Jammy update: v5.15.150 upstream stable release
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
linux (Ubuntu) |
Invalid
|
Undecided
|
Unassigned | ||
Jammy |
Fix Released
|
Medium
|
Manuel Diewald |
Bug Description
SRU Justification
Impact:
The upstream process for stable tree updates is quite similar
in scope to the Ubuntu SRU process, e.g., each patch has to
demonstrably fix a bug, and each patch is vetted by upstream
by originating either directly from a mainline/stable Linux tree or
a minimally backported form of that patch. The following upstream
stable patches should be included in the Ubuntu kernel:
v5.15.150 upstream stable release
from git://git.
net/sched: Retire CBQ qdisc
UBUNTU: [Config] updateconfigs for NET_SCH_CBQ
net/sched: Retire ATM qdisc
UBUNTU: [Config] updateconfigs for NET_SCH_ATM
net/sched: Retire dsmark qdisc
UBUNTU: [Config] updateconfigs for NET_SCH_DSMARK
smb: client: fix potential OOBs in smb2_parse_
smb: client: fix parsing of SMB3.1.1 POSIX create context
sched/rt: sysctl_
PCI: dwc: Fix a 64bit bug in dw_pcie_
bpf: Merge printk and seq_printf VARARG max macros
bpf: Add struct for bin_args arg in bpf_bprintf_prepare
bpf: Do cleanup in bpf_bprintf_cleanup only when needed
bpf: Remove trace_printk_lock
userfaultfd: fix mmap_changing checking in mfill_atomic_
zonefs: Improve error handling
x86/fpu: Stop relying on userspace for info to fault in xsave buffer
sched/rt: Fix sysctl_
sched/rt: Disallow writing invalid values to sched_rt_period_us
scsi: target: core: Add TMF to tmr_list handling
dmaengine: shdma: increase size of 'dev_id'
dmaengine: fsl-qdma: increase size of 'irq_name'
wifi: cfg80211: fix missing interfaces when dumping
wifi: mac80211: fix race condition on enabling fast-xmit
fbdev: savage: Error out if pixclock equals zero
fbdev: sis: Error out if pixclock equals zero
spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
ahci: asm1166: correct count of reported ports
ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
MIPS: reserve exception vector space ONLY ONCE
platform/x86: touchscreen_dmi: Add info for the TECLAST X16 Plus tablet
ext4: avoid dividing by 0 in mb_update_
ext4: avoid allocating blocks from corrupted group in ext4_mb_
ext4: avoid allocating blocks from corrupted group in ext4_mb_
dmaengine: ti: edma: Add some null pointer checks to the edma_probe
regulator: pwm-regulator: Add validity checks in continuous .get_voltage
nvmet-tcp: fix nvme tcp ida memory leak
ALSA: usb-audio: Check presence of valid altsetting control
ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
spi: sh-msiof: avoid integer overflow in constants
Input: xpad - add Lenovo Legion Go controllers
netfilter: conntrack: check SCTP_CID_
ALSA: usb-audio: Ignore clock selector errors for single connection
nvme-fc: do not wait in vain when unloading module
nvmet-fcloop: swap the list_add_tail arguments
nvmet-fc: release reference on target port
nvmet-fc: defer cleanup using RCU properly
nvmet-fc: hold reference on hostport match
nvmet-fc: abort command when there is no binding
nvmet-fc: avoid deadlock on delete association path
nvmet-fc: take ref count on tgtport before delete assoc
ext4: correct the hole length returned by ext4_map_blocks()
Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
fs/ntfs3: Modified fix directory element type detection
fs/ntfs3: Improve ntfs_dir_count
fs/ntfs3: Correct hard links updating when dealing with DOS names
fs/ntfs3: Print warning while fixing hard links count
fs/ntfs3: Fix detected field-spanning write (size 8) of single field "le->name"
fs/ntfs3: Add NULL ptr dereference checking at the end of attr_allocate_
fs/ntfs3: Disable ATTR_LIST_ENTRY size check
fs/ntfs3: use non-movable memory for ntfs3 MFT buffer cache
fs/ntfs3: Prevent generic message "attempt to access beyond end of device"
fs/ntfs3: Correct function is_rst_area_valid
fs/ntfs3: Update inode->i_size after success write into compressed file
fs/ntfs3: Fix oob in ntfs_listxattr
wifi: mac80211: adding missing drv_mgd_
efi: runtime: Fix potential overflow of soft-reserved region size
efi: Don't add memblocks for soft-reserved memory
hwmon: (coretemp) Enlarge per package core count limit
scsi: lpfc: Use unsigned type for num_sge
firewire: core: send bus reset promptly on gap count error
drm/amdgpu: skip to program GFXDEC registers for suspend abort
drm/amdgpu: reset gpu for s3 suspend abort case
virtio-blk: Ensure no requests in virtqueues before deleting vqs.
