct memory barriers.
Revert "netfilter: x_tables: Switch synchronization to RCU"
net: phy: broadcom: Fix RGMII delays for BCM50160 and BCM50610M
net: phy: broadcom: Set proper 1000BaseX/SGMII interface mode for BCM54616S
net: phy: broadcom: Avoid forward for bcm54xx_config_clock_delay()
net: phy: introduce phydev->port
net: axienet: Fix probe error cleanup
igb: avoid premature Rx buffer reuse
net, bpf: Fix ip6ip6 crash with collect_md populated skbs
net: Consolidate common blackhole dst ops
bpf: Don't do bpf_cgroup_storage_set() for kuprobe/tp programs
mm: memblock: fix section mismatch warning again
RDMA/cxgb4: Fix adapter LE hash errors while destroying ipv6 listening server
xen/x86: make XEN_BALLOON_MEMORY_HOTPLUG_LIMIT depend on MEMORY_HOTPLUG
octeontx2-af: Fix memory leak of object buf
net: bridge: don't notify switchdev for local FDB addresses
platform/x86: intel_pmt_crashlog: Fix incorrect macros
PM: EM: postpone creating the debugfs dir till fs_initcall
mfd: intel_quark_i2c_gpio: Revert "Constify static struct resources"
net/mlx5e: Fix error path for ethtool set-priv-flag
net/mlx5e: Offload tuple rewrite for non-CT flows
net/mlx5e: Allow to match on MPLS parameters only for MPLS over UDP
net/mlx5: Add back multicast stats for uplink representor
PM: runtime: Defer suspending suppliers
arm64: kdump: update ppos when reading elfcorehdr
drm/msm: Fix suspend/resume on i.MX5
drm/msm: fix shutdown hook in case GPU components failed to bind
platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found
platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling
platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure
platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times
platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit
platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice
can: isotp: tx-path: zero initialize outgoing CAN frames
bpf: Fix umd memory leak in copy_process()
libbpf: Fix BTF dump of pointer-to-array-of-struct
selftests: forwarding: vxlan_bridge_1d: Fix vxlan ecn decapsulate value
selinux: vsock: Set SID for socket returned by accept()
net: stmmac: dwmac-sun8i: Provide TX and RX fifo sizes
r8152: limit the RX buffer size of RTL8153A for USB 2.0
sctp: move sk_route_caps check and set into sctp_outq_flush_transports
igb: check timestamp validity
net: cdc-phonet: fix data-interface release on probe failure
net: check all name nodes in __dev_alloc_name
octeontx2-af: fix infinite loop in unmapping NPC counter
octeontx2-pf: Clear RSS enable flag on interace down
octeontx2-af: Fix irq free in rvu teardown
octeontx2-af: Remove TOS field from MKEX TX
octeontx2-af: Formatting debugfs entry rsrc_alloc.
ipv6: weaken the v4mapped source check
ARM: dts: imx6ull: fix ubi filesystem mount failed
libbpf: Use SOCK_CLOEXEC when opening the netlink socket
libbpf: Fix error path in bpf_object__elf_init()
netfilter: flowtable: Make sure GC works periodically in idle system
netfilter: nftables: allow to update flowtable flags
netfilter: nftables: report EOPNOTSUPP on unsupported flowtable flags
net/sched: cls_flower: fix only mask bit check in the validate_ct_state
ionic: linearize tso skb with too many frags
drm/msm/dsi: fix check-before-set in the 7nm dsi_pll code
ftrace: Fix modify_ftrace_direct.
nfp: flower: fix pre_tun mask id allocation
nfp: flower: add ipv6 bit to pre_tunnel control message
nfp: flower: fix unsupported pre_tunnel flows
selftests/net: fix warnings on reuseaddr_ports_exhausted
mac80211: Allow HE operation to be longer than expected.
mac80211: fix rate mask reset
can: m_can: m_can_rx_peripheral(): fix RX being blocked by errors
can: m_can: m_can_do_rx_poll(): fix extraneous msg loss warning
can: c_can: move runtime PM enable/disable to c_can_platform
can: c_can_pci: c_can_pci_remove(): fix use-after-free
can: kvaser_pciefd: Always disable bus load reporting
can: flexcan: flexcan_chip_freeze(): fix chip freeze for missing bitrate
can: peak_usb: add forgotten supported devices
