Jammy update: v6.1.46 upstream stable release

Bug #2032632 reported by Timo Aaltonen
10
This bug affects 1 person
Affects Status Importance Assigned to Milestone
linux-oem-6.1 (Ubuntu)
Invalid
Undecided
Unassigned
Jammy
Fix Released
Undecided
Unassigned

Bug Description

    SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The following upstream
       stable patches should be included in the Ubuntu kernel:

       v6.1.46 upstream stable release
       from git://git.kernel.org/

Linux 6.1.46
drm/amd/pm/smu7: move variables to where they are used
sch_netem: fix issues in netem_change() vs get_dist_table()
alpha: remove __init annotation from exported page_is_ram()
ACPI: scan: Create platform device for CS35L56
platform/x86: serial-multi-instantiate: Auto detect IRQ resource for CSC3551
scsi: qedf: Fix firmware halt over suspend and resume
scsi: qedi: Fix firmware halt over suspend and resume
scsi: fnic: Replace return codes in fnic_clean_pending_aborts()
scsi: core: Fix possible memory leak if device_add() fails
scsi: snic: Fix possible memory leak if device_add() fails
scsi: 53c700: Check that command slot is not NULL
scsi: ufs: renesas: Fix private allocation
scsi: storvsc: Fix handling of virtual Fibre Channel timeouts
scsi: core: Fix legacy /proc parsing buffer overflow
netfilter: nf_tables: report use refcount overflow
nvme-rdma: fix potential unbalanced freeze & unfreeze
nvme-tcp: fix potential unbalanced freeze & unfreeze
btrfs: set cache_block_group_error if we find an error
btrfs: reject invalid reloc tree root keys with stack dump
btrfs: exit gracefully if reloc roots don't match
btrfs: properly clear end of the unreserved range in cow_file_range
btrfs: don't stop integrity writeback too early
btrfs: wait for actual caching progress during allocation
gpio: sim: mark the GPIO chip as a one that can sleep
gpio: ws16c48: Fix off-by-one error in WS16C48 resource region extent
ibmvnic: Ensure login failure recovery is safe from other resets
ibmvnic: Do partial reset on login failure
ibmvnic: Handle DMA unmapping of login buffs in release functions
ibmvnic: Unmap DMA login rsp buffer on send login fail
ibmvnic: Enforce stronger sanity checks on login response
net/mlx5: Reload auxiliary devices in pci error handlers
net/mlx5: Skip clock update work when device is in error state
net/mlx5: LAG, Check correct bucket when modifying LAG
net/mlx5: Allow 0 for total host VFs
dmaengine: owl-dma: Modify mismatched function name
dmaengine: mcf-edma: Fix a potential un-allocated memory access
net: hns3: fix strscpy causing content truncation issue
nexthop: Fix infinite nexthop bucket dump when using maximum nexthop ID
nexthop: Make nexthop bucket dump more efficient
nexthop: Fix infinite nexthop dump when using maximum nexthop ID
net: hns3: fix deadlock issue when externel_lb and reset are executed together
net: hns3: add wait until mac link down
net: hns3: refactor hclge_mac_link_status_wait for interface reuse
net: dsa: ocelot: call dsa_tag_8021q_unregister() under rtnl_lock() on driver remove
net: phy: at803x: remove set/get wol callbacks for AR8032
net: marvell: prestera: fix handling IPv4 routes with nhid
net: tls: avoid discarding data on record close
RDMA/umem: Set iova in ODP flow
wifi: cfg80211: fix sband iftype data lookup for AP_VLAN
drm/rockchip: Don't spam logs in atomic check
IB/hfi1: Fix possible panic during hotplug remove
iavf: fix potential races for FDIR filters
drivers: vxlan: vnifilter: free percpu vni stats on error path
drivers: net: prevent tun_build_skb() to exceed the packet size limit
dccp: fix data-race around dp->dccps_mss_cache
bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
xsk: fix refcount underflow in error path
tunnels: fix kasan splat when generating ipv4 pmtu error
tcp: add missing family to tcp_set_ca_state() tracepoint
net/smc: Use correct buffer sizes when switching between TCP and SMC
net/packet: annotate data-races around tp->status
mptcp: fix the incorrect judgment for msk->cb_flags
macsec: use DEV_STATS_INC()
mISDN: Update parameter type of dsp_cmx_send()
bpf, sockmap: Fix bug that strp_done cannot be called
bpf, sockmap: Fix map type error in sock_map_del_link
net: core: remove unnecessary frame_sz check in bpf_xdp_adjust_tail()
selftests: forwarding: tc_flower: Relax success criterion
selftests: forwarding: Switch off timeout
selftests: forwarding: Skip test when no interfaces are specified
selftests: forwarding: hw_stats_l3_gre: Skip when using veth pairs