pmdomain: mediatek: fix race conditions with genpd
ksmbd: free aux buffer if ksmbd_iov_
pmdomain: renesas: r8a77980-sysc: CR7 must be always on
erofs: fix lz4 inplace decompression
IB/hfi1: Fix sdma.h tx->num_descs off-by-one error
drm/ttm: Fix an invalid freeing on already freed page in error path
dm-crypt: don't modify the data when using authenticated encryption
platform/x86: intel-vbtn: Stop calling "VBDL" from notify_handler
platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
KVM: arm64: vgic-its: Test for valid IRQ in its_sync_
gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
PCI/MSI: Prevent MSI hardware interrupt number truncation
l2tp: pass correct message length to ip6_append_data
ARM: ep93xx: Add terminator to gpiod_lookup_table
Revert "x86/ftrace: Use alternative RET encoding"
x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
x86/ftrace: Use alternative RET encoding
x86/returnthunk: Allow different return thunks
Revert "x86/alternative: Make custom return thunk unconditional"
x86/alternative: Make custom return thunk unconditional
serial: amba-pl011: Fix DMA transmission in RS485 mode
usb: dwc3: gadget: Don't disconnect if not started
usb: cdnsp: blocked some cdns3 specific code
usb: cdnsp: fixed issue with incorrect detecting CDNSP family controllers
usb: cdns3: fixed memory use after free at cdns3_gadget_
usb: cdns3: fix memory double free when handle zero packet
usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
usb: roles: fix NULL pointer issue when put module's reference
usb: roles: don't get/set_role() when usb_role_switch is unregistered
mptcp: fix lockless access in subflow ULP diag
clk: imx: imx8mp: add shared clk gate for usb suspend clk
clk: qcom: gcc-qcs404: disable gpll[04]_out_aux parents
clk: qcom: gcc-qcs404: fix names of the DSI clocks used as parents
mtd: rawnand: sunxi: Fix the size of the last OOB region
RISC-V: fix funct4 definition for c.jalr in parse_asm.h
Input: iqs269a - drop unused device node references
Input: iqs269a - configure device with a single block write
Input: iqs269a - increase interrupt handler return delay
clk: renesas: cpg-mssr: Fix use after free if cpg_mssr_
Input: ads7846 - don't report pressure for ads7845
clk: renesas: cpg-mssr: Remove superfluous check in resume code
clk: imx: avoid memory leak
Input: ads7846 - always set last command to PWRDOWN
Input: ads7846 - don't check penirq immediately for 7845
powerpc/
clk: qcom: gpucc-sc7180: fix clk_dis_wait being programmed for CX GDSC
clk: qcom: gpucc-sdm845: fix clk_dis_wait being programmed for CX GDSC
clk: Honor CLK_OPS_
powerpc/
powerpc/
powerpc/
MIPS: SMP-CPS: fix build error when HOTPLUG_CPU not set
MIPS: vpe-mt: drop physical_memsize
vdpa/mlx5: Don't clear mr struct on destroy MR
ARM: dts: BCM53573: Drop nonexistent #usb-cells
RDMA/siw: Balance the reference of cep->kref in the error path
RDMA/siw: Correct wrong debug message
clk: linux/clk-
platform/x86: asus-wmi: Document the dgpu_disable sysfs attribute
acpi: property: Let args be NULL in __acpi_
ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
tools headers UAPI: Sync linux/fscrypt.h with the kernel sources
perf beauty: Update copy of linux/socket.h with the kernel sources
tools/virtio: fix build
drm/amdgpu: init iommu after amdkfd device init
f2fs: don't set GC_FAILURE_PIN for background GC
f2fs: write checkpoint during FG_GC
drm/i915/dg1: Update DMC_DEBUG3 register
kernel/sched: Remove dl_boosted flag comment
cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl()
serial: 8250: Remove serial_rs485 sanitization from em485
clk: imx8mp: Add DISP2 pixel clock
clk: imx8mp: add clkout1/2 support
dt-bindings: clocks: imx8mp: Add ID for usb suspend clock
net: ethernet: ti: add missing of_node_put before return
powerpc/rtas: make all exports GPL
powerpc/rtas: ensure 4KB alignment for rtas_data_buf
powerpc/eeh: Small refactor of eeh_handle_
powerpc/eeh: Set channel state after notifying the drivers
PM: core: Redefine pm_ptr() macro
PM: core: Add new *_PM_OPS macros, deprecate old ones
mmc: jz4740: Use the new PM macros
mmc: mxc: Use the new PM macros
PM: core: Remove static qualifier in DEFINE_