can: isotp: TX-path: ensure that CAN frame flags are initialized
can: isotp: isotp_setsockopt(): only allow to set low level TX flags for CAN-FD
mptcp: fix ADD_ADDR HMAC in case port is specified
tcp: relookup sock for RST+ACK packets handled by obsolete req sock
tipc: better validate user input in tipc_nl_retrieve_key()
net: phylink: Fix phylink_err() function name error in phylink_major_config
net: hdlc_x25: Prevent racing between "x25_close" and "x25_xmit"/"x25_rx"
netfilter: ctnetlink: fix dump of the expect mask attribute
selftests/bpf: Set gopt opt_class to 0 if get tunnel opt failed
flow_dissector: fix byteorder of dissected ICMP ID
net: qrtr: fix a kernel-infoleak in qrtr_recvmsg()
net: ipa: terminate message handler arrays
clk: qcom: gcc-sc7180: Use floor ops for the correct sdcc1 clk
ftgmac100: Restart MAC HW once
ice: fix napi work done reporting in xsk path
net: phy: broadcom: Add power down exit reset state delay
net/qlcnic: Fix a use after free in qlcnic_83xx_get_minidump_template
kunit: tool: Disable PAGE_POISONING under --alltests
e1000e: Fix error handling in e1000_set_d0_lplu_state_82571
e1000e: add rtnl_lock() to e1000_reset_task
igc: Fix igc_ptp_rx_pktstamp()
igc: Fix Supported Pause Frame Link Setting
igc: Fix Pause Frame Advertising
igc: reinit_locked() should be called with rtnl_lock
net: dsa: bcm_sf2: Qualify phydev->dev_flags based on port
net: sched: validate stab values
macvlan: macvlan_count_rx() needs to be aware of preemption
drop_monitor: Perform cleanup upon probe registration failure
ipv6: fix suspecious RCU usage warning
net/mlx5e: E-switch, Fix rate calculation division
net/mlx5e: Don't match on Geneve options in case option masks are all zero
net/mlx5e: Revert parameters on errors when changing PTP state without reset
net/mlx5e: When changing XDP program without reset, take refs for XSK RQs
net/mlx5e: Set PTP channel pointer explicitly to NULL
net/mlx5e: RX, Mind the MPWQE gaps when calculating offsets
libbpf: Fix INSTALL flag order
bpf: Change inode_storage's lookup_elem return value from NULL to -EBADF
bpf: Dont allow vmlinux BTF to be used in map_create and prog_load.
veth: Store queue_mapping independently of XDP prog presence
soc: ti: omap-prm: Fix occasional abort on reset deassert for dra7 iva
ARM: OMAP2+: Fix smartreflex init regression after dropping legacy data
soc: ti: omap-prm: Fix reboot issue with invalid pcie reset map for dra7
bus: omap_l3_noc: mark l3 irqs as IRQF_NO_THREAD
dm ioctl: fix out of bounds array access when no devices
dm: don't report "detected capacity change" on device creation
dm verity: fix DM_VERITY_OPTS_MAX value
drm/i915: Fix the GT fence revocation runtime PM logic
drm/i915/dsc: fix DSS CTL register usage for ICL DSI transcoders
drm/amdgpu: Add additional Sienna Cichlid PCI ID
drm/amdgpu: fix the hibernation suspend with s0ix
drm/amdgpu/display: restore AUX_DPHY_TX_CONTROL for DCN2.x
drm/amd/pm: workaround for audio noise issue
drm/etnaviv: Use FOLL_FORCE for userptr
drm/nouveau/kms/nve4-nv108: Limit cursors to 128x128
integrity: double check iint_cache was initialized
ARM: dts: at91-sama5d27_som1: fix phy address to 7
ARM: dts: at91: sam9x60: fix mux-mask to match product's datasheet
ARM: dts: at91: sam9x60: fix mux-mask for PA7 so it can be set to A, B and C
arm64: dts: ls1043a: mark crypto engine dma coherent
arm64: dts: ls1012a: mark crypto engine dma coherent
arm64: dts: ls1046a: mark crypto engine dma coherent
arm64: stacktrace: don't trace arch_stack_walk()
ACPICA: Always create namespace nodes using acpi_ns_create_node()
ACPI: video: Add missing callback back for Sony VPCEH3U1E
mm/highmem: fix CONFIG_DEBUG_KMAP_LOCAL_FORCE_MAP
gcov: fix clang-11+ support
kasan: fix per-page tags for non-page_alloc pages
hugetlb_cgroup: fix imbalanced css_get and css_put pair for shared mappings
squashfs: fix xattr id and id lookup sanity checks
squashfs: fix inode lookup sanity checks
z3fold: prevent reclaim/free race for headless pages
psample: Fix user API breakage
platform/x86: intel-vbtn: Stop reporting SW_DOCK events