selftests: forwarding: ethtool_extended_state: Skip when using veth pairs
selftests: forwarding: ethtool: Skip when using veth pairs
selftests: forwarding: Add a helper to skip test when using veth pairs
selftests/rseq: Fix build with undefined __weak
interconnect: qcom: sm8450: add enable_mask for bcm nodes
interconnect: qcom: Add support for mask-based BCMs
iio: core: Prevent invalid memory access when there is no parent
drm/nouveau/disp: Revert a NULL check inside nouveau_connector_get_modes
x86: Move gds_ucode_mitigated() declaration to header
x86/speculation: Add cpu_show_gds() prototype
x86/sev: Do not try to parse for the CC blob on non-AMD hardware
x86/mm: Fix VDSO and VVAR placement on 5-level paging machines
x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
x86/srso: Fix build breakage with the LLVM linker
usb: typec: altmodes/displayport: Signal hpd when configuring pin assignment
usb: typec: tcpm: Fix response to vsafe0V event
usb: common: usb-conn-gpio: Prevent bailing out if initial role is none
USB: Gadget: core: Help prevent panic during UVC unconfigure
usb: dwc3: Properly handle processing of pending events
usb-storage: alauda: Fix uninit-value in alauda_check_media()
misc: rtsx: judge ASPM Mode to set PETXCFG Reg
binder: fix memory leak in binder_init()
iio: adc: ina2xx: avoid NULL pointer dereference on OF device match
iio: adc: ad7192: Fix ac excitation feature
iio: frequency: admv1013: propagate errors from regulator_get_voltage()
iio: cros_ec: Fix the allocation size for cros_ec_command
io_uring: correct check for O_TMPFILE
drm/amd/display: trigger timing sync only if TG is running
drm/amd/display: fix the build when DRM_AMD_DC_DCN is not set
drm/amd/display: Retain phantom plane/stream if validation fails
drm/amd/display: Disable phantom OTG after enable for plane disable
drm/amd/display: Use update plane and stream routine for DCN32x
drm/amd/display: Avoid ABM when ODM combine is enabled for eDP
drm/amd/display: Update OTG instance in the commit stream
drm/amd/display: Handle seamless boot stream
drm/amd/display: Add function for validate and update new stream
drm/amd/display: Handle virtual hardware detect
drm/amd/pm: avoid unintentional shutdown due to temperature momentary fluctuation
drm/amd/pm: fulfill powerplay peak profiling mode shader/memory clock settings
drm/amd/pm: expose swctf threshold setting for legacy powerplay
drm/amd/pm: fulfill swsmu peak profiling mode shader/memory clock settings
nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput
radix tree test suite: fix incorrect allocation size for pthreads
hwmon: (pmbus/bel-pfe) Enable PMBUS_SKIP_STATUS_CHECK for pfe1100
cpuidle: dt_idle_genpd: Add helper function to remove genpd topology
drm/amd/display: limit DPIA link rate to HBR3
drm/amd: Disable S/G for APUs when 64GB or more host memory
drm/amdgpu: add S/G display parameter
drm/amd/display: check attr flag before set cursor degamma on DCN3+
drm/amdgpu: fix possible UAF in amdgpu_cs_pass1()
drm/shmem-helper: Reset vma->vm_ops before calling dma_buf_mmap()
drm/nouveau/nvkm/dp: Add workaround to fix DP 1.3+ DPCD issues
drm/nouveau/gr: enable memory loads on helper invocation on all channels
nvme-pci: add NVME_QUIRK_BOGUS_NID for Samsung PM9B1 256G and 512G
riscv/kexec: handle R_RISCV_CALL_PLT relocation type
riscv,mmio: Fix readX()-to-delay() ordering
riscv/kexec: load initrd high in available memory
net: mana: Fix MANA VF unload when hardware is unresponsive
dmaengine: pl330: Return DMA_PAUSED when transaction is paused
mptcp: fix disconnect vs accept race
mptcp: avoid bogus reset on fallback close
selftests: mptcp: join: fix 'implicit EP' test
selftests: mptcp: join: fix 'delete and re-add' test
ipv6: adjust ndisc_is_useropt() to also return true for PIO
mmc: moxart: read scr register without changing byte order
wireguard: allowedips: expand maximum node depth
selftests: forwarding: Set default IPv6 traceroute utility
wifi: rtw89: fix 8852AE disconnection caused by RX full flags
wifi: nl80211: fix integer overflow in nl80211_parse_mbssid_elems()
KVM: SEV: only access GHCB fields once
KVM: SEV: snapshot the GHCB before accessing it
ksmbd: fix wrong next length validation of ea buffer in smb2_set_ea()
ksmbd: validate command request size
tpm: Add a helper for checking hwrng enabled
tpm: Disable RNG for all AMD fTPMs
Revert "loongarch/cpu: Switch to arch_cpu_finalize_init()"
gcc-plugins: Reorganize gimple includes for GCC 13