Input: iqs269a - switch to DEFINE_
Input: iqs269a - do not poll during suspend or resume
Input: iqs269a - do not poll during ATI
net/sched: Refactor qdisc_graft() for ingress and clsact Qdiscs
netfilter: nf_tables: add rescheduling points during loop detection walks
debugobjects: Recheck debug_objects_
nbd: Add the maximum limit of allocated index in nbd_dev_add
md: fix data corruption for raid456 when reshape restart while grow up
md/raid10: prevent soft lockup while flush writes
posix-timers: Ensure timer ID search-loop limit is valid
btrfs: add xxhash to fast checksum implementations
ACPI: button: Add lid disable DMI quirk for Nextbook Ares 8A
ACPI: video: Add backlight=native DMI quirk for Apple iMac11,3
ACPI: video: Add backlight=native DMI quirk for Lenovo ThinkPad X131e (3371 AMD version)
arm64: set __exception_
arm64: mm: fix VA-range sanity check
sched/fair: Don't balance task to its current running CPU
wifi: ath11k: fix registration of 6Ghz-only phy without the full channel range
bpf: Address KCSAN report on bpf_lru_list
devlink: report devlink_
wifi: wext-core: Fix -Wstringop-overflow warning in ioctl_standard_
wifi: iwlwifi: mvm: avoid baid size integer overflow
exfat: support dynamic allocate bh for exfat_entry_
arm64: dts: rockchip: fix regulator name on rk3399-rock-4
arm64: dts: rockchip: add ES8316 codec for ROCK Pi 4
arm64: dts: rockchip: add SPDIF node for ROCK Pi 4
ARM: dts: BCM53573: Describe on-SoC BCM53125 rev 4 switch
ACPI: video: Add backlight=native DMI quirk for Apple iMac12,1 and iMac12,2
ACPI: resource: Skip IRQ override on Asus Vivobook S5602ZA
ACPI: resource: Add Asus ExpertBook B2502 to Asus quirks
ACPI: resource: Skip IRQ override on Asus Expertbook B2402CBA
ACPI: resource: Skip IRQ override on ASUS ExpertBook B1502CBA
xhci: cleanup xhci_hub_control port references
xhci: move port specific items such as state completions to port structure
xhci: rename resume_done to resume_timestamp
xhci: clear usb2 resume related variables in one place.
xhci: decouple usb2 port resume and get_port_status request handling
xhci: track port suspend state correctly in unsuccessful resume cases
cifs: add a warning when the in-flight count goes negative
IB/hfi1: Fix a memleak in init_credit_return
RDMA/bnxt_re: Return error for SRQ resize
RDMA/irdma: Fix KASAN issue with tasklet
RDMA/irdma: Validate max_send_wr and max_recv_wr
RDMA/irdma: Set the CQ read threshold for GEN 1
RDMA/irdma: Add AE for too many RNRS
RDMA/srpt: Support specifying the srpt_service_guid parameter
RDMA/qedr: Fix qedr_create_user_qp error flow
arm64: dts: rockchip: set num-cs property for spi on px30
RDMA/srpt: fix function pointer cast warnings
bpf, scripts: Correct GPL license name
scsi: jazz_esp: Only build if SCSI core is builtin
nouveau: fix function cast warnings
net: stmmac: Fix incorrect dereference in interrupt handlers
ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
ata: libahci_platform: Convert to using devm bulk clocks API
ata: libahci_platform: Introduce reset assertion/
ata: ahci_ceva: fix error handling for Xilinx GT PHY support
bpf: Fix racing between bpf_timer_
afs: Increase buffer size in afs_update_
ipv6: sr: fix possible use-after-free and null-ptr-deref
packet: move from strlcpy with unused retval to strscpy
net: dev: Convert sa_data to flexible array in struct sockaddr
drm/nouveau/
octeontx2-af: Consider the action set by PF
s390: use the correct count for __iowrite64_copy()
tls: rx: jump to a more appropriate label
tls: rx: drop pointless else after goto
tls: stop recv() if initial process_rx_list gave us non-DATA
netfilter: nf_tables: set dormant flag on hook register failure
netfilter: flowtable: simplify route logic
netfilter: nft_flow_offload: reset dst in route object after setting up flow
netfilter: nft_flow_offload: release dst in case direct xmit path is used
drm/syncobj: call drm_syncobj_
drm/amd/display: Fix memory leak in dm_sw_fini()
i2c: imx: Add timer for handling the stop condition
i2c: imx: when being a target, mark the last read as processed
fs/aio: Restrict kiocb_set_
arp: Prevent overflow in arp_req_get().