netsec: restore phy power state after controller reset
selinux: fix variable scope issue in live sidtab conversion
selinux: don't log MAC_POLICY_LOAD record on failed policy load
btrfs: fix subvolume/snapshot deletion not triggered on mount
btrfs: fix sleep while in non-sleep context during qgroup removal
btrfs: initialize device::fs_info always
btrfs: fix check_data_csum() error message for direct I/O
btrfs: do not initialize dev replace for bad dev root
btrfs: do not initialize dev stats if we have no dev_root
KVM: x86: Protect userspace MSR filter with SRCU, and set atomically-ish
static_call: Fix static_call_set_init()
static_call: Fix the module key fixup
static_call: Allow module use without exposing static_call_key
static_call: Pull some static_call declarations to the type headers
ia64: fix ptrace(PTRACE_SYSCALL_INFO_EXIT) sign
ia64: fix ia64_syscall_get_set_arguments() for break-based syscalls
mm/fork: clear PASID for new mm
io_uring: cancel deferred requests in try_cancel
block: Suppress uevent for hidden device when removed
nfs: we don't support removing system.nfs4_acl
nvme-pci: add the DISABLE_WRITE_ZEROES quirk for a Samsung PM1725a
nvme-rdma: Fix a use after free in nvmet_rdma_write_data_done
nvme-core: check ctrl css before setting up zns
nvme-fc: return NVME_SC_HOST_ABORTED_CMD when a command has been aborted
nvme-fc: set NVME_REQ_CANCELLED in nvme_fc_terminate_exchange()
nvme: add NVME_REQ_CANCELLED flag in nvme_cancel_request()
nvme: simplify error logic in nvme_validate_ns()
drm/radeon: fix AGP dependency
drm/amdgpu: fb BO should be ttm_bo_type_device
drm/amdgpu/display: Use wm_table.entries for dcn301 calculate_wm
drm/amd/display: Enabled pipe harvesting in dcn30
drm/amd/display: Revert dram_clock_change_latency for DCN2.1
drm/amd/display: Enable pflip interrupt upon pipe enable
block: Fix REQ_OP_ZONE_RESET_ALL handling
regulator: qcom-rpmh: Use correct buck for S1C regulator
regulator: qcom-rpmh: Correct the pmic5_hfsmps515 buck
kselftest: arm64: Fix exit code of sve-ptrace
u64_stats,lockdep: Fix u64_stats_init() vs lockdep
staging: rtl8192e: fix kconfig dependency on CRYPTO
habanalabs: Disable file operations after device is removed
habanalabs: Call put_pid() when releasing control device
sparc64: Fix opcode filtering in handling of no fault loads
umem: fix error return code in mm_pci_probe()
kbuild: dummy-tools: fix inverted tests for gcc
kbuild: add image_name to no-sync-config-targets
irqchip/ingenic: Add support for the JZ4760
cifs: change noisy error message to FYI
atm: idt77252: fix null-ptr-dereference
atm: uPD98402: fix incorrect allocation
net: enetc: set MAC RX FIFO to recommended value
net: davicom: Use platform_get_irq_optional()
net: wan: fix error return code of uhdlc_init()
net: hisilicon: hns: fix error return code of hns_nic_clear_all_rx_fetch()
NFS: Correct size calculation for create reply length
nfs: fix PNFS_FLEXFILE_LAYOUT Kconfig default
gpiolib: acpi: Add missing IRQF_ONESHOT
cpufreq: blacklist Arm Vexpress platforms in cpufreq-dt-platdev
gfs2: fix use-after-free in trans_drain
cifs: ask for more credit on async read/write code paths
gianfar: fix jumbo packets+napi+rx overrun crash
sun/niu: fix wrong RXMAC_BC_FRM_CNT_COUNT count
net: intel: iavf: fix error return code of iavf_init_get_resources()
net: tehuti: fix error return code in bdx_probe()
blk-cgroup: Fix the recursive blkg rwstat
scsi: ufs: ufs-qcom: Disable interrupt in reset path
ixgbe: Fix memleak in ixgbe_configure_clsu32
ALSA: hda: ignore invalid NHLT table
Revert "r8152: adjust the settings about MAC clock speed down for RTL8153"
atm: lanai: dont run lanai_dev_close if not open
atm: eni: dont release is never initialized
powerpc/4xx: Fix build errors from mfdcr()
net: fec: ptp: avoid register access when ipg clock is disabled
net: stmmac: fix dma physical address of descriptor when display ring
mt76: mt7915: only modify tx buffer list after allocating tx token id
mt76: fix tx skb error handling in mt76_dma_tx_queue_skb