CVE References

Timo Aaltonen (tjaalton)
Changed in linux-oem-6.1 (Ubuntu):
status: New → Confirmed
tags: added: kernel-stable-tracking-bug
Timo Aaltonen (tjaalton)
Changed in linux-oem-6.1 (Ubuntu):
status: Confirmed → Invalid
Changed in linux-oem-6.1 (Ubuntu Jammy):
status: New → Fix Committed
Revision history for this message
Launchpad Janitor (janitor) wrote :
Download full text (44.8 KiB)

This bug was fixed in the package linux-oem-6.1 - 6.1.0-1021.21

---------------
linux-oem-6.1 (6.1.0-1021.21) jammy; urgency=medium

  * jammy/linux-oem-6.1: 6.1.0-1021.21 -proposed tracker (LP: #2030428)

  * Packaging resync (LP: #1786013)
    - [Packaging] resync update-dkms-versions helper

  * Jammy update: v6.1.46 upstream stable release (LP: #2032632)
    - gcc-plugins: Reorganize gimple includes for GCC 13
    - Revert "loongarch/cpu: Switch to arch_cpu_finalize_init()"
    - tpm: Disable RNG for all AMD fTPMs
    - tpm: Add a helper for checking hwrng enabled
    - ksmbd: validate command request size
    - ksmbd: fix wrong next length validation of ea buffer in smb2_set_ea()
    - KVM: SEV: snapshot the GHCB before accessing it
    - KVM: SEV: only access GHCB fields once
    - wifi: nl80211: fix integer overflow in nl80211_parse_mbssid_elems()
    - wifi: rtw89: fix 8852AE disconnection caused by RX full flags
    - selftests: forwarding: Set default IPv6 traceroute utility
    - wireguard: allowedips: expand maximum node depth
    - mmc: moxart: read scr register without changing byte order
    - ipv6: adjust ndisc_is_useropt() to also return true for PIO
    - selftests: mptcp: join: fix 'delete and re-add' test
    - selftests: mptcp: join: fix 'implicit EP' test
    - mptcp: avoid bogus reset on fallback close
    - mptcp: fix disconnect vs accept race
    - dmaengine: pl330: Return DMA_PAUSED when transaction is paused
    - net: mana: Fix MANA VF unload when hardware is unresponsive
    - riscv/kexec: load initrd high in available memory
    - riscv,mmio: Fix readX()-to-delay() ordering
    - riscv/kexec: handle R_RISCV_CALL_PLT relocation type
    - nvme-pci: add NVME_QUIRK_BOGUS_NID for Samsung PM9B1 256G and 512G
    - drm/nouveau/gr: enable memory loads on helper invocation on all channels
    - drm/nouveau/nvkm/dp: Add workaround to fix DP 1.3+ DPCD issues
    - drm/shmem-helper: Reset vma->vm_ops before calling dma_buf_mmap()
    - drm/amdgpu: fix possible UAF in amdgpu_cs_pass1()
    - drm/amd/display: check attr flag before set cursor degamma on DCN3+
    - drm/amdgpu: add S/G display parameter
    - drm/amd: Disable S/G for APUs when 64GB or more host memory
    - drm/amd/display: limit DPIA link rate to HBR3
    - cpuidle: dt_idle_genpd: Add helper function to remove genpd topology
    - hwmon: (pmbus/bel-pfe) Enable PMBUS_SKIP_STATUS_CHECK for pfe1100
    - radix tree test suite: fix incorrect allocation size for pthreads
    - nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput
    - drm/amd/pm: fulfill swsmu peak profiling mode shader/memory clock settings
    - drm/amd/pm: expose swctf threshold setting for legacy powerplay
    - drm/amd/pm: fulfill powerplay peak profiling mode shader/memory clock
      settings
    - drm/amd/pm: avoid unintentional shutdown due to temperature momentary
      fluctuation
    - drm/amd/display: Handle virtual hardware detect
    - drm/amd/display: Add function for validate and update new stream
    - drm/amd/display: Handle seamless boot stream
    - drm/amd/display: Update OTG instance in the commit stream
    - drm/amd/display: Avoid ABM when ODM combine is e...

Changed in linux-oem-6.1 (Ubuntu Jammy):
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.