netfilter: nf_tables: fix scheduling-
ext4: regenerate buddy after block freeing failed if under fc replay
ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
netfilter: nf_tables: can't schedule in nft_chain_validate
r8169: use new PM macros
Linux 5.15.150
UBUNTU: Upstream stable to v5.15.150
Changed in linux (Ubuntu): | |
status: | New → Confirmed |
tags: | added: kernel-stable-tracking-bug |
Changed in linux (Ubuntu): | |
status: | Confirmed → Invalid |
Changed in linux (Ubuntu Jammy): | |
assignee: | nobody → Manuel Diewald (diewald) |
importance: | Undecided → Medium |
status: | New → In Progress |
description: | updated |
Changed in linux (Ubuntu Jammy): | |
status: | In Progress → Fix Committed |
Changed in linux (Ubuntu Jammy): | |
status: | Fix Committed → In Progress |
Changed in linux (Ubuntu Jammy): | |
status: | In Progress → Fix Committed |
This bug was fixed in the package linux - 5.15.0-112.122
---------------
linux (5.15.0-112.122) jammy; urgency=medium
* jammy/linux: 5.15.0-112.122 -proposed tracker (LP: #2065898)
* CVE-2024-21823
- dmanegine: idxd: reformat opcap output to match bitmap_parse() input
- dmaengine: idxd: add WQ operation cap restriction support
- dmaengine: idxd: add knob for enqcmds retries
- VFIO: Add the SPR_DSA and SPR_IAX devices to the denylist
- dmaengine: idxd: add a new security check to deal with a hardware erratum
- dmaengine: idxd: add a write() method for applications to submit work
linux (5.15.0-111.121) jammy; urgency=medium
* jammy/linux: 5.15.0-111.121 -proposed tracker (LP: #2063763)
* RTL8852BE fw security fail then lost WIFI function during suspend/resume
cycle (LP: #2063096)
- wifi: rtw89: download firmware with five times retry
* Mount CIFS fails with Permission denied (LP: #2061986)
- cifs: fix ntlmssp auth when there is no key exchange
* USB stick can't be detected (LP: #2040948)
- usb: Disable USB3 LPM at shutdown
* Jammy update: v5.15.153 upstream stable release (LP: #2063290) pointer_ set commands: fix invalid escape sequence warning kernel_ nofault( ) DYNAMIC_ FTRACE check check_security name_to_ handle( ): use kzalloc() to fix kernel-infoleak
- io_uring/unix: drop usage of io_uring socket
- io_uring: drop any code related to SCM_RIGHTS
- selftests: tls: use exact comparison in recv_partial
- ASoC: rt5645: Make LattePanda board DMI match more precise
- x86/xen: Add some null pointer checking to smp.c
- MIPS: Clear Cause.BD in instruction_
- HID: multitouch: Add required quirk for Synaptics 0xcddc device
- gen_compile_
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment
- RDMA/mlx5: Relax DEVX access upon modify commands
- riscv: dts: sifive: add missing #interrupt-cells to pmic
- x86/mm: Move is_vsyscall_vaddr() into asm/vsyscall.h
- x86/mm: Disallow vsyscall page read for copy_from_
- net/iucv: fix the allocation size of iucv_path_table array
- parisc/ftrace: add missing CONFIG_
- block: sed-opal: handle empty atoms when parsing response
- dm-verity, dm-crypt: align "struct bvec_iter" correctly
- scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
- ALSA: hda/realtek - ALC285 reduce pop noise from Headphone port
- drm/amdgpu: Enable gpu reset for S3 abort cases on Raven series
- Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_
- firewire: core: use long bus reset on gap count error
- ASoC: Intel: bytcr_rt5640: Add an extra entry for the Chuwi Vi8 tablet
- Input: gpio_keys_polled - suppress deferred probe error for gpio
- ASoC: wm8962: Enable oscillator if selecting WM8962_FLL_OSC
- ASoC: wm8962: Enable both SPKOUTR_ENA and SPKOUTL_ENA in mono mode
- ASoC: wm8962: Fix up incorrect error message in wm8962_set_fll
- do_sys_
- s390/dasd: put block allocation in separate function
- s390/dasd: add query PPRC function
- s390/dasd: add copy pair setup
- s390/dasd: add autoquiesce feature
- s390/dasd: Use dev_*() for device lo...