CVE References

Seth Forshee (sforshee)
Changed in linux (Ubuntu):
status: New → Confirmed
tags: added: kernel-stable-tracking-bug
Changed in linux (Ubuntu Hirsute):
assignee: nobody → Seth Forshee (sforshee)
status: Confirmed → In Progress
Seth Forshee (sforshee)
Changed in linux (Ubuntu Hirsute):
status: In Progress → Fix Committed
Revision history for this message
Launchpad Janitor (janitor) wrote :
Download full text (37.7 KiB)

This bug was fixed in the package linux - 5.11.0-14.15

---------------
linux (5.11.0-14.15) hirsute; urgency=medium

  * hirsute/linux: 5.11.0-14.15 -proposed tracker (LP: #1923103)

  * Packaging resync (LP: #1786013)
    - update dkms package versions

  * Include Infiniband Peer Memory interface (LP: #1923104)
    - SAUCE: RDMA/core: Introduce peer memory interface

  * Hirsute update: v5.11.12 upstream stable release (LP: #1923069)
    - arm64: mm: correct the inside linear map range during hotplug check
    - virtiofs: Fail dax mount if device does not support it
    - ext4: shrink race window in ext4_should_retry_alloc()
    - ext4: fix bh ref count on error paths
    - fs: nfsd: fix kconfig dependency warning for NFSD_V4
    - rpc: fix NULL dereference on kmalloc failure
    - iomap: Fix negative assignment to unsigned sis->pages in
      iomap_swapfile_activate
    - ASoC: rt1015: fix i2c communication error
    - ASoC: rt5640: Fix dac- and adc- vol-tlv values being off by a factor of 10
    - ASoC: rt5651: Fix dac- and adc- vol-tlv values being off by a factor of 10
    - ASoC: sgtl5000: set DAP_AVC_CTRL register to correct default value on probe
    - ASoC: es8316: Simplify adc_pga_gain_tlv table
    - ASoC: soc-core: Prevent warning if no DMI table is present
    - ASoC: cs42l42: Fix Bitclock polarity inversion
    - ASoC: cs42l42: Fix channel width support
    - ASoC: cs42l42: Fix mixer volume control
    - ASoC: cs42l42: Always wait at least 3ms after reset
    - NFSD: fix error handling in NFSv4.0 callbacks
    - ASoC: mediatek: mt8192: fix tdm out data is valid on rising edge
    - kernel: freezer should treat PF_IO_WORKER like PF_KTHREAD for freezing
    - vhost: Fix vhost_vq_reset()
    - io_uring: fix ->flags races by linked timeouts
    - io_uring: halt SQO submission on ctx exit
    - scsi: st: Fix a use after free in st_open()
    - scsi: qla2xxx: Fix broken #endif placement
    - staging: comedi: cb_pcidas: fix request_irq() warn
    - staging: comedi: cb_pcidas64: fix request_irq() warn
    - ASoC: rt5659: Update MCLK rate in set_sysclk()
    - ASoC: rt711: add snd_soc_component remove callback
    - thermal/core: Add NULL pointer check before using cooling device stats
    - locking/ww_mutex: Simplify use_ww_ctx & ww_ctx handling
    - locking/ww_mutex: Fix acquire/release imbalance in
      ww_acquire_init()/ww_acquire_fini()
    - nvmet-tcp: fix kmap leak when data digest in use
    - io_uring: imply MSG_NOSIGNAL for send[msg]()/recv[msg]() calls
    - Revert "PM: ACPI: reboot: Use S5 for reboot"
    - nouveau: Skip unvailable ttm page entries
    - static_call: Align static_call_is_init() patching condition
    - ext4: do not iput inode under running transaction in ext4_rename()
    - io_uring: call req_set_fail_links() on short send[msg]()/recv[msg]() with
      MSG_WAITALL
    - net: mvpp2: fix interrupt mask/unmask skip condition
    - mptcp: deliver ssk errors to msk
    - mptcp: fix poll after shutdown
    - mptcp: init mptcp request socket earlier
    - mptcp: add a missing retransmission timer scheduling
    - flow_dissector: fix TTL and TOS dissection on IPv4 fragments
    - mptcp: fix DATA_FIN processing f...

Changed in linux (Ubuntu Hirsute):
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.